@opengeni/contracts 5.5.0 → 5.5.2-canary.40656248492001

package/dist/organization-model-usage.d.ts

@@ -0,0 +1,146 @@
+import { z } from "zod";
+/** Exact per-billing-path sums from per-call model facts; bigint sums stay strings. */
+export declare const OrganizationModelUsageTotals: z.ZodObject<{
+    billingPath: z.ZodEnum<{
+        external: "external";
+        opengeni_credits: "opengeni_credits";
+    }>;
+    calls: z.ZodString;
+    inputTokens: z.ZodString;
+    outputTokens: z.ZodString;
+    cachedTokens: z.ZodString;
+    cacheInputTokens: z.ZodString;
+    cacheWriteTokens: z.ZodString;
+    totalTokens: z.ZodString;
+    tokenKnownCalls: z.ZodString;
+    cacheKnownCalls: z.ZodString;
+    creditMicros: z.ZodString;
+    estimatedProviderMicros: z.ZodString;
+    estimatedProviderKnownCalls: z.ZodString;
+}, z.core.$strip>;
+export type OrganizationModelUsageTotals = z.infer<typeof OrganizationModelUsageTotals>;
+export declare const OrganizationModelUsageQuery: z.ZodObject<{
+    period: z.ZodDefault<z.ZodEnum<{
+        month: "month";
+        today: "today";
+        week: "week";
+        ytd: "ytd";
+    }>>;
+    afterWorkspaceId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const OrganizationModelUsage: z.ZodObject<{
+    accountId: z.ZodString;
+    period: z.ZodEnum<{
+        month: "month";
+        today: "today";
+        week: "week";
+        ytd: "ytd";
+    }>;
+    since: z.ZodString;
+    until: z.ZodString;
+    billing: z.ZodArray<z.ZodObject<{
+        billingPath: z.ZodEnum<{
+            external: "external";
+            opengeni_credits: "opengeni_credits";
+        }>;
+        calls: z.ZodString;
+        inputTokens: z.ZodString;
+        outputTokens: z.ZodString;
+        cachedTokens: z.ZodString;
+        cacheInputTokens: z.ZodString;
+        cacheWriteTokens: z.ZodString;
+        totalTokens: z.ZodString;
+        tokenKnownCalls: z.ZodString;
+        cacheKnownCalls: z.ZodString;
+        creditMicros: z.ZodString;
+        estimatedProviderMicros: z.ZodString;
+        estimatedProviderKnownCalls: z.ZodString;
+    }, z.core.$strip>>;
+    payers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        calls: z.ZodString;
+        inputTokens: z.ZodString;
+        outputTokens: z.ZodString;
+        cachedTokens: z.ZodString;
+        cacheInputTokens: z.ZodString;
+        cacheWriteTokens: z.ZodString;
+        totalTokens: z.ZodString;
+        tokenKnownCalls: z.ZodString;
+        cacheKnownCalls: z.ZodString;
+        creditMicros: z.ZodString;
+        estimatedProviderMicros: z.ZodString;
+        estimatedProviderKnownCalls: z.ZodString;
+        payer: z.ZodEnum<{
+            opengeni_credits: "opengeni_credits";
+            own_key: "own_key";
+            subscription: "subscription";
+        }>;
+    }, z.core.$strip>>>;
+    models: z.ZodArray<z.ZodObject<{
+        provider: z.ZodString;
+        model: z.ZodString;
+        totals: z.ZodObject<{
+            billingPath: z.ZodEnum<{
+                external: "external";
+                opengeni_credits: "opengeni_credits";
+            }>;
+            calls: z.ZodString;
+            inputTokens: z.ZodString;
+            outputTokens: z.ZodString;
+            cachedTokens: z.ZodString;
+            cacheInputTokens: z.ZodString;
+            cacheWriteTokens: z.ZodString;
+            totalTokens: z.ZodString;
+            tokenKnownCalls: z.ZodString;
+            cacheKnownCalls: z.ZodString;
+            creditMicros: z.ZodString;
+            estimatedProviderMicros: z.ZodString;
+            estimatedProviderKnownCalls: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    modelsTruncated: z.ZodBoolean;
+    workspaces: z.ZodArray<z.ZodObject<{
+        workspaceId: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        billing: z.ZodArray<z.ZodObject<{
+            billingPath: z.ZodEnum<{
+                external: "external";
+                opengeni_credits: "opengeni_credits";
+            }>;
+            calls: z.ZodString;
+            inputTokens: z.ZodString;
+            outputTokens: z.ZodString;
+            cachedTokens: z.ZodString;
+            cacheInputTokens: z.ZodString;
+            cacheWriteTokens: z.ZodString;
+            totalTokens: z.ZodString;
+            tokenKnownCalls: z.ZodString;
+            cacheKnownCalls: z.ZodString;
+            creditMicros: z.ZodString;
+            estimatedProviderMicros: z.ZodString;
+            estimatedProviderKnownCalls: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    personal: z.ZodObject<{
+        workspacesWithUsage: z.ZodString;
+        billing: z.ZodArray<z.ZodObject<{
+            billingPath: z.ZodEnum<{
+                external: "external";
+                opengeni_credits: "opengeni_credits";
+            }>;
+            calls: z.ZodString;
+            inputTokens: z.ZodString;
+            outputTokens: z.ZodString;
+            cachedTokens: z.ZodString;
+            cacheInputTokens: z.ZodString;
+            cacheWriteTokens: z.ZodString;
+            totalTokens: z.ZodString;
+            tokenKnownCalls: z.ZodString;
+            cacheKnownCalls: z.ZodString;
+            creditMicros: z.ZodString;
+            estimatedProviderMicros: z.ZodString;
+            estimatedProviderKnownCalls: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    nextWorkspaceCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type OrganizationModelUsage = z.infer<typeof OrganizationModelUsage>;

