@opengeni/contracts 0.40.0 → 0.50.0

package/dist/atlassian.d.ts

@@ -0,0 +1,278 @@
+import { z } from "zod";
+export declare const ATLASSIAN_PROVIDER_DOMAIN: "api.atlassian.com";
+export declare const ATLASSIAN_CREDENTIAL_ROLE: "atlassian_knowledge";
+export declare const ATLASSIAN_CREDENTIAL_LABEL: "Atlassian read-only knowledge sync";
+export declare const ATLASSIAN_REQUIRED_SCOPES: readonly ["offline_access", "read:me", "read:jira-work", "read:jira-user", "read:confluence-content.all", "read:confluence-space.summary", "search:confluence", "read:space:confluence", "read:page:confluence", "read:comment:confluence"];
+export declare const AtlassianSourceKind: z.ZodEnum<{
+    confluence_space: "confluence_space";
+    jira_project: "jira_project";
+}>;
+export type AtlassianSourceKind = z.infer<typeof AtlassianSourceKind>;
+export declare const AtlassianSyncCadence: z.ZodEnum<{
+    daily: "daily";
+    hourly: "hourly";
+    manual: "manual";
+}>;
+export type AtlassianSyncCadence = z.infer<typeof AtlassianSyncCadence>;
+export declare const AtlassianReadPolicy: z.ZodEnum<{
+    allow: "allow";
+    ask: "ask";
+    block: "block";
+}>;
+export type AtlassianReadPolicy = z.infer<typeof AtlassianReadPolicy>;
+export declare const AtlassianConnectionLifecycle: z.ZodObject<{
+    state: z.ZodEnum<{
+        active: "active";
+        app_removed: "app_removed";
+        disconnected: "disconnected";
+        paused: "paused";
+        reconnect_required: "reconnect_required";
+        reconsent_required: "reconsent_required";
+        token_revoked: "token_revoked";
+    }>;
+    recoverable: z.ZodBoolean;
+    observedAt: z.ZodString;
+}, z.core.$strip>;
+export type AtlassianConnectionLifecycle = z.infer<typeof AtlassianConnectionLifecycle>;
+export declare const AtlassianSelectedSource: z.ZodObject<{
+    id: z.ZodString;
+    cloudId: z.ZodString;
+    siteName: z.ZodString;
+    siteUrl: z.ZodString;
+    resourceId: z.ZodString;
+    key: z.ZodString;
+    name: z.ZodString;
+    kind: z.ZodEnum<{
+        confluence_space: "confluence_space";
+        jira_project: "jira_project";
+    }>;
+    destination: z.ZodOptional<z.ZodObject<{
+        authorityKind: z.ZodEnum<{
+            organization: "organization";
+            personal: "personal";
+            workspace: "workspace";
+        }>;
+        authorityAccountId: z.ZodString;
+        authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+        authoritySubjectId: z.ZodNullable<z.ZodString>;
+        collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    syncCadence: z.ZodEnum<{
+        daily: "daily";
+        hourly: "hourly";
+        manual: "manual";
+    }>;
+    syncEnabled: z.ZodBoolean;
+    configGeneration: z.ZodNumber;
+    readPolicy: z.ZodEnum<{
+        allow: "allow";
+        ask: "ask";
+        block: "block";
+    }>;
+    selectedAt: z.ZodString;
+}, z.core.$strip>;
+export type AtlassianSelectedSource = z.infer<typeof AtlassianSelectedSource>;
+export declare const AtlassianConnectionMetadata: z.ZodObject<{
+    credentialRole: z.ZodLiteral<"atlassian_knowledge">;
+    credentialLabel: z.ZodLiteral<"Atlassian read-only knowledge sync">;
+    atlassianAccountId: z.ZodString;
+    displayName: z.ZodString;
+    email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    sites: z.ZodArray<z.ZodObject<{
+        cloudId: z.ZodString;
+        name: z.ZodString;
+        url: z.ZodString;
+        products: z.ZodArray<z.ZodEnum<{
+            confluence: "confluence";
+            jira: "jira";
+        }>>;
+    }, z.core.$strip>>;
+    verifiedAt: z.ZodString;
+    accessMode: z.ZodLiteral<"readonly">;
+    lifecycle: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            active: "active";
