@opengeni/sdk 0.57.0 → 1.0.0

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/proxy.ts","../src/mcp-output.ts","../src/desktop.ts","../src/terminal.ts","../src/workspace-instruction-policies.ts","../src/company-profile.ts","../src/preference-registry.ts"],"sourcesContent":["import type { OpenGeniClient } from \"./client\";\nimport type { StreamSessionEventsOptions } from \"./stream\";\nimport type { SessionEvent } from \"./types\";\n\n/**\n * Proxy-through-your-own-API helpers.\n *\n * The intended pattern: a customer's server consumes the OpenGeni event\n * stream with its own API key (`client.streamEvents(...)`) and re-emits it to\n * its browser clients over its own authenticated endpoint — the OpenGeni key\n * never reaches the browser. The re-emitted wire format is identical to\n * OpenGeni's own SSE stream (`id: <sequence>`, `event: <type>`,\n * `data: <event JSON>`), so the browser side can consume it with this same\n * SDK's streaming core (or a plain `EventSource`), including resume via\n * `?after=` / `Last-Event-ID`.\n */\n\n/** Format one event exactly as OpenGeni's API emits it over SSE. */\nexport function formatSseEvent(event: SessionEvent): string {\n  return `id: ${event.sequence}\\nevent: ${event.type}\\ndata: ${JSON.stringify(event)}\\n\\n`;\n}\n\nexport type SseReStreamOptions = {\n  /**\n   * Emit `: ping` comment lines at this interval, keeping intermediaries from\n   * idling the connection out. Disabled when omitted.\n   */\n  heartbeatMs?: number;\n  /**\n   * Called when the downstream consumer cancels (e.g. the browser\n   * disconnected). Use it to abort the upstream OpenGeni stream — an async\n   * iterator that is mid-`await` cannot be interrupted by `return()` alone.\n   */\n  onCancel?: () => void;\n};\n\n/**\n * Re-emit a stream of session events as an SSE byte stream. Pull-based, so\n * upstream consumption follows downstream demand; cancelling the returned\n * stream fires `onCancel` and ends the upstream iterator.\n */\nexport function sessionEventsToSseStream(\n  events: AsyncIterable<SessionEvent>,\n  options: SseReStreamOptions = {},\n): ReadableStream<Uint8Array> {\n  const encoder = new TextEncoder();\n  const iterator = events[Symbol.asyncIterator]();\n  let heartbeat: ReturnType<typeof setInterval> | undefined;\n  let cancelled = false;\n\n  const stopHeartbeat = (): void => {\n    if (heartbeat !== undefined) {\n      clearInterval(heartbeat);\n      heartbeat = undefined;\n    }\n  };\n\n  return new ReadableStream<Uint8Array>({\n    start: (controller) => {\n      if (options.heartbeatMs !== undefined) {\n        heartbeat = setInterval(() => {\n          try {\n            controller.enqueue(encoder.encode(\": ping\\n\\n\"));\n          } catch {\n            stopHeartbeat();\n          }\n        }, options.heartbeatMs);\n      }\n    },\n    pull: async (controller) => {\n      let result: IteratorResult<SessionEvent, unknown>;\n      try {\n        result = await iterator.next();\n      } catch (error) {\n        stopHeartbeat();\n        throw error;\n      }\n      if (cancelled) {\n        return;\n      }\n      if (result.done) {\n        stopHeartbeat();\n        controller.close();\n        return;\n      }\n      controller.enqueue(encoder.encode(formatSseEvent(result.value)));\n    },\n    cancel: () => {\n      cancelled = true;\n      stopHeartbeat();\n      options.onCancel?.();\n      // Fire-and-forget: if the iterator is suspended mid-await, return()\n      // settles only after onCancel unblocks it; cancel must not hang on it.\n      void Promise.resolve(iterator.return?.(undefined)).then(\n        () => undefined,\n        () => undefined,\n      );\n    },\n  });\n}\n\n/** Wrap an event stream in a ready-to-return SSE `Response`. */\nexport function sessionEventsToSseResponse(\n  events: AsyncIterable<SessionEvent>,\n  options: SseReStreamOptions = {},\n): Response {\n  return new Response(sessionEventsToSseStream(events, options), {\n    headers: {\n      \"Content-Type\": \"text/event-stream; charset=utf-8\",\n      \"Cache-Control\": \"no-cache, no-transform\",\n      Connection: \"keep-alive\",\n    },\n  });\n}\n\n/**\n * Read the resume cursor a reconnecting SSE client sent: the `after` query\n * parameter, or the standard `Last-Event-ID` header (the re-emitted stream\n * sets `id:` to the sequence). Returns 0 (full replay) when absent.\n */\nexport function resumeSequenceFromRequest(request: Request): number {\n  const url = new URL(request.url);\n  const raw = url.searchParams.get(\"after\") ?? request.headers.get(\"Last-Event-ID\");\n  const parsed = raw === null ? 0 : Number(raw);\n  return Number.isFinite(parsed) && parsed > 0 ? Math.floor(parsed) : 0;\n}\n\nexport type ProxySessionEventStreamOptions = Omit<StreamSessionEventsOptions, \"after\"> & {\n  /**\n   * Resume cursor. Pass a number, or the incoming browser `Request` to\n   * honor its `?after=` / `Last-Event-ID` automatically.\n   */\n  after?: number | Request;\n  /** See {@link SseReStreamOptions.heartbeatMs}. */\n  heartbeatMs?: number;\n};\n\n/**\n * One-call proxy: consume the OpenGeni stream server-side and return an SSE\n * `Response` for your own browser clients. Works anywhere WHATWG `Response`\n * is the handler return type (Hono, Next.js route handlers, Bun.serve,\n * Cloudflare Workers, ...).\n *\n * The upstream OpenGeni connection is torn down when the downstream client\n * disconnects, and also when `options.signal` (e.g. the incoming request's\n * signal) aborts.\n */\nexport function proxySessionEventStream(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  options: ProxySessionEventStreamOptions = {},\n): Response {\n  const { after, heartbeatMs, signal, ...streamOptions } = options;\n  const upstream = new AbortController();\n  if (signal?.aborted) {\n    upstream.abort();\n  } else {\n    signal?.addEventListener(\"abort\", () => upstream.abort(), { once: true });\n  }\n  const resolvedAfter = after instanceof Request ? resumeSequenceFromRequest(after) : (after ?? 0);\n  const events = client.streamEvents(workspaceId, sessionId, {\n    ...streamOptions,\n    after: resolvedAfter,\n    signal: upstream.signal,\n  });\n  return sessionEventsToSseResponse(events, {\n    ...(heartbeatMs !== undefined ? { heartbeatMs } : {}),\n    onCancel: () => upstream.abort(),\n  });\n}\n","/**\n * A transport-tolerant MCP tool result.\n *\n * `value` is the canonical machine-readable payload after recognized MCP/JSON\n * envelopes are removed. `text` is the best presentation string without\n * discarding structured data. `raw` always retains the original evidence.\n */\nexport type NormalizedMcpOutput = Readonly<{\n  raw: unknown;\n  value: unknown;\n  text: string;\n  isError: boolean;\n}>;\n\nconst MAX_MCP_OUTPUT_DEPTH = 8;\nconst RESULT_ENVELOPE_KEYS = new Set([\"result\", \"isError\", \"jsonrpc\", \"id\", \"_meta\"]);\n\n/** Normalize common direct, JSON, and standard MCP result envelopes without throwing. */\nexport function normalizeMcpOutput(output: unknown): NormalizedMcpOutput {\n  const normalized = normalizeValue(output, 0, new Set<object>());\n  return {\n    raw: output,\n    value: normalized.value,\n    text: normalized.text,\n    isError: normalized.isError,\n  };\n}\n\ntype NormalizedValue = Omit<NormalizedMcpOutput, \"raw\">;\n\nfunction normalizeValue(value: unknown, depth: number, ancestors: Set<object>): NormalizedValue {\n  if (value === null || value === undefined) {\n    return { value, text: \"\", isError: false };\n  }\n  if (typeof value === \"string\") {\n    return normalizeText(value, depth, ancestors);\n  }\n  if (typeof value !== \"object\") {\n    return { value, text: String(value), isError: false };\n  }\n  if (depth >= MAX_MCP_OUTPUT_DEPTH || ancestors.has(value)) {\n    return { value, text: safeStringify(value), isError: false };\n  }\n\n  ancestors.add(value);\n  try {\n    if (Array.isArray(value)) {\n      return { value, text: safeStringify(value), isError: false };\n    }\n\n    const record = value as Record<string, unknown>;\n    const envelopeError = record.isError === true;\n\n    if (record.type === \"text\" && typeof record.text === \"string\") {\n      const normalized = normalizeText(record.text, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: record.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    if (\"structuredContent\" in record) {\n      const normalized = normalizeValue(record.structuredContent, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: firstMcpText(record.content) ?? normalized.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    if (isMcpContent(record.content)) {\n      const text = firstMcpText(record.content);\n      if (text !== null) {\n        const normalized = normalizeText(text, depth + 1, ancestors);\n        return {\n          value: normalized.value,\n          text,\n          isError: envelopeError || normalized.isError,\n        };\n      }\n      return {\n        value,\n        text: safeStringify(value),\n        isError: envelopeError,\n      };\n    }\n\n    if (isResultEnvelope(record)) {\n      const normalized = normalizeValue(record.result, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: normalized.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    return {\n      value,\n      text: safeStringify(value),\n      isError: envelopeError,\n    };\n  } finally {\n    ancestors.delete(value);\n  }\n}\n\nfunction normalizeText(text: string, depth: number, ancestors: Set<object>): NormalizedValue {\n  try {\n    const parsed: unknown = JSON.parse(text);\n    const normalized = normalizeValue(parsed, depth + 1, ancestors);\n    return {\n      value: normalized.value,\n      text,\n      isError: normalized.isError,\n    };\n  } catch {\n    return { value: text, text, isError: false };\n  }\n}\n\nfunction isMcpContent(value: unknown): value is readonly Record<string, unknown>[] {\n  return (\n    Array.isArray(value) &&\n    value.some(\n      (part) =>\n        part !== null &&\n        typeof part === \"object\" &&\n        typeof (part as { type?: unknown }).type === \"string\",\n    )\n  );\n}\n\nfunction firstMcpText(value: unknown): string | null {\n  if (!Array.isArray(value)) {\n    return null;\n  }\n  for (const part of value) {\n    if (\n      part !== null &&\n      typeof part === \"object\" &&\n      (part as { type?: unknown }).type === \"text\" &&\n      typeof (part as { text?: unknown }).text === \"string\"\n    ) {\n      return (part as { text: string }).text;\n    }\n  }\n  return null;\n}\n\nfunction isResultEnvelope(record: Record<string, unknown>): boolean {\n  return \"result\" in record && Object.keys(record).every((key) => RESULT_ENVELOPE_KEYS.has(key));\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value) ?? \"\";\n  } catch {\n    return String(value);\n  }\n}\n","// Zero-dependency desktop (noVNC) transport contract.\n//\n// The actual `@novnc/novnc` RFB import is a browser-only DOM dependency and\n// lives in `@opengeni/react` (lazily imported, SSR-safe). The framework-agnostic\n// SDK ships only the transport CONTRACT: a URL assembler, the minimal RFB\n// surface the component drives, the connection state machine, and the\n// rotation/fence reducers — all pure and unit-testable, with no DOM and no deps.\n//\n// Channel A (terminal-as-events, files, git) needs NO new transport here: those\n// are event projections + the synchronous fs/git/terminal point queries on\n// `OpenGeniClient`. Only the desktop pixel plane (Channel B, direct-to-provider)\n// needs this.\n\nimport type { DesktopStreamCapability, StreamUrlRotatedPayload } from \"./types\";\n\n/**\n * Translate the negotiated desktop capability into the WebSocket URL the noVNC\n * RFB client connects to. The scoped provider token is ALREADY embedded in the\n * minted `url` (Modal tunnel host, Blaxel `bl_preview_token`, Daytona signed\n * preview) by `session.resolveExposedPort(6080)` — we do NOT append `cap.token`\n * as a query param (that double-auth was an adversarial-review bug: the box runs\n * `-nopw` in v1, so the RFB password is meaningless and the real auth is the\n * tunnel token in the host). We only normalize the scheme to `ws`/`wss` and, when\n * the minted URL points at a `vnc.html` viewer page, rewrite it to the\n * websockify socket path noVNC actually dials.\n */\nexport function desktopSocketUrl(cap: Pick<DesktopStreamCapability, \"url\">): string {\n  if (!cap.url) {\n    throw new Error(\"desktop capability has no url (transport is null)\");\n  }\n  const u = new URL(cap.url);\n  // https → wss, http → ws (noVNC dials a WebSocket, not the HTTP viewer page).\n  if (u.protocol === \"https:\") {\n    u.protocol = \"wss:\";\n  } else if (u.protocol === \"http:\") {\n    u.protocol = \"ws:\";\n  }\n  // A minted `…/vnc.html` (or `…/vnc_lite.html`) viewer page → the websockify\n  // socket the page itself would open (`…/websockify`). A bare host/path with no\n  // viewer page is already the socket path; leave it untouched.