@opengeni/api-router 3.2.2 → 3.4.0

package/dist/integrations/marketplace-plugin.d.ts

@@ -53,8 +53,8 @@ export declare function marketplacePlugin(url: string): {
         keywords: never[];
         author: {
             name: string;
-            email?: never;
             url?: never;
+            email?: never;
         };
         version: string;
         license: null;
@@ -349,9 +349,9 @@ export declare function marketplacePlugin(url: string): {
         installation: string;
         upstream: {
             source: {
+                url?: never;
                 source: string;
                 path: string;
-                url?: never;
             };
             policy: {
                 installation: string;
@@ -369,9 +369,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email?: never;
-            url?: never;
         };
         version: string;
         license: string;
@@ -395,9 +395,9 @@ export declare function marketplacePlugin(url: string): {
         installation: string;
         upstream: {
             source: {
+                url?: never;
                 source: string;
                 path: string;
-                url?: never;
             };
             policy: {
                 installation: string;
@@ -415,9 +415,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             name: string;
             email?: never;
-            url?: never;
         };
         version: string;
         license: null;
@@ -441,9 +441,9 @@ export declare function marketplacePlugin(url: string): {
         installation: string;
         upstream: {
             source: {
+                url?: never;
                 source: string;
                 path: string;
-                url?: never;
             };
             policy: {
                 products?: never;
@@ -461,9 +461,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email?: never;
-            url?: never;
         };
         version: string;
         license: string;
@@ -487,9 +487,9 @@ export declare function marketplacePlugin(url: string): {
         installation: string;
         upstream: {
             source: {
+                url?: never;
                 source: string;
                 path: string;
-                url?: never;
             };
             policy: {
                 products?: never;
@@ -507,9 +507,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -533,9 +533,9 @@ export declare function marketplacePlugin(url: string): {
         installation: string;
         upstream: {
             source: {
+                url?: never;
                 source: string;
                 path: string;
-                url?: never;
             };
             policy: {
                 products?: never;
@@ -553,9 +553,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -576,9 +576,9 @@ export declare function marketplacePlugin(url: string): {
         installation: string;
         upstream: {
             source: {
+                url?: never;
                 source: string;
                 path: string;
-                url?: never;
             };
             policy: {
                 products?: never;
@@ -596,9 +596,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -622,9 +622,9 @@ export declare function marketplacePlugin(url: string): {
         installation: string;
         upstream: {
             source: {
+                url?: never;
                 source: string;
                 path: string;
-                url?: never;
             };
             policy: {
                 products?: never;
@@ -769,9 +769,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -813,9 +813,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: null;
         license: null;
@@ -896,9 +896,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -940,9 +940,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: null;
         license: null;
@@ -984,9 +984,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -1033,9 +1033,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -1118,9 +1118,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -1162,9 +1162,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -1243,9 +1243,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -1273,9 +1273,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -1306,9 +1306,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -1339,9 +1339,9 @@ export declare function marketplacePlugin(url: string): {
         category: null;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -1427,9 +1427,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -1471,9 +1471,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: null;
         license: null;
@@ -1614,9 +1614,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -1658,9 +1658,9 @@ export declare function marketplacePlugin(url: string): {
         category: null;
         keywords: string[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -1697,9 +1697,9 @@ export declare function marketplacePlugin(url: string): {
         category: null;
         keywords: never[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -1741,9 +1741,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: null;
         license: null;
@@ -1776,9 +1776,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: never[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: null;
         license: null;
@@ -1853,9 +1853,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -1897,9 +1897,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -1941,9 +1941,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: null;
         license: string;
@@ -1985,9 +1985,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: null;
         license: string;
@@ -2024,9 +2024,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -2235,9 +2235,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -2279,9 +2279,9 @@ export declare function marketplacePlugin(url: string): {
         category: null;
         keywords: never[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: null;
         license: null;
@@ -2369,9 +2369,9 @@ export declare function marketplacePlugin(url: string): {
         category: null;
         keywords: string[];
         author: {
+            url?: never;
             email?: never;
             name: string;
-            url?: never;
         };
         version: string;
         license: string;
@@ -2408,9 +2408,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: null;
@@ -2657,9 +2657,9 @@ export declare function marketplacePlugin(url: string): {
         category: string;
         keywords: string[];
         author: {
+            url?: never;
             name: string;
             email: string;
-            url?: never;
         };
         version: string;
         license: string;

