@m6d/cortex-server 2.0.1 → 2.1.0

package/README.md

@@ -64,6 +64,16 @@ Only `database`, `model`, and `agents` are required for a minimal setup. `storag
 
 Each key in `agents` becomes a route prefix (e.g. `assistant` → `/agents/assistant/...`). Agents can define per-agent `systemPrompt`, `tools`, `backendFetch`, `loadSessionData`, `resolveRequestContext`, and lifecycle hooks (`onToolCall`, `onStreamFinish`).
 
+## Interactive tools
+
+Control-Center tools published with kind "interactive" are declared to the
+model as client-executed tools: the call streams to the widget, the run parks,
+and `POST /chat/:chatId/tools/:toolCallId/initiate` hands the widget its embed
+payload (never the model). When the widget answers, the server re-establishes
+the result through the tool's verify endpoint and applies the tool's result
+delivery masking before the model reads it. See
+`apps/cortex-cc/docs/interactive-tools.md` for authoring them.
+
 ## Requirements
 
 - Bun >= 1.0.0

package/contracts/interactive.ts

@@ -0,0 +1,53 @@
+/**
+ * The embed ↔ widget handshake for interactive tools.
+ *
+ * A page embedded by the chat widget (a hosted checkout, signing page, …)
+ * reports its outcome with:
+ *
+ *     window.parent.postMessage(
+ *         { type: "cortex:interactive", status: "completed", reference: "session_123" },
+ *         "*",
+ *     );
+ *
+ * The widget accepts the message only when the event's origin matches the
+ * tool's configured `embedOrigin`, and treats the payload as untrusted — for
+ * tools with a verify endpoint the server re-checks the reference before the
+ * agent sees a result.
+ *
+ * Like `wire.ts`, this file is compiled into the client SDKs and must stay
+ * free of runtime dependencies. It is also the spec any future SDK (Flutter)
+ * reimplements against.
+ */
+
+export const INTERACTIVE_MESSAGE_TYPE = "cortex:interactive";
+
+export const INTERACTIVE_STATUSES = ["completed", "cancelled", "failed"] as const;
+
+export type InteractiveStatus = (typeof INTERACTIVE_STATUSES)[number];
+
+export type InteractiveHandshake = {
+    type: typeof INTERACTIVE_MESSAGE_TYPE;
+    status: InteractiveStatus;
+    /** Opaque id the tool's verify endpoint resolves (session id, envelope id, …). */
+    reference?: string;
+};
+
+/**
+ * Parse a `message` event into a handshake, or null when the origin doesn't
+ * match the tool's `embedOrigin` or the payload isn't a well-formed handshake.
+ * Call from the widget's `message` listener with `event.data` / `event.origin`.
+ */
+export function parseInteractiveHandshake(data: unknown, origin: string, embedOrigin: string) {
+    if (origin !== embedOrigin) return null;
+    if (typeof data !== "object" || data === null) return null;
+    const message = data as Record<string, unknown>;
+    if (message["type"] !== INTERACTIVE_MESSAGE_TYPE) return null;
+    const status = INTERACTIVE_STATUSES.find((known) => known === message["status"]);
+    if (!status) return null;
+    const reference = message["reference"];
+    return {
+        type: INTERACTIVE_MESSAGE_TYPE,
+        status,
+        ...(typeof reference === "string" ? { reference } : {}),
+    } satisfies InteractiveHandshake;
+}

package/contracts/runtime.ts

@@ -89,6 +89,19 @@ export const knowledgeChunkSchema = z.object({
     }),
 });
 
+/**
+ * Runtime contract §5.4: present on signatures of `interactive` tools — flows
+ * the end user completes in an embedded surface inside the chat widget. The
+ * tool's endpoint fields act as the *initiate* call (returns the embed URL);
+ * `hasVerify` marks a second, server-trusted call that settles the result.
+ */
+export const toolInteractionSchema = z.object({
+    surface: z.enum(["inline", "modal"]),
+    embedOrigin: z.url(),
+    hasVerify: z.boolean(),
+    resultDelivery: z.enum(["agent", "endpoint", "both"]),
+});
+
 export const toolSignatureSchema = z.object({
     toolId: z.uuid(),
     name: z.string().regex(TOOL_NAME_PATTERN),
@@ -98,6 +111,11 @@ export const toolSignatureSchema = z.object({
     signature: z.string(),
     score: z.number().nullable(),
     pinned: z.boolean(),
+    interaction: toolInteractionSchema.optional(),
+    /** Interactive tools only: the published input JSON Schema, verbatim.
+     * Client-executed declarations need a real schema — the rendered
+     * `signature` text alone is not enough for function calling. */
+    inputSchema: z.record(z.string(), z.unknown()).optional(),
 });
 
