@opengeni/runtime 3.3.0 → 3.4.0

package/dist/{chunk-HJSIPTFA.js → chunk-4XDJ4TJA.js}

@@ -18,7 +18,7 @@ import {
   shellQuote,
   tool,
   withSandboxSpan
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // ../../node_modules/.bun/@openai+agents-core@0.14.3+933c5e7db4cd33c2/node_modules/@openai/agents-core/dist/sandbox/capabilities/transport.mjs
 function supportsResponsesCompactionTransport(modelInstance) {
@@ -999,4 +999,4 @@ export {
   probeSandboxPathExists,
   SandboxAgent
 };
-//# sourceMappingURL=chunk-HJSIPTFA.js.map
+//# sourceMappingURL=chunk-4XDJ4TJA.js.map

package/dist/{chunk-XQ23VCZ4.js → chunk-6FQ6KEII.js}

@@ -1,9 +1,9 @@
 import {
   connectorAttachmentFileName
-} from "./chunk-Z5U6WE22.js";
+} from "./chunk-PRZPGRIK.js";
 import {
   isRoutingMutationOutcomeUnknownError
-} from "./chunk-5WJOPANS.js";
+} from "./chunk-Y5THZH5N.js";
 
 // src/gmail-rest-mcp.ts
 import {
@@ -2258,4 +2258,4 @@ export {
   gmailRestToolIsMutation,
   gmailRestResultOutcome
 };
-//# sourceMappingURL=chunk-XQ23VCZ4.js.map
+//# sourceMappingURL=chunk-6FQ6KEII.js.map

package/dist/{chunk-7LJ7KDPI.js → chunk-ERD4ICVB.js}

@@ -27556,7 +27556,7 @@ var SandboxMemoryGenerationManager = class {
     if (!transcript) {
       throw new UserError(`Memory rollout transcript was not found: ${transcriptPath}`);
     }
-    const { SandboxAgent } = await import("./agent-CTPLA3HP.js");
+    const { SandboxAgent } = await import("./agent-LJT5NPWT.js");
     const phaseOneAgent = new SandboxAgent({
       name: "sandbox-memory-phase-one",
       instructions: renderRolloutExtractionInstructions(generate.extraPrompt),
@@ -27617,7 +27617,7 @@ var SandboxMemoryGenerationManager = class {
     })) {
       return;
     }
-    const { SandboxAgent } = await import("./agent-CTPLA3HP.js");
+    const { SandboxAgent } = await import("./agent-LJT5NPWT.js");
     const phaseTwoAgent = new SandboxAgent({
       name: "sandbox-memory-phase-two",
       model: generate.phaseTwoModel,
@@ -43273,6 +43273,7 @@ export {
   setTraceProcessors,
   setTracingDisabled,
   normalizeHostedMcpRequireApproval,
+  defineToolInputGuardrail,
   ToolGuardrailFunctionOutputFactory,
   applyPatchTool,
   attachClientToolSearchExecutor,
@@ -43358,4 +43359,4 @@ export {
   Runner,
   Agent
 };
-//# sourceMappingURL=chunk-7LJ7KDPI.js.map
+//# sourceMappingURL=chunk-ERD4ICVB.js.map

package/dist/{chunk-EK7IW2FR.js → chunk-ETTCGPBT.js}

@@ -107,7 +107,7 @@ import {
   withNativeSynchronousCommandCollection,
   withProviderError,
   withSandboxProviderCapture
-} from "./chunk-5WJOPANS.js";
+} from "./chunk-Y5THZH5N.js";
 import {
   applyLocalSourceManifestEntryToState,
   applyLocalSourceManifestToState,
@@ -122,13 +122,13 @@ import {
   truncateOutput,
   validateCredentialPair,
   validateRemoteSandboxPathForManifest
-} from "./chunk-YG26XE7B.js";
+} from "./chunk-JYDG2A7H.js";
 import {
   NoopSnapshotSpec,
   normalizeSandboxClientCreateArgs,
   resolveSandboxArchiveLimits,
   validateSandboxArchiveLimits
-} from "./chunk-NWS4HPB7.js";
+} from "./chunk-MIAL5I4O.js";
 import {
   Manifest,
   Permissions,
@@ -160,7 +160,7 @@ import {
   serializeRuntimeEnvironmentForPersistence,
   shellQuote,
   withSandboxSpan
-} from "./chunk-7LJ7KDPI.js";
+} from "./chunk-ERD4ICVB.js";
 
 // src/sandbox/index.ts
 import { collectSandboxEnvironment, parseExposedPorts } from "@opengeni/config";
@@ -11572,6 +11572,23 @@ var SelfhostedSession = class {
         reason: null,
         retryable: false
       });
+      if (!terminalProof && !adoptedCommandId && !controlError.neverSent && machineStoppedAnswering(controlError) && this.adoptBackgroundCommand) {
+        try {
+          notifyDurableOpOwnershipTransferStarted(opId);
+          const abandoned = await this.adoptBackgroundCommand({
+            controlWorkspaceId: admission.controlWorkspaceId,
+            enrollmentId: this.agentId,
+            connectionInstanceId: admission.connectionInstanceId,
+            opId,
+            command,
+            abandoned: true
+          });
+          adoptedCommandId = abandoned.commandId;
+          notifyDurableOpOwnershipTransferred(opId);
+        } catch {
+          notifyDurableOpOwnershipTransferFailed(opId);
+        }
+      }
       this.emitOp({
         op: "exec",
         outcome: "failed",
@@ -12540,6 +12557,10 @@ function mediaTypeFromPath(path) {
   if (p.endsWith(".svg") || p.endsWith(".svgz")) return "image/svg+xml";
   return void 0;
 }
+function machineStoppedAnswering(error) {
+  const faultClass = selfhostedFaultClass(error);
+  return faultClass === "offline" || faultClass === "reconnecting" || faultClass === "draining";
+}
 function randomNonce() {
   return String(Math.floor(Math.random() * Number.MAX_SAFE_INTEGER));
 }
@@ -14562,6 +14583,28 @@ function placementControllerWorkdir(session) {
   if (!session.ensureBrowserControl) return MANAGED_PLACEMENT_CONTROLLER_WORKDIR;
   return session.controllerHostOs?.() === "windows" ? "." : NATIVE_PLACEMENT_CONTROLLER_WORKDIR;
 }
+var BROWSER_WORKING_COPY_REFUSALS = [
+  "unsupported_platform",
+  "browser_running",
+  "working_copy_invalid",
+  "receipt_not_adoptable",
+  "authority_changed",
+  "process_state_unknown",
+  "adoption_not_needed",
+  "adoption_unresolved"
+];
+var BROWSER_WORKING_COPY_ADOPTION_PHASES = [
+  "intent",
+  "copied",
+  "receipt",
+  "source_preserved",
+  "adopted",
+  "interrupted",
+  "failed",
+  "collision",
+  "reverting",
+  "reverted"
+];
 var BrowserControlTransportError = class extends Error {
   name = "BrowserControlTransportError";
   retryable = true;
@@ -14743,7 +14786,8 @@ var BrowserControlClient = class {
     }
     return {
       ...returnedReference,
-      observation: BrowserObservation.parse(data.observation)
+      observation: BrowserObservation.parse(data.observation),
+      ...creationTargets(data.targets, returnedReference)
     };
   }
   async createComputerSession(input) {
@@ -14926,6 +14970,86 @@ var BrowserControlClient = class {
     }
     return receipt;
   }
+  /** Read-only evidence about a preserved working copy whose controller
+   * memory was lost: the exact digest of its bytes and whether it can be
+   * adopted. Hashing a large profile can take minutes. */
+  async inspectWorkingCopy(input) {
+    const reference = parseReference(input);
+    const data = await this.requestJson({
+      method: "POST",
+      path: `/v1/browser-sessions/${reference.browserSessionId}/working-copy/inspection`,
+      token: this.adminToken,
+      body: workingCopyAuthorityBody(reference, input),
+      timeoutMs: BROWSER_STATE_TRANSFER_TIMEOUT_MS
+    });
+    return parseWorkingCopyInspection(data, reference);
+  }
+  /** Adopt the exact inspected bytes of a preserved working copy. A lost reply
+   * is checked with {@link workingCopyAdoption}. Sending the same operation id
+   * again never repeats a side effect: it only settles what that operation
+   * already did, under the authority that approved it. */
+  async adoptWorkingCopy(input) {
+    const reference = parseReference(input);
+    const operationId = requireUuid(input.operationId, "working copy adoption id");
+    const data = await this.requestJson({
+      method: "POST",
+      path: `/v1/browser-sessions/${reference.browserSessionId}/working-copy/adoptions`,
+      token: this.adminToken,
+      body: {
+        ...workingCopyAuthorityBody(reference, input),
+        operationId,
+        manifestDigest: sha2563(input.manifestDigest, "working copy manifest digest")
+      },
+      timeoutMs: BROWSER_STATE_TRANSFER_TIMEOUT_MS
+    });
+    const adoption = parseWorkingCopyAdoption(data, reference, "current");
+    if (adoption.operationId !== operationId) {
+      throw new BrowserControlProtocolError("browser controller returned another adoption");
+    }
+    return adoption;
+  }
+  /** The recorded state of one adoption, read without changing it. */
+  async workingCopyAdoption(reference, operationId) {
+    const binding2 = parseReference(reference);
+    const id = requireUuid(operationId, "working copy adoption id");
+    const data = await this.requestJson({
+      method: "GET",
+      path: `/v1/browser-sessions/${binding2.browserSessionId}/working-copy/adoptions/${id}`,
+      token: this.adminToken
+    });
+    if (!isRecord2(data) || typeof data.inFlight !== "boolean") {
+      throw new BrowserControlProtocolError(
+        "browser controller returned malformed adoption status"
+      );
+    }
+    const adoption = data.adoption === null ? null : parseWorkingCopyAdoption(data.adoption, binding2, "recorded");
+    if (adoption && adoption.operationId !== id) {
+      throw new BrowserControlProtocolError("browser controller returned another adoption");
+    }
+    return { inFlight: data.inFlight, adoption };
+  }
+  /** Revert one unfinished adoption under the browser's current authority:
+   * its own directory goes back to the live path and the staged copy is
+   * kept. Retrying the same revert finishes one that stopped part way. */
+  async revertWorkingCopyAdoption(input) {
+    const reference = parseReference(input);
+    const id = requireUuid(input.operationId, "working copy adoption id");
+    const data = await this.requestJson({
+      method: "POST",
+      path: `/v1/browser-sessions/${reference.browserSessionId}/working-copy/adoptions/${id}/revert`,
+      token: this.adminToken,
+      body: workingCopyAuthorityBody(reference, input),
+      timeoutMs: BROWSER_STATE_TRANSFER_TIMEOUT_MS
+    });
+    if (!isRecord2(data) || typeof data.inFlight !== "boolean") {
+      throw new BrowserControlProtocolError("browser controller returned malformed revert status");
+    }
+    const adoption = data.adoption === null ? null : parseWorkingCopyAdoption(data.adoption, reference, "recorded");
+    if (adoption && adoption.operationId !== id) {
+      throw new BrowserControlProtocolError("browser controller returned another adoption");
+    }
+    return { inFlight: data.inFlight, adoption };
+  }
   sessionClient(input) {
     return new BrowserControlSessionClient(this, input);
   }
@@ -16291,6 +16415,17 @@ function parseReference(value) {
     controllerGeneration: requireGeneration(value.controllerGeneration)
   };
 }
+function creationTargets(value, reference) {
+  if (!Array.isArray(value) || value.length > 1e4) return {};
+  const targets = [];
+  for (const entry of value) {
+    const parsed = BrowserTarget.safeParse(entry);
+    if (!parsed.success || parsed.data.browserSessionId !== reference.browserSessionId || parsed.data.controllerGeneration !== reference.controllerGeneration)
+      return {};
+    targets.push(parsed.data);
+  }
+  return { targets };
+}
 function parseComputerReference(value) {
   if (!isRecord2(value)) {
     throw new BrowserControlProtocolError("computer session binding is invalid");
@@ -16427,6 +16562,81 @@ function boundedProxyUrl(value) {
   }
   return url.toString();
 }
+function workingCopyAuthorityBody(reference, input) {
+  return {
+    controllerGeneration: reference.controllerGeneration,
+    tokenGeneration: positiveSafeInteger(input.tokenGeneration, "token generation"),
+    controlToken: requireToken(input.controlToken, "control token"),
+    viewToken: requireToken(input.viewToken, "view token")
+  };
+}
+function parseWorkingCopyAdoption(value, reference, generation) {
+  if (!isRecord2(value) || value.browserSessionId !== reference.browserSessionId || generation === "current" && value.controllerGeneration !== reference.controllerGeneration || !BROWSER_WORKING_COPY_ADOPTION_PHASES.includes(
+    value.phase
+  ) || !(value.failureCode === null || typeof value.failureCode === "string") || !Array.isArray(value.retainedDirectories) || value.retainedDirectories.length > 64 || !value.retainedDirectories.every(
+    (name) => typeof name === "string" && /^[A-Za-z0-9][A-Za-z0-9._-]{0,255}$/u.test(name)
+  )) {
+    throw new BrowserControlProtocolError("browser controller returned a malformed adoption");
+  }
+  return {
+    browserSessionId: reference.browserSessionId,
