@opengeni/api-router 2.10.0-canary.6 → 2.11.0-canary.0

package/dist/codemode.d.ts

@@ -1,5 +1,18 @@
 import { type AccessGrant, type AttemptToolCatalog, type CodemodeCallSubmission as CodemodeCallSubmissionValue, type CodemodeOperation } from "@opengeni/contracts";
 import type { ApiRouteDeps } from "@opengeni/core";
+import { type Settings } from "@opengeni/config";
+import { type Permission, type Session } from "@opengeni/contracts";
+/** The REST authority a Codemode SDK proxy token may ever carry. */
+export declare const CODEMODE_SESSION_PROXY_PERMISSION_CEILING: readonly ["workspace:read", "sessions:read", "sessions:create", "sessions:control"];
+/**
+ * Proxy permissions = the session's effective first-party permissions, cut
+ * down to what its exact model-visible tool selection could actually
+ * exercise (plus workspace:read for the context routes), under the fixed
+ * ceiling above. A session whose selection has no session_* tool therefore
+ * gets only workspace:read and every proxied /sessions handler refuses it,
+ * exactly as its MCP surface would.
+ */
+export declare function codemodeSessionProxyPermissions(settings: Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">, session: Pick<Session, "firstPartyMcpTools" | "firstPartyMcpPermissions">): Permission[];
 /** Reuse normal REST handlers, including their resource/command authorization.
  * The exact attempt is checked before issuing this internal-only credential. */
 export declare function codemodeSessionRequest(deps: ApiRouteDeps, grant: AccessGrant, request: Request, path: string): Promise<Request>;

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-NWSVDE7O.js";
+} from "./chunk-EAYCECQK.js";
 
 // src/index.ts
 import {

package/dist/integrations/slack-interactions.d.ts

@@ -19,7 +19,7 @@ export declare const SLACK_SESSION_INSTRUCTIONS: string;
  * selection at session creation while keeping Slack mutations out of the model
  * surface; interaction delivery remains owned by the durable delivery pump.
  */
-export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_propose" | "interaction_discover" | "interaction_request_human" | "knowledge_correct" | "knowledge_propose" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_propose" | "interaction_discover" | "interaction_request_human" | "knowledge_correct" | "knowledge_propose" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
 export type NormalizedSlackInteraction = {
     providerEventId: string;
     providerMessageId: string;

package/dist/interaction-agent-access.d.ts

@@ -0,0 +1,19 @@
+import type { AccessGrant } from "@opengeni/contracts";
+import { type ApiRouteDeps } from "@opengeni/core";
+type AssociatedInteractionSession = {
+    associations: ReadonlyArray<{
+        sessionId: string;
+    }>;
+};
+/**
+ * Narrow a workspace-wide BrowserSession/ComputerSession inventory to the
+ * entries a live agent attempt may reach. Every attach-by-id route already
+ * authorizes the exact source session through the core seam; the list is the
+ * discovery surface behind `interaction_discover scope=workspace`, so it must
+ * apply the same seam (private sessions, Slack ownership, and the 0426
+ * agent-access scope) to each associated session instead of exposing every
+ * peer's identity. Humans, API keys, and service principals keep the complete
+ * workspace inventory exactly as before.
+ */
+export declare function filterInteractionSessionsForGrant<T extends AssociatedInteractionSession>(deps: Pick<ApiRouteDeps, "db" | "sessionAuthorization">, grant: AccessGrant, sessions: readonly T[]): Promise<T[]>;
+export {};

package/dist/mcp/documents.d.ts

@@ -1,9 +1,16 @@
 import { type DocumentServices } from "@opengeni/documents";
-import { type Database } from "@opengeni/db";
+import { type Database, type MemoryAgentScope } from "@opengeni/db";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 export declare function buildDocumentsMcpServer(db: Database, accountId: string, workspaceId: string, documentServices: DocumentServices, options: {
     createdBySessionId?: string | undefined;
     attemptId?: string | undefined;
     /** Immutable human subject whose agent is making this retrieval request. */
     initiatingSubjectId: string;
+    /**
+     * The bound session's typed Memory selector (migration 0427), resolved by
+     * the caller from the session row. `off` registers neither memory tool;
+     * `user`/`session` search the workspace layer plus the own private layer.
+     * Omitted keeps the workspace layer.
+     */
+    memory?: MemoryAgentScope | null | undefined;
 }): McpServer;

package/dist/mcp/first-party-tool-permissions.d.ts

@@ -0,0 +1,572 @@
+import { type FirstPartyMcpToolName, type Permission } from "@opengeni/contracts";
+export type FirstPartyToolAuthorization = {
+    sessionRequired?: true;
+    allOf?: readonly Permission[];
+    anyOf?: readonly Permission[];
+};
+/**
+ * Authorization is deliberately complete and separate from visibility. The
+ * `satisfies Record` check makes every catalog addition choose an explicit
+ * registration predicate before it can compile.
+ */
+export declare const FIRST_PARTY_TOOL_AUTHORIZATION: {
+    set_session_title: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    goal_set: {
+        sessionRequired: true;
+        allOf: "goals:manage"[];
+    };
+    goal_update: {
+        sessionRequired: true;
+        allOf: "goals:manage"[];
+    };
+    goal_progress: {
+        sessionRequired: true;
+        allOf: "goals:manage"[];
+    };
+    wait_for_input: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    goal_complete: {
+        sessionRequired: true;
+        allOf: "goals:manage"[];
+    };
+    goal_pause: {
+        sessionRequired: true;
+        allOf: "goals:manage"[];
+    };
+    goal_resume: {
+        sessionRequired: true;
+        allOf: "goals:manage"[];
+    };
+    memory_search: {
+        sessionRequired: true;
+        allOf: "documents:search"[];
+    };
+    memory_save: {
+        sessionRequired: true;
+        allOf: "documents:search"[];
+    };
+    memory_correct: {
+        sessionRequired: true;
+        allOf: "documents:search"[];
+    };
+    preference_registry_summary: {
+        sessionRequired: true;
+        allOf: "workspace:read"[];
+    };
+    preference_registry_get: {
+        sessionRequired: true;
+        allOf: "workspace:read"[];
+    };
+    task_notes_list: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    task_note_save: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    task_note_archive: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    task_note_replace: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    work_claim_upsert: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    work_claim_release: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    knowledge_propose: {
+        sessionRequired: true;
+        allOf: "documents:search"[];
+    };
+    knowledge_correct: {
+        sessionRequired: true;
+        allOf: "documents:search"[];
+    };
+    task_note_promote_knowledge: {
+        sessionRequired: true;
+        allOf: ("documents:search" | "sessions:control")[];
+    };
+    task_note_promote_instruction_policy: {
+        sessionRequired: true;
+        allOf: ("documents:search" | "sessions:control" | "workspace:read")[];
+    };
+    task_note_promote_preference: {
+        sessionRequired: true;
+        allOf: ("documents:search" | "sessions:control" | "workspace:read")[];
+    };
+    instruction_policy_propose: {
+        sessionRequired: true;
+        allOf: ("documents:search" | "workspace:read")[];
+    };
+    preference_propose: {
+        sessionRequired: true;
+        allOf: ("documents:search" | "workspace:read")[];
+    };
+    remember: {
+        sessionRequired: true;
+        allOf: ("documents:search" | "sessions:control" | "workspace:read")[];
+    };
+    remember_confirm: {
+        sessionRequired: true;
+        allOf: ("documents:search" | "sessions:control" | "workspace:read")[];
+    };
+    company_profile_propose: {
+        sessionRequired: true;
+        allOf: ("sessions:control" | "workspace:read")[];
+    };
+    company_profile_confirm: {
+        sessionRequired: true;
+        allOf: ("sessions:control" | "workspace:read")[];
+    };
+    sandboxes_list: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    sandbox_attach: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    sandbox_swap: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    run_on: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    sandbox_provision: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    connected_machine_remove: {
+        allOf: "enrollments:manage"[];
+    };
+    rig_list: {
+        allOf: "rigs:use"[];
+    };
+    rig_get: {
+        allOf: "rigs:use"[];
+    };
+    rig_propose_change: {
+        allOf: "rigs:use"[];
+    };
+    rig_verify: {
+        allOf: "rigs:use"[];
+    };
+    rig_promote: {
+        allOf: "rigs:manage"[];
+    };
+    sessions_list: {
+        allOf: "sessions:read"[];
+    };
+    session_get: {
+        allOf: "sessions:read"[];
+    };
+    session_events: {
+        allOf: "sessions:read"[];
+    };
+    session_wait: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    command_wait: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    command_read: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    session_create: {
