@opengeni/sdk 3.3.2 → 3.7.0-canary.0

package/src/errors.ts

@@ -49,6 +49,29 @@ export class OpenGeniApiError extends Error {
   }
 }
 
+export type OpenGeniSecureContextRequiredReason = "insecure_context" | "web_crypto_unavailable";
+
+/**
+ * A browser operation requires secure-context-only platform capabilities.
+ * Callers may key UI behavior on the stable `secure_context_required` code;
+ * `reason` exists only to keep the human guidance truthful.
+ */
+export class OpenGeniSecureContextRequiredError extends Error {
+  readonly code = "secure_context_required" as const;
+  readonly retryable = false;
+  readonly reason: OpenGeniSecureContextRequiredReason;
+
+  constructor(reason: OpenGeniSecureContextRequiredReason) {
+    super(
+      reason === "insecure_context"
+        ? "Couldn’t attach this file because OpenGeni is open over HTTP. Attachments require a secure HTTPS connection. Open the secure site or configure HTTPS for this deployment."
+        : "Couldn’t attach this file because secure browser cryptography is unavailable. Attachments require HTTPS and Web Crypto support. Open a secure site in a supported browser or configure HTTPS for this deployment.",
+    );
+    this.name = "OpenGeniSecureContextRequiredError";
+    this.reason = reason;
+  }
+}
+
 function decodeApiErrorBody(body: string): {
   code: string | undefined;
   message: string | undefined;

package/src/github-repositories.ts

@@ -0,0 +1,60 @@
+import type { OpenGeniClient } from "./client";
+import type {
+  GitHubRepositoryBranchesResponse,
+  ListGitHubRepositoryBranchesOptions,
+  VerifyPublicGitHubRepositoryRefRequest,
+  VerifyPublicGitHubRepositoryRefResponse,
+} from "./types";
+
+type GitHubRepositoryRequestClient = Pick<OpenGeniClient, "requestJson">;
+
+/** Verify one exact public github.com repository and branch/tag/SHA anonymously. */
+export async function verifyPublicGitHubRepositoryRef(
+  client: GitHubRepositoryRequestClient,
+  workspaceId: string,
+  request: VerifyPublicGitHubRepositoryRefRequest,
+): Promise<VerifyPublicGitHubRepositoryRefResponse> {
+  return await client.requestJson<VerifyPublicGitHubRepositoryRefResponse>(
+    "POST",
+    `/v1/workspaces/${workspaceId}/github/public-repositories/verify`,
+    request,
+  );
+}
+
+/** List one bounded page of branch suggestions for one exact workspace App repository. */
+export async function listGitHubRepositoryBranches(
+  client: GitHubRepositoryRequestClient,
+  workspaceId: string,
+  installationId: number,
+  repositoryId: number,
+  options: ListGitHubRepositoryBranchesOptions = {},
+): Promise<GitHubRepositoryBranchesResponse> {
+  return await client.requestJson<GitHubRepositoryBranchesResponse>(
+    "GET",
+    `/v1/workspaces/${workspaceId}/github/installations/${installationId}/repositories/${repositoryId}/branches`,
+    undefined,
+    {
+      ...(options.cursor !== undefined ? { cursor: String(options.cursor) } : {}),
+      ...(options.limit !== undefined ? { limit: String(options.limit) } : {}),
+    },
+  );
+}
+
+/** List one bounded page of branch suggestions for one currently selected personal repository. */
+export async function listPersonalGitHubRepositoryBranches(
+  client: GitHubRepositoryRequestClient,
+  workspaceId: string,
+  connectionId: string,
+  repositoryId: string,
+  options: ListGitHubRepositoryBranchesOptions = {},
+): Promise<GitHubRepositoryBranchesResponse> {
+  return await client.requestJson<GitHubRepositoryBranchesResponse>(
+    "GET",
+    `/v1/workspaces/${workspaceId}/connections/${connectionId}/github/repositories/${encodeURIComponent(repositoryId)}/branches`,
+    undefined,
+    {
+      ...(options.cursor !== undefined ? { cursor: String(options.cursor) } : {}),
+      ...(options.limit !== undefined ? { limit: String(options.limit) } : {}),
+    },
+  );
+}

