@opengeni/sdk 0.57.0 → 2.2.0-canary.0

package/dist/{chunk-PKQ377ED.js → chunk-YBQTKNTL.js}

@@ -5,7 +5,10 @@ import {
   OPENGENI_API_CONTRACT_REVISION,
   OPENGENI_CORRELATION_HEADER,
   RETAINED_OUTPUT_MAX_PAGE_BYTES
-} from "./chunk-HJ3HHUT5.js";
+} from "./chunk-GLDV5QY7.js";
+import {
+  OpenGeniInteractionClient
+} from "./chunk-GW3EJ2GP.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
@@ -13,10 +16,7 @@ import {
   OpenGeniStreamError,
   isAbortError,
   isRetryableStreamError
-} from "./chunk-GU6JF75T.js";
-import {
-  OpenGeniInteractionClient
-} from "./chunk-ST5DDKJP.js";
+} from "./chunk-C4DJPZRU.js";
 
 // src/sse.ts
 async function* parseSseStream(stream) {
@@ -123,9 +123,11 @@ async function* streamSessionEvents(transport, options = {}) {
           return;
         }
         const event = parseSessionEvent(message.data);
-        if (!event || event.sequence <= cursor) {
+        if (!event) {
           continue;
         }
+        const coveredSequence = eventResumeSequence(event);
+        if (coveredSequence <= cursor) continue;
         if (event.sequence > cursor + 1) {
           for await (const missed of backfillEvents(transport, cursor, event.sequence - 1)) {
             cursor = missed.sequence;
@@ -135,7 +137,7 @@ async function* streamSessionEvents(transport, options = {}) {
             }
           }
         }
-        cursor = event.sequence;
+        cursor = coveredSequence;
         yield event;
       }
       if (!reconnect) {
@@ -262,6 +264,13 @@ function parseSessionEvent(data) {
   }
   return parsed;
 }
+function eventResumeSequence(event) {
+  if (!event.payload || typeof event.payload !== "object" || Array.isArray(event.payload)) {
+    return event.sequence;
+  }
+  const covered = Number(event.payload.coalescedUntil);
+  return Math.max(event.sequence, Number.isFinite(covered) ? Math.floor(covered) : event.sequence);
+}
 async function sleep(delayMs, signal) {
   if (signal?.aborted || delayMs <= 0) {
     return;
@@ -534,6 +543,45 @@ var MAX_VIDEO_BYTES = 512 * 1024 * 1024;
 var MAX_DIMENSION = 16384;
 var MAX_PIXELS = 67108864;
 var MAX_RANGE_BYTES = 1024 * 1024;
+var MAX_SANDBOX_FILE_BYTES = 25 * 1024 * 1024 - 1;
+function parseRetainedWorkspaceFileReference(value, expectedWorkspaceId) {
+  if (!recordWithKeys(value, WORKSPACE_FILE_REFERENCE_KEYS)) return null;
+  const artifact = value;
+  if (artifact.available !== true || artifact.kind !== "file" || typeof artifact.artifactId !== "string" || !UUID.test(artifact.artifactId) || typeof artifact.contentType !== "string" || !/^[a-z0-9][a-z0-9!#$&^_.+-]{0,62}\/[a-z0-9][a-z0-9!#$&^_.+-]{0,62}$/.test(
+    artifact.contentType
+  ) || !safeIntegerBetween(artifact.originalBytes, 1, MAX_SANDBOX_FILE_BYTES) || typeof artifact.sha256 !== "string" || !SHA256.test(artifact.sha256) || typeof artifact.retainedAt !== "string" || artifact.retainedAt.length > 64 || !ISO_DATETIME_WITH_OFFSET.test(artifact.retainedAt) || !Number.isFinite(Date.parse(artifact.retainedAt)) || !recordWithKeys(artifact.retention, RETENTION_KEYS) || !recordWithKeys(artifact.retrieval, RETRIEVAL_KEYS)) {
+    return null;
+  }
+  const retention = artifact.retention;
+  if (retention.policy !== "workspace_file" || retention.expiresAt !== null) return null;
+  const retrieval = artifact.retrieval;
+  if (retrieval.method !== "GET" || retrieval.acceptRanges !== "bytes" || retrieval.maxRangeBytes !== MAX_RANGE_BYTES || typeof retrieval.path !== "string" || retrieval.path.length > 256) {
+    return null;
+  }
+  const match = WORKSPACE_PATH.exec(retrieval.path);
+  if (!match || !UUID.test(match[1] ?? "") || match[2] !== artifact.artifactId || expectedWorkspaceId !== void 0 && match[1] !== expectedWorkspaceId) {
+    return null;
+  }
+  return value;
+}
+function parseSandboxFileArtifactReceipt(value, expectedWorkspaceId) {
+  if (typeof value === "string" && value.length <= 8192) {
+    try {
+      return parseSandboxFileArtifactReceipt(JSON.parse(value), expectedWorkspaceId);
+    } catch {
+      return null;
+    }
+  }
+  if (!recordWithKeys(value, SANDBOX_FILE_RECEIPT_KEYS)) return null;
+  const artifact = parseRetainedWorkspaceFileReference(value.artifact, expectedWorkspaceId);
+  const pathSegments = typeof value.sandboxPath === "string" ? value.sandboxPath.split("/") : [];
+  if (value.type !== "sandbox_file" || typeof value.sandboxPath !== "string" || !value.sandboxPath.startsWith("/workspace/") || value.sandboxPath.length > 4096 || value.sandboxPath.includes("\0") || pathSegments.some(
+    (segment, index) => index > 1 && (!segment || segment === "." || segment === "..")
