@opengeni/api-router 1.4.5-canary.38533733713001 → 2.0.1

package/dist/app.js

@@ -28,7 +28,7 @@ import {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession,
   workspaceActorContextExempt
-} from "./chunk-D5WJ24GY.js";
+} from "./chunk-ZDTWXRFX.js";
 import "./chunk-OGQDXVXY.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,

package/dist/attached-browser-viewer.d.ts

@@ -0,0 +1,11 @@
+import type { AccessGrant } from "@opengeni/contracts";
+import { type ApiRouteDeps } from "@opengeni/core";
+import type { AttachedBrowserViewer } from "@opengeni/db";
+/**
+ * The person whose machine access decides which attached browsers a caller
+ * may see and control. Personal (Only me) machines belong to one person, so a
+ * human sees and controls their own; an agent acts for the person who started
+ * its turn (never merely for the workspace). Other callers (keys, services)
+ * reach only machines that are not personal.
+ */
+export declare function attachedBrowserViewer(deps: Pick<ApiRouteDeps, "db">, grant: AccessGrant, workspaceId: string): Promise<AttachedBrowserViewer>;

package/dist/auth/managed-auth-session-adapter.d.ts

@@ -4,3 +4,9 @@ import { type ManagedAuth } from "@opengeni/core";
 /** Server-only proof for a product-owned endpoint; never returned to a browser. */
 export declare function managedAuthSelectedProofHeaders(auth: ManagedAuth, token: string): Promise<Headers>;
 export declare function createBetterAuthSessionAdapter(auth: ManagedAuth, db: Database): ManagedAuthSessionAdapter;
+/**
+ * The provider's own session cookie for an exact session token (or its
+ * expiry when `token` is null), plus invalidation of stale provider cache
+ * cookies, exactly as a browser sign-in would set them.
+ */
+export declare function managedAuthSessionCookieHeaders(auth: ManagedAuth, token: string | null, currentCookieHeader?: string | null): Promise<string[]>;

package/dist/{chunk-D5WJ24GY.js → chunk-ZDTWXRFX.js}

@@ -385,7 +385,7 @@ async function coreCodexConnected(c, deps, input) {
         );
       default:
         throw new HTTPException3(403, {
-          message: "only an organization administrator can connect a new shared Codex account; workspace administrators can reconnect the accounts their workspace manages"
+          message: input.workspaceId === null ? "only an organization administrator can connect a Codex account for the whole organization" : "only an administrator of this workspace or of the organization can connect a Codex account here"
         });
     }
   }
@@ -407,7 +407,7 @@ async function coreCodexConnected(c, deps, input) {
 function disconnectRefused(outcome) {
   if (outcome === "forbidden") {
     throw new HTTPException3(403, {
-      message: "only an organization administrator can disconnect a shared Codex account"
+      message: "only an organization administrator can disconnect this Codex account; a workspace administrator can disconnect only an account that serves just their workspace"
     });
   }
   if (outcome === "unresolved_redemption") {
@@ -2723,7 +2723,7 @@ function coreConnectRefused(reason, displayName, personal) {
       });
     default:
       return new HTTPException7(personal ? 409 : 403, {
-        message: personal ? `a private ${displayName} account is connected from your Personal workspace` : `only an organization administrator can connect a new shared ${displayName} account; workspace administrators can reconnect the accounts their workspace manages`
+        message: personal ? `a private ${displayName} account is connected from your Personal workspace` : `only an administrator of this workspace or of the organization can connect a ${displayName} account here`
       });
   }
 }
@@ -2732,7 +2732,7 @@ function disconnectRefused2(outcome, displayName) {
     throw new HTTPException7(404, { message: `${displayName} account not found` });
   if (outcome === "forbidden")
     throw new HTTPException7(403, {
-      message: `only an organization administrator can disconnect a shared ${displayName} account`
+      message: `only an organization administrator can disconnect this ${displayName} account; a workspace administrator can disconnect only an account that serves just their workspace`
     });
   if (outcome === "unresolved_redemption")
     throw new HTTPException7(409, {
@@ -9521,7 +9521,7 @@ function registerVaultProviderRoutes(app, deps, options = {}) {
       }
       const created = await provider.createVault(routeProviderContext(connectionId), {
