@opengeni/contracts 5.5.0 → 5.5.2-canary.40656248492001

package/dist/model-connection-access.d.ts

@@ -3,6 +3,8 @@ export declare const ModelConnectionAccessPolicy: z.ZodObject<{
     allowedModels: z.ZodNullable<z.ZodArray<z.ZodString>>;
     allowedWorkspaces: z.ZodNullable<z.ZodArray<z.ZodString>>;
     allowPersonalWorkspaces: z.ZodBoolean;
+    allowedPeople: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    sharePersonal: z.ZodOptional<z.ZodLiteral<true>>;
     version: z.ZodNumber;
 }, z.core.$strict>;
 export declare const ModelConnectionAccessResponse: z.ZodObject<{
@@ -10,6 +12,8 @@ export declare const ModelConnectionAccessResponse: z.ZodObject<{
         allowedModels: z.ZodNullable<z.ZodArray<z.ZodString>>;
         allowedWorkspaces: z.ZodNullable<z.ZodArray<z.ZodString>>;
         allowPersonalWorkspaces: z.ZodBoolean;
+        allowedPeople: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        sharePersonal: z.ZodOptional<z.ZodLiteral<true>>;
         version: z.ZodNumber;
     }, z.core.$strict>;
     models: z.ZodArray<z.ZodObject<{
@@ -21,4 +25,13 @@ export declare const ModelConnectionAccessResponse: z.ZodObject<{
         name: z.ZodString;
     }, z.core.$strip>>;
     personalWorkspacesSupported: z.ZodBoolean;
+    peopleSupported: z.ZodOptional<z.ZodBoolean>;
+    people: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        email: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+    localWorkspaceIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    managedByWorkspaceId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    personalSharingSupported: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;

package/dist/model-context-inspector.d.ts

@@ -34,11 +34,13 @@ export declare const ModelContextInstructionModule: z.ZodObject<{
         connected_machine: "connected_machine";
         goals: "goals";
         knowledge: "knowledge";
+        media: "media";
         renderer_markdown: "renderer_markdown";
         repositories: "repositories";
         rig: "rig";
         runtime_mechanics: "runtime_mechanics";
         sandbox: "sandbox";
+        secrets: "secrets";
         skills: "skills";
         subagents: "subagents";
         workspace_environment: "workspace_environment";
@@ -78,11 +80,13 @@ export declare const ModelContextInstructionLayer: z.ZodObject<{
             connected_machine: "connected_machine";
             goals: "goals";
             knowledge: "knowledge";
+            media: "media";
             renderer_markdown: "renderer_markdown";
             repositories: "repositories";
             rig: "rig";
             runtime_mechanics: "runtime_mechanics";
             sandbox: "sandbox";
+            secrets: "secrets";
             skills: "skills";
             subagents: "subagents";
             workspace_environment: "workspace_environment";
@@ -183,11 +187,13 @@ export declare const ModelContextSnapshot: z.ZodObject<{
                 connected_machine: "connected_machine";
                 goals: "goals";
                 knowledge: "knowledge";
+                media: "media";
                 renderer_markdown: "renderer_markdown";
                 repositories: "repositories";
                 rig: "rig";
                 runtime_mechanics: "runtime_mechanics";
                 sandbox: "sandbox";
+                secrets: "secrets";
                 skills: "skills";
                 subagents: "subagents";
                 workspace_environment: "workspace_environment";
@@ -279,11 +285,13 @@ export declare const SessionModelContextResponse: z.ZodObject<{
                     connected_machine: "connected_machine";
                     goals: "goals";
                     knowledge: "knowledge";
+                    media: "media";
                     renderer_markdown: "renderer_markdown";
                     repositories: "repositories";
                     rig: "rig";
                     runtime_mechanics: "runtime_mechanics";
                     sandbox: "sandbox";
+                    secrets: "secrets";
                     skills: "skills";
                     subagents: "subagents";
                     workspace_environment: "workspace_environment";

package/dist/model-display.d.ts

@@ -0,0 +1,43 @@
+/**
+ * One display identity for a model everywhere outside the Models settings page.