package/dist/mcp/server.d.ts

@@ -50,6 +50,7 @@ export declare function orchestrationFailureEnvelope(tool: OrchestrationToolName
     };
 } | {
     error: {
+        reason?: never;
         code: "nested_agent_depth_exceeded" | "nested_agent_depth_override_forbidden";
         details: {
             readonly denial: {
@@ -70,7 +71,6 @@ export declare function orchestrationFailureEnvelope(tool: OrchestrationToolName
                 createdAt: string;
             };
         };
-        reason?: never;
         retryable?: never;
         message: string;
     };
@@ -116,6 +116,16 @@ export declare function slackBotFileContentResult(result: Awaited<ReturnType<Ope
         data: string;
     })[];
 };
+/**
+ * The first-party server as seen by MCP protocol messages that touch no tool:
+ * `initialize`, `ping` and notifications. It advertises exactly what the full
+ * server does (the same name, version and tools capability) without the
+ * workspace, catalog, Memory and admin reads that registering tools needs.
+ * Never route `tools/*` here: it lists no tools.
+ */
+export declare function buildOpenGeniMcpProtocolServer(grant: AccessGrant): McpServer;
+/** JSON-RPC methods {@link buildOpenGeniMcpProtocolServer} answers like the full server. */
+export declare function isOpenGeniMcpProtocolOnlyMessage(message: unknown): boolean;
 export declare function buildOpenGeniMcpServer(deps: ApiRouteDeps, grant: AccessGrant, options?: McpServerOptions): McpServer;
 /** Only a prompt explicitly supplied through the human/API channel may redirect a user-paused goal. */
 export declare function isHumanDirectedTurn(turn: {

package/dist/routes/browser-sessions.d.ts

@@ -1,6 +1,6 @@
-import { InteractionActor, type AccessGrant, type FileAsset, type CreateBrowserSessionRequest as CreateBrowserSessionRequestValue, type InteractionPlacement } from "@opengeni/contracts";
+import { BrowserObservation, type BrowserTarget, InteractionActor, type AccessGrant, type FileAsset, type CreateBrowserSessionRequest as CreateBrowserSessionRequestValue, type InteractionPlacement } from "@opengeni/contracts";
 import { type ApiRouteDeps, type ResolvedSessionAuthorization } from "@opengeni/core";
-import { type BrowserControlScreenshotOptions, type BrowserControlFrame } from "@opengeni/runtime/sandbox";
+import { BrowserControlClient, type BrowserControlScreenshotOptions, type BrowserControlFrame } from "@opengeni/runtime/sandbox";
 import type { Hono } from "hono";
 import { type InteractionSecretsPort } from "../interaction-secrets.js";
 export declare function registerBrowserSessionRoutes(app: Hono, deps: ApiRouteDeps, options?: {
@@ -59,6 +59,27 @@ export declare function browserNeedsStandaloneDisplayStack(input: {
     linkedComputer: boolean;
     nativeBrowserControl: boolean;
 }): boolean;
+/** Attach the controller's launch view to a create that activated exactly that
+ * launch in this request. Replays, failures and other bindings get nothing, so
+ * a caller then reads the targets and observes as before. */
+export declare function withInitialView<T extends {
+    session: {
+        id: string;
+        lifecycle: string;
+        controller: {
+            controllerGeneration: string;
+        } | null;
+    };
+    operation: {
+        state: string;
+        replayed: boolean;
+    };
+}>(response: T, launched: Awaited<ReturnType<BrowserControlClient["createSession"]>> | null): T | (T & {
+    initialView: {
+        targets: BrowserTarget[];
+        observation: BrowserObservation;
+    };
+});
 export declare function parseBrowserScreenshotOptions(query: URLSearchParams): BrowserControlScreenshotOptions;
 /** Preserve the controller's definite tab diagnosis (a tab that stopped
  * answering, or one whose renderer crashed) through the public API with its

package/dist/routes/sessions.d.ts

@@ -27,6 +27,7 @@ export declare function sessionListQuery(query: Record<string, string>, allowCur
     includeTotals: boolean;
     needsYouOnly: boolean;
     contentArchivedOnly: boolean;
+    mineOnly: boolean;
     archivedOnly: boolean;
     sortBy: "updatedAt" | "createdAt" | "name" | undefined;
     archiveStatus: "active" | "archived" | "all" | undefined;

