@opengeni/api-router 3.0.1 → 3.1.2

package/src/mcp/action-descriptions.ts

@@ -0,0 +1,299 @@
+import type { ActionCatalogEntry } from "./action-catalog-types";
+
+/*
+ * Plain-language descriptions for catalog actions, so an agent searching the
+ * catalog can tell what an action does and explain it to the person in the
+ * words the app uses. They cover the Models and subscription settings
+ * (subscription accounts, sharing, models, usage and resets); a test keeps
+ * every such action described. The Settings guide in the bundled
+ * opengeni-help Skill explains what each setting means.
+ */
+
+type Rule = {
+  method: string;
+  /** Matched against the path with the provider and scope segments normalized. */
+  pattern: RegExp;
+  text: (context: { provider: string; scope: string }) => string;
+};
+
+const PROVIDERS: Record<string, string> = {
+  codex: "Codex (ChatGPT)",
+  claude: "Claude",
+  claude_subscription: "Claude",
+  supergrok: "SuperGrok (xAI)",
+};
+
+const RULES: Rule[] = [
+  {
+    method: "GET",
+    pattern: /\/(codex|claude|supergrok)\/accounts$/,
+    text: ({ provider, scope }) =>
+      `List the ${provider} subscription accounts connected ${scope}, with health, plan, primary account, whether each is used for new work, and which workspaces it serves.`,
+  },
+  {
+    method: "PATCH",
+    pattern: /\/(codex|claude|supergrok)\/accounts\/:accountId$/,
+    text: ({ provider }) => `Rename a connected ${provider} subscription account.`,
+  },
+  {
+    method: "DELETE",
+    pattern: /\/(codex|claude|supergrok)\/accounts\/:accountId$/,
+    text: ({ provider }) =>
+      `Disconnect a ${provider} subscription account. New work stops using it; work already running finishes first. Reconnecting needs a new sign-in.`,
+  },
+  {
+    method: "POST",
+    pattern: /\/(codex|claude|supergrok)\/accounts\/:accountId\/activate$/,
+    text: ({ provider }) =>
+      `Make this the primary ${provider} account: when account picking is set to Primary first, new work starts on it and moves to another account only when it can't serve the work.`,
+  },
+  {
+    method: "PATCH",
+    pattern: /\/(codex|claude|supergrok)\/accounts\/:accountId\/allocator$/,
+    text: ({ provider }) =>
+      `Turn "Enable account" on or off for a ${provider} account (enable or disable it, sometimes called pause or resume). Disabled accounts aren't picked for new chats or schedules; running work continues. Send the current allocator version.`,
+  },
+  {
+    method: "PATCH",
+    pattern: /\/codex\/accounts\/:accountId\/extra-credits$/,
+    text: () =>
+      "Turn extra-credit spending on or off for a Codex account. Off by default: when the plan's included usage runs out, work moves to another account or waits instead of spending paid credits.",
+  },
+  {
+    method: "GET",
+    pattern: /\/(codex|claude)\/accounts\/:accountId\/usage$/,
+    text: ({ provider }) =>
+      `Read live usage for one ${provider} account: usage-limit windows (5-hour, weekly), when they reset, extra-credit balance and, for Codex, available usage-limit resets.`,
+  },
+  {
+    method: "POST",
+    pattern: /\/(claude)\/accounts\/:accountId\/usage\/refresh$/,
+    text: ({ provider }) => `Fetch fresh usage for one ${provider} account from the provider.`,
+  },
+  {
+    method: "PATCH",
+    pattern: /\/(codex|claude|supergrok)\/settings$/,
+    text: ({ provider, scope }) =>
+      `Choose how ${provider} accounts are picked ${scope} when several are connected: Primary first (new chats start on the primary account and use another account when it can't serve them), or Spread (new chats are shared evenly across accounts that can serve them).`,
+  },
+  {
+    method: "POST",
+    pattern: /\/(codex|supergrok)\/connect\/start$/,
+    text: ({ provider, scope }) =>
+      `Start connecting a ${provider} subscription ${scope} with device sign-in. Returns a short code and a link: give both to the person, who signs in at the provider and enters the code. Then poll with the returned state.`,
+  },
+  {
+    method: "POST",
+    pattern: /\/(codex|supergrok)\/connect\/poll$/,
+    text: ({ provider }) =>
+      `Check a ${provider} device sign-in started with connect/start. Returns pending until the person enters the code, then connected with the new account, or expired.`,
+  },
+  {
+    method: "POST",
+    pattern: /\/model-providers\/claude_subscription\/oauth\/start$/,
+    text: ({ scope }) =>
