@opengeni/sdk 3.3.2 → 3.4.0

package/dist/adapters/express.d.ts

@@ -0,0 +1,31 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+/** Any web-standard handler: `createSessionProxyHandler`, `createChatHandler`, or your own. */
+export type WebHandler = (request: Request) => Promise<Response>;
+/** Express/Connect request: Node's `IncomingMessage` plus what those frameworks add. */
+export type NodeRequestLike = IncomingMessage & {
+    originalUrl?: string | undefined;
+    /** Set when a body parser (for example `express.json()`) already consumed the body. */
+    body?: unknown;
+    protocol?: string | undefined;
+};
+export type NodeMiddleware = (request: NodeRequestLike, response: ServerResponse, next?: (error?: unknown) => void) => void;
+export type NodeMiddlewareOptions = {
+    /** Origin used to build the request URL. Defaults to the Host header over http(s). */
+    origin?: string | undefined;
+};
+/**
+ * Expose a web-standard handler as Express/Connect (or plain `node:http`)
+ * middleware. Mount it with the same path the browser client uses:
+ *
+ * ```ts
+ * app.use("/api/opengeni", toNodeMiddleware(handler));
+ * ```
+ *
+ * The full original URL is forwarded (Express strips the mount path from
+ * `req.url`), bodies stream through unless a body parser already consumed
+ * them, responses (including SSE) are written as they arrive, and a client
+ * disconnect aborts the request signal.
+ */
+export declare function toNodeMiddleware(handler: WebHandler, options?: NodeMiddlewareOptions): NodeMiddleware;
+/** Express/Connect naming alias. */
+export declare const toExpressMiddleware: typeof toNodeMiddleware;

package/dist/adapters/express.js

@@ -0,0 +1,87 @@
+// src/adapters/express.ts
+import { Readable } from "stream";
+function toNodeMiddleware(handler, options = {}) {
+  return (request, response, next) => {
+    void (async () => {
+      const abort = new AbortController();
+      response.once("close", () => {
+        if (!response.writableFinished) abort.abort();
+      });
+      const web = await handler(toWebRequest(request, abort.signal, options));
+      await writeWebResponse(web, response);
+    })().catch((error) => {
+      if (next) next(error);
+      else if (!response.headersSent) {
+        response.statusCode = 500;
+        response.end();
+      } else response.destroy(error instanceof Error ? error : void 0);
+    });
+  };
+}
+var toExpressMiddleware = toNodeMiddleware;
+function toWebRequest(request, signal, options) {
+  const encrypted = request.socket?.encrypted === true;
+  const origin = options.origin?.replace(/\/+$/, "") ?? `${request.protocol ?? (encrypted ? "https" : "http")}://${request.headers.host ?? "localhost"}`;
+  const url = new URL(request.originalUrl ?? request.url ?? "/", origin);
+  const headers = new Headers();
+  for (const [name, value] of Object.entries(request.headers)) {
+    if (value === void 0) continue;
+    if (Array.isArray(value)) for (const item of value) headers.append(name, item);
+    else headers.set(name, value);
+  }
+  const method = request.method ?? "GET";
+  let body;
+  if (method !== "GET" && method !== "HEAD") {
+    if (request.body !== void 0 && (request.readableEnded || request.complete)) {
+      body = typeof request.body === "string" || request.body instanceof Uint8Array ? request.body : JSON.stringify(request.body);
+      headers.delete("content-length");
+    } else {
+      body = Readable.toWeb(request);
+    }
+  }
+  return new Request(url, {
+    method,
+    headers,
+    signal,
+    ...body !== void 0 ? { body, duplex: "half" } : {}
+  });
+}
+async function writeWebResponse(web, response) {
+  response.statusCode = web.status;
+  const cookies = web.headers.getSetCookie?.() ?? [];
+  web.headers.forEach((value, name) => {
+    if (name.toLowerCase() !== "set-cookie") response.setHeader(name, value);
+  });
+  if (cookies.length > 0) response.setHeader("set-cookie", cookies);
+  if (!web.body) {
+    response.end();
+    return;
+  }
+  response.flushHeaders();
+  const reader = web.body.getReader();
+  response.once("close", () => {
+    void reader.cancel().catch(() => void 0);
+  });
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    if (!response.write(value)) {
+      await new Promise((resolve) => {
+        const settle = () => {
+          response.off("drain", settle);
+          response.off("close", settle);
+          resolve();
+        };
+        response.once("drain", settle);
+        response.once("close", settle);
+      });
+    }
+    if (response.destroyed) break;
+  }
+  response.end();
+}
+export {
+  toExpressMiddleware,
+  toNodeMiddleware
+};
+//# sourceMappingURL=express.js.map

