@opengeni/runtime 4.6.0 → 4.7.0-canary.37090756480001

package/dist/claude-subscription-usage.d.ts

@@ -1,7 +1,17 @@
-type Observer = (providerId: string, response: Response) => void;
-type Prepare = (providerId: string, headers: Headers) => Promise<Headers>;
+type Observer = (providerId: string, response: Response, upstreamModelId?: string, requestToken?: string | null) => void;
+type PreparedUsageRequest = {
+    headers: Headers;
+    observe: Observer;
+};
+type Prepare = (providerId: string, headers: Headers) => Promise<Headers | PreparedUsageRequest>;
+/** The native adapter knows the exact model without reading or cloning the wire body. */
+export declare function withClaudeModelRequest<T>(upstreamModelId: string, run: () => Promise<T>): Promise<T>;
 /** Like Codex usage headers: free observations within this turn's provider context. */
 export declare function withClaudeUsageObserver<T>(observer: Observer, run: () => Promise<T>, prepare?: Prepare): Promise<T>;
-export declare function prepareClaudeSubscriptionRequest(providerId: string, input: Parameters<typeof fetch>[0], init?: RequestInit): Promise<RequestInit | undefined>;
-export declare function observeClaudeUsageResponse(providerId: string, response: Response): void;
+export declare function prepareClaudeSubscriptionRequest(providerId: string, input: Parameters<typeof fetch>[0], init?: RequestInit): Promise<{
+    init: RequestInit | undefined;
+    observe(response: Response, requestToken?: string | null): void;
+}>;
+export declare function captureClaudeRequestToken(input: Parameters<typeof fetch>[0], init?: RequestInit): string | null | undefined;
+export declare function observeClaudeUsageResponse(providerId: string, response: Response, requestToken?: string | null): void;
 export {};

package/dist/context-compaction.d.ts

@@ -3,9 +3,9 @@
  *
  * The checkpoint model sees the current active history plus one fixed
  * checkpoint prompt, then the active history is rebuilt from the newest real
- * user messages within one cumulative 20k-token budget plus one summary.
- * Assistant messages, tool calls/results, reasoning, and images are removed
- * from the active model-facing history; the database audit rows remain.
+ * user/system input messages within one cumulative 20k-token budget plus one summary.
+ * Assistant messages, tool calls/results, and reasoning are removed from the
+ * active model-facing history; retained input images and database audit rows remain.
  */
 export type CompactionItem = Record<string, unknown>;
 /**
@@ -28,7 +28,7 @@ export declare const COMPACTION_PROMPT: string;
 export declare const SUMMARY_PREFIX = "Another language model started to solve this problem and produced a summary of its thinking process. You also have access to the state of the tools that were used by that language model. Use this to build on the work that has already been done and avoid duplicating work. Here is the summary produced by the other language model, use the information in this summary to assist with your own analysis:";
 export declare const USER_MESSAGE_TRUNCATION_MARKER = "\n[... middle truncated for context compaction ...]\n";
 export declare const REMOTE_COMPACTION_TOOL_RESULT_OMISSION = "[OpenGeni omitted tool result body for context compaction retry]";
-/** A user-authored `message` item is the only legal turn boundary. */
+/** A real user-role `message` item. */
 export declare function isUserMessage(item: unknown): boolean;
 /** True for our synthetic compaction summary item. */
 export declare function isCompactionSummary(item: unknown): boolean;
@@ -264,17 +264,17 @@ export declare function omitOpaqueArtifactsFromPortableCompactionHistory(items:
 export declare function prepareCompactionPromptInput(items: readonly CompactionItem[], maxInputTokens: number): PreparedCompactionPromptInput;
 /**
  * Build the active history after compaction:
- * the newest real user messages that fit one cumulative, model-bounded budget
+ * the newest user/system input messages that fit one cumulative, model-bounded budget
  * (prior summaries excluded, retained images preserved) plus one marked summary item.
  */
 export declare function buildCompactionReplacementHistory(items: readonly CompactionItem[], summaryBody: string, retainedItemTokens?: (item: CompactionItem) => number, retainedMessageBudgetTokens?: number): CompactionItem[];
 /** True for a Codex remote-compaction output item with opaque encrypted content. */
 export declare function isRemoteCompactionItem(item: unknown): item is CompactionItem;
-/** Messages retained beside a remote v2 compaction blob (user + developer). */
+/** Messages retained beside a remote v2 compaction blob (user + system + developer). */
 export declare function isRetainedRemoteV2Message(item: unknown): boolean;
 /**
  * Build the active history after Codex remote compaction v2:
- * newest retained user/developer messages within the CLI 64k budget plus the
+ * newest retained user/system/developer messages within the CLI 64k budget plus the
  * opaque `{ type: "compaction", encrypted_content }` item.
  *
  * Both modes preserve retained image parts. Charge their projected image