+      `Start connecting a Claude subscription ${scope}. This sign-in is tied to the person's own browser, so an agent can't finish it: send the person to Settings > Models.`,
+  },
+  {
+    method: "POST",
+    pattern: /\/model-providers\/claude_subscription\/oauth\/complete$/,
+    text: () =>
+      "Finish a Claude subscription sign-in with the code Claude showed. Only the browser that started the sign-in can finish it.",
+  },
+  {
+    method: "POST",
+    pattern: /\/claude\/accounts\/setup-token$/,
+    text: ({ scope }) =>
+      `Connect a Claude subscription ${scope} from a long-lived setup token the person created with Claude Code (claude setup-token).`,
+  },
+  {
+    method: "GET",
+    pattern: /\/model-connections\/:kind\/:connectionId\/access$/,
+    text: ({ scope }) =>
+      `Read which workspaces (including Personal workspaces) and which models a model connection can serve ${scope}, and whether the viewer may change it.`,
+  },
+  {
+    method: "PUT",
+    pattern: /\/model-connections\/:kind\/:connectionId\/access$/,
+    text: () =>
+      "Change which workspaces and which models a model connection can serve. Workspaces: all (optionally including Personal workspaces), selected ones, or none. Models: all including new ones, or only chosen ones. Applies to new chats and schedules; running work keeps going.",
+  },
+  {
+    method: "GET",
+    pattern: /\/organizations\/:organizationId\/model-account-settings$/,
+    text: () =>
+      "Read the organization's subscription account settings for every workspace: rotation, cross-provider failover and its fallback order, whether personal accounts are allowed, and personal fallback, plus which ones are locked so workspaces cannot change them.",
+  },
+  {
+    method: "PATCH",
+    pattern: /\/organizations\/:organizationId\/model-account-settings$/,
+    text: () =>
+      "Change the organization's subscription account settings or lock them. Locking a setting removes every workspace's own value for it. Applies to new work; running work keeps going.",
+  },
+  {
+    method: "GET",
+    pattern: /\/model-account-settings\/overview$/,
+    text: () =>
+      "List every workspace's effective subscription account settings and where each comes from: the organization, the workspace's own value, or locked by the organization.",
+  },
+  {
+    method: "GET",
+    pattern: /\/workspaces\/:workspaceId\/model-account-settings$/,
+    text: () =>
+      "Read a workspace's effective subscription account settings, where each comes from, which ones the organization locked, and whether the viewer may change them.",
+  },
+  {
+    method: "PATCH",
+    pattern: /\/workspaces\/:workspaceId\/model-account-settings$/,
+    text: () =>
+      "Give a workspace its own value for a subscription account setting the organization has not locked, or set it back to follow the organization (null). Workspace and organization admins.",
+  },
+  {
+    method: "GET",
+    pattern: /\/model-providers\/:providerKind$/,
+    text: ({ scope }) =>
+      `Read the API-key model provider connection ${scope} (for example OpenAI, Anthropic API, OpenRouter, AI gateway), without the key itself.`,
+  },
+  {
+    method: "PUT",
+    pattern: /\/model-providers\/:providerKind$/,
+    text: ({ scope }) =>
+      `Connect or replace an API-key model provider ${scope}. The key is stored encrypted and never shown again.`,
+  },
+  {
+    method: "DELETE",
+    pattern: /\/model-providers\/:providerKind$/,
+    text: ({ scope }) => `Remove an API-key model provider connection ${scope}.`,
+  },
+  {
+    method: "GET",
+    pattern: /\/model-providers\/:providerKind\/usage$/,
+    text: ({ scope }) => `Read Claude subscription usage ${scope}.`,
+  },
+  {
+    method: "POST",
+    pattern: /\/model-providers\/:providerKind\/usage\/refresh$/,
+    text: ({ scope }) => `Fetch fresh Claude subscription usage ${scope} from the provider.`,
+  },
+  {
+    method: "GET",
+    pattern: /\/model-providers\/:providerKind\/custom-models$/,
+    text: ({ scope }) => `List custom model ids added for a provider ${scope}.`,
+  },
+  {
+    method: "POST",
+    pattern: /\/model-providers\/:providerKind\/custom-models$/,
+    text: ({ scope }) =>
+      `Add a custom model id for a provider ${scope}, so it appears in the model picker.`,
+  },
+  {
+    method: "DELETE",
+    pattern: /\/model-providers\/:providerKind\/custom-models\/:customModelId$/,
+    text: () => "Remove a custom model id.",
+  },
+  {
+    method: "GET",
+    pattern: /\/codex\/overview$/,
+    text: () =>
