@opengeni/config 2.1.1 → 3.0.0-canary.36239117573001

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { Entitlements, LatencyMode, ReasoningEffort, SandboxBackend, StaticUsageLimits, TurnExecutionPolicyV1, type TurnExecutionLatencyModeSourceV1, type TurnExecutionModelSourceV1, type TurnExecutionReasoningSourceV1, type VideoGenerationResolution, type FirstPartyMcpToolName as FirstPartyMcpToolNameType } from "@opengeni/contracts";
+import type { CodeSearchDeploymentPolicy } from "@opengeni/contracts/code-search";
 export { XAI_SUBSCRIPTION_MODEL_ID_PREFIX } from "@opengeni/xai-subscription";
 import { z } from "zod";
 export declare const DEFAULT_OPENROUTER_MODEL_ID: "openrouter/nvidia/nemotron-3-super-120b-a12b:free";
@@ -128,8 +129,10 @@ declare const SettingsSchema: z.ZodObject<{
     analyticsPosthogHost: z.ZodOptional<z.ZodString>;
     analyticsGa4MeasurementId: z.ZodOptional<z.ZodString>;
     publicBaseUrl: z.ZodOptional<z.ZodString>;
+    documentationUrl: z.ZodPreprocess<z.ZodDefault<z.ZodNullable<z.ZodURL>>>;
     mcpOauthEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
-    mcpOauthTrustedProxyHops: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    apiTrustedProxyHops: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    apiTrustedProxyCidrs: z.ZodDefault<z.ZodString>;
     webBaseUrl: z.ZodOptional<z.ZodString>;
     agentReleasesBaseUrl: z.ZodDefault<z.ZodString>;
     agentStableVersion: z.ZodDefault<z.ZodString>;
@@ -196,6 +199,7 @@ declare const SettingsSchema: z.ZodObject<{
         computer_targets: "computer_targets";
         connected_machine_enroll_token: "connected_machine_enroll_token";
         connected_machine_remove: "connected_machine_remove";
+        custom_mcp_setup_request: "custom_mcp_setup_request";
         editable_artifact_apply: "editable_artifact_apply";
         editable_artifact_create: "editable_artifact_create";
         editable_artifact_export: "editable_artifact_export";
@@ -368,6 +372,7 @@ declare const SettingsSchema: z.ZodObject<{
         computer_targets: "computer_targets";
         connected_machine_enroll_token: "connected_machine_enroll_token";
         connected_machine_remove: "connected_machine_remove";
+        custom_mcp_setup_request: "custom_mcp_setup_request";
         editable_artifact_apply: "editable_artifact_apply";
         editable_artifact_create: "editable_artifact_create";
         editable_artifact_export: "editable_artifact_export";
@@ -561,10 +566,12 @@ declare const SettingsSchema: z.ZodObject<{
     authAllowMetrics: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     apiHost: z.ZodDefault<z.ZodString>;
     apiPort: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    apiMetricsPort: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     workerHttpPort: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     opengeniMcpInternalUrl: z.ZodOptional<z.ZodString>;
     opengeniMcpUrl: z.ZodOptional<z.ZodString>;
     corsAllowOriginRegex: z.ZodDefault<z.ZodString>;
+    localAllowedOrigins: z.ZodOptional<z.ZodString>;
     openaiProvider: z.ZodDefault<z.ZodEnum<{
         azure: "azure";
         openai: "openai";
@@ -636,6 +643,16 @@ declare const SettingsSchema: z.ZodObject<{
         xhigh: "xhigh";
     }>>;
     openaiAllowedReasoningEfforts: z.ZodDefault<z.ZodString>;
+    creditsDefaultModel: z.ZodDefault<z.ZodString>;
+    creditsDefaultReasoningEffort: z.ZodDefault<z.ZodEnum<{
+        high: "high";
+        low: "low";
+        max: "max";
+        medium: "medium";
+        minimal: "minimal";
+        none: "none";
+        xhigh: "xhigh";
+    }>>;
     openaiResponsesTransport: z.ZodDefault<z.ZodEnum<{
         http: "http";
         websocket: "websocket";
@@ -647,6 +664,16 @@ declare const SettingsSchema: z.ZodObject<{
     openaiReasoningEncryptedContent: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     openaiMaxRetries: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     webSearchEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    jevApiKey: z.ZodOptional<z.ZodString>;
+    jevBaseUrl: z.ZodDefault<z.ZodString>;
+    jevModel: z.ZodDefault<z.ZodString>;
+    jevRequestTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    codeSearchMode: z.ZodDefault<z.ZodEnum<{
+        default_on: "default_on";
+        experiment: "experiment";
+        off: "off";
+        opt_in: "opt_in";
+    }>>;
     agentInstructionsTemplate: z.ZodDefault<z.ZodString>;
     azureOpenaiBaseUrl: z.ZodOptional<z.ZodString>;
     azureOpenaiEndpoint: z.ZodOptional<z.ZodString>;
@@ -1077,6 +1104,15 @@ export type VoiceInputProviderConfig = {
     kind: "supergrok-subscription";
     experimental: true;
 };
+/** The deployment's Jev key, or undefined when it is missing or a placeholder. */
+export declare function usableJevApiKey(settings: Pick<Settings, "jevApiKey">): string | undefined;
+/**
+ * Deployment half of the `code_search` decision. `available` is false when
+ * the mode is off or no usable Jev key is configured; workspaces then cannot
+ * turn it on. `workspaceDefault` applies to workspaces without their own
+ * setting.
+ */
+export declare function codeSearchDeploymentPolicy(settings: Pick<Settings, "codeSearchMode" | "jevApiKey">): CodeSearchDeploymentPolicy;
 /**
  * Reject empty / template secrets so `.env.example` placeholders like
  * `your-key` cannot advertise voice input as available and then 401 upstream.
@@ -2404,6 +2440,20 @@ export interface ConfiguredModel {
     reasoningEffort: boolean;
     hostedWebSearch: boolean;
 }
+/**
+ * Whether a resolved route is the deployment-funded OpenRouter free tier: the
+ * managed OpenRouter provider, which sends every workspace's requests with the
+ * deployment's one OpenRouter key, serving an upstream `:free` variant (the
+ * curated catalog admits nothing else). OpenRouter limits free-variant
+ * requests per account per minute and per day, so each request on this route
+ * spends quota that every turn on the deployment shares. A workspace or
+ * organization OpenRouter connection uses its own account and is not this
+ * route.
+ */
+export declare function isManagedOpenRouterFreeRoute(route: {
+    provider: Pick<ResolvedModelProvider, "kind">;
+    configured: Pick<ConfiguredModel, "upstreamModelId">;
+}): boolean;
 export declare const VERCEL_AI_GATEWAY_BASE_URL: "https://ai-gateway.vercel.sh/v1";
 export declare const VERCEL_AI_GATEWAY_AI_SDK_BASE_URL: "https://ai-gateway.vercel.sh/v4/ai";
 export declare const VERCEL_AI_GATEWAY_CONNECTION_DOMAIN: "ai-gateway.vercel.sh";
@@ -2960,6 +3010,31 @@ export declare function firstPartyMcpInternalBaseUrl(settings: Settings): string
 export declare function firstPartyMcpWorkspaceUrl(settings: Settings, workspaceId: string): string;
 export declare function firstPartyMcpInternalWorkspaceUrl(settings: Settings, workspaceId: string): string;
 export declare function codemodeWorkspaceUrl(settings: Settings, workspaceId: string): string;
+export type TrustedProxyCidr = {
+    address: string;
+    prefix: number;
+    family: "ipv4" | "ipv6";
+};
+/**
+ * Parse `OPENGENI_API_TRUSTED_PROXY_CIDRS`: comma-separated IPv4/IPv6 CIDRs or
+ * single addresses. Throws on any malformed entry so a typo can never widen or
+ * silently disable the trusted proxy set.
+ */
+export declare function trustedProxyCidrEntries(raw: string): TrustedProxyCidr[];
+/**
+ * Parse `OPENGENI_LOCAL_ALLOWED_ORIGINS`: comma-separated exact browser origins
+ * (`http(s)://host[:port]`, no path, query, credentials, or wildcard). Throws on
+ * any malformed entry so a typo can never widen or silently disable the local
+ * browser boundary.
+ */
+export declare function localAllowedOriginEntries(raw: string | undefined): string[];
+/**
+ * Local development only: whether a normalized API path is one a sandbox calls
+ * (Codemode, first-party MCP, and the personal Git broker). The Linux Docker
+ * sandbox route relays only these, and the local API serves only these on the
+ * addresses that only sandboxes use (see `apps/api/src/http/local-browser-boundary.ts`).
+ */
+export declare function localSandboxApiRouteAllowed(pathname: string): boolean;
 /** Validate one fully resolved, secret-bearing executable catalog. */
 export declare function validateModelCatalogSettings(settings: Settings, source?: NodeJS.ProcessEnv): ConfiguredModel[];
 /**

package/dist/index.js

@@ -3,6 +3,7 @@ import {
   BillingMode,
   CAPABILITY_DESCRIPTORS,
   DEFAULT_FIRST_PARTY_MCP_TOOLS,
+  DEFAULT_OPENGENI_DOCUMENTATION_URL,
   currentAgentLearningToolSelection,
   Entitlements,
   EntitlementsMode,
@@ -44,6 +45,7 @@ import {
 } from "@opengeni/xai-subscription";
 import { XAI_SUBSCRIPTION_MODEL_ID_PREFIX as XAI_SUBSCRIPTION_MODEL_ID_PREFIX2 } from "@opengeni/xai-subscription";
 import { createHash } from "crypto";
+import { isIP } from "net";
 import { z } from "zod";
 var envName = /^[A-Za-z_][A-Za-z0-9_]*$/;
 var registryId = /^[A-Za-z0-9_-]+$/;
@@ -231,12 +233,26 @@ var SettingsSchema = z.object({
   analyticsPosthogHost: z.string().url().max(2048).optional(),
   analyticsGa4MeasurementId: z.string().max(32).regex(/^G-[A-Z0-9]+$/u).optional(),
   publicBaseUrl: z.string().url().optional(),
+  // Product documentation the web console links from its Help menu. Absent
+  // means the public OpenGeni docs; `none` hides the link for deployments that
+  // publish no documentation of their own.
+  documentationUrl: z.preprocess(
+    (value) => typeof value === "string" ? value.trim().toLowerCase() === "none" ? null : value.trim() : value,
+    z.url({ protocol: /^https?$/u, error: "must be an absolute http(s) URL or none" }).nullable().default(DEFAULT_OPENGENI_DOCUMENTATION_URL)
+  ),
   // Standards-based OAuth authorization server for external workspace MCP
   // clients. Opt-in because it creates a new public authentication surface.
   mcpOauthEnabled: EnvBoolean.default(false),
-  // Forwarded client addresses are ignored by default. Operators may trust an
+  // Client source address for every API rate limit, abuse quota, and auth
+  // session record (Better Auth, MCP OAuth registration, enrollment, account
+  // setup, login transactions). Forwarded client addresses are ignored by
+  // default so a caller cannot choose its own bucket. Operators may trust an
   // exact number of proxy hops only when direct access to the API is blocked.
-  mcpOauthTrustedProxyHops: z.coerce.number().int().min(0).max(16).default(0),
+  apiTrustedProxyHops: z.coerce.number().int().min(0).max(16).default(0),
+  // Optional comma-separated CIDRs (or single addresses) of the proxy that
+  // connects to the API. When set, forwarded client addresses are honored
+  // only for requests whose transport peer is inside one of them.
+  apiTrustedProxyCidrs: z.string().default(""),
   // Browser origin when the web app and API use separate origins in local
   // development. Production normally leaves this unset and uses publicBaseUrl.
   webBaseUrl: z.string().url().optional(),
@@ -428,6 +444,9 @@ var SettingsSchema = z.object({
   authAllowMetrics: EnvBoolean.default(false),
   apiHost: z.string().default("0.0.0.0"),
   apiPort: z.coerce.number().int().positive().default(8e3),
+  // When set, GET /metrics is served only on this dedicated internal listener
+  // and never on the public API port that an ingress forwards to.
