@opengeni/api-router 0.26.1 → 0.30.1

package/dist/integrations/slack-bot.d.ts

@@ -3,6 +3,7 @@ import { OPENGENI_SLACK_BOT_CREDENTIAL_LABEL, OPENGENI_SLACK_BOT_CREDENTIAL_ROLE
 import { type Database } from "@opengeni/db";
 import { type FetchLike } from "@opengeni/network";
 import { HTTPException } from "hono/http-exception";
+export declare const SLACK_REACTION_IMAGE_MAX_BYTES: number;
 declare const SLACK_REACTION_CONTEXT_CHECKPOINT_VERSION = 1;
 type SlackPayload = Record<string, unknown> & {
     ok?: unknown;
@@ -20,6 +21,19 @@ export type VerifiedOpenGeniSlackBot = {
     grantedScopes: string[];
     metadata: OpenGeniSlackBotConnectionMetadata;
 };
+export type PreparedSlackReactionImage = Readonly<{
+    fileId: string;
+    filename: string;
+    declaredMimeType: string;
+    declaredSizeBytes: number | null;
+    downloadUrl: URL | null;
+}>;
+export type DownloadedSlackReactionImage = Readonly<{
+    fileId: string;
+    filename: string;
+    contentType: "image/png" | "image/jpeg" | "image/webp";
+    bytes: Uint8Array;
+}>;
 export declare function exchangeOpenGeniSlackAuthorizationCode(input: {
     code: string;
     clientId: string;
@@ -35,7 +49,32 @@ export type SlackBotReceipt = {
     operationId?: string;
     clientMessageId?: string;
 };
-type SlackBotOperation = "channels.list" | "channel_history.read" | "thread_replies.read" | "users.list" | "files.list" | "file.info" | "file.content.read" | "message.post" | "message.delete";
+export type SlackMessageBlock = {
+    type: "section";
+    block_id?: string;
+    text: {
+        type: "mrkdwn" | "plain_text";
+        text: string;
+        emoji?: boolean;
+    };
+} | {
+    type: "actions";
+    block_id: string;
+    elements: Array<{
+        type: "button";
+        action_id: string;
+        value: string;
+        text: {
+            type: "plain_text";
+            text: string;
+            emoji?: boolean;
+        };
+        style?: "primary" | "danger";
+    }>;
+} | {
+    type: "divider";
+};
+type SlackBotOperation = "channels.list" | "channel_history.read" | "thread_replies.read" | "users.list" | "files.list" | "file.info" | "file.content.read" | "message.post" | "message.update" | "message.delete";
 type SlackBotContext = {
     accountId: string;
     workspaceId: string;
@@ -127,10 +166,15 @@ export declare class OpenGeniSlackBotClient {
             isPrivate: boolean;
             isMember: boolean;
             isDirectMessage: boolean;
+            isMpim: boolean;
             isArchived: boolean;
             isShared: boolean;
             isExternallyShared: boolean;
             isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -145,20 +189,76 @@ export declare class OpenGeniSlackBotClient {
         isPrivate: boolean;
         isMember: boolean;
         isDirectMessage: boolean;
+        isMpim: boolean;
         isArchived: boolean;
         isShared: boolean;
         isExternallyShared: boolean;
         isOrgShared: boolean;
+        isPendingExternallyShared: boolean;
+        contextTeamId: string | null;
+        connectedTeamIds: string[] | null;
+        sharedTeamIds: string[] | null;
         topic: string;
         purpose: string;
         numMembers: number | null;
     }>;
+    slackTaskPolicyFacts(channelId: string, userId: string): Promise<({
+        conversation: {
+            id: string;
+            name: string;
+            isPrivate: boolean;
+            isMember: boolean;
+            isDirectMessage: boolean;
+            isMpim: boolean;
+            isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
+            topic: string;
+            purpose: string;
+            numMembers: number | null;
+        };
+        initiator: null;
+    } | {
+        conversation: {
+            id: string;
+            name: string;
+            isPrivate: boolean;
+            isMember: boolean;
+            isDirectMessage: boolean;
+            isMpim: boolean;
+            isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
+            topic: string;
+            purpose: string;
+            numMembers: number | null;
+        };
+        initiator: {
+            id: string;
+            teamId: string | null;
+            isGuest: boolean | null;
+            isExternal: boolean | null;
+        };
+    }) & {
+        receipt: SlackBotReceipt;
+    }>;
     channelHistory(input: {
         channelId: string;
         limit?: number;
         cursor?: string;
         latest?: string;
         inclusive?: boolean;
+        authorizeRead?: () => Promise<void>;
     }): Promise<{
         channel: {
             id: string;
@@ -166,10 +266,15 @@ export declare class OpenGeniSlackBotClient {
             isPrivate: boolean;
             isMember: boolean;
             isDirectMessage: boolean;
+            isMpim: boolean;
             isArchived: boolean;
             isShared: boolean;
             isExternallyShared: boolean;
             isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -201,6 +306,10 @@ export declare class OpenGeniSlackBotClient {
         threadTimestamp: string;
         limit?: number;
         cursor?: string;
+        oldest?: string;
+        latest?: string;
+        inclusive?: boolean;
+        authorizeRead?: () => Promise<void>;
     }): Promise<{
         channel: {
             id: string;
@@ -208,10 +317,15 @@ export declare class OpenGeniSlackBotClient {
             isPrivate: boolean;
             isMember: boolean;
             isDirectMessage: boolean;
+            isMpim: boolean;
             isArchived: boolean;
             isShared: boolean;
             isExternallyShared: boolean;
             isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -252,10 +366,15 @@ export declare class OpenGeniSlackBotClient {
             isPrivate: boolean;
             isMember: boolean;
             isDirectMessage: boolean;
+            isMpim: boolean;
             isArchived: boolean;
             isShared: boolean;
             isExternallyShared: boolean;
             isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -301,6 +420,22 @@ export declare class OpenGeniSlackBotClient {
     } & {
         receipt: SlackBotReceipt;
     }>;
+    /**
+     * Re-fetch and authorize the exact reacted-message files before any byte or
+     * workspace-storage mutation. The returned private URLs are process-local
+     * capabilities only and must never be persisted, logged, or projected into
+     * session input.
+     */
+    prepareReactionImageDownloads(input: {
+        channelId: string;
+        files: readonly {
+            id: string;
+            name: string;
+            title: string;
+        }[];
+    }): Promise<PreparedSlackReactionImage[]>;
+    /** Download and fully validate one previously authorized Slack image. */
+    downloadReactionImage(input: PreparedSlackReactionImage): Promise<DownloadedSlackReactionImage>;
     listUsers(input?: {
         limit?: number;
         cursor?: string;
@@ -328,10 +463,15 @@ export declare class OpenGeniSlackBotClient {
             isPrivate: boolean;
             isMember: boolean;
             isDirectMessage: boolean;
+            isMpim: boolean;
             isArchived: boolean;
             isShared: boolean;
             isExternallyShared: boolean;
             isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -362,10 +502,15 @@ export declare class OpenGeniSlackBotClient {
             isPrivate: boolean;
             isMember: boolean;
             isDirectMessage: boolean;
+            isMpim: boolean;
             isArchived: boolean;
             isShared: boolean;
             isExternallyShared: boolean;
             isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -396,10 +541,15 @@ export declare class OpenGeniSlackBotClient {
             isPrivate: boolean;
             isMember: boolean;
             isDirectMessage: boolean;
+            isMpim: boolean;
             isArchived: boolean;
             isShared: boolean;
             isExternallyShared: boolean;
             isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
             topic: string;
             purpose: string;
             numMembers: number | null;
@@ -423,12 +573,18 @@ export declare class OpenGeniSlackBotClient {
     } & {
         receipt: SlackBotReceipt;
     }>;
+    /**
+     * Internal server-owned delivery only. Generic model-facing MCP callers do
+     * not have a trustworthy durable logical-delivery identity and must never
+     * reach this method with a caller-generated operation ID.
+     */
     postMessage(input: {
         operationId: string;
         channelId?: string;
         userId?: string;
         threadTimestamp?: string;
         text: string;
+        blocks?: SlackMessageBlock[];
         requireActiveNonSharedChannel?: boolean;
     }): Promise<{
         channelId: string;
@@ -436,6 +592,17 @@ export declare class OpenGeniSlackBotClient {
         threadTimestamp: string | null;
         receipt: SlackBotReceipt;
     }>;
+    updateMessage(input: {
+        operationId: string;
+        channelId: string;
+        timestamp: string;
+        text: string;
+        blocks?: SlackMessageBlock[];
+    }): Promise<{
+        channelId: string;
+        timestamp: string;
+        receipt: SlackBotReceipt;
+    }>;
     deleteMessage(input: {
         operationId: string;
         channelId: string;
@@ -447,6 +614,7 @@ export declare class OpenGeniSlackBotClient {
         receipt: SlackBotReceipt;
     }>;
     private slackMessageExists;
+    private reconcilePostMessage;
     private requireMemberChannel;
     private requireActiveNonSharedMemberChannel;
     private requireFileForChannel;
@@ -461,6 +629,7 @@ export declare class OpenGeniSlackBotClient {
     private completedPostResult;
     private completedDeleteResult;
     private postRequestDigest;
+    private updateRequestDigest;
     private deleteRequestDigest;
     private deletePrincipal;
     private fileListPage;
@@ -484,6 +653,7 @@ export declare function createOpenGeniSlackBotInteractionClient(deps: {
     subjectId: string;
     sessionId?: string | null;
 }): Promise<OpenGeniSlackBotClient>;
+export declare function sniffSlackReactionImageMime(bytes: Uint8Array): "image/png" | "image/jpeg" | "image/webp" | null;
 export declare function resolveSlackFilesListPage(input: {
     channelId: string;
     limit?: number;

package/dist/integrations/slack-interactions.d.ts

@@ -1,11 +1,12 @@
-import { type WorkspaceSlackReactionSummonSettings } from "@opengeni/contracts";
+import { type FileResourceRef, type WorkspaceSlackReactionSummonSettings } from "@opengeni/contracts";
 import { type SlackInstallationRoute, type SlackInteractionInboxEntry, type SlackInteractionTriggerKind } from "@opengeni/db";
 import { type ApiRouteDeps } from "@opengeni/core";
 import type { Hono } from "hono";
 import { type OpenGeniSlackBotClient } from "./slack-bot.js";
+import { type ImportedSlackReactionImage } from "../slack-reaction-files.js";
 export declare const SLACK_INTERACTION_MAX_BODY_BYTES: number;
 export declare const SLACK_SIGNATURE_REPLAY_WINDOW_SECONDS = 300;
-export declare const SLACK_DELIVERY_EVENT_TYPES: readonly ["agent.message.completed", "session.humanInput.requested", "turn.completed", "turn.failed", "turn.cancelled", "session.status.changed"];
+export declare const SLACK_DELIVERY_EVENT_TYPES: readonly ["agent.message.completed", "session.humanInput.requested", "session.requiresAction", "turn.completed", "turn.failed", "turn.cancelled", "session.status.changed"];
 export declare const SLACK_TASK_INSTRUCTIONS: string;
 /**
  * Slack-originated tasks may retrieve the workspace bot's bounded read surface
@@ -13,7 +14,7 @@ export declare const SLACK_TASK_INSTRUCTIONS: string;
  * selection at session creation while keeping Slack mutations out of the model
  * surface; interaction delivery remains owned by the durable delivery pump.
  */
-export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "computer_act" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_set" | "goal_update" | "interaction_discover" | "memory_correct" | "memory_save" | "memory_search" | "preference_registry_get" | "preference_registry_summary" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_set" | "goal_update" | "interaction_discover" | "interaction_request_human" | "memory_correct" | "memory_save" | "memory_search" | "preference_registry_get" | "preference_registry_summary" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
 export type NormalizedSlackInteraction = {
     providerEventId: string;
     providerMessageId: string;
@@ -24,8 +25,11 @@ export type NormalizedSlackInteraction = {
     slackThreadTs: string | null;
     triggerKind: SlackInteractionTriggerKind;
     text: string;
+    hasFiles: boolean;
 };
-export declare function slackInteractionRoutePolicy(entry: Pick<SlackInteractionInboxEntry, "triggerKind" | "slackChannelId" | "slackThreadTs" | "slackMessageTs" | "slackUserId">): {
+export declare function slackInteractionRoutePolicy(entry: Pick<SlackInteractionInboxEntry, "triggerKind" | "slackChannelId" | "slackThreadTs" | "slackMessageTs" | "slackUserId">, options?: {
+    privateHandoff?: boolean;
+}): {
     directMessageShortcut: boolean;
     requiresChannelAccess: boolean;
     visibility: "private" | "workspace";
@@ -51,7 +55,15 @@ export type SlackInvocationMessageContext = {
 };
 export declare function slackInvocationTaskText(entry: Pick<SlackInteractionInboxEntry, "slackMessageTs" | "slackUserId" | "text">, context: SlackInvocationMessageContext): string;
 type SlackReactionMessageContext = Awaited<ReturnType<OpenGeniSlackBotClient["reactionMessageContext"]>>;
-export declare function slackReactionTaskText(context: SlackReactionMessageContext): string;
+type PreparedSlackReactionTask = Readonly<{
+    resources: FileResourceRef[];
+    attachments: ImportedSlackReactionImage[];
+    omissionCodes: string[];
+    omittedCount: number;
+}>;
+export declare function slackReactionTaskText(context: SlackReactionMessageContext, prepared?: PreparedSlackReactionTask): string;
+export declare function slackDeliveryTextsCoalesce(left: string, right: string): boolean;
+export declare function normalizedBlockActionInteraction(payload: Record<string, unknown>): NormalizedSlackInteraction;
 type SlackUserLinkToken = {
     workspaceId: string;
     connectionId: string;

package/dist/interaction-holder-heartbeat.d.ts

@@ -0,0 +1,17 @@
+import type { AccessGrant } from "@opengeni/contracts";
+import type { ApiRouteDeps } from "@opengeni/core";
+/**
+ * Keep one durable interaction operation—and its sandbox holder when present—
+ * live while a bounded controller mutation is in flight. Browser profile
+ * capture/restore can legitimately take minutes; without this pulse a lifecycle
+ * reaper cannot distinguish that request from a caller that disappeared.
+ */
+export declare function withInteractionHolderHeartbeat<T>(deps: ApiRouteDeps, input: {
+    grant: AccessGrant;
+    workspaceId: string;
+    sandboxGroupId: string | null;
+    holderId: string;
+    operationId: string;
+    resourceId: string;
+    controllerGeneration: string;
+}, run: () => Promise<T>): Promise<T>;

package/dist/interaction-metrics.d.ts

@@ -0,0 +1,11 @@
+import type { AuthRunMutationResponse, BrowserActionReceipt, BrowserActionRequest, PublishBrowserRevisionResponse, BrowserSessionMutationResponse, ComputerActionReceipt, ComputerActionRequest, ComputerSessionMutationResponse, InteractionInterventionMutationResponse, ProtectedAuthFillResponse } from "@opengeni/contracts";
+import { type Observability } from "@opengeni/observability";
+type InteractionLifecycleMutation = BrowserSessionMutationResponse | ComputerSessionMutationResponse;
+type AuthMutation = AuthRunMutationResponse | ProtectedAuthFillResponse;
+export declare function observeBrowserActionResult(observability: Observability | null | undefined, startedAtMs: number, request: BrowserActionRequest, receipt: BrowserActionReceipt): void;
+export declare function observeComputerActionResult(observability: Observability | null | undefined, startedAtMs: number, request: ComputerActionRequest, receipt: ComputerActionReceipt): void;
+export declare function observeLifecycleResult(observability: Observability | null | undefined, startedAtMs: number, response: InteractionLifecycleMutation): void;
+export declare function observeBrowserRevisionPublication(observability: Observability | null | undefined, startedAtMs: number, response: PublishBrowserRevisionResponse): void;
+export declare function observeAuthMutation(observability: Observability | null | undefined, startedAtMs: number, response: AuthMutation): void;
+export declare function observeInterventionMutation(observability: Observability | null | undefined, response: InteractionInterventionMutationResponse): void;
+export {};

package/dist/mcp/server.d.ts

@@ -1,10 +1,11 @@
-import { type AccessGrant, type SessionAuthorizationActor } from "@opengeni/contracts";
+import { type AccessGrant, type SessionAuthorizationActor, type WorkspaceMemoryPromptMode } from "@opengeni/contracts";
 import { listSessionDiscoverySummaries, type SessionDiscoveryCursor, type SessionDiscoveryOrderBy } from "@opengeni/db";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { ApiRouteDeps } from "@opengeni/core";
 export type McpServerOptions = {
     requestOrigin?: string | null;
     workspaceMemoryEnabled?: boolean | undefined;
+    workspaceMemoryPromptMode?: WorkspaceMemoryPromptMode | undefined;
 };
 export declare function buildOpenGeniMcpServer(deps: ApiRouteDeps, grant: AccessGrant, options?: McpServerOptions): McpServer;
 /** Only a prompt explicitly supplied through the human/API channel may redirect a user-paused goal. */
@@ -81,7 +82,7 @@ export declare function capSessionDiscoveryPage(page: Awaited<ReturnType<typeof
             truncated: boolean;
         };
         latestMessage?: {
-            type: "agent.message.completed" | "agent.message.delta" | "agent.model.request" | "agent.model.usage" | "agent.reasoning.delta" | "agent.toolCall.created" | "agent.toolCall.output" | "agent.updated" | "artifact.created" | "codex.account.switched" | "codex.capacity.resumed" | "codex.capacity.superseded" | "codex.capacity.waiting" | "codex.credential.selected" | "codex.fleet.decision" | "credential.auth_needed" | "fs.changed" | "git.changed" | "goal.cleared" | "goal.completed" | "goal.continuation" | "goal.paused" | "goal.resumed" | "goal.set" | "goal.updated" | "machine.link.lost" | "machine.link.restored" | "machine.op.failed" | "machine.op.recovered" | "machine.runner.restarted" | "memory.corrected" | "memory.saved" | "recording.available" | "recording.failed" | "recording.started" | "rig.setup.completed" | "rig.setup.failed" | "rig.setup.skipped" | "rig.setup.started" | "sandbox.box.created" | "sandbox.box.lost" | "sandbox.box.snapshot" | "sandbox.box.terminated" | "sandbox.command.output.delta" | "sandbox.env.drift" | "sandbox.operation.completed" | "sandbox.operation.failed" | "sandbox.operation.started" | "session.context.cleared" | "session.context.compacted" | "session.context.compaction.requested" | "session.context.compaction.skipped" | "session.context.compaction.started" | "session.control.paused" | "session.control.resumed" | "session.control.steer_requested" | "session.created" | "session.event.envelope_omitted" | "session.humanInput.requested" | "session.mcp.approval_policy.updated" | "session.queue.changed" | "session.queue.history" | "session.queue.prompt.cancelled" | "session.realtime.ended" | "session.realtime.started" | "session.requiresAction" | "session.route.reconciled" | "session.status.changed" | "session.title_set" | "session.tool_policy.updated" | "stream.closed" | "stream.opened" | "stream.revoked" | "stream.url.rotated" | "system.update.cancelled" | "system.update.delivered" | "system.update.pending" | "system.update.settled" | "system.update.superseded" | "terminal.pty.exited" | "terminal.pty.output.delta" | "terminal.pty.started" | "tool.auth_needed" | "turn.cancelled" | "turn.capacity_waiting" | "turn.completed" | "turn.event.rejected_late" | "turn.failed" | "turn.queued" | "turn.recovery.requested" | "turn.started" | "turn.superseded" | "user.approvalDecision" | "user.humanInputResponse" | "user.message" | "user.pause" | "workspace.inference.paused" | "workspace.inference.resumed" | "workspace.revision.captured" | "workspace.revision.degraded";
+            type: "agent.message.completed" | "agent.message.delta" | "agent.model.request" | "agent.model.usage" | "agent.reasoning.delta" | "agent.toolCall.created" | "agent.toolCall.output" | "agent.updated" | "artifact.created" | "codex.account.switched" | "codex.capacity.resumed" | "codex.capacity.superseded" | "codex.capacity.waiting" | "codex.credential.selected" | "codex.fleet.decision" | "credential.auth_needed" | "fs.changed" | "git.changed" | "goal.cleared" | "goal.completed" | "goal.continuation" | "goal.paused" | "goal.progress" | "goal.resumed" | "goal.rewrite.proposed" | "goal.rewrite.rejected" | "goal.set" | "goal.updated" | "machine.link.lost" | "machine.link.restored" | "machine.op.failed" | "machine.op.recovered" | "machine.runner.restarted" | "memory.corrected" | "memory.saved" | "recording.available" | "recording.failed" | "recording.started" | "rig.setup.completed" | "rig.setup.failed" | "rig.setup.skipped" | "rig.setup.started" | "sandbox.box.created" | "sandbox.box.lost" | "sandbox.box.snapshot" | "sandbox.box.terminated" | "sandbox.command.output.delta" | "sandbox.env.drift" | "sandbox.operation.completed" | "sandbox.operation.failed" | "sandbox.operation.started" | "session.context.cleared" | "session.context.compacted" | "session.context.compaction.requested" | "session.context.compaction.skipped" | "session.context.compaction.started" | "session.control.paused" | "session.control.resumed" | "session.control.steer_requested" | "session.created" | "session.event.envelope_omitted" | "session.humanInput.requested" | "session.mcp.approval_policy.updated" | "session.queue.changed" | "session.queue.history" | "session.queue.prompt.cancelled" | "session.realtime.ended" | "session.realtime.started" | "session.requiresAction" | "session.route.reconciled" | "session.status.changed" | "session.title_set" | "session.tool_policy.updated" | "session.visibility.changed" | "stream.closed" | "stream.opened" | "stream.revoked" | "stream.url.rotated" | "system.update.cancelled" | "system.update.delivered" | "system.update.pending" | "system.update.settled" | "system.update.superseded" | "terminal.pty.exited" | "terminal.pty.output.delta" | "terminal.pty.started" | "tool.auth_needed" | "turn.cancelled" | "turn.capacity_waiting" | "turn.completed" | "turn.event.rejected_late" | "turn.failed" | "turn.queued" | "turn.recovery.requested" | "turn.started" | "turn.superseded" | "user.approvalDecision" | "user.humanInputResponse" | "user.message" | "user.pause" | "workspace.inference.paused" | "workspace.inference.resumed" | "workspace.revision.captured" | "workspace.revision.degraded";
             preview: string | null;
             previewTruncated: boolean;
         } | null;

