@opengeni/sdk 3.5.1-canary.0 → 3.7.0-canary.1

package/README.md

@@ -422,10 +422,13 @@ assign product types such as app, page, dashboard, or gallery. List pages are
 bounded and expose both `truncated` and an opaque `nextCursor` so callers never
 mistake a partial page for the complete workspace catalog.
 
-The initial web renderer supports semantic HTML, inline CSS, CSS-only
-interactions, and inline SVG. It removes JavaScript, event handlers, forms,
-embeds, external URLs, and other active or navigation-capable markup before
-rendering. Executable artifacts require a later, stronger isolation boundary.
+Each Site version retains one self-contained executable HTML runtime, its
+bounded editable source bundle, and the exact canonical tool identities it
+requested. The web host renders that runtime in an opaque-origin sandboxed
+iframe. Credentials, cookies, API URLs, workspace ids, and parent DOM authority
+never enter the iframe; `@opengeni/sdk/site` uses a single parent-owned
+`MessagePort` that exposes only the retained tool allowlist intersected with the
+current viewer's live workspace catalog.
 
 ```ts
 let cursor: string | undefined;
@@ -445,6 +448,64 @@ return the exact source session, turn, attempt, and execution generation that
 published them. Version and event history are bounded; inspect
 `versionsTruncated` and `eventsTruncated` on the detail response.
 
+## Workspace tools
+
+The browser-safe SDK exposes the same gateway catalog and executor used by
+model MCP calls and Codemode. Generated declarations augment the lazy namespace
+for exact installed-tool types; canonical `{ serverId, toolName }` identity and
+the server-side catalog remain authoritative.
+
+```ts
+const tools = client.tools.forWorkspace(workspaceId);
+const documents = await tools.docs.search({ query: "launch plan" });
+```
+
+An approval-required call needs a server-issued capability. A trusted host
+shows its approval UI first, then asks for one token bound to the current human,
+workspace, operation id, catalog digest, exact tool identity, and arguments.
+The token expires after five minutes, is stored only as a hash, and is consumed
+once by the matching call.
+
+Connection-backed tools configured for both provider policy and one-shot human
+approval are omitted from this HTTP catalog until their provider adapter can
+preflight credential and resource authorization before consuming the token.
+
+```ts
+const operationId = crypto.randomUUID();
+const identity = { serverId: "linear", toolName: "issues_update" };
+const input = { issueId, state: "Done" };
+const approval = await tools.$approve(identity, input, { operationId });
+
+await tools.$call(identity, input, {
+  operationId,
+  approvalToken: approval.approvalToken,
+});
+```
+
+When a call or approval request receives the typed
+`409 details.code = "catalog_stale"` response, the SDK refreshes the catalog,
+re-resolves the exact identity or generated namespace path, preserves the
+operation id (generating it before the first attempt when omitted), and retries
+once. A call that already carries an approval token cannot reuse that
+single-use capability after the catalog digest changes; instead it throws
+`OpenGeniToolReapprovalRequiredError` with the refreshed identity and digest so
+the trusted host can show approval again for the same operation id.
+
+Reapproval is valid only before the original capability is consumed. Once a
+call crosses that boundary, the server retains a hash-only tombstone for the
+operation id and rejects another approval with
+`409 details.code = "tool_gateway_operation_already_started"` and
+`outcomeUnknown: true`. The host must reconcile the provider outcome; it must
+not turn an ambiguous call into a second approved execution by minting a fresh
+operation id automatically.
+
+Do not request approval capabilities speculatively or expose them to Site iframe
+code. The host projects only the active immutable version's requested identities,
+supplies the Site context on direct calls, and the server revalidates the active
+version and viewer's live authority. The requested set is a maximum allowlist,
+not an authority grant; ordinary gateway approval still applies. Archived Sites
+receive no tool bridge.
+
 Omit `firstPartyMcpTools` for the complete OpenGeni tool catalog. An explicit
 `[]` exposes no broad first-party tools; attached resources and separately
 selected `files`/`docs` MCP servers are unaffected.

