@opengeni/core 0.14.3 → 0.15.1

package/dist/session-authorization.d.ts

@@ -24,8 +24,10 @@ export type ResolvedSessionAuthorization = {
  * an immediate target id and signed attempt claims, but can never nominate a
  * lineage root or frozen initiator.
  *
- * Returns null when no host port is bound so standalone behavior stays byte-
- * for-byte unchanged and pays no additional lineage lookup.
+ * Slack-owned private sessions are enforced here even when no embedding-host
+ * authorization port is bound. That durable ownership fence covers every
+ * session surface which uses this shared seam, rather than relying on list/UI
+ * filtering or caller-controlled session metadata.
  */
 export declare function requireSessionAuthorization(deps: SessionAuthorizationDependencies, grant: AccessGrant, input: {
     sessionId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/core",
-  "version": "0.14.3",
+  "version": "0.15.1",
   "description": "OpenGeni framework-agnostic core: the domain, access, and billing layers (neutral access, off-HTTP V2 surface). Behavior-preserving extraction from apps/api — keeps Hono's HTTPException for error throwing (typed-errors cleanup deferred).",
   "license": "Apache-2.0",
   "repository": {
@@ -35,14 +35,14 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opengeni/codex": "^0.2.9",
-    "@opengeni/config": "^0.7.22",
-    "@opengeni/contracts": "^0.26.1",
-    "@opengeni/db": "^0.16.2",
-    "@opengeni/documents": "^0.2.59",
-    "@opengeni/events": "^0.3.50",
+    "@opengeni/config": "^0.8.1",
+    "@opengeni/contracts": "^0.27.0",
+    "@opengeni/db": "^0.17.1",
+    "@opengeni/documents": "^0.2.61",
+    "@opengeni/events": "^0.3.52",
     "@opengeni/observability": "^0.3.0",
-    "@opengeni/runtime": "^0.14.15",
-    "@opengeni/storage": "^0.2.46",
+    "@opengeni/runtime": "^0.15.1",
+    "@opengeni/storage": "^0.2.48",
     "hono": "^4.12.18"
   },
   "engines": {

package/src/access/index.ts

@@ -1,4 +1,4 @@
-import type { Settings } from "@opengeni/config";
+import { resolveFirstPartyDelegationSecret, type Settings } from "@opengeni/config";
 import {
   verifyDelegatedAccessToken,
   type AccountGrant,
@@ -137,7 +137,9 @@ export function requirePermission(grant: AccessGrant, permission: Permission): v
         message: "missing permission: variable-sets:manage (deprecated alias: environments:manage)",
       });
     }
-    throw new HTTPException(403, { message: `missing permission: ${permission}` });
+    throw new HTTPException(403, {
+      message: `missing permission: ${permission}`,
+    });
   }
 }
 
@@ -208,7 +210,9 @@ async function resolveAccessContext(c: Context, deps: AccessDeps): Promise<Acces
   }
 
   if (deps.managedAuth) {
-    const session = await deps.managedAuth.api.getSession({ headers: c.req.raw.headers });
+    const session = await deps.managedAuth.api.getSession({
+      headers: c.req.raw.headers,
+    });
     if (session?.user) {
       return await ensureManagedAccessForUser(deps.db, {
         userId: session.user.id,
@@ -275,10 +279,11 @@ async function delegatedAccessContext(
   mode: "local" | "configured" | "managed",
   token = bearerToken(c),
 ): Promise<AccessContext | null> {
-  if (!token || !deps.settings.delegationSecret) {
+  const delegationSecret = resolveFirstPartyDelegationSecret(deps.settings);
+  if (!token || !delegationSecret) {
     return null;
   }
-  const payload = await verifyDelegatedAccessToken(deps.settings.delegationSecret, token);
+  const payload = await verifyDelegatedAccessToken(delegationSecret, token);
   if (!payload) {
     return null;
   }

package/src/session-authorization.ts

@@ -11,6 +11,7 @@ import {
   getSession,
   getSessionRootId,
   getSessionTurnForAttempt,
+  getSlackInteractionSessionAccessForSession,
   type Database,
 } from "@opengeni/db";
 import type { AppDependencies } from "./dependencies";
@@ -51,8 +52,10 @@ export type ResolvedSessionAuthorization = {
  * an immediate target id and signed attempt claims, but can never nominate a
  * lineage root or frozen initiator.
  *
- * Returns null when no host port is bound so standalone behavior stays byte-
- * for-byte unchanged and pays no additional lineage lookup.
+ * Slack-owned private sessions are enforced here even when no embedding-host
+ * authorization port is bound. That durable ownership fence covers every
+ * session surface which uses this shared seam, rather than relying on list/UI
+ * filtering or caller-controlled session metadata.
  */
 export async function requireSessionAuthorization(
   deps: SessionAuthorizationDependencies,
@@ -64,12 +67,26 @@ export async function requireSessionAuthorization(
   },
 ): Promise<ResolvedSessionAuthorization | null> {
   const port = deps.sessionAuthorization;
+  const slackAccess = await getSlackInteractionSessionAccessForSession(deps.db, {
+    accountId: grant.accountId,
+    workspaceId: grant.workspaceId,
+    sessionId: input.sessionId,
+  });
+  if (!port && slackAccess?.visibility !== "private") return null;
+
+  const actor = await resolveSessionAuthorizationActor(deps.db, grant);
+  const target = slackAccess
+    ? { sessionId: input.sessionId, rootSessionId: slackAccess.rootSessionId }
+    : await resolveSessionAuthorizationTarget(deps.db, grant, input.sessionId);
+  if (slackAccess?.visibility === "private") {
+    const allowed =
+      actor.kind === "subject"
+        ? actor.subjectId === slackAccess.owningSubjectId
+        : actor.callerRootSessionId === target.rootSessionId;
+    if (!allowed) throw new SessionAuthorizationDeniedError("forbidden");
+  }
   if (!port) return null;
 
-  const [actor, target] = await Promise.all([
-    resolveSessionAuthorizationActor(deps.db, grant),
-    resolveSessionAuthorizationTarget(deps.db, grant, input.sessionId),
-  ]);
   let rawDecision: unknown;
   try {
     rawDecision = await port.authorizeSession({