@opengeni/api-router 2.4.2-canary.0 → 2.6.3-canary.0

package/dist/integrations/slack-interactions.d.ts

@@ -19,7 +19,7 @@ export declare const SLACK_SESSION_INSTRUCTIONS: string;
  * selection at session creation while keeping Slack mutations out of the model
  * surface; interaction delivery remains owned by the durable delivery pump.
  */
-export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_set" | "goal_update" | "goal_wait" | "instruction_policy_propose" | "interaction_discover" | "interaction_request_human" | "knowledge_correct" | "knowledge_propose" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_set" | "goal_update" | "goal_wait" | "instruction_policy_propose" | "interaction_discover" | "interaction_request_human" | "knowledge_correct" | "knowledge_propose" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
 export type NormalizedSlackInteraction = {
     providerEventId: string;
     providerMessageId: string;

package/dist/interaction-metrics.d.ts

@@ -1,9 +1,11 @@
 import type { AuthRunMutationResponse, BrowserActionReceipt, BrowserActionRequest, PublishBrowserRevisionResponse, BrowserSessionMutationResponse, ComputerActionReceipt, ComputerActionRequest, ComputerSessionMutationResponse, InteractionInterventionMutationResponse, ProtectedAuthFillResponse } from "@opengeni/contracts";
 import { type Observability } from "@opengeni/observability";
+import type { ComputerFrameEvidenceMismatchReason } from "@opengeni/runtime/sandbox";
 type InteractionLifecycleMutation = BrowserSessionMutationResponse | ComputerSessionMutationResponse;
 type AuthMutation = AuthRunMutationResponse | ProtectedAuthFillResponse;
 export declare function observeBrowserActionResult(observability: Observability | null | undefined, startedAtMs: number, request: BrowserActionRequest, receipt: BrowserActionReceipt): void;
 export declare function observeComputerActionResult(observability: Observability | null | undefined, startedAtMs: number, request: ComputerActionRequest, receipt: ComputerActionReceipt): void;
+export declare function observeComputerFrameEvidenceMismatch(observability: Observability | null | undefined, reason: ComputerFrameEvidenceMismatchReason): void;
 export declare function observeLifecycleResult(observability: Observability | null | undefined, startedAtMs: number, response: InteractionLifecycleMutation): void;
 export declare function observeBrowserRevisionPublication(observability: Observability | null | undefined, startedAtMs: number, response: PublishBrowserRevisionResponse): void;
 export declare function observeAuthMutation(observability: Observability | null | undefined, startedAtMs: number, response: AuthMutation): void;

package/dist/mcp/company-brain-governed-writes.d.ts

@@ -1,6 +1,6 @@
 import { type CompanyBrainGovernedWriteAttempt } from "@opengeni/contracts";
 import { createCompanyBrainLearningPolicyRouter } from "@opengeni/core";
-import type { Database } from "@opengeni/db";
+import { type Database } from "@opengeni/db";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 type JsonResult = (value: unknown) => {
     content: {

package/dist/mcp/company-profile-agent-admin.d.ts

@@ -33,12 +33,12 @@ export declare function deriveCompanyProfileStableKey(content: string): string;
  */
 export declare function resolveCompanyProfileEntries(input: readonly EntryInput[]): CompanyProfileEntry[];
 /**
- * Register the explicit owner-confirmed organization profile path. This is
- * administration, not derived learning: workspace learning mode is never
- * consulted, the initiating human must be the organization's active owner (the
- * same authority as the manual `account:admin` route), and the proposal cannot
- * become active without the exact bound human-input response returned by the
- * first call.
+ * Register the organization profile administration path. This is not derived
+ * workspace learning: the initiating human must be the organization's active
+ * owner (the same authority as the manual `account:admin` route). The separate
+ * organization policy either blocks the proposal, keeps the exact bound
+ * human-confirmation path, or permits immediate activation through the native
+ * company-profile lifecycle.
  */
 export declare function registerCompanyProfileAgentAdminTools(input: RegisterCompanyProfileAgentAdminToolsInput): void;
 export {};

package/dist/mcp/remember.d.ts

@@ -1,6 +1,6 @@
 import { type CompanyBrainGovernedWriteAttempt } from "@opengeni/contracts";
 import { createRememberRouter } from "@opengeni/core";
-import type { Database } from "@opengeni/db";
+import { type Database } from "@opengeni/db";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 type JsonResult = (value: unknown) => {
     content: {
@@ -19,7 +19,7 @@ export type RegisterRememberToolsInput = {
 /**
  * Explicit user-directed remember. Content becomes exact task-note evidence,
  * promotion runs through the frozen workspace learning policy, and activation
- * is either automatic (preference under Automatic mode) or requires exactly one
+ * is either automatic (Skill or instruction under Automatic mode) or requires exactly one
  * bound human confirmation through the built-in `request_human_input` tool.
  * Tool input cannot select scope beyond the workspace, active authority, or
  * another learning-policy source.

