@opengeni/contracts 1.0.2 → 1.1.0

package/dist/agent-config.d.ts

@@ -293,8 +293,15 @@ export declare const ClientAgentConfig: z.ZodObject<{
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ClientAgentConfig = z.infer<typeof ClientAgentConfig>;
-/** A first-party tool's owner: a capability, or pure runtime mechanics. */
+/** A built-in MCP server's owner: a capability, or pure runtime mechanics. */
 export type AgentToolCapability = AgentCapabilityId | "runtime";
+/**
+ * A first-party tool's owner: a capability, pure runtime mechanics, or the
+ * attached compute (a managed sandbox or Connected Machine).
+ */
+export type AgentFirstPartyToolOwner = AgentToolCapability | "sandbox";
+/** Owners no capability toggles: the runtime or the attached compute derives them. */
+export declare function isDerivedAgentToolOwner(owner: AgentFirstPartyToolOwner): owner is "runtime" | "sandbox";
 /**
  * Exhaustive map from every `FIRST_PARTY_MCP_TOOL_NAMES` entry to exactly one
  * owner. The `Record` type makes an unmapped new name a compile error, and
@@ -302,15 +309,18 @@ export type AgentToolCapability = AgentCapabilityId | "runtime";
  *
  * `runtime` tools are mechanics every agent needs regardless of what it may do:
  * - `wait_for_input`: ends the turn and waits for the next input.
- * - `command_read` / `command_wait`: read/await the session's own background
- *   sandbox commands (the shell already exists whenever a sandbox is attached).
  * - `set_session_title`: session titling.
+ *
+ * `sandbox` tools are derived from attached compute and never toggled:
+ * - `command_read` / `command_wait`: read/await the session's own background
+ *   commands. A command can only exist on a managed sandbox or Connected
+ *   Machine, so a turn with neither attached never receives them.
  */
 export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly set_session_title: "runtime";
     readonly wait_for_input: "runtime";
-    readonly command_wait: "runtime";
-    readonly command_read: "runtime";
+    readonly command_wait: "sandbox";
+    readonly command_read: "sandbox";
     readonly goal_set: "goals";
     readonly goal_update: "goals";
     readonly goal_progress: "goals";
@@ -544,7 +554,7 @@ export declare const AGENT_BUILTIN_MCP_SERVER_CAPABILITIES: {
     readonly docs: "knowledge";
     readonly "google-drive-publishing": "workspaceConnectors";
 };
-export declare function firstPartyMcpToolCapability(tool: FirstPartyMcpToolName): AgentToolCapability;
+export declare function firstPartyMcpToolCapability(tool: FirstPartyMcpToolName): AgentFirstPartyToolOwner;
 /** Availability narrows configuration; it never grants a disabled capability. */
 export type AgentToolEnvironment = {
     /** Explicit product MCPs are independent of ambient workspace connectors. */
@@ -556,12 +566,23 @@ export type AgentToolEnvironment = {
     media?: boolean | undefined;
     hasDeferredTools?: boolean;
     routerInHistory?: boolean;
+    /**
+     * Whether the turn has a managed sandbox or Connected Machine attached.
+     * `false` withholds the `sandbox`-owned first-party tools, which could never
+     * find a command; undefined means not yet known and keeps them.
+     */
+    sandboxAttached?: boolean;
 };
-export declare const AGENT_RUNTIME_MECHANIC_TOOL_NAMES: readonly ["wait_for_input", "command_read", "command_wait"];
+/** Runtime mechanics every configured agent receives. */
+export declare const AGENT_RUNTIME_MECHANIC_TOOL_NAMES: readonly ["wait_for_input"];
+/** First-party tools a configured agent receives whenever compute is attached. */
+export declare const AGENT_SANDBOX_MECHANIC_TOOL_NAMES: readonly ["command_read", "command_wait"];
 /**
  * The one turn-time capability gate. Null means the historical attachment
  * rules, including unconditional Skill tools and router. Resource-derived
- * sandbox tools, product MCPs and runtime mechanics are never toggled.
+ * sandbox tools, product MCPs and runtime mechanics are never toggled; the
+ * `sandbox`-owned first-party tools follow `environment.sandboxAttached` for
+ * every session, configured or not.
  */
 export declare function resolveAgentToolFamilies(config: ResolvedAgentConfig | null | undefined, environment?: AgentToolEnvironment): {
     webSearch: boolean;

