@opengeni/config 0.16.2 → 0.19.0-canary.0

package/dist/index.js

@@ -5,12 +5,14 @@ import {
   DEFAULT_FIRST_PARTY_MCP_TOOLS,
   Entitlements,
   EntitlementsMode,
+  KnowledgeSourceSyncLimits,
   LatencyMode,
   MAX_NESTED_AGENT_DEPTH,
   ProductAccessMode,
   ReasoningEffort,
   FIRST_PARTY_MCP_TOOL_NAMES,
   FirstPartyMcpToolName,
+  OpenGeniSlackBotDisplayName,
   SandboxBackend,
   SessionMcpApprovalPolicy,
   SEEDANCE_2_5_MODEL_ID,
@@ -35,7 +37,8 @@ import {
   XAI_SUBSCRIPTION_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS,
   XAI_SUBSCRIPTION_MODEL_ID_PREFIX,
   XAI_SUBSCRIPTION_PROVIDER_ID,
-  XAI_SUBSCRIPTION_PROXY_BASE_URL
+  XAI_SUBSCRIPTION_PROXY_BASE_URL,
+  XAI_RESPONSE_STREAM_IDLE_TIMEOUT_MS
 } from "@opengeni/xai-subscription";
 import { XAI_SUBSCRIPTION_MODEL_ID_PREFIX as XAI_SUBSCRIPTION_MODEL_ID_PREFIX2 } from "@opengeni/xai-subscription";
 import { createHash } from "crypto";
@@ -45,6 +48,8 @@ var registryId = /^[A-Za-z0-9_-]+$/;
 var SANDBOX_ARCHIVE_CAPTURE_MAX_TIMEOUT_MS = 60 * 6e4;
 var SANDBOX_ARCHIVE_CAPTURE_SETTLEMENT_GRACE_MS = 1e4;
 var SANDBOX_SNAPSHOT_MAX_TIMEOUT_MS = SANDBOX_ARCHIVE_CAPTURE_MAX_TIMEOUT_MS - SANDBOX_ARCHIVE_CAPTURE_SETTLEMENT_GRACE_MS;
+var GOOGLE_DRIVE_PROVIDER_REQUEST_TIMEOUT_MAX_MS = 6e4;
+var GOOGLE_DRIVE_PROVIDER_RETRY_DELAY_MAX_MS = 6e4;
 var SANDBOX_LIFECYCLE_TRANSITION_MAX_WAIT_MS = 60 * 6e4;
 var SANDBOX_LIFECYCLE_RETRY_HANDOFF_GRACE_MS = 1e4;
 var EnvBoolean = z.preprocess((value) => {
@@ -60,6 +65,17 @@ var EnvBoolean = z.preprocess((value) => {
   }
   return value;
 }, z.boolean());
+var DEFAULT_GOAL_IDLE_BACKOFF_MS = [3e3, 3e4, 12e4, 3e5];
+var DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS = 6e5;
+var EnvGoalIdleBackoffMs = z.preprocess((value) => {
+  if (typeof value !== "string") return value;
+  const source = value.trim();
+  if (!source) return void 0;
+  return source.split(",").map((entry) => {
+    const trimmed = entry.trim();
+    return trimmed === "" ? Number.NaN : Number(trimmed);
+  });
+}, z.array(z.number().int().nonnegative()).min(1, "OPENGENI_GOAL_IDLE_BACKOFF_MS must list at least one delay in milliseconds").readonly());
 var EnvFirstPartyMcpTools = z.preprocess(
   (value) => {
     if (typeof value !== "string") return value;
@@ -245,11 +261,31 @@ var SettingsSchema = z.object({
   // Explicit operator-controlled promotion pointer for `/agent/latest/*`.
   // Versioned agent releases are immutable; changing this setting promotes or
   // rolls back the stable channel without moving or deleting a provider tag.
-  agentStableVersion: z.string().regex(/^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)$/u).default("0.1.14"),
+  agentStableVersion: z.string().regex(/^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)$/u).default("0.1.16"),
   // Optional independent beta-channel pointer. When unset, the beta update
   // manifest route is unavailable rather than silently serving stable.
   agentBetaVersion: z.string().regex(/^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)$/u).optional(),
   productAccessMode: ProductAccessMode.default("local"),
+  // --- canonical organization-tenancy authority activation, default OFF ---
+  // The named PRE-ACTIVATION opt-out for the organization-tenancy program. FALSE (the
+  // default, and the value an operator leaves in place to decline or defer) means
+  // this deployment stays on the reversible legacy workspace-owned lane: no phase-F
+  // subsystem may switch its access decision to organization/membership authority
+  // ids. TRUE is an operator's explicit statement that the activation preconditions
+  // in docs/organization-tenancy.md have been proven for this deployment and that
+  // the one-way boundary is accepted.
+  //
+  // This is NOT a kill switch and NOT a rollback: once an activation migration has
+  // committed, setting it back to false does not restore the legacy authority - only
+  // forward recovery is available. It also grants and revokes nothing by itself;
+  // every individual authorization decision keeps its own fences.
+  //
+  // No runtime path reads it yet: canonical activation (phase F) is unshipped, so
+  // the flag exists to reserve the name, pin the safe default, and give every future
+  // activation slice one gate to consult. EnvBoolean (NOT z.coerce.boolean(), which
+  // coerces "false" -> true and would activate the moment an operator wrote the
+  // variable out to disable it).
+  organizationTenancyCanonicalActivationEnabled: EnvBoolean.default(false),
   billingMode: BillingMode.default("disabled"),
   entitlementsMode: EntitlementsMode.default("none"),
   usageLimitsMode: UsageLimitsMode.default("none"),
@@ -268,7 +304,6 @@ var SettingsSchema = z.object({
   // holder of stream:control gets 403 until this flips. Keeps stream:control a
   // declared-but-inert permission so later hardening is a flag flip.
   streamControlEnabled: EnvBoolean.default(false),
-  codemodeMaxCallsPerTurn: z.coerce.number().int().positive().default(200),
   // Optional release-coherent bootstrap hint for custom rigs/connected machines
   // that do not carry the stock-image ogtool binary. Exact stable versions only:
   // the agent must never guess a tag or silently install `latest`.
@@ -278,12 +313,24 @@ var SettingsSchema = z.object({
   integrationsStateSecret: z.string().optional(),
   integrationsAllowPrivateNetworkTargets: EnvBoolean.default(false),
   integrationsOauthClientsJson: z.string().default("{}"),
-  gmailRestAdapterEnabled: EnvBoolean.default(false),
   slackClientId: z.string().optional(),
   slackClientSecret: z.string().optional(),
   slackSigningSecret: z.string().optional(),
+  slackBotDisplayName: OpenGeniSlackBotDisplayName.default("OpenGeni"),
+  slackCommand: z.string().trim().regex(/^\/[a-z0-9_-]{1,31}$/u).default("/opengeni"),
   googleDriveClientId: z.string().optional(),
   googleDriveClientSecret: z.string().optional(),
+  googleDriveSyncMaxItems: z.coerce.number().int().positive().max(1e4).default(500),
+  googleDriveSyncMaxBytes: z.coerce.number().int().positive().max(5e9).default(5e8),
+  googleDriveSyncMaxFileBytes: z.coerce.number().int().positive().max(5e9).default(1e8),
+  googleDriveSyncMaxProviderRequests: z.coerce.number().int().positive().max(1e4).default(1e3),
+  googleDriveSyncMaxElapsedSeconds: z.coerce.number().int().positive().max(3600).default(300),
+  googleDriveSyncMaxFailureDetails: z.coerce.number().int().positive().max(100).default(25),
+  googleDriveProviderRequestTimeoutMs: z.coerce.number().int().min(1e3).max(GOOGLE_DRIVE_PROVIDER_REQUEST_TIMEOUT_MAX_MS).default(3e4),
+  googleDriveProviderRetryAttempts: z.coerce.number().int().min(1).max(5).default(3),
+  googleDriveProviderRetryInitialDelayMs: z.coerce.number().int().positive().max(3e4).default(250),
+  googleDriveProviderRetryMaxDelayMs: z.coerce.number().int().positive().max(GOOGLE_DRIVE_PROVIDER_RETRY_DELAY_MAX_MS).default(5e3),
+  googleDriveProviderRetryBudgetMs: z.coerce.number().int().positive().max(12e4).default(15e3),
   fikenClientId: z.string().optional(),
   fikenClientSecret: z.string().optional(),
   googleDriveWorkspaceEventsEnabled: EnvBoolean.optional(),
@@ -296,24 +343,52 @@ var SettingsSchema = z.object({
   // id ("x", "reddit"): {"x":{"clientId":"...","clientSecret":"..."}}.
   socialOauthClientsJson: z.string().default("{}"),
   // Session goal guard rails. Goals are designed for runs that legitimately
-  // span days, so length is bounded by pathology detection (no-progress
-  // streaks, budget exhaustion), never by count. goalMaxAutoContinuations is
-  // therefore UNSET by default (no cap); deployments may configure one, and
-  // it then acts as a hard ceiling that per-goal overrides can only lower.
