rightnow-system-zero 0.3.0__tar.gz → 0.4.2__tar.gz

{rightnow_system_zero-0.3.0 → rightnow_system_zero-0.4.2}/NOTICE

@@ -1,3 +1,3 @@
-System Zero SDKs
+RightNow System Zero SDKs
 Copyright 2026 RightNow AI, Inc.
 Licensed under Apache 2.0.

{rightnow_system_zero-0.3.0/src/rightnow_system_zero.egg-info → rightnow_system_zero-0.4.2}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: rightnow-system-zero
-Version: 0.3.0
-Summary: System Zero API client with typed decisions and client-side workflows.
+Version: 0.4.2
+Summary: RightNow System Zero API client with typed decisions and client-side workflows.
 Author: RightNow AI, Inc.
 License-Expression: Apache-2.0
 Project-URL: Changelog, https://github.com/RightNow-AI/system-zero-sdk/blob/main/CHANGELOG.md
@@ -29,9 +29,11 @@ Requires-Dist: httpcore<2,>=1.0.9
 Requires-Dist: websockets<16,>=15.0.1
 Dynamic: license-file
 
-# System Zero Python SDK
+# RightNow System Zero Python SDK
 
-Synchronous server-side Python client for the System Zero API.
+RightNow is the model name; System Zero is its category. The full name is RightNow System Zero.
+
+Synchronous server-side Python client for the RightNow System Zero API.
 
 Requires Python 3.10 or later.
 
@@ -73,9 +75,10 @@ manager to release the HTTP transport.
 ## Media on decide
 
 `attachments` is optional; `null` remains valid. Each inline attachment has a unique
-`name`, a `type` of `image` or `audio`, and a canonical base64 data URL in `data`.
+`name`, a `type` of `image`, `audio`, `document` or `video`, and a canonical base64 data URL in `data`.
 Names start with an ASCII letter and contain at most 64 letters, digits, `_` or `-`.
-Function tools and the MCP adapter carry the same inline forms.
+Function tools and the MCP adapter carry the image and audio forms.
+Send PDF and video through the ordinary client request form shown below.
 
 - Images: static PNG (`image/png`) and JPEG (`image/jpeg`), at most 4 images,
   16,777,216 pixels each, with an aspect ratio no greater than 50:1.
@@ -96,13 +99,23 @@ prove a complete image is valid.
 GIF (`image/gif`), WebP (`image/webp`), animated PNG and images outside the decoded
 profile are refused with `media_unpriced`. A mismatched image signature uses
 `media_decode_failed`; other unsupported image MIME types use `media_unsupported`.
-Documents remain refused with `document_not_available`, and video with
-`video_not_available`. Other audio formats, rates, malformed WAV and audio upload
+Other audio formats, rates, malformed WAV and audio upload
 references use `media_unsupported`. Image upload references are unavailable and
 return `service_unavailable` in the listed service. Send bytes inline.
 
+PDF is supported through ordinary inline attachments.
+Text PDFs and readable scans are read as text.
+Only PDF is supported; other document formats are unavailable.
+Use `type: "document"` and a canonical `data:application/pdf;base64,...` URL.
+The image and audio helpers do not encode PDF; construct its inline attachment directly.
+
+
+Video is supported through ordinary inline attachments. Send one silent H.264 MP4 video as an inline base64 data URL. Maximum duration: 10 seconds. Maximum dimensions: 1920 x 1080. Maximum decoded file size: 2,621,440 bytes (2.5 MiB). The complete JSON request must fit 3,665,920 bytes, including base64 and questions. Rotated videos, soundtracks, separate attachments and video upload references are not supported.
+
+Use `videoAttachment({ name: 'clip', data: bytes })` in TypeScript or `video_attachment(name='clip', data=bytes)` in Python. Video helpers encode the bytes; the API performs complete-file validation. A `video_not_available` response becomes `VideoNotAvailableError`, preserving status, code, message and request ID.
 ```python
 from pathlib import Path
+from base64 import b64encode
 from system_zero import SystemZero, inline_attachment, validate_attachments
 
 attachments = validate_attachments([
@@ -115,6 +128,13 @@ with SystemZero() as client:
         "questions": {"ready": {"type": "boolean", "instructions": "Is the item ready?"}},
     })
     print(reply["answers"])
+    # PDF uses the ordinary inline request form.
+    client.decide({
+        "model": "system-zero", "state": "Read the PDF.",
+        "questions": {"ready": {"type": "boolean", "instructions": "Is the item ready?"}},
+        "attachments": [{"name": "document", "type": "document",
+            "data": "data:application/pdf;base64," + b64encode(Path("document.pdf").read_bytes()).decode("ascii")}],
+    })
 ```
 
 `MIMES`, `MEDIA_LIMITS` and `attachment_magic_matches` expose the served registry,
@@ -133,7 +153,7 @@ attempts are limited by the remaining budget. A wait above the maximum wait, or
 one that exhausts the remaining budget, raises the last error without waiting.
 A retry needs at least one millisecond remaining.
 
