@opengeni/contracts 0.26.1 → 0.28.1

package/dist/index.js

@@ -75,6 +75,7 @@ import {
   CreateSocialConnectionRequest,
   CreateSocialPostRequest,
   CreateVariableSetRequest,
+  CreateWorkspaceArtifactRequest,
   CreateWorkspaceEnvironmentRequest,
   CreateWorkspaceInstructionPolicyDraftRequest,
   CreateWorkspaceRequest,
@@ -311,6 +312,7 @@ import {
   PtyOpenResponse,
   PtyResizeRequest,
   PtyWriteRequest,
+  PublishWorkspaceArtifactVersionRequest,
   RETAINED_OUTPUT_DEFAULT_PAGE_BYTES,
   RETAINED_OUTPUT_MAX_PAGE_BYTES,
   RETAINED_OUTPUT_RECEIPT_MAX_BYTES,
@@ -348,6 +350,7 @@ import {
   RigSetupAppendPayload,
   RigVerificationHealth,
   RigVersion,
+  RollbackWorkspaceArtifactRequest,
   RollbackWorkspaceInstructionPolicyRequest,
   SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS,
   SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT,
@@ -440,6 +443,8 @@ import {
   SetWorkspaceEnvironmentVariableRequest,
   SocialConnection,
   SocialConnectionStatus,
+  SocialOAuthProviderId,
+  SocialOAuthStartRequest,
   SocialPost,
   SocialProvider,
   StaticUsageLimits,
@@ -510,6 +515,12 @@ import {
   ViewerHolder,
   VoiceInputErrorCode,
   WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION,
+  WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS,
+  WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS,
+  WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES,
+  WORKSPACE_ARTIFACT_LIST_DEFAULT,
+  WORKSPACE_ARTIFACT_LIST_MAX,
+  WORKSPACE_ARTIFACT_TITLE_MAX_CHARS,
   WORKSPACE_CONTROL_ACTOR_MAX_BYTES,
   WORKSPACE_CONTROL_EVENT_MAX_BYTES,
   WORKSPACE_CONTROL_REASON_MAX_BYTES,
@@ -525,6 +536,18 @@ import {
   WORKSPACE_STATE_MEMORY_SAMPLE_LIMIT,
   WORKSPACE_STATE_TOPIC_MAX_CHARS,
   Workspace,
+  WorkspaceArtifact,
+  WorkspaceArtifactContentResponse,
+  WorkspaceArtifactDetailResponse,
+  WorkspaceArtifactEvent,
+  WorkspaceArtifactEventType,
+  WorkspaceArtifactHtml,
+  WorkspaceArtifactListQuery,
+  WorkspaceArtifactListResponse,
+  WorkspaceArtifactMutationResponse,
+  WorkspaceArtifactSlug,
+  WorkspaceArtifactStatus,
+  WorkspaceArtifactVersion,
   WorkspaceCaptureDegradedReason,
   WorkspaceCaptureFile,
   WorkspaceCaptureManifest,
@@ -599,6 +622,7 @@ import {
   capabilityCatalogItemIsTrustedForExposure,
   compactSessionEventResult,
   compareCodexFleetCanonicalStringsV1,
+  comparePersonalSlackCanonicalConnections,
   createCodexFleetReplayRecordV1,
   createSecretRedactor,
   decodeNativeSnapshotRef,
@@ -620,6 +644,7 @@ import {
   normalizePreferenceRegistryStableKey,
   normalizeRepositorySubpath,
   normalizeResourceMountPath,
+  normalizeWorkspaceArtifactSlug,
   normalizeWorkspaceInstructionPolicyRoleKey,
   parseWorkspaceArchiveDescriptor,
   prefixedMcpToolName,
@@ -642,6 +667,7 @@ import {
   resourceMountPathCollisionKey,
   retainedArtifactReferenceFromFile,
   retainedOutputUnavailable,
+  selectCanonicalPersonalSlackConnection,
   sessionEventJsonBytes,
   sessionEventLatestClassToSemanticClass,
   sessionEventMediaPreview,
@@ -662,14 +688,14 @@ import {
   verifyRelayToken,
   verifyStreamToken,
   workspaceControlUtf8Bytes
-} from "./chunk-ESXP7QLV.js";
+} from "./chunk-3Q5FLMOD.js";
 import {
   OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES,
