@xfey/tutti 0.1.120 → 0.1.121

package/dist/server-shell/http/routes/project-api/openapi-workspace-routes.d.ts

@@ -11,7 +11,6 @@ export declare const HOST_PROJECT_WORKSPACE_OPENAPI_ROUTES: ({
             }>, import("@sinclair/typebox").TObject<{
                 status: import("@sinclair/typebox").TLiteral<"managed">;
                 funding_kind: import("@sinclair/typebox").TLiteral<"trial">;
-                tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
             }>, import("@sinclair/typebox").TObject<{
                 status: import("@sinclair/typebox").TLiteral<"configured">;
                 provider: import("@sinclair/typebox").TLiteral<"openai">;
@@ -869,7 +868,6 @@ export declare const HOST_PROJECT_WORKSPACE_OPENAPI_ROUTES: ({
                     }>, import("@sinclair/typebox").TObject<{
                         status: import("@sinclair/typebox").TLiteral<"managed">;
                         funding_kind: import("@sinclair/typebox").TLiteral<"trial">;
-                        tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
                     }>, import("@sinclair/typebox").TObject<{
                         status: import("@sinclair/typebox").TLiteral<"configured">;
                         provider: import("@sinclair/typebox").TLiteral<"openai">;

package/dist/server-shell/http/routes/project-api/openapi.d.ts

@@ -1318,7 +1318,6 @@ export declare const HOST_PROJECT_OPENAPI_ROUTES: ({
             }>, import("@sinclair/typebox").TObject<{
                 status: import("@sinclair/typebox").TLiteral<"managed">;
                 funding_kind: import("@sinclair/typebox").TLiteral<"trial">;
-                tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
             }>, import("@sinclair/typebox").TObject<{
                 status: import("@sinclair/typebox").TLiteral<"configured">;
                 provider: import("@sinclair/typebox").TLiteral<"openai">;
@@ -2176,7 +2175,6 @@ export declare const HOST_PROJECT_OPENAPI_ROUTES: ({
                     }>, import("@sinclair/typebox").TObject<{
                         status: import("@sinclair/typebox").TLiteral<"managed">;
                         funding_kind: import("@sinclair/typebox").TLiteral<"trial">;
-                        tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
                     }>, import("@sinclair/typebox").TObject<{
                         status: import("@sinclair/typebox").TLiteral<"configured">;
                         provider: import("@sinclair/typebox").TLiteral<"openai">;

package/dist/server-shell/http/routes/project-api/schemas.d.ts

@@ -812,7 +812,6 @@ export declare const BootstrapResponseSchema: {
         }>, import("@sinclair/typebox").TObject<{
             status: import("@sinclair/typebox").TLiteral<"managed">;
             funding_kind: import("@sinclair/typebox").TLiteral<"trial">;
-            tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
         }>, import("@sinclair/typebox").TObject<{
             status: import("@sinclair/typebox").TLiteral<"configured">;
             provider: import("@sinclair/typebox").TLiteral<"openai">;

package/dist/server-shell/http/routes/project-api/types.d.ts

@@ -25,7 +25,6 @@ export type ResolvedStagedUpload = {
 export type HostProviderConfigProjection = {
     status: "managed";
     funding_kind: "trial";
-    tier: "light" | "high" | "max";
 } | {
     status: "not_configured";
 } | {

