@opengeni/config 0.7.1 → 0.7.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/config",
-  "version": "0.7.1",
+  "version": "0.7.7",
   "description": "OpenGeni runtime configuration: settings resolution, deployment knobs, and config validation shared across the server packages.",
   "license": "Apache-2.0",
   "repository": {
@@ -34,7 +34,7 @@
   },
   "dependencies": {
     "@opengeni/codex": "^0.2.7",
-    "@opengeni/contracts": "^0.19.0",
+    "@opengeni/contracts": "^0.20.0",
     "zod": "^4.2.1"
   },
   "engines": {

package/src/index.ts

@@ -191,6 +191,10 @@ const SettingsSchema = z.object({
   // non-owner `opengeni_app` role. "scoped" = the embedded owner-role path (the
   // GUC is still emitted defensively, so the query path is identical).
   rlsStrategy: z.enum(["force", "scoped"]).default("force"),
+  // Exact PostgreSQL login identity required by the standalone FORCE-RLS
+  // startup/readiness assertion. Embedded `scoped` hosts own their role model
+  // and are deliberately not constrained to this name.
+  runtimeDatabaseRole: z.string().min(1).default("opengeni_app"),
   natsUrl: z.string().default("nats://127.0.0.1:4222"),
   temporalHost: z.string().default("127.0.0.1:7233"),
   temporalNamespace: z.string().default("default"),
@@ -204,6 +208,10 @@ const SettingsSchema = z.object({
   startupDependencyRetryAttempts: z.coerce.number().int().positive().default(30),
   startupDependencyRetryInitialDelayMs: z.coerce.number().int().positive().default(1000),
   startupDependencyRetryMaxDelayMs: z.coerce.number().int().positive().default(5000),
+  turnWorkerConcurrencyMode: z.enum(["fixed", "resource-based"]).default("fixed"),
+  turnWorkerMaxConcurrentTurns: z.coerce.number().int().positive().max(2_000).default(16),
+  turnWorkerTargetCpuUsage: z.coerce.number().positive().max(1).default(0.8),
+  turnWorkerTargetMemoryUsage: z.coerce.number().positive().max(0.8).default(0.75),
   observabilityStructuredLogs: EnvBoolean.default(false),
   observabilityMetricsEnabled: EnvBoolean.default(true),
   observabilityOtlpEndpoint: z.string().url().optional(),
@@ -332,12 +340,17 @@ const SettingsSchema = z.object({
   // subscription is injected as a synthetic "codex-subscription" registry
   // provider whose models route through the ChatGPT backend (@opengeni/codex).
   codexSubscriptionEnabled: EnvBoolean.default(false), // OPENGENI_CODEX_SUBSCRIPTION_ENABLED
+  // Expose the connected apps attached to a Codex subscription through the
+  // synthetic codex_apps MCP server. Independent from subscription routing so
+  // operators can use Codex models without exposing ChatGPT connectors.
+  codexConnectedAppsEnabled: EnvBoolean.default(false), // OPENGENI_CODEX_CONNECTED_APPS_ENABLED
   codexProductSku: z.string().optional(), // OPENGENI_CODEX_PRODUCT_SKU (X-OpenAI-Product-Sku, apps only)
-  // Progressive connector disclosure (Codex-CLI-style tool_search): on a codex
-  // turn, flag the ~217 codex_apps connector tools `defer_loading:true` (dropping
-  // their schemas from model context) and add one client-executed tool_search
-  // tool that BM25-discloses only the matching connectors. Default OFF — a codex
-  // turn is byte-for-byte unchanged until enabled. OPENGENI_CODEX_TOOL_SEARCH_ENABLED
+  // Progressive MCP disclosure (Codex-CLI-style tool_search): on a codex turn,
+  // flag non-mandatory selected MCP tools `defer_loading:true` (dropping their
+  // schemas from model context) and add one client-executed tool_search tool
+  // that BM25-discloses bounded matches. The mandatory OpenGeni tools stay
+  // eager. Default OFF — a codex turn is byte-for-byte unchanged until enabled.
