@opengeni/runtime 4.3.0 → 4.4.0-canary.36927100590001

package/dist/claude-subscription-usage.d.ts

@@ -1,5 +1,7 @@
 type Observer = (providerId: string, response: Response) => void;
+type Prepare = (providerId: string, headers: Headers) => Promise<Headers>;
 /** Like Codex usage headers: free observations within this turn's provider context. */
-export declare function withClaudeUsageObserver<T>(observer: Observer, run: () => Promise<T>): Promise<T>;
+export declare function withClaudeUsageObserver<T>(observer: Observer, run: () => Promise<T>, prepare?: Prepare): Promise<T>;
+export declare function prepareClaudeSubscriptionRequest(providerId: string, input: Parameters<typeof fetch>[0], init?: RequestInit): Promise<RequestInit | undefined>;
 export declare function observeClaudeUsageResponse(providerId: string, response: Response): void;
 export {};

package/dist/first-party-client.d.ts

@@ -14,6 +14,7 @@ export declare function createFirstPartyAttemptClient(input: {
     };
     selectedTools: readonly FirstPartyMcpToolName[];
     permissions?: readonly Permission[];
+    credentialRestriction?: "developer_setup";
     fetch?: typeof fetch;
     signal?: AbortSignal;
 }): OpenGeniClient;

package/dist/index.d.ts

@@ -9,7 +9,7 @@ import { type SkillCatalogDescriptor } from "./skill-catalog.js";
 export { formatSkillCatalog, skillCatalogEntryIds, type SkillCatalogDescriptor, } from "./skill-catalog.js";
 import { AttemptToolEnvironment, type AttemptToolAuthorization, type AttemptToolDefinition } from "@opengeni/codemode";
 import { type ToolGateway, type ToolGatewayAuthorization, type ToolGatewayDefinition } from "@opengeni/tool-gateway";
-import { GenerateImageToolInput, type AttemptToolCatalog, type AttemptToolResult as AttemptToolResultValue, type GitCredentialProvider, type GitCredentialTransport, type HumanInputResponse, type McpServerConnectionRef, type Permission, type FirstPartyMcpToolName, type LatencyMode, type ReasoningEffort, type ResourceRef, type SessionGoalSnapshot, type ToolAuthNeededPayload, type ToolGatewayCaller, type ToolGatewayCatalog, type ToolGatewayCatalogEntry, type ToolDisplayMetadata, type ToolRef, type VideoGenerationCapabilities, type VideoGenerationToolResult, type ToolFamily } from "@opengeni/contracts";
+import { GenerateImageToolInput, type ResolvedAgentConfig, type AttemptToolCatalog, type AttemptToolResult as AttemptToolResultValue, type GitCredentialProvider, type GitCredentialTransport, type HumanInputResponse, type McpServerConnectionRef, type Permission, type FirstPartyMcpToolName, type LatencyMode, type ReasoningEffort, type ResourceRef, type SessionGoalSnapshot, type ToolAuthNeededPayload, type ToolGatewayCaller, type ToolGatewayCatalog, type ToolGatewayCatalogEntry, type ToolDisplayMetadata, type ToolRef, type VideoGenerationCapabilities, type VideoGenerationToolResult, type ToolFamily } from "@opengeni/contracts";
 export { renderSessionGoalContext } from "@opengeni/contracts";
 import { McpAggregateToolListBudget } from "./mcp-network.js";
 import { type LazyToolTransport } from "./lazy-tool-transport.js";
@@ -21,6 +21,8 @@ export { GMAIL_REST_API_BASE, GMAIL_REST_MCP_TOOLS, GmailRestMcpServer, OFFICIAL
 import { Agent, RunState, RunContext, type AgentInputItem, type CallModelInputFilter, type MCPServer, type Model, type ModelRequest, type SerializedTool, type Tool } from "@openai/agents";
 import { Capabilities, Manifest, type SandboxClient, type SandboxSessionLike, type SandboxSessionState } from "@openai/agents/sandbox";
 import OpenAI from "openai";
+import { type AgentPromptResources, type RigInstructionsContext, type WorkspaceEnvironmentContext } from "./agent-instructions/index.js";
+export { AGENT_PROMPT_MODULES, DEFAULT_AGENT_IDENTITY, INSTRUCTION_PRECEDENCE, SESSION_INSTRUCTIONS_PREAMBLE, composeModularAgentInstructions, composeOperationalContract, identityFromLegacyTemplate, resolveAgentIdentity, rigInstructions, workspaceEnvironmentInstructions, type AgentPromptContext, type AgentPromptResources, type ComposeModularAgentInstructionsInput, type ModularInstructionLayer, type RigInstructionsContext, type WorkspaceEnvironmentContext, } from "./agent-instructions/index.js";
 import { type ProviderContextTokenSignal } from "./context-compaction.js";
 import { type RunCredentialSessionReady } from "./sandbox/index.js";
 import { sandboxCommandExitCode, sandboxCommandOutput, sandboxCommandStillRunning, sandboxCommandStdout } from "./sandbox/command-result.js";
@@ -35,13 +37,15 @@ import { type WorkspaceSkillSearchPath } from "./workspace-skills.js";
 import { type EffectiveSkillSelection, type RuntimeSkillActivation, type RuntimeSkillIndexEntry } from "./runtime-skills.js";
 export { composeRuntimeSkills, loadNativeToolSkillArtifacts, readRuntimeSkill, skillCatalogFromComposition, type EffectiveSkillSelection, type InstalledSkillActivation, type NativeToolSkillSet, type RuntimeSkillActivation, type RuntimeSkillArtifact, type RuntimeSkillArtifactFile, type RuntimeSkillComposition, type RuntimeSkillDescriptor, type RuntimeSkillIndexEntry, type SessionSkillActivation, } from "./runtime-skills.js";
 import { type PersistentAgentInstructionInspection } from "./model-context-inspector.js";
+import { type ModelCallLifecycle } from "./model-request-capture.js";
+export { beforeModelRequest as awaitModelCallAdmission } from "./model-request-capture.js";
 import { type ModelPreparationMeasurement } from "./model-preparation-diagnostics.js";
 import type { ModelResponseUsage, NormalizedRuntimeEvent, SerializedHumanInputInterruption, SerializedInteractionInterventionInterruption } from "./run-events.js";
 export { buildPortableSkillArtifact, getSkillLibraryEntry, isSkillLibraryEntryId, listSkillLibraryEntries, loadSkillLibrarySkill, PORTABLE_SKILL_MAX_FILE_BYTES, PORTABLE_SKILL_MAX_FILES, PORTABLE_SKILL_MAX_TOTAL_BYTES, parsePortableSkillFrontmatter, skillLibraryRepositoryUrl, skillArtifactContentSha256, type PortableSkillArtifact, type SkillLibraryEntry, type SkillLibraryFile, type SkillLibrarySkill, } from "./skill-library.js";
 export { MCP_LIFECYCLE_OUTCOMES, MCP_LIFECYCLE_PHASES, MCP_LIFECYCLE_POLICIES, MCP_TOOL_CALL_OUTCOMES, SANDBOX_READINESS_REPLACEMENT_OUTCOMES, type McpLifecycleOutcome, type McpLifecyclePhase, type McpLifecyclePolicy, type McpToolCallOutcome, type RuntimeMetricsHooks, type SandboxReadinessReplacementOutcome, } from "./metrics.js";
 export type { ModelPreparationMeasurement, ModelPreparationPhase, } from "./model-preparation-diagnostics.js";
 export { markModelPreparationFirstSandboxOperation, recordModelPreparationMeasurement, } from "./model-preparation-diagnostics.js";
-export { CodexSubscriptionUnavailableError, OrganizationGatewayUnavailableError, OrganizationOpenRouterUnavailableError, MultiProviderModelProvider, OpenGeniChatCompletionsModel, OpenGeniResponsesModel, UNKNOWN_MODEL_FINISH_REASON_CODE, UnknownModelFinishReasonError, WorkspaceGatewayUnavailableError, WorkspaceOpenRouterUnavailableError, WorkspaceModelPolicyBlockedError, XaiSubscriptionUnavailableError, azureOpenAIDefaultQuery, buildModelInstance, buildOpenAIClientFromSettings, buildProviderClient, configureOpenAI, configureRuntimeMetricsHooks, modelRequestPolicyForProvider, normalizeVercelGatewayRequestBody, resolveTurnModel, vercelGatewayRoutingFetch, } from "./model-provider.js";
+export { CodexSubscriptionUnavailableError, OrganizationGatewayUnavailableError, OrganizationOpenRouterUnavailableError, MultiProviderModelProvider, OpenGeniChatCompletionsModel, OpenGeniResponsesModel, ResponsesStreamingTerminalError, UNKNOWN_MODEL_FINISH_REASON_CODE, UnknownModelFinishReasonError, WorkspaceGatewayUnavailableError, WorkspaceOpenRouterUnavailableError, WorkspaceModelPolicyBlockedError, XaiSubscriptionUnavailableError, azureOpenAIDefaultQuery, buildModelInstance, buildOpenAIClientFromSettings, buildProviderClient, configureOpenAI, configureRuntimeMetricsHooks, modelRequestPolicyForProvider, normalizeVercelGatewayRequestBody, resolveTurnModel, vercelGatewayRoutingFetch, } from "./model-provider.js";
