hyperbrane 0.1.2 → 0.2.1

package/dist/upstreams/index.js

@@ -1,7 +1,3 @@
 import anthropic from "./anthropic.js";
 import openai from "./openai.js";
-/**
- * Registered on every gateway whose creator doesn't list its own: a gateway that doesn't know an
- * upstream passes its tokens through to the dimension untouched.
- */
 export const BUILTIN_UPSTREAMS = [anthropic, openai];

package/dist/upstreams/openai.d.ts

@@ -1,7 +1,2 @@
-/**
- * Codex: a ChatGPT plan through `codex login --device-auth`, or an OpenAI API key. Once the gateway
- * holds a sign-in, `codex login --device-auth` in any dimension completes without a browser: the
- * gateway approves the device login and answers the exchange itself.
- */
 declare const _default: import("../portal-gateway/upstream.ts").UpstreamDefinition;
 export default _default;

package/dist/upstreams/openai.js

@@ -1,29 +1,17 @@
-import { defineUpstream } from "../portal-gateway/upstream.js";
-/**
- * Codex: a ChatGPT plan through `codex login --device-auth`, or an OpenAI API key. Once the gateway
- * holds a sign-in, `codex login --device-auth` in any dimension completes without a browser: the
- * gateway approves the device login and answers the exchange itself.
- */
+import { defineUpstream } from "../portal-gateway/api.js";
 export default defineUpstream({
     name: "openai",
     modes: {
         oauth: {
-            // The API (HTTP and websocket) is on chatgpt.com; auth.openai.com is the token endpoint.
             hosts: ["chatgpt.com", "auth.openai.com"],
             present: { header: "authorization", scheme: "Bearer" },
-            // The sign-in exchange is form-encoded, the refresh JSON.
             tokenUrl: "https://auth.openai.com/oauth/token",
-            // codex decodes both JWTs: the access token's exp decides when it refreshes, and the id
-            // token's claims give it the account and plan.
             fakes: {
                 access: { jwt: true },
                 id: { jwt: true },
                 refresh: { prefix: "rt.1." },
             },
-            // Another session token, in the body and again in a header; codex doesn't keep it.
             strip: { fields: ["oai_is"], headers: ["x-oai-is-update"] },
-            // codex polls this until the device login is approved, then exchanges the code it returns
-            // (with the returned verifier, which it doesn't check) at tokenUrl, answered by the gateway.
             answers: [
                 {
                     url: "https://auth.openai.com/api/accounts/deviceauth/token",

package/dist/vendor-types/claude/agent-sdk/bridge.d.ts

@@ -61,17 +61,21 @@ export type BridgeSessionHandle = {
     sendControlCancelRequest(requestId: string): void;
     /**
      * Swap the underlying transport in place with a fresh JWT (and epoch).
-     * Carries the SSE sequence number so the server resumes the stream.
+     * Carries the SSE sequence number so the server resumes the stream, and
+     * hands the old transport's undelivered writes to the new one, including
+     * writes made after the transport died, so this call is also how a host
+     * recovers them after onClose fires.
      * Call this when the poll loop re-dispatches work for the same session
      * with a fresh secret (JWT is 4h; backend mints a new one every dispatch).
      *
      * Throws if `createV2ReplTransport` fails (registerWorker error, etc).
-     * Caller should treat that as a close and drop this handle.
+     * Caller should treat that as a close and drop this handle; the
+     * undelivered writes are dropped with it.
      */
     reconnectTransport(opts: {
         ingressToken: string;
         apiBaseUrl: string;
-        /** Omit to reuse the current transport's epoch (token-refresh reconnect); provide to override. */
+        /** Omit to reuse the current transport's epoch (token-refresh reconnect); provide to override. Pass a fresh one after a 4090. */
         epoch?: number;
     }): Promise<void>;
     /**
@@ -131,6 +135,13 @@ export type AttachBridgeSessionOptions = {
      * not be able to drive it.
      */
     outboundOnly?: boolean;
+    /**
+     * Version of the Claude Code CLI this host runs the session's turns with.
+     * Reported to attaching clients as `claude_code_version` on the initialize
+     * reply so they can gate features before the first turn's `system`/`init`
+     * arrives; omit when unknown and clients wait for that message instead.
+     */
+    claudeCodeVersion?: string;
     /**
      * User message typed on claude.ai. Echoes of outbound writes and
      * re-deliveries of prompts already forwarded are filtered before this
@@ -221,7 +232,11 @@ export type AttachBridgeSessionOptions = {
      * (heartbeat/write auth exhaustion — re-attach with a fresh secret,
      * like 401), 403/404 = permanent SSE HTTP rejection. Transient
      * disconnects (503, network blips) retry indefinitely inside
-     * SSETransport and do NOT fire this.
+     * SSETransport and do NOT fire this. After it fires, the handle keeps
+     * writes it could not deliver: reconnectTransport() hands them to the
+     * rebuilt transport, and close() drops them. After a 4090 the epoch
+     * may be stale: pass one from a fresh /bridge call, since reusing a
+     * stale one closes again.
      */
     onClose?: (code?: number) => void;
 };
@@ -351,6 +366,7 @@ export type CreateSessionFailure = {
     terminal: true;
     reason: 'grouping_rejected' | 'request_rejected' | 'malformed_response';
     status: number;
+    /** The service's own message, unchanged and still untrusted, or undefined. It is passed on only if it is one line of at most 1,024 UTF-16 units, with no control or invisible characters and no whitespace other than single ASCII spaces. */
     detail: string | undefined;
 };
 /**