package/dist/server-shell/local-console/managed-project-service.d.ts

@@ -8,7 +8,6 @@ export declare const ManagedDraftInputSchema: import("@sinclair/typebox").TObjec
     display_name: import("@sinclair/typebox").TString;
     description: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     surface: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"standalone">, import("@sinclair/typebox").TLiteral<"feishu">]>;
-    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     existing_project_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
 }>;
 export type ManagedDraftInput = Static<typeof ManagedDraftInputSchema>;
@@ -30,7 +29,6 @@ export declare class LocalConsoleManagedProjectService {
             expires_at: string;
             existing_project_id?: `prj_${string}`;
             surface: "standalone" | "feishu";
-            tier: "light" | "high" | "max";
             description?: string;
             request_ref: string;
             project_id: `prj_${string}`;
@@ -43,7 +41,6 @@ export declare class LocalConsoleManagedProjectService {
             expires_before?: string;
             installation_ref: string;
             surface: "standalone" | "feishu";
-            tier: "light" | "high" | "max";
             request_ref: string;
             project_id: string;
             installation_secret_hash: string;
@@ -58,7 +55,6 @@ export declare class LocalConsoleManagedProjectService {
             expires_at: string;
             existing_project_id?: `prj_${string}`;
             surface: "standalone" | "feishu";
-            tier: "light" | "high" | "max";
             description?: string;
             request_ref: string;
             project_id: `prj_${string}`;
@@ -71,7 +67,6 @@ export declare class LocalConsoleManagedProjectService {
             expires_before?: string;
             installation_ref: string;
             surface: "standalone" | "feishu";
-            tier: "light" | "high" | "max";
             request_ref: string;
             project_id: string;
             installation_secret_hash: string;
@@ -86,7 +81,6 @@ export declare class LocalConsoleManagedProjectService {
             expires_at: string;
             existing_project_id?: `prj_${string}`;
             surface: "standalone" | "feishu";
-            tier: "light" | "high" | "max";
             description?: string;
             request_ref: string;
             project_id: `prj_${string}`;
@@ -99,7 +93,6 @@ export declare class LocalConsoleManagedProjectService {
             expires_before?: string;
             installation_ref: string;
             surface: "standalone" | "feishu";
-            tier: "light" | "high" | "max";
             request_ref: string;
             project_id: string;
             installation_secret_hash: string;
@@ -112,7 +105,6 @@ export declare class LocalConsoleManagedProjectService {
         validation: {
             state: "failed" | "unknown" | "started" | "succeeded";
             installation_ref: string;
-            tier: "light" | "high" | "max";
             reason_code: "validation_started" | "validation_succeeded" | "validation_route_unavailable" | "validation_http_rejected" | "validation_response_invalid" | "validation_transport_unknown" | "validation_interrupted";
             project_id: string;
             creation_ref: string;
@@ -124,7 +116,6 @@ export declare class LocalConsoleManagedProjectService {
             expires_at: string;
             existing_project_id?: `prj_${string}`;
             surface: "standalone" | "feishu";
-            tier: "light" | "high" | "max";
             description?: string;
             request_ref: string;
             project_id: `prj_${string}`;
@@ -137,7 +128,6 @@ export declare class LocalConsoleManagedProjectService {
             expires_before?: string;
             installation_ref: string;
             surface: "standalone" | "feishu";
-            tier: "light" | "high" | "max";
             request_ref: string;
             project_id: string;
             installation_secret_hash: string;

package/dist/server-shell/local-console/managed-project-service.js

@@ -1,7 +1,6 @@
 import { Value } from "@sinclair/typebox/value";
 import { Type } from "@sinclair/typebox";
 import { IdempotencyKeySchema, ProjectIdSchema } from "@tutti/shared/schemas/domain";
-import { ManagedTierSchema } from "@tutti/shared/schemas/internal";
 import { resolveLaunchLocalContext } from "../cli/launch.js";
 import { NativeManagedState } from "../managed-access/state.js";
 import { findNativeManagedProject } from "../managed-access/state.js";
@@ -15,7 +14,6 @@ export const ManagedDraftInputSchema = Type.Object({
     display_name: Type.String({ minLength: 1, maxLength: 80 }),
     description: Type.Optional(Type.String({ maxLength: 160 })),
     surface: Type.Union([Type.Literal("standalone"), Type.Literal("feishu")]),
-    tier: ManagedTierSchema,
     existing_project_id: Type.Optional(ProjectIdSchema),
 }, { additionalProperties: false });
 function projection(row) {
@@ -26,7 +24,6 @@ function projection(row) {
         workspace_path: row.workspace_root,
         ...(row.description === undefined ? {} : { description: row.description }),
         surface: row.surface,
-        tier: row.tier,
         ...(row.existing_relay_project_ref === undefined
             ? {}
             : { existing_project_id: row.project_id }),
@@ -80,8 +77,7 @@ export class LocalConsoleManagedProjectService {
                     relayUrl: state.origin,
                     projectId: input.existing_project_id,
                 });
-                if (previous !== null &&
-                    (previous.journal.state !== "registered" || previous.journal.tier !== input.tier))
+                if (previous !== null && previous.journal.state !== "registered")
                     throw new ManagedLocalStateError("managed_reauthorization_conflict");
                 existing = {
                     ...target,
@@ -94,7 +90,6 @@ export class LocalConsoleManagedProjectService {
                 displayName: input.display_name.trim(),
                 ...(input.description === undefined ? {} : { description: input.description.trim() }),
                 surface: input.surface,
-                tier: input.tier,
                 ...(existing === undefined ? {} : { projectId: input.existing_project_id, existing }),
                 now: this.options.now?.() ?? new Date(),
             });