package/dist/model-catalog.d.ts

@@ -32,6 +32,7 @@ export declare function buildWorkspaceModelCatalog(input: {
     settings: Settings;
     policy: WorkspaceModelPolicyContract | null;
     codexSubscriptionActive: boolean;
+    xaiSubscriptionActive?: boolean;
     workspaceGatewayConnectionActive?: boolean;
     credentialReadinessObservations?: Readonly<Record<string, ModelCredentialReadinessObservation>> | undefined;
     observations?: Readonly<Record<string, ModelAvailabilityObservation>> | undefined;

package/dist/routes/canonical-human-identities.d.ts

@@ -0,0 +1,3 @@
+import type { ApiRouteDeps } from "@opengeni/core";
+import type { Hono } from "hono";
+export declare function registerCanonicalHumanIdentityRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/routes/channels.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from "hono";
+import type { ApiRouteDeps } from "@opengeni/core";
+export declare function registerChannelRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/routes/integration-facets.d.ts

@@ -0,0 +1,3 @@
+import { type ApiRouteDeps } from "@opengeni/core";
+import type { Hono } from "hono";
+export declare function registerIntegrationFacetRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/routes/interaction-resources.d.ts

@@ -0,0 +1,5 @@
+import { type ApiRouteDeps } from "@opengeni/core";
+import type { Hono } from "hono";
+import { HTTPException } from "hono/http-exception";
+export declare function registerInteractionResourceRoutes(app: Hono, deps: ApiRouteDeps): void;
+export declare function interactionResourceRouteError(error: unknown): HTTPException;

package/dist/routes/organization-memberships.d.ts

@@ -0,0 +1,3 @@
+import { type ApiRouteDeps } from "@opengeni/core";
+import type { Hono } from "hono";
+export declare function registerOrganizationMembershipRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/routes/sessions.d.ts

