@opengeni/contracts 0.20.1 → 0.22.0

package/dist/index.js

@@ -2638,6 +2638,66 @@ var DEFAULT_FIRST_PARTY_MCP_PERMISSIONS = [
   "rigs:use",
   "github:use"
 ];
+var FIRST_PARTY_MCP_TOOL_NAMES = [
+  "set_session_title",
+  "goal_set",
+  "goal_update",
+  "goal_complete",
+  "goal_pause",
+  "memory_search",
+  "memory_save",
+  "memory_correct",
+  "sandboxes_list",
+  "sandbox_attach",
+  "sandbox_swap",
+  "run_on",
+  "sandbox_provision",
+  "rig_list",
+  "rig_get",
+  "rig_propose_change",
+  "rig_verify",
+  "rig_promote",
+  "sessions_list",
+  "session_get",
+  "session_events",
+  "session_create",
+  "session_send_message",
+  "session_pause",
+  "session_resume",
+  "session_steer",
+  "set_other_session_title",
+  "variable_set_list",
+  "environment_list",
+  "variable_set_set_variable",
+  "environment_set_variable",
+  "github_connect_link",
+  "github_token",
+  "github_repositories_list",
+  "social_connections_list",
+  "social_posts_recent",
+  "social_daily_analysis_context",
+  "scheduled_tasks_list",
+  "scheduled_tasks_get",
+  "scheduled_tasks_create",
+  "scheduled_tasks_update",
+  "scheduled_tasks_pause",
+  "scheduled_tasks_resume",
+  "scheduled_tasks_trigger",
+  "scheduled_tasks_delete",
+  "scheduled_task_runs_list",
+  "slack_bot_list_channels",
+  "slack_bot_channel_history",
+  "slack_bot_list_users",
+  "slack_bot_post_message"
+];
+var FirstPartyMcpToolName = z3.enum(FIRST_PARTY_MCP_TOOL_NAMES);
+var DEFAULT_FIRST_PARTY_MCP_TOOLS = [
+  "set_session_title",
+  "goal_set",
+  "goal_update",
+  "goal_complete",
+  "goal_pause"
+];
 function prefixedMcpToolName(registryId2, toolName) {
   return `${registryId2}__${toolName}`;
 }
@@ -3021,6 +3081,9 @@ var DelegatedAccessTokenPayload = z3.object({
   // Worker-asserted session scope for first-party MCP calls (HMAC-signed, not
   // agent-controlled); enables session-scoped tools such as goal management.
   sessionId: z3.string().uuid().optional(),
+  // Model-visible first-party tool selection for a worker-bound session.
+  // This is visibility only; permissions remain the authorization boundary.
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName).optional(),
   // The turn making the call (the caller's identity), HMAC-signed by the worker
   // at turn setup. Lets a tool classify WHO is calling from the token itself,
   // instead of racily re-reading the session's live active_turn_id — e.g. the
@@ -4387,19 +4450,6 @@ var ComposerDraft = z3.object({
   sourceTurnVersion: z3.number().int().positive().nullable(),
   updatedAt: z3.string().nullable()
 });
-var SessionQueueSnapshot = z3.object({
-  version: z3.number().int().nonnegative(),
-  effectiveControl: EffectiveSessionControl,
-  /**
-   * True while the latest attempt is interrupted but has not durably proved
-   * quiescence: no more inference, user-visible output, or workspace-persistence
-   * authority. Temporal cancellation/terminalization is not that proof. This is
-   * distinct from ordinary capacity queueing, remains accurate with an empty
-   * visible queue, and is independent of Steer-row metadata or withdrawal.
-   */
-  stoppingPreviousAttempt: z3.boolean(),
-  items: z3.array(SessionTurn)
-});
 var MoveSessionQueueItemRequest = z3.object({
   clientEventId: SessionOperationKey,
   expectedQueueVersion: z3.number().int().nonnegative(),
@@ -4658,7 +4708,6 @@ var SessionSystemUpdatePayload = z3.discriminatedUnion("type", [
 ]);
 var SessionSystemUpdateState = z3.enum([
   "pending",
-  "deferred",
   "delivered",
   "cancelled",
   "superseded",
@@ -4676,9 +4725,75 @@ var SessionSystemUpdate = z3.object({
   lineage: z3.record(z3.string(), z3.unknown()),
   state: SessionSystemUpdateState,
   deliveredTurnId: z3.string().uuid().nullable(),
+  /**
+   * The exact durable model-memory row containing the coalesced batch that
+   * delivered this update. Null until claim; every member of one batch shares
+   * the same id.
+   */
+  deliveredHistoryItemId: z3.string().uuid().nullable(),
   deliveredAt: z3.string().nullable(),
   createdAt: z3.string()
 });
+var SessionPendingInputPreview = SessionSystemUpdate.pick({
+  id: true,
+  sessionId: true,
+  kind: true,
+  classification: true,
+  sourceId: true,
+  summary: true,
+  createdAt: true
+});
+var SessionQueueSnapshot = z3.object({
+  version: z3.number().int().nonnegative(),
+  effectiveControl: EffectiveSessionControl,
+  /**
+   * True while the latest attempt is interrupted but has not durably proved
+   * quiescence: no more inference, user-visible output, or workspace-persistence
+   * authority. Temporal cancellation/terminalization is not that proof. This is
+   * distinct from ordinary capacity queueing, remains accurate with an empty
+   * visible queue, and is independent of Steer-row metadata or withdrawal.
+   */
+  stoppingPreviousAttempt: z3.boolean(),
+  items: z3.array(SessionTurn),
+  /** Canonical bounded previews; never reconstructed from session events. */
+  pendingInputs: z3.array(SessionPendingInputPreview),
+  /**
+   * Exact members of the next bounded machine-input batch that will join an
+   * already-waiting human/API prompt. Null means the next machine-input claim
+   * is standalone. This is a projection of canonical rows, not queue state.
+   */
+  pendingInputAttachment: z3.object({
+    turnId: z3.string().uuid(),
+    inputIds: z3.array(z3.string().uuid()).min(1)
+  }).nullable()
+});
+function renderSessionSystemUpdateBatch(updates) {
+  if (updates.length === 0) {
+    throw new TypeError("A durable machine-input batch requires at least one update");
+  }
+  return [
+    "[OpenGeni internal updates]",
+    "These platform updates were delivered together for this inference. They are not human prompts.",
+    JSON.stringify({
+      updates: updates.map((update) => ({
+        id: update.id,
+        kind: update.kind,
+        classification: update.classification,
+        sourceId: update.sourceId,
+        summary: update.summary,
+        payload: update.payload,
+        lineage: update.lineage
+      }))
+    })
+  ].join("\n");
+}
+function sessionSystemUpdateBatchHistoryItem(updates) {
+  return {
+    type: "message",
+    role: "system",
+    content: renderSessionSystemUpdateBatch(updates)
+  };
+}
 var VariableSetVariableName = z3.string().regex(/^[A-Z][A-Z0-9_]*$/).max(128);
 function withVariableSetIdAlias(shape) {
   return z3.preprocess((input) => {
@@ -5006,6 +5121,29 @@ var CapabilityPackSkill = z3.object({
     });
   }
 });
+var SessionSkill = CapabilityPackSkill;
+var SessionSkills = z3.array(SessionSkill).max(32).transform((skills, ctx) => {
+  const selected = /* @__PURE__ */ new Map();
+  for (const skill of skills) {
+    const key = skill.name.toLowerCase();
+    const fingerprint2 = JSON.stringify({
+      description: skill.description ?? null,
+      files: [...skill.files].sort((left, right) => left.path.localeCompare(right.path)).map(({ path, content }) => ({ path, content }))
+    });
+    const existing = selected.get(key);
+    if (!existing) {
+      selected.set(key, { fingerprint: fingerprint2, skill });
+      continue;
+    }
+    if (existing.fingerprint !== fingerprint2) {
+      ctx.addIssue({
+        code: "custom",
+        message: `conflicting session skill definitions: ${skill.name}`
+      });
+    }
+  }
