@vertesia/common 1.5.0-dev.20260910.052912Z → 1.5.1

package/src/principal-context.ts

@@ -1,23 +1,33 @@
 import type { z } from 'zod';
-import type { PrincipalContextFromSchema, PrincipalIdentitySchema } from './api-schemas/user.js';
+import type { AbacPrincipalContextFromSchema, PrincipalIdentitySchema } from './api-schemas/user.js';
 
 /**
- * Resolved per-user context consumed by PrincipalSet condition evaluation
- * (`matchConditions` / `resolveConditions`) and by ABAC client-side tooling.
+ * The resolved principal context matched by ResourceSet/PrincipalSet condition evaluation
+ * (`resolveConditions` / `matchConditions`) and offered by the UI condition editor. Every field is
+ * referenceable in a rule as `$principal.<field>`: the principal `kind`, its `id`, and the merged
+ * BLP attributes (clearance, compartments, email, tags, properties).
  *
- * Mirrors what the token server builds for `$principal.*` resolution at JWT
- * issue time, with the same defaults (clearance = 0, compartments = [],
- * tags = [], properties = {}). Lives in @vertesia/common so both server-side
- * builders and client-side consumers share the exact same shape.
+ * This is the single shape the token server writes into the JWT for `$principal.*` resolution at
+ * issue time, and the shared `buildPrincipalContext` in @vertesia/studio-utils produces — with the
+ * defaults that keep condition operators well-defined for absent values (clearance = 0,
+ * compartments = [], tags = [], properties = {}, id = '', email = '').
  *
- * Derived from `PrincipalContextSchema`, which is composed into `PrincipalIdentitySchema` rather
- * than published as a component of its own — the document has never carried a `PrincipalContext`
+ * Derived from `AbacPrincipalContextSchema`, which is composed into `PrincipalIdentitySchema` rather
+ * than published as a component of its own — the document has never carried an `AbacPrincipalContext`
  * schema, and inventing one would add a `$ref` to every generated client.
  */
-export type PrincipalContext = PrincipalContextFromSchema;
+export type AbacPrincipalContext = AbacPrincipalContextFromSchema;
 
 /**
- * Response shape of the `/iam/users/identity` endpoint. Derived from `PrincipalIdentitySchema`,
- * where its published description lives — Zod reads `.meta()`, not TSDoc.
+ * The principal subject kind. A resolvable field of {@link AbacPrincipalContext}, so rules may match
+ * on `$principal.kind`.
+ */
+export type PrincipalKind = AbacPrincipalContext['kind'];
+
+/**
+ * Response shape of the `/iam/users/identity` endpoint. Extends {@link AbacPrincipalContext} with
+ * identity-only fields (none today) — the invariant is that the ABAC context is always a subset of
+ * the identity, so a field added here never widens the `$principal.*` surface. Derived from
+ * `PrincipalIdentitySchema`, where its published description lives — Zod reads `.meta()`, not TSDoc.
  */
 export type PrincipalIdentity = z.infer<typeof PrincipalIdentitySchema>;

package/src/project-values.ts

@@ -24,6 +24,7 @@ export enum ResourceVisibility {
 export enum SystemRoles {
     owner = 'owner', // all permissions
     admin = 'admin', // all permissions
+    app_admin = 'app_admin', // all permissions but studio:access — admin driving a custom admin UI
     manager = 'manager', // all permissions but manage_account, manage_billing
     developer = 'developer', // all permissions but manage_account, manage_billing, manage_roles, delete
     application = 'application', // executor + request_pk

package/src/project.ts

@@ -118,6 +118,16 @@ export const SYSTEM_INTERACTION_CATEGORIES: Record<string, SystemInteractionCate
     ContentSearchAgent: SystemInteractionCategory.analysis,
     ContentSearchReranker: SystemInteractionCategory.analysis,
     StudioAssistant: SystemInteractionCategory.agent,
+    // App development runs as an orchestrator plus five specialist sub-agents. Categorising them
+    // lets `defaults.system.agent` apply: an in-code sub-agent is launched without an environment
+    // or model of its own, so without a category it resolves to the project BASE default rather
+    // than the agent default, and a task started on a chosen model ran its sub-agents on another.
+    AppDevelopmentOrchestrator: SystemInteractionCategory.agent,
+    AppSolutionArchitect: SystemInteractionCategory.agent,
+    AppDesigner: SystemInteractionCategory.agent,
+    AppDeveloper: SystemInteractionCategory.agent,
+    AppReviewer: SystemInteractionCategory.agent,
+    AppTester: SystemInteractionCategory.agent,
 };
 
 /**

package/src/roles.test.ts

@@ -7,6 +7,7 @@ describe('shared role vocabulary', () => {
         expect(Object.values(SystemRoles).sort()).toEqual(
             [
                 'admin',
+                'app_admin',
                 'app_member',
                 'application',
                 'auditor',

package/src/store/intake-policy-schema.generated.ts

@@ -251,6 +251,57 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
     additionalProperties: false,
     description: 'Per-content-type policy for the standard intake workflows.',
     $defs: {
+        AnthropicClaudeOptions: {
+            type: 'object',
+            properties: {
+                _option_id: {
+                    type: 'string',
+                    const: 'anthropic-claude',
+                },
+                max_tokens: {
+                    type: 'number',
+                },
+                temperature: {
+                    type: 'number',
+                },
+                top_p: {
+                    type: 'number',
+                },
+                top_k: {
+                    type: 'number',
+                },
+                stop_sequence: {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                    },
+                },
+                effort: {
+                    type: 'string',
+                    enum: ['low', 'medium', 'high', 'xhigh', 'max'],
+                },
+                thinking_mode: {
+                    type: 'string',
+                    enum: ['adaptive', 'between_tools'],
+                    description:
+                        'Thinking mode override. Sonnet 5.5 supports between_tools at low, medium, or high effort. It omits display and budget fields; keep effort fixed during the conversation. When unset, existing model-specific thinking behavior is preserved.',
+                },
+                thinking_budget_tokens: {
+                    type: 'number',
+                },
+                include_thoughts: {
+                    type: 'boolean',
+                },
+                cache_enabled: {
+                    type: 'boolean',
+                },
+                cache_ttl: {
+                    type: 'string',
+                    enum: ['5m', '1h'],
+                },
+            },
+            additionalProperties: false,
+        },
         AzureFoundryChatOptions: {
             type: 'object',
             properties: {
@@ -290,7 +341,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     type: 'boolean',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockAI21Options: {
@@ -309,6 +359,12 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 top_p: {
                     type: 'number',
                 },
+                presence_penalty: {
+                    type: 'number',
+                },
+                frequency_penalty: {
+                    type: 'number',
+                },
                 stop_sequence: {
                     type: 'array',
                     items: {
@@ -325,7 +381,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                         'Provider-defined processing tier. Unknown non-empty values are preserved for forward compatibility.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockClaudeOptions: {
@@ -353,6 +408,12 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 top_k: {
                     type: 'number',
                 },
+                thinking_mode: {
+                    type: 'string',
+                    enum: ['adaptive', 'between_tools'],
+                    description:
+                        'Thinking mode override. Sonnet 5.5 supports between_tools at low, medium, or high effort. It omits display and budget fields; keep effort fixed during the conversation. When unset, existing model-specific thinking behavior is preserved.',
+                },
                 thinking_budget_tokens: {
                     type: 'number',
                 },
@@ -377,7 +438,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                         'Provider-defined processing tier. Unknown non-empty values are preserved for forward compatibility.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockCohereCommandOptions: {
@@ -396,6 +456,15 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 top_p: {
                     type: 'number',
                 },
+                top_k: {
+                    type: 'number',
+                },
+                presence_penalty: {
+                    type: 'number',
+                },
+                frequency_penalty: {
+                    type: 'number',
+                },
                 stop_sequence: {
                     type: 'array',
                     items: {
@@ -412,7 +481,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                         'Provider-defined processing tier. Unknown non-empty values are preserved for forward compatibility.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockConverseOptions: {
@@ -447,7 +515,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                         'Provider-defined processing tier. Unknown non-empty values are preserved for forward compatibility.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockGptOssOptions: {
@@ -489,7 +556,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                         'Provider-defined processing tier. Unknown non-empty values are preserved for forward compatibility.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockMantleChatCompletionsOptions: {
@@ -526,7 +592,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     type: 'boolean',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockMantleClaudeOptions: {
@@ -558,6 +623,12 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     type: 'string',
                     enum: ['low', 'medium', 'high', 'xhigh', 'max'],
                 },
+                thinking_mode: {
+                    type: 'string',
+                    enum: ['adaptive', 'between_tools'],
+                    description:
+                        'Thinking mode override. Sonnet 5.5 supports between_tools at low, medium, or high effort. It omits display and budget fields; keep effort fixed during the conversation. When unset, existing model-specific thinking behavior is preserved.',
+                },
                 thinking_budget_tokens: {
                     type: 'number',
                 },
@@ -572,7 +643,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     enum: ['5m', '1h'],
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockMantleResponsesOptions: {
@@ -593,11 +663,11 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 },
                 effort: {
                     type: 'string',
-                    enum: ['none', 'low', 'medium', 'high', 'xhigh'],
+                    enum: ['none', 'low', 'medium', 'high', 'xhigh', 'max'],
                 },
                 reasoning_effort: {
                     type: 'string',
-                    enum: ['none', 'low', 'medium', 'high', 'xhigh'],
+                    enum: ['none', 'low', 'medium', 'high', 'xhigh', 'max'],
                 },
                 verbosity: {
                     type: 'string',
@@ -611,7 +681,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     type: 'boolean',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockMistralOptions: {
@@ -630,6 +699,9 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 top_p: {
                     type: 'number',
                 },
+                top_k: {
+                    type: 'number',
+                },
                 stop_sequence: {
                     type: 'array',
                     items: {
@@ -646,7 +718,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                         'Provider-defined processing tier. Unknown non-empty values are preserved for forward compatibility.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockNovaOptions: {
@@ -665,6 +736,9 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 top_p: {
                     type: 'number',
                 },
+                top_k: {
+                    type: 'number',
+                },
                 stop_sequence: {
                     type: 'array',
                     items: {
@@ -681,7 +755,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                         'Provider-defined processing tier. Unknown non-empty values are preserved for forward compatibility.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         BedrockPalmyraOptions: {
@@ -725,7 +798,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                         'Provider-defined processing tier. Unknown non-empty values are preserved for forward compatibility.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         ConfigModes: {
@@ -895,7 +967,7 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     enum: ['parsed', 'raw', 'hidden'],
                 },
             },
-            required: ['_option_id', 'reasoning_format'],
+            required: ['reasoning_format'],
             additionalProperties: false,
         },
         HttpTimeoutOptions: {
@@ -941,7 +1013,7 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 },
                 person_generation: {
                     type: 'string',
-                    enum: ['dont_allow', 'allow_adults', 'allow_all'],
+                    enum: ['dont_allow', 'allow_adults', 'allow_all', 'allow_adult'],
                 },
                 safety_setting: {
                     type: 'string',
@@ -1002,7 +1074,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     ],
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         ImagenTaskType: {
@@ -1058,6 +1129,11 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 model: {
                     type: 'string',
                 },
+                inherit_model_config: {
+                    type: 'boolean',
+                    description:
+                        'Treat environment and model as inherited fallbacks after interaction settings, before project defaults.',
+                },
                 do_validate: {
                     type: 'boolean',
                 },
@@ -1153,11 +1229,10 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     type: 'boolean',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         ModelOptions: {
-            oneOf: [
+            anyOf: [
                 {
                     $ref: '#/$defs/TextFallbackOptions',
                 },
@@ -1239,7 +1314,11 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 {
                     $ref: '#/$defs/MistralTextOptions',
                 },
+                {
+                    $ref: '#/$defs/AnthropicClaudeOptions',
+                },
             ],
+            type: 'object',
         },
         NovaCanvasOptions: {
             type: 'object',
@@ -1300,7 +1379,7 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     enum: ['DEFAULT', 'PRECISE'],
                 },
             },
-            required: ['_option_id', 'taskType'],
+            required: ['taskType'],
             additionalProperties: false,
         },
         OpenAiDalleOptions: {
@@ -1330,7 +1409,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     type: 'number',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         OpenAiGptImageOptions: {
@@ -1357,7 +1435,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     enum: ['png', 'webp', 'jpeg'],
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         OpenAiTextOptions: {
@@ -1413,7 +1490,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     description: 'Additional provider-specific fields merged into the OpenAI-compatible request body.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         OpenAiThinkingOptions: {
@@ -1438,6 +1514,10 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                 reasoning_effort: {
                     $ref: '#/$defs/ReasoningEffort',
                 },
+                reasoning_context: {
+                    type: 'string',
+                    enum: ['auto', 'current_turn', 'all_turns'],
+                },
                 image_detail: {
                     type: 'string',
                     enum: ['low', 'high', 'auto'],
@@ -1457,7 +1537,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     description: 'Additional provider-specific fields merged into the OpenAI-compatible request body.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         PromptCacheMode: {
@@ -1507,7 +1586,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     type: 'boolean',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         ThinkingLevel: {
@@ -1534,7 +1612,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                         'Provider-defined processing tier. Unknown non-empty values are preserved for forward compatibility.',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         VertexAIClaudeOptions: {
@@ -1566,6 +1643,12 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     type: 'string',
                     enum: ['low', 'medium', 'high', 'xhigh', 'max'],
                 },
+                thinking_mode: {
+                    type: 'string',
+                    enum: ['adaptive', 'between_tools'],
+                    description:
+                        'Thinking mode override. Sonnet 5.5 supports between_tools at low, medium, or high effort. It omits display and budget fields; keep effort fixed during the conversation. When unset, existing model-specific thinking behavior is preserved.',
+                },
                 thinking_budget_tokens: {
                     type: 'number',
                 },
@@ -1580,7 +1663,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     enum: ['5m', '1h'],
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         VertexAIGeminiOmniVideoOptions: {
@@ -1608,7 +1690,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     enum: ['360p', '720p', '1080p', '4k'],
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         VertexAIGeminiOptions: {
@@ -1694,7 +1775,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     type: 'number',
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         VertexAIGrokOptions: {
@@ -1720,7 +1800,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     },
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
         XAIGrokImageOptions: {
@@ -1767,7 +1846,6 @@ export const ContentTypeIntakePolicySchema: JSONObject = {
                     maximum: 10,
                 },
             },
-            required: ['_option_id'],
             additionalProperties: false,
         },
     },

