@opengeni/config 0.13.2 → 0.16.2

package/dist/index.d.ts

@@ -1,4 +1,5 @@
-import { Entitlements, LatencyMode, ReasoningEffort, SandboxBackend, StaticUsageLimits, TurnExecutionPolicyV1, type TurnExecutionLatencyModeSourceV1, type TurnExecutionModelSourceV1, type TurnExecutionReasoningSourceV1, type VideoGenerationResolution } from "@opengeni/contracts";
+import { Entitlements, LatencyMode, ReasoningEffort, SandboxBackend, StaticUsageLimits, TurnExecutionPolicyV1, type TurnExecutionLatencyModeSourceV1, type TurnExecutionModelSourceV1, type TurnExecutionReasoningSourceV1, type VideoGenerationResolution, type FirstPartyMcpToolName as FirstPartyMcpToolNameType } from "@opengeni/contracts";
+export { XAI_SUBSCRIPTION_MODEL_ID_PREFIX } from "@opengeni/xai-subscription";
 import { z } from "zod";
 export declare const SANDBOX_ARCHIVE_CAPTURE_MAX_TIMEOUT_MS: number;
 export declare const SANDBOX_ARCHIVE_CAPTURE_SETTLEMENT_GRACE_MS = 10000;
@@ -129,6 +130,260 @@ declare const SettingsSchema: z.ZodObject<{
     staticEntitlementsJson: z.ZodDefault<z.ZodString>;
     staticUsageLimitsJson: z.ZodDefault<z.ZodString>;
     delegationSecret: z.ZodOptional<z.ZodString>;
+    defaultFirstPartyMcpTools: z.ZodPreprocess<z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        artifacts_create: "artifacts_create";
+        artifacts_get_source: "artifacts_get_source";
+        artifacts_list: "artifacts_list";
+        artifacts_publish: "artifacts_publish";
+        artifacts_rollback: "artifacts_rollback";
+        atlassian_get: "atlassian_get";
+        atlassian_search: "atlassian_search";
+        atlassian_sources_list: "atlassian_sources_list";
+        browser_act: "browser_act";
+        browser_auth: "browser_auth";
+        browser_clipboard: "browser_clipboard";
+        browser_debug: "browser_debug";
+        browser_identity: "browser_identity";
+        browser_lifecycle: "browser_lifecycle";
+        browser_observe: "browser_observe";
+        browser_open: "browser_open";
+        browser_publish: "browser_publish";
+        browser_tabs: "browser_tabs";
+        capability_authorization_request: "capability_authorization_request";
+        capability_catalog_search: "capability_catalog_search";
+        computer_act: "computer_act";
+        computer_clipboard: "computer_clipboard";
+        computer_lifecycle: "computer_lifecycle";
+        computer_observe: "computer_observe";
+        computer_open: "computer_open";
+        computer_targets: "computer_targets";
+        connected_machine_remove: "connected_machine_remove";
+        editable_artifact_apply: "editable_artifact_apply";
+        editable_artifact_create: "editable_artifact_create";
+        editable_artifact_export: "editable_artifact_export";
+        editable_artifact_export_status: "editable_artifact_export_status";
+        editable_artifact_get: "editable_artifact_get";
+        editable_artifact_import: "editable_artifact_import";
+        editable_artifact_inspect: "editable_artifact_inspect";
+        editable_artifact_list: "editable_artifact_list";
+        environment_list: "environment_list";
+        environment_set_variable: "environment_set_variable";
+        fiken_bank_accounts_list: "fiken_bank_accounts_list";
+        fiken_companies_list: "fiken_companies_list";
+        fiken_contact_create: "fiken_contact_create";
+        fiken_contacts_list: "fiken_contacts_list";
+        fiken_invoice_draft_create: "fiken_invoice_draft_create";
+        fiken_invoice_get: "fiken_invoice_get";
+        fiken_invoices_list: "fiken_invoices_list";
+        fiken_products_list: "fiken_products_list";
+        fiken_purchases_list: "fiken_purchases_list";
+        fiken_sales_list: "fiken_sales_list";
+        github_connect_link: "github_connect_link";
+        github_repositories_list: "github_repositories_list";
