@opengeni/sdk 6.1.0 → 7.0.0

package/src/embedding-client.ts

@@ -1,5 +1,5 @@
 import { OpenGeniClient as OpenGeniArtifactClient } from "./artifact-client";
-import type { OpenGeniClientOptions, OpenGeniRequestOptions } from "./client";
+import type { OpenGeniClientOptions } from "./client";
 import type { AddWorkspaceMemberRequest } from "./types";
 import type {
   ExternalIdentityLink,
@@ -12,52 +12,17 @@ import type {
 
 /** Public product embedding administration, kept out of the native browser client. */
 export class OpenGeniEmbeddingClient extends OpenGeniArtifactClient {
-  /** Server-only organization administration. First registration opts the whole
-   * organization into exact namespace routing, including future workspaces. */
-  async putHostMcpResolver(
-    organizationId: string,
-    externalSource: string,
-    request: import("@opengeni/contracts/host-mcp-resolvers").PutHostMcpResolverRequest,
-    options?: OpenGeniRequestOptions,
-  ): Promise<import("@opengeni/contracts/host-mcp-resolvers").HostMcpResolver> {
-    return this.requestJson(
-      "PUT",
-      `/v1/organizations/${organizationId}/mcp-credential-resolvers/${encodeURIComponent(externalSource)}`,
-      request,
-      {},
-      options,
-    );
-  }
-
-  async getHostMcpResolver(
-    organizationId: string,
-    externalSource: string,
-    options?: OpenGeniRequestOptions,
-  ): Promise<import("@opengeni/contracts/host-mcp-resolvers").HostMcpResolver> {
-    return this.requestJson(
+  /** Recover this actor's connection creation result without resending secrets.
+   * A 404 means no visible committed result, not proof that an in-flight write failed. */
+  async getConnectionCreationResult(
+    workspaceId: string,
+    operationId: string,
+  ): Promise<import("./types").ConnectionMetadata> {
+    const response = await this.requestJson<import("./types").ConnectionResponse>(
       "GET",
-      `/v1/organizations/${organizationId}/mcp-credential-resolvers/${encodeURIComponent(externalSource)}`,
-      undefined,
-      {},
-      options,
-    );
-  }
-
-  /** Retains registration identity and namespace opt-in. Replays never restore
-   * a previous endpoint/secret. Use put with the current generation to reactivate. */
-  async revokeHostMcpResolver(
-    organizationId: string,
-    externalSource: string,
-    request: import("@opengeni/contracts/host-mcp-resolvers").RevokeHostMcpResolverRequest,
-    options?: OpenGeniRequestOptions,
-  ): Promise<import("@opengeni/contracts/host-mcp-resolvers").HostMcpResolver> {
-    return this.requestJson(
-      "POST",
-      `/v1/organizations/${organizationId}/mcp-credential-resolvers/${encodeURIComponent(externalSource)}/revoke`,
-      request,
-      {},
-      options,
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/connections/operations/${encodeURIComponent(operationId)}`,
     );
+    return response.connection;
   }
 
   /** Rotate existing inline credentials only while no credential-consuming work
@@ -247,95 +212,6 @@ export class OpenGeniEmbeddingClient extends OpenGeniArtifactClient {
     return this.requestJson("GET", `/v1/workspaces/${workspaceId}/connect/catalog`);
   }
 
-  /** Register credential-free, external-owner host authority. Does not itself
-   * authorize an execution or install MCP tools. */
-  async createHostMcpBinding(
-    workspaceId: string,
-    request: import("@opengeni/contracts/host-mcp-bindings").CreateHostMcpBindingRequest,
-    options: OpenGeniRequestOptions = {},
-  ): Promise<import("@opengeni/contracts/host-mcp-bindings").HostMcpBinding> {
-    return this.requestJson(
-      "POST",
-      `/v1/workspaces/${encodeURIComponent(workspaceId)}/host-mcp-bindings`,
-      request,
-      {},
-      options,
-    );
-  }
-
-  async getHostMcpBinding(
-    workspaceId: string,
-    bindingId: string,
-    options: OpenGeniRequestOptions = {},
-  ): Promise<import("@opengeni/contracts/host-mcp-bindings").HostMcpBinding> {
-    return this.requestJson(
-      "GET",
-      `/v1/workspaces/${encodeURIComponent(workspaceId)}/host-mcp-bindings/${encodeURIComponent(bindingId)}`,
-      undefined,
-      {},
-      options,
-    );
-  }
-
-  async revokeHostMcpBinding(
-    workspaceId: string,
-    bindingId: string,
-    request: { expectedGeneration: number },
-    options: OpenGeniRequestOptions = {},
-  ): Promise<import("@opengeni/contracts/host-mcp-bindings").HostMcpBinding> {
-    return this.requestJson(
-      "POST",
-      `/v1/workspaces/${encodeURIComponent(workspaceId)}/host-mcp-bindings/${encodeURIComponent(bindingId)}/revoke`,
-      request,
-      {},
-      options,
-    );
-  }
-
-  /** Issue owner-scoped grant metadata; accepted execution must separately admit it. */
-  async issueHostMcpDelegation(
-    workspaceId: string,
-    request: import("@opengeni/contracts/host-mcp-bindings").IssueHostMcpDelegationRequest,
-    options: OpenGeniRequestOptions = {},
-  ): Promise<import("@opengeni/contracts/host-mcp-bindings").HostMcpDelegation> {
-    return this.requestJson(
-      "POST",
-      `/v1/workspaces/${encodeURIComponent(workspaceId)}/host-mcp-delegations`,
-      request,
-      {},
-      options,
-    );
-  }
-
-  async getHostMcpDelegation(
-    workspaceId: string,
-    delegationId: string,
-    options: OpenGeniRequestOptions = {},
-  ): Promise<import("@opengeni/contracts/host-mcp-bindings").HostMcpDelegation> {
-    return this.requestJson(
-      "GET",
-      `/v1/workspaces/${encodeURIComponent(workspaceId)}/host-mcp-delegations/${encodeURIComponent(delegationId)}`,
-      undefined,
-      {},
-      options,
-    );
-  }
-
-  async revokeHostMcpDelegation(
-    workspaceId: string,
-    delegationId: string,
-    request: { expectedGeneration: number },
-    options: OpenGeniRequestOptions = {},
-  ): Promise<import("@opengeni/contracts/host-mcp-bindings").HostMcpDelegation> {
-    return this.requestJson(
-      "POST",
-      `/v1/workspaces/${encodeURIComponent(workspaceId)}/host-mcp-delegations/${encodeURIComponent(delegationId)}/revoke`,
-      request,
-      {},
-      options,
-    );
-  }
-
   async listConnectAccounts(
     workspaceId: string,
   ): Promise<import("@opengeni/contracts/connect").ConnectAccount[]> {

