@opengeni/core 3.2.2 → 3.4.0

package/dist/index.js

@@ -140,7 +140,7 @@ import {
 
 // src/domain/session-file-access.ts
 import {
-  getSessionAuthorityProjection as getSessionAuthorityProjection2,
+  getSessionAuthorityProjection,
   getFilesForSubject,
   readSessionFileAttachments,
   withSessionRlsActorContext as withSessionRlsActorContext2
@@ -156,11 +156,9 @@ import {
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
 import {
   currentSessionRlsActorIdentityKey,
-  getSessionAuthorityProjection,
-  getSessionAuthorizationTargetProjection,
+  currentSiteViewerRlsContext,
   getSession as getSession2,
-  getSessionTurnForAttempt,
-  getSlackInteractionSessionAccessForSession,
+  getSessionAuthorizationFacts,
   withSessionRlsActorContext
 } from "@opengeni/db";
 
@@ -395,7 +393,8 @@ function relatedSessionAccessForAgentAttempt(actor, targetSessionId) {
 function sessionRlsActorForAuthorization(authorization) {
   return authorization.actor.kind === "agent_attempt" ? {
     subjectId: authorization.actor.subjectId,
-    initiatingHumanSubjectId: authorization.actor.initiatingHumanSubjectId
+    initiatingHumanSubjectId: authorization.actor.initiatingHumanSubjectId,
+    agentRootSessionId: authorization.actor.callerRootSessionId
   } : { subjectId: authorization.actor.subjectId };
 }
 async function withResolvedSessionAuthorization(authorization, fn) {
@@ -403,7 +402,9 @@ async function withResolvedSessionAuthorization(authorization, fn) {
 }
 async function requireLiveAgentAttemptAuthorization(db, grant, callerSessionId) {
   const reads = claimSessionAuthorizationReads();
-  const { actor } = await resolveSessionAuthorizationActor(db, grant, reads);
+  const claims = agentAttemptClaims(grant);
+  const facts = claims ? await readSessionAuthorizationFacts(db, grant, claims.callerSessionId, claims, reads) : null;
+  const { actor } = resolveSessionAuthorizationActor(grant, claims, facts);
   if (actor.kind !== "agent_attempt" || actor.callerSessionId !== callerSessionId) {
     throw new SessionAuthorizationDeniedError("caller_stale");
   }
@@ -413,19 +414,19 @@ async function requireSessionAuthorization(deps, grant, input) {
   const reads = claimSessionAuthorizationReads();
   const port = deps.sessionAuthorization;
   const isAgentAttempt = grantHasAgentAttemptAuthority(grant);
-  const slackAccess = await getSlackInteractionSessionAccessForSession(deps.db, {
-    accountId: grant.accountId,
-    workspaceId: grant.workspaceId,
-    sessionId: input.sessionId
-  });
-  const authority = await getSessionAuthorityProjection(
-    deps.db,
-    grant.workspaceId,
-    input.sessionId
-  );
+  const claims = agentAttemptClaims(grant);
+  const facts = await readSessionAuthorizationFacts(deps.db, grant, input.sessionId, claims, reads);
+  const authority = facts.target;
+  const slackAccess = authority?.slackAccess ?? null;
   if (!authority && input.surface !== "core") {
     throw new SessionAuthorizationDeniedError("not_found");
   }
+  if (authority?.siteAccessRootId) {
+    const viewer = currentSiteViewerRlsContext();
+    const actor2 = resolveSessionAuthorizationActor(grant, claims, facts).actor;
+    const allowed = actor2.kind === "agent_attempt" ? authority.siteOwnerSubjectId !== null && authority.siteOwnerSubjectId === actor2.initiatingHumanSubjectId || actor2.callerRootSessionId === authority.rootSessionId && authority.siteAccessRootId === authority.rootSessionId : authority.siteOwnerSubjectId === actor2.subjectId || actor2.subjectId === `site:${authority.siteId}` && viewer?.siteId === authority.siteId && viewer.principal === authority.siteViewerPrincipal;
+    if (!allowed) throw new SessionAuthorizationDeniedError("not_found");
+  }
   const siteOrigin = currentSiteSessionOrigin();
   if (siteOrigin && authority && !input.operation.endsWith(".read")) {
     const session = await getSession2(deps.db, grant.workspaceId, input.sessionId);