+            app_removed: "app_removed";
+            disconnected: "disconnected";
+            paused: "paused";
+            reconnect_required: "reconnect_required";
+            reconsent_required: "reconsent_required";
+            token_revoked: "token_revoked";
+        }>;
+        recoverable: z.ZodBoolean;
+        observedAt: z.ZodString;
+    }, z.core.$strip>>;
+    documentDestination: z.ZodOptional<z.ZodObject<{
+        authorityKind: z.ZodEnum<{
+            organization: "organization";
+            personal: "personal";
+            workspace: "workspace";
+        }>;
+        authorityAccountId: z.ZodString;
+        authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+        authoritySubjectId: z.ZodNullable<z.ZodString>;
+        collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    selectedSources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        cloudId: z.ZodString;
+        siteName: z.ZodString;
+        siteUrl: z.ZodString;
+        resourceId: z.ZodString;
+        key: z.ZodString;
+        name: z.ZodString;
+        kind: z.ZodEnum<{
+            confluence_space: "confluence_space";
+            jira_project: "jira_project";
+        }>;
+        destination: z.ZodOptional<z.ZodObject<{
+            authorityKind: z.ZodEnum<{
+                organization: "organization";
+                personal: "personal";
+                workspace: "workspace";
+            }>;
+            authorityAccountId: z.ZodString;
+            authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+            authoritySubjectId: z.ZodNullable<z.ZodString>;
+            collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>;
+        syncCadence: z.ZodEnum<{
+            daily: "daily";
+            hourly: "hourly";
+            manual: "manual";
+        }>;
+        syncEnabled: z.ZodBoolean;
+        configGeneration: z.ZodNumber;
+        readPolicy: z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            block: "block";
+        }>;
+        selectedAt: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type AtlassianConnectionMetadata = z.infer<typeof AtlassianConnectionMetadata>;
+export declare const AtlassianOAuthStartRequest: z.ZodObject<{
+    connectionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AtlassianOAuthStartRequest = z.infer<typeof AtlassianOAuthStartRequest>;
+export declare const AtlassianOAuthStartResponse: z.ZodObject<{
+    authorizationUrl: z.ZodString;
+    expiresAt: z.ZodString;
+}, z.core.$strip>;
+export type AtlassianOAuthStartResponse = z.infer<typeof AtlassianOAuthStartResponse>;
+export declare const AtlassianBrowseItem: z.ZodObject<{
+    id: z.ZodString;
+    cloudId: z.ZodString;
+    siteName: z.ZodString;
+    siteUrl: z.ZodString;
+    resourceId: z.ZodString;
+    key: z.ZodString;
+    name: z.ZodString;
+    kind: z.ZodEnum<{
+        confluence_space: "confluence_space";
+        jira_project: "jira_project";
+    }>;
+    description: z.ZodNullable<z.ZodString>;
+    webUrl: z.ZodString;
+}, z.core.$strip>;
+export type AtlassianBrowseItem = z.infer<typeof AtlassianBrowseItem>;
+export declare const AtlassianBrowseResponse: z.ZodObject<{
+    connection: z.ZodLazy<z.ZodObject<{
+        id: z.ZodString;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+        subjectId: z.ZodNullable<z.ZodString>;
+        providerDomain: z.ZodString;
+        kind: z.ZodEnum<{
+            api_key: "api_key";
+            app_install: "app_install";
+            delegated: "delegated";
+            oauth2: "oauth2";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            error: "error";
+            needs_reauth: "needs_reauth";
+            revoked: "revoked";
+        }>;
