@opengeni/api-router 1.2.1-canary.37222965366001 → 1.3.0

package/dist/{chunk-Q77DZ2M4.js → chunk-IZEGLLKZ.js}

@@ -511,13 +511,19 @@ async function requireRedemptionHuman(c, deps, workspaceId) {
       message: "reset redemption requires managed product mode"
     });
   }
-  if (c.req.header("authorization")) {
-    throw new HTTPException4(403, {
-      message: "authorization bearer is not allowed for redemption"
-    });
+  const agent = isAgentActingAsPerson(c) ? agentActingAsPersonBeforeGrantCheck(c) : null;
+  if (!agent) {
+    if (c.req.header("authorization")) {
+      throw new HTTPException4(403, {
+        message: "authorization bearer is not allowed for redemption"
+      });
+    }
+    requireSameOriginBrowserMutation(c, deps);
   }
-  requireSameOriginBrowserMutation(c, deps);
-  const human = await managedHumanOrAgent(c, deps);
+  const human = agent ? {
+    subjectId: agent.subjectId,
+    browserSessionHash: await hashCodexBrowserSession(`agent:${agent.subjectId}`)
+  } : await managedCookieHuman(c, deps);
   if (!human) {
     throw new HTTPException4(401, {
       message: "managed browser session required"
@@ -5239,9 +5245,11 @@ import {
 } from "@opengeni/contracts";
 import { hasPermission as hasPermission3, isDeveloperSetupGrant, requireSessionAuthorization as requireSessionAuthorization2 } from "@opengeni/core";
 import {
+  CodemodeToolApprovalRequiredError,
   getActiveSessionTurnForExecution,
   getAttemptToolCatalog,
   getCodemodeOperation,
+  readTurnCodemodeOperation,
   submitCodemodeOperation
 } from "@opengeni/db";
 import { getSession } from "@opengeni/db";
@@ -5672,11 +5680,12 @@ async function requireActiveCodemodeCatalog(deps, grant) {
   return { authority, catalog, turn: active };
 }
 async function submitAndDispatchCodemodeCall(deps, grant, rawRequest) {
-  const request = CodemodeCallRequest.parse(rawRequest);
+  const { durableApproval, ...request } = CodemodeCallRequest.parse(rawRequest);
   const { authority, catalog } = await requireActiveCodemodeCatalog(deps, grant);
   if (request.catalogDigest !== catalog.digest) throw new CodemodeCatalogStaleError();
   const submitted = await submitCodemodeOperation(deps.db, {
     ...authority,
+    ...durableApproval ? { durableApproval: true } : {},
     call: {
       ...request,
       caller: { kind: "codemode", subjectId: authority.subjectId }
@@ -5718,15 +5727,18 @@ async function submitAndDispatchCodemodeCall(deps, grant, rawRequest) {
 function codemodeOperationNeedsDispatch(operation) {
   return operation.state === "queued" || operation.state === "running";
 }
-async function readCodemodeOperation(deps, grant, operationId) {
-  if (!isCodemodeGrant(grant)) throw new CodemodeAuthorityError("invalid_grant");
-  const authority = codemodeAuthorityForGrant(grant);
-  return await getCodemodeOperation(deps.db, {
-    accountId: authority.accountId,
-    workspaceId: authority.workspaceId,
-    attemptId: authority.attemptId,
+async function readCodemodeOperation(deps, grant, operationId, options = {}) {
+  const { authority } = await requireActiveCodemodeCatalog(deps, grant);
+  const operation = await readTurnCodemodeOperation(deps.db, {
+    ...authority,
+    callerSubjectId: authority.subjectId,
     operationId
   });
+  if (operation?.state === "waiting_for_approval" && !options.durableApproval)
+    throw new CodemodeToolApprovalRequiredError();
+  if (!operation || options.durableApproval) return operation;
+  const { durableApproval: _capability, approvalRequestId: _requestId, ...legacy } = operation;
+  return legacy;
 }
 function terminal(operation) {
   return ["completed", "failed", "outcome_unknown", "cancelled"].includes(operation.state);
@@ -6502,6 +6514,7 @@ function registerModelConnectionAccessRoutes(app, deps) {
 import {
   codeSearchDeploymentPolicy,
   agentConfigDeploymentPolicy,
+  canonicalPublicOrigin as canonicalPublicOrigin3,
   configuredAllowedReasoningEfforts,
   resolveFirstPartyMcpToolPolicy as resolveFirstPartyMcpToolPolicy2,
   resolveVoiceInputProviderRegistry as resolveVoiceInputProviderRegistry2,
@@ -6532,7 +6545,8 @@ import {
   CodemodeOperationConflictError,
   CodemodeOperationNotExecutableError,
   CodemodePayloadTooLargeError,
-  CodemodeToolApprovalRequiredError,
+  CodemodeOperationLimitError,
+  CodemodeToolApprovalRequiredError as CodemodeToolApprovalRequiredError2,
   CodemodeToolNotInCatalogError,
   ConnectAttemptConflictError,
   ConnectAttemptNotFoundError,
@@ -6588,7 +6602,7 @@ import { bodyLimit as bodyLimit3 } from "hono/body-limit";
 import { compress } from "hono/compress";
 import { cors } from "hono/cors";
 import { getCookie as getCookie3 } from "hono/cookie";
-import { HTTPException as HTTPException117 } from "hono/http-exception";
+import { HTTPException as HTTPException118 } from "hono/http-exception";
 
 // src/http/api-error.ts
 import {
@@ -6597,7 +6611,7 @@ import {
   ModelUnavailableError,
   ScheduledTaskTargetAccessChange
 } from "@opengeni/contracts";
-import { WorkspaceControlBusyError } from "@opengeni/db";
+import { isDatabaseConnectionLoss, WorkspaceControlBusyError } from "@opengeni/db";
 import { HTTPException as HTTPException20 } from "hono/http-exception";
 var ApiHttpError = class extends HTTPException20 {
   code;
@@ -6650,6 +6664,20 @@ function workspaceControlBusyHttpError(error) {
     details: { code: busy.code, lockTimeoutMs: busy.lockTimeoutMs }
   });
 }
+var DATABASE_UNAVAILABLE_ERROR_DETAIL_CODE = "DATABASE_UNAVAILABLE";
+function databaseUnavailableHttpError(error, method) {
+  if (error instanceof ApiHttpError) return null;
+  if (error instanceof HTTPException20 && error.status < 500) return null;
+  if (!isDatabaseConnectionLoss(error)) return null;
+  const safeMethod = method === "GET" || method === "HEAD" || method === "OPTIONS";
+  return new ApiHttpError(503, {
+    code: "upstream_unavailable",
+    message: "Opengeni is temporarily unavailable. Retry shortly.",
+    retryable: true,
+    outcomeUnknown: !safeMethod,
+    details: { code: DATABASE_UNAVAILABLE_ERROR_DETAIL_CODE }
+  });
+}
 function agentConfigHttpError(error) {
   const cause = error instanceof AgentConfigError ? error : error instanceof HTTPException20 && error.cause instanceof AgentConfigError ? error.cause : null;
   if (!cause) return null;
@@ -7037,7 +7065,7 @@ import {
   CodexCompactionV2ProviderLockedError,
   ManagedAuthActorLeaseOutcomeUnknownError,
   hasPermission as hasPermission34,
-  requireAccessGrant as requireAccessGrant53,
+  requireAccessGrant as requireAccessGrant54,
   requireAccessGrantAuthorization as requireAccessGrantAuthorization40,
   accountScopedApiKeyWorkspaceAuthority as accountScopedApiKeyWorkspaceAuthority10,
   requireAccessContext as requireAccessContext15,
@@ -7090,7 +7118,8 @@ function createManagedAuthNewSignupsGate(input) {
 import { canonicalPublicOrigin, managedUserEmailAllowed } from "@opengeni/config";
 import { MANAGED_AUTH_NEW_SIGNUPS_PAUSED_CODE } from "@opengeni/contracts";
 import {
-  configureManagedUserAdmission
+  configureManagedUserAdmission,
+  recordManagedAuthLoggedFailure
 } from "@opengeni/core";
 import { ensureManagedAccessForUser } from "@opengeni/db";
 import {
@@ -8676,6 +8705,13 @@ async function hashManagedAuthPassword(password) {
 async function verifyManagedAuthPassword(password, hash) {
   return await verifyPassword({ password, hash });
 }
+function logBetterAuthMessage(level, message, ...args) {
+  if (level === "error") recordManagedAuthLoggedFailure(args);
+  const line = `${(/* @__PURE__ */ new Date()).toISOString()} ${level.toUpperCase()} [Better Auth]: ${message}`;
+  if (level === "error") console.error(line, ...args);
+  else if (level === "warn") console.warn(line, ...args);
+  else console.log(line, ...args);
+}
 var MANAGED_AUTH_DATABASE_POOL_OPTIONS = {
   max: 10,
   connectionTimeoutMillis: 1e4,
@@ -8731,6 +8767,7 @@ function createManagedAuth(settings, db, managedEmailTransport, options = {}) {
     secret: settings.betterAuthSecret,
     database: pool,
     trustedOrigins: betterAuthTrustedOrigins(settings),
+    logger: { log: logBetterAuthMessage },
     hooks: {
       before: createManagedAuthEmailThrottleHook(
         db,
@@ -9216,7 +9253,10 @@ import {
 } from "@opengeni/core/managed-auth-session-sets";
 
 // src/auth/managed-auth-session-adapter.ts
-import { assertManagedUserAdmission } from "@opengeni/core";
+import {
+  assertManagedUserAdmission,
+  withManagedAuthSessionLookup
+} from "@opengeni/core";
 import { createHmac as createHmac5, timingSafeEqual as timingSafeEqual2 } from "crypto";
 async function managedAuthSelectedProofHeaders(auth, token) {
   const context = await auth.$context;
@@ -9275,7 +9315,9 @@ function createBetterAuthSessionAdapter(auth, db) {
       const headers = new Headers({
         cookie: `${cookie.name}=${signedCookieValue(input.token, context.secret)}`
       });
-      const resolved = await auth.api.getSession({ headers, returnHeaders: true });
+      const resolved = await withManagedAuthSessionLookup(
+        () => auth.api.getSession({ headers, returnHeaders: true })
+      );
       if (!resolved.response) return null;
       assertManagedUserAdmission(auth, resolved.response.user);
       return resolved.response;
@@ -13959,6 +14001,7 @@ async function withOptionalSiteCommandOrigin(db, workspaceId, siteId, versionId,
 
 // src/workspace-tool-gateway.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { recordToolApproval } from "@opengeni/observability";
 import {
   CallToolRequestSchema,
   ListToolsRequestSchema
@@ -13971,7 +14014,8 @@ import {
   ToolGatewayCallResponse,
   ToolGatewayApprovalRequest,
   ToolGatewayApprovalResponse,
-  ToolGatewayDeclarationsResponse
+  ToolGatewayDeclarationsResponse,
+  toolPolicyActionName
 } from "@opengeni/contracts";
 import {
   availableMcpAccountBindings,
@@ -14000,13 +14044,18 @@ import {
   issueToolGatewayApproval,
   ToolGatewayApprovalOperationStartedError,
   ToolGatewayApprovalRateLimitError,
-  WorkspaceArtifactNotFoundError as WorkspaceArtifactNotFoundError2
+  WorkspaceArtifactNotFoundError as WorkspaceArtifactNotFoundError2,
+  listConnectorToolPermissionPolicies,
+  projectConnectorToolPermission,
+  resolveConnectorActionPolicy,
+  connectorActionPolicyDecision
 } from "@opengeni/db";
 import {
   prepareWorkspaceToolGatewayTools
 } from "@opengeni/runtime/workspace-tool-gateway";
 import {
   ToolGatewayApprovalRequiredError,
+  ToolGatewayBlockedError,
   ToolGatewayCatalogStaleError,
   ToolGatewayInputValidationError,
   ToolGatewayToolNotFoundError,
@@ -14403,6 +14452,32 @@ async function prepareWorkspaceToolGatewayForGrantInternal(routeDeps, grant, all
     };
   })() : void 0;
   const localMcpServers = [...firstPartyServers, ...apiIntegrationServers];
+  const policyTargets = new Map(
+    gatewaySettings.mcpServers.map((config) => {
+      const binding = accountBindings.find((candidate) => candidate.serverId === config.id);
+      return [
+        config.id,
+        {
+          connectionId: binding?.connectionId ?? config.connectionRef?.connectionId ?? `session-mcp:${config.id}:${createHash3("sha256").update(config.url, "utf8").digest("hex")}`,
+          serverId: binding?.canonicalServerId ?? config.id
+        }
+      ];
+    })
+  );
+  const policiesByServer = new Map(
+    await Promise.all(
+      [...policyTargets].map(
+        async ([id, target2]) => [
+          id,
+          await listConnectorToolPermissionPolicies(routeDeps.db, {
+            ...grant,
+            connectionId: target2.connectionId
+          })
+        ]
+      )
+    )
+  );
+  const recommendations = /* @__PURE__ */ new Map();
   const prepared = await prepareWorkspaceToolGatewayTools(
     gatewaySettings,
     allGatewayToolRefs(gatewaySettings),
@@ -14417,7 +14492,43 @@ async function prepareWorkspaceToolGatewayForGrantInternal(routeDeps, grant, all
       localMcpServers,
       ...codexAppsAuth ? { codexAppsAuth } : {},
       workspaceToolGateway: {
-        requireApproval: (entry2, _caller, context) => entry2.approval === "human" && context.transportMeta?.approvalConfirmed !== true,
+        mapDefinition: (definition) => {
+          const recommendation = definition.approval === "human" ? "ask" : "allow";
+          recommendations.set(workspaceToolGatewayIdentityKey(definition.identity), recommendation);
+          const target2 = policyTargets.get(definition.identity.serverId);
+          if (!target2) return definition;
+          const permission = projectConnectorToolPermission(
+            policiesByServer.get(definition.identity.serverId) ?? [],
+            {
+              ...target2,
+              toolName: definition.identity.toolName,
+              defaultDecision: recommendation
+            }
+          );
+          return { ...definition, approval: permission.approvalRequired ? "human" : "policy" };
+        },
+        resolveApproval: async ({ call, entry: entry2 }) => {
+          const defaultDecision = recommendations.get(workspaceToolGatewayIdentityKey(entry2.identity)) ?? (entry2.approval === "human" ? "ask" : "allow");
+          const target2 = policyTargets.get(entry2.identity.serverId);
+          if (!target2) return defaultDecision;
+          const policies = await listConnectorToolPermissionPolicies(routeDeps.db, {
+            ...grant,
+            connectionId: target2.connectionId
+          });
+          const resolved = resolveConnectorActionPolicy(policies, {
+            ...target2,
+            toolName: entry2.identity.toolName,
+            defaultDecision,
+            actionName: toolPolicyActionName(
+              entry2.identity.toolName,
+              entry2.inputSchema,
+              call.arguments
+            )
+          });
+          const decision = !resolved.managed ? defaultDecision : connectorActionPolicyDecision(resolved);
+          recordToolApproval(decision, resolved.managed ? resolved.source : "default");
+          return decision;
+        },
         filterDefinition: workspaceToolGatewayDefinitionFilter(gatewaySettings, allowedIdentities)
       }
     }
@@ -14559,7 +14670,7 @@ async function callWorkspaceToolGateway(prepared, grant, input, db, consumeAppro
     );
     await prepared.reauthorize?.();
     let approvalConfirmed = false;
-    const approvalRequired = preparedCall.entry.approval === "human";
+    const approvalRequired = preparedCall.approvalDecision === "ask" || preparedCall.approvalDecision === void 0 && preparedCall.entry.approval === "human";
     if (approvalRequired && request.approvalToken && db) {
       approvalConfirmed = await consumeApproval(db, {
         tokenHash: hashOpaqueValue(request.approvalToken),
@@ -14614,7 +14725,7 @@ async function approveWorkspaceToolGatewayCall(prepared, grant, db, input, issue
   } catch (error) {
     throwWorkspaceToolGatewayHttpError(error);
   }
-  if (preparedCall.entry.approval !== "human") {
+  if (preparedCall.approvalDecision !== "ask" && !(preparedCall.approvalDecision === void 0 && preparedCall.entry.approval === "human")) {
     throw new HTTPException24(422, { message: "tool_does_not_require_human_approval" });
   }
   const observation = startWorkspaceToolGatewayObservation(observability, {
@@ -14698,6 +14809,9 @@ function throwWorkspaceToolGatewayHttpError(error) {
   if (error instanceof ToolGatewayApprovalRequiredError) {
     throw new HTTPException24(409, { message: error.code, cause: error });
   }
+  if (error instanceof ToolGatewayBlockedError) {
+    throw new HTTPException24(403, { message: error.code, cause: error });
+  }
   if (error instanceof IntegrationInvocationError && error.outcome === "unknown") {
     throw new ApiHttpError(502, {
       code: "upstream_unavailable",
@@ -21883,7 +21997,16 @@ function buildScheduledTaskDetailMcp(task, budget, reducedForBytes) {
           maxAutoContinuations: task.agentConfig.goal?.maxAutoContinuations ?? null
         } : null
       },
-      taskMetadataKeys
+      taskMetadataKeys,
+      slackPosting: {
+        identity: task.agentConfig.slackBotConnectionId ? "opengeni_bot" : null,
+        connectionId: task.agentConfig.slackBotConnectionId ?? null,
+        channelId: task.agentConfig.slackBotChannelId ?? null,
+        configured: Boolean(
+          task.agentConfig.slackBotConnectionId && task.agentConfig.slackBotChannelId
+        ),
+        setup: "A person can choose Post to Slack in the schedule editor. Personal Slack tools send as their connected account; they do not select the Opengeni bot."
+      }
     },
     detailProjection: {
       bounded: true,
@@ -22906,6 +23029,7 @@ import {
   hasOpenGeniSlackReactionScope
 } from "@opengeni/contracts";
 import {
+  grantHasAgentAttemptAuthority as grantHasAgentAttemptAuthority2,
   isOpenGeniSlackBotConnection,
   isTrustedScheduledSlackBotSession,
   openGeniSlackBotMetadata,
@@ -22924,10 +23048,11 @@ import {
   getScheduledTask,
   getSession as getSession2,
   getSlackBotPostOperation,
-  listConnectionsMetadata as listConnectionsMetadata2,
-  prepareScheduledSlackBotMessage,
-  readScheduledSlackBotMessage,
-  ScheduledSlackBotMessageRefusedError,
+  availableSlackBotConnectionMetadata,
+  sharedOrganizationSlackBots,
+  prepareBotMessage,
+  readPreparedBotMessage,
+  freezeAgentLearningPolicy as freezeAgentLearningPolicy2,
   markSlackBotDeleteOperationProviderStarted,
   markSlackBotPostOperationProviderStarted,
   recordAuditEvent as recordAuditEvent3,
@@ -23154,11 +23279,13 @@ async function resolveSlackBotConnectionForTool(input) {
   }
   let connectionId = boundConnectionId ?? input.requestedConnectionId;
   if (!connectionId) {
-    const activeConnections = (await listConnectionsMetadata2(input.db, input.grant.workspaceId, null)).filter(
+    const activeConnections = (await availableSlackBotConnectionMetadata(input.db, input.grant)).filter(
       (connection2) => connection2.status === "active" && isOpenGeniSlackBotConnection(connection2)
     );
     if (activeConnections.length === 0) {
-      throw new Error("no active Opengeni Slack bot connection is installed in this workspace");
+      throw new Error(
+        "No active Opengeni bot is available. Connect it in Capabilities or ask an organization administrator to share the installed bot."
+      );
     }
     if (activeConnections.length > 1) {
       const principals = new Set(
@@ -23169,7 +23296,7 @@ async function resolveSlackBotConnectionForTool(input) {
       );
       if (principals.size > 1) {
         throw new Error(
-          "connectionId is required because this workspace has multiple active Opengeni Slack bot connections"
+          `Choose connectionId because multiple Opengeni bots are available: ${activeConnections.slice(0, 20).map((bot) => `${openGeniSlackBotMetadataLabel(bot)} (${bot.id})`).join(", ")}`
         );
       }
     }
@@ -23184,18 +23311,29 @@ async function resolveSlackBotConnectionForTool(input) {
   if (!metadata) {
     throw new Error("Opengeni Slack bot connection metadata is invalid");
   }
+  const sharingGeneration = connection.workspaceId === input.grant.workspaceId ? 0 : Number(connection.metadata.organizationSharingGeneration);
   return {
     connection,
     metadata,
+    sharingGeneration,
+    ...connection.workspaceId !== input.grant.workspaceId ? {
+      authorizeOrganizationAccess: async () => (await sharedOrganizationSlackBots(input.db, input.grant)).some(
+        (share) => share.connectionId === connection.id && share.homeWorkspaceId === connection.workspaceId && share.generation === sharingGeneration && share.connectionVersion === connection.version
+      )
+    } : {},
     context: {
       accountId: input.grant.accountId,
-      workspaceId: input.grant.workspaceId,
+      workspaceId: connection.workspaceId,
       subjectId: input.grant.subjectId,
       sessionId: input.sessionId,
       scheduledTaskId: typeof session?.metadata.scheduledTaskId === "string" ? session.metadata.scheduledTaskId : null
     }
   };
 }
+function openGeniSlackBotMetadataLabel(connection) {
+  const metadata = openGeniSlackBotMetadata(connection.metadata);
+  return metadata?.slackTeamName ?? "Slack workspace";
+}
 async function resolveScheduledSlackBotPostTarget(input) {
   const refuse = (reason) => {
     throw new Error(`Posting to the task's Slack channel is unavailable: ${reason}`);
@@ -23225,21 +23363,18 @@ async function resolveScheduledSlackBotPostTarget(input) {
 }
 async function prepareScheduledSlackBotPost(input) {
   const target2 = await resolveScheduledSlackBotPostTarget(input);
-  const message = await prepareScheduledSlackBotMessage(input.db, {
+  const message = await prepareBotMessage(input.db, {
     accountId: input.grant.accountId,
     workspaceId: input.grant.workspaceId,
     sessionId: input.sessionId,
     scheduledTaskId: target2.scheduledTaskId,
     connectionId: target2.connection.id,
     connectionVersion: target2.connection.version,
+    homeWorkspaceId: target2.connection.workspaceId,
+    sharingGeneration: target2.sharingGeneration ?? 0,
     channelId: target2.channelId,
     threadTimestamp: input.threadTimestamp ?? null,
     text: input.text
-  }).catch((error) => {
-    if (error instanceof ScheduledSlackBotMessageRefusedError) {
-      throw new Error(`Posting to the task's Slack channel is unavailable: ${error.message}`);
-    }
-    throw error;
   });
   return {
     messageId: message.id,
@@ -23250,9 +23385,143 @@ async function prepareScheduledSlackBotPost(input) {
     sent: false
   };
 }
+async function prepareSlackBotPost(input) {
+  if (!input.sessionId) throw new Error("Bot posting requires a chat");
+  const session = await getSession2(input.db, input.grant.workspaceId, input.sessionId);
+  if (!session) throw new Error("Bot posting chat is unavailable");
+  if (isTrustedScheduledSlackBotSession(session)) {
+    if (input.channelId || input.connectionId)
+      throw new Error(
+        "A scheduled task uses only the bot and channel chosen by a person on the task"
+      );
+    return prepareScheduledSlackBotPost(input);
+  }
+  await authorizeOrdinaryBotPosting(input);
+  if (!input.grant.permissions.includes("connections:read"))
+    throw new Error("connections:read is required to post as the bot");
+  if (!input.channelId)
+    throw new Error(
+      "Choose the Slack channel for this bot message. For a schedule, choose Post to Slack in the schedule editor."
+    );
+  const target2 = await resolveSlackBotConnectionForTool({
+    db: input.db,
+    grant: input.grant,
+    sessionId: input.sessionId,
+    ...input.connectionId ? { requestedConnectionId: input.connectionId } : {}
+  });
+  const message = await prepareBotMessage(input.db, {
+    accountId: input.grant.accountId,
+    workspaceId: input.grant.workspaceId,
+    sessionId: input.sessionId,
+    scheduledTaskId: null,
+    connectionId: target2.connection.id,
+    connectionVersion: target2.connection.version,
+    homeWorkspaceId: target2.connection.workspaceId,
+    sharingGeneration: target2.sharingGeneration ?? 0,
+    channelId: input.channelId,
+    threadTimestamp: input.threadTimestamp ?? null,
+    text: input.text
+  });
+  return {
+    messageId: message.id,
+    identity: "organization_bot",
+    channelId: message.channelId,
+    threadTimestamp: message.threadTimestamp,
+    text: message.text,
+    sent: false
+  };
+}
+async function sendSlackBotPost(input) {
+  if (!input.sessionId) throw new Error("Bot posting requires a chat");
+  const message = await readPreparedBotMessage(input.db, {
+    accountId: input.grant.accountId,
+    workspaceId: input.grant.workspaceId,
+    sessionId: input.sessionId,
+    id: input.messageId
+  });
+  if (!message) throw new Error("This prepared bot message does not exist in this chat");
+  if (message.scheduledTaskId) return sendScheduledSlackBotPost(input);
+  await authorizeOrdinaryBotPosting(input);
+  const earlier = await getSlackBotPostOperation(
+    input.db,
+    message.homeWorkspaceId,
+    message.connectionId,
+    message.id
+  );
+  if (earlier?.status === "completed") return completedPreparedBotPost(message, earlier);
+  if (!input.grant.permissions.includes("connections:read"))
+    throw new Error("connections:read is required to post as the bot");
+  const target2 = await resolveSlackBotConnectionForTool({
+    db: input.db,
+    grant: input.grant,
+    sessionId: input.sessionId,
+    requestedConnectionId: message.connectionId
+  });
+  if (message.connectionVersion !== target2.connection.version || message.homeWorkspaceId !== target2.connection.workspaceId || message.sharingGeneration !== (target2.sharingGeneration ?? 0)) {
+    throw new Error(
+      "Bot access changed after this message was prepared. It was not sent again; an earlier interrupted send may already have posted it."
+    );
+  }
+  const client = createOpenGeniSlackBotClient(input, target2);
+  return client.postMessage({
+    operationId: message.id,
+    channelId: message.channelId,
+    ...message.threadTimestamp ? { threadTimestamp: message.threadTimestamp } : {},
+    text: message.text,
+    requireActiveNonSharedChannel: true
+  });
+}
+async function authorizeOrdinaryBotPosting(input) {
+  if (!grantHasAgentAttemptAuthority2(input.grant)) return;
+  const { sessionId, turnId, attemptId, executionGeneration } = input.grant.metadata ?? {};
+  if (typeof sessionId !== "string" || sessionId !== input.sessionId || typeof turnId !== "string" || typeof attemptId !== "string" || typeof executionGeneration !== "number" || !Number.isSafeInteger(executionGeneration) || executionGeneration < 1)
+    throw new Error("Exact live agent attempt required for bot posting");
+  const policy = await freezeAgentLearningPolicy2(input.db, {
+    accountId: input.grant.accountId,
+    workspaceId: input.grant.workspaceId,
+    actor: { kind: "agent", sessionId, turnId, attemptId, executionGeneration }
+  });
+  if (typeof policy.scheduledTaskRunId === "string") {
+    throw new Error(
+      "A scheduled occurrence can post as the bot only to its person-chosen Post to Slack destination. Tasks that continue an existing chat cannot post as the bot."
+    );
+  }
+}
+function completedPreparedBotPost(message, operation) {
+  return {
+    channelId: operation.slackChannelId,
+    timestamp: operation.slackMessageTimestamp,
+    threadTimestamp: message.threadTimestamp,
+    alreadySent: true,
+    receipt: {
+      credentialRole: OPENGENI_SLACK_BOT_CREDENTIAL_ROLE,
+      credentialLabel: OPENGENI_SLACK_BOT_CREDENTIAL_LABEL,
+      connectionId: message.connectionId,
+      operation: "message.post",
+      operationId: message.id,
+      clientMessageId: message.id
+    }
+  };
+}
 async function sendScheduledSlackBotPost(input) {
+  if (!input.sessionId) throw new Error("Bot posting requires a chat");
+  const saved = await readPreparedBotMessage(input.db, {
+    accountId: input.grant.accountId,
+    workspaceId: input.grant.workspaceId,
+    sessionId: input.sessionId,
+    id: input.messageId
+  });
+  if (saved) {
+    const earlier2 = await getSlackBotPostOperation(
+      input.db,
+      saved.homeWorkspaceId,
+      saved.connectionId,
+      saved.id
+    );
+    if (earlier2?.status === "completed") return completedPreparedBotPost(saved, earlier2);
+  }
   const target2 = await resolveScheduledSlackBotPostTarget(input);
-  const message = await readScheduledSlackBotMessage(input.db, {
+  const message = await readPreparedBotMessage(input.db, {
     accountId: input.grant.accountId,
     workspaceId: input.grant.workspaceId,
     sessionId: input.sessionId,
@@ -23262,13 +23531,20 @@ async function sendScheduledSlackBotPost(input) {
     throw new Error("This prepared Slack message does not exist in this chat");
   }
   const channelChanged = message.channelId !== target2.channelId || message.scheduledTaskId !== target2.scheduledTaskId;
-  const botChanged = message.connectionId !== target2.connection.id || message.connectionVersion !== target2.connection.version;
+  const botChanged = message.connectionId !== target2.connection.id || message.connectionVersion !== target2.connection.version || message.homeWorkspaceId !== target2.connection.workspaceId || message.sharingGeneration !== (target2.sharingGeneration ?? 0);
   const client = createOpenGeniSlackBotClient(
     {
       db: input.db,
       settings: input.settings,
       ...input.slackFetch ? { slackFetch: input.slackFetch } : {},
-      ...input.authorizeProviderRequest ? { authorizeProviderRequest: input.authorizeProviderRequest } : {}
+      ...input.authorizeProviderRequest ? { authorizeProviderRequest: input.authorizeProviderRequest } : {},
+      authorizeBotMutation: async () => {
+        const current = await resolveScheduledSlackBotPostTarget(input);
+        if (current.channelId !== message.channelId || current.connection.id !== message.connectionId || current.connection.version !== message.connectionVersion || (current.sharingGeneration ?? 0) !== message.sharingGeneration)
+          throw new Error(
+            "The task's bot destination changed before sending; the message was not sent again"
+          );
+      }
     },
     target2
   );
@@ -23282,7 +23558,7 @@ async function sendScheduledSlackBotPost(input) {
   if (!channelChanged && !botChanged) return await post();
   const earlier = await getSlackBotPostOperation(
     input.db,
-    input.grant.workspaceId,
+    message.homeWorkspaceId,
     message.connectionId,
     message.id
   );
@@ -23322,7 +23598,7 @@ async function verifyScheduledTaskSlackChannel(deps, input) {
   }
 }
 var OpenGeniSlackBotClient = class {
-  constructor(db, settings, connection, metadata, context, fetchImpl = fetch, authorizeProviderRequest) {
+  constructor(db, settings, connection, metadata, context, fetchImpl = fetch, authorizeProviderRequest, authorizeBotAccess) {
     this.db = db;
     this.settings = settings;
     this.connection = connection;
@@ -23330,6 +23606,7 @@ var OpenGeniSlackBotClient = class {
     this.context = context;
     this.fetchImpl = fetchImpl;
     this.authorizeProviderRequest = authorizeProviderRequest;
+    this.authorizeBotAccess = authorizeBotAccess;
     this.resolveCredential = buildConnectionTokenResolver2(db, settings);
     this.rateLimit = buildSlackApiRateLimiter2(db, settings);
   }
@@ -24442,6 +24719,9 @@ var OpenGeniSlackBotClient = class {
     if (result.status !== "ok" || result.connectionId !== this.connection.id) {
       throw new Error("Opengeni Slack bot connection needs to be reinstalled");
     }
+    if (this.authorizeProviderRequest && await this.authorizeProviderRequest() === false) {
+      throw new Error("Opengeni Slack bot provider request is no longer authorized");
+    }
     const current = await requireOpenGeniSlackBotConnection(
       this.db,
       this.context.workspaceId,
@@ -24454,12 +24734,12 @@ var OpenGeniSlackBotClient = class {
     if (current.accountId !== this.context.accountId || current.version !== this.connection.version || result.connectionVersion !== this.connection.version || !currentMetadata || currentMetadata.slackTeamId !== this.metadata.slackTeamId || currentMetadata.botId !== this.metadata.botId || currentMetadata.botUserId !== this.metadata.botUserId) {
       throw new Error("Opengeni Slack bot connection authority changed");
     }
-    if (this.authorizeProviderRequest && await this.authorizeProviderRequest() === false) {
-      throw new Error("Opengeni Slack bot provider request is no longer authorized");
-    }
     if (credentialResolutionMode === "execution" && result.authorizeProviderRequest && !await result.authorizeProviderRequest()) {
       throw new Error("Opengeni Slack bot provider request is no longer authorized");
     }
+    if (this.authorizeBotAccess && await this.authorizeBotAccess(new URL(destinationUrl).pathname.split("/").at(-1) ?? "") === false) {
+      throw new Error("Opengeni Slack bot organization access is no longer authorized");
+    }
     return result.headers;
   }
   async fetchPrivateFile(url, operation, authorizeBeforeFetch) {
@@ -24656,7 +24936,13 @@ function createOpenGeniSlackBotClient(deps, resolved) {
     resolved.metadata,
     resolved.context,
     deps.slackFetch,
-    deps.authorizeProviderRequest
+    deps.authorizeProviderRequest,
+    async (method) => {
+      if (method === "chat.postMessage") await deps.authorizeBotMutation?.();
+      if (resolved.authorizeOrganizationAccess && await resolved.authorizeOrganizationAccess() === false)
+        return false;
+      return true;
+    }
   );
 }
 async function createOpenGeniSlackBotInteractionClient(deps, input) {
@@ -24677,13 +24963,20 @@ async function createOpenGeniSlackBotInteractionClient(deps, input) {
     metadata,
     {
       accountId: input.accountId,
-      workspaceId: input.workspaceId,
+      workspaceId: connection.workspaceId,
       subjectId: input.subjectId,
       sessionId: input.sessionId ?? null,
       scheduledTaskId: null
     },
     deps.slackFetch,
-    deps.authorizeProviderRequest
+    deps.authorizeProviderRequest,
+    async () => {
+      if (connection.workspaceId !== input.workspaceId && !(await sharedOrganizationSlackBots(deps.db, input)).some(
+        (share) => share.connectionId === connection.id && share.homeWorkspaceId === connection.workspaceId && share.generation === Number(connection.metadata.organizationSharingGeneration) && share.connectionVersion === connection.version
+      ))
+        return false;
+      return true;
+    }
   );
 }
 async function slackApiFetch(fetchImpl, method, token, params) {
@@ -25774,7 +26067,7 @@ import {
   getConnectAttempt as getConnectAttempt4,
   finishConnectOperation as finishConnectOperation3,
   getConnectionMetadata as getConnectionMetadata2,
-  listConnectionsMetadata as listConnectionsMetadata3,
+  listConnectionsMetadata as listConnectionsMetadata2,
   loadConnectionCredentialForBroker,
   recordAuditEvent as recordAuditEvent5,
   setConnectionStatus as setConnectionStatus2,
@@ -25972,7 +26265,7 @@ async function resolveFikenConnectionForTool(input) {
     input.requestedConnectionId,
     null
   ) : preferredFikenConnection(
-    (await listConnectionsMetadata3(input.db, input.grant.workspaceId, null)).filter(
+    (await listConnectionsMetadata2(input.db, input.grant.workspaceId, null)).filter(
       isFikenConnection
     )
   );
@@ -32605,7 +32898,22 @@ function registerSlackBotTools(server, deps, grant, sessionId, json2) {
       sessionId,
       ...connectionId ? { requestedConnectionId: connectionId } : {}
     });
-    return createOpenGeniSlackBotClient(deps, resolved);
+    return createOpenGeniSlackBotClient(
+      {
+        ...deps,
+        authorizeProviderRequest: async () => {
+          if (sessionId !== null)
+            await authorizeFirstPartySession(
+              deps,
+              grant,
+              sessionId,
+              "session.first_party_mcp.call"
+            );
+          return true;
+        }
+      },
+      resolved
+    );
   };
   server.registerTool(
     "slack_bot_list_channels",
@@ -32775,29 +33083,33 @@ function registerSlackBotTools(server, deps, grant, sessionId, json2) {
       );
     }
   );
-  const authorizeScheduledPost = async () => {
+  const authorizeBotPost = async () => {
     if (sessionId === null) {
-      throw new Error("Posting to the task's Slack channel requires a scheduled task run");
+      throw new Error("Bot posting requires a chat");
     }
     await authorizeFirstPartySession(deps, grant, sessionId, "session.first_party_mcp.call");
   };
   server.registerTool(
     "slack_bot_prepare_message",
     {
-      description: "Prepare a message for this scheduled task's Slack channel, posted as the Opengeni workspace bot. The channel was chosen by a person on the task; you cannot pick another one. This saves the exact text without sending it. Then call slack_bot_send_prepared_message with the returned messageId. Pass threadTimestamp (a timestamp returned by an earlier send) to reply in that thread of the same channel.",
+      description: "Prepare a message as the Opengeni bot, never as a personal Slack account. In an ordinary chat supply channelId and, if multiple bots are available, connectionId. Scheduled runs omit both and use only the channel chosen by a person in Post to Slack. Nothing is sent until slack_bot_send_prepared_message is called with the returned messageId. Reuse that messageId for retries. Bot membership and organization sharing are checked when sending.",
       inputSchema: {
+        connectionId: z43.string().uuid().optional(),
+        channelId: z43.string().regex(/^[CG][A-Z0-9]{2,63}$/).optional(),
         text: z43.string().min(1).max(4e4),
         threadTimestamp: z43.string().regex(/^\d{1,20}\.\d{1,12}$/).optional()
       }
     },
-    async ({ text, threadTimestamp }) => {
-      await authorizeScheduledPost();
+    async ({ text, threadTimestamp, channelId, connectionId }) => {
+      await authorizeBotPost();
       return json2(
-        await prepareScheduledSlackBotPost({
+        await prepareSlackBotPost({
           db: deps.db,
           grant,
           sessionId,
           text,
+          ...channelId ? { channelId } : {},
+          ...connectionId ? { connectionId } : {},
           ...threadTimestamp ? { threadTimestamp } : {}
         })
       );
@@ -32806,20 +33118,20 @@ function registerSlackBotTools(server, deps, grant, sessionId, json2) {
   server.registerTool(
     "slack_bot_send_prepared_message",
     {
-      description: "Send a message prepared by slack_bot_prepare_message in this chat, exactly as saved, to the task's Slack channel as the Opengeni workspace bot. If a send is interrupted or its outcome is unclear, retry with the same messageId: Opengeni checks Slack and never posts the same message twice. Do not prepare a new message just to retry.",
+      description: "Send a message prepared by slack_bot_prepare_message in this chat, exactly as saved, as the Opengeni bot. If a send is interrupted or its outcome is unclear, retry with the same messageId: Opengeni checks Slack and never posts the same message twice. Do not prepare a new message just to retry.",
       inputSchema: { messageId: z43.string().uuid() }
     },
     async ({ messageId }) => {
-      await authorizeScheduledPost();
+      await authorizeBotPost();
       return json2(
-        await sendScheduledSlackBotPost({
+        await sendSlackBotPost({
           db: deps.db,
           settings: deps.settings,
           grant,
           sessionId,
           messageId,
           ...deps.slackFetch ? { slackFetch: deps.slackFetch } : {},
-          authorizeProviderRequest: authorizeScheduledPost
+          authorizeProviderRequest: authorizeBotPost
         })
       );
     }
@@ -36817,7 +37129,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "AcceptOrganizationInvitationResponse"
-    ]
+    ],
+    "browserOnly": "it acts on the person's own account across organizations (creating an organization, listing their memberships or invitations, accepting an invitation), and a connection is limited to one organization"
   },
   {
     "id": "acceptOrganizationRecoveryCustody",
@@ -36828,7 +37141,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "OrganizationRecoveryMutationResponse"
-    ]
+    ],
+    "browserOnly": "organization recovery is a ceremony in the person's own browser session"
   },
   {
     "id": "acknowledgeStream",
@@ -37070,7 +37384,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "OrganizationRecoveryMutationResponse"
-    ]
+    ],
+    "browserOnly": "organization recovery is a ceremony in the person's own browser session"
   },
   {
     "id": "approveSlackUserLinkAccessRequest",
@@ -37165,7 +37480,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "BeginExternalIdentityLinkResponse"
-    ]
+    ],
+    "browserOnly": "linking a product user to an Opengeni account is confirmed by that person signed in to Opengeni, or started by the embedding product as its user"
   },
   {
     "id": "beginSessionRealtime",
@@ -37226,7 +37542,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "OrganizationRecoveryMutationResponse"
-    ]
+    ],
+    "browserOnly": "organization recovery is a ceremony in the person's own browser session"
   },
   {
     "id": "cancelSessionBackgroundCommand",
@@ -37417,7 +37734,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "OrganizationRecoveryMutationResponse"
-    ]
+    ],
+    "browserOnly": "organization recovery is a ceremony in the person's own browser session"
   },
   {
     "id": "confirmIdentityLink",
@@ -37429,7 +37747,8 @@ var ACTION_CATALOG = [
     "response": [
       "ExternalIdentityLink",
       "ExternalIdentityLinkPreview"
-    ]
+    ],
+    "browserOnly": "linking a product user to an Opengeni account is confirmed by that person signed in to Opengeni, or started by the embedding product as its user"
   },
   {
     "id": "connectClaudeSubscriptionSetupToken",
@@ -37482,7 +37801,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "CreateAdditionalOrganizationResponse"
-    ]
+    ],
+    "browserOnly": "it acts on the person's own account across organizations (creating an organization, listing their memberships or invitations, accepting an invitation), and a connection is limited to one organization"
   },
   {
     "id": "createApiKey",
@@ -37707,7 +38027,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "CreateOrganizationResponse"
-    ]
+    ],
+    "browserOnly": "it acts on the person's own account across organizations (creating an organization, listing their memberships or invitations, accepting an invitation), and a connection is limited to one organization"
   },
   {
     "id": "createOrganizationApiKey",
@@ -38290,7 +38611,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "OrganizationRecoveryMutationResponse"
-    ]
+    ],
+    "browserOnly": "organization recovery is a ceremony in the person's own browser session"
   },
   {
     "id": "disableSource",
@@ -38457,7 +38779,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "OrganizationRecoveryMutationResponse"
-    ]
+    ],
+    "browserOnly": "organization recovery is a ceremony in the person's own browser session"
   },
   {
     "id": "exportCompanyBrainOkf",
@@ -38717,7 +39040,8 @@ var ACTION_CATALOG = [
     "method": "GET",
     "path": "/v1/workspaces/:workspaceId/identity-links/:linkId/:operation",
     "request": [],
-    "response": []
+    "response": [],
+    "browserOnly": "linking a product user to an Opengeni account is confirmed by that person signed in to Opengeni, or started by the embedding product as its user"
   },
   {
     "id": "GET /v1/workspaces/:workspaceId/insights/calls",
@@ -39168,7 +39492,8 @@ var ACTION_CATALOG = [
     "request": [],
     "response": [
       "ExternalIdentityLink"
-    ]
+    ],
+    "browserOnly": "linking a product user to an Opengeni account is confirmed by that person signed in to Opengeni, or started by the embedding product as its user"
   },
   {
     "id": "getInstalledPluginDetails",
@@ -39242,6 +39567,15 @@ var ACTION_CATALOG = [
       "NewSessionDraft"
     ]
   },
+  {
+    "id": "getOpenGeniSlackBotOrganizationAccess",
+    "method": "GET",
+    "path": "/v1/workspaces/:workspaceId/connections/:connectionId/slack-bot/organization-access",
+    "request": [],
+    "response": [
+      "OpenGeniSlackBotOrganizationAccess"
+    ]
+  },
   {
     "id": "getOrganizationAdministrationOverview",
     "method": "GET",
@@ -39348,7 +39682,8 @@ var ACTION_CATALOG = [
     "request": [],
     "response": [
       "OrganizationRecoveryOverview"
-    ]
+    ],
+    "browserOnly": "organization recovery is a ceremony in the person's own browser session"
   },
   {
     "id": "getOrganizationRetentionPolicy",
@@ -39587,6 +39922,24 @@ var ACTION_CATALOG = [
       "SessionCapabilities"
     ]
   },
+  {
+    "id": "getToolActionReview",
+    "method": "GET",
+    "path": "/v1/workspaces/:workspaceId/sessions/:sessionId/tool-reviews/:approvalId",
+    "request": [],
+    "response": [
+      "ToolActionReview"
+    ]
+  },
+  {
+    "id": "getToolReviewDetails",
+    "method": "GET",
+    "path": "/v1/workspaces/:workspaceId/sessions/:sessionId/tool-reviews/:approvalId/details",
+    "request": [],
+    "response": [
+      "ToolReviewDetailsPage"
+    ]
+  },
   {
     "id": "getTranscriptionRecording",
     "method": "GET",
@@ -40123,6 +40476,15 @@ var ACTION_CATALOG = [
       "AuthRunListResponse"
     ]
   },
+  {
+    "id": "listAvailableOpenGeniSlackBots",
+    "method": "GET",
+    "path": "/v1/workspaces/:workspaceId/connections/slack-bot/available",
+    "request": [],
+    "response": [
+      "AvailableOpenGeniSlackBots"
+    ]
+  },
   {
     "id": "listBrowserDiagnostics",
     "method": "GET",
@@ -40381,7 +40743,8 @@ var ACTION_CATALOG = [
     "request": [],
     "response": [
       "ExternalIdentityLinkPage"
-    ]
+    ],
+    "browserOnly": "linking a product user to an Opengeni account is confirmed by that person signed in to Opengeni, or started by the embedding product as its user"
   },
   {
     "id": "listInstalledPlugins",
@@ -40556,7 +40919,8 @@ var ACTION_CATALOG = [
     "request": [],
     "response": [
       "ListOrganizationInvitationsPageResponse"
-    ]
+    ],
+    "browserOnly": "it acts on the person's own account across organizations (creating an organization, listing their memberships or invitations, accepting an invitation), and a connection is limited to one organization"
   },
   {
     "id": "listOrganizationInvitationsForOrganization",
@@ -40574,7 +40938,8 @@ var ACTION_CATALOG = [
     "request": [],
     "response": [
       "ListManagedOrganizationMembershipsResponse"
-    ]
+    ],
+    "browserOnly": "it acts on the person's own account across organizations (creating an organization, listing their memberships or invitations, accepting an invitation), and a connection is limited to one organization"
   },
   {
     "id": "listOrganizationProviderCustomModels",
@@ -41327,7 +41692,8 @@ var ACTION_CATALOG = [
     "method": "POST",
     "path": "/v1/workspaces/:workspaceId/identity-links/:linkId",
     "request": [],
-    "response": []
+    "response": [],
+    "browserOnly": "linking a product user to an Opengeni account is confirmed by that person signed in to Opengeni, or started by the embedding product as its user"
   },
   {
     "id": "POST /v1/workspaces/:workspaceId/integrations/:capabilityId/instances/:instanceKey/facets/:facetKey/pause",
@@ -42435,6 +42801,17 @@ var ACTION_CATALOG = [
       "MemberAllowance"
     ]
   },
+  {
+    "id": "setOpenGeniSlackBotOrganizationAccess",
+    "method": "PUT",
+    "path": "/v1/workspaces/:workspaceId/connections/:connectionId/slack-bot/organization-access",
+    "request": [
+      "UpdateOpenGeniSlackBotOrganizationAccess"
+    ],
+    "response": [
+      "OpenGeniSlackBotOrganizationAccess"
+    ]
+  },
   {
     "id": "setOrganizationClaudeSubscriptionAccountAllocator",
     "method": "PATCH",
@@ -42614,7 +42991,8 @@ var ACTION_CATALOG = [
     ],
     "response": [
       "OrganizationRecoveryMutationResponse"
-    ]
+    ],
+    "browserOnly": "organization recovery is a ceremony in the person's own browser session"
   },
   {
     "id": "startPersonalGitHubOAuth",
@@ -43572,9 +43950,45 @@ var TOOLS = [
     annotations: { readOnlyHint: false, openWorldHint: false }
   }
 ];
+var BRAND_MARK_PATH = "M251 83.5966L207 109L163 83.5966L119 109L75 83.5966L141 45.4915A44 44 0 0 1 185 45.4915ZM185.25 172.3642A44.5 44.5 0 0 1 140.75 172.3642L75 134.4034L119 109L163 134.4034L207 109L251 134.4034Z";
+function brandMarkSvgDataUri(fill) {
+  const svg = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="71 17 184 184" width="184" height="184"><path fill="${fill}" d="${BRAND_MARK_PATH}"/></svg>`;
+  return `data:image/svg+xml;base64,${Buffer.from(svg).toString("base64")}`;
+}
+function organizationMcpIcons(publicOrigin) {
+  const icons = [
+    {
+      src: brandMarkSvgDataUri("#111111"),
+      mimeType: "image/svg+xml",
+      sizes: ["any"],
+      theme: "light"
+    },
+    {
+      src: brandMarkSvgDataUri("#FFFFFF"),
+      mimeType: "image/svg+xml",
+      sizes: ["any"],
+      theme: "dark"
+    }
+  ];
+  if (publicOrigin) {
+    icons.push({
+      src: new URL("/icon-512.png", publicOrigin).href,
+      mimeType: "image/png",
+      sizes: ["512x512"],
+      theme: "light"
+    });
+  }
+  return icons;
+}
 function buildOrganizationMcpServer(input) {
   const server = new Server2(
-    { name: "opengeni", version: "1.0.0" },
+    {
+      name: "opengeni",
+      title: "Opengeni",
+      version: "1.0.0",
+      websiteUrl: "https://opengeni.ai",
+      icons: organizationMcpIcons(input.publicOrigin ?? null)
+    },
     {
       capabilities: { tools: {} },
       instructions: "Opengeni actions: use opengeni_actions_search to find what you need, opengeni_action_describe for its inputs, then opengeni_action_call. Most actions take a workspaceId path parameter; list workspaces first (search 'workspaces')."
@@ -43596,6 +44010,7 @@ function buildOrganizationMcpServer(input) {
         if (!parsed.success) return invalid(parsed.error);
         const entry2 = findAction(parsed.data.id);
         if (!entry2) return failure(`No action "${parsed.data.id}". Search for it first.`);
+        if (entry2.browserOnly) return browserOnly(entry2);
         return json(describeAction(entry2));
       }
       case "opengeni_action_call": {
@@ -43618,11 +44033,12 @@ function findAction(id) {
 function words(value) {
   return value.replace(/([a-z0-9])([A-Z])/g, "$1 $2").toLowerCase().split(/[^a-z0-9]+/u).filter(Boolean);
 }
+var CALLABLE_ACTIONS = ACTION_CATALOG.filter((entry2) => !entry2.browserOnly);
 function searchActions(input) {
   const stem = (word) => word.endsWith("ies") ? `${word.slice(0, -3)}y` : word.replace(/(?<!s)s$/u, "");
   const wanted = words(input.query).map(stem);
   const plural = words(input.query).some((word) => /[^s]s$/u.test(word));
-  const scored = ACTION_CATALOG.map((entry2) => {
+  const scored = CALLABLE_ACTIONS.map((entry2) => {
     const name = words(entry2.id).map(stem);
     const path = [...words(entry2.path.replace(/:\w+/g, "")), entry2.method.toLowerCase()].map(stem);
     const score = wanted.reduce(
@@ -43679,6 +44095,7 @@ function describeAction(entry2) {
 async function callAction(context, input) {
   const entry2 = findAction(input.id);
   if (!entry2) return failure(`No action "${input.id}". Search for it first.`);
+  if (entry2.browserOnly) return browserOnly(entry2);
   const reads = entry2.method === "GET" || entry2.method === "HEAD";
   if (context.caller.kind === "person" && !reads && !READ_ONLY_POST_ACTIONS.has(entry2.path) && isReadOnlyPermissionSet(context.caller.access.permissions)) {
     return failure("This connection is read only, so it can't change anything.");
@@ -43757,7 +44174,7 @@ async function toolResult(response) {
     if (truncated)
       result.truncated = { returnedBytes: MAX_RESPONSE_BYTES, totalBytes: bytes.byteLength };
   }
-  if (status === 403 && /human|browser|cookie|same-origin/i.test(JSON.stringify(result.body ?? ""))) {
+  if ((status === 401 || status === 403) && /human|browser|cookie|same-origin/i.test(JSON.stringify(result.body ?? ""))) {
     result.hint = "This action has to be done by the person in the Opengeni app in a browser.";
   }
   return {
@@ -43793,6 +44210,11 @@ async function readStream(response) {
 function json(value) {
   return { content: [{ type: "text", text: JSON.stringify(value) }] };
 }
+function browserOnly(entry2) {
+  return failure(
+    `${entry2.id} isn't available to connected agents or API keys: ${entry2.browserOnly}. The person has to do it in the Opengeni app in a browser.`
+  );
+}
 function failure(message) {
   return { content: [{ type: "text", text: message }], isError: true };
 }
@@ -73401,7 +73823,9 @@ function registerCapabilityRoutes(app, deps) {
           workspaceId,
           grant: access.grant,
           capabilityId: decodeURIComponent(c.req.param("capabilityId")),
-          personalOwnerVerified: isPersonalConnectionOwnerPrincipal(access)
+          personalOwnerVerified: isPersonalConnectionOwnerPrincipal(access),
+          ...c.req.query("connectionId") ? { connectionId: c.req.query("connectionId") } : {},
+          ...c.req.query("instanceKey") ? { instanceKey: c.req.query("instanceKey") } : {}
         })
       )
     );
@@ -73814,7 +74238,7 @@ import {
 import { nestedPostgresSqlState as nestedPostgresSqlState6 } from "@opengeni/db";
 import { HTTPException as HTTPException46 } from "hono/http-exception";
 import { z as z32 } from "zod";
-async function authorizeAdministration(context, deps, accountId, mutation) {
+async function authorizeOrganizationIntegrationAdministration(context, deps, accountId, mutation) {
   const access = await requireAccessContext4(context, deps);
   const service = accountScopedApiKeyWorkspaceAuthority3(access);
   if (service) {
@@ -73868,7 +74292,7 @@ function registerOrganizationIntegrationPolicyRoutes(app, deps) {
       () => getOrganizationIntegrationPolicy(
         deps.db,
         { accountId },
-        () => authorizeAdministration(context, deps, accountId, false)
+        () => authorizeOrganizationIntegrationAdministration(context, deps, accountId, false)
       )
     );
     context.header("cache-control", "private, no-store");
@@ -73882,7 +74306,7 @@ function registerOrganizationIntegrationPolicyRoutes(app, deps) {
         () => getOrganizationIntegrationPolicy(
           deps.db,
           { accountId },
-          () => authorizeAdministration(context, deps, accountId, false)
+          () => authorizeOrganizationIntegrationAdministration(context, deps, accountId, false)
         )
       )
     );
@@ -73900,7 +74324,7 @@ function registerOrganizationIntegrationPolicyRoutes(app, deps) {
           deps.db,
           { accountId },
           parsed.data,
-          () => authorizeAdministration(context, deps, accountId, true)
+          () => authorizeOrganizationIntegrationAdministration(context, deps, accountId, true)
         )
       )
     );
@@ -74062,7 +74486,7 @@ import {
   encryptEnvironmentValue as encryptEnvironmentValue15,
   brokeredCredentialBundleProblem,
   getConnectionMetadata as getConnectionMetadata8,
-  listConnectionsMetadata as listConnectionsMetadata5,
+  listConnectionsMetadata as listConnectionsMetadata4,
   listSlackInstallationBindings,
   persistSlackBotInstallationWithSuccessAudit,
   recordSlackBotInstallCallbackFailure,
@@ -74813,7 +75237,7 @@ import {
   disconnectConnectionIdempotently as disconnectConnectionIdempotently3,
   encryptEnvironmentValue as encryptEnvironmentValue14,
   getConnectionMetadata as getConnectionMetadata7,
-  listConnectionsMetadata as listConnectionsMetadata4,
+  listConnectionsMetadata as listConnectionsMetadata3,
   persistProviderOAuthConnection as persistProviderOAuthConnection2
 } from "@opengeni/db";
 import { createSignedState as createSignedState11, readSignedState as readSignedState10 } from "@opengeni/github";
@@ -74854,7 +75278,7 @@ function requirePersonalGitHubOAuthSettings(settings) {
   };
 }
 async function listPersonalGitHubConnections(deps, input) {
-  const visible = await listConnectionsMetadata4(deps.db, input.workspaceId, input.subjectId);
+  const visible = await listConnectionsMetadata3(deps.db, input.workspaceId, input.subjectId);
   return visible.filter(
     (connection) => connection.subjectId === input.subjectId && isPersonalGitHubConnection(connection)
   );
@@ -75418,7 +75842,7 @@ function registerConnectionRoutes(app, deps) {
     const grant = await requireAccessGrant14(c, deps, workspaceId, "connections:read");
     return c.json(
       ListConnectionsResponse.parse({
-        connections: await listConnectionsMetadata5(db, workspaceId, grant.subjectId)
+        connections: await listConnectionsMetadata4(db, workspaceId, grant.subjectId)
       })
     );
   });
@@ -76904,7 +77328,7 @@ import {
   listPendingConnectAttempts,
   withWorkspaceSubjectRls as withWorkspaceSubjectRls4,
   installApiIntegration as installApiIntegration2,
-  listConnectionsMetadata as listConnectionsMetadata6,
+  listConnectionsMetadata as listConnectionsMetadata5,
   getConnectionMetadata as getConnectionMetadata10,
   createConnection as createConnection5,
   updateConnection as updateConnection6,
@@ -77481,9 +77905,7 @@ import { ATLASSIAN_NATIVE_RETIRED_MESSAGE as ATLASSIAN_NATIVE_RETIRED_MESSAGE2 }
 import {
   CORE_INTEGRATION_DEFINITIONS as CORE_INTEGRATION_DEFINITIONS2,
   INTEGRATION_DEFINITION_PRESENTATIONS,
-  autoApprovalForbidden,
   createPinnedIntegrationTransport,
-  integrationDefinitionById as integrationDefinitionById3,
   integrationFacetDefinitions
 } from "@opengeni/capabilities";
 import {
@@ -77884,16 +78306,6 @@ function validatedIntegrationInstallInput(grant, workspaceId, payload, resolved)
       throw new HTTPException53(422, {
         message: `autoApprovedTools must name selected Integration tools: ${outside.slice(0, 200)}`
       });
-    if (resolved.preview.definitionProvenance === "curated") {
-      const definition = integrationDefinitionById3(resolved.preview.definitionId);
-      const forbidden = resolved.preview.tools.find(
-        (tool) => payload.autoApprovedTools.includes(tool.id) && autoApprovalForbidden(definition, tool.operationKey)
-      );
-      if (forbidden)
-        throw new HTTPException53(422, {
-          message: `This Integration requires human approval for ${forbidden.id.slice(0, 200)}; it cannot be auto-approved.`
-        });
-    }
   }
   return {
     accountId: grant.accountId,
@@ -78543,7 +78955,7 @@ function registerConnectRoutes(app, deps) {
   app.get("/v1/workspaces/:workspaceId/connect/accounts", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const { grant } = await requireAccessGrantAuthorization9(c, deps, workspaceId, "workspace:read");
-    const connections = hasPermission13(grant.permissions, "connections:read") ? await listConnectionsMetadata6(deps.db, workspaceId, grant.subjectId) : [];
+    const connections = hasPermission13(grant.permissions, "connections:read") ? await listConnectionsMetadata5(deps.db, workspaceId, grant.subjectId) : [];
     const githubInstallations = hasPermission13(grant.permissions, "github:use") || hasPermission13(grant.permissions, "github:manage") ? await listGitHubInstallationAccessForWorkspace2(deps.db, workspaceId) : [];
     const lensRegistrations = await listPrReviewAppRegistrations(
       deps.db,
@@ -79440,7 +79852,7 @@ function registerConnectRoutes(app, deps) {
             throw new HTTPException54(422, { message: "Select the service connection during setup" });
           if (input.ownership === "personal" && !isPersonalConnectionOwnerPrincipal(authorization))
             throw new HTTPException54(403, { message: "personal ownership unavailable" });
-          const choices = hasPermission13(authorization.grant.permissions, "connections:read") ? (await listConnectionsMetadata6(tx, workspaceId, scope.subjectId)).filter(
+          const choices = hasPermission13(authorization.grant.permissions, "connections:read") ? (await listConnectionsMetadata5(tx, workspaceId, scope.subjectId)).filter(
             (connection) => connection.status === "active" && (input.ownership === "workspace" ? connection.subjectId === null : connection.subjectId === scope.subjectId)
           ).map((connection) => ({
             value: connection.id,
@@ -81621,7 +82033,7 @@ import {
 } from "@opengeni/db";
 import { HTTPException as HTTPException59 } from "hono/http-exception";
 import {
-  grantHasAgentAttemptAuthority as grantHasAgentAttemptAuthority2,
+  grantHasAgentAttemptAuthority as grantHasAgentAttemptAuthority3,
   requireAccessGrant as requireAccessGrant18,
   requireAccessGrantAuthorization as requireAccessGrantAuthorization14,
   requireSessionAuthorization as requireSessionAuthorization7,
@@ -82165,7 +82577,7 @@ function registerMachineRoutes(app, deps) {
     const grant = await requireAccessGrant18(c, deps, workspaceId, "sessions:control");
     assertSelfhostedEnabled();
     const sessionId = c.req.param("sessionId");
-    if (grantHasAgentAttemptAuthority2(grant)) {
+    if (grantHasAgentAttemptAuthority3(grant)) {
       try {
         await requireSessionAuthorization7(deps, grant, {
           sessionId,
@@ -99785,6 +100197,7 @@ import { SandboxRecoveryRequest } from "@opengeni/contracts";
 import { getManagedHumanSandboxRecovery, consentManagedHumanSandboxRecovery } from "@opengeni/core";
 import { SandboxRecoveryConflictError } from "@opengeni/db";
 import { getSessionCodexAccounts } from "@opengeni/db";
+import { getToolActionReview, getToolReviewDetailsPage } from "@opengeni/db";
 import {
   AcknowledgeStreamRequest,
   ApplySessionGoalRevisionRequest,
@@ -101675,6 +102088,44 @@ function registerSessionRoutes(app, deps) {
       throw error;
     }
   });
+  app.get("/v1/workspaces/:workspaceId/sessions/:sessionId/tool-reviews/:approvalId", async (c) => {
+    const workspaceId = c.req.param("workspaceId");
+    const grant = await requireAccessGrant37(c, deps, workspaceId, "sessions:read");
+    const input = {
+      accountId: grant.accountId,
+      workspaceId,
+      sessionId: c.req.param("sessionId"),
+      approvalId: c.req.param("approvalId")
+    };
+    const review = await getToolActionReview(db, input);
+    if (!review) throw new HTTPException88(404, { message: "Review not found" });
+    c.header("Cache-Control", "private, no-store");
+    return c.json(review);
+  });
+  app.get(
+    "/v1/workspaces/:workspaceId/sessions/:sessionId/tool-reviews/:approvalId/details",
+    async (c) => {
+      const workspaceId = c.req.param("workspaceId");
+      const grant = await requireAccessGrant37(c, deps, workspaceId, "sessions:read");
+      const query = z45.object({
+        actionDigest: z45.string().regex(/^[0-9a-f]{64}$/),
+        path: z45.string().max(2048).default(""),
+        offset: z45.coerce.number().int().min(0).max(4194304).default(0)
+      }).safeParse(c.req.query());
+      if (!query.success) throw new HTTPException88(400, { message: "Invalid review page" });
+      const input = {
+        accountId: grant.accountId,
+        workspaceId,
+        sessionId: c.req.param("sessionId"),
+        approvalId: c.req.param("approvalId"),
+        ...query.data
+      };
+      const page2 = await getToolReviewDetailsPage(db, input);
+      if (!page2) throw new HTTPException88(404, { message: "Review details unavailable" });
+      c.header("Cache-Control", "private, no-store");
+      return c.json(page2);
+    }
+  );
   app.get("/v1/workspaces/:workspaceId/sessions/:sessionId", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant37(c, deps, workspaceId, "sessions:read");
@@ -105131,6 +105582,7 @@ function sessionAuthorizationOperationForHttp(method, pathname, sessionId) {
   if (suffix === "/lineage" && verb === "GET") return "session.lineage.read";
   if (suffix === "/background-commands" && verb === "GET") return "session.read";
   if (suffix === "/model-context" && verb === "GET") return "session.read";
+  if (/^\/tool-reviews\/[^/]+(?:\/details)?$/.test(suffix) && verb === "GET") return "session.read";
   if (suffix === "/codex-accounts" && verb === "GET") return "session.read";
   if (/^\/background-commands\/[^/]+$/.test(suffix) && verb === "DELETE") {
     return "session.control";
@@ -106347,7 +106799,7 @@ function socialHttpException(error) {
 