+  // OPENGENI_CODEX_TOOL_SEARCH_ENABLED
   codexToolSearchEnabled: EnvBoolean.default(false),
   // credential allocator atomic, workspace-local credential allocation. Default OFF is a
   // deliberate rolling-deploy fence: migrate + roll every worker first, then
@@ -750,6 +763,10 @@ const SettingsSchema = z.object({
   documentEmbeddingDimensions: z.coerce.number().int().positive().default(3072),
   documentEmbeddingApiKey: z.string().optional(),
   documentEmbeddingBaseUrl: z.string().url().optional(),
+  documentCurationProvider: z.enum(["openai", "heuristic", "none"]).default("openai"),
+  documentCurationModel: z.string().min(1).default("gpt-4o-mini"),
+  documentCurationApiKey: z.string().optional(),
+  documentCurationBaseUrl: z.string().url().optional(),
   gitAuthorName: z.string().optional(),
   gitAuthorEmail: z.string().optional(),
   gitCommitterName: z.string().optional(),
@@ -1301,6 +1318,7 @@ export function getSettings(): Settings {
     databaseUrl: optional("OPENGENI_DATABASE_URL"),
     dbSchema: optional("OPENGENI_DB_SCHEMA"),
     rlsStrategy: optional("OPENGENI_RLS_STRATEGY"),
+    runtimeDatabaseRole: optional("OPENGENI_RUNTIME_DATABASE_ROLE"),
     natsUrl: optional("OPENGENI_NATS_URL"),
     temporalHost: optional("OPENGENI_TEMPORAL_HOST"),
     temporalNamespace: optional("OPENGENI_TEMPORAL_NAMESPACE"),
@@ -1318,6 +1336,10 @@ export function getSettings(): Settings {
       "OPENGENI_STARTUP_DEPENDENCY_RETRY_INITIAL_DELAY_MS",
     ),
     startupDependencyRetryMaxDelayMs: optional("OPENGENI_STARTUP_DEPENDENCY_RETRY_MAX_DELAY_MS"),
+    turnWorkerConcurrencyMode: optional("OPENGENI_TURN_WORKER_CONCURRENCY_MODE"),
+    turnWorkerMaxConcurrentTurns: optional("OPENGENI_TURN_WORKER_MAX_CONCURRENT_TURNS"),
+    turnWorkerTargetCpuUsage: optional("OPENGENI_TURN_WORKER_TARGET_CPU_USAGE"),
+    turnWorkerTargetMemoryUsage: optional("OPENGENI_TURN_WORKER_TARGET_MEMORY_USAGE"),
     observabilityStructuredLogs: optional("OPENGENI_OBSERVABILITY_STRUCTURED_LOGS"),
     observabilityMetricsEnabled: optional("OPENGENI_OBSERVABILITY_METRICS_ENABLED"),
     observabilityOtlpEndpoint:
@@ -1374,6 +1396,7 @@ export function getSettings(): Settings {
     modelPricingJson: optional("OPENGENI_MODEL_PRICING_JSON"),
     modelProvidersJson: optional("OPENGENI_MODEL_PROVIDERS_JSON"),
     codexSubscriptionEnabled: optional("OPENGENI_CODEX_SUBSCRIPTION_ENABLED"),
+    codexConnectedAppsEnabled: optional("OPENGENI_CODEX_CONNECTED_APPS_ENABLED"),
     codexToolSearchEnabled: optional("OPENGENI_CODEX_TOOL_SEARCH_ENABLED"),
     codexCredentialLeasingEnabled: optional("OPENGENI_CODEX_CREDENTIAL_LEASING_ENABLED"),
     codexFleetPolicyShadowEnabled: optional("OPENGENI_CODEX_FLEET_POLICY_SHADOW_ENABLED"),
@@ -1514,6 +1537,10 @@ export function getSettings(): Settings {
     documentEmbeddingDimensions: optional("OPENGENI_DOCUMENT_EMBEDDING_DIMENSIONS"),
     documentEmbeddingApiKey: optional("OPENGENI_DOCUMENT_EMBEDDING_API_KEY"),
     documentEmbeddingBaseUrl: optional("OPENGENI_DOCUMENT_EMBEDDING_BASE_URL"),
+    documentCurationProvider: optional("OPENGENI_DOCUMENT_CURATION_PROVIDER"),
+    documentCurationModel: optional("OPENGENI_DOCUMENT_CURATION_MODEL"),
+    documentCurationApiKey: optional("OPENGENI_DOCUMENT_CURATION_API_KEY"),
+    documentCurationBaseUrl: optional("OPENGENI_DOCUMENT_CURATION_BASE_URL"),
     gitAuthorName: optional("OPENGENI_GIT_AUTHOR_NAME"),
     gitAuthorEmail: optional("OPENGENI_GIT_AUTHOR_EMAIL"),
     gitCommitterName: optional("OPENGENI_GIT_COMMITTER_NAME"),
@@ -2030,6 +2057,11 @@ export function withCodexCatalogProvider(settings: Settings): Settings {
       upstreamModelId: slug,
       label: slug,
       reasoningEffort: true,
+      // The ChatGPT/Codex Responses backend accepts the native web_search
+      // hosted tool (unlike hosted apply_patch/computer transports). Declaring
+      // this here makes provider resolution truthful; the worker still applies
+      // the durable session/turn policy gate before attaching it.
+      hostedWebSearch: true,
       contextWindowTokens: CODEX_MODEL_CONTEXT_WINDOW_TOKENS,
       effectiveContextWindowTokens: CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS,
       autoCompactTokenLimit: CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT,