@opengeni/api-router 0.16.5 → 0.20.0

package/dist/integrations/slack-bot.d.ts

@@ -3,6 +3,7 @@ import { OPENGENI_SLACK_BOT_CREDENTIAL_LABEL, OPENGENI_SLACK_BOT_CREDENTIAL_ROLE
 import { type Database } from "@opengeni/db";
 import { type FetchLike } from "@opengeni/network";
 import { HTTPException } from "hono/http-exception";
+declare const SLACK_REACTION_CONTEXT_CHECKPOINT_VERSION = 1;
 type SlackPayload = Record<string, unknown> & {
     ok?: unknown;
     error?: unknown;
@@ -42,6 +43,44 @@ type SlackBotContext = {
     sessionId?: string | null;
     scheduledTaskId?: string | null;
 };
+export type SlackReactionContextCheckpointBinding = {
+    inboxId: string;
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    providerEventId: string;
+    providerMessageId: string;
+    slackTeamId: string;
+    slackChannelId: string;
+    slackMessageTs: string;
+};
+type SlackReactionCheckpointMessage = {
+    timestamp: string;
+    userId: string;
+    botId: string;
+    threadTimestamp: string;
+    text: string;
+    files: Array<{
+        id: string;
+        label: string;
+    }>;
+};
+type SlackReactionContextCheckpointUnsigned = {
+    version: typeof SLACK_REACTION_CONTEXT_CHECKPOINT_VERSION;
+    binding: SlackReactionContextCheckpointBinding;
+    state: {
+        createdAtMs: number;
+        pageCount: number;
+        nextCursor: string;
+        seenCursors: string[];
+        seenMessageTimestamps: string[];
+        threadTimestamp: string | null;
+        messages: SlackReactionCheckpointMessage[];
+    };
+};
+export type SlackReactionContextCheckpoint = SlackReactionContextCheckpointUnsigned & {
+    signature: string;
+};
 export declare class SlackBotProviderError extends Error {
     readonly code: string;
     readonly retryAfterMs: number | null;
@@ -89,6 +128,9 @@ export declare class OpenGeniSlackBotClient {
             isMember: boolean;
             isDirectMessage: boolean;
             isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -104,6 +146,9 @@ export declare class OpenGeniSlackBotClient {
         isMember: boolean;
         isDirectMessage: boolean;
         isArchived: boolean;
+        isShared: boolean;
+        isExternallyShared: boolean;
+        isOrgShared: boolean;
         topic: string;
         purpose: string;
         numMembers: number | null;
@@ -120,6 +165,9 @@ export declare class OpenGeniSlackBotClient {
             isMember: boolean;
             isDirectMessage: boolean;
             isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -159,6 +207,9 @@ export declare class OpenGeniSlackBotClient {
             isMember: boolean;
             isDirectMessage: boolean;
             isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -186,6 +237,68 @@ export declare class OpenGeniSlackBotClient {
     } & {
         receipt: SlackBotReceipt;
     }>;
+    reactionMessageContext(input: {
+        channelId: string;
+        messageTimestamp: string;
+        checkpoint: unknown | null;
+        checkpointBinding: SlackReactionContextCheckpointBinding;
+        saveCheckpoint: (checkpoint: SlackReactionContextCheckpoint) => Promise<void>;
+    }): Promise<{
+        channel: {
+            id: string;
+            name: string;
+            isPrivate: boolean;
+            isMember: boolean;
+            isDirectMessage: boolean;
+            isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
+            topic: string;
+            purpose: string;
+            numMembers: number | null;
+        };
+        threadTimestamp: string;
+        reactedMessage: {
+            timestamp: string;
+            userId: string;
+            botId: string;
+            threadTimestamp: string;
+            text: string;
+            files: {
+                id: string;
+                name: string;
+                title: string;
+                mimetype: string;
+                filetype: string;
+                mode: string;
+                size: number | null;
+                originatingHuddleId: string;
+                huddleTranscriptFileId: string;
+            }[];
+        };
+        messages: {
+            timestamp: string;
+            userId: string;
+            botId: string;
+            threadTimestamp: string;
+            text: string;
+            files: {
+                id: string;
+                name: string;
+                title: string;
+                mimetype: string;
+                filetype: string;
+                mode: string;
+                size: number | null;
+                originatingHuddleId: string;
+                huddleTranscriptFileId: string;
+            }[];
+        }[];
+        truncated: boolean;
+    } & {
+        receipt: SlackBotReceipt;
+    }>;
     listUsers(input?: {
         limit?: number;
         cursor?: string;
@@ -214,6 +327,9 @@ export declare class OpenGeniSlackBotClient {
             isMember: boolean;
             isDirectMessage: boolean;
             isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -245,6 +361,9 @@ export declare class OpenGeniSlackBotClient {
             isMember: boolean;
             isDirectMessage: boolean;
             isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -276,6 +395,9 @@ export declare class OpenGeniSlackBotClient {
             isMember: boolean;
             isDirectMessage: boolean;
             isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
             topic: string;
             purpose: string;
             numMembers: number | null;