package/dist/server-shell/local-console/project-service.d.ts

@@ -17,7 +17,6 @@ export type LocalConsoleProject = {
     status: RuntimeProjectRow["status"];
     provider_status: ProviderConfigProjection["status"];
     provider_model?: string;
-    provider_tier?: "light" | "high" | "max";
     relay_project_ref?: RelayProjectRef;
     open_url?: string;
     relay_connection_status?: string;

package/dist/server-shell/local-console/project-service.js

@@ -217,7 +217,7 @@ export class LocalConsoleProjectService {
             const providerModel = provider.status === "not_configured"
                 ? undefined
                 : provider.status === "managed"
-                    ? `Tutti ${provider.tier}`
+                    ? "Tutti"
                     : provider.default_model;
             const activityAt = readProjectActivityAt(this.#tuttiHome, row, binding);
             return {
@@ -229,7 +229,6 @@ export class LocalConsoleProjectService {
                         resolveRelayUrl(operation.env),
                     surfaceProfile: binding?.surface_profile ?? createProjectSurfaceProfile(),
                 }),
-                ...(provider.status === "managed" ? { provider_tier: provider.tier } : {}),
             };
         });
     }

package/dist/server-shell/managed-access/legacy-records.d.ts

@@ -0,0 +1,2 @@
+export declare function upgradeTieredPrivateRecord(value: unknown, withAuthority?: boolean): unknown;
+//# sourceMappingURL=legacy-records.d.ts.map

package/dist/server-shell/managed-access/legacy-records.js

@@ -0,0 +1,24 @@
+// The only compatibility boundary for 0.1.120 private records. This is not a
+// network parser: callers still validate the complete current strict schema.
+export function upgradeTieredPrivateRecord(value, withAuthority = false) {
+    if (!value || typeof value !== "object" || !("version" in value) || value.version !== 1)
+        return value;
+    if (!("tier" in value) ||
+        typeof value.tier !== "string" ||
+        !["light", "high", "max"].includes(value.tier))
+        return value;
+    const { tier, ...fields } = value;
+    if (withAuthority && "authority" in fields) {
+        const authority = fields.authority;
+        if (!authority ||
+            typeof authority !== "object" ||
+            !("tier" in authority) ||
+            authority.tier !== tier)
+            return value;
+        const projection = { ...authority };
+        delete projection.tier;
+        return { ...fields, version: 2, authority: projection };
+    }
+    return { ...fields, version: 2 };
+}
+//# sourceMappingURL=legacy-records.js.map

package/dist/server-shell/managed-access/model-control-client.d.ts

@@ -16,7 +16,6 @@ export declare class NativeModelControlClient {
     private request;
     pin(sessionRef: string, routeRef?: string): Promise<{
         disposition: "created" | "existing";
-        tier: "light" | "high" | "max";
         session_ref: string;
         provider: {
             model: string;

package/dist/server-shell/managed-access/model-control-client.js

@@ -14,11 +14,9 @@ export class ManagedControlError extends ManagedLocalStateError {
 const reasons = new Set([
     "authority_invalid",
     "host_delegation_revoked",
-    "delegated_tier_fixed",
     "delegated_installation_fixed",
     "session_not_found",
-    "session_tier_fixed",
-    "tier_unavailable",
+    "default_route_unavailable",
     "pinned_route_unavailable",
     "gateway_route_drift",
     "credential_request_mismatch",

package/dist/server-shell/managed-access/project-provider.js

@@ -9,7 +9,7 @@ import { NativeManagedRuntime } from "./runtime.js";
 export function readProjectModelAccess(options) {
     const native = findNativeManagedProject(options);
     if (native !== null) {
-        return { status: "managed", funding_kind: "trial", tier: native.journal.tier };
+        return { status: "managed", funding_kind: "trial" };
     }
     return readOpenAiProviderConfigProjection(options);
 }

package/dist/server-shell/managed-access/records.d.ts

@@ -10,7 +10,7 @@ export declare const InstallationSchema: import("@sinclair/typebox").TObject<{
 export type Installation = Static<typeof InstallationSchema>;
 export declare const CreationJournalSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
     state: import("@sinclair/typebox").TLiteral<"awaiting_authorization">;
-    version: import("@sinclair/typebox").TLiteral<1>;
+    version: import("@sinclair/typebox").TLiteral<2>;
     request_ref: import("@sinclair/typebox").TString;
     project_id: import("@sinclair/typebox").TString;
     relay_origin: import("@sinclair/typebox").TString;
@@ -19,7 +19,6 @@ export declare const CreationJournalSchema: import("@sinclair/typebox").TUnion<[
     display_name: import("@sinclair/typebox").TString;
     description: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     surface: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"standalone">, import("@sinclair/typebox").TLiteral<"feishu">]>;
-    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     existing_relay_project_ref: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     previous_request_ref: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     handoff_token: import("@sinclair/typebox").TString;
@@ -29,7 +28,7 @@ export declare const CreationJournalSchema: import("@sinclair/typebox").TUnion<[
 }>, import("@sinclair/typebox").TObject<{
     state: import("@sinclair/typebox").TLiteral<"prepared">;
     creation_ref: import("@sinclair/typebox").TString;
-    version: import("@sinclair/typebox").TLiteral<1>;
+    version: import("@sinclair/typebox").TLiteral<2>;
     request_ref: import("@sinclair/typebox").TString;
     project_id: import("@sinclair/typebox").TString;
     relay_origin: import("@sinclair/typebox").TString;
@@ -38,7 +37,6 @@ export declare const CreationJournalSchema: import("@sinclair/typebox").TUnion<[
     display_name: import("@sinclair/typebox").TString;
     description: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     surface: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"standalone">, import("@sinclair/typebox").TLiteral<"feishu">]>;
-    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     existing_relay_project_ref: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     previous_request_ref: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     handoff_token: import("@sinclair/typebox").TString;
@@ -48,7 +46,7 @@ export declare const CreationJournalSchema: import("@sinclair/typebox").TUnion<[
 }>, import("@sinclair/typebox").TObject<{
     state: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"validated">, import("@sinclair/typebox").TLiteral<"validation_unknown">, import("@sinclair/typebox").TLiteral<"validation_failed">]>;
     creation_ref: import("@sinclair/typebox").TString;
-    version: import("@sinclair/typebox").TLiteral<1>;
+    version: import("@sinclair/typebox").TLiteral<2>;
     request_ref: import("@sinclair/typebox").TString;
     project_id: import("@sinclair/typebox").TString;
     relay_origin: import("@sinclair/typebox").TString;
@@ -57,7 +55,6 @@ export declare const CreationJournalSchema: import("@sinclair/typebox").TUnion<[
     display_name: import("@sinclair/typebox").TString;
     description: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     surface: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"standalone">, import("@sinclair/typebox").TLiteral<"feishu">]>;
-    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     existing_relay_project_ref: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     previous_request_ref: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     handoff_token: import("@sinclair/typebox").TString;
@@ -72,13 +69,12 @@ export declare const CreationJournalSchema: import("@sinclair/typebox").TUnion<[
         grant_ref: import("@sinclair/typebox").TString;
         relay_project_ref: import("@sinclair/typebox").TString;
         installation_ref: import("@sinclair/typebox").TString;
-        tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
         funding_kind: import("@sinclair/typebox").TLiteral<"trial">;
         expires_at: import("@sinclair/typebox").TNull;
         state: import("@sinclair/typebox").TLiteral<"active">;
         model_access: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"runtime_authority_required">, import("@sinclair/typebox").TLiteral<"not_enabled">]>;
     }>;
-    version: import("@sinclair/typebox").TLiteral<1>;
+    version: import("@sinclair/typebox").TLiteral<2>;
     request_ref: import("@sinclair/typebox").TString;
     project_id: import("@sinclair/typebox").TString;
     relay_origin: import("@sinclair/typebox").TString;
@@ -87,7 +83,6 @@ export declare const CreationJournalSchema: import("@sinclair/typebox").TUnion<[
     display_name: import("@sinclair/typebox").TString;
     description: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     surface: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"standalone">, import("@sinclair/typebox").TLiteral<"feishu">]>;
-    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     existing_relay_project_ref: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     previous_request_ref: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     handoff_token: import("@sinclair/typebox").TString;