+        goal_complete: "goal_complete";
+        goal_pause: "goal_pause";
+        goal_progress: "goal_progress";
+        goal_set: "goal_set";
+        goal_update: "goal_update";
+        interaction_discover: "interaction_discover";
+        interaction_request_human: "interaction_request_human";
+        memory_correct: "memory_correct";
+        memory_save: "memory_save";
+        memory_search: "memory_search";
+        preference_registry_get: "preference_registry_get";
+        preference_registry_summary: "preference_registry_summary";
+        reddit_accounts_list: "reddit_accounts_list";
+        reddit_mentions_live: "reddit_mentions_live";
+        reddit_post_reply: "reddit_post_reply";
+        reddit_posts_sync: "reddit_posts_sync";
+        reddit_search_live: "reddit_search_live";
+        reddit_thread_fetch: "reddit_thread_fetch";
+        rig_get: "rig_get";
+        rig_list: "rig_list";
+        rig_promote: "rig_promote";
+        rig_propose_change: "rig_propose_change";
+        rig_verify: "rig_verify";
+        run_on: "run_on";
+        sandbox_attach: "sandbox_attach";
+        sandbox_provision: "sandbox_provision";
+        sandbox_swap: "sandbox_swap";
+        sandboxes_list: "sandboxes_list";
+        scheduled_task_runs_list: "scheduled_task_runs_list";
+        scheduled_tasks_create: "scheduled_tasks_create";
+        scheduled_tasks_delete: "scheduled_tasks_delete";
+        scheduled_tasks_get: "scheduled_tasks_get";
+        scheduled_tasks_list: "scheduled_tasks_list";
+        scheduled_tasks_pause: "scheduled_tasks_pause";
+        scheduled_tasks_resume: "scheduled_tasks_resume";
+        scheduled_tasks_trigger: "scheduled_tasks_trigger";
+        scheduled_tasks_update: "scheduled_tasks_update";
+        session_create: "session_create";
+        session_events: "session_events";
+        session_get: "session_get";
+        session_pause: "session_pause";
+        session_resume: "session_resume";
+        session_send_message: "session_send_message";
+        session_steer: "session_steer";
+        sessions_list: "sessions_list";
+        set_other_session_title: "set_other_session_title";
+        set_session_title: "set_session_title";
+        slack_bot_channel_history: "slack_bot_channel_history";
+        slack_bot_delete_message: "slack_bot_delete_message";
+        slack_bot_file_content: "slack_bot_file_content";
+        slack_bot_file_info: "slack_bot_file_info";
+        slack_bot_list_channels: "slack_bot_list_channels";
+        slack_bot_list_files: "slack_bot_list_files";
+        slack_bot_list_users: "slack_bot_list_users";
+        slack_bot_post_message: "slack_bot_post_message";
+        slack_bot_thread_replies: "slack_bot_thread_replies";
+        social_connections_list: "social_connections_list";
+        social_daily_analysis_context: "social_daily_analysis_context";
+        social_mentions_live: "social_mentions_live";
+        social_post_reply: "social_post_reply";
+        social_posts_recent: "social_posts_recent";
+        social_posts_sync: "social_posts_sync";
+        social_search_live: "social_search_live";
+        social_thread_fetch: "social_thread_fetch";
+        task_note_archive: "task_note_archive";
+        task_note_save: "task_note_save";
+        task_notes_list: "task_notes_list";
+        variable_set_get_variable: "variable_set_get_variable";
+        variable_set_list: "variable_set_list";
+        variable_set_set_variable: "variable_set_set_variable";
+        x_accounts_list: "x_accounts_list";
+        x_mentions_live: "x_mentions_live";
+        x_post_reply: "x_post_reply";
+        x_posts_sync: "x_posts_sync";
+        x_search_live: "x_search_live";
+        x_thread_fetch: "x_thread_fetch";
+    }>>>>;
+    allowedFirstPartyMcpTools: z.ZodPreprocess<z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        artifacts_create: "artifacts_create";