package/dist/organization-model-usage.js

@@ -0,0 +1,87 @@
+import {
+  OrganizationUsagePeriod,
+  OrganizationUsageQuery
+} from "./chunk-7EQGGZBY.js";
+import {
+  boolean,
+  dateTime,
+  nullableString,
+  nullableUuid,
+  optionalUuid,
+  string,
+  uuid
+} from "./chunk-AQYDZUJV.js";
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
+// src/organization-model-usage.ts
+import { z } from "zod";
+var BigIntString = /* @__PURE__ */ defineSchema(() => string.regex(/^\d+$/));
+var OrganizationModelUsageBillingPath = /* @__PURE__ */ defineSchema(
+  () => z.enum(["opengeni_credits", "external"])
+);
+var OrganizationModelUsageTotals = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    billingPath: OrganizationModelUsageBillingPath,
+    calls: BigIntString,
+    inputTokens: BigIntString,
+    outputTokens: BigIntString,
+    cachedTokens: BigIntString,
+    cacheInputTokens: BigIntString,
+    cacheWriteTokens: BigIntString,
+    totalTokens: BigIntString,
+    tokenKnownCalls: BigIntString,
+    cacheKnownCalls: BigIntString,
+    creditMicros: BigIntString,
+    estimatedProviderMicros: BigIntString,
+    estimatedProviderKnownCalls: BigIntString
+  })
+);
+var OrganizationModelUsageQuery = /* @__PURE__ */ defineSchema(
+  () => OrganizationUsageQuery.extend({
+    afterWorkspaceId: optionalUuid
+  })
+);
+var OrganizationModelUsage = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    accountId: uuid,
+    period: OrganizationUsagePeriod,
+    since: dateTime,
+    until: dateTime,
+    billing: z.array(OrganizationModelUsageTotals).max(2),
+    /** Exact uncapped per-fact payer split; independent of the top-model list. */
+    payers: z.array(
+      OrganizationModelUsageTotals.omit({ billingPath: true }).extend({
+        payer: z.enum(["opengeni_credits", "subscription", "own_key"])
+      })
+    ).default([]),
+    models: z.array(
+      z.object({
+        provider: string,
+        model: string,
+        totals: OrganizationModelUsageTotals
+      })
+    ).max(50),
+    modelsTruncated: boolean,
+    workspaces: z.array(
+      z.object({
+        workspaceId: uuid,
+        name: nullableString,
+        billing: z.array(OrganizationModelUsageTotals).max(2)
+      })
+    ).max(50),
+    /** Every Personal workspace, aggregated; individual Personal workspaces are never named. */
+    personal: z.object({
+      workspacesWithUsage: BigIntString,
+      billing: z.array(OrganizationModelUsageTotals).max(2)
+    }),
+    nextWorkspaceCursor: nullableUuid
+  })
+);
+export {
+  OrganizationModelUsage,
+  OrganizationModelUsageQuery,
+  OrganizationModelUsageTotals
+};
+//# sourceMappingURL=organization-model-usage.js.map