+  ) || typeof value.filename !== "string" || value.filename.length < 1 || value.filename.length > 1024 || pathSegments.at(-1) !== value.filename || !artifact) {
+    return null;
+  }
+  return value;
+}
 function parseRetainedGeneratedImageReference(value, expectedWorkspaceId) {
   if (!recordWithKeys(value, GENERATED_IMAGE_REFERENCE_KEYS)) return null;
   const artifact = value;
@@ -654,10 +702,22 @@ var GENERATED_IMAGE_REFERENCE_KEYS = /* @__PURE__ */ new Set([
   "retention",
   "retrieval"
 ]);
+var WORKSPACE_FILE_REFERENCE_KEYS = /* @__PURE__ */ new Set([
+  "available",
+  "artifactId",
+  "kind",
+  "contentType",
+  "originalBytes",
+  "sha256",
+  "retainedAt",
+  "retention",
+  "retrieval"
+]);
 var DIMENSION_KEYS = /* @__PURE__ */ new Set(["width", "height"]);
 var RETENTION_KEYS = /* @__PURE__ */ new Set(["policy", "expiresAt"]);
 var RETRIEVAL_KEYS = /* @__PURE__ */ new Set(["method", "path", "acceptRanges", "maxRangeBytes"]);
 var GENERATED_IMAGE_RECEIPT_KEYS = /* @__PURE__ */ new Set(["type", "artifact", "sandboxPath"]);
+var SANDBOX_FILE_RECEIPT_KEYS = /* @__PURE__ */ new Set(["type", "sandboxPath", "filename", "artifact"]);
 var GENERATED_VIDEO_RECEIPT_KEYS = /* @__PURE__ */ new Set([
   "type",
   "schemaVersion",
@@ -704,10 +764,18 @@ function sessionListQuery(options) {
     ...parentSessionId === void 0 ? {} : { parentSessionId: parentSessionId ?? "null" }
   };
 }
+function assertNoMessageTools(input) {
+  if (Object.prototype.hasOwnProperty.call(input, "tools")) {
+    throw new TypeError(
+      "Message-level tools are not supported; update the session tool policy before sending."
+    );
+  }
+}
 var OpenGeniClient = class {
   baseUrl;
   options;
   fetchImpl;
+  sessionCommandTimeoutMs;
   readInFlight = /* @__PURE__ */ new Map();
   readTrailing = /* @__PURE__ */ new Map();
   /** Resource-oriented Browser/Computer facade over this exact authenticated client. */
@@ -716,6 +784,11 @@ var OpenGeniClient = class {
     this.baseUrl = options.baseUrl.replace(/\/+$/, "");
     this.options = options;
     this.fetchImpl = options.fetch ?? ((input, init) => fetch(input, init));
+    const sessionCommandTimeoutMs = options.sessionCommandTimeoutMs ?? 15e3;
+    if (!Number.isFinite(sessionCommandTimeoutMs) || sessionCommandTimeoutMs <= 0) {
+      throw new RangeError("sessionCommandTimeoutMs must be a finite positive number");
+    }
+    this.sessionCommandTimeoutMs = sessionCommandTimeoutMs;
     this.interaction = new OpenGeniInteractionClient(this);
   }
   // --- Session lifecycle ---------------------------------------------------
@@ -923,6 +996,29 @@ var OpenGeniClient = class {
       request
     );
   }
+  /** Whether this exact authenticated principal may atomically create a private session. */
+  async getSessionTenancyCreateCapabilities(workspaceId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/session-tenancy/capabilities`
+    );
+  }
+  /** Change an owned, fully quiescent session between private and workspace visibility. */
+  async updateSessionVisibility(workspaceId, sessionId, request) {
+    return await this.requestJson(
+      "PUT",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/visibility`,
+      request
+    );
+  }
+  /** Create an independent same-workspace fork with explicit destination visibility. */
+  async forkSession(workspaceId, sessionId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/forks`,
+      request
+    );
+  }
   /** Replace the durable tool policy or explicitly adopt workspace defaults. */
   async updateSessionToolPolicy(workspaceId, sessionId, request) {
     return await this.requestJson(
@@ -955,6 +1051,18 @@ var OpenGeniClient = class {
       sessionListQuery(options)
     );
   }
+  async listSessionBackgroundCommands(workspaceId, sessionId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/background-commands`
+    );
+  }
+  async cancelSessionBackgroundCommand(workspaceId, sessionId, commandId) {