+  apiMetricsPort: z.coerce.number().int().positive().optional(),
   workerHttpPort: z.coerce.number().int().positive().default(8001),
   // Worker-side first-party MCP traffic stays on the deployment's internal
   // network. OPENGENI_MCP_URL remains the sandbox/external route used by
@@ -438,6 +457,11 @@ var SettingsSchema = z.object({
   // call the public API with bearer credentials, but never receive credentialed
   // CORS responses.
   corsAllowOriginRegex: z.string().default(String.raw`^https?://(localhost|127\.0\.0\.1)(:\d+)?$`),
+  // Local development only (`local` access mode in the `local` environment):
+  // extra exact browser origins, comma-separated, that may call the
+  // unauthenticated API besides this stack's own web origin. The local browser
+  // boundary ignores `corsAllowOriginRegex`.
+  localAllowedOrigins: z.string().optional(),
   openaiProvider: z.enum(["openai", "azure"]).default("openai"),
   openaiApiKey: z.string().optional(),
   openaiBaseUrl: z.string().optional(),
@@ -572,6 +596,18 @@ var SettingsSchema = z.object({
   reasoningConfigurationUpdatesEnabled: EnvBoolean.default(false),
   openaiReasoningEffort: ReasoningEffort.default("low"),
   openaiAllowedReasoningEfforts: z.string().default("low,medium,high,xhigh,max"),
+  // Default for new chats and scheduled tasks when the workspace has an
+  // OpenGeni credit balance, no saved workspace default, and no usable
+  // connected subscription, and the deployment default is not already a
+  // credits-billed model. Selected only when this model is selectable in the
+  // workspace catalog; otherwise the first selectable credits model is used.
+  // OPENGENI_CREDITS_DEFAULT_MODEL / OPENGENI_CREDITS_DEFAULT_REASONING_EFFORT.
+  creditsDefaultModel: z.string().trim().min(1).max(256).refine((value) => !/[\u000A\u000D|]/u.test(value), {
+    message: "credits default model must not contain newlines or the | field separator"
+  }).default("gpt-6-luna"),
+  // Preferred effort for the credits default. Clamped to the highest effort
+  // the selected model supports at or below this value.
+  creditsDefaultReasoningEffort: ReasoningEffort.default("xhigh"),
   openaiResponsesTransport: z.enum(["http", "websocket"]).default("http"),
   // Provider-assigned item ids (rs_/msg_/fc_…) in Responses API input are
   // resolved against the provider's server-side response store. That store is
@@ -597,6 +633,19 @@ var SettingsSchema = z.object({
   // merged with the MCP-server tools (getAllTools = [...mcpTools, ...tools])
   // and the sandbox capability tools, never replacing them.
   webSearchEnabled: EnvBoolean.default(true),
+  // Jev (TypeSafe's fast judge model) for worker-side agent tools. Without a
+  // usable key every Jev-backed feature is off. The key stays on the server
+  // (API and worker) and never reaches a sandbox or Connected Machine.
+  jevApiKey: z.string().optional(),
+  jevBaseUrl: z.string().url().default("https://api.typesafe.ai"),
+  jevModel: z.string().trim().min(1).max(128).default("jev-latest"),
+  jevRequestTimeoutMs: z.coerce.number().int().positive().max(12e4).default(1e4),
+  // Jev-backed `code_search` agent tool. `off` never offers it, `opt_in` offers
+  // it only where workspace settings enable it, `default_on` offers it
+  // everywhere except workspaces that disable it, and `experiment` gives it to
+  // a fixed half of sessions in workspaces without their own setting, for
+  // comparison. It also needs jevApiKey.
+  codeSearchMode: z.enum(["off", "opt_in", "default_on", "experiment"]).default("off"),
   // Deployment-default agent persona template (the white-label surface). The
   // runtime resolves the effective template per turn as
   // per-session-override > per-workspace override > this default, substitutes
@@ -1272,6 +1321,15 @@ function personalGitHubOAuthCallbackUrl(publicBaseUrl) {
 function usableDeploymentSecret(value) {
   return isUsableVoiceInputSecret(value) ? value : void 0;
 }
+function usableJevApiKey(settings) {
+  return usableDeploymentSecret(settings.jevApiKey);
+}
+function codeSearchDeploymentPolicy(settings) {
+  const available = settings.codeSearchMode !== "off" && usableJevApiKey(settings) !== void 0;
+  if (!available) return { available: false, workspaceDefault: "off" };
+  const workspaceDefault = settings.codeSearchMode === "default_on" ? "on" : settings.codeSearchMode === "experiment" ? "split" : "off";
+  return { available, workspaceDefault };
+}
 function isUsableVoiceInputSecret(value) {
   if (value == null) return false;
   const trimmed = value.trim();
@@ -1939,6 +1997,9 @@ var IntegrationOAuthClientConfigSchema = z.object({
   clientSecret: z.string().min(1).optional(),
   tokenEndpointAuthMethod: z.enum(["none", "client_secret_post", "client_secret_basic"]).default("none")
 });
+function isManagedOpenRouterFreeRoute(route) {
+  return route.provider.kind === "openrouter-managed" && route.configured.upstreamModelId.endsWith(":free");
+}
 var VERCEL_AI_GATEWAY_BASE_URL = "https://ai-gateway.vercel.sh/v1";
 var VERCEL_AI_GATEWAY_AI_SDK_BASE_URL = "https://ai-gateway.vercel.sh/v4/ai";
 var VERCEL_AI_GATEWAY_CONNECTION_DOMAIN = "ai-gateway.vercel.sh";
@@ -2377,8 +2438,10 @@ function getSettings(source = process.env) {
     analyticsPosthogHost: optional("OPENGENI_ANALYTICS_POSTHOG_HOST"),
     analyticsGa4MeasurementId: optional("OPENGENI_ANALYTICS_GA4_MEASUREMENT_ID"),
     publicBaseUrl: optional("OPENGENI_PUBLIC_BASE_URL"),
+    documentationUrl: optional("OPENGENI_DOCUMENTATION_URL"),
     mcpOauthEnabled: optional("OPENGENI_MCP_OAUTH_ENABLED"),
-    mcpOauthTrustedProxyHops: optional("OPENGENI_MCP_OAUTH_TRUSTED_PROXY_HOPS"),
+    apiTrustedProxyHops: optional("OPENGENI_API_TRUSTED_PROXY_HOPS"),
+    apiTrustedProxyCidrs: optional("OPENGENI_API_TRUSTED_PROXY_CIDRS"),
     webBaseUrl: optional("OPENGENI_WEB_BASE_URL"),
     agentReleasesBaseUrl: optional("OPENGENI_AGENT_RELEASES_BASE_URL"),
     agentStableVersion: optional("OPENGENI_AGENT_STABLE_VERSION"),
@@ -2466,10 +2529,12 @@ function getSettings(source = process.env) {
     authAllowMetrics: optional("OPENGENI_AUTH_ALLOW_METRICS"),
     apiHost: optional("OPENGENI_API_HOST"),
     apiPort: optional("OPENGENI_API_PORT"),
+    apiMetricsPort: optional("OPENGENI_API_METRICS_PORT"),
     workerHttpPort: optional("OPENGENI_WORKER_HTTP_PORT"),
     opengeniMcpInternalUrl: optional("OPENGENI_MCP_INTERNAL_URL"),
     opengeniMcpUrl: optional("OPENGENI_MCP_URL"),
     corsAllowOriginRegex: optional("OPENGENI_CORS_ALLOW_ORIGIN_REGEX"),
+    localAllowedOrigins: optional("OPENGENI_LOCAL_ALLOWED_ORIGINS"),
     openaiProvider: optional("OPENGENI_OPENAI_PROVIDER"),
     openaiApiKey: optional("OPENGENI_OPENAI_API_KEY") ?? optional("OPENAI_API_KEY"),
     openaiBaseUrl: optional("OPENGENI_OPENAI_BASE_URL") ?? optional("OPENAI_BASE_URL"),
@@ -2541,11 +2606,18 @@ function getSettings(source = process.env) {
     ),
     openaiReasoningEffort: optional("OPENGENI_OPENAI_REASONING_EFFORT"),
     openaiAllowedReasoningEfforts: optional("OPENGENI_OPENAI_ALLOWED_REASONING_EFFORTS"),
+    creditsDefaultModel: optional("OPENGENI_CREDITS_DEFAULT_MODEL"),
+    creditsDefaultReasoningEffort: optional("OPENGENI_CREDITS_DEFAULT_REASONING_EFFORT"),
     openaiResponsesTransport: optional("OPENGENI_OPENAI_RESPONSES_TRANSPORT"),
     openaiProviderItemIds: optional("OPENGENI_OPENAI_PROVIDER_ITEM_IDS"),
     openaiReasoningEncryptedContent: optional("OPENGENI_OPENAI_REASONING_ENCRYPTED_CONTENT"),
     openaiMaxRetries: optional("OPENGENI_OPENAI_MAX_RETRIES"),
     webSearchEnabled: optional("OPENGENI_WEB_SEARCH_ENABLED"),
+    jevApiKey: optional("OPENGENI_JEV_API_KEY"),
+    jevBaseUrl: optional("OPENGENI_JEV_BASE_URL"),
+    jevModel: optional("OPENGENI_JEV_MODEL"),
+    jevRequestTimeoutMs: optional("OPENGENI_JEV_REQUEST_TIMEOUT_MS"),
+    codeSearchMode: optional("OPENGENI_CODE_SEARCH_MODE"),
     agentInstructionsTemplate: optional("OPENGENI_AGENT_INSTRUCTIONS_TEMPLATE"),
     azureOpenaiBaseUrl: optional("OPENGENI_AZURE_OPENAI_BASE_URL"),
     azureOpenaiEndpoint: optional("OPENGENI_AZURE_OPENAI_ENDPOINT"),
@@ -4900,8 +4972,61 @@ function isDigestPinnedModalDesktopImage(settings) {
   if (settings.modalImageId) return true;
   return typeof settings.modalImageRef === "string" && MODAL_DESKTOP_IMAGE_DIGEST_REF.test(settings.modalImageRef);
 }
+function trustedProxyCidrEntries(raw) {
+  const entries = [];
+  for (const entry of raw.split(",")) {
+    const value = entry.trim();
+    if (!value) continue;
+    const slash = value.indexOf("/");
+    const address = slash < 0 ? value : value.slice(0, slash);
+    const version = isIP(address);
+    const family = version === 4 ? "ipv4" : version === 6 ? "ipv6" : null;
+    const maxPrefix = family === "ipv4" ? 32 : 128;
+    const prefixText = slash < 0 ? String(maxPrefix) : value.slice(slash + 1);
+    const prefix = /^\d{1,3}$/u.test(prefixText) ? Number(prefixText) : Number.NaN;
+    if (!family || !Number.isInteger(prefix) || prefix < 0 || prefix > maxPrefix) {
+      throw new Error(
+        `OPENGENI_API_TRUSTED_PROXY_CIDRS entry "${value.slice(0, 64)}" is not an IP address or CIDR range`
+      );
+    }
+    entries.push({ address, prefix, family });
+  }
+  return entries;
+}
+function localAllowedOriginEntries(raw) {
+  const origins = [];
+  for (const entry of (raw ?? "").split(",")) {
+    const value = entry.trim();
+    if (!value) continue;
+    let url = null;
+    try {
+      url = new URL(value);
+    } catch {
+      url = null;
+    }
+    if (!url || url.protocol !== "http:" && url.protocol !== "https:" || url.username || url.password || url.hostname.includes("*") || url.pathname !== "/" || url.search || url.hash || value.endsWith("?") || value.endsWith("#")) {
+      throw new Error(
+        `OPENGENI_LOCAL_ALLOWED_ORIGINS entry "${value.slice(0, 64)}" is not an exact http(s) origin such as http://127.0.0.1:5173`
+      );
+    }
+    origins.push(url.origin);
+  }
+  return origins;
+}
+var LOCAL_SANDBOX_API_ROUTES = [
+  // Codemode calls, journal reads, catalog, and the Site/SDK proxy.
+  /^\/v1\/workspaces\/[^/]+\/codemode(?:\/|$)/u,
+  // First-party MCP, including its /docs and /files servers.
+  /^\/v1\/workspaces\/[^/]+\/mcp(?:\/|$)/u,
+  // The personal GitHub HTTPS smart-Git broker.