 // src/routes/workspaces.ts
 import { withDirectModelProviders } from "@opengeni/config";
-import { listConnectionsMetadata as listConnectionsMetadata7 } from "@opengeni/db";
+import { listConnectionsMetadata as listConnectionsMetadata6 } from "@opengeni/db";
 import {
   workspaceProviderApiKeyConnectionMetadataFromConnections,
   listWorkspaceProviderCustomModelsByKind,
@@ -106936,7 +107388,7 @@ function registerWorkspaceRoutes(app, deps) {
         workspaceId,
         subjectId: grant.subjectId
       }),
-      listConnectionsMetadata7(deps.db, workspaceId, null),
+      listConnectionsMetadata6(deps.db, workspaceId, null),
       listWorkspaceProviderCustomModelsByKind(deps.db, {
         accountId: grant.accountId,
         workspaceId,
@@ -109577,6 +110029,111 @@ function registerSlackTaskPolicyRoutes(app, deps) {
   });
 }
 
+// src/routes/slack-bot-access.ts
+import {
+  AvailableOpenGeniSlackBots,
+  OpenGeniSlackBotOrganizationAccess,
+  UpdateOpenGeniSlackBotOrganizationAccess
+} from "@opengeni/contracts";
+import {
+  isOpenGeniSlackBotConnection as isOpenGeniSlackBotConnection5,
+  requireAccessGrant as requireAccessGrant45
+} from "@opengeni/core";
+import {
+  availableSlackBotConnectionMetadata as availableSlackBotConnectionMetadata2,
+  nestedPostgresSqlState as nestedPostgresSqlState13,
+  readOrganizationSlackBotAccess,
+  setOrganizationSlackBotAccess,
+  sharedOrganizationSlackBots as sharedOrganizationSlackBots2
+} from "@opengeni/db";
+import { HTTPException as HTTPException99 } from "hono/http-exception";
+import { z as z51 } from "zod";
+function registerSlackBotAccessRoutes(app, deps) {
+  const base = "/v1/workspaces/:workspaceId/connections";
+  app.get(`${base}/:connectionId/slack-bot/organization-access`, async (context) => {
+    const grant = await requireAccessGrant45(
+      context,
+      deps,
+      context.req.param("workspaceId"),
+      "connections:read"
+    );
+    const connectionId = z51.string().uuid().safeParse(context.req.param("connectionId"));
+    if (!connectionId.success) throw new HTTPException99(422, { message: "Invalid bot connection" });
+    context.header("cache-control", "private, no-store");
+    try {
+      return context.json(
+        OpenGeniSlackBotOrganizationAccess.parse(
+          await readOrganizationSlackBotAccess(deps.db, {
+            accountId: grant.accountId,
+            workspaceId: grant.workspaceId,
+            connectionId: connectionId.data
+          })
+        )
+      );
+    } catch (error) {
+      if (nestedPostgresSqlState13(error) === "42501")
+        throw new HTTPException99(404, { message: "Local bot installation unavailable" });
+      throw error;
+    }
+  });
+  app.get(`${base}/slack-bot/available`, async (context) => {
+    const grant = await requireAccessGrant45(
+      context,
+      deps,
+      context.req.param("workspaceId"),
+      "connections:read"
+    );
+    context.header("cache-control", "private, no-store");
+    const [connections, shares] = await Promise.all([
+      availableSlackBotConnectionMetadata2(deps.db, grant),
+      sharedOrganizationSlackBots2(deps.db, grant)
+    ]);
+    return context.json(
+      AvailableOpenGeniSlackBots.parse({
+        connections: connections.filter(
+          (connection) => connection.status === "active" && isOpenGeniSlackBotConnection5(connection)
+        ),
+        organizationSharedConnectionIds: shares.map((share) => share.connectionId)
+      })
+    );
+  });
+  app.put(`${base}/:connectionId/slack-bot/organization-access`, async (context) => {
+    const grant = await requireAccessGrant45(
+      context,
+      deps,
+      context.req.param("workspaceId"),
+      "connections:write"
+    );
+    const connectionId = z51.string().uuid().safeParse(context.req.param("connectionId"));
+    const request = UpdateOpenGeniSlackBotOrganizationAccess.safeParse(
+      await context.req.json().catch(() => null)
+    );
+    if (!connectionId.success || !request.success)
+      throw new HTTPException99(422, { message: "Invalid bot access setting" });
+    context.header("cache-control", "private, no-store");
+    try {
+      const result = await setOrganizationSlackBotAccess(
+        deps.db,
+        {
+          accountId: grant.accountId,
+          workspaceId: grant.workspaceId,
+          connectionId: connectionId.data,
+          enabled: request.data.enabled
+        },
+        () => authorizeOrganizationIntegrationAdministration(context, deps, grant.accountId, true)
+      );
+      return context.json(OpenGeniSlackBotOrganizationAccess.parse(result));
+    } catch (error) {
+      if (error instanceof HTTPException99) throw error;
+      if (nestedPostgresSqlState13(error) === "42501")
+        throw new HTTPException99(403, {
+          message: "Organization administrator and a verified local bot installation required"
+        });
+      throw error;
+    }
+  });
+}
+
 // src/routes/workspace-state.ts
 import {
   WORKSPACE_STATE_KNOWLEDGE_SAMPLE_LIMIT as WORKSPACE_STATE_KNOWLEDGE_SAMPLE_LIMIT3,
@@ -109595,7 +110152,7 @@ import {
   listKnowledgeEntries as listKnowledgeEntries4,
   listWorkspaceInstructionPolicyRevisions as listWorkspaceInstructionPolicyRevisions3
 } from "@opengeni/db";
-import { HTTPException as HTTPException99 } from "hono/http-exception";
+import { HTTPException as HTTPException100 } from "hono/http-exception";
 