@@ -436,15 +437,15 @@ async function requireSessionAuthorization(deps, grant, input) {
     return null;
   }
   if (!authority) throw new SessionAuthorizationDeniedError("not_found");
-  const resolvedActor = await resolveSessionAuthorizationActor(deps.db, grant, reads);
-  const resolvedTarget = await resolveSessionAuthorizationTarget(
-    deps.db,
-    grant,
-    input.sessionId,
-    reads
-  );
+  const resolvedActor = resolveSessionAuthorizationActor(grant, claims, facts);
+  if (authority.accountId !== grant.accountId) {
+    throw new SessionAuthorizationDeniedError("not_found");
+  }
   const actor = resolvedActor.actor;
-  const target = resolvedTarget.target;
+  const target = {
+    sessionId: authority.sessionId,
+    rootSessionId: authority.rootSessionId
+  };
   const agentRelatedSessionAccess = actor.kind === "agent_attempt" ? relatedSessionAccessForAgentAttempt(actor, target.sessionId) : null;
   if (actor.kind === "agent_attempt" && input.operation === "session.approval.write") {
     throw new SessionAuthorizationDeniedError("forbidden");
@@ -515,7 +516,9 @@ async function requireSessionAuthorizationListScope(deps, grant, surface) {
   const port = deps.sessionAuthorization;
   const isAgentAttempt = grantHasAgentAttemptAuthority(grant);
   if (!port && !isAgentAttempt) return null;
-  const { actor, callerAccess } = await resolveSessionAuthorizationActor(deps.db, grant, reads);
+  const claims = agentAttemptClaims(grant);
+  const facts = claims ? await readSessionAuthorizationFacts(deps.db, grant, claims.callerSessionId, claims, reads) : null;
+  const { actor, callerAccess } = resolveSessionAuthorizationActor(grant, claims, facts);
   const viewer = actor.kind === "agent_attempt" && callerAccess ? {
     callerRootSessionId: actor.callerRootSessionId,
     agentAccess: callerAccess.agentAccess,
@@ -544,27 +547,39 @@ async function requireSessionAuthorizationListScope(deps, grant, surface) {
   };
   return viewer ? agentAccessListScopeForViewer(viewer, hostScope) : hostScope;
 }
-async function resolveSessionAuthorizationTarget(db, grant, sessionId, reads) {
-  const session = await reusableAuthorizationRead(
-    reads,
-    db,
-    ["target-identity", grant.workspaceId, sessionId],
-    () => getSessionAuthorizationTargetProjection(db, grant.workspaceId, sessionId)
-  );
-  if (!session || session.accountId !== grant.accountId) {
-    throw new SessionAuthorizationDeniedError("not_found");
-  }
-  return {
-    target: { sessionId: session.id, rootSessionId: session.rootSessionId }
-  };
-}
-async function resolveSessionAuthorizationActor(db, grant, reads) {
+function agentAttemptClaims(grant) {
+  if (!grantHasAgentAttemptAuthority(grant)) return null;
   const callerSessionId = grant.metadata?.["sessionId"];
   const turnId = grant.metadata?.["turnId"];
   const attemptId = grant.metadata?.["attemptId"];
   const executionGeneration = grant.metadata?.["executionGeneration"];
-  const isAgentAttempt = grantHasAgentAttemptAuthority(grant);
-  if (!isAgentAttempt) {
+  if (typeof callerSessionId !== "string" || typeof turnId !== "string" || typeof attemptId !== "string" || typeof executionGeneration !== "number" || !Number.isSafeInteger(executionGeneration) || executionGeneration < 1) {
+    return null;
+  }
+  return { callerSessionId, turnId, attemptId, executionGeneration };
+}
+async function readSessionAuthorizationFacts(db, grant, sessionId, claims, reads) {
+  return await reusableAuthorizationRead(
+    reads,
+    db,
+    [
+      "authorization-facts",
+      grant.accountId,
+      grant.workspaceId,
+      sessionId,
+      claims?.callerSessionId ?? "",
+      claims?.attemptId ?? ""
+    ],
+    () => getSessionAuthorizationFacts(db, {
+      accountId: grant.accountId,
+      workspaceId: grant.workspaceId,
+      sessionId,
