@opengeni/runtime 2.4.3-canary.0 → 2.5.1-canary.0

package/dist/index.d.ts

@@ -26,8 +26,8 @@ import type { ComputerToolMode } from "./legacy-computer-compat.js";
 import type { RuntimeMetricsHooks } from "./metrics.js";
 import { resolveTurnModel } from "./model-provider.js";
 import { type WorkspaceSkillSearchPath } from "./workspace-skills.js";
-import { type EffectiveSkillSelection, type RuntimeSkillActivation } from "./runtime-skills.js";
-export { composeRuntimeSkills, loadNativeToolSkillArtifacts, type EffectiveSkillSelection, type InstalledSkillActivation, type NativeToolSkillSet, type PackSkillActivation, type RuntimeSkillActivation, type RuntimeSkillArtifact, type RuntimeSkillArtifactFile, type RuntimeSkillComposition, type RuntimeSkillDescriptor, type SessionSkillActivation, } from "./runtime-skills.js";
+import { type EffectiveSkillSelection, type RuntimeSkillActivation, type RuntimeSkillIndexEntry } from "./runtime-skills.js";
+export { composeRuntimeSkills, loadNativeToolSkillArtifacts, readRuntimeSkill, skillCatalogFromComposition, type EffectiveSkillSelection, type InstalledSkillActivation, type NativeToolSkillSet, type PackSkillActivation, type RuntimeSkillActivation, type RuntimeSkillArtifact, type RuntimeSkillArtifactFile, type RuntimeSkillComposition, type RuntimeSkillDescriptor, type RuntimeSkillIndexEntry, type SessionSkillActivation, } from "./runtime-skills.js";
 import { type PersistentAgentInstructionInspection } from "./model-context-inspector.js";
 import { type ModelPreparationMeasurement } from "./model-preparation-diagnostics.js";
 import type { ModelResponseUsage, NormalizedRuntimeEvent, SerializedHumanInputInterruption, SerializedInteractionInterventionInterruption } from "./run-events.js";
@@ -301,6 +301,8 @@ export type CodemodeTokenWriterSession = SandboxSessionLike;
  * turn skill activation into an authorization change.
  */
 export declare function effectiveSkillSelectionsForAgent(agent: object): readonly EffectiveSkillSelection[];
+/** Sandbox-independent Skill index admitted for this agent. */
+export declare function runtimeSkillIndexForAgent(agent: object): readonly RuntimeSkillIndexEntry[];
 export declare function persistentAgentInstructionInspectionFor(agent: object): PersistentAgentInstructionInspection;
 export type ConnectorActionToolCall = {
     approvalId: string;
@@ -359,6 +361,8 @@ export type AttemptConnectorActionBinding = {
     resultOutcome?: (output: unknown) => "not_executed" | "uncertain" | null;
 };
 export type BuildAgentOptions = {
+    /** Live authority fence for intrinsic sandbox tools outside the MCP gateway. */
+    authorizeAttemptExecution?: () => Promise<void> | void;
     /** Trusted attempt-local wait receipt shared with prepared tools. */
     inputWaitYield?: InputWaitYield;
     model?: Model;
@@ -478,10 +482,8 @@ export type BuildAgentOptions = {
      * executable tool catalog.
      */
     skillActivations?: readonly RuntimeSkillActivation[];
-    /** Server-backed Skill descriptors, independent of sandbox capabilities. */
+    /** Host-owned descriptors and reader; mutually exclusive with skillActivations. */
     skillCatalog?: readonly SkillCatalogDescriptor[];
-    /** Shared reader serves configured Skills; filesystem discovery remains for repo Skills only. */
-    serverSkillReading?: boolean;
     /**
      * Internal per-attempt cancellation boundary. The worker supplies Temporal's
      * signal so an in-flight shell process is interrupted immediately instead of
@@ -640,6 +642,7 @@ export declare function buildOpenGeniAgent(settings: Settings, resources: Resour
  */
 export declare function withStructuredViewImageFunctionResults(tools: Tool<unknown>[]): Tool<unknown>[];
 export declare function buildAgentCapabilities(settings: Settings, skillActivations?: readonly RuntimeSkillActivation[], options?: {
+    authorizeAttemptExecution?: () => Promise<void> | void;
     editableArtifactToolsAvailable?: boolean;
     videoGenerationAvailable?: boolean;
     workspaceSkillPaths?: readonly WorkspaceSkillSearchPath[];
@@ -747,6 +750,10 @@ export type PrepareToolsOptions = {
     attemptToolDefinitions?: readonly AttemptToolDefinition[];
     /** Host authorization applied after catalog/input validation and before execution. */
     attemptToolAuthorize?: AttemptToolAuthorization;
+    /** Live accepted-attempt fence, evaluated at execution rather than catalog
+     * preparation. Includes model and Codemode calls and runs before consuming
+     * connector approval authority. Does not alter catalog identity. */
+    authorizeAttemptExecution?: () => Promise<void> | void;
     /** Attempt-bound connector policy installed into the canonical gateway lifecycle. */
     connectorActionPolicy?: ConnectorActionPolicyHooks;
     /** Private connector identities for exact-name attempt-local tools. */

