@opengeni/sdk 1.3.0 → 1.4.2

package/dist/{chunk-CNSPJYF6.js → chunk-TX6ED3AP.js}

@@ -11,7 +11,7 @@ import {
 import {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION
-} from "./chunk-IB6SUE3R.js";
+} from "./chunk-DTIMLEPB.js";
 import {
   OpenGeniApiError,
   OpenGeniSetupError
@@ -267,6 +267,7 @@ function downloadSessionProxySiteHtml(client, workspaceId, artifactId, options)
 }
 
 // src/session-proxy.ts
+var SESSION_PROXY_DEFAULT_HEARTBEAT_MS = 5e3;
 var DEFAULT_MAX_BODY_BYTES = 1024 * 1024;
 var SEGMENT = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
 var QUEUE_OPERATIONS = /* @__PURE__ */ new Set(["move", "edit", "steer", "delete"]);
@@ -309,13 +310,14 @@ function createSessionProxyHandler(target, options) {
   const maxBodyBytes = options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
   const filesEnabled = options.files ?? true;
   const voiceInputEnabled = options.voiceInput ?? true;
+  const realtimeVoiceEnabled = options.realtimeVoice ?? true;
   const sandboxFilesEnabled = options.sandboxFiles === true;
   const artifactsEnabled = options.artifacts !== void 0 && options.artifacts !== false;
   const editableLiveUrl = artifactsEnabled ? liveSocketUrl(
     (typeof options.artifacts === "object" ? options.artifacts.editableLiveUrl : void 0) ?? service.apiUrl(EDITABLE_ARTIFACT_LIVE_PATH)
   ) : null;
   const modelSelection = options.modelSelection ?? true;
-  const heartbeatMs = options.heartbeatMs ?? 15e3;
+  const heartbeatMs = options.heartbeatMs ?? SESSION_PROXY_DEFAULT_HEARTBEAT_MS;
   const sessionList = options.sessionList ?? "mine";
   const archiveEnabled = options.archive ?? true;
   const chats = options.chats ?? "private";
@@ -336,10 +338,10 @@ function createSessionProxyHandler(target, options) {
   return async (request) => {
     try {
       const method = request.method;
-      if (!["GET", "POST", "PUT", "PATCH"].includes(method)) {
+      if (!PROXY_METHODS.includes(method)) {
         return new Response(null, {
           status: 405,
-          headers: { Allow: "GET, POST, PUT, PATCH" }
+          headers: { Allow: PROXY_METHODS.join(", ") }
         });
       }
       const resolved = await options.resolve(request);
@@ -438,6 +440,30 @@ function createSessionProxyHandler(target, options) {
           ]
         };
       };
+      const refreshRealtimeCredentials = async (sessionId2, updates) => {
+        if (updates.length === 0) return;
+        try {
+          const servers = (await client.getSession(workspaceId, sessionId2, call)).mcpServers ?? [];
+          const rotations = updates.flatMap((update) => {
+            const server = servers.find((candidate) => candidate.id === update.id);
+            return server ? [
+              {
+                id: update.id,
+                expectedCredentialVersion: server.credentialVersion,
+                expectedServerUrl: server.url,
+                headers: update.headers
+              }
+            ] : [];
+          });
+          if (rotations.length === 0) return;
+          await client.rotateSessionMcpCredentials(workspaceId, sessionId2, {
+            operationKey: crypto.randomUUID(),
+            updates: rotations
+          });
+        } catch (error) {
+          if (!(error instanceof OpenGeniApiError)) throw error;
+        }
+      };
       const forwardMessage = async (value, input) => {
         const message = sanitizeMessage(value, modelSelection || input.delivery === "submit");
         const extras = await messageExtras(input);
@@ -501,7 +527,13 @@ function createSessionProxyHandler(target, options) {
             // reads it here instead of knowing any Opengeni id.
             workspaceId,
             sandboxFiles: sandboxFilesEnabled,
-            ...artifacts ? { artifacts } : {},
+            // Stock UIs show Site previews and the artifact viewer only when
+            // this proxy serves them; `false` keeps them from failing on click.
+            artifacts: artifacts ?? false,
+            // Whether the stock "New chat" and "Archive" actions can succeed.
+            sessionCreation: options.createSession !== void 0,
+            archive: archiveEnabled,
+            ...realtimeVoiceEnabled ? {} : { realtimeVoice: false },
             // Explicit true also tells stock UIs to offer end users the model picker.