+      caller: claims ? { sessionId: claims.callerSessionId, attemptId: claims.attemptId } : void 0
+    })
+  );
+}
+function resolveSessionAuthorizationActor(grant, claims, facts) {
+  if (!grantHasAgentAttemptAuthority(grant)) {
     return {
       actor: SessionAuthorizationActor.parse({
         kind: "subject",
@@ -575,33 +590,20 @@ async function resolveSessionAuthorizationActor(db, grant, reads) {
       callerAccess: null
     };
   }
-  if (typeof callerSessionId !== "string" || typeof turnId !== "string" || typeof attemptId !== "string" || typeof executionGeneration !== "number" || !Number.isSafeInteger(executionGeneration) || executionGeneration < 1) {
-    throw new SessionAuthorizationDeniedError("caller_stale");
-  }
-  const callerSession = await reusableAuthorizationRead(
-    reads,
-    db,
-    ["session", grant.workspaceId, callerSessionId],
-    () => getSession2(db, grant.workspaceId, callerSessionId)
-  );
-  const turn = await reusableAuthorizationRead(
-    reads,
-    db,
-    ["turn", grant.workspaceId, callerSessionId, attemptId],
-    () => getSessionTurnForAttempt(db, grant.workspaceId, callerSessionId, attemptId)
-  );
-  if (!callerSession || callerSession.accountId !== grant.accountId || !turn || turn.id !== turnId || turn.executionGeneration !== executionGeneration || callerSession.activeTurnId !== turn.id) {
+  const callerSession = facts?.caller?.session ?? null;
+  const turn = facts?.caller?.turn ?? null;
+  if (!claims || !callerSession || callerSession.accountId !== grant.accountId || !turn || turn.id !== claims.turnId || turn.executionGeneration !== claims.executionGeneration) {
     throw new SessionAuthorizationDeniedError("caller_stale");
   }
   return {
     actor: SessionAuthorizationActor.parse({
       kind: "agent_attempt",
       subjectId: grant.subjectId,
-      callerSessionId,
+      callerSessionId: claims.callerSessionId,
       callerRootSessionId: callerSession.rootSessionId,
-      turnId,
-      attemptId,
-      executionGeneration,
+      turnId: claims.turnId,
+      attemptId: claims.attemptId,
+      executionGeneration: claims.executionGeneration,
       initiator: turn.initiator,
       initiatorContext: turn.initiatorContext,
       initiatingHumanSubjectId: turn.initiatingHumanSubjectId ?? (turn.initiator.kind === "subject" ? turn.initiator.subjectId : null)
@@ -616,7 +618,7 @@ async function resolveSessionAuthorizationActor(db, grant, reads) {
 
 // src/domain/session-file-access.ts
 async function readSessionAttachmentFiles(deps, grant, sessionId, fileIds) {
-  const authority = await getSessionAuthorityProjection2(deps.db, grant.workspaceId, sessionId);
+  const authority = await getSessionAuthorityProjection(deps.db, grant.workspaceId, sessionId);
   if (!authority) return [];
   const authorization = await requireSessionAuthorization(deps, grant, {
     sessionId,
@@ -1042,6 +1044,7 @@ import {
   getCapabilityCatalogItem,
   getCapabilityInstallation,
   getConnectionMetadata as getConnectionMetadata3,
+  isTransactionHandle,
   readCodexCutoverDisposition,
   resolveSubscriptionCoreCodexAppsDesignation,
   rlsContextForWorkspace,
@@ -1507,6 +1510,21 @@ var maxMcpCredentialHeaders = 16;
 var maxMcpCredentialHeaderValueLength = 4096;
 var mcpCredentialHeaderName = /^[A-Za-z0-9!#$%&'*+.^_`|~-]+$/;
 async function buildCapabilityCatalog(input) {
+  const serial = isTransactionHandle(input.db);
+  const reads = [
+    () => listCapabilityCatalogItems(input.db, input.workspaceId),
+    () => listCapabilityInstallations(input.db, input.workspaceId),
+    () => listSocialConnections(input.db, input.workspaceId, 500, input.subjectId),
+    () => listConnectionsMetadata(input.db, input.workspaceId, null),
+    () => discoverCuratedSkillLibraryItems(),
+    () => listInstalledSkills(input.db, input.workspaceId),
+    () => input.settings.codexConnectedAppsEnabled ? resolveCodexAppsDesignationForRun(
