@opengeni/worker-bundle 0.27.0-canary.0 → 0.27.2-canary.0

package/dist/activities/agent-turn/agent-build.d.ts

@@ -1,4 +1,4 @@
-import { type AttemptConnectorActionBinding, type ConnectorActionPolicyHooks, type SandboxFileDownload } from "@opengeni/runtime";
+import { type AttemptConnectorActionBinding, type BuildAgentOptions, type ConnectorActionPolicyHooks, type SandboxFileDownload } from "@opengeni/runtime";
 import { type Settings } from "@opengeni/config";
 import { type CodexRequestContext } from "@opengeni/codex";
 import type { TurnActivityServices as ActivityServices, RunAgentTurnInput } from "../types.js";
@@ -12,6 +12,7 @@ import type { sandboxArtifactRuntimeAdmission } from "./sandbox-route.js";
 import type { loadWorkspaceEnvironmentForRunWithCredentials, sandboxEnvironmentForRun } from "../environment.js";
 import type { AttemptIdentityState, EventingState, ProviderTurnState, SandboxRuntimeState } from "./turn-context.js";
 export type BuildTurnAgentDeps = {
+    skillCatalog: NonNullable<BuildAgentOptions["skillCatalog"]>;
     input: RunAgentTurnInput;
     db: ActivityServices["db"];
     runtime: ActivityServices["runtime"];
@@ -46,8 +47,6 @@ export type BuildTurnAgentDeps = {
     workspaceMemory: GovernanceModelOk["workspaceMemory"];
     rigVersion: GovernanceModelOk["rigVersion"];
     rigName: GovernanceModelOk["rigName"];
-    packRuntime: GovernanceModelOk["packRuntime"];
-    installedSkillRuntime: GovernanceModelOk["installedSkillRuntime"];
     buildCompanyBrainContributionReceiptFor: GovernanceModelOk["buildCompanyBrainContributionReceiptFor"];
     promptCacheKey: CompactionPrepOk["promptCacheKey"];
     workspaceVariableSet: Awaited<ReturnType<typeof loadWorkspaceEnvironmentForRunWithCredentials>>;
@@ -74,7 +73,7 @@ export type BuildTurnAgentDeps = {
 };
 export declare function buildTurnAgent(deps: BuildTurnAgentDeps): Promise<{
     agent: import("@openai/agents-core").Agent<any, any>;
-    modelVisibleRuntimeSkillActivations: readonly import("@opengeni/runtime").RuntimeSkillActivation[];
+    modelVisibleSkillCatalogText: string;
     postAgentPreparationStartedAt: number;
 }>;
 export type BuildTurnAgentOk = Awaited<ReturnType<typeof buildTurnAgent>>;

package/dist/activities/agent-turn/governance-model.d.ts

@@ -1,7 +1,7 @@
 import { materializeRigVersionForAttempt } from "@opengeni/db";
 import { renderWorkspaceGovernanceContext, type OpenGeniRuntime } from "@opengeni/runtime";
 import { type Settings } from "@opengeni/config";
-import { resolveWorkspacePackRuntime, resolveWorkspaceInstalledSkillRuntime } from "../packs.js";
+import { resolveWorkspacePackRuntime } from "../packs.js";
 import { createModelHistoryAttachmentProjector } from "../run-input.js";
 import type { TurnActivityServices as ActivityServices, RunAgentTurnInput, RunAgentTurnResult } from "../types.js";
 import { buildCompanyBrainContributionReceipt } from "../../model-context-contributions.js";
@@ -36,7 +36,6 @@ export type GovernanceModelDeps = {
 export type GovernanceModelOk = {
     runtimePreparationStartedAt: number;
     packRuntime: Awaited<ReturnType<typeof resolveWorkspacePackRuntime>>;
-    installedSkillRuntime: Awaited<ReturnType<typeof resolveWorkspaceInstalledSkillRuntime>>;
     rigVersion: NonNullable<Awaited<ReturnType<typeof materializeRigVersionForAttempt>>>["version"] | null;
     rigName: string | null;
     agentHumanInputEnabled: boolean;
@@ -44,7 +43,7 @@ export type GovernanceModelOk = {
     workspaceGovernance: ReturnType<typeof renderWorkspaceGovernanceContext>;
     structuredWorkspacePolicyActive: boolean;
     workspaceMemory: string | null | undefined;
-    buildCompanyBrainContributionReceiptFor: (skillActivations: Parameters<typeof buildCompanyBrainContributionReceipt>[0]["skillActivations"]) => ReturnType<typeof buildCompanyBrainContributionReceipt>;
+    buildCompanyBrainContributionReceiptFor: (skillCatalogText: string) => ReturnType<typeof buildCompanyBrainContributionReceipt>;
     logicalSandboxSettings: Settings;
     verifiedRigProviderImageId: string | undefined;
     runSettings: Settings;

