@opengeni/runtime 3.2.2 → 3.4.0

package/dist/{chunk-YG26XE7B.js → chunk-JYDG2A7H.js}

@@ -16,7 +16,7 @@ import {
   randomUUID,
   relativePosixPathWithinRoot,
   shellQuote
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // ../../node_modules/.bun/@openai+agents-core@0.14.3+933c5e7db4cd33c2/node_modules/@openai/agents-core/dist/sandbox/shared/output.mjs
 var APPROX_BYTES_PER_TOKEN = 4;
@@ -1231,4 +1231,4 @@ export {
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
 };
-//# sourceMappingURL=chunk-YG26XE7B.js.map
+//# sourceMappingURL=chunk-JYDG2A7H.js.map

package/dist/{chunk-RSHQSLEJ.js → chunk-KIL4FGX5.js}

@@ -1,9 +1,9 @@
 import {
   connectorAttachmentFileName
-} from "./chunk-Z5U6WE22.js";
+} from "./chunk-PRZPGRIK.js";
 import {
   isRoutingMutationOutcomeUnknownError
-} from "./chunk-5WJOPANS.js";
+} from "./chunk-Y5THZH5N.js";
 
 // src/slack-rest-mcp.ts
 import {
@@ -597,4 +597,4 @@ export {
   SLACK_REST_API_BASE2 as SLACK_REST_API_BASE,
   SLACK_REST_MCP_TOOLS
 };
-//# sourceMappingURL=chunk-RSHQSLEJ.js.map
+//# sourceMappingURL=chunk-KIL4FGX5.js.map

package/dist/{chunk-NWS4HPB7.js → chunk-MIAL5I4O.js}

@@ -3,7 +3,7 @@ import {
   UserError,
   cloneManifest,
   isRecord
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // ../../node_modules/.bun/@openai+agents-core@0.14.3+933c5e7db4cd33c2/node_modules/@openai/agents-core/dist/sandbox/client.mjs
 var DEFAULT_SANDBOX_ARCHIVE_LIMITS = {
@@ -91,4 +91,4 @@ export {
   NoopSnapshotSpec,
   isNoopSnapshotSpec
 };
-//# sourceMappingURL=chunk-NWS4HPB7.js.map
+//# sourceMappingURL=chunk-MIAL5I4O.js.map

package/dist/{chunk-Z5U6WE22.js → chunk-PRZPGRIK.js}

@@ -1,7 +1,7 @@
 import {
   isRoutingMutationOutcomeUnknownError,
   isRoutingMutationOutputRejectedError
-} from "./chunk-5WJOPANS.js";
+} from "./chunk-Y5THZH5N.js";
 import {
   assertMcpPayloadWithinBytes
 } from "./chunk-LJNCGUMB.js";
@@ -164,4 +164,4 @@ export {
   connectorAttachmentSandboxPath,
   projectConnectorAttachmentTransfers
 };
-//# sourceMappingURL=chunk-Z5U6WE22.js.map
+//# sourceMappingURL=chunk-PRZPGRIK.js.map

package/dist/{chunk-KCPW4K7L.js → chunk-PZQUUBEB.js}

@@ -9,7 +9,7 @@ import {
   logToolActionError,
   logger,
   randomUUID
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // ../../node_modules/.bun/@openai+agents-core@0.14.3+933c5e7db4cd33c2/node_modules/@openai/agents-core/dist/mcpServers.mjs
 var DEFAULT_CONNECT_TIMEOUT_MS = 1e4;
@@ -828,4 +828,4 @@ export {
   connectMcpServers,
   MemorySession
 };
-//# sourceMappingURL=chunk-KCPW4K7L.js.map
+//# sourceMappingURL=chunk-PZQUUBEB.js.map

