@opengeni/sdk 7.4.0 → 7.5.0-canary.36927100590001

package/README.md

@@ -25,6 +25,31 @@ bearer design, but an organization API key belongs on the product server.
 Browser cookies are accepted cross-origin only from operator-configured trusted
 origins; arbitrary embedding origins never receive credentialed CORS responses.
 
+## Allowance lifecycle recovery
+
+`getWorkspaceAllowance(workspaceId)` still returns nullable configuration.
+Use `getWorkspaceAllowanceState(workspaceId)` when you also need the lifecycle
+version: `{ version: 0, config: null }` means never configured, while a positive
+version with null configuration means cleared. Recreation uses that exact
+version as `expectedVersion`.
+
+`clearWorkspaceAllowance(workspaceId, { expectedVersion, operationId })` returns
+`{ version }`. The optional operation ID makes a lost response recoverable:
+reuse the same actor, operation ID and exact request. Replay rechecks current
+authority and returns 409 after any later allowance lifecycle change. On 409,
+read the current state and decide whether a new operation is intended; never
+guess a CAS version. The SDK does not automatically retry mutations.
+
+The same reads and administration are free functions on the
+`@opengeni/sdk/usage-allowances` subpath for browser code that only has the
+narrow `OpenGeniBrowserClient` (`getMyUsage(client, workspaceId)`,
+`getAllUsage`, `setMemberAllowance`, ...); they call the same routes as the root methods.
+
+State reads require the same budget-read authority as configuration reads.
+Full usage additionally requires target workspace access; organization budget
+authority alone does not expose the member roster. Agents cannot read or
+change allowances.
+
 ## Embed the conversation (default)
 
 The default product integration is the full OpenGeni conversation:
@@ -71,6 +96,48 @@ const client = new OpenGeniClient({ baseUrl: "/api/opengeni" });
 </OpenGeniProvider>;
 ```
 
+The proxy and `@opengeni/sdk/chat` facade accept `chats`. The proxy defaults to
+`"private"`; the facade does too when a `user` is present. Without a user and with
+`chats` omitted, the facade keeps workspace visibility, session-only agent reach
+and Knowledge authoring off. Explicit `"private"` requires an authenticated user.
+Private chats use private visibility, session-only agent reach and personal
+Knowledge; `"shared"` uses workspace visibility, agent reach and Knowledge.
+The API wire values are `visibility: "private" | "workspace"`; stored visibility
+is `user_private | workspace_shared`. Explicit hook/create fields override defaults.
+
+For `"isolated"`, pass the facade and return `{ tenant, user }` from `resolve`.
+`og.workspaceIdFor({ tenant, user }, { isolation: "user" })` provisions a separate
+workspace and that user's external membership. It uses stable onboarding keys,
+so retries do not restore revoked access. Other modes need explicit onboarding.
+The standalone resolver is on the server-only `@opengeni/sdk/tenant-workspaces`
+subpath. Keep tenant and user values host-authenticated.
+
+Isolated members get only workspace read, session create/read/control (including
+sending messages), file upload/read, and `mcp_servers:attach` for host-provided
+per-session servers. No admin permissions are included. Pass `memberPermissions`
+to the `OpenGeni` constructor or `createWorkspaceIdResolver` options to replace
+that list, for example to disable file uploads or MCP attachment. The organization
+key must also permit each operation. This is initial onboarding, not a membership
+update: changing the option does not update existing grants or restore revoked access.
+Keep MCP URLs and credentials in the server's `createSession` hook; the browser
+cannot choose them through the proxy.
+An existing onboarding conflict returns the workspace address without retrying
+or changing the grant. The address is not authorization: later `asUser` calls
+still enforce current permissions. Existing isolated users need an explicit
+`updateExternalWorkspaceMember` to gain newly added permissions such as MCP attachment.
+
+The facade also accepts `agent` (identity, capabilities, instructions, renderer)
+and defaults its renderer to `"markdown"` when the server admits agent configuration.
