@opengeni/core 3.0.1 → 4.0.0

package/dist/sandbox/routing.d.ts

@@ -1,7 +1,7 @@
 import { type Settings } from "@opengeni/config";
 import { type Database, type SandboxRetainedProcess } from "@opengeni/db";
 import { type EventBus } from "@opengeni/events";
-import { type EstablishedSandboxSession, type ResolvedActiveBackend, type RoutingRetainedProcess, type RoutingRetainedProcessTerminalProof, type RoutingSandboxOperationObserver, type SelfhostedRelayConfig } from "@opengeni/runtime/sandbox";
+import { type EstablishedSandboxSession, type ResolvedActiveBackend, type RoutingRetainedProcess, type RoutingRetainedProcessTerminalProof, type RoutingSandboxOperationObserver, type RoutingSandboxCaptureWaitObserver, type SelfhostedRelayConfig } from "@opengeni/runtime/sandbox";
 type DirectRetainedProcessRoute = {
     providerSessionId: number;
     providerBackend: string;
@@ -24,6 +24,7 @@ export type ChannelARoutingServices = {
     settings: Settings;
     bus?: EventBus;
     onSandboxOperation?: RoutingSandboxOperationObserver;
+    onSandboxCaptureWait?: RoutingSandboxCaptureWaitObserver;
     waitSignal?: AbortSignal;
 };
 /** Map the deployment relay URL to the leaf's `SelfhostedRelayConfig` shape. The

package/dist/sandbox/runtime-settings.d.ts

@@ -1,5 +1,5 @@
 import type { Settings } from "@opengeni/config";
-import { CapabilityPack, type RigVersion, type Session, type SandboxBackend, type SandboxOs } from "@opengeni/contracts";
+import { type RigVersion, type Session, type SandboxBackend, type SandboxOs } from "@opengeni/contracts";
 import { type Database } from "@opengeni/db";
 import { resolveModalCheckpointProviderBinding } from "@opengeni/runtime/sandbox";
 export type ManagedSessionGroupBackend = Exclude<SandboxBackend, "none" | "selfhosted">;
@@ -18,20 +18,6 @@ export declare function managedSessionGroupBackend(deploymentBackend: SandboxBac
  * platform's canonical managed-sandbox OS instead. Ordinary sessions preserve
  * their explicitly selected OS. */
 export declare function managedSessionGroupOs(sessionBackend: SandboxBackend, sessionOs: SandboxOs): SandboxOs;
-/** Pre-V2 Packs are the sole compatibility path where a Pack can still own a
- * sandbox image. V2 installations select a Rig instead. Keep this predicate at
- * the shared runtime boundary so turns, API-direct tools, viewers, Browser and
- * Computer cannot resolve different physical machines for the same session. */
-export declare function packInstallationUsesLegacyRuntime(input: {
-    manifestSnapshot: unknown | null;
-    manifestDigest: string | null;
-}): boolean;
-export declare function resolveWorkspaceLegacyRuntimePacks(db: Database, workspaceId: string): Promise<CapabilityPack[]>;
-export declare function legacySandboxRuntimeFromPacks(packs: readonly CapabilityPack[]): {
-    sandboxImage: string | null;
-    sandboxProviderImages: CapabilityPack["sandboxProviderImages"] | null;
-};
-export declare function settingsWithPackSandboxImage(settings: Settings, sandboxImage: string | null, sandboxProviderImages?: CapabilityPack["sandboxProviderImages"] | null): Settings;
 export declare function settingsWithRigImage(settings: Settings, rigImage: string | null): Settings;
 export declare function rigProviderImageSourceImage(settings: Settings, backend: SandboxBackend): string | null;
 export type RigProviderImageSelectionReason = "selected" | "missing" | "provider_unsupported" | "not_ready" | "not_cold_boot_validated" | "content_mismatch" | "provider_binding_unavailable" | "provider_binding_mismatch";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/core",
-  "version": "3.0.1",
+  "version": "4.0.0",
   "description": "OpenGeni framework-agnostic core: the domain, access, and billing layers (neutral access, off-HTTP V2 surface). Behavior-preserving extraction from apps/api — keeps Hono's HTTPException for error throwing (typed-errors cleanup deferred).",
   "license": "Apache-2.0",
   "repository": {
@@ -18,10 +18,6 @@
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
-    "./remote-mcp-credentials": {
-      "types": "./dist/remote-mcp-credentials.d.ts",
-      "import": "./dist/remote-mcp-credentials.js"
-    },
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
@@ -41,10 +37,6 @@
     "./managed-auth-session-sets": {
       "types": "./dist/managed-auth-session-sets.d.ts",
       "import": "./dist/managed-auth-session-sets.js"
-    },
-    "./connection-authority": {
-      "types": "./dist/domain/connection-authority.d.ts",
-      "import": "./dist/domain/connection-authority.js"
     }
   },
   "publishConfig": {
@@ -53,22 +45,22 @@
   },
   "scripts": {
     "typecheck": "tsc --noEmit",
-    "build": "bun ../../scripts/sync-product-integration-skill.ts --check && bun ../../scripts/build-typescript-package.ts",
+    "build": "bun ../../scripts/build-typescript-package.ts",
     "prepublishOnly": "bash ../../scripts/prepublish-guard"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opengeni/capabilities": "^0.3.4",
-    "@opengeni/codex": "^0.2.23",
-    "@opengeni/config": "^1.2.2",
-    "@opengeni/contracts": "^4.1.0",
-    "@opengeni/db": "^5.0.1",
-    "@opengeni/documents": "^0.8.30",
-    "@opengeni/events": "^0.4.28",
+    "@opengeni/codex": "^0.2.24",
+    "@opengeni/config": "^2.0.0",
+    "@opengeni/contracts": "^5.0.0",
+    "@opengeni/db": "^6.0.0",
+    "@opengeni/documents": "^0.8.31",
+    "@opengeni/events": "^0.4.29",
     "@opengeni/network": "^0.3.1",
-    "@opengeni/observability": "^0.8.29",
-    "@opengeni/runtime": "^3.0.1",
-    "@opengeni/storage": "^0.2.130",
+    "@opengeni/observability": "^0.8.30",
+    "@opengeni/runtime": "^4.0.0",
+    "@opengeni/storage": "^0.2.131",
     "hono": "^4.12.18",
     "zod": "^4.2.1"
   },

