@opengeni/core 3.3.0 → 3.4.0

package/dist/goal-admission.d.ts

@@ -36,6 +36,7 @@ export declare function resolveGoalModelAdmission(db: Database, settings: Settin
         serverVersion?: string | undefined;
         databaseUrl: string;
         apiDatabasePoolMax: number;
+        databasePreparedStatements?: boolean | undefined;
         dbSchema: string;
         rlsStrategy: "force" | "scoped";
         runtimeDatabaseRole: string;
@@ -568,6 +569,7 @@ export declare function resolveGoalModelAdmission(db: Database, settings: Settin
         stripePublishableKey?: string | undefined;
         stripeWebhookSecret?: string | undefined;
         stripeCreditsProductId?: string | undefined;
+        subscriptionPlansEnabled: boolean;
         mcpServers: {
             id: string;
             name?: string | undefined;

package/dist/index.js

@@ -140,7 +140,7 @@ import {
 
 // src/domain/session-file-access.ts
 import {
-  getSessionAuthorityProjection as getSessionAuthorityProjection2,
+  getSessionAuthorityProjection,
   getFilesForSubject,
   readSessionFileAttachments,
   withSessionRlsActorContext as withSessionRlsActorContext2
@@ -157,11 +157,8 @@ import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
 import {
   currentSessionRlsActorIdentityKey,
   currentSiteViewerRlsContext,
-  getSessionAuthorityProjection,
-  getSessionAuthorizationTargetProjection,
   getSession as getSession2,
-  getSessionTurnForAttempt,
-  getSlackInteractionSessionAccessForSession,
+  getSessionAuthorizationFacts,
   withSessionRlsActorContext
 } from "@opengeni/db";
 
