@opengeni/api-router 4.0.0 → 4.1.0

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-E7TZFJ65.js";
+} from "./chunk-24C5LPNE.js";
 
 // src/index.ts
 import { scheduledTaskKnowledgeSource } from "@opengeni/contracts";

package/dist/integrations/github-lens-connect.d.ts

@@ -46,7 +46,7 @@ export declare function requireGitHubLensConnect(deps: ApiRouteDeps): Promise<{
                 eager?: boolean | undefined;
                 optional?: boolean | undefined;
             }[];
-            firstPartyMcpTools: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+            firstPartyMcpTools: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_enroll_token" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
             firstPartyMcpPermissions: ("account:admin" | "account:read" | "api_keys:manage" | "artifacts:publish" | "artifacts:read" | "billing:manage" | "billing:read" | "capabilities:manage" | "codemode:call" | "connections:read" | "connections:write" | "documents:manage" | "documents:search" | "enrollments:manage" | "enrollments:read" | "environments:manage" | "environments:use" | "files:read" | "files:upload" | "files:write" | "github:manage" | "github:use" | "goals:manage" | "mcp_servers:attach" | "members:manage" | "rigs:manage" | "rigs:use" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "secrets:list" | "secrets:read" | "secrets:write" | "sessions:control" | "sessions:create" | "sessions:read" | "stream:acknowledge" | "stream:control" | "stream:view" | "terminal:attach" | "variable-sets:attach" | "variable-sets:list" | "variable-sets:manage" | "variable-sets:read" | "variable-sets:use" | "variable-sets:write" | "workspace:admin" | "workspace:create" | "workspace:read")[];
             model: string | null;
             reasoningEffort: "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh" | null;

package/dist/integrations/oauth-client.d.ts

@@ -39,7 +39,7 @@ export type OAuthCallbackResult = {
 type AuthorizationServerMetadata = McpAuthorizationServerMetadata;
 export declare const OAUTH_START_DEADLINE_MS = 15000;
 export declare const OAUTH_CALLBACK_DEADLINE_MS = 30000;
-export type OAuthStartStage = "connection_lookup" | "mcp_challenge" | "protected_resource_metadata" | "authorization_server_metadata" | "client_registration";
+export type OAuthStartStage = "connection_lookup" | "mcp_challenge" | "protected_resource_metadata" | "authorization_server_metadata" | "client_registration" | "state_persist";
 /** Policy is the outermost lock. Receipt replay still runs normal authorization,
  * but the DB calls authorizeAcquisition only for uncommitted progress. Provider
  * requests must happen after this transaction, never inside either wrapper. */

package/dist/integrations/slack-bot.d.ts

@@ -813,4 +813,12 @@ export declare function createSlackFilesListCursor(input: {
     page: number;
 }, context: SlackFilesCursorContext): string;
 export declare function nextSlackFilesListPage(payload: SlackPayload, requested: SlackFilesListPage, returnedFileCount: number): number | null;
+/**
+ * Slack action IDs are unique within a block. Keep the logical card untouched
+ * for the durable request digest, and partition repeated actions only on the
+ * provider wire. In particular, a legacy invalid_blocks receipt can retry with
+ * its original operation ID and digest; completed/uncertain posts keep their
+ * existing replay/reconciliation path. Values and action IDs remain exact.
+ */
+export declare function slackMessageWireBlocks(blocks: SlackMessageBlock[] | undefined): SlackMessageBlock[] | undefined;
 export {};

package/dist/integrations/slack-interactions.d.ts

@@ -19,7 +19,7 @@ export declare const SLACK_SESSION_INSTRUCTIONS: string;
  * selection at session creation while keeping Slack mutations out of the model
  * surface; interaction delivery remains owned by the durable delivery pump.
  */
-export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_enroll_token" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
 export type NormalizedSlackInteraction = {
     providerEventId: string;
     providerMessageId: string;

package/dist/mcp/child-read-evidence.d.ts

@@ -0,0 +1,9 @@
+/** Select only whole items that actually survived the model-facing envelope.
+ * A cursor is a position, never proof that preceding content was consumed. */
+export declare function completeChildReadSequences(page: {
+    view: string;
+    sourceExact: boolean;
+    events: readonly ({
+        sequence: number;
+    } & Record<string, unknown>)[];
+}): number[];

