@opengeni/api-router 0.12.5 → 0.12.7

package/dist/app.js

@@ -19,7 +19,7 @@ import {
   validateToolRefs,
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession
-} from "./chunk-3BHOMOSD.js";
+} from "./chunk-SD5GJTZ4.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,
   allowedCorsOrigin,

package/dist/{chunk-3BHOMOSD.js → chunk-SD5GJTZ4.js}

@@ -21,13 +21,13 @@ import {
 import { dbSql, getWorkspace as getWorkspace2 } from "@opengeni/db";
 import { createObservability } from "@opengeni/observability";
 import { createObjectStorage } from "@opengeni/storage";
-import { WebStandardStreamableHTTPServerTransport as WebStandardStreamableHTTPServerTransport2 } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
+import { WebStandardStreamableHTTPServerTransport as WebStandardStreamableHTTPServerTransport3 } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 import { Hono } from "hono";
 import { bodyLimit } from "hono/body-limit";
 import { cors } from "hono/cors";
 import { HTTPException as HTTPException26 } from "hono/http-exception";
 import {
-  hasPermission as hasPermission9,
+  hasPermission as hasPermission10,
   requireAccessGrant as requireAccessGrant18,
   requirePermission,
   requireSessionAuthorization as requireSessionAuthorization3,
@@ -291,6 +291,8 @@ import { requireLimit as requireLimit8 } from "@opengeni/core";
 // src/mcp/server.ts
 import {
   CreateScheduledTaskRequest,
+  DEFAULT_FIRST_PARTY_MCP_TOOLS,
+  FIRST_PARTY_MCP_TOOL_NAMES,
   defaultRepositoryMountPath,
   SESSION_EVENT_RAW_DELTA_TYPES,
   SessionEventLatestClass,
@@ -335,7 +337,6 @@ import {
   MEMORY_CORRECT_TOOL_DESCRIPTION,
   MEMORY_SAVE_TOOL_DESCRIPTION,
   MEMORY_SEARCH_TOOL_DESCRIPTION,
-  requireFile,
   requireScheduledTask,
   requireSession,
   saveWorkspaceMemory,
@@ -356,7 +357,9 @@ import {
   GitHubAppConfigurationError,
   githubAppMissingSettings
 } from "@opengeni/github";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import {
+  McpServer
+} from "@modelcontextprotocol/sdk/server/mcp.js";
 import * as z4 from "zod/v4";
 import {
   hasPermission as hasPermission2,
@@ -2607,17 +2610,124 @@ function slackPostOutcomeMayBeAmbiguous(error) {
 }
 
 // src/mcp/server.ts
+var FIRST_PARTY_TOOL_AUTHORIZATION = {
+  set_session_title: { sessionRequired: true, allOf: ["sessions:control"] },
+  goal_set: { sessionRequired: true, allOf: ["goals:manage"] },
+  goal_update: { sessionRequired: true, allOf: ["goals:manage"] },
+  goal_complete: { sessionRequired: true, allOf: ["goals:manage"] },
+  goal_pause: { sessionRequired: true, allOf: ["goals:manage"] },
+  memory_search: { sessionRequired: true, allOf: ["documents:search"] },
+  memory_save: { sessionRequired: true, allOf: ["documents:search"] },
+  memory_correct: { sessionRequired: true, allOf: ["documents:search"] },
+  sandboxes_list: { sessionRequired: true, allOf: ["sessions:read"] },
+  sandbox_attach: { sessionRequired: true, allOf: ["sessions:control"] },
+  sandbox_swap: { sessionRequired: true, allOf: ["sessions:control"] },
+  run_on: { sessionRequired: true, allOf: ["sessions:control"] },
+  sandbox_provision: { sessionRequired: true, allOf: ["sessions:control"] },
+  rig_list: { allOf: ["rigs:use"] },
+  rig_get: { allOf: ["rigs:use"] },
+  rig_propose_change: { allOf: ["rigs:use"] },
+  rig_verify: { allOf: ["rigs:use"] },
+  rig_promote: { allOf: ["rigs:manage"] },
+  sessions_list: { allOf: ["sessions:read"] },
+  session_get: { allOf: ["sessions:read"] },
+  session_events: { allOf: ["sessions:read"] },
+  session_create: { allOf: ["sessions:create"] },
+  session_send_message: { allOf: ["sessions:control"] },
+  session_pause: { allOf: ["sessions:control"] },
+  session_resume: { allOf: ["sessions:control"] },
+  session_steer: { sessionRequired: true, allOf: ["sessions:control"] },
+  set_other_session_title: { allOf: ["sessions:control"] },
+  variable_set_list: { allOf: ["variable-sets:use"] },
+  environment_list: { allOf: ["variable-sets:use"] },
+  variable_set_set_variable: { allOf: ["variable-sets:manage"] },
+  environment_set_variable: { allOf: ["variable-sets:manage"] },
+  github_connect_link: { allOf: ["github:use"] },
+  github_token: { sessionRequired: true, allOf: ["github:use"] },
+  github_repositories_list: { allOf: ["github:use"] },
+  social_connections_list: { allOf: ["connections:read"] },
+  social_posts_recent: { allOf: ["connections:read"] },
+  social_daily_analysis_context: { allOf: ["connections:read"] },
+  scheduled_tasks_list: { anyOf: ["scheduled_tasks:manage", "scheduled_tasks:run"] },
+  scheduled_tasks_get: { anyOf: ["scheduled_tasks:manage", "scheduled_tasks:run"] },
+  scheduled_tasks_create: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_tasks_update: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_tasks_pause: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_tasks_resume: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_tasks_trigger: { allOf: ["scheduled_tasks:run"] },
+  scheduled_tasks_delete: { allOf: ["scheduled_tasks:manage"] },
+  scheduled_task_runs_list: { anyOf: ["scheduled_tasks:manage", "scheduled_tasks:run"] },
+  slack_bot_list_channels: { allOf: ["connections:read"] },
+  slack_bot_channel_history: { allOf: ["connections:read"] },
+  slack_bot_list_users: { allOf: ["connections:read"] },
+  slack_bot_post_message: { allOf: ["connections:read"] }
+};
+var FIRST_PARTY_MCP_TOOL_NAME_SET = new Set(FIRST_PARTY_MCP_TOOL_NAMES);
+var PolicyMcpServer = class extends McpServer {
+  constructor(grant, sessionId, selectedTools, allowUncatalogued) {
+    super({ name: "opengeni", version: "1.0.0" });
+    this.grant = grant;
+    this.sessionId = sessionId;
+    this.selectedTools = selectedTools;
+    this.allowUncatalogued = allowUncatalogued;
+  }
+  registeredToolCount = 0;
+  registerTool(name, config, cb) {
+    const catalogued = FIRST_PARTY_MCP_TOOL_NAME_SET.has(name);
+    let admitted = this.allowUncatalogued && !catalogued;
+    if (catalogued) {
+      const toolName = name;
+      const policy = FIRST_PARTY_TOOL_AUTHORIZATION[toolName];
+      const authorized = (!policy.sessionRequired || this.sessionId !== null) && (policy.allOf?.every((permission) => hasPermission2(this.grant.permissions, permission)) ?? true) && (policy.anyOf?.some((permission) => hasPermission2(this.grant.permissions, permission)) ?? true);
+      const selected = this.selectedTools === null || this.selectedTools.has(toolName);
+      admitted = authorized && selected;
+    }
+    if (!admitted) {
+      return {
+        ...config.title ? { title: config.title } : {},
+        ...config.description ? { description: config.description } : {},
+        ...config.annotations ? { annotations: config.annotations } : {},
+        ...config._meta ? { _meta: config._meta } : {},
+        handler: cb,
+        enabled: false,
+        enable() {
+        },
+        disable() {
+        },
+        update() {
+        },
+        remove() {
+        }
+      };
+    }
+    this.registeredToolCount += 1;
+    return super.registerTool(name, config, cb);
+  }
+  ensureToolsListHandler() {
+    if (this.registeredToolCount > 0) return;
+    super.registerTool(
+      "__opengeni_empty_first_party_surface__",
+      {
+        description: "Internal disabled placeholder for an empty first-party surface.",
+        inputSchema: z4.object({})
+      },
+      async () => ({
+        content: [{ type: "text", text: '{"unavailable":true}' }]
+      })
+    ).disable();
+  }
+};
 function buildOpenGeniMcpServer(deps, grant, options = {}) {
-  const server = new McpServer({
-    name: "opengeni",
-    version: "1.0.0"
-  });
   const json = (value) => ({
     content: [{ type: "text", text: JSON.stringify(value, null, 2) }]
   });
   const can = (permission) => hasPermission2(grant.permissions, permission);
   const toolspaceMode = options.toolspace != null;
   const sessionId = typeof grant.metadata?.["sessionId"] === "string" ? grant.metadata["sessionId"] : null;
+  const selectedTools = sessionId !== null && !toolspaceMode ? new Set(
+    grant.metadata?.["firstPartyMcpTools"] ?? DEFAULT_FIRST_PARTY_MCP_TOOLS
+  ) : null;
+  const server = new PolicyMcpServer(grant, sessionId, selectedTools, toolspaceMode);
   if (sessionId !== null && (!toolspaceMode || can("sessions:control"))) {
     server.registerTool(
       "set_session_title",
@@ -2657,44 +2767,6 @@ function buildOpenGeniMcpServer(deps, grant, options = {}) {
       registerGitHubTokenTool(server, deps, grant, sessionId, json);
     }
   }
-  if (!toolspaceMode || can("files:read")) {
-    server.registerTool(
-      "files_get_download_url",
-      {
-        description: "Create a short-lived download URL for a ready file asset.",
-        inputSchema: { fileId: z4.string().uuid() }
-      },
-      async ({ fileId }) => {
-        if (!deps.objectStorage) {
-          throw new Error("object storage is not configured");
-        }
-        const file = await requireFile(deps.db, grant.workspaceId, fileId);
-        if (file.status !== "ready") {
-          throw new Error(`file is ${file.status}`);
-        }
-        const signed = await deps.objectStorage.createGetUrl({
-          key: file.objectKey
-        });
-        return json({
-          file: {
-            id: file.id,
-            filename: file.filename,
-            safeFilename: file.safeFilename,
-            contentType: file.contentType,
-            sizeBytes: file.sizeBytes,
-            sha256: file.sha256,
-            status: file.status,
-            createdAt: file.createdAt,
-            updatedAt: file.updatedAt
-          },
-          downloadUrl: {
-            url: signed.url,
-            expiresAt: signed.expiresAt.toISOString()
-          }
-        });
-      }
-    );
-  }
   if (!toolspaceMode || can("github:use")) {
     server.registerTool(
       "github_repositories_list",
@@ -2985,7 +3057,8 @@ function buildOpenGeniMcpServer(deps, grant, options = {}) {
         await deps.workflowClient.triggerScheduledTask({
           task,
           agentRunUsageIdempotencyKey,
-          triggerWorkflowId
+          triggerWorkflowId,
+          initiator: { kind: "subject", subjectId: grant.subjectId }
         });
         await recordWorkspaceUsage(deps, {
           accountId: grant.accountId,
@@ -3031,6 +3104,7 @@ function buildOpenGeniMcpServer(deps, grant, options = {}) {
     );
   }
   registerToolspaceProxyTools(server, options.toolspace ?? null);
+  server.ensureToolsListHandler();
   return server;
 }
 function registerSlackBotTools(server, deps, grant, sessionId, json) {
@@ -3896,6 +3970,9 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
           firstPartyMcpPermissions: z4.array(z4.string()).optional().describe(
             "Optional first-party capability set for the child. Omit to inherit this session's effective permissions. An explicit set may only narrow capabilities held by this session. A goal-bearing child requires goals:manage in the resulting set; creation fails rather than adding it implicitly."
           ),
+          firstPartyMcpTools: z4.array(z4.enum(FIRST_PARTY_MCP_TOOL_NAMES)).optional().describe(
+            "Exact model-visible first-party tool selection for the child. Omit to inherit this session's effective selection. This does not grant permissions."
