@opengeni/api-router 1.3.0 → 1.4.0

package/dist/codemode.d.ts

@@ -1,7 +1,7 @@
 import { type AccessGrant, type AttemptToolCatalog, type CodemodeCallSubmission as CodemodeCallSubmissionValue, type CodemodeOperation } from "@opengeni/contracts";
 import type { ApiRouteDeps } from "@opengeni/core";
 import { type SessionTurnForExecution } from "@opengeni/db";
-import { type Settings } from "@opengeni/config";
+import { type FirstPartyMcpToolPolicySettings } from "@opengeni/config";
 import { type Permission, type Session } from "@opengeni/contracts";
 /** The REST authority a Codemode SDK proxy token may ever carry. */
 export declare const CODEMODE_SESSION_PROXY_PERMISSION_CEILING: readonly ["workspace:read", "sessions:read", "sessions:create", "sessions:control"];
@@ -13,10 +13,10 @@ export declare const CODEMODE_SESSION_PROXY_PERMISSION_CEILING: readonly ["works
  * gets only workspace:read and every proxied /sessions handler refuses it,
  * exactly as its MCP surface would.
  */
-export declare function codemodeSessionProxyPermissions(settings: Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">, session: Pick<Session, "firstPartyMcpTools" | "firstPartyMcpPermissions">): Permission[];
+export declare function codemodeSessionProxyPermissions(settings: FirstPartyMcpToolPolicySettings, session: Pick<Session, "firstPartyMcpTools" | "firstPartyMcpPermissions">): Permission[];
 /** Reuse normal REST handlers, including their resource/command authorization.
  * The exact attempt is checked before issuing this internal-only credential. */
-export declare function codemodeSessionRequest(deps: ApiRouteDeps, grant: AccessGrant, request: Request, path: string, resolveProxySettings?: (session: Session) => Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">): Promise<Request>;
+export declare function codemodeSessionRequest(deps: ApiRouteDeps, grant: AccessGrant, request: Request, path: string, resolveProxySettings?: (session: Session) => FirstPartyMcpToolPolicySettings): Promise<Request>;
 export type CodemodeGrantAuthority = {
     accountId: string;
     workspaceId: string;

package/dist/index.js

@@ -12,7 +12,7 @@ import {
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump,
   withAccessGrantSessionRlsContext
-} from "./chunk-IZEGLLKZ.js";
+} from "./chunk-KKEXIBQG.js";
 import "./chunk-OGQDXVXY.js";
 
 // src/index.ts

package/dist/integrations/oauth-profiles.d.ts

@@ -130,7 +130,9 @@ export type OAuthProviderProfile = {
         /** Distinguish a rejected OAuth grant from a temporary verification failure. */
         isRejectedGrant?: (payload: Record<string, unknown>) => boolean;
         validateIdentity: (payload: Record<string, unknown>) => Record<string, string>;
-        toolsForScopes: (scopes: readonly string[]) => Array<{
+        toolsForScopes: (scopes: readonly string[], deployment: {
+            gmailWatchTopicName?: string | undefined;
+        }) => Array<{
             name: string;
             description?: string;
         }>;

