@opengeni/api-router 0.21.0 → 0.21.7

package/dist/http/api-error.d.ts

@@ -0,0 +1,16 @@
+import type { ErrorCode } from "@opengeni/contracts";
+import { HTTPException } from "hono/http-exception";
+type ApiHttpErrorOptions = {
+    code: ErrorCode;
+    message: string;
+    retryable?: boolean;
+    details?: Record<string, unknown>;
+};
+/** A public, structured API failure whose message and details are safe for clients. */
+export declare class ApiHttpError extends HTTPException {
+    readonly code: ErrorCode;
+    readonly retryable: boolean | undefined;
+    readonly details: Record<string, unknown> | undefined;
+    constructor(status: number, options: ApiHttpErrorOptions);
+}
+export {};

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createAppComposition,
   startSlackInteractionPump
-} from "./chunk-5EEC7Q6C.js";
+} from "./chunk-RIFVFI3J.js";
 
 // src/index.ts
 import {

package/dist/integrations/google-drive.d.ts

@@ -83,9 +83,13 @@ export declare function browseGoogleDrive(deps: ApiRouteDeps, input: {
     incompleteSearch: boolean;
 }>;
 export declare function saveGoogleDriveSource(deps: ApiRouteDeps, input: {
+    accountId: string;
     workspaceId: string;
     subjectId: string;
     connectionId: string;
     payload: unknown;
+    canManageOrganizationDestination: boolean;
+    canManageWorkspaceDestination: boolean;
+    canManagePersonalDestination: boolean;
 }): Promise<import("@opengeni/db").ConnectionMetadataWithVerification>;
 export {};

package/dist/integrations/oauth-client.d.ts

@@ -9,6 +9,8 @@ type OAuthClientDeps = {
     db: Database;
     settings: Settings;
     observability?: Observability | undefined;
+    oauthStartDeadlineMs?: number | undefined;
+    oauthCallbackDeadlineMs?: number | undefined;
 };
 export type OAuthStartContext = {
     accountId: string;
@@ -31,6 +33,9 @@ type AuthorizationServerMetadata = {
     codeChallengeMethodsSupported: string[];
     raw: Record<string, unknown>;
 };
+export declare const OAUTH_START_DEADLINE_MS = 15000;
+export declare const OAUTH_CALLBACK_DEADLINE_MS = 30000;
+export type OAuthStartStage = "connection_lookup" | "mcp_challenge" | "protected_resource_metadata" | "authorization_server_metadata" | "client_registration";
 export declare function startMcpOAuth(deps: OAuthClientDeps, context: OAuthStartContext): Promise<OAuthStartResponse>;
 export declare function completeMcpOAuthCallback(deps: OAuthClientDeps, input: {
     code?: string | undefined;

package/dist/workspace-state-export.d.ts

@@ -0,0 +1,4 @@
+import { type WorkspaceStateExportResponse as WorkspaceStateExportResponseType, type WorkspaceStateResponse } from "@opengeni/contracts";
+export declare function canonicalWorkspaceStateJson(value: unknown): string;
+export declare function createWorkspaceStateExport(state: WorkspaceStateResponse): WorkspaceStateExportResponseType;
+export declare function serializeWorkspaceStateExport(state: WorkspaceStateResponse): string;

