@opengeni/api-router 0.12.5 → 0.12.12

package/dist/{chunk-3BHOMOSD.js → chunk-5TULDPWX.js}

@@ -21,13 +21,13 @@ import {
 import { dbSql, getWorkspace as getWorkspace2 } from "@opengeni/db";
 import { createObservability } from "@opengeni/observability";
 import { createObjectStorage } from "@opengeni/storage";
-import { WebStandardStreamableHTTPServerTransport as WebStandardStreamableHTTPServerTransport2 } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
+import { WebStandardStreamableHTTPServerTransport as WebStandardStreamableHTTPServerTransport3 } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 import { Hono } from "hono";
 import { bodyLimit } from "hono/body-limit";
 import { cors } from "hono/cors";
 import { HTTPException as HTTPException26 } from "hono/http-exception";
 import {
-  hasPermission as hasPermission9,
+  hasPermission as hasPermission10,
   requireAccessGrant as requireAccessGrant18,
   requirePermission,
   requireSessionAuthorization as requireSessionAuthorization3,
@@ -291,6 +291,8 @@ import { requireLimit as requireLimit8 } from "@opengeni/core";
 // src/mcp/server.ts
 import {
   CreateScheduledTaskRequest,
+  DEFAULT_FIRST_PARTY_MCP_TOOLS,
+  FIRST_PARTY_MCP_TOOL_NAMES,
   defaultRepositoryMountPath,
   SESSION_EVENT_RAW_DELTA_TYPES,
   SessionEventLatestClass,
@@ -335,7 +337,6 @@ import {
   MEMORY_CORRECT_TOOL_DESCRIPTION,
   MEMORY_SAVE_TOOL_DESCRIPTION,
   MEMORY_SEARCH_TOOL_DESCRIPTION,
-  requireFile,
   requireScheduledTask,
   requireSession,
   saveWorkspaceMemory,
@@ -356,7 +357,9 @@ import {
   GitHubAppConfigurationError,
   githubAppMissingSettings
 } from "@opengeni/github";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import {
+  McpServer
+} from "@modelcontextprotocol/sdk/server/mcp.js";
 import * as z4 from "zod/v4";
 import {
   hasPermission as hasPermission2,
@@ -418,6 +421,7 @@ async function listWorkspaceGitHubInstallationBindings(deps, workspaceId) {
     ),
     repositoryScope: installation.repositoryScope,
     repositoryCount: installation.repositoryIds.length,
+    configureUrl: null,
     createdAt: installation.createdAt,
     updatedAt: installation.updatedAt
   }));
@@ -2607,17 +2611,124 @@ function slackPostOutcomeMayBeAmbiguous(error) {
 }
 
 // src/mcp/server.ts
+var FIRST_PARTY_TOOL_AUTHORIZATION = {
+  set_session_title: { sessionRequired: true, allOf: ["sessions:control"] },
+  goal_set: { sessionRequired: true, allOf: ["goals:manage"] },
+  goal_update: { sessionRequired: true, allOf: ["goals:manage"] },
+  goal_complete: { sessionRequired: true, allOf: ["goals:manage"] },
+  goal_pause: { sessionRequired: true, allOf: ["goals:manage"] },
+  memory_search: { sessionRequired: true, allOf: ["documents:search"] },
+  memory_save: { sessionRequired: true, allOf: ["documents:search"] },
+  memory_correct: { sessionRequired: true, allOf: ["documents:search"] },
+  sandboxes_list: { sessionRequired: true, allOf: ["sessions:read"] },
+  sandbox_attach: { sessionRequired: true, allOf: ["sessions:control"] },
+  sandbox_swap: { sessionRequired: true, allOf: ["sessions:control"] },
+  run_on: { sessionRequired: true, allOf: ["sessions:control"] },
+  sandbox_provision: { sessionRequired: true, allOf: ["sessions:control"] },
+  rig_list: { allOf: ["rigs:use"] },
+  rig_get: { allOf: ["rigs:use"] },
+  rig_propose_change: { allOf: ["rigs:use"] },
+  rig_verify: { allOf: ["rigs:use"] },
+  rig_promote: { allOf: ["rigs:manage"] },
+  sessions_list: { allOf: ["sessions:read"] },
+  session_get: { allOf: ["sessions:read"] },
+  session_events: { allOf: ["sessions:read"] },
+  session_create: { allOf: ["sessions:create"] },
+  session_send_message: { allOf: ["sessions:control"] },
+  session_pause: { allOf: ["sessions:control"] },
+  session_resume: { allOf: ["sessions:control"] },
+  session_steer: { sessionRequired: true, allOf: ["sessions:control"] },
+  set_other_session_title: { allOf: ["sessions:control"] },
+  variable_set_list: { allOf: ["variable-sets:use"] },
+  environment_list: { allOf: ["variable-sets:use"] },
+  variable_set_set_variable: { allOf: ["variable-sets:manage"] },
+  environment_set_variable: { allOf: ["variable-sets:manage"] },
+  github_connect_link: { allOf: ["github:use"] },
+  github_token: { sessionRequired: true, allOf: ["github:use"] },
+  github_repositories_list: { allOf: ["github:use"] },
+  social_connections_list: { allOf: ["connections:read"] },
+  social_posts_recent: { allOf: ["connections:read"] },
+  social_daily_analysis_context: { allOf: ["connections:read"] },
+  scheduled_tasks_list: { anyOf: ["scheduled_tasks:manage", "scheduled_tasks:run"] },
+  scheduled_tasks_get: { anyOf: ["scheduled_tasks:manage", "scheduled_tasks:run"] },
+  scheduled_tasks_create: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_tasks_update: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_tasks_pause: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_tasks_resume: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_tasks_trigger: { allOf: ["scheduled_tasks:run"] },
+  scheduled_tasks_delete: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_task_runs_list: { anyOf: ["scheduled_tasks:manage", "scheduled_tasks:run"] },
+  slack_bot_list_channels: { allOf: ["connections:read"] },
+  slack_bot_channel_history: { allOf: ["connections:read"] },
+  slack_bot_list_users: { allOf: ["connections:read"] },
+  slack_bot_post_message: { allOf: ["connections:read"] }
+};
+var FIRST_PARTY_MCP_TOOL_NAME_SET = new Set(FIRST_PARTY_MCP_TOOL_NAMES);
+var PolicyMcpServer = class extends McpServer {
+  constructor(grant, sessionId, selectedTools, allowUncatalogued) {
+    super({ name: "opengeni", version: "1.0.0" });
+    this.grant = grant;
+    this.sessionId = sessionId;
+    this.selectedTools = selectedTools;
+    this.allowUncatalogued = allowUncatalogued;
+  }
+  registeredToolCount = 0;
+  registerTool(name, config, cb) {
+    const catalogued = FIRST_PARTY_MCP_TOOL_NAME_SET.has(name);
+    let admitted = this.allowUncatalogued && !catalogued;
+    if (catalogued) {
+      const toolName = name;
+      const policy = FIRST_PARTY_TOOL_AUTHORIZATION[toolName];
+      const authorized = (!policy.sessionRequired || this.sessionId !== null) && (policy.allOf?.every((permission) => hasPermission2(this.grant.permissions, permission)) ?? true) && (policy.anyOf?.some((permission) => hasPermission2(this.grant.permissions, permission)) ?? true);
+      const selected = this.selectedTools === null || this.selectedTools.has(toolName);
+      admitted = authorized && selected;
+    }
+    if (!admitted) {
+      return {
+        ...config.title ? { title: config.title } : {},
+        ...config.description ? { description: config.description } : {},
+        ...config.annotations ? { annotations: config.annotations } : {},
+        ...config._meta ? { _meta: config._meta } : {},
+        handler: cb,
+        enabled: false,
+        enable() {
+        },
+        disable() {
+        },
+        update() {
+        },
+        remove() {
+        }
+      };
+    }
+    this.registeredToolCount += 1;
+    return super.registerTool(name, config, cb);
+  }
+  ensureToolsListHandler() {
+    if (this.registeredToolCount > 0) return;
+    super.registerTool(
+      "__opengeni_empty_first_party_surface__",
+      {
+        description: "Internal disabled placeholder for an empty first-party surface.",
+        inputSchema: z4.object({})
+      },
+      async () => ({
+        content: [{ type: "text", text: '{"unavailable":true}' }]
+      })
+    ).disable();
+  }
+};
 function buildOpenGeniMcpServer(deps, grant, options = {}) {
-  const server = new McpServer({
-    name: "opengeni",
-    version: "1.0.0"
-  });
   const json = (value) => ({
     content: [{ type: "text", text: JSON.stringify(value, null, 2) }]
   });
   const can = (permission) => hasPermission2(grant.permissions, permission);
   const toolspaceMode = options.toolspace != null;
   const sessionId = typeof grant.metadata?.["sessionId"] === "string" ? grant.metadata["sessionId"] : null;
+  const selectedTools = sessionId !== null && !toolspaceMode ? new Set(
+    grant.metadata?.["firstPartyMcpTools"] ?? DEFAULT_FIRST_PARTY_MCP_TOOLS
+  ) : null;
+  const server = new PolicyMcpServer(grant, sessionId, selectedTools, toolspaceMode);
   if (sessionId !== null && (!toolspaceMode || can("sessions:control"))) {
     server.registerTool(
       "set_session_title",
@@ -2657,44 +2768,6 @@ function buildOpenGeniMcpServer(deps, grant, options = {}) {
       registerGitHubTokenTool(server, deps, grant, sessionId, json);
     }
   }
-  if (!toolspaceMode || can("files:read")) {
-    server.registerTool(
-      "files_get_download_url",
-      {
-        description: "Create a short-lived download URL for a ready file asset.",
-        inputSchema: { fileId: z4.string().uuid() }
-      },
-      async ({ fileId }) => {
-        if (!deps.objectStorage) {
-          throw new Error("object storage is not configured");
-        }
-        const file = await requireFile(deps.db, grant.workspaceId, fileId);
-        if (file.status !== "ready") {
-          throw new Error(`file is ${file.status}`);
-        }
-        const signed = await deps.objectStorage.createGetUrl({
-          key: file.objectKey
-        });
-        return json({
-          file: {
-            id: file.id,
-            filename: file.filename,
-            safeFilename: file.safeFilename,
-            contentType: file.contentType,
-            sizeBytes: file.sizeBytes,
-            sha256: file.sha256,
-            status: file.status,
-            createdAt: file.createdAt,
-            updatedAt: file.updatedAt
-          },
-          downloadUrl: {
-            url: signed.url,
-            expiresAt: signed.expiresAt.toISOString()
-          }
-        });
-      }
-    );
-  }
   if (!toolspaceMode || can("github:use")) {
     server.registerTool(
       "github_repositories_list",
@@ -2985,7 +3058,8 @@ function buildOpenGeniMcpServer(deps, grant, options = {}) {
         await deps.workflowClient.triggerScheduledTask({
           task,
           agentRunUsageIdempotencyKey,
-          triggerWorkflowId
+          triggerWorkflowId,
+          initiator: { kind: "subject", subjectId: grant.subjectId }
         });
         await recordWorkspaceUsage(deps, {
           accountId: grant.accountId,
@@ -3031,6 +3105,7 @@ function buildOpenGeniMcpServer(deps, grant, options = {}) {
     );
   }
   registerToolspaceProxyTools(server, options.toolspace ?? null);
+  server.ensureToolsListHandler();
   return server;
 }
 function registerSlackBotTools(server, deps, grant, sessionId, json) {
@@ -3658,7 +3733,7 @@ function registerRigTools(server, deps, grant, can, sessionId, json) {
     );
   }
 }
-function exactAgentCommandContext(grant, callerSessionId) {
+function exactAgentCommandContext(grant, callerSessionId, authorizationSurface) {
   const turnId = grant.metadata?.["turnId"];
   const attemptId = grant.metadata?.["attemptId"];
   const executionGeneration = grant.metadata?.["executionGeneration"];
@@ -3672,7 +3747,8 @@ function exactAgentCommandContext(grant, callerSessionId) {
     callerSessionId,
     callerTurnId: turnId,
     callerAttemptId: attemptId,
-    callerExecutionGeneration: executionGeneration
+    callerExecutionGeneration: executionGeneration,
+    ...authorizationSurface ? { authorizationSurface } : {}
   };
 }
 function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSessionId, toolspaceMode, json) {
@@ -3896,6 +3972,9 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
           firstPartyMcpPermissions: z4.array(z4.string()).optional().describe(
             "Optional first-party capability set for the child. Omit to inherit this session's effective permissions. An explicit set may only narrow capabilities held by this session. A goal-bearing child requires goals:manage in the resulting set; creation fails rather than adding it implicitly."
           ),
+          firstPartyMcpTools: z4.array(z4.enum(FIRST_PARTY_MCP_TOOL_NAMES)).optional().describe(
+            "Exact model-visible first-party tool selection for the child. Omit to inherit this session's effective selection. This does not grant permissions."
+          ),
           // Shared-sandbox placement (addendum 05 §D). OMIT (default) to SHARE the
           // creator's box — one filesystem/repo/desktop, N independent conversations;
           // this is the SAFE DEFAULT. Pass "new" for a fresh isolated box (a different
@@ -3949,7 +4028,7 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
     server.registerTool(
       "session_send_message",
       {
-        description: "Send information to another session. From an OpenGeni worker this becomes a coalescible internal update, never a visible prompt-queue row; pending updates are delivered together on the target's next inference. A sessionless operator call appends one visible prompt.",
+        description: "Send information to another session. From an OpenGeni worker this becomes a canonical coalescible machine input: it appears in the target's compact incoming queue group, is durably added to model history when claimed, and remains visible in the timeline. A sessionless operator call appends one human/API prompt.",
         inputSchema: {
           sessionId: z4.string().uuid(),
           text: z4.string().min(1),
@@ -3987,7 +4066,6 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
           targetSessionId,
           {
             text,
-            toolsProvided: false,
             delivery: "send",
             origin: "operator",
             clientEventId: idempotencyKey,
@@ -4010,16 +4088,10 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
         }
       },
       async ({ sessionId, idempotencyKey, reason }) => {
-        const authorization = await authorizeFirstPartySession(
-          deps,
-          grant,
-          sessionId,
-          "session.control"
-        );
         if (callerSessionId !== null) {
           const controlled2 = await controlAgentSessionWorkstream(
             deps,
-            exactAgentCommandContext(grant, callerSessionId),
+            exactAgentCommandContext(grant, callerSessionId, "first_party_mcp"),
             {
               targetSessionId: sessionId,
               action: "pause",
@@ -4032,7 +4104,7 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
             effectiveControl: projectEffectiveControlForRelatedAccess(
               serializeEffectiveSessionControl(controlled2.control),
               sessionId,
-              authorization?.relatedSessionAccess ?? "root"
+              controlled2.authorization?.relatedSessionAccess ?? "root"
             ),
             interruptionCount: controlled2.interruptionCount,
             replay: controlled2.replay
@@ -4044,7 +4116,8 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
             accountId: grant.accountId,
             workspaceId: grant.workspaceId,
             sessionId,
-            subjectId: grant.subjectId
+            subjectId: grant.subjectId,
+            authorizationSurface: "first_party_mcp"
           },
           {
             action: "pause",
@@ -4052,14 +4125,7 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
             ...reason ? { reason } : {}
           }
         );
-        return json({
-          ...controlled,
-          effectiveControl: projectEffectiveControlForRelatedAccess(
-            controlled.effectiveControl,
