@opengeni/sdk 0.52.1 → 1.0.0

package/dist/client.d.ts

@@ -1,12 +1,76 @@
+import type { ClaudeSubscriptionAccountsResponse, ClaudeSubscriptionAccount, ClaudeSubscriptionOAuthStartRequest, ClaudeSubscriptionSetupTokenRequest, SubscriptionPoolSettings } from "@opengeni/contracts";
+import type { ArtifactCatalogListOptions, ArtifactCatalogListResponse } from "./artifact-catalog.js";
+import type { SessionMessageSearchRequest, SessionMessageSearchResponse, SessionMessagePreview, SessionMessagePreviewReference } from "./session-message-search.js";
+import type { KnowledgeOriginalFileDownload, AgentLearningContext, AgentLearningSettingsRecord, AgentLearningOverrideRecord, SaveAgentLearningSettingsRequest, KnowledgeEntryListRequest, KnowledgeEntryListResponse, KnowledgeReviewBatchListRequest, KnowledgeReviewBatchListResponse, KnowledgeEntryRecord, KnowledgeEntrySaveRequest, KnowledgeEntryWriteReceipt, KnowledgeEntryReviewRequest, KnowledgeEntryBatchReviewRequest, KnowledgeEntryRestoreRequest, AgentInstructionReviewRequest, AgentInstructionReceipt, AgentInstructionReviewListResponse } from "./knowledge.js";
+import type { RollbackWorkspaceArtifactRequest, SetWorkspaceArtifactStatusRequest, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts.js";
+import type { CreateFeedbackRequest, Feedback, FeedbackSubmissionResponse } from "./feedback.js";
+import type { CreateWorkspaceWebhookRequest, CreateWorkspaceWebhookResponse, GetWorkspaceCredentialProviderResponse, ListWorkspaceWebhookDeliveriesResponse, ListWorkspaceWebhooksResponse, PutWorkspaceCredentialProviderRequest, PutWorkspaceCredentialProviderResponse, UpdateWorkspaceWebhookRequest, WorkspaceSandboxImages, WorkspaceWebhook, WorkspaceWebhookDelivery } from "./workspace-integrations.js";
+import type { OpenGeniToolsFacade } from "./tools.js";
 import { type SessionEventStreamTransport, type StreamSessionEventsOptions } from "./stream.js";
+import type { SessionModelContextResponse } from "./model-context.js";
+import { type OpenGeniDeprecationHandler } from "./deprecation.js";
+import type { SkillRecord, SkillSummary, SkillWriteReceipt, SaveWorkspaceSkillRequest, RemoveWorkspaceSkillRequest, ApplyWorkspaceSkillRevisionRequest } from "./skills.js";
 import { type WorkspaceControlStreamTransport } from "./workspace-control-stream.js";
-import { OpenGeniInteractionClient, type AttachedBrowserDevice, type AttachedBrowserDeviceListOptions, type AttachedBrowserDeviceListResponse, type BrowserActionReceipt, type BrowserActionRequest, type BrowserDiagnosticBatch, type BrowserDiagnosticsOptions, type BrowserIdentity, type BrowserIdentityListOptions, type BrowserIdentityListResponse, type BrowserIdentityMutationResponse, type BrowserObservation, type BrowserOpenTargetRequest, type BrowserSession, type BrowserSessionAttachment, type BrowserSessionAttachmentRequest, type BrowserSessionHeartbeatResponse, type BrowserSessionLifecycleRequest, type BrowserSessionListResponse, type BrowserSessionMutationResponse, type BrowserTarget, type BrowserTargetListResponse, type BrowserRevisionListResponse, type ComputerActionReceipt, type ComputerActionRequest, type ComputerObservation, type ComputerSession, type ComputerSessionAttachment, type ComputerSessionAttachmentRequest, type ComputerSessionHeartbeatResponse, type ComputerSessionLifecycleRequest, type ComputerSessionListResponse, type ComputerSessionMutationResponse, type ComputerTargetListResponse, type CreateBrowserIdentityRequest, type CreateBrowserSessionRequest, type CreateComputerSessionRequest, type PublishBrowserRevisionRequest, type PublishBrowserRevisionResponse } from "./interaction.js";
-import type { AccessContext, ActivateCodexRealtimeConnectionRequest, AddWorkspaceMemberRequest, ApiKey, BillingEntitlementsResponse, CodexAccount, CodexAccountsResponse, CodexAppsUpdate, CodexRotationSettings, CodexOverviewResponse, CodexAllocatorUpdate, CodexConnectionStatus, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse, GatewayRealtimeConnectRequest, GatewayRealtimeConnectResponse, CodexConnectPoll, CodexConnectStart, CodexUsage, CodexUsageMap, BillingSummary, BillingUsageResponse, InsightsRange, WorkspaceInsightsResponse, BeginSessionRealtimeRequest, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityInstallation, ApiIntegrationPreview, ApiIntegrationOAuthStartRequest, ApiIntegrationUninstallPreview, InstallApiIntegrationRequest, InstalledApiIntegration, IntegrationFeatureMutationResult, IntegrationFeatureRemovalResult, IntegrationInstanceFeaturesResponse, ListApiIntegrationPresetsResponse, ListApiIntegrationsResponse, MutateIntegrationFeatureRequest, PreviewApiIntegrationRequest, UninstallApiIntegrationRequest, UninstallApiIntegrationResult, UpsertIntegrationFeatureRequest, PreviewPluginRequest, PluginPreview, InstallPluginRequest, InstalledPlugin, ListInstalledPluginsResponse, PluginUninstallPreview, UninstallPluginRequest, UninstallPluginResult, AddDocumentRequest, CreateKnowledgeDropRequest, MoveDocumentRequest, ClientConfig, WorkspaceModelCatalogResponse, WorkspaceRealtimeModelCatalogResponse, ClientSessionEventInput, CompactSessionContextResult, ConnectionMetadata, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, InstallSkillRequest, InstalledSkill, CreateCheckoutRequest, CreateCheckoutResponse, OpenGeniSlackBotInstallRequest, OpenGeniSlackBotInstallStart, SlackReactionChannelListResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateGitHubAppManifestRequest, CreateGitHubAppManifestResponse, CreateKnowledgeMemoryRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateVariableSetRequest, CreateRigRequest, CreateWorkspaceRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupResponse, MintEnrollTokenResponse, EndSessionRealtimeRequest, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentSearchRequest, DocumentSearchResponse, EnableCapabilityRequest, EnablePackRequest, FileAsset, FileDownloadUrlResponse, GetPackResponse, GitHubAppInfo, GitHubRepositoriesResponse, GoogleDriveBrowseResponse, GoogleDriveDisconnectRequest, SaveGoogleDriveIntegrationSourceRequest, GoogleDriveLifecycleActionRequest, KnowledgeMemory, KnowledgeMemorySearchRequest, ListPacksResponse, MachinesResponse, MetricSample, RemoveEnrollmentRequest, RemoveEnrollmentResponse, SwapActiveSandboxRequest, SwapActiveSandboxResponse, InstallPackRequest, PackInstallationPreview, PrepareSlackUserLinkAccessRequest, SlackUserLinkAccessMutationRequest, SlackUserLinkAccessRequest, ApproveSlackUserLinkAccessRequest, PackInstallation, PackUninstallPreview, LatencyMode, ReasoningEffort, RetainedScreenshotDownload, RetainedScreenshotDownloadOptions, RetainedArtifactDownload, RetainedArtifactDownloadOptions, RetainedArtifactReference, RetainedArtifactContent, RetainedArtifactContentOptions, RetainedArtifactMetadata, UpdateVideoGenerationPolicyRequest, VideoArtifactPlaybackSource, VideoGenerationOperationSummary, VideoGenerationPolicy, WorkspaceVideoGenerationSettings, RegisterCapabilityPackRequest, ResourceRef, PreviewPackInstallationRequest, PreviewSkillImportRequest, ScheduledTask, ScheduledTaskRun, Session, SessionListResponse, AgentTopologyPageResponse, UpdateSessionPinRequest, UninstallPackRequest, UninstallPackResult, SessionEvent, SessionEventCompactResult, SessionEventCompactResultOptions, SessionEventListOptions, SessionEventPage, SessionGoal, SessionHumanInputRequest, SessionLineageResponse, SessionRealtimeMutationResponse, SyncSessionRealtimeLedgerRequest, SyncSessionRealtimeLedgerResponse, RenewSessionRealtimeRequest, SessionMcpCredentialUpdateInput, SubmittedTimelineAnnotation, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, SessionQueueSnapshot, SessionQueueMutationResponse, ComposerDraft, DeleteSessionQueueItemRequest, EditSessionQueueItemRequest, MoveSessionQueueItemRequest, NewSessionDraft, SaveComposerDraftRequest, SaveNewSessionDraftRequest, SteerSessionQueueItemRequest, SessionControlResponse, WorkspaceInferenceControlResponse, WorkspaceControlEvent, SessionTurn, SubmitHumanInputResponseRequest, SessionCapabilities, AttachViewerRequest, AttachViewerResponse, AcknowledgeStreamRequest, AcknowledgeStreamResponse, ViewerHeartbeatRequest, ViewerHeartbeatResponse, FsListRequest, FsListResponse, FsListBatchRequest, FsListBatchResponse, FsReadRequest, FsReadResponse, FsWriteRequest, FsWriteResponse, FsDeleteRequest, FsDeleteResponse, FsMoveRequest, FsMoveResponse, FsMkdirRequest, FsMkdirResponse, GitStatusRequest, GitStatusResponse, GitDiffRequest, GitDiffResponse, GitReadBatchRequest, GitReadBatchResponse, GitLogRequest, GitLogResponse, GitShowRequest, GitShowResponse, GetWorkspaceCaptureResponse, GetWorkspaceCaptureFileResponse, TerminalExecRequest, TerminalExecResponse, PtyOpenRequest, PtyOpenResponse, PtyWriteRequest, PtyResizeRequest, PtyCloseRequest, ToolRef, TranscribeAudioResponse, TranscriptionRecordingListResponse, TranscriptionRecordingResponse, UploadTranscriptionRecordingChunkResponse, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionRequest, UpdateSessionToolPolicyRequest, UpdateVariableSetRequest, UpdateRigRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, SetWorkspaceDefaultRigRequest, UploadFileInput, VariableSet, VariableSetSecret, VariableSetVariableMetadata, Rig, RigVersion, RigChange, ProposeRigChangeRequest, WorkspaceMember, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceRegisteredPack, Workspace, SlackInstallationBinding, OAuthStartRequest, OAuthStartResponse, SocialConnection, SocialOAuthStartRequest, SkillImportPreview, SkillUninstallPreview, UninstallSkillRequest, UninstallSkillResult } from "./types.js";
+import { type WorkspaceInteractionRevisionStreamTransport } from "./interaction-revision-stream.js";
+import { type WorkspaceLiveStreamOptions, type WorkspaceLiveStreamTransport } from "./workspace-live-stream.js";
+import { OpenGeniInteractionClient, type AuthRun, type AuthRunListOptions, type AuthRunListResponse, type AuthRunMutationResponse, type AttachedBrowserDevice, type AttachedBrowserDeviceListOptions, type AttachedBrowserDeviceListResponse, type BrowserActionReceipt, type BrowserActionRequest, type BrowserScreenshotOptions, type BrowserClipboard, type BrowserDiagnosticBatch, type BrowserDomReadRequest, type BrowserDomReadResponse, type BrowserDiagnosticsOptions, type BrowserDownload, type BrowserDownloadListResponse, type BrowserDownloadSaveRequest, type BrowserDownloadSaveResponse, type BrowserIdentity, type BrowserIdentityListOptions, type BrowserIdentityListResponse, type BrowserIdentityMutationResponse, type BrowserObservation, type BrowserFrame, type BrowserOpenTargetRequest, type BrowserSession, type BrowserSessionAttachment, type BrowserSessionAttachmentRequest, type BrowserSessionHeartbeatResponse, type BrowserSessionLifecycleRequest, type BrowserSessionListResponse, type BrowserSessionMutationResponse, type BrowserTargetState, type BrowserTargetListResponse, type BrowserRevisionListResponse, type ComputerActionReceipt, type ComputerActionRequest, type ComputerClipboard, type ComputerFrame, type ComputerObservation, type ComputerSession, type ComputerSessionAttachment, type ComputerSessionAttachmentRequest, type ComputerSessionHeartbeatResponse, type ComputerSessionInputPosture, type ComputerSessionLifecycleRequest, type ComputerSessionListResponse, type ComputerSessionMutationResponse, type ComputerTargetListResponse, type CreateBrowserIdentityRequest, type CreateBrowserSessionRequest, type CreateComputerSessionRequest, type CreateInteractionInterventionRequest, type CreateNetworkRouteRequest, type CreateSiteAuthConnectionRequest, type ExternalAuthInteractiveRequest, type ExternalAuthInteractiveResponse, type ExternalAuthRunRequest, type ExternalAuthRunResponse, type InteractionIntervention, type InteractionInterventionListOptions, type InteractionInterventionListResponse, type InteractionInterventionMutationResponse, type NetworkRoute, type NetworkRouteListOptions, type NetworkRouteListResponse, type NetworkRouteMutationResponse, type ProtectedAuthFillRequest, type ProtectedAuthFillResponse, type PublishBrowserRevisionRequest, type PublishBrowserRevisionResponse, type ReportAuthRunRequest, type ResolveInteractionInterventionRequest, type SiteAuthConnection, type SiteAuthConnectionListOptions, type SiteAuthConnectionListResponse, type SiteAuthConnectionMutationResponse, type StartAuthRunRequest, type UpdateNetworkRouteRequest, type UpdateBrowserIdentityRequest, type UpdateSiteAuthConnectionRequest, type VerifyAuthRunRequest, type WorkspaceInteractionRevisionEvent } from "./interaction.js";