package/dist/vendor-types/claude/agent-sdk/browser-sdk.d.ts

@@ -89,6 +89,13 @@ type BrowserQueryOptionsBase = {
      * each turn's result. At most one per turn.
      */
     promptSuggestions?: boolean;
+    /**
+     * Dialog kinds (`request_user_dialog` `dialog_kind` values) this consumer's
+     * `onUserDialog` can render, declared on `initialize`. The remote CLI sends
+     * only kinds an attached client declared, so `onUserDialog` alone does not
+     * opt in. A non-empty list without `onUserDialog` throws.
+     */
+    supportedDialogKinds?: string[];
 };
 /**
  * Exactly one of `websocket` | `sse` must be provided. `sse` is the v1alpha2
@@ -182,3 +189,20 @@ export declare function getCcrEvent(query: Query, message: SDKMessage): {
     created_at?: string;
     source?: string;
 } | undefined;
+/**
+ * Closes the event stream of an `sse` query without ending the query. The
+ * stream reopens on `resumeSseStream()` or on the query's next send, its own
+ * answers to earlier requests included. It then replays the durable events
+ * sent meanwhile (or `onCatchUpTruncated` fires). Until then, requests from
+ * the remote session, such as permission prompts, wait unanswered. So do the
+ * query's own requests in flight and sends still waiting for the first
+ * connection. Ephemeral frames and delivery updates sent meanwhile are lost.
+ * Returns false for a WebSocket, closed or suspended query.
+ */
+export declare function suspendSseStream(query: Query): boolean;
+/**
+ * Reopens the event stream that `suspendSseStream()` closed, resuming after
+ * the last event received. Returns false unless `query` is suspended and
+ * still open.
+ */
+export declare function resumeSseStream(query: Query): boolean;

package/dist/vendor-types/claude/agent-sdk/core.d.ts

@@ -1,10 +1,12 @@
 export {
   AbortError,
+  BUILTIN_TOOL_NAMES,
   createSdkMcpServer,
   deleteSession,
   EXIT_REASONS,
   filterEscalatingDefaultMode,
   HOOK_EVENTS,
+  LEGACY_TOOL_NAME_ALIASES,
   ORG_POLICY_LIMIT_PREFIXES,
   query,
   renameSession,