+ *
+ * Catalog ids carry routing facts (`codex/`, `organization-claude-subscription/`,
+ * `workspace-openrouter/anthropic/...`) and custom models may have no curated
+ * label. People should only ever see the model itself: `GPT-6.1 Sol`,
+ * `Opus 5.5`. The same upstream model therefore renders identically
+ * whether an organization or a workspace connection serves it.
+ *
+ * Pure and dependency-free so the API, SDK, React package and web app share it.
+ */
+export type ModelVendor = "openai" | "anthropic" | "xai" | "google" | "meta" | "mistral" | "deepseek" | "moonshot" | "qwen" | "zhipu" | "nvidia";
+export type ModelDisplayInput = string | {
+    id: string;
+    label?: string | null | undefined;
+    logoUrl?: string | null | undefined;
+    upstreamModelId?: string | null | undefined;
+    deployment?: {
+        upstreamModelId?: string | null | undefined;
+    } | null | undefined;
+};
+/** Catalog maker logo; remote images must use HTTPS without embedded credentials. */
+export declare function modelLogoUrl(input: ModelDisplayInput): string | null;
+/** The upstream model slug without routing prefixes or `:variant` suffixes. */
+export declare function modelSlug(value: string): string;
+/** `claude-opus-5-5` → `Claude Opus 5.5`, `codex/gpt-6.1-sol` → `GPT-6.1 Sol`. */
+export declare function humanizeModelSlug(value: string): string;
+/**
+ * True when a catalog label is only the model's identifier: empty, or exactly
+ * its id, upstream id, or any trailing path of them (`claude-opus-4-8`,
+ * `anthropic/claude-sonnet-4.6`). Any other label is a curated name and wins.
+ */
+export declare function isRawModelLabel(label: string, ids?: readonly (string | null | undefined)[]): boolean;
+/**
+ * The clean name to show for a model: its curated catalog label when it has
+ * one, otherwise a readable form of the upstream model id. Never a routing
+ * prefix, connection id or connection scope. Anthropic's Opus, Sonnet and
+ * Haiku families drop the redundant `Claude` word (the maker mark already says
+ * it): `Opus 5.5`, `Sonnet 4.6 EU`.
+ */
+export declare function modelDisplayName(input: ModelDisplayInput): string;
+/** Who makes the model, for its logo. Null when it cannot be told. */
+export declare function modelVendor(input: ModelDisplayInput): ModelVendor | null;

package/dist/model-display.js

@@ -0,0 +1,17 @@
+import {
+  humanizeModelSlug,
+  isRawModelLabel,
+  modelDisplayName,
+  modelLogoUrl,
+  modelSlug,
+  modelVendor
+} from "./chunk-2ZIHHL72.js";
+export {
+  humanizeModelSlug,
+  isRawModelLabel,
+  modelDisplayName,
+  modelLogoUrl,
+  modelSlug,
+  modelVendor
+};
+//# sourceMappingURL=model-display.js.map

package/dist/model-display.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/model-picker-order.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/model-picker-order.ts"],"sourcesContent":["export type ModelPickerBillingClass =\n  // Legacy public identifier for the OpenGeni presentation group, including\n  // free deployment models. Never use this UI grouping to decide settlement.\n  | \"opengeni_credits\"\n  | \"external\"\n  | \"codex_subscription\"\n  | \"supergrok_subscription\"\n  | \"claude_subscription\"\n  | \"byok\"\n  | \"organization_byok\";\n\n// Every closed billing class has a unique first character. Keeping the order\n// as initials avoids duplicating the full public labels in browser bundles.\nconst MODEL_PICKER_BILLING_CLASS_ORDER: readonly ModelPickerBillingClass[] = [\n  \"opengeni_credits\",\n  \"external\",\n  \"codex_subscription\",\n  \"supergrok_subscription\",\n  \"claude_subscription\",\n  \"byok\",\n  \"organization_byok\",\n];\n\nexport type ModelPickerBillingCandidate = {\n  provider?: string | undefined;\n  providerId?: string | undefined;\n  source?: string | undefined;\n  cost?: \"free\" | \"credits\" | \"subscription\" | \"workspace\" | \"organization\" | undefined;\n  billing?:\n    | {\n        upstreamPayer?: string | undefined;\n        metering?: string | undefined;\n      }\n    | undefined;\n  credentialSource?:\n    | {\n        kind?: string | undefined;\n        provider?: string | undefined;\n      }\n    | undefined;\n};\n\nexport function modelPickerBillingClassFor(\n  model: ModelPickerBillingCandidate,\n): ModelPickerBillingClass {\n  if (\n    model.provider === \"workspace-claude-subscription\" ||\n    model.providerId === \"workspace-claude-subscription\" ||\n    model.provider === \"organization-claude-subscription\" ||\n    model.providerId === \"organization-claude-subscription\"\n  )\n    return \"claude_subscription\";\n  if (model.cost === \"credits\" || model.cost === \"free\") return \"opengeni_credits\";\n  if (model.cost === \"workspace\") return \"byok\";\n  if (model.cost === \"organization\") return \"organization_byok\";\n  const source = model.source;\n  const credential = model.credentialSource;\n  const payer = model.billing?.upstreamPayer;\n  if (\n    source === \"supergrok\" ||\n    (credential?.kind === \"connected_subscription\" && credential.provider === \"xai\")\n  ) {\n    return \"supergrok_subscription\";\n  }\n  if (\n    source === \"codex\" ||\n    credential?.kind === \"connected_subscription\" ||\n    payer === \"connected_subscription\"\n  ) {\n    return \"codex_subscription\";\n  }\n  if (\n    source === \"workspace_gateway\" ||\n    credential?.kind === \"workspace_connection\" ||\n    payer === \"workspace\"\n  ) {\n    return \"byok\";\n  }\n  if (credential?.kind === \"organization_connection\" || payer === \"organization\") {\n    return \"organization_byok\";\n  }\n  return \"opengeni_credits\";\n}\n\nexport function compareModelPickerOrder(\n  left: { billingClass: ModelPickerBillingClass; selectable: boolean; label: string },\n  right: { billingClass: ModelPickerBillingClass; selectable: boolean; label: string },\n): number {\n  const classDelta =\n    MODEL_PICKER_BILLING_CLASS_ORDER.indexOf(left.billingClass) -\n    MODEL_PICKER_BILLING_CLASS_ORDER.indexOf(right.billingClass);\n  return (\n    classDelta ||\n    +right.selectable - +left.selectable ||\n    (left.label < right.label ? -1 : left.label > right.label ? 1 : 0)\n  );\n}\n"],"mappings":";AAaA,IAAM,mCAAuE;AAAA,EAC3E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAqBO,SAAS,2BACd,OACyB;AACzB,MACE,MAAM,aAAa,mCACnB,MAAM,eAAe,mCACrB,MAAM,aAAa,sCACnB,MAAM,eAAe;AAErB,WAAO;AACT,MAAI,MAAM,SAAS,aAAa,MAAM,SAAS,OAAQ,QAAO;AAC9D,MAAI,MAAM,SAAS,YAAa,QAAO;AACvC,MAAI,MAAM,SAAS,eAAgB,QAAO;AAC1C,QAAM,SAAS,MAAM;AACrB,QAAM,aAAa,MAAM;AACzB,QAAM,QAAQ,MAAM,SAAS;AAC7B,MACE,WAAW,eACV,YAAY,SAAS,4BAA4B,WAAW,aAAa,OAC1E;AACA,WAAO;AAAA,EACT;AACA,MACE,WAAW,WACX,YAAY,SAAS,4BACrB,UAAU,0BACV;AACA,WAAO;AAAA,EACT;AACA,MACE,WAAW,uBACX,YAAY,SAAS,0BACrB,UAAU,aACV;AACA,WAAO;AAAA,EACT;AACA,MAAI,YAAY,SAAS,6BAA6B,UAAU,gBAAgB;AAC9E,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,wBACd,MACA,OACQ;AACR,QAAM,aACJ,iCAAiC,QAAQ,KAAK,YAAY,IAC1D,iCAAiC,QAAQ,MAAM,YAAY;AAC7D,SACE,cACA,CAAC,MAAM,aAAa,CAAC,KAAK,eACzB,KAAK,QAAQ,MAAM,QAAQ,KAAK,KAAK,QAAQ,MAAM,QAAQ,IAAI;AAEpE;","names":[]}
+{"version":3,"sources":["../src/model-picker-order.ts"],"sourcesContent":["export type ModelPickerBillingClass =\n  // Legacy public identifier for the Opengeni presentation group, including\n  // free deployment models. Never use this UI grouping to decide settlement.\n  | \"opengeni_credits\"\n  | \"external\"\n  | \"codex_subscription\"\n  | \"supergrok_subscription\"\n  | \"claude_subscription\"\n  | \"byok\"\n  | \"organization_byok\";\n\n// Every closed billing class has a unique first character. Keeping the order\n// as initials avoids duplicating the full public labels in browser bundles.\nconst MODEL_PICKER_BILLING_CLASS_ORDER: readonly ModelPickerBillingClass[] = [\n  \"opengeni_credits\",\n  \"external\",\n  \"codex_subscription\",\n  \"supergrok_subscription\",\n  \"claude_subscription\",\n  \"byok\",\n  \"organization_byok\",\n];\n\nexport type ModelPickerBillingCandidate = {\n  provider?: string | undefined;\n  providerId?: string | undefined;\n  source?: string | undefined;\n  cost?: \"free\" | \"credits\" | \"subscription\" | \"workspace\" | \"organization\" | undefined;\n  billing?:\n    | {\n        upstreamPayer?: string | undefined;\n        metering?: string | undefined;\n      }\n    | undefined;\n  credentialSource?:\n    | {\n        kind?: string | undefined;\n        provider?: string | undefined;\n      }\n    | undefined;\n};\n\nexport function modelPickerBillingClassFor(\n  model: ModelPickerBillingCandidate,\n): ModelPickerBillingClass {\n  if (\n    model.provider === \"workspace-claude-subscription\" ||\n    model.providerId === \"workspace-claude-subscription\" ||\n    model.provider === \"organization-claude-subscription\" ||\n    model.providerId === \"organization-claude-subscription\"\n  )\n    return \"claude_subscription\";\n  if (model.cost === \"credits\" || model.cost === \"free\") return \"opengeni_credits\";\n  if (model.cost === \"workspace\") return \"byok\";\n  if (model.cost === \"organization\") return \"organization_byok\";\n  const source = model.source;\n  const credential = model.credentialSource;\n  const payer = model.billing?.upstreamPayer;\n  if (\n    source === \"supergrok\" ||\n    (credential?.kind === \"connected_subscription\" && credential.provider === \"xai\")\n  ) {\n    return \"supergrok_subscription\";\n  }\n  if (\n    source === \"codex\" ||\n    credential?.kind === \"connected_subscription\" ||\n    payer === \"connected_subscription\"\n  ) {\n    return \"codex_subscription\";\n  }\n  if (\n    source === \"workspace_gateway\" ||\n    credential?.kind === \"workspace_connection\" ||\n    payer === \"workspace\"\n  ) {\n    return \"byok\";\n  }\n  if (credential?.kind === \"organization_connection\" || payer === \"organization\") {\n    return \"organization_byok\";\n  }\n  return \"opengeni_credits\";\n}\n\nexport function compareModelPickerOrder(\n  left: { billingClass: ModelPickerBillingClass; selectable: boolean; label: string },\n  right: { billingClass: ModelPickerBillingClass; selectable: boolean; label: string },\n): number {\n  const classDelta =\n    MODEL_PICKER_BILLING_CLASS_ORDER.indexOf(left.billingClass) -\n    MODEL_PICKER_BILLING_CLASS_ORDER.indexOf(right.billingClass);\n  return (\n    classDelta ||\n    +right.selectable - +left.selectable ||\n    (left.label < right.label ? -1 : left.label > right.label ? 1 : 0)\n  );\n}\n"],"mappings":";AAaA,IAAM,mCAAuE;AAAA,EAC3E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAqBO,SAAS,2BACd,OACyB;AACzB,MACE,MAAM,aAAa,mCACnB,MAAM,eAAe,mCACrB,MAAM,aAAa,sCACnB,MAAM,eAAe;AAErB,WAAO;AACT,MAAI,MAAM,SAAS,aAAa,MAAM,SAAS,OAAQ,QAAO;AAC9D,MAAI,MAAM,SAAS,YAAa,QAAO;AACvC,MAAI,MAAM,SAAS,eAAgB,QAAO;AAC1C,QAAM,SAAS,MAAM;AACrB,QAAM,aAAa,MAAM;AACzB,QAAM,QAAQ,MAAM,SAAS;AAC7B,MACE,WAAW,eACV,YAAY,SAAS,4BAA4B,WAAW,aAAa,OAC1E;AACA,WAAO;AAAA,EACT;AACA,MACE,WAAW,WACX,YAAY,SAAS,4BACrB,UAAU,0BACV;AACA,WAAO;AAAA,EACT;AACA,MACE,WAAW,uBACX,YAAY,SAAS,0BACrB,UAAU,aACV;AACA,WAAO;AAAA,EACT;AACA,MAAI,YAAY,SAAS,6BAA6B,UAAU,gBAAgB;AAC9E,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,wBACd,MACA,OACQ;AACR,QAAM,aACJ,iCAAiC,QAAQ,KAAK,YAAY,IAC1D,iCAAiC,QAAQ,MAAM,YAAY;AAC7D,SACE,cACA,CAAC,MAAM,aAAa,CAAC,KAAK,eACzB,KAAK,QAAQ,MAAM,QAAQ,KAAK,KAAK,QAAQ,MAAM,QAAQ,IAAI;AAEpE;","names":[]}

package/dist/model-residency.d.ts

@@ -0,0 +1,304 @@
+import { z } from "zod";
+/**
+ * Where a model route processes prompts and outputs, and how we know.
+ *
+ * EU status is derived only from this record, never from a model name, label
+ * or provider id. A route without a record is `unknown`, and unknown is never
+ * EU. `eu` follows GDPR: EEA processing counts the same as EU processing, so a
+ * provider's EU data zone (Azure Data Zone EU, Bedrock `eu.` inference
+ * profiles) qualifies even when it can include Norway or Switzerland.
+ */
+export declare const MODEL_PROCESSING_GEOGRAPHIES: readonly ["eu", "us", "global", "other", "unknown"];
+export declare const ModelProcessingGeography: z.ZodEnum<{
+    eu: "eu";
+    global: "global";
+    other: "other";
+    unknown: "unknown";
+    us: "us";
+}>;
+export type ModelProcessingGeography = z.infer<typeof ModelProcessingGeography>;
+/** How the provider places the request. Global routing types can never be EU. */
+export declare const MODEL_DEPLOYMENT_TYPES: readonly ["azure_regional", "azure_data_zone", "azure_global", "bedrock_regional", "bedrock_geo_profile", "bedrock_global_profile", "gateway", "subscription", "provider_default", "self_hosted", "unknown"];
+export declare const ModelDeploymentType: z.ZodEnum<{
+    azure_data_zone: "azure_data_zone";
+    azure_global: "azure_global";
+    azure_regional: "azure_regional";
+    bedrock_geo_profile: "bedrock_geo_profile";
+    bedrock_global_profile: "bedrock_global_profile";
+    bedrock_regional: "bedrock_regional";
+    gateway: "gateway";
+    provider_default: "provider_default";
+    self_hosted: "self_hosted";
+    subscription: "subscription";
+    unknown: "unknown";
+}>;
+export type ModelDeploymentType = z.infer<typeof ModelDeploymentType>;
+/**
+ * The only deployment types that can be EU. Anything else, including gateways,
+ * subscriptions, global routing, unknown and any type added later, can never
+ * be EU, whatever a declaration says.