package/dist/mcp/server.d.ts

@@ -90,10 +90,44 @@ export declare function capSessionDiscoveryPage(page: Awaited<ReturnType<typeof
             pausedDescendants: number;
             failedDescendants: number;
             unreadDescendants?: number | undefined;
+            unreadFailedDescendants?: number | undefined;
             activelyWorkingDescendants?: number | undefined;
             attentionSince?: string | null | undefined;
             truncated: boolean;
         };
+        relatedWork: {
+            claims: {
+                id: string;
+                sessionId: string;
+                subject: {
+                    namespace: string;
+                    type: "artifact" | "branch" | "ci_run" | "issue" | "other" | "pull_request" | "release" | "repository";
+                    canonicalKey: string;
+                    displayLabel: string | null;
+                };
+                role: "delivering" | "monitoring" | "reviewing" | "working";
+                state: "active" | "released" | "stale" | "superseded";
+                revision: number;
+                provenance: "explicit_agent" | "session_resource" | "system_lifecycle" | "trusted_integration" | "user_api";
+                version: {
+                    kind: "artifact_version" | "branch_head" | "ci_run" | "git_commit" | "other" | "pull_request_head" | "release_version";
+                    value: string;
+                } | null;
+                observedAt: string;
+                updatedAt: string;
+                settledAt: string | null;
+            }[];
+            claimsTruncated: boolean;
+            match: {
+                class: "exact_subject" | "fuzzy" | "goal" | "title";
+                field: "claim_key" | "claim_label" | "goal" | "subject" | "title";
+                scoreBand: "exact" | "related" | "strong";
+                claimId: string | null;
+            } | null;
+            possibleOverlap: boolean;
+            advisoryOnly: true;
+            noAdditionalAccess: true;
+        };
         latestMessage?: {
             type: "agent.message.completed" | "agent.message.delta" | "agent.model.request" | "agent.model.usage" | "agent.reasoning.delta" | "agent.toolCall.created" | "agent.toolCall.output" | "agent.updated" | "artifact.created" | "codex.account.switched" | "codex.capacity.resumed" | "codex.capacity.superseded" | "codex.capacity.waiting" | "codex.credential.selected" | "codex.fleet.decision" | "credential.auth_needed" | "fs.changed" | "git.changed" | "goal.cleared" | "goal.completed" | "goal.continuation" | "goal.held" | "goal.paused" | "goal.progress" | "goal.resumed" | "goal.rewrite.proposed" | "goal.rewrite.rejected" | "goal.set" | "goal.updated" | "machine.link.lost" | "machine.link.restored" | "machine.op.failed" | "machine.op.recovered" | "machine.runner.restarted" | "memory.corrected" | "memory.saved" | "recording.available" | "recording.failed" | "recording.started" | "rig.setup.completed" | "rig.setup.failed" | "rig.setup.skipped" | "rig.setup.started" | "sandbox.box.created" | "sandbox.box.lost" | "sandbox.box.snapshot" | "sandbox.box.terminated" | "sandbox.command.output.delta" | "sandbox.env.drift" | "sandbox.operation.completed" | "sandbox.operation.failed" | "sandbox.operation.started" | "session.command.backgrounded" | "session.command.finished" | "session.context.cleared" | "session.context.compacted" | "session.context.compaction.requested" | "session.context.compaction.skipped" | "session.context.compaction.started" | "session.control.paused" | "session.control.resumed" | "session.control.steer_requested" | "session.created" | "session.event.envelope_omitted" | "session.humanInput.requested" | "session.mcp.approval_policy.updated" | "session.personal_resources.attached" | "session.queue.changed" | "session.queue.history" | "session.queue.prompt.cancelled" | "session.realtime.ended" | "session.realtime.started" | "session.requiresAction" | "session.route.reconciled" | "session.runtime.configured" | "session.status.changed" | "session.title_set" | "session.tool_policy.updated" | "session.variable_sets.updated" | "session.visibility.changed" | "stream.closed" | "stream.opened" | "stream.revoked" | "stream.url.rotated" | "system.update.cancelled" | "system.update.delivered" | "system.update.pending" | "system.update.settled" | "system.update.superseded" | "terminal.pty.exited" | "terminal.pty.output.delta" | "terminal.pty.started" | "tool.auth_needed" | "turn.cancelled" | "turn.capacity_waiting" | "turn.completed" | "turn.event.rejected_late" | "turn.failed" | "turn.queued" | "turn.recovery.requested" | "turn.started" | "turn.startup.phase.completed" | "turn.startup.phase.failed" | "turn.startup.phase.started" | "turn.superseded" | "user.approvalDecision" | "user.humanInputResponse" | "user.message" | "user.pause" | "workspace.inference.paused" | "workspace.inference.resumed" | "workspace.revision.captured" | "workspace.revision.degraded";
             preview: string | null;