   OPENGENI_SLACK_BOT_REQUIRED_SCOPES,
   OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES,
   areOpenGeniSlackBotScopesAccepted,
   evaluateOpenGeniSlackBotScopes
-} from "./chunk-3B3XEYMN.js";
+} from "./chunk-KGL5BVGF.js";
 export {
   AccessContext,
   AccessGrant,
@@ -747,6 +773,7 @@ export {
   CreateSocialConnectionRequest,
   CreateSocialPostRequest,
   CreateVariableSetRequest,
+  CreateWorkspaceArtifactRequest,
   CreateWorkspaceEnvironmentRequest,
   CreateWorkspaceInstructionPolicyDraftRequest,
   CreateWorkspaceRequest,
@@ -986,6 +1013,7 @@ export {
   PtyOpenResponse,
   PtyResizeRequest,
   PtyWriteRequest,
+  PublishWorkspaceArtifactVersionRequest,
   RETAINED_OUTPUT_DEFAULT_PAGE_BYTES,
   RETAINED_OUTPUT_MAX_PAGE_BYTES,
   RETAINED_OUTPUT_RECEIPT_MAX_BYTES,
@@ -1023,6 +1051,7 @@ export {
   RigSetupAppendPayload,
   RigVerificationHealth,
   RigVersion,
+  RollbackWorkspaceArtifactRequest,
   RollbackWorkspaceInstructionPolicyRequest,
   SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS,
   SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT,
@@ -1115,6 +1144,8 @@ export {
   SetWorkspaceEnvironmentVariableRequest,
   SocialConnection,
   SocialConnectionStatus,
+  SocialOAuthProviderId,
+  SocialOAuthStartRequest,
   SocialPost,
   SocialProvider,
   StaticUsageLimits,
@@ -1185,6 +1216,12 @@ export {
   ViewerHolder,
   VoiceInputErrorCode,
   WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION,
+  WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS,
+  WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS,
+  WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES,
+  WORKSPACE_ARTIFACT_LIST_DEFAULT,
+  WORKSPACE_ARTIFACT_LIST_MAX,
+  WORKSPACE_ARTIFACT_TITLE_MAX_CHARS,
   WORKSPACE_CONTROL_ACTOR_MAX_BYTES,
   WORKSPACE_CONTROL_EVENT_MAX_BYTES,
   WORKSPACE_CONTROL_REASON_MAX_BYTES,
@@ -1200,6 +1237,18 @@ export {
   WORKSPACE_STATE_MEMORY_SAMPLE_LIMIT,
   WORKSPACE_STATE_TOPIC_MAX_CHARS,
   Workspace,
+  WorkspaceArtifact,
+  WorkspaceArtifactContentResponse,
+  WorkspaceArtifactDetailResponse,
+  WorkspaceArtifactEvent,
+  WorkspaceArtifactEventType,
+  WorkspaceArtifactHtml,
+  WorkspaceArtifactListQuery,
+  WorkspaceArtifactListResponse,
+  WorkspaceArtifactMutationResponse,
+  WorkspaceArtifactSlug,
+  WorkspaceArtifactStatus,
+  WorkspaceArtifactVersion,
   WorkspaceCaptureDegradedReason,
   WorkspaceCaptureFile,
   WorkspaceCaptureManifest,
@@ -1275,6 +1324,7 @@ export {
   capabilityCatalogItemIsTrustedForExposure,
   compactSessionEventResult,
   compareCodexFleetCanonicalStringsV1,
+  comparePersonalSlackCanonicalConnections,
   createCodexFleetReplayRecordV1,
   createSecretRedactor,
   decodeNativeSnapshotRef,
@@ -1297,6 +1347,7 @@ export {
   normalizePreferenceRegistryStableKey,
   normalizeRepositorySubpath,
   normalizeResourceMountPath,
+  normalizeWorkspaceArtifactSlug,
   normalizeWorkspaceInstructionPolicyRoleKey,
   parseWorkspaceArchiveDescriptor,
   prefixedMcpToolName,
@@ -1319,6 +1370,7 @@ export {
   resourceMountPathCollisionKey,
   retainedArtifactReferenceFromFile,
   retainedOutputUnavailable,
+  selectCanonicalPersonalSlackConnection,
   sessionEventJsonBytes,
   sessionEventLatestClassToSemanticClass,
   sessionEventMediaPreview,