 export const serviceCardSchema = z.object({
@@ -194,6 +212,9 @@ export const searchKnowledgeResponseSchema = z.object({
 
 export const executeRequestSchema = z.object({
     input: z.record(z.string(), z.unknown()).default({}),
+    // Interactive tools only: absent | "initiate" targets the tool's endpoint
+    // fields, "verify" targets its verify endpoint config.
+    phase: z.enum(["initiate", "verify"]).optional(),
     context: z
         .object({
             threadId: z.string().max(128).optional(),
@@ -236,6 +257,7 @@ export const runtimeErrorSchema = z.object({
     }),
 });
 
+export type ToolInteraction = z.infer<typeof toolInteractionSchema>;
 export type RuntimeAgentConfig = z.infer<typeof runtimeAgentConfigSchema>;
 export type ResolveRequest = z.input<typeof resolveRequestSchema>;
 export type ResolveResponse = z.infer<typeof resolveResponseSchema>;

package/contracts/wire.ts

@@ -70,12 +70,29 @@ export type TokenUsage = {
     total: number;
 };
 
+/**
+ * How to launch one interactive tool: stamped by the server, per tool name, on
+ * the metadata of an assistant message that may carry its pending call. Kept in
+ * the message so the binding survives server restarts while a run is parked.
+ */
+export type InteractiveToolBinding = {
+    toolId: string;
+    surface: "inline" | "modal";
+    embedOrigin: string;
+    hasVerify: boolean;
+    resultDelivery: "agent" | "endpoint" | "both";
+};
+
 export type MessageMetadata = {
     modelId?: string;
     providerMetadata?: unknown;
     isAborted?: boolean;
     tokenUsage?: TokenUsage;
     attachments?: AttachmentSummary[];
+    interactiveTools?: Record<string, InteractiveToolBinding>;
+    /** Per tool call: the trusted reference its initiate call returned. A
+     * verified completion must match it — the browser's word is never enough. */
+    interactiveReferences?: Record<string, string>;
 };
 
 /**
@@ -93,6 +110,21 @@ export type CortexMessage<TPart = unknown> = {
     metadata?: MessageMetadata;
 };
 
+/**
+ * Response of `POST /chat/:chatId/tools/:toolCallId/initiate`. `interactive:
+ * false` means the pending call is not an interactive CC tool — the widget
+ * falls back to its default rendering for the call. The payload is for the
+ * widget only; it never reaches the LLM.
+ */
+export type InteractiveInitiateResult =
+    | { interactive: false }
+    | {
+          interactive: true;
+          embedUrl: string;
+          surface: "inline" | "modal";
+          embedOrigin: string;
+      };
+
 export type ThreadCreatedEvent = {
     type: "thread:created";
     payload: { thread: ThreadSummary };

package/dist/contracts/interactive.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The embed ↔ widget handshake for interactive tools.
+ *
+ * A page embedded by the chat widget (a hosted checkout, signing page, …)
+ * reports its outcome with:
+ *
+ *     window.parent.postMessage(
+ *         { type: "cortex:interactive", status: "completed", reference: "session_123" },
+ *         "*",
+ *     );
+ *
+ * The widget accepts the message only when the event's origin matches the
+ * tool's configured `embedOrigin`, and treats the payload as untrusted — for
+ * tools with a verify endpoint the server re-checks the reference before the
+ * agent sees a result.
+ *
+ * Like `wire.ts`, this file is compiled into the client SDKs and must stay
+ * free of runtime dependencies. It is also the spec any future SDK (Flutter)
+ * reimplements against.
+ */
+export declare const INTERACTIVE_MESSAGE_TYPE = "cortex:interactive";
+export declare const INTERACTIVE_STATUSES: readonly ["completed", "cancelled", "failed"];
+export type InteractiveStatus = (typeof INTERACTIVE_STATUSES)[number];
+export type InteractiveHandshake = {
+    type: typeof INTERACTIVE_MESSAGE_TYPE;
+    status: InteractiveStatus;
+    /** Opaque id the tool's verify endpoint resolves (session id, envelope id, …). */
+    reference?: string;
+};
+/**
+ * Parse a `message` event into a handshake, or null when the origin doesn't
+ * match the tool's `embedOrigin` or the payload isn't a well-formed handshake.
+ * Call from the widget's `message` listener with `event.data` / `event.origin`.
+ */
+export declare function parseInteractiveHandshake(data: unknown, origin: string, embedOrigin: string): {
+    reference?: string | undefined;
+    type: "cortex:interactive";
+    status: "failed" | "completed" | "cancelled";
+} | null;

package/dist/contracts/runtime.d.ts

@@ -60,6 +60,25 @@ export declare const knowledgeChunkSchema: z.ZodObject<{
         service: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>;
 }, z.core.$strip>;
+/**
+ * Runtime contract §5.4: present on signatures of `interactive` tools — flows
+ * the end user completes in an embedded surface inside the chat widget. The
+ * tool's endpoint fields act as the *initiate* call (returns the embed URL);
+ * `hasVerify` marks a second, server-trusted call that settles the result.
+ */
+export declare const toolInteractionSchema: z.ZodObject<{
+    surface: z.ZodEnum<{
+        inline: "inline";
+        modal: "modal";
+    }>;
+    embedOrigin: z.ZodURL;
+    hasVerify: z.ZodBoolean;
+    resultDelivery: z.ZodEnum<{
+        agent: "agent";
+        endpoint: "endpoint";
+        both: "both";
+    }>;
+}, z.core.$strip>;
 export declare const toolSignatureSchema: z.ZodObject<{
     toolId: z.ZodUUID;
     name: z.ZodString;
@@ -69,6 +88,20 @@ export declare const toolSignatureSchema: z.ZodObject<{
     signature: z.ZodString;
     score: z.ZodNullable<z.ZodNumber>;
     pinned: z.ZodBoolean;
+    interaction: z.ZodOptional<z.ZodObject<{
+        surface: z.ZodEnum<{
+            inline: "inline";
+            modal: "modal";
+        }>;
+        embedOrigin: z.ZodURL;
+        hasVerify: z.ZodBoolean;
+        resultDelivery: z.ZodEnum<{
+            agent: "agent";
+            endpoint: "endpoint";
+            both: "both";
+        }>;
+    }, z.core.$strip>>;
+    inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$strip>;
 export declare const serviceCardSchema: z.ZodObject<{
     serviceId: z.ZodUUID;
@@ -152,6 +185,20 @@ export declare const resolveResponseSchema: z.ZodObject<{
         signature: z.ZodString;
         score: z.ZodNullable<z.ZodNumber>;
         pinned: z.ZodBoolean;
+        interaction: z.ZodOptional<z.ZodObject<{
+            surface: z.ZodEnum<{
+                inline: "inline";
+                modal: "modal";
+            }>;
+            embedOrigin: z.ZodURL;
+            hasVerify: z.ZodBoolean;
+            resultDelivery: z.ZodEnum<{
+                agent: "agent";
+                endpoint: "endpoint";
+                both: "both";
+            }>;
+        }, z.core.$strip>>;
+        inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>>;
     services: z.ZodArray<z.ZodObject<{
         serviceId: z.ZodUUID;
@@ -191,6 +238,20 @@ export declare const searchToolsResponseSchema: z.ZodObject<{
         signature: z.ZodString;
         score: z.ZodNullable<z.ZodNumber>;
         pinned: z.ZodBoolean;
+        interaction: z.ZodOptional<z.ZodObject<{
+            surface: z.ZodEnum<{
+                inline: "inline";
+                modal: "modal";
+            }>;
+            embedOrigin: z.ZodURL;
+            hasVerify: z.ZodBoolean;
+            resultDelivery: z.ZodEnum<{
+                agent: "agent";
+                endpoint: "endpoint";
+                both: "both";
+            }>;
+        }, z.core.$strip>>;
+        inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>>;
     sharedShapes: z.ZodArray<z.ZodObject<{
         ref: z.ZodString;
@@ -215,6 +276,20 @@ export declare const searchServicesResponseSchema: z.ZodObject<{
         signature: z.ZodString;
         score: z.ZodNullable<z.ZodNumber>;
         pinned: z.ZodBoolean;
+        interaction: z.ZodOptional<z.ZodObject<{
+            surface: z.ZodEnum<{
+                inline: "inline";
+                modal: "modal";
+            }>;
+            embedOrigin: z.ZodURL;
+            hasVerify: z.ZodBoolean;
+            resultDelivery: z.ZodEnum<{
+                agent: "agent";
+                endpoint: "endpoint";
+                both: "both";
+            }>;
+        }, z.core.$strip>>;
+        inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>>;
     sharedShapes: z.ZodArray<z.ZodObject<{
         ref: z.ZodString;
@@ -239,6 +314,10 @@ export declare const searchKnowledgeResponseSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const executeRequestSchema: z.ZodObject<{
     input: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    phase: z.ZodOptional<z.ZodEnum<{
+        verify: "verify";
+        initiate: "initiate";
+    }>>;
     context: z.ZodOptional<z.ZodObject<{
         threadId: z.ZodOptional<z.ZodString>;
         userId: z.ZodOptional<z.ZodString>;
@@ -302,6 +381,7 @@ export declare const runtimeErrorSchema: z.ZodObject<{
         upstreamStatus: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>;
 }, z.core.$strip>;
+export type ToolInteraction = z.infer<typeof toolInteractionSchema>;
 export type RuntimeAgentConfig = z.infer<typeof runtimeAgentConfigSchema>;
 export type ResolveRequest = z.input<typeof resolveRequestSchema>;
 export type ResolveResponse = z.infer<typeof resolveResponseSchema>;

package/dist/contracts/wire.d.ts

@@ -50,12 +50,28 @@ export type TokenUsage = {
     };
     total: number;
 };
+/**
+ * How to launch one interactive tool: stamped by the server, per tool name, on
+ * the metadata of an assistant message that may carry its pending call. Kept in
+ * the message so the binding survives server restarts while a run is parked.
+ */
+export type InteractiveToolBinding = {
+    toolId: string;
+    surface: "inline" | "modal";
+    embedOrigin: string;
+    hasVerify: boolean;
+    resultDelivery: "agent" | "endpoint" | "both";
+};
 export type MessageMetadata = {
     modelId?: string;
     providerMetadata?: unknown;
     isAborted?: boolean;
     tokenUsage?: TokenUsage;
     attachments?: AttachmentSummary[];
+    interactiveTools?: Record<string, InteractiveToolBinding>;
+    /** Per tool call: the trusted reference its initiate call returned. A
+     * verified completion must match it — the browser's word is never enough. */
+    interactiveReferences?: Record<string, string>;
 };
 /**
  * A stored message as it is persisted and served. TanStack AI's `UIMessage`
@@ -71,6 +87,20 @@ export type CortexMessage<TPart = unknown> = {
     parts: TPart[];
     metadata?: MessageMetadata;
 };
+/**
+ * Response of `POST /chat/:chatId/tools/:toolCallId/initiate`. `interactive:
+ * false` means the pending call is not an interactive CC tool — the widget
+ * falls back to its default rendering for the call. The payload is for the
+ * widget only; it never reaches the LLM.
+ */
+export type InteractiveInitiateResult = {
+    interactive: false;
+} | {
+    interactive: true;
+    embedUrl: string;
+    surface: "inline" | "modal";
+    embedOrigin: string;
+};
 export type ThreadCreatedEvent = {
     type: "thread:created";
     payload: {

package/dist/src/lib/adapters/database/index.d.ts

@@ -34,6 +34,13 @@ export type DatabaseAdapter = {
         upsert(threadId: string, messages: ChatMessage[], options?: {
             replaceAttachments?: boolean;
         }): Promise<void>;
+        /**
+         * Atomically merges one anchored interactive reference into the
+         * message's metadata as a single-statement JSON merge — safe under
+         * concurrent writers across replicas, unlike a read-modify-write of
+         * the whole message.
+         */
+        mergeInteractiveReference(threadId: string, messageId: string, toolCallId: string, reference: string): Promise<void>;
     };
     llmRequests: {
         insert(requests: {

package/dist/src/lib/adapters/database/message-content.d.ts

@@ -16,6 +16,8 @@ export declare function withOwnedAttachments(messages: ChatMessage[], replaceAtt
         providerMetadata?: unknown;
         isAborted?: boolean;
         tokenUsage?: import("../../types").TokenUsage;
+        interactiveTools?: Record<string, import("../..").InteractiveToolBinding>;
+        interactiveReferences?: Record<string, string>;
     };
     id: string;
     role: "system" | "user" | "assistant";

package/dist/src/lib/adapters/database/mssql/index.d.ts

@@ -76,6 +76,7 @@ export declare function createMssqlAdapter(connectionString: string, storage?: S
         upsert(threadId: string, messagesToUpsert: import("../../../types").ChatMessage[], options?: {
             replaceAttachments?: boolean;
         }): Promise<void>;
+        mergeInteractiveReference(threadId: string, messageId: string, toolCallId: string, reference: string): Promise<void>;
     };
     llmRequests: {
         insert(requests: {

package/dist/src/lib/adapters/database/mssql/messages.d.ts

@@ -34,4 +34,5 @@ export declare function createMessagesRepository(db: MssqlDb): {
     upsert(threadId: string, messagesToUpsert: ChatMessage[], options?: {
         replaceAttachments?: boolean;
     }): Promise<void>;
+    mergeInteractiveReference(threadId: string, messageId: string, toolCallId: string, reference: string): Promise<void>;
 };

package/dist/src/lib/adapters/database/postgres/index.d.ts

@@ -76,6 +76,7 @@ export declare function createPostgresAdapter(connectionString: string, storage?
         upsert(threadId: string, messagesToUpsert: import("../../../types").ChatMessage[], options?: {
             replaceAttachments?: boolean;
         }): Promise<void>;
+        mergeInteractiveReference(threadId: string, messageId: string, toolCallId: string, reference: string): Promise<void>;
     };
     llmRequests: {
         insert(requests: {

package/dist/src/lib/adapters/database/postgres/messages.d.ts

@@ -34,4 +34,5 @@ export declare function createMessagesRepository(db: PostgresDb): {
     upsert(threadId: string, messagesToUpsert: ChatMessage[], options?: {
         replaceAttachments?: boolean;
     }): Promise<void>;
+    mergeInteractiveReference(threadId: string, messageId: string, toolCallId: string, reference: string): Promise<void>;
 };

package/dist/src/lib/ai/cc-runtime.d.ts

@@ -1,7 +1,7 @@
 import type { ResolvedCortexAgentConfig } from "../config";
 import type { Thread } from "../types";
 import type { ControlCenterClient } from "../cc/client";
-import type { CcToolRegistry } from "../cc/registry";
+import type { CcInteractiveTool, CcToolRegistry } from "../cc/registry";
 import type { ResolveResponse, RuntimeAgentConfig } from "../cc/types";
 type CcRuntimeOptions = {
     ccClient: ControlCenterClient | null;
@@ -48,6 +48,7 @@ export declare function createCcRuntime(options: CcRuntimeOptions): {
         publishedAt: string;
     };
     registry: CcToolRegistry;
+    interactiveTools: Map<string, CcInteractiveTool>;
     threadId: string;
     turnKey: string;
     userId: string;

