@opengeni/config 0.5.1 → 0.6.9

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { Entitlements, SandboxBackend, StaticUsageLimits, ReasoningEffort } from '@opengeni/contracts';
+import { Entitlements, TurnExecutionModelSourceV1, TurnExecutionReasoningSourceV1, SandboxBackend, StaticUsageLimits, TurnExecutionPolicyV1, ReasoningEffort } from '@opengeni/contracts';
 import { z } from 'zod';
 
 declare const sandboxPreparationProfiles: Record<string, {
@@ -33,6 +33,7 @@ declare const AGENT_INSTRUCTIONS_CORE_PLACEHOLDER = "{{core}}";
 declare const DEFAULT_AGENT_INSTRUCTIONS: string;
 declare const McpServerConnectionRefSchema: z.ZodObject<{
     connectionId: z.ZodOptional<z.ZodString>;
+    provider: z.ZodOptional<z.ZodString>;
     providerDomain: z.ZodString;
     kind: z.ZodOptional<z.ZodEnum<{
         oauth2: "oauth2";
@@ -42,6 +43,10 @@ declare const McpServerConnectionRefSchema: z.ZodObject<{
     }>>;
     scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     resource: z.ZodOptional<z.ZodString>;
+    selectedResources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"repository">;
+    }, z.core.$strict>>>;
     subjectScope: z.ZodOptional<z.ZodEnum<{
         workspace: "workspace";
         subject: "subject";
@@ -63,6 +68,12 @@ declare const SettingsSchema: z.ZodObject<{
     temporalHost: z.ZodDefault<z.ZodString>;
     temporalNamespace: z.ZodDefault<z.ZodString>;
     temporalTaskQueue: z.ZodDefault<z.ZodString>;
+    temporalTlsEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    temporalApiKey: z.ZodOptional<z.ZodString>;
+    temporalTlsServerName: z.ZodOptional<z.ZodString>;
+    temporalTlsRootCaCertificateBase64: z.ZodOptional<z.ZodString>;
+    temporalTlsClientCertificateBase64: z.ZodOptional<z.ZodString>;
+    temporalTlsClientPrivateKeyBase64: z.ZodOptional<z.ZodString>;
     startupDependencyRetryAttempts: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     startupDependencyRetryInitialDelayMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     startupDependencyRetryMaxDelayMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -96,8 +107,10 @@ declare const SettingsSchema: z.ZodObject<{
     delegationSecret: z.ZodOptional<z.ZodString>;
     streamTokenSecret: z.ZodOptional<z.ZodString>;
     streamControlEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    sessionTurnToolReplacementEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     toolspaceEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     toolspaceMaxCallsPerTurn: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    ogtoolPackageSpec: z.ZodOptional<z.ZodString>;
     environmentsEncryptionKey: z.ZodOptional<z.ZodString>;
     integrationsEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     integrationsStateSecret: z.ZodOptional<z.ZodString>;
@@ -111,6 +124,7 @@ declare const SettingsSchema: z.ZodObject<{
     contextCompactionThresholdRatio: z.ZodPipe<z.ZodDefault<z.ZodCoercedNumber<unknown>>, z.ZodTransform<number, number>>;
     contextReservedOutputTokens: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     contextAutoCompactThresholdTokens: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    modelToolOutputTruncationTokens: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     authRequired: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     accessKey: z.ZodOptional<z.ZodString>;
     authAllowHealth: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
@@ -134,7 +148,6 @@ declare const SettingsSchema: z.ZodObject<{
     codexProductSku: z.ZodOptional<z.ZodString>;
     codexToolSearchEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     codexCredentialLeasingEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
-    codexRotationNearExhaustionPct: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     openaiReasoningEffort: z.ZodDefault<z.ZodEnum<{
         none: "none";
         minimal: "minimal";
@@ -250,6 +263,7 @@ declare const SettingsSchema: z.ZodObject<{
     vercelTeamId: z.ZodOptional<z.ZodString>;
     vercelRuntime: z.ZodOptional<z.ZodString>;
     sandboxOwnershipEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    rigVerificationLeaseOwnershipEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     sandboxLazyProvisionEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     sandboxSelfhostedEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     agentOpStreamEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