package/dist/server-shell/managed-access/records.js

@@ -1,8 +1,9 @@
 import { Type } from "@sinclair/typebox";
 import { Value } from "@sinclair/typebox/value";
 import { IdempotencyKeySchema, ProjectIdSchema, RelayProjectRefSchema, } from "@tutti/shared/schemas/domain";
-import { AuthoritySecretSchema, AuthorityTimestampSchema, isAuthorityTimestamp, HostInstallationRefSchema, HostDelegationProjectionSchema, ManagedCreationRefSchema, ManagedTierSchema, } from "@tutti/shared/schemas/internal";
+import { AuthoritySecretSchema, AuthorityTimestampSchema, isAuthorityTimestamp, HostInstallationRefSchema, HostDelegationProjectionSchema, ManagedCreationRefSchema, } from "@tutti/shared/schemas/internal";
 import { ManagedLocalStateError } from "./private-store.js";
+import { upgradeTieredPrivateRecord } from "./legacy-records.js";
 export const InstallationSchema = Type.Object({
     version: Type.Literal(1),
     relay_origin: Type.String({ maxLength: 500 }),
@@ -11,7 +12,7 @@ export const InstallationSchema = Type.Object({
     created_at: AuthorityTimestampSchema,
 }, { additionalProperties: false });
 const DraftFields = {
-    version: Type.Literal(1),
+    version: Type.Literal(2),
     request_ref: IdempotencyKeySchema,
     project_id: ProjectIdSchema,
     relay_origin: Type.String({ maxLength: 500 }),
@@ -20,7 +21,6 @@ const DraftFields = {
     display_name: Type.String({ minLength: 1, maxLength: 80 }),
     description: Type.Optional(Type.String({ maxLength: 160 })),
     surface: Type.Union([Type.Literal("standalone"), Type.Literal("feishu")]),
-    tier: ManagedTierSchema,
     existing_relay_project_ref: Type.Optional(RelayProjectRefSchema),
     previous_request_ref: Type.Optional(IdempotencyKeySchema),
     handoff_token: AuthoritySecretSchema,
@@ -60,6 +60,7 @@ export function parseInstallation(raw, origin) {
     return raw;
 }
 export function parseJournal(raw, origin, requestRef) {
+    raw = upgradeTieredPrivateRecord(raw, true);
     if (!Value.Check(CreationJournalSchema, raw) ||
         raw.relay_origin !== origin ||
         raw.request_ref !== requestRef ||

