@opengeni/api-router 2.10.0-canary.0 → 2.10.0-canary.1

package/dist/{chunk-XXH7DW34.js → chunk-3VUEFGWS.js}

@@ -1,3 +1,210 @@
+// src/codemode.ts
+import {
+  codemodeDispatchSubject,
+  decodeCodemodeDispatchAck,
+  encodeCodemodeDispatchRequest
+} from "@opengeni/codemode";
+import {
+  CODEMODE_DISPATCH_TIMEOUT_MS,
+  CodemodeCallRequest,
+  CodemodeCallSubmission
+} from "@opengeni/contracts";
+import { hasPermission, requireSessionAuthorization } from "@opengeni/core";
+import {
+  getActiveSessionTurnForExecution,
+  getAttemptToolCatalog,
+  getCodemodeOperation,
+  submitCodemodeOperation
+} from "@opengeni/db";
+import { getSession } from "@opengeni/db";
+import { resolveFirstPartyDelegationSecret } from "@opengeni/config";
+import {
+  DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,
+  signDelegatedAccessToken,
+  siteSessionPath,
+  OPENGENI_API_CONTRACT_HEADER,
+  OPENGENI_API_CONTRACT_REVISION
+} from "@opengeni/contracts";
+async function codemodeSessionRequest(deps, grant, request, path) {
+  siteSessionPath(path, grant.workspaceId, request.method);
+  const { authority } = await requireActiveCodemodeCatalog(deps, grant);
+  const session = await getSession(deps.db, authority.workspaceId, authority.sessionId);
+  const secret = resolveFirstPartyDelegationSecret(deps.settings);
+  if (!session || !secret) throw new CodemodeAuthorityError("invalid_grant");
+  const permissions = (session.firstPartyMcpPermissions ?? [...DEFAULT_FIRST_PARTY_MCP_PERMISSIONS]).filter(
+    (p) => ["workspace:read", "sessions:read", "sessions:create", "sessions:control"].includes(p)
+  );
+  const token = await signDelegatedAccessToken(secret, {
+    ...authority,
+    permissions,
+    principalKind: "agent_attempt",
+    exp: Math.floor(Date.now() / 1e3) + 60
+  });
+  const target = new URL(request.url);
+  const rewritten = siteSessionPath(path, authority.workspaceId, request.method);
+  const url = new URL(rewritten, target.origin);
+  const headers = new Headers({
+    authorization: `Bearer ${token}`,
+    [OPENGENI_API_CONTRACT_HEADER]: OPENGENI_API_CONTRACT_REVISION
+  });
+  for (const name of ["content-type", "accept", "last-event-id"]) {
+    const value = request.headers.get(name);
+    if (value) headers.set(name, value);
+  }
+  return new Request(url, {
+    method: request.method,
+    headers,
+    signal: request.signal,
+    ...request.body ? { body: await request.text() } : {}
+  });
+}
+var CODEMODE_AUTHORITY_FAILURE_MESSAGES = {
+  invalid_grant: "Codemode bearer does not carry valid execution-attempt authority",
+  inactive_attempt: "Codemode execution attempt is no longer active",
+  catalog_mismatch: "Codemode tool catalog does not match the active execution attempt"
+};
+var CodemodeAuthorityError = class extends Error {
+  constructor(reason2) {
+    super(CODEMODE_AUTHORITY_FAILURE_MESSAGES[reason2]);
+    this.reason = reason2;
+    this.name = "CodemodeAuthorityError";
+    this.code = `codemode_${reason2}`;
+  }
+  code;
+};
+var CodemodeCatalogNotReadyError = class extends Error {
+  code = "codemode_catalog_not_ready";
+  constructor() {
+    super("Codemode tool catalog is not ready for the active execution attempt");
+    this.name = "CodemodeCatalogNotReadyError";
+  }
+};
+var CodemodeCatalogStaleError = class extends Error {
+  code = "codemode_catalog_stale";
+  constructor() {
+    super("Codemode tool catalog is stale for the active execution attempt");
+    this.name = "CodemodeCatalogStaleError";
+  }
+};
+function codemodeAuthorityForGrant(grant) {
+  const metadata = grant.metadata;
+  if (grant.principalKind !== "agent_attempt" || metadata?.delegated !== true || typeof metadata.sessionId !== "string" || typeof metadata.turnId !== "string" || typeof metadata.attemptId !== "string" || typeof metadata.executionGeneration !== "number" || !Number.isInteger(metadata.executionGeneration) || metadata.executionGeneration < 1) {
+    return null;
+  }
+  return {
+    accountId: grant.accountId,
+    workspaceId: grant.workspaceId,
+    sessionId: metadata.sessionId,
+    turnId: metadata.turnId,
+    attemptId: metadata.attemptId,
+    executionGeneration: metadata.executionGeneration,
+    subjectId: grant.subjectId
+  };
+}
+function isCodemodeGrant(grant) {
+  return hasPermission(grant.permissions, "codemode:call") && codemodeAuthorityForGrant(grant) !== null;
+}
+function requireMatchingCodemodeCatalog(authority, catalog) {
+  if (!catalog) throw new CodemodeCatalogNotReadyError();
+  if (catalog.accountId !== authority.accountId || catalog.workspaceId !== authority.workspaceId || catalog.sessionId !== authority.sessionId || catalog.turnId !== authority.turnId || catalog.attemptId !== authority.attemptId || catalog.executionGeneration !== authority.executionGeneration) {
+    throw new CodemodeAuthorityError("catalog_mismatch");
+  }
+  return catalog;
+}
+async function requireActiveCodemodeCatalog(deps, grant) {
+  if (!isCodemodeGrant(grant)) throw new CodemodeAuthorityError("invalid_grant");
+  const authority = codemodeAuthorityForGrant(grant);
+  await requireSessionAuthorization(deps, grant, {
+    sessionId: authority.sessionId,
+    operation: "session.codemode.call",
+    surface: "codemode"
+  });
+  const active = await getActiveSessionTurnForExecution(
+    deps.db,
+    authority.workspaceId,
+    authority.sessionId
+  );
+  if (!active || active.status !== "running" || active.id !== authority.turnId || active.activeAttemptId !== authority.attemptId || active.executionGeneration !== authority.executionGeneration) {
+    throw new CodemodeAuthorityError("inactive_attempt");
+  }
+  const catalog = requireMatchingCodemodeCatalog(
+    authority,
+    await getAttemptToolCatalog(deps.db, {
+      accountId: authority.accountId,
+      workspaceId: authority.workspaceId,
+      attemptId: authority.attemptId
+    })
+  );
+  return { authority, catalog };
+}
+async function submitAndDispatchCodemodeCall(deps, grant, rawRequest) {
+  const request = CodemodeCallRequest.parse(rawRequest);
+  const { authority, catalog } = await requireActiveCodemodeCatalog(deps, grant);
+  if (request.catalogDigest !== catalog.digest) throw new CodemodeCatalogStaleError();
+  const submitted = await submitCodemodeOperation(deps.db, {
+    ...authority,
+    call: {
+      ...request,
+      caller: { kind: "codemode", subjectId: authority.subjectId }
+    }
+  });
+  let operation = submitted.operation;
+  let dispatch = terminal(operation) ? "terminal" : operation.state === "running" ? "already_running" : "unavailable";
+  if (codemodeOperationNeedsDispatch(operation)) {
+    try {
+      const reply = await deps.bus.request(
+        codemodeDispatchSubject(authority.workspaceId, authority.attemptId),
+        encodeCodemodeDispatchRequest({
+          version: 1,
+          operationId: operation.operationId,
+          catalogDigest: catalog.digest
+        }),
+        { timeoutMs: CODEMODE_DISPATCH_TIMEOUT_MS }
+      );
+      dispatch = decodeCodemodeDispatchAck(reply.data).status;
+    } catch {
+      dispatch = "unavailable";
+    }
+    operation = await refreshAdmittedCodemodeOperation(
+      operation,
+      () => getCodemodeOperation(deps.db, {
+        accountId: authority.accountId,
+        workspaceId: authority.workspaceId,
+        attemptId: authority.attemptId,
+        operationId: operation.operationId
+      })
+    );
+    if (terminal(operation)) dispatch = "terminal";
+    else if (operation.state === "running" && dispatch === "unavailable") {
+      dispatch = "already_running";
+    }
+  }
+  return CodemodeCallSubmission.parse({ operation, dispatch });
+}
+function codemodeOperationNeedsDispatch(operation) {
+  return operation.state === "queued" || operation.state === "running";
+}
+async function readCodemodeOperation(deps, grant, operationId) {
+  if (!isCodemodeGrant(grant)) throw new CodemodeAuthorityError("invalid_grant");
+  const authority = codemodeAuthorityForGrant(grant);
+  return await getCodemodeOperation(deps.db, {
+    accountId: authority.accountId,
+    workspaceId: authority.workspaceId,
+    attemptId: authority.attemptId,
+    operationId
+  });
+}
+function terminal(operation) {
+  return ["completed", "failed", "outcome_unknown", "cancelled"].includes(operation.state);
+}
+async function refreshAdmittedCodemodeOperation(admitted, read) {
+  try {
+    return await read() ?? admitted;
+  } catch {
+    return admitted;
+  }
+}
+
 // src/app.ts
 import {
   canonicalizeConfiguredModelId as canonicalizeConfiguredModelId2,
@@ -12,8 +219,8 @@ import {
   ClientConfig,
   CodemodeCallRequest as CodemodeCallRequest2,
   ErrorEnvelope,
-  OPENGENI_API_CONTRACT_HEADER,
-  OPENGENI_API_CONTRACT_REVISION,
+  OPENGENI_API_CONTRACT_HEADER as OPENGENI_API_CONTRACT_HEADER2,
+  OPENGENI_API_CONTRACT_REVISION as OPENGENI_API_CONTRACT_REVISION2,
   OPENGENI_CORRELATION_HEADER,
   resolveWorkspaceMemoryEnabled,
   resolveWorkspaceMemoryPromptMode,
@@ -114,7 +321,7 @@ import {
   ManagedAuthActorLeaseOutcomeUnknownError,
   hasPermission as hasPermission26,
   requireAccessGrant as requireAccessGrant46,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization19,
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization20,
   requirePermission as requirePermission9,
   releaseManagedAuthRequestActorLease,
   resolveCatalogSettings,
@@ -2290,7 +2497,271 @@ function makeResumeBoxById(client) {
 import { requireLimit as requireLimit10 } from "@opengeni/core";
 
 // src/mcp/server.ts
-import { createHash as createHash10, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash9, randomUUID as randomUUID2 } from "crypto";
+
+// src/site-uploads.ts
+import { WorkspaceArtifactSourceBundle as WorkspaceArtifactSourceBundle2 } from "@opengeni/contracts";
+import {
+  createWorkspaceArtifactUpload,
+  getWorkspaceArtifactUpload,
+  expireWorkspaceArtifactUploads,
+  WorkspaceArtifactOperationError
+} from "@opengeni/db";
+
+// src/workspace-artifact-content.ts
+import {
+  WorkspaceArtifactHtml,
+  WorkspaceArtifactRequestedTools,
+  WorkspaceArtifactSourceBundle
+} from "@opengeni/contracts";
+import { retryWhileMissing } from "@opengeni/storage";
+var encoder2 = new TextEncoder();
+var decoder = new TextDecoder("utf-8", { fatal: true });
+function prepareWorkspaceArtifactContent(objectStorage, workspaceId, input) {
+  const html = WorkspaceArtifactHtml.parse(input.html);
+  const source = input.source ? WorkspaceArtifactSourceBundle.parse(input.source) : null;
+  const requestedTools = input.requestedTools === void 0 ? void 0 : WorkspaceArtifactRequestedTools.parse(input.requestedTools);
+  const contentBytes = encoder2.encode(html);
+  const sourceBytes = source ? encoder2.encode(JSON.stringify(source)) : null;
+  const contentSha256 = null;
+  const sourceSha256 = null;
+  const storageGroupId = crypto.randomUUID();
+  const contentKey = `workspaces/${workspaceId}/workspace-artifacts/blobs/${storageGroupId}.html`;
+  const sourceKey = `workspaces/${workspaceId}/workspace-artifacts/sources/${storageGroupId}.json`;
+  const discardContent = async () => {
+    await Promise.allSettled([
+      objectStorage.deleteObject(contentKey),
+      ...source ? [objectStorage.deleteObject(sourceKey)] : []
+    ]);
+  };
+  return {
+    contentKey,
+    contentSha256,
+    sizeBytes: contentBytes.byteLength,
+    sourceKey: source ? sourceKey : null,
+    sourceSha256,
+    sourceSizeBytes: sourceBytes?.byteLength ?? null,
+    ...requestedTools === void 0 ? {} : { requestedTools },
+    discardContent,
+    persistContent: async () => {
+      const writes = await Promise.allSettled([
+        objectStorage.putObject({
+          key: contentKey,
+          contentType: "text/html; charset=utf-8",
+          body: contentBytes
+        }),
+        sourceBytes ? objectStorage.putObject({
+          key: sourceKey,
+          contentType: "application/json; charset=utf-8",
+          body: sourceBytes
+        }) : Promise.resolve()
+      ]);
+      const failed = writes.find((write) => write.status === "rejected");
+      if (!failed) return;
+      await Promise.allSettled(
+        writes.flatMap(
+          (write, index) => write.status === "fulfilled" ? [objectStorage.deleteObject(index === 0 ? contentKey : sourceKey)] : []
+        )
+      );
+      throw failed.reason;
+    }
+  };
+}
+async function readWorkspaceArtifactContent(objectStorage, input) {
+  const [contentObject, sourceObject] = await Promise.all([
+    retryWhileMissing(async () => await objectStorage.getObjectBytes(input.contentKey)),
+    input.sourceKey ? retryWhileMissing(async () => await objectStorage.getObjectBytes(input.sourceKey)) : Promise.resolve(null)
+  ]);
+  if (!contentObject) throw new Error("Artifact content is unavailable");
+  const html = decode(contentObject.bytes, "Artifact content is not valid UTF-8");
+  let source = sourceBundleFromHtml(html);
+  if (input.sourceKey) {
+    if (!sourceObject) throw new Error("Artifact source is unavailable");
+    try {
+      source = WorkspaceArtifactSourceBundle.parse(
+        JSON.parse(decode(sourceObject.bytes, "Artifact source is not valid UTF-8"))
+      );
+    } catch (error) {
+      if (error instanceof Error && error.message === "Artifact source is not valid UTF-8") {
+        throw error;
+      }
+      throw new Error("Artifact source is invalid", { cause: error });
+    }
+  }
+  return {
+    html,
+    source,
+    requestedTools: WorkspaceArtifactRequestedTools.parse(input.version.requestedTools)
+  };
+}
+function sourceBundleFromHtml(html) {
+  return { entrypoint: "index.html", files: [{ path: "index.html", content: html }] };
+}
+function decode(bytes, message) {
+  try {
+    return decoder.decode(bytes);
+  } catch (error) {
+    throw new Error(message, { cause: error });
+  }
+}
+
+// src/site-uploads.ts
+var MAX_SITE_SOURCE_BYTES = 64 * 1024 * 1024;
+async function validateSiteSource(storage, key, sizeBytes) {
+  if (sizeBytes > MAX_SITE_SOURCE_BYTES) {
+    throw new WorkspaceArtifactOperationError(
+      "Editable source JSON must be at most 64 MiB. Exclude dependencies and build output; HTML has a separate storage limit."
+    );
+  }
+  const content = await storage.getObjectBytes(key);
+  try {
+    WorkspaceArtifactSourceBundle2.parse(
+      JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(content.bytes))
+    );
+  } catch {
+    throw new WorkspaceArtifactOperationError(
+      "Source must be JSON {entrypoint, files: [{path, content}]}. Correct it and prepare a new upload."
+    );
+  }
+}
+function keys(workspaceId, id) {
+  const base = `workspaces/${workspaceId}/workspace-artifacts`;
+  return {
+    html: `${base}/uploads/${id}/index.html`,
+    source: `${base}/uploads/${id}/source.json`,
+    frozenHtml: `${base}/blobs/${id}.html`,
+    frozenSource: `${base}/sources/${id}.json`
+  };
+}
+function owner(grant) {
+  return typeof grant.metadata?.sessionId === "string" ? `session:${grant.metadata.sessionId}` : `subject:${grant.subjectId}`;
+}
+async function prepareWorkspaceArtifactUpload(deps, grant) {
+  const storage = deps.objectStorage;
+  if (!storage) throw new Error("Object storage is not configured");
+  const expired = await expireWorkspaceArtifactUploads(deps.db, grant.workspaceId);
+  await Promise.allSettled(
+    expired.flatMap((row2) => {
+      const paths2 = keys(row2.workspaceId, row2.id);
+      return (row2.status === "published" ? [paths2.html, paths2.source] : Object.values(paths2)).map(
+        (key) => storage.deleteObject(key)
+      );
+    })
+  );
+  const row = await createWorkspaceArtifactUpload(deps.db, {
+    accountId: grant.accountId,
+    workspaceId: grant.workspaceId,
+    ownerId: owner(grant)
+  });
+  const paths = keys(grant.workspaceId, row.id);
+  const audience = grant.principalKind === "agent_attempt" ? "sandbox" : "public";
+  const [html, source] = await Promise.all([
+    storage.createPutUrl({ key: paths.html, contentType: "text/html", audience }),
+    storage.createPutUrl({ key: paths.source, contentType: "application/json", audience })
+  ]);
+  return {
+    uploadId: row.id,
+    html: { putUrl: html.url, requiredHeaders: html.requiredHeaders },
+    source: { putUrl: source.url, requiredHeaders: source.requiredHeaders },
+    expiresAt: new Date(
+      Math.min(html.expiresAt.getTime(), source.expiresAt.getTime())
+    ).toISOString()
+  };
+}
+async function* readArtifactObject(storage, key, expectedHead) {
+  if (!storage.headObject || !storage.getObjectRange)
+    throw new Error("Object storage cannot stream Site content");
+  const head = expectedHead ?? await storage.headObject(key);
+  if (!head || !head.VersionToken || head.ContentLength === void 0)
+    throw new Error("Site content is unavailable");
+  for (let start = 0; start < head.ContentLength; start += 1024 * 1024) {
+    const endInclusive = Math.min(head.ContentLength - 1, start + 1024 * 1024 - 1);
+    const part = await storage.getObjectRange({
+      key,
+      start,
+      endInclusive,
+      expectedVersionToken: head.VersionToken
+    });
+    if (!part || part.versionToken !== head.VersionToken || part.bytes.length !== endInclusive - start + 1)
+      throw new Error("Site object changed during transfer");
+    yield part.bytes;
+  }
+}
+async function freeze(storage, from, to, contentType, optional = false) {
+  if (!storage.headObject || !storage.putObjectStreamIfAbsent)
+    throw new Error("Object storage cannot freeze Site uploads");
+  const existing = await storage.headObject(to);
+  if (existing) return existing.ContentLength;
+  const head = await storage.headObject(from);
+  if (!head && optional) return null;
+  if (!head || !head.ContentLength)
+    throw new WorkspaceArtifactOperationError("Upload HTML before publishing the Site");
+  if (head.ContentLength > storage.maxSinglePutSizeBytes)
+    throw new Error("Site exceeds the storage upload limit");
+  const decoder2 = new TextDecoder("utf-8", { fatal: true });
+  async function* chunks() {
+    for await (const part of readArtifactObject(storage, from, head)) {
+      decoder2.decode(part, { stream: true });
+      yield part;
+    }
+    decoder2.decode();
+  }
+  await storage.putObjectStreamIfAbsent({
+    key: to,
+    contentType,
+    byteSize: head.ContentLength,
+    chunks: chunks()
+  });
+  return (await storage.headObject(to)).ContentLength;
+}
+async function prepareWorkspaceArtifactPublication(deps, grant, input) {
+  const storage = deps.objectStorage;
+  if (!storage) throw new Error("Object storage is not configured");
+  if (Boolean(input.uploadId) === (input.html !== void 0))
+    throw new Error("Provide either uploadId or inline html, not both");
+  if (!input.uploadId) {
+    return prepareWorkspaceArtifactContent(storage, grant.workspaceId, {
+      ...input,
+      html: input.html
+    });
+  }
+  if (input.source) throw new Error("Upload source JSON using the source upload URL");
+  const row = await getWorkspaceArtifactUpload(deps.db, grant.workspaceId, input.uploadId);
+  if (!row || row.ownerId !== owner(grant) || row.status === "expired" || row.status === "pending" && row.expiresAt.getTime() <= Date.now())
+    throw new WorkspaceArtifactOperationError("Site upload expired or unavailable");
+  const paths = keys(grant.workspaceId, row.id);
+  const sizeBytes = await freeze(storage, paths.html, paths.frozenHtml, "text/html; charset=utf-8");
+  const sourceSizeBytes = row.status === "published" && !await storage.headObject(paths.frozenSource) ? null : await freeze(storage, paths.source, paths.frozenSource, "application/json", true);
+  if (sourceSizeBytes !== null) {
+    await validateSiteSource(storage, paths.frozenSource, sourceSizeBytes);
+  }
+  return {
+    uploadId: row.id,
+    contentKey: paths.frozenHtml,
+    contentSha256: null,
+    sizeBytes,
+    sourceKey: sourceSizeBytes === null ? null : paths.frozenSource,
+    sourceSha256: null,
+    sourceSizeBytes,
+    ...input.requestedTools === void 0 ? {} : { requestedTools: input.requestedTools },
+    persistContent: async () => {
+    },
+    discardContent: async () => {
+    }
+  };
+}
+async function workspaceArtifactDownloads(storage, ref, audience) {
+  const [html, source] = await Promise.all([
+    storage.createGetUrl({ key: ref.contentKey, audience }),
+    ref.sourceKey ? storage.createGetUrl({ key: ref.sourceKey, audience }) : null
+  ]);
+  return {
+    html: { url: html.url, expiresAt: html.expiresAt },
+    source: source ? { url: source.url, expiresAt: source.expiresAt, format: "source-bundle-json" } : null
+  };
+}
+
+// src/mcp/server.ts
 import {
   CreateScheduledTaskRequest,
   boundSessionMcpText as capSessionDiscoveryText,
@@ -2348,7 +2819,7 @@ import {
   createVariableSet,
   decryptVariableSetValue,
   encryptVariableSetValue,
-  getSession as getSession2,
+  getSession as getSession3,
   getSessionGoal,
   getSessionMcpMonitoringSummary,
   getSessionQueueSnapshot,
@@ -2424,14 +2895,14 @@ import { HTTPException as HTTPException19 } from "hono/http-exception";
 import * as z43 from "zod/v4";
 import {
   hasLiteralPermission,
-  hasPermission as hasPermission10,
+  hasPermission as hasPermission11,
   authorizedSocialConnectionsForGrant,
   authorizedAtlassianConnectionsForGrant,
   buildCapabilityCatalog,
   correctWorkspaceMemoryWithSlackPublication,
   nativeConnectionCapabilityRecommendations,
   requireLiveAgentAttemptAuthorization as requireLiveAgentAttemptAuthorization3,
-  requireSessionAuthorization as requireSessionAuthorization2,
+  requireSessionAuthorization as requireSessionAuthorization3,
   requireSessionAuthorizationListScope,
   resolveWorkspaceCatalogSettings as resolveWorkspaceCatalogSettings2,
   SessionAuthorizationDeniedError as SessionAuthorizationDeniedError4,
@@ -2439,7 +2910,7 @@ import {
   saveWorkspaceMemoryWithSlackPublication,
   searchCapabilityCatalogItems
 } from "@opengeni/core";
-import { recordWorkspaceUsage as recordWorkspaceUsage3, requireLimit as requireLimit3 } from "@opengeni/core";
+import { recordWorkspaceUsage as recordWorkspaceUsage3, requireLimit as requireLimit3, workflowIdForSession } from "@opengeni/core";
 
 // src/github-access.ts
 import {
@@ -2622,10 +3093,10 @@ async function listWorkspaceGitHubRepositoryBranches(deps, input, services = wor
 }
 
 // src/github-browser-flow.ts
-import { hasPermission } from "@opengeni/core";
+import { hasPermission as hasPermission2 } from "@opengeni/core";
 var githubBrowserGrantMaxAgeSeconds = 10 * 60;
 function githubBrowserGrantClaims(settings, grant, nowSeconds = Math.floor(Date.now() / 1e3)) {
-  if (settings.productAccessMode !== "configured" || !hasPermission(grant.permissions, "github:manage")) {
+  if (settings.productAccessMode !== "configured" || !hasPermission2(grant.permissions, "github:manage")) {
     return {};
   }
   return {
@@ -2682,7 +3153,7 @@ import {
 } from "@opengeni/contracts";
 import { recordWorkspaceUsage as recordWorkspaceUsage2, requireLimit as requireLimit2 } from "@opengeni/core";
 import { completeFileUpload as completeFileUpload2, getFile, prepareGeneratedWorkspaceFile } from "@opengeni/db";
-import { retryWhileMissing as retryWhileMissing2 } from "@opengeni/storage";
+import { retryWhileMissing as retryWhileMissing3 } from "@opengeni/storage";
 import { HTTPException as HTTPException7 } from "hono/http-exception";
 
 // src/sandbox/channel-a.ts
@@ -2756,6 +3227,7 @@ import {
 } from "@opengeni/core";
 
