@opengeni/api-router 3.0.1 → 4.0.0

package/dist/integrations/atlassian.d.ts

@@ -1,3 +1,7 @@
+type AtlassianRequestAuthority = {
+    connectionUseContext?: Omit<AcceptedConnectionUseContext, "physicalRequestId" | "usePhase">;
+};
+import type { AcceptedConnectionUseContext } from "@opengeni/db";
 import { ExternalActorContinuation } from "@opengeni/contracts/external-identities";
 import type { AccessGrant, ScheduledTask } from "@opengeni/contracts";
 import { AtlassianOAuthStartResponse, type AtlassianDisconnectRequest, type AtlassianLifecycleActionRequest, type AtlassianOAuthStartRequest } from "@opengeni/contracts/atlassian";
@@ -22,7 +26,7 @@ export declare function completeAtlassianOAuthCallback(deps: ApiRouteDeps, input
     redirectTo: string;
     exactReturn?: boolean;
 }>;
-export declare function browseAtlassianSources(deps: ApiRouteDeps, input: {
+export declare function browseAtlassianSources(deps: ApiRouteDeps, input: AtlassianRequestAuthority & {
     workspaceId: string;
     subjectId: string;
     connectionId: string;
@@ -30,6 +34,7 @@ export declare function browseAtlassianSources(deps: ApiRouteDeps, input: {
     connection: {
         id: string;
         authorityId?: string | undefined;
+        connectionAuthorityGeneration?: number | undefined;
         accountId: string;
         workspaceId: string;
         subjectId: string | null;
@@ -63,7 +68,7 @@ export declare function browseAtlassianSources(deps: ApiRouteDeps, input: {
         webUrl: string;
     }[];
 }>;
-export declare function searchAtlassianLive(deps: ApiRouteDeps, input: {
+export declare function searchAtlassianLive(deps: ApiRouteDeps, input: AtlassianRequestAuthority & {
     workspaceId: string;
     subjectId: string;
     connectionId: string;
@@ -91,7 +96,7 @@ export declare function searchAtlassianLive(deps: ApiRouteDeps, input: {
     updatedAt: string | null;
     url: string;
 })[]>;
-export declare function getAtlassianLiveItem(deps: ApiRouteDeps, input: {
+export declare function getAtlassianLiveItem(deps: ApiRouteDeps, input: AtlassianRequestAuthority & {
     workspaceId: string;
     subjectId: string;
     connectionId: string;

package/dist/integrations/fiken.d.ts

@@ -6,7 +6,9 @@ import { type Database } from "@opengeni/db";
 import { type FetchLike } from "@opengeni/network";
 import { HTTPException } from "hono/http-exception";
 /** Shared native/embedded token adapter. Provider verification happens before
- * persistence; the caller reauthorizes inside its durable commit transaction. */
+ * persistence; the caller reauthorizes inside its durable commit transaction.
+ * That caller must acquire the organization policy fence for `fiken` BEFORE
+ * owner/tenancy locks and invoke the returned writer with that exact tx. */
 export declare function prepareFikenTokenInstall(deps: ApiRouteDeps, grant: Pick<AccessGrant, "accountId" | "workspaceId" | "subjectId">, raw: unknown, expectedVersion?: number): Promise<(tx: Database) => Promise<ConnectionMetadata>>;
 export type FikenOperation = "companies.list" | "contacts.list" | "contact.create" | "products.list" | "invoices.list" | "invoice.get" | "invoice_draft.create" | "bank_accounts.list" | "purchases.list" | "sales.list";
 export declare class FikenProviderError extends Error {