package/dist/integrations/slack-interactions.d.ts

@@ -1,6 +1,8 @@
+import { type WorkspaceSlackReactionSummonSettings } from "@opengeni/contracts";
 import { type SlackInstallationRoute, type SlackInteractionInboxEntry, type SlackInteractionTriggerKind } from "@opengeni/db";
 import { type ApiRouteDeps } from "@opengeni/core";
 import type { Hono } from "hono";
+import { type OpenGeniSlackBotClient } from "./slack-bot";
 export declare const SLACK_INTERACTION_MAX_BODY_BYTES: number;
 export declare const SLACK_SIGNATURE_REPLAY_WINDOW_SECONDS = 300;
 export declare const SLACK_DELIVERY_EVENT_TYPES: readonly ["agent.message.completed", "session.humanInput.requested", "turn.completed", "turn.failed", "turn.cancelled", "session.status.changed"];
@@ -29,12 +31,15 @@ export declare function verifySlackRequestSignature(input: {
     rawBody: string;
 }, signingSecret: string, nowMs?: number): boolean;
 export declare function slackEventInboxEntry(payload: unknown, bot: Pick<SlackInstallationRoute, "botId" | "botUserId">): NormalizedSlackInteraction | null;
+export declare function slackReactionInboxEntry(payload: unknown, bot: Pick<SlackInstallationRoute, "botUserId">, settings: WorkspaceSlackReactionSummonSettings): NormalizedSlackInteraction | null;
 export declare function registerSlackInteractionRoutes(app: Hono, deps: ApiRouteDeps): void;
 export declare function drainSlackInteractionsOnce(deps: ApiRouteDeps): Promise<boolean>;
 export declare function startSlackInteractionPump(deps: ApiRouteDeps, options?: {
     intervalMs?: number;
     maxPerTick?: number;
 }): () => void;
+type SlackReactionMessageContext = Awaited<ReturnType<OpenGeniSlackBotClient["reactionMessageContext"]>>;
+export declare function slackReactionTaskText(context: SlackReactionMessageContext): string;
 type SlackUserLinkToken = {
     workspaceId: string;
     connectionId: string;

package/dist/mcp/documents.d.ts

@@ -1,8 +1,8 @@
 import { type DocumentServices } from "@opengeni/documents";
 import { type Database } from "@opengeni/db";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-export declare function buildDocumentsMcpServer(db: Database, accountId: string, workspaceId: string, documentServices: DocumentServices, options?: {
+export declare function buildDocumentsMcpServer(db: Database, accountId: string, workspaceId: string, documentServices: DocumentServices, options: {
     createdBySessionId?: string | undefined;
-    /** The human subject whose agent is making this retrieval request. */
-    viewerSubjectId?: string | undefined;
+    /** Immutable human subject whose agent is making this retrieval request. */
+    initiatingSubjectId: string;
 }): McpServer;