 // src/sandbox/rematerialize.ts
+import { parseWorkspaceArchiveObjectRef } from "@opengeni/contracts";
 import {
   adoptLegacyModalCheckpointArtifact,
   beginSandboxRematerialization,
@@ -2768,6 +3240,7 @@ import {
   SandboxLeaseSupersededError
 } from "@opengeni/db";
 import {
+  inlineWorkspaceArchiveForRestore,
   describeLegacyNativeSnapshotArchive,
   establishSandboxSessionFromEnvelope,
   isProviderSandboxNotFoundError,
@@ -2784,8 +3257,33 @@ import {
   WorkspaceArchiveIntegrityError
 } from "@opengeni/runtime/sandbox";
 function hasWorkspaceArchive(envelope) {
-  const sessionState = envelope?.sessionState && typeof envelope.sessionState === "object" ? envelope.sessionState : null;
-  return typeof sessionState?.workspaceArchive === "string" && sessionState.workspaceArchive.length > 0;
+  const sessionState = envelope?.sessionState && typeof envelope.sessionState === "object" && !Array.isArray(envelope.sessionState) ? envelope.sessionState : null;
+  return typeof sessionState?.workspaceArchive === "string" && sessionState.workspaceArchive.length > 0 || parseWorkspaceArchiveObjectRef(sessionState?.workspaceArchiveRef) !== null;
+}
+async function materializeArchiveObjectRef(envelope, objectStorage) {
+  if (!envelope) return null;
+  const sessionState = envelope.sessionState && typeof envelope.sessionState === "object" && !Array.isArray(envelope.sessionState) ? envelope.sessionState : null;
+  if (!sessionState) return envelope;
+  if (sessionState.workspaceArchiveRef == null) return envelope;
+  if (!parseWorkspaceArchiveObjectRef(sessionState.workspaceArchiveRef)) {
+    throw new WorkspaceArchiveIntegrityError(
+      "archive_metadata_invalid",
+      "workspace archive object reference is malformed"
+    );
+  }
+  if (!objectStorage) {
+    throw new WorkspaceArchiveIntegrityError(
+      "archive_base64_invalid",
+      "workspace archive object storage is not configured"
+    );
+  }
+  return {
+    ...envelope,
+    sessionState: await inlineWorkspaceArchiveForRestore(
+      sessionState,
+      (key) => objectStorage.getObjectBytes(key)
+    )
+  };
 }
 function legacyNativeArchiveFromEnvelope(envelope) {
   const sessionState = envelope?.sessionState && typeof envelope.sessionState === "object" ? envelope.sessionState : null;
@@ -2864,8 +3362,9 @@ async function establishApiSandboxSpawner(input) {
         input.acquiredLease.recovery
       );
     }
+    const hydrateEnvelope = await materializeArchiveObjectRef(spawnEnvelope, input.objectStorage);
     const providerCreateStartedAt = /* @__PURE__ */ new Date();
-    established = await establishSandboxSessionFromEnvelope(input.settings, spawnEnvelope, {
+    established = await establishSandboxSessionFromEnvelope(input.settings, hydrateEnvelope, {
       sessionId: input.sessionId,
       recovery: "create-or-restore",
       backendOverride: input.backend,
@@ -3618,7 +4117,8 @@ async function withChannelAOperation(services, ctx, readOnly, fn) {
           expectedEpoch,
           acquiredLease: acquired.lease,
           fallbackEnvelope: envelope,
-          dataPlaneUrl: acquired.lease.dataPlaneUrl
+          dataPlaneUrl: acquired.lease.dataPlaneUrl,
+          ...services.objectStorage !== void 0 ? { objectStorage: services.objectStorage } : {}
         });
         established = result.established;
         leaseSnapshot = result.lease;
@@ -3970,12 +4470,12 @@ import {
   SessionAuthorizationDeniedError as SessionAuthorizationDeniedError2
 } from "@opengeni/core";
 import { recordWorkspaceUsage, requireLimit } from "@opengeni/core";
-import { retryWhileMissing } from "@opengeni/storage";
+import { retryWhileMissing as retryWhileMissing2 } from "@opengeni/storage";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 
 // src/mcp/files.ts
 import { recordAuditEvent, requireFileForSubject } from "@opengeni/db";
-import { hasPermission as hasPermission2 } from "@opengeni/core";
+import { hasPermission as hasPermission3 } from "@opengeni/core";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import * as z from "zod/v4";
 function buildFilesMcpServer(deps, grant) {
@@ -3983,7 +4483,7 @@ function buildFilesMcpServer(deps, grant) {
     name: "opengeni-files",
     version: "1.0.0"
   });
-  if (!hasPermission2(grant.permissions, "files:read")) {
+  if (!hasPermission3(grant.permissions, "files:read")) {
     server.registerTool(
       "__opengeni_empty_files_surface__",
       {
@@ -4131,7 +4631,7 @@ import {
 } from "@opengeni/contracts";
 import {
   buildApiIntegrationMcpServers,
-  hasPermission as hasPermission3,
+  hasPermission as hasPermission4,
   requireResolvedAccessGrantAuthorization,
   resolveCodexAppsCredentialIdForRun,
   resolveWorkspaceCatalogSettings,
@@ -4846,10 +5346,10 @@ function workspaceToolGatewaySettingsForGrant(settings, grant, allowedIdentities
     ...settings,
     mcpServers: settings.mcpServers.filter((server) => {
       if (allowedServerIds && !allowedServerIds.has(server.id)) return false;
-      if (server.id === "docs" && !hasPermission3(grant.permissions, "documents:search")) {
+      if (server.id === "docs" && !hasPermission4(grant.permissions, "documents:search")) {
         return false;
       }
-      if (server.id === "files" && !hasPermission3(grant.permissions, "files:read")) return false;
+      if (server.id === "files" && !hasPermission4(grant.permissions, "files:read")) return false;
       return true;
     })
   };
@@ -5821,7 +6321,7 @@ function registerFileRoutes(app, deps) {
       const file2 = await rejectAndCleanObject(409, "file upload has expired", "expired");
       return c.json(CompleteFileUploadResponse.parse({ file: file2 }));
     }
-    const head = await retryWhileMissing(async () => {
+    const head = await retryWhileMissing2(async () => {
       if (!await objectStorage.fileExists(upload.file)) return null;
       return await objectStorage.headFile(upload.file);
     });
@@ -5920,7 +6420,7 @@ function registerFileRoutes(app, deps) {
       throw new HTTPException6(409, { message: `generated video is ${retained.file.status}` });
     }
     const file = generatedVideoFileAsset(retained.file);
-    const videoPresent = await retryWhileMissing(
+    const videoPresent = await retryWhileMissing2(
       async () => await objectStorage.fileExists(file) ? true : null
     );
     if (!videoPresent) {
@@ -6012,7 +6512,7 @@ function registerFileRoutes(app, deps) {
     if (file.status !== "ready") {
       throw new HTTPException6(409, { message: `file is ${file.status}` });
     }
-    const present = await retryWhileMissing(
+    const present = await retryWhileMissing2(
       async () => await objectStorage.fileExists(file) ? true : null
     );
     if (!present) {
@@ -6086,7 +6586,7 @@ async function serveRetainedArtifactContent(c, objectStorage, artifactId2, file,
     ...range.contentRange ? { "Content-Range": range.contentRange } : {}
   };
   if (range.kind === "empty") {
-    const present = await retryWhileMissing(
+    const present = await retryWhileMissing2(
       async () => await objectStorage.fileExists(file) ? true : null
     );
     if (!present) {
@@ -6094,7 +6594,7 @@ async function serveRetainedArtifactContent(c, objectStorage, artifactId2, file,
     }
     return c.body(null, 200, headers);
   }
-  const bytes = await retryWhileMissing(
+  const bytes = await retryWhileMissing2(
     async () => objectStorage.getFileRange(file, {
       start: range.start,
       end: range.end
@@ -6331,12 +6831,12 @@ async function publishSandboxFileArtifact(deps, input) {
   }
   const safeFilename = sandboxArtifactSafeFilename(filename);
   const contentType = sandboxFileContentType(filename);
-  const sha2565 = createHash3("sha256").update(bytes).digest("hex");
+  const sha2564 = createHash3("sha256").update(bytes).digest("hex");
   const identity = sandboxArtifactIdentity({
     workspaceId: input.grant.workspaceId,
     sessionId: input.session.id,
     path,
-    sha256: sha2565
+    sha256: sha2564
   });
   const objectKey = `workspaces/${input.grant.workspaceId}/files/${identity.fileId}/sandbox/${safeFilename}`;
   const existing = await getFile(deps.db, input.grant.workspaceId, identity.fileId);
@@ -6357,7 +6857,7 @@ async function publishSandboxFileArtifact(deps, input) {
       safeFilename,
       contentType,
       sizeBytes: bytes.byteLength,
-      sha256: sha2565,
+      sha256: sha2564,
       bucket: storage.bucket,
       objectKey,
       expiresAt: new Date(Date.now() + UPLOAD_INTENT_TTL_MS)
@@ -6369,7 +6869,7 @@ async function publishSandboxFileArtifact(deps, input) {
     safeFilename,
     contentType,
     sizeBytes: bytes.byteLength,
-    sha256: sha2565,
+    sha256: sha2564,
     bucket: storage.bucket,
     objectKey
   });
@@ -6382,7 +6882,7 @@ async function publishSandboxFileArtifact(deps, input) {
         key: file.objectKey,
         contentType: file.contentType,
         body: bytes,
-        sha256: sha2565
+        sha256: sha2564
       };
       if (storage.putObjectIfAbsent) {
         const created = await storage.putObjectIfAbsent(put);
@@ -6494,7 +6994,7 @@ function assertSandboxArtifactFile(file, expected) {
   }
 }
 async function assertVisibleSandboxArtifact(storage, file) {
-  const head = await retryWhileMissing2(async () => await storage.headObject(file.objectKey));
+  const head = await retryWhileMissing3(async () => await storage.headObject(file.objectKey));
   assertStoredSandboxArtifact(head, file);
 }
 function assertStoredSandboxArtifact(head, file) {
@@ -6582,7 +7082,7 @@ import { parseSocialOauthClientsJson } from "@opengeni/config";
 import {
   OAuthStartResponse as OAuthStartResponse2
 } from "@opengeni/contracts";
-import { hasPermission as hasPermission5, requireEnvironmentEncryption as requireEnvironmentEncryption2 } from "@opengeni/core";
+import { hasPermission as hasPermission6, requireEnvironmentEncryption as requireEnvironmentEncryption2 } from "@opengeni/core";
 import {
   consumeIntegrationOAuthStateNonce as consumeIntegrationOAuthStateNonce2,
   decryptEnvironmentValue as decryptEnvironmentValue2,
@@ -6672,12 +7172,13 @@ import {
   OAuthStartResponse,
   selectCanonicalPersonalSlackConnection
 } from "@opengeni/contracts";
-import { hasPermission as hasPermission4, requireEnvironmentEncryption } from "@opengeni/core";
+import { hasPermission as hasPermission5, requireEnvironmentEncryption } from "@opengeni/core";
 import {
   consumeIntegrationOAuthStateNonce,
   createConnection,
   decryptEnvironmentValue,
   encryptEnvironmentValue,
+  findActiveWorkspaceApiKeyById,
   getConnectionMetadata,
   getGlobalCatalogOAuthProfile,
   getWorkspaceGrant,
@@ -6973,6 +7474,13 @@ var OAuthStartStageError = class extends Error {
     this.name = "OAuthStartStageError";
   }
 };
+var OAuthMetadataUpstreamError = class extends Error {
+  constructor(upstreamStatus) {
+    super(`OAuth metadata endpoint returned HTTP ${upstreamStatus}`);
+    this.upstreamStatus = upstreamStatus;
+    this.name = "OAuthMetadataUpstreamError";
+  }
+};
 var OAuthStartDeadline = class {
   signal;
   controller = new AbortController();
@@ -7424,13 +7932,28 @@ function requireIntegrationsStateSecret(settings) {
 }
 async function requireOAuthCallbackGrant(db, state) {
   const membershipGrant = await getWorkspaceGrant(db, state.subjectId, state.workspaceId);
-  const grant = membershipGrant?.accountId === state.accountId ? membershipGrant : state.personalOwnerVerified ? await resolveNamedManagedPersonalWorkspaceGrant(db, state) : null;
-  if (!grant || grant.accountId !== state.accountId || !hasPermission4(grant.permissions, "connections:write")) {
+  const grant = membershipGrant?.accountId === state.accountId ? membershipGrant : state.personalOwnerVerified ? await resolveNamedManagedPersonalWorkspaceGrant(db, state) : await apiKeyCallbackGrant(db, state);
+  if (!grant || grant.accountId !== state.accountId || !hasPermission5(grant.permissions, "connections:write")) {
     throw new HTTPException11(403, {
       message: "OAuth subject no longer has permission to write this workspace connection"
     });
   }
 }
+async function apiKeyCallbackGrant(db, state) {
+  const prefix = "api_key:";
+  if (!state.subjectId.startsWith(prefix)) {
+    return null;
+  }
+  const apiKey = await findActiveWorkspaceApiKeyById(db, {
+    accountId: state.accountId,
+    workspaceId: state.workspaceId,
+    apiKeyId: state.subjectId.slice(prefix.length)
+  });
+  if (!apiKey) {
+    return null;
+  }
+  return { accountId: apiKey.accountId, permissions: apiKey.permissions };
+}
 async function discoverMcpOAuth(resource, settings, deadline) {
   const challenge = await deadline.run(
     "mcp_challenge",
@@ -7493,7 +8016,7 @@ async function fetchOAuthMetadata(url, settings, signal) {
   }
   if (!response.ok) {
     await cancelResponseBody(response);
-    throw new Error(`OAuth metadata endpoint returned HTTP ${response.status}`);
+    throw new OAuthMetadataUpstreamError(response.status);
   }
   const payload = await readResponseJsonBounded(
     response,
@@ -8072,6 +8595,9 @@ function logOAuthStartFailure(observability, error) {
 function oauthStartFailureReason(error) {
   if (error instanceof RequestDeadlineError) return "timeout";
   if (error instanceof DestinationPolicyError) return error.reason;
+  if (error instanceof OAuthMetadataUpstreamError) {
+    return `upstream_http_${error.upstreamStatus}`;
+  }
   if (error instanceof HTTPException11) return `http_${error.status}`;
   if (error instanceof SyntaxError) return "invalid_response";
   return "request_failed";
@@ -8104,11 +8630,12 @@ function isDatabaseStatementTimeout(error) {
 }
 function oauthStartApiError(error) {
   const timeout = error.reason === "timeout";
-  const status = timeout ? 408 : error.cause instanceof HTTPException11 ? error.cause.status : 422;
+  const metadataUpstream = error.cause instanceof OAuthMetadataUpstreamError ? error.cause : null;
+  const status = timeout ? 408 : metadataUpstream ? 502 : error.cause instanceof HTTPException11 ? error.cause.status : 422;
   return new ApiHttpError(status, {
     code: timeout || status >= 500 ? "upstream_unavailable" : "validation_failed",
-    retryable: timeout || status === 429 || status >= 500,
-    message: timeout ? oauthStartTimeoutMessage(error.stage) : error.cause instanceof HTTPException11 ? error.cause.message : `Connection setup failed during ${oauthStartStageLabel(error.stage)}.`,
+    retryable: timeout || status === 429 || (metadataUpstream ? metadataUpstream.upstreamStatus === 429 || metadataUpstream.upstreamStatus >= 500 : status >= 500),
+    message: timeout ? oauthStartTimeoutMessage(error.stage) : metadataUpstream ? `OAuth provider returned HTTP ${metadataUpstream.upstreamStatus} during ${oauthStartStageLabel(error.stage)}.` : error.cause instanceof HTTPException11 ? error.cause.message : `Connection setup failed during ${oauthStartStageLabel(error.stage)}.`,
     details: {
       oauthStage: error.stage,
       oauthReason: error.reason
@@ -8602,7 +9129,7 @@ async function completeSocialOAuthCallback(deps, input) {
       throw new HTTPException12(422, { message: PERSONAL_CONNECTION_PRINCIPAL_MESSAGE });
     }
     const grant = await getWorkspaceGrant2(db, state.subjectId, state.workspaceId);
-    if (!grant || grant.accountId !== state.accountId || state.ownership === "workspace" && !hasPermission5(grant.permissions, "workspace:admin")) {
+    if (!grant || grant.accountId !== state.accountId || state.ownership === "workspace" && !hasPermission6(grant.permissions, "workspace:admin")) {
       throw new HTTPException12(403, {
         message: "OAuth subject no longer has permission to connect social accounts"
       });
@@ -9416,7 +9943,82 @@ import {
   runOnSandbox,
   swapActiveSandbox
 } from "@opengeni/core";
-import { getSessionBackgroundCommand } from "@opengeni/db/session-background-commands";
+import {
+  readSessionBackgroundCommandOutput,
+  COMMAND_OUTPUT_MAX_BYTES as COMMAND_OUTPUT_MAX_BYTES2
+} from "@opengeni/db/session-background-commands";
+
+// src/mcp/command-read.ts
+import { COMMAND_OUTPUT_MAX_BYTES } from "@opengeni/db/session-background-commands";
+var COMMAND_READ_MAX_WAIT_SECONDS = 50;
+var COMMAND_WAIT_DEFAULT_SECONDS = 45;
+async function readCommandWithWait(input) {
+  const seconds = input.waitSeconds ?? 0;
+  if (!Number.isInteger(seconds) || seconds < 0 || seconds > COMMAND_READ_MAX_WAIT_SECONDS) {
+    throw new Error("waitSeconds must be between 0 and 50");
+  }
+  if (input.maxOutputBytes !== void 0 && (!Number.isInteger(input.maxOutputBytes) || input.maxOutputBytes < 4 || input.maxOutputBytes > COMMAND_OUTPUT_MAX_BYTES)) {
+    throw new Error("maxOutputBytes must be between 4 and 65536");
+  }
+  const started = Date.now();
+  const deadline = started + seconds * 1e3;
+  let unsubscribe;
+  let wake;
+  let changed = false;
+  let liveFanout = true;
+  const notify = () => {
+    changed = true;
+    wake?.();
+  };
+  input.signal?.addEventListener("abort", notify);
+  try {
+    if (seconds > 0) {
+      try {
+        unsubscribe = await input.subscribe((events) => {
+          if (events.some(
+            (event) => (event.type === "session.command.finished" || event.type === "sandbox.command.output.delta") && event.payload !== null && typeof event.payload === "object" && event.payload.commandId === input.commandId
+          ))
+            notify();
+        });
+      } catch {
+        liveFanout = false;
+      }
+    }
+    while (true) {
+      changed = false;
+      const result = await input.read();
+      const expired = Date.now() >= deadline;
+      if (result.terminal || result.chunks.length > 0 || result.hasMore || expired || input.signal?.aborted) {
+        return {
+          ...result,
+          waitedMs: Date.now() - started,
+          timedOut: seconds > 0 && expired && !result.terminal && result.chunks.length === 0 && !result.hasMore,
+          aborted: input.signal?.aborted ?? false,
+          liveFanout
+        };
+      }
+      if (changed) continue;
+      await new Promise((resolve) => {
+        const timer = setTimeout(
+          () => {
+            wake = void 0;
+            resolve();
+          },
+          Math.max(0, Math.min(1e3, deadline - Date.now()))
+        );
+        wake = () => {
+          clearTimeout(timer);
+          wake = void 0;
+          resolve();
+        };
+        if (changed || input.signal?.aborted) wake();
+      });
+    }
+  } finally {
+    input.signal?.removeEventListener("abort", notify);
+    unsubscribe?.();
+  }
+}
 
 // src/mcp/session-view.ts
 import {
@@ -10308,7 +10910,7 @@ var SUMMARY_TEXT_TIERS = [2e3, 800, 200];
 var SUMMARY_FAILURE_CHARS = 500;
 var SUMMARY_RESULT_CHARS = 1e3;
 function truncationMarker2(droppedChars) {
-  return `\u2026[${droppedChars} chars omitted from this session_wait summary; use session_events for the exact event]`;
+  return `\u2026[${droppedChars} chars omitted from this session_wait summary; use session_events view=debug payloadMode=full for the exact event]`;
 }
 function clampSummaryString(value, maxChars) {
   if (value.length <= maxChars) return value;
@@ -11111,7 +11713,8 @@ async function attachViewer(services, input) {
         expectedEpoch,
         acquiredLease: acquired.lease,
         fallbackEnvelope: envelope,
-        dataPlaneUrl: null
+        dataPlaneUrl: null,
+        ...services.objectStorage !== void 0 ? { objectStorage: services.objectStorage } : {}
       });
       established = result.established;
       return {
@@ -11768,7 +12371,7 @@ import {
   completeSlackBotDeleteOperation,
   completeSlackBotPostOperation,
   completeSlackBotUpdateOperation,
-  getSession,
+  getSession as getSession2,
   listConnectionsMetadata as listConnectionsMetadata2,
   markSlackBotDeleteOperationProviderStarted,
   markSlackBotPostOperationProviderStarted,
@@ -11948,7 +12551,7 @@ async function verifyOpenGeniSlackBotCredential(token, expected, fetchImpl = fet
   };
 }
 async function resolveSlackBotConnectionForTool(input) {
-  const session = input.sessionId ? await getSession(input.db, input.grant.workspaceId, input.sessionId) : null;
+  const session = input.sessionId ? await getSession2(input.db, input.grant.workspaceId, input.sessionId) : null;
   if (input.sessionId && !session) {
     throw new Error("signed Slack bot session was not found");
   }
@@ -13986,7 +14589,7 @@ import {
 } from "@opengeni/contracts";
 import {
   fikenConnectionMetadata,
-  hasPermission as hasPermission6,
+  hasPermission as hasPermission7,
   isFikenConnection,
   preferredFikenConnection,
   requireEnvironmentEncryption as requireEnvironmentEncryption3,
@@ -14902,7 +15505,7 @@ function readFikenOAuthState(raw, settings) {
 }
 async function requireFikenCallbackGrant(db, state) {
   const grant = await getWorkspaceGrant3(db, state.subjectId, state.workspaceId);
-  if (!grant || grant.accountId !== state.accountId || !hasPermission6(grant.permissions, "connections:write")) {
+  if (!grant || grant.accountId !== state.accountId || !hasPermission7(grant.permissions, "connections:write")) {
     throw new FikenOAuthCallbackError("permission_lost");
   }
 }
@@ -14936,7 +15539,7 @@ import {
 import {
   captureScheduledTaskRestoreState,
   createValidatedScheduledTask,
-  hasPermission as hasPermission7,
+  hasPermission as hasPermission8,
   manualScheduledTaskTriggerWorkflowId,
   requireEnvironmentEncryption as requireEnvironmentEncryption4,
   syncCreatedScheduledTask,
@@ -16172,7 +16775,7 @@ async function requireCallbackGrant(deps, state) {
     });
   }
   const grant = await getWorkspaceGrant4(deps.db, state.subjectId, state.workspaceId);
-  if (!grant || grant.accountId !== state.accountId || !hasPermission7(grant.permissions, "connections:write")) {
+  if (!grant || grant.accountId !== state.accountId || !hasPermission8(grant.permissions, "connections:write")) {
     throw new HTTPException16(403, { message: "Atlassian OAuth subject no longer has access" });
   }
 }
@@ -16347,9 +16950,9 @@ import {
   editableArtifactId,
   editableArtifactReplicaId,
   editableArtifactScope,
-  hasPermission as hasPermission8,
+  hasPermission as hasPermission9,
   requireAccessGrant as requireAccessGrant2,
-  requireSessionAuthorization,
+  requireSessionAuthorization as requireSessionAuthorization2,
   SessionAuthorizationDeniedError as SessionAuthorizationDeniedError3,
   SessionAuthorizationUnavailableError
 } from "@opengeni/core";
@@ -16580,7 +17183,7 @@ function registerEditableArtifactRoutes(app, deps) {
   app.post(`${collection}/imports`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
     const grant = await requireAccessGrant2(context, deps, workspaceId, "artifacts:publish");
-    if (!hasPermission8(grant.permissions, "files:read")) {
+    if (!hasPermission9(grant.permissions, "files:read")) {
       throw applicationHttpError("forbidden");
     }
     const body4 = await parseBoundedImportRequest(context);
@@ -16661,7 +17264,7 @@ function registerEditableArtifactRoutes(app, deps) {
         snapshotVersion: body4.snapshotVersion,
         commandProtocolVersion: body4.commandProtocolVersion,
         committedTransactionProtocolVersion: body4.committedTransactionProtocolVersion,
-        allowEdit: hasPermission8(grant.permissions, "artifacts:publish")
+        allowEdit: hasPermission9(grant.permissions, "artifacts:publish")
       });
     } catch (error) {
       throw editableArtifactHttpError(error);
@@ -16779,7 +17382,7 @@ function registerEditableArtifactRoutes(app, deps) {
 }
 async function authorizeSourceSession(deps, grant, sessionId) {
   try {
-    await requireSessionAuthorization(deps, grant, {
+    await requireSessionAuthorization2(deps, grant, {
       sessionId,
       operation: "session.read",
       surface: "http"
@@ -18198,7 +18801,7 @@ import {
 import {
   captureScheduledTaskRestoreState as captureScheduledTaskRestoreState2,
   createValidatedScheduledTask as createValidatedScheduledTask2,
-  hasPermission as hasPermission9,
+  hasPermission as hasPermission10,
   manualScheduledTaskTriggerWorkflowId as manualScheduledTaskTriggerWorkflowId2,
   requireEnvironmentEncryption as requireEnvironmentEncryption5,
   syncCreatedScheduledTask as syncCreatedScheduledTask2,
@@ -19660,7 +20263,7 @@ async function requireGoogleDriveCallbackGrant(deps, state) {
     });
   }
   const grant = await getWorkspaceGrant5(deps.db, state.subjectId, state.workspaceId);
-  if (!grant || grant.accountId !== state.accountId || !hasPermission9(grant.permissions, "connections:write")) {
+  if (!grant || grant.accountId !== state.accountId || !hasPermission10(grant.permissions, "connections:write")) {
     throw new HTTPException17(403, {
       message: "Google Drive OAuth subject no longer has permission for this workspace"
     });
@@ -20323,115 +20926,6 @@ function observeWorkDiscovery(observability, observation) {
   }
 }
 