package/dist/index.d.ts

@@ -1,7 +1,9 @@
 export { preparedCompactionRequest, queuePreparedCompaction } from "./prepared-compaction-request.js";
+export { AnthropicProviderRejection } from "./anthropic-messages.js";
 import type { ModelProviderApi, ResolvedModelProvider, Settings } from "@opengeni/config";
 import { RunMcpCredentials } from "./mcp-run-credentials.js";
 export { RunMcpCredentials, RunMcpCredentialError } from "./mcp-run-credentials.js";
+export { AnthropicRequestError } from "./anthropic-request-error.js";
 import { type McpOperationPersistence } from "./mcp-operation-dispatch.js";
 export { captureMcpOperationDispatch, hasActiveRecoverableMcpOperation, McpOperationOutcomeUnknownError, runRecoverableMcpOperation, type CapturedMcpOperation, type McpOperationPersistence, type RecoverableMcpOperation, } from "./mcp-operation-dispatch.js";
 export { assertMcpOperationObservationAuthority, observeMcpOperation, runMcpOperationObservationWithAuthority, type McpOperationObservationAuthority, type McpObservationBinding, type McpObservationReceipt, } from "./mcp-operation-observation.js";

package/dist/index.js

@@ -1,5 +1,7 @@
 import {
   AGENT_PROMPT_MODULES,
+  AnthropicProviderRejection,
+  AnthropicRequestError,
   AssistantMessagePhaseTracker,
   CODEMODE_PROGRAMMATIC_DIRECTIVE,
   CODE_SEARCH_DIRECTIVE,
@@ -294,7 +296,7 @@ import {
   workspaceEnvironmentInstructions,
   wrapAttemptToolDefinitions,
   wrapAttemptToolExecute
-} from "./chunk-GTWKWJ67.js";
+} from "./chunk-P2OVGKDG.js";
 import {
   ActiveBackendUnresolvableError,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
@@ -345,6 +347,7 @@ import {
   OpenSandboxClient,
   OpenSandboxSession,
   PROVIDER_REGISTRY,
+  ProviderCommandObservationUnavailableError,
   ProviderCommandStartOutcomeUnknownError,
   REPOSITORY_DISCOVERY_LIMIT,
   RecordingError,
@@ -464,6 +467,7 @@ import {
   isModalTaskExecStartPreDispatchUnavailableError,
   isOpenSandboxLifecycleProxyPath,
   isProviderApiThrottleError,
+  isProviderCommandObservationUnavailableError,
   isProviderSandboxGoneDuringRoutedOperation,
   isProviderSandboxNotFoundError,
   isProviderSandboxTransientError,
@@ -507,6 +511,7 @@ import {
   readWorkspaceArchiveFromEnvelopeSessionState,
   recordingStorageKey,
   redactOpenSandboxSignedUriPath,
+  reduceModalRawOutputPage,
   relativeConnectedMachinePath,
   renderRoutingMutationOutcomeUnknownToolResult,
   renderSelfhostedFault,
@@ -576,7 +581,7 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   withoutSandboxProviderIdentity
-} from "./chunk-D5DPVA2C.js";
+} from "./chunk-R25L27T3.js";
 import "./chunk-7KVMU7O3.js";
 import "./chunk-4A4XTKKX.js";
 import "./chunk-GUJMCB7F.js";
@@ -593,7 +598,7 @@ import {
   skillArtifactContentSha256,
   skillLibraryRepositoryUrl
 } from "./chunk-KAPAZSUC.js";
-import "./chunk-A22BKN4P.js";
+import "./chunk-LJNCGUMB.js";
 import {
   GMAIL_REST_API_BASE,
   GMAIL_REST_MCP_TOOLS,
@@ -609,6 +614,8 @@ import "./chunk-PZ5AY32C.js";
 export {
   AGENT_PROMPT_MODULES,
   ActiveBackendUnresolvableError,
+  AnthropicProviderRejection,
+  AnthropicRequestError,
   AssistantMessagePhaseTracker,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
   BROWSER_CONTROL_PORT,
@@ -715,6 +722,7 @@ export {
   PROVIDER_QUOTA_EXHAUSTED_CODE,
   PROVIDER_REGISTRY,
   PrefixedMcpServer,
+  ProviderCommandObservationUnavailableError,
   ProviderCommandStartOutcomeUnknownError,
   ProviderHistoryIncompatibleError,
   REMOTE_COMPACTION_TOOL_RESULT_OMISSION,
@@ -965,6 +973,7 @@ export {
   isOfficialGmailMcpConfig,
   isOpenSandboxLifecycleProxyPath,
   isProviderApiThrottleError,
+  isProviderCommandObservationUnavailableError,
   isProviderSandboxGoneDuringRoutedOperation,
   isProviderSandboxNotFoundError,
   isProviderSandboxTransientError,
@@ -1063,6 +1072,7 @@ export {
   recordModelPreparationMeasurement,
   recordingStorageKey,
   redactOpenSandboxSignedUriPath,
+  reduceModalRawOutputPage,
   refreshCodemodeTokenFile,
   refreshGitCredentialBindingTokenFiles,
   refreshGitProviderTokenFiles,

