@opengeni/sdk 3.1.0 → 3.3.2

package/dist/realtime.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/realtime.ts"],"sourcesContent":["/**\n * Public, provider-neutral realtime browser SDK.\n *\n * Import this subpath lazily in browser applications. The base `@opengeni/sdk`\n * entry remains free of eager realtime transport initialization.\n */\nimport {\n  createCodexRealtimeController,\n  hasStoredSessionRealtimeOwnerProof,\n  sessionRealtimeOwnerStorageKey,\n  sessionRealtimeOwnerStorageNamespace,\n  type CodexRealtimeController,\n  type CodexRealtimeControllerClient,\n  type CodexRealtimeControllerSnapshot,\n  type CodexRealtimeControllerStatus,\n  type CodexRealtimeDiagnostic,\n  type CodexRealtimeDiagnosticKind,\n  type CodexRealtimeMicrophoneState,\n  type CodexRealtimeOwnerStorage,\n  type CreateCodexRealtimeControllerOptions,\n  type RealtimeControllerTransportStarter,\n} from \"./codex-realtime-controller\";\nimport {\n  createGatewayRealtimeTransportStarter,\n  createXaiSubscriptionRealtimeTransportStarter,\n} from \"./gateway-realtime-transport\";\nimport type { SessionRealtimeModel, WorkspaceRealtimeModelCatalogResponse } from \"./types\";\n\n/** Exact backend-facing methods required by the batteries-included realtime SDK. */\nexport type SessionRealtimeClientLike = CodexRealtimeControllerClient & {\n  getWorkspaceRealtimeModelCatalog(\n    workspaceId: string,\n  ): Promise<WorkspaceRealtimeModelCatalogResponse>;\n};\n\nexport type SessionRealtimeTransportKind = \"codex\" | \"gateway\" | \"xai-subscription\";\n\n/** Provider-neutral names for the existing, battle-tested controller projection. */\nexport type SessionRealtimeController = CodexRealtimeController;\nexport type SessionRealtimeControllerSnapshot = CodexRealtimeControllerSnapshot;\nexport type SessionRealtimeControllerStatus = CodexRealtimeControllerStatus;\nexport type SessionRealtimeDiagnostic = CodexRealtimeDiagnostic;\nexport type SessionRealtimeDiagnosticKind = CodexRealtimeDiagnosticKind;\nexport type SessionRealtimeMicrophoneState = CodexRealtimeMicrophoneState;\nexport type SessionRealtimeOwnerStorage = CodexRealtimeOwnerStorage;\n\nexport type CreateSessionRealtimeControllerOptions = Omit<\n  CreateCodexRealtimeControllerOptions,\n  \"client\" | \"model\" | \"ownerStorageNamespace\" | \"startTransport\"\n> & {\n  client: CodexRealtimeControllerClient;\n  model: SessionRealtimeModel;\n};\n\n/** Select the existing transport without exposing provider mechanics to hosts. */\nexport function sessionRealtimeTransportKind(\n  model: SessionRealtimeModel,\n): SessionRealtimeTransportKind {\n  if (model === \"gpt-live-1-boulder-alpha\") return \"codex\";\n  if (model === \"supergrok/grok-voice-think-fast-2.0\") return \"xai-subscription\";\n  return \"gateway\";\n}\n\n/**\n * Compose the exact current controller with its existing Codex Live or AI\n * Gateway transport. Wire, ledger, delegation, recovery, and lifecycle\n * semantics remain owned by the existing implementations below this facade.