+    return await this.requestJson(
+      "DELETE",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/background-commands/${commandId}`
+    );
+  }
   /** Pin-aware ordinary-session page with a stable keyset cursor. */
   async listSessionPage(workspaceId, options = {}) {
     const search = options.search?.trim();
@@ -969,7 +1077,8 @@ var OpenGeniClient = class {
           ...sessionListQuery(options),
           ...options.cursor !== void 0 ? { cursor: options.cursor } : {},
           ...search ? { search } : {},
-          ...options.pinsOnly ? { pinsOnly: "true" } : {}
+          ...options.pinsOnly ? { pinsOnly: "true" } : {},
+          ...options.archivedOnly ? { archivedOnly: "true" } : {}
         }
       );
     } catch (error) {
@@ -994,6 +1103,9 @@ var OpenGeniClient = class {
       if (options.pinsOnly) {
         throw new Error("The connected OpenGeni API does not support pins-only session lists");
       }
+      if (options.archivedOnly) {
+        throw new Error("The connected OpenGeni API does not support archived session lists");
+      }
       return { pinned: [], sessions: response, nextCursor: null };
     }
     return response;
@@ -1021,6 +1133,29 @@ var OpenGeniClient = class {
       request
     );
   }
+  /** Set this authenticated member's explicit read/actively-working state. */
+  async updateSessionAttention(workspaceId, sessionId, request) {
+    return await this.requestJson(
+      "PUT",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/attention`,
+      request
+    );
+  }
+  /** Archive or restore this authenticated member's root chat. */
+  async updateSessionArchive(workspaceId, sessionId, request) {
+    return await this.requestJson(
+      "PUT",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/archive`,
+      request
+    );
+  }
+  /** Permanently delete one quiescent root session and its full descendant tree. */
+  async deleteSession(workspaceId, sessionId) {
+    return await this.requestJson(
+      "DELETE",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}`
+    );
+  }
   async getSessionLineage(workspaceId, sessionId) {
     const path = `/v1/workspaces/${workspaceId}/sessions/${sessionId}/lineage`;
     return await this.singleFlightRead(
@@ -1159,6 +1294,24 @@ var OpenGeniClient = class {
       { signal: options.signal }
     );
   }
+  /** Ask one authoritative Connected Machine runner to drain accepted work and
+   * install the exact signed version promoted for its channel. Progress is read
+   * from `listMachines`; completion requires the successor build identity. */
+  async updateMachineAgent(workspaceId, enrollmentId) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/machines/${enrollmentId}/update`
+    );
+  }
+  /** Revision-fenced update of a Connected Machine's optional command memory
+   * policy. Null byte limits preserve unrestricted machine access. */
+  async updateMachineOperationPolicy(workspaceId, enrollmentId, request) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/workspaces/${workspaceId}/machines/${enrollmentId}/operation-policy`,
+      request
+    );
+  }
   /**
    * Read the downsampled (~1/min) metrics series for ONE machine over a time
    * window (default 1h). The samples are oldest-first (a left-to-right chart).
@@ -1175,8 +1328,9 @@ var OpenGeniClient = class {
   /**
    * Remove one connected self-hosted machine enrollment. The control-plane
    * operation works while the agent is offline, revokes future reconnects,
-   * retains history, and returns a typed blocker when active route/lease or
-   * recovery dependencies make removal unsafe. `idempotencyKey` is replay-safe.
+   * retains history, and atomically detaches idle dependent sessions (a
+   * machine-home session becomes `backend:none`). Active turns, live leases,
+   * and recovery work remain typed blockers. `idempotencyKey` is replay-safe.
