@opengeni/runtime 3.3.0 → 3.4.0

package/dist/{chunk-YG26XE7B.js → chunk-JYDG2A7H.js}

@@ -16,7 +16,7 @@ import {
   randomUUID,
   relativePosixPathWithinRoot,
   shellQuote
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // ../../node_modules/.bun/@openai+agents-core@0.14.3+933c5e7db4cd33c2/node_modules/@openai/agents-core/dist/sandbox/shared/output.mjs
 var APPROX_BYTES_PER_TOKEN = 4;
@@ -1231,4 +1231,4 @@ export {
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
 };
-//# sourceMappingURL=chunk-YG26XE7B.js.map
+//# sourceMappingURL=chunk-JYDG2A7H.js.map

package/dist/{chunk-RSHQSLEJ.js → chunk-KIL4FGX5.js}

@@ -1,9 +1,9 @@
 import {
   connectorAttachmentFileName
-} from "./chunk-Z5U6WE22.js";
+} from "./chunk-PRZPGRIK.js";
 import {
   isRoutingMutationOutcomeUnknownError
-} from "./chunk-5WJOPANS.js";
+} from "./chunk-Y5THZH5N.js";
 
 // src/slack-rest-mcp.ts
 import {
@@ -597,4 +597,4 @@ export {
   SLACK_REST_API_BASE2 as SLACK_REST_API_BASE,
   SLACK_REST_MCP_TOOLS
 };
-//# sourceMappingURL=chunk-RSHQSLEJ.js.map
+//# sourceMappingURL=chunk-KIL4FGX5.js.map

package/dist/{chunk-NWS4HPB7.js → chunk-MIAL5I4O.js}

@@ -3,7 +3,7 @@ import {
   UserError,
   cloneManifest,
   isRecord
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // ../../node_modules/.bun/@openai+agents-core@0.14.3+933c5e7db4cd33c2/node_modules/@openai/agents-core/dist/sandbox/client.mjs
 var DEFAULT_SANDBOX_ARCHIVE_LIMITS = {
@@ -91,4 +91,4 @@ export {
   NoopSnapshotSpec,
   isNoopSnapshotSpec
 };
-//# sourceMappingURL=chunk-NWS4HPB7.js.map
+//# sourceMappingURL=chunk-MIAL5I4O.js.map

package/dist/{chunk-Z5U6WE22.js → chunk-PRZPGRIK.js}

@@ -1,7 +1,7 @@
 import {
   isRoutingMutationOutcomeUnknownError,
   isRoutingMutationOutputRejectedError
-} from "./chunk-5WJOPANS.js";
+} from "./chunk-Y5THZH5N.js";
 import {
   assertMcpPayloadWithinBytes
 } from "./chunk-LJNCGUMB.js";
@@ -164,4 +164,4 @@ export {
   connectorAttachmentSandboxPath,
   projectConnectorAttachmentTransfers
 };
-//# sourceMappingURL=chunk-Z5U6WE22.js.map
+//# sourceMappingURL=chunk-PRZPGRIK.js.map

package/dist/{chunk-KCPW4K7L.js → chunk-PZQUUBEB.js}

@@ -9,7 +9,7 @@ import {
   logToolActionError,
   logger,
   randomUUID
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // ../../node_modules/.bun/@openai+agents-core@0.14.3+933c5e7db4cd33c2/node_modules/@openai/agents-core/dist/mcpServers.mjs
 var DEFAULT_CONNECT_TIMEOUT_MS = 1e4;
@@ -828,4 +828,4 @@ export {
   connectMcpServers,
   MemorySession
 };
-//# sourceMappingURL=chunk-KCPW4K7L.js.map
+//# sourceMappingURL=chunk-PZQUUBEB.js.map