\n */\nexport function createSessionRealtimeController(\n  options: CreateSessionRealtimeControllerOptions,\n): SessionRealtimeController {\n  const transport = sessionRealtimeTransportKind(options.model);\n  return createCodexRealtimeController({\n    ...options,\n    ownerStorageNamespace: sessionRealtimeOwnerStorageNamespace(options.model),\n    ...(transport === \"gateway\"\n      ? { startTransport: createGatewayRealtimeTransportStarter() }\n      : transport === \"xai-subscription\"\n        ? { startTransport: createXaiSubscriptionRealtimeTransportStarter() }\n        : {}),\n  });\n}\n\nexport {\n  createCodexRealtimeController,\n  createGatewayRealtimeTransportStarter,\n  createXaiSubscriptionRealtimeTransportStarter,\n  hasStoredSessionRealtimeOwnerProof,\n  sessionRealtimeOwnerStorageKey,\n  sessionRealtimeOwnerStorageNamespace,\n};\nexport type {\n  CodexRealtimeController,\n  CodexRealtimeControllerClient,\n  CodexRealtimeControllerSnapshot,\n  CodexRealtimeControllerStatus,\n  CodexRealtimeDiagnostic,\n  CodexRealtimeDiagnosticKind,\n  CodexRealtimeMicrophoneState,\n  CodexRealtimeOwnerStorage,\n  CreateCodexRealtimeControllerOptions,\n  RealtimeControllerTransportStarter,\n};\n\nexport {\n  CODEX_REALTIME_NEGOTIATION_TIMEOUT_MS,\n  projectSessionRealtimeLifecycle,\n} from \"./codex-realtime-controller\";\nexport type { SessionRealtimeLifecycleProjection } from \"./codex-realtime-lifecycle\";\n\nexport {\n  CodexRealtimeMicrophoneError,\n  acquireCodexRealtimeMicrophone,\n  codexRealtimeMicrophoneHealthy,\n  startCodexRealtimeWebrtc,\n} from \"./codex-realtime\";\nexport type {\n  AcquireCodexRealtimeMicrophoneOptions,\n  CodexRealtimeAudibleOutputState,\n  CodexRealtimeConnectionHealth,\n  CodexRealtimeMicrophoneErrorCode,\n  CodexRealtimeNegotiator,\n  CodexRealtimeWebrtcSession,\n  StartCodexRealtimeWebrtcOptions,\n} from \"./codex-realtime\";\n\nexport {\n  CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,\n  CODEX_REALTIME_V3_MAX_EVENT_BYTES,\n  CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES,\n  CODEX_REALTIME_V3_MAX_TEXT_BYTES,\n  CODEX_REALTIME_V3_PENDING_MAX_BYTES,\n  CODEX_REALTIME_V3_PENDING_MAX_ENTRIES,\n  CODEX_REALTIME_V3_SYNC_MAX_ENTRIES,\n  contextAppendChunks,\n  createCodexRealtimeV3Bridge,\n  encodeCodexRealtimeV3DelegationContextAppend,\n  encodeCodexRealtimeV3SessionContextAppend,\n  parseCodexRealtimeV3Event,\n} from \"./codex-realtime-v3\";\nexport type {\n  CodexRealtimeV3Bridge,\n  CodexRealtimeV3BridgeFatal,\n  CodexRealtimeV3BridgeOptions,\n  CodexRealtimeV3BridgeSnapshot,\n  CodexRealtimeV3ContextAppendChannel,\n  CodexRealtimeV3DelegationContextAppend,\n  CodexRealtimeV3Event,\n  CodexRealtimeV3ParseFailure,\n  CodexRealtimeV3ParseResult,\n  CodexRealtimeV3SessionContextAppend,\n} from \"./codex-realtime-v3\";\n\nexport {\n  CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT,\n  CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS,\n} from \"./codex-realtime-v3-wire\";\nexport type { CodexRealtimeInitialItem } from \"./codex-realtime-v3-wire\";\n\nexport type {\n  ActivateCodexRealtimeConnectionRequest,\n  BeginSessionRealtimeRequest,\n  CodexRealtimeVoice,\n  CodexRealtimeWebrtcRequest,\n  CodexRealtimeWebrtcResponse,\n  CodexRealtimeWebrtcVersion,\n  