+        grantedScopes: z.ZodArray<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodString>;
+        lastRefreshAt: z.ZodNullable<z.ZodString>;
+        lastUsedAt: z.ZodNullable<z.ZodString>;
+        lastError: z.ZodNullable<z.ZodString>;
+        version: z.ZodNumber;
+        verifiedInstallAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        verifiedInstallVersion: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        createdBySubjectId: z.ZodNullable<z.ZodString>;
+        updatedBySubjectId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        cloudId: z.ZodString;
+        siteName: z.ZodString;
+        siteUrl: z.ZodString;
+        resourceId: z.ZodString;
+        key: z.ZodString;
+        name: z.ZodString;
+        kind: z.ZodEnum<{
+            confluence_space: "confluence_space";
+            jira_project: "jira_project";
+        }>;
+        description: z.ZodNullable<z.ZodString>;
+        webUrl: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AtlassianBrowseResponse = z.infer<typeof AtlassianBrowseResponse>;
+export declare const SaveAtlassianSourcesRequest: z.ZodObject<{
+    sources: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        cloudId: z.ZodString;
+        siteName: z.ZodString;
+        siteUrl: z.ZodString;
+        resourceId: z.ZodString;
+        key: z.ZodString;
+        name: z.ZodString;
+        kind: z.ZodEnum<{
+            confluence_space: "confluence_space";
+            jira_project: "jira_project";
+        }>;
+    }, z.core.$strip>>;
+    destination: z.ZodObject<{
+        authorityKind: z.ZodEnum<{
+            organization: "organization";
+            personal: "personal";
+            workspace: "workspace";
+        }>;
+        collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>;
+    syncCadence: z.ZodEnum<{
+        daily: "daily";
+        hourly: "hourly";
+        manual: "manual";
+    }>;
+    syncEnabled: z.ZodBoolean;
+    readPolicy: z.ZodDefault<z.ZodEnum<{
+        allow: "allow";
+        ask: "ask";
+        block: "block";
+    }>>;
+}, z.core.$strip>;
+export type SaveAtlassianSourcesRequest = z.infer<typeof SaveAtlassianSourcesRequest>;
+export declare const AtlassianLifecycleActionRequest: z.ZodObject<{
+    action: z.ZodEnum<{
+        pause: "pause";
+        resume: "resume";
+    }>;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strip>;
+export type AtlassianLifecycleActionRequest = z.infer<typeof AtlassianLifecycleActionRequest>;
+export declare const AtlassianDisconnectRequest: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    idempotencyKey: z.ZodString;
+}, z.core.$strip>;
+export type AtlassianDisconnectRequest = z.infer<typeof AtlassianDisconnectRequest>;
+export declare function atlassianScopesAllowRead(scopes: readonly string[]): boolean;

package/dist/atlassian.js

@@ -0,0 +1,57 @@
+import {
+  ATLASSIAN_CREDENTIAL_LABEL,
+  ATLASSIAN_CREDENTIAL_ROLE,
+  ATLASSIAN_PROVIDER_DOMAIN,
+  ATLASSIAN_REQUIRED_SCOPES,
+  AtlassianBrowseItem,
+  AtlassianBrowseResponse,
+  AtlassianConnectionLifecycle,
+  AtlassianConnectionMetadata,
+  AtlassianDisconnectRequest,
+  AtlassianLifecycleActionRequest,
+  AtlassianOAuthStartRequest,
+  AtlassianOAuthStartResponse,
+  AtlassianReadPolicy,
+  AtlassianSelectedSource,
+  AtlassianSourceKind,
+  AtlassianSyncCadence,
+  SaveAtlassianSourcesRequest,
+  atlassianScopesAllowRead
+} from "./chunk-Q6A7XT2N.js";
+import "./chunk-WYBDERIY.js";
+import "./chunk-5UDNP7AO.js";
+import "./chunk-Y3MLSLB4.js";
+import "./chunk-CM6BMECR.js";
+import "./chunk-JUFK3T4Q.js";
+import "./chunk-M5ZGRVIQ.js";
+import "./chunk-LW7OH6CS.js";
+import "./chunk-TZ6YEYN4.js";
+import "./chunk-YRKRZ6OF.js";
+import "./chunk-JBCIY7QD.js";
+import "./chunk-RIY7GYQS.js";
+import "./chunk-CADSX6UN.js";