package/dist/{chunk-5WJOPANS.js → chunk-Y5THZH5N.js}

@@ -26,17 +26,17 @@ import {
   truncateOutput,
   validateCredentialPair,
   validateRemoteSandboxPathForManifest
-} from "./chunk-YG26XE7B.js";
+} from "./chunk-JYDG2A7H.js";
 import {
   isNoopSnapshotSpec,
   normalizeSandboxClientCreateArgs,
   resolveSandboxArchiveLimits,
   validateSandboxArchiveLimits
-} from "./chunk-NWS4HPB7.js";
+} from "./chunk-MIAL5I4O.js";
 import {
   isSandboxPathNotFoundError,
   probeSandboxPathExists
-} from "./chunk-HJSIPTFA.js";
+} from "./chunk-4XDJ4TJA.js";
 import {
   Environment,
   FileMode,
@@ -94,7 +94,7 @@ import {
   shellQuote,
   stableJsonStringify,
   withSandboxSpan
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // src/sandbox/selfhosted/control-rpc.ts
 import { ControlRequest as ControlRequest2, ControlResponse, ErrorCode } from "@opengeni/agent-proto";
@@ -15086,7 +15086,7 @@ var CloudflareSandboxSession = class {
   async materializeEntry(args) {
     assertSandboxEntryMetadataSupported("CloudflareSandboxClient", args.path, args.entry, MOUNT_MANIFEST_METADATA_SUPPORT);
     if (entryContainsLocalSource(args.entry)) {
-      const { applyLocalSourceManifestEntryToState: applyLocalSourceManifestEntryToState2 } = await import("./localSources-SSIEH5F5.js");
+      const { applyLocalSourceManifestEntryToState: applyLocalSourceManifestEntryToState2 } = await import("./localSources-I6SIQ6CX.js");
       await applyLocalSourceManifestEntryToState2(this.state, args.path, args.entry, "cloudflare", this.writer(), this.remotePathResolver, this.manifestMaterializationOptions(args.runAs));
       return;
     }
@@ -15097,7 +15097,7 @@ var CloudflareSandboxSession = class {
     assertSandboxManifestMetadataSupported("CloudflareSandboxClient", manifest, MOUNT_MANIFEST_METADATA_SUPPORT);
     assertCloudflareManifestMountsSupported(manifest);
     if (manifestContainsLocalSource(manifest)) {
-      const { applyLocalSourceManifestToState: applyLocalSourceManifestToState2 } = await import("./localSources-SSIEH5F5.js");
+      const { applyLocalSourceManifestToState: applyLocalSourceManifestToState2 } = await import("./localSources-I6SIQ6CX.js");
       await applyLocalSourceManifestToState2(this.state, manifest, "cloudflare", this.writer(), this.remotePathResolver, this.manifestMaterializationOptions(runAs));
       return;
     }
@@ -26127,4 +26127,4 @@ export {
   renderRoutingMutationOutcomeUnknownToolResult,
   RoutingSandboxSession
 };
-//# sourceMappingURL=chunk-5WJOPANS.js.map
+//# sourceMappingURL=chunk-Y5THZH5N.js.map

package/dist/codex-tool-search.d.ts

@@ -29,6 +29,15 @@ export declare const HARNESS_CONTROL_MCP_SERVER_ID = "opengeni";
 export declare const HARNESS_CONTROL_FIRST_PARTY_TOOLS: readonly ["goal_set", "goal_update", "goal_complete", "goal_pause", "goal_resume", "command_read", "command_wait", "wait_for_input"];
 /** True for an exact harness control tool name on the first-party server. */
 export declare function isHarnessControlMcpToolName(registryId: string, modelName: string): boolean;
+/** True when a prepared function tool is an interaction family's entry tool. */
+export declare function isInteractionEntryFunctionTool(tool: unknown, mcpServerIds?: ReadonlySet<string>, modelServerIds?: ReadonlyMap<string, string>): boolean;
+/** True when a model tool name is an interaction family's entry tool. */
+export declare function isInteractionEntryToolName(name: string): boolean;
+/**
+ * The companions an entry tool discloses once it is called: the rest of its
+ * family that is still searchable, within the same byte budgets as a search.
+ */
+export declare function interactionEntryCompanions(entryName: string, searchable: Tool[]): Tool[];
 /**
  * True when a prepared MCP function tool is one of the harness control tools
  * served by the authorized first-party `opengeni` server. These stay in the

package/dist/gmail-rest-mcp.js

@@ -11,15 +11,15 @@ import {
   gmailToolAvailableOnDeployment,
   gmailToolSupportsScopes,
   isOfficialGmailMcpConfig
-} from "./chunk-XQ23VCZ4.js";
-import "./chunk-Z5U6WE22.js";
-import "./chunk-5WJOPANS.js";
+} from "./chunk-6FQ6KEII.js";
+import "./chunk-PRZPGRIK.js";
+import "./chunk-Y5THZH5N.js";
 import "./chunk-4A4XTKKX.js";
-import "./chunk-YG26XE7B.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
-import "./chunk-KCPW4K7L.js";
-import "./chunk-7LJ7KDPI.js";
+import "./chunk-JYDG2A7H.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
+import "./chunk-PZQUUBEB.js";
+import "./chunk-ERD4ICVB.js";
 import "./chunk-LJNCGUMB.js";
 import "./chunk-PLDDJCW6.js";
 export {

