@opengeni/core 2.9.3 → 2.9.4-canary.1

package/dist/index.js

@@ -4110,7 +4110,7 @@ var productIntegrationSkillFiles = [
   },
   {
     "path": "references/product-shapes-and-ui.md",
-    "content": "# Product shapes and UI\n\n## Choose the smallest suitable surface\n\nOpenGeni supports several product shapes. Select from the product experience and host stack rather than assuming every integration needs a custom chat:\n\n| Need | Likely surface | Product owns |\n| --- | --- | --- |\n| The complete OpenGeni experience is acceptable | Link or deep-link to stock OpenGeni | Entry point and product navigation |\n| Custom UI in any framework, mobile app, CLI, or automation | OpenGeni SDK or public API behind product backend | All user-facing presentation |\n| React product wants canonical session state without packaged visuals | Headless React session hooks and projections | Components, layout, and styling |\n| React product wants packaged chat/session controls | Focused styled React subpaths | Shell, domain UI, and theming |\n| Product exposes files, changes, terminal, or desktop compute | Optional workbench surfaces | Product shell and selected tabs |\n\nStart with the narrowest surface that preserves the desired experience. Do not mount the full workbench for an ordinary analytics chat. Do not rebuild session streaming, replay, queueing, approval, or timeline projection when a compatible package already supplies the needed behavior.\n\n## Evaluate reuse before writing chat UI\n\nFor React hosts, inspect the installed OpenGeni React package before creating replacement components. Its subpaths are composable, and the styled surfaces use scoped compiled CSS plus runtime theme and density tokens. Compare:\n\n- packaged components with customer theme tokens;\n- headless hooks with customer-native components; and\n- a fully custom SDK-driven UI.\n\nChoose based on UX requirements and dependency compatibility, then record why. Styling differences alone are not a reason to skip reusable components if their structure fits. Conversely, do not force a packaged component when the product needs a materially different interaction model.\n\nFor Svelte, SvelteKit, Vue, native mobile, or another non-React frontend, use the product's native component system. Keep the privileged OpenGeni client on a compatible backend boundary. A SvelteKit server route may use the TypeScript SDK directly; a non-JavaScript backend may use the public HTTP contract or a small compatible adapter. The browser still speaks to authenticated product routes.\n\n## Browser/backend split\n\nThe product browser normally sends product-shaped requests to its own same-origin backend. The backend authenticates, resolves the allowed mapping, and calls OpenGeni. Never bundle an organization key into frontend code.\n\nFor live sessions, preserve event sequence, reconnect, replay, and duplicate suppression. The SDK's stream and proxy helpers are preferred where compatible. Treat unknown additive event types as forward-compatible data rather than crashing the UI.\n\nUploads may send bytes directly to a short-lived signed storage URL returned by the trusted flow. That URL is narrow transfer authority, not the OpenGeni API key. Verify storage CORS for every intended browser origin.\n\n## Decide what the user sees\n\nOpenGeni's durable event stream can support different product projections:\n\n- final answer only;\n- assistant messages plus progress and status;\n- selected tool-call summaries;\n- approvals and structured human-input cards; or\n- a detailed operational timeline.\n\nThe customer frontend chooses which event types and fields to render. Hiding an event from the chat view does not remove it from OpenGeni's durable history or from authorized audit readers. Do not promise data erasure or secrecy from presentation filtering.\n\nEven a final-answer-only UI should surface states the user must act on: failure, cancellation, credit or policy denial, approval requests, human-input requests, reconnect status, and a way to retry safely. Avoid presenting tool failures as ordinary assistant prose when product state can represent them more clearly.\n\n## Fit the host product\n\nFollow existing navigation, accessibility, responsive, loading, error, observability, localization, and design-system conventions. Keep OpenGeni IDs behind product-native identifiers. Make the smallest dependency addition that improves correctness.\n\nThe integration should feel native to the customer product while retaining OpenGeni's session semantics. Framework adaptation is expected; protocol reimplementation is not a goal.\n"
+    "content": "# Opening host-owned workbench tabs\n\nUse `SandboxWorkspace.openTabRequest={{ tab, requestId }}` to open a built-in or\nhost-injected tab from the host's UI. Increment `requestId` for each intentional\nopen, including repeated clicks on the same item. Keep artifact selection and\ninternal-link recognition in the host; the workbench only selects an available\ntab and expands the dock. Preserve modified clicks and external navigation.\nWhen handing off to a full-page artifact route, retain an explicit originating\nsession return path rather than relying on browser history.\n\n# Product shapes and UI\n\n## Choose the smallest suitable surface\n\nOpenGeni supports several product shapes. Select from the product experience and host stack rather than assuming every integration needs a custom chat:\n\n| Need | Likely surface | Product owns |\n| --- | --- | --- |\n| The complete OpenGeni experience is acceptable | Link or deep-link to stock OpenGeni | Entry point and product navigation |\n| Custom UI in any framework, mobile app, CLI, or automation | OpenGeni SDK or public API behind product backend | All user-facing presentation |\n| React product wants canonical session state without packaged visuals | Headless React session hooks and projections | Components, layout, and styling |\n| React product wants packaged chat/session controls | Focused styled React subpaths | Shell, domain UI, and theming |\n| Product exposes files, changes, terminal, or desktop compute | Optional workbench surfaces | Product shell and selected tabs |\n\nStart with the narrowest surface that preserves the desired experience. Do not mount the full workbench for an ordinary analytics chat. Do not rebuild session streaming, replay, queueing, approval, or timeline projection when a compatible package already supplies the needed behavior.\n\n## Evaluate reuse before writing chat UI\n\nFor React hosts, inspect the installed OpenGeni React package before creating replacement components. Its subpaths are composable, and the styled surfaces use scoped compiled CSS plus runtime theme and density tokens. Compare:\n\n- packaged components with customer theme tokens;\n- headless hooks with customer-native components; and\n- a fully custom SDK-driven UI.\n\nChoose based on UX requirements and dependency compatibility, then record why. Styling differences alone are not a reason to skip reusable components if their structure fits. Conversely, do not force a packaged component when the product needs a materially different interaction model.\n\nFor Svelte, SvelteKit, Vue, native mobile, or another non-React frontend, use the product's native component system. Keep the privileged OpenGeni client on a compatible backend boundary. A SvelteKit server route may use the TypeScript SDK directly; a non-JavaScript backend may use the public HTTP contract or a small compatible adapter. The browser still speaks to authenticated product routes.\n\n## Browser/backend split\n\nThe product browser normally sends product-shaped requests to its own same-origin backend. The backend authenticates, resolves the allowed mapping, and calls OpenGeni. Never bundle an organization key into frontend code.\n\nFor live sessions, preserve event sequence, reconnect, replay, and duplicate suppression. The SDK's stream and proxy helpers are preferred where compatible. Treat unknown additive event types as forward-compatible data rather than crashing the UI.\n\nUploads may send bytes directly to a short-lived signed storage URL returned by the trusted flow. That URL is narrow transfer authority, not the OpenGeni API key. Verify storage CORS for every intended browser origin.\n\n## Decide what the user sees\n\nOpenGeni's durable event stream can support different product projections:\n\n- final answer only;\n- assistant messages plus progress and status;\n- selected tool-call summaries;\n- approvals and structured human-input cards; or\n- a detailed operational timeline.\n\nThe customer frontend chooses which event types and fields to render. Hiding an event from the chat view does not remove it from OpenGeni's durable history or from authorized audit readers. Do not promise data erasure or secrecy from presentation filtering.\n\nEven a final-answer-only UI should surface states the user must act on: failure, cancellation, credit or policy denial, approval requests, human-input requests, reconnect status, and a way to retry safely. Avoid presenting tool failures as ordinary assistant prose when product state can represent them more clearly.\n\n## Fit the host product\n\nFollow existing navigation, accessibility, responsive, loading, error, observability, localization, and design-system conventions. Keep OpenGeni IDs behind product-native identifiers. Make the smallest dependency addition that improves correctness.\n\nThe integration should feel native to the customer product while retaining OpenGeni's session semantics. Framework adaptation is expected; protocol reimplementation is not a goal.\n"
   },
   {
     "path": "references/runtime-profile-and-verification.md",
@@ -4747,7 +4747,7 @@ async function buildCapabilityCatalog(input) {
     ...configuredMcpCatalogItems(input.settings),
     ...providerIntegrationCatalogItems(socialConnections),
     fikenCatalogItem(workspaceConnections.filter(isFikenConnection)),
-    ...curatedLibrarySkills,
+    ...curatedLibrarySkills.filter((item) => installedSkillById.has(item.id)),
     ...installedSkills.filter(
       (skill) => skill.source !== "library" && skill.owners.some((owner) => owner.kind === "direct")
     ).map(installedSkillCatalogItem)
@@ -5369,9 +5369,6 @@ async function discoverMcpRegistryCapabilities(input) {
       if (!item || seen.has(item.id)) {
         continue;
       }
-      if (query && !catalogSearchText(item).includes(query)) {
-        continue;
-      }
       seen.add(item.id);
       items.push(item);
       if (items.length >= limit) {
@@ -5379,7 +5376,7 @@ async function discoverMcpRegistryCapabilities(input) {
       }
     }
     cursor = typeof page.metadata?.nextCursor === "string" ? page.metadata.nextCursor : void 0;
-    if (!cursor) {
+    if (items.length > 0 || !cursor) {
       break;
     }
   }
@@ -6102,18 +6099,6 @@ function validUrl(value) {
     return null;
   }
 }
-function catalogSearchText(item) {
-  return [
-    item.name,
-    item.description,
-    item.category,
-    ...item.tags,
-    item.endpointUrl,
-    item.homepageUrl,
-    item.installUrl,
-    JSON.stringify(item.metadata)
-  ].filter(Boolean).join(" ").toLowerCase();
-}
 function capabilityInstallationRuntimeReady(item, installation) {
   if (!installation || item.kind !== "mcp") {
     return !!installation;
@@ -6160,6 +6145,10 @@ var gitCommit = /^[0-9a-f]{40,64}$/u;
 var maxConcurrentBlobReads = 8;
 async function resolveSkillImport(rawUrl, client) {
   const parsed = parseSkillSource(rawUrl);
+  if (parsed.source === "skills_sh" && client.downloadSnapshot) {
+    const files2 = await client.downloadSnapshot(parsed.owner, parsed.repository, parsed.skillSlug);
+    return buildResolvedImport(parsed, files2, parsed.skillSlug, null);
+  }
   const sourceCommit = await client.resolveCommit(parsed.owner, parsed.repository, parsed.ref);
   if (!gitCommit.test(sourceCommit)) {
     throw new HTTPException11(422, { message: "GitHub returned an invalid source commit" });
@@ -6199,6 +6188,9 @@ async function resolveSkillImport(rawUrl, client) {
     }
     return { path: relativeSkillPath(entry.path, sourcePath), content };
   });
+  return buildResolvedImport(parsed, files, sourcePath, sourceCommit);
+}
+function buildResolvedImport(parsed, files, sourcePath, commit) {
   let artifact;
   try {
     artifact = buildPortableSkillArtifact3(files);
@@ -6208,7 +6200,13 @@ async function resolveSkillImport(rawUrl, client) {
     });
   }
   const repositoryUrl = `https://github.com/${parsed.owner}/${parsed.repository}`;
-  const sourceUrl = sourcePath === "." ? `${repositoryUrl}/tree/${sourceCommit}` : `${repositoryUrl}/tree/${sourceCommit}/${encodeGitHubPath(sourcePath)}`;
+  const sourceCommit = commit ?? artifact.contentSha256;
+  if (!commit && artifact.name.toLowerCase().replace(/[\s_]+/g, "-").replace(/[^a-z0-9-]/g, "").replace(/-+/g, "-").replace(/^-|-$/g, "") !== parsed.skillSlug.toLowerCase()) {
+    throw new HTTPException11(422, {
+      message: "The downloaded skill does not match the requested name"
+    });
+  }
+  const sourceUrl = !commit ? `https://skills.sh/${parsed.owner}/${parsed.repository}/${parsed.skillSlug}` : sourcePath === "." ? `${repositoryUrl}/tree/${sourceCommit}` : `${repositoryUrl}/tree/${sourceCommit}/${encodeGitHubPath(sourcePath)}`;
   const warnings = [];
   if (!artifact.files.some((file) => /(^|\/)licen[cs]e(?:\.|$)/iu.test(file.path))) {
     warnings.push("No license file was found inside the selected Skill folder.");
@@ -6221,6 +6219,7 @@ async function resolveSkillImport(rawUrl, client) {
   }
   return {
     preview: {
+      markdown: artifact.files.find((file) => file.path === "SKILL.md")?.content,
       source: parsed.source,
       sourceUrl,
       repositoryUrl,
@@ -6582,6 +6581,7 @@ function normalizeResponse(payload, query, limit, owner) {
     if (!isRecord2(skill) || typeof skill.id !== "string" || typeof skill.source !== "string")
       throw invalid();
     const parts = skill.id.split("/");
+    if (parts.length === 2 && skill.source === parts[0]) continue;
     if (parts.length !== 3 || !ownerPattern.test(parts[0]) || !parts.every((part) => segmentPattern.test(part)) || skill.source !== parts.slice(0, 2).join("/") || skill.skillId !== void 0 && skill.skillId !== parts[2] || typeof skill.name !== "string" || !skill.name.trim() || skill.name.length > 200 || /[\u0000-\u001f\u007f]/u.test(skill.name) || typeof skill.installs !== "number" || !Number.isSafeInteger(skill.installs) || skill.installs < 0 || owner !== void 0 && parts[0].toLowerCase() !== owner)
       throw invalid();
     if (seen.has(skill.id)) continue;
@@ -6611,13 +6611,42 @@ function parseRetryAfter(value) {
 }
 
 // src/domain/github-skill-source.ts
+import { HTTPException as HTTPException12 } from "hono/http-exception";
 import { pinnedFetch as pinnedFetch2, readResponseJsonBounded as readResponseJsonBounded2, readResponseTextBounded } from "@opengeni/network";
+import {
+  PORTABLE_SKILL_MAX_FILES as PORTABLE_SKILL_MAX_FILES2,
+  PORTABLE_SKILL_MAX_TOTAL_BYTES as PORTABLE_SKILL_MAX_TOTAL_BYTES2
+} from "@opengeni/runtime/skill-library";
 var githubApiBase = "https://api.github.com";
 var githubRequestTimeoutMs = 15e3;
 var githubMetadataMaxBytes = 4 * 1024 * 1024;
 var githubBlobResponseMaxBytes = 512 * 1024;
 function createGitHubSkillSourceClient(settings, requestJson = (path, maxBytes, label) => githubJson(settings, path, maxBytes, label)) {
+  const readJson = requestJson;
+  const cache = /* @__PURE__ */ new Map();
+  const pending = /* @__PURE__ */ new Map();
+  requestJson = async (path, maxBytes, label) => {
+    const cached = cache.get(path);
+    if (cached && cached.expires > Date.now()) return cached.payload;
+    const existing = pending.get(path);
+    if (existing) return existing;
+    const task = readJson(path, maxBytes, label).then((payload) => {
+      if (cache.size >= 128) cache.delete(cache.keys().next().value);
+      cache.set(path, {
+        payload,
+        expires: Date.now() + (path.includes("/commits/") ? 6e4 : 36e5)
+      });
+      return payload;
+    });
+    pending.set(path, task);
+    try {
+      return await task;
+    } finally {
+      pending.delete(path);
+    }
+  };
   return {
+    downloadSnapshot: (owner, repository, slug) => downloadSkillSnapshot(settings, owner, repository, slug),
     resolveCommit: async (owner, repository, ref) => {
       const payload = recordValue(
         await requestJson(
@@ -6681,6 +6710,39 @@ function createGitHubSkillSourceClient(settings, requestJson = (path, maxBytes,
     }
   };
 }
+async function downloadSkillSnapshot(settings, owner, repository, slug) {
+  const signal = AbortSignal.timeout(githubRequestTimeoutMs);
+  const response = await pinnedFetch2(
+    `https://skills.sh/api/download/${[owner, repository, slug].map(encodeURIComponent).join("/")}`,
+    { headers: { accept: "application/json" }, credentials: "omit", redirect: "manual", signal },
+    settings,
+    { label: "Skill download", requireHttpsOutsideLocalTest: true }
+  );
+  if (!response.ok) {
+    await response.body?.cancel();
+    throw new HTTPException12(response.status === 429 ? 429 : 422, {
+      message: response.status === 429 ? "skills.sh is busy. Try again shortly." : response.status === 404 ? "This skill has no downloadable snapshot. Import its GitHub folder URL instead." : "Could not download this skill from skills.sh. Try again shortly."
+    });
+  }
+  const payload = recordValue(
+    await readResponseJsonBounded2(
+      response,
+      PORTABLE_SKILL_MAX_TOTAL_BYTES2 * 6 + 128e3,
+      "Skill download",
+      { signal }
+    ),
+    "Skill download"
+  );
+  if (!Array.isArray(payload.files) || payload.files.length === 0 || payload.files.length > PORTABLE_SKILL_MAX_FILES2) {
+    throw new HTTPException12(422, { message: "The downloaded skill has an invalid file list" });
+  }
+  return payload.files.map((file) => {
+    if (!file || typeof file !== "object" || typeof file.path !== "string" || typeof file.contents !== "string") {
+      throw new HTTPException12(422, { message: "The downloaded skill contains an invalid file" });
+    }
+    return { path: file.path, content: file.contents };
+  });
+}
 async function githubJson(settings, path, maxBytes, label) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), githubRequestTimeoutMs);
@@ -6703,7 +6765,9 @@ async function githubJson(settings, path, maxBytes, label) {
       await readResponseTextBounded(response, 8192, `${label} error`).catch(() => void 0);
       if (response.status === 404) throw new Error(`${label} was not found or is not public`);
       if (response.status === 403 || response.status === 429) {
-        throw new Error(`${label} is temporarily unavailable because GitHub limited the request`);
+        throw new HTTPException12(429, {
+          message: "GitHub's public request limit has been reached. Skill search is still available; try previewing again after the limit resets."
+        });
       }
       throw new Error(`${label} failed with HTTP ${response.status}`);
     }
@@ -6730,12 +6794,12 @@ import {
   variableSetVariableNameReservation
 } from "@opengeni/contracts";
 import { getVariableSet as getVariableSet2, recordAuditEvent } from "@opengeni/db";
-import { HTTPException as HTTPException12 } from "hono/http-exception";
+import { HTTPException as HTTPException13 } from "hono/http-exception";
 var MAX_ENVIRONMENTS_PER_WORKSPACE = 25;
 var MAX_VARIABLES_PER_ENVIRONMENT = 100;
 function assertAllowedVariableSetVariableName(name) {
   if (variableSetVariableNameReservation(name)) {
-    throw new HTTPException12(422, {
+    throw new HTTPException13(422, {
       message: `reserved variable set variable name / reserved environment variable name: ${name}`
     });
   }
@@ -6744,7 +6808,7 @@ var assertAllowedEnvironmentVariableName = assertAllowedVariableSetVariableName;
 function requireVariableSetEncryption(settings) {
   const key = environmentsEncryptionKeyBytes2(settings);
   if (!key) {
-    throw new HTTPException12(503, {
+    throw new HTTPException13(503, {
       message: "variable sets require OPENGENI_ENVIRONMENTS_ENCRYPTION_KEY"
     });
   }
@@ -6762,7 +6826,7 @@ async function requireVariableSetForApi(db, grant, variableSetId) {
     variableSetId
   );
   if (!variableSet) {
-    throw new HTTPException12(404, { message: "variableSet not found" });
+    throw new HTTPException13(404, { message: "variableSet not found" });
   }
   return variableSet;
 }
@@ -6778,7 +6842,7 @@ async function validateVariableSetAttachment(deps, grant, workspaceId, variableS
     variableSetId
   );
   if (!variableSet) {
-    throw new HTTPException12(422, { message: "unknown variableSetId" });
+    throw new HTTPException13(422, { message: "unknown variableSetId" });
   }
   return variableSet;
 }
@@ -6818,7 +6882,7 @@ import {
   RigChangeTransitionError,
   updateScopedRig
 } from "@opengeni/db";
-import { HTTPException as HTTPException13 } from "hono/http-exception";
+import { HTTPException as HTTPException14 } from "hono/http-exception";
 import { boundedParallelMap } from "@opengeni/runtime/mcp-network";
 var MAX_RIGS_PER_WORKSPACE = 50;
 var MAX_CHECKS_PER_RIG = 100;
@@ -6857,21 +6921,21 @@ function rigActorForGrant(grant) {
 async function requireRigForApi(db, grant, rigId) {
   const rig = await getRig2(db, grant, rigId);
   if (!rig) {
-    throw new HTTPException13(404, { message: "rig not found" });
+    throw new HTTPException14(404, { message: "rig not found" });
   }
   return rig;
 }
 async function requireRigChangeForApi(db, workspaceId, rigId, changeId) {
   const change = await getRigChange(db, workspaceId, changeId);
   if (!change || change.rigId !== rigId) {
-    throw new HTTPException13(404, { message: "rig change not found" });
+    throw new HTTPException14(404, { message: "rig change not found" });
   }
   return change;
 }
 function trimmedRigName(name) {
   const trimmed = name.trim();
   if (!trimmed) {
-    throw new HTTPException13(422, { message: "rig name is required" });
+    throw new HTTPException14(422, { message: "rig name is required" });
   }
   return trimmed;
 }
@@ -6882,7 +6946,7 @@ function assertUniqueCheckNames(checks) {
   const seen = /* @__PURE__ */ new Set();
   for (const check of checks) {
     if (seen.has(check.name)) {
-      throw new HTTPException13(422, {
+      throw new HTTPException14(422, {
         message: `duplicate rig check name: ${check.name}`
       });
     }
@@ -6902,12 +6966,12 @@ async function assertVariableSetsExist(db, access, rigScope, ids) {
   for (const id of unique) {
     const variableSet = await getVariableSet3(db, access, id);
     if (!variableSet) {
-      throw new HTTPException13(422, {
+      throw new HTTPException14(422, {
         message: `unknown defaultVariableSetId: ${id}`
       });
     }
     if (!variableSetScopeAllowedForRig(rigScope, variableSet.scope)) {
-      throw new HTTPException13(422, {
+      throw new HTTPException14(422, {
         message: `${rigScope}-scoped rigs cannot use ${variableSet.scope}-scoped variable sets`
       });
     }
@@ -6926,12 +6990,12 @@ async function createRigForApi(deps, grant, payload, options = {}) {
     payload.defaultVariableSetIds.length > 0 ? payload.defaultVariableSetIds : void 0
   );
   if (await countRigs(deps.db, grant, payload.scope) >= MAX_RIGS_PER_WORKSPACE) {
-    throw new HTTPException13(422, {
+    throw new HTTPException14(422, {
       message: `a workspace supports at most ${MAX_RIGS_PER_WORKSPACE} rigs`
     });
   }
   if (await getRigByName(deps.db, grant, name, payload.scope)) {
-    throw new HTTPException13(409, {
+    throw new HTTPException14(409, {
       message: `rig name is already in use: ${name}`
     });
   }
@@ -6967,7 +7031,7 @@ async function updateRigForApi(deps, grant, rig, payload, options = {}) {
   if (name !== void 0 && name !== rig.name) {
     const existing = await getRigByName(deps.db, grant, name, rig.scope);
     if (existing && existing.id !== rig.id) {
-      throw new HTTPException13(409, {
+      throw new HTTPException14(409, {
         message: `rig name is already in use: ${name}`
       });
     }
@@ -6993,7 +7057,7 @@ async function deleteRigForApi(deps, grant, rig, options = {}) {
     let current = error;
     while (current instanceof Error) {
       if (current.message.includes("active sessions")) {
-        throw new HTTPException13(409, { message: current.message });
+        throw new HTTPException14(409, { message: current.message });
       }
       current = current.cause;
     }
@@ -7008,7 +7072,7 @@ async function deleteRigForApi(deps, grant, rig, options = {}) {
 async function proposeRigChangeForApi(deps, grant, rig, request, options = {}) {
   const workspaceId = rig.workspaceId;
   if (!rig.activeVersion) {
-    throw new HTTPException13(422, {
+    throw new HTTPException14(422, {
       message: "rig has no active version to base a change on"
     });
   }
@@ -7060,37 +7124,37 @@ async function promoteChangeWithActiveCas(deps, workspaceId, rigId, changeId, in
     return await createRigVersionForChangePromotion(deps.db, workspaceId, rigId, changeId, input);
   } catch (error) {
     if (error instanceof RigActiveVersionChangedError) {
-      throw new HTTPException13(409, {
+      throw new HTTPException14(409, {
         message: `rig moved since this change was verified (base ${error.expectedVersionId}, now ${error.actualVersionId ?? "none"}); re-verify before promoting`
       });
     }
     if (error instanceof RigChangeTransitionError) {
-      throw new HTTPException13(409, { message: error.message });
+      throw new HTTPException14(409, { message: error.message });
     }
     throw error;
   }
 }
 async function promoteSetupAppendChange(deps, grant, rig, change) {
   if (change.kind !== "setup_append") {
-    throw new HTTPException13(422, {
+    throw new HTTPException14(422, {
       message: "only setup_append changes auto-promote through this path"
     });
   }
   if (change.status !== "proposed" && change.status !== "verifying") {
-    throw new HTTPException13(409, {
+    throw new HTTPException14(409, {
       message: `rig change is ${change.status}; cannot promote`
     });
   }
   if (!change.baseVersionId) {
-    throw new HTTPException13(422, { message: "rig change has no base version" });
+    throw new HTTPException14(422, { message: "rig change has no base version" });
   }
   const base = await getRigVersion2(deps.db, rig.workspaceId, rig.id, change.baseVersionId);
   if (!base) {
-    throw new HTTPException13(404, { message: "base rig version not found" });
+    throw new HTTPException14(404, { message: "base rig version not found" });
   }
   const payload = change.payload;
   if (typeof payload.command !== "string" || !payload.command.trim()) {