+import "./chunk-D2HKF2EF.js";
+import "./chunk-MYBZRDTY.js";
+import "./chunk-LSB7GRLG.js";
+import "./chunk-BVGIYW7D.js";
+export {
+  ATLASSIAN_CREDENTIAL_LABEL,
+  ATLASSIAN_CREDENTIAL_ROLE,
+  ATLASSIAN_PROVIDER_DOMAIN,
+  ATLASSIAN_REQUIRED_SCOPES,
+  AtlassianBrowseItem,
+  AtlassianBrowseResponse,
+  AtlassianConnectionLifecycle,
+  AtlassianConnectionMetadata,
+  AtlassianDisconnectRequest,
+  AtlassianLifecycleActionRequest,
+  AtlassianOAuthStartRequest,
+  AtlassianOAuthStartResponse,
+  AtlassianReadPolicy,
+  AtlassianSelectedSource,
+  AtlassianSourceKind,
+  AtlassianSyncCadence,
+  SaveAtlassianSourcesRequest,
+  atlassianScopesAllowRead
+};
+//# sourceMappingURL=atlassian.js.map

package/dist/atlassian.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/canonical-human-identities.d.ts

@@ -0,0 +1,157 @@
+import { z } from "zod";
+export declare const CanonicalHumanIdentityStatus: z.ZodEnum<{
+    active: "active";
+    disabled: "disabled";
+    disputed: "disputed";
+    recovery_required: "recovery_required";
+}>;
+export type CanonicalHumanIdentityStatus = z.infer<typeof CanonicalHumanIdentityStatus>;
+export declare const CanonicalHumanLoginBindingStatus: z.ZodEnum<{
+    active: "active";
+    disputed: "disputed";
+    recovery_pending: "recovery_pending";
+    revoked: "revoked";
+    stale: "stale";
+}>;
+export type CanonicalHumanLoginBindingStatus = z.infer<typeof CanonicalHumanLoginBindingStatus>;
+export declare const CanonicalHumanRecoveryState: z.ZodEnum<{
+    disabled: "disabled";
+    disputed: "disputed";
+    lost_factor: "lost_factor";
+    ready: "ready";
+    recovery_required: "recovery_required";
+}>;
+export type CanonicalHumanRecoveryState = z.infer<typeof CanonicalHumanRecoveryState>;
+export declare const CanonicalHumanLoginBinding: z.ZodObject<{
+    id: z.ZodString;
+    providerId: z.ZodString;
+    providerAccountId: z.ZodString;
+    status: z.ZodEnum<{
+        active: "active";
+        disputed: "disputed";
+        recovery_pending: "recovery_pending";
+        revoked: "revoked";
+        stale: "stale";
+    }>;
+    revision: z.ZodNumber;
+    verifiedAt: z.ZodString;
+    lastVerifiedAt: z.ZodString;
+    revokedAt: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type CanonicalHumanLoginBinding = z.infer<typeof CanonicalHumanLoginBinding>;
+export declare const CanonicalHumanIdentityProjection: z.ZodObject<{
+    activeIdentity: z.ZodObject<{
+        id: z.ZodString;
+        displayName: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            disabled: "disabled";
+            disputed: "disputed";
+            recovery_required: "recovery_required";
+        }>;
+        identityRevision: z.ZodNumber;
+        authRevision: z.ZodNumber;
+        activeLoginBindingId: z.ZodNullable<z.ZodString>;
+        recoveryState: z.ZodEnum<{
+            disabled: "disabled";
+            disputed: "disputed";
+            lost_factor: "lost_factor";
+            ready: "ready";
+            recovery_required: "recovery_required";
+        }>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+    loginBindings: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        providerId: z.ZodString;
+        providerAccountId: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            disputed: "disputed";
+            recovery_pending: "recovery_pending";
+            revoked: "revoked";
+            stale: "stale";
+        }>;
+        revision: z.ZodNumber;
+        verifiedAt: z.ZodString;
+        lastVerifiedAt: z.ZodString;
+        revokedAt: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type CanonicalHumanIdentityProjection = z.infer<typeof CanonicalHumanIdentityProjection>;
+export declare const LinkCanonicalHumanLoginBindingRequest: z.ZodObject<{