package/dist/sandbox/channel-a.d.ts

@@ -1,6 +1,6 @@
 import { type Settings } from "@opengeni/config";
 import type { AccessGrant, Session } from "@opengeni/contracts";
-import { type Database, type LeaseSnapshot } from "@opengeni/db";
+import { type Database, type EnrollmentRecord, type LeaseSnapshot } from "@opengeni/db";
 import { type EventBus } from "@opengeni/events";
 import { type Observability } from "@opengeni/observability";
 import type { ObjectStorage } from "@opengeni/storage";
@@ -56,6 +56,15 @@ export type ChannelAHandle = {
      * who started an agent's turn, or the calling person. Routes that look up
      * the routed machine again must use it rather than the raw caller grant. */
     machineAuthority: () => Promise<ChannelAMachineAuthority>;
+    /** For a machine-home request, the Connected Machine and live runner this
+     * request was pinned to under `machineAuthority`. The routing session fails
+     * rather than follow a changed pointer, so a route that resolved this same
+     * sandbox can use it instead of looking the machine up again. */
+    pinnedMachine: {
+        sandboxId: string;
+        sandboxWorkspaceId: string;
+        enrollment: EnrollmentRecord;
+    } | null;
     requestId: string;
 };
 export type EstablishedHandleCacheKind = "read" | "process" | "none";

package/dist/site-publishing/agent-data-tools.d.ts

@@ -1,5 +1,5 @@
-import { type FirstPartyMcpToolName, type SiteLimitProfileKind } from "@opengeni/contracts";
-import type { ApiRouteDeps } from "@opengeni/core";
+import { type FirstPartyMcpToolName, type Permission, type SiteLimitProfileKind } from "@opengeni/contracts";
+import { type ApiRouteDeps } from "@opengeni/core";
 import { type SiteRuntimeConversationViewerKind } from "@opengeni/db";
 import type { PublishedSiteDataViewer } from "../site-data/service.js";
 import { type SiteRuntimeHost } from "./runtime.js";
@@ -21,8 +21,6 @@ import { type SiteRuntimeHost } from "./runtime.js";
 export declare const SITE_AGENT_DATA_TOOLS: readonly ["site_data_query", "site_data_write"];
 export declare const SITE_AGENT_SQL_TOOLS: readonly ["site_sql_run"];
 export declare const SITE_AGENT_MEMBER_SQL_TOOLS: readonly ["site_sql_query"];
-/** The first-party permissions those tools need (Site Data writes need publish). */
-export declare const SITE_AGENT_DATA_TOOL_PERMISSIONS: readonly ["artifacts:read", "artifacts:publish"];
 export declare const SITE_AGENT_OTHER_SITE_MESSAGE = "This Site's assistant can only use this Site's data";
 export declare const SITE_AGENT_MANAGEMENT_MESSAGE = "This Site's assistant can use the Site's data, not manage the Site";
 /** The data tools one viewer's Site agent conversation gets, within the deployment's tools. */
@@ -32,6 +30,8 @@ export declare function siteAgentDataToolNames(input: {
     siteSql: boolean;
     /** The deployment's first-party tool allowlist. */
     allowed: readonly string[];
+    /** Live member ceiling; omitted only where the native caller filters tools itself. */
+    memberPermissions?: readonly Permission[];
 }): FirstPartyMcpToolName[];
 /** Whether Site SQL is offered on this deployment and turned on for the Site. */
 export declare function siteAgentSiteSqlOn(deps: Pick<ApiRouteDeps, "db" | "settings">, scope: {
@@ -42,7 +42,7 @@ export declare function siteAgentSiteSqlOn(deps: Pick<ApiRouteDeps, "db" | "sett
 export declare function siteAgentDataToolsForStart(deps: Pick<ApiRouteDeps, "db" | "settings">, scope: {
     accountId: string;
     workspaceId: string;
-}, siteId: string, viewerKind: SiteRuntimeConversationViewerKind): Promise<FirstPartyMcpToolName[]>;
+}, siteId: string, viewerKind: SiteRuntimeConversationViewerKind, memberPermissions?: readonly Permission[]): Promise<FirstPartyMcpToolName[]>;
 /** This Site's viewer (`user:<subject>` or `guest:<visitor>`) as Site Data and Site SQL see it. */
 export declare function sitePublishedDataViewer(host: Pick<SiteRuntimeHost, "scope" | "site">, principal: string, guest: boolean): PublishedSiteDataViewer;
 /**