package/dist/artifact-client.d.ts

@@ -1,7 +1,7 @@
 import { OpenGeniDocumentAuthorityClient } from "./document-authority-client.js";
 import type { FetchResponse } from "./client.js";
 import type { CreateEditableArtifactMaterializationRequest, CreateEditableArtifactResourceRequest, EditableArtifactListResource, EditableArtifactMaterializationJobResource, EditableArtifactPinnedVersionResource, EditableArtifactResource, ImportEditableArtifactResourceRequest, ListSessionEditableArtifactResourcesOptions, PinEditableArtifactVersionRequest, ReadEditableArtifactMaterializationOptions, ReadEditableArtifactResourceOptions } from "./editable-artifact-resources.js";
-import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts.js";
+import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, SetWorkspaceArtifactStatusRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts.js";
 /** Public SDK client. Optional operator and artifact operations stay out of the console core. */
 export declare class OpenGeniClient extends OpenGeniDocumentAuthorityClient {
     createEditableArtifact(workspaceId: string, request: CreateEditableArtifactResourceRequest, options?: Readonly<{
@@ -27,4 +27,5 @@ export declare class OpenGeniClient extends OpenGeniDocumentAuthorityClient {
     createWorkspaceArtifact(workspaceId: string, request: CreateWorkspaceArtifactRequest): Promise<WorkspaceArtifactMutationResponse>;
     publishWorkspaceArtifactVersion(workspaceId: string, artifactId: string, request: PublishWorkspaceArtifactVersionRequest): Promise<WorkspaceArtifactMutationResponse>;
     rollbackWorkspaceArtifact(workspaceId: string, artifactId: string, request: RollbackWorkspaceArtifactRequest): Promise<WorkspaceArtifactMutationResponse>;
+    setWorkspaceArtifactStatus(workspaceId: string, artifactId: string, request: SetWorkspaceArtifactStatusRequest): Promise<WorkspaceArtifactMutationResponse>;
 }

package/dist/artifacts.js

@@ -1,10 +1,10 @@
 import {
   OpenGeniClient
-} from "./chunk-3VIQGNRX.js";
-import "./chunk-PPWKSUDS.js";
-import "./chunk-GXC4RESV.js";
+} from "./chunk-C44ZOFSF.js";
+import "./chunk-M4MKZ4LN.js";
+import "./chunk-DWCHEOMP.js";
 import "./chunk-QTBAMHEF.js";
-import "./chunk-HILHQEZD.js";
+import "./chunk-PRD5R2QI.js";
 import "./chunk-OO5LPTO7.js";
 export {
   OpenGeniClient

package/dist/browser.d.ts

@@ -1,5 +1,7 @@
 /** Browser-console client. Optional SDK surfaces must not enter this eager graph. */
 export { OpenGeniClient as OpenGeniBrowserClient } from "./client.js";
+export { OpenGeniToolCallError, OpenGeniToolReapprovalRequiredError, OpenGeniToolsClient, } from "./tools.js";
+export type { OpenGeniGeneratedTools, OpenGeniDynamicToolNode, OpenGeniToolCallOptions, OpenGeniToolFunction, OpenGeniToolsFacade, OpenGeniWorkspaceTools, } from "./tools.js";
 export type { FetchLike, FetchResponse, GetSessionOptions, OpenGeniClientOptions, OpenGeniRequestOptions, SendMessageInput, SteerMessageResult, TranscribeAudioInput, WorkspaceControlEventPage, } from "./client.js";
 export { OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniSecureContextRequiredError, OpenGeniSessionListCursorError, OpenGeniStreamError, isRetryableStreamError, } from "./errors.js";
 export type { OpenGeniSecureContextRequiredReason } from "./errors.js";

package/dist/browser.js

@@ -1,14 +1,19 @@
 import {
   resolveWorkspaceVoiceInputEnabled
 } from "./chunk-VYCTL62C.js";
+import {
+  OpenGeniToolCallError,
+  OpenGeniToolReapprovalRequiredError,
+  OpenGeniToolsClient
+} from "./chunk-FMLDFJ2Q.js";
 import {
   OpenGeniClient
-} from "./chunk-GXC4RESV.js";
+} from "./chunk-DWCHEOMP.js";
 import "./chunk-QTBAMHEF.js";
 import {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION
-} from "./chunk-HILHQEZD.js";
+} from "./chunk-PRD5R2QI.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
@@ -26,6 +31,9 @@ export {
   OpenGeniSecureContextRequiredError,
   OpenGeniSessionListCursorError,
   OpenGeniStreamError,
+  OpenGeniToolCallError,
+  OpenGeniToolReapprovalRequiredError,
+  OpenGeniToolsClient,
   isRetryableStreamError,
   resolveWorkspaceVoiceInputEnabled
 };

package/dist/{chunk-3VIQGNRX.js → chunk-C44ZOFSF.js}

@@ -1,6 +1,6 @@
 import {
   OpenGeniDocumentAuthorityClient
-} from "./chunk-PPWKSUDS.js";
+} from "./chunk-M4MKZ4LN.js";
 
 // src/artifact-client.ts
 var OpenGeniClient = class extends OpenGeniDocumentAuthorityClient {
@@ -80,6 +80,7 @@ var OpenGeniClient = class extends OpenGeniDocumentAuthorityClient {
