@opengeni/config 4.2.1-canary.39593846423001 → 4.3.1

package/dist/chunk-KW4MS4FH.js

@@ -0,0 +1,32 @@
+// src/defaults.ts
+var DEFAULT_OPENROUTER_MODEL_ID = "openrouter/nvidia/nemotron-3-super-120b-a12b:free";
+var DEFAULT_MODEL_COST_POLICY_JSON = JSON.stringify({
+  [DEFAULT_OPENROUTER_MODEL_ID]: "free"
+});
+var DEFAULT_GOAL_IDLE_BACKOFF_MS = [3e3, 3e4, 12e4, 3e5];
+var DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS = 6e5;
+var AGENT_INSTRUCTIONS_CORE_PLACEHOLDER = "{{core}}";
+var DEFAULT_AGENT_INSTRUCTIONS = [
+  "You are an Opengeni workspace agent: a general assistant for questions, writing, research, analysis, and technical work.",
+  "Follow the user's task and the applicable Skill instructions for the current role.",
+  "When a task needs files or commands, work inside the sandbox workspace with the filesystem and shell tools.",
+  "Repository resources are mounted under repos/<host>/<owner>/<repo> unless the session specifies another collision-free mount path.",
+  "File resources are mounted under .opengeni/files/<file-id>/ unless the session specifies another mount path.",
+  "Attached files are mounted read-only; copy them before modifying.",
+  "Installed and selected Skills appear in the session Skill index; follow its reading instructions and any role-specific guidance.",
+  "Provider CLIs such as gh, glab, and az may be pre-authenticated by the host through brokered git credentials or a sandbox preparation profile; try them before asking for credentials.",
+  "When the Git repository you change has a remote and git provider credentials are available, work on a focused branch and open a pull request.",
+  "Otherwise leave changes in the working tree and do not create or mention branches, commits, or pull requests unless the user asks; if the repository has a remote, say the changes are not pushed, and if the user asks for something you cannot make, say what blocks it.",
+  "Answer questions directly and briefly; after making changes, say what changed, how you checked it, and anything still blocked.",
+  AGENT_INSTRUCTIONS_CORE_PLACEHOLDER
+].join(" ");
+
+export {
+  DEFAULT_OPENROUTER_MODEL_ID,
+  DEFAULT_MODEL_COST_POLICY_JSON,
+  DEFAULT_GOAL_IDLE_BACKOFF_MS,
+  DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS,
+  AGENT_INSTRUCTIONS_CORE_PLACEHOLDER,
+  DEFAULT_AGENT_INSTRUCTIONS
+};
+//# sourceMappingURL=chunk-KW4MS4FH.js.map

package/dist/chunk-KW4MS4FH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/defaults.ts"],"sourcesContent":["// Immutable configuration defaults, independent of settings validation and provider adapters.\nexport const DEFAULT_OPENROUTER_MODEL_ID =\n  \"openrouter/nvidia/nemotron-3-super-120b-a12b:free\" as const;\n\nexport const DEFAULT_MODEL_COST_POLICY_JSON = JSON.stringify({\n  [DEFAULT_OPENROUTER_MODEL_ID]: \"free\",\n});\n\n/** Default pacing between consecutive no-input goal continuations. */\nexport const DEFAULT_GOAL_IDLE_BACKOFF_MS: readonly number[] = [3_000, 30_000, 120_000, 300_000];\n\nexport const DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS = 600_000;\n\n/**\n * Placeholder token inside an agent-instructions persona template. The runtime\n * substitutes the non-bypassable CORE (goal-loop ownership + the dynamic\n * workspace-environment block) at this marker. A template that omits the\n * marker still gets the CORE appended after it (a non-bypassable fail-safe),\n * so a white-labelled persona can never drop the goal-loop contract or the\n * environment metadata the agent depends on.\n */\nexport const AGENT_INSTRUCTIONS_CORE_PLACEHOLDER = \"{{core}}\";\n\n/**\n * Default per-workspace agent persona template. This is the BRAND + tool-usage\n * opinion (the white-labellable surface): the general-assistant identity line,\n * the framing/opinion lines, and the mount-path facts. Domain-specific tooling\n * guidance (for example Terraform or Checkov) belongs in opt-in Skills.\n *\n * The CORE that MUST survive any override — the goal-loop ownership line (which\n * names the opengeni__goal_* tools) and the dynamic workspace-environment block\n * — is injected at AGENT_INSTRUCTIONS_CORE_PLACEHOLDER by the runtime, never\n * baked into this overridable string.\n *\n * INVARIANT: with no per-workspace override and an empty environment, the\n * runtime's composed instructions are byte-for-byte pinned by a runtime test.\n * The template below is joined by \" \", followed by \" \" + the placeholder.\n * Changing a single character here changes that default; update the pin\n * intentionally.\n */\nexport const DEFAULT_AGENT_INSTRUCTIONS = [\n  \"You are an Opengeni workspace agent: a general assistant for questions, writing, research, analysis, and technical work.\",\n  \"Follow the user's task and the applicable Skill instructions for the current role.\",\n  \"When a task needs files or commands, work inside the sandbox workspace with the filesystem and shell tools.\",\n  \"Repository resources are mounted under repos/<host>/<owner>/<repo> unless the session specifies another collision-free mount path.\",\n  \"File resources are mounted under .opengeni/files/<file-id>/ unless the session specifies another mount path.\",\n  \"Attached files are mounted read-only; copy them before modifying.\",\n  \"Installed and selected Skills appear in the session Skill index; follow its reading instructions and any role-specific guidance.\",\n  \"Provider CLIs such as gh, glab, and az may be pre-authenticated by the host through brokered git credentials or a sandbox preparation profile; try them before asking for credentials.\",\n  \"When the Git repository you change has a remote and git provider credentials are available, work on a focused branch and open a pull request.\",\n  \"Otherwise leave changes in the working tree and do not create or mention branches, commits, or pull requests unless the user asks; if the repository has a remote, say the changes are not pushed, and if the user asks for something you cannot make, say what blocks it.\",\n  \"Answer questions directly and briefly; after making changes, say what changed, how you checked it, and anything still blocked.\",\n  AGENT_INSTRUCTIONS_CORE_PLACEHOLDER,\n].join(\" \");\n"],"mappings":";AACO,IAAM,8BACX;AAEK,IAAM,iCAAiC,KAAK,UAAU;AAAA,EAC3D,CAAC,2BAA2B,GAAG;AACjC,CAAC;AAGM,IAAM,+BAAkD,CAAC,KAAO,KAAQ,MAAS,GAAO;AAExF,IAAM,mCAAmC;AAUzC,IAAM,sCAAsC;AAmB5C,IAAM,6BAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,GAAG;","names":[]}

package/dist/defaults.d.ts

@@ -0,0 +1,32 @@
+export declare const DEFAULT_OPENROUTER_MODEL_ID: "openrouter/nvidia/nemotron-3-super-120b-a12b:free";
+export declare const DEFAULT_MODEL_COST_POLICY_JSON: string;
+/** Default pacing between consecutive no-input goal continuations. */
+export declare const DEFAULT_GOAL_IDLE_BACKOFF_MS: readonly number[];
+export declare const DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS = 600000;
+/**
+ * Placeholder token inside an agent-instructions persona template. The runtime
+ * substitutes the non-bypassable CORE (goal-loop ownership + the dynamic
+ * workspace-environment block) at this marker. A template that omits the
+ * marker still gets the CORE appended after it (a non-bypassable fail-safe),
+ * so a white-labelled persona can never drop the goal-loop contract or the
+ * environment metadata the agent depends on.
+ */
+export declare const AGENT_INSTRUCTIONS_CORE_PLACEHOLDER = "{{core}}";
+/**
+ * Default per-workspace agent persona template. This is the BRAND + tool-usage
+ * opinion (the white-labellable surface): the general-assistant identity line,
+ * the framing/opinion lines, and the mount-path facts. Domain-specific tooling
+ * guidance (for example Terraform or Checkov) belongs in opt-in Skills.
+ *
+ * The CORE that MUST survive any override — the goal-loop ownership line (which
+ * names the opengeni__goal_* tools) and the dynamic workspace-environment block
+ * — is injected at AGENT_INSTRUCTIONS_CORE_PLACEHOLDER by the runtime, never
+ * baked into this overridable string.
+ *
+ * INVARIANT: with no per-workspace override and an empty environment, the
+ * runtime's composed instructions are byte-for-byte pinned by a runtime test.
+ * The template below is joined by " ", followed by " " + the placeholder.
+ * Changing a single character here changes that default; update the pin
+ * intentionally.
+ */
+export declare const DEFAULT_AGENT_INSTRUCTIONS: string;

package/dist/defaults.js

@@ -0,0 +1,17 @@
+import {
+  AGENT_INSTRUCTIONS_CORE_PLACEHOLDER,
+  DEFAULT_AGENT_INSTRUCTIONS,
+  DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS,
+  DEFAULT_GOAL_IDLE_BACKOFF_MS,
+  DEFAULT_MODEL_COST_POLICY_JSON,
+  DEFAULT_OPENROUTER_MODEL_ID
+} from "./chunk-KW4MS4FH.js";
+export {
+  AGENT_INSTRUCTIONS_CORE_PLACEHOLDER,
+  DEFAULT_AGENT_INSTRUCTIONS,
+  DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS,
+  DEFAULT_GOAL_IDLE_BACKOFF_MS,
+  DEFAULT_MODEL_COST_POLICY_JSON,
+  DEFAULT_OPENROUTER_MODEL_ID
+};
+//# sourceMappingURL=defaults.js.map

package/dist/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+export { DEFAULT_OPENROUTER_MODEL_ID, DEFAULT_MODEL_COST_POLICY_JSON, DEFAULT_GOAL_IDLE_BACKOFF_MS, DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS, AGENT_INSTRUCTIONS_CORE_PLACEHOLDER, DEFAULT_AGENT_INSTRUCTIONS, } from "./defaults.js";
 export { managedUserEmailAllowed } from "./managed-user-admission.js";
 export * from "./realtime-voice-pricing.js";
 export * from "./web-search.js";
@@ -23,8 +24,6 @@ export declare const DEFAULT_MODEL_STREAM_IDLE_TIMEOUT_MS = 300000;
  * window (reasoning summaries stream as progress).