         name: payload.name,
-        description: "Managed by OpenGeni",
+        description: "Managed by Opengeni",
         allowAdminsAccess: true,
         ...payload.groupId ? { groupId: payload.groupId } : {}
       });
@@ -13869,29 +13869,26 @@ async function startMcpOAuthWithinDeadline(deps, context, deadline) {
     ...existing ? { connectionId: existing.id, connectionVersion: existing.version } : {}
   });
   const expiresAt = new Date(Date.now() + oauthStateTtlMs);
-  let state = fullState;
-  if (settings.integrationsOauthShortStateEnabled) {
-    const stateId = randomUUID();
-    state = createSignedState2(requireIntegrationsStateSecret(settings), {
-      kind: "mcp_oauth_reference",
+  const stateId = randomUUID();
+  const state = createSignedState2(requireIntegrationsStateSecret(settings), {
+    kind: "mcp_oauth_reference",
+    id: stateId,
+    accountId: context.accountId,
+    workspaceId: context.workspaceId
+  });
+  if (state.length > 512) {
+    throw new Error("MCP OAuth reference state exceeded its provider-safe length");
+  }
+  await deadline.run(
+    "state_persist",
+    async () => storeIntegrationOAuthPendingState(db, {
       id: stateId,
       accountId: context.accountId,
-      workspaceId: context.workspaceId
-    });
-    if (state.length > 512) {
-      throw new Error("MCP OAuth reference state exceeded its provider-safe length");
-    }
-    await deadline.run(
-      "state_persist",
-      async () => storeIntegrationOAuthPendingState(db, {
-        id: stateId,
-        accountId: context.accountId,
-        workspaceId: context.workspaceId,
-        stateEncrypted: encryptEnvironmentValue4(key2, fullState),
-        expiresAt
-      })
-    );
-  }
+      workspaceId: context.workspaceId,
+      stateEncrypted: encryptEnvironmentValue4(key2, fullState),
+      expiresAt
+    })
+  );
   const authorizationUrl = buildAuthorizationUrl({
     endpoint: discovery.as.authorizationEndpoint,
     settings,
@@ -36115,7 +36112,7 @@ var RULES = [
   {
     method: "PATCH",
     pattern: /\/(codex|claude|supergrok)\/accounts\/:accountId\/allocator$/,
-    text: ({ provider }) => `Turn "Use for new work" on or off for a ${provider} account (pause or resume it). Paused accounts aren't picked for new chats or schedules; running work continues. Send the current allocator version.`
+    text: ({ provider }) => `Turn "Enable account" on or off for a ${provider} account (enable or disable it, sometimes called pause or resume). Disabled accounts aren't picked for new chats or schedules; running work continues. Send the current allocator version.`
   },
   {
     method: "PATCH",
@@ -39884,7 +39881,7 @@ function registerFleetTools(server, deps, grant, sessionId, json2) {
   server.registerTool(
     "sandbox_provision",
     {
-      description: "Provision a new sandbox for the fleet. kind=selfhosted posts the Connected Machine card in this chat: the person copies a one-line connect command, runs it on their own computer, and picks Use in this chat; the card also offers the OpenGeni Browser Chrome extension once the machine is connected. When you can already run commands on the target machine, install it yourself with connected_machine_enroll_token instead. kind=modal creates a named Modal sandbox record, but it is NOT yet attachable as a swap target: routing a session onto a second Modal box is not supported yet, so sandbox_swap to its id is rejected. Use the session's own box (the default) or attach a Connected Machine instead.",
+      description: "Provision a new sandbox for the fleet. kind=selfhosted posts the Connected Machine card in this chat: the person copies a one-line connect command, runs it on their own computer, and picks Use in this chat; the card also offers the Opengeni Browser Chrome extension once the machine is connected. When you can already run commands on the target machine, install it yourself with connected_machine_enroll_token instead. kind=modal creates a named Modal sandbox record, but it is NOT yet attachable as a swap target: routing a session onto a second Modal box is not supported yet, so sandbox_swap to its id is rejected. Use the session's own box (the default) or attach a Connected Machine instead.",
       inputSchema: {
         kind: z45.enum(["selfhosted", "modal"]),
         name: z45.string().min(1).max(120).optional()
@@ -39919,7 +39916,7 @@ function registerFleetTools(server, deps, grant, sessionId, json2) {