+    operationId: z.ZodOptional<z.ZodString>;
+    expectedIdentityRevision: z.ZodNumber;
+    reason: z.ZodString;
+    providerId: z.ZodString;
+    providerAccountId: z.ZodString;
+}, z.core.$strip>;
+export type LinkCanonicalHumanLoginBindingRequest = z.infer<typeof LinkCanonicalHumanLoginBindingRequest>;
+export declare const CanonicalHumanBindingOperationRequest: z.ZodObject<{
+    operationId: z.ZodOptional<z.ZodString>;
+    expectedIdentityRevision: z.ZodNumber;
+    reason: z.ZodString;
+}, z.core.$strip>;
+export type CanonicalHumanBindingOperationRequest = z.infer<typeof CanonicalHumanBindingOperationRequest>;
+export declare const CanonicalHumanIdentityMutationOutcome: z.ZodEnum<{
+    applied: "applied";
+    disputed: "disputed";
+    lost_factor: "lost_factor";
+}>;
+export type CanonicalHumanIdentityMutationOutcome = z.infer<typeof CanonicalHumanIdentityMutationOutcome>;
+export declare const CanonicalHumanIdentityMutationResponse: z.ZodObject<{
+    outcome: z.ZodEnum<{
+        applied: "applied";
+        disputed: "disputed";
+        lost_factor: "lost_factor";
+    }>;
+    operationId: z.ZodString;
+    identity: z.ZodObject<{
+        activeIdentity: z.ZodObject<{
+            id: z.ZodString;
+            displayName: z.ZodString;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+                disputed: "disputed";
+                recovery_required: "recovery_required";
+            }>;
+            identityRevision: z.ZodNumber;
+            authRevision: z.ZodNumber;
+            activeLoginBindingId: z.ZodNullable<z.ZodString>;
+            recoveryState: z.ZodEnum<{
+                disabled: "disabled";
+                disputed: "disputed";
+                lost_factor: "lost_factor";
+                ready: "ready";
+                recovery_required: "recovery_required";
+            }>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>;
+        loginBindings: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            providerId: z.ZodString;
+            providerAccountId: z.ZodString;
+            status: z.ZodEnum<{
+                active: "active";
+                disputed: "disputed";
+                recovery_pending: "recovery_pending";
+                revoked: "revoked";
+                stale: "stale";
+            }>;
+            revision: z.ZodNumber;
+            verifiedAt: z.ZodString;
+            lastVerifiedAt: z.ZodString;
+            revokedAt: z.ZodNullable<z.ZodString>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type CanonicalHumanIdentityMutationResponse = z.infer<typeof CanonicalHumanIdentityMutationResponse>;

package/dist/canonical-human-identities.js

@@ -0,0 +1,23 @@
+import {
+  CanonicalHumanBindingOperationRequest,
+  CanonicalHumanIdentityMutationOutcome,
+  CanonicalHumanIdentityMutationResponse,
+  CanonicalHumanIdentityProjection,
+  CanonicalHumanIdentityStatus,
+  CanonicalHumanLoginBinding,
+  CanonicalHumanLoginBindingStatus,
+  CanonicalHumanRecoveryState,
+  LinkCanonicalHumanLoginBindingRequest
+} from "./chunk-JUFK3T4Q.js";
+export {
+  CanonicalHumanBindingOperationRequest,
+  CanonicalHumanIdentityMutationOutcome,
+  CanonicalHumanIdentityMutationResponse,
+  CanonicalHumanIdentityProjection,
+  CanonicalHumanIdentityStatus,
+  CanonicalHumanLoginBinding,
+  CanonicalHumanLoginBindingStatus,
+  CanonicalHumanRecoveryState,
+  LinkCanonicalHumanLoginBindingRequest
+};
+//# sourceMappingURL=canonical-human-identities.js.map

package/dist/canonical-human-identities.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{chunk-7JZMI22I.js → chunk-5UDNP7AO.js}

@@ -29,6 +29,33 @@ var OPENGENI_SLACK_BOT_EVENTS = [
   "message.mpim",
   "reaction_added"
 ];
+var OPENGENI_SLACK_MCP_USER_SCOPES = [
