@cat-factory/contracts 0.214.0 → 0.216.0

package/dist/binary-generators.d.ts

@@ -10,12 +10,31 @@ import * as v from 'valibot';
  */
 export declare const binaryGeneratorCredentialSchema: v.ObjectSchema<{
     /**
-     * The credential's key. It is both what the secret resolver is asked for and the ENVIRONMENT
-     * VARIABLE the agent reads it from, so it must be a valid POSIX variable name — a generator
-     * declaring `x-rd-token` would resolve fine and then be dropped by the harness's env
+     * The credential's LOOKUP key: what the secret resolver is asked for, and what a workspace
+     * stores its own value under. Also the ENVIRONMENT VARIABLE the agent reads it from unless
+     * {@link envName} says otherwise, so it must be a valid POSIX variable name either way: a
+     * generator declaring `x-rd-token` would resolve fine and then be dropped by the harness's env
      * validation, which is a silent "the integration just 401s" at run time.
+     *
+     * It may NOT name a variable the platform's own configuration owns
+     * ({@link isReservedPlatformEnvKey}). The resolver reads the key off the deployment's
+     * environment and the value is injected into an agent process, so an integration declaring
+     * `ENCRYPTION_KEY` would hand a prompt-injectable agent the deployment's master sealing key.
+     * Refused here so a deployment learns at boot, and again at dispatch, since a mothership-mode
+     * node boot-validates none of the definitions it resolves.
      */
-    readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name">]>;
+    readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+    /**
+     * The environment variable the value is injected as, when that differs from {@link key}. This
+     * is the name the agent is told to read, and it is what a vendor SDK that auto-reads its own
+     * documented variable needs.
+     *
+     * Held to the toolchain rule rather than the reserved-platform one, because it reads nothing:
+     * the floor above is about what may be READ off the deployment's environment, and an injection
+     * name only decides what a variable is called inside this job's agent process. That is what lets
+     * an integration keep a vendor's documented name even when a platform prefix family covers it.
+     */
+    readonly envName: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>, undefined>;
     /**
      * How the integration expects the credential to be presented (`X-RD-Token: <value>`,
      * `Authorization: Bearer <value>`). Folded into the brief verbatim: the agent writes the
@@ -75,12 +94,31 @@ export declare const binaryGeneratorDefinitionSchema: v.ObjectSchema<{
     readonly guidance: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 20000, undefined>]>, undefined>;
     readonly credential: v.OptionalSchema<v.ObjectSchema<{
         /**
-         * The credential's key. It is both what the secret resolver is asked for and the ENVIRONMENT
-         * VARIABLE the agent reads it from, so it must be a valid POSIX variable name — a generator
-         * declaring `x-rd-token` would resolve fine and then be dropped by the harness's env
+         * The credential's LOOKUP key: what the secret resolver is asked for, and what a workspace
+         * stores its own value under. Also the ENVIRONMENT VARIABLE the agent reads it from unless
+         * {@link envName} says otherwise, so it must be a valid POSIX variable name either way: a
+         * generator declaring `x-rd-token` would resolve fine and then be dropped by the harness's env
          * validation, which is a silent "the integration just 401s" at run time.
+         *
+         * It may NOT name a variable the platform's own configuration owns
+         * ({@link isReservedPlatformEnvKey}). The resolver reads the key off the deployment's
+         * environment and the value is injected into an agent process, so an integration declaring
+         * `ENCRYPTION_KEY` would hand a prompt-injectable agent the deployment's master sealing key.
+         * Refused here so a deployment learns at boot, and again at dispatch, since a mothership-mode
+         * node boot-validates none of the definitions it resolves.
+         */
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+        /**
+         * The environment variable the value is injected as, when that differs from {@link key}. This
+         * is the name the agent is told to read, and it is what a vendor SDK that auto-reads its own
+         * documented variable needs.
+         *
+         * Held to the toolchain rule rather than the reserved-platform one, because it reads nothing:
+         * the floor above is about what may be READ off the deployment's environment, and an injection
+         * name only decides what a variable is called inside this job's agent process. That is what lets
+         * an integration keep a vendor's documented name even when a platform prefix family covers it.
          */
-        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name">]>;
+        readonly envName: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>, undefined>;
         /**
          * How the integration expects the credential to be presented (`X-RD-Token: <value>`,
          * `Authorization: Bearer <value>`). Folded into the brief verbatim: the agent writes the

package/dist/binary-generators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"binary-generators.d.ts","sourceRoot":"","sources":["../src/binary-generators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAgC5B;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B;IAC1C;;;;;OAKG;;IAQH;;;;OAIG;;IAEH;;;;;OAKG;;aAEH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B;IAC1C,iFAAiF;;;IAGjF,2DAA2D;;IAE3D;;;OAGG;;IAEH;;;OAGG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;;QArEH;;;;;WAKG;;QAQH;;;;WAIG;;QAEH;;;;;WAKG;;;IAgDH;;;;OAIG;;;;;;;aAEH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F;;;;;;;;GAQG;AACH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,+BAA+B;;;;IAI1C,0FAA0F;;IAE1F,gGAAgG;;aAEhG,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,CAO7E"}
+{"version":3,"file":"binary-generators.d.ts","sourceRoot":"","sources":["../src/binary-generators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAsC5B;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B;IAC1C;;;;;;;;;;;;;OAaG;;IAYH;;;;;;;;;OASG;;IAcH;;;;OAIG;;IAEH;;;;;OAKG;;aAEH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B;IAC1C,iFAAiF;;;IAGjF,2DAA2D;;IAE3D;;;OAGG;;IAEH;;;OAGG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;;QAxGH;;;;;;;;;;;;;WAaG;;QAYH;;;;;;;;;WASG;;QAcH;;;;WAIG;;QAEH;;;;;WAKG;;;IAgDH;;;;OAIG;;;;;;;aAEH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F;;;;;;;;GAQG;AACH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,+BAA+B;;;;IAI1C,0FAA0F;;IAE1F,gGAAgG;;aAEhG,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,CAO7E"}