+        artifacts_get_source: "artifacts_get_source";
+        artifacts_list: "artifacts_list";
+        artifacts_publish: "artifacts_publish";
+        artifacts_rollback: "artifacts_rollback";
+        atlassian_get: "atlassian_get";
+        atlassian_search: "atlassian_search";
+        atlassian_sources_list: "atlassian_sources_list";
+        browser_act: "browser_act";
+        browser_auth: "browser_auth";
+        browser_clipboard: "browser_clipboard";
+        browser_debug: "browser_debug";
+        browser_identity: "browser_identity";
+        browser_lifecycle: "browser_lifecycle";
+        browser_observe: "browser_observe";
+        browser_open: "browser_open";
+        browser_publish: "browser_publish";
+        browser_tabs: "browser_tabs";
+        capability_authorization_request: "capability_authorization_request";
+        capability_catalog_search: "capability_catalog_search";
+        computer_act: "computer_act";
+        computer_clipboard: "computer_clipboard";
+        computer_lifecycle: "computer_lifecycle";
+        computer_observe: "computer_observe";
+        computer_open: "computer_open";
+        computer_targets: "computer_targets";
+        connected_machine_remove: "connected_machine_remove";
+        editable_artifact_apply: "editable_artifact_apply";
+        editable_artifact_create: "editable_artifact_create";
+        editable_artifact_export: "editable_artifact_export";
+        editable_artifact_export_status: "editable_artifact_export_status";
+        editable_artifact_get: "editable_artifact_get";
+        editable_artifact_import: "editable_artifact_import";
+        editable_artifact_inspect: "editable_artifact_inspect";
+        editable_artifact_list: "editable_artifact_list";
+        environment_list: "environment_list";
+        environment_set_variable: "environment_set_variable";
+        fiken_bank_accounts_list: "fiken_bank_accounts_list";
+        fiken_companies_list: "fiken_companies_list";
+        fiken_contact_create: "fiken_contact_create";
+        fiken_contacts_list: "fiken_contacts_list";
+        fiken_invoice_draft_create: "fiken_invoice_draft_create";
+        fiken_invoice_get: "fiken_invoice_get";
+        fiken_invoices_list: "fiken_invoices_list";
+        fiken_products_list: "fiken_products_list";
+        fiken_purchases_list: "fiken_purchases_list";
+        fiken_sales_list: "fiken_sales_list";
+        github_connect_link: "github_connect_link";
+        github_repositories_list: "github_repositories_list";
+        goal_complete: "goal_complete";
+        goal_pause: "goal_pause";
+        goal_progress: "goal_progress";
+        goal_set: "goal_set";
+        goal_update: "goal_update";
+        interaction_discover: "interaction_discover";
+        interaction_request_human: "interaction_request_human";
+        memory_correct: "memory_correct";
+        memory_save: "memory_save";
+        memory_search: "memory_search";
+        preference_registry_get: "preference_registry_get";
+        preference_registry_summary: "preference_registry_summary";
+        reddit_accounts_list: "reddit_accounts_list";
+        reddit_mentions_live: "reddit_mentions_live";
+        reddit_post_reply: "reddit_post_reply";
+        reddit_posts_sync: "reddit_posts_sync";
+        reddit_search_live: "reddit_search_live";
+        reddit_thread_fetch: "reddit_thread_fetch";
+        rig_get: "rig_get";
+        rig_list: "rig_list";
+        rig_promote: "rig_promote";
+        rig_propose_change: "rig_propose_change";
+        rig_verify: "rig_verify";
+        run_on: "run_on";
+        sandbox_attach: "sandbox_attach";
+        sandbox_provision: "sandbox_provision";
+        sandbox_swap: "sandbox_swap";
+        sandboxes_list: "sandboxes_list";