package/dist/mcp/first-party-tool-permissions.d.ts

@@ -193,6 +193,9 @@ export declare const FIRST_PARTY_TOOL_AUTHORIZATION: {
     connected_machine_remove: {
         allOf: "enrollments:manage"[];
     };
+    connected_machine_enroll_token: {
+        allOf: "enrollments:manage"[];
+    };
     rig_list: {
         allOf: "rigs:use"[];
     };

package/dist/mcp/session-wait.d.ts

@@ -69,6 +69,8 @@ export type SessionWaitTarget = {
     afterSequence: number;
 };
 export type SessionWaitEventSummary = {
+    /** True only when every semantic result field survived all projections. */
+    contentComplete?: boolean;
     id: string;
     sequence: number;
     type: SessionEventType;

package/dist/routes/codex.d.ts

@@ -1,3 +1,4 @@
+import { type Settings } from "@opengeni/config";
 import { type CodexAccountStatus } from "@opengeni/db";
 export declare function codexAccountJson(row: CodexAccountStatus, options?: {
     appsCredentialId?: string | null;
@@ -44,7 +45,7 @@ export declare function codexWorkerReadiness(input: {
     poolReady: boolean;
     workerRoutable: boolean;
 };
-export declare function codexModelsForPicker(): Array<{
+export declare function codexModelsForPicker(settings?: Settings): Array<{
     id: string;
     label: string;
     provider: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -44,22 +44,22 @@
     "@llamaindex/liteparse": "2.14.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opengeni/agent-proto": "^0.6.0",
-    "@opengeni/artifact-tool": "^0.3.30",
+    "@opengeni/artifact-tool": "^0.3.31",
     "@opengeni/capabilities": "^0.3.4",
-    "@opengeni/codemode": "^0.6.0",
-    "@opengeni/codex": "^0.2.24",
-    "@opengeni/config": "^2.0.0",
-    "@opengeni/contracts": "^5.0.0",
-    "@opengeni/core": "^4.0.0",
-    "@opengeni/db": "^6.0.0",
-    "@opengeni/documents": "^0.8.31",
-    "@opengeni/events": "^0.4.29",
-    "@opengeni/github": "^0.7.14",
+    "@opengeni/codemode": "^0.6.1",
+    "@opengeni/codex": "^0.2.25",
+    "@opengeni/config": "^2.1.0",
+    "@opengeni/contracts": "^5.1.0",
+    "@opengeni/core": "^4.0.1",
+    "@opengeni/db": "^6.0.1",
+    "@opengeni/documents": "^0.8.32",
+    "@opengeni/events": "^0.4.30",
+    "@opengeni/github": "^0.7.15",
     "@opengeni/network": "^0.3.1",
-    "@opengeni/observability": "^0.8.30",
-    "@opengeni/runtime": "^4.0.0",
-    "@opengeni/storage": "^0.2.131",
-    "@opengeni/tool-gateway": "^0.1.11",
+    "@opengeni/observability": "^0.8.31",
+    "@opengeni/runtime": "^4.0.1",
+    "@opengeni/storage": "^0.2.132",
+    "@opengeni/tool-gateway": "^0.1.12",
     "@opengeni/xai-subscription": "^0.1.4",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",

package/src/integrations/oauth-client.ts

@@ -29,9 +29,11 @@ import {
   getGlobalCatalogOAuthProfile,
   listConnectionsMetadata,
   loadIntegrationOAuthClient,
+  loadIntegrationOAuthPendingState,
   normalizeBearerScheme,
   replaceIntegrationOAuthClientIfCurrent,
   storeIntegrationOAuthClient,
+  storeIntegrationOAuthPendingState,
   updateConnection,
   withDatabaseStatementTimeout,
   type Database,
@@ -55,7 +57,7 @@ import {
   type McpProtectedResourceMetadata,
 } from "@opengeni/network";
 import { Buffer } from "node:buffer";
-import { createHash, randomBytes } from "node:crypto";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { HTTPException } from "hono/http-exception";
 import {
   assertConnectionOwnershipAllowedForPrincipal,
@@ -196,7 +198,8 @@ export type OAuthStartStage =
   | "mcp_challenge"
   | "protected_resource_metadata"
   | "authorization_server_metadata"
-  | "client_registration";
+  | "client_registration"
+  | "state_persist";
 
