@opengeni/runtime 2.5.2 → 2.5.3-canary.0

package/dist/index.d.ts

@@ -1,4 +1,7 @@
 import type { ModelProviderApi, ResolvedModelProvider, Settings } from "@opengeni/config";
+import { type McpOperationPersistence } from "./mcp-operation-dispatch.js";
+export { captureMcpOperationDispatch, hasActiveRecoverableMcpOperation, McpOperationOutcomeUnknownError, runRecoverableMcpOperation, type CapturedMcpOperation, type McpOperationPersistence, type RecoverableMcpOperation, } from "./mcp-operation-dispatch.js";
+export { assertMcpOperationObservationAuthority, observeMcpOperation, runMcpOperationObservationWithAuthority, type McpOperationObservationAuthority, type McpObservationBinding, type McpObservationReceipt, } from "./mcp-operation-observation.js";
 import { type SkillCatalogDescriptor } from "./skill-catalog.js";
 export { formatSkillCatalog, type SkillCatalogDescriptor } from "./skill-catalog.js";
 import { AttemptToolEnvironment, type AttemptToolAuthorization, type AttemptToolDefinition } from "@opengeni/codemode";
@@ -90,6 +93,8 @@ export type ResolveConnectionCredentialResult = {
     connectionId: string;
     authoritySource?: "host";
     authorizeProviderRequest?: () => Promise<boolean>;
+    /** Metadata-only immutable authority binding supplied by the trusted worker resolver. */
+    operationAuthorityDigest?: string;
     expiresAt?: Date | null;
 } | {
     status: "auth_needed";
@@ -707,6 +712,8 @@ export type ToolPreparationPhaseMeasurement = {
     durationSeconds: number;
 };
 export type PrepareToolsOptions = {
+    /** Opt-in exact-attempt persistence; absence preserves ordinary MCP execution. */
+    mcpOperationPersistence?: McpOperationPersistence;
     /** Live exact-owner control refresh; API remains read/observation authority. */
     refreshOwnedCommand?: (commandId: string) => Promise<boolean>;
     accountId?: string;

