@opengeni/api-router 2.12.1-canary.0 → 2.12.3

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-Y3EPAIEQ.js";
+} from "./chunk-552H26YK.js";
 
 // src/index.ts
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "2.12.1-canary.0",
+  "version": "2.12.3",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -43,24 +43,24 @@
     "@hono/zod-validator": "^0.7.6",
     "@llamaindex/liteparse": "2.14.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opengeni/agent-proto": "^0.5.1-canary.24",
-    "@opengeni/artifact-tool": "^0.3.24-canary.0",
-    "@opengeni/capabilities": "^0.3.3-canary.6",
-    "@opengeni/codemode": "^0.5.4-canary.0",
-    "@opengeni/codex": "^0.2.22-canary.6",
-    "@opengeni/config": "^1.1.0-canary.0",
-    "@opengeni/contracts": "^3.0.0-canary.0",
-    "@opengeni/core": "^2.9.1-canary.0",
-    "@opengeni/db": "^4.3.0-canary.0",
-    "@opengeni/documents": "^0.8.24-canary.0",
-    "@opengeni/events": "^0.4.22-canary.0",
-    "@opengeni/github": "^0.7.8-canary.0",
-    "@opengeni/network": "^0.3.1-canary.6",
-    "@opengeni/observability": "^0.8.24-canary.0",
-    "@opengeni/runtime": "^2.5.1-canary.0",
-    "@opengeni/storage": "^0.2.125-canary.0",
-    "@opengeni/tool-gateway": "^0.1.5-canary.0",
-    "@opengeni/xai-subscription": "^0.1.4-canary.6",
+    "@opengeni/agent-proto": "^0.5.1",
+    "@opengeni/artifact-tool": "^0.3.25",
+    "@opengeni/capabilities": "^0.3.3",
+    "@opengeni/codemode": "^0.5.5",
+    "@opengeni/codex": "^0.2.22",
+    "@opengeni/config": "^1.1.1",
+    "@opengeni/contracts": "^3.0.1",
+    "@opengeni/core": "^2.9.3",
+    "@opengeni/db": "^4.3.2",
+    "@opengeni/documents": "^0.8.26",
+    "@opengeni/events": "^0.4.24",
+    "@opengeni/github": "^0.7.9",
+    "@opengeni/network": "^0.3.1",
+    "@opengeni/observability": "^0.8.25",
+    "@opengeni/runtime": "^2.5.2",
+    "@opengeni/storage": "^0.2.126",
+    "@opengeni/tool-gateway": "^0.1.6",
+    "@opengeni/xai-subscription": "^0.1.4",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",
     "hono": "^4.12.18",

package/src/mcp/server.ts

@@ -15,6 +15,8 @@ import {
 } from "../site-uploads";
 import {
   CreateScheduledTaskRequest,
+  CreateSessionRequest,
+  GoalSpec,
   boundSessionMcpText as capSessionDiscoveryText,
   compactSessionMcpListRow,
   sessionMcpIncludesRelatedWork,
@@ -376,6 +378,45 @@ function orchestrationFailureCode(tool: OrchestrationToolName, error: HTTPExcept
   return `${tool}_${suffix}`.slice(0, ORCHESTRATION_FAILURE_CODE_MAX_LENGTH);
 }
 
+function sessionCreateValidationFailureResult(error: z4.ZodError) {
+  // Only call with issues from the raw request preflight, never downstream errors.
+  // Paths may contain caller-controlled record keys, and custom issue messages
+  // may contain values. Only publish canonical field names and fixed type labels.
+  const details = error.issues.slice(0, 5).map((issue) => {
+    const [field, goalField] = issue.path;
+    let path =
+      typeof field === "string" && Object.hasOwn(CreateSessionRequest.out.shape, field)
+        ? field
+        : "request";
+    if (
+      field === "goal" &&
+      typeof goalField === "string" &&
+      Object.hasOwn(GoalSpec.shape, goalField)
+    ) {
+      path += `.${goalField}`;
+    }
+    const expected =
+      issue.code === "invalid_type" &&
+      ["string", "number", "boolean", "object", "array", "int"].includes(issue.expected)
+        ? `expected ${issue.expected === "int" ? "integer" : issue.expected}`
+        : "failed schema validation";
+    return `${path} ${expected}`;
+  });
+  const envelope = {
+    error: {
+      code: "session_create_invalid_request",
+      message: boundedOrchestrationFailureMessage(
+        `Invalid session create request: ${details.join("; ") || "request failed schema validation"}${error.issues.length > 5 ? "; additional fields failed validation" : ""}.`,
+      ),
+    },
+  };
+  return {
+    content: [{ type: "text" as const, text: JSON.stringify(envelope, null, 2) }],
+    structuredContent: envelope,
+    isError: true as const,
+  };
+}
+
 function orchestrationFailureEnvelope(tool: OrchestrationToolName, error: unknown) {
   if (error instanceof SessionSpawnDeniedError) {
     const denial = sessionSpawnDenialEnvelope(error);
@@ -5102,7 +5143,7 @@ function registerWorkspaceOrchestrationTools(
             "Concise semantic title for the child session. Omit only when the delegated goal or initial message already provides a suitable title; OpenGeni derives a sensitive-safe bounded fallback from that text.",
           ),
         instructions: z4.string().min(1).max(SESSION_INSTRUCTIONS_MAX_CHARACTERS).optional(),
-        goal: z4.unknown().optional(),
+        goal: GoalSpec.optional(),
         resources: z4
           .array(z4.unknown())
           .optional()
@@ -5211,22 +5252,28 @@ function registerWorkspaceOrchestrationTools(
             await authorizeFirstPartySession(deps, grant, callerSessionId, "session.child.create");
           }
           const { machineTarget, title, projectId, ...request } = args;
+          const rawRequest = {
+            ...request,
+            ...(projectId !== undefined ? { channelId: projectId } : {}),
+            ...(machineTarget
+              ? {
+                  targetSandboxId: machineTarget.targetSandboxId,
+                  ...(machineTarget.workingDir !== undefined
+                    ? { workingDir: machineTarget.workingDir }
+                    : {}),
+                }
+              : {}),
+          };
+          // Keep authorization above validation and let core parse the original
+          // request. Only this preflight's failures are attributable to input;
+          // arbitrary downstream schema failures retain the private fallback.
+          const validation = CreateSessionRequest.safeParse(rawRequest);
+          if (!validation.success) return sessionCreateValidationFailureResult(validation.error);
           const result = await createSessionForRequestWithOutcome(
             deps,
             grant,
             grant.workspaceId,
-            {
-              ...request,
-              ...(projectId !== undefined ? { channelId: projectId } : {}),
-              ...(machineTarget
-                ? {
-                    targetSandboxId: machineTarget.targetSandboxId,
-                    ...(machineTarget.workingDir !== undefined
-                      ? { workingDir: machineTarget.workingDir }
-                      : {}),
-                  }
-                : {}),
-            },
+            rawRequest,
             undefined,
             title === undefined ? {} : { automaticTitleCandidate: title },
           );