@opengeni/runtime 0.7.0 → 0.11.0

package/dist/localSources-T3HZ6KY4.js

@@ -0,0 +1,15 @@
+import {
+  applyLocalSourceManifestEntryToState,
+  applyLocalSourceManifestToState,
+  materializeLocalSourceManifest,
+  materializeLocalSourceManifestEntry
+} from "./chunk-4YJ5Z52Z.js";
+import "./chunk-K4V4QYCL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  applyLocalSourceManifestEntryToState,
+  applyLocalSourceManifestToState,
+  materializeLocalSourceManifest,
+  materializeLocalSourceManifestEntry
+};
+//# sourceMappingURL=localSources-T3HZ6KY4.js.map

package/dist/localSources-T3HZ6KY4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/sandbox/index.d.ts

@@ -1,6 +1,6 @@
 export { collectSandboxEnvironment, parseExposedPorts } from '@opengeni/config';
 export { CAPABILITY_DESCRIPTORS, CapabilityDescriptor, DESKTOP_STREAM_PORT, StreamTokenPayload, StreamTokenPayload as StreamTokenPayloadType, TERMINAL_STREAM_PORT } from '@opengeni/contracts';
 import '@openai/agents/sandbox';
-export { A as ActiveBackendResolverDeps, a as ActiveBackendUnresolvableError, b as ActivePointer, B as BackendUnresolvableCode, C as ChannelAConflictError, c as ChannelAEmitter, d as ChannelAExecArgs, e as ChannelAExecResult, f as ChannelANotFoundError, g as ChannelASession, h as ChannelAUnsupportedError, i as ChannelAValidationError, j as ControlRpc, D as DEFAULT_DESKTOP_GEOMETRY, k as DISPLAY_STACK_TIMEOUT_MS, l as DesktopGeometry, m as DisplayStackError, n as DisplayStackUnsupportedError, E as EnsureDisplayStackOptions, o as EnsureDisplayStackResult, p as EnsureTerminalServerOptions, q as EnsureTerminalServerResult, r as EstablishedSandboxSession, s as ExposeStreamPortInput, t as ExposeStreamPortResult, u as ExposedPortEndpoint, F as FAULT_FIELD_WHAT_HAPPENED, v as FAULT_FIELD_WHAT_PRESERVED, w as FAULT_FIELD_WHAT_TO_TRY, x as FAULT_FIELD_WHICH_LAYER, L as LiveModalSandboxLeaseAttribution, M as MintStreamTokenInput, y as MockAgentResponder, z as MockAgentResponderOptions, G as MockExecHandler, H as ModalModuleLoader, I as ModalOrphanSweepResult, J as ModalSandboxAttribution, N as NEVER_SENT_DETAIL_KEY, K as NatsControlRpc, O as NatsOpStreamConnection, P as NatsOpStreamTransport, Q as NatsRequestConnection, S as NegotiationContext, T as NumstatEntry, U as OP_STREAM_ACK_INTERVAL_MS, V as OP_STREAM_DEFAULT_WINDOW_BYTES, W as OP_STREAM_RECONNECT_HOLD_MS, X as OP_STREAM_SILENCE_TIMEOUT_MS, Y as OpStreamExecOutcome, Z as OpStreamJournal, _ as OpStreamSubscription, $ as OpStreamTransport, a0 as OpStreamUnavailableError, a1 as PROVIDER_REGISTRY, a2 as ProviderConstructionContext, a3 as ProviderRegistration, a4 as REPOSITORY_DISCOVERY_LIMIT, a5 as RecordingArtifactMetadata, a6 as RecordingCodec, a7 as RecordingContentType, a8 as RecordingError, a9 as RecordingProcess, aa as RecordingUnavailableError, ab as RepositoryDiscoveryDegradedReason, ac as RepositoryDiscoveryResult, ad as ResolvedActiveBackend, ae as RoutableBackendSession, af as RoutableSandbox, ag as RoutingSandboxSession, ah as RoutingSandboxSessionDeps, ai as RoutingTransitionEvent, aj as RoutingUnsupportedError, ak as SELFHOSTED_DEFAULT_TIMEOUT_MS, al as SELFHOSTED_DRAINING_MAX_RETRIES, am as SELFHOSTED_EXEC_DRAINING_MAX_RETRIES, an as SELFHOSTED_IDEMPOTENT_READONLY_OPS, ao as SELFHOSTED_INFRASTRUCTURE_FAULT_CLASSES, ap as SELFHOSTED_NEVER_SENT_MAX_RETRIES, aq as SELFHOSTED_RECONNECT_WINDOW_MS, ar as SELFHOSTED_RELAY_STREAM_PATH, as as