@opengeni/sdk 3.3.2 → 3.5.1-canary.0

package/README.md

@@ -84,10 +84,22 @@ session. There is no organization-wide Skill registry or Skill inheritance in
 this integration contract. See the canonical guide for the complete route map,
 security boundary, and delivery checklist.
 
+Installed Pack Skills normally remain workspace-managed. A Pack may instead
+mark guidance as `session_selected`; installation then exposes it to no agent
+until `createSession` names the reviewed immutable component in
+`installedSkillIds`. OpenGeni copies that exact artifact into the new session,
+so omitting the field from customer-facing creates is a real contamination
+boundary rather than a prompt convention.
+The ordered selection is part of keyed-create identity: reusing an
+`idempotencyKey` with a different selection returns a conflict instead of the
+session configured by the earlier request.
+
 For session lists, `deriveSessionDisplayTitle(session)` returns the durable
 agent/user title when available. While the automatic title is still pending, it
-shows a short, sensitive-safe preview of the opening prompt and automatically
-yields to the later `session.title_set` value.
+shows the first short, sensitive-safe line of the opening prompt, skipping an
+unsafe pasted URL or identifier when later safe text exists. If no safe line is
+available, a short session reference keeps rows distinguishable. The display
+automatically yields to the later `session.title_set` value.
 
 Browser consoles that do not need operator-only surfaces can import
 `OpenGeniBrowserClient` from `@opengeni/sdk/browser`. Document authority migration
@@ -748,6 +760,7 @@ Every public endpoint group has typed methods:
 | Group | Methods |
 | --- | --- |
 | Access + workspaces | `getAccessContext`, `listWorkspaces`, `createWorkspace`, `ensureWorkspace`, `getWorkspace`, `updateWorkspace` |
+| Managed organizations | `createOrganization` for first-time compatibility; `createAdditionalOrganization` for an already-onboarded human; `listOrganizationMemberships`, `listOrganizationInvitations`, `acceptOrganizationInvitation` |
 | Sessions + events | `createSession`, `listSessions`, `listSessionPage`, `listAgentTopology`, `getSession`, `getSessionLineage`, `updateSession`, `listEvents`, `sendEvent`, `sendMessage`, `steerMessage`, `pauseSession`, `resumeSession`, `cancelSession`, `sendApprovalDecision`, `streamEvents`, `openEventStream` |
 | Machines (bring-your-own-compute) | `listMachines`, `machineMetricsSeries`, `swapActiveSandbox`, `mintEnrollToken`, `lookupDeviceEnrollment`, `approveDeviceEnrollment`, `denyDeviceEnrollment` |
 | Turn queue | `getQueue`, `moveQueueItem`, `editQueueItem`, `steerQueueItem`, `deleteQueueItem` |

package/dist/artifact-client.d.ts

@@ -1,4 +1,5 @@
 import { OpenGeniDocumentAuthorityClient } from "./document-authority-client.js";
+import type { FetchResponse } from "./client.js";
 import type { CreateEditableArtifactMaterializationRequest, CreateEditableArtifactResourceRequest, EditableArtifactListResource, EditableArtifactMaterializationJobResource, EditableArtifactPinnedVersionResource, EditableArtifactResource, ImportEditableArtifactResourceRequest, ListSessionEditableArtifactResourcesOptions, PinEditableArtifactVersionRequest, ReadEditableArtifactMaterializationOptions, ReadEditableArtifactResourceOptions } from "./editable-artifact-resources.js";
 import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts.js";
 /** Public SDK client. Optional operator and artifact operations stay out of the console core. */
@@ -19,7 +20,7 @@ export declare class OpenGeniClient extends OpenGeniDocumentAuthorityClient {
     }>): Promise<EditableArtifactMaterializationJobResource>;
     getEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<EditableArtifactMaterializationJobResource>;
     /** The caller owns the returned bounded response stream. */
-    downloadEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<Response>;
+    downloadEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<FetchResponse>;
     listWorkspaceArtifacts(workspaceId: string, options?: WorkspaceArtifactListOptions): Promise<WorkspaceArtifactListResponse>;
     getWorkspaceArtifact(workspaceId: string, artifactId: string): Promise<WorkspaceArtifactDetailResponse>;
     getWorkspaceArtifactContent(workspaceId: string, artifactId: string, versionId?: string): Promise<WorkspaceArtifactContentResponse>;