EndSessionRealtimeRequest,\n  GatewayRealtimeConnectRequest,\n  GatewayRealtimeConnectResponse,\n  GatewayRealtimeInitialItem,\n  RenewSessionRealtimeRequest,\n  SessionRealtimeEndReason,\n  SessionRealtimeLedgerEntry,\n  SessionRealtimeMode,\n  SessionRealtimeModel,\n  SessionRealtimeMutationResponse,\n  SessionRealtimeState,\n  SyncSessionRealtimeLedgerRequest,\n  SyncSessionRealtimeLedgerResponse,\n  WorkspaceRealtimeModelCatalogItem,\n  WorkspaceRealtimeModelCatalogResponse,\n} from \"./types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDO,SAAS,6BACd,OAC8B;AAC9B,MAAI,UAAU,2BAA4B,QAAO;AACjD,MAAI,UAAU,sCAAuC,QAAO;AAC5D,SAAO;AACT;AAOO,SAAS,gCACd,SAC2B;AAC3B,QAAM,YAAY,6BAA6B,QAAQ,KAAK;AAC5D,SAAO,8BAA8B;AAAA,IACnC,GAAG;AAAA,IACH,uBAAuB,qCAAqC,QAAQ,KAAK;AAAA,IACzE,GAAI,cAAc,YACd,EAAE,gBAAgB,sCAAsC,EAAE,IAC1D,cAAc,qBACZ,EAAE,gBAAgB,8CAA8C,EAAE,IAClE,CAAC;AAAA,EACT,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../src/realtime.ts"],"sourcesContent":["/**\n * Public, provider-neutral realtime browser SDK.\n *\n * Import this subpath lazily in browser applications. The base `@opengeni/sdk`\n * entry remains free of eager realtime transport initialization.\n */\nimport {\n  createCodexRealtimeController,\n  hasStoredSessionRealtimeOwnerProof,\n  sessionRealtimeOwnerStorageKey,\n  sessionRealtimeOwnerStorageNamespace,\n  type CodexRealtimeController,\n  type CodexRealtimeControllerClient,\n  type CodexRealtimeControllerSnapshot,\n  type CodexRealtimeControllerStatus,\n  type CodexRealtimeDiagnostic,\n  type CodexRealtimeDiagnosticKind,\n  type CodexRealtimeMicrophoneState,\n  type CodexRealtimeOwnerStorage,\n  type CreateCodexRealtimeControllerOptions,\n  type RealtimeControllerTransportStarter,\n} from \"./codex-realtime-controller\";\nimport {\n  createGatewayRealtimeTransportStarter,\n  createXaiSubscriptionRealtimeTransportStarter,\n} from \"./gateway-realtime-transport\";\nimport type { SessionRealtimeModel, WorkspaceRealtimeModelCatalogResponse } from \"./types\";\n\n/** Exact backend-facing methods required by the batteries-included realtime SDK. */\nexport type SessionRealtimeClientLike = CodexRealtimeControllerClient & {\n  getWorkspaceRealtimeModelCatalog(\n    workspaceId: string,\n    options?: { signal?: AbortSignal | undefined },\n  ): Promise<WorkspaceRealtimeModelCatalogResponse>;\n};\n\nexport type SessionRealtimeTransportKind = \"codex\" | \"gateway\" | \"xai-subscription\";\n\n/** Provider-neutral names for the existing, battle-tested controller projection. */\nexport type SessionRealtimeController = CodexRealtimeController;\nexport type SessionRealtimeControllerSnapshot = CodexRealtimeControllerSnapshot;\nexport type SessionRealtimeControllerStatus = CodexRealtimeControllerStatus;\nexport type SessionRealtimeDiagnostic = CodexRealtimeDiagnostic;\nexport type SessionRealtimeDiagnosticKind = CodexRealtimeDiagnosticKind;\nexport type SessionRealtimeMicrophoneState = CodexRealtimeMicrophoneState;\nexport type SessionRealtimeOwnerStorage = CodexRealtimeOwnerStorage;\n\nexport type CreateSessionRealtimeControllerOptions = Omit<\n  CreateCodexRealtimeControllerOptions,\n  \"client\" | \"model\" | \"ownerStorageNamespace\" | \"startTransport\"\n> & {\n  client: CodexRealtimeControllerClient;\n  model: SessionRealtimeModel;\n};\n\n/** Select the existing transport without exposing provider mechanics to hosts. */\nexport function sessionRealtimeTransportKind(\n  model: SessionRealtimeModel,\n): SessionRealtimeTransportKind {\n  if (model === \"gpt-live-1-boulder-alpha\") return \"codex\";\n  if (model === \"supergrok/grok-voice-think-fast-2.0\") return \"xai-subscription\";\n  return \"gateway\";\n}\n\n/**\n * Compose the exact current controller with its existing Codex Live or AI\n * Gateway transport. Wire, ledger, delegation, recovery, and lifecycle\n * semantics remain owned by the existing implementations below this facade.\n */\nexport function createSessionRealtimeController(\n  options: CreateSessionRealtimeControllerOptions,\n): SessionRealtimeController {\n  const transport = sessionRealtimeTransportKind(options.model);\n  return createCodexRealtimeController({\n    ...options,\n    ownerStorageNamespace: sessionRealtimeOwnerStorageNamespace(options.model),\n    ...(transport === \"gateway\"\n      ? { startTransport: createGatewayRealtimeTransportStarter() }\n      : transport === \"xai-subscription\"\n        ? { startTransport: createXaiSubscriptionRealtimeTransportStarter() }\n        : {}),\n  });\n}\n\nexport {\n  createCodexRealtimeController,\n  createGatewayRealtimeTransportStarter,\n  createXaiSubscriptionRealtimeTransportStarter,\n  hasStoredSessionRealtimeOwnerProof,\n  sessionRealtimeOwnerStorageKey,\n  sessionRealtimeOwnerStorageNamespace,\n};\nexport type {\n  CodexRealtimeController,\n  CodexRealtimeControllerClient,\n  CodexRealtimeControllerSnapshot,\n  CodexRealtimeControllerStatus,\n  CodexRealtimeDiagnostic,\n  CodexRealtimeDiagnosticKind,\n  CodexRealtimeMicrophoneState,\n  CodexRealtimeOwnerStorage,\n  CreateCodexRealtimeControllerOptions,\n  RealtimeControllerTransportStarter,\n};\n\nexport {\n  CODEX_REALTIME_NEGOTIATION_TIMEOUT_MS,\n  projectSessionRealtimeLifecycle,\n} from \"./codex-realtime-controller\";\nexport type { SessionRealtimeLifecycleProjection } from \"./codex-realtime-lifecycle\";\n\nexport {\n  CodexRealtimeMicrophoneError,\n  acquireCodexRealtimeMicrophone,\n  codexRealtimeMicrophoneHealthy,\n  startCodexRealtimeWebrtc,\n} from \"./codex-realtime\";\nexport type {\n  AcquireCodexRealtimeMicrophoneOptions,\n  CodexRealtimeAudibleOutputState,\n  CodexRealtimeConnectionHealth,\n  CodexRealtimeMicrophoneErrorCode,\n  CodexRealtimeNegotiator,\n  CodexRealtimeWebrtcSession,\n  StartCodexRealtimeWebrtcOptions,\n} from \"./codex-realtime\";\n\nexport {\n  CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,\n  CODEX_REALTIME_V3_MAX_EVENT_BYTES,\n  CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES,\n  CODEX_REALTIME_V3_MAX_TEXT_BYTES,\n  CODEX_REALTIME_V3_PENDING_MAX_BYTES,\n  CODEX_REALTIME_V3_PENDING_MAX_ENTRIES,\n  CODEX_REALTIME_V3_SYNC_MAX_ENTRIES,\n  contextAppendChunks,\n  createCodexRealtimeV3Bridge,\n  encodeCodexRealtimeV3DelegationContextAppend,\n  encodeCodexRealtimeV3SessionContextAppend,\n  parseCodexRealtimeV3Event,\n} from \"./codex-realtime-v3\";\nexport type {\n  CodexRealtimeV3Bridge,\n  CodexRealtimeV3BridgeFatal,\n  CodexRealtimeV3BridgeOptions,\n  CodexRealtimeV3BridgeSnapshot,\n  CodexRealtimeV3ContextAppendChannel,\n  CodexRealtimeV3DelegationContextAppend,\n  CodexRealtimeV3Event,\n  CodexRealtimeV3ParseFailure,\n  CodexRealtimeV3ParseResult,\n  CodexRealtimeV3SessionContextAppend,\n} from \"./codex-realtime-v3\";\n\nexport {\n  CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT,\n  CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS,\n} from \"./codex-realtime-v3-wire\";\nexport type { CodexRealtimeInitialItem } from \"./codex-realtime-v3-wire\";\n\nexport type {\n  ActivateCodexRealtimeConnectionRequest,\n  BeginSessionRealtimeRequest,\n  CodexRealtimeVoice,\n  CodexRealtimeWebrtcRequest,\n  CodexRealtimeWebrtcResponse,\n  CodexRealtimeWebrtcVersion,\n  EndSessionRealtimeRequest,\n  GatewayRealtimeConnectRequest,\n  GatewayRealtimeConnectResponse,\n  GatewayRealtimeInitialItem,\n  RenewSessionRealtimeRequest,\n  SessionRealtimeEndReason,\n  SessionRealtimeLedgerEntry,\n  SessionRealtimeMode,\n  SessionRealtimeModel,\n  SessionRealtimeMutationResponse,\n  SessionRealtimeState,\n  SyncSessionRealtimeLedgerRequest,\n  SyncSessionRealtimeLedgerResponse,\n  WorkspaceRealtimeModelCatalogItem,\n  WorkspaceRealtimeModelCatalogResponse,\n} from \"./types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDO,SAAS,6BACd,OAC8B;AAC9B,MAAI,UAAU,2BAA4B,QAAO;AACjD,MAAI,UAAU,sCAAuC,QAAO;AAC5D,SAAO;AACT;AAOO,SAAS,gCACd,SAC2B;AAC3B,QAAM,YAAY,6BAA6B,QAAQ,KAAK;AAC5D,SAAO,8BAA8B;AAAA,IACnC,GAAG;AAAA,IACH,uBAAuB,qCAAqC,QAAQ,KAAK;AAAA,IACzE,GAAI,cAAc,YACd,EAAE,gBAAgB,sCAAsC,EAAE,IAC1D,cAAc,qBACZ,EAAE,gBAAgB,8CAA8C,EAAE,IAClE,CAAC;AAAA,EACT,CAAC;AACH;","names":[]}

package/dist/session-titles.d.ts

@@ -0,0 +1,28 @@
+import { AUTOMATIC_SESSION_TITLE_FALLBACK } from "@opengeni/contracts/session-titles";
+import type { Session } from "./types.js";
+export { AUTOMATIC_SESSION_TITLE_FALLBACK };
+export type SessionDisplayTitleInput = {
+    title?: Session["title"] | undefined;
+    titleSource?: Session["titleSource"] | undefined;
+    initialMessage?: Session["initialMessage"] | null | undefined;
+    metadata?: Readonly<Record<string, unknown>> | undefined;
+};
+export type SessionDisplayTitleOptions = {
+    /** Optional metadata fields to try before the opening-prompt preview. */
+    metadataKeys?: readonly string[] | undefined;
+};
+/**
+ * Whether the durable title still represents the automatic-title pending state.
+ * A user-authored title always wins, even when its literal value is the fallback.
+ */
+export declare function sessionTitleIsPending(input: SessionDisplayTitleInput): boolean;
+/**
+ * Derive the title a client should display for a session.
+ *
+ * A semantic agent title or human rename wins. While automatic naming is still
+ * pending, clients show a short, sensitive-safe preview of the opening prompt;
+ * the preview is never persisted as title metadata and is replaced naturally
+ * when `session.title_set` arrives. Obvious credential-, URL-, or identifier-
+ * shaped prompt prefixes retain the generic fallback.