package/dist/mcp/scheduled-task-view.d.ts

@@ -83,8 +83,8 @@ export declare function scheduledTaskMcpSummary(task: ScheduledTask): {
     runMode: "existing_session" | "new_session_per_run" | "reusable_session";
     overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
     action: {
+        readonly sourceId?: never;
         kind: "agent_turn";
-        sourceId?: never;
         sourceGeneration?: never;
         sourceLifecycleGeneration?: never;
         destination?: never;
@@ -220,8 +220,8 @@ export declare function boundScheduledTaskDetailMcp(task: ScheduledTask): {
     runMode: "existing_session" | "new_session_per_run" | "reusable_session";
     overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
     action: {
+        readonly sourceId?: never;
         kind: "agent_turn";
-        sourceId?: never;
         sourceGeneration?: never;
         sourceLifecycleGeneration?: never;
         destination?: never;
@@ -405,8 +405,8 @@ export declare function boundScheduledTaskDetailMcp(task: ScheduledTask): {
     runMode: "existing_session" | "new_session_per_run" | "reusable_session";
     overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
     action: {
+        readonly sourceId?: never;
         kind: "agent_turn";
-        sourceId?: never;
         sourceGeneration?: never;
         sourceLifecycleGeneration?: never;
         destination?: never;
@@ -597,8 +597,8 @@ export declare function boundScheduledTaskMcpPage(input: {
         runMode: "existing_session" | "new_session_per_run" | "reusable_session";
         overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
         action: {
+            readonly sourceId?: never;
             kind: "agent_turn";
-            sourceId?: never;
             sourceGeneration?: never;
             sourceLifecycleGeneration?: never;
             destination?: never;

package/dist/mcp/server.d.ts

@@ -43,7 +43,7 @@ export declare function slackBotFileContentResult(result: Awaited<ReturnType<Ope
         mimeType?: never;
         data?: never;
     } | {
-        readonly text?: never;
+        text?: never;
         type: "image";
         mimeType: "image/jpeg" | "image/png" | "image/webp";
         data: string;

package/dist/transcription/billing-refusal.d.ts

@@ -0,0 +1,8 @@
+import type { TranscriptionBillingRefusedError } from "@opengeni/core";
+import type { Context } from "hono";
+/**
+ * Same body shape as session admission refusals (`code` + `message`, plus
+ * allowance `scope`/`resetsAt`), so SDK/React clients classify it as a
+ * definitive credit/allowance refusal rather than a retryable failure.
+ */
+export declare function transcriptionBillingRefusal(c: Context, error: TranscriptionBillingRefusedError): Response;

package/dist/transcription/normalize.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Decode one uploaded recording to 16 kHz mono PCM WAV with a hard decode
+ * ceiling, and measure its duration from the bytes the server produced.
+ */
+export type TranscriptionAudioNormalizer = (input: {
+    audio: Uint8Array;
+    mimeType: string;
+    /** Longest accepted recording; anything longer is refused, never truncated. */
+    maxDurationSeconds: number;
+    signal?: AbortSignal | undefined;
+}) => Promise<{
+    bytes: Uint8Array;
+    durationSeconds: number;
+}>;
+/**
+ * ffmpeg decodes at most `maxDurationSeconds + 1` seconds (`-t`), so a long or
+ * hostile upload costs bounded CPU and disk. Output that reaches that ceiling
+ * was longer than the limit and is refused as `too_large` before any provider
+ * call, so the transcript the user receives is never silently cut short.
+ */
+export declare function createFfmpegAudioNormalizer(input: {
+    ffmpegPath: string;
+}): TranscriptionAudioNormalizer;

package/dist/transcription/providers/azure-mai.d.ts

@@ -0,0 +1,12 @@
+import type { VoiceInputPricing } from "@opengeni/config";
+import type { TranscriptionProvider } from "@opengeni/core";
+/** Azure Speech file transcription; credentials and model selection stay server-side. */
+export declare function createMaiTranscriptionProvider(input: {
+    endpoint: string;
+    apiKey: string;
+    apiVersion: string;
+    model: string;
+    pricing?: VoiceInputPricing | null;
+    ffmpegPath: string;
+    fetch?: typeof fetch;
+}): TranscriptionProvider;

package/dist/transcription/providers/azure-openai.d.ts

@@ -1,3 +1,4 @@
+import { type VoiceInputPricing } from "@opengeni/config";
 import type { TranscriptionProvider } from "@opengeni/core";
 export declare function createAzureOpenAiTranscriptionProvider(input: {
     endpoint: string;
@@ -5,5 +6,8 @@ export declare function createAzureOpenAiTranscriptionProvider(input: {
     apiVersion: string;
     apiKey: string | null;
     adToken: string | null;
+    /** Underlying model of the deployment; defaults to the deployment name. */
+    model?: string;
+    pricing?: VoiceInputPricing | null;
     fetch?: typeof fetch;
 }): TranscriptionProvider;

