@opengeni/runtime 2.5.2-canary.0 → 2.5.3-canary.0

package/dist/{chunk-25B3EQRW.js → chunk-UNICCRW5.js}

@@ -32468,7 +32468,7 @@ var SandboxMemoryGenerationManager = class {
     if (!transcript) {
       throw new UserError(`Memory rollout transcript was not found: ${transcriptPath}`);
     }
-    const { SandboxAgent: SandboxAgent2 } = await import("./agent-Q2VNH5FV.js");
+    const { SandboxAgent: SandboxAgent2 } = await import("./agent-RJQLKFIW.js");
     const phaseOneAgent = new SandboxAgent2({
       name: "sandbox-memory-phase-one",
       instructions: renderRolloutExtractionInstructions(generate.extraPrompt),
@@ -32529,7 +32529,7 @@ var SandboxMemoryGenerationManager = class {
     })) {
       return;
     }
-    const { SandboxAgent: SandboxAgent2 } = await import("./agent-Q2VNH5FV.js");
+    const { SandboxAgent: SandboxAgent2 } = await import("./agent-RJQLKFIW.js");
     const phaseTwoAgent = new SandboxAgent2({
       name: "sandbox-memory-phase-two",
       model: generate.phaseTwoModel,
@@ -44150,8 +44150,8 @@ function normalizeRunAs(runAs) {
 }
 
 export {
-  loadEnv,
   external_exports,
+  loadEnv,
   getLogger,
   logToolActionError,
   logToolActionDebug,
@@ -44266,4 +44266,4 @@ export {
   Runner,
   Agent
 };
-//# sourceMappingURL=chunk-25B3EQRW.js.map
+//# sourceMappingURL=chunk-UNICCRW5.js.map

package/dist/{chunk-LEIGL6X2.js → chunk-VVEGJPDR.js}

@@ -31,7 +31,7 @@ import {
   validateCredentialPair,
   validateRemoteSandboxPathForManifest,
   validateSandboxArchiveLimits
-} from "./chunk-CD22I76N.js";
+} from "./chunk-FHGLYLBL.js";
 import {
   Environment,
   FileMode,
@@ -94,7 +94,7 @@ import {
   shellQuote,
   stableJsonStringify,
   withSandboxSpan
-} from "./chunk-25B3EQRW.js";
+} from "./chunk-UNICCRW5.js";
 
 // src/sandbox/index.ts
 import { collectSandboxEnvironment, parseExposedPorts } from "@opengeni/config";
@@ -6565,7 +6565,7 @@ var CloudflareSandboxSession = class {
   async materializeEntry(args) {
     assertSandboxEntryMetadataSupported("CloudflareSandboxClient", args.path, args.entry, MOUNT_MANIFEST_METADATA_SUPPORT);
     if (entryContainsLocalSource(args.entry)) {
-      const { applyLocalSourceManifestEntryToState: applyLocalSourceManifestEntryToState2 } = await import("./localSources-Z5IJIIRV.js");
+      const { applyLocalSourceManifestEntryToState: applyLocalSourceManifestEntryToState2 } = await import("./localSources-PVFCAPN2.js");
       await applyLocalSourceManifestEntryToState2(this.state, args.path, args.entry, "cloudflare", this.writer(), this.remotePathResolver, this.manifestMaterializationOptions(args.runAs));
       return;
     }
@@ -6576,7 +6576,7 @@ var CloudflareSandboxSession = class {
     assertSandboxManifestMetadataSupported("CloudflareSandboxClient", manifest, MOUNT_MANIFEST_METADATA_SUPPORT);
     assertCloudflareManifestMountsSupported(manifest);
     if (manifestContainsLocalSource(manifest)) {
-      const { applyLocalSourceManifestToState: applyLocalSourceManifestToState2 } = await import("./localSources-Z5IJIIRV.js");
+      const { applyLocalSourceManifestToState: applyLocalSourceManifestToState2 } = await import("./localSources-PVFCAPN2.js");
       await applyLocalSourceManifestToState2(this.state, manifest, "cloudflare", this.writer(), this.remotePathResolver, this.manifestMaterializationOptions(runAs));
       return;
     }
@@ -37003,4 +37003,4 @@ export {
   collectSandboxEnvironment2 as collectSandboxEnvironment,
   parseExposedPorts2 as parseExposedPorts
 };
-//# sourceMappingURL=chunk-LEIGL6X2.js.map
+//# sourceMappingURL=chunk-VVEGJPDR.js.map