package/dist/{chunk-5WJOPANS.js → chunk-Y5THZH5N.js}

@@ -26,17 +26,17 @@ import {
   truncateOutput,
   validateCredentialPair,
   validateRemoteSandboxPathForManifest
-} from "./chunk-YG26XE7B.js";
+} from "./chunk-JYDG2A7H.js";
 import {
   isNoopSnapshotSpec,
   normalizeSandboxClientCreateArgs,
   resolveSandboxArchiveLimits,
   validateSandboxArchiveLimits
-} from "./chunk-NWS4HPB7.js";
+} from "./chunk-MIAL5I4O.js";
 import {
   isSandboxPathNotFoundError,
   probeSandboxPathExists
-} from "./chunk-HJSIPTFA.js";
+} from "./chunk-4XDJ4TJA.js";
 import {
   Environment,
   FileMode,
@@ -94,7 +94,7 @@ import {
   shellQuote,
   stableJsonStringify,
   withSandboxSpan
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // src/sandbox/selfhosted/control-rpc.ts
 import { ControlRequest as ControlRequest2, ControlResponse, ErrorCode } from "@opengeni/agent-proto";
@@ -15086,7 +15086,7 @@ var CloudflareSandboxSession = class {
   async materializeEntry(args) {
     assertSandboxEntryMetadataSupported("CloudflareSandboxClient", args.path, args.entry, MOUNT_MANIFEST_METADATA_SUPPORT);
     if (entryContainsLocalSource(args.entry)) {
-      const { applyLocalSourceManifestEntryToState: applyLocalSourceManifestEntryToState2 } = await import("./localSources-SSIEH5F5.js");
+      const { applyLocalSourceManifestEntryToState: applyLocalSourceManifestEntryToState2 } = await import("./localSources-I6SIQ6CX.js");
       await applyLocalSourceManifestEntryToState2(this.state, args.path, args.entry, "cloudflare", this.writer(), this.remotePathResolver, this.manifestMaterializationOptions(args.runAs));
       return;
     }
@@ -15097,7 +15097,7 @@ var CloudflareSandboxSession = class {
     assertSandboxManifestMetadataSupported("CloudflareSandboxClient", manifest, MOUNT_MANIFEST_METADATA_SUPPORT);
     assertCloudflareManifestMountsSupported(manifest);
     if (manifestContainsLocalSource(manifest)) {
-      const { applyLocalSourceManifestToState: applyLocalSourceManifestToState2 } = await import("./localSources-SSIEH5F5.js");
+      const { applyLocalSourceManifestToState: applyLocalSourceManifestToState2 } = await import("./localSources-I6SIQ6CX.js");
       await applyLocalSourceManifestToState2(this.state, manifest, "cloudflare", this.writer(), this.remotePathResolver, this.manifestMaterializationOptions(runAs));
       return;
     }
@@ -26127,4 +26127,4 @@ export {
   renderRoutingMutationOutcomeUnknownToolResult,
   RoutingSandboxSession
 };
-//# sourceMappingURL=chunk-5WJOPANS.js.map
+//# sourceMappingURL=chunk-Y5THZH5N.js.map

package/dist/codex-tool-search.d.ts

@@ -29,6 +29,15 @@ export declare const HARNESS_CONTROL_MCP_SERVER_ID = "opengeni";
 export declare const HARNESS_CONTROL_FIRST_PARTY_TOOLS: readonly ["goal_set", "goal_update", "goal_complete", "goal_pause", "goal_resume", "command_read", "command_wait", "wait_for_input"];
 /** True for an exact harness control tool name on the first-party server. */
 export declare function isHarnessControlMcpToolName(registryId: string, modelName: string): boolean;
+/** True when a prepared function tool is an interaction family's entry tool. */
+export declare function isInteractionEntryFunctionTool(tool: unknown, mcpServerIds?: ReadonlySet<string>, modelServerIds?: ReadonlyMap<string, string>): boolean;
+/** True when a model tool name is an interaction family's entry tool. */
+export declare function isInteractionEntryToolName(name: string): boolean;
+/**
+ * The companions an entry tool discloses once it is called: the rest of its
+ * family that is still searchable, within the same byte budgets as a search.
+ */
+export declare function interactionEntryCompanions(entryName: string, searchable: Tool[]): Tool[];
 /**
  * True when a prepared MCP function tool is one of the harness control tools
  * served by the authorized first-party `opengeni` server. These stay in the

package/dist/gmail-rest-mcp.js

@@ -11,15 +11,15 @@ import {
   gmailToolAvailableOnDeployment,
   gmailToolSupportsScopes,
   isOfficialGmailMcpConfig
-} from "./chunk-XQ23VCZ4.js";
-import "./chunk-Z5U6WE22.js";
-import "./chunk-5WJOPANS.js";
+} from "./chunk-6FQ6KEII.js";
+import "./chunk-PRZPGRIK.js";
+import "./chunk-Y5THZH5N.js";
 import "./chunk-4A4XTKKX.js";
-import "./chunk-YG26XE7B.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
-import "./chunk-KCPW4K7L.js";
-import "./chunk-7LJ7KDPI.js";
+import "./chunk-JYDG2A7H.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
+import "./chunk-PZQUUBEB.js";
+import "./chunk-ERD4ICVB.js";
 import "./chunk-LJNCGUMB.js";
 import "./chunk-PLDDJCW6.js";
 export {

