@opengeni/config 0.7.13 → 0.8.1

package/dist/index.d.ts

@@ -1,7 +1,6 @@
-import { Entitlements, TurnExecutionModelSourceV1, TurnExecutionReasoningSourceV1, SandboxBackend, StaticUsageLimits, TurnExecutionPolicyV1, ReasoningEffort } from '@opengeni/contracts';
-import { z } from 'zod';
-
-declare const sandboxPreparationProfiles: Record<string, {
+import { Entitlements, LatencyMode, ReasoningEffort, SandboxBackend, StaticUsageLimits, TurnExecutionPolicyV1, type TurnExecutionLatencyModeSourceV1, type TurnExecutionModelSourceV1, type TurnExecutionReasoningSourceV1 } from "@opengeni/contracts";
+import { z } from "zod";
+export declare const sandboxPreparationProfiles: Record<string, {
     env: string[];
     hooks: string[];
 }>;
@@ -13,7 +12,7 @@ declare const sandboxPreparationProfiles: Record<string, {
  * so a white-labelled persona can never drop the goal-loop contract or the
  * environment metadata the agent depends on.
  */
-declare const AGENT_INSTRUCTIONS_CORE_PLACEHOLDER = "{{core}}";
+export declare const AGENT_INSTRUCTIONS_CORE_PLACEHOLDER = "{{core}}";
 /**
  * Default per-workspace agent persona template. This is the BRAND + tool-usage
  * opinion (the white-labellable surface): the "You are an OpenGeni workspace
@@ -30,16 +29,16 @@ declare const AGENT_INSTRUCTIONS_CORE_PLACEHOLDER = "{{core}}";
  * Changing a single character here changes that default; update the pin
  * intentionally.
  */
-declare const DEFAULT_AGENT_INSTRUCTIONS: string;
-declare const McpServerConnectionRefSchema: z.ZodObject<{
+export declare const DEFAULT_AGENT_INSTRUCTIONS: string;
+export declare const McpServerConnectionRefSchema: z.ZodObject<{
     connectionId: z.ZodOptional<z.ZodString>;
     provider: z.ZodOptional<z.ZodString>;
     providerDomain: z.ZodString;
     kind: z.ZodOptional<z.ZodEnum<{
-        oauth2: "oauth2";
         api_key: "api_key";
         app_install: "app_install";
         delegated: "delegated";
+        oauth2: "oauth2";
     }>>;
     scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     resource: z.ZodOptional<z.ZodString>;
@@ -48,11 +47,11 @@ declare const McpServerConnectionRefSchema: z.ZodObject<{
         kind: z.ZodLiteral<"repository">;
     }, z.core.$strict>>>;
     subjectScope: z.ZodOptional<z.ZodEnum<{
-        workspace: "workspace";
         subject: "subject";
+        workspace: "workspace";
     }>>;
 }, z.core.$strict>;
-type McpServerConnectionRef = z.infer<typeof McpServerConnectionRefSchema>;
+export type McpServerConnectionRef = z.infer<typeof McpServerConnectionRefSchema>;
 declare const SettingsSchema: z.ZodObject<{
     serviceName: z.ZodDefault<z.ZodString>;
     environment: z.ZodDefault<z.ZodString>;
@@ -90,11 +89,12 @@ declare const SettingsSchema: z.ZodObject<{
     observabilityOtlpEndpoint: z.ZodOptional<z.ZodString>;
     observabilityOtlpHeaders: z.ZodDefault<z.ZodString>;
     publicBaseUrl: z.ZodOptional<z.ZodString>;
+    webBaseUrl: z.ZodOptional<z.ZodString>;
     agentReleasesBaseUrl: z.ZodDefault<z.ZodString>;
     agentStableVersion: z.ZodDefault<z.ZodString>;
     productAccessMode: z.ZodDefault<z.ZodEnum<{
-        local: "local";
         configured: "configured";
+        local: "local";
         managed: "managed";
     }>>;
     billingMode: z.ZodDefault<z.ZodEnum<{
@@ -102,13 +102,13 @@ declare const SettingsSchema: z.ZodObject<{
         stripe: "stripe";
     }>>;
     entitlementsMode: z.ZodDefault<z.ZodEnum<{
-        none: "none";
         managed: "managed";
+        none: "none";
         static: "static";
     }>>;
     usageLimitsMode: z.ZodDefault<z.ZodEnum<{
-        none: "none";
         managed: "managed";
+        none: "none";
         static: "static";
     }>>;
     staticEntitlementsJson: z.ZodDefault<z.ZodString>;
@@ -126,6 +126,9 @@ declare const SettingsSchema: z.ZodObject<{
     integrationsOauthClientsJson: z.ZodDefault<z.ZodString>;
     slackClientId: z.ZodOptional<z.ZodString>;
     slackClientSecret: z.ZodOptional<z.ZodString>;
+    slackSigningSecret: z.ZodOptional<z.ZodString>;
+    googleDriveClientId: z.ZodOptional<z.ZodString>;
+    googleDriveClientSecret: z.ZodOptional<z.ZodString>;
     maxNestedAgentDepth: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     goalMaxAutoContinuations: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     goalNoProgressLimit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -153,6 +156,20 @@ declare const SettingsSchema: z.ZodObject<{
     openaiBaseUrl: z.ZodOptional<z.ZodString>;
     openaiModel: z.ZodDefault<z.ZodString>;
     openaiAllowedModels: z.ZodDefault<z.ZodString>;
+    voiceInputMaxDurationSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    voiceInputMaxSizeBytes: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    voiceInputProviderOrder: z.ZodDefault<z.ZodString>;
+    voiceInputOpenaiEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    voiceInputOpenaiApiKey: z.ZodOptional<z.ZodString>;
+    voiceInputOpenaiBaseUrl: z.ZodOptional<z.ZodString>;
+    voiceInputOpenaiModel: z.ZodDefault<z.ZodString>;
+    voiceInputAzureEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    voiceInputAzureEndpoint: z.ZodOptional<z.ZodString>;
+    voiceInputAzureDeployment: z.ZodOptional<z.ZodString>;
+    voiceInputAzureApiVersion: z.ZodOptional<z.ZodString>;
+    voiceInputAzureApiKey: z.ZodOptional<z.ZodString>;
+    voiceInputAzureAdToken: z.ZodOptional<z.ZodString>;
+    voiceInputCodexExperimentalEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     modelPricingJson: z.ZodDefault<z.ZodString>;
     modelProvidersJson: z.ZodDefault<z.ZodString>;
     codexSubscriptionEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
@@ -163,11 +180,11 @@ declare const SettingsSchema: z.ZodObject<{
     codexFleetPolicyShadowEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     codexRotationNearExhaustionPct: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     openaiReasoningEffort: z.ZodDefault<z.ZodEnum<{
-        none: "none";
-        minimal: "minimal";
+        high: "high";
         low: "low";
         medium: "medium";
-        high: "high";
+        minimal: "minimal";
+        none: "none";
         xhigh: "xhigh";
     }>>;
     openaiAllowedReasoningEfforts: z.ZodDefault<z.ZodString>;
@@ -176,8 +193,8 @@ declare const SettingsSchema: z.ZodObject<{
         websocket: "websocket";
     }>>;
     openaiProviderItemIds: z.ZodDefault<z.ZodEnum<{
-        strip: "strip";
         preserve: "preserve";
+        strip: "strip";
     }>>;
     openaiReasoningEncryptedContent: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     openaiMaxRetries: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -191,17 +208,17 @@ declare const SettingsSchema: z.ZodObject<{
     azureOpenaiAdToken: z.ZodOptional<z.ZodString>;