package/dist/artifacts.d.ts

@@ -1,4 +1,4 @@
 /** Artifact-only API client entry; keeps unrelated SDK surfaces out of editor bundles. */
 export { OpenGeniClient } from "./artifact-client.js";
 export type { CreateEditableArtifactMaterializationRequest, CreateEditableArtifactResourceRequest, EditableArtifactListResource, EditableArtifactMaterializationFormat, EditableArtifactMaterializationJobResource, EditableArtifactMaterializationResultResource, EditableArtifactPinnedVersionResource, EditableArtifactResource, ListSessionEditableArtifactResourcesOptions, PinEditableArtifactVersionRequest, ReadEditableArtifactMaterializationOptions, ReadEditableArtifactResourceOptions, } from "./editable-artifact-resources.js";
-export type { FetchLike, GetSessionOptions, OpenGeniClientOptions, OpenGeniRequestOptions, } from "./client.js";
+export type { FetchLike, FetchResponse, GetSessionOptions, OpenGeniClientOptions, OpenGeniRequestOptions, } from "./client.js";

package/dist/artifacts.js

@@ -1,11 +1,11 @@
 import {
   OpenGeniClient
-} from "./chunk-QT3KFVDP.js";
-import "./chunk-YXQX7RQT.js";
-import "./chunk-TRNI7KEO.js";
-import "./chunk-JUS2UYRP.js";
-import "./chunk-KKRO2VCP.js";
-import "./chunk-C4DJPZRU.js";
+} from "./chunk-3VIQGNRX.js";
+import "./chunk-PPWKSUDS.js";
+import "./chunk-GXC4RESV.js";
+import "./chunk-QTBAMHEF.js";
+import "./chunk-HILHQEZD.js";
+import "./chunk-OO5LPTO7.js";
 export {
   OpenGeniClient
 };

package/dist/browser.d.ts

@@ -1,6 +1,7 @@
 /** Browser-console client. Optional SDK surfaces must not enter this eager graph. */
 export { OpenGeniClient as OpenGeniBrowserClient } from "./client.js";
-export type { FetchLike, GetSessionOptions, OpenGeniClientOptions, OpenGeniRequestOptions, SendMessageInput, SteerMessageResult, TranscribeAudioInput, WorkspaceControlEventPage, } from "./client.js";
-export { OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniSessionListCursorError, OpenGeniStreamError, isRetryableStreamError, } from "./errors.js";
+export type { FetchLike, FetchResponse, GetSessionOptions, OpenGeniClientOptions, OpenGeniRequestOptions, SendMessageInput, SteerMessageResult, TranscribeAudioInput, WorkspaceControlEventPage, } from "./client.js";
+export { OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniSecureContextRequiredError, OpenGeniSessionListCursorError, OpenGeniStreamError, isRetryableStreamError, } from "./errors.js";
+export type { OpenGeniSecureContextRequiredReason } from "./errors.js";
 export { resolveWorkspaceVoiceInputEnabled } from "./transcription.js";
 export { OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION } from "./types.js";

package/dist/browser.js

@@ -3,25 +3,27 @@ import {
 } from "./chunk-VYCTL62C.js";
 import {
   OpenGeniClient
-} from "./chunk-TRNI7KEO.js";
+} from "./chunk-GXC4RESV.js";
+import "./chunk-QTBAMHEF.js";
 import {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION
-} from "./chunk-JUS2UYRP.js";
-import "./chunk-KKRO2VCP.js";
+} from "./chunk-HILHQEZD.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
+  OpenGeniSecureContextRequiredError,
   OpenGeniSessionListCursorError,
   OpenGeniStreamError,
   isRetryableStreamError
-} from "./chunk-C4DJPZRU.js";
+} from "./chunk-OO5LPTO7.js";
 export {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION,
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
   OpenGeniClient as OpenGeniBrowserClient,
+  OpenGeniSecureContextRequiredError,
   OpenGeniSessionListCursorError,
   OpenGeniStreamError,
   isRetryableStreamError,