package/dist/index.d.ts

@@ -708,6 +708,9 @@ export declare function buildOpenGeniAgent(settings: Settings, resources: Resour
  * or writes those rules must derive the identity through this function.
  */
 export declare function sessionMcpApprovalConnectionId(serverId: string, url: string): string;
+/** Why interaction_request_human arguments cannot be recorded as an
+ * intervention, in words the model can act on, or null when they can. */
+export declare function interactionRequestArgumentsProblem(serialized: string): string | null;
 /**
  * Codex and reviewed Responses-compatible Gateway routes accept ordinary
  * FUNCTION tools plus `input_image` content inside a function_call_output. The

package/dist/index.js

@@ -99,6 +99,7 @@ import {
   identityFromLegacyTemplate,
   incrementalModelInputProjectionFilter,
   inspectPersistentAgentInstructions,
+  interactionRequestArgumentsProblem,
   interactionToolErrorOutput,
   interruptionKindForCallItem,
   invokePreparedAgentTool,
@@ -187,7 +188,7 @@ import {
   workspaceEnvironmentInstructions,
   wrapAttemptToolDefinitions,
   wrapAttemptToolExecute
-} from "./chunk-2AUDDDO2.js";
+} from "./chunk-3DFH3ZHU.js";
 import {
   ActiveBackendUnresolvableError,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
@@ -403,7 +404,7 @@ import {
   withRunCredentialsSession,
   withoutSandboxProviderIdentity,
   workspaceArchiveDownloadTemporaryDirectory
-} from "./chunk-462CH77G.js";
+} from "./chunk-ETTCGPBT.js";
 import {
   SKILL_MAX_FILES,
   SKILL_MAX_FILE_BYTES,
@@ -558,7 +559,7 @@ import {
   toolCallIdFromSdkItem,
   vercelGatewayRoutingFetch,
   withClaudeUsageObserver
-} from "./chunk-7OUG7WBV.js";
+} from "./chunk-GWRBALGQ.js";
 import {
   UnsupportedProtocolJsonValueError,
   normalizeProtocolJsonValue
@@ -572,7 +573,7 @@ import {
   gmailToolAvailableOnDeployment,
   gmailToolSupportsScopes,
   isOfficialGmailMcpConfig
-} from "./chunk-XQ23VCZ4.js";
+} from "./chunk-6FQ6KEII.js";
 import {
   OFFICIAL_SLACK_MCP_URL,
   SLACK_REST_API_BASE,
@@ -580,14 +581,14 @@ import {
   SlackRestMcpServer,
   isOfficialSlackMcpConfig,
   slackRestToolIsMutation
-} from "./chunk-RSHQSLEJ.js";
+} from "./chunk-KIL4FGX5.js";
 import {
   CONNECTOR_ATTACHMENT_PROVIDER_RESULT_MAX_BYTES,
   CONNECTOR_ATTACHMENT_SANITIZED_RESULT_MAX_BYTES,
   ConnectorAttachmentTransferError,
   connectorAttachmentSandboxPath,
   projectConnectorAttachmentTransfers
-} from "./chunk-Z5U6WE22.js";
+} from "./chunk-PRZPGRIK.js";
 import {
   CODE_SEARCH_RG_MAX_BYTES,
   ChannelAConflictError,
@@ -684,15 +685,15 @@ import {
   validateCodeSearchRipgrepArgs,
   withModalCommandStartSignal,
   withRoutingMutationOutputRejectionFence
-} from "./chunk-5WJOPANS.js";
+} from "./chunk-Y5THZH5N.js";
 import "./chunk-4A4XTKKX.js";
-import "./chunk-YG26XE7B.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
-import "./chunk-KCPW4K7L.js";
+import "./chunk-JYDG2A7H.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
+import "./chunk-PZQUUBEB.js";
 import {
   MaxTurnsExceededError
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 import "./chunk-LJNCGUMB.js";
 import "./chunk-PLDDJCW6.js";
 export {
@@ -1084,6 +1085,7 @@ export {
   inspectModalSandboxLifecycle,
   inspectPersistentAgentInstructions,
   inspectRecordingArtifact,
+  interactionRequestArgumentsProblem,
   interactionToolErrorOutput,
   interruptionKindForCallItem,
   invokePreparedAgentTool,