package/src/index.ts

@@ -1,6 +1,22 @@
 export { OpenGeniClient } from "./artifact-client";
+export {
+  OpenGeniToolCallError,
+  OpenGeniToolReapprovalRequiredError,
+  OpenGeniToolsClient,
+} from "./tools";
+export type {
+  OpenGeniDynamicToolNamespace,
+  OpenGeniDynamicToolNode,
+  OpenGeniGeneratedTools,
+  OpenGeniToolCallOptions,
+  OpenGeniToolFunction,
+  OpenGeniToolTransport,
+  OpenGeniToolsFacade,
+  OpenGeniWorkspaceTools,
+} from "./tools";
 export type {
   FetchLike,
+  FetchResponse,
   GetSessionOptions,
   OpenGeniClientOptions,
   OpenGeniRequestOptions,
@@ -9,6 +25,43 @@ export type {
   TranscribeAudioInput,
   WorkspaceControlEventPage,
 } from "./client";
+export {
+  OPENGENI_SITE_BRIDGE_CANCEL,
+  OPENGENI_SITE_BRIDGE_CONNECT,
+  OPENGENI_SITE_BRIDGE_READY,
+  OPENGENI_SITE_BRIDGE_REQUEST,
+  OPENGENI_SITE_BRIDGE_RESPONSE,
+  OPENGENI_SITE_BRIDGE_VERSION,
+  OpenGeniSiteBridgeError,
+  createOpenGeniSiteClient,
+  isOpenGeniSiteBridgeCancelMessage,
+  isOpenGeniSiteBridgeConnectMessage,
+  isOpenGeniSiteBridgeRequestMessage,
+  sanitizeOpenGeniSiteToolCallRequest,
+} from "./site";
+export type {
+  OpenGeniSiteBridgeCancelMessage,
+  OpenGeniSiteBridgeConnectMessage,
+  OpenGeniSiteBridgeReadyMessage,
+  OpenGeniSiteBridgeRequestMessage,
+  OpenGeniSiteBridgeResponseMessage,
+  OpenGeniSiteClient,
+  OpenGeniSiteClientOptions,
+  OpenGeniSiteToolCatalog,
+  OpenGeniSiteToolCallRequest,
+  OpenGeniSiteWorkspaceTools,
+} from "./site";
+export type {
+  ToolGatewayCallRequest,
+  ToolGatewayCallResponse,
+  ToolGatewayApprovalRequest,
+  ToolGatewayApprovalResponse,
+  ToolGatewayCatalog,
+  ToolGatewayCatalogEntry,
+  ToolGatewayDeclarationsResponse,
+  ToolGatewayIdentity,
+  ToolGatewayResult,
+} from "./types";
 export type {
   CreateEditableArtifactMaterializationRequest,
   CreateEditableArtifactResourceRequest,
@@ -26,16 +79,30 @@ export type {
 export {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
+  OpenGeniSecureContextRequiredError,
   OpenGeniSessionListCursorError,
   OpenGeniStreamError,
   isRetryableStreamError,
 } from "./errors";
+export type { OpenGeniSecureContextRequiredReason } from "./errors";
 export {
   AUTOMATIC_SESSION_TITLE_FALLBACK,
+  deriveAutomaticSessionTitlePreview,
   deriveSessionDisplayTitle,
   sessionTitleIsPending,
 } from "./session-titles";
 export type { SessionDisplayTitleInput, SessionDisplayTitleOptions } from "./session-titles";
+export type {
+  ModelContextInstructionLayer,
+  ModelContextInstructionLayerId,
+  ModelContextSkill,
+  ModelContextSkillKind,
+  ModelContextSnapshot,
+  ModelContextTokenCounts,
+  ModelContextTool,
+  ModelContextToolVisibility,
+  SessionModelContextResponse,
+} from "./model-context";
 export {
   formatSseEvent,
   proxySessionEventStream,