package/dist/server-shell/managed-access/runtime-records.d.ts

@@ -6,12 +6,11 @@ export declare const ModelSessionOwnerSchema: import("@sinclair/typebox").TObjec
 export type ModelSessionOwner = Static<typeof ModelSessionOwnerSchema>;
 declare const SessionSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
     state: import("@sinclair/typebox").TLiteral<"ready">;
-    version: import("@sinclair/typebox").TLiteral<1>;
+    version: import("@sinclair/typebox").TLiteral<2>;
     project_id: import("@sinclair/typebox").TString;
     delegation_ref: import("@sinclair/typebox").TString;
     grant_ref: import("@sinclair/typebox").TString;
     installation_ref: import("@sinclair/typebox").TString;
-    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     owner: import("@sinclair/typebox").TObject<{
         kind: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"chat">, import("@sinclair/typebox").TLiteral<"workflow">, import("@sinclair/typebox").TLiteral<"task">]>;
         ref: import("@sinclair/typebox").TString;
@@ -25,12 +24,11 @@ declare const SessionSchema: import("@sinclair/typebox").TUnion<[import("@sincla
 }>, import("@sinclair/typebox").TObject<{
     state: import("@sinclair/typebox").TLiteral<"issuing">;
     request_ref: import("@sinclair/typebox").TString;
-    version: import("@sinclair/typebox").TLiteral<1>;
+    version: import("@sinclair/typebox").TLiteral<2>;
     project_id: import("@sinclair/typebox").TString;
     delegation_ref: import("@sinclair/typebox").TString;
     grant_ref: import("@sinclair/typebox").TString;
     installation_ref: import("@sinclair/typebox").TString;
-    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     owner: import("@sinclair/typebox").TObject<{
         kind: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"chat">, import("@sinclair/typebox").TLiteral<"workflow">, import("@sinclair/typebox").TLiteral<"task">]>;
         ref: import("@sinclair/typebox").TString;
@@ -57,12 +55,11 @@ declare const SessionSchema: import("@sinclair/typebox").TUnion<[import("@sincla
         model: import("@sinclair/typebox").TString;
         api_key: import("@sinclair/typebox").TString;
     }>;
-    version: import("@sinclair/typebox").TLiteral<1>;
+    version: import("@sinclair/typebox").TLiteral<2>;
     project_id: import("@sinclair/typebox").TString;
     delegation_ref: import("@sinclair/typebox").TString;
     grant_ref: import("@sinclair/typebox").TString;
     installation_ref: import("@sinclair/typebox").TString;
-    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     owner: import("@sinclair/typebox").TObject<{
         kind: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"chat">, import("@sinclair/typebox").TLiteral<"workflow">, import("@sinclair/typebox").TLiteral<"task">]>;
         ref: import("@sinclair/typebox").TString;
@@ -84,12 +81,11 @@ declare const SessionSchema: import("@sinclair/typebox").TUnion<[import("@sincla
         expires_at: import("@sinclair/typebox").TInteger;
         quota_cap: import("@sinclair/typebox").TInteger;
     }>;
-    version: import("@sinclair/typebox").TLiteral<1>;
+    version: import("@sinclair/typebox").TLiteral<2>;
     project_id: import("@sinclair/typebox").TString;
     delegation_ref: import("@sinclair/typebox").TString;
     grant_ref: import("@sinclair/typebox").TString;
     installation_ref: import("@sinclair/typebox").TString;
-    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     owner: import("@sinclair/typebox").TObject<{
         kind: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"chat">, import("@sinclair/typebox").TLiteral<"workflow">, import("@sinclair/typebox").TLiteral<"task">]>;
         ref: import("@sinclair/typebox").TString;

package/dist/server-shell/managed-access/runtime-records.js

@@ -1,19 +1,19 @@
 import { Type } from "@sinclair/typebox";
 import { Value } from "@sinclair/typebox/value";
 import { ProjectIdSchema, IdempotencyKeySchema } from "@tutti/shared/schemas/domain";
-import { HostDelegationRefSchema, HostInstallationRefSchema, ProjectModelGrantRefSchema, ManagedTierSchema, ManagedRuntimeSessionRefSchema, ManagedRouteRefSchema, ManagedCredentialProjectionSchema, ManagedProviderCredentialSchema, } from "@tutti/shared/schemas/internal";
+import { HostDelegationRefSchema, HostInstallationRefSchema, ProjectModelGrantRefSchema, ManagedRuntimeSessionRefSchema, ManagedRouteRefSchema, ManagedCredentialProjectionSchema, ManagedProviderCredentialSchema, } from "@tutti/shared/schemas/internal";
 import { ManagedLocalStateError } from "./private-store.js";
+import { upgradeTieredPrivateRecord } from "./legacy-records.js";
 export const ModelSessionOwnerSchema = Type.Object({
     kind: Type.Union([Type.Literal("chat"), Type.Literal("workflow"), Type.Literal("task")]),
     ref: Type.String({ pattern: "^[A-Za-z0-9_-]{1,150}$" }),
 }, { additionalProperties: false });
 const Common = {
-    version: Type.Literal(1),
+    version: Type.Literal(2),
     project_id: ProjectIdSchema,
     delegation_ref: HostDelegationRefSchema,
     grant_ref: ProjectModelGrantRefSchema,
     installation_ref: HostInstallationRefSchema,
-    tier: ManagedTierSchema,
     owner: ModelSessionOwnerSchema,
     session_ref: ManagedRuntimeSessionRefSchema,
     route_ref: Type.Optional(ManagedRouteRefSchema),
@@ -40,6 +40,7 @@ const SessionSchema = Type.Union([
     }, { additionalProperties: false }),
 ]);
 export function parseNativeModelSession(value) {
+    value = upgradeTieredPrivateRecord(value);
     if (!Value.Check(SessionSchema, value))
         throw new ManagedLocalStateError("managed_model_session_invalid");
     if ((value.state === "active" || value.state === "revoking") &&
@@ -54,7 +55,6 @@ export function readyModelSession(row) {
         delegation_ref: row.delegation_ref,
         grant_ref: row.grant_ref,
         installation_ref: row.installation_ref,
-        tier: row.tier,
         owner: row.owner,
         session_ref: row.session_ref,
         state: "ready",