+      input.db,
+      input.workspaceId,
+      input.accountId ? { accountId: input.accountId } : {}
+    ) : Promise.resolve(null),
+    () => listEnabledMcpCapabilityServers(input.db, input.workspaceId)
+  ];
   const [
     persistedItems,
     capabilityInstallations,
@@ -1516,19 +1534,24 @@ async function buildCapabilityCatalog(input) {
     installedSkills,
     codexAppsDesignation,
     runnableMcpServers
-  ] = await Promise.all([
-    listCapabilityCatalogItems(input.db, input.workspaceId),
-    listCapabilityInstallations(input.db, input.workspaceId),
-    listSocialConnections(input.db, input.workspaceId, 500, input.subjectId),
-    listConnectionsMetadata(input.db, input.workspaceId, null),
-    discoverCuratedSkillLibraryItems(),
-    listInstalledSkills(input.db, input.workspaceId),
-    input.settings.codexConnectedAppsEnabled ? resolveCodexAppsDesignationForRun(
-      input.db,
-      input.workspaceId,
-      input.accountId ? { accountId: input.accountId } : {}
-    ) : Promise.resolve(null),
-    listEnabledMcpCapabilityServers(input.db, input.workspaceId)
+  ] = serial ? [
+    await reads[0](),
+    await reads[1](),
+    await reads[2](),
+    await reads[3](),
+    await reads[4](),
+    await reads[5](),
+    await reads[6](),
+    await reads[7]()
+  ] : await Promise.all([
+    reads[0](),
+    reads[1](),
+    reads[2](),
+    reads[3](),
+    reads[4](),
+    reads[5](),
+    reads[6](),
+    reads[7]()
   ]);
   const runnableCapabilityIds = new Set(runnableMcpServers.map((server) => server.capabilityId));
   const operatorOAuthClientConfigured = operatorOAuthClientResolver(input.settings);
@@ -4430,6 +4453,7 @@ import {
   listWorkspacesForSubject,
   findActiveApiKeyByHash,
   getWorkspaceGrant,
+  subjectHasLiveWorkspaceAuthorityInScope,
   requireWorkspace,
   resolveNamedManagedPersonalWorkspaceGrant
 } from "@opengeni/db";
@@ -4552,6 +4576,7 @@ var delegatedHumanAuthorizationSchema = z2.object({
 });
 var delegatedHumanRequests = /* @__PURE__ */ new WeakMap();
 var delegatedHumanContexts = /* @__PURE__ */ new WeakMap();
+var verifiedSiteViewerProofs = /* @__PURE__ */ new WeakSet();
 var delegatedHumanProfileSchema = z2.object({
   id: z2.string(),
   name: z2.string().nullable(),
@@ -4581,6 +4606,27 @@ function stampDelegatedHumanAuthorization(request, input) {
   Object.freeze(proof.permissions);
   delegatedHumanRequests.set(request, Object.freeze(proof));
 }
+function stampSiteViewerSessionAuthorization(request, input) {
+  if (input.subjectId.startsWith("user:")) {
+    stampDelegatedHumanAuthorization(request, {
+      ...input,
+      workspaceScope: { kind: "selected", workspaceIds: [input.workspaceId] }
+    });
+    return;
+  }
+  if (delegatedHumanRequests.has(request) || accessResolvedRequests.has(request))
+    throw new HTTPException8(403, { message: "request access authorization already resolved" });
+  const parsed = delegatedHumanAuthorizationSchema.extend({
+    subjectId: z2.string().max(1024).regex(/^external_user:[^\s\u0000-\u001f\u007f]+$/)
+  }).parse({ ...input, workspaceScope: { kind: "selected", workspaceIds: [input.workspaceId] } });
+  if (parsed.workspaceScope.kind !== "selected") throw new Error("Site workspace scope required");
+  Object.freeze(parsed.permissions);
+  Object.freeze(parsed.workspaceScope.workspaceIds);
+  Object.freeze(parsed.workspaceScope);
+  const proof = Object.freeze(parsed);
+  verifiedSiteViewerProofs.add(proof);
+  delegatedHumanRequests.set(request, proof);
+}
 var PERSONAL_API_KEY_TOKEN_PREFIX = "ogp_";
 async function stampPersonalApiKeyRequest(request, deps) {
   const authorization = request.headers.get("authorization");
@@ -5262,6 +5308,55 @@ async function resolveDelegatedHumanAccessContext(deps, proof) {
       message: "delegated humans require native organization access"
     });
   }
+  if (verifiedSiteViewerProofs.has(proof)) {