 // src/workspace-state-export.ts
 import { createHash as createHash27 } from "crypto";
@@ -109667,7 +110224,7 @@ async function readWorkspaceState(deps, input) {
       attemptId: query.attemptId
     }) : Promise.resolve(null)
   ]);
-  if (!workspace) throw new HTTPException99(404, { message: "workspace not found" });
+  if (!workspace) throw new HTTPException100(404, { message: "workspace not found" });
   const attemptGovernance = query.attemptId ? acceptedAttempt ? {
     status: "available",
     attemptId: acceptedAttempt.attemptId,
@@ -109754,7 +110311,7 @@ import {
   normalizeWorkspaceArtifactSlug as normalizeWorkspaceArtifactSlug2
 } from "@opengeni/contracts";
 import {
-  requireAccessGrant as requireAccessGrant45,
+  requireAccessGrant as requireAccessGrant46,
   requireAccessGrantAuthorization as requireAccessGrantAuthorization35,
   requireSessionAuthorization as requireSessionAuthorization13,
   SessionAuthorizationDeniedError as SessionAuthorizationDeniedError13,
@@ -109765,7 +110322,7 @@ import {
   getWorkspaceArtifact as getWorkspaceArtifact3,
   getWorkspaceArtifactContentRef as getWorkspaceArtifactContentRef3,
   listWorkspaceArtifacts as listWorkspaceArtifacts2,
-  nestedPostgresSqlState as nestedPostgresSqlState13,
+  nestedPostgresSqlState as nestedPostgresSqlState14,
   publishWorkspaceArtifactVersion as publishWorkspaceArtifactVersion2,
   rollbackWorkspaceArtifact as rollbackWorkspaceArtifact2,
   setWorkspaceArtifactStatus as setWorkspaceArtifactStatus2,
@@ -109773,23 +110330,23 @@ import {
   WorkspaceArtifactNotFoundError as WorkspaceArtifactNotFoundError3,
   WorkspaceArtifactOperationError as WorkspaceArtifactOperationError2
 } from "@opengeni/db";
-import { HTTPException as HTTPException100 } from "hono/http-exception";
-import { z as z51 } from "zod";
-var ArtifactId3 = z51.string().uuid();
+import { HTTPException as HTTPException101 } from "hono/http-exception";
+import { z as z52 } from "zod";
+var ArtifactId3 = z52.string().uuid();
 async function body(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
-  if (!parsed.success) throw new HTTPException100(422, { message: "Invalid artifact request" });
+  if (!parsed.success) throw new HTTPException101(422, { message: "Invalid artifact request" });
   return parsed.data;
 }
 function parseVersionId(value) {
   if (value !== void 0 && !ArtifactId3.safeParse(value).success) {
-    throw new HTTPException100(422, { message: "Invalid artifact version id" });
+    throw new HTTPException101(422, { message: "Invalid artifact version id" });
   }
   return value;
 }
 function artifactId(context) {
   const parsed = ArtifactId3.safeParse(context.req.param("artifactId"));
-  if (!parsed.success) throw new HTTPException100(422, { message: "Invalid artifact id" });
+  if (!parsed.success) throw new HTTPException101(422, { message: "Invalid artifact id" });
   return parsed.data;
 }
 function workspaceArtifactErrorResponse(context, error) {
@@ -109812,7 +110369,7 @@ function workspaceArtifactErrorResponse(context, error) {
       422
     );
   }
-  if (nestedPostgresSqlState13(error) === "23505") {
+  if (nestedPostgresSqlState14(error) === "23505") {
     return context.json(
       {
         code: "WORKSPACE_ARTIFACT_CONFLICT",
@@ -109825,7 +110382,7 @@ function workspaceArtifactErrorResponse(context, error) {
 }
 function prepareContent(deps, grant, input) {
   if (!deps.objectStorage)
-    throw new HTTPException100(503, {
+    throw new HTTPException101(503, {
       message: "Object storage is not configured"
     });
   return prepareWorkspaceArtifactPublication(deps, grant, input);
@@ -109852,7 +110409,7 @@ async function canReadProvenanceSession(deps, grant, sessionId) {
   } catch (error) {
     if (error instanceof SessionAuthorizationDeniedError13) return false;
     if (error instanceof SessionAuthorizationUnavailableError11) {
-      throw new HTTPException100(503, {
+      throw new HTTPException101(503, {
         message: "Session authorization is unavailable"
       });
     }
@@ -109870,7 +110427,7 @@ async function mutationResponse(deps, grant, response) {
 function registerWorkspaceArtifactRoutes(app, deps) {
   const base = "/v1/workspaces/:workspaceId/published-artifacts";
   app.post(`${base}/uploads`, async (context) => {
-    const grant = await requireAccessGrant45(
+    const grant = await requireAccessGrant46(
       context,
       deps,
       context.req.param("workspaceId"),
@@ -109880,9 +110437,9 @@ function registerWorkspaceArtifactRoutes(app, deps) {
   });
   app.get(`${base}/:artifactId/downloads`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    await requireAccessGrant45(context, deps, workspaceId, "artifacts:read");
+    await requireAccessGrant46(context, deps, workspaceId, "artifacts:read");
     if (!deps.objectStorage)
-      throw new HTTPException100(503, {
+      throw new HTTPException101(503, {
         message: "Object storage is not configured"
       });
     const ref = await getWorkspaceArtifactContentRef3(
@@ -109895,16 +110452,16 @@ function registerWorkspaceArtifactRoutes(app, deps) {
   });
   app.get(base, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const grant = await requireAccessGrant45(context, deps, workspaceId, "artifacts:read");
+    const grant = await requireAccessGrant46(context, deps, workspaceId, "artifacts:read");
     const query = WorkspaceArtifactListQuery.safeParse({
       limit: context.req.query("limit"),
       cursor: context.req.query("cursor"),
       status: context.req.query("status"),
       sourceSessionId: context.req.query("sourceSessionId")
     });
-    if (!query.success) throw new HTTPException100(422, { message: "Invalid artifact list query" });
+    if (!query.success) throw new HTTPException101(422, { message: "Invalid artifact list query" });
     if (query.data.sourceSessionId && !await canReadProvenanceSession(deps, grant, query.data.sourceSessionId)) {
-      throw new HTTPException100(404, { message: "Session not found" });
+      throw new HTTPException101(404, { message: "Session not found" });
     }
     try {
       return context.json(
@@ -109967,7 +110524,7 @@ function registerWorkspaceArtifactRoutes(app, deps) {
   });
   app.get(`${base}/:artifactId`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const grant = await requireAccessGrant45(context, deps, workspaceId, "artifacts:read");
+    const grant = await requireAccessGrant46(context, deps, workspaceId, "artifacts:read");
     try {
       const detail = await getWorkspaceArtifact3(deps.db, workspaceId, artifactId(context));
       return context.json(
@@ -109984,9 +110541,9 @@ function registerWorkspaceArtifactRoutes(app, deps) {
   });
   app.get(`${base}/:artifactId/html`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    await requireAccessGrant45(context, deps, workspaceId, "artifacts:read");
+    await requireAccessGrant46(context, deps, workspaceId, "artifacts:read");
     if (!deps.objectStorage)
-      throw new HTTPException100(503, {
+      throw new HTTPException101(503, {
         message: "Object storage is not configured"
       });
     const ref = await getWorkspaceArtifactContentRef3(
@@ -110030,9 +110587,9 @@ function registerWorkspaceArtifactRoutes(app, deps) {
   });
   app.get(`${base}/:artifactId/content`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    await requireAccessGrant45(context, deps, workspaceId, "artifacts:read");
+    await requireAccessGrant46(context, deps, workspaceId, "artifacts:read");
     if (!deps.objectStorage)
-      throw new HTTPException100(503, {
+      throw new HTTPException101(503, {
         message: "Object storage is not configured"
       });
     const parsedVersion = parseVersionId(context.req.query("versionId"));
@@ -110047,7 +110604,7 @@ function registerWorkspaceArtifactRoutes(app, deps) {
       try {
         content = await readWorkspaceArtifactContent(deps.objectStorage, ref);
       } catch (error) {
-        throw new HTTPException100(503, {
+        throw new HTTPException101(503, {
           message: error instanceof Error ? error.message : "Artifact content is unavailable",
           cause: error
         });
@@ -110183,7 +110740,7 @@ import {
   editableArtifactId as editableArtifactId3,
   editableArtifactScope as editableArtifactScope2,
   fileOwnerContextForAccess as fileOwnerContextForAccess5,
-  grantHasAgentAttemptAuthority as grantHasAgentAttemptAuthority3,
+  grantHasAgentAttemptAuthority as grantHasAgentAttemptAuthority4,
   hasPermission as hasPermission27,
   requireAccessGrantAuthorization as requireAccessGrantAuthorization36,
   requireLiveAgentAttemptAuthorization as requireLiveAgentAttemptAuthorization5,
@@ -110196,27 +110753,27 @@ import {
   getGeneratedImageArtifact as getGeneratedImageArtifact2,
   getSessionAuthorityProjection as getSessionAuthorityProjection3,
   listArtifactCatalogCandidates,
-  nestedPostgresSqlState as nestedPostgresSqlState14,
+  nestedPostgresSqlState as nestedPostgresSqlState15,
   updateArtifactPin,
   withSessionRlsActorContext as withSessionRlsActorContext9
 } from "@opengeni/db";
-import { HTTPException as HTTPException102 } from "hono/http-exception";
-import { z as z53 } from "zod";
+import { HTTPException as HTTPException103 } from "hono/http-exception";
+import { z as z54 } from "zod";
 
 // src/artifact-catalog-cursor.ts
 import { createCipheriv as createCipheriv2, createDecipheriv as createDecipheriv2, createHash as createHash29, randomBytes as randomBytes12 } from "crypto";
 import { ArtifactCatalogKind } from "@opengeni/contracts";
-import { HTTPException as HTTPException101 } from "hono/http-exception";
-import { z as z52 } from "zod";
-var Cursor = z52.object({
-  version: z52.literal(1),
-  snapshotAt: z52.string().datetime(),
-  expiresAt: z52.number().int().positive(),
-  after: z52.object({
-    key: z52.string().max(4096),
+import { HTTPException as HTTPException102 } from "hono/http-exception";
+import { z as z53 } from "zod";
+var Cursor = z53.object({
+  version: z53.literal(1),
+  snapshotAt: z53.string().datetime(),
+  expiresAt: z53.number().int().positive(),
+  after: z53.object({
+    key: z53.string().max(4096),
     kind: ArtifactCatalogKind,
-    id: z52.string().min(1).max(128),
-    pinned: z52.boolean().optional()
+    id: z53.string().min(1).max(128),
+    pinned: z53.boolean().optional()
   }).strict()
 }).strict();
 function artifactCatalogCursorCodec(secret, binding) {
@@ -110250,7 +110807,7 @@ function artifactCatalogCursorCodec(secret, binding) {
           throw new Error();
         return parsed;
       } catch {
-        throw new HTTPException101(422, { message: "Invalid or expired artifact catalog cursor" });
+        throw new HTTPException102(422, { message: "Invalid or expired artifact catalog cursor" });
       }
     }
   };
@@ -110278,22 +110835,22 @@ function registerArtifactCatalogRoutes(app, deps) {
     );
     const grant = authorization.grant;
     if (!hasPermission27(grant.permissions, "artifacts:publish"))
-      throw new HTTPException102(403, { message: "Artifact publish access required" });
+      throw new HTTPException103(403, { message: "Artifact publish access required" });
     const kind = ArtifactCatalogKind2.safeParse(context.req.param("kind"));
     const body3 = UpdateArtifactPinRequest.safeParse(await context.req.json().catch(() => null));
     const requestedId = context.req.param("artifactId");
-    if (!kind.success || !body3.success || !(editableKinds.has(kind.data) ? /^[0-9a-f]{32}$/.test(requestedId) : z53.string().uuid().safeParse(requestedId).success))
-      throw new HTTPException102(422, { message: "Invalid artifact pin request" });
+    if (!kind.success || !body3.success || !(editableKinds.has(kind.data) ? /^[0-9a-f]{32}$/.test(requestedId) : z54.string().uuid().safeParse(requestedId).success))
+      throw new HTTPException103(422, { message: "Invalid artifact pin request" });
     const artifactId2 = editableKinds.has(kind.data) ? requestedId : requestedId.toLowerCase();
     const fileKind = kind.data === "file" || kind.data === "image";
     if (!hasPermission27(grant.permissions, fileKind ? "files:read" : "artifacts:read"))
-      throw new HTTPException102(403, { message: "Artifact read access required" });
+      throw new HTTPException103(403, { message: "Artifact read access required" });
     const actor = fileKind ? await fileOwnerContextForAccess5(deps, authorization, "files:read") : { subjectId: grant.subjectId, privateFileOwnerSubjectId: null };
     context.header("cache-control", "private, no-store");
     return withSessionRlsActorContext9(actor, async () => {
       if (editableKinds.has(kind.data)) {
         if (!deps.editableArtifacts)
-          throw new HTTPException102(503, { message: "Editable artifacts are unavailable" });
+          throw new HTTPException103(503, { message: "Editable artifacts are unavailable" });
         try {
           const scope = editableArtifactScope2({ accountId: grant.accountId, workspaceId });
           const artifact = await deps.editableArtifacts.readArtifact({
@@ -110302,10 +110859,10 @@ function registerArtifactCatalogRoutes(app, deps) {
             artifactId: editableArtifactId3(artifactId2)
           });
           if (artifact.scope.accountId !== scope.accountId || artifact.scope.workspaceId !== scope.workspaceId || artifact.id !== artifactId2 || artifact.modality !== kind.data)
-            throw new HTTPException102(404, { message: "Artifact not found" });
+            throw new HTTPException103(404, { message: "Artifact not found" });
         } catch (error) {
           if (isInvisibleListCandidate(error))
-            throw new HTTPException102(404, { message: "Artifact not found" });
+            throw new HTTPException103(404, { message: "Artifact not found" });
           throw editableArtifactHttpError(error);
         }
       }
@@ -110318,7 +110875,7 @@ function registerArtifactCatalogRoutes(app, deps) {
           fileIds: [artifactId2]
         });
         if (!file || file.status !== "ready")
-          throw new HTTPException102(404, { message: "Artifact not found" });
+          throw new HTTPException103(404, { message: "Artifact not found" });
       }
       try {
         await updateArtifactPin(
@@ -110331,8 +110888,8 @@ function registerArtifactCatalogRoutes(app, deps) {
           }
         );
       } catch (error) {
-        if (nestedPostgresSqlState14(error) === "42501")
-          throw new HTTPException102(404, { message: "Artifact not found" });
+        if (nestedPostgresSqlState15(error) === "42501")
+          throw new HTTPException103(404, { message: "Artifact not found" });
         throw error;
       }
       return context.json(
@@ -110346,23 +110903,23 @@ function registerArtifactCatalogRoutes(app, deps) {
     const grant = authorization.grant;
     const parsed = ArtifactCatalogListQuery.safeParse(context.req.query());
     if (!parsed.success)
-      throw new HTTPException102(422, { message: "Invalid artifact catalog query" });
+      throw new HTTPException103(422, { message: "Invalid artifact catalog query" });
     const query = parsed.data;
     const artifactsAllowed = hasPermission27(grant.permissions, "artifacts:read");
     const filesAllowed = hasPermission27(grant.permissions, "files:read");
     if (!artifactsAllowed && !filesAllowed)
-      throw new HTTPException102(403, { message: "Artifact catalog read access required" });
+      throw new HTTPException103(403, { message: "Artifact catalog read access required" });
     let kinds = ArtifactCatalogKind2.options.filter(
       (kind) => (kind === "image" || kind === "file" ? filesAllowed : artifactsAllowed) && (!query.kind || kind === query.kind)
     );
     if (!deps.editableArtifacts) {
       if (query.kind && editableKinds.has(query.kind) && artifactsAllowed)
-        throw new HTTPException102(503, { message: "Editable artifacts are unavailable" });
+        throw new HTTPException103(503, { message: "Editable artifacts are unavailable" });
       kinds = kinds.filter((kind) => !editableKinds.has(kind));
     }
     const includesFiles = kinds.includes("file") || kinds.includes("image");
     const actor = includesFiles ? await fileOwnerContextForAccess5(deps, authorization, "files:read") : { subjectId: grant.subjectId, privateFileOwnerSubjectId: null };
-    if (grantHasAgentAttemptAuthority3(grant) && actor.initiatingHumanSubjectId === void 0) {
+    if (grantHasAgentAttemptAuthority4(grant) && actor.initiatingHumanSubjectId === void 0) {
       const callerSessionId = grant.metadata?.["sessionId"];
       try {
         if (typeof callerSessionId !== "string")
@@ -110371,7 +110928,7 @@ function registerArtifactCatalogRoutes(app, deps) {
         actor.initiatingHumanSubjectId = attempt.initiatingHumanSubjectId;
       } catch (error) {
         if (error instanceof SessionAuthorizationDeniedError14)
-          throw new HTTPException102(404, { message: "Session not found", cause: error });
+          throw new HTTPException103(404, { message: "Session not found", cause: error });
         throw error;
       }
     }
@@ -110397,17 +110954,17 @@ function registerArtifactCatalogRoutes(app, deps) {
           return false;
         }
         if (error instanceof SessionAuthorizationUnavailableError12)
-          throw new HTTPException102(503, { message: "Session authorization is unavailable" });
+          throw new HTTPException103(503, { message: "Session authorization is unavailable" });
         throw error;
       }
     };
     context.header("cache-control", "private, no-store");
     return withSessionRlsActorContext9(actor, async () => {
       if (query.sourceSessionId && !await canReadSession(query.sourceSessionId))
-        throw new HTTPException102(404, { message: "Session not found" });
+        throw new HTTPException103(404, { message: "Session not found" });
       const secret = resolveFirstPartyDelegationSecret6(deps.settings);
       if (!secret)
-        throw new HTTPException102(503, { message: "Artifact catalog cursor signing is unavailable" });
+        throw new HTTPException103(503, { message: "Artifact catalog cursor signing is unavailable" });
       const filters = { ...query, cursor: void 0 };
       const codec = artifactCatalogCursorCodec(
         secret,
@@ -110536,18 +111093,18 @@ import {
   workspaceInsightsPhaseMetricObserver,
   normalizeWorkspaceInsightsFilter,
   normalizeWorkspaceInsightsSessionScope,
-  requireAccessGrant as requireAccessGrant46,
+  requireAccessGrant as requireAccessGrant47,
   WorkspaceInsightsFilterValidationError
 } from "@opengeni/core";
 import { currentSessionRlsActorIdentityKey } from "@opengeni/db";
 import { workspaceInsightsMetricObserver } from "@opengeni/observability";
-import { HTTPException as HTTPException103 } from "hono/http-exception";
+import { HTTPException as HTTPException104 } from "hono/http-exception";
 function normalizeWorkspaceInsightsQueryFilter(value, field) {
   try {
     return field === "rootSessionId" || field === "sessionId" ? normalizeWorkspaceInsightsSessionScope(value, field) : normalizeWorkspaceInsightsFilter(value, field);
   } catch (error) {
     if (error instanceof WorkspaceInsightsFilterValidationError) {
-      throw new HTTPException103(400, { message: error.message });
+      throw new HTTPException104(400, { message: error.message });
     }
     throw error;
   }
@@ -110599,11 +111156,11 @@ function registerInsightsRoutes(app, deps) {
       await measureInsightsPhase(
         observePhase,
         "auth",
-        () => requireAccessGrant46(c, deps, workspaceId, "workspace:admin")
+        () => requireAccessGrant47(c, deps, workspaceId, "workspace:admin")
       );
       const rangeParsed = InsightsRange.safeParse(rangeRaw);
       if (!rangeParsed.success) {
-        throw new HTTPException103(400, {
+        throw new HTTPException104(400, {
           message: "range must be one of today|week|month|ytd"
         });
       }
@@ -110669,7 +111226,7 @@ import {
   hasPermission as hasPermission28,
   listInsightsCalls,
   requireAccessContext as requireAccessContext11,
-  requireAccessGrant as requireAccessGrant47
+  requireAccessGrant as requireAccessGrant48
 } from "@opengeni/core";
 import {
   currentSessionRlsActorIdentityKey as currentSessionRlsActorIdentityKey2,
@@ -110677,11 +111234,11 @@ import {
   readInsightsResponseCacheFence
 } from "@opengeni/db";
 import { createHash as createHash30 } from "crypto";
-import { HTTPException as HTTPException105 } from "hono/http-exception";
+import { HTTPException as HTTPException106 } from "hono/http-exception";
 
 // src/routes/insights-response-cache.ts
 import { createHmac as createHmac13, randomBytes as randomBytes13 } from "crypto";
-import { HTTPException as HTTPException104 } from "hono/http-exception";
+import { HTTPException as HTTPException105 } from "hono/http-exception";
 var INSIGHTS_RESPONSE_TTL_MS = 6e4;
 var MAX_ENTRIES = 128;
 var MAX_BYTES = 8 * 1024 * 1024;
@@ -110736,7 +111293,7 @@ async function insightsWithFriendlyTimeout(read) {
     for (let depth = 0; depth < 4 && current && typeof current === "object"; depth++) {
       const candidate = current;
       if (candidate.code === "57014" || typeof candidate.message === "string" && candidate.message.toLowerCase().includes("statement timeout")) {
-        throw new HTTPException104(408, {
+        throw new HTTPException105(408, {
           message: "This range has too much data right now. Try a shorter range."
         });
       }
@@ -110837,7 +111394,7 @@ async function callsWithValidation(read) {
     return await read();
   } catch (error) {
     if (error instanceof InvalidInsightsCallsCursorError)
-      throw new HTTPException105(400, { message: "invalid Insights calls cursor" });
+      throw new HTTPException106(400, { message: "invalid Insights calls cursor" });
     throw error;
   }
 }
@@ -110873,12 +111430,12 @@ function registerInsightsUsageRoutes(app, deps) {
   }
   app.get("/v1/workspaces/:workspaceId/insights/usage", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant47(c, deps, workspaceId, "workspace:admin");
+    const grant = await requireAccessGrant48(c, deps, workspaceId, "workspace:admin");
     const query = insightsQueryParameters(c.req.queries());
     if (!insightsRawQuerySupported(query, false, false))
-      throw new HTTPException105(400, { message: "unsupported interim Insights query" });
+      throw new HTTPException106(400, { message: "unsupported interim Insights query" });
     const parsed = WorkspaceInsightsUsageQuery.safeParse(query);
-    if (!parsed.success) throw new HTTPException105(400, { message: "invalid Insights usage query" });
+    if (!parsed.success) throw new HTTPException106(400, { message: "invalid Insights usage query" });
     const scope = {
       accountId: grant.accountId,
       workspaceId,
@@ -110899,12 +111456,12 @@ function registerInsightsUsageRoutes(app, deps) {
   });
   app.get("/v1/workspaces/:workspaceId/insights/calls", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant47(c, deps, workspaceId, "workspace:admin");
+    const grant = await requireAccessGrant48(c, deps, workspaceId, "workspace:admin");
     const query = insightsQueryParameters(c.req.queries());
     if (!insightsRawQuerySupported(query, false, true))
-      throw new HTTPException105(400, { message: "unsupported interim Insights query" });
+      throw new HTTPException106(400, { message: "unsupported interim Insights query" });
     const parsed = WorkspaceInsightsCallsQuery.safeParse(query);
-    if (!parsed.success) throw new HTTPException105(400, { message: "invalid Insights calls query" });
+    if (!parsed.success) throw new HTTPException106(400, { message: "invalid Insights calls query" });
     const scope = {
       accountId: grant.accountId,
       workspaceId,
@@ -110932,9 +111489,9 @@ function registerInsightsUsageRoutes(app, deps) {
     const accountId = requireSelectedAccount(context, c.req.param("accountId"), "billing:read");
     const query = insightsQueryParameters(c.req.queries());
     if (!insightsRawQuerySupported(query, true, false))
-      throw new HTTPException105(400, { message: "unsupported interim Insights query" });
+      throw new HTTPException106(400, { message: "unsupported interim Insights query" });
     const parsed = OrganizationInsightsUsageQuery.safeParse(query);
-    if (!parsed.success) throw new HTTPException105(400, { message: "invalid Insights usage query" });
+    if (!parsed.success) throw new HTTPException106(400, { message: "invalid Insights usage query" });
     const scope = organizationInsightsScope(context, accountId);
     const response = await withBillingUsageActor(
       deps,
@@ -110959,9 +111516,9 @@ function registerInsightsUsageRoutes(app, deps) {
     const accountId = requireSelectedAccount(context, c.req.param("accountId"), "billing:read");
     const query = insightsQueryParameters(c.req.queries());
     if (!insightsRawQuerySupported(query, true, true))
-      throw new HTTPException105(400, { message: "unsupported interim Insights query" });
+      throw new HTTPException106(400, { message: "unsupported interim Insights query" });
     const parsed = OrganizationInsightsCallsQuery.safeParse(query);
-    if (!parsed.success) throw new HTTPException105(400, { message: "invalid Insights calls query" });
+    if (!parsed.success) throw new HTTPException106(400, { message: "invalid Insights calls query" });
     const scope = organizationInsightsScope(context, accountId);
     const response = await withBillingUsageActor(
       deps,
@@ -110992,7 +111549,7 @@ import {
   resolveWorkspaceVoiceInputEnabled as resolveWorkspaceVoiceInputEnabled2,
   WorkspaceVoiceInputSettings as WorkspaceVoiceInputSettings2
 } from "@opengeni/contracts";
-import { requireAccessGrant as requireAccessGrant49, TranscriptionServiceError as TranscriptionServiceError2 } from "@opengeni/core";
+import { requireAccessGrant as requireAccessGrant50, TranscriptionServiceError as TranscriptionServiceError2 } from "@opengeni/core";
 import { getWorkspace as getWorkspace10 } from "@opengeni/db";
 
 // src/routes/transcription-recordings.ts
@@ -111008,7 +111565,7 @@ import {
 import {
   isAcceptedMimeType,
   normalizeMimeType,
-  requireAccessGrant as requireAccessGrant48,
+  requireAccessGrant as requireAccessGrant49,
   TRANSCRIPTION_PROVIDER_REQUEST_TIMEOUT_MILLISECONDS,
   TranscriptionServiceError
 } from "@opengeni/core";
@@ -111700,7 +112257,7 @@ async function requireRecordingAuthority(c, deps, requirePolicy) {
   if (!workspaceId) {
     throw new TranscriptionRecordingNotFoundError("Workspace not found");
   }
-  const grant = await requireAccessGrant48(c, deps, workspaceId, "sessions:create");
+  const grant = await requireAccessGrant49(c, deps, workspaceId, "sessions:create");
   const workspace = await getWorkspace9(deps.db, workspaceId);
   if (requirePolicy) {
     if (!workspace) throw new TranscriptionRecordingNotFoundError("Workspace not found");
@@ -111913,7 +112470,7 @@ function registerTranscriptionRoutes(app, deps) {
   registerResumableTranscriptionRoutes(app, deps);
   app.post("/v1/workspaces/:workspaceId/transcriptions", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant49(c, deps, workspaceId, "sessions:create");
+    const grant = await requireAccessGrant50(c, deps, workspaceId, "sessions:create");
     const workspace = await getWorkspace10(deps.db, workspaceId);
     if (!workspace) return c.json({ code: "not_found" }, 404);
     if (resolveWorkspaceVoiceInputEnabled2(workspace.settings) === false) {
@@ -112052,7 +112609,7 @@ function isAbort3(error) {
 
 // src/routes/session-artifact-associations.ts
 import {
-  requireAccessGrant as requireAccessGrant50,
+  requireAccessGrant as requireAccessGrant51,
   requirePermission as requirePermission12,
   requireSessionAuthorization as requireSessionAuthorization15,
   SessionAuthorizationDeniedError as SessionAuthorizationDeniedError15,
@@ -112064,23 +112621,23 @@ import {
   transactionallyAuthorizeEditableArtifactActor,
   withRlsContext as withRlsContext3
 } from "@opengeni/db";
-import { HTTPException as HTTPException106 } from "hono/http-exception";
-import { z as z54 } from "zod";
-var SessionId2 = z54.string().uuid();
-var EditableArtifactId = z54.string().regex(/^(?!0{32}$)[0-9a-f]{32}$/u);
+import { HTTPException as HTTPException107 } from "hono/http-exception";
+import { z as z55 } from "zod";
+var SessionId2 = z55.string().uuid();
+var EditableArtifactId = z55.string().regex(/^(?!0{32}$)[0-9a-f]{32}$/u);
 function registerSessionArtifactAssociationRoutes(app, deps) {
   app.get(
     "/v1/workspaces/:workspaceId/sessions/:sessionId/artifact-associations/:artifactId",
     async (context) => {
       const workspaceId = context.req.param("workspaceId");
-      const grant = await requireAccessGrant50(context, deps, workspaceId, "artifacts:read");
+      const grant = await requireAccessGrant51(context, deps, workspaceId, "artifacts:read");
       requirePermission12(grant, "sessions:read");
       const sessionId = context.req.param("sessionId");
       const artifactId2 = context.req.param("artifactId");
       const kind = EditableArtifactId.safeParse(artifactId2).success ? "editable" : SessionId2.safeParse(artifactId2).success ? "site" : null;
       const requestedKind = context.req.query("kind");
       if (!SessionId2.safeParse(sessionId).success || !kind || requestedKind !== void 0 && requestedKind !== kind) {
-        throw new HTTPException106(404, { message: "Artifact association not found" });
+        throw new HTTPException107(404, { message: "Artifact association not found" });
       }
       try {
         return await withAccessGrantSessionRlsContext(deps, grant, async () => {
@@ -112091,7 +112648,7 @@ function registerSessionArtifactAssociationRoutes(app, deps) {
           });
           const scope = { accountId: grant.accountId, workspaceId };
           const linked = kind === "editable" ? await hasEditableArtifactSessionLink2(deps.db, scope, sessionId, artifactId2) : await hasWorkspaceArtifactSessionLink(deps.db, workspaceId, sessionId, artifactId2);
-          if (!linked) throw new HTTPException106(404, { message: "Artifact association not found" });
+          if (!linked) throw new HTTPException107(404, { message: "Artifact association not found" });
           if (kind === "editable") {
             const decision = await withRlsContext3(
               deps.db,
@@ -112104,7 +112661,7 @@ function registerSessionArtifactAssociationRoutes(app, deps) {
               })
             );
             if (!decision.allowed) {
-              throw new HTTPException106(404, { message: "Artifact association not found" });
+              throw new HTTPException107(404, { message: "Artifact association not found" });
             }
           }
           context.header("cache-control", "private, no-store");
@@ -112112,10 +112669,10 @@ function registerSessionArtifactAssociationRoutes(app, deps) {
         });
       } catch (error) {
         if (error instanceof SessionAuthorizationDeniedError15) {
-          throw new HTTPException106(404, { message: "Artifact association not found" });
+          throw new HTTPException107(404, { message: "Artifact association not found" });
         }
         if (error instanceof SessionAuthorizationUnavailableError13) {
-          throw new HTTPException106(503, { message: "Session authorization is unavailable" });
+          throw new HTTPException107(503, { message: "Session authorization is unavailable" });
         }
         throw error;
       }
@@ -112140,7 +112697,7 @@ import {
   workspaceXaiSubscriptionActive as workspaceXaiSubscriptionActive2
 } from "@opengeni/db";
 import {
-  requireAccessGrant as requireAccessGrant51,
+  requireAccessGrant as requireAccessGrant52,
   requireAccessGrantAuthorization as requireAccessGrantAuthorization37,
   fileOwnerContextForAccess as fileOwnerContextForAccess6,
   requireWorkspaceSettingsGrant as requireWorkspaceSettingsGrant6,
@@ -112148,11 +112705,11 @@ import {
   videoGenerationModelSupportsFundingSource,
   videoGenerationCapabilitiesForPolicy
 } from "@opengeni/core";
-import { HTTPException as HTTPException107 } from "hono/http-exception";
+import { HTTPException as HTTPException108 } from "hono/http-exception";
 function registerVideoGenerationRoutes(app, deps) {
   app.get("/v1/workspaces/:workspaceId/video-generation", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant51(c, deps, workspaceId, "workspace:read");
+    const grant = await requireAccessGrant52(c, deps, workspaceId, "workspace:read");
     const [policy, connection, supergrokConfigured] = await Promise.all([
       getWorkspaceVideoGenerationPolicy(deps.db, workspaceId),
       getWorkspaceVercelAiGatewayConnectionMetadata(deps.db, workspaceId),
@@ -112195,14 +112752,14 @@ function registerVideoGenerationRoutes(app, deps) {
       (option) => option.source === payload.fundingSource
     );
     if (payload.enabledModelIds.length > 0 && !selectedFunding?.available) {
-      throw new HTTPException107(422, {
+      throw new HTTPException108(422, {
         message: selectedFunding?.unavailableReason ?? "Video generation funding is unavailable"
       });
     }
     if (payload.enabledModelIds.some(
       (modelId) => !videoGenerationModelSupportsFundingSource(modelId, payload.fundingSource)
     )) {
-      throw new HTTPException107(422, {
+      throw new HTTPException108(422, {
         message: "The selected video model is unavailable for this funding source"
       });
     }
@@ -112216,10 +112773,10 @@ function registerVideoGenerationRoutes(app, deps) {
       return c.json(VideoGenerationPolicy.parse(policy));
     } catch (error) {
       if (error instanceof VideoGenerationConflictError) {
-        throw new HTTPException107(409, { message: error.message });
+        throw new HTTPException108(409, { message: error.message });
       }
       if (error instanceof Error && error.message.startsWith("Unknown video generation model:")) {
-        throw new HTTPException107(422, { message: error.message });
+        throw new HTTPException108(422, { message: error.message });
       }
       throw error;
     }
@@ -112233,7 +112790,7 @@ function registerVideoGenerationRoutes(app, deps) {
       () => getVideoGenerationOperationSummary(deps.db, workspaceId, c.req.param("operationId"))
     );
     if (!summary)
-      throw new HTTPException107(404, {
+      throw new HTTPException108(404, {
         message: "video generation operation not found"
       });
     return c.json(VideoGenerationOperationSummary.parse(summary));
@@ -112290,8 +112847,8 @@ import {
   CanonicalHumanIdentityMutationInFlightError,
   getCanonicalHumanIdentityProjection as getCanonicalHumanIdentityProjection3
 } from "@opengeni/db/canonical-human-identities";
-import { HTTPException as HTTPException110 } from "hono/http-exception";
-import { z as z57 } from "zod";
+import { HTTPException as HTTPException111 } from "hono/http-exception";
+import { z as z58 } from "zod";
 
 // src/routes/managed-sign-in-methods.ts
 import {
@@ -112314,11 +112871,15 @@ import {
 import { getManagedAuthSessionSetSnapshot as getManagedAuthSessionSetSnapshot2 } from "@opengeni/db/managed-auth-session-sets";
 import { getCanonicalHumanIdentityProjection as getCanonicalHumanIdentityProjection2 } from "@opengeni/db/canonical-human-identities";
 import { getCookie as getCookie2 } from "hono/cookie";
-import { HTTPException as HTTPException109 } from "hono/http-exception";
-import { z as z56 } from "zod";
+import { HTTPException as HTTPException110 } from "hono/http-exception";
+import { z as z57 } from "zod";
 
 // src/routes/managed-auth-session-sets.ts
-import { assertManagedUserAdmission as assertManagedUserAdmission2, getManagedSession as getManagedSession3 } from "@opengeni/core";
+import {
+  assertManagedUserAdmission as assertManagedUserAdmission2,
+  getManagedSession as getManagedSession3,
+  withManagedAuthSessionLookup as withManagedAuthSessionLookup2
+} from "@opengeni/core";
 import { randomUUID as randomUUID16 } from "crypto";
 import {
   BeginManagedAuthLoginTransactionRequest,
@@ -112380,13 +112941,13 @@ import {
 } from "@opengeni/db/managed-auth-session-sets";
 import { ensureManagedAccessForUser as ensureManagedAccessForUser2, getSession as getSession10 } from "@opengeni/db";
 import { deleteCookie as deleteCookie3, getCookie, setCookie as setCookie3 } from "hono/cookie";
-import { HTTPException as HTTPException108 } from "hono/http-exception";
-import { z as z55 } from "zod";
-var ManagedAuthSocialStartReceipt = z55.object({
-  version: z55.literal(1),
-  requestDigest: z55.string().regex(/^[0-9a-f]{64}$/u),
-  url: z55.string().url().max(4096),
-  stateCookie: z55.string().min(1).max(4096)
+import { HTTPException as HTTPException109 } from "hono/http-exception";
+import { z as z56 } from "zod";
+var ManagedAuthSocialStartReceipt = z56.object({
+  version: z56.literal(1),
+  requestDigest: z56.string().regex(/^[0-9a-f]{64}$/u),
+  url: z56.string().url().max(4096),
+  stateCookie: z56.string().min(1).max(4096)
 }).strict();
 function registerManagedAuthSessionSetRoutes(app, deps) {
   const noStore = async (context, next) => {
@@ -112407,7 +112968,7 @@ function registerManagedAuthSessionSetRoutes(app, deps) {
   app.use("/v1/auth/session-set/*", noStore);
   app.get("/v1/auth/get-session", async (context) => {
     if (deps.settings.managedAuthSessionSetMode === "legacy") {
-      if (!deps.managedAuth) throw new HTTPException108(404);
+      if (!deps.managedAuth) throw new HTTPException109(404);
       if (deps.settings.allowedUserEmails !== void 0) {
         const session = await getManagedSession3(context, deps.managedAuth, { db: deps.db });
         context.header("cache-control", "no-store");
@@ -112491,10 +113052,12 @@ function registerManagedAuthSessionSetRoutes(app, deps) {
   app.post("/v1/auth/session-set/bootstrap", async (context) => {
     const body3 = await bodyAs(context, BootstrapManagedAuthSessionSetRequest);
     const { authority, actorEpoch } = await requireMutation(context, deps, body3.expectedGeneration);
-    const ambient = await requireAvailable(deps).managedAuth.api.getSession({
-      headers: context.req.raw.headers,
-      returnHeaders: true
-    });
+    const ambient = await withManagedAuthSessionLookup2(
+      () => requireAvailable(deps).managedAuth.api.getSession({
+        headers: context.req.raw.headers,
+        returnHeaders: true
+      })
+    );
     assertManagedUserAdmission2(deps.managedAuth, ambient.response?.user);
     const authSessionId = ambient.response?.session?.id;
     if (typeof authSessionId !== "string") {
@@ -113253,7 +113816,7 @@ function appendCookies(context, cookies) {
   for (const cookie of cookies) context.header("set-cookie", cookie, { append: true });
 }
 function throwHttp(error, context) {
-  if (error instanceof HTTPException108) throw error;
+  if (error instanceof HTTPException109) throw error;
   if (error instanceof ManagedAuthSessionSetGenerationConflictError) {
     throw managedAuthApiError(409, "generation_conflict", { cause: error, retryable: true });
   }
@@ -113322,23 +113885,23 @@ function setCookieHeaders(headers) {
 }
 
 // src/routes/managed-sign-in-methods.ts
-var ConnectState = z56.object({
-  opengeniSignInMethod: z56.object({
-    intentId: z56.string().uuid(),
-    provider: z56.enum(["google", "github"])
+var ConnectState = z57.object({
+  opengeniSignInMethod: z57.object({
+    intentId: z57.string().uuid(),
+    provider: z57.enum(["google", "github"])
   }),
-  link: z56.object({ userId: z56.string().min(1), email: z56.string().email() }),
-  callbackURL: z56.string().url(),
-  errorURL: z56.string().url()
+  link: z57.object({ userId: z57.string().min(1), email: z57.string().email() }),
+  callbackURL: z57.string().url(),
+  errorURL: z57.string().url()
 });
-var ConnectIntent = z56.object({
-  authUserId: z56.string().min(1),
-  authSessionId: z56.string().min(1),
-  expectedIdentityId: z56.string().uuid(),
-  actorFence: z56.object({
-    authorityHash: z56.string().regex(/^[0-9a-f]{64}$/),
-    actorEpoch: z56.string().regex(/^[1-9][0-9]*$/),
-    requestId: z56.string().uuid()
+var ConnectIntent = z57.object({
+  authUserId: z57.string().min(1),
+  authSessionId: z57.string().min(1),
+  expectedIdentityId: z57.string().uuid(),
+  actorFence: z57.object({
+    authorityHash: z57.string().regex(/^[0-9a-f]{64}$/),
+    actorEpoch: z57.string().regex(/^[1-9][0-9]*$/),
+    requestId: z57.string().uuid()
   }).optional()
 });
 async function rows(deps, query) {
@@ -113356,7 +113919,7 @@ async function identity(context, deps) {
 async function admitManagedSignInMutation(context, deps) {
   const origin = deps.settings.publicBaseUrl ? new URL(deps.settings.publicBaseUrl).origin : null;
   if (!origin || context.req.header("origin") !== origin || context.req.header("sec-fetch-site") !== "same-origin" || context.req.header("content-type")?.split(";", 1)[0] !== "application/json") {
-    throw new HTTPException109(403, { message: "Same-origin browser mutation required" });
+    throw new HTTPException110(403, { message: "Same-origin browser mutation required" });
   }
   const authority = getCookie2(context, MANAGED_AUTH_SESSION_SET_COOKIE2);
   if (deps.settings.managedAuthSessionSetMode !== "legacy" && authority) {
@@ -113365,7 +113928,7 @@ async function admitManagedSignInMutation(context, deps) {
       mode: deps.settings.managedAuthSessionSetMode,
       readOnly: true
     });
-    if (!snapshot) throw new HTTPException109(401);
+    if (!snapshot) throw new HTTPException110(401);
     try {
       requireManagedAuthMutationAdmission2({
         request: context.req.raw,
@@ -113375,7 +113938,7 @@ async function admitManagedSignInMutation(context, deps) {
         expectedGeneration: snapshot.projection.generation
       });
     } catch {
-      throw new HTTPException109(403, { message: "Browser session-set CSRF validation failed" });
+      throw new HTTPException110(403, { message: "Browser session-set CSRF validation failed" });
     }
   }
 }
@@ -113413,7 +113976,7 @@ function registerManagedSignInMethodRoutes(app, deps) {
       select u.email, u.email_verified as "emailVerified", s.created_at > clock_timestamp()-interval '5 minutes' as fresh
       from auth_users u join auth_sessions s on s.user_id=u.id where u.id=${actor.authUserId} and s.id=${actor.authSessionId}`
     );
-    if (!user) throw new HTTPException109(401);
+    if (!user) throw new HTTPException110(401);
     const accounts = await rows(
       deps,
       sql`
@@ -113447,11 +114010,11 @@ function registerManagedSignInMethodRoutes(app, deps) {
       const actor = await identity(context, deps);
       const actorFence = getManagedAuthRequestActorLeaseStamp(context.req.raw);
       if (deps.settings.managedAuthSessionSetMode !== "legacy" && !actorFence)
-        throw new HTTPException109(409, { message: "Managed actor fence required" });
+        throw new HTTPException110(409, { message: "Managed actor fence required" });
       const schema = kind === "password" ? ManagedSignInPasswordMutation : ManagedSignInProviderMutation;
       const parsed = schema.safeParse(await context.req.json().catch(() => null));
       if (!parsed.success)
-        throw new HTTPException109(422, { message: "Invalid sign-in method request" });
+        throw new HTTPException110(422, { message: "Invalid sign-in method request" });
       const body3 = parsed.data;
       const currentIdentity = await getCanonicalHumanIdentityProjection2(deps.db, actor.authUserId);
       if (currentIdentity.activeIdentity.id !== body3.expectedIdentityId)
@@ -113466,7 +114029,7 @@ function registerManagedSignInMethodRoutes(app, deps) {
         deps,
         sql`select u.email,s.token from auth_users u join auth_sessions s on s.user_id=u.id where u.id=${actor.authUserId} and s.id=${actor.authSessionId}`
       );
-      if (!user) throw new HTTPException109(401);
+      if (!user) throw new HTTPException110(401);
       const request = {
         kind,
         operationId: body3.operationId,
@@ -113519,7 +114082,7 @@ function registerManagedSignInMethodRoutes(app, deps) {
       if ("provider" in body3) {
         request.provider = body3.provider;
         if (kind === "connect" && !configured(deps, body3.provider))
-          throw new HTTPException109(409, { message: "Sign-in provider is not configured" });
+          throw new HTTPException110(409, { message: "Sign-in provider is not configured" });
       } else {
         const [credential] = await rows(
           deps,
@@ -113600,18 +114163,18 @@ async function handleManagedSignInConnectCallback(context, deps, provider) {
     return null;
   const parsed = ConnectState.safeParse(rawState);
   if (!parsed.success)
-    throw new HTTPException109(403, { message: "Invalid sign-in method OAuth proof" });
+    throw new HTTPException110(403, { message: "Invalid sign-in method OAuth proof" });
   const value = parsed.data, proof = value.opengeniSignInMethod;
   if (proof.provider !== provider || value.callbackURL !== new URL(
     "/settings/security?signInMethod=connected",
     deps.settings.publicBaseUrl
   ).toString() || value.errorURL !== new URL("/settings/security?signInMethod=error", deps.settings.publicBaseUrl).toString())
-    throw new HTTPException109(403);
+    throw new HTTPException110(403);
   const [intent] = await rows(
     deps,
     sql`select value from auth_verifications where identifier=${`managed-sign-in:${proof.intentId}`} and expires_at>clock_timestamp()`
   );
-  if (!intent) throw new HTTPException109(403, { message: "Sign-in method connection expired" });
+  if (!intent) throw new HTTPException110(403, { message: "Sign-in method connection expired" });
   const request = ConnectIntent.parse(JSON.parse(intent.value));
   const authority = getCookie2(context, MANAGED_AUTH_SESSION_SET_COOKIE2);
   if (!request.actorFence) {
@@ -113628,9 +114191,9 @@ async function handleManagedSignInConnectCallback(context, deps, provider) {
     }
   }
   if (request.actorFence && (!authority || managedAuthSha2562(authority) !== request.actorFence.authorityHash))
-    throw new HTTPException109(403);
+    throw new HTTPException110(403);
   if (value.link?.userId !== request.authUserId || value.link?.email === void 0)
-    throw new HTTPException109(403);
+    throw new HTTPException110(403);
   const isolated = await isolatedManagedAuthOAuthCallbackRequest(deps.managedAuth, context.req.raw);
   const response = await runManagedSignInConnect(
     proof.intentId,
@@ -113658,7 +114221,7 @@ async function handleManagedSignInConnectCallback(context, deps, provider) {
 