package/dist/artifact-catalog.d.ts

@@ -26,6 +26,7 @@ export declare const ArtifactCatalogItem: z.ZodObject<{
         active: "active";
         archived: "archived";
     }>;
+    pinned: z.ZodOptional<z.ZodBoolean>;
     sourceSessionId: z.ZodOptional<z.ZodString>;
     versionId: z.ZodOptional<z.ZodString>;
     file: z.ZodOptional<z.ZodObject<{
@@ -114,6 +115,7 @@ export declare const ArtifactCatalogListResponse: z.ZodObject<{
             active: "active";
             archived: "archived";
         }>;
+        pinned: z.ZodOptional<z.ZodBoolean>;
         sourceSessionId: z.ZodOptional<z.ZodString>;
         versionId: z.ZodOptional<z.ZodString>;
         file: z.ZodOptional<z.ZodObject<{
@@ -159,3 +161,20 @@ export declare const ArtifactCatalogListResponse: z.ZodObject<{
     nextCursor: z.ZodNullable<z.ZodString>;
 }, z.core.$strict>;
 export type ArtifactCatalogListResponse = z.infer<typeof ArtifactCatalogListResponse>;
+export declare const UpdateArtifactPinRequest: z.ZodObject<{
+    pinned: z.ZodBoolean;
+}, z.core.$strict>;
+export type UpdateArtifactPinRequest = z.infer<typeof UpdateArtifactPinRequest>;
+export declare const ArtifactPinResponse: z.ZodObject<{
+    kind: z.ZodEnum<{
+        document: "document";
+        file: "file";
+        image: "image";
+        presentation: "presentation";
+        site: "site";
+        spreadsheet: "spreadsheet";
+    }>;
+    artifactId: z.ZodString;
+    pinned: z.ZodBoolean;
+}, z.core.$strict>;
+export type ArtifactPinResponse = z.infer<typeof ArtifactPinResponse>;

package/dist/atlassian.js

@@ -17,7 +17,7 @@ import {
   AtlassianSyncCadence,
   SaveAtlassianSourcesRequest,
   atlassianScopesAllowRead
-} from "./chunk-X7ETVO4P.js";
+} from "./chunk-VSM752ZW.js";
 import "./chunk-5IXYF6XN.js";
 import "./chunk-NRMCVHAU.js";
 import "./chunk-WYBDERIY.js";

package/dist/bundled-skills.d.ts

@@ -30,6 +30,15 @@ export declare const BundledSkillSelection: z.ZodPipe<z.ZodArray<z.ZodEnum<{
 }>>, z.ZodTransform<("builtin:document-parsing" | "builtin:opengeni-client" | "builtin:opengeni-documents" | "builtin:opengeni-help" | "builtin:opengeni-presentations" | "builtin:opengeni-projects" | "builtin:opengeni-schedules" | "builtin:opengeni-sites" | "builtin:opengeni-skills" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-video-generation" | "builtin:opengeni-visualize")[], ("builtin:document-parsing" | "builtin:opengeni-client" | "builtin:opengeni-documents" | "builtin:opengeni-help" | "builtin:opengeni-presentations" | "builtin:opengeni-projects" | "builtin:opengeni-schedules" | "builtin:opengeni-sites" | "builtin:opengeni-skills" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-video-generation" | "builtin:opengeni-visualize")[]>>;
 /** Undefined is defaults/inheritance; an explicit empty list disables bundles. */
 export declare function resolveBundledSkillSelection(requested: readonly BundledSkillId[] | undefined, parent: readonly BundledSkillId[] | undefined): BundledSkillId[] | undefined;
+/**
+ * Freeze the defaults a session's agent configuration implies. An agent that
+ * starts from `capabilities: "none"` carries no bundled Opengeni guides unless
+ * the request lists them; an explicit list (including `[]`) is kept exactly,
+ * and `"all"` or legacy (null) configurations keep the bundled defaults.
+ */
+export declare function bundledSkillSelectionForAgentConfig(selection: BundledSkillId[] | undefined, agentConfig: {
+    from: "all" | "none";
+} | null | undefined): BundledSkillId[] | undefined;
 export declare function withBundledSkillSelectionMetadata(metadata: Record<string, unknown>, ids: readonly BundledSkillId[] | undefined): Record<string, unknown>;
 /**
  * Exact stored selection for keyed create replay identity. Unlike the

package/dist/{chunk-46KLD2UH.js → chunk-6GXQBK6J.js}

@@ -1,7 +1,7 @@
 import {
   ConnectionKind,
   SessionTenancyVisibility
-} from "./chunk-X7ETVO4P.js";
+} from "./chunk-VSM752ZW.js";
 
 // src/connection-authority.ts
 import { z } from "zod";
@@ -183,4 +183,4 @@ export {
   ConnectionUseAuditFact,
   ConnectionUseAuthorizationResult
 };
-//# sourceMappingURL=chunk-46KLD2UH.js.map
+//# sourceMappingURL=chunk-6GXQBK6J.js.map

package/dist/{chunk-X7ETVO4P.js → chunk-VSM752ZW.js}

@@ -196,6 +196,8 @@ var ArtifactCatalogItem = z4.object({
   createdAt: z4.string().datetime({ offset: true }),
   updatedAt: z4.string().datetime({ offset: true }),
   status: z4.enum(["active", "archived"]),
+  /** Shared workspace metadata, not content-access authority. */
+  pinned: z4.boolean().optional(),
   sourceSessionId: z4.string().uuid().optional(),
   versionId: z4.string().min(1).max(128).optional(),
   file: RetainedArtifactReferenceSchema.optional(),
@@ -216,6 +218,12 @@ var ArtifactCatalogListResponse = z4.object({
   items: z4.array(ArtifactCatalogItem).max(100),
   nextCursor: z4.string().max(8192).nullable()
 }).strict();
+var UpdateArtifactPinRequest = z4.object({ pinned: z4.boolean() }).strict();
+var ArtifactPinResponse = z4.object({
+  kind: ArtifactCatalogKind,
+  artifactId: z4.string().min(1).max(128),
+  pinned: z4.boolean()
+}).strict();
 
 // src/claude-subscription-oauth.ts
 import { z as z5 } from "zod";
@@ -1143,11 +1151,14 @@ var ClientAgentConfig = z13.object({
     }).strict()
   )
 }).strict();
+function isDerivedAgentToolOwner(owner) {
+  return owner === "runtime" || owner === "sandbox";
+}
 var FIRST_PARTY_MCP_TOOL_CAPABILITIES = {
   set_session_title: "runtime",
   wait_for_input: "runtime",
-  command_wait: "runtime",
-  command_read: "runtime",
+  command_wait: "sandbox",
+  command_read: "sandbox",
   goal_set: "goals",
   goal_update: "goals",
   goal_progress: "goals",
@@ -1390,7 +1401,9 @@ function firstPartyMcpToolCapability(tool) {
   return FIRST_PARTY_MCP_TOOL_CAPABILITIES[tool];
 }
 var AGENT_RUNTIME_MECHANIC_TOOL_NAMES = [
-  "wait_for_input",
+  "wait_for_input"
+];
+var AGENT_SANDBOX_MECHANIC_TOOL_NAMES = [
   "command_read",
   "command_wait"
 ];
@@ -1400,8 +1413,10 @@ function resolveAgentToolFamilies(config, environment = {}) {
   const humanInput = enabled("humanInput") && environment.humanInput !== false;
   const media = enabled("media") && environment.media !== false;
   const skills = !config ? "manage" : enabled("skills") ? config.capabilities.skills : false;
+  const sandboxTools = environment.sandboxAttached !== false;
   const allowsFirstPartyTool = (name) => {
     const owner = FIRST_PARTY_MCP_TOOL_CAPABILITIES[name];
+    if (owner === "sandbox") return sandboxTools;
     return owner === "runtime" || enabled(owner);
   };
   return {
@@ -1413,10 +1428,13 @@ function resolveAgentToolFamilies(config, environment = {}) {
     router: !config || environment.hasDeferredTools === true || environment.routerInHistory === true,
     allowsFirstPartyTool,
     firstPartyTools(names) {
-      return !config ? [...names] : [
+      return !config ? names.filter(
+        (name) => sandboxTools || FIRST_PARTY_MCP_TOOL_CAPABILITIES[name] !== "sandbox"
+      ) : [
         .../* @__PURE__ */ new Set([
           ...names.filter(allowsFirstPartyTool),
-          ...AGENT_RUNTIME_MECHANIC_TOOL_NAMES
+          ...AGENT_RUNTIME_MECHANIC_TOOL_NAMES,
+          ...sandboxTools ? AGENT_SANDBOX_MECHANIC_TOOL_NAMES : []
         ])
       ];
     },
@@ -1845,7 +1863,7 @@ function capabilityFilteredOut(config, id) {
 function agentConfigFirstPartyMcpTools(config, baseline, explicit) {
   for (const tool of explicit ?? []) {
     const owner = FIRST_PARTY_MCP_TOOL_CAPABILITIES[tool];
-    if (owner !== "runtime" && capabilityFilteredOut(config, owner)) {
+    if (!isDerivedAgentToolOwner(owner) && capabilityFilteredOut(config, owner)) {
       throw new AgentConfigError(
         "agent_config_conflict",
         `firstPartyMcpTools lists ${tool}, but agent capability ${owner} is off`,
@@ -1855,13 +1873,13 @@ function agentConfigFirstPartyMcpTools(config, baseline, explicit) {
   }
   return baseline.filter((tool) => {
     const owner = FIRST_PARTY_MCP_TOOL_CAPABILITIES[tool];
-    return owner === "runtime" || !capabilityFilteredOut(config, owner);
+    return isDerivedAgentToolOwner(owner) || !capabilityFilteredOut(config, owner);
   });
 }
 function agentConfigAddedFirstPartyMcpTools(previous, next, defaults) {
   return defaults.filter((tool) => {
     const owner = FIRST_PARTY_MCP_TOOL_CAPABILITIES[tool];
-    return owner !== "runtime" && !agentCapabilityEnabled(previous, owner) && agentCapabilityEnabled(next.capabilities, owner);
+    return !isDerivedAgentToolOwner(owner) && !agentCapabilityEnabled(previous, owner) && agentCapabilityEnabled(next.capabilities, owner);
   });
 }
 function agentConfigToolRefs(input) {
@@ -2728,6 +2746,9 @@ function resolveBundledSkillSelection(requested, parent) {
     throw new Error("A child cannot widen its parent's bundled Skill selection");
   return selected === void 0 ? void 0 : BundledSkillSelection.parse(selected);
 }
+function bundledSkillSelectionForAgentConfig(selection, agentConfig) {
+  return selection === void 0 && agentConfig?.from === "none" ? [] : selection;
+}
 var BUNDLED_SKILL_SELECTION_KEY = "_opengeni_bundled_skill_ids_v1";
 function withBundledSkillSelectionMetadata(metadata, ids) {
   const next = { ...metadata };
@@ -24391,6 +24412,8 @@ export {
   ArtifactCatalogItem,
   ArtifactCatalogListQuery,
   ArtifactCatalogListResponse,
+  UpdateArtifactPinRequest,
+  ArtifactPinResponse,
   ClaudeSubscriptionSetupTokenRequest,
   ClaudeSubscriptionOAuthStartRequest,
   ClaudeSubscriptionOAuthStartResponse,
@@ -24513,6 +24536,7 @@ export {
   ResolvedAgentConfig,
   UpdateSessionAgentRequest,
   ClientAgentConfig,
+  isDerivedAgentToolOwner,
   FIRST_PARTY_MCP_TOOL_CAPABILITIES,
   AGENT_FUNCTION_TOOL_CAPABILITIES,
   resolveAgentMediaToolSurface,
@@ -24521,6 +24545,7 @@ export {
   AGENT_BUILTIN_MCP_SERVER_CAPABILITIES,
   firstPartyMcpToolCapability,
   AGENT_RUNTIME_MECHANIC_TOOL_NAMES,
+  AGENT_SANDBOX_MECHANIC_TOOL_NAMES,
   resolveAgentToolFamilies,
   firstPartyMcpToolsForCapability,
   AGENT_CAPABILITY_DESCRIPTIONS,
@@ -24643,6 +24668,7 @@ export {
   BundledSkillId,
   BundledSkillSelection,
   resolveBundledSkillSelection,
+  bundledSkillSelectionForAgentConfig,
   withBundledSkillSelectionMetadata,
   storedBundledSkillSelectionIdentity,
   bundledSkillSelectionFromMetadata,
@@ -26541,4 +26567,4 @@ export {
   AtlassianDisconnectRequest,
   atlassianScopesAllowRead
 };
-//# sourceMappingURL=chunk-X7ETVO4P.js.map
+//# sourceMappingURL=chunk-VSM752ZW.js.map