             ...modelSelection ? options.modelSelection === true ? { modelSelection: true } : {} : { modelSelection: false }
           });
@@ -526,6 +558,10 @@ function createSessionProxyHandler(target, options) {
       if (area === "model-catalog" && tail.length === 0 && method === "GET") {
         return await read(`${base}/model-catalog`);
       }
+      if (area === "realtime-model-catalog" && tail.length === 0 && method === "GET") {
+        if (!realtimeVoiceEnabled) return errorJson(404, "route_not_allowed", "Not found.");
+        return await read(`${base}/realtime-model-catalog`);
+      }
       if (area === "live-events" && tail.length === 1 && tail[0] === "stream" && method === "GET") {
         await client.requestJson("GET", base, void 0, {}, call);
         return workspaceLiveStream(client, workspaceId, url.searchParams, request, heartbeatMs);
@@ -562,6 +598,45 @@ function createSessionProxyHandler(target, options) {
         }
         return errorJson(404, "route_not_allowed", "Not found.");
       }
+      if (area === "artifacts") {
+        const [artifactId, ...artifactOp] = tail;
+        const route2 = `${method} ${artifactOp.join("/")}`;
+        if (!filesEnabled || !artifactId || !SEGMENT.test(artifactId) || route2 !== "GET content" && route2 !== "POST playback-source") {
+          return errorJson(404, "route_not_allowed", "Not found.");
+        }
+        const sessionId2 = request.headers.get(SESSION_SCOPE_HEADER)?.trim() ?? "";
+        if (!SEGMENT.test(sessionId2)) {
+          reject(400, "session_scope_required", "Artifact reads must name their session.");
+        }
+        if (options.authorizeSession && !await options.authorizeSession(sessionId2, context)) {
+          return errorJson(404, "session_not_found", "Session not found.");
+        }
+        await getSessionProxyArtifactAssociation(
+          client,
+          workspaceId,
+          sessionId2,
+          "retained",
+          artifactId,
+          call
+        );
+        if (route2 === "POST playback-source") {
+          return json(
+            await client.requestJson(
+              "POST",
+              `${base}/artifacts/${artifactId}/playback-source`,
+              void 0,
+              {},
+              call
+            )
+          );
+        }
+        return retainedContent(
+          await client.getRetainedArtifactContent(workspaceId, artifactId, {
+            ...retainedRange(request),
+            signal: request.signal
+          })
+        );
+      }
       if (area === "transcriptions" && tail.length === 0 && method === "POST") {
         if (!voiceInputEnabled) return errorJson(404, "route_not_allowed", "Not found.");
         return json(await client.transcribeAudio(workspaceId, await transcriptionInput(request)));
@@ -688,6 +763,31 @@ function createSessionProxyHandler(target, options) {
         };
       };
       const forward = async (path, payload) => payload instanceof Response ? payload : json(await client.requestJson("POST", path, payload));
+      if (op[0] === "realtime") {
+        if (!realtimeVoiceEnabled) return errorJson(404, "route_not_allowed", "Not found.");
+        const realtime = realtimeRoute(method, op.slice(1));
+        if (!realtime) return errorJson(404, "route_not_allowed", "Not found.");
+        if (!body) reject(400, "invalid_body", "A JSON object body is required.");
+        const path = `${session}/${op.join("/")}`;
+        if (realtime === "begin") {
+          const extras = await messageExtras({
+            sessionId,
+            delivery: "realtime"
+          });
+          if (extras instanceof Response) return extras;
+          await refreshRealtimeCredentials(sessionId, extras?.mcpCredentialUpdates ?? []);
+        }
+        let payload = body;
+        if (realtime === "sync" && options.beforeForwardMessage && hasRealtimeMessages(body)) {
+          const extras = await options.beforeForwardMessage(
+            { sessionId, delivery: "realtime" },
+            context
+          );
+          if (extras instanceof Response) return extras;
+          payload = withRealtimeContext(body, extras?.modelContext);
+        }
+        return json(await client.requestJson(method, path, payload));
+      }
       switch (route) {
         case "GET ":
           return await read(session);
@@ -765,6 +865,22 @@ function createSessionProxyHandler(target, options) {
         }
         case "GET human-input-requests":
           return await read(`${session}/human-input-requests`);
+        case "GET goal":
+          return await read(`${session}/goal`);
+        case "PATCH goal": {
+          const status = body?.status;
+          if (status !== "paused" && status !== "active" || Object.keys(body ?? {}).some((key) => key !== "status" && key !== "rationale")) {
+            reject(
+              403,
+              "goal_update_not_allowed",
+              "Only { status: paused | active } is available."