+Only an implicit renderer retries once without `agent` on `422 agent_config_not_enabled`,
+and that refusal is cached per facade instance. This avoids a bootstrap request
+and supports older servers that cannot advertise admission. Explicit agent settings
+are never stripped: the 422 names `OPENGENI_AGENT_CONFIG_ADMISSION_ENABLED` for the
+deployment operator. The private default with a user now turns personal Knowledge
+on; pass `memory: false` to keep authoring off.
+Missing organization private-session enablement raises `OpenGeniSetupError`,
+with owner/admin API, SDK and web-app instructions; the proxy preserves that
+actionable error for browser clients.
+
 Framework adapters are thin wrappers over the same web-standard handler (they
 also accept `createChatHandler` or any `(Request) => Promise<Response>`):
 
@@ -547,6 +614,83 @@ personal grant, Variable Set, Sandbox Environment, MCP server configuration, pro
 identity, pin, or workflow. Destination visibility and acknowledgement are
 idempotency-bound.
 
+## Archived session history import (server only)
+
+Use `@opengeni/sdk/session-history-import` to migrate historical conversations
+into read-only archives. These functions take `client` first, use its ordinary
+`requestJson` transport, and are not eager client methods or root helper exports:
+
+Create requires `sessions:create`; append requires `sessions:control` and the same
+authenticated importer. With `asUser`, the user's permissions apply rather than
+the organization key's permissions.
+
+```ts
+import { OpenGeniClient } from "@opengeni/sdk";
+import {
+  importArchivedSession,
+  appendArchivedSessionEvents,
+} from "@opengeni/sdk/session-history-import";
+
+const og = new OpenGeniClient({
+  baseUrl: process.env.OPENGENI_API_BASE_URL!,
+  apiKey: process.env.OPENGENI_API_KEY!,
+});
+// Existing tenant mapping + explicitly onboarded original creator.
+const actor = og.asUser(originalExternalUserId, { source });
+const imported = await importArchivedSession(actor, workspaceId, {
+  importId: "embedded:thread-42", // Stable; persist the exact request before sending.
+  title: "Original conversation",
+  createdAt: "2025-04-01T09:30:00Z",
+  visibility: "user_private",
+});
+const appended = await appendArchivedSessionEvents(actor, workspaceId, imported.importId, {
+  batchId: "thread-42:batch-0001", // Stable; also persist this exact body first.
+  offset: imported.nextOffset,
+  events: [{
+    type: "agent.message.completed",
+    createdAt: "2025-04-01T09:31:00Z",
+    payload: { text: "Historical answer", channel: "final" },
+  }],
+});
+// Persist imported.session.id and appended.nextOffset in the migration ledger.
+```
+
+External mapping equivalents take `(client, source, externalId, ...)`:
+`importExternalWorkspaceArchivedSession` and
+`appendExternalWorkspaceArchivedSessionEvents`. These resolve an existing
+mapping; neither import form creates a workspace or grants membership. A bare
+organization key creates a shared, ownerless archive. Use `asUser` for the
+verified creator/owner; private imports require existing private-session
+enablement. Preserve source visibility rather than widening it on failure.
+
+The subpath exports `ImportArchivedSessionRequest/Response`,
+`AppendArchivedSessionEventsRequest/Response`, `ArchivedSessionImportEvent` and
+`SessionImportedArchive` types. Requests accept at most 100 events / 1 MiB
+serialized UTF-8 JSON and 256 KiB per event. IDs and titles are bounded to 200
+characters. Import events default to `[]`; append batches must be non-empty.
+Events carry `{ type, createdAt, turnId?, payload }`: a finite supported historical
+type, ISO timestamp, optional UUID/null correlation and JSON-object payload.
+Source timestamps support at most millisecond precision; normalize finer dates
+explicitly and retain originals in the ledger. Negative-zero JSON is rejected.