           kind: "selfhosted",
           status: "card_posted",
           eventId,
-          message: `${setup.status === "ready" ? `${setup.detail} The Connected Machine card lists them with Use in this chat and can connect another.` : "The Connected Machine card was posted. The person copies its one-line connect command, runs it on their machine, and picks Use in this chat; nothing is connected yet."} Check sandboxes_list after they confirm. Chrome needs the OpenGeni Browser extension (${OPENGENI_BROWSER_EXTENSION_URL}) on the connected machine.`
+          message: `${setup.status === "ready" ? `${setup.detail} The Connected Machine card lists them with Use in this chat and can connect another.` : "The Connected Machine card was posted. The person copies its one-line connect command, runs it on their machine, and picks Use in this chat; nothing is connected yet."} Check sandboxes_list after they confirm. Chrome needs the Opengeni Browser extension (${OPENGENI_BROWSER_EXTENSION_URL}) on the connected machine.`
         });
       }
       return json2(
@@ -39935,7 +39932,7 @@ function registerConnectedMachineTools(server, deps, grant, sessionId, json2) {
   server.registerTool(
     "connected_machine_enroll_token",
     {
-      description: "Create a single-use Connected Machine enrollment token for this workspace (expires in one hour) using existing enrollments:manage authority. Returns the token, expiry and Unix/PowerShell install commands. Use it when you can run commands on the target machine yourself (run_on, SSH, a VM you control): run the matching command there, then verify the machine with sandboxes_list. One token connects one machine; mint another for each additional machine (the same machine may rerun its command). When the person must run it on their own computer, post the Connected Machine card instead (capability_authorization_request with api:connected-machine), which mints the command in their browser; do not paste a token into the chat. Screen control is optional and defaults off; to turn it on for a machine that is already connected, use connected_machine_enable_screen_control instead of reconnecting. The token grants whole-machine access on enrollment; do not put it in public code or unrelated logs. Existing machine connections are preserved. For Chrome, the person installs the OpenGeni Browser extension (" + OPENGENI_BROWSER_EXTENSION_URL + ") after the machine is connected.",
+      description: "Create a single-use Connected Machine enrollment token for this workspace (expires in one hour) using existing enrollments:manage authority. Returns the token, expiry and Unix/PowerShell install commands. Use it when you can run commands on the target machine yourself (run_on, SSH, a VM you control): run the matching command there, then verify the machine with sandboxes_list. One token connects one machine; mint another for each additional machine (the same machine may rerun its command). When the person must run it on their own computer, post the Connected Machine card instead (capability_authorization_request with api:connected-machine), which mints the command in their browser; do not paste a token into the chat. Screen control is optional and defaults off; to turn it on for a machine that is already connected, use connected_machine_enable_screen_control instead of reconnecting. The token grants whole-machine access on enrollment; do not put it in public code or unrelated logs. Existing machine connections are preserved. For Chrome, the person installs the Opengeni Browser extension (" + OPENGENI_BROWSER_EXTENSION_URL + ") after the machine is connected.",
       inputSchema: { allowScreenControl: z45.boolean().optional() }
     },
     async ({ allowScreenControl }) => {
@@ -39963,7 +39960,7 @@ function registerConnectedMachineTools(server, deps, grant, sessionId, json2) {
   server.registerTool(
     "connected_machine_enable_screen_control",
     {
