@opengeni/sdk 0.52.1 → 1.0.0

package/dist/usage-allowances.d.ts

@@ -0,0 +1,36 @@
+import type { OpenGeniClient, OpenGeniRequestOptions } from "./client.js";
+import type { ClearWorkspaceAllowanceRequest, ClearWorkspaceAllowanceResponse, GetMyUsageRequest, GetUsageRequest, GrantWorkspaceCreditsRequest, MemberAllowance, SetMemberAllowanceRequest, SetWorkspaceAllowanceRequest, WorkspaceAllowance, WorkspaceAllowanceState, WorkspaceCreditGrant, WorkspaceUsageResponse } from "@opengeni/contracts/usage-allowances";
+export type { AllowanceExhaustedRefusal, ClearWorkspaceAllowanceRequest, ClearWorkspaceAllowanceResponse, GetMyUsageRequest, GetUsageRequest, GrantWorkspaceCreditsRequest, MemberAllowance, MemberAllowanceDefault, MemberAllowanceRule, MemberAllowanceUsage, SetMemberAllowanceRequest, SetWorkspaceAllowanceRequest, UsageAllowancePeriod, UsageAllowanceStatus, UsageAllowanceWindow, WorkspaceAllowance, WorkspaceAllowanceConfig, WorkspaceAllowanceState, WorkspaceAllowanceUsage, WorkspaceCreditGrant, WorkspaceUsageResponse, } from "@opengeni/contracts/usage-allowances";
+/** The one client capability these functions need. */
+export type UsageAllowanceRequestClient = Pick<OpenGeniClient, "requestJson">;
+/** A member target: canonical subject id, or an external identity. */
+export type UsageAllowanceMemberTarget = string | {
+    source: string;
+    externalId: string;
+};
+/** Query strings for usage reads: only defined values, stringified. */
+export declare function usageAllowanceQuery(query: GetUsageRequest): Record<string, string>;
+/** Configuration, or null when no ceiling is configured. Budget-read authority. */
+export declare function getWorkspaceAllowance(client: UsageAllowanceRequestClient, workspaceId: string): Promise<WorkspaceAllowance | null>;
+/** Lifecycle version plus configuration; version survives a clear. Budget-read authority. */
+export declare function getWorkspaceAllowanceState(client: UsageAllowanceRequestClient, workspaceId: string): Promise<WorkspaceAllowanceState>;
+/**
+ * Set the workspace ceiling with exact-version compare-and-set. Requires a
+ * verified organization administrator or a full-access organization key.
+ */
+export declare function setWorkspaceAllowance(client: UsageAllowanceRequestClient, workspaceId: string, request: SetWorkspaceAllowanceRequest): Promise<WorkspaceAllowance>;
+/** Remove the ceiling (not a refund or counter reset). Returns the next lifecycle version. */
+export declare function clearWorkspaceAllowance(client: UsageAllowanceRequestClient, workspaceId: string, request: ClearWorkspaceAllowanceRequest): Promise<ClearWorkspaceAllowanceResponse>;
+/** One-off credits on top of the included amount. Reuse the operationId to retry. */
+export declare function grantWorkspaceCredits(client: UsageAllowanceRequestClient, workspaceId: string, request: GrantWorkspaceCreditsRequest): Promise<WorkspaceCreditGrant>;
+/**
+ * Set or restore (`rule: null`) one member's ceiling with exact-version CAS.
+ * Shares may oversubscribe the pool; the workspace ceiling still binds.
+ */
+export declare function setMemberAllowance(client: UsageAllowanceRequestClient, workspaceId: string, member: UsageAllowanceMemberTarget, request: SetMemberAllowanceRequest): Promise<MemberAllowance>;
+/** The paginated roster page. Workspace admin, organization admin, or org-key read. */
+export declare function getUsage(client: UsageAllowanceRequestClient, workspaceId: string, query?: GetUsageRequest, options?: OpenGeniRequestOptions): Promise<WorkspaceUsageResponse>;
+/** The caller's own row plus the workspace aggregate. Any authenticated member. */
+export declare function getMyUsage(client: UsageAllowanceRequestClient, workspaceId: string, query?: GetMyUsageRequest, options?: OpenGeniRequestOptions): Promise<WorkspaceUsageResponse>;
+/** Every roster page for one period (follows `nextCursor`). */
+export declare function getAllUsage(client: UsageAllowanceRequestClient, workspaceId: string, query?: Omit<GetUsageRequest, "cursor">, options?: OpenGeniRequestOptions): Promise<WorkspaceUsageResponse>;

