codai-sdk 0.69.0__tar.gz → 0.71.0__tar.gz

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/CHANGELOG.md

@@ -6,6 +6,18 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.71.0] - 2026-10-24
+
+- `productions.create(kind=..., duration_s=...)`: 8 production kinds (video, image, deck, doc, sheet, audio,
+  carousel, print) and a 15-60 s target length for video; non-video responses carry `kind`, `output_asset_id` and
+  `outputs`.
+
+## [0.70.0] - 2026-10-24
+
+- `vault.resolve_challenge()` (`POST /v1/vault/resolve/challenge`) and a required `proof` on `vault.resolve()`: local
+  brokers prove an enrolled device key (`codai-vault/resolve/v1|<challenge>|<device_id>|<digest>`); helpers
+  `resolve_digest` / `resolve_message`. Device keys gain kind `cli_ed25519`, surface `cli`, attestation `software`.
+
 ## [0.69.0] - 2026-10-23
 
 - `MusicRoom.listening`: what the Music Room critic heard (listening features, Audiobox Aesthetics, Gemini listener

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: codai-sdk
-Version: 0.69.0
+Version: 0.71.0
 Summary: Official Python SDK for the codai AI gateway — chat, messages, responses, streaming, agents, sessions, hosts, tasks, account.
 Project-URL: Homepage, https://codai.ro
 Project-URL: Repository, https://github.com/codai-ro/codai-sdk-python

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "codai-sdk"
-version = "0.69.0"
+version = "0.71.0"
 description = "Official Python SDK for the codai AI gateway — chat, messages, responses, streaming, agents, sessions, hosts, tasks, account."
 readme = "README.md"
 

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/src/codai/__init__.py

@@ -65,6 +65,8 @@ from .resources import (
     VoiceRevocations,
     Voices,
     Vault,
+    vault_resolve_digest,
+    vault_resolve_message,
     vault_unlock_message,
     AbuseReports,
     Provenance,
@@ -166,9 +168,11 @@ __all__ = [
     "verify_resolve_webhook",
     "settings_conflict_current",
     "share_token_from",
+    "vault_resolve_digest",
+    "vault_resolve_message",
     "vault_unlock_message",
 ]
-__version__ = "0.69.0"
+__version__ = "0.71.0"
 class _CallableGroup:
     """A resource group that is also callable — keeps ``client.chat(...)``,
     ``client.embeddings(...)``, ``client.models()`` and ``client.feedback(...)``

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/src/codai/_operations.py

@@ -139,6 +139,7 @@ OPERATION_METHODS: Dict[str, str] = {
     "vaultUse": "vault.use",
     "vaultHttp": "vault.http_call",
     "vaultResolve": "vault.resolve",
+    "createVaultResolveChallenge": "vault.resolve_challenge",
     "createStudioAbuseReport": "abuse_reports.create",
     "checkProvenance": "provenance.check",
     "createStudioBatch": "batches.create",

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/src/codai/_types.py

@@ -2518,14 +2518,20 @@ class MediaOpJob(TypedDict):
     updated_at: str
 
 
+# What the production builds: `video` (MP4), `image` (PNG), `deck` (PPTX), `doc` (DOCX), `sheet` (XLSX), `audio`…
+StudioProductionKind = Literal['video', 'image', 'deck', 'doc', 'sheet', 'audio', 'carousel', 'print']
+
+
 class _StudioProductionCreateRequired(TypedDict):
     brief: str
 
 
 class StudioProductionCreate(_StudioProductionCreateRequired, total=False):
     """Studio production request"""
+    kind: StudioProductionKind
     language: Literal['en', 'ro']
     aspect_ratio: Literal['16:9', '9:16', '1:1']
+    duration_s: int
     starter: str
     voice: str
     narration: bool
@@ -2539,8 +2545,24 @@ class StudioProductionQa(TypedDict, total=False):
     skipped: str
 
 
-class StudioProduction(TypedDict):
-    """Studio production"""
+class StudioProductionOutput(TypedDict):
+    """A built output of a non-video production: the regular Studio asset plus its `role`. `url` is a 1 h signed GET,…"""
+    asset_id: str
+    kind: AssetKind
+    status: Literal['pending', 'ready', 'failed', 'deleted']
+    model: str
+    url: Optional[str]
+    mime_type: str
+    bytes: int
+    duration_seconds: Optional[float]
+    width: Optional[int]
+    height: Optional[int]
+    created_at: str
+    expires_at: Optional[str]
+    role: Literal['image', 'cover', 'document', 'pages', 'pdf', 'audio']
+
+
+class _StudioProductionRequired(TypedDict):
     id: str
     object: Literal['studio.production']
     status: Literal['running', 'succeeded', 'failed']
@@ -2562,6 +2584,14 @@ class StudioProduction(TypedDict):
     created_at: str
 