+import type { AccessContext, ActivateCodexRealtimeConnectionRequest, AddWorkspaceMemberRequest, ApiKey, BillingEntitlementsResponse, CodexAccount, CodexAccountsResponse, SessionCodexAccountsResponse, CodexAppsUpdate, CodexRotationSettings, CodexOverviewResponse, CodexAllocatorUpdate, CodexConnectionStatus, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse, GatewayRealtimeConnectRequest, GatewayRealtimeConnectResponse, CodexConnectPoll, CodexConnectStart, CodexUsage, CodexUsageMap, ModelConnectionAccessPolicy, ModelConnectionAccessResponse, SuperGrokAccount, SuperGrokAccountsResponse, SuperGrokAccountScope, SuperGrokAllocatorUpdate, SuperGrokConnectionStatus, SuperGrokConnectPoll, SuperGrokConnectStart, SuperGrokRotationSettings, BillingSummary, BillingUsageResponse, InsightsRange, WorkspaceInsightsResponse, BeginSessionRealtimeRequest, CapabilityCatalogItem, CapabilityCatalogResponse, ConnectorToolPermissionsResponse, UpdateConnectorToolPermissionsRequest, CapabilityInstallation, ApiIntegrationPreview, ApiIntegrationOAuthStartRequest, ApiIntegrationUninstallPreview, InstallApiIntegrationRequest, InstalledApiIntegration, IntegrationFacetMutationResult, IntegrationFacetRemovalResult, IntegrationInstanceFacetsResponse, ListIntegrationDefinitionsResponse, ListApiIntegrationsResponse, MutateIntegrationFacetRequest, PreviewApiIntegrationRequest, UninstallApiIntegrationRequest, UninstallApiIntegrationResult, UpsertIntegrationFacetRequest, PreviewPluginRequest, PluginPreview, InstallPluginRequest, InstalledPlugin, ListInstalledPluginsResponse, PluginUninstallPreview, UninstallPluginRequest, UninstallPluginResult, AddDocumentRequest, CreateKnowledgeDropRequest, MoveDocumentRequest, ClientConfig, WorkspaceModelAccessPolicy, WorkspaceModelCatalogResponse, WorkspaceGatewayCustomModel, WorkspaceGatewayCustomModelsResponse, CreateWorkspaceGatewayCustomModelRequest, DeleteWorkspaceGatewayCustomModelRequest, WorkspaceOpenRouterCustomModel, WorkspaceOpenRouterCustomModelsResponse, CreateWorkspaceOpenRouterCustomModelRequest, DeleteWorkspaceOpenRouterCustomModelRequest, OrganizationModelProviderKind, ClaudeSubscriptionUsage, ClaudeSubscriptionOAuthStartResponse, ClaudeSubscriptionOAuthCompleteRequest, ClaudeSubscriptionOAuthCompleteResponse, OrganizationModelProviderConnection, UpsertOrganizationModelProviderConnectionRequest, RevokeOrganizationModelProviderConnectionRequest, OrganizationProviderCustomModel, OrganizationProviderCustomModelsResponse, CreateOrganizationProviderCustomModelRequest, DeleteOrganizationProviderCustomModelRequest, WorkspaceRealtimeModelCatalogResponse, ClientSessionEventInput, UserMessageEventInput, CompactSessionContextResult, ConnectionMetadata, PersonalGitHubConnectionStatusResponse, PersonalGitHubDisconnectRequest, PersonalGitHubOAuthStartRequest, PersonalGitHubOAuthStartResponse, ListPersonalGitHubRepositoriesOptions, ListPersonalGitHubRepositoriesResponse, PersonalGitHubRepositorySelectionState, ReplacePersonalGitHubRepositorySelectionsRequest, VerifyPersonalGitHubRepositorySelectionsRequest, CreateApiKeyRequest, CreateApiKeyResponse, CreateOrganizationApiKeyRequest, OrganizationMcpConnection, OrganizationMcpConnectionList, OrganizationServiceAccount, ListOrganizationServiceAccountsResponse, CreateOrganizationServiceAccountRequest, UpdateOrganizationServiceAccountRequest, UpdateOrganizationMcpConnectionRequest, McpConnectionRequest, McpConnectionDecision, CreateCapabilityCatalogItemRequest, InstallSkillRequest, InstallLibrarySkillRequest, InstalledSkill, ListInstalledSkillsResponse, CreateBillingPortalRequest, CreateBillingPortalResponse, CreateCheckoutRequest, BillingCheckoutStatus, CreateCheckoutResponse, OpenGeniSlackBotInstallRequest, OpenGeniSlackBotInstallStart, SlackChannelRouteListResponse, SlackReactionChannelListResponse, UpdateSlackChannelRoutesRequest, FikenInstallRequest, FikenOAuthStartRequest, FikenOAuthStartResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateGitHubAppManifestRequest, CreateGitHubAppManifestResponse, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateVariableSetRequest, ResolveVariableSetAttachmentsRequest, ResolveVariableSetAttachmentsResponse, CreateRigRequest, CreateWorkspaceRequest, EnsureWorkspaceRequest, EnsureWorkspaceResponse, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupResponse, MintEnrollTokenResponse, EndSessionRealtimeRequest, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, EnableCapabilityRequest, FileAsset, FileDownloadUrlResponse, GitHubActionPoliciesResponse, GitHubActionPolicyActorState, GitHubAppInfo, GitHubRepositoriesResponse, GoogleDriveBrowseResponse, GoogleDriveDisconnectRequest, SaveGoogleDriveIntegrationSourceRequest, GoogleDriveLifecycleActionRequest, ListOrganizationSessionsOptions, ListManagedOrganizationMembershipsResponse, ListUserResourceAuthoritiesOptions, ListUserResourceAuthoritiesResponse, UpdateGitHubActionPolicyRequest, RevokeUserResourceGrantResponse, ListOrganizationInvitationsPageResponse, ListOrganizationAdministrationMembersResponse, AcceptOrganizationInvitationRequest, AcceptOrganizationInvitationResponse, AcceptOrganizationRecoveryCustodyRequest, ConfigureOrganizationRecoveryPolicyRequest, CreateOrganizationInvitationRequest, CreateAdditionalOrganizationRequest, CreateAdditionalOrganizationResponse, CreateOrganizationRequest, CreateOrganizationResponse, CreateOrganizationWorkspaceRequest, OrganizationInvitation, OrganizationAdministrationOverview, OrganizationMember, OrganizationRecoveryMutationResponse, OrganizationRecoveryOperationCommandRequest, OrganizationRecoveryOverview, OrganizationSessionListResponse, OrganizationWorkspaceAccess, OrganizationWorkspaceAccessMember, OrganizationRetentionPolicy, OrganizationSummary, RevokeOrganizationInvitationRequest, RevokeOrganizationWorkspaceMemberRequest, RevokeOrganizationWorkspaceMemberResponse, PutOrganizationWorkspaceMemberRequest, UpdateOrganizationMemberRequest, UpdateOrganizationNameRequest, DisableOrganizationRecoveryPolicyRequest, StartOrganizationRecoveryOperationRequest, UpdateOrganizationWorkspaceRequest, UpdateOrganizationRetentionPolicyRequest, MachinesResponse, MetricSample, RemoveEnrollmentRequest, RemoveEnrollmentResponse, MachineOperationPolicy, UpdateMachineOperationPolicyRequest, UpdateMachineAgentResponse, SwapActiveSandboxRequest, SwapActiveSandboxResponse, PrepareSlackUserLinkAccessRequest, SlackUserLinkAccessMutationRequest, SlackUserLinkAccessRequest, ApproveSlackUserLinkAccessRequest, RetainedScreenshotDownload, RetainedScreenshotDownloadOptions, RetainedArtifactDownload, RetainedArtifactDownloadOptions, RetainedArtifactReference, RetainedArtifactContent, RetainedArtifactContentOptions, RetainedArtifactMetadata, UpdateVideoGenerationPolicyRequest, VideoArtifactPlaybackSource, VideoGenerationOperationSummary, VideoGenerationPolicy, WorkspaceVideoGenerationSettings, PreviewSkillImportRequest, ScheduledTask, ScheduledTaskAccessAttention, ScheduledTaskRun, ForkSessionRequest, ForkSessionResponse, Session, SessionStatus, WorkClaimSubjectType, SessionBackgroundCommandListResponse, CancelSessionBackgroundCommandResult, SessionListResponse, SessionListEntryResponse, SessionTenancyCreateCapabilities, AgentTopologyPageResponse, UpdateSessionChannelRequest, UpdateSessionAttentionRequest, UpdateSessionArchiveRequest, UpdateSessionPinRequest, UpdateSessionVisibilityRequest, UpdateSessionVisibilityResponse, SessionScopeSubjectId, SessionEvent, SessionEventCompactResult, SessionEventCompactResultOptions, SessionEventListOptions, SessionEventPage, SessionGoal, SessionGoalRevision, ListSessionGoalRevisionsOptions, ListSessionGoalRevisionsResponse, RejectSessionGoalRevisionRequest, RejectSessionGoalRevisionResponse, RollbackSessionGoalRevisionRequest, SessionHumanInputRequest, SessionLineageResponse, SessionRealtimeMutationResponse, SyncSessionRealtimeLedgerRequest, SyncSessionRealtimeLedgerResponse, RenewSessionRealtimeRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, SessionQueueSnapshot, SessionQueueMutationResponse, SessionCommandReceipt, SessionPromptRouting, ComposerDraft, DeleteSessionQueueItemRequest, EditSessionQueueItemRequest, MoveSessionQueueItemRequest, NewSessionDraft, SaveComposerDraftRequest, SubmitComposerDraftRequest, SubmitComposerDraftResponse, SaveNewSessionDraftRequest, SteerSessionQueueItemRequest, SessionControlResponse, SessionRetryRequest, SandboxRecoveryProjection, SandboxRecoveryRequest, SandboxRecoveryResponse, SessionRetryResponse, WorkspaceInferenceControlResponse, WorkspaceControlEvent, SessionTurn, SubmitHumanInputResponseRequest, SessionCapabilities, AttachViewerRequest, AttachViewerResponse, AcknowledgeStreamRequest, AcknowledgeStreamResponse, ViewerHeartbeatRequest, ViewerHeartbeatResponse, FsListRequest, FsListResponse, FsListBatchRequest, FsListBatchResponse, FsReadRequest, FsReadResponse, PublishSandboxFileArtifactRequest, SandboxFileArtifactReceipt, FsWriteRequest, FsWriteResponse, FsDeleteRequest, FsDeleteResponse, FsMoveRequest, FsMoveResponse, FsMkdirRequest, FsMkdirResponse, GitStatusRequest, GitStatusResponse, GitDiffRequest, GitDiffResponse, GitReadBatchRequest, GitReadBatchResponse, GitLogRequest, GitLogResponse, GitShowRequest, GitShowResponse, GetWorkspaceCaptureResponse, GetWorkspaceCaptureFileResponse, TerminalExecRequest, TerminalExecResponse, PtyOpenRequest, PtyOpenResponse, PtyWriteRequest, PtyResizeRequest, PtyCloseRequest, TranscribeAudioResponse, TranscriptionRecordingListResponse, TranscriptionRecordingResponse, UploadTranscriptionRecordingChunkResponse, UpdateConnectionRequest, RefreshScheduledTaskAccessRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, ApplySessionGoalRevisionRequest, UpdateSessionRequest, UpdateSessionVariableSetsRequest, UpdateSessionToolPolicyRequest, UpdateSessionAgentRequest, UpdateVariableSetRequest, UpdateRigRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelAccessPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, SetWorkspaceDefaultRigRequest, UploadFileInput, VariableSet, VariableSetSecret, VariableSetVariableMetadata, Channel, CreateChannelRequest, ReorderChannelsRequest, UpdateChannelRequest, Rig, RigVersion, RigChange, ProposeRigChangeRequest, WorkspaceMember, WorkspaceMemberCandidate, Workspace, SlackInstallationBinding, OAuthStartRequest, OAuthStartResponse, SocialConnection, SocialOAuthStartRequest, SkillImportPreview, SkillUninstallPreview, UninstallSkillRequest, UninstallSkillResult } from "./types.js";
 import type { ActivateWorkspaceInstructionPolicyRequest, CreateWorkspaceInstructionPolicyDraftRequest, CreateWorkspaceInstructionPolicyOnboardingProposalRequest, ImportLegacyWorkspaceInstructionPolicyDraftRequest, RollbackWorkspaceInstructionPolicyRequest, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyDiffRequest, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListOptions, WorkspaceInstructionPolicyListResponse, WorkspaceInstructionPolicyOnboardingProposal, WorkspaceInstructionPolicyOnboardingProposalListOptions, WorkspaceInstructionPolicyOnboardingProposalListResponse, WorkspaceInstructionPolicyRevision } from "./workspace-instruction-policies.js";
-import type { ActivateCompanyProfileRevisionRequest, CompanyProfileDiffRequest, CompanyProfileDiffResponse, CompanyProfileListOptions, CompanyProfileListResponse, CompanyProfileMutationResponse, CompanyProfileRevision, RollbackCompanyProfileRequest, UpdateCompanyProfileRequest } from "./company-profile.js";
+import type { GovernedLearningActivationUndoReceipt, WorkspaceLearningHistoryOptions, WorkspaceLearningHistoryResponse } from "./workspace-learning.js";
+import type { ActivateCompanyProfileRevisionRequest, CompanyProfileAgentPolicy, CompanyProfileDiffRequest, CompanyProfileDiffResponse, CompanyProfileListOptions, CompanyProfileListResponse, CompanyProfileMutationResponse, CompanyProfileRevision, RollbackCompanyProfileRequest, UpdateCompanyProfileRequest, UpdateCompanyProfileAgentPolicyRequest } from "./company-profile.js";
 import type { WorkspaceStateExportResponse, WorkspaceStateGetOptions, WorkspaceStateResponse } from "./workspace-state.js";
 import type { ActivatePreferenceRegistryRevisionRequest, ChangePreferenceRegistryScopeRequest, CorrectPreferenceRegistryRequest, CreatePreferenceRegistryProposalRequest, DeactivatePreferenceRegistryRequest, PreferenceRegistryDetailResponse, PreferenceRegistryFullContent, PreferenceRegistryListOptions, PreferenceRegistryListResponse, PreferenceRegistryMutationResponse, PreferenceRegistryRecord, PreferenceRegistrySnapshot, RejectPreferenceRegistryProposalRequest, SupersedePreferenceRegistryRequest } from "./preference-registry.js";
-export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+export type SessionListPageOptions = {
+    /** Complete content-free totals for an authorized root page. */
+    includeTotals?: boolean;
+    /** Filter attention rows before pagination. */
+    needsYouOnly?: boolean;
+    /** Created through this Site. In a Site-bound client, "current" resolves to its own Site. */
+    originSiteId?: string;
+    limit?: number;
+    parentSessionId?: string | null;
+    /** Only sessions carrying this exact opaque end-user label. */
+    scopeSubjectId?: SessionScopeSubjectId;
+    cursor?: string;
+    search?: string;
+    /** Restrict rows to one workspace project; null selects unfiled rows. */
+    channelId?: string | null;
+    /** Restrict rows to the exact frozen session creator identity. */
+    createdBy?: {
+        kind: "subject" | "service";
+        subjectId: string;
+    };
+    /** Inclusive ISO-8601 activity lower bound. */
+    updatedFrom?: string;
+    /** Exclusive ISO-8601 activity upper bound. */
+    updatedBefore?: string;
+    /** Inclusive ISO-8601 creation lower bound. */
+    createdFrom?: string;
+    /** Exclusive ISO-8601 creation upper bound. */
+    createdBefore?: string;
+    /** Return only the complete personal pinned projection. */
+    pinsOnly?: boolean;
+    /** Skip pinned details when the pinned section is loaded separately. Defaults to true. */
+    includePinned?: boolean;
+    /** Return archived root chats instead of the active session list. */
+    archivedOnly?: boolean;
+    sortBy?: "updatedAt" | "createdAt" | "name";
+    archiveStatus?: "active" | "archived" | "all";
+    /** Stop this caller's finite page read when its owning route is abandoned. */
+    signal?: AbortSignal | undefined;
+};
+/**
+ * Web-standard fetch response accepted by the SDK.
+ *
+ * The project global `Response` type includes Bun's non-standard `textStream()`
+ * method and the newer `bytes()` method. Fetch implementations such as Expo do
+ * not necessarily provide either member, and the SDK does not use them, so
+ * they must not be part of the adapter boundary.
+ */
+export type FetchResponse = Omit<Response, "bytes" | "clone" | "textStream"> & {
+    clone(): FetchResponse;
+};
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<FetchResponse>;
 export type WorkspaceControlEventPage = {
     events: WorkspaceControlEvent[];
     bytes: number;
@@ -18,39 +82,85 @@ export type OpenGeniClientOptions = {
     baseUrl: string;
     /** OpenGeni API key, sent as `Authorization: Bearer <apiKey>`. */
     apiKey?: string;
+    /**
+     * Receives a notice (once per route per client) when the API advertises a
+     * `Deprecation`/`Sunset` header on a response. Defaults to a one-time
+     * `console.warn` per route; pass `false` to silence notices.
+     */
+    onDeprecation?: OpenGeniDeprecationHandler | false | undefined;
     /** Extra headers (static or computed per request) merged into every call. */
     headers?: Record<string, string> | (() => Record<string, string>);
     /** Custom fetch implementation. Defaults to the global `fetch`. */
     fetch?: FetchLike;
+    /**
+     * Optional causal clock for shared session projection GETs. The selected
+     * request generation is retained for observers that join after launch.
+     */
+    beginSharedRead?: (() => number) | undefined;
+    /** Positive deadline for interactive session commands. Defaults to 15 seconds. */
+    sessionCommandTimeoutMs?: number;
+    /**
+     * How this client treats an API that advertises a different
+     * `x-opengeni-api-contract` revision.
+     *
+     * - `"strict"`: fail with `OpenGeniApiContractMismatchError` so a browser
+     *   page served alongside the API can reload onto the matching bundle.
+     * - `"compatible"`: keep working. Within a major release train the API is
+     *   additive (see the compatibility policy), and the API admits bearer
+     *   (API key / delegated token) mutations from older SDK revisions, so a
+     *   backend pinned to an older SDK is not broken by every deployment.
+     *
+     * Defaults to `"strict"` in a browser client without an `apiKey`, and to
+     * `"compatible"` everywhere else.