     disableOpenaiTracing: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     sandboxBackend: z.ZodDefault<z.ZodEnum<{
-        none: "none";
-        local: "local";
+        blaxel: "blaxel";
+        cloudflare: "cloudflare";
+        daytona: "daytona";
         docker: "docker";
+        e2b: "e2b";
+        local: "local";
         modal: "modal";
-        daytona: "daytona";
+        none: "none";
         runloop: "runloop";
-        e2b: "e2b";
-        blaxel: "blaxel";
-        cloudflare: "cloudflare";
-        vercel: "vercel";
         selfhosted: "selfhosted";
+        vercel: "vercel";
     }>>;
     dockerImage: z.ZodDefault<z.ZodString>;
     dockerExposedPorts: z.ZodDefault<z.ZodString>;
@@ -216,11 +233,10 @@ declare const SettingsSchema: z.ZodObject<{
     modalEnvironment: z.ZodOptional<z.ZodString>;
     modalIdleTimeoutSeconds: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     modalWorkspacePersistence: z.ZodDefault<z.ZodEnum<{
-        tar: "tar";
-        snapshot_filesystem: "snapshot_filesystem";
         snapshot_directory: "snapshot_directory";
+        snapshot_filesystem: "snapshot_filesystem";
+        tar: "tar";
     }>>;
-    modalSnapshotRetentionSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     sandboxDesktopEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     sandboxDesktopInteractive: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     sandboxTerminalEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
@@ -255,14 +271,14 @@ declare const SettingsSchema: z.ZodObject<{
     e2bTemplate: z.ZodOptional<z.ZodString>;
     e2bTimeoutSeconds: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     e2bTimeoutAction: z.ZodOptional<z.ZodEnum<{
-        pause: "pause";
         kill: "kill";
+        pause: "pause";
     }>>;
     e2bAllowInternetAccess: z.ZodOptional<z.ZodPreprocess<z.ZodBoolean>>;
     e2bAutoResume: z.ZodOptional<z.ZodPreprocess<z.ZodBoolean>>;
     e2bWorkspacePersistence: z.ZodOptional<z.ZodEnum<{
-        tar: "tar";
         snapshot: "snapshot";
+        tar: "tar";
     }>>;
     blaxelApiKey: z.ZodOptional<z.ZodString>;
     blaxelImage: z.ZodOptional<z.ZodString>;
@@ -300,6 +316,8 @@ declare const SettingsSchema: z.ZodObject<{
     sandboxIdleGraceMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     sandboxSnapshotIntervalMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     sandboxSnapshotTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    sandboxRotationLeadMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    sandboxRotationBatchSize: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     sandboxLeaseTtlMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     sandboxLeaseWarmingTtlMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     sandboxWarmingTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -309,12 +327,13 @@ declare const SettingsSchema: z.ZodObject<{
     sandboxPreparationProfiles: z.ZodDefault<z.ZodString>;
     sandboxEnvAllowlist: z.ZodDefault<z.ZodString>;
     objectStorageEndpoint: z.ZodOptional<z.ZodString>;
+    objectStorageInternalEndpoint: z.ZodOptional<z.ZodString>;
     objectStorageSandboxEndpoint: z.ZodOptional<z.ZodString>;
     objectStorageBackend: z.ZodDefault<z.ZodEnum<{
-        "s3-compatible": "s3-compatible";
         "aws-s3": "aws-s3";
         "azure-blob": "azure-blob";
         gcs: "gcs";
+        "s3-compatible": "s3-compatible";
     }>>;
     objectStorageBucket: z.ZodDefault<z.ZodString>;
     objectStorageRegion: z.ZodDefault<z.ZodString>;
@@ -334,17 +353,17 @@ declare const SettingsSchema: z.ZodObject<{
     documentChunkSize: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     documentChunkOverlap: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     documentEmbeddingProvider: z.ZodDefault<z.ZodEnum<{
-        openai: "openai";
         deterministic: "deterministic";
+        openai: "openai";
     }>>;
     documentEmbeddingModel: z.ZodDefault<z.ZodString>;
     documentEmbeddingDimensions: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     documentEmbeddingApiKey: z.ZodOptional<z.ZodString>;
     documentEmbeddingBaseUrl: z.ZodOptional<z.ZodString>;
     documentCurationProvider: z.ZodDefault<z.ZodEnum<{
+        heuristic: "heuristic";
         none: "none";
         openai: "openai";
-        heuristic: "heuristic";
     }>>;
     documentCurationModel: z.ZodDefault<z.ZodString>;
     documentCurationApiKey: z.ZodOptional<z.ZodString>;
@@ -385,10 +404,10 @@ declare const SettingsSchema: z.ZodObject<{
             provider: z.ZodOptional<z.ZodString>;
             providerDomain: z.ZodString;
             kind: z.ZodOptional<z.ZodEnum<{
-                oauth2: "oauth2";
                 api_key: "api_key";
                 app_install: "app_install";
                 delegated: "delegated";
+                oauth2: "oauth2";
             }>>;
             scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
             resource: z.ZodOptional<z.ZodString>;
@@ -397,15 +416,49 @@ declare const SettingsSchema: z.ZodObject<{
                 kind: z.ZodLiteral<"repository">;
             }, z.core.$strict>>>;
             subjectScope: z.ZodOptional<z.ZodEnum<{
-                workspace: "workspace";
                 subject: "subject";
+                workspace: "workspace";
             }>>;
         }, z.core.$strict>>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
-type Settings = z.infer<typeof SettingsSchema>;
-type McpServerConfig = Settings["mcpServers"][number];
-type TemporalTlsConnectionConfig = {
+export type Settings = z.infer<typeof SettingsSchema>;
+export type McpServerConfig = Settings["mcpServers"][number];
+/** Declarative voice-input transcription provider ids. */
+export type VoiceInputProviderId = "openai" | "azure-openai" | "codex-subscription";
+export type VoiceInputProviderConfig = {
+    id: "openai";
+    kind: "openai";
+    apiKey: string;
+    baseUrl: string;
+    model: string;
+} | {
+    id: "azure-openai";
+    kind: "azure-openai";
+    endpoint: string;
+    deployment: string;
+    apiVersion: string;
+    apiKey: string | null;
+    adToken: string | null;
+} | {
+    id: "codex-subscription";
+    kind: "codex-subscription";
+    experimental: true;
+};
+/**
+ * Reject empty / template secrets so `.env.example` placeholders like
+ * `your-key` cannot advertise voice input as available and then 401 upstream.
+ */
+export declare function isUsableVoiceInputSecret(value: string | null | undefined): value is string;
+/**
+ * Resolve the configured voice-input provider registry in selection order.
+ * Credentials stay in this server-side structure; ClientConfig only projects
+ * whether at least one non-experimental (or probed experimental) provider exists.