package/dist/index.d.ts

@@ -708,6 +708,9 @@ export declare function buildOpenGeniAgent(settings: Settings, resources: Resour
  * or writes those rules must derive the identity through this function.
  */
 export declare function sessionMcpApprovalConnectionId(serverId: string, url: string): string;
+/** Why interaction_request_human arguments cannot be recorded as an
+ * intervention, in words the model can act on, or null when they can. */
+export declare function interactionRequestArgumentsProblem(serialized: string): string | null;
 /**
  * Codex and reviewed Responses-compatible Gateway routes accept ordinary
  * FUNCTION tools plus `input_image` content inside a function_call_output. The

package/dist/index.js

@@ -99,6 +99,7 @@ import {
   identityFromLegacyTemplate,
   incrementalModelInputProjectionFilter,
   inspectPersistentAgentInstructions,
+  interactionRequestArgumentsProblem,
   interactionToolErrorOutput,
   interruptionKindForCallItem,
   invokePreparedAgentTool,
@@ -187,7 +188,7 @@ import {
   workspaceEnvironmentInstructions,
   wrapAttemptToolDefinitions,
   wrapAttemptToolExecute
-} from "./chunk-XRX57ZQO.js";
+} from "./chunk-3DFH3ZHU.js";
 import {
   ActiveBackendUnresolvableError,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
@@ -403,7 +404,7 @@ import {
   withRunCredentialsSession,
   withoutSandboxProviderIdentity,
   workspaceArchiveDownloadTemporaryDirectory
-} from "./chunk-EK7IW2FR.js";
+} from "./chunk-ETTCGPBT.js";
 import {
   SKILL_MAX_FILES,
   SKILL_MAX_FILE_BYTES,
@@ -558,7 +559,7 @@ import {
   toolCallIdFromSdkItem,
   vercelGatewayRoutingFetch,
   withClaudeUsageObserver
-} from "./chunk-7OUG7WBV.js";
+} from "./chunk-GWRBALGQ.js";
 import {
   UnsupportedProtocolJsonValueError,
   normalizeProtocolJsonValue
@@ -572,7 +573,7 @@ import {
   gmailToolAvailableOnDeployment,
   gmailToolSupportsScopes,
   isOfficialGmailMcpConfig
-} from "./chunk-XQ23VCZ4.js";
+} from "./chunk-6FQ6KEII.js";
 import {
   OFFICIAL_SLACK_MCP_URL,
   SLACK_REST_API_BASE,
@@ -580,14 +581,14 @@ import {
   SlackRestMcpServer,
   isOfficialSlackMcpConfig,
   slackRestToolIsMutation
-} from "./chunk-RSHQSLEJ.js";
+} from "./chunk-KIL4FGX5.js";
 import {
   CONNECTOR_ATTACHMENT_PROVIDER_RESULT_MAX_BYTES,
   CONNECTOR_ATTACHMENT_SANITIZED_RESULT_MAX_BYTES,
   ConnectorAttachmentTransferError,
   connectorAttachmentSandboxPath,
   projectConnectorAttachmentTransfers
-} from "./chunk-Z5U6WE22.js";
+} from "./chunk-PRZPGRIK.js";
 import {
   CODE_SEARCH_RG_MAX_BYTES,
   ChannelAConflictError,
@@ -684,15 +685,15 @@ import {
   validateCodeSearchRipgrepArgs,
   withModalCommandStartSignal,
   withRoutingMutationOutputRejectionFence
-} from "./chunk-5WJOPANS.js";
+} from "./chunk-Y5THZH5N.js";
 import "./chunk-4A4XTKKX.js";
-import "./chunk-YG26XE7B.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
-import "./chunk-KCPW4K7L.js";
+import "./chunk-JYDG2A7H.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
+import "./chunk-PZQUUBEB.js";
 import {
   MaxTurnsExceededError
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 import "./chunk-LJNCGUMB.js";
 import "./chunk-PLDDJCW6.js";
 export {
@@ -1084,6 +1085,7 @@ export {
   inspectModalSandboxLifecycle,
   inspectPersistentAgentInstructions,
   inspectRecordingArtifact,
+  interactionRequestArgumentsProblem,
   interactionToolErrorOutput,
   interruptionKindForCallItem,
   invokePreparedAgentTool,