package/dist/interaction-tools.d.ts

@@ -3,7 +3,7 @@ import { type Settings } from "@opengeni/config";
 import type { AttemptToolDefinition, AttemptToolScope } from "@opengeni/codemode";
 import { type InteractionTransport } from "@opengeni/sdk";
 import { z } from "zod";
-export declare const INTERACTION_ATTEMPT_TOOL_NAMES: readonly ["interaction_discover", "browser_open", "browser_tabs", "browser_observe", "browser_read", "browser_screenshot", "browser_act", "browser_clipboard", "browser_debug", "browser_auth", "interaction_request_human", "browser_identity", "browser_publish", "browser_lifecycle", "computer_open", "computer_targets", "computer_observe", "computer_clipboard", "computer_act", "computer_lifecycle"];
+export declare const INTERACTION_ATTEMPT_TOOL_NAMES: readonly ["interaction_discover", "browser_open", "browser_tabs", "browser_observe", "browser_read", "browser_screenshot", "browser_act", "browser_clipboard", "browser_debug", "browser_downloads", "browser_download_save", "browser_auth", "interaction_request_human", "browser_identity", "browser_publish", "browser_lifecycle", "computer_open", "computer_targets", "computer_observe", "computer_clipboard", "computer_act", "computer_lifecycle"];
 export type InteractionAttemptToolName = (typeof INTERACTION_ATTEMPT_TOOL_NAMES)[number];
 export type InteractionInterventionResume = {
     toolCallId: string;

package/dist/mcp-network.js

@@ -30,7 +30,7 @@ import {
   mcpSerializedSizeBytes,
   mcpTransportRequestFailureDiagnostic,
   undiciFetch
-} from "./chunk-A22BKN4P.js";
+} from "./chunk-LJNCGUMB.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MCP_DEFAULT_OUTER_CONNECT_TIMEOUT_MS,

package/dist/runtime-skills.d.ts

@@ -33,6 +33,7 @@ export type NativeToolSkillSet = Readonly<{
     defaults?: boolean;
     editableArtifacts: boolean;
     sites?: boolean;
+    schedules?: boolean;
     videoGeneration: boolean;
 }>;
 export type EffectiveSkillSelection = Readonly<{

package/dist/sandbox/channel-a.d.ts

@@ -66,6 +66,7 @@ export type ChannelASession = ProviderCommandSession & {
         chars?: string;
         yieldTimeMs?: number;
         maxOutputTokens?: number;
+        signal?: AbortSignal;
     }): Promise<string>;
     writeStdinForProcessMutation?(args: {
         sessionId: number;
@@ -81,6 +82,8 @@ export type ChannelASession = ProviderCommandSession & {
     }): Promise<string>;
     cancelExecCommand?(opId: string): Promise<boolean>;
     hasRetainedProcess?(providerSessionId: number): boolean;
+    /** Cleanup only: forget the local route after exact durable terminal proof. */
+    reconcileRetainedProcess?(providerSessionId: number): Promise<boolean>;
     retainedProcessHasTypedHandleLoss?(providerSessionId: number): boolean;
     execCommandForProcessControl?(providerSessionId: number, args: ChannelAExecArgs): Promise<string>;
     createEditor?(runAs?: string): ChannelAEditor;