-            sessionId,
-            authorization?.relatedSessionAccess ?? "root"
-          )
-        });
+        return json(controlled);
       }
     );
     server.registerTool(
@@ -4073,16 +4139,10 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
         }
       },
       async ({ sessionId, idempotencyKey, reason }) => {
-        const authorization = await authorizeFirstPartySession(
-          deps,
-          grant,
-          sessionId,
-          "session.control"
-        );
         if (callerSessionId !== null) {
           const controlled2 = await controlAgentSessionWorkstream(
             deps,
-            exactAgentCommandContext(grant, callerSessionId),
+            exactAgentCommandContext(grant, callerSessionId, "first_party_mcp"),
             {
               targetSessionId: sessionId,
               action: "resume",
@@ -4095,7 +4155,7 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
             effectiveControl: projectEffectiveControlForRelatedAccess(
               serializeEffectiveSessionControl(controlled2.control),
               sessionId,
-              authorization?.relatedSessionAccess ?? "root"
+              controlled2.authorization?.relatedSessionAccess ?? "root"
             ),
             interruptionCount: controlled2.interruptionCount,
             replay: controlled2.replay
@@ -4107,7 +4167,8 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
             accountId: grant.accountId,
             workspaceId: grant.workspaceId,
             sessionId,
-            subjectId: grant.subjectId
+            subjectId: grant.subjectId,
+            authorizationSurface: "first_party_mcp"
           },
           {
             action: "resume",
@@ -4115,21 +4176,14 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
             ...reason ? { reason } : {}
           }
         );
-        return json({
-          ...controlled,
-          effectiveControl: projectEffectiveControlForRelatedAccess(
-            controlled.effectiveControl,
-            sessionId,
-            authorization?.relatedSessionAccess ?? "root"
-          )
-        });
+        return json(controlled);
       }
     );
     if (callerSessionId !== null) {
       server.registerTool(
         "session_steer",
         {
-          description: "Atomically replace another session's current direction and resume it. The instruction is an internal update, never a human queue row.",
+          description: "Atomically replace another session's current direction and resume it. The Agent Steer is a typed machine input shown in the target queue/timeline and durably retained in model history; it never impersonates a human prompt.",
           inputSchema: {
             sessionId: z4.string().uuid(),
             instruction: z4.string().min(1),
@@ -4137,10 +4191,9 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
           }
         },
         async ({ sessionId, instruction, idempotencyKey }) => {
-          await authorizeFirstPartySession(deps, grant, sessionId, "session.steer");
           const result = await steerAgentSession(
             deps,
-            exactAgentCommandContext(grant, callerSessionId),
+            exactAgentCommandContext(grant, callerSessionId, "first_party_mcp"),
             { targetSessionId: sessionId, instruction, idempotencyKey }
           );
           return json({
@@ -4314,14 +4367,16 @@ function registerGitHubConnectTool(server, deps, grant, options, json) {
       const { settings } = deps;
       const missing = githubAppMissingSettings(settings);
       const slug = settings.githubAppSlug?.trim() || null;
+      const setupMode = settings.productAccessMode === "managed" ? "platform" : "operator";
       if (missing.length > 0 || !slug) {
         return json({
           configured: false,
           status: "disabled",
-          appSlug: slug,
+          setupMode,
+          appSlug: setupMode === "operator" ? slug : null,
           installUrl: null,
           linkUrl: null,
-          missing
+          missing: setupMode === "operator" ? missing : []
         });
       }
       const installations = await listWorkspaceGitHubInstallationBindings(deps, grant.workspaceId);
@@ -4334,13 +4389,18 @@ function registerGitHubConnectTool(server, deps, grant, options, json) {
         ...githubBrowserGrantClaims(settings, grant)
       }) : null;
       const connectUrl = state ? `${baseUrl}/v1/workspaces/${grant.workspaceId}/github/connect?state=${encodeURIComponent(state)}` : null;
+      const installationViews = installations.map((installation) => ({
+        ...installation,
+        configureUrl: state && baseUrl ? `${baseUrl}/v1/workspaces/${grant.workspaceId}/github/installations/${installation.installationId}/configure?state=${encodeURIComponent(state)}` : null
+      }));
       return json({
         configured: true,
         status,
-        appSlug: slug,
+        setupMode,
+        appSlug: setupMode === "operator" ? slug : null,
         installUrl: connectUrl,
         linkUrl: connectUrl,
-        installations,
+        installations: installationViews,
         missing: []
       });
     }
@@ -5881,8 +5941,8 @@ function registerCatalogAssetRoutes(app, deps) {
     if (!contentType) {
       throw new HTTPException5(404, { message: "asset not found" });
     }
-    const object4 = await objectStorage.getObjectBytes(key);
-    if (!object4) {
+    const object5 = await objectStorage.getObjectBytes(key);
+    if (!object5) {
       throw new HTTPException5(404, { message: "asset not found" });
     }
     const etag = etagForKey(key);
@@ -5895,7 +5955,7 @@ function registerCatalogAssetRoutes(app, deps) {
     if (ifNoneMatchSatisfied(c.req.header("if-none-match"), etag)) {
       return c.body(null, 304, headers);
     }
-    return c.body(new Uint8Array(object4.bytes), 200, { ...headers, "Content-Type": contentType });
+    return c.body(new Uint8Array(object5.bytes), 200, { ...headers, "Content-Type": contentType });
   });
 }
 function catalogAssetKeyFromPath(pathname) {
@@ -8931,7 +8991,7 @@ import {
   queueDocumentForReindex,
   searchDocuments as searchDocuments2
 } from "@opengeni/documents";
-import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
+import { WebStandardStreamableHTTPServerTransport as WebStandardStreamableHTTPServerTransport2 } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 import { HTTPException as HTTPException11 } from "hono/http-exception";
 import { requireAccessGrant as requireAccessGrant5 } from "@opengeni/core";
 import { recordWorkspaceUsage as recordWorkspaceUsage3, requireLimit as requireLimit3 } from "@opengeni/core";
@@ -9162,8 +9222,90 @@ import {
 import { HTTPException as HTTPException10 } from "hono/http-exception";
 import { requireAccessGrant as requireAccessGrant4 } from "@opengeni/core";
 import { recordWorkspaceUsage as recordWorkspaceUsage2, requireLimit as requireLimit2 } from "@opengeni/core";
+import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
+
+// src/mcp/files.ts
+import { requireFile } from "@opengeni/db";
+import { hasPermission as hasPermission7 } from "@opengeni/core";
+import { McpServer as McpServer3 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import * as z3 from "zod/v4";
+function buildFilesMcpServer(deps, grant) {
+  const server = new McpServer3({
+    name: "opengeni-files",
+    version: "1.0.0"
+  });
+  if (!hasPermission7(grant.permissions, "files:read")) {
+    server.registerTool(
+      "__opengeni_empty_files_surface__",
+      {
+        description: "Internal disabled placeholder for an unauthorized files surface.",
+        inputSchema: z3.object({})
+      },
+      async () => ({
+        content: [{ type: "text", text: '{"unavailable":true}' }]
+      })
+    ).disable();
+    return server;
+  }
+  server.registerTool(
+    "files_get_download_url",
+    {
+      description: "Create a short-lived download URL for a ready file asset.",
+      inputSchema: { fileId: z3.string().uuid() }
+    },
+    async ({ fileId }) => {
+      if (!deps.objectStorage) {
+        throw new Error("object storage is not configured");
+      }
+      const file = await requireFile(deps.db, grant.workspaceId, fileId);
+      if (file.status !== "ready") {
+        throw new Error(`file is ${file.status}`);
+      }
+      const signed = await deps.objectStorage.createGetUrl({ key: file.objectKey });
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify(
+              {
+                file: {
+                  id: file.id,
+                  filename: file.filename,
+                  safeFilename: file.safeFilename,
+                  contentType: file.contentType,
+                  sizeBytes: file.sizeBytes,
+                  sha256: file.sha256,
+                  status: file.status,
+                  createdAt: file.createdAt,
+                  updatedAt: file.updatedAt
+                },
+                downloadUrl: {
+                  url: signed.url,
+                  expiresAt: signed.expiresAt.toISOString()
+                }
+              },
+              null,
+              2
+            )
+          }
+        ]
+      };
+    }
+  );
+  return server;
+}
+
+// src/routes/files.ts
 function registerFileRoutes(app, deps) {
   const { db, objectStorage } = deps;
+  app.all("/v1/workspaces/:workspaceId/mcp/files", async (c) => {
+    const workspaceId = c.req.param("workspaceId");
+    const grant = await requireAccessGrant4(c, deps, workspaceId, "files:read");
+    const transport = new WebStandardStreamableHTTPServerTransport({ enableJsonResponse: true });
+    const server = buildFilesMcpServer(deps, grant);
+    await server.connect(transport);
+    return await transport.handleRequest(c.req.raw);
+  });
   app.post("/v1/workspaces/:workspaceId/files/uploads", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant4(c, deps, workspaceId, "files:upload");
@@ -9972,7 +10114,7 @@ function registerDocumentRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant5(c, deps, workspaceId, "documents:search");
     const sessionId = typeof grant.metadata?.sessionId === "string" ? grant.metadata.sessionId : void 0;
-    const transport = new WebStandardStreamableHTTPServerTransport({ enableJsonResponse: true });
+    const transport = new WebStandardStreamableHTTPServerTransport2({ enableJsonResponse: true });
     const server = buildDocumentsMcpServer(
       db,
       grant.accountId,
@@ -11653,6 +11795,7 @@ import {
   buildGitHubAppManifest,
   convertGitHubAppManifest,
   createSignedState as createSignedState5,
+  discoverGitHubInstallationBindingCandidates,
   envLinesFromGitHubManifestConversion,
   GitHubAppApiError,
   GitHubAppConfigurationError as GitHubAppConfigurationError2,
@@ -11667,7 +11810,7 @@ import {
 } from "@opengeni/github";
 import { deleteCookie, setCookie } from "hono/cookie";
 import { HTTPException as HTTPException17 } from "hono/http-exception";
-import { hasPermission as hasPermission7, requireAccessGrant as requireAccessGrant10 } from "@opengeni/core";
+import { hasPermission as hasPermission8, requireAccessGrant as requireAccessGrant10 } from "@opengeni/core";
 var githubStateCookie = "opengeni_github_state";
 var githubBindingStateMaxAgeSeconds = 10 * 60;
 var legacyInstallationChooserDisabledMessage = "The legacy repository-admin GitHub installation chooser is disabled; use the GitHub owner-consent connect flow";
@@ -11680,7 +11823,8 @@ function registerGitHubRoutes(app, deps) {
     const slug = settings.githubAppSlug?.trim() || null;
     const installations = missing.length === 0 ? await listWorkspaceGitHubInstallationBindings(deps, grant.workspaceId) : [];
     const status = githubBindingStatus(missing.length === 0, installations);
-    const canManage = hasPermission7(grant.permissions, "github:manage");
+    const setupMode = settings.productAccessMode === "managed" ? "platform" : "operator";
+    const canManage = hasPermission8(grant.permissions, "github:manage");
     const connectState = missing.length === 0 && slug && canManage ? createSignedState5(githubStateSecret, {
       accountId: grant.accountId,
       workspaceId: grant.workspaceId,
@@ -11688,16 +11832,21 @@ function registerGitHubRoutes(app, deps) {
       ...githubBrowserGrantClaims(settings, grant)
     }) : null;
     const connectUrl = connectState ? `${openGeniBaseUrl(settings, c)}/v1/workspaces/${grant.workspaceId}/github/connect?state=${encodeURIComponent(connectState)}` : null;
+    const installationViews = installations.map((installation) => ({
+      ...installation,
+      configureUrl: connectState ? `${openGeniBaseUrl(settings, c)}/v1/workspaces/${grant.workspaceId}/github/installations/${installation.installationId}/configure?state=${encodeURIComponent(connectState)}` : null
+    }));
     return c.json({
       configured: missing.length === 0,
       status,
-      appId: settings.githubAppId ?? null,
-      clientId: settings.githubClientId ?? null,
-      appSlug: slug,
+      setupMode,
+      appId: setupMode === "operator" ? settings.githubAppId ?? null : null,
+      clientId: setupMode === "operator" ? settings.githubClientId ?? null : null,
+      appSlug: setupMode === "operator" ? slug : null,
       installUrl: connectUrl,
       linkUrl: connectUrl,
-      installations,
-      missing
+      installations: installationViews,
+      missing: setupMode === "operator" ? missing : []
     });
   });
   app.get("/v1/workspaces/:workspaceId/github/connect", async (c) => {
@@ -11710,8 +11859,8 @@ function registerGitHubRoutes(app, deps) {
     if (!statePayload || statePayload.intent !== "installation_authority" || statePayload.workspaceId !== workspaceId || typeof statePayload.accountId !== "string" || !isFreshGitHubBindingState(statePayload)) {
       throw new HTTPException17(400, { message: "invalid or expired GitHub installation state" });
     }
-    const slug = settings.githubAppSlug?.trim();
-    if (!slug || githubAppMissingSettings2(settings).length > 0) {
+    const clientId = settings.githubClientId?.trim();
+    if (!clientId || githubAppMissingSettings2(settings).length > 0) {
       throw new HTTPException17(409, {
         message: JSON.stringify({
           message: "GitHub App is not configured",
@@ -11719,9 +11868,19 @@ function registerGitHubRoutes(app, deps) {
         })
       });
     }
-    setGitHubStateCookie(c, deps, state);
+    const discoveryState = createSignedState5(githubStateSecret, {
+      accountId: statePayload.accountId,
+      workspaceId,
+      intent: "installation_authority_discovery",
+      ...continuedGitHubBrowserGrantClaims(statePayload)
+    });
+    setGitHubStateCookie(c, deps, discoveryState);
     return c.redirect(
-      `https://github.com/apps/${slug}/installations/new?state=${encodeURIComponent(state)}`
+      githubOAuthAuthorizeUrl({
+        clientId,
+        state: discoveryState,
+        redirectUri: `${openGeniBaseUrl(settings, c)}/v1/github/oauth/callback`
+      })
     );
   });
   app.get("/v1/workspaces/:workspaceId/github/repositories", async (c) => {
@@ -11773,7 +11932,46 @@ function registerGitHubRoutes(app, deps) {
     }
     return c.body(null, 204);
   });
+  app.get(
+    "/v1/workspaces/:workspaceId/github/installations/:installationId/configure",
+    async (c) => {
+      const workspaceId = c.req.param("workspaceId");
+      const installationId = parsePositiveInteger(c.req.param("installationId"));
+      const state = c.req.query("state");
