@opengeni/api-router 0.20.0 → 0.21.0

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createAppComposition,
   startSlackInteractionPump
-} from "./chunk-AEVD7E2F.js";
+} from "./chunk-5EEC7Q6C.js";
 
 // src/index.ts
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -44,17 +44,17 @@
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opengeni/agent-proto": "^0.3.0",
     "@opengeni/codex": "^0.2.10",
-    "@opengeni/config": "^0.10.6",
-    "@opengeni/contracts": "^0.35.0",
-    "@opengeni/core": "^0.20.2",
-    "@opengeni/db": "^0.26.0",
-    "@opengeni/documents": "^0.3.2",
-    "@opengeni/events": "^0.3.65",
-    "@opengeni/github": "^0.4.22",
+    "@opengeni/config": "^0.10.7",
+    "@opengeni/contracts": "^0.36.0",
+    "@opengeni/core": "^0.20.3",
+    "@opengeni/db": "^0.27.0",
+    "@opengeni/documents": "^0.3.3",
+    "@opengeni/events": "^0.3.66",
+    "@opengeni/github": "^0.4.23",
     "@opengeni/network": "^0.1.1",
-    "@opengeni/observability": "^0.4.9",
-    "@opengeni/runtime": "^0.18.3",
-    "@opengeni/storage": "^0.2.59",
+    "@opengeni/observability": "^0.4.10",
+    "@opengeni/runtime": "^0.18.4",
+    "@opengeni/storage": "^0.2.60",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",
     "hono": "^4.12.18",

package/src/routes/workspace-instruction-policies.ts

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import {
   ActivateWorkspaceInstructionPolicyRequest,
   CreateWorkspaceInstructionPolicyDraftRequest,
+  CreateWorkspaceInstructionPolicyOnboardingProposalRequest,
   ImportLegacyWorkspaceInstructionPolicyDraftRequest,
   RollbackWorkspaceInstructionPolicyRequest,
   WorkspaceInstructionPolicyActivationResponse,
@@ -10,22 +11,34 @@ import {
   WorkspaceInstructionPolicyDiffResponse,
   WorkspaceInstructionPolicyListQuery,
   WorkspaceInstructionPolicyListResponse,
+  WorkspaceInstructionPolicyOnboardingProposal,
+  WorkspaceInstructionPolicyOnboardingProposalConflictResponse,
+  WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse,
+  WorkspaceInstructionPolicyOnboardingProposalListQuery,
+  WorkspaceInstructionPolicyOnboardingProposalListResponse,
+  WorkspaceInstructionPolicyOnboardingProposalStaleResponse,
   WorkspaceInstructionPolicyOperationReuseResponse,
   WorkspaceInstructionPolicyRevision,
+  WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
 } from "@opengeni/contracts";
 import { requireAccessGrant, type ApiRouteDeps } from "@opengeni/core";
 import {
   activateWorkspaceInstructionPolicyRevision,
   createWorkspaceInstructionPolicyDraft,
+  createWorkspaceInstructionPolicyOnboardingProposal,
   diffWorkspaceInstructionPolicyRevisions,
   getWorkspaceInstructionPolicyRevision,
   importLegacyWorkspaceInstructionPolicyDraft,
   listWorkspaceInstructionPolicyRevisions,
+  listWorkspaceInstructionPolicyOnboardingProposals,
   rollbackWorkspaceInstructionPolicyRevision,
   WorkspaceInstructionPolicyConflictError,
   WorkspaceInstructionPolicyInvalidOperationError,
   WorkspaceInstructionPolicyLegacyUnavailableError,
   WorkspaceInstructionPolicyNotFoundError,
+  WorkspaceInstructionPolicyOnboardingProposalConflictError,
+  WorkspaceInstructionPolicyOnboardingProposalContentError,
+  WorkspaceInstructionPolicyOnboardingProposalStaleError,
   WorkspaceInstructionPolicyOperationReuseError,
 } from "@opengeni/db";
 import type { Context, Hono } from "hono";
@@ -62,6 +75,37 @@ function policyErrorResponse(context: Context, error: unknown): Response {
       409,
     );
   }
+  if (error instanceof WorkspaceInstructionPolicyOnboardingProposalContentError) {
+    return context.json(
+      WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse.parse({
+        code: error.code,
+        message: error.message,
+        maxChars: WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
+      }),
+      422,
+    );
+  }
+  if (error instanceof WorkspaceInstructionPolicyOnboardingProposalStaleError) {
+    return context.json(
+      WorkspaceInstructionPolicyOnboardingProposalStaleResponse.parse({
+        code: error.code,
+        message: error.message,
+        currentHead: error.currentHead,
+      }),
+      409,
+    );
+  }
+  if (error instanceof WorkspaceInstructionPolicyOnboardingProposalConflictError) {
+    return context.json(
+      WorkspaceInstructionPolicyOnboardingProposalConflictResponse.parse({
+        code: error.code,
+        message: error.message,
+        existingProposalId: error.existingProposalId,
+        existingDraftRevisionId: error.existingDraftRevisionId,
+      }),
+      409,
+    );
+  }
   if (error instanceof WorkspaceInstructionPolicyNotFoundError) {
     return context.json(
       { code: "WORKSPACE_INSTRUCTION_POLICY_NOT_FOUND", message: error.message },
@@ -172,6 +216,58 @@ export function registerWorkspaceInstructionPolicyRoutes(app: Hono, deps: ApiRou
     }
   });
 
+  app.get(`${base}/onboarding-proposals`, async (context) => {
+    const workspaceId = context.req.param("workspaceId");
+    await requireAccessGrant(context, deps, workspaceId, "workspace:read");
+    const parsed = WorkspaceInstructionPolicyOnboardingProposalListQuery.safeParse({
+      limit: context.req.query("limit"),
+    });
+    if (!parsed.success) {
+      throw new HTTPException(422, {
+        message: "Invalid workspace instruction-policy onboarding-proposal query",
+      });
+    }
+    return context.json(
+      WorkspaceInstructionPolicyOnboardingProposalListResponse.parse(
+        await listWorkspaceInstructionPolicyOnboardingProposals(deps.db, workspaceId, parsed.data),
+      ),
+    );
+  });
+
+  app.post(`${base}/onboarding-proposals`, async (context) => {
+    const workspaceId = context.req.param("workspaceId");
+    const grant = await requireAccessGrant(context, deps, workspaceId, "workspace:admin");
+    assertBoundedActor(grant.subjectId);
+    const request = await parseBody(
+      context,
+      CreateWorkspaceInstructionPolicyOnboardingProposalRequest,
+    );
+    try {
+      return context.json(
+        WorkspaceInstructionPolicyOnboardingProposal.parse(
+          await createWorkspaceInstructionPolicyOnboardingProposal(deps.db, {
+            operationId: request.operationId ?? randomUUID(),
+            accountId: grant.accountId,
+            workspaceId,
+            createdBySubjectId: grant.subjectId,
+            kind: request.kind,
+            scope: request.scope,
+            roleKey: request.roleKey,
+            content: request.content,
+            sourceId: request.sourceId,
+            sourceVersion: request.sourceVersion,
+            confidenceBps: request.confidenceBps,
+            expectedCurrentRevisionId: request.expectedCurrentRevisionId,
+            expectedActivationVersion: request.expectedActivationVersion,
+          }),
+        ),
+        201,
+      );
+    } catch (error) {
+      return policyErrorResponse(context, error);
+    }
+  });
+
   app.get(`${base}/diff`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
     await requireAccessGrant(context, deps, workspaceId, "workspace:read");