package/dist/index.js

@@ -30,6 +30,7 @@ import {
   MCP_LIFECYCLE_POLICIES,
   MCP_TOOL_CALL_OUTCOMES,
   MIN_COMPACTION_THRESHOLD_RATIO,
+  McpOperationOutcomeUnknownError,
   MultiProviderModelProvider,
   OPENGENI_INNER_MCP_CUSTOM_DATA_KEY,
   OPENGENI_MCP_RESULT_CUSTOM_DATA_KEY,
@@ -73,6 +74,7 @@ import {
   appendWorkspaceGovernance,
   appendWorkspaceMemory,
   applyMissingManifestEntries,
+  assertMcpOperationObservationAuthority,
   assertOpenSuffixResumable,
   azureCliLoginCommand,
   azureOpenAIDefaultQuery,
@@ -91,6 +93,7 @@ import {
   buildRemoteV2ReplacementHistory,
   buildSummaryItem,
   callModelInputFilterForSettings,
+  captureMcpOperationDispatch,
   clampCompactionThresholdRatio,
   codemodeTokenSeedCommand,
   compactMcpResultCustomDataRunState,
@@ -137,6 +140,7 @@ import {
   gitCredentialBindingHash,
   gitCredentialBindingTokenRefreshCommand,
   gitProviderTokenRefreshCommand,
+  hasActiveRecoverableMcpOperation,
   hasActiveWorkspaceInstructionPolicy,
   hasCanonicalEditableArtifactToolSurface,
   hasModelGeneratedItem,
@@ -174,6 +178,7 @@ import {
   normalizeSdkEvent,
   normalizeToolOutputForEvent,
   normalizeVercelGatewayRequestBody,
+  observeMcpOperation,
   oneShotGenesisTitleInputFilter,
   opaqueEncryptedContentLength,
   persistentAgentInstructionInspectionFor,
@@ -215,7 +220,9 @@ import {
   runAzureCliLoginHook,
   runBeforeAgentStartHooks,
   runCodemodeTokenSeedHook,
+  runMcpOperationObservationWithAuthority,
   runOwnedSandboxSetup,
+  runRecoverableMcpOperation,
   runRepositoryCloneHook,
   runRigSetupHook,
   runtimeSkillIndexForAgent,
@@ -247,7 +254,7 @@ import {
   workspaceEnvironmentInstructions,
   wrapAttemptToolDefinitions,
   wrapAttemptToolExecute
-} from "./chunk-GJC7H2FC.js";
+} from "./chunk-SD6MDONS.js";
 import {
   ActiveBackendUnresolvableError,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
@@ -361,6 +368,7 @@ import {
   buildTerminalServerScript,
   cancelSelfhostedOp,
   captureVerifiedWorkspaceArchive,
+  captureWorkspaceArchiveForStorage,
   classifyProviderSandboxFailure,
   clearRunCredentials,
   clearRunCredentialsForAttempt,
@@ -385,6 +393,7 @@ import {
   describeNativeSnapshotArchive,
   deserializeSandboxSessionStateEnvelope,
   desktopCapableBackend,
+  disposeWorkspaceArchive,
   dockerNetworkExposedPortEndpoint,
   drainingExhaustedError,
   drainingMessage,
@@ -517,8 +526,8 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   withoutSandboxProviderIdentity
-} from "./chunk-LGLJ5PVD.js";
-import "./chunk-CD22I76N.js";
+} from "./chunk-VVEGJPDR.js";
+import "./chunk-FHGLYLBL.js";
 import {
   SKILL_MAX_FILES,
   SKILL_MAX_FILE_BYTES,
@@ -543,7 +552,7 @@ import {
 } from "./chunk-JHM4OS7C.js";
 import {
   MaxTurnsExceededError
-} from "./chunk-25B3EQRW.js";
+} from "./chunk-UNICCRW5.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ActiveBackendUnresolvableError,
@@ -616,6 +625,7 @@ export {
   MIN_COMPACTION_THRESHOLD_RATIO,
   MODAL_EXEC_READINESS_TIMEOUT_MS,
   MaxTurnsExceededError,
+  McpOperationOutcomeUnknownError,
   MockAgentResponder,
   MultiProviderModelProvider,
   NEVER_SENT_DETAIL_KEY,
@@ -729,6 +739,7 @@ export {
   applyMissingManifestEntries,
   assertConsistentSandboxProviderIdentity,
   assertDescriptorRegistryInvariants,
+  assertMcpOperationObservationAuthority,
   assertOpenSuffixResumable,
   assertProviderRegistryInvariants,
   assertSafeRelPath,
@@ -758,7 +769,9 @@ export {
   buildTerminalServerScript,
   callModelInputFilterForSettings,
   cancelSelfhostedOp,
+  captureMcpOperationDispatch,
   captureVerifiedWorkspaceArchive,
+  captureWorkspaceArchiveForStorage,
   clampCompactionThresholdRatio,
   classifyProviderSandboxFailure,
   clearRunCredentials,
@@ -804,6 +817,7 @@ export {
   describeNativeSnapshotArchive,
   deserializeSandboxSessionStateEnvelope,
   desktopCapableBackend,
+  disposeWorkspaceArchive,
   dockerNetworkExposedPortEndpoint,
   drainingExhaustedError,
   drainingMessage,
@@ -846,6 +860,7 @@ export {
   gitCredentialBindingTokenRefreshCommand,
   gitProviderTokenRefreshCommand,
   gmailRestToolIsMutation,
+  hasActiveRecoverableMcpOperation,
   hasActiveWorkspaceInstructionPolicy,
   hasCanonicalEditableArtifactToolSurface,
   hasModelGeneratedItem,
@@ -916,6 +931,7 @@ export {
   normalizeSdkEvent,
   normalizeToolOutputForEvent,
   normalizeVercelGatewayRequestBody,
+  observeMcpOperation,
   offlineAgentError,
   offlineControlResponse,
   oneShotGenesisTitleInputFilter,
@@ -994,7 +1010,9 @@ export {
   runCodemodeTokenSeedHook,
   runCredentialPointerFile,
   runCredentialRoot,
+  runMcpOperationObservationWithAuthority,
   runOwnedSandboxSetup,
+  runRecoverableMcpOperation,
   runRepositoryCloneHook,
   runRigSetupHook,
   runStateCompatibilityProvider,

package/dist/{localSources-Z5IJIIRV.js → localSources-PVFCAPN2.js}

@@ -3,8 +3,8 @@ import {
   applyLocalSourceManifestToState,
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
-} from "./chunk-CD22I76N.js";
-import "./chunk-25B3EQRW.js";
+} from "./chunk-FHGLYLBL.js";
+import "./chunk-UNICCRW5.js";
 import "./chunk-PZ5AY32C.js";
 export {
   applyLocalSourceManifestEntryToState,
@@ -12,4 +12,4 @@ export {
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
 };
-//# sourceMappingURL=localSources-Z5IJIIRV.js.map
+//# sourceMappingURL=localSources-PVFCAPN2.js.map

package/dist/mcp-operation-dispatch.d.ts

@@ -0,0 +1,45 @@
+import type { AttemptToolResult } from "@opengeni/contracts";
+export type RecoverableMcpOperation = {
+    operationId: string;
+    sourceCallId?: string;
+    serverId: string;
+    originalTool: string;
+    observerTool: string;
+    destinationDigest: string;
+    argumentDigest: string;
+};
+export type CapturedMcpOperation = RecoverableMcpOperation & {
+    authorityDigest: string;
+};
+/** Worker-owned persistence. Its implementation must enforce canonical live
+ * attempt identity and store no arguments, URLs, headers, or credentials. */
+export type McpOperationPersistence = {
+    capture: (operation: CapturedMcpOperation) => Promise<"created" | "existing">;
+    settleOriginal: (input: {
+        operationId: string;
+        outcome: "completed";
+        result: AttemptToolResult;
+    } | {
+        operationId: string;
+        outcome: "outcome_unknown";
+    }) => Promise<void>;
+};
+/** Presence is an execution-routing fact, not authorization. A closed context
+ * remains visible to late callbacks so they still hit the dispatch fence. */
+export declare function hasActiveRecoverableMcpOperation(): boolean;
+export declare class McpOperationOutcomeUnknownError extends Error {
+    readonly operationId: string;
+    readonly code = "mcp_operation_outcome_unknown";
+    constructor(operationId: string, cause: unknown);
+}
+/** Establish trusted in-process correlation around one gateway execution. */
+export declare function runRecoverableMcpOperation(operation: RecoverableMcpOperation, persistence: McpOperationPersistence, execute: () => Promise<AttemptToolResult>): Promise<AttemptToolResult>;
+/** Called by the authorized broker immediately before the physical request.
+ * A second dispatch with the same identity is never an observation. */
+export declare function captureMcpOperationDispatch(input: {
+    operationId: string;
+    serverId: string;
+    toolName: string;
+    destinationDigest: string;
+    authorityDigest: string;
+}): Promise<void>;

