@opengeni/sdk 6.1.0 → 7.0.0-canary.35585322809001

package/README.md

@@ -215,8 +215,8 @@ session. There is no organization-wide Skill registry or Skill inheritance in
 this integration contract. See the canonical guide for the complete route map,
 security boundary, and delivery checklist.
 
-Installed Pack Skills normally remain workspace-managed. A Pack may instead
-mark guidance as `session_selected`; installation then exposes it to no agent
+Installed Skills can be workspace-managed or marked `session_selected`.
+Session-selected guidance is exposed to no agent
 until `createSession` names the reviewed immutable component in
 `installedSkillIds`. OpenGeni copies that exact artifact into the new session,
 so omitting the field from customer-facing creates is a real contamination
@@ -286,6 +286,35 @@ the advisory UI without changing stored evidence or API authority. See
 [`docs/work-discovery.md`](../../docs/work-discovery.md) for ranking, bounds,
 claim lifecycle, and rollout semantics.
 
+## Full-history message search
+
+`searchSessionMessages(workspaceId, { query, sessionId?, groupBy?, archiveStatus?, limit?,
+cursor? }, { signal? })` searches durable user and **completed assistant** text,
+including unloaded history. It returns every non-overlapping literal occurrence,
+not tools, reasoning, model context, or delta-only assistant output.
+
+Each match has a durable `eventId`/`sequence`, a UTF-16 `messageMatchOffset`, and
+`snippet: { text, matchStart, matchEnd }` with original-text UTF-16 offsets.
+Results include `nextCursor`, `hasMore`, cumulative `matchedMessageCount` and
+`matchedOccurrenceCount`, `scannedMessages`, and `countIsExact`. Keep following
+cursors even on empty pages while `hasMore` is true; counts are provisional until
+exhaustion. Cancel superseded searches with the third argument's AbortSignal.
+This is a live, authorized traversal rather than a frozen snapshot; restart to
+refresh after concurrent history or visibility changes.
+
+For workspace search, `groupBy: "session"` returns the first hit per matching
+session and skips that session's remaining history, keeping prolific messages
+from filling multiple picker pages. It cannot be combined with `sessionId`.
+In grouped mode both matched counters count session representatives, not full
+per-session message/occurrence totals; `scannedMessages` counts only visited
+messages. Cursors bind the grouping mode. Omit it for every-occurrence Find.
+
+The method and types are exported from the ordinary SDK and browser entry.
+Use `listEventPage` around the hit's sequence for bounded context, and use the
+returned search snippet when a large source message's ordinary projection does
+not include the hit. Never download complete history to perform Find locally.
+See [the API contract and bounds](../../docs/session-message-search.md).
+
 ## Session visibility and forks
 
 For organizations with session-tenancy activation, a canonical managed-cookie
@@ -321,49 +350,33 @@ user decision. A quiescence conflict identifies the stable blocker after live
 turns, goals, realtime, schedules, workspace writers, retained processes, and
 sandbox access have been settled. Forks copy exact same-workspace durable
 conversation content but no live turn, goal, credential, Connection/delegation,
-personal grant, Variable Set, Rig, MCP server configuration, process, sandbox
+personal grant, Variable Set, Sandbox Environment, MCP server configuration, process, sandbox
 identity, pin, or workflow. Destination visibility and acknowledgement are
 idempotency-bound.
 
-## Personal-resource grants
+## Connected accounts
 
-The same canonical managed-cookie owner can manage explicit personal-resource
-delegations after organization activation. Pages are bounded to one exact kind;
-the server derives the only valid action and returns the full credential-free
-delegation to attach through the resource's ordinary session API.
+Authenticated messages use the initiating user's eligible connected accounts.
+Conversation visibility does not share account access. Queued work, retries and
+child work retain the initiating user. No per-conversation connection grant is
+required. Multiple eligible accounts require an explicit account choice:
 
 ```ts
-const page = await browserClient.listUserResourceAuthorities(workspaceId, {
-  resourceKind: "connection",
-  limit: 50,
-});
-const authority = page.authorities[0];
-if (!authority) throw new Error("No personal Connection is available");
-
-const issued = await browserClient.issueUserResourceGrant(workspaceId, authority.authorityId, {
-  scope: "user",
-  resourceKind: "connection",
-  mode: "session",
-  context: "workspace_shared",
-  sessionId,
-  expectedAuthorityEpoch: current.tenancy.authorityEpoch,
-  workspaceSharedAcknowledged: true,
-});
-
-await browserClient.revokeUserResourceGrant(workspaceId, issued.grant.grantId);
+const accounts = await browserClient.listOwnConnectionAccounts(workspaceId);
+// When choosing among multiple accounts, use the exact eligible server/account pair.
+const selection = { serverId: "mail", connectionId: accounts[0]!.id };
 ```
 