@@ -341,10 +355,11 @@ declare const SettingsSchema: z.ZodObject<{
         allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
         cacheToolsList: z.ZodDefault<z.ZodBoolean>;
-        requireApproval: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
+        requireApproval: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         connectionRef: z.ZodOptional<z.ZodObject<{
             connectionId: z.ZodOptional<z.ZodString>;
+            provider: z.ZodOptional<z.ZodString>;
             providerDomain: z.ZodString;
             kind: z.ZodOptional<z.ZodEnum<{
                 oauth2: "oauth2";
@@ -354,6 +369,10 @@ declare const SettingsSchema: z.ZodObject<{
             }>>;
             scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
             resource: z.ZodOptional<z.ZodString>;
+            selectedResources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodLiteral<"repository">;
+            }, z.core.$strict>>>;
             subjectScope: z.ZodOptional<z.ZodEnum<{
                 workspace: "workspace";
                 subject: "subject";
@@ -363,12 +382,32 @@ declare const SettingsSchema: z.ZodObject<{
 }, z.core.$strip>;
 type Settings = z.infer<typeof SettingsSchema>;
 type McpServerConfig = Settings["mcpServers"][number];
+type TemporalTlsConnectionConfig = {
+    serverNameOverride?: string;
+    serverRootCACertificate?: Uint8Array;
+    clientCertPair?: {
+        crt: Uint8Array;
+        key: Uint8Array;
+    };
+};
+type TemporalConnectionOptions = {
+    address: string;
+    tls?: true | TemporalTlsConnectionConfig;
+    apiKey?: string;
+};
 type ModelPricing = {
     inputMicrosPerMillionTokens: number;
     cachedInputMicrosPerMillionTokens?: number | undefined;
     outputMicrosPerMillionTokens: number;
     marginBps?: number | undefined;
 };
+type ModelPricingScheduleV1 = {
+    default: ModelPricing;
+    inputTokenTiers?: Array<{
+        minimumInputTokens: number;
+        pricing: ModelPricing;
+    }> | undefined;
+};
 type ModelUsageInput = {
     inputTokens?: number | undefined;
     outputTokens?: number | undefined;
@@ -378,6 +417,165 @@ type ModelUsageInput = {
 };
 type StaticUsageLimitsConfig = StaticUsageLimits;
 type EntitlementsConfig = Entitlements;
+declare const CapabilitySupportV1: z.ZodEnum<{
+    unknown: "unknown";
+    supported: "supported";
+    unsupported: "unsupported";
+}>;
+type CapabilitySupportV1 = z.infer<typeof CapabilitySupportV1>;
+declare const CapabilityStateV1Schema: z.ZodObject<{
+    upstream: z.ZodEnum<{
+        unknown: "unknown";
+        supported: "supported";
+        unsupported: "unsupported";
+    }>;
+    runnable: z.ZodBoolean;
+}, z.core.$strip>;
+type CapabilityStateV1 = z.infer<typeof CapabilityStateV1Schema>;
+declare const ModelCapabilitiesV1Schema: z.ZodObject<{
+    reasoning: z.ZodObject<{
+        upstream: z.ZodEnum<{
+            unknown: "unknown";
+            supported: "supported";
+            unsupported: "unsupported";
+        }>;
+        runnable: z.ZodBoolean;
+        efforts: z.ZodArray<z.ZodEnum<{
+            none: "none";
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+        }>>;
+        defaultEffort: z.ZodNullable<z.ZodEnum<{
+            none: "none";
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+        }>>;
+        required: z.ZodBoolean;
+    }, z.core.$strip>;
+    functionCalling: z.ZodObject<{
+        upstream: z.ZodEnum<{
+            unknown: "unknown";
+            supported: "supported";
+            unsupported: "unsupported";
+        }>;
+        runnable: z.ZodBoolean;
+    }, z.core.$strip>;
+    structuredOutput: z.ZodObject<{
+        upstream: z.ZodEnum<{
+            unknown: "unknown";
+            supported: "supported";
+            unsupported: "unsupported";
+        }>;
+        runnable: z.ZodBoolean;
+    }, z.core.$strip>;
+    hostedTools: z.ZodObject<{
+        webSearch: z.ZodObject<{
+            upstream: z.ZodEnum<{
+                unknown: "unknown";
+                supported: "supported";
+                unsupported: "unsupported";
+            }>;
+            runnable: z.ZodBoolean;
+        }, z.core.$strip>;
+        xSearch: z.ZodObject<{
+            upstream: z.ZodEnum<{
+                unknown: "unknown";
+                supported: "supported";
+                unsupported: "unsupported";
+            }>;
+            runnable: z.ZodBoolean;
+        }, z.core.$strip>;
+        codeExecution: z.ZodObject<{
+            upstream: z.ZodEnum<{
+                unknown: "unknown";
+                supported: "supported";
+                unsupported: "unsupported";
+            }>;
+            runnable: z.ZodBoolean;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    inputModalities: z.ZodArray<z.ZodEnum<{
+        text: "text";
+        image: "image";
+        audio: "audio";
+    }>>;
+    outputModalities: z.ZodArray<z.ZodEnum<{
+        text: "text";
+        image: "image";
+        audio: "audio";
+    }>>;
+    transports: z.ZodObject<{
+        sse: z.ZodObject<{
+            upstream: z.ZodEnum<{
+                unknown: "unknown";
+                supported: "supported";
+                unsupported: "unsupported";
+            }>;
+            runnable: z.ZodBoolean;
+        }, z.core.$strip>;
+        responsesWebSocket: z.ZodObject<{
+            upstream: z.ZodEnum<{
+                unknown: "unknown";
+                supported: "supported";
+                unsupported: "unsupported";
+            }>;
+            runnable: z.ZodBoolean;
+        }, z.core.$strip>;
+        realtimeAudio: z.ZodObject<{
+            upstream: z.ZodEnum<{
+                unknown: "unknown";
+                supported: "supported";
+                unsupported: "unsupported";
+            }>;
+            runnable: z.ZodBoolean;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    latencyModes: z.ZodArray<z.ZodObject<{
+        id: z.ZodEnum<{
+            standard: "standard";
+            priority: "priority";
+            fast: "fast";
+        }>;
+        upstream: z.ZodEnum<{
+            unknown: "unknown";
+            supported: "supported";
+            unsupported: "unsupported";
+        }>;
+        runnable: z.ZodBoolean;
+        billingMultiplierBps: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type ModelCapabilitiesV1 = z.infer<typeof ModelCapabilitiesV1Schema>;
+type ModelDeploymentV1 = {
+    upstreamModelId: string;
+    wireApi: ModelProviderApi;
+};
+type ModelExecutionLimitsV1 = {
+    contextWindowTokens: number | null;
+    effectiveContextWindowTokens: number | null;
+    autoCompactTokenLimit: number | null;
+    toolOutputTruncationTokens: number | null;
+};
+type CredentialSourceV1 = {
+    kind: "deployment";
+    mechanism: "api_key" | "azure_ad_bearer";
+} | {
+    kind: "connected_subscription";
+    provider: "codex";
+} | {
+    kind: "workspace_connection";
+    mechanism: "api_key";
+};
+type BillingAttributionV1 = {
+    upstreamPayer: "deployment" | "workspace" | "connected_subscription";
+    metering: "opengeni_credits" | "external";
+};
 /**
  * Wire API a provider speaks. The built-in OpenAI/Azure provider always uses
  * "responses" (the OpenAI Responses API). Extra registry providers default to
@@ -417,20 +615,164 @@ declare const RegistryProviderSchema: z.ZodObject<{
     apiKeyEnv: z.ZodOptional<z.ZodString>;
     defaultQuery: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     defaultHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    publicDefaultQueryNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    publicDefaultHeaderNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    credentialSource: z.ZodOptional<z.ZodNever>;
+    billing: z.ZodOptional<z.ZodNever>;
     models: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
+        upstreamModelId: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
         label: z.ZodOptional<z.ZodString>;
         contextWindowTokens: z.ZodOptional<z.ZodNumber>;
         effectiveContextWindowTokens: z.ZodOptional<z.ZodNumber>;
         autoCompactTokenLimit: z.ZodOptional<z.ZodNumber>;
+        toolOutputTruncationTokens: z.ZodOptional<z.ZodNumber>;
         reasoningEffort: z.ZodOptional<z.ZodBoolean>;
         hostedWebSearch: z.ZodOptional<z.ZodBoolean>;
-        pricing: z.ZodOptional<z.ZodObject<{
+        capabilities: z.ZodOptional<z.ZodObject<{
+            reasoning: z.ZodObject<{
+                upstream: z.ZodEnum<{
+                    unknown: "unknown";
+                    supported: "supported";
+                    unsupported: "unsupported";
+                }>;
+                runnable: z.ZodBoolean;
+                efforts: z.ZodArray<z.ZodEnum<{
+                    none: "none";
+                    minimal: "minimal";
+                    low: "low";
+                    medium: "medium";
+                    high: "high";
+                    xhigh: "xhigh";
+                }>>;
+                defaultEffort: z.ZodNullable<z.ZodEnum<{
+                    none: "none";
+                    minimal: "minimal";
+                    low: "low";
+                    medium: "medium";
+                    high: "high";
+                    xhigh: "xhigh";
+                }>>;
+                required: z.ZodBoolean;
+            }, z.core.$strip>;
+            functionCalling: z.ZodObject<{
+                upstream: z.ZodEnum<{
+                    unknown: "unknown";
+                    supported: "supported";
+                    unsupported: "unsupported";
+                }>;
+                runnable: z.ZodBoolean;
+            }, z.core.$strip>;
+            structuredOutput: z.ZodObject<{
+                upstream: z.ZodEnum<{
+                    unknown: "unknown";
+                    supported: "supported";
+                    unsupported: "unsupported";
+                }>;
+                runnable: z.ZodBoolean;
+            }, z.core.$strip>;
+            hostedTools: z.ZodObject<{
+                webSearch: z.ZodObject<{
+                    upstream: z.ZodEnum<{
+                        unknown: "unknown";
+                        supported: "supported";
+                        unsupported: "unsupported";
+                    }>;
+                    runnable: z.ZodBoolean;
+                }, z.core.$strip>;
+                xSearch: z.ZodObject<{
+                    upstream: z.ZodEnum<{
+                        unknown: "unknown";
+                        supported: "supported";
+                        unsupported: "unsupported";
+                    }>;
+                    runnable: z.ZodBoolean;
+                }, z.core.$strip>;
+                codeExecution: z.ZodObject<{
+                    upstream: z.ZodEnum<{
+                        unknown: "unknown";
+                        supported: "supported";
+                        unsupported: "unsupported";
+                    }>;
+                    runnable: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            inputModalities: z.ZodArray<z.ZodEnum<{
+                text: "text";
+                image: "image";
+                audio: "audio";
+            }>>;
+            outputModalities: z.ZodArray<z.ZodEnum<{
+                text: "text";
+                image: "image";
+                audio: "audio";
+            }>>;
+            transports: z.ZodObject<{
+                sse: z.ZodObject<{
+                    upstream: z.ZodEnum<{
+                        unknown: "unknown";
+                        supported: "supported";
+                        unsupported: "unsupported";
+                    }>;
+                    runnable: z.ZodBoolean;
+                }, z.core.$strip>;
+                responsesWebSocket: z.ZodObject<{
+                    upstream: z.ZodEnum<{
+                        unknown: "unknown";
+                        supported: "supported";
+                        unsupported: "unsupported";
+                    }>;
+                    runnable: z.ZodBoolean;
+                }, z.core.$strip>;
+                realtimeAudio: z.ZodObject<{
+                    upstream: z.ZodEnum<{
+                        unknown: "unknown";
+                        supported: "supported";
+                        unsupported: "unsupported";
+                    }>;
+                    runnable: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            latencyModes: z.ZodArray<z.ZodObject<{
+                id: z.ZodEnum<{
+                    standard: "standard";
+                    priority: "priority";
+                    fast: "fast";
+                }>;
+                upstream: z.ZodEnum<{
+                    unknown: "unknown";
+                    supported: "supported";
+                    unsupported: "unsupported";
+                }>;
+                runnable: z.ZodBoolean;
+                billingMultiplierBps: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        pricing: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
             inputMicrosPerMillionTokens: z.ZodNumber;
             cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
             outputMicrosPerMillionTokens: z.ZodNumber;
             marginBps: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>;
+        }, z.core.$strip>, z.ZodObject<{
+            default: z.ZodObject<{
+                inputMicrosPerMillionTokens: z.ZodNumber;
+                cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
+                outputMicrosPerMillionTokens: z.ZodNumber;
+                marginBps: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>;
+            inputTokenTiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                minimumInputTokens: z.ZodNumber;
+                pricing: z.ZodObject<{
+                    inputMicrosPerMillionTokens: z.ZodNumber;
+                    cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
+                    outputMicrosPerMillionTokens: z.ZodNumber;
+                    marginBps: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strip>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>]>>;
+        credentialSource: z.ZodOptional<z.ZodNever>;
+        billing: z.ZodOptional<z.ZodNever>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 type RegistryProvider = z.infer<typeof RegistryProviderSchema>;
@@ -461,17 +803,32 @@ interface ResolvedModelProvider {
     apiKey?: string | undefined;
     defaultQuery?: Record<string, string> | undefined;
     defaultHeaders?: Record<string, string> | undefined;
+    publicDefaultQueryNames?: string[] | undefined;
+    publicDefaultHeaderNames?: string[] | undefined;
+    credentialSource: CredentialSourceV1;
+    billing: BillingAttributionV1;
 }
 /** A single exposed model + the provider that serves it. */
 interface ConfiguredModel {
+    schemaVersion: 1;
     id: string;
+    aliases: string[];
     label: string;
     providerId: string;
     providerLabel: string;
     api: ModelProviderApi;
+    upstreamModelId: string;
+    deployment: ModelDeploymentV1;
+    executionLimits: ModelExecutionLimitsV1;
+    credentialSource: CredentialSourceV1;
+    billing: BillingAttributionV1;
+    capabilities: ModelCapabilitiesV1;
+    pricing?: ModelPricingScheduleV1 | undefined;
+    definitionVersion: string;
     contextWindowTokens?: number | undefined;
     effectiveContextWindowTokens?: number | undefined;
     autoCompactTokenLimit?: number | undefined;
+    toolOutputTruncationTokens?: number | undefined;
     reasoningEffort: boolean;
     hostedWebSearch: boolean;
 }
@@ -522,6 +879,13 @@ declare function builtinProviderId(settings: Pick<Settings, "openaiProvider">):
  * id — validateSettings rejects that at boot.
  */
 declare function configuredProviders(settings: Settings): ResolvedModelProvider[];
+/**
+ * Pure catalog overlay for a workspace whose existing Codex connection seam
+ * reports ready. This describes product/provider identity only; it does not
+ * select, lease, refresh, or expose a concrete credential; those runtime
+ * operations remain owned by the credential allocator.
+ */
+declare function withCodexCatalogProvider(settings: Settings): Settings;
 /**
  * The provider identity a model id resolves to, for workspace model-policy
  * evaluation — MUST agree with the real router (resolveTurnModel /
@@ -545,6 +909,8 @@ declare function policyProviderIdForModel(settings: Settings, modelId: string):
  * first and the built-in allow-list takes precedence over registry entries.
  */
 declare function configuredModels(settings: Settings): ConfiguredModel[];
+/** Resolve a known canonical id or alias. Unknown strings are returned unchanged. */
+declare function canonicalizeConfiguredModelId(settings: Settings, modelId: string): string;
 /**
  * Allowed model ids in selection order. Reimplemented on top of
  * configuredModels so it is the union of the built-in allow-list and every
@@ -563,12 +929,46 @@ declare function resolveModelProvider(settings: Settings, modelId: string): {
     provider: ResolvedModelProvider;
     model: ConfiguredModel;
 } | undefined;
+type ResolveTurnExecutionPolicyV1Input = {
+    /** Effective persisted turn model. Aliases are accepted and canonicalized. */
+    modelId: string;
+    /** Exact caller-supplied input before canonicalization, only for explicit switches. */
+    requestedModelId: string | null;
+    modelSource: TurnExecutionModelSourceV1;
+    reasoningEffort: Settings["openaiReasoningEffort"];
+    reasoningSource: TurnExecutionReasoningSourceV1;
+};
+/**
+ * Build a trusted, secret-safe execution policy from the normalized catalog.
+ * The Codex overlay here contains static product/provider identity only; it
+ * neither proves readiness nor chooses, decrypts, leases, or exposes an account.
+ */
+declare function resolveTurnExecutionPolicyV1(settings: Settings, input: ResolveTurnExecutionPolicyV1Input): TurnExecutionPolicyV1;
 /**
- * Effective per-model pricing. Merge order (later wins):
- *   defaultModelPricing → registry model `pricing` entries (keyed by model id)
- *   → parseModelPricingJson(settings.modelPricingJson) (explicit JSON wins).
+ * Parse-time validation lives in @opengeni/contracts; this verifier binds a
+ * present snapshot to the current executable definition and exact turn row.
+ * Any deployment/provider drift fails before a provider or compaction call.
  */
+declare function assertTurnExecutionPolicyMatchesConfigV1(settings: Settings, policy: TurnExecutionPolicyV1, expected: {
+    modelId: string;
+    reasoningEffort: Settings["openaiReasoningEffort"];
+}): {
+    policy: TurnExecutionPolicyV1;
+    provider: ResolvedModelProvider;
+    model: ConfiguredModel;
+};
+/**
+ * Effective per-model pricing schedules. Merge order (later wins): built-in
+ * flat defaults → registry model flat/scheduled pricing → explicit legacy flat
+ * OPENGENI_MODEL_PRICING_JSON. The explicit legacy map intentionally replaces
+ * a registry schedule with one flat default so its historical precedence stays
+ * exact.
+ */
+declare function configuredModelPricingSchedules(settings: Settings): Record<string, ModelPricingScheduleV1>;
+/** Legacy flat projection: returns the default/below-threshold price. */
 declare function configuredModelPricing(settings: Settings): Record<string, ModelPricing>;
+/** Select the per-provider-request price at an exact input-token threshold. */
+declare function selectModelPricing(schedule: ModelPricingScheduleV1, inputTokens: number): ModelPricing;
 /**
  * Usable input-token budget: an explicit model-catalog effective window when
  * available, otherwise the deployment window minus its output reserve.
@@ -579,7 +979,7 @@ declare function contextInputBudgetTokens(settings: Pick<Settings, "contextWindo
  * metadata is authoritative when present; deployment defaults remain the
  * fallback for models that do not declare their own limits.
  */
-declare function settingsWithResolvedModelContext(settings: Settings, model: Pick<ConfiguredModel, "contextWindowTokens" | "effectiveContextWindowTokens" | "autoCompactTokenLimit">): Settings;
+declare function settingsWithResolvedModelContext(settings: Settings, model: Pick<ConfiguredModel, "contextWindowTokens" | "effectiveContextWindowTokens" | "autoCompactTokenLimit" | "toolOutputTruncationTokens">): Settings;
 declare function configuredStaticUsageLimits(settings: Settings): StaticUsageLimitsConfig;
 declare function configuredEntitlements(settings: Settings): EntitlementsConfig;
 declare function calculateModelUsageCostMicros(settings: Settings, model: string, usage: ModelUsageInput): number;
@@ -590,6 +990,13 @@ declare function configuredAllowedReasoningEfforts(settings: Settings): Array<z.
  * Throws naming only the env var, never echoing its value.
  */
 declare function environmentsEncryptionKeyBytes(settings: Settings): Uint8Array | null;
+/**
+ * Build one structurally compatible connection policy for both
+ * `@temporalio/client` and `@temporalio/worker`. An API key or any custom TLS
+ * material enables TLS automatically; the explicit flag covers server-auth TLS
+ * without credentials. Secret values are never included in validation errors.
+ */
+declare function temporalConnectionOptions(settings: Settings): TemporalConnectionOptions;
 /**
  * The connection `search_path` for OpenGeni's db handles + the managed-auth pool
  * (Step I, §7.8 runtime half). Returns `undefined` when `dbSchema` is unset
@@ -597,7 +1004,7 @@ declare function environmentsEncryptionKeyBytes(settings: Settings): Uint8Array
  * default (`public`) applies — byte-for-byte today's behavior. When `dbSchema`
  * is set (embedded), returns `"<schema>,opengeni_private,public"` — `public`
  * stays LAST so `gen_random_uuid()` (pgcrypto) and the `vector` type still
- * resolve (the SPIKE-1 live footgun). `opengeni_private` is on the path so the
+ * resolve (the schema-isolation contract live footgun). `opengeni_private` is on the path so the
  * RLS GUC-reader helpers resolve when referenced unqualified.
  */
 declare function dbSearchPath(settings: Pick<Settings, "dbSchema">): string | undefined;
@@ -733,7 +1140,7 @@ declare function parseStaticEntitlementsJson(raw: string): EntitlementsConfig;
 declare function firstPartyMcpBaseUrl(settings: Settings): string;
 declare function firstPartyMcpWorkspaceUrl(settings: Settings, workspaceId: string): string;
 /**
- * Resolve the secret used to sign/verify scoped stream tokens (master-spine
+ * Resolve the secret used to sign/verify scoped stream tokens (sandbox contract
  * §C.3). Falls back to `delegationSecret` (the same HMAC envelope family —
  * `ogs_` vs `ogd_` prefix) so a deployment that already carries a delegation
  * secret does not need a second one. Returns undefined when neither is set,
@@ -742,13 +1149,13 @@ declare function firstPartyMcpWorkspaceUrl(settings: Settings, workspaceId: stri
 declare function resolveStreamTokenSecret(settings: Settings): string | undefined;
 /**
  * True iff the desktop pixel plane must GRACEFULLY DEGRADE because desktop is
- * enabled but no stream-token secret is resolvable (I8/OD-8). When true,
+ * enabled but no stream-token secret is resolvable (stream-token availability contract). When true,
  * negotiateCapabilities forces DesktopStream.transport:null.
  */
 declare function streamTokenDegraded(settings: Settings): boolean;
 /**
  * Resolve the secret the control plane signs the enrollment bearer credential
- * with (the `oge_` envelope the agent presents back — M5/dossier §10.2). Falls
+ * with (the `oge_` envelope the agent presents back — M5). Falls
  * back to `delegationSecret` (the same HMAC envelope family) so a deployment that
  * already carries a delegation secret needs no second one. Returns undefined when
  * neither is set; when selfhosted is enabled but this is undefined, the poll route
@@ -758,7 +1165,7 @@ declare function streamTokenDegraded(settings: Settings): boolean;
 declare function resolveEnrollmentSigningSecret(settings: Settings): string | undefined;
 /**
  * Resolve the HMAC secret the control plane signs the agent's relay PRODUCER token
- * with (the `ogr_` envelope; M8b/dossier §10.5). The RELAY verifies the producer
+ * with (the `ogr_` envelope; M8b). The RELAY verifies the producer
  * token with the SAME secret (injected into the relay via env). Prefers an explicit
  * `selfhostedRelayTokenSecret`, then the `streamTokenSecret` (the relay already
  * needs that one to verify the viewer's `ogs_` token, so a single secret can back
@@ -796,4 +1203,4 @@ interface NatsControlPlaneAuth {
 }
 declare function resolveNatsControlPlaneAuth(settings: Settings): NatsControlPlaneAuth | null;
 
-export { AGENT_INSTRUCTIONS_CORE_PLACEHOLDER, type ConfiguredModel, DEFAULT_AGENT_INSTRUCTIONS, type EntitlementsConfig, type IntegrationOAuthClientConfig, IntegrationOAuthClientConfigSchema, type McpServerConfig, type McpServerConnectionRef, McpServerConnectionRefSchema, type ModelPricing, ModelProviderApi, type ModelUsageInput, type NatsCalloutConfig, type NatsControlPlaneAuth, type RegistryProvider, RegistryProviderKind, type ResolvedModelProvider, SANDBOX_REQUIRED_ENV, type SandboxRequiredEnv, type Settings, type StartupRetryOptions, type StaticUsageLimitsConfig, applyGitAuthPointerEnvironment, builtinProviderId, calculateModelUsageCostMicros, collectGitIdentityEnvironment, collectSandboxEnvironment, configuredAllowedModels, configuredAllowedReasoningEfforts, configuredEntitlements, configuredModelPricing, configuredModels, configuredProviders, configuredStaticUsageLimits, contextInputBudgetTokens, dbSearchPath, defaultModelPricing, effectiveModalIdleTimeoutSeconds, environmentsEncryptionKeyBytes, firstPartyMcpBaseUrl, firstPartyMcpWorkspaceUrl, getSettings, hasGitCredentialRepositorySelection, hasGitHubRepositorySelection, parseExposedPorts, parseIntegrationsOauthClientsJson, parseMcpServers, parseModelPricingJson, parseModelProvidersJson, parseSandboxWarmRateJson, parseStaticEntitlementsJson, parseStaticUsageLimitsJson, policyProviderIdForModel, requiredSandboxEnvForBackend, resolveEnrollmentSigningSecret, resolveModelProvider, resolveNatsCalloutConfig, resolveNatsControlPlaneAuth, resolveProviderApiKey, resolveRelayTokenSecret, resolveStreamTokenSecret, retryStartupDependency, sandboxEnvironmentVariableNames, sandboxLifecycleHookIds, sandboxPreparationProfiles, sandboxWarmRateMicrosPerSecond, settingsWithResolvedModelContext, stableSandboxEnvironmentForRun, startupRetryOptions, streamTokenDegraded };
+export { AGENT_INSTRUCTIONS_CORE_PLACEHOLDER, type BillingAttributionV1, type CapabilityStateV1, CapabilityStateV1Schema, CapabilitySupportV1, type ConfiguredModel, type CredentialSourceV1, DEFAULT_AGENT_INSTRUCTIONS, type EntitlementsConfig, type IntegrationOAuthClientConfig, IntegrationOAuthClientConfigSchema, type McpServerConfig, type McpServerConnectionRef, McpServerConnectionRefSchema, type ModelCapabilitiesV1, ModelCapabilitiesV1Schema, type ModelDeploymentV1, type ModelExecutionLimitsV1, type ModelPricing, type ModelPricingScheduleV1, ModelProviderApi, type ModelUsageInput, type NatsCalloutConfig, type NatsControlPlaneAuth, type RegistryProvider, RegistryProviderKind, type ResolveTurnExecutionPolicyV1Input, type ResolvedModelProvider, SANDBOX_REQUIRED_ENV, type SandboxRequiredEnv, type Settings, type StartupRetryOptions, type StaticUsageLimitsConfig, type TemporalConnectionOptions, type TemporalTlsConnectionConfig, applyGitAuthPointerEnvironment, assertTurnExecutionPolicyMatchesConfigV1, builtinProviderId, calculateModelUsageCostMicros, canonicalizeConfiguredModelId, collectGitIdentityEnvironment, collectSandboxEnvironment, configuredAllowedModels, configuredAllowedReasoningEfforts, configuredEntitlements, configuredModelPricing, configuredModelPricingSchedules, configuredModels, configuredProviders, configuredStaticUsageLimits, contextInputBudgetTokens, dbSearchPath, defaultModelPricing, effectiveModalIdleTimeoutSeconds, environmentsEncryptionKeyBytes, firstPartyMcpBaseUrl, firstPartyMcpWorkspaceUrl, getSettings, hasGitCredentialRepositorySelection, hasGitHubRepositorySelection, parseExposedPorts, parseIntegrationsOauthClientsJson, parseMcpServers, parseModelPricingJson, parseModelProvidersJson, parseSandboxWarmRateJson, parseStaticEntitlementsJson, parseStaticUsageLimitsJson, policyProviderIdForModel, requiredSandboxEnvForBackend, resolveEnrollmentSigningSecret, resolveModelProvider, resolveNatsCalloutConfig, resolveNatsControlPlaneAuth, resolveProviderApiKey, resolveRelayTokenSecret, resolveStreamTokenSecret, resolveTurnExecutionPolicyV1, retryStartupDependency, sandboxEnvironmentVariableNames, sandboxLifecycleHookIds, sandboxPreparationProfiles, sandboxWarmRateMicrosPerSecond, selectModelPricing, settingsWithResolvedModelContext, stableSandboxEnvironmentForRun, startupRetryOptions, streamTokenDegraded, temporalConnectionOptions, withCodexCatalogProvider };