@opengeni/config 2.1.0 → 2.1.1-canary.36199476632001

package/dist/index.d.ts

@@ -1,10 +1,12 @@
 import { Entitlements, LatencyMode, ReasoningEffort, SandboxBackend, StaticUsageLimits, TurnExecutionPolicyV1, type TurnExecutionLatencyModeSourceV1, type TurnExecutionModelSourceV1, type TurnExecutionReasoningSourceV1, type VideoGenerationResolution, type FirstPartyMcpToolName as FirstPartyMcpToolNameType } from "@opengeni/contracts";
+import type { CodeSearchDeploymentPolicy } from "@opengeni/contracts/code-search";
 export { XAI_SUBSCRIPTION_MODEL_ID_PREFIX } from "@opengeni/xai-subscription";
 import { z } from "zod";
 export declare const DEFAULT_OPENROUTER_MODEL_ID: "openrouter/nvidia/nemotron-3-super-120b-a12b:free";
 export declare const DEFAULT_MODEL_COST_POLICY_JSON: string;
 export declare const SANDBOX_ARCHIVE_CAPTURE_MAX_TIMEOUT_MS: number;
 export declare const SANDBOX_ARCHIVE_CAPTURE_SETTLEMENT_GRACE_MS = 10000;
+export declare const SANDBOX_DEADLINE_COMMAND_STOP_GRACE_MS = 120000;
 export declare const SANDBOX_SNAPSHOT_MAX_TIMEOUT_MS: number;
 export declare const GOOGLE_DRIVE_PROVIDER_REQUEST_TIMEOUT_MAX_MS = 60000;
 export declare const GOOGLE_DRIVE_PROVIDER_RETRY_DELAY_MAX_MS = 60000;
@@ -127,8 +129,10 @@ declare const SettingsSchema: z.ZodObject<{
     analyticsPosthogHost: z.ZodOptional<z.ZodString>;
     analyticsGa4MeasurementId: z.ZodOptional<z.ZodString>;
     publicBaseUrl: z.ZodOptional<z.ZodString>;
+    documentationUrl: z.ZodPreprocess<z.ZodDefault<z.ZodNullable<z.ZodURL>>>;
     mcpOauthEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
-    mcpOauthTrustedProxyHops: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    apiTrustedProxyHops: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    apiTrustedProxyCidrs: z.ZodDefault<z.ZodString>;
     webBaseUrl: z.ZodOptional<z.ZodString>;
     agentReleasesBaseUrl: z.ZodDefault<z.ZodString>;
     agentStableVersion: z.ZodDefault<z.ZodString>;
@@ -143,6 +147,7 @@ declare const SettingsSchema: z.ZodObject<{
         disabled: "disabled";
         stripe: "stripe";
     }>>;
+    verifiedSignupTrialCreditsEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     entitlementsMode: z.ZodDefault<z.ZodEnum<{
         managed: "managed";
         none: "none";
@@ -177,6 +182,8 @@ declare const SettingsSchema: z.ZodObject<{
         browser_observe: "browser_observe";
         browser_open: "browser_open";
         browser_publish: "browser_publish";
+        browser_read: "browser_read";
+        browser_screenshot: "browser_screenshot";
         browser_tabs: "browser_tabs";
         capability_authorization_request: "capability_authorization_request";
         capability_catalog_search: "capability_catalog_search";
@@ -192,6 +199,7 @@ declare const SettingsSchema: z.ZodObject<{
         computer_targets: "computer_targets";
         connected_machine_enroll_token: "connected_machine_enroll_token";
         connected_machine_remove: "connected_machine_remove";
+        custom_mcp_setup_request: "custom_mcp_setup_request";
         editable_artifact_apply: "editable_artifact_apply";
         editable_artifact_create: "editable_artifact_create";
         editable_artifact_export: "editable_artifact_export";
@@ -347,6 +355,8 @@ declare const SettingsSchema: z.ZodObject<{
         browser_observe: "browser_observe";
         browser_open: "browser_open";
         browser_publish: "browser_publish";
+        browser_read: "browser_read";
+        browser_screenshot: "browser_screenshot";
         browser_tabs: "browser_tabs";
         capability_authorization_request: "capability_authorization_request";
         capability_catalog_search: "capability_catalog_search";
@@ -362,6 +372,7 @@ declare const SettingsSchema: z.ZodObject<{
         computer_targets: "computer_targets";
         connected_machine_enroll_token: "connected_machine_enroll_token";
         connected_machine_remove: "connected_machine_remove";
+        custom_mcp_setup_request: "custom_mcp_setup_request";
         editable_artifact_apply: "editable_artifact_apply";
         editable_artifact_create: "editable_artifact_create";
         editable_artifact_export: "editable_artifact_export";
@@ -555,10 +566,12 @@ declare const SettingsSchema: z.ZodObject<{
     authAllowMetrics: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     apiHost: z.ZodDefault<z.ZodString>;
     apiPort: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    apiMetricsPort: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     workerHttpPort: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     opengeniMcpInternalUrl: z.ZodOptional<z.ZodString>;
     opengeniMcpUrl: z.ZodOptional<z.ZodString>;
     corsAllowOriginRegex: z.ZodDefault<z.ZodString>;
+    localAllowedOrigins: z.ZodOptional<z.ZodString>;
     openaiProvider: z.ZodDefault<z.ZodEnum<{
         azure: "azure";
         openai: "openai";
@@ -630,6 +643,16 @@ declare const SettingsSchema: z.ZodObject<{
         xhigh: "xhigh";
     }>>;
     openaiAllowedReasoningEfforts: z.ZodDefault<z.ZodString>;
+    creditsDefaultModel: z.ZodDefault<z.ZodString>;
+    creditsDefaultReasoningEffort: z.ZodDefault<z.ZodEnum<{
+        high: "high";
+        low: "low";
+        max: "max";
+        medium: "medium";
+        minimal: "minimal";
+        none: "none";
+        xhigh: "xhigh";
+    }>>;
     openaiResponsesTransport: z.ZodDefault<z.ZodEnum<{
         http: "http";
         websocket: "websocket";
@@ -641,6 +664,16 @@ declare const SettingsSchema: z.ZodObject<{
     openaiReasoningEncryptedContent: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     openaiMaxRetries: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     webSearchEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    jevApiKey: z.ZodOptional<z.ZodString>;
+    jevBaseUrl: z.ZodDefault<z.ZodString>;
+    jevModel: z.ZodDefault<z.ZodString>;
+    jevRequestTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    codeSearchMode: z.ZodDefault<z.ZodEnum<{
+        default_on: "default_on";
+        experiment: "experiment";
+        off: "off";
+        opt_in: "opt_in";
+    }>>;
     agentInstructionsTemplate: z.ZodDefault<z.ZodString>;
     azureOpenaiBaseUrl: z.ZodOptional<z.ZodString>;
     azureOpenaiEndpoint: z.ZodOptional<z.ZodString>;
@@ -788,6 +821,11 @@ declare const SettingsSchema: z.ZodObject<{
     workspaceControlLockTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     rigSetupTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     sandboxWarmRateMicrosPerSecondJson: z.ZodDefault<z.ZodString>;
+    sandboxWarmBillingMode: z.ZodDefault<z.ZodEnum<{
+        credits: "credits";
+        shadow: "shadow";
+        usage_only: "usage_only";
+    }>>;
     sandboxMaxWarmSecondsPerWorkspace: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     sandboxPreparationProfiles: z.ZodDefault<z.ZodString>;
     sandboxEnvAllowlist: z.ZodDefault<z.ZodString>;
@@ -825,6 +863,13 @@ declare const SettingsSchema: z.ZodObject<{
     documentEmbeddingDimensions: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     documentEmbeddingApiKey: z.ZodOptional<z.ZodString>;
     documentEmbeddingBaseUrl: z.ZodOptional<z.ZodString>;
+    documentEmbeddingBillingMode: z.ZodDefault<z.ZodEnum<{
+        credits: "credits";
+        shadow: "shadow";
+        usage_only: "usage_only";
+    }>>;
+    documentEmbeddingCreditsActivatedAt: z.ZodOptional<z.ZodISODateTime>;
+    documentEmbeddingRateMicrosPerMillionBytes: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     documentCurationProvider: z.ZodDefault<z.ZodEnum<{
         heuristic: "heuristic";
         none: "none";
@@ -1059,6 +1104,15 @@ export type VoiceInputProviderConfig = {
     kind: "supergrok-subscription";
     experimental: true;
 };
+/** The deployment's Jev key, or undefined when it is missing or a placeholder. */
+export declare function usableJevApiKey(settings: Pick<Settings, "jevApiKey">): string | undefined;
+/**
+ * Deployment half of the `code_search` decision. `available` is false when
+ * the mode is off or no usable Jev key is configured; workspaces then cannot
+ * turn it on. `workspaceDefault` applies to workspaces without their own
+ * setting.