-Only GET requests or requests carrying a nonempty idempotency key can retry.
+Only GET requests or requests carrying a non-empty idempotency key can retry.
 With retries enabled, decide POSTs receive a generated key when none is supplied.
 An explicit blank key omits the header and disables decision retries. Each retry
 retains the same key and serialized body. Setting the retry count or budget to
@@ -217,7 +237,7 @@ Every HTTP attempt sends `X-SDK-Retry-Count`, starting at `0`, and a
 A blank or whitespace-only `client_request_id` omits the
 `X-Client-Request-Id` header.
 
-Keep API keys on trusted servers. See [the security policy](https://github.com/RightNow-AI/system-zero-sdk/blob/main/SECURITY.md)
+Keep API keys on trusted servers. Don't enable DEBUG logging for the HTTP or WebSocket libraries in production; it can record request headers, including your API key. See [the security policy](https://github.com/RightNow-AI/system-zero-sdk/blob/main/SECURITY.md)
 for private vulnerability reporting.
 
 ## Function tool formats
@@ -299,3 +319,19 @@ Billing is per decision, not per connection, heartbeat, acknowledgement, or
 mutation. Several mutations can be covered by one decision. A decision may be
 counted even if the connection closes before its event arrives; use the event's
 usage and request identifier when reconciling completed work.
+
+## LongContextRequest opt-in
+
+The SDK publishes the `LongContextRequest` type as an opt-in surface. It is unavailable until the API enables it for the workspace; workspace opt-in through the console's Settings is also required. Once available, give explicit per-request consent with `dangerZone: 'accept'` in TypeScript or `danger_zone="accept"` in Python. The option sends exactly `SZ-Danger-Zone: accept`; it is never sent by default or inferred from state size. Until availability, the API ignores or refuses this option. Do not supply this header through custom headers. Retries retain the option. The same explicit option is supported by batch and flow helpers.
+
+Until workspace enablement, the expected result is HTTP 404 `long_context_not_available`, surfaced as `LongContextNotAvailableError`. The same refusal applies without workspace opt-in. When the API supplies `details.eligibility`, `LongContextNotAvailableError.eligibility` exposes the rule: `billing`, `opt_in`, `class`, `deny_list`, `global_switch` or `account_deleted`, with a string fallback for future rules. A generic held-route refusal can omit the rule. Status, code, message and request ID remain intact. Held routes are never retried.
+
+`LongContextRequest`, `EnabledDecideRequest`, `OrdinaryRequest`, `MediaRequest` and their question types describe the separate enabled request contract in `enabled.openapi.json`. `LongContextLimits` describes its discovery limits. `openapi.json` remains the served contract. The API selects the request band and checks bounds: a `LongContextRequest` takes at most 32 questions, choices with 2 to 25 options, and scores with 2 to 4 levels. Only inline document attachments fit its document branch. The API validates document admission separately.
+
+```typescript
+await client.decide(request, { dangerZone: 'accept' });
+```
+
+```python
+client.decide(request, danger_zone="accept")
+```

{rightnow_system_zero-0.3.0 → rightnow_system_zero-0.4.2}/README.md

@@ -1,6 +1,8 @@
-# System Zero Python SDK
+# RightNow System Zero Python SDK
 
-Synchronous server-side Python client for the System Zero API.
+RightNow is the model name; System Zero is its category. The full name is RightNow System Zero.
+
+Synchronous server-side Python client for the RightNow System Zero API.
 
 Requires Python 3.10 or later.
 
@@ -42,9 +44,10 @@ manager to release the HTTP transport.
 ## Media on decide
 
 `attachments` is optional; `null` remains valid. Each inline attachment has a unique
-`name`, a `type` of `image` or `audio`, and a canonical base64 data URL in `data`.
+`name`, a `type` of `image`, `audio`, `document` or `video`, and a canonical base64 data URL in `data`.
 Names start with an ASCII letter and contain at most 64 letters, digits, `_` or `-`.
-Function tools and the MCP adapter carry the same inline forms.
+Function tools and the MCP adapter carry the image and audio forms.
+Send PDF and video through the ordinary client request form shown below.
 