+          ),
           // Shared-sandbox placement (addendum 05 §D). OMIT (default) to SHARE the
           // creator's box — one filesystem/repo/desktop, N independent conversations;
           // this is the SAFE DEFAULT. Pass "new" for a fresh isolated box (a different
@@ -3949,7 +4026,7 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
     server.registerTool(
       "session_send_message",
       {
-        description: "Send information to another session. From an OpenGeni worker this becomes a coalescible internal update, never a visible prompt-queue row; pending updates are delivered together on the target's next inference. A sessionless operator call appends one visible prompt.",
+        description: "Send information to another session. From an OpenGeni worker this becomes a canonical coalescible machine input: it appears in the target's compact incoming queue group, is durably added to model history when claimed, and remains visible in the timeline. A sessionless operator call appends one human/API prompt.",
         inputSchema: {
           sessionId: z4.string().uuid(),
           text: z4.string().min(1),
@@ -4129,7 +4206,7 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
       server.registerTool(
         "session_steer",
         {
-          description: "Atomically replace another session's current direction and resume it. The instruction is an internal update, never a human queue row.",
+          description: "Atomically replace another session's current direction and resume it. The Agent Steer is a typed machine input shown in the target queue/timeline and durably retained in model history; it never impersonates a human prompt.",
           inputSchema: {
             sessionId: z4.string().uuid(),
             instruction: z4.string().min(1),
@@ -5881,8 +5958,8 @@ function registerCatalogAssetRoutes(app, deps) {
     if (!contentType) {
       throw new HTTPException5(404, { message: "asset not found" });
     }
-    const object4 = await objectStorage.getObjectBytes(key);
-    if (!object4) {
+    const object5 = await objectStorage.getObjectBytes(key);
+    if (!object5) {
       throw new HTTPException5(404, { message: "asset not found" });
     }
     const etag = etagForKey(key);
@@ -5895,7 +5972,7 @@ function registerCatalogAssetRoutes(app, deps) {
     if (ifNoneMatchSatisfied(c.req.header("if-none-match"), etag)) {
       return c.body(null, 304, headers);
     }
-    return c.body(new Uint8Array(object4.bytes), 200, { ...headers, "Content-Type": contentType });
+    return c.body(new Uint8Array(object5.bytes), 200, { ...headers, "Content-Type": contentType });
   });
 }
 function catalogAssetKeyFromPath(pathname) {
@@ -8931,7 +9008,7 @@ import {
   queueDocumentForReindex,
   searchDocuments as searchDocuments2
 } from "@opengeni/documents";
-import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
+import { WebStandardStreamableHTTPServerTransport as WebStandardStreamableHTTPServerTransport2 } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 import { HTTPException as HTTPException11 } from "hono/http-exception";
 import { requireAccessGrant as requireAccessGrant5 } from "@opengeni/core";
 import { recordWorkspaceUsage as recordWorkspaceUsage3, requireLimit as requireLimit3 } from "@opengeni/core";
@@ -9162,8 +9239,90 @@ import {
 import { HTTPException as HTTPException10 } from "hono/http-exception";
 import { requireAccessGrant as requireAccessGrant4 } from "@opengeni/core";
 import { recordWorkspaceUsage as recordWorkspaceUsage2, requireLimit as requireLimit2 } from "@opengeni/core";
+import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
+
+// src/mcp/files.ts
+import { requireFile } from "@opengeni/db";
+import { hasPermission as hasPermission7 } from "@opengeni/core";
+import { McpServer as McpServer3 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import * as z3 from "zod/v4";
+function buildFilesMcpServer(deps, grant) {
+  const server = new McpServer3({
+    name: "opengeni-files",
+    version: "1.0.0"
+  });
+  if (!hasPermission7(grant.permissions, "files:read")) {
+    server.registerTool(
+      "__opengeni_empty_files_surface__",
+      {
+        description: "Internal disabled placeholder for an unauthorized files surface.",
+        inputSchema: z3.object({})
+      },
+      async () => ({
+        content: [{ type: "text", text: '{"unavailable":true}' }]
+      })
+    ).disable();
+    return server;
+  }
+  server.registerTool(
+    "files_get_download_url",
+    {
+      description: "Create a short-lived download URL for a ready file asset.",
+      inputSchema: { fileId: z3.string().uuid() }
+    },
+    async ({ fileId }) => {
+      if (!deps.objectStorage) {
+        throw new Error("object storage is not configured");