package/dist/mcp/server.d.ts

@@ -70,7 +70,7 @@ export declare function capSessionDiscoveryPage(page: Awaited<ReturnType<typeof
             truncated: boolean;
         };
         latestMessage?: {
-            type: "agent.message.completed" | "agent.message.delta" | "agent.model.request" | "agent.model.usage" | "agent.reasoning.delta" | "agent.toolCall.created" | "agent.toolCall.output" | "agent.updated" | "artifact.created" | "codex.account.switched" | "codex.capacity.resumed" | "codex.capacity.superseded" | "codex.capacity.waiting" | "codex.credential.selected" | "codex.fleet.decision" | "credential.auth_needed" | "fs.changed" | "git.changed" | "goal.cleared" | "goal.completed" | "goal.continuation" | "goal.paused" | "goal.resumed" | "goal.set" | "goal.updated" | "machine.link.lost" | "machine.link.restored" | "machine.op.failed" | "machine.op.recovered" | "machine.runner.restarted" | "memory.corrected" | "memory.saved" | "recording.available" | "recording.failed" | "recording.started" | "rig.setup.completed" | "rig.setup.failed" | "rig.setup.skipped" | "rig.setup.started" | "sandbox.box.created" | "sandbox.box.lost" | "sandbox.box.snapshot" | "sandbox.box.terminated" | "sandbox.command.output.delta" | "sandbox.env.drift" | "sandbox.operation.completed" | "sandbox.operation.failed" | "sandbox.operation.started" | "session.context.cleared" | "session.context.compacted" | "session.context.compaction.requested" | "session.context.compaction.skipped" | "session.context.compaction.started" | "session.control.paused" | "session.control.resumed" | "session.control.steer_requested" | "session.created" | "session.event.envelope_omitted" | "session.humanInput.requested" | "session.mcp.approval_policy.updated" | "session.queue.changed" | "session.queue.history" | "session.queue.prompt.cancelled" | "session.requiresAction" | "session.route.reconciled" | "session.status.changed" | "session.title_set" | "session.tool_policy.updated" | "stream.closed" | "stream.opened" | "stream.revoked" | "stream.url.rotated" | "system.update.cancelled" | "system.update.delivered" | "system.update.pending" | "system.update.settled" | "system.update.superseded" | "terminal.pty.exited" | "terminal.pty.output.delta" | "terminal.pty.started" | "tool.auth_needed" | "turn.cancelled" | "turn.capacity_waiting" | "turn.completed" | "turn.event.rejected_late" | "turn.failed" | "turn.queued" | "turn.recovery.requested" | "turn.started" | "turn.superseded" | "user.approvalDecision" | "user.humanInputResponse" | "user.message" | "user.pause" | "workspace.inference.paused" | "workspace.inference.resumed" | "workspace.revision.captured" | "workspace.revision.degraded";
+            type: "agent.message.completed" | "agent.message.delta" | "agent.model.request" | "agent.model.usage" | "agent.reasoning.delta" | "agent.toolCall.created" | "agent.toolCall.output" | "agent.updated" | "artifact.created" | "codex.account.switched" | "codex.capacity.resumed" | "codex.capacity.superseded" | "codex.capacity.waiting" | "codex.credential.selected" | "codex.fleet.decision" | "credential.auth_needed" | "fs.changed" | "git.changed" | "goal.cleared" | "goal.completed" | "goal.continuation" | "goal.paused" | "goal.resumed" | "goal.set" | "goal.updated" | "machine.link.lost" | "machine.link.restored" | "machine.op.failed" | "machine.op.recovered" | "machine.runner.restarted" | "memory.corrected" | "memory.saved" | "recording.available" | "recording.failed" | "recording.started" | "rig.setup.completed" | "rig.setup.failed" | "rig.setup.skipped" | "rig.setup.started" | "sandbox.box.created" | "sandbox.box.lost" | "sandbox.box.snapshot" | "sandbox.box.terminated" | "sandbox.command.output.delta" | "sandbox.env.drift" | "sandbox.operation.completed" | "sandbox.operation.failed" | "sandbox.operation.started" | "session.context.cleared" | "session.context.compacted" | "session.context.compaction.requested" | "session.context.compaction.skipped" | "session.context.compaction.started" | "session.control.paused" | "session.control.resumed" | "session.control.steer_requested" | "session.created" | "session.event.envelope_omitted" | "session.humanInput.requested" | "session.mcp.approval_policy.updated" | "session.queue.changed" | "session.queue.history" | "session.queue.prompt.cancelled" | "session.realtime.ended" | "session.realtime.started" | "session.requiresAction" | "session.route.reconciled" | "session.status.changed" | "session.title_set" | "session.tool_policy.updated" | "stream.closed" | "stream.opened" | "stream.revoked" | "stream.url.rotated" | "system.update.cancelled" | "system.update.delivered" | "system.update.pending" | "system.update.settled" | "system.update.superseded" | "terminal.pty.exited" | "terminal.pty.output.delta" | "terminal.pty.started" | "tool.auth_needed" | "turn.cancelled" | "turn.capacity_waiting" | "turn.completed" | "turn.event.rejected_late" | "turn.failed" | "turn.queued" | "turn.recovery.requested" | "turn.started" | "turn.superseded" | "user.approvalDecision" | "user.humanInputResponse" | "user.message" | "user.pause" | "workspace.inference.paused" | "workspace.inference.resumed" | "workspace.revision.captured" | "workspace.revision.degraded";
             preview: string | null;
             previewTruncated: boolean;
         } | null;