 export { appendWorkspaceGovernance, CompanyProfilePromptLimitError, hasActiveWorkspaceInstructionPolicy, renderWorkspaceGovernanceContext, WorkspaceGovernancePromptLimitError, type WorkspaceGovernanceContext, } from "./workspace-governance.js";
 export { buildModelContextSnapshot, buildModelContextSnapshotFromRequest, createModelVisibleContextCaptureFilter, joinPersistentAgentInstructionLayers, type PersistentAgentInstructionInspection, type PersistentAgentInstructionLayerDraft, } from "./model-context-inspector.js";
 export { createTurnToolCancellationController, TurnSandboxCommandCancelledError, } from "./sandbox/turn-tool-cancellation.js";
@@ -376,6 +380,8 @@ export type AttemptConnectorActionBinding = {
     resultOutcome?: (output: unknown) => "not_executed" | "uncertain" | null;
 };
 export type BuildAgentOptions = {
+    /** Durable router use survives capability and tool-policy changes. */
+    toolRouterInHistory?: boolean;
     /** Live authority fence for intrinsic sandbox tools outside the MCP gateway. */
     authorizeAttemptExecution?: () => Promise<void> | void;
     /** Trusted attempt-local wait receipt shared with prepared tools. */
@@ -501,6 +507,24 @@ export type BuildAgentOptions = {
      * metadata no longer enters the prompt-cache-critical system instructions.
      */
     persistentSessionSettings?: PersistentSessionSettings;
+    /**
+     * The session's frozen agent configuration. Absent or null keeps the legacy
+     * instructions byte-for-byte and the historical tool/provider request surface;
+     * a configuration selects the modular composer (identity, base behavior,
+     * runtime mechanics, capability modules) and gates tool families.
+     */
+    agentConfig?: ResolvedAgentConfig | null;
+    /**
+     * Modular composer only: the workspace identity tier (explicit workspace
+     * default identity, else the legacy `agentInstructions` persona). Unlike
+     * `instructionsTemplate`, workspace governance never drops it.
+     */
+    workspaceAgentIdentity?: string;
+    /**
+     * Modular composer only: resource facts for module selection. Derived from
+     * the build resources and options when omitted.
+     */
+    agentPromptResources?: AgentPromptResources;
     instructionsTemplate?: string;
     sessionInstructions?: string;
     skillActivations?: readonly RuntimeSkillActivation[];
@@ -521,36 +545,10 @@ export type BuildAgentOptions = {
      */
     onToolCancellationFence?: (fence: TurnToolCancellationFence) => void;
 };
-/**
- * Operator-facing metadata for the workspace environment attached to a run.
- * Surfaced verbatim in the agent instructions: the description is where
- * operators document how the exported credentials are meant to be used
- * (e.g. which variable holds a deploy key and how to clone with it), so an
- * agent must not have to rediscover that by enumerating `env` and guessing.
- * Only metadata belongs here — never variable values.
- */
-export type WorkspaceEnvironmentContext = {
-    name: string;
-    description?: string | null;
-    variableNames?: string[];
-};
 /** @deprecated Persistent display metadata is no longer model-visible. */
 export type PersistentSessionSettings = {
     titleIsSet: boolean;
 };
-/**
- * The rig a session rides (M3): its name + the active version pinned onto the
- * session. Surfaced verbatim in the non-bypassable CORE instructions so the
- * agent understands its sandbox is a disposable fork of a shared, versioned
- * machine definition and how to promote a durable change. Absent for rig-less
- * sessions (the block never renders).
- */
-export type RigInstructionsContext = {
-    name: string;
-    version: number;
-};
-export declare function rigInstructions(rig: RigInstructionsContext): string[];
-export declare function workspaceEnvironmentInstructions(environment: WorkspaceEnvironmentContext): string[];
 /**
  * The non-bypassable CORE of the agent instructions: the goal-loop ownership
  * line (which names the opengeni__goal_* tools and is what keeps a long-running
@@ -590,6 +588,11 @@ export declare function appendPersistentSessionSettings(composed: string, _setti
  * An absent/blank value returns the composed string byte-for-byte.
  */
 export declare function appendWorkspaceMemory(composed: string, workspaceMemory?: string): string;
+/**
+ * Resource facts for modular module selection. Every input is a session- or
+ * turn-level fact, so the composed prefix changes only when they change.
+ */
+export declare function agentPromptResourcesFor(settings: Settings, resources: readonly ResourceRef[], options: Pick<BuildAgentOptions, "activeSandboxBackend" | "fileResourceDownloads" | "gitCredentialBindings" | "gitTokenSeed" | "gitTokenSeeds" | "workspaceEnvironment" | "rig">): AgentPromptResources;
 export declare function inspectPersistentAgentInstructions(settings: Settings, options: BuildAgentOptions): PersistentAgentInstructionInspection;
 /**
  * Appends the generic programmatic-tool-calling (codemode) directive to the
@@ -749,6 +752,8 @@ export type PrepareToolsOptions = {
     executionGeneration?: number;
     subjectId?: string;
     subjectLabel?: string;
+    /** Trusted immutable setup ceiling from the accepted execution policy. */
+    credentialRestriction?: "developer_setup";
     credentialSubjectId?: string;
     initiatingHumanSubjectId?: string | null;
     initiatingHumanExternalIdentity?: {
@@ -1039,6 +1044,10 @@ export declare function restoreInterruptedRunState(agent: Agent<any, any>, seria
 export declare const TURN_OPERATIONAL_NOTICE_PREFIX = "[OpenGeni turn-scoped operational notice]\n";
 export declare function prepareRunInput(agent: Agent<any, any>, input: AgentSegmentInput, options?: PrepareInputOptions): Promise<PreparedAgentInput>;
 export type RunAgentStreamOptions = {
+    /** Producer-side gate before calling any resolved model/provider. */
+    beforeModelRequest?: ModelCallLifecycle["beforeModelRequest"];
+    /** Register terminal response settlement before the next producer model request. */
+    onModelResponse?: ModelCallLifecycle["onModelResponse"];
     /** Abort the provider/tool loop when the owning activity is cancelled. */
     signal?: AbortSignal;
     /** Nonblocking phase measurements for request preparation before provider I/O. */

