@opengeni/core 2.6.4 → 2.7.5-canary.0

package/dist/access/index.d.ts

@@ -68,6 +68,16 @@ export declare function accessGrantAuthorizationFromContext(context: AccessConte
  * access resolver are present in `resolvedAccessGrantAuthorizations`.
  */
 export declare function requireAccountAdminAuthorizationStamp(authorization: AccessGrantAuthorization): AccountAdminAuthorizationStamp;
+/**
+ * Verify that an access authorization was minted by the canonical request
+ * resolver for this exact subject and workspace.
+ *
+ * This is the protocol-neutral boundary for request-local services that need
+ * the authenticated grant rather than a caller-supplied grant-shaped object.
+ * Object identity is intentional: matching fields alone are not proof that the
+ * request authenticated the named subject.
+ */
+export declare function requireResolvedAccessGrantAuthorization(authorization: AccessGrantAuthorization, workspaceId: string): AccessGrant;
 /**
  * Resolve the exact built-in single-user local administrator for an account.
  *

package/dist/application/api-integration-servers.d.ts

@@ -0,0 +1,20 @@
+import { type IntegrationInvocationAuthority } from "@opengeni/capabilities";
+import type { Settings } from "@opengeni/config";
+import type { ToolAuthNeededPayload } from "@opengeni/contracts";
+import type { ApiIntegrationRuntime, ResolveConnectionCredentialInput, ResolveConnectionCredentialResult } from "@opengeni/db";
+import type { FetchLike } from "@opengeni/network";
+import type { LocalMcpServerRegistration } from "@opengeni/runtime";
+export type BuildApiIntegrationServersInput = {
+    settings: Settings;
+    integrations: readonly ApiIntegrationRuntime[];
+    authority: Omit<IntegrationInvocationAuthority, "connectionRef">;
+    resolveCredential: (input: ResolveConnectionCredentialInput) => Promise<ResolveConnectionCredentialResult>;
+    onAuthNeeded?: (payload: ToolAuthNeededPayload) => Promise<void> | void;
+    fetchImpl?: FetchLike;
+};
+/**
+ * Compile active persisted API facets into ordinary in-process MCP providers.
+ * The caller supplies its authority resolver, so agent attempts and current
+ * humans use the same provider assembly without sharing credentials or policy.
+ */
+export declare function buildApiIntegrationMcpServers(input: BuildApiIntegrationServersInput): LocalMcpServerRegistration[];

package/dist/billing/limits.d.ts

@@ -1,3 +1,4 @@
+import { type Settings } from "@opengeni/config";
 import type { LimitAction, LimitDecision, SessionTurnSource, TurnInitiator, TurnInitiatorContext } from "@opengeni/contracts";
 import type { ApiRouteDeps } from "../dependencies.js";
 export type LimitDependencies = Pick<ApiRouteDeps, "db" | "settings">;
@@ -8,6 +9,10 @@ export type LimitCheckInput = {
     quantity?: number;
     model?: string | null;
 };
+export declare function modelFundingForAdmission(settings: Settings, model: string | null | undefined, codexBilled: boolean): {
+    fundedWithoutCredits: boolean;
+    countsTowardTokenCap: boolean;
+};
 export declare function requireLimit(deps: LimitDependencies, input: LimitCheckInput): Promise<void>;
 export declare function checkLimit(deps: LimitDependencies, input: LimitCheckInput): Promise<LimitDecision>;
 export declare function recordWorkspaceUsage(deps: LimitDependencies, input: {

package/dist/dependencies.d.ts

@@ -10,6 +10,7 @@ import type { ManagedAuthSessionAdapter } from "./managed-auth-session-sets.js";
 import type { ApiSandboxClient, ResumeBoxByIdInput, ResumedSandboxSession } from "./sandbox-types.js";
 import type { TranscriptionSegmenter, TranscriptionService } from "./transcription.js";
 import type { EditableArtifactApplicationPort } from "./editable-artifact-live.js";
+import type { ResolvedCatalogSettings } from "./model-catalog.js";
 import type { EditableArtifactAgentApplication, EditableArtifactDurableExportService, EditableArtifactOfficeImportPort } from "./editable-artifacts.js";
 export type SessionWorkflowClient = {
     triggerAutomationRun?: (input: {
@@ -114,6 +115,13 @@ export type ManagedEmailTransport = {
 };
 export type AppDependencies = {
     settings: Settings;
+    /**
+     * Original deployment settings when `settings` is already overlaid with a
+     * deployment/workspace catalog snapshot. Model-bearing request adapters set
+     * this marker so core admission never feeds a synthetic reviewed provider
+     * back through deployment validation.
+     */
+    catalogSourceSettings?: Settings;
     db: Database;
     /**
      * Host-composed editable artifact engine. Standalone startup binds the same
@@ -171,6 +179,8 @@ export type AppDependencies = {
     codexFetch?: typeof fetch;
     /** Injectable GitHub transport for deterministic personal-OAuth tests. */
     githubPersonalFetch?: typeof fetch;
+    /** Injectable credential-free GitHub transport for public repository verification tests. */
+    githubAnonymousFetch?: typeof fetch;
     /** Injectable xAI OAuth/subscription transport for deterministic API/provider tests. */
     xaiFetch?: typeof fetch;
     /** Injectable Slack Web API transport for deterministic bot-connection tests. */
@@ -202,6 +212,7 @@ export type AppDependencies = {
 };
 export type ObjectStorageDependency = ReturnType<typeof createObjectStorage>;
 export type ApiRouteDeps = AppDependencies & {
+    resolveCatalogSettings: () => Promise<ResolvedCatalogSettings>;
     managedEmailTransport: ManagedEmailTransport;
     objectStorage: ObjectStorageDependency;
     githubStateSecret: string;
@@ -216,7 +227,7 @@ export type ApiRouteDeps = AppDependencies & {
  * the canonical admission path without constructing unrelated HTTP, document,
  * or sandbox services. The public API still passes its `ApiRouteDeps` superset.
  */
-export type AcceptSessionUserMessageDependencies = Pick<AppDependencies, "settings" | "db" | "bus" | "sessionAuthorization" | "schedulePromptPostCommit"> & {
+export type AcceptSessionUserMessageDependencies = Pick<AppDependencies, "settings" | "catalogSourceSettings" | "db" | "bus" | "sessionAuthorization" | "schedulePromptPostCommit"> & {
     workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
     objectStorage: ObjectStorageDependency;
 };

package/dist/domain/host-mcp-authority-source-admission.d.ts

@@ -0,0 +1,10 @@
+import type { Settings } from "@opengeni/config";
+import type { McpServerConnectionRef } from "@opengeni/contracts";
+/**
+ * Explicit host-owned MCP refs change which credential authority executes an
+ * opaque connection id. Admit new external refs only after the operator has
+ * completed the two-phase fleet rollout. Readers and inheritance remain
+ * tolerant regardless of this switch, and markerless legacy refs retain their
+ * bounded non-UUID compatibility path.
+ */
+export declare function assertHostMcpAuthoritySourceAdmissionEnabled(settings: Pick<Settings, "hostMcpAuthoritySourceAdmissionEnabled">, connectionRef: McpServerConnectionRef | null | undefined): void;

package/dist/domain/packs.d.ts

@@ -25,6 +25,7 @@ export type InlinePackSkillInstall = {
     sourcePath: string;
     name: string;
     description: string;
+    activationMode: "workspace_managed" | "session_selected";
     contentSha256: string;
     totalBytes: number;
     files: Array<{

package/dist/domain/pr-review.d.ts

@@ -80,7 +80,7 @@ export declare const prReviewAutomationAdapter: {
                 eager?: boolean | undefined;
                 optional?: boolean | undefined;
             }[];
-            firstPartyMcpTools: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_set" | "goal_update" | "goal_wait" | "instruction_policy_propose" | "interaction_discover" | "interaction_request_human" | "knowledge_correct" | "knowledge_propose" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+            firstPartyMcpTools: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_set" | "goal_update" | "instruction_policy_propose" | "interaction_discover" | "interaction_request_human" | "knowledge_correct" | "knowledge_propose" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
             firstPartyMcpPermissions: ("account:admin" | "account:read" | "api_keys:manage" | "artifacts:publish" | "artifacts:read" | "billing:manage" | "billing:read" | "capabilities:manage" | "codemode:call" | "connections:read" | "connections:write" | "documents:manage" | "documents:search" | "enrollments:manage" | "enrollments:read" | "environments:manage" | "environments:use" | "files:read" | "files:upload" | "files:write" | "github:manage" | "github:use" | "goals:manage" | "mcp_servers:attach" | "members:manage" | "rigs:manage" | "rigs:use" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "secrets:list" | "secrets:read" | "secrets:write" | "sessions:control" | "sessions:create" | "sessions:read" | "stream:acknowledge" | "stream:control" | "stream:view" | "terminal:attach" | "variable-sets:attach" | "variable-sets:list" | "variable-sets:manage" | "variable-sets:read" | "variable-sets:use" | "variable-sets:write" | "workspace:admin" | "workspace:create" | "workspace:read")[];
             model: string | null;
             reasoningEffort: "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh" | null;

package/dist/domain/product-integration-pack.d.ts

@@ -0,0 +1,50 @@
+export declare const OPENGENI_PRODUCT_INTEGRATION_PACK_ID = "opengeni-product-integration";
+/**
+ * Version-aligned implementation guidance for customer-side coding agents.
+ *
+ * This is intentionally an instruction-only Pack. Installation adds no tools,
+ * credentials, connectors, knowledge, compute, or customer-agent persona. Its
+ * immutable Skill is installed as session-selected and enters model context
+ * only when one implementation session opts in explicitly.
+ */
+export declare const OPENGENI_PRODUCT_INTEGRATION_SKILL: {
+    name: string;
+    description: string;
+    activationMode: "session_selected";
+    files: {
+        path: string;
+        content: string;
+    }[];
+};
+export declare const OPENGENI_PRODUCT_INTEGRATION_PACK: {
+    id: string;
+    name: string;
+    description: string;
+    role: string;
+    category: string;
+    version: string;
+    skills: {
+        name: string;
+        description: string;
+        activationMode: "session_selected";
+        files: {
+            path: string;
+            content: string;
+        }[];
+    }[];
+    components: never[];
+    tools: never[];
+    connectors: never[];
+    knowledge: never[];
+    scheduledTaskTemplates: never[];
+    automationTemplates: never[];
+    metadata: {
+        audience: string;
+        purpose: string;
+        implementationOnly: boolean;
+        skillActivation: string;
+        installationExposure: string;
+        grantsExecutableCapabilities: boolean;
+        customerRuntimeProfile: string;
+    };
+};

package/dist/domain/sessions.d.ts

@@ -83,6 +83,16 @@ export declare function createAndStartSessionWithOutcome(input: {
     /** Internal database-only composition seam. The exact session shell and this
      * linkage commit together before its first event/turn can be initialized. */
     beforeCreateCommit?: (tx: Database, sessionId: string) => Promise<void>;
+    /** The custom workspace model was frozen by an earlier accepted boundary or
+     * inherited from an existing session, so retirement must not invalidate it. */
+    retainWorkspaceGatewayModel?: boolean;
+    /** Provider-neutral successor to retainWorkspaceGatewayModel. */
+    retainWorkspaceCustomModel?: boolean;
+    /** The selected workspace Gateway product is backed by a mutable custom row,
+     * rather than deployment-curated Gateway membership. */
+    workspaceGatewayCustomModel?: boolean;
+    /** Provider-neutral successor to workspaceGatewayCustomModel. */
+    workspaceCustomModel?: boolean;
     accountId: string;
     workspaceId: string;
     visibility?: "user_private" | "workspace_shared";
@@ -130,6 +140,7 @@ export declare function createAndStartSessionWithOutcome(input: {
     xaiProviderAccountAuthoritySnapshot?: XaiProviderAccountAuthoritySnapshotV1;
     parentSessionId?: string | null;
     createIdempotencyKey?: string | null;
+    selectedInstalledSkillIds?: string[];
     sandboxGroupId?: string | null;
     sandboxOs?: Session["sandboxOs"];
     seedTargetSandbox?: {
@@ -213,7 +224,16 @@ export declare function requireQueuedTurnForApi(db: Database, workspaceId: strin
  * `session_send_message` tool so the two surfaces cannot drift. Callers own
  * resource/tool validation and the per-message usage limit before calling.
  */
-export declare function postUserMessageTurn(input: {
+type PostUserMessageTurnResult = {
+    accepted: SessionEvent;
+    turn: SessionTurn;
+    draft: ComposerDraft | null;
+    receipt: SessionCommandReceipt;
+    routing: SessionPromptRouting;
+    interruptionCount: number;
+    replay: boolean;
+};
+type PostUserMessageTurnInput = {
     db: Database;
     bus: EventBus;
     workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
@@ -241,19 +261,13 @@ export declare function postUserMessageTurn(input: {
     commandActor?: SessionCommandActor;
     controlEtag?: string | null;
     expectedDraftRevision?: number | null;
+    boundaryRequestHash?: string;
     reasoningEffortFallback?: Settings["openaiReasoningEffort"];
     turnExecutionPolicy: TurnExecutionPolicyV1;
     recordAgentRunUsage?: boolean;
     schedulePostCommit?: (task: () => Promise<void>) => void;
-}): Promise<{
-    accepted: SessionEvent;
-    turn: SessionTurn;
-    draft: ComposerDraft | null;
-    receipt: SessionCommandReceipt;
-    routing: SessionPromptRouting;
-    interruptionCount: number;
-    replay: boolean;
-}>;
+};
+export declare function postUserMessageTurn(input: PostUserMessageTurnInput): Promise<PostUserMessageTurnResult>;
 /**
  * Full create-session flow shared by `POST /sessions` and the first-party MCP
  * `session_create` tool: payload validation, resource/tool/variableSet
@@ -269,7 +283,7 @@ export declare function resolveSessionCreateVisibility(input: {
     visibilityProvided: boolean;
     parentVisibility: "user_private" | "workspace_shared" | null;
 }): "user_private" | "workspace_shared";
-export declare function createSessionForRequestWithOutcome(deps: ApiRouteDeps, grant: AccessGrant, workspaceId: string, rawPayload: unknown, authorization?: AccessGrantAuthorization, agentChildPresentation?: AgentChildSessionCreatePresentation): Promise<CreateSessionRequestOutcome>;
+export declare function createSessionForRequestWithOutcome(unresolvedDeps: ApiRouteDeps, grant: AccessGrant, workspaceId: string, rawPayload: unknown, authorization?: AccessGrantAuthorization, agentChildPresentation?: AgentChildSessionCreatePresentation): Promise<CreateSessionRequestOutcome>;
 /** @internal Fixed public projection; the committed session outcome remains authoritative. */
 export declare function reportSessionUsageRecordingFailure(_error: unknown): void;
 /** Backward-compatible entity-returning request path for REST and core callers. */

package/dist/index.d.ts

@@ -4,6 +4,7 @@ export * from "./sandbox-types.js";
 export * from "./managed-auth-type.js";
 export { getManagedAuthRequestActorAbortSignal, getManagedAuthRequestActorAdmissionStamp, getManagedAuthRequestActorEpoch, getManagedAuthRequestActorLeaseStamp, getManagedSession, ManagedAuthActorLeaseOutcomeUnknownError, markManagedAuthRequestActorTransitionApplied, releaseManagedAuthRequestActorLease, validateManagedAuthRequestActorLease, type ManagedAuthActorAdmissionStamp, type ManagedAuthActorMutationLeaseStamp, } from "./managed-session.js";
 export * from "./transcription.js";
+export * from "./model-catalog.js";
 export * from "./sandbox/fleet.js";
 export * from "./sandbox/routing.js";
 export * from "./sandbox/runtime-settings.js";
@@ -11,12 +12,14 @@ export * from "./access/index.js";
 export * from "./session-authorization.js";
 export * from "./billing/limits.js";
 export * from "./domain/capabilities.js";
+export * from "./domain/host-mcp-authority-source-admission.js";
 export * from "./domain/skill-imports.js";
 export * from "./domain/environments.js";
 export * from "./rigs/index.js";
 export * from "./domain/packs.js";
 export * from "./domain/automations.js";
 export * from "./domain/pr-review.js";
+export * from "./domain/product-integration-pack.js";
 export * from "./domain/personal-connection-delegations.js";
 export * from "./domain/resources.js";
 export * from "./domain/github-repository-bindings.js";
@@ -46,5 +49,6 @@ export * from "./application/composer-submit.js";
 export * from "./application/session-commands.js";
 export * from "./application/session-tenancy.js";
 export * from "./application/user-resource-grants.js";
+export * from "./application/api-integration-servers.js";
 export * from "./editable-artifact-live.js";
 export * from "./editable-artifacts.js";