package/dist/slack-bot-scopes.d.ts

@@ -1,4 +1,4 @@
-export declare const OPENGENI_SLACK_BOT_REQUIRED_SCOPES: readonly ["canvases:read", "channels:history", "channels:read", "chat:write", "files:read", "groups:history", "groups:read", "im:history", "im:read", "im:write", "mpim:history", "mpim:read", "users:read"];
+export declare const OPENGENI_SLACK_BOT_REQUIRED_SCOPES: readonly ["app_mentions:read", "canvases:read", "channels:history", "channels:read", "chat:write", "commands", "files:read", "groups:history", "groups:read", "im:history", "im:read", "im:write", "mpim:history", "mpim:read", "users:read"];
 /**
  * Optional bot grants that remain inside the shipped bot's read/identity
  * boundary. Every other unrequired scope fails closed, including unknown future

package/dist/slack-bot-scopes.js

@@ -4,7 +4,7 @@ import {
   OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES,
   areOpenGeniSlackBotScopesAccepted,
   evaluateOpenGeniSlackBotScopes
-} from "./chunk-3B3XEYMN.js";
+} from "./chunk-KGL5BVGF.js";
 export {
   OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES,
   OPENGENI_SLACK_BOT_REQUIRED_SCOPES,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/contracts",
-  "version": "0.26.1",
+  "version": "0.28.1",
   "description": "Shared zod schemas and wire-contract types for the OpenGeni API.",
   "license": "Apache-2.0",
   "repository": {