-The SDK deliberately exposes only exact-session and standing (`always`) grant
-management. It does not expose standalone `once`, custom expiry, scheduled or
-cross-workspace authority, or an atomic create-session-and-attach workflow.
-Revocation prevents future reads but cannot retract output already shared.
+General personal-resource grants for documents, variable sets and other resource
+kinds remain available through the root/core SDK. They do not authorize native
+connected accounts.
 
-## Scheduled connection authority
+## Personal schedules
 
-Agent schedules may carry explicit personal Connection authority. The public
-request contains only the credential-free server, Connection, and common-user
-grant tuple returned by the authority-selection API; the SDK never receives or
-stores provider credentials:
+A schedule created by an authenticated human or their active agent records that
+human as its immutable owner. Only that owner or their verified agent may edit,
+run, pause or delete it. Each occurrence resolves the owner's current accounts;
+accepted retries retain their original identity and account selection.
 
 ```ts
 const task = await client.createScheduledTask(workspaceId, {
@@ -371,18 +384,15 @@ const task = await client.createScheduledTask(workspaceId, {
   schedule: { type: "calendar", hour: 8, minute: 0, timeZone: "Europe/Oslo" },
   runMode: "reusable_session",
   agentConfig: { prompt: "Triage the new support issues" },
-  connectionAuthorities: [selection],
+  connectionAccounts: [selection],
 });
 ```
 
-PATCH semantics are deliberate: omit `connectionAuthorities` to preserve the
-exact prior immutable selection, pass `[]` to clear it, or pass a non-empty
-array to replace and revalidate it. Execution-changing edits that preserve
-personal authority must be made by the same causal human; use an explicit fresh
-selection when authority should move. `once` grants are consumed by the durable
-scheduled occurrence, not by an activity attempt, so retries reuse the same run
-receipt. `listScheduledTaskRuns` exposes terminal occurrence state while private
-Connection ids, subjects, and authority snapshots stay server-side.
+Account selections narrow eligible accounts; they never transfer ownership.
+Omitting `connectionAccounts` on update preserves the selection. Passing an
+empty array clears explicit account choices without changing the schedule owner.
+Service-owned schedules retain service execution and do not acquire a human's
+personal accounts. Run history remains credential-free.
 