-    throw new HTTPException13(422, {
+    throw new HTTPException14(422, {
       message: "setup_append change is missing command"
     });
   }
@@ -7138,26 +7202,26 @@ async function promoteSetupAppendChange(deps, grant, rig, change) {
 }
 async function promoteVerifiedDefinitionEditChangeForApi(deps, grant, rig, change) {
   if (change.kind !== "definition_edit") {
-    throw new HTTPException13(422, {
+    throw new HTTPException14(422, {
       message: "only definition_edit changes use explicit promote"
     });
   }
   if (change.status !== "proposed") {
-    throw new HTTPException13(409, {
+    throw new HTTPException14(409, {
       message: `rig change is ${change.status}; cannot promote`
     });
   }
   if (change.verification?.passed !== true) {
-    throw new HTTPException13(422, {
+    throw new HTTPException14(422, {
       message: "definition_edit change must pass verification before promote"
     });
   }
   if (!change.baseVersionId) {
-    throw new HTTPException13(422, { message: "rig change has no base version" });
+    throw new HTTPException14(422, { message: "rig change has no base version" });
   }
   const base = await getRigVersion2(deps.db, rig.workspaceId, rig.id, change.baseVersionId);
   if (!base) {
-    throw new HTTPException13(404, { message: "base rig version not found" });
+    throw new HTTPException14(404, { message: "base rig version not found" });
   }
   const payload = change.payload;
   const nextDefinition = {
@@ -7204,7 +7268,7 @@ async function promoteVerifiedDefinitionEditChangeForApi(deps, grant, rig, chang
 }
 async function createRigVersionForApi(deps, grant, rig, payload) {
   if (!rig.activeVersion) {
-    throw new HTTPException13(422, { message: "rig has no active version" });
+    throw new HTTPException14(422, { message: "rig has no active version" });
   }
   assertUniqueCheckNames(payload.checks);
   await assertVariableSetsExist(
@@ -7441,13 +7505,13 @@ import {
   areGitHubRepositoriesAllowedForWorkspace,
   requireFileForSubject
 } from "@opengeni/db";
-import { HTTPException as HTTPException14 } from "hono/http-exception";
+import { HTTPException as HTTPException15 } from "hono/http-exception";
 function validateToolRefs(tools, settings) {
   const mcpServerIds = new Set(settings.mcpServers.map((server) => server.id));
   const out = [];
   for (const tool of tools) {
     if (tool.kind !== "mcp") {
-      throw new HTTPException14(422, {
+      throw new HTTPException15(422, {
         message: `unsupported tool kind: ${tool.kind}`
       });
     }
@@ -7456,7 +7520,7 @@ function validateToolRefs(tools, settings) {
       if (optional) {
         continue;
       }
-      throw new HTTPException14(422, { message: `unknown MCP server id: ${tool.id}` });
+      throw new HTTPException15(422, { message: `unknown MCP server id: ${tool.id}` });
     }
     out.push({
       kind: "mcp",
@@ -7494,7 +7558,7 @@ function assertToolRefsSubset(requested, allowed, message = "requested tools exc
   const allowedIds = new Set(allowed.map((tool) => `${tool.kind}:${tool.id}`));
   const widened = requested.find((tool) => !allowedIds.has(`${tool.kind}:${tool.id}`));
   if (widened) {
-    throw new HTTPException14(403, { message: `${message}: ${widened.id}` });
+    throw new HTTPException15(403, { message: `${message}: ${widened.id}` });
   }
 }
 function validateToolRefsForSessionPolicy(input) {
@@ -7523,7 +7587,7 @@ function normalizeResources(resources) {
       try {
         normalizedUri = normalizeRepositoryTransportUri(resource.uri);
       } catch (error) {
-        throw new HTTPException14(422, {
+        throw new HTTPException15(422, {
           message: error instanceof Error ? error.message : "invalid repository URI"
         });
       }
@@ -7532,14 +7596,14 @@ function normalizeResources(resources) {
       );
       const credentialBindingId = gitCredentialBindingIdForRepository(resource, credentialProvider);
       if ((resource.credentialBindingId || resource.connectionId || resource.access) && !credentialProvider) {
-        throw new HTTPException14(422, {
+        throw new HTTPException15(422, {
           message: "repository credential bindings and access intent require a Git provider"
         });
       }
       if (credentialProvider && credentialBindingId) {
         const boundProvider = credentialBindingProviders.get(credentialBindingId);
         if (boundProvider && boundProvider !== credentialProvider) {
-          throw new HTTPException14(422, {
+          throw new HTTPException15(422, {
             message: `credential binding ${credentialBindingId} is assigned to multiple Git providers`
           });
         }
@@ -7567,7 +7631,7 @@ function normalizeResources(resources) {
     const mountCollisionKey = normalized.mountPath ? resourceMountPathCollisionKey(normalized.mountPath) : void 0;
     const mounted = mountCollisionKey ? mountPaths.get(mountCollisionKey) : void 0;
     if (mounted && mounted !== key) {
-      throw new HTTPException14(422, {
+      throw new HTTPException15(422, {
         message: `duplicate resource mount path: ${normalized.mountPath}`
       });
     }
@@ -7577,7 +7641,7 @@ function normalizeResources(resources) {
     const identity = resourceIdentityKey(normalized);
     const seenIdentity = identities.get(identity);
     if (seenIdentity && seenIdentity !== key) {
-      throw new HTTPException14(422, {
+      throw new HTTPException15(422, {
         message: `duplicate resource with different settings: ${identity}`
       });
     }
@@ -7594,7 +7658,7 @@ function mergeResourceRefs(existing, additions) {
     return mergeContractResourceRefs(existing, additions, { rejectConflicts: true });
   } catch (error) {
     if (error instanceof ResourceRefConflictError) {
-      throw new HTTPException14(422, { message: error.message });
+      throw new HTTPException15(422, { message: error.message });
     }
     throw error;
   }
@@ -7618,14 +7682,14 @@ function personalGitHubRepositoryResources(resources) {
   for (const resource of resources) {
     if (!isPersonalGitHubRepositoryCandidate(resource)) {
       if (resource.kind === "repository" && resource.connectionType === "github_personal") {
-        throw new HTTPException14(422, {
+        throw new HTTPException15(422, {
           message: "personal GitHub repository resources require the dedicated GitHub provider"
         });
       }
       continue;
     }
     if (!PERSONAL_GITHUB_BINDING_ID_PATTERN.test(resource.credentialBindingId) || typeof resource.repositoryId !== "string" || !/^[1-9]\d*$/u.test(resource.repositoryId) || resource.access !== "read" && resource.access !== "write" || resource.installationId !== void 0 || resource.githubInstallationId !== void 0 || resource.githubRepositoryId !== void 0 || resource.connectionId !== void 0 || resource.projectId !== void 0) {
-      throw new HTTPException14(422, {
+      throw new HTTPException15(422, {
         message: "personal GitHub repository resources require one opaque binding, provider repository id, and explicit read or write access"
       });
     }
@@ -7633,10 +7697,10 @@ function personalGitHubRepositoryResources(resources) {
     try {
       uri = new URL(resource.uri);
     } catch {
-      throw new HTTPException14(422, { message: "personal GitHub repository URI is invalid" });
+      throw new HTTPException15(422, { message: "personal GitHub repository URI is invalid" });
     }
     if (uri.protocol !== "https:" || uri.hostname !== "github.com" || uri.port !== "" || uri.username !== "" || uri.password !== "" || uri.search !== "" || uri.hash !== "" || uri.pathname.endsWith(".git") || uri.pathname.split("/").filter(Boolean).length !== 2 || resource.uri !== `${uri.origin}${uri.pathname.replace(/\/$/u, "")}`) {
-      throw new HTTPException14(422, {
+      throw new HTTPException15(422, {
         message: "personal GitHub repository resources require a canonical GitHub HTTPS URI"
       });
     }
@@ -7646,7 +7710,7 @@ function personalGitHubRepositoryResources(resources) {
   for (const resource of selected) {
     const key = `${resource.credentialBindingId}\0${resource.repositoryId}`;
     if (identities.has(key)) {
-      throw new HTTPException14(422, {
+      throw new HTTPException15(422, {
         message: "personal GitHub repository resources must not contain duplicates"
       });
     }
@@ -7657,7 +7721,7 @@ function personalGitHubRepositoryResources(resources) {
 function validateGitHubRepositorySelectionShape(resources) {
   const installationIds = validateGitHubRepositorySelectionShapes(resources);
   if (installationIds.length > 1) {
-    throw new HTTPException14(422, {
+    throw new HTTPException15(422, {
       message: "GitHub App repository resources must belong to one installation"
     });
   }
@@ -7682,7 +7746,7 @@ function gitHubRepositorySelections(resources) {
     const installationId = positiveInteger2(installationRaw);
     const repositoryId = positiveInteger2(repositoryRaw);
     if (!installationId || !repositoryId) {
-      throw new HTTPException14(422, {
+      throw new HTTPException15(422, {
         message: "GitHub App repository resources require positive github_installation_id and github_repository_id"
       });
     }
@@ -7704,14 +7768,14 @@ async function validateGitHubRepositorySelection(db, workspaceId, resources) {
       installationId,
       repositoryIds
     )) {
-      throw new HTTPException14(422, {
+      throw new HTTPException15(422, {
         message: "GitHub App repository resources must be authorized for a GitHub App installation linked to this workspace"
       });
     }
   }
 }
 function isAuthoritativeGitHubRepositorySelectionError(error) {
-  return error instanceof HTTPException14 && error.status === 422;
+  return error instanceof HTTPException15 && error.status === 422;
 }
 async function validateFileResources(db, accountId, workspaceId, subjectId, resources) {
   const fileIds = /* @__PURE__ */ new Set();
@@ -7720,7 +7784,7 @@ async function validateFileResources(db, accountId, workspaceId, subjectId, reso
       continue;
     }
     if (fileIds.has(resource.fileId)) {
-      throw new HTTPException14(422, { message: `duplicate file resource: ${resource.fileId}` });
+      throw new HTTPException15(422, { message: `duplicate file resource: ${resource.fileId}` });
     }
     fileIds.add(resource.fileId);
     const file = await requireFileForSubject(db, {
@@ -7730,10 +7794,10 @@ async function validateFileResources(db, accountId, workspaceId, subjectId, reso
       fileId: resource.fileId
     }).catch(() => null);
     if (!file) {
-      throw new HTTPException14(422, { message: `unknown file resource: ${resource.fileId}` });
+      throw new HTTPException15(422, { message: `unknown file resource: ${resource.fileId}` });
     }
     if (file.status !== "ready") {
-      throw new HTTPException14(422, {
+      throw new HTTPException15(422, {
         message: `file resource ${resource.fileId} is ${file.status}`
       });
     }
@@ -7744,7 +7808,7 @@ function normalizeMountPath(path) {
     return normalizeResourceMountPath(path);
   } catch (error) {
     if (!(error instanceof ResourceMountPathError)) throw error;
-    throw new HTTPException14(422, { message: `invalid resource mount path: ${path}` });
+    throw new HTTPException15(422, { message: `invalid resource mount path: ${path}` });
   }
 }
 function positiveInteger2(value) {
@@ -8825,11 +8889,11 @@ import {
   withWorkspaceSubjectRls as withWorkspaceSubjectRls5,
   resolveXaiProviderAccountAuthoritySnapshotForAcceptance
 } from "@opengeni/db";
-import { HTTPException as HTTPException20 } from "hono/http-exception";
+import { HTTPException as HTTPException21 } from "hono/http-exception";
 import { isDeepStrictEqual } from "util";
 
 // src/domain/host-mcp-task-admission.ts
-import { HTTPException as HTTPException15 } from "hono/http-exception";
+import { HTTPException as HTTPException16 } from "hono/http-exception";
 import {
   HostMcpBindingDefinition,
   HostMcpCreateSelections
@@ -8842,7 +8906,7 @@ import {
 function prepareHostMcpTaskAdmission(input) {
   const selections = HostMcpCreateSelections.parse(input.selections);
   if (!input.authorization || input.authorization.grant.accountId !== input.grant.accountId || input.authorization.grant.subjectId !== input.grant.subjectId || input.authorization?.grant.workspaceId !== input.grant.workspaceId || input.grant.metadata?.["sessionId"] || !hasPermission(input.authorization?.grant.permissions ?? [], "connections:read") || !hasPermission(input.grant.permissions, "connections:read"))
-    throw new HTTPException15(403, {
+    throw new HTTPException16(403, {
       message: "Host task selection requires a verified owner"
     });
   const reauthorize = prepareHostMcpOwnerAuthorization(
@@ -8855,7 +8919,7 @@ function prepareHostMcpTaskAdmission(input) {
       (candidate) => candidate.id === selection.serverId
     );
     if (!server?.url || server.connectionRef?.authoritySource !== "host" || !server.connectionRef.hostBinding || !input.tools.some((tool) => tool.kind === "mcp" && tool.id === selection.serverId))
-      throw new HTTPException15(422, {
+      throw new HTTPException16(422, {
         message: "Host task selection must match a selected configured server"
       });
     assertHostMcpAuthoritySourceAdmissionEnabled(input.settings, server.connectionRef);
@@ -8878,7 +8942,7 @@ function prepareHostMcpTaskAdmission(input) {
       if (prepared.length) await captureHostMcpTaskAuthorities(tx, owner, task, prepared);
     } catch (error) {
       if (error instanceof HostMcpDelegationAuthorityError)
-        throw new HTTPException15(403, { message: error.message });
+        throw new HTTPException16(403, { message: error.message });
       throw error;
     }
   };
@@ -9019,14 +9083,14 @@ import {
   publishDurableSessionEvents as publishDurableSessionEvents2,
   publishDurableWorkspaceControlEvent
 } from "@opengeni/events";
-import { HTTPException as HTTPException19 } from "hono/http-exception";
+import { HTTPException as HTTPException20 } from "hono/http-exception";
 
 // src/domain/external-creation-attribution.ts
-import { HTTPException as HTTPException16 } from "hono/http-exception";
+import { HTTPException as HTTPException17 } from "hono/http-exception";
 var EXTERNAL_CREATION_ATTRIBUTION_KEY = "opengeniExternalCreationAttribution";
 function externalCreationMetadata(metadata, authorization, grant) {
   if (metadata && Object.hasOwn(metadata, EXTERNAL_CREATION_ATTRIBUTION_KEY)) {
-    throw new HTTPException16(422, {
+    throw new HTTPException17(422, {
       message: `${EXTERNAL_CREATION_ATTRIBUTION_KEY} is server-owned`
     });
   }
@@ -9042,11 +9106,11 @@ import {
   numberTimelineAnnotations
 } from "@opengeni/contracts";
 import { getSessionEvent } from "@opengeni/db";
-import { HTTPException as HTTPException17 } from "hono/http-exception";
+import { HTTPException as HTTPException18 } from "hono/http-exception";
 var SOURCE_CONTEXT_BYTES = 160;
 var ANSI_SEQUENCE = new RegExp("\\u001B\\[[0-?]*[ -/]*[@-~]", "g");
 function invalidAnnotationSource() {
-  throw new HTTPException17(422, { message: "Invalid timeline annotation source" });
+  throw new HTTPException18(422, { message: "Invalid timeline annotation source" });
 }
 function safeJson(value) {
   try {
@@ -9196,7 +9260,7 @@ import {
 import {
   getConnectionMetadata as getConnectionMetadata3
 } from "@opengeni/db";
-import { HTTPException as HTTPException18 } from "hono/http-exception";
+import { HTTPException as HTTPException19 } from "hono/http-exception";
 function openGeniSlackBotMetadata(metadata) {
   const parsed = OpenGeniSlackBotConnectionMetadata.safeParse(metadata);
   return parsed.success ? parsed.data : null;
@@ -9215,12 +9279,12 @@ function hasReservedOpenGeniSlackBotSessionMetadata(metadata) {
 async function requireOpenGeniSlackBotConnection(db, workspaceId, connectionId) {
   const connection = await getConnectionMetadata3(db, workspaceId, connectionId, null);
   if (!connection || !isOpenGeniSlackBotConnection(connection)) {
-    throw new HTTPException18(422, {
+    throw new HTTPException19(422, {
       message: "slackBotConnectionId must reference an OpenGeni Slack bot connection"
     });
   }
   if (connection.status !== "active") {
-    throw new HTTPException18(422, {
+    throw new HTTPException19(422, {
       message: `OpenGeni Slack bot connection is not active (${connection.status})`
     });
   }
@@ -9564,25 +9628,25 @@ var sessionMcpCredentialHeaderName = /^[A-Za-z0-9!#$%&'*+.^_`|~-]+$/;
 async function requireAtomicPersonalResourceAttachment(deps, authorization, workspaceId, intent, existingSession) {
   if (!intent) return;
   if (!authorization) {
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "Personal resources require the owning managed-human session."
     });
   }
   try {
     requireVerifiedOwningUser(authorization, workspaceId);
   } catch (error) {
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "Personal resources require the owning managed-human session.",
       cause: error
     });
   }
   if (!await sessionTenancyProductActivated2(deps.db, workspaceId)) {
-    throw new HTTPException19(409, {
+    throw new HTTPException20(409, {
       message: "Session tenancy is not activated for this organization."
     });
   }
   if (existingSession && intent.expectedAuthorityEpoch === void 0) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: "Personal-resource attachment requires expectedAuthorityEpoch."
     });
   }
@@ -9610,7 +9674,7 @@ function resolveFirstPartyMcpToolsForCreate(requested, parentStored, policy = {
       const parentCeiling = effectiveFirstPartyMcpToolCeiling(parentStored, policy);
       const widened = requested.find((tool) => !parentCeiling.has(tool));
       if (widened) {
-        throw new HTTPException19(403, {
+        throw new HTTPException20(403, {
           message: `child first-party MCP tools may only narrow the parent session selection: ${widened}`
         });
       }
@@ -9639,7 +9703,7 @@ function sessionSpawnDenialEnvelope(error) {
 function serviceInitiatorForGrant(grant) {
   if (!grant.serviceInitiator) {
     if (grant.serviceInitiatorContext) {
-      throw new HTTPException19(403, {
+      throw new HTTPException20(403, {
         message: "service initiator context requires a signed service initiator"
       });
     }
@@ -9647,13 +9711,13 @@ function serviceInitiatorForGrant(grant) {
   }
   const initiator = ServiceTurnInitiator.safeParse(grant.serviceInitiator);
   if (!initiator.success) {
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "a delegated command initiator must be a bounded service principal"
     });
   }
   const context = ServiceTurnInitiatorContext.safeParse(grant.serviceInitiatorContext ?? {});
   if (!context.success) {
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "delegated service initiator context is invalid or reserved"
     });
   }
@@ -9661,7 +9725,7 @@ function serviceInitiatorForGrant(grant) {
   const callerAttemptId = grant.metadata?.["attemptId"];
   const callerExecutionGeneration = grant.metadata?.["executionGeneration"];
   if (callerTurnId !== void 0 || callerAttemptId !== void 0 || callerExecutionGeneration !== void 0) {
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "a service initiator cannot replace an exact agent-attempt initiator"
     });
   }
@@ -9679,7 +9743,7 @@ function creationInitiatorForGrant(grant) {
   const hasCallerTurnClaim = callerTurnId !== void 0 || callerAttemptId !== void 0 || callerExecutionGeneration !== void 0;
   if (hasCallerTurnClaim) {
     if (typeof callerSessionId !== "string" || typeof callerTurnId !== "string" || typeof callerAttemptId !== "string" || typeof callerExecutionGeneration !== "number" || !Number.isSafeInteger(callerExecutionGeneration) || callerExecutionGeneration < 1) {
-      throw new HTTPException19(403, {
+      throw new HTTPException20(403, {
         message: "caller attempt claims are incomplete"
       });
     }
@@ -9710,31 +9774,31 @@ function normalizedSessionMcpCredentialHeaders(headers) {
   }
   const entries = Object.entries(headers).map(([name, value]) => [name.trim(), value]).filter(([name]) => name.length > 0);
   if (entries.length > maxSessionMcpCredentialHeaders) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: `a session MCP server supports at most ${maxSessionMcpCredentialHeaders} credential headers`
     });
   }
   const seen = /* @__PURE__ */ new Set();
   for (const [name, value] of entries) {
     if (!sessionMcpCredentialHeaderName.test(name)) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `invalid credential header name: ${name}`
       });
     }
     const lower = name.toLowerCase();
     if (seen.has(lower)) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `duplicate credential header name: ${name}`
       });
     }
     seen.add(lower);
     if (value.length === 0 || value.length > maxSessionMcpCredentialHeaderValueLength) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `credential header ${name} must be 1-${maxSessionMcpCredentialHeaderValueLength} characters`
       });
     }
     if (/[\u0000-\u0008\u000A-\u001F\u007F]/.test(value)) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `credential header ${name} contains forbidden control characters`
       });
     }
@@ -9802,13 +9866,13 @@ function validateSessionMcpServersForCreate(settings, grant, servers) {
   for (const server of servers) {
     assertHostMcpAuthoritySourceAdmissionEnabled(settings, server.connectionRef);
     if (seenIds.has(server.id)) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `duplicate session MCP server id: ${server.id}`
       });
     }
     seenIds.add(server.id);
     if (reservedSessionMcpServerIds.has(server.id) || existingIds.has(server.id)) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `MCP server id already exists: ${server.id}`
       });
     }
@@ -9850,13 +9914,13 @@ function validateInheritedSessionMcpServersForCreate(servers) {
   const seenIds = /* @__PURE__ */ new Set();
   for (const server of servers) {
     if (seenIds.has(server.id)) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `duplicate inherited session MCP server id: ${server.id}`
       });
     }
     seenIds.add(server.id);
     if (reservedSessionMcpServerIds.has(server.id)) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `reserved inherited session MCP server id: ${server.id}`
       });
     }
@@ -9888,13 +9952,13 @@ function validateSessionMcpCredentialUpdates(input) {
   const seenIds = /* @__PURE__ */ new Set();
   const encryptedUpdates = input.updates.map((update) => {
     if (seenIds.has(update.id)) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `duplicate session MCP credential update id: ${update.id}`
       });
     }
     seenIds.add(update.id);
     if (!knownIds.has(update.id)) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `unknown session MCP server id: ${update.id}`
       });
     }
@@ -9961,7 +10025,7 @@ async function createAndStartSessionWithOutcome(input) {
   let targetSeededBeforeCreateCommit = false;
   const beforeCreateCommit = requiresActiveWorkspaceCustomModel || input.consumeNewSessionDraft || input.beforeCreateCommit || preflightTarget || targetPreflightFailureMessage ? async (tx, sessionId, context) => {
     if (targetPreflightFailureMessage && context?.created !== false) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: targetPreflightFailureMessage
       });
     }
@@ -9977,7 +10041,7 @@ async function createAndStartSessionWithOutcome(input) {
         reference
       });
       if (!active) {
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: `model is not available: ${input.model}`
         });
       }
@@ -10002,7 +10066,7 @@ async function createAndStartSessionWithOutcome(input) {
         workingDir: preflightTarget.workingDir
       });
       if (!seeded.swapped) {
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: `cannot target sandbox ${seedTargetForNewSession.sandboxId}: target authority changed during session creation`
         });
       }
@@ -10187,7 +10251,7 @@ async function finishStartSession(input, session) {
       input.seedTargetSandbox.workingDir ?? null
     );
     if (!seeded.swapped) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `cannot target sandbox ${input.seedTargetSandbox.sandboxId}: ${seeded.reason ?? "target is not attachable"}`
       });
     }
@@ -10262,7 +10326,7 @@ function canonicalConfiguredModel(settings, model) {
   if (settings.supergrokSubscriptionEnabled && canonicalModel.startsWith(XAI_SUBSCRIPTION_MODEL_ID_PREFIX)) {
     return canonicalModel;
   }
-  throw new HTTPException19(422, { message: `model is not available: ${model}` });
+  throw new HTTPException20(422, { message: `model is not available: ${model}` });
 }
 function assertConfiguredModel(settings, model) {
   canonicalConfiguredModel(settings, model);
@@ -10303,7 +10367,7 @@ async function assertWorkspaceModelPolicyAllows(db, settings, workspaceId, model
     modelId: canonicalModel
   });
   if (!verdict.allowed) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: verdict.reason === "provider" ? `model "${canonicalModel}" is not allowed by this workspace's model policy: provider "${providerId}" is not in the allowed providers` : `model "${canonicalModel}" is not allowed by this workspace's model policy`
     });
   }
@@ -10311,10 +10375,10 @@ async function assertWorkspaceModelPolicyAllows(db, settings, workspaceId, model
 async function requireQueuedTurnForApi(db, workspaceId, sessionId, turnId) {
   const turn = await getSessionTurn(db, workspaceId, turnId);
   if (!turn || turn.sessionId !== sessionId) {
-    throw new HTTPException19(404, { message: "session turn not found" });
+    throw new HTTPException20(404, { message: "session turn not found" });
   }
   if (turn.status !== "queued") {
-    throw new HTTPException19(409, {
+    throw new HTTPException20(409, {
       message: `turn is ${turn.status}; only queued turns can be changed`
     });
   }
@@ -10425,7 +10489,7 @@ async function postUserMessageTurn(input) {
     assertSessionAllowsProductModel(sessionForModelGate, effectiveModelForGate);
   } catch (error) {
     if (error instanceof CodexCompactionV2ProviderLockedError) {
-      throw new HTTPException19(422, { message: error.message, cause: error });
+      throw new HTTPException20(422, { message: error.message, cause: error });
     }
     throw error;
   }
@@ -10491,7 +10555,7 @@ async function postUserMessageTurn(input) {
                 reference
               });
               if (!active) {
-                throw new HTTPException19(422, {
+                throw new HTTPException20(422, {
                   message: `model is not available: ${freshWorkspaceCustomModel}`
                 });
               }
@@ -10506,19 +10570,19 @@ async function postUserMessageTurn(input) {
       throw error;
     }
     if (error instanceof PersonalResourceAttachmentAcceptanceError) {
-      throw new HTTPException19(
+      throw new HTTPException20(
         error.kind === "invalid" ? 422 : error.kind === "forbidden" ? 403 : 409,
         { message: error.message, cause: error }
       );
     }
     if (error instanceof QueueCommandConflictError || error instanceof SessionControlConflictError) {
-      throw new HTTPException19(409, { message: error.message });
+      throw new HTTPException20(409, { message: error.message });
     }
     if (error instanceof Error && error.message.includes("cancelled")) {
-      throw new HTTPException19(409, { message: error.message });
+      throw new HTTPException20(409, { message: error.message });
     }
     if (error instanceof Error && error.message.startsWith("Unknown session MCP server")) {
-      throw new HTTPException19(422, { message: error.message });
+      throw new HTTPException20(422, { message: error.message });
     }
     throw error;
   }
@@ -10574,28 +10638,28 @@ function resolveSessionCreateScope(input) {
   } else {
     const agentAccess = requested.agentAccessProvided ? requested.agentAccess : parent.agentAccess;
     if (AGENT_ACCESS_WIDTH[agentAccess] > AGENT_ACCESS_WIDTH[parent.agentAccess]) {
-      throw new HTTPException19(403, {
+      throw new HTTPException20(403, {
         message: "child agent access may only narrow the parent session"
       });
     }
     if (requested.endUserProvided) {
       const same = requested.scopeSubjectId !== null && parent.scopeSubjectId !== null && requested.scopeSubjectId === parent.scopeSubjectId;
       if (!same) {
-        throw new HTTPException19(403, {
+        throw new HTTPException20(403, {
           message: "child end-user label must equal the parent session label"
         });
       }
     }
     const memoryScope = requested.memoryScopeProvided ? requested.memoryScope : parent.memoryScope;
     if (MEMORY_SCOPE_WIDTH[memoryScope] > MEMORY_SCOPE_WIDTH[parent.memoryScope]) {
-      throw new HTTPException19(403, {
+      throw new HTTPException20(403, {
         message: "child memory scope may only narrow the parent session"
       });
     }
     resolved = { agentAccess, scopeSubjectId: parent.scopeSubjectId, memoryScope };
   }
   if (resolved.memoryScope === "user" && resolved.scopeSubjectId === null) {
-    throw new HTTPException19(422, { message: 'memoryScope "user" requires an authenticated user' });
+    throw new HTTPException20(422, { message: 'memoryScope "user" requires an authenticated user' });
   }
   return resolved;
 }
@@ -10645,14 +10709,14 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   const externalBeforeCreateCommit = externalContinuationCommitAuthorizer(authorization);
   const hostSelections = payload.selectedHostMcpDelegations ?? [];
   if (hostSelections.length && (!authorization || authorization.grant.accountId !== grant.accountId || authorization.grant.subjectId !== grant.subjectId || authorization?.grant.workspaceId !== workspaceId || !hasPermission(authorization?.grant.permissions ?? [], "connections:read") || !hasPermission(grant.permissions, "connections:read") || grant.metadata?.["sessionId"] || payload.startMode === "realtime")) {
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "Host selection requires a verified direct owner and non-realtime start"
     });
   }
   if (hostSelections.length)
     prepareHostMcpOwnerAuthorization(authorization, workspaceId, "connections:read");
   if (hasReservedOpenGeniSlackBotSessionMetadata(payload.metadata)) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: `${OPENGENI_SLACK_BOT_SESSION_METADATA_KEY2} is reserved for scheduler routing`
     });
   }
@@ -10660,13 +10724,13 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   const visibilityProvided = hasOwnProperty(rawPayload, "visibility");
   if (payload.visibility === "private" && !grant.metadata?.["sessionId"]) {
     if (!authorization) {
-      throw new HTTPException19(403, {
+      throw new HTTPException20(403, {
         message: "managed human session required"
       });
     }
     await requireManagedHumanPrivateSessionCreate(unresolvedDeps, authorization, workspaceId);
     if (payload.sandbox === "shared" || typeof payload.sandbox === "object") {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: "Only-me sessions require their own sandbox"
       });
     }
@@ -10681,14 +10745,14 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
       });
     } catch (error) {
       if (error instanceof SessionAuthorizationDeniedError) {
-        throw new HTTPException19(403, { message: error.message, cause: error });
+        throw new HTTPException20(403, { message: error.message, cause: error });
       }
       throw error;
     }
   }
   const parentSession = parentSessionId ? await getSession2(db, workspaceId, parentSessionId) : null;
   if (parentSessionId && !parentSession) {
-    throw new HTTPException19(404, {
+    throw new HTTPException20(404, {
       message: `parent session not found in workspace: ${parentSessionId}`
     });
   }
@@ -10696,7 +10760,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   const workspaceSessionToolDefaults = resolveWorkspaceSessionToolDefaults2(workspace.settings);
   const parentAuthority = parentSession ? await getSessionAuthorityProjection2(db, workspaceId, parentSession.id) : null;
   if (parentSession && !parentAuthority) {
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "parent session authority is unavailable"
     });
   }
@@ -10708,7 +10772,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
       parentVisibility: parentAuthority?.visibility ?? null
     });
   } catch (error) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: error instanceof Error ? error.message : "invalid child visibility"
     });
   }
@@ -10719,7 +10783,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
       parentSession?.bundledSkillIds
     );
   } catch (error) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: error instanceof Error ? error.message : "Invalid bundled Skill selection"
     });
   }
@@ -10747,7 +10811,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
     creationInitiator.actor.attemptId
   ) : null;
   if (creationInitiator.actor && (!parentCallingTurn || parentCallingTurn.sessionId !== parentSession?.id)) {
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "caller attempt does not belong to the parent session"
     });
   }
@@ -10803,12 +10867,12 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
       }
     } catch (error) {
       if (error instanceof SessionIdConflictError) {
-        throw new HTTPException19(409, {
+        throw new HTTPException20(409, {
           message: "requested session id is already in use"
         });
       }
       if (error instanceof SessionCreateIdempotencyConflictError) {
-        throw new HTTPException19(409, { message: error.message, cause: error });
+        throw new HTTPException20(409, { message: error.message, cause: error });
       }
       throw error;
     }
@@ -10861,7 +10925,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
         }
       );
     } catch (error) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: error instanceof Error ? error.message : "invalid child goal root constraints"
       });
     }
@@ -10914,12 +10978,12 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
     for (const capabilityId of selectedInstalledSkillIds) {
       const installed = installedById.get(capabilityId);
       if (!installed) {
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: `Session-selected Skill is not installed in this workspace: ${capabilityId}`
         });
       }
       if (installed.activationMode !== "session_selected") {
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: `Installed Skill does not require explicit session selection: ${capabilityId}`
         });
       }
@@ -10934,7 +10998,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   try {
     skills = SessionSkills.parse([...inheritedOrSubmittedSkills, ...selectedInstalledSkills]);
   } catch (error) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: error instanceof Error ? error.message : "invalid session Skill selection"
     });
   }
@@ -10998,7 +11062,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   const captureLinkedAuthority = prepareExternalLinkTurnAdmission(authorization);
   await validateGitHubRepositorySelection(db, workspaceId, resources);
   if (resources.some((resource) => resource.kind === "file") && !objectStorage) {
-    throw new HTTPException19(503, {
+    throw new HTTPException20(503, {
       message: "object storage is not configured"
     });
   }
@@ -11016,7 +11080,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
     const rig = await getRig4(db, grant, requestedRigId);
     if (!rig || !rig.activeVersion) {
       if (payload.rigId) {
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: rig ? `rig ${payload.rigId} has no active version to bind` : `unknown rigId: ${payload.rigId}`
         });
       }
@@ -11037,7 +11101,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   if (payload.channelId) {
     const channel = await getChannel(db, workspaceId, payload.channelId);
     if (!channel) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `unknown channelId: ${payload.channelId}`
       });
     }
@@ -11053,7 +11117,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   const reasoningEffort = payload.reasoningEffort ?? inheritedReasoningEffort;
   const latencyMode = payload.latencyMode ?? inheritedLatencyMode;
   if (payload.expectedNewSessionDraftRevision !== void 0 && payload.rigId === null) {
-    throw new HTTPException19(409, {
+    throw new HTTPException20(409, {
       message: "The submitted session options are not represented by the new-session draft"
     });
   }
@@ -11094,7 +11158,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   if (parentFirstPartyMcpPermissions && payload.firstPartyMcpPermissions?.some(
     (permission) => !hasPermission(parentFirstPartyMcpPermissions, permission)
   )) {
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "child first-party MCP permissions may only narrow the parent session grant"
     });
   }
@@ -11102,19 +11166,19 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
     (permission) => hasPermission(grant.permissions, permission)
   ) : null);
   if (firstPartyMcpPermissions && firstPartyMcpPermissions.length === 0) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: "firstPartyMcpPermissions must not be empty; omit it for the default worker permission set"
     });
   }
   for (const permission of firstPartyMcpPermissions ?? []) {
     if (!hasPermission(grant.permissions, permission)) {
-      throw new HTTPException19(403, {
+      throw new HTTPException20(403, {
         message: `cannot grant first-party MCP permission beyond the creating grant: ${permission}`
       });
     }
   }
   if (effectiveGoal && firstPartyMcpPermissions && !firstPartyMcpPermissions.includes("goals:manage")) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: "goal-bearing sessions require goals:manage in the resulting first-party MCP permission set"
     });
   }
@@ -11123,7 +11187,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
     (tool) => !deploymentFirstPartyMcpToolPolicy.allowed.includes(tool)
   );
   if (disallowedFirstPartyMcpTool) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: `first-party MCP tool is disabled by deployment policy: ${disallowedFirstPartyMcpTool}`
     });
   }
@@ -11156,13 +11220,13 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
       (name) => !firstPartyMcpTools.includes(name)
     );
     if (missingGoalTools.length > 0) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `goal-bearing sessions require first-party MCP tools: ${missingGoalTools.join(", ")}`
       });
     }
   }
   if (payload.targetSandboxId && payload.sandbox !== void 0 && payload.sandbox !== "new") {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: "targetSandboxId requires an own sandbox (omit sandbox or pass 'new'); it cannot join a shared group"
     });
   }
@@ -11176,7 +11240,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   const rigVersionMatchesGroup = (memberRigVersionId) => memberRigVersionId === frozenRigVersionId;
   if (sandboxChoice === "shared") {
     if (!parentSessionId) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: "sandbox:'shared' requires a parent session (spawn from inside a session); use 'new' for a top-level create."
       });
     }
@@ -11199,7 +11263,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
     }
     if (variableSetMismatch || rigMismatch) {
       if (payload.sandbox === "shared") {
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: variableSetMismatch ? "sandbox:'shared' requires the same variableSet / same environment as the creator's box (the box variable set/environment is fixed at creation); omit sandbox or pass 'new' when attaching a different variableSet/environment." : "sandbox:'shared' requires the same rig as the creator's box (the box's rig setup is fixed at creation); omit sandbox or pass 'new' when binding a different rig."