+  // span days, so length is bounded by explicit completion/pause and budget
+  // exhaustion, never by count. goalMaxAutoContinuations is therefore UNSET
+  // by default (no cap); deployments may configure one, and it then acts as a
+  // hard ceiling that per-goal overrides can only lower.
   goalMaxAutoContinuations: z.coerce.number().int().positive().optional(),
-  goalNoProgressLimit: z.coerce.number().int().positive().default(3),
+  // Idle backoff between CONSECUTIVE no-input goal continuations. This is
+  // pacing, not a cap: the first continuation after a turn that consumed any
+  // external input is immediate, the n-th consecutive no-input continuation
+  // waits schedule[min(n - 1, last)] ms after the previous one finished, and
+  // any new input (machine input, human/API prompt, Steer) wakes the session
+  // immediately. The delay never exceeds goalIdleBackoffMaxMs.
+  goalIdleBackoffMs: EnvGoalIdleBackoffMs.default(DEFAULT_GOAL_IDLE_BACKOFF_MS),
+  goalIdleBackoffMaxMs: z.coerce.number().int().positive().default(DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS),
+  // Child lifecycle notices: a child session's requires_action freeze, its
+  // resolution, a direct Pause, a provider-capacity wait, and goal progress
+  // become typed `session_system_updates` rows for the parent (in addition to
+  // `child_terminal_result`). Rolling hazard: a pre-notice worker throws on an
+  // unknown update kind, so enable only once the whole fleet runs an image
+  // that understands the new kinds. Once the flag has produced rows, a
+  // pre-notice image must never restart while any new-kind row is still
+  // pending (session_system_updates or session_system_update_outbox); turning
+  // the flag back off stops production but does not drain already committed
+  // rows. Default off. The API and both workers install the validated value
+  // into @opengeni/db once at boot.
+  // Env: OPENGENI_CHILD_LIFECYCLE_NOTICES_ENABLED.
+  childLifecycleNoticesEnabled: EnvBoolean.default(false),
+  // Per-channel and per-DM Slack workspace routing. Default off: with the flag
+  // off the routing resolver short-circuits to the installation's own workspace
+  // before any new read, so an existing single-workspace install behaves exactly
+  // as it did. Enabling it is a deploy decision, not a code default.
+  // Env: OPENGENI_SLACK_WORKSPACE_ROUTING_ENABLED.
+  slackWorkspaceRoutingEnabled: EnvBoolean.default(false),
   // Per-segment ceiling on agent loop turns (model calls) within a single
   // session turn. Effectively unbounded by default for the same reason as
   // above; the graceful max-turns valve (idle + goal continuation, never a
   // session failure) remains as inert safety should a deployment set a cap.
   agentMaxModelCallsPerTurn: z.coerce.number().int().positive().default(1e6),
-  // The model family's real context window in tokens. OpenGeni always performs
-  // one durable, portable plaintext compaction transition; there is no
-  // provider/server/off mode ladder.
+  // Deployment fallback for models that do not declare their own window.
+  // Built-in billed GPT-5.6 Sol/Terra/Luna pin Codex's 272k catalog instead.
+  // OpenGeni always performs one durable, portable plaintext compaction
+  // transition; there is no provider/server/off mode ladder.
   contextWindowTokens: z.coerce.number().int().positive().default(105e4),
-  // Optional model-catalog effective input ceiling. Codex models expose this as
-  // raw context_window * effective_context_window_percent; when absent, retain
-  // the deployment-level window-minus-reserved-output behavior.
+  // Optional model-catalog effective input ceiling. Codex and billed GPT-5.6
+  // models expose this as raw context_window * effective_context_window_percent;
+  // when absent, retain the deployment-level window-minus-reserved-output
+  // behavior.
   contextEffectiveWindowTokens: z.coerce.number().int().positive().optional(),
   // Proactive compaction threshold as a ratio of the model context window.
   // Defaults to 90%: compact as late as possible — retained context beats early
@@ -345,6 +420,10 @@ var SettingsSchema = z.object({
   apiHost: z.string().default("0.0.0.0"),
   apiPort: z.coerce.number().int().positive().default(8e3),
   workerHttpPort: z.coerce.number().int().positive().default(8001),
+  // Worker-side first-party MCP traffic stays on the deployment's internal
+  // network. OPENGENI_MCP_URL remains the sandbox/external route used by
+  // Codemode and remote placements.
+  opengeniMcpInternalUrl: z.string().url().optional(),
   opengeniMcpUrl: z.string().url().optional(),
   // Origins allowed to send browser cookies cross-origin. Other origins may
   // call the public API with bearer credentials, but never receive credentialed
@@ -429,6 +508,9 @@ var SettingsSchema = z.object({
   // account pool and a distinct rail from the existing xai/* API-key provider.
   supergrokSubscriptionEnabled: EnvBoolean.default(false),
   // OPENGENI_SUPERGROK_SUBSCRIPTION_ENABLED
+  // Maximum silence between complete, valid SuperGrok SSE data events. This is
+  // not a request/run duration cap; every valid event resets the timer.
+  supergrokResponseStreamIdleTimeoutMs: z.coerce.number().int().positive().max(24 * 60 * 6e4).default(XAI_RESPONSE_STREAM_IDLE_TIMEOUT_MS),
   // Expose the connected apps attached to a Codex subscription through the
   // synthetic codex_apps MCP server. Independent from subscription routing so
   // operators can use Codex models without exposing ChatGPT connectors.
@@ -437,12 +519,13 @@ var SettingsSchema = z.object({
   codexProductSku: z.string().optional(),
   // OPENGENI_CODEX_PRODUCT_SKU (X-OpenAI-Product-Sku, apps only)
   // Progressive MCP disclosure (Codex-CLI-style tool_search): on a codex turn,
-  // flag non-mandatory selected MCP tools `defer_loading:true` (dropping their
+  // flag non-eager selected MCP tools `defer_loading:true` (dropping their
   // schemas from model context) and add one client-executed tool_search tool
-  // that BM25-discloses bounded matches. The mandatory OpenGeni tools stay
-  // eager. Default ON so selected connector catalogues do not consume every
-  // Codex turn's context. Operators may explicitly disable it for emergency
-  // compatibility diagnosis.
+  // that BM25-discloses bounded matches. Only an exact session tool ref with
+  // `eager:true` stays on the startup path; mandatory selection alone does not
+  // imply eagerness. Default ON so selected connector catalogues do not consume
+  // every Codex turn's context. Operators may explicitly disable it for
+  // emergency compatibility diagnosis.
   // OPENGENI_CODEX_TOOL_SEARCH_ENABLED
   codexToolSearchEnabled: EnvBoolean.default(true),
   // Provider-neutral progressive disclosure for direct OpenAI/Azure native
@@ -673,6 +756,31 @@ var SettingsSchema = z.object({
   vercelProjectId: z.string().optional(),
   vercelTeamId: z.string().optional(),
   vercelRuntime: z.string().optional(),
+  // --- OpenSandbox (optional Kubernetes-native provisioned sandbox) ---
+  openSandboxBaseUrl: z.string().url().optional(),
+  openSandboxApiKey: z.string().min(1).optional(),
+  // Release and preview profiles must provide an immutable OCI digest. The
+  // adapter refuses tag-only references when this backend is active.
+  openSandboxImage: z.string().min(1).optional(),
+  // Renewable provider TTL is a leak/backstop clock, not OpenGeni's idle
+  // policy. The pinned server accepts a one-minute minimum; ordinary
+  // deployments default to one hour.
+  openSandboxTtlSeconds: z.coerce.number().int().min(60).max(86400).default(3600),
+  openSandboxUseServerProxy: EnvBoolean.default(true),
+  // Channel B (browserd / noVNC / ttyd) uses OSEP-0011 signed URI-mode ingress.
+  // Exec/files stay on the private lifecycle server-proxy regardless of this flag.
+  openSandboxSignedEndpoints: EnvBoolean.default(false),
+  openSandboxSignedEndpointTtlSeconds: z.coerce.number().int().min(60).max(3600).default(600),
+  openSandboxChannelBPublicBaseUrl: z.string().url().optional(),
+  // Emergency hatch only: force JPEG/RFB through the API frame-proxy even when
+  // signed endpoints are on (M2 subprotocol failure). Unset means OpenSandbox
+  // uses the frame-proxy unless signed endpoints are on.
+  openSandboxInteractionFrameProxy: EnvBoolean.optional(),
+  openSandboxPoolRef: z.string().regex(/^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/).optional(),
+  // Optional same-cluster, read-only observability projection. The application
+  // chart sets this only on the control worker and mounts a dedicated projected
+  // service-account token; non-Kubernetes and remote-provider deployments omit it.
+  openSandboxKubernetesInventoryNamespace: z.string().min(1).max(63).regex(/^[a-z0-9](?:[-a-z0-9]*[a-z0-9])?$/).optional(),
   // --- sandbox ownership inversion (P1.2 rollout flag, default OFF) ---
   // The keystone flag for the stateless resume-by-id model. When FALSE the
   // agent-turn path is BYTE-FOR-BYTE today's build-and-discard behavior (no
@@ -717,7 +825,7 @@ var SettingsSchema = z.object({
   // runner must ALSO advertise Capabilities.op_stream. Streaming is the default
   // because it is the only transport that can keep a command alive without an
   // arbitrary request/reply wall while still supporting replay and cancellation.
-  // Older runners remain usable when an explicit positive exec timeout is set.
+  // Exec fails closed when the deployment or runner does not provide op-stream.
   // EnvBoolean (NOT
   // z.coerce.boolean(), which coerces "false" -> true).
   agentOpStreamEnabled: EnvBoolean.default(true),
@@ -749,9 +857,10 @@ var SettingsSchema = z.object({
   // nats-server is configured with AUTH CALLOUT: an external agent connects
   // presenting its `oge_` enrollment bearer as the connect auth-token; the server
   // issues an authorization request on $SYS.REQ.USER.AUTH to our responder, which
-  // validates the bearer and returns a SIGNED NATS user JWT scoped to pub/sub ONLY
-  // `agent.<ws>.>` (+ `_INBOX.>`). That per-subject scope IS the per-workspace
-  // isolation. These are deployment-level secrets in the opengeni-runtime secret
+  // validates the bearer, claims one daemon generation, and returns a SIGNED NATS
+  // user JWT scoped to that exact process subtree (+ `_INBOX.>`). The exact scope
+  // provides both workspace isolation and single-daemon routing authority. These
+  // are deployment-level secrets in the opengeni-runtime secret
   // (Helm-clobbered configmap avoided), all OPTIONAL: when the callout plane is not
   // configured the responder simply does not start (selfhosted agents cannot
   // connect — graceful, never a boot-fail).
@@ -763,7 +872,7 @@ var SettingsSchema = z.object({
   // The TARGET ACCOUNT NAME the minted user is placed into (the server-config-mode
   // `auth_callout.account`, e.g. "APP"). The responder writes it as the minted user
   // JWT `aud` so nats-server binds the agent to this account — the SAME account the
-  // privileged control plane connects into, so `agent.<ws>.<id>.rpc` request/reply
+  // privileged control plane connects into, so exact process request/reply
   // routes. Optional; resolveNatsCalloutConfig defaults it to "APP".
   selfhostedNatsCalloutAccountName: z.string().optional(),
   // The callout RESPONDER's own NATS login (one of the `auth_callout.auth_users`
@@ -772,7 +881,7 @@ var SettingsSchema = z.object({
   selfhostedNatsCalloutUser: z.string().optional(),
   selfhostedNatsCalloutPassword: z.string().optional(),
   // The PRIVILEGED control-plane login (api/worker): a static account user that may
-  // request `agent.*.rpc` + receive its inbox replies. The event bus + the
+  // request exact process RPC subjects + receive their inbox replies. The event bus + the
   // selfhosted control RPC ride THIS connection. Username/password; when unset the
   // bus connects anonymously (local dev / a NATS with no auth_callout).
   selfhostedNatsControlUser: z.string().optional(),
@@ -851,6 +960,17 @@ var SettingsSchema = z.object({
   // (a liveness/reaper cadence), this bounds how long one turn waits for capacity
   // or provider creation before surfacing a clear turn.failed error.
   sandboxWarmingTimeoutMs: z.coerce.number().int().positive().default(6e5),
+  // Request-scoped workspace control-prefix budget: how long one HTTP-originated
+  // session/workspace mutation (Send, Steer, Pause/Resume/Cancel, queue
+  // move/edit/delete, composer draft, settings narrowing, quiescent tree
+  // deletion) may wait to enter the fair `workspace_inference_controls` prefix
+  // before failing with the retryable 503 `WORKSPACE_CONTROL_BUSY`. Worker
+  // settlement and claims never use it. The API installs the validated value
+  // into @opengeni/db once at app construction; nothing reads the env per
+  // request. Env: OPENGENI_WORKSPACE_CONTROL_LOCK_TIMEOUT_MS. Default 20 s.
+  workspaceControlLockTimeoutMs: z.coerce.number({
+    message: "OPENGENI_WORKSPACE_CONTROL_LOCK_TIMEOUT_MS must be a positive integer (ms)"
+  }).int("OPENGENI_WORKSPACE_CONTROL_LOCK_TIMEOUT_MS must be a positive integer (ms)").positive("OPENGENI_WORKSPACE_CONTROL_LOCK_TIMEOUT_MS must be a positive integer (ms)").default(2e4),
   // Rig setup-script budget (M3): the wall-clock timeout the rig-setup lifecycle
   // hook runs its script under, distinct from the 120s per-command lifecycle
   // default (a rig may compile/install heavy tooling on first cold create).
@@ -908,6 +1028,11 @@ var SettingsSchema = z.object({
   githubAppId: z.string().optional(),
   githubClientId: z.string().optional(),
   githubClientSecret: z.string().optional(),
+  /** Default-off rollout for the in-process GitHub repository API tool surface. */
+  githubRestMcpEnabled: EnvBoolean.default(false),
+  githubPersonalOauthEnabled: EnvBoolean.default(false),
+  githubPersonalOauthClientId: z.string().optional(),
+  githubPersonalOauthClientSecret: z.string().optional(),
   githubAppSlug: z.string().optional(),
   githubWebhookSecret: z.string().optional(),
   githubAppPrivateKey: z.string().optional(),
@@ -942,6 +1067,46 @@ var SettingsSchema = z.object({
     })
   ).default([])
 });
+function configuredGoogleDriveSyncLimits(settings) {
+  return KnowledgeSourceSyncLimits.parse({
+    maxItems: settings.googleDriveSyncMaxItems,
+    maxBytes: settings.googleDriveSyncMaxBytes,
+    maxFileBytes: settings.googleDriveSyncMaxFileBytes,
+    maxProviderRequests: settings.googleDriveSyncMaxProviderRequests,
+    maxElapsedSeconds: settings.googleDriveSyncMaxElapsedSeconds,
+    maxFailureDetails: settings.googleDriveSyncMaxFailureDetails
+  });
+}
+function googleDriveProviderRetryOptions(settings) {
+  return {
+    requestTimeoutMs: settings.googleDriveProviderRequestTimeoutMs,
+    attempts: settings.googleDriveProviderRetryAttempts,
+    initialDelayMs: settings.googleDriveProviderRetryInitialDelayMs,
+    maxDelayMs: settings.googleDriveProviderRetryMaxDelayMs,
+    budgetMs: settings.googleDriveProviderRetryBudgetMs
+  };
+}
+function canonicalPublicOrigin(publicBaseUrl) {
+  if (!publicBaseUrl) return null;
+  let parsed;
+  try {
+    parsed = new URL(publicBaseUrl);
+  } catch {
+    return null;
+  }
+  if (!["http:", "https:"].includes(parsed.protocol) || parsed.username || parsed.password || parsed.search || parsed.hash || parsed.pathname !== "" && parsed.pathname !== "/") {
+    return null;
+  }
+  return parsed.origin;
+}
+function googleDriveOAuthCallbackUrl(publicBaseUrl) {
+  const origin = canonicalPublicOrigin(publicBaseUrl);
+  return origin ? `${origin}/v1/integrations/google-drive/callback` : null;
+}
+function personalGitHubOAuthCallbackUrl(publicBaseUrl) {
+  const origin = canonicalPublicOrigin(publicBaseUrl);
+  return origin ? `${origin}/v1/integrations/github-personal/oauth/callback` : null;
+}
 function isUsableVoiceInputSecret(value) {
   if (value == null) return false;
   const trimmed = value.trim();
@@ -1157,8 +1322,10 @@ var ModelCapabilitiesV1Schema = z.object({
   }
 });
 var ModelProviderApi = z.enum(["responses", "chat"]);
+var ModelProviderWireProfile = z.enum(["openai", "azure-openai"]);
 var RegistryProviderKind = z.enum([
   "api-key",
+  "anonymous",
   "codex-subscription",
   "xai-subscription",
   "vercel-gateway-managed",
@@ -1213,6 +1380,7 @@ var RegistryProviderSchema = z.object({
   // stable provider id, e.g. "fireworks"
   label: z.string().min(1).optional(),
   api: ModelProviderApi.default("chat"),
+  wireProfile: ModelProviderWireProfile.default("openai"),
   baseUrl: z.string().url(),
   apiKey: z.string().optional(),
   // inline key (pragmatic) ...