package/dist/adapters/express.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/express.ts"],"sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { Readable } from \"node:stream\";\n\n/** Any web-standard handler: `createSessionProxyHandler`, `createChatHandler`, or your own. */\nexport type WebHandler = (request: Request) => Promise<Response>;\n\n/** Express/Connect request: Node's `IncomingMessage` plus what those frameworks add. */\nexport type NodeRequestLike = IncomingMessage & {\n  originalUrl?: string | undefined;\n  /** Set when a body parser (for example `express.json()`) already consumed the body. */\n  body?: unknown;\n  protocol?: string | undefined;\n};\n\nexport type NodeMiddleware = (\n  request: NodeRequestLike,\n  response: ServerResponse,\n  next?: (error?: unknown) => void,\n) => void;\n\nexport type NodeMiddlewareOptions = {\n  /** Origin used to build the request URL. Defaults to the Host header over http(s). */\n  origin?: string | undefined;\n};\n\n/**\n * Expose a web-standard handler as Express/Connect (or plain `node:http`)\n * middleware. Mount it with the same path the browser client uses:\n *\n * ```ts\n * app.use(\"/api/opengeni\", toNodeMiddleware(handler));\n * ```\n *\n * The full original URL is forwarded (Express strips the mount path from\n * `req.url`), bodies stream through unless a body parser already consumed\n * them, responses (including SSE) are written as they arrive, and a client\n * disconnect aborts the request signal.\n */\nexport function toNodeMiddleware(\n  handler: WebHandler,\n  options: NodeMiddlewareOptions = {},\n): NodeMiddleware {\n  return (request, response, next) => {\n    void (async () => {\n      const abort = new AbortController();\n      response.once(\"close\", () => {\n        if (!response.writableFinished) abort.abort();\n      });\n      const web = await handler(toWebRequest(request, abort.signal, options));\n      await writeWebResponse(web, response);\n    })().catch((error: unknown) => {\n      if (next) next(error);\n      else if (!response.headersSent) {\n        response.statusCode = 500;\n        response.end();\n      } else response.destroy(error instanceof Error ? error : undefined);\n    });\n  };\n}\n\n/** Express/Connect naming alias. */\nexport const toExpressMiddleware = toNodeMiddleware;\n\nfunction toWebRequest(\n  request: NodeRequestLike,\n  signal: AbortSignal,\n  options: NodeMiddlewareOptions,\n): Request {\n  const encrypted = (request.socket as { encrypted?: boolean } | undefined)?.encrypted === true;\n  const origin =\n    options.origin?.replace(/\\/+$/, \"\") ??\n    `${request.protocol ?? (encrypted ? \"https\" : \"http\")}://${request.headers.host ?? \"localhost\"}`;\n  const url = new URL(request.originalUrl ?? request.url ?? \"/\", origin);\n  const headers = new Headers();\n  for (const [name, value] of Object.entries(request.headers)) {\n    if (value === undefined) continue;\n    if (Array.isArray(value)) for (const item of value) headers.append(name, item);\n    else headers.set(name, value);\n  }\n  const method = request.method ?? \"GET\";\n  let body: BodyInit | undefined;\n  if (method !== \"GET\" && method !== \"HEAD\") {\n    if (request.body !== undefined && (request.readableEnded || request.complete)) {\n      // A body parser consumed the stream: forward what it parsed.\n      body =\n        typeof request.body === \"string\" || request.body instanceof Uint8Array\n          ? (request.body as string | Uint8Array<ArrayBuffer>)\n          : JSON.stringify(request.body);\n      headers.delete(\"content-length\");\n    } else {\n      body = Readable.toWeb(request) as unknown as ReadableStream<Uint8Array>;\n    }\n  }\n  return new Request(url, {\n    method,\n    headers,\n    signal,\n    ...(body !== undefined ? { body, duplex: \"half\" } : {}),\n  } as RequestInit);\n}\n\nasync function writeWebResponse(web: Response, response: ServerResponse): Promise<void> {\n  response.statusCode = web.status;\n  const cookies = web.headers.getSetCookie?.() ?? [];\n  web.headers.forEach((value, name) => {\n    if (name.toLowerCase() !== \"set-cookie\") response.setHeader(name, value);\n  });\n  if (cookies.length > 0) response.setHeader(\"set-cookie\", cookies);\n  if (!web.body) {\n    response.end();\n    return;\n  }\n  // Send headers now so SSE clients see the stream open before the first event.\n  response.flushHeaders();\n  const reader = web.body.getReader();\n  response.once(\"close\", () => {\n    void reader.cancel().catch(() => undefined);\n  });\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    if (!response.write(value)) {\n      await new Promise<void>((resolve) => {\n        const settle = () => {\n          response.off(\"drain\", settle);\n          response.off(\"close\", settle);\n          resolve();\n        };\n        response.once(\"drain\", settle);\n        response.once(\"close\", settle);\n      });\n    }\n    if (response.destroyed) break;\n  }\n  response.end();\n}\n"],"mappings":";AACA,SAAS,gBAAgB;AAqClB,SAAS,iBACd,SACA,UAAiC,CAAC,GAClB;AAChB,SAAO,CAAC,SAAS,UAAU,SAAS;AAClC,UAAM,YAAY;AAChB,YAAM,QAAQ,IAAI,gBAAgB;AAClC,eAAS,KAAK,SAAS,MAAM;AAC3B,YAAI,CAAC,SAAS,iBAAkB,OAAM,MAAM;AAAA,MAC9C,CAAC;AACD,YAAM,MAAM,MAAM,QAAQ,aAAa,SAAS,MAAM,QAAQ,OAAO,CAAC;AACtE,YAAM,iBAAiB,KAAK,QAAQ;AAAA,IACtC,GAAG,EAAE,MAAM,CAAC,UAAmB;AAC7B,UAAI,KAAM,MAAK,KAAK;AAAA,eACX,CAAC,SAAS,aAAa;AAC9B,iBAAS,aAAa;AACtB,iBAAS,IAAI;AAAA,MACf,MAAO,UAAS,QAAQ,iBAAiB,QAAQ,QAAQ,MAAS;AAAA,IACpE,CAAC;AAAA,EACH;AACF;AAGO,IAAM,sBAAsB;AAEnC,SAAS,aACP,SACA,QACA,SACS;AACT,QAAM,YAAa,QAAQ,QAAgD,cAAc;AACzF,QAAM,SACJ,QAAQ,QAAQ,QAAQ,QAAQ,EAAE,KAClC,GAAG,QAAQ,aAAa,YAAY,UAAU,OAAO,MAAM,QAAQ,QAAQ,QAAQ,WAAW;AAChG,QAAM,MAAM,IAAI,IAAI,QAAQ,eAAe,QAAQ,OAAO,KAAK,MAAM;AACrE,QAAM,UAAU,IAAI,QAAQ;AAC5B,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,QAAQ,OAAO,GAAG;AAC3D,QAAI,UAAU,OAAW;AACzB,QAAI,MAAM,QAAQ,KAAK,EAAG,YAAW,QAAQ,MAAO,SAAQ,OAAO,MAAM,IAAI;AAAA,QACxE,SAAQ,IAAI,MAAM,KAAK;AAAA,EAC9B;AACA,QAAM,SAAS,QAAQ,UAAU;AACjC,MAAI;AACJ,MAAI,WAAW,SAAS,WAAW,QAAQ;AACzC,QAAI,QAAQ,SAAS,WAAc,QAAQ,iBAAiB,QAAQ,WAAW;AAE7E,aACE,OAAO,QAAQ,SAAS,YAAY,QAAQ,gBAAgB,aACvD,QAAQ,OACT,KAAK,UAAU,QAAQ,IAAI;AACjC,cAAQ,OAAO,gBAAgB;AAAA,IACjC,OAAO;AACL,aAAO,SAAS,MAAM,OAAO;AAAA,IAC/B;AAAA,EACF;AACA,SAAO,IAAI,QAAQ,KAAK;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,SAAS,SAAY,EAAE,MAAM,QAAQ,OAAO,IAAI,CAAC;AAAA,EACvD,CAAgB;AAClB;AAEA,eAAe,iBAAiB,KAAe,UAAyC;AACtF,WAAS,aAAa,IAAI;AAC1B,QAAM,UAAU,IAAI,QAAQ,eAAe,KAAK,CAAC;AACjD,MAAI,QAAQ,QAAQ,CAAC,OAAO,SAAS;AACnC,QAAI,KAAK,YAAY,MAAM,aAAc,UAAS,UAAU,MAAM,KAAK;AAAA,EACzE,CAAC;AACD,MAAI,QAAQ,SAAS,EAAG,UAAS,UAAU,cAAc,OAAO;AAChE,MAAI,CAAC,IAAI,MAAM;AACb,aAAS,IAAI;AACb;AAAA,EACF;AAEA,WAAS,aAAa;AACtB,QAAM,SAAS,IAAI,KAAK,UAAU;AAClC,WAAS,KAAK,SAAS,MAAM;AAC3B,SAAK,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EAC5C,CAAC;AACD,aAAS;AACP,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,QAAI,KAAM;AACV,QAAI,CAAC,SAAS,MAAM,KAAK,GAAG;AAC1B,YAAM,IAAI,QAAc,CAAC,YAAY;AACnC,cAAM,SAAS,MAAM;AACnB,mBAAS,IAAI,SAAS,MAAM;AAC5B,mBAAS,IAAI,SAAS,MAAM;AAC5B,kBAAQ;AAAA,QACV;AACA,iBAAS,KAAK,SAAS,MAAM;AAC7B,iBAAS,KAAK,SAAS,MAAM;AAAA,MAC/B,CAAC;AAAA,IACH;AACA,QAAI,SAAS,UAAW;AAAA,EAC1B;AACA,WAAS,IAAI;AACf;","names":[]}

package/dist/adapters/hono.d.ts

@@ -0,0 +1,16 @@
+/** Any web-standard handler: `createSessionProxyHandler`, `createChatHandler`, or your own. */
+export type WebHandler = (request: Request) => Promise<Response>;
+/** The part of Hono's context this adapter uses (no Hono dependency). */
+export type HonoContextLike = {
+    req: {
+        raw: Request;
+    };
+};
+/**
+ * Expose a web-standard handler as a Hono handler:
+ *
+ * ```ts
+ * app.all("/api/opengeni/*", toHonoHandler(handler));
+ * ```
+ */
+export declare function toHonoHandler(handler: WebHandler): (context: HonoContextLike) => Promise<Response>;

package/dist/adapters/hono.js

@@ -0,0 +1,8 @@
+// src/adapters/hono.ts
+function toHonoHandler(handler) {
+  return async (context) => await handler(context.req.raw);
+}
+export {
+  toHonoHandler
+};
+//# sourceMappingURL=hono.js.map

package/dist/adapters/hono.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/hono.ts"],"sourcesContent":["/** Any web-standard handler: `createSessionProxyHandler`, `createChatHandler`, or your own. */\nexport type WebHandler = (request: Request) => Promise<Response>;\n\n/** The part of Hono's context this adapter uses (no Hono dependency). */\nexport type HonoContextLike = { req: { raw: Request } };\n\n/**\n * Expose a web-standard handler as a Hono handler:\n *\n * ```ts\n * app.all(\"/api/opengeni/*\", toHonoHandler(handler));\n * ```\n */\nexport function toHonoHandler(\n  handler: WebHandler,\n): (context: HonoContextLike) => Promise<Response> {\n  return async (context) => await handler(context.req.raw);\n}\n"],"mappings":";AAaO,SAAS,cACd,SACiD;AACjD,SAAO,OAAO,YAAY,MAAM,QAAQ,QAAQ,IAAI,GAAG;AACzD;","names":[]}

package/dist/adapters/next.d.ts

@@ -0,0 +1,29 @@
+import { createSessionProxyHandler, type SessionProxyHandlerOptions } from "../session-proxy.js";
+/** Any web-standard handler: `createSessionProxyHandler`, `createChatHandler`, or your own. */
+export type WebHandler = (request: Request) => Promise<Response>;
+/** Route handlers for a Next.js App Router catch-all route. */
+export type NextRouteHandlers = {
+    GET: WebHandler;
+    POST: WebHandler;
+    PUT: WebHandler;
+    PATCH: WebHandler;
+    DELETE: WebHandler;
+};
+/**
+ * Expose a web-standard handler as Next.js App Router route handlers.
+ *
+ * ```ts
+ * // app/api/opengeni/[...path]/route.ts
+ * export const dynamic = "force-dynamic";
+ * export const { GET, POST, PUT, PATCH, DELETE } = toNextRouteHandlers(handler);
+ * ```
+ *
+ * Next passes the full request URL (including any `basePath`), so the proxy's
+ * own `/v1/` detection routes it; responses, including SSE, stream as-is.
+ */
+export declare function toNextRouteHandlers(handler: WebHandler): NextRouteHandlers;
+/**
+ * `createSessionProxyHandler` as Next.js App Router route handlers, for
+ * `app/<mount>/[...path]/route.ts`.
+ */
+export declare function createSessionProxyRoute(target: Parameters<typeof createSessionProxyHandler>[0], options: SessionProxyHandlerOptions): NextRouteHandlers;

package/dist/adapters/next.js

@@ -0,0 +1,22 @@
+import {
+  createSessionProxyHandler
+} from "../chunk-FTWVVPR6.js";
+import "../chunk-UM4ZXXJR.js";
+import "../chunk-QGEIL4TR.js";
+import "../chunk-4AHR4KGA.js";
+import "../chunk-NCU5OAN7.js";
+import "../chunk-7EWT3PV6.js";
+
+// src/adapters/next.ts
+function toNextRouteHandlers(handler) {
+  const route = async (request) => await handler(request);
+  return { GET: route, POST: route, PUT: route, PATCH: route, DELETE: route };
+}
+function createSessionProxyRoute(target, options) {
+  return toNextRouteHandlers(createSessionProxyHandler(target, options));
+}
+export {
+  createSessionProxyRoute,
+  toNextRouteHandlers
+};
+//# sourceMappingURL=next.js.map

package/dist/adapters/next.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/next.ts"],"sourcesContent":["import { createSessionProxyHandler, type SessionProxyHandlerOptions } from \"../session-proxy\";\n\n/** Any web-standard handler: `createSessionProxyHandler`, `createChatHandler`, or your own. */\nexport type WebHandler = (request: Request) => Promise<Response>;\n\n/** Route handlers for a Next.js App Router catch-all route. */\nexport type NextRouteHandlers = {\n  GET: WebHandler;\n  POST: WebHandler;\n  PUT: WebHandler;\n  PATCH: WebHandler;\n  DELETE: WebHandler;\n};\n\n/**\n * Expose a web-standard handler as Next.js App Router route handlers.\n *\n * ```ts\n * // app/api/opengeni/[...path]/route.ts\n * export const dynamic = \"force-dynamic\";\n * export const { GET, POST, PUT, PATCH, DELETE } = toNextRouteHandlers(handler);\n * ```\n *\n * Next passes the full request URL (including any `basePath`), so the proxy's\n * own `/v1/` detection routes it; responses, including SSE, stream as-is.\n */\nexport function toNextRouteHandlers(handler: WebHandler): NextRouteHandlers {\n  // Next calls route handlers with (request, context); only the request matters.\n  const route: WebHandler = async (request) => await handler(request);\n  return { GET: route, POST: route, PUT: route, PATCH: route, DELETE: route };\n}\n\n/**\n * `createSessionProxyHandler` as Next.js App Router route handlers, for\n * `app/<mount>/[...path]/route.ts`.\n */\nexport function createSessionProxyRoute(\n  target: Parameters<typeof createSessionProxyHandler>[0],\n  options: SessionProxyHandlerOptions,\n): NextRouteHandlers {\n  return toNextRouteHandlers(createSessionProxyHandler(target, options));\n}\n"],"mappings":";;;;;;;;;;AA0BO,SAAS,oBAAoB,SAAwC;AAE1E,QAAM,QAAoB,OAAO,YAAY,MAAM,QAAQ,OAAO;AAClE,SAAO,EAAE,KAAK,OAAO,MAAM,OAAO,KAAK,OAAO,OAAO,OAAO,QAAQ,MAAM;AAC5E;AAMO,SAAS,wBACd,QACA,SACmB;AACnB,SAAO,oBAAoB,0BAA0B,QAAQ,OAAO,CAAC;AACvE;","names":[]}

package/dist/allowance-refusal.d.ts

@@ -0,0 +1,2 @@
+/** Browser-safe allowance presentation without exposing the server core. */
+export { allowanceExhaustedMessage, parseAllowanceExhaustedRefusal, } from "@opengeni/contracts/allowance-refusal";

package/dist/allowance-refusal.js

@@ -0,0 +1,50 @@
+// ../contracts/src/allowance-refusal.ts
+var MESSAGE_MAX_UTF8_BYTES = 1024;
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function resetTimestamp(value) {
+  if (value === null) return true;
+  if (typeof value !== "string" || value.length > 64) return false;
+  const parts = /^(\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])T(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.exec(
+    value
+  );
+  if (!parts || !Number.isFinite(Date.parse(value))) return false;
+  const year = Number(parts[1]);
+  const month = Number(parts[2]);
+  const day = Number(parts[3]);
+  const leapYear = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+  const days = [31, leapYear ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+  return day <= days[month - 1];
+}
+function parseAllowanceExhaustedRefusal(value) {
+  const source = record(value);
+  if (source?.code !== "allowance_exhausted") return null;
+  const fields = record(source.details) ?? source;
+  const scope = fields.scope;
+  const subjectId = scope === "member" ? fields.subjectId : void 0;
+  if (typeof source.message !== "string" || scope !== "workspace" && scope !== "member" || !resetTimestamp(fields.resetsAt) || subjectId !== void 0 && (typeof subjectId !== "string" || subjectId.length === 0 || subjectId.length > 1024 || subjectId.includes("\0"))) {
+    return null;
+  }
+  const normalized = source.message.slice(0, MESSAGE_MAX_UTF8_BYTES * 2).replace(/[\u0000-\u001f\u007f]+/g, " ").trim();
+  const bytes = new TextEncoder().encode(normalized.slice(0, MESSAGE_MAX_UTF8_BYTES * 2));
+  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);
+  while (end > 0 && end < bytes.length && (bytes[end] & 192) === 128) end -= 1;
+  return {
+    code: "allowance_exhausted",
+    scope,
+    resetsAt: fields.resetsAt,
+    ...typeof subjectId === "string" ? { subjectId } : {},
+    message: new TextDecoder().decode(bytes.slice(0, end)).trim()
+  };
+}
+function allowanceExhaustedMessage(refusal) {
+  const remedy = refusal.scope === "workspace" ? "The workspace usage allowance is exhausted. An organization administrator or a full-access organization API key can raise the workspace ceiling or add an allowance grant." : "The member usage allowance is exhausted. A workspace administrator or a full-access organization API key can adjust the member ceiling.";
+  const reset = refusal.resetsAt === null ? "This allowance has no automatic reset." : `It resets at ${new Date(refusal.resetsAt).toISOString().slice(0, 16).replace("T", " ")} UTC.`;
+  return `${remedy} ${reset}`;
+}
+export {
+  allowanceExhaustedMessage,
+  parseAllowanceExhaustedRefusal
+};
+//# sourceMappingURL=allowance-refusal.js.map

package/dist/allowance-refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../contracts/src/allowance-refusal.ts"],"sourcesContent":["import type { AllowanceExhaustedRefusal } from \"./usage-allowances\";\n\nconst MESSAGE_MAX_UTF8_BYTES = 1_024;\n\nfunction record(value: unknown): Record<string, unknown> | null {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : null;\n}\n\n/** Mirror the canonical offset datetime's calendar/time bounds without loading\n * the schema runtime into synchronous browser/React Native session projection.\n * Contract-parity tests guard this deliberately small, bounded wire leaf.\n */\nfunction resetTimestamp(value: unknown): value is string | null {\n  if (value === null) return true;\n  if (typeof value !== \"string\" || value.length > 64) return false;\n  const parts =\n    /^(\\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\\d|3[01])T(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|[+-](?:[01]\\d|2[0-3]):[0-5]\\d)$/.exec(\n      value,\n    );\n  if (!parts || !Number.isFinite(Date.parse(value))) return false;\n  const year = Number(parts[1]);\n  const month = Number(parts[2]);\n  const day = Number(parts[3]);\n  const leapYear = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);\n  const days = [31, leapYear ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];\n  return day <= days[month - 1]!;\n}\n\n/** Select only public refusal fields, including from an API error's details.\n * LimitDecision's allowed:false and transport/SQL diagnostics never cross out.\n */\nexport function parseAllowanceExhaustedRefusal(value: unknown): AllowanceExhaustedRefusal | null {\n  const source = record(value);\n  if (source?.code !== \"allowance_exhausted\") return null;\n  const fields = record(source.details) ?? source;\n  const scope = fields.scope;\n  const subjectId = scope === \"member\" ? fields.subjectId : undefined;\n  if (\n    typeof source.message !== \"string\" ||\n    (scope !== \"workspace\" && scope !== \"member\") ||\n    !resetTimestamp(fields.resetsAt) ||\n    (subjectId !== undefined &&\n      (typeof subjectId !== \"string\" ||\n        subjectId.length === 0 ||\n        subjectId.length > 1_024 ||\n        subjectId.includes(\"\\0\")))\n  ) {\n    return null;\n  }\n  const normalized = source.message\n    .slice(0, MESSAGE_MAX_UTF8_BYTES * 2)\n    .replace(/[\\u0000-\\u001f\\u007f]+/g, \" \")\n    .trim();\n  const bytes = new TextEncoder().encode(normalized.slice(0, MESSAGE_MAX_UTF8_BYTES * 2));\n  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);\n  while (end > 0 && end < bytes.length && (bytes[end]! & 0xc0) === 0x80) end -= 1;\n  return {\n    code: \"allowance_exhausted\",\n    scope,\n    resetsAt: fields.resetsAt,\n    ...(typeof subjectId === \"string\" ? { subjectId } : {}),\n    message: new TextDecoder().decode(bytes.slice(0, end)).trim(),\n  };\n}\n\n/** Bounded, fixed remedies: a ceiling is not an exhausted billing source.\n * Never interpolate arbitrary exception prose or a member identifier.\n */\nexport function allowanceExhaustedMessage(refusal: AllowanceExhaustedRefusal): string {\n  const remedy =\n    refusal.scope === \"workspace\"\n      ? \"The workspace usage allowance is exhausted. An organization administrator or a full-access organization API key can raise the workspace ceiling or add an allowance grant.\"\n      : \"The member usage allowance is exhausted. A workspace administrator or a full-access organization API key can adjust the member ceiling.\";\n  const reset =\n    refusal.resetsAt === null\n      ? \"This allowance has no automatic reset.\"\n      : `It resets at ${new Date(refusal.resetsAt).toISOString().slice(0, 16).replace(\"T\", \" \")} UTC.`;\n  return `${remedy} ${reset}`;\n}\n"],"mappings":";AAEA,IAAM,yBAAyB;AAE/B,SAAS,OAAO,OAAgD;AAC9D,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AACN;AAMA,SAAS,eAAe,OAAwC;AAC9D,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAI,QAAO;AAC3D,QAAM,QACJ,sIAAsI;AAAA,IACpI;AAAA,EACF;AACF,MAAI,CAAC,SAAS,CAAC,OAAO,SAAS,KAAK,MAAM,KAAK,CAAC,EAAG,QAAO;AAC1D,QAAM,OAAO,OAAO,MAAM,CAAC,CAAC;AAC5B,QAAM,QAAQ,OAAO,MAAM,CAAC,CAAC;AAC7B,QAAM,MAAM,OAAO,MAAM,CAAC,CAAC;AAC3B,QAAM,WAAW,OAAO,MAAM,MAAM,OAAO,QAAQ,KAAK,OAAO,QAAQ;AACvE,QAAM,OAAO,CAAC,IAAI,WAAW,KAAK,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE;AAC5E,SAAO,OAAO,KAAK,QAAQ,CAAC;AAC9B;AAKO,SAAS,+BAA+B,OAAkD;AAC/F,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,QAAQ,SAAS,sBAAuB,QAAO;AACnD,QAAM,SAAS,OAAO,OAAO,OAAO,KAAK;AACzC,QAAM,QAAQ,OAAO;AACrB,QAAM,YAAY,UAAU,WAAW,OAAO,YAAY;AAC1D,MACE,OAAO,OAAO,YAAY,YACzB,UAAU,eAAe,UAAU,YACpC,CAAC,eAAe,OAAO,QAAQ,KAC9B,cAAc,WACZ,OAAO,cAAc,YACpB,UAAU,WAAW,KACrB,UAAU,SAAS,QACnB,UAAU,SAAS,IAAI,IAC3B;AACA,WAAO;AAAA,EACT;AACA,QAAM,aAAa,OAAO,QACvB,MAAM,GAAG,yBAAyB,CAAC,EACnC,QAAQ,2BAA2B,GAAG,EACtC,KAAK;AACR,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,WAAW,MAAM,GAAG,yBAAyB,CAAC,CAAC;AACtF,MAAI,MAAM,KAAK,IAAI,MAAM,QAAQ,sBAAsB;AACvD,SAAO,MAAM,KAAK,MAAM,MAAM,WAAW,MAAM,GAAG,IAAK,SAAU,IAAM,QAAO;AAC9E,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,UAAU,OAAO;AAAA,IACjB,GAAI,OAAO,cAAc,WAAW,EAAE,UAAU,IAAI,CAAC;AAAA,IACrD,SAAS,IAAI,YAAY,EAAE,OAAO,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,KAAK;AAAA,EAC9D;AACF;AAKO,SAAS,0BAA0B,SAA4C;AACpF,QAAM,SACJ,QAAQ,UAAU,cACd,+KACA;AACN,QAAM,QACJ,QAAQ,aAAa,OACjB,2CACA,gBAAgB,IAAI,KAAK,QAAQ,QAAQ,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,EAAE,QAAQ,KAAK,GAAG,CAAC;AAC7F,SAAO,GAAG,MAAM,IAAI,KAAK;AAC3B;","names":[]}

package/dist/app-links.d.ts

@@ -0,0 +1,42 @@
+/** A deployment address as typed: trimmed, https by default, no trailing slash. */
+export declare function normalizeServerUrl(input: string): string | null;
+/** The host a person recognizes, e.g. app.opengeni.ai. */
+export declare function serverLabel(baseUrl: string): string;
+/** The part of a signed-in app account that link routing reads. */
+export interface AppLinkAccount {
+    id: string;
+    /** The deployment's web origin, e.g. https://app.opengeni.ai. */
+    baseUrl: string;
+    /** The workspace last used with this account. */
+    workspaceId: string | null;
+    /** Set when the deployment rejected the credential. */
+    signedOut?: boolean;
+}
+/**
+ * A web link the app can show itself: a conversation or a workspace on some
+ * deployment. Everything else on the web (settings, organization, artifacts)
+ * stays in the browser.
+ */
+export interface AppLink {
+    /** The deployment's origin, normalized like a stored account's baseUrl. */
+    origin: string;
+    /** Absent for the web's workspace-less `/sessions/:id` links. */
+    workspaceId: string | null;
+    /** Absent for a link to the workspace itself. */
+    sessionId: string | null;
+    /** The session moment the link points at (`?at=`). */
+    at: number | null;
+    /** The web address the link came from, for the browser fallback. */
+    webUrl: string;
+}
+/** The web link a raw URL points at, unwrapping the web's "Open in app" handoff. */
+export declare function parseAppLink(raw: string): AppLink | null;
+/**
+ * The signed-in account a link belongs to, or null when the app has none on
+ * that deployment (the browser opens it instead). With several accounts on the
+ * same deployment: the one last used in the link's workspace, else the active
+ * one, else the first.
+ */
+export declare function accountForAppLink<Account extends AppLinkAccount>(link: AppLink, accounts: readonly Account[], activeId: string | null): Account | null;
+/** The web's handoff link that opens a web page in the app. */
+export declare function appHandoffUrl(webUrl: string): string;

package/dist/app-links.js

@@ -0,0 +1,66 @@
+// src/app-links.ts
+function normalizeServerUrl(input) {
+  const raw = input.trim();
+  if (!raw) return null;
+  const withScheme = /^[a-z][a-z0-9+.-]*:\/\//iu.test(raw) ? raw : `https://${raw}`;
+  const match = /^(https?):\/\/([a-z0-9.-]+(?::\d{1,5})?)(?:[/?#].*)?$/iu.exec(withScheme);
+  return match ? `${match[1].toLowerCase()}://${match[2].toLowerCase()}` : null;
+}
+function serverLabel(baseUrl) {
+  return baseUrl.replace(/^https?:\/\//iu, "");
+}
+var HANDOFF = /^opengeni:\/\/open\/?\?(.*)$/iu;
+var WEB_URL = /^(https?:\/\/[^/?#]+)(\/[^?#]*)?(\?[^#]*)?(#.*)?$/iu;
+var ID = "([A-Za-z0-9][A-Za-z0-9_-]{0,127})";
+var SESSION_PATH = new RegExp(`^/workspaces/${ID}/sessions/${ID}/?$`, "u");
+var WORKSPACE_PATH = new RegExp(`^/workspaces/${ID}(?:/sessions)?/?$`, "u");
+var BARE_SESSION_PATH = new RegExp(`^/sessions/${ID}/?$`, "u");
+function queryParam(query, name) {
+  for (const part of (query ?? "").replace(/^\?/u, "").split("&")) {
+    const [key, value = ""] = part.split("=");
+    if (key !== name) continue;
+    try {
+      return decodeURIComponent(value.replace(/\+/gu, " "));
+    } catch {
+      return null;
+    }
+  }
+  return null;
+}
+function parseAppLink(raw) {
+  const trimmed = raw.trim();
+  const handoff = HANDOFF.exec(trimmed);
+  const webUrl = handoff ? queryParam(handoff[1], "url") : trimmed;
+  if (!webUrl) return null;
+  const match = WEB_URL.exec(webUrl);
+  if (!match) return null;
+  const origin = normalizeServerUrl(match[1]);
+  if (!origin) return null;
+  const path = match[2] ?? "/";
+  const atRaw = queryParam(match[3], "at");
+  const at = atRaw && /^[1-9][0-9]{0,15}$/u.test(atRaw) ? Number(atRaw) : null;
+  const session = SESSION_PATH.exec(path);
+  if (session) return { origin, workspaceId: session[1], sessionId: session[2], at, webUrl };
+  const bare = BARE_SESSION_PATH.exec(path);
+  if (bare) return { origin, workspaceId: null, sessionId: bare[1], at, webUrl };
+  const workspace = WORKSPACE_PATH.exec(path);
+  if (workspace) return { origin, workspaceId: workspace[1], sessionId: null, at: null, webUrl };
+  return null;
+}
+function accountForAppLink(link, accounts, activeId) {
+  const candidates = accounts.filter(
+    (account) => !account.signedOut && normalizeServerUrl(account.baseUrl) === link.origin
+  );
+  return (link.workspaceId ? candidates.find((account) => account.workspaceId === link.workspaceId) : void 0) ?? candidates.find((account) => account.id === activeId) ?? candidates[0] ?? null;
+}
+function appHandoffUrl(webUrl) {
+  return `opengeni://open?url=${encodeURIComponent(webUrl)}`;
+}
+export {
+  accountForAppLink,
+  appHandoffUrl,
+  normalizeServerUrl,
+  parseAppLink,
+  serverLabel
+};
+//# sourceMappingURL=app-links.js.map

package/dist/app-links.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/app-links.ts"],"sourcesContent":["// Opengeni web links that a native app (phone or desktop) can show itself, and\n// the account each belongs to. Pure: no platform modules, so every app shares it.\n\n/** A deployment address as typed: trimmed, https by default, no trailing slash. */\nexport function normalizeServerUrl(input: string): string | null {\n  const raw = input.trim();\n  if (!raw) return null;\n  const withScheme = /^[a-z][a-z0-9+.-]*:\\/\\//iu.test(raw) ? raw : `https://${raw}`;\n  const match = /^(https?):\\/\\/([a-z0-9.-]+(?::\\d{1,5})?)(?:[/?#].*)?$/iu.exec(withScheme);\n  return match ? `${match[1]!.toLowerCase()}://${match[2]!.toLowerCase()}` : null;\n}\n\n/** The host a person recognizes, e.g. app.opengeni.ai. */\nexport function serverLabel(baseUrl: string): string {\n  return baseUrl.replace(/^https?:\\/\\//iu, \"\");\n}\n\n/** The part of a signed-in app account that link routing reads. */\nexport interface AppLinkAccount {\n  id: string;\n  /** The deployment's web origin, e.g. https://app.opengeni.ai. */\n  baseUrl: string;\n  /** The workspace last used with this account. */\n  workspaceId: string | null;\n  /** Set when the deployment rejected the credential. */\n  signedOut?: boolean;\n}\n\n/**\n * A web link the app can show itself: a conversation or a workspace on some\n * deployment. Everything else on the web (settings, organization, artifacts)\n * stays in the browser.\n */\nexport interface AppLink {\n  /** The deployment's origin, normalized like a stored account's baseUrl. */\n  origin: string;\n  /** Absent for the web's workspace-less `/sessions/:id` links. */\n  workspaceId: string | null;\n  /** Absent for a link to the workspace itself. */\n  sessionId: string | null;\n  /** The session moment the link points at (`?at=`). */\n  at: number | null;\n  /** The web address the link came from, for the browser fallback. */\n  webUrl: string;\n}\n\n/** The app's own scheme for links handed over from the web: opengeni://open?url=… */\nconst HANDOFF = /^opengeni:\\/\\/open\\/?\\?(.*)$/iu;\nconst WEB_URL = /^(https?:\\/\\/[^/?#]+)(\\/[^?#]*)?(\\?[^#]*)?(#.*)?$/iu;\nconst ID = \"([A-Za-z0-9][A-Za-z0-9_-]{0,127})\";\nconst SESSION_PATH = new RegExp(`^/workspaces/${ID}/sessions/${ID}/?$`, \"u\");\nconst WORKSPACE_PATH = new RegExp(`^/workspaces/${ID}(?:/sessions)?/?$`, \"u\");\nconst BARE_SESSION_PATH = new RegExp(`^/sessions/${ID}/?$`, \"u\");\n\nfunction queryParam(query: string | undefined, name: string): string | null {\n  for (const part of (query ?? \"\").replace(/^\\?/u, \"\").split(\"&\")) {\n    const [key, value = \"\"] = part.split(\"=\");\n    if (key !== name) continue;\n    try {\n      return decodeURIComponent(value.replace(/\\+/gu, \" \"));\n    } catch {\n      return null;\n    }\n  }\n  return null;\n}\n\n/** The web link a raw URL points at, unwrapping the web's \"Open in app\" handoff. */\nexport function parseAppLink(raw: string): AppLink | null {\n  const trimmed = raw.trim();\n  const handoff = HANDOFF.exec(trimmed);\n  const webUrl = handoff ? queryParam(handoff[1], \"url\") : trimmed;\n  if (!webUrl) return null;\n  const match = WEB_URL.exec(webUrl);\n  if (!match) return null;\n  const origin = normalizeServerUrl(match[1]!);\n  if (!origin) return null;\n  const path = match[2] ?? \"/\";\n  const atRaw = queryParam(match[3], \"at\");\n  const at = atRaw && /^[1-9][0-9]{0,15}$/u.test(atRaw) ? Number(atRaw) : null;\n  const session = SESSION_PATH.exec(path);\n  if (session) return { origin, workspaceId: session[1]!, sessionId: session[2]!, at, webUrl };\n  const bare = BARE_SESSION_PATH.exec(path);\n  if (bare) return { origin, workspaceId: null, sessionId: bare[1]!, at, webUrl };\n  const workspace = WORKSPACE_PATH.exec(path);\n  if (workspace) return { origin, workspaceId: workspace[1]!, sessionId: null, at: null, webUrl };\n  return null;\n}\n\n/**\n * The signed-in account a link belongs to, or null when the app has none on\n * that deployment (the browser opens it instead). With several accounts on the\n * same deployment: the one last used in the link's workspace, else the active\n * one, else the first.\n */\nexport function accountForAppLink<Account extends AppLinkAccount>(\n  link: AppLink,\n  accounts: readonly Account[],\n  activeId: string | null,\n): Account | null {\n  const candidates = accounts.filter(\n    (account) => !account.signedOut && normalizeServerUrl(account.baseUrl) === link.origin,\n  );\n  return (\n    (link.workspaceId\n      ? candidates.find((account) => account.workspaceId === link.workspaceId)\n      : undefined) ??\n    candidates.find((account) => account.id === activeId) ??\n    candidates[0] ??\n    null\n  );\n}\n\n/** The web's handoff link that opens a web page in the app. */\nexport function appHandoffUrl(webUrl: string): string {\n  return `opengeni://open?url=${encodeURIComponent(webUrl)}`;\n}\n"],"mappings":";AAIO,SAAS,mBAAmB,OAA8B;AAC/D,QAAM,MAAM,MAAM,KAAK;AACvB,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,aAAa,4BAA4B,KAAK,GAAG,IAAI,MAAM,WAAW,GAAG;AAC/E,QAAM,QAAQ,0DAA0D,KAAK,UAAU;AACvF,SAAO,QAAQ,GAAG,MAAM,CAAC,EAAG,YAAY,CAAC,MAAM,MAAM,CAAC,EAAG,YAAY,CAAC,KAAK;AAC7E;AAGO,SAAS,YAAY,SAAyB;AACnD,SAAO,QAAQ,QAAQ,kBAAkB,EAAE;AAC7C;AAgCA,IAAM,UAAU;AAChB,IAAM,UAAU;AAChB,IAAM,KAAK;AACX,IAAM,eAAe,IAAI,OAAO,gBAAgB,EAAE,aAAa,EAAE,OAAO,GAAG;AAC3E,IAAM,iBAAiB,IAAI,OAAO,gBAAgB,EAAE,qBAAqB,GAAG;AAC5E,IAAM,oBAAoB,IAAI,OAAO,cAAc,EAAE,OAAO,GAAG;AAE/D,SAAS,WAAW,OAA2B,MAA6B;AAC1E,aAAW,SAAS,SAAS,IAAI,QAAQ,QAAQ,EAAE,EAAE,MAAM,GAAG,GAAG;AAC/D,UAAM,CAAC,KAAK,QAAQ,EAAE,IAAI,KAAK,MAAM,GAAG;AACxC,QAAI,QAAQ,KAAM;AAClB,QAAI;AACF,aAAO,mBAAmB,MAAM,QAAQ,QAAQ,GAAG,CAAC;AAAA,IACtD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,aAAa,KAA6B;AACxD,QAAM,UAAU,IAAI,KAAK;AACzB,QAAM,UAAU,QAAQ,KAAK,OAAO;AACpC,QAAM,SAAS,UAAU,WAAW,QAAQ,CAAC,GAAG,KAAK,IAAI;AACzD,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,QAAQ,QAAQ,KAAK,MAAM;AACjC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,mBAAmB,MAAM,CAAC,CAAE;AAC3C,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,OAAO,MAAM,CAAC,KAAK;AACzB,QAAM,QAAQ,WAAW,MAAM,CAAC,GAAG,IAAI;AACvC,QAAM,KAAK,SAAS,sBAAsB,KAAK,KAAK,IAAI,OAAO,KAAK,IAAI;AACxE,QAAM,UAAU,aAAa,KAAK,IAAI;AACtC,MAAI,QAAS,QAAO,EAAE,QAAQ,aAAa,QAAQ,CAAC,GAAI,WAAW,QAAQ,CAAC,GAAI,IAAI,OAAO;AAC3F,QAAM,OAAO,kBAAkB,KAAK,IAAI;AACxC,MAAI,KAAM,QAAO,EAAE,QAAQ,aAAa,MAAM,WAAW,KAAK,CAAC,GAAI,IAAI,OAAO;AAC9E,QAAM,YAAY,eAAe,KAAK,IAAI;AAC1C,MAAI,UAAW,QAAO,EAAE,QAAQ,aAAa,UAAU,CAAC,GAAI,WAAW,MAAM,IAAI,MAAM,OAAO;AAC9F,SAAO;AACT;AAQO,SAAS,kBACd,MACA,UACA,UACgB;AAChB,QAAM,aAAa,SAAS;AAAA,IAC1B,CAAC,YAAY,CAAC,QAAQ,aAAa,mBAAmB,QAAQ,OAAO,MAAM,KAAK;AAAA,EAClF;AACA,UACG,KAAK,cACF,WAAW,KAAK,CAAC,YAAY,QAAQ,gBAAgB,KAAK,WAAW,IACrE,WACJ,WAAW,KAAK,CAAC,YAAY,QAAQ,OAAO,QAAQ,KACpD,WAAW,CAAC,KACZ;AAEJ;AAGO,SAAS,cAAc,QAAwB;AACpD,SAAO,uBAAuB,mBAAmB,MAAM,CAAC;AAC1D;","names":[]}

package/dist/artifact-catalog.d.ts

@@ -0,0 +1,40 @@
+import type { RetainedArtifactReference } from "./types.js";
+export type ArtifactCatalogKind = "site" | "document" | "spreadsheet" | "presentation" | "image" | "file";
+/** Native IDs are unique within a kind; use `${kind}:${id}` as a UI key. */
+export type ArtifactCatalogItem = {
+    id: string;
+    kind: ArtifactCatalogKind;
+    title: string;
+    createdAt: string;
+    updatedAt: string;
+    status: "active" | "archived";
+    /** Shared workspace pin; absent on older servers. Never grants content access. */
+    pinned?: boolean;
+    /** Sites only: "private" when only its owner (the viewer) can see it. */
+    visibility?: "private" | "workspace";
+    /** Present only when the viewer can read this session. */
+    sourceSessionId?: string;
+    versionId?: string;
+    file?: RetainedArtifactReference;
+    filename?: string;
+    contentType?: string;
+    sizeBytes?: number;
+};
+export type ArtifactCatalogListOptions = {
+    sourceSessionId?: string;
+    q?: string;
+    kind?: ArtifactCatalogKind;
+    sort?: "updated" | "newest" | "title";
+    status?: "active" | "archived";
+    limit?: number;
+    cursor?: string;
+};
+export type ArtifactCatalogListResponse = {
+    items: ArtifactCatalogItem[];
+    nextCursor: string | null;
+};
+export type ArtifactPinResponse = {
+    kind: ArtifactCatalogKind;
+    artifactId: string;
+    pinned: boolean;
+};

