@opengeni/api-router 2.5.0 → 2.6.4-canary.0

package/dist/interaction-metrics.d.ts

@@ -1,9 +1,11 @@
 import type { AuthRunMutationResponse, BrowserActionReceipt, BrowserActionRequest, PublishBrowserRevisionResponse, BrowserSessionMutationResponse, ComputerActionReceipt, ComputerActionRequest, ComputerSessionMutationResponse, InteractionInterventionMutationResponse, ProtectedAuthFillResponse } from "@opengeni/contracts";
 import { type Observability } from "@opengeni/observability";
+import type { ComputerFrameEvidenceMismatchReason } from "@opengeni/runtime/sandbox";
 type InteractionLifecycleMutation = BrowserSessionMutationResponse | ComputerSessionMutationResponse;
 type AuthMutation = AuthRunMutationResponse | ProtectedAuthFillResponse;
 export declare function observeBrowserActionResult(observability: Observability | null | undefined, startedAtMs: number, request: BrowserActionRequest, receipt: BrowserActionReceipt): void;
 export declare function observeComputerActionResult(observability: Observability | null | undefined, startedAtMs: number, request: ComputerActionRequest, receipt: ComputerActionReceipt): void;
+export declare function observeComputerFrameEvidenceMismatch(observability: Observability | null | undefined, reason: ComputerFrameEvidenceMismatchReason): void;
 export declare function observeLifecycleResult(observability: Observability | null | undefined, startedAtMs: number, response: InteractionLifecycleMutation): void;
 export declare function observeBrowserRevisionPublication(observability: Observability | null | undefined, startedAtMs: number, response: PublishBrowserRevisionResponse): void;
 export declare function observeAuthMutation(observability: Observability | null | undefined, startedAtMs: number, response: AuthMutation): void;

package/dist/mcp/company-brain-governed-writes.d.ts

@@ -1,6 +1,6 @@
 import { type CompanyBrainGovernedWriteAttempt } from "@opengeni/contracts";
 import { createCompanyBrainLearningPolicyRouter } from "@opengeni/core";
-import type { Database } from "@opengeni/db";
+import { type Database } from "@opengeni/db";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 type JsonResult = (value: unknown) => {
     content: {

package/dist/mcp/company-profile-agent-admin.d.ts

@@ -33,12 +33,12 @@ export declare function deriveCompanyProfileStableKey(content: string): string;
  */
 export declare function resolveCompanyProfileEntries(input: readonly EntryInput[]): CompanyProfileEntry[];
 /**
- * Register the explicit owner-confirmed organization profile path. This is
- * administration, not derived learning: workspace learning mode is never
- * consulted, the initiating human must be the organization's active owner (the
- * same authority as the manual `account:admin` route), and the proposal cannot
- * become active without the exact bound human-input response returned by the
- * first call.
+ * Register the organization profile administration path. This is not derived
+ * workspace learning: the initiating human must be the organization's active
+ * owner (the same authority as the manual `account:admin` route). The separate
+ * organization policy either blocks the proposal, keeps the exact bound
+ * human-confirmation path, or permits immediate activation through the native
+ * company-profile lifecycle.
  */
 export declare function registerCompanyProfileAgentAdminTools(input: RegisterCompanyProfileAgentAdminToolsInput): void;
 export {};

package/dist/mcp/remember.d.ts

@@ -1,6 +1,6 @@
 import { type CompanyBrainGovernedWriteAttempt } from "@opengeni/contracts";
 import { createRememberRouter } from "@opengeni/core";
-import type { Database } from "@opengeni/db";
+import { type Database } from "@opengeni/db";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 type JsonResult = (value: unknown) => {
     content: {
@@ -19,7 +19,7 @@ export type RegisterRememberToolsInput = {
 /**
  * Explicit user-directed remember. Content becomes exact task-note evidence,
  * promotion runs through the frozen workspace learning policy, and activation
- * is either automatic (preference under Automatic mode) or requires exactly one
+ * is either automatic (Skill or instruction under Automatic mode) or requires exactly one
  * bound human confirmation through the built-in `request_human_input` tool.
  * Tool input cannot select scope beyond the workspace, active authority, or
  * another learning-policy source.