package/src/artifacts.ts

@@ -0,0 +1,171 @@
+import { z } from "zod";
+
+export const WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES = 512 * 1024;
+export const WORKSPACE_ARTIFACT_TITLE_MAX_CHARS = 120;
+export const WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS = 2_000;
+export const WORKSPACE_ARTIFACT_LIST_MAX = 100;
+export const WORKSPACE_ARTIFACT_LIST_DEFAULT = 50;
+export const WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS = 512;
+
+const encoder = new TextEncoder();
+const sha256 = z.string().regex(/^[0-9a-f]{64}$/);
+
+export const WorkspaceArtifactSlug = z
+  .string()
+  .trim()
+  .min(1)
+  .max(96)
+  .regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/);
+export type WorkspaceArtifactSlug = z.infer<typeof WorkspaceArtifactSlug>;
+
+export const WorkspaceArtifactStatus = z.enum(["active", "archived"]);
+export type WorkspaceArtifactStatus = z.infer<typeof WorkspaceArtifactStatus>;
+
+export const WorkspaceArtifactVersion = z.object({
+  id: z.string().uuid(),
+  accountId: z.string().uuid(),
+  workspaceId: z.string().uuid(),
+  artifactId: z.string().uuid(),
+  revision: z.number().int().positive(),
+  contentType: z.literal("text/html"),
+  contentSha256: sha256,
+  sizeBytes: z.number().int().positive().max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES),
+  sourceSessionId: z.string().uuid().nullable(),
+  sourceTurnId: z.string().uuid().nullable(),
+  sourceAttemptId: z.string().uuid().nullable(),
+  sourceExecutionGeneration: z.number().int().positive().nullable(),
+  createdBySubjectId: z.string().min(1).max(1024),
+  createdAt: z.string().datetime({ offset: true }),
+});
+export type WorkspaceArtifactVersion = z.infer<typeof WorkspaceArtifactVersion>;
+
+export const WorkspaceArtifact = z.object({
+  id: z.string().uuid(),
+  accountId: z.string().uuid(),
+  workspaceId: z.string().uuid(),
+  slug: WorkspaceArtifactSlug,
+  title: z.string().trim().min(1).max(WORKSPACE_ARTIFACT_TITLE_MAX_CHARS),
+  description: z.string().max(WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS).nullable(),
+  status: WorkspaceArtifactStatus,
+  currentVersion: WorkspaceArtifactVersion.nullable(),
+  createdBySubjectId: z.string().min(1).max(1024),
+  createdAt: z.string().datetime({ offset: true }),
+  updatedAt: z.string().datetime({ offset: true }),
+});
+export type WorkspaceArtifact = z.infer<typeof WorkspaceArtifact>;
+
+export const WorkspaceArtifactEventType = z.enum(["published", "rolled_back"]);
+export type WorkspaceArtifactEventType = z.infer<typeof WorkspaceArtifactEventType>;
+
+export const WorkspaceArtifactEvent = z.object({
+  id: z.string().uuid(),
+  accountId: z.string().uuid(),
+  workspaceId: z.string().uuid(),
+  artifactId: z.string().uuid(),
+  type: WorkspaceArtifactEventType,
+  fromVersionId: z.string().uuid().nullable(),
+  toVersionId: z.string().uuid(),
+  sourceSessionId: z.string().uuid().nullable(),
+  sourceTurnId: z.string().uuid().nullable(),
+  sourceAttemptId: z.string().uuid().nullable(),
+  sourceExecutionGeneration: z.number().int().positive().nullable(),
+  actorSubjectId: z.string().min(1).max(1024),
+  reason: z.string().min(1).max(4096),
+  createdAt: z.string().datetime({ offset: true }),
+});
+export type WorkspaceArtifactEvent = z.infer<typeof WorkspaceArtifactEvent>;
+
+export const WorkspaceArtifactListQuery = z.object({
+  limit: z.coerce
+    .number()
+    .int()
+    .positive()
+    .max(WORKSPACE_ARTIFACT_LIST_MAX)
+    .default(WORKSPACE_ARTIFACT_LIST_DEFAULT),
+  cursor: z.string().min(1).max(WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS).optional(),
+});
+export type WorkspaceArtifactListQuery = z.infer<typeof WorkspaceArtifactListQuery>;
+
+export const WorkspaceArtifactListResponse = z.object({
+  artifacts: z.array(WorkspaceArtifact).max(WORKSPACE_ARTIFACT_LIST_MAX),
+  nextCursor: z.string().max(WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS).nullable(),
+  truncated: z.boolean(),
+});
+export type WorkspaceArtifactListResponse = z.infer<typeof WorkspaceArtifactListResponse>;
+
+export const WorkspaceArtifactDetailResponse = z.object({
+  artifact: WorkspaceArtifact,
+  versions: z.array(WorkspaceArtifactVersion).max(WORKSPACE_ARTIFACT_LIST_MAX),
+  events: z.array(WorkspaceArtifactEvent).max(WORKSPACE_ARTIFACT_LIST_MAX),
+  versionsTruncated: z.boolean(),
+  eventsTruncated: z.boolean(),
+});
+export type WorkspaceArtifactDetailResponse = z.infer<typeof WorkspaceArtifactDetailResponse>;
+
+export const WorkspaceArtifactHtml = z
+  .string()
+  .min(1)
+  .max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES)
+  .superRefine((value, ctx) => {
+    if (encoder.encode(value).byteLength > WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES) {
+      ctx.addIssue({
+        code: "custom",
+        message: `artifact HTML exceeds ${WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES} UTF-8 bytes`,
+      });
+    }
+  });
+
+export const CreateWorkspaceArtifactRequest = z.object({
+  slug: WorkspaceArtifactSlug.optional(),
+  title: z.string().trim().min(1).max(WORKSPACE_ARTIFACT_TITLE_MAX_CHARS),
+  description: z.string().max(WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS).nullable().optional(),
+  html: WorkspaceArtifactHtml,
+  idempotencyKey: z.string().trim().min(1).max(200),
+});
+export type CreateWorkspaceArtifactRequest = z.infer<typeof CreateWorkspaceArtifactRequest>;
+
+export const PublishWorkspaceArtifactVersionRequest = z.object({
+  title: z.string().trim().min(1).max(WORKSPACE_ARTIFACT_TITLE_MAX_CHARS).optional(),
+  description: z.string().max(WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS).nullable().optional(),
+  html: WorkspaceArtifactHtml,
+  expectedCurrentVersionId: z.string().uuid(),
+  idempotencyKey: z.string().trim().min(1).max(200),
+});
+export type PublishWorkspaceArtifactVersionRequest = z.infer<
+  typeof PublishWorkspaceArtifactVersionRequest
+>;
+
+export const RollbackWorkspaceArtifactRequest = z.object({
+  versionId: z.string().uuid(),
+  expectedCurrentVersionId: z.string().uuid(),
+  reason: z.string().trim().min(1).max(4096),
+  idempotencyKey: z.string().trim().min(1).max(200),
+});
+export type RollbackWorkspaceArtifactRequest = z.infer<typeof RollbackWorkspaceArtifactRequest>;
+
+export const WorkspaceArtifactMutationResponse = z.object({
+  artifact: WorkspaceArtifact,
+  version: WorkspaceArtifactVersion,
+  event: WorkspaceArtifactEvent,
+  replayed: z.boolean(),
+});
+export type WorkspaceArtifactMutationResponse = z.infer<typeof WorkspaceArtifactMutationResponse>;
+
+export const WorkspaceArtifactContentResponse = z.object({
+  artifactId: z.string().uuid(),
+  versionId: z.string().uuid(),
+  contentType: z.literal("text/html"),
+  contentSha256: sha256,
+  html: WorkspaceArtifactHtml,
+});
+export type WorkspaceArtifactContentResponse = z.infer<typeof WorkspaceArtifactContentResponse>;
+
+export function normalizeWorkspaceArtifactSlug(value: string): string {
+  return value
+    .normalize("NFKD")
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-+|-+$/g, "")
+    .slice(0, 96)
+    .replace(/-+$/g, "");
+}