+      }
+      const file = await requireFile(deps.db, grant.workspaceId, fileId);
+      if (file.status !== "ready") {
+        throw new Error(`file is ${file.status}`);
+      }
+      const signed = await deps.objectStorage.createGetUrl({ key: file.objectKey });
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify(
+              {
+                file: {
+                  id: file.id,
+                  filename: file.filename,
+                  safeFilename: file.safeFilename,
+                  contentType: file.contentType,
+                  sizeBytes: file.sizeBytes,
+                  sha256: file.sha256,
+                  status: file.status,
+                  createdAt: file.createdAt,
+                  updatedAt: file.updatedAt
+                },
+                downloadUrl: {
+                  url: signed.url,
+                  expiresAt: signed.expiresAt.toISOString()
+                }
+              },
+              null,
+              2
+            )
+          }
+        ]
+      };
+    }
+  );
+  return server;
+}
+
+// src/routes/files.ts
 function registerFileRoutes(app, deps) {
   const { db, objectStorage } = deps;
+  app.all("/v1/workspaces/:workspaceId/mcp/files", async (c) => {
+    const workspaceId = c.req.param("workspaceId");
+    const grant = await requireAccessGrant4(c, deps, workspaceId, "files:read");
+    const transport = new WebStandardStreamableHTTPServerTransport({ enableJsonResponse: true });
+    const server = buildFilesMcpServer(deps, grant);
+    await server.connect(transport);
+    return await transport.handleRequest(c.req.raw);
+  });
   app.post("/v1/workspaces/:workspaceId/files/uploads", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant4(c, deps, workspaceId, "files:upload");
@@ -9972,7 +10131,7 @@ function registerDocumentRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant5(c, deps, workspaceId, "documents:search");
     const sessionId = typeof grant.metadata?.sessionId === "string" ? grant.metadata.sessionId : void 0;
-    const transport = new WebStandardStreamableHTTPServerTransport({ enableJsonResponse: true });
+    const transport = new WebStandardStreamableHTTPServerTransport2({ enableJsonResponse: true });
     const server = buildDocumentsMcpServer(
       db,
       grant.accountId,
@@ -11667,7 +11826,7 @@ import {
 } from "@opengeni/github";
 import { deleteCookie, setCookie } from "hono/cookie";
 import { HTTPException as HTTPException17 } from "hono/http-exception";
-import { hasPermission as hasPermission7, requireAccessGrant as requireAccessGrant10 } from "@opengeni/core";
+import { hasPermission as hasPermission8, requireAccessGrant as requireAccessGrant10 } from "@opengeni/core";
 var githubStateCookie = "opengeni_github_state";
 var githubBindingStateMaxAgeSeconds = 10 * 60;
 var legacyInstallationChooserDisabledMessage = "The legacy repository-admin GitHub installation chooser is disabled; use the GitHub owner-consent connect flow";
@@ -11680,7 +11839,7 @@ function registerGitHubRoutes(app, deps) {
     const slug = settings.githubAppSlug?.trim() || null;
     const installations = missing.length === 0 ? await listWorkspaceGitHubInstallationBindings(deps, grant.workspaceId) : [];
     const status = githubBindingStatus(missing.length === 0, installations);
-    const canManage = hasPermission7(grant.permissions, "github:manage");
+    const canManage = hasPermission8(grant.permissions, "github:manage");
     const connectState = missing.length === 0 && slug && canManage ? createSignedState5(githubStateSecret, {
       accountId: grant.accountId,
       workspaceId: grant.workspaceId,
@@ -12618,7 +12777,8 @@ function registerScheduledTaskRoutes(app, deps) {
     await workflowClient.triggerScheduledTask({
       task,
       agentRunUsageIdempotencyKey,
-      triggerWorkflowId
+      triggerWorkflowId,
+      initiator: { kind: "subject", subjectId: grant.subjectId }
     });
     await recordWorkspaceUsage4(deps, {
       accountId: grant.accountId,
@@ -12758,7 +12918,7 @@ import {
   coalesceSessionEventDeltas,
   publishDurableSessionEvents as publishDurableSessionEvents2
 } from "@opengeni/events";
-import { z as z3, ZodError } from "zod";
+import { z as z5, ZodError } from "zod";
 
 // src/sandbox/channel-a.ts
 import {
@@ -13962,7 +14122,7 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant14(c, deps, workspaceId, "sessions:read");
     const sessionId = c.req.param("sessionId");
-    if (!z3.string().uuid().safeParse(sessionId).success) {
+    if (!z5.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException22(404, { message: "session not found" });
     }
     const session = await getSessionForSubject(