package/dist/integrations/github-lens-connect.d.ts

@@ -1,71 +1,13 @@
 import { type GitHubInstallationBindingProof } from "@opengeni/contracts";
 import { type ApiRouteDeps } from "@opengeni/core";
 import { type Database } from "@opengeni/db";
-export declare function requireGitHubLensConnect(deps: ApiRouteDeps, workspaceId: string): Promise<{
-    installation: {
-        skillWrites?: {
-            operationId: string;
-            skillId: string;
-            revisionId: string;
-            outcome: "applied" | "pending" | "preserved";
-            decision?: "rejected" | undefined;
-            pendingReason?: "approval" | "source_finalization" | undefined;
-            skillReview?: {
-                sourceOperationId: string;
-                skillId: string;
-                revisionId: string;
-                expectedRevisionId: string | null;
-                expectedScopeVersion: number;
-            } | undefined;
-            replayed: boolean;
-        }[] | undefined;
-        skillPublications?: {
-            operationId: string;
-            skillId: string;
-            revisionId: string;
-            outcome: "applied" | "pending" | "preserved";
-            decision?: "rejected" | undefined;
-            pendingReason?: "approval" | "source_finalization" | undefined;
-            skillReview?: {
-                sourceOperationId: string;
-                skillId: string;
-                revisionId: string;
-                expectedRevisionId: string | null;
-                expectedScopeVersion: number;
-            } | undefined;
-            replayed: boolean;
-            sourceOperationId: string;
-            activationEventId: string | null;
-        }[] | undefined;
-        skillReleases?: {
-            skillId: string;
-            revisionId: string | null;
-            disposition: "deactivated" | "inactive" | "preserved";
-            eventId: string | null;
-            warning: string | null;
-        }[] | undefined;
-        id: string;
-        accountId: string;
-        workspaceId: string;
-        packId: string;
-        status: "active" | "disabled" | "installing" | "needs_attention";
-        version: number;
-        manifestSnapshot: Record<string, unknown> | null;
-        manifestDigest: string | null;
-        selectedRigId: string | null;
-        installedBySubjectId: string | null;
-        metadata: Record<string, unknown>;
-        enabledAt: string;
-        updatedAt: string;
-    };
+export declare function requireGitHubLensConnect(deps: ApiRouteDeps): Promise<{
     template: {
-        id: string;
-        name: string;
-        description: string;
-        adapterId: string;
+        adapterId: "source-control.pull-request.v1";
         eventTypes: string[];
+        configuration: {};
         sessionTemplate: {
-            bundledSkillIds?: ("builtin:document-parsing" | "builtin:opengeni-documents" | "builtin:opengeni-presentations" | "builtin:opengeni-projects" | "builtin:opengeni-sites" | "builtin:opengeni-skills" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-video-generation" | "builtin:opengeni-visualize")[] | undefined;
+            bundledSkillIds?: ("builtin:document-parsing" | "builtin:opengeni-client" | "builtin:opengeni-documents" | "builtin:opengeni-help" | "builtin:opengeni-presentations" | "builtin:opengeni-projects" | "builtin:opengeni-sites" | "builtin:opengeni-skills" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-video-generation" | "builtin:opengeni-visualize")[] | undefined;
             prompt: string;
             instructions: string | null;
             resources: ({
@@ -104,7 +46,7 @@ export declare function requireGitHubLensConnect(deps: ApiRouteDeps, workspaceId
                 eager?: boolean | undefined;
                 optional?: boolean | undefined;
             }[];
-            firstPartyMcpTools: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+            firstPartyMcpTools: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
             firstPartyMcpPermissions: ("account:admin" | "account:read" | "api_keys:manage" | "artifacts:publish" | "artifacts:read" | "billing:manage" | "billing:read" | "capabilities:manage" | "codemode:call" | "connections:read" | "connections:write" | "documents:manage" | "documents:search" | "enrollments:manage" | "enrollments:read" | "environments:manage" | "environments:use" | "files:read" | "files:upload" | "files:write" | "github:manage" | "github:use" | "goals:manage" | "mcp_servers:attach" | "members:manage" | "rigs:manage" | "rigs:use" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "secrets:list" | "secrets:read" | "secrets:write" | "sessions:control" | "sessions:create" | "sessions:read" | "stream:acknowledge" | "stream:control" | "stream:view" | "terminal:attach" | "variable-sets:attach" | "variable-sets:list" | "variable-sets:manage" | "variable-sets:read" | "variable-sets:use" | "variable-sets:write" | "workspace:admin" | "workspace:create" | "workspace:read")[];
             model: string | null;
             reasoningEffort: "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh" | null;
@@ -112,8 +54,6 @@ export declare function requireGitHubLensConnect(deps: ApiRouteDeps, workspaceId
             policyRole: string | null;
             metadata: Record<string, unknown>;
         };
-        configuration: Record<string, unknown>;
-        connectionRequirement: string | null;
     };
 }>;
 /** Separate Lens registration/source/automation domain, not a repository-access