package/dist/mcp/scheduled-task-view.d.ts

@@ -82,8 +82,8 @@ export declare function scheduledTaskMcpSummary(task: ScheduledTask): {
     runMode: "existing_session" | "new_session_per_run" | "reusable_session";
     overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
     action: {
+        readonly sourceId?: never;
         kind: "agent_turn";
-        sourceId?: never;
         sourceGeneration?: never;
         sourceLifecycleGeneration?: never;
         destination?: never;
@@ -205,8 +205,8 @@ export declare function boundScheduledTaskDetailMcp(task: ScheduledTask): {
     runMode: "existing_session" | "new_session_per_run" | "reusable_session";
     overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
     action: {
+        readonly sourceId?: never;
         kind: "agent_turn";
-        sourceId?: never;
         sourceGeneration?: never;
         sourceLifecycleGeneration?: never;
         destination?: never;
@@ -389,8 +389,8 @@ export declare function boundScheduledTaskMcpPage(input: {
         runMode: "existing_session" | "new_session_per_run" | "reusable_session";
         overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
         action: {
+            readonly sourceId?: never;
             kind: "agent_turn";
-            sourceId?: never;
             sourceGeneration?: never;
             sourceLifecycleGeneration?: never;
             destination?: never;

package/dist/mcp/server.d.ts

@@ -90,6 +90,7 @@ export declare function capSessionDiscoveryPage(page: Awaited<ReturnType<typeof
             pausedDescendants: number;
             failedDescendants: number;
             unreadDescendants?: number | undefined;
+            unreadFailedDescendants?: number | undefined;
             activelyWorkingDescendants?: number | undefined;
             attentionSince?: string | null | undefined;
             truncated: boolean;

package/dist/mcp/session-view.d.ts

@@ -121,6 +121,7 @@ export declare function boundSessionDetailMcp(session: Session, effectiveControl
         pausedDescendants: number;
         failedDescendants: number;
         unreadDescendants?: number | undefined;
+        unreadFailedDescendants?: number | undefined;
         activelyWorkingDescendants?: number | undefined;
         attentionSince?: string | null | undefined;
         truncated: boolean;

package/dist/mcp/session-wait.d.ts

@@ -40,6 +40,21 @@ export declare const SESSION_WAIT_EVENTS_PER_TARGET = 20;
  * noise never wake a waiter; `session_events` remains the drill-down for them.
  */
 export declare const SESSION_WAIT_EVENT_TYPES: readonly ["turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.capacity_waiting", "agent.message.completed", "session.status.changed", "session.requiresAction", "session.humanInput.requested", "session.control.paused", "session.control.resumed", "tool.auth_needed", "credential.auth_needed", "rig.setup.failed", "goal.set", "goal.updated", "goal.progress", "goal.rewrite.proposed", "goal.rewrite.rejected", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation"];
+/**
+ * Settlement and blocking events that make a child result usable.
+ * Goal facts are deliberately absent: an agent can complete its durable goal
+ * before it emits the final assistant message and settles the turn. Completed
+ * agent messages are also absent because commentary messages use the same
+ * event type; an ordinary result-bearing `turn.completed` carries the
+ * authoritative final output.
+ */
+export declare const SESSION_WAIT_COMPLETION_EVENT_TYPES: readonly ["turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.capacity_waiting", "session.requiresAction", "session.humanInput.requested", "session.control.paused", "tool.auth_needed", "credential.auth_needed", "rig.setup.failed", "goal.paused"];
+/**
+ * A completed turn is result-bearing only when it carries the ordinary final
+ * output. Segment-limit and maintenance turns settle one execution segment
+ * while the session still has work to do, so they must not release a parent.
+ */
+export declare function sessionWaitCompletionEventMatches(event: SessionEvent): boolean;
 /** The self-session event that announces a newly pending machine input. */
 export declare const SESSION_WAIT_OWN_PENDING_EVENT_TYPE = "system.update.pending";
 /**
@@ -120,6 +135,10 @@ export type SessionWaitInput = {
     targets: readonly SessionWaitTarget[];
     ownSessionId: string | null;
     maxWaitMs: number;
+    /** Target events that end the wait. Defaults to the ordinary activity set. */
+    targetEventTypes?: readonly SessionEventType[] | undefined;
+    /** Optional payload-aware refinement applied after the event-type filter. */
+    targetEventMatches?: ((event: SessionEvent) => boolean) | undefined;
     source: SessionWaitSource;
     signal?: AbortSignal | undefined;
     now?: (() => number) | undefined;