@@ -405,7 +402,9 @@ async function withResolvedSessionAuthorization(authorization, fn) {
 }
 async function requireLiveAgentAttemptAuthorization(db, grant, callerSessionId) {
   const reads = claimSessionAuthorizationReads();
-  const { actor } = await resolveSessionAuthorizationActor(db, grant, reads);
+  const claims = agentAttemptClaims(grant);
+  const facts = claims ? await readSessionAuthorizationFacts(db, grant, claims.callerSessionId, claims, reads) : null;
+  const { actor } = resolveSessionAuthorizationActor(grant, claims, facts);
   if (actor.kind !== "agent_attempt" || actor.callerSessionId !== callerSessionId) {
     throw new SessionAuthorizationDeniedError("caller_stale");
   }
@@ -415,23 +414,16 @@ async function requireSessionAuthorization(deps, grant, input) {
   const reads = claimSessionAuthorizationReads();
   const port = deps.sessionAuthorization;
   const isAgentAttempt = grantHasAgentAttemptAuthority(grant);
-  const slackAccess = await getSlackInteractionSessionAccessForSession(deps.db, {
-    accountId: grant.accountId,
-    workspaceId: grant.workspaceId,
-    sessionId: input.sessionId
-  });
-  const authority = await getSessionAuthorityProjection(
-    deps.db,
-    grant.workspaceId,
-    input.sessionId
-  );
+  const claims = agentAttemptClaims(grant);
+  const facts = await readSessionAuthorizationFacts(deps.db, grant, input.sessionId, claims, reads);
+  const authority = facts.target;
+  const slackAccess = authority?.slackAccess ?? null;
   if (!authority && input.surface !== "core") {
     throw new SessionAuthorizationDeniedError("not_found");
   }
   if (authority?.siteAccessRootId) {
     const viewer = currentSiteViewerRlsContext();
-    const resolved = await resolveSessionAuthorizationActor(deps.db, grant, reads);
-    const actor2 = resolved.actor;
+    const actor2 = resolveSessionAuthorizationActor(grant, claims, facts).actor;
     const allowed = actor2.kind === "agent_attempt" ? authority.siteOwnerSubjectId !== null && authority.siteOwnerSubjectId === actor2.initiatingHumanSubjectId || actor2.callerRootSessionId === authority.rootSessionId && authority.siteAccessRootId === authority.rootSessionId : authority.siteOwnerSubjectId === actor2.subjectId || actor2.subjectId === `site:${authority.siteId}` && viewer?.siteId === authority.siteId && viewer.principal === authority.siteViewerPrincipal;
     if (!allowed) throw new SessionAuthorizationDeniedError("not_found");
   }
@@ -445,15 +437,15 @@ async function requireSessionAuthorization(deps, grant, input) {
     return null;
   }
   if (!authority) throw new SessionAuthorizationDeniedError("not_found");
-  const resolvedActor = await resolveSessionAuthorizationActor(deps.db, grant, reads);
-  const resolvedTarget = await resolveSessionAuthorizationTarget(
-    deps.db,
-    grant,
-    input.sessionId,
-    reads
-  );
+  const resolvedActor = resolveSessionAuthorizationActor(grant, claims, facts);
+  if (authority.accountId !== grant.accountId) {
+    throw new SessionAuthorizationDeniedError("not_found");
+  }
   const actor = resolvedActor.actor;
-  const target = resolvedTarget.target;
+  const target = {
+    sessionId: authority.sessionId,
+    rootSessionId: authority.rootSessionId
+  };
   const agentRelatedSessionAccess = actor.kind === "agent_attempt" ? relatedSessionAccessForAgentAttempt(actor, target.sessionId) : null;
   if (actor.kind === "agent_attempt" && input.operation === "session.approval.write") {
     throw new SessionAuthorizationDeniedError("forbidden");
@@ -524,7 +516,9 @@ async function requireSessionAuthorizationListScope(deps, grant, surface) {
   const port = deps.sessionAuthorization;
   const isAgentAttempt = grantHasAgentAttemptAuthority(grant);
   if (!port && !isAgentAttempt) return null;
-  const { actor, callerAccess } = await resolveSessionAuthorizationActor(deps.db, grant, reads);
+  const claims = agentAttemptClaims(grant);
+  const facts = claims ? await readSessionAuthorizationFacts(deps.db, grant, claims.callerSessionId, claims, reads) : null;
+  const { actor, callerAccess } = resolveSessionAuthorizationActor(grant, claims, facts);
   const viewer = actor.kind === "agent_attempt" && callerAccess ? {
     callerRootSessionId: actor.callerRootSessionId,
     agentAccess: callerAccess.agentAccess,
@@ -553,27 +547,39 @@ async function requireSessionAuthorizationListScope(deps, grant, surface) {
   };
   return viewer ? agentAccessListScopeForViewer(viewer, hostScope) : hostScope;
 }
-async function resolveSessionAuthorizationTarget(db, grant, sessionId, reads) {
-  const session = await reusableAuthorizationRead(
-    reads,
-    db,
-    ["target-identity", grant.workspaceId, sessionId],
-    () => getSessionAuthorizationTargetProjection(db, grant.workspaceId, sessionId)
-  );
-  if (!session || session.accountId !== grant.accountId) {
-    throw new SessionAuthorizationDeniedError("not_found");
-  }
-  return {
-    target: { sessionId: session.id, rootSessionId: session.rootSessionId }
-  };
-}
-async function resolveSessionAuthorizationActor(db, grant, reads) {
+function agentAttemptClaims(grant) {
+  if (!grantHasAgentAttemptAuthority(grant)) return null;
   const callerSessionId = grant.metadata?.["sessionId"];
   const turnId = grant.metadata?.["turnId"];
   const attemptId = grant.metadata?.["attemptId"];
   const executionGeneration = grant.metadata?.["executionGeneration"];
-  const isAgentAttempt = grantHasAgentAttemptAuthority(grant);
-  if (!isAgentAttempt) {
+  if (typeof callerSessionId !== "string" || typeof turnId !== "string" || typeof attemptId !== "string" || typeof executionGeneration !== "number" || !Number.isSafeInteger(executionGeneration) || executionGeneration < 1) {
+    return null;
+  }
+  return { callerSessionId, turnId, attemptId, executionGeneration };
+}
+async function readSessionAuthorizationFacts(db, grant, sessionId, claims, reads) {
+  return await reusableAuthorizationRead(
+    reads,
+    db,
+    [
+      "authorization-facts",
+      grant.accountId,
+      grant.workspaceId,
+      sessionId,
+      claims?.callerSessionId ?? "",
+      claims?.attemptId ?? ""
+    ],
+    () => getSessionAuthorizationFacts(db, {
+      accountId: grant.accountId,
+      workspaceId: grant.workspaceId,
+      sessionId,
+      caller: claims ? { sessionId: claims.callerSessionId, attemptId: claims.attemptId } : void 0
+    })
+  );
+}
+function resolveSessionAuthorizationActor(grant, claims, facts) {
+  if (!grantHasAgentAttemptAuthority(grant)) {
     return {
       actor: SessionAuthorizationActor.parse({
         kind: "subject",
@@ -584,33 +590,20 @@ async function resolveSessionAuthorizationActor(db, grant, reads) {
       callerAccess: null
     };
   }
-  if (typeof callerSessionId !== "string" || typeof turnId !== "string" || typeof attemptId !== "string" || typeof executionGeneration !== "number" || !Number.isSafeInteger(executionGeneration) || executionGeneration < 1) {
-    throw new SessionAuthorizationDeniedError("caller_stale");
-  }
-  const callerSession = await reusableAuthorizationRead(
-    reads,
-    db,
-    ["session", grant.workspaceId, callerSessionId],
-    () => getSession2(db, grant.workspaceId, callerSessionId)
-  );
-  const turn = await reusableAuthorizationRead(
-    reads,
-    db,
-    ["turn", grant.workspaceId, callerSessionId, attemptId],
-    () => getSessionTurnForAttempt(db, grant.workspaceId, callerSessionId, attemptId)
-  );
-  if (!callerSession || callerSession.accountId !== grant.accountId || !turn || turn.id !== turnId || turn.executionGeneration !== executionGeneration || callerSession.activeTurnId !== turn.id) {
+  const callerSession = facts?.caller?.session ?? null;
+  const turn = facts?.caller?.turn ?? null;
+  if (!claims || !callerSession || callerSession.accountId !== grant.accountId || !turn || turn.id !== claims.turnId || turn.executionGeneration !== claims.executionGeneration) {
     throw new SessionAuthorizationDeniedError("caller_stale");
   }
   return {
     actor: SessionAuthorizationActor.parse({
       kind: "agent_attempt",
       subjectId: grant.subjectId,
-      callerSessionId,
+      callerSessionId: claims.callerSessionId,
       callerRootSessionId: callerSession.rootSessionId,
-      turnId,
-      attemptId,
-      executionGeneration,
+      turnId: claims.turnId,
+      attemptId: claims.attemptId,
+      executionGeneration: claims.executionGeneration,
       initiator: turn.initiator,
       initiatorContext: turn.initiatorContext,
       initiatingHumanSubjectId: turn.initiatingHumanSubjectId ?? (turn.initiator.kind === "subject" ? turn.initiator.subjectId : null)
@@ -625,7 +618,7 @@ async function resolveSessionAuthorizationActor(db, grant, reads) {
 