+    const workspaceId = proof.workspaceScope.kind === "selected" && proof.workspaceScope.workspaceIds.length === 1 ? proof.workspaceScope.workspaceIds[0] : null;
+    if (!workspaceId)
+      throw new HTTPException8(403, { message: "Site viewer workspace unavailable" });
+    const grant = await withWorkspaceSubjectRls(
+      deps.db,
+      workspaceId,
+      proof.subjectId,
+      async (tx) => {
+        if (!await subjectHasLiveWorkspaceAuthorityInScope(tx, {
+          accountId: proof.organizationId,
+          workspaceId,
+          subjectId: proof.subjectId
+        }))
+          return null;
+        return getWorkspaceGrant(tx, proof.subjectId, workspaceId, {
+          principalKind: "human_session"
+        });
+      }
+    );
+    if (!grant || grant.accountId !== proof.organizationId)
+      throw new HTTPException8(403, { message: "Site viewer membership unavailable" });
+    const bounded = Object.freeze({
+      ...grant,
+      permissionMode: "explicit",
+      permissions: Object.freeze(
+        explicitPermissions(
+          Permission.options.filter(
+            (permission) => hasPermission(grant.permissions, permission) && hasPermission(proof.permissions, permission, "explicit")
+          )
+        )
+      )
+    });
+    const accountGrant2 = Object.freeze({
+      accountId: proof.organizationId,
+      subjectId: proof.subjectId,
+      permissions: Object.freeze([])
+    });
+    const context2 = Object.freeze({
+      mode: "managed",
+      subjectId: proof.subjectId,
+      accountGrants: Object.freeze([accountGrant2]),
+      workspaceGrants: Object.freeze([bounded]),
+      defaultAccountId: proof.organizationId,
+      defaultWorkspaceId: workspaceId
+    });
+    delegatedHumanContexts.set(context2, proof);
+    return context2;
+  }
   const userId = proof.subjectId.slice("user:".length);
   const profiles = await getManagedUserProfilesByIds(deps.db, [userId]);
   const parsedProfile = delegatedHumanProfileSchema.safeParse(
@@ -5752,7 +5847,7 @@ import { withSessionRlsActorContext as withSessionRlsActorContext4 } from "@open
 // src/domain/file-owner.ts
 import {
   freezeAgentLearningPolicy,
-  getSessionAuthorityProjection as getSessionAuthorityProjection3
+  getSessionAuthorityProjection as getSessionAuthorityProjection2
 } from "@opengeni/db";
 async function fileOwnerContextForAccess(deps, access, permission) {
   if (access.grant.principalKind === "agent_attempt")
@@ -5782,7 +5877,7 @@ async function fileOwnerContextForAgent(deps, grant, permission) {
       executionGeneration: attempt.executionGeneration
     }
   });
-  const sessionAuthority = await getSessionAuthorityProjection3(
+  const sessionAuthority = await getSessionAuthorityProjection2(
     deps.db,
     grant.workspaceId,
     sessionId
@@ -5796,6 +5891,7 @@ async function fileOwnerContextForAgent(deps, grant, permission) {
     },
     subjectId: grant.subjectId,
     initiatingHumanSubjectId: attempt.initiatingHumanSubjectId,
+    agentRootSessionId: attempt.callerRootSessionId,
     privateFileOwnerSubjectId: snapshot.defaultScope === "personal" ? snapshot.subjectId : null
   };
 }
@@ -5955,14 +6051,14 @@ import {
   getSession as getSession5,
   getInitializedSessionCreateReplay,
   getSessionGoal,
-  getSessionAuthorityProjection as getSessionAuthorityProjection4,
+  getSessionAuthorityProjection as getSessionAuthorityProjection3,
   SessionIdConflictError,
   NewSessionDraftConflictError,
   getWorkspaceControlEvent,
   getSessionLineage,
   getSessionTurn,
   getSessionTurnInitiatingHumanSubjectId,
-  getSessionTurnForAttempt as getSessionTurnForAttempt3,
+  getSessionTurnForAttempt as getSessionTurnForAttempt2,
   getSessionTurnPersonalConnectionDelegations as getSessionTurnPersonalConnectionDelegations2,
   getSessionTurnXaiProviderAccountAuthoritySnapshot,
   getSessionTurnClaudeProviderAccountAuthoritySnapshot,