+ */
+export declare function deriveSessionDisplayTitle(input: SessionDisplayTitleInput, options?: SessionDisplayTitleOptions): string;

package/dist/types.d.ts

@@ -220,6 +220,7 @@ export type SessionCapabilities = {
         codecs: ("h264-mp4" | "vp9-webm")[];
         reason: CapabilityUnavailableReason | null;
     };
+    /** @deprecated Use the managed ComputerSession interaction tools. */
     ComputerUse: {
         available: boolean;
         readOnly: boolean;
@@ -232,6 +233,7 @@ export type TerminalCapability = SessionCapabilities["Terminal"];
 export type GitCapability = SessionCapabilities["Git"];
 export type DesktopStreamCapability = SessionCapabilities["DesktopStream"];
 export type RecordingCapability = SessionCapabilities["Recording"];
+/** @deprecated Use the managed ComputerSession interaction tools. */
 export type ComputerUseCapability = SessionCapabilities["ComputerUse"];
 export type StreamUrlRotatedPayload = {
     url: string;
@@ -461,6 +463,7 @@ export type McpPersonalConnectionDelegation = {
 export type McpPersonalConnectionSummary = Pick<McpPersonalConnectionDelegation, "serverId" | "providerDomain">;
 export type ConnectionMetadata = {
     id: string;
+    authorityId?: string | undefined;
     accountId: string;
     workspaceId: string;
     subjectId: string | null;
@@ -1084,6 +1087,7 @@ export type Session = {
         pausedDescendants: number;
         failedDescendants: number;
         unreadDescendants?: number | undefined;
+        unreadFailedDescendants?: number | undefined;
         activelyWorkingDescendants?: number | undefined;
         /**
          * Earliest moment one of the counted `attentionDescendants` entered
@@ -2107,6 +2111,10 @@ export type ScheduledTaskAgentConfig = {
     model?: string | undefined;
     reasoningEffort?: ReasoningEffort | undefined;
     sandboxBackend?: SandboxBackend | undefined;
+    machineTarget?: {
+        targetSandboxId: string;
+        workingDir?: string | undefined;
+    } | undefined;
     goal?: GoalSpec | undefined;
     executionClass?: "incident_telemetry" | undefined;
     incidentTelemetryPreflight?: IncidentTelemetryPreflight | undefined;
@@ -2225,7 +2233,7 @@ export type CreateSessionRequest = {
         groupId: string;
     } | undefined;
 };
-export declare const KNOWN_PERMISSIONS: readonly ["account:read", "account:admin", "members:manage", "workspace:create", "billing:read", "billing:manage", "workspace:read", "workspace:admin", "sessions:create", "sessions:read", "sessions:control", "stream:view", "stream:control", "stream:acknowledge", "files:upload", "files:read", "files:write", "terminal:attach", "documents:manage", "documents:search", "scheduled_tasks:manage", "scheduled_tasks:run", "github:manage", "github:use", "api_keys:manage", "connections:read", "connections:write", "environments:manage", "environments:use", "variable-sets:list", "variable-sets:read", "variable-sets:write", "variable-sets:manage", "variable-sets:attach", "variable-sets:use", "secrets:list", "secrets:read", "secrets:write", "mcp_servers:attach", "codemode:call", "goals:manage", "enrollments:read", "enrollments:manage", "rigs:use", "rigs:manage", "artifacts:read", "artifacts:publish"];
+export declare const KNOWN_PERMISSIONS: readonly ["account:read", "account:admin", "members:manage", "workspace:create", "billing:read", "billing:manage", "workspace:read", "workspace:admin", "sessions:create", "sessions:read", "sessions:control", "stream:view", "stream:control", "stream:acknowledge", "files:upload", "files:read", "files:write", "terminal:attach", "documents:manage", "documents:search", "scheduled_tasks:manage", "scheduled_tasks:run", "github:manage", "github:use", "api_keys:manage", "connections:read", "connections:write", "capabilities:manage", "environments:manage", "environments:use", "variable-sets:list", "variable-sets:read", "variable-sets:write", "variable-sets:manage", "variable-sets:attach", "variable-sets:use", "secrets:list", "secrets:read", "secrets:write", "mcp_servers:attach", "codemode:call", "goals:manage", "enrollments:read", "enrollments:manage", "rigs:use", "rigs:manage", "artifacts:read", "artifacts:publish"];
