@opengeni/sdk 3.1.0 → 3.1.2

package/dist/index.js

@@ -1,15 +1,41 @@
 import {
-  OpenGeniClient
-} from "./chunk-VUQZAB3O.js";
+  EMPTY_FINAL_REPLY_NOTICE,
+  OpenGeniEmbeddingClient,
+  turnCompletedWithEmptyFinalReply
+} from "./chunk-S3D75WSQ.js";
+import "./chunk-OAKHWFSV.js";
+import "./chunk-YDVPI7WT.js";
 import {
-  createGatewayRealtimeTransportStarter,
-  createXaiSubscriptionRealtimeTransportStarter
-} from "./chunk-YKZME56C.js";
+  humanizeModelSlug,
+  isRawModelLabel,
+  modelDisplayName,
+  modelSlug,
+  modelVendor
+} from "./chunk-YKIHNLWD.js";
+import {
+  DEFAULT_WORKSPACE_TRANSCRIPTION_POLICY,
+  authorizeTranscriptionAdapter,
+  createTranscriptionSessionRequest,
+  resolveWorkspaceTranscriptionPolicy,
+  resolveWorkspaceVoiceInputEnabled
+} from "./chunk-GZQSWAKD.js";
+import {
+  OPENGENI_TEST_REQUEST_NIL_ID,
+  OPENGENI_WEBHOOK_HEADERS,
+  OPENGENI_WEBHOOK_TEST_EVENT_TYPE,
+  OpenGeniSignatureError,
+  WORKSPACE_WEBHOOK_EVENT_TYPES,
+  signOpenGeniPayload,
+  verifyCredentialProviderRequest,
+  verifyOpenGeniSignature,
+  verifyWebhookEvent
+} from "./chunk-RJHCBZF7.js";
 import {
   CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,
   CodexRealtimeMicrophoneError,
   acquireCodexRealtimeMicrophone,
   codexRealtimeMicrophoneHealthy,
+  codexRealtimeRefusal,
   contextAppendChunks,
   createCodexRealtimeController,
   createCodexRealtimeV3Bridge,
@@ -18,17 +44,66 @@ import {
   parseCodexRealtimeV3Event,
   projectSessionRealtimeLifecycle,
   startCodexRealtimeWebrtc
-} from "./chunk-C2H7HBNP.js";
-import "./chunk-TX3EIENU.js";
+} from "./chunk-WVCJRSGJ.js";
 import {
-  DEFAULT_WORKSPACE_TRANSCRIPTION_POLICY,
-  authorizeTranscriptionAdapter,
-  createTranscriptionSessionRequest,
-  resolveWorkspaceTranscriptionPolicy,
-  resolveWorkspaceVoiceInputEnabled
-} from "./chunk-VYCTL62C.js";
+  AUTOMATIC_SESSION_TITLE_FALLBACK,
+  deriveAutomaticSessionTitlePreview,
+  deriveSessionDisplayTitle,
+  sessionListEntry,
+  sessionTitleIsPending
+} from "./chunk-ZDUBPV33.js";
+import {
+  SESSION_SCOPE_HEADER,
+  artifactViewerCapability,
+  createSessionProxyHandler,
+  formatSseEvent,
+  isReservedOpenGeniLink,
+  openGeniConsolePath,
+  openGeniLinkScheme,
+  parseOpenGeniLink,
+  parseRetainedFileReference,
+  parseSandboxLink,
+  proxySessionEventStream,
+  resumeSequenceFromRequest,
+  sessionEventsToSseResponse,
+  sessionEventsToSseStream
+} from "./chunk-6HZGAIUE.js";
+import "./chunk-UM4ZXXJR.js";
+import {
+  ToolRequestError,
+  verifyToolRequest
+} from "./chunk-QGEIL4TR.js";
+import {
+  createGatewayRealtimeTransportStarter,
+  createXaiSubscriptionRealtimeTransportStarter
+} from "./chunk-KWADQ227.js";
+import {
+  OPENGENI_SITE_BRIDGE_CANCEL,
+  OPENGENI_SITE_BRIDGE_CONNECT,
+  OPENGENI_SITE_BRIDGE_READY,
+  OPENGENI_SITE_BRIDGE_REQUEST,
+  OPENGENI_SITE_BRIDGE_RESPONSE,
+  OPENGENI_SITE_BRIDGE_SIGN_IN_METHOD,
+  OPENGENI_SITE_BRIDGE_VERSION,
+  OPENGENI_SITE_BRIDGE_VIEWER_METHOD,
+  OpenGeniSiteBridgeError,
+  createOpenGeniSiteClient,
+  createSiteToolBridge,
+  isOpenGeniSiteBridgeCancelMessage,
+  isOpenGeniSiteBridgeConnectMessage,
+  isOpenGeniSiteBridgeRequestMessage,
+  isSiteCatalogStaleError,
+  sanitizeOpenGeniSiteToolCallRequest
+} from "./chunk-JXXCTW5W.js";
 import {
+  OpenGeniToolCallError,
+  OpenGeniToolReapprovalRequiredError,
+  OpenGeniToolsClient
+} from "./chunk-P7UWKORG.js";
+import {
+  asVaultClient,
   generatedImageSandboxPathMatches,
+  parseDeprecationNotice,
   parseGeneratedImageReceipt,
   parseGeneratedVideoReceipt,
   parseMediaGenerationResult,
@@ -36,13 +111,20 @@ import {
   parseRetainedGeneratedVideoReference,
   parseRetainedWorkspaceFileReference,
   parseSandboxFileArtifactReceipt,
-  parseSseStream,
   parseWorkspaceLiveEvent,
-  streamSessionEvents,
   streamWorkspaceControlEvents,
   streamWorkspaceInteractionRevisions,
-  streamWorkspaceLiveEvents
-} from "./chunk-7ZXBPJZP.js";
+  streamWorkspaceLiveEvents,
+  vaultErrorCode,
+  vaultErrorDetail,
+  vaultsApi
+} from "./chunk-NEM5N6C6.js";
+import "./chunk-VPVMLM7Q.js";
+import {
+  parseSseStream,
+  sessionEventStreamCoveredThrough,
+  streamSessionEvents
+} from "./chunk-4AHR4KGA.js";
 import {
   DEFAULT_FILE_RESOURCE_MOUNT_ROOT,
   GENERATED_VIDEO_MAX_BYTES,
@@ -57,7 +139,7 @@ import {
   RETAINED_OUTPUT_MAX_PAGE_BYTES,
   SANDBOX_FILE_ARTIFACT_MAX_BYTES,
   SESSION_EVENT_TYPES
-} from "./chunk-YTAWBDO2.js";