-// src/workspace-artifact-content.ts
-import { createHash as createHash9 } from "crypto";
-import {
-  WorkspaceArtifactHtml,
-  WorkspaceArtifactRequestedTools,
-  WorkspaceArtifactSourceBundle
-} from "@opengeni/contracts";
-import { retryWhileMissing as retryWhileMissing3 } from "@opengeni/storage";
-var encoder2 = new TextEncoder();
-var decoder = new TextDecoder("utf-8", { fatal: true });
-function prepareWorkspaceArtifactContent(objectStorage, workspaceId, input) {
-  const html = WorkspaceArtifactHtml.parse(input.html);
-  const source = WorkspaceArtifactSourceBundle.parse(input.source ?? sourceBundleFromHtml(html));
-  const requestedTools = input.requestedTools === void 0 ? void 0 : WorkspaceArtifactRequestedTools.parse(input.requestedTools);
-  const contentBytes = encoder2.encode(html);
-  const sourceBytes = encoder2.encode(JSON.stringify(source));
-  const contentSha256 = sha256(contentBytes);
-  const sourceSha256 = sha256(sourceBytes);
-  const storageGroupId = crypto.randomUUID();
-  const contentKey = `workspaces/${workspaceId}/workspace-artifacts/blobs/${storageGroupId}-${contentSha256}.html`;
-  const sourceKey = `workspaces/${workspaceId}/workspace-artifacts/sources/${storageGroupId}-${sourceSha256}.json`;
-  const discardContent = async () => {
-    await Promise.allSettled([
-      objectStorage.deleteObject(contentKey),
-      objectStorage.deleteObject(sourceKey)
-    ]);
-  };
-  return {
-    contentKey,
-    contentSha256,
-    sizeBytes: contentBytes.byteLength,
-    sourceKey,
-    sourceSha256,
-    sourceSizeBytes: sourceBytes.byteLength,
-    ...requestedTools === void 0 ? {} : { requestedTools },
-    discardContent,
-    persistContent: async () => {
-      const writes = await Promise.allSettled([
-        objectStorage.putObject({
-          key: contentKey,
-          contentType: "text/html; charset=utf-8",
-          body: contentBytes,
-          sha256: contentSha256
-        }),
-        objectStorage.putObject({
-          key: sourceKey,
-          contentType: "application/json; charset=utf-8",
-          body: sourceBytes,
-          sha256: sourceSha256
-        })
-      ]);
-      const failed = writes.find((write) => write.status === "rejected");
-      if (!failed) return;
-      await Promise.allSettled(
-        writes.flatMap(
-          (write, index) => write.status === "fulfilled" ? [objectStorage.deleteObject(index === 0 ? contentKey : sourceKey)] : []
-        )
-      );
-      throw failed.reason;
-    }
-  };
-}
-async function readWorkspaceArtifactContent(objectStorage, input) {
-  const [contentObject, sourceObject] = await Promise.all([
-    retryWhileMissing3(async () => await objectStorage.getObjectBytes(input.contentKey)),
-    input.sourceKey ? retryWhileMissing3(async () => await objectStorage.getObjectBytes(input.sourceKey)) : Promise.resolve(null)
-  ]);
-  if (!contentObject) throw new Error("Artifact content is unavailable");
-  if (sha256(contentObject.bytes) !== input.version.contentSha256 || contentObject.bytes.byteLength !== input.version.sizeBytes) {
-    throw new Error("Artifact content failed integrity verification");
-  }
-  const html = decode(contentObject.bytes, "Artifact content is not valid UTF-8");
-  let source = sourceBundleFromHtml(html);
-  if (input.sourceKey) {
-    if (!sourceObject) throw new Error("Artifact source is unavailable");
-    if (!input.version.sourceSha256 || input.version.sourceSizeBytes === null || sha256(sourceObject.bytes) !== input.version.sourceSha256 || sourceObject.bytes.byteLength !== input.version.sourceSizeBytes) {
-      throw new Error("Artifact source failed integrity verification");
-    }
-    try {
-      source = WorkspaceArtifactSourceBundle.parse(
-        JSON.parse(decode(sourceObject.bytes, "Artifact source is not valid UTF-8"))
-      );
-    } catch (error) {
-      if (error instanceof Error && error.message === "Artifact source is not valid UTF-8") {
-        throw error;
-      }
-      throw new Error("Artifact source is invalid", { cause: error });
-    }
-  }
-  return {
-    html,
-    source,
-    requestedTools: WorkspaceArtifactRequestedTools.parse(input.version.requestedTools)
-  };
-}
-function sourceBundleFromHtml(html) {
-  return { entrypoint: "index.html", files: [{ path: "index.html", content: html }] };
-}
-function sha256(bytes) {
-  return createHash9("sha256").update(bytes).digest("hex");
-}
-function decode(bytes, message) {
-  try {
-    return decoder.decode(bytes);
-  } catch (error) {
-    throw new Error(message, { cause: error });
-  }
-}
-
 // src/mcp/server.ts
 var ORCHESTRATION_FAILURE_CODE_MAX_LENGTH = 128;
 var ORCHESTRATION_FAILURE_MESSAGE_MAX_UTF8_BYTES = 1024;
@@ -20519,6 +21013,7 @@ var FIRST_PARTY_TOOL_AUTHORIZATION = {
   wait_for_input: { sessionRequired: true, allOf: ["sessions:control"] },
   goal_complete: { sessionRequired: true, allOf: ["goals:manage"] },
   goal_pause: { sessionRequired: true, allOf: ["goals:manage"] },
+  goal_resume: { sessionRequired: true, allOf: ["goals:manage"] },
   memory_search: { sessionRequired: true, allOf: ["documents:search"] },
   memory_save: { sessionRequired: true, allOf: ["documents:search"] },
   memory_correct: { sessionRequired: true, allOf: ["documents:search"] },
@@ -20591,6 +21086,7 @@ var FIRST_PARTY_TOOL_AUTHORIZATION = {
   // self target, so the tool exists only for session-scoped grants.
   session_wait: { sessionRequired: true, allOf: ["sessions:read"] },
   command_wait: { sessionRequired: true, allOf: ["sessions:read"] },
+  command_read: { sessionRequired: true, allOf: ["sessions:read"] },
   session_create: { allOf: ["sessions:create"] },
   session_send_message: { allOf: ["sessions:control"] },
   session_pause: { allOf: ["sessions:control"] },
@@ -20705,8 +21201,9 @@ var FIRST_PARTY_TOOL_AUTHORIZATION = {
   atlassian_sources_list: { allOf: ["connections:read"] },
   atlassian_search: { allOf: ["connections:read"] },
   atlassian_get: { allOf: ["connections:read"] },
-  artifacts_list: { sessionRequired: true, allOf: ["artifacts:read"] },
+  artifacts_list: { allOf: ["artifacts:read"] },
   artifacts_get_source: { sessionRequired: true, allOf: ["artifacts:read"] },
+  artifacts_prepare_upload: { sessionRequired: true, allOf: ["artifacts:publish"] },
   artifacts_create: { sessionRequired: true, allOf: ["artifacts:publish"] },
   artifacts_publish: { sessionRequired: true, allOf: ["artifacts:publish"] },
   artifacts_rollback: { sessionRequired: true, allOf: ["artifacts:publish"] },
@@ -20758,7 +21255,7 @@ var PolicyMcpServer = class extends McpServer3 {
     if (catalogued) {
       const toolName = name;
       const policy = FIRST_PARTY_TOOL_AUTHORIZATION[toolName];
-      const authorized = (!policy.sessionRequired || this.sessionId !== null) && (policy.allOf?.every((permission) => hasPermission10(this.grant.permissions, permission)) ?? true) && (policy.anyOf?.some((permission) => hasPermission10(this.grant.permissions, permission)) ?? true);
+      const authorized = (!policy.sessionRequired || this.sessionId !== null) && (policy.allOf?.every((permission) => hasPermission11(this.grant.permissions, permission)) ?? true) && (policy.anyOf?.some((permission) => hasPermission11(this.grant.permissions, permission)) ?? true);
       const selected = this.selectedTools === null || this.selectedTools.has(toolName);
       admitted = authorized && selected;
     }
@@ -20801,7 +21298,7 @@ function buildOpenGeniMcpServer(deps, grant, options = {}) {
   const json = (value) => ({
     content: [{ type: "text", text: JSON.stringify(value, null, 2) }]
   });
-  const can = (permission) => hasPermission10(grant.permissions, permission);
+  const can = (permission) => hasPermission11(grant.permissions, permission);
   let socialConnectionsPromise;
   const authorizedSocialConnections = () => socialConnectionsPromise ??= authorizedSocialConnectionsForGrant({
     db: deps.db,
@@ -20862,6 +21359,23 @@ function buildOpenGeniMcpServer(deps, grant, options = {}) {
       options.workspaceMemoryPromptMode ?? "retrieval_only"
     );
   }
+  server.registerTool(
+    "artifacts_list",
+    {
+      description: "List the generic published artifacts in this workspace and their current versions.",
+      inputSchema: {}
+    },
+    async () => {
+      if (sessionId !== null && exactAgentAttemptClaims(grant) !== null) {
+        await authorizeFirstPartySession(deps, grant, sessionId, "session.first_party_mcp.call");
+      }
+      return json(
+        redactWorkspaceArtifactListProvenance(
+          await listWorkspaceArtifacts(deps.db, grant.workspaceId)
+        )
+      );
+    }
+  );
   if (sessionId !== null && exactAgentAttemptClaims(grant) !== null) {
     registerPreferenceRegistryTools(server, deps, grant, json);
     registerTaskNoteTools(server, deps, grant, sessionId, json);
@@ -22507,7 +23021,7 @@ function registerGoalTools(server, deps, grant, sessionId, json) {
   server.registerTool(
     "wait_for_input",
     {
-      description: "End the current turn and wait out of turn for relevant session input. This is self-only and does not require a goal. Use it for long or uncertain waits instead of sleeping or repeatedly calling session_wait/command_wait. timeoutSeconds is a relative safety-wake duration; OpenGeni persists its absolute deadline, and timeout never cancels a background command. A human/API prompt, agent message or Steer, child terminal result, scheduled input, terminal background-command result, or the deadline wakes the session. Always end your turn immediately after the tool succeeds. Use goal_pause instead when the active goal itself should stop pending a human decision.",
+      description: "End the current turn and wait out of turn for relevant session input. This is self-only and does not require a goal. After success, the production runtime ends the turn at the tool-batch boundary without another model step or final message. Use it for long or uncertain waits instead of sleeping or repeatedly calling session_wait/command_wait. timeoutSeconds is a relative safety-wake duration; OpenGeni persists the first absolute deadline for the turn, and repeated calls do not extend it. Timeout never cancels a background command. A human/API prompt, agent message or Steer, child terminal result, scheduled input, terminal background-command result, or the deadline wakes the session. Use goal_pause instead when the active goal itself should stop pending a human decision.",
       inputSchema: {
         reason: inputWaitReasonSchema,
         timeoutSeconds: z43.number().int().min(SESSION_INPUT_WAIT_MIN_SECONDS).max(SESSION_INPUT_WAIT_MAX_SECONDS),
@@ -22517,7 +23031,7 @@ function registerGoalTools(server, deps, grant, sessionId, json) {
     async ({ reason: reason2, timeoutSeconds, idempotencyKey }) => {
       await authorizeFirstPartySession(deps, grant, sessionId, "session.control");
       const context = exactAgentCommandContext(grant, sessionId);
-      const operationKey = idempotencyKey ?? `wait-for-input:${context.callerTurnId}:${createHash10("sha256").update(JSON.stringify({ reason: reason2, timeoutSeconds })).digest("hex").slice(0, 32)}`;
+      const operationKey = idempotencyKey ?? `wait-for-input:${context.callerTurnId}:${createHash9("sha256").update(JSON.stringify({ reason: reason2, timeoutSeconds })).digest("hex").slice(0, 32)}`;
       const { events, operationId, replay, deadlineAt } = await waitForSessionInputWithEvent(
         deps.db,
         grant.workspaceId,
@@ -22544,7 +23058,7 @@ function registerGoalTools(server, deps, grant, sessionId, json) {
         deadlineAt,
         operationId,
         replay,
-        nextAction: "End your turn now. Relevant input or the timeout deadline will start a new turn; the timeout does not cancel commands."
+        nextAction: "The runtime yields this turn after the tool batch settles. Relevant input or the timeout deadline will start a new turn; the timeout does not cancel commands."
       });
     }
   );
@@ -22646,9 +23160,63 @@ function registerGoalTools(server, deps, grant, sessionId, json) {
       );
     }
   );
+  server.registerTool(
+    "goal_resume",
+    {
+      description: "Resume this session's paused goal regardless of who paused it or why. Already active is a successful no-op. Preserves the objective and resets continuation counters.",
+      inputSchema: {}
+    },
+    async () => {
+      await authorizeFirstPartySession(deps, grant, sessionId, "session.goal.write");
+      await requireSession(deps.db, grant.workspaceId, sessionId);
+      const existing = await getSessionGoal(deps.db, grant.workspaceId, sessionId);
+      if (!existing) {
+        throw new Error("this session has no goal; use goal_set first");
+      }
+      const { goal, events, workflowWakeRevision } = await setSessionGoalStatusWithEvent(
+        deps.db,
+        grant.workspaceId,
+        sessionId,
+        {
+          status: "active",
+          event: { type: "goal.resumed", actor: "agent" }
+        }
+      );
+      const changed = events.length > 0;
+      if (events.length > 0) {
+        await deps.bus.publish(grant.workspaceId, sessionId, events);
+      }
+      if (workflowWakeRevision !== null) {
+        await deps.workflowClient.wakeSessionWorkflow({
+          accountId: grant.accountId,
+          workspaceId: grant.workspaceId,
+          sessionId,
+          workflowId: workflowIdForSession(sessionId),
+          wakeRevision: workflowWakeRevision
+        });
+      }
+      return json(
+        mcpMutationReceipt({
+          operation: "goal_resume",
+          committed: true,
+          outcome: changed ? "updated" : "unchanged",
+          changed,
+          resource: {
+            type: "session_goal",
+            id: goal.id,
+            version: goal.version,
+            state: goal.status
+          },
+          timestamp: goal.updatedAt,
+          idempotency: { status: "not_supported" },
+          nextAction: { tool: "session_get", arguments: { sessionId } }
+        })
+      );
+    }
+  );
 }
 async function authorizeFirstPartySession(deps, grant, sessionId, operation) {
-  return await requireSessionAuthorization2(deps, grant, {
+  return await requireSessionAuthorization3(deps, grant, {
     sessionId,
     operation,
     surface: "first_party_mcp"
@@ -22668,10 +23236,11 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
     throw error;
   });
   const mutation = async (response) => await projectWorkspaceArtifactMutationProvenance(response, canReadProvenanceSession2);
-  const prepare = (html, source, requestedTools) => {
+  const prepare = (html, source, requestedTools, uploadId) => {
     if (!deps.objectStorage) throw new Error("Object storage is not configured");
-    return prepareWorkspaceArtifactContent(deps.objectStorage, grant.workspaceId, {
-      html,
+    return prepareWorkspaceArtifactPublication(deps, grant, {
+      ...html === void 0 ? {} : { html },
+      ...uploadId ? { uploadId } : {},
       ...source ? { source } : {},
       ...requestedTools ? { requestedTools } : {}
     });
@@ -22681,7 +23250,7 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
     return {
       accountId: grant.accountId,
       workspaceId: grant.workspaceId,
-      operationKey: `attempt:${createHash10("sha256").update(`${claims.sessionId}:${claims.turnId}:${idempotencyKey}`).digest("hex")}`,
+      operationKey: `attempt:${createHash9("sha256").update(`${claims.sessionId}:${claims.turnId}:${idempotencyKey}`).digest("hex")}`,
       actorSubjectId: grant.subjectId,
       sourceSessionId: claims.sessionId,
       sourceTurnId: claims.turnId,
@@ -22691,24 +23260,20 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
     };
   };
   server.registerTool(
-    "artifacts_list",
+    "artifacts_prepare_upload",
     {
-      description: "List the generic published artifacts in this workspace and their current versions.",
+      description: "Get signed upload URLs for a Site's HTML and optional source JSON. Upload with curl or fetch, then pass uploadId to artifacts_create/artifacts_publish. No hashes or sizes needed. Source upload may be omitted for HTML-only Sites.",
       inputSchema: {}
     },
     async () => {
       await authorize();
-      return json(
-        redactWorkspaceArtifactListProvenance(
-          await listWorkspaceArtifacts(deps.db, grant.workspaceId)
-        )
-      );
+      return json(await prepareWorkspaceArtifactUpload(deps, grant));
     }
   );
   server.registerTool(
     "artifacts_get_source",
     {
-      description: "Read an artifact's metadata and exact HTML source. Omit versionId for the current version.",
+      description: "Get artifact metadata, version id, and signed download URLs for HTML and optional source JSON. Download with curl or Bun. If source is null, edit the HTML instead. Omit versionId for the current version.",
       inputSchema: {
         artifactId: z43.string().uuid(),
         versionId: z43.string().uuid().optional()
@@ -22733,11 +23298,11 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
         projectWorkspaceArtifactDetailProvenance(rawDetail, canReadSourceSession),
         projectWorkspaceArtifactVersionProvenance(ref.version, canReadSourceSession)
       ]);
-      const content = await readWorkspaceArtifactContent(deps.objectStorage, ref);
+      const downloads = await workspaceArtifactDownloads(deps.objectStorage, ref, "sandbox");
       return json({
         detail,
         version: projectedVersion,
-        ...content
+        downloads
       });
     }
   );
@@ -22749,7 +23314,8 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
         title: z43.string().min(1).max(120),
         description: z43.string().max(2e3).nullable().optional(),
         slug: z43.string().regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/).max(96).optional(),
-        html: z43.string().min(1).max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES),
+        html: z43.string().min(1).max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES).optional(),
+        uploadId: z43.string().uuid().optional(),
         source: z43.object({
           entrypoint: z43.string().min(1).max(256),
           files: z43.array(
@@ -22768,7 +23334,16 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
         idempotencyKey: z43.string().min(1).max(200)
       }
     },
-    async ({ title, description, slug, html, source, requestedTools, idempotencyKey }) => {
+    async ({
+      title,
+      description,
+      slug,
+      html,
+      source,
+      requestedTools,
+      idempotencyKey,
+      uploadId
+    }) => {
       await authorize();
       const artifactId2 = crypto.randomUUID();
       const slugBase = slug ?? (normalizeWorkspaceArtifactSlug(title) || "artifact");
@@ -22781,7 +23356,7 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
             requestedSlug: slug ?? null,
             title,
             description: description ?? null,
-            ...prepare(html, source, requestedTools),
+            ...await prepare(html, source, requestedTools, uploadId),
             ...provenance2(idempotencyKey, "artifacts_create")
           })
         )
@@ -22797,7 +23372,8 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
         expectedCurrentVersionId: z43.string().uuid(),
         title: z43.string().min(1).max(120).optional(),
         description: z43.string().max(2e3).nullable().optional(),
-        html: z43.string().min(1).max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES),
+        html: z43.string().min(1).max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES).optional(),
+        uploadId: z43.string().uuid().optional(),
         source: z43.object({
           entrypoint: z43.string().min(1).max(256),
           files: z43.array(
@@ -22822,6 +23398,7 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
       title,
       description,
       html,
+      uploadId,
       source,
       requestedTools,
       idempotencyKey
@@ -22834,7 +23411,7 @@ function registerWorkspaceArtifactTools(server, deps, grant, sessionId, json) {
             expectedCurrentVersionId,
             ...title !== void 0 ? { title } : {},
             ...description !== void 0 ? { description } : {},
-            ...prepare(html, source, requestedTools),
+            ...await prepare(html, source, requestedTools, uploadId),
             ...provenance2(idempotencyKey, "artifacts_publish")
           })
         )
@@ -24125,20 +24702,28 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
     server.registerTool(
       "session_get",
       {
-        description: "Get another session you are managing. Default detail=compact returns status, goal (including completion evidence or pause rationale), latest recorded goal progress, meaningful pause/wait state, queue counts, active turn and lastSequence for session_wait. Goal completion is not a terminal child result: join with session_wait waitFor=completion. Use detail=full for the legacy bounded configuration including resources, persisted tool refs, effectiveToolPolicy and variableSet ids (never variable values). Full mode is configuration, not a substitute for compact goal/progress facts. Do not use your own session id to reconstruct context; conversation history and persistent settings are supplied directly. Text loss is explicit; REST/UI defaults are unchanged.",
+        description: "Get an authorized session. Omit sessionId to read only the authenticated current agent session (a child reads itself, never its parent or root); sessionless/operator callers must provide an explicit ID. Both forms retain live-attempt and target authorization checks. Default detail=compact returns status, goal (including completion evidence or pause rationale), latest recorded goal progress, meaningful pause/wait state, queue counts, active turn and snapshot lastSequence. Goal completion is not a terminal child result: join with session_wait waitFor=completion from the last consumed event cursor (0 if none), not this snapshot lastSequence, which may already include an unread completion. For an already-settled child, retrieve its result-bearing completion with session_events or join from the last consumed cursor. Use detail=full for the legacy bounded configuration including resources, persisted tool refs, effectiveToolPolicy and variableSet ids (never variable values). Full mode is configuration, not a substitute for compact goal/progress facts. Self reads inspect session state, not conversation history, which is supplied directly. Text loss is explicit; REST/UI defaults are unchanged.",
         inputSchema: {
-          sessionId: z43.string().uuid(),
+          sessionId: z43.string().uuid().optional().describe(
+            "Omit only to read the authenticated current agent session, never its parent or root. Sessionless callers must provide an explicit ID."
+          ),
           detail: z43.enum(["compact", "full"]).optional()
         }
       },
-      async ({ sessionId, detail }) => {
+      async ({ sessionId: requestedSessionId, detail }) => {
+        const sessionId = requestedSessionId ?? exactAgentAttemptClaims(grant)?.sessionId;
+        if (sessionId === void 0) {
+          throw new Error(
+            "session_get requires an explicit sessionId without authenticated current agent session context"
+          );
+        }
         const authorization = await authorizeFirstPartySession(
           deps,
           grant,
           sessionId,
           "session.read"
         );
-        const session = await getSession2(deps.db, grant.workspaceId, sessionId);
+        const session = await getSession3(deps.db, grant.workspaceId, sessionId);
         if (!session) {
           throw new Error("session not found");
         }
@@ -24169,9 +24754,14 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
     server.registerTool(
       "session_events",
       {
-        description: "Read a compact semantic tail only when session_get status is insufficient. With no cursor, this returns the newest matching events and excludes raw message/reasoning/command/PTY deltas. Monitoring mode also omits a human/API user.message whose turn was never claimed (still queued, or deleted/edited/cancelled before any claim; waiting work is represented by sessions_list queuedPromptCount); the row appears at its own sequence once the turn is claimed. Use `latest` as an exclusive lookup for the authoritative newest durable sequence in exactly one semantic class; `receipt` is the concise alias for `tool_receipt`, and latest cannot be combined with type or class filters. Add `resultMode=compact` to latest for one bounded result-bearing completion/checkpoint/receipt without another inference. Use nextBefore to page older or explicit after/nextAfter to page forward. Type/class filters run in the RLS-scoped database query. payloadMode none|summary|full controls retained audit payload projection, but every model result is independently byte-capped with explicit truncation and exact covered sequence bounds. Exact retained forensic payloads, including unclaimed prompt rows, require mode=forensic or the access-controlled REST/SDK events API with mode=forensic&payloadMode=full; generic source bytes never retained by the audit boundary remain unavailable.",
+        description: "Read session history. Default view=conversation returns roughly ten complete user/assistant messages, including completed commentary, in a 16 KiB envelope; no token deltas or execution records. Prefer fewer complete messages; a single oversized message has fragment offsets and a lossless nextCursor continuation over retained source text, including large legacy rows. Fragment unit is codepoint for plain text or utf16 for codec text; pass the opaque v2 cursor unchanged (v1 cursors must restart). Pass cursor=nextCursor with sessionId, omitting other selectors; it binds the view, detail and direction. after/nextAfter and before/nextBefore only change position, never view or detail; use nextCursor when present to avoid skipping a message fragment. view=results returns final turn answers and actionable outcomes without duplicate message-completion text. view=tools returns compact call/result identities; includeArguments/includeOutput opt into one text or JSON-encoded value, and callId selects an exact call (sparse scans can return an empty advancing page). sourceExact=false and sourceOmitted identify oversized structured values that were omitted, never partial JSON presented as complete; scalar text remains resumable. Conversation/results/tools omit never-claimed human/API prompts and stale duplicate events. view=debug exposes the existing authorized audit query with explicit type/class filters, mode=monitoring|forensic and payloadMode=none|summary|full; raw deltas and never-claimed prompts require mode=forensic. Explicit legacy audit selectors remain supported without view. latest is an exclusive semantic-class lookup; resultMode=compact requires latest. No read observes commands or changes append-only history. REST behavior is unchanged.",
         inputSchema: {
           sessionId: z43.string().uuid(),
+          view: z43.enum(["conversation", "results", "tools", "debug"]).optional(),
+          cursor: z43.string().max(4096).optional(),
+          callId: z43.string().max(512).optional(),
+          includeArguments: z43.boolean().optional(),
+          includeOutput: z43.boolean().optional(),
           after: z43.number().int().nonnegative().optional(),
           before: z43.number().int().positive().optional(),
           limit: z43.number().int().positive().optional(),
@@ -24179,8 +24769,22 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
           mode: z43.enum(SessionEventReadMode.options).optional(),
           payloadMode: z43.enum(SessionEventPayloadMode.options).optional(),
           resultMode: z43.enum(SessionEventResultMode.options).optional(),
-          includeTypes: z43.array(z43.enum(SessionEventType.options)).max(100).optional(),
-          excludeTypes: z43.array(z43.enum(SessionEventType.options)).max(100).optional(),
+          includeTypes: z43.array(
+            z43.string().refine(
+              (value) => SessionEventType.safeParse(value).success,
+              "Unknown session event type"
+            )
+          ).max(100).describe(
+            "Debug audit event types, e.g. turn.completed, user.message, agent.message.completed, agent.toolCall.output. Validated against the canonical event-type registry."
+          ).optional(),
+          excludeTypes: z43.array(
+            z43.string().refine(
+              (value) => SessionEventType.safeParse(value).success,
+              "Unknown session event type"
+            )
+          ).max(100).describe(
+            "Debug audit event types to exclude; validated against the canonical event-type registry."
+          ).optional(),
           includeClasses: z43.array(z43.enum(SessionEventSemanticClass.options)).max(SessionEventSemanticClass.options.length).optional(),
           excludeClasses: z43.array(z43.enum(SessionEventSemanticClass.options)).max(SessionEventSemanticClass.options.length).optional(),
           latest: z43.enum(SessionEventLatestClass.options).optional()
@@ -24188,6 +24792,11 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
       },
       async ({
         sessionId,
+        view,
+        cursor,
+        callId,
+        includeArguments,
+        includeOutput,
         after,
         before,
         limit,
@@ -24195,24 +24804,71 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
         mode: requestedMode,
         payloadMode: requestedPayloadMode,
         resultMode: requestedResultMode,
-        includeTypes,
-        excludeTypes,
+        includeTypes: requestedIncludeTypes,
+        excludeTypes: requestedExcludeTypes,
         includeClasses,
         excludeClasses,
         latest
       }) => {
         await authorizeFirstPartySession(deps, grant, sessionId, "session.events.read");
+        const includeTypes = requestedIncludeTypes?.map((type) => SessionEventType.parse(type));
+        const excludeTypes = requestedExcludeTypes?.map((type) => SessionEventType.parse(type));
         const latestClass = latest === void 0 ? void 0 : sessionEventLatestClassToSemanticClass(latest);
         if (requestedResultMode === "compact" && latestClass === void 0) {
           throw new Error("resultMode=compact requires latest");
         }
         await requireSession(deps.db, grant.workspaceId, sessionId);
+        const auditRequested = [
+          requestedMode,
+          requestedPayloadMode,
+          requestedResultMode,
+          includeTypes,
+          excludeTypes,
+          includeClasses,
+          excludeClasses,
+          latest
+        ].some((value) => value !== void 0);
+        if ((view !== void 0 && view !== "debug" || cursor !== void 0) && auditRequested) {
+          throw new Error(
+            "Audit selectors require view=debug and cannot change a conversation cursor"
+          );
+        }
+        if (view !== "debug" && !auditRequested) {
+          const { readSessionEventView } = await import("./session-event-view-MU3HMNV3.js");
+          const { listSessionEventSlices } = await import("@opengeni/db/session-event-slices");
+          return json(
+            await readSessionEventView(
+              {
+                sessionId,
+                view,
+                cursor,
+                callId,
+                includeArguments,
+                includeOutput,
+                after,
+                before,
+                direction: requestedDirection,
+                limit
+              },
+              (options) => listSessionEventSlices(
+                deps.db,
+                grant.workspaceId,
+                sessionId,
+                options,
+                (legacyOptions) => listSessionEventPage(deps.db, grant.workspaceId, sessionId, legacyOptions)
+              )
+            )
+          );
+        }
+        if (cursor !== void 0 || callId !== void 0 || includeArguments !== void 0 || includeOutput !== void 0) {
+          throw new Error("cursor/callId/includeArguments/includeOutput require a non-debug view");
+        }
         if (latest && [includeTypes, excludeTypes, includeClasses, excludeClasses].some(
           (filter) => filter !== void 0
         )) {
           throw new Error("latest cannot be combined with event filters");
         }
-        const mode = requestedMode ?? (after !== void 0 ? "forensic" : "monitoring");
+        const mode = requestedMode ?? "monitoring";
         const direction = latestClass ? "before" : requestedDirection ?? (before !== void 0 ? "before" : after !== void 0 ? "after" : "before");
         const payloadMode = requestedResultMode === "compact" ? "full" : requestedPayloadMode ?? (mode === "monitoring" ? "summary" : "full");
         const dbPage = await listSessionEventPage(deps.db, grant.workspaceId, sessionId, {
@@ -24262,7 +24918,7 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
     server.registerTool(
       "session_wait",
       {
-        description: `Block until a watched session has new durable events after your cursor, until your own session has pending machine input (a child result, an agent message, a steer, or a background-command result), or until maxWaitSeconds (default ${SESSION_WAIT_DEFAULT_SECONDS}, max ${SESSION_WAIT_MAX_SECONDS}) elapses. Use this for one short wait inside the current turn instead of sleeping and polling session_events/session_get/sessions_list while a child or peer session works. Do not immediately repeat it after timedOut=true unless new evidence suggests completion within one more window; for long or uncertain waits call wait_for_input once and end the turn. Pass each target's sessionId and afterSequence (its last seen sequence, 0 for a new session). waitFor=change is the default and returns on turn lifecycle, agent.message.completed, terminal background commands, blocking failures, goal facts, or session status/control changes. waitFor=completion is the child-result join: it ignores progress, completed commentary messages, goal facts, background commands, maintenance turns, and continuation segment settlements and returns only for a result-bearing final turn or a blocking state. A goal.completed event records goal state but is not a terminal child result. Raw deltas, tool receipts, sandbox diagnostics, and unrelated progress never wake either mode. Each changed target returns a bounded compact summary of up to ${SESSION_WAIT_EVENTS_PER_TARGET} exact durable events plus latestSequence (pass it back as the next afterSequence) and hasMore (drill down with session_events after=latestSequence). ownPendingUpdates > 0 means your own session has machine input that is delivered only when your next turn is claimed: finish this turn to receive it, or pass includeOwnPendingUpdates=false to keep waiting on the targets. timedOut=true means nothing changed; liveFanout=false means the live bus was unavailable and the wait relied on the deadline re-check. The whole result is byte-bounded: summaries are shortened first, then newest rows dropped, so a changed target may come back with events=[] and hasMore=true; read those rows with session_events after=latestSequence. The wait cannot exceed ${SESSION_WAIT_MAX_SECONDS} seconds because the MCP client request timeout is 60 seconds.`,
+        description: `Wait once for durable session changes, your pending machine input, or maxWaitSeconds (default ${SESSION_WAIT_DEFAULT_SECONDS}, max ${SESSION_WAIT_MAX_SECONDS}). Pass targets with sessionId and afterSequence: the last consumed cursor, or 0. Never substitute session_get.lastSequence, which may include an unread completion. waitFor=change returns on turn lifecycle, completed messages, terminal commands, blockers, goal facts, or session control. waitFor=completion joins a child result: only a result-bearing final turn or blocker qualifies, not commentary, goal.completed, background commands, maintenance turns, or continuation segments. Neither mode wakes on raw deltas or tool receipts. Each target contains up to ${SESSION_WAIT_EVENTS_PER_TARGET} bounded summaries, latestSequence (the next afterSequence), and hasMore. For omitted rows use session_events view=results after=latestSequence for final outcomes, or view=debug with explicit filters for diagnostics; the default conversation view does not contain execution records. Byte limits can leave events=[] with hasMore=true. ownPendingUpdates > 0 means input will arrive when your next turn is claimed: finish this turn, or use includeOwnPendingUpdates=false to keep waiting. timedOut=true means no matching change; liveFanout=false means the deadline re-check supplied durable truth without the live bus. Do not immediately repeat a timeout without new evidence. For long or uncertain waits call wait_for_input once and end the turn.`,
         inputSchema: {
           targets: z43.array(
             z43.object({
@@ -24334,96 +24990,51 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
       }
     );
     if (callerSessionId !== null) {
-      server.registerTool(
-        "command_wait",
-        {
-          description: `Wait briefly for one background command owned by this session to settle, without provider-specific polling or write_stdin loops. The durable command row is authoritative. This returns immediately when the command is already terminal or otherwise waits up to maxWaitSeconds (default ${SESSION_WAIT_DEFAULT_SECONDS}, max ${SESSION_WAIT_MAX_SECONDS}) for its session.command.finished event or other pending input for this session. timedOut=true never cancels the command. Do not immediately repeat command_wait after a timeout unless new evidence suggests completion within one more window; for long or uncertain work call wait_for_input once and end the turn.`,
-          inputSchema: {
-            commandId: z43.string().uuid(),
-            maxWaitSeconds: z43.number().int().min(1).max(SESSION_WAIT_MAX_SECONDS).optional()
-          }
-        },
-        async ({ commandId, maxWaitSeconds }, extra) => {
-          await authorizeFirstPartySession(deps, grant, callerSessionId, "session.events.read");
-          const initialSession = await requireSession(deps.db, grant.workspaceId, callerSessionId);
-          let command = await getSessionBackgroundCommand(deps.db, {
-            accountId: grant.accountId,
-            workspaceId: grant.workspaceId,
-            sessionId: callerSessionId,
-            commandId
-          });
-          if (!command) throw new Error("Background command not found in this session");
-          const terminal2 = () => command?.state === "exited" || command?.state === "lost";
-          let waitResult = null;
-          if (!terminal2()) {
-            waitResult = await waitForSessionChanges({
-              targets: [{ sessionId: callerSessionId, afterSequence: initialSession.lastSequence }],
-              ownSessionId: callerSessionId,
-              maxWaitMs: (maxWaitSeconds ?? SESSION_WAIT_DEFAULT_SECONDS) * 1e3,
-              targetEventTypes: ["session.command.finished"],
-              targetEventMatches: (event) => {
-                const payload = event.payload;
-                return payload !== null && typeof payload === "object" && !Array.isArray(payload) && payload.commandId === commandId;
-              },
-              signal: extra?.signal,
-              source: {
-                readTargetEvents: async (target) => {
-                  const page = await listSessionEventPage(
-                    deps.db,
-                    grant.workspaceId,
-                    target.sessionId,
-                    {
-                      after: target.afterSequence,
-                      direction: "after",
-                      limit: SESSION_WAIT_EVENTS_PER_TARGET,
-                      payloadMode: "full",
-                      includeTypes: ["session.command.finished"],
-                      maxBytes: SESSION_EVENT_MCP_MAX_BYTES * 4
-                    }
-                  );
-                  return { events: page.events, hasMore: page.hasMore };
-                },
-                readOwnPendingUpdateKinds: async () => (await listOutstandingSessionSystemUpdates(
-                  deps.db,
-                  grant.workspaceId,
-                  callerSessionId
-                )).map((update) => update.kind),
-                subscribe: (targetSessionId, onEvents) => deps.bus.subscribe(grant.workspaceId, targetSessionId, onEvents)
-              }
-            });
-          }
-          command = await getSessionBackgroundCommand(deps.db, {
-            accountId: grant.accountId,
-            workspaceId: grant.workspaceId,
-            sessionId: callerSessionId,
-            commandId
-          }) ?? command;
-          const isTerminal = terminal2();
-          const ownPendingUpdateKinds = (await listOutstandingSessionSystemUpdates(deps.db, grant.workspaceId, callerSessionId)).map((update) => update.kind);
-          const ownPendingUpdates = ownPendingUpdateKinds.length;
-          if (waitResult) {
+      for (const toolName of ["command_read", "command_wait"]) {
+        server.registerTool(
+          toolName,
+          {
+            description: `${toolName === "command_read" ? "Read retained output immediately, or briefly wait" : "Briefly wait using the same read operation as command_read"} for one command owned by the current session, across sandbox and Connected Machine providers. Returns bounded stdout/stderr chunks, durable state and exitCode, nextCursor and hasMore, plus explicit retention limitations. Pass nextCursor to continue; output remains readable after the process exits. A terminal read observes completion and suppresses only its still-pending inbox notification; running reads and already claimed history are unchanged. waitSeconds is at most 50; command_wait defaults to 45, command_read to 0. For long waits use wait_for_input. Neither tool sends stdin or cancels the command.`,
+            inputSchema: {
+              commandId: z43.string().uuid(),
+              cursor: z43.string().max(128).optional(),
+              waitSeconds: z43.number().int().min(0).max(COMMAND_READ_MAX_WAIT_SECONDS).optional(),
+              maxOutputBytes: z43.number().int().min(4).max(COMMAND_OUTPUT_MAX_BYTES2).optional()
+            }
+          },
+          async ({ commandId, cursor, waitSeconds, maxOutputBytes }, extra) => {
             await authorizeFirstPartySession(deps, grant, callerSessionId, "session.events.read");
+            let initialRead = true;
+            return json(
+              await readCommandWithWait({
+                commandId,
+                waitSeconds: waitSeconds ?? (toolName === "command_wait" ? COMMAND_WAIT_DEFAULT_SECONDS : 0),
+                ...maxOutputBytes === void 0 ? {} : { maxOutputBytes },
+                ...extra?.signal === void 0 ? {} : { signal: extra.signal },
+                read: async () => {
+                  if (!initialRead)
+                    await authorizeFirstPartySession(
+                      deps,
+                      grant,
+                      callerSessionId,
+                      "session.events.read"
+                    );
+                  initialRead = false;
+                  return await readSessionBackgroundCommandOutput(deps.db, {
+                    accountId: grant.accountId,
+                    workspaceId: grant.workspaceId,
+                    sessionId: callerSessionId,
+                    commandId,
+                    ...cursor === void 0 ? {} : { cursor },
+                    ...maxOutputBytes === void 0 ? {} : { maxOutputBytes }
+                  });
+                },
+                subscribe: (onEvents) => deps.bus.subscribe(grant.workspaceId, callerSessionId, onEvents)
+              })
+            );
           }
-          const timedOut = (waitResult?.timedOut ?? false) && !isTerminal && ownPendingUpdates === 0;
-          return json({
-            command,
-            terminal: isTerminal,
-            waitedMs: waitResult?.waitedMs ?? 0,
-            timedOut,
-            aborted: waitResult?.aborted ?? false,
-            liveFanout: waitResult?.liveFanout ?? true,
-            ownPendingUpdates,
-            ownPendingUpdateKinds,
-            ...isTerminal ? {
-              outputLocator: {
-                eventType: "sandbox.command.output.delta",
-                commandId
-              }
-            } : {},
-            nextAction: isTerminal ? ownPendingUpdates > 0 ? "End this turn to receive the queued command result or other machine input." : "The command is terminal; inspect output events only if more detail is needed." : ownPendingUpdates > 0 ? "End this turn to receive pending machine input." : waitResult?.timedOut ? "Do not immediately repeat this short wait without new completion evidence; use wait_for_input for a long or uncertain wait." : "The wait was aborted; follow the newer session control or input."
-          });
-        }
-      );
+        );
+      }
     }
   }
   if (can("sessions:create") && sessionCreateVisible) {
@@ -25346,7 +25957,7 @@ function registerGitHubConnectTool(server, deps, grant, options, json) {
       const installations = await listWorkspaceGitHubInstallationBindings(deps, grant.workspaceId);
       const status = githubBindingStatus(true, installations);
       const baseUrl = githubBrowserBaseUrl(settings, options.requestOrigin);
-      const state = baseUrl && hasPermission10(grant.permissions, "github:manage") ? createSignedState6(deps.githubStateSecret, {
+      const state = baseUrl && hasPermission11(grant.permissions, "github:manage") ? createSignedState6(deps.githubStateSecret, {
         accountId: grant.accountId,
         workspaceId: grant.workspaceId,
         intent: "installation_authority",
@@ -25372,10 +25983,10 @@ function registerGitHubConnectTool(server, deps, grant, options, json) {
 }
 function requireVariableSetsUseForMcpAttachment(grant, variableSetId) {
   if (variableSetId === void 0) return;
-  if (!hasPermission10(grant.permissions, "variable-sets:attach")) {
+  if (!hasPermission11(grant.permissions, "variable-sets:attach")) {
     throw new Error("missing permission: variable-sets:attach");
   }
-  if (variableSetId !== null && !hasPermission10(grant.permissions, "variable-sets:use")) {
+  if (variableSetId !== null && !hasPermission11(grant.permissions, "variable-sets:use")) {
     throw new Error("missing permission: variable-sets:use");
   }
 }
@@ -25383,10 +25994,10 @@ function requireVariableSetsUseForMcpAttachments(grant, selection) {
   const singular = selection.variableSetId ?? selection.environmentId;
   const variableSetIds = selection.variableSetIds ?? (singular ? [singular] : void 0);
   if (variableSetIds === void 0) return;
-  if (!hasPermission10(grant.permissions, "variable-sets:attach")) {
+  if (!hasPermission11(grant.permissions, "variable-sets:attach")) {
     throw new HTTPException19(403, { message: "missing permission: variable-sets:attach" });
   }
-  if (variableSetIds.length > 0 && !hasPermission10(grant.permissions, "variable-sets:use")) {
+  if (variableSetIds.length > 0 && !hasPermission11(grant.permissions, "variable-sets:use")) {
     throw new HTTPException19(403, { message: "missing permission: variable-sets:use" });
   }
 }
@@ -25432,6 +26043,7 @@ var SESSION_DISCOVERY_PREVIEW_OMISSION_REASON = "aggregatePreviewBudget";
 var SESSION_DISCOVERY_PAGE_MAX_BYTES = 128e3;
 var SESSION_DISCOVERY_PREVIEW_DRILL_DOWN_TOOL = "session_events";
 var SESSION_DISCOVERY_PREVIEW_DRILL_DOWN_BASE_INPUT = {
+  view: "debug",
   direction: "before",
   limit: 1,
   mode: "monitoring",
@@ -25798,171 +26410,6 @@ async function withMcpEffectivePolicy(deps, workspaceId, subjectId, session) {
   return sessionWithEffectiveToolPolicy(session, workspaceServerIds, workspaceDefaultServerIds);
 }
 