+        scheduled_task_runs_list: "scheduled_task_runs_list";
+        scheduled_tasks_create: "scheduled_tasks_create";
+        scheduled_tasks_delete: "scheduled_tasks_delete";
+        scheduled_tasks_get: "scheduled_tasks_get";
+        scheduled_tasks_list: "scheduled_tasks_list";
+        scheduled_tasks_pause: "scheduled_tasks_pause";
+        scheduled_tasks_resume: "scheduled_tasks_resume";
+        scheduled_tasks_trigger: "scheduled_tasks_trigger";
+        scheduled_tasks_update: "scheduled_tasks_update";
+        session_create: "session_create";
+        session_events: "session_events";
+        session_get: "session_get";
+        session_pause: "session_pause";
+        session_resume: "session_resume";
+        session_send_message: "session_send_message";
+        session_steer: "session_steer";
+        sessions_list: "sessions_list";
+        set_other_session_title: "set_other_session_title";
+        set_session_title: "set_session_title";
+        slack_bot_channel_history: "slack_bot_channel_history";
+        slack_bot_delete_message: "slack_bot_delete_message";
+        slack_bot_file_content: "slack_bot_file_content";
+        slack_bot_file_info: "slack_bot_file_info";
+        slack_bot_list_channels: "slack_bot_list_channels";
+        slack_bot_list_files: "slack_bot_list_files";
+        slack_bot_list_users: "slack_bot_list_users";
+        slack_bot_post_message: "slack_bot_post_message";
+        slack_bot_thread_replies: "slack_bot_thread_replies";
+        social_connections_list: "social_connections_list";
+        social_daily_analysis_context: "social_daily_analysis_context";
+        social_mentions_live: "social_mentions_live";
+        social_post_reply: "social_post_reply";
+        social_posts_recent: "social_posts_recent";
+        social_posts_sync: "social_posts_sync";
+        social_search_live: "social_search_live";
+        social_thread_fetch: "social_thread_fetch";
+        task_note_archive: "task_note_archive";
+        task_note_save: "task_note_save";
+        task_notes_list: "task_notes_list";
+        variable_set_get_variable: "variable_set_get_variable";
+        variable_set_list: "variable_set_list";
+        variable_set_set_variable: "variable_set_set_variable";
+        x_accounts_list: "x_accounts_list";
+        x_mentions_live: "x_mentions_live";
+        x_post_reply: "x_post_reply";
+        x_posts_sync: "x_posts_sync";
+        x_search_live: "x_search_live";
+        x_thread_fetch: "x_thread_fetch";
+    }>>>>;
     streamTokenSecret: z.ZodOptional<z.ZodString>;
     streamControlEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     codemodeMaxCallsPerTurn: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -144,6 +399,8 @@ declare const SettingsSchema: z.ZodObject<{
     slackSigningSecret: z.ZodOptional<z.ZodString>;
     googleDriveClientId: z.ZodOptional<z.ZodString>;
     googleDriveClientSecret: z.ZodOptional<z.ZodString>;
+    fikenClientId: z.ZodOptional<z.ZodString>;
+    fikenClientSecret: z.ZodOptional<z.ZodString>;
     googleDriveWorkspaceEventsEnabled: z.ZodOptional<z.ZodPreprocess<z.ZodBoolean>>;
     atlassianClientId: z.ZodOptional<z.ZodString>;
     atlassianClientSecret: z.ZodOptional<z.ZodString>;
@@ -209,6 +466,7 @@ declare const SettingsSchema: z.ZodObject<{
     modelPricingJson: z.ZodDefault<z.ZodString>;
     modelProvidersJson: z.ZodDefault<z.ZodString>;
     codexSubscriptionEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    supergrokSubscriptionEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     codexConnectedAppsEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     codexProductSku: z.ZodOptional<z.ZodString>;
     codexToolSearchEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
@@ -329,6 +587,11 @@ declare const SettingsSchema: z.ZodObject<{