package/dist/index.js

@@ -191,6 +191,7 @@ import {
   projectRejectedReasoningArtifact,
   projectRemoteCompactionOverflowRetryInput,
   protocolItemsFromGeneratedItems,
+  readRuntimeSkill,
   recordModelPreparationMeasurement,
   refreshCodemodeTokenFile,
   refreshGitCredentialBindingTokenFiles,
@@ -217,6 +218,7 @@ import {
   runOwnedSandboxSetup,
   runRepositoryCloneHook,
   runRigSetupHook,
+  runtimeSkillIndexForAgent,
   safeMcpTransportError,
   sandboxArtifactRuntimeDoctorHooks,
   sandboxFileDownloadFailureNote,
@@ -229,6 +231,7 @@ import {
   serializeInteractionInterventionRequests,
   serializedRunStateHasOpaqueProviderArtifact,
   serializedToolsForRemoteCompaction,
+  skillCatalogFromComposition,
   spilledModelToolResult,
   stripInternalModelMetadata,
   stripProviderItemIdsFilter,
@@ -244,7 +247,7 @@ import {
   workspaceEnvironmentInstructions,
   wrapAttemptToolDefinitions,
   wrapAttemptToolExecute
-} from "./chunk-P5AEIDAS.js";
+} from "./chunk-26GUTY32.js";
 import {
   ActiveBackendUnresolvableError,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
@@ -514,8 +517,8 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   withoutSandboxProviderIdentity
-} from "./chunk-WATBACLT.js";
-import "./chunk-YRKIQK25.js";
+} from "./chunk-LGLJ5PVD.js";
+import "./chunk-CD22I76N.js";
 import {
   SKILL_MAX_FILES,
   SKILL_MAX_FILE_BYTES,
@@ -528,7 +531,7 @@ import {
   parseSkillFrontmatter,
   skillArtifactContentSha256,
   skillLibraryRepositoryUrl
-} from "./chunk-7K6WOXFS.js";
+} from "./chunk-GB763TSV.js";
 import "./chunk-UZ66CGC2.js";
 import {
   GMAIL_REST_API_BASE,
@@ -540,7 +543,7 @@ import {
 } from "./chunk-JHM4OS7C.js";
 import {
   MaxTurnsExceededError
-} from "./chunk-ORKCCH5X.js";
+} from "./chunk-25B3EQRW.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ActiveBackendUnresolvableError,
@@ -949,6 +952,7 @@ export {
   providerWorkspaceCapturePolicy,
   provisionBrowserControlClient,
   querySelfhostedOp,
+  readRuntimeSkill,
   readVerifiedWorkspaceArchive,
   readWorkspaceArchiveFromEnvelopeSessionState,
   recordModelPreparationMeasurement,
@@ -996,6 +1000,7 @@ export {
   runStateCompatibilityProvider,
   runStateExposedPortsRecord,
   runWithToolCallCorrelation,
+  runtimeSkillIndexForAgent,
   safeMcpTransportError,
   sandboxArtifactRuntimeDoctorHooks,
   sandboxBackendForSdkBackendId,
@@ -1031,6 +1036,7 @@ export {
   signedEndpointExpiresAtMs,
   signedEndpointNeedsRefresh,
   skillArtifactContentSha256,
+  skillCatalogFromComposition,
   skillLibraryRepositoryUrl,
   spilledModelToolResult,
   startRecording,