package/dist/mcp-operation-observation.d.ts

@@ -0,0 +1,137 @@
+import { z } from "zod";
+export type McpOperationObservationAuthority = {
+    serverId: string;
+    observerTool: string;
+    destinationDigest: string;
+    authorityDigest: string;
+};
+/** Pin the actual broker request, not merely the earlier credential lookup. */
+export declare function runMcpOperationObservationWithAuthority<T>(binding: McpOperationObservationAuthority, execute: () => Promise<T>): Promise<T>;
+/** The caller is the credential broker, after live authorization and before
+ * physical tools/call dispatch. Unrelated ordinary calls remain unchanged. */
+export declare function assertMcpOperationObservationAuthority(actual: {
+    serverId: string;
+    toolName?: string;
+    destinationDigest: string;
+    authorityDigest?: string;
+}): void;
+declare const receiptSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    operationRef: z.ZodString;
+    fingerprint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"sha256">;
+        value: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodLiteral<"unknown">;
+}, z.core.$strict>, z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    operationRef: z.ZodString;
+    fingerprint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"sha256">;
+        value: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodLiteral<"pending">;
+    evidenceRevision: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    operationRef: z.ZodString;
+    fingerprint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"sha256">;
+        value: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodLiteral<"completed">;
+    receiptRevision: z.ZodString;
+    result: z.ZodObject<{
+        content: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"text">;
+            text: z.ZodString;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"image">;
+            data: z.ZodString;
+            mimeType: z.ZodString;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"audio">;
+            data: z.ZodString;
+            mimeType: z.ZodString;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"resource_link">;
+            name: z.ZodString;
+            title: z.ZodOptional<z.ZodString>;
+            uri: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            mimeType: z.ZodOptional<z.ZodString>;
+            size: z.ZodOptional<z.ZodNumber>;
+            icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                src: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                theme: z.ZodOptional<z.ZodEnum<{
+                    dark: "dark";
+                    light: "light";
+                }>>;
+            }, z.core.$strict>>>;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"resource">;
+            resource: z.ZodUnion<readonly [z.ZodObject<{
+                uri: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                text: z.ZodString;
+                _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            }, z.core.$loose>, z.ZodObject<{
+                uri: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                blob: z.ZodString;
+                _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            }, z.core.$loose>]>;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>], "type">>;
+        structuredContent: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        isError: z.ZodOptional<z.ZodBoolean>;
+        _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    }, z.core.$loose>;
+}, z.core.$strict>, z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    operationRef: z.ZodString;
+    fingerprint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"sha256">;
+        value: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodLiteral<"conflict">;
+}, z.core.$strict>], "status">;
+declare const bindingSchema: z.ZodObject<{
+    operationId: z.ZodString;
+    serverId: z.ZodString;
+    originalTool: z.ZodString;
+    observerTool: z.ZodString;
+    argumentDigest: z.ZodString;
+}, z.core.$strict>;
+export type McpObservationBinding = z.infer<typeof bindingSchema>;
+export type McpObservationReceipt = z.infer<typeof receiptSchema>;
+/**
+ * One observation, never a mutation retry. This helper is deliberately not an
+ * authority resolver or a scheduler: its caller must load an immutable trusted
+ * binding and bind callObserver to that exact authorized provider destination.
+ * Tool annotations and model-supplied arguments cannot establish that trust.
+ *
+ * Durable settlement must additionally recheck authority under its own locks.
+ * A successful return alone is not a durable delivery or commit receipt.
+ */
+export declare function observeMcpOperation(input: {
+    binding: McpObservationBinding;
+    authorize: (phase: "before_request" | "before_delivery") => Promise<boolean>;
+    callObserver: (tool: string, args: Record<string, unknown>) => Promise<unknown>;
+}): Promise<McpObservationReceipt>;
+export {};

package/dist/sandbox/archive-spool.d.ts

@@ -0,0 +1,14 @@
+import type { TarWorkspaceArchiveDescriptor } from "@opengeni/contracts";
+/** Process-owned, reopenable archive bytes. Never persisted as a local path. */
+export type WorkspaceArchiveSpool = {
+    path: string;
+    byteSize: number;
+    sha256: string;
+    open: () => AsyncIterable<Uint8Array>;
+    dispose: () => Promise<void>;
+};
+export type VerifiedHostWorkspaceArchive = {
+    kind: "host_spool";
+    spool: WorkspaceArchiveSpool;
+    descriptor: TarWorkspaceArchiveDescriptor;
+};

package/dist/sandbox/host-archive-spool.d.ts

@@ -0,0 +1,19 @@
+import type { WorkspaceTreeFingerprint } from "@opengeni/contracts";
+import type { WorkspaceArchiveSpool } from "./archive-spool.js";
+/** Matches SDK 0.14.3 resolveSandboxArchiveLimits: absent/null means unlimited;
+ * an explicit object fills undefined fields with SDK defaults, null disables a field.
+ * chunkBytes controls buffering, never the amount of input accepted. */
+export type HostWorkspaceArchiveOptions = {
+    chunkBytes?: number;
+    archiveLimits?: {
+        maxInputBytes?: number | null;
+        maxExtractedBytes?: number | null;
+        maxMembers?: number | null;
+    } | null;
+};
+export declare function fingerprintHostWorkspace(root: string, excludedPaths: readonly string[]): Promise<WorkspaceTreeFingerprint>;
+export declare function captureHostWorkspaceArchive(root: string, excludedPaths: readonly string[]): Promise<{
+    spool: WorkspaceArchiveSpool;
+    workspace: WorkspaceTreeFingerprint;
+}>;
+export declare function restoreHostWorkspaceArchive(root: string, spool: WorkspaceArchiveSpool, options?: HostWorkspaceArchiveOptions): Promise<void>;