package/dist/organization-model-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/organization-model-usage.ts"],"sourcesContent":["import * as primitives from \"./primitives\";\nimport { defineSchema } from \"./define-schema\";\n// Server-parsed only; kept off the root contracts index so browser bundles that\n// import the root never carry these schemas.\nimport { z } from \"zod\";\n\nimport { OrganizationUsagePeriod, OrganizationUsageQuery } from \"./organization-usage\";\n\nconst BigIntString = /* @__PURE__ */ defineSchema(() => primitives.string.regex(/^\\d+$/));\nconst OrganizationModelUsageBillingPath = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"opengeni_credits\", \"external\"]),\n);\n\n/** Exact per-billing-path sums from per-call model facts; bigint sums stay strings. */\nexport const OrganizationModelUsageTotals = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    billingPath: OrganizationModelUsageBillingPath,\n    calls: BigIntString,\n    inputTokens: BigIntString,\n    outputTokens: BigIntString,\n    cachedTokens: BigIntString,\n    cacheInputTokens: BigIntString,\n    cacheWriteTokens: BigIntString,\n    totalTokens: BigIntString,\n    tokenKnownCalls: BigIntString,\n    cacheKnownCalls: BigIntString,\n    creditMicros: BigIntString,\n    estimatedProviderMicros: BigIntString,\n    estimatedProviderKnownCalls: BigIntString,\n  }),\n);\nexport type OrganizationModelUsageTotals = z.infer<typeof OrganizationModelUsageTotals>;\n\nexport const OrganizationModelUsageQuery = /* @__PURE__ */ defineSchema(() =>\n  OrganizationUsageQuery.extend({\n    afterWorkspaceId: primitives.optionalUuid,\n  }),\n);\n\nexport const OrganizationModelUsage = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    accountId: primitives.uuid,\n    period: OrganizationUsagePeriod,\n    since: primitives.dateTime,\n    until: primitives.dateTime,\n    billing: z.array(OrganizationModelUsageTotals).max(2),\n    /** Exact uncapped per-fact payer split; independent of the top-model list. */\n    payers: z\n      .array(\n        OrganizationModelUsageTotals.omit({ billingPath: true }).extend({\n          payer: z.enum([\"opengeni_credits\", \"subscription\", \"own_key\"]),\n        }),\n      )\n      .default([]),\n    models: z\n      .array(\n        z.object({\n          provider: primitives.string,\n          model: primitives.string,\n          totals: OrganizationModelUsageTotals,\n        }),\n      )\n      .max(50),\n    modelsTruncated: primitives.boolean,\n    workspaces: z\n      .array(\n        z.object({\n          workspaceId: primitives.uuid,\n          name: primitives.nullableString,\n          billing: z.array(OrganizationModelUsageTotals).max(2),\n        }),\n      )\n      .max(50),\n    /** Every Personal workspace, aggregated; individual Personal workspaces are never named. */\n    personal: z.object({\n      workspacesWithUsage: BigIntString,\n      billing: z.array(OrganizationModelUsageTotals).max(2),\n    }),\n    nextWorkspaceCursor: primitives.nullableUuid,\n  }),\n);\nexport type OrganizationModelUsage = z.infer<typeof OrganizationModelUsage>;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAIA,SAAS,SAAS;AAIlB,IAAM,eAA+B,6BAAa,MAAiB,OAAO,MAAM,OAAO,CAAC;AACxF,IAAM,oCAAoD;AAAA,EAAa,MACrE,EAAE,KAAK,CAAC,oBAAoB,UAAU,CAAC;AACzC;AAGO,IAAM,+BAA+C;AAAA,EAAa,MACvE,EAAE,OAAO;AAAA,IACP,aAAa;AAAA,IACb,OAAO;AAAA,IACP,aAAa;AAAA,IACb,cAAc;AAAA,IACd,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB,kBAAkB;AAAA,IAClB,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,cAAc;AAAA,IACd,yBAAyB;AAAA,IACzB,6BAA6B;AAAA,EAC/B,CAAC;AACH;AAGO,IAAM,8BAA8C;AAAA,EAAa,MACtE,uBAAuB,OAAO;AAAA,IAC5B,kBAA6B;AAAA,EAC/B,CAAC;AACH;AAEO,IAAM,yBAAyC;AAAA,EAAa,MACjE,EAAE,OAAO;AAAA,IACP,WAAsB;AAAA,IACtB,QAAQ;AAAA,IACR,OAAkB;AAAA,IAClB,OAAkB;AAAA,IAClB,SAAS,EAAE,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAAA;AAAA,IAEpD,QAAQ,EACL;AAAA,MACC,6BAA6B,KAAK,EAAE,aAAa,KAAK,CAAC,EAAE,OAAO;AAAA,QAC9D,OAAO,EAAE,KAAK,CAAC,oBAAoB,gBAAgB,SAAS,CAAC;AAAA,MAC/D,CAAC;AAAA,IACH,EACC,QAAQ,CAAC,CAAC;AAAA,IACb,QAAQ,EACL;AAAA,MACC,EAAE,OAAO;AAAA,QACP,UAAqB;AAAA,QACrB,OAAkB;AAAA,QAClB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,EACC,IAAI,EAAE;AAAA,IACT,iBAA4B;AAAA,IAC5B,YAAY,EACT;AAAA,MACC,EAAE,OAAO;AAAA,QACP,aAAwB;AAAA,QACxB,MAAiB;AAAA,QACjB,SAAS,EAAE,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAAA,MACtD,CAAC;AAAA,IACH,EACC,IAAI,EAAE;AAAA;AAAA,IAET,UAAU,EAAE,OAAO;AAAA,MACjB,qBAAqB;AAAA,MACrB,SAAS,EAAE,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAAA,IACtD,CAAC;AAAA,IACD,qBAAgC;AAAA,EAClC,CAAC;AACH;","names":[]}