package/dist/transcription/providers/openai.d.ts

@@ -1,9 +1,25 @@
+import { type VoiceInputPricing, type VoiceInputUsage } from "@opengeni/config";
 import { type TranscriptionProvider, TranscriptionServiceError } from "@opengeni/core";
 export declare function createOpenAiTranscriptionProvider(input: {
     apiKey: string;
     baseUrl: string;
     model: string;
+    pricing?: VoiceInputPricing | null;
     fetch?: typeof fetch;
 }): TranscriptionProvider;
+/**
+ * OpenAI-compatible `/audio/transcriptions` JSON (OpenAI and Azure OpenAI).
+ * `usage` is `{type:"tokens", input_tokens, input_token_details:{audio_tokens,
+ * text_tokens}, output_tokens, total_tokens}` for the gpt-4o-transcribe family
+ * or `{type:"duration", seconds}` for duration-billed models; Whisper
+ * `verbose_json` carries the processed audio `duration`. Unusable usage is
+ * dropped (null), never guessed.
+ */
+export declare function parseTranscriptionResponseBody(body: unknown): {
+    text: string;
+    languages: string[];
+    usage: VoiceInputUsage | null;
+} | null;
+export declare function parseTranscriptionUsage(body: Record<string, unknown>): VoiceInputUsage | null;
 export declare function responseError(status: number): TranscriptionServiceError;
 export declare function fetchError(error: unknown): TranscriptionServiceError;

package/dist/transcription/service.d.ts

@@ -1,6 +1,7 @@
 import { type Settings } from "@opengeni/config";
-import { type TranscriptionAvailabilityContext, type TranscriptionProvider, type TranscriptionService } from "@opengeni/core";
+import { type TranscriptionAvailabilityContext, type TranscriptionBilling, type TranscriptionProvider, type TranscriptionService } from "@opengeni/core";
 import type { Database } from "@opengeni/db";
+import { type TranscriptionAudioNormalizer } from "./normalize.js";
 export declare function createTranscriptionService(input: {
     settings: Settings;
     db: Database;
@@ -11,6 +12,14 @@ export declare function createTranscriptionService(input: {
     providerRequestTimeoutMilliseconds?: number;
     /** Test seam for evaluating persisted absolute deadlines after delayed setup. */
     now?: () => Date;
+    /** Credit admission/settlement for deployment-funded providers. */
+    billing?: TranscriptionBilling;
+    /** Test seam: trusted one-shot decode + duration (defaults to ffmpeg). */
+    normalizeAudio?: TranscriptionAudioNormalizer;
+    /** Loud operator log for settlement failures after provider success. */
+    log?: (message: string, attributes: Record<string, string | number | boolean>) => void;
+    /** In-process settlement retry pacing after an inline failure. */
+    settlementRetryDelaysMilliseconds?: readonly number[];
 }): TranscriptionService;
 export declare function remainingTranscriptionProviderRequestMilliseconds(providerDeadlineAt: Date, now: Date): number;
 export declare function orderedProviders(providers: readonly TranscriptionProvider[], context: TranscriptionAvailabilityContext): TranscriptionProvider[];

package/dist/transcription/wav-duration.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Duration of a PCM RIFF/WAVE buffer the server itself produced (resumable
+ * provider segments are ffmpeg-normalized WAV). Used only as the trusted
+ * billing fallback when a provider reports no usage; never applied to
+ * client-uploaded bytes. Returns null for anything that is not a well-formed
+ * WAV with a positive byte rate.
+ */
+export declare function wavDurationSeconds(bytes: Uint8Array): number | null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -43,25 +43,25 @@
     "@hono/zod-validator": "^0.7.6",
     "@llamaindex/liteparse": "2.14.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opengeni/agent-proto": "1.3.0",
-    "@opengeni/artifact-tool": "1.3.0",
-    "@opengeni/capabilities": "1.3.0",
-    "@opengeni/codemode": "1.3.0",
-    "@opengeni/codex": "1.3.0",
-    "@opengeni/config": "1.3.0",
-    "@opengeni/contracts": "1.3.0",
-    "@opengeni/core": "1.3.0",
-    "@opengeni/db": "1.3.0",
-    "@opengeni/documents": "1.3.0",
-    "@opengeni/events": "1.3.0",
-    "@opengeni/github": "1.3.0",
-    "@opengeni/interaction": "1.3.0",
-    "@opengeni/network": "1.3.0",
-    "@opengeni/observability": "1.3.0",
-    "@opengeni/runtime": "1.3.0",
-    "@opengeni/storage": "1.3.0",
-    "@opengeni/tool-gateway": "1.3.0",
-    "@opengeni/xai-subscription": "1.3.0",
+    "@opengeni/agent-proto": "1.4.0",
+    "@opengeni/artifact-tool": "1.4.0",
+    "@opengeni/capabilities": "1.4.0",
+    "@opengeni/codemode": "1.4.0",
+    "@opengeni/codex": "1.4.0",
+    "@opengeni/config": "1.4.0",
+    "@opengeni/contracts": "1.4.0",
+    "@opengeni/core": "1.4.0",
+    "@opengeni/db": "1.4.0",
+    "@opengeni/documents": "1.4.0",
+    "@opengeni/events": "1.4.0",
+    "@opengeni/github": "1.4.0",
+    "@opengeni/interaction": "1.4.0",
+    "@opengeni/network": "1.4.0",
+    "@opengeni/observability": "1.4.0",
+    "@opengeni/runtime": "1.4.0",
+    "@opengeni/storage": "1.4.0",
+    "@opengeni/tool-gateway": "1.4.0",
+    "@opengeni/xai-subscription": "1.4.0",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",
     "hono": "^4.12.18",

package/src/access-grant-rls.ts

@@ -8,25 +8,33 @@ import {
   freezeAgentLearningPolicy,
   withSessionRlsActorContext,
   withCreditDebitAttribution,
+  type CreditDebitAttribution,
+  currentCreditDebitAttribution,
 } from "@opengeni/db";
 import { HTTPException } from "hono/http-exception";
 
+/**
+ * Trusted payer for a non-agent grant: an authenticated human session pays as
+ * that human; keys and services are service work. An agent attempt must be
+ * resolved through the validated middleware context installed below.
+ */
+export function creditDebitAttributionForGrant(grant: AccessGrant): CreditDebitAttribution {
+  if (grant.principalKind === "agent_attempt") return currentCreditDebitAttribution();
+  return grant.principalKind === "human_session"
+    ? { kind: "human", initiatingHumanSubjectId: grant.subjectId }
+    : ["service", "api_key", "configured_key", "mcp_gateway"].includes(grant.principalKind ?? "")
+      ? { kind: "service" }
+      : { kind: "unknown" };
+}
+
 export async function withAccessGrantSessionRlsContext<T>(
   deps: Pick<ApiRouteDeps, "db">,
   grant: AccessGrant,
   fn: () => Promise<T>,
 ): Promise<T> {
   if (grant.principalKind !== "agent_attempt") {
-    return await withCreditDebitAttribution(
-      grant.principalKind === "human_session"
-        ? { kind: "human", initiatingHumanSubjectId: grant.subjectId }
-        : grant.principalKind === "service" ||
-            grant.principalKind === "api_key" ||
-            grant.principalKind === "configured_key" ||
-            grant.principalKind === "mcp_gateway"
-          ? { kind: "service" }
-          : { kind: "unknown" },
-      () => withSessionRlsActorContext({ subjectId: grant.subjectId }, fn),
+    return await withCreditDebitAttribution(creditDebitAttributionForGrant(grant), () =>
+      withSessionRlsActorContext({ subjectId: grant.subjectId }, fn),
     );
   }
   const callerSessionId = grant.metadata?.sessionId;

package/src/app.ts

@@ -24,9 +24,10 @@ import {
   canonicalPublicOrigin,
   configuredAllowedReasoningEfforts,
   resolveFirstPartyMcpToolPolicy,
-  resolveVoiceInputProviderRegistry,
   UnsupportedLatencyModeError,
+  voiceInputPricingIssues,
   type Settings,
+  type FirstPartyMcpToolPolicySettings,
 } from "@opengeni/config";
 import {
   AGENT_CAPABILITY_IDS,
@@ -40,6 +41,7 @@ import {
   resolveWorkspaceMemoryEnabled,
   resolveWorkspaceMemoryPromptMode,
   VOICE_INPUT_ACCEPTED_MIME_TYPES,
+  WorkspaceVoiceInputSettings,
   TRANSCRIPTION_RECORDING_PROVIDER_SEGMENT_SECONDS,
   ToolGatewayApprovalRequest,
   ToolGatewayCallRequest,
@@ -491,12 +493,27 @@ export function createAppComposition(deps: AppDependencies): {
     }, MANAGED_AUTH_REAPER_INTERVAL_MS);
     (timer as ReturnType<typeof setInterval> & { unref?: () => void }).unref?.();
   }
+  if (deps.transcription === undefined) {
+    // Voice pricing problems never fail boot (workers share this config); the
+    // affected provider is withheld and the operator sees exactly why, once.
+    for (const issue of voiceInputPricingIssues(deps.settings)) {
+      observability.error(
+        `Voice input provider ${issue.providerId} is unavailable: ${issue.message}`,
+        {
+          providerId: issue.providerId,
+          env: issue.env,
+          reason: issue.reason,
+        },
+      );
+    }
+  }
   const transcription =
     deps.transcription === undefined
       ? createTranscriptionService({
           settings: deps.settings,
           db: deps.db,
           ...(deps.codexFetch ? { codexFetch: deps.codexFetch } : {}),
+          log: (message, attributes) => observability.error(message, attributes),
         })
       : deps.transcription;
   const transcriptionSegmenter =
@@ -646,6 +663,8 @@ export function createAppComposition(deps: AppDependencies): {
       "X-OpenGeni-Actor-Epoch",
       "X-OpenGeni-Correlation-Id",
       "X-OpenGeni-Session-Csrf",
+      // Session scope for a session proxy; the API itself ignores it.
+      "X-OpenGeni-Session-Id",
       "X-OpenGeni-Site-Id",
       "X-OpenGeni-Site-Version",
       "X-OpenGeni-Subject",
@@ -1191,6 +1210,8 @@ export function createAppComposition(deps: AppDependencies): {
       creditsAvailable: false,
     });
     let modelSelectionForbidden = false;
+    let voiceInputAvailable = false;
+    let voiceInputProviders: string[] = [];
     const requestedWorkspaceId = c.req.query("workspaceId");
     if (requestedWorkspaceId !== undefined && requestedWorkspaceId.trim() === "") {
       throw new HTTPException(422, { message: "workspaceId must not be empty" });
@@ -1241,6 +1262,25 @@ export function createAppComposition(deps: AppDependencies): {
             selections = [];
           }
           const workspace = await getWorkspace(deps.db, workspaceId);
+          const voicePreferences = WorkspaceVoiceInputSettings.safeParse(
+            workspace?.settings.voiceInput,
+          ).data;
+          const voiceContext = {
+            workspaceId,
+            subjectId: grant.subjectId,
+            preferredProvider: voicePreferences?.preferredProvider,
+            fallbackEnabled: voicePreferences?.fallbackEnabled,
+          };
+          if (hasPermission(grant.permissions, "sessions:create") && transcription) {
+            // `providers` lists every ready provider (the workspace picker);
+            // `available` honours the workspace preference and fallback, so
+            // the composer never offers a mic every request would refuse.
+            voiceInputProviders = (await transcription.availableProviderIds?.(voiceContext)) ?? [];
+            voiceInputAvailable =
+              voiceInputProviders.length > 0 &&
+              (await Promise.resolve(transcription.available(voiceContext)).catch(() => false));
+          }
+
           defaultSelection = await resolveDefaultSessionModelForSelections(deps.db, {
             settings: catalogSettings,
             accountId: grant.accountId,
@@ -1303,10 +1343,8 @@ export function createAppComposition(deps: AppDependencies): {
           maxSizeBytes: objectStorage?.maxSinglePutSizeBytes ?? 5_000_000_000,
         },
         voiceInput: {
-          providers: resolveVoiceInputProviderRegistry(deps.settings).map(
-            (provider) => provider.id,
-          ),
-          available: (await transcription?.available()) ?? false,
+          providers: voiceInputProviders,
+          available: voiceInputAvailable,
           maxDurationSeconds: deps.settings.voiceInputMaxDurationSeconds,
           maxSizeBytes: deps.settings.voiceInputMaxSizeBytes,
           acceptedMimeTypes: [...VOICE_INPUT_ACCEPTED_MIME_TYPES],
@@ -1314,7 +1352,7 @@ export function createAppComposition(deps: AppDependencies): {
           objectStorage &&
           transcription &&
           transcriptionSegmenter &&
-          (await transcription.available()) &&
+          voiceInputAvailable &&
           (await transcriptionSegmenter.available())
             ? {
                 resumable: {
@@ -2107,7 +2145,7 @@ function clientAuthConfig(settings: AppDependencies["settings"], newSignupsEnabl
 
