@opengeni/contracts 3.0.2-canary.2 → 3.1.0-canary.0

package/dist/connect.js

@@ -1,7 +1,7 @@
 import {
   IntegrationInstanceKey,
   IntegrationSource
-} from "./chunk-YRCMZTY2.js";
+} from "./chunk-CMDU4K45.js";
 import "./chunk-WBYTNVIW.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";

package/dist/connection-authority.js

@@ -16,8 +16,8 @@ import {
   ListConnectionAuthoritiesQuery,
   ListConnectionAuthoritiesResponse,
   RevokeConnectionUseGrantQuery
-} from "./chunk-GJ5SNVJW.js";
-import "./chunk-YRCMZTY2.js";
+} from "./chunk-23GYI3LA.js";
+import "./chunk-CMDU4K45.js";
 import "./chunk-WBYTNVIW.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";

package/dist/google-drive.js

@@ -1,6 +1,6 @@
 import {
   ConnectionMetadata
-} from "./chunk-YRCMZTY2.js";
+} from "./chunk-CMDU4K45.js";
 import "./chunk-WBYTNVIW.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";

package/dist/host-mcp-bindings.js

@@ -1,12 +1,12 @@
 import {
   ConnectionUseAuthoritySnapshot,
   IssueConnectionUseGrantRequest
-} from "./chunk-GJ5SNVJW.js";
+} from "./chunk-23GYI3LA.js";
 import {
   HostMcpCreateSelections,
   McpServerConnectionRef,
   SessionTenancyVisibility
-} from "./chunk-YRCMZTY2.js";
+} from "./chunk-CMDU4K45.js";
 import "./chunk-WBYTNVIW.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";

package/dist/index.d.ts

@@ -6939,6 +6939,27 @@ export declare const SessionMcpCredentialUpdateInput: z.ZodObject<{
     headers: z.ZodRecord<z.ZodString, z.ZodString>;
 }, z.core.$strip>;
 export type SessionMcpCredentialUpdateInput = z.infer<typeof SessionMcpCredentialUpdateInput>;
+/** Standalone credential maintenance; never admits or retries model work. */
+export declare const RotateSessionMcpCredentialsRequest: z.ZodObject<{
+    operationKey: z.ZodString;
+    updates: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        expectedCredentialVersion: z.ZodNumber;
+        expectedServerUrl: z.ZodString;
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type RotateSessionMcpCredentialsRequest = z.infer<typeof RotateSessionMcpCredentialsRequest>;
+export declare const RotateSessionMcpCredentialsReceipt: z.ZodObject<{
+    operationKey: z.ZodString;
+    sessionId: z.ZodString;
+    servers: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        credentialVersion: z.ZodNumber;
+    }, z.core.$strict>>;
+    appliedAt: z.ZodString;
+}, z.core.$strict>;
+export type RotateSessionMcpCredentialsReceipt = z.infer<typeof RotateSessionMcpCredentialsReceipt>;
 export declare const SessionMcpServerMetadata: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodNullable<z.ZodString>;
@@ -8183,6 +8204,7 @@ export declare const SessionAuthorizationOperation: z.ZodEnum<{
     "session.human_input.write": "session.human_input.write";
     "session.lineage.read": "session.lineage.read";
     "session.mcp.approval_policy.write": "session.mcp.approval_policy.write";
+    "session.mcp.credentials.rotate": "session.mcp.credentials.rotate";
     "session.personal_resource.grant": "session.personal_resource.grant";
     "session.pin.write": "session.pin.write";
     "session.queue.control": "session.queue.control";

package/dist/index.js

@@ -1109,6 +1109,8 @@ import {
   RollbackWorkspaceArtifactRequest,
   RollbackWorkspaceInstructionPolicyRequest,
   RollbackWorkspaceLearningPolicyRevisionRequest,
+  RotateSessionMcpCredentialsReceipt,
+  RotateSessionMcpCredentialsRequest,
   RunDocumentDefaultCollectionBackfillRequest,
   SANDBOX_FILE_ARTIFACT_MAX_BYTES,
   SANDBOX_PROVIDER_INSTANCE_ID_FIELDS_BY_BACKEND,
@@ -1866,7 +1868,7 @@ import {
   workspaceLearningPolicyRouterContext,
   workspaceLearningSourceKey,
   workspaceSlackReactionChannelAllowed
-} from "./chunk-YRCMZTY2.js";
+} from "./chunk-CMDU4K45.js";
 import {
   mcpEndpointIdentity,
   pluginMcpUnavailableReason
@@ -3426,6 +3428,8 @@ export {
   RollbackWorkspaceArtifactRequest,
   RollbackWorkspaceInstructionPolicyRequest,
   RollbackWorkspaceLearningPolicyRevisionRequest,
+  RotateSessionMcpCredentialsReceipt,
+  RotateSessionMcpCredentialsRequest,
   RunDocumentDefaultCollectionBackfillRequest,
   SANDBOX_FILE_ARTIFACT_MAX_BYTES,
   SANDBOX_PROVIDER_INSTANCE_ID_FIELDS_BY_BACKEND,

package/dist/personal-github.js

@@ -1,6 +1,6 @@
 import {
   ConnectionMetadata
-} from "./chunk-YRCMZTY2.js";
+} from "./chunk-CMDU4K45.js";
 import "./chunk-WBYTNVIW.js";
 import "./chunk-YBW5JSA3.js";
 import "./chunk-O5LEQHDM.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/contracts",
-  "version": "3.0.2-canary.2",
+  "version": "3.1.0-canary.0",
   "description": "Shared zod schemas and wire-contract types for the OpenGeni API.",
   "license": "Apache-2.0",
   "repository": {

package/src/index.ts

@@ -5748,6 +5748,47 @@ export const SessionMcpCredentialUpdateInput = z.object({
 });
 export type SessionMcpCredentialUpdateInput = z.infer<typeof SessionMcpCredentialUpdateInput>;
 
+/** Standalone credential maintenance; never admits or retries model work. */
+export const RotateSessionMcpCredentialsRequest = z
+  .object({
+    operationKey: z.string().uuid(),
+    updates: z
+      .array(
+        z
+          .object({
+            id: SessionMcpServerId,
+            expectedCredentialVersion: z.number().int().min(1).max(2_147_483_646),
+            expectedServerUrl: httpsUrl,
+            headers: z.record(z.string(), z.string()),
+          })
+          .strict(),
+      )
+      .min(1)
+      .max(64),
+  })
+  .strict();
+export type RotateSessionMcpCredentialsRequest = z.infer<typeof RotateSessionMcpCredentialsRequest>;
+
+export const RotateSessionMcpCredentialsReceipt = z
+  .object({
+    operationKey: z.string().uuid(),
+    sessionId: z.string().uuid(),
+    servers: z
+      .array(
+        z
+          .object({
+            id: SessionMcpServerId,
+            credentialVersion: z.number().int().positive(),
+          })
+          .strict(),
+      )
+      .min(1)
+      .max(64),
+    appliedAt: z.string().datetime(),
+  })
+  .strict();
+export type RotateSessionMcpCredentialsReceipt = z.infer<typeof RotateSessionMcpCredentialsReceipt>;
+
 export const SessionMcpServerMetadata = z
   .object({
     id: SessionMcpServerId,
@@ -6778,6 +6819,7 @@ export const SessionAuthorizationOperation = z.enum([
   "session.channel.write",
   "session.variable_sets.write",
   "session.mcp.approval_policy.write",
+  "session.mcp.credentials.rotate",
   "session.tool_policy.write",
   "session.goal.read",
   "session.goal.write",