@@ -1227,6 +1395,52 @@ var RegistryProviderSchema = z.object({
   credentialSource: z.never().optional(),
   billing: z.never().optional(),
   models: z.array(RegistryModelSchema).min(1)
+}).superRefine((provider, ctx) => {
+  if (provider.kind !== "anonymous") {
+    return;
+  }
+  if (provider.apiKey !== void 0) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["apiKey"],
+      message: "anonymous providers must not declare apiKey"
+    });
+  }
+  if (provider.apiKeyEnv !== void 0) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["apiKeyEnv"],
+      message: "anonymous providers must not declare apiKeyEnv"
+    });
+  }
+  if (provider.defaultHeaders !== void 0) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["defaultHeaders"],
+      message: "anonymous providers must not declare defaultHeaders"
+    });
+  }
+  if (provider.defaultQuery !== void 0) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["defaultQuery"],
+      message: "anonymous providers must not declare defaultQuery"
+    });
+  }
+  if (provider.publicDefaultHeaderNames !== void 0) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["publicDefaultHeaderNames"],
+      message: "anonymous providers must not declare publicDefaultHeaderNames"
+    });
+  }
+  if (provider.publicDefaultQueryNames !== void 0) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["publicDefaultQueryNames"],
+      message: "anonymous providers must not declare publicDefaultQueryNames"
+    });
+  }
 });
 var IntegrationOAuthClientConfigSchema = z.object({
   clientId: z.string().min(1),
@@ -1410,6 +1624,11 @@ var SANDBOX_REQUIRED_ENV = {
     { field: "vercelToken", env: "OPENGENI_VERCEL_TOKEN" },
     { field: "vercelProjectId", env: "OPENGENI_VERCEL_PROJECT_ID" }
   ],
+  opensandbox: [
+    { field: "openSandboxBaseUrl", env: "OPENGENI_OPENSANDBOX_BASE_URL" },
+    { field: "openSandboxApiKey", env: "OPENGENI_OPENSANDBOX_API_KEY" },
+    { field: "openSandboxImage", env: "OPENGENI_OPENSANDBOX_IMAGE" }
+  ],
   // selfhosted needs NO per-box credentials: it is the user's own machine reached
   // over the agent's own enrollment. The enrollment-signing + relay-token secrets
   // are deployment-level (a single runtime secret, not per-active-backend creds),
@@ -1419,6 +1638,28 @@ var SANDBOX_REQUIRED_ENV = {
 function requiredSandboxEnvForBackend(backend) {
   return (SANDBOX_REQUIRED_ENV[backend] ?? []).map((entry) => entry.env);
 }
+function objectStorageConfiguredForWorkspaceArchives(settings) {
+  switch (settings.objectStorageBackend) {
+    case "azure-blob":
+      return Boolean(
+        settings.objectStorageAzureConnectionString || settings.objectStorageAzureAccountName && settings.objectStorageAzureAccountKey
+      );
+    case "gcs":
+      return Boolean(
+        settings.objectStorageGcsCredentialsJson || settings.objectStorageGcsKeyFilename || settings.objectStorageGcsProjectId
+      );
+    case "aws-s3":
+      return true;
+    case "s3-compatible":
+      return Boolean(
+        settings.objectStorageEndpoint && settings.objectStorageAccessKeyId && settings.objectStorageSecretAccessKey
+      );
+    default: {
+      const _exhaustive = settings.objectStorageBackend;
+      return _exhaustive;
+    }
+  }
+}
 function optional(name) {
   const value = process.env[name];
   return value && value.trim().length > 0 ? value : void 0;
@@ -1473,6 +1714,9 @@ function getSettings() {
     agentStableVersion: optional("OPENGENI_AGENT_STABLE_VERSION"),
     agentBetaVersion: optional("OPENGENI_AGENT_BETA_VERSION"),
     productAccessMode: optional("OPENGENI_PRODUCT_ACCESS_MODE"),
+    organizationTenancyCanonicalActivationEnabled: optional(
+      "OPENGENI_ORGANIZATION_TENANCY_CANONICAL_ACTIVATION_ENABLED"
+    ),
     billingMode: optional("OPENGENI_BILLING_MODE"),
     entitlementsMode: optional("OPENGENI_ENTITLEMENTS_MODE"),
     usageLimitsMode: optional("OPENGENI_USAGE_LIMITS_MODE"),
@@ -1483,7 +1727,6 @@ function getSettings() {
     allowedFirstPartyMcpTools: optional("OPENGENI_ALLOWED_FIRST_PARTY_MCP_TOOLS"),
     streamTokenSecret: optional("OPENGENI_STREAM_TOKEN_SECRET"),
     streamControlEnabled: optional("OPENGENI_STREAM_CONTROL_ENABLED"),
-    codemodeMaxCallsPerTurn: optional("OPENGENI_CODEMODE_MAX_CALLS_PER_TURN"),
     ogtoolPackageSpec: optional("OPENGENI_OGTOOL_PACKAGE_SPEC"),
     environmentsEncryptionKey: optional("OPENGENI_ENVIRONMENTS_ENCRYPTION_KEY"),
     integrationsEnabled: optional("OPENGENI_INTEGRATIONS_ENABLED"),
@@ -1492,12 +1735,32 @@ function getSettings() {
       "OPENGENI_INTEGRATIONS_ALLOW_PRIVATE_NETWORK_TARGETS"
     ),
     integrationsOauthClientsJson: optional("OPENGENI_INTEGRATIONS_OAUTH_CLIENTS_JSON"),
-    gmailRestAdapterEnabled: optional("OPENGENI_GMAIL_REST_ADAPTER_ENABLED"),
     slackClientId: optional("OPENGENI_SLACK_CLIENT_ID"),
     slackClientSecret: optional("OPENGENI_SLACK_CLIENT_SECRET"),
     slackSigningSecret: optional("OPENGENI_SLACK_SIGNING_SECRET"),
+    slackBotDisplayName: optional("OPENGENI_SLACK_BOT_DISPLAY_NAME"),
+    slackCommand: optional("OPENGENI_SLACK_COMMAND"),
     googleDriveClientId: optional("OPENGENI_GOOGLE_DRIVE_CLIENT_ID"),
     googleDriveClientSecret: optional("OPENGENI_GOOGLE_DRIVE_CLIENT_SECRET"),
+    googleDriveSyncMaxItems: optional("OPENGENI_GOOGLE_DRIVE_SYNC_MAX_ITEMS"),
+    googleDriveSyncMaxBytes: optional("OPENGENI_GOOGLE_DRIVE_SYNC_MAX_BYTES"),
+    googleDriveSyncMaxFileBytes: optional("OPENGENI_GOOGLE_DRIVE_SYNC_MAX_FILE_BYTES"),
+    googleDriveSyncMaxProviderRequests: optional(
+      "OPENGENI_GOOGLE_DRIVE_SYNC_MAX_PROVIDER_REQUESTS"
+    ),
+    googleDriveSyncMaxElapsedSeconds: optional("OPENGENI_GOOGLE_DRIVE_SYNC_MAX_ELAPSED_SECONDS"),
+    googleDriveSyncMaxFailureDetails: optional("OPENGENI_GOOGLE_DRIVE_SYNC_MAX_FAILURE_DETAILS"),
+    googleDriveProviderRequestTimeoutMs: optional(
+      "OPENGENI_GOOGLE_DRIVE_PROVIDER_REQUEST_TIMEOUT_MS"
+    ),
+    googleDriveProviderRetryAttempts: optional("OPENGENI_GOOGLE_DRIVE_PROVIDER_RETRY_ATTEMPTS"),
+    googleDriveProviderRetryInitialDelayMs: optional(
+      "OPENGENI_GOOGLE_DRIVE_PROVIDER_RETRY_INITIAL_DELAY_MS"
+    ),
+    googleDriveProviderRetryMaxDelayMs: optional(
+      "OPENGENI_GOOGLE_DRIVE_PROVIDER_RETRY_MAX_DELAY_MS"
+    ),
+    googleDriveProviderRetryBudgetMs: optional("OPENGENI_GOOGLE_DRIVE_PROVIDER_RETRY_BUDGET_MS"),
     fikenClientId: optional("OPENGENI_FIKEN_OAUTH_CLIENT_ID"),
     fikenClientSecret: optional("OPENGENI_FIKEN_OAUTH_CLIENT_SECRET"),
     googleDriveWorkspaceEventsEnabled: optional("OPENGENI_GOOGLE_DRIVE_WORKSPACE_EVENTS_ENABLED"),
@@ -1506,7 +1769,10 @@ function getSettings() {
     maxNestedAgentDepth: optional("OPENGENI_MAX_NESTED_AGENT_DEPTH"),
