@opengeni/core 0.28.0 → 1.0.0

package/dist/domain/slack-bot.d.ts

@@ -1,5 +1,6 @@
-import { type AccessGrant, type ConnectionMetadata, type OpenGeniSlackBotConnectionMetadata as OpenGeniSlackBotMetadata, type Session } from "@opengeni/contracts";
+import { type AccessGrant, type ConnectionMetadata, type FirstPartyMcpToolName, type OpenGeniSlackBotConnectionMetadata as OpenGeniSlackBotMetadata, type ScheduledTask, type ScheduledTaskAgentConfig, type Session } from "@opengeni/contracts";
 import { type ConnectionMetadataWithVerification, type Database } from "@opengeni/db";
+import { type AccessGrantAuthorization } from "../access/index.js";
 export declare function openGeniSlackBotMetadata(metadata: Record<string, unknown>): OpenGeniSlackBotMetadata | null;
 export declare function isOpenGeniSlackBotConnection(connection: ConnectionMetadata & Partial<Pick<ConnectionMetadataWithVerification, "verifiedInstallAt" | "verifiedInstallVersion">>): boolean;
 export declare function hasReservedOpenGeniSlackBotMetadata(metadata: Record<string, unknown> | null | undefined): boolean;
@@ -17,3 +18,47 @@ export declare function scheduledSlackBotConnectionId(metadata: Record<string, u
  * an authorization mechanism for a workspace-shared bot credential.
  */
 export declare function isTrustedScheduledSlackBotSession(session: Pick<Session, "createdBy" | "createdByContext" | "metadata">): boolean;
+/**
+ * Proves, with the bot's own token, that it may post in the chosen channel:
+ * the bot is a member and the channel is active and not shared with another
+ * organization. Supplied only by the HTTP routes a person uses to edit tasks.
+ */
+export type ScheduledTaskSlackChannelVerifier = (input: {
+    connectionId: string;
+    channelId: string;
+}) => Promise<void>;
+/**
+ * Whether this request is a signed-in person acting for themselves: never an
+ * agent attempt, a service, an API key, or a request carrying service
+ * provenance. The same rule gates Agent learning settings.
+ */
+export declare function isAuthenticatedPersonAuthorization(authorization: AccessGrantAuthorization | undefined): boolean;
+/**
+ * A scheduled task may post as the OpenGeni workspace bot only to the one
+ * Slack channel a person chose on the task. Choosing or changing that channel
+ * therefore needs a signed-in person with `connections:write`, and the bot's
+ * membership is verified at that moment. Keeping or clearing the existing
+ * channel needs neither, so an agent editing other task fields cannot redirect
+ * posts but also does not have to re-prove the person's choice. Clearing is the
+ * safe direction and is never refused, even for a task that continues one chat.
+ */
+export declare function validateScheduledTaskSlackChannel(input: {
+    grant: AccessGrant;
+    authorization?: AccessGrantAuthorization | undefined;
+    previous: Pick<ScheduledTaskAgentConfig, "slackBotConnectionId" | "slackBotChannelId"> | null;
+    next: Pick<ScheduledTaskAgentConfig, "slackBotConnectionId" | "slackBotChannelId">;
+    runMode: ScheduledTask["runMode"];
+    /**
+     * Null unless the task already created the reusable chat its runs continue.
+     * Otherwise reports whether that chat was created with the posting tools,
+     * which are fixed at creation.
+     */
+    reusableSessionCanPost: (() => Promise<boolean>) | null;
+    verifySlackChannel?: ScheduledTaskSlackChannelVerifier | undefined;
+}): Promise<void>;
+/**
+ * Add the bot posting tools to a generated scheduled run when, and only when,
+ * a person chose the task's Slack channel. The deployment ceiling still
+ * applies: an operator who disallowed these tools keeps them off.
+ */
+export declare function withScheduledSlackBotPostingTools(tools: readonly FirstPartyMcpToolName[], agentConfig: Pick<ScheduledTaskAgentConfig, "slackBotConnectionId" | "slackBotChannelId">, allowedTools: readonly FirstPartyMcpToolName[]): FirstPartyMcpToolName[];