package/dist/organization-recovery.js

@@ -15,7 +15,9 @@ import {
   OrganizationRecoveryPolicyState,
   OrganizationRecoveryUnavailableReason,
   StartOrganizationRecoveryOperationRequest
-} from "./chunk-BCS7WHCK.js";
+} from "./chunk-MTJKSIGA.js";
+import "./chunk-AQYDZUJV.js";
+import "./chunk-56SNIMDO.js";
 export {
   AcceptOrganizationRecoveryCustodyRequest,
   ConfigureOrganizationRecoveryPolicyRequest,

package/dist/organization-usage.d.ts

@@ -91,6 +91,18 @@ export declare const OrganizationUsageSummary: z.ZodObject<{
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
     personalWorkspaceCount: z.ZodDefault<z.ZodNumber>;
+    privateChats: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        workspaceId: z.ZodString;
+        membershipId: z.ZodNullable<z.ZodString>;
+        name: z.ZodNullable<z.ZodString>;
+        totals: z.ZodArray<z.ZodObject<{
+            eventType: z.ZodString;
+            unit: z.ZodString;
+            quantity: z.ZodString;
+            eventCount: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    privateChatsTruncated: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 export type OrganizationUsageSummary = z.infer<typeof OrganizationUsageSummary>;
 /**