+  "search:read.public",
+  "search:read.private",
+  "search:read.mpim",
+  "search:read.im",
+  "search:read.files",
+  "files:read",
+  "emoji:read",
+  "search:read.users",
+  "chat:write",
+  "channels:history",
+  "groups:history",
+  "mpim:history",
+  "im:history",
+  "channels:write",
+  "groups:write",
+  "im:write",
+  "mpim:write",
+  "reactions:write",
+  "canvases:read",
+  "canvases:write",
+  "users:read",
+  "users:read.email",
+  "channels:read",
+  "groups:read",
+  "mpim:read"
+];
 var OPENGENI_MANAGED_PUBLIC_BASE_URL = "https://app.opengeni.ai";
 function normalizedSlackManifestBaseUrl(publicBaseUrl) {
   const parsed = new URL(publicBaseUrl);
@@ -68,7 +95,10 @@ function buildOpenGeniSlackBotManifest(publicBaseUrl) {
         `${baseUrl}/v1/integrations/oauth/callback`,
         `${baseUrl}/v1/integrations/slack/callback`
       ],
-      scopes: { bot: [...OPENGENI_SLACK_BOT_REQUESTED_SCOPES] }
+      scopes: {
+        bot: [...OPENGENI_SLACK_BOT_REQUESTED_SCOPES],
+        user: [...OPENGENI_SLACK_MCP_USER_SCOPES]
+      }
     },
     settings: {
       event_subscriptions: {
@@ -79,6 +109,7 @@ function buildOpenGeniSlackBotManifest(publicBaseUrl) {
         is_enabled: true,
         request_url: `${baseUrl}/v1/integrations/slack/interactions`
       },
+      is_mcp_enabled: true,
       org_deploy_enabled: false,
       socket_mode_enabled: false,
       token_rotation_enabled: false
@@ -115,6 +146,7 @@ export {
   OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,
   OPENGENI_SLACK_BOT_REQUESTED_SCOPES,
   OPENGENI_SLACK_BOT_EVENTS,
+  OPENGENI_SLACK_MCP_USER_SCOPES,
   OPENGENI_MANAGED_PUBLIC_BASE_URL,
   buildOpenGeniSlackBotManifest,
   OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES,
@@ -123,4 +155,4 @@ export {
   hasOpenGeniSlackReactionScope,
   evaluateOpenGeniSlackBotScopes
 };
-//# sourceMappingURL=chunk-7JZMI22I.js.map
+//# sourceMappingURL=chunk-5UDNP7AO.js.map

package/dist/chunk-5UDNP7AO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/slack-bot-scopes.ts"],"sourcesContent":["export const OPENGENI_SLACK_BOT_REQUIRED_SCOPES = [\n  \"app_mentions:read\",\n  \"canvases:read\",\n  \"channels:history\",\n  \"channels:read\",\n  \"chat:write\",\n  \"commands\",\n  \"files:read\",\n  \"groups:history\",\n  \"groups:read\",\n  \"im:history\",\n  \"im:read\",\n  \"im:write\",\n  \"mpim:history\",\n  \"mpim:read\",\n  \"users:read\",\n] as const;\n\n/** Read-only scope needed only for the optional emoji-reaction summon surface. */\nexport const OPENGENI_SLACK_REACTION_REQUIRED_SCOPE = \"reactions:read\" as const;\n\n/**\n * Scopes requested by the managed and generated self-hosted manifests.\n *\n * `reactions:read` is deliberately not part of the base eligibility contract:\n * legacy installations may continue using existing Slack interactions and\n * tools while the reaction setting stays disabled and the UI asks an admin to\n * reinstall.\n */\nexport const OPENGENI_SLACK_BOT_REQUESTED_SCOPES = [\n  ...OPENGENI_SLACK_BOT_REQUIRED_SCOPES,\n  OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,\n] as const;\n\nexport const OPENGENI_SLACK_BOT_EVENTS = [\n  \"app_mention\",\n  \"message.channels\",\n  \"message.groups\",\n  \"message.im\",\n  \"message.mpim\",\n  \"reaction_added\",\n] as const;\n\n/** Full user-token scope set for every tool currently exposed by Slack's hosted MCP server. */\nexport const OPENGENI_SLACK_MCP_USER_SCOPES = [\n  \"search:read.public\",\n  \"search:read.private\",\n  \"search:read.mpim\",\n  \"search:read.im\",\n  \"search:read.files\",\n  \"files:read\",\n  \"emoji:read\",\n  \"search:read.users\",\n  \"chat:write\",\n  \"channels:history\",\n  \"groups:history\",\n  \"mpim:history\",\n  \"im:history\",\n  \"channels:write\",\n  \"groups:write\",\n  \"im:write\",\n  \"mpim:write\",\n  \"reactions:write\",\n  \"canvases:read\",\n  \"canvases:write\",\n  \"users:read\",\n  \"users:read.email\",\n  \"channels:read\",\n  \"groups:read\",\n  \"mpim:read\",\n] as const;\n\nexport const OPENGENI_MANAGED_PUBLIC_BASE_URL = \"https://app.opengeni.ai\" as const;\n\nfunction normalizedSlackManifestBaseUrl(publicBaseUrl: string): string {\n  const parsed = new URL(publicBaseUrl);\n  if (parsed.protocol !