+ */
+export declare function resolveVoiceInputProviderRegistry(settings: Settings): VoiceInputProviderConfig[];
+/** True when the deployment has at least one supported (non-experimental) provider. */
+export declare function voiceInputDeploymentConfigured(settings: Settings): boolean;
+export type TemporalTlsConnectionConfig = {
     serverNameOverride?: string;
     serverRootCACertificate?: Uint8Array;
     clientCertPair?: {
@@ -413,86 +466,86 @@ type TemporalTlsConnectionConfig = {
         key: Uint8Array;
     };
 };
-type TemporalConnectionOptions = {
+export type TemporalConnectionOptions = {
     address: string;
     tls?: true | TemporalTlsConnectionConfig;
     apiKey?: string;
 };
-type ModelPricing = {
+export type ModelPricing = {
     inputMicrosPerMillionTokens: number;
     cachedInputMicrosPerMillionTokens?: number | undefined;
     outputMicrosPerMillionTokens: number;
     marginBps?: number | undefined;
 };
-type ModelPricingScheduleV1 = {
+export type ModelPricingScheduleV1 = {
     default: ModelPricing;
     inputTokenTiers?: Array<{
         minimumInputTokens: number;
         pricing: ModelPricing;
     }> | undefined;
 };
-type ModelUsageInput = {
+export type ModelUsageInput = {
     inputTokens?: number | undefined;
     outputTokens?: number | undefined;
     totalTokens?: number | undefined;
     inputTokensDetails?: Record<string, number> | Array<Record<string, number>> | undefined;
     requestUsageEntries?: ModelUsageInput[] | undefined;
 };
-type StaticUsageLimitsConfig = StaticUsageLimits;
-type EntitlementsConfig = Entitlements;
-declare const CapabilitySupportV1: z.ZodEnum<{
-    unknown: "unknown";
+export type StaticUsageLimitsConfig = StaticUsageLimits;
+export type EntitlementsConfig = Entitlements;
+export declare const CapabilitySupportV1: z.ZodEnum<{
     supported: "supported";
+    unknown: "unknown";
     unsupported: "unsupported";
 }>;
-type CapabilitySupportV1 = z.infer<typeof CapabilitySupportV1>;
-declare const CapabilityStateV1Schema: z.ZodObject<{
+export type CapabilitySupportV1 = z.infer<typeof CapabilitySupportV1>;
+export declare const CapabilityStateV1Schema: z.ZodObject<{
     upstream: z.ZodEnum<{
-        unknown: "unknown";
         supported: "supported";
+        unknown: "unknown";
         unsupported: "unsupported";
     }>;
     runnable: z.ZodBoolean;
 }, z.core.$strip>;
-type CapabilityStateV1 = z.infer<typeof CapabilityStateV1Schema>;
-declare const ModelCapabilitiesV1Schema: z.ZodObject<{
+export type CapabilityStateV1 = z.infer<typeof CapabilityStateV1Schema>;
+export declare const ModelCapabilitiesV1Schema: z.ZodObject<{
     reasoning: z.ZodObject<{
         upstream: z.ZodEnum<{
-            unknown: "unknown";
             supported: "supported";
+            unknown: "unknown";
             unsupported: "unsupported";
         }>;
         runnable: z.ZodBoolean;
         efforts: z.ZodArray<z.ZodEnum<{
-            none: "none";
-            minimal: "minimal";
+            high: "high";
             low: "low";
             medium: "medium";
-            high: "high";
+            minimal: "minimal";
+            none: "none";
             xhigh: "xhigh";
         }>>;
         defaultEffort: z.ZodNullable<z.ZodEnum<{
-            none: "none";
-            minimal: "minimal";
+            high: "high";
             low: "low";
             medium: "medium";
-            high: "high";
+            minimal: "minimal";
+            none: "none";
             xhigh: "xhigh";
         }>>;
         required: z.ZodBoolean;
     }, z.core.$strip>;
     functionCalling: z.ZodObject<{
         upstream: z.ZodEnum<{
-            unknown: "unknown";
             supported: "supported";
+            unknown: "unknown";
             unsupported: "unsupported";
         }>;
         runnable: z.ZodBoolean;
     }, z.core.$strip>;
     structuredOutput: z.ZodObject<{
         upstream: z.ZodEnum<{
-            unknown: "unknown";
             supported: "supported";
+            unknown: "unknown";
             unsupported: "unsupported";
         }>;
         runnable: z.ZodBoolean;
@@ -500,60 +553,60 @@ declare const ModelCapabilitiesV1Schema: z.ZodObject<{
     hostedTools: z.ZodObject<{
         webSearch: z.ZodObject<{
             upstream: z.ZodEnum<{
-                unknown: "unknown";
                 supported: "supported";
+                unknown: "unknown";
                 unsupported: "unsupported";
             }>;
             runnable: z.ZodBoolean;
         }, z.core.$strip>;
         xSearch: z.ZodObject<{
             upstream: z.ZodEnum<{
-                unknown: "unknown";
                 supported: "supported";
+                unknown: "unknown";
                 unsupported: "unsupported";
             }>;
             runnable: z.ZodBoolean;
         }, z.core.$strip>;
         codeExecution: z.ZodObject<{
             upstream: z.ZodEnum<{
-                unknown: "unknown";
                 supported: "supported";
+                unknown: "unknown";
                 unsupported: "unsupported";
             }>;
             runnable: z.ZodBoolean;
         }, z.core.$strip>;
     }, z.core.$strip>;
     inputModalities: z.ZodArray<z.ZodEnum<{
-        text: "text";
-        image: "image";
         audio: "audio";
+        image: "image";
+        text: "text";
     }>>;
     outputModalities: z.ZodArray<z.ZodEnum<{
-        text: "text";
-        image: "image";
         audio: "audio";
+        image: "image";
+        text: "text";
     }>>;
     transports: z.ZodObject<{
         sse: z.ZodObject<{
             upstream: z.ZodEnum<{
-                unknown: "unknown";
                 supported: "supported";
+                unknown: "unknown";
                 unsupported: "unsupported";
             }>;
             runnable: z.ZodBoolean;
         }, z.core.$strip>;
         responsesWebSocket: z.ZodObject<{
             upstream: z.ZodEnum<{
-                unknown: "unknown";
                 supported: "supported";
+                unknown: "unknown";
                 unsupported: "unsupported";
             }>;
             runnable: z.ZodBoolean;
         }, z.core.$strip>;
         realtimeAudio: z.ZodObject<{
             upstream: z.ZodEnum<{
-                unknown: "unknown";
                 supported: "supported";
+                unknown: "unknown";
                 unsupported: "unsupported";
             }>;
             runnable: z.ZodBoolean;
@@ -561,31 +614,31 @@ declare const ModelCapabilitiesV1Schema: z.ZodObject<{
     }, z.core.$strip>;
     latencyModes: z.ZodArray<z.ZodObject<{
         id: z.ZodEnum<{
-            standard: "standard";
-            priority: "priority";
             fast: "fast";
+            priority: "priority";
+            standard: "standard";
         }>;
         upstream: z.ZodEnum<{
-            unknown: "unknown";
             supported: "supported";
+            unknown: "unknown";
             unsupported: "unsupported";
         }>;
         runnable: z.ZodBoolean;
         billingMultiplierBps: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
-type ModelCapabilitiesV1 = z.infer<typeof ModelCapabilitiesV1Schema>;
-type ModelDeploymentV1 = {
+export type ModelCapabilitiesV1 = z.infer<typeof ModelCapabilitiesV1Schema>;
+export type ModelDeploymentV1 = {
     upstreamModelId: string;
     wireApi: ModelProviderApi;
 };
-type ModelExecutionLimitsV1 = {
+export type ModelExecutionLimitsV1 = {
     contextWindowTokens: number | null;
     effectiveContextWindowTokens: number | null;
     autoCompactTokenLimit: number | null;
     toolOutputTruncationTokens: number | null;
 };
-type CredentialSourceV1 = {
+export type CredentialSourceV1 = {
     kind: "deployment";
     mechanism: "api_key" | "azure_ad_bearer";
 } | {
@@ -595,7 +648,7 @@ type CredentialSourceV1 = {
     kind: "workspace_connection";
     mechanism: "api_key";
 };
-type BillingAttributionV1 = {
+export type BillingAttributionV1 = {
     upstreamPayer: "deployment" | "workspace" | "connected_subscription";
     metering: "opengeni_credits" | "external";
 };
@@ -606,21 +659,21 @@ type BillingAttributionV1 = {
  * wired as "chat" because its beta Responses endpoint echoes input back and
  * silently no-ops hosted tools (see docs/model-providers.md).
  */
-declare const ModelProviderApi: z.ZodEnum<{
-    responses: "responses";
+export declare const ModelProviderApi: z.ZodEnum<{
     chat: "chat";
+    responses: "responses";
 }>;
-type ModelProviderApi = z.infer<typeof ModelProviderApi>;
+export type ModelProviderApi = z.infer<typeof ModelProviderApi>;
 /**
  * Registry provider kind. "api-key" providers carry their own static key/headers;
  * "codex-subscription" providers authenticate per-request with a ChatGPT/Codex
  * subscription token resolved at call time (no static key) — see @opengeni/codex.
  */
-declare const RegistryProviderKind: z.ZodEnum<{
+export declare const RegistryProviderKind: z.ZodEnum<{
     "api-key": "api-key";
     "codex-subscription": "codex-subscription";
 }>;
-type RegistryProviderKind = z.infer<typeof RegistryProviderKind>;
+export type RegistryProviderKind = z.infer<typeof RegistryProviderKind>;
 /** A non-built-in provider declared by the host via OPENGENI_MODEL_PROVIDERS_JSON. */
 declare const RegistryProviderSchema: z.ZodObject<{
     kind: z.ZodDefault<z.ZodEnum<{
@@ -630,8 +683,8 @@ declare const RegistryProviderSchema: z.ZodObject<{
     id: z.ZodString;
     label: z.ZodOptional<z.ZodString>;
     api: z.ZodDefault<z.ZodEnum<{
-        responses: "responses";
         chat: "chat";
+        responses: "responses";
     }>>;
     baseUrl: z.ZodString;
     apiKey: z.ZodOptional<z.ZodString>;
@@ -656,41 +709,41 @@ declare const RegistryProviderSchema: z.ZodObject<{
         capabilities: z.ZodOptional<z.ZodObject<{
             reasoning: z.ZodObject<{
                 upstream: z.ZodEnum<{
-                    unknown: "unknown";
                     supported: "supported";
+                    unknown: "unknown";
                     unsupported: "unsupported";
                 }>;
                 runnable: z.ZodBoolean;
                 efforts: z.ZodArray<z.ZodEnum<{
-                    none: "none";
-                    minimal: "minimal";
+                    high: "high";
                     low: "low";
                     medium: "medium";
-                    high: "high";
+                    minimal: "minimal";
+                    none: "none";
                     xhigh: "xhigh";
                 }>>;
                 defaultEffort: z.ZodNullable<z.ZodEnum<{
-                    none: "none";
-                    minimal: "minimal";
+                    high: "high";
                     low: "low";
                     medium: "medium";
-                    high: "high";
+                    minimal: "minimal";
+                    none: "none";
                     xhigh: "xhigh";
                 }>>;
                 required: z.ZodBoolean;
             }, z.core.$strip>;
             functionCalling: z.ZodObject<{
                 upstream: z.ZodEnum<{
-                    unknown: "unknown";
                     supported: "supported";
+                    unknown: "unknown";
                     unsupported: "unsupported";
                 }>;
                 runnable: z.ZodBoolean;
             }, z.core.$strip>;
             structuredOutput: z.ZodObject<{
                 upstream: z.ZodEnum<{
-                    unknown: "unknown";
                     supported: "supported";
+                    unknown: "unknown";
                     unsupported: "unsupported";
                 }>;
                 runnable: z.ZodBoolean;
@@ -698,60 +751,60 @@ declare const RegistryProviderSchema: z.ZodObject<{
             hostedTools: z.ZodObject<{
                 webSearch: z.ZodObject<{
                     upstream: z.ZodEnum<{
-                        unknown: "unknown";
                         supported: "supported";
+                        unknown: "unknown";
                         unsupported: "unsupported";
                     }>;
                     runnable: z.ZodBoolean;
                 }, z.core.$strip>;
                 xSearch: z.ZodObject<{
                     upstream: z.ZodEnum<{
-                        unknown: "unknown";
                         supported: "supported";
+                        unknown: "unknown";
                         unsupported: "unsupported";
                     }>;
                     runnable: z.ZodBoolean;
                 }, z.core.$strip>;
                 codeExecution: z.ZodObject<{
                     upstream: z.ZodEnum<{
-                        unknown: "unknown";
                         supported: "supported";
+                        unknown: "unknown";
                         unsupported: "unsupported";
                     }>;
                     runnable: z.ZodBoolean;
                 }, z.core.$strip>;
             }, z.core.$strip>;
             inputModalities: z.ZodArray<z.ZodEnum<{
-                text: "text";
-                image: "image";
                 audio: "audio";
+                image: "image";
+                text: "text";
             }>>;
             outputModalities: z.ZodArray<z.ZodEnum<{
-                text: "text";
-                image: "image";
                 audio: "audio";
+                image: "image";
+                text: "text";
             }>>;
             transports: z.ZodObject<{
                 sse: z.ZodObject<{
                     upstream: z.ZodEnum<{
-                        unknown: "unknown";
                         supported: "supported";
+                        unknown: "unknown";
                         unsupported: "unsupported";
                     }>;
                     runnable: z.ZodBoolean;
                 }, z.core.$strip>;
                 responsesWebSocket: z.ZodObject<{
                     upstream: z.ZodEnum<{
-                        unknown: "unknown";
                         supported: "supported";
+                        unknown: "unknown";
                         unsupported: "unsupported";
                     }>;
                     runnable: z.ZodBoolean;
                 }, z.core.$strip>;
                 realtimeAudio: z.ZodObject<{
                     upstream: z.ZodEnum<{
-                        unknown: "unknown";
                         supported: "supported";
+                        unknown: "unknown";
                         unsupported: "unsupported";
                     }>;
                     runnable: z.ZodBoolean;
@@ -759,13 +812,13 @@ declare const RegistryProviderSchema: z.ZodObject<{
             }, z.core.$strip>;
             latencyModes: z.ZodArray<z.ZodObject<{
                 id: z.ZodEnum<{
-                    standard: "standard";
-                    priority: "priority";
                     fast: "fast";
+                    priority: "priority";
+                    standard: "standard";
                 }>;
                 upstream: z.ZodEnum<{
-                    unknown: "unknown";
                     supported: "supported";
+                    unknown: "unknown";
                     unsupported: "unsupported";
                 }>;
                 runnable: z.ZodBoolean;
@@ -798,17 +851,17 @@ declare const RegistryProviderSchema: z.ZodObject<{
         billing: z.ZodOptional<z.ZodNever>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
-type RegistryProvider = z.infer<typeof RegistryProviderSchema>;
-declare const IntegrationOAuthClientConfigSchema: z.ZodObject<{
+export type RegistryProvider = z.infer<typeof RegistryProviderSchema>;
+export declare const IntegrationOAuthClientConfigSchema: z.ZodObject<{
     clientId: z.ZodString;
     clientSecret: z.ZodOptional<z.ZodString>;
     tokenEndpointAuthMethod: z.ZodDefault<z.ZodEnum<{
-        none: "none";
-        client_secret_post: "client_secret_post";
         client_secret_basic: "client_secret_basic";
+        client_secret_post: "client_secret_post";
+        none: "none";
     }>>;
 }, z.core.$strip>;
-type IntegrationOAuthClientConfig = z.infer<typeof IntegrationOAuthClientConfigSchema>;
+export type IntegrationOAuthClientConfig = z.infer<typeof IntegrationOAuthClientConfigSchema>;
 /**
  * Runtime-resolved provider (built-in or registry), client-construction-ready.