 class OAuthStartStageError extends Error {
   constructor(
@@ -524,7 +527,7 @@ async function startMcpOAuthWithinDeadline(
     ),
   );
   const key = requireEnvironmentEncryption(settings);
-  const state = createSignedState(requireIntegrationsStateSecret(settings), {
+  const fullState = createSignedState(requireIntegrationsStateSecret(settings), {
     ...(context.integrationKey ? { integrationKey: context.integrationKey } : {}),
     ...(context.connectAttemptId ? { connectAttemptId: context.connectAttemptId } : {}),
     accountId: context.accountId,
@@ -574,6 +577,29 @@ async function startMcpOAuthWithinDeadline(
     returnPath,
     ...(existing ? { connectionId: existing.id, connectionVersion: existing.version } : {}),
   });
+  const expiresAt = new Date(Date.now() + oauthStateTtlMs);
+  let state = fullState;
+  if (settings.integrationsOauthShortStateEnabled) {
+    const stateId = randomUUID();
+    state = createSignedState(requireIntegrationsStateSecret(settings), {
+      kind: "mcp_oauth_reference",
+      id: stateId,
+      accountId: context.accountId,
+      workspaceId: context.workspaceId,
+    });
+    if (state.length > 512) {
+      throw new Error("MCP OAuth reference state exceeded its provider-safe length");
+    }
+    await deadline.run("state_persist", async () =>
+      storeIntegrationOAuthPendingState(db, {
+        id: stateId,
+        accountId: context.accountId,
+        workspaceId: context.workspaceId,
+        stateEncrypted: encryptEnvironmentValue(key, fullState),
+        expiresAt,
+      }),
+    );
+  }
   const authorizationUrl = buildAuthorizationUrl({
     endpoint: discovery.as.authorizationEndpoint,
     settings,
@@ -589,7 +615,7 @@ async function startMcpOAuthWithinDeadline(
   return OAuthStartResponse.parse({
     state,
     authorizationUrl,
-    expiresAt: new Date(Date.now() + oauthStateTtlMs).toISOString(),
+    expiresAt: expiresAt.toISOString(),
   });
 }
 
@@ -701,7 +727,7 @@ async function completeMcpOAuthCallbackWithinDeadline(
     };
   }
   try {
-    state = readOAuthState(input.state, settings);
+    state = await resolveMcpOAuthState(db, settings, input.state, deadline);
     integrationKey = state.integrationKey ?? "custom:mcp";
     if (state.connectAttemptId) {
       const stored = await getConnectAttempt(db, state, state.connectAttemptId);
@@ -1718,6 +1744,41 @@ export function buildAuthorizationUrl(input: {
   return url.toString();
 }
 
+async function resolveMcpOAuthState(
+  db: Database,
+  settings: Settings,
+  state: string,
+  deadline: OAuthCallbackDeadline,
+): Promise<OAuthStatePayload> {
+  const reference = readSignedState(state, requireIntegrationsStateSecret(settings)) as Record<
+    string,
+    unknown
+  > | null;
+  if (reference?.kind !== "mcp_oauth_reference") {
+    // In-flight grants from the previous release remain valid for their
+    // normal ten-minute lifetime during a rolling deployment.
+    return readOAuthState(state, settings);
+  }
+  const accountId = requiredString(reference.accountId, "state.accountId");
+  const workspaceId = requiredString(reference.workspaceId, "state.workspaceId");
+  const id = requiredString(reference.id, "state.id");
+  if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(id)) {
+    throw new HTTPException(400, { message: "invalid OAuth state reference" });
+  }
+  const encrypted = await runCallbackDatabaseStage(deadline, "state_verify", db, (scopedDb) =>
+    loadIntegrationOAuthPendingState(scopedDb, { accountId, workspaceId, id }),
+  );
+  if (!encrypted) {
+    throw new HTTPException(400, { message: "invalid or expired OAuth state" });
+  }
+  const fullState = decryptEnvironmentValue(requireEnvironmentEncryption(settings), encrypted);
+  const resolved = readOAuthState(fullState, settings);
+  if (resolved.accountId !== accountId || resolved.workspaceId !== workspaceId) {
+    throw new HTTPException(400, { message: "OAuth state reference mismatch" });
+  }
+  return resolved;
+}
+
 function readOAuthState(state: string, settings: Settings): OAuthStatePayload {
   const payload = readSignedState(state, requireIntegrationsStateSecret(settings)) as Record<
     string,
@@ -2170,6 +2231,8 @@ function oauthStartStageLabel(stage: OAuthStartStage): string {
       return "authorization-server discovery";
     case "client_registration":
       return "OAuth client registration";
+    case "state_persist":
+      return "OAuth state persistence";
   }
 }
 