+} from "./chunk-KADZ5PGG.js";
 import {
   AttachedBrowserDeviceCollection,
   AttachedBrowserDeviceResource,
@@ -95,111 +177,398 @@ import {
   computerFrameSocketUrl,
   decodeBrowserFrameMessage,
   decodeComputerFrameMessage,
+  decodeComputerFrameMetadataHeader,
   interactionControlFailureFromError,
   parseBrowserFrameMetadata,
   parseComputerFrameMetadata
-} from "./chunk-GW3EJ2GP.js";
+} from "./chunk-O7KANXC3.js";
 import {
+  OpenGeniAllowanceExhaustedError,
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
+  OpenGeniSecureContextRequiredError,
   OpenGeniSessionListCursorError,
+  OpenGeniSessionUsageLimitReachedError,
+  OpenGeniSessionUsageLimitUnsupportedError,
+  OpenGeniSetupError,
   OpenGeniStreamError,
+  formatErrorMessage,
   isRetryableStreamError
-} from "./chunk-C4DJPZRU.js";
+} from "./chunk-7EWT3PV6.js";
 
-// src/proxy.ts
-function formatSseEvent(event) {
-  return `id: ${event.sequence}
-event: ${event.type}
-data: ${JSON.stringify(event)}
+// src/prepared-mcp-setup.ts
+var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var keys = (value, allowed) => Object.keys(value).every((key) => allowed.includes(key));
+var text = (value, max, min = 1) => typeof value === "string" && value.length >= min && value.length <= max;
+var trimmedText = (value, max) => typeof value === "string" && text(value.trim(), max);
+var headerPart = (value) => text(value, 16384, 0) && !/[\r\n\0]/.test(value);
+var fieldId = (value) => typeof value === "string" && /^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(value);
+var endpoint = (value) => {
+  if (!text(value, 2048)) return false;
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash;
+  } catch {
+    return false;
+  }
+};
+function parseCustomMcpSetupRequest(value) {
+  if (!record(value) || !keys(value, ["kind", "name", "endpointUrl", "rationale", "ownership", "mcpSetup"]) || value.kind !== "mcp" || !trimmedText(value.name, 256) || !endpoint(value.endpointUrl) || !trimmedText(value.rationale, 2e3))
+    return null;
+  const base = {
+    kind: "mcp",
+    name: value.name.trim(),
+    endpointUrl: value.endpointUrl,
+    rationale: value.rationale.trim()
+  };
+  if (value.ownership === void 0 && value.mcpSetup === void 0) return base;
+  if (value.ownership !== "personal" && value.ownership !== "workspace") return null;
+  const setup = value.mcpSetup;
+  if (!record(setup) || !keys(setup, ["name", "endpointUrl", "headers", "secretFields"]) || !trimmedText(setup.name, 256) || setup.name.trim() !== base.name || setup.endpointUrl !== base.endpointUrl || !Array.isArray(setup.headers) || setup.headers.length < 1 || setup.headers.length > 32 || !Array.isArray(setup.secretFields) || setup.secretFields.length > 32)
+    return null;
+  const fields = [];
+  const fieldIds = /* @__PURE__ */ new Set();
+  for (const field of setup.secretFields) {
+    if (!record(field) || !keys(field, ["id", "label"]) || !fieldId(field.id) || !trimmedText(field.label, 256) || fieldIds.has(field.id))
+      return null;
+    fieldIds.add(field.id);
+    fields.push({ id: field.id, label: field.label.trim() });
+  }
+  const headers = [];
+  const names = /* @__PURE__ */ new Set();
+  const used = /* @__PURE__ */ new Set();
+  for (const header of setup.headers) {
+    if (!record(header) || !text(header.name, 256) || !/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(header.name))
+      return null;
+    const name = header.name.toLowerCase();
+    if (names.has(name)) return null;
+    names.add(name);
+    if ("value" in header) {
+      if (!keys(header, ["name", "value"]) || !headerPart(header.value) || !header.value || ["authorization", "proxy-authorization", "cookie", "x-api-key", "api-key"].includes(name))
+        return null;
+      headers.push({ name: header.name, value: header.value });
+    } else {
+      if (!keys(header, ["name", "secret", "prefix", "suffix"]) || !fieldId(header.secret) || !fieldIds.has(header.secret) || header.prefix !== void 0 && !headerPart(header.prefix) || header.suffix !== void 0 && !headerPart(header.suffix))
+        return null;
+      used.add(header.secret);
+      headers.push({
+        name: header.name,
+        secret: header.secret,
+        ...header.prefix !== void 0 ? { prefix: header.prefix } : {},
+        ...header.suffix !== void 0 ? { suffix: header.suffix } : {}
+      });
+    }
+  }
+  if (used.size !== fieldIds.size) return null;
+  return {
+    ...base,
+    ownership: value.ownership,
+    mcpSetup: { name: base.name, endpointUrl: base.endpointUrl, headers, secretFields: fields }
+  };
+}
 
-`;
+// ../contracts/src/tool-review-presentation.ts
+var protectedName = /password|passwd|secret|credential|authorization|cookie|(^|[_-])token($|[_-])|api[_-]?key|accessToken|refreshToken|privateKey/i;
+var protectedReviewField = (key, fields = []) => protectedName.test(key) || fields.includes(key) || fields.includes("*");
+var bound = (value, limit) => value.length > limit ? `${value.slice(0, limit)}\u2026` : value;
+function toolReviewFieldLabel(key) {
+  const label = key.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").replace(/\bids?\b/gi, (word) => word.length === 3 ? "IDs" : "ID").replace(
+    /\b(api|url|uri|http|https|ip|sql|json|html)(s?)\b/gi,
+    (_word, name, plural) => `${name.toUpperCase()}${plural}`
+  ).replace(
+    /(?<=\S\s+)([A-Z])([a-z]+)\b/g,
+    (_word, first, rest) => `${first.toLowerCase()}${rest}`
+  ).trim();
+  return label.charAt(0).toUpperCase() + label.slice(1);
 }
-function sessionEventsToSseStream(events, options = {}) {
-  const encoder = new TextEncoder();
-  const iterator = events[Symbol.asyncIterator]();
-  let heartbeat;
-  let cancelled = false;
-  const stopHeartbeat = () => {
-    if (heartbeat !== void 0) {
-      clearInterval(heartbeat);
-      heartbeat = void 0;
+function decodeReviewArguments(value) {
+  let decoded = value;
+  if (typeof decoded === "string") {
+    try {
+      decoded = JSON.parse(decoded);
+    } catch {
+      return null;
     }
+  }
+  return decoded && typeof decoded === "object" && !Array.isArray(decoded) ? decoded : null;
+}
+function safeReviewValue(value, key = "", protectedFields = [], depth = 0) {
+  if (protectedReviewField(key, protectedFields)) return "[Protected value]";
+  if (depth > 20) return "[Nested value; open this field for details]";
+  if (Array.isArray(value))
+    return value.map((entry) => safeReviewValue(entry, "", protectedFields, depth + 1));
+  if (value && typeof value === "object")
+    return Object.fromEntries(
+      Object.entries(value).map(([name, entry]) => [
+        name,
+        safeReviewValue(entry, name, protectedFields, depth + 1)
+      ])
+    );
+  return value;
+}
+function valueText(value) {
+  return typeof value === "string" ? value : value === null ? "None" : typeof value === "boolean" ? value ? "Yes" : "No" : JSON.stringify(value) ?? "Unavailable";
+}
+var pointer = (name) => `/${name.replaceAll("~", "~0").replaceAll("/", "~1")}`;
+var fieldPointer = (key, index, parent = "") => pointer(key).length > 256 || parent.length + pointer(key).length > 1024 ? `/~2${index}` : pointer(key);
+function toolReviewFields(argumentsValue, context) {
+  const args = decodeReviewArguments(argumentsValue);
+  if (!args) return { fields: [], moreFields: 0 };
+  const entries = Object.entries(args);
+  if (context?.email) {
+    const email = toolReviewFields(context.email);
+    const original = toolReviewFields(args, { ...context, email: void 0 });
+    const fields = [
+      ...email.fields.filter(
+        (field) => field.path !== "/contentSha256" && field.path !== "/htmlBody" && field.preview !== ""
+      ).map((field) => ({
+        ...field,
+        label: field.path === "/textBody" ? "Message" : field.label,
+        path: `/$email${field.path}`,
+        ...field.path === "/attachments" ? {
+          preview: context.email.attachments.map((attachment) => attachment.name).join(", ").slice(0, 240)
+        } : {}
+      })),
+      ...original.fields.filter(
+        (field) => ![
+          "/raw",
+          "/expectedContentSha256",
+          "/from",
+          "/to",
+          "/cc",
+          "/bcc",
+          "/subject",
+          "/body",
+          "/textBody",
+          "/htmlBody",
+          "/attachments"
+        ].includes(field.path)
+      )
+    ];
+    return {
+      fields: fields.slice(0, 16),
+      moreFields: original.moreFields + Math.max(0, fields.length - 16)
+    };
+  }
+  return {
+    moreFields: Math.max(0, entries.length - 16),
+    fields: entries.slice(0, 16).map(([key, value], index) => {
+      const hidden = protectedReviewField(key, context?.protectedFields);
+      const safe = hidden ? "[Protected value]" : value;
+      const count = !hidden && Array.isArray(value) ? value.length : void 0;
+      const compactList = !hidden && Array.isArray(value) && value.length > 0 && value.length <= 4 && value.every(
+        (entry) => typeof entry === "string" || typeof entry === "number" || typeof entry === "boolean"
+      ) ? value.map(valueText).join(", ") : void 0;
+      const text2 = compactList !== void 0 ? compactList : count !== void 0 ? `${count.toLocaleString("en-US")} item${count === 1 ? "" : "s"}` : safe && typeof safe === "object" ? `${Object.keys(safe).length} field${Object.keys(safe).length === 1 ? "" : "s"}` : valueText(safe);
+      return {
+        path: fieldPointer(key, index),
+        label: bound(
+          (context?.fieldLabels && Object.hasOwn(context.fieldLabels, key) ? context.fieldLabels[key] : void 0) ?? toolReviewFieldLabel(key),
+          256
+        ),
+        preview: bound(text2, 240),
+        ...count !== void 0 ? { count } : {},
+        truncated: !hidden && (text2.length > 240 || compactList === void 0 && typeof value === "object" && value !== null),
+        ...hidden ? { protected: true } : {}
+      };
+    })
   };
-  return new ReadableStream({
-    start: (controller) => {
-      if (options.heartbeatMs !== void 0) {
-        heartbeat = setInterval(() => {
-          try {
-            controller.enqueue(encoder.encode(": ping\n\n"));
-          } catch {
-            stopHeartbeat();
-          }
-        }, options.heartbeatMs);
-      }
-    },
-    pull: async (controller) => {
-      let result;
-      try {
-        result = await iterator.next();
-      } catch (error) {
-        stopHeartbeat();
-        throw error;
-      }
-      if (cancelled) {
-        return;
+}
+function toolReviewAction(toolName, argumentsValue, context) {
+  const fallback = {
+    title: context?.title ?? bound(
+      toolReviewFieldLabel(
+        toolName.replace(/^mcp_[^_]+__/, "").replace(/^batch[_-](?=[a-z])/i, "")
+      ),
+      256
+    ),
+    approveLabel: "Approve action",
+    effects: []
+  };
+  if (context?.kind !== "gmail") return fallback;
+  const args = decodeReviewArguments(argumentsValue);
+  if (!args) return fallback;
+  const thread = toolName.endsWith("_thread");
+  const selectionKind = thread ? "threads" : "messages";
+  const ids = thread && typeof args.threadId === "string" ? [args.threadId] : Array.isArray(args.messageIds) ? args.messageIds : typeof args.messageId === "string" ? [args.messageId] : null;
+  const selectionCount = ids?.every((id) => typeof id === "string") ? new Set(ids).size : void 0;
+  const noun = selectionCount === void 0 ? thread ? "conversations" : "messages" : `${selectionCount.toLocaleString("en-US")} ${thread ? "conversation" : "message"}${selectionCount === 1 ? "" : "s"}`;
+  const addValues = toolName.startsWith("label_") ? args.labelIds : args.addLabelIds;
+  const adds = Array.isArray(addValues) ? addValues.filter((v) => typeof v === "string") : [];
+  const removeValues = toolName.startsWith("unlabel_") ? args.labelIds : args.removeLabelIds;
+  const removes = Array.isArray(removeValues) ? removeValues.filter((v) => typeof v === "string") : [];
+  const labelEffect = (label, adding) => {
+    const known = {
+      TRASH: ["Move to Trash", "Remove from Trash"],
+      INBOX: ["Move to Inbox", "Remove from Inbox"],
+      UNREAD: ["Mark as unread", "Mark as read"],
+      STARRED: ["Add star", "Remove star"],
+      SPAM: ["Mark as spam", "Remove from Spam"],
+      IMPORTANT: ["Mark as important", "Remove importance"]
+    };
+    return (Object.hasOwn(known, label) ? known[label]?.[adding ? 0 : 1] : void 0) ?? `${adding ? "Add" : "Remove"} label ${bound(label, 120)}`;
+  };
+  const effects = [
+    ...adds.map((id) => labelEffect(id, true)),
+    ...removes.map((id) => labelEffect(id, false))
+  ];
+  if ([
+    "batch_modify_messages",
+    "modify_message",
+    "modify_thread",
+    "label_message",
+    "label_thread",
+    "unlabel_message",
+    "unlabel_thread"
+  ].includes(toolName)) {
+    const trash = adds.includes("TRASH");
+    return {
+      title: trash ? `Move ${noun} to Trash` : `Update ${noun}`,
+      approveLabel: trash ? "Move to Trash" : "Apply changes",
+      effects,
+      ...selectionCount === void 0 ? {} : { selectionCount, selectionKind },
+      ...trash ? { consequence: "Messages stay recoverable in Trash until Gmail deletes them." } : thread ? { consequence: "Applies to every message in the conversation." } : {}
+    };
+  }
+  if (["trash_message", "restore_message", "trash_thread", "restore_thread"].includes(toolName))
+    return {
+      title: toolName.startsWith("trash_") ? `Move ${noun} to Trash` : `Remove ${noun} from Trash`,
+      approveLabel: toolName.startsWith("trash_") ? "Move to Trash" : "Remove from Trash",
+      effects,
+      ...selectionCount === void 0 ? {} : { selectionCount, selectionKind }
+    };
+  const named = {
+    send_message: ["Send email", "Send email"],
+    send_draft: ["Send draft", "Send draft"],
+    create_draft: ["Create email draft", "Create draft"],
+    update_draft: ["Update email draft", "Update draft"],
+    delete_draft: ["Delete email draft", "Delete draft"],
+    create_label: ["Create label", "Create label"],
+    update_label: ["Update label", "Update label"],
+    delete_label: ["Delete label", "Delete label"]
+  };
+  const action = Object.hasOwn(named, toolName) ? named[toolName] : void 0;
+  return action ? { title: action[0], approveLabel: action[1], effects } : fallback;
+}
+function toolReviewDetails(argumentsValue, context, path, offset, limit = 25) {
+  if (!Number.isSafeInteger(offset) || offset < 0 || !Number.isSafeInteger(limit) || limit < 1 || limit > 50)
+    throw new Error("Invalid review page");
+  const args = decodeReviewArguments(argumentsValue);
+  let value = context?.email ? { ...args, $email: context.email } : args;
+  if (path !== "") {
+    if (!path.startsWith("/")) throw new Error("Invalid review field");
+    for (const escaped of path.slice(1).split("/")) {
+      if (/^~2\d+$/.test(escaped)) {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+          throw new Error("Review field not found");
+        const selected = Object.entries(value)[Number(escaped.slice(2))];
+        if (!selected) throw new Error("Review field not found");
+        value = {
+          fieldName: selected[0],
+          value: protectedReviewField(selected[0], context?.protectedFields) ? "[Protected value]" : selected[1]
+        };
+        continue;
       }
-      if (result.done) {
-        stopHeartbeat();
-        controller.close();
-        return;
+      const key = escaped.replaceAll("~1", "/").replaceAll("~0", "~");
+      if (protectedReviewField(key, context?.protectedFields)) {
+        value = "[Protected value]";
+        break;
       }
-      controller.enqueue(encoder.encode(formatSseEvent(result.value)));
-    },
-    cancel: () => {
-      cancelled = true;
-      stopHeartbeat();
-      options.onCancel?.();
-      void Promise.resolve(iterator.return?.(void 0)).then(
-        () => void 0,
-        () => void 0
-      );
+      if (!value || typeof value !== "object" || !Object.hasOwn(value, key))
+        throw new Error("Review field not found");
+      value = value[key];
     }
-  });
-}
-function sessionEventsToSseResponse(events, options = {}) {
-  return new Response(sessionEventsToSseStream(events, options), {
-    headers: {
-      "Content-Type": "text/event-stream; charset=utf-8",
-      "Cache-Control": "no-cache, no-transform",
-      Connection: "keep-alive"
+  }
+  const preview = (entry, key, childPath) => {
+    const hidden = protectedReviewField(key, context?.protectedFields);
+    if (!hidden && entry !== null && typeof entry === "object") {
+      const count = Array.isArray(entry) ? entry.length : Object.keys(entry).length;
+      return {
+        value: `${count.toLocaleString("en-US")} ${Array.isArray(entry) ? count === 1 ? "item" : "items" : count === 1 ? "field" : "fields"}`,
+        path: childPath,
+        truncated: true
+      };
     }
-  });
-}
-function resumeSequenceFromRequest(request) {
-  const url = new URL(request.url);
-  const raw = url.searchParams.get("after") ?? request.headers.get("Last-Event-ID");
-  const parsed = raw === null ? 0 : Number(raw);
-  return Number.isFinite(parsed) && parsed > 0 ? Math.floor(parsed) : 0;
-}
-function proxySessionEventStream(client, workspaceId, sessionId, options = {}) {
-  const { after, heartbeatMs, signal, ...streamOptions } = options;
-  const upstream = new AbortController();
-  if (signal?.aborted) {
-    upstream.abort();
+    const text2 = valueText(safeReviewValue(entry, key, context?.protectedFields));
+    return {
+      value: bound(text2, 4e3),
+      ...hidden ? {} : { path: childPath },
+      truncated: !hidden && text2.length > 4e3
+    };
+  };
+  let total;
+  let items;