package/dist/{chunk-QT3KFVDP.js → chunk-3VIQGNRX.js}

@@ -1,6 +1,6 @@
 import {
   OpenGeniDocumentAuthorityClient
-} from "./chunk-YXQX7RQT.js";
+} from "./chunk-PPWKSUDS.js";
 
 // src/artifact-client.ts
 var OpenGeniClient = class extends OpenGeniDocumentAuthorityClient {
@@ -125,4 +125,4 @@ var OpenGeniClient = class extends OpenGeniDocumentAuthorityClient {
 export {
   OpenGeniClient
 };
-//# sourceMappingURL=chunk-QT3KFVDP.js.map
+//# sourceMappingURL=chunk-3VIQGNRX.js.map

package/dist/chunk-3VIQGNRX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/artifact-client.ts"],"sourcesContent":["import { OpenGeniDocumentAuthorityClient } from \"./document-authority-client\";\nimport type { FetchResponse } from \"./client\";\nimport type {\n  CreateEditableArtifactMaterializationRequest,\n  CreateEditableArtifactResourceRequest,\n  EditableArtifactListResource,\n  EditableArtifactMaterializationJobResource,\n  EditableArtifactPinnedVersionResource,\n  EditableArtifactResource,\n  ImportEditableArtifactResourceRequest,\n  ListSessionEditableArtifactResourcesOptions,\n  PinEditableArtifactVersionRequest,\n  ReadEditableArtifactMaterializationOptions,\n  ReadEditableArtifactResourceOptions,\n} from \"./editable-artifact-resources\";\nimport type {\n  CreateWorkspaceArtifactRequest,\n  PublishWorkspaceArtifactVersionRequest,\n  RollbackWorkspaceArtifactRequest,\n  WorkspaceArtifactContentResponse,\n  WorkspaceArtifactDetailResponse,\n  WorkspaceArtifactListOptions,\n  WorkspaceArtifactListResponse,\n  WorkspaceArtifactMutationResponse,\n} from \"./workspace-artifacts\";\n\n/** Public SDK client. Optional operator and artifact operations stay out of the console core. */\nexport class OpenGeniClient extends OpenGeniDocumentAuthorityClient {\n  async createEditableArtifact(\n    workspaceId: string,\n    request: CreateEditableArtifactResourceRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async importEditableArtifact(\n    workspaceId: string,\n    request: ImportEditableArtifactResourceRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/imports`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async getEditableArtifact(\n    workspaceId: string,\n    artifactId: string,\n    options: ReadEditableArtifactResourceOptions,\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}`,\n      undefined,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async listSessionEditableArtifacts(\n    workspaceId: string,\n    sourceSessionId: string,\n    options: ListSessionEditableArtifactResourcesOptions,\n  ): Promise<EditableArtifactListResource> {\n    return await this.requestJson<EditableArtifactListResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,\n      undefined,\n      { sourceSessionId, replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async pinEditableArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PinEditableArtifactVersionRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactPinnedVersionResource> {\n    return await this.requestJson<EditableArtifactPinnedVersionResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async createEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    request: CreateEditableArtifactMaterializationRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactMaterializationJobResource> {\n    return await this.requestJson<EditableArtifactMaterializationJobResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async getEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    jobId: string,\n    options: ReadEditableArtifactMaterializationOptions,\n  ): Promise<EditableArtifactMaterializationJobResource> {\n    return await this.requestJson<EditableArtifactMaterializationJobResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}`,\n      undefined,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  /** The caller owns the returned bounded response stream. */\n  async downloadEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    jobId: string,\n    options: ReadEditableArtifactMaterializationOptions,\n  ): Promise<FetchResponse> {\n    return await this.requestResponse(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}/download`,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async listWorkspaceArtifacts(\n    workspaceId: string,\n    options: WorkspaceArtifactListOptions = {},\n  ): Promise<WorkspaceArtifactListResponse> {\n    const query = new URLSearchParams();\n    if (options.limit !