package/dist/activities/agent-turn/skill-checkout.d.ts

@@ -0,0 +1,21 @@
+import type { AttemptToolDefinition } from "@opengeni/codemode";
+import type { SandboxChannelAService } from "@opengeni/runtime/sandbox";
+import type { SkillTextFile } from "@opengeni/runtime/skill-library";
+import type { SkillSaveReceipt, SkillSaveRequest } from "./skill-save.js";
+type SkillFileSystem = Pick<SandboxChannelAService, "fsList" | "fsRead" | "fsWrite" | "fsMkdir">;
+export declare function createSkillCheckoutAttemptToolDefinition(input: {
+    authorize: () => Promise<void>;
+    load: (skill: string) => Promise<{
+        skillId: string;
+        revisionId: string | null;
+        scopeVersion: number | null;
+        files: readonly SkillTextFile[];
+    }>;
+    filesystem: () => Promise<SkillFileSystem>;
+}): AttemptToolDefinition;
+export declare function createSkillPublishAttemptToolDefinition(input: {
+    authorize: () => Promise<void>;
+    filesystem: () => Promise<SkillFileSystem>;
+    save: (request: SkillSaveRequest) => Promise<SkillSaveReceipt>;
+}): AttemptToolDefinition;
+export {};

package/dist/activities/agent-turn/skill-install.d.ts

@@ -0,0 +1,12 @@
+import type { AttemptToolDefinition } from "@opengeni/codemode";
+import type { SkillSaveReceipt } from "./skill-save.js";
+/** The installer resolves/pins bytes and persists them through the shared lifecycle. */
+export declare function createSkillInstallAttemptToolDefinition(input: {
+    authorize: () => Promise<void>;
+    install: (request: {
+        operationId: string;
+        source: string;
+        expectedInstallationVersion?: number;
+        reason: string;
+    }) => Promise<SkillSaveReceipt>;
+}): AttemptToolDefinition;

package/dist/activities/agent-turn/skill-read.d.ts

@@ -0,0 +1,15 @@
+import type { AttemptToolDefinition } from "@opengeni/codemode";
+import { type SkillTextFile } from "@opengeni/runtime/skill-library";
+export declare const SKILL_READ_TOOL_NAME = "skill_read";
+export type SkillReadContent = Readonly<{
+    files: readonly SkillTextFile[];
+    skillId: string;
+    revisionId: string;
+    scopeVersion: number;
+    installationVersion?: number;
+}>;
+/** A first-party gateway definition, not a sandbox capability or second backend. */
+export declare function createSkillReadAttemptToolDefinition(input: {
+    authorize: () => Promise<void>;
+    load: (skill: string) => Promise<readonly SkillTextFile[] | SkillReadContent>;
+}): AttemptToolDefinition;