package/dist/interaction-tool-json-schema.d.ts

@@ -0,0 +1,27 @@
+import type { AttemptToolJsonSchema } from "@opengeni/contracts";
+import { z } from "zod";
+/**
+ * The JSON Schema an interaction tool shows the model.
+ *
+ * Model providers expand every `$ref` when they render a tool, so a tagged
+ * union such as a browser action, whose locator union repeats in each of its
+ * twenty variants, costs several thousand tokens. Each tagged union of objects
+ * is shown as one object instead: the tag lists every variant, each field
+ * appears once, and one compact line names the fields each variant takes.
+ * Validation-only limits are left out. The tool's own Zod schema stays the
+ * authority and rejects any invalid combination with the exact field.
+ */
+export declare function interactionToolInputJsonSchema(schema: z.ZodType): AttemptToolJsonSchema;
+/**
+ * Let the model pass an element ref as a bare string wherever a locator is
+ * expected (`"locator":"e1a2b3c4d"`). It is the common case and a third of
+ * the output tokens of `{kind:'ref',ref}`. The tool expands it before
+ * validation.
+ */
+export declare function withRefShorthandLocators(schema: AttemptToolJsonSchema): AttemptToolJsonSchema;
+/**
+ * Name exactly what is wrong with invalid tool arguments. A union failure
+ * reports the variant the arguments chose (the one whose tag matched), so a
+ * click without a locator role says `action.locator.role`, not only "invalid".
+ */
+export declare function describeInvalidToolArguments(error: z.ZodError): string;

package/dist/{lazy-manifest-AJ6XPJ4F.js → lazy-manifest-BLZ3UZLX.js}

@@ -1,9 +1,9 @@
 import "./chunk-4A4XTKKX.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
 import {
   Manifest
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 import "./chunk-PLDDJCW6.js";
 
 // src/lazy-manifest.ts
@@ -43,4 +43,4 @@ async function recordLazyMaterializedDirectories(session, target) {
 export {
   recordLazyMaterializedDirectories
 };
-//# sourceMappingURL=lazy-manifest-AJ6XPJ4F.js.map
+//# sourceMappingURL=lazy-manifest-BLZ3UZLX.js.map

package/dist/lazy-tool-transport.d.ts

@@ -52,6 +52,8 @@ export declare class LazyToolRuntime {
     wrapModel(model: Model): Model;
     private searchableTools;
     search(rawArguments: unknown): Tool[];
+    /** Model-visible schemas an entry-tool call discloses, or [] for any other tool. */
+    familyDisclosure(toolName: string): Record<string, unknown>[];
     genericSearchOutput(rawArguments: unknown): string;
     private buildListTool;
     private buildNativeSearchTool;
@@ -95,6 +97,14 @@ export declare function restoreGenericDispatchHistoryItems(input: Array<Record<s
  */
 export declare function restoreDirectDeferredCallArgumentTypes(candidate: Record<string, unknown>, runtime: LazyToolRuntime): Record<string, unknown>;
 export declare function transformGenericDispatchResponse(response: ModelResponse, runtime: LazyToolRuntime): ModelResponse;
+/**
+ * Show each entry-tool call's frozen family disclosure right after its result,
+ * as the same search call and output a model-issued search would have produced
+ * (native tool_search items, or a generic tool_search function call). Tools the
+ * history already disclosed are not repeated. The expansion depends only on
+ * earlier items, so every later request reproduces the identical prefix.
+ */
+export declare function expandInteractionFamilyDisclosures<T>(input: T[]): T[];
 /** Wrap per-run model resolution without changing any provider client or SDK tool object. */
 export declare class LazyToolModelProvider implements ModelProvider {
     private readonly inner;

package/dist/{localSources-SSIEH5F5.js → localSources-I6SIQ6CX.js}

@@ -3,11 +3,11 @@ import {
   applyLocalSourceManifestToState,
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
-} from "./chunk-YG26XE7B.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
-import "./chunk-KCPW4K7L.js";
-import "./chunk-7LJ7KDPI.js";
+} from "./chunk-JYDG2A7H.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
+import "./chunk-PZQUUBEB.js";
+import "./chunk-ERD4ICVB.js";
 import "./chunk-PLDDJCW6.js";
 export {
   applyLocalSourceManifestEntryToState,
@@ -15,4 +15,4 @@ export {
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
 };
-//# sourceMappingURL=localSources-SSIEH5F5.js.map
+//# sourceMappingURL=localSources-I6SIQ6CX.js.map