-      description: "Turn screen control on for a machine that is already connected, in place, so agents can see and use its screen (computer and attached-Chrome tools). `target` is a sandboxes_list id or an enrollment id. Needs no human click, token, terminal or reconnect: OpenGeni records the consent on that machine and its agent refreshes its own credentials over the live connection. status=active means it is on now. status=pending means it is allowed and turns on by itself: reason=offline when the machine next connects; reason=agent_update_required after its agent is updated (update it with the machine update action, POST /v1/workspaces/{workspaceId}/machines/{enrollmentId}/update); reason=renewal_failed: call again shortly; reason=reconnect_required: the machine's connection predates in-place changes, so rerun the connect command on it (connected_machine_enroll_token with allowScreenControl=true). On a Mac the OS must also allow Screen Recording, Accessibility and Input Monitoring for OpenGeni: open each pane on the Mac with run_on exec `open 'x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture'` (Privacy_Accessibility, Privacy_ListenEvent; also the privacy-settings machine action) and ask the person to switch OpenGeni on there, choosing Quit & Reopen if macOS asks; the machine list reports runtime.macPermissions. Chrome additionally needs the OpenGeni Browser extension (" + OPENGENI_BROWSER_EXTENSION_URL + ") on that machine.",
+      description: "Turn screen control on for a machine that is already connected, in place, so agents can see and use its screen (computer and attached-Chrome tools). `target` is a sandboxes_list id or an enrollment id. Needs no human click, token, terminal or reconnect: Opengeni records the consent on that machine and its agent refreshes its own credentials over the live connection. status=active means it is on now. status=pending means it is allowed and turns on by itself: reason=offline when the machine next connects; reason=agent_update_required after its agent is updated (update it with the machine update action, POST /v1/workspaces/{workspaceId}/machines/{enrollmentId}/update); reason=renewal_failed: call again shortly; reason=reconnect_required: the machine's connection predates in-place changes, so rerun the connect command on it (connected_machine_enroll_token with allowScreenControl=true). On a Mac the OS must also allow Screen Recording, Accessibility and Input Monitoring for Opengeni: open each pane on the Mac with run_on exec `open 'x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture'` (Privacy_Accessibility, Privacy_ListenEvent; also the privacy-settings machine action) and ask the person to switch Opengeni on there, choosing Quit & Reopen if macOS asks; the machine list reports runtime.macPermissions. Chrome additionally needs the Opengeni Browser extension (" + OPENGENI_BROWSER_EXTENSION_URL + ") on that machine.",
       inputSchema: { target: z45.string().min(1) }
     },
     async ({ target }) => {
@@ -41817,7 +41814,7 @@ function registerCapabilityDiscoveryTools(server, deps, grant, sessionId, json2)
   server.registerTool(
     "capability_authorization_request",
     {
-      description: "Show a Connect card in this chat for a suitable capability returned by capability_catalog_search with setup.nextAction. Supply its capability ID and a brief rationale explaining how it helps the task; no separate confirmation is needed before showing the card. Requesting setup needs no integration-management permission and grants no access. The authenticated human completes setup through the card; never ask them to paste credentials into chat. Do not request another card for the same pending setup, or for a candidate reported ready or unavailable. GitHub App (api:github-app) and Connected Machine (api:connected-machine) are exceptions: when already connected their card is still shown, listing repositories or machines the person can use in this chat. Use api:connected-machine when the person should connect their own computer: the card gives them a one-line connect command and the OpenGeni Browser Chrome extension link; never paste an enroll token into the chat yourself." + (secretsSelected ? ' For a single password, API key or code for a service with no connector here, ask with a kind: "secret" question in request_human_input instead; you get a saved reference back.' : ""),
+      description: "Show a Connect card in this chat for a suitable capability returned by capability_catalog_search with setup.nextAction. Supply its capability ID and a brief rationale explaining how it helps the task; no separate confirmation is needed before showing the card. Requesting setup needs no integration-management permission and grants no access. The authenticated human completes setup through the card; never ask them to paste credentials into chat. Do not request another card for the same pending setup, or for a candidate reported ready or unavailable. GitHub App (api:github-app) and Connected Machine (api:connected-machine) are exceptions: when already connected their card is still shown, listing repositories or machines the person can use in this chat. Use api:connected-machine when the person should connect their own computer: the card gives them a one-line connect command and the Opengeni Browser Chrome extension link; never paste an enroll token into the chat yourself." + (secretsSelected ? ' For a single password, API key or code for a service with no connector here, ask with a kind: "secret" question in request_human_input instead; you get a saved reference back.' : ""),