+ */
+export declare function codeSearchDeploymentPolicy(settings: Pick<Settings, "codeSearchMode" | "jevApiKey">): CodeSearchDeploymentPolicy;
 /**
  * Reject empty / template secrets so `.env.example` placeholders like
  * `your-key` cannot advertise voice input as available and then 401 upstream.
@@ -2386,6 +2440,20 @@ export interface ConfiguredModel {
     reasoningEffort: boolean;
     hostedWebSearch: boolean;
 }
+/**
+ * Whether a resolved route is the deployment-funded OpenRouter free tier: the
+ * managed OpenRouter provider, which sends every workspace's requests with the
+ * deployment's one OpenRouter key, serving an upstream `:free` variant (the
+ * curated catalog admits nothing else). OpenRouter limits free-variant
+ * requests per account per minute and per day, so each request on this route
+ * spends quota that every turn on the deployment shares. A workspace or
+ * organization OpenRouter connection uses its own account and is not this
+ * route.
+ */
+export declare function isManagedOpenRouterFreeRoute(route: {
+    provider: Pick<ResolvedModelProvider, "kind">;
+    configured: Pick<ConfiguredModel, "upstreamModelId">;
+}): boolean;
 export declare const VERCEL_AI_GATEWAY_BASE_URL: "https://ai-gateway.vercel.sh/v1";
 export declare const VERCEL_AI_GATEWAY_AI_SDK_BASE_URL: "https://ai-gateway.vercel.sh/v4/ai";
 export declare const VERCEL_AI_GATEWAY_CONNECTION_DOMAIN: "ai-gateway.vercel.sh";
@@ -2705,6 +2773,11 @@ export declare function resolveModelProviderForTurn(settings: Settings, modelId:
  * neither proves readiness nor chooses, decrypts, leases, or exposes an account.
  */
 export declare function resolveTurnExecutionPolicyV1(settings: Settings, input: ResolveTurnExecutionPolicyV1Input): TurnExecutionPolicyV1;
+/** Explicit accepted execution identity matches, but its definition digest differs. */
+export declare class TurnExecutionPolicyDefinitionMismatchError extends Error {
+    readonly code = "turn_execution_policy_definition_mismatch";
+    constructor();
+}
 /**
  * Parse-time validation lives in @opengeni/contracts; this verifier binds a
  * present snapshot to the current executable definition and exact turn row.
@@ -2937,6 +3010,31 @@ export declare function firstPartyMcpInternalBaseUrl(settings: Settings): string
 export declare function firstPartyMcpWorkspaceUrl(settings: Settings, workspaceId: string): string;
 export declare function firstPartyMcpInternalWorkspaceUrl(settings: Settings, workspaceId: string): string;
 export declare function codemodeWorkspaceUrl(settings: Settings, workspaceId: string): string;
+export type TrustedProxyCidr = {
+    address: string;
+    prefix: number;
+    family: "ipv4" | "ipv6";
+};
+/**
+ * Parse `OPENGENI_API_TRUSTED_PROXY_CIDRS`: comma-separated IPv4/IPv6 CIDRs or
+ * single addresses. Throws on any malformed entry so a typo can never widen or
+ * silently disable the trusted proxy set.
+ */
+export declare function trustedProxyCidrEntries(raw: string): TrustedProxyCidr[];
+/**
+ * Parse `OPENGENI_LOCAL_ALLOWED_ORIGINS`: comma-separated exact browser origins
+ * (`http(s)://host[:port]`, no path, query, credentials, or wildcard). Throws on
+ * any malformed entry so a typo can never widen or silently disable the local
+ * browser boundary.
+ */
+export declare function localAllowedOriginEntries(raw: string | undefined): string[];
+/**
+ * Local development only: whether a normalized API path is one a sandbox calls
+ * (Codemode, first-party MCP, and the personal Git broker). The Linux Docker
+ * sandbox route relays only these, and the local API serves only these on the
+ * addresses that only sandboxes use (see `apps/api/src/http/local-browser-boundary.ts`).
+ */
+export declare function localSandboxApiRouteAllowed(pathname: string): boolean;
 /** Validate one fully resolved, secret-bearing executable catalog. */
 export declare function validateModelCatalogSettings(settings: Settings, source?: NodeJS.ProcessEnv): ConfiguredModel[];
 /**