@opengeni/config 0.7.0 → 0.7.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/config",
-  "version": "0.7.0",
+  "version": "0.7.6",
   "description": "OpenGeni runtime configuration: settings resolution, deployment knobs, and config validation shared across the server packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -34,7 +34,7 @@
   },
   "dependencies": {
     "@opengeni/codex": "^0.2.7",
-    "@opengeni/contracts": "^0.19.0",
+    "@opengeni/contracts": "^0.19.4",
     "zod": "^4.2.1"
   },
   "engines": {

package/src/index.ts

@@ -191,6 +191,10 @@ const SettingsSchema = z.object({
   // non-owner `opengeni_app` role. "scoped" = the embedded owner-role path (the
   // GUC is still emitted defensively, so the query path is identical).
   rlsStrategy: z.enum(["force", "scoped"]).default("force"),
+  // Exact PostgreSQL login identity required by the standalone FORCE-RLS
+  // startup/readiness assertion. Embedded `scoped` hosts own their role model
+  // and are deliberately not constrained to this name.
+  runtimeDatabaseRole: z.string().min(1).default("opengeni_app"),
   natsUrl: z.string().default("nats://127.0.0.1:4222"),
   temporalHost: z.string().default("127.0.0.1:7233"),
   temporalNamespace: z.string().default("default"),
@@ -211,11 +215,18 @@ const SettingsSchema = z.object({
   publicBaseUrl: z.string().url().optional(),
   // Base URL for the bring-your-own-compute agent release assets the get.<domain>
   // install routes redirect to. Defaults to this repo's GitHub Releases. The route
-  // appends `/download/agent-v<ver>/<asset>` (or `/latest/download/<asset>`).
+  // appends `/download/agent-v<ver>/<asset>`.
   agentReleasesBaseUrl: z
     .string()
     .url()
     .default("https://github.com/Cloudgeni-ai/opengeni/releases"),
+  // Explicit operator-controlled promotion pointer for `/agent/latest/*`.
+  // Versioned agent releases are immutable; changing this setting promotes or
+  // rolls back the stable channel without moving or deleting a provider tag.
+  agentStableVersion: z
+    .string()
+    .regex(/^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)$/u)
+    .default("0.1.8"),
   productAccessMode: ProductAccessMode.default("local"),
   billingMode: BillingMode.default("disabled"),
   entitlementsMode: EntitlementsMode.default("none"),
@@ -325,12 +336,17 @@ const SettingsSchema = z.object({
   // subscription is injected as a synthetic "codex-subscription" registry
   // provider whose models route through the ChatGPT backend (@opengeni/codex).
   codexSubscriptionEnabled: EnvBoolean.default(false), // OPENGENI_CODEX_SUBSCRIPTION_ENABLED
+  // Expose the connected apps attached to a Codex subscription through the
+  // synthetic codex_apps MCP server. Independent from subscription routing so
+  // operators can use Codex models without exposing ChatGPT connectors.
+  codexConnectedAppsEnabled: EnvBoolean.default(false), // OPENGENI_CODEX_CONNECTED_APPS_ENABLED
   codexProductSku: z.string().optional(), // OPENGENI_CODEX_PRODUCT_SKU (X-OpenAI-Product-Sku, apps only)
-  // Progressive connector disclosure (Codex-CLI-style tool_search): on a codex
-  // turn, flag the ~217 codex_apps connector tools `defer_loading:true` (dropping
-  // their schemas from model context) and add one client-executed tool_search
-  // tool that BM25-discloses only the matching connectors. Default OFF — a codex
-  // turn is byte-for-byte unchanged until enabled. OPENGENI_CODEX_TOOL_SEARCH_ENABLED
+  // Progressive MCP disclosure (Codex-CLI-style tool_search): on a codex turn,
+  // flag non-mandatory selected MCP tools `defer_loading:true` (dropping their
+  // schemas from model context) and add one client-executed tool_search tool
+  // that BM25-discloses bounded matches. The mandatory OpenGeni tools stay
+  // eager. Default OFF — a codex turn is byte-for-byte unchanged until enabled.
+  // OPENGENI_CODEX_TOOL_SEARCH_ENABLED
   codexToolSearchEnabled: EnvBoolean.default(false),
   // credential allocator atomic, workspace-local credential allocation. Default OFF is a
   // deliberate rolling-deploy fence: migrate + roll every worker first, then
@@ -743,6 +759,10 @@ const SettingsSchema = z.object({
   documentEmbeddingDimensions: z.coerce.number().int().positive().default(3072),
   documentEmbeddingApiKey: z.string().optional(),
   documentEmbeddingBaseUrl: z.string().url().optional(),
+  documentCurationProvider: z.enum(["openai", "heuristic", "none"]).default("openai"),
+  documentCurationModel: z.string().min(1).default("gpt-4o-mini"),
+  documentCurationApiKey: z.string().optional(),
+  documentCurationBaseUrl: z.string().url().optional(),
   gitAuthorName: z.string().optional(),
   gitAuthorEmail: z.string().optional(),
   gitCommitterName: z.string().optional(),
@@ -1294,6 +1314,7 @@ export function getSettings(): Settings {
     databaseUrl: optional("OPENGENI_DATABASE_URL"),
     dbSchema: optional("OPENGENI_DB_SCHEMA"),
     rlsStrategy: optional("OPENGENI_RLS_STRATEGY"),
+    runtimeDatabaseRole: optional("OPENGENI_RUNTIME_DATABASE_ROLE"),
     natsUrl: optional("OPENGENI_NATS_URL"),
     temporalHost: optional("OPENGENI_TEMPORAL_HOST"),
     temporalNamespace: optional("OPENGENI_TEMPORAL_NAMESPACE"),
@@ -1319,6 +1340,7 @@ export function getSettings(): Settings {
       optional("OPENGENI_OTEL_EXPORTER_OTLP_HEADERS") ?? optional("OTEL_EXPORTER_OTLP_HEADERS"),
     publicBaseUrl: optional("OPENGENI_PUBLIC_BASE_URL"),
     agentReleasesBaseUrl: optional("OPENGENI_AGENT_RELEASES_BASE_URL"),
+    agentStableVersion: optional("OPENGENI_AGENT_STABLE_VERSION"),
     productAccessMode: optional("OPENGENI_PRODUCT_ACCESS_MODE"),
     billingMode: optional("OPENGENI_BILLING_MODE"),
     entitlementsMode: optional("OPENGENI_ENTITLEMENTS_MODE"),
@@ -1366,6 +1388,7 @@ export function getSettings(): Settings {
     modelPricingJson: optional("OPENGENI_MODEL_PRICING_JSON"),
     modelProvidersJson: optional("OPENGENI_MODEL_PROVIDERS_JSON"),
     codexSubscriptionEnabled: optional("OPENGENI_CODEX_SUBSCRIPTION_ENABLED"),
+    codexConnectedAppsEnabled: optional("OPENGENI_CODEX_CONNECTED_APPS_ENABLED"),
     codexToolSearchEnabled: optional("OPENGENI_CODEX_TOOL_SEARCH_ENABLED"),
     codexCredentialLeasingEnabled: optional("OPENGENI_CODEX_CREDENTIAL_LEASING_ENABLED"),
     codexFleetPolicyShadowEnabled: optional("OPENGENI_CODEX_FLEET_POLICY_SHADOW_ENABLED"),
@@ -1506,6 +1529,10 @@ export function getSettings(): Settings {
     documentEmbeddingDimensions: optional("OPENGENI_DOCUMENT_EMBEDDING_DIMENSIONS"),
     documentEmbeddingApiKey: optional("OPENGENI_DOCUMENT_EMBEDDING_API_KEY"),
     documentEmbeddingBaseUrl: optional("OPENGENI_DOCUMENT_EMBEDDING_BASE_URL"),
+    documentCurationProvider: optional("OPENGENI_DOCUMENT_CURATION_PROVIDER"),
+    documentCurationModel: optional("OPENGENI_DOCUMENT_CURATION_MODEL"),
+    documentCurationApiKey: optional("OPENGENI_DOCUMENT_CURATION_API_KEY"),
+    documentCurationBaseUrl: optional("OPENGENI_DOCUMENT_CURATION_BASE_URL"),
     gitAuthorName: optional("OPENGENI_GIT_AUTHOR_NAME"),
     gitAuthorEmail: optional("OPENGENI_GIT_AUTHOR_EMAIL"),
     gitCommitterName: optional("OPENGENI_GIT_COMMITTER_NAME"),
@@ -2022,6 +2049,11 @@ export function withCodexCatalogProvider(settings: Settings): Settings {
       upstreamModelId: slug,
       label: slug,
       reasoningEffort: true,
+      // The ChatGPT/Codex Responses backend accepts the native web_search
+      // hosted tool (unlike hosted apply_patch/computer transports). Declaring
+      // this here makes provider resolution truthful; the worker still applies
+      // the durable session/turn policy gate before attaching it.
+      hostedWebSearch: true,
       contextWindowTokens: CODEX_MODEL_CONTEXT_WINDOW_TOKENS,
       effectiveContextWindowTokens: CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS,
       autoCompactTokenLimit: CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT,