@opengeni/runtime 3.0.1 → 4.0.0

package/src/bundled_management_skills/opengeni-skills/SKILL.md

@@ -1,13 +1,22 @@
 ---
 name: opengeni-skills
-description: Find, install, create, and edit workspace Skills; understand reading, file changes, Agent learning settings, and optional sandbox checkout.
+description: Find, install, create, edit, and permanently remove Skills; understand reading, file changes, Agent learning settings, and optional sandbox checkout.
 ---
 
 # Managing Skills
 
 A Skill is a folder containing `SKILL.md` and supporting UTF-8 text files.
-Use Skills for reusable instructions and procedures. Use Knowledge for facts and
-outcomes, and workspace instructions for short always-on rules.
+Use Skills for reusable procedures and context-specific or personal behavioral
+preferences. Use workspace instructions for short always-on rules within their
+authorized scope. A request to remember how to behave belongs in one of those
+destinations, not Knowledge, even when phrased as "the user prefers concise replies."
+Knowledge holds facts and outcomes for retrieval, not standing behavior.
+
+Make the Skill description state when it applies: only that descriptor enters
+the prompt index; the agent reads the full instructions with `skill_read` when
+relevant. Do not promise that the full Skill body is always in the prompt.
+For mixed requests, keep the short rule in workspace instructions and the detailed
+procedure in a Skill. Do not duplicate either as a Knowledge entry.
 
 ## Read
 
@@ -79,11 +88,32 @@ change; Review first saves an inactive revision and the task continues; Off
 prevents agent authoring. Existing Skills remain readable and usable, and an
 authorized human can still manage or install Skills in the UI. Do not change
 settings or infer an override from “the user asked.” Report the actual receipt.
+Do not widen a personal preference into a workspace-wide rule. If the intended
+scope is unavailable, explain the limitation. Do not fall back to Knowledge or
+another destination to bypass learning settings, review, scope or size limits.
 
 Saved history supports restoration. Upstream updates must preserve workspace
 customizations; report an available update instead of replacing customized
 content silently. Platform-owned built-in Skills are not workspace-editable.
 
+## Permanently remove
+
+Discover `skill_remove` when a Skill and all its stored revisions should be
+permanently deleted. This is irreversible, not an uninstall or recoverable hide.
+Read the exact saved Skill first and supply its UUID, current active revision
+(null for an inactive head), scope version, reason and a fresh operation UUID.
+Reuse that operation UUID and the exact arguments after an uncertain result;
+never change the arguments merely to get past a stale-write error.
+
+The same Skills Learning setting and personal/workspace authority as `skill_save`
+apply. Automatic deletes; Review first retains an explicitly labeled deletion
+proposal in Knowledge > Needs review; Off refuses. Report the actual receipt:
+pending does not mean removed. Built-in, repository and inline session Skills
+cannot be removed through this tool. Another distribution owner's Skill is
+refused until that owner is released; do not bypass this protection. Conversations
+and their historical context remain unchanged. Shared upstream source packages
+are not erased by deleting a workspace's Skill.
+
 Do not encode binary files as text to bypass the text-only boundary. Unsupported
 files and size limits are explicit errors, not permission to drop files silently.
 ## Nonblocking review

package/src/codex-tool-search.ts

@@ -15,11 +15,17 @@ const MCP_TOOL_NAME_SEPARATOR = "__";
 const NO_MCP_SERVER_IDS: ReadonlySet<string> = new Set();
 