+            );
+          }
+          return json(await client.requestJson("PATCH", `${session}/goal`, { status }));
+        }
+        case "DELETE goal":
+          await client.deleteGoal(workspaceId, sessionId);
+          return new Response(null, { status: 204 });
         case "POST fs/read":
         case "POST fs/read-workspace": {
           if (!sandboxFilesEnabled) return errorJson(404, "route_not_allowed", "Not found.");
@@ -773,6 +889,19 @@ function createSessionProxyHandler(target, options) {
           );
         }
       }
+      if (op[0] === "artifacts" && (op.length === 2 || op[2] === "content") && method === "GET") {
+        if (!filesEnabled || op.length > 3) {
+          return errorJson(404, "route_not_allowed", "Not found.");
+        }
+        await client.getSession(workspaceId, sessionId, call);
+        if (op.length === 2) return await read(`${session}/artifacts/${op[1]}`);
+        return retainedContent(
+          await client.getSessionRetainedArtifactContent(workspaceId, sessionId, op[1], {
+            ...retainedRange(request),
+            signal: request.signal
+          })
+        );
+      }
       if (op.length === 2 && op[0] === "human-input-requests" && method === "GET") {
         return await read(`${session}/human-input-requests/${op[1]}`);
       }
@@ -785,7 +914,48 @@ function createSessionProxyHandler(target, options) {
     }
   };
 }
+var PROXY_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
 var UPLOAD_FIELDS = ["scope", "filename", "contentType", "sizeBytes", "sha256"];
+var REALTIME_CONNECT_ROUTES = /* @__PURE__ */ new Set(["webrtc", "gateway", "supergrok"]);
+var REALTIME_MESSAGE_KINDS = /* @__PURE__ */ new Set([
+  "delegation_call",
+  "user_transcript",
+  "assistant_transcript"
+]);
+function realtimeRoute(method, rest) {
+  if (rest.length === 0) return method === "POST" ? "begin" : null;
+  if (rest.length === 1) {
+    if (REALTIME_CONNECT_ROUTES.has(rest[0])) return method === "POST" ? "connect" : null;
+    return method === "DELETE" ? "end" : null;
+  }
+  if (rest.length === 2 && rest[1] === "heartbeat") return method === "PATCH" ? "heartbeat" : null;
+  if (rest.length === 2 && rest[1] === "sync") return method === "POST" ? "sync" : null;
+  if (rest.length === 4 && rest[1] === "connections" && rest[3] === "activate") {
+    return method === "POST" ? "activate" : null;
+  }
+  return null;
+}
+function hasRealtimeMessages(body) {
+  return Array.isArray(body.entries) && body.entries.some(
+    (entry) => entry !== null && typeof entry === "object" && REALTIME_MESSAGE_KINDS.has(entry.kind)
+  );
+}
+function withRealtimeContext(body, serverContext) {
+  if (!serverContext?.trim() || !Array.isArray(body.entries)) return body;
+  return {
+    ...body,
+    entries: body.entries.map((entry) => {
+      if (entry === null || typeof entry !== "object") return entry;
+      const record = entry;
+      if (!REALTIME_MESSAGE_KINDS.has(record.kind)) return entry;
+      const modelContext = joinContext(
+        serverContext,
+        typeof record.modelContext === "string" ? record.modelContext : void 0
+      );
+      return modelContext ? { ...record, modelContext } : entry;
+    })
+  };
+}
 function normalizeToolServer(toolServer) {
   const configured = toolServer.url ?? globalThis.process?.env?.OPENGENI_TOOL_SERVER_URL;
   let url;
@@ -976,6 +1146,31 @@ async function legacyViewerGrant(client, workspaceId) {
   if (!grant) reject(403, "workspace_not_allowed", "This workspace is not available.");
   return grant;
 }
+function retainedRange(request) {
+  const range = request.headers.get("range");
+  if (range === null) return {};
+  if (range.length > 128 || /[^\x20-\x7e]/.test(range)) {
+    reject(400, "invalid_range", "Range must be at most 128 printable ASCII bytes.");
+  }
+  return { range };
+}
+function retainedContent(content) {
+  return new Response(content.bytes, {
+    status: content.status,
+    headers: {
+      "Content-Type": content.contentType,
+      "Content-Length": String(content.contentLength),
+      ...content.contentRange ? { "Content-Range": content.contentRange } : {},
+      "Accept-Ranges": "bytes",
+      "Cache-Control": "private, no-store",
+      // Bytes for the conversation's own reader; never rendered on this origin.
+      "Content-Security-Policy": "sandbox",
+      "Content-Disposition": "attachment",
+      "Cross-Origin-Resource-Policy": "same-origin",
+      "X-Content-Type-Options": "nosniff"
+    }
+  });
+}
 function sandboxRead(body) {
   const path = body?.path;
   const encoding = body?.encoding;
@@ -1298,6 +1493,14 @@ data: ${JSON.stringify(event)}
     }
   });
 }
+var warnedRejectedApiKey = false;
+function warnRejectedApiKey(error) {
+  if (warnedRejectedApiKey) return;
+  warnedRejectedApiKey = true;
+  console.warn(
+    `[@opengeni/sdk] Opengeni rejected the session proxy's API key (401${error.correlationId ? `, reference ${error.correlationId}` : ""}). It may be expired, revoked or mistyped: create a new key in Opengeni under Organization settings > Developer and update OPENGENI_API_KEY on the server.`
+  );
+}
 function errorResponse(error) {
   if (error instanceof ProxyRejection) return errorJson(error.status, error.code, error.message);
   if (error instanceof OpenGeniSetupError) {
@@ -1314,6 +1517,7 @@ function errorResponse(error) {
     );
   }
   if (error instanceof OpenGeniApiError) {
+    if (error.status === 401) warnRejectedApiKey(error);
     const status = error.status >= 400 && error.status <= 599 ? error.status : 502;
     if (error.body) {
       return new Response(error.body, {
@@ -1365,4 +1569,4 @@ export {
   createSessionProxyHandler,
   artifactViewerCapability
 };
-//# sourceMappingURL=chunk-CNSPJYF6.js.map
+//# sourceMappingURL=chunk-TX6ED3AP.js.map