package/dist/sandbox/index.d.ts

@@ -1,7 +1,9 @@
 export type { ProviderCommandPersistence, ProviderCommandSession, } from "./provider-command-session.js";
-export { ProviderCommandStartOutcomeUnknownError } from "./provider-command-session.js";
+export { ProviderCommandStartOutcomeUnknownError, ProviderCommandObservationUnavailableError, isProviderCommandObservationUnavailableError, } from "./provider-command-session.js";
 import type { Settings } from "@opengeni/config";
 export type { WorkspaceArchiveSpool, VerifiedHostWorkspaceArchive } from "./archive-spool.js";
+export { reduceModalRawOutputPage } from "./providers/modal-command-raw-page.js";
+export type { ModalRawOutputPage, ModalRawOutputStreams, ModalRawOutputExit, } from "./providers/modal-command-raw-page.js";
 import type { WorkspaceArchiveSpool } from "./archive-spool.js";
 export { captureWorkspaceArchiveForStorage, disposeWorkspaceArchive, type VerifiedWorkspaceArchivePayload, } from "./workspace-archive.js";
 import { type WorkspaceArchiveObjectRef, type SandboxBackend, type SandboxProviderContinuityRecovery } from "@opengeni/contracts";

package/dist/sandbox/index.js

@@ -48,6 +48,7 @@ import {
   OpenSandboxClient,
   OpenSandboxSession,
   PROVIDER_REGISTRY,
+  ProviderCommandObservationUnavailableError,
   ProviderCommandStartOutcomeUnknownError,
   REPOSITORY_DISCOVERY_LIMIT,
   RecordingError,
@@ -166,6 +167,7 @@ import {
   isModalTaskExecStartPreDispatchUnavailableError,
   isOpenSandboxLifecycleProxyPath,
   isProviderApiThrottleError,
+  isProviderCommandObservationUnavailableError,
   isProviderSandboxGoneDuringRoutedOperation,
   isProviderSandboxNotFoundError,
   isProviderSandboxTransientError,
@@ -208,6 +210,7 @@ import {
   readWorkspaceArchiveFromEnvelopeSessionState,
   recordingStorageKey,
   redactOpenSandboxSignedUriPath,
+  reduceModalRawOutputPage,
   relativeConnectedMachinePath,
   renderRoutingMutationOutcomeUnknownToolResult,
   renderSelfhostedFault,
@@ -277,7 +280,7 @@ import {
   withRunCredentialsClient,
   withRunCredentialsSession,
   withoutSandboxProviderIdentity
-} from "../chunk-D5DPVA2C.js";
+} from "../chunk-R25L27T3.js";
 import "../chunk-7KVMU7O3.js";
 import "../chunk-4A4XTKKX.js";
 import "../chunk-GUJMCB7F.js";
@@ -333,6 +336,7 @@ export {
   OpenSandboxClient,
   OpenSandboxSession,
   PROVIDER_REGISTRY,
+  ProviderCommandObservationUnavailableError,
   ProviderCommandStartOutcomeUnknownError,
   REPOSITORY_DISCOVERY_LIMIT,
   RecordingError,
@@ -451,6 +455,7 @@ export {
   isModalTaskExecStartPreDispatchUnavailableError,
   isOpenSandboxLifecycleProxyPath,
   isProviderApiThrottleError,
+  isProviderCommandObservationUnavailableError,
   isProviderSandboxGoneDuringRoutedOperation,
   isProviderSandboxNotFoundError,
   isProviderSandboxTransientError,
@@ -493,6 +498,7 @@ export {
   readWorkspaceArchiveFromEnvelopeSessionState,
   recordingStorageKey,
   redactOpenSandboxSignedUriPath,
+  reduceModalRawOutputPage,
   relativeConnectedMachinePath,
   renderRoutingMutationOutcomeUnknownToolResult,
   renderSelfhostedFault,