     socialOauthClientsJson: optional("OPENGENI_SOCIAL_OAUTH_CLIENTS_JSON"),
     goalMaxAutoContinuations: optional("OPENGENI_GOAL_MAX_AUTO_CONTINUATIONS"),
-    goalNoProgressLimit: optional("OPENGENI_GOAL_NO_PROGRESS_LIMIT"),
+    goalIdleBackoffMs: optional("OPENGENI_GOAL_IDLE_BACKOFF_MS"),
+    goalIdleBackoffMaxMs: optional("OPENGENI_GOAL_IDLE_BACKOFF_MAX_MS"),
+    childLifecycleNoticesEnabled: optional("OPENGENI_CHILD_LIFECYCLE_NOTICES_ENABLED"),
+    slackWorkspaceRoutingEnabled: optional("OPENGENI_SLACK_WORKSPACE_ROUTING_ENABLED"),
     agentMaxModelCallsPerTurn: optional("OPENGENI_AGENT_MAX_MODEL_CALLS_PER_TURN"),
     contextWindowTokens: optional("OPENGENI_CONTEXT_WINDOW_TOKENS"),
     contextEffectiveWindowTokens: optional("OPENGENI_CONTEXT_EFFECTIVE_WINDOW_TOKENS"),
@@ -1521,6 +1787,7 @@ function getSettings() {
     apiHost: optional("OPENGENI_API_HOST"),
     apiPort: optional("OPENGENI_API_PORT"),
     workerHttpPort: optional("OPENGENI_WORKER_HTTP_PORT"),
+    opengeniMcpInternalUrl: optional("OPENGENI_MCP_INTERNAL_URL"),
     opengeniMcpUrl: optional("OPENGENI_MCP_URL"),
     corsAllowOriginRegex: optional("OPENGENI_CORS_ALLOW_ORIGIN_REGEX"),
     openaiProvider: optional("OPENGENI_OPENAI_PROVIDER"),
@@ -1577,6 +1844,9 @@ function getSettings() {
     modelProvidersJson: optional("OPENGENI_MODEL_PROVIDERS_JSON"),
     codexSubscriptionEnabled: optional("OPENGENI_CODEX_SUBSCRIPTION_ENABLED"),
     supergrokSubscriptionEnabled: optional("OPENGENI_SUPERGROK_SUBSCRIPTION_ENABLED"),
+    supergrokResponseStreamIdleTimeoutMs: optional(
+      "OPENGENI_SUPERGROK_RESPONSE_STREAM_IDLE_TIMEOUT_MS"
+    ),
     codexConnectedAppsEnabled: optional("OPENGENI_CODEX_CONNECTED_APPS_ENABLED"),
     codexToolSearchEnabled: optional("OPENGENI_CODEX_TOOL_SEARCH_ENABLED"),
     lazyToolSearchEnabled: optional("OPENGENI_LAZY_TOOL_SEARCH_ENABLED"),
@@ -1666,6 +1936,21 @@ function getSettings() {
     vercelProjectId: optional("OPENGENI_VERCEL_PROJECT_ID"),
     vercelTeamId: optional("OPENGENI_VERCEL_TEAM_ID"),
     vercelRuntime: optional("OPENGENI_VERCEL_RUNTIME"),
+    openSandboxBaseUrl: optional("OPENGENI_OPENSANDBOX_BASE_URL"),
+    openSandboxApiKey: optional("OPENGENI_OPENSANDBOX_API_KEY"),
+    openSandboxImage: optional("OPENGENI_OPENSANDBOX_IMAGE"),
+    openSandboxTtlSeconds: optional("OPENGENI_OPENSANDBOX_TTL_SECONDS"),
+    openSandboxUseServerProxy: optional("OPENGENI_OPENSANDBOX_USE_SERVER_PROXY"),
+    openSandboxSignedEndpoints: optional("OPENGENI_OPENSANDBOX_SIGNED_ENDPOINTS"),
+    openSandboxSignedEndpointTtlSeconds: optional(
+      "OPENGENI_OPENSANDBOX_SIGNED_ENDPOINT_TTL_SECONDS"
+    ),
+    openSandboxChannelBPublicBaseUrl: optional("OPENGENI_OPENSANDBOX_CHANNEL_B_PUBLIC_BASE_URL"),
+    openSandboxInteractionFrameProxy: optional("OPENGENI_OPENSANDBOX_INTERACTION_FRAME_PROXY"),
+    openSandboxPoolRef: optional("OPENGENI_OPENSANDBOX_POOL_REF"),
+    openSandboxKubernetesInventoryNamespace: optional(
+      "OPENGENI_OPENSANDBOX_KUBERNETES_INVENTORY_NAMESPACE"
+    ),
     sandboxOwnershipEnabled: optional("OPENGENI_SANDBOX_OWNERSHIP_ENABLED"),
     rigVerificationLeaseOwnershipEnabled: optional(
       "OPENGENI_RIG_VERIFICATION_LEASE_OWNERSHIP_ENABLED"
@@ -1697,6 +1982,7 @@ function getSettings() {
     sandboxLeaseTtlMs: optional("OPENGENI_SANDBOX_LEASE_TTL_MS"),
     sandboxLeaseWarmingTtlMs: optional("OPENGENI_SANDBOX_LEASE_WARMING_TTL_MS"),
     sandboxWarmingTimeoutMs: optional("OPENGENI_SANDBOX_WARMING_TIMEOUT_MS"),
+    workspaceControlLockTimeoutMs: optional("OPENGENI_WORKSPACE_CONTROL_LOCK_TIMEOUT_MS"),
     rigSetupTimeoutMs: optional("OPENGENI_RIG_SETUP_TIMEOUT_MS"),
     sandboxWarmRateMicrosPerSecondJson: optional(
       "OPENGENI_SANDBOX_WARM_RATE_MICROS_PER_SECOND_JSON"
@@ -1743,6 +2029,10 @@ function getSettings() {
     githubAppId: optional("OPENGENI_GITHUB_APP_ID"),
     githubClientId: optional("OPENGENI_GITHUB_CLIENT_ID"),
     githubClientSecret: optional("OPENGENI_GITHUB_CLIENT_SECRET"),
+    githubRestMcpEnabled: optional("OPENGENI_GITHUB_REST_MCP_ENABLED"),
+    githubPersonalOauthEnabled: optional("OPENGENI_GITHUB_PERSONAL_OAUTH_ENABLED"),
+    githubPersonalOauthClientId: optional("OPENGENI_GITHUB_PERSONAL_OAUTH_CLIENT_ID"),
+    githubPersonalOauthClientSecret: optional("OPENGENI_GITHUB_PERSONAL_OAUTH_CLIENT_SECRET"),
     githubAppSlug: optional("OPENGENI_GITHUB_APP_SLUG"),
     githubWebhookSecret: optional("OPENGENI_GITHUB_WEBHOOK_SECRET"),
     githubAppPrivateKey: optional("OPENGENI_GITHUB_APP_PRIVATE_KEY"),
@@ -1761,8 +2051,8 @@ function getSettings() {
   const parsed = SettingsSchema.parse(raw);
   const settings = {
     ...parsed,
-    sandboxIdleGraceMs: raw.sandboxIdleGraceMs === void 0 ? Math.min(9e5, Math.floor(parsed.modalTimeoutSeconds * 1e3 / 2)) : parsed.sandboxIdleGraceMs,
-    sandboxRotationLeadMs: raw.sandboxRotationLeadMs === void 0 ? Math.min(36e5, Math.floor(parsed.modalTimeoutSeconds * 1e3 / 2)) : parsed.sandboxRotationLeadMs,
+    sandboxIdleGraceMs: raw.sandboxIdleGraceMs === void 0 && parsed.sandboxBackend === "modal" ? Math.min(9e5, Math.floor(parsed.modalTimeoutSeconds * 1e3 / 2)) : parsed.sandboxIdleGraceMs,
+    sandboxRotationLeadMs: raw.sandboxRotationLeadMs === void 0 && parsed.sandboxBackend === "modal" ? Math.min(36e5, Math.floor(parsed.modalTimeoutSeconds * 1e3 / 2)) : parsed.sandboxRotationLeadMs,
     mcpServers: ensureBuiltInMcpServers(parsed)
   };
   validateSettings(settings);
@@ -1795,6 +2085,30 @@ function allowedFirstPartyMcpToolsForSession(settings, selected) {
 function effectiveModalIdleTimeoutSeconds(settings) {
   return settings.modalIdleTimeoutSeconds ?? settings.modalTimeoutSeconds;
 }
+function effectiveSandboxLifecycle(settings, backend = settings.sandboxBackend) {
+  if (backend === "modal") {
+    return {
+      hardLifetimeMs: settings.modalTimeoutSeconds * 1e3,
+      renewableTtlSeconds: null,
+      providerIdleTimeoutMs: effectiveModalIdleTimeoutSeconds(settings) * 1e3,
+      rotationLeadMs: settings.sandboxRotationLeadMs
+    };
+  }
+  if (backend === "opensandbox") {
+    return {
+      hardLifetimeMs: null,
+      renewableTtlSeconds: settings.openSandboxTtlSeconds,
+      providerIdleTimeoutMs: null,
+      rotationLeadMs: null
+    };
+  }
+  return {
+    hardLifetimeMs: CAPABILITY_DESCRIPTORS[backend].lifetime.hardLifetimeMs ?? null,
+    renewableTtlSeconds: null,
+    providerIdleTimeoutMs: null,
+    rotationLeadMs: null
+  };
+}
 function sandboxArchiveCaptureTimeoutMs(settings) {
   return Math.min(
     SANDBOX_ARCHIVE_CAPTURE_MAX_TIMEOUT_MS,
@@ -2118,6 +2432,7 @@ function gatewayRegistryProvider(settings, input) {
     // Model-specific compatibility stays at the reviewed request fence rather
     // than downgrading the whole provider wire.