package/dist/usage-allowances.js

@@ -0,0 +1,80 @@
+// src/usage-allowances.ts
+function workspacePath(workspaceId) {
+  return `/v1/workspaces/${encodeURIComponent(workspaceId)}`;
+}
+function usageAllowanceQuery(query) {
+  return Object.fromEntries(
+    Object.entries(query).filter(([, value]) => value !== void 0).map(([key, value]) => [key, String(value)])
+  );
+}
+async function getWorkspaceAllowance(client, workspaceId) {
+  return await client.requestJson("GET", `${workspacePath(workspaceId)}/allowance`);
+}
+async function getWorkspaceAllowanceState(client, workspaceId) {
+  return await client.requestJson("GET", `${workspacePath(workspaceId)}/allowance/state`);
+}
+async function setWorkspaceAllowance(client, workspaceId, request) {
+  return await client.requestJson("PUT", `${workspacePath(workspaceId)}/allowance`, request);
+}
+async function clearWorkspaceAllowance(client, workspaceId, request) {
+  return await client.requestJson("DELETE", `${workspacePath(workspaceId)}/allowance`, request);
+}
+async function grantWorkspaceCredits(client, workspaceId, request) {
+  return await client.requestJson(
+    "POST",
+    `${workspacePath(workspaceId)}/allowance/grants`,
+    request
+  );
+}
+async function setMemberAllowance(client, workspaceId, member, request) {
+  const path = typeof member === "string" ? encodeURIComponent(member) : `external/${encodeURIComponent(member.source)}/${encodeURIComponent(member.externalId)}`;
+  return await client.requestJson(
+    "PUT",
+    `${workspacePath(workspaceId)}/members/${path}/allowance`,
+    request
+  );
+}
+async function getUsage(client, workspaceId, query = {}, options = {}) {
+  return await client.requestJson(
+    "GET",
+    `${workspacePath(workspaceId)}/usage`,
+    void 0,
+    usageAllowanceQuery(query),
+    options
+  );
+}
+async function getMyUsage(client, workspaceId, query = {}, options = {}) {
+  return await client.requestJson(
+    "GET",
+    `${workspacePath(workspaceId)}/usage/me`,
+    void 0,
+    usageAllowanceQuery(query),
+    options
+  );
+}
+async function getAllUsage(client, workspaceId, query = {}, options = {}) {
+  const first = await getUsage(client, workspaceId, { limit: 200, ...query }, options);
+  const members = [...first.members];
+  let cursor = first.nextCursor;
+  const seen = /* @__PURE__ */ new Set();
+  while (cursor && !seen.has(cursor)) {
+    seen.add(cursor);
+    const page = await getUsage(client, workspaceId, { limit: 200, ...query, cursor }, options);
+    members.push(...page.members);
+    cursor = page.nextCursor;
+  }
+  return { ...first, members, nextCursor: null };
+}
+export {
+  clearWorkspaceAllowance,
+  getAllUsage,
+  getMyUsage,
+  getUsage,
+  getWorkspaceAllowance,
+  getWorkspaceAllowanceState,
+  grantWorkspaceCredits,
+  setMemberAllowance,
+  setWorkspaceAllowance,
+  usageAllowanceQuery
+};
+//# sourceMappingURL=usage-allowances.js.map