+     */
+    apiContract?: "strict" | "compatible" | undefined;
 };
 /** Per-request cancellation for operations whose caller owns an AbortSignal. */
 export type OpenGeniRequestOptions = {
     signal?: AbortSignal | undefined;
+    timeoutMs?: number | undefined;
+    /** Opt-in void response handling for focused helpers using the shared transport. */
+    responseType?: "json" | "void";
 };
-export type SendMessageInput = {
-    text: string;
-    annotations?: SubmittedTimelineAnnotation[];
-    /** System instructions scoped to this exact turn; never visible timeline text. */
-    turnInstructions?: string;
-    resources?: ResourceRef[];
-    tools?: ToolRef[];
-    model?: string;
-    reasoningEffort?: ReasoningEffort;
-    latencyMode?: LatencyMode;
+export type SharedSessionReadOptions = {
+    /**
+     * Observe the selected shared network GET's actual start. A caller joining
+     * an already-started request receives its retained generation when the
+     * client has a `beginSharedRead` clock.
+     */
+    onRequestStart?: ((readGeneration?: number) => void) | undefined;
+    /**
+     * Stop this caller's interest in the shared read. The native request is
+     * aborted only after every caller that joined the same generation has
+     * stopped waiting for it.
+     */
+    signal?: AbortSignal | undefined;
+};
+export type GetSessionOptions = SharedSessionReadOptions & {
+    /**
+     * Require a network read generation that starts no earlier than this call.
+     * Concurrent callers targeting the same successor generation still share it.
+     */
+    fresh?: boolean;
+};
+export type GetSessionLineageOptions = SharedSessionReadOptions;
+/** Follow-up prompt fields accepted by both queue and Steer. Session tools are updated separately. */
+export type SendMessageInput = UserMessageEventInput["payload"] & {
     clientEventId?: string;
-    controlEtag?: string;
-    expectedDraftRevision?: number;
-    mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[];
 };
 export type SteerMessageResult = {
     /** The accepted `user.message` event. */
     accepted: SessionEvent;
     /** The exact turn created for this message in the same server transaction. */
     turn: SessionTurn;
+    /** Durable proof that this exact operation committed. */
+    receipt: SessionCommandReceipt;
+    /** Server-owned destination at admission time. */
+    routing: SessionPromptRouting;
     /** Number of live attempts durably asked to stop by this atomic Steer. */
-    interruptionCount?: number;
+    interruptionCount: number;
     /** True when this response came from the command's immutable idempotency receipt. */
-    replay?: boolean;
+    replay: boolean;
 };
 export type TranscribeAudioInput = {
     audio: Blob | File | Uint8Array;
@@ -77,19 +187,22 @@ export type FinalizeTranscriptionRecordingInput = {
     totalDurationMilliseconds: number;
     signal?: AbortSignal | undefined;
 };
-/**
- * Typed client for the OpenGeni public API. Framework-agnostic: only needs
- * WHATWG `fetch` + streams, so it runs in Node 18+, Bun, Deno, browsers, and
- * edge runtimes.
- */
 export declare class OpenGeniClient {
+    protected externalActorHeader?: string;
+    protected serviceInitiatorHeader?: string | undefined;
+    protected serviceContextHeader?: string | undefined;
     private readonly baseUrl;
-    private readonly options;
+    protected readonly options: OpenGeniClientOptions;
     private readonly fetchImpl;
-    private readonly readInFlight;
-    private readonly readTrailing;
+    private readonly sessionCommandTimeoutMs;
+    private readonly apiContractStrict;
+    private readonly active;
+    private readonly generations;
+    private readonly queued;
     /** Resource-oriented Browser/Computer facade over this exact authenticated client. */
     readonly interaction: OpenGeniInteractionClient;
+    /** Dynamic typed tool facade backed by the canonical workspace gateway. */
+    readonly tools: OpenGeniToolsFacade;
     constructor(options: OpenGeniClientOptions);
     /** Make one finalization attempt for a recording; callers may retry retained audio. */
     transcribeAudio(workspaceId: string, input: TranscribeAudioInput): Promise<TranscribeAudioResponse>;
@@ -109,45 +222,126 @@ export declare class OpenGeniClient {
         signal?: AbortSignal | undefined;
     }): Promise<TranscriptionRecordingResponse>;
     createSession(workspaceId: string, request: CreateSessionRequest): Promise<CreateSessionResponse>;
-    getNewSessionDraft(workspaceId: string): Promise<NewSessionDraft>;
+    getNewSessionDraft(workspaceId: string, options?: OpenGeniRequestOptions): Promise<NewSessionDraft>;
     saveNewSessionDraft(workspaceId: string, request: SaveNewSessionDraftRequest): Promise<NewSessionDraft>;
-    getSession(workspaceId: string, sessionId: string, options?: {
-        fresh?: boolean;
-    }): Promise<Session>;
+    /** The workspace's HTTP credential provider, or null when none is configured. */
+    getWorkspaceCredentialProvider(workspaceId: string): Promise<GetWorkspaceCredentialProviderResponse>;
+    /**
+     * Create or update the workspace credential provider. The signing secret is
+     * returned only when the provider is first created; store it then.
+     */
+    putWorkspaceCredentialProvider(workspaceId: string, request: PutWorkspaceCredentialProviderRequest): Promise<PutWorkspaceCredentialProviderResponse>;
+    deleteWorkspaceCredentialProvider(workspaceId: string): Promise<void>;
+    listWorkspaceWebhooks(workspaceId: string): Promise<ListWorkspaceWebhooksResponse>;
+    /** Create a webhook. The signing secret is returned only in this response. */
+    createWorkspaceWebhook(workspaceId: string, request: CreateWorkspaceWebhookRequest): Promise<CreateWorkspaceWebhookResponse>;
+    updateWorkspaceWebhook(workspaceId: string, webhookId: string, request: UpdateWorkspaceWebhookRequest): Promise<WorkspaceWebhook>;
+    deleteWorkspaceWebhook(workspaceId: string, webhookId: string): Promise<void>;
+    listWorkspaceWebhookDeliveries(workspaceId: string, webhookId: string, options?: {
+        limit?: number;
+    }): Promise<ListWorkspaceWebhookDeliveriesResponse>;
+    /** Queue a delivered or failed delivery again with a fresh attempt budget. */
+    redeliverWorkspaceWebhookDelivery(workspaceId: string, webhookId: string, deliveryId: string): Promise<WorkspaceWebhookDelivery>;
+    /** Images this deployment lets a workspace choose as its default sandbox image. */
+    listWorkspaceSandboxImages(workspaceId: string): Promise<WorkspaceSandboxImages>;
+    /** Submit general feedback or a session/turn rating. Retain the key when retrying. */
+    createFeedback(workspaceId: string, request: CreateFeedbackRequest): Promise<FeedbackSubmissionResponse>;
+    /** Only this principal's submissions. No session filter means general feedback only. */
+    listOwnFeedback(workspaceId: string, options?: {
+        sessionId?: string;
+        limit?: number;
+        includeTurns?: boolean;
+    }): Promise<{
+        feedback: Feedback[];
+    }>;
+    getSession(workspaceId: string, sessionId: string, options?: GetSessionOptions): Promise<Session>;
+    /** Exact model-visible prefix captured from the latest provider request. */
+    getSessionModelContext(workspaceId: string, sessionId: string): Promise<SessionModelContextResponse>;
     updateSession(workspaceId: string, sessionId: string, request: UpdateSessionRequest): Promise<Session>;
+    /** Replace the complete ordered Variable Set selection at a quiescent turn boundary. */
+    updateSessionVariableSets(workspaceId: string, sessionId: string, request: UpdateSessionVariableSetsRequest): Promise<Session>;
+    /** Whether this exact authenticated principal may atomically create a private session. */
+    getSessionTenancyCreateCapabilities(workspaceId: string): Promise<SessionTenancyCreateCapabilities>;
+    /** Change an owned, fully quiescent session between private and workspace visibility. */
+    updateSessionVisibility(workspaceId: string, sessionId: string, request: UpdateSessionVisibilityRequest): Promise<UpdateSessionVisibilityResponse>;
+    /** Create an independent same-workspace fork with explicit destination visibility. */
+    forkSession(workspaceId: string, sessionId: string, request: ForkSessionRequest): Promise<ForkSessionResponse>;
     /** Replace the durable tool policy or explicitly adopt workspace defaults. */
     updateSessionToolPolicy(workspaceId: string, sessionId: string, request: UpdateSessionToolPolicyRequest): Promise<Session>;
+    /**
+     * Replace the session's agent configuration (capabilities, identity,
+     * instructions alias, renderer). Omitted fields keep their current values.
+     * Uses the tool-policy version (409 when stale) and applies from the next
+     * turn. A legacy session converts from its current effective state.
+     */
+    updateSessionAgent(workspaceId: string, sessionId: string, request: UpdateSessionAgentRequest): Promise<Session>;
     /**
      * Replace one attached MCP server's approval policy. The change is captured
      * by the next claimed attempt; already-claimed work keeps its immutable
      * policy snapshot.
      */
     updateSessionMcpApprovalPolicy(workspaceId: string, sessionId: string, serverId: string, request: UpdateSessionMcpApprovalPolicyRequest): Promise<UpdateSessionMcpApprovalPolicyResponse>;
+    /** Search durable visible user/assistant text, including unloaded history.
+     * Pages may be empty with hasMore=true. Never fall back to title search on
+     * older servers. Use listEventPage before/after the returned sequence for context.
+     */
+    searchSessionMessages(workspaceId: string, request: SessionMessageSearchRequest, options?: OpenGeniRequestOptions): Promise<SessionMessageSearchResponse>;
+    /** Read one selected search result's complete visible text when <=12,000
+     * UTF-16 units. Stale, duplicate or non-message references fail with 404.
+     * The response never includes audit payload fields such as modelContext.
+     */
+    getSessionMessagePreview(workspaceId: string, sessionId: string, reference: SessionMessagePreviewReference, options?: OpenGeniRequestOptions): Promise<SessionMessagePreview>;
     listSessions(workspaceId: string, options?: {
+        originSiteId?: string;
         limit?: number;
         parentSessionId?: string | null;
         search?: string;
+        /** Only sessions carrying this exact opaque end-user label. */
+        scopeSubjectId?: SessionScopeSubjectId;
     }): Promise<Session[]>;
+    /** Running and stopping commands only; settled results remain in session history. */
+    listSessionBackgroundCommands(workspaceId: string, sessionId: string, options?: OpenGeniRequestOptions): Promise<SessionBackgroundCommandListResponse>;
+    cancelSessionBackgroundCommand(workspaceId: string, sessionId: string, commandId: string): Promise<CancelSessionBackgroundCommandResult>;
     /** Pin-aware ordinary-session page with a stable keyset cursor. */
-    listSessionPage(workspaceId: string, options?: {
-        limit?: number;
-        parentSessionId?: string | null;
-        cursor?: string;
-        search?: string;
-        /** Return only the complete personal pinned projection. */
-        pinsOnly?: boolean;
-    }): Promise<SessionListResponse>;
+    listSessionPage(workspaceId: string, options?: SessionListPageOptions): Promise<SessionListResponse>;
+    /** Compact rail records; safely projects full pages from older APIs. */
+    listSessionSummaryPage(workspaceId: string, options?: SessionListPageOptions): Promise<SessionListEntryResponse>;
+    private requestSessionPage;
     /** Compact, bounded workspace agent hierarchy page. */
     listAgentTopology(workspaceId: string, options?: {
         limit?: number;
         parentSessionId?: string | null;
+        rootSessionId?: string;
         cursor?: string;
+        query?: string;
+        /** @deprecated use query. */
         search?: string;
+        statuses?: SessionStatus[];
+        activeOnly?: boolean;
+        recentHours?: number;
+        subject?: {
+            namespace: string;
+            type: WorkClaimSubjectType;
+            canonicalKey: string;
+        };
+        claimLimit?: number;
     }): Promise<AgentTopologyPageResponse>;
     /** Set this authenticated member's personal workspace pin for a session. */
     updateSessionPin(workspaceId: string, sessionId: string, request: UpdateSessionPinRequest): Promise<Session>;
-    getSessionLineage(workspaceId: string, sessionId: string): Promise<SessionLineageResponse>;
-    private singleFlightRead;
+    /** Set this authenticated member's explicit read/actively-working state. */
+    updateSessionAttention(workspaceId: string, sessionId: string, request: UpdateSessionAttentionRequest): Promise<Session>;
+    /** Archive or restore this authenticated member's root chat. */
+    updateSessionArchive(workspaceId: string, sessionId: string, request: UpdateSessionArchiveRequest): Promise<Session>;
+    /** Permanently delete one quiescent root session and its full descendant tree. */
+    deleteSession(workspaceId: string, sessionId: string): Promise<{
+        deletedSessionCount: number;
+    }>;
+    getSessionLineage(workspaceId: string, sessionId: string, options?: GetSessionLineageOptions): Promise<SessionLineageResponse>;
+    private sharedRead;
+    private queueRead;
+    private launchRead;
+    private consumeSharedRead;
+    private observeRead;
     /** Negotiate one server-mediated connected-Codex GPT-Live V3 WebRTC call. */
     negotiateCodexRealtimeWebrtc(workspaceId: string, sessionId: string, request: CodexRealtimeWebrtcRequest, options?: {
         signal?: AbortSignal | undefined;
@@ -156,6 +350,10 @@ export declare class OpenGeniClient {
     negotiateGatewayRealtime(workspaceId: string, sessionId: string, request: GatewayRealtimeConnectRequest, options?: {
         signal?: AbortSignal | undefined;
     }): Promise<GatewayRealtimeConnectResponse>;
+    /** Mint a short-lived browser token from a connected SuperGrok account. */
+    negotiateXaiSubscriptionRealtime(workspaceId: string, sessionId: string, request: GatewayRealtimeConnectRequest, options?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<GatewayRealtimeConnectResponse>;
     /** Promote a negotiated connection only after its browser data channel is ready. */
     activateCodexRealtimeConnection(workspaceId: string, sessionId: string, realtimeId: string, connectionId: string, request: ActivateCodexRealtimeConnectionRequest, options?: {
         signal?: AbortSignal | undefined;
@@ -171,9 +369,10 @@ export declare class OpenGeniClient {
     listTurns(workspaceId: string, sessionId: string, options?: {
         limit?: number;
         latestStarted?: boolean;
+        signal?: AbortSignal | undefined;
     }): Promise<SessionTurn[]>;
     /** Newest turn that durably emitted `turn.started`, or null before any admission. */
-    getLatestStartedTurn(workspaceId: string, sessionId: string): Promise<SessionTurn | null>;
+    getLatestStartedTurn(workspaceId: string, sessionId: string, options?: OpenGeniRequestOptions): Promise<SessionTurn | null>;
     /**
      * List the workspace's machines (the Machines dashboard). Each enrolled
      * selfhosted machine carries its derived state + latest metrics +
@@ -184,6 +383,13 @@ export declare class OpenGeniClient {
         sessionId?: string;
         signal?: AbortSignal;
     }): Promise<MachinesResponse>;
+    /** Ask one authoritative Connected Machine runner to drain accepted work and
+     * install the exact signed version promoted for its channel. Progress is read
+     * from `listMachines`; completion requires the successor build identity. */
+    updateMachineAgent(workspaceId: string, enrollmentId: string): Promise<UpdateMachineAgentResponse>;
+    /** Revision-fenced update of a Connected Machine's optional command memory
+     * policy. Null byte limits preserve unrestricted machine access. */
+    updateMachineOperationPolicy(workspaceId: string, enrollmentId: string, request: UpdateMachineOperationPolicyRequest): Promise<MachineOperationPolicy>;
     /**
      * Read the downsampled (~1/min) metrics series for ONE machine over a time
      * window (default 1h). The samples are oldest-first (a left-to-right chart).
@@ -194,8 +400,9 @@ export declare class OpenGeniClient {
     /**
      * Remove one connected self-hosted machine enrollment. The control-plane
      * operation works while the agent is offline, revokes future reconnects,
-     * retains history, and returns a typed blocker when active route/lease or
-     * recovery dependencies make removal unsafe. `idempotencyKey` is replay-safe.
