@opengeni/core 4.3.3-canary.39786771332001 → 4.5.0

package/dist/domain/capabilities.d.ts

@@ -1,5 +1,5 @@
 import { type Settings } from "@opengeni/config";
-import { CapabilityCatalogItem, OPENGENI_BROWSER_EXTENSION_URL, type AccessGrant, type CapabilityCatalogResponse, type CapabilityInstallation, type CreateCapabilityCatalogItemRequest, type EnableCapabilityRequest, type McpPersonalConnectionDelegation } from "@opengeni/contracts";
+import { CapabilityCatalogItem, OPENGENI_BROWSER_EXTENSION_URL, type AccessGrant, type CapabilityCatalogResponse, type CapabilityInstallation, type CreateCapabilityCatalogItemRequest, type EnableCapabilityRequest, type McpPersonalConnectionDelegation, ToolAuthNeededPayload, type UserSetupBlocker } from "@opengeni/contracts";
 import { type SubscriptionCoreCodexAppsRequestAuth, type CodexCutoverDisposition, type Database, type ApiIntegrationRuntime, type EnabledMcpCapabilityServer } from "@opengeni/db";
 declare const officialMcpRegistryUrl = "https://registry.modelcontextprotocol.io";
 export declare function buildCapabilityCatalog(input: {
@@ -163,6 +163,16 @@ type McpRegistryFetch = (input: URL, init?: RequestInit) => Promise<Response>;
  * keeping its authorization state server-derived and explicit.
  */
 export declare function codexAppsCatalogItem(available: boolean): CapabilityCatalogItem;
+/** How people and agents name the deployment's Chrome extension, and where it is installed. */
+export type BrowserExtension = {
+    name: string;
+    installUrl: string;
+};
+/** The deployment's configured Chrome extension, else Opengeni Browser. */
+export declare function browserExtension(settings: {
+    browserExtensionName?: string | undefined;
+    browserExtensionInstallUrl?: string | undefined;
+}): BrowserExtension;
 /** The catalog id of the Excel add-in tile and its in-chat install card. */
 export declare const EXCEL_ADDIN_CAPABILITY_ID = "api:excel-addin";
 /** How people and agents name the deployment's Excel add-in, and where it is installed. */
@@ -195,7 +205,19 @@ export declare const CONNECTED_MACHINE_CAPABILITY_ID = "api:connected-machine";
 export { OPENGENI_BROWSER_EXTENSION_URL };
 export declare function nativeConnectionCapabilityRecommendations(options?: {
     connectedMachines?: boolean;
+    browserExtension?: BrowserExtension;
 }): CapabilityCatalogItem[];
+/**
+ * The `tool.auth_needed` payload of the setup card that fixes a person-fixable
+ * tool refusal (see USER_SETUP_BLOCKERS). Every tool and route that hits such a
+ * refusal posts this same card in the calling turn, so the person sees the fix
+ * on the first attempt. Null when the blocker's capability is not a native
+ * card this deployment can show.
+ */
+export declare function userSetupCardPayload(blocker: UserSetupBlocker, options: {
+    toolName: string;
+    requestedSandboxId?: string | null;
+}): ToolAuthNeededPayload | null;
 export declare function applyCapabilityEnablement(item: CapabilityCatalogItem, installation: CapabilityInstallation | undefined): CapabilityCatalogItem;
 export type CapabilityCatalogSearchMatch = {
     item: CapabilityCatalogItem;

package/dist/editable-artifact-live.js

@@ -25,8 +25,8 @@ import {
   encodeEditableArtifactLiveOpenWireFrame,
   encodeEditableArtifactLiveServerWireFrame,
   inspectEditableArtifactLiveWireEnvelope
-} from "./chunk-R5FLZL3D.js";
-import "./chunk-DMVCCCCX.js";
+} from "./chunk-QHQCVWRA.js";
+import "./chunk-WZ46UWNS.js";
 export {
   EDITABLE_ARTIFACT_HINT_MAX_BYTES,
   EDITABLE_ARTIFACT_HINT_SUBJECT_PREFIX,

package/dist/editable-artifacts.js

@@ -25,7 +25,7 @@ import {
   unsupportedEditableArtifactExport,
   validateEditableArtifactMaterializationJob,
   validateEditableArtifactPinnedVersion
-} from "./chunk-C3BPQGEH.js";
+} from "./chunk-U3SWQHVX.js";
 import {
   EDITABLE_ARTIFACT_COMPACTION_BYTE_THRESHOLD,
   EDITABLE_ARTIFACT_COMPACTION_TRANSACTION_THRESHOLD,
@@ -91,7 +91,7 @@ import {
   mergeCausalFrontiers,
   ogatxEditableArtifactMutationIntentCodec,
   validateEditableArtifactActor
-} from "./chunk-DMVCCCCX.js";
+} from "./chunk-WZ46UWNS.js";
 export {
   EDITABLE_ARTIFACT_COMPACTION_BYTE_THRESHOLD,
   EDITABLE_ARTIFACT_COMPACTION_TRANSACTION_THRESHOLD,

package/dist/goal-admission.d.ts

@@ -84,6 +84,8 @@ export declare function resolveGoalModelAdmission(db: Database, settings: Settin
         webBaseUrl?: string | undefined;
         officeAddinName: string;
         officeAddinInstallUrl?: string | undefined;
+        browserExtensionName: string;
+        browserExtensionInstallUrl?: string | undefined;
         agentReleasesBaseUrl: string;
         agentStableVersion: string;
         desktopStableVersion?: string | undefined;

package/dist/index.js

@@ -16,34 +16,6 @@ import {
   withManagedAuthSessionLookup
 } from "./chunk-TTWTXQB2.js";
 import "./chunk-QO5GVFFO.js";
-import {
-  EDITABLE_ARTIFACT_HINT_MAX_BYTES,
-  EDITABLE_ARTIFACT_HINT_SUBJECT_PREFIX,
-  EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION,
-  EDITABLE_ARTIFACT_LIVE_WIRE_VERSION,
-  EditableArtifactApplication,
-  EditableArtifactCompatibilityError,
-  EditableArtifactHintEncodingError,
-  EditableArtifactLiveError,
-  EditableArtifactLiveOutboxDispatcher,
-  EditableArtifactLiveServer,
-  EditableArtifactLiveTicketAuthority,
-  InMemoryEditableArtifactLiveTicketStore,
-  MathEditableArtifactOutboxRandom,
-  SystemEditableArtifactLiveClock,
-  SystemEditableArtifactLiveScheduler,
-  WebCryptoEditableArtifactLiveTokens,
-  decodeEditableArtifactBrokerHint,
-  decodeEditableArtifactLiveClientWireFrame,
-  decodeEditableArtifactLiveServerWireFrame,
-  editableArtifactLiveHintSubject,
-  encodeEditableArtifactBrokerHint,
-  encodeEditableArtifactLiveAppliedWireFrame,
-  encodeEditableArtifactLiveMutationWireFrame,
-  encodeEditableArtifactLiveOpenWireFrame,
-  encodeEditableArtifactLiveServerWireFrame,
-  inspectEditableArtifactLiveWireEnvelope
-} from "./chunk-R5FLZL3D.js";
 import {
   EDITABLE_ARTIFACT_EXPORT_FORMATS,
   EDITABLE_ARTIFACT_EXPORT_MAX_DOWNLOAD_BYTES,
@@ -71,7 +43,35 @@ import {
   unsupportedEditableArtifactExport,
   validateEditableArtifactMaterializationJob,
   validateEditableArtifactPinnedVersion
-} from "./chunk-C3BPQGEH.js";
+} from "./chunk-U3SWQHVX.js";
+import {
+  EDITABLE_ARTIFACT_HINT_MAX_BYTES,
+  EDITABLE_ARTIFACT_HINT_SUBJECT_PREFIX,
+  EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION,
+  EDITABLE_ARTIFACT_LIVE_WIRE_VERSION,
+  EditableArtifactApplication,
+  EditableArtifactCompatibilityError,
+  EditableArtifactHintEncodingError,
+  EditableArtifactLiveError,
+  EditableArtifactLiveOutboxDispatcher,
+  EditableArtifactLiveServer,
+  EditableArtifactLiveTicketAuthority,
+  InMemoryEditableArtifactLiveTicketStore,
+  MathEditableArtifactOutboxRandom,
+  SystemEditableArtifactLiveClock,
+  SystemEditableArtifactLiveScheduler,
+  WebCryptoEditableArtifactLiveTokens,
+  decodeEditableArtifactBrokerHint,
+  decodeEditableArtifactLiveClientWireFrame,
+  decodeEditableArtifactLiveServerWireFrame,
+  editableArtifactLiveHintSubject,
+  encodeEditableArtifactBrokerHint,
+  encodeEditableArtifactLiveAppliedWireFrame,
+  encodeEditableArtifactLiveMutationWireFrame,
+  encodeEditableArtifactLiveOpenWireFrame,
+  encodeEditableArtifactLiveServerWireFrame,
+  inspectEditableArtifactLiveWireEnvelope
+} from "./chunk-QHQCVWRA.js";
 import {
   EDITABLE_ARTIFACT_COMPACTION_BYTE_THRESHOLD,
   EDITABLE_ARTIFACT_COMPACTION_TRANSACTION_THRESHOLD,
@@ -137,7 +137,7 @@ import {
   mergeCausalFrontiers,
   ogatxEditableArtifactMutationIntentCodec,
   validateEditableArtifactActor
-} from "./chunk-DMVCCCCX.js";
+} from "./chunk-WZ46UWNS.js";
 
 // src/domain/session-file-access.ts
 import {
@@ -1068,7 +1068,8 @@ import {
   FIKEN_PROVIDER_DOMAIN as FIKEN_PROVIDER_DOMAIN2,
   FIRST_PARTY_MCP_TOOL_NAMES,
   OPENGENI_BROWSER_EXTENSION_URL,
-  assertOrganizationIntegrationAllowed
+  assertOrganizationIntegrationAllowed,
+  ToolAuthNeededPayload
 } from "@opengeni/contracts";
 import {
   CODEX_APPS_MCP_SERVER_ID,
@@ -2614,6 +2615,12 @@ function onePasswordCatalogItem(connections) {
     }
   });
 }
+function browserExtension(settings) {
+  return {
+    name: settings.browserExtensionName ?? "Opengeni Browser",
+    installUrl: settings.browserExtensionInstallUrl ?? OPENGENI_BROWSER_EXTENSION_URL
+  };
+}
 var EXCEL_ADDIN_CAPABILITY_ID = "api:excel-addin";
 function excelAddin(settings) {
   const web = settings.webBaseUrl ?? settings.publicBaseUrl;
@@ -2702,6 +2709,7 @@ function providerIntegrationCatalogItems(socialConnections) {
 }
 var CONNECTED_MACHINE_CAPABILITY_ID = "api:connected-machine";
 function nativeConnectionCapabilityRecommendations(options = {}) {
+  const extensionUrl = options.browserExtension?.installUrl ?? OPENGENI_BROWSER_EXTENSION_URL;
   const items = [
     CapabilityCatalogItem.parse({
       id: "api:github-app",
@@ -2770,7 +2778,7 @@ function nativeConnectionCapabilityRecommendations(options = {}) {
         tools: [{ kind: "mcp", id: "opengeni" }],
         runtime: {
           available: true,
-          notes: `The person sets up their machine from the chat card. The Chrome browser extension (${OPENGENI_BROWSER_EXTENSION_URL}) works only after the machine is connected.`
+          notes: `The person sets up their machine from the chat card. The Chrome browser extension (${extensionUrl}) works only after the machine is connected.`
         },
         lifecycle: {
           status: "available",
@@ -2787,7 +2795,7 @@ function nativeConnectionCapabilityRecommendations(options = {}) {
             "connected_machine_enroll_token",
             "connected_machine_enable_screen_control"
           ],
-          browserExtensionUrl: OPENGENI_BROWSER_EXTENSION_URL,
+          browserExtensionUrl: extensionUrl,
           recommendationOnly: true
         }
       })
@@ -2795,6 +2803,30 @@ function nativeConnectionCapabilityRecommendations(options = {}) {
   }
   return items;
 }
+function userSetupCardPayload(blocker, options) {
+  const item = nativeConnectionCapabilityRecommendations({ connectedMachines: true }).find(
+    (candidate) => candidate.id === blocker.capabilityId
+  );
+  if (!item) return null;
+  return ToolAuthNeededPayload.parse({
+    serverId: "opengeni",
+    toolName: options.toolName,
+    // Built-in capabilities are Opengeni's own; a blank domain must not fail the card.
+    providerDomain: item.providerDomain?.trim() || "opengeni.local",
+    reason: "missing_connection",
+    capability: {
+      id: item.id,
+      name: item.name,
+      kind: item.kind,
+      source: item.source,
+      action: "connect",
+      rationale: blocker.rationale,
+      requiredVariables: []
+    },
+    ...options.requestedSandboxId ? { requestedSandboxId: options.requestedSandboxId } : {},
+    ...blocker.purpose ? { purpose: blocker.purpose } : {}
+  });
+}
 function socialConnectionCounts(connections, provider) {
   const matching = connections.filter((connection) => connection.provider === provider);
   return {
@@ -30765,6 +30797,7 @@ export {
   availableMcpAccountBindings,
   availableToolRefs,
   bindVaultProviderAuthority,
+  browserExtension,
   buildApiIntegrationMcpServers,
   buildAutomationAcceptedExecution,
   buildCapabilityCatalog,
@@ -31352,6 +31385,7 @@ export {
   updateSessionSkills,
   updateSessionTitle,
   updateSessionToolPolicy,
+  userSetupCardPayload,
   validateEditableArtifactActor,
   validateEditableArtifactMaterializationJob,
   validateEditableArtifactPinnedVersion,