@@ -6018,7 +6114,7 @@ import {
   captureExternalLinkTurnAuthority,
   captureExternalLinkTaskAuthority,
   getExternalLinkTurnSnapshot,
-  getSessionTurnForAttempt as getSessionTurnForAttempt2
+  getSessionTurnForAttempt
 } from "@opengeni/db";
 
 // src/application/external-continuation.ts
@@ -6138,7 +6234,7 @@ function prepareExternalLinkTaskAdmission(authorization, actor) {
     } : void 0;
   }
   return async (tx, task) => {
-    const turn = await getSessionTurnForAttempt2(
+    const turn = await getSessionTurnForAttempt(
       tx,
       task.workspaceId,
       actor.sessionId,
@@ -8989,7 +9085,8 @@ function runOnOperationAdmission(services, enrollment) {
     operationResourcePolicy: enrollment.operationPolicy,
     operationResourcePolicySupported: enrollment.agentCapabilities.operationResourcePolicy === true,
     operationCpuQuotaSupported: enrollment.agentCapabilities.operationCpuQuota === true,
-    transactionalFsWriteSupported: enrollment.agentCapabilities.transactionalFsWrite === true
+    transactionalFsWriteSupported: enrollment.agentCapabilities.transactionalFsWrite === true,
+    browserControlHttpSupported: enrollment.agentCapabilities.browserControlHttp === true
   };
 }
 function hasSecretFileReference(carry) {
@@ -10931,6 +11028,9 @@ function sessionEffectiveToolProjectionInput(session, toolRefs, context) {
     "request_human_input",
     "list_models",
     ...webSearchPlan.providerTools,
+    // Interaction entry tools stay visible even with progressive disclosure;
+    // the remaining authorized family tools are disclosed after opening.
+    ...firstPartyMcpTools.filter((name) => name === "browser_open" || name === "computer_open"),
     ...toolRefs.some((ref) => ref.id === "opengeni" && ref.eager === true) || !progressiveDisclosure ? firstPartyMcpTools.filter((name) => !interactionNames.has(name) || !progressiveDisclosure) : [],
     ...!progressiveDisclosure ? runtimeToolNames : [],
     ...nativeComputerTools && !progressiveDisclosure ? CUA_DESKTOP_TOOLS.map((tool) => `interaction__cua_${tool.name}`) : []
@@ -13267,7 +13367,7 @@ async function createSessionForRequestInFileScope(unresolvedDeps, grant, workspa
     () => requireWorkspace5(db, workspaceId)
   );
   const workspaceSessionToolDefaults = resolveWorkspaceSessionToolDefaults2(workspace.settings);
-  const parentAuthority = parentSession ? await getSessionAuthorityProjection4(db, workspaceId, parentSession.id) : null;
+  const parentAuthority = parentSession ? await getSessionAuthorityProjection3(db, workspaceId, parentSession.id) : null;
   if (parentSession && !parentAuthority) {
     throw new HTTPException21(403, {
       message: "parent session authority is unavailable"
@@ -13328,7 +13428,7 @@ async function createSessionForRequestInFileScope(unresolvedDeps, grant, workspa
     payload.instructions = agentResolution.instructions;
   }
   bundledSkillIds = bundledSkillSelectionForAgentConfig2(bundledSkillIds, agentConfig);
-  const parentCallingTurn = parentSession && creationInitiator.actor ? await getSessionTurnForAttempt3(
+  const parentCallingTurn = parentSession && creationInitiator.actor ? await getSessionTurnForAttempt2(
     db,
     workspaceId,
     parentSession.id,
@@ -17588,7 +17688,7 @@ import { RotateSessionMcpCredentialsRequest } from "@opengeni/contracts";
 import {
   encryptVariableSetValue as encryptVariableSetValue3,
   getWorkspaceGrant as getWorkspaceGrant3,
-  subjectHasLiveWorkspaceAuthorityInScope
+  subjectHasLiveWorkspaceAuthorityInScope as subjectHasLiveWorkspaceAuthorityInScope2
 } from "@opengeni/db";
 import {
   rotateSessionMcpCredentialsAtomically,
@@ -17733,7 +17833,7 @@ async function rotateSessionMcpCredentialsForRequest(deps, authorization, sessio
           } else if (!hasVerifiedOwningUserAuthorization(authorization)) {
             throw new HTTPException24(403, { message: "credential rotation authority changed" });