 /** Configured SDK credentials cannot regain tools from widened legacy columns. */
 export function configuredCodemodeSessionProxyTools(
-  settings: Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">,
+  settings: FirstPartyMcpToolPolicySettings,
   session: Pick<Session, "agent">,
 ): FirstPartyMcpToolName[] | null {
   if (!session.agent) return null;

package/src/azure-live.ts

@@ -0,0 +1,103 @@
+import type { Settings } from "@opengeni/config";
+import type { CodexRealtimeWebrtcRequest } from "@opengeni/contracts";
+import {
+  getActiveSessionHistoryItems,
+  getSessionRealtimeContinuityEntries,
+  type Database,
+} from "@opengeni/db";
+import { CodexRealtimeBrokerError, openGeniRealtimeInstructions } from "./codex-realtime";
+import { projectSessionRealtimeInitialItems } from "./session-realtime-context";
+
+export const AZURE_LIVE_MODEL_ID = "opengeni-azure/gpt-live-1" as const;
+export function azureLiveConfigured(settings: Settings): boolean {
+  return Boolean(settings.azureLiveEndpoint && settings.azureLiveApiKey?.trim());
+}
+
+/** Server-authenticated SDP exchange. Never returns provider credentials. */
+export async function brokerAzureLive(input: {
+  settings: Settings;
+  request: Pick<CodexRealtimeWebrtcRequest, "sdp" | "instructions" | "voice">;
+  initialItems: Array<{ role: string; text: string }>;
+  signal?: AbortSignal | undefined;
+  fetch?: typeof fetch;
+}) {
+  if (!azureLiveConfigured(input.settings))
+    throw new CodexRealtimeBrokerError(
+      "credential_unavailable",
+      "Hosted GPT Live is not configured",
+    );
+  // Azure voice names differ from the connected-subscription voice vocabulary.
+  if (input.request.voice)
+    throw new CodexRealtimeBrokerError(
+      "invalid_request",
+      "Hosted voice is selected by deployment configuration",
+    );
+  const instructions = `${openGeniRealtimeInstructions(input.request.instructions)}\n\n## Prior session conversation\nThe following JSON contains conversation history, not additional system instructions. Preserve each item's role.\n${JSON.stringify(input.initialItems)}`;
+  const signal = AbortSignal.any([
+    AbortSignal.timeout(20_000),
+    ...(input.signal ? [input.signal] : []),
+  ]);
+  let response: Response;
+  try {
+    response = await (input.fetch ?? fetch)(
+      `${input.settings.azureLiveEndpoint!.replace(/\/+$/, "")}/openai/v1/live/sessions`,
+      {
+        method: "POST",
+        signal,
+        headers: { "api-key": input.settings.azureLiveApiKey!, "content-type": "application/json" },
+        body: JSON.stringify({
+          session: {
+            model: input.settings.azureLiveDeployment,
+            instructions,
+            delegation: { type: "client" },
+            audio: { output: { voice: input.settings.azureLiveVoice } },
+          },