package/dist/sandbox/provider-command-session.d.ts

@@ -43,6 +43,27 @@ export declare class ProviderCommandStartOutcomeUnknownError extends Error {
     readonly command: ModalRouterProviderCommand;
     constructor(command: ModalRouterProviderCommand, cause: unknown);
 }
+/** A reserved stdin byte range was sent once but its acknowledgement was lost.
+ * The original process remains observation authority, never input replay authority. */
+export declare class ProviderCommandInputOutcomeUnknownError extends Error {
+    readonly command: SandboxProviderCommand;
+    readonly byteOffset: number;
+    readonly byteLength: number;
+    constructor(command: SandboxProviderCommand, byteOffset: number, byteLength: number, cause: unknown);
+}
+/** An already-dispatched invocation could not be observed within this read's
+ * budget. The exact locator is read authority, never Start/input replay authority. */
+export declare class ProviderCommandObservationUnavailableError extends Error {
+    readonly command: SandboxProviderCommand;
+    /** Mixed or unreadable provider graphs can contain observation failure
+     * without proving that an automatic read retry is safe. */
+    readonly readRetryAllowed: boolean;
+    constructor(command: SandboxProviderCommand, cause: unknown, 
+    /** Mixed or unreadable provider graphs can contain observation failure
+     * without proving that an automatic read retry is safe. */
+    readRetryAllowed?: boolean);
+}
+export declare function isProviderCommandObservationUnavailableError(error: unknown): boolean;
 export type ProviderCommandSession = {
     verifyCommandSupervisionCapability?(): Promise<{
         sandboxId: string;

package/dist/sandbox/providers/modal-command-argv.d.ts

@@ -0,0 +1,4 @@
+import type { ChannelAExecArgs } from "../channel-a.js";
+/** Keep the command payload once in argv. Embedding it in each run-as branch
+ * multiplies large lifecycle scripts past the provider's aggregate limit. */
+export declare function modalCommandArgv(args: ChannelAExecArgs): string[];

package/dist/sandbox/providers/modal-command-control.d.ts

@@ -1,11 +1,16 @@
-import { SandboxProviderCommand, CommandSupervisionReceipt, type ModalRouterProviderCommand } from "@opengeni/contracts";
+import { SandboxProviderCommand, CommandSupervisionReceipt, ModalRouterProviderCommand } from "@opengeni/contracts";
 import type { ChannelAExecArgs } from "../channel-a.js";
 import type { ProviderCommandOutput } from "../provider-command-session.js";
 import { commandControlPlane } from "./modal-legacy-command-control.js";
+import { type ModalRawOutputPage } from "./modal-command-raw-page.js";
 export { modalCommandAbortMiddleware } from "./modal-legacy-command-control.js";
 export type ModalProviderCommand = SandboxProviderCommand;
 export type ModalProviderOutputPage = ProviderCommandOutput;
 type Client = Parameters<typeof commandControlPlane>[0];
+type SupervisionControlResult = {
+    state: "idle" | "running" | "quiescent";
+    receipt?: CommandSupervisionReceipt;
+};
 /** New commands use replayable task-router byte offsets. Legacy identifiers
  * never cross that protocol boundary and are never used for new starts. */
 export declare class ModalCommandControl {
@@ -13,6 +18,8 @@ export declare class ModalCommandControl {
     private readonly root;
     private readonly environment;
     private readonly routers;
+    private readonly routerLookups;
+    private readonly controlHelpers;
     private readonly client;
     private readonly legacy;
     private closed;
@@ -38,11 +45,16 @@ export declare class ModalCommandControl {
     verifyExecReadiness(signal: AbortSignal): Promise<number>;
     /** Separate authenticated provider execution of the installed control helper.
      * User command streams are never inspected for control evidence. */
-    supervisionControl(command: ModalRouterProviderCommand, action: "release" | "cancel" | "status" | "ack", receiptId?: string): Promise<{
-        state: "idle" | "running" | "quiescent";
-        receipt?: CommandSupervisionReceipt;
-    }>;
+    supervisionControl(command: ModalRouterProviderCommand, action: "release" | "cancel" | "status" | "ack", receiptId?: string): Promise<SupervisionControlResult>;
+    /** These fixed helpers already started once. Observe only their original
+     * invocation within the caller's existing five-second budget. */
+    private readControlOutput;
     read(command: ModalProviderCommand, waitMs: number, signal?: AbortSignal): Promise<ModalProviderOutputPage>;
+    /** Native capture plumbing only. Raw bytes are acquired by the same joined
+     * read/poll path as read(); no legacy locator or new command is admitted. */
+    readRaw(command: ModalRouterProviderCommand, waitMs: number, signal?: AbortSignal): Promise<ModalRawOutputPage>;
+    private readNative;
+    private readRouterPage;
     readProbe(command: ModalProviderCommand, waitMs: number, cancellation: AbortController): Promise<ModalProviderOutputPage>;
     write(command: ModalProviderCommand, chars: string, index: number): Promise<void>;
 }