\n  if (/\\/vnc(_lite)?\\.html$/.test(u.pathname)) {\n    u.pathname = u.pathname.replace(/\\/vnc(_lite)?\\.html$/, \"/websockify\");\n    u.search = \"\";\n    u.hash = \"\";\n  }\n  return u.toString();\n}\n\n/**\n * The minimal RFB surface the React component drives. Lets tests (and 3rd\n * parties swapping noVNC for a WebRTC client in v3) provide a fake without the\n * DOM. Matches `@novnc/novnc`'s RFB constructor + lifecycle.\n */\nexport interface DesktopRfbLike {\n  viewOnly: boolean;\n  scaleViewport: boolean;\n  /**\n   * 1:1 viewport clipping. We always drive this FALSE: with clipping on, noVNC\n   * paints the framebuffer pixel-for-pixel and scrolls/crops to the container\n   * (the \"zoomed in\" look). FALSE lets `scaleViewport` shrink the 1280x800 frame\n   * to fit the panel (aspect-preserved). Declared so the hook can pin it instead\n   * of relying on noVNC's default — `scaleViewport=true` forces clip off\n   * internally, but a stale/partial state on reconnect could leave it on.\n   */\n  clipViewport: boolean;\n  addEventListener(\n    type: \"connect\" | \"disconnect\" | \"securityfailure\",\n    cb: (e?: unknown) => void,\n  ): void;\n  removeEventListener?: (\n    type: \"connect\" | \"disconnect\" | \"securityfailure\",\n    cb: (e?: unknown) => void,\n  ) => void;\n  /** Send clipboard text over the already-open RFB connection. */\n  clipboardPasteFrom?(text: string): void;\n  /** Send one RFB key event. A missing `down` emits a complete key press. */\n  sendKey?(keysym: number, code: string, down?: boolean): void;\n  /** Focus or release the RFB keyboard sink without reconnecting. */\n  focus?(options?: FocusOptions): void;\n  blur?(): void;\n  disconnect(): void;\n}\n\nexport type DesktopRfbFactory = (\n  target: HTMLElement,\n  url: string,\n  opts: {\n    credentials?: { password?: string | undefined } | undefined;\n    wsProtocols?: string[] | undefined;\n  },\n) => DesktopRfbLike;\n\nexport type DesktopConnectionState =\n  | \"idle\"\n  | \"negotiating\"\n  | \"connecting\"\n  | \"connected\"\n  | \"rotating\"\n  | \"reconnecting\"\n  | \"error\"\n  | \"ended\";\n\nexport type DesktopStreamEvent =\n  | { type: \"negotiated\" }\n  | { type: \"connected\" }\n  | { type: \"disconnected\" }\n  | { type: \"rotate\" }\n  | { type: \"fail\" }\n  | { type: \"abort\" };\n\n/**\n * Pure reducer for the desktop connection lifecycle. The component owns the RFB\n * object + DOM; this owns the transitions so they are unit-testable. Mirrors the\n * Channel-A stream reducer discipline.\n */\nexport function nextDesktopState(\n  current: DesktopConnectionState,\n  ev: DesktopStreamEvent,\n): DesktopConnectionState {\n  switch (ev.type) {\n    case \"negotiated\":\n      return \"connecting\";\n    case \"connected\":\n      return \"connected\";\n    case \"rotate\":\n      return current === \"connected\" ? \"rotating\" : current;\n    case \"disconnected\":\n      // A deliberate teardown (ended) stays ended; everything else reconnects.\n      return current === \"ended\" ? \"ended\" : \"reconnecting\";\n    case \"fail\":\n      return \"error\";\n    case \"abort\":\n      return \"ended\";\n    default:\n      return current;\n  }\n}\n\n// `DesktopStreamCapability` is the desktop cell of `SessionCapabilities`; alias\n// it for the rotation reducer below without depending on the whole doc.\nexport type DesktopStreamCapabilityLike = {\n  url: string | null;\n  token: string | null;\n  expiresAt: string | null;\n};\n\n/**\n * Apply a `stream.url.rotated` event onto a desktop capability, fencing on\n * leaseEpoch (split-brain). A rotation minted under an epoch the client has\n * already advanced PAST is from a superseded owner and is dropped (returns\n * null); otherwise the fresh url/token/expiresAt are folded in.\n */\nexport function applyUrlRotation<T extends DesktopStreamCapabilityLike>(\n  cap: T,\n  payload: StreamUrlRotatedPayload,\n  knownEpoch: number,\n): T | null {\n  if (payload.leaseEpoch < knownEpoch) {\n    return null;\n  }\n  return { ...cap, url: payload.url, token: payload.token, expiresAt: payload.expiresAt };\n}\n","// Zero-dependency interactive-terminal (ttyd PTY-over-websocket) transport\n// contract. Symmetric with `desktop.ts`: the SDK ships only the pure transport\n// CONTRACT (a URL assembler + the ttyd wire-protocol frame codec), with no DOM\n// and no deps. The actual WebSocket open + xterm attach lives in `@opengeni/react`\n// (`use-terminal-stream.ts`).\n//\n// The interactive terminal is a REAL PTY streamed over the SAME Modal raw-TLS\n// tunnel as the desktop noVNC, with the SAME scoped stream-token mechanism. The\n// box bakes `ttyd` on `TERMINAL_STREAM_PORT` (7681); `session.resolveExposedPort`\n// mints the tunnel URL. The Terminal capability cell carries transport \"pty-ws\" +\n// that url + the scoped token when the box is warm and a viewer is attached.\n\nimport type { TerminalCapability } from \"./types\";\n\n/**\n * Translate the negotiated `pty-ws` Terminal capability into the WebSocket URL\n * the ttyd client dials. The scoped provider token is ALREADY embedded in the\n * minted `url` (the Modal tunnel host) by `session.resolveExposedPort(7681)` —\n * we do NOT append `cap.token` (identical posture to the desktop: the gate is the\n * unguessable short-TTL tunnel URL + the server-recorded scoped stream token; ttyd\n * runs `--writable` with no `-c` credential in v1). We only normalize the scheme\n * to `ws`/`wss`; a bare host is already the ttyd websocket endpoint.\n */\nexport function terminalSocketUrl(cap: Pick<TerminalCapability, \"url\">): string {\n  if (!cap.url) {\n    throw new Error(\"terminal capability has no url (transport is not pty-ws)\");\n  }\n  const u = new URL(cap.url);\n  // https → wss, http → ws (ttyd is dialed as a WebSocket, not an HTTP page).\n  if (u.protocol === \"https:\") {\n    u.protocol = \"wss:\";\n  } else if (u.protocol === \"http:\") {\n    u.protocol = \"ws:\";\n  }\n  return u.toString();\n}\n\n// ── ttyd wire protocol ───────────────────────────────────────────────────────\n// ttyd frames are a single ASCII command char + payload. These mirror ttyd's\n// `protocol.h` Command enum. Client→server and server→client share the byte 0/1/2\n// values but mean different things per direction (see below).\n\n/** ttyd subprotocol — REQUIRED on the WebSocket handshake or ttyd refuses it. */\nexport const TTYD_SUBPROTOCOL = \"tty\";\n\n/** Client→server command bytes (the first char of each outbound text frame). */\nexport const TtydClientCommand = {\n  /** stdin: \"0\" + raw input bytes. */\n  INPUT: \"0\",\n  /** window resize: \"1\" + JSON.stringify({ columns, rows }). */\n  RESIZE: \"1\",\n  /** flow-control pause (back-pressure): \"2\". */\n  PAUSE: \"2\",\n  /** flow-control resume: \"3\". */\n  RESUME: \"3\",\n} as const;\n\n/** Server→client command bytes (the first char of each inbound frame). */\nexport const TtydServerCommand = {\n  /** stdout/stderr: \"0\" + raw output bytes (write the rest into xterm). */\n  OUTPUT: \"0\",\n  /** set the window title: \"1\" + title string. */\n  SET_WINDOW_TITLE: \"1\",\n  /** ttyd client preferences JSON: \"2\" + json (ignored by us). */\n  SET_PREFERENCES: \"2\",\n} as const;\n\n/**\n * The ttyd handshake's first frame: an auth message. ttyd expects\n * `JSON.stringify({ AuthToken })` as the FIRST text frame on the socket. We send\n * an empty token — our gate is the tunnel URL + scoped stream token, NOT a ttyd\n * `-c` basic-auth credential (which the box does not set in v1). Optional ttyd\n * `columns`/`rows` can ride this frame to seed the PTY size before the first\n * resize. Pure (string-building only) so it stays unit-testable in the SDK.\n */\nexport function ttydAuthFrame(opts?: { columns?: number; rows?: number }): string {\n  const frame: { AuthToken: string; columns?: number; rows?: number } = { AuthToken: \"\" };\n  if (opts?.columns && opts.columns > 0) frame.columns = opts.columns;\n  if (opts?.rows && opts.rows > 0) frame.rows = opts.rows;\n  return JSON.stringify(frame);\n}\n\n/** Build a client→server INPUT (stdin) frame: \"0\" + data. */\nexport function ttydInputFrame(data: string): string {\n  return TtydClientCommand.INPUT + data;\n}\n\n/** Build a client→server RESIZE frame: \"1\" + JSON.stringify({ columns, rows }). */\nexport function ttydResizeFrame(columns: number, rows: number): string {\n  return TtydClientCommand.RESIZE + JSON.stringify({ columns, rows });\n}\n","export const WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262_144;\n\nexport type WorkspaceInstructionPolicyKind = \"charter\" | \"policy\";\nexport type WorkspaceInstructionPolicyScope = \"global\" | \"role\";\nexport type WorkspaceInstructionPolicyProvenanceSource =\n  | \"human\"\n  | \"onboarding\"\n  | \"knowledge_proposal\"\n  | \"legacy_import\";\nexport type WorkspaceInstructionPolicyDraftProvenanceSource = Exclude<\n  WorkspaceInstructionPolicyProvenanceSource,\n  \"legacy_import\"\n>;\nexport type WorkspaceInstructionPolicyActivationType = \"activate\" | \"rollback\";\n\nexport function normalizeWorkspaceInstructionPolicyRoleKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n\nexport type WorkspaceInstructionPolicyTarget = {\n  kind: WorkspaceInstructionPolicyKind;\n  scope: WorkspaceInstructionPolicyScope;\n  roleKey: string | null;\n};\n\nexport type WorkspaceInstructionPolicyRevisionIdentity = {\n  id: string;\n  revision: number;\n  contentHash: string;\n};\n\nexport type WorkspaceInstructionPolicyRevision = WorkspaceInstructionPolicyRevisionIdentity &\n  WorkspaceInstructionPolicyTarget & {\n    operationId: string;\n    accountId: string;\n    workspaceId: string;\n    content: string;\n    provenance: {\n      source: WorkspaceInstructionPolicyProvenanceSource;\n      sourceId: string | null;\n    };\n    supersedesRevisionId: string | null;\n    createdBySubjectId: string;\n    createdAt: string;\n  };\n\nexport type WorkspaceInstructionPolicyHead = WorkspaceInstructionPolicyTarget & {\n  workspaceId: string;\n  revisionId: string;\n  revision: number;\n  contentHash: string;\n  activationVersion: number;\n  activatedAt: string;\n};\n\nexport type WorkspaceInstructionPolicyActivationEvent = WorkspaceInstructionPolicyTarget & {\n  id: string;\n  operationId: string;\n  accountId: string;\n  workspaceId: string;\n  type: WorkspaceInstructionPolicyActivationType;\n  activationVersion: number;\n  oldRevision: WorkspaceInstructionPolicyRevisionIdentity | null;\n  newRevision: WorkspaceInstructionPolicyRevisionIdentity;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\n\nexport type CreateWorkspaceInstructionPolicyDraftRequest = WorkspaceInstructionPolicyTarget & {\n  operationId?: string;\n  content: string;\n  provenanceSource?: WorkspaceInstructionPolicyDraftProvenanceSource;\n  provenanceSourceId?: string | null;\n  supersedesRevisionId?: string | null;\n};\n\nexport type ImportLegacyWorkspaceInstructionPolicyDraftRequest = {\n  operationId?: string;\n  supersedesRevisionId?: string | null;\n};\n\nexport type WorkspaceInstructionPolicyListOptions = {\n  kind?: WorkspaceInstructionPolicyKind;\n  scope?: WorkspaceInstructionPolicyScope;\n  roleKey?: string;\n  afterRevision?: number;\n  limit?: number;\n};\n\nexport type WorkspaceInstructionPolicyListResponse = {\n  revisions: WorkspaceInstructionPolicyRevision[];\n  activeHeads: WorkspaceInstructionPolicyHead[];\n  activationEvents: WorkspaceInstructionPolicyActivationEvent[];\n  nextAfterRevision: number | null;\n};\n\nexport type WorkspaceInstructionPolicyDiffRequest = {\n  fromRevisionId: string;\n  toRevisionId: string;\n};\n\nexport type WorkspaceInstructionPolicyDiffResponse = {\n  from: WorkspaceInstructionPolicyRevision;\n  to: WorkspaceInstructionPolicyRevision;\n  format: \"unified\";\n  diff: string;\n};\n\nexport type ActivateWorkspaceInstructionPolicyRequest = {\n  operationId?: string;\n  expectedCurrentRevisionId: string | null;\n  expectedActivationVersion?: number;\n  reason: string;\n};\n\nexport type RollbackWorkspaceInstructionPolicyRequest = {\n  operationId?: string;\n  targetRevisionId: string;\n  expectedCurrentRevisionId: string;\n  expectedActivationVersion?: number;\n  reason: string;\n};\n\nexport type WorkspaceInstructionPolicyActivationResponse = {\n  head: WorkspaceInstructionPolicyHead;\n  event: WorkspaceInstructionPolicyActivationEvent;\n};\n\nexport type WorkspaceInstructionPolicyConflictResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_CONFLICT\";\n  message: string;\n  currentHead: WorkspaceInstructionPolicyHead | null;\n};\n\nexport type WorkspaceInstructionPolicyOperationReuseResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_OPERATION_REUSED\";\n  message: string;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalSource = {\n  id: string;\n  version: string;\n  confidenceBps: number;\n};\n\nexport type CreateWorkspaceInstructionPolicyOnboardingProposalRequest =\n  WorkspaceInstructionPolicyTarget & {\n    operationId?: string;\n    content: string;\n    sourceId: string;\n    sourceVersion: string;\n    confidenceBps: number;\n    expectedCurrentRevisionId: string | null;\n    expectedActivationVersion: number;\n  };\n\nexport type WorkspaceInstructionPolicyOnboardingProposal = WorkspaceInstructionPolicyTarget & {\n  id: string;\n  operationId: string;\n  accountId: string;\n  workspaceId: string;\n  source: WorkspaceInstructionPolicyOnboardingProposalSource;\n  baseline: WorkspaceInstructionPolicyHead | null;\n  draft: WorkspaceInstructionPolicyRevision;\n  status: \"proposed\";\n  createdBySubjectId: string;\n  createdAt: string;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalListOptions = {\n  limit?: number;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalListResponse = {\n  proposals: WorkspaceInstructionPolicyOnboardingProposal[];\n  truncated: boolean;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse = {\n  code:\n    | \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_EMPTY\"\n    | \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_OVERSIZED\";\n  message: string;\n  maxChars: number;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalStaleResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_STALE\";\n  message: string;\n  currentHead: WorkspaceInstructionPolicyHead | null;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalConflictResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_CONFLICT\";\n  message: string;\n  existingProposalId: string;\n  existingDraftRevisionId: string;\n};\n","export const COMPANY_PROFILE_SCALAR_MAX_CHARS = 2_048;\nexport const COMPANY_PROFILE_ENTRY_MAX_CHARS = 1_024;\nexport const COMPANY_PROFILE_ENTRY_MAX_COUNT = 16;\n\nexport type CompanyProfileEntry = { key: string; content: string };\nexport type CompanyProfileContent = {\n  identity: string | null;\n  mission: string | null;\n  products: CompanyProfileEntry[];\n  customers: CompanyProfileEntry[];\n  goals: CompanyProfileEntry[];\n  constraints: CompanyProfileEntry[];\n};\nexport type CompanyProfileRevisionIdentity = {\n  id: string;\n  revision: number;\n  contentHash: string;\n};\nexport type CompanyProfileRevision = CompanyProfileRevisionIdentity & {\n  operationId: string;\n  accountId: string;\n  intent: \"active\" | \"proposal\";\n  profile: CompanyProfileContent;\n  provenance: { source: \"human\" | \"durable_learning\" | \"migration\"; sourceId: string | null };\n  supersedesRevisionId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n};\nexport type CompanyProfileHead = {\n  accountId: string;\n  revisionId: string;\n  revision: number;\n  contentHash: string;\n  activationVersion: number;\n  activatedAt: string;\n};\nexport type CompanyProfileActivationEvent = {\n  id: string;\n  operationId: string;\n  accountId: string;\n  type: \"activate\" | \"rollback\";\n  activationVersion: number;\n  oldRevision: CompanyProfileRevisionIdentity | null;\n  newRevision: CompanyProfileRevisionIdentity | null;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\nexport type CompanyProfileListOptions = { afterRevision?: number; limit?: number };\nexport type CompanyProfileListResponse = {\n  current: CompanyProfileHead | null;\n  activeRevision: CompanyProfileRevision | null;\n  revisions: CompanyProfileRevision[];\n  activationEvents: CompanyProfileActivationEvent[];\n  nextAfterRevision: number | null;\n};\nexport type UpdateCompanyProfileRequest = {\n  operationId?: string;\n  profile: CompanyProfileContent;\n  expectedCurrentRevisionId: string | null;\n  expectedActivationVersion: number;\n  reason: string;\n};\nexport type ActivateCompanyProfileRevisionRequest = {\n  operationId?: string;\n  expectedCurrentRevisionId: string | null;\n  expectedActivationVersion: number;\n  reason: string;\n};\nexport type RollbackCompanyProfileRequest = {\n  operationId?: string;\n  targetRevisionId: string;\n  expectedCurrentRevisionId: string;\n  expectedActivationVersion: number;\n  reason: string;\n};\nexport type CompanyProfileMutationResponse = {\n  revision: CompanyProfileRevision | null;\n  head: CompanyProfileHead | null;\n  event: CompanyProfileActivationEvent | null;\n};\nexport type CompanyProfileDiffRequest = { fromRevisionId: string; toRevisionId: string };\nexport type CompanyProfileDiffResponse = {\n  from: CompanyProfileRevision;\n  to: CompanyProfileRevision;\n  format: \"unified_json\";\n  diff: string;\n};\n\nexport function normalizeCompanyProfileStableKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n","export type PreferenceRegistryScope = \"organization\" | \"workspace\" | \"user\";\nexport type PreferenceRegistryStatus =\n  | \"proposed\"\n  | \"active\"\n  | \"inactive\"\n  | \"rejected\"\n  | \"superseded\"\n  | \"expired\";\nexport type PreferenceRegistryProvenanceSource =\n  | \"human\"\n  | \"onboarding\"\n  | \"knowledge_proposal\"\n  | \"imported_document\"\n  | \"slack\"\n  | \"meeting_transcript\"\n  | \"call_transcript\";\nexport type PreferenceRegistryTrust =\n  | \"untrusted_proposal\"\n  | \"personal\"\n  | \"workspace_managed\"\n  | \"organization_managed\";\nexport type PreferenceRegistryConflictStrategy = \"override\" | \"merge\" | \"reject\" | \"inform\";\n\nexport function normalizePreferenceRegistryStableKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n\nexport type PreferenceRegistryScopeTarget = {\n  scope: PreferenceRegistryScope;\n  workspaceId: string | null;\n  subjectId: string | null;\n};\n\nexport type PreferenceRegistryPrecedence = {\n  tier: PreferenceRegistryScope;\n  rank: number;\n  conflictStrategy: PreferenceRegistryConflictStrategy;\n  conflictsWith: string[];\n};\n\nexport type PreferenceRegistryRevisionSummary = {\n  id: string;\n  preferenceId: string;\n  revision: number;\n  contentHash: string;\n  title: string;\n  description: string;\n  precedence: PreferenceRegistryPrecedence;\n  provenance: {\n    source: PreferenceRegistryProvenanceSource;\n    sourceId: string | null;\n    trust: PreferenceRegistryTrust;\n  };\n  expiresAt: string | null;\n  correctsRevisionId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryDescriptorProvenance = {\n  source: PreferenceRegistryProvenanceSource;\n  sourceIdHash: string | null;\n  trust: PreferenceRegistryTrust;\n};\n\nexport type PreferenceRegistryRecord = {\n  id: string;\n  accountId: string;\n  stableKey: string;\n  target: PreferenceRegistryScopeTarget;\n  status: PreferenceRegistryStatus;\n  scopeVersion: number;\n  activationVersion: number;\n  activeRevision: PreferenceRegistryRevisionSummary | null;\n  supersededByPreferenceId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type PreferenceRegistryEvent = {\n  id: string;\n  accountId: string;\n  preferenceId: string;\n  type:\n    | \"proposal_created\"\n    | \"activated\"\n    | \"corrected\"\n    | \"rejected\"\n    | \"deactivated\"\n    | \"superseded\"\n    | \"scope_changed\";\n  version: number;\n  oldRevisionId: string | null;\n  newRevisionId: string | null;\n  oldTarget: PreferenceRegistryScopeTarget | null;\n  newTarget: PreferenceRegistryScopeTarget | null;\n  relatedPreferenceId: string | null;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryDescriptor = {\n  id: string;\n  stableKey: string;\n  title: string;\n  description: string;\n  scope: PreferenceRegistryScope;\n  activeVersion: number;\n  revisionId: string;\n  contentHash: string;\n  precedence: PreferenceRegistryPrecedence;\n  provenance: PreferenceRegistryDescriptorProvenance;\n  expiresAt: string | null;\n  retrievalHandle: string;\n};\n\nexport type PreferenceRegistrySnapshot = {\n  id: string;\n  workspaceId: string;\n  sessionId: string;\n  turnId: string;\n  attemptId: string;\n  executionGeneration: number;\n  initiatingHumanSubjectId: string;\n  descriptorHash: string;\n  descriptors: PreferenceRegistryDescriptor[];\n  truncated: boolean;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryFullContent = {\n  descriptor: PreferenceRegistryDescriptor;\n  content: string;\n};\n\nexport type CreatePreferenceRegistryProposalRequest = {\n  stableKey: string;\n  scope: PreferenceRegistryScope;\n  title: string;\n  description: string;\n  content: string;\n  precedenceRank?: number;\n  conflictStrategy?: PreferenceRegistryConflictStrategy;\n  conflictsWith?: string[];\n  expiresAt?: string | null;\n  provenanceSource?: PreferenceRegistryProvenanceSource;\n  provenanceSourceId?: string | null;\n};\n\nexport type ActivatePreferenceRegistryRevisionRequest = {\n  revisionId: string;\n  expectedCurrentRevisionId: string | null;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type CorrectPreferenceRegistryRequest = {\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  title: string;\n  description: string;\n  content: string;\n  precedenceRank?: number;\n  conflictStrategy?: PreferenceRegistryConflictStrategy;\n  conflictsWith?: string[];\n  expiresAt?: string | null;\n  reason: string;\n};\n\nexport type DeactivatePreferenceRegistryRequest = {\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type ChangePreferenceRegistryScopeRequest = {\n  scope: PreferenceRegistryScope;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type SupersedePreferenceRegistryRequest = {\n  replacementPreferenceId: string;\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type RejectPreferenceRegistryProposalRequest = {\n  revisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\nexport type PreferenceRegistryListOptions = {\n  scope?: PreferenceRegistryScope;\n  status?: PreferenceRegistryStatus;\n  limit?: number;\n};\nexport type PreferenceRegistryListResponse = { preferences: PreferenceRegistryRecord[] };\nexport type PreferenceRegistryDetailResponse = {\n  preference: PreferenceRegistryRecord;\n  revisions: PreferenceRegistryRevisionSummary[];\n  events: PreferenceRegistryEvent[];\n};\nexport type PreferenceRegistryMutationResponse = {\n  preference: PreferenceRegistryRecord;\n  event: PreferenceRegistryEvent;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBO,SAAS,eAAe,OAA6B;AAC1D,SAAO,OAAO,MAAM,QAAQ;AAAA,SAAY,MAAM,IAAI;AAAA,QAAW,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA;AACpF;AAqBO,SAAS,yBACd,QACA,UAA8B,CAAC,GACH;AAC5B,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,WAAW,OAAO,OAAO,aAAa,EAAE;AAC9C,MAAI;AACJ,MAAI,YAAY;AAEhB,QAAM,gBAAgB,MAAY;AAChC,QAAI,cAAc,QAAW;AAC3B,oBAAc,SAAS;AACvB,kBAAY;AAAA,IACd;AAAA,EACF;AAEA,SAAO,IAAI,eAA2B;AAAA,IACpC,OAAO,CAAC,eAAe;AACrB,UAAI,QAAQ,gBAAgB,QAAW;AACrC,oBAAY,YAAY,MAAM;AAC5B,cAAI;AACF,uBAAW,QAAQ,QAAQ,OAAO,YAAY,CAAC;AAAA,UACjD,QAAQ;AACN,0BAAc;AAAA,UAChB;AAAA,QACF,GAAG,QAAQ,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,IACA,MAAM,OAAO,eAAe;AAC1B,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACd,sBAAc;AACd,cAAM;AAAA,MACR;AACA,UAAI,WAAW;AACb;AAAA,MACF;AACA,UAAI,OAAO,MAAM;AACf,sBAAc;AACd,mBAAW,MAAM;AACjB;AAAA,MACF;AACA,iBAAW,QAAQ,QAAQ,OAAO,eAAe,OAAO,KAAK,CAAC,CAAC;AAAA,IACjE;AAAA,IACA,QAAQ,MAAM;AACZ,kBAAY;AACZ,oBAAc;AACd,cAAQ,WAAW;AAGnB,WAAK,QAAQ,QAAQ,SAAS,SAAS,MAAS,CAAC,EAAE;AAAA,QACjD,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAGO,SAAS,2BACd,QACA,UAA8B,CAAC,GACrB;AACV,SAAO,IAAI,SAAS,yBAAyB,QAAQ,OAAO,GAAG;AAAA,IAC7D,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,YAAY;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAOO,SAAS,0BAA0B,SAA0B;AAClE,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,MAAM,IAAI,aAAa,IAAI,OAAO,KAAK,QAAQ,QAAQ,IAAI,eAAe;AAChF,QAAM,SAAS,QAAQ,OAAO,IAAI,OAAO,GAAG;AAC5C,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,KAAK,MAAM,MAAM,IAAI;AACtE;AAsBO,SAAS,wBACd,QACA,aACA,WACA,UAA0C,CAAC,GACjC;AACV,QAAM,EAAE,OAAO,aAAa,QAAQ,GAAG,cAAc,IAAI;AACzD,QAAM,WAAW,IAAI,gBAAgB;AACrC,MAAI,QAAQ,SAAS;AACnB,aAAS,MAAM;AAAA,EACjB,OAAO;AACL,YAAQ,iBAAiB,SAAS,MAAM,SAAS,MAAM,GAAG,EAAE,MAAM,KAAK,CAAC;AAAA,EAC1E;AACA,QAAM,gBAAgB,iBAAiB,UAAU,0BAA0B,KAAK,IAAK,SAAS;AAC9F,QAAM,SAAS,OAAO,aAAa,aAAa,WAAW;AAAA,IACzD,GAAG;AAAA,IACH,OAAO;AAAA,IACP,QAAQ,SAAS;AAAA,EACnB,CAAC;AACD,SAAO,2BAA2B,QAAQ;AAAA,IACxC,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,IACnD,UAAU,MAAM,SAAS,MAAM;AAAA,EACjC,CAAC;AACH;;;AC5JA,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB,oBAAI,IAAI,CAAC,UAAU,WAAW,WAAW,MAAM,OAAO,CAAC;AAG7E,SAAS,mBAAmB,QAAsC;AACvE,QAAM,aAAa,eAAe,QAAQ,GAAG,oBAAI,IAAY,CAAC;AAC9D,SAAO;AAAA,IACL,KAAK;AAAA,IACL,OAAO,WAAW;AAAA,IAClB,MAAM,WAAW;AAAA,IACjB,SAAS,WAAW;AAAA,EACtB;AACF;AAIA,SAAS,eAAe,OAAgB,OAAe,WAAyC;AAC9F,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO,EAAE,OAAO,MAAM,IAAI,SAAS,MAAM;AAAA,EAC3C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,cAAc,OAAO,OAAO,SAAS;AAAA,EAC9C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,EAAE,OAAO,MAAM,OAAO,KAAK,GAAG,SAAS,MAAM;AAAA,EACtD;AACA,MAAI,SAAS,wBAAwB,UAAU,IAAI,KAAK,GAAG;AACzD,WAAO,EAAE,OAAO,MAAM,cAAc,KAAK,GAAG,SAAS,MAAM;AAAA,EAC7D;AAEA,YAAU,IAAI,KAAK;AACnB,MAAI;AACF,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,aAAO,EAAE,OAAO,MAAM,cAAc,KAAK,GAAG,SAAS,MAAM;AAAA,IAC7D;AAEA,UAAM,SAAS;AACf,UAAM,gBAAgB,OAAO,YAAY;AAEzC,QAAI,OAAO,SAAS,UAAU,OAAO,OAAO,SAAS,UAAU;AAC7D,YAAM,aAAa,cAAc,OAAO,MAAM,QAAQ,GAAG,SAAS;AAClE,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,OAAO;AAAA,QACb,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,uBAAuB,QAAQ;AACjC,YAAM,aAAa,eAAe,OAAO,mBAAmB,QAAQ,GAAG,SAAS;AAChF,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,aAAa,OAAO,OAAO,KAAK,WAAW;AAAA,QACjD,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,aAAa,OAAO,OAAO,GAAG;AAChC,YAAM,OAAO,aAAa,OAAO,OAAO;AACxC,UAAI,SAAS,MAAM;AACjB,cAAM,aAAa,cAAc,MAAM,QAAQ,GAAG,SAAS;AAC3D,eAAO;AAAA,UACL,OAAO,WAAW;AAAA,UAClB;AAAA,UACA,SAAS,iBAAiB,WAAW;AAAA,QACvC;AAAA,MACF;AACA,aAAO;AAAA,QACL;AAAA,QACA,MAAM,cAAc,KAAK;AAAA,QACzB,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,iBAAiB,MAAM,GAAG;AAC5B,YAAM,aAAa,eAAe,OAAO,QAAQ,QAAQ,GAAG,SAAS;AACrE,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,WAAW;AAAA,QACjB,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,MAAM,cAAc,KAAK;AAAA,MACzB,SAAS;AAAA,IACX;AAAA,EACF,UAAE;AACA,cAAU,OAAO,KAAK;AAAA,EACxB;AACF;AAEA,SAAS,cAAc,MAAc,OAAe,WAAyC;AAC3F,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,UAAM,aAAa,eAAe,QAAQ,QAAQ,GAAG,SAAS;AAC9D,WAAO;AAAA,MACL,OAAO,WAAW;AAAA,MAClB;AAAA,MACA,SAAS,WAAW;AAAA,IACtB;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,OAAO,MAAM,MAAM,SAAS,MAAM;AAAA,EAC7C;AACF;AAEA,SAAS,aAAa,OAA6D;AACjF,SACE,MAAM,QAAQ,KAAK,KACnB,MAAM;AAAA,IACJ,CAAC,SACC,SAAS,QACT,OAAO,SAAS,YAChB,OAAQ,KAA4B,SAAS;AAAA,EACjD;AAEJ;AAEA,SAAS,aAAa,OAA+B;AACnD,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AACA,aAAW,QAAQ,OAAO;AACxB,QACE,SAAS,QACT,OAAO,SAAS,YACf,KAA4B,SAAS,UACtC,OAAQ,KAA4B,SAAS,UAC7C;AACA,aAAQ,KAA0B;AAAA,IACpC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAA0C;AAClE,SAAO,YAAY,UAAU,OAAO,KAAK,MAAM,EAAE,MAAM,CAAC,QAAQ,qBAAqB,IAAI,GAAG,CAAC;AAC/F;AAEA,SAAS,cAAc,OAAwB;AAC7C,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;;;ACtIO,SAAS,iBAAiB,KAAmD;AAClF,MAAI,CAAC,IAAI,KAAK;AACZ,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,QAAM,IAAI,IAAI,IAAI,IAAI,GAAG;AAEzB,MAAI,EAAE,aAAa,UAAU;AAC3B,MAAE,WAAW;AAAA,EACf,WAAW,EAAE,aAAa,SAAS;AACjC,MAAE,WAAW;AAAA,EACf;AAIA,MAAI,uBAAuB,KAAK,EAAE,QAAQ,GAAG;AAC3C,MAAE,WAAW,EAAE,SAAS,QAAQ,wBAAwB,aAAa;AACrE,MAAE,SAAS;AACX,MAAE,OAAO;AAAA,EACX;AACA,SAAO,EAAE,SAAS;AACpB;AAqEO,SAAS,iBACd,SACA,IACwB;AACxB,UAAQ,GAAG,MAAM;AAAA,IACf,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,YAAY,cAAc,aAAa;AAAA,IAChD,KAAK;AAEH,aAAO,YAAY,UAAU,UAAU;AAAA,IACzC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAgBO,SAAS,iBACd,KACA,SACA,YACU;AACV,MAAI,QAAQ,aAAa,YAAY;AACnC,WAAO;AAAA,EACT;AACA,SAAO,EAAE,GAAG,KAAK,KAAK,QAAQ,KAAK,OAAO,QAAQ,OAAO,WAAW,QAAQ,UAAU;AACxF;;;AC1IO,SAAS,kBAAkB,KAA8C;AAC9E,MAAI,CAAC,IAAI,KAAK;AACZ,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,QAAM,IAAI,IAAI,IAAI,IAAI,GAAG;AAEzB,MAAI,EAAE,aAAa,UAAU;AAC3B,MAAE,WAAW;AAAA,EACf,WAAW,EAAE,aAAa,SAAS;AACjC,MAAE,WAAW;AAAA,EACf;AACA,SAAO,EAAE,SAAS;AACpB;AAQO,IAAM,mBAAmB;AAGzB,IAAM,oBAAoB;AAAA;AAAA,EAE/B,OAAO;AAAA;AAAA,EAEP,QAAQ;AAAA;AAAA,EAER,OAAO;AAAA;AAAA,EAEP,QAAQ;AACV;AAGO,IAAM,oBAAoB;AAAA;AAAA,EAE/B,QAAQ;AAAA;AAAA,EAER,kBAAkB;AAAA;AAAA,EAElB,iBAAiB;AACnB;AAUO,SAAS,cAAc,MAAoD;AAChF,QAAM,QAAgE,EAAE,WAAW,GAAG;AACtF,MAAI,MAAM,WAAW,KAAK,UAAU,EAAG,OAAM,UAAU,KAAK;AAC5D,MAAI,MAAM,QAAQ,KAAK,OAAO,EAAG,OAAM,OAAO,KAAK;AACnD,SAAO,KAAK,UAAU,KAAK;AAC7B;AAGO,SAAS,eAAe,MAAsB;AACnD,SAAO,kBAAkB,QAAQ;AACnC;AAGO,SAAS,gBAAgB,SAAiB,MAAsB;AACrE,SAAO,kBAAkB,SAAS,KAAK,UAAU,EAAE,SAAS,KAAK,CAAC;AACpE;;;AC1FO,IAAM,iDAAiD;AAevD,SAAS,2CAA2C,OAAuB;AAChF,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;;;ACjBO,IAAM,mCAAmC;AACzC,IAAM,kCAAkC;AACxC,IAAM,kCAAkC;AAuFxC,SAAS,iCAAiC,OAAuB;AACtE,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;;;ACpEO,SAAS,qCAAqC,OAAuB;AAC1E,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;","names":[]}
+{"version":3,"sources":["../../contracts/src/mcp-endpoint.ts","../src/tool-display-metadata.ts","../src/mcp-output.ts","../src/desktop.ts","../src/terminal.ts","../src/workspace-instruction-policies.ts","../src/company-profile.ts","../src/company-brain.ts","../src/preference-registry.ts"],"sourcesContent":["/** Exact endpoint identity: normalize URL syntax, preserve paths and query parameters. */\nexport function mcpEndpointIdentity(value: string | null | undefined): string | null {\n  if (!value) return null;\n  try {\n    const url = new URL(value);\n    if (![\"https:\", \"http:\"].includes(url.protocol) || url.username || url.password) return null;\n    url.hash = \"\";\n    return url.href;\n  } catch {\n    return null;\n  }\n}\n\nexport function pluginMcpUnavailableReason(server: {\n  endpoint: string | null;\n  transport?: string;\n  requiresConfiguration?: boolean;\n}): string | null {\n  if (server.transport === \"stdio\" || !server.endpoint) return \"Requires a local runtime\";\n  if (\n    server.transport &&\n    ![\"http\", \"streamable-http\", \"streamable_http\"].includes(server.transport)\n  )\n    return \"Unsupported transport: \" + server.transport;\n  if (server.requiresConfiguration || server.endpoint.includes(\"{\"))\n    return \"Requires custom connection configuration\";\n  const endpoint = mcpEndpointIdentity(server.endpoint);\n  if (!endpoint?.startsWith(\"https://\")) return \"Requires a valid HTTPS endpoint\";\n  return null;\n}\n","import type { ToolDisplayMetadata } from \"@opengeni/contracts\";\n\n/** Browser/native-safe event projection; do not import server schema runtimes. */\nexport function parseToolDisplayMetadata(value: unknown): ToolDisplayMetadata | undefined {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined;\n  const item = value as Record<string, unknown>;\n  if (Object.keys(item).some((key) => ![\"toolName\", \"title\", \"accountLabel\"].includes(key)))\n    return undefined;\n  const text = (v: unknown, max: number): v is string =>\n    typeof v === \"string\" && v.length > 0 && v.length <= max;\n  if (!text(item.toolName, 512) || /[\\u0000-\\u001f\\u007f]/u.test(item.toolName)) return undefined;\n  if (item.title !== undefined && !text(item.title, 512)) return undefined;\n  if (item.accountLabel !== undefined && !text(item.accountLabel, 1024)) return undefined;\n  return {\n    toolName: item.toolName,\n    ...(item.title !== undefined ? { title: item.title as string } : {}),\n    ...(item.accountLabel !== undefined ? { accountLabel: item.accountLabel as string } : {}),\n  };\n}\n","/**\n * A transport-tolerant MCP tool result.\n *\n * `value` is the canonical machine-readable payload after recognized MCP/JSON\n * envelopes are removed. `text` is the best presentation string without\n * discarding structured data. `raw` always retains the original evidence.\n */\nexport type NormalizedMcpOutput = Readonly<{\n  raw: unknown;\n  value: unknown;\n  text: string;\n  isError: boolean;\n}>;\n\nconst MAX_MCP_OUTPUT_DEPTH = 8;\nconst RESULT_ENVELOPE_KEYS = new Set([\"result\", \"isError\", \"jsonrpc\", \"id\", \"_meta\"]);\n\n/** Normalize common direct, JSON, and standard MCP result envelopes without throwing. */\nexport function normalizeMcpOutput(output: unknown): NormalizedMcpOutput {\n  const normalized = normalizeValue(output, 0, new Set<object>());\n  return {\n    raw: output,\n    value: normalized.value,\n    text: normalized.text,\n    isError: normalized.isError,\n  };\n}\n\ntype NormalizedValue = Omit<NormalizedMcpOutput, \"raw\">;\n\nfunction normalizeValue(value: unknown, depth: number, ancestors: Set<object>): NormalizedValue {\n  if (value === null || value === undefined) {\n    return { value, text: \"\", isError: false };\n  }\n  if (typeof value === \"string\") {\n    return normalizeText(value, depth, ancestors);\n  }\n  if (typeof value !== \"object\") {\n    return { value, text: String(value), isError: false };\n  }\n  if (depth >= MAX_MCP_OUTPUT_DEPTH || ancestors.has(value)) {\n    return { value, text: safeStringify(value), isError: false };\n  }\n\n  ancestors.add(value);\n  try {\n    if (Array.isArray(value)) {\n      return { value, text: safeStringify(value), isError: false };\n    }\n\n    const record = value as Record<string, unknown>;\n    const envelopeError = record.isError === true;\n\n    if (record.type === \"text\" && typeof record.text === \"string\") {\n      const normalized = normalizeText(record.text, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: record.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    if (\"structuredContent\" in record) {\n      const normalized = normalizeValue(record.structuredContent, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: firstMcpText(record.content) ?? normalized.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    if (isMcpContent(record.content)) {\n      const text = firstMcpText(record.content);\n      if (text !== null) {\n        const normalized = normalizeText(text, depth + 1, ancestors);\n        return {\n          value: normalized.value,\n          text,\n          isError: envelopeError || normalized.isError,\n        };\n      }\n      return {\n        value,\n        text: safeStringify(value),\n        isError: envelopeError,\n      };\n    }\n\n    if (isResultEnvelope(record)) {\n      const normalized = normalizeValue(record.result, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: normalized.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    return {\n      value,\n      text: safeStringify(value),\n      isError: envelopeError,\n    };\n  } finally {\n    ancestors.delete(value);\n  }\n}\n\nfunction normalizeText(text: string, depth: number, ancestors: Set<object>): NormalizedValue {\n  try {\n    const parsed: unknown = JSON.parse(text);\n    const normalized = normalizeValue(parsed, depth + 1, ancestors);\n    return {\n      value: normalized.value,\n      text,\n      isError: normalized.isError,\n    };\n  } catch {\n    return { value: text, text, isError: false };\n  }\n}\n\nfunction isMcpContent(value: unknown): value is readonly Record<string, unknown>[] {\n  return (\n    Array.isArray(value) &&\n    value.some(\n      (part) =>\n        part !== null &&\n        typeof part === \"object\" &&\n        typeof (part as { type?: unknown }).type === \"string\",\n    )\n  );\n}\n\nfunction firstMcpText(value: unknown): string | null {\n  if (!Array.isArray(value)) {\n    return null;\n  }\n  for (const part of value) {\n    if (\n      part !== null &&\n      typeof part === \"object\" &&\n      (part as { type?: unknown }).type === \"text\" &&\n      typeof (part as { text?: unknown }).text === \"string\"\n    ) {\n      return (part as { text: string }).text;\n    }\n  }\n  return null;\n}\n\nfunction isResultEnvelope(record: Record<string, unknown>): boolean {\n  return \"result\" in record && Object.keys(record).every((key) => RESULT_ENVELOPE_KEYS.has(key));\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value) ?? \"\";\n  } catch {\n    return String(value);\n  }\n}\n","// Zero-dependency desktop (noVNC) transport contract.\n//\n// The actual `@novnc/novnc` RFB import is a browser-only DOM dependency and\n// lives in `@opengeni/react` (lazily imported, SSR-safe). The framework-agnostic\n// SDK ships only the transport CONTRACT: a URL assembler, the minimal RFB\n// surface the component drives, the connection state machine, and the\n// rotation/fence reducers — all pure and unit-testable, with no DOM and no deps.\n//\n// Channel A (terminal-as-events, files, git) needs NO new transport here: those\n// are event projections + the synchronous fs/git/terminal point queries on\n// `OpenGeniClient`. Only the desktop pixel plane (Channel B, direct-to-provider)\n// needs this.\n\nimport type { DesktopStreamCapability, StreamUrlRotatedPayload } from \"./types\";\n\n/**\n * Translate the negotiated desktop capability into the WebSocket URL the noVNC\n * RFB client connects to. The scoped provider token is ALREADY embedded in the\n * minted `url` (Modal tunnel host, Blaxel `bl_preview_token`, Daytona signed\n * preview) by `session.resolveExposedPort(6080)` — we do NOT append `cap.token`\n * as a query param (that double-auth was an adversarial-review bug: the box runs\n * `-nopw` in v1, so the RFB password is meaningless and the real auth is the\n * tunnel token in the host). We only normalize the scheme to `ws`/`wss` and, when\n * the minted URL points at a `vnc.html` viewer page, rewrite it to the\n * websockify socket path noVNC actually dials.\n */\nexport function desktopSocketUrl(cap: Pick<DesktopStreamCapability, \"url\">): string {\n  if (!cap.url) {\n    throw new Error(\"desktop capability has no url (transport is null)\");\n  }\n  const u = new URL(cap.url);\n  // https → wss, http → ws (noVNC dials a WebSocket, not the HTTP viewer page).\n  if (u.protocol === \"https:\") {\n    u.protocol = \"wss:\";\n  } else if (u.protocol === \"http:\") {\n    u.protocol = \"ws:\";\n  }\n  // A minted `…/vnc.html` (or `…/vnc_lite.html`) viewer page → the websockify\n  // socket the page itself would open (`…/websockify`). A bare host/path with no\n  // viewer page is already the socket path; leave it untouched.