package/dist/index.js

@@ -1,4 +1,5 @@
 import {
+  AGENT_PROMPT_MODULES,
   AssistantMessagePhaseTracker,
   CODEMODE_PROGRAMMATIC_DIRECTIVE,
   CODE_SEARCH_DIRECTIVE,
@@ -18,10 +19,12 @@ import {
   ConnectorActionBindingRejectedError,
   ConnectorActionExecutionError,
   ConnectorAttachmentTransferError,
+  DEFAULT_AGENT_IDENTITY,
   DEFAULT_COMPACTION_THRESHOLD_RATIO,
   EmptyCompactionSummaryError,
   GENESIS_TITLE_DIRECTIVE,
   HUMAN_INPUT_TOOL_NAME,
+  INSTRUCTION_PRECEDENCE,
   INTERACTION_ATTEMPT_TOOL_NAMES,
   InputWaitYield,
   MAX_COMPACTION_THRESHOLD_RATIO,
@@ -52,9 +55,11 @@ import {
   REMOTE_COMPACTION_V2_BETA_FEATURE,
   REMOTE_COMPACTION_V2_IMPLEMENTATION,
   REMOTE_V2_RETAINED_MESSAGE_TOKEN_BUDGET,
+  ResponsesStreamingTerminalError,
   RunMcpCredentialError,
   RunMcpCredentials,
   SANDBOX_READINESS_REPLACEMENT_OUTCOMES,
+  SESSION_INSTRUCTIONS_PREAMBLE,
   SESSION_TITLE_GENERATION_INPUT_MAX_CHARACTERS,
   SESSION_TITLE_GENERATION_INSTRUCTIONS,
   SESSION_TITLE_GENERATION_MAX_OUTPUT_TOKENS,
@@ -72,6 +77,7 @@ import {
   WorkspaceModelPolicyBlockedError,
   WorkspaceOpenRouterUnavailableError,
   XaiSubscriptionUnavailableError,
+  agentPromptResourcesFor,
   agentsErrorRunState,
   appendCodemodeInstructions,
   appendGenesisTitleDirective,
@@ -87,6 +93,7 @@ import {
   attemptToolCallMeta,
   azureCliLoginCommand,
   azureOpenAIDefaultQuery,
+  beforeModelRequest,
   boundModelToolOutputsFilterForSettings,
   buildAgentCapabilities,
   buildCompactionPromptInput,
@@ -115,6 +122,8 @@ import {
   compactionSummaryOutputTokens,
   compactionThresholdTokens,
   composeAgentInstructions,
+  composeModularAgentInstructions,
+  composeOperationalContract,
   composeRuntimeSkills,
   computerUse,
   configureOpenAI,
@@ -160,6 +169,7 @@ import {
   hasCanonicalEditableArtifactToolSurface,
   hasModelGeneratedItem,
   hasOpaqueProviderArtifact,
+  identityFromLegacyTemplate,
   incrementalModelInputProjectionFilter,
   inspectPersistentAgentInstructions,
   interruptionKindForCallItem,
@@ -231,6 +241,7 @@ import {
   repositoryUsesSandboxClone,
   repositoryWorkspaceSkillPathsOption,
   requestRemoteCompactionV2,
+  resolveAgentIdentity,
   resolveTurnModel,
   restoreGenericDispatchHistoryItems,
   restoreInterruptedRunState,
@@ -283,7 +294,7 @@ import {
   workspaceEnvironmentInstructions,
   wrapAttemptToolDefinitions,
   wrapAttemptToolExecute
-} from "./chunk-22M75RJF.js";
+} from "./chunk-ZY655LYR.js";
 import {
   ActiveBackendUnresolvableError,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
@@ -447,6 +458,7 @@ import {
   inspectRecordingArtifact,
   isConnectedMachineAbsolutePath,
   isExecSessionLostBanner,
+  isModalCommandStartOutcomeUnknownError,
   isModalTaskExecStartPreDispatchUnavailableError,
   isOpenSandboxLifecycleProxyPath,
   isProviderApiThrottleError,
@@ -494,6 +506,7 @@ import {
   recordingStorageKey,
   redactOpenSandboxSignedUriPath,
   relativeConnectedMachinePath,
+  renderRoutingMutationOutcomeUnknownToolResult,
   renderSelfhostedFault,
   renewSandboxProviderExpiration,
   repairSerializedRunStateExposedPorts,
@@ -560,7 +573,7 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   withoutSandboxProviderIdentity
-} from "./chunk-JUFVYQCY.js";
+} from "./chunk-VDXKKMMD.js";
 import "./chunk-7KVMU7O3.js";
 import "./chunk-4A4XTKKX.js";
 import "./chunk-GUJMCB7F.js";
@@ -591,6 +604,7 @@ import {
 } from "./chunk-ISNIWRWB.js";
 import "./chunk-PZ5AY32C.js";
 export {
+  AGENT_PROMPT_MODULES,
   ActiveBackendUnresolvableError,
   AssistantMessagePhaseTracker,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
@@ -634,6 +648,7 @@ export {
   ConnectorActionBindingRejectedError,
   ConnectorActionExecutionError,
   ConnectorAttachmentTransferError,
+  DEFAULT_AGENT_IDENTITY,
   DEFAULT_COMPACTION_THRESHOLD_RATIO,
   DEFAULT_DESKTOP_GEOMETRY,
   DESKTOP_STREAM_PORT,
@@ -651,6 +666,7 @@ export {
   GMAIL_REST_MCP_TOOLS,
   GmailRestMcpServer,
   HUMAN_INPUT_TOOL_NAME,
+  INSTRUCTION_PRECEDENCE,
   INTERACTION_ATTEMPT_TOOL_NAMES,
   InMemoryOpStreamTransport,
   InputWaitYield,
@@ -704,6 +720,7 @@ export {
   REPOSITORY_DISCOVERY_LIMIT,
   RecordingError,
   RecordingUnavailableError,
+  ResponsesStreamingTerminalError,
   RoutingActiveRouteChangedError,
   RoutingBackendRecoveryRequiredError,
   RoutingMutationOutcomeUnknownError,
@@ -727,6 +744,7 @@ export {
   SELFHOSTED_RETRY_BACKOFF_CAP_MS,
   SELFHOSTED_RETRY_BACKOFF_FACTOR,
   SELFHOSTED_TIMEOUT_MAX_RETRIES,
+  SESSION_INSTRUCTIONS_PREAMBLE,
   SESSION_TITLE_GENERATION_INPUT_MAX_CHARACTERS,
   SESSION_TITLE_GENERATION_INSTRUCTIONS,
   SESSION_TITLE_GENERATION_MAX_OUTPUT_TOKENS,
@@ -773,6 +791,7 @@ export {
   WorkspaceOpenRouterUnavailableError,
   XaiSubscriptionUnavailableError,
   agentErrorToControlError,
+  agentPromptResourcesFor,
   agentsErrorRunState,
   appendCodemodeInstructions,
   appendGenesisTitleDirective,
@@ -790,6 +809,7 @@ export {
   assertProviderRegistryInvariants,
   assertSafeRelPath,
   attemptToolCallMeta,
+  beforeModelRequest as awaitModelCallAdmission,
   azureCliLoginCommand,
   azureOpenAIDefaultQuery,
   backendSupportsOs,
@@ -837,6 +857,8 @@ export {
   compactionSummaryOutputTokens,
   compactionThresholdTokens,
   composeAgentInstructions,
+  composeModularAgentInstructions,
+  composeOperationalContract,
   composeRuntimeSkills,
   computerUse,
   configureOpenAI,
@@ -920,6 +942,7 @@ export {
   hasModelGeneratedItem,
   hasOpaqueProviderArtifact,
   hasPersistableSandboxProviderIdentity,
+  identityFromLegacyTemplate,
   incrementalModelInputProjectionFilter,
   inlineWorkspaceArchiveForRestore,
   inspectModalSandboxLifecycle,
@@ -932,6 +955,7 @@ export {
   isExecSessionLostBanner,
   isMcpRequestTimeoutError,
   isMcpTransportConnectivityError,
+  isModalCommandStartOutcomeUnknownError,
   isModalTaskExecStartPreDispatchUnavailableError,
   isOfficialGmailMcpConfig,
   isOpenSandboxLifecycleProxyPath,
@@ -1040,6 +1064,7 @@ export {
   relativeConnectedMachinePath,
   releaseMcpResultCustomDataFromSdkEvent,
   renderCompactionPromptInputForChat,
+  renderRoutingMutationOutcomeUnknownToolResult,
   renderSelfhostedFault,
   renderSessionGoalContext,
   renderWorkspaceGovernanceContext,
@@ -1052,6 +1077,7 @@ export {
   repositoryWorkspaceSkillPathsOption,
   requestRemoteCompactionV2,
   requirePersistableReplacementSandboxEnvelope,
+  resolveAgentIdentity,
   resolveConnectedMachinePath,
   resolveConnectedMachineWorkspaceRoot,
   resolveModalCheckpointProviderBinding,

