@opengeni/api-router 2.11.3 → 2.12.3-canary.0

package/dist/connection-ownership.d.ts

@@ -1,5 +1,9 @@
 import type { ConnectionOwnership } from "@opengeni/contracts";
-import type { AccessGrantAuthorization } from "@opengeni/core";
+import { type AccessGrantAuthorization } from "@opengeni/core";
+/** A verified external actor must not enter a native callback that has no
+ * corresponding key/identity reauthorization proof. Remove at an entry point
+ * only when that provider's signed continuation and commit fence are wired. */
+export declare function requireLegacyOAuthActor(access: AccessGrantAuthorization): void;
 /** True only for an exact authenticated managed human. Unknown provenance fails closed. */
 export declare function isPersonalConnectionOwnerPrincipal(access: AccessGrantAuthorization): boolean;
 /** Rejects an OpenGeni-minted machine subject; see the namespace list's rationale. */

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-5X3XM6CE.js";
+} from "./chunk-4AQMKVQM.js";
 
 // src/index.ts
 import {
@@ -32,6 +32,7 @@ import {
   logStartupDependencyRetry
 } from "@opengeni/observability";
 import { createObjectStorage } from "@opengeni/storage";
+import { createRemoteMcpCredentialsPort } from "@opengeni/core/remote-mcp-credentials";
 import { isArtifactRuntimeConfigured } from "@opengeni/artifact-tool/runtime/development";
 import {
   resolveCatalogSettings,
@@ -2964,6 +2965,7 @@ async function startApi(options = {}) {
   }
   const { app, routeDeps } = createAppComposition({
     settings,
+    connectionCredentials: createRemoteMcpCredentialsPort(settings),
     db: dbClient.db,
     bus,
     workflowClient: workflowClient.client,