package/dist/sandbox/providers/modal-command-observation-errors.d.ts

@@ -0,0 +1,3 @@
+/** Only used inside a read-only provider RPC boundary. This is deliberately
+ * not a Start classifier: remote DNS prose never proves non-dispatch. */
+export declare function isModalCommandObservationTransportError(error: unknown): boolean;

package/dist/sandbox/providers/modal-command-raw-page.d.ts

@@ -0,0 +1,100 @@
+import { z } from "zod";
+import { ModalRouterProviderCommand } from "@opengeni/contracts";
+import type { ProviderCommandOutput } from "../provider-command-session.js";
+declare const RawPage: z.ZodObject<{
+    protocol: z.ZodLiteral<"modal-router-raw-page-v1">;
+    expected: z.ZodObject<{
+        kind: z.ZodLiteral<"modal-router-v1">;
+        sandboxId: z.ZodString;
+        taskId: z.ZodString;
+        execId: z.ZodString;
+        pty: z.ZodOptional<z.ZodBoolean>;
+        supervision: z.ZodOptional<z.ZodObject<{
+            protocol: z.ZodLiteral<"native-subreaper-v1">;
+            invocationId: z.ZodString;
+            nonce: z.ZodString;
+            controlPath: z.ZodString;
+        }, z.core.$strict>>;
+        streams: z.ZodObject<{
+            stdout: z.ZodObject<{
+                byteOffset: z.ZodNumber;
+                utf8Remainder: z.ZodString;
+                eof: z.ZodBoolean;
+                exitCode: z.ZodNullable<z.ZodNumber>;
+            }, z.core.$strict>;
+            stderr: z.ZodObject<{
+                byteOffset: z.ZodNumber;
+                utf8Remainder: z.ZodString;
+                eof: z.ZodBoolean;
+                exitCode: z.ZodNullable<z.ZodNumber>;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    command: z.ZodObject<{
+        kind: z.ZodLiteral<"modal-router-v1">;
+        sandboxId: z.ZodString;
+        taskId: z.ZodString;
+        execId: z.ZodString;
+        pty: z.ZodOptional<z.ZodBoolean>;
+        supervision: z.ZodOptional<z.ZodObject<{
+            protocol: z.ZodLiteral<"native-subreaper-v1">;
+            invocationId: z.ZodString;
+            nonce: z.ZodString;
+            controlPath: z.ZodString;
+        }, z.core.$strict>>;
+        streams: z.ZodObject<{
+            stdout: z.ZodObject<{
+                byteOffset: z.ZodNumber;
+                utf8Remainder: z.ZodString;
+                eof: z.ZodBoolean;
+                exitCode: z.ZodNullable<z.ZodNumber>;
+            }, z.core.$strict>;
+            stderr: z.ZodObject<{
+                byteOffset: z.ZodNumber;
+                utf8Remainder: z.ZodString;
+                eof: z.ZodBoolean;
+                exitCode: z.ZodNullable<z.ZodNumber>;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    streams: z.ZodObject<{
+        stdout: z.ZodObject<{
+            bytes: z.ZodPipe<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodTransform<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBuffer>>>;
+            eof: z.ZodBoolean;
+        }, z.core.$strict>;
+        stderr: z.ZodObject<{
+            bytes: z.ZodPipe<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodTransform<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBuffer>>>;
+            eof: z.ZodBoolean;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    exit: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"router_poll">;
+        code: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        source: z.ZodLiteral<"retained_terminal">;
+        code: z.ZodNumber;
+    }, z.core.$strict>], "source">;
+}, z.core.$strict>;
+/** Bounded native RPC bytes and their exact cursor projection. The source tag
+ * distinguishes a fresh poll from previously captured terminal evidence; it
+ * does not authenticate an object supplied by a caller. No Start, custody,
+ * database settlement or parent completion authority is conveyed. */
+export type ModalRawOutputPage = z.infer<typeof RawPage>;
+export type ModalRawOutputStreams = ModalRawOutputPage["streams"];
+export type ModalRawOutputExit = ModalRawOutputPage["exit"];
+type NativeOutput = ProviderCommandOutput & {
+    expected: ModalRouterProviderCommand;
+    command: ModalRouterProviderCommand;
+};
+/** Provider-private construction from joined read/poll replies. Keep the SDK
+ * projection unchanged; this pure helper itself is not provider proof. */
+export declare function collectModalRawOutputPage(command: ModalRouterProviderCommand, streams: ModalRawOutputStreams, exit: ModalRawOutputExit): {
+    raw: ModalRawOutputPage;
+    output: NativeOutput;
+};
+/** Recompute decoded output from exact bytes, never caller-decoded text. The
+ * current cursor must come from the caller's authoritative store. Equality
+ * checks are not a database CAS; coherent bytes still need trusted acquisition
+ * and atomic capture by the owner. */
+export declare function reduceModalRawOutputPage(input: ModalRawOutputPage, current: ModalRouterProviderCommand): NativeOutput;
+export {};

