@opengeni/core 0.20.11 → 0.20.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/core",
-  "version": "0.20.11",
+  "version": "0.20.12",
   "description": "OpenGeni framework-agnostic core: the domain, access, and billing layers (neutral access, off-HTTP V2 surface). Behavior-preserving extraction from apps/api — keeps Hono's HTTPException for error throwing (typed-errors cleanup deferred).",
   "license": "Apache-2.0",
   "repository": {
@@ -35,14 +35,14 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opengeni/codex": "^0.2.10",
-    "@opengeni/config": "^0.10.11",
-    "@opengeni/contracts": "^0.38.1",
-    "@opengeni/db": "^0.27.8",
-    "@opengeni/documents": "^0.5.4",
-    "@opengeni/events": "^0.3.74",
-    "@opengeni/observability": "^0.4.14",
-    "@opengeni/runtime": "^0.18.10",
-    "@opengeni/storage": "^0.2.64",
+    "@opengeni/config": "^0.10.12",
+    "@opengeni/contracts": "^0.38.2",
+    "@opengeni/db": "^0.27.9",
+    "@opengeni/documents": "^0.5.5",
+    "@opengeni/events": "^0.3.75",
+    "@opengeni/observability": "^0.4.15",
+    "@opengeni/runtime": "^0.18.11",
+    "@opengeni/storage": "^0.2.65",
     "hono": "^4.12.18"
   },
   "engines": {

package/src/domain/capabilities.ts

@@ -72,6 +72,7 @@ export async function buildCapabilityCatalog(input: {
   db: Database;
   workspaceId: string;
   settings: Settings;
+  subjectId?: string | null;
 }): Promise<CapabilityCatalogResponse> {
   const [
     persistedItems,
@@ -86,7 +87,7 @@ export async function buildCapabilityCatalog(input: {
     listCapabilityInstallations(input.db, input.workspaceId),
     listPackInstallations(input.db, input.workspaceId),
     listWorkspaceCapabilityPacks(input.db, input.workspaceId),
-    listSocialConnections(input.db, input.workspaceId, 500),
+    listSocialConnections(input.db, input.workspaceId, 500, input.subjectId),
     discoverBundledSkills(),
     discoverCuratedSkillLibraryItems(),
   ]);
@@ -998,13 +999,13 @@ function platformApiCatalogItems(socialConnections: SocialConnection[]): Capabil
     enabled: xEnabled,
     enabledReason: xEnabled
       ? xConnection.status === "connected"
-        ? "workspace social account connected"
-        : "workspace social account needs reconnection"
+        ? `${xConnection.ownership} social account connected`
+        : `${xConnection.ownership} social account needs reconnection`
       : null,
     metadata: {
       connectorMode: "first_party_social",
       provider: "x",
-      ownership: "workspace",
+      ownership: xConnection?.ownership ?? "workspace",
       firstPartyMcpTools: [
         "social_connections_list",
         "social_posts_recent",

package/src/domain/personal-connection-delegations.ts

@@ -4,12 +4,15 @@ import type {
   ConnectionMetadata,
   McpPersonalConnectionDelegation,
   SessionTurn,
+  SocialConnection,
   ToolRef,
 } from "@opengeni/contracts";
 import {
   getSessionTurnPersonalConnectionDelegations,
+  getSocialConnection,
   getWorkspaceGrant,
   listConnectionsMetadata,
+  listSocialConnections,
   type Database,
   type ResolveConnectionCredentialInput,
   type ResolveConnectionCredentialResult,
@@ -19,6 +22,7 @@ export type PersonalConnectionDelegationSource =
   | { kind: "subject"; subjectId: string }
   | { kind: "turn"; sessionId: string; turnId: string }
   | { kind: "none" };
+export type AuthorizedSocialConnection = { connection: SocialConnection; subjectId: string | null };
 
 export function directPersonalConnectionSubjectId(
   turn: Pick<SessionTurn, "source" | "initiator" | "initiatorContext">,
@@ -51,6 +55,58 @@ export function personalConnectionDelegationSourceForGrant(
   return { kind: "subject", subjectId: grant.subjectId };
 }
 