+      "Codex overview for a workspace: connected accounts, which source it uses (organization or its own) and their status.",
+  },
+  {
+    method: "GET",
+    pattern: /\/(codex|supergrok)\/status$/,
+    text: ({ provider }) => `Whether ${provider} is connected and usable in this workspace.`,
+  },
+  {
+    method: "GET",
+    pattern: /\/codex\/usage$/,
+    text: () => "Codex usage across the workspace's accounts.",
+  },
+  {
+    method: "POST",
+    pattern: /\/codex\/usage\/refresh$/,
+    text: () => "Fetch fresh Codex usage for the workspace's accounts.",
+  },
+  {
+    method: "GET",
+    pattern: /\/codex\/source$/,
+    text: () =>
+      "Whether this workspace's Codex chats use the organization's shared accounts or only the workspace's own.",
+  },
+  {
+    method: "PATCH",
+    pattern: /\/codex\/source$/,
+    text: () =>
+      "Switch this workspace between the organization's shared Codex accounts and its own Codex accounts.",
+  },
+  {
+    method: "DELETE",
+    pattern: /\/workspaces\/:workspaceId\/codex$/,
+    text: () => "Disconnect the workspace's own Codex sign-in (legacy single-account route).",
+  },
+  {
+    method: "POST",
+    pattern: /\/codex\/apps$/,
+    text: () =>
+      "Choose which Codex account provides Codex Apps (connected ChatGPT apps) in this workspace.",
+  },
+  {
+    method: "DELETE",
+    pattern: /\/codex\/apps$/,
+    text: () => "Turn Codex Apps off for this workspace.",
+  },
+  {
+    method: "POST",
+    pattern: /\/codex\/accounts\/:accountId\/reset-credits\/prepare$/,
+    text: () =>
+      "Prepare redeeming one ChatGPT usage-limit reset for a Codex account, with a new attemptId and the reset's creditId from the account's overview. Returns a confirmation token for redeem. A workspace's own account is redeemed by the person who connected it; an organization account by an organization owner or admin, even if no workspace uses it. Redeeming is irreversible and uses up the reset: only do it when the person asked for it.",
+  },
+  {
+    method: "POST",
+    pattern: /\/codex\/accounts\/:accountId\/reset-credits\/redeem$/,
+    text: () =>
+      "Redeem a prepared ChatGPT usage-limit reset: the same attemptId and creditId, the confirmationToken from prepare, and confirmation set to REDEEM_USAGE_LIMIT_RESET. Irreversible: only when the person asked for it. If the outcome is unknown, prepare and redeem again with the same attemptId; never start a new attempt for the same reset.",
+  },
+  {
+    method: "GET",
+    pattern: /\/organizations\/:organizationId\/codex\/accounts\/:accountId\/overview$/,
+    text: () =>
+      "Read one organization Codex (ChatGPT) account's live usage and its usage-limit resets (each with its expiry), even when no workspace uses the account. Redeem one with reset-credits/prepare and then redeem.",
+  },
+  {
+    method: "GET",
+    pattern: /\/sessions\/:sessionId\/codex-accounts$/,
+    text: () => "List the Codex accounts a session may be pinned to.",
+  },
+  {
+    method: "POST",
+    pattern: /\/sessions\/:sessionId\/codex-account$/,
+    text: () =>
+      "Pin a session to one Codex account, or clear the pin so the workspace's picking rule applies again.",
+  },
+  {
+    method: "POST",
+    pattern: /\/sessions\/:sessionId\/realtime\/supergrok$/,
+    text: () => "Start a SuperGrok realtime voice connection for a session.",
+  },
+];
+
+/** Actions that must carry a description (subscription and model settings). */
+export const DESCRIBED_ACTION_PATH =
+  /\/(codex|claude|supergrok)(\/|$)|\/model-providers\/|\/model-connections\/|\/model-account-settings(\/|$)/;
+
+function scopeOf(path: string): string {
+  return path.startsWith("/v1/organizations/") ? "for the organization" : "in a workspace";
+}
+
+function providerOf(path: string): string {
+  const match = path.match(/\/(codex|claude_subscription|claude|supergrok)(\/|$)/);
+  return match ? PROVIDERS[match[1]!]! : "subscription";
+}
+
+export function actionDescription(
+  entry: Pick<ActionCatalogEntry, "method" | "path">,
+): string | undefined {
+  const rule = RULES.find(
+    (candidate) => candidate.method === entry.method && candidate.pattern.test(entry.path),
+  );
+  return rule?.text({ provider: providerOf(entry.path), scope: scopeOf(entry.path) });
+}

package/src/mcp/action-schema-imports.gen.ts

@@ -0,0 +1,304 @@
+// Generated by scripts/public-api/action-catalog.ts. Do not edit.
+// Named imports keep unrelated response and tool validators out of the API graph.
+import { AcceptOrganizationInvitationRequest, AcceptOrganizationRecoveryCustodyRequest, AcknowledgeStreamRequest, ActivateCodexRealtimeConnectionRequest, ActivateCompanyProfileRevisionRequest, ActivatePreferenceRegistryRevisionRequest, ActivateWorkspaceInstructionPolicyRequest, AddDocumentRequest, AddWorkspaceMemberRequest, AgentInstructionReviewRequest, AgentLearningContext, ApiIntegrationOAuthStartRequest, AppendArchivedSessionEventsRequest, ApplySessionGoalRevisionRequest, ApproveSlackUserLinkAccessRequest, ArtifactCatalogKind, AtlassianLifecycleActionRequest, AttachViewerRequest, BeginSessionRealtimeRequest, BrowserActionRequest, BrowserDomReadRequest, BrowserDownloadSaveRequest, BrowserOpenTargetRequest, BrowserSessionAttachmentRequest, BrowserSessionLifecycleRequest, ChangeMachineAudienceRequest, ChangePreferenceRegistryScopeRequest, ClaudeSubscriptionOAuthCompleteRequest, ClaudeSubscriptionOAuthStartRequest, ClaudeSubscriptionSetupTokenRequest, ClearWorkspaceAllowanceRequest, CodexAppsDesignationRequest, CodexRealtimeWebrtcRequest, CodexSourceRequest, CompanyProfileDiffRequest, ComputerActionRequest, ComputerNativeCallRequest, ComputerSessionAttachmentRequest, ComputerSessionLifecycleRequest, ConfigureOrganizationRecoveryPolicyRequest, CorrectPreferenceRegistryRequest, CreateAdditionalOrganizationRequest, CreateApiKeyRequest, CreateAutomationSourceRequest, CreateAutomationTriggerRequest, CreateBillingPortalRequest, CreateBrowserIdentityRequest, CreateBrowserSessionRequest, CreateCapabilityCatalogItemRequest, CreateChannelRequest, CreateCheckoutRequest, CreateComputerSessionRequest, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFeedbackRequest, CreateFileUploadRequest, CreateInteractionInterventionRequest, CreateKnowledgeDropRequest, CreateNetworkRouteRequest, CreateOrganizationApiKeyRequest, CreateOrganizationInvitationRequest, CreateOrganizationProviderCustomModelRequest, CreateOrganizationRequest, CreateOrganizationServiceAccountRequest, CreateOrganizationWebhookRequest, CreateOrganizationWorkspaceRequest, CreatePersonalApiKeyRequest, CreatePrReviewAppRegistrationRequest, CreatePrReviewRepositoryBindingRequest, CreatePreferenceRegistryProposalRequest, CreateRigRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSiteAuthConnectionRequest, CreateWorkspaceArtifactRequest, CreateWorkspaceGatewayCustomModelRequest, CreateWorkspaceInstructionPolicyDraftRequest, CreateWorkspaceInstructionPolicyOnboardingProposalRequest, CreateWorkspaceOpenRouterCustomModelRequest, CreateWorkspaceOpperCustomModelRequest, CreateWorkspaceRequest, CreateWorkspaceWebhookRequest, DeactivatePreferenceRegistryRequest, DeleteOrganizationProviderCustomModelRequest, DeleteSessionQueueItemRequest, DeleteWorkspaceGatewayCustomModelRequest, DeleteWorkspaceOpenRouterCustomModelRequest, DeleteWorkspaceOpperCustomModelRequest, DeviceEnrollmentApproveRequest, DisableOrganizationRecoveryPolicyRequest, EditSessionQueueItemRequest, EnableCapabilityRequest, EndSessionRealtimeRequest, EnsureWorkspaceRequest, ExternalAuthInteractiveRequest, ExternalAuthRunRequest, FikenInstallRequest, FikenOAuthStartRequest, FileListRequest, ForkSessionRequest, FsDeleteRequest, FsListBatchRequest, FsListRequest, FsMkdirRequest, FsMoveRequest, FsReadRequest, FsWriteRequest, GatewayRealtimeConnectRequest, GetMyUsageRequest, GetUsageRequest, GitDiffRequest, GitLogRequest, GitReadBatchRequest, GitShowRequest, GitStatusRequest, GrantSessionAdminAccessRequest, GrantWorkspaceCreditsRequest, ImportArchivedSessionRequest, ImportLegacyWorkspaceInstructionPolicyDraftRequest, InboxItem, InboxSettings, InsightsRange, InstallApiIntegrationRequest, InstallLibrarySkillRequest, InstallPluginRequest, InstallSkillRequest, IssueUserResourceGrantRequest, KnowledgeEntryBatchReviewRequest, KnowledgeEntryListRequest, KnowledgeEntryRestoreRequest, KnowledgeEntryReviewRequest, KnowledgeEntrySaveRequest, KnowledgeReviewBatchListRequest, KnowledgeSavePreparationRequest, MachineAudiencePreviewRequest, McpConnectionDecision, MemberNotificationsSetting, MemorySlackPublicationActionRequest, MintEnrollTokenRequest, ModelConnectionAccessPolicy, MoveDocumentRequest, MoveSessionQueueItemRequest, MutateIntegrationFacetRequest, OAuthStartRequest, OpenGeniSlackBotInstallRequest, OpenMachinePrivacySettingsRequest, OrganizationModelProviderKind, OrganizationRecoveryOperationCommandRequest, OrganizationUsagePeriod, PrepareSlackUserLinkAccessRequest, PreviewApiIntegrationRequest, PreviewPluginRequest, PreviewSkillImportRequest, ProposeRigChangeRequest, PtyCloseRequest, PtyOpenRequest, PtyResizeRequest, PtyWriteRequest, PublishBrowserRevisionRequest, PublishSandboxFileArtifactRequest, PublishWorkspaceArtifactVersionRequest, PutOrganizationCredentialProviderRequest, PutOrganizationWorkspaceMemberRequest, PutWorkspaceCredentialProviderRequest, ReclassifyDocumentAuthorityRequest, RefreshScheduledTaskAccessRequest, RejectPreferenceRegistryProposalRequest, RejectSessionGoalRevisionRequest, RemoveEnrollmentRequest, RenewSessionRealtimeRequest, ReorderChannelsRequest, ReportAuthRunRequest, ResolveInteractionInterventionRequest, RetryOrganizationUserSetupDeliveryRequest, RevokeOrganizationInvitationRequest, RevokeOrganizationModelProviderConnectionRequest, RevokeOrganizationWorkspaceMemberRequest, RollbackCompanyProfileRequest, RollbackSessionGoalRevisionRequest, RollbackWorkspaceArtifactRequest, RollbackWorkspaceInstructionPolicyRequest, RotateSessionMcpCredentialsRequest, RunDocumentDefaultCollectionBackfillRequest, SandboxRecoveryRequest, SaveAtlassianSourcesRequest, SaveComposerDraftRequest, SaveNewSessionDraftRequest, SessionCodexAccountPinRequest, SessionControlRequest, SessionHumanInputRequest, SessionInboxMute, SessionMessageSearchRequest, SessionRetryRequest, SessionScopeSubjectId, SessionStatus, SessionVisibility, SetMemberAllowanceRequest, SetSessionModelAccountChoiceRequest, SetSessionUsageLimitRequest, SetWorkspaceAllowanceRequest, SetWorkspaceArtifactStatusRequest, SetWorkspaceDefaultRigRequest, SiteDataCollectionDefinitionRequest, SiteDataImportRequest, SiteDataQueryRequest, SiteDataWriteRequest, SiteLimitProfile, SitePublishWarningFix, SiteSqlExportFormat, SiteSqlImportRequest, SiteSqlMigrationRequest, SiteSqlQueryDefinitionRequest, SiteSqlRunRequest, SiteSqlSettingsRequest, SiteSqlStatementRequest, SiteTakedownRequest, SlackUserLinkAccessMutationRequest, SocialOAuthStartRequest, StartAuthRunRequest, StartOrganizationRecoveryOperationRequest, SteerSessionQueueItemRequest, SubmitComposerDraftRequest, SubscriptionAccountRenameRequest, SubscriptionAccountToggleRequest, SubscriptionConnectPollRequest, SubscriptionRotationSettingsRequest, SupergrokConnectStartRequest, SupersedePreferenceRegistryRequest, SwapActiveSandboxRequest, SyncSessionRealtimeLedgerRequest, TerminalExecRequest, TriggerAutomationManuallyRequest, UninstallApiIntegrationRequest, UninstallPluginRequest, UninstallSkillRequest, UpdateAutomationSourceRequest, UpdateAutomationTriggerRequest, UpdateBrowserIdentityRequest, UpdateChannelRequest, UpdateCompanyProfileAgentPolicyRequest, UpdateCompanyProfileRequest, UpdateConnectionRequest, UpdateConnectorToolPermissionsRequest, UpdateGitHubActionPolicyRequest, UpdateMachineOperationPolicyRequest, UpdateMemorySlackPublicationConfigurationRequest, UpdateModelAccountPreferencesRequest, UpdateNetworkRouteRequest, UpdateOpenGeniSlackBotOrganizationAccess, UpdateOrganizationAgentAdminAccessRequest, UpdateOrganizationApiKeyRequest, UpdateOrganizationIntegrationPolicyRequest, UpdateOrganizationMcpConnectionRequest, UpdateOrganizationMemberRequest, UpdateOrganizationModelAccountSettingsRequest, UpdateOrganizationModelDefaultsRequest, UpdateOrganizationNameRequest, UpdateOrganizationPrivacySettingsRequest, UpdateOrganizationPrivateSessionSettingsRequest, UpdateOrganizationRetentionPolicyRequest, UpdateOrganizationServiceAccountRequest, UpdateOrganizationWebhookRequest, UpdateOrganizationWorkspaceRequest, UpdatePrReviewAppRegistrationRequest, UpdatePrReviewRepositoryBindingRequest, UpdateRigRequest, UpdateScheduledTaskRequest, UpdateSessionAgentRequest, UpdateSessionArchiveRequest, UpdateSessionAttentionRequest, UpdateSessionChannelRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpToolPermissionsRequest, UpdateSessionPinRequest, UpdateSessionRequest, UpdateSessionRetentionRequest, UpdateSessionSkillsRequest, UpdateSessionToolPolicyRequest, UpdateSessionVisibilityRequest, UpdateSiteAuthConnectionRequest, UpdateSlackChannelRoutesRequest, UpdateVideoGenerationPolicyRequest, UpdateWorkspaceArtifactVisibilityRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelAccountSettingsRequest, UpdateWorkspaceModelPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, UpdateWorkspaceWebhookRequest, UpsertIntegrationFacetRequest, UpsertOrganizationModelProviderConnectionRequest, UpsertSitePublicationRequest, VerifyAuthRunRequest, ViewerHeartbeatRequest, WorkClaimSubjectType, WorkspaceInstructionPolicyDiffRequest, WorkspacePauseTimerRequest } from "@opengeni/contracts";
+
+export const ACTION_REQUEST_SCHEMAS: Readonly<Record<string, unknown>> = {
+  AcceptOrganizationInvitationRequest,
+  AcceptOrganizationRecoveryCustodyRequest,
+  AcknowledgeStreamRequest,
+  ActivateCodexRealtimeConnectionRequest,
+  ActivateCompanyProfileRevisionRequest,
+  ActivatePreferenceRegistryRevisionRequest,
+  ActivateWorkspaceInstructionPolicyRequest,
+  AddDocumentRequest,
+  AddWorkspaceMemberRequest,
+  AgentInstructionReviewRequest,
+  AgentLearningContext,
+  ApiIntegrationOAuthStartRequest,
+  AppendArchivedSessionEventsRequest,
+  ApplySessionGoalRevisionRequest,
+  ApproveSlackUserLinkAccessRequest,
+  ArtifactCatalogKind,
+  AtlassianLifecycleActionRequest,
+  AttachViewerRequest,
+  BeginSessionRealtimeRequest,
+  BrowserActionRequest,
+  BrowserDomReadRequest,
+  BrowserDownloadSaveRequest,
+  BrowserOpenTargetRequest,
+  BrowserSessionAttachmentRequest,
+  BrowserSessionLifecycleRequest,
+  ChangeMachineAudienceRequest,
+  ChangePreferenceRegistryScopeRequest,
+  ClaudeSubscriptionOAuthCompleteRequest,
+  ClaudeSubscriptionOAuthStartRequest,
+  ClaudeSubscriptionSetupTokenRequest,
+  ClearWorkspaceAllowanceRequest,
+  CodexAppsDesignationRequest,
+  CodexRealtimeWebrtcRequest,
+  CodexSourceRequest,
+  CompanyProfileDiffRequest,
+  ComputerActionRequest,
+  ComputerNativeCallRequest,
+  ComputerSessionAttachmentRequest,
+  ComputerSessionLifecycleRequest,
+  ConfigureOrganizationRecoveryPolicyRequest,
+  CorrectPreferenceRegistryRequest,
+  CreateAdditionalOrganizationRequest,
+  CreateApiKeyRequest,
+  CreateAutomationSourceRequest,
+  CreateAutomationTriggerRequest,
+  CreateBillingPortalRequest,
+  CreateBrowserIdentityRequest,
+  CreateBrowserSessionRequest,
+  CreateCapabilityCatalogItemRequest,
+  CreateChannelRequest,
+  CreateCheckoutRequest,
+  CreateComputerSessionRequest,
+  CreateConnectionRequest,
+  CreateDocumentBaseRequest,
+  CreateFeedbackRequest,
+  CreateFileUploadRequest,
+  CreateInteractionInterventionRequest,
+  CreateKnowledgeDropRequest,
+  CreateNetworkRouteRequest,
+  CreateOrganizationApiKeyRequest,
+  CreateOrganizationInvitationRequest,
+  CreateOrganizationProviderCustomModelRequest,
+  CreateOrganizationRequest,
+  CreateOrganizationServiceAccountRequest,
+  CreateOrganizationWebhookRequest,
+  CreateOrganizationWorkspaceRequest,
+  CreatePersonalApiKeyRequest,
+  CreatePrReviewAppRegistrationRequest,
+  CreatePrReviewRepositoryBindingRequest,
+  CreatePreferenceRegistryProposalRequest,
+  CreateRigRequest,
+  CreateScheduledTaskRequest,
+  CreateSessionRequest,
+  CreateSiteAuthConnectionRequest,
+  CreateWorkspaceArtifactRequest,
+  CreateWorkspaceGatewayCustomModelRequest,
+  CreateWorkspaceInstructionPolicyDraftRequest,
+  CreateWorkspaceInstructionPolicyOnboardingProposalRequest,
+  CreateWorkspaceOpenRouterCustomModelRequest,
+  CreateWorkspaceOpperCustomModelRequest,
+  CreateWorkspaceRequest,
+  CreateWorkspaceWebhookRequest,
+  DeactivatePreferenceRegistryRequest,
+  DeleteOrganizationProviderCustomModelRequest,
+  DeleteSessionQueueItemRequest,
+  DeleteWorkspaceGatewayCustomModelRequest,
+  DeleteWorkspaceOpenRouterCustomModelRequest,
+  DeleteWorkspaceOpperCustomModelRequest,
+  DeviceEnrollmentApproveRequest,
+  DisableOrganizationRecoveryPolicyRequest,
+  EditSessionQueueItemRequest,
+  EnableCapabilityRequest,
+  EndSessionRealtimeRequest,
+  EnsureWorkspaceRequest,
+  ExternalAuthInteractiveRequest,
+  ExternalAuthRunRequest,
+  FikenInstallRequest,
+  FikenOAuthStartRequest,
+  FileListRequest,
+  ForkSessionRequest,
+  FsDeleteRequest,
+  FsListBatchRequest,
+  FsListRequest,
+  FsMkdirRequest,
+  FsMoveRequest,
+  FsReadRequest,
+  FsWriteRequest,
+  GatewayRealtimeConnectRequest,
+  GetMyUsageRequest,
+  GetUsageRequest,
+  GitDiffRequest,
+  GitLogRequest,
+  GitReadBatchRequest,
+  GitShowRequest,
+  GitStatusRequest,
+  GrantSessionAdminAccessRequest,
+  GrantWorkspaceCreditsRequest,
+  ImportArchivedSessionRequest,
+  ImportLegacyWorkspaceInstructionPolicyDraftRequest,
+  InboxItem,
+  InboxSettings,
+  InsightsRange,
+  InstallApiIntegrationRequest,
+  InstallLibrarySkillRequest,
+  InstallPluginRequest,
+  InstallSkillRequest,
+  IssueUserResourceGrantRequest,
+  KnowledgeEntryBatchReviewRequest,
+  KnowledgeEntryListRequest,
+  KnowledgeEntryRestoreRequest,
+  KnowledgeEntryReviewRequest,
+  KnowledgeEntrySaveRequest,
+  KnowledgeReviewBatchListRequest,
+  KnowledgeSavePreparationRequest,
+  MachineAudiencePreviewRequest,
+  McpConnectionDecision,
+  MemberNotificationsSetting,
+  MemorySlackPublicationActionRequest,
+  MintEnrollTokenRequest,
+  ModelConnectionAccessPolicy,
+  MoveDocumentRequest,
+  MoveSessionQueueItemRequest,
+  MutateIntegrationFacetRequest,
+  OAuthStartRequest,
+  OpenGeniSlackBotInstallRequest,
+  OpenMachinePrivacySettingsRequest,
+  OrganizationModelProviderKind,
+  OrganizationRecoveryOperationCommandRequest,
+  OrganizationUsagePeriod,
+  PrepareSlackUserLinkAccessRequest,
+  PreviewApiIntegrationRequest,
+  PreviewPluginRequest,
+  PreviewSkillImportRequest,
+  ProposeRigChangeRequest,
+  PtyCloseRequest,
+  PtyOpenRequest,
+  PtyResizeRequest,
+  PtyWriteRequest,
+  PublishBrowserRevisionRequest,
+  PublishSandboxFileArtifactRequest,
+  PublishWorkspaceArtifactVersionRequest,
+  PutOrganizationCredentialProviderRequest,
+  PutOrganizationWorkspaceMemberRequest,
+  PutWorkspaceCredentialProviderRequest,
+  ReclassifyDocumentAuthorityRequest,
+  RefreshScheduledTaskAccessRequest,
+  RejectPreferenceRegistryProposalRequest,
+  RejectSessionGoalRevisionRequest,
+  RemoveEnrollmentRequest,
+  RenewSessionRealtimeRequest,
+  ReorderChannelsRequest,
+  ReportAuthRunRequest,
+  ResolveInteractionInterventionRequest,
+  RetryOrganizationUserSetupDeliveryRequest,
+  RevokeOrganizationInvitationRequest,
+  RevokeOrganizationModelProviderConnectionRequest,
+  RevokeOrganizationWorkspaceMemberRequest,
+  RollbackCompanyProfileRequest,
+  RollbackSessionGoalRevisionRequest,
+  RollbackWorkspaceArtifactRequest,
+  RollbackWorkspaceInstructionPolicyRequest,
+  RotateSessionMcpCredentialsRequest,
+  RunDocumentDefaultCollectionBackfillRequest,
+  SandboxRecoveryRequest,
+  SaveAtlassianSourcesRequest,
+  SaveComposerDraftRequest,
+  SaveNewSessionDraftRequest,
+  SessionCodexAccountPinRequest,
+  SessionControlRequest,
+  SessionHumanInputRequest,
+  SessionInboxMute,
+  SessionMessageSearchRequest,
+  SessionRetryRequest,
+  SessionScopeSubjectId,
+  SessionStatus,
+  SessionVisibility,
+  SetMemberAllowanceRequest,
+  SetSessionModelAccountChoiceRequest,
+  SetSessionUsageLimitRequest,
+  SetWorkspaceAllowanceRequest,
+  SetWorkspaceArtifactStatusRequest,
+  SetWorkspaceDefaultRigRequest,
+  SiteDataCollectionDefinitionRequest,
+  SiteDataImportRequest,
+  SiteDataQueryRequest,
+  SiteDataWriteRequest,
+  SiteLimitProfile,
+  SitePublishWarningFix,
+  SiteSqlExportFormat,
+  SiteSqlImportRequest,
+  SiteSqlMigrationRequest,
+  SiteSqlQueryDefinitionRequest,
+  SiteSqlRunRequest,
+  SiteSqlSettingsRequest,
+  SiteSqlStatementRequest,
+  SiteTakedownRequest,
+  SlackUserLinkAccessMutationRequest,
+  SocialOAuthStartRequest,
+  StartAuthRunRequest,
+  StartOrganizationRecoveryOperationRequest,
+  SteerSessionQueueItemRequest,
+  SubmitComposerDraftRequest,
+  SubscriptionAccountRenameRequest,
+  SubscriptionAccountToggleRequest,
+  SubscriptionConnectPollRequest,
+  SubscriptionRotationSettingsRequest,
+  SupergrokConnectStartRequest,
+  SupersedePreferenceRegistryRequest,
+  SwapActiveSandboxRequest,
+  SyncSessionRealtimeLedgerRequest,
+  TerminalExecRequest,
+  TriggerAutomationManuallyRequest,