+
+Exact create replay returns `created: false`; exact append replay returns
+`replayed: true`. `offset` is a zero-based imported-event count, not a timeline
+sequence. Retain the exact actor, mapping, IDs, offset and bodies for uncertain
+retries; new batches use the acknowledged `nextOffset`. Changed key reuse or
+an out-of-order new offset returns 409. Helpers propagate `OpenGeniApiError`,
+including `outcomeUnknown`, and do not automatically retry mutations.
+
+Import is timeline-only: completed messages, calls/results and goals may be
+historical facts, but no model-facing history, live goal, pending decision or
+execution is restored. `session.importedArchive` has
+`{ importId, importedAt, readOnly: true }`, independent of personal archive state.
+Render through the unchanged `SessionConversation` and session proxy; never
+offer Send or Steer. Continuing an imported archive is unsupported in v1.
+The proxy does not expose import routes. Re-upload files through existing APIs
+and replace references before import; preserve additional source metadata and
+source/destination IDs in the host ledger. See
+[Migrating from embedded OpenGeni](../../docs/product-integration.md#migrating-from-embedded-opengeni).
+
 ## Connected accounts
 
 Authenticated messages use the initiating user's eligible connected accounts.
@@ -588,6 +732,12 @@ const request = await verifyCredentialProviderRequest({
 });
 ```
 
+To check an endpoint now, `testWorkspaceWebhook(client, workspaceId, webhookId)` sends a
+signed `webhook.test` event (acknowledge it with any 2xx) and
+`testWorkspaceCredentialProvider(client, workspaceId)` sends a request with
+`purpose: "test"`; both come from `@opengeni/sdk/workspace-integrations` and return
+what the endpoint answered, naming returned credentials but never their values.
+
 `listWorkspaceSandboxImages` returns the deployment's allowlisted images; set one
 with `updateWorkspaceSettings(workspaceId, { defaultSandboxImage })`.
 
@@ -1062,6 +1212,9 @@ await client.cancelSession(workspaceId, sessionId, {
   reason: "host record deleted",
   clientEventId: crypto.randomUUID(),
 });
+// approvalId is `approvals[].id` from the latest `session.requiresAction`
+// event (type SessionApprovalRequest: { id, name, arguments }); it is the
+// pending tool call id, not the event id.
 await client.sendApprovalDecision(workspaceId, sessionId, { approvalId, decision: "approve" });
 ```
 

package/dist/adapters/next.js

@@ -1,9 +1,10 @@
 import {
   createSessionProxyHandler
-} from "../chunk-A73QXCBW.js";
-import "../chunk-BX5ETUM7.js";
-import "../chunk-MV2PNVU4.js";
-import "../chunk-OO5LPTO7.js";
+} from "../chunk-U3RYSV5N.js";
+import "../chunk-UM4ZXXJR.js";
+import "../chunk-7GR6TOEV.js";
+import "../chunk-7WJL2ZWY.js";
+import "../chunk-LQCTDGG6.js";
 
 // src/adapters/next.ts
 function toNextRouteHandlers(handler) {