package/dist/activities/agent-turn/skill-save.d.ts

@@ -0,0 +1,26 @@
+import type { AttemptToolDefinition } from "@opengeni/codemode";
+import { type SkillTextFile } from "@opengeni/runtime/skill-library";
+export type SkillSaveRequest = {
+    operationId: string;
+    skillId: string;
+    expectedRevisionId: string | null;
+    expectedScopeVersion: number;
+    files: readonly SkillTextFile[];
+    reason: string;
+};
+export type SkillSaveReceipt = {
+    operationId: string;
+    skillId: string;
+    revisionId: string;
+    outcome: "applied" | "pending" | "preserved";
+    replayed: boolean;
+};
+/** Persistence owns mode enforcement, replay, and the final compare-and-swap. */
+export declare function createSkillSaveAttemptToolDefinition(input: {
+    authorize: () => Promise<void>;
+    load: (skillId: string, revisionId: string) => Promise<{
+        revisionId: string;
+        files: readonly SkillTextFile[];
+    }>;
+    save: (request: SkillSaveRequest) => Promise<SkillSaveReceipt>;
+}): AttemptToolDefinition;

package/dist/activities/agent-turn/skill-search.d.ts

@@ -0,0 +1,16 @@
+import type { AttemptToolDefinition } from "@opengeni/codemode";
+import { type PublicSkillSearchClient } from "@opengeni/core";
+export type WorkspaceSkillSearchEntry = Readonly<{
+    id: string;
+    name: string;
+    description: string;
+    revisionId?: string;
+    scopeVersion?: number;
+    installationVersion?: number;
+    source?: "workspace" | "builtin" | "session" | "pack";
+}>;
+export declare function createSkillSearchAttemptToolDefinition(input: {
+    authorize: () => Promise<void>;
+    listWorkspace: () => Promise<readonly WorkspaceSkillSearchEntry[]>;
+    publicSearch: PublicSkillSearchClient;
+}): AttemptToolDefinition;

package/dist/activities/agent-turn/skill-selection.d.ts

@@ -0,0 +1,17 @@
+import type { BundledSkillId } from "@opengeni/contracts";
+export type BundledSkillConfiguration = {
+    /** Already resolved names, not discovered schemas or an attempt catalog. */
+    firstPartyTools: readonly string[];
+    videoGenerationEnabled: boolean;
+    bundledSkillIds?: readonly BundledSkillId[] | undefined;
+};
+/** Individual ordinary-code defaults, evaluated without async tool preparation. */
+export declare function configuredBundledSkillNames(context: BundledSkillConfiguration): string[];
+export declare function loadConfiguredBundledSkills(context: BundledSkillConfiguration): {
+    id: string;
+    artifact: Readonly<{
+        name: string;
+        description?: string | null | undefined;
+        files: readonly import("@opengeni/runtime").RuntimeSkillArtifactFile[];
+    }>;
+}[];

package/dist/activities/agent-turn/skill-tools.d.ts

@@ -0,0 +1,20 @@
+import type { Settings } from "@opengeni/config";
+import { type SkillActor } from "@opengeni/contracts";
+import { type Database } from "@opengeni/db";
+import type { RuntimeSkillArtifact } from "@opengeni/runtime";
+import type { SandboxChannelAService } from "@opengeni/runtime/sandbox";
+export declare function createWorkspaceSkillTools(input: {
+    db: Database;
+    settings: Settings;
+    accountId: string;
+    workspaceId: string;
+    subjectId?: string;
+    actor: Extract<SkillActor, {
+        kind: "agent";
+    }>;
+    selected: readonly {
+        id: string;
+        artifact: RuntimeSkillArtifact;
+    }[];
+    filesystem: () => Promise<Pick<SandboxChannelAService, "fsList" | "fsRead" | "fsWrite" | "fsMkdir">>;
+}): import("@opengeni/codemode").AttemptToolDefinition[];