@@ -13981,7 +14141,7 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant14(c, deps, workspaceId, "sessions:read");
     const sessionId = c.req.param("sessionId");
-    if (!z3.string().uuid().safeParse(sessionId).success) {
+    if (!z5.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException22(404, { message: "session not found" });
     }
     const parsed = UpdateSessionPinRequest.safeParse(await c.req.json().catch(() => null));
@@ -15681,7 +15841,7 @@ function eventEnumList(raw, schema, name) {
 }
 function sessionListQuery(query, allowCursor = true) {
   const parentSessionId = query.parentSessionId;
-  if (parentSessionId !== void 0 && parentSessionId !== "null" && !z3.string().uuid().safeParse(parentSessionId).success) {
+  if (parentSessionId !== void 0 && parentSessionId !== "null" && !z5.string().uuid().safeParse(parentSessionId).success) {
     throw new HTTPException22(400, {
       message: 'parentSessionId must be a session id or the literal "null"'
     });
@@ -15837,7 +15997,7 @@ import {
   listSocialPosts as listSocialPosts2
 } from "@opengeni/db";
 import { HTTPException as HTTPException23 } from "hono/http-exception";
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 import { requireAccessGrant as requireAccessGrant15 } from "@opengeni/core";
 function registerSocialRoutes(app, deps) {
   const { db } = deps;
@@ -15927,7 +16087,7 @@ function parseConnectionIds(raw) {
     return void 0;
   }
   const values = raw.split(",").map((value) => value.trim()).filter(Boolean);
-  const parsed = z5.array(z5.string().uuid()).safeParse(values);
+  const parsed = z6.array(z6.string().uuid()).safeParse(values);
   if (!parsed.success) {
     throw new HTTPException23(422, {
       message: "connectionIds must be a comma-separated list of UUIDs"
@@ -15988,7 +16148,7 @@ import {
 } from "@opengeni/db";
 import { boundWorkspaceControlHttpPage } from "@opengeni/events";
 import { HTTPException as HTTPException24 } from "hono/http-exception";
-import { hasPermission as hasPermission8, requireAccessContext as requireAccessContext2, requireAccessGrant as requireAccessGrant16 } from "@opengeni/core";
+import { hasPermission as hasPermission9, requireAccessContext as requireAccessContext2, requireAccessGrant as requireAccessGrant16 } from "@opengeni/core";
 import { requireLimit as requireLimit7 } from "@opengeni/core";
 import {
   assertWorkspaceDeletable,
@@ -16235,7 +16395,7 @@ function registerWorkspaceRoutes(app, deps) {
     const context = await requireAccessContext2(c, deps);
     const readableWorkspaceIds = [
       ...new Set(
-        context.workspaceGrants.filter((grant) => hasPermission8(grant.permissions, "workspace:read")).map((grant) => grant.workspaceId)
+        context.workspaceGrants.filter((grant) => hasPermission9(grant.permissions, "workspace:read")).map((grant) => grant.workspaceId)
       )
     ];
     if (readableWorkspaceIds.length > 0) {
@@ -16524,8 +16684,8 @@ import {
   WorkspaceInstructionPolicyNotFoundError
 } from "@opengeni/db";
 import { HTTPException as HTTPException25 } from "hono/http-exception";
-import { z as z6 } from "zod";
-var WorkspaceInstructionPolicyRevisionId = z6.string().uuid();
+import { z as z7 } from "zod";
+var WorkspaceInstructionPolicyRevisionId = z7.string().uuid();
 async function parseBody(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) {
@@ -17025,7 +17185,7 @@ function createApp(deps) {
     }
     const workspace = await getWorkspace2(routeDeps.db, workspaceId);
     const workspaceMemoryEnabled = resolveWorkspaceMemoryEnabled(workspace?.settings);
-    const transport = new WebStandardStreamableHTTPServerTransport2({
+    const transport = new WebStandardStreamableHTTPServerTransport3({
       enableJsonResponse: true
     });
     const mcp = buildOpenGeniMcpServer(routeDeps, grant, {
@@ -17099,7 +17259,7 @@ function createApp(deps) {
 }
 async function requireMcpAccessGrant(c, deps, workspaceId) {
   const grant = await requireAccessGrant18(c, deps, workspaceId);
-  if (hasPermission9(grant.permissions, "workspace:read")) {
+  if (hasPermission10(grant.permissions, "workspace:read")) {
     return grant;
   }
   if (isToolspaceGrant(deps.settings, grant)) {
@@ -17280,6 +17440,10 @@ var routeLabelPatterns = [
     pattern: /^\/v1\/workspaces\/[^/]+\/mcp\/docs$/,
     label: "/v1/workspaces/:workspaceId/mcp/docs"
   },
+  {
+    pattern: /^\/v1\/workspaces\/[^/]+\/mcp\/files$/,
+    label: "/v1/workspaces/:workspaceId/mcp/files"
+  },
   {
     pattern: /^\/v1\/workspaces\/[^/]+\/default-rig$/,
     label: "/v1/workspaces/:workspaceId/default-rig"
@@ -17641,4 +17805,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession2 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-3BHOMOSD.js.map
+//# sourceMappingURL=chunk-SD5GJTZ4.js.map