package/dist/{localSources-GDQRRHT3.js → localSources-Z5IJIIRV.js}

@@ -3,8 +3,8 @@ import {
   applyLocalSourceManifestToState,
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
-} from "./chunk-YRKIQK25.js";
-import "./chunk-ORKCCH5X.js";
+} from "./chunk-CD22I76N.js";
+import "./chunk-25B3EQRW.js";
 import "./chunk-PZ5AY32C.js";
 export {
   applyLocalSourceManifestEntryToState,
@@ -12,4 +12,4 @@ export {
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
 };
-//# sourceMappingURL=localSources-GDQRRHT3.js.map
+//# sourceMappingURL=localSources-Z5IJIIRV.js.map

package/dist/model-input.d.ts

@@ -1,5 +1,5 @@
 import type { Settings } from "@opengeni/config";
-import type { CallModelInputFilter } from "@openai/agents";
+import type { AgentInputItem, CallModelInputFilter } from "@openai/agents";
 import { type ProviderContextTokenSignal } from "./context-compaction.js";
 export type ContextRobustnessFilterOptions = {
     contextCompactionSignal?: () => ProviderContextTokenSignal | null | undefined;
@@ -20,6 +20,7 @@ export type ContextRobustnessFilterOptions = {
  * are separate properties and stay untouched; items are cloned, never mutated.
  */
 export declare const stripProviderItemIdsFilter: CallModelInputFilter;
+export declare function stripProviderItemId(item: AgentInputItem): AgentInputItem;
 /**
  * callModelInputFilter that normalizes every `computer_call` carrying BOTH
  * `action` and `actions` down to EXACTLY ONE (keeps `actions`, drops `action`).

package/dist/runtime-skills.d.ts

@@ -1,4 +1,5 @@
-import { type LocalDirLazySkillSource } from "@openai/agents/sandbox";
+import { readSkillFiles } from "./skill-files.js";
+import type { SkillCatalogDescriptor } from "./skill-catalog.js";
 export type RuntimeSkillArtifactFile = Readonly<{
     path: string;
     content: string;
@@ -47,13 +48,26 @@ export type EffectiveSkillSelection = Readonly<{
     contentSha256: string | null;
     reason: string;
 }>;
+export type RuntimeSkillReadable = Readonly<{
+    id: string;
+    name: string;
+    description: string;
+    files: readonly RuntimeSkillArtifactFile[];
+}>;
 export type RuntimeSkillComposition = Readonly<{
-    lazySource: LocalDirLazySkillSource;
     selections: readonly EffectiveSkillSelection[];
     /** Exact always-visible catalog descriptors for explicitly activated Skills. */
     configuredDescriptors: readonly RuntimeSkillDescriptor[];
     configuredNames: readonly string[];
     nativeToolNames: readonly string[];
+    /** Model-facing catalog descriptors for configured and bundled Skills. */
+    index: readonly RuntimeSkillIndexEntry[];
+    artifacts: readonly RuntimeSkillReadable[];
+}>;
+export type RuntimeSkillIndexEntry = Readonly<{
+    id: string;
+    name: string;
+    description: string;
 }>;
 export type RuntimeSkillDescriptor = Readonly<{
     id: string;
@@ -62,6 +76,11 @@ export type RuntimeSkillDescriptor = Readonly<{
     reason: string;
     description: string;
 }>;
+export type RuntimeSkillReadRequest = Readonly<{
+    skill: string;
+    paths?: readonly string[];
+    listFiles?: boolean;
+}>;
 /**
  * Packaged guidance is server-readable content, not a sandbox installation.
  * The caller supplies the effective capability selection; compute backend is
@@ -72,10 +91,14 @@ export declare function loadNativeToolSkillArtifacts(nativeTools: NativeToolSkil
 }>): readonly RuntimeSkillArtifact[];
 /**
  * Compose the exact Skills surface for one agent.
- *
  * Optional/domain Skills enter only through explicit activations. Native
  * Skills are admitted only with the exact executable tool surface they
- * document. This one result owns both lazy materialization and inspection
- * provenance so those projections cannot disagree.
+ * document. The result is an in-memory catalog and file set, not an SDK loader.
  */
 export declare function composeRuntimeSkills(activations: readonly RuntimeSkillActivation[], nativeTools?: NativeToolSkillSet): RuntimeSkillComposition;
+export declare function skillCatalogFromComposition(composition: RuntimeSkillComposition): readonly SkillCatalogDescriptor[];
+export declare function readRuntimeSkill(composition: RuntimeSkillComposition, request: RuntimeSkillReadRequest): {
+    skillId: string;
+    files?: ReturnType<typeof readSkillFiles>["files"];
+    paths?: string[];
+};