package/dist/input-wait-yield.d.ts

@@ -44,6 +44,10 @@ export declare class InputWaitYield {
      * rolls back the remote mutation nor replaces its durable attempt authority.
      */
     sealForSettlement(signal?: AbortSignal | undefined): Promise<void>;
+    /** A settled stream may need one final-reply handoff before attempt closure.
+     * Drain already-admitted receipts without reopening that stream's admission.
+     */
+    drainForHandoff(signal?: AbortSignal | undefined): Promise<void>;
     private endStream;
     private assertCurrent;
     private openTools;

package/dist/interaction-tools.d.ts

@@ -23,6 +23,7 @@ export type CreateFirstPartyInteractionAttemptToolsInput = Omit<CreateInteractio
     scope: AttemptToolScope;
     subjectId?: string;
     subjectLabel?: string;
+    credentialRestriction?: "developer_setup";
     fetch?: typeof globalThis.fetch;
 };
 /**

package/dist/lazy-tool-transport.d.ts

@@ -14,6 +14,7 @@ export declare class LazyToolRuntime {
     private readonly deferredMcpServerIds;
     private readonly preparationIndependentToolNames;
     private readonly modelMcpServerIds;
+    private readonly conditionalRouter;
     readonly wrappedAgents: WeakSet<object>;
     readonly wrappedModels: WeakMap<Model, Model>;
     private currentTools;
@@ -25,8 +26,11 @@ export declare class LazyToolRuntime {
     private activeAgent;
     private activeRunContext;
     readonly controlTools: Tool[];
-    constructor(transport: LazyToolTransport, mcpServerIds: ReadonlySet<string>, toolPreparationReady?: Promise<void> | undefined, deferredMcpServerIds?: ReadonlySet<string>, preparationIndependentToolNames?: ReadonlySet<string>, modelMcpServerIds?: () => ReadonlyMap<string, string>);
+    private routerWasExposed;
+    constructor(transport: LazyToolTransport, mcpServerIds: ReadonlySet<string>, toolPreparationReady?: Promise<void> | undefined, deferredMcpServerIds?: ReadonlySet<string>, preparationIndependentToolNames?: ReadonlySet<string>, modelMcpServerIds?: () => ReadonlyMap<string, string>, conditionalRouter?: boolean, routerInHistory?: boolean);
     hasPendingPreparation(): boolean;
+    prepareConditionalRouter(): Promise<void>;
+    visibleControlTools(): Tool[];
     ensurePrepared(): Promise<void>;
     resolveAuthorizedFunctionTool(name: string): Promise<Tool | null>;
     noteToolResolution(agent: object, runContext: unknown): void;
@@ -72,7 +76,7 @@ export declare function lazyToolRuntimeForAgent(agent: object): LazyToolRuntime
  * eager MCP tools stay in the first request; everything else is searchable.
  * Generic dispatch adds stable ordinary tool_search/tool_invoke schemas.
  */
-export declare function installLazyToolRuntime(agent: CloneCapableAgent, transport: LazyToolTransport, mcpServerIds: ReadonlySet<string>, toolPreparationReady?: Promise<void>, deferredMcpServerIds?: ReadonlySet<string>, preparationIndependentToolNames?: ReadonlySet<string>, modelMcpServerIds?: () => ReadonlyMap<string, string>): LazyToolRuntime;
+export declare function installLazyToolRuntime(agent: CloneCapableAgent, transport: LazyToolTransport, mcpServerIds: ReadonlySet<string>, toolPreparationReady?: Promise<void>, deferredMcpServerIds?: ReadonlySet<string>, preparationIndependentToolNames?: ReadonlySet<string>, modelMcpServerIds?: () => ReadonlyMap<string, string>, conditionalRouter?: boolean, routerInHistory?: boolean): LazyToolRuntime;
 /** Restore internal real-tool calls to the provider's original dispatcher transcript. */
 export declare function restoreGenericDispatchHistory(input: ModelRequest["input"]): ModelRequest["input"];
 /** Per-item form used by the run-local memoized wire projector. */

package/dist/mcp-run-credentials.d.ts

@@ -1,7 +1,8 @@
-import { CredentialProviderMcpMaterial } from "@opengeni/contracts";
+import { CredentialProviderMcpMaterial, type McpServerConnectionRef } from "@opengeni/contracts";
 export type RunMcpCredentialTarget = {
     id: string;
     url: string;
+    connectionRef?: McpServerConnectionRef | undefined;
 };
 export type RunMcpCredentialMaterial = {
     mcp?: CredentialProviderMcpMaterial;
@@ -26,7 +27,7 @@ export declare class RunMcpCredentials {
     /** Validate a complete replacement before changing any live request headers. */
     prepare(material: RunMcpCredentialMaterial | null): () => void;
     replace(material: RunMcpCredentialMaterial | null): void;
-    /** Refuse credentials for omitted, local, or rewritten server routes. */
+    /** Refuse credentials for native, omitted, local, or rewritten server routes. */
     assertRemoteTargets(targets: readonly RunMcpCredentialTarget[]): void;
     excludeLocalTarget(id: string): void;
     has(id: string): boolean;

