@opengeni/contracts 0.21.0 → 0.22.0

package/dist/index.js

@@ -2638,6 +2638,66 @@ var DEFAULT_FIRST_PARTY_MCP_PERMISSIONS = [
   "rigs:use",
   "github:use"
 ];
+var FIRST_PARTY_MCP_TOOL_NAMES = [
+  "set_session_title",
+  "goal_set",
+  "goal_update",
+  "goal_complete",
+  "goal_pause",
+  "memory_search",
+  "memory_save",
+  "memory_correct",
+  "sandboxes_list",
+  "sandbox_attach",
+  "sandbox_swap",
+  "run_on",
+  "sandbox_provision",
+  "rig_list",
+  "rig_get",
+  "rig_propose_change",
+  "rig_verify",
+  "rig_promote",
+  "sessions_list",
+  "session_get",
+  "session_events",
+  "session_create",
+  "session_send_message",
+  "session_pause",
+  "session_resume",
+  "session_steer",
+  "set_other_session_title",
+  "variable_set_list",
+  "environment_list",
+  "variable_set_set_variable",
+  "environment_set_variable",
+  "github_connect_link",
+  "github_token",
+  "github_repositories_list",
+  "social_connections_list",
+  "social_posts_recent",
+  "social_daily_analysis_context",
+  "scheduled_tasks_list",
+  "scheduled_tasks_get",
+  "scheduled_tasks_create",
+  "scheduled_tasks_update",
+  "scheduled_tasks_pause",
+  "scheduled_tasks_resume",
+  "scheduled_tasks_trigger",
+  "scheduled_tasks_delete",
+  "scheduled_task_runs_list",
+  "slack_bot_list_channels",
+  "slack_bot_channel_history",
+  "slack_bot_list_users",
+  "slack_bot_post_message"
+];
+var FirstPartyMcpToolName = z3.enum(FIRST_PARTY_MCP_TOOL_NAMES);
+var DEFAULT_FIRST_PARTY_MCP_TOOLS = [
+  "set_session_title",
+  "goal_set",
+  "goal_update",
+  "goal_complete",
+  "goal_pause"
+];
 function prefixedMcpToolName(registryId2, toolName) {
   return `${registryId2}__${toolName}`;
 }
@@ -3021,6 +3081,9 @@ var DelegatedAccessTokenPayload = z3.object({
   // Worker-asserted session scope for first-party MCP calls (HMAC-signed, not
   // agent-controlled); enables session-scoped tools such as goal management.
   sessionId: z3.string().uuid().optional(),
+  // Model-visible first-party tool selection for a worker-bound session.
+  // This is visibility only; permissions remain the authorization boundary.
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName).optional(),
   // The turn making the call (the caller's identity), HMAC-signed by the worker
   // at turn setup. Lets a tool classify WHO is calling from the token itself,
   // instead of racily re-reading the session's live active_turn_id — e.g. the
@@ -4387,19 +4450,6 @@ var ComposerDraft = z3.object({
   sourceTurnVersion: z3.number().int().positive().nullable(),
   updatedAt: z3.string().nullable()
 });
-var SessionQueueSnapshot = z3.object({
-  version: z3.number().int().nonnegative(),
-  effectiveControl: EffectiveSessionControl,
-  /**
-   * True while the latest attempt is interrupted but has not durably proved
-   * quiescence: no more inference, user-visible output, or workspace-persistence
-   * authority. Temporal cancellation/terminalization is not that proof. This is
-   * distinct from ordinary capacity queueing, remains accurate with an empty
-   * visible queue, and is independent of Steer-row metadata or withdrawal.
-   */
-  stoppingPreviousAttempt: z3.boolean(),
-  items: z3.array(SessionTurn)
-});
 var MoveSessionQueueItemRequest = z3.object({
   clientEventId: SessionOperationKey,
   expectedQueueVersion: z3.number().int().nonnegative(),
@@ -4658,7 +4708,6 @@ var SessionSystemUpdatePayload = z3.discriminatedUnion("type", [
 ]);
 var SessionSystemUpdateState = z3.enum([
   "pending",
-  "deferred",
   "delivered",
   "cancelled",
   "superseded",
@@ -4676,9 +4725,75 @@ var SessionSystemUpdate = z3.object({
   lineage: z3.record(z3.string(), z3.unknown()),
   state: SessionSystemUpdateState,
   deliveredTurnId: z3.string().uuid().nullable(),
+  /**
+   * The exact durable model-memory row containing the coalesced batch that
+   * delivered this update. Null until claim; every member of one batch shares
+   * the same id.
+   */
+  deliveredHistoryItemId: z3.string().uuid().nullable(),
   deliveredAt: z3.string().nullable(),
   createdAt: z3.string()
 });
+var SessionPendingInputPreview = SessionSystemUpdate.pick({
+  id: true,
+  sessionId: true,
+  kind: true,
+  classification: true,
+  sourceId: true,
+  summary: true,
+  createdAt: true
+});
+var SessionQueueSnapshot = z3.object({
+  version: z3.number().int().nonnegative(),
+  effectiveControl: EffectiveSessionControl,
+  /**
+   * True while the latest attempt is interrupted but has not durably proved
+   * quiescence: no more inference, user-visible output, or workspace-persistence
+   * authority. Temporal cancellation/terminalization is not that proof. This is
+   * distinct from ordinary capacity queueing, remains accurate with an empty
+   * visible queue, and is independent of Steer-row metadata or withdrawal.
+   */
+  stoppingPreviousAttempt: z3.boolean(),
+  items: z3.array(SessionTurn),
+  /** Canonical bounded previews; never reconstructed from session events. */
+  pendingInputs: z3.array(SessionPendingInputPreview),
+  /**
+   * Exact members of the next bounded machine-input batch that will join an
+   * already-waiting human/API prompt. Null means the next machine-input claim
+   * is standalone. This is a projection of canonical rows, not queue state.
+   */
+  pendingInputAttachment: z3.object({
+    turnId: z3.string().uuid(),
+    inputIds: z3.array(z3.string().uuid()).min(1)
+  }).nullable()
+});
+function renderSessionSystemUpdateBatch(updates) {
+  if (updates.length === 0) {
+    throw new TypeError("A durable machine-input batch requires at least one update");
+  }
+  return [
+    "[OpenGeni internal updates]",
+    "These platform updates were delivered together for this inference. They are not human prompts.",
+    JSON.stringify({
+      updates: updates.map((update) => ({
+        id: update.id,
+        kind: update.kind,
+        classification: update.classification,
+        sourceId: update.sourceId,
+        summary: update.summary,
+        payload: update.payload,
+        lineage: update.lineage
+      }))
+    })
+  ].join("\n");
+}
+function sessionSystemUpdateBatchHistoryItem(updates) {
+  return {
+    type: "message",
+    role: "system",
+    content: renderSessionSystemUpdateBatch(updates)
+  };
+}
 var VariableSetVariableName = z3.string().regex(/^[A-Z][A-Z0-9_]*$/).max(128);
 function withVariableSetIdAlias(shape) {
   return z3.preprocess((input) => {
@@ -5505,6 +5620,9 @@ var Session = z3.object({
   // Non-default first-party MCP token permissions (manager-style sessions);
   // null means the fixed worker default set.
   firstPartyMcpPermissions: z3.array(Permission).nullable(),
+  // null means the fixed minimal worker-visible default. An explicit array,
+  // including [], is the exact model-visible first-party selection.
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName).nullable().default(null),
   // Per-session third-party MCP servers, metadata only. Credential values are
   // write-only and never appear here.
   mcpServers: z3.array(SessionMcpServerMetadata).default([]),
@@ -5644,6 +5762,9 @@ var SessionEventType = z3.enum([
   "goal.continuation",
   "system.update.pending",
   "system.update.delivered",
+  "system.update.superseded",
+  "system.update.cancelled",
+  "system.update.settled",
   "session.control.paused",
   "session.control.resumed",
   "session.control.steer_requested",
@@ -5832,6 +5953,9 @@ var SESSION_EVENT_SEMANTIC_CLASS_TYPES = {
     "goal.continuation",
     "system.update.pending",
     "system.update.delivered",
+    "system.update.superseded",
+    "system.update.cancelled",
+    "system.update.settled",
     "session.control.paused",
     "session.control.resumed",
     "session.control.steer_requested",
@@ -7194,6 +7318,10 @@ var CreateSessionRequest = withVariableSetIdAlias({
   // A goal-bearing session whose explicit/effective set omits goals:manage is
   // rejected; creation never silently expands a child beyond that set.
   firstPartyMcpPermissions: z3.array(Permission).optional(),
+  // Exact model-visible selection from the broad first-party OpenGeni MCP
+  // catalog. Omit for the minimal default; [] intentionally exposes none.
+  // This does not grant authority: every registered tool is permission-gated.
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName).optional(),
   // Third-party MCP servers attached only to this session. For an agent-created
   // child, omission snapshots its trusted immediate parent's server definitions,
   // policies, connection refs, and encrypted credentials. Explicit arrays,
@@ -8263,6 +8391,7 @@ export {
   CredentialAuthNeededPayload,
   DEFAULT_CODEX_FLEET_POLICY_V1,
   DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,
+  DEFAULT_FIRST_PARTY_MCP_TOOLS,
   DESKTOP_STREAM_PORT,
   DelegatedAccessTokenPayload,
   DeleteSessionQueueItemRequest,
@@ -8308,11 +8437,13 @@ export {
   EntitlementsMode,
   ErrorCode,
   ErrorEnvelope,
+  FIRST_PARTY_MCP_TOOL_NAMES,
   FileAsset,
   FileDownloadUrlResponse,
   FileResourceRef,
   FileStatus,
   FileUploadStatus,
+  FirstPartyMcpToolName,
   FsChangeKind,
   FsChangedPayload,
   FsDeleteRequest,
@@ -8551,6 +8682,7 @@ export {
   SessionMcpServerId,
   SessionMcpServerInput,
   SessionMcpServerMetadata,
+  SessionPendingInputPreview,
   SessionQueueMutationResponse,
   SessionQueueSnapshot,
   SessionSkill,
@@ -8722,6 +8854,7 @@ export {
   redactSensitiveKey,
   redactSensitiveText,
   redactSerializedJson,
+  renderSessionSystemUpdateBatch,
   replayCodexFleetDecisionV1,
   resolveRetainedOutputRange,
   resolveSessionEventTypeFilters,
@@ -8736,6 +8869,7 @@ export {
   sessionEventMediaPreview,
   sessionEventMediaPreviewFromDataUrl,
   sessionEventPayloadTruncation,
+  sessionSystemUpdateBatchHistoryItem,
   signDelegatedAccessToken,
   signEnrollToken,
   signEnrollmentBearer,