package/dist/session-realtime-context.d.ts

@@ -0,0 +1,19 @@
+import { type CodexRealtimeInitialItem } from "@opengeni/codex";
+export type SessionRealtimeHistoryRow = {
+    position: number;
+    item: Record<string, unknown>;
+};
+export type SessionRealtimeContinuityEntry = {
+    role: "user" | "assistant";
+    text: string;
+};
+/**
+ * Project ordinary model-facing conversation truth into Frameless V3 startup
+ * items. Only complete role-bearing messages are legal V3 initial items;
+ * reasoning, tool protocol records, images, and raw provider metadata are never
+ * copied into the browser-owned call bootstrap.
+ *
+ * The newest complete tail wins deterministically. This mirrors Codex's exact
+ * byte/4 token estimate and hard 128-item/8,192-token limits.
+ */
+export declare function projectSessionRealtimeInitialItems(rows: readonly SessionRealtimeHistoryRow[], continuityEntries?: readonly SessionRealtimeContinuityEntry[]): CodexRealtimeInitialItem[];

package/dist/workspace-state-projection.d.ts

@@ -1,16 +1,44 @@
-import { type WorkspaceInstructionPolicyListResponse, type WorkspaceStateResponse as WorkspaceStateResponseType } from "@opengeni/contracts";
+import { type WorkspaceInstructionPolicyListResponse, type WorkspaceInstructionPolicySnapshot, type WorkspaceStateResponse as WorkspaceStateResponseType } from "@opengeni/contracts";
 import type { WorkspaceStateMemoryRecord } from "@opengeni/db";
 import type { DocumentInventory } from "@opengeni/documents";
 type KnowledgeProjectionInput = {
     documents: DocumentInventory;
     memories: WorkspaceStateMemoryRecord[];
 };
+type PreferenceGovernanceIdentity = {
+    id: string;
+    revisionId: string;
+    contentHash: string;
+    activeVersion: number;
+    scope: "organization" | "workspace" | "user";
+};
+type AttemptGovernanceProjectionInput = {
+    status: "unavailable";
+} | {
+    status: "available";
+    attemptId: string;
+    executionGeneration: number;
+    acceptedAt: string;
+    policySnapshot: WorkspaceInstructionPolicySnapshot | null;
+    preferenceSnapshot: {
+        id: string;
+        descriptorHash: string;
+        descriptors: PreferenceGovernanceIdentity[];
+        truncated: boolean;
+        createdAt: string;
+    } | null;
+    currentPreferences: {
+        descriptors: PreferenceGovernanceIdentity[];
+        truncated: boolean;
+    };
+};
 export type WorkspaceStateProjectionInput = {
     workspaceId: string;
     generatedAt: string;
     workspaceAgentInstructions: string | null;
     policies: WorkspaceInstructionPolicyListResponse;
     knowledge: KnowledgeProjectionInput | null;
+    attemptGovernance?: AttemptGovernanceProjectionInput | null;
 };
 export declare function projectWorkspaceState(input: WorkspaceStateProjectionInput): WorkspaceStateResponseType;
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "0.16.5",
+  "version": "0.20.0",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -43,18 +43,18 @@
     "@hono/zod-validator": "^0.7.6",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opengeni/agent-proto": "^0.3.0",
-    "@opengeni/codex": "^0.2.9",
-    "@opengeni/config": "^0.10.1",
-    "@opengeni/contracts": "^0.31.1",
-    "@opengeni/core": "^0.18.1",
-    "@opengeni/db": "^0.22.2",
-    "@opengeni/documents": "^0.2.70",
-    "@opengeni/events": "^0.3.60",
-    "@opengeni/github": "^0.4.17",
+    "@opengeni/codex": "^0.2.10",
+    "@opengeni/config": "^0.10.6",
+    "@opengeni/contracts": "^0.35.0",
+    "@opengeni/core": "^0.20.2",
+    "@opengeni/db": "^0.26.0",
+    "@opengeni/documents": "^0.3.2",
+    "@opengeni/events": "^0.3.65",
+    "@opengeni/github": "^0.4.22",
     "@opengeni/network": "^0.1.1",
-    "@opengeni/observability": "^0.4.4",
-    "@opengeni/runtime": "^0.17.1",
-    "@opengeni/storage": "^0.2.54",
+    "@opengeni/observability": "^0.4.9",
+    "@opengeni/runtime": "^0.18.3",
+    "@opengeni/storage": "^0.2.59",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",
     "hono": "^4.12.18",