package/src/index.ts

@@ -4,6 +4,11 @@ export type {
   ArtifactCatalogListOptions,
   ArtifactCatalogListResponse,
 } from "./artifact-catalog";
+export type {
+  SessionMessageSearchRequest,
+  SessionMessageSearchMatch,
+  SessionMessageSearchResponse,
+} from "./session-message-search";
 export { OpenGeniEmbeddingClient as OpenGeniClient } from "./embedding-client";
 export { pluginMcpUnavailableReason } from "@opengeni/contracts/plugin-discovery";
 export type {
@@ -547,16 +552,8 @@ export type {
   CapabilityKind,
   CapabilityLifecycle,
   CapabilityLifecycleStatus,
-  CapabilityPack,
-  CapabilityPackComponentReference,
-  CapabilityPackConnector,
-  CapabilityPackConnectorAuthModel,
-  CapabilityPackRigRequirement,
-  CapabilityPackVariableSetSpec,
-  CapabilityPackKnowledge,
-  CapabilityPackScheduledTaskTemplate,
-  CapabilityPackSkill,
-  CapabilityPackSkillFile,
+  SkillArtifactDefinition,
+  SkillArtifactFile,
   CapabilityRuntime,
   CapabilityReadiness,
   CapabilitySource,
@@ -612,6 +609,7 @@ export type {
   CodexAccount,
   CodexAccountOverview,
   CodexAccountsResponse,
+  SessionCodexAccountsResponse,
   OrganizationCodexAccountsResponse,
   CodexAllocatorUpdate,
   CodexAccountSwitchedPayload,
@@ -646,7 +644,7 @@ export type {
   CompleteFileUploadResponse,
   ConnectionKind,
   ConnectionMetadata,
-  McpConnectionAuthoritySelection,
+  McpConnectionAccountSelection,
   ConnectionOwnership,
   ConnectionResponse,
   ConnectionStatus,
@@ -726,7 +724,6 @@ export type {
   DocumentVisibility,
   MoveDocumentRequest,
   EnableCapabilityRequest,
-  EnablePackRequest,
   Entitlements,
   EntitlementValue,
   EntitlementsMode,
@@ -754,7 +751,6 @@ export type {
   AtlassianSelectedSource,
   AtlassianSourceKind,
   AtlassianSyncCadence,
-  GetPackResponse,
   GitHubActionPoliciesResponse,
   GitHubActionPolicyActor,
   GitHubActionPolicyActorState,
@@ -791,6 +787,8 @@ export type {
   GitHubRepository,
   GitHubRepositoryScope,
   GoalSpec,
+  SessionGoalReportRequirement,
+  SessionGoalReportDelivery,
   IntegrationClientMetadata,
   KnownPermission,
   KnownSessionEventType,
@@ -819,7 +817,6 @@ export type {
   ListApiKeysResponse,
   ListOrganizationSessionsOptions,
   ListConnectionsResponse,
-  ListPacksResponse,
   ListSlackUserLinkAccessRequestsResponse,
   ListWorkspaceMemberCandidatesResponse,
   ListWorkspaceMembersResponse,
@@ -828,17 +825,6 @@ export type {
   McpPersonalConnectionSummary,
   OAuthStartRequest,
   OAuthStartResponse,
-  PackInstallation,
-  PackInstallationPreview,
-  PackInstallationStatus,
-  PackComponentResolution,
-  PackComponentResolutionStatus,
-  PackRigResolution,
-  PackUninstallPreview,
-  PreviewPackInstallationRequest,
-  InstallPackRequest,
-  UninstallPackRequest,
-  UninstallPackResult,
   Permission,
   PrepareSlackUserLinkAccessRequest,
   ProductAccessMode,
@@ -877,7 +863,6 @@ export type {
   RecordingFailedReason,
   RecordingMode,
   RecordingStartedPayload,
-  RegisterCapabilityPackRequest,
   RepositoryResourceRef,
   ResourceRef,
   SaveGoogleDriveSourceRequest,
@@ -921,6 +906,12 @@ export type {
   SessionQueueMutationResponse,
   SessionQueueSnapshot,
   SessionControlResponse,
+  SessionRetryRequest,
+  SandboxRecoverySelection,
+  SandboxRecoveryProjection,
+  SandboxRecoveryRequest,
+  SandboxRecoveryResponse,
+  SessionRetryResponse,
   ComposerDraft,
   DeleteSessionQueueItemRequest,
   EditSessionQueueItemRequest,
@@ -951,17 +942,16 @@ export type {
   RotateSessionMcpCredentialsRequest,
   RotateSessionMcpCredentialsReceipt,
   SessionMcpApprovalPolicy,
+  SessionMcpApprovalPolicyTarget,
   SessionMcpServerInput,
   SessionMcpServerMetadata,
   SessionToolPolicy,
-  // Per-surface capability cell aliases (views of SessionCapabilities).
   FileSystemCapability,
   TerminalCapability,
   GitCapability,
   DesktopStreamCapability,
   RecordingCapability,
   ComputerUseCapability,
-  // Stream-surfacing client surface (Phase 5).
   ClientAuthConfig,
   StreamUrlRotatedPayload,
   StreamOpenedPayload,
@@ -1015,7 +1005,6 @@ export type {
   TurnInitiator,
   ToolAuthNeededPayload,
   UpdateConnectionRequest,
-  // Channel-A structured services (P4.4) — A1 payloads + A2 request/response.
   SandboxCommandOutputDeltaPayload,
   FsChangeKind,
   FsChangedPayload,
@@ -1190,6 +1179,7 @@ export type {
   InstalledPlugin,
   PluginInstallationSummary,
   ListInstalledPluginsResponse,
+  PluginUninstallComponentImpact,
   PluginUninstallPreview,
   UninstallPluginRequest,
   UninstallPluginResult,
@@ -1202,8 +1192,6 @@ export type {
   WorkspaceVideoGenerationSettings,
   WorkspaceVoiceInputSettings,
   VoiceInputProviderId,
-  WorkspaceRegisteredPack,
-  // Bring-your-own-compute: Machines dashboard + per-machine metrics (M10).
   MetricSample,
   MachineState,
   MachineKind,
@@ -1220,11 +1208,8 @@ export type {
   MachineMetricsSeriesResponse,
   RemoveEnrollmentRequest,
   RemoveEnrollmentResponse,
-  // Bring-your-own-compute: the user-authenticated active-sandbox swap (M7).
   SwapActiveSandboxRequest,
   SwapActiveSandboxResponse,
-  // Self-hosted enrollment UX (design 11): click-Grant approve-page lookup/deny +
-  // headless enroll-token mint/exchange.
   EnrollmentOs,
   ResourceAuthorityScope,
   DeviceEnrollmentLookupRequest,
@@ -1248,3 +1233,9 @@ export type {
   FeedbackSubmissionResponse,
 } from "./feedback";
 export type * from "./knowledge";
+export type {
+  ConnectorToolPermission,
+  ConnectorToolPermissionEntry,
+  ConnectorToolPermissionsResponse,
+  UpdateConnectorToolPermissionsRequest,
+} from "./types";