package/dist/mcp-transport-logger.d.ts

@@ -0,0 +1,10 @@
+/** SDK cleanup warnings do not imply failed connect, discovery, or tool calls.
+ * Emit only fixed labels and the runtime's credential-safe error projection. */
+export declare function createMcpTransportLogger(serverId: string, errorFields: (error: unknown, code: "mcp_cleanup_failed" | "mcp_transport_failed", serverId: string) => unknown): {
+    namespace: string;
+    debug: () => undefined;
+    error: (message: string, ...args: unknown[]) => void;
+    warn: (message: string, ...args: unknown[]) => void;
+    dontLogModelData: boolean;
+    dontLogToolData: boolean;
+};

package/dist/model-context-inspector.d.ts

@@ -1,16 +1,32 @@
 import type { ModelRequest, RunContext, SerializedTool, Tool } from "@openai/agents";
-import type { ModelContextInstructionLayer, ModelContextInstructionLayerId, ModelContextSkill, ModelContextSnapshot } from "@opengeni/contracts";
+import type { ModelContextInstructionLayer, ModelContextInstructionLayerId, ModelContextInstructionModule, ModelContextSkill, ModelContextSnapshot } from "@opengeni/contracts";
 import type { EffectiveSkillSelection } from "./runtime-skills.js";
 export type PersistentAgentInstructionLayerDraft = {
     id: ModelContextInstructionLayerId;
     title: string;
     content: string;
+    /** Modular operational contract only: its prompt modules in order. */
+    modules?: readonly ModelContextInstructionModule[];
+    /**
+     * Separator placed before this layer. Modular layers set it; legacy layers
+     * omit it and keep the historical joins byte-for-byte.
+     */
+    joinBefore?: string;
 };
 export declare function buildProviderRequestSnapshot(input: {
     provider: string;
     body: string | null;
     unavailableReason?: string;
     requestIndex: number;
+    /**
+     * The agent's persistent instruction layers. When the wire `instructions`
+     * start with them, the snapshot names those sections (identity, the
+     * operational contract with its prompt modules, governance, ...) so an
+     * inspector can show them with titles. The wire body stays the source of
+     * truth; an unrecognized prompt yields no sections.
+     */
+    persistentLayers?: readonly PersistentAgentInstructionLayerDraft[];
+    genesisTitleDirective?: string;
 }): ModelContextSnapshot;
 export type PersistentAgentInstructionInspection = {
     layers: readonly PersistentAgentInstructionLayerDraft[];

package/dist/model-preparation-diagnostics.d.ts

@@ -6,12 +6,21 @@ export type ModelPreparationMeasurement = {
     count?: number;
 };
 type ModelPreparationObserver = (measurement: ModelPreparationMeasurement) => void;
+type ModelTransportFetch = (...args: Parameters<typeof fetch>) => ReturnType<typeof fetch>;
 export declare function withModelPreparationObserver<T>(observer: ModelPreparationObserver | undefined, callback: () => T): T;
 /** Bind one attempt-local durable checkpoint immediately before generic model
  * transport enters fetch. Cached provider clients are process-global, so this
  * authority must be async-local rather than stored on the client instance. */
 export declare function withModelTransportStartedObserver<T>(observer: (() => Promise<void> | void) | undefined, callback: () => T): T;
 export declare function recordModelTransportStarted(): Promise<void>;
+/** The OpenAI SDK retries thrown fetch errors and replaces their identity with
+ * APIConnectionError. Carry only our pre-wire refusal through its HTTP-error
+ * path, which honors the retry veto. Native transports keep the original throw.
+ * Each fetch owns its context even when concurrent turns share a cached client.
+ */
+export declare function sdkModelTransportAdmissionFetch(inner: ModelTransportFetch): ModelTransportFetch;
+/** Restore the exact host-owned error after the SDK has suppressed retries. */
+export declare function rethrowModelTransportAdmissionRefusal(headers: Headers): void;
 /** Record the first routed sandbox operation boundary without publishing an
  * overlapping parent duration. The observer receives only exclusive leaf
  * buckets; this boundary exists solely to split the surrounding SDK work. */

package/dist/model-provider-routing.d.ts

@@ -16,6 +16,10 @@ export declare class OpenGeniChatCompletionsModel extends OpenAIChatCompletionsM
 export declare class OpenGeniResponsesModel extends AppendOnlyOpenAIResponsesModel {
     protected readonly provider: ResolvedModelProvider;
     constructor(client: OpenAI, model: string, provider: ResolvedModelProvider);
+    protected _fetchResponse(request: ModelRequest, stream: false): Promise<OpenAI.Responses.Response>;
+    protected _fetchResponse(request: ModelRequest, stream: true): Promise<AsyncIterable<OpenAI.Responses.ResponseStreamEvent>>;
+    private classifiedResponseStream;
+    private ownsResponsesTerminalClassification;
     protected _buildResponsesCreateRequest(request: ModelRequest, stream: boolean): {
         requestData: Record<string, any>;
         sdkRequestHeaders: Record<string, string | null>;

package/dist/model-provider.d.ts

@@ -1,4 +1,5 @@
 import type { Settings } from "@opengeni/config";
+export { ResponsesStreamingTerminalError } from "./responses-terminal-error.js";
 export { CodexSubscriptionUnavailableError, OrganizationGatewayUnavailableError, OrganizationOpenRouterUnavailableError, UNKNOWN_MODEL_FINISH_REASON_CODE, UnknownModelFinishReasonError, WorkspaceGatewayUnavailableError, WorkspaceOpenRouterUnavailableError, WorkspaceModelPolicyBlockedError, XaiSubscriptionUnavailableError, } from "./model-provider-errors.js";
 export { azureOpenAIDefaultQuery, buildOpenAIClientFromSettings, buildProviderClient, configureRuntimeMetricsHooks, recordRuntimeMcpLifecycleMetric, recordRuntimeMcpToolCallMetric, } from "./model-provider-client.js";
 export { modelRequestPolicyForProvider, normalizeVercelGatewayRequestBody, } from "./model-provider-request-policy.js";