@@ -134,7 +201,7 @@ export {
   TtydClientCommand,
   TtydServerCommand,
 } from "./terminal";
-export { streamSessionEvents } from "./stream";
+export { sessionEventStreamCoveredThrough, streamSessionEvents } from "./stream";
 export type {
   SessionEventStreamTransport,
   StreamConnectionState,
@@ -154,6 +221,7 @@ export type {
   CreateWorkspaceArtifactRequest,
   PublishWorkspaceArtifactVersionRequest,
   RollbackWorkspaceArtifactRequest,
+  SetWorkspaceArtifactStatusRequest,
   WorkspaceArtifact,
   WorkspaceArtifactContentResponse,
   WorkspaceArtifactDetailResponse,
@@ -161,6 +229,8 @@ export type {
   WorkspaceArtifactListOptions,
   WorkspaceArtifactListResponse,
   WorkspaceArtifactMutationResponse,
+  WorkspaceArtifactSourceBundle,
+  WorkspaceArtifactSourceFile,
   WorkspaceArtifactVersion,
 } from "./workspace-artifacts";
 export {
@@ -478,6 +548,7 @@ export type {
   EndSessionRealtimeRequest,
   ModelAvailabilityV1,
   ModelBillingAttributionV1,
+  ModelCostClassV1,
   ModelCapabilitiesV1,
   ModelCapabilityStateV1,
   ModelCapabilitySupportV1,
@@ -493,6 +564,22 @@ export type {
   SessionRealtimeState,
   WorkspaceModelCatalogModel,
   WorkspaceModelCatalogResponse,
+  WorkspaceGatewayCustomModel,
+  WorkspaceGatewayCustomModelsResponse,
+  CreateWorkspaceGatewayCustomModelRequest,
+  DeleteWorkspaceGatewayCustomModelRequest,
+  WorkspaceOpenRouterCustomModel,
+  WorkspaceOpenRouterCustomModelsResponse,
+  CreateWorkspaceOpenRouterCustomModelRequest,
+  DeleteWorkspaceOpenRouterCustomModelRequest,
+  OrganizationModelProviderKind,
+  OrganizationModelProviderConnection,
+  UpsertOrganizationModelProviderConnectionRequest,
+  RevokeOrganizationModelProviderConnectionRequest,
+  OrganizationProviderCustomModel,
+  OrganizationProviderCustomModelsResponse,
+  CreateOrganizationProviderCustomModelRequest,
+  DeleteOrganizationProviderCustomModelRequest,
   WorkspaceModelAccessPolicy,
   WorkspaceRealtimeModelCatalogItem,
   WorkspaceRealtimeModelCatalogResponse,
@@ -542,6 +629,7 @@ export type {
   PersonalGitHubDisconnectRequest,
   PersonalGitHubOAuthStartRequest,
   PersonalGitHubOAuthStartResponse,
+  ListGitHubRepositoryBranchesOptions,
   ListPersonalGitHubRepositoriesOptions,
   ListPersonalGitHubRepositoriesResponse,
   PersonalGitHubRepository,
@@ -644,6 +732,10 @@ export type {
   GitHubBindingStatus,
   GitHubInstallationBinding,
   GitHubInstallationLifecycle,
+  GitHubRepositoryBranch,
+  GitHubRepositoryBranchesResponse,
+  VerifyPublicGitHubRepositoryRefRequest,
+  VerifyPublicGitHubRepositoryRefResponse,
   GitHubRepositoriesResponse,
   GoogleDriveBrowseItem,
   GoogleDriveBrowseResponse,
@@ -894,6 +986,7 @@ export type {
   FsNodeType,
   FsTreeNode,
   FsEncoding,
+  FileSystemRouteIdentity,
   FsListRequest,
   FsListResponse,
   FsListBatchRequest,