package/dist/src/lib/ai/interactive.d.ts

@@ -0,0 +1,62 @@
+import type { ResolvedCortexAgentConfig } from "../config";
+import type { ChatMessage, Thread } from "../types";
+import { ControlCenterClient } from "../cc/client";
+import type { CcRuntime } from "../cc/registry";
+/**
+ * The wire-shape bindings stamped on the turn's final assistant message, so a
+ * parked interactive call can be initiated and verified after any restart.
+ * Only names that actually won declaration merging are stamped — a call to a
+ * colliding consumer-owned tool must never be treated as interactive. Undefined
+ * when nothing qualifies, keeping metadata lean.
+ */
+export declare function interactiveToolBindings(cc: CcRuntime | undefined, takenNames: ReadonlySet<string>): {
+    [k: string]: {
+        surface: "inline" | "modal";
+        embedOrigin: string;
+        hasVerify: boolean;
+        resultDelivery: "agent" | "endpoint" | "both";
+        toolId: string;
+    };
+} | undefined;
+/** Null when the agent has no Control Center — every caller treats that as "skip". */
+export declare function createCcClient(config: ResolvedCortexAgentConfig): ControlCenterClient | null;
+/**
+ * `POST /chat/:chatId/tools/:toolCallId/initiate` — runs the interactive
+ * tool's initiate call (the tool's own endpoint) and hands the widget its
+ * embed payload. The model never sees this payload. The idempotency key is
+ * pinned to the tool call, so a reload mid-flow reuses the created session
+ * instead of opening a second one.
+ */
+export declare function initiateInteractiveTool(options: {
+    config: ResolvedCortexAgentConfig;
+    thread: Thread;
+    userId: string;
+    token: string;
+    toolCallId: string;
+}): Promise<{
+    interactive: false;
+    embedUrl?: undefined;
+    surface?: undefined;
+    embedOrigin?: undefined;
+} | {
+    interactive: true;
+    embedUrl: string;
+    surface: "inline" | "modal";
+    embedOrigin: string;
+}>;
+/**
+ * The trust boundary for interactive results: whatever the client submitted
+ * for a bound tool call is replaced wholesale — cancelled/failed pass through
+ * normalized, completed is re-established by the tool's verify call when it
+ * has one, and result delivery masking is applied before the model reads it.
+ * Runs before the answering turn is persisted, so both the stored transcript
+ * and the model context carry only settled results.
+ */
+export declare function settleInteractiveToolResults(options: {
+    messages: ChatMessage[];
+    thread: Thread;
+    userId: string;
+    token: string;
+    config: ResolvedCortexAgentConfig;
+    ccClient: ControlCenterClient | null;
+}): Promise<void>;

package/dist/src/lib/ai/turn-tools.d.ts

@@ -35,5 +35,19 @@ export declare function createToolInstrumentation(options: TurnToolsOptions & {
     onBeforeToolCall(_ctx: import("@tanstack/ai").ChatMiddlewareContext<unknown>, { toolName, toolCallId, args }: import("@tanstack/ai").ToolCallHookContext): void;
     onAfterToolCall(_ctx: import("@tanstack/ai").ChatMiddlewareContext<unknown>, { toolName, toolCallId }: import("@tanstack/ai").AfterToolCallInfo): void;
 } | undefined;
+/**
+ * Interactive CC tools are declared like the request's client tools: no
+ * executor, so the call streams to the widget as a tool-call part and the run
+ * parks until the widget answers. The declaration carries the tool's published
+ * input schema — function-calling models ignore schemas described only in
+ * prose — with a permissive object as the fallback for older Control Centers.
+ * Names the consumer already claimed are skipped: those calls belong to the
+ * consumer's tool, and must neither be declared nor stamped as interactive.
+ */
+export declare function interactiveToolDeclarations(cc: CcRuntime | undefined, takenNames: ReadonlySet<string>): {
+    name: string;
+    description: string;
+    parameters: Record<string, unknown>;
+}[];
 export declare function hasDefaultAttachmentInterceptor(config: ResolvedCortexAgentConfig): boolean;
 export {};