package/dist/interaction-tool-json-schema.d.ts

@@ -0,0 +1,27 @@
+import type { AttemptToolJsonSchema } from "@opengeni/contracts";
+import { z } from "zod";
+/**
+ * The JSON Schema an interaction tool shows the model.
+ *
+ * Model providers expand every `$ref` when they render a tool, so a tagged
+ * union such as a browser action, whose locator union repeats in each of its
+ * twenty variants, costs several thousand tokens. Each tagged union of objects
+ * is shown as one object instead: the tag lists every variant, each field
+ * appears once, and one compact line names the fields each variant takes.
+ * Validation-only limits are left out. The tool's own Zod schema stays the
+ * authority and rejects any invalid combination with the exact field.
+ */
+export declare function interactionToolInputJsonSchema(schema: z.ZodType): AttemptToolJsonSchema;
+/**
+ * Let the model pass an element ref as a bare string wherever a locator is
+ * expected (`"locator":"e1a2b3c4d"`). It is the common case and a third of
+ * the output tokens of `{kind:'ref',ref}`. The tool expands it before
+ * validation.
+ */
+export declare function withRefShorthandLocators(schema: AttemptToolJsonSchema): AttemptToolJsonSchema;
+/**
+ * Name exactly what is wrong with invalid tool arguments. A union failure
+ * reports the variant the arguments chose (the one whose tag matched), so a
+ * click without a locator role says `action.locator.role`, not only "invalid".
+ */
+export declare function describeInvalidToolArguments(error: z.ZodError): string;

package/dist/{lazy-manifest-AJ6XPJ4F.js → lazy-manifest-BLZ3UZLX.js}

@@ -1,9 +1,9 @@
 import "./chunk-4A4XTKKX.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
 import {
   Manifest
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 import "./chunk-PLDDJCW6.js";
 
 // src/lazy-manifest.ts
@@ -43,4 +43,4 @@ async function recordLazyMaterializedDirectories(session, target) {
 export {
   recordLazyMaterializedDirectories
 };
-//# sourceMappingURL=lazy-manifest-AJ6XPJ4F.js.map
+//# sourceMappingURL=lazy-manifest-BLZ3UZLX.js.map

package/dist/lazy-tool-transport.d.ts

@@ -52,6 +52,8 @@ export declare class LazyToolRuntime {
     wrapModel(model: Model): Model;
     private searchableTools;
     search(rawArguments: unknown): Tool[];
+    /** Model-visible schemas an entry-tool call discloses, or [] for any other tool. */
+    familyDisclosure(toolName: string): Record<string, unknown>[];
     genericSearchOutput(rawArguments: unknown): string;
     private buildListTool;
     private buildNativeSearchTool;
@@ -95,6 +97,14 @@ export declare function restoreGenericDispatchHistoryItems(input: Array<Record<s
  */
 export declare function restoreDirectDeferredCallArgumentTypes(candidate: Record<string, unknown>, runtime: LazyToolRuntime): Record<string, unknown>;
 export declare function transformGenericDispatchResponse(response: ModelResponse, runtime: LazyToolRuntime): ModelResponse;
+/**
+ * Show each entry-tool call's frozen family disclosure right after its result,
+ * as the same search call and output a model-issued search would have produced
+ * (native tool_search items, or a generic tool_search function call). Tools the
+ * history already disclosed are not repeated. The expansion depends only on
+ * earlier items, so every later request reproduces the identical prefix.
+ */
+export declare function expandInteractionFamilyDisclosures<T>(input: T[]): T[];
 /** Wrap per-run model resolution without changing any provider client or SDK tool object. */
 export declare class LazyToolModelProvider implements ModelProvider {
     private readonly inner;

package/dist/{localSources-SSIEH5F5.js → localSources-I6SIQ6CX.js}

@@ -3,11 +3,11 @@ import {
   applyLocalSourceManifestToState,
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
-} from "./chunk-YG26XE7B.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
-import "./chunk-KCPW4K7L.js";
-import "./chunk-7LJ7KDPI.js";
+} from "./chunk-JYDG2A7H.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
+import "./chunk-PZQUUBEB.js";
+import "./chunk-ERD4ICVB.js";
 import "./chunk-PLDDJCW6.js";
 export {
   applyLocalSourceManifestEntryToState,
@@ -15,4 +15,4 @@ export {
   materializeLocalSourceManifest,
   materializeLocalSourceManifestEntry
 };
-//# sourceMappingURL=localSources-SSIEH5F5.js.map
+//# sourceMappingURL=localSources-I6SIQ6CX.js.map