 export type KnownPermission = (typeof KNOWN_PERMISSIONS)[number];
 /**
  * Permissions the SDK knows about today, kept open so a newer OpenGeni server
@@ -2387,6 +2395,17 @@ export type CodexConnectionStatus = {
     } | null;
     /** How many Codex accounts the workspace has connected. */
     accountCount?: number;
+    source?: WorkspaceCodexSubscriptionSource;
+};
+export type WorkspaceCodexSubscriptionMode = "automatic" | "workspace" | "organization" | "disabled";
+export type WorkspaceCodexSubscriptionSource = {
+    accountId: string;
+    workspaceId: string;
+    workspaceKind: "personal" | "shared";
+    mode: WorkspaceCodexSubscriptionMode;
+    effectiveSource: "workspace" | "organization" | "disabled";
+    workspaceAvailable: boolean;
+    organizationAvailable: boolean;
 };
 /**
  * One normalized Codex usage window (5h or weekly), camelCase end-to-end (the
@@ -2436,6 +2455,7 @@ export type CodexUsagePayload = {
 /** One connected Codex (ChatGPT) account in a workspace (multi-account P1). Metadata only. */
 export type CodexAccount = {
     id: string;
+    source?: "workspace" | "organization";
     chatgptAccountId?: string | null;
     label?: string | null;
     email?: string | null;
@@ -2537,6 +2557,7 @@ export type CodexRotationSettings = {
 export type CodexAccountsResponse = {
     accounts: CodexAccount[];
     activeAccountId: string | null;
+    source?: WorkspaceCodexSubscriptionSource;
     /** Added by Apps-aware servers; absent on older same-major deployments. */
     apps?: {
         available: boolean;
@@ -2547,6 +2568,7 @@ export type CodexAccountsResponse = {
     };
     settings: CodexRotationSettings;
 };
+export type OrganizationCodexAccountsResponse = Omit<CodexAccountsResponse, "apps" | "source">;
 export type CodexAppsUpdate = {
     credentialId: string | null;
     version: number;
@@ -2680,6 +2702,8 @@ export type ClientAuthConfig = {
     session: "cookie";
     /** Defaults to true when omitted by an older deployment. */
     emailVerificationRequired?: boolean;
+    /** Configured managed sign-in providers; omitted by older deployments. */
+    socialProviders?: ("google" | "github")[];
 };
 export declare const OPENGENI_API_CONTRACT_REVISION: "2026-08-organization-recovery-custody-v1";
 export declare const OPENGENI_API_CONTRACT_HEADER: "x-opengeni-api-contract";
@@ -2701,6 +2725,7 @@ export type ClientConfig = {
     models: ClientModel[];
     defaultReasoningEffort: ReasoningEffort;
     allowedReasoningEfforts: ReasoningEffort[];
+    defaultSandboxBackend?: SandboxBackend | undefined;
     mcpServers: {
         id: string;
         name: string;
@@ -3350,6 +3375,18 @@ export type CreateWorkspaceRequest = {
     externalId?: string | undefined;
     agentInstructions?: string | null | undefined;
 };
+export type EnsureWorkspaceRequest = {
+    accountId: string;
+    externalSource: string;
+    externalId: string;
+    name: string;
+    slug?: string | undefined;
+    agentInstructions?: string | null | undefined;
+};
+export type EnsureWorkspaceResponse = {
+    workspace: Workspace;
+    created: boolean;
+};
 export type UpdateWorkspaceRequest = {
     name?: string | undefined;
     slug?: string | null | undefined;
@@ -3380,6 +3417,11 @@ export type CreateApiKeyResponse = {
     /** The full secret token — shown once at creation, never returned again. */
     token: string;
 };
+export type CreateOrganizationApiKeyRequest = {
+    name: string;
+    description?: string | undefined;
+    expiresAt?: string | undefined;
+};
 export type ListApiKeysResponse = {
     apiKeys: ApiKey[];
 };