+ */
+export declare const EU_CAPABLE_DEPLOYMENT_TYPES: readonly ModelDeploymentType[];
+/**
+ * Cloud regions an EU claim may name, by deployment family: EEA regions plus
+ * Switzerland, which provider EU data zones can include. A region outside
+ * these lists rejects the claim (names only ever reject, never grant). The
+ * United Kingdom is not in the EEA and is not listed.
+ */
+export declare const EU_AZURE_REGIONS: readonly string[];
+export declare const EU_AWS_REGIONS: readonly string[];
+export declare const MODEL_RESIDENCY_EVIDENCE_SOURCES: readonly [
+/** The deployment operator declared it in the reviewed catalog or environment. */
+"operator_declaration", 
+/** Published provider documentation for this exact route type. */
+"provider_documentation", 
+/** A provider API reported it (for example an Azure deployment SKU lookup). */
+"provider_api", 
+/** A code-owned rule for a provider kind, reviewed with the code. */
+"built_in_rule", 
+/** An organization admin declared it for their own connection. */
+"admin_declaration", 
+/** Nothing establishes where this route processes data. */
+"none"];
+export declare const ModelResidencyEvidenceSource: z.ZodEnum<{
+    admin_declaration: "admin_declaration";
+    built_in_rule: "built_in_rule";
+    none: "none";
+    operator_declaration: "operator_declaration";
+    provider_api: "provider_api";
+    provider_documentation: "provider_documentation";
+}>;
+export type ModelResidencyEvidenceSource = z.infer<typeof ModelResidencyEvidenceSource>;
+export declare const ModelResidencyEvidenceV1: z.ZodObject<{
+    source: z.ZodEnum<{
+        admin_declaration: "admin_declaration";
+        built_in_rule: "built_in_rule";
+        none: "none";
+        operator_declaration: "operator_declaration";
+        provider_api: "provider_api";
+        provider_documentation: "provider_documentation";
+    }>;
+    reference: z.ZodNullable<z.ZodString>;
+    verifiedAt: z.ZodNullable<z.ZodUnion<readonly [z.ZodISODate, z.ZodISODateTime]>>;
+}, z.core.$strict>;
+export type ModelResidencyEvidenceV1 = z.infer<typeof ModelResidencyEvidenceV1>;
+/** Problems that make a residency record unable to claim its geography. */
+export declare function modelResidencyProblems(residency: {
+    geography: ModelProcessingGeography;
+    deploymentType: ModelDeploymentType;
+    regions: readonly string[];
+    evidence: {
+        source: ModelResidencyEvidenceSource;
+        reference: string | null;
+    };
+}): {
+    path: string[];
+    message: string;
+}[];
+/** Bedrock inference profile prefixes that route outside the EU. */
+export declare const NON_EU_BEDROCK_PROFILE_PREFIXES: readonly string[];
+/**
+ * Hosts that route globally or process outside the EU. An EU claim on a route
+ * whose endpoint is one of these exact hosts is wrong. Exact match only:
+ * `eu.api.openai.com`, for example, is a different endpoint.
+ */
+export declare const NON_EU_MODEL_HOSTS: readonly string[];
+/**
+ * The deployment an endpoint URL calls, from its `/deployments/{name}` path
+ * segment (Azure OpenAI's deployment-path form), or null when no segment
+ * holds or hides a `deployments` marker. Such an endpoint runs that
+ * deployment whatever model the request body names.
+ *
+ * Only a plain path is read: empty segments are dropped, the marker matches in
+ * any case (percent-encoded too), and the name and every segment after it must
+ * be readable `[A-Za-z0-9._-]+` and not `.` or `..`. Anything else returns an
+ * empty string, meaning a deployment that can't be read, which is refused
+ * under EU. That covers a missing name, a second marker, a marker hidden in a
+ * longer or encoded segment (`deployments;`, `x%2Fdeployments`), and a later
+ * segment that could lead somewhere else once decoded (`..%2F`, `%5C`, `;`).
+ */
+export declare function modelEndpointDeployment(url: string | URL): string | null;
+/**
+ * Problems that make an EU claim wrong for the route it is declared on: a
+ * Bedrock upstream id with a non-EU inference profile prefix, a Bedrock
+ * geographic profile that is not `eu.`, an endpoint on a known global host,
+ * or a deployment-path endpoint that calls a different deployment than the
+ * model. Every resolver applies it. Names only ever reject a claim, never
+ * grant one.
+ */
+export declare function modelResidencyRouteProblems(residency: {
+    geography: ModelProcessingGeography;
+    deploymentType: ModelDeploymentType;
+}, route: {
+    upstreamModelId?: string | null | undefined;
+    baseUrl?: string | null | undefined;
+}): {
+    path: string[];
+    message: string;
+}[];
+/** The fields that move processing; evidence text and dates do not. */
+export declare function modelResidencyClaim(residency: {
+    geography: ModelProcessingGeography;
+    deploymentType: ModelDeploymentType;
+    regions: readonly string[];
+}): {
+    geography: ModelProcessingGeography;
+    deploymentType: ModelDeploymentType;
+    regions: string[];
+};
+export declare const ModelResidencyV1: z.ZodObject<{
+    geography: z.ZodEnum<{
+        eu: "eu";
+        global: "global";
+        other: "other";
+        unknown: "unknown";
+        us: "us";
+    }>;
+    deploymentType: z.ZodEnum<{
+        azure_data_zone: "azure_data_zone";
+        azure_global: "azure_global";
+        azure_regional: "azure_regional";
+        bedrock_geo_profile: "bedrock_geo_profile";
+        bedrock_global_profile: "bedrock_global_profile";
+        bedrock_regional: "bedrock_regional";
+        gateway: "gateway";
+        provider_default: "provider_default";
+        self_hosted: "self_hosted";
+        subscription: "subscription";
+        unknown: "unknown";
+    }>;
+    regions: z.ZodArray<z.ZodString>;
+    evidence: z.ZodObject<{
+        source: z.ZodEnum<{
+            admin_declaration: "admin_declaration";
+            built_in_rule: "built_in_rule";
+            none: "none";
+            operator_declaration: "operator_declaration";
+            provider_api: "provider_api";
+            provider_documentation: "provider_documentation";
+        }>;
+        reference: z.ZodNullable<z.ZodString>;
+        verifiedAt: z.ZodNullable<z.ZodUnion<readonly [z.ZodISODate, z.ZodISODateTime]>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ModelResidencyV1 = z.infer<typeof ModelResidencyV1>;
+/** Operator-facing declaration: the same record, with optional regions and dates. */
+export declare const ModelResidencyDeclaration: z.ZodObject<{
+    geography: z.ZodEnum<{
+        eu: "eu";
+        global: "global";
+        other: "other";
+        unknown: "unknown";
+        us: "us";
+    }>;
+    deploymentType: z.ZodEnum<{
+        azure_data_zone: "azure_data_zone";
+        azure_global: "azure_global";
+        azure_regional: "azure_regional";
+        bedrock_geo_profile: "bedrock_geo_profile";
+        bedrock_global_profile: "bedrock_global_profile";
+        bedrock_regional: "bedrock_regional";
+        gateway: "gateway";
+        provider_default: "provider_default";
+        self_hosted: "self_hosted";
+        subscription: "subscription";
+        unknown: "unknown";
+    }>;
+    regions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    evidence: z.ZodObject<{
+        source: z.ZodEnum<{
+            operator_declaration: "operator_declaration";
+            provider_documentation: "provider_documentation";
+        }>;
+        reference: z.ZodString;
+        verifiedAt: z.ZodDefault<z.ZodNullable<z.ZodUnion<readonly [z.ZodISODate, z.ZodISODateTime]>>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ModelResidencyDeclaration = z.input<typeof ModelResidencyDeclaration>;
+/** The record for a route nothing describes. Unknown is never EU. */
+export declare const UNKNOWN_MODEL_RESIDENCY: ModelResidencyV1;
+/**
+ * The single EU predicate. Anything malformed, missing, unknown, globally
+ * routed or without evidence is not EU.