           }
-          if (!await subjectHasLiveWorkspaceAuthorityInScope(tx, scope)) {
+          if (!await subjectHasLiveWorkspaceAuthorityInScope2(tx, scope)) {
             throw new HTTPException24(403, { message: "credential rotation authority changed" });
           }
         }
@@ -21066,7 +21166,7 @@ import {
   SignedJsonAutomationEnvelope,
   readTurnExecutionPolicyV1 as readTurnExecutionPolicyV13
 } from "@opengeni/contracts";
-import { getSession as getSession7, getSessionTurnForAttempt as getSessionTurnForAttempt4 } from "@opengeni/db";
+import { getSession as getSession7, getSessionTurnForAttempt as getSessionTurnForAttempt3 } from "@opengeni/db";
 import { HTTPException as HTTPException30 } from "hono/http-exception";
 
 // src/domain/pr-review.ts
@@ -21590,7 +21690,7 @@ async function automationCredentialRestrictionForGrant(db, grant) {
   if (isDeveloperSetupGrant(grant)) return "developer_setup";
   const actor = creationInitiatorForGrant(grant).actor;
   if (!actor) return void 0;
-  const turn = await getSessionTurnForAttempt4(
+  const turn = await getSessionTurnForAttempt3(
     db,
     grant.workspaceId,
     actor.sessionId,
@@ -22092,8 +22192,8 @@ import {
   getSandbox as getSandbox5,
   getSessionTurnXaiProviderAccountAuthoritySnapshot as getSessionTurnXaiProviderAccountAuthoritySnapshot2,
   getSession as getSession8,
-  getSessionTurnForAttempt as getSessionTurnForAttempt5,
-  getSessionAuthorityProjection as getSessionAuthorityProjection5,
+  getSessionTurnForAttempt as getSessionTurnForAttempt4,
+  getSessionAuthorityProjection as getSessionAuthorityProjection4,
   getWorkspaceDefaultRigId as getWorkspaceDefaultRigId2,
   withSessionRlsActorContext as withSessionRlsActorContext5,
   nestedPostgresSqlState as nestedPostgresSqlState8,
@@ -22675,7 +22775,7 @@ async function frozenScheduledTaskCreatorPolicy(input) {
       message: "the calling agent session is not available in this workspace"
     });
   }
-  const turn = await getSessionTurnForAttempt5(
+  const turn = await getSessionTurnForAttempt4(
     input.db,
     input.grant.workspaceId,
     input.actor.sessionId,
@@ -22879,7 +22979,7 @@ async function scheduledTaskCredentialRestrictionForGrant(db, grant, actor) {
   if (isDeveloperSetupGrant(grant)) return "developer_setup";
   if (!actor) return void 0;
   const session = await getSession8(db, grant.workspaceId, actor.sessionId);
-  const turn = await getSessionTurnForAttempt5(
+  const turn = await getSessionTurnForAttempt4(
     db,
     grant.workspaceId,
     actor.sessionId,
@@ -23839,7 +23939,7 @@ async function validateScheduledTaskAgentConfig(input) {
   }
   const fileActor = resources.some((resource) => resource.kind === "file") && hasPermission(input.grant.permissions, "files:read") ? input.authorization ? await fileOwnerContextForAccess({ db: input.db }, input.authorization, "files:read") : input.grant.principalKind === "agent_attempt" ? await fileOwnerContextForAgent({ db: input.db }, input.grant, "files:read") : { subjectId: input.grant.subjectId, privateFileOwnerSubjectId: null } : { subjectId: input.grant.subjectId, privateFileOwnerSubjectId: null };
   await withSessionRlsActorContext5(fileActor, async () => {
-    const target = input.payload.targetSessionId && input.payload.runMode !== "new_session_per_run" ? await getSessionAuthorityProjection5(
+    const target = input.payload.targetSessionId && input.payload.runMode !== "new_session_per_run" ? await getSessionAuthorityProjection4(
       input.db,
       input.workspaceId,
       input.payload.targetSessionId
@@ -25359,7 +25459,14 @@ async function getWorkspaceInsights(db, settings, input, observePhase) {
 }
 
 // src/domain/insights-usage.ts
-import { readInsightsCalls, readInsightsUsage } from "@opengeni/db";
+import {
+  readInsightsCalls,
+  readInsightsUsage,