  * The built-in OpenAI/Azure provider is always present and always "responses";
@@ -816,7 +869,7 @@ type IntegrationOAuthClientConfig = z.infer<typeof IntegrationOAuthClientConfigS
  * not a provider capability: all providers use the same durable plaintext
  * replacement.
  */
-interface ResolvedModelProvider {
+export interface ResolvedModelProvider {
     id: string;
     label: string;
     kind: RegistryProviderKind;
@@ -832,7 +885,7 @@ interface ResolvedModelProvider {
     billing: BillingAttributionV1;
 }
 /** A single exposed model + the provider that serves it. */
-interface ConfiguredModel {
+export interface ConfiguredModel {
     schemaVersion: 1;
     id: string;
     aliases: string[];
@@ -855,15 +908,37 @@ interface ConfiguredModel {
     reasoningEffort: boolean;
     hostedWebSearch: boolean;
 }
-declare const defaultModelPricing: Record<string, ModelPricing>;
-type SandboxRequiredEnv = {
+/**
+ * Built-in OpenGeni credit pricing schedules.
+ *
+ * Rates are provider list prices in USD micros per 1M tokens. Debit applies
+ * `marginBps` (2_500 = +25%) on top. Long-context tiers follow OpenAI's
+ * ">272K input tokens" rule (threshold exclusive of 272_000).
+ *
+ * GPT-5.4 and older families are intentionally omitted — they are no longer
+ * offered. Codex / connected-subscription turns use `metering: external` and
+ * never consult this map.
+ *
+ * When adding or changing a billed model, run `bun run check:model-pricing`
+ * (see docs/model-providers.md § Price audit). That compares this map to
+ * llm-prices.com as a ground-truth canary; it does not generate this table.
+ */
+export declare const defaultModelPricing: Record<string, ModelPricingScheduleV1>;
+export type SandboxRequiredEnv = {
     field: keyof Settings;
     env: string;
 };
-declare const SANDBOX_REQUIRED_ENV: Record<z.infer<typeof SandboxBackend>, readonly SandboxRequiredEnv[]>;
+export declare const SANDBOX_REQUIRED_ENV: Record<z.infer<typeof SandboxBackend>, readonly SandboxRequiredEnv[]>;
 /** The required OPENGENI_* env var names for a backend (for the deployment manifest). */
-declare function requiredSandboxEnvForBackend(backend: z.infer<typeof SandboxBackend>): string[];
-declare function getSettings(): Settings;
+export declare function requiredSandboxEnvForBackend(backend: z.infer<typeof SandboxBackend>): string[];
+export declare function getSettings(): Settings;
+/**
+ * First-party session tools need a shared HMAC identity even in the unauthenticated
+ * local product mode. A fixed local-only value is no broader than that mode's
+ * existing access boundary, while configured and managed deployments continue to
+ * require an operator-provided secret.
+ */
+export declare function resolveFirstPartyDelegationSecret(settings: Settings): string | undefined;
 /**
  * The Modal sandbox idle timeout (seconds) the provider actually passes as
  * idleTimeoutMs (sandbox-file-persistence). When the operator did not pin
@@ -875,8 +950,17 @@ declare function getSettings(): Settings;
  * it above reaperPeriod + idleGrace so a drained box still survives long enough
  * to be persisted).
  */
-declare function effectiveModalIdleTimeoutSeconds(settings: Settings): number;
-declare function collectSandboxEnvironment(settings: Settings, source?: NodeJS.ProcessEnv): Record<string, string>;
+export declare function effectiveModalIdleTimeoutSeconds(settings: Settings): number;
+/**
+ * One shared upper bound for the durable provider-capture claim and for command
+ * admission waiting behind it. The SDK request itself is bounded by
+ * sandboxSnapshotTimeoutMs; the extra window lets a non-cancellable provider
+ * response settle and release its exact claim without turning a normal
+ * checkpoint into a visible command failure. Database validation caps both
+ * consumers at one hour.
+ */
+export declare function sandboxArchiveCaptureTimeoutMs(settings: Pick<Settings, "sandboxSnapshotTimeoutMs">): number;
+export declare function collectSandboxEnvironment(settings: Settings, source?: NodeJS.ProcessEnv): Record<string, string>;
 /**
  * Resolved API key for a registry provider: the inline `apiKey` when present,
  * else the value of the env var named by `apiKeyEnv`. The preferred form is
@@ -884,7 +968,22 @@ declare function collectSandboxEnvironment(settings: Settings, source?: NodeJS.P
  * from `source` (defaults to process.env) so callers can resolve against an
  * explicit environment in tests.
  */
-declare function resolveProviderApiKey(provider: Pick<RegistryProvider, "apiKey" | "apiKeyEnv">, source?: NodeJS.ProcessEnv): string | undefined;
+export declare function resolveProviderApiKey(provider: Pick<RegistryProvider, "apiKey" | "apiKeyEnv">, source?: NodeJS.ProcessEnv): string | undefined;
+/**
+ * Product display label for catalog/picker UI.
+ * Same string for OpenAI and Codex copies of a slug (`gpt-5.6-luna` and
+ * `codex/gpt-5.6-luna` → `GPT-5.6 Luna`). Non-gpt ids pass through unchanged.
+ */
+export declare function productLabelForModelId(modelId: string): string;
+/**
+ * Map OpenGeni latency mode to the provider `service_tier` wire value.
+ * Azure and Codex ChatGPT accept `priority`; OpenAI API accepts `fast` (alias of priority).
+ * Standard omits the field.
+ */
+export declare function serviceTierForLatencyMode(providerId: string, latencyMode: LatencyMode): "fast" | "priority" | undefined;
+/** True when the response tier fulfills a non-standard Fast/priority request. */
+export declare function responseSatisfiesLatencyMode(requested: LatencyMode, responseServiceTier: string | null | undefined): boolean;
+export declare function runnableLatencyModesForModel(settings: Settings, modelId: string): LatencyMode[];
 /**
  * The built-in provider's stable id: "openai" on the OpenAI platform, "azure"
  * on Azure. Exported because the workspace model-policy gate must attribute
@@ -892,7 +991,7 @@ declare function resolveProviderApiKey(provider: Pick<RegistryProvider, "apiKey"
  * client) to the SAME identity the router uses — otherwise a policy blocking
  * the built-in could be bypassed through the null-resolution path.
  */
-declare function builtinProviderId(settings: Pick<Settings, "openaiProvider">): string;
+export declare function builtinProviderId(settings: Pick<Settings, "openaiProvider">): string;
 /**
  * Every provider a client may route to: the built-in OpenAI/Azure provider
  * first (id "openai"/"azure", always "responses"), then each registry provider
@@ -901,14 +1000,14 @@ declare function builtinProviderId(settings: Pick<Settings, "openaiProvider">):
  * registry entry for the rest. Registry ids may not collide with the built-in
  * id — validateSettings rejects that at boot.
