@opengeni/core 0.21.2 → 0.24.1

package/dist/managed-session.d.ts

@@ -0,0 +1,53 @@
+import type { Context } from "hono";
+import type { ManagedAuth } from "./managed-auth-type.js";
+/**
+ * Read a Better Auth session without bypassing its sliding-cookie renewal.
+ *
+ * Better Auth can refresh the durable session while resolving `getSession`.
+ * Programmatic callers must explicitly request and forward the returned cookie
+ * headers; the HTTP handler does this automatically, but direct API calls do not.
+ */
+export declare function getManagedSession(c: Context, auth: ManagedAuth): Promise<{
+    session: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        userId: string;
+        expiresAt: Date;
+        token: string;
+        ipAddress?: string | null | undefined;
+        userAgent?: string | null | undefined;
+    } | {
+        [x: string]: any;
+        [x: number]: any;
+        [x: symbol]: any;
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        userId: string;
+        expiresAt: Date;
+        token: string;
+        ipAddress?: string | null | undefined;
+        userAgent?: string | null | undefined;
+    };
+    user: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        email: string;
+        emailVerified: boolean;
+        name: string;
+        image?: string | null | undefined;
+    } | {
+        [x: string]: any;
+        [x: number]: any;
+        [x: symbol]: any;
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        email: string;
+        emailVerified: boolean;
+        name: string;
+        image?: string | null | undefined;
+    };
+} | null>;

package/dist/rigs/index.d.ts

@@ -1,5 +1,6 @@
 import type { AccessGrant, CreateRigRequest, RigDefinitionEditPayload, ProposeRigChangeRequest, Rig, RigChange, RigVersion, UpdateRigRequest } from "@opengeni/contracts";
 import { type Database } from "@opengeni/db";
+export * from "./provider-images.js";
 export declare const MAX_RIGS_PER_WORKSPACE = 50;
 export declare const MAX_CHECKS_PER_RIG = 100;
 export declare const MAX_CREDENTIAL_HOOKS_PER_RIG = 50;
@@ -54,4 +55,3 @@ export declare function createRigVersionForApi(deps: RigServices, grant: AccessG
 export declare function activateRigVersionForApi(deps: RigServices, grant: AccessGrant, rig: Rig, versionId: string): Promise<RigVersion>;
 export declare function listRigVersionsForApi(deps: RigServices, workspaceId: string, rigId: string): Promise<RigVersion[]>;
 export declare function listRigChangesForApi(deps: RigServices, workspaceId: string, rigId: string, limit?: number): Promise<RigChange[]>;
-export {};

package/dist/rigs/provider-images.d.ts

@@ -0,0 +1,31 @@
+import { type RigChangeVerification, type RigProviderImage, type RigProviderImages, type RigVersion, type SandboxBackend } from "@opengeni/contracts";
+export type RigProviderImageDefinition = Pick<RigVersion, "image" | "setupScript" | "checks" | "credentialHooks" | "defaultVariableSetIds">;
+export declare function rigProviderImageProviderBindingKeyHash(bindingKey: string): string;
+export declare function rigProviderImageSetupHash(definition: Pick<RigProviderImageDefinition, "setupScript">): string;
+/**
+ * Hash every exact rig-definition input that can affect whether a provider
+ * image may be reused. Credential values and variable-set contents are
+ * intentionally absent: verification never injects them into the build box.
+ * Their declared hook/set identities still participate so a new rig version
+ * cannot silently inherit an older build record.
+ */
+export declare function rigProviderImageContentHash(input: {
+    backend: SandboxBackend;
+    sourceImage: string | null;
+    definition: RigProviderImageDefinition;
+}): string;
+/** Modal's patched snapshot API accepts a caller-owned UUID idempotency key.
+ * v2 denotes images proven by a separate cold boot before publication. */
+export declare function rigProviderImageBuildRequestId(input: {
+    targetId: string;
+    backend: SandboxBackend;
+    contentHash: string;
+}): string;
+export declare function rigProviderImageMatchesDefinition(image: RigProviderImage, definition: RigProviderImageDefinition): boolean;
+/**
+ * Promotion copies only a finalized, structurally valid build record whose
+ * hashes match the exact version definition being inserted. A malformed or
+ * stale optimization record is discarded; the version remains correct and
+ * falls back to runtime setup.
+ */
+export declare function rigProviderImagesFromVerification(verification: RigChangeVerification | null, definition: RigProviderImageDefinition): RigProviderImages;

package/dist/sandbox/fleet.d.ts

@@ -1,7 +1,7 @@
 import type { Settings } from "@opengeni/config";
 import { type Database, type SandboxRecord } from "@opengeni/db";
 import type { EventBus } from "@opengeni/events";
-import { type BackendUnresolvableCode, type ControlRpc, type SelfhostedRelayConfig } from "@opengeni/runtime/sandbox";
+import { type BackendUnresolvableCode, type ControlRpc, type SelfhostedRelayConfig, type SelfhostedOpStreamDeps } from "@opengeni/runtime/sandbox";
 export type FleetServices = {
     db: Database;
     settings: Settings;
@@ -44,6 +44,7 @@ export declare function buildFleetContextForSession(deps: {
 }): Promise<FleetContext>;
 /** The dominant liveness of a fleet member, surfaced to the dock + the agent. */
 export type FleetLiveness = "online" | "reconnecting" | "offline";
+export type FleetOperationAvailability = "ready" | "wakeable" | "recovering" | "unavailable";
 /**
  * A fleet member as the agent + the dock see it (the M8b/M9 UI seam — the
  * `sandboxes_list` response entry the dock renders). STABLE shape: the dock keys
@@ -65,6 +66,11 @@ export type FleetSandboxEntry = {
     enrollmentId: string | null;
     /** Whether this target can be attached/swapped to right now (live + addressable). */
     attachable: boolean;
+    /** Whether an ordinary shell/files operation can use this target. This is
+     * deliberately separate from `attachable`: an idle managed home sandbox can
+     * be wakeable even while its holderless lease is cold/draining and therefore
+     * not an already-live swap target. */
+    operationAvailability: FleetOperationAvailability;
     /** Selfhosted only: whether whole-machine + screen-control consent is acked. */
     consented?: boolean;
     /** Selfhosted only: whether a display (real/Xvfb) is present. */
@@ -154,6 +160,8 @@ export type RunOnSelfhostedMachine = {
     controlTimeoutMs: number;
     /** Longer agent-side process deadline for exec. */
     execTimeoutMs: number;
+    /** Streaming transport required when execTimeoutMs is 0 (unbounded). */
+    opStream?: SelfhostedOpStreamDeps;
 };
 /**
  * Execute the one-off machine operation once the workspace/enrollment lookup has

package/dist/sandbox/routing.d.ts

@@ -7,6 +7,7 @@ export type ChannelARoutingServices = {
     settings: Settings;
     bus?: EventBus;
     onSandboxOperation?: RoutingSandboxOperationObserver;
+    waitSignal?: AbortSignal;
 };
 /** Map the deployment relay URL to the leaf's `SelfhostedRelayConfig` shape. The
  *  relay URL (`OPENGENI_SELFHOSTED_RELAY_URL`) may carry a path (the relay's wss

package/dist/session-authorization.d.ts

@@ -1,5 +1,6 @@
 import { SessionAuthorizationActor, SessionAuthorizationListScope, type AccessGrant, type SessionAuthorizationOperation, type SessionAuthorizationSurface, type SessionAuthorizationTarget } from "@opengeni/contracts";
-import type { AppDependencies } from "./dependencies";
+import { type Database } from "@opengeni/db";
+import type { AppDependencies } from "./dependencies.js";
 export type SessionAuthorizationDependencies = Pick<AppDependencies, "db" | "sessionAuthorization">;
 /** Maximum time an omitted host hint leaves a live session stream unchecked. */
 export declare const SESSION_AUTHORIZATION_DEFAULT_REAUTHORIZE_MS = 15000;
@@ -18,6 +19,14 @@ export type ResolvedSessionAuthorization = {
     relatedSessionAccess: "target" | "root";
     reauthorizeAfterMs: number | null;
 };
+/**
+ * Prove that a first-party request belongs to the exact currently active
+ * attempt of the named caller session. Unlike the optional embedding-host ACL
+ * port, this database fence is mandatory for high-trust operations.
+ */
+export declare function requireLiveAgentAttemptAuthorization(db: Database, grant: AccessGrant, callerSessionId: string): Promise<Extract<SessionAuthorizationActor, {
+    kind: "agent_attempt";
+}>>;
 /**
  * Resolve and enforce the host ACL for one session. The target and agent actor
  * are reconstructed from workspace-scoped durable state. A request can supply

package/dist/workflow-wake-contract.d.ts

@@ -2,3 +2,10 @@
 export declare const SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID = "opengeni-session-workflow-wake-dispatcher";
 export declare const SESSION_WORKFLOW_WAKE_DISPATCHER_WORKFLOW_TYPE = "sessionWorkflowWakeDispatcherWorkflow";
 export declare const SESSION_WORKFLOW_WAKE_DISPATCHER_PERIOD_MS = 10000;
+/**
+ * Temporal delivers activity cancellation through heartbeats. Keep both the
+ * activity's local heartbeat timer and the worker's SDK throttle at this bound
+ * so the end-to-end Pause/Steer physical-cancellation contract is not already
+ * exhausted before sandbox/tool quiescence and replacement admission begin.
+ */
+export declare const TURN_ACTIVITY_CANCELLATION_HEARTBEAT_INTERVAL_MS = 500;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/core",
-  "version": "0.21.2",
+  "version": "0.24.1",
   "description": "OpenGeni framework-agnostic core: the domain, access, and billing layers (neutral access, off-HTTP V2 surface). Behavior-preserving extraction from apps/api — keeps Hono's HTTPException for error throwing (typed-errors cleanup deferred).",
   "license": "Apache-2.0",
   "repository": {
@@ -21,6 +21,14 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./editable-artifacts": {
+      "types": "./dist/editable-artifacts.d.ts",
+      "import": "./dist/editable-artifacts.js"
+    },
+    "./editable-artifact-live": {
+      "types": "./dist/editable-artifact-live.d.ts",
+      "import": "./dist/editable-artifact-live.js"
     }
   },
   "publishConfig": {
@@ -34,15 +42,15 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opengeni/codex": "^0.2.11",
-    "@opengeni/config": "^0.11.0",
-    "@opengeni/contracts": "^0.39.0",
-    "@opengeni/db": "^0.28.1",
-    "@opengeni/documents": "^0.5.10",
-    "@opengeni/events": "^0.3.80",
-    "@opengeni/observability": "^0.5.0",
-    "@opengeni/runtime": "^0.18.17",
-    "@opengeni/storage": "^0.2.68",
+    "@opengeni/codex": "^0.2.15",
+    "@opengeni/config": "^0.13.2",
+    "@opengeni/contracts": "^0.44.1",
+    "@opengeni/db": "^0.31.1",
+    "@opengeni/documents": "^0.5.32",
+    "@opengeni/events": "^0.3.103",
+    "@opengeni/observability": "^0.6.2",
+    "@opengeni/runtime": "^0.19.2",
+    "@opengeni/storage": "^0.2.87",
     "hono": "^4.12.18"
   },
   "engines": {

package/src/access/index.ts

@@ -17,6 +17,7 @@ import {
 import type { Context } from "hono";
 import { HTTPException } from "hono/http-exception";
 import type { ManagedAuth } from "../managed-auth-type";
+import { getManagedSession } from "../managed-session";
 
 const bearerPrefix = "Bearer ";
 
@@ -143,10 +144,51 @@ export function requirePermission(grant: AccessGrant, permission: Permission): v
   }
 }
 
+/**
+ * Require a permission to be present literally on the grant. This deliberately
+ * does not expand workspace:admin or deprecated aliases and is reserved for
+ * authorities, such as plaintext secret reads, that old broad grants must not
+ * acquire implicitly.
+ */
+export function requireLiteralPermission(grant: AccessGrant, permission: Permission): void {
+  if (!hasLiteralPermission(grant.permissions, permission)) {
+    throw new HTTPException(403, {
+      message: `missing literal permission: ${permission}`,
+    });
+  }
+}
+
+export function hasLiteralPermission(permissions: Permission[], permission: Permission): boolean {
+  return permissions.includes(permission);
+}
+
 export function hasPermission(permissions: Permission[], permission: Permission): boolean {
+  if (permission === "secrets:read") {
+    return permissions.includes("secrets:read");
+  }
   const aliases: Partial<Record<Permission, Permission[]>> = {
     "variable-sets:use": ["environments:use" as Permission],
     "variable-sets:manage": ["environments:manage" as Permission],
+    "variable-sets:list": [
+      "variable-sets:use",
+      "variable-sets:manage",
+      "environments:use" as Permission,
+      "environments:manage" as Permission,
+    ],
+    "variable-sets:read": [
+      "variable-sets:use",
+      "variable-sets:manage",
+      "environments:use" as Permission,
+      "environments:manage" as Permission,
+    ],
+    "variable-sets:write": ["variable-sets:manage", "environments:manage" as Permission],
+    "secrets:list": [
+      "variable-sets:use",
+      "variable-sets:manage",
+      "environments:use" as Permission,
+      "environments:manage" as Permission,
+    ],
+    "secrets:write": ["variable-sets:manage", "environments:manage" as Permission],
   };
   return (
     permissions.includes(permission) ||
@@ -210,9 +252,7 @@ async function resolveAccessContext(c: Context, deps: AccessDeps): Promise<Acces
   }
 
   if (deps.managedAuth) {
-    const session = await deps.managedAuth.api.getSession({
-      headers: c.req.raw.headers,
-    });
+    const session = await getManagedSession(c, deps.managedAuth);
     if (session?.user) {
       return await ensureManagedAccessForUser(deps.db, {
         userId: session.user.id,

package/src/application/new-session-drafts.ts

@@ -67,6 +67,7 @@ async function hydrateNewSessionDraft(
     deps.db,
     workspaceId,
     deps.settings,
+    { subjectId: grant.subjectId },
   );
   const resources = [] as NewSessionDraftValue["resources"];
   for (const resource of mapped.resources) {
@@ -200,6 +201,7 @@ export async function saveActorNewSessionDraft(
     deps.db,
     workspaceId,
     deps.settings,
+    { subjectId: grant.subjectId },
   );
   const resources = normalizeResources(input.resources);
   const tools = toolsProvided ? validateToolRefs(input.tools, runtimeSettings) : [];