\n  if (/\\/vnc(_lite)?\\.html$/.test(u.pathname)) {\n    u.pathname = u.pathname.replace(/\\/vnc(_lite)?\\.html$/, \"/websockify\");\n    u.search = \"\";\n    u.hash = \"\";\n  }\n  return u.toString();\n}\n\n/**\n * The minimal RFB surface the React component drives. Lets tests (and 3rd\n * parties swapping noVNC for a WebRTC client in v3) provide a fake without the\n * DOM. Matches `@novnc/novnc`'s RFB constructor + lifecycle.\n */\nexport interface DesktopRfbLike {\n  viewOnly: boolean;\n  scaleViewport: boolean;\n  /**\n   * 1:1 viewport clipping. We always drive this FALSE: with clipping on, noVNC\n   * paints the framebuffer pixel-for-pixel and scrolls/crops to the container\n   * (the \"zoomed in\" look). FALSE lets `scaleViewport` shrink the 1280x800 frame\n   * to fit the panel (aspect-preserved). Declared so the hook can pin it instead\n   * of relying on noVNC's default — `scaleViewport=true` forces clip off\n   * internally, but a stale/partial state on reconnect could leave it on.\n   */\n  clipViewport: boolean;\n  addEventListener(\n    type: \"connect\" | \"disconnect\" | \"securityfailure\",\n    cb: (e?: unknown) => void,\n  ): void;\n  removeEventListener?: (\n    type: \"connect\" | \"disconnect\" | \"securityfailure\",\n    cb: (e?: unknown) => void,\n  ) => void;\n  /** Send clipboard text over the already-open RFB connection. */\n  clipboardPasteFrom?(text: string): void;\n  /** Send one RFB key event. A missing `down` emits a complete key press. */\n  sendKey?(keysym: number, code: string, down?: boolean): void;\n  /** Focus or release the RFB keyboard sink without reconnecting. */\n  focus?(options?: FocusOptions): void;\n  blur?(): void;\n  disconnect(): void;\n}\n\nexport type DesktopRfbFactory = (\n  target: HTMLElement,\n  url: string,\n  opts: {\n    credentials?: { password?: string | undefined } | undefined;\n    wsProtocols?: string[] | undefined;\n  },\n) => DesktopRfbLike;\n\nexport type DesktopConnectionState =\n  | \"idle\"\n  | \"negotiating\"\n  | \"connecting\"\n  | \"connected\"\n  | \"rotating\"\n  | \"reconnecting\"\n  | \"error\"\n  | \"ended\";\n\nexport type DesktopStreamEvent =\n  | { type: \"negotiated\" }\n  | { type: \"connected\" }\n  | { type: \"disconnected\" }\n  | { type: \"rotate\" }\n  | { type: \"fail\" }\n  | { type: \"abort\" };\n\n/**\n * Pure reducer for the desktop connection lifecycle. The component owns the RFB\n * object + DOM; this owns the transitions so they are unit-testable. Mirrors the\n * Channel-A stream reducer discipline.\n */\nexport function nextDesktopState(\n  current: DesktopConnectionState,\n  ev: DesktopStreamEvent,\n): DesktopConnectionState {\n  switch (ev.type) {\n    case \"negotiated\":\n      return \"connecting\";\n    case \"connected\":\n      return \"connected\";\n    case \"rotate\":\n      return current === \"connected\" ? \"rotating\" : current;\n    case \"disconnected\":\n      // A deliberate teardown (ended) stays ended; everything else reconnects.\n      return current === \"ended\" ? \"ended\" : \"reconnecting\";\n    case \"fail\":\n      return \"error\";\n    case \"abort\":\n      return \"ended\";\n    default:\n      return current;\n  }\n}\n\n// `DesktopStreamCapability` is the desktop cell of `SessionCapabilities`; alias\n// it for the rotation reducer below without depending on the whole doc.\nexport type DesktopStreamCapabilityLike = {\n  url: string | null;\n  token: string | null;\n  expiresAt: string | null;\n};\n\n/**\n * Apply a `stream.url.rotated` event onto a desktop capability, fencing on\n * leaseEpoch (split-brain). A rotation minted under an epoch the client has\n * already advanced PAST is from a superseded owner and is dropped (returns\n * null); otherwise the fresh url/token/expiresAt are folded in.\n */\nexport function applyUrlRotation<T extends DesktopStreamCapabilityLike>(\n  cap: T,\n  payload: StreamUrlRotatedPayload,\n  knownEpoch: number,\n): T | null {\n  if (payload.leaseEpoch < knownEpoch) {\n    return null;\n  }\n  return { ...cap, url: payload.url, token: payload.token, expiresAt: payload.expiresAt };\n}\n","// Zero-dependency interactive-terminal (ttyd PTY-over-websocket) transport\n// contract. Symmetric with `desktop.ts`: the SDK ships only the pure transport\n// CONTRACT (a URL assembler + the ttyd wire-protocol frame codec), with no DOM\n// and no deps. The actual WebSocket open + xterm attach lives in `@opengeni/react`\n// (`use-terminal-stream.ts`).\n//\n// The interactive terminal is a REAL PTY streamed over the SAME Modal raw-TLS\n// tunnel as the desktop noVNC, with the SAME scoped stream-token mechanism. The\n// box bakes `ttyd` on `TERMINAL_STREAM_PORT` (7681); `session.resolveExposedPort`\n// mints the tunnel URL. The Terminal capability cell carries transport \"pty-ws\" +\n// that url + the scoped token when the box is warm and a viewer is attached.\n\nimport type { TerminalCapability } from \"./types\";\n\n/**\n * Translate the negotiated `pty-ws` Terminal capability into the WebSocket URL\n * the ttyd client dials. The scoped provider token is ALREADY embedded in the\n * minted `url` (the Modal tunnel host) by `session.resolveExposedPort(7681)` —\n * we do NOT append `cap.token` (identical posture to the desktop: the gate is the\n * unguessable short-TTL tunnel URL + the server-recorded scoped stream token; ttyd\n * runs `--writable` with no `-c` credential in v1). We only normalize the scheme\n * to `ws`/`wss`; a bare host is already the ttyd websocket endpoint.\n */\nexport function terminalSocketUrl(cap: Pick<TerminalCapability, \"url\">): string {\n  if (!cap.url) {\n    throw new Error(\"terminal capability has no url (transport is not pty-ws)\");\n  }\n  const u = new URL(cap.url);\n  // https → wss, http → ws (ttyd is dialed as a WebSocket, not an HTTP page).\n  if (u.protocol === \"https:\") {\n    u.protocol = \"wss:\";\n  } else if (u.protocol === \"http:\") {\n    u.protocol = \"ws:\";\n  }\n  return u.toString();\n}\n\n// ── ttyd wire protocol ───────────────────────────────────────────────────────\n// ttyd frames are a single ASCII command char + payload. These mirror ttyd's\n// `protocol.h` Command enum. Client→server and server→client share the byte 0/1/2\n// values but mean different things per direction (see below).\n\n/** ttyd subprotocol — REQUIRED on the WebSocket handshake or ttyd refuses it. */\nexport const TTYD_SUBPROTOCOL = \"tty\";\n\n/** Client→server command bytes (the first char of each outbound text frame). */\nexport const TtydClientCommand = {\n  /** stdin: \"0\" + raw input bytes. */\n  INPUT: \"0\",\n  /** window resize: \"1\" + JSON.stringify({ columns, rows }). */\n  RESIZE: \"1\",\n  /** flow-control pause (back-pressure): \"2\". */\n  PAUSE: \"2\",\n  /** flow-control resume: \"3\". */\n  RESUME: \"3\",\n} as const;\n\n/** Server→client command bytes (the first char of each inbound frame). */\nexport const TtydServerCommand = {\n  /** stdout/stderr: \"0\" + raw output bytes (write the rest into xterm). */\n  OUTPUT: \"0\",\n  /** set the window title: \"1\" + title string. */\n  SET_WINDOW_TITLE: \"1\",\n  /** ttyd client preferences JSON: \"2\" + json (ignored by us). */\n  SET_PREFERENCES: \"2\",\n} as const;\n\n/**\n * The ttyd handshake's first frame: an auth message. ttyd expects\n * `JSON.stringify({ AuthToken })` as the FIRST text frame on the socket. We send\n * an empty token — our gate is the tunnel URL + scoped stream token, NOT a ttyd\n * `-c` basic-auth credential (which the box does not set in v1). Optional ttyd\n * `columns`/`rows` can ride this frame to seed the PTY size before the first\n * resize. Pure (string-building only) so it stays unit-testable in the SDK.\n */\nexport function ttydAuthFrame(opts?: { columns?: number; rows?: number }): string {\n  const frame: { AuthToken: string; columns?: number; rows?: number } = { AuthToken: \"\" };\n  if (opts?.columns && opts.columns > 0) frame.columns = opts.columns;\n  if (opts?.rows && opts.rows > 0) frame.rows = opts.rows;\n  return JSON.stringify(frame);\n}\n\n/** Build a client→server INPUT (stdin) frame: \"0\" + data. */\nexport function ttydInputFrame(data: string): string {\n  return TtydClientCommand.INPUT + data;\n}\n\n/** Build a client→server RESIZE frame: \"1\" + JSON.stringify({ columns, rows }). */\nexport function ttydResizeFrame(columns: number, rows: number): string {\n  return TtydClientCommand.RESIZE + JSON.stringify({ columns, rows });\n}\n","export const WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262_144;\n\nexport type WorkspaceInstructionPolicyKind = \"charter\" | \"policy\";\nexport type WorkspaceInstructionPolicyScope = \"global\" | \"role\";\nexport type WorkspaceInstructionPolicyProvenanceSource =\n  | \"human\"\n  | \"onboarding\"\n  | \"agent_learning\"\n  | \"knowledge_proposal\"\n  | \"legacy_import\";\nexport type WorkspaceInstructionPolicyDraftProvenanceSource = Exclude<\n  WorkspaceInstructionPolicyProvenanceSource,\n  \"legacy_import\" | \"agent_learning\"\n>;\nexport type WorkspaceInstructionPolicyActivationType = \"activate\" | \"rollback\";\n\nexport function normalizeWorkspaceInstructionPolicyRoleKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n\nexport type WorkspaceInstructionPolicyTarget = {\n  kind: WorkspaceInstructionPolicyKind;\n  scope: WorkspaceInstructionPolicyScope;\n  roleKey: string | null;\n};\n\nexport type WorkspaceInstructionPolicyRevisionIdentity = {\n  id: string;\n  revision: number;\n  contentHash: string;\n};\n\nexport type WorkspaceInstructionPolicyRevision = WorkspaceInstructionPolicyRevisionIdentity &\n  WorkspaceInstructionPolicyTarget & {\n    operationId: string;\n    accountId: string;\n    workspaceId: string;\n    content: string;\n    provenance: {\n      source: WorkspaceInstructionPolicyProvenanceSource;\n      sourceId: string | null;\n    };\n    supersedesRevisionId: string | null;\n    createdBySubjectId: string;\n    createdAt: string;\n  };\n\nexport type WorkspaceInstructionPolicyHead = WorkspaceInstructionPolicyTarget & {\n  workspaceId: string;\n  revisionId: string;\n  revision: number;\n  contentHash: string;\n  activationVersion: number;\n  activatedAt: string;\n};\n\nexport type WorkspaceInstructionPolicyInactiveHead = WorkspaceInstructionPolicyTarget & {\n  workspaceId: string;\n  activationVersion: number;\n  deactivatedAt: string;\n};\n\nexport type WorkspaceInstructionPolicyActivationEvent = WorkspaceInstructionPolicyTarget & {\n  id: string;\n  operationId: string;\n  accountId: string;\n  workspaceId: string;\n  type: WorkspaceInstructionPolicyActivationType;\n  activationVersion: number;\n  oldRevision: WorkspaceInstructionPolicyRevisionIdentity | null;\n  newRevision: WorkspaceInstructionPolicyRevisionIdentity;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\n\nexport type WorkspaceInstructionPolicyDeactivationEvent = WorkspaceInstructionPolicyTarget & {\n  id: string;\n  operationId: string;\n  accountId: string;\n  workspaceId: string;\n  type: \"automatic_deactivate\";\n  activationVersion: number;\n  oldRevision: WorkspaceInstructionPolicyRevisionIdentity;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\n\nexport type CreateWorkspaceInstructionPolicyDraftRequest = WorkspaceInstructionPolicyTarget & {\n  operationId?: string;\n  content: string;\n  provenanceSource?: WorkspaceInstructionPolicyDraftProvenanceSource;\n  provenanceSourceId?: string | null;\n  supersedesRevisionId?: string | null;\n};\n\nexport type ImportLegacyWorkspaceInstructionPolicyDraftRequest = {\n  operationId?: string;\n  supersedesRevisionId?: string | null;\n};\n\nexport type WorkspaceInstructionPolicyListOptions = {\n  kind?: WorkspaceInstructionPolicyKind;\n  scope?: WorkspaceInstructionPolicyScope;\n  roleKey?: string;\n  afterRevision?: number;\n  limit?: number;\n};\n\nexport type WorkspaceInstructionPolicyListResponse = {\n  revisions: WorkspaceInstructionPolicyRevision[];\n  activeHeads: WorkspaceInstructionPolicyHead[];\n  /** Additive current inactive target boundaries; absent on pre-controller servers. */\n  inactiveHeads?: WorkspaceInstructionPolicyInactiveHead[];\n  inactiveHeadsTruncated?: boolean;\n  activationEvents: WorkspaceInstructionPolicyActivationEvent[];\n  /** Additive lifecycle history; absent on pre-controller servers. */\n  deactivationEvents?: WorkspaceInstructionPolicyDeactivationEvent[];\n  nextAfterRevision: number | null;\n};\n\nexport type WorkspaceInstructionPolicyDiffRequest = {\n  fromRevisionId: string;\n  toRevisionId: string;\n};\n\nexport type WorkspaceInstructionPolicyDiffResponse = {\n  from: WorkspaceInstructionPolicyRevision;\n  to: WorkspaceInstructionPolicyRevision;\n  format: \"unified\";\n  diff: string;\n};\n\nexport type ActivateWorkspaceInstructionPolicyRequest = {\n  operationId?: string;\n  expectedCurrentRevisionId: string | null;\n  expectedActivationVersion?: number;\n  reason: string;\n};\n\nexport type RollbackWorkspaceInstructionPolicyRequest = {\n  operationId?: string;\n  targetRevisionId: string;\n  expectedCurrentRevisionId: string;\n  expectedActivationVersion?: number;\n  reason: string;\n};\n\nexport type WorkspaceInstructionPolicyActivationResponse = {\n  head: WorkspaceInstructionPolicyHead;\n  event: WorkspaceInstructionPolicyActivationEvent;\n};\n\nexport type WorkspaceInstructionPolicyConflictResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_CONFLICT\";\n  message: string;\n  currentHead: WorkspaceInstructionPolicyHead | null;\n};\n\nexport type WorkspaceInstructionPolicyOperationReuseResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_OPERATION_REUSED\";\n  message: string;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalSource = {\n  id: string;\n  version: string;\n  confidenceBps: number;\n};\n\nexport type CreateWorkspaceInstructionPolicyOnboardingProposalRequest =\n  WorkspaceInstructionPolicyTarget & {\n    operationId?: string;\n    content: string;\n    sourceId: string;\n    sourceVersion: string;\n    confidenceBps: number;\n    expectedCurrentRevisionId: string | null;\n    expectedActivationVersion: number;\n  };\n\nexport type WorkspaceInstructionPolicyOnboardingProposal = WorkspaceInstructionPolicyTarget & {\n  id: string;\n  operationId: string;\n  accountId: string;\n  workspaceId: string;\n  source: WorkspaceInstructionPolicyOnboardingProposalSource;\n  baseline: WorkspaceInstructionPolicyHead | null;\n  draft: WorkspaceInstructionPolicyRevision;\n  status: \"proposed\";\n  createdBySubjectId: string;\n  createdAt: string;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalListOptions = {\n  limit?: number;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalListResponse = {\n  proposals: WorkspaceInstructionPolicyOnboardingProposal[];\n  truncated: boolean;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse = {\n  code:\n    | \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_EMPTY\"\n    | \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_OVERSIZED\";\n  message: string;\n  maxChars: number;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalStaleResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_STALE\";\n  message: string;\n  currentHead: WorkspaceInstructionPolicyHead | null;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalConflictResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_CONFLICT\";\n  message: string;\n  existingProposalId: string;\n  existingDraftRevisionId: string;\n};\n","export const COMPANY_PROFILE_SCALAR_MAX_CHARS = 2_048;\nexport const COMPANY_PROFILE_ENTRY_MAX_CHARS = 1_024;\nexport const COMPANY_PROFILE_ENTRY_MAX_COUNT = 16;\n\nexport type CompanyProfileEntry = { key: string; content: string };\nexport type CompanyProfileContent = {\n  identity: string | null;\n  mission: string | null;\n  products: CompanyProfileEntry[];\n  customers: CompanyProfileEntry[];\n  goals: CompanyProfileEntry[];\n  constraints: CompanyProfileEntry[];\n};\nexport type CompanyProfileRevisionIdentity = {\n  id: string;\n  revision: number;\n  contentHash: string;\n};\nexport type CompanyProfileRevision = CompanyProfileRevisionIdentity & {\n  operationId: string;\n  accountId: string;\n  intent: \"active\" | \"proposal\";\n  profile: CompanyProfileContent;\n  provenance: {\n    source: \"human\" | \"agent_admin\" | \"durable_learning\" | \"migration\";\n    sourceId: string | null;\n  };\n  supersedesRevisionId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n};\nexport type CompanyProfileHead = {\n  accountId: string;\n  revisionId: string;\n  revision: number;\n  contentHash: string;\n  activationVersion: number;\n  activatedAt: string;\n};\nexport type CompanyProfileActivationEvent = {\n  id: string;\n  operationId: string;\n  accountId: string;\n  type: \"activate\" | \"rollback\";\n  activationVersion: number;\n  oldRevision: CompanyProfileRevisionIdentity | null;\n  newRevision: CompanyProfileRevisionIdentity | null;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\nexport type CompanyProfileListOptions = { afterRevision?: number; limit?: number };\nexport type CompanyProfileListResponse = {\n  current: CompanyProfileHead | null;\n  activeRevision: CompanyProfileRevision | null;\n  revisions: CompanyProfileRevision[];\n  activationEvents: CompanyProfileActivationEvent[];\n  nextAfterRevision: number | null;\n};\nexport type UpdateCompanyProfileRequest = {\n  operationId?: string;\n  profile: CompanyProfileContent;\n  expectedCurrentRevisionId: string | null;\n  expectedActivationVersion: number;\n  reason: string;\n};\nexport type ActivateCompanyProfileRevisionRequest = {\n  operationId?: string;\n  expectedCurrentRevisionId: string | null;\n  expectedActivationVersion: number;\n  reason: string;\n};\nexport type RollbackCompanyProfileRequest = {\n  operationId?: string;\n  targetRevisionId: string;\n  expectedCurrentRevisionId: string;\n  expectedActivationVersion: number;\n  reason: string;\n};\nexport type CompanyProfileMutationResponse = {\n  revision: CompanyProfileRevision | null;\n  head: CompanyProfileHead | null;\n  event: CompanyProfileActivationEvent | null;\n};\nexport type CompanyProfileAgentPolicyMode = \"off\" | \"suggest\" | \"automatic\";\nexport type CompanyProfileAgentPolicy = {\n  organizationId: string;\n  mode: CompanyProfileAgentPolicyMode;\n  version: number;\n  updatedAt: string;\n  changed?: boolean;\n};\nexport type UpdateCompanyProfileAgentPolicyRequest = {\n  mode: CompanyProfileAgentPolicyMode;\n  expectedVersion: number;\n  operationId: string;\n};\nexport type CompanyProfileDiffRequest = { fromRevisionId: string; toRevisionId: string };\nexport type CompanyProfileDiffResponse = {\n  from: CompanyProfileRevision;\n  to: CompanyProfileRevision;\n  format: \"unified_json\";\n  diff: string;\n};\n\nexport function normalizeCompanyProfileStableKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n","import type {\n  CompanyBrainContextReceiptPage as ContractCompanyBrainContextReceiptPage,\n  CompanyBrainKnowledgeProposalPage as ContractCompanyBrainKnowledgeProposalPage,\n  CompanyBrainOkfPackage as ContractCompanyBrainOkfPackage,\n} from \"@opengeni/contracts\";\n\nexport type CompanyBrainOkfPackage = ContractCompanyBrainOkfPackage;\nexport type CompanyBrainContextReceiptPage = ContractCompanyBrainContextReceiptPage;\nexport type CompanyBrainKnowledgeProposalPage = ContractCompanyBrainKnowledgeProposalPage;\n\nexport type CompanyBrainContextReceiptListOptions = {\n  attemptId?: string;\n  cursor?: string;\n  limit?: number;\n};\n\nexport type CompanyBrainKnowledgeProposalListOptions = {\n  limit?: number;\n};\n\nexport type CompanyBrainInspectorTransport = {\n  requestJson<T>(method: string, path: string, body?: unknown): Promise<T>;\n};\n\nfunction inspectorPath(workspaceId: string, suffix: string): string {\n  return `/v1/workspaces/${workspaceId}/company-brain/${suffix}`;\n}\n\nexport function listCompanyBrainContextReceipts(\n  client: CompanyBrainInspectorTransport,\n  workspaceId: string,\n  options: CompanyBrainContextReceiptListOptions = {},\n): Promise<CompanyBrainContextReceiptPage> {\n  const params = new URLSearchParams();\n  if (options.attemptId) params.set(\"attemptId\", options.attemptId);\n  if (options.cursor) params.set(\"cursor\", options.cursor);\n  if (options.limit !== undefined) params.set(\"limit\", String(options.limit));\n  const query = params.toString();\n  return client.requestJson(\n    \"GET\",\n    `${inspectorPath(workspaceId, \"context-receipts\")}${query ? `?${query}` : \"\"}`,\n  );\n}\n\nexport function listCompanyBrainKnowledgeProposals(\n  client: CompanyBrainInspectorTransport,\n  workspaceId: string,\n  options: CompanyBrainKnowledgeProposalListOptions = {},\n): Promise<CompanyBrainKnowledgeProposalPage> {\n  const query =\n    options.limit === undefined ? \"\" : `?limit=${encodeURIComponent(String(options.limit))}`;\n  return client.requestJson(\"GET\", `${inspectorPath(workspaceId, \"knowledge-proposals\")}${query}`);\n}\n\nexport type CompanyBrainOkfDownload = {\n  content: string;\n  contentType: string;\n  filename: string;\n};\n","export type PreferenceRegistryScope = \"organization\" | \"workspace\" | \"user\";\nexport type PreferenceRegistryStatus =\n  | \"proposed\"\n  | \"active\"\n  | \"inactive\"\n  | \"rejected\"\n  | \"superseded\"\n  | \"expired\";\nexport type PreferenceRegistryProvenanceSource =\n  | \"human\"\n  | \"onboarding\"\n  | \"knowledge_proposal\"\n  | \"agent\"\n  | \"portable_skill\"\n  | \"imported_document\"\n  | \"slack\"\n  | \"meeting_transcript\"\n  | \"call_transcript\";\nexport type PreferenceRegistryTrust =\n  | \"untrusted_proposal\"\n  | \"personal\"\n  | \"workspace_managed\"\n  | \"organization_managed\";\nexport type PreferenceRegistryConflictStrategy = \"override\" | \"merge\" | \"reject\" | \"inform\";\n\nexport function normalizePreferenceRegistryStableKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n\nexport type PreferenceRegistryScopeTarget = {\n  scope: PreferenceRegistryScope;\n  workspaceId: string | null;\n  subjectId: string | null;\n};\n\nexport type PreferenceRegistryPrecedence = {\n  tier: PreferenceRegistryScope;\n  rank: number;\n  conflictStrategy: PreferenceRegistryConflictStrategy;\n  conflictsWith: string[];\n};\n\nexport type PreferenceRegistryRevisionSummary = {\n  id: string;\n  preferenceId: string;\n  revision: number;\n  contentHash: string;\n  title: string;\n  description: string;\n  precedence: PreferenceRegistryPrecedence;\n  provenance: {\n    source: PreferenceRegistryProvenanceSource;\n    sourceId: string | null;\n    trust: PreferenceRegistryTrust;\n  };\n  expiresAt: string | null;\n  correctsRevisionId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryDescriptorProvenance = {\n  source: PreferenceRegistryProvenanceSource;\n  sourceIdHash: string | null;\n  trust: PreferenceRegistryTrust;\n};\n\nexport type PreferenceRegistryRecord = {\n  id: string;\n  accountId: string;\n  stableKey: string;\n  target: PreferenceRegistryScopeTarget;\n  status: PreferenceRegistryStatus;\n  scopeVersion: number;\n  activationVersion: number;\n  activeRevision: PreferenceRegistryRevisionSummary | null;\n  supersededByPreferenceId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type PreferenceRegistryEvent = {\n  id: string;\n  accountId: string;\n  preferenceId: string;\n  type:\n    | \"proposal_created\"\n    | \"activated\"\n    | \"corrected\"\n    | \"rejected\"\n    | \"deactivated\"\n    | \"superseded\"\n    | \"scope_changed\";\n  version: number;\n  oldRevisionId: string | null;\n  newRevisionId: string | null;\n  oldTarget: PreferenceRegistryScopeTarget | null;\n  newTarget: PreferenceRegistryScopeTarget | null;\n  relatedPreferenceId: string | null;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryActivationAuthority = \"human_confirmed\" | \"automatic\";\n\nexport type PreferenceRegistryDescriptor = {\n  id: string;\n  stableKey: string;\n  title: string;\n  description: string;\n  scope: PreferenceRegistryScope;\n  activeVersion: number;\n  revisionId: string;\n  contentHash: string;\n  precedence: PreferenceRegistryPrecedence;\n  provenance: PreferenceRegistryDescriptorProvenance;\n  /**\n   * How the active revision became active. `provenance.trust` stays the frozen\n   * creation-time fact; this is the separate activation question. Null when the\n   * revision became active outside governed learning, or when the descriptor\n   * predates this field.