 /** Return the authorized server id for a runtime MCP function tool name. */
-function mcpServerIdForTool(tool: unknown, mcpServerIds: ReadonlySet<string>): string | null {
+function mcpServerIdForTool(
+  tool: unknown,
+  mcpServerIds: ReadonlySet<string>,
+  modelServerIds?: ReadonlyMap<string, string>,
+): string | null {
   if (!tool || typeof tool !== "object") return null;
   if ((tool as { type?: unknown }).type !== "function") return null;
   const name = (tool as { name?: unknown }).name;
   if (typeof name !== "string") return null;
+  const exact = modelServerIds?.get(name);
+  if (exact !== undefined) return mcpServerIds.has(exact) ? exact : null;
   let match: string | null = null;
   for (const serverId of mcpServerIds) {
     if (
@@ -41,15 +47,17 @@ function mcpServerIdForTool(tool: unknown, mcpServerIds: ReadonlySet<string>): s
  * server is an authority decision; it does not make every schema from that
  * server eager. Per-turn eager identities are removed from this searchable
  * pool by the runtime before provider projection.
- * The prefix is the same runtime namespace used by PrefixedMcpServer; this
- * intentionally does not inspect the global registry, connection metadata, or
- * credentials, so search cannot widen the already-authorized tool set.
+ * Prepared servers supply their exact bounded-model-name map. Prefix lookup is
+ * only the legacy embedded-server fallback. Neither path inspects the global
+ * registry, connection metadata, or credentials, and both intersect the
+ * already-authorized server set.
  */
 export function isSearchableMcpFunctionTool(
   tool: unknown,
   mcpServerIds: ReadonlySet<string> = NO_MCP_SERVER_IDS,
+  modelServerIds?: ReadonlyMap<string, string>,
 ): tool is Tool & { name: string; deferLoading?: boolean } {
-  const serverId = mcpServerIdForTool(tool, mcpServerIds);
+  const serverId = mcpServerIdForTool(tool, mcpServerIds, modelServerIds);
   return serverId !== null;
 }
 

package/src/context-compaction.ts

@@ -22,10 +22,18 @@ import {
   FileResourceRef,
   MODEL_ATTACHMENT_CATALOG_MARKER,
   MODEL_ATTACHMENT_REFS_FIELD,
+  latestSkillCatalogContext,
+  readSkillCatalogContext,
 } from "@opengeni/contracts";
 import { createHash } from "node:crypto";
 import { isProxy } from "node:util/types";
 
+import {
+  latestReasoningConfiguration,
+  reasoningConfigurationItem,
+  readReasoningConfiguration,
+} from "@opengeni/codex";
+
 export type CompactionItem = Record<string, unknown>;
 
 /**
@@ -1253,24 +1261,90 @@ export class CompactionProviderResponseError extends Error {
   readonly status?: number;
   readonly code?: string;
   readonly type?: string;
+  /** Provider-named request field that was rejected (`error.param`), bounded. */
+  readonly param?: string;
   override readonly cause?: unknown;
 
   constructor(diagnostics: Record<string, unknown> = {}, cause?: unknown) {
     const compact = JSON.stringify(diagnostics).slice(0, 2_000);
+    const rejection = compactionProviderRejectionFromDiagnostics(diagnostics);
     super(
-      `Compaction provider request failed; active history was preserved${compact ? ` (${compact})` : ""}`,
+      `${
+        rejection
+          ? `Compaction provider request was rejected (${describeCompactionProviderRejection(rejection)})`
+          : "Compaction provider request failed"
+      }; active history was preserved${compact ? ` (${compact})` : ""}`,
     );
     this.name = "CompactionProviderResponseError";
     this.diagnostics = diagnostics;
     if (typeof diagnostics.httpStatus === "number") this.status = diagnostics.httpStatus;
     if (typeof diagnostics.code === "string") this.code = diagnostics.code;
     if (typeof diagnostics.type === "string") this.type = diagnostics.type;
+    if (typeof diagnostics.param === "string") this.param = diagnostics.param;
     if (cause !== undefined) {
       Object.defineProperty(this, "cause", { value: cause, enumerable: false });
     }
   }
 }
 