package/dist/usage-allowances.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/usage-allowances.ts"],"sourcesContent":["// @opengeni/sdk/usage-allowances — usage allowance reads and administration as\n// free functions over any client's `requestJson`, so a browser console can use\n// them without widening the native browser client. The root `OpenGeniClient`\n// methods of the same names call the same routes.\n//\n// Amounts are integer USD micros (1 USD = 1,000,000). Display `fraction` and\n// `status` in products that must not show money; see docs/usage-allowances.md.\nimport type { OpenGeniClient, OpenGeniRequestOptions } from \"./client\";\nimport type {\n  ClearWorkspaceAllowanceRequest,\n  ClearWorkspaceAllowanceResponse,\n  GetMyUsageRequest,\n  GetUsageRequest,\n  GrantWorkspaceCreditsRequest,\n  MemberAllowance,\n  SetMemberAllowanceRequest,\n  SetWorkspaceAllowanceRequest,\n  WorkspaceAllowance,\n  WorkspaceAllowanceState,\n  WorkspaceCreditGrant,\n  WorkspaceUsageResponse,\n} from \"@opengeni/contracts/usage-allowances\";\n\nexport type {\n  AllowanceExhaustedRefusal,\n  ClearWorkspaceAllowanceRequest,\n  ClearWorkspaceAllowanceResponse,\n  GetMyUsageRequest,\n  GetUsageRequest,\n  GrantWorkspaceCreditsRequest,\n  MemberAllowance,\n  MemberAllowanceDefault,\n  MemberAllowanceRule,\n  MemberAllowanceUsage,\n  SetMemberAllowanceRequest,\n  SetWorkspaceAllowanceRequest,\n  UsageAllowancePeriod,\n  UsageAllowanceStatus,\n  UsageAllowanceWindow,\n  WorkspaceAllowance,\n  WorkspaceAllowanceConfig,\n  WorkspaceAllowanceState,\n  WorkspaceAllowanceUsage,\n  WorkspaceCreditGrant,\n  WorkspaceUsageResponse,\n} from \"@opengeni/contracts/usage-allowances\";\n\n/** The one client capability these functions need. */\nexport type UsageAllowanceRequestClient = Pick<OpenGeniClient, \"requestJson\">;\n\n/** A member target: canonical subject id, or an external identity. */\nexport type UsageAllowanceMemberTarget = string | { source: string; externalId: string };\n\nfunction workspacePath(workspaceId: string): string {\n  return `/v1/workspaces/${encodeURIComponent(workspaceId)}`;\n}\n\n/** Query strings for usage reads: only defined values, stringified. */\nexport function usageAllowanceQuery(query: GetUsageRequest): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(query)\n      .filter(([, value]) => value !== undefined)\n      .map(([key, value]) => [key, String(value)]),\n  );\n}\n\n/** Configuration, or null when no ceiling is configured. Budget-read authority. */\nexport async function getWorkspaceAllowance(\n  client: UsageAllowanceRequestClient,\n  workspaceId: string,\n): Promise<WorkspaceAllowance | null> {\n  return await client.requestJson(\"GET\", `${workspacePath(workspaceId)}/allowance`);\n}\n\n/** Lifecycle version plus configuration; version survives a clear. Budget-read authority. */\nexport async function getWorkspaceAllowanceState(\n  client: UsageAllowanceRequestClient,\n  workspaceId: string,\n): Promise<WorkspaceAllowanceState> {\n  return await client.requestJson(\"GET\", `${workspacePath(workspaceId)}/allowance/state`);\n}\n\n/**\n * Set the workspace ceiling with exact-version compare-and-set. Requires a\n * verified organization administrator or a full-access organization key.\n */\nexport async function setWorkspaceAllowance(\n  client: UsageAllowanceRequestClient,\n  workspaceId: string,\n  request: SetWorkspaceAllowanceRequest,\n): Promise<WorkspaceAllowance> {\n  return await client.requestJson(\"PUT\", `${workspacePath(workspaceId)}/allowance`, request);\n}\n\n/** Remove the ceiling (not a refund or counter reset). Returns the next lifecycle version. */\nexport async function clearWorkspaceAllowance(\n  client: UsageAllowanceRequestClient,\n  workspaceId: string,\n  request: ClearWorkspaceAllowanceRequest,\n): Promise<ClearWorkspaceAllowanceResponse> {\n  return await client.requestJson(\"DELETE\", `${workspacePath(workspaceId)}/allowance`, request);\n}\n\n/** One-off credits on top of the included amount. Reuse the operationId to retry. */\nexport async function grantWorkspaceCredits(\n  client: UsageAllowanceRequestClient,\n  workspaceId: string,\n  request: GrantWorkspaceCreditsRequest,\n): Promise<WorkspaceCreditGrant> {\n  return await client.requestJson(\n    \"POST\",\n    `${workspacePath(workspaceId)}/allowance/grants`,\n    request,\n  );\n}\n\n/**\n * Set or restore (`rule: null`) one member's ceiling with exact-version CAS.\n * Shares may oversubscribe the pool; the workspace ceiling still binds.\n */\nexport async function setMemberAllowance(\n  client: UsageAllowanceRequestClient,\n  workspaceId: string,\n  member: UsageAllowanceMemberTarget,\n  request: SetMemberAllowanceRequest,\n): Promise<MemberAllowance> {\n  const path =\n    typeof member === \"string\"\n      ? encodeURIComponent(member)\n      : `external/${encodeURIComponent(member.source)}/${encodeURIComponent(member.externalId)}`;\n  return await client.requestJson(\n    \"PUT\",\n    `${workspacePath(workspaceId)}/members/${path}/allowance`,\n    request,\n  );\n}\n\n/** The paginated roster page. Workspace admin, organization admin, or org-key read. */\nexport async function getUsage(\n  client: UsageAllowanceRequestClient,\n  workspaceId: string,\n  query: GetUsageRequest = {},\n  options: OpenGeniRequestOptions = {},\n): Promise<WorkspaceUsageResponse> {\n  return await client.requestJson(\n    \"GET\",\n    `${workspacePath(workspaceId)}/usage`,\n    undefined,\n    usageAllowanceQuery(query),\n    options,\n  );\n}\n\n/** The caller's own row plus the workspace aggregate. Any authenticated member. */\nexport async function getMyUsage(\n  client: UsageAllowanceRequestClient,\n  workspaceId: string,\n  query: GetMyUsageRequest = {},\n  options: OpenGeniRequestOptions = {},\n): Promise<WorkspaceUsageResponse> {\n  return await client.requestJson(\n    \"GET\",\n    `${workspacePath(workspaceId)}/usage/me`,\n    undefined,\n    usageAllowanceQuery(query),\n    options,\n  );\n}\n\n/** Every roster page for one period (follows `nextCursor`). */\nexport async function getAllUsage(\n  client: UsageAllowanceRequestClient,\n  workspaceId: string,\n  query: Omit<GetUsageRequest, \"cursor\"> = {},\n  options: OpenGeniRequestOptions = {},\n): Promise<WorkspaceUsageResponse> {\n  const first = await getUsage(client, workspaceId, { limit: 200, ...query }, options);\n  const members = [...first.members];\n  let cursor = first.nextCursor;\n  // Bounded: a cursor that repeats would otherwise loop forever.\n  const seen = new Set<string>();\n  while (cursor && !seen.has(cursor)) {\n    seen.add(cursor);\n    const page = await getUsage(client, workspaceId, { limit: 200, ...query, cursor }, options);\n    members.push(...page.members);\n    cursor = page.nextCursor;\n  }\n  return { ...first, members, nextCursor: null };\n}\n"],"mappings":";AAqDA,SAAS,cAAc,aAA6B;AAClD,SAAO,kBAAkB,mBAAmB,WAAW,CAAC;AAC1D;AAGO,SAAS,oBAAoB,OAAgD;AAClF,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAK,EACjB,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,UAAU,MAAS,EACzC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC;AAAA,EAC/C;AACF;AAGA,eAAsB,sBACpB,QACA,aACoC;AACpC,SAAO,MAAM,OAAO,YAAY,OAAO,GAAG,cAAc,WAAW,CAAC,YAAY;AAClF;AAGA,eAAsB,2BACpB,QACA,aACkC;AAClC,SAAO,MAAM,OAAO,YAAY,OAAO,GAAG,cAAc,WAAW,CAAC,kBAAkB;AACxF;AAMA,eAAsB,sBACpB,QACA,aACA,SAC6B;AAC7B,SAAO,MAAM,OAAO,YAAY,OAAO,GAAG,cAAc,WAAW,CAAC,cAAc,OAAO;AAC3F;AAGA,eAAsB,wBACpB,QACA,aACA,SAC0C;AAC1C,SAAO,MAAM,OAAO,YAAY,UAAU,GAAG,cAAc,WAAW,CAAC,cAAc,OAAO;AAC9F;AAGA,eAAsB,sBACpB,QACA,aACA,SAC+B;AAC/B,SAAO,MAAM,OAAO;AAAA,IAClB;AAAA,IACA,GAAG,cAAc,WAAW,CAAC;AAAA,IAC7B;AAAA,EACF;AACF;AAMA,eAAsB,mBACpB,QACA,aACA,QACA,SAC0B;AAC1B,QAAM,OACJ,OAAO,WAAW,WACd,mBAAmB,MAAM,IACzB,YAAY,mBAAmB,OAAO,MAAM,CAAC,IAAI,mBAAmB,OAAO,UAAU,CAAC;AAC5F,SAAO,MAAM,OAAO;AAAA,IAClB;AAAA,IACA,GAAG,cAAc,WAAW,CAAC,YAAY,IAAI;AAAA,IAC7C;AAAA,EACF;AACF;AAGA,eAAsB,SACpB,QACA,aACA,QAAyB,CAAC,GAC1B,UAAkC,CAAC,GACF;AACjC,SAAO,MAAM,OAAO;AAAA,IAClB;AAAA,IACA,GAAG,cAAc,WAAW,CAAC;AAAA,IAC7B;AAAA,IACA,oBAAoB,KAAK;AAAA,IACzB;AAAA,EACF;AACF;AAGA,eAAsB,WACpB,QACA,aACA,QAA2B,CAAC,GAC5B,UAAkC,CAAC,GACF;AACjC,SAAO,MAAM,OAAO;AAAA,IAClB;AAAA,IACA,GAAG,cAAc,WAAW,CAAC;AAAA,IAC7B;AAAA,IACA,oBAAoB,KAAK;AAAA,IACzB;AAAA,EACF;AACF;AAGA,eAAsB,YACpB,QACA,aACA,QAAyC,CAAC,GAC1C,UAAkC,CAAC,GACF;AACjC,QAAM,QAAQ,MAAM,SAAS,QAAQ,aAAa,EAAE,OAAO,KAAK,GAAG,MAAM,GAAG,OAAO;AACnF,QAAM,UAAU,CAAC,GAAG,MAAM,OAAO;AACjC,MAAI,SAAS,MAAM;AAEnB,QAAM,OAAO,oBAAI,IAAY;AAC7B,SAAO,UAAU,CAAC,KAAK,IAAI,MAAM,GAAG;AAClC,SAAK,IAAI,MAAM;AACf,UAAM,OAAO,MAAM,SAAS,QAAQ,aAAa,EAAE,OAAO,KAAK,GAAG,OAAO,OAAO,GAAG,OAAO;AAC1F,YAAQ,KAAK,GAAG,KAAK,OAAO;AAC5B,aAAS,KAAK;AAAA,EAChB;AACA,SAAO,EAAE,GAAG,OAAO,SAAS,YAAY,KAAK;AAC/C;","names":[]}

