@opengeni/api-router 3.0.1 → 4.0.0-canary.35625901699001

package/dist/admission-trace.d.ts

@@ -0,0 +1,8 @@
+import type { Observability } from "@opengeni/observability";
+/** Only committed, non-replayed server event identities mint admission anchors. */
+export declare function recordAcceptedApiAdmission(observability: Observability | undefined, result: {
+    accepted: {
+        id: string;
+    };
+    replay: boolean;
+}): void;

package/dist/app.js

@@ -24,7 +24,7 @@ import {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession,
   workspaceActorContextExempt
-} from "./chunk-AJ62T5QN.js";
+} from "./chunk-BBM4FSRT.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,
   allowedCorsOrigin,

package/dist/auth/managed-auth-attempt-context.d.ts

@@ -1,3 +1,5 @@
+export declare function runManagedSignInConnect<T>(intentId: string, action: () => T): T;
+export declare function currentManagedSignInConnectIntent(): string | undefined;
 export declare function runManagedAuthAttempt<T>(transactionId: string, providerId: "credential" | "google" | "github", action: () => T): T;
 export declare function runManagedAuthProvider<T>(providerId: "credential" | "google" | "github", action: () => T): T;
 export declare function runManagedAuthDiscardedProviderSession<T>(action: () => T): T;

package/dist/auth/managed-auth-session-adapter.d.ts

@@ -1,4 +1,6 @@
 import type { ManagedAuthSessionAdapter } from "@opengeni/core/managed-auth-session-sets";
 import type { Database } from "@opengeni/db";
 import type { ManagedAuth } from "@opengeni/core";
+/** Server-only proof for a product-owned endpoint; never returned to a browser. */
+export declare function managedAuthSelectedProofHeaders(auth: ManagedAuth, token: string): Promise<Headers>;
 export declare function createBetterAuthSessionAdapter(auth: ManagedAuth, db: Database): ManagedAuthSessionAdapter;

package/dist/auth/managed-auth.d.ts

@@ -15,6 +15,7 @@ export declare function managedAuthUserCreateAdmission(settings: Pick<Settings,
 } | false | undefined;
 /** Keep Better Auth password policy and storage format behind this boundary. */
 export declare function hashManagedAuthPassword(password: string): Promise<string>;
+export declare function verifyManagedAuthPassword(password: string, hash: string): Promise<boolean>;
 export declare function createManagedAuth(settings: Settings, db: Database, managedEmailTransport: ManagedEmailTransport): ManagedAuth | null;
 export type ManagedAuthOAuthAttempt = {
     transactionId: string;

package/dist/auth/managed-sign-in-notifications.d.ts

@@ -0,0 +1,4 @@
+import type { ManagedEmailTransport } from "@opengeni/core";
+import type { Database } from "@opengeni/db";
+export declare function deliverManagedSignInNotification(db: Database, transport: ManagedEmailTransport, operationId?: string | null): Promise<"sent" | "failed" | "outcome_unknown">;
+export declare function startManagedSignInNotificationDelivery(db: Database, transport: ManagedEmailTransport): void;