     const query = new URLSearchParams();
     if (options.limit !== void 0) query.set("limit", String(options.limit));
     if (options.cursor) query.set("cursor", options.cursor);
+    if (options.status) query.set("status", options.status);
     const suffix = query.size > 0 ? `?${query.toString()}` : "";
     return await this.requestJson(
       "GET",
@@ -120,9 +121,16 @@ var OpenGeniClient = class extends OpenGeniDocumentAuthorityClient {
       request
     );
   }
+  async setWorkspaceArtifactStatus(workspaceId, artifactId, request) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/status`,
+      request
+    );
+  }
 };
 
 export {
   OpenGeniClient
 };
-//# sourceMappingURL=chunk-3VIQGNRX.js.map
+//# sourceMappingURL=chunk-C44ZOFSF.js.map

package/dist/chunk-C44ZOFSF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/artifact-client.ts"],"sourcesContent":["import { OpenGeniDocumentAuthorityClient } from \"./document-authority-client\";\nimport type { FetchResponse } from \"./client\";\nimport type {\n  CreateEditableArtifactMaterializationRequest,\n  CreateEditableArtifactResourceRequest,\n  EditableArtifactListResource,\n  EditableArtifactMaterializationJobResource,\n  EditableArtifactPinnedVersionResource,\n  EditableArtifactResource,\n  ImportEditableArtifactResourceRequest,\n  ListSessionEditableArtifactResourcesOptions,\n  PinEditableArtifactVersionRequest,\n  ReadEditableArtifactMaterializationOptions,\n  ReadEditableArtifactResourceOptions,\n} from \"./editable-artifact-resources\";\nimport type {\n  CreateWorkspaceArtifactRequest,\n  PublishWorkspaceArtifactVersionRequest,\n  RollbackWorkspaceArtifactRequest,\n  SetWorkspaceArtifactStatusRequest,\n  WorkspaceArtifactContentResponse,\n  WorkspaceArtifactDetailResponse,\n  WorkspaceArtifactListOptions,\n  WorkspaceArtifactListResponse,\n  WorkspaceArtifactMutationResponse,\n} from \"./workspace-artifacts\";\n\n/** Public SDK client. Optional operator and artifact operations stay out of the console core. */\nexport class OpenGeniClient extends OpenGeniDocumentAuthorityClient {\n  async createEditableArtifact(\n    workspaceId: string,\n    request: CreateEditableArtifactResourceRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async importEditableArtifact(\n    workspaceId: string,\n    request: ImportEditableArtifactResourceRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/imports`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async getEditableArtifact(\n    workspaceId: string,\n    artifactId: string,\n    options: ReadEditableArtifactResourceOptions,\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}`,\n      undefined,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async listSessionEditableArtifacts(\n    workspaceId: string,\n    sourceSessionId: string,\n    options: ListSessionEditableArtifactResourcesOptions,\n  ): Promise<EditableArtifactListResource> {\n    return await this.requestJson<EditableArtifactListResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,\n      undefined,\n      { sourceSessionId, replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async pinEditableArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PinEditableArtifactVersionRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactPinnedVersionResource> {\n    return await this.requestJson<EditableArtifactPinnedVersionResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async createEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    request: CreateEditableArtifactMaterializationRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactMaterializationJobResource> {\n    return await this.requestJson<EditableArtifactMaterializationJobResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async getEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    jobId: string,\n    options: ReadEditableArtifactMaterializationOptions,\n  ): Promise<EditableArtifactMaterializationJobResource> {\n    return await this.requestJson<EditableArtifactMaterializationJobResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}`,\n      undefined,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  /** The caller owns the returned bounded response stream. */\n  async downloadEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    jobId: string,\n    options: ReadEditableArtifactMaterializationOptions,\n  ): Promise<FetchResponse> {\n    return await this.requestResponse(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}/download`,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async listWorkspaceArtifacts(\n    workspaceId: string,\n    options: WorkspaceArtifactListOptions = {},\n  ): Promise<WorkspaceArtifactListResponse> {\n    const query = new URLSearchParams();\n    if (options.limit !== undefined) query.set(\"limit\", String(options.limit));\n    if (options.cursor) query.set(\"cursor\", options.cursor);\n    if (options.status) query.set(\"status\", options.status);\n    const suffix = query.size > 0 ? `?${query.toString()}` : \"\";\n    return await this.requestJson<WorkspaceArtifactListResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts${suffix}`,\n    );\n  }\n\n  async getWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n  ): Promise<WorkspaceArtifactDetailResponse> {\n    return await this.requestJson<WorkspaceArtifactDetailResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}`,\n    );\n  }\n\n  async getWorkspaceArtifactContent(\n    workspaceId: string,\n    artifactId: string,\n    versionId?: string,\n  ): Promise<WorkspaceArtifactContentResponse> {\n    const query = versionId ? `?versionId=${encodeURIComponent(versionId)}` : \"\";\n    return await this.requestJson<WorkspaceArtifactContentResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/content${query}`,\n    );\n  }\n\n  async createWorkspaceArtifact(\n    workspaceId: string,\n    request: CreateWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts`,\n      request,\n    );\n  }\n\n  async publishWorkspaceArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PublishWorkspaceArtifactVersionRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n    );\n  }\n\n  async rollbackWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n    request: RollbackWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/rollback`,\n      request,\n    );\n  }\n\n  async setWorkspaceArtifactStatus(\n    workspaceId: string,\n    artifactId: string,\n    request: SetWorkspaceArtifactStatusRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"PATCH\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/status`,\n      request,\n    );\n  }\n}\n"],"mappings":";;;;;AA4BO,IAAM,iBAAN,cAA6B,gCAAgC;AAAA,EAClE,MAAM,uBACJ,aACA,SACA,UAA0D,CAAC,GACxB;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBACJ,aACA,SACA,UAA0D,CAAC,GACxB;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,aACA,YACA,SACmC;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,6BACJ,aACA,iBACA,SACuC;AACvC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,EAAE,iBAAiB,WAAW,QAAQ,UAAU;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,2BACJ,aACA,YACA,SACA,UAA0D,CAAC,GACX;AAChD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,sCACJ,aACA,YACA,SACA,UAA0D,CAAC,GACN;AACrD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mCACJ,aACA,YACA,OACA,SACqD;AACrD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC,qBAAqB,mBAAmB,KAAK,CAAC;AAAA,MACpJ;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,wCACJ,aACA,YACA,OACA,SACwB;AACxB,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC,qBAAqB,mBAAmB,KAAK,CAAC;AAAA,MACpJ,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBACJ,aACA,UAAwC,CAAC,GACD;AACxC,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,QAAQ,UAAU,OAAW,OAAM,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AACzE,QAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,QAAQ,MAAM;AACtD,QAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,QAAQ,MAAM;AACtD,UAAM,SAAS,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACzD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,uBAAuB,MAAM;AAAA,IAC5D;AAAA,EACF;AAAA,EAEA,MAAM,qBACJ,aACA,YAC0C;AAC1C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,IACrF;AAAA,EACF;AAAA,EAEA,MAAM,4BACJ,aACA,YACA,WAC2C;AAC3C,UAAM,QAAQ,YAAY,cAAc,mBAAmB,SAAS,CAAC,KAAK;AAC1E,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC,WAAW,KAAK;AAAA,IACrG;AAAA,EACF;AAAA,EAEA,MAAM,wBACJ,aACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gCACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,0BACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,2BACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-GXC4RESV.js → chunk-DWCHEOMP.js}

@@ -9,7 +9,7 @@ import {
   OPENGENI_API_CONTRACT_REVISION,
   OPENGENI_CORRELATION_HEADER,
   RETAINED_OUTPUT_MAX_PAGE_BYTES
-} from "./chunk-HILHQEZD.js";
+} from "./chunk-PRD5R2QI.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
@@ -780,6 +780,9 @@ function sessionListQuery(options) {
     ...parentSessionId === void 0 ? {} : { parentSessionId: parentSessionId ?? "null" }
   };
 }
+function hasSessionPageFilters(options) {
+  return options.channelId !== void 0 || options.createdBy !== void 0 || options.updatedFrom !== void 0 || options.updatedBefore !== void 0 || options.createdFrom !== void 0 || options.createdBefore !== void 0;
+}
 function createSingleFlightReadEntry(generation, onRequestStart) {
   let resolve;
   let reject;
@@ -825,6 +828,43 @@ function normalizeScheduledTaskMachineTarget(request) {
     }
   };
 }
+function createLazyToolsFacade(transport) {
+  return {
+    forWorkspace(workspaceId) {
+      const normalizedWorkspaceId = workspaceId.trim();
+      if (!normalizedWorkspaceId) throw new TypeError("workspaceId is required");
+      let workspaceTools;
+      const load = () => workspaceTools ??= import("./tools-FSTY4FAY.js").then(
+        ({ OpenGeniToolsClient }) => new OpenGeniToolsClient(transport).forWorkspace(normalizedWorkspaceId)
+      );
+      const node = (path) => new Proxy(
+        async (...args) => {
+          let target = await load();
+          for (const segment of path) {
+            target = target[segment];
+          }
+          if (typeof target !== "function")
+            throw new TypeError("OpenGeni tool path is not callable");
+          return await Reflect.apply(target, void 0, args);
+        },
+        {
+          get: (_target, property) => {
+            if (property === "then") return void 0;
+            if (typeof property !== "string") return void 0;
+            return node([...path, property]);
+          }
+        }
+      );
+      return new Proxy(/* @__PURE__ */ Object.create(null), {
+        get: (_target, property) => {
+          if (property === "then") return void 0;
+          if (typeof property !== "string") return void 0;
+          return node([property]);
+        }
+      });
+    }
+  };
+}
 var OpenGeniClient = class {
   baseUrl;
   options;
@@ -835,6 +875,8 @@ var OpenGeniClient = class {
   queued = /* @__PURE__ */ new Map();
   /** Resource-oriented Browser/Computer facade over this exact authenticated client. */
   interaction;
+  /** Dynamic typed tool facade backed by the canonical workspace gateway. */
+  tools;
   constructor(options) {
     this.baseUrl = options.baseUrl.replace(/\/+$/, "");
     this.options = options;
@@ -845,6 +887,7 @@ var OpenGeniClient = class {
     }
     this.sessionCommandTimeoutMs = sessionCommandTimeoutMs;
     this.interaction = new OpenGeniInteractionClient(this);
+    this.tools = createLazyToolsFacade(this);
   }
   // --- Session lifecycle ---------------------------------------------------
   /** Make one finalization attempt for a recording; callers may retry retained audio. */
@@ -1051,6 +1094,13 @@ var OpenGeniClient = class {
       options
     );
   }
+  /** Exact model-visible prefix captured from the latest provider request. */
+  async getSessionModelContext(workspaceId, sessionId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/model-context`
+    );
+  }
   async updateSession(workspaceId, sessionId, request) {
     return await this.requestJson(
       "PATCH",
@@ -1121,10 +1171,14 @@ var OpenGeniClient = class {
       sessionListQuery(options)
     );
   }
-  async listSessionBackgroundCommands(workspaceId, sessionId) {
+  /** Running and stopping commands only; settled results remain in session history. */
+  async listSessionBackgroundCommands(workspaceId, sessionId, options = {}) {
     return await this.requestJson(
       "GET",
-      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/background-commands`
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/background-commands`,
+      void 0,
+      {},
+      options
     );
   }
   async cancelSessionBackgroundCommand(workspaceId, sessionId, commandId) {
@@ -1147,6 +1201,15 @@ var OpenGeniClient = class {
           ...sessionListQuery(options),
           ...options.cursor !== void 0 ? { cursor: options.cursor } : {},
           ...search ? { search } : {},
+          ...options.channelId !== void 0 ? { channelId: options.channelId ?? "null" } : {},
+          ...options.createdBy ? {
+            createdByKind: options.createdBy.kind,
+            createdBySubjectId: options.createdBy.subjectId
+          } : {},
+          ...options.updatedFrom ? { updatedFrom: options.updatedFrom } : {},
+          ...options.updatedBefore ? { updatedBefore: options.updatedBefore } : {},
