@opengeni/core 3.2.2 → 3.4.0

package/dist/access/index.d.ts

@@ -56,6 +56,19 @@ export type VerifiedDelegatedHumanContext = Readonly<{
  * transplanted. This proof never becomes managed-cookie/person-present proof.
  */
 export declare function stampDelegatedHumanAuthorization(request: Request, input: DelegatedHumanAuthorization): void;
+/**
+ * Verified published-Site dispatch only: the caller has verified the signed
+ * gateway, served host and opaque viewer cookie. This is exact-workspace
+ * ownership for session routes, not a console login or a generic Site bearer.
+ * Native people use the existing delegated-human resolver; external owning
+ * users reload their existing membership without provisioning a new identity.
+ */
+export declare function stampSiteViewerSessionAuthorization(request: Request, input: {
+    organizationId: string;
+    workspaceId: string;
+    subjectId: string;
+    permissions: Permission[];
+}): void;
 /** Token prefix of personal API keys, which act as the person who made them. */
 export declare const PERSONAL_API_KEY_TOKEN_PREFIX = "ogp_";
 /**

package/dist/application/site-session-cancellation.d.ts

@@ -0,0 +1,14 @@
+import { cancelSiteRuntimeConversation, type Database } from "@opengeni/db";
+import { type EventBus } from "@opengeni/events";
+import type { SessionWorkflowClient } from "../dependencies.js";
+/** Internal host lifecycle, not a session-read/control API or a viewer grant. */
+export declare function cancelPublishedSiteSession(deps: {
+    db: Database;
+    bus: EventBus;
+    workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch">;
+}, input: Parameters<typeof cancelSiteRuntimeConversation>[1]): Promise<{
+    receiptId: string;
+    replay: boolean;
+    cancelledSessionCount: number;
+    cancelledTurnCount: number;
+} | null>;

package/dist/domain/insights-usage.d.ts

@@ -1,5 +1,28 @@
-import type { InsightsCallsQuery, InsightsCallsResponse, InsightsUsageQuery, InsightsUsageRange, InsightsUsageResponse } from "@opengeni/contracts/insights-usage";
+import type { InsightsCallsQuery, InsightsCallsResponse, InsightsUsageQuery, InsightsUsageRange, InsightsUsageResponse, InsightsSiteUsageQuery } from "@opengeni/contracts/insights-usage";
 import { type Database } from "@opengeni/db";
+export declare function getInsightsSiteUsage(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    query: InsightsSiteUsageQuery;
+    viewerSubjectId: string | null;
+    now?: Date;
+}): Promise<{
+    workspaceId: string;
+    range: "30d" | "90d" | "month" | "today" | "week" | "ytd";
+    windowStart: string;
+    windowEnd: string;
+    rows: {
+        siteId: string | null;
+        title: string;
+        kind: "other" | "restricted" | "site";
+        calls: number;
+        pricedCalls: number;
+        chargedMicros: number;
+        apiEquivalentMicros: number;
+        subscriptionApiEquivalentMicros: number;
+        ownKeyApiEquivalentMicros: number;
+    }[];
+}>;
 export type InsightsQueryScope = {
     accountId: string;
     /** null means organization scope; it does not grant workspace/session access. */

package/dist/goal-admission.d.ts

@@ -36,6 +36,7 @@ export declare function resolveGoalModelAdmission(db: Database, settings: Settin
         serverVersion?: string | undefined;
         databaseUrl: string;
         apiDatabasePoolMax: number;
+        databasePreparedStatements?: boolean | undefined;
         dbSchema: string;
         rlsStrategy: "force" | "scoped";
         runtimeDatabaseRole: string;
@@ -568,6 +569,7 @@ export declare function resolveGoalModelAdmission(db: Database, settings: Settin
         stripePublishableKey?: string | undefined;
         stripeWebhookSecret?: string | undefined;
         stripeCreditsProductId?: string | undefined;
+        subscriptionPlansEnabled: boolean;
         mcpServers: {
             id: string;
             name?: string | undefined;

package/dist/index.d.ts

@@ -85,6 +85,7 @@ export * from "./domain/organization-membership-lifecycle.js";
 export * from "./application/new-session-drafts.js";
 export * from "./application/composer-submit.js";
 export * from "./application/session-commands.js";
+export * from "./application/site-session-cancellation.js";
 export * from "./application/archived-session-imports.js";
 export * from "./application/session-tenancy.js";
 export * from "./application/organization-privacy.js";