@@ -1,10 +1,11 @@
-import { ClientSessionEvent, SteerSessionMessageRequest, type SessionAuthorizationOperation } from "@opengeni/contracts";
+import { ClientSessionEvent, SteerSessionMessageRequest, type SessionGoalRevision, type SessionAuthorizationOperation } from "@opengeni/contracts";
 import { type SessionDiscoveryCursor } from "@opengeni/db";
 import type { Context, Hono } from "hono";
 import type { ApiRouteDeps } from "@opengeni/core";
 import { type ViewerServices } from "../sandbox/viewer.js";
 type SessionRouteDeps = ApiRouteDeps & Pick<ViewerServices, "establishSandboxSession">;
 export declare function registerSessionRoutes(app: Hono, deps: SessionRouteDeps): void;
+export declare function goalProposalMatchesExpectedRevision(revision: Pick<SessionGoalRevision, "baseObjectiveRevision">, expectedObjectiveRevision: number): boolean;
 /**
  * Map every mounted session-addressed HTTP path to the host-neutral operation
  * the embedding port authorizes. Returning null is deliberately fail-closed in

package/dist/routes/slack-task-policy.d.ts

@@ -0,0 +1,3 @@
+import { type ApiRouteDeps } from "@opengeni/core";
+import type { Hono } from "hono";
+export declare function registerSlackTaskPolicyRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/routes/supergrok.d.ts

@@ -0,0 +1,3 @@
+import { type ApiRouteDeps } from "@opengeni/core";
+import type { Hono } from "hono";
+export declare function registerSuperGrokRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/sandbox/channel-a.d.ts

@@ -10,7 +10,7 @@ export type ChannelAServices = {
     bus: EventBus;
     observability?: Observability | undefined;
 };
-export type ChannelAOperation = "fs.list" | "fs.list-batch" | "fs.read" | "fs.write" | "fs.delete" | "fs.move" | "fs.mkdir" | "git.status" | "git.diff" | "git.read-batch" | "git.log" | "git.show" | "terminal.exec" | "terminal.pty.open" | "terminal.pty.write" | "terminal.pty.resize" | "terminal.pty.close" | "browser.create" | "browser.resume" | "browser.suspend" | "browser.end" | "browser.read" | "browser.control" | "browser.attach" | "computer.create" | "computer.end" | "computer.read" | "computer.control" | "computer.attach";
+export type ChannelAOperation = "fs.list" | "fs.list-batch" | "fs.read" | "fs.write" | "fs.delete" | "fs.move" | "fs.mkdir" | "git.status" | "git.diff" | "git.read-batch" | "git.log" | "git.show" | "terminal.exec" | "terminal.pty.open" | "terminal.pty.write" | "terminal.pty.resize" | "terminal.pty.close" | "browser.create" | "browser.resume" | "browser.suspend" | "browser.end" | "browser.read" | "browser.action" | "browser.control" | "browser.download.save" | "browser.attach" | "computer.create" | "computer.end" | "computer.read" | "computer.action" | "computer.control" | "computer.attach";
 export type ChannelAContext = {
     accountId: string;
     workspaceId: string;
@@ -20,6 +20,11 @@ export type ChannelAContext = {
     waitSignal?: AbortSignal | undefined;
     /** Bounded route identity for metrics and safe operator diagnostics. */
     operation?: ChannelAOperation | undefined;
+    /** The callback is an interaction-controller read or an exactly-once action.
+     * A controller transport failure may therefore rebuild the exact fenced
+     * provider handle and replay the request. Tab/lifecycle mutations that lack
+     * a controller operation id must never opt into this recovery. */
+    retryControllerTransport?: boolean | undefined;
 };
 export type ChannelAOperationFailureReason = "request_cancelled" | "provider_read_busy" | "provider_unavailable" | "lifecycle_conflict" | "request_rejected" | "unexpected";
 export type ChannelAOperationFailureDiagnostic = {
@@ -60,6 +65,8 @@ type ChannelAReadRecoveryOptions = {
     maxFreshHandleRetries?: 1 | 2;
     /** Never start another provider attempt after the originating request ends. */
     waitSignal?: AbortSignal | undefined;
+    /** Additional callback-specific failure that is safe to replay. */
+    retryableError?: ((error: unknown) => boolean) | undefined;
 };
 /** Retry a side-effect-free Channel-A read only after the caller has discarded
  * and freshly re-established its provider handle. The ordinary provider-neutral