package/src/knowledge.ts

@@ -9,6 +9,8 @@ export type {
   AgentLearningOverrideRecord,
   SaveAgentLearningSettingsRequest,
   KnowledgeFilePreparationResult,
+  KnowledgeSavePreparationRequest,
+  KnowledgeSavePreparationResponse,
   KnowledgeOriginalFileDownload,
   KnowledgeEntryKind,
   KnowledgeEntryScope,
@@ -35,16 +37,35 @@ export type {
 } from "@opengeni/contracts";
 
 import type { OpenGeniClient } from "./client";
-import type { KnowledgeFilePreparationResult } from "@opengeni/contracts";
+import type {
+  KnowledgeSavePreparationRequest,
+  KnowledgeSavePreparationResponse,
+  KnowledgeFilePreparationResult,
+} from "@opengeni/contracts";
 
 /** Agent-only source preparation is a focused transport surface, outside the browser client. */
 export async function prepareKnowledgeFile(
   client: Pick<OpenGeniClient, "requestJson">,
   workspaceId: string,
   fileId: string,
+  purpose?: "evidence" | "reference",
 ): Promise<KnowledgeFilePreparationResult> {
   return client.requestJson(
     "POST",
     `/v1/workspaces/${encodeURIComponent(workspaceId)}/knowledge/files/${encodeURIComponent(fileId)}/prepare`,
+    purpose ? { purpose } : undefined,
+  );
+}
+
+/** Read-only collection/duplicate discovery for a live selected agent or human Knowledge reviewer. */
+export async function prepareKnowledgeSave(
+  client: Pick<OpenGeniClient, "requestJson">,
+  workspaceId: string,
+  request: KnowledgeSavePreparationRequest,
+): Promise<KnowledgeSavePreparationResponse> {
+  return client.requestJson(
+    "POST",
+    `/v1/workspaces/${encodeURIComponent(workspaceId)}/knowledge/entries/prepare-save`,
+    request,
   );
 }