  */
 export declare const DEFAULT_MODEL_STREAM_PROGRESS_TIMEOUT_MS = 600000;
-export declare const DEFAULT_OPENROUTER_MODEL_ID: "openrouter/nvidia/nemotron-3-super-120b-a12b:free";
-export declare const DEFAULT_MODEL_COST_POLICY_JSON: string;
 export declare const SANDBOX_ARCHIVE_CAPTURE_MAX_TIMEOUT_MS: number;
 export declare const SANDBOX_ARCHIVE_CAPTURE_SETTLEMENT_GRACE_MS = 10000;
 export declare const SANDBOX_DEADLINE_COMMAND_STOP_GRACE_MS = 120000;
@@ -33,42 +32,12 @@ export declare const GOOGLE_DRIVE_PROVIDER_REQUEST_TIMEOUT_MAX_MS = 60000;
 export declare const GOOGLE_DRIVE_PROVIDER_RETRY_DELAY_MAX_MS = 60000;
 export declare const SANDBOX_LIFECYCLE_TRANSITION_MAX_WAIT_MS: number;
 export declare const SANDBOX_LIFECYCLE_RETRY_HANDOFF_GRACE_MS = 10000;
-/** Default pacing between consecutive no-input goal continuations. */
-export declare const DEFAULT_GOAL_IDLE_BACKOFF_MS: readonly number[];
-export declare const DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS = 600000;
 /** The retained-image byte limit for one workspace: its override, else the deployment default. */
 export declare function retainedImageWorkspaceQuotaBytes(settings: Pick<Settings, "retainedImageWorkspaceQuotaBytes" | "retainedImageWorkspaceQuotaOverrides">, workspaceId: string): number;
 export declare const sandboxPreparationProfiles: Record<string, {
     env: string[];
     hooks: string[];
 }>;
-/**
- * Placeholder token inside an agent-instructions persona template. The runtime
- * substitutes the non-bypassable CORE (goal-loop ownership + the dynamic
- * workspace-environment block) at this marker. A template that omits the
- * marker still gets the CORE appended after it (a non-bypassable fail-safe),
- * so a white-labelled persona can never drop the goal-loop contract or the
- * environment metadata the agent depends on.
- */
-export declare const AGENT_INSTRUCTIONS_CORE_PLACEHOLDER = "{{core}}";
-/**
- * Default per-workspace agent persona template. This is the BRAND + tool-usage
- * opinion (the white-labellable surface): the general-assistant identity line,
- * the framing/opinion lines, and the mount-path facts. Domain-specific tooling
- * guidance (for example Terraform or Checkov) belongs in opt-in Skills.
- *
- * The CORE that MUST survive any override — the goal-loop ownership line (which
- * names the opengeni__goal_* tools) and the dynamic workspace-environment block
- * — is injected at AGENT_INSTRUCTIONS_CORE_PLACEHOLDER by the runtime, never
- * baked into this overridable string.
- *
- * INVARIANT: with no per-workspace override and an empty environment, the
- * runtime's composed instructions are byte-for-byte pinned by a runtime test.
- * The template below is joined by " ", followed by " " + the placeholder.
- * Changing a single character here changes that default; update the pin
- * intentionally.
- */
-export declare const DEFAULT_AGENT_INSTRUCTIONS: string;
 export declare const McpServerConnectionRefSchema: z.ZodObject<{
     connectionId: z.ZodOptional<z.ZodString>;
     accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
@@ -111,6 +80,7 @@ declare const SettingsSchema: z.ZodObject<{
     deploymentRevision: z.ZodDefault<z.ZodString>;
     serverVersion: z.ZodOptional<z.ZodString>;
     databaseUrl: z.ZodDefault<z.ZodString>;
+    databaseNotificationUrl: z.ZodOptional<z.ZodString>;
     apiDatabasePoolMax: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     databasePreparedStatements: z.ZodOptional<z.ZodPreprocess<z.ZodBoolean>>;
     dbSchema: z.ZodDefault<z.ZodString>;
@@ -806,6 +776,14 @@ declare const SettingsSchema: z.ZodObject<{
     codexResponsesWebSocketEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     openaiResponsesWebSocketEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     lazyToolSearchEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
+    decisionModelProvider: z.ZodOptional<z.ZodEnum<{
+        jev: "jev";
+        openai: "openai";
+        openrouter: "openrouter";
+    }>>;
+    decisionModelId: z.ZodOptional<z.ZodString>;
+    decisionModelApiKey: z.ZodOptional<z.ZodString>;
+    decisionModelBaseUrl: z.ZodOptional<z.ZodString>;
     codexFleetPolicyShadowEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     subscriptionCoreShadowEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
     subscriptionCrossProviderFailoverEnabled: z.ZodDefault<z.ZodPreprocess<z.ZodBoolean>>;
@@ -1424,15 +1402,23 @@ export type VoiceInputProviderConfig = {
 };
 /** The deployment's Jev key, or undefined when it is missing or a placeholder. */
 export declare function usableJevApiKey(settings: Pick<Settings, "jevApiKey">): string | undefined;
+export type DecisionModelSettings = Pick<Settings, "decisionModelProvider" | "decisionModelId" | "decisionModelApiKey" | "decisionModelBaseUrl">;
+/** Explicit deployment credentials only. Compatibility is code-search-only. */
+export declare function decisionModelConfiguration(settings: DecisionModelSettings & Partial<Pick<Settings, "jevApiKey" | "jevModel" | "jevBaseUrl">>, allowLegacyCodeSearch?: boolean): {
+    provider: "jev" | "openai" | "openrouter";
+    model: string;
+    apiKey: string;
+    baseUrl?: string;
+} | undefined;
 /** Deployment half of agent configuration: hard capability limits. */
 export declare function agentConfigDeploymentPolicy(settings: FirstPartyMcpToolPolicySettings & Pick<Settings, "webSearchEnabled">): AgentConfigDeploymentLimits;
 /**
  * Deployment half of the `code_search` decision. `available` is false when
- * the mode is off or no usable Jev key is configured; workspaces then cannot
+ * the mode is off or no usable decision model is configured; workspaces then cannot
  * turn it on. `workspaceDefault` applies to workspaces without their own
  * setting.