+  readInsightsSiteUsage
+} from "@opengeni/db";
+async function getInsightsSiteUsage(db, input) {
+  return readInsightsSiteUsage(db, { ...input, now: input.now ?? /* @__PURE__ */ new Date() });
+}
 async function getInsightsUsage(db, input) {
   return await readInsightsUsage(db, { ...input, now: input.now ?? /* @__PURE__ */ new Date() });
 }
@@ -28282,6 +28389,40 @@ async function controlHumanWorkspaceTimer(deps, context, input) {
   ]);
 }
 
+// src/application/site-session-cancellation.ts
+import { cancelSiteRuntimeConversation } from "@opengeni/db";
+import {
+  publishDurableSessionEvents as publishDurableSessionEvents4,
+  publishDurableWorkspaceControlEvent as publishDurableWorkspaceControlEvent3
+} from "@opengeni/events";
+async function cancelPublishedSiteSession(deps, input) {
+  const result = await cancelSiteRuntimeConversation(deps.db, input);
+  if (!result) return null;
+  const bySession = /* @__PURE__ */ new Map();
+  for (const event of result.events) {
+    const group = bySession.get(event.sessionId) ?? [];
+    group.push(event);
+    bySession.set(event.sessionId, group);
+  }
+  const effects = await Promise.allSettled([
+    ...[...bySession].map(
+      ([sessionId, events]) => publishDurableSessionEvents4(deps.bus, input.workspaceId, sessionId, events)
+    ),
+    ...result.workspaceEvent ? [publishDurableWorkspaceControlEvent3(deps.bus, input.workspaceId, result.workspaceEvent)] : [],
+    ...result.wakeCount > 0 ? [deps.workflowClient.requestSessionWorkflowWakeDispatch()] : []
+  ]);
+  if (effects.some((effect) => effect.status === "rejected"))
+    console.warn(
+      "[site-lifecycle] post-commit fanout failed; durable events and wake outbox retained"
+    );
+  return {
+    receiptId: result.receiptId,
+    replay: result.replay,
+    cancelledSessionCount: result.cancelledSessionCount,
+    cancelledTurnCount: result.cancelledTurnCount
+  };
+}
+
 // src/application/archived-session-imports.ts
 import {
   AppendArchivedSessionEventsRequest,
@@ -28296,7 +28437,7 @@ import {
   importArchivedSession,
   withSessionRlsActorContext as withSessionRlsActorContext7
 } from "@opengeni/db";
-import { publishDurableSessionEvents as publishDurableSessionEvents4 } from "@opengeni/events";
+import { publishDurableSessionEvents as publishDurableSessionEvents5 } from "@opengeni/events";
 import { HTTPException as HTTPException38 } from "hono/http-exception";
 import { ArchivedSessionImportError as ArchivedSessionImportError2 } from "@opengeni/db";
 function requireImportAuthorization(authorization, workspaceId, permission) {
@@ -28327,7 +28468,7 @@ function importerScope(authorization, workspaceId, permission, fileOwnerSubjectI
 async function publishImportedEvents(deps, workspaceId, sessionId, events) {
   if (!events.length) return;
   try {
-    await publishDurableSessionEvents4(deps.bus, workspaceId, sessionId, events);
+    await publishDurableSessionEvents5(deps.bus, workspaceId, sessionId, events);
   } catch {
     console.warn("[session-import] committed timeline fanout deferred to replay", { sessionId });
   }
@@ -29502,6 +29643,7 @@ export {
   buildFleetContextForSession,
   buildMissingSecretAskCard2 as buildMissingSecretAskCard,
   cancelExternalWorkspaceMemberGrantForRequest,
+  cancelPublishedSiteSession,
   canonicalConfiguredModel,
   canonicalConversationDeliveryCommandJson,
   canonicalConversationDeliveryOutcomeJson,
@@ -29644,6 +29786,7 @@ export {
   getAutomationAdapter,
   getConnectorToolPermissions,
   getHumanComposerDraft,
+  getInsightsSiteUsage,
   getInsightsUsage,
   getManagedAuthRequestActorAbortSignal,
   getManagedAuthRequestActorAdmissionStamp,
@@ -30024,6 +30167,7 @@ export {
   stableJson,
   stampDelegatedHumanAuthorization,
   stampPersonalApiKeyRequest,
+  stampSiteViewerSessionAuthorization,
   statusForVoiceInputError,
   steerAgentSession,
   steerHumanQueuePrompt,