package/src/model-context.ts

@@ -0,0 +1,69 @@
+export type ModelContextInstructionLayerId =
+  | "operational_contract"
+  | "persona_and_core"
+  | "workspace_governance"
+  | "session_instructions"
+  | "workspace_memory"
+  | "codemode"
+  | "git_bindings"
+  | "genesis_title"
+  | "sdk_capability_instructions"
+  | "sandbox_preamble"
+  | "sandbox_filesystem"
+  | "sent_system_instructions";
+
+export type ModelContextInstructionLayer = {
+  id: ModelContextInstructionLayerId;
+  title: string;
+  content: string;
+  utf8Bytes: number;
+  estimatedTokens: number;
+};
+
+export type ModelContextToolVisibility = "eager" | "searchable";
+
+export type ModelContextTool = {
+  name: string;
+  type: string;
+  visibility: ModelContextToolVisibility;
+  description?: string | undefined;
+  namespace?: string | undefined;
+  schema?: unknown | undefined;
+  utf8Bytes: number;
+  estimatedTokens: number;
+};
+
+export type ModelContextSkillKind = "preference_descriptor" | "runtime_skill" | "native_tool_skill";
+
+export type ModelContextSkill = {
+  kind: ModelContextSkillKind;
+  name: string;
+  description: string;
+  source?: string | undefined;
+  path?: string | undefined;
+};
+
+export type ModelContextTokenCounts = {
+  instructions: number;
+  tools: number;
+  prefix: number;
+};
+
+export type ModelContextSnapshot = {
+  version: 1;
+  capturedAt: string;
+  source: "model_request";
+  requestIndex: number;
+  instructions: string;
+  layers: ModelContextInstructionLayer[];
+  tools: ModelContextTool[];
+  skills: ModelContextSkill[];
+  tokens: ModelContextTokenCounts;
+};
+
+export type SessionModelContextResponse = {
+  sessionId: string;
+  attemptId: string | null;
+  turnId: string | null;
+  snapshot: ModelContextSnapshot | null;
+};

package/src/model-picker-order.ts

@@ -0,0 +1,6 @@
+export {
+  compareModelPickerOrder,
+  modelPickerBillingClassFor,
+  type ModelPickerBillingCandidate,
+  type ModelPickerBillingClass,
+} from "@opengeni/contracts/model-picker-order";

package/src/proxy.ts

@@ -1,5 +1,5 @@
 import type { OpenGeniClient } from "./client";
-import type { StreamSessionEventsOptions } from "./stream";
+import { sessionEventStreamCoveredThrough, type StreamSessionEventsOptions } from "./stream";
 import type { SessionEvent } from "./types";
 
 /**
@@ -12,12 +12,22 @@ import type { SessionEvent } from "./types";
  * OpenGeni's own SSE stream (`id: <sequence>`, `event: <type>`,
  * `data: <event JSON>`), so the browser side can consume it with this same
  * SDK's streaming core (or a plain `EventSource`), including resume via
- * `?after=` / `Last-Event-ID`.
+ * `?after=` / `Last-Event-ID`. An ordinary event uses its own sequence as the
+ * SSE `id`; a compact event uses the server-owned sequence it covers through.
  */
 
-/** Format one event exactly as OpenGeni's API emits it over SSE. */
+/** Format one event with the exact OpenGeni data and resume-cursor semantics. */
 export function formatSseEvent(event: SessionEvent): string {
-  return `id: ${event.sequence}\nevent: ${event.type}\ndata: ${JSON.stringify(event)}\n\n`;
+  const streamedCoverage = sessionEventStreamCoveredThrough(event);
+  const projectedCoverage = event.coveredThrough;
+  const coveredThrough =
+    streamedCoverage ??
+    (typeof projectedCoverage === "number" &&
+    Number.isSafeInteger(projectedCoverage) &&
+    projectedCoverage >= event.sequence
+      ? projectedCoverage
+      : event.sequence);
+  return `id: ${coveredThrough}\nevent: ${event.type}\ndata: ${JSON.stringify(event)}\n\n`;
 }
 
 export type SseReStreamOptions = {
@@ -115,8 +125,9 @@ export function sessionEventsToSseResponse(
 