package/dist/artifact-client.d.ts

@@ -1,6 +1,9 @@
 import { OpenGeniDocumentAuthorityClient } from "./document-authority-client.js";
+import type { FetchResponse } from "./client.js";
+import type { SiteToolCallRequest } from "./site-tool-bridge.js";
+import type { ToolGatewayCallResponse } from "./types.js";
+import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts.js";
 import type { CreateEditableArtifactMaterializationRequest, CreateEditableArtifactResourceRequest, EditableArtifactListResource, EditableArtifactMaterializationJobResource, EditableArtifactPinnedVersionResource, EditableArtifactResource, ImportEditableArtifactResourceRequest, ListSessionEditableArtifactResourcesOptions, PinEditableArtifactVersionRequest, ReadEditableArtifactMaterializationOptions, ReadEditableArtifactResourceOptions } from "./editable-artifact-resources.js";
-import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts.js";
 /** Public SDK client. Optional operator and artifact operations stay out of the console core. */
 export declare class OpenGeniClient extends OpenGeniDocumentAuthorityClient {
     createEditableArtifact(workspaceId: string, request: CreateEditableArtifactResourceRequest, options?: Readonly<{
@@ -19,11 +22,20 @@ export declare class OpenGeniClient extends OpenGeniDocumentAuthorityClient {
     }>): Promise<EditableArtifactMaterializationJobResource>;
     getEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<EditableArtifactMaterializationJobResource>;
     /** The caller owns the returned bounded response stream. */
-    downloadEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<Response>;
-    listWorkspaceArtifacts(workspaceId: string, options?: WorkspaceArtifactListOptions): Promise<WorkspaceArtifactListResponse>;
-    getWorkspaceArtifact(workspaceId: string, artifactId: string): Promise<WorkspaceArtifactDetailResponse>;
-    getWorkspaceArtifactContent(workspaceId: string, artifactId: string, versionId?: string): Promise<WorkspaceArtifactContentResponse>;
-    createWorkspaceArtifact(workspaceId: string, request: CreateWorkspaceArtifactRequest): Promise<WorkspaceArtifactMutationResponse>;
-    publishWorkspaceArtifactVersion(workspaceId: string, artifactId: string, request: PublishWorkspaceArtifactVersionRequest): Promise<WorkspaceArtifactMutationResponse>;
-    rollbackWorkspaceArtifact(workspaceId: string, artifactId: string, request: RollbackWorkspaceArtifactRequest): Promise<WorkspaceArtifactMutationResponse>;
+    downloadEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<FetchResponse>;
+    /** Exact Site-version gateway call. Keep this client on the authenticated host;
+     * the API enforces live viewer access and the version's declared tool allowlist. */
+    callWorkspaceSiteTool(workspaceId: string, request: SiteToolCallRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<ToolGatewayCallResponse>;
+    getWorkspaceArtifactContent(workspaceId: string, artifactId: string, versionOrOptions?: string | {
+        versionId?: string;
+        signal?: AbortSignal;
+    }): Promise<WorkspaceArtifactContentResponse>;
+    createWorkspaceArtifact(workspaceId: string, request: CreateWorkspaceArtifactRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<WorkspaceArtifactMutationResponse>;
+    publishWorkspaceArtifactVersion(workspaceId: string, artifactId: string, request: PublishWorkspaceArtifactVersionRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<WorkspaceArtifactMutationResponse>;
 }

package/dist/artifacts.d.ts

@@ -1,4 +1,4 @@
 /** Artifact-only API client entry; keeps unrelated SDK surfaces out of editor bundles. */
 export { OpenGeniClient } from "./artifact-client.js";
 export type { CreateEditableArtifactMaterializationRequest, CreateEditableArtifactResourceRequest, EditableArtifactListResource, EditableArtifactMaterializationFormat, EditableArtifactMaterializationJobResource, EditableArtifactMaterializationResultResource, EditableArtifactPinnedVersionResource, EditableArtifactResource, ListSessionEditableArtifactResourcesOptions, PinEditableArtifactVersionRequest, ReadEditableArtifactMaterializationOptions, ReadEditableArtifactResourceOptions, } from "./editable-artifact-resources.js";
-export type { FetchLike, GetSessionOptions, OpenGeniClientOptions, OpenGeniRequestOptions, } from "./client.js";
+export type { FetchLike, FetchResponse, GetSessionOptions, OpenGeniClientOptions, OpenGeniRequestOptions, } from "./client.js";

package/dist/artifacts.js

@@ -1,11 +1,13 @@
 import {
   OpenGeniClient
-} from "./chunk-QT3KFVDP.js";
-import "./chunk-YXQX7RQT.js";
-import "./chunk-TRNI7KEO.js";
-import "./chunk-JUS2UYRP.js";
-import "./chunk-KKRO2VCP.js";
-import "./chunk-C4DJPZRU.js";
+} from "./chunk-UME3X7CP.js";
+import "./chunk-OI5YLASH.js";
+import "./chunk-S2NLS3ES.js";
+import "./chunk-X5ITQVXE.js";
+import "./chunk-4AHR4KGA.js";
+import "./chunk-NCU5OAN7.js";
+import "./chunk-YJCHB7R3.js";
+import "./chunk-7EWT3PV6.js";
 export {
   OpenGeniClient
 };

package/dist/automations.js

@@ -27,7 +27,10 @@ var OpenGeniAutomationsClient = class {
   async disableSource(workspaceId, sourceId) {
     await this.client.requestJson(
       "DELETE",
-      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources/${encodeURIComponent(sourceId)}`
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources/${encodeURIComponent(sourceId)}`,
+      void 0,
+      {},
+      { responseType: "void" }
     );
   }
   async listTriggers(workspaceId) {
@@ -54,7 +57,10 @@ var OpenGeniAutomationsClient = class {
   async disableTrigger(workspaceId, triggerId, expectedRevision) {
     await this.client.requestJson(
       "DELETE",
-      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers/${encodeURIComponent(triggerId)}?expectedRevision=${expectedRevision}`
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers/${encodeURIComponent(triggerId)}?expectedRevision=${expectedRevision}`,
+      void 0,
+      {},
+      { responseType: "void" }
     );
   }
   async listRuns(workspaceId) {