-// src/codemode.ts
-import {
-  codemodeDispatchSubject,
-  decodeCodemodeDispatchAck,
-  encodeCodemodeDispatchRequest
-} from "@opengeni/codemode";
-import {
-  CODEMODE_DISPATCH_TIMEOUT_MS,
-  CodemodeCallRequest,
-  CodemodeCallSubmission
-} from "@opengeni/contracts";
-import { hasPermission as hasPermission11, requireSessionAuthorization as requireSessionAuthorization3 } from "@opengeni/core";
-import {
-  getActiveSessionTurnForExecution,
-  getAttemptToolCatalog,
-  getCodemodeOperation,
-  submitCodemodeOperation
-} from "@opengeni/db";
-var CODEMODE_AUTHORITY_FAILURE_MESSAGES = {
-  invalid_grant: "Codemode bearer does not carry valid execution-attempt authority",
-  inactive_attempt: "Codemode execution attempt is no longer active",
-  catalog_mismatch: "Codemode tool catalog does not match the active execution attempt"
-};
-var CodemodeAuthorityError = class extends Error {
-  constructor(reason2) {
-    super(CODEMODE_AUTHORITY_FAILURE_MESSAGES[reason2]);
-    this.reason = reason2;
-    this.name = "CodemodeAuthorityError";
-    this.code = `codemode_${reason2}`;
-  }
-  code;
-};
-var CodemodeCatalogNotReadyError = class extends Error {
-  code = "codemode_catalog_not_ready";
-  constructor() {
-    super("Codemode tool catalog is not ready for the active execution attempt");
-    this.name = "CodemodeCatalogNotReadyError";
-  }
-};
-var CodemodeCatalogStaleError = class extends Error {
-  code = "codemode_catalog_stale";
-  constructor() {
-    super("Codemode tool catalog is stale for the active execution attempt");
-    this.name = "CodemodeCatalogStaleError";
-  }
-};
-function codemodeAuthorityForGrant(grant) {
-  const metadata = grant.metadata;
-  if (grant.principalKind !== "agent_attempt" || metadata?.delegated !== true || typeof metadata.sessionId !== "string" || typeof metadata.turnId !== "string" || typeof metadata.attemptId !== "string" || typeof metadata.executionGeneration !== "number" || !Number.isInteger(metadata.executionGeneration) || metadata.executionGeneration < 1) {
-    return null;
-  }
-  return {
-    accountId: grant.accountId,
-    workspaceId: grant.workspaceId,
-    sessionId: metadata.sessionId,
-    turnId: metadata.turnId,
-    attemptId: metadata.attemptId,
-    executionGeneration: metadata.executionGeneration,
-    subjectId: grant.subjectId
-  };
-}
-function isCodemodeGrant(grant) {
-  return hasPermission11(grant.permissions, "codemode:call") && codemodeAuthorityForGrant(grant) !== null;
-}
-function requireMatchingCodemodeCatalog(authority, catalog) {
-  if (!catalog) throw new CodemodeCatalogNotReadyError();
-  if (catalog.accountId !== authority.accountId || catalog.workspaceId !== authority.workspaceId || catalog.sessionId !== authority.sessionId || catalog.turnId !== authority.turnId || catalog.attemptId !== authority.attemptId || catalog.executionGeneration !== authority.executionGeneration) {
-    throw new CodemodeAuthorityError("catalog_mismatch");
-  }
-  return catalog;
-}
-async function requireActiveCodemodeCatalog(deps, grant) {
-  if (!isCodemodeGrant(grant)) throw new CodemodeAuthorityError("invalid_grant");
-  const authority = codemodeAuthorityForGrant(grant);
-  await requireSessionAuthorization3(deps, grant, {
-    sessionId: authority.sessionId,
-    operation: "session.codemode.call",
-    surface: "codemode"
-  });
-  const active = await getActiveSessionTurnForExecution(
-    deps.db,
-    authority.workspaceId,
-    authority.sessionId
-  );
-  if (!active || active.status !== "running" || active.id !== authority.turnId || active.activeAttemptId !== authority.attemptId || active.executionGeneration !== authority.executionGeneration) {
-    throw new CodemodeAuthorityError("inactive_attempt");
-  }
-  const catalog = requireMatchingCodemodeCatalog(
-    authority,
-    await getAttemptToolCatalog(deps.db, {
-      accountId: authority.accountId,
-      workspaceId: authority.workspaceId,
-      attemptId: authority.attemptId
-    })
-  );
-  return { authority, catalog };
-}
-async function submitAndDispatchCodemodeCall(deps, grant, rawRequest) {
-  const request = CodemodeCallRequest.parse(rawRequest);
-  const { authority, catalog } = await requireActiveCodemodeCatalog(deps, grant);
-  if (request.catalogDigest !== catalog.digest) throw new CodemodeCatalogStaleError();
-  const submitted = await submitCodemodeOperation(deps.db, {
-    ...authority,
-    call: {
-      ...request,
-      caller: { kind: "codemode", subjectId: authority.subjectId }
-    }
-  });
-  let operation = submitted.operation;
-  let dispatch = terminal(operation) ? "terminal" : operation.state === "running" ? "already_running" : "unavailable";
-  if (codemodeOperationNeedsDispatch(operation)) {
-    try {
-      const reply = await deps.bus.request(
-        codemodeDispatchSubject(authority.workspaceId, authority.attemptId),
-        encodeCodemodeDispatchRequest({
-          version: 1,
-          operationId: operation.operationId,
-          catalogDigest: catalog.digest
-        }),
-        { timeoutMs: CODEMODE_DISPATCH_TIMEOUT_MS }
-      );
-      dispatch = decodeCodemodeDispatchAck(reply.data).status;
-    } catch {
-      dispatch = "unavailable";
-    }
-    operation = await refreshAdmittedCodemodeOperation(
-      operation,
-      () => getCodemodeOperation(deps.db, {
-        accountId: authority.accountId,
-        workspaceId: authority.workspaceId,
-        attemptId: authority.attemptId,
-        operationId: operation.operationId
-      })
-    );
-    if (terminal(operation)) dispatch = "terminal";
-    else if (operation.state === "running" && dispatch === "unavailable") {
-      dispatch = "already_running";
-    }
-  }
-  return CodemodeCallSubmission.parse({ operation, dispatch });
-}
-function codemodeOperationNeedsDispatch(operation) {
-  return operation.state === "queued" || operation.state === "running";
-}
-async function readCodemodeOperation(deps, grant, operationId) {
-  if (!isCodemodeGrant(grant)) throw new CodemodeAuthorityError("invalid_grant");
-  const authority = codemodeAuthorityForGrant(grant);
-  return await getCodemodeOperation(deps.db, {
-    accountId: authority.accountId,
-    workspaceId: authority.workspaceId,
-    attemptId: authority.attemptId,
-    operationId
-  });
-}
-function terminal(operation) {
-  return ["completed", "failed", "outcome_unknown", "cancelled"].includes(operation.state);
-}
-async function refreshAdmittedCodemodeOperation(admitted, read) {
-  try {
-    return await read() ?? admitted;
-  } catch {
-    return admitted;
-  }
-}
-
 // src/app.ts
 import { boundedMcpRequest, McpPayloadTooLargeError } from "@opengeni/runtime/mcp-network";
 import {
@@ -25971,7 +26418,7 @@ import {
 } from "@opengeni/runtime/sandbox";
 
 // src/http/auth.ts
-import { resolveFirstPartyDelegationSecret } from "@opengeni/config";
+import { resolveFirstPartyDelegationSecret as resolveFirstPartyDelegationSecret2 } from "@opengeni/config";
 import { verifyDelegatedAccessToken } from "@opengeni/contracts";
 
 // src/routes/install.ts
@@ -26255,7 +26702,7 @@ async function isAuthorized(c, settings) {
   if (expected && constantTimeEqual(bearer, expected)) {
     return true;
   }
-  const delegationSecret = resolveFirstPartyDelegationSecret(settings);
+  const delegationSecret = resolveFirstPartyDelegationSecret2(settings);
   return Boolean(
     c.req.path.startsWith("/v1/") && bearer && delegationSecret && await verifyDelegatedAccessToken(delegationSecret, bearer)
   );
@@ -26318,7 +26765,7 @@ import {
 } from "@opengeni/core";
 
 // src/http/common.ts
-import { getSession as getSession3 } from "@opengeni/db";
+import { getSession as getSession4 } from "@opengeni/db";
 import { HTTPException as HTTPException22 } from "hono/http-exception";
 function boundedLimit(raw) {
   const limit = Number(raw ?? 100);
@@ -26328,7 +26775,7 @@ function boundedLimit(raw) {
   return Math.min(500, Math.max(1, Math.floor(limit)));
 }
 async function assertSessionExists(db, workspaceId, sessionId) {
-  if (!await getSession3(db, workspaceId, sessionId)) {
+  if (!await getSession4(db, workspaceId, sessionId)) {
     throw new HTTPException22(404, { message: "session not found" });
   }
 }
@@ -29152,7 +29599,7 @@ function registerSuperGrokRoutes(app, deps) {
 }
 
 // src/routes/connections.ts
-import { createHash as createHash13, createHmac as createHmac4 } from "crypto";
+import { createHash as createHash12, createHmac as createHmac4 } from "crypto";
 import {
   WORKSPACE_OPENROUTER_CONNECTION_DOMAIN,
   WORKSPACE_OPENROUTER_CONNECTION_ROLE,
@@ -29250,7 +29697,7 @@ import { HTTPException as HTTPException29 } from "hono/http-exception";
 
 // src/integrations/provider-oauth.ts
 import { Buffer as Buffer4 } from "buffer";
-import { createHash as createHash11, randomBytes as randomBytes6 } from "crypto";
+import { createHash as createHash10, randomBytes as randomBytes6 } from "crypto";
 import {
   integrationDefinitionProviderDomain as integrationDefinitionProviderDomain2,
   integrationDefinitionById
@@ -29367,7 +29814,7 @@ async function startApiIntegrationProviderOAuth(deps, input) {
   authorizationUrl.searchParams.set("code_challenge_method", "S256");
   authorizationUrl.searchParams.set(
     "code_challenge",
-    createHash11("sha256").update(verifier).digest("base64url")
+    createHash10("sha256").update(verifier).digest("base64url")
   );
   authorizationUrl.searchParams.set("prompt", "select_account");
   if (definition.provider.id === "google") {
@@ -29597,7 +30044,7 @@ function providerClientKeys(definition) {
   ]);
 }
 function providerDefinitionFingerprint(definition) {
-  return createHash11("sha256").update(
+  return createHash10("sha256").update(
     JSON.stringify({
       id: definition.id,
       provider: definition.provider,
@@ -29840,7 +30287,7 @@ function numberValue4(value) {
 }
 
 // src/integrations/personal-github.ts
-import { createHash as createHash12, randomBytes as randomBytes7, randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash11, randomBytes as randomBytes7, randomUUID as randomUUID3 } from "crypto";
 import { personalGitHubOAuthCallbackUrl } from "@opengeni/config";
 import {
   PERSONAL_GITHUB_AUTHORIZATION_URL,
@@ -29886,7 +30333,7 @@ var PersonalGitHubCallbackError = class extends Error {
   }
 };
 function personalGitHubClientMarker(clientId) {
-  return createHash12("sha256").update(clientId).digest("hex").slice(0, 32);
+  return createHash11("sha256").update(clientId).digest("hex").slice(0, 32);
 }
 function requirePersonalGitHubOAuthSettings(settings) {
   if (!settings.githubPersonalOauthEnabled) {
@@ -29989,7 +30436,7 @@ async function startPersonalGitHubOAuth(deps, input) {
   authorizationUrl.searchParams.set("state", state);
   authorizationUrl.searchParams.set(
     "code_challenge",
-    createHash12("sha256").update(verifier).digest("base64url")
+    createHash11("sha256").update(verifier).digest("base64url")
   );
   authorizationUrl.searchParams.set("code_challenge_method", "S256");
   return PersonalGitHubOAuthStartResponse.parse({
@@ -30582,7 +31029,7 @@ function registerConnectionRoutes(app, deps) {
             accountId: state.accountId,
             workspaceId: state.workspaceId,
             subjectId: state.subjectId,
-            callbackDigest: createHash13("sha256").update(state.nonce).digest("hex"),
+            callbackDigest: createHash12("sha256").update(state.nonce).digest("hex"),
             installMode: state.connectionId ? "reinstall" : "connect",
             ...failure
           });
@@ -33308,7 +33755,7 @@ import { buildFleetContextForSession as buildFleetContextForSession2, swapActive
 
 // src/sandbox/machines.ts
 import {
-  getSession as getSession4,
+  getSession as getSession5,
   getLiveEnrollmentConnection as getLiveEnrollmentConnection3,
   listEnrollments as listEnrollments3,
   listSandboxes,
@@ -33441,7 +33888,7 @@ async function listMachines(services, input) {
   let activeEpoch = 0;
   let session = null;
   if (input.sessionId) {
-    session = await getSession4(db, workspaceId, input.sessionId);
+    session = await getSession5(db, workspaceId, input.sessionId);
     if (session) {
       const pointer = await readActiveSandbox2(db, workspaceId, input.sessionId);
       activeSandboxId = pointer?.activeSandboxId ?? null;
@@ -35302,7 +35749,7 @@ function browserIdentityRouteError(error) {
 import { randomUUID as randomUUID5 } from "crypto";
 import {
   environmentsEncryptionKeyBytes as environmentsEncryptionKeyBytes4,
-  resolveFirstPartyDelegationSecret as resolveFirstPartyDelegationSecret2,
+  resolveFirstPartyDelegationSecret as resolveFirstPartyDelegationSecret3,
   resolveStreamTokenSecret as resolveStreamTokenSecret2
 } from "@opengeni/config";
 import {
@@ -35396,7 +35843,7 @@ import {
   getExternalAuthPreparation,
   getProtectedAuthFillPreparation,
   getSiteAuthConnection,
-  getSession as getSession5,
+  getSession as getSession6,
   InteractionResourceConflictError,
   InteractionResourceNotFoundError,
   InteractionResourceStateError,
@@ -35695,7 +36142,7 @@ async function withInteractionHolderHeartbeat(deps, input, run) {
 }
 
 // src/browser-state-authority.ts
-import { createCipheriv, createDecipheriv, createHash as createHash14, createHmac as createHmac6, randomBytes as randomBytes9 } from "crypto";
+import { createCipheriv, createDecipheriv, createHash as createHash13, createHmac as createHmac6, randomBytes as randomBytes9 } from "crypto";
 import { BROWSER_PROFILE_ARTIFACT_FORMAT } from "@opengeni/contracts";
 var ROOT_KEY_BYTES = 32;
 var DATA_KEY_BYTES = 32;
@@ -35759,7 +36206,7 @@ function browserStateObjectKey(workspaceIdInput, operationIdInput) {
   return `workspaces/${workspaceId}/browser-state/revisions/${operationId}/chromium-profile.ogbs`;
 }
 function browserStateManifestDigest(manifest) {
-  return createHash14("sha256").update(canonicalJson2(manifest), "utf8").digest("hex");
+  return createHash13("sha256").update(canonicalJson2(manifest), "utf8").digest("hex");
 }
 function operationScope(input) {
   const base = baseArtifactScope(input);
@@ -35772,8 +36219,8 @@ function operationScope(input) {
 function artifactScope(input) {
   return {
     ...baseArtifactScope(input),
-    artifactDigest: sha2562(input.artifactDigest, "browser state artifact digest"),
-    contentDigest: sha2562(input.contentDigest, "browser state content digest")
+    artifactDigest: sha256(input.artifactDigest, "browser state artifact digest"),
+    contentDigest: sha256(input.contentDigest, "browser state content digest")
   };
 }
 function baseArtifactScope(input) {
@@ -35817,7 +36264,7 @@ function uuid(value, label) {
   }
   return value.toLowerCase();
 }
-function sha2562(value, label) {
+function sha256(value, label) {
   if (typeof value !== "string" || !SHA256_PATTERN.test(value)) {
     throw new Error(`${label} is invalid`);
   }
@@ -39798,7 +40245,7 @@ function interactionHolderId(browserSessionId) {
   return `browser-session:${browserSessionId}`;
 }
 function browserAuthorityRoot(deps) {
-  const root2 = resolveFirstPartyDelegationSecret2(deps.settings);
+  const root2 = resolveFirstPartyDelegationSecret3(deps.settings);
   if (!root2) {
     throw new HTTPException39(503, {
       message: "browser controller authority is not configured"
@@ -39875,7 +40322,7 @@ async function settleBrowserRevisionCaptureFailure(deps, input, error) {
   });
 }
 async function requireSourceSession(deps, workspaceId, sessionId) {
-  const session = await getSession5(deps.db, workspaceId, sessionId);
+  const session = await getSession6(deps.db, workspaceId, sessionId);
   if (!session) throw new BrowserSessionNotFoundError("Associated session not found");
   return session;
 }
@@ -40400,7 +40847,7 @@ function isAbort(error) {
 
 // src/routes/computer-sessions.ts
 import { randomUUID as randomUUID6 } from "crypto";
-import { resolveFirstPartyDelegationSecret as resolveFirstPartyDelegationSecret3, resolveStreamTokenSecret as resolveStreamTokenSecret3 } from "@opengeni/config";
+import { resolveFirstPartyDelegationSecret as resolveFirstPartyDelegationSecret4, resolveStreamTokenSecret as resolveStreamTokenSecret3 } from "@opengeni/config";
 import {
   BROWSER_CONTROL_WEBSOCKET_BEARER_PREFIX as BROWSER_CONTROL_WEBSOCKET_BEARER_PREFIX2,
   BROWSER_CONTROL_PORT as BROWSER_CONTROL_PORT2,
@@ -40434,7 +40881,7 @@ import {
   getComputerSessionControlRecord as getComputerSessionControlRecord2,
   getLiveEnrollmentConnection as getLiveEnrollmentConnection6,
   getSandbox as getSandbox3,
-  getSession as getSession6,
+  getSession as getSession7,
   listComputerSessions,
   prepareComputerSessionCreate,
   prepareComputerSessionEnd,
@@ -41777,7 +42224,7 @@ function interactionHolderId2(computerSessionId) {
   return `computer-session:${computerSessionId}`;
 }
 function controllerAuthorityRoot(deps) {
-  const root2 = resolveFirstPartyDelegationSecret3(deps.settings);
+  const root2 = resolveFirstPartyDelegationSecret4(deps.settings);
   if (!root2) {
     throw new HTTPException40(503, {
       message: "interaction controller authority is not configured"
@@ -41786,7 +42233,7 @@ function controllerAuthorityRoot(deps) {
   return root2;
 }
 async function requireSourceSession2(deps, workspaceId, sessionId) {
-  const session = await getSession6(deps.db, workspaceId, sessionId);
+  const session = await getSession7(deps.db, workspaceId, sessionId);
   if (!session) throw new ComputerSessionNotFoundError("Associated session not found");
   return session;
 }
@@ -41966,8 +42413,12 @@ function isAbort2(error) {
 