 // src/routes/canonical-human-identities.ts
 import { managedAuthSecretRequestDigest as managedAuthSecretRequestDigest3 } from "@opengeni/core/managed-auth-session-sets";
-var BindingId = z57.string().uuid();
+var BindingId = z58.string().uuid();
 async function requestIdentity(context, deps) {
   return await requireCanonicalHumanRequestIdentity2(context, {
     db: deps.db,
@@ -113671,13 +114234,13 @@ async function requestIdentity(context, deps) {
 async function parseBody5(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) {
-    throw new HTTPException110(422, { message: "Invalid canonical human identity request" });
+    throw new HTTPException111(422, { message: "Invalid canonical human identity request" });
   }
   return parsed.data;
 }
 function bindingId(context) {
   const parsed = BindingId.safeParse(context.req.param("bindingId"));
-  if (!parsed.success) throw new HTTPException110(422, { message: "Invalid login binding id" });
+  if (!parsed.success) throw new HTTPException111(422, { message: "Invalid login binding id" });
   return parsed.data;
 }
 function identityError(context, error) {
@@ -113708,7 +114271,7 @@ async function mutate(context, deps, input) {
   const identity2 = await requestIdentity(context, deps);
   const actorFence = getManagedAuthRequestActorLeaseStamp2(context.req.raw);
   if (deps.settings.managedAuthSessionSetMode !== "legacy" && !actorFence) {
-    throw new HTTPException110(409, { message: "Managed actor mutation fence is unavailable" });
+    throw new HTTPException111(409, { message: "Managed actor mutation fence is unavailable" });
   }
   try {
     const response = CanonicalHumanIdentityMutationResponse.parse(
@@ -113762,7 +114325,7 @@ function registerCanonicalHumanIdentityRoutes(app, deps) {
   app.post(`${base}/login-bindings`, async (context) => {
     const request = await parseBody5(context, LinkCanonicalHumanLoginBindingRequest);
     if (["google", "github", "credential"].includes(request.providerId.trim().toLowerCase())) {
-      throw new HTTPException110(403, {
+      throw new HTTPException111(403, {
         message: "Use personal sign-in method settings with fresh provider proof"
       });
     }
@@ -113779,7 +114342,7 @@ function registerCanonicalHumanIdentityRoutes(app, deps) {
     if (projection.loginBindings.some(
       (binding) => binding.id === bindingId(context) && ["google", "github", "credential"].includes(binding.providerId)
     )) {
-      throw new HTTPException110(403, {
+      throw new HTTPException111(403, {
         message: "Use personal sign-in method settings with last-method protection"
       });
     }
@@ -113797,7 +114360,7 @@ function registerCanonicalHumanIdentityRoutes(app, deps) {
     if (projection.loginBindings.some(
       (binding) => binding.id === bindingId(context) && ["google", "github", "credential"].includes(binding.providerId)
     )) {
-      throw new HTTPException110(403, {
+      throw new HTTPException111(403, {
         message: "Managed-provider recovery cannot be initiated through raw binding management"
       });
     }
@@ -113895,7 +114458,7 @@ import {
   listOrganizationAdministrationMembers,
   listOrganizationInvitations,
   listSelfOrganizationInvitations,
-  nestedPostgresSqlState as nestedPostgresSqlState15,
+  nestedPostgresSqlState as nestedPostgresSqlState16,
   prepareOrganizationUserSetupDelivery,
   revokeOrganizationInvitation,
   settleOrganizationUserSetupDelivery,
@@ -113908,12 +114471,12 @@ import {
   updateOrganizationPrivateSessionSettings,
   updateOrganizationRetentionPolicy
 } from "@opengeni/db";
-import { HTTPException as HTTPException111 } from "hono/http-exception";
-import { z as z58 } from "zod";
-var OrganizationId2 = z58.string().uuid();
-var WorkspaceId = z58.string().uuid();
-var MembershipId = z58.string().uuid();
-var InvitationId = z58.string().uuid();
+import { HTTPException as HTTPException112 } from "hono/http-exception";
+import { z as z59 } from "zod";
+var OrganizationId2 = z59.string().uuid();
+var WorkspaceId = z59.string().uuid();
+var MembershipId = z59.string().uuid();
+var InvitationId = z59.string().uuid();
 async function requirePrivateSessionAdministrator(context, deps, organizationId2) {
   const agent = agentActingAsPerson(
     context,
@@ -113925,14 +114488,14 @@ async function requirePrivateSessionAdministrator(context, deps, organizationId2
   const access = await requireAccessContext12(context, deps);
   const key = accountScopedApiKeyWorkspaceAuthority8(access);
   if (!key || key.accountId !== organizationId2 || !key.permissions.includes("workspace:admin")) {
-    throw new HTTPException111(403, {
+    throw new HTTPException112(403, {
       message: "organization administration required"
     });
   }
   if (key.permissionMode === "explicit" && !access.accountGrants.some(
     (grant) => grant.accountId === organizationId2 && grant.permissions.includes("account:admin")
   )) {
-    throw new HTTPException111(403, { message: "organization administration requires account:admin" });
+    throw new HTTPException112(403, { message: "organization administration requires account:admin" });
   }
   return { subjectId: access.subjectId };
 }
@@ -113940,25 +114503,25 @@ async function requireOrganizationKeyWorkspaceDeletion(context, deps, organizati
   const access = await requireAccessContext12(context, deps);
   const key = accountScopedApiKeyWorkspaceAuthority8(access);
   if (!key || key.accountId !== organizationId2 || !hasPermission30(key.permissions, "workspace:admin")) {
-    throw new HTTPException111(403, {
+    throw new HTTPException112(403, {
       message: "deleting an organization workspace requires an organization owner session or an organization API key with workspace:admin"
     });
   }
   const workspace = await requireWorkspace4(deps.db, workspaceId).catch(() => null);
   if (!workspace || workspace.accountId !== organizationId2) {
-    throw new HTTPException111(404, { message: "workspace not found" });
+    throw new HTTPException112(404, { message: "workspace not found" });
   }
   if (workspace.kind !== "shared") {
-    throw new HTTPException111(403, {
+    throw new HTTPException112(403, {
       message: "organization API keys cannot delete a Personal workspace"
     });
   }
   if (!organizationWorkspaceInScope3(key.workspaceScope, workspaceId))
-    throw new HTTPException111(403, { message: "workspace is outside organization key scope" });
+    throw new HTTPException112(403, { message: "workspace is outside organization key scope" });
 }
 async function requireManagedHuman(context, deps) {
   if (deps.settings.productAccessMode !== "managed" || !deps.managedAuth || !context.req.header("cookie") || context.req.header("authorization")) {
-    throw new HTTPException111(401, { message: "managed human session required" });
+    throw new HTTPException112(401, { message: "managed human session required" });
   }
   const session = await getManagedSession4(context, deps.managedAuth, {
     db: deps.db,
@@ -113966,7 +114529,7 @@ async function requireManagedHuman(context, deps) {
     sessionSetMode: deps.settings.managedAuthSessionSetMode
   });
   if (!session?.user) {
-    throw new HTTPException111(401, { message: "managed human session required" });
+    throw new HTTPException112(401, { message: "managed human session required" });
   }
   return { session, subjectId: `user:${session.user.id}` };
 }
@@ -113993,14 +114556,14 @@ async function requireOrganizationAdministrator(context, deps, organizationId2)
     );
     return { subjectId };
   }
-  throw new HTTPException111(401, {
+  throw new HTTPException112(401, {
     message: "organization administrator session required"
   });
 }
 async function parseBody6(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) {
-    throw new HTTPException111(422, {
+    throw new HTTPException112(422, {
       message: "invalid organization membership request"
     });
   }
@@ -114008,19 +114571,19 @@ async function parseBody6(context, schema) {
 }
 function parseId(schema, value, label) {
   const parsed = schema.safeParse(value);
-  if (!parsed.success) throw new HTTPException111(422, { message: `invalid ${label}` });
+  if (!parsed.success) throw new HTTPException112(422, { message: `invalid ${label}` });
   return parsed.data;
 }
 function rethrowMembershipError(error, resourceLimitMessage) {
-  const sqlState = nestedPostgresSqlState15(error);
+  const sqlState = nestedPostgresSqlState16(error);
   if (sqlState === "54000" && resourceLimitMessage) {
-    throw new HTTPException111(409, {
+    throw new HTTPException112(409, {
       message: resourceLimitMessage
     });
   }
   const status = organizationMembershipHttpStatus(sqlState);
   if (status !== null) {
-    throw new HTTPException111(status, {
+    throw new HTTPException112(status, {
       message: status === 403 ? "organization administration is not authorized" : status === 404 ? "organization resource not found" : status === 409 ? "organization membership state changed; refresh and retry" : "invalid organization membership operation"
     });
   }
@@ -114060,7 +114623,7 @@ function registerOrganizationMembershipRoutes(app, deps) {
         )
       );
     } catch (error) {
-      if (error instanceof HTTPException111) throw error;
+      if (error instanceof HTTPException112) throw error;
       rethrowMembershipError(error);
     }
   });
@@ -114118,8 +114681,8 @@ function registerOrganizationMembershipRoutes(app, deps) {
         })
       );
     } catch (error) {
-      if (nestedPostgresSqlState15(error) === "42501") {
-        throw new HTTPException111(403, {
+      if (nestedPostgresSqlState16(error) === "42501") {
+        throw new HTTPException112(403, {
           message: "organization membership is not active"
         });
       }
@@ -114130,7 +114693,7 @@ function registerOrganizationMembershipRoutes(app, deps) {
     const { session, subjectId } = await requireManagedHuman(context, deps);
     const query = ListOrganizationInvitationsPageQuery.safeParse(context.req.query());
     if (!query.success) {
-      throw new HTTPException111(422, {
+      throw new HTTPException112(422, {
         message: "invalid organization invitation page"
       });
     }
@@ -114440,7 +115003,7 @@ function registerOrganizationMembershipRoutes(app, deps) {
     try {
       assertOrganizationUserSetupDeliveryConfigured(deps.settings, deps.managedEmailTransport);
     } catch {
-      throw new HTTPException111(503, {
+      throw new HTTPException112(503, {
         message: "invited-user account setup delivery is not configured on this deployment"
       });
     }
@@ -114476,7 +115039,7 @@ function registerOrganizationMembershipRoutes(app, deps) {
         201
       );
     } catch (error) {
-      if (error instanceof HTTPException111) throw error;
+      if (error instanceof HTTPException112) throw error;
       rethrowMembershipError(error);
     }
   });
@@ -114489,7 +115052,7 @@ function registerOrganizationMembershipRoutes(app, deps) {
     );
     const query = ListOrganizationInvitationsPageQuery.safeParse(context.req.query());
     if (!query.success) {
-      throw new HTTPException111(422, {
+      throw new HTTPException112(422, {
         message: "invalid organization invitation page"
       });
     }
@@ -114526,7 +115089,7 @@ function registerOrganizationMembershipRoutes(app, deps) {
       try {
         assertOrganizationUserSetupDeliveryConfigured(deps.settings, deps.managedEmailTransport);
       } catch {
-        throw new HTTPException111(503, {
+        throw new HTTPException112(503, {
           message: "invited-user account setup delivery is not configured on this deployment"
         });
       }
@@ -114573,7 +115136,7 @@ function registerOrganizationMembershipRoutes(app, deps) {
         membership: OrganizationMember.parse(result.membership)
       });
     } catch (error) {
-      if (error instanceof HTTPException111) throw error;
+      if (error instanceof HTTPException112) throw error;
       rethrowMembershipError(error);
     }
   });
@@ -114772,14 +115335,14 @@ import {
   SessionListCursorError as SessionListCursorError2,
   SessionListCursorExpiredError as SessionListCursorExpiredError2
 } from "@opengeni/db";
-import { HTTPException as HTTPException112 } from "hono/http-exception";
-import { z as z59 } from "zod";
+import { HTTPException as HTTPException113 } from "hono/http-exception";
+import { z as z60 } from "zod";
 var ORGANIZATION_SESSION_LIST_MAX_WORKSPACE_READS = 25;
-var OrganizationId3 = z59.string().uuid();
-var OrganizationSessionListCursorEnvelope = z59.object({
-  workspaceId: z59.string().uuid(),
-  cursor: z59.string().min(1).nullable(),
-  pinnedOffset: z59.number().int().nonnegative().max(1e4).optional()
+var OrganizationId3 = z60.string().uuid();
+var OrganizationSessionListCursorEnvelope = z60.object({
+  workspaceId: z60.string().uuid(),
+  cursor: z60.string().min(1).nullable(),
+  pinnedOffset: z60.number().int().nonnegative().max(1e4).optional()
 }).strict();
 function encodeOrganizationSessionListCursor(cursor) {
   return Buffer.from(JSON.stringify(cursor)).toString("base64url");
@@ -114804,7 +115367,7 @@ function requireOrganizationSessionReadAuthority(context, organizationId2) {
     if (authority.accountId === organizationId2 && hasPermission31(authority.permissions, "sessions:read")) {
       return "organization_api_key";
     }
-    throw new HTTPException112(403, { message: "organization session read authority required" });
+    throw new HTTPException113(403, { message: "organization session read authority required" });
   }
   const accountGrant = context.accountGrants.find(
     (candidate) => candidate.accountId === organizationId2
@@ -114812,16 +115375,16 @@ function requireOrganizationSessionReadAuthority(context, organizationId2) {
   if (accountGrant?.permissions.includes("account:admin")) {
     return "account_admin";
   }
-  throw new HTTPException112(403, { message: "organization session read authority required" });
+  throw new HTTPException113(403, { message: "organization session read authority required" });
 }
 function sessionAuthorizationHttpError2(error) {
   if (error instanceof SessionAuthorizationDeniedError16) {
-    return new HTTPException112(404, { message: "session not found" });
+    return new HTTPException113(404, { message: "session not found" });
   }
   if (error instanceof SessionAuthorizationUnavailableError14) {
-    return new HTTPException112(503, { message: "session authorization is unavailable" });
+    return new HTTPException113(503, { message: "session authorization is unavailable" });
   }
-  if (error instanceof HTTPException112) return error;
+  if (error instanceof HTTPException113) return error;
   throw error;
 }
 function compareWorkspaceIds(left, right) {
@@ -114831,7 +115394,7 @@ function registerOrganizationSessionRoutes(app, deps) {
   app.get("/v1/organizations/:organizationId/sessions", async (c) => {
     const organizationIdResult = OrganizationId3.safeParse(c.req.param("organizationId"));
     if (!organizationIdResult.success) {
-      throw new HTTPException112(422, { message: "invalid organization id" });
+      throw new HTTPException113(422, { message: "invalid organization id" });
     }
     const organizationId2 = organizationIdResult.data;
     const context = await requireAccessContext13(c, deps);
@@ -114839,14 +115402,14 @@ function registerOrganizationSessionRoutes(app, deps) {
     const queryResult = ListOrganizationSessionsQuery.safeParse(c.req.query());
     if (!queryResult.success) {
       const issue = queryResult.error.issues[0];
-      throw new HTTPException112(400, {
+      throw new HTTPException113(400, {
         message: issue ? `${issue.path.length > 0 ? `${issue.path.join(".")}: ` : ""}${issue.message}` : "invalid organization session list query"
       });
     }
     const query = queryResult.data;
     const cursor = query.cursor ? decodeOrganizationSessionListCursor(query.cursor) : null;
     if (query.cursor && !cursor) {
-      throw new HTTPException112(400, { message: "cursor is invalid" });
+      throw new HTTPException113(400, { message: "cursor is invalid" });
     }
     const authority = accountScopedApiKeyWorkspaceAuthority9(context);
     const workspaces = (await listSharedWorkspacesForAccount3(deps.db, organizationId2)).filter(
@@ -114918,7 +115481,7 @@ async function listWorkspaceSessionPage(c, deps, input) {
       "sessions:read"
     );
   } catch (error) {
-    if (input.readAuthority === "account_admin" && error instanceof HTTPException112 && error.status === 403) {
+    if (input.readAuthority === "account_admin" && error instanceof HTTPException113 && error.status === 403) {
       return null;
     }
     throw error;
@@ -114932,7 +115495,7 @@ async function listWorkspaceSessionPage(c, deps, input) {
   }
   const cursor = input.innerCursor ? decodeSessionListCursor2(input.innerCursor) : null;
   if (input.innerCursor && !cursor) {
-    throw new HTTPException112(400, { message: "cursor is invalid" });
+    throw new HTTPException113(400, { message: "cursor is invalid" });
   }
   try {
     const list = async (limit) => await listSessionsForSubject2(deps.db, input.workspace.id, {
@@ -114965,13 +115528,13 @@ async function listWorkspaceSessionPage(c, deps, input) {
     return { sessions: withStatus(rows2), nextCursor: page2.nextCursor, nextPinnedOffset };
   } catch (error) {
     if (error instanceof SessionListAccessError2) {
-      throw new HTTPException112(403, { message: error.message });
+      throw new HTTPException113(403, { message: error.message });
     }
     if (error instanceof SessionListCursorExpiredError2) {
-      throw new HTTPException112(410, { message: error.message });
+      throw new HTTPException113(410, { message: error.message });
     }
     if (error instanceof SessionListCursorError2) {
-      throw new HTTPException112(400, { message: error.message });
+      throw new HTTPException113(400, { message: error.message });
     }
     throw error;
   }
@@ -115006,10 +115569,10 @@ import {
   OrganizationRecoveryUnavailableError,
   startOrganizationRecoveryOperation
 } from "@opengeni/db";
-import { HTTPException as HTTPException113 } from "hono/http-exception";
-import { z as z60 } from "zod";
-var OrganizationId4 = z60.string().uuid();
-var RecoveryOperationId = z60.string().uuid();
+import { HTTPException as HTTPException114 } from "hono/http-exception";
+import { z as z61 } from "zod";
+var OrganizationId4 = z61.string().uuid();
+var RecoveryOperationId = z61.string().uuid();
 var productionServices = {
   requireCanonicalHumanRequestIdentity: requireCanonicalHumanRequestIdentity3,
   getManagedAuthRequestActorAdmissionStamp,
@@ -115025,7 +115588,7 @@ var productionServices = {
 };
 async function requireRecoveryIdentity(context, deps, services) {
   if (deps.settings.productAccessMode !== "managed" || !deps.managedAuth || !context.req.header("cookie") || context.req.header("authorization")) {
-    throw new HTTPException113(401, {
+    throw new HTTPException114(401, {
       message: "Managed human authentication required"
     });
   }
@@ -115041,7 +115604,7 @@ async function requireRecoveryIdentity(context, deps, services) {
 async function parseBody7(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) {
-    throw new HTTPException113(422, {
+    throw new HTTPException114(422, {
       message: "Invalid organization recovery request"
     });
   }
@@ -115049,7 +115612,7 @@ async function parseBody7(context, schema) {
 }
 function parseId2(schema, value, label) {
   const parsed = schema.safeParse(value);
-  if (!parsed.success) throw new HTTPException113(422, { message: `Invalid ${label}` });
+  if (!parsed.success) throw new HTTPException114(422, { message: `Invalid ${label}` });
   return parsed.data;
 }
 function organizationId(context) {
@@ -115104,12 +115667,12 @@ function organizationRecoveryHttpError(error) {
 function requireActorFence(context, deps, services) {
   const actorFence = services.getManagedAuthRequestActorLeaseStamp(context.req.raw);
   if (deps.settings.managedAuthSessionSetMode !== "legacy" && !actorFence) {
-    throw new HTTPException113(409, {
+    throw new HTTPException114(409, {
       message: "Managed actor mutation fence is unavailable"
     });
   }
   if (!actorFence) {
-    throw new HTTPException113(409, {
+    throw new HTTPException114(409, {
       message: "Organization recovery requires provider-neutral browser login slots"
     });
   }
@@ -115261,12 +115824,12 @@ import {
   completeSelfServiceOrganizationSetup,
   completeOrganizationUserSetup,
   getSelfServiceOrganizationOnboardingState,
-  nestedPostgresSqlState as nestedPostgresSqlState16,
+  nestedPostgresSqlState as nestedPostgresSqlState17,
   preflightOrganizationUserSetup,
   previewOrganizationUserSetup,
   recordOrganizationSignupUseCase
 } from "@opengeni/db";
-import { HTTPException as HTTPException114 } from "hono/http-exception";
+import { HTTPException as HTTPException115 } from "hono/http-exception";
 var completedSetupReplayPasswordHash = `completed-replay:${"0".repeat(64)}`;
 function registerManagedOnboardingRoutes(app, deps, options = {}) {
   const accountSetupLimiter = options.accountSetupLimiter ?? new PublicSetupRateLimiter();
@@ -115290,7 +115853,7 @@ function registerManagedOnboardingRoutes(app, deps, options = {}) {
     );
     if (!parsed.success) {
       recordOrganizationSetupOutcome(deps.observability, "failed");
-      throw new HTTPException114(422, {
+      throw new HTTPException115(422, {
         message: "invalid organization setup request"
       });
     }
@@ -115319,26 +115882,26 @@ function registerManagedOnboardingRoutes(app, deps, options = {}) {
           useCase: parsed.data.useCase
         }).catch((error) => {
           console.warn("[api] could not record the signup use case", {
-            sqlState: nestedPostgresSqlState16(error) ?? null
+            sqlState: nestedPostgresSqlState17(error) ?? null
           });
         });
       }
       return context.json(completed);
     } catch (error) {
       recordOrganizationSetupOutcome(deps.observability, "failed");
-      const sqlState = nestedPostgresSqlState16(error);
+      const sqlState = nestedPostgresSqlState17(error);
       if (sqlState === "22023") {
-        throw new HTTPException114(422, {
+        throw new HTTPException115(422, {
           message: "invalid organization setup request"
         });
       }
       if (sqlState === "42501") {
-        throw new HTTPException114(403, {
+        throw new HTTPException115(403, {
           message: "verified managed user required"
         });
       }
       if (sqlState === "23505" || sqlState === "55000") {
-        throw new HTTPException114(409, {
+        throw new HTTPException115(409, {
           message: "organization setup is no longer available; refresh to continue"
         });
       }
@@ -115347,14 +115910,14 @@ function registerManagedOnboardingRoutes(app, deps, options = {}) {
   });
   app.post("/v1/auth/organization-setup/preview", async (context) => {
     if (deps.settings.productAccessMode !== "managed" || !deps.managedAuth) {
-      throw new HTTPException114(404, { message: "account setup is unavailable" });
+      throw new HTTPException115(404, { message: "account setup is unavailable" });
     }
     enforceAccountSetupRateLimit(context, deps, accountSetupLimiter);
     const parsed = PreviewOrganizationUserSetupRequest.safeParse(
       await context.req.json().catch(() => null)
     );
     if (!parsed.success) {
-      throw new HTTPException114(422, { message: "invalid account setup preview request" });
+      throw new HTTPException115(422, { message: "invalid account setup preview request" });
     }
     return context.json(
       OrganizationUserSetupPreview.parse(
@@ -115367,14 +115930,14 @@ function registerManagedOnboardingRoutes(app, deps, options = {}) {
   });
   app.post("/v1/auth/organization-setup", async (context) => {
     if (deps.settings.productAccessMode !== "managed" || !deps.managedAuth) {
-      throw new HTTPException114(404, { message: "account setup is unavailable" });
+      throw new HTTPException115(404, { message: "account setup is unavailable" });
     }
     enforceAccountSetupRateLimit(context, deps, accountSetupLimiter);
     const parsed = CompleteOrganizationUserSetupRequest.safeParse(
       await context.req.json().catch(() => null)
     );
     if (!parsed.success) {
-      throw new HTTPException114(422, {
+      throw new HTTPException115(422, {
         message: "invalid account setup request"
       });
     }
@@ -115382,7 +115945,7 @@ function registerManagedOnboardingRoutes(app, deps, options = {}) {
     const tokenDigest = await organizationUserSetupTokenDigest(parsed.data.token);
     const preflight = await preflightOrganizationUserSetup(deps.db, tokenDigest);
     if (preflight === "unavailable") {
-      throw new HTTPException114(404, {
+      throw new HTTPException115(404, {
         message: "account setup link is invalid, expired, or already belongs to an account"
       });
     }
@@ -115406,19 +115969,19 @@ function registerManagedOnboardingRoutes(app, deps, options = {}) {
         )
       );
     } catch (error) {
-      const sqlState = nestedPostgresSqlState16(error);
+      const sqlState = nestedPostgresSqlState17(error);
       if (sqlState === "22023") {
-        throw new HTTPException114(422, {
+        throw new HTTPException115(422, {
           message: "invalid account setup request"
         });
       }
       if (sqlState === "23505") {
-        throw new HTTPException114(409, {
+        throw new HTTPException115(409, {
           message: "account setup request changed; reopen the original link and try again"
         });
       }
       if (sqlState === "P0002" || sqlState === "42501" || sqlState === "55000") {
-        throw new HTTPException114(404, {
+        throw new HTTPException115(404, {
           message: "account setup link is invalid, expired, or already belongs to an account"
         });
       }
@@ -115433,7 +115996,7 @@ function enforceAccountSetupRateLimit(context, deps, limiter) {
   } catch {
   }
   if (!allowed2) {
-    throw new HTTPException114(429, { message: "too many account setup requests; slow down" });
+    throw new HTTPException115(429, { message: "too many account setup requests; slow down" });
   }
 }
 var PublicSetupRateLimiter = class {
@@ -115496,7 +116059,7 @@ function refillSetupRateLimitBucket(bucket, capacity, refillPerSecond, now) {
 }
 async function requireManagedHuman2(context, deps) {
   if (deps.settings.productAccessMode !== "managed" || !deps.managedAuth || !context.req.header("cookie") || context.req.header("authorization")) {
-    throw new HTTPException114(401, { message: "managed human session required" });
+    throw new HTTPException115(401, { message: "managed human session required" });
   }
   const session = await getManagedSession5(context, deps.managedAuth, {
     db: deps.db,
@@ -115504,7 +116067,7 @@ async function requireManagedHuman2(context, deps) {
     sessionSetMode: deps.settings.managedAuthSessionSetMode
   });
   if (!session?.user) {
-    throw new HTTPException114(401, { message: "managed human session required" });
+    throw new HTTPException115(401, { message: "managed human session required" });
   }
   return session;
 }
@@ -115527,26 +116090,26 @@ import {
   SessionAuthorizationUnavailableError as SessionAuthorizationUnavailableError15,
   SessionTenancyManagedHumanRequiredError as SessionTenancyManagedHumanRequiredError3
 } from "@opengeni/core";
-import { nestedPostgresSqlState as nestedPostgresSqlState17, SessionTenancyNotActivatedError as SessionTenancyNotActivatedError3 } from "@opengeni/db";
-import { HTTPException as HTTPException115 } from "hono/http-exception";
-import { z as z61 } from "zod";
+import { nestedPostgresSqlState as nestedPostgresSqlState18, SessionTenancyNotActivatedError as SessionTenancyNotActivatedError3 } from "@opengeni/db";
+import { HTTPException as HTTPException116 } from "hono/http-exception";
+import { z as z62 } from "zod";
 async function body2(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
-  if (!parsed.success) throw new HTTPException115(422, { message: "invalid user-resource request" });
+  if (!parsed.success) throw new HTTPException116(422, { message: "invalid user-resource request" });
   return parsed.data;
 }
 function lifecycleError(error) {
   if (error instanceof SessionAuthorizationDeniedError17 || error instanceof SessionTenancyManagedHumanRequiredError3 || error instanceof SessionTenancyNotActivatedError3) {
-    throw new HTTPException115(403, { message: "user-resource authority denied" });
+    throw new HTTPException116(403, { message: "user-resource authority denied" });
   }
   if (error instanceof SessionAuthorizationUnavailableError15) {
-    throw new HTTPException115(503, { message: "session authorization unavailable" });
+    throw new HTTPException116(503, { message: "session authorization unavailable" });
   }
-  if (nestedPostgresSqlState17(error) === "42501") {
-    throw new HTTPException115(403, { message: "user-resource authority denied" });
+  if (nestedPostgresSqlState18(error) === "42501") {
+    throw new HTTPException116(403, { message: "user-resource authority denied" });
   }
-  if (nestedPostgresSqlState17(error) === "22023") {
-    throw new HTTPException115(422, { message: "invalid user-resource request" });
+  if (nestedPostgresSqlState18(error) === "22023") {
+    throw new HTTPException116(422, { message: "invalid user-resource request" });
   }
   throw error;
 }
@@ -115559,7 +116122,7 @@ function registerUserResourceAuthorityRoutes(app, deps) {
       cursor: context.req.query("cursor"),
       limit: context.req.query("limit")
     });
-    if (!query.success) throw new HTTPException115(422, { message: "explicit scope=user required" });
+    if (!query.success) throw new HTTPException116(422, { message: "explicit scope=user required" });
     const workspaceId = context.req.param("workspaceId");
     const access = await requireAccessGrantAuthorization39(
       context,
@@ -115586,8 +116149,8 @@ function registerUserResourceAuthorityRoutes(app, deps) {
   });
   app.post(`${base}/:authorityId/grants`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const authorityId = z61.string().uuid().safeParse(context.req.param("authorityId"));
-    if (!authorityId.success) throw new HTTPException115(422, { message: "invalid authority id" });
+    const authorityId = z62.string().uuid().safeParse(context.req.param("authorityId"));
+    if (!authorityId.success) throw new HTTPException116(422, { message: "invalid authority id" });
     const request = await body2(context, IssueUserResourceGrantRequest);
     const access = await requireAccessGrantAuthorization39(
       context,
@@ -115615,9 +116178,9 @@ function registerUserResourceAuthorityRoutes(app, deps) {
   });
   app.delete(`${base}/grants/:grantId`, async (context) => {
     const query = RevokeUserResourceGrantQuery.safeParse({ scope: context.req.query("scope") });
-    if (!query.success) throw new HTTPException115(422, { message: "explicit scope=user required" });
-    const grantId = z61.string().uuid().safeParse(context.req.param("grantId"));
-    if (!grantId.success) throw new HTTPException115(422, { message: "invalid grant id" });
+    if (!query.success) throw new HTTPException116(422, { message: "explicit scope=user required" });
+    const grantId = z62.string().uuid().safeParse(context.req.param("grantId"));
+    if (!grantId.success) throw new HTTPException116(422, { message: "invalid grant id" });
     const workspaceId = context.req.param("workspaceId");
     const access = await requireAccessGrantAuthorization39(
       context,
@@ -116205,6 +116768,58 @@ async function exactAvailable(providers, providerId, context) {
   return provider && await provider.available(context) ? provider : null;
 }
 