package/dist/mcp/session-view.d.ts

@@ -121,6 +121,7 @@ export declare function boundSessionDetailMcp(session: Session, effectiveControl
         pausedDescendants: number;
         failedDescendants: number;
         unreadDescendants?: number | undefined;
+        unreadFailedDescendants?: number | undefined;
         activelyWorkingDescendants?: number | undefined;
         attentionSince?: string | null | undefined;
         truncated: boolean;

package/dist/mcp/session-wait.d.ts

@@ -40,6 +40,21 @@ export declare const SESSION_WAIT_EVENTS_PER_TARGET = 20;
  * noise never wake a waiter; `session_events` remains the drill-down for them.
  */
 export declare const SESSION_WAIT_EVENT_TYPES: readonly ["turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.capacity_waiting", "agent.message.completed", "session.status.changed", "session.requiresAction", "session.humanInput.requested", "session.control.paused", "session.control.resumed", "tool.auth_needed", "credential.auth_needed", "rig.setup.failed", "goal.set", "goal.updated", "goal.progress", "goal.rewrite.proposed", "goal.rewrite.rejected", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation"];
+/**
+ * Settlement and blocking events that make a child result usable.
+ * Goal facts are deliberately absent: an agent can complete its durable goal
+ * before it emits the final assistant message and settles the turn. Completed
+ * agent messages are also absent because commentary messages use the same
+ * event type; an ordinary result-bearing `turn.completed` carries the
+ * authoritative final output.
+ */
+export declare const SESSION_WAIT_COMPLETION_EVENT_TYPES: readonly ["turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.capacity_waiting", "session.requiresAction", "session.humanInput.requested", "session.control.paused", "tool.auth_needed", "credential.auth_needed", "rig.setup.failed", "goal.paused"];
+/**
+ * A completed turn is result-bearing only when it carries the ordinary final
+ * output. Segment-limit and maintenance turns settle one execution segment
+ * while the session still has work to do, so they must not release a parent.
+ */
+export declare function sessionWaitCompletionEventMatches(event: SessionEvent): boolean;
 /** The self-session event that announces a newly pending machine input. */
 export declare const SESSION_WAIT_OWN_PENDING_EVENT_TYPE = "system.update.pending";
 /**
@@ -120,6 +135,10 @@ export type SessionWaitInput = {
     targets: readonly SessionWaitTarget[];
     ownSessionId: string | null;
     maxWaitMs: number;
+    /** Target events that end the wait. Defaults to the ordinary activity set. */
+    targetEventTypes?: readonly SessionEventType[] | undefined;
+    /** Optional payload-aware refinement applied after the event-type filter. */
+    targetEventMatches?: ((event: SessionEvent) => boolean) | undefined;
     source: SessionWaitSource;
     signal?: AbortSignal | undefined;
     now?: (() => number) | undefined;

package/dist/routes/api-keys.d.ts

@@ -1,3 +1,5 @@
+import { Permission } from "@opengeni/contracts";
 import type { Hono } from "hono";
 import type { ApiRouteDeps } from "@opengeni/core";
+export declare const organizationApiKeyPermissions: Permission[];
 export declare function registerApiKeyRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/routes/browser-sessions.d.ts

