@opengeni/api-router 0.16.1 → 0.16.5

package/dist/app.js

@@ -22,7 +22,7 @@ import {
   validateToolRefs,
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession
-} from "./chunk-ZD5YBUNA.js";
+} from "./chunk-FGNCK7HE.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,
   allowedCorsOrigin,

package/dist/{chunk-ZD5YBUNA.js → chunk-FGNCK7HE.js}

@@ -11999,7 +11999,7 @@ import {
   ensureDefaultBase,
   getDocument,
   getDocumentBase,
-  listDocumentBases as listDocumentBases2,
+  listDocumentBasesEnsuringDefault,
   listDocuments,
   moveDocumentToBase,
   queueDocumentForReindex,
@@ -12677,9 +12677,12 @@ function registerDocumentRoutes(app, deps) {
   });
   app.get("/v1/workspaces/:workspaceId/document-bases", async (c) => {
     const workspaceId = c.req.param("workspaceId");
-    await requireAccessGrant5(c, deps, workspaceId, "documents:search");
+    const grant = await requireAccessGrant5(c, deps, workspaceId, "documents:search");
     return c.json(
-      (await listDocumentBases2(db, workspaceId)).map((base) => DocumentBase.parse(base))
+      (await listDocumentBasesEnsuringDefault(db, {
+        accountId: grant.accountId,
+        workspaceId
+      })).map((base) => DocumentBase.parse(base))
     );
   });
   app.get("/v1/workspaces/:workspaceId/document-bases/:baseId", async (c) => {
@@ -18205,6 +18208,7 @@ function registerSessionRoutes(app, deps) {
         accountId: grant.accountId,
         workspaceId,
         sessionId,
+        subjectId: grant.subjectId,
         payload: event.payload,
         clientEventId: event.clientEventId ?? null
       });
@@ -19470,7 +19474,8 @@ import {
   updateWorkspace,
   updateWorkspaceSettings,
   upsertWorkspaceModelPolicy,
-  workspaceCodexSubscriptionActive
+  workspaceCodexSubscriptionActive,
+  workspaceVercelAiGatewayConnectionActive
 } from "@opengeni/db";
 import { boundWorkspaceControlHttpPage } from "@opengeni/events";
 import { HTTPException as HTTPException26 } from "hono/http-exception";
@@ -19487,7 +19492,8 @@ import {
 import {
   configuredModels,
   configuredProviders,
-  withCodexCatalogProvider
+  withCodexCatalogProvider,
+  withWorkspaceGatewayCatalogProvider
 } from "@opengeni/config";
 import {
   ClientModel,
@@ -19496,18 +19502,18 @@ import {
 } from "@opengeni/contracts";
 var MODEL_CREDENTIAL_READINESS_OBSERVATION_MAX_AGE_MS = 5 * 6e4;
 function projectClientModel(model) {
+  const source = model.credentialSource.kind === "connected_subscription" ? "codex" : model.credentialSource.kind === "workspace_connection" ? "workspace_gateway" : "opengeni";
+  const publicProvider = source === "codex" ? { provider: "codex", providerLabel: "Codex" } : source === "workspace_gateway" ? { provider: "workspace-gateway", providerLabel: "Your Gateway" } : { provider: "opengeni", providerLabel: "OpenGeni" };
   return ClientModel.parse({
     id: model.id,
     label: model.label,
-    provider: model.providerId,
-    providerLabel: model.providerLabel,
+    ...publicProvider,
+    source,
     api: model.api,
     ...model.contextWindowTokens === void 0 ? {} : { contextWindowTokens: model.contextWindowTokens },
     schemaVersion: model.schemaVersion,
     aliases: model.aliases,
-    deployment: model.deployment,
     executionLimits: model.executionLimits,
-    credentialSource: model.credentialSource,
     billing: model.billing,
     capabilities: model.capabilities,
     ...model.pricing === void 0 ? {} : { pricing: model.pricing },
@@ -19572,6 +19578,14 @@ function credentialReadinessFor(input) {
       checkedAt: null
     };
   }
+  if (source.kind === "workspace_connection") {
