@opengeni/api-router 2.6.4-canary.0 → 2.8.1-canary.0

package/dist/github-access.d.ts

@@ -1,6 +1,22 @@
-import type { GitHubBindingStatus, GitHubInstallationBinding, GitHubRepository } from "@opengeni/contracts";
-import { listGitHubInstallationAccessForWorkspace } from "@opengeni/db";
+import type { GitHubAppRepositoryBranchPage, GitHubBindingStatus, GitHubInstallationBinding, GitHubRepository } from "@opengeni/contracts";
+import { type GitHubRepositoryBranchesResponse, type ListGitHubRepositoryBranchesQuery } from "@opengeni/contracts/github-repository-contracts";
+import { areGitHubRepositoriesAllowedForWorkspace, listGitHubInstallationAccessForWorkspace } from "@opengeni/db";
 import type { ApiRouteDeps } from "@opengeni/core";
+export type GitHubRepositoryBranchAuthorityErrorCode = "changed" | "not_authorized";
+export declare class GitHubRepositoryBranchAuthorityError extends Error {
+    readonly code: GitHubRepositoryBranchAuthorityErrorCode;
+    constructor(code: GitHubRepositoryBranchAuthorityErrorCode);
+}
+export type WorkspaceGitHubRepositoryBranchServices = {
+    listInstallationAccess: typeof listGitHubInstallationAccessForWorkspace;
+    areRepositoriesAllowed: typeof areGitHubRepositoriesAllowedForWorkspace;
+    listProviderBranches: (deps: ApiRouteDeps, input: {
+        installationId: number;
+        repositoryId: number;
+        page: number;
+        limit: number;
+    }) => Promise<GitHubAppRepositoryBranchPage | null>;
+};
 export declare function listWorkspaceGitHubInstallationBindings(deps: ApiRouteDeps, workspaceId: string): Promise<GitHubInstallationBinding[]>;
 export declare function githubBindingStatus(configured: boolean, installations: GitHubInstallationBinding[]): GitHubBindingStatus;
 export type LiveGitHubInstallation = {
@@ -10,3 +26,10 @@ export type LiveGitHubInstallation = {
 };
 export declare function githubInstallationBindingLifecycle(stored: Awaited<ReturnType<typeof listGitHubInstallationAccessForWorkspace>>[number], liveById: Map<number, LiveGitHubInstallation | null>, installationId: number, lifecycleVerified: boolean): GitHubInstallationBinding["lifecycle"];
 export declare function listWorkspaceGitHubRepositories(deps: ApiRouteDeps, workspaceId: string): Promise<GitHubRepository[]>;
+export declare function listWorkspaceGitHubRepositoryBranches(deps: ApiRouteDeps, input: {
+    accountId: string;
+    workspaceId: string;
+    installationId: number;
+    repositoryId: number;
+    query: ListGitHubRepositoryBranchesQuery;
+}, services?: WorkspaceGitHubRepositoryBranchServices): Promise<GitHubRepositoryBranchesResponse>;

package/dist/index.js

@@ -6,7 +6,7 @@ import {
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-UOI7KAP3.js";
+} from "./chunk-HHKQMVY7.js";
 