package/dist/sandbox/index.js

@@ -265,9 +265,9 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   withoutSandboxProviderIdentity
-} from "../chunk-WATBACLT.js";
-import "../chunk-YRKIQK25.js";
-import "../chunk-ORKCCH5X.js";
+} from "../chunk-LGLJ5PVD.js";
+import "../chunk-CD22I76N.js";
+import "../chunk-25B3EQRW.js";
 import "../chunk-PZ5AY32C.js";
 export {
   ActiveBackendUnresolvableError,

package/dist/skill-files.d.ts

@@ -14,6 +14,10 @@ export declare class SkillFileError extends Error {
     constructor(code: "invalid_path" | "invalid_request" | "missing_file" | "output_too_large", message: string);
 }
 export declare function assertSkillRelativePath(path: string): void;
+/** Inventory shares the reader's path validation and never includes file bodies. */
+export declare function listSkillPaths(files: readonly SkillTextFile[], maxFiles: number): {
+    paths: string[];
+};
 /** Omitted paths default to the entry point; explicit paths are never expanded. */
 export declare function readSkillFiles(files: readonly SkillTextFile[], paths?: readonly string[]): {
     files: SkillTextFile[];

package/dist/skill-library.d.ts

@@ -1,5 +1,5 @@
 export { parseSkillFrontmatter as parsePortableSkillFrontmatter } from "@opengeni/contracts";
-export { applySkillFileChanges, assertSkillRelativePath, readSkillFiles, SkillFileError, SKILL_READ_MAX_OUTPUT_BYTES, SKILL_READ_MAX_PATHS, type SkillTextFile, } from "./skill-files.js";
+export { applySkillFileChanges, assertSkillRelativePath, listSkillPaths, readSkillFiles, SkillFileError, SKILL_READ_MAX_OUTPUT_BYTES, SKILL_READ_MAX_PATHS, type SkillTextFile, } from "./skill-files.js";
 /**
  * Metadata for a platform-curated skill. The metadata is deliberately
  * provider-neutral: it describes guidance provenance and compatibility, not