+      if (installationId === null || !state) {
+        throw new HTTPException17(400, { message: "invalid GitHub installation configuration" });
+      }
+      const statePayload = readSignedState4(state, githubStateSecret);
+      if (!statePayload || statePayload.intent !== "installation_authority" || statePayload.workspaceId !== workspaceId || typeof statePayload.accountId !== "string" || !isFreshGitHubBindingState(statePayload)) {
+        throw new HTTPException17(400, {
+          message: "invalid or expired GitHub installation configuration state"
+        });
+      }
+      const grant = await requireGitHubManageGrant(c, deps, workspaceId, statePayload);
+      if (grant.accountId !== statePayload.accountId) {
+        throw new HTTPException17(403, {
+          message: "GitHub installation state does not match this workspace"
+        });
+      }
+      const installation = (await listWorkspaceGitHubInstallationBindings(deps, grant.workspaceId)).find((candidate) => candidate.installationId === installationId);
+      if (!installation) {
+        throw new HTTPException17(404, { message: "GitHub installation binding not found" });
+      }
+      const configureState = createSignedState5(githubStateSecret, {
+        accountId: grant.accountId,
+        workspaceId: grant.workspaceId,
+        expectedInstallationId: installationId,
+        intent: "installation_authority_install",
+        ...continuedGitHubBrowserGrantClaims(statePayload)
+      });
+      setGitHubStateCookie(c, deps, configureState);
+      const configureUrl = githubInstallationSettingsUrl(installation);
+      configureUrl.searchParams.set("state", configureState);
+      return c.redirect(configureUrl.toString());
+    }
+  );
   app.post("/v1/workspaces/:workspaceId/github/app-manifest", async (c) => {
+    assertOperatorGitHubAppSetup(settings);
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant10(c, deps, workspaceId, "github:manage");
     const payload = GitHubAppManifestCreate.parse(await c.req.json());
@@ -11802,6 +12000,7 @@ function registerGitHubRoutes(app, deps) {
     });
   });
   app.get("/v1/github/app-manifest/callback", async (c) => {
+    assertOperatorGitHubAppSetup(settings);
     const code = c.req.query("code");
     const state = c.req.query("state");
     if (!code) {
@@ -11821,12 +12020,15 @@ function registerGitHubRoutes(app, deps) {
     }
   });
   const handleGitHubInstallCallback = async (c) => {
-    const state = c.req.query("state");
+    const state = c.req.query("state") ?? allCookieValues(c, githubStateCookie).find((candidate) => {
+      const payload = readSignedState4(candidate, githubStateSecret);
+      return payload?.intent === "installation_authority_install" && isFreshGitHubBindingState(payload);
+    });
     if (!state) {
       throw new HTTPException17(400, { message: "missing GitHub installation state" });
     }
     const statePayload = readSignedState4(state, githubStateSecret);
-    if (!statePayload || statePayload.intent !== "installation_authority" || typeof statePayload.accountId !== "string" || typeof statePayload.workspaceId !== "string" || !isFreshGitHubBindingState(statePayload)) {
+    if (!statePayload || statePayload.intent !== "installation_authority_install" || typeof statePayload.accountId !== "string" || typeof statePayload.workspaceId !== "string" || !isFreshGitHubBindingState(statePayload)) {
       throw new HTTPException17(400, { message: "invalid or expired GitHub installation state" });
     }
     requireGitHubStateCookie(c, state);
@@ -11847,6 +12049,11 @@ function registerGitHubRoutes(app, deps) {
     if (installationId === null) {
       throw new HTTPException17(400, { message: "missing or invalid GitHub installation_id" });
     }
+    if (statePayload.expectedInstallationId !== void 0 && statePayload.expectedInstallationId !== installationId) {
+      throw new HTTPException17(409, {
+        message: "GitHub returned a different installation than the one being configured"
+      });
+    }
     const clientId = settings.githubClientId?.trim();
     if (!clientId) {
       throw new HTTPException17(409, {
@@ -11884,7 +12091,62 @@ function registerGitHubRoutes(app, deps) {
       throw new HTTPException17(400, { message: "missing GitHub OAuth state" });
     }
     const statePayload = readSignedState4(state, githubStateSecret);
-    if (!statePayload || statePayload.intent !== "installation_authority_oauth" || typeof statePayload.accountId !== "string" || typeof statePayload.workspaceId !== "string" || !isFreshGitHubBindingState(statePayload)) {
+    if (!statePayload || typeof statePayload.accountId !== "string" || typeof statePayload.workspaceId !== "string" || !isFreshGitHubBindingState(statePayload)) {
+      throw new HTTPException17(400, { message: "invalid or expired GitHub OAuth state" });
+    }
+    if (statePayload.intent === "installation_authority_discovery") {
+      requireGitHubStateCookie(c, state);
+      const grant2 = await requireGitHubManageGrant(c, deps, statePayload.workspaceId, statePayload);
+      if (grant2.accountId !== statePayload.accountId) {
+        throw new HTTPException17(403, {
+          message: "GitHub OAuth state does not match this workspace"
+        });
+      }
+      let candidates;
+      try {
+        candidates = deps.githubAppApi?.discoverInstallationBindingCandidates ? await deps.githubAppApi.discoverInstallationBindingCandidates({ code }) : deps.githubAppApi ? null : await discoverGitHubInstallationBindingCandidates(settings, { code });
+      } catch (error) {
+        throw githubAuthorityHttpError(error);
+      }
+      if (!candidates) {
+        throw new HTTPException17(409, {
+          message: "The configured GitHub provider cannot discover owner-authorized installations"
+        });
+      }
+      if (!isConsistentGitHubBindingCandidates(candidates)) {
+        throw new HTTPException17(409, {
+          message: "GitHub installation discovery proof is stale or invalid"
+        });
+      }
+      const selectionState = createSignedState5(githubStateSecret, {
+        accountId: grant2.accountId,
+        workspaceId: grant2.workspaceId,
+        intent: "installation_authority_selection",
+        allowedInstallationIds: candidates.map(({ installation }) => installation.installationId),
+        ...continuedGitHubBrowserGrantClaims(statePayload)
+      });
+      if (candidates.length === 0) {
+        return redirectToGitHubInstallation(c, deps, selectionState);
+      }
+      if (candidates.length === 1) {
+        return redirectToExactGitHubAuthorization(
+          c,
+          deps,
+          selectionState,
+          candidates[0].installation.installationId
+        );
+      }
+      setGitHubStateCookie(c, deps, selectionState);
+      return c.html(
+        githubInstallationChooserHtml(
+          candidates,
+          selectionState,
+          grant2.workspaceId,
+          openGeniBaseUrl(settings, c)
+        )
+      );
+    }
+    if (statePayload.intent !== "installation_authority_oauth") {
       throw new HTTPException17(400, { message: "invalid or expired GitHub OAuth state" });
     }
     const installationId = parsePositiveInteger(String(statePayload.installationId ?? ""));
@@ -11955,6 +12217,41 @@ function registerGitHubRoutes(app, deps) {
       )
     );
   });
+  app.post("/v1/workspaces/:workspaceId/github/installations/select", async (c) => {
+    const workspaceId = c.req.param("workspaceId");
+    const form = new URLSearchParams(await c.req.text());
+    const state = form.get("state");
+    if (!state) {
+      throw new HTTPException17(400, { message: "missing GitHub installation selection state" });
+    }
+    const statePayload = readSignedState4(state, githubStateSecret);