package/dist/model-request-capture.d.ts

@@ -3,6 +3,15 @@ export type ModelRequestCapture = ((request: ModelRequest) => void | Promise<voi
     nextProviderRequestIndex?: () => number;
     onProviderRequest?: (provider: string, body: string | null, reason?: string, index?: number) => void | Promise<void>;
 };
+/** Awaited producer-side authority, separate from observational request capture. */
+export type ModelCallLifecycle = {
+    beforeModelRequest?: () => Promise<void>;
+    /** Register before yielding so the next model entry waits for consumer settlement. */
+    onModelResponse?: (event: StreamEvent) => Promise<void>;
+};
+export declare function withModelCallLifecycle<T>(lifecycle: ModelCallLifecycle, fn: () => T): T;
+export declare function beforeModelRequest(): Promise<void>;
+export declare function modelResponseSettlement(event: StreamEvent): Promise<void> | undefined;
 /** The same agent can re-enter runAgentStream after in-activity compaction. */
 export declare function nextModelContextCaptureIndex(agent: object): number;
 export declare function withModelRequestCapture<T>(capture: ModelRequestCapture | undefined, fn: () => T): T;

package/dist/replayable-json-body.d.ts

@@ -1,4 +1,4 @@
-import OpenAI from "openai";
+import OpenAI, { type APIError } from "openai";
 import type { APIPromise } from "openai/core/api-promise";
 /** Internal fetch-init hook used only when a transport performs its own retry. */
 export declare const REPLAYABLE_REQUEST_BODY_FACTORY: unique symbol;
@@ -46,6 +46,7 @@ export declare function requestBodyText(body: BodyInit | null | undefined): Prom
 export declare class ReplayableJsonOpenAI extends OpenAI {
     private readonly modelRequestPolicy;
     constructor(options: OpenAIOptions, hooks?: ReplayableJsonOpenAIHooks);
+    protected makeStatusError(status: number, error: NonNullable<Parameters<typeof APIError.generate>[1]>, message: string | undefined, headers: Headers): APIError;
     post<Rsp>(path: string, opts?: OpenAIPostOptions): APIPromise<Rsp>;
     buildRequest(inputOptions: OpenAIBuildOptions, context?: OpenAIBuildContext): Promise<OpenAIBuildResult>;
 }

package/dist/responses-terminal-error.d.ts

@@ -0,0 +1,17 @@
+/**
+ * An unsuccessful Responses terminal, intercepted before the Agents SDK
+ * replaces its provider code/diagnostic with a generic ModelBehaviorError.
+ * Only closed provider codes grant recovery; diagnostic wording does not.
+ * The exception message is structural so SDK logs/traces cannot expose detail.
+ */
+export declare class ResponsesStreamingTerminalError extends Error {
+    readonly eventType: "response.failed" | "response.error" | "error";
+    readonly code: string | undefined;
+    readonly type: string | undefined;
+    readonly detail: string;
+    readonly headers: Headers;
+    readonly retryAfterSeconds: number | undefined;
+    readonly category: "safety" | "request" | "rate_limit" | "unavailable" | "unknown";
+    constructor(eventType: "response.failed" | "response.error" | "error", source: unknown, headers?: Headers);
+}
+export declare function responsesStreamingTerminalError(event: unknown, headers?: Headers): ResponsesStreamingTerminalError | undefined;

package/dist/sandbox/codemode-authority.d.ts

@@ -9,6 +9,7 @@ export type SandboxCodemodeAuthority = {
     turnId: string;
     attemptId: string;
     executionGeneration: number;
+    credentialRestriction?: "developer_setup";
 };
 export type MintedSandboxCodemodeToken = {
     token: string;