  */
-export declare function codeSearchDeploymentPolicy(settings: Pick<Settings, "codeSearchMode" | "jevApiKey">): CodeSearchDeploymentPolicy;
+export declare function codeSearchDeploymentPolicy(settings: Pick<Settings, "codeSearchMode" | "jevApiKey"> & DecisionModelSettings): CodeSearchDeploymentPolicy;
 /**
  * Reject empty / template secrets so `.env.example` placeholders like
  * `your-key` cannot advertise voice input as available and then 401 upstream.
@@ -1817,7 +1803,9 @@ export declare const RegistryProviderKind: z.ZodEnum<{
     "claude-subscription-organization": "claude-subscription-organization";
     "claude-subscription-workspace": "claude-subscription-workspace";
     "codex-subscription": "codex-subscription";
+    "direct-azure-organization": "direct-azure-organization";
     "direct-azure-workspace": "direct-azure-workspace";
+    "direct-openai-organization": "direct-openai-organization";
     "direct-openai-workspace": "direct-openai-workspace";
     "openrouter-organization": "openrouter-organization";
     "openrouter-workspace": "openrouter-workspace";
@@ -1878,7 +1866,9 @@ declare const RegistryProviderSchema: z.ZodObject<{
         "claude-subscription-organization": "claude-subscription-organization";
         "claude-subscription-workspace": "claude-subscription-workspace";
         "codex-subscription": "codex-subscription";
+        "direct-azure-organization": "direct-azure-organization";
         "direct-azure-workspace": "direct-azure-workspace";
+        "direct-openai-organization": "direct-openai-organization";
         "direct-openai-workspace": "direct-openai-workspace";
         "openrouter-organization": "openrouter-organization";
         "openrouter-workspace": "openrouter-workspace";
@@ -2137,6 +2127,15 @@ export declare const WORKSPACE_OPPER_PROVIDER_ID: "workspace-opper";
 export declare const WORKSPACE_OPPER_MODEL_ID_PREFIX: "workspace-opper/";
 export declare const ORGANIZATION_OPPER_PROVIDER_ID: "organization-opper";
 export declare const ORGANIZATION_OPPER_MODEL_ID_PREFIX: "organization-opper/";
+/**
+ * Organization-owned OpenAI and Azure OpenAI: one connection each (an API key,
+ * plus a resource endpoint for Azure) whose curated models (Azure deployments)
+ * inherit into shared workspaces.
+ */
+export declare const ORGANIZATION_OPENAI_PROVIDER_ID: "organization-openai";
+export declare const ORGANIZATION_OPENAI_MODEL_ID_PREFIX: "organization-openai/";
+export declare const ORGANIZATION_AZURE_OPENAI_PROVIDER_ID: "organization-azure-openai";
+export declare const ORGANIZATION_AZURE_OPENAI_MODEL_ID_PREFIX: "organization-azure-openai/";
 /** Opper's OpenAI-compatible Chat Completions surface (Bearer key). */
 export declare const OPPER_BASE_URL: "https://api.opper.ai/v3/compat";
 export declare const ModelCostClass: z.ZodEnum<{
@@ -4176,6 +4175,43 @@ export declare function withOrganizationOpperCredential(settings: Settings, apiK
     upstreamModelId: string;
     label?: string | null;
 }[]): Settings;
+/** The organization's own OpenAI or Azure OpenAI key (a direct, non-gateway route). */
+export type OrganizationDirectModelProvider = "openai" | "azure_openai";
+/** The organization direct route a product model id belongs to, if any. */
+export declare function organizationDirectModelProviderOf(modelId: string | null | undefined): OrganizationDirectModelProvider | null;
+export declare function organizationDirectModelIdPrefix(provider: OrganizationDirectModelProvider): string;
+/** Secret-free organization OpenAI or Azure OpenAI catalog overlay (models, and Azure's endpoint). */
+export declare function withOrganizationDirectCatalogProvider(settings: Settings, provider: OrganizationDirectModelProvider, input: {
+    endpoint?: string | null | undefined;
+    models: readonly {
+        upstreamModelId: string;
+        label?: string | null;
+    }[];
+}): Settings;
+/** Runtime overlay after the worker resolves the organization's encrypted key. */
+export declare function withOrganizationDirectCredential(settings: Settings, provider: OrganizationDirectModelProvider, apiKey: string, input: {
+    endpoint?: string | null | undefined;
+    models: readonly {
+        upstreamModelId: string;
+        label?: string | null;
+    }[];
+}): Settings;
+/** Secret-free organization Azure OpenAI catalog overlay (endpoint + deployments). */
+export declare function withOrganizationAzureOpenAICatalogProvider(settings: Settings, input: {
+    endpoint: string | null | undefined;
+    models: readonly {
+        upstreamModelId: string;
+        label?: string | null;
+    }[];
+}): Settings;
+/** Runtime overlay after the worker resolves the organization's encrypted Azure key. */
+export declare function withOrganizationAzureOpenAICredential(settings: Settings, apiKey: string, input: {
+    endpoint: string | null | undefined;
+    models: readonly {