    */
   async removeEnrollment(workspaceId, enrollmentId, request = {}) {
     return await this.requestJson(
@@ -1213,7 +1367,8 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/enrollments/device/approve`,
       {
         userCode: request.userCode,
-        allowScreenControl: request.allowScreenControl ?? false
+        allowScreenControl: request.allowScreenControl ?? false,
+        ...request.scope ? { scope: request.scope } : {}
       }
     );
   }
@@ -1373,7 +1528,7 @@ var OpenGeniClient = class {
   }
   /** POST a user/control event to the session. Returns the accepted event. */
   async sendEvent(workspaceId, sessionId, event) {
-    return await this.requestJson(
+    return await this.requestSessionCommand(
       "POST",
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/events`,
       event
@@ -1381,6 +1536,7 @@ var OpenGeniClient = class {
   }
   async sendMessage(workspaceId, sessionId, message) {
     const input = typeof message === "string" ? { text: message } : message;
+    assertNoMessageTools(input);
     const { clientEventId, ...payload } = input;
     return await this.sendEvent(workspaceId, sessionId, {
       type: "user.message",
@@ -1472,52 +1628,59 @@ var OpenGeniClient = class {
     const path = `/v1/workspaces/${workspaceId}/sessions/${sessionId}/queue`;
     return await this.singleFlightRead(
       path,
-      () => this.requestJson("GET", path)
+      () => this.requestSessionCommand("GET", path)
     );
   }
   async moveQueueItem(workspaceId, sessionId, turnId, request) {
-    return await this.requestJson(
+    return await this.requestSessionCommand(
       "POST",
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/queue/${turnId}/move`,
       request
     );
   }
   async editQueueItem(workspaceId, sessionId, turnId, request) {
-    return await this.requestJson(
+    return await this.requestSessionCommand(
       "POST",
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/queue/${turnId}/edit`,
       request
     );
   }
   async steerQueueItem(workspaceId, sessionId, turnId, request) {
-    return await this.requestJson(
+    return await this.requestSessionCommand(
       "POST",
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/queue/${turnId}/steer`,
       request
     );
   }
   async deleteQueueItem(workspaceId, sessionId, turnId, request) {
-    return await this.requestJson(
+    return await this.requestSessionCommand(
       "POST",
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/queue/${turnId}/delete`,
       request
     );
   }
   async getComposerDraft(workspaceId, sessionId) {
-    return await this.requestJson(
+    return await this.requestSessionCommand(
       "GET",
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/composer-draft`
     );
   }
   async saveComposerDraft(workspaceId, sessionId, request) {
-    return await this.requestJson(
+    return await this.requestSessionCommand(
       "PUT",
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/composer-draft`,
       request
     );
   }
+  async submitComposerDraft(workspaceId, sessionId, request) {
+    return await this.requestSessionCommand(
+      "POST",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/composer-draft/submit`,
+      request
+    );
+  }
   async controlSession(workspaceId, sessionId, request) {
-    return await this.requestJson(
+    return await this.requestSessionCommand(
       "POST",
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/control`,
       request
@@ -1675,7 +1838,8 @@ var OpenGeniClient = class {
    */
   async steerMessage(workspaceId, sessionId, message) {
     const input = typeof message === "string" ? { text: message } : message;
-    return await this.requestJson(
+    assertNoMessageTools(input);
+    return await this.requestSessionCommand(
       "POST",
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/steer`,
       input
@@ -1700,6 +1864,30 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/sessions/${sessionId}/goal/revisions`
     );
   }
+  async listGoalRevisionPage(workspaceId, sessionId, options = {}) {
+    const query = new URLSearchParams();
+    if (options.limit !== void 0) query.set("limit", String(options.limit));
+    if (options.before !== void 0) query.set("before", options.before);
+    const suffix = query.size > 0 ? `?${query.toString()}` : "";
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/goal/revisions/page${suffix}`
+    );
+  }
+  async rejectGoalRevision(workspaceId, sessionId, revisionId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/goal/revisions/${revisionId}/reject`,
+      request
+    );
+  }
+  async rollbackGoalRevision(workspaceId, sessionId, revisionId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/goal/revisions/${revisionId}/rollback`,
+      request
+    );
+  }
   async applyGoalRevision(workspaceId, sessionId, revisionId, request) {
     return await this.requestJson(
       "POST",
@@ -1778,6 +1966,16 @@ var OpenGeniClient = class {
       options
     );
   }
+  /** Publish one exact sandbox file into permanent workspace artifact storage. */
+  async publishSandboxFileArtifact(workspaceId, sessionId, request, options = {}) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/artifacts/publish`,
+      request,
+      {},
+      options
+    );
+  }
   /** FileSystem: write a file (last-writer-wins; emits fs.changed). */
   async fsWrite(workspaceId, sessionId, request) {
     return await this.requestJson(
@@ -2598,6 +2796,21 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/model-catalog`
     );
   }
+  /** Read the workspace's hard provider/model allowlist. */
+  async getWorkspaceModelAccessPolicy(workspaceId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/model-policy`
+    );
+  }
+  /** Fully replace the workspace's hard provider/model allowlist. */
+  async updateWorkspaceModelAccessPolicy(workspaceId, request) {
+    return await this.requestJson(
+      "PUT",
+      `/v1/workspaces/${workspaceId}/model-policy`,
+      request
+    );
+  }
   /** Authenticated realtime voice models and credential readiness. */