SELFHOSTED_RETRY_BACKOFF_BASE_MS, at as SELFHOSTED_RETRY_BACKOFF_CAP_MS, au as SELFHOSTED_RETRY_BACKOFF_FACTOR, av as SELFHOSTED_TIMEOUT_MAX_RETRIES, aw as STREAM_PORT, ax as STREAM_TOKEN_DEFAULT_TTL_SECONDS, ay as SandboxChannelAService, az as SandboxChannelAServiceOptions, aA as SandboxConfigError, aB as SandboxCreatedCallback, aC as SandboxProviderUnavailableError, aD as SandboxResumeStateUnavailableError, aE as SelfhostedApplyDiff, aF as SelfhostedControlError, aG as SelfhostedEditor, aH as SelfhostedEnrollment, aI as SelfhostedExecArgs, aJ as SelfhostedExecResult, aK as SelfhostedImageOutput, aL as SelfhostedLivenessState, aM as SelfhostedNegotiationInput, aN as SelfhostedOpObservation, aO as SelfhostedOpObserver, aP as SelfhostedOpStreamDeps, aQ as SelfhostedRelayConfig, aR as SelfhostedRetryClock, aS as SelfhostedRetryDecision, aT as SelfhostedSandboxClient, aU as SelfhostedSession, aV as SelfhostedSessionBuild, aW as SelfhostedSessionDeps, aX as SelfhostedSessionState, aY as SelfhostedUnavailableReason, aZ as StartRecordingInput, a_ as StreamPortUnavailableError, a$ as SwapTargetEstablishability, b0 as TERMINAL_SERVER_TIMEOUT_MS, b1 as TerminalServerError, b2 as TerminalServerUnsupportedError, b3 as agentErrorToControlError, b4 as assertDescriptorRegistryInvariants, b5 as assertProviderRegistryInvariants, b6 as assertSafeRelPath, b7 as backendSupportsOs, b8 as buildDisplayStackScript, b9 as buildSelfhostedBackendSession, ba as buildStreamUrl, bb as buildTerminalServerScript, bc as contentTypeForCodec, bd as createSandboxClient, be as createSandboxClientForBackend, bf as decideSelfhostedRetry, bg as decodeModalSnapshotId, bh as defaultSelfhostedRetryClock, bi as deletePriorPersistedSnapshot, bj as deleteRecordingArtifacts, bk as deserializeSandboxSessionStateEnvelope, bl as desktopCapableBackend, bm as drainingExhaustedError, bn as drainingMessage, bo as ensureDisplayStack, bp as ensureModalRegistryImage, bq as ensureTerminalServer, br as establishSandboxSessionFromEnvelope, bs as execDeadlineHint, bt as exposeStreamPort, bu as extForCodec, bv as inspectRecordingArtifact, bw as isExecSessionLostBanner, bx as isProviderSandboxNotFoundError, by as isSelfhostedProviderNotFoundError, bz as isWorkspaceEscapeError, bA as makeActiveBackendResolver, bB as mintStreamToken, bC as modalSandboxAttributionEnvironment, bD as modalSandboxAttributionTags, bE as negotiateCapabilities, bF as negotiateSelfhostedCapabilities, bG as nextDurableOpId, bH as offlineAgentError, bI as offlineControlResponse, bJ as opAckSubject, bK as opFrameSubject, bL as parseExecBannerSessionId, bM as parseNumstatZ, bN as parsePorcelainV2, bO as parseUnifiedPatch, bP as payloadTooLargeMessage, bQ as readWorkspaceArchiveFromEnvelopeSessionState, bR as recordingStorageKey, bS as renderSelfhostedFault, bT as restoredSandboxSessionStateFromEntry, bU as runWithToolCallCorrelation, bV as sandboxStateEntryFromRunState, bW as sanitizeOpIdToken, bX as selectBackend, bY as selfhostedFaultClass, bZ as selfhostedLiveness, b_ as selfhostedRetryBackoffMs, b$ as serializeEstablishedSandboxEnvelope, c0 as setSelfhostedApplyDiff, c1 as startRecording, c2 as stopRecording, c3 as stripExecBanner, c4 as subjectFor, c5 as swapTargetEstablishability, c6 as sweepModalOrphanSandboxes, c7 as tagModalSandbox, c8 as tearDownDisplayStack, c9 as tearDownTerminalServer, ca as terminateModalSandboxById, cb as timeoutAgentError, cc as timeoutControlResponse, cd as uploadRecordingArtifact, ce as verifyStreamToken } from '../index-DIiiwQY2.js';
+export { A as ActiveBackendResolverDeps, b as ActiveBackendUnresolvableError, c as ActivePointer, B as BackendUnresolvableCode, C as ChannelAConflictError, d as ChannelAEmitter, e as ChannelAExecArgs, f as ChannelAExecResult, g as ChannelANotFoundError, h as ChannelASession, i as ChannelAUnavailableError, j as ChannelAUnsupportedError, k as ChannelAValidationError, l as ControlRpc, D as DEFAULT_DESKTOP_GEOMETRY, m as DISPLAY_STACK_TIMEOUT_MS, n as DesktopGeometry, o as DisplayStackError, p as DisplayStackUnsupportedError, E as EnsureDisplayStackOptions, q as EnsureDisplayStackResult, r as EnsureTerminalServerOptions, s as EnsureTerminalServerResult, t as EstablishedSandboxSession, u as ExposeStreamPortInput, v as ExposeStreamPortResult, w as ExposedPortEndpoint, F as FAULT_FIELD_WHAT_HAPPENED, x as FAULT_FIELD_WHAT_PRESERVED, y as FAULT_FIELD_WHAT_TO_TRY, z as FAULT_FIELD_WHICH_LAYER, L as LiveModalSandboxLeaseAttribution, M as MaterializeRunCredentialsOptions, G as MintStreamTokenInput, H as MockAgentResponder, I as MockAgentResponderOptions, J as MockExecHandler, K as ModalModuleLoader, N as ModalOrphanSweepResult, O as ModalSandboxAttribution, P as NEVER_SENT_DETAIL_KEY, Q as NatsControlRpc, S as NatsOpStreamConnection, T as NatsOpStreamTransport, U as NatsRequestConnection, V as NegotiationContext, W as NormalizedRunCredentialMaterial, X as NumstatEntry, Y as OP_STREAM_ACK_INTERVAL_MS, Z as OP_STREAM_DEFAULT_WINDOW_BYTES, _ as OP_STREAM_RECONNECT_HOLD_MS, $ as OP_STREAM_SILENCE_TIMEOUT_MS, a0 as OpStreamExecOutcome, a1 as OpStreamJournal, a2 as OpStreamSubscription, a3 as OpStreamTransport, a4 as OpStreamUnavailableError, a5 as PROVIDER_REGISTRY, a6 as ProviderConstructionContext, a7 as ProviderRegistration, a8 as REPOSITORY_DISCOVERY_LIMIT, a9 as RecordingArtifactMetadata, aa as RecordingCodec, ab as RecordingContentType, ac as RecordingError, ad as RecordingProcess, ae as RecordingUnavailableError, af as RepositoryDiscoveryDegradedReason, ag as RepositoryDiscoveryResult, ah as ResolvedActiveBackend, ai as RoutableBackendSession, aj as RoutableSandbox, ak as RoutingSandboxSession, al as RoutingSandboxSessionDeps, am as RoutingTransitionEvent, an as RoutingUnsupportedError, ao as RunCredentialCommandRunner, ap as RunCredentialCommandSession, aq as RunCredentialExpectedScope, R as RunCredentialSessionReady, ar as RunCredentialValidationError, as as SELFHOSTED_DEFAULT_TIMEOUT_MS, at as SELFHOSTED_DRAINING_MAX_RETRIES, au as SELFHOSTED_EXEC_DRAINING_MAX_RETRIES, av as SELFHOSTED_IDEMPOTENT_READONLY_OPS, aw as SELFHOSTED_INFRASTRUCTURE_FAULT_CLASSES, ax as SELFHOSTED_NEVER_SENT_MAX_RETRIES, ay as SELFHOSTED_RECONNECT_WINDOW_MS, az as SELFHOSTED_RELAY_STREAM_PATH, aA as SELFHOSTED_RETRY_BACKOFF_BASE_MS, aB as SELFHOSTED_RETRY_BACKOFF_CAP_MS, aC as SELFHOSTED_RETRY_BACKOFF_FACTOR, aD as SELFHOSTED_TIMEOUT_MAX_RETRIES, aE as STREAM_PORT, aF as STREAM_TOKEN_DEFAULT_TTL_SECONDS, aG as SandboxChannelAService, aH as SandboxChannelAServiceOptions, aI as SandboxConfigError, aJ as SandboxCreatedCallback, aK as SandboxProviderUnavailableError, aL as SandboxResumeStateUnavailableError, aM as SelfhostedApplyDiff, aN as SelfhostedControlError, aO as SelfhostedEditor, aP as SelfhostedEnrollment, aQ as SelfhostedExecArgs, aR as SelfhostedExecResult, aS as SelfhostedImageOutput, aT as SelfhostedLivenessState, aU as SelfhostedNegotiationInput, aV as SelfhostedOpObservation, aW as SelfhostedOpObserver, aX as SelfhostedOpStreamDeps, aY as SelfhostedRelayConfig, aZ as SelfhostedRetryClock, a_ as SelfhostedRetryDecision, a$ as SelfhostedSandboxClient, b0 as SelfhostedSession, b1 as SelfhostedSessionBuild, b2 as SelfhostedSessionDeps, b3 as SelfhostedSessionState, b4 as SelfhostedUnavailableReason, b5 as StartRecordingInput, b6 as StreamPortUnavailableError, b7 as SwapTargetEstablishability, b8 as TERMINAL_SERVER_TIMEOUT_MS, b9 as TerminalServerError, ba as TerminalServerUnsupportedError, bb as ToolspaceTokenPathError, bc as agentErrorToControlError, bd as assertDescriptorRegistryInvariants, be as assertProviderRegistryInvariants, bf as assertSafeRelPath, bg as backendSupportsOs, bh as buildDisplayStackScript, bi as buildSelfhostedBackendSession, bj as buildStreamUrl, bk as buildTerminalServerScript, bl as clearRunCredentials, bm as clearRunCredentialsForAttempt, bn as contentTypeForCodec, bo as createSandboxClient, bp as createSandboxClientForBackend, bq as decideSelfhostedRetry, br as decodeModalSnapshotId, bs as defaultSelfhostedRetryClock, bt as deletePriorPersistedSnapshot, bu as deleteRecordingArtifacts, bv as deserializeSandboxSessionStateEnvelope, bw as desktopCapableBackend, bx as drainingExhaustedError, by as drainingMessage, bz as ensureDisplayStack, bA as ensureModalRegistryImage, bB as ensureTerminalServer, bC as establishSandboxSessionFromEnvelope, bD as execDeadlineHint, bE as exposeStreamPort, bF as extForCodec, bG as inspectRecordingArtifact, bH as isExecSessionLostBanner, bI as isProviderSandboxNotFoundError, bJ as isSelfhostedProviderNotFoundError, bK as makeActiveBackendResolver, bL as materializeRunCredentials, bM as mintStreamToken, bN as modalSandboxAttributionEnvironment, bO as modalSandboxAttributionTags, bP as negotiateCapabilities, bQ as negotiateSelfhostedCapabilities, bR as nextDurableOpId, bS as normalizeRunCredentialsResolution, bT as offlineAgentError, bU as offlineControlResponse, bV as opAckSubject, bW as opFrameSubject, bX as parseExecBannerExitCode, bY as parseExecBannerSessionId, bZ as parseNumstatZ, b_ as parsePorcelainV2, b$ as parseUnifiedPatch, c0 as payloadTooLargeMessage, c1 as readWorkspaceArchiveFromEnvelopeSessionState, c2 as recordingStorageKey, c3 as renderSelfhostedFault, c4 as restoredSandboxSessionStateFromEntry, c5 as runCredentialPointerFile, c6 as runCredentialRoot, c7 as runWithToolCallCorrelation, c8 as sandboxStateEntryFromRunState, c9 as sanitizeOpIdToken, ca as selectBackend, cb as selfhostedFaultClass, cc as selfhostedLiveness, cd as selfhostedRetryBackoffMs, ce as serializeEstablishedSandboxEnvelope, cf as setSelfhostedApplyDiff, cg as startRecording, ch as stopRecording, ci as stripExecBanner, cj as subjectFor, ck as swapTargetEstablishability, cl as sweepModalOrphanSandboxes, cm as tagModalSandbox, cn as tearDownDisplayStack, co as tearDownTerminalServer, cp as terminateModalSandboxById, cq as timeoutAgentError, cr as timeoutControlResponse, cs as toolspaceTokenFileForSession, ct as toolspaceTokenFileFromEnvironment, cu as uploadRecordingArtifact, cv as verifyStreamToken, cw as withRunCredentialEnvironment, cx as withRunCredentialsClient, cy as withRunCredentialsSession, cz as withToolspaceTokenClient, cA as withToolspaceTokenEnvironment, cB as withToolspaceTokenSession } from '../index-D6yi-JcU.js';
 import 'modal';
 import '@opengeni/agent-proto';

package/dist/sandbox/index.js

@@ -3,6 +3,7 @@ import {
   CAPABILITY_DESCRIPTORS,
   ChannelAConflictError,
   ChannelANotFoundError,
+  ChannelAUnavailableError,
   ChannelAUnsupportedError,
   ChannelAValidationError,
   DEFAULT_DESKTOP_GEOMETRY,
@@ -29,6 +30,7 @@ import {
   RecordingUnavailableError,
   RoutingSandboxSession,
   RoutingUnsupportedError,
+  RunCredentialValidationError,
   SELFHOSTED_DEFAULT_TIMEOUT_MS,
   SELFHOSTED_DRAINING_MAX_RETRIES,
   SELFHOSTED_EXEC_DRAINING_MAX_RETRIES,
@@ -56,6 +58,7 @@ import {
   TERMINAL_STREAM_PORT,
   TerminalServerError,
   TerminalServerUnsupportedError,
+  ToolspaceTokenPathError,
   agentErrorToControlError,
   assertDescriptorRegistryInvariants,
   assertProviderRegistryInvariants,
@@ -65,6 +68,8 @@ import {
   buildSelfhostedBackendSession,
   buildStreamUrl,
   buildTerminalServerScript,
+  clearRunCredentials,
+  clearRunCredentialsForAttempt,
   collectSandboxEnvironment,
   contentTypeForCodec,
   createSandboxClient,
@@ -89,18 +94,20 @@ import {
   isExecSessionLostBanner,
   isProviderSandboxNotFoundError,
   isSelfhostedProviderNotFoundError,
-  isWorkspaceEscapeError,
   makeActiveBackendResolver,
+  materializeRunCredentials,
   mintStreamToken,
   modalSandboxAttributionEnvironment,
   modalSandboxAttributionTags,
   negotiateCapabilities,
   negotiateSelfhostedCapabilities,
   nextDurableOpId,
+  normalizeRunCredentialsResolution,
   offlineAgentError,
   offlineControlResponse,
   opAckSubject,
   opFrameSubject,
+  parseExecBannerExitCode,
   parseExecBannerSessionId,
   parseExposedPorts,
   parseNumstatZ,
@@ -111,6 +118,8 @@ import {
   recordingStorageKey,
   renderSelfhostedFault,
   restoredSandboxSessionStateFromEntry,
+  runCredentialPointerFile,
+  runCredentialRoot,
   runWithToolCallCorrelation,
   sandboxStateEntryFromRunState,
   sanitizeOpIdToken,
@@ -132,14 +141,26 @@ import {
   terminateModalSandboxById,
   timeoutAgentError,
   timeoutControlResponse,
+  toolspaceTokenFileForSession,
+  toolspaceTokenFileFromEnvironment,
   uploadRecordingArtifact,
-  verifyStreamToken
-} from "../chunk-RYDCVTMW.js";
+  verifyStreamToken,
+  withRunCredentialEnvironment,
+  withRunCredentialsClient,
+  withRunCredentialsSession,
+  withToolspaceTokenClient,
+  withToolspaceTokenEnvironment,
+  withToolspaceTokenSession
+} from "../chunk-YUAFQEFY.js";
+import "../chunk-4YJ5Z52Z.js";
+import "../chunk-K4V4QYCL.js";
+import "../chunk-PZ5AY32C.js";
 export {
   ActiveBackendUnresolvableError,
   CAPABILITY_DESCRIPTORS,
   ChannelAConflictError,
   ChannelANotFoundError,
+  ChannelAUnavailableError,
   ChannelAUnsupportedError,
   ChannelAValidationError,
   DEFAULT_DESKTOP_GEOMETRY,
@@ -166,6 +187,7 @@ export {
   RecordingUnavailableError,
   RoutingSandboxSession,
   RoutingUnsupportedError,
+  RunCredentialValidationError,
   SELFHOSTED_DEFAULT_TIMEOUT_MS,
   SELFHOSTED_DRAINING_MAX_RETRIES,
   SELFHOSTED_EXEC_DRAINING_MAX_RETRIES,
@@ -193,6 +215,7 @@ export {
   TERMINAL_STREAM_PORT,
   TerminalServerError,
   TerminalServerUnsupportedError,
+  ToolspaceTokenPathError,
   agentErrorToControlError,
   assertDescriptorRegistryInvariants,
   assertProviderRegistryInvariants,
@@ -202,6 +225,8 @@ export {
   buildSelfhostedBackendSession,
   buildStreamUrl,
   buildTerminalServerScript,
+  clearRunCredentials,
+  clearRunCredentialsForAttempt,
   collectSandboxEnvironment,
   contentTypeForCodec,
   createSandboxClient,
@@ -226,18 +251,20 @@ export {
   isExecSessionLostBanner,
   isProviderSandboxNotFoundError,
   isSelfhostedProviderNotFoundError,
-  isWorkspaceEscapeError,
   makeActiveBackendResolver,
+  materializeRunCredentials,
   mintStreamToken,
   modalSandboxAttributionEnvironment,
   modalSandboxAttributionTags,
   negotiateCapabilities,
   negotiateSelfhostedCapabilities,
   nextDurableOpId,
+  normalizeRunCredentialsResolution,
   offlineAgentError,
   offlineControlResponse,
   opAckSubject,
   opFrameSubject,
+  parseExecBannerExitCode,
   parseExecBannerSessionId,
   parseExposedPorts,
   parseNumstatZ,
@@ -248,6 +275,8 @@ export {
   recordingStorageKey,
   renderSelfhostedFault,
   restoredSandboxSessionStateFromEntry,
+  runCredentialPointerFile,
+  runCredentialRoot,
   runWithToolCallCorrelation,
   sandboxStateEntryFromRunState,
   sanitizeOpIdToken,
@@ -269,7 +298,15 @@ export {
   terminateModalSandboxById,
   timeoutAgentError,
   timeoutControlResponse,
+  toolspaceTokenFileForSession,
+  toolspaceTokenFileFromEnvironment,
   uploadRecordingArtifact,
-  verifyStreamToken
+  verifyStreamToken,
+  withRunCredentialEnvironment,
+  withRunCredentialsClient,
+  withRunCredentialsSession,
+  withToolspaceTokenClient,
+  withToolspaceTokenEnvironment,
+  withToolspaceTokenSession
 };
 //# sourceMappingURL=index.js.map

package/dist/skill-library.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Metadata for a platform-curated skill. The metadata is deliberately
+ * provider-neutral: it describes guidance provenance and compatibility, not
+ * credentials, tools, permissions, or a model route.
+ *
+ * Entries are immutable in the runtime. A new artifact gets a new version and
+ * content hash; callers must not mutate the returned records.
+ */
+type SkillLibraryEntry = Readonly<{
+    id: string;
+    name: string;
+    version: string;
+    description: string;
+    category: string;
+    tags: readonly string[];
+    /** SHA-256 over the complete canonical artifact manifest, not just SKILL.md. */
+    contentSha256: string;
+    sourceCommit: string;
+    sourceUrl: string;
+    provenance: string;
+    license: string;
+    documentationUrl: string;
+    compatibility: Readonly<{
+        runtime: string;
+        minimumSkillCapabilityVersion: string;
+    }>;
+    upgrade: Readonly<{
+        policy: "immutable-replacement";
+        supersedes: string | null;
+    }>;
+    relativePath: string;
+}>;
+type SkillLibraryFile = Readonly<{
+    path: string;
+    content: string;
+}>;
+type SkillLibraryArtifact = Readonly<{
+    files: readonly SkillLibraryFile[];
+    /** SHA-256 over the complete canonical artifact manifest, not just SKILL.md. */
+    contentSha256: string;
+}>;
+type SkillLibrarySkill = Readonly<{
+    name: string;
+    description: string;
+    files: readonly SkillLibraryFile[];
+}>;
+/** Return only entries whose reviewed artifact is present in this deployment. */
+declare function listSkillLibraryEntries(): readonly SkillLibraryEntry[];
+/** Return whether an id belongs to the immutable library, even if its artifact is unavailable. */
+declare function isSkillLibraryEntryId(id: string): boolean;
+/** Resolve an exact immutable library entry by id and version. */
+declare function getSkillLibraryEntry(id: string, version?: string): SkillLibraryEntry | null;
+/**
+ * Load a selected curated entry into the SDK's in-memory skill shape.
+ * Selection is guidance-only: this function has no access to settings,
+ * credentials, MCP declarations, or model-provider configuration.
+ */
+declare function loadSkillLibrarySkill(id: string, version?: string): {
+    entry: SkillLibraryEntry;
+    skill: SkillLibrarySkill;
+};
+/**
+ * Read a curated artifact and calculate its canonical whole-artifact digest.
+ *
+ * The manifest is JSON encoded as sorted `[normalizedRelativePath, base64Bytes]`
+ * tuples. Base64 preserves every byte, including bytes that would not survive
+ * a lossy UTF-8 string round-trip. Files are decoded only after the digest
+ * input has been captured because the SDK skill surface is text-based.
+ */
+declare function readSkillLibraryArtifact(root: string): SkillLibraryArtifact;
+/** Verify a reviewed artifact against its immutable catalog digest. */
+declare function verifySkillLibraryArtifact(root: string, expectedSha256: string, entry?: Pick<SkillLibraryEntry, "id" | "version">): SkillLibraryArtifact;
+
+export { type SkillLibraryArtifact, type SkillLibraryEntry, type SkillLibraryFile, type SkillLibrarySkill, getSkillLibraryEntry, isSkillLibraryEntryId, listSkillLibraryEntries, loadSkillLibrarySkill, readSkillLibraryArtifact, verifySkillLibraryArtifact };

package/dist/skill-library.js

@@ -0,0 +1,18 @@
+import {
+  getSkillLibraryEntry,
+  isSkillLibraryEntryId,
+  listSkillLibraryEntries,
+  loadSkillLibrarySkill,
+  readSkillLibraryArtifact,
+  verifySkillLibraryArtifact
+} from "./chunk-DPULLAJG.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  getSkillLibraryEntry,
+  isSkillLibraryEntryId,
+  listSkillLibraryEntries,
+  loadSkillLibrarySkill,
+  readSkillLibraryArtifact,
+  verifySkillLibraryArtifact
+};
+//# sourceMappingURL=skill-library.js.map