     api: "responses",
+    wireProfile: "openai",
     baseUrl: VERCEL_AI_GATEWAY_BASE_URL,
     ...input.apiKey ? { apiKey: input.apiKey } : {},
     models
@@ -2198,8 +2513,22 @@ function productShortLabelForModelId(modelId) {
       return null;
   }
 }
+var BUILTIN_GPT56_MODEL_IDS = ["gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"];
+function isBuiltinGpt56ModelId(modelId) {
+  return BUILTIN_GPT56_MODEL_IDS.includes(modelId);
+}
+function builtinContextLimitsForModel(settings, modelId) {
+  if (isBuiltinGpt56ModelId(modelId)) {
+    return {
+      contextWindowTokens: CODEX_MODEL_CONTEXT_WINDOW_TOKENS,
+      effectiveContextWindowTokens: CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS,
+      autoCompactTokenLimit: CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT
+    };
+  }
+  return { contextWindowTokens: settings.contextWindowTokens };
+}
 function builtinLatencyModesForModel(modelId) {
-  if (modelId === "gpt-5.6-sol" || modelId === "gpt-5.6-terra" || modelId === "gpt-5.6-luna" || modelId.startsWith("codex/gpt-5.6-")) {
+  if (isBuiltinGpt56ModelId(modelId) || modelId.startsWith("codex/gpt-5.6-")) {
     return [
       { id: "standard", upstream: "supported", runnable: true },
       {
@@ -2217,7 +2546,7 @@ function builtinPromptCachingForModel(modelId) {
   return slug.startsWith("gpt-5.6-") ? { upstream: "supported", runnable: true, mode: "implicit" } : void 0;
 }
 function builtinHostedImageGenerationForModel(settings, modelId) {
-  return settings.openaiProvider === "openai" && isDirectOpenAiApiBaseUrl(settings.openaiBaseUrl) && ["gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"].includes(modelId);
+  return settings.openaiProvider === "openai" && isDirectOpenAiApiBaseUrl(settings.openaiBaseUrl) && isBuiltinGpt56ModelId(modelId);
 }
 function isDirectOpenAiApiBaseUrl(baseUrl) {
   if (baseUrl === void 0) return true;
@@ -2262,6 +2591,9 @@ function assertLatencyModeRunnable(settings, modelId, latencyMode) {
   }
 }
 function registryCredentialSource(provider) {
+  if (provider.kind === "anonymous") {
+    return { kind: "deployment", mechanism: "none" };
+  }
   if (provider.kind === "codex-subscription") {
     return { kind: "connected_subscription", provider: "codex" };
   }
@@ -2274,6 +2606,9 @@ function registryCredentialSource(provider) {
   return { kind: "deployment", mechanism: "api_key" };
 }
 function registryBilling(provider) {
+  if (provider.kind === "anonymous") {
+    return { upstreamPayer: "deployment", metering: "external" };
+  }
   if (provider.kind === "codex-subscription" || provider.kind === "xai-subscription") {
     return { upstreamPayer: "connected_subscription", metering: "external" };
   }
@@ -2329,6 +2664,7 @@ function definitionVersionFor(model, provider) {
     provider: {
       adapterKind: provider.kind,
       wireApi: provider.api,
+      wireProfile: provider.wireProfile,
       baseUrl: provider.baseUrl ?? null,
       defaultHeaders: requestMetadata.headers,
       defaultQuery: requestMetadata.query
@@ -2355,6 +2691,7 @@ function configuredProviders(settings) {
     label: builtinProviderLabel(settings),
     kind: "api-key",
     api: "responses",
+    wireProfile: settings.openaiProvider === "azure" ? "azure-openai" : "openai",
     builtin: true,
     credentialSource,
     billing: { upstreamPayer: "deployment", metering: "opengeni_credits" }
@@ -2373,6 +2710,7 @@ function configuredProviders(settings) {
       label: provider.label ?? provider.id,
       kind: provider.kind,
       api: provider.api,
+      wireProfile: provider.wireProfile,
       builtin: false,
       baseUrl: provider.baseUrl,
       apiKey: resolveProviderApiKey(provider),
@@ -2396,6 +2734,7 @@ function withCodexCatalogProvider(settings) {
     id: CODEX_PROVIDER_ID,
     label: "Codex (ChatGPT subscription)",
     api: "responses",
+    wireProfile: "openai",
     baseUrl: CODEX_PROVIDER_BASE_URL,
     models: CODEX_FALLBACK_MODEL_SLUGS.map((slug) => {
       const capabilities = {
@@ -2443,11 +2782,13 @@ function withXaiSubscriptionCatalogProvider(settings) {
     id: XAI_SUBSCRIPTION_PROVIDER_ID,
     label: "SuperGrok (xAI subscription)",
     api: "responses",
+    wireProfile: "openai",
     baseUrl: XAI_SUBSCRIPTION_PROXY_BASE_URL,
     models: XAI_SUBSCRIPTION_MODEL_SLUGS.map((slug) => {
       const capabilities = legacyModelCapabilities(settings, {
         reasoningEffort: true,
-        hostedWebSearch: true
+        hostedWebSearch: true,
+        vision: true
       });
       capabilities.reasoning.efforts = ["low", "medium", "high", "xhigh"];
       capabilities.reasoning.defaultEffort = "high";
@@ -2586,7 +2927,7 @@ function configuredModels(settings) {
       billing: builtinProvider.billing,
       capabilities,
       ...pricingSchedules[id] === void 0 ? {} : { pricing: pricingSchedules[id] },
-      contextWindowTokens: settings.contextWindowTokens,
+      ...builtinContextLimitsForModel(settings, id),
       toolOutputTruncationTokens: settings.modelToolOutputTruncationTokens,
       reasoningEffort: capabilities.reasoning.runnable,
       hostedWebSearch: capabilities.hostedTools.webSearch.runnable
@@ -3410,8 +3751,10 @@ function ensureBuiltInMcpServers(settings) {
 function firstPartyMcpBaseUrl(settings) {
   return settings.opengeniMcpUrl ?? `http://127.0.0.1:${settings.apiPort}/v1/workspaces/{workspaceId}/mcp`;
 }
-function firstPartyMcpWorkspaceUrl(settings, workspaceId) {
-  const raw = firstPartyMcpBaseUrl(settings);
+function firstPartyMcpInternalBaseUrl(settings) {
+  return settings.opengeniMcpInternalUrl ?? `http://127.0.0.1:${settings.apiPort}/v1/workspaces/{workspaceId}/mcp`;
+}
+function scopedFirstPartyMcpUrl(raw, workspaceId) {
   if (raw.includes("{workspaceId}")) {
     return raw.replaceAll("{workspaceId}", workspaceId);
   }
@@ -3421,6 +3764,12 @@ function firstPartyMcpWorkspaceUrl(settings, workspaceId) {
   url.hash = "";
   return url.toString();
 }
+function firstPartyMcpWorkspaceUrl(settings, workspaceId) {
+  return scopedFirstPartyMcpUrl(firstPartyMcpBaseUrl(settings), workspaceId);
+}
+function firstPartyMcpInternalWorkspaceUrl(settings, workspaceId) {
+  return scopedFirstPartyMcpUrl(firstPartyMcpInternalBaseUrl(settings), workspaceId);
+}
 function codemodeWorkspaceUrl(settings, workspaceId) {
   if (settings.opengeniMcpUrl) {
     const url2 = new URL(firstPartyMcpWorkspaceUrl(settings, workspaceId));
@@ -3446,8 +3795,18 @@ function firstPartyDocumentsMcpServerUrl(mcpUrl) {
 function firstPartyFilesMcpServerUrl(mcpUrl) {
   return `${mcpUrl.replace(/\/+$/, "")}/files`;
 }
+var MODAL_DESKTOP_IMAGE_DIGEST_REF = /@sha256:[0-9a-f]{64}$/i;
+function isDigestPinnedModalDesktopImage(settings) {
+  if (settings.modalImageId) return true;
+  return typeof settings.modalImageRef === "string" && MODAL_DESKTOP_IMAGE_DIGEST_REF.test(settings.modalImageRef);
+}
 function validateSettings(settings) {
   temporalConnectionOptions(settings);
+  if (settings.goalIdleBackoffMs.some((delayMs) => delayMs > settings.goalIdleBackoffMaxMs)) {
+    throw new Error(
+      `OPENGENI_GOAL_IDLE_BACKOFF_MS entries must not exceed OPENGENI_GOAL_IDLE_BACKOFF_MAX_MS (${settings.goalIdleBackoffMaxMs})`