   async getWorkspaceRealtimeModelCatalog(workspaceId) {
     return await this.requestJson(
@@ -2616,6 +2829,172 @@ var OpenGeniClient = class {
       "/v1/organization-memberships"
     );
   }
+  /** Bounded owner-only personal-resource authority page for one exact resource kind. */
+  async listUserResourceAuthorities(workspaceId, options) {
+    const query = new URLSearchParams({
+      scope: "user",
+      resourceKind: options.resourceKind
+    });
+    if (options.cursor) query.set("cursor", options.cursor);
+    if (options.limit !== void 0) query.set("limit", String(options.limit));
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/user-resource-authorities?${query.toString()}`
+    );
+  }
+  /** Issue an exact-session or standing personal-resource grant. */
+  async issueUserResourceGrant(workspaceId, authorityId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/user-resource-authorities/${authorityId}/grants`,
+      request
+    );
+  }
+  /** Revoke an owner grant through the exact workspace it targets. */
+  async revokeUserResourceGrant(workspaceId, grantId) {
+    return await this.requestJson(
+      "DELETE",
+      `/v1/workspaces/${workspaceId}/user-resource-authorities/grants/${grantId}?scope=user`
+    );
+  }
+  /** Create a new organization owned by the current managed human. */
+  async createOrganization(request) {
+    return await this.requestJson("POST", "/v1/organizations", request);
+  }
+  /** Pending and historical invitations addressed to the current managed human. */
+  async listOrganizationInvitations(options = {}) {
+    const query = new URLSearchParams();
+    if (options.cursor) query.set("cursor", options.cursor);
+    if (options.limit !== void 0) query.set("limit", String(options.limit));
+    const suffix = query.size > 0 ? `?${query.toString()}` : "";
+    return await this.requestJson(
+      "GET",
+      `/v1/organization-invitations${suffix}`
+    );
+  }
+  /** Admin-only deterministic page of invitations for one organization. */
+  async listOrganizationInvitationsForOrganization(organizationId, options = {}) {
+    const query = new URLSearchParams();
+    if (options.cursor) query.set("cursor", options.cursor);
+    if (options.limit !== void 0) query.set("limit", String(options.limit));
+    const suffix = query.size > 0 ? `?${query.toString()}` : "";
+    return await this.requestJson(
+      "GET",
+      `/v1/organizations/${organizationId}/invitations${suffix}`
+    );
+  }
+  async createOrganizationInvitation(organizationId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/organizations/${organizationId}/invitations`,
+      request
+    );
+  }
+  async acceptOrganizationInvitation(invitationId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/organization-invitations/${invitationId}/accept`,
+      request
+    );
+  }
+  async revokeOrganizationInvitation(organizationId, invitationId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/organizations/${organizationId}/invitations/${invitationId}/revoke`,
+      request
+    );
+  }
+  async listOrganizationMembers(organizationId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/organizations/${organizationId}/members`
+    );
+  }
+  /** Canonical organization identity and every non-personal workspace access roster. */
+  async getOrganizationAdministrationOverview(organizationId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/organizations/${organizationId}/overview`
+    );
+  }
+  /** Rename the organization under an exact optimistic-concurrency fence. */
+  async updateOrganizationName(organizationId, request) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/organizations/${organizationId}`,
+      request
+    );
+  }
+  /**
+   * Organization control-plane update for a shared workspace. This does not
+   * require or create operational workspace access for the organization admin.
+   */
+  async updateOrganizationWorkspace(organizationId, workspaceId, request) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/organizations/${organizationId}/workspaces/${workspaceId}`,
+      request
+    );
+  }
+  /** Create a shared workspace without implicitly granting the actor access. */
+  async createOrganizationWorkspace(organizationId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/organizations/${organizationId}/workspaces`,
+      request
+    );
+  }
+  async updateOrganizationWorkspaceSettings(organizationId, workspaceId, request) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/organizations/${organizationId}/workspaces/${workspaceId}/settings`,
+      request
+    );
+  }
+  async addOrganizationWorkspaceMember(organizationId, workspaceId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/organizations/${organizationId}/workspaces/${workspaceId}/members`,
+      request
+    );
+  }
+  async updateOrganizationWorkspaceMember(organizationId, workspaceId, subjectId, request) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/organizations/${organizationId}/workspaces/${workspaceId}/members/${encodeURIComponent(
+        subjectId
+      )}`,
+      request
+    );
+  }
+  async removeOrganizationWorkspaceMember(organizationId, workspaceId, subjectId) {
+    await this.requestVoid(
+      "DELETE",
+      `/v1/organizations/${organizationId}/workspaces/${workspaceId}/members/${encodeURIComponent(
+        subjectId
+      )}`
+    );
+  }
+  async updateOrganizationMember(organizationId, membershipId, request) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/organizations/${organizationId}/members/${membershipId}`,
+      request
+    );
+  }
+  async getOrganizationRetentionPolicy(organizationId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/organizations/${organizationId}/retention-policy`
+    );
+  }
+  async updateOrganizationRetentionPolicy(organizationId, request) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/organizations/${organizationId}/retention-policy`,
+      request
+    );
+  }
   async listWorkspaces() {
     return await this.requestJson("GET", "/v1/workspaces");
   }