  */
-declare function configuredProviders(settings: Settings): ResolvedModelProvider[];
+export declare function configuredProviders(settings: Settings): ResolvedModelProvider[];
 /**
  * Pure catalog overlay for a workspace whose existing Codex connection seam
  * reports ready. This describes product/provider identity only; it does not
  * select, lease, refresh, or expose a concrete credential; those runtime
  * operations remain owned by the credential allocator.
  */
-declare function withCodexCatalogProvider(settings: Settings): Settings;
+export declare function withCodexCatalogProvider(settings: Settings): Settings;
 /**
  * The provider identity a model id resolves to, for workspace model-policy
  * evaluation — MUST agree with the real router (resolveTurnModel /
@@ -922,7 +1021,7 @@ declare function withCodexCatalogProvider(settings: Settings): Settings;
  *     resolveTurnModel-null fallback, which the built-in OpenAI/Azure client
  *     serves. A policy blocking the built-in must block this path too.
  */
-declare function policyProviderIdForModel(settings: Settings, modelId: string): string;
+export declare function policyProviderIdForModel(settings: Settings, modelId: string): string;
 /**
  * Every model a client may use, the built-in provider's models first
  * (configuredAllowedModels-from-openai, mapped to "responses" with
@@ -931,9 +1030,9 @@ declare function policyProviderIdForModel(settings: Settings, modelId: string):
  * default false). De-duplicated by id (first wins) so the default model stays
  * first and the built-in allow-list takes precedence over registry entries.
  */
-declare function configuredModels(settings: Settings): ConfiguredModel[];
+export declare function configuredModels(settings: Settings): ConfiguredModel[];
 /** Resolve a known canonical id or alias. Unknown strings are returned unchanged. */
-declare function canonicalizeConfiguredModelId(settings: Settings, modelId: string): string;
+export declare function canonicalizeConfiguredModelId(settings: Settings, modelId: string): string;
 /**
  * Allowed model ids in selection order. Reimplemented on top of
  * configuredModels so it is the union of the built-in allow-list and every
@@ -941,18 +1040,18 @@ declare function canonicalizeConfiguredModelId(settings: Settings, modelId: stri
  * depend on it): settings.openaiModel is always first, then the rest of the
  * openai allow-list, then registry ids.
  */
-declare function configuredAllowedModels(settings: Settings): string[];
+export declare function configuredAllowedModels(settings: Settings): string[];
 /**
  * Resolve a model string to the provider that serves it and its configured
  * shape. Returns undefined when the id is not exposed (built-in allow-list nor
  * any registry provider), so the runtime can fall back to the legacy global
  * client path.
  */
-declare function resolveModelProvider(settings: Settings, modelId: string): {
+export declare function resolveModelProvider(settings: Settings, modelId: string): {
     provider: ResolvedModelProvider;
     model: ConfiguredModel;
 } | undefined;
-type ResolveTurnExecutionPolicyV1Input = {
+export type ResolveTurnExecutionPolicyV1Input = {
     /** Effective persisted turn model. Aliases are accepted and canonicalized. */
     modelId: string;
     /** Exact caller-supplied input before canonicalization, only for explicit switches. */
@@ -960,21 +1059,24 @@ type ResolveTurnExecutionPolicyV1Input = {
     modelSource: TurnExecutionModelSourceV1;
     reasoningEffort: Settings["openaiReasoningEffort"];
     reasoningSource: TurnExecutionReasoningSourceV1;
+    latencyMode?: LatencyMode;
+    latencyModeSource?: TurnExecutionLatencyModeSourceV1;
 };
 /**
  * Build a trusted, secret-safe execution policy from the normalized catalog.
  * The Codex overlay here contains static product/provider identity only; it
  * neither proves readiness nor chooses, decrypts, leases, or exposes an account.
  */
-declare function resolveTurnExecutionPolicyV1(settings: Settings, input: ResolveTurnExecutionPolicyV1Input): TurnExecutionPolicyV1;
+export declare function resolveTurnExecutionPolicyV1(settings: Settings, input: ResolveTurnExecutionPolicyV1Input): TurnExecutionPolicyV1;
 /**
  * Parse-time validation lives in @opengeni/contracts; this verifier binds a
  * present snapshot to the current executable definition and exact turn row.
  * Any deployment/provider drift fails before a provider or compaction call.
  */
-declare function assertTurnExecutionPolicyMatchesConfigV1(settings: Settings, policy: TurnExecutionPolicyV1, expected: {
+export declare function assertTurnExecutionPolicyMatchesConfigV1(settings: Settings, policy: TurnExecutionPolicyV1, expected: {
     modelId: string;
     reasoningEffort: Settings["openaiReasoningEffort"];
+    latencyMode?: LatencyMode;
 }): {
     policy: TurnExecutionPolicyV1;
     provider: ResolvedModelProvider;
@@ -987,39 +1089,41 @@ declare function assertTurnExecutionPolicyMatchesConfigV1(settings: Settings, po
  * a registry schedule with one flat default so its historical precedence stays
  * exact.
  */
-declare function configuredModelPricingSchedules(settings: Settings): Record<string, ModelPricingScheduleV1>;
+export declare function configuredModelPricingSchedules(settings: Settings): Record<string, ModelPricingScheduleV1>;
 /** Legacy flat projection: returns the default/below-threshold price. */
-declare function configuredModelPricing(settings: Settings): Record<string, ModelPricing>;
+export declare function configuredModelPricing(settings: Settings): Record<string, ModelPricing>;
 /** Select the per-provider-request price at an exact input-token threshold. */
-declare function selectModelPricing(schedule: ModelPricingScheduleV1, inputTokens: number): ModelPricing;
+export declare function selectModelPricing(schedule: ModelPricingScheduleV1, inputTokens: number): ModelPricing;
 /**
  * Usable input-token budget: an explicit model-catalog effective window when
  * available, otherwise the deployment window minus its output reserve.
  */
-declare function contextInputBudgetTokens(settings: Pick<Settings, "contextWindowTokens" | "contextEffectiveWindowTokens" | "contextReservedOutputTokens">): number;
+export declare function contextInputBudgetTokens(settings: Pick<Settings, "contextWindowTokens" | "contextEffectiveWindowTokens" | "contextReservedOutputTokens">): number;
 /**
  * Apply the resolved provider/model's context policy to one turn. Registry
  * metadata is authoritative when present; deployment defaults remain the
  * fallback for models that do not declare their own limits.
  */
-declare function settingsWithResolvedModelContext(settings: Settings, model: Pick<ConfiguredModel, "contextWindowTokens" | "effectiveContextWindowTokens" | "autoCompactTokenLimit" | "toolOutputTruncationTokens">): Settings;
-declare function configuredStaticUsageLimits(settings: Settings): StaticUsageLimitsConfig;
-declare function configuredEntitlements(settings: Settings): EntitlementsConfig;
-declare function calculateModelUsageCostMicros(settings: Settings, model: string, usage: ModelUsageInput): number;
-declare function configuredAllowedReasoningEfforts(settings: Settings): Array<z.infer<typeof ReasoningEffort>>;
+export declare function settingsWithResolvedModelContext(settings: Settings, model: Pick<ConfiguredModel, "contextWindowTokens" | "effectiveContextWindowTokens" | "autoCompactTokenLimit" | "toolOutputTruncationTokens">): Settings;
+export declare function configuredStaticUsageLimits(settings: Settings): StaticUsageLimitsConfig;
+export declare function configuredEntitlements(settings: Settings): EntitlementsConfig;
+export declare function calculateModelUsageCostMicros(settings: Settings, model: string, usage: ModelUsageInput, options?: {
+    latencyMode?: LatencyMode;
+}): number;
+export declare function configuredAllowedReasoningEfforts(settings: Settings): Array<z.infer<typeof ReasoningEffort>>;
 /**
  * Decodes OPENGENI_ENVIRONMENTS_ENCRYPTION_KEY (base64, exactly 32 bytes) for
  * AES-256-GCM workspace environment value encryption. Returns null when unset.