+    controllerGeneration: generation === "current" ? reference.controllerGeneration : requireGeneration(value.controllerGeneration),
+    operationId: requireUuid(value.operationId, "working copy adoption id"),
+    manifestDigest: sha2563(value.manifestDigest, "working copy manifest digest"),
+    phase: value.phase,
+    failureCode: value.failureCode === null ? null : requireOpaqueId(value.failureCode, "failure code"),
+    retainedDirectories: value.retainedDirectories,
+    createdAt: timestamp(value.createdAt, "adoption created at"),
+    updatedAt: timestamp(value.updatedAt, "adoption updated at")
+  };
+}
+function parseWorkingCopyInspection(value, reference) {
+  if (!isRecord2(value) || value.browserSessionId !== reference.browserSessionId || value.controllerGeneration !== reference.controllerGeneration || typeof value.platformSupported !== "boolean" || typeof value.profileIdentityMatches !== "boolean" || !(value.profileInUse === null || typeof value.profileInUse === "boolean") || !(value.refusal === null || BROWSER_WORKING_COPY_REFUSALS.includes(value.refusal))) {
+    throw new BrowserControlProtocolError("browser controller returned a malformed inspection");
+  }
+  let manifest = null;
+  if (value.manifest !== null) {
+    if (!isRecord2(value.manifest)) {
+      throw new BrowserControlProtocolError("browser controller returned a malformed manifest");
+    }
+    manifest = {
+      digest: sha2563(value.manifest.digest, "working copy manifest digest"),
+      entries: nonnegativeSafeInteger(value.manifest.entries, "working copy entries"),
+      bytes: nonnegativeSafeInteger(value.manifest.bytes, "working copy bytes"),
+      excluded: excludedWorkingCopyEntries(value.manifest.excluded)
+    };
+  }
+  let receipt = null;
+  if (value.receipt !== null) {
+    const raw = value.receipt;
+    if (!isRecord2(raw) || !["launch", "suspend", "retire", "adopt"].includes(raw.intent) || typeof raw.state !== "string" || typeof raw.directoryLaunchAllowed !== "boolean" || typeof raw.authorityMatches !== "boolean" || !(raw.restoreAuthorityDigest === null || typeof raw.restoreAuthorityDigest === "string") || !(raw.adoption === null || isRecord2(raw.adoption))) {
+      throw new BrowserControlProtocolError("browser controller returned a malformed receipt");
+    }
+    receipt = {
+      operationId: requireUuid(raw.operationId, "working runtime receipt id"),
+      intent: raw.intent,
+      state: requireOpaqueId(raw.state, "working runtime receipt state"),
+      directoryLaunchAllowed: raw.directoryLaunchAllowed,
+      authorityMatches: raw.authorityMatches,
+      launchedFromCheckpoint: raw.restoreAuthorityDigest !== null,
+      adoption: isRecord2(raw.adoption) ? {
+        operationId: requireUuid(raw.adoption.operationId, "working copy adoption id"),
+        manifestDigest: sha2563(raw.adoption.manifestDigest, "working copy manifest digest")
+      } : null
+    };
+  }
+  return {
+    browserSessionId: reference.browserSessionId,
+    controllerGeneration: reference.controllerGeneration,
+    platformSupported: value.platformSupported,
+    refusal: value.refusal,
+    manifest,
+    profileIdentityMatches: value.profileIdentityMatches,
+    profileInUse: value.profileInUse,
+    receipt,
+    activeAdoption: value.activeAdoption === null || value.activeAdoption === void 0 ? null : parseWorkingCopyAdoption(value.activeAdoption, reference, "recorded")
+  };
+}
 function parseStateCaptureReceipt(value) {
   if (!isRecord2(value) || !isRecord2(value.manifest)) {
     throw new BrowserControlProtocolError(
@@ -17022,6 +17232,14 @@ function nonnegativeSafeInteger(value, label) {
   }
   return value;
 }
+function excludedWorkingCopyEntries(value) {
+  if (!Array.isArray(value) || value.length > 16 || !value.every((entry) => typeof entry === "string" && entry.length > 0 && entry.length <= 256)) {
+    throw new BrowserControlProtocolError(
+      "browser controller returned malformed working copy exclusions"
+    );
+  }
+  return [...value];
+}
 function parseUnsignedInteger(value, label) {
   const trimmed = value.trim();
   if (!/^(0|[1-9][0-9]*)$/u.test(trimmed)) {
@@ -20554,4 +20772,4 @@ export {
   collectSandboxEnvironment2 as collectSandboxEnvironment,
   parseExposedPorts2 as parseExposedPorts
 };
-//# sourceMappingURL=chunk-EK7IW2FR.js.map
+//# sourceMappingURL=chunk-ETTCGPBT.js.map