package/src/application/composer-submit.ts

@@ -48,7 +48,8 @@ export async function submitComposerDraftForRequest(
     reasoningEffort: input.reasoningEffort,
     latencyMode: input.latencyMode,
     mcpCredentialUpdates: input.mcpCredentialUpdates ?? [],
-    connectionAuthorities: input.connectionAuthorities,
+    connectionAccounts: input.connectionAccounts,
+
     ...(input.personalResourceAttachment
       ? { personalResourceAttachment: input.personalResourceAttachment }
       : {}),

package/src/application/connect-operation.ts

@@ -1,4 +1,7 @@
 import type { ConnectAttempt } from "@opengeni/contracts/connect";
+import { assertOrganizationIntegrationAllowed } from "@opengeni/contracts";
+import { withOrganizationIntegrationPolicyFence } from "@opengeni/db/organization-integration-policy";
+import { integrationKeyForConnectProvider } from "../domain/organization-integration-catalog";
 import {
   claimConnectOperation,
   finishConnectOperation,
@@ -31,11 +34,14 @@ export async function executeConnectOperation(input: {
   operationId: string;
   /** Caller computes a stable keyed digest if input contains low-entropy secrets. */
   inputDigest: string;
+  /** Trusted server adapter classification, never derived from request data.
+   * Cancellation releases pending setup; it acquires no integration authority. */
+  purpose?: "acquisition" | "cancellation";
   authorize: ConnectOperationAuthorization;
   execute: (attempt: ConnectAttempt) => Promise<PreparedConnectOperation>;
 }): Promise<ConnectAttempt> {
   // Snapshot caller-controlled identity before the first asynchronous boundary.
-  const { db, authorize, execute } = input;
+  const { db, authorize, execute, purpose = "acquisition" } = input;
   const scope = { ...input.scope };
   const operation = {
     attemptId: input.attemptId,
@@ -44,8 +50,31 @@ export async function executeConnectOperation(input: {
     inputDigest: input.inputDigest,
     authorize,
   };
-  const claim = await claimConnectOperation(db, scope, operation);
+  const claim = await withOrganizationIntegrationPolicyFence(db, scope, async (tx, policy) =>
+    claimConnectOperation(tx, scope, {
+      ...operation,
+      authorizeAcquisition: async (_tx, attempt) => {
+        if (purpose === "cancellation") return;
+        assertOrganizationIntegrationAllowed(
+          policy,
+          integrationKeyForConnectProvider(attempt.providerId),
+        );
+      },
+    }),
+  );
   if (claim.status === "replayed") return claim.attempt;
   const prepared = await execute(structuredClone(claim.attempt));
-  return finishConnectOperation(db, scope, { ...operation, commit: prepared.commit });
+  return withOrganizationIntegrationPolicyFence(db, scope, async (tx, policy) =>
+    finishConnectOperation(tx, scope, {
+      ...operation,
+      commit: prepared.commit,
+      authorizeAcquisition: async (_tx, attempt) => {
+        if (purpose === "cancellation") return;
+        assertOrganizationIntegrationAllowed(
+          policy,
+          integrationKeyForConnectProvider(attempt.providerId),
+        );
+      },
+    }),
+  );
 }

