@orchestraworks/cli 0.5.2 → 0.5.4

package/dist/generated/cli-dispatch.js

@@ -291,6 +291,10 @@ export const CLI_DISPATCH = {
         createWorkItemActivityRequest: bind(args.body),
         xOrganizationId: args.organizationId,
     }),
+    declineInvitation: (apis, args) => apis.organizationInvitations.declineInvitationRaw({
+        id: bind(args.pathParams["id"]),
+        xOrganizationId: args.organizationId,
+    }),
     deleteAgent: (apis, args) => apis.agents.deleteAgentRaw({
         id: bind(args.pathParams["id"]),
         xOrganizationId: args.organizationId,
@@ -718,6 +722,11 @@ export const CLI_DISPATCH = {
         projectId: bind(args.query["projectId"]),
         xOrganizationId: args.organizationId,
     }),
+    listCallerInvitations: (apis, args) => apis.organizationInvitations.listCallerInvitationsRaw({
+        page: bind(args.query["page"]),
+        limit: bind(args.query["limit"]),
+        xOrganizationId: args.organizationId,
+    }),
     listComments: (apis, args) => apis.artifacts.listCommentsRaw({
         id: bind(args.pathParams["id"]),
         page: bind(args.query["page"]),

package/dist/generated/managed-skills.d.ts

@@ -0,0 +1,2 @@
+/** The ids of the skills the platform manages, which the kit adds to each agent's skills at synth. */
+export declare const MANAGED_SKILL_IDS: readonly string[];

package/dist/generated/managed-skills.js

@@ -0,0 +1,18 @@
+// GENERATED — do not edit; run node scripts/generate-catalog-skills.mjs
+//
+// Source: PlatformSkillDefinition.declared in the platform, the skills every stack serves.
+/** The ids of the skills the platform manages, which the kit adds to each agent's skills at synth. */
+export const MANAGED_SKILL_IDS = Object.freeze([
+    "skill_artifacts",
+    "skill_code-review",
+    "skill_visualize",
+    "skill_assessment",
+    "skill_bug-fixing",
+    "skill_feature-development",
+    "skill_progress-report",
+    "skill_incident-response",
+    "skill_migrations",
+    "skill_code-quality",
+    "skill_hardening",
+    "skill_data-analytics",
+]);

package/dist/index.d.ts

@@ -29,7 +29,7 @@ export type { GatewayKeyProps } from "./constructs/gateway-key.js";
 export { ModelProviderKey } from "./constructs/model-provider-key.js";
 export type { ModelProviderKeyProps } from "./constructs/model-provider-key.js";
 export { EgressPolicy, Environment, basic, bearer, header, inject, } from "./constructs/environment.js";
-export type { AllowConnectionOptions, DenyRuleOptions, DiskMount, EnvironmentProps, IngressEndpoint, PlatformSpec, ResourceSpec, RouteModelsViaGatewayOptions, VolumeMount, } from "./constructs/environment.js";
+export type { AllowConnectionOptions, DenyRuleOptions, DiskMount, EnvironmentHook, EnvironmentHooks, EnvironmentProps, IngressEndpoint, PlatformSpec, ResourceSpec, RouteModelsViaGatewayOptions, VolumeMount, } from "./constructs/environment.js";
 export { egressPreset } from "./constructs/egress-preset.js";
 export type { EgressRuleBundle, PresetRule } from "./constructs/egress-preset.js";
 export { Agent } from "./constructs/agent.js";

package/docs/REFERENCE.md

@@ -188,7 +188,7 @@ fitting a starter to your codebase.
 ### Start from another starter: `orchestra fdk init --template <name>`
 
 The kit carries more than one starter. `engineering-team` is a factory for one engineering team: a Manager
-Agent and Engineer Agents sm, md and lg, their machines, and four pipelines. A starter other than `bug-fix`
+Agent and Engineer Agents sm, md and lg, their machines, and three pipelines. A starter other than `bug-fix`
 brings its own `package.json`, so run it in a new, empty folder, with nothing installed:
 
 ```bash
@@ -1109,6 +1109,25 @@ and polls until the grant activates — you finish it in your own signed-in brow
 what the platform's authenticated callback requires. `--timeout 0` mints and prints without waiting. Grants
 carry lifecycle metadata only; no surface ever reads the credential back.
 
+### Check a Launcher (`orchestra compute-providers check`)
+
+A Launcher is the program that runs machines in your own cloud. It polls the platform once a second
+for its compute provider record. When it does not run machines, run this command first:
+
+```bash
+orchestra compute-providers check azure-east
+```
+
+The command reads the record once. It shows the record's name and state (`connected`, `silent` or
+`never_connected`), the last poll time and its age, the protocol version and any protocol refusal,
+the health counts (orders held, cloud errors, reports pending), and each target with `passed` or
+the reason the platform refused it. A target whose self-check failed shows the cloud's message.
+
+The exit code is 0 when the Launcher polls, its protocol was accepted, and every target passed.
+Otherwise it is 1, and stderr has one line that names each failure, so a script can wait on it.
+`--output json` prints the record as the platform returns it. A managed provider has no Launcher,
+so the command exits 0.
+
 ### Chat presence (Slack and Microsoft Teams)
 
 There is **no chat construct** — the `Channel` construct was removed, because the orchestra convention is
@@ -1244,6 +1263,7 @@ every derived slug (factory name + construct path) must stay ≤ 60 chars, so ke
 | **401 / 403** | The token lacks access to the resolved org, or it expired and could not be renewed. A profile from a browser `login` renews itself silently, so a 401 that survives that means the renewal credential is gone too — re-run `orchestra auth login`. A pasted or exported token has no renewal path at all: replace it, or fix `ORCHESTRA_ORGANIZATION_ID`. |
 | **"the platform rejected the stored refresh credential… Run `orchestra auth login` to sign in again."** | The stored renewal credential was refused (revoked, expired, or a sibling process already rotated past it). Nothing on disk is changed by that failure, so re-running `orchestra auth login` is the whole remedy. A *retryable* failure — the platform unreachable, timing out, or answering `temporarily_unavailable` — reports itself as such and never tells you to log in again; run the command again. |
 | **`ERR_PACKAGE_PATH_NOT_EXPORTED` at first import** | The factory program's own `package.json` is missing `"type": "module"` (a fresh `npm init -y` defaults to CommonJS). orchestra is ESM-only — its `exports` map defines only an `import` condition — so add `"type": "module"` to the factory `package.json` (see §4). |
+| **A Launcher runs no machines** | Run `orchestra compute-providers check <id-or-slug>` (§7). It names what failed: no poll for 60 seconds, a refused protocol version, or a target the platform refused, with the reason. |
 | **Import 404** | The referenced slug/id isn't visible in the resolved org. Check the org and the reference. |
 | **"refusing to send secrets over plain HTTP to non-loopback host …"** | A secret write needs TLS. Use an `https://` base URL; only loopback (`127.0.0.1`/`localhost`/`::1`) dev stacks may use `http://`. |
 | **`tsc` error on `target: Targets.…({ binding })`** | The binding is scoped to events the trigger does not fully select (its field is absent from one payload shape). Split into per-shape triggers sharing one binding constant and one anchor (the composition pattern), or author a binding valid for the whole selection. |

package/node_modules/@orchestraworks/client/dist/apis/OrganizationInvitationsApi.d.ts

@@ -22,6 +22,10 @@ export interface CreateInvitationRequest {
     createOrganizationInvitationRequest: CreateOrganizationInvitationRequest;
     xOrganizationId?: string;
 }
+export interface DeclineInvitationRequest {
+    id: string;
+    xOrganizationId?: string;
+}
 export interface DeleteInvitationRequest {
     id: string;
     xOrganizationId?: string;
@@ -30,6 +34,11 @@ export interface GetInvitationRequest {
     id: string;
     xOrganizationId?: string;
 }
+export interface ListCallerInvitationsRequest {
+    page?: number;
+    limit?: number;
+    xOrganizationId?: string;
+}
 export interface ListInvitationsRequest {
     organizationId: string;
     page?: number;
@@ -65,6 +74,16 @@ export declare class OrganizationInvitationsApi extends runtime.BaseAPI {
     /**
      */
     createInvitation(requestParameters: CreateInvitationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OrganizationInvitation>;
+    /**
+     * Creates request options for declineInvitation without sending the request
+     */
+    declineInvitationRequestOpts(requestParameters: DeclineInvitationRequest): Promise<runtime.RequestOpts>;
+    /**
+     */
+    declineInvitationRaw(requestParameters: DeclineInvitationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OrganizationInvitation>>;
+    /**
+     */
+    declineInvitation(requestParameters: DeclineInvitationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OrganizationInvitation>;
     /**
      * Creates request options for deleteInvitation without sending the request
      */
@@ -85,6 +104,16 @@ export declare class OrganizationInvitationsApi extends runtime.BaseAPI {
     /**
      */
     getInvitation(requestParameters: GetInvitationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OrganizationInvitation>;
+    /**
+     * Creates request options for listCallerInvitations without sending the request
+     */
+    listCallerInvitationsRequestOpts(requestParameters: ListCallerInvitationsRequest): Promise<runtime.RequestOpts>;
+    /**
+     */
+    listCallerInvitationsRaw(requestParameters: ListCallerInvitationsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PageOrganizationInvitation>>;
+    /**
+     */
+    listCallerInvitations(requestParameters?: ListCallerInvitationsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PageOrganizationInvitation>;
     /**
      * Creates request options for listInvitations without sending the request
      */

package/node_modules/@orchestraworks/client/dist/apis/OrganizationInvitationsApi.js

@@ -127,6 +127,53 @@ class OrganizationInvitationsApi extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * Creates request options for declineInvitation without sending the request
+     */
+    declineInvitationRequestOpts(requestParameters) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['id'] == null) {
+                throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling declineInvitation().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            if (requestParameters['xOrganizationId'] != null) {
+                headerParameters['X-Organization-Id'] = String(requestParameters['xOrganizationId']);
+            }
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("bearerAuth", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            let urlPath = `/organization-invitations/{id}/decline`;
+            urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+            return {
+                path: urlPath,
+                method: 'POST',
+                headers: headerParameters,
+                query: queryParameters,
+            };
+        });
+    }
+    /**
+     */
+    declineInvitationRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const requestOptions = yield this.declineInvitationRequestOpts(requestParameters);
+            const response = yield this.request(requestOptions, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => (0, OrganizationInvitation_1.OrganizationInvitationFromJSON)(jsonValue));
+        });
+    }
+    /**
+     */
+    declineInvitation(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.declineInvitationRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * Creates request options for deleteInvitation without sending the request
      */
@@ -220,6 +267,55 @@ class OrganizationInvitationsApi extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * Creates request options for listCallerInvitations without sending the request
+     */
+    listCallerInvitationsRequestOpts(requestParameters) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const queryParameters = {};
+            if (requestParameters['page'] != null) {
+                queryParameters['page'] = requestParameters['page'];
+            }
+            if (requestParameters['limit'] != null) {
+                queryParameters['limit'] = requestParameters['limit'];
+            }
+            const headerParameters = {};
+            if (requestParameters['xOrganizationId'] != null) {
+                headerParameters['X-Organization-Id'] = String(requestParameters['xOrganizationId']);
+            }
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("bearerAuth", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            let urlPath = `/me/invitations`;
+            return {
+                path: urlPath,
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            };
+        });
+    }
+    /**
+     */
+    listCallerInvitationsRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const requestOptions = yield this.listCallerInvitationsRequestOpts(requestParameters);
+            const response = yield this.request(requestOptions, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => (0, PageOrganizationInvitation_1.PageOrganizationInvitationFromJSON)(jsonValue));
+        });
+    }
+    /**
+     */
+    listCallerInvitations() {
+        return __awaiter(this, arguments, void 0, function* (requestParameters = {}, initOverrides) {
+            const response = yield this.listCallerInvitationsRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * Creates request options for listInvitations without sending the request
      */

package/node_modules/@orchestraworks/client/dist/esm/apis/OrganizationInvitationsApi.d.ts

@@ -22,6 +22,10 @@ export interface CreateInvitationRequest {
     createOrganizationInvitationRequest: CreateOrganizationInvitationRequest;
     xOrganizationId?: string;
 }
+export interface DeclineInvitationRequest {
+    id: string;
+    xOrganizationId?: string;
+}
 export interface DeleteInvitationRequest {
     id: string;
     xOrganizationId?: string;
@@ -30,6 +34,11 @@ export interface GetInvitationRequest {
     id: string;
     xOrganizationId?: string;
 }
+export interface ListCallerInvitationsRequest {
+    page?: number;
+    limit?: number;
+    xOrganizationId?: string;
+}
 export interface ListInvitationsRequest {
     organizationId: string;
     page?: number;
@@ -65,6 +74,16 @@ export declare class OrganizationInvitationsApi extends runtime.BaseAPI {
     /**
      */
     createInvitation(requestParameters: CreateInvitationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OrganizationInvitation>;
+    /**
+     * Creates request options for declineInvitation without sending the request
+     */
+    declineInvitationRequestOpts(requestParameters: DeclineInvitationRequest): Promise<runtime.RequestOpts>;
+    /**
+     */
+    declineInvitationRaw(requestParameters: DeclineInvitationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OrganizationInvitation>>;
+    /**
+     */
+    declineInvitation(requestParameters: DeclineInvitationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OrganizationInvitation>;
     /**
      * Creates request options for deleteInvitation without sending the request
      */
@@ -85,6 +104,16 @@ export declare class OrganizationInvitationsApi extends runtime.BaseAPI {
     /**
      */
     getInvitation(requestParameters: GetInvitationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OrganizationInvitation>;
+    /**
+     * Creates request options for listCallerInvitations without sending the request
+     */
+    listCallerInvitationsRequestOpts(requestParameters: ListCallerInvitationsRequest): Promise<runtime.RequestOpts>;
+    /**
+     */
+    listCallerInvitationsRaw(requestParameters: ListCallerInvitationsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PageOrganizationInvitation>>;
+    /**
+     */
+    listCallerInvitations(requestParameters?: ListCallerInvitationsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PageOrganizationInvitation>;
     /**
      * Creates request options for listInvitations without sending the request
      */

package/node_modules/@orchestraworks/client/dist/esm/apis/OrganizationInvitationsApi.js

@@ -124,6 +124,53 @@ export class OrganizationInvitationsApi extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * Creates request options for declineInvitation without sending the request
+     */
+    declineInvitationRequestOpts(requestParameters) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['id'] == null) {
+                throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling declineInvitation().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            if (requestParameters['xOrganizationId'] != null) {
+                headerParameters['X-Organization-Id'] = String(requestParameters['xOrganizationId']);
+            }
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("bearerAuth", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            let urlPath = `/organization-invitations/{id}/decline`;
+            urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+            return {
+                path: urlPath,
+                method: 'POST',
+                headers: headerParameters,
+                query: queryParameters,
+            };
+        });
+    }
+    /**
+     */
+    declineInvitationRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const requestOptions = yield this.declineInvitationRequestOpts(requestParameters);
+            const response = yield this.request(requestOptions, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => OrganizationInvitationFromJSON(jsonValue));
+        });
+    }
+    /**
+     */
+    declineInvitation(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.declineInvitationRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * Creates request options for deleteInvitation without sending the request
      */
@@ -217,6 +264,55 @@ export class OrganizationInvitationsApi extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * Creates request options for listCallerInvitations without sending the request
+     */
+    listCallerInvitationsRequestOpts(requestParameters) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const queryParameters = {};
+            if (requestParameters['page'] != null) {
+                queryParameters['page'] = requestParameters['page'];
+            }
+            if (requestParameters['limit'] != null) {
+                queryParameters['limit'] = requestParameters['limit'];
+            }
+            const headerParameters = {};
+            if (requestParameters['xOrganizationId'] != null) {
+                headerParameters['X-Organization-Id'] = String(requestParameters['xOrganizationId']);
+            }
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("bearerAuth", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            let urlPath = `/me/invitations`;
+            return {
+                path: urlPath,
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            };
+        });
+    }
+    /**
+     */
+    listCallerInvitationsRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const requestOptions = yield this.listCallerInvitationsRequestOpts(requestParameters);
+            const response = yield this.request(requestOptions, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => PageOrganizationInvitationFromJSON(jsonValue));
+        });
+    }
+    /**
+     */
+    listCallerInvitations() {
+        return __awaiter(this, arguments, void 0, function* (requestParameters = {}, initOverrides) {
+            const response = yield this.listCallerInvitationsRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * Creates request options for listInvitations without sending the request
      */

package/node_modules/@orchestraworks/client/dist/esm/models/ComputeProvider.d.ts

@@ -20,7 +20,7 @@ import type { ComputeProviderHealth } from './ComputeProviderHealth';
  */
 export interface ComputeProvider {
     /**
-     * Compute provider id: a self-hosted record's TypeID, or a managed provider's key
+     * Compute provider id: a self-hosted record's TypeID, or cprov_orchestra for the managed provider
      * @type {string}
      * @memberof ComputeProvider
      */
@@ -32,7 +32,7 @@ export interface ComputeProvider {
      */
     kind: ComputeProviderKindEnum;
     /**
-     * A self-hosted record's slug, fixed at create
+     * A self-hosted record's slug, fixed at create, or orchestra for the managed provider
      * @type {string}
      * @memberof ComputeProvider
      */
@@ -92,7 +92,7 @@ export interface ComputeProvider {
      */
     state?: ComputeProviderStateEnum;
     /**
-     * The operating systems and architectures a managed provider runs
+     * The operating systems and architectures the managed provider runs
      * @type {Array<EnvironmentPlatform>}
      * @memberof ComputeProvider
      */

package/node_modules/@orchestraworks/client/dist/esm/models/CreateEnvironmentRequest.d.ts

@@ -10,6 +10,7 @@
  * Do not edit the class manually.
  */
 import type { EnvironmentIngressPolicy } from './EnvironmentIngressPolicy';
+import type { EnvironmentHooks } from './EnvironmentHooks';
 import type { EnvironmentPlatformRequest } from './EnvironmentPlatformRequest';
 import type { EnvironmentEgressPolicy } from './EnvironmentEgressPolicy';
 import type { EnvironmentProvisionSpecRequest } from './EnvironmentProvisionSpecRequest';
@@ -67,6 +68,18 @@ export interface CreateEnvironmentRequest {
      * @memberof CreateEnvironmentRequest
      */
     projectId?: string;
+    /**
+     * The absolute folder every conversation's agent starts in, on every kind: a path starting with / on linux and macos, and a drive or UNC path on windows, at most 1024 characters. A machine keeps the value it was created with. The worker creates the folder when it is missing, owned by the account the agent runs as, and an agent placement whose folder cannot be created or entered fails. Absent, the agent starts in the worker's own folder for its harness. An empty value declares none.
+     * @type {string}
+     * @memberof CreateEnvironmentRequest
+     */
+    workingDirectory?: string;
+    /**
+     * Scripts the worker runs at points of a machine's and an agent's life. onStartMachine and onStartAgent are built; onStartSession, onStopSession, onStopAgent and onStopMachine are reserved.
+     * @type {EnvironmentHooks}
+     * @memberof CreateEnvironmentRequest
+     */
+    hooks?: EnvironmentHooks;
     /**
      * Labels: the customer's key-to-value tags; the platform reads no key
      * @type {{ [key: string]: string; }}

package/node_modules/@orchestraworks/client/dist/esm/models/CreateEnvironmentRequest.js

@@ -12,6 +12,7 @@
  * Do not edit the class manually.
  */
 import { EnvironmentIngressPolicyFromJSON, EnvironmentIngressPolicyToJSON, } from './EnvironmentIngressPolicy';
+import { EnvironmentHooksFromJSON, EnvironmentHooksToJSON, } from './EnvironmentHooks';
 import { EnvironmentPlatformRequestFromJSON, EnvironmentPlatformRequestToJSON, } from './EnvironmentPlatformRequest';
 import { EnvironmentEgressPolicyFromJSON, EnvironmentEgressPolicyToJSON, } from './EnvironmentEgressPolicy';
 import { EnvironmentProvisionSpecRequestFromJSON, EnvironmentProvisionSpecRequestToJSON, } from './EnvironmentProvisionSpecRequest';
@@ -46,6 +47,8 @@ export function CreateEnvironmentRequestFromJSONTyped(json, ignoreDiscriminator)
         'kind': json['kind'] == null ? undefined : json['kind'],
         'provisionSpec': json['provisionSpec'] == null ? undefined : EnvironmentProvisionSpecRequestFromJSON(json['provisionSpec']),
         'projectId': json['projectId'] == null ? undefined : json['projectId'],
+        'workingDirectory': json['workingDirectory'] == null ? undefined : json['workingDirectory'],
+        'hooks': json['hooks'] == null ? undefined : EnvironmentHooksFromJSON(json['hooks']),
         'labels': json['labels'] == null ? undefined : json['labels'],
     };
 }
@@ -65,6 +68,8 @@ export function CreateEnvironmentRequestToJSONTyped(value, ignoreDiscriminator =
         'kind': value['kind'],
         'provisionSpec': EnvironmentProvisionSpecRequestToJSON(value['provisionSpec']),
         'projectId': value['projectId'],
+        'workingDirectory': value['workingDirectory'],
+        'hooks': EnvironmentHooksToJSON(value['hooks']),
         'labels': value['labels'],
     };
 }

package/node_modules/@orchestraworks/client/dist/esm/models/CreateOrganizationInvitationRequest.d.ts

@@ -29,13 +29,13 @@ export interface CreateOrganizationInvitationRequest {
      */
     email: string;
     /**
-     * IAM role assignments to grant on the membership minted at acceptance, each with its optional project scope — the sole role grant surface (max 16)
+     * IAM role assignments to grant on the membership minted at acceptance, each with its optional project scope — the sole role grant surface (max 16). Empty grants the managed `factory-developer` role.
      * @type {Array<RoleAssignment>}
      * @memberof CreateOrganizationInvitationRequest
      */
     roleAssignments?: Array<RoleAssignment>;
     /**
-     * Invitation expiration timestamp
+     * Invitation expiration timestamp, 1 to 30 days ahead. Defaults to 7 days ahead.
      * @type {Date}
      * @memberof CreateOrganizationInvitationRequest
      */

package/node_modules/@orchestraworks/client/dist/esm/models/Environment.d.ts

@@ -11,6 +11,7 @@
  */
 import type { EnvironmentIngressPolicy } from './EnvironmentIngressPolicy';
 import type { EnvironmentPlatformWithRuntime } from './EnvironmentPlatformWithRuntime';
+import type { EnvironmentHooks } from './EnvironmentHooks';
 import type { EnvironmentEgressPolicy } from './EnvironmentEgressPolicy';
 import type { EnvironmentProvisionSpec } from './EnvironmentProvisionSpec';
 /**
@@ -79,6 +80,18 @@ export interface Environment {
      * @memberof Environment
      */
     provisionSpec?: EnvironmentProvisionSpec;
+    /**
+     * The absolute folder every conversation's agent starts in, on every kind: a path starting with / on linux and macos, and a drive or UNC path on windows, at most 1024 characters. A machine keeps the value it was created with. The worker creates the folder when it is missing, owned by the account the agent runs as, and an agent placement whose folder cannot be created or entered fails. Absent, the agent starts in the worker's own folder for its harness.
+     * @type {string}
+     * @memberof Environment
+     */
+    workingDirectory?: string;
+    /**
+     * Scripts the worker runs at points of a machine's and an agent's life. onStartMachine and onStartAgent are built; onStartSession, onStopSession, onStopAgent and onStopMachine are reserved.
+     * @type {EnvironmentHooks}
+     * @memberof Environment
+     */
+    hooks?: EnvironmentHooks;
     /**
      * Creation timestamp
      * @type {Date}

package/node_modules/@orchestraworks/client/dist/esm/models/Environment.js

@@ -13,6 +13,7 @@
  */
 import { EnvironmentIngressPolicyFromJSON, EnvironmentIngressPolicyToJSON, } from './EnvironmentIngressPolicy';
 import { EnvironmentPlatformWithRuntimeFromJSON, EnvironmentPlatformWithRuntimeToJSON, } from './EnvironmentPlatformWithRuntime';
+import { EnvironmentHooksFromJSON, EnvironmentHooksToJSON, } from './EnvironmentHooks';
 import { EnvironmentEgressPolicyFromJSON, EnvironmentEgressPolicyToJSON, } from './EnvironmentEgressPolicy';
 import { EnvironmentProvisionSpecFromJSON, EnvironmentProvisionSpecToJSON, } from './EnvironmentProvisionSpec';
 /**
@@ -66,6 +67,8 @@ export function EnvironmentFromJSONTyped(json, ignoreDiscriminator) {
         'ingressPolicy': json['ingressPolicy'] == null ? undefined : EnvironmentIngressPolicyFromJSON(json['ingressPolicy']),
         'kind': json['kind'],
         'provisionSpec': json['provisionSpec'] == null ? undefined : EnvironmentProvisionSpecFromJSON(json['provisionSpec']),
+        'workingDirectory': json['workingDirectory'] == null ? undefined : json['workingDirectory'],
+        'hooks': json['hooks'] == null ? undefined : EnvironmentHooksFromJSON(json['hooks']),
         'createdAt': (new Date(json['createdAt'])),
         'updatedAt': (new Date(json['updatedAt'])),
         'labels': json['labels'],
@@ -88,6 +91,8 @@ export function EnvironmentToJSONTyped(value, ignoreDiscriminator = false) {
         'egressPolicy': EnvironmentEgressPolicyToJSON(value['egressPolicy']),
         'ingressPolicy': EnvironmentIngressPolicyToJSON(value['ingressPolicy']),
         'provisionSpec': EnvironmentProvisionSpecToJSON(value['provisionSpec']),
+        'workingDirectory': value['workingDirectory'],
+        'hooks': EnvironmentHooksToJSON(value['hooks']),
         'createdAt': value['createdAt'].toISOString(),
         'updatedAt': value['updatedAt'].toISOString(),
         'labels': value['labels'],

package/node_modules/@orchestraworks/client/dist/esm/models/EnvironmentHook.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Orchestra platform API
+ * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface EnvironmentHook
+ */
+export interface EnvironmentHook {
+    /**
+     * The script's text. Required, at most 64 KiB.
+     * @type {string}
+     * @memberof EnvironmentHook
+     */
+    script: string;
+    /**
+     * How long the script may run, in whole seconds. onStartAgent takes 1 to 240, and absent means 120. onStartMachine takes 1 to 3600, and absent means the deployment's bound, 600 unless it sets another. At the bound the worker kills the script and every process it started.
+     * @type {number}
+     * @memberof EnvironmentHook
+     */
+    timeoutSeconds?: number;
+}
+/**
+ * Check if a given object implements the EnvironmentHook interface.
+ */
+export declare function instanceOfEnvironmentHook(value: object): value is EnvironmentHook;
+export declare function EnvironmentHookFromJSON(json: any): EnvironmentHook;
+export declare function EnvironmentHookFromJSONTyped(json: any, ignoreDiscriminator: boolean): EnvironmentHook;
+export declare function EnvironmentHookToJSON(json: any): EnvironmentHook;
+export declare function EnvironmentHookToJSONTyped(value?: EnvironmentHook | null, ignoreDiscriminator?: boolean): any;