package/dist/model-call.js

@@ -4,10 +4,10 @@ import {
   SingleModelCallUnsupportedError,
   normalizeModelCallUsage,
   runSingleModelCall
-} from "./chunk-7OUG7WBV.js";
+} from "./chunk-GWRBALGQ.js";
 import "./chunk-5ULGMFKR.js";
-import "./chunk-KCPW4K7L.js";
-import "./chunk-7LJ7KDPI.js";
+import "./chunk-PZQUUBEB.js";
+import "./chunk-ERD4ICVB.js";
 import "./chunk-LJNCGUMB.js";
 import "./chunk-PLDDJCW6.js";
 export {

package/dist/sandbox/browser-control-client.d.ts

@@ -128,6 +128,8 @@ export type PlacementBrowserSessionReference = {
 };
 export type PlacementBrowserSession = PlacementBrowserSessionReference & {
     observation: BrowserObservationValue;
+    /** The tab inventory at creation, when the controller reports it. */
+    targets?: BrowserTargetValue[];
 };
 export type PlacementComputerSessionReference = {
     computerSessionId: string;
@@ -265,6 +267,55 @@ export type PlacementBrowserStateCaptureReceipt = PlacementBrowserSessionReferen
         }>;
     };
 };
+/** The exact controller authority a preserved working copy was launched
+ * under; the controller refuses any other. */
+export type PlacementBrowserWorkingCopyAuthority = PlacementBrowserSessionReference & {
+    tokenGeneration: number;
+    controlToken: string;
+    viewToken: string;
+};
+export declare const BROWSER_WORKING_COPY_REFUSALS: readonly ["unsupported_platform", "browser_running", "working_copy_invalid", "receipt_not_adoptable", "authority_changed", "process_state_unknown", "adoption_not_needed", "adoption_unresolved"];
+export type PlacementBrowserWorkingCopyRefusal = (typeof BROWSER_WORKING_COPY_REFUSALS)[number];
+export declare const BROWSER_WORKING_COPY_ADOPTION_PHASES: readonly ["intent", "copied", "receipt", "source_preserved", "adopted", "interrupted", "failed", "collision", "reverting", "reverted"];
+export type PlacementBrowserWorkingCopyAdoptionPhase = (typeof BROWSER_WORKING_COPY_ADOPTION_PHASES)[number];
+export type PlacementBrowserWorkingCopyAdoption = PlacementBrowserSessionReference & {
+    operationId: string;
+    manifestDigest: string;
+    phase: PlacementBrowserWorkingCopyAdoptionPhase;
+    failureCode: string | null;
+    /** Directories this adoption kept beside the browser's own, by name. */
+    retainedDirectories: string[];
+    createdAt: string;
+    updatedAt: string;
+};
+export type PlacementBrowserWorkingCopyInspection = PlacementBrowserSessionReference & {
+    platformSupported: boolean;
+    refusal: PlacementBrowserWorkingCopyRefusal | null;
+    /** Exact digest of the bytes an adoption would take; null when refused. */
+    manifest: {
+        digest: string;
+        entries: number;
+        bytes: number;
+        excluded: string[];
+    } | null;
+    profileIdentityMatches: boolean;
+    /** false only when no process provably uses the profile. */
+    profileInUse: boolean | null;
+    receipt: {
+        operationId: string;
+        intent: "launch" | "suspend" | "retire" | "adopt";
+        state: string;
+        directoryLaunchAllowed: boolean;
+        authorityMatches: boolean;
+        /** True when this working copy was first launched from a saved checkpoint. */
+        launchedFromCheckpoint: boolean;
+        adoption: {
+            operationId: string;
+            manifestDigest: string;
+        } | null;
+    } | null;
+    activeAdoption: PlacementBrowserWorkingCopyAdoption | null;
+};
 export type ProvisionBrowserControlClientInput = {
     adminToken: string;
     adminTokenFile?: string;
@@ -351,6 +402,32 @@ export declare class BrowserControlClient {
      * return only integrity/compatibility metadata. Secret authority is carried
      * in a private placement request file and never returned by browserd. */
     captureState(input: CapturePlacementBrowserStateInput): Promise<PlacementBrowserStateCaptureReceipt>;
+    /** Read-only evidence about a preserved working copy whose controller
+     * memory was lost: the exact digest of its bytes and whether it can be
+     * adopted. Hashing a large profile can take minutes. */
+    inspectWorkingCopy(input: PlacementBrowserWorkingCopyAuthority): Promise<PlacementBrowserWorkingCopyInspection>;
+    /** Adopt the exact inspected bytes of a preserved working copy. A lost reply
+     * is checked with {@link workingCopyAdoption}. Sending the same operation id
+     * again never repeats a side effect: it only settles what that operation
+     * already did, under the authority that approved it. */
+    adoptWorkingCopy(input: PlacementBrowserWorkingCopyAuthority & {
+        operationId: string;
+        manifestDigest: string;
+    }): Promise<PlacementBrowserWorkingCopyAdoption>;
+    /** The recorded state of one adoption, read without changing it. */
+    workingCopyAdoption(reference: PlacementBrowserSessionReference, operationId: string): Promise<{
+        inFlight: boolean;
+        adoption: PlacementBrowserWorkingCopyAdoption | null;
+    }>;
+    /** Revert one unfinished adoption under the browser's current authority:
+     * its own directory goes back to the live path and the staged copy is
+     * kept. Retrying the same revert finishes one that stopped part way. */
+    revertWorkingCopyAdoption(input: PlacementBrowserWorkingCopyAuthority & {
+        operationId: string;
+    }): Promise<{
+        inFlight: boolean;
+        adoption: PlacementBrowserWorkingCopyAdoption | null;
+    }>;
     sessionClient(input: {
         reference: PlacementBrowserSessionReference;
         controlToken: string;