  * Throws naming only the env var, never echoing its value.
  */
-declare function environmentsEncryptionKeyBytes(settings: Settings): Uint8Array | null;
+export declare function environmentsEncryptionKeyBytes(settings: Settings): Uint8Array | null;
 /**
  * Build one structurally compatible connection policy for both
  * `@temporalio/client` and `@temporalio/worker`. An API key or any custom TLS
  * material enables TLS automatically; the explicit flag covers server-auth TLS
  * without credentials. Secret values are never included in validation errors.
  */
-declare function temporalConnectionOptions(settings: Settings): TemporalConnectionOptions;
+export declare function temporalConnectionOptions(settings: Settings): TemporalConnectionOptions;
 /**
  * The connection `search_path` for OpenGeni's db handles + the managed-auth pool
  * (Step I, §7.8 runtime half). Returns `undefined` when `dbSchema` is unset
@@ -1030,8 +1134,8 @@ declare function temporalConnectionOptions(settings: Settings): TemporalConnecti
  * resolve (the schema-isolation contract live footgun). `opengeni_private` is on the path so the
  * RLS GUC-reader helpers resolve when referenced unqualified.
  */
-declare function dbSearchPath(settings: Pick<Settings, "dbSchema">): string | undefined;
-declare function collectGitIdentityEnvironment(settings: Settings): Record<string, string>;
+export declare function dbSearchPath(settings: Pick<Settings, "dbSchema">): string | undefined;
+export declare function collectGitIdentityEnvironment(settings: Settings): Record<string, string>;
 /**
  * The STABLE run-scoped sandbox environment: the subset of a run's box-manifest
  * environment that is IDENTICAL whether the box is first warmed by the worker
@@ -1064,7 +1168,7 @@ declare function collectGitIdentityEnvironment(settings: Settings): Record<strin
  * this helper fixes is for the common (no-repo) and workspace-environment-attached
  * provisioned-box cases.
  */
-declare function stableSandboxEnvironmentForRun(settings: Settings, workspaceEnvironment?: Record<string, string>, options?: {
+export declare function stableSandboxEnvironmentForRun(settings: Settings, workspaceEnvironment?: Record<string, string>, options?: {
     workspaceId?: string;
 }): Record<string, string>;
 /**
@@ -1074,7 +1178,7 @@ declare function stableSandboxEnvironmentForRun(settings: Settings, workspaceEnv
  * an attach-warmed cold box carries the IDENTICAL manifest env a later repo turn
  * declares (env parity — see applyGitAuthPointerEnvironment).
  */
-declare function hasGitHubRepositorySelection(resources: ReadonlyArray<{
+export declare function hasGitHubRepositorySelection(resources: ReadonlyArray<{
     kind: string;
     provider?: unknown;
     installationId?: unknown;
@@ -1082,7 +1186,7 @@ declare function hasGitHubRepositorySelection(resources: ReadonlyArray<{
     githubInstallationId?: unknown;
     githubRepositoryId?: unknown;
 }>): boolean;
-declare function hasGitCredentialRepositorySelection(resources: ReadonlyArray<{
+export declare function hasGitCredentialRepositorySelection(resources: ReadonlyArray<{
     kind: string;
     provider?: unknown;
     githubInstallationId?: unknown;
@@ -1105,11 +1209,11 @@ declare function hasGitCredentialRepositorySelection(resources: ReadonlyArray<{
  * Mutates and returns `environment`. Identity fallbacks preserve values already
  * present (the deployment git-identity allowlist wins over the bot identity).
  */
-declare function applyGitAuthPointerEnvironment(environment: Record<string, string>, identity: {
+export declare function applyGitAuthPointerEnvironment(environment: Record<string, string>, identity: {
     name: string;
     email: string;
 } | null): Record<string, string>;
-type StartupRetryOptions = {
+export type StartupRetryOptions = {
     attempts?: number;
     initialDelayMs?: number;
     maxDelayMs?: number;
@@ -1121,24 +1225,24 @@ type StartupRetryOptions = {
         error: unknown;
     }) => void;
 };
-declare function startupRetryOptions(settings: Settings): Required<Omit<StartupRetryOptions, "onRetry">>;
-declare function retryStartupDependency<T>(label: string, operation: () => Promise<T>, options?: StartupRetryOptions): Promise<T>;
-declare function sandboxEnvironmentVariableNames(settings: Settings): string[];
-declare function sandboxLifecycleHookIds(settings: Settings): string[];
-declare function parseExposedPorts(raw: string): number[];
-declare function parseMcpServers(raw: string | undefined): unknown[] | undefined;
-declare function parseModelPricingJson(raw: string): Record<string, ModelPricing>;
-declare function parseSandboxWarmRateJson(raw: string): Record<string, number>;
-declare function sandboxWarmRateMicrosPerSecond(settings: Settings, backend: string): number;
+export declare function startupRetryOptions(settings: Settings): Required<Omit<StartupRetryOptions, "onRetry">>;
+export declare function retryStartupDependency<T>(label: string, operation: () => Promise<T>, options?: StartupRetryOptions): Promise<T>;
+export declare function sandboxEnvironmentVariableNames(settings: Settings): string[];
+export declare function sandboxLifecycleHookIds(settings: Settings): string[];
+export declare function parseExposedPorts(raw: string): number[];
+export declare function parseMcpServers(raw: string | undefined): unknown[] | undefined;
+export declare function parseModelPricingJson(raw: string): Record<string, ModelPricing>;
+export declare function parseSandboxWarmRateJson(raw: string): Record<string, number>;
+export declare function sandboxWarmRateMicrosPerSecond(settings: Settings, backend: string): number;
 /**
  * Parse + validate the extra-provider registry JSON. `[]` (or empty/whitespace)
  * yields an empty list. Surfaces JSON and zod errors prefixed with the env-var
  * name so a malformed registry fails fast at boot (validateSettings calls this).
  */
-declare function parseModelProvidersJson(raw: string): RegistryProvider[];
-declare function parseIntegrationsOauthClientsJson(raw: string | undefined): Record<string, IntegrationOAuthClientConfig>;
-declare function parseStaticUsageLimitsJson(raw: string): StaticUsageLimitsConfig;
-declare function parseStaticEntitlementsJson(raw: string): EntitlementsConfig;
+export declare function parseModelProvidersJson(raw: string): RegistryProvider[];
+export declare function parseIntegrationsOauthClientsJson(raw: string | undefined): Record<string, IntegrationOAuthClientConfig>;
+export declare function parseStaticUsageLimitsJson(raw: string): StaticUsageLimitsConfig;
+export declare function parseStaticEntitlementsJson(raw: string): EntitlementsConfig;
 /**
  * The base URL of OpenGeni's own first-party MCP endpoint, as a `{workspaceId}`
  * template — the SINGLE source of truth for the `opengeniMcpUrl`-or-loopback
@@ -1160,8 +1264,8 @@ declare function parseStaticEntitlementsJson(raw: string): EntitlementsConfig;
  *     `{workspaceId}` template, or a concrete base that gets re-scoped). This is
  *     the one binding a mounted embed cannot leave unset.
  */
-declare function firstPartyMcpBaseUrl(settings: Settings): string;
-declare function firstPartyMcpWorkspaceUrl(settings: Settings, workspaceId: string): string;
+export declare function firstPartyMcpBaseUrl(settings: Settings): string;
+export declare function firstPartyMcpWorkspaceUrl(settings: Settings, workspaceId: string): string;
 /**
  * Resolve the secret used to sign/verify scoped stream tokens (sandbox contract
  * §C.3). Falls back to `delegationSecret` (the same HMAC envelope family —
@@ -1169,13 +1273,13 @@ declare function firstPartyMcpWorkspaceUrl(settings: Settings, workspaceId: stri
  * secret does not need a second one. Returns undefined when neither is set,
  * which drives the graceful-degrade (DesktopStream.transport:null).
  */
-declare function resolveStreamTokenSecret(settings: Settings): string | undefined;
+export declare function resolveStreamTokenSecret(settings: Settings): string | undefined;
 /**
  * True iff the desktop pixel plane must GRACEFULLY DEGRADE because desktop is
  * enabled but no stream-token secret is resolvable (stream-token availability contract). When true,
  * negotiateCapabilities forces DesktopStream.transport:null.
  */
-declare function streamTokenDegraded(settings: Settings): boolean;
+export declare function streamTokenDegraded(settings: Settings): boolean;
 /**
  * Resolve the secret the control plane signs the enrollment bearer credential
  * with (the `oge_` envelope the agent presents back — M5). Falls
@@ -1185,7 +1289,7 @@ declare function streamTokenDegraded(settings: Settings): boolean;
  * reports the credential plane disabled (graceful degrade, never a 500). NEVER log
  * the returned value.
  */
-declare function resolveEnrollmentSigningSecret(settings: Settings): string | undefined;
+export declare function resolveEnrollmentSigningSecret(settings: Settings): string | undefined;
 /**
  * Resolve the HMAC secret the control plane signs the agent's relay PRODUCER token
  * with (the `ogr_` envelope; M8b). The RELAY verifies the producer
@@ -1196,7 +1300,7 @@ declare function resolveEnrollmentSigningSecret(settings: Settings): string | un
  * none is set — the enrollment poll then returns an empty relayToken (graceful
  * degrade; the stream plane is unavailable until configured). NEVER log the value.
  */
-declare function resolveRelayTokenSecret(settings: Settings): string | undefined;
+export declare function resolveRelayTokenSecret(settings: Settings): string | undefined;
 /**
  * The resolved NATS auth-callout responder config (M-AUTH). Present only when the
  * callout plane is FULLY configured: the account signing seed + the responder's own
@@ -1204,7 +1308,7 @@ declare function resolveRelayTokenSecret(settings: Settings): string | undefined
  * start (selfhosted agents cannot connect — a graceful disabled state, never a boot
  * crash). The returned `accountSeed` is a secret; NEVER log it.
  */
-interface NatsCalloutConfig {
+export interface NatsCalloutConfig {
     /** The callout account SIGNING seed (`SA...`) — signs the user + response JWTs. */
     accountSeed: string;
     /** The target account NAME the user is placed into (the response `aud`). */
@@ -1213,17 +1317,16 @@ interface NatsCalloutConfig {
     user: string;
     password: string;
 }
-declare function resolveNatsCalloutConfig(settings: Settings): NatsCalloutConfig | null;
+export declare function resolveNatsCalloutConfig(settings: Settings): NatsCalloutConfig | null;
 /**
  * The PRIVILEGED control-plane NATS login (api/worker). Present only when BOTH a
  * user and password are set; otherwise null and the bus connects anonymously (local
  * dev / a NATS without auth_callout). When the callout plane is on, this is the
  * static account user permitted to request `agent.*.rpc`.
  */
-interface NatsControlPlaneAuth {
+export interface NatsControlPlaneAuth {
     user: string;
     password: string;
 }
-declare function resolveNatsControlPlaneAuth(settings: Settings): NatsControlPlaneAuth | null;
-
-export { AGENT_INSTRUCTIONS_CORE_PLACEHOLDER, type BillingAttributionV1, type CapabilityStateV1, CapabilityStateV1Schema, CapabilitySupportV1, type ConfiguredModel, type CredentialSourceV1, DEFAULT_AGENT_INSTRUCTIONS, type EntitlementsConfig, type IntegrationOAuthClientConfig, IntegrationOAuthClientConfigSchema, type McpServerConfig, type McpServerConnectionRef, McpServerConnectionRefSchema, type ModelCapabilitiesV1, ModelCapabilitiesV1Schema, type ModelDeploymentV1, type ModelExecutionLimitsV1, type ModelPricing, type ModelPricingScheduleV1, ModelProviderApi, type ModelUsageInput, type NatsCalloutConfig, type NatsControlPlaneAuth, type RegistryProvider, RegistryProviderKind, type ResolveTurnExecutionPolicyV1Input, type ResolvedModelProvider, SANDBOX_REQUIRED_ENV, type SandboxRequiredEnv, type Settings, type StartupRetryOptions, type StaticUsageLimitsConfig, type TemporalConnectionOptions, type TemporalTlsConnectionConfig, applyGitAuthPointerEnvironment, assertTurnExecutionPolicyMatchesConfigV1, builtinProviderId, calculateModelUsageCostMicros, canonicalizeConfiguredModelId, collectGitIdentityEnvironment, collectSandboxEnvironment, configuredAllowedModels, configuredAllowedReasoningEfforts, configuredEntitlements, configuredModelPricing, configuredModelPricingSchedules, configuredModels, configuredProviders, configuredStaticUsageLimits, contextInputBudgetTokens, dbSearchPath, defaultModelPricing, effectiveModalIdleTimeoutSeconds, environmentsEncryptionKeyBytes, firstPartyMcpBaseUrl, firstPartyMcpWorkspaceUrl, getSettings, hasGitCredentialRepositorySelection, hasGitHubRepositorySelection, parseExposedPorts, parseIntegrationsOauthClientsJson, parseMcpServers, parseModelPricingJson, parseModelProvidersJson, parseSandboxWarmRateJson, parseStaticEntitlementsJson, parseStaticUsageLimitsJson, policyProviderIdForModel, requiredSandboxEnvForBackend, resolveEnrollmentSigningSecret, resolveModelProvider, resolveNatsCalloutConfig, resolveNatsControlPlaneAuth, resolveProviderApiKey, resolveRelayTokenSecret, resolveStreamTokenSecret, resolveTurnExecutionPolicyV1, retryStartupDependency, sandboxEnvironmentVariableNames, sandboxLifecycleHookIds, sandboxPreparationProfiles, sandboxWarmRateMicrosPerSecond, selectModelPricing, settingsWithResolvedModelContext, stableSandboxEnvironmentForRun, startupRetryOptions, streamTokenDegraded, temporalConnectionOptions, withCodexCatalogProvider };
+export declare function resolveNatsControlPlaneAuth(settings: Settings): NatsControlPlaneAuth | null;
+export {};