       inputSchema: {
         capabilityId: z45.string().min(1).max(512),
         rationale: z45.string().min(1).max(2e3)
@@ -41863,7 +41860,7 @@ function registerCapabilityDiscoveryTools(server, deps, grant, sessionId, json2)
           capabilityId: item.id,
           status: "ready",
           eventId,
-          message: `${setup.detail} The Connected Machine card is in this chat: the person can pick a machine with "Use in this chat" or connect another. Chrome needs the OpenGeni Browser extension (${OPENGENI_BROWSER_EXTENSION_URL}) on a connected machine.`
+          message: `${setup.detail} The Connected Machine card is in this chat: the person can pick a machine with "Use in this chat" or connect another. Chrome needs the Opengeni Browser extension (${OPENGENI_BROWSER_EXTENSION_URL}) on a connected machine.`
         });
       }
       if (githubCardWhenReady) {
@@ -51080,31 +51077,7 @@ function createBetterAuthSessionAdapter(auth, db) {
       await db.execute(sql`delete from auth_sessions where id = ${input.authSessionId}`);
     },
     async createLegacySelectedSessionCookies(input, currentCookieHeader) {
-      const context = await auth.$context;
-      const cookie = context.authCookies.sessionToken;
-      const value = input ? signedCookieValue(input.token, context.secret) : "";
-      const headers = [
-        serializeCookieHeader(cookie.name, value, {
-          ...cookie.attributes,
-          ...input ? {} : { maxAge: 0, expires: /* @__PURE__ */ new Date(0) }
-        })
-      ];
-      for (const cacheCookie of [
-        context.authCookies.sessionData,
-        context.authCookies.accountData,
-        context.authCookies.dontRememberToken
-      ]) {
-        for (const name of cacheCookieNames(cacheCookie.name, currentCookieHeader)) {
-          headers.push(
-            serializeCookieHeader(name, "", {
-              ...cacheCookie.attributes,
-              maxAge: 0,
-              expires: /* @__PURE__ */ new Date(0)
-            })
-          );
-        }
-      }
-      return headers;
+      return await managedAuthSessionCookieHeaders(auth, input?.token ?? null, currentCookieHeader);
     }
   };
 }
@@ -51116,6 +51089,33 @@ function liveResolvedSession(value) {
   if (!Number.isFinite(expiryMillis) || expiryMillis <= Date.now()) return null;
   return value;
 }
+async function managedAuthSessionCookieHeaders(auth, token, currentCookieHeader) {
+  const context = await auth.$context;
+  const cookie = context.authCookies.sessionToken;
+  const value = token ? signedCookieValue(token, context.secret) : "";
+  const headers = [
+    serializeCookieHeader(cookie.name, value, {
+      ...cookie.attributes,
+      ...token ? {} : { maxAge: 0, expires: /* @__PURE__ */ new Date(0) }
+    })
+  ];
+  for (const cacheCookie of [
+    context.authCookies.sessionData,
+    context.authCookies.accountData,
+    context.authCookies.dontRememberToken
+  ]) {
+    for (const name of cacheCookieNames(cacheCookie.name, currentCookieHeader)) {
+      headers.push(
+        serializeCookieHeader(name, "", {
+          ...cacheCookie.attributes,
+          maxAge: 0,
+          expires: /* @__PURE__ */ new Date(0)
+        })
+      );
+    }
+  }
+  return headers;
+}
 function cookieValue(header, name) {
   if (!header) return null;
   for (const part of header.split(";")) {
@@ -93652,6 +93652,20 @@ function browserIdentityRouteError(error) {
   });
 }
 
+// src/attached-browser-viewer.ts
+import { requireLiveAgentAttemptAuthorization as requireLiveAgentAttemptAuthorization6 } from "@opengeni/core";
+async function attachedBrowserViewer(deps, grant, workspaceId) {
+  let subjectId = grant.subjectId;
+  if (grant.principalKind === "agent_attempt") {
+    const callerSessionId = grant.metadata?.["sessionId"];
+    if (typeof callerSessionId === "string") {
+      const actor = await requireLiveAgentAttemptAuthorization6(deps.db, grant, callerSessionId);
+      subjectId = actor.initiatingHumanSubjectId ?? grant.subjectId;
+    }
+  }
+  return { accountId: grant.accountId, workspaceId, subjectId };
+}
+
 // src/browser-ephemeral.ts
 import { createHmac as createHmac10 } from "crypto";
 import { BrowserControlUnsupportedError } from "@opengeni/runtime/sandbox";
@@ -94751,8 +94765,7 @@ function registerBrowserSessionRoutes(app, deps, options = {}) {
     return context.json(
       AttachedBrowserDeviceListResponse.parse(
         await listAttachedBrowserDevices(deps.db, {
-          accountId: grant.accountId,
-          workspaceId,
+          ...await attachedBrowserViewer(deps, grant, workspaceId),
           includeDisconnected
         })
       )
@@ -94766,8 +94779,7 @@ function registerBrowserSessionRoutes(app, deps, options = {}) {
       return context.json(
         AttachedBrowserDevice.parse(
           await getAttachedBrowserDevice(deps.db, {
-            accountId: grant.accountId,
-            workspaceId,
+            ...await attachedBrowserViewer(deps, grant, workspaceId),
             deviceId
           })
         )
@@ -97010,20 +97022,16 @@ function registerBrowserSessionRoutes(app, deps, options = {}) {
   async function withBrowserPlacement(sourceSession, grant, expectedPlacement, expectedPlacementInstanceId, operation, waitSignal, callback, allowOperationReplay = true) {
     if (expectedPlacement?.kind === "attached_device") {
       waitSignal.throwIfAborted();
+      const viewer = await attachedBrowserViewer(deps, grant, sourceSession.workspaceId);
       const device = await getAttachedBrowserDevice(deps.db, {
-        accountId: grant.accountId,
-        workspaceId: sourceSession.workspaceId,
+        ...viewer,
         deviceId: expectedPlacement.deviceId
       });
       if (device.state !== "connected") {
         recordAttachedBrowserUnavailable(deps.observability, "disconnected");
         throw new BrowserSessionStateError2("Attached browser is disconnected");
       }
-      const enrollment = await getLiveEnrollmentConnection6(
-        deps.db,
-        sourceSession.workspaceId,
-        device.enrollmentId
-      );
+      const enrollment = await getLiveEnrollmentConnection6(deps.db, viewer, device.enrollmentId);
       if (!enrollment || enrollment.status !== "active" || !enrollment.connectionInstanceId) {
         recordAttachedBrowserUnavailable(deps.observability, "machine_unavailable");
         throw new BrowserSessionStateError2("Attached browser machine is unavailable");
@@ -99744,19 +99752,15 @@ function registerComputerSessionRoutes(app, deps, options = {}) {
     }
     if (expectedPlacement?.kind === "attached_device") {
       waitSignal.throwIfAborted();
+      const viewer = await attachedBrowserViewer(deps, grant, sourceSession.workspaceId);
       const device = await getAttachedBrowserDevice2(deps.db, {
-        accountId: grant.accountId,
-        workspaceId: sourceSession.workspaceId,
+        ...viewer,
         deviceId: expectedPlacement.deviceId
       });
       if (device.state !== "connected") {
         throw new ComputerSessionStateError("Attached browser machine is disconnected");
       }
-      const enrollment = await getLiveEnrollmentConnection7(
-        deps.db,
-        sourceSession.workspaceId,
-        device.enrollmentId
-      );
+      const enrollment = await getLiveEnrollmentConnection7(deps.db, viewer, device.enrollmentId);
       if (!enrollment || enrollment.status !== "active" || !enrollment.connectionInstanceId) {
         throw new ComputerSessionStateError("Attached browser machine is unavailable");
       }
@@ -115514,6 +115518,12 @@ function sessionAuthorizationHttpError(error) {
   if (error instanceof HTTPException99) return error;
   throw error;
 }
+var SESSION_FORK_POINT_REFUSAL_MESSAGES = {
+  message_unavailable: "Only your messages and the agent's replies can be fork points. Choose one of those, or fork the whole session.",
+  boundary_not_retained: "This message is from before the conversation was compacted, so it can't be a fork point. Choose a more recent message, or fork the whole session.",
+  history_compacted: "The conversation up to this message was compacted, so it can't be copied as it was then. Choose a more recent message, or fork the whole session.",
+  unfinished_tool_exchange: "The agent was still waiting for a tool result at this message. Choose a later message, or fork the whole session."