package/dist/server-shell/managed-access/runtime.js

@@ -34,7 +34,7 @@ export class NativeManagedRuntime {
                     },
                     ...(options.fetchImpl === undefined ? {} : { fetchImpl: options.fetchImpl }),
                 });
-                if (authority.tier !== journal.tier ||
+                if (authority.delegation_ref !== journal.authority.delegation_ref ||
                     authority.expires_at <= Math.floor(this.now().getTime() / 1000))
                     throw new ManagedLocalStateError("managed_runtime_authority_mismatch");
                 return authority;
@@ -65,8 +65,7 @@ export class NativeManagedRuntime {
                 if (row.project_id !== this.options.projectId ||
                     row.owner.kind !== owner.kind ||
                     row.owner.ref !== owner.ref ||
-                    row.installation_ref !== authority.installation_ref ||
-                    row.tier !== authority.tier)
+                    row.installation_ref !== authority.installation_ref)
                     throw new ManagedLocalStateError("managed_model_session_scope_changed");
                 if (row.delegation_ref !== authority.delegation_ref ||
                     row.grant_ref !== authority.grant_ref) {
@@ -85,15 +84,16 @@ export class NativeManagedRuntime {
                     this.files.write(`${name}.json`, renewed);
                     return renewed;
                 }
+                if (typeof saved === "object" && "version" in saved && saved.version === 1)
+                    this.files.write(`${name}.json`, row);
                 return row;
             }
             const row = {
-                version: 1,
+                version: 2,
                 project_id: this.options.projectId,
                 delegation_ref: authority.delegation_ref,
                 grant_ref: authority.grant_ref,
                 installation_ref: authority.installation_ref,
-                tier: authority.tier,
                 owner,
                 session_ref: createPrefixedId(ID_PREFIXES.managedSession),
                 state: "ready",
@@ -111,7 +111,6 @@ export class NativeManagedRuntime {
     async pin(name, row) {
         const pin = await this.client.pin(row.session_ref, row.route_ref);
         if (pin.session_ref !== row.session_ref ||
-            pin.tier !== row.tier ||
             (row.route_ref !== undefined && pin.route_ref !== row.route_ref) ||
             (row.provider_identity !== undefined &&
                 (row.provider_identity.model !== pin.provider.model ||

package/dist/server-shell/managed-access/state.d.ts

@@ -22,7 +22,6 @@ export declare class NativeManagedState {
         displayName: string;
         description?: string;
         surface: "standalone" | "feishu";
-        tier: "light" | "high" | "max";
         requestRef?: string;
         projectId?: string;
         existing?: {
@@ -33,6 +32,7 @@ export declare class NativeManagedState {
         now?: Date;
     }): CreationJournal;
     read(requestRef: string): CreationJournal;
+    private readJournal;
     attachProject(requestRef: string, now?: Date): CreationJournal;
     project(projectId: string): CreationJournal;
     preparationBody(requestRef: string): PrepareProjectAuthority;
@@ -42,7 +42,6 @@ export declare class NativeManagedState {
         project_id: string;
         installation_ref: string;
         surface: string;
-        tier: string;
         expires_at: string;
     }, now?: Date): CreationJournal;
     validation(requestRef: string, outcome: "validated" | "validation_unknown" | "validation_failed"): CreationJournal;