+        upstreamModelId: string;
+        label?: string | null;
+    }[];
+}): Settings;
 /** Secret-free organization Vercel AI Gateway catalog overlay. */
 export declare function withOrganizationGatewayCatalogProvider(settings: Settings, customModels?: readonly {
     upstreamModelId: string;

package/dist/index.js

@@ -1,3 +1,12 @@
+import {
+  AGENT_INSTRUCTIONS_CORE_PLACEHOLDER,
+  DEFAULT_AGENT_INSTRUCTIONS,
+  DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS,
+  DEFAULT_GOAL_IDLE_BACKOFF_MS,
+  DEFAULT_MODEL_COST_POLICY_JSON,
+  DEFAULT_OPENROUTER_MODEL_ID
+} from "./chunk-KW4MS4FH.js";
+
 // src/managed-user-admission.ts
 function managedUserEmailAllowed(allowedUserEmails, email) {
   return allowedUserEmails === void 0 || typeof email === "string" && allowedUserEmails.some((allowed2) => allowed2.toLowerCase() === email.trim().toLowerCase());
@@ -885,10 +894,6 @@ var DEFAULT_MODEL_STREAM_IDLE_TIMEOUT_MS = 3e5;
 var DEFAULT_MODEL_STREAM_PROGRESS_TIMEOUT_MS = 6e5;
 var envName = /^[A-Za-z_][A-Za-z0-9_]*$/;
 var registryId = /^[A-Za-z0-9_-]+$/;
-var DEFAULT_OPENROUTER_MODEL_ID = "openrouter/nvidia/nemotron-3-super-120b-a12b:free";
-var DEFAULT_MODEL_COST_POLICY_JSON = JSON.stringify({
-  [DEFAULT_OPENROUTER_MODEL_ID]: "free"
-});
 var SANDBOX_ARCHIVE_CAPTURE_MAX_TIMEOUT_MS = 60 * 6e4;
 var SANDBOX_ARCHIVE_CAPTURE_SETTLEMENT_GRACE_MS = 1e4;
 var SANDBOX_DEADLINE_COMMAND_STOP_GRACE_MS = 12e4;
@@ -911,8 +916,6 @@ var EnvBoolean = z5.preprocess((value) => {
   return value;
 }, z5.boolean());
 var PublicHttpUrl = z5.string().url().max(2048).refine((value) => /^https?:\/\//iu.test(value), "must be an http(s) URL");
-var DEFAULT_GOAL_IDLE_BACKOFF_MS = [3e3, 3e4, 12e4, 3e5];
-var DEFAULT_GOAL_IDLE_BACKOFF_MAX_MS = 6e5;
 var EnvGoalIdleBackoffMs = z5.preprocess((value) => {
   if (typeof value !== "string") return value;
   const source = value.trim();
@@ -1018,21 +1021,6 @@ var sandboxPreparationProfiles = {
     hooks: []
   }
 };
-var AGENT_INSTRUCTIONS_CORE_PLACEHOLDER = "{{core}}";
-var DEFAULT_AGENT_INSTRUCTIONS = [
-  "You are an Opengeni workspace agent: a general assistant for questions, writing, research, analysis, and technical work.",
-  "Follow the user's task and the applicable Skill instructions for the current role.",
-  "When a task needs files or commands, work inside the sandbox workspace with the filesystem and shell tools.",
-  "Repository resources are mounted under repos/<host>/<owner>/<repo> unless the session specifies another collision-free mount path.",
-  "File resources are mounted under .opengeni/files/<file-id>/ unless the session specifies another mount path.",
-  "Attached files are mounted read-only; copy them before modifying.",
-  "Installed and selected Skills appear in the session Skill index; follow its reading instructions and any role-specific guidance.",
-  "Provider CLIs such as gh, glab, and az may be pre-authenticated by the host through brokered git credentials or a sandbox preparation profile; try them before asking for credentials.",
-  "When the Git repository you change has a remote and git provider credentials are available, work on a focused branch and open a pull request.",
-  "Otherwise leave changes in the working tree and do not create or mention branches, commits, or pull requests unless the user asks; if the repository has a remote, say the changes are not pushed, and if the user asks for something you cannot make, say what blocks it.",
-  "Answer questions directly and briefly; after making changes, say what changed, how you checked it, and anything still blocked.",
-  AGENT_INSTRUCTIONS_CORE_PLACEHOLDER
-].join(" ");
 var McpServerConnectionRefSchema = PublicMcpServerConnectionRef;
 var McpOperationRecoverySchema = z5.record(
   z5.string().min(1).max(512).regex(/^\S+$/u),
@@ -1057,6 +1045,9 @@ var SettingsSchema = z5.object({
   // Absent on dev/source builds — consumers must treat it as optional.
   serverVersion: z5.string().optional(),
   databaseUrl: z5.string().default("postgres://opengeni:opengeni@127.0.0.1:5432/opengeni"),
+  // LISTEN needs a session-pinned connection. Direct deployments reuse the
+  // ordinary URL; transaction poolers supply this separate direct endpoint.
+  databaseNotificationUrl: z5.string().optional(),
   // API application pool only. Managed auth owns its separate pool; readiness
   // reuses the application handle. Keep the historical default for existing
   // deployments and let operators budget this per process with replica counts.
@@ -1601,6 +1592,12 @@ var SettingsSchema = z5.object({
   // the Codex rollout so an emergency Codex opt-out cannot disable every model.
   // OPENGENI_LAZY_TOOL_SEARCH_ENABLED
   lazyToolSearchEnabled: EnvBoolean.default(true),
+  // Typed decision-model category, separate from conversational models. Explicit
+  // configuration is shared by tool discovery and code search; no account fallback.