package/dist/adapters/next.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/adapters/next.ts"],"sourcesContent":["import { createSessionProxyHandler, type SessionProxyHandlerOptions } from \"../session-proxy\";\n\n/** Any web-standard handler: `createSessionProxyHandler`, `createChatHandler`, or your own. */\nexport type WebHandler = (request: Request) => Promise<Response>;\n\n/** Route handlers for a Next.js App Router catch-all route. */\nexport type NextRouteHandlers = {\n  GET: WebHandler;\n  POST: WebHandler;\n  PUT: WebHandler;\n  PATCH: WebHandler;\n  DELETE: WebHandler;\n};\n\n/**\n * Expose a web-standard handler as Next.js App Router route handlers.\n *\n * ```ts\n * // app/api/opengeni/[...path]/route.ts\n * export const dynamic = \"force-dynamic\";\n * export const { GET, POST, PUT, PATCH, DELETE } = toNextRouteHandlers(handler);\n * ```\n *\n * Next passes the full request URL (including any `basePath`), so the proxy's\n * own `/v1/` detection routes it; responses, including SSE, stream as-is.\n */\nexport function toNextRouteHandlers(handler: WebHandler): NextRouteHandlers {\n  // Next calls route handlers with (request, context); only the request matters.\n  const route: WebHandler = async (request) => await handler(request);\n  return { GET: route, POST: route, PUT: route, PATCH: route, DELETE: route };\n}\n\n/**\n * `createSessionProxyHandler` as Next.js App Router route handlers, for\n * `app/<mount>/[...path]/route.ts`.\n */\nexport function createSessionProxyRoute(\n  target: Parameters<typeof createSessionProxyHandler>[0],\n  options: SessionProxyHandlerOptions,\n): NextRouteHandlers {\n  return toNextRouteHandlers(createSessionProxyHandler(target, options));\n}\n"],"mappings":";;;;;;;;AA0BO,SAAS,oBAAoB,SAAwC;AAE1E,QAAM,QAAoB,OAAO,YAAY,MAAM,QAAQ,OAAO;AAClE,SAAO,EAAE,KAAK,OAAO,MAAM,OAAO,KAAK,OAAO,OAAO,OAAO,QAAQ,MAAM;AAC5E;AAMO,SAAS,wBACd,QACA,SACmB;AACnB,SAAO,oBAAoB,0BAA0B,QAAQ,OAAO,CAAC;AACvE;","names":[]}
+{"version":3,"sources":["../../src/adapters/next.ts"],"sourcesContent":["import { createSessionProxyHandler, type SessionProxyHandlerOptions } from \"../session-proxy\";\n\n/** Any web-standard handler: `createSessionProxyHandler`, `createChatHandler`, or your own. */\nexport type WebHandler = (request: Request) => Promise<Response>;\n\n/** Route handlers for a Next.js App Router catch-all route. */\nexport type NextRouteHandlers = {\n  GET: WebHandler;\n  POST: WebHandler;\n  PUT: WebHandler;\n  PATCH: WebHandler;\n  DELETE: WebHandler;\n};\n\n/**\n * Expose a web-standard handler as Next.js App Router route handlers.\n *\n * ```ts\n * // app/api/opengeni/[...path]/route.ts\n * export const dynamic = \"force-dynamic\";\n * export const { GET, POST, PUT, PATCH, DELETE } = toNextRouteHandlers(handler);\n * ```\n *\n * Next passes the full request URL (including any `basePath`), so the proxy's\n * own `/v1/` detection routes it; responses, including SSE, stream as-is.\n */\nexport function toNextRouteHandlers(handler: WebHandler): NextRouteHandlers {\n  // Next calls route handlers with (request, context); only the request matters.\n  const route: WebHandler = async (request) => await handler(request);\n  return { GET: route, POST: route, PUT: route, PATCH: route, DELETE: route };\n}\n\n/**\n * `createSessionProxyHandler` as Next.js App Router route handlers, for\n * `app/<mount>/[...path]/route.ts`.\n */\nexport function createSessionProxyRoute(\n  target: Parameters<typeof createSessionProxyHandler>[0],\n  options: SessionProxyHandlerOptions,\n): NextRouteHandlers {\n  return toNextRouteHandlers(createSessionProxyHandler(target, options));\n}\n"],"mappings":";;;;;;;;;AA0BO,SAAS,oBAAoB,SAAwC;AAE1E,QAAM,QAAoB,OAAO,YAAY,MAAM,QAAQ,OAAO;AAClE,SAAO,EAAE,KAAK,OAAO,MAAM,OAAO,KAAK,OAAO,OAAO,OAAO,QAAQ,MAAM;AAC5E;AAMO,SAAS,wBACd,QACA,SACmB;AACnB,SAAO,oBAAoB,0BAA0B,QAAQ,OAAO,CAAC;AACvE;","names":[]}