+    );
+  }
   const allowedFirstPartyMcpTools = new Set(
     settings.allowedFirstPartyMcpTools ?? FIRST_PARTY_MCP_TOOL_NAMES
   );
@@ -3529,6 +3888,53 @@ function validateSettings(settings) {
       "OPENGENI_GOOGLE_DRIVE_CLIENT_ID and OPENGENI_GOOGLE_DRIVE_CLIENT_SECRET must be configured together"
     );
   }
+  if (Boolean(settings.githubPersonalOauthClientId) !== Boolean(settings.githubPersonalOauthClientSecret)) {
+    throw new Error(
+      "OPENGENI_GITHUB_PERSONAL_OAUTH_CLIENT_ID and OPENGENI_GITHUB_PERSONAL_OAUTH_CLIENT_SECRET must be configured together"
+    );
+  }
+  if (settings.githubPersonalOauthEnabled) {
+    if (!settings.integrationsEnabled) {
+      throw new Error(
+        "OPENGENI_INTEGRATIONS_ENABLED=true is required when personal GitHub OAuth is enabled"
+      );
+    }
+    if (settings.productAccessMode !== "managed") {
+      throw new Error(
+        "OPENGENI_GITHUB_PERSONAL_OAUTH_ENABLED=true requires OPENGENI_PRODUCT_ACCESS_MODE=managed"
+      );
+    }
+    if (!settings.githubPersonalOauthClientId || !settings.githubPersonalOauthClientSecret) {
+      throw new Error(
+        "personal GitHub OAuth requires OPENGENI_GITHUB_PERSONAL_OAUTH_CLIENT_ID and OPENGENI_GITHUB_PERSONAL_OAUTH_CLIENT_SECRET"
+      );
+    }
+    if (settings.githubPersonalOauthClientId === settings.githubClientId) {
+      throw new Error(
+        "personal GitHub OAuth must use a different OAuth App client from the OpenGeni GitHub App"
+      );
+    }
+    if (!personalGitHubOAuthCallbackUrl(settings.publicBaseUrl)) {
+      throw new Error(
+        "OPENGENI_PUBLIC_BASE_URL must be a credential-free origin without a path, query, or fragment when personal GitHub OAuth is enabled"
+      );
+    }
+    if (!settings.publicBaseUrl?.startsWith("https://") && !["local", "test"].includes(settings.environment)) {
+      throw new Error(
+        "OPENGENI_PUBLIC_BASE_URL must use https when personal GitHub OAuth is enabled outside local/test"
+      );
+    }
+    if (!settings.integrationsStateSecret) {
+      throw new Error(
+        "OPENGENI_INTEGRATIONS_STATE_SECRET is required when personal GitHub OAuth is enabled"
+      );
+    }
+    if (!settings.environmentsEncryptionKey) {
+      throw new Error(
+        "OPENGENI_ENVIRONMENTS_ENCRYPTION_KEY is required when personal GitHub OAuth is enabled"
+      );
+    }
+  }
   if (Boolean(settings.fikenClientId) !== Boolean(settings.fikenClientSecret)) {
     throw new Error(
       "OPENGENI_FIKEN_OAUTH_CLIENT_ID and OPENGENI_FIKEN_OAUTH_CLIENT_SECRET must be configured together"
@@ -3552,11 +3958,21 @@ function validateSettings(settings) {
     }
   }
   if (settings.googleDriveClientId) {
+    if (!settings.integrationsEnabled) {
+      throw new Error(
+        "OPENGENI_INTEGRATIONS_ENABLED=true is required when the Google Drive integration is configured"
+      );
+    }
     if (!settings.publicBaseUrl) {
       throw new Error(
         "OPENGENI_PUBLIC_BASE_URL is required when the Google Drive integration is configured"
       );
     }
+    if (!googleDriveOAuthCallbackUrl(settings.publicBaseUrl)) {
+      throw new Error(
+        "OPENGENI_PUBLIC_BASE_URL must be a credential-free origin without a path, query, or fragment when the Google Drive integration is configured"
+      );
+    }
     if (!settings.publicBaseUrl.startsWith("https://") && !["local", "test"].includes(settings.environment)) {
       throw new Error(
         "OPENGENI_PUBLIC_BASE_URL must use https when the Google Drive integration is configured outside local/test"
@@ -3568,6 +3984,21 @@ function validateSettings(settings) {
       );
     }
   }
+  if (settings.googleDriveSyncMaxFileBytes > settings.googleDriveSyncMaxBytes) {
+    throw new Error(
+      "OPENGENI_GOOGLE_DRIVE_SYNC_MAX_FILE_BYTES must not exceed OPENGENI_GOOGLE_DRIVE_SYNC_MAX_BYTES"
+    );
+  }
+  if (settings.googleDriveProviderRetryInitialDelayMs > settings.googleDriveProviderRetryMaxDelayMs) {
+    throw new Error(
+      "OPENGENI_GOOGLE_DRIVE_PROVIDER_RETRY_INITIAL_DELAY_MS must not exceed OPENGENI_GOOGLE_DRIVE_PROVIDER_RETRY_MAX_DELAY_MS"
+    );
+  }
+  if (settings.googleDriveProviderRetryInitialDelayMs > settings.googleDriveProviderRetryBudgetMs) {
+    throw new Error(
+      "OPENGENI_GOOGLE_DRIVE_PROVIDER_RETRY_INITIAL_DELAY_MS must not exceed OPENGENI_GOOGLE_DRIVE_PROVIDER_RETRY_BUDGET_MS"
+    );
+  }
   if (Boolean(settings.atlassianClientId) !== Boolean(settings.atlassianClientSecret)) {
     throw new Error(
       "OPENGENI_ATLASSIAN_CLIENT_ID and OPENGENI_ATLASSIAN_CLIENT_SECRET must be configured together"
@@ -3731,6 +4162,18 @@ function validateSettings(settings) {
   sandboxEnvironmentVariableNames(settings);
   sandboxLifecycleHookIds(settings);
   parseSandboxWarmRateJson(settings.sandboxWarmRateMicrosPerSecondJson);
+  if (settings.sandboxBackend === "opensandbox") {
+    if (!/@sha256:[0-9a-f]{64}$/i.test(settings.openSandboxImage ?? "")) {
+      throw new Error(
+        "OPENGENI_OPENSANDBOX_IMAGE must be an immutable OCI reference ending in @sha256:<64 hex characters>"
+      );
+    }
+    if (!objectStorageConfiguredForWorkspaceArchives(settings)) {
+      throw new Error(
+        "OPENGENI_SANDBOX_BACKEND=opensandbox requires configured object storage for portable /workspace archives"
+      );
+    }
+  }
   const serverIds = /* @__PURE__ */ new Set();
   for (const server of settings.mcpServers) {
     if (serverIds.has(server.id)) {
@@ -3742,10 +4185,6 @@ function validateSettings(settings) {
     const reaperPeriod = settings.sandboxLeaseReaperPeriodMs;
     const viewerTtl = settings.sandboxViewerHolderTtlMs;
     const interactionTtl = settings.sandboxInteractionHolderTtlMs;
-    const idleGraceMs = settings.sandboxIdleGraceMs;
-    const providerLifetimeMs = settings.modalTimeoutSeconds * 1e3;
-    const rotationLeadMs = settings.sandboxRotationLeadMs;
-    const idleTimeoutMs = effectiveModalIdleTimeoutSeconds(settings) * 1e3;
     if (!(reaperPeriod < viewerTtl)) {
       throw new Error(
         `OPENGENI_SANDBOX_LEASE_REAPER_PERIOD_MS (${reaperPeriod}) must be strictly less than OPENGENI_SANDBOX_VIEWER_HOLDER_TTL_MS (${viewerTtl}): the reaper must run more often than the TTL it polices, or stale viewer holders outlive a full reaper period.`
@@ -3756,35 +4195,49 @@ function validateSettings(settings) {
         `OPENGENI_SANDBOX_LEASE_REAPER_PERIOD_MS (${reaperPeriod}) must be strictly less than OPENGENI_SANDBOX_INTERACTION_HOLDER_TTL_MS (${interactionTtl}): the reaper must run more often than the controller-heartbeat horizon.`
       );
     }
-    if (!(idleTimeoutMs <= providerLifetimeMs)) {
-      throw new Error(
-        `OPENGENI_MODAL_IDLE_TIMEOUT_SECONDS*1000 (${idleTimeoutMs}) must not exceed the hard provider lifetime (OPENGENI_MODAL_TIMEOUT_SECONDS*1000 = ${providerLifetimeMs}): the idle timeout is a floor under the hard lifetime, not above it.`
-      );
-    }
-    if (!(rotationLeadMs < providerLifetimeMs)) {
-      throw new Error(
-        `OPENGENI_SANDBOX_ROTATION_LEAD_MS (${rotationLeadMs}) must be strictly less than OPENGENI_MODAL_TIMEOUT_SECONDS*1000 (${providerLifetimeMs}).`