package/dist/activities/agent-turn/skill-transfer.d.ts

@@ -0,0 +1,26 @@
+import type { SandboxChannelAService } from "@opengeni/runtime/sandbox";
+import { type SkillTextFile } from "@opengeni/runtime/skill-library";
+type SkillFileSystem = Pick<SandboxChannelAService, "fsList" | "fsRead" | "fsWrite" | "fsMkdir">;
+/** Reuse the host's cancellation and workspace-mutation authority for each filesystem operation. */
+export declare function guardSkillFilesystem(fs: SkillFileSystem, authority: {
+    assertActive: () => void;
+    runMutation: <T>(operation: () => Promise<T>) => Promise<T>;
+}): SkillFileSystem;
+/** Caller supplies an authorized live filesystem and a fresh workspace-relative target. */
+export declare function checkoutSkillDirectory(fs: SkillFileSystem, directory: string, files: readonly SkillTextFile[]): Promise<{
+    directory: string;
+    fileCount: number;
+}>;
+/**
+ * Read a folder through existing structured filesystem services, never via model
+ * arguments. The caller owns workspace confinement and the final governed save.
+ * This operation does not execute scripts or activate the resulting artifact.
+ */
+export declare function readSkillDirectory(fs: SkillFileSystem, directory: string): Promise<Readonly<{
+    name: string;
+    description: string;
+    files: readonly import("@opengeni/runtime").SkillLibraryFile[];
+    contentSha256: string;
+    totalBytes: number;
+}>>;
+export {};

package/dist/activities/agent-turn/tool-environment.d.ts

@@ -9,6 +9,7 @@ import type { GovernanceModelOk } from "./governance-model.js";
 import type { SandboxTurnRuntime } from "./sandbox-runtime.js";
 import type { sandboxArtifactRuntimeAdmission } from "./sandbox-route.js";
 import type { AttemptIdentityState, EventingState, SandboxRuntimeState, WorkspaceRefState } from "./turn-context.js";
+import type { RuntimeSkillActivation } from "@opengeni/runtime";
 export type PrepareTurnToolPolicyDeps = {
     input: RunAgentTurnInput;
     db: ActivityServices["db"];
@@ -23,6 +24,7 @@ export type PrepareTurnToolPolicyDeps = {
     workspaceRefs: WorkspaceRefState;
 };
 export type PrepareTurnToolRuntimeDeps = {
+    selectedSkillActivations: readonly RuntimeSkillActivation[];
     input: RunAgentTurnInput;
     catalogSourceSettings: Settings;
     db: ActivityServices["db"];
@@ -129,6 +131,11 @@ export declare function prepareTurnToolRuntime(deps: PrepareTurnToolRuntimeDeps)
     generateSessionTitleInParallel: boolean;
     postToolPreparationStartedAt: number;
     preparationIndependentToolNames: string[];
+    skillCatalog: {
+        id: string;
+        name: string;
+        description: string;
+    }[];
 }>;
 export type PrepareTurnToolPolicyOk = Awaited<ReturnType<typeof prepareTurnToolPolicy>>;
 export type PrepareTurnToolRuntimeOk = Awaited<ReturnType<typeof prepareTurnToolRuntime>>;

package/dist/activities/parent-wake.d.ts

@@ -75,11 +75,21 @@ export declare function reconcileAutomaticSessionTitleFanout(svc: NotifyServices
     delivered: number;
     failed: number;
 }>;
-export declare function reconcilePendingSessionWorkflowWakes(svc: NotifyServices, limit?: number, overrides?: ReconcileSessionWorkflowWakeOverrides): Promise<{
+export type WorkflowWakeReconciliationResult = {
     claimed: number;
+    /** Transport acceptance is not durable admission. */
+    signaled: number;
+    /** Revisions acknowledged by the durable admission guard. */
     delivered: number;
+    pendingAdmission: number;
+    /** Legacy/embedding signalers may not return an acknowledgment receipt. */
+    unconfirmed: number;
     failed: number;
-}>;
+    pendingAdmissionBlockers: Partial<Record<Extract<import("@opengeni/db").SessionWorkflowWakeDeliveryResult, {
+        action: "pending_admission";
+    }>["blocker"], number>>;
+};
+export declare function reconcilePendingSessionWorkflowWakes(svc: NotifyServices, limit?: number, overrides?: ReconcileSessionWorkflowWakeOverrides): Promise<WorkflowWakeReconciliationResult>;
 /**
  * The worker-specific lines for one child (what happened + its goal), WITHOUT
  * the trailing "what to do next" instruction. Kept separate so N child

package/dist/activities/run-input.d.ts

@@ -47,6 +47,10 @@ export type HistoryPreparationPhaseMeasurement = {
     durationSeconds: number;
 };
 export declare const MAX_INLINE_MODEL_ATTACHMENT_BYTES: number;
+export declare const MAX_RETAINED_MODEL_ATTACHMENT_BYTES: number;
+export declare class RetainedAttachmentTransportLimitError extends Error {
+    constructor();
+}
 export type ModelAttachmentContent = {
     kind: "image" | "file";
     fileId: string;
@@ -63,13 +67,15 @@ export type ModelAttachmentInputPolicy = {
     supportsImageInput: boolean;
     inputFileMediaTypes: readonly string[];
 };
-export declare function modelAttachmentContentForFiles(files: FileAsset[], readFileBytes: (file: FileAsset) => Promise<Uint8Array>): Promise<ModelAttachmentContent[]>;
+export declare function modelAttachmentContentForFiles(files: FileAsset[], readFileBytes: (file: FileAsset) => Promise<Uint8Array>, options?: {
+    retainAll?: boolean;
+}): Promise<ModelAttachmentContent[]>;
 /**
- * Build one turn-scoped durable-attachment projector. Current attachment
- * metadata arrives already authorized; bytes are memoized for same-turn retry.
- * Historical projection has no database or object-storage path.
+ * Build one turn-scoped durable-attachment projector. Resolve active refs under
+ * current file authority and memoize metadata/bytes for retries and compaction.
+ * A turn boundary never changes an authorized attachment's representation.
  */
-export declare function createModelHistoryAttachmentProjector(policy: ModelAttachmentInputPolicy, readFileBytes?: (file: FileAsset) => Promise<Uint8Array>): ModelHistoryAttachmentProjector;
+export declare function createModelHistoryAttachmentProjector(policy: ModelAttachmentInputPolicy, readFileBytes?: (file: FileAsset) => Promise<Uint8Array>, loadAuthorizedFiles?: (fileIds: readonly string[]) => Promise<readonly FileAsset[]>): ModelHistoryAttachmentProjector;
 /** Add current trigger refs only when older/local history predates durable stamping. */
 export declare function withCurrentUserAttachmentRefs(historyItems: Array<Record<string, unknown>>, refs: FileResourceRef[]): Array<Record<string, unknown>>;
 export declare function turnInput(db: Database, runtime: OpenGeniRuntime, agent: any, trigger: Awaited<ReturnType<typeof getSessionEvent>>, options: TurnInputOptions): Promise<PreparedTurnInput>;

