@opengeni/core 0.28.0 → 1.0.0

package/dist/chunk-QO5GVFFO.js

@@ -0,0 +1,235 @@
+// src/managed-auth-session-sets.ts
+import { createHash, createHmac, randomBytes, timingSafeEqual } from "crypto";
+import {
+  completeManagedAuthLoginTransaction,
+  getManagedAuthSessionSetOperationReceipt,
+  getManagedAuthSessionSetSnapshot
+} from "@opengeni/db";
+var MANAGED_AUTH_SESSION_SET_COOKIE = "opengeni.session_set";
+var MANAGED_AUTH_LOGIN_TRANSACTION_COOKIE = "opengeni.login_transaction";
+var MANAGED_AUTH_CSRF_HEADER = "x-opengeni-session-csrf";
+var MANAGED_AUTH_ACTOR_EPOCH_HEADER = "x-opengeni-actor-epoch";
+var MANAGED_AUTH_LOGIN_TRANSACTION_COOKIE_PATH = "/v1/auth/session-set/transactions";
+var ManagedAuthActorChangeError = class extends Error {
+  name = "ManagedAuthActorChangeError";
+  code = "actor_change_required";
+  constructor() {
+    super("The selected browser actor changed");
+  }
+};
+var ManagedAuthRequestAdmissionError = class extends Error {
+  name = "ManagedAuthRequestAdmissionError";
+  code = "origin_rejected";
+};
+var ManagedAuthCompletionOutcomeUnknownError = class extends Error {
+  name = "ManagedAuthCompletionOutcomeUnknownError";
+  code = "operation_outcome_unknown";
+  constructor(options) {
+    super("The managed authentication completion outcome is unknown", options);
+  }
+};
+function requireManagedAuthActorFence(input) {
+  if (input.expectedActorEpoch !== null && input.expectedActorEpoch !== input.actorEpoch || input.expectedActorEpoch === null && (input.mode === "broker" || input.actorEpoch !== "1" || input.selectedAuthSessionId !== null && input.legacyAmbientSessionId !== input.selectedAuthSessionId)) {
+    throw new ManagedAuthActorChangeError();
+  }
+}
+function managedAuthRandomAuthority() {
+  return randomBytes(32).toString("base64url");
+}
+function managedAuthSha256(value) {
+  return createHash("sha256").update(value, "utf8").digest("hex");
+}
+function managedAuthCsrfHash(authority) {
+  return managedAuthSha256(`opengeni:managed-auth:csrf-authority:v1
+${authority}`);
+}
+function managedAuthCsrfToken(signingSecret, authority, generation) {
+  return createHmac("sha256", signingSecret).update(`opengeni:managed-auth:csrf:v1
+${authority}
+${generation}`, "utf8").digest("base64url");
+}
+function managedAuthTransactionSecret(signingSecret, authority, operationId) {
+  return createHmac("sha256", signingSecret).update(`opengeni:managed-auth:transaction:v1
+${authority}
+${operationId}`, "utf8").digest("base64url");
+}
+function managedAuthDerivedUuid(namespace, value) {
+  const bytes = createHash("sha256").update(`${namespace}
+${value}`, "utf8").digest().subarray(0, 16);
+  bytes[6] = bytes[6] & 15 | 80;
+  bytes[8] = bytes[8] & 63 | 128;
+  const hex = bytes.toString("hex");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+function canonicalJson(value) {
+  if (value === null || typeof value !== "object") return JSON.stringify(value);
+  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
+  return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, child]) => `${JSON.stringify(key)}:${canonicalJson(child)}`).join(",")}}`;
+}
+function managedAuthRequestDigest(value) {
+  return managedAuthSha256(canonicalJson(value));
+}
+function managedAuthSecretRequestDigest(signingSecret, value) {
+  return createHmac("sha256", signingSecret).update(`opengeni:managed-auth:request:v1
+${canonicalJson(value)}`, "utf8").digest("hex");
+}
+function withManagedAuthCsrfToken(projection, signingSecret, authority) {
+  return {
+    ...projection,
+    csrfToken: managedAuthCsrfToken(signingSecret, authority, projection.generation)
+  };
+}
+function equalSecret(left, right) {
+  const leftBytes = Buffer.from(left, "utf8");
+  const rightBytes = Buffer.from(right, "utf8");
+  return leftBytes.length === rightBytes.length && timingSafeEqual(leftBytes, rightBytes);
+}
+function requireManagedAuthMutationAdmission(input) {
+  const origin = input.request.headers.get("origin");
+  const fetchSite = input.request.headers.get("sec-fetch-site");
+  const contentType = input.request.headers.get("content-type")?.split(";", 1)[0]?.trim();
+  const csrf = input.request.headers.get(MANAGED_AUTH_CSRF_HEADER);
+  const allowed = new Set(input.allowedOrigins.map((candidate) => new URL(candidate).origin));
+  const expectedCsrf = managedAuthCsrfToken(
+    input.signingSecret,
+    input.authority,
+    input.expectedGeneration
+  );
+  if (!origin || !allowed.has(origin) || fetchSite !== "same-origin" || contentType !== "application/json" || !csrf || !equalSecret(csrf, expectedCsrf)) {
+    throw new ManagedAuthRequestAdmissionError("Browser session-set mutation admission failed");
+  }
+}
+async function resolveManagedAuthSelectedSession(input) {
+  const snapshot = await getManagedAuthSessionSetSnapshot(input.db, {
+    authorityHash: managedAuthSha256(input.authority),
+    mode: input.mode,
+    includeInternal: true,
+    allowRecovery: input.allowRecovery ?? false,
+    readOnly: true
+  });
+  if (!snapshot) return null;
+  if (snapshot.projection.state === "actor_change_required") {
+    throw new ManagedAuthActorChangeError();
+  }
+  requireManagedAuthActorFence({
+    mode: input.mode,
+    actorEpoch: snapshot.projection.actorEpoch,
+    expectedActorEpoch: input.expectedActorEpoch,
+    selectedAuthSessionId: snapshot.selected?.authSessionId ?? null,
+    legacyAmbientSessionId: input.legacyAmbientSessionId ?? null
+  });
+  if (!snapshot.selected) return { session: null, projection: snapshot.projection };
+  const resolved = await input.adapter.resolveSelectedSession(snapshot.selected);
+  if (!resolved || resolved.session.id !== snapshot.selected.authSessionId || resolved.user.id !== snapshot.selected.authUserId) {