package/dist/vendor-types/claude/agent-sdk/sdk-tools.d.ts

@@ -44,6 +44,7 @@ export type ToolInputSchemas =
   | ScheduleWakeupInput
   | RemoteTriggerInput
   | ShowOnboardingRolePickerInput
+  | OfferChromeSetupInput
   | ReadNotificationsInput
   | MonitorInput
   | ProposeSkillsInput
@@ -84,6 +85,7 @@ export type ToolOutputSchemas =
   | ArtifactOutput
   | RemoteTriggerOutput
   | ShowOnboardingRolePickerOutput
+  | OfferChromeSetupOutput
   | ReadNotificationsOutput
   | ScheduleWakeupOutput
   | MonitorOutput
@@ -131,6 +133,7 @@ export type AgentOutput =
         output_tokens_details?: {
           thinking_tokens?: number | null;
         } | null;
+        fallback_credit?: unknown;
       };
       toolStats?: {
         readCount: number;
@@ -444,6 +447,7 @@ export type ArtifactOutput =
       publishesResetAt?: number;
       contract?: string;
       updated?: boolean;
+      owned?: boolean;
       icon?: string;
       faviconSent?: true;
       iconDropped?: true;
@@ -451,6 +455,7 @@ export type ArtifactOutput =
       seq?: number;
       unchanged?: true;
       liveSubscription?: string;
+      pinned?: boolean;
     }
   | {
       artifacts: {
@@ -461,8 +466,12 @@ export type ArtifactOutput =
         rel?: "mine" | "shared";
         external?: true;
         role?: "editor" | "commenter" | "reader" | "viewer";
+        pinned?: boolean;
       }[];
       truncated?: boolean;
+      total?: number;
+      total_at_least?: true;
+      pins_enabled?: boolean;
       scope?: "shared" | "all";
       external_listed?: true;
     }
@@ -474,7 +483,9 @@ export type ArtifactOutput =
         codeText: string;
         result: string;
         durationMs: number;
+        title?: string;
       };
+      owned?: boolean;
       artifactRead?: {
         slug: string;
         ver?: string;
@@ -555,6 +566,7 @@ export type ArtifactOutput =
       written?: {
         url: string;
       };
+      owned?: boolean;
       asset_upload: {
         id: string;
         url: string;
@@ -568,6 +580,7 @@ export type ArtifactOutput =
       written?: {
         url: string;
       };
+      owned?: boolean;
       asset_uploads: {
         url: string;
         /**
@@ -658,10 +671,19 @@ export type ArtifactOutput =
       written?: {
         url: string;
       };
+      owned?: boolean;
       asset_delete: {
         id: string;
         deleted: boolean;
       };
+    }
+  | {
+      pin: {
+        action: "pin" | "unpin";
+        url: string;
+        pinned: boolean;
+        title?: string;
+      };
     };
 export type ProjectsOutput =
   | {
@@ -764,6 +786,10 @@ export interface AgentInput {
    * Optional model override for this agent. Takes precedence over the agent definition's model frontmatter and the configured default subagent model. If omitted, uses the agent definition's model, else the default (inherits from the parent unless a default subagent model is configured). Ignored for subagent_type: "fork" — forks always inherit the parent model.
    */
   model?: "sonnet" | "opus" | "haiku" | "fable";
+  /**
+   * Reasoning effort for this agent. Set this ONLY when the user, or instructions such as CLAUDE.md or a skill, explicitly ask that this agent or delegated work run at a specific effort level, never on your own judgment; otherwise omit it and the agent runs at its usual effort. Ignored for subagent_type: "fork": a fork runs at your own effort.
+   */
+  effort?: "low" | "medium" | "high" | "xhigh" | "max";
   /**
    * Agents run in the background by default; you will be notified when one completes. Set to false only when your very next action depends on this agent's result and nothing else could usefully happen while it runs — otherwise leave it in the background so the user can hand you other work.
    */
@@ -791,7 +817,7 @@ export interface BashInput {
    */
   command: string;
   /**
-   * Optional timeout in milliseconds (max 600000)
+   * Optional timeout in milliseconds (max 600000 for a foreground command)
    */
   timeout?: number;
   /**
@@ -811,7 +837,7 @@ export interface BashInput {
    */
   description?: string;
   /**
-   * Set to true to run this command in the background.
+   * Set to true to run this command in the background. With it, `timeout` limits how long the command may run in the background before it is stopped (default 1800000 ms, max 7200000 ms).
    */
   run_in_background?: boolean;
   /**
@@ -870,6 +896,10 @@ export interface FileReadInput {
    * Page range for PDF files (e.g., "1-5", "3", "10-20"). Only applicable to PDF files. Maximum 20 pages per request.
    */
   pages?: string;
+  /**
+   * Set to true to read a text file, or a line range of one, that is over the usual size limits, up to what still fits in your context. Only use this when you genuinely need all of it or the user asked for the whole file; otherwise read it in parts with offset and limit, or search it.
+   */
+  allow_large?: boolean;
 }
 export interface FileWriteInput {
   /**
@@ -1084,6 +1114,10 @@ export interface WebFetchInput {
    * The prompt to run on the fetched content
    */
   prompt: string;
+  /**
+   * Character position in the page text to start reading from. Use it to read on through a page too long for one call, with the value the previous result gave.
+   */
+  offset?: number;
 }
 export interface WebSearchInput {
   /**
@@ -2933,6 +2967,12 @@ export interface RemoteTriggerInput {
   };
 }
 export interface ShowOnboardingRolePickerInput {}
+export interface OfferChromeSetupInput {
+  /**
+   * A short phrase naming what the task needs the user's own browser for.
+   */
+  reason?: string;
+}
 export interface ReadNotificationsInput {}
 export interface MonitorInput {
   /**
@@ -3118,7 +3158,7 @@ export interface ProposeGoalInput {
 }
 export interface ArtifactInput {
   /**
-   * Omit (or 'publish') to publish file_path. 'list' enumerates artifacts — the user's own by default, see `scope`; only `limit` and `scope` may accompany it. 'read' returns the content of the published artifact at `url` (raw HTML for the user's own; an isolated summary, steered by the optional `prompt`, for one someone else owns, though a page published in this session's own Slack channel can come back in full as untrusted content) — see **Calls**. 'watch', 'unwatch', and 'status' manage live-update subscriptions through which a session keeps track of new versions of an artifact published elsewhere, and those aren't available in this session: 'watch' only reports that — this session does not keep track of new versions — and 'status' lists this session's artifact watches (pass `url` to check one). 'upload_asset' adds one local media, PDF, font, or text file to an existing artifact — pass `url` and `file_path` (or `file_paths` for several in one call). 'list_assets' lists the files in an artifact's asset store (pass `url`; `after` continues a listing), 'read_asset' saves one of them to a local file named by its id (pass `url` and `asset_id`, optionally `out_dir`), and 'delete_asset' permanently removes one (pass `url` and `asset_id`). See **Artifact assets** above.
+   * Omit (or 'publish') to publish file_path. 'list' enumerates artifacts — the user's own by default, see `scope`; only `limit` and `scope` may accompany it. 'read' returns the content of the published artifact at `url` (raw HTML for the user's own; an isolated summary, steered by the optional `prompt`, for one someone else owns, though a page published in this session's own Slack channel can come back in full as untrusted content) — see **Calls**. 'watch', 'unwatch', and 'status' manage live-update subscriptions through which a session keeps track of new versions of an artifact published elsewhere, and those aren't available in this session: 'watch' only reports that — this session does not keep track of new versions — and 'status' lists this session's artifact watches (pass `url` to check one). 'upload_asset' adds one local media, PDF, font, or text file to an existing artifact — pass `url` and `file_path` (or `file_paths` for several in one call). 'list_assets' lists the files in an artifact's asset store (pass `url`; `after` continues a listing), 'read_asset' saves one of them to a local file named by its id (pass `url` and `asset_id`, optionally `out_dir`), and 'delete_asset' permanently removes one (pass `url` and `asset_id`). See **Artifact assets** above. 'pin' adds the artifact at `url` to the user's pinned list in their claude.ai sidebar and 'unpin' removes it (nothing else may accompany either) — private to the user, reversible, and no change to who can see the artifact.
    */
   action?:
     | "publish"
@@ -3131,7 +3171,9 @@ export interface ArtifactInput {
     | "upload_asset"
     | "list_assets"
     | "read_asset"
-    | "delete_asset";
+    | "delete_asset"
+    | "pin"
+    | "unpin";
   /**
    * Path to the .html file to render. Required to publish (the default action). Use a short, distinctive basename — it is the last-resort title when the HTML has no <title> and no `title` parameter is given. For 'upload_asset', the local image, video, PDF, font, stylesheet (CSS), script (JS), or text (CSV, Markdown, JSON, plain text) file to upload.
    */
@@ -3165,7 +3207,7 @@ export interface ArtifactInput {
    */
   label?: string;
   /**
-   * Existing artifact URL to update in place. Pass whenever the user wants to update an artifact this conversation did not publish — "update my artifact", "keep the same link", a pasted artifact URL — and find the URL with action: "list" or ask the user for the link if you don't have it; without this, the publish creates a separate artifact instead of updating the existing one. Omit for new artifacts and same-conversation redeploys. Must be an artifact the user owns or was given edit access to (a read of it says "writer"). For 'read' and the other url-addressed actions: the artifact to act on.