package/src/store/rendering.ts

@@ -43,6 +43,15 @@ export function getRenditionsPath(contentEtag: string, params: ImageRenditionPar
     return `renditions/${contentEtag}/${params.max_hw}`;
 }
 
+export function getRenditionPagePath(
+    contentEtag: string,
+    params: ImageRenditionParams,
+    pageNumber: number | string = 0,
+) {
+    const page = typeof pageNumber === 'number' ? String(pageNumber).padStart(4, '0') : pageNumber;
+    return `${getRenditionsPath(contentEtag, params)}/${page}.${params.format}`;
+}
+
 /** Metadata for PDF rendering, inferred from the published API schema. */
 export type PdfRenderingMetadata = z.infer<typeof PdfRenderingMetadataSchema>;
 

package/src/user.ts

@@ -1,5 +1,10 @@
 import type { z } from 'zod';
-import type { AccountBillingSchema, AccountSchema, UpdateAccountPayloadSchema } from './api-schemas/account.js';
+import type {
+    AccountApiVersionPolicySchema,
+    AccountBillingSchema,
+    AccountSchema,
+    UpdateAccountPayloadSchema,
+} from './api-schemas/account.js';
 import type {
     AccountProjectsResponseSchema,
     AccountRefSchema,
@@ -104,3 +109,5 @@ export type SignupData = z.infer<typeof SignupDataSchema>;
  * The `POST /auth/signup` request body.
  */
 export type SignupPayload = z.infer<typeof SignupPayloadSchema>;
+
+export type AccountApiVersionPolicy = z.infer<typeof AccountApiVersionPolicySchema>;