 /**
  * Read the resume cursor a reconnecting SSE client sent: the `after` query
- * parameter, or the standard `Last-Event-ID` header (the re-emitted stream
- * sets `id:` to the sequence). Returns 0 (full replay) when absent.
+ * parameter, or the standard `Last-Event-ID` header. Re-emitted streams set
+ * `id:` to the event sequence for ordinary events and the covered high-water
+ * sequence for compact events. Returns 0 (full replay) when absent.
  */
 export function resumeSequenceFromRequest(request: Request): number {
   const url = new URL(request.url);

package/src/session-titles.ts

@@ -1,84 +1,10 @@
-import {
+export {
   AUTOMATIC_SESSION_TITLE_FALLBACK,
-  boundAutomaticSessionTitle,
-  containsSensitiveAutomaticSessionTitleValue,
+  deriveAutomaticSessionTitlePreview,
+  deriveSessionDisplayTitle,
+  sessionTitleIsPending,
+} from "@opengeni/contracts/session-titles";
+export type {
+  SessionDisplayTitleInput,
+  SessionDisplayTitleOptions,
 } from "@opengeni/contracts/session-titles";
-import type { Session } from "./types";
-
-export { AUTOMATIC_SESSION_TITLE_FALLBACK };
-
-// Session creation accepts a body far larger than a navigation label. Bound
-// the source before any replace/split/normalization so a persisted large prompt
-// cannot amplify memory or CPU on every browser render.
-const PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS = 4_096;
-
-function deriveOpeningPromptPreview(value: unknown): string | null {
-  if (typeof value !== "string") return null;
-
-  const firstLine = value
-    .slice(0, PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS)
-    .replace(/[\u0000-\u001f\u007f-\u009f]+/gu, "\n")
-    .split(/\n+/u)
-    .map((line) => line.trim())
-    .find(Boolean);
-  if (!firstLine) return null;
-  if (containsSensitiveAutomaticSessionTitleValue(firstLine)) return null;
-
-  const preview = boundAutomaticSessionTitle(firstLine.replace(/\s+/gu, " "))
-    .replace(/[\s.!?,;:\-–—]+$/u, "")
-    .trim();
-  if (!preview) return null;
-  return preview;
-}
-
-export type SessionDisplayTitleInput = {
-  title?: Session["title"] | undefined;
-  titleSource?: Session["titleSource"] | undefined;
-  initialMessage?: Session["initialMessage"] | null | undefined;
-  metadata?: Readonly<Record<string, unknown>> | undefined;
-};
-
-export type SessionDisplayTitleOptions = {
-  /** Optional metadata fields to try before the opening-prompt preview. */
-  metadataKeys?: readonly string[] | undefined;
-};
-
-/**
- * Whether the durable title still represents the automatic-title pending state.
- * A user-authored title always wins, even when its literal value is the fallback.
- */
-export function sessionTitleIsPending(input: SessionDisplayTitleInput): boolean {
-  const title = input.title?.trim() ?? "";
-  return input.titleSource !== "user" && (!title || title === AUTOMATIC_SESSION_TITLE_FALLBACK);
-}
-
-/**
- * Derive the title a client should display for a session.
- *
- * A semantic agent title or human rename wins. While automatic naming is still
- * pending, clients show a short, sensitive-safe preview of the opening prompt;
- * the preview is never persisted as title metadata and is replaced naturally
- * when `session.title_set` arrives. Obvious credential-, URL-, or identifier-
- * shaped prompt prefixes retain the generic fallback.
- */
-export function deriveSessionDisplayTitle(
-  input: SessionDisplayTitleInput,
-  options: SessionDisplayTitleOptions = {},
-): string {
-  const title = input.title?.trim() ?? "";
-  if (input.titleSource === "user") {
-    return title || AUTOMATIC_SESSION_TITLE_FALLBACK;
-  }
-  if (title && !sessionTitleIsPending(input)) {
-    return title;
-  }
-
-  for (const key of options.metadataKeys ?? []) {
-    const value = input.metadata?.[key];
-    if (typeof value === "string" && value.trim().length > 0) {
-      return value.trim();
-    }
-  }
-
-  return deriveOpeningPromptPreview(input.initialMessage) ?? AUTOMATIC_SESSION_TITLE_FALLBACK;
-}