package/dist/domain/workspace-members.d.ts

@@ -1,4 +1,4 @@
-import type { WorkspaceMember } from "@opengeni/contracts";
+import type { Permission, WorkspaceMember } from "@opengeni/contracts";
 /** A member can manage other members (directly or via the admin wildcard). */
 export declare function memberCanAdminister(member: Pick<WorkspaceMember, "permissions">): boolean;
 /** Only `user:` subjects are people; `api_key:` subjects belong to API keys. */
@@ -21,6 +21,13 @@ export declare function assertWorkspaceMemberRemovable(input: {
     subjectId: string;
     callerSubjectId: string;
 }): void;
+/** Keep scoped member edits from orphaning the workspace or changing the caller's own grant. */
+export declare function assertWorkspaceMemberUpdateAllowed(input: {
+    members: WorkspaceMember[];
+    subjectId: string;
+    callerSubjectId: string;
+    nextPermissions: Permission[];
+}): void;
 /**
  * Guard the workspace-delete path before any external/DB mutation. Refuses
  * (409) to delete the account's last workspace, and refuses while any session

package/dist/editable-artifact-live/application.d.ts

@@ -1,12 +1,16 @@
 import type { EditableArtifactService } from "../domain/editable-artifacts/service.js";
 import { type EditableArtifact, type EditableArtifactActor, type EditableArtifactClientTransactionId, type EditableArtifactId, type EditableArtifactModality, type EditableArtifactOriginalImport, type EditableArtifactScope, type ImportEditableArtifactRequest } from "../domain/editable-artifacts/types.js";
 import type { EditableArtifactLiveSession, EditableArtifactLiveServer, OpenEditableArtifactLiveInput } from "./server.js";
-import type { EditableArtifactLiveTicket } from "./types.js";
+import type { EditableArtifactLiveSourceSessionAuthority, EditableArtifactLiveTicket } from "./types.js";
 export type EditableArtifactLiveCompatibilityRequest = Readonly<{
     artifact: EditableArtifact;
-    protocolVersion: number;
+    modality: EditableArtifactModality;
+    liveProtocolVersion: number;
     kernelVersion: string;
     modelSchemaVersion: number;
+    snapshotVersion: number;
+    commandProtocolVersion: number;
+    committedTransactionProtocolVersion: number;
 }>;
 /** A client/runtime protocol tuple cannot be served by the loaded kernel. */
 export declare class EditableArtifactCompatibilityError extends Error {
@@ -41,10 +45,15 @@ export type ReadEditableArtifactApplicationInput = Readonly<{
     artifactId: EditableArtifactId;
 }>;
 export type MintEditableArtifactApplicationTicketInput = ReadEditableArtifactApplicationInput & Readonly<{
-    protocolVersion: number;
+    modality: EditableArtifactModality;
+    liveProtocolVersion: number;
     kernelVersion: string;
     modelSchemaVersion: number;
+    snapshotVersion: number;
+    commandProtocolVersion: number;
+    committedTransactionProtocolVersion: number;
     allowEdit: boolean;
+    sourceSessionAuthority?: EditableArtifactLiveSourceSessionAuthority;
 }>;
 /** Exact application seam used by standalone API and embedding hosts. */
 export interface EditableArtifactApplicationPort {

package/dist/editable-artifact-live/ports.d.ts

@@ -21,7 +21,6 @@ export type EditableArtifactLiveBootstrapRead = Readonly<{
     scope: EditableArtifactScope;
     artifactId: EditableArtifactId;
     resume: EditableArtifactLiveResume;
-    protocolVersion: number;
 }>;
 export type EditableArtifactLiveTransactionPage = Readonly<{
     transactions: readonly EditableArtifactLiveCommittedTransaction[];

package/dist/editable-artifact-live/server.d.ts

@@ -1,10 +1,10 @@
 import type { EditableArtifactAuthorizationPort } from "../domain/editable-artifacts/ports.js";
 import type { EditableArtifactService } from "../domain/editable-artifacts/service.js";
+import type { Database } from "@opengeni/db";
 import { type EditableArtifactActor, type EditableArtifactId, type EditableArtifactModality, type EditableArtifactRequestHash, type EditableArtifactScope } from "../domain/editable-artifacts/types.js";
 import type { EditableArtifactLiveAuthorizationInvalidationPort, EditableArtifactLiveClockPort, EditableArtifactLiveHintPort, EditableArtifactLiveReadPort, EditableArtifactLiveSchedulerPort, EditableArtifactLiveServerDependencies, EditableArtifactLiveSinkPort, EditableArtifactLiveTicketStorePort, EditableArtifactLiveTokenPort } from "./ports.js";
-import { type EditableArtifactLiveAppliedClientFrame, type EditableArtifactLiveClose, type EditableArtifactLiveCloseReason, type EditableArtifactLiveMutationReceipt, type EditableArtifactLiveResume, type EditableArtifactLiveTicket } from "./types.js";
+import { type EditableArtifactLiveAppliedClientFrame, type EditableArtifactLiveClose, type EditableArtifactLiveCloseReason, type EditableArtifactLiveMutationReceipt, type EditableArtifactLiveResume, type EditableArtifactLiveTicket, type EditableArtifactLiveTicketRecord, type EditableArtifactLiveSourceSessionAuthority } from "./types.js";
 export type EditableArtifactLiveServerOptions = Readonly<{
-    protocolVersion?: number;
     ticketTtlMs?: number;
     maxClientFrameBytes?: number;
     maxOutboundFrameBytes?: number;
@@ -29,6 +29,8 @@ export type OpenEditableArtifactLiveInput = Readonly<{
     resume: EditableArtifactLiveResume;
     sink: EditableArtifactLiveSinkPort;
     signal?: AbortSignal;
+    /** API-owned canonical source session authorization, including live revocation. */
+    authorizeSourceSession?: (ticket: EditableArtifactLiveTicketRecord, permission: "read" | "edit", transaction?: Database, signal?: AbortSignal) => Promise<boolean>;
 }>;
 export interface EditableArtifactLiveSession {
     readonly artifactId: EditableArtifactId;
@@ -59,6 +61,7 @@ export declare class EditableArtifactLiveServer {
         modality: EditableArtifactModality;
         actor: EditableArtifactActor;
         allowEdit: boolean;
+        sourceSessionAuthority?: EditableArtifactLiveSourceSessionAuthority;
     }>): Promise<EditableArtifactLiveTicket>;
     openLive(input: OpenEditableArtifactLiveInput): Promise<EditableArtifactLiveSession>;
 }

package/dist/editable-artifact-live/ticket.d.ts

@@ -1,14 +1,13 @@
 import type { EditableArtifactAuthorizationPort } from "../domain/editable-artifacts/ports.js";
 import { type EditableArtifactActor, type EditableArtifactId, type EditableArtifactModality, type EditableArtifactScope } from "../domain/editable-artifacts/types.js";
 import type { EditableArtifactLiveClockPort, EditableArtifactLiveTicketStorePort, EditableArtifactLiveTokenPort } from "./ports.js";
-import { type EditableArtifactLiveTicket, type EditableArtifactLiveTicketRecord } from "./types.js";
+import { type EditableArtifactLiveTicket, type EditableArtifactLiveTicketRecord, type EditableArtifactLiveSourceSessionAuthority } from "./types.js";
 export type EditableArtifactLiveTicketAuthorityDependencies = Readonly<{
     authorization: EditableArtifactAuthorizationPort;
     tickets: EditableArtifactLiveTicketStorePort;
     tokens: EditableArtifactLiveTokenPort;
     clock: EditableArtifactLiveClockPort;
     ttlMs?: number;
-    protocolVersion?: number;
 }>;
 export declare class EditableArtifactLiveTicketAuthority {
     private readonly dependencies;
@@ -21,6 +20,7 @@ export declare class EditableArtifactLiveTicketAuthority {
         modality: EditableArtifactModality;
         actor: EditableArtifactActor;
         allowEdit: boolean;
+        sourceSessionAuthority?: EditableArtifactLiveSourceSessionAuthority;
     }>): Promise<EditableArtifactLiveTicket>;
     consume(input: Readonly<{
         token: string;

package/dist/editable-artifact-live/types.d.ts

@@ -1,5 +1,13 @@
+import type { AccessGrant } from "@opengeni/contracts";
+import type { ExternalActorContinuation } from "@opengeni/contracts/external-identities";
 import type { EditableArtifactActor, EditableArtifactCausalFrontier, EditableArtifactClientTransactionId, EditableArtifactContentHash, EditableArtifactId, EditableArtifactModality, EditableArtifactRequestHash, EditableArtifactScope, EditableArtifactStateHash, EditableArtifactTransactionId } from "../domain/editable-artifacts/types.js";
-export declare const EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION = 1;
+export declare const EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION: 2;
+/** Authenticated by the digest of the complete one-use token, never client claims. */
+export type EditableArtifactLiveSourceSessionAuthority = Readonly<{
+    sessionId: string;
+    grant: AccessGrant;
+    externalContinuation?: ExternalActorContinuation | undefined;
+}>;
 export type EditableArtifactLiveTicket = Readonly<{
     artifactId: EditableArtifactId;
     modality: EditableArtifactModality;
@@ -15,6 +23,7 @@ export type EditableArtifactLiveTicketRecord = Readonly<{
     artifactId: EditableArtifactId;
     modality: EditableArtifactModality;
     actor: EditableArtifactActor;
+    sourceSessionAuthority?: EditableArtifactLiveSourceSessionAuthority;
     /** Delegated ceiling captured by the authenticated ticket-minting request. */
     allowEdit: boolean;
     protocolVersion: number;
@@ -34,6 +43,7 @@ export type EditableArtifactLiveSnapshot = (EditableArtifactLiveSnapshotCommon &
     modality: "spreadsheet";
     causalFrontier: EditableArtifactCausalFrontier;
     operationProtocolVersion: number;
+    snapshotVersion: number;
 }>) | (EditableArtifactLiveSnapshotCommon & Readonly<{
     modality: "document" | "presentation";
     nativeRevision: number;
@@ -82,7 +92,7 @@ type EditableArtifactLiveResumeCommon = Readonly<{
     requireSnapshot: boolean;
 }>;
 export type EditableArtifactLiveResume = (EditableArtifactLiveResumeCommon & Readonly<{
-    modality?: "spreadsheet";
+    modality: "spreadsheet";
     localCausalFrontier: EditableArtifactCausalFrontier;
 }>) | (EditableArtifactLiveResumeCommon & Readonly<{
     modality: "document" | "presentation";
@@ -121,6 +131,8 @@ export type EditableArtifactLiveServerFrame = Readonly<{
 }> & (Readonly<{
     modality: "spreadsheet";
     causalFrontier: EditableArtifactCausalFrontier;
+    operationProtocolVersion: number;
+    snapshotVersion: number;
 }> | Readonly<{
     modality: "document" | "presentation";
     nativeRevision: number;

package/dist/editable-artifact-live.js

@@ -25,8 +25,8 @@ import {
   encodeEditableArtifactLiveOpenWireFrame,
   encodeEditableArtifactLiveServerWireFrame,
   inspectEditableArtifactLiveWireEnvelope
-} from "./chunk-NYPMQ7NO.js";
-import "./chunk-JJU6I5XD.js";
+} from "./chunk-GVO3N37G.js";
+import "./chunk-LCQXNR62.js";
 export {
   EDITABLE_ARTIFACT_HINT_MAX_BYTES,
   EDITABLE_ARTIFACT_HINT_SUBJECT_PREFIX,

package/dist/editable-artifacts.js

@@ -1,4 +1,5 @@
 import {
+  EDITABLE_ARTIFACT_EXPORT_FORMATS,
   EDITABLE_ARTIFACT_EXPORT_MAX_DOWNLOAD_BYTES,
   EDITABLE_ARTIFACT_EXPORT_MAX_OPTIONS_BYTES,
   EditableArtifactAgentApplication,
@@ -10,6 +11,8 @@ import {
   InMemoryEditableArtifactStableIdFactory,
   InMemoryEditableArtifactStore,
   SystemEditableArtifactClock,
+  describeConfiguredExportFormats,
+  describeEditableArtifactExportFormats,
   editableArtifactAuthorizationRevisionPortFromPostgres,
   editableArtifactDurableExportStorePortFromPostgres,
   editableArtifactFormatMatchesModality,
@@ -19,13 +22,13 @@ import {
   editableArtifactMaterializationMimeType,
   editableArtifactScopeAuthorizationRevisionPortFromPostgres,
   editableArtifactStorePortFromPostgres,
+  unsupportedEditableArtifactExport,
   validateEditableArtifactMaterializationJob,
   validateEditableArtifactPinnedVersion
-} from "./chunk-6WKPWE5S.js";
+} from "./chunk-2MKMRGSY.js";
 import {
   EDITABLE_ARTIFACT_COMPACTION_BYTE_THRESHOLD,
   EDITABLE_ARTIFACT_COMPACTION_TRANSACTION_THRESHOLD,
-  EDITABLE_ARTIFACT_INTENT_PROTOCOL_VERSION,
   EDITABLE_ARTIFACT_MAX_COMMAND_BYTES_PER_TRANSACTION,
   EDITABLE_ARTIFACT_MAX_COMMITTED_TRANSACTION_BYTES,
   EDITABLE_ARTIFACT_MAX_COMMIT_ATTEMPTS,
@@ -87,13 +90,13 @@ import {
   mergeCausalFrontiers,
   ogatxEditableArtifactMutationIntentCodec,
   validateEditableArtifactActor
-} from "./chunk-JJU6I5XD.js";
+} from "./chunk-LCQXNR62.js";
 export {
   EDITABLE_ARTIFACT_COMPACTION_BYTE_THRESHOLD,
   EDITABLE_ARTIFACT_COMPACTION_TRANSACTION_THRESHOLD,
+  EDITABLE_ARTIFACT_EXPORT_FORMATS,
   EDITABLE_ARTIFACT_EXPORT_MAX_DOWNLOAD_BYTES,
   EDITABLE_ARTIFACT_EXPORT_MAX_OPTIONS_BYTES,
-  EDITABLE_ARTIFACT_INTENT_PROTOCOL_VERSION,
   EDITABLE_ARTIFACT_MAX_COMMAND_BYTES_PER_TRANSACTION,
   EDITABLE_ARTIFACT_MAX_COMMITTED_TRANSACTION_BYTES,
   EDITABLE_ARTIFACT_MAX_COMMIT_ATTEMPTS,
@@ -145,6 +148,8 @@ export {
   causalFrontierDominates,
   causalFrontiersEqual,
   compareCodeUnits,
+  describeConfiguredExportFormats,
+  describeEditableArtifactExportFormats,
   editableArtifactActorKey,
   editableArtifactAuthorizationRevisionPortFromPostgres,
   editableArtifactCausalFrontier,
@@ -172,6 +177,7 @@ export {
   hashEditableArtifactImportRequest,
   mergeCausalFrontiers,
   ogatxEditableArtifactMutationIntentCodec,
+  unsupportedEditableArtifactExport,
   validateEditableArtifactActor,
   validateEditableArtifactMaterializationJob,
   validateEditableArtifactPinnedVersion

package/dist/index.d.ts

@@ -1,37 +1,83 @@
+export { readSessionAttachmentFiles } from "./domain/session-file-access.js";
+export { verifyDirectModelAccess } from "./domain/direct-model-provider.js";
+export * from "./domain/skills.js";
+export * from "./domain/mcp-account-bindings.js";
+export * from "./domain/mcp-account-routes.js";
+export * from "./domain/session-connection-accounts.js";
+export * from "./domain/organization-integration-catalog.js";
+export * from "./domain/knowledge.js";
+export * from "./domain/knowledge-search.js";
 export * from "./dependencies.js";
 export * from "./workflow-wake-contract.js";
+export * from "./user-presence.js";
+export * from "./product-usage-metrics.js";
 export * from "./sandbox-types.js";
 export * from "./managed-auth-type.js";
-export * from "./managed-session.js";
+export { getManagedAuthRequestActorAbortSignal, getManagedAuthRequestActorAdmissionStamp, getManagedAuthRequestActorEpoch, getManagedAuthRequestActorLeaseStamp, getManagedSession, configureManagedUserAdmission, assertManagedUserAdmission, ManagedAuthActorLeaseOutcomeUnknownError, markManagedAuthRequestActorTransitionApplied, releaseManagedAuthRequestActorLease, validateManagedAuthRequestActorLease, type ManagedAuthActorAdmissionStamp, type ManagedAuthActorMutationLeaseStamp, } from "./managed-session.js";
 export * from "./transcription.js";
+export * from "./model-catalog.js";
+export * from "./codex-model-availability.js";
+export * from "./default-session-model.js";
 export * from "./sandbox/fleet.js";
 export * from "./sandbox/routing.js";
+export * from "./sandbox/runtime-settings.js";
 export * from "./access/index.js";
+export * from "./application/external-workspace-members.js";
+export * from "./application/external-identity-lifecycle.js";
+export * from "./application/external-continuation.js";
+export * from "./application/session-mcp-credential-rotation.js";
+export * from "./application/external-link-work-admission.js";
+export * from "./application/connect-authority.js";
+export * from "./application/connect-operation.js";
 export * from "./session-authorization.js";
 export * from "./billing/limits.js";
 export * from "./domain/capabilities.js";
+export * from "./domain/native-mcp-connection-admission.js";
 export * from "./domain/skill-imports.js";
+export * from "./domain/skill-search.js";
+export * from "./domain/github-skill-source.js";
 export * from "./domain/environments.js";
 export * from "./rigs/index.js";
-export * from "./domain/packs.js";
+export * from "./domain/automations.js";
+export * from "./domain/pr-review.js";
 export * from "./domain/personal-connection-delegations.js";
 export * from "./domain/resources.js";
+export * from "./domain/github-repository-bindings.js";
+export * from "./domain/github-action-policies.js";
 export * from "./domain/session-tool-policy.js";
+export * from "./domain/agent-config-resolution.js";
 export * from "./domain/scheduled-tasks.js";
+export * from "./domain/scheduled-task-access.js";
 export * from "./domain/sessions.js";
 export * from "./domain/insights.js";
+export * from "./domain/insights-usage.js";
 export * from "./domain/memory-slack-publication.js";
 export * from "./domain/memory-slack-delivery.js";
-export * from "./domain/durable-learning-slack-publication.js";
+export * from "./domain/governed-learning-slack-publication.js";
 export * from "./domain/slack-publication-secret-safety.js";
 export * from "./domain/company-profile-durable-learning-adapter.js";
+export * from "./domain/company-profile-agent-admin.js";
 export * from "./domain/slack-bot.js";
 export * from "./domain/conversation-integrations.js";
 export * from "./domain/fiken.js";
 export * from "./domain/workspace-members.js";
 export * from "./domain/video-generation.js";
 export * from "./domain/video-generation-capabilities.js";
+export * from "./domain/organization-membership-lifecycle.js";
 export * from "./application/new-session-drafts.js";
+export * from "./application/composer-submit.js";
 export * from "./application/session-commands.js";
+export * from "./application/archived-session-imports.js";
+export * from "./application/session-tenancy.js";
+export * from "./application/sandbox-recovery.js";
+export * from "./application/user-resource-grants.js";
+export * from "./application/api-integration-servers.js";
 export * from "./editable-artifact-live.js";
 export * from "./editable-artifacts.js";
+export { withSiteSessionOrigin } from "./site-session-origin.js";
+export { resolveTurnSurface } from "./turn-surface.js";
+export { fileOwnerContextForAccess, fileOwnerContextForAgent } from "./domain/file-owner.js";
+export { prepareKnowledgeFile } from "./domain/knowledge-files.js";
+export { prepareKnowledgeSave } from "./domain/knowledge-preparation.js";
+export { retainKnowledgeMessage } from "./domain/knowledge-messages.js";
+export * from "./domain/connector-tool-permissions.js";