package/dist/sandbox/index.d.ts

@@ -37,7 +37,7 @@ export { createTurnToolCancellationController, TurnSandboxCommandCancelledError,
 export type { TurnSandboxCommandArgs, TurnSandboxCommandSession, TurnToolCancellationController, TurnToolCancellationFence, } from "./turn-tool-cancellation.js";
 export { TERMINAL_STREAM_PORT, TERMINAL_SERVER_TIMEOUT_MS, TerminalServerError, TerminalServerUnsupportedError, buildTerminalServerScript, ensureTerminalServer, tearDownTerminalServer, type EnsureTerminalServerOptions, type EnsureTerminalServerResult, } from "./terminal-server.js";
 export { BROWSER_CONTROL_PORT, BROWSER_CONTROL_SERVER_TIMEOUT_MS, BrowserControlServerError, BrowserControlServerUnsupportedError, buildBrowserControlServerScript, ensureBrowserControlServer, tearDownBrowserControlServer, type EnsureBrowserControlServerOptions, type EnsureBrowserControlServerResult, } from "./browser-control-server.js";
-export { BROWSER_CONTROL_ADMIN_TOKEN_FILE, BrowserControlClient, BrowserControlProtocolError, BrowserControlRequestError, BrowserControlSessionClient, BrowserControlTransportError, BrowserControlUnsupportedError, ComputerFrameEvidenceMismatchError, decodeComputerControlFrameMetadataHeader, provisionBrowserControlClient, validateComputerControlFrameEvidence, type BrowserControlPlacementSession, type BrowserControlScreenshotOptions, type BrowserControlFrame, type BrowserStateDownloadGrant, type BrowserStateUploadGrant, type BrowserViewGrant, type CapturePlacementBrowserStateInput, type CreatePlacementBrowserSessionInput, type PlacementBrowserSession, type PlacementBrowserSessionReference, type PlacementBrowserNetworkRoute, type PlacementBrowserTransport, type PlacementBrowserStateCaptureReceipt, type ComputerControlFrame, type ComputerControlFrameMetadata, type ComputerFrameEvidenceMismatchReason, type ExpectedComputerFrameEvidence, type ProvisionBrowserControlClientInput, type ProvisionBrowserControlClientResult, type RestorePlacementBrowserStateInput, } from "./browser-control-client.js";
+export { BROWSER_CONTROL_ADMIN_TOKEN_FILE, BrowserControlClient, BrowserControlProtocolError, BrowserControlRequestError, BrowserControlSessionClient, BrowserControlTransportError, BrowserControlUnsupportedError, ComputerFrameEvidenceMismatchError, decodeComputerControlFrameMetadataHeader, provisionBrowserControlClient, validateComputerControlFrameEvidence, type BrowserControlPlacementSession, type BrowserControlScreenshotOptions, type BrowserControlFrame, type BrowserStateDownloadGrant, type BrowserStateUploadGrant, type BrowserViewGrant, type CapturePlacementBrowserStateInput, type CreatePlacementBrowserSessionInput, type PlacementBrowserSession, type PlacementBrowserSessionReference, type PlacementBrowserNetworkRoute, type PlacementBrowserTransport, type PlacementBrowserStateCaptureReceipt, type PlacementBrowserWorkingCopyAdoption, type PlacementBrowserWorkingCopyAuthority, type PlacementBrowserWorkingCopyInspection, type PlacementBrowserWorkingCopyRefusal, type ComputerControlFrame, type ComputerControlFrameMetadata, type ComputerFrameEvidenceMismatchReason, type ExpectedComputerFrameEvidence, type ProvisionBrowserControlClientInput, type ProvisionBrowserControlClientResult, type RestorePlacementBrowserStateInput, } from "./browser-control-client.js";
 export { RunCredentialValidationError, normalizeRunCredentialsResolution, runCredentialRoot, runCredentialPointerFile, materializeRunCredentials, clearRunCredentials, clearRunCredentialsForAttempt, withRunCredentialEnvironment, withRunCredentialsSession, withRunCredentialsClient, type RunCredentialExpectedScope, type NormalizedRunCredentialMaterial, type RunCredentialCommandSession, type RunCredentialCommandRunner, type RunCredentialSessionReady, type MaterializeRunCredentialsOptions, } from "./run-credentials.js";
 export { SECRET_ENV_TOTAL_MAX_BYTES, SECRET_ENV_VALUE_MAX_BYTES, SECRET_FILE_ROOT, clearSecretFilesCommand, prepareSecretExec, prepareSecretStdin, resolveSecretImagePath, resolveSecretLiteralText, resolveSecretPatchText, runWithSecretCarry, secretExecCarryFor, secretFilePath, secretScopeFor, type SecretCarry, type SecretExecCarry, type SecretStdinCarry, } from "./secret-delivery.js";
 export { CodemodeTokenPathError, codemodeTokenFileForSession, codemodeTokenFileFromEnvironment, withCodemodeTokenEnvironment, withCodemodeTokenSession, withCodemodeTokenClient, } from "./codemode-token.js";

package/dist/sandbox/index.js

@@ -213,7 +213,7 @@ import {
   withRunCredentialsSession,
   withoutSandboxProviderIdentity,
   workspaceArchiveDownloadTemporaryDirectory
-} from "../chunk-EK7IW2FR.js";
+} from "../chunk-ETTCGPBT.js";
 import "../chunk-5ULGMFKR.js";
 import {
   CODE_SEARCH_RG_MAX_BYTES,
@@ -311,13 +311,13 @@ import {
   validateCodeSearchRipgrepArgs,
   withModalCommandStartSignal,
   withRoutingMutationOutputRejectionFence
-} from "../chunk-5WJOPANS.js";
+} from "../chunk-Y5THZH5N.js";
 import "../chunk-4A4XTKKX.js";
-import "../chunk-YG26XE7B.js";
-import "../chunk-NWS4HPB7.js";
-import "../chunk-HJSIPTFA.js";
-import "../chunk-KCPW4K7L.js";
-import "../chunk-7LJ7KDPI.js";
+import "../chunk-JYDG2A7H.js";
+import "../chunk-MIAL5I4O.js";
+import "../chunk-4XDJ4TJA.js";
+import "../chunk-PZQUUBEB.js";
+import "../chunk-ERD4ICVB.js";
 import "../chunk-PLDDJCW6.js";
 export {
   ActiveBackendUnresolvableError,

package/dist/sandbox/selfhosted/session.d.ts

@@ -96,6 +96,9 @@ export interface SelfhostedBackgroundCommandAdoption {
     connectionInstanceId: string;
     opId: string;
     command: string;
+    /** The exec already failed because the machine stopped answering. Record it
+     * with a stop request instead of as a running background command. */
+    abandoned?: boolean;
 }
 /** Exact command-admission snapshot. A worker resolves this immediately before
  * every exec/Git admission; retries and already-started operations retain it. */

package/dist/slack-rest-mcp.js

@@ -8,15 +8,15 @@ import {
   SlackRestMcpServer,
   isOfficialSlackMcpConfig,
   slackRestToolIsMutation
-} from "./chunk-RSHQSLEJ.js";
-import "./chunk-Z5U6WE22.js";
-import "./chunk-5WJOPANS.js";
+} from "./chunk-KIL4FGX5.js";
+import "./chunk-PRZPGRIK.js";
+import "./chunk-Y5THZH5N.js";
 import "./chunk-4A4XTKKX.js";
-import "./chunk-YG26XE7B.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
-import "./chunk-KCPW4K7L.js";
-import "./chunk-7LJ7KDPI.js";
+import "./chunk-JYDG2A7H.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
+import "./chunk-PZQUUBEB.js";
+import "./chunk-ERD4ICVB.js";
 import "./chunk-LJNCGUMB.js";
 import "./chunk-PLDDJCW6.js";
 export {

package/dist/workspace-tool-gateway.js

@@ -3,21 +3,21 @@ import {
   prepareAgentTools,
   secretArgumentMode,
   sessionMcpApprovalConnectionId
-} from "./chunk-XRX57ZQO.js";
-import "./chunk-EK7IW2FR.js";
+} from "./chunk-3DFH3ZHU.js";
+import "./chunk-ETTCGPBT.js";
 import "./chunk-4KFT2G3W.js";
-import "./chunk-7OUG7WBV.js";
+import "./chunk-GWRBALGQ.js";
 import "./chunk-5ULGMFKR.js";
-import "./chunk-XQ23VCZ4.js";
-import "./chunk-RSHQSLEJ.js";
-import "./chunk-Z5U6WE22.js";
-import "./chunk-5WJOPANS.js";
+import "./chunk-6FQ6KEII.js";
+import "./chunk-KIL4FGX5.js";
+import "./chunk-PRZPGRIK.js";
+import "./chunk-Y5THZH5N.js";
 import "./chunk-4A4XTKKX.js";
-import "./chunk-YG26XE7B.js";
-import "./chunk-NWS4HPB7.js";
-import "./chunk-HJSIPTFA.js";
-import "./chunk-KCPW4K7L.js";
-import "./chunk-7LJ7KDPI.js";
+import "./chunk-JYDG2A7H.js";
+import "./chunk-MIAL5I4O.js";
+import "./chunk-4XDJ4TJA.js";
+import "./chunk-PZQUUBEB.js";
+import "./chunk-ERD4ICVB.js";
 import "./chunk-LJNCGUMB.js";
 import "./chunk-PLDDJCW6.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/runtime",
-  "version": "3.3.0",
+  "version": "3.4.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -75,19 +75,19 @@
     "@openai/agents": "0.14.3",
     "@openai/agents-core": "0.14.3",
     "@openai/agents-extensions": "0.14.3",
-    "@opengeni/agent-proto": "3.3.0",
-    "@opengeni/capabilities": "3.3.0",
-    "@opengeni/codemode": "3.3.0",
-    "@opengeni/codex": "3.3.0",
-    "@opengeni/config": "3.3.0",
-    "@opengeni/contracts": "3.3.0",
-    "@opengeni/interaction": "3.3.0",
-    "@opengeni/network": "3.3.0",
-    "@opengeni/observability": "3.3.0",
-    "@opengeni/sdk": "3.3.0",
-    "@opengeni/tool-gateway": "3.3.0",
-    "@opengeni/vaults": "3.3.0",
-    "@opengeni/xai-subscription": "3.3.0",
+    "@opengeni/agent-proto": "3.4.0",
+    "@opengeni/capabilities": "3.4.0",
+    "@opengeni/codemode": "3.4.0",
+    "@opengeni/codex": "3.4.0",
+    "@opengeni/config": "3.4.0",
+    "@opengeni/contracts": "3.4.0",
+    "@opengeni/interaction": "3.4.0",
+    "@opengeni/network": "3.4.0",
+    "@opengeni/observability": "3.4.0",
+    "@opengeni/sdk": "3.4.0",
+    "@opengeni/tool-gateway": "3.4.0",
+    "@opengeni/vaults": "3.4.0",
+    "@opengeni/xai-subscription": "3.4.0",
     "debug": "4.4.3",
     "modal": "0.9.0",
     "openai": "6.47.0",