 // src/index.ts
 import {

package/dist/integrations/personal-github-repositories.d.ts

@@ -1,9 +1,39 @@
 import { type PersonalGitHubRepository as PersonalGitHubRepositoryContract, type PersonalGitHubRepositorySelectionInput } from "@opengeni/contracts/personal-github";
+import { type GitHubRepositoryBranchesResponse as GitHubRepositoryBranchesResponseContract, type ListGitHubRepositoryBranchesQuery } from "@opengeni/contracts/github-repository-contracts";
 import type { ApiRouteDeps } from "@opengeni/core";
-import { getConnectionMetadata } from "@opengeni/db";
+import { getConnectionMetadata, type PersonalGitHubRepositorySelectionState as DbPersonalGitHubRepositorySelectionState } from "@opengeni/db";
 import { HTTPException } from "hono/http-exception";
 export type PersonalGitHubRepositoryConnection = NonNullable<Awaited<ReturnType<typeof getConnectionMetadata>>>;
-export type PersonalGitHubRepositoryProviderErrorCode = "connection_changed" | "connection_inactive" | "invalid_provider_response" | "provider_denied" | "provider_rate_limited" | "provider_unavailable" | "repository_archived" | "repository_not_found" | "repository_read_denied" | "repository_write_denied";
+type PersonalGitHubRepositoryProviderOperation = "repositories_list" | "repository_branches_list" | "repository_verify";
+type ExpectedPersonalGitHubRepositoryAuthority = {
+    selectionGeneration: number;
+    repositoryId: string;
+    fullName: string;
+};
+type PersonalGitHubProviderJsonOptions = {
+    operation: PersonalGitHubRepositoryProviderOperation;
+    expectedRepositoryAuthority?: ExpectedPersonalGitHubRepositoryAuthority;
+    responseLabel?: string;
+    responseMaxBytes?: number;
+};
+export type PersonalGitHubRepositoryBranchServices = {
+    requireConnection: typeof requirePersonalGitHubRepositoryConnection;
+    getSelectionState: (deps: ApiRouteDeps, input: {
+        accountId: string;
+        originWorkspaceId: string;
+        subjectId: string;
+        connectionId: string;
+    }) => Promise<DbPersonalGitHubRepositorySelectionState | null>;
+    providerJson: (input: {
+        deps: ApiRouteDeps;
+        connection: PersonalGitHubRepositoryConnection;
+        subjectId: string;
+        url: URL;
+        expectedConnectionAuthorityGeneration: number;
+        options: PersonalGitHubProviderJsonOptions;
+    }) => Promise<unknown>;
+};
+export type PersonalGitHubRepositoryProviderErrorCode = "connection_changed" | "connection_inactive" | "invalid_provider_response" | "provider_denied" | "provider_rate_limited" | "provider_unavailable" | "repository_archived" | "repository_not_found" | "repository_not_selected" | "repository_read_denied" | "repository_selection_changed" | "repository_write_denied";
 export declare class PersonalGitHubRepositoryProviderError extends Error {
     readonly code: PersonalGitHubRepositoryProviderErrorCode;
     constructor(code: PersonalGitHubRepositoryProviderErrorCode);
@@ -26,6 +56,14 @@ export declare function listLivePersonalGitHubRepositories(deps: ApiRouteDeps, i
     repositories: PersonalGitHubRepositoryContract[];
     nextPage: number | null;
 }>;
+export declare function listLivePersonalGitHubRepositoryBranches(deps: ApiRouteDeps, input: {
+    workspaceId: string;
+    accountId: string;
+    subjectId: string;
+    connectionId: string;
+    repositoryId: string;
+    query: ListGitHubRepositoryBranchesQuery;
+}, services?: PersonalGitHubRepositoryBranchServices): Promise<GitHubRepositoryBranchesResponseContract>;
 /** Serial by design: one bounded provider request and one authority check at a time. */
 export declare function verifyLivePersonalGitHubRepositories(deps: ApiRouteDeps, input: {
     workspaceId: string;
@@ -43,3 +81,4 @@ export declare function parsePersonalGitHubProviderJson(value: string): unknown;
 export declare function personalGitHubRepositoryCanRead(permissions: PersonalGitHubRepositoryContract["permissions"]): boolean;
 export declare function personalGitHubRepositoryCanWrite(permissions: PersonalGitHubRepositoryContract["permissions"]): boolean;
 export declare function parsePersonalGitHubRepository(value: unknown): PersonalGitHubRepositoryContract;
+export {};

package/dist/routes/codex.d.ts

@@ -6,5 +6,12 @@ export declare function codexModelsForPicker(liveSlugs: readonly string[]): Arra
     api: "responses";
 }>;
 import { type ApiRouteDeps } from "@opengeni/core";
-import type { Hono } from "hono";
+import type { Context, Hono } from "hono";
+type ManagedCookieHuman = {
+    subjectId: string;
+    browserSessionHash: string;
+};
+export declare function requireOrganizationCodexHuman(c: Context, deps: ApiRouteDeps, organizationId: string): Promise<ManagedCookieHuman>;
+export declare function requireSameOriginBrowserMutation(c: Context, deps: ApiRouteDeps): void;
 export declare function registerCodexRoutes(app: Hono, deps: ApiRouteDeps): void;
+export {};