 - Images: static PNG (`image/png`) and JPEG (`image/jpeg`), at most 4 images,
   16,777,216 pixels each, with an aspect ratio no greater than 50:1.
@@ -65,13 +68,23 @@ prove a complete image is valid.
 GIF (`image/gif`), WebP (`image/webp`), animated PNG and images outside the decoded
 profile are refused with `media_unpriced`. A mismatched image signature uses
 `media_decode_failed`; other unsupported image MIME types use `media_unsupported`.
-Documents remain refused with `document_not_available`, and video with
-`video_not_available`. Other audio formats, rates, malformed WAV and audio upload
+Other audio formats, rates, malformed WAV and audio upload
 references use `media_unsupported`. Image upload references are unavailable and
 return `service_unavailable` in the listed service. Send bytes inline.
 
+PDF is supported through ordinary inline attachments.
+Text PDFs and readable scans are read as text.
+Only PDF is supported; other document formats are unavailable.
+Use `type: "document"` and a canonical `data:application/pdf;base64,...` URL.
+The image and audio helpers do not encode PDF; construct its inline attachment directly.
+
+
+Video is supported through ordinary inline attachments. Send one silent H.264 MP4 video as an inline base64 data URL. Maximum duration: 10 seconds. Maximum dimensions: 1920 x 1080. Maximum decoded file size: 2,621,440 bytes (2.5 MiB). The complete JSON request must fit 3,665,920 bytes, including base64 and questions. Rotated videos, soundtracks, separate attachments and video upload references are not supported.
+
+Use `videoAttachment({ name: 'clip', data: bytes })` in TypeScript or `video_attachment(name='clip', data=bytes)` in Python. Video helpers encode the bytes; the API performs complete-file validation. A `video_not_available` response becomes `VideoNotAvailableError`, preserving status, code, message and request ID.
 ```python
 from pathlib import Path
+from base64 import b64encode
 from system_zero import SystemZero, inline_attachment, validate_attachments
 
 attachments = validate_attachments([
@@ -84,6 +97,13 @@ with SystemZero() as client:
         "questions": {"ready": {"type": "boolean", "instructions": "Is the item ready?"}},
     })
     print(reply["answers"])
+    # PDF uses the ordinary inline request form.
+    client.decide({
+        "model": "system-zero", "state": "Read the PDF.",
+        "questions": {"ready": {"type": "boolean", "instructions": "Is the item ready?"}},
+        "attachments": [{"name": "document", "type": "document",
+            "data": "data:application/pdf;base64," + b64encode(Path("document.pdf").read_bytes()).decode("ascii")}],
+    })
 ```
 
 `MIMES`, `MEDIA_LIMITS` and `attachment_magic_matches` expose the served registry,
@@ -102,7 +122,7 @@ attempts are limited by the remaining budget. A wait above the maximum wait, or
 one that exhausts the remaining budget, raises the last error without waiting.
 A retry needs at least one millisecond remaining.
 
-Only GET requests or requests carrying a nonempty idempotency key can retry.
+Only GET requests or requests carrying a non-empty idempotency key can retry.
 With retries enabled, decide POSTs receive a generated key when none is supplied.
 An explicit blank key omits the header and disables decision retries. Each retry
 retains the same key and serialized body. Setting the retry count or budget to
@@ -186,7 +206,7 @@ Every HTTP attempt sends `X-SDK-Retry-Count`, starting at `0`, and a
 A blank or whitespace-only `client_request_id` omits the
 `X-Client-Request-Id` header.
 
-Keep API keys on trusted servers. See [the security policy](https://github.com/RightNow-AI/system-zero-sdk/blob/main/SECURITY.md)
+Keep API keys on trusted servers. Don't enable DEBUG logging for the HTTP or WebSocket libraries in production; it can record request headers, including your API key. See [the security policy](https://github.com/RightNow-AI/system-zero-sdk/blob/main/SECURITY.md)
 for private vulnerability reporting.
 