+};
 function sessionTenancyHttpError(error) {
   if (error instanceof SessionTenancyManagedHumanRequiredError2) {
     return new ApiHttpError(403, {
@@ -115565,6 +115575,14 @@ function sessionTenancyHttpError(error) {
     });
   }
   if (error instanceof SessionTenancyInvalidRequestError) {
+    if (error.forkPointRefusal) {
+      return new ApiHttpError(422, {
+        code: "validation_failed",
+        message: SESSION_FORK_POINT_REFUSAL_MESSAGES[error.forkPointRefusal],
+        retryable: false,
+        details: { reason: `fork_point_${error.forkPointRefusal}` }
+      });
+    }
     return new ApiHttpError(422, {
       code: "validation_failed",
       message: "Invalid session tenancy request.",
@@ -121038,7 +121056,7 @@ import {
   grantHasAgentAttemptAuthority as grantHasAgentAttemptAuthority4,
   hasPermission as hasPermission34,
   requireAccessGrantAuthorization as requireAccessGrantAuthorization37,
-  requireLiveAgentAttemptAuthorization as requireLiveAgentAttemptAuthorization6,
+  requireLiveAgentAttemptAuthorization as requireLiveAgentAttemptAuthorization7,
   requireSessionAuthorization as requireSessionAuthorization18,
   SessionAuthorizationDeniedError as SessionAuthorizationDeniedError17,
   SessionAuthorizationUnavailableError as SessionAuthorizationUnavailableError15,
@@ -121228,7 +121246,7 @@ function registerArtifactCatalogRoutes(app, deps) {
       try {
         if (typeof callerSessionId !== "string")
           throw new SessionAuthorizationDeniedError17("caller_stale");
-        const attempt = await requireLiveAgentAttemptAuthorization6(deps.db, grant, callerSessionId);
+        const attempt = await requireLiveAgentAttemptAuthorization7(deps.db, grant, callerSessionId);
         actor.initiatingHumanSubjectId = attempt.initiatingHumanSubjectId;
       } catch (error) {
         if (error instanceof SessionAuthorizationDeniedError17)
@@ -127743,12 +127761,23 @@ var CODE_IDENTIFIER_PREFIX = "opengeni-native-app-code:";
 var PKCE_VERIFIER2 = /^[A-Za-z0-9._~-]{43,128}$/u;
 var PKCE_CHALLENGE2 = /^[A-Za-z0-9_-]{43}$/u;
 var MANAGED_PROVIDERS = ["credential", "google", "github"];
+var NATIVE_APP_PLATFORMS = ["ios", "android", "macos", "windows", "linux"];
+var PLATFORM_LABELS = {
+  ios: "iOS",
+  android: "Android",
+  macos: "macOS",
+  windows: "Windows",
+  linux: "Linux"
+};
+function nativeAppSessionUserAgent(platform, deviceName) {
+  return `Opengeni app (${PLATFORM_LABELS[platform]}${deviceName ? `; ${deviceName}` : ""})`;
+}
 var AuthorizeBody = z71.object({
   redirectUri: z71.string().min(1).max(512),
   codeChallenge: z71.string().regex(PKCE_CHALLENGE2),
   codeChallengeMethod: z71.literal("S256"),
   state: z71.string().min(8).max(256).optional(),
-  platform: z71.enum(["ios", "android"]),
+  platform: z71.enum(NATIVE_APP_PLATFORMS),
   deviceName: z71.string().trim().min(1).max(80).optional()
 });
 var TokenBody = z71.object({
@@ -127768,7 +127797,7 @@ var StoredGrant = z71.object({
   providerId: z71.enum(MANAGED_PROVIDERS),
   redirectUri: z71.string(),