package/dist/routes/github.d.ts

@@ -1,3 +1,5 @@
+import { type AccessGrant } from "@opengeni/contracts";
 import type { Hono } from "hono";
 import type { ApiRouteDeps } from "@opengeni/core";
 export declare function registerGitHubRoutes(app: Hono, deps: ApiRouteDeps): void;
+export declare function requirePublicGitHubRepositoryVerificationPermission(grant: Pick<AccessGrant, "permissions">): void;

package/dist/routes/organization-model-providers.d.ts

@@ -0,0 +1,3 @@
+import { type ApiRouteDeps } from "@opengeni/core";
+import type { Hono } from "hono";
+export declare function registerOrganizationModelProviderRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/workspace-deletion.d.ts

@@ -0,0 +1,6 @@
+import type { ApiRouteDeps } from "@opengeni/core";
+export declare function deleteWorkspaceForRequest(deps: ApiRouteDeps, input: {
+    accountId: string;
+    workspaceId: string;
+    organizationAdministratorSubjectId?: string;
+}): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "2.6.4-canary.0",
+  "version": "2.8.1-canary.0",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -43,23 +43,23 @@
     "@hono/zod-validator": "^0.7.6",
     "@llamaindex/liteparse": "2.14.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opengeni/agent-proto": "^0.5.1-canary.7",
-    "@opengeni/artifact-tool": "^0.3.14-canary.1",
-    "@opengeni/capabilities": "^0.3.1-canary.6",
-    "@opengeni/codemode": "^0.4.22-canary.1",
-    "@opengeni/codex": "^0.2.20-canary.1",
-    "@opengeni/config": "^0.22.5-canary.1",
-    "@opengeni/contracts": "^2.9.2-canary.1",
-    "@opengeni/core": "^2.6.4-canary.0",
-    "@opengeni/db": "^3.7.4-canary.0",
-    "@opengeni/documents": "^0.8.14-canary.0",
-    "@opengeni/events": "^0.4.12-canary.0",
-    "@opengeni/github": "^0.6.7-canary.1",
-    "@opengeni/network": "^0.2.3-canary.6",
-    "@opengeni/observability": "^0.8.14-canary.1",
-    "@opengeni/runtime": "^2.0.1-canary.1",
-    "@opengeni/storage": "^0.2.115-canary.1",
-    "@opengeni/xai-subscription": "^0.1.2-canary.6",
+    "@opengeni/agent-proto": "^0.5.1-canary.8",
+    "@opengeni/artifact-tool": "^0.3.17-canary.0",
+    "@opengeni/capabilities": "^0.3.1-canary.7",
+    "@opengeni/codemode": "^0.4.25-canary.0",
+    "@opengeni/codex": "^0.2.20-canary.2",
+    "@opengeni/config": "^0.23.2-canary.0",
+    "@opengeni/contracts": "^2.11.1-canary.0",
+    "@opengeni/core": "^2.7.2-canary.0",
+    "@opengeni/db": "^3.8.2-canary.0",
+    "@opengeni/documents": "^0.8.17-canary.0",
+    "@opengeni/events": "^0.4.15-canary.0",
+    "@opengeni/github": "^0.7.1-canary.0",
+    "@opengeni/network": "^0.2.3-canary.7",
+    "@opengeni/observability": "^0.8.17-canary.0",
+    "@opengeni/runtime": "^2.1.2-canary.0",
+    "@opengeni/storage": "^0.2.118-canary.0",
+    "@opengeni/xai-subscription": "^0.1.2-canary.7",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",
     "hono": "^4.12.18",