 Deleting a task is externally idempotent and immediately removes it from live
 lists and quota, but the server retains a tombstone plus run/session/turn audit
@@ -817,6 +827,36 @@ await client.cancelSession(workspaceId, sessionId, {
 await client.sendApprovalDecision(workspaceId, sessionId, { approvalId, decision: "approve" });
 ```
 
+## Retry a failed session without changing its intent
+
+Try again is separate from Pause/Resume and `sendMessage`. Retain the request
+across an ambiguous transport response; never synthesize a continuation prompt:
+
+```ts
+const retryRequest = {
+  clientEventId: crypto.randomUUID(),
+  failureEventId, // the current durable turn.failed event id
+  model: selectedModel,
+  reasoningEffort: "high" as const,
+  latencyMode: "standard" as const,
+};
+const retry = await client.retrySession(workspaceId, sessionId, retryRequest);
+// { outcome: "accepted" | "replayed", turnId, failureEventId }
+```
+
+Requires `sessions:control` and session access. Recovery keeps the logical turn,
+original question, frozen authority, and completed history/tool results; it
+does not create a user message. Omitted policy fields retain the failed turn's
+selection. The selected policy is revalidated for new admission. A duplicate
+operation replays its receipt even after execution advances.
+
+HTTP 409 codes distinguish `RETRY_STALE_FAILURE`, `RETRY_EXECUTION_UNRESOLVED`,
+`RETRY_PAUSED`, `RETRY_UNSUPPORTED_FAILURE`, and `IDEMPOTENCY_KEY_REUSED`.
+Unresolved tool outcomes cannot be blindly replayed. A deliberate Pause must
+be resumed separately. Failure without a retained logical turn, a settled
+scheduled occurrence, and idle credit exhaustion are not supported retry
+boundaries. See [run lifecycle](../../docs/run-lifecycle.md).
+
 ## Session tool policy and native web search
 
 For standalone credential maintenance, use the dedicated operation rather than
@@ -987,7 +1027,6 @@ Every public endpoint group has typed methods:
 | Variable sets | `listVariableSets`, `createVariableSet`, `getVariableSet`, `updateVariableSet`, `deleteVariableSet`, `setVariableSetVariable`, `deleteVariableSetVariable`; generic reads are metadata-only, while dedicated permissioned exact-value reads are part of the held client train |
 | Files | `uploadFile`, `beginFileUpload`, `completeFileUpload`, `getFile`, `createFileDownloadUrl` |
 | Documents | `createDocumentBase`, `listDocumentBases`, `getDocumentBase`, `addDocument`, `listDocuments`, `reindexDocument`, `searchDocuments`, `searchKnowledge` (effective organization + workspace + immutable initiating-user personal scope) |
-| Packs | `listPacks`, `registerPack`, `getPack`, `enablePack`, `deletePack`, `listPackInstallations` |
 | Capabilities | `listCapabilities`, `createCapability`, `enableCapability`, `disableCapability`, `discoverMcpCapabilities` |
 | Plugin packages | `previewPlugin`, `installPlugin`, `previewPluginUninstall`, `uninstallPlugin` |
 | API Integrations | `listIntegrationDefinitions`, `listApiIntegrations`, `previewApiIntegration`, `startApiIntegrationOAuth`, `installApiIntegration`, `previewApiIntegrationUninstall`, `uninstallApiIntegration`, `listIntegrationFacets`, `configureIntegrationFacet`, `pauseIntegrationFacet`, `resumeIntegrationFacet`, `removeIntegrationFacet`, `browseGoogleDriveFacetSource`, `saveGoogleDriveFacetSource` |

package/dist/artifacts.js

@@ -1,10 +1,10 @@
 import {
   OpenGeniClient
-} from "./chunk-4ZQQQBOH.js";
-import "./chunk-IZH5F7QC.js";
-import "./chunk-64S3VKJU.js";
+} from "./chunk-RCVWE6UR.js";
+import "./chunk-L3MYVTPO.js";
+import "./chunk-7ESHQLTB.js";
 import "./chunk-QTBAMHEF.js";
-import "./chunk-CMEU67C4.js";
+import "./chunk-P7OFNKCH.js";
 import "./chunk-OO5LPTO7.js";
 export {
   OpenGeniClient

package/dist/browser.d.ts

@@ -1,5 +1,6 @@
 /** Browser-console client. Optional SDK surfaces must not enter this eager graph. */
 export { OpenGeniClient as OpenGeniBrowserClient } from "./client.js";
+export type { SessionMessageSearchRequest, SessionMessageSearchMatch, SessionMessageSearchResponse, } from "./session-message-search.js";
 export { OpenGeniToolCallError, OpenGeniToolReapprovalRequiredError, OpenGeniToolsClient, } from "./tools.js";
 export type { OpenGeniGeneratedTools, OpenGeniDynamicToolNode, OpenGeniToolCallOptions, OpenGeniToolFunction, OpenGeniToolsFacade, OpenGeniWorkspaceTools, } from "./tools.js";
 export type { FetchLike, FetchResponse, GetSessionOptions, OpenGeniClientOptions, OpenGeniRequestOptions, SendMessageInput, SteerMessageResult, TranscribeAudioInput, WorkspaceControlEventPage, } from "./client.js";
@@ -7,3 +8,4 @@ export { OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniSecureConte
 export type { OpenGeniSecureContextRequiredReason } from "./errors.js";
 export { resolveWorkspaceVoiceInputEnabled } from "./transcription.js";
 export { OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION } from "./types.js";
+export type { ConnectorToolPermission, ConnectorToolPermissionEntry, ConnectorToolPermissionsResponse, UpdateConnectorToolPermissionsRequest, } from "./types.js";

package/dist/browser.js

@@ -8,12 +8,12 @@ import {
 } from "./chunk-FMLDFJ2Q.js";
 import {
   OpenGeniClient
-} from "./chunk-64S3VKJU.js";
+} from "./chunk-7ESHQLTB.js";
 import "./chunk-QTBAMHEF.js";
 import {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION
-} from "./chunk-CMEU67C4.js";
+} from "./chunk-P7OFNKCH.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,

package/dist/chat/index.js

@@ -1,13 +1,13 @@
 import {
   OpenGeniEmbeddingClient
-} from "../chunk-VDACQXJZ.js";
-import "../chunk-4ZQQQBOH.js";
-import "../chunk-IZH5F7QC.js";
+} from "../chunk-N76DIO4E.js";
+import "../chunk-RCVWE6UR.js";
+import "../chunk-L3MYVTPO.js";
 import {
   parseSseStream
-} from "../chunk-64S3VKJU.js";
+} from "../chunk-7ESHQLTB.js";
 import "../chunk-QTBAMHEF.js";
-import "../chunk-CMEU67C4.js";
+import "../chunk-P7OFNKCH.js";
 import {
   OpenGeniApiError
 } from "../chunk-OO5LPTO7.js";

package/dist/{chunk-64S3VKJU.js → chunk-7ESHQLTB.js}

@@ -9,7 +9,7 @@ import {
   OPENGENI_API_CONTRACT_REVISION,
   OPENGENI_CORRELATION_HEADER,
   RETAINED_OUTPUT_MAX_PAGE_BYTES
-} from "./chunk-CMEU67C4.js";
+} from "./chunk-P7OFNKCH.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
@@ -1177,6 +1177,26 @@ var OpenGeniClient = class {
       request
     );
   }
+  /** Search durable visible user/assistant text, including unloaded history.
+   * Pages may be empty with hasMore=true. Never fall back to title search on
+   * older servers. Use listEventPage before/after the returned sequence for context.
+   */
+  async searchSessionMessages(workspaceId, request, options = {}) {
+    return this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/session-message-search`,
+      void 0,
+      {
+        query: request.query,
+        ...request.sessionId !== void 0 ? { sessionId: request.sessionId } : {},
+        ...request.groupBy !== void 0 ? { groupBy: request.groupBy } : {},
+        ...request.archiveStatus !== void 0 ? { archiveStatus: request.archiveStatus } : {},
+        ...request.limit !== void 0 ? { limit: String(request.limit) } : {},
+        ...request.cursor !== void 0 ? { cursor: request.cursor } : {}
+      },
+      options
+    );
+  }
   async listSessions(workspaceId, options = {}) {
     if (options.search?.trim() || options.originSiteId) {
       const page = await this.listSessionPage(workspaceId, options);
@@ -1229,7 +1249,9 @@ var OpenGeniClient = class {
           ...options.createdFrom ? { createdFrom: options.createdFrom } : {},
           ...options.createdBefore ? { createdBefore: options.createdBefore } : {},
           ...options.pinsOnly ? { pinsOnly: "true" } : {},
-          ...options.archivedOnly ? { archivedOnly: "true" } : {}
+          ...options.archivedOnly ? { archivedOnly: "true" } : {},
+          ...options.sortBy ? { sortBy: options.sortBy } : {},
+          ...options.archiveStatus ? { archiveStatus: options.archiveStatus } : {}
         },
         { signal: options.signal }
       );
@@ -1245,6 +1267,11 @@ var OpenGeniClient = class {
       }
       throw error;
     }
+    if (options.sortBy !== void 0 && (Array.isArray(response) || response.sortBy !== options.sortBy) || options.archiveStatus !== void 0 && (Array.isArray(response) || response.archiveStatus !== options.archiveStatus)) {
+      throw new Error(
+        "The connected OpenGeni API does not support the requested session sorting/archive filter"
+      );
+    }
     if (Array.isArray(response)) {
       if (options.cursor) {
         throw new Error("The connected OpenGeni API does not support stable session-page cursors");
@@ -1960,6 +1987,29 @@ var OpenGeniClient = class {
       request
     );
   }
+  /** Inspect bounded checkpoint recovery eligibility without changing session state. */
+  async getSandboxRecovery(workspaceId, sessionId) {
+    return this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/sandbox-recovery`
+    );
+  }
+  /** Restore only the explicitly selected checkpoint; never retry a command. */
+  async recoverSandbox(workspaceId, sessionId, request) {
+    return this.requestSessionCommand(
+      "POST",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/sandbox-recovery`,
+      request
+    );
+  }
+  /** Retry the exact failed turn. Keep clientEventId unchanged on transport retries. */
+  async retrySession(workspaceId, sessionId, request) {
+    return await this.requestSessionCommand(
+      "POST",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/retry`,
+      request
+    );
+  }
   async controlSession(workspaceId, sessionId, request) {
     return await this.requestSessionCommand(
       "POST",
@@ -3285,14 +3335,6 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/user-resource-authorities?${query.toString()}`
     );
   }
-  /** Issue an exact-session or standing personal-resource grant. */
-  async issueUserResourceGrant(workspaceId, authorityId, request) {
-    return await this.requestJson(
-      "POST",
-      `/v1/workspaces/${workspaceId}/user-resource-authorities/${authorityId}/grants`,
-      request
-    );
-  }
   /** Revoke an owner grant through the exact workspace it targets. */
   async revokeUserResourceGrant(workspaceId, grantId) {
     return await this.requestJson(
@@ -4369,7 +4411,7 @@ var OpenGeniClient = class {
   async getFile(workspaceId, fileId, options = {}) {
     return await this.requestJson(
       "GET",
-      `/v1/workspaces/${workspaceId}/files/${fileId}`,
+      `/v1/workspaces/${workspaceId}/files/${fileId}${options.sessionId ? `?sessionId=${encodeURIComponent(options.sessionId)}` : ""}`,
       void 0,
       {},
       options
@@ -4526,7 +4568,7 @@ var OpenGeniClient = class {
   async createFileDownloadUrl(workspaceId, fileId, options = {}) {
     return await this.requestJson(
       "POST",
-      `/v1/workspaces/${workspaceId}/files/${fileId}/download-url`,
+      `/v1/workspaces/${workspaceId}/files/${fileId}/download-url${options.sessionId ? `?sessionId=${encodeURIComponent(options.sessionId)}` : ""}`,
       void 0,
       {},
       options
@@ -4762,76 +4804,7 @@ var OpenGeniClient = class {
       request
     );
   }
-  // --- Capability packs ------------------------------------------------------------------
-  /** Built-in + registered packs, with the workspace's installations. */
-  async listPacks(workspaceId) {
-    return await this.requestJson("GET", `/v1/workspaces/${workspaceId}/packs`);
-  }
-  /** Register (or replace) a workspace-scoped pack from a manifest. */
-  async registerPack(workspaceId, manifest) {
-    return await this.requestJson(
-      "POST",
-      `/v1/workspaces/${workspaceId}/packs`,
-      manifest
-    );
-  }
-  async getPack(workspaceId, packId) {
-    return await this.requestJson(
-      "GET",
-      `/v1/workspaces/${workspaceId}/packs/${encodeURIComponent(packId)}`
-    );
-  }
-  async enablePack(workspaceId, packId, request = {}) {
-    return await this.requestJson(
-      "POST",
-      `/v1/workspaces/${workspaceId}/packs/${encodeURIComponent(packId)}/enable`,
-      request
-    );
-  }
   /** Resolve pinned components, Variable Set, and Rig requirements before installation. */
-  async previewPackInstallation(workspaceId, packId, request = {}) {
-    return await this.requestJson(
-      "POST",
-      `/v1/workspaces/${workspaceId}/packs/${encodeURIComponent(packId)}/installation-preview`,
-      request
-    );
-  }
-  /** Install, update, or repair a Pack from an exact previewed manifest. */
-  async installPack(workspaceId, packId, request) {
-    return await this.requestJson(
-      "POST",
-      `/v1/workspaces/${workspaceId}/packs/${encodeURIComponent(packId)}/install`,
-      request
-    );
-  }
-  /** Preview which Pack-owned components will be retained by other owners. */
-  async previewPackUninstall(workspaceId, packId) {
-    return await this.requestJson(
-      "GET",
-      `/v1/workspaces/${workspaceId}/packs/${encodeURIComponent(packId)}/uninstall-preview`
-    );
-  }
-  /** Safely release Pack ownership and disable only now-ownerless components. */
-  async uninstallPack(workspaceId, packId, request) {
-    return await this.requestJson(
-      "DELETE",
-      `/v1/workspaces/${workspaceId}/packs/${encodeURIComponent(packId)}/installation`,
-      request
-    );
-  }
-  /** Unregister a workspace-scoped pack (built-in packs cannot be deleted). */
-  async deletePack(workspaceId, packId) {
-    await this.requestVoid(
-      "DELETE",
-      `/v1/workspaces/${workspaceId}/packs/${encodeURIComponent(packId)}`
-    );
-  }
-  async listPackInstallations(workspaceId) {
-    return await this.requestJson(
-      "GET",
-      `/v1/workspaces/${workspaceId}/packs/installations`
-    );
-  }
   // --- Capabilities -------------------------------------------------------------------------
   async listCapabilities(workspaceId) {
     return await this.requestJson(
@@ -4847,6 +4820,24 @@ var OpenGeniClient = class {
       request
     );
   }
+  async getConnectorToolPermissions(workspaceId, capabilityId, options = {}) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/capabilities/${encodeURIComponent(capabilityId)}/tool-permissions`,
+      void 0,
+      {},
+      options
+    );
+  }
+  async updateConnectorToolPermissions(workspaceId, capabilityId, request, options = {}) {
+    return await this.requestJson(
+      "PATCH",
+      `/v1/workspaces/${workspaceId}/capabilities/${encodeURIComponent(capabilityId)}/tool-permissions`,
+      request,
+      {},
+      options
+    );
+  }
   async enableCapability(workspaceId, capabilityId, request = {}) {
     return await this.requestJson(
       "POST",
@@ -5210,6 +5201,14 @@ var OpenGeniClient = class {
     );
   }
   // --- Connections -------------------------------------------------------------------------------
+  /** The authenticated user's active accounts across this organization. */
+  async listOwnConnectionAccounts(workspaceId) {
+    const response = await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/connections/accounts`
+    );
+    return response.connections;
+  }
   async listConnections(workspaceId) {
     const response = await this.requestJson(
       "GET",
@@ -5414,6 +5413,20 @@ var OpenGeniClient = class {
   catalogAssetUrl(logoAssetPath) {
     return logoAssetPath ? `${this.baseUrl}/v1/${logoAssetPath}` : null;
   }
+  /** Read a passive catalog mark through this client's authenticated transport.
+   * Useful when an embedding backend protects even public upstream assets. */
+  async downloadCatalogAsset(logoAssetPath, options = {}) {
+    if (!/^catalog-assets\/[a-zA-Z0-9_./-]+$/.test(logoAssetPath) || logoAssetPath.split("/").some((part) => !part || part === "." || part === ".."))
+      throw new TypeError("A catalog asset path is required");
+    const response = await this.requestResponse("GET", `/v1/${logoAssetPath}`, {}, options);
+    const type = response.headers.get("content-type")?.split(";")[0] ?? "";
+    if (!type.startsWith("image/")) {
+      await response.body?.cancel();
+      throw new Error("The catalog asset is not an image");
+    }
+    const bytes = await readBoundedResponseBytes(response, 2e6, null);
+    return new Blob([Uint8Array.from(bytes)], { type });
+  }
   // --- GitHub ----------------------------------------------------------------------------------
   /** GitHub App server configuration plus truthful workspace binding status. */
   async getGitHubApp(workspaceId, options = {}) {
@@ -5563,6 +5576,32 @@ var OpenGeniClient = class {
       ...options.accountId !== void 0 ? { accountId: options.accountId } : {}
     });
   }
+  async getOrganizationUsageSummary(options, requestOptions = {}) {
+    return await this.requestJson(
+      "GET",
+      "/v1/billing/usage-summary",
+      void 0,
+      {
+        accountId: options.accountId,
+        period: options.period ?? "month"
+      },
+      requestOptions
+    );
+  }
+  async getOrganizationUsageWorkspacePage(options, requestOptions = {}) {
+    return await this.requestJson(
+      "GET",
+      "/v1/billing/usage-workspaces",
+      void 0,
+      {
+        accountId: options.accountId,
+        period: options.period ?? "month",
+        until: options.until,
+        ...options.afterWorkspaceId ? { afterWorkspaceId: options.afterWorkspaceId } : {}
+      },
+      requestOptions
+    );
+  }
   async getBillingUsage(options = {}) {
     return await this.requestJson("GET", "/v1/billing/usage", void 0, {
       ...options.accountId !== void 0 ? { accountId: options.accountId } : {},
@@ -5578,7 +5617,8 @@ var OpenGeniClient = class {
         range: options.range ?? "week",
         ...options.provider !== void 0 ? { provider: options.provider } : {},
         ...options.model !== void 0 ? { model: options.model } : {}
-      }
+      },
+      { signal: options.signal }
     );
   }
   async getBillingEntitlements(options = {}) {
@@ -5686,6 +5726,13 @@ var OpenGeniClient = class {
       `/v1/workspaces/${workspaceId}/codex/accounts`
     );
   }
+  /** Session-authorized retry choices plus the current accepted account. */
+  async listSessionCodexAccounts(workspaceId, sessionId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/codex-accounts`
+    );
+  }
   /** Switch the workspace ACTIVE Codex account (the one unpinned sessions use). */
   async activateCodexAccount(workspaceId, accountId) {
     return await this.requestJson(
@@ -6269,4 +6316,4 @@ export {
   parseMediaGenerationResult,
   OpenGeniClient
 };
-//# sourceMappingURL=chunk-64S3VKJU.js.map
+//# sourceMappingURL=chunk-7ESHQLTB.js.map