@opengeni/config 0.7.8 → 0.7.11

package/dist/index.d.ts

@@ -125,6 +125,8 @@ declare const SettingsSchema: z.ZodObject<{
     integrationsStateSecret: z.ZodOptional<z.ZodString>;
     integrationsAllowPrivateNetworkTargets: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     integrationsOauthClientsJson: z.ZodDefault<z.ZodString>;
+    slackClientId: z.ZodOptional<z.ZodString>;
+    slackClientSecret: z.ZodOptional<z.ZodString>;
     maxNestedAgentDepth: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     goalMaxAutoContinuations: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     goalNoProgressLimit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;

package/dist/index.js

@@ -214,6 +214,8 @@ var SettingsSchema = z.object({
   integrationsStateSecret: z.string().optional(),
   integrationsAllowPrivateNetworkTargets: EnvBoolean.default(false),
   integrationsOauthClientsJson: z.string().default("{}"),
+  slackClientId: z.string().optional(),
+  slackClientSecret: z.string().optional(),
   // Undefined is meaningful: the migration boundary persists the product
   // default of 3 when no deployment override is supplied.
   maxNestedAgentDepth: z.coerce.number().int().nonnegative().max(MAX_NESTED_AGENT_DEPTH).optional(),
@@ -1123,6 +1125,8 @@ function getSettings() {
       "OPENGENI_INTEGRATIONS_ALLOW_PRIVATE_NETWORK_TARGETS"
     ),
     integrationsOauthClientsJson: optional("OPENGENI_INTEGRATIONS_OAUTH_CLIENTS_JSON"),
+    slackClientId: optional("OPENGENI_SLACK_CLIENT_ID"),
+    slackClientSecret: optional("OPENGENI_SLACK_CLIENT_SECRET"),
     maxNestedAgentDepth: optional("OPENGENI_MAX_NESTED_AGENT_DEPTH"),
     goalMaxAutoContinuations: optional("OPENGENI_GOAL_MAX_AUTO_CONTINUATIONS"),
     goalNoProgressLimit: optional("OPENGENI_GOAL_NO_PROGRESS_LIMIT"),
@@ -2129,7 +2133,7 @@ function stableSandboxEnvironmentForRun(settings, workspaceEnvironment = {}, opt
     ...workspaceEnvironment
   };
   const descriptor = CAPABILITY_DESCRIPTORS[settings.sandboxBackend];
-  if (settings.sandboxBackend !== "none" && settings.sandboxBackend !== "local") {
+  if (settings.sandboxBackend !== "none" && settings.sandboxBackend !== "local" && settings.sandboxBackend !== "selfhosted") {
     environment.HOME ??= descriptor.workspaceRoot;
   }
   const provisionedGitHelperBackend = settings.sandboxBackend !== "none" && settings.sandboxBackend !== "local" && settings.sandboxBackend !== "selfhosted";
@@ -2141,7 +2145,7 @@ function stableSandboxEnvironmentForRun(settings, workspaceEnvironment = {}, opt
     environment.PATH = prependPathEntry(environment.PATH, environment.OPENGENI_GIT_CLI_WRAPPER_DIR);
   }
   if (settings.toolspaceEnabled) {
-    environment.OPENGENI_TOOLSPACE_TOKEN_FILE ??= `${environment.HOME ?? descriptor.workspaceRoot}/.opengeni/toolspace-token`;
+    environment.OPENGENI_TOOLSPACE_TOKEN_FILE ??= settings.sandboxBackend === "selfhosted" ? "$HOME/.opengeni/toolspace-token" : `${environment.HOME ?? descriptor.workspaceRoot}/.opengeni/toolspace-token`;
     if (settings.ogtoolPackageSpec) {
       environment.OPENGENI_OGTOOL_PACKAGE_SPEC ??= settings.ogtoolPackageSpec;
     }
@@ -2441,6 +2445,7 @@ function positiveInt(value) {
 function ensureBuiltInMcpServers(settings) {
   const existing = settings.mcpServers.filter((server) => server.id !== "opengeni");
   const firstPartyMcpUrl = firstPartyMcpServerUrl(settings);
+  const firstPartyFilesMcpUrl = firstPartyFilesMcpServerUrl(firstPartyMcpUrl);
   const firstPartyDocsMcpUrl = firstPartyDocumentsMcpServerUrl(firstPartyMcpUrl);
   const hasFiles = existing.some((server) => server.id === "files");
   const hasDocs = existing.some((server) => server.id === "docs");
@@ -2466,7 +2471,7 @@ function ensureBuiltInMcpServers(settings) {
       {
         id: "files",
         name: "Files",
-        url: firstPartyMcpUrl,
+        url: firstPartyFilesMcpUrl,
         allowedTools: ["files_get_download_url"],
         cacheToolsList: true
       }
@@ -2511,6 +2516,9 @@ function firstPartyMcpServerUrl(settings) {
 function firstPartyDocumentsMcpServerUrl(mcpUrl) {
   return `${mcpUrl.replace(/\/+$/, "")}/docs`;
 }
+function firstPartyFilesMcpServerUrl(mcpUrl) {
+  return `${mcpUrl.replace(/\/+$/, "")}/files`;
+}
 function validateSettings(settings) {
   temporalConnectionOptions(settings);
   if (settings.toolspaceEnabled && !settings.delegationSecret) {
@@ -2559,6 +2567,28 @@ function validateSettings(settings) {
       );
     }
   }
+  if (Boolean(settings.slackClientId) !== Boolean(settings.slackClientSecret)) {
+    throw new Error(
+      "OPENGENI_SLACK_CLIENT_ID and OPENGENI_SLACK_CLIENT_SECRET must be configured together"
+    );
+  }
+  if (settings.slackClientId) {
+    if (!settings.publicBaseUrl) {
+      throw new Error(
+        "OPENGENI_PUBLIC_BASE_URL is required when the OpenGeni Slack app is configured"
+      );
+    }
+    if (!settings.publicBaseUrl.startsWith("https://") && !["local", "test"].includes(settings.environment)) {
+      throw new Error(
+        "OPENGENI_PUBLIC_BASE_URL must use https when the OpenGeni Slack app is configured outside local/test"
+      );
+    }
+    if (!settings.integrationsStateSecret) {
+      throw new Error(
+        "OPENGENI_INTEGRATIONS_STATE_SECRET is required when the OpenGeni Slack app is configured"
+      );
+    }
+  }
   parseIntegrationsOauthClientsJson(settings.integrationsOauthClientsJson);
   if (settings.productAccessMode === "configured" && !["local", "test"].includes(settings.environment) && !settings.delegationSecret && !settings.authRequired) {
     throw new Error(