@opengeni/api-router 3.0.1 → 4.0.0

package/dist/connection-ownership.d.ts

@@ -20,8 +20,7 @@ export declare function personalOnlyConnectionPrincipalMessage(label: string): s
  * rejects every reserved machine-subject namespace as defence-in-depth. The
  * sibling guards a self-service authority surface where the caller claims to
  * *be* the owner (403 "not you"), while this one rejects an ownership *value*
- * that is unavailable to the caller, alongside `assertOwnershipAllowed`'s
- * existing 422 convention.
+ * that is unavailable to the caller (422).
  */
 export declare function assertPersonalConnectionOwnerPrincipal(access: AccessGrantAuthorization, label?: string): void;
 /** The same fence expressed for a flow that resolves ownership after admission. */

package/dist/fatal-process-boundary.d.ts

@@ -2,7 +2,7 @@ import type { Observability } from "@opengeni/observability";
 export type ApiFatalEvent = "startup_failure" | "unhandled_rejection" | "uncaught_exception";
 export type ApiFatalPhase = "startup" | "running";
 export type ApiFatalReasonKind = "bigint" | "boolean" | "error" | "function" | "null" | "number" | "object" | "string" | "symbol" | "undefined";
-type ApiFatalObservability = Pick<Observability, "error" | "flush" | "startSpan">;
+type ApiFatalObservability = Pick<Observability, "error" | "flush" | "startSpan"> & Partial<Pick<Observability, "recordFailureDiagnostic">>;
 type ApiFatalProcess = {
     on: (event: "unhandledRejection" | "uncaughtException", listener: (reason: unknown) => void) => void;
     off: (event: "unhandledRejection" | "uncaughtException", listener: (reason: unknown) => void) => void;

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-AJ62T5QN.js";
+} from "./chunk-E7TZFJ65.js";
 
 // src/index.ts
 import { scheduledTaskKnowledgeSource } from "@opengeni/contracts";
@@ -23,6 +23,7 @@ import {
 } from "@opengeni/config";
 import {
   assertRuntimeDatabasePosture,
+  isRetryableRuntimeDatabaseStartupError,
   createDb,
   markSessionWorkflowWakeDelivered,
   runtimeDatabaseReadyCheck
@@ -33,7 +34,6 @@ import {
   logStartupDependencyRetry
 } from "@opengeni/observability";
 import { createObjectStorage } from "@opengeni/storage";
-import { createNativeRemoteMcpCredentialsPort } from "@opengeni/core/remote-mcp-credentials";
 import { isArtifactRuntimeConfigured } from "@opengeni/artifact-tool/runtime/development";
 import {
   resolveCatalogSettings,
@@ -1286,6 +1286,7 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink,
+  recordNativeDocumentInspection,
   dbSql,
   withRlsContext
 } from "@opengeni/db";
@@ -2297,6 +2298,11 @@ async function createStandaloneEditableArtifactApplication(input) {
       touch: async ({ scope, sessionId, artifactId }) => await touchEditableArtifactSessionLink(input.db, scope, sessionId, artifactId)
     }),
     inspector: kernel,
+    recordInspection: async (inspection) => {
+      if (inspection.actor.kind !== "agent")
+        throw new Error("Inspection proof requires an agent attempt");
+      return recordNativeDocumentInspection(input.db, { ...inspection, actor: inspection.actor });
+    },
     officeImports,
     workspaceFiles: new EditableArtifactWorkspaceFileAdapter({
       db: input.db,
@@ -2529,10 +2535,23 @@ function installApiFatalProcessBoundary(options = {}) {
     if (reporting) return;
     reporting = true;
     const diagnostic = apiFatalDiagnostic(event, phase, reason, correlationId);
-    const message = apiFatalMessage(diagnostic);
+    let message = apiFatalMessage(diagnostic);
     const activeObservability = observability;
     try {
       if (activeObservability) {
+        try {
+          const diagnosticId = activeObservability.recordFailureDiagnostic?.({
+            code: FATAL_ERROR_CODES[event],
+            stage: phase,
+            retryDecision: "not_retryable",
+            error: reason
+          });
+          if (diagnosticId) {
+            diagnostic.correlationId = diagnosticId;
+            message = apiFatalMessage(diagnostic);
+          }
+        } catch {
+        }
         let logged = false;
         try {
           activeObservability.error(message, diagnostic);
@@ -2839,7 +2858,7 @@ async function createTemporalWorkflowClient(settings, db) {
     startRigVerification: async ({ workspaceId, changeId, versionId, workflowId }) => {
       const targetId = changeId ?? versionId;
       if (!targetId) {
-        throw new Error("rig verification requires changeId or versionId");
+        throw new Error("sandbox environment verification requires changeId or versionId");
       }
       try {
         await temporal.workflow.start("rigVerificationWorkflow", {
@@ -2912,7 +2931,7 @@ async function startApi(options = {}) {
     await retryStartupDependency(
       "PostgreSQL runtime posture",
       () => assertRuntimeDatabasePosture(dbClient.db, databasePosture),
-      { ...retryOptions, onRetry }
+      { ...retryOptions, onRetry, shouldRetry: isRetryableRuntimeDatabaseStartupError }
     );
     const resolvedCatalog = await retryStartupDependency(
       "model catalog",
@@ -2967,7 +2986,6 @@ async function startApi(options = {}) {
   }
   const { app, routeDeps } = createAppComposition({
     settings,
-    connectionCredentials: createNativeRemoteMcpCredentialsPort(settings, dbClient.db),
     db: dbClient.db,
     bus,
     workflowClient: workflowClient.client,