package/dist/allowance-refusal.d.ts

@@ -0,0 +1,2 @@
+/** Browser-safe allowance presentation without exposing the server core. */
+export { allowanceExhaustedMessage, parseAllowanceExhaustedRefusal, } from "@opengeni/contracts/allowance-refusal";

package/dist/allowance-refusal.js

@@ -0,0 +1,50 @@
+// ../contracts/src/allowance-refusal.ts
+var MESSAGE_MAX_UTF8_BYTES = 1024;
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function resetTimestamp(value) {
+  if (value === null) return true;
+  if (typeof value !== "string" || value.length > 64) return false;
+  const parts = /^(\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])T(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.exec(
+    value
+  );
+  if (!parts || !Number.isFinite(Date.parse(value))) return false;
+  const year = Number(parts[1]);
+  const month = Number(parts[2]);
+  const day = Number(parts[3]);
+  const leapYear = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+  const days = [31, leapYear ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+  return day <= days[month - 1];
+}
+function parseAllowanceExhaustedRefusal(value) {
+  const source = record(value);
+  if (source?.code !== "allowance_exhausted") return null;
+  const fields = record(source.details) ?? source;
+  const scope = fields.scope;
+  const subjectId = scope === "member" ? fields.subjectId : void 0;
+  if (typeof source.message !== "string" || scope !== "workspace" && scope !== "member" || !resetTimestamp(fields.resetsAt) || subjectId !== void 0 && (typeof subjectId !== "string" || subjectId.length === 0 || subjectId.length > 1024 || subjectId.includes("\0"))) {
+    return null;
+  }
+  const normalized = source.message.slice(0, MESSAGE_MAX_UTF8_BYTES * 2).replace(/[\u0000-\u001f\u007f]+/g, " ").trim();
+  const bytes = new TextEncoder().encode(normalized.slice(0, MESSAGE_MAX_UTF8_BYTES * 2));
+  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);
+  while (end > 0 && end < bytes.length && (bytes[end] & 192) === 128) end -= 1;
+  return {
+    code: "allowance_exhausted",
+    scope,
+    resetsAt: fields.resetsAt,
+    ...typeof subjectId === "string" ? { subjectId } : {},
+    message: new TextDecoder().decode(bytes.slice(0, end)).trim()
+  };
+}
+function allowanceExhaustedMessage(refusal) {
+  const remedy = refusal.scope === "workspace" ? "The workspace usage allowance is exhausted. An organization administrator or a full-access organization API key can raise the workspace ceiling or add an allowance grant." : "The member usage allowance is exhausted. A workspace administrator or a full-access organization API key can adjust the member ceiling.";
+  const reset = refusal.resetsAt === null ? "This allowance has no automatic reset." : `It resets at ${new Date(refusal.resetsAt).toISOString().slice(0, 16).replace("T", " ")} UTC.`;
+  return `${remedy} ${reset}`;
+}
+export {
+  allowanceExhaustedMessage,
+  parseAllowanceExhaustedRefusal
+};
+//# sourceMappingURL=allowance-refusal.js.map