package/dist/sandbox/machines.d.ts

@@ -18,8 +18,8 @@ export type MachinesServices = {
 export declare function metricRowToSample(row: MachineMetricsRow): MetricSample;
 /**
  * Build the Machines dashboard response for a workspace. When `sessionId` is
- * supplied (an in-session view) the session's synthetic Modal group box is
- * prepended (`isSessionGroup:true`) and the active-sandbox pointer is echoed;
+ * supplied (an in-session view) the session's synthetic home group box is
+ * prepended when one exists (`isSessionGroup:true`) and the active-sandbox pointer is echoed;
  * without it (the pure workspace dashboard) `activeSandboxId` is null and only
  * the enrolled machines are listed.
  */

package/dist/sandbox/viewer.d.ts

@@ -191,7 +191,9 @@ export type TerminalStreamMint = {
     token: string;
     expiresAt: string;
     leaseEpoch: number;
+    transport: "pty-ws" | "relay-pty";
 };
+type SelfhostedStreamMint = Omit<TerminalStreamMint, "transport">;
 export type MintTerminalStreamInput = {
     accountId: string;
     workspaceId: string;
@@ -249,5 +251,5 @@ export type MintSelfhostedStreamInput = {
  * query param (the relay validates the in-band token); the relay's stale-viewer
  * fence uses the token's leaseEpoch claim (== activeEpoch here).
  */
-export declare function mintSelfhostedStream(services: ViewerServices, input: MintSelfhostedStreamInput): Promise<TerminalStreamMint | null>;
+export declare function mintSelfhostedStream(services: ViewerServices, input: MintSelfhostedStreamInput): Promise<SelfhostedStreamMint | null>;
 export {};

package/dist/slack-reaction-files.d.ts

@@ -0,0 +1,27 @@
+import type { FileResourceRef } from "@opengeni/contracts";
+import { completeFileUpload, prepareGeneratedWorkspaceFile, type Database } from "@opengeni/db";
+import type { ObjectStorage } from "@opengeni/storage";
+import type { DownloadedSlackReactionImage } from "./integrations/slack-bot.js";
+export type SlackReactionImageImportSource = Readonly<{
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    slackTeamId: string;
+    slackChannelId: string;
+    slackMessageTs: string;
+}>;
+export type ImportedSlackReactionImage = Readonly<{
+    resource: FileResourceRef;
+    filename: string;
+    contentType: "image/png" | "image/jpeg" | "image/webp";
+    sizeBytes: number;
+}>;
+export declare function importSlackReactionImage(dependencies: Readonly<{
+    db: Database;
+    objectStorage: ObjectStorage;
+    now?: () => Date;
+    prepareFile?: typeof prepareGeneratedWorkspaceFile;
+    completeFile?: typeof completeFileUpload;
+}>, source: SlackReactionImageImportSource, image: DownloadedSlackReactionImage, ordinal: number): Promise<ImportedSlackReactionImage>;
+export declare function slackReactionImageIdentity(source: SlackReactionImageImportSource, slackFileId: string): string;
+export declare function safeSlackImageFilename(value: string, contentType: "image/png" | "image/jpeg" | "image/webp"): string;

package/dist/transcription/providers/xai-subscription.d.ts

@@ -0,0 +1,8 @@
+import { type Settings } from "@opengeni/config";
+import { type TranscriptionProvider } from "@opengeni/core";
+import { type Database } from "@opengeni/db";
+export declare function createXaiSubscriptionTranscriptionProvider(input: {
+    settings: Settings;
+    db: Database;
+    fetch?: typeof fetch;
+}): TranscriptionProvider;