+    if (!statePayload || statePayload.intent !== "installation_authority_selection" || typeof statePayload.accountId !== "string" || statePayload.accountId.length === 0 || statePayload.workspaceId !== workspaceId || !isFreshGitHubBindingState(statePayload)) {
+      throw new HTTPException17(400, {
+        message: "invalid or expired GitHub installation selection state"
+      });
+    }
+    requireGitHubStateCookie(c, state);
+    const grant = await requireGitHubManageGrant(c, deps, workspaceId, statePayload);
+    if (grant.accountId !== statePayload.accountId) {
+      throw new HTTPException17(403, {
+        message: "GitHub installation state does not match this workspace"
+      });
+    }
+    const selected = form.get("installation_id");
+    if (selected === "new") {
+      return redirectToGitHubInstallation(c, deps, state);
+    }
+    const installationId = parsePositiveInteger(selected);
+    if (installationId === null) {
+      throw new HTTPException17(400, { message: "invalid GitHub installation selection" });
+    }
+    if (!Array.isArray(statePayload.allowedInstallationIds) || !statePayload.allowedInstallationIds.includes(installationId)) {
+      throw new HTTPException17(403, {
+        message: "GitHub installation was not in the owner-authorized selection"
+      });
+    }
+    return redirectToExactGitHubAuthorization(c, deps, state, installationId);
+  });
   app.post("/v1/workspaces/:workspaceId/github/installations", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const form = new URLSearchParams(await c.req.text());
@@ -11966,11 +12263,62 @@ function registerGitHubRoutes(app, deps) {
     if (!statePayload || typeof statePayload.accountId !== "string" || statePayload.accountId.length === 0 || statePayload.workspaceId !== workspaceId) {
       throw new HTTPException17(400, { message: "invalid or expired GitHub OAuth state" });
     }
-    throw legacyInstallationChooserDisabled();
+    throw new HTTPException17(410, { message: legacyInstallationChooserDisabledMessage });
+  });
+}
+function assertOperatorGitHubAppSetup(settings) {
+  if (settings.productAccessMode === "managed") {
+    throw new HTTPException17(404, {
+      message: "GitHub App creation is unavailable in platform-managed deployments"
+    });
+  }
+}
+function redirectToGitHubInstallation(c, deps, sourceState) {
+  const payload = readSignedState4(sourceState, deps.githubStateSecret);
+  const slug = deps.settings.githubAppSlug?.trim();
+  if (!payload || typeof payload.accountId !== "string" || typeof payload.workspaceId !== "string" || !slug) {
+    throw new HTTPException17(409, { message: "GitHub App installation is unavailable" });
+  }
+  const installState = createSignedState5(deps.githubStateSecret, {
+    accountId: payload.accountId,
+    workspaceId: payload.workspaceId,
+    intent: "installation_authority_install",
+    ...continuedGitHubBrowserGrantClaims(payload)
   });
+  setGitHubStateCookie(c, deps, installState);
+  return c.redirect(
+    `https://github.com/apps/${encodeURIComponent(slug)}/installations/new?state=${encodeURIComponent(installState)}`
+  );
+}
+function githubInstallationSettingsUrl(installation) {
+  if (installation.accountType === "Organization" && installation.accountLogin) {
+    return new URL(
+      `https://github.com/organizations/${encodeURIComponent(installation.accountLogin)}/settings/installations/${installation.installationId}`
+    );
+  }
+  return new URL(`https://github.com/settings/installations/${installation.installationId}`);
 }
-function legacyInstallationChooserDisabled() {
-  return new HTTPException17(410, { message: legacyInstallationChooserDisabledMessage });
+function redirectToExactGitHubAuthorization(c, deps, sourceState, installationId) {
+  const payload = readSignedState4(sourceState, deps.githubStateSecret);
+  const clientId = deps.settings.githubClientId?.trim();
+  if (!payload || typeof payload.accountId !== "string" || typeof payload.workspaceId !== "string" || !clientId) {
+    throw new HTTPException17(409, { message: "GitHub user authorization is unavailable" });
+  }
+  const oauthState = createSignedState5(deps.githubStateSecret, {
+    accountId: payload.accountId,
+    workspaceId: payload.workspaceId,
+    installationId,
+    intent: "installation_authority_oauth",
+    ...continuedGitHubBrowserGrantClaims(payload)
+  });
+  setGitHubStateCookie(c, deps, oauthState);
+  return c.redirect(
+    githubOAuthAuthorizeUrl({
+      clientId,
+      state: oauthState,
+      redirectUri: `${openGeniBaseUrl(deps.settings, c)}/v1/github/oauth/callback`
+    })
+  );
 }
 function setGitHubStateCookie(c, deps, state) {
   setCookie(c, githubStateCookie, state, {
@@ -12047,9 +12395,30 @@ function githubSuccessHtml(envLines) {
 function githubSetupSuccessHtml(account, returnUrl) {
   return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>GitHub App Connected</title><style>body{font-family:system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#0b0b0d;color:#f4f4f5}main{width:min(640px,calc(100vw - 32px));border:1px solid #27272a;border-radius:8px;padding:28px;background:#111114}h1{margin:0 0 10px;font-size:24px;line-height:1.2}p{margin:0 0 18px;color:#d4d4d8}.button{display:inline-flex;align-items:center;justify-content:center;min-height:36px;border-radius:6px;border:1px solid #3f3f46;padding:0 12px;background:#f4f4f5;color:#09090b;font:600 14px system-ui,sans-serif;text-decoration:none}</style></head><body><main><h1>GitHub App connected</h1><p>${escapeHtml2(account)} is now available to this OpenGeni workspace through an explicit repository allowlist.</p><a class="button" href="${escapeHtml2(returnUrl)}">Back to OpenGeni</a></main></body></html>`;
 }
+function githubInstallationChooserHtml(candidates, state, workspaceId, baseUrl) {
+  const action = `${baseUrl}/v1/workspaces/${encodeURIComponent(workspaceId)}/github/installations/select`;
+  const options = candidates.map(({ installation, authorityKind }) => {
+    const account = escapeHtml2(
+      installation.accountLogin ?? `installation ${installation.installationId}`
+    );
+    const label = authorityKind === "personal_owner" ? "Personal account" : "Organization owner";
+    return `<label class="option"><input type="radio" name="installation_id" value="${installation.installationId}" required><span><strong>${account}</strong><small>${label}</small></span></label>`;
+  }).join("");
+  return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Choose GitHub installation</title><style>body{font-family:system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#0b0b0d;color:#f4f4f5}main{width:min(640px,calc(100vw - 32px));border:1px solid #27272a;border-radius:12px;padding:28px;background:#111114}h1{margin:0 0 10px;font-size:24px}p{margin:0 0 18px;color:#d4d4d8}.options{display:grid;gap:8px;margin-bottom:18px}.option{display:flex;align-items:center;gap:12px;border:1px solid #3f3f46;border-radius:8px;padding:12px;cursor:pointer}.option span{display:grid;gap:2px}.option small{color:#a1a1aa}button{min-height:38px;border-radius:7px;border:1px solid #3f3f46;padding:0 14px;background:#f4f4f5;color:#09090b;font:600 14px system-ui,sans-serif;cursor:pointer}.secondary{margin-left:8px;background:transparent;color:#f4f4f5}</style></head><body><main><h1>Choose a GitHub account</h1><p>Only installations where GitHub proved you are the personal owner or an active organization owner are shown.</p><form method="post" action="${escapeHtml2(action)}"><input type="hidden" name="state" value="${escapeHtml2(state)}"><div class="options">${options}</div><button type="submit">Connect selected</button><button class="secondary" type="submit" name="installation_id" value="new" formnovalidate>Install on another account</button></form></main></body></html>`;