package/dist/binary-generators.js

@@ -1,6 +1,7 @@
 import * as v from 'valibot';
 import { binaryModalitySchema, mediaTypeSchema } from './binary-modalities.js';
 import { uploadApiContractSchema } from './foundational-services.js';
+import { isReservedPlatformEnvKey, isToolchainEnvName, reservedEnvKeyMessage, toolchainEnvNameMessage, } from './reserved-env-keys.js';
 // ---------------------------------------------------------------------------
 // Wire vocabulary for GENERATIVE BINARY INTEGRATIONS — the third-party (or in-house) APIs a
 // binary-generating agent kind calls to PRODUCE its deliverable: an image generator, a
@@ -32,12 +33,31 @@ const slug = v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(64), v.reg
  */
 export const binaryGeneratorCredentialSchema = v.object({
     /**
-     * The credential's key. It is both what the secret resolver is asked for and the ENVIRONMENT
-     * VARIABLE the agent reads it from, so it must be a valid POSIX variable name — a generator
-     * declaring `x-rd-token` would resolve fine and then be dropped by the harness's env
+     * The credential's LOOKUP key: what the secret resolver is asked for, and what a workspace
+     * stores its own value under. Also the ENVIRONMENT VARIABLE the agent reads it from unless
+     * {@link envName} says otherwise, so it must be a valid POSIX variable name either way: a
+     * generator declaring `x-rd-token` would resolve fine and then be dropped by the harness's env
      * validation, which is a silent "the integration just 401s" at run time.
+     *
+     * It may NOT name a variable the platform's own configuration owns
+     * ({@link isReservedPlatformEnvKey}). The resolver reads the key off the deployment's
+     * environment and the value is injected into an agent process, so an integration declaring
+     * `ENCRYPTION_KEY` would hand a prompt-injectable agent the deployment's master sealing key.
+     * Refused here so a deployment learns at boot, and again at dispatch, since a mothership-mode
+     * node boot-validates none of the definitions it resolves.
      */
-    key: v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(128), v.regex(/^[A-Za-z_][A-Za-z0-9_]*$/, 'must be a valid environment variable name')),
+    key: v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(128), v.regex(/^[A-Za-z_][A-Za-z0-9_]*$/, 'must be a valid environment variable name'), v.check((key) => !isReservedPlatformEnvKey(key), (issue) => reservedEnvKeyMessage(String(issue.input)))),
+    /**
+     * The environment variable the value is injected as, when that differs from {@link key}. This
+     * is the name the agent is told to read, and it is what a vendor SDK that auto-reads its own
+     * documented variable needs.
+     *
+     * Held to the toolchain rule rather than the reserved-platform one, because it reads nothing:
+     * the floor above is about what may be READ off the deployment's environment, and an injection
+     * name only decides what a variable is called inside this job's agent process. That is what lets
+     * an integration keep a vendor's documented name even when a platform prefix family covers it.
+     */
+    envName: v.optional(v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(128), v.regex(/^[A-Za-z_][A-Za-z0-9_]*$/, 'must be a valid environment variable name'), v.check((name) => !isToolchainEnvName(name), (issue) => toolchainEnvNameMessage(String(issue.input))))),
     /**
      * How the integration expects the credential to be presented (`X-RD-Token: <value>`,
      * `Authorization: Bearer <value>`). Folded into the brief verbatim: the agent writes the

package/dist/binary-generators.js.map

@@ -1 +1 @@
-{"version":3,"file":"binary-generators.js","sourceRoot":"","sources":["../src/binary-generators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAEpE,8EAA8E;AAC9E,4FAA4F;AAC5F,uFAAuF;AACvF,6CAA6C;AAC7C,EAAE;AACF,+FAA+F;AAC/F,+FAA+F;AAC/F,8FAA8F;AAC9F,8FAA8F;AAC9F,8FAA8F;AAC9F,6FAA6F;AAC7F,+FAA+F;AAC/F,iCAAiC;AACjC,EAAE;AACF,+FAA+F;AAC/F,+FAA+F;AAC/F,uFAAuF;AACvF,2CAA2C;AAC3C,8EAA8E;AAE9E,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CACjB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EACf,CAAC,CAAC,KAAK,CAAC,sBAAsB,EAAE,4BAA4B,CAAC,CAC9D,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD;;;;;OAKG;IACH,GAAG,EAAE,CAAC,CAAC,IAAI,CACT,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,KAAK,CAAC,0BAA0B,EAAE,2CAA2C,CAAC,CACjF;IACD;;;;OAIG;IACH,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAClC,CAAC,CAAA;AAGF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,iFAAiF;IACjF,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpE,2DAA2D;IAC3D,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACvE;;;OAGG;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9D;;;OAGG;IACH,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjE;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAChD;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACvD;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;CACxD,CAAC,CAAA;AAGF;;;;;;;;GAQG;AACH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,0FAA0F;IAC1F,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACzC,gGAAgG;IAChG,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;CACjD,CAAC,CAAA;AAGF,MAAM,UAAU,+BAA+B,CAAC,UAAmB;IACjE,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,+BAA+B,EAAE,UAAU,CAAC,CAAA;IACvE,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxE,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAA;IAC3D,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"binary-generators.js","sourceRoot":"","sources":["../src/binary-generators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AACpE,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,wBAAwB,CAAA;AAE/B,8EAA8E;AAC9E,4FAA4F;AAC5F,uFAAuF;AACvF,6CAA6C;AAC7C,EAAE;AACF,+FAA+F;AAC/F,+FAA+F;AAC/F,8FAA8F;AAC9F,8FAA8F;AAC9F,8FAA8F;AAC9F,6FAA6F;AAC7F,+FAA+F;AAC/F,iCAAiC;AACjC,EAAE;AACF,+FAA+F;AAC/F,+FAA+F;AAC/F,uFAAuF;AACvF,2CAA2C;AAC3C,8EAA8E;AAE9E,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CACjB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EACf,CAAC,CAAC,KAAK,CAAC,sBAAsB,EAAE,4BAA4B,CAAC,CAC9D,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD;;;;;;;;;;;;;OAaG;IACH,GAAG,EAAE,CAAC,CAAC,IAAI,CACT,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,KAAK,CAAC,0BAA0B,EAAE,2CAA2C,CAAC,EAChF,CAAC,CAAC,KAAK,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,EACvC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACtD,CACF;IACD;;;;;;;;;OASG;IACH,OAAO,EAAE,CAAC,CAAC,QAAQ,CACjB,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,KAAK,CAAC,0BAA0B,EAAE,2CAA2C,CAAC,EAChF,CAAC,CAAC,KAAK,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EACnC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACxD,CACF,CACF;IACD;;;;OAIG;IACH,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAClC,CAAC,CAAA;AAGF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,iFAAiF;IACjF,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpE,2DAA2D;IAC3D,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACvE;;;OAGG;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9D;;;OAGG;IACH,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjE;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAChD;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACvD;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;CACxD,CAAC,CAAA;AAGF;;;;;;;;GAQG;AACH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,0FAA0F;IAC1F,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACzC,gGAAgG;IAChG,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;CACjD,CAAC,CAAA;AAGF,MAAM,UAAU,+BAA+B,CAAC,UAAmB;IACjE,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,+BAA+B,EAAE,UAAU,CAAC,CAAA;IACvE,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxE,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAA;IAC3D,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/capability-credentials.d.ts