package/dist/integrations/google-drive.d.ts

@@ -57,6 +57,7 @@ export declare function browseGoogleDrive(deps: ApiRouteDeps, input: {
     connection: {
         id: string;
         authorityId?: string | undefined;
+        connectionAuthorityGeneration?: number | undefined;
         accountId: string;
         workspaceId: string;
         subjectId: string | null;
@@ -113,6 +114,7 @@ export declare function browseGoogleDriveFacetSource(deps: ApiRouteDeps, input:
     connection: {
         id: string;
         authorityId?: string | undefined;
+        connectionAuthorityGeneration?: number | undefined;
         accountId: string;
         workspaceId: string;
         subjectId: string | null;

package/dist/integrations/integration-commit-authority.d.ts

@@ -0,0 +1,13 @@
+import { type AccessGrant, type Permission } from "@opengeni/contracts";
+import { type Settings } from "@opengeni/config";
+import { type AccessGrantAuthorization } from "@opengeni/core";
+import type { Database } from "@opengeni/db";
+export type IntegrationCommitGrant = AccessGrant & {
+    authorizeCommit: (tx: Database) => Promise<void>;
+};
+/** Keep server-verified provenance alongside the grant across provider work.
+ * Call only inside the policy transaction, before persistence locks. */
+export declare function integrationCommitGrant(authorization: AccessGrantAuthorization, permissions: readonly Permission[], request: {
+    settings: Settings;
+    authorizationHeader?: string | undefined;
+}): Promise<IntegrationCommitGrant>;

package/dist/integrations/oauth-client.d.ts

@@ -1,8 +1,8 @@
 import { type Settings } from "@opengeni/config";
-import { OAuthStartResponse, type ConnectionOwnership, type OAuthStartRequest } from "@opengeni/contracts";
+import { OAuthStartResponse, type OAuthStartRequest } from "@opengeni/contracts";
 import { ExternalActorContinuation } from "@opengeni/contracts/external-identities";
 import type { Observability } from "@opengeni/observability";
-import { type Database } from "@opengeni/db";
+import { claimConnectOperation, finishConnectOperation, type Database } from "@opengeni/db";
 import { type McpAuthorizationServerMetadata } from "@opengeni/network";
 import { type OAuthProviderProfile } from "./oauth-profiles.js";
 export declare const oauthStateTtlMs: number;
@@ -16,6 +16,8 @@ type OAuthClientDeps = {
     oauthCallbackDeadlineMs?: number | undefined;
 };
 export type OAuthStartContext = {
+    /** Server-selected dedicated adapter identity; never copied from request metadata. */
+    integrationKey?: "gmail" | "slack-personal";
     connectAttemptId?: string;
     externalContinuation?: ExternalActorContinuation;
     accountId: string;
@@ -38,16 +40,122 @@ type AuthorizationServerMetadata = McpAuthorizationServerMetadata;
 export declare const OAUTH_START_DEADLINE_MS = 15000;
 export declare const OAUTH_CALLBACK_DEADLINE_MS = 30000;
 export type OAuthStartStage = "connection_lookup" | "mcp_challenge" | "protected_resource_metadata" | "authorization_server_metadata" | "client_registration";
+/** Policy is the outermost lock. Receipt replay still runs normal authorization,
+ * but the DB calls authorizeAcquisition only for uncommitted progress. Provider
+ * requests must happen after this transaction, never inside either wrapper. */
+export declare function claimOAuthAcquisition(db: Database, scope: Parameters<typeof claimConnectOperation>[1], input: Parameters<typeof claimConnectOperation>[2], integrationKey: string | null, acquiring?: boolean): Promise<{
+    status: "claimed";
+    attempt: import("@opengeni/contracts/connect").ConnectAttempt;
+} | {
+    status: "replayed";
+    attempt: import("@opengeni/contracts/connect").ConnectAttempt;
+}>;
+type IntegrationSourceSelection = Record<string, unknown> & {
+    id: string;
+    syncEnabled: boolean;
+    readPolicy: "allow" | "ask" | "block";
+};
+/** Compare server-bound selections, not provider classification. Removing a
+ * source, disabling sync, or narrowing its read permission acquires no authority.
+ * Generation/timestamp bookkeeping does not turn an unchanged save into setup. */
+export declare function integrationSourceSelectionRequiresAcquisition(previous: readonly IntegrationSourceSelection[], requested: readonly IntegrationSourceSelection[]): boolean;
+export declare function finishOAuthAcquisition(db: Database, scope: Parameters<typeof finishConnectOperation>[1], input: Parameters<typeof finishConnectOperation>[2], integrationKey: string | null): Promise<{
+    id: string;
+    workspaceId: string;
+    providerId: string;
+    ownership: "personal" | "workspace";
+    revision: number;
+    state: "account_selection" | "cancelled" | "complete" | "connected_but_incomplete" | "credential_input" | "expired" | "failed" | "installing" | "preview" | "provider_wait" | "ready" | "requires_user_action" | "resource_selection" | "uncertain";
+    credentialsCommitted: boolean;
+    integrationInstalled: boolean;
+    completionRequirement: "connection" | "integration" | "provider_setup";
+    nextAction: {
+        type: "authorize";
+        url: string;
+    } | {
+        type: "credentials";
+        fields: {
+            name: string;
+            label: string;
+            required: boolean;
+            secret: boolean;
+            options?: {
+                value: string;
+                label: string;
+            }[] | undefined;
+        }[];
+    } | {
+        type: "wait";
+        pollAfterMs: number;
+        userCode?: string | undefined;
+        verificationUrl?: string | undefined;
+    } | {
+        type: "select_account";
+        accounts: {
+            id: string;
+            providerId: string;
+            version?: number | undefined;
+            label: string;
+            ownership: "personal" | "workspace";
+            status: "auth_needed" | "connected" | "disabled";
+        }[];
+    } | {
+        type: "select_resources";
+        resources: {
+            id: string;
+            label: string;
+            kind: string;
+        }[];
+        cursor?: string | undefined;
+    } | {
+        type: "preview";
+        previewId: string;
+        contentHash: string;
+        operations: {
+            id: string;
+            label: string;
+            kind: string;
+        }[];
+    } | {
+        type: "none";
+    };
+    expiresAt: string;
+    account?: {
+        id: string;
+        providerId: string;
+        version?: number | undefined;
+        label: string;
+        ownership: "personal" | "workspace";
+        status: "auth_needed" | "connected" | "disabled";
+    } | undefined;
+    installationTarget?: {
+        instanceKey: string;
+        displayName: string;
+        expectedInstanceVersion?: number | undefined;
+    } | undefined;
+    source?: {
+        kind: "definition";
+        definitionId: string;
+    } | {
+        kind: "openapi";
+        url: string;
+        baseUrl?: string | undefined;
+    } | {
+        kind: "graphql";
+        endpoint: string;
+        name?: string | undefined;
+    } | {
+        kind: "auto";
+        url: string;
+        baseUrl?: string | undefined;
+    } | undefined;
+    error?: {
+        code: string;
+        message: string;
+        retryable: boolean;
+    } | undefined;
+}>;
 export declare function startMcpOAuth(deps: OAuthClientDeps, context: OAuthStartContext): Promise<OAuthStartResponse>;
-/** Ownership fence for the official Gmail profile, keyed by exact MCP URL. */
-export declare function assertOfficialGmailPersonalOwnership(mcpUrl: string, ownership: ConnectionOwnership): void;
-/**
- * Slack's hosted MCP issues user tokens only. Sharing one human's grant as
- * workspace authority made every shared agent act as a named employee; the
- * OpenGeni workspace bot owns shared Slack access instead (bot-token search
- * covers public channels, files, and users).
- */
-export declare function assertHostedSlackMcpPersonalOwnership(hostedSlackMcp: boolean, ownership: ConnectionOwnership): void;
 export declare function isHostedSlackMcpTarget(providerDomain: string, mcpUrl: string): boolean;
 export declare function completeMcpOAuthCallback(deps: OAuthClientDeps, input: {
     code?: string | undefined;

package/dist/integrations/oauth-profiles.d.ts

@@ -13,10 +13,9 @@ import { z } from "zod";
  *
  * Profiles come from two layers:
  *
- * 1. Built-in profiles below, for the providers whose fences are security
- *    invariants (hosted Slack MCP and official Gmail are personal-only, their
- *    authorization servers are origin-pinned). These live in code as data so
- *    the fences never depend on catalog import state.
+ * 1. Built-in profiles pin known authorization servers and protocol quirks.
+ *    Ownership defaults guide setup; users may choose personal or workspace.
+ *    Authorization-server pins never depend on catalog import state.
  * 2. A validated `oauthProfile` object on a global catalog row (curated
  *    overlay -> importer -> `capability_catalog_items.metadata`). A catalog
  *    profile applies only when no built-in matches, and it can only narrow the
@@ -76,10 +75,8 @@ export type OAuthProviderProfile = {
         key: DeploymentManagedClientKey;
         message: string;
     };
-    /** Ownerships a connection may take; a singleton also sets the default. */
-    allowedOwnership: readonly ConnectionOwnership[];
-    /** Exact 422 message when an explicit disallowed ownership is requested. */
-    ownershipMessage?: string;
+    /** Suggested ownership; an explicit user choice always wins. */
+    defaultOwnership?: ConnectionOwnership;
     /** Bind reconnect/dedupe to the exact mcpUrl, not just the provider domain. */
     exactMcpBinding: boolean;
     /** How an existing connection is chosen for reconnect coalescing. */
@@ -133,8 +130,6 @@ export declare function builtInOAuthProfileFor(input: {
 }): OAuthProviderProfile | null;
 /** Ownership an omitted request defaults to under a profile. */
 export declare function defaultOwnershipFor(profile: OAuthProviderProfile): ConnectionOwnership;
-/** Rejects an ownership outside the profile's allowed set with its exact message. */
-export declare function assertOwnershipAllowed(profile: OAuthProviderProfile, ownership: ConnectionOwnership): void;
 /** Enforces a profile's authorization-server origin pins with its exact message. */
 export declare function assertAuthorizationServerPins(as: PinnableAuthorizationServer, pins: Pick<AuthorizationServerPins, "issuerOrigins" | "authorizationEndpointOrigins" | "tokenEndpointOrigins" | "message">): void;
 /**
@@ -166,10 +161,10 @@ export declare const catalogOAuthProfileSchema: z.ZodObject<{
     pinnedIssuerOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
     pinnedEndpointOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
     sendResourceParameter: z.ZodOptional<z.ZodBoolean>;
-    allowedOwnership: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+    defaultOwnership: z.ZodOptional<z.ZodEnum<{
         personal: "personal";
         workspace: "workspace";
-    }>>>;
+    }>>;
     requestedScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     extraAuthorizeParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, z.core.$strict>;
@@ -190,6 +185,6 @@ export declare function catalogMcpUrlKey(value: string): string;
  *
  * A present-but-invalid profile fails closed with a 422: the row's operator
  * declared constraints, and silently degrading to the default profile would
- * drop an ownership fence or origin pin on a JSON typo.
+ * drop an origin pin on a JSON typo.
  */
 export declare function oauthProfileFromCatalog(mcpUrl: string, raw: unknown): OAuthProviderProfile;