package/dist/automations.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/automations-client.ts"],"sourcesContent":["import type {\n  AutomationRun,\n  AutomationSource,\n  AutomationTrigger,\n  AutomationWebhookResult,\n  CreateAutomationSourceRequest,\n  CreateAutomationTriggerRequest,\n  TriggerAutomationManuallyRequest,\n  UpdateAutomationSourceRequest,\n  UpdateAutomationTriggerRequest,\n} from \"@opengeni/contracts\";\nimport type { OpenGeniClient as OpenGeniCoreClient } from \"./client\";\n\nexport type OpenGeniAutomationsTransport = Pick<OpenGeniCoreClient, \"requestJson\">;\n\nexport class OpenGeniAutomationsClient {\n  constructor(private readonly client: OpenGeniAutomationsTransport) {}\n\n  async listSources(workspaceId: string): Promise<AutomationSource[]> {\n    const result = await this.client.requestJson<{ sources: AutomationSource[] }>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources`,\n    );\n    return result.sources;\n  }\n\n  async createSource(\n    workspaceId: string,\n    request: CreateAutomationSourceRequest,\n  ): Promise<AutomationSource> {\n    return await this.client.requestJson(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources`,\n      request,\n    );\n  }\n\n  async updateSource(\n    workspaceId: string,\n    sourceId: string,\n    request: UpdateAutomationSourceRequest,\n  ): Promise<AutomationSource> {\n    return await this.client.requestJson(\n      \"PATCH\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources/${encodeURIComponent(sourceId)}`,\n      request,\n    );\n  }\n\n  async disableSource(workspaceId: string, sourceId: string): Promise<void> {\n    await this.client.requestJson(\n      \"DELETE\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources/${encodeURIComponent(sourceId)}`,\n    );\n  }\n\n  async listTriggers(workspaceId: string): Promise<AutomationTrigger[]> {\n    const result = await this.client.requestJson<{ triggers: AutomationTrigger[] }>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers`,\n    );\n    return result.triggers;\n  }\n\n  async createTrigger(\n    workspaceId: string,\n    request: CreateAutomationTriggerRequest,\n  ): Promise<AutomationTrigger> {\n    return await this.client.requestJson(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers`,\n      request,\n    );\n  }\n\n  async updateTrigger(\n    workspaceId: string,\n    triggerId: string,\n    request: UpdateAutomationTriggerRequest,\n  ): Promise<AutomationTrigger> {\n    return await this.client.requestJson(\n      \"PATCH\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers/${encodeURIComponent(triggerId)}`,\n      request,\n    );\n  }\n\n  async disableTrigger(\n    workspaceId: string,\n    triggerId: string,\n    expectedRevision: number,\n  ): Promise<void> {\n    await this.client.requestJson(\n      \"DELETE\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers/${encodeURIComponent(triggerId)}?expectedRevision=${expectedRevision}`,\n    );\n  }\n\n  async listRuns(workspaceId: string): Promise<AutomationRun[]> {\n    const result = await this.client.requestJson<{ runs: AutomationRun[] }>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/runs`,\n    );\n    return result.runs;\n  }\n\n  async triggerManually(\n    workspaceId: string,\n    sourceId: string,\n    request: TriggerAutomationManuallyRequest,\n  ): Promise<AutomationWebhookResult> {\n    return await this.client.requestJson(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources/${encodeURIComponent(sourceId)}/events`,\n      request,\n    );\n  }\n}\n"],"mappings":";AAeO,IAAM,4BAAN,MAAgC;AAAA,EACrC,YAA6B,QAAsC;AAAtC;AAAA,EAAuC;AAAA,EAEpE,MAAM,YAAY,aAAkD;AAClE,UAAM,SAAS,MAAM,KAAK,OAAO;AAAA,MAC/B;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,IACnD;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAM,aACJ,aACA,SAC2B;AAC3B,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,aACA,UACA,SAC2B;AAC3B,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,wBAAwB,mBAAmB,QAAQ,CAAC;AAAA,MACrG;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,aAAqB,UAAiC;AACxE,UAAM,KAAK,OAAO;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,wBAAwB,mBAAmB,QAAQ,CAAC;AAAA,IACvG;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,aAAmD;AACpE,UAAM,SAAS,MAAM,KAAK,OAAO;AAAA,MAC/B;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,IACnD;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAM,cACJ,aACA,SAC4B;AAC5B,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,aACA,WACA,SAC4B;AAC5B,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,yBAAyB,mBAAmB,SAAS,CAAC;AAAA,MACvG;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,aACA,WACA,kBACe;AACf,UAAM,KAAK,OAAO;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,yBAAyB,mBAAmB,SAAS,CAAC,qBAAqB,gBAAgB;AAAA,IAC9I;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,aAA+C;AAC5D,UAAM,SAAS,MAAM,KAAK,OAAO;AAAA,MAC/B;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,IACnD;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAM,gBACJ,aACA,UACA,SACkC;AAClC,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,wBAAwB,mBAAmB,QAAQ,CAAC;AAAA,MACrG;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/automations-client.ts"],"sourcesContent":["import type {\n  AutomationRun,\n  AutomationSource,\n  AutomationTrigger,\n  AutomationWebhookResult,\n  CreateAutomationSourceRequest,\n  CreateAutomationTriggerRequest,\n  TriggerAutomationManuallyRequest,\n  UpdateAutomationSourceRequest,\n  UpdateAutomationTriggerRequest,\n} from \"@opengeni/contracts\";\nimport type { OpenGeniClient as OpenGeniCoreClient } from \"./client\";\n\nexport type OpenGeniAutomationsTransport = Pick<OpenGeniCoreClient, \"requestJson\">;\n\nexport class OpenGeniAutomationsClient {\n  constructor(private readonly client: OpenGeniAutomationsTransport) {}\n\n  async listSources(workspaceId: string): Promise<AutomationSource[]> {\n    const result = await this.client.requestJson<{ sources: AutomationSource[] }>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources`,\n    );\n    return result.sources;\n  }\n\n  async createSource(\n    workspaceId: string,\n    request: CreateAutomationSourceRequest,\n  ): Promise<AutomationSource> {\n    return await this.client.requestJson(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources`,\n      request,\n    );\n  }\n\n  async updateSource(\n    workspaceId: string,\n    sourceId: string,\n    request: UpdateAutomationSourceRequest,\n  ): Promise<AutomationSource> {\n    return await this.client.requestJson(\n      \"PATCH\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources/${encodeURIComponent(sourceId)}`,\n      request,\n    );\n  }\n\n  async disableSource(workspaceId: string, sourceId: string): Promise<void> {\n    await this.client.requestJson<void>(\n      \"DELETE\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources/${encodeURIComponent(sourceId)}`,\n      undefined,\n      {},\n      { responseType: \"void\" },\n    );\n  }\n\n  async listTriggers(workspaceId: string): Promise<AutomationTrigger[]> {\n    const result = await this.client.requestJson<{ triggers: AutomationTrigger[] }>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers`,\n    );\n    return result.triggers;\n  }\n\n  async createTrigger(\n    workspaceId: string,\n    request: CreateAutomationTriggerRequest,\n  ): Promise<AutomationTrigger> {\n    return await this.client.requestJson(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers`,\n      request,\n    );\n  }\n\n  async updateTrigger(\n    workspaceId: string,\n    triggerId: string,\n    request: UpdateAutomationTriggerRequest,\n  ): Promise<AutomationTrigger> {\n    return await this.client.requestJson(\n      \"PATCH\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers/${encodeURIComponent(triggerId)}`,\n      request,\n    );\n  }\n\n  async disableTrigger(\n    workspaceId: string,\n    triggerId: string,\n    expectedRevision: number,\n  ): Promise<void> {\n    await this.client.requestJson<void>(\n      \"DELETE\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/triggers/${encodeURIComponent(triggerId)}?expectedRevision=${expectedRevision}`,\n      undefined,\n      {},\n      { responseType: \"void\" },\n    );\n  }\n\n  async listRuns(workspaceId: string): Promise<AutomationRun[]> {\n    const result = await this.client.requestJson<{ runs: AutomationRun[] }>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/runs`,\n    );\n    return result.runs;\n  }\n\n  async triggerManually(\n    workspaceId: string,\n    sourceId: string,\n    request: TriggerAutomationManuallyRequest,\n  ): Promise<AutomationWebhookResult> {\n    return await this.client.requestJson(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/automations/sources/${encodeURIComponent(sourceId)}/events`,\n      request,\n    );\n  }\n}\n"],"mappings":";AAeO,IAAM,4BAAN,MAAgC;AAAA,EACrC,YAA6B,QAAsC;AAAtC;AAAA,EAAuC;AAAA,EAEpE,MAAM,YAAY,aAAkD;AAClE,UAAM,SAAS,MAAM,KAAK,OAAO;AAAA,MAC/B;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,IACnD;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAM,aACJ,aACA,SAC2B;AAC3B,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,aACA,UACA,SAC2B;AAC3B,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,wBAAwB,mBAAmB,QAAQ,CAAC;AAAA,MACrG;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,aAAqB,UAAiC;AACxE,UAAM,KAAK,OAAO;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,wBAAwB,mBAAmB,QAAQ,CAAC;AAAA,MACrG;AAAA,MACA,CAAC;AAAA,MACD,EAAE,cAAc,OAAO;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,aAAmD;AACpE,UAAM,SAAS,MAAM,KAAK,OAAO;AAAA,MAC/B;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,IACnD;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAM,cACJ,aACA,SAC4B;AAC5B,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,aACA,WACA,SAC4B;AAC5B,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,yBAAyB,mBAAmB,SAAS,CAAC;AAAA,MACvG;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,aACA,WACA,kBACe;AACf,UAAM,KAAK,OAAO;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,yBAAyB,mBAAmB,SAAS,CAAC,qBAAqB,gBAAgB;AAAA,MAC5I;AAAA,MACA,CAAC;AAAA,MACD,EAAE,cAAc,OAAO;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,aAA+C;AAC5D,UAAM,SAAS,MAAM,KAAK,OAAO;AAAA,MAC/B;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,IACnD;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAM,gBACJ,aACA,UACA,SACkC;AAClC,WAAO,MAAM,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,wBAAwB,mBAAmB,QAAQ,CAAC;AAAA,MACrG;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/azure-live-transport.d.ts

@@ -0,0 +1,32 @@
+import { type StartCodexRealtimeWebrtcOptions } from "./codex-realtime.js";
+import type { RealtimeControllerTransportStarter } from "./codex-realtime-controller.js";
+/** Azure Live has timed transcript fragments, not provider-finalized turns. */
+export declare class AzureLiveDataChannel extends EventTarget {
+    private readonly raw;
+    private readonly drainTimeoutMs;
+    private pending;
+    private timer;
+    private ordinal;
+    private readonly prefix;
+    private closed;
+    private closeSent;
+    private providerClosed;
+    private readonly delegations;
+    private userSinceDelegation;
+    private draining;
+    private finishDrain;
+    private readonly onOpen;
+    private readonly onClose;
+    private readonly onError;
+    private readonly onMessage;
+    constructor(raw: RTCDataChannel, drainTimeoutMs?: number);
+    get readyState(): RTCDataChannelState;
+    asRtcDataChannel(): RTCDataChannel;
+    private emit;
+    private flush;
+    private receive;
+    send(payload: string): void;
+    drain(): Promise<void>;
+    close(): void;
+}
+export declare function createAzureLiveTransportStarter(options?: Pick<StartCodexRealtimeWebrtcOptions, "remoteAudio" | "createPeerConnection">): RealtimeControllerTransportStarter;