+}
 function githubSetupPendingHtml() {
   return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>GitHub App Requested</title><style>body{font-family:system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#0b0b0d;color:#f4f4f5}main{width:min(640px,calc(100vw - 32px));border:1px solid #27272a;border-radius:8px;padding:28px;background:#111114}h1{margin:0 0 10px;font-size:24px;line-height:1.2}p{margin:0;color:#d4d4d8}</style></head><body><main><h1>GitHub App request sent</h1><p>A GitHub organization owner must approve the installation. OpenGeni has not created a workspace binding.</p></main></body></html>`;
 }
+function isConsistentGitHubBindingCandidates(candidates) {
+  const ids = /* @__PURE__ */ new Set();
+  return candidates.every(({ installation, authorityKind }) => {
+    if (!Number.isSafeInteger(installation.installationId) || installation.installationId <= 0 || !Number.isSafeInteger(installation.accountId) || installation.accountId <= 0 || !installation.accountLogin?.trim() || installation.suspended || ids.has(installation.installationId)) {
+      return false;
+    }
+    ids.add(installation.installationId);
+    return authorityKind === "personal_owner" ? installation.accountType === "User" : installation.accountType === "Organization";
+  });
+}
 function parsePositiveInteger(value) {
   if (!value || !/^\d+$/.test(value)) {
     return null;
@@ -12618,7 +12987,8 @@ function registerScheduledTaskRoutes(app, deps) {
     await workflowClient.triggerScheduledTask({
       task,
       agentRunUsageIdempotencyKey,
-      triggerWorkflowId
+      triggerWorkflowId,
+      initiator: { kind: "subject", subjectId: grant.subjectId }
     });
     await recordWorkspaceUsage4(deps, {
       accountId: grant.accountId,
@@ -12750,6 +13120,7 @@ import {
   SessionContextBusyError,
   HumanInputResponseValidationError,
   latestWorkspaceCapture,
+  sessionLatestWorkspaceCapture,
   workspaceCaptureAtRevision
 } from "@opengeni/db";
 import {
@@ -12758,7 +13129,7 @@ import {
   coalesceSessionEventDeltas,
   publishDurableSessionEvents as publishDurableSessionEvents2
 } from "@opengeni/events";
-import { z as z3, ZodError } from "zod";
+import { z as z5, ZodError } from "zod";
 
 // src/sandbox/channel-a.ts
 import {
@@ -13560,11 +13931,69 @@ import { HTTPException as HTTPException21 } from "hono/http-exception";
 var CAPTURE_INLINE_MANIFEST_MAX_BYTES = 2 * 1024 * 1024;
 var CAPTURE_INLINE_FILE_MAX_BYTES = 256 * 1024;
 var CAPTURE_SIGNED_URL_TTL_SECONDS = 300;
+var WorkspaceCaptureManifestCache = class {
+  constructor(maxEntries = 64, maxBytes = 16 * 1024 * 1024) {
+    this.maxEntries = maxEntries;
+    this.maxBytes = maxBytes;
+  }
+  #entries = /* @__PURE__ */ new Map();
+  #retainedBytes = 0;
+  get(row) {
+    const key = row.manifestKey;
+    if (!key) return null;
+    const entry = this.#entries.get(key);
+    if (!entry || entry.identity !== manifestIdentity(row)) return null;
+    this.#entries.delete(key);
+    this.#entries.set(key, entry);
+    return entry;
+  }
+  getInlineResponse(row) {
+    const key = row.manifestKey;
+    if (!key) return null;
+    const entry = this.#entries.get(key);
+    if (!entry || entry.identity !== manifestIdentity(row) || !entry.inlineResponse) return null;
+    this.#entries.delete(key);
+    this.#entries.set(key, entry);
+    return entry.inlineResponse;
+  }
+  setInlineResponse(row, response) {
+    const key = row.manifestKey;
+    if (!key) return;
+    const entry = this.#entries.get(key);
+    if (!entry || entry.identity !== manifestIdentity(row)) return;
+    entry.inlineResponse = response;
+  }
+  set(row, loaded) {
+    const key = row.manifestKey;
+    if (!key || this.maxEntries <= 0 || this.maxBytes <= 0 || loaded.byteLength > CAPTURE_INLINE_MANIFEST_MAX_BYTES || loaded.byteLength > this.maxBytes) {
+      return;
+    }
+    const previous = this.#entries.get(key);
+    if (previous) {
+      this.#retainedBytes -= previous.byteLength;
+      this.#entries.delete(key);
+    }
+    this.#entries.set(key, { ...loaded, identity: manifestIdentity(row) });
+    this.#retainedBytes += loaded.byteLength;
+    while (this.#entries.size > this.maxEntries || this.#retainedBytes > this.maxBytes) {
+      const oldestKey = this.#entries.keys().next().value;
+      if (oldestKey === void 0) break;
+      const oldest = this.#entries.get(oldestKey);
+      this.#entries.delete(oldestKey);
+      if (oldest) this.#retainedBytes -= oldest.byteLength;
+    }
+  }
+};
+function manifestIdentity(row) {
+  return `${row.sessionId}\0${row.turnId}\0${row.revision}\0${row.leaseEpoch}\0${row.capturedAt}`;
+}
 function signedUrl(signed) {
   return { url: signed.url, expiresAt: signed.expiresAt.toISOString() };
 }
-async function loadManifest(row, storage) {
+async function loadManifest(row, storage, cache) {
   if (!row.manifestKey) return null;
+  const cached = cache?.get(row);
+  if (cached) return cached;
   const stats = WorkspaceCaptureStats.safeParse(row.stats);
   if (!stats.success) {
     console.warn(
@@ -13599,9 +14028,11 @@ async function loadManifest(row, storage) {
     );
     return null;
   }
-  return { manifest, byteLength: blob.bytes.byteLength, stats: servedStats };
+  const loaded = { manifest, byteLength: blob.bytes.byteLength, stats: servedStats };
+  cache?.set(row, loaded);
+  return loaded;
 }
-async function serveWorkspaceCapture(row, storage) {
+async function serveWorkspaceCapture(row, storage, cache) {
   if (!row) {
     return { available: false };
   }
@@ -13620,7 +14051,9 @@ async function serveWorkspaceCapture(row, storage) {
     });
   }
   if (row.state !== "available" || !row.manifestKey) return { available: false };
-  const loaded = await loadManifest(row, storage);
+  const cachedResponse = cache?.getInlineResponse(row);
+  if (cachedResponse) return cachedResponse;
+  const loaded = await loadManifest(row, storage, cache);
   if (!loaded) return { available: false };
   const meta = {
     available: true,
@@ -13632,11 +14065,16 @@ async function serveWorkspaceCapture(row, storage) {
     stats: loaded.stats
   };
   if (loaded.byteLength <= CAPTURE_INLINE_MANIFEST_MAX_BYTES) {
-    return GetWorkspaceCaptureResponse.parse({
+    const response = GetWorkspaceCaptureResponse.parse({
       ...meta,
       manifest: loaded.manifest,
       manifestUrl: null
     });
+    if (!response.available) {
+      throw new Error("validated inline capture response lost its available discriminator");
+    }
+    cache?.setInlineResponse(row, response);
+    return response;
   }
   const signed = await storage.createGetUrl({
     key: row.manifestKey,
@@ -13708,6 +14146,7 @@ async function serveWorkspaceCaptureFile(row, path, storage) {
 // src/routes/sessions.ts
 function registerSessionRoutes(app, deps) {
   const { settings, db, bus, workflowClient, objectStorage } = deps;
+  const workspaceCaptureManifestCache = new WorkspaceCaptureManifestCache();
   const ptyIdentity = (pty) => ({
     leaseId: pty.leaseId,
     sandboxGroupId: pty.sandboxGroupId,
@@ -13962,7 +14401,7 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant14(c, deps, workspaceId, "sessions:read");
     const sessionId = c.req.param("sessionId");
-    if (!z3.string().uuid().safeParse(sessionId).success) {
+    if (!z5.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException22(404, { message: "session not found" });
     }
     const session = await getSessionForSubject(
@@ -13981,7 +14420,7 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant14(c, deps, workspaceId, "sessions:read");
     const sessionId = c.req.param("sessionId");
-    if (!z3.string().uuid().safeParse(sessionId).success) {