package/dist/integrations/slack-interactions.d.ts

@@ -19,7 +19,7 @@ export declare const SLACK_SESSION_INSTRUCTIONS: string;
  * selection at session creation while keeping Slack mutations out of the model
  * surface; interaction delivery remains owned by the durable delivery pump.
  */
-export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
 export type NormalizedSlackInteraction = {
     providerEventId: string;
     providerMessageId: string;

package/dist/mcp/capability-account-readiness.d.ts

@@ -0,0 +1,7 @@
+import type { McpConnectionAccountBinding } from "@opengeni/contracts";
+/** Canonical readiness comes only from routes present in this exact attempt,
+ * joined to this turn's accepted bindings. It never grants account access. */
+export declare function capabilityAccountReadiness(availableRoutes: Iterable<string>, bindings: readonly McpConnectionAccountBinding[] | null): {
+    available: Set<string>;
+    accepted: Set<string>;
+};

package/dist/mcp/first-party-tool-permissions.d.ts

@@ -46,6 +46,10 @@ export declare const FIRST_PARTY_TOOL_AUTHORIZATION: {
         sessionRequired: true;
         allOf: "documents:search"[];
     };
+    knowledge_prepare_save: {
+        sessionRequired: true;
+        allOf: "documents:search"[];
+    };
     knowledge_get: {
         sessionRequired: true;
         allOf: "documents:search"[];

package/dist/mcp-oauth.d.ts

@@ -1,6 +1,6 @@
 import { type AccessGrant, type ToolGatewayCatalog, type ToolGatewayIdentity } from "@opengeni/contracts";
 import { type ApiRouteDeps } from "@opengeni/core";
-import { Hono } from "hono";
+import { Hono, type Context } from "hono";
 export type McpOAuthResource = {
     resource: string;
     workspaceId: string;
@@ -17,3 +17,24 @@ export declare function isMcpOAuthResourcePath(pathname: string): boolean;
 export declare function mcpOAuthConsentToolIdentities(catalog: ToolGatewayCatalog): ToolGatewayIdentity[];
 export declare function isMcpOAuthPublicProtocolPath(pathname: string): boolean;
 export declare function mcpOAuthAuthenticateHeader(deps: ApiRouteDeps, pathname: string): string;
+export declare function mcpOAuthRedirectUriCandidates(registered: string[], requested: string): string[];
+export declare function completeAuthorizationRedirect(c: Context, redirectTo: string): Response;
+export type McpOAuthConsentAccount = {
+    id: string;
+    name: string;
+};
+export type McpOAuthConsentWorkspace = {
+    id: string;
+    accountId: string;
+    name: string;
+    kind: "personal" | "shared";
+};
+export declare function renderMcpOAuthConsentPage(input: {
+    clientName: string;
+    requestToken: string;
+    accounts: McpOAuthConsentAccount[];
+    workspaces: McpOAuthConsentWorkspace[];
+    selectedWorkspaceId: string;
+}): string;
+export declare function renderMcpOAuthContinuePage(redirectTo: string): string;
+export declare function renderMcpOAuthExpiredPage(message: string): string;

package/dist/routes/api-integrations.d.ts

@@ -16,6 +16,7 @@ export declare function registerApiIntegrationRoutes(app: Hono, deps: ApiRouteDe
 export declare function resolveForRoute(input: {
     deps: ApiRouteDeps;
     transport: ReturnType<typeof createPinnedIntegrationTransport>;
+    accountId: string;
     workspaceId: string;
     subjectId: string;
     payload: PreviewApiIntegrationRequest | InstallApiIntegrationRequest;

