@opengeni/config 3.1.1 → 3.2.0-canary.36927100590001

package/dist/claude-subscription-oauth.d.ts

@@ -0,0 +1,17 @@
+import { z } from "zod";
+/** Claude Code 2.1.285's installed OAuth flow; model calls and profile reads only. */
+export declare const CLAUDE_OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+export declare const CLAUDE_OAUTH_AUTHORIZE_URL = "https://claude.com/cai/oauth/authorize";
+export declare const CLAUDE_OAUTH_TOKEN_URL = "https://platform.claude.com/v1/oauth/token";
+export declare const CLAUDE_OAUTH_REDIRECT_URL = "https://platform.claude.com/oauth/code/callback";
+export declare const CLAUDE_OAUTH_SCOPES: readonly ["user:inference", "user:profile"];
+export declare const ClaudeOAuthTokenResponse: z.ZodObject<{
+    access_token: z.ZodString;
+    refresh_token: z.ZodOptional<z.ZodString>;
+    expires_in: z.ZodNumber;
+    scope: z.ZodString;
+}, z.core.$loose>;
+export declare function claudeAuthorizationUrl(input: {
+    challenge: string;
+    state: string;
+}): string;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { managedUserEmailAllowed } from "./managed-user-admission.js";
-import { Entitlements, LatencyMode, ReasoningEffort, SandboxBackend, StaticUsageLimits, TurnExecutionPolicyV1, type TurnExecutionLatencyModeSourceV1, type TurnExecutionModelSourceV1, type TurnExecutionReasoningSourceV1, type VideoGenerationResolution, type FirstPartyMcpToolName as FirstPartyMcpToolNameType } from "@opengeni/contracts";
+import { type AgentConfigDeploymentLimits, Entitlements, LatencyMode, ReasoningEffort, SandboxBackend, StaticUsageLimits, TurnExecutionPolicyV1, type TurnExecutionLatencyModeSourceV1, type TurnExecutionModelSourceV1, type TurnExecutionReasoningSourceV1, type VideoGenerationResolution, type FirstPartyMcpToolName as FirstPartyMcpToolNameType } from "@opengeni/contracts";
 import type { CodeSearchDeploymentPolicy } from "@opengeni/contracts/code-search";
 export { XAI_SUBSCRIPTION_MODEL_ID_PREFIX } from "@opengeni/xai-subscription";
 import { z } from "zod";
@@ -160,6 +160,7 @@ declare const SettingsSchema: z.ZodObject<{
         none: "none";
         static: "static";
     }>>;
+    usageAllowancesEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     staticEntitlementsJson: z.ZodDefault<z.ZodString>;
     staticUsageLimitsJson: z.ZodDefault<z.ZodString>;
     delegationSecret: z.ZodOptional<z.ZodString>;
@@ -675,6 +676,8 @@ declare const SettingsSchema: z.ZodObject<{
     openaiReasoningEncryptedContent: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     openaiMaxRetries: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     webSearchEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    agentConfigAdmissionEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    agentConfigDefaultForNewSessions: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     jevApiKey: z.ZodOptional<z.ZodString>;
     jevBaseUrl: z.ZodDefault<z.ZodString>;
     jevModel: z.ZodDefault<z.ZodString>;
@@ -1120,6 +1123,11 @@ export type VoiceInputProviderConfig = {
 };
 /** The deployment's Jev key, or undefined when it is missing or a placeholder. */
 export declare function usableJevApiKey(settings: Pick<Settings, "jevApiKey">): string | undefined;
+/** Deployment half of agent configuration: rollout switches plus hard capability limits. */
+export declare function agentConfigDeploymentPolicy(settings: Pick<Settings, "agentConfigAdmissionEnabled" | "agentConfigDefaultForNewSessions" | "webSearchEnabled" | "defaultFirstPartyMcpTools" | "allowedFirstPartyMcpTools">): AgentConfigDeploymentLimits & {
+    admissionEnabled: boolean;
+    defaultForNewSessions: boolean;
+};
 /**
  * Deployment half of the `code_search` decision. `available` is false when
  * the mode is off or no usable Jev key is configured; workspaces then cannot
@@ -1426,12 +1434,21 @@ export declare const ClaudeSubscriptionCredential: z.ZodObject<{
         accountUuid: z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<"">]>;
         deviceId: z.ZodString;
     }, z.core.$strict>;
+    oauth: z.ZodOptional<z.ZodObject<{
+        refreshToken: z.ZodString;
+        expiresAt: z.ZodString;
+        scopes: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 declare const AnthropicProviderOptions: z.ZodObject<{
     identity: z.ZodOptional<z.ZodObject<{
         accountUuid: z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<"">]>;
         deviceId: z.ZodString;
     }, z.core.$strict>>;
+    credentialBinding: z.ZodOptional<z.ZodObject<{
+        connectionId: z.ZodString;
+        credentialVersion: z.ZodNumber;
+    }, z.core.$strict>>;
     auth: z.ZodDefault<z.ZodEnum<{
         "api-key": "api-key";
         oauth: "oauth";
@@ -1472,6 +1489,10 @@ declare const RegistryProviderSchema: z.ZodObject<{
             accountUuid: z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<"">]>;
             deviceId: z.ZodString;
         }, z.core.$strict>>;
+        credentialBinding: z.ZodOptional<z.ZodObject<{
+            connectionId: z.ZodString;
+            credentialVersion: z.ZodNumber;
+        }, z.core.$strict>>;
         auth: z.ZodDefault<z.ZodEnum<{
             "api-key": "api-key";
             oauth: "oauth";
@@ -1928,6 +1949,10 @@ export declare const ModelCatalogDocument: z.ZodObject<{
                 accountUuid: z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<"">]>;
                 deviceId: z.ZodString;
             }, z.core.$strict>>;
+            credentialBinding: z.ZodOptional<z.ZodObject<{
+                connectionId: z.ZodString;
+                credentialVersion: z.ZodNumber;
+            }, z.core.$strict>>;
             auth: z.ZodDefault<z.ZodEnum<{
                 "api-key": "api-key";
                 oauth: "oauth";
@@ -3206,5 +3231,9 @@ export type ClaudeConnectionCatalog = Partial<Record<ClaudeConnectionKind, {
     }[];
 }>>;
 export declare function withClaudeConnectionCatalog(settings: Settings, connections: ClaudeConnectionCatalog, scope?: "workspace" | "organization"): Settings;
-export declare function withClaudeConnectionCredential(settings: Settings, kind: ClaudeConnectionKind, credential: string, scope?: "workspace" | "organization"): Settings;
+export declare function withClaudeConnectionCredential(settings: Settings, kind: ClaudeConnectionKind, credential: string, scope?: "workspace" | "organization", credentialBinding?: {
+    connectionId: string;
+    credentialVersion: number;
+}): Settings;
 export * from "./claude-subscription-usage.js";
+export * from "./claude-subscription-oauth.js";