== undefined) query.set(\"limit\", String(options.limit));\n    if (options.cursor) query.set(\"cursor\", options.cursor);\n    const suffix = query.size > 0 ? `?${query.toString()}` : \"\";\n    return await this.requestJson<WorkspaceArtifactListResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts${suffix}`,\n    );\n  }\n\n  async getWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n  ): Promise<WorkspaceArtifactDetailResponse> {\n    return await this.requestJson<WorkspaceArtifactDetailResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}`,\n    );\n  }\n\n  async getWorkspaceArtifactContent(\n    workspaceId: string,\n    artifactId: string,\n    versionId?: string,\n  ): Promise<WorkspaceArtifactContentResponse> {\n    const query = versionId ? `?versionId=${encodeURIComponent(versionId)}` : \"\";\n    return await this.requestJson<WorkspaceArtifactContentResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/content${query}`,\n    );\n  }\n\n  async createWorkspaceArtifact(\n    workspaceId: string,\n    request: CreateWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts`,\n      request,\n    );\n  }\n\n  async publishWorkspaceArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PublishWorkspaceArtifactVersionRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n    );\n  }\n\n  async rollbackWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n    request: RollbackWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/rollback`,\n      request,\n    );\n  }\n}\n"],"mappings":";;;;;AA2BO,IAAM,iBAAN,cAA6B,gCAAgC;AAAA,EAClE,MAAM,uBACJ,aACA,SACA,UAA0D,CAAC,GACxB;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBACJ,aACA,SACA,UAA0D,CAAC,GACxB;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,aACA,YACA,SACmC;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,6BACJ,aACA,iBACA,SACuC;AACvC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,EAAE,iBAAiB,WAAW,QAAQ,UAAU;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,2BACJ,aACA,YACA,SACA,UAA0D,CAAC,GACX;AAChD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,sCACJ,aACA,YACA,SACA,UAA0D,CAAC,GACN;AACrD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mCACJ,aACA,YACA,OACA,SACqD;AACrD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC,qBAAqB,mBAAmB,KAAK,CAAC;AAAA,MACpJ;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,wCACJ,aACA,YACA,OACA,SACwB;AACxB,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC,qBAAqB,mBAAmB,KAAK,CAAC;AAAA,MACpJ,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBACJ,aACA,UAAwC,CAAC,GACD;AACxC,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,QAAQ,UAAU,OAAW,OAAM,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AACzE,QAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,QAAQ,MAAM;AACtD,UAAM,SAAS,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACzD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,uBAAuB,MAAM;AAAA,IAC5D;AAAA,EACF;AAAA,EAEA,MAAM,qBACJ,aACA,YAC0C;AAC1C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,IACrF;AAAA,EACF;AAAA,EAEA,MAAM,4BACJ,aACA,YACA,WAC2C;AAC3C,UAAM,QAAQ,YAAY,cAAc,mBAAmB,SAAS,CAAC,KAAK;AAC1E,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC,WAAW,KAAK;AAAA,IACrG;AAAA,EACF;AAAA,EAEA,MAAM,wBACJ,aACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gCACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,0BACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-C2H7HBNP.js → chunk-7S2MZ65L.js}

@@ -1,6 +1,6 @@
 import {
   OpenGeniApiError
-} from "./chunk-C4DJPZRU.js";
+} from "./chunk-OO5LPTO7.js";
 
 // src/codex-realtime-v3-wire.ts
 var CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT = 128;
@@ -2253,10 +2253,6 @@ function safeError2(error) {
 }
 
 export {
-  CodexRealtimeMicrophoneError,
-  startCodexRealtimeWebrtc,
-  acquireCodexRealtimeMicrophone,
-  codexRealtimeMicrophoneHealthy,
   CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT,
   CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS,
   CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,
@@ -2271,6 +2267,10 @@ export {
   CODEX_REALTIME_V3_PENDING_MAX_ENTRIES,
   CODEX_REALTIME_V3_PENDING_MAX_BYTES,
   createCodexRealtimeV3Bridge,
+  CodexRealtimeMicrophoneError,
+  startCodexRealtimeWebrtc,
+  acquireCodexRealtimeMicrophone,
+  codexRealtimeMicrophoneHealthy,
   projectSessionRealtimeLifecycle,
   CODEX_REALTIME_NEGOTIATION_TIMEOUT_MS,
   sessionRealtimeOwnerStorageNamespace,
@@ -2278,4 +2278,4 @@ export {
   hasStoredSessionRealtimeOwnerProof,
   createCodexRealtimeController
 };
-//# sourceMappingURL=chunk-C2H7HBNP.js.map
+//# sourceMappingURL=chunk-7S2MZ65L.js.map

package/dist/{chunk-TRNI7KEO.js → chunk-GXC4RESV.js}

@@ -1,3 +1,7 @@
+import {
+  OpenGeniInteractionClient,
+  decodeComputerFrameMetadataHeader
+} from "./chunk-QTBAMHEF.js";
 import {
   COMPUTER_SCREENSHOT_MAX_BYTES,
   GENERATED_VIDEO_MAX_BYTES,
@@ -5,19 +9,16 @@ import {
   OPENGENI_API_CONTRACT_REVISION,
   OPENGENI_CORRELATION_HEADER,
   RETAINED_OUTPUT_MAX_PAGE_BYTES
-} from "./chunk-JUS2UYRP.js";
-import {
-  OpenGeniInteractionClient,
-  decodeComputerFrameMetadataHeader
-} from "./chunk-KKRO2VCP.js";
+} from "./chunk-HILHQEZD.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
+  OpenGeniSecureContextRequiredError,
   OpenGeniSessionListCursorError,
   OpenGeniStreamError,
   isAbortError,
   isRetryableStreamError
-} from "./chunk-C4DJPZRU.js";
+} from "./chunk-OO5LPTO7.js";
 
 // src/sse.ts
 async function* parseSseStream(stream) {
@@ -89,6 +90,9 @@ async function* parseSseStream(stream) {
 }
 
 // src/stream.ts
+var SESSION_EVENT_STREAM_COVERAGE = Symbol.for(
+  "@opengeni/sdk/session-event-stream-covered-through"
+);
 async function* streamSessionEvents(transport, options = {}) {
   const signal = options.signal;
   const reconnect = options.reconnect ?? true;
@@ -127,7 +131,8 @@ async function* streamSessionEvents(transport, options = {}) {
         if (!event) {
           continue;
         }
-        const coveredSequence = eventResumeSequence(event);
+        const coveredSequence = trustedSseSequence(message.id, event.sequence);
+        markSessionEventStreamCoverage(event, coveredSequence);
         if (coveredSequence <= cursor) continue;
         if (event.sequence > cursor + 1) {
           for await (const missed of backfillEvents(transport, cursor, event.sequence - 1)) {
@@ -265,12 +270,22 @@ function parseSessionEvent(data) {
   }
   return parsed;
 }
-function eventResumeSequence(event) {
-  if (!event.payload || typeof event.payload !== "object" || Array.isArray(event.payload)) {
-    return event.sequence;
-  }
-  const covered = Number(event.payload.coalescedUntil);
-  return Math.max(event.sequence, Number.isFinite(covered) ? Math.floor(covered) : event.sequence);
+function sessionEventStreamCoveredThrough(event) {
+  const covered = event[SESSION_EVENT_STREAM_COVERAGE];
+  return typeof covered === "number" && Number.isSafeInteger(covered) && covered >= event.sequence ? covered : null;
+}
+function trustedSseSequence(id, sequence) {
+  if (id === void 0 || !/^\d+$/.test(id)) return sequence;
+  const covered = Number(id);
+  return Number.isSafeInteger(covered) && covered >= sequence ? covered : sequence;
+}
+function markSessionEventStreamCoverage(event, covered) {
+  Object.defineProperty(event, SESSION_EVENT_STREAM_COVERAGE, {
+    value: covered,
+    enumerable: false,
+    configurable: false,
+    writable: false
+  });
 }
 async function sleep(delayMs, signal) {
   if (signal?.aborted || delayMs <= 0) {
@@ -3019,6 +3034,113 @@ var OpenGeniClient = class {
       options
     );
   }
+  /** List workspace-owned unpinned Vercel AI Gateway model slugs. */
+  async listWorkspaceGatewayCustomModels(workspaceId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/gateway-custom-models`
+    );
+  }
+  /** Add one exact upstream Vercel AI Gateway slug. */
+  async createWorkspaceGatewayCustomModel(workspaceId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/gateway-custom-models`,
+      request
+    );
+  }
+  /** Remove one workspace custom Gateway model by its stable row id. */
+  async deleteWorkspaceGatewayCustomModel(workspaceId, customModelId, request) {
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu.test(
+      customModelId
+    )) {
+      throw new TypeError("customModelId must be a UUID");
+    }
+    await this.requestVoid(
+      "DELETE",
+      `/v1/workspaces/${workspaceId}/gateway-custom-models/${encodeURIComponent(customModelId)}`,
+      request
+    );
+  }
+  /** List workspace-owned unpinned OpenRouter model slugs. */
+  async listWorkspaceOpenRouterCustomModels(workspaceId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/openrouter-custom-models`
+    );
+  }
+  /** Add one exact upstream OpenRouter slug. */
+  async createWorkspaceOpenRouterCustomModel(workspaceId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/openrouter-custom-models`,
+      request
+    );
+  }
+  /** Remove one workspace custom OpenRouter model by its stable row id. */
+  async deleteWorkspaceOpenRouterCustomModel(workspaceId, customModelId, request) {
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu.test(
+      customModelId
+    )) {
+      throw new TypeError("customModelId must be a UUID");
+    }
+    await this.requestVoid(
+      "DELETE",
+      `/v1/workspaces/${workspaceId}/openrouter-custom-models/${encodeURIComponent(customModelId)}`,
+      request
+    );
+  }
+  /** Read metadata for one organization-owned model-provider connection. */
+  async getOrganizationModelProviderConnection(organizationId, providerKind) {
+    return await this.requestJson(
+      "GET",
+      `/v1/organizations/${organizationId}/model-providers/${providerKind}`
+    );
+  }
+  /** Connect or rotate one organization-owned provider credential. */
+  async upsertOrganizationModelProviderConnection(organizationId, providerKind, request) {
+    return await this.requestJson(
+      "PUT",
+      `/v1/organizations/${organizationId}/model-providers/${providerKind}`,
+      request
+    );
+  }
+  /** Revoke one organization-owned provider credential. */
+  async revokeOrganizationModelProviderConnection(organizationId, providerKind, request) {
+    return await this.requestJson(
+      "DELETE",