+  decisionModelProvider: z5.enum(["jev", "openai", "openrouter"]).optional(),
+  decisionModelId: z5.string().trim().min(1).optional(),
+  decisionModelApiKey: z5.string().optional(),
+  decisionModelBaseUrl: z5.string().url().optional(),
   // Decision-observability fence. When enabled, the worker emits one
   // bounded, metadata-only adaptive-policy replay record alongside the unchanged
   // sticky-sharded decision. It never changes placement/admission/failover.
@@ -2595,6 +2592,26 @@ function usableDeploymentSecret(value) {
 function usableJevApiKey(settings) {
   return usableDeploymentSecret(settings.jevApiKey);
 }
+function decisionModelConfiguration(settings, allowLegacyCodeSearch = false) {
+  const explicit = settings.decisionModelProvider !== void 0 || settings.decisionModelId !== void 0 || settings.decisionModelApiKey !== void 0 || settings.decisionModelBaseUrl !== void 0;
+  if (explicit) {
+    const apiKey2 = usableDeploymentSecret(settings.decisionModelApiKey);
+    if (!settings.decisionModelProvider || !settings.decisionModelId || !apiKey2) return void 0;
+    return {
+      provider: settings.decisionModelProvider,
+      model: settings.decisionModelId,
+      apiKey: apiKey2,
+      ...settings.decisionModelBaseUrl ? { baseUrl: settings.decisionModelBaseUrl } : {}
+    };
+  }
+  const apiKey = allowLegacyCodeSearch ? usableJevApiKey(settings) : void 0;
+  return apiKey ? {
+    provider: "jev",
+    model: settings.jevModel ?? "jev-latest",
+    apiKey,
+    ...settings.jevBaseUrl ? { baseUrl: settings.jevBaseUrl } : {}
+  } : void 0;
+}
 function agentConfigDeploymentPolicy(settings) {
   return agentConfigDeploymentLimitsFromAllowlist(
     resolveFirstPartyMcpToolPolicy(settings).allowed,
@@ -2602,7 +2619,7 @@ function agentConfigDeploymentPolicy(settings) {
   );
 }
 function codeSearchDeploymentPolicy(settings) {
-  const available = settings.codeSearchMode !== "off" && usableJevApiKey(settings) !== void 0;
+  const available = settings.codeSearchMode !== "off" && decisionModelConfiguration(settings, true) !== void 0;
   if (!available) return { available: false, workspaceDefault: "off" };
   const workspaceDefault = settings.codeSearchMode === "default_on" ? "on" : settings.codeSearchMode === "experiment" ? "split" : "off";
   return { available, workspaceDefault };
@@ -3045,6 +3062,8 @@ var RegistryProviderKind = z5.enum([
   "vercel-gateway-organization",
   "direct-openai-workspace",
   "direct-azure-workspace",
+  "direct-openai-organization",
+  "direct-azure-organization",
   "openrouter-workspace",
   "openrouter-organization",
   "opper-workspace",
@@ -3219,6 +3238,10 @@ var WORKSPACE_OPPER_PROVIDER_ID = "workspace-opper";
 var WORKSPACE_OPPER_MODEL_ID_PREFIX = "workspace-opper/";
 var ORGANIZATION_OPPER_PROVIDER_ID = "organization-opper";
 var ORGANIZATION_OPPER_MODEL_ID_PREFIX = "organization-opper/";
+var ORGANIZATION_OPENAI_PROVIDER_ID = "organization-openai";
+var ORGANIZATION_OPENAI_MODEL_ID_PREFIX = "organization-openai/";
+var ORGANIZATION_AZURE_OPENAI_PROVIDER_ID = "organization-azure-openai";
+var ORGANIZATION_AZURE_OPENAI_MODEL_ID_PREFIX = "organization-azure-openai/";
 var OPPER_BASE_URL = "https://api.opper.ai/v3/compat";
 var RESERVED_MODEL_PROVIDER_IDS = /* @__PURE__ */ new Set([
   "openai",
@@ -3234,6 +3257,8 @@ var RESERVED_MODEL_PROVIDER_IDS = /* @__PURE__ */ new Set([
   OPPER_PROVIDER_ID,
   WORKSPACE_OPPER_PROVIDER_ID,
   ORGANIZATION_OPPER_PROVIDER_ID,
+  ORGANIZATION_OPENAI_PROVIDER_ID,
+  ORGANIZATION_AZURE_OPENAI_PROVIDER_ID,
   "organization-anthropic",
   "organization-claude-subscription",
   "workspace-anthropic",
@@ -4457,6 +4482,7 @@ function getSettings(source = process.env) {
     deploymentRevision: optional("OPENGENI_DEPLOYMENT_REVISION") ?? optional("SOURCE_VERSION") ?? optional("GITHUB_SHA"),
     serverVersion: optional("OPENGENI_SERVER_VERSION"),
     databaseUrl: optional("OPENGENI_DATABASE_URL"),
+    databaseNotificationUrl: optional("OPENGENI_DATABASE_NOTIFICATION_URL"),
     apiDatabasePoolMax: optional("OPENGENI_API_DATABASE_POOL_MAX"),
     databasePreparedStatements: optional("OPENGENI_DATABASE_PREPARED_STATEMENTS"),
     dbSchema: optional("OPENGENI_DB_SCHEMA"),
@@ -4705,6 +4731,10 @@ function getSettings(source = process.env) {
     codexResponsesWebSocketEnabled: optional("OPENGENI_CODEX_RESPONSES_WEBSOCKET_ENABLED"),
     openaiResponsesWebSocketEnabled: optional("OPENGENI_OPENAI_RESPONSES_WEBSOCKET_ENABLED"),
     lazyToolSearchEnabled: optional("OPENGENI_LAZY_TOOL_SEARCH_ENABLED"),
+    decisionModelProvider: optional("OPENGENI_DECISION_MODEL_PROVIDER"),
