@opengeni/core 3.0.1-canary.0 → 3.0.1-canary.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/core",
-  "version": "3.0.1-canary.0",
+  "version": "3.0.1-canary.2",
   "description": "OpenGeni framework-agnostic core: the domain, access, and billing layers (neutral access, off-HTTP V2 surface). Behavior-preserving extraction from apps/api — keeps Hono's HTTPException for error throwing (typed-errors cleanup deferred).",
   "license": "Apache-2.0",
   "repository": {
@@ -58,17 +58,17 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opengeni/capabilities": "^0.3.4-canary.0",
-    "@opengeni/codex": "^0.2.23-canary.2",
-    "@opengeni/config": "^1.2.2-canary.0",
-    "@opengeni/contracts": "^4.1.0-canary.0",
-    "@opengeni/db": "^5.0.1-canary.0",
-    "@opengeni/documents": "^0.8.30-canary.0",
-    "@opengeni/events": "^0.4.28-canary.0",
-    "@opengeni/network": "^0.3.1-canary.17",
-    "@opengeni/observability": "^0.8.29-canary.0",
-    "@opengeni/runtime": "^3.0.1-canary.0",
-    "@opengeni/storage": "^0.2.130-canary.0",
+    "@opengeni/capabilities": "^0.3.4-canary.2",
+    "@opengeni/codex": "^0.2.23-canary.4",
+    "@opengeni/config": "^1.2.2-canary.2",
+    "@opengeni/contracts": "^4.1.0-canary.2",
+    "@opengeni/db": "^5.0.1-canary.2",
+    "@opengeni/documents": "^0.8.30-canary.2",
+    "@opengeni/events": "^0.4.28-canary.2",
+    "@opengeni/network": "^0.3.1-canary.19",
+    "@opengeni/observability": "^0.8.29-canary.2",
+    "@opengeni/runtime": "^3.0.1-canary.2",
+    "@opengeni/storage": "^0.2.130-canary.2",
     "hono": "^4.12.18",
     "zod": "^4.2.1"
   },

package/src/domain/editable-artifacts/agent-application.ts

@@ -76,6 +76,7 @@ export type EditableArtifactAgentContext = Readonly<{
 
 export type EditableArtifactAgentMetadata = Readonly<{
   id: string;
+  artifactReference: string;
   modality: EditableArtifactModality;
   title: string;
   lifecycle: EditableArtifact["lifecycle"];
@@ -174,6 +175,14 @@ export type EditableArtifactAgentApplicationDependencies = Readonly<{
   exports: EditableArtifactDurableExportService;
   associations: EditableArtifactAgentAssociationPort;
   inspector: EditableArtifactAgentInspectionKernelPort;
+  /** Production persists proof only after a successful native query. */
+  recordInspection?: (
+    input: EditableArtifactAgentContext & {
+      artifact: EditableArtifactAgentMetadata;
+      queryHash: string;
+      queryKind: string;
+    },
+  ) => Promise<string>;
   officeImports: EditableArtifactOfficeImportPort;
   workspaceFiles: EditableArtifactAgentWorkspaceFilePort;
 }>;
@@ -291,7 +300,13 @@ export class EditableArtifactAgentApplication {
   async inspect(
     input: EditableArtifactAgentContext &
       Readonly<{ artifactId: EditableArtifactId; request: EditableArtifactAgentQuery }>,
-  ): Promise<Readonly<{ artifact: EditableArtifactAgentMetadata; projection: unknown }>> {
+  ): Promise<
+    Readonly<{
+      artifact: EditableArtifactAgentMetadata;
+      projection: unknown;
+      inspectionReceiptId?: string;
+    }>
+  > {
     const context = agentContext(input);
     const artifactId = editableArtifactId(input.artifactId);
     const state = await this.dependencies.domain.readCurrentKernelState({
@@ -304,8 +319,21 @@ export class EditableArtifactAgentApplication {
     const queryBytes = encodeQuery(input.request);
     const responseBytes = await this.dependencies.inspector.query({ state, queryBytes });
     const projection = decodeQueryResponse(input.request.modality, responseBytes);
+    const inspectionReceiptId =
+      state.modality === "document"
+        ? await this.dependencies.recordInspection?.({
+            ...context,
+            artifact: projectArtifact(state.artifact),
+            queryHash: createHash("sha256").update(queryBytes).digest("hex"),
+            queryKind: input.request.query.kind,
+          })
+        : undefined;
     await this.touch(context, artifactId);
-    return Object.freeze({ artifact: projectArtifact(state.artifact), projection });
+    return Object.freeze({
+      artifact: projectArtifact(state.artifact),
+      projection,
+      ...(inspectionReceiptId ? { inspectionReceiptId } : {}),
+    });
   }
 
