@opengeni/api-router 1.3.0 → 1.4.2

package/dist/access-grant-rls.d.ts

@@ -1,3 +1,10 @@
 import type { AccessGrant } from "@opengeni/contracts";
 import { type ApiRouteDeps } from "@opengeni/core";
+import { type CreditDebitAttribution } from "@opengeni/db";
+/**
+ * Trusted payer for a non-agent grant: an authenticated human session pays as
+ * that human; keys and services are service work. An agent attempt must be
+ * resolved through the validated middleware context installed below.
+ */
+export declare function creditDebitAttributionForGrant(grant: AccessGrant): CreditDebitAttribution;
 export declare function withAccessGrantSessionRlsContext<T>(deps: Pick<ApiRouteDeps, "db">, grant: AccessGrant, fn: () => Promise<T>): Promise<T>;

package/dist/app.d.ts

@@ -1,4 +1,4 @@
-import { type Settings } from "@opengeni/config";
+import { type FirstPartyMcpToolPolicySettings } from "@opengeni/config";
 import { type AccessGrant, type ErrorCode, type FirstPartyMcpToolName, type Session } from "@opengeni/contracts";
 import { Hono } from "hono";
 import type { ApiRouteDeps, AppDependencies } from "@opengeni/core";
@@ -22,7 +22,7 @@ export declare function createAppComposition(deps: AppDependencies): {
 export declare function appendVary(current: string | null, value: string): string;
 export declare function workspaceActorContextExempt(method: string, pathname: string): boolean;
 /** Configured SDK credentials cannot regain tools from widened legacy columns. */
-export declare function configuredCodemodeSessionProxyTools(settings: Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">, session: Pick<Session, "agent">): FirstPartyMcpToolName[] | null;
+export declare function configuredCodemodeSessionProxyTools(settings: FirstPartyMcpToolPolicySettings, session: Pick<Session, "agent">): FirstPartyMcpToolName[] | null;
 /**
  * Permissions span capabilities: project_create grants sessions:create,
  * and runtime titling grants sessions:control. Fence the endpoint family

package/dist/app.js

@@ -28,7 +28,7 @@ import {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession,
   workspaceActorContextExempt
-} from "./chunk-IZEGLLKZ.js";
+} from "./chunk-F3LQ6VWR.js";
 import "./chunk-OGQDXVXY.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,

package/dist/azure-live.d.ts

@@ -0,0 +1,28 @@
+import type { Settings } from "@opengeni/config";
+import type { CodexRealtimeWebrtcRequest } from "@opengeni/contracts";
+import { type Database } from "@opengeni/db";
+export declare const AZURE_LIVE_MODEL_ID: "opengeni-azure/gpt-live-1";
+export declare function azureLiveConfigured(settings: Settings): boolean;
+/** Server-authenticated SDP exchange. Never returns provider credentials. */
+export declare function brokerAzureLive(input: {
+    settings: Settings;
+    request: Pick<CodexRealtimeWebrtcRequest, "sdp" | "instructions" | "voice">;
+    initialItems: Array<{
+        role: string;
+        text: string;
+    }>;
+    signal?: AbortSignal | undefined;
+    fetch?: typeof fetch;
+}): Promise<{
+    sdp: string;
+    version: "v3";
+    model: "opengeni-azure/gpt-live-1";
+}>;
+export declare function buildSessionAzureLiveBroker(db: Database, settings: Settings, workspaceId: string, sessionId: string, fetchImpl?: typeof fetch): (input: {
+    request: Pick<CodexRealtimeWebrtcRequest, "sdp" | "instructions" | "voice">;
+    signal?: AbortSignal | undefined;
+}) => Promise<{
+    sdp: string;
+    version: "v3";
+    model: "opengeni-azure/gpt-live-1";
+}>;