@@ -5,6 +5,7 @@ export declare function registerBrowserSessionRoutes(app: Hono, deps: ApiRouteDe
 export declare function browserNeedsStandaloneDisplayStack(input: {
     headless: boolean;
     linkedComputer: boolean;
+    nativeBrowserControl: boolean;
 }): boolean;
 export declare function interactionActorForGrant(grant: AccessGrant): ReturnType<typeof InteractionActor.parse>;
 /** Resolve Drive authority from the same immutable session authorization that

package/dist/routes/computer-sessions.d.ts

@@ -1,6 +1,18 @@
 import { type ApiRouteDeps } from "@opengeni/core";
+import { type ComputerControlFrame, type ExpectedComputerFrameEvidence } from "@opengeni/runtime/sandbox";
 import type { Hono } from "hono";
+type ComputerFrameCaptureClient = {
+    capture(targetId: string, options: {
+        format?: "jpeg" | "png";
+        quality?: number;
+        maxWidth?: number;
+        maxHeight?: number;
+    }): Promise<ComputerControlFrame>;
+};
+export declare function validateComputerFrameForApi(frame: Pick<ComputerControlFrame, "data" | "mediaType" | "metadataHeader">, expected: ExpectedComputerFrameEvidence): ComputerControlFrame;
+export declare function captureModelComputerFrame(sessionClient: ComputerFrameCaptureClient, expected: ExpectedComputerFrameEvidence): Promise<ComputerControlFrame>;
 /** Public ComputerSession resource surface. Physical app/window authority stays
  * in the same placement controller used by BrowserSession; this route owns only
  * durable authorization, placement fencing, lifecycle receipts, and routing. */
 export declare function registerComputerSessionRoutes(app: Hono, deps: ApiRouteDeps): void;
+export {};

package/dist/routes/managed-auth-session-sets.d.ts

@@ -1,6 +1,12 @@
 import { type ApiRouteDeps } from "@opengeni/core";
 import type { Hono } from "hono";
 export declare function registerManagedAuthSessionSetRoutes(app: Hono, deps: ApiRouteDeps): void;
+export declare function validatedManagedAuthSocialAuthorizationUrl(input: {
+    provider: "google" | "github";
+    rawUrl: unknown;
+    expectedClientId: string;
+    expectedCallbackUrl: string;
+}): string;
 /**
  * Better Auth 1.6.26 provider lifecycle routes retained while session-set mode
  * owns all selected-session reads, enumeration, revocation, and user mutation.
@@ -11,6 +17,7 @@ export declare function requireManagedAuthProviderRouteAllowed(method: string, p
 /** Remove provider bearer/session material and enforce browser-auth cache/cookie policy. */
 export declare function scrubManagedAuthProviderResponse(response: Response, options?: {
     replacementCookies?: readonly string[] | undefined;
+    preserveCookieNames?: readonly string[] | undefined;
 }): Promise<Response>;
 export declare function parseSupportedDeepLink(path: string): {
     workspaceId: string | null;

package/dist/routes/sessions.d.ts

@@ -1,4 +1,4 @@
-import { ClientSessionEvent, SteerSessionMessageRequest, type SessionGoalRevision, type SessionAuthorizationOperation } from "@opengeni/contracts";
+import { ClientSessionEvent, SteerSessionMessageRequest, type SessionStatus, type WorkClaimSubjectFilter, type SessionGoalRevision, type SessionAuthorizationOperation } from "@opengeni/contracts";
 import { type SessionDiscoveryCursor } from "@opengeni/db";
 import type { Context, Hono } from "hono";
 import type { ApiRouteDeps } from "@opengeni/core";
@@ -15,14 +15,26 @@ export declare function sessionAuthorizationOperationForHttp(method: string, pat
 export declare function sessionTenancyHttpError(error: unknown): Error;
 export type AgentTopologyCursorEnvelope = {
     cursor: SessionDiscoveryCursor;
-    parentSessionId: string | null;
-    search: string | null;
+    parentSessionId: string | null | "all";
+    rootSessionId: string | null;
+    query: string | null;
+    statuses: SessionStatus[];
+    activeOnly: boolean;
+    recentHours: number | null;
+    subject: WorkClaimSubjectFilter | null;
+    claimLimit: number | null;
 };
 export declare function encodeAgentTopologyCursor(value: AgentTopologyCursorEnvelope): string;
 export declare function agentTopologyQuery(query: Record<string, string>): {
     limit: number;
-    parentSessionId: string | null;
-    search: string | undefined;
+    parentSessionId: string | null | undefined;
+    rootSessionId: string | undefined;
+    query: string | undefined;
+    statuses: SessionStatus[] | undefined;
+    activeOnly: boolean;
+    recentHours: number | undefined;
+    subject: WorkClaimSubjectFilter | undefined;
+    claimLimit: number | undefined;
     cursor: SessionDiscoveryCursor | undefined;
 };
 /** Stable, value-free JSON errors for only the create-session boundary. */

package/dist/routes/workspaces.d.ts

@@ -16,7 +16,7 @@ export declare function workspaceMembersResponse(members: readonly WorkspaceMemb
         subjectId: string;
         subjectLabel: string | null;
         role: string;
-        permissions: ("account:admin" | "account:read" | "api_keys:manage" | "artifacts:publish" | "artifacts:read" | "billing:manage" | "billing:read" | "codemode:call" | "connections:read" | "connections:write" | "documents:manage" | "documents:search" | "enrollments:manage" | "enrollments:read" | "environments:manage" | "environments:use" | "files:read" | "files:upload" | "files:write" | "github:manage" | "github:use" | "goals:manage" | "mcp_servers:attach" | "members:manage" | "rigs:manage" | "rigs:use" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "secrets:list" | "secrets:read" | "secrets:write" | "sessions:control" | "sessions:create" | "sessions:read" | "stream:acknowledge" | "stream:control" | "stream:view" | "terminal:attach" | "variable-sets:attach" | "variable-sets:list" | "variable-sets:manage" | "variable-sets:read" | "variable-sets:use" | "variable-sets:write" | "workspace:admin" | "workspace:create" | "workspace:read")[];
+        permissions: ("account:admin" | "account:read" | "api_keys:manage" | "artifacts:publish" | "artifacts:read" | "billing:manage" | "billing:read" | "capabilities:manage" | "codemode:call" | "connections:read" | "connections:write" | "documents:manage" | "documents:search" | "enrollments:manage" | "enrollments:read" | "environments:manage" | "environments:use" | "files:read" | "files:upload" | "files:write" | "github:manage" | "github:use" | "goals:manage" | "mcp_servers:attach" | "members:manage" | "rigs:manage" | "rigs:use" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "secrets:list" | "secrets:read" | "secrets:write" | "sessions:control" | "sessions:create" | "sessions:read" | "stream:acknowledge" | "stream:control" | "stream:view" | "terminal:attach" | "variable-sets:attach" | "variable-sets:list" | "variable-sets:manage" | "variable-sets:read" | "variable-sets:use" | "variable-sets:write" | "workspace:admin" | "workspace:create" | "workspace:read")[];
         createdAt: string;
     }[];
 };

package/dist/sandbox/metrics-ingestion.d.ts

@@ -7,6 +7,22 @@ import { Hello, type AttachedBrowserInventorySnapshot as WireAttachedBrowserInve
 export declare const AGENT_EVENTS_SUBJECT = "agent.*.*.connection.*.events";
 /** The wildcard subject the agent publishes its connect Hello on. */
 export declare const AGENT_HELLO_SUBJECT = "agent.*.*.connection.*.hello";
+export type AgentEventIngestionScheduler = {
+    enqueue: (payload: Uint8Array, subject: string) => void;
+    whenIdle: () => Promise<void>;
+    close: () => void;
+};
+/**
+ * Drain agent events without making every Connected Machine wait behind one
+ * deployment-wide serial DB queue. Each exact process subject retains FIFO order;
+ * separate subjects drain concurrently. Consecutive pending heartbeats for one
+ * subject are latest-wins because they are point-in-time liveness/metrics samples,
+ * while GoingOffline and update-progress events remain ordered barriers.
+ */
+export declare function createAgentEventIngestionScheduler(handler: (payload: Uint8Array, subject: string) => void | Promise<void>, options?: {
+    maxConcurrentSubjects?: number;
+    onHeartbeatCoalesced?: () => void;
+}): AgentEventIngestionScheduler;
 /** Parse the exact process events subject (heartbeat plane). */
 export declare function parseAgentEventSubject(subject: string): {
     workspaceId: string;

package/dist/work-discovery-observability.d.ts

@@ -0,0 +1,33 @@
+import type { WorkDiscoveryMatchClass } from "@opengeni/contracts";
+import type { Observability } from "@opengeni/observability";
+export type WorkDiscoverySurface = "first_party_mcp" | "agent_topology";
+export type WorkDiscoveryMode = "browse" | "query" | "subject";
+export type WorkDiscoveryOutcome = "ok" | "empty" | "disabled" | "error";
+export type WorkDiscoveryAuthorizationScope = "workspace" | "scoped";
+export type WorkDiscoveryObservation = {
+    surface: WorkDiscoverySurface;
+    mode: WorkDiscoveryMode;
+    outcome: WorkDiscoveryOutcome;
+    authorizationScope: WorkDiscoveryAuthorizationScope;
+    durationMs: number;
+    responseBytes: number;
+    resultCount: number;
+    overlapCount: number;
+    matchCounts: Partial<Record<WorkDiscoveryMatchClass, number>>;
+};
+type WorkDiscoveryObservedRow = {
+    relatedWork: {
+        match: {
+            class: WorkDiscoveryMatchClass;
+        } | null;
+        possibleOverlap: boolean;
+    };
+};
+export declare function summarizeWorkDiscoveryRows(rows: readonly WorkDiscoveryObservedRow[]): Pick<WorkDiscoveryObservation, "resultCount" | "overlapCount" | "matchCounts">;
+/**
+ * Low-cardinality work-discovery telemetry. Identifiers, search text, subject
+ * keys, titles, goals, claim labels, versions, and provenance are excluded by
+ * construction. An observability failure never changes product behavior.
+ */
+export declare function observeWorkDiscovery(observability: Observability | null | undefined, observation: WorkDiscoveryObservation): void;
+export {};

package/dist/workspace-delete-observability.d.ts

@@ -0,0 +1,10 @@
+import type { WorkspaceDeleteObserver } from "@opengeni/db";
+import type { Observability } from "@opengeni/observability";
+/**
+ * Retain exact workspace deletion timing and inventory without putting tenant
+ * identifiers in metric labels. Observer failures never change deletion truth.
+ */
+export declare function workspaceDeleteObserver(observability: Observability | null | undefined, identity: {
+    accountId: string;
+    workspaceId: string;
+}): WorkspaceDeleteObserver | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "2.4.2-canary.0",
+  "version": "2.6.3-canary.0",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -41,25 +41,25 @@
     "@aws-sdk/client-s3": "^3.1044.0",
     "@aws-sdk/s3-request-presigner": "^3.1044.0",
     "@hono/zod-validator": "^0.7.6",
-    "@llamaindex/liteparse": "^1.5.3",
+    "@llamaindex/liteparse": "2.14.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opengeni/agent-proto": "^0.5.1-canary.5",
-    "@opengeni/artifact-tool": "^0.3.8-canary.0",
-    "@opengeni/capabilities": "^0.3.1-canary.4",
-    "@opengeni/codemode": "^0.4.16-canary.0",
-    "@opengeni/codex": "^0.2.19-canary.4",
-    "@opengeni/config": "^0.21.0-canary.0",
-    "@opengeni/contracts": "^2.6.0-canary.0",
-    "@opengeni/core": "^2.5.2-canary.0",
-    "@opengeni/db": "^3.5.2-canary.0",
-    "@opengeni/documents": "^0.8.5-canary.0",
-    "@opengeni/events": "^0.4.3-canary.0",
-    "@opengeni/github": "^0.6.0-canary.0",
-    "@opengeni/network": "^0.2.3-canary.4",
-    "@opengeni/observability": "^0.8.8-canary.0",
-    "@opengeni/runtime": "^1.4.1-canary.0",
-    "@opengeni/storage": "^0.2.109-canary.0",
-    "@opengeni/xai-subscription": "^0.1.2-canary.4",
+    "@opengeni/agent-proto": "^0.5.1-canary.6",
+    "@opengeni/artifact-tool": "^0.3.14-canary.0",
+    "@opengeni/capabilities": "^0.3.1-canary.5",
+    "@opengeni/codemode": "^0.4.22-canary.0",
+    "@opengeni/codex": "^0.2.20-canary.0",
+    "@opengeni/config": "^0.22.5-canary.0",
+    "@opengeni/contracts": "^2.9.2-canary.0",
+    "@opengeni/core": "^2.6.3-canary.0",
+    "@opengeni/db": "^3.7.3-canary.0",
+    "@opengeni/documents": "^0.8.13-canary.0",
+    "@opengeni/events": "^0.4.11-canary.0",
+    "@opengeni/github": "^0.6.7-canary.0",
+    "@opengeni/network": "^0.2.3-canary.5",
+    "@opengeni/observability": "^0.8.14-canary.0",
+    "@opengeni/runtime": "^2.0.1-canary.0",
+    "@opengeni/storage": "^0.2.115-canary.0",
+    "@opengeni/xai-subscription": "^0.1.2-canary.5",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",
     "hono": "^4.12.18",