         });
       }
@@ -11215,7 +11279,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
   } else if (typeof sandboxChoice === "object") {
     const member = await getAnySessionInGroup(db, workspaceId, sandboxChoice.groupId);
     if (!member) {
-      throw new HTTPException19(404, {
+      throw new HTTPException20(404, {
         message: `sandbox group not found in workspace: ${sandboxChoice.groupId}`
       });
     }
@@ -11228,7 +11292,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
       if (!memberVariableSetSelections.every(
         (memberVariableSetIds) => variableSetsMatchGroup(memberVariableSetIds)
       )) {
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: `sandbox group ${sandboxChoice.groupId} runs a different variableSet / different environment (the box variable set/environment is fixed at creation); create with the group's variableSet/environment or omit sandbox for an own box.`
         });
       }
@@ -11240,7 +11304,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
       if (!memberRigVersionIds.every(
         (memberRigVersionId) => rigVersionMatchesGroup(memberRigVersionId)
       )) {
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: `sandbox group ${sandboxChoice.groupId} runs a different rig (the box's rig setup is fixed at creation); create with the group's rig or omit sandbox for an own box.`
         });
       }
@@ -11250,12 +11314,12 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
     inheritedSandboxOs = member.sandboxOs;
   }
   if (payload.workingDir !== void 0 && !payload.targetSandboxId) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: "workingDir requires targetSandboxId (it is the targeted machine's working directory)"
     });
   }
   if (inheritedBackend === void 0 && !payload.targetSandboxId && (payload.sandboxBackend ?? settings.sandboxBackend) === "selfhosted") {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: "selfhosted sessions require targetSandboxId; select an online Connected Machine"
     });
   }
@@ -11288,7 +11352,7 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
     workingDir: payload.workingDir ?? null
   } : inheritedActiveTarget;
   if (effectiveSandboxBackend === "selfhosted" && effectiveSeedTarget === null && managedSessionGroupBackend(settings.sandboxBackend, effectiveSandboxBackend) === null) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: "self-hosted execution runs on a Connected Machine, but no machine was selected or inherited; connect the parent session to a machine or provide machineTarget"
     });
   }
@@ -11411,39 +11475,39 @@ async function createSessionForRequestWithOutcome(unresolvedDeps, grant, workspa
     });
   } catch (error) {
     if (error instanceof PersonalResourceAttachmentAcceptanceError) {
-      throw new HTTPException19(
+      throw new HTTPException20(
         error.kind === "invalid" ? 422 : error.kind === "forbidden" ? 403 : 409,
         { message: error.message, cause: error }
       );
     }
     if (error instanceof HostMcpDelegationAuthorityError2) {
-      throw new HTTPException19(403, {
+      throw new HTTPException20(403, {
         message: "Host delegation authority unavailable",
         cause: error
       });
     }
     if (error instanceof HostMcpBindingConflictError) {
-      throw new HTTPException19(409, {
+      throw new HTTPException20(409, {
         message: "Host delegation selection conflicts",
         cause: error
       });
     }
     if (error instanceof AgentCommandAuthorityError) {
-      throw new HTTPException19(403, { message: error.message });
+      throw new HTTPException20(403, { message: error.message });
     }
     if (error instanceof SessionIdConflictError) {
-      throw new HTTPException19(409, {
+      throw new HTTPException20(409, {
         message: "requested session id is already in use"
       });
     }
     if (error instanceof NewSessionDraftConflictError) {
-      throw new HTTPException19(409, {
+      throw new HTTPException20(409, {
         message: error.message,
         cause: error
       });
     }
     if (error instanceof SessionCreateIdempotencyConflictError) {
-      throw new HTTPException19(409, { message: error.message, cause: error });
+      throw new HTTPException20(409, { message: error.message, cause: error });
     }
     throw error;
   }
@@ -11472,7 +11536,7 @@ async function createSessionForRequest(deps, grant, workspaceId, rawPayload, aut
 function prepareSelectedHostTurnAuthority(settings, tools, grant, workspaceId, selections, authorization) {
   if (!selections.length) return void 0;
   if (!authorization || authorization.grant.accountId !== grant.accountId || authorization.grant.subjectId !== grant.subjectId || authorization?.grant.workspaceId !== workspaceId || !hasPermission(authorization?.grant.permissions ?? [], "connections:read") || !hasPermission(grant.permissions, "connections:read") || grant.metadata?.["sessionId"])
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "Host selection requires a verified direct owner"
     });
   const beforeCommit = prepareHostMcpOwnerAuthorization(
@@ -11484,7 +11548,7 @@ function prepareSelectedHostTurnAuthority(settings, tools, grant, workspaceId, s
     selections.map((selection) => {
       const configured = settings.mcpServers.find((server) => server.id === selection.serverId);
       if (!configured || !tools.some((tool) => tool.kind === "mcp" && tool.id === selection.serverId) || configured.connectionRef?.authoritySource !== "host" || !configured.connectionRef.hostBinding || !configured.url)
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: "Host delegation must match a selected configured host server"
         });
       assertHostMcpAuthoritySourceAdmissionEnabled(settings, configured.connectionRef);
@@ -11504,7 +11568,7 @@ function prepareSelectedHostTurnAuthority(settings, tools, grant, workspaceId, s
         connectionRef
       });
       if (!delegation || !binding || delegation.status !== "active" || binding.status !== "active" || !definition.success || delegation.generation !== selection.generation || binding.id !== hostBinding.bindingId || binding.generation !== hostBinding.generation || stableJson4(definition.data) !== stableJson4(binding.definition))
-        throw new HTTPException19(403, { message: "Host delegation selection changed" });
+        throw new HTTPException20(403, { message: "Host delegation selection changed" });
       try {
         await captureDirectHostMcpAuthority(tx, owner, {
           sessionId,
@@ -11514,9 +11578,9 @@ function prepareSelectedHostTurnAuthority(settings, tools, grant, workspaceId, s
         });
       } catch (error) {
         if (error instanceof HostMcpDelegationAuthorityError2)
-          throw new HTTPException19(403, { message: "Host delegation authority unavailable" });
+          throw new HTTPException20(403, { message: "Host delegation authority unavailable" });
         if (error instanceof HostMcpBindingConflictError)
-          throw new HTTPException19(409, { message: "Host delegation selection conflicts" });
+          throw new HTTPException20(409, { message: "Host delegation selection conflicts" });
         throw error;
       }
     }
@@ -11556,7 +11620,7 @@ async function acceptSessionUserMessageWithOutcome(deps, grant, workspaceId, ses
     (a, b) => a.serverId < b.serverId ? -1 : a.serverId > b.serverId ? 1 : 0
   );
   if (hostSelections.length && (!input.authorization || input.authorization.grant.accountId !== grant.accountId || input.authorization.grant.subjectId !== grant.subjectId || input.authorization?.grant.workspaceId !== workspaceId || !hasPermission(input.authorization?.grant.permissions ?? [], "connections:read") || !hasPermission(grant.permissions, "connections:read") || grant.metadata?.["sessionId"]))
-    throw new HTTPException19(403, {
+    throw new HTTPException20(403, {
       message: "Host selection requires a verified direct owner"
     });
   if (hostSelections.length)
@@ -11661,7 +11725,7 @@ async function acceptSessionUserMessageWithOutcome(deps, grant, workspaceId, ses
       assertSessionAllowsProductModel(existingSession, effectiveModel);
     } catch (error) {
       if (error instanceof CodexCompactionV2ProviderLockedError) {
-        throw new HTTPException19(422, { message: error.message, cause: error });
+        throw new HTTPException20(422, { message: error.message, cause: error });
       }
       throw error;
     }
@@ -11684,7 +11748,7 @@ async function acceptSessionUserMessageWithOutcome(deps, grant, workspaceId, ses
         (resource) => !acceptedResources.has(stableJson4(resource))
       );
       if (unacceptedDraftResource) {
-        throw new HTTPException19(422, {
+        throw new HTTPException20(422, {
           message: "composer draft resources must be included in the accepted resource set"
         });
       }
@@ -11703,7 +11767,7 @@ async function acceptSessionUserMessageWithOutcome(deps, grant, workspaceId, ses
       model: effectiveModel
     });
     if (requestedResources.some((resource) => resource.kind === "file") && !objectStorage) {
-      throw new HTTPException19(503, {
+      throw new HTTPException20(503, {
         message: "object storage is not configured"
       });
     }
@@ -11889,7 +11953,7 @@ async function updateSessionMcpApprovalPolicy(deps, grant, sessionId, serverId,
     async (_session, context) => {
       const result = await context.updateSessionMcpApprovalPolicy(serverId, normalizedPolicy);
       if (!result.server) {
-        throw new HTTPException19(404, {
+        throw new HTTPException20(404, {
           message: "session MCP server not found"
         });
       }
@@ -11973,7 +12037,7 @@ async function updateSessionToolPolicy(deps, grant, sessionId, request) {
       (tool) => !validatedIds.has(`${tool.kind}:${tool.id}`)
     );
     if (unknown) {
-      throw new HTTPException19(422, {
+      throw new HTTPException20(422, {
         message: `unknown MCP server id: ${unknown.id}`
       });
     }
@@ -11985,7 +12049,7 @@ async function updateSessionToolPolicy(deps, grant, sessionId, request) {
     (tool) => !deploymentFirstPartyMcpToolPolicy.allowed.includes(tool)
   );
   if (disallowedFirstPartyMcpTool) {
-    throw new HTTPException19(422, {
+    throw new HTTPException20(422, {
       message: `first-party MCP tool is disabled by deployment policy: ${disallowedFirstPartyMcpTool}`
     });
   }
@@ -12018,7 +12082,7 @@ async function updateSessionToolPolicy(deps, grant, sessionId, request) {
       if (session.parentSessionId) {
         const parent = await context.getLockedSession(session.parentSessionId);
         if (!parent) {
-          throw new HTTPException19(409, {
+          throw new HTTPException20(409, {
             message: "parent session is no longer available"
           });
         }
@@ -12040,7 +12104,7 @@ async function updateSessionToolPolicy(deps, grant, sessionId, request) {
         ].filter((tool) => deploymentAllowedFirstPartyMcpTools.has(tool));
         if (requestedMode === "workspace_default") {
           if (!parentTracksWorkspaceDefaults) {
-            throw new HTTPException19(403, {
+            throw new HTTPException20(403, {
               message: "a child may adopt workspace defaults only while its parent tracks workspace defaults"
             });
           }
@@ -12062,7 +12126,7 @@ async function updateSessionToolPolicy(deps, grant, sessionId, request) {
             (tool) => !parentFirstPartySet.has(tool)
           );
           if (widenedFirstPartyTool) {
-            throw new HTTPException19(403, {
+            throw new HTTPException20(403, {
               message: `session OpenGeni tools may only narrow the parent policy: ${widenedFirstPartyTool}`
             });
           }
@@ -12100,7 +12164,7 @@ async function updateSessionToolPolicy(deps, grant, sessionId, request) {
             (tool) => !currentFirstPartyCeiling.has(tool)
           );
           if (widenedFirstPartyTool) {
-            throw new HTTPException19(403, {
+            throw new HTTPException20(403, {
               message: `an agent may only narrow its session OpenGeni tools: ${widenedFirstPartyTool}`
             });
           }
@@ -12167,13 +12231,13 @@ async function readSessionLineage(deps, grant, sessionId) {
   if (authorization?.relatedSessionAccess === "target") {
     const session = await getSession2(deps.db, grant.workspaceId, sessionId);
     if (!session) {
-      throw new HTTPException19(404, { message: "session not found" });
+      throw new HTTPException20(404, { message: "session not found" });
     }
     return { ancestors: [], children: [], truncated: false };
   }
   const lineage = await getSessionLineage(deps.db, grant.workspaceId, sessionId);
   if (!lineage) {
-    throw new HTTPException19(404, { message: "session not found" });
+    throw new HTTPException20(404, { message: "session not found" });
   }
   return lineage;
 }
@@ -12209,7 +12273,7 @@ function workspaceCustomModelCommitGuard(input) {
       reference
     });
     if (!active) {
-      throw new HTTPException20(422, {
+      throw new HTTPException21(422, {
         message: `model is not available: ${input.modelId}`
       });
     }
@@ -12369,7 +12433,7 @@ async function createValidatedScheduledTask(input) {
 async function frozenScheduledTaskCreatorPolicy(input) {
   const session = await getSession3(input.db, input.grant.workspaceId, input.sessionId);