 ## Function tool formats
@@ -268,3 +288,19 @@ Billing is per decision, not per connection, heartbeat, acknowledgement, or
 mutation. Several mutations can be covered by one decision. A decision may be
 counted even if the connection closes before its event arrives; use the event's
 usage and request identifier when reconciling completed work.
+
+## LongContextRequest opt-in
+
+The SDK publishes the `LongContextRequest` type as an opt-in surface. It is unavailable until the API enables it for the workspace; workspace opt-in through the console's Settings is also required. Once available, give explicit per-request consent with `dangerZone: 'accept'` in TypeScript or `danger_zone="accept"` in Python. The option sends exactly `SZ-Danger-Zone: accept`; it is never sent by default or inferred from state size. Until availability, the API ignores or refuses this option. Do not supply this header through custom headers. Retries retain the option. The same explicit option is supported by batch and flow helpers.
+
+Until workspace enablement, the expected result is HTTP 404 `long_context_not_available`, surfaced as `LongContextNotAvailableError`. The same refusal applies without workspace opt-in. When the API supplies `details.eligibility`, `LongContextNotAvailableError.eligibility` exposes the rule: `billing`, `opt_in`, `class`, `deny_list`, `global_switch` or `account_deleted`, with a string fallback for future rules. A generic held-route refusal can omit the rule. Status, code, message and request ID remain intact. Held routes are never retried.
+
+`LongContextRequest`, `EnabledDecideRequest`, `OrdinaryRequest`, `MediaRequest` and their question types describe the separate enabled request contract in `enabled.openapi.json`. `LongContextLimits` describes its discovery limits. `openapi.json` remains the served contract. The API selects the request band and checks bounds: a `LongContextRequest` takes at most 32 questions, choices with 2 to 25 options, and scores with 2 to 4 levels. Only inline document attachments fit its document branch. The API validates document admission separately.
+
+```typescript
+await client.decide(request, { dangerZone: 'accept' });
+```
+
+```python
+client.decide(request, danger_zone="accept")
+```

{rightnow_system_zero-0.3.0 → rightnow_system_zero-0.4.2}/pyproject.toml

@@ -4,8 +4,8 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "rightnow-system-zero"
-version = "0.3.0"
-description = "System Zero API client with typed decisions and client-side workflows."
+version = "0.4.2"
+description = "RightNow System Zero API client with typed decisions and client-side workflows."
 license = "Apache-2.0"
 license-files = ["LICENSE", "NOTICE"]
 readme = "README.md"

{rightnow_system_zero-0.3.0 → rightnow_system_zero-0.4.2/src/rightnow_system_zero.egg-info}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: rightnow-system-zero
-Version: 0.3.0
-Summary: System Zero API client with typed decisions and client-side workflows.
+Version: 0.4.2
+Summary: RightNow System Zero API client with typed decisions and client-side workflows.
 Author: RightNow AI, Inc.
 License-Expression: Apache-2.0
 Project-URL: Changelog, https://github.com/RightNow-AI/system-zero-sdk/blob/main/CHANGELOG.md
@@ -29,9 +29,11 @@ Requires-Dist: httpcore<2,>=1.0.9
 Requires-Dist: websockets<16,>=15.0.1
 Dynamic: license-file
 
-# System Zero Python SDK
+# RightNow System Zero Python SDK
 
-Synchronous server-side Python client for the System Zero API.
+RightNow is the model name; System Zero is its category. The full name is RightNow System Zero.
+
+Synchronous server-side Python client for the RightNow System Zero API.
 
 Requires Python 3.10 or later.
 
@@ -73,9 +75,10 @@ manager to release the HTTP transport.
 ## Media on decide
 
 `attachments` is optional; `null` remains valid. Each inline attachment has a unique
-`name`, a `type` of `image` or `audio`, and a canonical base64 data URL in `data`.
+`name`, a `type` of `image`, `audio`, `document` or `video`, and a canonical base64 data URL in `data`.
 Names start with an ASCII letter and contain at most 64 letters, digits, `_` or `-`.
-Function tools and the MCP adapter carry the same inline forms.
+Function tools and the MCP adapter carry the image and audio forms.
+Send PDF and video through the ordinary client request form shown below.
 
 - Images: static PNG (`image/png`) and JPEG (`image/jpeg`), at most 4 images,
   16,777,216 pixels each, with an aspect ratio no greater than 50:1.
@@ -96,13 +99,23 @@ prove a complete image is valid.
 GIF (`image/gif`), WebP (`image/webp`), animated PNG and images outside the decoded
 profile are refused with `media_unpriced`. A mismatched image signature uses
 `media_decode_failed`; other unsupported image MIME types use `media_unsupported`.
-Documents remain refused with `document_not_available`, and video with
-`video_not_available`. Other audio formats, rates, malformed WAV and audio upload
+Other audio formats, rates, malformed WAV and audio upload
 references use `media_unsupported`. Image upload references are unavailable and
 return `service_unavailable` in the listed service. Send bytes inline.
 
