@opengeni/api-router 4.1.2-canary.36079201993001 → 4.1.2

package/dist/app.js

@@ -24,7 +24,7 @@ import {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession,
   workspaceActorContextExempt
-} from "./chunk-PTO4RZT5.js";
+} from "./chunk-2SSU5KWV.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,
   allowedCorsOrigin,

package/dist/{chunk-PTO4RZT5.js → chunk-2SSU5KWV.js}

@@ -331,10 +331,6 @@ var FIRST_PARTY_TOOL_AUTHORIZATION = {
     sessionRequired: true,
     allOf: ["workspace:read"]
   },
-  custom_mcp_setup_request: {
-    sessionRequired: true,
-    allOf: ["workspace:read"]
-  },
   github_connect_link: { allOf: ["github:use"] },
   github_repositories_list: { allOf: ["github:use"] },
   social_connections_list: { allOf: ["connections:read"] },
@@ -27755,7 +27751,7 @@ function registerGoalTools(server, deps, grant, sessionId, json) {
   server.registerTool(
     "goal_update",
     {
-      description: "Maintain your operational goal as user direction or meaningful new evidence clarifies the intended outcome. Changes apply directly unless the user explicitly configured review_changes; refinement, adaptation, and replacement are audit classifications, not approval gates under the default policy. Use the exact expected objective revision and a concise rationale. Updating a goal grants no additional authority and cannot change root constraints. Use goal_progress for an execution-progress audit fact rather than a goal rewrite.",
+      description: "Propose or apply a semantic goal revision under the session's mutation policy. Retain the standing goal unless explicit user direction or meaningful new evidence justifies the declared refinement, adaptation, or replacement. Every rewrite must use the exact expected objective revision and a concise rationale. Root constraints cannot be changed by an agent. A rewrite is not an execution-progress audit fact; use the optional goal_progress tool when such a fact should be recorded.",
       inputSchema: {
         text: goalText.optional(),
         successCriteria: successCriteriaSchema.nullable().optional(),
@@ -30687,60 +30683,6 @@ function registerCapabilityDiscoveryTools(server, deps, grant, sessionId, json)
       });
     }
   );
-  server.registerTool(
-    "custom_mcp_setup_request",
-    {
-      description: "Show a review card for a remote HTTPS MCP server that is not in the workspace catalog. Use only an endpoint supplied by the user or established by reliable documentation; do not invent a URL. Never include query parameters or secrets in this URL; the human can edit it in the protected setup form. The agent cannot add, enable, or contact the server. Search the catalog first and do not propose an already available integration.",
-      inputSchema: {
-        name: z43.string().trim().min(1).max(256),
-        endpointUrl: z43.string().url().max(2048).refine((url) => {
-          const parsed = new URL(url);
-          return parsed.protocol === "https:" && !parsed.username && !parsed.password && !parsed.hash && !parsed.search;
-        }),
-        rationale: z43.string().trim().min(1).max(2e3)
-      }
-    },
-    async ({ name, endpointUrl, rationale }) => {
-      await authorize();
-      const current = await catalog();
-      const existing = current.items.find(
-        (item) => item.kind === "mcp" && item.endpointUrl === endpointUrl && !item.stale
-      );
-      if (existing) {
-        return json({
-          status: "already_in_catalog",
-          capabilityId: existing.id,
-          message: "Use the catalog authorization flow for this server instead."
-        });
-      }
-      const claims = exactAgentCommandContext(grant, sessionId);
-      const payload = ToolAuthNeededPayload.parse({
-        serverId: "opengeni",
-        toolName: "custom_mcp_setup_request",
-        providerDomain: new URL(endpointUrl).hostname,
-        reason: "missing_connection",
-        setupRequest: { kind: "mcp", name, endpointUrl, rationale }
-      });
-      const appended = await appendAndPublishTurnEventsFenced(
-        deps.db,
-        deps.bus,
-        grant.workspaceId,
-        sessionId,
-        claims.callerTurnId,
-        claims.callerExecutionGeneration,
-        claims.callerAttemptId,
-        [{ type: "tool.auth_needed", payload }]
-      );
-      if (!appended.accepted) {
-        throw new Error("The calling turn was replaced before the setup request committed.");
-      }
-      return json({
-        status: "setup_requested",
-        eventId: appended.events[0]?.id ?? null,
-        message: "The human review card was posted. No server was added or contacted."
-      });
-    }
-  );
 }
 async function capabilitySetupProjection(deps, workspaceId, item, availableServerIds, acceptedServerIds, accountSelectionKnown, availableFirstPartyTools, selectedFirstPartyTools) {
   if (item.surfaceType === "first_party_fiken") {
@@ -70671,7 +70613,6 @@ import {
   dispatchExternalAuth,
   dispatchProtectedAuthFill,
   failBrowserSessionOperation,
-  failPreparedBrowserSessionEnd,
   failPreparedBrowserSessionSuspend,
   failBrowserSessionResume,
   failBrowserSessionResumePreparation,
@@ -74123,7 +74064,6 @@ function registerBrowserSessionRoutes(app, deps) {
       const request = await parseJsonBody2(context, BrowserSessionLifecycleRequest);
       const startedAtMs = performance.now();
       const origin = requestOrigin(context, deps.settings);
-      let endPreparation = null;
       try {
         const before = await getBrowserSessionControlRecord(deps.db, {
           accountId: grant.accountId,
@@ -74137,10 +74077,7 @@ function registerBrowserSessionRoutes(app, deps) {
           workspaceId,
           browserSessionId,
           operationId: request.operationId,
-          actorSubjectId: grant.subjectId,
-          expectedLifecycle: before.session.lifecycle,
-          expectedFailureCode: before.session.failureCode,
-          expectedControllerGeneration: before.session.controller?.controllerGeneration ?? null
+          actorSubjectId: grant.subjectId
         });
         if (isTerminalOperation(prepared.operation.state)) {
           if (prepared.operation.state === "completed") {
@@ -74156,13 +74093,6 @@ function registerBrowserSessionRoutes(app, deps) {
           observeLifecycleResult(deps.observability, startedAtMs, parsed2);
           return context.json(parsed2, 200);
         }
-        if (before.session.lifecycle !== "ending") {
-          endPreparation = {
-            restoreLifecycle: before.session.lifecycle,
-            restoreFailureCode: before.session.failureCode,
-            expectedControllerGeneration: before.session.controller?.controllerGeneration ?? null
-          };
-        }
         const record6 = await getBrowserSessionControlRecord(deps.db, {
           accountId: grant.accountId,
           workspaceId,
@@ -74252,16 +74182,6 @@ function registerBrowserSessionRoutes(app, deps) {
         observeLifecycleResult(deps.observability, startedAtMs, parsed);
         return context.json(parsed, 200);
       } catch (error) {
-        if (endPreparation) {
-          await failPreparedBrowserSessionEnd(deps.db, {
-            accountId: grant.accountId,
-            workspaceId,
-            browserSessionId,
-            operationId: request.operationId,
-            ...endPreparation,
-            error: interactionFailure(error)
-          });
-        }
         throw browserRouteError(error);
       }
     }
@@ -75303,7 +75223,6 @@ async function settleBrowserSessionSuspensionCaptureFailure(deps, input, error)
   return await failBrowserSessionSuspension(deps.db, {
     ...input,
     ...outcomeUnknown ? { state: "outcome_unknown" } : {},
-    missingControllerSession: error.status === 404 && isMissingBrowserControllerSession(error),
     error: error.error
   });
 }
@@ -107630,4 +107549,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession4 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-PTO4RZT5.js.map
+//# sourceMappingURL=chunk-2SSU5KWV.js.map