package/dist/workspace-artifacts.d.ts

@@ -1,3 +1,12 @@
+import type { ToolGatewayIdentity } from "./types.js";
+export type WorkspaceArtifactSourceFile = {
+    path: string;
+    content: string;
+};
+export type WorkspaceArtifactSourceBundle = {
+    entrypoint: string;
+    files: WorkspaceArtifactSourceFile[];
+};
 export type WorkspaceArtifactVersion = {
     id: string;
     accountId: string;
@@ -5,8 +14,11 @@ export type WorkspaceArtifactVersion = {
     artifactId: string;
     revision: number;
     contentType: "text/html";
-    contentSha256: string;
+    contentSha256: string | null;
     sizeBytes: number;
+    sourceSha256: string | null;
+    sourceSizeBytes: number | null;
+    requestedTools: ToolGatewayIdentity[];
     sourceSessionId: string | null;
     sourceTurnId: string | null;
     sourceAttemptId: string | null;
@@ -32,7 +44,7 @@ export type WorkspaceArtifactEvent = {
     accountId: string;
     workspaceId: string;
     artifactId: string;
-    type: "published" | "rolled_back";
+    type: "published" | "rolled_back" | "archived" | "restored";
     fromVersionId: string | null;
     toVersionId: string;
     sourceSessionId: string | null;
@@ -44,8 +56,10 @@ export type WorkspaceArtifactEvent = {
     createdAt: string;
 };
 export type WorkspaceArtifactListOptions = {
+    sourceSessionId?: string;
     limit?: number;
     cursor?: string;
+    status?: WorkspaceArtifact["status"];
 };
 export type WorkspaceArtifactListResponse = {
     artifacts: WorkspaceArtifact[];
@@ -63,8 +77,10 @@ export type WorkspaceArtifactContentResponse = {
     artifactId: string;
     versionId: string;
     contentType: "text/html";
-    contentSha256: string;
+    contentSha256: string | null;
     html: string;
+    source: WorkspaceArtifactSourceBundle;
+    requestedTools: ToolGatewayIdentity[];
 };
 export type WorkspaceArtifactMutationResponse = {
     artifact: WorkspaceArtifact;
@@ -76,13 +92,19 @@ export type CreateWorkspaceArtifactRequest = {
     slug?: string;
     title: string;
     description?: string | null;
-    html: string;
+    html?: string;
+    uploadId?: string;
+    source?: WorkspaceArtifactSourceBundle;
+    requestedTools?: ToolGatewayIdentity[];
     idempotencyKey: string;
 };
 export type PublishWorkspaceArtifactVersionRequest = {
     title?: string;
     description?: string | null;
-    html: string;
+    html?: string;
+    uploadId?: string;
+    source?: WorkspaceArtifactSourceBundle;
+    requestedTools?: ToolGatewayIdentity[];
     expectedCurrentVersionId: string;
     idempotencyKey: string;
 };
@@ -92,3 +114,9 @@ export type RollbackWorkspaceArtifactRequest = {
     reason: string;
     idempotencyKey: string;
 };
+export type SetWorkspaceArtifactStatusRequest = {
+    status: "active" | "archived";
+    expectedCurrentVersionId: string;
+    reason: string;
+    idempotencyKey: string;
+};