     blaxelTtl: z.ZodOptional<z.ZodString>;
     cloudflareWorkerUrl: z.ZodOptional<z.ZodString>;
     cloudflareApiKey: z.ZodOptional<z.ZodString>;
+    browserbaseApiKey: z.ZodOptional<z.ZodString>;
+    kernelApiKey: z.ZodOptional<z.ZodString>;
+    kernelEndpoint: z.ZodOptional<z.ZodString>;
+    kernelBrowserTimeoutSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    kernelBrowserStealth: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     vercelToken: z.ZodOptional<z.ZodString>;
     vercelProjectId: z.ZodOptional<z.ZodString>;
     vercelTeamId: z.ZodOptional<z.ZodString>;
@@ -466,7 +729,7 @@ declare const SettingsSchema: z.ZodObject<{
 export type Settings = z.infer<typeof SettingsSchema>;
 export type McpServerConfig = Settings["mcpServers"][number];
 /** Declarative voice-input transcription provider ids. */
-export type VoiceInputProviderId = "openai" | "azure-openai" | "codex-subscription";
+export type VoiceInputProviderId = "openai" | "azure-openai" | "codex-subscription" | "supergrok-subscription";
 export type VoiceInputProviderConfig = {
     id: "openai";
     kind: "openai";
@@ -485,6 +748,10 @@ export type VoiceInputProviderConfig = {
     id: "codex-subscription";
     kind: "codex-subscription";
     experimental: true;
+} | {
+    id: "supergrok-subscription";
+    kind: "supergrok-subscription";
+    experimental: true;
 };
 /**
  * Reject empty / template secrets so `.env.example` placeholders like
@@ -714,7 +981,7 @@ export type CredentialSourceV1 = {
     mechanism: "api_key" | "azure_ad_bearer";
 } | {
     kind: "connected_subscription";
-    provider: "codex";
+    provider: "codex" | "xai";
 } | {
     kind: "workspace_connection";
     mechanism: "api_key";
@@ -737,14 +1004,15 @@ export declare const ModelProviderApi: z.ZodEnum<{
 export type ModelProviderApi = z.infer<typeof ModelProviderApi>;
 /**
  * Registry provider kind. "api-key" providers carry their own static key/headers;
- * "codex-subscription" providers authenticate per-request with a ChatGPT/Codex
- * subscription token resolved at call time (no static key) — see @opengeni/codex.
+ * connected-subscription providers resolve a workspace account token at call
+ * time and never carry a static key in the registry definition.
  */
 export declare const RegistryProviderKind: z.ZodEnum<{
     "api-key": "api-key";
     "codex-subscription": "codex-subscription";
     "vercel-gateway-managed": "vercel-gateway-managed";
     "vercel-gateway-workspace": "vercel-gateway-workspace";
+    "xai-subscription": "xai-subscription";
 }>;
 export type RegistryProviderKind = z.infer<typeof RegistryProviderKind>;
 /** A non-built-in provider declared by the host via OPENGENI_MODEL_PROVIDERS_JSON. */
@@ -754,6 +1022,7 @@ declare const RegistryProviderSchema: z.ZodObject<{
         "codex-subscription": "codex-subscription";
         "vercel-gateway-managed": "vercel-gateway-managed";
         "vercel-gateway-workspace": "vercel-gateway-workspace";
+        "xai-subscription": "xai-subscription";
     }>>;
     id: z.ZodString;
     label: z.ZodOptional<z.ZodString>;
@@ -1024,6 +1293,7 @@ export declare const WORKSPACE_GATEWAY_MODEL_ID_PREFIX: "workspace-gateway/";
 export declare const VERCEL_AI_GATEWAY_CONNECTION_DOMAIN: "ai-gateway.vercel.sh";
 export declare const VERCEL_AI_GATEWAY_CONNECTION_ROLE: "vercel_ai_gateway";
 export declare const CODEX_REALTIME_MODEL_ID: "gpt-live-1-boulder-alpha";
+export declare const SUPERGROK_REALTIME_MODEL_ID: "supergrok/grok-voice-think-fast-2.0";
 export declare const OPENGENI_REALTIME_MODEL_ID_PREFIX: "opengeni-gateway/";
 export declare const WORKSPACE_REALTIME_MODEL_ID_PREFIX: "workspace-gateway/";
 /** Curated voice models exposed through AI Gateway's normalized realtime API. */
@@ -1106,6 +1376,14 @@ export declare function getSettings(): Settings;
  * require an operator-provided secret.
