@opengeni/api-router 5.2.0 → 5.3.0-canary.36927100590001

package/dist/access-grant-rls.d.ts

@@ -1,3 +1,3 @@
 import type { AccessGrant } from "@opengeni/contracts";
 import { type ApiRouteDeps } from "@opengeni/core";
-export declare function withAccessGrantSessionRlsContext<T>(deps: ApiRouteDeps, grant: AccessGrant, fn: () => Promise<T>): Promise<T>;
+export declare function withAccessGrantSessionRlsContext<T>(deps: Pick<ApiRouteDeps, "db">, grant: AccessGrant, fn: () => Promise<T>): Promise<T>;

package/dist/app.d.ts

@@ -1,4 +1,5 @@
-import { type AccessGrant, type ErrorCode } from "@opengeni/contracts";
+import { type Settings } from "@opengeni/config";
+import { type AccessGrant, type ErrorCode, type FirstPartyMcpToolName, type Session } from "@opengeni/contracts";
 import { Hono } from "hono";
 import type { ApiRouteDeps, AppDependencies } from "@opengeni/core";
 export { allowedCorsOrigin } from "./http/cors.js";
@@ -20,6 +21,14 @@ export declare function createAppComposition(deps: AppDependencies): {
 };
 export declare function appendVary(current: string | null, value: string): string;
 export declare function workspaceActorContextExempt(method: string, pathname: string): boolean;
+/** Configured SDK credentials cannot regain tools from widened legacy columns. */
+export declare function configuredCodemodeSessionProxyTools(settings: Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">, session: Pick<Session, "agent">): FirstPartyMcpToolName[] | null;
+/**
+ * Permissions span capabilities: project_create grants sessions:create,
+ * and runtime titling grants sessions:control. Fence the endpoint family
+ * too, without changing null-config routing or ordinary REST authorization.
+ */
+export declare function assertConfiguredCodemodeSessionProxyPath(session: Pick<Session, "id" | "agent">, path: string, method: string): void;
 export declare function httpStatusForError(error: unknown): number;
 export declare function errorCodeForStatus(status: number): ErrorCode;
 /**

package/dist/app.js

@@ -5,6 +5,8 @@ import {
   apiContractAdmission,
   apiRequestBodyLimitBytes,
   appendVary,
+  assertConfiguredCodemodeSessionProxyPath,
+  configuredCodemodeSessionProxyTools,
   createApp,
   createAppComposition,
   errorCodeForStatus,
@@ -26,7 +28,8 @@ import {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession,
   workspaceActorContextExempt
-} from "./chunk-WL3TES6Q.js";
+} from "./chunk-2QCRFD6U.js";
+import "./chunk-OGQDXVXY.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,
   REFUSED_API_CONTRACT_REVISIONS,
@@ -34,6 +37,8 @@ export {
   apiContractAdmission,
   apiRequestBodyLimitBytes,
   appendVary,
+  assertConfiguredCodemodeSessionProxyPath,
+  configuredCodemodeSessionProxyTools,
   createApp,
   createAppComposition,
   errorCodeForStatus,

package/dist/browser-controller-authority.d.ts

@@ -1,61 +1 @@
-import type { InteractionPlacement, NetworkRouteConfiguration, NetworkRouteConsistency } from "@opengeni/contracts";
-type BrowserControllerAuthorityScope = {
-    rootSecret: string;
-    accountId: string;
-    workspaceId: string;
-    placement: InteractionPlacement;
-    placementInstanceId: string;
-};
-type BrowserSessionAuthorityScope = BrowserControllerAuthorityScope & {
-    browserSessionId: string;
-    controllerGeneration: string;
-    tokenGeneration: number;
-};
-type ComputerSessionAuthorityScope = BrowserControllerAuthorityScope & {
-    computerSessionId: string;
-    controllerGeneration: string;
-    tokenGeneration: number;
-};
-/** Stable placement-admin authority. This token is installed owner-only inside
- * the exact placement and is never persisted or returned by the public API. */
-export declare function deriveBrowserControllerAdminToken(scope: BrowserControllerAuthorityScope): string;
-/** Deterministic controller credentials. The durable generations are the only
- * stored authority; plaintext tokens can be reconstructed only by API replicas
- * holding the deployment HMAC root. */
-export declare function deriveBrowserSessionControllerTokens(scope: BrowserSessionAuthorityScope): {
-    controlToken: string;
-    viewToken: string;
-};
-/** Secret-safe durable identity for one exact route launch. The digest binds
- * the route snapshot and proxy credential without making a password-verifier
- * hash available to database readers. */
-export declare function deriveBrowserNetworkRouteAuthorityDigest(scope: {
-    rootSecret: string;
-    accountId: string;
-    workspaceId: string;
-    browserSessionId: string;
-    routeId: string;
-    routeVersion: number;
-    credentialVersion: number | null;
-    configuration: NetworkRouteConfiguration;
-    consistency: NetworkRouteConsistency;
-    proxyCredential: {
-        username: string;
-        password: string;
-    } | null;
-}): string;
-export declare function deriveBrowserViewGrantToken(scope: BrowserSessionAuthorityScope & {
-    grantId: string;
-    expiresAt: string;
-}): string;
-/** ComputerSession credentials share the placement controller root while using
- * resource-specific domains. Browser and computer authority cannot collide. */
-export declare function deriveComputerSessionControllerTokens(scope: ComputerSessionAuthorityScope): {
-    controlToken: string;
-    viewToken: string;
-};
-export declare function deriveComputerViewGrantToken(scope: ComputerSessionAuthorityScope & {
-    grantId: string;
-    expiresAt: string;
-}): string;
-export {};
+export * from "@opengeni/interaction/browser-controller-authority";

package/dist/browser-state-authority.d.ts

@@ -1,27 +1 @@
-export type BrowserStateOperationScope = {
-    accountId: string;
-    workspaceId: string;
-    browserSessionId: string;
-    operationId: string;
-    objectKey: string;
-};
-export type BrowserStateArtifactScope = {
-    accountId: string;
-    workspaceId: string;
-    objectKey: string;
-    artifactDigest: string;
-    contentDigest: string;
-};
-/** Deterministic only within one idempotent publication operation. This lets a
- * control-plane retry present browserd with exactly the same secret authority
- * without storing a plaintext key or placing it in an operation row. */
-export declare function deriveBrowserStateDataKey(rootKey: Uint8Array, scopeInput: BrowserStateOperationScope): Buffer;
-/** Associated data for the encrypted profile object. It is reproducible from
- * durable non-secret artifact authority during restore. */
-export declare function browserStateArtifactAad(scopeInput: Pick<BrowserStateArtifactScope, "accountId" | "workspaceId" | "objectKey">): Buffer;
-/** Wrap a 32-byte artifact data key under the operator-held root key. The
- * ciphertext is bound to workspace, object, and both integrity digests. */
-export declare function wrapBrowserStateDataKey(rootKey: Uint8Array, dataKeyInput: Uint8Array, scopeInput: BrowserStateArtifactScope): string;
-export declare function unwrapBrowserStateDataKey(rootKey: Uint8Array, wrapped: string, scopeInput: BrowserStateArtifactScope): Buffer;
-export declare function browserStateObjectKey(workspaceIdInput: string, operationIdInput: string): string;
-export declare function browserStateManifestDigest(manifest: unknown): string;
+export * from "@opengeni/interaction/browser-state-authority";