   async apply(
@@ -603,6 +631,7 @@ function commandProtocolVersion(modality: EditableArtifactModality): number {
 function projectArtifact(artifact: EditableArtifact): EditableArtifactAgentMetadata {
   return Object.freeze({
     id: artifact.id,
+    artifactReference: `[Open report](/workspaces/${artifact.scope.workspaceId}/artifacts/editable/${artifact.id})`,
     modality: artifact.modality,
     title: artifact.title,
     lifecycle: artifact.lifecycle,

package/src/domain/scheduled-tasks.ts

@@ -91,6 +91,7 @@ import {
   assertWorkspaceModelPolicyAllows,
   canonicalConfiguredModel,
   creationInitiatorForGrant,
+  settingsWithSessionMcpServerMetadata,
 } from "./sessions";
 import {
   hasReservedOpenGeniSlackBotSessionMetadata,
@@ -297,6 +298,13 @@ export async function createValidatedScheduledTask(input: {
         input.settings,
         { subjectId: input.grant.subjectId },
       );
+  // Existing-session runs use the target's persisted MCP configuration, with
+  // session definitions taking precedence over deployment servers of the same
+  // ID. Metadata selects the destination; captured grants still supply authority.
+  const hostRuntimeSettings =
+    runtimeSettings && target
+      ? settingsWithSessionMcpServerMetadata(runtimeSettings, target.mcpServers)
+      : runtimeSettings;
   const personalConnectionDelegations =
     knowledgeAction || !runtimeSettings
       ? []
@@ -370,20 +378,20 @@ export async function createValidatedScheduledTask(input: {
         variableSetId: input.payload.variableSetId ?? null,
         rigId: input.payload.rigId ?? null,
         metadata: input.payload.metadata,
-        ...(hostSelections?.length && runtimeSettings
+        ...(hostSelections?.length && hostRuntimeSettings
           ? {
               captureHostAuthority: prepareHostMcpTaskAdmission({
-                settings: runtimeSettings,
+                settings: hostRuntimeSettings,
                 tools: target?.tools ?? agentConfig.tools,
                 grant: input.grant,
                 ...(input.authorization ? { authorization: input.authorization } : {}),
                 selections: hostSelections,
               }),
             }
-          : hostSelections === undefined && creationInitiator.actor && runtimeSettings
+          : hostSelections === undefined && creationInitiator.actor && hostRuntimeSettings
             ? {
                 captureHostAuthority: prepareInheritedHostMcpTaskAdmission(
-                  runtimeSettings,
+                  hostRuntimeSettings,
                   target?.tools ?? agentConfig.tools,
                   creationInitiator.actor,
                 ),

package/src/domain/sessions.ts

@@ -1345,6 +1345,9 @@ async function finishStartSession(
           ...(input.goal.rootConstraints !== undefined
             ? { rootConstraints: input.goal.rootConstraints }
             : {}),
+          ...(input.goal.reportRequirements !== undefined
+            ? { reportRequirements: input.goal.reportRequirements }
+            : {}),
           ...(input.goal.maxAutoContinuations !== undefined
             ? { maxAutoContinuations: input.goal.maxAutoContinuations }
             : {}),