@opengeni/api-router 4.1.0 → 4.1.2-canary.36199476632001

package/dist/integrations/github-lens-connect.d.ts

@@ -46,7 +46,7 @@ export declare function requireGitHubLensConnect(deps: ApiRouteDeps): Promise<{
                 eager?: boolean | undefined;
                 optional?: boolean | undefined;
             }[];
-            firstPartyMcpTools: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_enroll_token" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+            firstPartyMcpTools: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_read" | "browser_screenshot" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_enroll_token" | "connected_machine_remove" | "custom_mcp_setup_request" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
             firstPartyMcpPermissions: ("account:admin" | "account:read" | "api_keys:manage" | "artifacts:publish" | "artifacts:read" | "billing:manage" | "billing:read" | "capabilities:manage" | "codemode:call" | "connections:read" | "connections:write" | "documents:manage" | "documents:search" | "enrollments:manage" | "enrollments:read" | "environments:manage" | "environments:use" | "files:read" | "files:upload" | "files:write" | "github:manage" | "github:use" | "goals:manage" | "mcp_servers:attach" | "members:manage" | "rigs:manage" | "rigs:use" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "secrets:list" | "secrets:read" | "secrets:write" | "sessions:control" | "sessions:create" | "sessions:read" | "stream:acknowledge" | "stream:control" | "stream:view" | "terminal:attach" | "variable-sets:attach" | "variable-sets:list" | "variable-sets:manage" | "variable-sets:read" | "variable-sets:use" | "variable-sets:write" | "workspace:admin" | "workspace:create" | "workspace:read")[];
             model: string | null;
             reasoningEffort: "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh" | null;

package/dist/integrations/oauth-client.d.ts

@@ -6,6 +6,34 @@ import { claimConnectOperation, finishConnectOperation, type Database } from "@o
 import { type McpAuthorizationServerMetadata } from "@opengeni/network";
 import { type OAuthProviderProfile } from "./oauth-profiles.js";
 export declare const oauthStateTtlMs: number;
+/**
+ * Workspace-free landing for a callback whose state names no trustworthy
+ * workspace. The web app resolves it to the viewer's current workspace
+ * integrations page and keeps the callback outcome parameters.
+ */
+export declare const INTEGRATIONS_FALLBACK_PATH = "/integrations";
+/** The web integrations page for one workspace (the Plugins surface). */
+export declare function workspaceIntegrationsPath(workspaceId: string): string;
+/**
+ * The integrations page for a workspace id read from untrusted input (a URL
+ * parameter or an unverified-age state), or null unless it is a workspace UUID.
+ * A link target only: it grants nothing.
+ */
+export declare function workspaceIntegrationsPathForUntrusted(candidate: unknown): string | null;
+/**
+ * Where a callback returns, and why, when its own signed state is unusable.
+ *
+ * A correctly signed state still names its workspace, even when it is too old
+ * or its flow rejected it, so the browser returns to that workspace's
+ * integrations page; an aged one is reported as expired. Anything unsigned,
+ * tampered, or signed with another secret returns to
+ * {@link INTEGRATIONS_FALLBACK_PATH}. Display routing only: nothing here
+ * authorizes, resumes, or replays the callback.
+ */
+export declare function oauthStateFailureReturn(settings: Settings, rawState: string | undefined, nowMs?: number): {
+    returnPath: string;
+    reason: "state_expired" | "state_invalid";
+};
 export { OFFICIAL_GMAIL_MCP_SCOPES, OFFICIAL_GMAIL_MCP_URL, OFFICIAL_SLACK_MCP_URL, } from "./oauth-profiles.js";
 export { OAUTH_MAX_RESPONSE_BYTES } from "@opengeni/network";
 type OAuthClientDeps = {
@@ -160,6 +188,8 @@ export declare function isHostedSlackMcpTarget(providerDomain: string, mcpUrl: s
 export declare function completeMcpOAuthCallback(deps: OAuthClientDeps, input: {
     code?: string | undefined;
     state?: string | undefined;
+    /** The provider's `error` parameter, for example `access_denied` on Cancel. */
+    error?: string | undefined;
     requestUrl: string;
 }): Promise<OAuthCallbackResult>;
 export declare function integrationBaseUrl(publicBaseUrl: string | undefined, requestUrl: string): string;