package/src/app.ts

@@ -118,6 +118,7 @@ import { allowedCorsOrigin } from "./http/cors";
 import { registerCapabilityRoutes } from "./routes/capabilities";
 import { registerCatalogAssetRoutes } from "./routes/catalog-assets";
 import { registerCodexRoutes } from "./routes/codex";
+import { registerOrganizationModelProviderRoutes } from "./routes/organization-model-providers";
 import { registerSuperGrokRoutes } from "./routes/supergrok";
 import { registerConnectionRoutes } from "./routes/connections";
 import { registerDocumentRoutes } from "./routes/documents";
@@ -422,6 +423,21 @@ export function createAppComposition(deps: AppDependencies): {
       "X-OpenGeni-Actor-Epoch",
       "X-OpenGeni-Actor-State",
       "X-OpenGeni-Correlation-Id",
+      "X-OpenGeni-Covered-First",
+      "X-OpenGeni-Covered-Last",
+      "X-OpenGeni-Event-Direction",
+      "X-OpenGeni-Event-Mode",
+      "X-OpenGeni-Event-Result",
+      "X-OpenGeni-Event-Result-Mode",
+      "X-OpenGeni-Forensic-Exact",
+      "X-OpenGeni-Has-More",
+      "X-OpenGeni-Next-After",
+      "X-OpenGeni-Next-Before",
+      "X-OpenGeni-Page-Bytes",
+      "X-OpenGeni-Page-Max-Bytes",
+      "X-OpenGeni-Page-Truncated",
+      "X-OpenGeni-Payload-Mode",
+      "X-OpenGeni-Truncated-By",
     ],
   };
   const publicApiCors = cors({
@@ -1018,6 +1034,7 @@ export function createAppComposition(deps: AppDependencies): {
   registerSessionRoutes(app, routeDeps);
   registerScheduledTaskRoutes(app, routeDeps);
   registerCodexRoutes(app, routeDeps);
+  registerOrganizationModelProviderRoutes(app, routeDeps);
   registerSuperGrokRoutes(app, routeDeps);
   registerTranscriptionRoutes(app, routeDeps);
   registerEditableArtifactRoutes(app, routeDeps);
@@ -1115,6 +1132,10 @@ const publicWorkspaceBrowserRoutePatterns = [
 ] as const;
 
 export function workspaceActorContextExempt(method: string, pathname: string): boolean {
+  // The account-scoped provisioning route shares the workspace collection prefix.
+  // Hono's trailing wildcard also matches it, but "external" is not a workspace UUID;
+  // the route performs its own organization API-key authorization.
+  if (method === "PUT" && pathname === "/v1/workspaces/external") return true;
   if (/^\/v1\/workspaces\/[^/]+\/mcp$/.test(pathname)) return true;
   if (
     method === "GET" &&

package/src/auth/organization-user-setup.ts

@@ -107,9 +107,9 @@ export function renderOrganizationUserSetupEmail(input: OrganizationUserSetupEma
   return {
     from: input.senderEmail,
     to: input.recipientEmail,
-    subject: `Join ${input.organizationName} on OpenGeni`,
-    text: `${greeting}\n\nYou have been invited to ${input.organizationName} as ${role}.\n\n${workspaceSummary}\n\nThis invitation grants only the organization role and shared workspace access listed above. It never shares anyone's Personal workspace.\n\nSet up your account: ${input.setupUrl}\n\nIf you already have an OpenGeni account, sign in and accept the invitation instead.`,
-    html: `<p>${escapeHtml(greeting)}</p><p>You have been invited to <strong>${escapeHtml(input.organizationName)}</strong> as ${escapeHtml(role)}.</p>${workspaceHtml}<p>This invitation grants only the organization role and shared workspace access listed above. It never shares anyone's Personal workspace.</p><p><a href="${escapeHtml(input.setupUrl)}">Set up your account</a></p><p>If you already have an OpenGeni account, sign in and accept the invitation instead.</p>`,
+    subject: `You're invited to join ${input.organizationName} on OpenGeni`,
+    text: `${greeting}\n\nYou've been invited to join ${input.organizationName} on OpenGeni as ${role}.\n\n${workspaceSummary}\n\nThis invitation grants only the organization role and shared workspace access listed above. It never shares anyone's Personal workspace.\n\nAccept invitation to ${input.organizationName}: ${input.setupUrl}\n\nYou'll sign in or create an account before joining. Already use OpenGeni? Open this invitation and choose Sign in as ${input.recipientEmail}. OpenGeni will show the invitation immediately after you sign in.`,
+    html: `<p>${escapeHtml(greeting)}</p><p>You've been invited to join <strong>${escapeHtml(input.organizationName)}</strong> on OpenGeni as ${escapeHtml(role)}.</p>${workspaceHtml}<p>This invitation grants only the organization role and shared workspace access listed above. It never shares anyone's Personal workspace.</p><p><a href="${escapeHtml(input.setupUrl)}">Accept invitation to ${escapeHtml(input.organizationName)}</a></p><p>You'll sign in or create an account before joining. Already use OpenGeni? Open this invitation and choose <strong>Sign in as ${escapeHtml(input.recipientEmail)}</strong>. OpenGeni will show the invitation immediately after you sign in.</p>`,
   };
 }
 