package/dist/site-publishing/agent-session.d.ts

@@ -1,7 +1,8 @@
+import { type Permission } from "@opengeni/contracts";
 import { type ApiRouteDeps } from "@opengeni/core";
 import type { SiteRuntimeHost } from "./runtime.js";
 import type { SiteRuntimeViewer } from "./viewer.js";
-export declare const SITE_AGENT_DEFAULTS_VERSION = 1;
+export declare const SITE_AGENT_DEFAULTS_VERSION = 2;
 /**
  * Before admitting more work, converge pre-redesign published-host sessions to
  * the same Site-local tools as a new conversation. This is a trusted host
@@ -13,4 +14,4 @@ export declare const SITE_AGENT_DEFAULTS_VERSION = 1;
  * audit event and completion marker atomic. Failed writes remain retryable.
  * Existing attempts keep their accepted execution policy; no turn is rewritten.
  */
-export declare function normalizeSiteAgentSession(deps: Pick<ApiRouteDeps, "db" | "settings" | "bus" | "objectStorage">, host: SiteRuntimeHost, viewer: SiteRuntimeViewer, sessionId: string, retainedToolIds: readonly string[]): Promise<void>;
+export declare function normalizeSiteAgentSession(deps: Pick<ApiRouteDeps, "db" | "settings" | "bus" | "objectStorage">, host: SiteRuntimeHost, viewer: SiteRuntimeViewer, sessionId: string, retainedToolIds: readonly string[], memberPermissions?: readonly Permission[]): Promise<void>;

package/dist/site-publishing/runtime.d.ts

@@ -7,8 +7,8 @@ import { type SiteRuntimeViewer } from "./viewer.js";
 /**
  * Site-runtime: the narrow API a Site gateway calls for one published Site
  * host, after the gateway signature passed. Everything here works for exactly
- * one Site: the host names it, the viewer is resolved for it, and the agent
- * principal is `site:<siteId>`.
+ * one Site: the host names it and the viewer is resolved for it. Members retain
+ * their human identity; outsiders use the viewer-bound `site:<siteId>` principal.
  */
 export type SiteRuntimeDeps = Pick<ApiRouteDeps, "db" | "settings" | "objectStorage">;
 export type SiteRuntimeHost = {
@@ -43,7 +43,7 @@ export declare function resolveSiteRuntimeViewer(deps: SiteRuntimeDeps, host: Si
     ignoreViewAs?: boolean;
 }): Promise<SiteRuntimeViewer>;
 /** What a viewer cannot do on a Site: 403 with `details.code` `not_available_for_viewer`. */
-export type SiteViewerFeature = "agent" | "agent_model" | "workspace_tools" | "site_data" | "site_sql";
+export type SiteViewerFeature = "agent" | "private_conversations" | "agent_model" | "workspace_tools" | "site_data" | "site_sql";
 export declare function siteNotAvailableForViewer(feature: SiteViewerFeature, message: string, extra?: Record<string, unknown>): import("../http/api-error.js").ApiHttpError;
 /** The viewer capabilities a page reads from `site.config` to hide what won't work. */
 export declare function siteViewerCapabilities(deps: SiteRuntimeDeps, host: SiteRuntimeHost, viewer: SiteRuntimeViewer, limits: SiteLimits): SiteViewerCapabilities;
@@ -160,9 +160,9 @@ export declare function meterSiteRuntime(deps: SiteRuntimeDeps, host: SiteRuntim
     viewer?: SiteRuntimeViewer;
 }): Promise<void>;
 /**
- * Run an ordinary session route in this process as the Site's service
- * principal (`site:<siteId>`), with a 60-second delegated token carrying only
- * session permissions and the viewer as its display label. The Site and the
+ * Run an ordinary session route in this process as the verified member, or
+ * the Site service principal for an outsider. The latter uses a 60-second
+ * delegated token plus the separate trusted viewer audience. The Site and the
  * served version ride along as the request's Site origin, so new sessions and
  * turns record where they came from. The route authorizes as usual.
  */
@@ -174,6 +174,7 @@ export declare function siteRuntimeSessionRequest(deps: SiteRuntimeDeps, host: S
     path: string;
     body?: unknown;
     extraPermissions?: readonly Permission[];
+    reauthorize: () => Promise<void>;
 }): Promise<Request>;
 /** A forwarded response without cookies (site-runtime never sets any). */
 export declare function siteRuntimeForwardedResponse(response: Response): Response;