@opengeni/sdk 1.3.0 → 1.4.0

package/README.md

@@ -188,7 +188,11 @@ and, unless `modelSelection: false`, the user's explicit model choices, so it
 needs the `createSession` hook. The hook sees them as input; the proxy adds the
 files and applies those choices to the request the hook returns. Voice input
 (`POST .../transcriptions`) is forwarded as the resolved user unless
-`voiceInput: false`.
+`voiceInput: false`. The client config the proxy serves reports what it can do:
+`sessionCreation` (a `createSession` hook exists), `archive`, and `artifacts`
+(`false` unless `artifacts: true`). The stock UI hides "New chat" and
+"Archive" when they are off, shows Site previews as unavailable without a
+request, and shows the composer microphone only when `voiceInput.available`.
 
 `listSessionPage` includes personal pinned details by default. A caller with a
 separate `pinsOnly: true` read can pass `includePinned: false` on ordinary pages
@@ -209,8 +213,14 @@ workspace. Only the native routes `OpenGeniProvider` and the conversation use
 are served: client config; workspace read, model catalog, live control stream,
 and workspace Resume; session read/rename, events (list and SSE with
 `Last-Event-ID` resume), send/steer/approval/human-input, queue, composer
-draft, pause/resume; and, unless `files: false`, attachment upload and download
-URLs. Every other route or method is a 404 (cancel and workspace Pause are
+draft, pause/resume, and the session goal (read; pause/resume, forwarding only
+`{ status: "paused" | "active" }`; and clear, the proxy's only `DELETE`); and, unless `files: false`, attachment upload and download
+URLs plus the media the session produced (generated images and video,
+published files, and browser or computer screenshots). Workspace-level
+artifact reads (`artifacts/:id/content` with `Range`, `artifacts/:id/playback-source`)
+must name their session in `x-opengeni-session-id`; the proxy runs
+`authorizeSession` and forwards only an artifact OpenGeni proves that session
+produced. Every other route or method is a 404 (cancel and workspace Pause are
 refused); unknown query parameters on served reads pass through. Browser session creation is disabled
 unless you supply `createSession`; the browser may then send only
 `initialMessage` and `idempotencyKey`, and your hook returns the full request

package/dist/adapters/next.js

@@ -1,10 +1,10 @@
 import {
   createSessionProxyHandler
-} from "../chunk-CNSPJYF6.js";
+} from "../chunk-FYQAMXDW.js";
 import "../chunk-UM4ZXXJR.js";
 import "../chunk-U6CV2SXO.js";
 import "../chunk-APXVSSSY.js";
-import "../chunk-IB6SUE3R.js";
+import "../chunk-GYM54GKM.js";
 import "../chunk-V6GIY62B.js";
 
 // src/adapters/next.ts

package/dist/artifacts.js

@@ -1,11 +1,11 @@
 import {
   OpenGeniClient
-} from "./chunk-YVH2PH4X.js";
-import "./chunk-G5NZGPTB.js";
-import "./chunk-RSKO3CMZ.js";
+} from "./chunk-MXV5O25O.js";
+import "./chunk-CA2T7QT4.js";
+import "./chunk-BVIIRSJY.js";
 import "./chunk-VPVMLM7Q.js";
 import "./chunk-APXVSSSY.js";
-import "./chunk-IB6SUE3R.js";
+import "./chunk-GYM54GKM.js";
 import "./chunk-NC57YMUO.js";
 import "./chunk-V6GIY62B.js";
 export {