 // src/routes/github.ts
 import {
-  GitHubAppManifestCreate
+  GitHubActionPoliciesResponse,
+  GitHubActionPolicyActorState,
+  GitHubAppManifestCreate,
+  UpdateGitHubActionPolicyRequest
 } from "@opengeni/contracts";
+import { PersonalGitHubConnectionMetadata as PersonalGitHubConnectionMetadata2 } from "@opengeni/contracts/personal-github";
 import {
   ListGitHubRepositoryBranchesQuery,
   VerifyPublicGitHubRepositoryRefRequest
@@ -41976,7 +42427,8 @@ import { parseCanonicalGitHubRepositoryUrl } from "@opengeni/contracts/github-re
 import {
   bindAuthorizedGitHubInstallationRepositories,
   deleteGitHubInstallationBinding,
-  GitHubInstallationAuthorityCommitError
+  GitHubInstallationAuthorityCommitError,
+  listGitHubInstallationAccessForWorkspace as listGitHubInstallationAccessForWorkspace2
 } from "@opengeni/db";
 import {
   authorizeGitHubInstallationBinding,
@@ -42000,7 +42452,15 @@ import {
 } from "@opengeni/github";
 import { deleteCookie, setCookie } from "hono/cookie";
 import { HTTPException as HTTPException41 } from "hono/http-exception";
-import { hasPermission as hasPermission16, requireAccessGrant as requireAccessGrant16 } from "@opengeni/core";
+import {
+  githubAppActionPolicyActor,
+  hasPermission as hasPermission16,
+  listGitHubActionPolicyActors,
+  personalGitHubActionPolicyActor,
+  requireAccessGrant as requireAccessGrant16,
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization8,
+  updateGitHubActionPolicyGroup
+} from "@opengeni/core";
 var githubStateCookie = "opengeni_github_state";
 var githubBindingStateMaxAgeSeconds = 10 * 60;
 var legacyInstallationChooserDisabledMessage = "The legacy repository-admin GitHub installation chooser is disabled; use the GitHub owner-consent connect flow";
@@ -42041,6 +42501,89 @@ function registerGitHubRoutes(app, deps) {
       missing: setupMode === "operator" ? missing : []
     });
   });
+  app.get("/v1/workspaces/:workspaceId/github/action-policies", async (c) => {
+    const workspaceId = c.req.param("workspaceId");
+    const grant = await requireAccessGrant16(c, deps, workspaceId, "github:use");
+    const [installations, personalConnections] = await Promise.all([
+      listGitHubInstallationAccessForWorkspace2(db, grant.workspaceId),
+      listPersonalGitHubConnections(deps, {
+        workspaceId: grant.workspaceId,
+        subjectId: grant.subjectId
+      })
+    ]);
+    const personalConnection = canonicalPersonalGitHubPolicyConnection(personalConnections);
+    const actors = [
+      ...installations.map(githubAppActionPolicyActor),
+      ...personalConnection ? [
+        personalGitHubActionPolicyActor({
+          connectionId: personalConnection.id,
+          githubLogin: PersonalGitHubConnectionMetadata2.parse(personalConnection.metadata).githubLogin
+        })
+      ] : []
+    ];
+    return c.json(
+      GitHubActionPoliciesResponse.parse({
+        enabled: settings.githubRestMcpEnabled,
+        actors: await listGitHubActionPolicyActors(db, {
+          accountId: grant.accountId,
+          workspaceId: grant.workspaceId,
+          actors
+        })
+      })
+    );
+  });
+  app.patch("/v1/workspaces/:workspaceId/github/action-policies", async (c) => {
+    const workspaceId = c.req.param("workspaceId");
+    const payload = UpdateGitHubActionPolicyRequest.parse(await c.req.json());
+    const actor = payload.actor;
+    if (actor.kind === "workspace_app") {
+      const grant = await requireAccessGrant16(c, deps, workspaceId, "github:manage");
+      const installations = await listGitHubInstallationAccessForWorkspace2(db, grant.workspaceId);
+      const installation = installations.find(
+        (candidate) => candidate.installationId === actor.installationId
+      );
+      if (!installation || installation.accountId !== grant.accountId) {
+        throw new HTTPException41(404, { message: "GitHub installation not found" });
+      }
+      return c.json(
+        GitHubActionPolicyActorState.parse(
+          await updateGitHubActionPolicyGroup(db, {
+            accountId: grant.accountId,
+            workspaceId: grant.workspaceId,
+            subjectId: grant.subjectId,
+            actor: githubAppActionPolicyActor(installation),
+            group: payload.group,
+            decision: payload.decision
+          })
+        )
+      );
+    }
+    const access = await requireAccessGrantAuthorization8(c, deps, workspaceId, "connections:write");
+    assertPersonalConnectionOwnerPrincipal(access, "My GitHub action policy");
+    const connections = await listPersonalGitHubConnections(deps, {
+      workspaceId: access.grant.workspaceId,
+      subjectId: access.grant.subjectId
+    });
+    const connection = connections.find((candidate) => candidate.id === actor.connectionId);
+    if (!connection) {
+      throw new HTTPException41(404, { message: "personal GitHub connection not found" });
+    }
+    return c.json(
+      GitHubActionPolicyActorState.parse(
+        await updateGitHubActionPolicyGroup(db, {
+          accountId: access.grant.accountId,
+          workspaceId: access.grant.workspaceId,
+          subjectId: access.grant.subjectId,
+          actor: personalGitHubActionPolicyActor({
+            connectionId: connection.id,
+            githubLogin: PersonalGitHubConnectionMetadata2.parse(connection.metadata).githubLogin
+          }),
+          group: payload.group,
+          decision: payload.decision
+        })
+      )
+    );
+  });
   app.get("/v1/workspaces/:workspaceId/github/connect", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const state = c.req.query("state");
@@ -42540,6 +43083,20 @@ function githubInstallationSettingsUrl(installation) {
   }
   return new URL(`https://github.com/settings/installations/${installation.installationId}`);
 }
+function canonicalPersonalGitHubPolicyConnection(connections) {
+  const statusRank = {
+    active: 0,
+    needs_reauth: 1,
+    error: 2,
+    revoked: 3
+  };
+  return [...connections].sort((left, right) => {
+    const rank = (statusRank[left.status] ?? 4) - (statusRank[right.status] ?? 4);
+    if (rank !== 0) return rank;
+    const updated = right.updatedAt.localeCompare(left.updatedAt);
+    return updated !== 0 ? updated : right.id.localeCompare(left.id);
+  })[0] ?? null;
+}
 function redirectToExactGitHubAuthorization(c, deps, sourceState, installationId) {
   const payload = readSignedState11(sourceState, deps.githubStateSecret);
   const clientId = deps.settings.githubClientId?.trim();
@@ -42764,7 +43321,7 @@ import {
 } from "@opengeni/contracts/github-repository-contracts";
 import {
   requireAccessGrant as requireAccessGrant17,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization8
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization9
 } from "@opengeni/core";
 import {
   getPersonalGitHubRepositorySelectionState as getPersonalGitHubRepositorySelectionState2,
@@ -42887,12 +43444,12 @@ async function listLivePersonalGitHubRepositoryBranches(deps, input, services =
     null,
     services.getSelectionState
   );
-  const [owner, repositoryName] = current.repository.fullName.split("/");
-  if (!owner || !repositoryName) {
+  const [owner2, repositoryName] = current.repository.fullName.split("/");
+  if (!owner2 || !repositoryName) {
     throw new PersonalGitHubRepositoryProviderError("invalid_provider_response");
   }
   const url = new URL(
-    `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repositoryName)}/branches`,
+    `/repos/${encodeURIComponent(owner2)}/${encodeURIComponent(repositoryName)}/branches`,
     PERSONAL_GITHUB_API_ORIGIN
   );
   url.searchParams.set("page", String(input.query.cursor));
@@ -42951,12 +43508,12 @@ async function verifyLivePersonalGitHubRepositories(deps, input) {
   const connection = await requirePersonalGitHubRepositoryConnection(deps, input);
   const verified = [];
   for (const selection of input.repositories) {
-    const [owner, repositoryName] = selection.fullName.split("/");
-    if (!owner || !repositoryName) {
+    const [owner2, repositoryName] = selection.fullName.split("/");
+    if (!owner2 || !repositoryName) {
       throw new PersonalGitHubRepositoryProviderError("invalid_provider_response");
     }
     const url = new URL(
-      `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repositoryName)}`,
+      `/repos/${encodeURIComponent(owner2)}/${encodeURIComponent(repositoryName)}`,
       PERSONAL_GITHUB_API_ORIGIN
     );
     const payload = await personalGitHubProviderJson(
@@ -43265,7 +43822,7 @@ function registerPersonalGitHubRoutes(app, deps) {
   });
   app.post("/v1/workspaces/:workspaceId/connections/github/oauth/start", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization8(c, deps, workspaceId, "connections:write");
+    const access = await requireAccessGrantAuthorization9(c, deps, workspaceId, "connections:write");
     assertPersonalConnectionOwnerPrincipal(access, "My GitHub account");
     const payload = PersonalGitHubOAuthStartRequest.parse(await c.req.json().catch(() => ({})));
     return c.json(
@@ -43279,7 +43836,7 @@ function registerPersonalGitHubRoutes(app, deps) {
   });
   app.post("/v1/workspaces/:workspaceId/connections/:connectionId/github/reconnect", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization8(c, deps, workspaceId, "connections:write");
+    const access = await requireAccessGrantAuthorization9(c, deps, workspaceId, "connections:write");
     assertPersonalConnectionOwnerPrincipal(access, "My GitHub account");
     const payload = PersonalGitHubOAuthStartRequest.omit({ connectionId: true }).parse(
       await c.req.json().catch(() => ({}))
@@ -43298,7 +43855,7 @@ function registerPersonalGitHubRoutes(app, deps) {
     async (c) => {
       const workspaceId = c.req.param("workspaceId");
       const connectionId = c.req.param("connectionId");
-      const access = await requireAccessGrantAuthorization8(
+      const access = await requireAccessGrantAuthorization9(
         c,
         deps,
         workspaceId,
@@ -43349,7 +43906,7 @@ function registerPersonalGitHubRoutes(app, deps) {
     async (c) => {
       const workspaceId = c.req.param("workspaceId");
       const connectionId = c.req.param("connectionId");
-      const access = await requireAccessGrantAuthorization8(
+      const access = await requireAccessGrantAuthorization9(
         c,
         deps,
         workspaceId,
@@ -43396,7 +43953,7 @@ function registerPersonalGitHubRoutes(app, deps) {
     async (c) => {
       const workspaceId = c.req.param("workspaceId");
       const connectionId = c.req.param("connectionId");
-      const access = await requireAccessGrantAuthorization8(
+      const access = await requireAccessGrantAuthorization9(
         c,
         deps,
         workspaceId,
@@ -43428,7 +43985,7 @@ function registerPersonalGitHubRoutes(app, deps) {
     async (c) => {
       const workspaceId = c.req.param("workspaceId");
       const connectionId = c.req.param("connectionId");
-      const access = await requireAccessGrantAuthorization8(
+      const access = await requireAccessGrantAuthorization9(
         c,
         deps,
         workspaceId,
@@ -43540,7 +44097,7 @@ function canonicalPersonalGitHubConnection(connections) {
 import {
   PERSONAL_GITHUB_API_ORIGIN as PERSONAL_GITHUB_API_ORIGIN2,
   PERSONAL_GITHUB_PROVIDER_DOMAIN as PERSONAL_GITHUB_PROVIDER_DOMAIN4,
-  PersonalGitHubConnectionMetadata as PersonalGitHubConnectionMetadata2,
+  PersonalGitHubConnectionMetadata as PersonalGitHubConnectionMetadata3,
   isPersonalGitHubConnection as isPersonalGitHubConnection4
 } from "@opengeni/contracts/personal-github";
 import {
@@ -43837,7 +44394,7 @@ async function assertCurrentConnectionAndSelection(deps, claims, repository) {
   if (!connection || connection.accountId !== claims.accountId || connection.workspaceId !== claims.originWorkspaceId || connection.subjectId !== claims.ownerSubjectId || connection.status !== "active" || connection.grantedScopes.length !== 1 || connection.grantedScopes[0] !== "repo" || !isPersonalGitHubConnection4(connection)) {
     throw new Error("personal GitHub connection changed");
   }
-  const metadata = PersonalGitHubConnectionMetadata2.parse(connection.metadata);
+  const metadata = PersonalGitHubConnectionMetadata3.parse(connection.metadata);
   if (metadata.credentialBindingId !== claims.credentialBindingId) {
     throw new Error("personal GitHub credential binding changed");
   }
@@ -44092,7 +44649,7 @@ import {
 import { HTTPException as HTTPException44 } from "hono/http-exception";
 
 // src/integrations/api-integrations.ts
-import { createHash as createHash15 } from "crypto";
+import { createHash as createHash14 } from "crypto";
 import {
   compileGraphqlRevision,
   compileOpenApiRevision,
@@ -44302,7 +44859,7 @@ function resolvedPreview(input) {
   };
 }
 function integrationInstallationIdentity(protocol, label, locator) {
-  const hash = createHash15("sha256").update(`${protocol}\0${locator}`).digest("hex").slice(0, 12);
+  const hash = createHash14("sha256").update(`${protocol}\0${locator}`).digest("hex").slice(0, 12);
   const slug = label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48) || "integration";
   return {
     sourceDerivedDefinitionId: `${slug}-${hash}`,
@@ -44668,7 +45225,7 @@ import {
 import {
   hasPermission as hasPermission17,
   requireAccessGrant as requireAccessGrant19,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization9
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization10
 } from "@opengeni/core";
 import {
   configureIntegrationFacet as configureIntegrationFacet2,
@@ -44713,7 +45270,7 @@ function registerIntegrationFacetRoutes(app, deps) {
     "/v1/workspaces/:workspaceId/integrations/:capabilityId/instances/:instanceKey/facets/:facetKey/source",
     async (c) => {
       const workspaceId = c.req.param("workspaceId");
-      const authorization = await requireAccessGrantAuthorization9(
+      const authorization = await requireAccessGrantAuthorization10(
         c,
         deps,
         workspaceId,
@@ -44966,7 +45523,7 @@ import {
   requireFreshAccessGrant,
   requirePermission as requirePermission3,
   requireSessionAuthorization as requireSessionAuthorization6,
-  workflowIdForSession
+  workflowIdForSession as workflowIdForSession2
 } from "@opengeni/core";
 import { publishDurableSessionEvents as publishDurableSessionEvents2 } from "@opengeni/events";
 import { HTTPException as HTTPException46 } from "hono/http-exception";
@@ -46334,7 +46891,7 @@ function registerInteractionResourceRoutes(app, deps) {
           workspaceId,
           sessionId: approvalTarget.sessionId,
           eventId: accepted.event.id,
-          workflowId: workflowIdForSession(approvalTarget.sessionId),
+          workflowId: workflowIdForSession2(approvalTarget.sessionId),
           workflowWakeRevision: accepted.workflowWakeRevision
         });
         const response = InteractionInterventionMutationResponse.parse({
@@ -48458,7 +49015,7 @@ function positiveInteger3(value) {
 }
 
 // src/routes/packs.ts
-import { createHash as createHash16 } from "crypto";
+import { createHash as createHash15 } from "crypto";
 import {
   EnablePackRequest,
   InstallPackRequest,
@@ -48644,7 +49201,7 @@ function registerPackRoutes(app, deps) {
       packVersion: pack.version,
       ...preview.variableSetId ? { variableSetId: preview.variableSetId } : {}
     };
-    const requestDigest = sha2563(
+    const requestDigest = sha2562(
       stableJson4({
         packId: pack.id,
         manifestDigest: preview.manifestDigest,
@@ -48823,7 +49380,7 @@ function registerPackRoutes(app, deps) {
     const grant = await requireAccessGrant24(c, deps, workspaceId, "capabilities:manage");
     const pack = await requirePack(db, workspaceId, c.req.param("packId"));
     const payload = UninstallPackRequest.parse(await c.req.json());
-    const requestDigest = sha2563(
+    const requestDigest = sha2562(
       stableJson4({
         packId: pack.id,
         expectedInstallationVersion: payload.expectedInstallationVersion
@@ -49067,8 +49624,8 @@ function packFailureCode(error) {
   if (error instanceof CapabilityComponentVersionConflictError) return "component_version_conflict";
   return "component_install_failed";
 }
-function sha2563(value) {
-  return createHash16("sha256").update(value).digest("hex");
+function sha2562(value) {
+  return createHash15("sha256").update(value).digest("hex");
 }
 async function requirePack(db, workspaceId, packId) {
   const pack = await resolveCapabilityPack(db, workspaceId, packId);
@@ -49112,7 +49669,7 @@ async function validateDocumentBaseIds(db, workspaceId, documentBaseIds) {
 }
 
 // src/routes/plugins.ts
-import { createHash as createHash17 } from "crypto";
+import { createHash as createHash16 } from "crypto";
 import {
   createPinnedIntegrationTransport as createPinnedIntegrationTransport2,
   fetchIntegrationSourceDocument as fetchIntegrationSourceDocument2
@@ -49165,10 +49722,10 @@ var githubMetadataMaxBytes = 4 * 1024 * 1024;
 var githubBlobResponseMaxBytes = 512 * 1024;
 function createGitHubSkillSourceClient(settings, requestJson = (path, maxBytes, label) => githubJson(settings, path, maxBytes, label)) {
   return {
-    resolveCommit: async (owner, repository, ref) => {
+    resolveCommit: async (owner2, repository, ref) => {
       const payload = recordValue(
         await requestJson(
-          `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repository)}/commits/${encodeURIComponent(ref)}`,
+          `/repos/${encodeURIComponent(owner2)}/${encodeURIComponent(repository)}/commits/${encodeURIComponent(ref)}`,
           githubMetadataMaxBytes,
           "GitHub Skill commit"
         ),
@@ -49178,10 +49735,10 @@ function createGitHubSkillSourceClient(settings, requestJson = (path, maxBytes,
       if (!sha) throw new Error("GitHub commit response omitted sha");
       return sha.toLowerCase();
     },
-    listTree: async (owner, repository, commit) => {
+    listTree: async (owner2, repository, commit) => {
       const payload = recordValue(
         await requestJson(
-          `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repository)}/git/trees/${encodeURIComponent(commit)}?recursive=1`,
+          `/repos/${encodeURIComponent(owner2)}/${encodeURIComponent(repository)}/git/trees/${encodeURIComponent(commit)}?recursive=1`,
           githubMetadataMaxBytes,
           "GitHub Skill tree"
         ),
@@ -49204,10 +49761,10 @@ function createGitHubSkillSourceClient(settings, requestJson = (path, maxBytes,
         return { path, type, mode, sha, size: typeof size === "number" ? size : null };
       });
     },
-    readBlob: async (owner, repository, sha) => {
+    readBlob: async (owner2, repository, sha) => {
       const payload = recordValue(
         await requestJson(
-          `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repository)}/git/blobs/${encodeURIComponent(sha)}`,
+          `/repos/${encodeURIComponent(owner2)}/${encodeURIComponent(repository)}/git/blobs/${encodeURIComponent(sha)}`,
           githubBlobResponseMaxBytes,
           "GitHub Skill file"
         ),
@@ -49333,7 +49890,7 @@ function registerPluginRoutes(app, deps, overrides = {}) {
         message: "A Plugin component changed after preview. Review the updated bill of materials."
       });
     }
-    const requestDigest = sha2564(
+    const requestDigest = sha2563(
       stableJson5({
         url: payload.url,
         expectedManifestDigest: payload.expectedManifestDigest,
@@ -49471,13 +50028,13 @@ async function resolvePluginPackage(input) {
       message: error instanceof Error ? error.message : "Plugin manifest is invalid"
     });
   }
-  const manifestDigest = sha2564(stableJson5(manifest));
+  const manifestDigest = sha2563(stableJson5(manifest));
   const components = [];
   for (const component of manifest.components) {
     if (component.kind === "skill") {
       const resolved = await resolveSkillImport(component.url, input.github);
       const capabilityId = portableSkillCapabilityId(resolved.preview);
-      const digest3 = sha2564(
+      const digest3 = sha2563(
         stableJson5({
           capabilityId,
           sourceCommit: resolved.preview.sourceCommit,
@@ -49627,7 +50184,7 @@ async function resolvePluginPackage(input) {
       continue;
     }
     const server = configuredMcpServer(input.deps.settings.mcpServers, component.serverId);
-    const digest2 = sha2564(stableJson5(safeMcpFacts(server)));
+    const digest2 = sha2563(stableJson5(safeMcpFacts(server)));
     components.push({
       preview: {
         key: component.key,
@@ -49776,7 +50333,7 @@ function safeMcpFacts(server) {
   };
 }
 function integrationDigest(resolved) {
-  return sha2564(
+  return sha2563(
     stableJson5({
       capabilityId: resolved.preview.capabilityId,
       revisionId: resolved.preview.revisionId,
@@ -49842,8 +50399,8 @@ function pluginFailureCode(error) {
   if (error instanceof HTTPException51) return `http_${error.status}`;
   return "component_install_failed";
 }
-function sha2564(value) {
-  return createHash17("sha256").update(value).digest("hex");
+function sha2563(value) {
+  return createHash16("sha256").update(value).digest("hex");
 }
 
 // src/routes/skills.ts
@@ -49873,7 +50430,7 @@ import {
   uninstallPortableSkill
 } from "@opengeni/db";
 import { loadSkillLibrarySkill, skillLibraryRepositoryUrl } from "@opengeni/runtime/skill-library";
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash17 } from "crypto";
 import { HTTPException as HTTPException52 } from "hono/http-exception";
 function registerSkillRoutes(app, deps, overrides = {}) {
   const github = overrides.github ?? createGitHubSkillSourceClient(deps.settings);
@@ -49908,7 +50465,7 @@ function registerSkillRoutes(app, deps, overrides = {}) {
         path: file.path,
         content: file.content,
         byteSize: bytes.byteLength,
-        contentSha256: createHash18("sha256").update(bytes).digest("hex")
+        contentSha256: createHash17("sha256").update(bytes).digest("hex")
       };
     });
     try {
@@ -50178,7 +50735,7 @@ import {
 import { HTTPException as HTTPException54 } from "hono/http-exception";
 import {
   requireAccessGrant as requireAccessGrant28,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization10,
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization11,
   requirePermission as requirePermission7
 } from "@opengeni/core";
 import {
@@ -50219,7 +50776,7 @@ async function parseRigRequest(c, schema, label) {
 function registerRigRoutes(app, deps) {
   const { db, workflowClient } = deps;
   async function requireRigMutation(c, workspaceId, permission) {
-    const authorization = await requireAccessGrantAuthorization10(c, deps, workspaceId, permission);
+    const authorization = await requireAccessGrantAuthorization11(c, deps, workspaceId, permission);
     const rigId = c.req.param("rigId");
     if (!rigId) {
       throw new HTTPException54(400, { message: "rig id is required" });
@@ -50297,7 +50854,7 @@ function registerRigRoutes(app, deps) {
   });
   app.post("/v1/workspaces/:workspaceId/rigs", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization10(c, deps, workspaceId);
+    const authorization = await requireAccessGrantAuthorization11(c, deps, workspaceId);
     const grant = authorization.grant;
     requirePermission7(grant, "rigs:manage");
     const payload = await parseRigRequest(c, CreateRigRequest, "Rig create request");
@@ -50323,7 +50880,7 @@ function registerRigRoutes(app, deps) {
   });
   app.patch("/v1/workspaces/:workspaceId/rigs/:rigId", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization10(c, deps, workspaceId);
+    const authorization = await requireAccessGrantAuthorization11(c, deps, workspaceId);
     const grant = authorization.grant;
     requirePermission7(grant, "rigs:manage");
     const rig = await requireRigForApi2(db, grant, c.req.param("rigId"));
@@ -50338,7 +50895,7 @@ function registerRigRoutes(app, deps) {
   });
   app.delete("/v1/workspaces/:workspaceId/rigs/:rigId", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization10(c, deps, workspaceId);
+    const authorization = await requireAccessGrantAuthorization11(c, deps, workspaceId);
     const grant = authorization.grant;
     requirePermission7(grant, "rigs:manage");
     const rig = await requireRigForApi2(db, grant, c.req.param("rigId"));
@@ -50439,6 +50996,7 @@ function registerRigRoutes(app, deps) {
 }
 
 // src/routes/scheduled-tasks.ts
+import { z as z14 } from "zod";
 import {
   CreateScheduledTaskRequest as CreateScheduledTaskRequest2,
   TriggerScheduledTaskRequest,
@@ -50504,7 +51062,24 @@ function registerScheduledTaskRoutes(app, deps) {
   app.get("/v1/workspaces/:workspaceId/scheduled-tasks", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant29(c, deps, workspaceId, "scheduled_tasks:run");
-    const tasks = await listScheduledTasks2(db, workspaceId, boundedLimit(c.req.query("limit")));
+    const sessionId = c.req.query("sessionId");
+    const offset = Number(c.req.query("offset") ?? 0);
+    if (!Number.isSafeInteger(offset) || offset < 0) {
+      throw new HTTPException55(400, { message: "invalid offset" });
+    }
+    if (sessionId !== void 0) {
+      if (!z14.string().uuid().safeParse(sessionId).success) {
+        throw new HTTPException55(400, { message: "invalid sessionId" });
+      }
+      await requireAccessGrant29(c, deps, workspaceId, "sessions:control");
+    }
+    const tasks = await listScheduledTasks2(
+      db,
+      workspaceId,
+      boundedLimit(c.req.query("limit")),
+      offset,
+      sessionId
+    );
     return c.json(tasks.map((task) => scheduledTaskForGrant2(task, grant)));
   });
   app.get("/v1/workspaces/:workspaceId/scheduled-tasks/:taskId", async (c) => {
@@ -50671,6 +51246,7 @@ function registerScheduledTaskRoutes(app, deps) {
 }
 
 // src/routes/sessions.ts
+import { scheduledSessionIds } from "@opengeni/db";
 import {
   AcknowledgeStreamRequest,
   ApplySessionGoalRevisionRequest,
@@ -50764,7 +51340,7 @@ import {
   getLiveEnrollmentConnection as getLiveEnrollmentConnection7,
   getRetainedProcess,
   getSandbox as getSandbox4,
-  getSession as getSession7,
+  getSession as getSession8,
   readActiveSandbox as readActiveSandbox3,
   deleteSessionTreeIfQuiescent,
   getSessionEvent,
@@ -51586,7 +52162,7 @@ function normalizeExpiry(value) {
 }
 