package/dist/model-call.js

@@ -4,10 +4,10 @@ import {
   SingleModelCallUnsupportedError,
   normalizeModelCallUsage,
   runSingleModelCall
-} from "./chunk-7OUG7WBV.js";
+} from "./chunk-GWRBALGQ.js";
 import "./chunk-5ULGMFKR.js";
-import "./chunk-KCPW4K7L.js";
-import "./chunk-7LJ7KDPI.js";
+import "./chunk-PZQUUBEB.js";
+import "./chunk-ERD4ICVB.js";
 import "./chunk-LJNCGUMB.js";
 import "./chunk-PLDDJCW6.js";
 export {

package/dist/sandbox/browser-control-client.d.ts

@@ -3,6 +3,7 @@ import { type BrowserFrameMetadata } from "@opengeni/sdk";
 import { BROWSER_PROFILE_ARTIFACT_FORMAT, type BrowserActionCommand as BrowserActionCommandValue, type BrowserActionReceipt as BrowserActionReceiptValue, type BrowserClipboard as BrowserClipboardValue, type BrowserDiagnosticBatch as BrowserDiagnosticBatchValue, type BrowserDownload as BrowserDownloadValue, type BrowserDownloadExportReceipt as BrowserDownloadExportReceiptValue, type BrowserDownloadExportRequest as BrowserDownloadExportRequestValue, type BrowserDownloadListResponse as BrowserDownloadListResponseValue, type BrowserDomReadRequest as BrowserDomReadRequestValue, type BrowserDomReadResponse as BrowserDomReadResponseValue, type BrowserExternalAuthCommand as BrowserExternalAuthCommandValue, type BrowserExternalAuthResult as BrowserExternalAuthResultValue, type BrowserDiagnosticKind, type BrowserTargetListResponse as BrowserTargetListResponseValue, type BrowserObservation as BrowserObservationValue, type BrowserRevisionMaterialization as BrowserRevisionMaterializationValue, type BrowserTarget as BrowserTargetValue, type BrowserTargetState as BrowserTargetStateValue, type BrowserWorkspaceFileStageRequest as BrowserWorkspaceFileStageRequestValue, type BrowserWorkspaceFileStageResponse as BrowserWorkspaceFileStageResponseValue, type BrowserPasskeySyncRequest as BrowserPasskeySyncRequestValue, type BrowserPasskeySyncResponse as BrowserPasskeySyncResponseValue, type ComputerActionCommand as ComputerActionCommandValue, type ComputerActionReceipt as ComputerActionReceiptValue, type ComputerClipboard as ComputerClipboardValue, type ComputerObservation as ComputerObservationValue, type ComputerSessionCapabilities as ComputerSessionCapabilitiesValue, type ComputerTarget as ComputerTargetValue, type InteractionError as InteractionErrorValue, type NetworkRouteConsistency as NetworkRouteConsistencyValue } from "@opengeni/contracts";
 import type { BrowserControlEnsureRequest, BrowserControlEnsureResponse, BrowserFramesOpenRequest, ComputerFramesOpenRequest, StreamChannel } from "@opengeni/agent-proto";
 import { type EnsureBrowserControlServerResult } from "./browser-control-server.js";
+import type { BrowserControlHttpCall, BrowserControlHttpOutcome } from "./browser-control-http.js";
 import { type ExposedPortEndpoint } from "./stream-port.js";
 export declare const BROWSER_CONTROL_ADMIN_TOKEN_FILE = "/tmp/opengeni-browserd/authority/admin-token";
 type ExecResultLike = {
@@ -68,6 +69,8 @@ export type BrowserControlPlacementSession = {
         }) => void;
     };
     ensureBrowserControl?: (request: BrowserControlEnsureRequest) => Promise<BrowserControlEnsureResponse>;
+    /** Agent-native controller transport, addressed by authority scope. */
+    browserControlHttp?: (request: BrowserControlHttpCall) => Promise<BrowserControlHttpOutcome>;
     openBrowserFrames?: (request: BrowserFramesOpenRequest) => Promise<{
         channel: StreamChannel;
         endpoint: ExposedPortEndpoint;
@@ -125,6 +128,8 @@ export type PlacementBrowserSessionReference = {
 };
 export type PlacementBrowserSession = PlacementBrowserSessionReference & {
     observation: BrowserObservationValue;
+    /** The tab inventory at creation, when the controller reports it. */
+    targets?: BrowserTargetValue[];
 };
 export type PlacementComputerSessionReference = {
     computerSessionId: string;
@@ -262,6 +267,55 @@ export type PlacementBrowserStateCaptureReceipt = PlacementBrowserSessionReferen
         }>;
     };
 };
+/** The exact controller authority a preserved working copy was launched
+ * under; the controller refuses any other. */
+export type PlacementBrowserWorkingCopyAuthority = PlacementBrowserSessionReference & {
+    tokenGeneration: number;
+    controlToken: string;
+    viewToken: string;
+};
+export declare const BROWSER_WORKING_COPY_REFUSALS: readonly ["unsupported_platform", "browser_running", "working_copy_invalid", "receipt_not_adoptable", "authority_changed", "process_state_unknown", "adoption_not_needed", "adoption_unresolved"];
+export type PlacementBrowserWorkingCopyRefusal = (typeof BROWSER_WORKING_COPY_REFUSALS)[number];