+  if (Array.isArray(value)) {
+    total = value.length;
+    items = value.slice(offset, offset + limit).map((entry, index) => ({
+      label: `${offset + index + 1}`,
+      ...preview(entry, "", `${path}/${offset + index}`)
+    }));
+  } else if (value && typeof value === "object") {
+    const entries = Object.entries(value);
+    total = entries.length;
+    items = entries.slice(offset, offset + limit).map(([key, entry], index) => ({
+      label: bound(
+        (context?.fieldLabels && Object.hasOwn(context.fieldLabels, key) ? context.fieldLabels[key] : void 0) ?? toolReviewFieldLabel(key),
+        256
+      ),
+      ...preview(entry, key, `${path}${fieldPointer(key, offset + index, path)}`)
+    }));
   } else {
-    signal?.addEventListener("abort", () => upstream.abort(), { once: true });
+    const text2 = valueText(value);
+    total = Math.max(1, Math.ceil(text2.length / 4e3));
+    items = Array.from({ length: Math.max(0, Math.min(limit, total - offset)) }, (_, index) => ({
+      label: `Part ${offset + index + 1}`,
+      value: text2.slice((offset + index) * 4e3, (offset + index + 1) * 4e3)
+    }));
   }
-  const resolvedAfter = after instanceof Request ? resumeSequenceFromRequest(after) : after ?? 0;
-  const events = client.streamEvents(workspaceId, sessionId, {
-    ...streamOptions,
-    after: resolvedAfter,
-    signal: upstream.signal
-  });
-  return sessionEventsToSseResponse(events, {
-    ...heartbeatMs !== void 0 ? { heartbeatMs } : {},
-    onCancel: () => upstream.abort()
-  });
+  return { path, items, total, nextOffset: offset + limit < total ? offset + limit : null };
+}
+
+// ../contracts/src/mcp-endpoint.ts
+function mcpEndpointIdentity(value) {
+  if (!value) return null;
+  try {
+    const url = new URL(value);
+    if (!["https:", "http:"].includes(url.protocol) || url.username || url.password) return null;
+    url.hash = "";
+    return url.href;
+  } catch {
+    return null;
+  }
+}
+function pluginMcpUnavailableReason(server) {
+  if (server.transport === "stdio" || !server.endpoint) return "Requires a local runtime";
+  if (server.transport && !["http", "streamable-http", "streamable_http"].includes(server.transport))
+    return "Unsupported transport: " + server.transport;
+  if (server.requiresConfiguration || server.endpoint.includes("{"))
+    return "Requires custom connection configuration";
+  const endpoint2 = mcpEndpointIdentity(server.endpoint);
+  if (!endpoint2?.startsWith("https://")) return "Requires a valid HTTPS endpoint";
+  return null;
+}
+
+// src/tool-display-metadata.ts
+function parseToolDisplayMetadata(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const item = value;
+  if (Object.keys(item).some(
+    (key) => !["toolName", "title", "accountLabel", "connector", "providerDomain"].includes(key)
+  ))
+    return void 0;
+  const text2 = (v, max) => typeof v === "string" && v.length > 0 && v.length <= max;
+  if (!text2(item.toolName, 512) || /[\u0000-\u001f\u007f]/u.test(item.toolName)) return void 0;
+  if (item.title !== void 0 && !text2(item.title, 512)) return void 0;
+  if (item.accountLabel !== void 0 && !text2(item.accountLabel, 1024)) return void 0;
+  if (item.connector !== void 0 && !text2(item.connector, 512)) return void 0;
+  if (item.providerDomain !== void 0 && !text2(item.providerDomain, 253)) return void 0;
+  return {
+    toolName: item.toolName,
+    ...item.title !== void 0 ? { title: item.title } : {},
+    ...item.accountLabel !== void 0 ? { accountLabel: item.accountLabel } : {},
+    ...item.connector !== void 0 ? { connector: item.connector } : {},
+    ...item.providerDomain !== void 0 ? { providerDomain: item.providerDomain } : {}
+  };
 }
 
 // src/mcp-output.ts
@@ -232,31 +601,31 @@ function normalizeValue(value, depth, ancestors) {
     if (Array.isArray(value)) {
       return { value, text: safeStringify(value), isError: false };
     }
-    const record = value;
-    const envelopeError = record.isError === true;
-    if (record.type === "text" && typeof record.text === "string") {
-      const normalized = normalizeText(record.text, depth + 1, ancestors);
+    const record2 = value;
+    const envelopeError = record2.isError === true;
+    if (record2.type === "text" && typeof record2.text === "string") {
+      const normalized = normalizeText(record2.text, depth + 1, ancestors);
       return {
         value: normalized.value,
-        text: record.text,