package/dist/index.d.ts

@@ -1,4 +1,7 @@
 import type { ModelProviderApi, ResolvedModelProvider, Settings } from "@opengeni/config";
+import { type McpOperationPersistence } from "./mcp-operation-dispatch.js";
+export { captureMcpOperationDispatch, hasActiveRecoverableMcpOperation, McpOperationOutcomeUnknownError, runRecoverableMcpOperation, type CapturedMcpOperation, type McpOperationPersistence, type RecoverableMcpOperation, } from "./mcp-operation-dispatch.js";
+export { assertMcpOperationObservationAuthority, observeMcpOperation, runMcpOperationObservationWithAuthority, type McpOperationObservationAuthority, type McpObservationBinding, type McpObservationReceipt, } from "./mcp-operation-observation.js";
 import { type SkillCatalogDescriptor } from "./skill-catalog.js";
 export { formatSkillCatalog, type SkillCatalogDescriptor } from "./skill-catalog.js";
 import { AttemptToolEnvironment, type AttemptToolAuthorization, type AttemptToolDefinition } from "@opengeni/codemode";
@@ -90,6 +93,8 @@ export type ResolveConnectionCredentialResult = {
     connectionId: string;
     authoritySource?: "host";
     authorizeProviderRequest?: () => Promise<boolean>;
+    /** Metadata-only immutable authority binding supplied by the trusted worker resolver. */
+    operationAuthorityDigest?: string;
     expiresAt?: Date | null;
 } | {
     status: "auth_needed";
@@ -707,6 +712,8 @@ export type ToolPreparationPhaseMeasurement = {
     durationSeconds: number;
 };
 export type PrepareToolsOptions = {
+    /** Opt-in exact-attempt persistence; absence preserves ordinary MCP execution. */
+    mcpOperationPersistence?: McpOperationPersistence;
     /** Live exact-owner control refresh; API remains read/observation authority. */
     refreshOwnedCommand?: (commandId: string) => Promise<boolean>;
     accountId?: string;