+  return [...selected.values()].map(({ skill }) => skill);
+});
 function isSafePackSkillRelativePath(path) {
   if (path.startsWith("/") || path.includes("\\")) {
     return false;
@@ -5220,10 +5358,13 @@ var CreateConnectionRequest = z3.object({
   expiresAt: z3.string().datetime({ offset: true }).nullable().optional(),
   metadata: z3.record(z3.string(), z3.unknown()).default({})
 });
-var ConnectOpenGeniSlackBotRequest = z3.object({
-  token: z3.string().trim().startsWith("xoxb-").max(8192),
+var OpenGeniSlackBotInstallRequest = z3.object({
   connectionId: z3.string().uuid().optional()
 });
+var OpenGeniSlackBotInstallStart = z3.object({
+  authorizationUrl: z3.string().url(),
+  expiresAt: z3.string().datetime({ offset: true })
+});
 var UpdateConnectionRequest = z3.object({
   providerDomain: z3.string().min(1).optional(),
   subjectId: z3.string().min(1).nullable().optional(),
@@ -5340,14 +5481,14 @@ var CapabilityCatalogItem = z3.object({
   runtime: CapabilityRuntime.default({ available: false, notes: null }),
   enabled: z3.boolean().default(false),
   enabledReason: z3.string().nullable().default(null),
-  // The connection backing this enabled installation, when the enable-time
-  // connectionRef resolved to one (null for header/credential-free items —
-  // that means "no connection involved", not "broken"). Lets the UI match
-  // connection health by id instead of guessing from providerDomain alone.
+  // The non-secret connection binding stored with an enabled installation.
+  // Workspace refs retain an exact row id. Subject refs deliberately omit it:
+  // each caller resolves their own visible row by provider/kind at runtime.
   connectionRef: z3.object({
-    connectionId: z3.string().min(1),
+    connectionId: z3.string().min(1).optional(),
     providerDomain: z3.string().min(1),
-    kind: z3.string().min(1)
+    kind: z3.string().min(1),
+    subjectScope: z3.enum(["workspace", "subject"]).optional()
   }).nullable().default(null),
   metadata: z3.record(z3.string(), z3.unknown()).default({}),
   createdAt: z3.string().optional(),
@@ -5434,6 +5575,7 @@ var Session = z3.object({
   // null when the session carried none.
   instructions: z3.string().nullable(),
   resources: z3.array(ResourceRef),
+  skills: SessionSkills.default([]),
   tools: z3.array(ToolRef),
   // Origin of the persisted tool allow-list. Optional for rolling client
   // compatibility; current servers emit it and legacy rows map to `legacy`.
@@ -5478,6 +5620,9 @@ var Session = z3.object({
   // Non-default first-party MCP token permissions (manager-style sessions);
   // null means the fixed worker default set.
   firstPartyMcpPermissions: z3.array(Permission).nullable(),
+  // null means the fixed minimal worker-visible default. An explicit array,
+  // including [], is the exact model-visible first-party selection.
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName).nullable().default(null),
   // Per-session third-party MCP servers, metadata only. Credential values are
   // write-only and never appear here.
   mcpServers: z3.array(SessionMcpServerMetadata).default([]),
@@ -5617,6 +5762,9 @@ var SessionEventType = z3.enum([
   "goal.continuation",
   "system.update.pending",
   "system.update.delivered",
+  "system.update.superseded",
+  "system.update.cancelled",
+  "system.update.settled",
   "session.control.paused",
   "session.control.resumed",
   "session.control.steer_requested",
@@ -5805,6 +5953,9 @@ var SESSION_EVENT_SEMANTIC_CLASS_TYPES = {
     "goal.continuation",
     "system.update.pending",
     "system.update.delivered",
+    "system.update.superseded",
+    "system.update.cancelled",
+    "system.update.settled",
     "session.control.paused",
     "session.control.resumed",
     "session.control.steer_requested",
@@ -7112,6 +7263,9 @@ var CreateSessionRequest = withVariableSetIdAlias({
   // authoritative. Top-level omission remains []. Presence is resolved from
   // the raw request because this Zod default erases absent-vs-empty.
   resources: z3.array(ResourceRef).default([]),
+  // Inline skills are fixed onto the session. Child omission inherits the
+  // trusted parent's selection; an explicit array, including [], wins.