package/dist/skill-library.js

@@ -11,6 +11,7 @@ import {
   getSkillLibraryEntry,
   isSkillLibraryEntryId,
   listSkillLibraryEntries,
+  listSkillPaths,
   loadSkillLibrarySkill,
   loadSkillManagementSkill,
   parseSkillFrontmatter,
@@ -19,7 +20,7 @@ import {
   skillArtifactContentSha256,
   skillLibraryRepositoryUrl,
   verifySkillLibraryArtifact
-} from "./chunk-7K6WOXFS.js";
+} from "./chunk-GB763TSV.js";
 import "./chunk-PZ5AY32C.js";
 export {
   SKILL_MAX_FILES as PORTABLE_SKILL_MAX_FILES,
@@ -34,6 +35,7 @@ export {
   getSkillLibraryEntry,
   isSkillLibraryEntryId,
   listSkillLibraryEntries,
+  listSkillPaths,
   loadSkillLibrarySkill,
   loadSkillManagementSkill,
   parseSkillFrontmatter as parsePortableSkillFrontmatter,

package/dist/workspace-tool-gateway.js

@@ -1,12 +1,12 @@
 import {
   prepareAgentTools
-} from "./chunk-P5AEIDAS.js";
-import "./chunk-WATBACLT.js";
-import "./chunk-YRKIQK25.js";
-import "./chunk-7K6WOXFS.js";
+} from "./chunk-26GUTY32.js";
+import "./chunk-LGLJ5PVD.js";
+import "./chunk-CD22I76N.js";
+import "./chunk-GB763TSV.js";
 import "./chunk-UZ66CGC2.js";
 import "./chunk-JHM4OS7C.js";
-import "./chunk-ORKCCH5X.js";
+import "./chunk-25B3EQRW.js";
 import "./chunk-PZ5AY32C.js";
 export {
   prepareAgentTools as prepareWorkspaceToolGatewayTools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/runtime",
-  "version": "2.4.3-canary.0",
+  "version": "2.5.1-canary.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -62,16 +62,16 @@
     "@openai/agents": "0.14.3",
     "@openai/agents-core": "0.14.3",
     "@openai/agents-extensions": "0.14.3",
-    "@opengeni/agent-proto": "^0.5.1-canary.23",
-    "@opengeni/capabilities": "^0.3.3-canary.5",
-    "@opengeni/codemode": "^0.5.3-canary.0",
-    "@opengeni/codex": "^0.2.22-canary.5",
-    "@opengeni/config": "^1.0.4-canary.0",
-    "@opengeni/contracts": "^2.15.2-canary.0",
-    "@opengeni/network": "^0.3.1-canary.5",
-    "@opengeni/sdk": "^4.0.2-canary.0",
-    "@opengeni/tool-gateway": "^0.1.4-canary.0",
-    "@opengeni/xai-subscription": "^0.1.4-canary.5",
+    "@opengeni/agent-proto": "^0.5.1-canary.24",
+    "@opengeni/capabilities": "^0.3.3-canary.6",
+    "@opengeni/codemode": "^0.5.4-canary.0",
+    "@opengeni/codex": "^0.2.22-canary.6",
+    "@opengeni/config": "^1.1.0-canary.0",
+    "@opengeni/contracts": "^3.0.0-canary.0",
+    "@opengeni/network": "^0.3.1-canary.6",
+    "@opengeni/sdk": "^5.0.0-canary.0",
+    "@opengeni/tool-gateway": "^0.1.5-canary.0",
+    "@opengeni/xai-subscription": "^0.1.4-canary.6",
     "debug": "4.4.3",
     "modal": "0.9.0",
     "openai": "6.47.0",

package/src/bundled_management_skills/opengeni-skills/SKILL.md

@@ -83,7 +83,9 @@ When save, publish, or install returns `humanInput`, call
 `request_human_input` with that exact payload. The card displays the complete
 immutable Skill files. The initiating human's Save activates that exact revision
 in the response transaction, before the session resumes. No follow-up activation
-tool or second review is needed. Don't save and Other do not activate the Skill.
+tool or second review is needed. The runtime owns the review card's wording and
+Save/Don't save choices; do not combine it with other questions. Don't save does
+not activate the Skill, and Other is not a valid Skill decision.
 If the Skill changes before Save, make a new proposal for a fresh decision.
 Autonomous saves return applied and need no confirmation. Off refuses durable
 agent changes.