  */
 export declare function resolveFirstPartyDelegationSecret(settings: Settings): string | undefined;
+export type FirstPartyMcpToolPolicy = {
+    default: FirstPartyMcpToolNameType[];
+    allowed: FirstPartyMcpToolNameType[];
+};
+/** Resolve the deployment's session-tool defaults and hard execution ceiling. */
+export declare function resolveFirstPartyMcpToolPolicy(settings: Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">): FirstPartyMcpToolPolicy;
+/** Apply the deployment ceiling to an existing durable session selection. */
+export declare function allowedFirstPartyMcpToolsForSession(settings: Pick<Settings, "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">, selected: readonly FirstPartyMcpToolNameType[] | null | undefined): FirstPartyMcpToolNameType[];
 /**
  * The Modal sandbox idle timeout (seconds) the provider actually passes as
  * idleTimeoutMs (sandbox-file-persistence). When the operator did not pin
@@ -1145,19 +1423,20 @@ export declare function withWorkspaceGatewayCredential(settings: Settings, apiKe
 /**
  * Product display label for catalog/picker UI.
  * Same string for OpenAI and Codex copies of a slug (`gpt-5.6-luna` and
- * `codex/gpt-5.6-luna` → `GPT-5.6 Luna`). Non-gpt ids pass through unchanged.
+ * `codex/gpt-5.6-luna` → `GPT-5.6 Luna`). Curated Grok slugs receive the same
+ * product casing; other ids pass through unchanged.
  */
 export declare function productLabelForModelId(modelId: string): string;
 /**
- * Curated compact product labels for dense UI. Only known GPT family slugs;
- * everything else returns null so callers fall back to the full `label`.
+ * Curated compact product labels for dense UI. Unknown model slugs return null
+ * so callers fall back to the full `label`.
  */
 export declare function productShortLabelForModelId(modelId: string): string | null;
 /** Undefined and the exact public OpenAI v1 endpoint are the same direct route. */
 export declare function isDirectOpenAiApiBaseUrl(baseUrl: string | undefined): boolean;
 /**
  * Map OpenGeni latency mode to the provider `service_tier` wire value.
- * Azure and Codex ChatGPT accept `priority`; OpenAI API accepts `fast` (alias of priority).
+ * Azure, Codex ChatGPT, and xAI accept `priority`; OpenAI API accepts `fast`.
  * Standard omits the field.
  */
 export declare function serviceTierForLatencyMode(providerId: string, latencyMode: LatencyMode): "fast" | "priority" | undefined;
@@ -1188,6 +1467,12 @@ export declare function configuredProviders(settings: Settings): ResolvedModelPr
  * operations remain owned by the credential allocator.
  */
 export declare function withCodexCatalogProvider(settings: Settings): Settings;
+/**
+ * Static SuperGrok product catalogue, matching the Codex subscription seam.
+ * The overlay never contains a concrete account id or bearer; selection and
+ * per-turn credential freeze remain worker/DB responsibilities.
+ */
+export declare function withXaiSubscriptionCatalogProvider(settings: Settings): Settings;
 /**
  * The provider identity a model id resolves to, for workspace model-policy
  * evaluation — MUST agree with the real router (resolveTurnModel /
@@ -1541,4 +1826,3 @@ export interface NatsControlPlaneAuth {
     password: string;
 }
 export declare function resolveNatsControlPlaneAuth(settings: Settings): NatsControlPlaneAuth | null;
-export {};