@opengeni/api-router 2.8.1-canary.0 → 2.10.0-canary.0

package/dist/access-grant-rls.d.ts

@@ -0,0 +1,3 @@
+import type { AccessGrant } from "@opengeni/contracts";
+import { type ApiRouteDeps } from "@opengeni/core";
+export declare function withAccessGrantSessionRlsContext<T>(deps: ApiRouteDeps, grant: AccessGrant, fn: () => Promise<T>): Promise<T>;

package/dist/app.js

@@ -24,7 +24,7 @@ import {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession,
   workspaceActorContextExempt
-} from "./chunk-HHKQMVY7.js";
+} from "./chunk-XXH7DW34.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,
   allowedCorsOrigin,

package/dist/auth/organization-user-setup.d.ts

@@ -1,5 +1,6 @@
 import type { Settings } from "@opengeni/config";
 import type { ManagedEmailTransport } from "@opengeni/core";
+export type OrganizationUserSetupEmailTokenTransport = "fragment" | "query";
 /**
  * Prove that the stable invited-user setup bearer can be constructed before an
  * invitation commits. Provider availability is intentionally outside this
@@ -7,11 +8,14 @@ import type { ManagedEmailTransport } from "@opengeni/core";
  * transport outcome after the invitation exists.
  */
 export declare function assertOrganizationUserSetupDeliveryConfigured(settings: Settings, transport: ManagedEmailTransport): void;
+/** Enforce the query-bearing edge proof for env and embedded settings alike. */
+export declare function assertOrganizationUserSetupQueryTransportConfigured(settings: Pick<Settings, "organizationUserSetupEmailTokenTransport" | "organizationUserSetupQueryEdgeSanitizationConfirmed">): void;
 /** Reject an invalid embedded-provider contract before any durable boundary. */
 export declare function assertManagedEmailTransportMetadata(transport: ManagedEmailTransport): void;
 export declare function deriveOrganizationUserSetupToken(settings: Settings, input: {
     invitationId: string;
     deliveryId: string;
+    transport?: OrganizationUserSetupEmailTokenTransport;
 }): Promise<{
     token: string;
     digest: string;
@@ -45,6 +49,25 @@ export declare function organizationUserSetupPayloadDigest(input: {
     html: string;
     providerIdempotencyScope: string;
 }): Promise<string>;
+export declare function resolveOrganizationUserSetupDeliveryEmail(settings: Settings, input: {
+    invitationId: string;
+    deliveryId: string;
+    senderEmail: string;
+    recipientEmail: string;
+    recipientName: string | null;
+    organizationName: string;
+    organizationRole: "owner" | "admin" | "member";
+    sharedWorkspaceAccess: OrganizationUserSetupEmailSnapshot["sharedWorkspaceAccess"];
+    providerIdempotencyScope: string;
+    frozenTransport: OrganizationUserSetupEmailTokenTransport | null;
+    frozenPayloadDigest: string | null;
+}): Promise<{
+    transport: OrganizationUserSetupEmailTokenTransport;
+    token: string;
+    tokenDigest: string;
+    payloadDigest: string;
+    message: ReturnType<typeof renderOrganizationUserSetupEmail>;
+}>;
 export declare function organizationUserSetupRequestFingerprint(settings: Settings, input: {
     tokenDigest: string;
     name: string;