package/dist/workspace-state-projection.d.ts

@@ -12,6 +12,10 @@ type PreferenceGovernanceIdentity = {
     activeVersion: number;
     scope: "organization" | "workspace" | "user";
 };
+type CurrentPreferenceProjectionInput = {
+    descriptors: PreferenceGovernanceIdentity[];
+    truncated: boolean;
+};
 type AttemptGovernanceProjectionInput = {
     status: "unavailable";
 } | {
@@ -37,6 +41,7 @@ export type WorkspaceStateProjectionInput = {
     generatedAt: string;
     workspaceAgentInstructions: string | null;
     policies: WorkspaceInstructionPolicyListResponse;
+    preferences: CurrentPreferenceProjectionInput;
     knowledge: KnowledgeProjectionInput | null;
     attemptGovernance?: AttemptGovernanceProjectionInput | null;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "0.21.0",
+  "version": "0.21.7",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -44,17 +44,17 @@
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opengeni/agent-proto": "^0.3.0",
     "@opengeni/codex": "^0.2.10",
-    "@opengeni/config": "^0.10.7",
-    "@opengeni/contracts": "^0.36.0",
-    "@opengeni/core": "^0.20.3",
-    "@opengeni/db": "^0.27.0",
-    "@opengeni/documents": "^0.3.3",
-    "@opengeni/events": "^0.3.66",
-    "@opengeni/github": "^0.4.23",
-    "@opengeni/network": "^0.1.1",
-    "@opengeni/observability": "^0.4.10",
-    "@opengeni/runtime": "^0.18.4",
-    "@opengeni/storage": "^0.2.60",
+    "@opengeni/config": "^0.10.11",
+    "@opengeni/contracts": "^0.38.1",
+    "@opengeni/core": "^0.20.10",
+    "@opengeni/db": "^0.27.7",
+    "@opengeni/documents": "^0.5.3",
+    "@opengeni/events": "^0.3.73",
+    "@opengeni/github": "^0.4.27",
+    "@opengeni/network": "^0.2.0",
+    "@opengeni/observability": "^0.4.14",
+    "@opengeni/runtime": "^0.18.10",
+    "@opengeni/storage": "^0.2.64",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",
     "hono": "^4.12.18",

package/src/app.ts

@@ -31,6 +31,7 @@ import { bodyLimit } from "hono/body-limit";
 import { compress } from "hono/compress";
 import { cors } from "hono/cors";
 import { HTTPException } from "hono/http-exception";
+import { ApiHttpError } from "./http/api-error";
 import type { ContentfulStatusCode } from "hono/utils/http-status";
 import type { ApiRouteDeps, AppDependencies } from "@opengeni/core";
 import {
@@ -239,7 +240,11 @@ export function createAppComposition(deps: AppDependencies): {
     ],
     exposeHeaders: ["X-OpenGeni-Api-Contract", "X-OpenGeni-Correlation-Id"],
   };
-  const publicApiCors = cors({ ...corsHeaders, credentials: false, origin: "*" });
+  const publicApiCors = cors({
+    ...corsHeaders,
+    credentials: false,
+    origin: "*",
+  });
   const credentialedCors = cors({
     ...corsHeaders,
     credentials: true,
@@ -565,8 +570,11 @@ export function createAppComposition(deps: AppDependencies): {
 
   app.onError((error, c) => {
     const compactionLock = codexCompactionV2ProviderLockedError(error);
+    const apiError = error instanceof ApiHttpError ? error : null;
     const status = compactionLock ? 422 : httpStatusForError(error);
-    const code: ErrorCode = compactionLock ? compactionLock.code : errorCodeForStatus(status);
+    const code: ErrorCode = compactionLock
+      ? compactionLock.code
+      : (apiError?.code ?? errorCodeForStatus(status));
     const requestId = correlationIds.get(c.req.raw) ?? crypto.randomUUID();
     c.header(OPENGENI_CORRELATION_HEADER, requestId);
     if (new URL(c.req.url).pathname.startsWith("/v1/")) {
@@ -578,9 +586,12 @@ export function createAppComposition(deps: AppDependencies): {
         code,
         message: compactionLock
           ? (boundedPublicMessage(compactionLock.message) ?? "Request failed.")
-          : publicErrorMessage(error, status),
-        retryable: retryableHttpStatus(status),
+          : apiError
+            ? (boundedPublicMessage(apiError.message) ?? "Request failed.")
+            : publicErrorMessage(error, status),
+        retryable: apiError?.retryable ?? retryableHttpStatus(status),
         requestId,
+        ...(apiError?.details ? { details: apiError.details } : {}),
       },
     });
     return c.json(envelope, status as ContentfulStatusCode);