+    return { session: null, projection: snapshot.projection };
+  }
+  return { session: resolved, projection: snapshot.projection };
+}
+async function authenticateAndAdoptManagedAuthSession(input) {
+  try {
+    const existing = await getManagedAuthSessionSetOperationReceipt(input.db, {
+      authorityHash: managedAuthSha256(input.authority),
+      operationId: input.operationId,
+      requestDigest: input.requestDigest
+    });
+    if (existing) return existing;
+  } catch (error) {
+    throw new ManagedAuthCompletionOutcomeUnknownError({ cause: error });
+  }
+  const created = await input.adapter.authenticate({
+    provider: "email_password",
+    transactionId: input.transactionId,
+    credentials: { email: input.email, password: input.password },
+    headers: input.isolatedHeaders
+  });
+  return await adoptManagedAuthSession({
+    ...input,
+    authorityHash: managedAuthSha256(input.authority),
+    transactionSecretHash: managedAuthSha256(input.transactionSecret),
+    authSessionId: created.authSessionId
+  });
+}
+async function adoptManagedAuthSession(input) {
+  let completed;
+  try {
+    completed = await completeManagedAuthLoginTransaction(input.db, {
+      authorityHash: input.authorityHash,
+      csrfHash: input.csrfHash,
+      operationId: input.operationId,
+      requestDigest: input.requestDigest,
+      expectedGeneration: input.expectedGeneration,
+      expectedActorEpoch: input.expectedActorEpoch,
+      transactionId: input.transactionId,
+      transactionSecretHash: input.transactionSecretHash,
+      authSessionId: input.authSessionId,
+      mode: input.mode
+    });
+  } catch (error) {
+    let receipt;
+    try {
+      receipt = await getManagedAuthSessionSetOperationReceipt(input.db, {
+        authorityHash: input.authorityHash,
+        operationId: input.operationId,
+        requestDigest: input.requestDigest
+      });
+    } catch (receiptError) {
+      throw new ManagedAuthCompletionOutcomeUnknownError({ cause: receiptError });
+    }
+    if (receipt) {
+      await reconcileCreatedManagedAuthSession(input, input.authSessionId);
+      return receipt;
+    }
+    await input.adapter.revokeSession({ authSessionId: input.authSessionId }).catch(() => void 0);
+    throw error;
+  }
+  try {
+    await reconcileCreatedManagedAuthSession(input, input.authSessionId);
+  } catch (error) {
+    throw new ManagedAuthCompletionOutcomeUnknownError({ cause: error });
+  }
+  return completed;
+}
+async function reconcileCreatedManagedAuthSession(input, authSessionId) {
+  const snapshot = await getManagedAuthSessionSetSnapshot(input.db, {
+    authorityHash: managedAuthSha256(input.authority),
+    mode: input.mode,
+    includeInternal: true,
+    readOnly: true
+  });
+  if (snapshot?.internalSlots.some((slot) => slot.authSessionId === authSessionId)) return;
+  await input.adapter.revokeSession({ authSessionId });
+}
+function isolatedManagedAuthHeaders(request) {
+  const headers = new Headers(request.headers);
+  headers.delete("cookie");
+  headers.delete("authorization");
+  headers.delete("x-forwarded-user");
+  return headers;
+}
+
+export {
+  MANAGED_AUTH_SESSION_SET_COOKIE,
+  MANAGED_AUTH_LOGIN_TRANSACTION_COOKIE,
+  MANAGED_AUTH_CSRF_HEADER,
+  MANAGED_AUTH_ACTOR_EPOCH_HEADER,
+  MANAGED_AUTH_LOGIN_TRANSACTION_COOKIE_PATH,
+  ManagedAuthActorChangeError,
+  ManagedAuthRequestAdmissionError,
+  ManagedAuthCompletionOutcomeUnknownError,
+  requireManagedAuthActorFence,
+  managedAuthRandomAuthority,
+  managedAuthSha256,
+  managedAuthCsrfHash,
+  managedAuthCsrfToken,
+  managedAuthTransactionSecret,
+  managedAuthDerivedUuid,
+  managedAuthRequestDigest,
+  managedAuthSecretRequestDigest,
+  withManagedAuthCsrfToken,
+  requireManagedAuthMutationAdmission,
+  resolveManagedAuthSelectedSession,
+  authenticateAndAdoptManagedAuthSession,
+  adoptManagedAuthSession,
+  isolatedManagedAuthHeaders
+};
+//# sourceMappingURL=chunk-QO5GVFFO.js.map

package/dist/chunk-QO5GVFFO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/managed-auth-session-sets.ts"],"sourcesContent":["import { createHash, createHmac, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport type {\n  ManagedAuthSessionSetMode,\n  ManagedAuthSessionSetProjection,\n} from \"@opengeni/contracts/managed-auth-session-sets\";\nimport {\n  completeManagedAuthLoginTransaction,\n  getManagedAuthSessionSetOperationReceipt,\n  getManagedAuthSessionSetSnapshot,\n  type Database,\n  type ManagedAuthDatabaseProjection,\n  type ManagedAuthSelectedSession,\n} from \"@opengeni/db\";\n\nexport const MANAGED_AUTH_SESSION_SET_COOKIE = \"opengeni.session_set\" as const;\nexport const MANAGED_AUTH_LOGIN_TRANSACTION_COOKIE = \"opengeni.login_transaction\" as const;\nexport const MANAGED_AUTH_CSRF_HEADER = \"x-opengeni-session-csrf\" as const;\nexport const MANAGED_AUTH_ACTOR_EPOCH_HEADER = \"x-opengeni-actor-epoch\" as const;\nexport const MANAGED_AUTH_LOGIN_TRANSACTION_COOKIE_PATH =\n  \"/v1/auth/session-set/transactions\" as const;\n\nexport type ManagedAuthResolvedSession = {\n  session: { id: string; userId: string; [key: string]: unknown };\n  user: {\n    id: string;\n    email: string;\n    name: string;\n    emailVerified: boolean;\n    [key: string]: unknown;\n  };\n};\n\n/** Provider-neutral boundary; provider credentials and tokens never cross its output. */\nexport interface ManagedAuthSessionAdapter {\n  authenticate(input: {\n    provider: \"email_password\";\n    transactionId: string;\n    credentials: { email: string; password: string };\n    headers: Headers;\n  }): Promise<{ authSessionId: string }>;\n  /** Verify an ambient provider cookie without sliding expiry or emitting cookies. */\n  resolveAmbientSession(headers: Headers): Promise<ManagedAuthResolvedSession | null>;\n  resolveSelectedSession(\n    input: ManagedAuthSelectedSession,\n  ): Promise<ManagedAuthResolvedSession | null>;\n  refreshSelectedSession(\n    input: ManagedAuthSelectedSession,\n  ): Promise<ManagedAuthResolvedSession | null>;\n  revokeSession(input: { authSessionId: string }): Promise<void>;\n  /** Dual-mode exact selected-session cookie plus stale provider-cache invalidations. */\n  createLegacySelectedSessionCookies(\n    input: ManagedAuthSelectedSession | null,\n    currentCookieHeader?: string | null,\n  ): Promise<string[]>;\n}\n\nexport class ManagedAuthActorChangeError extends Error {\n  readonly name = \"ManagedAuthActorChangeError\";\n  readonly code = \"actor_change_required\";\n  constructor() {\n    super(\"The selected browser actor changed\");\n  }\n}\n\nexport class ManagedAuthRequestAdmissionError extends Error {\n  readonly name = \"ManagedAuthRequestAdmissionError\";\n  readonly code = \"origin_rejected\";\n}\n\nexport class ManagedAuthCompletionOutcomeUnknownError extends Error {\n  readonly name = \"ManagedAuthCompletionOutcomeUnknownError\";\n  readonly code = \"operation_outcome_unknown\";\n  constructor(options?: ErrorOptions) {\n    super(\"The managed authentication completion outcome is unknown\", options);\n  }\n}\n\nexport function requireManagedAuthActorFence(input: {\n  mode: ManagedAuthSessionSetMode;\n  actorEpoch: string;\n  expectedActorEpoch: string | null;\n  selectedAuthSessionId: string | null;\n  legacyAmbientSessionId?: string | null;\n}): void {\n  if (\n    (input.expectedActorEpoch !== null && input.expectedActorEpoch !== input.actorEpoch) ||\n    (input.expectedActorEpoch === null &&\n      (input.mode === \"broker\" ||\n        input.actorEpoch !== \"1\" ||\n        (input.selectedAuthSessionId !== null &&\n          input.legacyAmbientSessionId !== input.selectedAuthSessionId)))\n  ) {\n    throw new ManagedAuthActorChangeError();\n  }\n}\n\nexport function managedAuthRandomAuthority(): string {\n  return randomBytes(32).toString(\"base64url\");\n}\n\nexport function managedAuthSha256(value: string): string {\n  return createHash(\"sha256\").update(value, \"utf8\").digest(\"hex\");\n}\n\nexport function managedAuthCsrfHash(authority: string): string {\n  return managedAuthSha256(`opengeni:managed-auth:csrf-authority:v1\\n${authority}`);\n}\n\nexport function managedAuthCsrfToken(\n  signingSecret: string,\n  authority: string,\n  generation: string,\n): string {\n  return createHmac(\"sha256\", signingSecret)\n    .update(`opengeni:managed-auth:csrf:v1\\n${authority}\\n${generation}`, \"utf8\")\n    .digest(\"base64url\");\n}\n\nexport function managedAuthTransactionSecret(\n  signingSecret: string,\n  authority: string,\n  operationId: string,\n): string {\n  return createHmac(\"sha256\", signingSecret)\n    .update(`opengeni:managed-auth:transaction:v1\\n${authority}\\n${operationId}`, \"utf8\")\n    .digest(\"base64url\");\n}\n\nexport function managedAuthDerivedUuid(namespace: string, value: string): string {\n  const bytes = createHash(\"sha256\")\n    .update(`${namespace}\\n${value}`, \"utf8\")\n    .digest()\n    .subarray(0, 16);\n  bytes[6] = (bytes[6]! & 0x0f) | 0x50;\n  bytes[8] = (bytes[8]! & 0x3f) | 0x80;\n  const hex = bytes.toString(\"hex\");\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n\nfunction canonicalJson(value: unknown): string {\n  if (value === null || typeof value !== \"object\") return JSON.stringify(value);\n  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(\",\")}]`;\n  return `{${Object.entries(value as Record<string, unknown>)\n    .sort(([left], [right]) => left.localeCompare(right))\n    .map(([key, child]) => `${JSON.stringify(key)}:${canonicalJson(child)}`)\n    .join(\",\")}}`;\n}\n\nexport function managedAuthRequestDigest(value: unknown): string {\n  return managedAuthSha256(canonicalJson(value));\n}\n\nexport function managedAuthSecretRequestDigest(signingSecret: string, value: unknown): string {\n  return createHmac(\"sha256\", signingSecret)\n    .update(`opengeni:managed-auth:request:v1\\n${canonicalJson(value)}`, \"utf8\")\n    .digest(\"hex\");\n}\n\nexport function withManagedAuthCsrfToken(\n  projection: ManagedAuthDatabaseProjection,\n  signingSecret: string,\n  authority: string,\n): ManagedAuthSessionSetProjection {\n  return {\n    ...projection,\n    csrfToken: managedAuthCsrfToken(signingSecret, authority, projection.generation),\n  };\n}\n\nfunction equalSecret(left: string, right: string): boolean {\n  const leftBytes = Buffer.from(left, \"utf8\");\n  const rightBytes = Buffer.from(right, \"utf8\");\n  return leftBytes.length === rightBytes.length && timingSafeEqual(leftBytes, rightBytes);\n}\n\nexport function requireManagedAuthMutationAdmission(input: {\n  request: Request;\n  allowedOrigins: readonly string[];\n  authority: string;\n  signingSecret: string;\n  expectedGeneration: string;\n}): void {\n  const origin = input.request.headers.get(\"origin\");\n  const fetchSite = input.request.headers.get(\"sec-fetch-site\");\n  const contentType = input.request.headers.get(\"content-type\")?.split(\";\", 1)[0]?.trim();\n  const csrf = input.request.headers.get(MANAGED_AUTH_CSRF_HEADER);\n  const allowed = new Set(input.allowedOrigins.map((candidate) => new URL(candidate).origin));\n  const expectedCsrf = managedAuthCsrfToken(\n    input.signingSecret,\n    input.authority,\n    input.expectedGeneration,\n  );\n  if (\n    !origin ||\n    !allowed.has(origin) ||\n    fetchSite !== \"same-origin\" ||\n    contentType !== \"application/json\" ||\n    !csrf ||\n    !equalSecret(csrf, expectedCsrf)\n  ) {\n    throw new ManagedAuthRequestAdmissionError(\"Browser session-set mutation admission failed\");\n  }\n}\n\nexport async function resolveManagedAuthSelectedSession(input: {\n  db: Database;\n  adapter: ManagedAuthSessionAdapter;\n  authority: string;\n  mode: ManagedAuthSessionSetMode;\n  expectedActorEpoch: string | null;\n  legacyAmbientSessionId?: string | null;\n  allowRecovery?: boolean;\n}): Promise<{\n  session: ManagedAuthResolvedSession | null;\n  projection: ManagedAuthDatabaseProjection;\n} | null> {\n  const snapshot = await getManagedAuthSessionSetSnapshot(input.db, {\n    authorityHash: managedAuthSha256(input.authority),\n    mode: input.mode,\n    includeInternal: true,\n    allowRecovery: input.allowRecovery ?? false,\n    readOnly: true,\n  });\n  if (!snapshot) return null;\n  if (snapshot.projection.state === \"actor_change_required\") {\n    throw new ManagedAuthActorChangeError();\n  }\n  requireManagedAuthActorFence({\n    mode: input.mode,\n    actorEpoch: snapshot.projection.actorEpoch,\n    expectedActorEpoch: input.expectedActorEpoch,\n    selectedAuthSessionId: snapshot.selected?.authSessionId ?? null,\n    legacyAmbientSessionId: input.legacyAmbientSessionId ?? null,\n  });\n  if (!snapshot.selected) return { session: null, projection: snapshot.projection };\n  const resolved = await input.adapter.resolveSelectedSession(snapshot.selected);\n  if (\n    !resolved ||\n    resolved.session.id !== snapshot.selected.authSessionId ||\n    resolved.user.id !== snapshot.selected.authUserId\n  ) {\n    return { session: null, projection: snapshot.projection };\n  }\n  return { session: resolved, projection: snapshot.projection };\n}\n\nexport async function authenticateAndAdoptManagedAuthSession(input: {\n  db: Database;\n  adapter: ManagedAuthSessionAdapter;\n  isolatedHeaders: Headers;\n  authority: string;\n  csrfHash: string;\n  operationId: string;\n  requestDigest: string;\n  expectedGeneration: string;\n  expectedActorEpoch: string;\n  transactionId: string;\n  transactionSecret: string;\n  email: string;\n  password: string;\n  mode: ManagedAuthSessionSetMode;\n}): Promise<{ projection: ManagedAuthDatabaseProjection; returnIntent: string | null }> {\n  try {\n    const existing = await getManagedAuthSessionSetOperationReceipt(input.db, {\n      authorityHash: managedAuthSha256(input.authority),\n      operationId: input.operationId,\n      requestDigest: input.requestDigest,\n    });\n    if (existing) return existing;\n  } catch (error) {\n    // Provider authentication creates a durable session. Do not perform it\n    // while exact-replay reconciliation is unavailable.\n    throw new ManagedAuthCompletionOutcomeUnknownError({ cause: error });\n  }\n  const created = await input.adapter.authenticate({\n    provider: \"email_password\",\n    transactionId: input.transactionId,\n    credentials: { email: input.email, password: input.password },\n    headers: input.isolatedHeaders,\n  });\n  return await adoptManagedAuthSession({\n    ...input,\n    authorityHash: managedAuthSha256(input.authority),\n    transactionSecretHash: managedAuthSha256(input.transactionSecret),\n    authSessionId: created.authSessionId,\n  });\n}\n\nexport async function adoptManagedAuthSession(input: {\n  db: Database;\n  adapter: ManagedAuthSessionAdapter;\n  authority: string;\n  authorityHash: string;\n  csrfHash: string;\n  operationId: string;\n  requestDigest: string;\n  expectedGeneration: string;\n  expectedActorEpoch: string;\n  transactionId: string;\n  transactionSecretHash: string;\n  authSessionId: string;\n  mode: ManagedAuthSessionSetMode;\n}): Promise<{ projection: ManagedAuthDatabaseProjection; returnIntent: string | null }> {\n  let completed: { projection: ManagedAuthDatabaseProjection; returnIntent: string | null };\n  try {\n    completed = await completeManagedAuthLoginTransaction(input.db, {\n      authorityHash: input.authorityHash,\n      csrfHash: input.csrfHash,\n      operationId: input.operationId,\n      requestDigest: input.requestDigest,\n      expectedGeneration: input.expectedGeneration,\n      expectedActorEpoch: input.expectedActorEpoch,\n      transactionId: input.transactionId,\n      transactionSecretHash: input.transactionSecretHash,\n      authSessionId: input.authSessionId,\n      mode: input.mode,\n    });\n  } catch (error) {\n    let receipt: Awaited<ReturnType<typeof getManagedAuthSessionSetOperationReceipt>>;\n    try {\n      receipt = await getManagedAuthSessionSetOperationReceipt(input.db, {\n        authorityHash: input.authorityHash,\n        operationId: input.operationId,\n        requestDigest: input.requestDigest,\n      });\n    } catch (receiptError) {\n      throw new ManagedAuthCompletionOutcomeUnknownError({ cause: receiptError });\n    }\n    if (receipt) {\n      await reconcileCreatedManagedAuthSession(input, input.authSessionId);\n      return receipt;\n    }\n    await input.adapter\n      .revokeSession({ authSessionId: input.authSessionId })\n      .catch(() => undefined);\n    throw error;\n  }\n  try {\n    await reconcileCreatedManagedAuthSession(input, input.authSessionId);\n  } catch (error) {\n    throw new ManagedAuthCompletionOutcomeUnknownError({ cause: error });\n  }\n  return completed;\n}\n\nasync function reconcileCreatedManagedAuthSession(\n  input: {\n    db: Database;\n    adapter: ManagedAuthSessionAdapter;\n    authority: string;\n    mode: ManagedAuthSessionSetMode;\n  },\n  authSessionId: string,\n): Promise<void> {\n  const snapshot = await getManagedAuthSessionSetSnapshot(input.db, {\n    authorityHash: managedAuthSha256(input.authority),\n    mode: input.mode,\n    includeInternal: true,\n    readOnly: true,\n  });\n  if (snapshot?.internalSlots.some((slot) => slot.authSessionId === authSessionId)) return;\n  await input.adapter.revokeSession({ authSessionId });\n}\n\nexport function isolatedManagedAuthHeaders(request: Request): Headers {\n  const headers = new Headers(request.headers);\n  headers.delete(\"cookie\");\n  headers.delete(\"authorization\");\n  headers.delete(\"x-forwarded-user\");\n  return headers;\n}\n"],"mappings":";AAAA,SAAS,YAAY,YAAY,aAAa,uBAAuB;AAKrE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAEA,IAAM,kCAAkC;AACxC,IAAM,wCAAwC;AAC9C,IAAM,2BAA2B;AACjC,IAAM,kCAAkC;AACxC,IAAM,6CACX;AAqCK,IAAM,8BAAN,cAA0C,MAAM;AAAA,EAC5C,OAAO;AAAA,EACP,OAAO;AAAA,EAChB,cAAc;AACZ,UAAM,oCAAoC;AAAA,EAC5C;AACF;AAEO,IAAM,mCAAN,cAA+C,MAAM;AAAA,EACjD,OAAO;AAAA,EACP,OAAO;AAClB;AAEO,IAAM,2CAAN,cAAuD,MAAM;AAAA,EACzD,OAAO;AAAA,EACP,OAAO;AAAA,EAChB,YAAY,SAAwB;AAClC,UAAM,4DAA4D,OAAO;AAAA,EAC3E;AACF;AAEO,SAAS,6BAA6B,OAMpC;AACP,MACG,MAAM,uBAAuB,QAAQ,MAAM,uBAAuB,MAAM,cACxE,MAAM,uBAAuB,SAC3B,MAAM,SAAS,YACd,MAAM,eAAe,OACpB,MAAM,0BAA0B,QAC/B,MAAM,2BAA2B,MAAM,wBAC7C;AACA,UAAM,IAAI,4BAA4B;AAAA,EACxC;AACF;AAEO,SAAS,6BAAqC;AACnD,SAAO,YAAY,EAAE,EAAE,SAAS,WAAW;AAC7C;AAEO,SAAS,kBAAkB,OAAuB;AACvD,SAAO,WAAW,QAAQ,EAAE,OAAO,OAAO,MAAM,EAAE,OAAO,KAAK;AAChE;AAEO,SAAS,oBAAoB,WAA2B;AAC7D,SAAO,kBAAkB;AAAA,EAA4C,SAAS,EAAE;AAClF;AAEO,SAAS,qBACd,eACA,WACA,YACQ;AACR,SAAO,WAAW,UAAU,aAAa,EACtC,OAAO;AAAA,EAAkC,SAAS;AAAA,EAAK,UAAU,IAAI,MAAM,EAC3E,OAAO,WAAW;AACvB;AAEO,SAAS,6BACd,eACA,WACA,aACQ;AACR,SAAO,WAAW,UAAU,aAAa,EACtC,OAAO;AAAA,EAAyC,SAAS;AAAA,EAAK,WAAW,IAAI,MAAM,EACnF,OAAO,WAAW;AACvB;AAEO,SAAS,uBAAuB,WAAmB,OAAuB;AAC/E,QAAM,QAAQ,WAAW,QAAQ,EAC9B,OAAO,GAAG,SAAS;AAAA,EAAK,KAAK,IAAI,MAAM,EACvC,OAAO,EACP,SAAS,GAAG,EAAE;AACjB,QAAM,CAAC,IAAK,MAAM,CAAC,IAAK,KAAQ;AAChC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAK,KAAQ;AAChC,QAAM,MAAM,MAAM,SAAS,KAAK;AAChC,SAAO,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,MAAM,GAAG,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;AAC1G;AAEA,SAAS,cAAc,OAAwB;AAC7C,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,KAAK;AAC5E,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,aAAa,EAAE,KAAK,GAAG,CAAC;AACvE,SAAO,IAAI,OAAO,QAAQ,KAAgC,EACvD,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC,EACnD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,cAAc,KAAK,CAAC,EAAE,EACtE,KAAK,GAAG,CAAC;AACd;AAEO,SAAS,yBAAyB,OAAwB;AAC/D,SAAO,kBAAkB,cAAc,KAAK,CAAC;AAC/C;AAEO,SAAS,+BAA+B,eAAuB,OAAwB;AAC5F,SAAO,WAAW,UAAU,aAAa,EACtC,OAAO;AAAA,EAAqC,cAAc,KAAK,CAAC,IAAI,MAAM,EAC1E,OAAO,KAAK;AACjB;AAEO,SAAS,yBACd,YACA,eACA,WACiC;AACjC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,WAAW,qBAAqB,eAAe,WAAW,WAAW,UAAU;AAAA,EACjF;AACF;AAEA,SAAS,YAAY,MAAc,OAAwB;AACzD,QAAM,YAAY,OAAO,KAAK,MAAM,MAAM;AAC1C,QAAM,aAAa,OAAO,KAAK,OAAO,MAAM;AAC5C,SAAO,UAAU,WAAW,WAAW,UAAU,gBAAgB,WAAW,UAAU;AACxF;AAEO,SAAS,oCAAoC,OAM3C;AACP,QAAM,SAAS,MAAM,QAAQ,QAAQ,IAAI,QAAQ;AACjD,QAAM,YAAY,MAAM,QAAQ,QAAQ,IAAI,gBAAgB;AAC5D,QAAM,cAAc,MAAM,QAAQ,QAAQ,IAAI,cAAc,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK;AACtF,QAAM,OAAO,MAAM,QAAQ,QAAQ,IAAI,wBAAwB;AAC/D,QAAM,UAAU,IAAI,IAAI,MAAM,eAAe,IAAI,CAAC,cAAc,IAAI,IAAI,SAAS,EAAE,MAAM,CAAC;AAC1F,QAAM,eAAe;AAAA,IACnB,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACA,MACE,CAAC,UACD,CAAC,QAAQ,IAAI,MAAM,KACnB,cAAc,iBACd,gBAAgB,sBAChB,CAAC,QACD,CAAC,YAAY,MAAM,YAAY,GAC/B;AACA,UAAM,IAAI,iCAAiC,+CAA+C;AAAA,EAC5F;AACF;AAEA,eAAsB,kCAAkC,OAW9C;AACR,QAAM,WAAW,MAAM,iCAAiC,MAAM,IAAI;AAAA,IAChE,eAAe,kBAAkB,MAAM,SAAS;AAAA,IAChD,MAAM,MAAM;AAAA,IACZ,iBAAiB;AAAA,IACjB,eAAe,MAAM,iBAAiB;AAAA,IACtC,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,SAAS,WAAW,UAAU,yBAAyB;AACzD,UAAM,IAAI,4BAA4B;AAAA,EACxC;AACA,+BAA6B;AAAA,IAC3B,MAAM,MAAM;AAAA,IACZ,YAAY,SAAS,WAAW;AAAA,IAChC,oBAAoB,MAAM;AAAA,IAC1B,uBAAuB,SAAS,UAAU,iBAAiB;AAAA,IAC3D,wBAAwB,MAAM,0BAA0B;AAAA,EAC1D,CAAC;AACD,MAAI,CAAC,SAAS,SAAU,QAAO,EAAE,SAAS,MAAM,YAAY,SAAS,WAAW;AAChF,QAAM,WAAW,MAAM,MAAM,QAAQ,uBAAuB,SAAS,QAAQ;AAC7E,MACE,CAAC,YACD,SAAS,QAAQ,OAAO,SAAS,SAAS,iBAC1C,SAAS,KAAK,OAAO,SAAS,SAAS,YACvC;AACA,WAAO,EAAE,SAAS,MAAM,YAAY,SAAS,WAAW;AAAA,EAC1D;AACA,SAAO,EAAE,SAAS,UAAU,YAAY,SAAS,WAAW;AAC9D;AAEA,eAAsB,uCAAuC,OAe2B;AACtF,MAAI;AACF,UAAM,WAAW,MAAM,yCAAyC,MAAM,IAAI;AAAA,MACxE,eAAe,kBAAkB,MAAM,SAAS;AAAA,MAChD,aAAa,MAAM;AAAA,MACnB,eAAe,MAAM;AAAA,IACvB,CAAC;AACD,QAAI,SAAU,QAAO;AAAA,EACvB,SAAS,OAAO;AAGd,UAAM,IAAI,yCAAyC,EAAE,OAAO,MAAM,CAAC;AAAA,EACrE;AACA,QAAM,UAAU,MAAM,MAAM,QAAQ,aAAa;AAAA,IAC/C,UAAU;AAAA,IACV,eAAe,MAAM;AAAA,IACrB,aAAa,EAAE,OAAO,MAAM,OAAO,UAAU,MAAM,SAAS;AAAA,IAC5D,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,SAAO,MAAM,wBAAwB;AAAA,IACnC,GAAG;AAAA,IACH,eAAe,kBAAkB,MAAM,SAAS;AAAA,IAChD,uBAAuB,kBAAkB,MAAM,iBAAiB;AAAA,IAChE,eAAe,QAAQ;AAAA,EACzB,CAAC;AACH;AAEA,eAAsB,wBAAwB,OAc0C;AACtF,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,oCAAoC,MAAM,IAAI;AAAA,MAC9D,eAAe,MAAM;AAAA,MACrB,UAAU,MAAM;AAAA,MAChB,aAAa,MAAM;AAAA,MACnB,eAAe,MAAM;AAAA,MACrB,oBAAoB,MAAM;AAAA,MAC1B,oBAAoB,MAAM;AAAA,MAC1B,eAAe,MAAM;AAAA,MACrB,uBAAuB,MAAM;AAAA,MAC7B,eAAe,MAAM;AAAA,MACrB,MAAM,MAAM;AAAA,IACd,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,yCAAyC,MAAM,IAAI;AAAA,QACjE,eAAe,MAAM;AAAA,QACrB,aAAa,MAAM;AAAA,QACnB,eAAe,MAAM;AAAA,MACvB,CAAC;AAAA,IACH,SAAS,cAAc;AACrB,YAAM,IAAI,yCAAyC,EAAE,OAAO,aAAa,CAAC;AAAA,IAC5E;AACA,QAAI,SAAS;AACX,YAAM,mCAAmC,OAAO,MAAM,aAAa;AACnE,aAAO;AAAA,IACT;AACA,UAAM,MAAM,QACT,cAAc,EAAE,eAAe,MAAM,cAAc,CAAC,EACpD,MAAM,MAAM,MAAS;AACxB,UAAM;AAAA,EACR;AACA,MAAI;AACF,UAAM,mCAAmC,OAAO,MAAM,aAAa;AAAA,EACrE,SAAS,OAAO;AACd,UAAM,IAAI,yCAAyC,EAAE,OAAO,MAAM,CAAC;AAAA,EACrE;AACA,SAAO;AACT;AAEA,eAAe,mCACb,OAMA,eACe;AACf,QAAM,WAAW,MAAM,iCAAiC,MAAM,IAAI;AAAA,IAChE,eAAe,kBAAkB,MAAM,SAAS;AAAA,IAChD,MAAM,MAAM;AAAA,IACZ,iBAAiB;AAAA,IACjB,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,UAAU,cAAc,KAAK,CAAC,SAAS,KAAK,kBAAkB,aAAa,EAAG;AAClF,QAAM,MAAM,QAAQ,cAAc,EAAE,cAAc,CAAC;AACrD;AAEO,SAAS,2BAA2B,SAA2B;AACpE,QAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,UAAQ,OAAO,QAAQ;AACvB,UAAQ,OAAO,eAAe;AAC9B,UAAQ,OAAO,kBAAkB;AACjC,SAAO;AACT;","names":[]}

package/dist/codex-model-availability.d.ts

@@ -0,0 +1,14 @@
+import { fetchCodexModels } from "@opengeni/codex";
+import { type Settings } from "@opengeni/config";
+import { buildCodexTokenResolver, getCodexRotationSettings, listCodexAccountStatuses, loadCodexCredentialForRun, type Database } from "@opengeni/db";
+import type { ModelAvailabilityObservation } from "./model-catalog.js";
+type Dependencies = {
+    listAccounts: typeof listCodexAccountStatuses;
+    getRotation: typeof getCodexRotationSettings;
+    loadCredential: typeof loadCodexCredentialForRun;
+    fetchModels: typeof fetchCodexModels;
+    getToken: (db: Database, settings: Settings, workspaceId: string, credentialId: string) => ReturnType<ReturnType<typeof buildCodexTokenResolver>["getToken"]>;
+};
+/** Live provider support is separate from deployment membership and model permissions. */
+export declare function loadWorkspaceCodexModelAvailability(db: Database, settings: Settings, workspaceId: string, deps?: Dependencies): Promise<Record<string, ModelAvailabilityObservation>>;
+export {};

package/dist/default-session-model.d.ts

@@ -0,0 +1,139 @@
+import { type ConfiguredModel, type Settings } from "@opengeni/config";
+import { type DefaultModelSelection, type ReasoningEffort, type ScheduledTask, type WorkspaceSessionDefaults, type XaiProviderAccountAuthoritySnapshotV1, type ClaudeProviderAccountAuthoritySnapshotV1 } from "@opengeni/contracts";
+import { type Database } from "@opengeni/db";
+import { type WorkspaceModelSelection, type WorkspaceModelSelectionInput } from "./model-catalog.js";
+/** The model's own default effort, matching the web picker's choice. */
+export declare function defaultReasoningEffortForConfiguredModel(model: ConfiguredModel, fallback: ReasoningEffort): ReasoningEffort;
+/** The highest supported effort at or below `preferred`. */
+export declare function clampReasoningEffortForConfiguredModel(model: ConfiguredModel, preferred: ReasoningEffort, fallback: ReasoningEffort): ReasoningEffort;
+export type DefaultSessionModelInput = {
+    /** Catalog-resolved settings: `openaiModel` is the deployment default. */
+    settings: Settings;
+    /** This workspace's selection, in operator catalog order. */
+    selections: readonly WorkspaceModelSelection[];
+    workspaceDefaults: WorkspaceSessionDefaults | null;
+    /**
+     * True while the organization holds a positive OpenGeni credit balance from
+     * any source, the verified-signup trial grant included (see
+     * `organizationHoldsCredits`).
+     */
+    creditsAvailable: boolean;
+};
+/**
+ * Default model policy for a new chat or scheduled task that names no model.
+ *
+ * Precedence, first match wins:
+ *
+ * 1. `workspace`: the saved workspace default (`settings.sessionDefaults`)
+ *    while it is selectable in this workspace, its saved effort clamped to
+ *    what the model supports today.
+ * 2. `subscription`: the first selectable connected-subscription model
+ *    (ChatGPT/Codex, then SuperGrok) in operator catalog order. The
+ *    deployment default wins inside this step when it is itself a selectable
+ *    subscription model.
+ * 3. `credits`: while the organization holds a positive OpenGeni credit
+ *    balance (a purchase, a grant, or the verified-signup trial grant), the
+ *    configured credits default (`OPENGENI_CREDITS_DEFAULT_MODEL`, effort
+ *    clamped to what the model supports), or the first selectable
+ *    credits-billed model when that one is not selectable. When the
+ *    deployment default is already a selectable credits-billed model it is
+ *    never replaced: it keeps the deployment effort, except that it takes the
+ *    credits default effort when it is the credits default model itself.
+ * 4. `deployment`: the deployment default with the deployment reasoning effort
+ *    when stably admissible; otherwise the first stably admissible catalog
+ *    model with its own default effort. With no admitted models, retain the
+ *    deployment hint and let fresh creation refuse it.
+ *
+ * An explicit model on the request, the scheduled task, or the person's
+ * new-chat draft is never passed through this function.
+ */
+export declare function selectDefaultSessionModel(input: DefaultSessionModelInput): DefaultModelSelection;
+/**
+ * The default this workspace would use while its organization holds a
+ * positive OpenGeni credit balance. Null when the deployment does not bill
+ * credits.
+ */
+export declare function creditsDefaultSessionModel(input: {
+    settings: Settings;
+    selections: readonly WorkspaceModelSelection[];
+    workspaceSettings: unknown;
+}): DefaultModelSelection | null;
+/**
+ * Resolve the default for an already-loaded workspace selection. The credit
+ * ledger is read only when it can change the answer.
+ */
+export declare function resolveDefaultSessionModelForSelections(db: Database, input: {
+    settings: Settings;
+    accountId: string;
+    workspaceSettings: unknown;
+    selections: readonly WorkspaceModelSelection[];
+}): Promise<DefaultModelSelection>;
+export type WorkspaceModelSelectionContext = {
+    accountId: string;
+    workspaceId: string;
+    /**
+     * The subject whose connected-subscription authority applies: the
+     * authenticated caller for direct creates, or a scheduled task's immutable
+     * execution owner. Never another member.
+     */
+    subjectId: string;
+    /**
+     * An already-frozen SuperGrok authority (a scheduled task's snapshot).
+     * Omitted means the subject's current acceptance authority, exactly as a
+     * direct Send resolves it.
+     */
+    xaiAuthoritySnapshot?: XaiProviderAccountAuthoritySnapshotV1 | undefined;
+    /** Already accepted Claude pool; never replace it with current selection. */
+    claudeAuthoritySnapshot?: ClaudeProviderAccountAuthoritySnapshotV1 | undefined;
+};
+/**
+ * Readiness for the subject's current or already accepted Claude pool observes
+ * metadata only; quota is handled by the runtime allocator. This is not an
+ * authorization: callers must supply their authenticated or frozen subject.
+ */
+export declare function loadWorkspaceClaudeSubscriptionReadiness(db: Database, settings: Settings, context: WorkspaceModelSelectionContext): Promise<{
+    workspace: boolean;
+    organization: boolean;
+}>;
+/** Load the same inputs the workspace model catalog route evaluates. */
+export declare function loadWorkspaceModelSelectionInput(db: Database, settings: Settings, context: WorkspaceModelSelectionContext, options?: {
+    observeAvailability?: boolean;
+}): Promise<WorkspaceModelSelectionInput>;
+/**
+ * Caller-scoped stable fresh admission; never re-admit already accepted work.
+ * Live discovery is opt-in: its token refresh can mutate connection readiness,
+ * so a health hint must not change the billing rail of an explicit create.
+ */
+export declare function resolveCallerWorkspaceModelSelections(db: Database, settings: Settings, context: WorkspaceModelSelectionContext, options?: {
+    observeAvailability?: boolean;
+}): Promise<WorkspaceModelSelection[]>;
+/** Transient selectability for existing consumers; not fresh-create admission. */
+export declare function selectableWorkspaceModel(selections: readonly WorkspaceModelSelection[], modelId: string): WorkspaceModelSelection | undefined;
+/** Same stable decision used by client config and direct fresh session creation. */
+export declare function admissibleWorkspaceModel(selections: readonly WorkspaceModelSelection[], modelId: string): WorkspaceModelSelection | undefined;
+/**
+ * Server-side default for new work that names no model: API and Slack session
+ * creates, new-chat drafts that follow the default, and scheduled-task
+ * occurrences. The result is resolved once and then frozen by the accepted
+ * session or occurrence like any other model choice.
+ */
+export declare function resolveDefaultSessionModel(db: Database, settings: Settings, context: WorkspaceModelSelectionContext & {
+    workspaceSettings?: unknown;
+}): Promise<DefaultModelSelection>;
+/**
+ * The default a scheduled occurrence uses when its task names no model and the
+ * occurrence creates its own session: resolved under the task's immutable
+ * execution owner (or its creator for a workspace/service task) and the task's
+ * frozen SuperGrok authority, never another member's. The worker stamps the
+ * result onto the accepted execution, so retries and recovery replay it; the
+ * API's manual-trigger limit check uses the same resolution so it gates the
+ * model that will run.
+ */
+export declare function resolveScheduledTaskDefaultModel(db: Database, settings: Settings, task: Pick<ScheduledTask, "id" | "accountId" | "workspaceId" | "ownerSubjectId" | "createdBy">): Promise<DefaultModelSelection>;
+/**
+ * The model a manual trigger's limit pre-check evaluates, matching what the
+ * occurrence will run: the task's explicit model, else the target or reusable
+ * session's model when that session exists, else the resolved scheduled
+ * default. The worker still resolves authoritatively at dispatch.
+ */
+export declare function resolveScheduledTaskPreflightModel(db: Database, settings: Settings, task: Pick<ScheduledTask, "id" | "accountId" | "workspaceId" | "ownerSubjectId" | "createdBy" | "agentConfig" | "runMode" | "targetSessionId" | "reusableSessionId">): Promise<string>;

package/dist/dependencies.d.ts

@@ -1,16 +1,24 @@
 import type { Settings } from "@opengeni/config";
 import type { ConnectionCredentialsPort, Document, DocumentAuthorityKind, GitHubAppApiPort, ScheduledTask, ScheduledTaskTriggerType, SessionAuthorizationPort, TurnInitiator } from "@opengeni/contracts";
-import type { Database } from "@opengeni/db";
+import type { Database, SessionWorkflowWakeDeliveryResult } from "@opengeni/db";
 import type { DocumentServices } from "@opengeni/documents";
 import type { EventBus } from "@opengeni/events";
 import type { Observability } from "@opengeni/observability";
+import type { UserPresenceRecorder } from "./user-presence.js";
 import type { createObjectStorage } from "@opengeni/storage";
 import type { ManagedAuth } from "./managed-auth-type.js";
+import type { ManagedAuthSessionAdapter } from "./managed-auth-session-sets.js";
 import type { ApiSandboxClient, ResumeBoxByIdInput, ResumedSandboxSession } from "./sandbox-types.js";
 import type { TranscriptionSegmenter, TranscriptionService } from "./transcription.js";
 import type { EditableArtifactApplicationPort } from "./editable-artifact-live.js";
+import type { ResolvedCatalogSettings } from "./model-catalog.js";
 import type { EditableArtifactAgentApplication, EditableArtifactDurableExportService, EditableArtifactOfficeImportPort } from "./editable-artifacts.js";
 export type SessionWorkflowClient = {
+    triggerAutomationRun?: (input: {
+        accountId: string;
+        workspaceId: string;
+        runId: string;
+    }) => Promise<void>;
     signalUserMessage: (input: {
         sessionId: string;
         eventId: string;
@@ -23,7 +31,9 @@ export type SessionWorkflowClient = {
         workflowId: string;
         wakeRevision: number;
         interruptionRequested?: boolean;
-    }) => Promise<void>;
+        /** Called after transport acceptance, before the fallible durable ACK. */
+        onSignalAccepted?: () => void;
+    }) => Promise<SessionWorkflowWakeDeliveryResult | void>;
     /** Trigger one bounded drain of already-committed workflow-wake revisions. */
     requestSessionWorkflowWakeDispatch: () => Promise<void>;
     signalCodexCapacity?: (input: {
@@ -44,6 +54,12 @@ export type SessionWorkflowClient = {
     }) => Promise<void>;
     syncScheduledTask: (input: {
         task: ScheduledTask;
+        /**
+         * Compensate under the same per-schedule writer lock. Return the error to
+         * throw only after this transaction commits; lock/commit failures bypass
+         * that receipt. A failing compensation must roll back its own savepoint.
+         */
+        onFailure?: (tx: Database, error: unknown) => Promise<Error>;
     }) => Promise<void>;
     deleteScheduledTaskSchedule: (input: {
         temporalScheduleId: string;
@@ -53,6 +69,8 @@ export type SessionWorkflowClient = {
         agentRunUsageIdempotencyKey: string;
         triggerWorkflowId: string;
         initiator: TurnInitiator;
+        /** Server-frozen caller ceiling for this run, independent of task ownership. */
+        credentialRestriction?: "developer_setup";
         triggerType?: Extract<ScheduledTaskTriggerType, "manual" | "initial" | "provider_event" | "retry" | "repair">;
     }) => Promise<void>;
     startRigVerification: (input: {
@@ -73,8 +91,48 @@ export type DocumentIndexClient = {
         authoritySubjectId: string | null;
     }) => Promise<Document | void>;
 };
+export type ManagedEmailMessage = {
+    kind: "email_verification" | "password_reset" | "organization_user_setup" | "sign_in_method_changed";
+    from: string;
+    to: string;
+    subject: string;
+    text: string;
+    html: string;
+    idempotencyKey?: string;
+};
+export type ManagedEmailDeliveryResult = {
+    status: "sent";
+    providerMessageId: string | null;
+} | {
+    status: "failed";
+    errorClass: string;
+} | {
+    status: "outcome_unknown";
+    errorClass: string;
+};
+/** Provider-neutral, injectable boundary for every managed-auth email. */
+export type ManagedEmailTransport = {
+    /** Effective provider sender; frozen into any idempotent payload digest. */
+    readonly sender: string;
+    /**
+     * Stable non-secret provider/account/policy namespace plus the provider's
+     * guaranteed key-retention window. Both are durably fenced before I/O.
+     */
+    readonly idempotency: {
+        readonly scope: string;
+        readonly retentionSeconds: number;
+    };
+    send(message: ManagedEmailMessage): Promise<ManagedEmailDeliveryResult>;
+};
 export type AppDependencies = {
     settings: Settings;
+    /**
+     * Original deployment settings when `settings` is already overlaid with a
+     * deployment/workspace catalog snapshot. Model-bearing request adapters set
+     * this marker so core admission never feeds a synthetic reviewed provider
+     * back through deployment validation.
+     */
+    catalogSourceSettings?: Settings;
     db: Database;
     /**
      * Host-composed editable artifact engine. Standalone startup binds the same
@@ -90,13 +148,22 @@ export type AppDependencies = {
     editableArtifactOfficeImports?: EditableArtifactOfficeImportPort;
     bus: EventBus;
     workflowClient: SessionWorkflowClient;
-    /** Injectable structural seam for replayable prompt fanout and wake work. */
+    /**
+     * Injectable structural seam for replayable post-commit fanout and wake work.
+     * The historical name is retained for host compatibility; every interactive
+     * session command now uses this boundary, not only prompt submission.
+     */
     schedulePromptPostCommit?: (task: () => Promise<void>) => void;
     /** Optional provider override for deterministic API/object-storage tests. */
     objectStorage?: ObjectStorageDependency;
     documentIndexer?: DocumentIndexClient;
     documentServices?: DocumentServices;
     observability?: Observability;
+    /**
+     * Throttled server-side presence for canonical managed browser sessions
+     * (`createUserPresenceRecorder`). Analytics only; never an authorization input.
+     */
+    userPresence?: UserPresenceRecorder | null;
     readinessChecks?: Partial<Record<"db" | "nats" | "temporal", () => Promise<void> | void>>;
     githubStateSecret?: string;
     /**
@@ -105,6 +172,8 @@ export type AppDependencies = {
      * App credentials; standalone deployments fall back to @opengeni/github.
      */
     githubAppApi?: GitHubAppApiPort;
+    /** Optional provider seam for the separately registered OpenGeni Lens App. */
+    prReviewGithubAppApi?: GitHubAppApiPort;
     /**
      * Optional host-owned connection credential seam. API-side consumers use
      * the MCP leg for Codemode/Code Mode; worker consumers bind the same port
@@ -118,8 +187,18 @@ export type AppDependencies = {
      */
     sessionAuthorization?: SessionAuthorizationPort | null;
     managedAuth?: ManagedAuth | null;
+    /** Provider-neutral browser login-slot adapter; required by dual/broker managed auth. */
+    managedAuthSessionAdapter?: ManagedAuthSessionAdapter | null;
+    /** Injectable managed-email transport; standalone API defaults to Resend or local capture. */
+    managedEmailTransport?: ManagedEmailTransport;
     /** Injectable Codex HTTP transport for deterministic API/provider tests. */
     codexFetch?: typeof fetch;
+    /** Injectable transport for customer OpenAI/Azure connection checks. */
+    directModelFetch?: typeof fetch;
+    /** Injectable GitHub transport for deterministic personal-OAuth tests. */
+    githubPersonalFetch?: typeof fetch;
+    /** Injectable credential-free GitHub transport for public repository verification tests. */
+    githubAnonymousFetch?: typeof fetch;
     /** Injectable xAI OAuth/subscription transport for deterministic API/provider tests. */
     xaiFetch?: typeof fetch;
     /** Injectable Slack Web API transport for deterministic bot-connection tests. */
@@ -130,6 +209,8 @@ export type AppDependencies = {
     fikenFetch?: typeof fetch;
     /** Injectable Integration Definition OAuth/API transport for deterministic tests. */
     apiIntegrationOAuthFetch?: typeof fetch;
+    /** Injectable specification/introspection transport, still network-policy checked. */
+    apiIntegrationSourceFetch?: typeof fetch;
     atlassianFetch?: typeof fetch;
     /** Injectable MCP OAuth setup deadline for deterministic stalled-provider tests. */
     oauthStartDeadlineMs?: number;
@@ -151,6 +232,8 @@ export type AppDependencies = {
 };
 export type ObjectStorageDependency = ReturnType<typeof createObjectStorage>;
 export type ApiRouteDeps = AppDependencies & {
+    resolveCatalogSettings: () => Promise<ResolvedCatalogSettings>;
+    managedEmailTransport: ManagedEmailTransport;
     objectStorage: ObjectStorageDependency;
     githubStateSecret: string;
     documentIndexer: DocumentIndexClient;
@@ -164,7 +247,7 @@ export type ApiRouteDeps = AppDependencies & {
  * the canonical admission path without constructing unrelated HTTP, document,
  * or sandbox services. The public API still passes its `ApiRouteDeps` superset.
  */
-export type AcceptSessionUserMessageDependencies = Pick<AppDependencies, "settings" | "db" | "bus" | "sessionAuthorization" | "schedulePromptPostCommit"> & {
+export type AcceptSessionUserMessageDependencies = Pick<AppDependencies, "settings" | "catalogSourceSettings" | "db" | "bus" | "sessionAuthorization" | "schedulePromptPostCommit" | "observability"> & {
     workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
     objectStorage: ObjectStorageDependency;
 };

package/dist/developer-setup-credential-ceiling.d.ts

@@ -0,0 +1,10 @@
+import { type AccessGrant, type Permission, type TurnExecutionPolicyV1 } from "@opengeni/contracts";
+import { type AccessGrantAuthorization } from "./access/index.js";
+/** The policy must be server-frozen, never supplied as request metadata. */
+export declare function requireDeveloperSetupDelegatedPermissions(policy: TurnExecutionPolicyV1, permissions: readonly Permission[] | undefined): void;
+/** Only pass server-owned persisted session/turn metadata, never request JSON. */
+export declare function withDeveloperSetupCredentialRestriction(policy: TurnExecutionPolicyV1, source: {
+    grant?: AccessGrant;
+    authorization?: AccessGrantAuthorization | undefined;
+    trustedMetadata?: readonly unknown[];
+}): TurnExecutionPolicyV1;