package/src/application/sandbox-recovery.ts

@@ -0,0 +1,55 @@
+import type { SandboxRecoveryRequest } from "@opengeni/contracts";
+import { consentPublicSandboxRecovery, readPublicSandboxRecovery } from "@opengeni/db";
+import { requirePermission, type AccessGrantAuthorization } from "../access";
+import type { AppDependencies } from "../dependencies";
+import { requireSessionAuthorization } from "../session-authorization";
+import { requireCanonicalManagedHuman } from "./session-tenancy";
+
+type Dependencies = Pick<AppDependencies, "db" | "sessionAuthorization">;
+
+async function authorize(
+  deps: Dependencies,
+  authorization: AccessGrantAuthorization,
+  workspaceId: string,
+  sessionId: string,
+) {
+  // Cookie-verification stamp, never principal-shape inference or an actor from
+  // the body. Agents, API keys and delegated humans cannot accept data loss.
+  requireCanonicalManagedHuman(authorization, workspaceId);
+  requirePermission(authorization.grant, "sessions:read");
+  requirePermission(authorization.grant, "sessions:control");
+  await requireSessionAuthorization(deps, authorization.grant, {
+    sessionId,
+    operation: "session.control",
+    surface: "core",
+  });
+  return {
+    accountId: authorization.grant.accountId,
+    workspaceId,
+    sessionId,
+    subjectId: authorization.grant.subjectId,
+  };
+}
+
+export async function getManagedHumanSandboxRecovery(
+  deps: Dependencies,
+  authorization: AccessGrantAuthorization,
+  workspaceId: string,
+  sessionId: string,
+) {
+  return readPublicSandboxRecovery(
+    deps.db,
+    await authorize(deps, authorization, workspaceId, sessionId),
+  );
+}
+
+export async function consentManagedHumanSandboxRecovery(
+  deps: Dependencies,
+  authorization: AccessGrantAuthorization,
+  workspaceId: string,
+  sessionId: string,
+  request: SandboxRecoveryRequest,
+) {
+  const scope = await authorize(deps, authorization, workspaceId, sessionId);
+  return consentPublicSandboxRecovery(deps.db, { ...scope, request });
+}

package/src/application/user-resource-grants.ts

@@ -6,7 +6,6 @@ import type {
 } from "@opengeni/contracts";
 import {
   issueSelfUserResourceGrant,
-  issueSelfLocalConnectionUseGrant,
   listSelfUserResourceAuthorities,
   revokeSelfUserResourceGrant,
   sessionTenancyProductActivated,
@@ -103,21 +102,7 @@ export async function issueManagedHumanUserResourceGrant(
   const modePermissions: Permission[] =
     request.mode === "session" ? ["sessions:control"] : ["sessions:create"];
   if (authorization.canonicalLocalHumanSession) {
-    requireOwnerAuthority(authorization, workspaceId, [
-      ...ISSUE_PERMISSIONS[request.resourceKind],
-      "sessions:create",
-    ]);
-    if (request.resourceKind !== "connection" || request.mode !== "always") {
-      throw new SessionTenancyManagedHumanRequiredError();
-    }
-    return await issueSelfLocalConnectionUseGrant(deps.db, {
-      accountId: authorization.grant.accountId,
-      workspaceId,
-      subjectId: authorization.grant.subjectId,
-      authorityId,
-      context: request.context,
-      workspaceSharedAcknowledged: request.workspaceSharedAcknowledged,
-    });
+    throw new SessionTenancyManagedHumanRequiredError();
   }
   await requireOwnerProductGate(deps, authorization, workspaceId, [
     ...ISSUE_PERMISSIONS[request.resourceKind],

package/src/dependencies.ts

@@ -101,7 +101,11 @@ export type DocumentIndexClient = {
 };
 
 export type ManagedEmailMessage = {
-  kind: "email_verification" | "password_reset" | "organization_user_setup";
+  kind:
+    | "email_verification"
+    | "password_reset"
+    | "organization_user_setup"
+    | "sign_in_method_changed";
   from: string;
   to: string;
   subject: string;