@@ -0,0 +1,159 @@
+import * as v from 'valibot';
+/**
+ * The key a stored credential answers for: the LOOKUP name the capability's definition declares,
+ * which is what a resolver is asked for.
+ *
+ * It is not necessarily the variable the agent reads the value from. A definition that needs a
+ * specific variable name in the process it configures declares `envName` beside its `key`, and
+ * the store never sees that name: it stores what the resolver is ASKED for, and the injection
+ * name is applied afterwards, at dispatch.
+ *
+ * Held to BOTH lists, which protect different things and neither implies the other:
+ *
+ *   - {@link isReservedPlatformEnvKey}, the platform's own configuration. Storing a value under
+ *     `ENCRYPTION_KEY` would not read the deployment's key (this store answers first), but the
+ *     declaration it would satisfy is refused at boot, so accepting it here lets an operator fill
+ *     in a credential that can never be asked for.
+ *   - {@link isToolchainEnvName}, the harness's own process. This one is belt-and-braces at this
+ *     boundary rather than the real guard (the real guard is on `envName` at declaration), because
+ *     a stored key with no `envName` beside it IS the injected name.
+ */
+export declare const capabilityCredentialKeySchema: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name (letters, digits and underscores, not starting with a digit)">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+/** One stored credential: the key it answers for, and the write-only value sealed at rest. */
+export declare const capabilityCredentialEntrySchema: v.ObjectSchema<{
+    readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name (letters, digits and underscores, not starting with a digit)">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+    readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 8192, undefined>]>;
+}, undefined>;
+export type CapabilityCredentialEntry = v.InferOutput<typeof capabilityCredentialEntrySchema>;
+/**
+ * The non-secret projection of a stored credential — what the API returns and the UI lists.
+ *
+ * A KEY and nothing else. There is deliberately no operator-authored description field, unlike a
+ * test secret's: what a capability credential is FOR is already stated by the definition that
+ * declares it (`usage`, `guidance`), and a second free-text answer beside it is a copy that can
+ * disagree with the definition and always wins visually. The read that pairs stored keys with
+ * their DECLARATIONS is {@link capabilityCredentialStatusSchema}.
+ */
+export declare const capabilityCredentialRefSchema: v.ObjectSchema<{
+    readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name (letters, digits and underscores, not starting with a digit)">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+    /** When the value was last written, so the UI can show age without revealing the value. */
+    readonly updatedAt: v.NumberSchema<undefined>;
+}, undefined>;
+export type CapabilityCredentialRef = v.InferOutput<typeof capabilityCredentialRefSchema>;
+/**
+ * A credential the deployment's registered capabilities actually DECLARE, joined to whether this
+ * workspace has stored one.
+ *
+ * This is the read that makes the store usable rather than a blank key-value form. The keys a
+ * workspace must fill in are not a workspace fact at all — they are a property of the
+ * deployment's CODE (its `AgentKindRegistry` tool servers, its `BinaryGeneratorRegistry`) — so
+ * without projecting them, an operator has to read the deployment's source to learn what to type,
+ * and a typo produces a stored credential that is never asked for.
+ *
+ * Admin-gated on purpose. The workspace SNAPSHOT's generative-integration projection deliberately
+ * omits credential key names ("a workspace viewer has no business learning which environment
+ * variables the deployment sets"), and that judgement does not change because the value now lives
+ * in a row: this rides the same `secrets.manage` surface as the write.
+ */
+export declare const capabilityCredentialStatusSchema: v.ObjectSchema<{
+    readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name (letters, digits and underscores, not starting with a digit)">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+    /** Which capabilities want it — id + label, so the UI can say who a key is for. */
+    readonly declaredBy: v.ArraySchema<v.ObjectSchema<{
+        readonly subject: v.PicklistSchema<["tool-server", "binary-generator"], undefined>;
+        readonly id: v.StringSchema<undefined>;
+        readonly label: v.StringSchema<undefined>;
+        /** The definition's own note on how the value is presented, when it states one. */
+        readonly usage: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>, undefined>;
+    /** Whether at least one declaring capability treats it as required. */
+    readonly required: v.BooleanSchema<undefined>;
+    /** Whether THIS workspace has stored a value. */
+    readonly stored: v.BooleanSchema<undefined>;
+    /** When the stored value was last written. Absent when nothing is stored. */
+    readonly updatedAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>;
+export type CapabilityCredentialStatus = v.InferOutput<typeof capabilityCredentialStatusSchema>;
+/** Set/replace a workspace's capability credentials. Values write-only; keys unique. */
+export declare const upsertCapabilityCredentialsSchema: v.SchemaWithPipe<readonly [v.ObjectSchema<{
+    readonly entries: v.ArraySchema<v.ObjectSchema<{
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name (letters, digits and underscores, not starting with a digit)">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+        readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 8192, undefined>]>;
+    }, undefined>, undefined>;
+}, undefined>, v.CheckAction<{
+    entries: {
+        key: string;
+        value: string;
+    }[];
+}, "capability credential keys must be unique within a workspace">, v.CheckAction<{
+    entries: {
+        key: string;
+        value: string;
+    }[];
+}, "at most 100 capability credentials per workspace">]>;
+export type UpsertCapabilityCredentialsInput = v.InferOutput<typeof upsertCapabilityCredentialsSchema>;
+/**
+ * What the credential surface returns: what this deployment's capabilities DECLARE joined to what
+ * this workspace has STORED, plus any stored key nothing declares.
+ *
+ * The orphan half is not tidiness. A capability is deployment CODE, so a workspace's stored key
+ * stops being declared whenever the deployment retires an integration or renames a variable — and
+ * an orphaned credential is a live secret nobody will ever ask for, sitting sealed in a row. It is
+ * reported as its own list rather than dropped from the view, for the same reason an unknown
+ * generator id is named rather than filtered: the operator is the only one who can decide whether
+ * to delete it or whether the deployment regressed.
+ */
+export declare const capabilityCredentialsViewSchema: v.ObjectSchema<{
+    readonly declared: v.ArraySchema<v.ObjectSchema<{
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name (letters, digits and underscores, not starting with a digit)">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+        /** Which capabilities want it — id + label, so the UI can say who a key is for. */
+        readonly declaredBy: v.ArraySchema<v.ObjectSchema<{
+            readonly subject: v.PicklistSchema<["tool-server", "binary-generator"], undefined>;
+            readonly id: v.StringSchema<undefined>;
+            readonly label: v.StringSchema<undefined>;
+            /** The definition's own note on how the value is presented, when it states one. */
+            readonly usage: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>, undefined>;
+        /** Whether at least one declaring capability treats it as required. */
+        readonly required: v.BooleanSchema<undefined>;
+        /** Whether THIS workspace has stored a value. */
+        readonly stored: v.BooleanSchema<undefined>;
+        /** When the stored value was last written. Absent when nothing is stored. */
+        readonly updatedAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+    }, undefined>, undefined>;
+    /** Stored keys no registered capability declares. */
+    readonly orphaned: v.ArraySchema<v.ObjectSchema<{
+        readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name (letters, digits and underscores, not starting with a digit)">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+        /** When the value was last written, so the UI can show age without revealing the value. */
+        readonly updatedAt: v.NumberSchema<undefined>;
+    }, undefined>, undefined>;
+    /**
+     * Whether the deployment ALSO has an environment-variable fallback behind this store. False
+     * when a facade wired a store-only resolver.
+     *
+     * Stated because it changes what an EMPTY row means: with the fallback, a key nothing is stored
+     * for may still resolve from the deployment's environment, so the UI must not report it as
+     * missing. "Absent" and "zero" again.
+     */
+    readonly environmentFallback: v.BooleanSchema<undefined>;
+    /**
+     * Whether the DECLARATION half of this view is known to be incomplete — the generative
+     * integrations are read through `BinaryGeneratorSource`, which THROWS rather than answering an
+     * empty set when it cannot reach the mothership, and this surface must not turn that outage
+     * into "no integration needs a credential".
+     *
+     * Its own flag rather than a failed request, because the stored half is still perfectly
+     * readable and an operator locked out of their own credential list during someone else's
+     * outage is a worse answer than a list with a caveat on it.
+     */
+    readonly declarationsIncomplete: v.BooleanSchema<undefined>;
+}, undefined>;
+export type CapabilityCredentialsView = v.InferOutput<typeof capabilityCredentialsViewSchema>;
+/** Validate a decrypted blob at the read boundary, so a drifted row fails clearly and early. */
+export declare const capabilityCredentialEntriesSchema: v.ArraySchema<v.ObjectSchema<{
+    readonly key: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>, v.RegexAction<string, "must be a valid environment variable name (letters, digits and underscores, not starting with a digit)">, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>, v.CheckAction<string, (issue: v.CheckIssue<string>) => string>]>;
+    readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 8192, undefined>]>;
+}, undefined>, undefined>;
+export declare function parseCapabilityCredentialEntries(raw: unknown): CapabilityCredentialEntry[];
+/** The non-secret summary persisted beside the sealed values, so a read decrypts nothing. */
+export declare function capabilityCredentialsSummary(entries: CapabilityCredentialEntry[], updatedAt: number): CapabilityCredentialRef[];
+//# sourceMappingURL=capability-credentials.d.ts.map