package/dist/integrations/slack-bot.d.ts

@@ -4,6 +4,7 @@ import { type Database } from "@opengeni/db";
 import { type FetchLike } from "@opengeni/network";
 import { HTTPException } from "hono/http-exception";
 export declare const SLACK_REACTION_IMAGE_MAX_BYTES: number;
+export declare const SLACK_MCP_IMAGE_MAX_BYTES: number;
 declare const SLACK_REACTION_CONTEXT_CHECKPOINT_VERSION = 1;
 type SlackPayload = Record<string, unknown> & {
     ok?: unknown;
@@ -680,7 +681,50 @@ export declare class OpenGeniSlackBotClient {
         fileId: string;
         parentFileId?: string;
         offset?: number;
-    }): Promise<{
+    }): Promise<({
+        channel: {
+            id: string;
+            name: string;
+            isPrivate: boolean;
+            isMember: boolean;
+            isDirectMessage: boolean;
+            isMpim: boolean;
+            isArchived: boolean;
+            isShared: boolean;
+            isExternallyShared: boolean;
+            isOrgShared: boolean;
+            isPendingExternallyShared: boolean;
+            contextTeamId: string | null;
+            connectedTeamIds: string[] | null;
+            sharedTeamIds: string[] | null;
+            topic: string;
+            purpose: string;
+            numMembers: number | null;
+        };
+        file: {
+            id: string;
+            name: string;
+            title: string;
+            mimetype: string;
+            filetype: string;
+            mode: string;
+            size: number | null;
+            originatingHuddleId: string;
+            huddleTranscriptFileId: string;
+        };
+        image: Readonly<{
+            fileId: string;
+            filename: string;
+            contentType: "image/png" | "image/jpeg" | "image/webp";
+            bytes: Uint8Array;
+        }>;
+        contentType?: never;
+        offset?: never;
+        content?: never;
+        nextOffset?: never;
+        truncated?: never;
+    } | {
+        image?: never;
         channel: {
             id: string;
             name: string;
@@ -716,7 +760,7 @@ export declare class OpenGeniSlackBotClient {
         content: string;
         nextOffset: number | null;
         truncated: boolean;
-    } & {
+    }) & {
         receipt: SlackBotReceipt;
     }>;
     /**
@@ -783,6 +827,8 @@ export declare class OpenGeniSlackBotClient {
     private recordAudit;
     private auditMetadata;
 }
+/** Full decode guards the model image block against header-only or corrupt files. */
+export declare function validateSlackMcpImage(bytes: Uint8Array): Promise<void>;
 export declare function createOpenGeniSlackBotClient(deps: {
     db: Database;
     settings: Settings;

package/dist/integrations/slack-interactions.d.ts

@@ -19,7 +19,7 @@ export declare const SLACK_SESSION_INSTRUCTIONS: string;
  * selection at session creation while keeping Slack mutations out of the model
  * surface; interaction delivery remains owned by the durable delivery pump.
  */
-export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_enroll_token" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_read" | "browser_screenshot" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_enroll_token" | "connected_machine_remove" | "custom_mcp_setup_request" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_set_project" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
 export type NormalizedSlackInteraction = {
     providerEventId: string;
     providerMessageId: string;

package/dist/mcp/documents.d.ts

@@ -1,3 +1,4 @@
+import type { Settings } from "@opengeni/config";
 import type { DocumentServices } from "@opengeni/documents";
 import { type KnowledgeContext, type Database } from "@opengeni/db";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -5,4 +6,5 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
  * chunk/base retrieval is retired: it cannot bypass pending Knowledge review. */
 export declare function buildDocumentsMcpServer(db: Database, accountId: string, workspaceId: string, documentServices: DocumentServices, options: {
     knowledge: KnowledgeContext;
+    settings?: Settings;
 }): McpServer;

