@opengeni/contracts 0.21.0 → 0.23.0

package/dist/index.js

@@ -2638,6 +2638,60 @@ var DEFAULT_FIRST_PARTY_MCP_PERMISSIONS = [
   "rigs:use",
   "github:use"
 ];
+var FIRST_PARTY_MCP_TOOL_NAMES = [
+  "set_session_title",
+  "goal_set",
+  "goal_update",
+  "goal_complete",
+  "goal_pause",
+  "memory_search",
+  "memory_save",
+  "memory_correct",
+  "sandboxes_list",
+  "sandbox_attach",
+  "sandbox_swap",
+  "run_on",
+  "sandbox_provision",
+  "rig_list",
+  "rig_get",
+  "rig_propose_change",
+  "rig_verify",
+  "rig_promote",
+  "sessions_list",
+  "session_get",
+  "session_events",
+  "session_create",
+  "session_send_message",
+  "session_pause",
+  "session_resume",
+  "session_steer",
+  "set_other_session_title",
+  "variable_set_list",
+  "environment_list",
+  "variable_set_set_variable",
+  "environment_set_variable",
+  "github_connect_link",
+  "github_token",
+  "github_repositories_list",
+  "social_connections_list",
+  "social_posts_recent",
+  "social_daily_analysis_context",
+  "scheduled_tasks_list",
+  "scheduled_tasks_get",
+  "scheduled_tasks_create",
+  "scheduled_tasks_update",
+  "scheduled_tasks_pause",
+  "scheduled_tasks_resume",
+  "scheduled_tasks_trigger",
+  "scheduled_tasks_delete",
+  "scheduled_task_runs_list",
+  "slack_bot_list_channels",
+  "slack_bot_channel_history",
+  "slack_bot_list_users",
+  "slack_bot_post_message"
+];
+var FirstPartyMcpToolName = z3.enum(FIRST_PARTY_MCP_TOOL_NAMES);
+var DEFAULT_FIRST_PARTY_MCP_TOOLS = FIRST_PARTY_MCP_TOOL_NAMES;
 function prefixedMcpToolName(registryId2, toolName) {
   return `${registryId2}__${toolName}`;
 }
@@ -3021,6 +3075,9 @@ var DelegatedAccessTokenPayload = z3.object({
   // Worker-asserted session scope for first-party MCP calls (HMAC-signed, not
   // agent-controlled); enables session-scoped tools such as goal management.
   sessionId: z3.string().uuid().optional(),
+  // Model-visible first-party tool selection for a worker-bound session.
+  // This is visibility only; permissions remain the authorization boundary.
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName).optional(),
   // The turn making the call (the caller's identity), HMAC-signed by the worker
   // at turn setup. Lets a tool classify WHO is calling from the token itself,
   // instead of racily re-reading the session's live active_turn_id — e.g. the
@@ -3863,7 +3920,7 @@ var ToolRef = z3.object({
 var registryId = /^[A-Za-z0-9_-]+$/;
 var SessionMcpServerId = z3.string().min(1).regex(registryId);
 var SessionToolPolicy = z3.object({
-  mode: z3.enum(["workspace_default", "explicit", "inherited", "legacy"]),
+  mode: z3.enum(["workspace_default", "explicit", "inherited"]),
   inheritedFromSessionId: z3.string().uuid().nullable()
 });
 var SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT = 64;
@@ -3871,7 +3928,7 @@ var SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH = 200;
 var SessionEffectiveToolPolicyId = z3.string().min(1).max(SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH).regex(registryId);
 var SessionEffectiveToolPolicyIds = z3.array(SessionEffectiveToolPolicyId).max(SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT);
 var SessionEffectiveToolPolicy = z3.object({
-  mode: z3.enum(["workspace_default", "explicit", "inherited", "legacy"]),
+  mode: z3.enum(["workspace_default", "explicit", "inherited"]),
   inheritedFromSessionId: z3.string().uuid().nullable(),
   selectedIds: SessionEffectiveToolPolicyIds,
   effectiveIds: SessionEffectiveToolPolicyIds,
@@ -4153,8 +4210,9 @@ var UpdateSessionToolPolicyRequest = z3.union([
     expectedVersion: z3.number().int().positive()
   }).strict(),
   z3.object({
-    mode: z3.literal("explicit").optional(),
+    mode: z3.literal("explicit"),
     tools: z3.array(ToolRef).max(64),
+    firstPartyMcpTools: z3.array(FirstPartyMcpToolName),
     expectedVersion: z3.number().int().positive()
   }).strict()
 ]);
@@ -4377,29 +4435,12 @@ var ComposerDraft = z3.object({
   revision: z3.number().int().nonnegative(),
   text: z3.string(),
   resources: z3.array(ResourceRef),
-  tools: z3.array(ToolRef),
-  // False means the draft inherits the session policy. True preserves an
-  // explicit array, including [], across autosave/reload and queue checkout.
-  toolsProvided: z3.boolean().default(false),
   model: z3.string().min(1),
   reasoningEffort: ReasoningEffort,
   sourceTurnId: z3.string().uuid().nullable(),
   sourceTurnVersion: z3.number().int().positive().nullable(),
   updatedAt: z3.string().nullable()
 });
-var SessionQueueSnapshot = z3.object({
-  version: z3.number().int().nonnegative(),
-  effectiveControl: EffectiveSessionControl,
-  /**
-   * True while the latest attempt is interrupted but has not durably proved
-   * quiescence: no more inference, user-visible output, or workspace-persistence
-   * authority. Temporal cancellation/terminalization is not that proof. This is
-   * distinct from ordinary capacity queueing, remains accurate with an empty
-   * visible queue, and is independent of Steer-row metadata or withdrawal.
-   */
-  stoppingPreviousAttempt: z3.boolean(),
-  items: z3.array(SessionTurn)
-});
 var MoveSessionQueueItemRequest = z3.object({
   clientEventId: SessionOperationKey,
   expectedQueueVersion: z3.number().int().nonnegative(),
@@ -4424,8 +4465,6 @@ var DeleteSessionQueueItemRequest = z3.object({
 var SaveComposerDraftRequest = ComposerDraft.pick({
   text: true,
   resources: true,
-  tools: true,
-  toolsProvided: true,
   model: true,
   reasoningEffort: true
 }).extend({ expectedRevision: z3.number().int().nonnegative() });
@@ -4436,7 +4475,8 @@ var NewSessionDraftOptions = z3.object({
   variableSetId: z3.string().uuid().optional(),
   rigId: z3.string().uuid().optional(),
   goal: GoalSpec.optional(),
-  firstPartyMcpPermissions: z3.array(Permission).optional()
+  firstPartyMcpPermissions: z3.array(Permission).optional(),
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName).optional()
 });
 var NewSessionDraft = z3.object({
   revision: z3.number().int().nonnegative(),
@@ -4658,7 +4698,6 @@ var SessionSystemUpdatePayload = z3.discriminatedUnion("type", [
 ]);
 var SessionSystemUpdateState = z3.enum([
   "pending",
-  "deferred",
   "delivered",
   "cancelled",
   "superseded",
@@ -4676,9 +4715,75 @@ var SessionSystemUpdate = z3.object({
   lineage: z3.record(z3.string(), z3.unknown()),
   state: SessionSystemUpdateState,
   deliveredTurnId: z3.string().uuid().nullable(),
+  /**
+   * The exact durable model-memory row containing the coalesced batch that
+   * delivered this update. Null until claim; every member of one batch shares
+   * the same id.
+   */
+  deliveredHistoryItemId: z3.string().uuid().nullable(),
   deliveredAt: z3.string().nullable(),
   createdAt: z3.string()
 });
+var SessionPendingInputPreview = SessionSystemUpdate.pick({
+  id: true,
+  sessionId: true,
+  kind: true,
+  classification: true,
+  sourceId: true,
+  summary: true,
+  createdAt: true
+});
+var SessionQueueSnapshot = z3.object({
+  version: z3.number().int().nonnegative(),
+  effectiveControl: EffectiveSessionControl,
+  /**
+   * True while the latest attempt is interrupted but has not durably proved
+   * quiescence: no more inference, user-visible output, or workspace-persistence
+   * authority. Temporal cancellation/terminalization is not that proof. This is
+   * distinct from ordinary capacity queueing, remains accurate with an empty
+   * visible queue, and is independent of Steer-row metadata or withdrawal.
+   */
+  stoppingPreviousAttempt: z3.boolean(),
+  items: z3.array(SessionTurn),
+  /** Canonical bounded previews; never reconstructed from session events. */
+  pendingInputs: z3.array(SessionPendingInputPreview),
+  /**
+   * Exact members of the next bounded machine-input batch that will join an
+   * already-waiting human/API prompt. Null means the next machine-input claim
+   * is standalone. This is a projection of canonical rows, not queue state.
+   */
+  pendingInputAttachment: z3.object({
+    turnId: z3.string().uuid(),
+    inputIds: z3.array(z3.string().uuid()).min(1)
+  }).nullable()
+});
+function renderSessionSystemUpdateBatch(updates) {
+  if (updates.length === 0) {
+    throw new TypeError("A durable machine-input batch requires at least one update");
+  }
+  return [
+    "[OpenGeni internal updates]",
+    "These platform updates were delivered together for this inference. They are not human prompts.",
+    JSON.stringify({
+      updates: updates.map((update) => ({
+        id: update.id,
+        kind: update.kind,
+        classification: update.classification,
+        sourceId: update.sourceId,
+        summary: update.summary,
+        payload: update.payload,
+        lineage: update.lineage
+      }))
+    })
+  ].join("\n");
+}
+function sessionSystemUpdateBatchHistoryItem(updates) {
+  return {
+    type: "message",
+    role: "system",
+    content: renderSessionSystemUpdateBatch(updates)
+  };
+}
 var VariableSetVariableName = z3.string().regex(/^[A-Z][A-Z0-9_]*$/).max(128);
 function withVariableSetIdAlias(shape) {
   return z3.preprocess((input) => {
@@ -5462,13 +5567,9 @@ var Session = z3.object({
   resources: z3.array(ResourceRef),
   skills: SessionSkills.default([]),
   tools: z3.array(ToolRef),
-  // Origin of the persisted tool allow-list. Optional for rolling client
-  // compatibility; current servers emit it and legacy rows map to `legacy`.
-  toolPolicy: SessionToolPolicy.optional(),
-  // Optimistic-concurrency fence for durable policy mutations. Optional for
-  // older clients/fixtures; current servers always emit the authoritative
-  // value.
-  toolPolicyVersion: z3.number().int().positive().optional(),
+  // Origin and optimistic-concurrency fence for the durable session policy.
+  toolPolicy: SessionToolPolicy,
+  toolPolicyVersion: z3.number().int().positive(),
   // Secret-safe current resolution, computed at an API/read or execution
   // boundary from IDs only. Optional because internal DB readers need not load
   // the workspace runtime registry.
@@ -5505,6 +5606,9 @@ var Session = z3.object({
   // Non-default first-party MCP token permissions (manager-style sessions);
   // null means the fixed worker default set.
   firstPartyMcpPermissions: z3.array(Permission).nullable(),
+  // Exact model-visible OpenGeni selection. All catalogued tools are selected
+  // by default; [] intentionally selects none.
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName),
   // Per-session third-party MCP servers, metadata only. Credential values are
   // write-only and never appear here.
   mcpServers: z3.array(SessionMcpServerMetadata).default([]),
@@ -5644,6 +5748,9 @@ var SessionEventType = z3.enum([
   "goal.continuation",
   "system.update.pending",
   "system.update.delivered",
+  "system.update.superseded",
+  "system.update.cancelled",
+  "system.update.settled",
   "session.control.paused",
   "session.control.resumed",
   "session.control.steer_requested",
@@ -5832,6 +5939,9 @@ var SESSION_EVENT_SEMANTIC_CLASS_TYPES = {
     "goal.continuation",
     "system.update.pending",
     "system.update.delivered",
+    "system.update.superseded",
+    "system.update.cancelled",
+    "system.update.settled",
     "session.control.paused",
     "session.control.resumed",
     "session.control.steer_requested",
@@ -7194,6 +7304,10 @@ var CreateSessionRequest = withVariableSetIdAlias({
   // A goal-bearing session whose explicit/effective set omits goals:manage is
   // rejected; creation never silently expands a child beyond that set.
   firstPartyMcpPermissions: z3.array(Permission).optional(),
+  // Exact model-visible selection from the broad first-party OpenGeni MCP
+  // catalog. Omission selects the full catalog; [] intentionally exposes none.
+  // This does not grant authority: every registered tool is permission-gated.
+  firstPartyMcpTools: z3.array(FirstPartyMcpToolName).optional(),
   // Third-party MCP servers attached only to this session. For an agent-created
   // child, omission snapshots its trusted immediate parent's server definitions,
   // policies, connection refs, and encrypted credentials. Explicit arrays,
@@ -7357,7 +7471,6 @@ var ClientSessionEvent = z3.discriminatedUnion("type", [
       // turn for retry/recovery, never copied into the visible user message.
       turnInstructions: z3.string().trim().min(1).max(32768).optional(),
       resources: z3.array(ResourceRef).default([]),
-      tools: z3.array(ToolRef).default([]),
       model: z3.string().min(1).optional(),
       reasoningEffort: ReasoningEffort.optional(),
       controlEtag: z3.string().min(1).optional(),
@@ -7365,7 +7478,7 @@ var ClientSessionEvent = z3.discriminatedUnion("type", [
       // Header-value rotation only. URL/name/tool settings are immutable after
       // session create; persisted events expose metadata, never header values.
       mcpCredentialUpdates: z3.array(SessionMcpCredentialUpdateInput).optional()
-    })
+    }).strict()
   }),
   z3.object({
     type: z3.literal("user.approvalDecision"),
@@ -7390,14 +7503,13 @@ var SteerSessionMessageRequest = z3.object({
   // Same per-turn system-level context as a queued user.message.
   turnInstructions: z3.string().trim().min(1).max(32768).optional(),
   resources: z3.array(ResourceRef).default([]),
-  tools: z3.array(ToolRef).default([]),
   model: z3.string().min(1).optional(),
   reasoningEffort: ReasoningEffort.optional(),
   clientEventId: SessionOperationKey.optional(),
   controlEtag: z3.string().min(1).optional(),
   expectedDraftRevision: z3.number().int().nonnegative().optional(),
   mcpCredentialUpdates: z3.array(SessionMcpCredentialUpdateInput).optional()
-});
+}).strict();
 var SteerSessionMessageResponse = z3.object({
   accepted: SessionEvent,
   turn: SessionTurn
@@ -7427,6 +7539,7 @@ var GitHubRepository = z3.object({
 });
 var GitHubRepositoryScope = z3.enum(["all", "selected"]);
 var GitHubBindingStatus = z3.enum(["disabled", "unbound", "bound"]);
+var GitHubAppSetupMode = z3.enum(["platform", "operator"]);
 var GitHubInstallationLifecycle = z3.enum(["active", "suspended", "deleted", "unverified"]);
 var GitHubInstallationBinding = z3.object({
   installationId: z3.number().int().positive(),
@@ -7436,12 +7549,14 @@ var GitHubInstallationBinding = z3.object({
   lifecycle: GitHubInstallationLifecycle,
   repositoryScope: GitHubRepositoryScope,
   repositoryCount: z3.number().int().nonnegative(),
+  configureUrl: z3.string().url().nullable(),
   createdAt: z3.string(),
   updatedAt: z3.string()
 });
 var GitHubAppInfo = z3.object({
   configured: z3.boolean(),
   status: GitHubBindingStatus,
+  setupMode: GitHubAppSetupMode,
   appId: z3.string().nullable(),
   clientId: z3.string().nullable(),
   appSlug: z3.string().nullable(),
@@ -8263,6 +8378,7 @@ export {
   CredentialAuthNeededPayload,
   DEFAULT_CODEX_FLEET_POLICY_V1,
   DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,
+  DEFAULT_FIRST_PARTY_MCP_TOOLS,
   DESKTOP_STREAM_PORT,
   DelegatedAccessTokenPayload,
   DeleteSessionQueueItemRequest,
@@ -8308,11 +8424,13 @@ export {
   EntitlementsMode,
   ErrorCode,
   ErrorEnvelope,
+  FIRST_PARTY_MCP_TOOL_NAMES,
   FileAsset,
   FileDownloadUrlResponse,
   FileResourceRef,
   FileStatus,
   FileUploadStatus,
+  FirstPartyMcpToolName,
   FsChangeKind,
   FsChangedPayload,
   FsDeleteRequest,
@@ -8347,6 +8465,7 @@ export {
   GitFileStatusCode,
   GitHubAppInfo,
   GitHubAppManifestCreate,
+  GitHubAppSetupMode,
   GitHubBindingStatus,
   GitHubInstallationBinding,
   GitHubInstallationLifecycle,
@@ -8551,6 +8670,7 @@ export {
   SessionMcpServerId,
   SessionMcpServerInput,
   SessionMcpServerMetadata,
+  SessionPendingInputPreview,
   SessionQueueMutationResponse,
   SessionQueueSnapshot,
   SessionSkill,
@@ -8722,6 +8842,7 @@ export {
   redactSensitiveKey,
   redactSensitiveText,
   redactSerializedJson,
+  renderSessionSystemUpdateBatch,
   replayCodexFleetDecisionV1,
   resolveRetainedOutputRange,
   resolveSessionEventTypeFilters,
@@ -8736,6 +8857,7 @@ export {
   sessionEventMediaPreview,
   sessionEventMediaPreviewFromDataUrl,
   sessionEventPayloadTruncation,
+  sessionSystemUpdateBatchHistoryItem,
   signDelegatedAccessToken,
   signEnrollToken,
   signEnrollmentBearer,