+export declare const BROWSER_WORKING_COPY_ADOPTION_PHASES: readonly ["intent", "copied", "receipt", "source_preserved", "adopted", "interrupted", "failed", "collision", "reverting", "reverted"];
+export type PlacementBrowserWorkingCopyAdoptionPhase = (typeof BROWSER_WORKING_COPY_ADOPTION_PHASES)[number];
+export type PlacementBrowserWorkingCopyAdoption = PlacementBrowserSessionReference & {
+    operationId: string;
+    manifestDigest: string;
+    phase: PlacementBrowserWorkingCopyAdoptionPhase;
+    failureCode: string | null;
+    /** Directories this adoption kept beside the browser's own, by name. */
+    retainedDirectories: string[];
+    createdAt: string;
+    updatedAt: string;
+};
+export type PlacementBrowserWorkingCopyInspection = PlacementBrowserSessionReference & {
+    platformSupported: boolean;
+    refusal: PlacementBrowserWorkingCopyRefusal | null;
+    /** Exact digest of the bytes an adoption would take; null when refused. */
+    manifest: {
+        digest: string;
+        entries: number;
+        bytes: number;
+        excluded: string[];
+    } | null;
+    profileIdentityMatches: boolean;
+    /** false only when no process provably uses the profile. */
+    profileInUse: boolean | null;
+    receipt: {
+        operationId: string;
+        intent: "launch" | "suspend" | "retire" | "adopt";
+        state: string;
+        directoryLaunchAllowed: boolean;
+        authorityMatches: boolean;
+        /** True when this working copy was first launched from a saved checkpoint. */
+        launchedFromCheckpoint: boolean;
+        adoption: {
+            operationId: string;
+            manifestDigest: string;
+        } | null;
+    } | null;
+    activeAdoption: PlacementBrowserWorkingCopyAdoption | null;
+};
 export type ProvisionBrowserControlClientInput = {
     adminToken: string;
     adminTokenFile?: string;
@@ -348,6 +402,32 @@ export declare class BrowserControlClient {
      * return only integrity/compatibility metadata. Secret authority is carried
      * in a private placement request file and never returned by browserd. */
     captureState(input: CapturePlacementBrowserStateInput): Promise<PlacementBrowserStateCaptureReceipt>;
+    /** Read-only evidence about a preserved working copy whose controller
+     * memory was lost: the exact digest of its bytes and whether it can be
+     * adopted. Hashing a large profile can take minutes. */
+    inspectWorkingCopy(input: PlacementBrowserWorkingCopyAuthority): Promise<PlacementBrowserWorkingCopyInspection>;
+    /** Adopt the exact inspected bytes of a preserved working copy. A lost reply
+     * is checked with {@link workingCopyAdoption}. Sending the same operation id
+     * again never repeats a side effect: it only settles what that operation
+     * already did, under the authority that approved it. */
+    adoptWorkingCopy(input: PlacementBrowserWorkingCopyAuthority & {
+        operationId: string;
+        manifestDigest: string;
+    }): Promise<PlacementBrowserWorkingCopyAdoption>;
+    /** The recorded state of one adoption, read without changing it. */
+    workingCopyAdoption(reference: PlacementBrowserSessionReference, operationId: string): Promise<{
+        inFlight: boolean;
+        adoption: PlacementBrowserWorkingCopyAdoption | null;
+    }>;
+    /** Revert one unfinished adoption under the browser's current authority:
+     * its own directory goes back to the live path and the staged copy is
+     * kept. Retrying the same revert finishes one that stopped part way. */
+    revertWorkingCopyAdoption(input: PlacementBrowserWorkingCopyAuthority & {
+        operationId: string;
+    }): Promise<{
+        inFlight: boolean;
+        adoption: PlacementBrowserWorkingCopyAdoption | null;
+    }>;
     sessionClient(input: {
         reference: PlacementBrowserSessionReference;
         controlToken: string;
@@ -434,6 +514,13 @@ export declare class BrowserControlClient {
     private requestBytes;
     private requestStream;
     private controllerPort;
+    /** The agent-native transport: one in-process loopback request on the
+     * Connected Machine, addressed by authority scope, with no process started.
+     * Null when the placement does not serve it; the caller then keeps its
+     * command transport. A controller that is not running receives nothing, so
+     * it is ensured and the request sent once more whatever its method. */
+    private requestNative;
+    private ensureControllerPort;
 }
 export declare class BrowserControlSessionClient {
     readonly reference: PlacementBrowserSessionReference;