   if (!session) {
-    throw new HTTPException20(403, {
+    throw new HTTPException21(403, {
       message: "the calling agent session is not available in this workspace"
     });
   }
@@ -12379,7 +12443,7 @@ async function frozenScheduledTaskCreatorPolicy(input) {
   );
   const firstPartyMcpPermissions = (session.firstPartyMcpPermissions ?? [...DEFAULT_FIRST_PARTY_MCP_PERMISSIONS2]).filter((permission) => hasPermission(input.grant.permissions, permission));
   if (firstPartyMcpPermissions.length === 0) {
-    throw new HTTPException20(403, {
+    throw new HTTPException21(403, {
       message: "the calling agent session holds no first-party MCP permission it could delegate to scheduled runs"
     });
   }
@@ -12422,7 +12486,7 @@ async function withScheduledTaskAuthorityWriteErrors(run) {
   } catch (error) {
     if (nestedPostgresSqlState5(error) === "42501") {
       const detail = nestedPostgresMessage(error);
-      throw new HTTPException20(409, {
+      throw new HTTPException21(409, {
         message: detail ? `scheduled task authority denied: ${detail}` : "scheduled task authority denied"
       });
     }
@@ -12437,20 +12501,20 @@ async function updateScheduledTaskForApi(db, workspaceId, taskId, update) {
 async function validateScheduledTaskTarget(input) {
   if (input.runMode !== "existing_session") {
     if (input.targetSessionId) {
-      throw new HTTPException20(422, {
+      throw new HTTPException21(422, {
         message: "targetSessionId requires runMode=existing_session"
       });
     }
     return null;
   }
   if (!input.targetSessionId) {
-    throw new HTTPException20(input.missingTargetStatus ?? 422, {
+    throw new HTTPException21(input.missingTargetStatus ?? 422, {
       message: input.missingTargetStatus === 404 ? "target session not found" : "targetSessionId is required when runMode=existing_session"
     });
   }
   requirePermission(input.grant, "sessions:control");
   if (input.agentConfig.goal) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "agentConfig.goal cannot be used with an existing-session target"
     });
   }
@@ -12469,44 +12533,44 @@ async function validateScheduledTaskTarget(input) {
     );
   } catch (error) {
     if (error instanceof SessionAuthorizationDeniedError) {
-      throw new HTTPException20(404, { message: "target session not found" });
+      throw new HTTPException21(404, { message: "target session not found" });
     }
     if (error instanceof SessionAuthorizationUnavailableError) {
-      throw new HTTPException20(503, { message: "session authorization is unavailable" });
+      throw new HTTPException21(503, { message: "session authorization is unavailable" });
     }
     throw error;
   }
   const session = await getSession3(input.db, input.grant.workspaceId, input.targetSessionId);
   if (!session || session.accountId !== input.grant.accountId) {
-    throw new HTTPException20(404, { message: "target session not found" });
+    throw new HTTPException21(404, { message: "target session not found" });
   }
   if (input.agentConfig.bundledSkillIds !== void 0 && !isDeepStrictEqual(input.agentConfig.bundledSkillIds, session.bundledSkillIds)) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "An existing-session schedule cannot change that session's bundled Skill selection"
     });
   }
   if (session.status === "cancelled") {
-    throw new HTTPException20(409, {
+    throw new HTTPException21(409, {
       message: "target session is cancelled; choose a revivable session"
     });
   }
   if ((session.variableSetId ?? null) !== (input.variableSetId ?? null)) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "target session variableSet attachment does not match the scheduled task"
     });
   }
   if ((session.rigId ?? null) !== (input.rigId ?? null)) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "target session rig does not match the scheduled task"
     });
   }
   if (input.agentConfig.sandboxBackend !== void 0 && input.agentConfig.sandboxBackend !== session.sandboxBackend) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "target session sandbox backend does not match the scheduled task"
     });
   }
   if (scheduledSlackBotConnectionId(session.metadata) !== (input.agentConfig.slackBotConnectionId ?? null)) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "target session OpenGeni Slack bot binding does not match the scheduled task"
     });
   }
@@ -12516,19 +12580,19 @@ async function validateScheduledTaskMachineTarget(input) {
   const machineTarget = input.agentConfig.machineTarget;
   if (!machineTarget) {
     if (input.runMode !== "existing_session" && (input.agentConfig.sandboxBackend ?? input.settings.sandboxBackend) === "selfhosted") {
-      throw new HTTPException20(422, {
+      throw new HTTPException21(422, {
         message: "self-hosted scheduled tasks require a Connected Machine; select a machine before saving"
       });
     }
     return null;
   }
   if (input.runMode === "existing_session") {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "machineTarget cannot be used with an existing-session target"
     });
   }
   if (!input.settings.sandboxOwnershipEnabled || !input.settings.sandboxSelfhostedEnabled) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "Connected Machines are not enabled for scheduled tasks in this deployment"
     });
   }
@@ -12539,23 +12603,23 @@ async function validateScheduledTaskMachineTarget(input) {
   };
   const sandbox = await getSandbox4(input.db, access, machineTarget.targetSandboxId);
   if (!sandbox || sandbox.kind !== "selfhosted" || !sandbox.enrollmentId) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "the selected Connected Machine is unavailable"
     });
   }
   if (sandbox.scope === "user") {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "personal Connected Machines cannot run unattended schedules; select a workspace or organization machine"
     });
   }
   const enrollment = input.requireOnline ? await getLiveEnrollmentConnection3(input.db, access, sandbox.enrollmentId) : await getEnrollment3(input.db, access, sandbox.enrollmentId);
   if (!enrollment || enrollment.status !== "active") {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: input.requireOnline ? "the selected Connected Machine is offline" : "the selected Connected Machine is unavailable"
     });
   }
   if (input.requireOnline && !enrollment.workspaceRoot) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "the selected Connected Machine has not reported a workspace root; reconnect it with a current agent"
     });
   }
@@ -12589,25 +12653,25 @@ function scheduledTaskAuthorityUpdateForGrant(grant) {
 async function requireScheduledTaskRig(db, access, rigId) {
   const rig = await getRig5(db, access, rigId);
   if (!rig) {
-    throw new HTTPException20(422, { message: `unknown rigId: ${rigId}` });
+    throw new HTTPException21(422, { message: `unknown rigId: ${rigId}` });
   }
 }
 async function validatedScheduledTaskUpdate(input) {
   const update = {};
   const existingKnowledge = input.existing.action.kind === "knowledge_source_sync";
   if (input.payload.action && input.payload.action.kind !== input.existing.action.kind) {
-    throw new HTTPException20(409, {
+    throw new HTTPException21(409, {
       message: "scheduled task action kind is immutable; create a new schedule"
     });
   }
   if (existingKnowledge) {
     if (input.payload.agentConfig !== void 0 || input.payload.runMode !== void 0 || input.payload.targetSessionId !== void 0 || input.payload.variableSetId !== void 0 || input.payload.rigId !== void 0 || input.payload.connectionAuthorities !== void 0 || input.payload.selectedHostMcpDelegations !== void 0) {
-      throw new HTTPException20(422, {
+      throw new HTTPException21(422, {
         message: "knowledge source schedules do not accept agent/session configuration"
       });
     }
     if (input.payload.overlapPolicy === "allow_concurrent") {
-      throw new HTTPException20(422, {
+      throw new HTTPException21(422, {
         message: "knowledge source schedules require skip or buffer_one overlap"
       });
     }
@@ -12636,7 +12700,7 @@ async function validatedScheduledTaskUpdate(input) {
   const nextRunMode = input.payload.runMode ?? input.existing.runMode;
   const nextTargetSessionId = input.payload.targetSessionId !== void 0 ? input.payload.targetSessionId : nextRunMode === "existing_session" ? existingTarget : null;
   if (input.existing.runMode === "reusable_session" && input.existing.reusableSessionId && nextRunMode === "existing_session") {
-    throw new HTTPException20(409, {
+    throw new HTTPException21(409, {
       message: "cannot target an existing session after this task created its reusable session; create a new task"
     });
   }
@@ -12662,7 +12726,7 @@ async function validatedScheduledTaskUpdate(input) {
   if (input.payload.variableSetId !== void 0) {
     const nextVariableSetId = input.payload.variableSetId;
     if ((input.existing.variableSetId ?? null) !== (nextVariableSetId ?? null) && input.existing.runMode === "reusable_session" && input.existing.reusableSessionId) {
-      throw new HTTPException20(409, {
+      throw new HTTPException21(409, {
         message: "cannot change variableSet of a task with a live reusable session; recreate the task"
       });
     }
@@ -12683,7 +12747,7 @@ async function validatedScheduledTaskUpdate(input) {
   }
   if (input.payload.rigId !== void 0) {
     if (input.existing.runMode === "reusable_session" && input.existing.reusableSessionId !== null && input.payload.rigId !== input.existing.rigId) {
-      throw new HTTPException20(409, {
+      throw new HTTPException21(409, {
         message: "A reusable-session task cannot change rigId after materialization; recreate it"
       });
     }
@@ -12715,7 +12779,7 @@ async function validatedScheduledTaskUpdate(input) {
       ...input.toolsProvided !== void 0 ? { toolsProvided: input.toolsProvided } : {}
     });
     if (input.existing.reusableSessionId && input.existing.runMode === "reusable_session" && (input.existing.agentConfig.slackBotConnectionId ?? null) !== (nextAgentConfig2.slackBotConnectionId ?? null)) {
-      throw new HTTPException20(409, {
+      throw new HTTPException21(409, {
         message: "cannot change the OpenGeni Slack bot connection of a task with a live reusable session; recreate the task"
       });
     }
@@ -12739,7 +12803,7 @@ async function validatedScheduledTaskUpdate(input) {
     input.existing.id
   );
   if (existingXaiAuthority.scope === "user" && materialExecutionChange && (input.existing.createdBy.kind !== "subject" || input.existing.createdBy.subjectId !== input.grant.subjectId)) {
-    throw new HTTPException20(409, {
+    throw new HTTPException21(409, {
       message: "changing a user-scoped xAI scheduled task requires the same causal human"
     });
   }
@@ -12750,12 +12814,12 @@ async function validatedScheduledTaskUpdate(input) {
   );
   if (input.payload.connectionAuthorities === void 0) {
     if (materialExecutionChange && existingDelegations.some((delegation) => delegation.connectionType === "github_personal")) {
-      throw new HTTPException20(409, {
+      throw new HTTPException21(409, {
         message: "material changes to a personal GitHub-authorized task require explicit connectionAuthorities"
       });
     }
     if (existingDelegations.length > 0 && !isDeepStrictEqual(nextAgentConfig.tools, input.existing.agentConfig.tools)) {
-      throw new HTTPException20(409, {
+      throw new HTTPException21(409, {
         message: "changing tools on a connection-authorized task requires explicit connectionAuthorities"
       });
     }
@@ -12763,7 +12827,7 @@ async function validatedScheduledTaskUpdate(input) {
       if (materialExecutionChange && existingDelegations.some(
         (delegation) => delegation.ownerSubjectId !== input.grant.subjectId
       )) {
-        throw new HTTPException20(409, {
+        throw new HTTPException21(409, {
           message: "preserving connection authority requires the same causal human; provide a new explicit selection"
         });
       }
@@ -12775,7 +12839,7 @@ async function validatedScheduledTaskUpdate(input) {
     }
   } else if (input.payload.connectionAuthorities.length === 0) {
     if (personalGitHubRepositoryResources(nextAgentConfig.resources).length > 0) {
-      throw new HTTPException20(409, {
+      throw new HTTPException21(409, {
         message: "personal GitHub repository resources cannot be retained without connectionAuthorities"
       });
     }
@@ -12885,7 +12949,7 @@ async function validatedScheduledTaskUpdate(input) {
 async function requireScheduledTaskForApi(db, workspaceId, taskId) {
   const task = await getScheduledTask(db, workspaceId, taskId);
   if (!task) {
-    throw new HTTPException20(404, { message: "scheduled task not found" });
+    throw new HTTPException21(404, { message: "scheduled task not found" });
   }
   return task;
 }
@@ -12919,12 +12983,12 @@ async function restoreScheduledTask(db, previous) {
 }
 async function validateKnowledgeSourceSyncAction(input) {
   if (input.action.initiatingSubjectId !== input.grant.subjectId) {
-    throw new HTTPException20(403, {
+    throw new HTTPException21(403, {
       message: "knowledge source sync must preserve the exact initiating subject"
     });
   }
   if (input.action.connection.ownerSubjectId !== input.grant.subjectId) {
-    throw new HTTPException20(403, {
+    throw new HTTPException21(403, {
       message: "knowledge source connection must belong to the initiating subject"
     });
   }
@@ -12935,10 +12999,10 @@ async function validateKnowledgeSourceSyncAction(input) {
     initiatingSubjectId: input.grant.subjectId
   });
   if (!resolved || resolved.source.lifecycleState !== "active") {
-    throw new HTTPException20(404, { message: "knowledge source not found" });
+    throw new HTTPException21(404, { message: "knowledge source not found" });
   }
   if (resolved.source.syncGeneration !== input.action.sourceGeneration || resolved.source.lifecycleGeneration !== input.action.sourceLifecycleGeneration || scopedKnowledgeScopeKey(resolved.source.scope) !== scopedKnowledgeScopeKey(input.action.destination)) {
-    throw new HTTPException20(409, {
+    throw new HTTPException21(409, {
       message: "knowledge source authority or generation changed"
     });
   }
@@ -12949,7 +13013,7 @@ async function validateKnowledgeSourceSyncAction(input) {
     input.grant.subjectId
   );
   if (!connection || connection.accountId !== input.grant.accountId || connection.workspaceId !== input.grant.workspaceId || connection.subjectId !== input.action.connection.ownerSubjectId || connection.version !== input.action.connection.connectionVersion || connection.providerDomain.toLowerCase() !== input.action.connection.providerDomain.toLowerCase() || connection.kind !== input.action.connection.kind || connection.status !== "active") {
-    throw new HTTPException20(409, {
+    throw new HTTPException21(409, {
       message: "knowledge source connection authority changed or requires reconnect"
     });
   }
@@ -12973,10 +13037,10 @@ async function deleteScheduledTaskLifecycle(input) {
         input.workspaceId,
         input.taskId
       );
-      if (!task2) throw new HTTPException20(404, { message: "Scheduled task not found" });
+      if (!task2) throw new HTTPException21(404, { message: "Scheduled task not found" });
       const wasLive = task2.deletedAt === null;
       if (task2.action.kind === "knowledge_source_sync" && (task2.action.initiatingSubjectId !== input.subjectId || task2.action.connection.ownerSubjectId !== input.subjectId)) {
-        throw new HTTPException20(403, {
+        throw new HTTPException21(403, {
           message: "knowledge source schedule requires the exact initiating subject"
         });
       }
@@ -13049,7 +13113,7 @@ async function validateScheduledTaskAgentConfig(input) {
   const actor = creationInitiatorForGrant(input.grant).actor;
   const parent = actor ? await getSession3(input.db, input.workspaceId, actor.sessionId) : null;
   if (actor && (!parent || parent.accountId !== input.grant.accountId)) {
-    throw new HTTPException20(403, {
+    throw new HTTPException21(403, {
       message: "Scheduled Skill selection requires the creating agent's session"
     });
   }
@@ -13060,7 +13124,7 @@ async function validateScheduledTaskAgentConfig(input) {
       parent?.bundledSkillIds
     );
   } catch (error) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: error instanceof Error ? error.message : "Invalid bundled Skill selection"
     });
   }
@@ -13084,16 +13148,16 @@ async function validateScheduledTaskAgentConfig(input) {
   );
   const prompt = input.payload.agentConfig.prompt.trim();
   if (!prompt) {
-    throw new HTTPException20(422, { message: "scheduled task prompt is required" });
+    throw new HTTPException21(422, { message: "scheduled task prompt is required" });
   }
   if (hasReservedOpenGeniSlackBotSessionMetadata(input.payload.agentConfig.metadata)) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: `${OPENGENI_SLACK_BOT_SESSION_METADATA_KEY3} is reserved for scheduler routing`
     });
   }
   await validateGitHubRepositorySelection(input.db, input.workspaceId, resources);
   if (resources.some((resource) => resource.kind === "file") && !input.objectStorage) {
-    throw new HTTPException20(503, { message: "object storage is not configured" });
+    throw new HTTPException21(503, { message: "object storage is not configured" });
   }
   await validateFileResources(
     input.db,
@@ -13116,7 +13180,7 @@ async function validateScheduledTaskAgentConfig(input) {
     const deploymentPolicy = await getNestedAgentDepthDeploymentPolicy(input.db);
     const inheritedMaxDepth = typeof workspaceMaxDepth === "number" ? workspaceMaxDepth : deploymentPolicy.maxNestedAgentDepth;
     if (requestedMaxDepth > inheritedMaxDepth && !hasPermission(input.grant.permissions, "workspace:admin")) {
-      throw new HTTPException20(403, {
+      throw new HTTPException21(403, {
         message: `scheduled task maxNestedAgentDepth ${requestedMaxDepth} exceeds inherited limit ${inheritedMaxDepth}; workspace:admin is required to increase it`
       });
     }
@@ -13137,13 +13201,13 @@ function validateIncidentTelemetryPreflightSelection(settings, agentConfig) {
   const preflight = agentConfig.incidentTelemetryPreflight;
   if (executionClass === void 0 && preflight === void 0) return;
   if (executionClass !== "incident_telemetry" || !preflight) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "executionClass=incident_telemetry and incidentTelemetryPreflight must be configured together"
     });
   }
   for (const required of preflight.requiredResources) {
     if (!agentConfig.resources.some((selected) => isDeepStrictEqual(selected, required))) {
-      throw new HTTPException20(422, {
+      throw new HTTPException21(422, {
         message: "incidentTelemetryPreflight.requiredResources must be exact selected resources"
       });
     }
@@ -13151,13 +13215,13 @@ function validateIncidentTelemetryPreflightSelection(settings, agentConfig) {
   const selectedMcpServerIds = new Set(agentConfig.tools.map((tool) => tool.id));
   selectedMcpServerIds.add("opengeni");
   if (preflight.requiredMcpServerIds.some((id) => !selectedMcpServerIds.has(id))) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "incidentTelemetryPreflight.requiredMcpServerIds must be exact selected MCP servers"
     });
   }
   const selectedFirstPartyTools = new Set(resolveFirstPartyMcpToolPolicy2(settings).default);
   if (preflight.requiredFirstPartyMcpTools.some((tool) => !selectedFirstPartyTools.has(tool))) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "incidentTelemetryPreflight.requiredFirstPartyMcpTools must be present in the selected first-party tool policy"
     });
   }
@@ -13165,18 +13229,18 @@ function validateIncidentTelemetryPreflightSelection(settings, agentConfig) {
   if ((preflight.requiredFirstPartyMcpPermissions ?? []).some(
     (permission) => !selectedFirstPartyPermissions.has(permission)
   )) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "incidentTelemetryPreflight.requiredFirstPartyMcpPermissions must be present in the scheduled responder permission policy"
     });
   }
   const route = preflight.dataSource.route;
   if (route.kind === "mcp" && !selectedMcpServerIds.has(route.serverId)) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "incidentTelemetryPreflight.dataSource.route must use a selected MCP server"
     });
   }
   if (route.kind === "first_party" && !selectedFirstPartyTools.has(route.tool)) {
-    throw new HTTPException20(422, {
+    throw new HTTPException21(422, {
       message: "incidentTelemetryPreflight.dataSource.route must use a selected first-party tool"
     });
   }
@@ -13184,14 +13248,14 @@ function validateIncidentTelemetryPreflightSelection(settings, agentConfig) {
     const declaredSets = new Set(preflight.requiredVariableSetNames);
     const declaredVariables = new Set(preflight.requiredVariableNames);
     if (!declaredSets.has(route.variableSetName) || route.variableNames.some((name) => !declaredVariables.has(name))) {
-      throw new HTTPException20(422, {
+      throw new HTTPException21(422, {
         message: "incidentTelemetryPreflight.dataSource.route variable metadata must be declared as required"
       });
     }
   }
   if (route.kind === "rig_credential_hook") {
     if (!preflight.requiredRig?.credentialHookIds.includes(route.credentialHookId)) {
-      throw new HTTPException20(422, {
+      throw new HTTPException21(422, {
         message: "incidentTelemetryPreflight.dataSource.route rig hook must be declared as required"
       });
     }
@@ -13202,13 +13266,13 @@ function validateScheduledTaskSchedule(schedule) {
     return;
   }
   if (new Date(schedule.startAt).getTime() >= new Date(schedule.endAt).getTime()) {
-    throw new HTTPException20(422, { message: "interval schedule endAt must be after startAt" });
+    throw new HTTPException21(422, { message: "interval schedule endAt must be after startAt" });
   }
 }
 function trimmedScheduledTaskName(name) {
   const trimmed = name.trim();
   if (!trimmed) {
-    throw new HTTPException20(422, { message: "scheduled task name is required" });
+    throw new HTTPException21(422, { message: "scheduled task name is required" });
   }
   return trimmed;
 }
@@ -15818,7 +15882,7 @@ function providerReceiptWire(receipt2) {
 }
 
 // src/domain/workspace-members.ts
-import { HTTPException as HTTPException21 } from "hono/http-exception";
+import { HTTPException as HTTPException22 } from "hono/http-exception";
 var MEMBER_ADMIN_PERMISSIONS = ["workspace:admin", "members:manage"];
 function memberCanAdminister(member) {
   return member.permissions.some((permission) => MEMBER_ADMIN_PERMISSIONS.includes(permission));
@@ -15828,27 +15892,27 @@ function isUserMember(member) {
 }
 function resolveMemberSubjectId(userId) {
   if (!userId) {
-    throw new HTTPException21(404, { message: "user is not registered" });
+    throw new HTTPException22(404, { message: "user is not registered" });
   }
   return `user:${userId}`;
 }
 function assertWorkspaceMemberRemovable(input) {
   const { members, subjectId, callerSubjectId } = input;
   if (subjectId === callerSubjectId) {
-    throw new HTTPException21(409, {
+    throw new HTTPException22(409, {
       message: "you cannot remove your own membership"
     });
   }
   const target = members.find((member) => member.subjectId === subjectId);
   if (!target) {
-    throw new HTTPException21(404, { message: "member not found" });
+    throw new HTTPException22(404, { message: "member not found" });
   }
   if (memberCanAdminister(target)) {
     const remainingAdmins = members.filter(
       (member) => member.subjectId !== subjectId && memberCanAdminister(member)
     );
     if (remainingAdmins.length === 0) {
-      throw new HTTPException21(409, {
+      throw new HTTPException22(409, {
         message: "cannot remove the last member who can manage this workspace"
       });
     }
@@ -15857,28 +15921,28 @@ function assertWorkspaceMemberRemovable(input) {
 function assertWorkspaceMemberUpdateAllowed(input) {
   const { members, subjectId, callerSubjectId, nextPermissions } = input;
   if (subjectId === callerSubjectId) {
-    throw new HTTPException21(409, {
+    throw new HTTPException22(409, {
       message: "you cannot change your own workspace access"
     });
   }
   const target = members.find((member) => member.subjectId === subjectId);
   if (!target) {
-    throw new HTTPException21(404, { message: "member not found" });
+    throw new HTTPException22(404, { message: "member not found" });
   }
   if (memberCanAdminister(target) && !memberCanAdminister({ permissions: nextPermissions }) && !members.some((member) => member.subjectId !== subjectId && memberCanAdminister(member))) {
-    throw new HTTPException21(409, {
+    throw new HTTPException22(409, {
       message: "the workspace must keep at least one administrator"
     });
   }
 }
 function assertWorkspaceDeletable(input) {
   if (input.workspaceCountForAccount <= 1) {
-    throw new HTTPException21(409, {
+    throw new HTTPException22(409, {
       message: "cannot delete the account's only workspace"
     });
   }
   if (input.activeSessionCount > 0) {
-    throw new HTTPException21(409, {
+    throw new HTTPException22(409, {
       message: "stop the workspace's running sessions before deleting it"
     });
   }
@@ -16146,7 +16210,7 @@ import {
   saveNewSessionDraftInTransaction,
   withWorkspaceSubjectRls as withWorkspaceSubjectRls6
 } from "@opengeni/db";
-import { HTTPException as HTTPException22 } from "hono/http-exception";
+import { HTTPException as HTTPException23 } from "hono/http-exception";
 function hasOwn(value, key) {
   return typeof value === "object" && value !== null && Object.hasOwn(value, key);
 }
@@ -16298,7 +16362,7 @@ async function saveActorNewSessionDraft(deps, grant, workspaceId, rawInput, cano
   const tools = toolsProvided ? validateToolRefs(input.tools, runtimeSettings) : [];
   await validateGitHubRepositorySelection(deps.db, workspaceId, resources);
   if (resources.some((resource) => resource.kind === "file") && !deps.objectStorage) {
-    throw new HTTPException22(503, {
+    throw new HTTPException23(503, {
       message: "object storage is not configured"
     });
   }
@@ -16341,7 +16405,7 @@ async function saveActorNewSessionDraft(deps, grant, workspaceId, rawInput, cano
     return mapNewSessionDraft(saved);
   } catch (error) {
     if (error instanceof NewSessionDraftAccessError) {
-      throw new HTTPException22(403, { message: error.message });
+      throw new HTTPException23(403, { message: error.message });
     }
     throw error;
   }