package/src/integrations/slack-bot.ts

@@ -1,4 +1,4 @@
-import { createHmac, timingSafeEqual } from "node:crypto";
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
 import { environmentsEncryptionKeyBytes, type Settings } from "@opengeni/config";
 import {
   OPENGENI_SLACK_BOT_CREDENTIAL_LABEL,
@@ -1051,6 +1051,7 @@ export class OpenGeniSlackBotClient {
       const targetKind = input.userId ? "user" : "channel";
       const targetId = input.userId ?? input.channelId!;
       const blocks = validateSlackMessageBlocks(input.blocks);
+      const wireBlocks = slackMessageWireBlocks(blocks);
       const requestDigest = this.postRequestDigest({
         operationId: input.operationId,
         targetKind,
@@ -1132,7 +1133,7 @@ export class OpenGeniSlackBotClient {
       const posted = await this.call(headers, "chat.postMessage", {
         channel: channelId,
         text: input.text,
-        ...(blocks ? { blocks: JSON.stringify(blocks) } : {}),
+        ...(wireBlocks ? { blocks: JSON.stringify(wireBlocks) } : {}),
         client_msg_id: input.operationId,
         unfurl_links: "false",
         unfurl_media: "false",
@@ -1197,6 +1198,7 @@ export class OpenGeniSlackBotClient {
     let providerCallStarted = false;
     const blocks = validateSlackMessageBlocks(input.blocks);
     try {
+      const wireBlocks = slackMessageWireBlocks(blocks);
       const headers = await this.headersFor(operation);
       await this.requireMemberChannel(headers, input.channelId);
       const requestDigest = this.updateRequestDigest({ ...input, ...(blocks ? { blocks } : {}) });
@@ -1235,7 +1237,7 @@ export class OpenGeniSlackBotClient {
         channel: input.channelId,
         ts: input.timestamp,
         text: input.text,
-        ...(blocks ? { blocks: JSON.stringify(blocks) } : {}),
+        ...(wireBlocks ? { blocks: JSON.stringify(wireBlocks) } : {}),
       });
       const slackChannelId = requiredSlackString(updated.channel, "channel");
       const slackMessageTimestamp = requiredSlackString(updated.ts, "ts");
@@ -3000,6 +3002,33 @@ export function nextSlackFilesListPage(
   return nextPage;
 }
 
+/**
+ * Slack action IDs are unique within a block. Keep the logical card untouched
+ * for the durable request digest, and partition repeated actions only on the
+ * provider wire. In particular, a legacy invalid_blocks receipt can retry with
+ * its original operation ID and digest; completed/uncertain posts keep their
+ * existing replay/reconciliation path. Values and action IDs remain exact.
+ */
+export function slackMessageWireBlocks(
+  blocks: SlackMessageBlock[] | undefined,
+): SlackMessageBlock[] | undefined {
+  if (!blocks) return undefined;
+  const wire = blocks.flatMap((block, index): SlackMessageBlock[] => {
+    if (
+      block.type !== "actions" ||
+      new Set(block.elements.map((e) => e.action_id)).size === block.elements.length
+    )
+      return [block];
+    const id = createHash("sha256").update(`${index}:${block.block_id}`).digest("hex").slice(0, 24);
+    return block.elements.map((element, position) => ({
+      type: "actions",
+      block_id: `opengeni_wire_${id}_${position}`,
+      elements: [element],
+    }));
+  });
+  return validateSlackMessageBlocks(wire);
+}
+
 function validateSlackMessageBlocks(
   blocks: SlackMessageBlock[] | undefined,
 ): SlackMessageBlock[] | undefined {

package/src/integrations/slack-interactions.ts

@@ -3,6 +3,7 @@ import {
   approvalIdentifier,
   ApproveSlackUserLinkAccessRequest,
   DEFAULT_FIRST_PARTY_MCP_TOOLS,
+  resolveWorkspaceSessionToolDefaults,
   hasOpenGeniSlackReactionScope,
   ListSlackUserLinkAccessRequestsResponse,
   PrepareSlackUserLinkAccessRequest,
@@ -52,6 +53,7 @@ import {
   getOrCreateSlackInteraction,
   getLatestSessionModelForSubject,
   getSession,
+  getSessionByCreateIdempotencyKey,
   getSessionEvent,
   getSessionHumanInputRequest,
   childRequiresActionResolutionExists,
@@ -119,6 +121,7 @@ import {
   acceptSessionUserMessage,
   controlHumanSessionWorkstream,
   createSessionForRequest,
+  getActorNewSessionDefaults,
   hasPermission,
   requireAccessContext,
   requireAccessGrant,
@@ -2165,6 +2168,16 @@ async function processSlackInboxEntry(deps: ApiRouteDeps, entry: SlackInteractio
   );
   let session: Awaited<ReturnType<typeof createSessionForRequest>>;
   try {
+    const defaults = await slackNewSessionDefaults(
+      deps,
+      grant,
+      interaction,
+      `slack:${entry.connectionId}:${entry.providerEventId}`,
+    );
+    const workspace = await getWorkspace(deps.db, interaction.workspaceId);
+    const defaultTools =
+      defaults.firstPartyMcpTools ??
+      resolveWorkspaceSessionToolDefaults(workspace?.settings)?.firstPartyMcpTools;
     const prepared = slackInvocationPreparedMessage(
       preparedEntry,
       preparedAttachments,
@@ -2175,13 +2188,17 @@ async function processSlackInboxEntry(deps: ApiRouteDeps, entry: SlackInteractio
       grant,
       interaction.workspaceId,
       {
+        ...defaults,
         requestedSessionId: interaction.sessionReservationId,
         initialMessage: prepared.entry.text,
         ...(prepared.modelContext ? { modelContext: prepared.modelContext } : {}),
         instructions: SLACK_SESSION_INSTRUCTIONS,
-        firstPartyMcpTools: slackTaskFirstPartyMcpTools(deps.settings),
-        resources: preparedAttachments.resources,
-        ...(preferredModel ? { model: preferredModel } : {}),
+        firstPartyMcpTools:
+          defaultTools !== undefined
+            ? allowedFirstPartyMcpToolsForSession(deps.settings, defaultTools)
+            : slackTaskFirstPartyMcpTools(deps.settings),
+        resources: [...defaults.resources, ...preparedAttachments.resources],
+        ...(!defaults.model && preferredModel ? { model: preferredModel } : {}),
         idempotencyKey: `slack:${entry.connectionId}:${entry.providerEventId}`,
         clientEventId: `slack:${entry.providerEventId}`,
       },
@@ -2764,19 +2781,25 @@ async function processSlackReactionInboxEntry(
   const preparedEntry = slackReactionPreparedEntry(entry, context, preparedTask);
   let session: Awaited<ReturnType<typeof createSessionForRequest>>;
   try {
+    const defaults = await slackNewSessionDefaults(
+      deps,
+      grant,
+      interaction,
+      `slack-interaction:${interaction.id}`,
+    );
     session = await createSessionForRequest(
       await withCatalogSettings(deps, grant),
       grant,
       interaction.workspaceId,
       {
+        ...defaults,
         requestedSessionId: interaction.sessionReservationId,
         initialMessage: preparedEntry.text,
         instructions: SLACK_SESSION_INSTRUCTIONS,
-        // The exact reacted message and bounded containing thread are already in
-        // the prompt; do not expose general Slack history tools for this trigger.
-        firstPartyMcpTools: resolveFirstPartyMcpToolPolicy(deps.settings).default,
-        resources: preparedTask.resources,
-        ...(preferredModel ? { model: preferredModel } : {}),
+        // Reaction context stays bounded; ordinary tools follow the same saved
+        // selection/workspace defaults as the website, without adding Slack tools.
+        resources: [...defaults.resources, ...preparedTask.resources],
+        ...(!defaults.model && preferredModel ? { model: preferredModel } : {}),
         // Every reaction entry converging on this route must use the same create
         // key. This closes the same-owner multi-event race while the owner check
         // above prevents a different subject from winning creation authority.
@@ -2854,6 +2877,54 @@ function slackReactionPreparedEntry(
   };
 }
 
+// A create can commit its reserved shell before initial-event acceptance. Keep
+// that shell's selections on retry instead of reading a subsequently edited draft.
+async function slackNewSessionDefaults(
+  deps: ApiRouteDeps,
+  grant: AccessGrant,
+  interaction: { workspaceId: string; sessionReservationId: string; owningSubjectId: string },
+  createKey: string,
+): Promise<Awaited<ReturnType<typeof getActorNewSessionDefaults>>> {
+  const pending = await getSessionByCreateIdempotencyKey(
+    deps.db,
+    interaction.workspaceId,
+    createKey,
+  );
+  if (!pending) return getActorNewSessionDefaults(deps, grant, interaction.workspaceId);
+  if (
+    pending.id !== interaction.sessionReservationId ||
+    interaction.owningSubjectId !== grant.subjectId ||
+    pending.createdBy.kind !== "subject" ||
+    pending.createdBy.subjectId !== grant.subjectId
+  ) {
+    throw new SlackInteractionPermanentError("slack_session_create_identity_mismatch");
+  }
+  return {
+    model: pending.model,
+    reasoningEffort: pending.reasoningEffort,
+    latencyMode: pending.latencyMode,
+    resources: pending.resources.filter((resource) => resource.kind === "repository"),
+    ...(pending.toolPolicy.mode === "explicit"
+      ? { tools: pending.tools }
+      : {
+          excludedMcpServerIds: pending.toolPolicy.excludedMcpServerIds,
+        }),
+    firstPartyMcpTools: pending.firstPartyMcpTools,
+    ...(pending.firstPartyMcpPermissions
+      ? { firstPartyMcpPermissions: pending.firstPartyMcpPermissions }
+      : {}),
+    variableSetIds: pending.variableSetIds,
+    ...(pending.rigId ? { rigId: pending.rigId } : {}),
+    sandboxBackend: pending.sandboxBackend,
+    ...(pending.sandboxBackend === "selfhosted" && pending.activeSandboxId
+      ? {
+          targetSandboxId: pending.activeSandboxId,
+          ...(pending.workingDir ? { workingDir: pending.workingDir } : {}),
+        }
+      : {}),
+  };
+}
+
 async function remountSlackReactionTaskForSession(
   deps: ApiRouteDeps,
   workspaceId: string,

package/src/mcp/child-read-evidence.ts

@@ -0,0 +1,19 @@
+/** Select only whole items that actually survived the model-facing envelope.
+ * A cursor is a position, never proof that preceding content was consumed. */
+export function completeChildReadSequences(page: {
+  view: string;
+  sourceExact: boolean;
+  events: readonly ({ sequence: number } & Record<string, unknown>)[];
+}): number[] {
+  if (!page.sourceExact || !["conversation", "results"].includes(page.view)) return [];
+  return page.events
+    .filter((event) => {
+      if (event.sourceOmitted) return false;
+      if (event.fragment === undefined) return true;
+      if (!event.fragment || typeof event.fragment !== "object") return false;
+      const fragment = event.fragment as Record<string, unknown>;
+      // A final fragment cannot prove earlier fragments were ever read.
+      return fragment.offset === 0 && fragment.complete === true;
+    })
+    .map((event) => event.sequence);
+}

package/src/mcp/first-party-tool-permissions.ts

@@ -90,6 +90,7 @@ export const FIRST_PARTY_TOOL_AUTHORIZATION = {
   run_on: { sessionRequired: true, allOf: ["sessions:control"] },
   sandbox_provision: { sessionRequired: true, allOf: ["sessions:control"] },
   connected_machine_remove: { allOf: ["enrollments:manage"] },
+  connected_machine_enroll_token: { allOf: ["enrollments:manage"] },
   rig_list: { allOf: ["rigs:use"] },
   rig_get: { allOf: ["rigs:use"] },
   rig_propose_change: { allOf: ["rigs:use"] },