+/**
+ * Closed, content-free description of a definitive provider rejection of the
+ * compaction request. Every field is a bounded provider-owned identifier
+ * (status, error type/code, rejected parameter path, request id); the provider
+ * message is never carried because it can quote conversation input.
+ */
+export type CompactionProviderRejection = {
+  httpStatus: number;
+  type: string | null;
+  code: string | null;
+  param: string | null;
+  requestId: string | null;
+};
+
+/**
+ * HTTP statuses that prove the provider parsed and refused the exact request.
+ * Repeating the same request cannot succeed; only changed input can.
+ */
+const DEFINITIVE_PROVIDER_REJECTION_STATUSES = new Set([400, 413, 422]);
+
+export function compactionProviderRejectionFromDiagnostics(
+  diagnostics: Record<string, unknown>,
+): CompactionProviderRejection | null {
+  const httpStatus = diagnostics.httpStatus;
+  if (typeof httpStatus !== "number" || !DEFINITIVE_PROVIDER_REJECTION_STATUSES.has(httpStatus)) {
+    return null;
+  }
+  const text = (value: unknown): string | null =>
+    typeof value === "string" && value.length > 0 ? value : null;
+  return {
+    httpStatus,
+    type: text(diagnostics.type),
+    code: text(diagnostics.code),
+    param: text(diagnostics.param),
+    requestId: text(diagnostics.requestId),
+  };
+}
+
+export function compactionProviderRejection(error: unknown): CompactionProviderRejection | null {
+  return error instanceof CompactionProviderResponseError
+    ? compactionProviderRejectionFromDiagnostics(error.diagnostics)
+    : null;
+}
+
+/** Human-readable, content-free summary such as `HTTP 400 invalid_request_error; param input[3].encrypted_content`. */
+export function describeCompactionProviderRejection(
+  rejection: CompactionProviderRejection,
+): string {
+  const parts = [
+    `HTTP ${rejection.httpStatus}${rejection.type ? ` ${rejection.type}` : ""}${
+      rejection.code ? ` ${rejection.code}` : ""
+    }`,
+  ];
+  if (rejection.param) parts.push(`param ${rejection.param}`);
+  if (rejection.requestId) parts.push(`request ${rejection.requestId}`);
+  return parts.join("; ");
+}
+
 export function findCompactionNeededError(
   error: unknown,
   seen = new WeakSet<object>(),
@@ -1556,10 +1630,13 @@ export function buildCompactionReplacementHistory(
     }
     remaining -= textTokens + nonTextTokens;
   }
-  const history = retainedReversed.reverse();
+  const currentCatalog = latestSkillCatalogContext(items);
+  const history = [...(currentCatalog ? [currentCatalog] : []), ...retainedReversed.reverse()];
   const attachmentCatalog = buildAttachmentCatalogItem(items, history);
   if (attachmentCatalog) history.push(attachmentCatalog);
   history.push(buildSummaryItem(summaryBody));
+  const reasoning = latestReasoningConfiguration(items);
+  if (reasoning) history.push(reasoningConfigurationItem(reasoning));
   return history;
 }
 
@@ -1603,6 +1680,7 @@ export function buildRemoteV2ReplacementHistory(
   let remaining = REMOTE_V2_RETAINED_MESSAGE_TOKEN_BUDGET;
   for (let index = items.length - 1; index >= 0 && remaining > 0; index -= 1) {
     const item = items[index]!;
+    if (readSkillCatalogContext(item) !== null) continue;
     if (!isRetainedRemoteV2Message(item)) continue;
     const textTokens = estimateTextTokens(messageText(item));
     const chargeTokens = Math.max(1, retainedItemTokens(item));
@@ -1617,7 +1695,8 @@ export function buildRemoteV2ReplacementHistory(
     remaining = 0;
     break;
   }
-  const history = retainedReversed.reverse();
+  const currentCatalog = latestSkillCatalogContext(items);
+  const history = [...(currentCatalog ? [currentCatalog] : []), ...retainedReversed.reverse()];
   const attachmentCatalog = buildAttachmentCatalogItem(items, history);
   if (attachmentCatalog) history.push(attachmentCatalog);
   history.push({
@@ -1625,6 +1704,8 @@ export function buildRemoteV2ReplacementHistory(
     encrypted_content: compactionItem.encrypted_content,
     ...(typeof compactionItem.summary === "string" ? { summary: compactionItem.summary } : {}),
   });
+  const reasoning = latestReasoningConfiguration(items);
+  if (reasoning) history.push(reasoningConfigurationItem(reasoning));
   return history;
 }
 
@@ -1734,7 +1815,9 @@ export function latestCompactionReplacementFingerprint(
 ): string | null {
   for (let index = items.length - 1; index >= 0; index -= 1) {
     if (isCompactionSummary(items[index])) {
-      return compactionReplacementFingerprint(items.slice(0, index + 1));
+      const end =
+        items[index + 1] && readReasoningConfiguration(items[index + 1]!) ? index + 2 : index + 1;
+      return compactionReplacementFingerprint(items.slice(0, end));
     }
   }
   return null;

package/src/gmail-rest-mcp.ts

@@ -329,8 +329,7 @@ export function isOfficialGmailMcpConfig(
   return (
     canonicalUrl(url) === canonicalUrl(OFFICIAL_GMAIL_MCP_URL) &&
     connectionRef?.providerDomain.toLowerCase() === "gmailmcp.googleapis.com" &&
-    connectionRef.kind === "oauth2" &&
-    connectionRef.subjectScope === "subject"
+    connectionRef.kind === "oauth2"
   );
 }