+        text: record2.text,
         isError: envelopeError || normalized.isError
       };
     }
-    if ("structuredContent" in record) {
-      const normalized = normalizeValue(record.structuredContent, depth + 1, ancestors);
+    if ("structuredContent" in record2) {
+      const normalized = normalizeValue(record2.structuredContent, depth + 1, ancestors);
       return {
         value: normalized.value,
-        text: firstMcpText(record.content) ?? normalized.text,
+        text: firstMcpText(record2.content) ?? normalized.text,
         isError: envelopeError || normalized.isError
       };
     }
-    if (isMcpContent(record.content)) {
-      const text = firstMcpText(record.content);
-      if (text !== null) {
-        const normalized = normalizeText(text, depth + 1, ancestors);
+    if (isMcpContent(record2.content)) {
+      const text2 = firstMcpText(record2.content);
+      if (text2 !== null) {
+        const normalized = normalizeText(text2, depth + 1, ancestors);
         return {
           value: normalized.value,
-          text,
+          text: text2,
           isError: envelopeError || normalized.isError
         };
       }
@@ -266,8 +635,8 @@ function normalizeValue(value, depth, ancestors) {
         isError: envelopeError
       };
     }
-    if (isResultEnvelope(record)) {
-      const normalized = normalizeValue(record.result, depth + 1, ancestors);
+    if (isResultEnvelope(record2)) {
+      const normalized = normalizeValue(record2.result, depth + 1, ancestors);
       return {
         value: normalized.value,
         text: normalized.text,
@@ -283,17 +652,17 @@ function normalizeValue(value, depth, ancestors) {
     ancestors.delete(value);
   }
 }
-function normalizeText(text, depth, ancestors) {
+function normalizeText(text2, depth, ancestors) {
   try {
-    const parsed = JSON.parse(text);
+    const parsed = JSON.parse(text2);
     const normalized = normalizeValue(parsed, depth + 1, ancestors);
     return {
       value: normalized.value,
-      text,
+      text: text2,
       isError: normalized.isError
     };
   } catch {
-    return { value: text, text, isError: false };
+    return { value: text2, text: text2, isError: false };
   }
 }
 function isMcpContent(value) {
@@ -312,8 +681,8 @@ function firstMcpText(value) {
   }
   return null;
 }
-function isResultEnvelope(record) {
-  return "result" in record && Object.keys(record).every((key) => RESULT_ENVELOPE_KEYS.has(key));
+function isResultEnvelope(record2) {
+  return "result" in record2 && Object.keys(record2).every((key) => RESULT_ENVELOPE_KEYS.has(key));
 }
 function safeStringify(value) {
   try {
@@ -429,18 +798,6 @@ function normalizeCompanyProfileStableKey(value) {
 function inspectorPath(workspaceId, suffix) {
   return `/v1/workspaces/${workspaceId}/company-brain/${suffix}`;
 }
-function searchCompanyBrainKnowledge(client, workspaceId, request) {
-  return client.requestJson("POST", inspectorPath(workspaceId, "knowledge/search"), request);
-}
-function getCompanyBrainKnowledge(client, workspaceId, recordId) {
-  return client.requestJson(
-    "GET",
-    `${inspectorPath(workspaceId, "knowledge/record")}?id=${encodeURIComponent(recordId)}`
-  );
-}
-function browseCompanyBrainKnowledge(client, workspaceId, request = {}) {
-  return client.requestJson("POST", inspectorPath(workspaceId, "knowledge/browse"), request);
-}
 function listCompanyBrainContextReceipts(client, workspaceId, options = {}) {
   const params = new URLSearchParams();
   if (options.attemptId) params.set("attemptId", options.attemptId);
@@ -462,6 +819,7 @@ function normalizePreferenceRegistryStableKey(value) {
   return value.normalize("NFKC").trim().toLowerCase().replace(/\s+/gu, "-").replace(/-+/g, "-");
 }
 export {
+  AUTOMATIC_SESSION_TITLE_FALLBACK,
   AttachedBrowserDeviceCollection,
   AttachedBrowserDeviceResource,
   AuthRunCollection,
@@ -493,6 +851,7 @@ export {
   ComputerTargetCollection,
   DEFAULT_FILE_RESOURCE_MOUNT_ROOT,
   DEFAULT_WORKSPACE_TRANSCRIPTION_POLICY,
+  EMPTY_FINAL_REPLY_NOTICE,
   GENERATED_VIDEO_MAX_BYTES,
   INTERACTION_PROTOCOL_VERSION,
   InteractionInterventionCollection,
@@ -504,82 +863,148 @@ export {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION,
   OPENGENI_CORRELATION_HEADER,
+  OPENGENI_SITE_BRIDGE_CANCEL,
+  OPENGENI_SITE_BRIDGE_CONNECT,
+  OPENGENI_SITE_BRIDGE_READY,
+  OPENGENI_SITE_BRIDGE_REQUEST,