package/dist/sandbox/index.d.ts

@@ -19,7 +19,7 @@ export { SandboxConfigError, SandboxExactResumeInstanceUnavailableError, Sandbox
 export { PROVIDER_REGISTRY, assertProviderRegistryInvariants, buildImmutableProviderImage, isProviderApiThrottleError, prepareProviderForTeardownAfterCapture, providerSupportsImmutableImageBuild, renewSandboxProviderExpiration, providerWorkspaceCapturePolicy, type ProviderRegistration, type ProviderConstructionContext, type ProviderExactResumeMode, type ProviderImmutableImageBuildInput, type ProviderImmutableImageBuildResult, type ProviderExpirationRenewalInput, type ProviderWorkspaceCapturePolicy, type ProviderWorkspaceCaptureTakeover, } from "./providers/index.js";
 export { classifyProviderSandboxFailure, isProviderSandboxGoneDuringRoutedOperation, isProviderSandboxNotFoundError, isProviderSandboxTransientError, type ProviderSandboxFailure, type ProviderSandboxFailureKind, } from "./provider-errors.js";
 export { WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION, WorkspaceArchiveIntegrityError, captureVerifiedWorkspaceArchive, decodeNativeSnapshotRef, encodeNativeSnapshotRef, describeLegacyNativeSnapshotArchive, describeNativeSnapshotArchive, fingerprintSandboxWorkspace, inlineWorkspaceArchiveForRestore, parseWorkspaceArchiveDescriptor, readVerifiedWorkspaceArchive, verifyRestoredWorkspace, type NativeSnapshotDescriptor, type NativeSnapshotProvider, type NativeSnapshotRef, type TarWorkspaceArchiveDescriptor, type VerifiedWorkspaceArchive, type WorkspaceArchiveDescriptor, type WorkspaceArchiveIntegrityCode, type WorkspaceTreeFingerprint, } from "./workspace-archive.js";
-export { ensureModalRegistryImage, deleteModalCheckpointSnapshot, inspectModalSandboxLifecycle, isModalTaskExecStartPreDispatchUnavailableError, modalSessionMatchesCheckpointProviderBinding, modalSandboxAttributionEnvironment, modalSandboxAttributionTags, resolveModalCheckpointProviderBinding, findModalProviderCreateReceipt, resolveModalCheckpointProviderBindingForLiveSandbox, resolveModalCheckpointProviderBindingForSession, sweepModalOrphanSandboxes, tagModalSandbox, terminateModalSandboxById, type LiveModalSandboxLeaseAttribution, type ModalModuleLoader, type ModalCheckpointProviderBinding, type ModalOrphanSweepResult, type ModalOrphanSweepTermination, type ModalSandboxAttribution, type RevalidateModalOrphanTermination, } from "./providers/modal.js";
+export { ensureModalRegistryImage, deleteModalCheckpointSnapshot, inspectModalSandboxLifecycle, isModalTaskExecStartPreDispatchUnavailableError, isModalCommandStartOutcomeUnknownError, modalSessionMatchesCheckpointProviderBinding, modalSandboxAttributionEnvironment, modalSandboxAttributionTags, resolveModalCheckpointProviderBinding, findModalProviderCreateReceipt, resolveModalCheckpointProviderBindingForLiveSandbox, resolveModalCheckpointProviderBindingForSession, sweepModalOrphanSandboxes, tagModalSandbox, terminateModalSandboxById, type LiveModalSandboxLeaseAttribution, type ModalModuleLoader, type ModalCheckpointProviderBinding, type ModalOrphanSweepResult, type ModalOrphanSweepTermination, type ModalSandboxAttribution, type RevalidateModalOrphanTermination, } from "./providers/modal.js";
 export { OpenSandboxClient, OpenSandboxSession, setOpenSandboxApplyDiff, type OpenSandboxApplyDiff, type OpenSandboxClientOptions, type OpenSandboxEditor, type OpenSandboxSessionState, } from "./providers/opensandbox-adapter.js";
 export { selectBackend, sdkBackendIdForSandboxBackend, sandboxBackendForSdkBackendId, backendSupportsOs, desktopCapableBackend, negotiateCapabilities, type NegotiationContext, } from "./select.js";
 export { STREAM_TOKEN_DEFAULT_TTL_SECONDS, mintStreamToken, verifyStreamToken, StreamTokenPayload, type MintStreamTokenInput, type StreamTokenPayloadType, } from "./stream-token.js";
@@ -49,7 +49,7 @@ export { nextDurableOpId, runWithToolCallCorrelation, sanitizeOpIdToken } from "
 export { negotiateSelfhostedCapabilities, selfhostedLiveness, selfhostedHeartbeatLiveness, SELFHOSTED_RECONNECT_WINDOW_MS, type SelfhostedNegotiationInput, type SelfhostedLivenessState, type SelfhostedEnrollment, } from "./selfhosted/capabilities.js";
 export { MockAgentResponder, type MockAgentResponderOptions, type MockExecHandler, } from "./selfhosted/testing.js";
 export { createMockSelfhostedOpStream, FakeOpRunner, type FakeOpScript, InMemoryOpStreamTransport, } from "./selfhosted/op-testing.js";
-export { isRoutingMutationOutcomeUnknownError, RoutingBackendRecoveryRequiredError, RoutingMutationOutcomeUnknownError, RoutingRetainedProcessNotFoundError, RoutingSandboxSession, RoutingWorkspaceRootChangedError, RoutingActiveRouteChangedError, RoutingUnsupportedError, type ActivePointer, type DefaultBackendLossResult, type RoutableBackendSession, type ResolvedActiveBackend, type RoutingMutationSettlementResult, type RoutingSandboxFirstOperationObservation, type RoutingSandboxFirstOperationObserver, type RoutingSandboxFirstOperationPhase, type RoutingSandboxFirstOperationPhaseObservation, type RoutingSandboxOperationObservation, type RoutingSandboxOperationObserver, type RoutingSandboxCaptureWaitObserver, type RoutingSandboxPhaseOutcome, type RoutingSandboxWaitObservation, type RoutingRetainedProcess, type RoutingRetainedProcessAdoption, type RoutingRetainedProcessTerminalProof, type RoutingSandboxSessionDeps, type RoutingTransitionEvent, } from "./routing/routing-session.js";
+export { isRoutingMutationOutcomeUnknownError, RoutingBackendRecoveryRequiredError, RoutingMutationOutcomeUnknownError, renderRoutingMutationOutcomeUnknownToolResult, RoutingRetainedProcessNotFoundError, RoutingSandboxSession, RoutingWorkspaceRootChangedError, RoutingActiveRouteChangedError, RoutingUnsupportedError, type ActivePointer, type DefaultBackendLossResult, type RoutableBackendSession, type ResolvedActiveBackend, type RoutingMutationSettlementResult, type RoutingSandboxFirstOperationObservation, type RoutingSandboxFirstOperationObserver, type RoutingSandboxFirstOperationPhase, type RoutingSandboxFirstOperationPhaseObservation, type RoutingSandboxOperationObservation, type RoutingSandboxOperationObserver, type RoutingSandboxCaptureWaitObserver, type RoutingSandboxPhaseOutcome, type RoutingSandboxWaitObservation, type RoutingRetainedProcess, type RoutingRetainedProcessAdoption, type RoutingRetainedProcessTerminalProof, type RoutingSandboxSessionDeps, type RoutingTransitionEvent, } from "./routing/routing-session.js";
 export { makeActiveBackendResolver, ActiveBackendUnresolvableError, swapTargetEstablishability, type ActiveBackendResolverDeps, type RoutableSandbox, type BackendUnresolvableCode, type SwapTargetEstablishability, } from "./routing/backend-resolver.js";
 /**
  * Construct the raw provider SandboxClient for the configured backend. Registry-
@@ -165,7 +165,7 @@ export declare const MODAL_EXEC_READINESS_TIMEOUT_MS = 60000;
 /** A provider handle is not workspace readiness. Providers with asynchronous
  * startup must pass this bounded command probe before a caller publishes the
  * lease warm/ready. */
-export declare function verifySandboxExecReadiness(established: EstablishedSandboxSession, timeoutMs?: number): Promise<void>;
+export declare function verifySandboxExecReadiness(established: EstablishedSandboxSession, timeoutMs?: number, signal?: AbortSignal): Promise<void>;
 export type SandboxCreatedCallback = (established: EstablishedSandboxSession) => Promise<void>;
 /** Resolve the stable OpenGeni identity first, then legacy SDK provider keys.
  * The fallback is compatibility-only: new envelopes always persist the stable