+      `/v1/organizations/${organizationId}/model-providers/${providerKind}`,
+      request
+    );
+  }
+  /** List organization-owned exact upstream model slugs. */
+  async listOrganizationProviderCustomModels(organizationId, providerKind) {
+    return await this.requestJson(
+      "GET",
+      `/v1/organizations/${organizationId}/model-providers/${providerKind}/custom-models`
+    );
+  }
+  /** Add one organization-owned exact upstream model slug. */
+  async createOrganizationProviderCustomModel(organizationId, providerKind, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/organizations/${organizationId}/model-providers/${providerKind}/custom-models`,
+      request
+    );
+  }
+  /** Retire one organization-owned custom model. */
+  async deleteOrganizationProviderCustomModel(organizationId, providerKind, customModelId, request) {
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu.test(
+      customModelId
+    )) {
+      throw new TypeError("customModelId must be a UUID");
+    }
+    return await this.requestJson(
+      "DELETE",
+      `/v1/organizations/${organizationId}/model-providers/${providerKind}/custom-models/${encodeURIComponent(customModelId)}`,
+      request
+    );
+  }
   /** Read the workspace's hard provider/model allowlist. */
   async getWorkspaceModelAccessPolicy(workspaceId) {
     return await this.requestJson(
@@ -3087,6 +3209,14 @@ var OpenGeniClient = class {
   async createOrganization(request) {
     return await this.requestJson("POST", "/v1/organizations", request);
   }
+  /** Create another organization owned by the current managed human. */
+  async createAdditionalOrganization(request) {
+    return await this.requestJson(
+      "POST",
+      "/v1/organizations/additional",
+      request
+    );
+  }
   /** Pending and historical invitations addressed to the current managed human. */
   async listOrganizationInvitations(options = {}) {
     const query = new URLSearchParams();
@@ -3147,7 +3277,7 @@ var OpenGeniClient = class {
       `/v1/organizations/${organizationId}/overview`
     );
   }
-  /** Create a shared workspace without implicitly granting the actor access. */
+  /** Create a shared workspace and grant its creator explicit workspace-admin access. */
   async createOrganizationWorkspace(organizationId, request) {
     return await this.requestJson(
       "POST",
@@ -3170,6 +3300,13 @@ var OpenGeniClient = class {
       request
     );
   }
+  /** Delete a shared workspace through organization-administrator authority. */
+  async deleteOrganizationWorkspace(organizationId, workspaceId) {
+    await this.requestVoid(
+      "DELETE",
+      `/v1/organizations/${organizationId}/workspaces/${workspaceId}`
+    );
+  }
   async putOrganizationWorkspaceMember(organizationId, workspaceId, membershipId, request) {
     return await this.requestJson(
       "PUT",
@@ -3992,6 +4129,7 @@ var OpenGeniClient = class {
     if (input.timeoutMs !== void 0 && (!Number.isFinite(input.timeoutMs) || input.timeoutMs <= 0)) {
       throw new Error("File upload timeout must be a positive number");
     }
+    assertBrowserFileUploadSecureContext();
     const withTimeout = async (timeoutMs, operation) => {
       const controller = new AbortController();
       let timeout;
@@ -5538,6 +5676,16 @@ function mutationTransportError(correlationId) {
     displayMessage: "OpenGeni could not confirm the request \u2014 reconcile before retrying."
   });
 }
+function assertBrowserFileUploadSecureContext() {
+  const secureContext = typeof window !== "undefined" ? window.isSecureContext : typeof globalThis.isSecureContext === "boolean" ? globalThis.isSecureContext : void 0;
+  if (secureContext === void 0) return;
+  if (!secureContext) {
+    throw new OpenGeniSecureContextRequiredError("insecure_context");
+  }
+  if (typeof globalThis.crypto === "undefined" || typeof globalThis.crypto.subtle?.digest !== "function") {
+    throw new OpenGeniSecureContextRequiredError("web_crypto_unavailable");
+  }
+}
 async function sha256ForUpload(body) {
   const bytes = typeof body === "string" ? new TextEncoder().encode(body) : body instanceof Blob ? new Uint8Array(await body.arrayBuffer()) : new Uint8Array(body);
   const digest = await globalThis.crypto.subtle.digest("SHA-256", bytes);
@@ -5635,6 +5783,7 @@ async function readBoundedResponseBytes(response, maxBytes, expectedBytes) {
 export {
   parseSseStream,
   streamSessionEvents,
+  sessionEventStreamCoveredThrough,
   streamWorkspaceControlEvents,
   streamWorkspaceInteractionRevisions,
   streamWorkspaceLiveEvents,
@@ -5649,4 +5798,4 @@ export {
   parseMediaGenerationResult,
   OpenGeniClient
 };
-//# sourceMappingURL=chunk-TRNI7KEO.js.map
+//# sourceMappingURL=chunk-GXC4RESV.js.map