package/dist/allowance-refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../contracts/src/allowance-refusal.ts"],"sourcesContent":["import type { AllowanceExhaustedRefusal } from \"./usage-allowances\";\n\nconst MESSAGE_MAX_UTF8_BYTES = 1_024;\n\nfunction record(value: unknown): Record<string, unknown> | null {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : null;\n}\n\n/** Mirror the canonical offset datetime's calendar/time bounds without loading\n * the schema runtime into synchronous browser/React Native session projection.\n * Contract-parity tests guard this deliberately small, bounded wire leaf.\n */\nfunction resetTimestamp(value: unknown): value is string | null {\n  if (value === null) return true;\n  if (typeof value !== \"string\" || value.length > 64) return false;\n  const parts =\n    /^(\\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\\d|3[01])T(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|[+-](?:[01]\\d|2[0-3]):[0-5]\\d)$/.exec(\n      value,\n    );\n  if (!parts || !Number.isFinite(Date.parse(value))) return false;\n  const year = Number(parts[1]);\n  const month = Number(parts[2]);\n  const day = Number(parts[3]);\n  const leapYear = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);\n  const days = [31, leapYear ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];\n  return day <= days[month - 1]!;\n}\n\n/** Select only public refusal fields, including from an API error's details.\n * LimitDecision's allowed:false and transport/SQL diagnostics never cross out.\n */\nexport function parseAllowanceExhaustedRefusal(value: unknown): AllowanceExhaustedRefusal | null {\n  const source = record(value);\n  if (source?.code !== \"allowance_exhausted\") return null;\n  const fields = record(source.details) ?? source;\n  const scope = fields.scope;\n  const subjectId = scope === \"member\" ? fields.subjectId : undefined;\n  if (\n    typeof source.message !== \"string\" ||\n    (scope !== \"workspace\" && scope !== \"member\") ||\n    !resetTimestamp(fields.resetsAt) ||\n    (subjectId !== undefined &&\n      (typeof subjectId !== \"string\" ||\n        subjectId.length === 0 ||\n        subjectId.length > 1_024 ||\n        subjectId.includes(\"\\0\")))\n  ) {\n    return null;\n  }\n  const normalized = source.message\n    .slice(0, MESSAGE_MAX_UTF8_BYTES * 2)\n    .replace(/[\\u0000-\\u001f\\u007f]+/g, \" \")\n    .trim();\n  const bytes = new TextEncoder().encode(normalized.slice(0, MESSAGE_MAX_UTF8_BYTES * 2));\n  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);\n  while (end > 0 && end < bytes.length && (bytes[end]! & 0xc0) === 0x80) end -= 1;\n  return {\n    code: \"allowance_exhausted\",\n    scope,\n    resetsAt: fields.resetsAt,\n    ...(typeof subjectId === \"string\" ? { subjectId } : {}),\n    message: new TextDecoder().decode(bytes.slice(0, end)).trim(),\n  };\n}\n\n/** Bounded, fixed remedies: a ceiling is not an exhausted billing source.\n * Never interpolate arbitrary exception prose or a member identifier.\n */\nexport function allowanceExhaustedMessage(refusal: AllowanceExhaustedRefusal): string {\n  const remedy =\n    refusal.scope === \"workspace\"\n      ? \"The workspace usage allowance is exhausted. An organization administrator or a full-access organization API key can raise the workspace ceiling or add an allowance grant.