   codeChallenge: z71.string().regex(PKCE_CHALLENGE2),
-  platform: z71.enum(["ios", "android"]),
+  platform: z71.enum(NATIVE_APP_PLATFORMS),
   deviceName: z71.string().nullable()
 });
 function nativeAppRedirectAllowed(redirectUri, schemes) {
@@ -127867,11 +127896,10 @@ function registerNativeAppAuthRoutes(app, deps) {
     if (!sameText(grant.redirectUri, body4.redirectUri) || !sameText(grant.codeChallenge, pkceS256Challenge(body4.codeVerifier))) {
       return context.json({ error: "invalid_grant" }, 400);
     }
-    const platform = grant.platform === "ios" ? "iOS" : "Android";
     const session = await runManagedAuthProvider(
       grant.providerId,
       () => authContext.internalAdapter.createSession(grant.userId, false, {
-        userAgent: `Opengeni app (${platform}${grant.deviceName ? `; ${grant.deviceName}` : ""})`
+        userAgent: nativeAppSessionUserAgent(grant.platform, grant.deviceName)
       })
     );
     if (!session?.token || new Date(session.expiresAt).getTime() <= Date.now()) {
@@ -127897,6 +127925,31 @@ function registerNativeAppAuthRoutes(app, deps) {
     }
     return context.json({ signedOut: true });
   });
+  app.post(`${base}/web-session`, async (context) => {
+    const auth = deps.managedAuth;
+    if (!auth) throw new HTTPException126(404);
+    if (deps.settings.managedAuthSessionSetMode === "broker") {
+      throw new HTTPException126(409, {
+        message: "This deployment signs browser windows in through login session sets"
+      });
+    }
+    const credential = bearer(context.req.header("authorization"));
+    if (!credential?.startsWith(NATIVE_APP_CREDENTIAL_PREFIX)) {
+      throw new HTTPException126(401, { message: "Native app credential required" });
+    }
+    const session = await getNativeAppManagedSession(auth, credential, deps.db).catch(() => null);
+    if (typeof session?.session?.id !== "string") {
+      throw new HTTPException126(401, { message: "Sign in again" });
+    }
+    for (const cookie of await managedAuthSessionCookieHeaders(
+      auth,
+      credential.slice(NATIVE_APP_CREDENTIAL_PREFIX.length),
+      context.req.header("cookie") ?? null
+    )) {
+      context.header("set-cookie", cookie, { append: true });
+    }
+    return context.json({ signedIn: true });
+  });
   const appSessionId = async (authorization) => {
     const auth = deps.managedAuth;
     if (!auth) throw new HTTPException126(404);
@@ -135416,6 +135469,7 @@ function createAppComposition(deps) {
       ClientConfig.parse({
         deploymentRevision: deps.settings.deploymentRevision,
         claudeSubscriptionEnabled: deps.settings.claudeSubscriptionEnabled,
+        connectedMachines: deps.settings.sandboxSelfhostedEnabled,
         apiContractRevision: OPENGENI_API_CONTRACT_REVISION4,
         ...deps.settings.serverVersion ? { serverVersion: deps.settings.serverVersion } : {},
         defaultModel,
@@ -137625,4 +137679,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession4 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-D5WJ24GY.js.map
+//# sourceMappingURL=chunk-ZDTWXRFX.js.map