+    return input.workspaceGatewayConnectionActive ? { status: "ready", reason: null, basis: "connection", checkedAt: null } : {
+      status: "not_ready",
+      reason: "needs_reauth",
+      basis: "connection",
+      checkedAt: null
+    };
+  }
   if (source.kind === "deployment" && source.mechanism === "api_key") {
     return input.provider?.apiKey ? { status: "ready", reason: null, basis: "configuration", checkedAt: null } : {
       status: "not_ready",
@@ -19582,7 +19596,7 @@ function credentialReadinessFor(input) {
   }
   return observedCredentialReadiness({
     observation: input.observation,
-    basis: source.kind === "workspace_connection" ? "connection" : "resolver",
+    basis: "resolver",
     nowMs: input.nowMs,
     maxAgeMs: input.maxAgeMs
   });
@@ -19672,7 +19686,8 @@ function availabilityFor(input) {
   };
 }
 function buildWorkspaceModelCatalog(input) {
-  const catalogSettings = input.settings.codexSubscriptionEnabled ? withCodexCatalogProvider(input.settings) : input.settings;
+  const codexSettings = input.settings.codexSubscriptionEnabled ? withCodexCatalogProvider(input.settings) : input.settings;
+  const catalogSettings = withWorkspaceGatewayCatalogProvider(codexSettings);
   const providers = new Map(
     configuredProviders(catalogSettings).map((provider) => [provider.id, provider])
   );
@@ -19685,6 +19700,7 @@ function buildWorkspaceModelCatalog(input) {
       model,
       provider,
       codexSubscriptionActive: input.codexSubscriptionActive,
+      workspaceGatewayConnectionActive: input.workspaceGatewayConnectionActive === true,
       observation: input.credentialReadinessObservations?.[model.definitionVersion],
       nowMs,
       maxAgeMs
@@ -19792,9 +19808,10 @@ function registerWorkspaceRoutes(app, deps) {
   app.get("/v1/workspaces/:workspaceId/model-catalog", async (c) => {
     const workspaceId = c.req.param("workspaceId");
     await requireAccessGrant16(c, deps, workspaceId, "workspace:read");
-    const [policy, codexSubscriptionActive] = await Promise.all([
+    const [policy, codexSubscriptionActive, workspaceGatewayConnectionActive] = await Promise.all([
       getWorkspaceModelPolicy(deps.db, workspaceId),
-      workspaceCodexSubscriptionActive(deps.db, deps.settings, workspaceId)
+      workspaceCodexSubscriptionActive(deps.db, deps.settings, workspaceId),
+      workspaceVercelAiGatewayConnectionActive(deps.db, workspaceId)
     ]);
     c.header("cache-control", "private, no-store");
     return c.json(
@@ -19802,7 +19819,8 @@ function registerWorkspaceRoutes(app, deps) {
         buildWorkspaceModelCatalog({
           settings: deps.settings,
           policy,
-          codexSubscriptionActive
+          codexSubscriptionActive,
+          workspaceGatewayConnectionActive
         })
       )
     );
@@ -22770,7 +22788,7 @@ function createAppComposition(deps) {
         // Provider-grouped model list for the picker. configuredModels() carries the
         // union of the built-in allow-list and every registry provider's models, in
         // selection order (default model first); project each to the client-safe
-        // ClientModel shape (ConfiguredModel.providerId → ClientModel.provider).
+        // provider-blind ClientModel shape (execution topology remains server-side).
         models: configuredModels2(catalogSettings).map(projectClientModel),
         defaultReasoningEffort: deps.settings.openaiReasoningEffort,
         allowedReasoningEfforts: configuredAllowedReasoningEfforts(deps.settings),
@@ -23540,4 +23558,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession2 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-ZD5YBUNA.js.map
+//# sourceMappingURL=chunk-FGNCK7HE.js.map