+     * retains history, and atomically detaches idle dependent sessions (a
+     * machine-home session becomes `backend:none`). Active turns, live leases,
+     * and recovery work remain typed blockers. `idempotencyKey` is replay-safe.
      */
     removeEnrollment(workspaceId: string, enrollmentId: string, request?: RemoveEnrollmentRequest): Promise<RemoveEnrollmentResponse>;
     /**
@@ -213,10 +420,7 @@ export declare class OpenGeniClient {
      * is the authoritative screen-control consent (whole-machine is mandatory/implicit).
      * Lands an enrollment + a selfhosted sandbox and unblocks the agent's poll.
      */
-    approveDeviceEnrollment(workspaceId: string, request: {
-        userCode: string;
-        allowScreenControl?: boolean;
-    }): Promise<DeviceEnrollmentApproveResponse>;
+    approveDeviceEnrollment(workspaceId: string, request: DeviceEnrollmentApproveRequest): Promise<DeviceEnrollmentApproveResponse>;
     /** Deny a pending device-enrollment flow (the explicit "no" at the approve page). */
     denyDeviceEnrollment(workspaceId: string, request: {
         userCode: string;
@@ -241,8 +445,15 @@ export declare class OpenGeniClient {
     swapActiveSandbox(workspaceId: string, sessionId: string, request: SwapActiveSandboxRequest): Promise<SwapActiveSandboxResponse>;
     listScheduledTasks(workspaceId: string, options?: {
         limit?: number;
+        offset?: number;
+        sessionId?: string;
     }): Promise<ScheduledTask[]>;
     getScheduledTask(workspaceId: string, taskId: string): Promise<ScheduledTask>;
+    /**
+     * Channels a person may choose as a scheduled task's fixed Slack destination:
+     * active, non-shared channels the selected OpenGeni bot already belongs to.
+     */
+    listScheduledTaskSlackChannels(workspaceId: string, connectionId: string, cursor?: string): Promise<SlackReactionChannelListResponse>;
     /**
      * Return the events from one bounded page. With no cursor, this uses the safe
      * semantic monitoring tail; pass explicit forensic options and a cursor for
@@ -299,8 +510,15 @@ export declare class OpenGeniClient {
     editQueueItem(workspaceId: string, sessionId: string, turnId: string, request: EditSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
     steerQueueItem(workspaceId: string, sessionId: string, turnId: string, request: SteerSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
     deleteQueueItem(workspaceId: string, sessionId: string, turnId: string, request: DeleteSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
-    getComposerDraft(workspaceId: string, sessionId: string): Promise<ComposerDraft>;
+    getComposerDraft(workspaceId: string, sessionId: string, options?: OpenGeniRequestOptions): Promise<ComposerDraft>;
     saveComposerDraft(workspaceId: string, sessionId: string, request: SaveComposerDraftRequest): Promise<ComposerDraft>;
+    submitComposerDraft(workspaceId: string, sessionId: string, request: SubmitComposerDraftRequest): Promise<SubmitComposerDraftResponse>;
+    /** Inspect bounded checkpoint recovery eligibility without changing session state. */
+    getSandboxRecovery(workspaceId: string, sessionId: string): Promise<SandboxRecoveryProjection>;
+    /** Restore only the explicitly selected checkpoint; never retry a command. */
+    recoverSandbox(workspaceId: string, sessionId: string, request: SandboxRecoveryRequest): Promise<SandboxRecoveryResponse>;
+    /** Retry the exact failed turn. Keep clientEventId unchanged on transport retries. */
+    retrySession(workspaceId: string, sessionId: string, request: SessionRetryRequest): Promise<SessionRetryResponse>;
     controlSession(workspaceId: string, sessionId: string, request: {
         action: "pause" | "resume" | "cancel";
         reason?: string;
@@ -322,6 +540,9 @@ export declare class OpenGeniClient {
         clientEventId?: string;
         expectedControlEtag?: string;
     }): Promise<SessionControlResponse>;
+    setWorkspacePauseTimer(workspaceId: string, request: import("./types.js").WorkspacePauseTimerRequest): Promise<{
+        ok: boolean;
+    }>;
     setWorkspaceInferenceState(workspaceId: string, request: {
         action: "pause" | "resume";
         reason?: string;
@@ -338,6 +559,17 @@ export declare class OpenGeniClient {
         limit?: number;
     }): Promise<WorkspaceControlEventPage>;
     streamWorkspaceControlEvents(workspaceId: string, options?: StreamSessionEventsOptions): AsyncGenerator<WorkspaceControlEvent, void, void>;
+    /**
+     * Multiplex workspace control and interaction invalidations over one HTTP
+     * connection while retaining an independent durable cursor for each domain.
+     */
+    streamWorkspaceLiveEvents(workspaceId: string, options?: WorkspaceLiveStreamOptions): AsyncGenerator<import("./workspace-live-stream.js").WorkspaceLiveEvent, void, void>;
+    workspaceLiveStreamTransport(workspaceId: string): WorkspaceLiveStreamTransport;
+    openWorkspaceLiveEventStream(workspaceId: string, options?: {
+        controlAfter?: number;
+        interactionAfter?: number;
+        signal?: AbortSignal;
+    }): Promise<ReadableStream<Uint8Array>>;
     workspaceControlStreamTransport(workspaceId: string): WorkspaceControlStreamTransport;
     openWorkspaceControlEventStream(workspaceId: string, options?: {
         after?: number;
@@ -349,8 +581,13 @@ export declare class OpenGeniClient {
      */
     steerMessage(workspaceId: string, sessionId: string, message: string | SendMessageInput): Promise<SteerMessageResult>;
     /** The session's goal. 404s when the session never had one. */
-    getGoal(workspaceId: string, sessionId: string): Promise<SessionGoal>;
+    getGoal(workspaceId: string, sessionId: string, options?: SharedSessionReadOptions): Promise<SessionGoal>;
     updateGoal(workspaceId: string, sessionId: string, request: UpdateSessionGoalRequest): Promise<SessionGoal>;
+    listGoalRevisions(workspaceId: string, sessionId: string): Promise<SessionGoalRevision[]>;
+    listGoalRevisionPage(workspaceId: string, sessionId: string, options?: ListSessionGoalRevisionsOptions): Promise<ListSessionGoalRevisionsResponse>;
+    rejectGoalRevision(workspaceId: string, sessionId: string, revisionId: string, request: RejectSessionGoalRevisionRequest): Promise<RejectSessionGoalRevisionResponse>;
+    rollbackGoalRevision(workspaceId: string, sessionId: string, revisionId: string, request: RollbackSessionGoalRevisionRequest): Promise<SessionGoal>;
+    applyGoalRevision(workspaceId: string, sessionId: string, revisionId: string, request: ApplySessionGoalRevisionRequest): Promise<SessionGoal>;
     deleteGoal(workspaceId: string, sessionId: string): Promise<void>;
     /** Pause the goal loop: the session stops self-continuing until resumed. */
     pauseGoal(workspaceId: string, sessionId: string, options?: {
@@ -374,6 +611,8 @@ export declare class OpenGeniClient {
     fsListBatch(workspaceId: string, sessionId: string, request: FsListBatchRequest, options?: OpenGeniRequestOptions): Promise<FsListBatchResponse>;
     /** FileSystem: read a file (text or base64; binary-safe, size-capped). */
     fsRead(workspaceId: string, sessionId: string, request: FsReadRequest, options?: OpenGeniRequestOptions): Promise<FsReadResponse>;
+    /** Publish one exact sandbox file into permanent workspace artifact storage. */
+    publishSandboxFileArtifact(workspaceId: string, sessionId: string, request: PublishSandboxFileArtifactRequest, options?: OpenGeniRequestOptions): Promise<SandboxFileArtifactReceipt>;
     /** FileSystem: write a file (last-writer-wins; emits fs.changed). */
     fsWrite(workspaceId: string, sessionId: string, request: FsWriteRequest): Promise<FsWriteResponse>;
     /** FileSystem: delete a path (emits fs.changed). */
@@ -436,22 +675,56 @@ export declare class OpenGeniClient {
     heartbeatViewer(workspaceId: string, sessionId: string, viewerId: string, request: ViewerHeartbeatRequest): Promise<ViewerHeartbeatResponse>;
     /** Detach a viewer (delete this holder; idempotent delete-my-row). */
     detachViewer(workspaceId: string, sessionId: string, viewerId: string): Promise<void>;
+    streamWorkspaceInteractionRevisions(workspaceId: string, options?: StreamSessionEventsOptions): AsyncGenerator<WorkspaceInteractionRevisionEvent, void, void>;
+    workspaceInteractionRevisionStreamTransport(workspaceId: string): WorkspaceInteractionRevisionStreamTransport;
+    openWorkspaceInteractionRevisionStream(workspaceId: string, options?: {
+        after?: number;
+        signal?: AbortSignal;
+    }): Promise<ReadableStream<Uint8Array>>;
+    listNetworkRoutes(workspaceId: string, options?: NetworkRouteListOptions): Promise<NetworkRouteListResponse>;
+    getNetworkRoute(workspaceId: string, networkRouteId: string, options?: OpenGeniRequestOptions): Promise<NetworkRoute>;
+    createNetworkRoute(workspaceId: string, request: CreateNetworkRouteRequest, options?: OpenGeniRequestOptions): Promise<NetworkRouteMutationResponse>;
+    updateNetworkRoute(workspaceId: string, networkRouteId: string, request: UpdateNetworkRouteRequest, options?: OpenGeniRequestOptions): Promise<NetworkRouteMutationResponse>;
+    listSiteAuthConnections(workspaceId: string, options?: SiteAuthConnectionListOptions): Promise<SiteAuthConnectionListResponse>;
+    getSiteAuthConnection(workspaceId: string, siteAuthConnectionId: string, options?: OpenGeniRequestOptions): Promise<SiteAuthConnection>;
+    createSiteAuthConnection(workspaceId: string, request: CreateSiteAuthConnectionRequest, options?: OpenGeniRequestOptions): Promise<SiteAuthConnectionMutationResponse>;
+    updateSiteAuthConnection(workspaceId: string, siteAuthConnectionId: string, request: UpdateSiteAuthConnectionRequest, options?: OpenGeniRequestOptions): Promise<SiteAuthConnectionMutationResponse>;
+    listAuthRuns(workspaceId: string, options?: AuthRunListOptions): Promise<AuthRunListResponse>;
+    getAuthRun(workspaceId: string, authRunId: string, options?: OpenGeniRequestOptions): Promise<AuthRun>;
+    startBrowserAuthRun(workspaceId: string, browserSessionId: string, request: StartAuthRunRequest, options?: OpenGeniRequestOptions): Promise<AuthRunMutationResponse>;
+    reportBrowserAuthRun(workspaceId: string, browserSessionId: string, authRunId: string, request: ReportAuthRunRequest, options?: OpenGeniRequestOptions): Promise<AuthRunMutationResponse>;
+    protectedBrowserAuthFill(workspaceId: string, browserSessionId: string, authRunId: string, request: ProtectedAuthFillRequest, options?: OpenGeniRequestOptions): Promise<ProtectedAuthFillResponse>;
+    advanceExternalBrowserAuthRun(workspaceId: string, browserSessionId: string, authRunId: string, request: ExternalAuthRunRequest, options?: OpenGeniRequestOptions): Promise<ExternalAuthRunResponse>;
+    openExternalBrowserAuthFlow(workspaceId: string, browserSessionId: string, authRunId: string, request: ExternalAuthInteractiveRequest, options?: OpenGeniRequestOptions): Promise<ExternalAuthInteractiveResponse>;
+    verifyBrowserAuthRun(workspaceId: string, browserSessionId: string, authRunId: string, request: VerifyAuthRunRequest, options?: OpenGeniRequestOptions): Promise<AuthRunMutationResponse>;
+    listInteractionInterventions(workspaceId: string, options?: InteractionInterventionListOptions): Promise<InteractionInterventionListResponse>;
+    getInteractionIntervention(workspaceId: string, interventionId: string, options?: OpenGeniRequestOptions): Promise<InteractionIntervention>;
+    createInteractionIntervention(workspaceId: string, request: CreateInteractionInterventionRequest, options?: OpenGeniRequestOptions): Promise<InteractionInterventionMutationResponse>;
+    resolveInteractionIntervention(workspaceId: string, interventionId: string, request: ResolveInteractionInterventionRequest, options?: OpenGeniRequestOptions): Promise<InteractionInterventionMutationResponse>;
     listAttachedBrowsers(workspaceId: string, options?: AttachedBrowserDeviceListOptions): Promise<AttachedBrowserDeviceListResponse>;
     getAttachedBrowser(workspaceId: string, deviceId: string, options?: OpenGeniRequestOptions): Promise<AttachedBrowserDevice>;
     listBrowserIdentities(workspaceId: string, options?: BrowserIdentityListOptions): Promise<BrowserIdentityListResponse>;
     getBrowserIdentity(workspaceId: string, identityId: string, options?: OpenGeniRequestOptions): Promise<BrowserIdentity>;
     createBrowserIdentity(workspaceId: string, request: CreateBrowserIdentityRequest, options?: OpenGeniRequestOptions): Promise<BrowserIdentityMutationResponse>;
+    updateBrowserIdentity(workspaceId: string, identityId: string, request: UpdateBrowserIdentityRequest, options?: OpenGeniRequestOptions): Promise<BrowserIdentityMutationResponse>;
     listBrowserRevisions(workspaceId: string, identityId: string, options?: OpenGeniRequestOptions): Promise<BrowserRevisionListResponse>;
     /** Workspace-wide BrowserSession inventory. Associations express relevance,
      *  not access: peers and child agents intentionally remain discoverable. */
     listBrowserSessions(workspaceId: string, options?: OpenGeniRequestOptions): Promise<BrowserSessionListResponse>;
     getBrowserSession(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserSession>;
+    readBrowserClipboard(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserClipboard>;
+    listBrowserDownloads(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserDownloadListResponse>;
+    getBrowserDownload(workspaceId: string, browserSessionId: string, downloadId: string, options?: OpenGeniRequestOptions): Promise<BrowserDownload>;
+    saveBrowserDownload(workspaceId: string, browserSessionId: string, downloadId: string, request: BrowserDownloadSaveRequest, options?: OpenGeniRequestOptions): Promise<BrowserDownloadSaveResponse>;
     createBrowserSession(workspaceId: string, request: CreateBrowserSessionRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
     listBrowserTargets(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetListResponse>;
-    openBrowserTarget(workspaceId: string, browserSessionId: string, request?: BrowserOpenTargetRequest, options?: OpenGeniRequestOptions): Promise<BrowserTarget>;
-    selectBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTarget>;
+    openBrowserTarget(workspaceId: string, browserSessionId: string, request?: BrowserOpenTargetRequest, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    selectBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    captureBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions, captureOptions?: BrowserScreenshotOptions): Promise<BrowserFrame>;
     closeBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetListResponse>;
     observeBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    getBrowserTargetState(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetState>;
+    readBrowserDom(workspaceId: string, browserSessionId: string, targetId: string, request: BrowserDomReadRequest, options?: OpenGeniRequestOptions): Promise<BrowserDomReadResponse>;
     actInBrowser(workspaceId: string, browserSessionId: string, request: BrowserActionRequest, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     getBrowserActionReceipt(workspaceId: string, browserSessionId: string, operationId: string, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     listBrowserDiagnostics(workspaceId: string, browserSessionId: string, targetId: string, options?: BrowserDiagnosticsOptions): Promise<BrowserDiagnosticBatch>;
@@ -465,9 +738,12 @@ export declare class OpenGeniClient {
      * relevance, not access; peer sessions intentionally remain discoverable. */
     listComputerSessions(workspaceId: string, options?: OpenGeniRequestOptions): Promise<ComputerSessionListResponse>;
     getComputerSession(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerSession>;
+    readComputerClipboard(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerClipboard>;
+    getComputerInputPosture(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerSessionInputPosture>;
     createComputerSession(workspaceId: string, request: CreateComputerSessionRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionMutationResponse>;
     listComputerTargets(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerTargetListResponse>;
     observeComputerTarget(workspaceId: string, computerSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerObservation>;
+    captureComputerTarget(workspaceId: string, computerSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerFrame>;
     actInComputer(workspaceId: string, computerSessionId: string, request: ComputerActionRequest, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     getComputerActionReceipt(workspaceId: string, computerSessionId: string, operationId: string, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     attachComputerSession(workspaceId: string, computerSessionId: string, request: ComputerSessionAttachmentRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionAttachment>;
@@ -479,16 +755,199 @@ export declare class OpenGeniClient {
      * reasoning efforts, MCP servers, file-upload limits, and how the client is
      * expected to authenticate. Drives a composer's model picker without prior
      * knowledge of the host setup; safe to call before any auth is established.
+     * Authenticated calls resolve the caller's default workspace, or the exact
+     * `workspaceId` option, using the same selection rules as fresh session create.
      */
-    getClientConfig(): Promise<ClientConfig>;
+    getClientConfig(options?: OpenGeniRequestOptions & {
+        workspaceId?: string;
+    }): Promise<ClientConfig>;
     /** Authenticated model definitions plus workspace-specific selectability. */
-    getWorkspaceModelCatalog(workspaceId: string): Promise<WorkspaceModelCatalogResponse>;
+    getWorkspaceModelCatalog(workspaceId: string, options?: OpenGeniRequestOptions): Promise<WorkspaceModelCatalogResponse>;
+    /** List workspace-owned unpinned Vercel AI Gateway model slugs. */
+    listWorkspaceGatewayCustomModels(workspaceId: string): Promise<WorkspaceGatewayCustomModelsResponse>;
+    /** Add one exact upstream Vercel AI Gateway slug. */
+    createWorkspaceGatewayCustomModel(workspaceId: string, request: CreateWorkspaceGatewayCustomModelRequest): Promise<WorkspaceGatewayCustomModel>;
+    /** Remove one workspace custom Gateway model by its stable row id. */
+    deleteWorkspaceGatewayCustomModel(workspaceId: string, customModelId: string, request: DeleteWorkspaceGatewayCustomModelRequest): Promise<void>;
+    /** List workspace-owned unpinned OpenRouter model slugs. */
+    listWorkspaceOpenRouterCustomModels(workspaceId: string): Promise<WorkspaceOpenRouterCustomModelsResponse>;
+    /** Add one exact upstream OpenRouter slug. */
+    createWorkspaceOpenRouterCustomModel(workspaceId: string, request: CreateWorkspaceOpenRouterCustomModelRequest): Promise<WorkspaceOpenRouterCustomModel>;
+    /** Remove one workspace custom OpenRouter model by its stable row id. */
+    deleteWorkspaceOpenRouterCustomModel(workspaceId: string, customModelId: string, request: DeleteWorkspaceOpenRouterCustomModelRequest): Promise<void>;
+    /** Read metadata for one organization-owned model-provider connection. */
+    getWorkspaceClaudeSubscriptionUsage(workspaceId: string): Promise<ClaudeSubscriptionUsage>;
+    listClaudeSubscriptionAccounts(workspaceId: string): Promise<ClaudeSubscriptionAccountsResponse>;
+    activateClaudeSubscriptionAccount(workspaceId: string, accountId: string): Promise<{
+        activated: boolean;
+        accountId: string;
+    }>;
+    setClaudeSubscriptionRotationSettings(workspaceId: string, request: {
+        rotationEnabled: boolean;
+    }): Promise<SubscriptionPoolSettings>;
+    setClaudeSubscriptionAccountAllocator(workspaceId: string, accountId: string, request: {
+        enabled: boolean;
+        expectedVersion: number;
+    }): Promise<unknown>;
+    renameClaudeSubscriptionAccount(workspaceId: string, accountId: string, label: string | null): Promise<ClaudeSubscriptionAccount>;
+    disconnectClaudeSubscriptionAccount(workspaceId: string, accountId: string): Promise<unknown>;
+    getClaudeSubscriptionAccountUsage(workspaceId: string, accountId: string): Promise<ClaudeSubscriptionUsage>;
+    refreshClaudeSubscriptionAccountUsage(workspaceId: string, accountId: string): Promise<ClaudeSubscriptionUsage>;
+    listOrganizationClaudeSubscriptionAccounts(organizationId: string): Promise<ClaudeSubscriptionAccountsResponse>;
+    activateOrganizationClaudeSubscriptionAccount(organizationId: string, accountId: string): Promise<{
+        updated: boolean;
+    }>;
+    setOrganizationClaudeSubscriptionRotationSettings(organizationId: string, request: {
+        rotationEnabled: boolean;
+    }): Promise<SubscriptionPoolSettings>;
+    setOrganizationClaudeSubscriptionAccountAllocator(organizationId: string, accountId: string, request: {
+        enabled: boolean;
+        expectedVersion: number;
+    }): Promise<unknown>;
+    renameOrganizationClaudeSubscriptionAccount(organizationId: string, accountId: string, label: string | null): Promise<{
+        updated: boolean;
+    }>;
+    disconnectOrganizationClaudeSubscriptionAccount(organizationId: string, accountId: string): Promise<unknown>;
+    getOrganizationClaudeSubscriptionAccountUsage(organizationId: string, accountId: string): Promise<ClaudeSubscriptionUsage>;
+    refreshOrganizationClaudeSubscriptionAccountUsage(organizationId: string, accountId: string): Promise<ClaudeSubscriptionUsage>;
+    connectClaudeSubscriptionSetupToken(workspaceId: string, request: Omit<ClaudeSubscriptionSetupTokenRequest, "scope"> & {
+        scope?: "workspace" | "user";
+    }): Promise<ClaudeSubscriptionOAuthCompleteResponse>;
+    connectOrganizationClaudeSubscriptionSetupToken(organizationId: string, request: Omit<ClaudeSubscriptionSetupTokenRequest, "scope">): Promise<ClaudeSubscriptionOAuthCompleteResponse>;
+    /** Sign in with model and profile access; no inference request is made. */
+    startWorkspaceClaudeSubscriptionOAuth(workspaceId: string, request?: Partial<ClaudeSubscriptionOAuthStartRequest>): Promise<ClaudeSubscriptionOAuthStartResponse>;
+    completeWorkspaceClaudeSubscriptionOAuth(workspaceId: string, request: ClaudeSubscriptionOAuthCompleteRequest): Promise<ClaudeSubscriptionOAuthCompleteResponse>;
+    startOrganizationClaudeSubscriptionOAuth(organizationId: string, request?: Pick<ClaudeSubscriptionOAuthStartRequest, "reconnectAccountId">): Promise<ClaudeSubscriptionOAuthStartResponse>;
+    completeOrganizationClaudeSubscriptionOAuth(organizationId: string, request: ClaudeSubscriptionOAuthCompleteRequest): Promise<ClaudeSubscriptionOAuthCompleteResponse>;
+    refreshWorkspaceClaudeSubscriptionUsage(workspaceId: string): Promise<ClaudeSubscriptionUsage>;
+    getOrganizationClaudeSubscriptionUsage(organizationId: string): Promise<ClaudeSubscriptionUsage>;
+    refreshOrganizationClaudeSubscriptionUsage(organizationId: string): Promise<ClaudeSubscriptionUsage>;
+    /** Read metadata for one organization-owned model-provider connection. */
+    getOrganizationModelProviderConnection(organizationId: string, providerKind: OrganizationModelProviderKind): Promise<OrganizationModelProviderConnection | null>;
+    /** Connect or rotate one organization-owned provider credential. */
+    upsertOrganizationModelProviderConnection(organizationId: string, providerKind: OrganizationModelProviderKind, request: UpsertOrganizationModelProviderConnectionRequest): Promise<OrganizationModelProviderConnection>;
+    /** Revoke one organization-owned provider credential. */
+    revokeOrganizationModelProviderConnection(organizationId: string, providerKind: OrganizationModelProviderKind, request: RevokeOrganizationModelProviderConnectionRequest): Promise<OrganizationModelProviderConnection>;
+    /** List workspace-owned Claude model slugs. */
+    listWorkspaceClaudeCustomModels(workspaceId: string, providerKind: "anthropic" | "claude_subscription"): Promise<WorkspaceGatewayCustomModelsResponse>;
+    /** Add an immutable workspace-owned Claude model generation. */
+    createWorkspaceClaudeCustomModel(workspaceId: string, providerKind: "anthropic" | "claude_subscription", request: CreateWorkspaceGatewayCustomModelRequest): Promise<WorkspaceGatewayCustomModel>;
+    /** Retire a workspace-owned Claude model generation. */
+    deleteWorkspaceClaudeCustomModel(workspaceId: string, providerKind: "anthropic" | "claude_subscription", customModelId: string, request: DeleteWorkspaceGatewayCustomModelRequest): Promise<void>;
+    /** List organization-owned exact upstream model slugs. */
+    listOrganizationProviderCustomModels(organizationId: string, providerKind: OrganizationModelProviderKind): Promise<OrganizationProviderCustomModelsResponse>;
+    /** Add one organization-owned exact upstream model slug. */
+    createOrganizationProviderCustomModel(organizationId: string, providerKind: OrganizationModelProviderKind, request: CreateOrganizationProviderCustomModelRequest): Promise<OrganizationProviderCustomModel>;
+    /** Retire one organization-owned custom model. */
+    deleteOrganizationProviderCustomModel(organizationId: string, providerKind: OrganizationModelProviderKind, customModelId: string, request: DeleteOrganizationProviderCustomModelRequest): Promise<OrganizationProviderCustomModel>;
+    /** Read the workspace's hard provider/model allowlist. */
+    getWorkspaceModelAccessPolicy(workspaceId: string): Promise<WorkspaceModelAccessPolicy>;
+    /** Fully replace the workspace's hard provider/model allowlist. */
+    updateWorkspaceModelAccessPolicy(workspaceId: string, request: UpdateWorkspaceModelAccessPolicyRequest): Promise<WorkspaceModelAccessPolicy>;
     /** Authenticated realtime voice models and credential readiness. */
-    getWorkspaceRealtimeModelCatalog(workspaceId: string): Promise<WorkspaceRealtimeModelCatalogResponse>;
-    /** The caller's access context: subject, account + workspace grants, defaults. */
+    getWorkspaceRealtimeModelCatalog(workspaceId: string, options?: OpenGeniRequestOptions): Promise<WorkspaceRealtimeModelCatalogResponse>;
+    /**
+     * The caller's subject, grants, defaults, and optional direct API-key authority.
+     * `credential.effectiveWorkspacePermissions` expands workspace admin only for
+     * legacy keys; explicit policies retain exactly their selected grants. Full
+     * organization keys can provision shared workspaces, external members, and
+     * `asUser` sessions; user requests additionally need live membership.
+     * Organization-key scope excludes Personal workspaces. Neither key kind bypasses
+     * session visibility or the explicit `secrets:read` permission requirement. Credential
+     * metadata is omitted for `asUser`/external actors, humans, delegated tokens,
+     * other caller contexts, and older servers.
+     */
     getAccessContext(): Promise<AccessContext>;
+    /** Active organization memberships proven by the current managed-human session. */
+    listOrganizationMemberships(): Promise<ListManagedOrganizationMembershipsResponse>;
+    /** Bounded owner-only personal-resource authority page for one exact resource kind. */
+    listUserResourceAuthorities(workspaceId: string, options: ListUserResourceAuthoritiesOptions): Promise<ListUserResourceAuthoritiesResponse>;
+    /** Revoke an owner grant through the exact workspace it targets. */
+    revokeUserResourceGrant(workspaceId: string, grantId: string): Promise<RevokeUserResourceGrantResponse>;
+    /** Create a new organization owned by the current managed human. */
+    createOrganization(request: CreateOrganizationRequest): Promise<CreateOrganizationResponse>;
+    /** Create another organization owned by the current managed human. */
+    createAdditionalOrganization(request: CreateAdditionalOrganizationRequest): Promise<CreateAdditionalOrganizationResponse>;
+    /** Pending and historical invitations addressed to the current managed human. */
+    listOrganizationInvitations(options?: {
+        cursor?: string;
+        limit?: number;
+    }): Promise<ListOrganizationInvitationsPageResponse>;
+    /** Admin-only deterministic page of invitations for one organization. */
+    listOrganizationInvitationsForOrganization(organizationId: string, options?: {
+        cursor?: string;
+        limit?: number;
+    }): Promise<ListOrganizationInvitationsPageResponse>;
+    createOrganizationInvitation(organizationId: string, request: CreateOrganizationInvitationRequest): Promise<OrganizationInvitation>;
+    acceptOrganizationInvitation(invitationId: string, request: AcceptOrganizationInvitationRequest): Promise<AcceptOrganizationInvitationResponse>;
+    revokeOrganizationInvitation(organizationId: string, invitationId: string, request: RevokeOrganizationInvitationRequest): Promise<OrganizationInvitation>;
+    listOrganizationAdministrationMembers(organizationId: string): Promise<ListOrganizationAdministrationMembersResponse>;
+    /** @deprecated Use listOrganizationAdministrationMembers for its privacy-safe projection. */
+    listOrganizationMembers(organizationId: string): Promise<ListOrganizationAdministrationMembersResponse>;
+    /** Canonical organization identity and every non-personal workspace access roster. */
+    getOrganizationAdministrationOverview(organizationId: string): Promise<OrganizationAdministrationOverview>;
+    /** Create a shared workspace and grant its creator explicit workspace-admin access. */
+    createOrganizationWorkspace(organizationId: string, request: CreateOrganizationWorkspaceRequest): Promise<OrganizationWorkspaceAccess>;
+    /** Rename one shared workspace under an exact optimistic-concurrency fence. */
+    updateOrganizationWorkspace(organizationId: string, workspaceId: string, request: UpdateOrganizationWorkspaceRequest): Promise<OrganizationWorkspaceAccess>;
+    updateOrganizationWorkspaceSettings(organizationId: string, workspaceId: string, request: UpdateWorkspaceSettingsRequest): Promise<Workspace>;
+    /**
+     * Delete an organization (shared) workspace. Accepts an organization owner
+     * session or an organization API key with `workspace:admin` (for tenant
+     * offboarding); never deletes a Personal workspace. 409 until quiescent.
+     */
+    deleteOrganizationWorkspace(organizationId: string, workspaceId: string): Promise<void>;
+    putOrganizationWorkspaceMember(organizationId: string, workspaceId: string, membershipId: string, request: PutOrganizationWorkspaceMemberRequest): Promise<OrganizationWorkspaceAccessMember>;
+    revokeOrganizationWorkspaceMember(organizationId: string, workspaceId: string, membershipId: string, request: RevokeOrganizationWorkspaceMemberRequest): Promise<RevokeOrganizationWorkspaceMemberResponse>;
+    /** Rename the organization under an exact optimistic-concurrency fence. */
+    updateOrganizationName(organizationId: string, request: UpdateOrganizationNameRequest): Promise<OrganizationSummary>;
+    updateOrganizationMember(organizationId: string, membershipId: string, request: UpdateOrganizationMemberRequest): Promise<OrganizationMember>;
+    getOrganizationRetentionPolicy(organizationId: string): Promise<OrganizationRetentionPolicy>;
+    updateOrganizationRetentionPolicy(organizationId: string, request: UpdateOrganizationRetentionPolicyRequest): Promise<OrganizationRetentionPolicy>;
+    getOrganizationRecovery(organizationId: string): Promise<OrganizationRecoveryOverview>;
+    configureOrganizationRecoveryPolicy(organizationId: string, request: ConfigureOrganizationRecoveryPolicyRequest): Promise<OrganizationRecoveryMutationResponse>;
+    acceptOrganizationRecoveryCustody(organizationId: string, request: AcceptOrganizationRecoveryCustodyRequest): Promise<OrganizationRecoveryMutationResponse>;
+    disableOrganizationRecoveryPolicy(organizationId: string, request: DisableOrganizationRecoveryPolicyRequest): Promise<OrganizationRecoveryMutationResponse>;
+    startOrganizationRecoveryOperation(organizationId: string, request: StartOrganizationRecoveryOperationRequest): Promise<OrganizationRecoveryMutationResponse>;
+    approveOrganizationRecoveryOperation(organizationId: string, recoveryOperationId: string, request: OrganizationRecoveryOperationCommandRequest): Promise<OrganizationRecoveryMutationResponse>;
+    cancelOrganizationRecoveryOperation(organizationId: string, recoveryOperationId: string, request: OrganizationRecoveryOperationCommandRequest): Promise<OrganizationRecoveryMutationResponse>;
+    executeOrganizationRecoveryOperation(organizationId: string, recoveryOperationId: string, request: OrganizationRecoveryOperationCommandRequest): Promise<OrganizationRecoveryMutationResponse>;
+    searchPublicSkills(workspaceId: string, query: string): Promise<{
+        provider: "skills_sh";
+        query: string;
+        items: Array<{
+            id: string;
+            name: string;
+            source: string;
+            skillId: string;
+            url: string;
+            installs: number;
+        }>;
+        nextCursor: null;
+    }>;
     listWorkspaces(): Promise<Workspace[]>;
+    /** Uses this client's fixed actor and standard contract/error/abort handling.
+     * Disconnect revokes OpenGeni connection access, not upstream provider consent. */
+    connectTransport(): import("@opengeni/connect").ConnectTransport;
+    /** Browse first-party Atlassian sources without choosing or starting sync. */
+    browseAtlassianSources(workspaceId: string, connectionId: string): Promise<import("@opengeni/contracts/atlassian").AtlassianBrowseResponse>;
+    saveAtlassianSources(workspaceId: string, connectionId: string, request: import("@opengeni/contracts/atlassian").SaveAtlassianSourcesRequest): Promise<import("./types.js").ConnectionResponse>;
+    setAtlassianLifecycle(workspaceId: string, connectionId: string, request: import("@opengeni/contracts/atlassian").AtlassianLifecycleActionRequest): Promise<import("./types.js").ConnectionResponse>;
+    /** Begin durable setup. Completion requirements are provider-specific. */
+    beginConnect(workspaceId: string, request: {
+        providerId: string;
+        ownership: "personal" | "workspace";
+        returnUrl: string;
+        idempotencyKey: string;
+        reconnectAccountId?: string;
+        installationTarget?: import("@opengeni/contracts/connect").ConnectInstallationTarget;
+    }): Promise<import("@opengeni/contracts/connect").ConnectAttempt>;
     createWorkspace(request: CreateWorkspaceRequest): Promise<Workspace>;
+    /**
+     * Create an organization workspace once for a stable external tenant
+     * identity, or return the existing workspace without overwriting it.
+     */
+    ensureWorkspace(request: EnsureWorkspaceRequest): Promise<EnsureWorkspaceResponse>;
     getWorkspace(workspaceId: string): Promise<Workspace>;
     /** Read-time, secret-safe inventory of policy heads and visible workspace knowledge. */
     getWorkspaceState(workspaceId: string, options?: WorkspaceStateGetOptions): Promise<WorkspaceStateResponse>;
@@ -497,8 +956,13 @@ export declare class OpenGeniClient {
     updateWorkspace(workspaceId: string, request: UpdateWorkspaceRequest): Promise<Workspace>;
     /** Inspect immutable instruction-policy history, active heads, and activation audit evidence. */
     listWorkspaceInstructionPolicies(workspaceId: string, options?: WorkspaceInstructionPolicyListOptions): Promise<WorkspaceInstructionPolicyListResponse>;
+    /** Inspect the bounded, permission-filtered governed-learning timeline. */
+    getWorkspaceLearningHistory(workspaceId: string, options?: WorkspaceLearningHistoryOptions): Promise<WorkspaceLearningHistoryResponse>;
+    undoGovernedLearningActivation(workspaceId: string, activationReceiptId: string, request?: {
+        operationId?: string;
+    }): Promise<GovernedLearningActivationUndoReceipt>;
     getWorkspaceInstructionPolicyRevision(workspaceId: string, revisionId: string): Promise<WorkspaceInstructionPolicyRevision>;
-    createWorkspaceInstructionPolicyDraft(workspaceId: string, request: CreateWorkspaceInstructionPolicyDraftRequest): Promise<WorkspaceInstructionPolicyRevision>;
+    createWorkspaceInstructionPolicyDraft(workspaceId: string, request: CreateWorkspaceInstructionPolicyDraftRequest, options?: OpenGeniRequestOptions): Promise<WorkspaceInstructionPolicyRevision>;
     /** List the newest immutable onboarding proposals and their inactive policy drafts. */
     listWorkspaceInstructionPolicyOnboardingProposals(workspaceId: string, options?: WorkspaceInstructionPolicyOnboardingProposalListOptions): Promise<WorkspaceInstructionPolicyOnboardingProposalListResponse>;
     /** Create one draft-only proposal against an exact active-policy baseline. */
@@ -506,11 +970,13 @@ export declare class OpenGeniClient {
     /** Import the stored legacy workspace override as an inactive charter draft. */
     importLegacyWorkspaceInstructionPolicyDraft(workspaceId: string, request?: ImportLegacyWorkspaceInstructionPolicyDraftRequest): Promise<WorkspaceInstructionPolicyRevision>;
     diffWorkspaceInstructionPolicyRevisions(workspaceId: string, request: WorkspaceInstructionPolicyDiffRequest): Promise<WorkspaceInstructionPolicyDiffResponse>;
-    activateWorkspaceInstructionPolicyRevision(workspaceId: string, revisionId: string, request: ActivateWorkspaceInstructionPolicyRequest): Promise<WorkspaceInstructionPolicyActivationResponse>;
+    activateWorkspaceInstructionPolicyRevision(workspaceId: string, revisionId: string, request: ActivateWorkspaceInstructionPolicyRequest, options?: OpenGeniRequestOptions): Promise<WorkspaceInstructionPolicyActivationResponse>;
     rollbackWorkspaceInstructionPolicyRevision(workspaceId: string, request: RollbackWorkspaceInstructionPolicyRequest): Promise<WorkspaceInstructionPolicyActivationResponse>;
     /** Read the current organization profile plus immutable revision and activation history. */
     listCompanyProfile(workspaceId: string, options?: CompanyProfileListOptions): Promise<CompanyProfileListResponse>;
     getCompanyProfileRevision(workspaceId: string, revisionId: string): Promise<CompanyProfileRevision>;
+    getCompanyProfileAgentPolicy(workspaceId: string): Promise<CompanyProfileAgentPolicy>;
+    updateCompanyProfileAgentPolicy(workspaceId: string, request: UpdateCompanyProfileAgentPolicyRequest): Promise<CompanyProfileAgentPolicy>;
     updateCompanyProfile(workspaceId: string, request: UpdateCompanyProfileRequest): Promise<CompanyProfileMutationResponse>;
     diffCompanyProfileRevisions(workspaceId: string, request: CompanyProfileDiffRequest): Promise<CompanyProfileDiffResponse>;
     activateCompanyProfileRevision(workspaceId: string, revisionId: string, request: ActivateCompanyProfileRevisionRequest): Promise<CompanyProfileMutationResponse>;
@@ -533,9 +999,10 @@ export declare class OpenGeniClient {
     deleteWorkspace(workspaceId: string): Promise<void>;
     /** The workspace's members (user + api_key subjects). */
     listWorkspaceMembers(workspaceId: string): Promise<WorkspaceMember[]>;
+    /** Active organization members who can be added to this workspace. */
+    listWorkspaceMemberCandidates(workspaceId: string): Promise<WorkspaceMemberCandidate[]>;
     /**
-     * Add an already-registered user by email. 404s when no user with that email
-     * exists (email invites for unknown users are deferred).
+     * Add one active member selected from the workspace candidate inventory.
      */
     addWorkspaceMember(workspaceId: string, request: AddWorkspaceMemberRequest): Promise<WorkspaceMember>;
     updateWorkspaceMember(workspaceId: string, subjectId: string, request: UpdateWorkspaceMemberRequest): Promise<WorkspaceMember>;
@@ -568,7 +1035,17 @@ export declare class OpenGeniClient {
     listScheduledTaskRuns(workspaceId: string, taskId: string, options?: {
         limit?: number;
     }): Promise<ScheduledTaskRun[]>;
+    /**
+     * Re-freeze a task's connectors, connector accounts and OpenGeni tool policy
+     * with the signed-in caller's current authority. Pass the `executionDigest`
+     * of the task whose `policyDrift` was reviewed; a changed task returns 409.
+     */
+    refreshScheduledTaskAccess(workspaceId: string, taskId: string, request: RefreshScheduledTaskAccessRequest): Promise<ScheduledTask>;
+    /** Schedules the caller can act on whose latest run could not use a connector. */
+    listScheduledTaskAccessAttention(workspaceId: string): Promise<ScheduledTaskAccessAttention[]>;
     listVariableSets(workspaceId: string): Promise<VariableSet[]>;
+    /** Resolve only caller-supplied attachment ids without enumerating the catalog. */
+    resolveVariableSetAttachments(workspaceId: string, request: ResolveVariableSetAttachmentsRequest): Promise<ResolveVariableSetAttachmentsResponse>;
     createVariableSet(workspaceId: string, request: CreateVariableSetRequest): Promise<VariableSet>;
     getVariableSet(workspaceId: string, variableSetId: string): Promise<VariableSet>;
     getVariableSetVariable(workspaceId: string, variableSetId: string, name: string): Promise<VariableSetSecret>;
@@ -577,6 +1054,13 @@ export declare class OpenGeniClient {
     /** Create or rotate a variable. Generic reads never return its value. */
     setVariableSetVariable(workspaceId: string, variableSetId: string, name: string, value: string): Promise<VariableSetVariableMetadata>;
     deleteVariableSetVariable(workspaceId: string, variableSetId: string, name: string): Promise<void>;
+    listChannels(workspaceId: string): Promise<Channel[]>;
+    createChannel(workspaceId: string, request: CreateChannelRequest): Promise<Channel>;
+    updateChannel(workspaceId: string, channelId: string, request: UpdateChannelRequest): Promise<Channel>;
+    reorderChannels(workspaceId: string, request: ReorderChannelsRequest): Promise<Channel[]>;
+    deleteChannel(workspaceId: string, channelId: string): Promise<void>;
+    /** Re-file a session into a channel (null = back to the unfiled inbox). */
+    updateSessionChannel(workspaceId: string, sessionId: string, request: UpdateSessionChannelRequest): Promise<Session>;
     listRigs(workspaceId: string): Promise<Rig[]>;
     createRig(workspaceId: string, request: CreateRigRequest): Promise<Rig>;
     getRig(workspaceId: string, rigId: string): Promise<Rig>;
@@ -634,7 +1118,10 @@ export declare class OpenGeniClient {
      * -> complete. Returns the ready `FileAsset`.
      */
     uploadFile(workspaceId: string, input: UploadFileInput): Promise<FileAsset>;
-    getFile(workspaceId: string, fileId: string): Promise<FileAsset>;
+    listFiles(workspaceId: string, options?: import("./types.js").FileListRequest): Promise<import("./types.js").FileListResponse>;
+    getFile(workspaceId: string, fileId: string, options?: OpenGeniRequestOptions & {
+        sessionId?: string | undefined;
+    }): Promise<FileAsset>;
     /** Read provider-neutral retained evidence metadata; never returns a storage location. */
     getRetainedArtifact(workspaceId: string, artifactId: string): Promise<RetainedArtifactMetadata>;
     /**
@@ -644,16 +1131,18 @@ export declare class OpenGeniClient {
     getRetainedArtifactContent(workspaceId: string, artifactId: string, options?: RetainedArtifactContentOptions): Promise<RetainedArtifactContent>;
     getSessionRetainedArtifact(workspaceId: string, sessionId: string, artifactId: string): Promise<RetainedArtifactMetadata>;
     getSessionRetainedArtifactContent(workspaceId: string, sessionId: string, artifactId: string, options?: RetainedArtifactContentOptions): Promise<RetainedArtifactContent>;
-    /** Assemble one permanent generated-image receipt from bounded authenticated ranges. */
+    /** Assemble one permanent image or file artifact from bounded authenticated ranges. */
     downloadRetainedArtifact(workspaceId: string, artifact: RetainedArtifactReference, options?: RetainedArtifactDownloadOptions): Promise<RetainedArtifactDownload>;
-    /** Mint a short-lived, zero-copy browser source for a validated generated image. */
+    /** Mint a short-lived, zero-copy browser source for a validated workspace artifact. */
     createRetainedArtifactDownloadUrl(workspaceId: string, artifact: RetainedArtifactReference, options?: OpenGeniRequestOptions): Promise<FileDownloadUrlResponse>;
     /** Assemble one retained screenshot from bounded authenticated API ranges. */
     downloadRetainedScreenshot(workspaceId: string, sessionId: string, artifactId: string, options?: RetainedScreenshotDownloadOptions): Promise<RetainedScreenshotDownload>;
     private downloadRetainedArtifactBytes;
     private getRetainedArtifactContentAtPath;
     /** Mint a short-lived signed download URL for a ready file. */
-    createFileDownloadUrl(workspaceId: string, fileId: string, options?: OpenGeniRequestOptions): Promise<FileDownloadUrlResponse>;
+    createFileDownloadUrl(workspaceId: string, fileId: string, options?: OpenGeniRequestOptions & {
+        sessionId?: string | undefined;
+    }): Promise<FileDownloadUrlResponse>;
     /** Read the effective workspace policy and executable Seedance capabilities. */
     getVideoGenerationSettings(workspaceId: string, options?: OpenGeniRequestOptions): Promise<WorkspaceVideoGenerationSettings>;
     /** Replace the enabled video models/default under optimistic policy revision control. */
@@ -663,11 +1152,12 @@ export declare class OpenGeniClient {
     /** Mint a short-lived zero-copy URL for native Range-based video playback. */
     createVideoArtifactPlaybackSource(workspaceId: string, artifactId: string, options?: OpenGeniRequestOptions): Promise<VideoArtifactPlaybackSource>;
     createDocumentBase(workspaceId: string, request: CreateDocumentBaseRequest): Promise<DocumentBase>;
-    listDocumentBases(workspaceId: string): Promise<DocumentBase[]>;
     getDocumentBase(workspaceId: string, baseId: string): Promise<DocumentBase>;
     /** Index an uploaded file into the base. The file must be `ready`. */
     addDocument(workspaceId: string, baseId: string, request: AddDocumentRequest): Promise<Document>;
     listDocuments(workspaceId: string, baseId: string): Promise<Document[]>;
+    /** Read the immutable source file through the Document's effective authority. */
+    getDocumentOriginalFile(workspaceId: string, documentId: string): Promise<FileAsset>;
     /**
      * Drop raw text or an already-uploaded file into the workspace's Default
      * base. When curation is enabled, it may name, summarize, categorize, and
@@ -680,58 +1170,100 @@ export declare class OpenGeniClient {
      * targetBaseId, applies the document's stored curation suggestion.
      */
     moveDocument(workspaceId: string, documentId: string, request?: MoveDocumentRequest): Promise<Document>;
-    /** Retry indexing for a failed document. */
-    reindexDocument(workspaceId: string, baseId: string, documentId: string): Promise<Document>;
     /**
      * Delete a document from a base. Removes the document row and its indexed
      * chunks while leaving the uploaded file asset available for other uses.
      */
     deleteDocument(workspaceId: string, baseId: string, documentId: string): Promise<void>;
-    searchDocuments(workspaceId: string, baseId: string, request: Omit<DocumentSearchRequest, "baseIds">): Promise<DocumentSearchResponse>;
-    searchKnowledge(workspaceId: string, request: DocumentSearchRequest): Promise<DocumentSearchResponse>;
-    listKnowledgeMemories(workspaceId: string, request?: KnowledgeMemorySearchRequest): Promise<KnowledgeMemory[]>;
-    getKnowledgeMemory(workspaceId: string, memoryId: string): Promise<KnowledgeMemory>;
-    createKnowledgeMemory(workspaceId: string, request: CreateKnowledgeMemoryRequest): Promise<KnowledgeMemory>;
-    updateKnowledgeMemory(workspaceId: string, memoryId: string, request: UpdateKnowledgeMemoryRequest): Promise<KnowledgeMemory>;
-    /** Hybrid (semantic + keyword) search over the workspace's agent-visible memory. */
-    searchWorkspaceMemories(workspaceId: string, request: WorkspaceMemorySearchRequest): Promise<WorkspaceMemorySearchResponse>;
+    /** Unified retained sources, findings and groups. Only published entries are returned by default. */
+    listKnowledgeEntries(workspaceId: string, request?: KnowledgeEntryListRequest): Promise<KnowledgeEntryListResponse>;
+    getKnowledgeEntry(workspaceId: string, entryId: string, options?: {
+        revisionId?: string;
+        view?: "published" | "needs_review" | "archived" | "rejected";
+    }): Promise<KnowledgeEntryRecord>;
+    /** Open the original file associated with an accessible retained source revision. */
+    createKnowledgeFileDownloadUrl(workspaceId: string, entryId: string, revisionId?: string): Promise<KnowledgeOriginalFileDownload>;
+    saveKnowledgeEntry(workspaceId: string, request: KnowledgeEntrySaveRequest): Promise<KnowledgeEntryWriteReceipt>;
+    reviewKnowledgeEntry(workspaceId: string, request: KnowledgeEntryReviewRequest): Promise<KnowledgeEntryWriteReceipt>;
+    listKnowledgeReviewBatches(workspaceId: string, options?: KnowledgeReviewBatchListRequest): Promise<KnowledgeReviewBatchListResponse>;
+    /** Atomically review up to 100 selected entries, including their pending dependencies. */
+    reviewKnowledgeEntries(workspaceId: string, request: KnowledgeEntryBatchReviewRequest): Promise<{
+        receipts: KnowledgeEntryWriteReceipt[];
+    }>;
+    listKnowledgeEntryHistory(workspaceId: string, entryId: string, beforeRevision?: number): Promise<{
+        entries: KnowledgeEntryListResponse["entries"];
+        beforeRevision: number | null;
+    }>;
+    restoreKnowledgeEntry(workspaceId: string, request: KnowledgeEntryRestoreRequest): Promise<KnowledgeEntryWriteReceipt>;
+    archiveKnowledgeEntry(workspaceId: string, entryId: string, request: {
+        operationId: string;
+        expectedVersion: number;
+    }): Promise<KnowledgeEntryWriteReceipt>;
+    getAgentLearningSettings(workspaceId: string, scope: "workspace" | "personal" | "context", source?: AgentLearningContext): Promise<AgentLearningSettingsRecord>;
+    saveAgentLearningSettings(workspaceId: string, request: SaveAgentLearningSettingsRequest): Promise<AgentLearningSettingsRecord>;
+    listAgentLearningOverrides(workspaceId: string, scope: "workspace" | "personal"): Promise<AgentLearningOverrideRecord[]>;
+    reviewAgentInstruction(workspaceId: string, request: AgentInstructionReviewRequest): Promise<AgentInstructionReceipt>;
+    listAgentInstructionReviews(workspaceId: string, cursor?: string): Promise<AgentInstructionReviewListResponse>;
     /** Deep-merge a settings patch into the workspace (preserves unknown keys). */
     updateWorkspaceSettings(workspaceId: string, request: UpdateWorkspaceSettingsRequest): Promise<Workspace>;
     setWorkspaceDefaultRig(workspaceId: string, request: SetWorkspaceDefaultRigRequest): Promise<Workspace>;
-    /** Built-in + registered packs, with the workspace's installations. */
-    listPacks(workspaceId: string): Promise<ListPacksResponse>;
-    /** Register (or replace) a workspace-scoped pack from a manifest. */
-    registerPack(workspaceId: string, manifest: RegisterCapabilityPackRequest): Promise<WorkspaceRegisteredPack>;
-    getPack(workspaceId: string, packId: string): Promise<GetPackResponse>;
-    enablePack(workspaceId: string, packId: string, request?: EnablePackRequest): Promise<PackInstallation>;
     /** Resolve pinned components, Variable Set, and Rig requirements before installation. */
-    previewPackInstallation(workspaceId: string, packId: string, request?: PreviewPackInstallationRequest): Promise<PackInstallationPreview>;
-    /** Install, update, or repair a Pack from an exact previewed manifest. */
-    installPack(workspaceId: string, packId: string, request: InstallPackRequest): Promise<PackInstallation>;
-    /** Preview which Pack-owned components will be retained by other owners. */
-    previewPackUninstall(workspaceId: string, packId: string): Promise<PackUninstallPreview>;
-    /** Safely release Pack ownership and disable only now-ownerless components. */
-    uninstallPack(workspaceId: string, packId: string, request: UninstallPackRequest): Promise<UninstallPackResult>;
-    /** Unregister a workspace-scoped pack (built-in packs cannot be deleted). */
-    deletePack(workspaceId: string, packId: string): Promise<void>;
-    listPackInstallations(workspaceId: string): Promise<PackInstallation[]>;
     listCapabilities(workspaceId: string): Promise<CapabilityCatalogResponse>;
     /** Add a manual capability catalog item (e.g. a remote MCP server). */
     createCapability(workspaceId: string, request: CreateCapabilityCatalogItemRequest): Promise<CapabilityCatalogItem>;
+    getConnectorToolPermissions(workspaceId: string, capabilityId: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<ConnectorToolPermissionsResponse>;
+    updateConnectorToolPermissions(workspaceId: string, capabilityId: string, request: UpdateConnectorToolPermissionsRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<{
+        saved: boolean;
+    }>;
     enableCapability(workspaceId: string, capabilityId: string, request?: EnableCapabilityRequest): Promise<CapabilityInstallation>;
     disableCapability(workspaceId: string, capabilityId: string): Promise<CapabilityInstallation>;
+    /** Read-only, permission-filtered workspace or session output discovery. */
+    listArtifactCatalog(workspaceId: string, options?: ArtifactCatalogListOptions & {
+        signal?: AbortSignal;
+    }): Promise<ArtifactCatalogListResponse>;
+    listWorkspaceArtifacts(workspaceId: string, options?: WorkspaceArtifactListOptions & {
+        signal?: AbortSignal;
+    }): Promise<WorkspaceArtifactListResponse>;
+    getWorkspaceArtifact(workspaceId: string, artifactId: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<WorkspaceArtifactDetailResponse>;
+    /** Display-only HTML delivery: do not download the retained source bundle to render a Site. */
+    getWorkspaceArtifactHtml(workspaceId: string, artifactId: string, options: {
+        versionId: string;
+        signal?: AbortSignal;
+    }): Promise<string>;
+    rollbackWorkspaceArtifact(workspaceId: string, artifactId: string, request: RollbackWorkspaceArtifactRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<WorkspaceArtifactMutationResponse>;
+    setWorkspaceArtifactStatus(workspaceId: string, artifactId: string, request: SetWorkspaceArtifactStatusRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<WorkspaceArtifactMutationResponse>;
     /** Search the official MCP registry for installable capabilities. */
     discoverMcpCapabilities(workspaceId: string, options?: {
         query?: string;
         limit?: number;
     }): Promise<DiscoverMcpCapabilitiesResponse>;
+    discoverPlugins(workspaceId: string, options?: {
+        id?: string;
+        query?: string;
+        provider?: string;
+        offset?: number;
+    }): Promise<import("@opengeni/contracts").PluginDiscoveryPage>;
+    inspectMcpAuthentication(workspaceId: string, url: string): Promise<{
+        kind: "oauth2" | "none" | "unknown";
+        message?: string;
+    }>;
     /** List installed protocol-neutral OpenAPI and GraphQL Integrations. */
     listApiIntegrations(workspaceId: string): Promise<ListApiIntegrationsResponse>;
-    /** List curated provider presets without exposing deployment OAuth credentials. */
-    listApiIntegrationPresets(workspaceId: string): Promise<ListApiIntegrationPresetsResponse>;
+    /** List curated provider definitions without exposing deployment OAuth credentials. */
+    listIntegrationDefinitions(workspaceId: string): Promise<ListIntegrationDefinitionsResponse>;
     /** Detect and compile an Integration without mutating workspace state. */
     previewApiIntegration(workspaceId: string, request: PreviewApiIntegrationRequest): Promise<ApiIntegrationPreview>;
-    /** Start a signed PKCE OAuth flow for a built-in Google or Microsoft preset. */
+    /** Start a signed PKCE OAuth flow for a built-in Google or Microsoft definition. */
     startApiIntegrationOAuth(workspaceId: string, request: ApiIntegrationOAuthStartRequest): Promise<OAuthStartResponse>;
     /** Install only the exact immutable revision and digest accepted in preview. */
     installApiIntegration(workspaceId: string, request: InstallApiIntegrationRequest): Promise<InstalledApiIntegration>;
@@ -739,21 +1271,22 @@ export declare class OpenGeniClient {
     /** Remove one Integration instance without deleting its Connection or sibling instances. */
     uninstallApiIntegration(workspaceId: string, capabilityId: string, instanceKey: string, request: UninstallApiIntegrationRequest): Promise<UninstallApiIntegrationResult>;
     /** List immutable provider facets and their exact per-account bindings. */
-    listIntegrationFeatures(workspaceId: string, capabilityId: string, instanceKey: string): Promise<IntegrationInstanceFeaturesResponse>;
-    /** Configure or OCC-update one adapter-owned feature on an Integration instance. */
-    configureIntegrationFeature(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: UpsertIntegrationFeatureRequest): Promise<IntegrationFeatureMutationResult>;
+    listIntegrationFacets(workspaceId: string, capabilityId: string, instanceKey: string): Promise<IntegrationInstanceFacetsResponse>;
+    /** Configure or OCC-update one adapter-owned facet on an Integration instance. */
+    configureIntegrationFacet(workspaceId: string, capabilityId: string, instanceKey: string, facetKey: string, request: UpsertIntegrationFacetRequest): Promise<IntegrationFacetMutationResult>;
     /** Browse source metadata through one exact Google Drive Integration instance. */
-    browseGoogleDriveIntegrationSource(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, options?: {
+    browseGoogleDriveFacetSource(workspaceId: string, capabilityId: string, instanceKey: string, facetKey: string, options?: {
         parentId?: string | undefined;
         pageToken?: string | undefined;
     }): Promise<GoogleDriveBrowseResponse>;
     /** Verify and bind document sources to one exact Google Drive Integration instance. */
-    saveGoogleDriveIntegrationSource(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: SaveGoogleDriveIntegrationSourceRequest): Promise<IntegrationFeatureMutationResult>;
-    pauseIntegrationFeature(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: MutateIntegrationFeatureRequest): Promise<IntegrationFeatureMutationResult>;
-    resumeIntegrationFeature(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: MutateIntegrationFeatureRequest): Promise<IntegrationFeatureMutationResult>;
-    removeIntegrationFeature(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: MutateIntegrationFeatureRequest): Promise<IntegrationFeatureRemovalResult>;
-    private mutateIntegrationFeatureLifecycle;
+    saveGoogleDriveFacetSource(workspaceId: string, capabilityId: string, instanceKey: string, facetKey: string, request: SaveGoogleDriveIntegrationSourceRequest): Promise<IntegrationFacetMutationResult>;
+    pauseIntegrationFacet(workspaceId: string, capabilityId: string, instanceKey: string, facetKey: string, request: MutateIntegrationFacetRequest): Promise<IntegrationFacetMutationResult>;
+    resumeIntegrationFacet(workspaceId: string, capabilityId: string, instanceKey: string, facetKey: string, request: MutateIntegrationFacetRequest): Promise<IntegrationFacetMutationResult>;
+    removeIntegrationFacet(workspaceId: string, capabilityId: string, instanceKey: string, facetKey: string, request: MutateIntegrationFacetRequest): Promise<IntegrationFacetRemovalResult>;
+    private mutateIntegrationFacetLifecycle;
     previewPlugin(workspaceId: string, request: PreviewPluginRequest): Promise<PluginPreview>;
+    getInstalledPluginDetails(workspaceId: string, pluginKey: string): Promise<import("@opengeni/contracts").PluginDiscoveryItem>;
     listInstalledPlugins(workspaceId: string): Promise<ListInstalledPluginsResponse>;
     installPlugin(workspaceId: string, request: InstallPluginRequest): Promise<InstalledPlugin>;
     previewPluginUninstall(workspaceId: string, pluginKey: string): Promise<PluginUninstallPreview>;
@@ -762,16 +1295,64 @@ export declare class OpenGeniClient {
     previewSkillImport(workspaceId: string, request: PreviewSkillImportRequest): Promise<SkillImportPreview>;
     /** Install only the exact commit and full-content digest accepted during preview. */
     installSkill(workspaceId: string, request: InstallSkillRequest): Promise<InstalledSkill>;
+    /** List Skills from the authoritative Plugin/Skill-Facet installation ledger. */
+    listInstalledSkills(workspaceId: string): Promise<ListInstalledSkillsResponse>;
+    /** Shared authored/installed catalog metadata. File bodies are read on demand. */
+    listWorkspaceSkills(workspaceId: string, options?: {
+        cursor?: string;
+        limit?: number;
+        sessionId?: string;
+    }): Promise<{
+        skills: SkillSummary[];
+        nextCursor: string | null;
+    }>;
+    readWorkspaceSkill(workspaceId: string, skillId: string, revisionId?: string): Promise<SkillRecord>;
+    saveWorkspaceSkill(workspaceId: string, request: SaveWorkspaceSkillRequest): Promise<SkillWriteReceipt>;
+    /** Permanently remove a personal/workspace Skill and all its saved revisions. */
+    removeWorkspaceSkill(workspaceId: string, skillId: string, request: RemoveWorkspaceSkillRequest): Promise<SkillWriteReceipt>;
+    approveWorkspaceSkill(workspaceId: string, skillId: string, request: ApplyWorkspaceSkillRevisionRequest): Promise<SkillWriteReceipt>;
+    restoreWorkspaceSkill(workspaceId: string, skillId: string, request: ApplyWorkspaceSkillRevisionRequest): Promise<SkillWriteReceipt>;
+    rejectWorkspaceSkill(workspaceId: string, skillId: string, request: ApplyWorkspaceSkillRevisionRequest): Promise<SkillWriteReceipt>;
+    /** Install one exact reviewed curated-library Skill through the Skill domain. */
+    installLibrarySkill(workspaceId: string, libraryId: string, request: InstallLibrarySkillRequest): Promise<InstalledSkill>;
     previewSkillUninstall(workspaceId: string, capabilityId: string): Promise<SkillUninstallPreview>;
     /** Remove the direct owner under an optimistic installation-version fence. */
     uninstallSkill(workspaceId: string, capabilityId: string, request: UninstallSkillRequest): Promise<UninstallSkillResult>;
+    /** This authenticated user's accounts across the organization, plus current-workspace shared accounts.
+     * Inactive accounts are opt-in for settings display; execution pickers keep the active default. */
+    listOwnConnectionAccounts(workspaceId: string, options?: {
+        includeInactive?: boolean;
+    }): Promise<ConnectionMetadata[]>;
     listConnections(workspaceId: string): Promise<ConnectionMetadata[]>;
+    /** Secret-free status for the caller's exact personal GitHub connection. */
+    personalGitHubStatus(workspaceId: string): Promise<PersonalGitHubConnectionStatusResponse>;
+    /** Start the dedicated personal GitHub authorization-code + PKCE flow. */
+    startPersonalGitHubOAuth(workspaceId: string, request?: Omit<PersonalGitHubOAuthStartRequest, "connectionId">): Promise<PersonalGitHubOAuthStartResponse>;
+    /** Re-authorize one exact personal GitHub Connection generation in place. */
+    reconnectPersonalGitHub(workspaceId: string, connectionId: string, request?: Omit<PersonalGitHubOAuthStartRequest, "connectionId">): Promise<PersonalGitHubOAuthStartResponse>;
+    /** Revoke one exact generation through an idempotent owner-only disconnect. */
+    disconnectPersonalGitHub(workspaceId: string, connectionId: string, request: PersonalGitHubDisconnectRequest): Promise<ConnectionMetadata>;
+    /** Browse one bounded page of repositories visible to one exact owner connection. */
+    listPersonalGitHubRepositories(workspaceId: string, connectionId: string, options?: ListPersonalGitHubRepositoriesOptions): Promise<ListPersonalGitHubRepositoriesResponse>;
+    /** Atomically replace the exact owner connection's selected repository set. */
+    replacePersonalGitHubRepositorySelections(workspaceId: string, connectionId: string, request: ReplacePersonalGitHubRepositorySelectionsRequest): Promise<PersonalGitHubRepositorySelectionState>;
+    /** Revalidate every selected repository without accepting provider URLs from the caller. */
+    verifyPersonalGitHubRepositorySelections(workspaceId: string, connectionId: string, request: VerifyPersonalGitHubRepositorySelectionsRequest): Promise<PersonalGitHubRepositorySelectionState>;
     /** List the secret-free Slack team -> OpenGeni tenant routing authority. */
     listSlackInstallationBindings(workspaceId: string): Promise<SlackInstallationBinding[]>;
     createConnection(workspaceId: string, request: CreateConnectionRequest): Promise<ConnectionMetadata>;
+    /**
+     * Verify a pasted Fiken personal API token and store it as the
+     * workspace-shared Fiken connection (or rewrite an existing one in place).
+     */
+    installFikenConnection(workspaceId: string, request: FikenInstallRequest): Promise<ConnectionMetadata>;
+    /** Start the Fiken OAuth flow for the workspace-shared Fiken connection. */
+    startFikenOAuth(workspaceId: string, request?: FikenOAuthStartRequest): Promise<FikenOAuthStartResponse>;
     /** Start the public Slack installation flow for the workspace-shared OpenGeni bot. */
     startOpenGeniSlackBotInstall(workspaceId: string, request?: OpenGeniSlackBotInstallRequest): Promise<OpenGeniSlackBotInstallStart>;
     listOpenGeniSlackReactionChannels(workspaceId: string, connectionId: string, cursor?: string): Promise<SlackReactionChannelListResponse>;
+    listOpenGeniSlackChannelRoutes(workspaceId: string, connectionId: string): Promise<SlackChannelRouteListResponse>;
+    updateOpenGeniSlackChannelRoutes(workspaceId: string, request: UpdateSlackChannelRoutesRequest): Promise<void>;
     updateConnection(workspaceId: string, connectionId: string, request: UpdateConnectionRequest): Promise<ConnectionMetadata>;
     deleteConnection(workspaceId: string, connectionId: string): Promise<ConnectionMetadata>;
     disconnectGoogleDriveConnection(workspaceId: string, connectionId: string, request: GoogleDriveDisconnectRequest): Promise<ConnectionMetadata>;
@@ -790,6 +1371,9 @@ export declare class OpenGeniClient {
     disconnectSocialConnection(workspaceId: string, connectionId: string): Promise<SocialConnection>;
     /** Public, immutably-cached URL for a catalog item's logo, or null when the item has none. */
     catalogAssetUrl(logoAssetPath: string | null): string | null;
+    /** Read a passive catalog mark through this client's authenticated transport.
+     * Useful when an embedding backend protects even public upstream assets. */
+    downloadCatalogAsset(logoAssetPath: string, options?: OpenGeniRequestOptions): Promise<Blob>;
     /** GitHub App server configuration plus truthful workspace binding status. */
     getGitHubApp(workspaceId: string, options?: {
         returnPath?: string;
@@ -797,6 +1381,10 @@ export declare class OpenGeniClient {
     /** Build the GitHub owner-consent entry URL for fresh workspace-bound state. */
     githubConnectUrl(workspaceId: string, state: string): string;
     listGitHubRepositories(workspaceId: string): Promise<GitHubRepositoriesResponse>;
+    /** Effective confirmation policy for each GitHub identity available to this caller. */
+    getGitHubActionPolicies(workspaceId: string): Promise<GitHubActionPoliciesResponse>;
+    /** Change one GitHub action group without broadening review or merge policy. */
+    updateGitHubActionPolicy(workspaceId: string, request: UpdateGitHubActionPolicyRequest): Promise<GitHubActionPolicyActorState>;
     /** Re-sync the installation's repository list from GitHub. */
     syncGitHubRepositories(workspaceId: string): Promise<GitHubRepositoriesResponse>;
     /** Remove one workspace binding without uninstalling the GitHub App itself. */
@@ -808,9 +1396,69 @@ export declare class OpenGeniClient {
     createApiKey(workspaceId: string, request: CreateApiKeyRequest): Promise<CreateApiKeyResponse>;
     /** Revoke an API key. Returns the revoked key. */
     deleteApiKey(workspaceId: string, apiKeyId: string): Promise<ApiKey>;
+    listOrganizationApiKeys(organizationId: string): Promise<ApiKey[]>;
+    /** The returned `token` is shown once; only its prefix is stored. */
+    createOrganizationApiKey(organizationId: string, request: CreateOrganizationApiKeyRequest): Promise<CreateApiKeyResponse>;
+    /** Revoke an organization-scoped API key. Returns the revoked key. */
+    deleteOrganizationApiKey(organizationId: string, apiKeyId: string): Promise<ApiKey>;
+    /**
+     * Agents people connected to the organization MCP server (`/v1/mcp`).
+     * Everyone sees their own; owners and admins see everyone's. Browser only:
+     * keys and agents are refused, so an agent can't widen its own access.
+     */
+    listOrganizationMcpConnections(organizationId: string): Promise<OrganizationMcpConnectionList>;
+    /** Change what a connected agent can do and where; its next request uses it. Only its person. */
+    updateOrganizationMcpConnection(organizationId: string, connectionId: string, request: UpdateOrganizationMcpConnectionRequest): Promise<OrganizationMcpConnection>;
+    /** Disconnect an agent: every token it holds is refused from now on. */
+    deleteOrganizationMcpConnection(organizationId: string, connectionId: string): Promise<void>;
+    /** Service accounts: organization identities with no person behind them. */
+    listOrganizationServiceAccounts(organizationId: string): Promise<ListOrganizationServiceAccountsResponse>;
+    getOrganizationServiceAccount(organizationId: string, serviceAccountId: string): Promise<OrganizationServiceAccount>;
+    /** Create a service account; give it keys with `createOrganizationApiKey({ serviceAccountId })`. */
+    createOrganizationServiceAccount(organizationId: string, request: CreateOrganizationServiceAccountRequest): Promise<OrganizationServiceAccount>;
+    /** Rename it or change its role; making it a member narrows its keys at once. */
+    updateOrganizationServiceAccount(organizationId: string, serviceAccountId: string, request: UpdateOrganizationServiceAccountRequest): Promise<OrganizationServiceAccount>;
+    /** Delete a service account; every key it holds is revoked at once. */
+    deleteOrganizationServiceAccount(organizationId: string, serviceAccountId: string): Promise<void>;
+    /** The pending sign-in an agent started; read by the web app's sign-in page. */
+    getMcpConnectionRequest(requestToken: string): Promise<McpConnectionRequest>;
+    /** Allow or deny an agent's sign-in. Returns where to send the browser next. */
+    answerMcpConnectionRequest(requestToken: string, decision: McpConnectionDecision): Promise<{
+        redirectTo: string;
+    }>;
+    /**
+     * One page of sessions across every shared workspace of the organization the
+     * caller may read within its live workspace scope (an organization API key or
+     * organization owner). Each row carries its `workspaceId`; read events,
+     * history, and files through the ordinary workspace methods. Personal
+     * workspaces are never included and private sessions stay invisible.
+     */
+    listOrganizationSessions(organizationId: string, options?: ListOrganizationSessionsOptions): Promise<OrganizationSessionListResponse>;
+    /**
+     * Every session `listOrganizationSessions` would return, following
+     * `nextCursor` page by page until the organization is exhausted. A page may
+     * be shorter than `limit` while more pages remain, so callers must not treat
+     * a short page as the end.
+     */
+    iterateOrganizationSessions(organizationId: string, options?: Omit<ListOrganizationSessionsOptions, "cursor">): AsyncGenerator<Session, void, undefined>;
     getBilling(options?: {
         accountId?: string;
     }): Promise<BillingSummary>;
+    getOrganizationUsageSummary(options: {
+        accountId: string;
+        period?: import("@opengeni/contracts").OrganizationUsagePeriod;
+    }, requestOptions?: OpenGeniRequestOptions): Promise<import("@opengeni/contracts").OrganizationUsageSummary>;
+    getOrganizationModelUsage(options: {
+        accountId: string;
+        period?: import("@opengeni/contracts").OrganizationUsagePeriod;
+        afterWorkspaceId?: string;
+    }, requestOptions?: OpenGeniRequestOptions): Promise<import("@opengeni/contracts/organization-model-usage").OrganizationModelUsage>;
+    getOrganizationUsageWorkspacePage(options: {
+        accountId: string;
+        period?: import("@opengeni/contracts").OrganizationUsagePeriod;
+        until: string;
+        afterWorkspaceId?: string;
+    }, requestOptions?: OpenGeniRequestOptions): Promise<import("@opengeni/contracts").OrganizationUsageWorkspacePage>;
     getBillingUsage(options?: {
         accountId?: string;
         workspaceId?: string;
@@ -819,12 +1467,39 @@ export declare class OpenGeniClient {
         range?: InsightsRange;
         provider?: string;
         model?: string;
+        rootSessionId?: string;
+        sessionId?: string;
+        signal?: AbortSignal;
     }): Promise<WorkspaceInsightsResponse>;
     getBillingEntitlements(options?: {
         accountId?: string;
     }): Promise<BillingEntitlementsResponse>;
     /** Start a Stripe checkout for prepaid credits. */
     createBillingCheckout(request: CreateCheckoutRequest): Promise<CreateCheckoutResponse>;
+    /**
+     * Where one checkout stands, and whether its credits reached the balance.
+     * Poll it after the customer returns from Stripe Checkout.
+     */
+    getBillingCheckout(checkoutSessionId: string, options?: {
+        accountId?: string;
+    }): Promise<BillingCheckoutStatus>;
+    /** Open Stripe's hosted portal for invoices and payment information. */
+    createBillingPortalSession(request?: CreateBillingPortalRequest): Promise<CreateBillingPortalResponse>;
+    /** The URL of an API path on this client's base (relative when the base is relative). */
+    apiUrl(path: string): string;
+    /**
+     * A client of the same class that adds `headers` to every request, keeping
+     * this client's base URL, fetch, credentials, and actor attribution. Used to
+     * scope a surface (for example an artifact viewer) to one host context.
+     */
+    withHeaders(headers: Readonly<Record<string, string>>): this;
+    /**
+     * Fetch an absolute URL under this client's base URL through its fetch and
+     * headers. For transports the SDK builds itself (the editable-artifact live
+     * transport), so host authentication stays in one place. A URL outside the
+     * base is refused: credentials never leave the configured API.
+     */
+    fetchApi(input: string | URL, init?: RequestInit): Promise<Response>;
     private headers;
     private url;
     /** Connection state + the codex models the workspace may select (empty until connected). */
@@ -849,6 +1524,8 @@ export declare class OpenGeniClient {
     }>;
     /** List every connected Codex account + the workspace active pointer + settings. */
     listCodexAccounts(workspaceId: string): Promise<CodexAccountsResponse>;
+    /** Session-authorized retry choices plus the current accepted account. */
+    listSessionCodexAccounts(workspaceId: string, sessionId: string): Promise<SessionCodexAccountsResponse>;
     /** Switch the workspace ACTIVE Codex account (the one unpinned sessions use). */
     activateCodexAccount(workspaceId: string, accountId: string): Promise<{
         activated: boolean;
@@ -876,14 +1553,73 @@ export declare class OpenGeniClient {
     }>;
     /** Rename a Codex account (label only in P1). */
     renameCodexAccount(workspaceId: string, accountId: string, label: string | null): Promise<CodexAccount>;
-    /** Pin (or unpin via "auto") a session's Codex account. Applies on the next turn. */
+    /** Pin/unpin a Codex account. Overrides a capacity-blocked turn; otherwise applies next turn. */
     pinSessionCodexAccount(workspaceId: string, sessionId: string, target: string): Promise<{
         pinned: string;
+        appliedTo?: "waiting_turn" | "next_turn";
+    }>;
+    /** Organization subscription management requires an administrator browser session. */
+    getModelConnectionAccess(target: {
+        scope: "organizations" | "workspaces";
+        scopeId: string;
+        kind: "codex" | "supergrok" | "vercel_gateway" | "openrouter" | "anthropic" | "claude_subscription";
+        connectionId: string;
+    }): Promise<ModelConnectionAccessResponse>;
+    updateModelConnectionAccess(target: {
+        scope: "organizations" | "workspaces";
+        scopeId: string;
+        kind: "codex" | "supergrok" | "vercel_gateway" | "openrouter" | "anthropic" | "claude_subscription";
+        connectionId: string;
+    }, policy: ModelConnectionAccessPolicy): Promise<ModelConnectionAccessPolicy>;
+    listOrganizationSuperGrokAccounts(organizationId: string): Promise<SuperGrokAccountsResponse>;
+    organizationSupergrokConnectStart(organizationId: string): Promise<SuperGrokConnectStart>;
+    organizationSupergrokConnectPoll(organizationId: string, state: string): Promise<SuperGrokConnectPoll>;
+    activateOrganizationSuperGrokAccount(organizationId: string, accountId: string): Promise<{
+        updated: boolean;
+    }>;
+    setOrganizationSuperGrokRotationSettings(organizationId: string, patch: {
+        rotationEnabled: boolean;
+    }): Promise<SuperGrokRotationSettings>;
+    setOrganizationSuperGrokAccountAllocator(organizationId: string, accountId: string, input: {
+        enabled: boolean;
+        expectedVersion: number;
+    }): Promise<{
+        updated: boolean;
     }>;
+    renameOrganizationSuperGrokAccount(organizationId: string, accountId: string, label: string | null): Promise<{
+        updated: boolean;
+    }>;
+    disconnectOrganizationSuperGrokAccount(organizationId: string, accountId: string): Promise<{
+        disconnected: boolean;
+    }>;
+    supergrokStatus(workspaceId: string): Promise<SuperGrokConnectionStatus>;
+    supergrokConnectStart(workspaceId: string, scope?: Exclude<SuperGrokAccountScope, "organization">): Promise<SuperGrokConnectStart>;
+    supergrokConnectPoll(workspaceId: string, state: string): Promise<SuperGrokConnectPoll>;
+    listSuperGrokAccounts(workspaceId: string): Promise<SuperGrokAccountsResponse>;
+    activateSuperGrokAccount(workspaceId: string, accountId: string): Promise<{
+        activated: boolean;
+        accountId: string;
+    }>;
+    setSuperGrokRotationSettings(workspaceId: string, patch: {
+        rotationEnabled: boolean;
+    }): Promise<SuperGrokRotationSettings>;
+    setSuperGrokAccountAllocator(workspaceId: string, accountId: string, input: {
+        enabled: boolean;
+        expectedVersion: number;
+    }): Promise<SuperGrokAllocatorUpdate>;
+    renameSuperGrokAccount(workspaceId: string, accountId: string, label: string | null): Promise<SuperGrokAccount>;
+    disconnectSuperGrokAccount(workspaceId: string, accountId: string): Promise<{
+        disconnected: boolean;
+        newActiveId: string | null;
+    }>;
+    /** Contract-checked JSON transport shared by opt-in typed SDK clients. */
+    private requestSessionCommand;
     /** Contract-checked JSON transport shared by opt-in typed SDK clients. */
     requestJson<T>(method: string, path: string, body?: unknown, query?: Record<string, string>, options?: OpenGeniRequestOptions): Promise<T>;
     /** Authenticated, contract-checked response for bounded streaming downloads. */
-    protected requestResponse(method: string, path: string, query?: Record<string, string>, options?: OpenGeniRequestOptions): Promise<Response>;
-    /** Like `requestJson` for endpoints that respond with no body (204). */
-    private requestVoid;
+    protected requestResponse(method: string, path: string, query?: Record<string, string>, options?: OpenGeniRequestOptions & {
+        accept?: string;
+    }): Promise<FetchResponse>;
+    /** Contract-checked transport shared by opt-in typed SDK clients for 204 responses. */
+    requestVoid(method: string, path: string, body?: unknown): Promise<void>;
 }