 // src/domain/session-file-access.ts
 async function readSessionAttachmentFiles(deps, grant, sessionId, fileIds) {
-  const authority = await getSessionAuthorityProjection2(deps.db, grant.workspaceId, sessionId);
+  const authority = await getSessionAuthorityProjection(deps.db, grant.workspaceId, sessionId);
   if (!authority) return [];
   const authorization = await requireSessionAuthorization(deps, grant, {
     sessionId,
@@ -1051,6 +1044,7 @@ import {
   getCapabilityCatalogItem,
   getCapabilityInstallation,
   getConnectionMetadata as getConnectionMetadata3,
+  isTransactionHandle,
   readCodexCutoverDisposition,
   resolveSubscriptionCoreCodexAppsDesignation,
   rlsContextForWorkspace,
@@ -1516,6 +1510,21 @@ var maxMcpCredentialHeaders = 16;
 var maxMcpCredentialHeaderValueLength = 4096;
 var mcpCredentialHeaderName = /^[A-Za-z0-9!#$%&'*+.^_`|~-]+$/;
 async function buildCapabilityCatalog(input) {
+  const serial = isTransactionHandle(input.db);
+  const reads = [
+    () => listCapabilityCatalogItems(input.db, input.workspaceId),
+    () => listCapabilityInstallations(input.db, input.workspaceId),
+    () => listSocialConnections(input.db, input.workspaceId, 500, input.subjectId),
+    () => listConnectionsMetadata(input.db, input.workspaceId, null),
+    () => discoverCuratedSkillLibraryItems(),
+    () => listInstalledSkills(input.db, input.workspaceId),
+    () => input.settings.codexConnectedAppsEnabled ? resolveCodexAppsDesignationForRun(
+      input.db,
+      input.workspaceId,
+      input.accountId ? { accountId: input.accountId } : {}
+    ) : Promise.resolve(null),
+    () => listEnabledMcpCapabilityServers(input.db, input.workspaceId)
+  ];
   const [
     persistedItems,
     capabilityInstallations,
@@ -1525,19 +1534,24 @@ async function buildCapabilityCatalog(input) {
     installedSkills,
     codexAppsDesignation,
     runnableMcpServers
-  ] = await Promise.all([
-    listCapabilityCatalogItems(input.db, input.workspaceId),
-    listCapabilityInstallations(input.db, input.workspaceId),
-    listSocialConnections(input.db, input.workspaceId, 500, input.subjectId),
-    listConnectionsMetadata(input.db, input.workspaceId, null),
-    discoverCuratedSkillLibraryItems(),
-    listInstalledSkills(input.db, input.workspaceId),
-    input.settings.codexConnectedAppsEnabled ? resolveCodexAppsDesignationForRun(
-      input.db,
-      input.workspaceId,
-      input.accountId ? { accountId: input.accountId } : {}
-    ) : Promise.resolve(null),
-    listEnabledMcpCapabilityServers(input.db, input.workspaceId)
+  ] = serial ? [
+    await reads[0](),
+    await reads[1](),
+    await reads[2](),
+    await reads[3](),
+    await reads[4](),
+    await reads[5](),
+    await reads[6](),
+    await reads[7]()
+  ] : await Promise.all([
+    reads[0](),
+    reads[1](),
+    reads[2](),
+    reads[3](),
+    reads[4](),
+    reads[5](),
+    reads[6](),
+    reads[7]()
   ]);
   const runnableCapabilityIds = new Set(runnableMcpServers.map((server) => server.capabilityId));
   const operatorOAuthClientConfigured = operatorOAuthClientResolver(input.settings);
@@ -5833,7 +5847,7 @@ import { withSessionRlsActorContext as withSessionRlsActorContext4 } from "@open
 // src/domain/file-owner.ts
 import {
   freezeAgentLearningPolicy,
-  getSessionAuthorityProjection as getSessionAuthorityProjection3
+  getSessionAuthorityProjection as getSessionAuthorityProjection2
 } from "@opengeni/db";
 async function fileOwnerContextForAccess(deps, access, permission) {
   if (access.grant.principalKind === "agent_attempt")
@@ -5863,7 +5877,7 @@ async function fileOwnerContextForAgent(deps, grant, permission) {
       executionGeneration: attempt.executionGeneration
     }
   });
-  const sessionAuthority = await getSessionAuthorityProjection3(
+  const sessionAuthority = await getSessionAuthorityProjection2(
     deps.db,
     grant.workspaceId,
     sessionId
@@ -6037,14 +6051,14 @@ import {
   getSession as getSession5,
   getInitializedSessionCreateReplay,
   getSessionGoal,
-  getSessionAuthorityProjection as getSessionAuthorityProjection4,
+  getSessionAuthorityProjection as getSessionAuthorityProjection3,
   SessionIdConflictError,
   NewSessionDraftConflictError,
   getWorkspaceControlEvent,
   getSessionLineage,
   getSessionTurn,
   getSessionTurnInitiatingHumanSubjectId,
-  getSessionTurnForAttempt as getSessionTurnForAttempt3,
+  getSessionTurnForAttempt as getSessionTurnForAttempt2,
   getSessionTurnPersonalConnectionDelegations as getSessionTurnPersonalConnectionDelegations2,
   getSessionTurnXaiProviderAccountAuthoritySnapshot,
   getSessionTurnClaudeProviderAccountAuthoritySnapshot,
@@ -6100,7 +6114,7 @@ import {
   captureExternalLinkTurnAuthority,
   captureExternalLinkTaskAuthority,
   getExternalLinkTurnSnapshot,
-  getSessionTurnForAttempt as getSessionTurnForAttempt2
+  getSessionTurnForAttempt
 } from "@opengeni/db";
 
 // src/application/external-continuation.ts
@@ -6220,7 +6234,7 @@ function prepareExternalLinkTaskAdmission(authorization, actor) {
     } : void 0;
   }
   return async (tx, task) => {
-    const turn = await getSessionTurnForAttempt2(
+    const turn = await getSessionTurnForAttempt(
       tx,
       task.workspaceId,
       actor.sessionId,
@@ -11014,6 +11028,9 @@ function sessionEffectiveToolProjectionInput(session, toolRefs, context) {
     "request_human_input",
     "list_models",
     ...webSearchPlan.providerTools,
+    // Interaction entry tools stay visible even with progressive disclosure;
+    // the remaining authorized family tools are disclosed after opening.
+    ...firstPartyMcpTools.filter((name) => name === "browser_open" || name === "computer_open"),
     ...toolRefs.some((ref) => ref.id === "opengeni" && ref.eager === true) || !progressiveDisclosure ? firstPartyMcpTools.filter((name) => !interactionNames.has(name) || !progressiveDisclosure) : [],
     ...!progressiveDisclosure ? runtimeToolNames : [],
     ...nativeComputerTools && !progressiveDisclosure ? CUA_DESKTOP_TOOLS.map((tool) => `interaction__cua_${tool.name}`) : []
@@ -13350,7 +13367,7 @@ async function createSessionForRequestInFileScope(unresolvedDeps, grant, workspa
     () => requireWorkspace5(db, workspaceId)
   );
   const workspaceSessionToolDefaults = resolveWorkspaceSessionToolDefaults2(workspace.settings);
-  const parentAuthority = parentSession ? await getSessionAuthorityProjection4(db, workspaceId, parentSession.id) : null;
+  const parentAuthority = parentSession ? await getSessionAuthorityProjection3(db, workspaceId, parentSession.id) : null;
   if (parentSession && !parentAuthority) {
     throw new HTTPException21(403, {
       message: "parent session authority is unavailable"
@@ -13411,7 +13428,7 @@ async function createSessionForRequestInFileScope(unresolvedDeps, grant, workspa
     payload.instructions = agentResolution.instructions;
   }
   bundledSkillIds = bundledSkillSelectionForAgentConfig2(bundledSkillIds, agentConfig);
-  const parentCallingTurn = parentSession && creationInitiator.actor ? await getSessionTurnForAttempt3(
+  const parentCallingTurn = parentSession && creationInitiator.actor ? await getSessionTurnForAttempt2(
     db,
     workspaceId,
     parentSession.id,
@@ -21149,7 +21166,7 @@ import {
   SignedJsonAutomationEnvelope,
   readTurnExecutionPolicyV1 as readTurnExecutionPolicyV13
 } from "@opengeni/contracts";
-import { getSession as getSession7, getSessionTurnForAttempt as getSessionTurnForAttempt4 } from "@opengeni/db";
+import { getSession as getSession7, getSessionTurnForAttempt as getSessionTurnForAttempt3 } from "@opengeni/db";
 import { HTTPException as HTTPException30 } from "hono/http-exception";
 
 // src/domain/pr-review.ts
@@ -21673,7 +21690,7 @@ async function automationCredentialRestrictionForGrant(db, grant) {
   if (isDeveloperSetupGrant(grant)) return "developer_setup";
   const actor = creationInitiatorForGrant(grant).actor;
   if (!actor) return void 0;
-  const turn = await getSessionTurnForAttempt4(
+  const turn = await getSessionTurnForAttempt3(
     db,
     grant.workspaceId,
     actor.sessionId,
@@ -22175,8 +22192,8 @@ import {
   getSandbox as getSandbox5,
   getSessionTurnXaiProviderAccountAuthoritySnapshot as getSessionTurnXaiProviderAccountAuthoritySnapshot2,
   getSession as getSession8,
-  getSessionTurnForAttempt as getSessionTurnForAttempt5,
-  getSessionAuthorityProjection as getSessionAuthorityProjection5,
+  getSessionTurnForAttempt as getSessionTurnForAttempt4,
+  getSessionAuthorityProjection as getSessionAuthorityProjection4,
   getWorkspaceDefaultRigId as getWorkspaceDefaultRigId2,
   withSessionRlsActorContext as withSessionRlsActorContext5,
   nestedPostgresSqlState as nestedPostgresSqlState8,
@@ -22758,7 +22775,7 @@ async function frozenScheduledTaskCreatorPolicy(input) {
       message: "the calling agent session is not available in this workspace"
     });
   }
-  const turn = await getSessionTurnForAttempt5(
+  const turn = await getSessionTurnForAttempt4(
     input.db,
     input.grant.workspaceId,
     input.actor.sessionId,
@@ -22962,7 +22979,7 @@ async function scheduledTaskCredentialRestrictionForGrant(db, grant, actor) {
   if (isDeveloperSetupGrant(grant)) return "developer_setup";
   if (!actor) return void 0;
   const session = await getSession8(db, grant.workspaceId, actor.sessionId);
-  const turn = await getSessionTurnForAttempt5(
+  const turn = await getSessionTurnForAttempt4(
     db,
     grant.workspaceId,
     actor.sessionId,
@@ -23922,7 +23939,7 @@ async function validateScheduledTaskAgentConfig(input) {
   }
   const fileActor = resources.some((resource) => resource.kind === "file") && hasPermission(input.grant.permissions, "files:read") ? input.authorization ? await fileOwnerContextForAccess({ db: input.db }, input.authorization, "files:read") : input.grant.principalKind === "agent_attempt" ? await fileOwnerContextForAgent({ db: input.db }, input.grant, "files:read") : { subjectId: input.grant.subjectId, privateFileOwnerSubjectId: null } : { subjectId: input.grant.subjectId, privateFileOwnerSubjectId: null };
   await withSessionRlsActorContext5(fileActor, async () => {
-    const target = input.payload.targetSessionId && input.payload.runMode !== "new_session_per_run" ? await getSessionAuthorityProjection5(
+    const target = input.payload.targetSessionId && input.payload.runMode !== "new_session_per_run" ? await getSessionAuthorityProjection4(
       input.db,
       input.workspaceId,
       input.payload.targetSessionId