package/dist/model-catalog.d.ts

@@ -1,23 +1,7 @@
-import { type ConfiguredModel, type Settings } from "@opengeni/config";
-import { ClientModel, type WorkspaceModelCatalogResponse as WorkspaceModelCatalogResponseType, type WorkspaceModelPolicyContract } from "@opengeni/contracts";
-export type ModelAvailabilityObservation = {
-    status: "available" | "degraded" | "unavailable";
-    reason: "not_entitled" | "provider_unhealthy" | null;
-    checkedAt: string;
-};
-export type ModelCredentialReadinessObservation = {
-    status: "ready";
-    checkedAt: string;
-} | {
-    status: "not_ready";
-    reason: "prerequisites_missing" | "needs_reauth";
-    checkedAt: string;
-} | {
-    status: "error";
-    reason: "resolver_error";
-    checkedAt: string;
-};
-export declare const MODEL_CREDENTIAL_READINESS_OBSERVATION_MAX_AGE_MS: number;
+import { type ConfiguredModel } from "@opengeni/config";
+import { ClientModel, type WorkspaceModelCatalogResponse as WorkspaceModelCatalogResponseType } from "@opengeni/contracts";
+import { type WorkspaceModelSelectionInput } from "@opengeni/core";
+export { MODEL_CREDENTIAL_READINESS_OBSERVATION_MAX_AGE_MS, type ModelAvailabilityObservation, type ModelCredentialReadinessObservation, } from "@opengeni/core";
 /** Static, client-safe definition projection. No provider secret is reachable. */
 export declare function projectClientModel(model: ConfiguredModel): ClientModel;
 /**
@@ -28,14 +12,4 @@ export declare function projectClientModel(model: ConfiguredModel): ClientModel;
  * successful typed resolver observation; credential health and provider health
  * are separate inputs and neither is fabricated.
  */
-export declare function buildWorkspaceModelCatalog(input: {
-    settings: Settings;
-    policy: WorkspaceModelPolicyContract | null;
-    codexSubscriptionActive: boolean;
-    xaiSubscriptionActive?: boolean;
-    workspaceGatewayConnectionActive?: boolean;
-    credentialReadinessObservations?: Readonly<Record<string, ModelCredentialReadinessObservation>> | undefined;
-    observations?: Readonly<Record<string, ModelAvailabilityObservation>> | undefined;
-    now?: Date | undefined;
-    credentialReadinessMaxAgeMs?: number | undefined;
-}): WorkspaceModelCatalogResponseType;
+export declare function buildWorkspaceModelCatalog(input: WorkspaceModelSelectionInput): WorkspaceModelCatalogResponseType;

package/dist/routes/api-keys.d.ts

@@ -1,3 +1,5 @@
+import { Permission } from "@opengeni/contracts";
 import type { Hono } from "hono";
 import type { ApiRouteDeps } from "@opengeni/core";
+export declare const organizationApiKeyPermissions: Permission[];
 export declare function registerApiKeyRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/routes/browser-sessions.d.ts

@@ -5,6 +5,7 @@ export declare function registerBrowserSessionRoutes(app: Hono, deps: ApiRouteDe
 export declare function browserNeedsStandaloneDisplayStack(input: {
     headless: boolean;
     linkedComputer: boolean;
+    nativeBrowserControl: boolean;
 }): boolean;
 export declare function interactionActorForGrant(grant: AccessGrant): ReturnType<typeof InteractionActor.parse>;
 /** Resolve Drive authority from the same immutable session authorization that

package/dist/routes/computer-sessions.d.ts

@@ -1,6 +1,18 @@
 import { type ApiRouteDeps } from "@opengeni/core";
+import { type ComputerControlFrame, type ExpectedComputerFrameEvidence } from "@opengeni/runtime/sandbox";
 import type { Hono } from "hono";
+type ComputerFrameCaptureClient = {
+    capture(targetId: string, options: {
+        format?: "jpeg" | "png";
+        quality?: number;
+        maxWidth?: number;
+        maxHeight?: number;
+    }): Promise<ComputerControlFrame>;
+};
+export declare function validateComputerFrameForApi(frame: Pick<ComputerControlFrame, "data" | "mediaType" | "metadataHeader">, expected: ExpectedComputerFrameEvidence): ComputerControlFrame;
+export declare function captureModelComputerFrame(sessionClient: ComputerFrameCaptureClient, expected: ExpectedComputerFrameEvidence): Promise<ComputerControlFrame>;
 /** Public ComputerSession resource surface. Physical app/window authority stays
  * in the same placement controller used by BrowserSession; this route owns only
  * durable authorization, placement fencing, lifecycle receipts, and routing. */
 export declare function registerComputerSessionRoutes(app: Hono, deps: ApiRouteDeps): void;
+export {};

package/dist/routes/managed-auth-session-sets.d.ts

@@ -1,6 +1,12 @@
 import { type ApiRouteDeps } from "@opengeni/core";
 import type { Hono } from "hono";
 export declare function registerManagedAuthSessionSetRoutes(app: Hono, deps: ApiRouteDeps): void;
+export declare function validatedManagedAuthSocialAuthorizationUrl(input: {
+    provider: "google" | "github";
+    rawUrl: unknown;
+    expectedClientId: string;
+    expectedCallbackUrl: string;
+}): string;
 /**
  * Better Auth 1.6.26 provider lifecycle routes retained while session-set mode
  * owns all selected-session reads, enumeration, revocation, and user mutation.
@@ -11,6 +17,7 @@ export declare function requireManagedAuthProviderRouteAllowed(method: string, p
 /** Remove provider bearer/session material and enforce browser-auth cache/cookie policy. */
 export declare function scrubManagedAuthProviderResponse(response: Response, options?: {
     replacementCookies?: readonly string[] | undefined;
+    preserveCookieNames?: readonly string[] | undefined;
 }): Promise<Response>;
 export declare function parseSupportedDeepLink(path: string): {
     workspaceId: string | null;

package/dist/routes/workspaces.d.ts

@@ -16,7 +16,7 @@ export declare function workspaceMembersResponse(members: readonly WorkspaceMemb
         subjectId: string;
         subjectLabel: string | null;
         role: string;
-        permissions: ("account:admin" | "account:read" | "api_keys:manage" | "artifacts:publish" | "artifacts:read" | "billing:manage" | "billing:read" | "codemode:call" | "connections:read" | "connections:write" | "documents:manage" | "documents:search" | "enrollments:manage" | "enrollments:read" | "environments:manage" | "environments:use" | "files:read" | "files:upload" | "files:write" | "github:manage" | "github:use" | "goals:manage" | "mcp_servers:attach" | "members:manage" | "rigs:manage" | "rigs:use" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "secrets:list" | "secrets:read" | "secrets:write" | "sessions:control" | "sessions:create" | "sessions:read" | "stream:acknowledge" | "stream:control" | "stream:view" | "terminal:attach" | "variable-sets:attach" | "variable-sets:list" | "variable-sets:manage" | "variable-sets:read" | "variable-sets:use" | "variable-sets:write" | "workspace:admin" | "workspace:create" | "workspace:read")[];
+        permissions: ("account:admin" | "account:read" | "api_keys:manage" | "artifacts:publish" | "artifacts:read" | "billing:manage" | "billing:read" | "capabilities:manage" | "codemode:call" | "connections:read" | "connections:write" | "documents:manage" | "documents:search" | "enrollments:manage" | "enrollments:read" | "environments:manage" | "environments:use" | "files:read" | "files:upload" | "files:write" | "github:manage" | "github:use" | "goals:manage" | "mcp_servers:attach" | "members:manage" | "rigs:manage" | "rigs:use" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "secrets:list" | "secrets:read" | "secrets:write" | "sessions:control" | "sessions:create" | "sessions:read" | "stream:acknowledge" | "stream:control" | "stream:view" | "terminal:attach" | "variable-sets:attach" | "variable-sets:list" | "variable-sets:manage" | "variable-sets:read" | "variable-sets:use" | "variable-sets:write" | "workspace:admin" | "workspace:create" | "workspace:read")[];
         createdAt: string;
     }[];
 };

package/dist/sandbox/metrics-ingestion.d.ts

@@ -7,6 +7,22 @@ import { Hello, type AttachedBrowserInventorySnapshot as WireAttachedBrowserInve
 export declare const AGENT_EVENTS_SUBJECT = "agent.*.*.connection.*.events";
 /** The wildcard subject the agent publishes its connect Hello on. */
 export declare const AGENT_HELLO_SUBJECT = "agent.*.*.connection.*.hello";
+export type AgentEventIngestionScheduler = {
+    enqueue: (payload: Uint8Array, subject: string) => void;
+    whenIdle: () => Promise<void>;
+    close: () => void;
+};
+/**
+ * Drain agent events without making every Connected Machine wait behind one
+ * deployment-wide serial DB queue. Each exact process subject retains FIFO order;
+ * separate subjects drain concurrently. Consecutive pending heartbeats for one
+ * subject are latest-wins because they are point-in-time liveness/metrics samples,
+ * while GoingOffline and update-progress events remain ordered barriers.
+ */
+export declare function createAgentEventIngestionScheduler(handler: (payload: Uint8Array, subject: string) => void | Promise<void>, options?: {
+    maxConcurrentSubjects?: number;
+    onHeartbeatCoalesced?: () => void;
+}): AgentEventIngestionScheduler;
 /** Parse the exact process events subject (heartbeat plane). */
 export declare function parseAgentEventSubject(subject: string): {
     workspaceId: string;

package/dist/workspace-delete-observability.d.ts

@@ -0,0 +1,10 @@
+import type { WorkspaceDeleteObserver } from "@opengeni/db";
+import type { Observability } from "@opengeni/observability";
+/**
+ * Retain exact workspace deletion timing and inventory without putting tenant
+ * identifiers in metric labels. Observer failures never change deletion truth.
+ */
+export declare function workspaceDeleteObserver(observability: Observability | null | undefined, identity: {
+    accountId: string;
+    workspaceId: string;
+}): WorkspaceDeleteObserver | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "2.5.0",
+  "version": "2.6.4-canary.0",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -41,25 +41,25 @@
     "@aws-sdk/client-s3": "^3.1044.0",
     "@aws-sdk/s3-request-presigner": "^3.1044.0",
     "@hono/zod-validator": "^0.7.6",
-    "@llamaindex/liteparse": "^1.5.3",
+    "@llamaindex/liteparse": "2.14.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opengeni/agent-proto": "^0.5.1",
-    "@opengeni/artifact-tool": "^0.3.9",
-    "@opengeni/capabilities": "^0.3.1",
-    "@opengeni/codemode": "^0.4.17",
-    "@opengeni/codex": "^0.2.19",
-    "@opengeni/config": "^0.22.0",
-    "@opengeni/contracts": "^2.7.0",
-    "@opengeni/core": "^2.5.3",
-    "@opengeni/db": "^3.6.0",
-    "@opengeni/documents": "^0.8.6",
-    "@opengeni/events": "^0.4.4",
-    "@opengeni/github": "^0.6.1",
-    "@opengeni/network": "^0.2.3",
-    "@opengeni/observability": "^0.8.9",
-    "@opengeni/runtime": "^1.4.2",
-    "@opengeni/storage": "^0.2.110",
-    "@opengeni/xai-subscription": "^0.1.2",
+    "@opengeni/agent-proto": "^0.5.1-canary.7",
+    "@opengeni/artifact-tool": "^0.3.14-canary.1",
+    "@opengeni/capabilities": "^0.3.1-canary.6",
+    "@opengeni/codemode": "^0.4.22-canary.1",
+    "@opengeni/codex": "^0.2.20-canary.1",
+    "@opengeni/config": "^0.22.5-canary.1",
+    "@opengeni/contracts": "^2.9.2-canary.1",
+    "@opengeni/core": "^2.6.4-canary.0",
+    "@opengeni/db": "^3.7.4-canary.0",
+    "@opengeni/documents": "^0.8.14-canary.0",
+    "@opengeni/events": "^0.4.12-canary.0",
+    "@opengeni/github": "^0.6.7-canary.1",
+    "@opengeni/network": "^0.2.3-canary.6",
+    "@opengeni/observability": "^0.8.14-canary.1",
+    "@opengeni/runtime": "^2.0.1-canary.1",
+    "@opengeni/storage": "^0.2.115-canary.1",
+    "@opengeni/xai-subscription": "^0.1.2-canary.6",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",
     "hono": "^4.12.18",