package/dist/azure-live-transport.d.ts

@@ -0,0 +1,32 @@
+import { type StartCodexRealtimeWebrtcOptions } from "./codex-realtime.js";
+import type { RealtimeControllerTransportStarter } from "./codex-realtime-controller.js";
+/** Azure Live has timed transcript fragments, not provider-finalized turns. */
+export declare class AzureLiveDataChannel extends EventTarget {
+    private readonly raw;
+    private readonly drainTimeoutMs;
+    private pending;
+    private timer;
+    private ordinal;
+    private readonly prefix;
+    private closed;
+    private closeSent;
+    private providerClosed;
+    private readonly delegations;
+    private userSinceDelegation;
+    private draining;
+    private finishDrain;
+    private readonly onOpen;
+    private readonly onClose;
+    private readonly onError;
+    private readonly onMessage;
+    constructor(raw: RTCDataChannel, drainTimeoutMs?: number);
+    get readyState(): RTCDataChannelState;
+    asRtcDataChannel(): RTCDataChannel;
+    private emit;
+    private flush;
+    private receive;
+    send(payload: string): void;
+    drain(): Promise<void>;
+    close(): void;
+}
+export declare function createAzureLiveTransportStarter(options?: Pick<StartCodexRealtimeWebrtcOptions, "remoteAudio" | "createPeerConnection">): RealtimeControllerTransportStarter;

package/dist/browser.js

@@ -1,6 +1,6 @@
 import {
   resolveWorkspaceVoiceInputEnabled
-} from "./chunk-VYCTL62C.js";
+} from "./chunk-GZQSWAKD.js";
 import {
   OpenGeniToolCallError,
   OpenGeniToolReapprovalRequiredError,
@@ -8,13 +8,13 @@ import {
 } from "./chunk-4SMEOV3P.js";
 import {
   OpenGeniClient
-} from "./chunk-RSKO3CMZ.js";
+} from "./chunk-BVIIRSJY.js";
 import "./chunk-VPVMLM7Q.js";
 import "./chunk-APXVSSSY.js";
 import {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION
-} from "./chunk-IB6SUE3R.js";
+} from "./chunk-GYM54GKM.js";
 import "./chunk-NC57YMUO.js";
 import {
   OpenGeniAllowanceExhaustedError,

package/dist/chat/index.js

@@ -11,18 +11,18 @@ import {
   EMPTY_FINAL_REPLY_NOTICE,
   OpenGeniEmbeddingClient,
   turnCompletedWithEmptyFinalReply
-} from "../chunk-ZBICMU4Z.js";
-import "../chunk-YVH2PH4X.js";
-import "../chunk-G5NZGPTB.js";
+} from "../chunk-D534PIXF.js";
+import "../chunk-MXV5O25O.js";
+import "../chunk-CA2T7QT4.js";
 import {
   chatDefaults
 } from "../chunk-UM4ZXXJR.js";
-import "../chunk-RSKO3CMZ.js";
+import "../chunk-BVIIRSJY.js";
 import "../chunk-VPVMLM7Q.js";
 import {
   parseSseStream
 } from "../chunk-APXVSSSY.js";
-import "../chunk-IB6SUE3R.js";
+import "../chunk-GYM54GKM.js";
 import "../chunk-NC57YMUO.js";
 import {
   OpenGeniApiError,

package/dist/{chunk-RSKO3CMZ.js → chunk-BVIIRSJY.js}

@@ -15,7 +15,7 @@ import {
   OPENGENI_API_CONTRACT_REVISION,
   OPENGENI_CORRELATION_HEADER,
   RETAINED_OUTPUT_MAX_PAGE_BYTES
-} from "./chunk-IB6SUE3R.js";
+} from "./chunk-GYM54GKM.js";
 import {
   OpenGeniInteractionClient,
   decodeComputerFrameMetadataHeader,
@@ -6840,4 +6840,4 @@ export {
   parseMediaGenerationResult,
   OpenGeniClient
 };
-//# sourceMappingURL=chunk-RSKO3CMZ.js.map
+//# sourceMappingURL=chunk-BVIIRSJY.js.map

package/dist/{chunk-G5NZGPTB.js → chunk-CA2T7QT4.js}

@@ -1,6 +1,6 @@
 import {
   OpenGeniClient
-} from "./chunk-RSKO3CMZ.js";
+} from "./chunk-BVIIRSJY.js";
 
 // src/document-authority-client.ts
 var OpenGeniDocumentAuthorityClient = class extends OpenGeniClient {
@@ -147,4 +147,4 @@ var OpenGeniDocumentAuthorityClient = class extends OpenGeniClient {
 export {
   OpenGeniDocumentAuthorityClient
 };
-//# sourceMappingURL=chunk-G5NZGPTB.js.map
+//# sourceMappingURL=chunk-CA2T7QT4.js.map

package/dist/{chunk-ZBICMU4Z.js → chunk-D534PIXF.js}

@@ -1,6 +1,6 @@
 import {
   OpenGeniClient
-} from "./chunk-YVH2PH4X.js";
+} from "./chunk-MXV5O25O.js";
 
 // src/embedding-client.ts
 function hasStaticHeader(options, names) {
@@ -337,4 +337,4 @@ export {
   EMPTY_FINAL_REPLY_NOTICE,
   turnCompletedWithEmptyFinalReply
 };
-//# sourceMappingURL=chunk-ZBICMU4Z.js.map
+//# sourceMappingURL=chunk-D534PIXF.js.map

package/dist/{chunk-CNSPJYF6.js → chunk-FYQAMXDW.js}

@@ -11,7 +11,7 @@ import {
 import {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION
-} from "./chunk-IB6SUE3R.js";
+} from "./chunk-GYM54GKM.js";
 import {
   OpenGeniApiError,
   OpenGeniSetupError
@@ -336,10 +336,10 @@ function createSessionProxyHandler(target, options) {
   return async (request) => {
     try {
       const method = request.method;
-      if (!["GET", "POST", "PUT", "PATCH"].includes(method)) {
+      if (!PROXY_METHODS.includes(method)) {
         return new Response(null, {
           status: 405,
-          headers: { Allow: "GET, POST, PUT, PATCH" }
+          headers: { Allow: PROXY_METHODS.join(", ") }
         });
       }
       const resolved = await options.resolve(request);
@@ -501,7 +501,12 @@ function createSessionProxyHandler(target, options) {
             // reads it here instead of knowing any Opengeni id.
             workspaceId,
             sandboxFiles: sandboxFilesEnabled,
-            ...artifacts ? { artifacts } : {},
+            // Stock UIs show Site previews and the artifact viewer only when
+            // this proxy serves them; `false` keeps them from failing on click.
+            artifacts: artifacts ?? false,
+            // Whether the stock "New chat" and "Archive" actions can succeed.
+            sessionCreation: options.createSession !== void 0,
+            archive: archiveEnabled,
             // Explicit true also tells stock UIs to offer end users the model picker.
             ...modelSelection ? options.modelSelection === true ? { modelSelection: true } : {} : { modelSelection: false }
           });
@@ -562,6 +567,45 @@ function createSessionProxyHandler(target, options) {
         }
         return errorJson(404, "route_not_allowed", "Not found.");
       }
+      if (area === "artifacts") {
+        const [artifactId, ...artifactOp] = tail;
+        const route2 = `${method} ${artifactOp.join("/")}`;
+        if (!filesEnabled || !artifactId || !SEGMENT.test(artifactId) || route2 !== "GET content" && route2 !== "POST playback-source") {
+          return errorJson(404, "route_not_allowed", "Not found.");
+        }
+        const sessionId2 = request.headers.get(SESSION_SCOPE_HEADER)?.trim() ?? "";
+        if (!SEGMENT.test(sessionId2)) {
+          reject(400, "session_scope_required", "Artifact reads must name their session.");
+        }
+        if (options.authorizeSession && !await options.authorizeSession(sessionId2, context)) {
+          return errorJson(404, "session_not_found", "Session not found.");
+        }
+        await getSessionProxyArtifactAssociation(
+          client,
+          workspaceId,
+          sessionId2,
+          "retained",
+          artifactId,
+          call
+        );
+        if (route2 === "POST playback-source") {
+          return json(
+            await client.requestJson(
+              "POST",
+              `${base}/artifacts/${artifactId}/playback-source`,
+              void 0,
+              {},
+              call
+            )
+          );
+        }
+        return retainedContent(
+          await client.getRetainedArtifactContent(workspaceId, artifactId, {
+            ...retainedRange(request),
+            signal: request.signal
+          })
+        );
+      }
       if (area === "transcriptions" && tail.length === 0 && method === "POST") {
         if (!voiceInputEnabled) return errorJson(404, "route_not_allowed", "Not found.");
         return json(await client.transcribeAudio(workspaceId, await transcriptionInput(request)));
@@ -765,6 +809,22 @@ function createSessionProxyHandler(target, options) {
         }
         case "GET human-input-requests":
           return await read(`${session}/human-input-requests`);
+        case "GET goal":
+          return await read(`${session}/goal`);
+        case "PATCH goal": {
+          const status = body?.status;
+          if (status !== "paused" && status !== "active" || Object.keys(body ?? {}).some((key) => key !== "status" && key !== "rationale")) {
+            reject(
+              403,
+              "goal_update_not_allowed",
+              "Only { status: paused | active } is available."
+            );
+          }
+          return json(await client.requestJson("PATCH", `${session}/goal`, { status }));
+        }
+        case "DELETE goal":
+          await client.deleteGoal(workspaceId, sessionId);
+          return new Response(null, { status: 204 });
         case "POST fs/read":
         case "POST fs/read-workspace": {
           if (!sandboxFilesEnabled) return errorJson(404, "route_not_allowed", "Not found.");
@@ -773,6 +833,19 @@ function createSessionProxyHandler(target, options) {
           );
         }
       }
+      if (op[0] === "artifacts" && (op.length === 2 || op[2] === "content") && method === "GET") {
+        if (!filesEnabled || op.length > 3) {
+          return errorJson(404, "route_not_allowed", "Not found.");
+        }
+        await client.getSession(workspaceId, sessionId, call);
+        if (op.length === 2) return await read(`${session}/artifacts/${op[1]}`);
+        return retainedContent(
+          await client.getSessionRetainedArtifactContent(workspaceId, sessionId, op[1], {
+            ...retainedRange(request),
+            signal: request.signal
+          })
+        );
+      }
       if (op.length === 2 && op[0] === "human-input-requests" && method === "GET") {
         return await read(`${session}/human-input-requests/${op[1]}`);
       }
@@ -785,6 +858,7 @@ function createSessionProxyHandler(target, options) {
     }
   };
 }
+var PROXY_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
 var UPLOAD_FIELDS = ["scope", "filename", "contentType", "sizeBytes", "sha256"];
 function normalizeToolServer(toolServer) {
   const configured = toolServer.url ?? globalThis.process?.env?.OPENGENI_TOOL_SERVER_URL;
@@ -976,6 +1050,31 @@ async function legacyViewerGrant(client, workspaceId) {
   if (!grant) reject(403, "workspace_not_allowed", "This workspace is not available.");
   return grant;
 }
+function retainedRange(request) {
+  const range = request.headers.get("range");
+  if (range === null) return {};
+  if (range.length > 128 || /[^\x20-\x7e]/.test(range)) {
+    reject(400, "invalid_range", "Range must be at most 128 printable ASCII bytes.");
+  }
+  return { range };
+}
+function retainedContent(content) {
+  return new Response(content.bytes, {
+    status: content.status,
+    headers: {
+      "Content-Type": content.contentType,
+      "Content-Length": String(content.contentLength),
+      ...content.contentRange ? { "Content-Range": content.contentRange } : {},
+      "Accept-Ranges": "bytes",
+      "Cache-Control": "private, no-store",
+      // Bytes for the conversation's own reader; never rendered on this origin.
+      "Content-Security-Policy": "sandbox",
+      "Content-Disposition": "attachment",
+      "Cross-Origin-Resource-Policy": "same-origin",
+      "X-Content-Type-Options": "nosniff"
+    }
+  });
+}
 function sandboxRead(body) {
   const path = body?.path;
   const encoding = body?.encoding;
@@ -1365,4 +1464,4 @@ export {
   createSessionProxyHandler,
   artifactViewerCapability
 };
-//# sourceMappingURL=chunk-CNSPJYF6.js.map
+//# sourceMappingURL=chunk-FYQAMXDW.js.map