+    decisionModelId: optional("OPENGENI_DECISION_MODEL_ID"),
+    decisionModelApiKey: optional("OPENGENI_DECISION_MODEL_API_KEY"),
+    decisionModelBaseUrl: optional("OPENGENI_DECISION_MODEL_BASE_URL"),
     codexFleetPolicyShadowEnabled: optional("OPENGENI_CODEX_FLEET_POLICY_SHADOW_ENABLED"),
     subscriptionCoreShadowEnabled: optional("OPENGENI_SUBSCRIPTION_CORE_SHADOW_ENABLED"),
     subscriptionCrossProviderFailoverEnabled: optional(
@@ -5930,6 +5960,102 @@ function withOrganizationOpperCredential(settings, apiKey, customModels = []) {
   );
   return { ...catalog, modelProvidersJson: JSON.stringify(providers) };
 }
+var ORGANIZATION_DIRECT_ROUTES = {
+  openai: {
+    kind: "direct-openai-organization",
+    id: ORGANIZATION_OPENAI_PROVIDER_ID,
+    prefix: ORGANIZATION_OPENAI_MODEL_ID_PREFIX,
+    label: "Organization OpenAI",
+    wireProfile: "openai"
+  },
+  azure_openai: {
+    kind: "direct-azure-organization",
+    id: ORGANIZATION_AZURE_OPENAI_PROVIDER_ID,
+    prefix: ORGANIZATION_AZURE_OPENAI_MODEL_ID_PREFIX,
+    label: "Organization Azure OpenAI",
+    wireProfile: "azure-openai"
+  }
+};
+function organizationDirectModelProviderOf(modelId) {
+  if (modelId?.startsWith(ORGANIZATION_OPENAI_MODEL_ID_PREFIX)) return "openai";
+  if (modelId?.startsWith(ORGANIZATION_AZURE_OPENAI_MODEL_ID_PREFIX)) return "azure_openai";
+  return null;
+}
+function organizationDirectModelIdPrefix(provider) {
+  return ORGANIZATION_DIRECT_ROUTES[provider].prefix;
+}
+function organizationDirectRegistryProvider(settings, provider, input) {
+  const route = ORGANIZATION_DIRECT_ROUTES[provider];
+  const baseUrl = provider === "openai" ? "https://api.openai.com/v1" : input.endpoint ? organizationAzureOpenAIBaseUrl(input.endpoint) : null;
+  if (!baseUrl) return null;
+  const seen = /* @__PURE__ */ new Set();
+  const models = [];
+  for (const model of input.models) {
+    if (seen.has(model.upstreamModelId)) continue;
+    seen.add(model.upstreamModelId);
+    models.push({
+      id: `${route.prefix}${model.upstreamModelId}`,
+      upstreamModelId: model.upstreamModelId,
+      aliases: [],
+      label: model.label?.trim() || model.upstreamModelId,
+      capabilities: legacyModelCapabilities(settings, {
+        reasoningEffort: false,
+        hostedWebSearch: false
+      }),
+      toolOutputTruncationTokens: settings.modelToolOutputTruncationTokens
+    });
+  }
+  if (models.length === 0) return null;
+  return {
+    kind: route.kind,
+    id: route.id,
+    label: route.label,
+    api: "responses",
+    wireProfile: route.wireProfile,
+    baseUrl,
+    ...input.apiKey ? { apiKey: input.apiKey } : {},
+    models
+  };
+}
+function organizationAzureOpenAIBaseUrl(endpoint) {
+  let url;
+  try {
+    url = new URL(endpoint);
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "https:" || url.username || url.password || url.port || url.search || url.hash || !/^[a-z0-9-]+\.openai\.azure\.com$/i.test(url.hostname) || !["", "/", "/openai/v1", "/openai/v1/"].includes(url.pathname))
+    return null;
+  return `${url.origin}/openai/v1`;
+}
+function withOrganizationDirectProvider(settings, provider, overlay) {
+  if (!overlay) return settings;
+  const providers = parseModelProvidersJson(settings.modelProvidersJson).filter(
+    (candidate) => candidate.id !== ORGANIZATION_DIRECT_ROUTES[provider].id
+  );
+  return { ...settings, modelProvidersJson: JSON.stringify([...providers, overlay]) };
+}
+function withOrganizationDirectCatalogProvider(settings, provider, input) {
+  return withOrganizationDirectProvider(
+    settings,
+    provider,
+    organizationDirectRegistryProvider(settings, provider, input)
+  );
+}
+function withOrganizationDirectCredential(settings, provider, apiKey, input) {
+  if (!apiKey.trim()) throw new Error(`organization ${provider} credential is empty`);
+  return withOrganizationDirectProvider(
+    settings,
+    provider,
+    organizationDirectRegistryProvider(settings, provider, { ...input, apiKey })
+  );
+}
+function withOrganizationAzureOpenAICatalogProvider(settings, input) {
+  return withOrganizationDirectCatalogProvider(settings, "azure_openai", input);
+}
+function withOrganizationAzureOpenAICredential(settings, apiKey, input) {
+  return withOrganizationDirectCredential(settings, "azure_openai", apiKey, input);
+}
 function withOrganizationGatewayCatalogProvider(settings, customModels = []) {
   if (customModels.length === 0) return settings;
   const providers = parseModelProvidersJson(settings.modelProvidersJson).filter(