package/dist/index.js

@@ -30,6 +30,7 @@ import {
   MCP_LIFECYCLE_POLICIES,
   MCP_TOOL_CALL_OUTCOMES,
   MIN_COMPACTION_THRESHOLD_RATIO,
+  McpOperationOutcomeUnknownError,
   MultiProviderModelProvider,
   OPENGENI_INNER_MCP_CUSTOM_DATA_KEY,
   OPENGENI_MCP_RESULT_CUSTOM_DATA_KEY,
@@ -73,6 +74,7 @@ import {
   appendWorkspaceGovernance,
   appendWorkspaceMemory,
   applyMissingManifestEntries,
+  assertMcpOperationObservationAuthority,
   assertOpenSuffixResumable,
   azureCliLoginCommand,
   azureOpenAIDefaultQuery,
@@ -91,6 +93,7 @@ import {
   buildRemoteV2ReplacementHistory,
   buildSummaryItem,
   callModelInputFilterForSettings,
+  captureMcpOperationDispatch,
   clampCompactionThresholdRatio,
   codemodeTokenSeedCommand,
   compactMcpResultCustomDataRunState,
@@ -137,6 +140,7 @@ import {
   gitCredentialBindingHash,
   gitCredentialBindingTokenRefreshCommand,
   gitProviderTokenRefreshCommand,
+  hasActiveRecoverableMcpOperation,
   hasActiveWorkspaceInstructionPolicy,
   hasCanonicalEditableArtifactToolSurface,
   hasModelGeneratedItem,
@@ -174,6 +178,7 @@ import {
   normalizeSdkEvent,
   normalizeToolOutputForEvent,
   normalizeVercelGatewayRequestBody,
+  observeMcpOperation,
   oneShotGenesisTitleInputFilter,
   opaqueEncryptedContentLength,
   persistentAgentInstructionInspectionFor,
@@ -215,7 +220,9 @@ import {
   runAzureCliLoginHook,
   runBeforeAgentStartHooks,
   runCodemodeTokenSeedHook,
+  runMcpOperationObservationWithAuthority,
   runOwnedSandboxSetup,
+  runRecoverableMcpOperation,
   runRepositoryCloneHook,
   runRigSetupHook,
   runtimeSkillIndexForAgent,
@@ -247,7 +254,7 @@ import {
   workspaceEnvironmentInstructions,
   wrapAttemptToolDefinitions,
   wrapAttemptToolExecute
-} from "./chunk-GBHOT4KS.js";
+} from "./chunk-SD6MDONS.js";
 import {
   ActiveBackendUnresolvableError,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
@@ -519,8 +526,8 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   withoutSandboxProviderIdentity
-} from "./chunk-LEIGL6X2.js";
-import "./chunk-CD22I76N.js";
+} from "./chunk-VVEGJPDR.js";
+import "./chunk-FHGLYLBL.js";
 import {
   SKILL_MAX_FILES,
   SKILL_MAX_FILE_BYTES,
@@ -545,7 +552,7 @@ import {
 } from "./chunk-JHM4OS7C.js";
 import {
   MaxTurnsExceededError
-} from "./chunk-25B3EQRW.js";
+} from "./chunk-UNICCRW5.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ActiveBackendUnresolvableError,
@@ -618,6 +625,7 @@ export {
   MIN_COMPACTION_THRESHOLD_RATIO,
   MODAL_EXEC_READINESS_TIMEOUT_MS,
   MaxTurnsExceededError,
+  McpOperationOutcomeUnknownError,
   MockAgentResponder,
   MultiProviderModelProvider,
   NEVER_SENT_DETAIL_KEY,
@@ -731,6 +739,7 @@ export {
   applyMissingManifestEntries,
   assertConsistentSandboxProviderIdentity,
   assertDescriptorRegistryInvariants,
+  assertMcpOperationObservationAuthority,
   assertOpenSuffixResumable,
   assertProviderRegistryInvariants,
   assertSafeRelPath,
@@ -760,6 +769,7 @@ export {
   buildTerminalServerScript,
   callModelInputFilterForSettings,
   cancelSelfhostedOp,
+  captureMcpOperationDispatch,
   captureVerifiedWorkspaceArchive,
   captureWorkspaceArchiveForStorage,
   clampCompactionThresholdRatio,
@@ -850,6 +860,7 @@ export {
   gitCredentialBindingTokenRefreshCommand,
   gitProviderTokenRefreshCommand,
   gmailRestToolIsMutation,
+  hasActiveRecoverableMcpOperation,
   hasActiveWorkspaceInstructionPolicy,
   hasCanonicalEditableArtifactToolSurface,
   hasModelGeneratedItem,
@@ -920,6 +931,7 @@ export {
   normalizeSdkEvent,
   normalizeToolOutputForEvent,
   normalizeVercelGatewayRequestBody,
+  observeMcpOperation,
   offlineAgentError,
   offlineControlResponse,
   oneShotGenesisTitleInputFilter,
@@ -998,7 +1010,9 @@ export {
   runCodemodeTokenSeedHook,
   runCredentialPointerFile,
   runCredentialRoot,
+  runMcpOperationObservationWithAuthority,
   runOwnedSandboxSetup,
+  runRecoverableMcpOperation,
   runRepositoryCloneHook,
   runRigSetupHook,
   runStateCompatibilityProvider,

package/dist/{localSources-Z5IJIIRV.js → localSources-PVFCAPN2.js}

@@ -3,8 +3,8 @@ import {
   applyLocalSourceManifestToState,
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
-} from "./chunk-CD22I76N.js";
-import "./chunk-25B3EQRW.js";
+} from "./chunk-FHGLYLBL.js";
+import "./chunk-UNICCRW5.js";
 import "./chunk-PZ5AY32C.js";
 export {
   applyLocalSourceManifestEntryToState,
@@ -12,4 +12,4 @@ export {
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
 };
-//# sourceMappingURL=localSources-Z5IJIIRV.js.map
+//# sourceMappingURL=localSources-PVFCAPN2.js.map