+// src/integrations/slack-tool-review.ts
+function slackToolReviewCanDecide(review) {
+  return review.detailsAvailable && reviewLines(review).every((line) => line.length <= 2800) && JSON.stringify({
+    title: review.title,
+    account: review.accountLabel,
+    consequence: review.consequence,
+    effects: review.effects,
+    samples: review.samples,
+    fields: review.fields,
+    moreFields: review.moreFields,
+    reason: review.reason
+  }).length <= 6e3;
+}
+function slackToolReviewBlocks(review, privateAudience) {
+  if (!privateAudience || !slackToolReviewCanDecide(review))
+    return [
+      {
+        type: "section",
+        text: {
+          type: "plain_text",
+          text: "An action needs review. Open the task to review its private details."
+        }
+      }
+    ];
+  const lines = reviewLines(review);
+  const blocks = [];
+  let text = "";
+  for (const line of lines) {
+    if (text && text.length + line.length + 1 > 2800) {
+      blocks.push({ type: "section", text: { type: "plain_text", text } });
+      text = "";
+    }
+    text += `${text ? "\n" : ""}${line}`;
+  }
+  if (text) blocks.push({ type: "section", text: { type: "plain_text", text } });
+  return blocks;
+}
+function reviewLines(review) {
+  return [
+    review.title,
+    review.accountLabel,
+    review.consequence,
+    ...review.effects,
+    ...(review.samples ?? []).map(
+      (sample) => [sample.title, sample.subtitle].filter(Boolean).join(" \u2014 ")
+    ),
+    ...review.fields.map((field) => `${field.label}: ${field.preview}`),
+    review.moreFields ? `${review.moreFields} more fields in full details.` : null,
+    review.reason
+  ].filter((line) => Boolean(line));
+}
+
 // src/integrations/slack-interactions.ts
 import { createHash as createHash33, createHmac as createHmac14, timingSafeEqual as timingSafeEqual4 } from "crypto";
 import {
@@ -116254,6 +116869,7 @@ import {
   enqueueSlackAppHomeRefresh,
   enqueueSlackInteractionInbox,
   getConnectionMetadata as getConnectionMetadata14,
+  getToolActionReview as getToolActionReview2,
   getOrCreateSlackInteraction,
   getLatestSessionModelForSubject,
   getSession as getSession11,
@@ -116320,7 +116936,7 @@ import {
   getActorNewSessionModelChoice,
   hasPermission as hasPermission33,
   requireAccessContext as requireAccessContext14,
-  requireAccessGrant as requireAccessGrant52,
+  requireAccessGrant as requireAccessGrant53,
   requireSessionAuthorizationListScope as requireSessionAuthorizationListScope4,
   resolveWorkspaceCatalogSettings as resolveWorkspaceCatalogSettings9
 } from "@opengeni/core";
@@ -116462,7 +117078,7 @@ function otherDeploymentLinkContext(text, webBaseUrl) {
 }
 
 // src/integrations/slack-interactions.ts
-import { HTTPException as HTTPException116 } from "hono/http-exception";
+import { HTTPException as HTTPException117 } from "hono/http-exception";
 