+ */
+export declare function isEuResidency(residency: unknown): boolean;
+/** Client-safe projection: no evidence reference text, which may name internal resources. */
+export declare const ClientModelResidencyV1: z.ZodObject<{
+    geography: z.ZodEnum<{
+        eu: "eu";
+        global: "global";
+        other: "other";
+        unknown: "unknown";
+        us: "us";
+    }>;
+    deploymentType: z.ZodEnum<{
+        azure_data_zone: "azure_data_zone";
+        azure_global: "azure_global";
+        azure_regional: "azure_regional";
+        bedrock_geo_profile: "bedrock_geo_profile";
+        bedrock_global_profile: "bedrock_global_profile";
+        bedrock_regional: "bedrock_regional";
+        gateway: "gateway";
+        provider_default: "provider_default";
+        self_hosted: "self_hosted";
+        subscription: "subscription";
+        unknown: "unknown";
+    }>;
+    regions: z.ZodArray<z.ZodString>;
+    evidenceSource: z.ZodEnum<{
+        admin_declaration: "admin_declaration";
+        built_in_rule: "built_in_rule";
+        none: "none";
+        operator_declaration: "operator_declaration";
+        provider_api: "provider_api";
+        provider_documentation: "provider_documentation";
+    }>;
+    eu: z.ZodBoolean;
+}, z.core.$strict>;
+export type ClientModelResidencyV1 = z.infer<typeof ClientModelResidencyV1>;
+export declare function projectClientModelResidency(residency: ModelResidencyV1): ClientModelResidencyV1;
+/**
+ * Where the route that served one model call processes data, as recorded on
+ * the call's `model_call_facts` row and its durable `agent.model.usage` event:
+ * the residency claim only. Evidence is never recorded, because its reference
+ * text may name internal resources. An eu claim must still satisfy the same
+ * deployment-type and region rules as the route record it came from; a stored
+ * value that does not is read back as unknown, never as eu.
+ */
+export declare const ModelCallProcessingResidencyV1: z.ZodObject<{
+    geography: z.ZodEnum<{
+        eu: "eu";
+        global: "global";
+        other: "other";
+        unknown: "unknown";
+        us: "us";
+    }>;
+    deploymentType: z.ZodEnum<{
+        azure_data_zone: "azure_data_zone";
+        azure_global: "azure_global";
+        azure_regional: "azure_regional";
+        bedrock_geo_profile: "bedrock_geo_profile";
+        bedrock_global_profile: "bedrock_global_profile";
+        bedrock_regional: "bedrock_regional";
+        gateway: "gateway";
+        provider_default: "provider_default";
+        self_hosted: "self_hosted";
+        subscription: "subscription";
+        unknown: "unknown";
+    }>;
+    regions: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type ModelCallProcessingResidencyV1 = z.infer<typeof ModelCallProcessingResidencyV1>;
+/**
+ * The recorded processing residency for a call served by a route with this
+ * residency record. A missing or invalid record is recorded as unknown.
+ */
+export declare function modelCallProcessingResidency(residency: ModelResidencyV1 | null | undefined): ModelCallProcessingResidencyV1;
+/**
+ * Read a recorded processing residency (a fact column or event payload field).
+ * Absent or null means the call was recorded before calls carried one. A value
+ * that is present but malformed, or an eu claim that breaks the eu rules
+ * (see `ModelCallProcessingResidencyV1`), is unknown. Any other field, such as
+ * evidence, is dropped.
+ */
+export declare function parseModelCallProcessingResidency(value: unknown): ModelCallProcessingResidencyV1 | null;