 // src/routes/sessions.ts
-import { z as z14, ZodError } from "zod";
+import { z as z15, ZodError } from "zod";
 import {
   NatsControlRpc as NatsControlRpc6,
   negotiateCapabilities,
@@ -51600,7 +52176,7 @@ import {
   getManagedAuthRequestActorEpoch as getManagedAuthRequestActorEpoch2,
   hasPermission as hasPermission19,
   requireAccessGrant as requireAccessGrant30,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization11,
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization12,
   requireFreshAccessGrant as requireFreshAccessGrant2,
   requirePermission as requirePermission8,
   requireSessionAuthorization as requireSessionAuthorization7,
@@ -51635,7 +52211,7 @@ import {
   updateManagedHumanSessionVisibility,
   updateSessionToolPolicy,
   updateSessionTitle as updateSessionTitle2,
-  workflowIdForSession as workflowIdForSession2,
+  workflowIdForSession as workflowIdForSession3,
   sessionWithEffectiveToolPolicy as sessionWithEffectiveToolPolicy2,
   workspaceSessionToolPolicyDefaultServerIds as workspaceSessionToolPolicyDefaultServerIds2,
   workspaceSessionToolPolicyServerIds as workspaceSessionToolPolicyServerIds2,
@@ -51899,6 +52475,7 @@ function registerSessionRoutes(app, deps) {
     db,
     settings,
     bus,
+    objectStorage,
     observability: deps.observability
   };
   const workspaceCaptureManifestCache = new WorkspaceCaptureManifestCache();
@@ -51986,7 +52563,7 @@ function registerSessionRoutes(app, deps) {
   const authorizeSessionHttp = async (c, next) => {
     const workspaceId = c.req.param("workspaceId") ?? "";
     const sessionId = c.req.param("sessionId") ?? "";
-    if (!z14.string().uuid().safeParse(sessionId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException57(404, { message: "session not found" });
     }
     const operation = sessionAuthorizationOperationForHttp(
@@ -52027,11 +52604,12 @@ function registerSessionRoutes(app, deps) {
     db,
     settings,
     bus,
+    objectStorage,
     ...deps.establishSandboxSession ? { establishSandboxSession: deps.establishSandboxSession } : {}
   };
   app.get("/v1/workspaces/:workspaceId/session-tenancy/capabilities", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -52041,7 +52619,7 @@ function registerSessionRoutes(app, deps) {
   });
   app.post("/v1/workspaces/:workspaceId/sessions", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -52082,7 +52660,7 @@ function registerSessionRoutes(app, deps) {
   });
   app.put("/v1/workspaces/:workspaceId/new-session-draft", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -52141,7 +52719,7 @@ function registerSessionRoutes(app, deps) {
   });
   app.get("/v1/workspaces/:workspaceId/sessions", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -52167,6 +52745,12 @@ function registerSessionRoutes(app, deps) {
         ...query.pinsOnly ? { pinsOnly: true } : {},
         ...query.archivedOnly ? { archivedOnly: true } : {},
         ...query.parentSessionId !== void 0 ? { parentSessionId: query.parentSessionId } : {},
+        ...query.channelId !== void 0 ? { channelId: query.channelId } : {},
+        ...query.createdBy ? { createdBy: query.createdBy } : {},
+        ...query.updatedFrom ? { updatedFrom: query.updatedFrom } : {},
+        ...query.updatedBefore ? { updatedBefore: query.updatedBefore } : {},
+        ...query.createdFrom ? { createdFrom: query.createdFrom } : {},
+        ...query.createdBefore ? { createdBefore: query.createdBefore } : {},
         ...authorizationScope ? { authorizationScope } : {},
         // A managed human's own personal workspace has no membership row, so
         // the list's removal fence must fall back to the organization-membership
@@ -52192,10 +52776,19 @@ function registerSessionRoutes(app, deps) {
       workspaceId,
       sessionIds: [...page.pinned, ...page.sessions].map((session) => session.id)
     });
+    const scheduleTargets = hasPermission19(grant.permissions, "scheduled_tasks:run") && hasPermission19(grant.permissions, "sessions:control") ? await scheduledSessionIds(
+      db,
+      workspaceId,
+      [...page.pinned, ...page.sessions].map((session) => session.id)
+    ) : /* @__PURE__ */ new Set();
     const decorate = (session) => {
       const activity = commandActivity.get(session.id);
       return sessionWithEffectiveToolPolicy2(
-        { ...session, ...activity ? { backgroundCommandActivity: activity } : {} },
+        {
+          ...session,
+          hasSchedules: scheduleTargets.has(session.id),
+          ...activity ? { backgroundCommandActivity: activity } : {}
+        },
         policy.workspaceServerIds,
         policy.workspaceDefaultServerIds
       );
@@ -52203,6 +52796,7 @@ function registerSessionRoutes(app, deps) {
     if (pageView) {
       return c.json({
         ...page,
+        ...query.hasPageFilters ? { filtersApplied: true } : {},
         pinned: page.pinned.map(decorate),
         sessions: page.sessions.map(decorate)
       });
@@ -52345,7 +52939,7 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:read");
     const sessionId = c.req.param("sessionId");
-    if (!z14.string().uuid().safeParse(sessionId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException57(404, { message: "session not found" });
     }
     const session = await getSessionForSubject(
@@ -52358,13 +52952,25 @@ function registerSessionRoutes(app, deps) {
     if (!session) {
       throw new HTTPException57(404, { message: "session not found" });
     }
-    return c.json(await withEffectivePolicy(deps, workspaceId, grant.subjectId, session));
+    const activity = await backgroundCommandActivityForSessions(db, {
+      accountId: grant.accountId,
+      workspaceId,
+      sessionIds: [sessionId]
+    });
+    const scheduleTargets = hasPermission19(grant.permissions, "scheduled_tasks:run") && hasPermission19(grant.permissions, "sessions:control") ? await scheduledSessionIds(db, workspaceId, [sessionId]) : /* @__PURE__ */ new Set();
+    return c.json(
+      await withEffectivePolicy(deps, workspaceId, grant.subjectId, {
+        ...session,
+        hasSchedules: scheduleTargets.has(sessionId),
+        ...activity.get(sessionId) ? { backgroundCommandActivity: activity.get(sessionId) } : {}
+      })
+    );
   });
   app.get("/v1/workspaces/:workspaceId/sessions/:sessionId/model-context", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:read");
     const sessionId = c.req.param("sessionId");
-    if (!z14.string().uuid().safeParse(sessionId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException57(404, { message: "session not found" });
     }
     const session = await getSessionForSubject(
@@ -52392,7 +52998,8 @@ function registerSessionRoutes(app, deps) {
     const commands = await listSessionBackgroundCommands(db, {
       accountId: grant.accountId,
       workspaceId,
-      sessionId
+      sessionId,
+      activeOnly: true
     });
     return c.json({ commands });
   });
@@ -52402,7 +53009,7 @@ function registerSessionRoutes(app, deps) {
       const workspaceId = c.req.param("workspaceId");
       const sessionId = c.req.param("sessionId");
       const commandId = c.req.param("commandId");
-      if (!z14.string().uuid().safeParse(commandId).success) {
+      if (!z15.string().uuid().safeParse(commandId).success) {
         throw new HTTPException57(404, { message: "background command not found" });
       }
       const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:control");
@@ -52422,7 +53029,7 @@ function registerSessionRoutes(app, deps) {
   app.put("/v1/workspaces/:workspaceId/sessions/:sessionId/visibility", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const sessionId = c.req.param("sessionId");
-    const authorization = await requireAccessGrantAuthorization11(c, deps, workspaceId);
+    const authorization = await requireAccessGrantAuthorization12(c, deps, workspaceId);
     const parsed = UpdateSessionVisibilityRequest.safeParse(await c.req.json().catch(() => null));
     if (!parsed.success) {
       throw new ApiHttpError(422, {
@@ -52450,7 +53057,7 @@ function registerSessionRoutes(app, deps) {
   app.post("/v1/workspaces/:workspaceId/sessions/:sessionId/forks", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const sessionId = c.req.param("sessionId");
-    const authorization = await requireAccessGrantAuthorization11(c, deps, workspaceId);
+    const authorization = await requireAccessGrantAuthorization12(c, deps, workspaceId);
     const parsed = ForkSessionRequest.safeParse(await c.req.json().catch(() => null));
     if (!parsed.success) {
       throw new ApiHttpError(422, {
@@ -52482,7 +53089,7 @@ function registerSessionRoutes(app, deps) {
         accountId,
         workspaceId,
         sessionId,
-        workflowId: workflowIdForSession2(sessionId),
+        workflowId: workflowIdForSession3(sessionId),
         wakeRevision: result.workflowWakeRevision
       });
     }
@@ -52491,7 +53098,7 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const sessionId = c.req.param("sessionId");
     const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:control");
-    if (!z14.string().uuid().safeParse(sessionId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException57(400, { message: "invalid session id" });
     }
     const parsed = BeginSessionRealtimeRequest.safeParse(await c.req.json().catch(() => null));
@@ -52526,7 +53133,7 @@ function registerSessionRoutes(app, deps) {
       const sessionId = c.req.param("sessionId");
       const realtimeId = c.req.param("realtimeId");
       const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:control");
-      if (!z14.string().uuid().safeParse(sessionId).success || !z14.string().uuid().safeParse(realtimeId).success) {
+      if (!z15.string().uuid().safeParse(sessionId).success || !z15.string().uuid().safeParse(realtimeId).success) {
         throw new HTTPException57(400, {
           message: "invalid realtime lifecycle id"
         });
@@ -52562,7 +53169,7 @@ function registerSessionRoutes(app, deps) {
     const sessionId = c.req.param("sessionId");
     const realtimeId = c.req.param("realtimeId");
     const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:control");
-    if (!z14.string().uuid().safeParse(sessionId).success || !z14.string().uuid().safeParse(realtimeId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success || !z15.string().uuid().safeParse(realtimeId).success) {
       throw new HTTPException57(400, {
         message: "invalid realtime lifecycle id"
       });
@@ -52596,7 +53203,7 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const sessionId = c.req.param("sessionId");
     const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:control");
-    if (!z14.string().uuid().safeParse(sessionId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException57(404, { message: "session not found" });
     }
     const parsed = CodexRealtimeWebrtcRequest.safeParse(await c.req.json().catch(() => null));
@@ -52775,7 +53382,7 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const sessionId = c.req.param("sessionId");
     const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:control");
-    if (!z14.string().uuid().safeParse(sessionId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException57(404, { message: "session not found" });
     }
     const parsed = GatewayRealtimeConnectRequest.safeParse(await c.req.json().catch(() => null));
@@ -52894,7 +53501,7 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const sessionId = c.req.param("sessionId");
     const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:control");
-    if (!z14.string().uuid().safeParse(sessionId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException57(404, { message: "session not found" });
     }
     const parsed = GatewayRealtimeConnectRequest.safeParse(await c.req.json().catch(() => null));
@@ -53017,7 +53624,7 @@ function registerSessionRoutes(app, deps) {
       const realtimeId = c.req.param("realtimeId");
       const connectionId = c.req.param("connectionId");
       const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:control");
-      if (!z14.string().uuid().safeParse(sessionId).success || !z14.string().uuid().safeParse(realtimeId).success || !z14.string().uuid().safeParse(connectionId).success) {
+      if (!z15.string().uuid().safeParse(sessionId).success || !z15.string().uuid().safeParse(realtimeId).success || !z15.string().uuid().safeParse(connectionId).success) {
         throw new HTTPException57(400, {
           message: "invalid realtime connection id"
         });
@@ -53059,7 +53666,7 @@ function registerSessionRoutes(app, deps) {
       const sessionId = c.req.param("sessionId");
       const realtimeId = c.req.param("realtimeId");
       const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:control");
-      if (!z14.string().uuid().safeParse(sessionId).success || !z14.string().uuid().safeParse(realtimeId).success) {
+      if (!z15.string().uuid().safeParse(sessionId).success || !z15.string().uuid().safeParse(realtimeId).success) {
         throw new HTTPException57(400, { message: "invalid realtime ledger id" });
       }
       const parsed = SyncSessionRealtimeLedgerRequest.safeParse(
@@ -53093,7 +53700,7 @@ function registerSessionRoutes(app, deps) {
   );
   app.put("/v1/workspaces/:workspaceId/sessions/:sessionId/pin", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -53101,7 +53708,7 @@ function registerSessionRoutes(app, deps) {
     );
     const grant = authorization.grant;
     const sessionId = c.req.param("sessionId");
-    if (!z14.string().uuid().safeParse(sessionId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException57(404, { message: "session not found" });
     }
     const parsed = UpdateSessionPinRequest.safeParse(await c.req.json().catch(() => null));
@@ -53146,7 +53753,7 @@ function registerSessionRoutes(app, deps) {
   });
   app.put("/v1/workspaces/:workspaceId/sessions/:sessionId/attention", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -53154,7 +53761,7 @@ function registerSessionRoutes(app, deps) {
     );
     const grant = authorization.grant;
     const sessionId = c.req.param("sessionId");
-    if (!z14.string().uuid().safeParse(sessionId).success) {
+    if (!z15.string().uuid().safeParse(sessionId).success) {
       throw new HTTPException57(404, { message: "session not found" });
     }
     const parsed = UpdateSessionAttentionRequest.safeParse(await c.req.json().catch(() => null));
@@ -53196,7 +53803,7 @@ function registerSessionRoutes(app, deps) {
   });
   app.put("/v1/workspaces/:workspaceId/sessions/:sessionId/archive", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -53242,17 +53849,35 @@ function registerSessionRoutes(app, deps) {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:read");
     const lineage = await readSessionLineage(deps, grant, c.req.param("sessionId"));
+    const sessionIds = [
+      c.req.param("sessionId"),
+      ...lineage.ancestors.map((session) => session.id)
+    ];
+    const collect = (nodes) => {
+      for (const node of nodes) {
+        sessionIds.push(node.session.id);
+        collect(node.children);
+      }
+    };
+    collect(lineage.children);
+    const targets = hasPermission19(grant.permissions, "scheduled_tasks:run") && hasPermission19(grant.permissions, "sessions:control") ? await scheduledSessionIds(db, workspaceId, sessionIds) : /* @__PURE__ */ new Set();
+    const decorateNodes = (nodes) => nodes.map((node) => ({
+      ...node,
+      session: { ...node.session, hasSchedules: targets.has(node.session.id) },
+      children: decorateNodes(node.children)
+    }));
     const policy = await loadEffectivePolicyContext(deps, workspaceId, grant.subjectId);
     return c.json({
       ...lineage,
+      sessionHasSchedules: targets.has(c.req.param("sessionId")),
       ancestors: lineage.ancestors.map(
         (session) => sessionWithEffectiveToolPolicy2(
-          session,
+          { ...session, hasSchedules: targets.has(session.id) },
           policy.workspaceServerIds,
           policy.workspaceDefaultServerIds
         )
       ),
-      children: mapLineageNodes(lineage.children, policy)
+      children: decorateNodes(mapLineageNodes(lineage.children, policy))
     });
   });
   app.post("/v1/workspaces/:workspaceId/sessions/:sessionId/codex-account", async (c) => {
@@ -53620,7 +54245,7 @@ function registerSessionRoutes(app, deps) {
             accountId: grant.accountId,
             workspaceId,
             sessionId,
-            workflowId: workflowIdForSession2(sessionId),
+            workflowId: workflowIdForSession3(sessionId),
             wakeRevision: workflowWakeRevision
           });
         }
@@ -53703,7 +54328,7 @@ function registerSessionRoutes(app, deps) {
             accountId: grant.accountId,
             workspaceId,
             sessionId,
-            workflowId: workflowIdForSession2(sessionId),
+            workflowId: workflowIdForSession3(sessionId),
             wakeRevision: workflowWakeRevision
           });
         }
@@ -53751,7 +54376,7 @@ function registerSessionRoutes(app, deps) {
             accountId: grant.accountId,
             workspaceId,
             sessionId,
-            workflowId: workflowIdForSession2(sessionId),
+            workflowId: workflowIdForSession3(sessionId),
             wakeRevision: workflowWakeRevision2
           });
         }
@@ -53811,7 +54436,7 @@ function registerSessionRoutes(app, deps) {
           accountId: grant.accountId,
           workspaceId,
           sessionId,
-          workflowId: workflowIdForSession2(sessionId),
+          workflowId: workflowIdForSession3(sessionId),
           wakeRevision: workflowWakeRevision
         });
       }
@@ -54275,7 +54900,7 @@ function registerSessionRoutes(app, deps) {
   });
   app.post("/v1/workspaces/:workspaceId/sessions/:sessionId/steer", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -54312,7 +54937,7 @@ function registerSessionRoutes(app, deps) {
   });
   app.post("/v1/workspaces/:workspaceId/sessions/:sessionId/composer-draft/submit", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -54334,7 +54959,7 @@ function registerSessionRoutes(app, deps) {
   });
   app.post("/v1/workspaces/:workspaceId/sessions/:sessionId/events", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization11(
+    const authorization = await requireAccessGrantAuthorization12(
       c,
       deps,
       workspaceId,
@@ -54395,7 +55020,7 @@ function registerSessionRoutes(app, deps) {
         });
       }
       await publishDurableSessionEvents3(bus, workspaceId, sessionId, accepted.events);
-      const workflowId = workflowIdForSession2(sessionId);
+      const workflowId = workflowIdForSession3(sessionId);
       await workflowClient.signalApprovalDecision({
         accountId: grant.accountId,
         workspaceId,
@@ -54439,7 +55064,7 @@ function registerSessionRoutes(app, deps) {
           workspaceId,
           sessionId,
           eventId: accepted.events[0]?.id ?? event.payload.requestId,
-          workflowId: workflowIdForSession2(sessionId),
+          workflowId: workflowIdForSession3(sessionId),
           workflowWakeRevision: accepted.workflowWakeRevision
         });
       }
@@ -54504,7 +55129,7 @@ function registerSessionRoutes(app, deps) {
     const grant = await requireAccessGrant30(c, deps, workspaceId, "sessions:read");
     assertOwnershipEnabled();
     const sessionId = c.req.param("sessionId");
-    const session = await getSession7(db, workspaceId, sessionId);
+    const session = await getSession8(db, workspaceId, sessionId);
     if (!session) {
       throw new HTTPException57(404, { message: "session not found" });
     }
@@ -54637,7 +55262,7 @@ function registerSessionRoutes(app, deps) {
       const grant = await requireAccessGrant30(c, deps, workspaceId, "stream:acknowledge");
       assertOwnershipEnabled();
       const sessionId = c.req.param("sessionId");
-      const session = await getSession7(db, workspaceId, sessionId);
+      const session = await getSession8(db, workspaceId, sessionId);
       if (!session) {
         throw new HTTPException57(404, { message: "session not found" });
       }
@@ -54666,7 +55291,7 @@ function registerSessionRoutes(app, deps) {
     const grant = await requireAccessGrant30(c, deps, workspaceId);
     assertOwnershipEnabled();
     const sessionId = c.req.param("sessionId");
-    const session = await getSession7(db, workspaceId, sessionId);
+    const session = await getSession8(db, workspaceId, sessionId);
     if (!session) {
       throw new HTTPException57(404, { message: "session not found" });
     }
@@ -54821,7 +55446,7 @@ function registerSessionRoutes(app, deps) {
       requireViewerLifecyclePermission(grant);
       assertOwnershipEnabled();
       const sessionId = c.req.param("sessionId");
-      const session = await getSession7(db, workspaceId, sessionId);
+      const session = await getSession8(db, workspaceId, sessionId);
       if (!session) {
         throw new HTTPException57(404, { message: "session not found" });
       }
@@ -54850,7 +55475,7 @@ function registerSessionRoutes(app, deps) {
     requireViewerLifecyclePermission(grant);
     assertOwnershipEnabled();
     const sessionId = c.req.param("sessionId");
-    const session = await getSession7(db, workspaceId, sessionId);
+    const session = await getSession8(db, workspaceId, sessionId);
     if (!session) {
       throw new HTTPException57(404, { message: "session not found" });
     }
@@ -54872,7 +55497,7 @@ function registerSessionRoutes(app, deps) {
       const grant = await requireAccessGrant30(c, deps, workspaceId, "stream:view");
       assertOwnershipEnabled();
       const sessionId = c.req.param("sessionId");
-      const session = await getSession7(db, workspaceId, sessionId);
+      const session = await getSession8(db, workspaceId, sessionId);
       if (!session) {
         throw new HTTPException57(404, { message: "session not found" });
       }
@@ -54894,7 +55519,7 @@ function registerSessionRoutes(app, deps) {
     const grant = await requireAccessGrant30(c, deps, workspaceId, permission);
     assertOwnershipEnabled();
     const sessionId = c.req.param("sessionId") ?? "";
-    const session = await getSession7(db, workspaceId, sessionId);
+    const session = await getSession8(db, workspaceId, sessionId);
     if (!session) {
       throw new HTTPException57(404, { message: "session not found" });
     }
@@ -55093,7 +55718,7 @@ function registerSessionRoutes(app, deps) {
         message: "path query parameter is required"
       });
     }
-    const session = await getSession7(db, workspaceId, sessionId);
+    const session = await getSession8(db, workspaceId, sessionId);
     if (!session) {
       throw new HTTPException57(404, { message: "session not found" });
     }
@@ -55608,7 +56233,7 @@ function eventEnumList(raw, schema, name) {
 }
 function sessionListQuery(query, allowCursor = true) {
   const parentSessionId = query.parentSessionId;
-  if (parentSessionId !== void 0 && parentSessionId !== "null" && !z14.string().uuid().safeParse(parentSessionId).success) {
+  if (parentSessionId !== void 0 && parentSessionId !== "null" && !z15.string().uuid().safeParse(parentSessionId).success) {
     throw new HTTPException57(400, {
       message: 'parentSessionId must be a session id or the literal "null"'
     });
@@ -55634,12 +56259,58 @@ function sessionListQuery(query, allowCursor = true) {
     throw new HTTPException57(400, { message: 'archivedOnly must be the literal "true"' });
   }
   const archivedOnly = query.archivedOnly === "true";
+  const channelId = query.channelId;
+  if (channelId !== void 0 && channelId !== "null" && !z15.string().uuid().safeParse(channelId).success) {
+    throw new HTTPException57(400, {
+      message: 'channelId must be a channel id or the literal "null"'
+    });
+  }
+  const createdByKind = query.createdByKind;
+  const createdBySubjectId = query.createdBySubjectId;
+  if (createdByKind === void 0 !== (createdBySubjectId === void 0)) {
+    throw new HTTPException57(400, {
+      message: "createdByKind and createdBySubjectId must be supplied together"
+    });
+  }
+  if (createdByKind !== void 0 && createdByKind !== "subject" && createdByKind !== "service") {
+    throw new HTTPException57(400, {
+      message: 'createdByKind must be "subject" or "service"'
+    });
+  }
+  if (createdBySubjectId !== void 0 && (createdBySubjectId.trim().length < 1 || createdBySubjectId.length > 1024)) {
+    throw new HTTPException57(400, {
+      message: "createdBySubjectId must be between 1 and 1024 characters"
+    });
+  }
+  const parseDateBound = (name) => {
+    const raw = query[name];
+    if (raw === void 0) return void 0;
+    const parsed = z15.string().datetime({ offset: true }).safeParse(raw);
+    if (!parsed.success) {
+      throw new HTTPException57(400, { message: `${name} must be an ISO-8601 timestamp` });
+    }
+    if (/\.\d{4,}/.test(parsed.data)) {
+      throw new HTTPException57(400, { message: `${name} supports at most millisecond precision` });
+    }
+    return new Date(parsed.data);
+  };
+  const updatedFrom = parseDateBound("updatedFrom");
+  const updatedBefore = parseDateBound("updatedBefore");
+  const createdFrom = parseDateBound("createdFrom");
+  const createdBefore = parseDateBound("createdBefore");
+  if (updatedFrom && updatedBefore && updatedFrom >= updatedBefore) {
+    throw new HTTPException57(400, { message: "updatedFrom must be earlier than updatedBefore" });
+  }
+  if (createdFrom && createdBefore && createdFrom >= createdBefore) {
+    throw new HTTPException57(400, { message: "createdFrom must be earlier than createdBefore" });
+  }
+  const hasPageFilters = channelId !== void 0 || createdByKind !== void 0 || updatedFrom !== void 0 || updatedBefore !== void 0 || createdFrom !== void 0 || createdBefore !== void 0;
   if (pinsOnly && !allowCursor) {
     throw new HTTPException57(400, { message: 'pinsOnly requires view="page"' });
   }
-  if (pinsOnly && (rawCursor || parentSessionId !== void 0 || search)) {
+  if (pinsOnly && (rawCursor || parentSessionId !== void 0 || search || hasPageFilters)) {
     throw new HTTPException57(400, {
-      message: "pinsOnly cannot be combined with cursor, parentSessionId, or search"
+      message: "pinsOnly cannot be combined with cursor, parentSessionId, search, or filters"
     });
   }
   if (pinsOnly && archivedOnly) {
@@ -55651,7 +56322,14 @@ function sessionListQuery(query, allowCursor = true) {
     cursor,
     search: search || void 0,
     pinsOnly,
-    archivedOnly
+    archivedOnly,
+    channelId: channelId === void 0 ? void 0 : channelId === "null" ? null : channelId,
+    createdBy: createdByKind && createdBySubjectId ? { kind: createdByKind, subjectId: createdBySubjectId } : void 0,
+    updatedFrom,
+    updatedBefore,
+    createdFrom,
+    createdBefore,
+    hasPageFilters
   };
 }
 function encodeAgentTopologyCursor(value) {
@@ -55665,18 +56343,18 @@ function decodeAgentTopologyCursor(value) {
   }
   try {
     const decoded2 = JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
-    const legacy = z14.object({
-      v: z14.literal(1),
-      parentSessionId: z14.string().uuid().nullable(),
-      search: z14.string().max(WORK_DISCOVERY_QUERY_MAX_CHARS2).nullable(),
-      cursor: z14.object({
-        orderBy: z14.literal("updatedAt"),
-        sortRevision: z14.string().max(64),
-        sortAt: z14.string().max(64),
-        id: z14.string().uuid(),
-        snapshotAt: z14.string().max(64),
-        snapshotRevision: z14.string().max(64),
-        updatedAfter: z14.null()
+    const legacy = z15.object({
+      v: z15.literal(1),
+      parentSessionId: z15.string().uuid().nullable(),
+      search: z15.string().max(WORK_DISCOVERY_QUERY_MAX_CHARS2).nullable(),
+      cursor: z15.object({
+        orderBy: z15.literal("updatedAt"),
+        sortRevision: z15.string().max(64),
+        sortAt: z15.string().max(64),
+        id: z15.string().uuid(),
+        snapshotAt: z15.string().max(64),
+        snapshotRevision: z15.string().max(64),
+        updatedAfter: z15.null()
       })
     }).safeParse(decoded2);
     if (legacy.success) {
@@ -55700,13 +56378,13 @@ function decodeAgentTopologyCursor(value) {
         claimLimit: null
       };
     }
-    const parsed = z14.object({
-      v: z14.literal(2),
-      parentSessionId: z14.union([z14.string().uuid(), z14.literal("all"), z14.null()]),
-      rootSessionId: z14.string().uuid().nullable(),
-      query: z14.string().max(WORK_DISCOVERY_QUERY_MAX_CHARS2).nullable(),
-      statuses: z14.array(
-        z14.enum([
+    const parsed = z15.object({
+      v: z15.literal(2),
+      parentSessionId: z15.union([z15.string().uuid(), z15.literal("all"), z15.null()]),
+      rootSessionId: z15.string().uuid().nullable(),
+      query: z15.string().max(WORK_DISCOVERY_QUERY_MAX_CHARS2).nullable(),
+      statuses: z15.array(
+        z15.enum([
           "queued",
           "running",
           "idle",
@@ -55717,24 +56395,24 @@ function decodeAgentTopologyCursor(value) {
           "cancelled"
         ])
       ).max(8),
-      activeOnly: z14.boolean(),
-      recentHours: z14.number().int().positive().max(WORK_DISCOVERY_RECENT_HOURS_MAX2).nullable(),
-      subject: z14.object({
-        namespace: z14.string().min(1).max(WORK_CLAIM_NAMESPACE_MAX_BYTES2),
+      activeOnly: z15.boolean(),
+      recentHours: z15.number().int().positive().max(WORK_DISCOVERY_RECENT_HOURS_MAX2).nullable(),
+      subject: z15.object({
+        namespace: z15.string().min(1).max(WORK_CLAIM_NAMESPACE_MAX_BYTES2),
         type: WorkClaimSubjectType2,
-        canonicalKey: z14.string().min(1).max(WORK_CLAIM_CANONICAL_KEY_MAX_BYTES2)
+        canonicalKey: z15.string().min(1).max(WORK_CLAIM_CANONICAL_KEY_MAX_BYTES2)
       }).strict().nullable(),
-      claimLimit: z14.number().int().positive().max(WORK_CLAIM_DISCOVERY_LIMIT2).nullable(),
-      cursor: z14.object({
-        orderBy: z14.enum(["updatedAt", "relevance"]),
-        sortRank: z14.number().int().nonnegative().nullable(),
-        sortRevision: z14.string().max(64),
-        sortAt: z14.string().max(64),
-        id: z14.string().uuid(),
-        snapshotAt: z14.string().max(64),
-        snapshotRevision: z14.string().max(64),
-        updatedAfter: z14.null(),
-        filterHash: z14.string().regex(/^[0-9a-f]{64}$/).nullable()
+      claimLimit: z15.number().int().positive().max(WORK_CLAIM_DISCOVERY_LIMIT2).nullable(),
+      cursor: z15.object({
+        orderBy: z15.enum(["updatedAt", "relevance"]),
+        sortRank: z15.number().int().nonnegative().nullable(),
+        sortRevision: z15.string().max(64),
+        sortAt: z15.string().max(64),
+        id: z15.string().uuid(),
+        snapshotAt: z15.string().max(64),
+        snapshotRevision: z15.string().max(64),
+        updatedAfter: z15.null(),
+        filterHash: z15.string().regex(/^[0-9a-f]{64}$/).nullable()
       })
     }).parse(decoded2);
     if (!/^(?:0|[1-9]\d*)$/.test(parsed.cursor.sortRevision) || !/^(?:0|[1-9]\d*)$/.test(parsed.cursor.snapshotRevision) || BigInt(parsed.cursor.sortRevision) > 9223372036854775807n || BigInt(parsed.cursor.snapshotRevision) > 9223372036854775807n || Number.isNaN(Date.parse(parsed.cursor.sortAt)) || Number.isNaN(Date.parse(parsed.cursor.snapshotAt))) {
@@ -55759,13 +56437,13 @@ function agentTopologyQuery(query) {
     });
   }
   const rawParent = query.parentSessionId;
-  if (rawParent !== void 0 && rawParent !== "null" && !z14.string().uuid().safeParse(rawParent).success) {
+  if (rawParent !== void 0 && rawParent !== "null" && !z15.string().uuid().safeParse(rawParent).success) {
     throw new HTTPException57(400, {
       message: 'parentSessionId must be a session id or the literal "null"'
     });
   }
   const rootSessionId = query.rootSessionId?.trim();
-  if (rootSessionId && !z14.string().uuid().safeParse(rootSessionId).success) {
+  if (rootSessionId && !z15.string().uuid().safeParse(rootSessionId).success) {
     throw new HTTPException57(400, { message: "rootSessionId must be a session id" });
   }
   const normalizeSearchQuery = (value) => {
@@ -55794,8 +56472,8 @@ function agentTopologyQuery(query) {
       query.statuses.split(",").map((status) => status.trim()).filter(Boolean)
     )
   ].sort() : [];
-  const parsedStatuses = z14.array(
-    z14.enum([
+  const parsedStatuses = z15.array(
+    z15.enum([
       "queued",
       "running",
       "idle",
@@ -55838,7 +56516,7 @@ function agentTopologyQuery(query) {
     throw new HTTPException57(400, { message: "query cannot be combined with an exact subject" });
   }
   const relevanceRequested = Boolean(searchQuery || subject);
-  const parentSessionId = rawParent === void 0 ? relevanceRequested ? void 0 : null : rawParent === "null" ? null : rawParent;
+  const parentSessionId = rawParent === void 0 ? relevanceRequested || Boolean(rootSessionId) ? void 0 : null : rawParent === "null" ? null : rawParent;
   const claimLimit = query.claimLimit === void 0 ? void 0 : Number(query.claimLimit);
   if (claimLimit !== void 0 && (!Number.isSafeInteger(claimLimit) || claimLimit < 1 || claimLimit > WORK_CLAIM_DISCOVERY_LIMIT2)) {
     throw new HTTPException57(400, {
@@ -56062,8 +56740,8 @@ import {
   updateSocialConnectionCredential as updateSocialConnectionCredential2
 } from "@opengeni/db";
 import { HTTPException as HTTPException58 } from "hono/http-exception";
-import { z as z15 } from "zod";
-import { requireAccessGrant as requireAccessGrant31, requireAccessGrantAuthorization as requireAccessGrantAuthorization12 } from "@opengeni/core";
+import { z as z16 } from "zod";
+import { requireAccessGrant as requireAccessGrant31, requireAccessGrantAuthorization as requireAccessGrantAuthorization13 } from "@opengeni/core";
 function registerSocialRoutes(app, deps) {
   const { db, settings, observability } = deps;
   app.get("/v1/workspaces/:workspaceId/social/connections", async (c) => {
@@ -56133,7 +56811,7 @@ function registerSocialRoutes(app, deps) {
       });
     }
     const payload = parsed.data;
-    const access = await requireAccessGrantAuthorization12(
+    const access = await requireAccessGrantAuthorization13(
       c,
       deps,
       workspaceId,
@@ -56227,7 +56905,7 @@ function parseConnectionIds(raw) {
     return void 0;
   }
   const values = raw.split(",").map((value) => value.trim()).filter(Boolean);
-  const parsed = z15.array(z15.string().uuid()).safeParse(values);
+  const parsed = z16.array(z16.string().uuid()).safeParse(values);
   if (!parsed.success) {
     throw new HTTPException58(422, {
       message: "connectionIds must be a comma-separated list of UUIDs"
@@ -56248,7 +56926,7 @@ function socialHttpException(error) {
 }
 