package/src/app.ts

@@ -18,10 +18,11 @@ import {
 } from "@opengeni/contracts";
 import {
   createDocumentServices,
+  getDocument,
   indexDocumentNow,
   type DocumentServices,
 } from "@opengeni/documents";
-import { dbSql, getWorkspace } from "@opengeni/db";
+import { dbSql, getWorkspace, rlsContextForWorkspace } from "@opengeni/db";
 import { createObservability } from "@opengeni/observability";
 import { createObjectStorage } from "@opengeni/storage";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
@@ -127,17 +128,38 @@ export function createAppComposition(deps: AppDependencies): {
       accountId,
       workspaceId,
       documentId,
+      authorityKind,
+      authorityWorkspaceId,
+      authoritySubjectId,
     }: {
       accountId: string;
       workspaceId: string;
       documentId: string;
+      authorityKind: import("@opengeni/contracts").DocumentAuthorityKind;
+      authorityWorkspaceId: string | null;
+      authoritySubjectId: string | null;
     }) => {
       if (!objectStorage) {
         throw new HTTPException(503, {
           message: "object storage is not configured",
         });
       }
-      return await indexDocumentNow(
+      const context = await rlsContextForWorkspace(deps.db, workspaceId);
+      if (context.accountId !== accountId) {
+        throw new Error("document account/workspace authority mismatch");
+      }
+      const claimedDocument = await getDocument(deps.db, workspaceId, documentId, {
+        viewerSubjectId: authoritySubjectId,
+      });
+      if (
+        !claimedDocument ||
+        claimedDocument.authorityKind !== authorityKind ||
+        claimedDocument.authorityWorkspaceId !== authorityWorkspaceId ||
+        claimedDocument.authoritySubjectId !== authoritySubjectId
+      ) {
+        throw new Error("document authority changed before indexing");
+      }
+      const document = await indexDocumentNow(
         deps.db,
         objectStorage,
         workspaceId,
@@ -153,7 +175,16 @@ export function createAppComposition(deps: AppDependencies): {
             });
           },
         },
+        { viewerSubjectId: authoritySubjectId },
       );
+      if (
+        document.authorityKind !== authorityKind ||
+        document.authorityWorkspaceId !== authorityWorkspaceId ||
+        document.authoritySubjectId !== authoritySubjectId
+      ) {
+        throw new Error("document authority changed before indexing");
+      }
+      return document;
     },
   };
   // The API process's own agent-loop-free sandbox client — the API-direct