package/dist/capability-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-credentials.d.ts","sourceRoot":"","sources":["../src/capability-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAiC5B;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,6BAA6B,2ZAiBzC,CAAA;AAED,8FAA8F;AAC9F,eAAO,MAAM,+BAA+B;;;aAG1C,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B;;IAExC,2FAA2F;;aAE3F,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAEzF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,gCAAgC;;IAE3C,mFAAmF;;;;;QAM/E,mFAAmF;;;IAIvF,uEAAuE;;IAEvE,iDAAiD;;IAEjD,6EAA6E;;aAE7E,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gCAAgC,CAAC,CAAA;AAE/F,wFAAwF;AACxF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;wDAO7C,CAAA;AACD,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,WAAW,CAC1D,OAAO,iCAAiC,CACzC,CAAA;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,+BAA+B;;;QA3C1C,mFAAmF;;;;;YAM/E,mFAAmF;;;QAIvF,uEAAuE;;QAEvE,iDAAiD;;QAEjD,6EAA6E;;;IA+B7E,qDAAqD;;;QAnErD,2FAA2F;;;IAqE3F;;;;;;;OAOG;;IAEH;;;;;;;;;OASG;;aAEH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F,gGAAgG;AAChG,eAAO,MAAM,iCAAiC;;;yBAA2C,CAAA;AACzF,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,OAAO,GAAG,yBAAyB,EAAE,CAE1F;AAED,6FAA6F;AAC7F,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,yBAAyB,EAAE,EACpC,SAAS,EAAE,MAAM,GAChB,uBAAuB,EAAE,CAE3B"}

package/dist/capability-credentials.js

@@ -0,0 +1,145 @@
+import * as v from 'valibot';
+import { isReservedPlatformEnvKey, isToolchainEnvName, reservedEnvKeyMessage, toolchainEnvNameMessage, } from './reserved-env-keys.js';
+// ---------------------------------------------------------------------------
+// PER-WORKSPACE capability credentials (SEALED) — the tenant-scoped home for the secrets a
+// registered capability declares.
+//
+// A tool server (MCP) and a generative binary integration each declare the credential they need
+// BY NAME, and the value is resolved per dispatch through the kernel `ToolSecretResolver`. The
+// shipped default reads that name off the DEPLOYMENT'S OWN ENVIRONMENT, which is the right answer
+// for a single-tenant install and the wrong one for every other shape: one process serves many
+// workspaces, so one variable serves them all — every tenant's runs authenticate as whoever set
+// the variable, a tenant cannot supply its own vendor account, rotating one tenant's key means a
+// redeploy, and the value is visible to every operator with shell access to the host.
+//
+// Every other credential in the platform already went the other way: provider API keys, tracker /
+// document / runner / observability connections, personal subscriptions, private package
+// registries and the sensitive test secrets are all per-tenant rows, sealed at rest, edited in
+// the UI. Capabilities are the subsystem that did not get it. This module is that store's wire
+// vocabulary, and it is modelled on `test-secrets.ts` deliberately — same sealed-blob-plus-
+// non-secret-summary shape, same write-only values, same "the view lists KEYS, never values".
+//
+// The env resolver is NOT removed. It becomes the FALLBACK: a workspace that has stored nothing
+// keeps resolving exactly as before, so a local install and a single-tenant deployment need no
+// migration and no UI visit. What changes is which one wins when both have a value — see
+// `composeToolSecretResolvers` in `@cat-factory/server`.
+// ---------------------------------------------------------------------------
+/**
+ * The key a stored credential answers for: the LOOKUP name the capability's definition declares,
+ * which is what a resolver is asked for.
+ *
+ * It is not necessarily the variable the agent reads the value from. A definition that needs a
+ * specific variable name in the process it configures declares `envName` beside its `key`, and
+ * the store never sees that name: it stores what the resolver is ASKED for, and the injection
+ * name is applied afterwards, at dispatch.
+ *
+ * Held to BOTH lists, which protect different things and neither implies the other:
+ *
+ *   - {@link isReservedPlatformEnvKey}, the platform's own configuration. Storing a value under
+ *     `ENCRYPTION_KEY` would not read the deployment's key (this store answers first), but the
+ *     declaration it would satisfy is refused at boot, so accepting it here lets an operator fill
+ *     in a credential that can never be asked for.
+ *   - {@link isToolchainEnvName}, the harness's own process. This one is belt-and-braces at this
+ *     boundary rather than the real guard (the real guard is on `envName` at declaration), because
+ *     a stored key with no `envName` beside it IS the injected name.
+ */
+export const capabilityCredentialKeySchema = v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(128), v.regex(/^[A-Za-z_][A-Za-z0-9_]*$/, 'must be a valid environment variable name (letters, digits and underscores, not starting with a digit)'), v.check((key) => !isReservedPlatformEnvKey(key), (issue) => reservedEnvKeyMessage(String(issue.input))), v.check((key) => !isToolchainEnvName(key), (issue) => toolchainEnvNameMessage(String(issue.input))));
+/** One stored credential: the key it answers for, and the write-only value sealed at rest. */
+export const capabilityCredentialEntrySchema = v.object({
+    key: capabilityCredentialKeySchema,
+    value: v.pipe(v.string(), v.minLength(1), v.maxLength(8192)),
+});
+/**
+ * The non-secret projection of a stored credential — what the API returns and the UI lists.
+ *
+ * A KEY and nothing else. There is deliberately no operator-authored description field, unlike a
+ * test secret's: what a capability credential is FOR is already stated by the definition that
+ * declares it (`usage`, `guidance`), and a second free-text answer beside it is a copy that can
+ * disagree with the definition and always wins visually. The read that pairs stored keys with
+ * their DECLARATIONS is {@link capabilityCredentialStatusSchema}.
+ */
+export const capabilityCredentialRefSchema = v.object({
+    key: capabilityCredentialKeySchema,
+    /** When the value was last written, so the UI can show age without revealing the value. */
+    updatedAt: v.number(),
+});
+/**
+ * A credential the deployment's registered capabilities actually DECLARE, joined to whether this
+ * workspace has stored one.
+ *
+ * This is the read that makes the store usable rather than a blank key-value form. The keys a
+ * workspace must fill in are not a workspace fact at all — they are a property of the
+ * deployment's CODE (its `AgentKindRegistry` tool servers, its `BinaryGeneratorRegistry`) — so
+ * without projecting them, an operator has to read the deployment's source to learn what to type,
+ * and a typo produces a stored credential that is never asked for.
+ *
+ * Admin-gated on purpose. The workspace SNAPSHOT's generative-integration projection deliberately
+ * omits credential key names ("a workspace viewer has no business learning which environment
+ * variables the deployment sets"), and that judgement does not change because the value now lives
+ * in a row: this rides the same `secrets.manage` surface as the write.
+ */
+export const capabilityCredentialStatusSchema = v.object({
+    key: capabilityCredentialKeySchema,
+    /** Which capabilities want it — id + label, so the UI can say who a key is for. */
+    declaredBy: v.array(v.object({
+        subject: v.picklist(['tool-server', 'binary-generator']),
+        id: v.string(),
+        label: v.string(),
+        /** The definition's own note on how the value is presented, when it states one. */
+        usage: v.optional(v.string()),
+    })),
+    /** Whether at least one declaring capability treats it as required. */
+    required: v.boolean(),
+    /** Whether THIS workspace has stored a value. */
+    stored: v.boolean(),
+    /** When the stored value was last written. Absent when nothing is stored. */
+    updatedAt: v.optional(v.number()),
+});
+/** Set/replace a workspace's capability credentials. Values write-only; keys unique. */
+export const upsertCapabilityCredentialsSchema = v.pipe(v.object({ entries: v.array(capabilityCredentialEntrySchema) }), v.check((o) => new Set(o.entries.map((e) => e.key)).size === o.entries.length, 'capability credential keys must be unique within a workspace'), v.check((o) => o.entries.length <= 100, 'at most 100 capability credentials per workspace'));
+/**
+ * What the credential surface returns: what this deployment's capabilities DECLARE joined to what
+ * this workspace has STORED, plus any stored key nothing declares.
+ *
+ * The orphan half is not tidiness. A capability is deployment CODE, so a workspace's stored key
+ * stops being declared whenever the deployment retires an integration or renames a variable — and
+ * an orphaned credential is a live secret nobody will ever ask for, sitting sealed in a row. It is
+ * reported as its own list rather than dropped from the view, for the same reason an unknown
+ * generator id is named rather than filtered: the operator is the only one who can decide whether
+ * to delete it or whether the deployment regressed.
+ */
+export const capabilityCredentialsViewSchema = v.object({
+    declared: v.array(capabilityCredentialStatusSchema),
+    /** Stored keys no registered capability declares. */
+    orphaned: v.array(capabilityCredentialRefSchema),
+    /**
+     * Whether the deployment ALSO has an environment-variable fallback behind this store. False
+     * when a facade wired a store-only resolver.
+     *
+     * Stated because it changes what an EMPTY row means: with the fallback, a key nothing is stored
+     * for may still resolve from the deployment's environment, so the UI must not report it as
+     * missing. "Absent" and "zero" again.
+     */
+    environmentFallback: v.boolean(),
+    /**
+     * Whether the DECLARATION half of this view is known to be incomplete — the generative
+     * integrations are read through `BinaryGeneratorSource`, which THROWS rather than answering an
+     * empty set when it cannot reach the mothership, and this surface must not turn that outage
+     * into "no integration needs a credential".
+     *
+     * Its own flag rather than a failed request, because the stored half is still perfectly
+     * readable and an operator locked out of their own credential list during someone else's
+     * outage is a worse answer than a list with a caveat on it.
+     */
+    declarationsIncomplete: v.boolean(),
+});
+/** Validate a decrypted blob at the read boundary, so a drifted row fails clearly and early. */
+export const capabilityCredentialEntriesSchema = v.array(capabilityCredentialEntrySchema);
+export function parseCapabilityCredentialEntries(raw) {
+    return v.parse(capabilityCredentialEntriesSchema, raw);
+}
+/** The non-secret summary persisted beside the sealed values, so a read decrypts nothing. */
+export function capabilityCredentialsSummary(entries, updatedAt) {
+    return entries.map((entry) => ({ key: entry.key, updatedAt }));
+}
+//# sourceMappingURL=capability-credentials.js.map

package/dist/capability-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-credentials.js","sourceRoot":"","sources":["../src/capability-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,wBAAwB,CAAA;AAE/B,8EAA8E;AAC9E,2FAA2F;AAC3F,kCAAkC;AAClC,EAAE;AACF,gGAAgG;AAChG,+FAA+F;AAC/F,kGAAkG;AAClG,+FAA+F;AAC/F,gGAAgG;AAChG,iGAAiG;AACjG,sFAAsF;AACtF,EAAE;AACF,kGAAkG;AAClG,yFAAyF;AACzF,+FAA+F;AAC/F,+FAA+F;AAC/F,4FAA4F;AAC5F,8FAA8F;AAC9F,EAAE;AACF,gGAAgG;AAChG,+FAA+F;AAC/F,yFAAyF;AACzF,yDAAyD;AACzD,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CACjD,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,KAAK,CACL,0BAA0B,EAC1B,wGAAwG,CACzG,EACD,CAAC,CAAC,KAAK,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,EACvC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACtD,EACD,CAAC,CAAC,KAAK,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,EACjC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACxD,CACF,CAAA;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,GAAG,EAAE,6BAA6B;IAClC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;CAC7D,CAAC,CAAA;AAGF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,GAAG,EAAE,6BAA6B;IAClC,2FAA2F;IAC3F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAGF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,6BAA6B;IAClC,mFAAmF;IACnF,UAAU,EAAE,CAAC,CAAC,KAAK,CACjB,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACxD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,mFAAmF;QACnF,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B,CAAC,CACH;IACD,uEAAuE;IACvE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,iDAAiD;IACjD,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,6EAA6E;IAC7E,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC,CAAA;AAGF,wFAAwF;AACxF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,IAAI,CACrD,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,EAC/D,CAAC,CAAC,KAAK,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EACrE,8DAA8D,CAC/D,EACD,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,kDAAkD,CAAC,CAC5F,CAAA;AAKD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC;IACnD,qDAAqD;IACrD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;IAChD;;;;;;;OAOG;IACH,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC;;;;;;;;;OASG;IACH,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE;CACpC,CAAC,CAAA;AAGF,gGAAgG;AAChG,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;AACzF,MAAM,UAAU,gCAAgC,CAAC,GAAY;IAC3D,OAAO,CAAC,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAA;AACxD,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,4BAA4B,CAC1C,OAAoC,EACpC,SAAiB;IAEjB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;AAChE,CAAC"}

package/dist/entities.d.ts

@@ -910,14 +910,20 @@ export declare const modelCostSchema: v.ObjectSchema<{
     readonly currency: v.StringSchema<undefined>;
 }, undefined>;
 export type ModelCost = v.InferOutput<typeof modelCostSchema>;
+/**
+ * The routes a catalog model can resolve to. Listed in the DEFAULT order they are
+ * preferred (see kernel's `DEFAULT_PROVIDER_PREFERENCE`, which is pinned against this
+ * picklist): a model's own provider API when its key is configured, then AWS Bedrock
+ * when the account's allow-list carries the model, then the OpenRouter gateway, then
+ * the always-available Workers AI fallback, and finally a Claude Code / Codex harness
+ * run on a stored subscription token.
+ */
+export declare const modelFlavorSchema: v.PicklistSchema<["direct", "bedrock", "openrouter", "cloudflare", "subscription"], undefined>;
+export type ModelFlavor = v.InferOutput<typeof modelFlavorSchema>;
 /**
  * A selectable LLM model, resolved to the flavour actually in use for this
- * deployment (`GET /models`). `flavor` is `direct` when the model's own provider
- * API key is configured, `openrouter` when it routes through the OpenRouter
- * gateway, `cloudflare` for the Workers AI fallback, or `subscription` for a
- * Claude Code / Codex model run via a stored subscription token. `provider`/`model`
- * are the effective {@link ModelRef} parts the agent will run with; the picker
- * stores only `id`.
+ * deployment (`GET /models`). `provider`/`model` are the effective {@link ModelRef}
+ * parts the agent will run with; the picker stores only `id`.
  */
 export declare const modelOptionSchema: v.ObjectSchema<{
     /** Stable id persisted on a block (`Block.modelId`). */
@@ -927,11 +933,12 @@ export declare const modelOptionSchema: v.ObjectSchema<{
     /** One-line description shown in the picker. */
     readonly description: v.StringSchema<undefined>;
     /** Which flavour is active for this deployment. */
-    readonly flavor: v.PicklistSchema<["cloudflare", "direct", "openrouter", "subscription"], undefined>;
+    readonly flavor: v.PicklistSchema<["direct", "bedrock", "openrouter", "cloudflare", "subscription"], undefined>;
     /**
      * Whether this model is actually selectable given what the workspace has
      * configured: a direct key for its provider, a subscription token for its vendor,
-     * or the opt-in Cloudflare lib enabled. The picker disables an unavailable model.
+     * the model in the deployment's Bedrock allow-list, or the opt-in Cloudflare lib
+     * enabled. The picker disables an unavailable model.
      */
     readonly available: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
     /**
@@ -1011,11 +1018,12 @@ export declare const modelCatalogSchema: v.ArraySchema<v.ObjectSchema<{
     /** One-line description shown in the picker. */
     readonly description: v.StringSchema<undefined>;
     /** Which flavour is active for this deployment. */
-    readonly flavor: v.PicklistSchema<["cloudflare", "direct", "openrouter", "subscription"], undefined>;
+    readonly flavor: v.PicklistSchema<["direct", "bedrock", "openrouter", "cloudflare", "subscription"], undefined>;
     /**
      * Whether this model is actually selectable given what the workspace has
      * configured: a direct key for its provider, a subscription token for its vendor,
-     * or the opt-in Cloudflare lib enabled. The picker disables an unavailable model.
+     * the model in the deployment's Bedrock allow-list, or the opt-in Cloudflare lib
+     * enabled. The picker disables an unavailable model.
      */
     readonly available: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
     /**