package/dist/sandbox/index.d.ts

@@ -1,6 +1,9 @@
 export type { ProviderCommandPersistence, ProviderCommandSession, } from "./provider-command-session.js";
 import type { Settings } from "@opengeni/config";
-import { type SandboxBackend, type SandboxProviderContinuityRecovery } from "@opengeni/contracts";
+export type { WorkspaceArchiveSpool, VerifiedHostWorkspaceArchive } from "./archive-spool.js";
+import type { WorkspaceArchiveSpool } from "./archive-spool.js";
+export { captureWorkspaceArchiveForStorage, disposeWorkspaceArchive, type VerifiedWorkspaceArchivePayload, } from "./workspace-archive.js";
+import { type WorkspaceArchiveObjectRef, type SandboxBackend, type SandboxProviderContinuityRecovery } from "@opengeni/contracts";
 import type { SandboxClient, SandboxSessionState } from "@openai/agents/sandbox";
 import { type WorkspaceArchiveDescriptor } from "./workspace-archive.js";
 import type { RuntimeMetricsHooks } from "../metrics.js";
@@ -202,6 +205,7 @@ export declare function withoutSandboxProviderIdentity(envelope: Record<string,
 export declare function establishSandboxSessionFromEnvelope(settings: Settings, envelope: Record<string, unknown> | null, opts: {
     sessionId: string;
     recovery: "create-or-restore" | "resume-only";
+    loadHostWorkspaceArchive?: (ref: WorkspaceArchiveObjectRef) => Promise<WorkspaceArchiveSpool>;
     backendOverride?: SandboxBackend;
     environment?: Record<string, string>;
     onSandboxCreated?: SandboxCreatedCallback;

package/dist/sandbox/index.js

@@ -110,6 +110,7 @@ import {
   buildTerminalServerScript,
   cancelSelfhostedOp,
   captureVerifiedWorkspaceArchive,
+  captureWorkspaceArchiveForStorage,
   classifyProviderSandboxFailure,
   clearRunCredentials,
   clearRunCredentialsForAttempt,
@@ -134,6 +135,7 @@ import {
   describeNativeSnapshotArchive,
   deserializeSandboxSessionStateEnvelope,
   desktopCapableBackend,
+  disposeWorkspaceArchive,
   dockerNetworkExposedPortEndpoint,
   drainingExhaustedError,
   drainingMessage,
@@ -265,9 +267,9 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   withoutSandboxProviderIdentity
-} from "../chunk-LGLJ5PVD.js";
-import "../chunk-CD22I76N.js";
-import "../chunk-25B3EQRW.js";
+} from "../chunk-VVEGJPDR.js";
+import "../chunk-FHGLYLBL.js";
+import "../chunk-UNICCRW5.js";
 import "../chunk-PZ5AY32C.js";
 export {
   ActiveBackendUnresolvableError,
@@ -381,6 +383,7 @@ export {
   buildTerminalServerScript,
   cancelSelfhostedOp,
   captureVerifiedWorkspaceArchive,
+  captureWorkspaceArchiveForStorage,
   classifyProviderSandboxFailure,
   clearRunCredentials,
   clearRunCredentialsForAttempt,
@@ -405,6 +408,7 @@ export {
   describeNativeSnapshotArchive,
   deserializeSandboxSessionStateEnvelope,
   desktopCapableBackend,
+  disposeWorkspaceArchive,
   dockerNetworkExposedPortEndpoint,
   drainingExhaustedError,
   drainingMessage,