\n   */\n  activationAuthority: PreferenceRegistryActivationAuthority | null;\n  expiresAt: string | null;\n  retrievalHandle: string;\n};\n\nexport type PreferenceRegistrySnapshot = {\n  id: string;\n  workspaceId: string;\n  sessionId: string;\n  turnId: string;\n  attemptId: string;\n  executionGeneration: number;\n  initiatingHumanSubjectId: string;\n  descriptorHash: string;\n  descriptors: PreferenceRegistryDescriptor[];\n  truncated: boolean;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryFullContent = {\n  descriptor: PreferenceRegistryDescriptor;\n  content: string;\n};\n\nexport type CreatePreferenceRegistryProposalRequest = {\n  stableKey: string;\n  scope: PreferenceRegistryScope;\n  title: string;\n  description: string;\n  content: string;\n  precedenceRank?: number;\n  conflictStrategy?: PreferenceRegistryConflictStrategy;\n  conflictsWith?: string[];\n  expiresAt?: string | null;\n  provenanceSource?: PreferenceRegistryProvenanceSource;\n  provenanceSourceId?: string | null;\n};\n\nexport type ActivatePreferenceRegistryRevisionRequest = {\n  revisionId: string;\n  expectedCurrentRevisionId: string | null;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type CorrectPreferenceRegistryRequest = {\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  title: string;\n  description: string;\n  content: string;\n  precedenceRank?: number;\n  conflictStrategy?: PreferenceRegistryConflictStrategy;\n  conflictsWith?: string[];\n  expiresAt?: string | null;\n  reason: string;\n};\n\nexport type DeactivatePreferenceRegistryRequest = {\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type ChangePreferenceRegistryScopeRequest = {\n  scope: PreferenceRegistryScope;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type SupersedePreferenceRegistryRequest = {\n  replacementPreferenceId: string;\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type RejectPreferenceRegistryProposalRequest = {\n  revisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\nexport type PreferenceRegistryListOptions = {\n  scope?: PreferenceRegistryScope;\n  status?: PreferenceRegistryStatus;\n  limit?: number;\n};\nexport type PreferenceRegistryListResponse = { preferences: PreferenceRegistryRecord[] };\nexport type PreferenceRegistryDetailResponse = {\n  preference: PreferenceRegistryRecord;\n  revisions: PreferenceRegistryRevisionSummary[];\n  events: PreferenceRegistryEvent[];\n};\nexport type PreferenceRegistryMutationResponse = {\n  preference: PreferenceRegistryRecord;\n  event: PreferenceRegistryEvent;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACO,SAAS,oBAAoB,OAAiD;AACnF,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,QAAI,CAAC,CAAC,UAAU,OAAO,EAAE,SAAS,IAAI,QAAQ,KAAK,IAAI,YAAY,IAAI,SAAU,QAAO;AACxF,QAAI,OAAO;AACX,WAAO,IAAI;AAAA,EACb,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,2BAA2B,QAIzB;AAChB,MAAI,OAAO,cAAc,WAAW,CAAC,OAAO,SAAU,QAAO;AAC7D,MACE,OAAO,aACP,CAAC,CAAC,QAAQ,mBAAmB,iBAAiB,EAAE,SAAS,OAAO,SAAS;AAEzE,WAAO,4BAA4B,OAAO;AAC5C,MAAI,OAAO,yBAAyB,OAAO,SAAS,SAAS,GAAG;AAC9D,WAAO;AACT,QAAM,WAAW,oBAAoB,OAAO,QAAQ;AACpD,MAAI,CAAC,UAAU,WAAW,UAAU,EAAG,QAAO;AAC9C,SAAO;AACT;;;AC1BO,SAAS,yBAAyB,OAAiD;AACxF,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,OAAO;AACb,MAAI,OAAO,KAAK,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,YAAY,SAAS,cAAc,EAAE,SAAS,GAAG,CAAC;AACtF,WAAO;AACT,QAAM,OAAO,CAAC,GAAY,QACxB,OAAO,MAAM,YAAY,EAAE,SAAS,KAAK,EAAE,UAAU;AACvD,MAAI,CAAC,KAAK,KAAK,UAAU,GAAG,KAAK,yBAAyB,KAAK,KAAK,QAAQ,EAAG,QAAO;AACtF,MAAI,KAAK,UAAU,UAAa,CAAC,KAAK,KAAK,OAAO,GAAG,EAAG,QAAO;AAC/D,MAAI,KAAK,iBAAiB,UAAa,CAAC,KAAK,KAAK,cAAc,IAAI,EAAG,QAAO;AAC9E,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAgB,IAAI,CAAC;AAAA,IAClE,GAAI,KAAK,iBAAiB,SAAY,EAAE,cAAc,KAAK,aAAuB,IAAI,CAAC;AAAA,EACzF;AACF;;;ACJA,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB,oBAAI,IAAI,CAAC,UAAU,WAAW,WAAW,MAAM,OAAO,CAAC;AAG7E,SAAS,mBAAmB,QAAsC;AACvE,QAAM,aAAa,eAAe,QAAQ,GAAG,oBAAI,IAAY,CAAC;AAC9D,SAAO;AAAA,IACL,KAAK;AAAA,IACL,OAAO,WAAW;AAAA,IAClB,MAAM,WAAW;AAAA,IACjB,SAAS,WAAW;AAAA,EACtB;AACF;AAIA,SAAS,eAAe,OAAgB,OAAe,WAAyC;AAC9F,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO,EAAE,OAAO,MAAM,IAAI,SAAS,MAAM;AAAA,EAC3C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,cAAc,OAAO,OAAO,SAAS;AAAA,EAC9C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,EAAE,OAAO,MAAM,OAAO,KAAK,GAAG,SAAS,MAAM;AAAA,EACtD;AACA,MAAI,SAAS,wBAAwB,UAAU,IAAI,KAAK,GAAG;AACzD,WAAO,EAAE,OAAO,MAAM,cAAc,KAAK,GAAG,SAAS,MAAM;AAAA,EAC7D;AAEA,YAAU,IAAI,KAAK;AACnB,MAAI;AACF,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,aAAO,EAAE,OAAO,MAAM,cAAc,KAAK,GAAG,SAAS,MAAM;AAAA,IAC7D;AAEA,UAAM,SAAS;AACf,UAAM,gBAAgB,OAAO,YAAY;AAEzC,QAAI,OAAO,SAAS,UAAU,OAAO,OAAO,SAAS,UAAU;AAC7D,YAAM,aAAa,cAAc,OAAO,MAAM,QAAQ,GAAG,SAAS;AAClE,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,OAAO;AAAA,QACb,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,uBAAuB,QAAQ;AACjC,YAAM,aAAa,eAAe,OAAO,mBAAmB,QAAQ,GAAG,SAAS;AAChF,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,aAAa,OAAO,OAAO,KAAK,WAAW;AAAA,QACjD,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,aAAa,OAAO,OAAO,GAAG;AAChC,YAAM,OAAO,aAAa,OAAO,OAAO;AACxC,UAAI,SAAS,MAAM;AACjB,cAAM,aAAa,cAAc,MAAM,QAAQ,GAAG,SAAS;AAC3D,eAAO;AAAA,UACL,OAAO,WAAW;AAAA,UAClB;AAAA,UACA,SAAS,iBAAiB,WAAW;AAAA,QACvC;AAAA,MACF;AACA,aAAO;AAAA,QACL;AAAA,QACA,MAAM,cAAc,KAAK;AAAA,QACzB,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,iBAAiB,MAAM,GAAG;AAC5B,YAAM,aAAa,eAAe,OAAO,QAAQ,QAAQ,GAAG,SAAS;AACrE,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,WAAW;AAAA,QACjB,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,MAAM,cAAc,KAAK;AAAA,MACzB,SAAS;AAAA,IACX;AAAA,EACF,UAAE;AACA,cAAU,OAAO,KAAK;AAAA,EACxB;AACF;AAEA,SAAS,cAAc,MAAc,OAAe,WAAyC;AAC3F,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,UAAM,aAAa,eAAe,QAAQ,QAAQ,GAAG,SAAS;AAC9D,WAAO;AAAA,MACL,OAAO,WAAW;AAAA,MAClB;AAAA,MACA,SAAS,WAAW;AAAA,IACtB;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,OAAO,MAAM,MAAM,SAAS,MAAM;AAAA,EAC7C;AACF;AAEA,SAAS,aAAa,OAA6D;AACjF,SACE,MAAM,QAAQ,KAAK,KACnB,MAAM;AAAA,IACJ,CAAC,SACC,SAAS,QACT,OAAO,SAAS,YAChB,OAAQ,KAA4B,SAAS;AAAA,EACjD;AAEJ;AAEA,SAAS,aAAa,OAA+B;AACnD,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AACA,aAAW,QAAQ,OAAO;AACxB,QACE,SAAS,QACT,OAAO,SAAS,YACf,KAA4B,SAAS,UACtC,OAAQ,KAA4B,SAAS,UAC7C;AACA,aAAQ,KAA0B;AAAA,IACpC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAA0C;AAClE,SAAO,YAAY,UAAU,OAAO,KAAK,MAAM,EAAE,MAAM,CAAC,QAAQ,qBAAqB,IAAI,GAAG,CAAC;AAC/F;AAEA,SAAS,cAAc,OAAwB;AAC7C,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;;;ACtIO,SAAS,iBAAiB,KAAmD;AAClF,MAAI,CAAC,IAAI,KAAK;AACZ,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,QAAM,IAAI,IAAI,IAAI,IAAI,GAAG;AAEzB,MAAI,EAAE,aAAa,UAAU;AAC3B,MAAE,WAAW;AAAA,EACf,WAAW,EAAE,aAAa,SAAS;AACjC,MAAE,WAAW;AAAA,EACf;AAIA,MAAI,uBAAuB,KAAK,EAAE,QAAQ,GAAG;AAC3C,MAAE,WAAW,EAAE,SAAS,QAAQ,wBAAwB,aAAa;AACrE,MAAE,SAAS;AACX,MAAE,OAAO;AAAA,EACX;AACA,SAAO,EAAE,SAAS;AACpB;AAqEO,SAAS,iBACd,SACA,IACwB;AACxB,UAAQ,GAAG,MAAM;AAAA,IACf,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,YAAY,cAAc,aAAa;AAAA,IAChD,KAAK;AAEH,aAAO,YAAY,UAAU,UAAU;AAAA,IACzC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAgBO,SAAS,iBACd,KACA,SACA,YACU;AACV,MAAI,QAAQ,aAAa,YAAY;AACnC,WAAO;AAAA,EACT;AACA,SAAO,EAAE,GAAG,KAAK,KAAK,QAAQ,KAAK,OAAO,QAAQ,OAAO,WAAW,QAAQ,UAAU;AACxF;;;AC1IO,SAAS,kBAAkB,KAA8C;AAC9E,MAAI,CAAC,IAAI,KAAK;AACZ,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,QAAM,IAAI,IAAI,IAAI,IAAI,GAAG;AAEzB,MAAI,EAAE,aAAa,UAAU;AAC3B,MAAE,WAAW;AAAA,EACf,WAAW,EAAE,aAAa,SAAS;AACjC,MAAE,WAAW;AAAA,EACf;AACA,SAAO,EAAE,SAAS;AACpB;AAQO,IAAM,mBAAmB;AAGzB,IAAM,oBAAoB;AAAA;AAAA,EAE/B,OAAO;AAAA;AAAA,EAEP,QAAQ;AAAA;AAAA,EAER,OAAO;AAAA;AAAA,EAEP,QAAQ;AACV;AAGO,IAAM,oBAAoB;AAAA;AAAA,EAE/B,QAAQ;AAAA;AAAA,EAER,kBAAkB;AAAA;AAAA,EAElB,iBAAiB;AACnB;AAUO,SAAS,cAAc,MAAoD;AAChF,QAAM,QAAgE,EAAE,WAAW,GAAG;AACtF,MAAI,MAAM,WAAW,KAAK,UAAU,EAAG,OAAM,UAAU,KAAK;AAC5D,MAAI,MAAM,QAAQ,KAAK,OAAO,EAAG,OAAM,OAAO,KAAK;AACnD,SAAO,KAAK,UAAU,KAAK;AAC7B;AAGO,SAAS,eAAe,MAAsB;AACnD,SAAO,kBAAkB,QAAQ;AACnC;AAGO,SAAS,gBAAgB,SAAiB,MAAsB;AACrE,SAAO,kBAAkB,SAAS,KAAK,UAAU,EAAE,SAAS,KAAK,CAAC;AACpE;;;AC1FO,IAAM,iDAAiD;AAgBvD,SAAS,2CAA2C,OAAuB;AAChF,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;;;AClBO,IAAM,mCAAmC;AACzC,IAAM,kCAAkC;AACxC,IAAM,kCAAkC;AAuGxC,SAAS,iCAAiC,OAAuB;AACtE,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;;;ACnFA,SAAS,cAAc,aAAqB,QAAwB;AAClE,SAAO,kBAAkB,WAAW,kBAAkB,MAAM;AAC9D;AAEO,SAAS,gCACd,QACA,aACA,UAAiD,CAAC,GACT;AACzC,QAAM,SAAS,IAAI,gBAAgB;AACnC,MAAI,QAAQ,UAAW,QAAO,IAAI,aAAa,QAAQ,SAAS;AAChE,MAAI,QAAQ,OAAQ,QAAO,IAAI,UAAU,QAAQ,MAAM;AACvD,MAAI,QAAQ,UAAU,OAAW,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC1E,QAAM,QAAQ,OAAO,SAAS;AAC9B,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,GAAG,cAAc,aAAa,kBAAkB,CAAC,GAAG,QAAQ,IAAI,KAAK,KAAK,EAAE;AAAA,EAC9E;AACF;AAEO,SAAS,mCACd,QACA,aACA,UAAoD,CAAC,GACT;AAC5C,QAAM,QACJ,QAAQ,UAAU,SAAY,KAAK,UAAU,mBAAmB,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxF,SAAO,OAAO,YAAY,OAAO,GAAG,cAAc,aAAa,qBAAqB,CAAC,GAAG,KAAK,EAAE;AACjG;;;AC3BO,SAAS,qCAAqC,OAAuB;AAC1E,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;","names":[]}

package/dist/interaction.d.ts

@@ -1,4 +1,6 @@
 import type { OpenGeniRequestOptions } from "./client.js";
+import type { BrowserDomReadRequest, BrowserDomReadResponse, BrowserTargetState } from "@opengeni/contracts";
+export type { BrowserDomReadRequest, BrowserDomReadResponse, BrowserDomSafeAttribute, BrowserTargetState, } from "@opengeni/contracts";
 import type { RetainedArtifactReference } from "./types.js";
 /** Public Browser/Computer protocol version. Driver and provider details stay private. */
 export declare const INTERACTION_PROTOCOL_VERSION: 1;
@@ -20,6 +22,20 @@ export type WorkspaceInteractionRevisionEvent = {
 export type InteractionJsonValue = null | string | number | boolean | InteractionJsonValue[] | {
     [key: string]: InteractionJsonValue;
 };
+export type InteractionControlFailureCode = "unknown" | "unsupported" | "os" | "not_found" | "consent_required" | "timeout" | "draining" | "protocol" | "stream" | "agent_offline" | "fenced" | "payload_too_large";
+export type InteractionControlFailure = {
+    layer: "connected_machine";
+    surface: "browser" | "computer";
+    code: InteractionControlFailureCode;
+    retryable: boolean;
+    outcomeUnknown: boolean;
+    requestId: string | undefined;
+    controlRequestId: string | undefined;
+    message: string;
+};
+/** Decodes the bounded typed control-failure details emitted by OpenGeni. Raw
+ * provider/OS detail is intentionally absent; both correlation ids are opaque. */
+export declare function interactionControlFailureFromError(error: unknown): InteractionControlFailure | null;
 export type InteractionPlacement = {
     kind: "sandbox_group";
     sandboxGroupId: string;
@@ -69,8 +85,17 @@ export type AttachedBrowserDevice = {
     createdAt: string;
     updatedAt: string;
 };
+export type AttachedBrowserBridge = {
+    enrollmentId: string;
+    state: "online" | "offline";
+    bridgeGeneration: string;
+    inventoryRevision: number;
+    connectedProfileCount: number;
+    lastSeenAt: string;
+};
 export type AttachedBrowserDeviceListResponse = {
     revision: number;
+    bridges: AttachedBrowserBridge[];
     devices: AttachedBrowserDevice[];
 };
 export type InteractionControllerBinding = {
@@ -668,6 +693,14 @@ export type BrowserObservation = {
     frameId: string | null;
     semantic: InteractionSemanticSnapshot | InteractionSemanticDiff | null;
     screenshot: RetainedArtifactReference | null;
+    viewport?: {
+        width: number;
+        height: number;
+        visualWidth: number;
+        visualHeight: number;
+        deviceScaleFactor: number;
+        maxTouchPoints: number;
+    } | null | undefined;
     focusedRef: string | null;
     changedRegions: InteractionRect[];
     diagnostics: InteractionDiagnosticSummary;
@@ -724,6 +757,17 @@ export type BrowserPermissionSetting = "granted" | "denied" | "prompt";
 export type BrowserAction = {
     type: "navigate";
     url: string;
+} | {
+    type: "history";
+    direction: "back" | "forward";
+} | {
+    type: "activate";
+} | {
+    type: "viewport";
+    width: number;
+    height: number;
+    mobile: boolean;
+    deviceScaleFactor?: number | undefined;
 } | {
     type: "click";
     locator: BrowserLocator;
@@ -801,6 +845,7 @@ export type BrowserAction = {
 export type BrowserActionBatch = {
     type: "batch";
     actions: BrowserAction[];
+    fenceEachAction?: true | undefined;
 };
 export type InteractionError = {
     code: "resource_not_found" | "resource_unavailable" | "controller_stale" | "target_not_found" | "target_stale" | "observation_stale" | "document_stale" | "frame_stale" | "locator_not_found" | "locator_ambiguous" | "unsupported" | "permission_denied" | "machine_locked" | "attempt_stale" | "operation_conflict" | "outcome_unknown" | "invalid_action" | "timeout" | "controller_lost" | "driver_failed";
@@ -827,6 +872,7 @@ export type CreateBrowserSessionRequest = {
     name?: string | undefined;
     initialUrl?: string | undefined;
     headless?: boolean | undefined;
+    storageMode?: "private_profile" | "ephemeral_context" | undefined;
     engine?: "chromium" | "lightpanda" | undefined;
     placement?: InteractionPlacement | undefined;
     identityId?: string | undefined;
@@ -873,12 +919,16 @@ export type ComputerFrameStreamAttachment = InteractionFrameStreamAttachment<4>
     kind: "direct_rfb";
     url: string;
     protocols: string[];
+    inputAllowed: boolean;
 };
 export type BrowserSessionAttachment = {
     browserSessionId: string;
     controllerGeneration: string;
     targetId: string;
     stream: InteractionFrameStreamAttachment<3>;
+    /** Negotiated from this attachment’s live controller, absent on older helpers. */
+    fencedInputBatches?: true | undefined;
+    focusedInputObservations?: true | undefined;
     expiresAt: string;
 };
 export type BrowserSessionAttachmentRequest = {
@@ -892,7 +942,10 @@ export type BrowserActionRequest = {
     expectedTargetGeneration: string;
     expectedDocumentGeneration: string | null;
     expectedFrameId: string | null;
-    observationMode?: "full" | "none" | undefined;
+    /** `input` is negotiated by focusedInputObservations on a live attachment.
+     * It returns optional native-select metadata after a pointer click, and null
+     * for ordinary input. Use full for agent observations. */
+    observationMode?: "full" | "none" | "input" | undefined;
     action: BrowserAction | BrowserActionBatch;
 };
 export type BrowserActionReceipt = {
@@ -923,6 +976,8 @@ export type ComputerSessionCapabilities = {
     keyboardInput: boolean;
     clipboard: boolean;
     backgroundActions: boolean;
+    /** Raw window input stays in the background. Absent means foreground-only. */
+    backgroundInput?: boolean | undefined;
     parallelApps: boolean;
 };
 export type ComputerClipboard = {
@@ -1060,9 +1115,17 @@ export type ComputerSessionAttachment = {
     computerSessionId: string;
     controllerGeneration: string;
     targetId: string;
+    /** Viewer posture when attached; actions still reauthorize the live source. */
+    inputAllowed?: boolean | undefined;
     stream: ComputerFrameStreamAttachment;
     expiresAt: string;
 };
+/** Caller-specific hint only; every action still requires live authorization. */
+export type ComputerSessionInputPosture = {
+    computerSessionId: string;
+    controllerGeneration: string;
+    inputAllowed: boolean;
+};
 export type ComputerSessionAttachmentRequest = {
     targetId: string;
     expiresInSeconds?: number | undefined;
@@ -1140,6 +1203,9 @@ export interface InteractionTransport {
     selectBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
     closeBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetListResponse>;
     observeBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    getBrowserTargetState(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetState>;
+    readBrowserDom(workspaceId: string, browserSessionId: string, targetId: string, request: BrowserDomReadRequest, options?: OpenGeniRequestOptions): Promise<BrowserDomReadResponse>;
+    captureBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions, captureOptions?: BrowserScreenshotOptions): Promise<BrowserFrame>;
     actInBrowser(workspaceId: string, browserSessionId: string, request: BrowserActionRequest, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     getBrowserActionReceipt(workspaceId: string, browserSessionId: string, operationId: string, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     listBrowserDiagnostics(workspaceId: string, browserSessionId: string, targetId: string, options?: BrowserDiagnosticsOptions): Promise<BrowserDiagnosticBatch>;
@@ -1151,10 +1217,12 @@ export interface InteractionTransport {
     endBrowserSession(workspaceId: string, browserSessionId: string, request: BrowserSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
     listComputerSessions(workspaceId: string, options?: OpenGeniRequestOptions): Promise<ComputerSessionListResponse>;
     getComputerSession(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerSession>;
+    getComputerInputPosture?(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerSessionInputPosture>;
     readComputerClipboard(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerClipboard>;
     createComputerSession(workspaceId: string, request: CreateComputerSessionRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionMutationResponse>;
     listComputerTargets(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerTargetListResponse>;
     observeComputerTarget(workspaceId: string, computerSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerObservation>;
+    captureComputerTarget(workspaceId: string, computerSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerFrame>;
     actInComputer(workspaceId: string, computerSessionId: string, request: ComputerActionRequest, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     getComputerActionReceipt(workspaceId: string, computerSessionId: string, operationId: string, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     attachComputerSession(workspaceId: string, computerSessionId: string, request: ComputerSessionAttachmentRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionAttachment>;
@@ -1196,6 +1264,7 @@ export type CurrentOrOpenBrowserOptions = {
     name?: string | undefined;
     initialUrl?: string | undefined;
     headless?: boolean | undefined;
+    storageMode?: "private_profile" | "ephemeral_context" | undefined;
     placement?: InteractionPlacement | undefined;
     identityId?: string | undefined;
     baseRevisionId?: string | undefined;
@@ -1348,6 +1417,10 @@ export declare class BrowserSessionResource {
     constructor(transport: BrowserInteractionTransport, workspaceId: string, id: string);
     get(options?: OpenGeniRequestOptions): Promise<BrowserSession>;
     observe(targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    targetState(targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetState>;
+    readDom(targetId: string, request: BrowserDomReadRequest, options?: OpenGeniRequestOptions): Promise<BrowserDomReadResponse>;
+    capture(targetId: string, options?: OpenGeniRequestOptions, captureOptions?: BrowserScreenshotOptions): Promise<BrowserFrame>;
+    screenshot(targetId: string, captureOptions?: BrowserScreenshotOptions, options?: OpenGeniRequestOptions): Promise<BrowserFrame>;
     act(request: BrowserActionRequest, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     receipt(operationId: string, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     diagnostics(targetId: string, options?: BrowserDiagnosticsOptions): Promise<BrowserDiagnosticBatch>;
@@ -1414,9 +1487,11 @@ export declare class ComputerSessionResource {
     constructor(transport: BrowserInteractionTransport, workspaceId: string, id: string);
     get(options?: OpenGeniRequestOptions): Promise<ComputerSession>;
     observe(targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerObservation>;
+    capture(targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerFrame>;
     act(request: ComputerActionRequest, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     receipt(operationId: string, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     attach(request: ComputerSessionAttachmentRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionAttachment>;
+    inputPosture(options?: OpenGeniRequestOptions): Promise<ComputerSessionInputPosture>;
     heartbeat(options?: OpenGeniRequestOptions): Promise<ComputerSessionHeartbeatResponse>;
     end(request?: ComputerSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionMutationResponse>;
 }
@@ -1453,6 +1528,13 @@ export type BrowserFrameMetadata = {
 export type BrowserFrame = BrowserFrameMetadata & {
     data: Uint8Array;
 };
+export type BrowserScreenshotOptions = {
+    /** Capture the document content instead of the visible viewport. */
+    fullPage?: boolean;
+    format?: "jpeg" | "png";
+    /** JPEG quality, from 1 to 100. Ignored for PNG. */
+    quality?: number;
+};
 export type ComputerFrameMetadata = {
     frameId: string;
     computerSessionId: string;
@@ -1482,3 +1564,4 @@ export declare function decodeBrowserFrameMessage(message: ArrayBuffer | Uint8Ar
 export declare function decodeComputerFrameMessage(message: ArrayBuffer | Uint8Array): Promise<ComputerFrame>;
 export declare function parseBrowserFrameMetadata(value: unknown): BrowserFrameMetadata;
 export declare function parseComputerFrameMetadata(value: unknown): ComputerFrameMetadata;
+export declare function decodeComputerFrameMetadataHeader(value: string): ComputerFrameMetadata;

package/dist/interaction.js

@@ -35,9 +35,12 @@ import {
   computerFrameSocketUrl,
   decodeBrowserFrameMessage,
   decodeComputerFrameMessage,
+  decodeComputerFrameMetadataHeader,
+  interactionControlFailureFromError,
   parseBrowserFrameMetadata,
   parseComputerFrameMetadata
-} from "./chunk-ST5DDKJP.js";
+} from "./chunk-NC57YMUO.js";
+import "./chunk-V6GIY62B.js";
 export {
   AttachedBrowserDeviceCollection,
   AttachedBrowserDeviceResource,
@@ -75,6 +78,8 @@ export {
   computerFrameSocketUrl,
   decodeBrowserFrameMessage,
   decodeComputerFrameMessage,
+  decodeComputerFrameMetadataHeader,
+  interactionControlFailureFromError,
   parseBrowserFrameMetadata,
   parseComputerFrameMetadata
 };

package/dist/knowledge.d.ts

@@ -0,0 +1,7 @@
+export type { AgentLearningMode, AgentLearningCategory, AgentLearningDefaults, AgentLearningOverrides, AgentLearningContext, AgentLearningOverridePatch, AgentLearningSettingsRecord, AgentLearningOverrideRecord, SaveAgentLearningSettingsRequest, KnowledgeFilePreparationResult, KnowledgeSavePreparationRequest, KnowledgeSavePreparationResponse, KnowledgeOriginalFileDownload, KnowledgeEntryKind, KnowledgeEntryScope, KnowledgeIndexStatus, KnowledgeEntryContent, KnowledgeEntrySource, KnowledgeEntryEvidence, KnowledgeEntryRelationship, KnowledgeEntryRecord, KnowledgeEntrySummary, KnowledgeEntrySaveRequest, KnowledgeEntryReviewRequest, KnowledgeEntryBatchReviewRequest, KnowledgeEntryRestoreRequest, KnowledgeEntryWriteReceipt, KnowledgeEntryListRequest, KnowledgeEntryListResponse, KnowledgeReviewBatch, KnowledgeReviewBatchListRequest, KnowledgeReviewBatchListResponse, AgentInstructionReviewRequest, AgentInstructionReceipt, AgentInstructionReviewItem, AgentInstructionReviewListResponse, } from "@opengeni/contracts";
+import type { OpenGeniClient } from "./client.js";
+import type { KnowledgeSavePreparationRequest, KnowledgeSavePreparationResponse, KnowledgeFilePreparationResult } from "@opengeni/contracts";
+/** Agent-only source preparation is a focused transport surface, outside the browser client. */
+export declare function prepareKnowledgeFile(client: Pick<OpenGeniClient, "requestJson">, workspaceId: string, fileId: string, purpose?: "evidence" | "reference"): Promise<KnowledgeFilePreparationResult>;
+/** Read-only collection/duplicate discovery for a live selected agent or human Knowledge reviewer. */
+export declare function prepareKnowledgeSave(client: Pick<OpenGeniClient, "requestJson">, workspaceId: string, request: KnowledgeSavePreparationRequest): Promise<KnowledgeSavePreparationResponse>;

package/dist/knowledge.js

@@ -0,0 +1,20 @@
+// src/knowledge.ts
+async function prepareKnowledgeFile(client, workspaceId, fileId, purpose) {
+  return client.requestJson(
+    "POST",
+    `/v1/workspaces/${encodeURIComponent(workspaceId)}/knowledge/files/${encodeURIComponent(fileId)}/prepare`,
+    purpose ? { purpose } : void 0
+  );
+}
+async function prepareKnowledgeSave(client, workspaceId, request) {
+  return client.requestJson(
+    "POST",
+    `/v1/workspaces/${encodeURIComponent(workspaceId)}/knowledge/entries/prepare-save`,
+    request
+  );
+}
+export {
+  prepareKnowledgeFile,
+  prepareKnowledgeSave
+};
+//# sourceMappingURL=knowledge.js.map

package/dist/knowledge.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/knowledge.ts"],"sourcesContent":["export type {\n  AgentLearningMode,\n  AgentLearningCategory,\n  AgentLearningDefaults,\n  AgentLearningOverrides,\n  AgentLearningContext,\n  AgentLearningOverridePatch,\n  AgentLearningSettingsRecord,\n  AgentLearningOverrideRecord,\n  SaveAgentLearningSettingsRequest,\n  KnowledgeFilePreparationResult,\n  KnowledgeSavePreparationRequest,\n  KnowledgeSavePreparationResponse,\n  KnowledgeOriginalFileDownload,\n  KnowledgeEntryKind,\n  KnowledgeEntryScope,\n  KnowledgeIndexStatus,\n  KnowledgeEntryContent,\n  KnowledgeEntrySource,\n  KnowledgeEntryEvidence,\n  KnowledgeEntryRelationship,\n  KnowledgeEntryRecord,\n  KnowledgeEntrySummary,\n  KnowledgeEntrySaveRequest,\n  KnowledgeEntryReviewRequest,\n  KnowledgeEntryBatchReviewRequest,\n  KnowledgeEntryRestoreRequest,\n  KnowledgeEntryWriteReceipt,\n  KnowledgeEntryListRequest,\n  KnowledgeEntryListResponse,\n  KnowledgeReviewBatch,\n  KnowledgeReviewBatchListRequest,\n  KnowledgeReviewBatchListResponse,\n  AgentInstructionReviewRequest,\n  AgentInstructionReceipt,\n  AgentInstructionReviewItem,\n  AgentInstructionReviewListResponse,\n} from \"@opengeni/contracts\";\n\nimport type { OpenGeniClient } from \"./client\";\nimport type {\n  KnowledgeSavePreparationRequest,\n  KnowledgeSavePreparationResponse,\n  KnowledgeFilePreparationResult,\n} from \"@opengeni/contracts\";\n\n/** Agent-only source preparation is a focused transport surface, outside the browser client. */\nexport async function prepareKnowledgeFile(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  workspaceId: string,\n  fileId: string,\n  purpose?: \"evidence\" | \"reference\",\n): Promise<KnowledgeFilePreparationResult> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/workspaces/${encodeURIComponent(workspaceId)}/knowledge/files/${encodeURIComponent(fileId)}/prepare`,\n    purpose ? { purpose } : undefined,\n  );\n}\n\n/** Read-only collection/duplicate discovery for a live selected agent or human Knowledge reviewer. */\nexport async function prepareKnowledgeSave(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  workspaceId: string,\n  request: KnowledgeSavePreparationRequest,\n): Promise<KnowledgeSavePreparationResponse> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/workspaces/${encodeURIComponent(workspaceId)}/knowledge/entries/prepare-save`,\n    request,\n  );\n}\n"],"mappings":";AA+CA,eAAsB,qBACpB,QACA,aACA,QACA,SACyC;AACzC,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,kBAAkB,mBAAmB,WAAW,CAAC,oBAAoB,mBAAmB,MAAM,CAAC;AAAA,IAC/F,UAAU,EAAE,QAAQ,IAAI;AAAA,EAC1B;AACF;AAGA,eAAsB,qBACpB,QACA,aACA,SAC2C;AAC3C,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,IACjD;AAAA,EACF;AACF;","names":[]}

package/dist/message-links.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Links an agent writes into chat Markdown that point at OpenGeni-owned objects.
+ *
+ * Agents write these forms (tool receipts and bundled Skills teach them):
+ *
+ * - `artifact:<file uuid>` — a retained workspace file (exports, published files, images).
+ * - `sandbox:<path>[:<line>]` — a file in the session's sandbox or Connected Machine.
+ * - `/workspaces/<ws>/artifacts/editable/<32-hex id>` — a live editable document,
+ *   workbook, or presentation.
+ * - `/workspaces/<ws>/artifacts/<uuid>` — a saved Site / published HTML artifact.
+ * - `/workspaces/<ws>/artifacts/files/<uuid>` — a retained file (console path form).
+ *
+ * None of them is a URL a browser can navigate on its own: the `/workspaces/...`
+ * forms are OpenGeni console routes, so inside another product they resolve
+ * against that product's origin and 404. Parse them with {@link parseOpenGeniLink}
+ * and route each target to the host's own UI (download, panel, page).
+ */
+export type OpenGeniLinkTarget = {
+    kind: "file";
+    fileId: string;
+    workspaceId: string | null;
+    fromSession?: string;
+} | {
+    kind: "editable-artifact";
+    artifactId: string;
+    workspaceId: string;
+    fromSession?: string;
+} | {
+    kind: "site";
+    artifactId: string;
+    workspaceId: string;
+    fromSession?: string;
+} | {
+    kind: "sandbox-file";
+    path: string;
+    line: number | null;
+};
+/** Application scheme names are case-insensitive, unlike their payloads. */
+export declare function openGeniLinkScheme(href: string | undefined): "artifact" | "sandbox" | null;
+/** Reserved references must never fall back to navigation on a host origin. */
+export declare function isReservedOpenGeniLink(href: string | undefined): boolean;
+/**
+ * Parse an OpenGeni `sandbox:` href (plus the historical bare `/workspace/...`
+ * form). The decoded path is intentionally opaque: target selection, path
+ * policy, and filesystem authority belong to the session-aware host.
+ */
+export declare function parseSandboxLink(href: string | undefined): {
+    path: string;
+    line: number | null;
+} | null;
+/** Return the retained-file id of an exact `artifact:<uuid>` reference. */
+export declare function parseRetainedFileReference(href: string | undefined): string | null;
+/**
+ * Classify an agent-authored Markdown href. Returns `null` for ordinary links
+ * (`https://…`, `mailto:`, relative host links), which render as-is.
+ *
+ * Only root-relative console paths are recognized; an absolute URL is always an
+ * ordinary link, so a host's own `https://` routes are never reinterpreted.
+ * A validated `?fromSession=<uuid>` return hint is preserved.
+ */
+export declare function parseOpenGeniLink(href: string | undefined): OpenGeniLinkTarget | null;
+/** The OpenGeni console route for a target (the form agents write). */
+export declare function openGeniConsolePath(target: OpenGeniLinkTarget, workspaceId: string): string | null;
+/**
+ * Request header naming the session an embedded artifact read belongs to.
+ * `createSessionProxyHandler` only serves artifacts OpenGeni lists for it.
+ */
+export declare const SESSION_SCOPE_HEADER = "x-opengeni-session-id";