package/src/http/api-error.ts

@@ -0,0 +1,25 @@
+import type { ErrorCode } from "@opengeni/contracts";
+import type { ContentfulStatusCode } from "hono/utils/http-status";
+import { HTTPException } from "hono/http-exception";
+
+type ApiHttpErrorOptions = {
+  code: ErrorCode;
+  message: string;
+  retryable?: boolean;
+  details?: Record<string, unknown>;
+};
+
+/** A public, structured API failure whose message and details are safe for clients. */
+export class ApiHttpError extends HTTPException {
+  readonly code: ErrorCode;
+  readonly retryable: boolean | undefined;
+  readonly details: Record<string, unknown> | undefined;
+
+  constructor(status: number, options: ApiHttpErrorOptions) {
+    super(status as ContentfulStatusCode, { message: options.message });
+    this.name = "ApiHttpError";
+    this.code = options.code;
+    this.retryable = options.retryable;
+    this.details = options.details;
+  }
+}

package/src/integrations/google-drive.ts

@@ -1,5 +1,9 @@
 import { createHash, randomBytes } from "node:crypto";
 import type { Settings } from "@opengeni/config";
+import {
+  bindConnectorDocumentDestination,
+  type ConnectorDocumentDestinationSelection,
+} from "@opengeni/contracts/connector-destinations";
 import {
   GOOGLE_DRIVE_CREDENTIAL_LABEL,
   GOOGLE_DRIVE_CREDENTIAL_ROLE,
@@ -253,6 +257,9 @@ export async function completeGoogleDriveOAuthCallback(
       verifiedAt: new Date().toISOString(),
       accessMode: scopeDecision.accessMode,
       lifecycle: googleDriveLifecycle("active"),
+      ...(previousMetadata?.documentDestination
+        ? { documentDestination: previousMetadata.documentDestination }
+        : {}),
       ...(previousMetadata?.selectedSources
         ? { selectedSources: previousMetadata.selectedSources }
         : previousMetadata?.selectedSource
@@ -496,10 +503,14 @@ export async function browseGoogleDrive(
 export async function saveGoogleDriveSource(
   deps: ApiRouteDeps,
   input: {
+    accountId: string;
     workspaceId: string;
     subjectId: string;
     connectionId: string;
     payload: unknown;
+    canManageOrganizationDestination: boolean;
+    canManageWorkspaceDestination: boolean;
+    canManagePersonalDestination: boolean;
   },
 ) {
   const parsedPayload = SaveGoogleDriveSourceRequest.safeParse(input.payload);
@@ -516,7 +527,31 @@ export async function saveGoogleDriveSource(
   if (!existing) {
     throw new HTTPException(404, { message: "Google Drive connection not found" });
   }
+  if (existing.accountId !== input.accountId || existing.workspaceId !== input.workspaceId) {
+    throw new HTTPException(403, { message: "Google Drive connection authority mismatch" });
+  }
   await requireGoogleDriveSourceConnection(deps, existing, input.subjectId);
+  const destinationSelection: ConnectorDocumentDestinationSelection = payload.destination ?? {
+    authorityKind: "workspace",
+    collectionId: null,
+  };
+  if (
+    destinationSelection.authorityKind === "organization" &&
+    !input.canManageOrganizationDestination
+  ) {
+    throw new HTTPException(403, { message: "missing permission: account:admin" });
+  }
+  if (destinationSelection.authorityKind === "workspace" && !input.canManageWorkspaceDestination) {
+    throw new HTTPException(403, { message: "missing permission: workspace:admin" });
+  }
+  if (destinationSelection.authorityKind === "personal" && !input.canManagePersonalDestination) {
+    throw new HTTPException(403, { message: "personal destination requires the exact actor" });
+  }
+  const documentDestination = bindConnectorDocumentDestination(destinationSelection, {
+    accountId: input.accountId,
+    workspaceId: input.workspaceId,
+    initiatingSubjectId: input.subjectId,
+  });
   const verifiedSources = [];
   for (const source of payload.sources) {
     const sourceId = validDriveId(source.id, "source.id");
@@ -552,13 +587,14 @@ export async function saveGoogleDriveSource(
     expectedVersion: latest.version,
     metadata: GoogleDriveConnectionMetadata.parse({
       ...latestMetadata,
+      documentDestination,
       selectedSource: null,
       selectedSources: verifiedSources.map((verified) => ({
         id: verified.id,
         name: verified.name,
         mimeType: verified.mimeType,
         driveId: verified.driveId,
-        targetScope: payload.targetScope,
+        destination: documentDestination,
         syncCadence: payload.syncCadence,
         readPolicy: payload.readPolicy,
         selectedAt: new Date().toISOString(),