+  skills: SessionSkills.default([]),
   // The same child omission rule applies to selected MCP tool refs. Top-level
   // omission still applies workspace-default capability MCP tools; explicit []
   // suppresses those defaults (the first-party OpenGeni server remains added).
@@ -7164,6 +7318,10 @@ var CreateSessionRequest = withVariableSetIdAlias({
   // A goal-bearing session whose explicit/effective set omits goals:manage is
   // rejected; creation never silently expands a child beyond that set.
   firstPartyMcpPermissions: z3.array(Permission).optional(),
+  // Exact model-visible selection from the broad first-party OpenGeni MCP
+  // catalog. Omit for the minimal default; [] intentionally exposes none.
+  // This does not grant authority: every registered tool is permission-gated.
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName).optional(),
   // Third-party MCP servers attached only to this session. For an agent-created
   // child, omission snapshots its trusted immediate parent's server definitions,
   // policies, connection refs, and encrypted credentials. Explicit arrays,
@@ -8204,7 +8362,6 @@ export {
   CompactSessionContextResult,
   CompleteFileUploadResponse,
   ComposerDraft,
-  ConnectOpenGeniSlackBotRequest,
   ConnectionCredentialBundle,
   ConnectionKind,
   ConnectionMetadata,
@@ -8234,6 +8391,7 @@ export {
   CredentialAuthNeededPayload,
   DEFAULT_CODEX_FLEET_POLICY_V1,
   DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,
+  DEFAULT_FIRST_PARTY_MCP_TOOLS,
   DESKTOP_STREAM_PORT,
   DelegatedAccessTokenPayload,
   DeleteSessionQueueItemRequest,
@@ -8279,11 +8437,13 @@ export {
   EntitlementsMode,
   ErrorCode,
   ErrorEnvelope,
+  FIRST_PARTY_MCP_TOOL_NAMES,
   FileAsset,
   FileDownloadUrlResponse,
   FileResourceRef,
   FileStatus,
   FileUploadStatus,
+  FirstPartyMcpToolName,
   FsChangeKind,
   FsChangedPayload,
   FsDeleteRequest,
@@ -8403,6 +8563,8 @@ export {
   OPENGENI_SLACK_BOT_REQUIRED_SCOPES,
   OPENGENI_SLACK_BOT_SESSION_METADATA_KEY,
   OpenGeniSlackBotConnectionMetadata,
+  OpenGeniSlackBotInstallRequest,
+  OpenGeniSlackBotInstallStart,
   PackInstallation,
   PackInstallationStatus,
   Permission,
@@ -8520,8 +8682,11 @@ export {
   SessionMcpServerId,
   SessionMcpServerInput,
   SessionMcpServerMetadata,
+  SessionPendingInputPreview,
   SessionQueueMutationResponse,
   SessionQueueSnapshot,
+  SessionSkill,
+  SessionSkills,
   SessionSpawnDenial,
   SessionStatus,
   SessionStructuredCapabilities,
@@ -8689,6 +8854,7 @@ export {
   redactSensitiveKey,
   redactSensitiveText,
   redactSerializedJson,
+  renderSessionSystemUpdateBatch,
   replayCodexFleetDecisionV1,
   resolveRetainedOutputRange,
   resolveSessionEventTypeFilters,
@@ -8703,6 +8869,7 @@ export {
   sessionEventMediaPreview,
   sessionEventMediaPreviewFromDataUrl,
   sessionEventPayloadTruncation,
+  sessionSystemUpdateBatchHistoryItem,
   signDelegatedAccessToken,
   signEnrollToken,
   signEnrollmentBearer,