@opengeni/contracts 0.27.0 → 0.28.1

package/dist/{chunk-S4F2GZPD.js → chunk-3Q5FLMOD.js}

@@ -3268,6 +3268,10 @@ var DEFAULT_FIRST_PARTY_MCP_PERMISSIONS = [
   "sessions:read",
   "sessions:create",
   "sessions:control",
+  // Read-only connection discovery lets the selected first-party connector
+  // tools resolve an already-installed workspace principal. Credentials stay
+  // inside the broker and remain subject to each tool's own authorization.
+  "connections:read",
   "variable-sets:use",
   "variable-sets:manage",
   "rigs:use",
@@ -3315,6 +3319,11 @@ var FIRST_PARTY_MCP_TOOL_NAMES = [
   "social_connections_list",
   "social_posts_recent",
   "social_daily_analysis_context",
+  "social_search_live",
+  "social_mentions_live",
+  "social_thread_fetch",
+  "social_posts_sync",
+  "social_post_reply",
   "scheduled_tasks_list",
   "scheduled_tasks_get",
   "scheduled_tasks_create",
@@ -3340,7 +3349,9 @@ var FIRST_PARTY_MCP_TOOL_NAMES = [
   "artifacts_rollback"
 ];
 var FirstPartyMcpToolName = z6.enum(FIRST_PARTY_MCP_TOOL_NAMES);
-var DEFAULT_FIRST_PARTY_MCP_TOOLS = FIRST_PARTY_MCP_TOOL_NAMES;
+var DEFAULT_FIRST_PARTY_MCP_TOOLS = FIRST_PARTY_MCP_TOOL_NAMES.filter(
+  (name) => !name.startsWith("social_") && !name.startsWith("slack_bot_")
+);
 function prefixedMcpToolName(registryId2, toolName) {
   return `${registryId2}__${toolName}`;
 }
@@ -6132,6 +6143,7 @@ var EnablePackRequest = withVariableSetIdAlias({
 });
 var SocialProvider = z6.enum([
   "x",
+  "reddit",
   "linkedin",
   "instagram",
   "facebook",
@@ -6192,6 +6204,12 @@ var CreateSocialPostRequest = z6.object({
   metrics: z6.record(z6.string(), z6.number()).default({}),
   raw: z6.record(z6.string(), z6.unknown()).default({})
 });
+var SocialOAuthProviderId = z6.enum(["x", "reddit"]);
+var SocialOAuthStartRequest = z6.object({
+  provider: SocialOAuthProviderId,
+  scopes: z6.array(z6.string().min(1)).optional(),
+  returnPath: z6.string().optional()
+});
 var ConnectionKind = z6.enum(["oauth2", "api_key", "app_install", "delegated"]);
 var ConnectionStatus = z6.enum(["active", "needs_reauth", "revoked", "error"]);
 var OPENGENI_PERSONAL_SLACK_MCP_URL = "https://mcp.slack.com/mcp";
@@ -6230,6 +6248,44 @@ var ConnectionMetadata = z6.object({
   createdAt: z6.string(),
   updatedAt: z6.string()
 });
+var PERSONAL_SLACK_CONNECTION_STATUS_RANK = {
+  active: 0,
+  needs_reauth: 1,
+  error: 2,
+  revoked: 3
+};
+function comparePersonalSlackCanonicalConnections(left, right) {
+  const statusDelta = PERSONAL_SLACK_CONNECTION_STATUS_RANK[left.status] - PERSONAL_SLACK_CONNECTION_STATUS_RANK[right.status];
+  if (statusDelta !== 0) return statusDelta;
+  const updatedAtDelta = compareDescending(
+    canonicalConnectionTimestamp(left.updatedAt),
+    canonicalConnectionTimestamp(right.updatedAt)
+  );
+  if (updatedAtDelta !== 0) return updatedAtDelta;
+  const createdAtDelta = compareDescending(
+    canonicalConnectionTimestamp(left.createdAt),
+    canonicalConnectionTimestamp(right.createdAt)
+  );
+  if (createdAtDelta !== 0) return createdAtDelta;
+  return compareDescending(left.id, right.id);
+}
+function selectCanonicalPersonalSlackConnection(connections) {
+  let selected = null;
+  for (const connection of connections) {
+    if (!selected || comparePersonalSlackCanonicalConnections(connection, selected) < 0) {
+      selected = connection;
+    }
+  }
+  return selected;
+}
+function canonicalConnectionTimestamp(value) {
+  const timestamp = Date.parse(value);
+  return Number.isFinite(timestamp) ? timestamp : Number.NEGATIVE_INFINITY;
+}
+function compareDescending(left, right) {
+  if (left === right) return 0;
+  return left > right ? -1 : 1;
+}
 var ConnectionCredentialBundle = z6.record(z6.string(), z6.unknown());
 var CreateConnectionRequest = z6.object({
   providerDomain: z6.string().min(1),
@@ -6498,8 +6554,8 @@ var Session = z6.object({
   // Non-default first-party MCP token permissions (manager-style sessions);
   // null means the fixed worker default set.