package/src/github-access.ts

@@ -1,15 +1,61 @@
 import type {
+  GitHubAppRepositoryBranchPage,
   GitHubBindingStatus,
   GitHubInstallationBinding,
   GitHubRepository,
 } from "@opengeni/contracts";
 import {
+  GitHubRepositoryBranchesResponse as GitHubRepositoryBranchesResponseSchema,
+  type GitHubRepositoryBranchesResponse,
+  type ListGitHubRepositoryBranchesQuery,
+} from "@opengeni/contracts/github-repository-contracts";
+import {
+  areGitHubRepositoriesAllowedForWorkspace,
   hasAuditableGitHubInstallationAuthority,
   listGitHubInstallationAccessForWorkspace,
 } from "@opengeni/db";
-import { listGitHubAppInstallationSummaries, listGitHubAppRepositories } from "@opengeni/github";
+import {
+  GitHubAppApiError,
+  listGitHubAppInstallationSummaries,
+  listGitHubAppRepositories,
+  listGitHubAppRepositoryBranches,
+} from "@opengeni/github";
 import type { ApiRouteDeps } from "@opengeni/core";
 
+export type GitHubRepositoryBranchAuthorityErrorCode = "changed" | "not_authorized";
+
+export class GitHubRepositoryBranchAuthorityError extends Error {
+  constructor(readonly code: GitHubRepositoryBranchAuthorityErrorCode) {
+    super(code);
+    this.name = "GitHubRepositoryBranchAuthorityError";
+  }
+}
+
+export type WorkspaceGitHubRepositoryBranchServices = {
+  listInstallationAccess: typeof listGitHubInstallationAccessForWorkspace;
+  areRepositoriesAllowed: typeof areGitHubRepositoriesAllowedForWorkspace;
+  listProviderBranches: (
+    deps: ApiRouteDeps,
+    input: {
+      installationId: number;
+      repositoryId: number;
+      page: number;
+      limit: number;
+    },
+  ) => Promise<GitHubAppRepositoryBranchPage | null>;
+};
+
+const workspaceGitHubRepositoryBranchServices: WorkspaceGitHubRepositoryBranchServices = {
+  listInstallationAccess: listGitHubInstallationAccessForWorkspace,
+  areRepositoriesAllowed: areGitHubRepositoriesAllowedForWorkspace,
+  listProviderBranches: async (deps, input) =>
+    deps.githubAppApi?.listRepositoryBranches
+      ? await deps.githubAppApi.listRepositoryBranches(input)
+      : deps.githubAppApi
+        ? null
+        : await listGitHubAppRepositoryBranches(deps.settings, input),
+};
+
 export async function listWorkspaceGitHubInstallationBindings(
   deps: ApiRouteDeps,
   workspaceId: string,
@@ -153,3 +199,73 @@ export async function listWorkspaceGitHubRepositories(
     return installation.repositoryIds.includes(repository.id);
   });
 }
+
+export async function listWorkspaceGitHubRepositoryBranches(
+  deps: ApiRouteDeps,
+  input: {
+    accountId: string;
+    workspaceId: string;
+    installationId: number;
+    repositoryId: number;
+    query: ListGitHubRepositoryBranchesQuery;
+  },
+  services: WorkspaceGitHubRepositoryBranchServices = workspaceGitHubRepositoryBranchServices,
+): Promise<GitHubRepositoryBranchesResponse> {
+  const installations = await services.listInstallationAccess(deps.db, input.workspaceId);
+  const installation = installations.find(
+    (candidate) => candidate.installationId === input.installationId,
+  );
+  if (
+    !installation ||
+    installation.accountId !== input.accountId ||
+    !hasAuditableGitHubInstallationAuthority(installation) ||
+    !installation.repositoryIds.includes(input.repositoryId)
+  ) {
+    throw new GitHubRepositoryBranchAuthorityError("not_authorized");
+  }
+  if (
+    !(await services.areRepositoriesAllowed(deps.db, input.workspaceId, input.installationId, [
+      input.repositoryId,
+    ]))
+  ) {
+    throw new GitHubRepositoryBranchAuthorityError("changed");
+  }
+  const page = await services.listProviderBranches(deps, {
+    installationId: input.installationId,
+    repositoryId: input.repositoryId,
+    page: input.query.cursor,
+    limit: input.query.limit,
+  });
+  if (!page) {
+    throw new GitHubAppApiError(
+      "The configured GitHub provider cannot list exact repository branches",
+    );
+  }
+  if (
+    page.installationId !== input.installationId ||
+    page.repositoryId !== input.repositoryId ||
+    page.branches.length > input.query.limit ||
+    (page.nextPage !== null && page.nextPage !== input.query.cursor + 1) ||
+    (page.branches.length < input.query.limit && page.nextPage !== null)
+  ) {
+    throw new GitHubAppApiError("GitHub returned an invalid repository branches page");
+  }
+  const response = GitHubRepositoryBranchesResponseSchema.safeParse({
+    branches: page.branches.map((name) => ({
+      name,
+      isDefault: name === page.defaultBranch,
+    })),
+    nextCursor: page.nextPage,
+  });
+  if (!response.success) {
+    throw new GitHubAppApiError("GitHub returned an invalid repository branches page");
+  }
+  if (
+    !(await services.areRepositoriesAllowed(deps.db, input.workspaceId, input.installationId, [
+      input.repositoryId,
+    ]))
+  ) {
+    throw new GitHubRepositoryBranchAuthorityError("changed");
+  }
+  return response.data;
+}