+          ...options.createdFrom ? { createdFrom: options.createdFrom } : {},
+          ...options.createdBefore ? { createdBefore: options.createdBefore } : {},
           ...options.pinsOnly ? { pinsOnly: "true" } : {},
           ...options.archivedOnly ? { archivedOnly: "true" } : {}
         },
@@ -1177,8 +1240,14 @@ var OpenGeniClient = class {
       if (options.archivedOnly) {
         throw new Error("The connected OpenGeni API does not support archived session lists");
       }
+      if (hasSessionPageFilters(options)) {
+        throw new Error("The connected OpenGeni API does not support filtered session lists");
+      }
       return { pinned: [], sessions: response, nextCursor: null };
     }
+    if (hasSessionPageFilters(options) && response.filtersApplied !== true) {
+      throw new Error("The connected OpenGeni API does not support filtered session lists");
+    }
     return response;
   }
   /** Compact, bounded workspace agent hierarchy page. */
@@ -1602,6 +1671,8 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/scheduled-tasks`,
       void 0,
       {
+        ...options.offset !== void 0 ? { offset: String(options.offset) } : {},
+        ...options.sessionId ? { sessionId: options.sessionId } : {},
         ...options.limit !== void 0 ? { limit: String(options.limit) } : {}
       }
     );
@@ -3527,11 +3598,12 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/instruction-policies/${encodeURIComponent(revisionId)}`
     );
   }
-  async createWorkspaceInstructionPolicyDraft(workspaceId, request) {
-    return await this.requestJson(
+  async createWorkspaceInstructionPolicyDraft(workspaceId, request, options = {}) {
+    return await this.requestSessionCommand(
       "POST",
       `/v1/workspaces/${workspaceId}/instruction-policies/drafts`,
-      request
+      request,
+      options
     );
   }
   /** List the newest immutable onboarding proposals and their inactive policy drafts. */
@@ -3570,11 +3642,12 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/instruction-policies/diff?${params}`
     );
   }
-  async activateWorkspaceInstructionPolicyRevision(workspaceId, revisionId, request) {
-    return await this.requestJson(
+  async activateWorkspaceInstructionPolicyRevision(workspaceId, revisionId, request, options = {}) {
+    return await this.requestSessionCommand(
       "POST",
       `/v1/workspaces/${workspaceId}/instruction-policies/${encodeURIComponent(revisionId)}/activate`,
-      request
+      request,
+      options
     );
   }
   async rollbackWorkspaceInstructionPolicyRevision(workspaceId, request) {
@@ -5099,6 +5172,21 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/github/repositories`
     );
   }
+  /** Effective confirmation policy for each GitHub identity available to this caller. */
+  async getGitHubActionPolicies(workspaceId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/github/action-policies`
+    );
+  }
+  /** Change one GitHub action group without broadening review or merge policy. */
+  async updateGitHubActionPolicy(workspaceId, request) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/workspaces/${workspaceId}/github/action-policies`,
+      request
+    );
+  }
   /** Re-sync the installation's repository list from GitHub. */
   async syncGitHubRepositories(workspaceId) {
     return await this.requestJson(
@@ -5446,14 +5534,18 @@ var OpenGeniClient = class {
         throw error;
       }
       assertApiContractResponse(response);
-      if (!response.ok) {
-        throw await apiErrorFromResponse(response, { method, correlationId });
-      }
-      await assertJsonResponse(response, { method, correlationId });
       try {
-        return await response.json();
+        if (!response.ok) {
+          throw await awaitWithAbort(
+            apiErrorFromResponse(response, { method, correlationId }),
+            abort.signal
+          );
+        }
+        await awaitWithAbort(assertJsonResponse(response, { method, correlationId }), abort.signal);
+        return await awaitWithAbort(response.json(), abort.signal);
       } catch (error) {
         if (options.signal?.aborted) throw error;
+        if (error instanceof OpenGeniApiError) throw error;
         if (isMutationMethod(method)) {
           throw mutationTransportError(correlationId);
         }
@@ -5798,4 +5890,4 @@ export {
   parseMediaGenerationResult,
   OpenGeniClient
 };
-//# sourceMappingURL=chunk-GXC4RESV.js.map
+//# sourceMappingURL=chunk-DWCHEOMP.js.map