   firstPartyMcpPermissions: z6.array(Permission).nullable(),
-  // Exact model-visible OpenGeni selection. All catalogued tools are selected
-  // by default; [] intentionally selects none.
+  // Exact model-visible OpenGeni selection. The default omits connector-wide
+  // tools; [] intentionally selects none.
   firstPartyMcpTools: z6.array(FirstPartyMcpToolName),
   // Per-session third-party MCP servers, metadata only. Credential values are
   // write-only and never appear here.
@@ -8204,7 +8260,8 @@ var CreateSessionRequest = withVariableSetIdAlias({
   // rejected; creation never silently expands a child beyond that set.
   firstPartyMcpPermissions: z6.array(Permission).optional(),
   // Exact model-visible selection from the broad first-party OpenGeni MCP
-  // catalog. Omission selects the full catalog; [] intentionally exposes none.
+  // catalog. Omission selects the safe non-connector default; [] intentionally
+  // exposes none.
   // This does not grant authority: every registered tool is permission-gated.
   firstPartyMcpTools: z6.array(FirstPartyMcpToolName).optional(),
   // Third-party MCP servers attached only to this session. For an agent-created
@@ -9166,6 +9223,21 @@ var ClientConfig = /* @__PURE__ */ defineModelContractSchema(
     }),
     productAccessMode: ProductAccessMode,
     auth: ClientAuthConfig.default({ mode: "none" }),
+    analytics: z6.object({
+      consentRequired: z6.boolean(),
+      providers: z6.object({
+        reo: z6.object({
+          clientId: z6.string().max(128).regex(/^[A-Za-z0-9_-]+$/u)
+        }).optional(),
+        posthog: z6.object({
+          projectKey: z6.string().min(1).max(256),
+          host: z6.string().url().max(2048)
+        }).optional(),
+        ga4: z6.object({
+          measurementId: z6.string().max(32).regex(/^G-[A-Z0-9]+$/u)
+        }).optional()
+      })
+    }).default({ consentRequired: true, providers: {} }),
     // Server-wide hint: does this deployment support Channel-A structured services
     // at all (P4.4). Per-session availability is negotiated on /stream-capabilities
     // (it depends on the session's pinned backend); this is the coarse on/off the
@@ -9680,6 +9752,8 @@ export {
   CreateSocialConnectionRequest,
   SocialPost,
   CreateSocialPostRequest,
+  SocialOAuthProviderId,
+  SocialOAuthStartRequest,
   ConnectionKind,
   ConnectionStatus,
   OPENGENI_PERSONAL_SLACK_MCP_URL,
@@ -9688,6 +9762,8 @@ export {
   OPENGENI_SLACK_BOT_SESSION_METADATA_KEY,
   OpenGeniSlackBotConnectionMetadata,
   ConnectionMetadata,
+  comparePersonalSlackCanonicalConnections,
+  selectCanonicalPersonalSlackConnection,
   ConnectionCredentialBundle,
   CreateConnectionRequest,
   OpenGeniSlackBotInstallRequest,
@@ -9906,4 +9982,4 @@ export {
   ClientConfig,
   evaluateWorkspaceModelPolicy
 };
-//# sourceMappingURL=chunk-S4F2GZPD.js.map
+//# sourceMappingURL=chunk-3Q5FLMOD.js.map