package/dist/mcp-operation-dispatch.d.ts

@@ -0,0 +1,45 @@
+import type { AttemptToolResult } from "@opengeni/contracts";
+export type RecoverableMcpOperation = {
+    operationId: string;
+    sourceCallId?: string;
+    serverId: string;
+    originalTool: string;
+    observerTool: string;
+    destinationDigest: string;
+    argumentDigest: string;
+};
+export type CapturedMcpOperation = RecoverableMcpOperation & {
+    authorityDigest: string;
+};
+/** Worker-owned persistence. Its implementation must enforce canonical live
+ * attempt identity and store no arguments, URLs, headers, or credentials. */
+export type McpOperationPersistence = {
+    capture: (operation: CapturedMcpOperation) => Promise<"created" | "existing">;
+    settleOriginal: (input: {
+        operationId: string;
+        outcome: "completed";
+        result: AttemptToolResult;
+    } | {
+        operationId: string;
+        outcome: "outcome_unknown";
+    }) => Promise<void>;
+};
+/** Presence is an execution-routing fact, not authorization. A closed context
+ * remains visible to late callbacks so they still hit the dispatch fence. */
+export declare function hasActiveRecoverableMcpOperation(): boolean;
+export declare class McpOperationOutcomeUnknownError extends Error {
+    readonly operationId: string;
+    readonly code = "mcp_operation_outcome_unknown";
+    constructor(operationId: string, cause: unknown);
+}
+/** Establish trusted in-process correlation around one gateway execution. */
+export declare function runRecoverableMcpOperation(operation: RecoverableMcpOperation, persistence: McpOperationPersistence, execute: () => Promise<AttemptToolResult>): Promise<AttemptToolResult>;
+/** Called by the authorized broker immediately before the physical request.
+ * A second dispatch with the same identity is never an observation. */
+export declare function captureMcpOperationDispatch(input: {
+    operationId: string;
+    serverId: string;
+    toolName: string;
+    destinationDigest: string;
+    authorityDigest: string;
+}): Promise<void>;

package/dist/mcp-operation-observation.d.ts

@@ -0,0 +1,137 @@
+import { z } from "zod";
+export type McpOperationObservationAuthority = {
+    serverId: string;
+    observerTool: string;
+    destinationDigest: string;
+    authorityDigest: string;
+};
+/** Pin the actual broker request, not merely the earlier credential lookup. */
+export declare function runMcpOperationObservationWithAuthority<T>(binding: McpOperationObservationAuthority, execute: () => Promise<T>): Promise<T>;
+/** The caller is the credential broker, after live authorization and before
+ * physical tools/call dispatch. Unrelated ordinary calls remain unchanged. */
+export declare function assertMcpOperationObservationAuthority(actual: {
+    serverId: string;
+    toolName?: string;
+    destinationDigest: string;
+    authorityDigest?: string;
+}): void;
+declare const receiptSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    operationRef: z.ZodString;
+    fingerprint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"sha256">;
+        value: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodLiteral<"unknown">;
+}, z.core.$strict>, z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    operationRef: z.ZodString;
+    fingerprint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"sha256">;
+        value: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodLiteral<"pending">;
+    evidenceRevision: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    operationRef: z.ZodString;
+    fingerprint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"sha256">;
+        value: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodLiteral<"completed">;
+    receiptRevision: z.ZodString;
+    result: z.ZodObject<{
+        content: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"text">;
+            text: z.ZodString;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"image">;
+            data: z.ZodString;
+            mimeType: z.ZodString;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"audio">;
+            data: z.ZodString;
+            mimeType: z.ZodString;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"resource_link">;
+            name: z.ZodString;
+            title: z.ZodOptional<z.ZodString>;
+            uri: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            mimeType: z.ZodOptional<z.ZodString>;
+            size: z.ZodOptional<z.ZodNumber>;
+            icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                src: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                theme: z.ZodOptional<z.ZodEnum<{
+                    dark: "dark";
+                    light: "light";
+                }>>;
+            }, z.core.$strict>>>;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"resource">;
+            resource: z.ZodUnion<readonly [z.ZodObject<{
+                uri: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                text: z.ZodString;
+                _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            }, z.core.$loose>, z.ZodObject<{
+                uri: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                blob: z.ZodString;
+                _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            }, z.core.$loose>]>;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>], "type">>;
+        structuredContent: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        isError: z.ZodOptional<z.ZodBoolean>;
+        _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    }, z.core.$loose>;
+}, z.core.$strict>, z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    operationRef: z.ZodString;
+    fingerprint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"sha256">;
+        value: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodLiteral<"conflict">;
+}, z.core.$strict>], "status">;
+declare const bindingSchema: z.ZodObject<{
+    operationId: z.ZodString;
+    serverId: z.ZodString;
+    originalTool: z.ZodString;
+    observerTool: z.ZodString;
+    argumentDigest: z.ZodString;
+}, z.core.$strict>;
+export type McpObservationBinding = z.infer<typeof bindingSchema>;
+export type McpObservationReceipt = z.infer<typeof receiptSchema>;
+/**
+ * One observation, never a mutation retry. This helper is deliberately not an
+ * authority resolver or a scheduler: its caller must load an immutable trusted
+ * binding and bind callObserver to that exact authorized provider destination.
+ * Tool annotations and model-supplied arguments cannot establish that trust.
+ *
+ * Durable settlement must additionally recheck authority under its own locks.
+ * A successful return alone is not a durable delivery or commit receipt.
+ */
+export declare function observeMcpOperation(input: {
+    binding: McpObservationBinding;
+    authorize: (phase: "before_request" | "before_delivery") => Promise<boolean>;
+    callObserver: (tool: string, args: Record<string, unknown>) => Promise<unknown>;
+}): Promise<McpObservationReceipt>;
+export {};

package/dist/sandbox/index.js

@@ -267,9 +267,9 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   withoutSandboxProviderIdentity
-} from "../chunk-LEIGL6X2.js";
-import "../chunk-CD22I76N.js";
-import "../chunk-25B3EQRW.js";
+} from "../chunk-VVEGJPDR.js";
+import "../chunk-FHGLYLBL.js";
+import "../chunk-UNICCRW5.js";
 import "../chunk-PZ5AY32C.js";
 export {
   ActiveBackendUnresolvableError,

package/dist/workspace-tool-gateway.js

@@ -1,12 +1,12 @@
 import {
   prepareAgentTools
-} from "./chunk-GBHOT4KS.js";
-import "./chunk-LEIGL6X2.js";
-import "./chunk-CD22I76N.js";
+} from "./chunk-SD6MDONS.js";
+import "./chunk-VVEGJPDR.js";
+import "./chunk-FHGLYLBL.js";
 import "./chunk-GB763TSV.js";
 import "./chunk-UZ66CGC2.js";
 import "./chunk-JHM4OS7C.js";
-import "./chunk-25B3EQRW.js";
+import "./chunk-UNICCRW5.js";
 import "./chunk-PZ5AY32C.js";
 export {
   prepareAgentTools as prepareWorkspaceToolGatewayTools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/runtime",
-  "version": "2.5.2-canary.0",
+  "version": "2.5.3-canary.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -62,16 +62,16 @@
     "@openai/agents": "0.14.3",
     "@openai/agents-core": "0.14.3",
     "@openai/agents-extensions": "0.14.3",
-    "@opengeni/agent-proto": "^0.5.1-canary.25",
-    "@opengeni/capabilities": "^0.3.3-canary.7",
-    "@opengeni/codemode": "^0.5.5-canary.0",
-    "@opengeni/codex": "^0.2.22-canary.7",
-    "@opengeni/config": "^1.1.1-canary.0",
-    "@opengeni/contracts": "^3.0.1-canary.0",
-    "@opengeni/network": "^0.3.1-canary.7",
-    "@opengeni/sdk": "^5.0.3-canary.0",
-    "@opengeni/tool-gateway": "^0.1.6-canary.0",
-    "@opengeni/xai-subscription": "^0.1.4-canary.7",
+    "@opengeni/agent-proto": "^0.5.1-canary.26",
+    "@opengeni/capabilities": "^0.3.3-canary.8",
+    "@opengeni/codemode": "^0.5.6-canary.0",
+    "@opengeni/codex": "^0.2.22-canary.8",
+    "@opengeni/config": "^1.1.2-canary.0",
+    "@opengeni/contracts": "^3.0.2-canary.0",
+    "@opengeni/network": "^0.3.1-canary.8",
+    "@opengeni/sdk": "^5.0.5-canary.0",
+    "@opengeni/tool-gateway": "^0.1.7-canary.0",
+    "@opengeni/xai-subscription": "^0.1.4-canary.8",
     "debug": "4.4.3",
     "modal": "0.9.0",
     "openai": "6.47.0",