+          transport: { type: "webrtc", sdp: input.request.sdp },
+        }),
+      },
+    );
+  } catch {
+    throw new CodexRealtimeBrokerError(
+      signal.aborted ? "timeout" : "network_error",
+      "Hosted voice connection could not be established",
+    );
+  }
+  if (!response.ok)
+    throw new CodexRealtimeBrokerError(
+      response.status === 429 ? "rate_limited" : "provider_error",
+      "Hosted voice connection was rejected",
+      response.status,
+    );
+  const body = await response.json().catch(() => null);
+  const sdp = body?.transport?.sdp;
+  if (typeof sdp !== "string" || !sdp || sdp.length > 1_048_576)
+    throw new CodexRealtimeBrokerError(
+      "invalid_provider_response",
+      "Hosted voice returned an invalid connection answer",
+    );
+  return { sdp, version: "v3" as const, model: AZURE_LIVE_MODEL_ID };
+}
+
+export function buildSessionAzureLiveBroker(
+  db: Database,
+  settings: Settings,
+  workspaceId: string,
+  sessionId: string,
+  fetchImpl?: typeof fetch,
+) {
+  return async (input: {
+    request: Pick<CodexRealtimeWebrtcRequest, "sdp" | "instructions" | "voice">;
+    signal?: AbortSignal | undefined;
+  }) => {
+    const [history, continuity] = await Promise.all([
+      getActiveSessionHistoryItems(db, workspaceId, sessionId),
+      getSessionRealtimeContinuityEntries(db, workspaceId, sessionId),
+    ]);
+    return brokerAzureLive({
+      settings,
+      ...input,
+      initialItems: projectSessionRealtimeInitialItems(history, continuity),
+      ...(fetchImpl ? { fetch: fetchImpl } : {}),
+    });
+  };
+}

package/src/codemode.ts

@@ -28,7 +28,7 @@ import { getSession } from "@opengeni/db";
 import {
   allowedFirstPartyMcpToolsForSession,
   resolveFirstPartyDelegationSecret,
-  type Settings,
+  type FirstPartyMcpToolPolicySettings,
 } from "@opengeni/config";
 import {
   DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,
@@ -59,7 +59,7 @@ export const CODEMODE_SESSION_PROXY_PERMISSION_CEILING = [
  * exactly as its MCP surface would.
  */
 export function codemodeSessionProxyPermissions(
-  settings: Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">,
+  settings: FirstPartyMcpToolPolicySettings,
   session: Pick<Session, "firstPartyMcpTools" | "firstPartyMcpPermissions">,
 ): Permission[] {
   const sessionPermissions = session.firstPartyMcpPermissions ?? [
@@ -82,9 +82,7 @@ export async function codemodeSessionRequest(
   grant: AccessGrant,
   request: Request,
   path: string,
-  resolveProxySettings?: (
-    session: Session,
-  ) => Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">,
+  resolveProxySettings?: (session: Session) => FirstPartyMcpToolPolicySettings,
 ): Promise<Request> {
   siteSessionPath(path, grant.workspaceId, request.method);
   const { authority, turn } = await requireActiveCodemodeCatalog(deps, grant);

package/src/integrations/oauth-client.ts

@@ -2708,6 +2708,7 @@ async function verifyMcpToolsListNonFatal(
       providerIdentity = local.validateIdentity(payload);
       const verifiedTools = local.toolsForScopes(
         grantedScopes(token.scopeText, state.authorizeScopes, profile),
+        settings,
       );
       if (local.required && verifiedTools.length === 0)
         throw new Error("Connector verification did not report an authorized tool scope");

package/src/integrations/oauth-profiles.ts

@@ -7,7 +7,11 @@ import { OPENGENI_PERSONAL_SLACK_MCP_URL, type ConnectionOwnership } from "@open
 import type { Settings } from "@opengeni/config";
 import { HTTPException } from "hono/http-exception";
 import { z } from "zod";
-import { GMAIL_REST_MCP_TOOLS, gmailToolSupportsScopes } from "@opengeni/runtime/gmail-rest-mcp";
+import {
+  GMAIL_REST_MCP_TOOLS,
+  gmailToolAvailableOnDeployment,
+  gmailToolSupportsScopes,
+} from "@opengeni/runtime/gmail-rest-mcp";
 import { canonicalProviderDomain } from "./provider-domain";
 
 /**
@@ -132,7 +136,10 @@ export type OAuthProviderProfile = {
     /** Distinguish a rejected OAuth grant from a temporary verification failure. */
     isRejectedGrant?: (payload: Record<string, unknown>) => boolean;
     validateIdentity: (payload: Record<string, unknown>) => Record<string, string>;
-    toolsForScopes: (scopes: readonly string[]) => Array<{ name: string; description?: string }>;
+    toolsForScopes: (
+      scopes: readonly string[],
+      deployment: { gmailWatchTopicName?: string | undefined },
+    ) => Array<{ name: string; description?: string }>;
   };
 };
 
@@ -265,10 +272,14 @@ const OFFICIAL_GMAIL_PROFILE: OAuthProviderProfile = {
       }
       return { gmailEmail: payload.emailAddress };
     },
-    toolsForScopes: (scopes) => {
-      return GMAIL_REST_MCP_TOOLS.filter((tool) => gmailToolSupportsScopes(tool.name, scopes)).map(
-        ({ name, description }) => ({ name, ...(description ? { description } : {}) }),
-      );
+    toolsForScopes: (scopes, deployment) => {
+      return GMAIL_REST_MCP_TOOLS.filter(
+        (tool) =>
+          gmailToolSupportsScopes(tool.name, scopes) &&
+          gmailToolAvailableOnDeployment(tool.name, {
+            watchTopicName: deployment.gmailWatchTopicName,
+          }),
+      ).map(({ name, description }) => ({ name, ...(description ? { description } : {}) }));
     },
   },
 };

package/src/routes/editable-artifacts.ts

@@ -609,6 +609,14 @@ export function registerEditableArtifactRoutes(
     const body = await parseBoundedMaterializationRequest(context);
     const scope = editableArtifactScope({ accountId: grant.accountId, workspaceId });
     const actor = editableArtifactActorForGrant(grant, body.replicaId);
+    // Without a materializer workload the job would stay queued forever.
+    if (!deps.settings.artifactMaterializerDeployed) {
+      throw new ApiHttpError(503, {
+        code: "upstream_unavailable",
+        message: "File export is not available on this deployment.",
+        retryable: false,
+      });
+    }
     try {
       const result = await requireEditableArtifactExports(deps).enqueueMaterialization({
         scope,