@@ -6151,6 +6277,8 @@ function registryCredentialSource(provider) {
     case "anthropic-organization":
     case "openrouter-organization":
     case "opper-organization":
+    case "direct-openai-organization":
+    case "direct-azure-organization":
       return { kind: "organization_connection", mechanism: "api_key" };
     case "api-key":
     case "vercel-gateway-managed":
@@ -6184,6 +6312,8 @@ function registryBilling(provider) {
     case "anthropic-organization":
     case "openrouter-organization":
     case "opper-organization":
+    case "direct-openai-organization":
+    case "direct-azure-organization":
       return { upstreamPayer: "organization", metering: "external" };
     case "api-key":
     case "vercel-gateway-managed":
@@ -6576,6 +6706,8 @@ var NON_CREDIT_POLICY_PROVIDER_IDS = /* @__PURE__ */ new Set([
   ORGANIZATION_OPENROUTER_PROVIDER_ID,
   WORKSPACE_OPPER_PROVIDER_ID,
   ORGANIZATION_OPPER_PROVIDER_ID,
+  ORGANIZATION_OPENAI_PROVIDER_ID,
+  ORGANIZATION_AZURE_OPENAI_PROVIDER_ID,
   "workspace-anthropic",
   "organization-anthropic",
   "workspace-claude-subscription",
@@ -7057,6 +7189,7 @@ function reviewedProviderModelPricing(settings, provider, model, configured) {
       }
       break;
     case "direct-openai-workspace":
+    case "direct-openai-organization":
       if (isDirectOpenAiApiBaseUrl(provider.baseUrl) && upstream.startsWith("gpt-")) {
         priceId = upstream;
       }
@@ -8729,7 +8862,7 @@ function validateModelCatalogSettings(settings, source = process.env) {
   }
   const providerIds = /* @__PURE__ */ new Set();
   for (const provider of registryProviders) {
-    if (provider.kind === "vercel-gateway-managed" || provider.kind === "vercel-gateway-workspace" || provider.kind === "vercel-gateway-organization" || provider.kind === "direct-openai-workspace" || provider.kind === "direct-azure-workspace" || provider.kind === "openrouter-workspace" || provider.kind === "openrouter-organization" || provider.kind === "opper-workspace" || provider.kind === "opper-organization" || provider.kind === "anthropic-organization" || provider.kind === "anthropic-workspace" || provider.kind === "claude-subscription-workspace" || provider.kind === "claude-subscription-organization" || provider.kind === "xai-subscription") {
+    if (provider.kind === "vercel-gateway-managed" || provider.kind === "vercel-gateway-workspace" || provider.kind === "vercel-gateway-organization" || provider.kind === "direct-openai-workspace" || provider.kind === "direct-azure-workspace" || provider.kind === "direct-openai-organization" || provider.kind === "direct-azure-organization" || provider.kind === "openrouter-workspace" || provider.kind === "openrouter-organization" || provider.kind === "opper-workspace" || provider.kind === "opper-organization" || provider.kind === "anthropic-organization" || provider.kind === "anthropic-workspace" || provider.kind === "claude-subscription-workspace" || provider.kind === "claude-subscription-organization" || provider.kind === "xai-subscription") {
       throw new Error(
         `OPENGENI_MODEL_PROVIDERS_JSON provider kind ${provider.kind} is reserved for a reviewed Opengeni credential broker`
       );
@@ -9220,8 +9353,12 @@ export {
   OPPER_PROVIDER_ID,
   OPPER_STREAM_PROGRESS_TIMEOUT_MS,
   OPUS_5_5_AUTO_COMPACT_TOKEN_LIMIT,
+  ORGANIZATION_AZURE_OPENAI_MODEL_ID_PREFIX,
+  ORGANIZATION_AZURE_OPENAI_PROVIDER_ID,
   ORGANIZATION_GATEWAY_MODEL_ID_PREFIX,
   ORGANIZATION_GATEWAY_PROVIDER_ID,
+  ORGANIZATION_OPENAI_MODEL_ID_PREFIX,
+  ORGANIZATION_OPENAI_PROVIDER_ID,
   ORGANIZATION_OPENROUTER_MODEL_ID_PREFIX,
   ORGANIZATION_OPENROUTER_PROVIDER_ID,
   ORGANIZATION_OPPER_MODEL_ID_PREFIX,
@@ -9321,6 +9458,7 @@ export {
   configuredStaticUsageLimits,
   contextInputBudgetTokens,
   dbSearchPath,
+  decisionModelConfiguration,
   defaultModelPricing,
   defaultVoiceInputPricing,
   deploymentUnavailableFirstPartyMcpTools,
@@ -9353,6 +9491,8 @@ export {
   modelCostClassForConfiguredModel,
   opperCredentialProblem,
   opperMaxOutputTokens,
+  organizationDirectModelIdPrefix,
+  organizationDirectModelProviderOf,
   parseClaudeUsageHeaders,
   parseClaudeUsageResponse,
   parseExposedPorts,
@@ -9448,6 +9588,10 @@ export {
   withClaudeConnectionCredential,
   withCodexCatalogProvider,
   withDirectModelProviders,
+  withOrganizationAzureOpenAICatalogProvider,
+  withOrganizationAzureOpenAICredential,
+  withOrganizationDirectCatalogProvider,
+  withOrganizationDirectCredential,
   withOrganizationGatewayCatalogProvider,
   withOrganizationGatewayCredential,
   withOrganizationOpenRouterCatalogProvider,