package/dist/workspace-instruction-policies.d.ts

@@ -1,8 +1,8 @@
 export declare const WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262144;
 export type WorkspaceInstructionPolicyKind = "charter" | "policy";
 export type WorkspaceInstructionPolicyScope = "global" | "role";
-export type WorkspaceInstructionPolicyProvenanceSource = "human" | "onboarding" | "knowledge_proposal" | "legacy_import";
-export type WorkspaceInstructionPolicyDraftProvenanceSource = Exclude<WorkspaceInstructionPolicyProvenanceSource, "legacy_import">;
+export type WorkspaceInstructionPolicyProvenanceSource = "human" | "onboarding" | "agent_learning" | "knowledge_proposal" | "legacy_import";
+export type WorkspaceInstructionPolicyDraftProvenanceSource = Exclude<WorkspaceInstructionPolicyProvenanceSource, "legacy_import" | "agent_learning">;
 export type WorkspaceInstructionPolicyActivationType = "activate" | "rollback";
 export declare function normalizeWorkspaceInstructionPolicyRoleKey(value: string): string;
 export type WorkspaceInstructionPolicyTarget = {
@@ -36,6 +36,11 @@ export type WorkspaceInstructionPolicyHead = WorkspaceInstructionPolicyTarget &
     activationVersion: number;
     activatedAt: string;
 };
+export type WorkspaceInstructionPolicyInactiveHead = WorkspaceInstructionPolicyTarget & {
+    workspaceId: string;
+    activationVersion: number;
+    deactivatedAt: string;
+};
 export type WorkspaceInstructionPolicyActivationEvent = WorkspaceInstructionPolicyTarget & {
     id: string;
     operationId: string;
@@ -49,6 +54,18 @@ export type WorkspaceInstructionPolicyActivationEvent = WorkspaceInstructionPoli
     reason: string;
     createdAt: string;
 };
+export type WorkspaceInstructionPolicyDeactivationEvent = WorkspaceInstructionPolicyTarget & {
+    id: string;
+    operationId: string;
+    accountId: string;
+    workspaceId: string;
+    type: "automatic_deactivate";
+    activationVersion: number;
+    oldRevision: WorkspaceInstructionPolicyRevisionIdentity;
+    actorSubjectId: string;
+    reason: string;
+    createdAt: string;
+};
 export type CreateWorkspaceInstructionPolicyDraftRequest = WorkspaceInstructionPolicyTarget & {
     operationId?: string;
     content: string;
@@ -70,7 +87,12 @@ export type WorkspaceInstructionPolicyListOptions = {
 export type WorkspaceInstructionPolicyListResponse = {
     revisions: WorkspaceInstructionPolicyRevision[];
     activeHeads: WorkspaceInstructionPolicyHead[];
+    /** Additive current inactive target boundaries; absent on pre-controller servers. */
+    inactiveHeads?: WorkspaceInstructionPolicyInactiveHead[];
+    inactiveHeadsTruncated?: boolean;
     activationEvents: WorkspaceInstructionPolicyActivationEvent[];
+    /** Additive lifecycle history; absent on pre-controller servers. */
+    deactivationEvents?: WorkspaceInstructionPolicyDeactivationEvent[];
     nextAfterRevision: number | null;
 };
 export type WorkspaceInstructionPolicyDiffRequest = {