package/dist/activities/sandbox-lease.d.ts

@@ -1,3 +1,4 @@
+import type { ProviderCommandPersistence } from "@opengeni/runtime";
 import { type OpStatus } from "@opengeni/agent-proto";
 import { listLiveModalSandboxLeaseAttributions, readLease, type ReapDrainable, type RetainedProcessProviderProof, type SandboxRetainedProcess, type LeaseSnapshot } from "@opengeni/db";
 import { type ConnectedMachineBackgroundCommandClaim, type ConnectedMachineBackgroundCommandProof } from "@opengeni/db/session-background-commands";
@@ -92,9 +93,9 @@ export type RetainedProcessProbeResult = {
     providerBinding: ModalCheckpointProviderBinding;
 } | {
     status: "deferred";
-    reason: "identity_mismatch" | "resume_state_missing" | "backend_unsupported" | "provider_running" | "provider_unknown" | "provider_timeout" | "provider_error" | "provider_binding_missing" | "provider_binding_mismatch";
+    reason: "identity_mismatch" | "resume_state_missing" | "backend_unsupported" | "provider_running" | "provider_unknown" | "provider_timeout" | "provider_error" | "provider_binding_missing" | "provider_binding_mismatch" | "process_observation_unavailable";
 };
-export type RetainedProcessProbeFn = (settings: ActivityServices["settings"], lease: LeaseSnapshot, process: SandboxRetainedProcess, mode?: "observe" | "cancel", captureOutput?: (result: unknown, chunkId: string) => Promise<void>) => Promise<RetainedProcessProbeResult>;
+export type RetainedProcessProbeFn = (settings: ActivityServices["settings"], lease: LeaseSnapshot, process: SandboxRetainedProcess, mode?: "observe" | "cancel", captureOutput?: (result: unknown, chunkId: string, stream?: "stdout" | "stderr", streamFidelity?: "separate" | "merged") => Promise<void>, providerPersistence?: ProviderCommandPersistence) => Promise<RetainedProcessProbeResult>;
 export type HistoricalModalSandboxLifecycleProbeFn = typeof inspectModalSandboxLifecycle;
 export type DrainableProviderProbeFn = (settings: ActivityServices["settings"], lease: LeaseSnapshot) => Promise<"ready" | "missing">;
 export declare const RETAINED_PROCESS_RECONCILIATION_LIMIT = 20;
@@ -157,10 +158,10 @@ export declare function retainedProcessReconciliationDeferral(settings: Pick<Act
     quarantined: boolean;
 };
 export declare function captureRetainedProbeOutput(processId: string, result: unknown, capture: (result: unknown, chunkId: string) => Promise<void>): Promise<void>;
-export declare function probeRetainedProcessAtProvider(settings: ActivityServices["settings"], lease: LeaseSnapshot, process: SandboxRetainedProcess, mode?: "observe" | "cancel", captureOutput?: (result: unknown, chunkId: string) => Promise<void>): Promise<RetainedProcessProbeResult>;
+export declare function probeRetainedProcessAtProvider(settings: ActivityServices["settings"], lease: LeaseSnapshot, process: SandboxRetainedProcess, mode?: "observe" | "cancel", captureOutput?: (result: unknown, chunkId: string, stream?: "stdout" | "stderr", streamFidelity?: "separate" | "merged") => Promise<void>, providerPersistence?: ProviderCommandPersistence): Promise<RetainedProcessProbeResult>;
 /** Classify only exact SDK control banners. Arbitrary output, malformed text,
  * and a running marker are observations to retry; none is physical exit proof. */
-export declare function classifyRetainedProcessPollResult(result: unknown, providerSessionId: number): RetainedProcessProbeResult;
+export declare function classifyRetainedProcessPollResult(result: unknown, providerSessionId: number, source?: object): RetainedProcessProbeResult;
 export declare function modalOrphanTerminationStillEligible(latest: Awaited<ReturnType<typeof listLiveModalSandboxLeaseAttributions>>, candidate: ModalOrphanSweepTermination): boolean;
 export type SandboxDrainReason = "idle" | "provider_deadline" | "operator" | "teardown_claim" | "rotation_requested";
 /** The bounded drain reason carried on `sandbox.box.terminated`: the lease's

package/dist/activities/types.d.ts

@@ -1,6 +1,6 @@
 import type { Settings } from "@opengeni/config";
 import type { ConnectionCredentialsPort, DocumentAuthorityKind, EntitlementsPort, ScheduledTaskTriggerType, TurnInitiator } from "@opengeni/contracts";
-import type { Database } from "@opengeni/db";
+import type { Database, SessionWorkflowWakeDeliveryResult } from "@opengeni/db";
 import type { DocumentServices } from "@opengeni/documents";
 import type { EventBus } from "@opengeni/events";
 import type { Observability } from "@opengeni/observability";
@@ -13,7 +13,9 @@ export type WakeSessionWorkflowSignal = (input: {
     workflowId: string;
     wakeRevision: number;
     interruptionRequested?: boolean;
-}) => Promise<void>;
+    /** Called after transport acceptance, before the fallible durable ACK. */
+    onSignalAccepted?: () => void;
+}) => Promise<SessionWorkflowWakeDeliveryResult | void>;
 export type SignalCodexCapacityWorkflow = (input: {
     accountId: string;
     workspaceId: string;

package/dist/activities/workflow-wake.d.ts

@@ -1,8 +1,6 @@
 import type { ControlActivityServices } from "./types.js";
-export type DispatchSessionWorkflowWakesResult = {
-    claimed: number;
-    delivered: number;
-    failed: number;
+import { type WorkflowWakeReconciliationResult } from "./parent-wake.js";
+export type DispatchSessionWorkflowWakesResult = WorkflowWakeReconciliationResult & {
     exhaustedBatchLimit: boolean;
 };
 /**