 // src/routes/workspaces.ts
-import { createHash as createHash19 } from "crypto";
+import { createHash as createHash18 } from "crypto";
 import {
   AddWorkspaceMemberRequest,
   CreateWorkspaceRequest,
@@ -56511,7 +57189,7 @@ function projectWorkspaceOpenRouterCustomModel(model) {
   });
 }
 function workspaceCustomModelRequestHash(value) {
-  return createHash19("sha256").update(stableJson6(value), "utf8").digest("hex");
+  return createHash18("sha256").update(stableJson6(value), "utf8").digest("hex");
 }
 function workspaceMembersResponse(members) {
   return ListWorkspaceMembersResponse.parse({
@@ -57430,8 +58108,8 @@ import {
   WorkspaceInstructionPolicyOperationReuseError
 } from "@opengeni/db";
 import { HTTPException as HTTPException61 } from "hono/http-exception";
-import { z as z16 } from "zod";
-var WorkspaceInstructionPolicyRevisionId = z16.string().uuid();
+import { z as z17 } from "zod";
+var WorkspaceInstructionPolicyRevisionId = z17.string().uuid();
 async function parseBody(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) {
@@ -57763,7 +58441,7 @@ import {
   WorkspaceLearningPolicyOperationReuseError
 } from "@opengeni/db";
 import { HTTPException as HTTPException62 } from "hono/http-exception";
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 async function parseBody2(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) {
@@ -57859,7 +58537,7 @@ function registerWorkspaceLearningRoutes(app, deps) {
   });
   app.post(`${base}/revisions/:revisionId/activate`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const revisionId2 = z17.string().uuid().safeParse(context.req.param("revisionId"));
+    const revisionId2 = z18.string().uuid().safeParse(context.req.param("revisionId"));
     if (!revisionId2.success) throw new HTTPException62(422, { message: "Invalid revision id" });
     const grant = await requireAccessGrant34(context, deps, workspaceId, "workspace:admin");
     const request = await parseBody2(context, ActivateWorkspaceLearningPolicyRevisionRequest);
@@ -57909,7 +58587,7 @@ function registerWorkspaceLearningRoutes(app, deps) {
   });
   app.post(`${base}/activations/:activationReceiptId/undo`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const activationReceiptId = z17.string().uuid().safeParse(context.req.param("activationReceiptId"));
+    const activationReceiptId = z18.string().uuid().safeParse(context.req.param("activationReceiptId"));
     if (!activationReceiptId.success) {
       throw new HTTPException62(422, { message: "Invalid activation receipt id" });
     }
@@ -57952,7 +58630,7 @@ import {
 } from "@opengeni/contracts";
 import {
   requireAccessGrant as requireAccessGrant35,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization13
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization14
 } from "@opengeni/core";
 import {
   activateCompanyProfileRevision,
@@ -57970,8 +58648,8 @@ import {
   updateCompanyProfileAgentPolicy
 } from "@opengeni/db";
 import { HTTPException as HTTPException63 } from "hono/http-exception";
-import { z as z18 } from "zod";
-var RevisionId = z18.string().uuid();
+import { z as z19 } from "zod";
+var RevisionId = z19.string().uuid();
 async function parseBody3(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) throw new HTTPException63(422, { message: "Invalid company-profile request" });
@@ -58032,7 +58710,7 @@ function registerCompanyProfileRoutes(app, deps) {
   const base = "/v1/workspaces/:workspaceId/company-profile";
   app.get(`${base}/agent-policy`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization13(
+    const access = await requireAccessGrantAuthorization14(
       context,
       deps,
       workspaceId,
@@ -58055,7 +58733,7 @@ function registerCompanyProfileRoutes(app, deps) {
   });
   app.patch(`${base}/agent-policy`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization13(
+    const access = await requireAccessGrantAuthorization14(
       context,
       deps,
       workspaceId,
@@ -58099,7 +58777,7 @@ function registerCompanyProfileRoutes(app, deps) {
   });
   app.put(base, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization13(
+    const access = await requireAccessGrantAuthorization14(
       context,
       deps,
       workspaceId,
@@ -58151,7 +58829,7 @@ function registerCompanyProfileRoutes(app, deps) {
   });
   app.post(`${base}/rollback`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization13(
+    const access = await requireAccessGrantAuthorization14(
       context,
       deps,
       workspaceId,
@@ -58198,7 +58876,7 @@ function registerCompanyProfileRoutes(app, deps) {
   });
   app.post(`${base}/revisions/:revisionId/activate`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization13(
+    const access = await requireAccessGrantAuthorization14(
       context,
       deps,
       workspaceId,
@@ -58229,7 +58907,7 @@ function registerCompanyProfileRoutes(app, deps) {
 }
 
 // src/routes/company-brain.ts
-import { createHash as createHash21 } from "crypto";
+import { createHash as createHash20 } from "crypto";
 import {
   COMPANY_BRAIN_INSPECTOR_CURSOR_MAX_CHARS,
   COMPANY_BRAIN_INSPECTOR_DEFAULT_LIMIT,
@@ -58264,7 +58942,7 @@ import {
   searchEffectiveKnowledge as searchEffectiveKnowledge2
 } from "@opengeni/documents";
 import { HTTPException as HTTPException64 } from "hono/http-exception";
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 
 // src/company-brain-okf.ts
 import {
@@ -58506,7 +59184,7 @@ function serializeCompanyBrainOkf(value) {
 }
 
 // src/workspace-state-projection.ts
-import { createHash as createHash20 } from "crypto";
+import { createHash as createHash19 } from "crypto";
 import {
   KnowledgeMemoryKind,
   KnowledgeMemoryStatus,
@@ -58520,15 +59198,15 @@ import {
   WorkspaceStateResponse
 } from "@opengeni/contracts";
 function hashIdentities(values) {
-  return createHash20("sha256").update(values.join("\n"), "utf8").digest("hex");
+  return createHash19("sha256").update(values.join("\n"), "utf8").digest("hex");
 }
 function policyTargetKey(value) {
   return `${value.kind}:${value.scope}:${value.roleKey ?? ""}`;
 }
 function policyTargetKeysForRole(policyRole) {
-  const keys = /* @__PURE__ */ new Set(["charter:global:", "policy:global:"]);
-  if (policyRole !== null) keys.add(`policy:role:${policyRole}`);
-  return keys;
+  const keys2 = /* @__PURE__ */ new Set(["charter:global:", "policy:global:"]);
+  if (policyRole !== null) keys2.add(`policy:role:${policyRole}`);
+  return keys2;
 }
 function policyIdentity(value) {
   return `${policyTargetKey(value)}:${value.revisionId}:${value.contentHash}:${value.activationVersion}`;
@@ -58855,15 +59533,15 @@ function projectWorkspaceState(input) {
 var BASE_LIMIT = 24;
 var TOPIC_LIMIT = 24;
 var TOPIC_MAX_CHARS = 96;
-var inspectorQuery = z19.object({
-  attemptId: z19.string().uuid().optional(),
-  cursor: z19.string().min(1).max(COMPANY_BRAIN_INSPECTOR_CURSOR_MAX_CHARS).optional(),
-  limit: z19.coerce.number().int().positive().max(COMPANY_BRAIN_INSPECTOR_MAX_LIMIT).default(COMPANY_BRAIN_INSPECTOR_DEFAULT_LIMIT)
+var inspectorQuery = z20.object({
+  attemptId: z20.string().uuid().optional(),
+  cursor: z20.string().min(1).max(COMPANY_BRAIN_INSPECTOR_CURSOR_MAX_CHARS).optional(),
+  limit: z20.coerce.number().int().positive().max(COMPANY_BRAIN_INSPECTOR_MAX_LIMIT).default(COMPANY_BRAIN_INSPECTOR_DEFAULT_LIMIT)
 }).strict().refine((value) => !(value.attemptId && value.cursor), {
   message: "attemptId cannot be combined with cursor"
 });
 function receiptCursorScope(workspaceId, subjectId) {
-  return createHash21("sha256").update("opengeni:company-brain-context-receipts:v1\0").update(workspaceId).update("\0").update(subjectId).digest("hex");
+  return createHash20("sha256").update("opengeni:company-brain-context-receipts:v1\0").update(workspaceId).update("\0").update(subjectId).digest("hex");
 }
 function encodeReceiptCursor(workspaceId, subjectId, cursor) {
   return Buffer.from(
@@ -58875,11 +59553,11 @@ function decodeReceiptCursor(value, workspaceId, subjectId) {
   try {
     const bytes = Buffer.from(value, "base64url");
     if (bytes.toString("base64url") !== value) throw new Error("encoding");
-    const decoded2 = z19.object({
-      v: z19.literal(1),
-      s: z19.string().regex(/^[0-9a-f]{64}$/u),
-      createdAt: z19.string().datetime(),
-      id: z19.string().uuid()
+    const decoded2 = z20.object({
+      v: z20.literal(1),
+      s: z20.string().regex(/^[0-9a-f]{64}$/u),
+      createdAt: z20.string().datetime(),
+      id: z20.string().uuid()
     }).strict().parse(JSON.parse(bytes.toString("utf8")));
     if (decoded2.s !== receiptCursorScope(workspaceId, subjectId)) {
       throw new HTTPException64(409, { message: "context receipt cursor belongs to another scope" });
@@ -59101,7 +59779,7 @@ function registerCompanyBrainRoutes(app, deps) {
   app.get(`${base}/knowledge-proposals`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
     const grant = await requireAccessGrant36(context, deps, workspaceId, "documents:search");
-    const parsed = z19.coerce.number().int().positive().max(COMPANY_BRAIN_INSPECTOR_MAX_LIMIT).default(COMPANY_BRAIN_INSPECTOR_DEFAULT_LIMIT).safeParse(context.req.query("limit"));
+    const parsed = z20.coerce.number().int().positive().max(COMPANY_BRAIN_INSPECTOR_MAX_LIMIT).default(COMPANY_BRAIN_INSPECTOR_DEFAULT_LIMIT).safeParse(context.req.query("limit"));
     if (!parsed.success) throw new HTTPException64(400, { message: "invalid proposal limit" });
     const response = await listCompanyBrainKnowledgeProposals(deps.db, {
       workspaceId,
@@ -59122,7 +59800,7 @@ import {
 } from "@opengeni/contracts";
 import {
   requireAccessGrant as requireAccessGrant37,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization14
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization15
 } from "@opengeni/core";
 import {
   listSlackTaskPolicy,
@@ -59181,7 +59859,7 @@ function registerSlackTaskPolicyRoutes(app, deps) {
   });
   app.put(base, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization14(
+    const access = await requireAccessGrantAuthorization15(
       context,
       deps,
       workspaceId,
@@ -59235,7 +59913,7 @@ import { getDocumentInventory as getDocumentInventory2 } from "@opengeni/documen
 import { HTTPException as HTTPException66 } from "hono/http-exception";
 
 // src/workspace-state-export.ts
-import { createHash as createHash22 } from "crypto";
+import { createHash as createHash21 } from "crypto";
 import {
   WORKSPACE_STATE_EXPORT_SCHEMA_VERSION,
   WorkspaceStateExportResponse
@@ -59266,7 +59944,7 @@ function createWorkspaceStateExport(state) {
     kind: "opengeni.workspace_state.sanitized_export",
     schemaVersion: WORKSPACE_STATE_EXPORT_SCHEMA_VERSION,
     generatedAt: state.generatedAt,
-    stateSha256: createHash22("sha256").update(canonicalState, "utf8").digest("hex"),
+    stateSha256: createHash21("sha256").update(canonicalState, "utf8").digest("hex"),
     omissions: WORKSPACE_STATE_EXPORT_OMISSIONS,
     state
   });
@@ -59366,7 +60044,7 @@ function registerWorkspaceStateRoutes(app, deps) {
 }
 
 // src/routes/workspace-artifacts.ts
-import { createHash as createHash23 } from "crypto";
+import { createHash as createHash22 } from "crypto";
 import {
   CreateWorkspaceArtifactRequest,
   PublishWorkspaceArtifactVersionRequest,
@@ -59381,7 +60059,7 @@ import {
 } from "@opengeni/contracts";
 import {
   requireAccessGrant as requireAccessGrant39,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization15,
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization16,
   requireSessionAuthorization as requireSessionAuthorization8,
   SessionAuthorizationDeniedError as SessionAuthorizationDeniedError9,
   SessionAuthorizationUnavailableError as SessionAuthorizationUnavailableError7
@@ -59397,16 +60075,22 @@ import {
   setWorkspaceArtifactStatus as setWorkspaceArtifactStatus2,
   WorkspaceArtifactConflictError,
   WorkspaceArtifactNotFoundError as WorkspaceArtifactNotFoundError2,
-  WorkspaceArtifactOperationError
+  WorkspaceArtifactOperationError as WorkspaceArtifactOperationError2
 } from "@opengeni/db";
 import { HTTPException as HTTPException67 } from "hono/http-exception";
-import { z as z20 } from "zod";
-var ArtifactId3 = z20.string().uuid();
+import { z as z21 } from "zod";
+var ArtifactId3 = z21.string().uuid();
 async function body(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) throw new HTTPException67(422, { message: "Invalid artifact request" });
   return parsed.data;
 }
+function parseVersionId(value) {
+  if (value !== void 0 && !ArtifactId3.safeParse(value).success) {
+    throw new HTTPException67(422, { message: "Invalid artifact version id" });
+  }
+  return value;
+}
 function artifactId(context) {
   const parsed = ArtifactId3.safeParse(context.req.param("artifactId"));
   if (!parsed.success) throw new HTTPException67(422, { message: "Invalid artifact id" });
@@ -59426,7 +60110,7 @@ function workspaceArtifactErrorResponse(context, error) {
       409
     );
   }
-  if (error instanceof WorkspaceArtifactOperationError) {
+  if (error instanceof WorkspaceArtifactOperationError2) {
     return context.json(
       { code: "INVALID_WORKSPACE_ARTIFACT_OPERATION", message: error.message },
       422
@@ -59443,16 +60127,16 @@ function workspaceArtifactErrorResponse(context, error) {
   }
   throw error;
 }
-function prepareContent(deps, workspaceId, input) {
+function prepareContent(deps, grant, input) {
   if (!deps.objectStorage)
     throw new HTTPException67(503, {
       message: "Object storage is not configured"
     });
-  return prepareWorkspaceArtifactContent(deps.objectStorage, workspaceId, input);
+  return prepareWorkspaceArtifactPublication(deps, grant, input);
 }
 function provenance(subjectId, idempotencyKey) {
   return {
-    operationKey: `subject:${createHash23("sha256").update(`${subjectId}:${idempotencyKey}`).digest("hex")}`,
+    operationKey: `subject:${createHash22("sha256").update(`${subjectId}:${idempotencyKey}`).digest("hex")}`,
     actorSubjectId: subjectId,
     sourceSessionId: null,
     sourceTurnId: null,
@@ -59489,6 +60173,28 @@ async function mutationResponse(deps, grant, response) {
 }
 function registerWorkspaceArtifactRoutes(app, deps) {
   const base = "/v1/workspaces/:workspaceId/published-artifacts";
+  app.post(`${base}/uploads`, async (context) => {
+    const grant = await requireAccessGrant39(
+      context,
+      deps,
+      context.req.param("workspaceId"),
+      "artifacts:publish"
+    );
+    return context.json(await prepareWorkspaceArtifactUpload(deps, grant));
+  });
+  app.get(`${base}/:artifactId/downloads`, async (context) => {
+    const workspaceId = context.req.param("workspaceId");
+    await requireAccessGrant39(context, deps, workspaceId, "artifacts:read");
+    if (!deps.objectStorage)
+      throw new HTTPException67(503, { message: "Object storage is not configured" });
+    const ref = await getWorkspaceArtifactContentRef2(
+      deps.db,
+      workspaceId,
+      artifactId(context),
+      parseVersionId(context.req.query("versionId"))
+    );
+    return context.json(await workspaceArtifactDownloads(deps.objectStorage, ref, "public"));
+  });
   app.get(base, async (context) => {
     const workspaceId = context.req.param("workspaceId");
     await requireAccessGrant39(context, deps, workspaceId, "artifacts:read");
@@ -59516,7 +60222,7 @@ function registerWorkspaceArtifactRoutes(app, deps) {
   });
   app.post(base, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization15(
+    const authorization = await requireAccessGrantAuthorization16(
       context,
       deps,
       workspaceId,
@@ -59527,12 +60233,13 @@ function registerWorkspaceArtifactRoutes(app, deps) {
     const id = crypto.randomUUID();
     const slugBase = request.slug ?? (normalizeWorkspaceArtifactSlug2(request.title) || "artifact");
     const slug = request.slug ?? `${slugBase.slice(0, 87)}-${id.slice(0, 8)}`;
-    const content = prepareContent(deps, workspaceId, {
-      html: request.html,
-      ...request.source ? { source: request.source } : {},
-      ...request.requestedTools ? { requestedTools: request.requestedTools } : {}
-    });
     try {
+      const content = await prepareContent(deps, grant, {
+        ...request.html !== void 0 ? { html: request.html } : {},
+        ...request.uploadId ? { uploadId: request.uploadId } : {},
+        ...request.source ? { source: request.source } : {},
+        ...request.requestedTools ? { requestedTools: request.requestedTools } : {}
+      });
       return context.json(
         await mutationResponse(
           deps,
@@ -59572,6 +60279,42 @@ function registerWorkspaceArtifactRoutes(app, deps) {
       return workspaceArtifactErrorResponse(context, error);
     }
   });
+  app.get(`${base}/:artifactId/html`, async (context) => {
+    const workspaceId = context.req.param("workspaceId");
+    await requireAccessGrant39(context, deps, workspaceId, "artifacts:read");
+    if (!deps.objectStorage)
+      throw new HTTPException67(503, { message: "Object storage is not configured" });
+    const ref = await getWorkspaceArtifactContentRef2(
+      deps.db,
+      workspaceId,
+      artifactId(context),
+      parseVersionId(context.req.query("versionId"))
+    );
+    const iterator = readArtifactObject(deps.objectStorage, ref.contentKey);
+    return new Response(
+      new ReadableStream({
+        async pull(controller) {
+          try {
+            const item = await iterator.next();
+            if (item.done) controller.close();
+            else controller.enqueue(item.value);
+          } catch (error) {
+            controller.error(error);
+          }
+        },
+        async cancel() {
+          await iterator.return();
+        }
+      }),
+      {
+        headers: {
+          "Content-Type": "text/html; charset=utf-8",
+          "Cache-Control": "private, no-store",
+          "Content-Security-Policy": "sandbox allow-scripts"
+        }
+      }
+    );
+  });
   app.get(`${base}/:artifactId/content`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
     await requireAccessGrant39(context, deps, workspaceId, "artifacts:read");
@@ -59579,10 +60322,7 @@ function registerWorkspaceArtifactRoutes(app, deps) {
       throw new HTTPException67(503, {
         message: "Object storage is not configured"
       });
-    const parsedVersion = context.req.query("versionId");
-    if (parsedVersion && !ArtifactId3.safeParse(parsedVersion).success) {
-      throw new HTTPException67(422, { message: "Invalid artifact version id" });
-    }
+    const parsedVersion = parseVersionId(context.req.query("versionId"));
     try {
       const ref = await getWorkspaceArtifactContentRef2(
         deps.db,
@@ -59614,7 +60354,7 @@ function registerWorkspaceArtifactRoutes(app, deps) {
   });
   app.post(`${base}/:artifactId/versions`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization15(
+    const authorization = await requireAccessGrantAuthorization16(
       context,
       deps,
       workspaceId,
@@ -59623,12 +60363,13 @@ function registerWorkspaceArtifactRoutes(app, deps) {
     const grant = authorization.grant;
     const request = await body(context, PublishWorkspaceArtifactVersionRequest);
     const id = artifactId(context);
-    const content = prepareContent(deps, workspaceId, {
-      html: request.html,
-      ...request.source ? { source: request.source } : {},
-      ...request.requestedTools ? { requestedTools: request.requestedTools } : {}
-    });
     try {
+      const content = await prepareContent(deps, grant, {
+        ...request.html !== void 0 ? { html: request.html } : {},
+        ...request.uploadId ? { uploadId: request.uploadId } : {},
+        ...request.source ? { source: request.source } : {},
+        ...request.requestedTools ? { requestedTools: request.requestedTools } : {}
+      });
       return context.json(
         await mutationResponse(
           deps,
@@ -59651,7 +60392,7 @@ function registerWorkspaceArtifactRoutes(app, deps) {
   });
   app.post(`${base}/:artifactId/rollback`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization15(
+    const authorization = await requireAccessGrantAuthorization16(
       context,
       deps,
       workspaceId,
@@ -59682,7 +60423,7 @@ function registerWorkspaceArtifactRoutes(app, deps) {
   });
   app.patch(`${base}/:artifactId/status`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization15(
+    const authorization = await requireAccessGrantAuthorization16(
       context,
       deps,
       workspaceId,
@@ -59735,7 +60476,7 @@ import {
 import {
   hasPermission as hasPermission23,
   requireAccessGrant as requireAccessGrant40,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization16
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization17
 } from "@opengeni/core";
 import {
   activatePreferenceRegistryRevision,
@@ -59758,8 +60499,8 @@ import {
   supersedePreferenceRegistry
 } from "@opengeni/db";
 import { HTTPException as HTTPException68 } from "hono/http-exception";
-import { z as z21 } from "zod";
-var Id = z21.string().uuid();
+import { z as z22 } from "zod";
+var Id = z22.string().uuid();
 async function parseBody4(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success)
@@ -59883,7 +60624,7 @@ function registerPreferenceRegistryRoutes(app, deps) {
   });
   app.post(`${base}/proposals`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization16(
+    const access = await requireAccessGrantAuthorization17(
       context,
       deps,
       workspaceId,
@@ -59963,7 +60704,7 @@ function registerPreferenceRegistryRoutes(app, deps) {
   });
   app.post(`${base}/:preferenceId/activate`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization16(
+    const access = await requireAccessGrantAuthorization17(
       context,
       deps,
       workspaceId,
@@ -59992,7 +60733,7 @@ function registerPreferenceRegistryRoutes(app, deps) {
   });
   app.post(`${base}/:preferenceId/correct`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization16(
+    const access = await requireAccessGrantAuthorization17(
       context,
       deps,
       workspaceId,
@@ -60021,7 +60762,7 @@ function registerPreferenceRegistryRoutes(app, deps) {
   });
   app.post(`${base}/:preferenceId/scope`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization16(
+    const access = await requireAccessGrantAuthorization17(
       context,
       deps,
       workspaceId,
@@ -60050,7 +60791,7 @@ function registerPreferenceRegistryRoutes(app, deps) {
   });
   app.post(`${base}/:preferenceId/deactivate`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization16(
+    const access = await requireAccessGrantAuthorization17(
       context,
       deps,
       workspaceId,
@@ -60079,7 +60820,7 @@ function registerPreferenceRegistryRoutes(app, deps) {
   });
   app.post(`${base}/:preferenceId/supersede`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization16(
+    const access = await requireAccessGrantAuthorization17(
       context,
       deps,
       workspaceId,
@@ -60108,7 +60849,7 @@ function registerPreferenceRegistryRoutes(app, deps) {
   });
   app.post(`${base}/:preferenceId/reject`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization16(
+    const access = await requireAccessGrantAuthorization17(
       context,
       deps,
       workspaceId,
@@ -60208,7 +60949,7 @@ import { requireAccessGrant as requireAccessGrant43, TranscriptionServiceError a
 import { getWorkspace as getWorkspace5 } from "@opengeni/db";
 
 // src/routes/transcription-recordings.ts
-import { createHash as createHash24 } from "crypto";
+import { createHash as createHash23 } from "crypto";
 import {
   CreateTranscriptionRecordingRequest,
   FinalizeTranscriptionRecordingRequest,
@@ -60564,8 +61305,8 @@ function registerResumableTranscriptionRoutes(app, deps) {
           c.req.raw,
           deps.settings.voiceInputResumableMaxChunkSizeBytes
         );
-        const sha2565 = sha256Hex3(body4);
-        if (sha2565 !== declaredSha256) {
+        const sha2564 = sha256Hex3(body4);
+        if (sha2564 !== declaredSha256) {
           return c.json({ code: "conflict" }, 409);
         }
         const existing = await getTranscriptionRecording(deps.db, {
@@ -60587,7 +61328,7 @@ function registerResumableTranscriptionRoutes(app, deps) {
             recordingId: existing.recording.id,
             chunkNumber,
             byteLength: body4.byteLength,
-            sha256: sha2565,
+            sha256: sha2564,
             startMilliseconds,
             durationMilliseconds,
             maxTotalBytes: deps.settings.voiceInputResumableMaxSizeBytes,
@@ -60600,7 +61341,7 @@ function registerResumableTranscriptionRoutes(app, deps) {
               key: reservation.chunk.objectKey,
               contentType: existing.recording.mimeType,
               body: body4,
-              sha256: sha2565
+              sha256: sha2564
             });
           } catch {
             throw new RecordingProcessingError("Chunk upload failed", "network", true);
@@ -60639,7 +61380,7 @@ function registerResumableTranscriptionRoutes(app, deps) {
   app.post(
     "/v1/workspaces/:workspaceId/transcription-recordings/:recordingId/finalize",
     async (c) => {
-      const owner = correlationId(c);
+      const owner2 = correlationId(c);
       let authority = null;
       let generation = 0;
       try {
@@ -60654,7 +61395,7 @@ function registerResumableTranscriptionRoutes(app, deps) {
           workspaceId: authority.workspaceId,
           subjectId: authority.subjectId,
           recordingId,
-          owner,
+          owner: owner2,
           ...parsed.data,
           staleBefore: new Date(Date.now() - PROCESSING_LEASE_MILLISECONDS)
         });
@@ -60702,15 +61443,15 @@ function registerResumableTranscriptionRoutes(app, deps) {
           chunks: verifiedChunkBytes(deps, chunks, c.req.raw.signal),
           signal: c.req.raw.signal
         })) {
-          const sha2565 = sha256Hex3(segment.bytes);
+          const sha2564 = sha256Hex3(segment.bytes);
           const reservation = await reserveTranscriptionRecordingSegment(deps.db, {
             ...authority,
             recordingId,
-            owner,
+            owner: owner2,
             generation,
             segmentNumber: segment.segmentNumber,
             byteLength: segment.bytes.byteLength,
-            sha256: sha2565,
+            sha256: sha2564,
             startMilliseconds: segment.startMilliseconds,
             durationMilliseconds: segment.durationMilliseconds
           });
@@ -60719,7 +61460,7 @@ function registerResumableTranscriptionRoutes(app, deps) {
               key: reservation.objectKey,
               contentType: segment.mimeType,
               body: segment.bytes,
-              sha256: sha2565
+              sha256: sha2564
             });
           } catch {
             throw new RecordingProcessingError("Segment upload failed", "network", true);
@@ -60728,7 +61469,7 @@ function registerResumableTranscriptionRoutes(app, deps) {
             workspaceId: authority.workspaceId,
             subjectId: authority.subjectId,
             recordingId,
-            owner,
+            owner: owner2,
             generation,
             segmentNumber: segment.segmentNumber
           });
@@ -60738,7 +61479,7 @@ function registerResumableTranscriptionRoutes(app, deps) {
             workspaceId: authority.workspaceId,
             subjectId: authority.subjectId,
             recordingId,
-            owner,
+            owner: owner2,
             generation
           })
         );
@@ -60749,7 +61490,7 @@ function registerResumableTranscriptionRoutes(app, deps) {
             workspaceId: authority.workspaceId,
             subjectId: authority.subjectId,
             recordingId: uuidParam3(c, "recordingId"),
-            owner,
+            owner: owner2,
             generation,
             errorCode: failure.code,
             retryable: failure.retryable
@@ -60915,13 +61656,13 @@ async function cleanupTerminalObjects(deps, authority, response) {
     return response;
   }
   try {
-    const keys = await transcriptionRecordingObjectKeys(deps.db, {
+    const keys2 = await transcriptionRecordingObjectKeys(deps.db, {
       workspaceId: authority.workspaceId,
       subjectId: authority.subjectId,
       recordingId: response.recording.id
     });
     let current = response;
-    for (const key of keys) {
+    for (const key of keys2) {
       await deps.objectStorage.deleteObject(key);
       current = await markTranscriptionRecordingObjectCleaned(deps.db, {
         workspaceId: authority.workspaceId,
@@ -61031,7 +61772,7 @@ function valueAsUuid(value) {
   if (/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value)) {
     return value;
   }
-  const hex2 = createHash24("sha256").update(value).digest("hex").slice(0, 32);
+  const hex2 = createHash23("sha256").update(value).digest("hex").slice(0, 32);
   return `${hex2.slice(0, 8)}-${hex2.slice(8, 12)}-4${hex2.slice(13, 16)}-a${hex2.slice(17, 20)}-${hex2.slice(20, 32)}`;
 }
 function nonnegativeInteger(value) {
@@ -61095,7 +61836,7 @@ async function readBoundedBody(request, maxBytes) {
   return body4;
 }
 function sha256Hex3(bytes) {
-  return createHash24("sha256").update(bytes).digest("hex");
+  return createHash23("sha256").update(bytes).digest("hex");
 }
 