package/dist/routes/codex.d.ts

@@ -1,4 +1,32 @@
 import { type CodexAccountStatus } from "@opengeni/db";
+export declare function codexAccountJson(row: CodexAccountStatus, options?: {
+    appsCredentialId?: string | null;
+    canManageApps?: boolean;
+    humanSubjectId?: string | null;
+}): {
+    id: string;
+    source: "organization" | "workspace";
+    chatgptAccountId: string | null;
+    label: string | null;
+    email: string | null;
+    plan: string | null;
+    status: string;
+    active: boolean;
+    expiresAt: Date | null;
+    lastRefreshAt: Date | null;
+    lastError: string | null;
+    fiveHour: import("@opengeni/codex").CodexUsageWindow | null;
+    weekly: import("@opengeni/codex").CodexUsageWindow | null;
+    usageCheckedAt: Date | null;
+    allocatorEnabled: boolean;
+    allocatorVersion: number;
+    allocatorUpdatedAt: Date | null;
+    resetCreditAvailableCount: number | null;
+    resetCreditsCheckedAt: Date | null;
+    exhaustedUntil: Date | null;
+    appsDesignated: boolean;
+    canEnableApps: boolean;
+};
 /**
  * Derive the two distinct cached worker-readiness meanings exposed by the
  * status route. `poolReady` means at least one effective-pool account passes

package/dist/routes/managed-sign-in-methods.d.ts

@@ -0,0 +1,6 @@
+import type { ApiRouteDeps } from "@opengeni/core";
+import type { Context, Hono } from "hono";
+export declare function admitManagedSignInMutation(context: Context, deps: ApiRouteDeps): Promise<void>;
+export declare function registerManagedSignInMethodRoutes(app: Hono, deps: ApiRouteDeps): void;
+/** Intercept only database-backed, product-issued explicit connect states. */
+export declare function handleManagedSignInConnectCallback(context: Context, deps: ApiRouteDeps, provider: "google" | "github"): Promise<Response | null>;

package/dist/routes/organization-integration-policy.d.ts

@@ -0,0 +1,3 @@
+import { type ApiRouteDeps } from "@opengeni/core";
+import type { Hono } from "hono";
+export declare function registerOrganizationIntegrationPolicyRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/routes/sessions.d.ts

@@ -1,5 +1,5 @@
-import { ClientSessionEvent, SteerSessionMessageRequest, type SessionStatus, type WorkClaimSubjectFilter, type SessionGoalRevision, type SessionAuthorizationOperation } from "@opengeni/contracts";
-import { type SessionDiscoveryCursor } from "@opengeni/db";
+import { ClientSessionEvent, SessionScopeSubjectId, SteerSessionMessageRequest, type SessionStatus, type WorkClaimSubjectFilter, type SessionGoalRevision, type SessionAuthorizationOperation } from "@opengeni/contracts";
+import { decodeSessionListCursor, type SessionDiscoveryCursor } from "@opengeni/db";
 import type { Context, Hono } from "hono";
 import type { ApiRouteDeps } from "@opengeni/core";
 import { type ViewerServices } from "../sandbox/viewer.js";
@@ -13,6 +13,28 @@ export declare function goalProposalMatchesExpectedRevision(revision: Pick<Sessi
  */
 export declare function sessionAuthorizationOperationForHttp(method: string, pathname: string, sessionId: string): SessionAuthorizationOperation | null;
 export declare function sessionTenancyHttpError(error: unknown): Error;
+export declare function sessionListQuery(query: Record<string, string>, allowCursor?: boolean): {
+    originSiteId: string | undefined;
+    limit: string | undefined;
+    parentSessionId: string | null | undefined;
+    cursor: ReturnType<typeof decodeSessionListCursor> | undefined;
+    search: string | undefined;
+    pinsOnly: boolean;
+    archivedOnly: boolean;
+    sortBy: "updatedAt" | "createdAt" | "name" | undefined;
+    archiveStatus: "active" | "archived" | "all" | undefined;
+    channelId: string | null | undefined;
+    createdBy: {
+        kind: "subject" | "service";
+        subjectId: string;
+    } | undefined;
+    updatedFrom: Date | undefined;
+    updatedBefore: Date | undefined;
+    createdFrom: Date | undefined;
+    createdBefore: Date | undefined;
+    scopeSubjectId: SessionScopeSubjectId | undefined;
+    hasPageFilters: boolean;
+};
 export type AgentTopologyCursorEnvelope = {
     cursor: SessionDiscoveryCursor;
     parentSessionId: string | null | "all";