package/dist/sandbox/browser-control-http.d.ts

@@ -0,0 +1,33 @@
+/** One request to an agent-owned browser/computer controller, addressed by its
+ * exact authority scope rather than a local port. */
+export type BrowserControlHttpCall = {
+    scopeId: string;
+    scopeGeneration: string;
+    method: "GET" | "POST" | "PUT" | "DELETE";
+    /** Absolute controller path with optional query. */
+    path: string;
+    bearerToken: string;
+    /** JSON request body bytes, when the request has a body. */
+    body?: Uint8Array;
+    timeoutMs: number;
+    maxResponseBytes: number;
+};
+/** What a placement transport did with one controller request. */
+export type BrowserControlHttpOutcome = 
+/** The placement cannot serve it natively; nothing was sent. */
+{
+    kind: "unsupported";
+}
+/** No controller for that scope and generation accepted it; nothing was
+ * delivered, so the caller may ensure the controller and send again. */
+ | {
+    kind: "controller_absent";
+} | {
+    kind: "response";
+    status: number;
+    /** Lowercase header names. */
+    headers: Map<string, string>;
+    body: Uint8Array;
+};
+/** Extra time beyond the request's own deadline for the reply to arrive. */
+export declare const BROWSER_CONTROL_HTTP_REPLY_GRACE_MS = 5000;

package/dist/sandbox/index.d.ts

@@ -37,7 +37,7 @@ export { createTurnToolCancellationController, TurnSandboxCommandCancelledError,
 export type { TurnSandboxCommandArgs, TurnSandboxCommandSession, TurnToolCancellationController, TurnToolCancellationFence, } from "./turn-tool-cancellation.js";
 export { TERMINAL_STREAM_PORT, TERMINAL_SERVER_TIMEOUT_MS, TerminalServerError, TerminalServerUnsupportedError, buildTerminalServerScript, ensureTerminalServer, tearDownTerminalServer, type EnsureTerminalServerOptions, type EnsureTerminalServerResult, } from "./terminal-server.js";
 export { BROWSER_CONTROL_PORT, BROWSER_CONTROL_SERVER_TIMEOUT_MS, BrowserControlServerError, BrowserControlServerUnsupportedError, buildBrowserControlServerScript, ensureBrowserControlServer, tearDownBrowserControlServer, type EnsureBrowserControlServerOptions, type EnsureBrowserControlServerResult, } from "./browser-control-server.js";
-export { BROWSER_CONTROL_ADMIN_TOKEN_FILE, BrowserControlClient, BrowserControlProtocolError, BrowserControlRequestError, BrowserControlSessionClient, BrowserControlTransportError, BrowserControlUnsupportedError, ComputerFrameEvidenceMismatchError, decodeComputerControlFrameMetadataHeader, provisionBrowserControlClient, validateComputerControlFrameEvidence, type BrowserControlPlacementSession, type BrowserControlScreenshotOptions, type BrowserControlFrame, type BrowserStateDownloadGrant, type BrowserStateUploadGrant, type BrowserViewGrant, type CapturePlacementBrowserStateInput, type CreatePlacementBrowserSessionInput, type PlacementBrowserSession, type PlacementBrowserSessionReference, type PlacementBrowserNetworkRoute, type PlacementBrowserTransport, type PlacementBrowserStateCaptureReceipt, type ComputerControlFrame, type ComputerControlFrameMetadata, type ComputerFrameEvidenceMismatchReason, type ExpectedComputerFrameEvidence, type ProvisionBrowserControlClientInput, type ProvisionBrowserControlClientResult, type RestorePlacementBrowserStateInput, } from "./browser-control-client.js";
+export { BROWSER_CONTROL_ADMIN_TOKEN_FILE, BrowserControlClient, BrowserControlProtocolError, BrowserControlRequestError, BrowserControlSessionClient, BrowserControlTransportError, BrowserControlUnsupportedError, ComputerFrameEvidenceMismatchError, decodeComputerControlFrameMetadataHeader, provisionBrowserControlClient, validateComputerControlFrameEvidence, type BrowserControlPlacementSession, type BrowserControlScreenshotOptions, type BrowserControlFrame, type BrowserStateDownloadGrant, type BrowserStateUploadGrant, type BrowserViewGrant, type CapturePlacementBrowserStateInput, type CreatePlacementBrowserSessionInput, type PlacementBrowserSession, type PlacementBrowserSessionReference, type PlacementBrowserNetworkRoute, type PlacementBrowserTransport, type PlacementBrowserStateCaptureReceipt, type PlacementBrowserWorkingCopyAdoption, type PlacementBrowserWorkingCopyAuthority, type PlacementBrowserWorkingCopyInspection, type PlacementBrowserWorkingCopyRefusal, type ComputerControlFrame, type ComputerControlFrameMetadata, type ComputerFrameEvidenceMismatchReason, type ExpectedComputerFrameEvidence, type ProvisionBrowserControlClientInput, type ProvisionBrowserControlClientResult, type RestorePlacementBrowserStateInput, } from "./browser-control-client.js";
 export { RunCredentialValidationError, normalizeRunCredentialsResolution, runCredentialRoot, runCredentialPointerFile, materializeRunCredentials, clearRunCredentials, clearRunCredentialsForAttempt, withRunCredentialEnvironment, withRunCredentialsSession, withRunCredentialsClient, type RunCredentialExpectedScope, type NormalizedRunCredentialMaterial, type RunCredentialCommandSession, type RunCredentialCommandRunner, type RunCredentialSessionReady, type MaterializeRunCredentialsOptions, } from "./run-credentials.js";
 export { SECRET_ENV_TOTAL_MAX_BYTES, SECRET_ENV_VALUE_MAX_BYTES, SECRET_FILE_ROOT, clearSecretFilesCommand, prepareSecretExec, prepareSecretStdin, resolveSecretImagePath, resolveSecretLiteralText, resolveSecretPatchText, runWithSecretCarry, secretExecCarryFor, secretFilePath, secretScopeFor, type SecretCarry, type SecretExecCarry, type SecretStdinCarry, } from "./secret-delivery.js";
 export { CodemodeTokenPathError, codemodeTokenFileForSession, codemodeTokenFileFromEnvironment, withCodemodeTokenEnvironment, withCodemodeTokenSession, withCodemodeTokenClient, } from "./codemode-token.js";

package/dist/sandbox/index.js

@@ -213,7 +213,7 @@ import {
   withRunCredentialsSession,
   withoutSandboxProviderIdentity,
   workspaceArchiveDownloadTemporaryDirectory
-} from "../chunk-462CH77G.js";
+} from "../chunk-ETTCGPBT.js";
 import "../chunk-5ULGMFKR.js";
 import {
   CODE_SEARCH_RG_MAX_BYTES,
@@ -311,13 +311,13 @@ import {
   validateCodeSearchRipgrepArgs,
   withModalCommandStartSignal,
   withRoutingMutationOutputRejectionFence
-} from "../chunk-5WJOPANS.js";
+} from "../chunk-Y5THZH5N.js";
 import "../chunk-4A4XTKKX.js";
-import "../chunk-YG26XE7B.js";
-import "../chunk-NWS4HPB7.js";
-import "../chunk-HJSIPTFA.js";
-import "../chunk-KCPW4K7L.js";
-import "../chunk-7LJ7KDPI.js";
+import "../chunk-JYDG2A7H.js";
+import "../chunk-MIAL5I4O.js";
+import "../chunk-4XDJ4TJA.js";
+import "../chunk-PZQUUBEB.js";
+import "../chunk-ERD4ICVB.js";
 import "../chunk-PLDDJCW6.js";
 export {
   ActiveBackendUnresolvableError,

package/dist/sandbox/routing/backend-resolver.d.ts

@@ -32,6 +32,7 @@ export interface SelfhostedConnectionBinding {
     operationResourcePolicySupported: boolean;
     operationCpuQuotaSupported: boolean;
     transactionalFsWriteSupported?: boolean;
+    browserControlHttpSupported?: boolean;
 }
 export interface ActiveBackendResolverDeps {
     /** The workspace the session belongs to (the control-plane subject scope). */