@@ -2645,6 +3024,26 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/workspace-state/export${query}`
     );
   }
+  /** Permission-filtered Company Brain package with authorized guidance bodies. */
+  getCompanyBrain(workspaceId) {
+    return this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/company-brain`
+    );
+  }
+  /** Download the deterministic Markdown/YAML Company Brain package. */
+  async exportCompanyBrainOkf(workspaceId) {
+    const response = await this.requestResponse(
+      "GET",
+      `/v1/workspaces/${workspaceId}/company-brain/export`
+    );
+    const headers = response.headers;
+    return {
+      content: await response.text(),
+      contentType: headers.get("content-type") ?? "text/markdown",
+      filename: headers.get("content-disposition")?.split('"')[1] ?? "company-brain.okf.md"
+    };
+  }
   async updateWorkspace(workspaceId, request) {
     return await this.requestJson("PATCH", `/v1/workspaces/${workspaceId}`, request);
   }
@@ -2664,6 +3063,44 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/instruction-policies${query ? `?${query}` : ""}`
     );
   }
+  /** Inspect the bounded, permission-filtered governed-learning timeline. */
+  async getWorkspaceLearningHistory(workspaceId, options = {}) {
+    const params = new URLSearchParams();
+    if (options.limit !== void 0) params.set("limit", String(options.limit));
+    const query = params.toString();
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/learning${query ? `?${query}` : ""}`
+    );
+  }
+  async createWorkspaceLearningPolicyRevision(workspaceId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/learning/revisions`,
+      request
+    );
+  }
+  async activateWorkspaceLearningPolicyRevision(workspaceId, revisionId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/learning/revisions/${encodeURIComponent(revisionId)}/activate`,
+      request
+    );
+  }
+  async rollbackWorkspaceLearningPolicyRevision(workspaceId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/learning/rollback`,
+      request
+    );
+  }
+  async undoGovernedLearningActivation(workspaceId, activationReceiptId, request = {}) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/learning/activations/${encodeURIComponent(activationReceiptId)}/undo`,
+      request
+    );
+  }
   async getWorkspaceInstructionPolicyRevision(workspaceId, revisionId) {
     return await this.requestJson(
       "GET",
@@ -3076,6 +3513,13 @@ var OpenGeniClient = class {
       request
     );
   }
+  async reorderChannels(workspaceId, request) {
+    return await this.requestJson(
+      "PUT",
+      `/v1/workspaces/${workspaceId}/channels/order`,
+      request
+    );
+  }
   async deleteChannel(workspaceId, channelId) {
     await this.requestJson(
       "DELETE",
@@ -3332,15 +3776,15 @@ var OpenGeniClient = class {
       options
     );
   }
-  /** Assemble one permanent generated-image receipt from bounded authenticated ranges. */
+  /** Assemble one permanent image or file artifact from bounded authenticated ranges. */
   async downloadRetainedArtifact(workspaceId, artifact, options = {}) {
-    assertRetainedGeneratedImageReceipt(workspaceId, artifact);
+    assertRetainedWorkspaceArtifactReceipt(workspaceId, artifact);
     const bytes = await this.downloadRetainedArtifactBytes(artifact, options);
     return { artifact, bytes };
   }
-  /** Mint a short-lived, zero-copy browser source for a validated generated image. */
+  /** Mint a short-lived, zero-copy browser source for a validated workspace artifact. */
   async createRetainedArtifactDownloadUrl(workspaceId, artifact, options = {}) {
-    assertRetainedGeneratedImageReceipt(workspaceId, artifact);
+    assertRetainedWorkspaceArtifactReceipt(workspaceId, artifact);
     const download = await this.createFileDownloadUrl(workspaceId, artifact.artifactId, options);
     assertSafeArtifactDownloadUrl(download);
     return download;
@@ -3537,6 +3981,28 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/document-bases/${baseId}/documents`
     );
   }
+  /**
+   * List every Document the current human can manage from this workspace,
+   * including portable personal and organization-scoped Documents whose
+   * immutable ingestion workspace is different.
+   */
+  async listAccessibleDocuments(workspaceId) {
+    return await this.requestJson("GET", `/v1/workspaces/${workspaceId}/documents`);
+  }
+  /** Read the immutable source file through the Document's effective authority. */
+  async getDocumentOriginalFile(workspaceId, documentId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/documents/${documentId}/original-file`
+    );
+  }
+  /** Mint a source-file URL through the Document's effective authority. */
+  async createDocumentOriginalFileDownloadUrl(workspaceId, documentId) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/documents/${documentId}/original-file/download-url`
+    );
+  }
   /**
    * Drop raw text or an already-uploaded file into the workspace's Default
    * base. When curation is enabled, it may name, summarize, categorize, and
@@ -3561,6 +4027,39 @@ var OpenGeniClient = class {
       request
     );
   }
+  /**
+   * Atomically reclassify a Document's authority and every indexed chunk.
+   * The operation is replay-safe and rejects a stale expected authority tuple.
+   */
+  async reclassifyDocumentAuthority(workspaceId, documentId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/documents/${documentId}/authority-reclassifications`,
+      request
+    );
+  }
+  /** List the current actor's durable authority-reclassification receipts. */
+  async listDocumentAuthorityReclassifications(workspaceId, documentId, options = {}) {
+    const params = new URLSearchParams();
+    if (options.limit !== void 0) params.set("limit", String(options.limit));
+    if (options.cursor) params.set("cursor", options.cursor);
+    const query = params.size > 0 ? `?${params.toString()}` : "";
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/documents/${documentId}/authority-reclassifications${query}`
+    );
+  }
+  /**
+   * Advance one resumable, organization-scoped Default collection backfill.