 
+class StudioProduction(_StudioProductionRequired, total=False):
+    """Studio production"""
+    duration_s: Optional[int]
+    kind: StudioProductionKind
+    output_asset_id: Optional[str]
+    outputs: List[StudioProductionOutput]
+
+
 class _MusicRoomCreateRequired(TypedDict):
     brief: str
 
@@ -5745,7 +5775,7 @@ class AccountPatchResponse(TypedDict):
     training_opt_out: bool
     consents: List[AccountConsent]
     username_error: Optional[Literal['invalid', 'taken', 'change_limit']]
-    referral_result: Optional[Literal['window_closed', 'none', 'invalid_code', 'self', 'already_referred', 'flagged', 'granted', 'cap_reached']]
+    referral_result: Optional[Literal['window_closed', 'none', 'invalid_code', 'self', 'already_referred', 'flagged', 'pending_payment', 'granted', 'cap_reached']]
 
 
 class BillingSubscription(TypedDict):
@@ -7090,11 +7120,11 @@ class VaultUseDecision(_VaultUseDecisionRequired, total=False):
 
 class VaultDeviceKey(TypedDict):
     id: str
-    kind: Literal['android_keystore', 'windows_hello']
+    kind: Literal['android_keystore', 'windows_hello', 'cli_ed25519']
     name: str
-    surface: Literal['phone', 'wear', 'desktop']
+    surface: Literal['phone', 'wear', 'desktop', 'cli']
     public_key: str
-    attestation: Literal['android-strongbox', 'android-tee', 'tpm', 'hello-unattested']
+    attestation: Literal['android-strongbox', 'android-tee', 'tpm', 'hello-unattested', 'software']
     attestation_info: Dict[str, Any]
     created_at: str
     last_used_at: Optional[str]
@@ -7106,6 +7136,17 @@ class VaultDeviceChallenge(TypedDict):
     expires_at: str
 
 
+class VaultResolveChallenge(TypedDict):
+    challenge: str
+    expires_at: str
+
+
+class VaultResolveProof(TypedDict):
+    device_id: str
+    challenge: str
+    signature: str
+
+
 class VaultDeviceEnrollAttestationOption1(TypedDict):
     android_chain: List[str]
 
@@ -7121,9 +7162,9 @@ class VaultDeviceEnrollAttestationOption2(TypedDict):
 
 class _VaultDeviceEnrollRequired(TypedDict):
     device_id: str
-    kind: Literal['android_keystore', 'windows_hello']
+    kind: Literal['android_keystore', 'windows_hello', 'cli_ed25519']
     name: str
-    surface: Literal['phone', 'wear', 'desktop']
+    surface: Literal['phone', 'wear', 'desktop', 'cli']
     public_key: str
     nonce: str
     vault_signature: str
@@ -9708,9 +9749,14 @@ class VaultHttpBody(_VaultHttpBodyRequired, total=False):
 VaultHttpResponse = Dict[str, Any]
 
 
+# POST /v1/vault/resolve/challenge — 200 response
+CreateVaultResolveChallengeResponse = VaultResolveChallenge
+
+
 class _VaultResolveBodyRequired(TypedDict):
     handles: List[str]
     action: str
+    proof: VaultResolveProof
 
 
 class VaultResolveBody(_VaultResolveBodyRequired, total=False):
@@ -10006,6 +10052,7 @@ __all__ = [
     'CreateTriggerResponse',
     'CreateVaultBody',
     'CreateVaultDeviceChallengeResponse',
+    'CreateVaultResolveChallengeResponse',
     'CreateVaultResponse',
     'CreateVaultRuleBody',
     'CreateVaultRuleResponse',
@@ -10815,6 +10862,8 @@ __all__ = [
     'StudioPostCopyRequest',
     'StudioProduction',
     'StudioProductionCreate',
+    'StudioProductionKind',
+    'StudioProductionOutput',
     'StudioProductionQa',
     'StudioPublicDecisionRequest',
     'StudioPublicNameRequest',
@@ -11018,6 +11067,8 @@ __all__ = [
     'VaultItemLimits',
     'VaultLockResult',
     'VaultResolveBody',
+    'VaultResolveChallenge',
+    'VaultResolveProof',
     'VaultResolveResponse',
     'VaultUnlockChallenge',
     'VaultUseBody',

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/src/codai/resources/__init__.py

@@ -13,7 +13,7 @@ from .media_ops import MEDIA_JOB_TERMINAL_STATUSES, MediaOps, is_media_op_job
 from .lyrics import Lyrics
 from .exports import Exports
 from .research import RESEARCH_TERMINAL_STATUSES, Research
-from .vault import Vault, vault_unlock_message
+from .vault import Vault, vault_resolve_digest, vault_resolve_message, vault_unlock_message
 from .batches import Batches
 from .shares import Shares, share_token_from
 from .voice_revocations import VoiceRevocations
@@ -141,6 +141,8 @@ __all__ = [
     "VoiceRevocations",
     "Voices",
     "Vault",
+    "vault_resolve_digest",
+    "vault_resolve_message",
     "vault_unlock_message",
     "AbuseReports",
     "Provenance",

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/src/codai/resources/productions.py

@@ -1,10 +1,16 @@
-"""``/v1/studio/productions`` — codai Studio brief → finished promo video (RC-20): one model turn storyboards the brief
-on a built-in video starter, every scene gets an image and a voice-over line, the result is saved as an editable
-creative and a draft render is queued; a vision review may fix text once.
+"""``/v1/studio/productions`` — codai Studio brief → finished output (RC-20), one of 8 kinds (``kind``, default
+``video``): ``video`` (MP4 render), ``image`` (PNG), ``deck`` (PPTX), ``doc`` (DOCX), ``sheet`` (XLSX), ``carousel``
+(ZIP of PNG slides + cover PNG), ``print`` (A4/A5 PDF) and ``audio`` (MP3 jingle or song).
 
-``create`` returns 202 ``{id, status: "running", phase}`` after the render is queued (about a minute), ``retrieve``
+``video``: one model turn storyboards the brief on a built-in video starter, every scene gets an image and a voice-over
+line, the result is saved as an editable creative and a draft render is queued; a vision review may fix text once.
+Other kinds: one plan turn, generated images or music, an editable creative and the output built by the Studio
+builders; the response adds ``kind``, ``output_asset_id`` and ``outputs`` (Studio assets with a ``role``).
+``starter``, ``voice``, ``narration`` and ``aspect_ratio`` apply to ``video`` only.
+
+``create`` returns 202 ``{id, status: "running", phase}`` after the output is queued (about a minute), ``retrieve``
 advances and reads it, ``wait`` polls until ``succeeded`` / ``failed`` and ``run`` does ``create`` + ``wait``. The
-storyboard and review turns are token-metered; images, voice-over and renders are billed at their usual prices;
+plan and review turns are token-metered; images, music, voice-over and renders are billed at their usual prices;
 ``budget_micro_usd`` (default 3,000,000 = $3) caps the whole production.
 """
 
@@ -45,12 +51,17 @@ class Productions(Resource):
         title: Optional[str] = None,
         idempotency_key: Optional[str] = None,
         ext: Optional[RequestExtensions] = None,
+        kind: Optional[str] = None,
+        duration_s: Optional[int] = None,
     ) -> Dict[str, Any]:
-        """``POST /v1/studio/productions`` — storyboard + images + voice-over + creative + queued draft render."""
+        """``POST /v1/studio/productions`` — plan + images / music + creative + the output being built
+        (``kind``: video | image | deck | doc | sheet | audio | carousel | print, default video)."""
         body: Dict[str, Any] = {"brief": brief}
         for k, v in (
+            ("kind", kind),
             ("language", language),
             ("aspect_ratio", aspect_ratio),
+            ("duration_s", duration_s),
             ("starter", starter),
             ("voice", voice),
             ("narration", narration),

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/src/codai/resources/vault.py

@@ -5,12 +5,14 @@ client-side (bundles, envelopes, sealed keys); this resource moves those blobs.
 
 from __future__ import annotations
 
+import base64
+import hashlib
 from typing import Any, Dict, List, Optional
 
 from .._http import HttpClient, RequestExtensions
 from ._base import Resource, enc, list_of
 
-__all__ = ["Vault", "VaultDevices", "vault_unlock_message"]
+__all__ = ["Vault", "VaultDevices", "vault_resolve_digest", "vault_resolve_message", "vault_unlock_message"]
 
 
 def vault_unlock_message(challenge: str, device_id_or_passkey: str) -> str:
@@ -18,6 +20,17 @@ def vault_unlock_message(challenge: str, device_id_or_passkey: str) -> str:
     return f"codai-vault/unlock/v1|{challenge}|{device_id_or_passkey}"
 
 
+def vault_resolve_digest(handles: List[str], action: str) -> str:
+    """``base64url_nopad(SHA-256(handles joined by "\\n" + "\\n\\n" + action))``, handles and action exactly as sent."""
+    raw = hashlib.sha256(("\n".join(handles) + "\n\n" + action).encode("utf-8")).digest()
+    return base64.urlsafe_b64encode(raw).rstrip(b"=").decode("ascii")
+
+
+def vault_resolve_message(challenge: str, device_id: str, digest: str) -> str:
+    """The UTF-8 message a resolve proof covers: ``codai-vault/resolve/v1|<challenge>|<device_id>|<digest>``."""
+    return f"codai-vault/resolve/v1|{challenge}|{device_id}|{digest}"
+
+
 def _seg(base: str, item_id: str, suffix: str = "") -> str:
     return f"{base}/{enc(item_id)}{suffix}"
 
@@ -320,6 +333,15 @@ class Vault(Resource):
         """``POST /v1/vault/http`` — brokered HTTPS call (``handle``, ``url``, ...); HTTP 202 = approval required."""
         return self._json("/v1/vault/http", ext=ext, method="POST", body=_clean(body), no_retry=True) or {}
 
+    def resolve_challenge(self, ext: Optional[RequestExtensions] = None) -> Dict[str, Any]:
+        """``POST /v1/vault/resolve/challenge`` — codai local brokers only; single-use challenge, 120 seconds."""
+        return self._json("/v1/vault/resolve/challenge", ext=ext, method="POST", body={}, no_retry=True)
+
     def resolve(self, body: Dict[str, Any], ext: Optional[RequestExtensions] = None) -> Dict[str, Any]:
-        """``POST /v1/vault/resolve`` — codai local brokers only; HTTP 202 = approval required."""
+        """``POST /v1/vault/resolve`` — codai local brokers only; HTTP 202 = approval required.
+
+        ``body["proof"]`` is required: ``{"device_id", "challenge", "signature"}`` where the device key signs
+        :func:`vault_resolve_message` over a fresh :meth:`resolve_challenge` (400 ``proof_required`` /
+        ``invalid_challenge``, 403 ``invalid_device_proof``).
+        """
         return self._json("/v1/vault/resolve", ext=ext, method="POST", body=_clean(body), no_retry=True) or {}

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/tests/test_resources.py

@@ -24,7 +24,7 @@ def _chat_response(content="PONG", tool_calls=None):
 
 
 def test_version():
-    assert codai.__version__ == "0.69.0"
+    assert codai.__version__ == "0.71.0"
 def test_chat_completions_create(client, stub):
     stub.reply(
         200,

{codai_sdk-0.69.0 → codai_sdk-0.71.0}/tests/test_vault.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 import pytest
 
-from codai import CodaiError, vault_unlock_message
+from codai import CodaiError, vault_resolve_digest, vault_resolve_message, vault_unlock_message
 
 ITEM = "0b7d1a2e-1111-4222-8333-444455556666"
 DEVICE = {
@@ -88,9 +88,21 @@ def test_vault_broker_calls_and_approval_flow(client, stub):
     assert r == {"approval_id": "a2"}
     assert (stub.last.path, stub.last.json) == ("/v1/vault/http", {"handle": "github", "url": "https://api.github.com/user"})
 
+    stub.reply(200, {"challenge": "ch123", "expires_at": "2026-10-24T00:02:00Z"})
+    ch = client.vault.resolve_challenge()
+    assert (stub.last.method, stub.last.path, stub.last.json) == ("POST", "/v1/vault/resolve/challenge", {})
+    proof = {"device_id": "cli-abcd1234", "challenge": ch["challenge"], "signature": "sig"}
     stub.reply(202, {"approvals": ["a3"]})
-    assert client.vault.resolve({"handles": ["db"], "action": "run"}) == {"approvals": ["a3"]}
-    assert stub.last.path == "/v1/vault/resolve"
+    assert client.vault.resolve({"handles": ["db"], "action": "run", "proof": proof}) == {"approvals": ["a3"]}
+    assert (stub.last.path, stub.last.json) == ("/v1/vault/resolve", {"handles": ["db"], "action": "run", "proof": proof})
+
+
+def test_vault_resolve_proof_message_matches_contract_vector():
+    digest = vault_resolve_digest(["github.token", "aws.secret"], "curl -H x https://api.github.com")
+    assert digest == "D_gl7EO9sGs-oo2tDZhv6JDMLE3vQ2Vo9jwdFPZRKdQ"
+    assert vault_resolve_message("ch123", "cli-abcd1234", digest) == (
+        "codai-vault/resolve/v1|ch123|cli-abcd1234|D_gl7EO9sGs-oo2tDZhv6JDMLE3vQ2Vo9jwdFPZRKdQ"
+    )
 
 
 def test_vault_devices_enrol_list_rename_revoke(client, stub):