+   * An existing artifact's claude.ai link (claude.ai/artifact/{id} or claude.ai/code/artifact/{uuid}; a chat, project or session link is not one) to update in place. Pass whenever the user wants to update an artifact this conversation did not publish — "update my artifact", "keep the same link", a pasted artifact URL — and find the URL with action: "list" or ask the user for the link if you don't have it; without this, the publish creates a separate artifact instead of updating the existing one. Omit for new artifacts and same-conversation redeploys. Must be an artifact the user owns or was given edit access to (a read of it says "writer"). Before publishing to an artifact this conversation has neither read nor published, read it (action: "read") and build on what comes back; a publish sent without that read is refused. A refusal that hands you the live version counts as that read: merge your edits into that version and publish that; never resend the refused content unchanged. For 'read' and the other url-addressed actions: the artifact to act on.
    */
   url?: string;
   /**
@@ -3176,6 +3218,10 @@ export interface ArtifactInput {
    * Last-resort overwrite that DISCARDS the newer published version's page — another session's publish, or someone's save from a page that can publish new versions of itself. On a conflict the fix is to merge your changes onto the newer content (handed to you in the rejection, or re-read) and publish again — not force. Pass force:true only when the user has explicitly said to discard that specific version; never to get past a conflict on your own judgment. The tracked baseVersion is still sent; with force:true the server treats it as informational and overwrites, unless it refuses force over a version saved from inside the page. Omit (or false) so a concurrent write conflicts instead of being silently clobbered.
    */
   force?: boolean;
+  /**
+   * publish only: true also pins the published artifact to the user's claude.ai sidebar once it is published — pass it only when the user asked for that; a pin that fails never fails the publish (the result says so).
+   */
+  pin?: boolean;
   /**
    * read_asset: directory to save into — default: this artifact’s folder in your scratchpad directory, where saving needs no approval and which you can Read from. read_asset names the file by the asset id plus the extension for its type; saving to any directory other than the default is an ordinary file save the user may be asked to approve.
    */
@@ -3271,7 +3317,7 @@ export interface BashOutput {
    */
   backgroundCwdHint?: string;
   /**
-   * True when this backgrounded command is owned by a synchronous subagent and is therefore terminated when that agent gives its final response; absent when the command survives (main loop, async subagents)
+   * True when this backgrounded command is terminated at its caller's final response, so no completion notification can follow (a synchronous subagent's command, or a headless session that takes no further input and is not waiting for background commands); absent when the command survives
    */
   backgroundEndsWithFinalResponse?: true;
   /**
@@ -3733,6 +3779,10 @@ export interface WebSearchOutput {
            * The URL of the search result
            */
           url: string;
+          /**
+           * Page text. PostToolUse hooks get it; tool_use_result does not.
+           */
+          snippet?: string;
         }[];
       }
     | string
@@ -3996,6 +4046,9 @@ export interface ShowOnboardingRolePickerOutput {
   role?: string;
   dismissed?: boolean;
 }
+export interface OfferChromeSetupOutput {
+  outcome: "connected" | "not_now" | "no_attempt_yet";
+}
 export interface ReadNotificationsOutput {
   notifications: {
     /**
@@ -4014,11 +4067,19 @@ export interface ReadNotificationsOutput {
      * Verbatim notification body.
      */
     content: string;
+    /**
+     * RFC3339 timestamp, by this machine's clock, of when the notification reached this session's queue. Missing from results saved before this field existed.
+     */
+    arrived_at?: string;
   }[];
   /**
    * Notifications still queued after this drain (drains are size-budgeted); call the tool again to read them.
    */
   remaining: number;
+  /**
+   * RFC3339 timestamp, by this machine's clock, of when this call read the queue. Missing from results saved before this field existed.
+   */
+  read_at?: string;
 }
 export interface ScheduleWakeupOutput {
   /**
@@ -4120,6 +4181,10 @@ export interface CronCreateOutput {
   humanSchedule: string;
   recurring: boolean;
   durable?: boolean;
+  /**
+   * Epoch ms of the job's next run, the scheduler's per-job offset included
+   */
+  nextFireAt?: number;
 }
 export interface CronDeleteOutput {
   id: string;
@@ -4132,6 +4197,10 @@ export interface CronListOutput {
     prompt: string;
     recurring?: boolean;
     durable?: boolean;
+    /**
+     * Epoch ms of the job's next run, the scheduler's per-job offset included
+     */
+    nextFireAt?: number;
   }[];
 }
 export interface PushNotificationOutput {