-      );
-    }
-    const captureTimeoutMs = sandboxArchiveCaptureTimeoutMs(settings);
-    if (!(rotationLeadMs > captureTimeoutMs + reaperPeriod)) {
-      throw new Error(
-        `OPENGENI_SANDBOX_ROTATION_LEAD_MS (${rotationLeadMs}) must exceed the durable capture timeout plus one reaper period (${captureTimeoutMs + reaperPeriod}).`
-      );
-    }
-    if (!(viewerTtl < idleTimeoutMs)) {
-      throw new Error(
-        `OPENGENI_SANDBOX_VIEWER_HOLDER_TTL_MS (${viewerTtl}) must be strictly less than the effective box idle timeout (${idleTimeoutMs}): a viewer holder must be reapable before the box idles out from under it (the provider idle-timeout is the backstop).`
-      );
-    }
-    if (!(interactionTtl < idleTimeoutMs)) {
-      throw new Error(
-        `OPENGENI_SANDBOX_INTERACTION_HOLDER_TTL_MS (${interactionTtl}) must be strictly less than the effective box idle timeout (${idleTimeoutMs}): a dead browser controller must be reapable before the provider reclaims its placement.`
-      );
+    if (settings.sandboxBackend === "modal") {
+      const idleGraceMs = settings.sandboxIdleGraceMs;
+      const lifecycle = effectiveSandboxLifecycle(settings, "modal");
+      const providerLifetimeMs = lifecycle.hardLifetimeMs;
+      const rotationLeadMs = lifecycle.rotationLeadMs;
+      const idleTimeoutMs = lifecycle.providerIdleTimeoutMs;
+      if (!(idleTimeoutMs <= providerLifetimeMs)) {
+        throw new Error(
+          `OPENGENI_MODAL_IDLE_TIMEOUT_SECONDS*1000 (${idleTimeoutMs}) must not exceed the hard provider lifetime (OPENGENI_MODAL_TIMEOUT_SECONDS*1000 = ${providerLifetimeMs}): the idle timeout is a floor under the hard lifetime, not above it.`
+        );
+      }
+      if (!(rotationLeadMs < providerLifetimeMs)) {
+        throw new Error(
+          `OPENGENI_SANDBOX_ROTATION_LEAD_MS (${rotationLeadMs}) must be strictly less than OPENGENI_MODAL_TIMEOUT_SECONDS*1000 (${providerLifetimeMs}).`
+        );
+      }
+      const captureTimeoutMs = sandboxArchiveCaptureTimeoutMs(settings);
+      if (!(rotationLeadMs > captureTimeoutMs + reaperPeriod)) {
+        throw new Error(
+          `OPENGENI_SANDBOX_ROTATION_LEAD_MS (${rotationLeadMs}) must exceed the durable capture timeout plus one reaper period (${captureTimeoutMs + reaperPeriod}).`
+        );
+      }
+      if (!(viewerTtl < idleTimeoutMs)) {
+        throw new Error(
+          `OPENGENI_SANDBOX_VIEWER_HOLDER_TTL_MS (${viewerTtl}) must be strictly less than the effective box idle timeout (${idleTimeoutMs}): a viewer holder must be reapable before the box idles out from under it (the provider idle-timeout is the backstop).`
+        );
+      }
+      if (!(interactionTtl < idleTimeoutMs)) {
+        throw new Error(
+          `OPENGENI_SANDBOX_INTERACTION_HOLDER_TTL_MS (${interactionTtl}) must be strictly less than the effective box idle timeout (${idleTimeoutMs}): a dead browser controller must be reapable before the provider reclaims its placement.`
+        );
+      }
+      if (!(reaperPeriod + idleGraceMs < idleTimeoutMs)) {
+        throw new Error(
+          `OPENGENI_SANDBOX_LEASE_REAPER_PERIOD_MS + OPENGENI_SANDBOX_IDLE_GRACE_MS (${reaperPeriod} + ${idleGraceMs} = ${reaperPeriod + idleGraceMs}) must be strictly less than the effective box idle timeout (${idleTimeoutMs}): a drained box must SURVIVE its full warm window so the reaper can resume + snapshot /workspace + terminate it on the sweep AFTER the drain grace elapses \u2014 Modal's idle-reap must NOT fire first (or /workspace is lost). Raise OPENGENI_MODAL_IDLE_TIMEOUT_SECONDS (defaults to OPENGENI_MODAL_TIMEOUT_SECONDS) or lower OPENGENI_SANDBOX_IDLE_GRACE_MS.`
+        );
+      }
     }
-    if (!(reaperPeriod + idleGraceMs < idleTimeoutMs)) {
+  }
+  if (settings.sandboxDesktopEnabled && settings.sandboxBackend === "modal" && !["local", "test"].includes(settings.environment)) {
+    if (!isDigestPinnedModalDesktopImage(settings)) {
       throw new Error(
-        `OPENGENI_SANDBOX_LEASE_REAPER_PERIOD_MS + OPENGENI_SANDBOX_IDLE_GRACE_MS (${reaperPeriod} + ${idleGraceMs} = ${reaperPeriod + idleGraceMs}) must be strictly less than the effective box idle timeout (${idleTimeoutMs}): a drained box must SURVIVE its full warm window so the reaper can resume + snapshot /workspace + terminate it on the sweep AFTER the drain grace elapses \u2014 Modal's idle-reap must NOT fire first (or /workspace is lost). Raise OPENGENI_MODAL_IDLE_TIMEOUT_SECONDS (defaults to OPENGENI_MODAL_TIMEOUT_SECONDS) or lower OPENGENI_SANDBOX_IDLE_GRACE_MS.`
+        "OPENGENI_MODAL_IMAGE_REF must be digest-pinned (registry/name@sha256:\u2026) when OPENGENI_SANDBOX_BACKEND=modal and OPENGENI_SANDBOX_DESKTOP_ENABLED=true. Computer/Browser need docker/desktop.Dockerfile, not the official headless opengeni-sandbox image. Helm desktop.imageRef writes this pin."
       );
     }
   }
@@ -3813,7 +4266,7 @@ function validateSettings(settings) {
       );
     }
     providerIds.add(provider.id);
-    if (provider.kind !== "codex-subscription" && !resolveProviderApiKey(provider)) {
+    if (provider.kind !== "codex-subscription" && provider.kind !== "anonymous" && !resolveProviderApiKey(provider)) {
       throw new Error(
         `OPENGENI_MODEL_PROVIDERS_JSON provider ${provider.id} requires a resolvable API key (set apiKey or apiKeyEnv)`
       );
@@ -3910,10 +4363,15 @@ export {
   CapabilityStateV1Schema,
   CapabilitySupportV1,
   DEFAULT_AGENT_INSTRUCTIONS,
+  DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS,
+  DEFAULT_GOAL_IDLE_BACKOFF_MS,
+  GOOGLE_DRIVE_PROVIDER_REQUEST_TIMEOUT_MAX_MS,
+  GOOGLE_DRIVE_PROVIDER_RETRY_DELAY_MAX_MS,
   IntegrationOAuthClientConfigSchema,
   McpServerConnectionRefSchema,
   ModelCapabilitiesV1Schema,
   ModelProviderApi,
+  ModelProviderWireProfile,
   OPENGENI_GATEWAY_MODELS,
   OPENGENI_GATEWAY_PROVIDER_ID,
   OPENGENI_REALTIME_MODEL_ID_PREFIX,
@@ -3943,6 +4401,7 @@ export {
   calculateModelUsageCostBreakdown,
   calculateModelUsageCostMicros,
   calculateVideoGenerationCreditCostMicros,
+  canonicalPublicOrigin,
   canonicalizeConfiguredModelId,
   codemodeWorkspaceUrl,
   collectGitIdentityEnvironment,
@@ -3950,6 +4409,7 @@ export {
   configuredAllowedModels,
   configuredAllowedReasoningEfforts,
   configuredEntitlements,
+  configuredGoogleDriveSyncLimits,
   configuredModelPricing,
   configuredModelPricingSchedules,
   configuredModels,
@@ -3959,11 +4419,16 @@ export {
   dbSearchPath,
   defaultModelPricing,
   effectiveModalIdleTimeoutSeconds,
+  effectiveSandboxLifecycle,
   environmentsEncryptionKeyBytes,
   firstPartyMcpBaseUrl,
+  firstPartyMcpInternalBaseUrl,
+  firstPartyMcpInternalWorkspaceUrl,
   firstPartyMcpWorkspaceUrl,
   gatewayRequestPolicyForUpstreamModel,
   getSettings,
+  googleDriveOAuthCallbackUrl,
+  googleDriveProviderRetryOptions,
   hasGitCredentialRepositorySelection,
   hasGitHubRepositorySelection,
   isDirectOpenAiApiBaseUrl,
@@ -3977,6 +4442,7 @@ export {
   parseSocialOauthClientsJson,
   parseStaticEntitlementsJson,
   parseStaticUsageLimitsJson,
+  personalGitHubOAuthCallbackUrl,
   policyProviderIdForModel,
   productLabelForModelId,
   productShortLabelForModelId,