== \"https:\" || parsed.username || parsed.password) {\n    throw new Error(\"Slack bot manifest public base URL must be credential-free HTTPS\");\n  }\n  parsed.hash = \"\";\n  parsed.search = \"\";\n  parsed.pathname = parsed.pathname.replace(/\\/+$/, \"\");\n  return parsed.toString().replace(/\\/$/, \"\");\n}\n\n/** Canonical managed/self-hosted Slack app manifest. Slack accepts JSON manifests. */\nexport function buildOpenGeniSlackBotManifest(publicBaseUrl: string) {\n  const baseUrl = normalizedSlackManifestBaseUrl(publicBaseUrl);\n  return {\n    display_information: { name: \"OpenGeni\" },\n    features: {\n      bot_user: { display_name: \"OpenGeni\", always_online: false },\n      slash_commands: [\n        {\n          command: \"/opengeni\",\n          description: \"Start an OpenGeni task in this channel\",\n          should_escape: false,\n          url: `${baseUrl}/v1/integrations/slack/commands`,\n        },\n      ],\n      shortcuts: [\n        {\n          callback_id: \"opengeni_message\",\n          description: \"Start an OpenGeni task from this Slack message\",\n          name: \"Open in OpenGeni\",\n          type: \"message\",\n        },\n      ],\n    },\n    oauth_config: {\n      redirect_urls: [\n        `${baseUrl}/v1/integrations/oauth/callback`,\n        `${baseUrl}/v1/integrations/slack/callback`,\n      ],\n      scopes: {\n        bot: [...OPENGENI_SLACK_BOT_REQUESTED_SCOPES],\n        user: [...OPENGENI_SLACK_MCP_USER_SCOPES],\n      },\n    },\n    settings: {\n      event_subscriptions: {\n        bot_events: [...OPENGENI_SLACK_BOT_EVENTS],\n        request_url: `${baseUrl}/v1/integrations/slack/events`,\n      },\n      interactivity: {\n        is_enabled: true,\n        request_url: `${baseUrl}/v1/integrations/slack/interactions`,\n      },\n      is_mcp_enabled: true,\n      org_deploy_enabled: false,\n      socket_mode_enabled: false,\n      token_rotation_enabled: false,\n    },\n  } as const;\n}\n\n/**\n * Optional bot grants that remain inside the shipped bot's read/identity\n * boundary. Every other unrequired scope fails closed, including unknown future\n * Slack scopes, so verification, core routing, and UI eligibility cannot drift.\n */\nexport const OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES = [\n  \"team:read\",\n  OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,\n] as const;\n\n/** @deprecated Use evaluateOpenGeniSlackBotScopes; an allowlist is the policy. */\nexport const OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES = [\"channels:join\", \"chat:write.public\"] as const;\n\nexport type OpenGeniSlackBotScopePolicy = {\n  accepted: boolean;\n  missingRequired: string[];\n  unsupported: string[];\n};\n\nfunction isOpenGeniSlackBotScopeAllowed(scope: string): boolean {\n  return (\n    (OPENGENI_SLACK_BOT_REQUIRED_SCOPES as readonly string[]).includes(scope) ||\n    (OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES as readonly string[]).includes(scope)\n  );\n}\n\nexport function areOpenGeniSlackBotScopesAccepted(grantedScopes: readonly string[]): boolean {\n  return (\n    OPENGENI_SLACK_BOT_REQUIRED_SCOPES.every((scope) => grantedScopes.includes(scope)) &&\n    grantedScopes.every(isOpenGeniSlackBotScopeAllowed)\n  );\n}\n\nexport