package/dist/server-shell/managed-access/state.js

@@ -85,12 +85,11 @@ export class NativeManagedState {
         return this.files.transaction(() => {
             const saved = this.files.read(name);
             if (saved !== null) {
-                const record = parseJournal(saved, this.origin, requestRef);
+                const record = this.readJournal(requestRef);
                 if (record.workspace_root !== workspace ||
                     record.display_name !== options.displayName ||
                     record.description !== options.description ||
                     record.surface !== options.surface ||
-                    record.tier !== options.tier ||
                     (options.projectId !== undefined && record.project_id !== options.projectId) ||
                     record.existing_relay_project_ref !== options.existing?.relayProjectRef ||
                     record.previous_request_ref !== options.existing?.previousRequestRef ||
@@ -101,7 +100,7 @@ export class NativeManagedState {
                 return record;
             }
             const record = parseJournal({
-                version: 1,
+                version: 2,
                 request_ref: requestRef,
                 project_id: options.projectId ?? createProjectId(),
                 relay_origin: this.origin,
@@ -110,7 +109,6 @@ export class NativeManagedState {
                 display_name: options.displayName,
                 ...(options.description === undefined ? {} : { description: options.description }),
                 surface: options.surface,
-                tier: options.tier,
                 ...(options.existing === undefined
                     ? {}
                     : {
@@ -130,12 +128,22 @@ export class NativeManagedState {
         });
     }
     read(requestRef) {
-        return this.files.transaction(() => parseJournal(this.files.read(this.journalName(requestRef)), this.origin, requestRef));
+        return this.files.transaction(() => this.readJournal(requestRef));
+    }
+    // Called only inside the private-store mutex. Upgrade metadata atomically;
+    // never rotate proofs, extend consent or restore revoked runtime credentials.
+    readJournal(requestRef) {
+        const name = this.journalName(requestRef);
+        const saved = this.files.read(name);
+        const row = parseJournal(saved, this.origin, requestRef);
+        if (saved && typeof saved === "object" && "version" in saved && saved.version === 1)
+            this.files.write(name, row);
+        return row;
     }
     attachProject(requestRef, now = new Date()) {
         this.bootstrap(requestRef, now);
         return this.files.transaction(() => {
-            const row = parseJournal(this.files.read(this.journalName(requestRef)), this.origin, requestRef);
+            const row = this.readJournal(requestRef);
             const name = `project-${row.project_id}.json`;
             const old = this.files.read(name);
             if (old !== null &&
@@ -156,7 +164,7 @@ export class NativeManagedState {
             const pointer = this.files.read(`project-${projectId}.json`);
             if (!Value.Check(NativeProjectPointerSchema, pointer) || pointer.project_id !== projectId)
                 throw new ManagedLocalStateError("managed_project_binding_invalid");
-            const row = parseJournal(this.files.read(this.journalName(pointer.request_ref)), this.origin, pointer.request_ref);
+            const row = this.readJournal(pointer.request_ref);
             if (row.project_id !== projectId || (row.state !== "validated" && row.state !== "registered"))
                 throw new ManagedLocalStateError("managed_project_binding_invalid");
             return row;
@@ -170,7 +178,6 @@ export class NativeManagedState {
             request_ref: row.request_ref,
             project_id: row.project_id,
             surface: row.surface,
-            tier: row.tier,
             ...(row.existing_relay_project_ref === undefined
                 ? {}
                 : { existing_relay_project_ref: row.existing_relay_project_ref }),
@@ -201,7 +208,6 @@ export class NativeManagedState {
             if (row.project_id !== receipt.project_id ||
                 row.installation_ref !== receipt.installation_ref ||
                 row.surface !== receipt.surface ||
-                row.tier !== receipt.tier ||
                 !Number.isFinite(Date.parse(receipt.expires_at)) ||
                 Date.parse(receipt.expires_at) > Date.parse(row.expires_at))
                 throw new ManagedLocalStateError("managed_preparation_mismatch");
@@ -253,7 +259,6 @@ export class NativeManagedState {
         return this.update(requestRef, (row) => {
             if (!Value.Check(HostDelegationProjectionSchema, authority) ||
                 authority.installation_ref !== row.installation_ref ||
-                authority.tier !== row.tier ||
                 (row.existing_relay_project_ref !== undefined &&
                     authority.relay_project_ref !== row.existing_relay_project_ref))
                 throw new ManagedLocalStateError("managed_registration_mismatch");