package/dist/entities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAiC5B;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;IAC/B,4EAA4E;;IAE5E,sEAAsE;;IAEtE,gEAAgE;;aAEhE,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;IAChC,wDAAwD;;IAExD,iFAAiF;;IAEjF,sFAAsF;;QAtBtF,4EAA4E;;QAE5E,sEAAsE;;QAEtE,gEAAgE;;;aAoBhE,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEzE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB;IAC9B;;;;;OAKG;;IAEH,wDAAwD;;IAExD,yCAAyC;;IAEzC,kFAAkF;;IAElF;;;;;OAKG;;aAEH,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAczD;AASD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB;IAC9B,2DAA2D;;IAE3D,qFAAqF;;aAErF,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE9F;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,aAAa,EAAE,GAAG,SAAS,EACrC,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CASpB;AAED,uEAAuE;AACvE,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAExF;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,4CAA4B,CAAA;AAChE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAE7E,eAAO,MAAM,WAAW;;;;;;;;;IAMtB;;;;;OAKG;;;;;;;;;;;IAQH;;;;;;OAMG;;IAEH;;;;;;OAMG;;IAEH;;;;;OAKG;;;IAGH;;;;;OAKG;;;;;;;;;;IAGH;;;;;OAKG;;IAEH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;;;;;;;;;;;;;;OAeG;;IAEH;;;;;;;OAOG;;IAEH;;;;;;;;;OASG;;IAEH;;;;OAIG;;IAEH;;;;;;OAMG;;IAEH;;;;;;;;;OASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;;OAGG;;IAEH;;;;OAIG;;IAEH;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;;;;;OAMG;;;;;;;;IAEH;;;;;;OAMG;;IAEH;;;;OAIG;;QAjUH,4EAA4E;;QAE5E,sEAAsE;;QAEtE,gEAAgE;;;IA+ThE;;;;;;OAMG;;QAvTH,wDAAwD;;QAExD,iFAAiF;;QAEjF,sFAAsF;;YAtBtF,4EAA4E;;YAE5E,sEAAsE;;YAEtE,gEAAgE;;;;IAuUhE;;;;;;OAMG;;QAvSH;;;;;WAKG;;QAEH,wDAAwD;;QAExD,yCAAyC;;QAEzC,kFAAkF;;QAElF;;;;;WAKG;;;IAuRH;;;;;;;;OAQG;;QA9OH,2DAA2D;;QAE3D,qFAAqF;;;IA8OrF;;;;;OAKG;;IAEH;;;;;;OAMG;;IAEH;;;;OAIG;;IAEH;;;;;OAKG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;;OAKG;;IAEH;;;;;;OAMG;;IAEH;;;;;;;;OAQG;;IAEH;;;;;;;;OAQG;;aAEH,CAAA;AACF,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,WAAW,CAAC,CAAA;AAErD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,kBAAkB,CAAC,GACrD;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,EAAE,CAO5D;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;IAC/B,mEAAmE;;IAEnE,0EAA0E;;IAE1E,mEAAmE;;IAEnE,2DAA2D;;IAE3D,gDAAgD;;IAEhD,0DAA0D;;IAE1D;;;;;;;;;;;;;OAaG;;IAEH,yEAAyE;;;;;IAOzE;;;;OAIG;;IAEH;;;;;OAKG;;;;;;IAQH;;;;;;;OAOG;;;QAIC,qEAAqE;;;IAIzE,kFAAkF;;aAElF,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE,6DAA6D;AAC7D,eAAO,MAAM,2BAA2B;IA1EtC,mEAAmE;;IAEnE,0EAA0E;;IAE1E,mEAAmE;;IAEnE,2DAA2D;;IAE3D,gDAAgD;;IAEhD,0DAA0D;;IAE1D;;;;;;;;;;;;;OAaG;;IAEH,yEAAyE;;;;;IAOzE;;;;OAIG;;IAEH;;;;;OAKG;;;;;;IAQH;;;;;;;OAOG;;;QAIC,qEAAqE;;;IAIzE,kFAAkF;;yBAMZ,CAAA;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF,oEAAoE;AACpE,eAAO,MAAM,eAAe;IAC1B,sCAAsC;;IAEtC,uCAAuC;;IAEvC,kEAAkE;;aAElE,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB;IAC5B,wDAAwD;;IAExD,wCAAwC;;IAExC,gDAAgD;;IAEhD,mDAAmD;;IAEnD;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,mFAAmF;;IAEnF,iDAAiD;;IAEjD,8CAA8C;;IAE9C;;;;;;OAMG;;IAEH;;;OAGG;;IAEH,0DAA0D;;QA3D1D,sCAAsC;;QAEtC,uCAAuC;;QAEvC,kEAAkE;;;IAyDlE,wEAAwE;;IAExE;;;;OAIG;;IAEH;;;;;;OAMG;;;;;;;;YA3EH,sCAAsC;;YAEtC,uCAAuC;;YAEvC,kEAAkE;;;;;aAmFlE,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE,mDAAmD;AACnD,eAAO,MAAM,kBAAkB;IAxE7B,wDAAwD;;IAExD,wCAAwC;;IAExC,gDAAgD;;IAEhD,mDAAmD;;IAEnD;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,mFAAmF;;IAEnF,iDAAiD;;IAEjD,8CAA8C;;IAE9C;;;;;;OAMG;;IAEH;;;OAGG;;IAEH,0DAA0D;;QA3D1D,sCAAsC;;QAEtC,uCAAuC;;QAEvC,kEAAkE;;;IAyDlE,wEAAwE;;IAExE;;;;OAIG;;IAEH;;;;;;OAMG;;;;;;;;YA3EH,sCAAsC;;YAEtC,uCAAuC;;YAEvC,kEAAkE;;;;;yBAuFR,CAAA;AAC5D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;IAEpC,4FAA4F;;;;;;;;aAE5F,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;;;;;;;OAQG;;IAEH;;;;;;;;OAQG;;IAEH;;;;;;;;;OASG;;IAEH;;;;;;;;;;OAUG;;IAEH;;;;;;;;;;;;;OAaG;;;;;;;;aAEH,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE,eAAO,MAAM,cAAc;;;IAGzB;;;;;OAKG;;;IAGH;;;;;;OAMG;;IAEH;;;;;;;OAOG;;IAEH;;;;;;OAMG;;IAEH;;;;;;;;OAQG;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;;;;;;OAOG;;;;;;;;IAEH;;;;;;;OAOG;;IAEH;;;;;;;;;OASG;;;QAtJH,4FAA4F;;;;;;;;;IAwJ5F;;;;;;OAMG;;QA9IH;;;;;;;;WAQG;;QAEH;;;;;;;;WAQG;;QAEH;;;;;;;;;WASG;;QAEH;;;;;;;;;;WAUG;;QAEH;;;;;;;;;;;;;WAaG;;;;;;;;;IAwFH;;;OAGG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;;OAKG;;IAEH;;;;;;OAMG;;IAEH;;;;;;;OAOG;;;aAOH,CAAA;AACF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,cAAc,CAAC,CAAA;AAC3D,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAA;AAExE,eAAO,MAAM,eAAe;;;IAG1B,wDAAwD;;;IAGxD,8EAA8E;;IAE9E;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;IAC5B,2EAA2E;;IAE3E,kDAAkD;;IAElD,uDAAuD;;IAEvD,4DAA4D;;IAE5D,uDAAuD;;IAEvD,iEAAiE;;IAEjE,uFAAuF;;aAEvF,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;IAC3B,gFAAgF;;IAEhF,6EAA6E;;IAE7E,+EAA+E;;aAE/E,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;IAClC,oGAAoG;;IAEpG,yGAAyG;;;;;;IAMzG,oFAAoF;;IAEpF,8CAA8C;;aAE9C,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAE7E;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B,2EAA2E;;IAE3E,wDAAwD;;;QAvBxD,oGAAoG;;QAEpG,yGAAyG;;;;;;QAMzG,oFAAoF;;QAEpF,8CAA8C;;;aAgB9C,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA"}
+{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAiC5B;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;IAC/B,4EAA4E;;IAE5E,sEAAsE;;IAEtE,gEAAgE;;aAEhE,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;IAChC,wDAAwD;;IAExD,iFAAiF;;IAEjF,sFAAsF;;QAtBtF,4EAA4E;;QAE5E,sEAAsE;;QAEtE,gEAAgE;;;aAoBhE,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEzE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB;IAC9B;;;;;OAKG;;IAEH,wDAAwD;;IAExD,yCAAyC;;IAEzC,kFAAkF;;IAElF;;;;;OAKG;;aAEH,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAczD;AASD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB;IAC9B,2DAA2D;;IAE3D,qFAAqF;;aAErF,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE9F;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,aAAa,EAAE,GAAG,SAAS,EACrC,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CASpB;AAED,uEAAuE;AACvE,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAExF;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,4CAA4B,CAAA;AAChE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAE7E,eAAO,MAAM,WAAW;;;;;;;;;IAMtB;;;;;OAKG;;;;;;;;;;;IAQH;;;;;;OAMG;;IAEH;;;;;;OAMG;;IAEH;;;;;OAKG;;;IAGH;;;;;OAKG;;;;;;;;;;IAGH;;;;;OAKG;;IAEH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;;;;;;;;;;;;;;OAeG;;IAEH;;;;;;;OAOG;;IAEH;;;;;;;;;OASG;;IAEH;;;;OAIG;;IAEH;;;;;;OAMG;;IAEH;;;;;;;;;OASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;;OAGG;;IAEH;;;;OAIG;;IAEH;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;;;;;OAMG;;;;;;;;IAEH;;;;;;OAMG;;IAEH;;;;OAIG;;QAjUH,4EAA4E;;QAE5E,sEAAsE;;QAEtE,gEAAgE;;;IA+ThE;;;;;;OAMG;;QAvTH,wDAAwD;;QAExD,iFAAiF;;QAEjF,sFAAsF;;YAtBtF,4EAA4E;;YAE5E,sEAAsE;;YAEtE,gEAAgE;;;;IAuUhE;;;;;;OAMG;;QAvSH;;;;;WAKG;;QAEH,wDAAwD;;QAExD,yCAAyC;;QAEzC,kFAAkF;;QAElF;;;;;WAKG;;;IAuRH;;;;;;;;OAQG;;QA9OH,2DAA2D;;QAE3D,qFAAqF;;;IA8OrF;;;;;OAKG;;IAEH;;;;;;OAMG;;IAEH;;;;OAIG;;IAEH;;;;;OAKG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;;OAKG;;IAEH;;;;;;OAMG;;IAEH;;;;;;;;OAQG;;IAEH;;;;;;;;OAQG;;aAEH,CAAA;AACF,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,WAAW,CAAC,CAAA;AAErD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,kBAAkB,CAAC,GACrD;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,EAAE,CAO5D;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;IAC/B,mEAAmE;;IAEnE,0EAA0E;;IAE1E,mEAAmE;;IAEnE,2DAA2D;;IAE3D,gDAAgD;;IAEhD,0DAA0D;;IAE1D;;;;;;;;;;;;;OAaG;;IAEH,yEAAyE;;;;;IAOzE;;;;OAIG;;IAEH;;;;;OAKG;;;;;;IAQH;;;;;;;OAOG;;;QAIC,qEAAqE;;;IAIzE,kFAAkF;;aAElF,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE,6DAA6D;AAC7D,eAAO,MAAM,2BAA2B;IA1EtC,mEAAmE;;IAEnE,0EAA0E;;IAE1E,mEAAmE;;IAEnE,2DAA2D;;IAE3D,gDAAgD;;IAEhD,0DAA0D;;IAE1D;;;;;;;;;;;;;OAaG;;IAEH,yEAAyE;;;;;IAOzE;;;;OAIG;;IAEH;;;;;OAKG;;;;;;IAQH;;;;;;;OAOG;;;QAIC,qEAAqE;;;IAIzE,kFAAkF;;yBAMZ,CAAA;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF,oEAAoE;AACpE,eAAO,MAAM,eAAe;IAC1B,sCAAsC;;IAEtC,uCAAuC;;IAEvC,kEAAkE;;aAElE,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,gGAM5B,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B,wDAAwD;;IAExD,wCAAwC;;IAExC,gDAAgD;;IAEhD,mDAAmD;;IAEnD;;;;;OAKG;;IAEH;;;;;OAKG;;IAEH,mFAAmF;;IAEnF,iDAAiD;;IAEjD,8CAA8C;;IAE9C;;;;;;OAMG;;IAEH;;;OAGG;;IAEH,0DAA0D;;QAzE1D,sCAAsC;;QAEtC,uCAAuC;;QAEvC,kEAAkE;;;IAuElE,wEAAwE;;IAExE;;;;OAIG;;IAEH;;;;;;OAMG;;;;;;;;YAzFH,sCAAsC;;YAEtC,uCAAuC;;YAEvC,kEAAkE;;;;;aAiGlE,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE,mDAAmD;AACnD,eAAO,MAAM,kBAAkB;IAzE7B,wDAAwD;;IAExD,wCAAwC;;IAExC,gDAAgD;;IAEhD,mDAAmD;;IAEnD;;;;;OAKG;;IAEH;;;;;OAKG;;IAEH,mFAAmF;;IAEnF,iDAAiD;;IAEjD,8CAA8C;;IAE9C;;;;;;OAMG;;IAEH;;;OAGG;;IAEH,0DAA0D;;QAzE1D,sCAAsC;;QAEtC,uCAAuC;;QAEvC,kEAAkE;;;IAuElE,wEAAwE;;IAExE;;;;OAIG;;IAEH;;;;;;OAMG;;;;;;;;YAzFH,sCAAsC;;YAEtC,uCAAuC;;YAEvC,kEAAkE;;;;;yBAqGR,CAAA;AAC5D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;IAEpC,4FAA4F;;;;;;;;aAE5F,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;;;;;;;OAQG;;IAEH;;;;;;;;OAQG;;IAEH;;;;;;;;;OASG;;IAEH;;;;;;;;;;OAUG;;IAEH;;;;;;;;;;;;;OAaG;;;;;;;;aAEH,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE,eAAO,MAAM,cAAc;;;IAGzB;;;;;OAKG;;;IAGH;;;;;;OAMG;;IAEH;;;;;;;OAOG;;IAEH;;;;;;OAMG;;IAEH;;;;;;;;OAQG;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;;;;;;OAOG;;;;;;;;IAEH;;;;;;;OAOG;;IAEH;;;;;;;;;OASG;;;QAtJH,4FAA4F;;;;;;;;;IAwJ5F;;;;;;OAMG;;QA9IH;;;;;;;;WAQG;;QAEH;;;;;;;;WAQG;;QAEH;;;;;;;;;WASG;;QAEH;;;;;;;;;;WAUG;;QAEH;;;;;;;;;;;;;WAaG;;;;;;;;;IAwFH;;;OAGG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;;OAKG;;IAEH;;;;;;OAMG;;IAEH;;;;;;;OAOG;;;aAOH,CAAA;AACF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,cAAc,CAAC,CAAA;AAC3D,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAA;AAExE,eAAO,MAAM,eAAe;;;IAG1B,wDAAwD;;;IAGxD,8EAA8E;;IAE9E;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;IAC5B,2EAA2E;;IAE3E,kDAAkD;;IAElD,uDAAuD;;IAEvD,4DAA4D;;IAE5D,uDAAuD;;IAEvD,iEAAiE;;IAEjE,uFAAuF;;aAEvF,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;IAC3B,gFAAgF;;IAEhF,6EAA6E;;IAE7E,+EAA+E;;aAE/E,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;IAClC,oGAAoG;;IAEpG,yGAAyG;;;;;;IAMzG,oFAAoF;;IAEpF,8CAA8C;;aAE9C,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAE7E;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B,2EAA2E;;IAE3E,wDAAwD;;;QAvBxD,oGAAoG;;QAEpG,yGAAyG;;;;;;QAMzG,oFAAoF;;QAEpF,8CAA8C;;;aAgB9C,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA"}