 // src/integrations/slack-mrkdwn.ts
 var PROVIDER_CITATION_TOKEN = /[ \t]*\u{E200}(?:cite|filecite)(?:\u{E202}[^\u{E200}-\u{E202}]*)*\u{E201}/gu;
@@ -117230,14 +117846,14 @@ function registerSlackInteractionRoutes(app, deps) {
     const payload = parseJsonObject(signed.rawBody);
     if (payload.type === "url_verification") {
       const challenge = boundedString(payload.challenge, 512);
-      if (!challenge) throw new HTTPException116(400, { message: "invalid Slack challenge" });
+      if (!challenge) throw new HTTPException117(400, { message: "invalid Slack challenge" });
       return c.json({ challenge });
     }
     const teamId = boundedString(payload.team_id, 64);
-    if (!teamId) throw new HTTPException116(400, { message: "invalid Slack event" });
+    if (!teamId) throw new HTTPException117(400, { message: "invalid Slack event" });
     const installation = await resolveSlackInstallationRoute2(deps.db, teamId);
     if (!installation)
-      throw new HTTPException116(403, {
+      throw new HTTPException117(403, {
         message: "Slack installation unavailable"
       });
     const event = record5(payload.event);
@@ -117280,12 +117896,12 @@ function registerSlackInteractionRoutes(app, deps) {
     const signed = await readSignedSlackRequest(c, deps);
     const form = new URLSearchParams(signed.rawBody);
     if (form.get("command") !== deps.settings.slackCommand) {
-      throw new HTTPException116(400, { message: "invalid Slack command" });
+      throw new HTTPException117(400, { message: "invalid Slack command" });
     }
     const entry2 = normalizedFormInteraction(form, "slash_command");
     const installation = await resolveSlackInstallationRoute2(deps.db, entry2.slackTeamId);
     if (!installation)
-      throw new HTTPException116(403, {
+      throw new HTTPException117(403, {
         message: "Slack installation unavailable"
       });
     if (isSlackInfoCommand(entry2.text)) {
@@ -117322,13 +117938,13 @@ function registerSlackInteractionRoutes(app, deps) {
       const entry2 = normalizedBlockActionInteraction(payload);
       const installation2 = await resolveSlackInstallationRoute2(deps.db, entry2.slackTeamId);
       if (!installation2) {
-        throw new HTTPException116(403, { message: "Slack installation unavailable" });
+        throw new HTTPException117(403, { message: "Slack installation unavailable" });
       }
       await enqueueNormalizedSlackInteraction(deps, installation2, entry2);
       return c.json({ ok: true });
     }
     if (payload.type !== "message_action") {
-      throw new HTTPException116(400, {
+      throw new HTTPException117(400, {
         message: "unsupported Slack interaction"
       });
     }
@@ -117344,13 +117960,13 @@ function registerSlackInteractionRoutes(app, deps) {
     const threadTs = boundedString(message?.thread_ts, 64);
     const text = boundedText(message?.text);
     if (!triggerId || !teamId || !userId || !channelId || !messageTs || !text) {
-      throw new HTTPException116(400, {
+      throw new HTTPException117(400, {
         message: "invalid Slack message shortcut"
       });
     }
     const installation = await resolveSlackInstallationRoute2(deps.db, teamId);
     if (!installation)
-      throw new HTTPException116(403, {
+      throw new HTTPException117(403, {
         message: "Slack installation unavailable"
       });
     await enqueueNormalizedSlackInteraction(deps, installation, {
@@ -117487,7 +118103,7 @@ function registerSlackInteractionRoutes(app, deps) {
   );
   app.get("/v1/workspaces/:workspaceId/members/access-requests/slack", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    await requireAccessGrant52(c, deps, workspaceId, "members:manage");
+    await requireAccessGrant53(c, deps, workspaceId, "members:manage");
     const workspace = await getWorkspace11(deps.db, workspaceId);
     const requests = await listPendingSlackUserLinkAccessRequests(deps.db, workspaceId);
     return c.json(
@@ -117503,7 +118119,7 @@ function registerSlackInteractionRoutes(app, deps) {
     "/v1/workspaces/:workspaceId/members/access-requests/slack/:requestId/approve",
     async (c) => {
       const workspaceId = c.req.param("workspaceId");
-      const grant = await requireAccessGrant52(c, deps, workspaceId, "members:manage");
+      const grant = await requireAccessGrant53(c, deps, workspaceId, "members:manage");
       const payload = await parseRequestJson(c, ApproveSlackUserLinkAccessRequest);
       const requestId = c.req.param("requestId");
       const requestTeam = await slackUserLinkAccessRequestTeam(deps.db, {
@@ -117543,7 +118159,7 @@ function registerSlackInteractionRoutes(app, deps) {
     "/v1/workspaces/:workspaceId/members/access-requests/slack/:requestId/deny",
     async (c) => {
       const workspaceId = c.req.param("workspaceId");
-      const grant = await requireAccessGrant52(c, deps, workspaceId, "members:manage");
+      const grant = await requireAccessGrant53(c, deps, workspaceId, "members:manage");
       const payload = await parseRequestJson(c, SlackUserLinkAccessMutationRequest);
       try {
         const request = await denySlackUserLinkAccessRequest(deps.db, {
@@ -117566,24 +118182,24 @@ function registerSlackInteractionRoutes(app, deps) {
   );
   app.post("/v1/workspaces/:workspaceId/integrations/slack/user-links", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant52(c, deps, workspaceId, "sessions:create");
+    const grant = await requireAccessGrant53(c, deps, workspaceId, "sessions:create");
     const body3 = record5(await c.req.json().catch(() => null));
     const linkToken = boundedString(body3?.linkToken, 2048);
     const signingSecret = deps.settings.slackSigningSecret;
     if (!linkToken || !signingSecret) {
-      throw new HTTPException116(400, {
+      throw new HTTPException117(400, {
         message: "invalid or expired Slack identity link"
       });
     }
     const link = verifySlackUserLinkToken(signingSecret, linkToken);
     if (!link || link.workspaceId !== workspaceId) {
-      throw new HTTPException116(400, {
+      throw new HTTPException117(400, {
         message: "invalid or expired Slack identity link"
       });
     }
     const installation = await resolveSlackLinkTargetInstallation(deps, link, workspaceId);
     if (!installation) {
-      throw new HTTPException116(404, {
+      throw new HTTPException117(404, {
         message: "Slack installation not found"
       });
     }
@@ -117622,9 +118238,9 @@ function registerSlackInteractionRoutes(app, deps) {
     "/v1/workspaces/:workspaceId/integrations/slack/user-links/:slackUserId",
     async (c) => {
       const workspaceId = c.req.param("workspaceId");
-      await requireAccessGrant52(c, deps, workspaceId, "connections:write");
+      await requireAccessGrant53(c, deps, workspaceId, "connections:write");
       const connectionId = boundedString(c.req.query("connectionId"), 64);
-      if (!connectionId) throw new HTTPException116(400, { message: "connectionId is required" });
+      if (!connectionId) throw new HTTPException117(400, { message: "connectionId is required" });
       return c.json({
         deleted: await deleteSlackBotUserLink(
           deps.db,
@@ -117637,9 +118253,9 @@ function registerSlackInteractionRoutes(app, deps) {
   );
   app.get("/v1/workspaces/:workspaceId/integrations/slack/channel-routes", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant52(c, deps, workspaceId, "workspace:admin");
+    const grant = await requireAccessGrant53(c, deps, workspaceId, "workspace:admin");
     const connectionId = boundedString(c.req.query("connectionId"), 64);
-    if (!connectionId) throw new HTTPException116(400, { message: "connectionId is required" });
+    if (!connectionId) throw new HTTPException117(400, { message: "connectionId is required" });
     const routes = await listSlackChannelRoutes(
       deps.db,
       { accountId: grant.accountId, workspaceId },
@@ -117668,7 +118284,7 @@ function registerSlackInteractionRoutes(app, deps) {
   });
   app.put("/v1/workspaces/:workspaceId/integrations/slack/channel-routes", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant52(c, deps, workspaceId, "workspace:admin");
+    const grant = await requireAccessGrant53(c, deps, workspaceId, "workspace:admin");
     const payload = await parseRequestJson(c, UpdateSlackChannelRoutesRequest);
     const home = { accountId: grant.accountId, workspaceId };
     const installation = await listSlackInstallationBindings2(deps.db, home);
@@ -117676,7 +118292,7 @@ function registerSlackInteractionRoutes(app, deps) {
       (candidate) => candidate.connectionId === payload.connectionId
     );
     if (!binding) {
-      throw new HTTPException116(404, { message: "Slack installation not found" });
+      throw new HTTPException117(404, { message: "Slack installation not found" });
     }
     const callerPersonalWorkspaceId = await namedSubjectPersonalWorkspaceId2(deps.db, {
       accountId: grant.accountId,
@@ -117690,12 +118306,12 @@ function registerSlackInteractionRoutes(app, deps) {
         targetWorkspaceId: route2.targetWorkspaceId
       });
       if (!authorized || !hasPermission33(authorized.permissions, "sessions:create")) {
-        throw new HTTPException116(403, {
+        throw new HTTPException117(403, {
           message: `you cannot start work in the workspace chosen for ${route2.slackChannelId}`
         });
       }
       if (callerPersonalWorkspaceId !== null && route2.targetWorkspaceId === callerPersonalWorkspaceId) {
-        throw new HTTPException116(422, {
+        throw new HTTPException117(422, {
           message: `a channel cannot be routed to a personal workspace: work started in ${route2.slackChannelId} would be invisible to everyone else in it`
         });
       }
@@ -117723,9 +118339,9 @@ function registerSlackInteractionRoutes(app, deps) {
   });
   app.get("/v1/workspaces/:workspaceId/integrations/slack/reaction-channels", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant52(c, deps, workspaceId, "workspace:admin");
+    const grant = await requireAccessGrant53(c, deps, workspaceId, "workspace:admin");
     const connectionId = boundedString(c.req.query("connectionId"), 64);
-    if (!connectionId) throw new HTTPException116(400, { message: "connectionId is required" });
+    if (!connectionId) throw new HTTPException117(400, { message: "connectionId is required" });
     const cursor = boundedString(c.req.query("cursor"), 1024);
     const client = await createOpenGeniSlackBotInteractionClient(deps, {
       accountId: grant.accountId,
@@ -118070,6 +118686,15 @@ function startSlackInteractionPump(deps, options = {}) {
       for (let index = 0; index < maxPerTick; index += 1) {
         if (!await drainSlackInteractionsOnce(deps)) break;
       }
+    } catch (error) {
+      try {
+        deps.observability?.error("Slack interaction delivery claim failed", {
+          errorClass: error instanceof Error ? error.name : "SlackInteractionPumpError",
+          errorCode: safeErrorCode(error),
+          origin: "api"
+        });
+      } catch {
+      }
     } finally {
       running = false;
     }
@@ -118684,7 +119309,7 @@ async function processSlackInboxEntry(deps, entry2) {
       { surface: "slack" }
     );
   } catch (error) {
-    if (error instanceof HTTPException116) {
+    if (error instanceof HTTPException117) {
       await client.postMessage({
         operationId: deterministicUuid2(`slack-admission-failed:${interaction.id}`),
         ...routePolicy.directMessageShortcut ? { userId: entry2.slackUserId } : {
@@ -119220,7 +119845,7 @@ async function processSlackReactionInboxEntry(deps, entry2) {
     );
     await acceptSlackReactionTask(deps, grant, session.id, preparedEntry, preparedTask.resources);
   } catch (error) {
-    if (error instanceof HTTPException116) {
+    if (error instanceof HTTPException117) {
       await client.postMessage({
         operationId: deterministicUuid2(`slack-reaction-admission-failed:${interaction.id}`),
         channelId: entry2.slackChannelId,
@@ -119671,7 +120296,7 @@ async function withSlackAllowanceAdmissionNotice(deps, entry2, destination, admi
   try {
     await admit();
   } catch (error) {
-    if (error instanceof HTTPException116 && (parseAllowanceExhaustedRefusal2(error.cause) ?? parseAllowanceExhaustedRefusal2(error))) {
+    if (error instanceof HTTPException117 && (parseAllowanceExhaustedRefusal2(error.cause) ?? parseAllowanceExhaustedRefusal2(error))) {
       const client = await createOpenGeniSlackBotInteractionClient(deps, {
         accountId: entry2.accountId,
         workspaceId: entry2.workspaceId,
@@ -120010,7 +120635,7 @@ async function executeSlackAction(deps, grant, interaction, handle) {
     });
     return {
       result: decision === "approve" ? "approved" : "rejected",
-      text: `${mention}${decision === "approve" ? "Approved once" : "Rejected"}. OpenGeni will continue from the durable task state.`
+      text: `${mention}${decision === "approve" ? "Approved. Waiting to run." : "Declined. This action will not run."} ${openSessionText(deps, interaction.workspaceId, handle.sessionId)}`
     };
   }
   if (handle.actionKind === "human_input_select" || handle.actionKind === "human_input_skip") {
@@ -120307,7 +120932,7 @@ function slackApprovalSummaries(payload) {
     return id ? { id, name: name ?? "OpenGeni action" } : null;
   }).filter((approval) => approval !== null).slice(0, MAX_SLACK_APPROVALS_PER_CARD);
 }
-async function slackApprovalCard(deps, interaction, event, mention, requesterAuthorized) {
+async function legacySlackApprovalCard(deps, interaction, event, mention, requesterAuthorized) {
   const operationId = deterministicUuid2(
     slackPostSeed(interaction, `slack-delivery:${interaction.id}:${event.sequence}:approval`)
   );
@@ -120380,6 +121005,94 @@ ${approval.name}` }
     operationId
   };
 }
+async function slackApprovalCard(deps, interaction, event, mention, requesterAuthorized) {
+  const operationId = deterministicUuid2(
+    slackPostSeed(interaction, `slack-delivery:${interaction.id}:${event.sequence}:approval`)
+  );
+  const approvals = slackApprovalSummaries(event.payload);
+  const link = interaction.sessionId ? slackSessionUrl(deps, interaction.workspaceId, interaction.sessionId) : null;
+  const fallback = `${mention}An action needs review.${link ? ` <${link}|Open the task to review>` : " Open the task to review it."}`;
+  const privateAudience = requesterAuthorized && interaction.visibility === "private" && interaction.slackChannelId.startsWith("D");
+  if (!privateAudience || !interaction.sessionId || !interaction.initiatingSlackUserId || approvals.length === 0)
+    return { text: fallback, operationId };
+  const reviews = await Promise.all(
+    approvals.map(
+      (approval) => getToolActionReview2(deps.db, {
+        accountId: interaction.accountId,
+        workspaceId: interaction.workspaceId,
+        sessionId: interaction.sessionId,
+        approvalId: approval.id
+      })
+    )
+  );
+  const reviewById = new Map(
+    reviews.flatMap((review) => review ? [[review.id, review]] : [])
+  );
+  const actionable = approvals.filter((approval) => {
+    const review = reviewById.get(approval.id);
+    return review && slackToolReviewCanDecide(review);
+  });
+  const specs = actionable.flatMap((approval) => [
+    {
+      actionKind: "approval_approve",
+      actionKey: `approval:${approval.id}:approve`,
+      targetId: approval.id
+    },
+    {
+      actionKind: "approval_reject",
+      actionKey: `approval:${approval.id}:reject`,
+      targetId: approval.id
+    }
+  ]).slice(0, MAX_SLACK_ACTIONS_PER_CARD);
+  const handles = specs.length ? await reserveSlackInteractionActionHandles(deps.db, {
+    interaction,
+    sessionEventSequence: event.sequence,
+    messageOperationId: operationId,
+    expiresAt: new Date(Date.now() + SLACK_ACTION_TTL_MS),
+    actions: specs
+  }) : [];
+  const byKey = new Map(handles.map((handle) => [handle.actionKey, handle]));
+  const blocks = [];
+  for (const approval of approvals) {
+    const approve = byKey.get(`approval:${approval.id}:approve`);
+    const reject = byKey.get(`approval:${approval.id}:reject`);
+    const review = reviewById.get(approval.id);
+    if (!review) continue;
+    blocks.push(...slackToolReviewBlocks(review, privateAudience));
+    if (approve && reject) {
+      blocks.push({
+        type: "actions",
+        block_id: `opengeni_approval_${event.sequence}_${blocks.length}`,
+        elements: [
+          {
+            type: "button",
+            action_id: SLACK_ACTION_ID_BY_KIND.approval_approve,
+            value: approve.id,
+            text: { type: "plain_text", text: review.approveLabel.slice(0, 75), emoji: true },
+            style: "primary"
+          },
+          {
+            type: "button",
+            action_id: SLACK_ACTION_ID_BY_KIND.approval_reject,
+            value: reject.id,
+            text: { type: "plain_text", text: "Decline", emoji: true }
+          }
+        ]
+      });
+    }
+  }
+  return {
+    text: fallback,
+    blocks: [
+      {
+        type: "section",
+        text: { type: "mrkdwn", text: fallback }
+      },
+      ...blocks
+    ],
+    operationId
+  };
+}
 async function slackSharedResultPublicationBlocks(deps, interaction, event, requesterAuthorized, messageOperationId) {
   if (!safePayloadText(event.payload, "output").trim()) return [];
   if (!requesterAuthorized || !interaction.sessionId || !interaction.initiatingSlackUserId) {
@@ -120677,15 +121390,42 @@ async function deliverSlackSessionEvents(deps, interaction, claimHolderId) {
         requester.mention,
         requester.authorized
       );
-      await postDelivery(
-        client,
-        interaction,
-        event,
-        card.text,
-        "approval",
-        card.operationId,
-        card.blocks
-      );
+      try {
+        await postDelivery(
+          client,
+          interaction,
+          event,
+          card.text,
+          "approval",
+          card.operationId,
+          card.blocks
+        );
+      } catch (error) {
+        if (!(error instanceof SlackBotOperationConflictError)) throw error;
+        const prior = await getSlackBotPostOperation2(
+          deps.db,
+          interaction.workspaceId,
+          interaction.connectionId,
+          card.operationId
+        );
+        if (prior?.status === "completed") continue;
+        const legacy = await legacySlackApprovalCard(
+          deps,
+          interaction,
+          event,
+          requester.mention,
+          requester.authorized
+        );
+        await postDelivery(
+          client,
+          interaction,
+          event,
+          legacy.text,
+          "approval",
+          legacy.operationId,
+          legacy.blocks
+        );
+      }
     } else if (event.type === "session.humanInput.requested") {
       const card = await slackHumanInputCard(
         deps,
@@ -120926,12 +121666,12 @@ async function enqueueNormalizedSlackInteraction(deps, route2, entry2) {
 async function readSignedSlackRequest(c, deps) {
   const signingSecret = deps.settings.slackSigningSecret;
   if (!signingSecret)
-    throw new HTTPException116(503, {
+    throw new HTTPException117(503, {
       message: "Slack interactions are disabled"
     });
   const rawBytes = new Uint8Array(await c.req.raw.arrayBuffer());
   if (rawBytes.byteLength === 0 || rawBytes.byteLength > SLACK_INTERACTION_MAX_BODY_BYTES) {
-    throw new HTTPException116(rawBytes.byteLength > SLACK_INTERACTION_MAX_BODY_BYTES ? 413 : 400, {
+    throw new HTTPException117(rawBytes.byteLength > SLACK_INTERACTION_MAX_BODY_BYTES ? 413 : 400, {
       message: "invalid Slack request body"
     });
   }
@@ -120944,7 +121684,7 @@ async function readSignedSlackRequest(c, deps) {
     },
     signingSecret
   )) {
-    throw new HTTPException116(401, { message: "invalid Slack signature" });
+    throw new HTTPException117(401, { message: "invalid Slack signature" });
   }
   return { rawBody };
 }
@@ -120955,7 +121695,7 @@ function normalizedFormInteraction(form, triggerKind) {
   const triggerId = boundedString(form.get("trigger_id"), 256);
   const text = boundedText(form.get("text"));
   if (!teamId || !userId || !channelId || !triggerId || !text) {
-    throw new HTTPException116(400, { message: "invalid Slack command payload" });
+    throw new HTTPException117(400, { message: "invalid Slack command payload" });
   }
   return {
     providerEventId: `command:${triggerId}`,
@@ -120998,7 +121738,7 @@ function normalizedBlockActionInteraction(payload) {
   const actionId = boundedString(action?.action_id, 128);
   const handleId = boundedString(action?.value, 64);
   if (!teamId || !userId || !channelId || !messageTs || !actionTs || !actionId || !SLACK_BLOCK_ACTION_IDS.has(actionId) || !handleId || !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(handleId) || !Array.isArray(payload.actions) || payload.actions.length !== 1) {
-    throw new HTTPException116(400, { message: "invalid Slack block action" });
+    throw new HTTPException117(400, { message: "invalid Slack block action" });
   }
   const identity2 = createHash33("sha256").update([teamId, userId, channelId, messageTs, actionTs, actionId, handleId].join("\n")).digest("hex");
   return {
@@ -121199,29 +121939,29 @@ function linkUrl(deps, entry2, mintedAtMs) {
 }
 async function requireManagedSlackLinkHuman(c, deps) {
   if (c.req.header("authorization")) {
-    throw new HTTPException116(401, { message: "managed browser sign-in required" });
+    throw new HTTPException117(401, { message: "managed browser sign-in required" });
   }
   const context = await requireAccessContext14(c, deps);
   if (context.mode !== "managed" || !context.subjectId.startsWith("user:")) {
-    throw new HTTPException116(403, { message: "managed browser sign-in required" });
+    throw new HTTPException117(403, { message: "managed browser sign-in required" });
   }
   return context;
 }
 function freshSlackLinkRequired() {
-  return new HTTPException116(400, {
+  return new HTTPException117(400, {
     message: "This Slack link is invalid or expired. Request a fresh link from Slack."
   });
 }
 function slackLinkAccessHttpError(error) {
-  if (error instanceof HTTPException116) return error;
+  if (error instanceof HTTPException117) return error;
   if (!(error instanceof SlackUserLinkAccessPersistenceError)) throw error;
   if (error.code === "version_conflict" || error.code === "idempotency_conflict") {
-    return new HTTPException116(409, {
+    return new HTTPException117(409, {
       message: "The Slack access request changed. Refresh and try again."
     });
   }
   if (error.code === "state_conflict") {
-    return new HTTPException116(409, {
+    return new HTTPException117(409, {
       message: "This Slack link is no longer pending. Request a fresh link from Slack."
     });
   }
@@ -121289,7 +122029,7 @@ function parseJsonObject(value) {
     if (result) return result;
   } catch {
   }
-  throw new HTTPException116(400, { message: "invalid Slack JSON payload" });
+  throw new HTTPException117(400, { message: "invalid Slack JSON payload" });
 }
 function record5(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -121319,7 +122059,7 @@ function safeErrorCode(error) {
   if (error instanceof SlackBotProviderError) return error.code.slice(0, 128);
   if (error instanceof SlackInteractionPermanentError) return error.code.slice(0, 128);
   if (error instanceof SlackInteractionRetryableError) return error.code.slice(0, 128);
-  if (error instanceof HTTPException116) return `http_${error.status}`;
+  if (error instanceof HTTPException117) return `http_${error.status}`;
   const raw = error instanceof Error ? error.name : "slack_interaction_error";
   return raw.toLowerCase().replace(/[^a-z0-9_-]/g, "_").slice(0, 128) || "error";
 }
@@ -121351,7 +122091,7 @@ var SlackInteractionRetryableError = class extends Error {
   }
 };
 function permanentSlackInteractionError(error) {
-  return error instanceof SlackInteractionPermanentError || error instanceof HTTPException116;
+  return error instanceof SlackInteractionPermanentError || error instanceof HTTPException117;
 }
 var PERMANENT_SLACK_DELIVERY_CODES = /* @__PURE__ */ new Set([
   "account_inactive",
@@ -121462,7 +122202,7 @@ function createAppComposition(deps) {
       authoritySubjectId
     }) => {
       if (!objectStorage) {
-        throw new HTTPException117(503, {
+        throw new HTTPException118(503, {
           message: "object storage is not configured"
         });
       }
@@ -121828,7 +122568,7 @@ function createAppComposition(deps) {
       } catch (error) {
         if (error instanceof ManagedAuthActorChangeError2) {
           c.header("x-opengeni-actor-state", "changed");
-          throw new HTTPException117(409, { message: error.code, cause: error });
+          throw new HTTPException118(409, { message: error.code, cause: error });
         }
         if (error instanceof ManagedAuthActorLeaseOutcomeUnknownError) {
           throw new ApiHttpError(503, {
@@ -121918,7 +122658,7 @@ function createAppComposition(deps) {
           deps.settings.publicBaseUrl
         );
         if (!attempt || !authority || attempt.authorityHash !== managedAuthSha2563(authority)) {
-          throw new HTTPException117(409, { message: "provider_route_blocked" });
+          throw new HTTPException118(409, { message: "provider_route_blocked" });
         }
         const isolated = await isolatedManagedAuthOAuthCallbackRequest(managedAuth, c.req.raw);
         preserveCookieNames = [isolated.stateCookieName];
@@ -122065,7 +122805,7 @@ function createAppComposition(deps) {
     let modelSelectionForbidden = false;
     const requestedWorkspaceId = c.req.query("workspaceId");
     if (requestedWorkspaceId !== void 0 && requestedWorkspaceId.trim() === "") {
-      throw new HTTPException117(422, { message: "workspaceId must not be empty" });
+      throw new HTTPException118(422, { message: "workspaceId must not be empty" });
     }
     const callerScoped = requestedWorkspaceId !== void 0 || deps.settings.productAccessMode !== "managed" || c.req.header("authorization") !== void 0 || // Browser bootstrap precedes session-set reconciliation. A cookie alone
     // cannot scope this public read (broker/changed actors need an epoch).
@@ -122075,13 +122815,13 @@ function createAppComposition(deps) {
       try {
         context = await requireAccessContext15(c, routeDeps);
       } catch (error) {
-        if (!(error instanceof HTTPException117 && error.status === 401) || requestedWorkspaceId !== void 0 || c.req.header("authorization") !== void 0 || c.req.header("x-opengeni-actor-epoch") !== void 0 || c.req.header("x-opengeni-external-actor") !== void 0) {
+        if (!(error instanceof HTTPException118 && error.status === 401) || requestedWorkspaceId !== void 0 || c.req.header("authorization") !== void 0 || c.req.header("x-opengeni-actor-epoch") !== void 0 || c.req.header("x-opengeni-external-actor") !== void 0) {
           throw error;
         }
       }
       const workspaceId = requestedWorkspaceId ?? context?.defaultWorkspaceId;
       if (context && workspaceId) {
-        const grant = await requireAccessGrant53(c, routeDeps, workspaceId);
+        const grant = await requireAccessGrant54(c, routeDeps, workspaceId);
         await withAccessGrantSessionRlsContext(routeDeps, grant, async () => {
           catalogSettings = (await resolveWorkspaceCatalogSettings10(deps.db, deps.settings, {
             accountId: grant.accountId,
@@ -122196,7 +122936,7 @@ function createAppComposition(deps) {
       boundedRequest = await boundedMcpRequest(c.req.raw);
     } catch (error) {
       if (error instanceof McpPayloadTooLargeError) {
-        throw new HTTPException117(413, { message: "MCP request body exceeds the safety limit" });
+        throw new HTTPException118(413, { message: "MCP request body exceeds the safety limit" });
       }
       throw error;
     }
@@ -122219,7 +122959,7 @@ function createAppComposition(deps) {
         const context = await requireAccessContext15(c, routeDeps);
         const authorization = c.req.header("authorization");
         if (!accountScopedApiKeyWorkspaceAuthority10(context) || !authorization) {
-          throw new HTTPException117(403, {
+          throw new HTTPException118(403, {
             message: "Connect with Opengeni sign-in or an organization API key."
           });
         }
@@ -122230,13 +122970,32 @@ function createAppComposition(deps) {
         };
       }
     } catch (error) {
-      if (error instanceof HTTPException117 && error.status === 401) challenge();
+      if (error instanceof HTTPException118 && error.status === 401) challenge();
       throw error;
     }
+    if (c.req.method === "GET") {
+      const version2 = c.req.header("mcp-protocol-version");
+      if (version2 && !SUPPORTED_PROTOCOL_VERSIONS.includes(version2)) {
+        return c.json(
+          {
+            jsonrpc: "2.0",
+            id: null,
+            error: { code: -32e3, message: "Unsupported protocol version." }
+          },
+          400
+        );
+      }
+      return c.json(
+        { jsonrpc: "2.0", id: null, error: { code: -32e3, message: "Method not allowed." } },
+        405,
+        { allow: "POST" }
+      );
+    }
     const transport = new WebStandardStreamableHTTPServerTransport3({ enableJsonResponse: true });
     const mcp = buildOrganizationMcpServer({
       caller,
       origin: new URL(c.req.url).origin,
+      publicOrigin: canonicalPublicOrigin3(deps.settings.publicBaseUrl),
       dispatch: async (request) => await app.fetch(request, c.env),
       signal: c.req.raw.signal
     });
@@ -122250,7 +123009,7 @@ function createAppComposition(deps) {
   app.use("/v1/workspaces/:workspaceId/*", async (c, next) => {
     const workspaceId = c.req.param("workspaceId");
     if (workspaceRequestRequiresCodexAccountPrevalidation(c.req.raw)) {
-      const grant2 = await requireAccessGrant53(c, routeDeps, workspaceId);
+      const grant2 = await requireAccessGrant54(c, routeDeps, workspaceId);
       await validateCodexAccountTarget(c.req.raw);
       await withAccessGrantSessionRlsContext(routeDeps, grant2, next);
       return;
@@ -122260,7 +123019,7 @@ function createAppComposition(deps) {
       return;
     }
     const permission = c.req.method === "PUT" && /^\/v1\/workspaces\/[^/]+\/artifact-catalog\/[^/]+\/[^/]+\/pin$/.test(c.req.path) ? "artifacts:publish" : void 0;
-    const grant = await requireAccessGrant53(c, routeDeps, workspaceId, permission);
+    const grant = await requireAccessGrant54(c, routeDeps, workspaceId, permission);
     await withAccessGrantSessionRlsContext(routeDeps, grant, next);
   });
   app.all("/v1/workspaces/:workspaceId/mcp", async (c) => {
@@ -122288,7 +123047,7 @@ function createAppComposition(deps) {
       boundedRequest = await boundedMcpRequest(c.req.raw);
     } catch (error) {
       if (error instanceof McpPayloadTooLargeError) {
-        throw new HTTPException117(413, {
+        throw new HTTPException118(413, {
           message: "MCP request body exceeds the safety limit"
         });
       }
@@ -122298,7 +123057,7 @@ function createAppComposition(deps) {
     try {
       oauthAccess = await resolveMcpOAuthRouteAccess(routeDeps, c.req.raw, workspaceId);
     } catch (error) {
-      if (error instanceof HTTPException117 && error.status === 401) {
+      if (error instanceof HTTPException118 && error.status === 401) {
         c.header(
           "www-authenticate",
           mcpOAuthAuthenticateHeader(routeDeps, new URL(c.req.url).pathname)
@@ -122334,7 +123093,7 @@ function createAppComposition(deps) {
     try {
       authorization = await requireMcpAccessGrantAuthorization(c, routeDeps, workspaceId);
     } catch (error) {
-      if (deps.settings.mcpOauthEnabled && error instanceof HTTPException117 && error.status === 401) {
+      if (deps.settings.mcpOauthEnabled && error instanceof HTTPException118 && error.status === 401) {
         c.header(
           "www-authenticate",
           mcpOAuthAuthenticateHeader(routeDeps, new URL(c.req.url).pathname)
@@ -122355,10 +123114,10 @@ function createAppComposition(deps) {
             });
           } catch (error) {
             if (error instanceof SessionAuthorizationDeniedError18) {
-              throw new HTTPException117(404, { message: "session not found" });
+              throw new HTTPException118(404, { message: "session not found" });
             }
             if (error instanceof SessionAuthorizationUnavailableError16) {
-              throw new HTTPException117(503, {
+              throw new HTTPException118(503, {
                 message: "session authorization is unavailable"
               });
             }
@@ -122440,7 +123199,7 @@ function createAppComposition(deps) {
     const grant = authorization.grant;
     const parsed = ToolGatewayCallRequest2.safeParse(await c.req.json().catch(() => null));
     if (!parsed.success) {
-      throw new HTTPException117(400, { message: "Invalid tool gateway call" });
+      throw new HTTPException118(400, { message: "Invalid tool gateway call" });
     }
     const prepared = await prepareWorkspaceToolGateway(routeDeps, authorization);
     try {
@@ -122468,7 +123227,7 @@ function createAppComposition(deps) {
     );
     const parsed = ToolGatewayApprovalRequest2.safeParse(await c.req.json().catch(() => null));
     if (!parsed.success) {
-      throw new HTTPException117(400, { message: "Invalid tool gateway approval" });
+      throw new HTTPException118(400, { message: "Invalid tool gateway approval" });
     }
     const prepared = await prepareWorkspaceToolGateway(routeDeps, authorization);
     try {
@@ -122505,7 +123264,7 @@ function createAppComposition(deps) {
   });
   app.all("/v1/workspaces/:workspaceId/codemode/sdk/*", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant53(c, routeDeps, workspaceId);
+    const grant = await requireAccessGrant54(c, routeDeps, workspaceId);
     const url = new URL(c.req.url);
     const prefix2 = `/v1/workspaces/${workspaceId}/codemode/sdk`;
     let forwarded;
@@ -122523,9 +123282,9 @@ function createAppComposition(deps) {
   });
   app.get("/v1/workspaces/:workspaceId/codemode/catalog", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant53(c, routeDeps, workspaceId);
+    const grant = await requireAccessGrant54(c, routeDeps, workspaceId);
     if (!isCodemodeGrant(grant)) {
-      throw new HTTPException117(403, { message: "Codemode access denied" });
+      throw new HTTPException118(403, { message: "Codemode access denied" });
     }
     try {
       return c.json((await requireActiveCodemodeCatalog(routeDeps, grant)).catalog);
@@ -122535,13 +123294,13 @@ function createAppComposition(deps) {
   });
   app.post("/v1/workspaces/:workspaceId/codemode/calls", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant53(c, routeDeps, workspaceId);
+    const grant = await requireAccessGrant54(c, routeDeps, workspaceId);
     if (!isCodemodeGrant(grant)) {
-      throw new HTTPException117(403, { message: "Codemode access denied" });
+      throw new HTTPException118(403, { message: "Codemode access denied" });
     }
     const parsed = CodemodeCallRequest2.safeParse(await c.req.json().catch(() => null));
     if (!parsed.success) {
-      throw new HTTPException117(400, { message: "Invalid Codemode call" });
+      throw new HTTPException118(400, { message: "Invalid Codemode call" });
     }
     try {
       const submission = await submitAndDispatchCodemodeCall(routeDeps, grant, parsed.data);
@@ -122555,19 +123314,21 @@ function createAppComposition(deps) {
   });
   app.get("/v1/workspaces/:workspaceId/codemode/calls/:operationId", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const grant = await requireAccessGrant53(c, routeDeps, workspaceId);
+    const grant = await requireAccessGrant54(c, routeDeps, workspaceId);
     if (!isCodemodeGrant(grant)) {
-      throw new HTTPException117(403, { message: "Codemode access denied" });
+      throw new HTTPException118(403, { message: "Codemode access denied" });
     }
     try {
-      const operation = await readCodemodeOperation(routeDeps, grant, c.req.param("operationId"));
+      const operation = await readCodemodeOperation(routeDeps, grant, c.req.param("operationId"), {
+        durableApproval: c.req.header("x-opengeni-codemode-capabilities") === "durable-approval-v1"
+      });
       if (!operation)
-        throw new HTTPException117(404, {
+        throw new HTTPException118(404, {
           message: "Codemode operation not found"
         });
       return c.json(operation);
     } catch (error) {
-      if (error instanceof HTTPException117) throw error;
+      if (error instanceof HTTPException118) throw error;
       throw codemodeHttpError(error);
     }
   });
@@ -122595,6 +123356,7 @@ function createAppComposition(deps) {
   registerCompanyProfileRoutes(app, routeDeps);
   registerCompanyBrainRoutes(app, routeDeps);
   registerSlackTaskPolicyRoutes(app, routeDeps);
+  registerSlackBotAccessRoutes(app, routeDeps);
   registerWorkspaceStateRoutes(app, routeDeps);
   registerMemorySlackPublicationRoutes(app, routeDeps);
   registerWorkspaceArtifactRoutes(app, routeDeps);
@@ -122666,7 +123428,7 @@ function createAppComposition(deps) {
     }
     const importErrorResponse = archivedSessionImportErrorResponse(c, rawError);
     if (importErrorResponse) return importErrorResponse;
-    const error = rawError instanceof OrganizationIntegrationDeniedError4 ? new HTTPException117(403, { message: rawError.message }) : allowanceExhaustedHttpError(rawError) ?? workspaceControlBusyHttpError(rawError) ?? scheduledTaskTargetAccessHttpError(rawError) ?? agentConfigHttpError(rawError) ?? modelUnavailableHttpError(rawError) ?? (rawError instanceof UnsupportedLatencyModeError2 ? new ApiHttpError(422, {
+    const error = rawError instanceof OrganizationIntegrationDeniedError4 ? new HTTPException118(403, { message: rawError.message }) : allowanceExhaustedHttpError(rawError) ?? workspaceControlBusyHttpError(rawError) ?? scheduledTaskTargetAccessHttpError(rawError) ?? agentConfigHttpError(rawError) ?? modelUnavailableHttpError(rawError) ?? (rawError instanceof UnsupportedLatencyModeError2 ? new ApiHttpError(422, {
       code: "validation_failed",
       message: rawError.message,
       retryable: false,
@@ -122677,12 +123439,15 @@ function createAppComposition(deps) {
         latencyMode: rawError.latencyMode,
         allowedLatencyModes: [...rawError.allowedLatencyModes]
       }
-    }) : null) ?? requestBodyValidationHttpError(rawError) ?? invalidPathIdentifierHttpError(rawError, new URL(c.req.url).pathname) ?? rawError;
+    }) : null) ?? requestBodyValidationHttpError(rawError) ?? invalidPathIdentifierHttpError(rawError, new URL(c.req.url).pathname) ?? databaseUnavailableHttpError(rawError, c.req.method) ?? rawError;
     const compactionLock = codexCompactionV2ProviderLockedError(error);
     const apiError = error instanceof ApiHttpError ? error : null;
     const status = compactionLock ? 422 : httpStatusForError(error);
     const code = compactionLock ? compactionLock.code : apiError?.code ?? errorCodeForStatus(status);
     if (status >= 500) logHttpFailure(c, status, code, rawError);
+    if (apiError?.details?.code === DATABASE_UNAVAILABLE_ERROR_DETAIL_CODE) {
+      c.header("retry-after", "1");
+    }
     const envelope = ErrorEnvelope.parse({
       error: {
         status,
@@ -122704,7 +123469,7 @@ function managedAuthOAuthCallbackProvider(pathname) {
 }
 function mutationOutcomeUnknown(error, method) {
   if (method === "GET" || method === "HEAD" || method === "OPTIONS") return false;
-  const cause = error instanceof HTTPException117 ? error.cause : error;
+  const cause = error instanceof HTTPException118 ? error.cause : error;
   return cause instanceof BrowserControlTransportError5 || cause instanceof BrowserControlProtocolError3;
 }
 function appendVary(current, value) {
@@ -122740,7 +123505,7 @@ function workspaceRequestRequiresCodexAccountPrevalidation(request) {
 async function validateCodexAccountTarget(request) {
   const body3 = await request.clone().json().catch(() => null);
   if (typeof body3?.target !== "string" || body3.target.length === 0) {
-    throw new HTTPException117(400, {
+    throw new HTTPException118(400, {
       message: 'target is required ("auto" or an account id)'
     });
   }
@@ -122895,23 +123660,23 @@ function assertConfiguredCodemodeSessionProxyPath(session, path, method) {
     }
   }
   if (!allowed2) {
-    throw new HTTPException117(403, {
+    throw new HTTPException118(403, {
       message: "Agent configuration does not allow this Codemode SDK operation"
     });
   }
 }
 function codemodeHttpError(error) {
   if (error instanceof SiteSessionPathError) {
-    return new HTTPException117(404, { message: error.message, cause: error });
+    return new HTTPException118(404, { message: error.message, cause: error });
   }
   if (error instanceof SessionAuthorizationDeniedError18) {
-    return new HTTPException117(404, {
+    return new HTTPException118(404, {
       message: "session not found",
       cause: error
     });
   }
   if (error instanceof SessionAuthorizationUnavailableError16) {
-    return new HTTPException117(503, {
+    return new HTTPException118(503, {
       message: "session authorization is unavailable",
       cause: error
     });
@@ -122944,21 +123709,24 @@ function codemodeHttpError(error) {
     });
   }
   if (error instanceof CodemodeOperationNotExecutableError) {
-    return new HTTPException117(409, { message: error.message, cause: error });
+    return new HTTPException118(409, { message: error.message, cause: error });
   }
   if (error instanceof CodemodeOperationConflictError) {
-    return new HTTPException117(409, { message: error.message, cause: error });
+    return new HTTPException118(409, { message: error.message, cause: error });
   }
   if (error instanceof CodemodeToolNotInCatalogError) {
-    return new HTTPException117(404, { message: error.message, cause: error });
+    return new HTTPException118(404, { message: error.message, cause: error });
   }
-  if (error instanceof CodemodeToolApprovalRequiredError) {
-    return new HTTPException117(409, { message: error.message, cause: error });
+  if (error instanceof CodemodeToolApprovalRequiredError2) {
+    return new HTTPException118(409, { message: error.message, cause: error });
   }
   if (error instanceof CodemodePayloadTooLargeError) {
-    return new HTTPException117(413, { message: error.message, cause: error });
+    return new HTTPException118(413, { message: error.message, cause: error });
+  }
+  if (error instanceof CodemodeOperationLimitError) {
+    return new HTTPException118(429, { message: error.message, cause: error });
   }
-  return error instanceof HTTPException117 ? error : new HTTPException117(500, {
+  return error instanceof HTTPException118 ? error : new HTTPException118(500, {
     message: "Codemode request failed",
     cause: error
   });
@@ -122993,7 +123761,7 @@ function structuredServicesHint(backend) {
 }
 function codexCompactionV2ProviderLockedError(error) {
   if (error instanceof CodexCompactionV2ProviderLockedError) return error;
-  if (error instanceof HTTPException117 && error.cause instanceof CodexCompactionV2ProviderLockedError) {
+  if (error instanceof HTTPException118 && error.cause instanceof CodexCompactionV2ProviderLockedError) {
     return error.cause;
   }
   return null;
@@ -123010,7 +123778,7 @@ function httpStatusForError(error) {
   if (isRequestBodyValidationError(error)) {
     return 400;
   }
-  if (error instanceof HTTPException117) {
+  if (error instanceof HTTPException118) {
     return error.status;
   }
   if (error instanceof McpPayloadTooLargeError) {
@@ -123042,7 +123810,7 @@ function publicErrorMessage(error, status) {
   if (status >= 500) {
     return "Opengeni could not complete the request.";
   }
-  if (error instanceof HTTPException117) {
+  if (error instanceof HTTPException118) {
     return boundedPublicMessage(error.message) ?? "Request failed.";
   }
   if (error instanceof McpPayloadTooLargeError) {
@@ -124137,4 +124905,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession4 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-Q77DZ2M4.js.map
+//# sourceMappingURL=chunk-IZEGLLKZ.js.map