package/src/index.ts

@@ -8,6 +8,31 @@ import {
 
 export * from "./slack-bot-scopes";
 
+export {
+  CreateWorkspaceArtifactRequest,
+  PublishWorkspaceArtifactVersionRequest,
+  RollbackWorkspaceArtifactRequest,
+  WorkspaceArtifact,
+  WorkspaceArtifactContentResponse,
+  WorkspaceArtifactDetailResponse,
+  WorkspaceArtifactEvent,
+  WorkspaceArtifactEventType,
+  WorkspaceArtifactHtml,
+  WorkspaceArtifactListQuery,
+  WorkspaceArtifactListResponse,
+  WorkspaceArtifactMutationResponse,
+  WorkspaceArtifactSlug,
+  WorkspaceArtifactStatus,
+  WorkspaceArtifactVersion,
+  WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS,
+  WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS,
+  WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES,
+  WORKSPACE_ARTIFACT_LIST_DEFAULT,
+  WORKSPACE_ARTIFACT_LIST_MAX,
+  WORKSPACE_ARTIFACT_TITLE_MAX_CHARS,
+  normalizeWorkspaceArtifactSlug,
+} from "./artifacts";
+
 export {
   SESSION_EVENT_PAYLOAD_MAX_BYTES,
   approximateSessionEventTokens,
@@ -626,6 +651,10 @@ export const Permission = z.enum([
   // super-wildcard over both.
   "rigs:use",
   "rigs:manage",
+  // Workspace-published HTML artifacts. Read permits listing/source retrieval;
+  // publish permits create, version publication, and rollback.
+  "artifacts:read",
+  "artifacts:publish",
 ]);
 export type Permission = z.infer<typeof Permission>;
 
@@ -647,10 +676,16 @@ export const DEFAULT_FIRST_PARTY_MCP_PERMISSIONS = [
   "sessions:read",
   "sessions:create",
   "sessions:control",
+  // Read-only connection discovery lets the selected first-party connector
+  // tools resolve an already-installed workspace principal. Credentials stay
+  // inside the broker and remain subject to each tool's own authorization.
+  "connections:read",
   "variable-sets:use",
   "variable-sets:manage",
   "rigs:use",
   "github:use",
+  "artifacts:read",
+  "artifacts:publish",
 ] as const satisfies readonly Permission[];
 
 /**
@@ -701,6 +736,11 @@ export const FIRST_PARTY_MCP_TOOL_NAMES = [
   "social_connections_list",
   "social_posts_recent",
   "social_daily_analysis_context",
+  "social_search_live",
+  "social_mentions_live",
+  "social_thread_fetch",
+  "social_posts_sync",
+  "social_post_reply",
   "scheduled_tasks_list",
   "scheduled_tasks_get",
   "scheduled_tasks_create",
@@ -719,17 +759,23 @@ export const FIRST_PARTY_MCP_TOOL_NAMES = [
   "slack_bot_file_content",
   "slack_bot_post_message",
   "slack_bot_delete_message",
+  "artifacts_list",
+  "artifacts_get_source",
+  "artifacts_create",
+  "artifacts_publish",
+  "artifacts_rollback",
 ] as const;
 export const FirstPartyMcpToolName = z.enum(FIRST_PARTY_MCP_TOOL_NAMES);
 export type FirstPartyMcpToolName = z.infer<typeof FirstPartyMcpToolName>;
 