package/dist/sandbox/providers/modal-command-router-wire.d.ts

@@ -50,17 +50,33 @@ export type ModalRouterStart = ModalRouterIdentity & {
         noTerminateOnIdleStdin: boolean;
     };
 };
+declare const preparedStartBrand: unique symbol;
+/** An in-memory, single-use request on its issuing transport, NOT command
+ * admission or durable dispatch authority. Copies/serialized identities cannot
+ * be dispatched. The caller still owns authorization before physical Start. */
+export type ModalRouterPreparedStart = Readonly<ModalRouterIdentity> & {
+    readonly [preparedStartBrand]: true;
+};
 /** A single authenticated transport, owned and closed by its command adapter.
  * Reads may stop at a byte boundary because the next read resumes at that exact
  * offset. Mutations are never retried by this layer, including ambiguous starts.
  */
 export declare class ModalCommandRouterWire {
+    #private;
     private readonly client;
     private readonly metadata;
     private closed;
     constructor(access: ModalRouterAccess, trustedRoots?: Buffer);
     close(): void;
     private unary;
+    /** Read-only transport preparation. It sends neither Start nor stdin and
+     * does not invoke a caller's dispatch/admission callback. Prevalidation is not
+     * wire proof: gRPC still serializes at RPC invocation after dispatch begins. */
+    prepareStart(request: ModalRouterStart, signal?: AbortSignal): Promise<ModalRouterPreparedStart>;
+    /** No readiness, route lookup or retry here. Consume the authentic local
+     * handle synchronously before RPC, including when cancellation/closure wins.
+     * Once spent it never resets, even if no acknowledgement was received. */
+    dispatchPreparedStart(prepared: ModalRouterPreparedStart, signal?: AbortSignal): Promise<void>;
     start(request: ModalRouterStart, signal?: AbortSignal): Promise<void>;
     write(identity: ModalRouterIdentity, offset: number, data: Uint8Array, signal?: AbortSignal): Promise<void>;
     poll(identity: ModalRouterIdentity, signal?: AbortSignal): Promise<number | null>;
@@ -69,3 +85,4 @@ export declare class ModalCommandRouterWire {
         eof: boolean;
     }>;
 }
+export {};

package/dist/sandbox/routing/routing-session.d.ts

@@ -205,6 +205,12 @@ export interface RoutingSandboxSessionDeps {
         process: RoutingRetainedProcess;
         proof: RoutingRetainedProcessTerminalProof;
     }) => Promise<void>;
+    /** Read terminal truth for this exact copied process/backend. Missing rows,
+     * failed observations and active rows must never count as physical proof. */
+    isProcessSettled?: (input: {
+        backend: ResolvedActiveBackend;
+        process: RoutingRetainedProcess;
+    }) => Promise<boolean>;
     /** A terminal result is being returned to the model, not merely drained by
      * control/reaper work. Never invoke this for a running receipt. */
     observeProcessTerminal?: (input: {
@@ -486,6 +492,10 @@ export declare class RoutingSandboxSession implements RoutableBackendSession {
      * backend that yielded it. This synchronous probe is used only to select the
      * process-aware routing surface; it is not itself durable authority. */
     hasRetainedProcess(providerSessionId: number): boolean;
+    /** A reaper may have settled the command while a local capture/control receipt
+     * remained pending. Cleanup may consume that same durable proof without
+     * replaying a provider operation or accepting pending output into the model. */
+    reconcileRetainedProcess(providerSessionId: number): Promise<boolean>;
     /** Local, Docker, and OpenSandbox process ids address an in-memory table on one worker
      * session object. They are not valid durable locators for the independently
      * scheduled reaper, so their yielded handles stay turn-owned until terminal