\"\n      : \"The member usage allowance is exhausted. A workspace administrator or a full-access organization API key can adjust the member ceiling.\";\n  const reset =\n    refusal.resetsAt === null\n      ? \"This allowance has no automatic reset.\"\n      : `It resets at ${new Date(refusal.resetsAt).toISOString().slice(0, 16).replace(\"T\", \" \")} UTC.`;\n  return `${remedy} ${reset}`;\n}\n"],"mappings":";AAEA,IAAM,yBAAyB;AAE/B,SAAS,OAAO,OAAgD;AAC9D,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AACN;AAMA,SAAS,eAAe,OAAwC;AAC9D,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAI,QAAO;AAC3D,QAAM,QACJ,sIAAsI;AAAA,IACpI;AAAA,EACF;AACF,MAAI,CAAC,SAAS,CAAC,OAAO,SAAS,KAAK,MAAM,KAAK,CAAC,EAAG,QAAO;AAC1D,QAAM,OAAO,OAAO,MAAM,CAAC,CAAC;AAC5B,QAAM,QAAQ,OAAO,MAAM,CAAC,CAAC;AAC7B,QAAM,MAAM,OAAO,MAAM,CAAC,CAAC;AAC3B,QAAM,WAAW,OAAO,MAAM,MAAM,OAAO,QAAQ,KAAK,OAAO,QAAQ;AACvE,QAAM,OAAO,CAAC,IAAI,WAAW,KAAK,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE;AAC5E,SAAO,OAAO,KAAK,QAAQ,CAAC;AAC9B;AAKO,SAAS,+BAA+B,OAAkD;AAC/F,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,QAAQ,SAAS,sBAAuB,QAAO;AACnD,QAAM,SAAS,OAAO,OAAO,OAAO,KAAK;AACzC,QAAM,QAAQ,OAAO;AACrB,QAAM,YAAY,UAAU,WAAW,OAAO,YAAY;AAC1D,MACE,OAAO,OAAO,YAAY,YACzB,UAAU,eAAe,UAAU,YACpC,CAAC,eAAe,OAAO,QAAQ,KAC9B,cAAc,WACZ,OAAO,cAAc,YACpB,UAAU,WAAW,KACrB,UAAU,SAAS,QACnB,UAAU,SAAS,IAAI,IAC3B;AACA,WAAO;AAAA,EACT;AACA,QAAM,aAAa,OAAO,QACvB,MAAM,GAAG,yBAAyB,CAAC,EACnC,QAAQ,2BAA2B,GAAG,EACtC,KAAK;AACR,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,WAAW,MAAM,GAAG,yBAAyB,CAAC,CAAC;AACtF,MAAI,MAAM,KAAK,IAAI,MAAM,QAAQ,sBAAsB;AACvD,SAAO,MAAM,KAAK,MAAM,MAAM,WAAW,MAAM,GAAG,IAAK,SAAU,IAAM,QAAO;AAC9E,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,UAAU,OAAO;AAAA,IACjB,GAAI,OAAO,cAAc,WAAW,EAAE,UAAU,IAAI,CAAC;AAAA,IACrD,SAAS,IAAI,YAAY,EAAE,OAAO,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,KAAK;AAAA,EAC9D;AACF;AAKO,SAAS,0BAA0B,SAA4C;AACpF,QAAM,SACJ,QAAQ,UAAU,cACd,+KACA;AACN,QAAM,QACJ,QAAQ,aAAa,OACjB,2CACA,gBAAgB,IAAI,KAAK,QAAQ,QAAQ,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,EAAE,QAAQ,KAAK,GAAG,CAAC;AAC7F,SAAO,GAAG,MAAM,IAAI,KAAK;AAC3B;","names":[]}

package/dist/artifacts.js

@@ -1,12 +1,12 @@
 import {
   OpenGeniClient
-} from "./chunk-7HIA2AI3.js";
-import "./chunk-HGGK2BW2.js";
-import "./chunk-QSCQUITU.js";
-import "./chunk-BX5ETUM7.js";
-import "./chunk-MV2PNVU4.js";
-import "./chunk-FLOL2IES.js";
-import "./chunk-OO5LPTO7.js";
+} from "./chunk-ASMIDUEA.js";
+import "./chunk-PH56JDUM.js";
+import "./chunk-ZKKWTOIZ.js";
+import "./chunk-7GR6TOEV.js";
+import "./chunk-7WJL2ZWY.js";
+import "./chunk-CKOUDEOS.js";
+import "./chunk-LQCTDGG6.js";
 export {
   OpenGeniClient
 };

package/dist/browser.d.ts

@@ -4,7 +4,7 @@ export type { SessionMessageSearchRequest, SessionMessageSearchMatch, SessionMes
 export { OpenGeniToolCallError, OpenGeniToolReapprovalRequiredError, OpenGeniToolsClient, } from "./tools.js";
 export type { OpenGeniGeneratedTools, OpenGeniDynamicToolNode, OpenGeniToolCallOptions, OpenGeniToolFunction, OpenGeniToolsFacade, OpenGeniWorkspaceTools, } from "./tools.js";