package/src/http/sse.ts

@@ -10,12 +10,11 @@ import {
   type Database,
 } from "@opengeni/db";
 import {
-  coalesceSessionEventDeltas,
+  coalesceSessionEventDeltasWithCoverage,
   formatSessionEventSse,
   formatWorkspaceControlEventSse,
   requireSessionEventDurableFanoutCapability,
   SESSION_EVENT_SSE_FRAME_MAX_BYTES,
-  sessionEventResumeSequence,
   type EventBus,
 } from "@opengeni/events";
 import type { Observability } from "@opengeni/observability";
@@ -295,8 +294,14 @@ export async function sseSessionStream(
       limit: SESSION_REPLAY_PAGE_SIZE,
     });
     await options.reauthorize?.();
+    const compactProjection = coalesceSessionEventDeltasWithCoverage(events);
     return finiteSseBatchResponse(
-      coalesceSessionEventDeltas(events).map(formatSessionEventSse),
+      compactProjection.events.map((event) =>
+        formatSessionEventSse(
+          event,
+          compactProjection.coveredThroughBySequence.get(event.sequence) ?? event.sequence,
+        ),
+      ),
       options,
     );
   }
@@ -378,9 +383,12 @@ export async function sseSessionStream(
       // adjacent text deltas into bounded frames carrying `coalescedUntil`, so
       // a long answer cannot create thousands of React renders and starve
       // command acknowledgements behind its own token stream.
-      for (const projected of coalesceSessionEventDeltas(eligible)) {
-        await writeFrame(formatSessionEventSse(projected));
-        lastSent = sessionEventResumeSequence(projected);
+      const compactProjection = coalesceSessionEventDeltasWithCoverage(eligible);
+      for (const projected of compactProjection.events) {
+        const coveredThrough =
+          compactProjection.coveredThroughBySequence.get(projected.sequence) ?? projected.sequence;
+        await writeFrame(formatSessionEventSse(projected, coveredThrough));
+        lastSent = coveredThrough;
       }
       if (lastSent <= previousLastSent) {
         throw new Error(`Session event replay made no progress after sequence ${lastSent}`);
@@ -432,7 +440,7 @@ export async function sseSessionStream(
     drainReconnectReconciliation();
   };
   const send = async (event: SessionEvent) => {
-    const targetSequence = sessionEventResumeSequence(event);
+    const targetSequence = event.sequence;
     if (targetSequence <= lastSent) return;
     await reconcileDurableThrough(targetSequence);
   };