function hasOpenGeniSlackReactionScope(grantedScopes: readonly string[]): boolean {\n  return grantedScopes.includes(OPENGENI_SLACK_REACTION_REQUIRED_SCOPE);\n}\n\nexport function evaluateOpenGeniSlackBotScopes(\n  grantedScopes: readonly string[],\n): OpenGeniSlackBotScopePolicy {\n  const granted = new Set(grantedScopes);\n  const missingRequired = OPENGENI_SLACK_BOT_REQUIRED_SCOPES.filter((scope) => !granted.has(scope));\n  const unsupported = [...granted].filter((scope) => !isOpenGeniSlackBotScopeAllowed(scope)).sort();\n  return {\n    accepted: areOpenGeniSlackBotScopesAccepted(grantedScopes),\n    missingRequired,\n    unsupported,\n  };\n}\n"],"mappings":";AAAO,IAAM,qCAAqC;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,yCAAyC;AAU/C,IAAM,sCAAsC;AAAA,EACjD,GAAG;AAAA,EACH;AACF;AAEO,IAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,iCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,mCAAmC;AAEhD,SAAS,+BAA+B,eAA+B;AACrE,QAAM,SAAS,IAAI,IAAI,aAAa;AACpC,MAAI,OAAO,aAAa,YAAY,OAAO,YAAY,OAAO,UAAU;AACtE,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,SAAO,OAAO;AACd,SAAO,SAAS;AAChB,SAAO,WAAW,OAAO,SAAS,QAAQ,QAAQ,EAAE;AACpD,SAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,EAAE;AAC5C;AAGO,SAAS,8BAA8B,eAAuB;AACnE,QAAM,UAAU,+BAA+B,aAAa;AAC5D,SAAO;AAAA,IACL,qBAAqB,EAAE,MAAM,WAAW;AAAA,IACxC,UAAU;AAAA,MACR,UAAU,EAAE,cAAc,YAAY,eAAe,MAAM;AAAA,MAC3D,gBAAgB;AAAA,QACd;AAAA,UACE,SAAS;AAAA,UACT,aAAa;AAAA,UACb,eAAe;AAAA,UACf,KAAK,GAAG,OAAO;AAAA,QACjB;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,aAAa;AAAA,UACb,aAAa;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,eAAe;AAAA,QACb,GAAG,OAAO;AAAA,QACV,GAAG,OAAO;AAAA,MACZ;AAAA,MACA,QAAQ;AAAA,QACN,KAAK,CAAC,GAAG,mCAAmC;AAAA,QAC5C,MAAM,CAAC,GAAG,8BAA8B;AAAA,MAC1C;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,qBAAqB;AAAA,QACnB,YAAY,CAAC,GAAG,yBAAyB;AAAA,QACzC,aAAa,GAAG,OAAO;AAAA,MACzB;AAAA,MACA,eAAe;AAAA,QACb,YAAY;AAAA,QACZ,aAAa,GAAG,OAAO;AAAA,MACzB;AAAA,MACA,gBAAgB;AAAA,MAChB,oBAAoB;AAAA,MACpB,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,IAC1B;AAAA,EACF;AACF;AAOO,IAAM,0CAA0C;AAAA,EACrD;AAAA,EACA;AACF;AAGO,IAAM,sCAAsC,CAAC,iBAAiB,mBAAmB;AAQxF,SAAS,+BAA+B,OAAwB;AAC9D,SACG,mCAAyD,SAAS,KAAK,KACvE,wCAA8D,SAAS,KAAK;AAEjF;AAEO,SAAS,kCAAkC,eAA2C;AAC3F,SACE,mCAAmC,MAAM,CAAC,UAAU,cAAc,SAAS,KAAK,CAAC,KACjF,cAAc,MAAM,8BAA8B;AAEtD;AAEO,SAAS,8BAA8B,eAA2C;AACvF,SAAO,cAAc,SAAS,sCAAsC;AACtE;AAEO,SAAS,+BACd,eAC6B;AAC7B,QAAM,UAAU,IAAI,IAAI,aAAa;AACrC,QAAM,kBAAkB,mCAAmC,OAAO,CAAC,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC;AAChG,QAAM,cAAc,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,+BAA+B,KAAK,CAAC,EAAE,KAAK;AAChG,SAAO;AAAA,IACL,UAAU,kCAAkC,aAAa;AAAA,IACzD;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-BVGIYW7D.js

@@ -0,0 +1,11 @@
+// src/editable-artifact-versions.ts
+var EDITABLE_ARTIFACT_MODEL_SCHEMA_VERSION = 1;
+var EDITABLE_ARTIFACT_SNAPSHOT_VERSION = 1;
+var COMMITTED_TRANSACTION_PROTOCOL_VERSION = 1;
+
+export {
+  EDITABLE_ARTIFACT_MODEL_SCHEMA_VERSION,
+  EDITABLE_ARTIFACT_SNAPSHOT_VERSION,
+  COMMITTED_TRANSACTION_PROTOCOL_VERSION
+};
+//# sourceMappingURL=chunk-BVGIYW7D.js.map

package/dist/chunk-BVGIYW7D.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/editable-artifact-versions.ts"],"sourcesContent":["/** Shared durable model version without importing any modality codec. */\nexport const EDITABLE_ARTIFACT_MODEL_SCHEMA_VERSION = 1 as const;\n\n/** Shared native snapshot version without importing any modality codec. */\nexport const EDITABLE_ARTIFACT_SNAPSHOT_VERSION = 1 as const;\n\n/** Canonical committed spreadsheet transaction protocol version. */\nexport const COMMITTED_TRANSACTION_PROTOCOL_VERSION = 1 as const;\n"],"mappings":";AACO,IAAM,yCAAyC;AAG/C,IAAM,qCAAqC;AAG3C,IAAM,yCAAyC;","names":[]}