+  UninstallApiIntegrationRequest,
+  UninstallPluginRequest,
+  UninstallSkillRequest,
+  UpdateAutomationSourceRequest,
+  UpdateAutomationTriggerRequest,
+  UpdateBrowserIdentityRequest,
+  UpdateChannelRequest,
+  UpdateCompanyProfileAgentPolicyRequest,
+  UpdateCompanyProfileRequest,
+  UpdateConnectionRequest,
+  UpdateConnectorToolPermissionsRequest,
+  UpdateGitHubActionPolicyRequest,
+  UpdateMachineOperationPolicyRequest,
+  UpdateMemorySlackPublicationConfigurationRequest,
+  UpdateModelAccountPreferencesRequest,
+  UpdateNetworkRouteRequest,
+  UpdateOpenGeniSlackBotOrganizationAccess,
+  UpdateOrganizationAgentAdminAccessRequest,
+  UpdateOrganizationApiKeyRequest,
+  UpdateOrganizationIntegrationPolicyRequest,
+  UpdateOrganizationMcpConnectionRequest,
+  UpdateOrganizationMemberRequest,
+  UpdateOrganizationModelAccountSettingsRequest,
+  UpdateOrganizationModelDefaultsRequest,
+  UpdateOrganizationNameRequest,
+  UpdateOrganizationPrivacySettingsRequest,
+  UpdateOrganizationPrivateSessionSettingsRequest,
+  UpdateOrganizationRetentionPolicyRequest,
+  UpdateOrganizationServiceAccountRequest,
+  UpdateOrganizationWebhookRequest,
+  UpdateOrganizationWorkspaceRequest,
+  UpdatePrReviewAppRegistrationRequest,
+  UpdatePrReviewRepositoryBindingRequest,
+  UpdateRigRequest,
+  UpdateScheduledTaskRequest,
+  UpdateSessionAgentRequest,
+  UpdateSessionArchiveRequest,
+  UpdateSessionAttentionRequest,
+  UpdateSessionChannelRequest,
+  UpdateSessionGoalRequest,
+  UpdateSessionMcpApprovalPolicyRequest,
+  UpdateSessionMcpToolPermissionsRequest,
+  UpdateSessionPinRequest,
+  UpdateSessionRequest,
+  UpdateSessionRetentionRequest,
+  UpdateSessionSkillsRequest,
+  UpdateSessionToolPolicyRequest,
+  UpdateSessionVisibilityRequest,
+  UpdateSiteAuthConnectionRequest,
+  UpdateSlackChannelRoutesRequest,
+  UpdateVideoGenerationPolicyRequest,
+  UpdateWorkspaceArtifactVisibilityRequest,
+  UpdateWorkspaceMemberRequest,
+  UpdateWorkspaceModelAccountSettingsRequest,
+  UpdateWorkspaceModelPolicyRequest,
+  UpdateWorkspaceRequest,
+  UpdateWorkspaceSettingsRequest,
+  UpdateWorkspaceWebhookRequest,
+  UpsertIntegrationFacetRequest,
+  UpsertOrganizationModelProviderConnectionRequest,
+  UpsertSitePublicationRequest,
+  VerifyAuthRunRequest,
+  ViewerHeartbeatRequest,
+  WorkClaimSubjectType,
+  WorkspaceInstructionPolicyDiffRequest,
+  WorkspacePauseTimerRequest,
+};

package/src/mcp/capability-account-readiness.ts

@@ -0,0 +1,17 @@
+import type { McpConnectionAccountBinding } from "@opengeni/contracts";
+
+/** Canonical readiness comes only from routes present in this exact attempt,
+ * joined to this turn's accepted bindings. It never grants account access. */
+export function capabilityAccountReadiness(
+  availableRoutes: Iterable<string>,
+  bindings: readonly McpConnectionAccountBinding[] | null,
+) {
+  const available = new Set(availableRoutes);
+  const actualRoutes = new Set(available);
+  const accepted = new Set<string>();
+  for (const binding of bindings ?? []) {
+    accepted.add(binding.canonicalServerId);
+    if (actualRoutes.has(binding.serverId)) available.add(binding.canonicalServerId);
+  }
+  return { available, accepted };
+}

package/src/mcp/child-read-evidence.ts

@@ -0,0 +1,19 @@
+/** Select only whole items that actually survived the model-facing envelope.
+ * A cursor is a position, never proof that preceding content was consumed. */
+export function completeChildReadSequences(page: {
+  view: string;
+  sourceExact: boolean;
+  events: readonly ({ sequence: number } & Record<string, unknown>)[];
+}): number[] {
+  if (!page.sourceExact || !["conversation", "results"].includes(page.view)) return [];
+  return page.events
+    .filter((event) => {
+      if (event.sourceOmitted) return false;
+      if (event.fragment === undefined) return true;
+      if (!event.fragment || typeof event.fragment !== "object") return false;
+      const fragment = event.fragment as Record<string, unknown>;
+      // A final fragment cannot prove earlier fragments were ever read.
+      return fragment.offset === 0 && fragment.complete === true;
+    })
+    .map((event) => event.sequence);
+}