 // src/routes/transcriptions.ts
@@ -61401,8 +62142,8 @@ import {
   getCanonicalHumanIdentityProjection as getCanonicalHumanIdentityProjection2
 } from "@opengeni/db/canonical-human-identities";
 import { HTTPException as HTTPException71 } from "hono/http-exception";
-import { z as z22 } from "zod";
-var BindingId = z22.string().uuid();
+import { z as z23 } from "zod";
+var BindingId = z23.string().uuid();
 async function requestIdentity(context, deps) {
   return await requireCanonicalHumanRequestIdentity(context, {
     db: deps.db,
@@ -61596,11 +62337,11 @@ import {
   updateOrganizationRetentionPolicy
 } from "@opengeni/db";
 import { HTTPException as HTTPException72 } from "hono/http-exception";
-import { z as z23 } from "zod";
-var OrganizationId2 = z23.string().uuid();
-var WorkspaceId = z23.string().uuid();
-var MembershipId = z23.string().uuid();
-var InvitationId = z23.string().uuid();
+import { z as z24 } from "zod";
+var OrganizationId2 = z24.string().uuid();
+var WorkspaceId = z24.string().uuid();
+var MembershipId = z24.string().uuid();
+var InvitationId = z24.string().uuid();
 async function requireManagedHuman(context, deps) {
   if (deps.settings.productAccessMode !== "managed" || !deps.managedAuth || !context.req.header("cookie") || context.req.header("authorization")) {
     throw new HTTPException72(401, { message: "managed human session required" });
@@ -62347,9 +63088,9 @@ import {
   startOrganizationRecoveryOperation
 } from "@opengeni/db";
 import { HTTPException as HTTPException73 } from "hono/http-exception";
-import { z as z24 } from "zod";
-var OrganizationId3 = z24.string().uuid();
-var RecoveryOperationId = z24.string().uuid();
+import { z as z25 } from "zod";
+var OrganizationId3 = z25.string().uuid();
+var RecoveryOperationId = z25.string().uuid();
 var productionServices = {
   requireCanonicalHumanRequestIdentity: requireCanonicalHumanRequestIdentity2,
   getManagedAuthRequestActorAdmissionStamp,
@@ -62897,15 +63638,15 @@ import {
   ManagedAuthSessionSetOperationReuseError,
   mutateManagedAuthSessionSet
 } from "@opengeni/db/managed-auth-session-sets";
-import { ensureManagedAccessForUser as ensureManagedAccessForUser2, getSession as getSession8 } from "@opengeni/db";
+import { ensureManagedAccessForUser as ensureManagedAccessForUser2, getSession as getSession9 } from "@opengeni/db";
 import { deleteCookie as deleteCookie3, getCookie, setCookie as setCookie3 } from "hono/cookie";
 import { HTTPException as HTTPException75 } from "hono/http-exception";
-import { z as z25 } from "zod";
-var ManagedAuthSocialStartReceipt = z25.object({
-  version: z25.literal(1),
-  requestDigest: z25.string().regex(/^[0-9a-f]{64}$/u),
-  url: z25.string().url().max(4096),
-  stateCookie: z25.string().min(1).max(4096)
+import { z as z26 } from "zod";
+var ManagedAuthSocialStartReceipt = z26.object({
+  version: z26.literal(1),
+  requestDigest: z26.string().regex(/^[0-9a-f]{64}$/u),
+  url: z26.string().url().max(4096),
+  stateCookie: z26.string().min(1).max(4096)
 }).strict();
 function registerManagedAuthSessionSetRoutes(app, deps) {
   const noStore = async (context, next) => {
@@ -63535,7 +64276,7 @@ async function resolveCanonicalDeepLink(deps, authority, path, expectedActorEpoc
         continue;
       }
       if (target.sessionId) {
-        const session = await getSession8(deps.db, grant.workspaceId, target.sessionId);
+        const session = await getSession9(deps.db, grant.workspaceId, target.sessionId);
         if (!session) continue;
         try {
           await requireSessionAuthorization9(deps, grant, {
@@ -63834,7 +64575,7 @@ import {
 import {
   issueManagedHumanUserResourceGrant,
   listManagedHumanUserResourceAuthorities,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization17,
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization18,
   revokeManagedHumanUserResourceGrant,
   SessionAuthorizationDeniedError as SessionAuthorizationDeniedError10,
   SessionAuthorizationUnavailableError as SessionAuthorizationUnavailableError8,
@@ -63842,7 +64583,7 @@ import {
 } from "@opengeni/core";
 import { nestedPostgresSqlState as nestedPostgresSqlState9, SessionTenancyNotActivatedError as SessionTenancyNotActivatedError2 } from "@opengeni/db";
 import { HTTPException as HTTPException76 } from "hono/http-exception";
-import { z as z26 } from "zod";
+import { z as z27 } from "zod";
 async function body2(context, schema) {
   const parsed = schema.safeParse(await context.req.json().catch(() => null));
   if (!parsed.success) throw new HTTPException76(422, { message: "invalid user-resource request" });
@@ -63874,7 +64615,7 @@ function registerUserResourceAuthorityRoutes(app, deps) {
     });
     if (!query.success) throw new HTTPException76(422, { message: "explicit scope=user required" });
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization17(
+    const access = await requireAccessGrantAuthorization18(
       context,
       deps,
       workspaceId,
@@ -63899,10 +64640,10 @@ function registerUserResourceAuthorityRoutes(app, deps) {
   });
   app.post(`${base}/:authorityId/grants`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const authorityId = z26.string().uuid().safeParse(context.req.param("authorityId"));
+    const authorityId = z27.string().uuid().safeParse(context.req.param("authorityId"));
     if (!authorityId.success) throw new HTTPException76(422, { message: "invalid authority id" });
     const request = await body2(context, IssueUserResourceGrantRequest);
-    const access = await requireAccessGrantAuthorization17(
+    const access = await requireAccessGrantAuthorization18(
       context,
       deps,
       workspaceId,
@@ -63929,10 +64670,10 @@ function registerUserResourceAuthorityRoutes(app, deps) {
   app.delete(`${base}/grants/:grantId`, async (context) => {
     const query = RevokeUserResourceGrantQuery.safeParse({ scope: context.req.query("scope") });
     if (!query.success) throw new HTTPException76(422, { message: "explicit scope=user required" });
-    const grantId = z26.string().uuid().safeParse(context.req.param("grantId"));
+    const grantId = z27.string().uuid().safeParse(context.req.param("grantId"));
     if (!grantId.success) throw new HTTPException76(422, { message: "invalid grant id" });
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization17(
+    const access = await requireAccessGrantAuthorization18(
       context,
       deps,
       workspaceId,
@@ -63962,7 +64703,7 @@ import {
 import {
   issueManagedHumanUserResourceGrant as issueManagedHumanUserResourceGrant2,
   listManagedHumanUserResourceAuthorities as listManagedHumanUserResourceAuthorities2,
-  requireAccessGrantAuthorization as requireAccessGrantAuthorization18,
+  requireAccessGrantAuthorization as requireAccessGrantAuthorization19,
   revokeManagedHumanUserResourceGrant as revokeManagedHumanUserResourceGrant2,
   SessionAuthorizationDeniedError as SessionAuthorizationDeniedError11,
   SessionAuthorizationUnavailableError as SessionAuthorizationUnavailableError9,
@@ -63970,7 +64711,7 @@ import {
 } from "@opengeni/core";
 import { nestedPostgresSqlState as nestedPostgresSqlState10, SessionTenancyNotActivatedError as SessionTenancyNotActivatedError3 } from "@opengeni/db";
 import { HTTPException as HTTPException78 } from "hono/http-exception";
-import { z as z27 } from "zod";
+import { z as z28 } from "zod";
 
 // src/connection-authority-owner.ts
 import {
@@ -64028,7 +64769,7 @@ function registerConnectionAuthorityRoutes(app, deps) {
     });
     if (!query.success) throw new HTTPException78(422, { message: "explicit scope=user required" });
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization18(
+    const access = await requireAccessGrantAuthorization19(
       context,
       deps,
       workspaceId,
@@ -64050,10 +64791,10 @@ function registerConnectionAuthorityRoutes(app, deps) {
   });
   app.post(`${base}/:authorityId/grants`, async (context) => {
     const workspaceId = context.req.param("workspaceId");
-    const authorityId = z27.string().uuid().safeParse(context.req.param("authorityId"));
+    const authorityId = z28.string().uuid().safeParse(context.req.param("authorityId"));
     if (!authorityId.success) throw new HTTPException78(422, { message: "invalid authority id" });
     const request = await body3(context, IssueConnectionUseGrantRequest2);
-    const access = await requireAccessGrantAuthorization18(
+    const access = await requireAccessGrantAuthorization19(
       context,
       deps,
       workspaceId,
@@ -64081,10 +64822,10 @@ function registerConnectionAuthorityRoutes(app, deps) {
   app.delete(`${base}/grants/:grantId`, async (context) => {
     const query = RevokeConnectionUseGrantQuery.safeParse({ scope: context.req.query("scope") });
     if (!query.success) throw new HTTPException78(422, { message: "explicit scope=user required" });
-    const grantId = z27.string().uuid().safeParse(context.req.param("grantId"));
+    const grantId = z28.string().uuid().safeParse(context.req.param("grantId"));
     if (!grantId.success) throw new HTTPException78(422, { message: "invalid grant id" });
     const workspaceId = context.req.param("workspaceId");
-    const access = await requireAccessGrantAuthorization18(
+    const access = await requireAccessGrantAuthorization19(
       context,
       deps,
       workspaceId,
@@ -64610,7 +65351,7 @@ async function exactAvailable(providers, providerId, context) {
 }
 
 // src/integrations/slack-interactions.ts
-import { createHash as createHash26, createHmac as createHmac9, timingSafeEqual as timingSafeEqual3 } from "crypto";
+import { createHash as createHash25, createHmac as createHmac9, timingSafeEqual as timingSafeEqual3 } from "crypto";
 import {
   approvalIdentifier,
   ApproveSlackUserLinkAccessRequest,
@@ -64653,7 +65394,7 @@ import {
   getConnectionMetadata as getConnectionMetadata12,
   getOrCreateSlackInteraction,
   getLatestSessionModelForSubject,
-  getSession as getSession9,
+  getSession as getSession10,
   getSessionEvent as getSessionEvent2,
   getSessionHumanInputRequest as getSessionHumanInputRequest2,
   childRequiresActionResolutionExists,
@@ -65088,7 +65829,7 @@ function record5(value) {
 }
 
 // src/slack-reaction-files.ts
-import { createHash as createHash25 } from "crypto";
+import { createHash as createHash24 } from "crypto";
 import { completeFileUpload as completeFileUpload5, prepareGeneratedWorkspaceFile as prepareGeneratedWorkspaceFile2 } from "@opengeni/db";
 import { retryWhileMissing as retryWhileMissing6 } from "@opengeni/storage";
 var IMPORT_IDENTITY_VERSION = "slack-reaction-image-v1";
@@ -65105,7 +65846,7 @@ async function importSlackReactionImage(dependencies, source, image, ordinal) {
   if (image.bytes.byteLength < 1 || image.bytes.byteLength > 4 * 1024 * 1024) {
     throw new Error("Slack reaction image size is invalid");
   }
-  const sha2565 = createHash25("sha256").update(image.bytes).digest("hex");
+  const sha2564 = createHash24("sha256").update(image.bytes).digest("hex");
   const identity = slackReactionImageIdentity(source, image.fileId);
   const fileId = deterministicUuid(`${identity}:file`);
   const uploadId = deterministicUuid(`${identity}:upload`);
@@ -65123,7 +65864,7 @@ async function importSlackReactionImage(dependencies, source, image, ordinal) {
       safeFilename,
       contentType: image.contentType,
       sizeBytes: image.bytes.byteLength,
-      sha256: sha2565,
+      sha256: sha2564,
       bucket: storage.bucket,
       objectKey,
       expiresAt: new Date((dependencies.now?.() ?? /* @__PURE__ */ new Date()).getTime() + UPLOAD_INTENT_TTL_MS2)
@@ -65133,23 +65874,23 @@ async function importSlackReactionImage(dependencies, source, image, ordinal) {
   if (file.status !== "ready") {
     const existing = await storage.headObject(objectKey);
     if (existing) {
-      assertStoredSlackImage(existing, image, sha2565);
+      assertStoredSlackImage(existing, image, sha2564);
     } else if (storage.putObjectIfAbsent) {
       const created = await storage.putObjectIfAbsent({
         key: objectKey,
         contentType: image.contentType,
         body: image.bytes,
-        sha256: sha2565
+        sha256: sha2564
       });
       if (!created) {
-        await assertVisibleSlackImage(storage, objectKey, image, sha2565);
+        await assertVisibleSlackImage(storage, objectKey, image, sha2564);
       }
     } else {
       await storage.putObject({
         key: objectKey,
         contentType: image.contentType,
         body: image.bytes,
-        sha256: sha2565
+        sha256: sha2564
       });
     }
     file = await (dependencies.completeFile ?? completeFileUpload5)(
@@ -65158,9 +65899,9 @@ async function importSlackReactionImage(dependencies, source, image, ordinal) {
       uploadId
     );
   } else {
-    await assertVisibleSlackImage(storage, objectKey, image, sha2565);
+    await assertVisibleSlackImage(storage, objectKey, image, sha2564);
   }
-  if (file.id !== fileId || file.status !== "ready" || file.filename !== filename || file.safeFilename !== safeFilename || file.contentType !== image.contentType || file.sizeBytes !== image.bytes.byteLength || file.sha256 !== sha2565) {
+  if (file.id !== fileId || file.status !== "ready" || file.filename !== filename || file.safeFilename !== safeFilename || file.contentType !== image.contentType || file.sizeBytes !== image.bytes.byteLength || file.sha256 !== sha2564) {
     throw new Error("Imported Slack image differs from its immutable workspace file");
   }
   const mountPath = `attachments/slack/${String(ordinal).padStart(2, "0")}-${safeFilename}`;
@@ -65189,17 +65930,17 @@ function safeSlackImageFilename(value, contentType) {
   const stem = withoutKnownExtension.replace(/^[. -]+|[. ]+$/gu, "").slice(0, 180) || "slack-image";
   return `${stem}${extension}`;
 }
-async function assertVisibleSlackImage(storage, objectKey, image, sha2565) {
+async function assertVisibleSlackImage(storage, objectKey, image, sha2564) {
   const head = await retryWhileMissing6(async () => await storage.headObject(objectKey));
-  assertStoredSlackImage(head, image, sha2565);
+  assertStoredSlackImage(head, image, sha2564);
 }
-function assertStoredSlackImage(head, image, sha2565) {
-  if (!head || head.ContentLength !== image.bytes.byteLength || head.ContentType !== image.contentType || head.Metadata?.sha256 !== sha2565 || typeof head.VersionToken !== "string" || head.VersionToken.length < 1) {
+function assertStoredSlackImage(head, image, sha2564) {
+  if (!head || head.ContentLength !== image.bytes.byteLength || head.ContentType !== image.contentType || head.Metadata?.sha256 !== sha2564 || typeof head.VersionToken !== "string" || head.VersionToken.length < 1) {
     throw new Error("Stored Slack image differs from its immutable import");
   }
 }
 function deterministicUuid(seed) {
-  const bytes = createHash25("sha256").update(seed, "utf8").digest().subarray(0, 16);
+  const bytes = createHash24("sha256").update(seed, "utf8").digest().subarray(0, 16);
   bytes[6] = (bytes[6] ?? 0) & 15 | 80;
   bytes[8] = (bytes[8] ?? 0) & 63 | 128;
   const hex2 = bytes.toString("hex");
@@ -65358,7 +66099,7 @@ function slackReactionInboxEntry(payload, bot, settings) {
   if (!settings.enabled || !event || event.type !== "reaction_added" || item?.type !== "message" || !teamId || !eventId || !userId || userId === bot.botUserId || !reaction || reaction !== settings.emoji || !channelId || !workspaceSlackReactionChannelAllowed(settings, channelId) || !timestamp) {
     return null;
   }
-  const stableReactionIdentity = createHash26("sha256").update([teamId, userId, channelId, timestamp, reaction].join("\n")).digest("hex");
+  const stableReactionIdentity = createHash25("sha256").update([teamId, userId, channelId, timestamp, reaction].join("\n")).digest("hex");
   return {
     providerEventId: eventId,
     providerMessageId: `reaction:${stableReactionIdentity}`,
@@ -65548,7 +66289,7 @@ function registerSlackInteractionRoutes(app, deps) {
       const prepared = await prepareSlackUserLinkAccessRequest(deps.db, {
         accountId: installation.accountId,
         workspaceId,
-        tokenDigest: createHash26("sha256").update(payload.linkToken).digest("hex"),
+        tokenDigest: createHash25("sha256").update(payload.linkToken).digest("hex"),
         connectionId: link.connectionId,
         slackTeamId: link.slackTeamId,
         slackUserId: link.slackUserId,
@@ -65755,7 +66496,7 @@ function registerSlackInteractionRoutes(app, deps) {
       const prepared = await prepareSlackUserLinkAccessRequest(deps.db, {
         accountId: grant.accountId,
         workspaceId,
-        tokenDigest: createHash26("sha256").update(linkToken).digest("hex"),
+        tokenDigest: createHash25("sha256").update(linkToken).digest("hex"),
         connectionId: link.connectionId,
         slackTeamId: link.slackTeamId,
         slackUserId: link.slackUserId,
@@ -67219,7 +67960,7 @@ function slackReactionPreparedEntry(entry2, context, prepared) {
 }
 async function remountSlackReactionTaskForSession(deps, workspaceId, sessionId, prepared) {
   if (prepared.attachments.length === 0) return prepared;
-  const session = await getSession9(deps.db, workspaceId, sessionId);
+  const session = await getSession10(deps.db, workspaceId, sessionId);
   if (!session) throw new SlackInteractionPermanentError("session_not_found");
   const initialOrdinal = session.resources.reduce((maximum, resource) => {
     if (resource.kind !== "file" || !resource.mountPath) return maximum;
@@ -67815,7 +68556,7 @@ async function executeSlackAction(deps, grant, interaction, handle) {
       controlState: action === "pause" ? "paused" : "active"
     };
   }
-  const session = await getSession9(deps.db, grant.workspaceId, handle.sessionId);
+  const session = await getSession10(deps.db, grant.workspaceId, handle.sessionId);
   if (!session) throw new SlackInteractionPermanentError("slack_action_session_missing");
   const recurring = hasPermission25(grant.permissions, "sessions:read") && hasPermission25(grant.permissions, "scheduled_tasks:manage") ? makeRecurringText(deps, grant.workspaceId, handle.sessionId) : null;
   return {
@@ -68636,7 +69377,7 @@ function normalizedBlockActionInteraction(payload) {
   if (!teamId || !userId || !channelId || !messageTs || !actionTs || !actionId || !SLACK_BLOCK_ACTION_IDS.has(actionId) || !handleId || !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(handleId) || !Array.isArray(payload.actions) || payload.actions.length !== 1) {
     throw new HTTPException79(400, { message: "invalid Slack block action" });
   }
-  const identity = createHash26("sha256").update([teamId, userId, channelId, messageTs, actionTs, actionId, handleId].join("\n")).digest("hex");
+  const identity = createHash25("sha256").update([teamId, userId, channelId, messageTs, actionTs, actionId, handleId].join("\n")).digest("hex");
   return {
     providerEventId: `block:${identity}`,
     providerMessageId: `block:${identity}`,
@@ -68901,7 +69642,7 @@ function usesPrivateBotDm(interaction, entry2) {
   return isDirectMessageShortcut(entry2) || interaction.visibility === "private" && entry2.triggerKind !== "dm";
 }
 function deterministicUuid2(value) {
-  const bytes = createHash26("sha256").update(value).digest().subarray(0, 16);
+  const bytes = createHash25("sha256").update(value).digest().subarray(0, 16);
   bytes[6] = bytes[6] & 15 | 80;
   bytes[8] = bytes[8] & 63 | 128;
   const hex2 = bytes.toString("hex");
@@ -69021,7 +69762,7 @@ import {
   validateToolRefs,
   withDefaultEnabledCapabilityMcpTools
 } from "@opengeni/core";
-import { workflowIdForSession as workflowIdForSession3 } from "@opengeni/core";
+import { workflowIdForSession as workflowIdForSession4 } from "@opengeni/core";
 var API_MAX_REQUEST_BODY_BYTES = 32 * 1024 * 1024;
 var managedAuthReaperDatabases = /* @__PURE__ */ new WeakSet();
 var MANAGED_AUTH_REAPER_INTERVAL_MS = 6e4;
@@ -69317,13 +70058,13 @@ function createAppComposition(deps) {
     return await accessKeyBoundary(c, next);
   });
   app.use("/v1/*", async (c, next) => {
-    c.header(OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION);
-    if (deps.settings.environment !== "test" && isApiContractProtectedMutation(c.req.method, new URL(c.req.url).pathname) && c.req.header(OPENGENI_API_CONTRACT_HEADER) !== OPENGENI_API_CONTRACT_REVISION) {
+    c.header(OPENGENI_API_CONTRACT_HEADER2, OPENGENI_API_CONTRACT_REVISION2);
+    if (deps.settings.environment !== "test" && isApiContractProtectedMutation(c.req.method, new URL(c.req.url).pathname) && c.req.header(OPENGENI_API_CONTRACT_HEADER2) !== OPENGENI_API_CONTRACT_REVISION2) {
       return c.json(
         {
           code: "API_CONTRACT_CHANGED",
           message: "OpenGeni updated. Reload this client before changing state.",
-          apiContractRevision: OPENGENI_API_CONTRACT_REVISION
+          apiContractRevision: OPENGENI_API_CONTRACT_REVISION2
         },
         409
       );
@@ -69522,7 +70263,7 @@ function createAppComposition(deps) {
     return c.json(
       ClientConfig.parse({
         deploymentRevision: deps.settings.deploymentRevision,
-        apiContractRevision: OPENGENI_API_CONTRACT_REVISION,
+        apiContractRevision: OPENGENI_API_CONTRACT_REVISION2,
         ...deps.settings.serverVersion ? { serverVersion: deps.settings.serverVersion } : {},
         defaultModel: canonicalizeConfiguredModelId2(catalogSettings, catalogSettings.openaiModel),
         allowedModels: configuredAllowedModels(catalogSettings),
@@ -69696,7 +70437,7 @@ function createAppComposition(deps) {
   });
   app.get("/v1/workspaces/:workspaceId/tools/catalog", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization19(
+    const authorization = await requireAccessGrantAuthorization20(
       c,
       routeDeps,
       workspaceId,
@@ -69712,7 +70453,7 @@ function createAppComposition(deps) {
   });
   app.post("/v1/workspaces/:workspaceId/tools/calls", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization19(
+    const authorization = await requireAccessGrantAuthorization20(
       c,
       routeDeps,
       workspaceId,
@@ -69741,7 +70482,7 @@ function createAppComposition(deps) {
   });
   app.post("/v1/workspaces/:workspaceId/tools/approvals", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization19(
+    const authorization = await requireAccessGrantAuthorization20(
       c,
       routeDeps,
       workspaceId,
@@ -69770,7 +70511,7 @@ function createAppComposition(deps) {
   });
   app.get("/v1/workspaces/:workspaceId/tools/declarations", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    const authorization = await requireAccessGrantAuthorization19(
+    const authorization = await requireAccessGrantAuthorization20(
       c,
       routeDeps,
       workspaceId,
@@ -69784,6 +70525,19 @@ function createAppComposition(deps) {
       await prepared.close();
     }
   });
+  app.all("/v1/workspaces/:workspaceId/codemode/sdk/*", async (c) => {
+    const workspaceId = c.req.param("workspaceId");
+    const grant = await requireAccessGrant46(c, routeDeps, workspaceId);
+    const url = new URL(c.req.url);
+    const prefix = `/v1/workspaces/${workspaceId}/codemode/sdk`;
+    const forwarded = await codemodeSessionRequest(
+      routeDeps,
+      grant,
+      c.req.raw,
+      url.pathname.slice(prefix.length) + url.search
+    );
+    return app.fetch(forwarded);
+  });
   app.get("/v1/workspaces/:workspaceId/codemode/catalog", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     const grant = await requireAccessGrant46(c, routeDeps, workspaceId);
@@ -69912,7 +70666,7 @@ function createAppComposition(deps) {
     const requestId = correlationIds.get(c.req.raw) ?? crypto.randomUUID();
     c.header(OPENGENI_CORRELATION_HEADER, requestId);
     if (new URL(c.req.url).pathname.startsWith("/v1/")) {
-      c.header(OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION);
+      c.header(OPENGENI_API_CONTRACT_HEADER2, OPENGENI_API_CONTRACT_REVISION2);
     }
     const envelope = ErrorEnvelope.parse({
       error: {
@@ -69970,7 +70724,7 @@ async function validateCodexAccountTarget(request) {
   }
 }
 async function requireMcpAccessGrantAuthorization(c, deps, workspaceId) {
-  const authorization = await requireAccessGrantAuthorization19(c, deps, workspaceId);
+  const authorization = await requireAccessGrantAuthorization20(c, deps, workspaceId);
   const grant = authorization.grant;
   if (hasPermission26(grant.permissions, "workspace:read")) {
     return authorization;
@@ -70684,6 +71438,10 @@ var routeLabelPatterns = [
     pattern: /^\/v1\/workspaces\/[^/]+\/github\/app$/,
     label: "/v1/workspaces/:workspaceId/github/app"
   },
+  {
+    pattern: /^\/v1\/workspaces\/[^/]+\/github\/action-policies$/,
+    label: "/v1/workspaces/:workspaceId/github/action-policies"
+  },
   {
     pattern: /^\/v1\/workspaces\/[^/]+\/github\/repositories$/,
     label: "/v1/workspaces/:workspaceId/github/repositories"
@@ -71090,6 +71848,6 @@ export {
   validateGitHubRepositorySelectionShapes,
   validateToolRefs,
   withDefaultEnabledCapabilityMcpTools,
-  workflowIdForSession3 as workflowIdForSession
+  workflowIdForSession4 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-XXH7DW34.js.map
+//# sourceMappingURL=chunk-3VUEFGWS.js.map