package/dist/sandbox/workspace-archive.d.ts

@@ -1,4 +1,5 @@
 import { type NativeSnapshotDescriptor, type NativeSnapshotRef, type WorkspaceArchiveDescriptor, type WorkspaceTreeFingerprint } from "@opengeni/contracts";
+import type { VerifiedHostWorkspaceArchive } from "./archive-spool.js";
 export { WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION, decodeNativeSnapshotRef, encodeNativeSnapshotRef, parseWorkspaceArchiveDescriptor, type NativeSnapshotDescriptor, type NativeSnapshotProvider, type NativeSnapshotRef, type TarWorkspaceArchiveDescriptor, type WorkspaceArchiveDescriptor, type WorkspaceTreeFingerprint, } from "@opengeni/contracts";
 export type VerifiedWorkspaceArchive = {
     bytes: Uint8Array;
@@ -7,6 +8,12 @@ export type VerifiedWorkspaceArchive = {
     kind: "tar" | "provider_snapshot";
     nativeSnapshot?: NativeSnapshotRef;
 };
+export type VerifiedWorkspaceArchivePayload = VerifiedWorkspaceArchive | VerifiedHostWorkspaceArchive;
+/** Host-backed portable archives can go directly to object storage without an
+ * intermediate whole-document string or buffer. Existing inline/provider APIs
+ * retain their compatibility path when disk-backed publication is unavailable. */
+export declare function captureWorkspaceArchiveForStorage(session: unknown, capturedAtMs: number, options: WorkspaceArchiveCaptureOptions, objectStorageAvailable: boolean): Promise<VerifiedWorkspaceArchivePayload>;
+export declare function disposeWorkspaceArchive(archive: VerifiedWorkspaceArchivePayload | undefined): Promise<void>;
 export type WorkspaceArchiveIntegrityCode = "archive_metadata_missing" | "archive_metadata_invalid" | "archive_base64_invalid" | "archive_hash_mismatch" | "archive_hydration_failed" | "workspace_fingerprint_unavailable" | "workspace_changed_during_capture" | "workspace_fingerprint_mismatch" | "native_snapshot_reference_invalid" | "native_snapshot_fallback_unverified";
 export declare class WorkspaceArchiveIntegrityError extends Error {
     readonly code: WorkspaceArchiveIntegrityCode;

package/dist/workspace-tool-gateway.js

@@ -1,12 +1,12 @@
 import {
   prepareAgentTools
-} from "./chunk-GJC7H2FC.js";
-import "./chunk-LGLJ5PVD.js";
-import "./chunk-CD22I76N.js";
+} from "./chunk-SD6MDONS.js";
+import "./chunk-VVEGJPDR.js";
+import "./chunk-FHGLYLBL.js";
 import "./chunk-GB763TSV.js";
 import "./chunk-UZ66CGC2.js";
 import "./chunk-JHM4OS7C.js";
-import "./chunk-25B3EQRW.js";
+import "./chunk-UNICCRW5.js";
 import "./chunk-PZ5AY32C.js";
 export {
   prepareAgentTools as prepareWorkspaceToolGatewayTools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/runtime",
-  "version": "2.5.2",
+  "version": "2.5.3-canary.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -62,16 +62,16 @@
     "@openai/agents": "0.14.3",
     "@openai/agents-core": "0.14.3",
     "@openai/agents-extensions": "0.14.3",
-    "@opengeni/agent-proto": "^0.5.1",
-    "@opengeni/capabilities": "^0.3.3",
-    "@opengeni/codemode": "^0.5.5",
-    "@opengeni/codex": "^0.2.22",
-    "@opengeni/config": "^1.1.1",
-    "@opengeni/contracts": "^3.0.1",
-    "@opengeni/network": "^0.3.1",
-    "@opengeni/sdk": "^5.0.3",
-    "@opengeni/tool-gateway": "^0.1.6",
-    "@opengeni/xai-subscription": "^0.1.4",
+    "@opengeni/agent-proto": "^0.5.1-canary.26",
+    "@opengeni/capabilities": "^0.3.3-canary.8",
+    "@opengeni/codemode": "^0.5.6-canary.0",
+    "@opengeni/codex": "^0.2.22-canary.8",
+    "@opengeni/config": "^1.1.2-canary.0",
+    "@opengeni/contracts": "^3.0.2-canary.0",
+    "@opengeni/network": "^0.3.1-canary.8",
+    "@opengeni/sdk": "^5.0.5-canary.0",
+    "@opengeni/tool-gateway": "^0.1.7-canary.0",
+    "@opengeni/xai-subscription": "^0.1.4-canary.8",
     "debug": "4.4.3",
     "modal": "0.9.0",
     "openai": "6.47.0",