package/dist/skill-library.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/runtime",
-  "version": "0.7.0",
+  "version": "0.11.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -8,6 +8,7 @@
     "directory": "packages/runtime"
   },
   "files": [
+    "THIRD_PARTY_NOTICES",
     "dist",
     "src"
   ],
@@ -23,6 +24,10 @@
     "./sandbox": {
       "types": "./dist/sandbox/index.d.ts",
       "import": "./dist/sandbox/index.js"
+    },
+    "./skill-library": {
+      "types": "./dist/skill-library.d.ts",
+      "import": "./dist/skill-library.js"
     }
   },
   "publishConfig": {
@@ -35,14 +40,17 @@
     "prepublishOnly": "bash ../../scripts/prepublish-guard"
   },
   "dependencies": {
+    "@modelcontextprotocol/sdk": "1.29.0",
     "@noble/hashes": "^1.8.0",
     "@openai/agents": "0.13.3",
     "@openai/agents-extensions": "0.13.3",
     "@opengeni/agent-proto": "^0.3.0",
-    "@opengeni/codex": "^0.2.2",
-    "@opengeni/config": "^0.5.0",
-    "@opengeni/contracts": "^0.10.0",
+    "@opengeni/codex": "^0.2.5",
+    "@opengeni/config": "^0.6.2",
+    "@opengeni/contracts": "^0.15.0",
+    "debug": "4.4.3",
     "modal": "0.7.6",
-    "openai": "6.47.0"
+    "openai": "6.47.0",
+    "ws": "8.21.1"
   }
 }

package/src/bundled_hashicorp_terraform_skills/README.md

@@ -1,11 +1,11 @@
 # Bundled infrastructure agent skills
 
-Vendored from [github.com/hashicorp/agent-skills](https://github.com/hashicorp/agent-skills): a flat merge of
+The deployment-default bundle is vendored from [github.com/hashicorp/agent-skills](https://github.com/hashicorp/agent-skills): a flat merge of
 
 - `terraform/code-generation/skills/`
 - `terraform/module-generation/skills/`
 
-plus repo-local infrastructure skills, so the OpenAI Agents SDK `Skills` capability can mount one `LocalDir` at the workspace `.agents` root. Each immediate subdirectory is a skill (contains `SKILL.md`).
+plus repo-local infrastructure skills, so the OpenAI Agents SDK `Skills` capability can mount one `LocalDir` at the workspace `.agents` root. Each immediate subdirectory is a skill (contains `SKILL.md`). The Azure Verified Modules guidance is intentionally excluded from this always-enabled bundle; it is maintained as the immutable opt-in entry in `../bundled_skill_library/azure-verified-modules/`.
 
 Repo-local skills:
 
@@ -15,4 +15,4 @@ Repo-local skills:
 - `UPSTREAM_GIT_SHA` — commit the tree was copied from
 - `LICENSE` — upstream MPL-2.0
 
-**To refresh upstream Terraform skills:** fetch `hashicorp/agent-skills`, copy those two `skills/` directory contents into this folder (sibling skill dirs), and update `UPSTREAM_GIT_SHA`. Do not remove repo-local skills such as `checkov` during refresh.
+**To refresh upstream Terraform skills:** fetch `hashicorp/agent-skills`, copy those two `skills/` directory contents into this folder (sibling skill dirs), omit `azure-verified-modules` from this default bundle, and update `UPSTREAM_GIT_SHA`. Do not remove repo-local skills such as `checkov` during refresh. Update the curated library entry separately and immutably when its reviewed version changes.

package/src/bundled_hashicorp_terraform_skills/checkov/SKILL.md

@@ -9,7 +9,7 @@ Use this skill when the user asks to scan Terraform or infrastructure-as-code fo
 
 ## Workflow
 
-1. Confirm the repository path before scanning. Repository resources are usually mounted under `/workspace/repos/<owner>/<repo>`.
+1. Confirm the repository path before scanning. Repository resources are usually mounted under `/workspace/repos/<host>/<owner>/<repo>`; use the session's resolved resource path instead of guessing.
 2. Run Checkov from the repository root or the relevant Terraform subdirectory:
 
 ```bash