+   * Reusing an operation ID is idempotent; keep the run ID across batches.
+   */
+  async runDocumentDefaultCollectionBackfill(workspaceId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/document-default-collection-backfills`,
+      request
+    );
+  }
   /** Retry indexing for a failed document. */
   async reindexDocument(workspaceId, baseId, documentId) {
     return await this.requestJson(
@@ -3964,6 +4463,66 @@ var OpenGeniClient = class {
     );
     return response.connections;
   }
+  /** Secret-free status for the caller's exact personal GitHub connection. */
+  async personalGitHubStatus(workspaceId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/connections/github`
+    );
+  }
+  /** Start the dedicated personal GitHub authorization-code + PKCE flow. */
+  async startPersonalGitHubOAuth(workspaceId, request = {}) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/connections/github/oauth/start`,
+      request
+    );
+  }
+  /** Re-authorize one exact personal GitHub Connection generation in place. */
+  async reconnectPersonalGitHub(workspaceId, connectionId, request = {}) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/connections/${connectionId}/github/reconnect`,
+      request
+    );
+  }
+  /** Revoke one exact generation through an idempotent owner-only disconnect. */
+  async disconnectPersonalGitHub(workspaceId, connectionId, request) {
+    const response = await this.requestJson(
+      "DELETE",
+      `/v1/workspaces/${workspaceId}/connections/${connectionId}`,
+      request
+    );
+    return response.connection;
+  }
+  /** Browse one bounded page of repositories visible to one exact owner connection. */
+  async listPersonalGitHubRepositories(workspaceId, connectionId, options = {}) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/connections/${connectionId}/github/repositories`,
+      void 0,
+      {
+        ...options.cursor !== void 0 ? { cursor: String(options.cursor) } : {},
+        ...options.limit !== void 0 ? { limit: String(options.limit) } : {}
+      }
+    );
+  }
+  /** Atomically replace the exact owner connection's selected repository set. */
+  async replacePersonalGitHubRepositorySelections(workspaceId, connectionId, request) {
+    return await this.requestJson(
+      "PUT",
+      `/v1/workspaces/${workspaceId}/connections/${connectionId}/github/repositories`,
+      request
+    );
+  }
+  /** Revalidate every selected repository without accepting provider URLs from the caller. */
+  async verifyPersonalGitHubRepositorySelections(workspaceId, connectionId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/connections/${connectionId}/github/repositories/verify`,
+      request
+    );
+  }
   /** List the secret-free Slack team -> OpenGeni tenant routing authority. */
   async listSlackInstallationBindings(workspaceId) {
     const response = await this.requestJson(
@@ -4190,6 +4749,14 @@ var OpenGeniClient = class {
   async createBillingCheckout(request) {
     return await this.requestJson("POST", "/v1/billing/checkout", request);
   }
+  /** Open Stripe's hosted portal for invoices and payment information. */
+  async createBillingPortalSession(request = {}) {
+    return await this.requestJson(
+      "POST",
+      "/v1/billing/portal",
+      request
+    );
+  }
   // --- Internals -------------------------------------------------------------
   headers(correlationId) {
     const extra = typeof this.options.headers === "function" ? this.options.headers() : this.options.headers;
@@ -4384,38 +4951,60 @@ var OpenGeniClient = class {
     return await this.requestJson("DELETE", `/v1/workspaces/${workspaceId}/supergrok/accounts/${accountId}`, {});
   }
   /** Contract-checked JSON transport shared by opt-in typed SDK clients. */
+  async requestSessionCommand(method, path, body) {
+    return await this.requestJson(
+      method,
+      path,
+      body,
+      {},
+      {
+        timeoutMs: this.sessionCommandTimeoutMs
+      }
+    );
+  }
+  /** Contract-checked JSON transport shared by opt-in typed SDK clients. */
   async requestJson(method, path, body, query = {}, options = {}) {
     const correlationId = crypto.randomUUID();
-    let response;
+    const abort = requestAbortSignal(options);
     try {
-      response = await this.fetchImpl(this.url(path, query), {
-        method,
-        headers: {
-          ...this.headers(correlationId),
-          Accept: "application/json",
-          ...body !== void 0 ? { "Content-Type": "application/json" } : {}
-        },
-        ...body !== void 0 ? { body: JSON.stringify(body) } : {},
-        ...options.signal ? { signal: options.signal } : {}
-      });
-    } catch (error) {
-      if (isMutationMethod(method)) {
-        throw mutationTransportError(correlationId);
+      let response;
+      try {
+        response = await awaitWithAbort(
+          this.fetchImpl(this.url(path, query), {
+            method,
+            headers: {
+              ...this.headers(correlationId),
+              Accept: "application/json",
+              ...body !== void 0 ? { "Content-Type": "application/json" } : {}
+            },
+            ...body !== void 0 ? { body: JSON.stringify(body) } : {},
+            ...abort.signal ? { signal: abort.signal } : {}
+          }),
+          abort.signal
+        );
+      } catch (error) {
+        if (options.signal?.aborted) throw error;
+        if (isMutationMethod(method)) {
+          throw mutationTransportError(correlationId);
+        }
+        throw error;
       }
-      throw error;
-    }
-    assertApiContractResponse(response);
-    if (!response.ok) {
-      throw await apiErrorFromResponse(response, { method, correlationId });
-    }
-    await assertJsonResponse(response, { method, correlationId });
-    try {
-      return await response.json();
-    } catch (error) {
-      if (isMutationMethod(method)) {
-        throw mutationTransportError(correlationId);
+      assertApiContractResponse(response);
+      if (!response.ok) {
+        throw await apiErrorFromResponse(response, { method, correlationId });
       }
-      throw error;
+      await assertJsonResponse(response, { method, correlationId });
+      try {
+        return await response.json();
+      } catch (error) {
+        if (options.signal?.aborted) throw error;
+        if (isMutationMethod(method)) {
+          throw mutationTransportError(correlationId);
+        }
+        throw error;
+      }
+    } finally {
+      abort.dispose();
     }
   }
   /** Authenticated, contract-checked response for bounded streaming downloads. */
@@ -4441,7 +5030,7 @@ var OpenGeniClient = class {
     }
     return response;
   }
-  /** Like `requestJson` for endpoints that respond with no body (204). */
+  /** Contract-checked transport shared by opt-in typed SDK clients for 204 responses. */
   async requestVoid(method, path, body) {
     const correlationId = crypto.randomUUID();
     let response;
@@ -4533,6 +5122,54 @@ function filenameForAudioMimeType(mimeType) {
   }
 }
 var API_ERROR_MAX_BYTES = 16 * 1024;
+function requestAbortSignal(options) {
+  const timeoutMs = options.timeoutMs ?? 0;
+  if (timeoutMs <= 0) {
+    return { signal: options.signal, dispose: () => void 0 };
+  }
+  const controller = new AbortController();
+  const onCallerAbort = () => controller.abort(options.signal?.reason);
+  if (options.signal?.aborted) {
+    onCallerAbort();
+  } else {
+    options.signal?.addEventListener("abort", onCallerAbort, { once: true });
+  }
+  const timer = setTimeout(
+    () => controller.abort(new DOMException("Request timed out", "TimeoutError")),
+    timeoutMs
+  );
+  return {
+    signal: controller.signal,
+    dispose: () => {
+      clearTimeout(timer);
+      options.signal?.removeEventListener("abort", onCallerAbort);
+    }
+  };
+}
+async function awaitWithAbort(promise, signal) {
+  if (!signal) return await promise;
+  if (signal.aborted) {
+    throw signal.reason ?? new DOMException("Request aborted", "AbortError");
+  }
+  return await new Promise((resolve, reject) => {
+    const onAbort = () => {
+      cleanup();
+      reject(signal.reason ?? new DOMException("Request aborted", "AbortError"));
+    };
+    const cleanup = () => signal.removeEventListener("abort", onAbort);
+    signal.addEventListener("abort", onAbort, { once: true });
+    promise.then(
+      (value) => {
+        cleanup();
+        resolve(value);
+      },
+      (cause) => {
+        cleanup();
+        reject(cause);
+      }
+    );
+  });
+}
 async function apiErrorFromResponse(response, context) {
   return new OpenGeniApiError(response.status, await readBoundedJsonErrorBody(response), {
     correlationId: response.headers.get(OPENGENI_CORRELATION_HEADER) ?? context.correlationId,
@@ -4596,9 +5233,9 @@ async function sha256Hex(bytes) {
 async function cancelResponseBody(response, reason) {
   await response.body?.cancel(reason).catch(() => void 0);
 }
-function assertRetainedGeneratedImageReceipt(workspaceId, artifact) {
-  if (!parseRetainedGeneratedImageReference(artifact, workspaceId)) {
-    throw new OpenGeniApiError(502, "retained generated image receipt is invalid");
+function assertRetainedWorkspaceArtifactReceipt(workspaceId, artifact) {
+  if (!parseRetainedGeneratedImageReference(artifact, workspaceId) && !parseRetainedWorkspaceFileReference(artifact, workspaceId)) {
+    throw new OpenGeniApiError(502, "retained workspace artifact receipt is invalid");
   }
 }
 function assertSafeArtifactDownloadUrl(value) {
@@ -4675,6 +5312,8 @@ export {
   streamWorkspaceInteractionRevisions,
   streamWorkspaceLiveEvents,
   parseWorkspaceLiveEvent,
+  parseRetainedWorkspaceFileReference,
+  parseSandboxFileArtifactReceipt,
   parseRetainedGeneratedImageReference,
   generatedImageSandboxPathMatches,
   parseGeneratedImageReceipt,
@@ -4683,4 +5322,4 @@ export {
   parseMediaGenerationResult,
   OpenGeniClient
 };
-//# sourceMappingURL=chunk-PKQ377ED.js.map
+//# sourceMappingURL=chunk-YBQTKNTL.js.map