package/dist/workspace-integrations.d.ts

@@ -0,0 +1,74 @@
+import type { CredentialProviderRequest, WorkspaceWebhookEvent } from "@opengeni/contracts";
+import type { OpenGeniClient } from "./client.js";
+import type { CreateOrganizationWebhookRequest, CreateOrganizationWebhookResponse, GetOrganizationCredentialProviderResponse, ListOrganizationWebhookDeliveriesResponse, ListOrganizationWebhooksResponse, OrganizationWebhook, OrganizationWebhookDelivery, PutOrganizationCredentialProviderRequest, PutOrganizationCredentialProviderResponse, RotateWorkspaceCredentialProviderSecretResponse, RotateOrganizationCredentialProviderSecretResponse, RotateWorkspaceWebhookSecretResponse, RotateOrganizationWebhookSecretResponse, TestWorkspaceCredentialProviderResponse, TestWorkspaceWebhookResponse, UpdateOrganizationWebhookRequest, WorkspaceInheritedIntegrationsResponse, WorkspaceWebhook } from "@opengeni/contracts";
+export type { CreateOrganizationWebhookRequest, CreateOrganizationWebhookResponse, CreateWorkspaceWebhookRequest, CreateWorkspaceWebhookResponse, CredentialProviderRequest, CredentialProviderInitiatorContext, CredentialProviderResponse, CredentialProviderMcpHeaders, CredentialProviderMcpMaterial, GetOrganizationCredentialProviderResponse, GetWorkspaceCredentialProviderResponse, InitiatingHuman, IntegrationEndpointTestResult, IntegrationWorkspaceFilter, ListOrganizationWebhookDeliveriesResponse, ListOrganizationWebhooksResponse, ListWorkspaceWebhookDeliveriesResponse, ListWorkspaceWebhooksResponse, PutWorkspaceCredentialProviderRequest, PutWorkspaceCredentialProviderResponse, PutOrganizationCredentialProviderRequest, PutOrganizationCredentialProviderResponse, RotateWorkspaceCredentialProviderSecretResponse, RotateOrganizationCredentialProviderSecretResponse, RotateWorkspaceWebhookSecretResponse, RotateOrganizationWebhookSecretResponse, TestWorkspaceCredentialProviderResponse, TestWorkspaceWebhookResponse, OrganizationCredentialProvider, OrganizationWebhook, OrganizationWebhookDelivery, UpdateOrganizationWebhookRequest, UpdateWorkspaceWebhookRequest, WorkspaceCredentialProvider, WorkspaceInheritedIntegrationsResponse, WorkspaceTestWebhookEvent, WorkspaceWebhook, WorkspaceWebhookDelivery, WorkspaceWebhookEvent, WorkspaceWebhookEventType, SessionWorkspaceWebhookEvent, WorkspaceUsageWebhookEvent, } from "@opengeni/contracts";
+export { OPENGENI_DELIVERY_ID_HEADER, OPENGENI_EVENT_ID_HEADER, OPENGENI_SIGNATURE_HEADER, OPENGENI_TEST_REQUEST_NIL_ID, OPENGENI_WEBHOOK_TEST_EVENT_TYPE, WORKSPACE_WEBHOOK_EVENT_TYPES, signOpenGeniPayload, verifyOpenGeniSignature, } from "@opengeni/contracts/workspace-integration-wire";
+export type WorkspaceSandboxImages = {
+    images: string[];
+    selected: string | null;
+};
+export declare class OpenGeniSignatureError extends Error {
+    constructor();
+}
+type SignedRequest = {
+    /** The exact raw request body. Parse it only after verification. */
+    body: string;
+    headers: Headers | Record<string, string | string[] | undefined>;
+    secret: string;
+    toleranceSeconds?: number;
+};
+/**
+ * Verify and parse one webhook delivery. Delivery is at least once: dedupe on
+ * `event.id` (also sent as the `OpenGeni-Event-Id` header). A `webhook.test`
+ * event (from "Send test event") names no session: acknowledge it with 2xx.
+ */
+export declare function verifyWebhookEvent(input: SignedRequest): Promise<{
+    event: WorkspaceWebhookEvent;
+    deliveryId: string | null;
+}>;
+/**
+ * Verify the exact bytes and parse a provider request, including its frozen
+ * initiatorContext when sent by an upgraded worker. Provenance grants no access.
+ */
+export declare function verifyCredentialProviderRequest(input: SignedRequest): Promise<CredentialProviderRequest>;
+/** Identity header names, for receivers that log or dedupe. */
+export declare const OPENGENI_WEBHOOK_HEADERS: {
+    readonly signature: "OpenGeni-Signature";
+    readonly eventId: "OpenGeni-Event-Id";
+    readonly deliveryId: "OpenGeni-Delivery-Id";
+};
+/** Server-side integration administration is opt-in, outside the eager browser client. */
+export declare function getOrganizationCredentialProvider(client: Pick<OpenGeniClient, "requestJson">, organizationId: string): Promise<GetOrganizationCredentialProviderResponse>;
+/** Replace configuration; explicit filter required. Store the first returned signing secret. */
+export declare function putOrganizationCredentialProvider(client: Pick<OpenGeniClient, "requestJson">, organizationId: string, request: PutOrganizationCredentialProviderRequest): Promise<PutOrganizationCredentialProviderResponse>;
+export declare function deleteOrganizationCredentialProvider(client: Pick<OpenGeniClient, "requestJson">, organizationId: string): Promise<void>;
+export declare function listOrganizationWebhooks(client: Pick<OpenGeniClient, "requestJson">, organizationId: string): Promise<ListOrganizationWebhooksResponse>;
+/** Create a webhook and return its signing secret once. */
+export declare function createOrganizationWebhook(client: Pick<OpenGeniClient, "requestJson">, organizationId: string, request: CreateOrganizationWebhookRequest): Promise<CreateOrganizationWebhookResponse>;
+export declare function getOrganizationWebhook(client: Pick<OpenGeniClient, "requestJson">, organizationId: string, webhookId: string): Promise<OrganizationWebhook>;
+export declare function updateOrganizationWebhook(client: Pick<OpenGeniClient, "requestJson">, organizationId: string, webhookId: string, request: UpdateOrganizationWebhookRequest): Promise<OrganizationWebhook>;
+export declare function deleteOrganizationWebhook(client: Pick<OpenGeniClient, "requestJson">, organizationId: string, webhookId: string): Promise<void>;
+export declare function listOrganizationWebhookDeliveries(client: Pick<OpenGeniClient, "requestJson">, organizationId: string, webhookId: string, options?: {
+    limit?: number;
+}): Promise<ListOrganizationWebhookDeliveriesResponse>;
+/** Requeue a settled delivery with a fresh attempt budget. */
+export declare function redeliverOrganizationWebhookDelivery(client: Pick<OpenGeniClient, "requestJson">, organizationId: string, webhookId: string, deliveryId: string): Promise<OrganizationWebhookDelivery>;
+export declare function getWorkspaceWebhook(client: Pick<OpenGeniClient, "requestJson">, workspaceId: string, webhookId: string): Promise<WorkspaceWebhook>;
+/** Rotate immediately. Store the new secret; the old signing secret stops working. */
+export declare function rotateWorkspaceCredentialProviderSecret(client: Pick<OpenGeniClient, "requestJson">, workspaceId: string): Promise<RotateWorkspaceCredentialProviderSecretResponse>;
+export declare function rotateOrganizationCredentialProviderSecret(client: Pick<OpenGeniClient, "requestJson">, organizationId: string): Promise<RotateOrganizationCredentialProviderSecretResponse>;
+export declare function rotateOrganizationWebhookSecret(client: Pick<OpenGeniClient, "requestJson">, organizationId: string, webhookId: string): Promise<RotateOrganizationWebhookSecretResponse>;
+export declare function rotateWorkspaceWebhookSecret(client: Pick<OpenGeniClient, "requestJson">, workspaceId: string, webhookId: string): Promise<RotateWorkspaceWebhookSecretResponse>;
+/**
+ * Send one signed `webhook.test` event to a workspace webhook now and return
+ * what the endpoint answered. Nothing is queued or retried.
+ */
+export declare function testWorkspaceWebhook(client: Pick<OpenGeniClient, "requestJson">, workspaceId: string, webhookId: string): Promise<TestWorkspaceWebhookResponse>;
+/**
+ * Send one signed `purpose: "test"` request to the credential provider this
+ * workspace's runs use (its own, else the organization's). Only the names of
+ * returned credentials come back, never their values.
+ */
+export declare function testWorkspaceCredentialProvider(client: Pick<OpenGeniClient, "requestJson">, workspaceId: string): Promise<TestWorkspaceCredentialProviderResponse>;
+/** Organization registrations that reach this workspace. Workspace administrators only. */
+export declare function getWorkspaceInheritedIntegrations(client: Pick<OpenGeniClient, "requestJson">, workspaceId: string): Promise<WorkspaceInheritedIntegrationsResponse>;