+        allOf: "sessions:create"[];
+    };
+    session_send_message: {
+        allOf: "sessions:control"[];
+    };
+    session_pause: {
+        allOf: "sessions:control"[];
+    };
+    session_resume: {
+        allOf: "sessions:control"[];
+    };
+    session_steer: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    session_human_input_respond: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    set_other_session_title: {
+        allOf: "sessions:control"[];
+    };
+    interaction_discover: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    browser_open: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    browser_tabs: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    browser_observe: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    browser_act: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    browser_clipboard: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    browser_debug: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    browser_auth: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    interaction_request_human: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    browser_identity: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    browser_publish: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    browser_lifecycle: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    computer_open: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    computer_targets: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    computer_observe: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    computer_clipboard: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    computer_act: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    computer_lifecycle: {
+        sessionRequired: true;
+        allOf: "sessions:control"[];
+    };
+    variable_set_list: {
+        allOf: ("secrets:list" | "variable-sets:list")[];
+    };
+    environment_list: {
+        allOf: ("secrets:list" | "variable-sets:list")[];
+    };
+    variable_set_get_variable: {
+        sessionRequired: true;
+        allOf: ("secrets:read" | "variable-sets:read")[];
+    };
+    variable_set_set_variable: {
+        allOf: ("secrets:write" | "variable-sets:write")[];
+    };
+    environment_set_variable: {
+        allOf: ("secrets:write" | "variable-sets:write")[];
+    };
+    capability_catalog_search: {
+        sessionRequired: true;
+        allOf: "workspace:read"[];
+    };
+    capability_authorization_request: {
+        sessionRequired: true;
+        allOf: "workspace:read"[];
+    };
+    github_connect_link: {
+        allOf: "github:use"[];
+    };
+    github_repositories_list: {
+        allOf: "github:use"[];
+    };
+    social_connections_list: {
+        allOf: "connections:read"[];
+    };
+    social_posts_recent: {
+        allOf: "connections:read"[];
+    };
+    social_daily_analysis_context: {
+        allOf: "connections:read"[];
+    };
+    social_search_live: {
+        allOf: "connections:read"[];
+    };
+    social_mentions_live: {
+        allOf: "connections:read"[];
+    };
+    social_thread_fetch: {
+        allOf: "connections:read"[];
+    };
+    social_posts_sync: {
+        allOf: "connections:write"[];
+    };
+    social_post_reply: {
+        allOf: "connections:write"[];
+    };
+    x_accounts_list: {
+        allOf: "connections:read"[];
+    };
+    x_search_live: {
+        allOf: "connections:read"[];
+    };
+    x_mentions_live: {
+        allOf: "connections:read"[];
+    };
+    x_thread_fetch: {
+        allOf: "connections:read"[];
+    };
+    x_posts_sync: {
+        allOf: "connections:write"[];
+    };
+    x_post_reply: {
+        allOf: "connections:write"[];
+    };
+    reddit_accounts_list: {
+        allOf: "connections:read"[];
+    };
+    reddit_search_live: {
+        allOf: "connections:read"[];
+    };
+    reddit_mentions_live: {
+        allOf: "connections:read"[];
+    };
+    reddit_thread_fetch: {
+        allOf: "connections:read"[];
+    };
+    reddit_posts_sync: {
+        allOf: "connections:write"[];
+    };
+    reddit_post_reply: {
+        allOf: "connections:write"[];
+    };
+    scheduled_tasks_list: {
+        anyOf: ("scheduled_tasks:manage" | "scheduled_tasks:run")[];
+    };
+    scheduled_tasks_get: {
+        anyOf: ("scheduled_tasks:manage" | "scheduled_tasks:run")[];
+    };
+    scheduled_tasks_create: {
+        allOf: "scheduled_tasks:manage"[];
+    };
+    scheduled_tasks_update: {
+        allOf: "scheduled_tasks:manage"[];
+    };
+    scheduled_tasks_pause: {
+        allOf: "scheduled_tasks:manage"[];
+    };
+    scheduled_tasks_resume: {
+        allOf: "scheduled_tasks:manage"[];
+    };
+    scheduled_tasks_trigger: {
+        allOf: "scheduled_tasks:run"[];
+    };
+    scheduled_tasks_delete: {
+        allOf: "scheduled_tasks:manage"[];