package/dist/sandbox/turn-tool-cancellation.d.ts

@@ -9,6 +9,7 @@ type CommandCancellationSession = {
     supportsPty?(): boolean;
     supportsCommandInput?(providerSessionId: number): boolean;
     hasRetainedProcess?(providerSessionId: number): boolean;
+    reconcileRetainedProcess?(providerSessionId: number): Promise<boolean>;
     retainedProcessHasTypedHandleLoss?(providerSessionId: number): boolean;
     /** Whether the provider locator remains controllable from another worker
      * process after this turn returns. */
@@ -23,18 +24,21 @@ type CommandCancellationSession = {
         chars?: string;
         yieldTimeMs?: number;
         maxOutputTokens?: number;
+        signal?: AbortSignal;
     }): Promise<string>;
     writeStdinForProcessMutation?(args: {
         sessionId: number;
         chars?: string;
         yieldTimeMs?: number;
         maxOutputTokens?: number;
+        signal?: AbortSignal;
     }): Promise<string>;
     writeStdinForProcessControl?(args: {
         sessionId: number;
         chars?: string;
         yieldTimeMs?: number;
         maxOutputTokens?: number;
+        signal?: AbortSignal;
     }): Promise<string>;
     execCommandForProcessControl?(providerSessionId: number, args: TurnSandboxCommandArgs): Promise<string>;
 };

package/dist/workspace-tool-gateway.js

@@ -1,12 +1,12 @@
 import {
   prepareAgentTools
-} from "./chunk-GTWKWJ67.js";
-import "./chunk-D5DPVA2C.js";
+} from "./chunk-P2OVGKDG.js";
+import "./chunk-R25L27T3.js";
 import "./chunk-7KVMU7O3.js";
 import "./chunk-4A4XTKKX.js";
 import "./chunk-GUJMCB7F.js";
 import "./chunk-KAPAZSUC.js";
-import "./chunk-A22BKN4P.js";
+import "./chunk-LJNCGUMB.js";
 import "./chunk-YU4VRTR4.js";
 import "./chunk-ISNIWRWB.js";
 import "./chunk-PZ5AY32C.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/runtime",
-  "version": "4.6.0",
+  "version": "4.7.0-canary.37090756480001",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -63,17 +63,17 @@
     "@openai/agents": "0.14.3",
     "@openai/agents-core": "0.14.3",
     "@openai/agents-extensions": "0.14.3",
-    "@opengeni/agent-proto": "^0.6.1",
-    "@opengeni/capabilities": "^0.3.5",
-    "@opengeni/codemode": "^0.6.8",
-    "@opengeni/codex": "^0.2.31",
-    "@opengeni/config": "^3.2.1",
-    "@opengeni/contracts": "^5.6.0",
-    "@opengeni/network": "^0.3.1",
-    "@opengeni/observability": "^0.8.37",
-    "@opengeni/sdk": "^7.6.1",
-    "@opengeni/tool-gateway": "^0.1.18",
-    "@opengeni/xai-subscription": "^0.1.5",
+    "@opengeni/agent-proto": "^0.6.1-canary.37090756480001",
+    "@opengeni/capabilities": "^0.3.6-canary.37090756480001",
+    "@opengeni/codemode": "^0.7.0-canary.37090756480001",
+    "@opengeni/codex": "^0.2.32-canary.37090756480001",
+    "@opengeni/config": "^3.3.0-canary.37090756480001",
+    "@opengeni/contracts": "^5.7.0-canary.37090756480001",
+    "@opengeni/network": "^0.3.1-canary.37090756480001",
+    "@opengeni/observability": "^0.8.38-canary.37090756480001",
+    "@opengeni/sdk": "^7.7.0-canary.37090756480001",
+    "@opengeni/tool-gateway": "^0.1.19-canary.37090756480001",
+    "@opengeni/xai-subscription": "^0.1.5-canary.37090756480001",
     "debug": "4.4.3",
     "modal": "0.9.0",
     "openai": "6.47.0",