package/dist/passkey-only-account.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Accounts created with only a passkey have no email address. Their stored
+ * address is a unique placeholder under this reserved `.invalid` domain
+ * (RFC 2606), which no mail can reach and no person or organization domain
+ * can match. Never show it; show the person's name instead.
+ */
+export declare const PASSKEY_ONLY_ACCOUNT_EMAIL_DOMAIN = "passkey.invalid";
+export declare function passkeyOnlyAccountEmail(authUserId: string): string;
+export declare function isPasskeyOnlyAccountEmail(email: string | null | undefined): boolean;
+/**
+ * The account's real email address, or null when it has none. Use it wherever
+ * an address is shown, used as a label or handed to another service.
+ */
+export declare function accountContactEmail(email: string | null | undefined): string | null;

package/dist/passkey-only-account.js

@@ -0,0 +1,13 @@
+import {
+  PASSKEY_ONLY_ACCOUNT_EMAIL_DOMAIN,
+  accountContactEmail,
+  isPasskeyOnlyAccountEmail,
+  passkeyOnlyAccountEmail
+} from "./chunk-R6VXJIMB.js";
+export {
+  PASSKEY_ONLY_ACCOUNT_EMAIL_DOMAIN,
+  accountContactEmail,
+  isPasskeyOnlyAccountEmail,
+  passkeyOnlyAccountEmail
+};
+//# sourceMappingURL=passkey-only-account.js.map

package/dist/passkey-only-account.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/permissions.d.ts

@@ -10,6 +10,7 @@ export declare const Permission: z.ZodEnum<{
     "billing:read": "billing:read";
     "capabilities:manage": "capabilities:manage";
     "codemode:call": "codemode:call";
+    "connections:personal": "connections:personal";
     "connections:read": "connections:read";
     "connections:write": "connections:write";
     "documents:manage": "documents:manage";
@@ -32,6 +33,7 @@ export declare const Permission: z.ZodEnum<{
     "scheduled_tasks:run": "scheduled_tasks:run";
     "secrets:list": "secrets:list";
     "secrets:read": "secrets:read";
+    "secrets:use": "secrets:use";
     "secrets:write": "secrets:write";
     "sessions:control": "sessions:control";
     "sessions:create": "sessions:create";
@@ -40,6 +42,7 @@ export declare const Permission: z.ZodEnum<{
     "stream:control": "stream:control";
     "stream:view": "stream:view";
     "terminal:attach": "terminal:attach";
+    "usage_allowances:manage": "usage_allowances:manage";
     "variable-sets:attach": "variable-sets:attach";
     "variable-sets:list": "variable-sets:list";
     "variable-sets:manage": "variable-sets:manage";
@@ -51,3 +54,19 @@ export declare const Permission: z.ZodEnum<{
     "workspace:read": "workspace:read";
 }>;
 export type Permission = z.infer<typeof Permission>;
+/**
+ * Legacy permission names and their secrets equivalents (Q-16). Stored role
+ * and API-key permission arrays are aliased at read time, never rewritten.
+ */
+export declare const SECRET_PERMISSION_ALIASES: {
+    readonly "variable-sets:list": "secrets:list";
+    readonly "variable-sets:read": "secrets:list";
+    readonly "variable-sets:write": "secrets:write";
+    readonly "variable-sets:manage": "secrets:write";
+    readonly "environments:manage": "secrets:write";
+    readonly "variable-sets:attach": "secrets:use";
+    readonly "variable-sets:use": "secrets:use";
+    readonly "environments:use": "secrets:use";
+};
+/** Canonical name for a permission: legacy variable-set names map to `secrets:*`. */
+export declare function normalizePermission(name: string): string;