 export type { FetchLike, FetchResponse, GetSessionOptions, OpenGeniClientOptions, OpenGeniRequestOptions, SendMessageInput, SteerMessageResult, TranscribeAudioInput, WorkspaceControlEventPage, } from "./client.js";
-export { OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniSecureContextRequiredError, OpenGeniSessionListCursorError, OpenGeniStreamError, isRetryableStreamError, } from "./errors.js";
+export { OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniSetupError, OpenGeniAllowanceExhaustedError, OpenGeniSecureContextRequiredError, OpenGeniSessionListCursorError, OpenGeniStreamError, isRetryableStreamError, } from "./errors.js";
 export type { OpenGeniSecureContextRequiredReason } from "./errors.js";
 export { resolveWorkspaceVoiceInputEnabled } from "./transcription.js";
 export { OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION } from "./types.js";

package/dist/browser.js

@@ -5,32 +5,36 @@ import {
   OpenGeniToolCallError,
   OpenGeniToolReapprovalRequiredError,
   OpenGeniToolsClient
-} from "./chunk-FMLDFJ2Q.js";
+} from "./chunk-YTJK64EV.js";
 import {
   OpenGeniClient
-} from "./chunk-QSCQUITU.js";
-import "./chunk-BX5ETUM7.js";
+} from "./chunk-ZKKWTOIZ.js";
+import "./chunk-7GR6TOEV.js";
 import {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION
-} from "./chunk-MV2PNVU4.js";
-import "./chunk-FLOL2IES.js";
+} from "./chunk-7WJL2ZWY.js";
+import "./chunk-CKOUDEOS.js";
 import {
+  OpenGeniAllowanceExhaustedError,
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
   OpenGeniSecureContextRequiredError,
   OpenGeniSessionListCursorError,
+  OpenGeniSetupError,
   OpenGeniStreamError,
   isRetryableStreamError
-} from "./chunk-OO5LPTO7.js";
+} from "./chunk-LQCTDGG6.js";
 export {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION,
+  OpenGeniAllowanceExhaustedError,
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
   OpenGeniClient as OpenGeniBrowserClient,
   OpenGeniSecureContextRequiredError,
   OpenGeniSessionListCursorError,
+  OpenGeniSetupError,
   OpenGeniStreamError,
   OpenGeniToolCallError,
   OpenGeniToolReapprovalRequiredError,

package/dist/chat/fold.d.ts

@@ -39,6 +39,7 @@ export declare class ChatTurnFold {
     turnId: string | null;
     pending: ChatPending | null;
     failure: SessionEvent | null;
+    private emptyFinalReply;
     private readonly segments;
     private readonly openTools;
     constructor(workspaceId: string, sessionId: string, expectedTurnId: string | null);

package/dist/chat/index.d.ts

@@ -1,3 +1,5 @@
+export type { Chats } from "../chats.js";
+export { OpenGeniSetupError } from "../errors.js";
 export { Chat, DEFAULT_CHAT_SOURCE, DEFAULT_OPENGENI_BASE_URL, IMPORTED_HISTORY_MAX_CHARS, OpenGeni, formatImportedHistory, } from "./opengeni.js";
 export { OpenGeniChatError, type ChatAgentAccess, type ChatChunk, type ChatImportedMessage, type ChatMemory, type ChatMessage, type ChatOptions, type ChatPending, type ChatReply, type ChatReplyStatus, type ChatRespondInput, type ChatSendOptions, type ChatSessionListOptions, type ChatSnapshot, type ChatTarget, type ChatToolStatus, type OpenGeniOptions, } from "./types.js";
 export { CHAT_SESSION_NAMESPACE, chatIdempotencyKey, chatIdentityName, chatSessionId, uuidV5, type ChatUserLabel, } from "./ids.js";