package/dist/scheduled-task-deletion.d.ts

@@ -1,13 +1,12 @@
-import type { ScheduledTask as ScheduledTaskValue } from "@opengeni/contracts";
+import type { AccessGrant, ScheduledTask as ScheduledTaskValue } from "@opengeni/contracts";
 import { type ApiRouteDeps } from "@opengeni/core";
 import type { TemporalScheduleCleanupClaim } from "@opengeni/db";
 /** Execute one exact connector obligation frozen into the tombstone outbox row. */
 export declare function cleanupScheduledTaskConnectorAuthorization(deps: ApiRouteDeps, claim: TemporalScheduleCleanupClaim): Promise<void>;
 /** Shared HTTP/MCP domain operation: authorize, tombstone, persist, then accelerate cleanup. */
-export declare function deleteScheduledTaskWithDurableCleanup(deps: ApiRouteDeps, input: {
-    workspaceId: string;
+export declare function deleteScheduledTaskWithDurableCleanup(deps: ApiRouteDeps, request: {
+    grant: AccessGrant;
     taskId: string;
-    subjectId: string;
 }): Promise<{
     task: ScheduledTaskValue;
     changed: boolean;

package/dist/workspace-tool-gateway.d.ts

@@ -3,7 +3,7 @@ import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import type { Settings } from "@opengeni/config";
 import { ToolGatewayDeclarationsResponse, type AccessGrant, type ToolGatewayCatalog, type ToolGatewayIdentity } from "@opengeni/contracts";
 import { type AccessGrantAuthorization, type ApiRouteDeps } from "@opengeni/core";
-import { consumeToolGatewayApproval, getWorkspaceArtifactContentRef, issueToolGatewayApproval } from "@opengeni/db";
+import { buildConnectionTokenResolver, consumeToolGatewayApproval, getWorkspaceArtifactContentRef, issueToolGatewayApproval } from "@opengeni/db";
 import { type PreparedWorkspaceToolGatewayTools } from "@opengeni/runtime/workspace-tool-gateway";
 import { type ToolGatewayDefinition } from "@opengeni/tool-gateway";
 import type { Observability } from "@opengeni/observability";
@@ -33,6 +33,8 @@ export declare function prepareWorkspaceToolGatewayForGrant(routeDeps: ApiRouteD
     serverId: string;
     toolName: string;
 }[]): Promise<PreparedWorkspaceToolGateway>;
+/** Keep live caller authority independent of native connection acquisition and refresh. */
+export declare function withWorkspaceConnectionAuthorization(resolve: ReturnType<typeof buildConnectionTokenResolver>, reauthorize?: () => Promise<void>): ReturnType<typeof buildConnectionTokenResolver>;
 export declare function workspaceToolGatewayDefinitionFilter(settings: Pick<Settings, "allowedFirstPartyMcpTools">, allowedIdentities?: readonly ToolGatewayIdentity[]): (definition: ToolGatewayDefinition) => boolean;
 export declare function workspaceToolGatewaySettingsForGrant(settings: Settings, grant: AccessGrant, allowedIdentities?: readonly {
     serverId: string;