@opengeni/config 1.0.4 → 1.1.0-canary.0

package/dist/index.d.ts

@@ -60,6 +60,10 @@ export declare const McpServerConnectionRefSchema: z.ZodObject<{
         kind: z.ZodLiteral<"repository">;
     }, z.core.$strict>>>;
     authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+    hostBinding: z.ZodOptional<z.ZodObject<{
+        bindingId: z.ZodString;
+        generation: z.ZodNumber;
+    }, z.core.$strict>>;
     subjectScope: z.ZodOptional<z.ZodEnum<{
         subject: "subject";
         workspace: "workspace";
@@ -506,6 +510,7 @@ declare const SettingsSchema: z.ZodObject<{
     goalIdleBackoffMaxMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     childLifecycleNoticesEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     hostMcpAuthoritySourceAdmissionEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    hostMcpCredentialResolversJson: z.ZodOptional<z.ZodString>;
     slackWorkspaceRoutingEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     agentMaxModelCallsPerTurn: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     contextWindowTokens: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -867,6 +872,10 @@ declare const SettingsSchema: z.ZodObject<{
                 kind: z.ZodLiteral<"repository">;
             }, z.core.$strict>>>;
             authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+            hostBinding: z.ZodOptional<z.ZodObject<{
+                bindingId: z.ZodString;
+                generation: z.ZodNumber;
+            }, z.core.$strict>>;
             subjectScope: z.ZodOptional<z.ZodEnum<{
                 subject: "subject";
                 workspace: "workspace";

package/dist/index.js

@@ -182,6 +182,7 @@ var McpServerConnectionRefSchema = z.object({
     }
   }).optional(),
   authoritySource: z.literal("host").optional(),
+  hostBinding: z.object({ bindingId: z.string().uuid(), generation: z.number().int().positive().safe() }).strict().optional(),
   subjectScope: z.enum(["workspace", "subject"]).optional()
 }).strict().superRefine((reference, context) => {
   if (reference.authoritySource === "host" && !reference.connectionId) {
@@ -191,6 +192,12 @@ var McpServerConnectionRefSchema = z.object({
       path: ["connectionId"]
     });
   }
+  if (reference.hostBinding && reference.authoritySource !== "host")
+    context.addIssue({
+      code: "custom",
+      path: ["hostBinding"],
+      message: "Durable binding requires host authority"
+    });
   if (!reference.selectedResources) return;
   if (!reference.connectionId) {
     context.addIssue({
@@ -410,6 +417,9 @@ var SettingsSchema = z.object({
   // separate compatibility lane for already-persisted embedding integrations.
   // Env: OPENGENI_HOST_MCP_AUTHORITY_SOURCE_ADMISSION_ENABLED.
   hostMcpAuthoritySourceAdmissionEnabled: EnvBoolean.default(false),
+  // Server-owned per-organization remote MCP resolver configuration. Optional;
+  // inline credentials and native provider OAuth do not require this service.
+  hostMcpCredentialResolversJson: z.string().optional(),
   // Per-channel and per-DM Slack workspace routing. Default ON. A channel does
   // not count a personal workspace as a candidate, so an organization with one
   // shared workspace resolves it as the sole candidate and never asks; the
@@ -2275,6 +2285,7 @@ function getSettings(source = process.env) {
     hostMcpAuthoritySourceAdmissionEnabled: optional(
       "OPENGENI_HOST_MCP_AUTHORITY_SOURCE_ADMISSION_ENABLED"
     ),
+    hostMcpCredentialResolversJson: optional("OPENGENI_HOST_MCP_CREDENTIAL_RESOLVERS_JSON"),
     slackWorkspaceRoutingEnabled: optional("OPENGENI_SLACK_WORKSPACE_ROUTING_ENABLED"),
     agentMaxModelCallsPerTurn: optional("OPENGENI_AGENT_MAX_MODEL_CALLS_PER_TURN"),
     contextWindowTokens: optional("OPENGENI_CONTEXT_WINDOW_TOKENS"),