package/dist/mcp/first-party-tool-permissions.d.ts

@@ -271,6 +271,14 @@ export declare const FIRST_PARTY_TOOL_AUTHORIZATION: {
         sessionRequired: true;
         allOf: "sessions:read"[];
     };
+    browser_read: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
+    browser_screenshot: {
+        sessionRequired: true;
+        allOf: "sessions:read"[];
+    };
     browser_act: {
         sessionRequired: true;
         allOf: "sessions:control"[];
@@ -351,6 +359,10 @@ export declare const FIRST_PARTY_TOOL_AUTHORIZATION: {
         sessionRequired: true;
         allOf: "workspace:read"[];
     };
+    custom_mcp_setup_request: {
+        sessionRequired: true;
+        allOf: "workspace:read"[];
+    };
     github_connect_link: {
         allOf: "github:use"[];
     };

package/dist/mcp/server.d.ts

@@ -2,6 +2,7 @@ import { type AccessGrant, type GitHubRepository, type ResourceRef, type Session
 import { listSessionDiscoverySummaries, type SessionDiscoveryCursor, type SessionDiscoveryOrderBy, type MemoryAgentScope } from "@opengeni/db";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { ApiRouteDeps } from "@opengeni/core";
+import { type OpenGeniSlackBotClient } from "../integrations/slack-bot.js";
 export type McpServerOptions = {
     requestOrigin?: string | null;
     workspaceMemoryEnabled?: boolean | undefined;
@@ -14,6 +15,40 @@ export type McpServerOptions = {
      */
     sessionMemory?: MemoryAgentScope | null | undefined;
 };
+export declare function slackBotFileContentResult(result: Awaited<ReturnType<OpenGeniSlackBotClient["fileContent"]>>): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    structuredContent: {
+        kind: "text";
+        fileId: string;
+        contentType: string;
+        content: string;
+        sizeBytes: null;
+        nextOffset: number | null;
+    };
+} | {
+    structuredContent: {
+        kind: "image";
+        fileId: string;
+        contentType: "image/jpeg" | "image/png" | "image/webp";
+        content: null;
+        sizeBytes: number;
+        nextOffset: null;
+    };
+    content: ({
+        type: "text";
+        text: string;
+        mimeType?: never;
+        data?: never;
+    } | {
+        text?: never;
+        type: "image";
+        mimeType: "image/jpeg" | "image/png" | "image/webp";
+        data: string;
+    })[];
+};
 export declare function buildOpenGeniMcpServer(deps: ApiRouteDeps, grant: AccessGrant, options?: McpServerOptions): McpServer;
 /** Only a prompt explicitly supplied through the human/API channel may redirect a user-paused goal. */
 export declare function isHumanDirectedTurn(turn: {

package/dist/model-catalog.d.ts

@@ -1,6 +1,6 @@
 import { type ConfiguredModel } from "@opengeni/config";
-import { ClientModel, type WorkspaceModelCatalogResponse as WorkspaceModelCatalogResponseType } from "@opengeni/contracts";
-import { type WorkspaceModelSelectionInput } from "@opengeni/core";
+import { ClientModel, type DefaultModelSelection, type WorkspaceModelCatalogResponse as WorkspaceModelCatalogResponseType } from "@opengeni/contracts";
+import { type WorkspaceModelSelection, type WorkspaceModelSelectionInput } from "@opengeni/core";
 export { MODEL_CREDENTIAL_READINESS_OBSERVATION_MAX_AGE_MS, type ModelAvailabilityObservation, type ModelCredentialReadinessObservation, } from "@opengeni/core";
 /** Static, client-safe definition projection. No provider secret is reachable. */
 export declare function projectClientModel(model: ConfiguredModel): ClientModel;
@@ -12,4 +12,10 @@ export declare function projectClientModel(model: ConfiguredModel): ClientModel;
  * successful typed resolver observation; credential health and provider health
  * are separate inputs and neither is fabricated.
  */
-export declare function buildWorkspaceModelCatalog(input: WorkspaceModelSelectionInput): WorkspaceModelCatalogResponseType;
+export declare function buildWorkspaceModelCatalog(input: WorkspaceModelSelectionInput, defaults?: WorkspaceModelCatalogDefaults): WorkspaceModelCatalogResponseType;
+/** Resolved new-chat defaults published beside the catalog rows. */
+export type WorkspaceModelCatalogDefaults = {
+    defaultSelection: DefaultModelSelection;
+    creditsSelection: DefaultModelSelection | null;
+};
+export declare function projectWorkspaceModelCatalog(selections: readonly WorkspaceModelSelection[], defaults?: WorkspaceModelCatalogDefaults): WorkspaceModelCatalogResponseType;

package/dist/observability.d.ts

@@ -1,3 +1,5 @@
-import type { EventLogger } from "@opengeni/events";
+import { type EventBusOptions, type EventLogger } from "@opengeni/events";
 import type { Observability } from "@opengeni/observability";
+/** Logger plus the closed-label subscription-termination counter for NATS connections. */
+export declare function observabilityEventBusOptions(observability: Observability): Pick<EventBusOptions, "logger" | "onSubscriptionTerminated">;
 export declare function observabilityEventLogger(observability: Observability): EventLogger;

package/dist/routes/billing.d.ts

@@ -18,4 +18,31 @@ export declare function stripeBillingPortalSessionCreateParams(input: {
     publicBaseUrl?: string | undefined;
     returnUrl?: string | undefined;
 }): Stripe.BillingPortal.SessionCreateParams;
+export type StripeCheckoutCreditDecision = {
+    action: "grant";
+    credit: CheckoutCreditMetadata;
+} | {
+    action: "ignore";
+    reason: "foreign_checkout" | "not_payment_mode" | "payment_not_paid";
+};
+/**
+ * Decides whether a Checkout Session webhook grants OpenGeni credits.
+ *
+ * Sessions created outside OpenGeni on the same Stripe account carry no
+ * `opengeni_` metadata and are acknowledged without effect. An OpenGeni
+ * session with malformed credit metadata still throws so the failure stays
+ * visible. Credits are granted only once Stripe reports the payment `paid`:
+ * on `checkout.session.completed` for immediate methods, or on
+ * `checkout.session.async_payment_succeeded` for delayed methods, whose
+ * completion event arrives `unpaid`. Both events carry the same session
+ * metadata, so the ledger idempotency key grants at most once.
+ */
+export declare function stripeCheckoutCreditDecision(session: Stripe.Checkout.Session): StripeCheckoutCreditDecision;
+export type CheckoutCreditMetadata = {
+    accountId: string;
+    amountMicros: number;
+    idempotencyKey: string;
+    amountUsd?: string;
+    packageId?: string;
+};
 export declare function stripeCustomerProvider(input: ApiRouteDeps | Stripe.Event): "stripe:live" | "stripe:test";

package/dist/routes/browser-sessions.d.ts

@@ -1,5 +1,6 @@
 import { InteractionActor, type AccessGrant, type FileAsset } from "@opengeni/contracts";
 import { type ApiRouteDeps, type ResolvedSessionAuthorization } from "@opengeni/core";
+import { type BrowserControlScreenshotOptions, type BrowserControlFrame } from "@opengeni/runtime/sandbox";
 import type { Hono } from "hono";
 export declare function registerBrowserSessionRoutes(app: Hono, deps: ApiRouteDeps): void;
 export declare function browserNeedsStandaloneDisplayStack(input: {
@@ -7,6 +8,8 @@ export declare function browserNeedsStandaloneDisplayStack(input: {
     linkedComputer: boolean;
     nativeBrowserControl: boolean;
 }): boolean;
+export declare function parseBrowserScreenshotOptions(query: URLSearchParams): BrowserControlScreenshotOptions;
+export declare function browserScreenshotResponse(frame: Pick<BrowserControlFrame, "data" | "mediaType" | "metadataHeader">): Response;
 export declare function interactionActorForGrant(grant: AccessGrant): ReturnType<typeof InteractionActor.parse>;
 /** Resolve Drive authority from the same immutable session authorization that
  * admitted the browser action. Agent-attempt subjects are technical worker

package/dist/routes/client-errors.d.ts

@@ -0,0 +1,42 @@
+import type { Settings } from "@opengeni/config";
+import { CLIENT_ERROR_KINDS, CLIENT_ERROR_REPORT_MAX_BYTES, CLIENT_ERRORS_PATH, type ClientErrorKind } from "@opengeni/contracts/client-error-report";
+import type { Observability } from "@opengeni/observability";
+import type { Hono } from "hono";
+import { z } from "zod";
+export { CLIENT_ERROR_KINDS, CLIENT_ERROR_REPORT_MAX_BYTES, CLIENT_ERRORS_PATH, type ClientErrorKind, };
+export declare const ClientErrorReport: z.ZodObject<{
+    kind: z.ZodEnum<{
+        chunk_load: "chunk_load";
+        route_error: "route_error";
+        unhandled_rejection: "unhandled_rejection";
+        window_error: "window_error";
+    }>;
+    route: z.ZodString;
+    revision: z.ZodString;
+}, z.core.$strict>;
+export type ClientErrorReport = z.infer<typeof ClientErrorReport>;
+export type ClientErrorAdmission = {
+    admit(kind: ClientErrorKind): boolean;
+};
+/**
+ * One token bucket per closed kind bounds counter inflation and log volume
+ * from any caller, including an anonymous one, without per-client state.
+ */
+export declare function createClientErrorAdmission(options?: {
+    capacity?: number;
+    refillPerSecond?: number;
+    now?: () => number;
+}): ClientErrorAdmission;
+export declare function parseClientErrorReport(body: string | null): ClientErrorReport | null;
+/**
+ * The exact beacon request. The app-wide request-body limit skips it because
+ * the route enforces its own 512-byte limit on the streamed body; the generic
+ * ceiling would otherwise buffer a chunked body of many megabytes on an
+ * anonymous route before this one could refuse it.
+ */
+export declare function isClientErrorReportRequest(method: string, pathname: string): boolean;
+export declare function registerClientErrorRoutes(app: Hono, deps: {
+    observability: Observability;
+    settings: Pick<Settings, "corsAllowOriginRegex" | "publicBaseUrl" | "webBaseUrl">;
+    admission?: ClientErrorAdmission;
+}): void;

package/dist/routes/computer-sessions.d.ts

@@ -11,6 +11,8 @@ type ComputerFrameCaptureClient = {
 };
 export declare function validateComputerFrameForApi(frame: Pick<ComputerControlFrame, "data" | "mediaType" | "metadataHeader">, expected: ExpectedComputerFrameEvidence): ComputerControlFrame;
 export declare function captureModelComputerFrame(sessionClient: ComputerFrameCaptureClient, expected: ExpectedComputerFrameEvidence): Promise<ComputerControlFrame>;
+/** One validated screen frame, served as sandboxed, non-embeddable user content. */
+export declare function computerScreenshotResponse(frame: Pick<ComputerControlFrame, "data" | "mediaType" | "metadataHeader">): Response;
 /** Public ComputerSession resource surface. Physical app/window authority stays
  * in the same placement controller used by BrowserSession; this route owns only
  * durable authorization, placement fencing, lifecycle receipts, and routing. */

package/dist/routes/github-browser-pages.d.ts

@@ -0,0 +1,12 @@
+import type { GitHubInstallationBindingCandidate } from "@opengeni/contracts";
+export declare function githubInstallationChooserHtml(candidates: GitHubInstallationBindingCandidate[], state: string, workspaceId: string, baseUrl: string): string;
+export declare function githubSetupSuccessHtml(account: string, returnUrl: string): string;
+export declare function githubSetupPendingHtml(): string;
+/**
+ * Why a GitHub browser step could not continue. Browser navigation (a stale
+ * page-load link, GitHub's Cancel button, a non-owner) must land on a readable
+ * page with a way back, never on a raw JSON error body.
+ */
+export type GitHubConnectFailure = "expired" | "cancelled" | "not_owner" | "forbidden" | "policy_denied" | "signed_out" | "failed";
+export declare function githubConnectFailureHtml(failure: GitHubConnectFailure, returnUrl: string, detail?: string | null): string;
+export declare function githubSuccessHtml(envLines: string[]): string;

package/dist/routes/insights.d.ts

@@ -1,4 +1,30 @@
 import { type ApiRouteDeps, type WorkspaceInsightsFilterField } from "@opengeni/core";
 import type { Hono } from "hono";
 export declare function normalizeWorkspaceInsightsQueryFilter(value: string | null | undefined, field: WorkspaceInsightsFilterField): string | null;
+/**
+ * Share one in-flight computation between identical concurrent callers.
+ *
+ * A reload, a second tab, or a retried fetch joins the rollup already running
+ * instead of starting another multi-second aggregate on the database.
+ * Authorization and filter validation still run per request before a caller
+ * may join; the map only ever holds running work. The caller supplies the
+ * complete sharing key, which must identify everything the result depends on.
+ */
+export declare function createInFlightCoalescer<T>(): {
+    run: (key: string, work: () => Promise<T>) => Promise<T>;
+    readonly size: number;
+};
+/**
+ * Insights rows are filtered by the database RLS actor (private sessions are
+ * visible only to their owner), so two administrators of one workspace can
+ * legitimately receive different responses. The actor identity is part of
+ * the key; requests share work only when every visibility input is equal.
+ */
+export declare function workspaceInsightsCoalesceKey(input: {
+    workspaceId: string;
+    range: string;
+    provider: string | null;
+    model: string | null;
+    rlsActor: string | null;
+}): string;
 export declare function registerInsightsRoutes(app: Hono, deps: ApiRouteDeps): void;

package/dist/sandbox/auth-callout.d.ts

@@ -1,3 +1,4 @@
+import { type LogThrottle } from "@opengeni/observability";
 import { type NatsCalloutConfig, type Settings } from "@opengeni/config";
 import { type Database } from "@opengeni/db";
 import { type ResponderConnection } from "@opengeni/events";
@@ -11,7 +12,14 @@ export interface AuthCalloutDeps {
     settings: Settings;
     callout: NatsCalloutConfig;
     observability?: Observability;
+    /** Bounds repeated denial warnings; defaults to one process-wide throttle. */
+    denialWarningThrottle?: LogThrottle;
 }
+/** A stale or revoked machine re-dials on its reconnect backoff forever, so an
+ * unthrottled denial warning repeats every few seconds per machine. Log each
+ * distinct machine's first denial, then at most once per interval with the
+ * count of denials it hid. The denial decision itself is never throttled. */
+export declare const AUTH_CALLOUT_DENIAL_WARNING_INTERVAL_MS = 60000;
 /**
  * The pure validate→scoped-JWT decision, isolated from the NATS transport so it is
  * unit-testable. Given the raw authorization-request JWT bytes, returns the signed

package/dist/sandbox-file-artifacts.d.ts

@@ -1,6 +1,7 @@
 import { SandboxFileArtifactReceipt, type AccessGrant, type Session } from "@opengeni/contracts";
 import { type ApiRouteDeps, type AccessGrantAuthorization } from "@opengeni/core";
 import { getFile } from "@opengeni/db";
+import { type SandboxChannelAService } from "@opengeni/runtime/sandbox";
 /** Original bytes inherit the already-authorized source session's ownership. */
 export declare function publishSandboxFileArtifact(deps: ApiRouteDeps, input: Parameters<typeof publishSandboxFileArtifactInScope>[1]): Promise<SandboxFileArtifactReceipt>;
 declare function publishSandboxFileArtifactInScope(deps: ApiRouteDeps, input: {
@@ -10,7 +11,22 @@ declare function publishSandboxFileArtifactInScope(deps: ApiRouteDeps, input: {
     path: string;
     signal?: AbortSignal | undefined;
 }): Promise<SandboxFileArtifactReceipt>;
-export declare function sandboxArtifactRelativePath(value: string): string;
+/** Use the root captured by the same fenced Channel-A service that reads bytes,
+ * not the session's placement-home label or a caller-supplied root. */
+export declare function readSandboxArtifactFile(service: Pick<SandboxChannelAService, "capabilities" | "fsRead">, value: string, maxBytes: number): Promise<{
+    path: string;
+    sandboxPath: string;
+    read: {
+        path: string;
+        encoding: "base64" | "utf8";
+        content: string;
+        sizeBytes: number;
+        truncated: boolean;
+        isBinary: boolean;
+        revision: number;
+    };
+}>;
+export declare function sandboxArtifactRelativePath(value: string, workspaceRoot?: string): string;
 export declare function sandboxArtifactSafeFilename(filename: string): string;
 export declare function sandboxFileContentType(filename: string): string;
 export declare function sandboxArtifactIdentity(input: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/api-router",
-  "version": "4.1.0",
+  "version": "4.1.2-canary.36199476632001",
   "description": "OpenGeni HTTP surface: the Hono adapter/router (createApp), routes, MCP HTTP transport, and HTTP access adapters over @opengeni/core. An engine-distribution surface — its runtime closure includes engine-internal packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -43,24 +43,24 @@
     "@hono/zod-validator": "^0.7.6",
     "@llamaindex/liteparse": "2.14.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opengeni/agent-proto": "^0.6.0",
-    "@opengeni/artifact-tool": "^0.3.31",
-    "@opengeni/capabilities": "^0.3.4",
-    "@opengeni/codemode": "^0.6.1",
-    "@opengeni/codex": "^0.2.25",
-    "@opengeni/config": "^2.1.0",
-    "@opengeni/contracts": "^5.1.0",
-    "@opengeni/core": "^4.0.1",
-    "@opengeni/db": "^6.0.1",
-    "@opengeni/documents": "^0.8.32",
-    "@opengeni/events": "^0.4.30",
-    "@opengeni/github": "^0.7.15",
-    "@opengeni/network": "^0.3.1",
-    "@opengeni/observability": "^0.8.31",
-    "@opengeni/runtime": "^4.0.1",
-    "@opengeni/storage": "^0.2.132",
-    "@opengeni/tool-gateway": "^0.1.12",
-    "@opengeni/xai-subscription": "^0.1.4",
+    "@opengeni/agent-proto": "^0.6.0-canary.36199476632001",
+    "@opengeni/artifact-tool": "^0.3.32-canary.36199476632001",
+    "@opengeni/capabilities": "^0.3.4-canary.36199476632001",
+    "@opengeni/codemode": "^0.6.2-canary.36199476632001",
+    "@opengeni/codex": "^0.2.26-canary.36199476632001",
+    "@opengeni/config": "^2.1.1-canary.36199476632001",
+    "@opengeni/contracts": "^5.1.1-canary.36199476632001",
+    "@opengeni/core": "^4.0.3-canary.36199476632001",
+    "@opengeni/db": "^6.0.3-canary.36199476632001",
+    "@opengeni/documents": "^0.8.34-canary.36199476632001",
+    "@opengeni/events": "^0.4.32-canary.36199476632001",
+    "@opengeni/github": "^0.7.16-canary.36199476632001",
+    "@opengeni/network": "^0.3.1-canary.36199476632001",
+    "@opengeni/observability": "^0.8.32-canary.36199476632001",
+    "@opengeni/runtime": "^4.0.3-canary.36199476632001",
+    "@opengeni/storage": "^0.2.133-canary.36199476632001",
+    "@opengeni/tool-gateway": "^0.1.13-canary.36199476632001",
+    "@opengeni/xai-subscription": "^0.1.4-canary.36199476632001",
     "@temporalio/client": "^1.17.0",
     "better-auth": "^1.6.14",
     "hono": "^4.12.18",