+  /^\/v1\/git\/personal\/[A-Za-z0-9_-]{43}\/(?:info\/refs|git-upload-pack|git-receive-pack)$/u
+];
+function localSandboxApiRouteAllowed(pathname) {
+  return LOCAL_SANDBOX_API_ROUTES.some((route) => route.test(pathname));
+}
 function validateSettings(settings, source = process.env) {
   temporalConnectionOptions(settings);
+  localAllowedOriginEntries(settings.localAllowedOrigins);
   if (settings.organizationUserSetupEmailTokenTransport === "query" && !settings.organizationUserSetupQueryEdgeSanitizationConfirmed) {
     throw new Error(
       "OPENGENI_ORGANIZATION_USER_SETUP_QUERY_EDGE_SANITIZATION_CONFIRMED=true is required when OPENGENI_ORGANIZATION_USER_SETUP_EMAIL_TOKEN_TRANSPORT=query"
@@ -4984,6 +5109,18 @@ function validateSettings(settings, source = process.env) {
       );
     }
   }
+  const retiredTrustedProxyHops = source.OPENGENI_MCP_OAUTH_TRUSTED_PROXY_HOPS?.trim();
+  if (retiredTrustedProxyHops && retiredTrustedProxyHops !== "0") {
+    throw new Error(
+      "OPENGENI_MCP_OAUTH_TRUSTED_PROXY_HOPS was renamed to OPENGENI_API_TRUSTED_PROXY_HOPS, which now sets the client address for every API rate limit and auth session; rename the variable"
+    );
+  }
+  const trustedProxyCidrs = trustedProxyCidrEntries(settings.apiTrustedProxyCidrs);
+  if (trustedProxyCidrs.length > 0 && settings.apiTrustedProxyHops === 0) {
+    throw new Error(
+      "OPENGENI_API_TRUSTED_PROXY_CIDRS requires OPENGENI_API_TRUSTED_PROXY_HOPS greater than 0"
+    );
+  }
   if (settings.mcpOauthEnabled) {
     if (settings.productAccessMode === "configured") {
       throw new Error(
@@ -5432,6 +5569,16 @@ function validateModelCatalogSettings(settings, source = process.env) {
       `The default model ${settings.openaiModel} is not executable in the resolved model catalog`
     );
   }
+  const explicitCreditsDefault = source.OPENGENI_CREDITS_DEFAULT_MODEL?.trim();
+  if (explicitCreditsDefault && settings.modelCatalogSource === "code" && settings.billingMode === "stripe") {
+    const creditsDefaultId = canonicalizeConfiguredModelId(settings, settings.creditsDefaultModel);
+    const creditsDefault = models.find((model) => model.id === creditsDefaultId);
+    if (creditsDefault?.cost !== "credits") {
+      throw new Error(
+        `OPENGENI_CREDITS_DEFAULT_MODEL ${settings.creditsDefaultModel} is not a credits-billed model in the resolved model catalog`
+      );
+    }
+  }
   const deploymentProductIds = new Set(
     models.filter((model) => model.credentialSource.kind === "deployment").map((model) => model.id)
   );
@@ -5687,6 +5834,7 @@ export {
   calculateVideoGenerationCreditCostMicros,
   canonicalPublicOrigin,
   canonicalizeConfiguredModelId,
+  codeSearchDeploymentPolicy,
   codemodeWorkspaceUrl,
   collectGitIdentityEnvironment,
   collectSandboxEnvironment,
@@ -5727,8 +5875,11 @@ export {
   hasGitCredentialRepositorySelection,
   hasGitHubRepositorySelection,
   isDirectOpenAiApiBaseUrl,
+  isManagedOpenRouterFreeRoute,
   isModelAvailableForNewSelection,
   isUsableVoiceInputSecret,
+  localAllowedOriginEntries,
+  localSandboxApiRouteAllowed,
   modelCostClassForConfiguredModel,
   parseExposedPorts,
   parseIntegrationsOauthClientsJson,
@@ -5777,6 +5928,8 @@ export {
   startupRetryOptions,
   streamTokenDegraded,
   temporalConnectionOptions,
+  trustedProxyCidrEntries,
+  usableJevApiKey,
   validateModelCatalogSettings,
   voiceInputDeploymentConfigured,
   withCodexCatalogProvider,