+PDF is supported through ordinary inline attachments.
+Text PDFs and readable scans are read as text.
+Only PDF is supported; other document formats are unavailable.
+Use `type: "document"` and a canonical `data:application/pdf;base64,...` URL.
+The image and audio helpers do not encode PDF; construct its inline attachment directly.
+
+
+Video is supported through ordinary inline attachments. Send one silent H.264 MP4 video as an inline base64 data URL. Maximum duration: 10 seconds. Maximum dimensions: 1920 x 1080. Maximum decoded file size: 2,621,440 bytes (2.5 MiB). The complete JSON request must fit 3,665,920 bytes, including base64 and questions. Rotated videos, soundtracks, separate attachments and video upload references are not supported.
+
+Use `videoAttachment({ name: 'clip', data: bytes })` in TypeScript or `video_attachment(name='clip', data=bytes)` in Python. Video helpers encode the bytes; the API performs complete-file validation. A `video_not_available` response becomes `VideoNotAvailableError`, preserving status, code, message and request ID.
 ```python
 from pathlib import Path
+from base64 import b64encode
 from system_zero import SystemZero, inline_attachment, validate_attachments
 
 attachments = validate_attachments([
@@ -115,6 +128,13 @@ with SystemZero() as client:
         "questions": {"ready": {"type": "boolean", "instructions": "Is the item ready?"}},
     })
     print(reply["answers"])
+    # PDF uses the ordinary inline request form.
+    client.decide({
+        "model": "system-zero", "state": "Read the PDF.",
+        "questions": {"ready": {"type": "boolean", "instructions": "Is the item ready?"}},
+        "attachments": [{"name": "document", "type": "document",
+            "data": "data:application/pdf;base64," + b64encode(Path("document.pdf").read_bytes()).decode("ascii")}],
+    })
 ```
 
 `MIMES`, `MEDIA_LIMITS` and `attachment_magic_matches` expose the served registry,
@@ -133,7 +153,7 @@ attempts are limited by the remaining budget. A wait above the maximum wait, or
 one that exhausts the remaining budget, raises the last error without waiting.
 A retry needs at least one millisecond remaining.
 
-Only GET requests or requests carrying a nonempty idempotency key can retry.
+Only GET requests or requests carrying a non-empty idempotency key can retry.
 With retries enabled, decide POSTs receive a generated key when none is supplied.
 An explicit blank key omits the header and disables decision retries. Each retry
 retains the same key and serialized body. Setting the retry count or budget to
@@ -217,7 +237,7 @@ Every HTTP attempt sends `X-SDK-Retry-Count`, starting at `0`, and a
 A blank or whitespace-only `client_request_id` omits the
 `X-Client-Request-Id` header.
 
-Keep API keys on trusted servers. See [the security policy](https://github.com/RightNow-AI/system-zero-sdk/blob/main/SECURITY.md)
+Keep API keys on trusted servers. Don't enable DEBUG logging for the HTTP or WebSocket libraries in production; it can record request headers, including your API key. See [the security policy](https://github.com/RightNow-AI/system-zero-sdk/blob/main/SECURITY.md)
 for private vulnerability reporting.
 
 ## Function tool formats
@@ -299,3 +319,19 @@ Billing is per decision, not per connection, heartbeat, acknowledgement, or
 mutation. Several mutations can be covered by one decision. A decision may be
 counted even if the connection closes before its event arrives; use the event's
 usage and request identifier when reconciling completed work.
+
+## LongContextRequest opt-in
+
+The SDK publishes the `LongContextRequest` type as an opt-in surface. It is unavailable until the API enables it for the workspace; workspace opt-in through the console's Settings is also required. Once available, give explicit per-request consent with `dangerZone: 'accept'` in TypeScript or `danger_zone="accept"` in Python. The option sends exactly `SZ-Danger-Zone: accept`; it is never sent by default or inferred from state size. Until availability, the API ignores or refuses this option. Do not supply this header through custom headers. Retries retain the option. The same explicit option is supported by batch and flow helpers.
+
+Until workspace enablement, the expected result is HTTP 404 `long_context_not_available`, surfaced as `LongContextNotAvailableError`. The same refusal applies without workspace opt-in. When the API supplies `details.eligibility`, `LongContextNotAvailableError.eligibility` exposes the rule: `billing`, `opt_in`, `class`, `deny_list`, `global_switch` or `account_deleted`, with a string fallback for future rules. A generic held-route refusal can omit the rule. Status, code, message and request ID remain intact. Held routes are never retried.
+
+`LongContextRequest`, `EnabledDecideRequest`, `OrdinaryRequest`, `MediaRequest` and their question types describe the separate enabled request contract in `enabled.openapi.json`. `LongContextLimits` describes its discovery limits. `openapi.json` remains the served contract. The API selects the request band and checks bounds: a `LongContextRequest` takes at most 32 questions, choices with 2 to 25 options, and scores with 2 to 4 levels. Only inline document attachments fit its document branch. The API validates document admission separately.
+
+```typescript
+await client.decide(request, { dangerZone: 'accept' });
+```
+
+```python
+client.decide(request, danger_zone="accept")
+```

{rightnow_system_zero-0.3.0 → rightnow_system_zero-0.4.2}/src/rightnow_system_zero.egg-info/SOURCES.txt

@@ -9,12 +9,14 @@ src/rightnow_system_zero.egg-info/requires.txt
 src/rightnow_system_zero.egg-info/top_level.txt
 src/system_zero/__init__.py
 src/system_zero/_connection.py
+src/system_zero/_redaction.py
 src/system_zero/_retry.py
 src/system_zero/_transport.py
 src/system_zero/argument-limits.json
 src/system_zero/batch.py
 src/system_zero/client.py
 src/system_zero/decisions.py
+src/system_zero/enabled_types.py
 src/system_zero/error-catalog.json
 src/system_zero/error_codes.py
 src/system_zero/errors.py

{rightnow_system_zero-0.3.0 → rightnow_system_zero-0.4.2}/src/system_zero/__init__.py

@@ -1,4 +1,4 @@
-"""System Zero API client and client-side helpers."""
+"""RightNow System Zero API client and client-side helpers."""
 
 from .client import (
     VERSION,
@@ -143,6 +143,19 @@ from .workflow_types import (
     Usage,
 )
 
+from .enabled_types import (
+    EnabledDecideRequest,
+    LongContextLimits,
+    LongContextQuestion,
+    LongContextRequest,
+    MediaQuestion,
+    MediaRequest,
+    OrdinaryQuestion,
+    OrdinaryRequest,
+    VideoAttachment,
+    VideoRequest,
+)
+
 from .tools import (
     NESTED_FUNCTION_TOOLS,
     FLAT_FUNCTION_TOOLS,
@@ -155,7 +168,7 @@ from .tools import (
 __version__ = VERSION
 
 from .types import Attachment
-from .media import (ByteData, MAX_ATTACHMENTS, MAX_INLINE_BYTES, MEDIA_LIMITS, MIMES, attachment_magic_matches, inline_attachment, validate_attachments)
+from .media import (ByteData, MAX_ATTACHMENTS, MAX_INLINE_BYTES, MEDIA_LIMITS, MIMES, VIDEO_PROFILE, attachment_magic_matches, inline_attachment, validate_attachments, video_attachment)
 
 __all__ = [
   "APIConnectionError",
@@ -180,6 +193,7 @@ __all__ = [
   "DecisionMode",
   "DeliberateNotAvailableError",
   "DocumentNotAvailableError",
+  "EnabledDecideRequest",
   "ErrorCode",
   "EvaluationRecord",
   "EvaluationReport",
@@ -206,17 +220,24 @@ __all__ = [
   "InvalidRequestError",
   "KNOWN_ERROR_CODES",
   "LegacyDecision",
+  "LongContextLimits",
   "LongContextNotAvailableError",
+  "LongContextQuestion",
+  "LongContextRequest",
   "LongRecordingNotAvailableError",
   "MAX_ATTACHMENTS",
   "MAX_FLOW_STEPS",
   "MAX_INLINE_BYTES",
   "MEDIA_LIMITS",
   "MIMES",
+  "MediaQuestion",
+  "MediaRequest",
   "Model",
   "ModelList",
   "NESTED_FUNCTION_TOOLS",
   "NotFoundError",
+  "OrdinaryQuestion",
+  "OrdinaryRequest",
   "OverloadedError",
   "PayloadTooLargeError",
   "PermissionError",
@@ -254,7 +275,10 @@ __all__ = [
   "ToolHandler",
   "Usage",
   "VERSION",
+  "VIDEO_PROFILE",
+  "VideoAttachment",
   "VideoNotAvailableError",
+  "VideoRequest",
   "__version__",
   "attachment_magic_matches",
   "create_tool_handler",
@@ -277,5 +301,6 @@ __all__ = [
   "stream_error",
   "validate_attachments",
   "validate_expected",
-  "validate_flow"
+  "validate_flow",
+  "video_attachment"
 ]

rightnow_system_zero-0.4.2/src/system_zero/_redaction.py

@@ -0,0 +1,207 @@
+"""Credential-safe diagnostics without retaining credentials after client GC."""
+import functools
+import builtins
+import logging
+import re
+from contextvars import ContextVar
+from types import MappingProxyType, MemberDescriptorType, GetSetDescriptorType
+from websockets.exceptions import ConnectionClosed, ConnectionClosedOK, ConnectionClosedError
+from websockets.frames import Close
+from collections.abc import Mapping
+
+_active_key = ContextVar('system_zero_diagnostic_key', default=None)
+_sensitive = re.compile(r'^(authorization|proxy-authorization|api[_-]?key)$', re.I)
+
+
+class Secret:
+    __slots__ = ('__value', '__weakref__')
+
+    def __init__(self, value):
+        self.__value = value
+
+    def reveal(self):
+        return self.__value
+
+    def __repr__(self):
+        return '[redacted]'
+
+    __str__ = __repr__
+
+    def __reduce_ex__(self, protocol):
+        raise TypeError('SDK credentials cannot be pickled.')
+
+
+def reveal(value):
+    # Revalidation still handles an application overwriting a private attribute.
+    return value.reveal() if isinstance(value, Secret) else value
+
+
+def redact_text(value, key=None):
+    key = reveal(key if key is not None else _active_key.get())
+    if key:
+        value = value.replace(key, '[redacted]')
+    return re.sub(r'\bBearer[ \t]+[A-Za-z0-9._~+/-]+=*', 'Bearer [redacted]', value, flags=re.I)
+
+
+def redact(value, _seen=None, _depth=0):
+    if isinstance(value, str):
+        return redact_text(value)
+    if isinstance(value, bytes):
+        clean = redact_text(value.decode('utf-8', errors='replace')).encode('utf-8')
+        return value if clean == value else clean
+    if value is None or isinstance(value, (bool, int, float, Secret)):
+        return value
+    seen = set() if _seen is None else _seen
+    if id(value) in seen or _depth > 32 or len(seen) > 4096:
+        return '[omitted]'
+    seen.add(id(value))
+    if isinstance(value, Mapping):
+        clean = {redact_text(str(k)): redact(v, seen, _depth + 1) for k, v in value.items()
+                 if not _sensitive.fullmatch(str(k))}
+        return value if len(clean) == len(value) and all(k in value and v is value[k] for k, v in clean.items()) else clean
+    if isinstance(value, (tuple, list)):
+        clean = type(value)(redact(v, seen, _depth + 1) for v in value)
+        return value if all(a is b for a, b in zip(value, clean)) else clean
+    return '[omitted]'
+
+
+def protect_exception(error, seen=None):
+    """Scrub reachable native causes, including suppressed Python contexts."""
+    seen = set() if seen is None else seen
+    if id(error) in seen:
+        return Exception('Cyclic exception context omitted.')
+    if len(seen) >= 32:
+        return Exception('Further exception context omitted.')
+    seen.add(id(error))
+    # Foreign exception classes may print or pickle hidden slots through custom hooks.
+    # Keep SDK/builtin classifications; retain only plain diagnostic state otherwise.
+    module = type(error).__module__
+    close = isinstance(error, ConnectionClosed)
+    if close:
+        def frame(value):
+            return None if value is None else Close(value.code, redact_text(value.reason))
+        cls = ConnectionClosedOK if isinstance(error, ConnectionClosedOK) else ConnectionClosedError if isinstance(error, ConnectionClosedError) else ConnectionClosed
+        clean = cls(frame(error.rcvd), frame(error.sent), error.rcvd_then_sent)
+        clean.__dict__.update({name: value for name, value in vars(error).items()
+                               if name not in ('rcvd', 'sent', 'rcvd_then_sent')})
+        clean.__cause__, clean.__context__, clean.__traceback__ = error.__cause__, error.__context__, error.__traceback__
+        error = clean
+    elif module != 'builtins' and not module.startswith('system_zero.'):
+        clean = Exception(*redact(error.args))
+        clean.__dict__.update(vars(error))
+        clean.__cause__, clean.__context__, clean.__traceback__ = error.__cause__, error.__context__, error.__traceback__
+        error = clean
+    group = isinstance(error, getattr(builtins, 'BaseExceptionGroup', ()))
+    if group:
+        children = tuple(protect_exception(child, seen) for child in error.exceptions)
+        clean = builtins.BaseExceptionGroup(redact_text(error.message), children)
+        clean.__dict__.update(vars(error))
+        clean.__cause__, clean.__context__, clean.__traceback__ = error.__cause__, error.__context__, error.__traceback__
+        error = clean
+    elif not close:
+        error.args = redact(error.args)
+    # Built-in exception printing and pickling use native slots independently
+    # of args/__dict__ (SyntaxError, UnicodeError, AttributeError, ImportError...).
+    # Enumerate the built-in descriptors, not arbitrary foreign properties.
+    excluded = {'args', '__dict__', '__weakref__', '__traceback__', '__cause__', '__context__', 'exceptions', 'message'}
+    for cls in type(error).__mro__:
+        if cls.__module__ != 'builtins':
+            continue
+        for name, descriptor in vars(cls).items():
+            if name.startswith('__') or name in excluded or not isinstance(descriptor, (MemberDescriptorType, GetSetDescriptorType)):
+                continue
+            value = getattr(error, name, None)
+            clean = redact(value)
+            if clean is value:
+                continue
+            try:
+                setattr(error, name, clean)
+            except (AttributeError, TypeError):
+                # Unknown read-only native state cannot safely retain its type.
+                clean = Exception(*redact(error.args))
+                clean.__dict__.update(vars(error))
+                clean.__cause__, clean.__context__, clean.__traceback__ = error.__cause__, error.__context__, error.__traceback__
+                error = clean
+                break
+    for name, value in list(vars(error).items()):
+        if redact_text(name) != name or _sensitive.fullmatch(name) or name in ('request', '_request', 'response', 'config'):
+            delattr(error, name)
+        elif close and name in ('rcvd', 'sent'):
+            continue
+        elif isinstance(value, BaseException):
+            setattr(error, name, protect_exception(value, seen))
+        else:
+            clean = redact(value)
+            setattr(error, name, MappingProxyType(clean) if isinstance(value, MappingProxyType) else clean)
+    for name in ('__cause__', '__context__'):
+        cause = getattr(error, name)
+        if cause is not None:
+            setattr(error, name, protect_exception(cause, seen))
+    return error
+
+
+def protected(method):
+    @functools.wraps(method)
+    def call(*args, **kwargs):
+        owner = args[0] if args else kwargs.get('client')
+        token = _active_key.set(getattr(owner, '_api_key', getattr(getattr(owner, '_client', None), '_api_key', None)))
+        try:
+            try:
+                return method(*args, **kwargs)
+            except Exception as error:
+                failure = protect_exception(error)
+                if failure is error:
+                    raise
+            # Outside the except suite: do not attach the raw group as context.
+            raise failure from None
+        finally:
+            _active_key.reset(token)
+    return call
+
+
+def protected_async(method):
+    @functools.wraps(method)
+    async def call(*args, **kwargs):
+        token = _active_key.set(getattr(args[0], '_api_key', None))
+        try:
+            try:
+                return await method(*args, **kwargs)
+            except Exception as error:
+                failure = protect_exception(error)
+                if failure is error:
+                    raise
+            raise failure from None
+        finally:
+            _active_key.reset(token)
+    return call
+
+
+class DiagnosticLogger(logging.LoggerAdapter):
+    """Redact before LogRecord creation; leave application logging untouched."""
+    def __init__(self, key):
+        super().__init__(logging.getLogger('websockets.client'), {})
+        self._key = key
+
+    def log(self, level, msg, *args, **kwargs):
+        if self.isEnabledFor(level):
+            text = str(msg) % args if args else str(msg)
+            # Native exceptions may carry requests. Never attach exc_info here.
+            kwargs.pop('exc_info', None)
+            kwargs.pop('extra', None)
+            self.logger.log(level, redact_text(text, self._key), **kwargs)
+
+
+class _ContextFilter(logging.Filter):
+    def filter(self, record):
+        if _active_key.get() is not None:
+            record.msg = redact_text(record.getMessage())
+            record.args = ()
+            # A native traceback can retain a request with credential headers.
+            record.exc_info = record.exc_text = None
+        return True
+
+
+# Library loggers, not handlers or the root logger. ContextVar isolates other callers.
+_filter = _ContextFilter()
+for _logger_name in ('httpx', 'httpcore.connection', 'httpcore.http11', 'httpcore.http2', 'httpcore.proxy', 'httpcore.socks'):
+    logging.getLogger(_logger_name).addFilter(_filter)