package/dist/entities.js

@@ -538,14 +538,25 @@ export const modelCostSchema = v.object({
     /** ISO 4217 currency the prices are expressed in (e.g. `EUR`). */
     currency: v.string(),
 });
+/**
+ * The routes a catalog model can resolve to. Listed in the DEFAULT order they are
+ * preferred (see kernel's `DEFAULT_PROVIDER_PREFERENCE`, which is pinned against this
+ * picklist): a model's own provider API when its key is configured, then AWS Bedrock
+ * when the account's allow-list carries the model, then the OpenRouter gateway, then
+ * the always-available Workers AI fallback, and finally a Claude Code / Codex harness
+ * run on a stored subscription token.
+ */
+export const modelFlavorSchema = v.picklist([
+    'direct',
+    'bedrock',
+    'openrouter',
+    'cloudflare',
+    'subscription',
+]);
 /**
  * A selectable LLM model, resolved to the flavour actually in use for this
- * deployment (`GET /models`). `flavor` is `direct` when the model's own provider
- * API key is configured, `openrouter` when it routes through the OpenRouter
- * gateway, `cloudflare` for the Workers AI fallback, or `subscription` for a
- * Claude Code / Codex model run via a stored subscription token. `provider`/`model`
- * are the effective {@link ModelRef} parts the agent will run with; the picker
- * stores only `id`.
+ * deployment (`GET /models`). `provider`/`model` are the effective {@link ModelRef}
+ * parts the agent will run with; the picker stores only `id`.
  */
 export const modelOptionSchema = v.object({
     /** Stable id persisted on a block (`Block.modelId`). */
@@ -555,11 +566,12 @@ export const modelOptionSchema = v.object({
     /** One-line description shown in the picker. */
     description: v.string(),
     /** Which flavour is active for this deployment. */
-    flavor: v.picklist(['cloudflare', 'direct', 'openrouter', 'subscription']),
+    flavor: modelFlavorSchema,
     /**
      * Whether this model is actually selectable given what the workspace has
      * configured: a direct key for its provider, a subscription token for its vendor,
-     * or the opt-in Cloudflare lib enabled. The picker disables an unavailable model.
+     * the model in the deployment's Bedrock allow-list, or the opt-in Cloudflare lib
+     * enabled. The picker disables an unavailable model.
      */
     available: v.optional(v.boolean()),
     /**