@@ -3393,8 +3435,18 @@ export type WorkspaceMember = {
 export type ListWorkspaceMembersResponse = {
     members: WorkspaceMember[];
 };
+export type WorkspaceMemberCandidate = {
+    organizationMembershipId: string;
+    subjectId: string;
+    name: string | null;
+    email: string | null;
+    organizationRole: "owner" | "admin" | "member";
+};
+export type ListWorkspaceMemberCandidatesResponse = {
+    members: WorkspaceMemberCandidate[];
+};
 export type AddWorkspaceMemberRequest = {
-    email: string;
+    organizationMembershipId: string;
     role?: string | undefined;
     permissions: Permission[];
 };
@@ -3790,6 +3842,10 @@ export type ScheduledTaskAgentConfigInput = {
     model?: string | undefined;
     reasoningEffort?: ReasoningEffort | undefined;
     sandboxBackend?: SandboxBackend | undefined;
+    machineTarget?: {
+        targetSandboxId: string;
+        workingDir?: string | undefined;
+    } | undefined;
     goal?: GoalSpec | undefined;
     executionClass?: "incident_telemetry" | undefined;
     incidentTelemetryPreflight?: IncidentTelemetryPreflightInput | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/sdk",
-  "version": "3.1.0",
+  "version": "3.3.2",
   "description": "Framework-agnostic TypeScript SDK for the OpenGeni API: typed client, session lifecycle, SSE event streaming with reconnect + replay-by-sequence, and proxy re-streaming helpers.",
   "license": "Apache-2.0",
   "repository": {
@@ -101,7 +101,7 @@
     "prepublishOnly": "bash ../../scripts/prepublish-guard"
   },
   "dependencies": {
-    "@opengeni/contracts": "^2.7.0"
+    "@opengeni/contracts": "^2.9.2"
   },
   "engines": {
     "node": ">=18"

package/src/accounts.ts

@@ -15,6 +15,8 @@ import {
   ManagedAuthSessionSetErrorCode,
   ResolveManagedAuthDeepLinkRequest,
   SelectManagedAuthLoginSlotRequest,
+  StartManagedAuthSocialTransactionRequest,
+  StartManagedAuthSocialTransactionResponse,
   type BeginManagedAuthLoginTransactionRequest as BeginManagedAuthLoginTransactionRequestType,
   type BootstrapManagedAuthSessionSetRequest as BootstrapManagedAuthSessionSetRequestType,
   type CancelManagedAuthLoginTransactionRequest as CancelManagedAuthLoginTransactionRequestType,
@@ -28,6 +30,8 @@ import {
   type ManagedAuthSessionSetProjection as ManagedAuthSessionSetProjectionType,
   type ResolveManagedAuthDeepLinkRequest as ResolveManagedAuthDeepLinkRequestType,
   type SelectManagedAuthLoginSlotRequest as SelectManagedAuthLoginSlotRequestType,
+  type StartManagedAuthSocialTransactionRequest as StartManagedAuthSocialTransactionRequestType,
+  type StartManagedAuthSocialTransactionResponse as StartManagedAuthSocialTransactionResponseType,
 } from "@opengeni/contracts/managed-auth-session-sets";
 import type { z } from "zod";
 
@@ -53,6 +57,9 @@ export interface BrowserAccountsClientLike {
   completeEmailPasswordTransaction(
     request: CompleteManagedAuthEmailPasswordTransactionRequestType,
   ): Promise<CompleteManagedAuthLoginTransactionResponseType>;
+  startSocialTransaction?(
+    request: StartManagedAuthSocialTransactionRequestType,
+  ): Promise<StartManagedAuthSocialTransactionResponseType>;
   cancelLoginTransaction(
     request: CancelManagedAuthLoginTransactionRequestType,
   ): Promise<ManagedAuthSessionSetProjectionType>;
@@ -178,6 +185,17 @@ export class BrowserAccountsClient implements BrowserAccountsClientLike {
     return response;
   }
 
+  async startSocialTransaction(request: StartManagedAuthSocialTransactionRequestType) {
+    return StartManagedAuthSocialTransactionResponse.parse(
+      await this.#mutation(
+        "POST",
+        "/v1/auth/session-set/transactions/social",
+        StartManagedAuthSocialTransactionRequest,
+        request,
+      ),
+    );
+  }
+
   async cancelLoginTransaction(request: CancelManagedAuthLoginTransactionRequestType) {
     return this.#projectionResponse(
       "DELETE",