package/dist/workspace-integrations.js

@@ -0,0 +1,65 @@
+import {
+  OPENGENI_DELIVERY_ID_HEADER,
+  OPENGENI_EVENT_ID_HEADER,
+  OPENGENI_SIGNATURE_HEADER,
+  OPENGENI_TEST_REQUEST_NIL_ID,
+  OPENGENI_WEBHOOK_HEADERS,
+  OPENGENI_WEBHOOK_TEST_EVENT_TYPE,
+  OpenGeniSignatureError,
+  WORKSPACE_WEBHOOK_EVENT_TYPES,
+  createOrganizationWebhook,
+  deleteOrganizationCredentialProvider,
+  deleteOrganizationWebhook,
+  getOrganizationCredentialProvider,
+  getOrganizationWebhook,
+  getWorkspaceInheritedIntegrations,
+  getWorkspaceWebhook,
+  listOrganizationWebhookDeliveries,
+  listOrganizationWebhooks,
+  putOrganizationCredentialProvider,
+  redeliverOrganizationWebhookDelivery,
+  rotateOrganizationCredentialProviderSecret,
+  rotateOrganizationWebhookSecret,
+  rotateWorkspaceCredentialProviderSecret,
+  rotateWorkspaceWebhookSecret,
+  signOpenGeniPayload,
+  testWorkspaceCredentialProvider,
+  testWorkspaceWebhook,
+  updateOrganizationWebhook,
+  verifyCredentialProviderRequest,
+  verifyOpenGeniSignature,
+  verifyWebhookEvent
+} from "./chunk-WU6GQG25.js";
+export {
+  OPENGENI_DELIVERY_ID_HEADER,
+  OPENGENI_EVENT_ID_HEADER,
+  OPENGENI_SIGNATURE_HEADER,
+  OPENGENI_TEST_REQUEST_NIL_ID,
+  OPENGENI_WEBHOOK_HEADERS,
+  OPENGENI_WEBHOOK_TEST_EVENT_TYPE,
+  OpenGeniSignatureError,
+  WORKSPACE_WEBHOOK_EVENT_TYPES,
+  createOrganizationWebhook,
+  deleteOrganizationCredentialProvider,
+  deleteOrganizationWebhook,
+  getOrganizationCredentialProvider,
+  getOrganizationWebhook,
+  getWorkspaceInheritedIntegrations,
+  getWorkspaceWebhook,
+  listOrganizationWebhookDeliveries,
+  listOrganizationWebhooks,
+  putOrganizationCredentialProvider,
+  redeliverOrganizationWebhookDelivery,
+  rotateOrganizationCredentialProviderSecret,
+  rotateOrganizationWebhookSecret,
+  rotateWorkspaceCredentialProviderSecret,
+  rotateWorkspaceWebhookSecret,
+  signOpenGeniPayload,
+  testWorkspaceCredentialProvider,
+  testWorkspaceWebhook,
+  updateOrganizationWebhook,
+  verifyCredentialProviderRequest,
+  verifyOpenGeniSignature,
+  verifyWebhookEvent
+};
+//# sourceMappingURL=workspace-integrations.js.map

package/dist/workspace-integrations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/workspace-learning.d.ts

@@ -0,0 +1,124 @@
+export type WorkspaceLearningMode = "off" | "suggest" | "automatic";
+export type WorkspaceLearningOverrideMode = WorkspaceLearningMode | "inherit";
+export type WorkspaceLearningSourceOverrideInput = {
+    kind: string;
+    id: string;
+    mode: WorkspaceLearningOverrideMode;
+};
+export type WorkspaceLearningSourceOverride = Omit<WorkspaceLearningSourceOverrideInput, "mode"> & {
+    mode: WorkspaceLearningMode;
+};
+export type WorkspaceLearningPolicyRevisionIdentity = {
+    id: string;
+    revision: number;
+    policyHash: string;
+};
+export type WorkspaceLearningPolicyRevision = WorkspaceLearningPolicyRevisionIdentity & {
+    operationId: string;
+    accountId: string;
+    workspaceId: string;
+    workspaceMode: WorkspaceLearningMode;
+    sourceOverrides: WorkspaceLearningSourceOverride[];
+    supersedesRevisionId: string | null;
+    createdBySubjectId: string;
+    createdAt: string;
+};
+export type WorkspaceLearningPolicyHead = Omit<WorkspaceLearningPolicyRevisionIdentity, "id"> & {
+    accountId: string;
+    workspaceId: string;
+    revisionId: string;
+    activationVersion: number;
+    activatedAt: string;
+};
+export type WorkspaceLearningPolicyEvent = {
+    id: string;
+    operationId: string;
+    accountId: string;
+    workspaceId: string;
+    type: "activate" | "rollback";
+    activationVersion: number;
+    oldRevision: WorkspaceLearningPolicyRevisionIdentity | null;
+    newRevision: WorkspaceLearningPolicyRevisionIdentity;
+    actorSubjectId: string;
+    reason: string;
+    createdAt: string;
+};
+export type GovernedLearningDecisionReceipt = {
+    id: string;
+    sourceKind: "scoped-knowledge-evidence" | "task-note";
+    sourceId: string;
+    proposalId: string;
+    policySnapshotId: string;
+    policyRevisionId: string | null;
+    policyActivationVersion: number;
+    effectiveMode: WorkspaceLearningMode;
+    confidenceBps: number;
+    conflictCount: number;
+    outcome: "off" | "suggest" | "automatic" | "confidence" | "conflict" | "stale" | "revoked";
+    reasons: string[];
+    automaticEligible: boolean;
+    createdAt: string;
+};
+export type GovernedLearningActivationReceipt = {
+    id: string;
+    decisionReceiptId: string;
+    initiatingHumanSubjectId: string;
+    serviceActorSubjectId: string;
+    sourceKind: "scoped-knowledge-evidence" | "task-note";
+    sourceId: string;
+    destination: "instruction_policy" | "preference";
+    destinationRevisionId: string;
+    destinationOldRevisionId: string | null;
+    destinationOldContentHash: string | null;
+    destinationOldVersion: number;
+    destinationNewContentHash: string;
+    destinationNewVersion: number;
+    effectiveAt: string;
+    createdAt: string;
+};
+export type GovernedLearningActivationUndoReceipt = {
+    id: string;
+    activationReceiptId: string;
+    initiatingHumanSubjectId: string;
+    serviceActorSubjectId: string;
+    destination: "instruction_policy" | "preference";
+    destinationActivatedRevisionId: string;
+    destinationRestoredRevisionId: string | null;
+    destinationOldVersion: number;
+    destinationNewVersion: number;
+    effectiveAt: string;
+    createdAt: string;
+};
+export type WorkspaceLearningHistoryResponse = {
+    head: WorkspaceLearningPolicyHead | null;
+    revisions: WorkspaceLearningPolicyRevision[];
+    policyEvents: WorkspaceLearningPolicyEvent[];
+    decisions: GovernedLearningDecisionReceipt[];
+    activations: GovernedLearningActivationReceipt[];
+    undos: GovernedLearningActivationUndoReceipt[];
+    truncated: boolean;
+    effectiveBoundary: "next_accepted_attempt";
+};
+export type CreateWorkspaceLearningPolicyRevisionRequest = {
+    operationId?: string;
+    workspaceMode: WorkspaceLearningMode;
+    sourceOverrides?: WorkspaceLearningSourceOverrideInput[];
+    supersedesRevisionId?: string | null;
+};
+export type ActivateWorkspaceLearningPolicyRevisionRequest = {
+    operationId?: string;
+    expectedCurrentRevisionId: string | null;
+    expectedActivationVersion: number;
+    reason: string;
+};
+export type RollbackWorkspaceLearningPolicyRevisionRequest = ActivateWorkspaceLearningPolicyRevisionRequest & {
+    targetRevisionId: string;
+    expectedCurrentRevisionId: string;
+};
+export type WorkspaceLearningPolicyMutationResponse = {
+    head: WorkspaceLearningPolicyHead;
+    event: WorkspaceLearningPolicyEvent;
+};
+export type WorkspaceLearningHistoryOptions = {
+    limit?: number;
+};

