@opengeni/api-router 2.12.1-canary.0 → 2.12.3

package/dist/app.js

@@ -24,7 +24,7 @@ import {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession,
   workspaceActorContextExempt
-} from "./chunk-Y3EPAIEQ.js";
+} from "./chunk-552H26YK.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,
   allowedCorsOrigin,

package/dist/{chunk-Y3EPAIEQ.js → chunk-552H26YK.js}

@@ -6041,6 +6041,8 @@ async function workspaceArtifactDownloads(storage, ref, audience) {
 // src/mcp/server.ts
 import {
   CreateScheduledTaskRequest,
+  CreateSessionRequest,
+  GoalSpec,
   boundSessionMcpText as capSessionDiscoveryText,
   compactSessionMcpListRow,
   sessionMcpIncludesRelatedWork,
@@ -24927,6 +24929,30 @@ function orchestrationFailureCode(tool, error) {
   const suffix = error.status === 401 ? "unauthenticated" : error.status === 403 ? "forbidden" : error.status === 404 ? "not_found" : error.status === 409 ? "conflict" : error.status === 429 ? "limit_exceeded" : error.status >= 500 ? "unavailable" : "rejected";
   return `${tool}_${suffix}`.slice(0, ORCHESTRATION_FAILURE_CODE_MAX_LENGTH);
 }
+function sessionCreateValidationFailureResult(error) {
+  const details = error.issues.slice(0, 5).map((issue) => {
+    const [field, goalField] = issue.path;
+    let path = typeof field === "string" && Object.hasOwn(CreateSessionRequest.out.shape, field) ? field : "request";
+    if (field === "goal" && typeof goalField === "string" && Object.hasOwn(GoalSpec.shape, goalField)) {
+      path += `.${goalField}`;
+    }
+    const expected = issue.code === "invalid_type" && ["string", "number", "boolean", "object", "array", "int"].includes(issue.expected) ? `expected ${issue.expected === "int" ? "integer" : issue.expected}` : "failed schema validation";
+    return `${path} ${expected}`;
+  });
+  const envelope = {
+    error: {
+      code: "session_create_invalid_request",
+      message: boundedOrchestrationFailureMessage(
+        `Invalid session create request: ${details.join("; ") || "request failed schema validation"}${error.issues.length > 5 ? "; additional fields failed validation" : ""}.`
+      )
+    }
+  };
+  return {
+    content: [{ type: "text", text: JSON.stringify(envelope, null, 2) }],
+    structuredContent: envelope,
+    isError: true
+  };
+}
 function orchestrationFailureEnvelope(tool, error) {
   if (error instanceof SessionSpawnDeniedError) {
     const denial = sessionSpawnDenialEnvelope(error);
@@ -28818,7 +28844,7 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
         "Concise semantic title for the child session. Omit only when the delegated goal or initial message already provides a suitable title; OpenGeni derives a sensitive-safe bounded fallback from that text."
       ),
       instructions: z43.string().min(1).max(SESSION_INSTRUCTIONS_MAX_CHARACTERS).optional(),
-      goal: z43.unknown().optional(),
+      goal: GoalSpec.optional(),
       resources: z43.array(z43.unknown()).optional().describe(
         "Omit to inherit parent repositories only. Files are never inherited automatically; explicitly include file resources to attach them. An empty array inherits no resources."
       ),
@@ -28897,18 +28923,21 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, callerSes
             await authorizeFirstPartySession(deps, grant, callerSessionId, "session.child.create");
           }
           const { machineTarget, title, projectId, ...request } = args;
+          const rawRequest = {
+            ...request,
+            ...projectId !== void 0 ? { channelId: projectId } : {},
+            ...machineTarget ? {
+              targetSandboxId: machineTarget.targetSandboxId,
+              ...machineTarget.workingDir !== void 0 ? { workingDir: machineTarget.workingDir } : {}
+            } : {}
+          };
+          const validation = CreateSessionRequest.safeParse(rawRequest);
+          if (!validation.success) return sessionCreateValidationFailureResult(validation.error);
           const result = await createSessionForRequestWithOutcome(
             deps,
             grant,
             grant.workspaceId,
-            {
-              ...request,
-              ...projectId !== void 0 ? { channelId: projectId } : {},
-              ...machineTarget ? {
-                targetSandboxId: machineTarget.targetSandboxId,
-                ...machineTarget.workingDir !== void 0 ? { workingDir: machineTarget.workingDir } : {}
-              } : {}
-            },
+            rawRequest,
             void 0,
             title === void 0 ? {} : { automaticTitleCandidate: title }
           );
@@ -55805,7 +55834,7 @@ import {
   GatewayRealtimeConnectRequest,
   ClientSessionEvent,
   CompactSessionContextRequest,
-  CreateSessionRequest,
+  CreateSessionRequest as CreateSessionRequest2,
   DeleteSessionQueueItemRequest,
   EditSessionQueueItemRequest,
   EndSessionRealtimeRequest,
@@ -57207,7 +57236,7 @@ function registerSessionRoutes(app, deps) {
     }
     let session;
     try {
-      CreateSessionRequest.parse(payload);
+      CreateSessionRequest2.parse(payload);
       const origin = await resolveSiteSessionOrigin(
         db,
         workspaceId,
@@ -76525,4 +76554,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession4 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-Y3EPAIEQ.js.map
+//# sourceMappingURL=chunk-552H26YK.js.map