@opengeni/core 2.9.4-canary.3 → 2.10.0-canary.1

package/dist/application/session-mcp-credential-rotation.d.ts

@@ -0,0 +1,29 @@
+import { RotateSessionMcpCredentialsRequest, type AccessGrant } from "@opengeni/contracts";
+import { type Database } from "@opengeni/db";
+import type { Settings } from "@opengeni/config";
+import { type AccessGrantAuthorization } from "../access/index.js";
+import { type SessionAuthorizationDependencies } from "../session-authorization.js";
+/** HMAC domains separate request identity from key availability. The key tag
+ * carries no request material and neither fingerprint is returned publicly. */
+export declare function sessionMcpRotationFingerprint(key: Uint8Array, scope: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    subjectId: string;
+}, request: RotateSessionMcpCredentialsRequest): {
+    digestKeyTag: string;
+    requestDigest: string;
+};
+/** HTTP/SDK host boundary only. The mandatory callback re-resolves request
+ * authentication with the transaction handle, not a cached route-time grant. */
+export declare function rotateSessionMcpCredentialsForRequest(deps: SessionAuthorizationDependencies & {
+    settings: Settings;
+}, authorization: AccessGrantAuthorization, sessionId: string, raw: unknown, reauthorize: (tx: Database) => Promise<AccessGrant>): Promise<{
+    operationKey: string;
+    sessionId: string;
+    servers: {
+        id: string;
+        credentialVersion: number;
+    }[];
+    appliedAt: string;
+}>;

package/dist/domain/pr-review.d.ts

@@ -42,7 +42,7 @@ export declare const prReviewAutomationAdapter: {
     }) => {
         initialMessage: string;
         sessionTemplate: {
-            bundledSkillIds?: ("builtin:opengeni-documents" | "builtin:opengeni-presentations" | "builtin:opengeni-projects" | "builtin:opengeni-sites" | "builtin:opengeni-skills" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-video-generation")[] | undefined;
+            bundledSkillIds?: ("builtin:document-parsing" | "builtin:opengeni-documents" | "builtin:opengeni-presentations" | "builtin:opengeni-projects" | "builtin:opengeni-sites" | "builtin:opengeni-skills" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-video-generation" | "builtin:opengeni-visualize")[] | undefined;
             prompt: string;
             instructions: string | null;
             resources: ({

package/dist/domain/sessions.d.ts

@@ -67,6 +67,7 @@ export type FrozenCreationInitiator = {
     }>;
 };
 export declare function creationInitiatorForGrant(grant: AccessGrant): FrozenCreationInitiator;
+export declare function normalizedSessionMcpCredentialHeaders(headers: Record<string, string> | undefined): Record<string, string>;
 export declare function settingsWithSessionMcpServerMetadata(settings: Settings, servers: SessionMcpServerMetadata[]): Settings;
 export type CreateSessionOutcome = {
     session: CreateSessionResponse;

package/dist/index.d.ts

@@ -13,6 +13,7 @@ export * from "./access/index.js";
 export * from "./application/external-workspace-members.js";
 export * from "./application/external-identity-lifecycle.js";
 export * from "./application/external-continuation.js";
+export * from "./application/session-mcp-credential-rotation.js";
 export * from "./application/external-link-work-admission.js";
 export * from "./application/connect-authority.js";
 export * from "./application/host-mcp-owner.js";