package/dist/workspace-live-stream.d.ts

@@ -0,0 +1,14 @@
+import type { WorkspaceInteractionRevisionEvent } from "./interaction.js";
+import { type StreamSessionEventsOptions } from "./stream.js";
+import type { WorkspaceControlEvent } from "./types.js";
+export type WorkspaceLiveEvent = WorkspaceControlEvent | WorkspaceInteractionRevisionEvent;
+export type WorkspaceLiveStreamOptions = Omit<StreamSessionEventsOptions, "after"> & {
+    controlAfter?: number;
+    interactionAfter?: number;
+};
+export type WorkspaceLiveStreamTransport = {
+    openStream: (controlAfter: number, interactionAfter: number, signal: AbortSignal | undefined) => Promise<ReadableStream<Uint8Array>>;
+};
+/** One reconnecting SSE connection with independent durable cursors. */
+export declare function streamWorkspaceLiveEvents(transport: WorkspaceLiveStreamTransport, options?: WorkspaceLiveStreamOptions): AsyncGenerator<WorkspaceLiveEvent, void, void>;
+export declare function parseWorkspaceLiveEvent(data: string): WorkspaceLiveEvent | null;

package/dist/workspace-state.d.ts

@@ -1,41 +1,4 @@
 import type { WorkspaceInstructionPolicyKind, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyScope } from "./workspace-instruction-policies.js";
-export type WorkspaceStateDocumentStatusCounts = {
-    queued: number;
-    indexing: number;
-    ready: number;
-    failed: number;
-};
-export type WorkspaceStateSourceKindCounts = {
-    manual_upload: number;
-    meeting_transcript: number;
-    repository: number;
-    email: number;
-    chat: number;
-    document: number;
-    web: number;
-    other: number;
-};
-export type WorkspaceStateDocumentAuthorityKindCounts = {
-    organization: number;
-    workspace: number;
-    personal: number;
-};
-export type WorkspaceStateMemoryStatusCounts = {
-    proposed: number;
-    approved: number;
-    rejected: number;
-    active: number;
-    superseded: number;
-    archived: number;
-};
-export type WorkspaceStateMemoryKindCounts = {
-    semantic: number;
-    episodic: number;
-    procedural: number;
-    decision: number;
-    preference: number;
-};
-export type WorkspaceStateGapCode = "no_document_bases" | "no_visible_documents" | "failed_documents" | "processing_documents" | "missing_topic_coverage" | "no_memory_records" | "pending_memory_review" | "partial_inventory";
 export type WorkspaceStateGovernanceDriftStatus = "identical" | "changed" | "superseded" | "missing" | "unavailable" | "truncated";
 export type WorkspaceStateGetOptions = {
     attemptId?: string;
@@ -164,42 +127,16 @@ export type WorkspaceStateResponse = {
         requiredPermission: "documents:search";
     } | {
         availability: "available";
+        authority: "knowledge_entries";
         coverage: "complete" | "partial";
-        baseCount: number;
-        bases: Array<{
+        sampleLimit: 50;
+        entries: Array<{
             id: string;
-            name: string;
-            visibleDocumentCount: number;
-            statusCounts: WorkspaceStateDocumentStatusCounts;
-            latestUpdatedAt: string | null;
-        }>;
-        basesTruncated: boolean;
-        inspectedVisibleDocumentCount: number;
-        documentStatusCounts: WorkspaceStateDocumentStatusCounts;
-        sourceKindCounts: WorkspaceStateSourceKindCounts;
-        authorityKindCounts: WorkspaceStateDocumentAuthorityKindCounts;
-        topics: Array<{
-            name: string;
-            documentCount: number;
-        }>;
-        topicsTruncated: boolean;
-        latestDocumentUpdatedAt: string | null;
-        memorySample: {
-            recordCount: number;
-            sampleLimit: 100;
-            limitReached: boolean;
-            statusCounts: WorkspaceStateMemoryStatusCounts;
-            kindCounts: WorkspaceStateMemoryKindCounts;
-            preferenceAuthority: {
-                kindCountSource: "knowledge_memories_legacy_observations";
-                activeAuthority: "structured_preference_registry";
-            };
-            latestUpdatedAt: string | null;
-        };
-        gaps: Array<{
-            code: WorkspaceStateGapCode;
-            severity: "info" | "warning";
-            relatedCount: number | null;
+            revisionId: string;
+            title: string;
+            kind: "source" | "fact" | "decision" | "requirement" | "incident" | "note" | "group";
+            scope: "organization" | "workspace" | "personal";
+            updatedAt: string;
         }>;
     };
 };