package/src/organization-integration-policy.ts

@@ -0,0 +1,54 @@
+import type { OpenGeniClient } from "./client";
+
+export type OrganizationIntegrationPolicy = {
+  mode: "unrestricted" | "restricted";
+  allowedIntegrationKeys: string[];
+  revision: number;
+};
+
+export type UpdateOrganizationIntegrationPolicyRequest = {
+  mode: "unrestricted" | "restricted";
+  allowedIntegrationKeys: string[];
+  expectedRevision: number;
+  operationId: string;
+};
+
+type PolicyClient = Pick<OpenGeniClient, "requestJson">;
+
+export type OrganizationIntegrationCatalog = {
+  integrations: Array<{ key: string; label: string; kind: "curated" | "custom" }>;
+};
+
+/** Discover stable policy identities; integrations must not guess provider identifiers. */
+export async function getOrganizationIntegrationCatalog(
+  client: PolicyClient,
+  organizationId: string,
+): Promise<OrganizationIntegrationCatalog> {
+  return client.requestJson(
+    "GET",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/integration-policy/catalog`,
+  );
+}
+
+export async function getOrganizationIntegrationPolicy(
+  client: PolicyClient,
+  organizationId: string,
+): Promise<OrganizationIntegrationPolicy> {
+  return client.requestJson(
+    "GET",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/integration-policy`,
+  );
+}
+
+/** Retain operationId and the exact request when reconciling an uncertain outcome. */
+export async function updateOrganizationIntegrationPolicy(
+  client: PolicyClient,
+  organizationId: string,
+  request: UpdateOrganizationIntegrationPolicyRequest,
+): Promise<OrganizationIntegrationPolicy> {
+  return client.requestJson(
+    "PUT",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/integration-policy`,
+    request,
+  );
+}

package/src/session-message-search.ts

@@ -0,0 +1,39 @@
+/** Literal Unicode case-insensitive substring. Whitespace is significant. */
+export type SessionMessageSearchRequest = {
+  query: string;
+  sessionId?: string | undefined;
+  /** Workspace-only first hit per session; cannot combine with sessionId. */
+  groupBy?: "session" | undefined;
+  archiveStatus?: "active" | "archived" | "all" | undefined;
+  limit?: number | undefined;
+  cursor?: string | undefined;
+};
+
+export type SessionMessageSearchMatch = {
+  sessionId: string;
+  sessionTitle: string | null;
+  eventId: string;
+  sequence: number;
+  turnId: string | null;
+  role: "user" | "assistant";
+  messageId: string | null;
+  /** Zero-based UTF-16 offset in the complete visible message. */
+  messageMatchOffset: number;
+  /** Zero-based UTF-16 offsets in text; matchEnd is exclusive. */
+  snippet: { text: string; matchStart: number; matchEnd: number };
+};
+
+export type SessionMessageSearchResponse = {
+  matches: SessionMessageSearchMatch[];
+  nextCursor: string | null;
+  /** Empty advancing pages are valid. Continue until false. */
+  hasMore: boolean;
+  /** Cumulative distinct messages visited in this live traversal. */
+  scannedMessages: number;
+  /** Cumulative matching messages, or session representatives with groupBy=session. */
+  matchedMessageCount: number;
+  /** Cumulative occurrences, or session representatives with groupBy=session. */
+  matchedOccurrenceCount: number;
+  /** True only on exhaustion. Concurrent mutations require a fresh traversal. */
+  countIsExact: boolean;
+};