+  OPENGENI_SITE_BRIDGE_RESPONSE,
+  OPENGENI_SITE_BRIDGE_SIGN_IN_METHOD,
+  OPENGENI_SITE_BRIDGE_VERSION,
+  OPENGENI_SITE_BRIDGE_VIEWER_METHOD,
+  OPENGENI_TEST_REQUEST_NIL_ID,
+  OPENGENI_WEBHOOK_HEADERS,
+  OPENGENI_WEBHOOK_TEST_EVENT_TYPE,
+  OpenGeniAllowanceExhaustedError,
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
-  OpenGeniClient,
+  OpenGeniEmbeddingClient as OpenGeniClient,
   OpenGeniInteractionClient,
+  OpenGeniSecureContextRequiredError,
   OpenGeniSessionListCursorError,
+  OpenGeniSessionUsageLimitReachedError,
+  OpenGeniSessionUsageLimitUnsupportedError,
+  OpenGeniSetupError,
+  OpenGeniSignatureError,
+  OpenGeniSiteBridgeError,
   OpenGeniStreamError,
+  OpenGeniToolCallError,
+  OpenGeniToolReapprovalRequiredError,
+  OpenGeniToolsClient,
   PERSONAL_RESOURCE_SHARED_OUTPUT_WARNING,
   PERSONAL_RESOURCE_SHARED_OUTPUT_WARNING_VERSION,
   RETAINED_OUTPUT_DEFAULT_PAGE_BYTES,
   RETAINED_OUTPUT_MAX_PAGE_BYTES,
   SANDBOX_FILE_ARTIFACT_MAX_BYTES,
   SESSION_EVENT_TYPES,
+  SESSION_SCOPE_HEADER,
   SiteAuthConnectionCollection,
   SiteAuthConnectionResource,
   TTYD_SUBPROTOCOL,
+  ToolRequestError,
   TtydClientCommand,
   TtydServerCommand,
   WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
+  WORKSPACE_WEBHOOK_EVENT_TYPES,
   acquireCodexRealtimeMicrophone,
   applyUrlRotation,
+  artifactViewerCapability,
+  asVaultClient,
   authorizeTranscriptionAdapter,
-  browseCompanyBrainKnowledge,
   browserFrameSocketUrl,
   codexRealtimeMicrophoneHealthy,
+  codexRealtimeRefusal,
   computerFrameSocketUrl,
   contextAppendChunks,
   createCodexRealtimeController,
   createCodexRealtimeV3Bridge,
   createGatewayRealtimeTransportStarter,
+  createOpenGeniSiteClient,
+  createSessionProxyHandler,
+  createSiteToolBridge,
   createTranscriptionSessionRequest,
   createXaiSubscriptionRealtimeTransportStarter,
   decodeBrowserFrameMessage,
   decodeComputerFrameMessage,
+  decodeComputerFrameMetadataHeader,
+  deriveAutomaticSessionTitlePreview,
+  deriveSessionDisplayTitle,
   desktopSocketUrl,
   encodeCodexRealtimeV3DelegationContextAppend,
   encodeCodexRealtimeV3SessionContextAppend,
+  formatErrorMessage,
   formatSseEvent,
   generatedImageSandboxPathMatches,
-  getCompanyBrainKnowledge,
+  humanizeModelSlug,
   interactionControlFailureFromError,
+  isOpenGeniSiteBridgeCancelMessage,
+  isOpenGeniSiteBridgeConnectMessage,
+  isOpenGeniSiteBridgeRequestMessage,
+  isRawModelLabel,
+  isReservedOpenGeniLink,
   isRetryableStreamError,
+  isSiteCatalogStaleError,
   listCompanyBrainContextReceipts,
   listCompanyBrainKnowledgeProposals,
+  modelDisplayName,
+  modelSlug,
+  modelVendor,
   nextDesktopState,
   normalizeCompanyProfileStableKey,
   normalizeMcpOutput,
   normalizePreferenceRegistryStableKey,
   normalizeWorkspaceInstructionPolicyRoleKey,
+  openGeniConsolePath,
+  openGeniLinkScheme,
   parseBrowserFrameMetadata,
   parseCodexRealtimeV3Event,
   parseComputerFrameMetadata,
+  parseCustomMcpSetupRequest,
+  parseDeprecationNotice,
   parseGeneratedImageReceipt,
   parseGeneratedVideoReceipt,
   parseMediaGenerationResult,
+  parseOpenGeniLink,
+  parseRetainedFileReference,
   parseRetainedGeneratedImageReference,
   parseRetainedGeneratedVideoReference,
   parseRetainedWorkspaceFileReference,
   parseSandboxFileArtifactReceipt,
+  parseSandboxLink,
   parseSseStream,
+  parseToolDisplayMetadata,
   parseWorkspaceLiveEvent,
+  pluginMcpUnavailableReason,
   projectSessionRealtimeLifecycle,
   proxySessionEventStream,
   resolveWorkspaceTranscriptionPolicy,
   resolveWorkspaceVoiceInputEnabled,
   resumeSequenceFromRequest,
-  searchCompanyBrainKnowledge,
+  sanitizeOpenGeniSiteToolCallRequest,
+  sessionEventStreamCoveredThrough,
   sessionEventsToSseResponse,
   sessionEventsToSseStream,
+  sessionListEntry,
+  sessionTitleIsPending,
+  signOpenGeniPayload,
   startCodexRealtimeWebrtc,
   streamSessionEvents,
   streamWorkspaceControlEvents,
   streamWorkspaceInteractionRevisions,
   streamWorkspaceLiveEvents,
   terminalSocketUrl,
+  toolReviewAction,
+  toolReviewDetails,
+  toolReviewFields,
   ttydAuthFrame,
   ttydInputFrame,
-  ttydResizeFrame
+  ttydResizeFrame,
+  turnCompletedWithEmptyFinalReply,
+  vaultErrorCode,
+  vaultErrorDetail,
+  vaultsApi,
+  verifyCredentialProviderRequest,
+  verifyOpenGeniSignature,
+  verifyToolRequest,
+  verifyWebhookEvent
 };
 //# sourceMappingURL=index.js.map