@opengeni/core 0.20.3 → 0.20.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/core",
-  "version": "0.20.3",
+  "version": "0.20.10",
   "description": "OpenGeni framework-agnostic core: the domain, access, and billing layers (neutral access, off-HTTP V2 surface). Behavior-preserving extraction from apps/api — keeps Hono's HTTPException for error throwing (typed-errors cleanup deferred).",
   "license": "Apache-2.0",
   "repository": {
@@ -35,14 +35,14 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opengeni/codex": "^0.2.10",
-    "@opengeni/config": "^0.10.7",
-    "@opengeni/contracts": "^0.36.0",
-    "@opengeni/db": "^0.27.0",
-    "@opengeni/documents": "^0.3.3",
-    "@opengeni/events": "^0.3.66",
-    "@opengeni/observability": "^0.4.10",
-    "@opengeni/runtime": "^0.18.4",
-    "@opengeni/storage": "^0.2.60",
+    "@opengeni/config": "^0.10.11",
+    "@opengeni/contracts": "^0.38.1",
+    "@opengeni/db": "^0.27.7",
+    "@opengeni/documents": "^0.5.3",
+    "@opengeni/events": "^0.3.73",
+    "@opengeni/observability": "^0.4.14",
+    "@opengeni/runtime": "^0.18.10",
+    "@opengeni/storage": "^0.2.64",
     "hono": "^4.12.18"
   },
   "engines": {

package/src/dependencies.ts

@@ -117,6 +117,10 @@ export type AppDependencies = {
   slackFetch?: typeof fetch;
   /** Injectable Google OAuth/Drive transport for deterministic connector tests. */
   googleDriveFetch?: typeof fetch;
+  /** Injectable MCP OAuth setup deadline for deterministic stalled-provider tests. */
+  oauthStartDeadlineMs?: number;
+  /** Injectable MCP OAuth callback deadline for deterministic stalled-provider tests. */
+  oauthCallbackDeadlineMs?: number;
   /** Optional host-owned voice-input transcription service. */
   transcription?: TranscriptionService | null;
   // The API process's OWN agent-loop-free sandbox client (constructed from

package/src/domain/capabilities.ts

@@ -11,6 +11,7 @@ import {
   type CreateCapabilityCatalogItemRequest,
   type EnableCapabilityRequest,
   type McpServerConnectionRef,
+  type SocialConnection,
 } from "@opengeni/contracts";
 import {
   CODEX_APPS_MCP_SERVER_ID,
@@ -36,6 +37,7 @@ import {
   listConnectionsMetadata,
   listEnabledMcpCapabilityServers,
   listPackInstallations,
+  listSocialConnections,
   mcpServerIdForCapability,
   updatePackInstallationStatus,
   upsertCapabilityCatalogItem,
@@ -76,6 +78,7 @@ export async function buildCapabilityCatalog(input: {
     capabilityInstallations,
     packInstallations,
     workspacePacks,
+    socialConnections,
     bundledSkills,
     curatedLibrarySkills,
   ] = await Promise.all([
@@ -83,6 +86,7 @@ export async function buildCapabilityCatalog(input: {
     listCapabilityInstallations(input.db, input.workspaceId),
     listPackInstallations(input.db, input.workspaceId),
     listWorkspaceCapabilityPacks(input.db, input.workspaceId),
+    listSocialConnections(input.db, input.workspaceId, 500),
     discoverBundledSkills(),
     discoverCuratedSkillLibraryItems(),
   ]);
@@ -100,7 +104,7 @@ export async function buildCapabilityCatalog(input: {
       packCatalogItem(pack, builtInPackIds.has(pack.id) ? "built_in" : "manual"),
     ),
     ...configuredMcpCatalogItems(input.settings),
-    ...platformApiCatalogItems(),
+    ...platformApiCatalogItems(socialConnections),
     ...bundledSkills,
     ...curatedLibrarySkills,
   ];
@@ -968,8 +972,52 @@ function configuredMcpCatalogItems(settings: Settings): CapabilityCatalogItem[]
   );
 }
 
-function platformApiCatalogItems(): CapabilityCatalogItem[] {
-  return [
+function platformApiCatalogItems(socialConnections: SocialConnection[]): CapabilityCatalogItem[] {
+  const xConnection = preferredSocialConnection(socialConnections, "x");
+  const xEnabled = xConnection?.status === "connected" || xConnection?.status === "needs_reauth";
+  const x = CapabilityCatalogItem.parse({
+    id: "api:x",
+    kind: "api",
+    source: "built_in",
+    name: "X",
+    description:
+      "Connect an X account for live search, mentions, thread context, post sync, and permission-controlled replies.",
+    category: "social-media",
+    tags: ["api", "x", "twitter", "social", "marketing"],
+    homepageUrl: "https://x.com",
+    authModel: "oauth2_authorization_code_pkce",
+    providerDomain: "x.com",
+    surfaceType: "first_party_social",
+    authKind: "oauth2",
+    tools: [{ kind: "mcp", id: "opengeni" }],
+    runtime: {
+      available: true,
+      mcpServerId: "opengeni",
+      notes: "Account access is provided through OpenGeni's first-party social tools.",
+    },
+    enabled: xEnabled,
+    enabledReason: xEnabled
+      ? xConnection.status === "connected"
+        ? "workspace social account connected"
+        : "workspace social account needs reconnection"
+      : null,
+    metadata: {
+      connectorMode: "first_party_social",
+      provider: "x",
+      ownership: "workspace",
+      firstPartyMcpTools: [
+        "social_connections_list",
+        "social_posts_recent",
+        "social_daily_analysis_context",
+        "social_search_live",
+        "social_mentions_live",
+        "social_thread_fetch",
+        "social_posts_sync",
+        "social_post_reply",
+      ],
+    },
+  });
+  const platformApis = [
     {
       id: "api:github-app",
       name: "GitHub App",
@@ -1020,6 +1068,25 @@ function platformApiCatalogItems(): CapabilityCatalogItem[] {
       },
     }),
   );
+  return [x, ...platformApis];
+}
+
+function preferredSocialConnection(
+  connections: SocialConnection[],
+  provider: "x" | "reddit",
+): SocialConnection | null {
+  const statusRank = (status: SocialConnection["status"]): number =>
+    status === "connected" ? 0 : status === "needs_reauth" ? 1 : 2;
+  return (
+    connections
+      .filter((connection) => connection.provider === provider)
+      .sort(
+        (left, right) =>
+          statusRank(left.status) - statusRank(right.status) ||
+          right.updatedAt.localeCompare(left.updatedAt) ||
+          left.id.localeCompare(right.id),
+      )[0] ?? null
+  );
 }
 
 async function discoverBundledSkills(): Promise<CapabilityCatalogItem[]> {
@@ -1150,6 +1217,12 @@ export function applyCapabilityEnablement(
       enabledReason: enabled ? "enabled" : null,
     };
   }
+  if (item.surfaceType === "first_party_social") {
+    // Social connector state is derived from the authoritative workspace
+    // connection row while the catalog is built. Being built in means the
+    // connector is browseable, not that an account is already connected.
+    return { ...item, connectionRef: null };
+  }
   if (item.source === "built_in" || item.source === "configured") {
     return {
       ...item,