+export async function authorizedSocialConnectionsForGrant(input: {
+  db: Database;
+  grant: AccessGrant;
+  limit?: number;
+}): Promise<AuthorizedSocialConnection[]> {
+  const workspace = await listSocialConnections(
+    input.db,
+    input.grant.workspaceId,
+    input.limit ?? 500,
+    null,
+  );
+  const source = personalConnectionDelegationSourceForGrant(input.grant);
+  if (source.kind === "none")
+    return workspace.map((connection) => ({ connection, subjectId: null }));
+  if (source.kind === "subject") {
+    const visible = await listSocialConnections(
+      input.db,
+      input.grant.workspaceId,
+      input.limit ?? 500,
+      source.subjectId,
+    );
+    return visible.map((connection) => ({
+      connection,
+      subjectId: connection.ownership === "personal" ? source.subjectId : null,
+    }));
+  }
+  const delegations = (
+    await getSessionTurnPersonalConnectionDelegations(
+      input.db,
+      input.grant.workspaceId,
+      source.sessionId,
+      source.turnId,
+    )
+  ).filter((item) => item.connectionType === "social");
+  const personal: AuthorizedSocialConnection[] = [];
+  for (const delegation of delegations) {
+    if (!(await getWorkspaceGrant(input.db, delegation.ownerSubjectId, input.grant.workspaceId)))
+      continue;
+    const connection = await getSocialConnection(
+      input.db,
+      input.grant.workspaceId,
+      delegation.connectionId,
+      delegation.ownerSubjectId,
+    );
+    if (!connection || connection.ownership !== "personal") continue;
+    const domain = connection.provider === "x" ? "x.com" : `${connection.provider}.com`;
+    if (!sameProviderDomain(domain, delegation.providerDomain)) continue;
+    personal.push({ connection, subjectId: delegation.ownerSubjectId });
+  }
+  return [...workspace.map((connection) => ({ connection, subjectId: null })), ...personal];
+}
+
 export function selectedPersonalConnectionServers(
   settings: Pick<Settings, "mcpServers">,
   tools: ToolRef[],
@@ -111,7 +167,7 @@ export function personalConnectionDelegationsFromParent(input: {
   servers: McpServerConfig[];
   parentDelegations: McpPersonalConnectionDelegation[];
 }): McpPersonalConnectionDelegation[] {
-  return input.servers.flatMap((server) => {
+  const mcp = input.servers.flatMap((server) => {
     const ref = server.connectionRef;
     if (!ref || ref.subjectScope !== "subject") return [];
     const delegation = input.parentDelegations.find(
@@ -122,6 +178,12 @@ export function personalConnectionDelegationsFromParent(input: {
     );
     return delegation ? [{ ...delegation }] : [];
   });
+  return [
+    ...mcp,
+    ...input.parentDelegations
+      .filter((item) => item.connectionType === "social")
+      .map((item) => ({ ...item })),
+  ];
 }
 
 export function personalConnectionDelegationsEqual(
@@ -136,7 +198,8 @@ export function personalConnectionDelegationsEqual(
       other?.connectionId === delegation.connectionId &&
       other.ownerSubjectId === delegation.ownerSubjectId &&
       sameProviderDomain(other.providerDomain, delegation.providerDomain) &&
-      other.kind === delegation.kind
+      other.kind === delegation.kind &&
+      other.connectionType === delegation.connectionType
     );
   });
 }
@@ -225,9 +288,10 @@ export async function freezePersonalConnectionDelegations(input: {
   source: PersonalConnectionDelegationSource;
 }): Promise<McpPersonalConnectionDelegation[]> {
   const servers = selectedPersonalConnectionServers(input.settings, input.tools);
-  if (servers.length === 0 || input.source.kind === "none") return [];
+  const includeSocial = input.tools.some((tool) => tool.id === "opengeni");
+  if ((servers.length === 0 && !includeSocial) || input.source.kind === "none") return [];
   if (input.source.kind === "turn") {
-    return personalConnectionDelegationsFromParent({
+    const inherited = personalConnectionDelegationsFromParent({
       servers,
       parentDelegations: await getSessionTurnPersonalConnectionDelegations(
         input.db,
@@ -236,12 +300,39 @@ export async function freezePersonalConnectionDelegations(input: {
         input.source.turnId,
       ),
     });
+    return includeSocial ? inherited : inherited.filter((item) => item.connectionType !== "social");
   }
   const membership = await getWorkspaceGrant(input.db, input.source.subjectId, input.workspaceId);
   if (!membership) return [];
-  return personalConnectionDelegationsFromVisibleConnections({
+  const mcp = personalConnectionDelegationsFromVisibleConnections({
     servers,
     subjectId: input.source.subjectId,
     connections: await listConnectionsMetadata(input.db, input.workspaceId, input.source.subjectId),
   });
+  if (!includeSocial) return mcp;
+  const ownerSubjectId = input.source.subjectId;
+  const visible = await listSocialConnections(input.db, input.workspaceId, 500, ownerSubjectId);
+  const latest = new Map<"x" | "reddit", (typeof visible)[number]>();
+  for (const connection of visible) {
+    if (
+      connection.ownership !== "personal" ||
+      connection.status !== "connected" ||
+      (connection.provider !== "x" && connection.provider !== "reddit")
+    )
+      continue;
+    const prior = latest.get(connection.provider);
+    if (!prior || connection.updatedAt > prior.updatedAt)
+      latest.set(connection.provider, connection);
+  }
+  return [
+    ...mcp,
+    ...[...latest.values()].map((connection) => ({
+      serverId: `social:${connection.provider}`,
+      connectionId: connection.id,
+      ownerSubjectId,
+      providerDomain: connection.provider === "x" ? "x.com" : `${connection.provider}.com`,
+      kind: "oauth2" as const,
+      connectionType: "social" as const,
+    })),
+  ];
 }

package/src/domain/scheduled-tasks.ts

@@ -113,7 +113,7 @@ export async function createValidatedScheduledTask(input: {
     db: input.db,
     workspaceId: input.grant.workspaceId,
     settings: runtimeSettings,
-    tools: agentConfig.tools,
+    tools: [...agentConfig.tools, { kind: "mcp", id: "opengeni" }],
     source: personalConnectionDelegationSourceForGrant(input.grant),
   });
   const creationInitiator = creationInitiatorForGrant(input.grant);
@@ -260,7 +260,7 @@ export async function validatedScheduledTaskUpdate(input: {
       db: input.db,
       workspaceId: input.existing.workspaceId,
       settings: runtimeSettings,
-      tools: nextAgentConfig.tools,
+      tools: [...nextAgentConfig.tools, { kind: "mcp", id: "opengeni" }],
       source: personalConnectionDelegationSourceForGrant(input.grant),
     });
     if (input.existing.reusableSessionId && input.existing.runMode === "reusable_session") {