 /**
- * Every catalogued OpenGeni tool is selected by default. Registration-time
- * authorization remains the independent access boundary; an explicit session
- * policy may narrow this model-visible set.
+ * Connector-wide tools are explicit-only. Ordinary session omission selects
+ * the non-connector catalog, while an explicit session policy may still select
+ * any catalogued connector tool and remains independently permission-gated.
  */
-export const DEFAULT_FIRST_PARTY_MCP_TOOLS =
-  FIRST_PARTY_MCP_TOOL_NAMES satisfies readonly FirstPartyMcpToolName[];
+export const DEFAULT_FIRST_PARTY_MCP_TOOLS = FIRST_PARTY_MCP_TOOL_NAMES.filter(
+  (name) => !name.startsWith("social_") && !name.startsWith("slack_bot_"),
+) satisfies readonly FirstPartyMcpToolName[];
 
 export function prefixedMcpToolName(registryId: string, toolName: string): string {
   return `${registryId}__${toolName}`;
@@ -5149,6 +5195,7 @@ export type EnablePackRequest = z.infer<typeof EnablePackRequest>;
 
 export const SocialProvider = z.enum([
   "x",
+  "reddit",
   "linkedin",
   "instagram",
   "facebook",
@@ -5221,6 +5268,19 @@ export const CreateSocialPostRequest = z.object({
 });
 export type CreateSocialPostRequest = z.infer<typeof CreateSocialPostRequest>;
 
+// Social OAuth is first-party (X / Reddit REST APIs), distinct from the MCP
+// integrations OAuth flow: these providers have no MCP resource metadata, so
+// endpoints are pinned per provider and tokens live in social_connections.
+export const SocialOAuthProviderId = z.enum(["x", "reddit"]);
+export type SocialOAuthProviderId = z.infer<typeof SocialOAuthProviderId>;
+
+export const SocialOAuthStartRequest = z.object({
+  provider: SocialOAuthProviderId,
+  scopes: z.array(z.string().min(1)).optional(),
+  returnPath: z.string().optional(),
+});
+export type SocialOAuthStartRequest = z.infer<typeof SocialOAuthStartRequest>;
+
 export const ConnectionKind = z.enum(["oauth2", "api_key", "app_install", "delegated"]);
 export type ConnectionKind = z.infer<typeof ConnectionKind>;
 
@@ -5270,6 +5330,70 @@ export const ConnectionMetadata = z.object({
 });
 export type ConnectionMetadata = z.infer<typeof ConnectionMetadata>;
 
+type PersonalSlackCanonicalConnection = Pick<
+  ConnectionMetadata,
+  "id" | "status" | "createdAt" | "updatedAt"
+>;
+
+const PERSONAL_SLACK_CONNECTION_STATUS_RANK = {
+  active: 0,
+  needs_reauth: 1,
+  error: 2,
+  revoked: 3,
+} as const satisfies Record<ConnectionStatus, number>;
+
+/**
+ * Canonical ordering for duplicate subject-owned Personal Slack rows.
+ *
+ * PostgreSQL broker lookup mirrors this exact sequence: usable status first,
+ * then newest update, newest creation, and immutable UUID descending.
+ */
+export function comparePersonalSlackCanonicalConnections(
+  left: PersonalSlackCanonicalConnection,
+  right: PersonalSlackCanonicalConnection,
+): number {
+  const statusDelta =
+    PERSONAL_SLACK_CONNECTION_STATUS_RANK[left.status] -
+    PERSONAL_SLACK_CONNECTION_STATUS_RANK[right.status];
+  if (statusDelta !== 0) return statusDelta;
+
+  const updatedAtDelta = compareDescending(
+    canonicalConnectionTimestamp(left.updatedAt),
+    canonicalConnectionTimestamp(right.updatedAt),
+  );
+  if (updatedAtDelta !== 0) return updatedAtDelta;
+
+  const createdAtDelta = compareDescending(
+    canonicalConnectionTimestamp(left.createdAt),
+    canonicalConnectionTimestamp(right.createdAt),
+  );
+  if (createdAtDelta !== 0) return createdAtDelta;
+
+  return compareDescending(left.id, right.id);
+}
+
+export function selectCanonicalPersonalSlackConnection<T extends PersonalSlackCanonicalConnection>(
+  connections: readonly T[],
+): T | null {
+  let selected: T | null = null;
+  for (const connection of connections) {
+    if (!selected || comparePersonalSlackCanonicalConnections(connection, selected) < 0) {
+      selected = connection;
+    }
+  }
+  return selected;
+}
+
+function canonicalConnectionTimestamp(value: string): number {
+  const timestamp = Date.parse(value);
+  return Number.isFinite(timestamp) ? timestamp : Number.NEGATIVE_INFINITY;
+}
+
+function compareDescending(left: number | string, right: number | string): number {
+  if (left === right) return 0;
+  return left > right ? -1 : 1;
+}
+
 export const ConnectionCredentialBundle = z.record(z.string(), z.unknown());
 export type ConnectionCredentialBundle = z.infer<typeof ConnectionCredentialBundle>;
 
@@ -5610,8 +5734,8 @@ export const Session = z.object({
   // Non-default first-party MCP token permissions (manager-style sessions);
   // null means the fixed worker default set.
   firstPartyMcpPermissions: z.array(Permission).nullable(),
-  // Exact model-visible OpenGeni selection. All catalogued tools are selected
-  // by default; [] intentionally selects none.
+  // Exact model-visible OpenGeni selection. The default omits connector-wide
+  // tools; [] intentionally selects none.
   firstPartyMcpTools: z.array(FirstPartyMcpToolName),
   // Per-session third-party MCP servers, metadata only. Credential values are
   // write-only and never appear here.
@@ -7912,7 +8036,8 @@ export const CreateSessionRequest = withVariableSetIdAlias({
   // rejected; creation never silently expands a child beyond that set.
   firstPartyMcpPermissions: z.array(Permission).optional(),
   // Exact model-visible selection from the broad first-party OpenGeni MCP
-  // catalog. Omission selects the full catalog; [] intentionally exposes none.
+  // catalog. Omission selects the safe non-connector default; [] intentionally
+  // exposes none.
   // This does not grant authority: every registered tool is permission-gated.
   firstPartyMcpTools: z.array(FirstPartyMcpToolName).optional(),
   // Third-party MCP servers attached only to this session. For an agent-created
@@ -9248,7 +9373,7 @@ export type WorkspaceModelCatalogResponse = z.infer<typeof WorkspaceModelCatalog
  * that rollout boundary. Mutating clients send this value in
  * `x-opengeni-api-contract`; the API rejects any other value before routing.
  */
-export const OPENGENI_API_CONTRACT_REVISION = "2026-07-turn-instructions-v1" as const;
+export const OPENGENI_API_CONTRACT_REVISION = "2026-07-workspace-artifacts-v1" as const;
 export const OPENGENI_API_CONTRACT_HEADER = "x-opengeni-api-contract" as const;
 /** Bounded request/response identifier shared by browser, ingress, and API diagnostics. */
 export const OPENGENI_CORRELATION_HEADER = "x-opengeni-correlation-id" as const;
@@ -9290,6 +9415,35 @@ export const ClientConfig = /* @__PURE__ */ defineModelContractSchema(() =>
     }),
     productAccessMode: ProductAccessMode,
     auth: ClientAuthConfig.default({ mode: "none" }),
+    analytics: z
+      .object({
+        consentRequired: z.boolean(),
+        providers: z.object({
+          reo: z
+            .object({
+              clientId: z
+                .string()
+                .max(128)
+                .regex(/^[A-Za-z0-9_-]+$/u),
+            })
+            .optional(),
+          posthog: z
+            .object({
+              projectKey: z.string().min(1).max(256),
+              host: z.string().url().max(2_048),
+            })
+            .optional(),
+          ga4: z
+            .object({
+              measurementId: z
+                .string()
+                .max(32)
+                .regex(/^G-[A-Z0-9]+$/u),
+            })
+            .optional(),
+        }),
+      })
+      .default({ consentRequired: true, providers: {} }),
     // Server-wide hint: does this deployment support Channel-A structured services
     // at all (P4.4). Per-session availability is negotiated on /stream-capabilities
     // (it depends on the session's pinned backend); this is the coarse on/off the

package/src/slack-bot-scopes.ts

@@ -1,8 +1,10 @@
 export const OPENGENI_SLACK_BOT_REQUIRED_SCOPES = [
+  "app_mentions:read",
   "canvases:read",
   "channels:history",
   "channels:read",
   "chat:write",
+  "commands",
   "files:read",
   "groups:history",
   "groups:read",

package/dist/chunk-3B3XEYMN.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/slack-bot-scopes.ts"],"sourcesContent":["export const OPENGENI_SLACK_BOT_REQUIRED_SCOPES = [\n  \"canvases:read\",\n  \"channels:history\",\n  \"channels:read\",\n  \"chat:write\",\n  \"files:read\",\n  \"groups:history\",\n  \"groups:read\",\n  \"im:history\",\n  \"im:read\",\n  \"im:write\",\n  \"mpim:history\",\n  \"mpim:read\",\n  \"users:read\",\n] as const;\n\n/**\n * Optional bot grants that remain inside the shipped bot's read/identity\n * boundary. Every other unrequired scope fails closed, including unknown future\n * Slack scopes, so verification, core routing, and UI eligibility cannot drift.\n */\nexport const OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES = [\"team:read\"] as const;\n\n/** @deprecated Use evaluateOpenGeniSlackBotScopes; an allowlist is the policy. */\nexport const OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES = [\"channels:join\", \"chat:write.public\"] as const;\n\nexport type OpenGeniSlackBotScopePolicy = {\n  accepted: boolean;\n  missingRequired: string[];\n  unsupported: string[];\n};\n\nfunction isOpenGeniSlackBotScopeAllowed(scope: string): boolean {\n  return (\n    (OPENGENI_SLACK_BOT_REQUIRED_SCOPES as readonly string[]).includes(scope) ||\n    (OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES as readonly string[]).includes(scope)\n  );\n}\n\nexport function areOpenGeniSlackBotScopesAccepted(grantedScopes: readonly string[]): boolean {\n  return (\n    OPENGENI_SLACK_BOT_REQUIRED_SCOPES.every((scope) => grantedScopes.includes(scope)) &&\n    grantedScopes.every(isOpenGeniSlackBotScopeAllowed)\n  );\n}\n\nexport function evaluateOpenGeniSlackBotScopes(\n  grantedScopes: readonly string[],\n): OpenGeniSlackBotScopePolicy {\n  const granted = new Set(grantedScopes);\n  const missingRequired = OPENGENI_SLACK_BOT_REQUIRED_SCOPES.filter((scope) => !granted.has(scope));\n  const unsupported = [...granted].filter((scope) => !isOpenGeniSlackBotScopeAllowed(scope)).sort();\n  return {\n    accepted: areOpenGeniSlackBotScopesAccepted(grantedScopes),\n    missingRequired,\n    unsupported,\n  };\n}\n"],"mappings":";AAAO,IAAM,qCAAqC;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,IAAM,0CAA0C,CAAC,WAAW;AAG5D,IAAM,sCAAsC,CAAC,iBAAiB,mBAAmB;AAQxF,SAAS,+BAA+B,OAAwB;AAC9D,SACG,mCAAyD,SAAS,KAAK,KACvE,wCAA8D,SAAS,KAAK;AAEjF;AAEO,SAAS,kCAAkC,eAA2C;AAC3F,SACE,mCAAmC,MAAM,CAAC,UAAU,cAAc,SAAS,KAAK,CAAC,KACjF,cAAc,MAAM,8BAA8B;AAEtD;AAEO,SAAS,+BACd,eAC6B;AAC7B,QAAM,UAAU,IAAI,IAAI,aAAa;AACrC,QAAM,kBAAkB,mCAAmC,OAAO,CAAC,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC;AAChG,QAAM,cAAc,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,+BAA+B,KAAK,CAAC,EAAE,KAAK;AAChG,SAAO;AAAA,IACL,UAAU,kCAAkC,aAAa;AAAA,IACzD;AAAA,IACA;AAAA,EACF;AACF;","names":[]}