@opengeni/db 0.22.1 → 0.22.2

package/dist/index.d.ts

@@ -1476,6 +1476,9 @@ export declare function loadConnectionCredentialForBroker(db: Database, settings
     subjectId?: string | null;
     allowSubjectOwned?: boolean;
 }): Promise<ConnectionCredentialForBroker | null>;
+export declare function workspaceVercelAiGatewayConnectionActive(db: Database, workspaceId: string): Promise<boolean>;
+/** Resolve only the reviewed workspace-shared AI Gateway credential shape. */
+export declare function loadWorkspaceVercelAiGatewayApiKey(db: Database, settings: Settings, workspaceId: string): Promise<string | null>;
 export declare function recordConnectionTokenRefresh(db: Database, input: {
     id: string;
     version: number;

package/dist/index.js

@@ -174,7 +174,11 @@ import {
   SubmitHumanInputResponseRequest,
   TurnExecutionPolicyV1
 } from "@opengeni/contracts";
-import { environmentsEncryptionKeyBytes as environmentsEncryptionKeyBytes3 } from "@opengeni/config";
+import {
+  environmentsEncryptionKeyBytes as environmentsEncryptionKeyBytes3,
+  VERCEL_AI_GATEWAY_CONNECTION_DOMAIN,
+  VERCEL_AI_GATEWAY_CONNECTION_ROLE
+} from "@opengeni/config";
 import { boundModelToolOutputItem as boundModelToolOutputItem2, isCodexBilledModel } from "@opengeni/codex";
 import { isCodexBilledModel as isCodexBilledModel2 } from "@opengeni/codex";
 import {
@@ -14016,6 +14020,32 @@ async function loadConnectionCredentialForBroker(db, settings, input) {
     }
   );
 }
+async function workspaceVercelAiGatewayConnectionActive(db, workspaceId) {
+  const connections2 = await listConnectionsMetadata(db, workspaceId, null);
+  return connections2.some(
+    (connection) => connection.subjectId === null && connection.providerDomain === VERCEL_AI_GATEWAY_CONNECTION_DOMAIN && connection.kind === "api_key" && connection.status === "active" && connection.metadata.credentialRole === VERCEL_AI_GATEWAY_CONNECTION_ROLE
+  );
+}
+async function loadWorkspaceVercelAiGatewayApiKey(db, settings, workspaceId) {
+  const metadata = (await listConnectionsMetadata(db, workspaceId, null)).find(
+    (connection2) => connection2.subjectId === null && connection2.providerDomain === VERCEL_AI_GATEWAY_CONNECTION_DOMAIN && connection2.kind === "api_key" && connection2.status === "active" && connection2.metadata.credentialRole === VERCEL_AI_GATEWAY_CONNECTION_ROLE
+  );
+  if (!metadata) {
+    return null;
+  }
+  const connection = await loadConnectionCredentialForBroker(db, settings, {
+    workspaceId,
+    connectionId: metadata.id,
+    providerDomain: VERCEL_AI_GATEWAY_CONNECTION_DOMAIN,
+    kind: "api_key",
+    allowSubjectOwned: false
+  });
+  if (!connection || connection.status !== "active" || connection.metadata.credentialRole !== VERCEL_AI_GATEWAY_CONNECTION_ROLE) {
+    return null;
+  }
+  const apiKey = connection.credential.apiKey;
+  return typeof apiKey === "string" && apiKey.trim().length > 0 ? apiKey : null;
+}
 async function recordConnectionTokenRefresh(db, input) {
   return await withConnectionSubjectRls(
     db,
@@ -37144,6 +37174,7 @@ export {
   loadSocialConnectionCredential,
   loadVariableSetForRun,
   loadWorkspaceEnvironmentForRun,
+  loadWorkspaceVercelAiGatewayApiKey,
   lockSessionEventWriteRows,
   lockWorkspaceInferenceControl,
   markFileUploadFailed,
@@ -37410,6 +37441,7 @@ export {
   withWorkspaceSubjectRls,
   withWorkspaceUsageLock,
   workspaceCaptureAtRevision,
-  workspaceCodexSubscriptionActive
+  workspaceCodexSubscriptionActive,
+  workspaceVercelAiGatewayConnectionActive
 };
 //# sourceMappingURL=index.js.map