+    };
+    scheduled_task_runs_list: {
+        anyOf: ("scheduled_tasks:manage" | "scheduled_tasks:run")[];
+    };
+    slack_bot_list_channels: {
+        allOf: "connections:read"[];
+    };
+    slack_bot_search: {
+        allOf: "connections:read"[];
+    };
+    slack_bot_channel_history: {
+        allOf: "connections:read"[];
+    };
+    slack_bot_thread_replies: {
+        allOf: "connections:read"[];
+    };
+    slack_bot_list_users: {
+        allOf: "connections:read"[];
+    };
+    slack_bot_list_files: {
+        allOf: "connections:read"[];
+    };
+    slack_bot_file_info: {
+        allOf: "connections:read"[];
+    };
+    slack_bot_file_content: {
+        allOf: "connections:read"[];
+    };
+    slack_bot_post_message: {
+        allOf: "connections:read"[];
+    };
+    slack_bot_delete_message: {
+        allOf: "connections:read"[];
+    };
+    fiken_companies_list: {
+        allOf: "connections:read"[];
+    };
+    fiken_contacts_list: {
+        allOf: "connections:read"[];
+    };
+    fiken_products_list: {
+        allOf: "connections:read"[];
+    };
+    fiken_invoices_list: {
+        allOf: "connections:read"[];
+    };
+    fiken_invoice_get: {
+        allOf: "connections:read"[];
+    };
+    fiken_bank_accounts_list: {
+        allOf: "connections:read"[];
+    };
+    fiken_purchases_list: {
+        allOf: "connections:read"[];
+    };
+    fiken_sales_list: {
+        allOf: "connections:read"[];
+    };
+    fiken_contact_create: {
+        allOf: "connections:write"[];
+    };
+    fiken_invoice_draft_create: {
+        allOf: "connections:write"[];
+    };
+    atlassian_sources_list: {
+        allOf: "connections:read"[];
+    };
+    atlassian_search: {
+        allOf: "connections:read"[];
+    };
+    atlassian_get: {
+        allOf: "connections:read"[];
+    };
+    artifacts_list: {
+        allOf: "artifacts:read"[];
+    };
+    artifacts_get_source: {
+        sessionRequired: true;
+        allOf: "artifacts:read"[];
+    };
+    artifacts_prepare_upload: {
+        sessionRequired: true;
+        allOf: "artifacts:publish"[];
+    };
+    artifacts_create: {
+        sessionRequired: true;
+        allOf: "artifacts:publish"[];
+    };
+    artifacts_publish: {
+        sessionRequired: true;
+        allOf: "artifacts:publish"[];
+    };
+    artifacts_rollback: {
+        sessionRequired: true;
+        allOf: "artifacts:publish"[];
+    };
+    artifacts_archive: {
+        sessionRequired: true;
+        allOf: "artifacts:publish"[];
+    };
+    artifacts_restore: {
+        sessionRequired: true;
+        allOf: "artifacts:publish"[];
+    };
+    sandbox_file_publish: {
+        sessionRequired: true;
+        allOf: ("files:read" | "files:upload")[];
+    };
+    editable_artifact_list: {
+        sessionRequired: true;
+        allOf: "artifacts:read"[];
+    };
+    editable_artifact_create: {
+        sessionRequired: true;
+        allOf: "artifacts:publish"[];
+    };
+    editable_artifact_import: {
+        sessionRequired: true;
+        allOf: ("artifacts:publish" | "files:read")[];
+    };
+    editable_artifact_get: {
+        sessionRequired: true;
+        allOf: "artifacts:read"[];
+    };
+    editable_artifact_inspect: {
+        sessionRequired: true;
+        allOf: "artifacts:read"[];
+    };
+    editable_artifact_apply: {
+        sessionRequired: true;
+        allOf: "artifacts:publish"[];
+    };
+    editable_artifact_export: {
+        sessionRequired: true;
+        allOf: "artifacts:read"[];
+    };
+    editable_artifact_export_status: {
+        sessionRequired: true;
+        allOf: ("artifacts:read" | "files:upload")[];
+    };
+    project_list: {
+        allOf: "sessions:read"[];
+    };
+    project_get: {
+        allOf: "sessions:read"[];
+    };
+    project_create: {
+        allOf: "sessions:create"[];
+    };
+    project_update: {
+        allOf: "sessions:create"[];
+    };
+    project_reorder: {
+        allOf: "sessions:create"[];
+    };
+    project_delete: {
+        allOf: "sessions:create"[];
+    };
+    session_set_project: {
+        allOf: "sessions:control"[];
+    };
+};
+/**
+ * The permissions a session's first-party tool selection can possibly
+ * exercise, derived from the same per-tool registration data that gates the
+ * MCP surface. A caller that only proxies REST handlers on behalf of a
+ * selection (the Codemode SDK proxy) must never hold more than this: a
+ * selection without any session_* orchestration tool cannot need
+ * sessions:create or sessions:control, so a delegated token for it must not
+ * carry them either. `anyOf` alternatives are all counted because any one of
+ * them could be the permission the selection actually holds.
+ */
+export declare function permissionsRequiredByFirstPartyTools(tools: readonly FirstPartyMcpToolName[]): Permission[];