+    if (!z5.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException22(404, { message: "session not found" });
     }
     const parsed = UpdateSessionPinRequest.safeParse(await c.req.json().catch(() => null));
@@ -14671,8 +15110,6 @@ function registerSessionRoutes(app, deps) {
       text: payload.text,
       turnInstructions: payload.turnInstructions ?? null,
       resources: payload.resources,
-      tools: payload.tools,
-      toolsProvided: userMessagePayloadHasOwnProperty({ payload: raw }, "tools"),
       model: payload.model ?? null,
       reasoningEffort: payload.reasoningEffort ?? null,
       mcpCredentialUpdates: payload.mcpCredentialUpdates ?? [],
@@ -14707,8 +15144,6 @@ function registerSessionRoutes(app, deps) {
         text: event.payload.text,
         turnInstructions: event.payload.turnInstructions ?? null,
         resources: event.payload.resources ?? [],
-        tools: event.payload.tools ?? [],
-        toolsProvided: userMessagePayloadHasOwnProperty(rawEvent, "tools"),
         model: event.payload.model ?? null,
         reasoningEffort: event.payload.reasoningEffort ?? null,
         mcpCredentialUpdates: event.payload.mcpCredentialUpdates ?? [],
@@ -15305,15 +15740,16 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId") ?? "";
     await requireAccessGrant14(c, deps, workspaceId, "files:read");
     const sessionId = c.req.param("sessionId") ?? "";
-    const session = await getSession5(db, workspaceId, sessionId);
-    if (!session) {
+    const lookup = await sessionLatestWorkspaceCapture(db, workspaceId, sessionId);
+    if (!lookup.sessionExists) {
       throw new HTTPException22(404, { message: "session not found" });
     }
     if (!objectStorage) {
       return c.json({ available: false });
     }
-    const row = await latestWorkspaceCapture(db, workspaceId, sessionId);
-    return c.json(await serveWorkspaceCapture(row, objectStorage));
+    return c.json(
+      await serveWorkspaceCapture(lookup.capture, objectStorage, workspaceCaptureManifestCache)
+    );
   });
   app.get("/v1/workspaces/:workspaceId/sessions/:sessionId/workspace/capture/file", async (c) => {
     const workspaceId = c.req.param("workspaceId") ?? "";
@@ -15681,7 +16117,7 @@ function eventEnumList(raw, schema, name) {
 }
 function sessionListQuery(query, allowCursor = true) {
   const parentSessionId = query.parentSessionId;
-  if (parentSessionId !== void 0 && parentSessionId !== "null" && !z3.string().uuid().safeParse(parentSessionId).success) {
+  if (parentSessionId !== void 0 && parentSessionId !== "null" && !z5.string().uuid().safeParse(parentSessionId).success) {
     throw new HTTPException22(400, {
       message: 'parentSessionId must be a session id or the literal "null"'
     });
@@ -15737,18 +16173,6 @@ function optionalEventSequence(raw) {
   }
   return Math.floor(sequence);
 }
-function hasOwnProperty(value, key) {
-  return Boolean(
-    value && typeof value === "object" && Object.prototype.hasOwnProperty.call(value, key)
-  );
-}
-function userMessagePayloadHasOwnProperty(value, key) {
-  if (!value || typeof value !== "object") {
-    return false;
-  }
-  const payload = value.payload;
-  return hasOwnProperty(payload, key);
-}
 function sessionCreateErrorResponse(c, error) {
   if (error instanceof SessionSpawnDeniedError2) {
     return c.json(
@@ -15837,7 +16261,7 @@ import {
   listSocialPosts as listSocialPosts2
 } from "@opengeni/db";
 import { HTTPException as HTTPException23 } from "hono/http-exception";
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 import { requireAccessGrant as requireAccessGrant15 } from "@opengeni/core";
 function registerSocialRoutes(app, deps) {
   const { db } = deps;
@@ -15927,7 +16351,7 @@ function parseConnectionIds(raw) {
     return void 0;
   }
   const values = raw.split(",").map((value) => value.trim()).filter(Boolean);
-  const parsed = z5.array(z5.string().uuid()).safeParse(values);
+  const parsed = z6.array(z6.string().uuid()).safeParse(values);
   if (!parsed.success) {
     throw new HTTPException23(422, {
       message: "connectionIds must be a comma-separated list of UUIDs"
@@ -15988,7 +16412,7 @@ import {
 } from "@opengeni/db";
 import { boundWorkspaceControlHttpPage } from "@opengeni/events";
 import { HTTPException as HTTPException24 } from "hono/http-exception";
-import { hasPermission as hasPermission8, requireAccessContext as requireAccessContext2, requireAccessGrant as requireAccessGrant16 } from "@opengeni/core";
+import { hasPermission as hasPermission9, requireAccessContext as requireAccessContext2, requireAccessGrant as requireAccessGrant16 } from "@opengeni/core";
 import { requireLimit as requireLimit7 } from "@opengeni/core";
 import {
   assertWorkspaceDeletable,
@@ -16235,7 +16659,7 @@ function registerWorkspaceRoutes(app, deps) {
     const context = await requireAccessContext2(c, deps);
     const readableWorkspaceIds = [
       ...new Set(
-        context.workspaceGrants.filter((grant) => hasPermission8(grant.permissions, "workspace:read")).map((grant) => grant.workspaceId)
+        context.workspaceGrants.filter((grant) => hasPermission9(grant.permissions, "workspace:read")).map((grant) => grant.workspaceId)
       )
     ];
     if (readableWorkspaceIds.length > 0) {
@@ -16524,8 +16948,8 @@ import {
   WorkspaceInstructionPolicyNotFoundError
 } from "@opengeni/db";
 import { HTTPException as HTTPException25 } from "hono/http-exception";
-import { z as z6 } from "zod";
-var WorkspaceInstructionPolicyRevisionId = z6.string().uuid();
+import { z as z7 } from "zod";
+var WorkspaceInstructionPolicyRevisionId = z7.string().uuid();
 async function parseBody(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) {
@@ -17025,7 +17449,7 @@ function createApp(deps) {
     }
     const workspace = await getWorkspace2(routeDeps.db, workspaceId);
     const workspaceMemoryEnabled = resolveWorkspaceMemoryEnabled(workspace?.settings);
-    const transport = new WebStandardStreamableHTTPServerTransport2({
+    const transport = new WebStandardStreamableHTTPServerTransport3({
       enableJsonResponse: true
     });
     const mcp = buildOpenGeniMcpServer(routeDeps, grant, {
@@ -17099,7 +17523,7 @@ function createApp(deps) {
 }
 async function requireMcpAccessGrant(c, deps, workspaceId) {
   const grant = await requireAccessGrant18(c, deps, workspaceId);
-  if (hasPermission9(grant.permissions, "workspace:read")) {
+  if (hasPermission10(grant.permissions, "workspace:read")) {
     return grant;
   }
   if (isToolspaceGrant(deps.settings, grant)) {
@@ -17280,6 +17704,10 @@ var routeLabelPatterns = [
     pattern: /^\/v1\/workspaces\/[^/]+\/mcp\/docs$/,
     label: "/v1/workspaces/:workspaceId/mcp/docs"
   },
+  {
+    pattern: /^\/v1\/workspaces\/[^/]+\/mcp\/files$/,
+    label: "/v1/workspaces/:workspaceId/mcp/files"
+  },
   {
     pattern: /^\/v1\/workspaces\/[^/]+\/default-rig$/,
     label: "/v1/workspaces/:workspaceId/default-rig"
@@ -17460,6 +17888,14 @@ var routeLabelPatterns = [
     pattern: /^\/v1\/workspaces\/[^/]+\/github\/connect$/,
     label: "/v1/workspaces/:workspaceId/github/connect"
   },
+  {
+    pattern: /^\/v1\/workspaces\/[^/]+\/github\/installations\/select$/,
+    label: "/v1/workspaces/:workspaceId/github/installations/select"
+  },
+  {
+    pattern: /^\/v1\/workspaces\/[^/]+\/github\/installations\/[^/]+\/configure$/,
+    label: "/v1/workspaces/:workspaceId/github/installations/:installationId/configure"
+  },
   {
     pattern: /^\/v1\/workspaces\/[^/]+\/github\/installations$/,
     label: "/v1/workspaces/:workspaceId/github/installations"
@@ -17641,4 +18077,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession2 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-3BHOMOSD.js.map
+//# sourceMappingURL=chunk-5TULDPWX.js.map