@opengeni/runtime 4.4.0 → 4.5.0-canary.36935312914001

package/dist/{chunk-BOBZ4N56.js → chunk-ETKOJALF.js}

@@ -29,7 +29,7 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   wrapCapabilityToolsForTurnCancellation
-} from "./chunk-QKROIZOB.js";
+} from "./chunk-VDXKKMMD.js";
 import {
   MemorySession,
   connectMcpServers
@@ -14520,7 +14520,7 @@ import { existsSync, readdirSync } from "fs";
 // ../sdk/package.json
 var package_default = {
   name: "@opengeni/sdk",
-  version: "7.5.0",
+  version: "7.6.0-canary.36935312914001",
   description: "Framework-agnostic TypeScript SDK for the OpenGeni API: typed client, session lifecycle, SSE event streaming with reconnect + replay-by-sequence, and proxy re-streaming helpers.",
   license: "Apache-2.0",
   repository: {
@@ -14708,7 +14708,7 @@ var package_default = {
 // ../react/package.json
 var package_default2 = {
   name: "@opengeni/react",
-  version: "7.5.0",
+  version: "7.6.0-canary.36935312914001",
   description: "React hooks and styled components for OpenGeni: live session streaming, chat composer, message timeline, session status, and fleet views \u2014 token-themed (CSS variables), dark-first, built on Tailwind v4 + Radix + Motion.",
   license: "Apache-2.0",
   repository: {
@@ -14981,7 +14981,7 @@ var package_default2 = {
 // ../codemode/package.json
 var package_default3 = {
   name: "@opengeni/codemode",
-  version: "0.6.6",
+  version: "0.6.7-canary.36935312914001",
   description: "Attempt-frozen programmatic tool catalog and execution authority for OpenGeni.",
   license: "Apache-2.0",
   repository: {
@@ -15031,7 +15031,7 @@ var package_default3 = {
 // ../ogtool/package.json
 var package_default4 = {
   name: "@opengeni/ogtool",
-  version: "0.3.48",
+  version: "0.3.49-canary.36935312914001",
   description: "Codemode CLI and typed client entrypoint for an OpenGeni execution attempt.",
   license: "Apache-2.0",
   repository: {
@@ -18618,6 +18618,7 @@ function createFirstPartyInteractionAttemptToolDefinitions(input) {
         turnId: input.scope.turnId,
         attemptId: input.scope.attemptId,
         executionGeneration: input.scope.executionGeneration,
+        ...input.credentialRestriction ? { credentialRestriction: input.credentialRestriction } : {},
         exp: Math.floor(Date.now() / 1e3) + 60 * 60
       });
       const headers = new Headers(init?.headers);
@@ -19599,6 +19600,7 @@ function createFirstPartyAttemptClient(input) {
         principalKind: "agent_attempt",
         permissions: [...input.permissions ?? DEFAULT_FIRST_PARTY_MCP_PERMISSIONS2],
         firstPartyMcpTools: [...input.selectedTools],
+        ...input.credentialRestriction ? { credentialRestriction: input.credentialRestriction } : {},
         exp: Math.floor(Date.now() / 1e3) + 60 * 60
       });
       const headers = new Headers(init?.headers);
@@ -23256,6 +23258,7 @@ async function signFirstPartyDelegatedBearer(settings, options) {
     workspaceId: options.workspaceId,
     subjectId: options.subjectId ?? "worker:first-party-mcp",
     ...options.subjectLabel ? { subjectLabel: options.subjectLabel } : {},
+    ...options.credentialRestriction ? { credentialRestriction: options.credentialRestriction } : {},
     permissions: options.firstPartyPermissions ?? [...DEFAULT_FIRST_PARTY_MCP_PERMISSIONS3],
     principalKind: hasExactAttemptClaims ? "agent_attempt" : "service",
     firstPartyMcpTools: options.firstPartyTools ?? [...DEFAULT_FIRST_PARTY_MCP_TOOLS2],
@@ -27407,4 +27410,4 @@ export {
   runAzureCliLoginHook,
   renderSessionGoalContext2 as renderSessionGoalContext
 };
-//# sourceMappingURL=chunk-BOBZ4N56.js.map
+//# sourceMappingURL=chunk-ETKOJALF.js.map