package/dist/src/lib/cc/client.d.ts

@@ -8,6 +8,9 @@ export type ExecuteOptions = {
     turnKey: string;
     stepIndex: number;
     callIndex: number;
+    /** Overrides the composed key — used where stability must outlive the turn
+     * counters, e.g. one interactive initiate per tool call across reloads. */
+    idempotencyKey?: string;
     timeoutMs?: number;
     abortSignal?: AbortSignal;
 };
@@ -74,6 +77,13 @@ export declare class ControlCenterClient {
             signature: string;
             score: number | null;
             pinned: boolean;
+            interaction?: {
+                surface: "inline" | "modal";
+                embedOrigin: string;
+                hasVerify: boolean;
+                resultDelivery: "agent" | "endpoint" | "both";
+            } | undefined;
+            inputSchema?: Record<string, unknown> | undefined;
         }[];
         services: {
             serviceId: string;
@@ -103,6 +113,13 @@ export declare class ControlCenterClient {
             signature: string;
             score: number | null;
             pinned: boolean;
+            interaction?: {
+                surface: "inline" | "modal";
+                embedOrigin: string;
+                hasVerify: boolean;
+                resultDelivery: "agent" | "endpoint" | "both";
+            } | undefined;
+            inputSchema?: Record<string, unknown> | undefined;
         }[];
         sharedShapes: {
             ref: string;
@@ -127,6 +144,13 @@ export declare class ControlCenterClient {
             signature: string;
             score: number | null;
             pinned: boolean;
+            interaction?: {
+                surface: "inline" | "modal";
+                embedOrigin: string;
+                hasVerify: boolean;
+                resultDelivery: "agent" | "endpoint" | "both";
+            } | undefined;
+            inputSchema?: Record<string, unknown> | undefined;
         }[];
         sharedShapes: {
             ref: string;

package/dist/src/lib/cc/registry.d.ts

@@ -1,9 +1,20 @@
 import type { ControlCenterClient } from "./client";
-import type { RuntimeAgentConfig } from "./types";
+import type { RuntimeAgentConfig, ToolInteraction } from "./types";
 export type CcToolBinding = {
     toolId: string;
     readOnly: boolean;
 };
+/**
+ * An interactive tool resolved for this turn. Declared to the model as a real
+ * client-executed tool — never a sandbox binding — so its call streams to the
+ * widget as a tool-call part and parks the run until the flow settles.
+ */
+export type CcInteractiveTool = {
+    toolId: string;
+    signature: string;
+    interaction: ToolInteraction;
+    inputSchema?: Record<string, unknown>;
+};
 /**
  * Turn-scoped and mutable: seeded from /resolve, extended by searchTools
  * mid-turn so a tool discovered at step 3 is callable at step 4.
@@ -13,6 +24,7 @@ export declare function registerCcTools(registry: CcToolRegistry, tools: {
     name: string;
     toolId: string;
     readOnly: boolean;
+    interaction?: ToolInteraction;
 }[]): void;
 export declare function recordRecentCcTool(threadId: string, name: string): void;
 export declare function getRecentCcTools(threadId: string): string[];
@@ -22,6 +34,7 @@ export type CcRuntime = {
     agentId: string;
     config: RuntimeAgentConfig;
     registry: CcToolRegistry;
+    interactiveTools: Map<string, CcInteractiveTool>;
     threadId: string;
     turnKey: string;
     userId: string;

package/dist/src/lib/cc/types.d.ts

@@ -1,5 +1,5 @@
 import z from "zod";
-export { AGENT_SLUG_PATTERN, executeResponseSchema, resolveResponseSchema, runtimeAgentConfigSchema, searchKnowledgeResponseSchema, searchServicesResponseSchema, searchToolsResponseSchema, type ExecuteRequest, type ResolveRequest, type ResolveResponse, type RuntimeAgentConfig, type SearchRequest, } from "../../../contracts/runtime";
+export { AGENT_SLUG_PATTERN, executeResponseSchema, resolveResponseSchema, runtimeAgentConfigSchema, searchKnowledgeResponseSchema, searchServicesResponseSchema, searchToolsResponseSchema, type ExecuteRequest, type ResolveRequest, type ResolveResponse, type RuntimeAgentConfig, type SearchRequest, type ToolInteraction, } from "../../../contracts/runtime";
 /**
  * The contract's error envelope, hardened for this consumer: a newer runtime may
  * answer with an error kind this build has never heard of, which must degrade to a

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@m6d/cortex-server",
-    "version": "2.0.1",
+    "version": "2.1.0",
     "description": "Reusable AI agent chat server library for Hono + Bun",
     "license": "MIT",
     "type": "module",
@@ -74,5 +74,8 @@
     },
     "publishConfig": {
         "access": "public"
-    }
+    },
+    "releaseWatchPaths": [
+        "internal/contracts"
+    ]
 }