@opengeni/worker-bundle 0.28.3-canary.0 → 0.28.4-canary.0

package/dist/activities/agent-turn/mcp-operation-read-tool.d.ts

@@ -0,0 +1,16 @@
+import type { AttemptToolDefinition } from "@opengeni/codemode";
+import { z } from "zod";
+declare const selectorSchema: z.ZodUnion<readonly [z.ZodObject<{
+    operationId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    sourceTurnId: z.ZodString;
+    sourceCallId: z.ZodString;
+}, z.core.$strict>]>;
+export type McpOperationReadSelector = z.infer<typeof selectorSchema>;
+/** Attempt-local adapter. The supplied read closure owns canonical session
+ * access, current provider authority, immutable binding checks and settlement.
+ * No caller-controlled provider parameters cross this tool boundary. */
+export declare function createOperationReadAttemptToolDefinition(input: {
+    read: (selector: McpOperationReadSelector) => Promise<Record<string, unknown>>;
+}): AttemptToolDefinition;
+export {};

package/dist/activities/mcp-operation-authority.d.ts

@@ -0,0 +1,16 @@
+import type { ConnectionUseAttribution } from "@opengeni/contracts/connection-authority";
+import type { HostMcpAcceptedAuthority } from "@opengeni/contracts/host-mcp-bindings";
+import type { ResolveConnectionCredentialInput } from "@opengeni/db";
+/** Metadata only. Callers must obtain authority from a current live fence.
+ * This equality key is never authorization and never replaces physical-use checks. */
+export declare function mcpOperationAuthorityDigest(request: ResolveConnectionCredentialInput, authority: {
+    native: ConnectionUseAttribution;
+    host?: never;
+    principal?: {
+        kind: string;
+        subjectId?: string;
+    };
+} | {
+    host: HostMcpAcceptedAuthority;
+    native?: never;
+}): string;

package/dist/activities/mcp-operation-observer.d.ts

@@ -0,0 +1,14 @@
+import type { Settings } from "@opengeni/config";
+import type { AttemptToolEnvironment } from "@opengeni/codemode";
+import { type ResolveConnectionCredentialInput, type ResolveConnectionCredentialResult } from "@opengeni/runtime";
+import type { McpOperationReaderDependencies } from "./mcp-operation-reader.js";
+/** Current-attempt adapter: no credential renewal authority survives this
+ * closure. The stored digest constrains fresh authority, never establishes it. */
+export declare function createMcpOperationObserverResolver(input: {
+    settings: Pick<Settings, "mcpServers">;
+    workspaceId: string;
+    credentialSubjectId?: string;
+    assertAttempt: () => Promise<void>;
+    resolveCredential: (request: ResolveConnectionCredentialInput) => Promise<ResolveConnectionCredentialResult>;
+    getEnvironment: () => Promise<AttemptToolEnvironment | null>;
+}): McpOperationReaderDependencies["resolveObserver"];

package/dist/activities/mcp-operation-reader.d.ts

@@ -0,0 +1,45 @@
+import type { AttemptToolResult } from "@opengeni/contracts";
+import { type McpObservationReceipt } from "@opengeni/runtime";
+import type { McpOperationReadSelector } from "./agent-turn/mcp-operation-read-tool.js";
+type TerminalReceipt = Extract<McpObservationReceipt, {
+    status: "completed";
+}>;
+/** Internal, credential-free projection loaded through canonical current
+ * attempt/session authorization. Never return this object directly to tools. */
+export type McpOperationReadRecord = {
+    operationId: string;
+    sourceTurnId: string;
+    sourceCallId: string | null;
+    serverId: string;
+    originalTool: string;
+    observerTool: string;
+    argumentDigest: string;
+    destinationDigest: string;
+    authorityDigest: string;
+    originalOutcome: "captured" | "completed" | "outcome_unknown";
+    originalResult: AttemptToolResult | null;
+    receipt: TerminalReceipt | null;
+};
+type ObserverResolution = {
+    status: "unsupported" | "auth_needed" | "binding_changed";
+} | {
+    status: "ready";
+    authorize: (phase: "before_request" | "before_delivery") => Promise<boolean>;
+    callObserver: (tool: string, args: Record<string, unknown>) => Promise<unknown>;
+};
+export type McpOperationReaderDependencies = {
+    /** Includes live attempt and original-principal/session disclosure checks. */
+    load: (selector: McpOperationReadSelector) => Promise<McpOperationReadRecord | null>;
+    claim: (operationId: string) => Promise<string | null>;
+    release: (operationId: string, claimId: string) => Promise<void>;
+    /** Claim-fenced transaction storing one immutable receipt. Must recheck
+     * canonical current authority and never rewrite the original outcome.
+     * Delivery uses the ordinary operation_read tool-result lifecycle. */
+    settle: (operationId: string, claimId: string, receipt: TerminalReceipt) => Promise<McpOperationReadRecord>;
+    /** Binds the current trusted config/connection to the persisted original
+     * digests. Model arguments may not supply or replace any of that authority. */
+    resolveObserver: (operation: McpOperationReadRecord) => Promise<ObserverResolution>;
+};
+/** One explicit read; no timer, inference wake, or mutation replay. */
+export declare function readMcpOperation(selector: McpOperationReadSelector, dependencies: McpOperationReaderDependencies): Promise<Record<string, unknown>>;
+export {};

package/dist/activities/mcp-operation-store.d.ts

@@ -0,0 +1,6 @@
+import type { Database } from "@opengeni/db";
+import { type McpOperationAttempt } from "@opengeni/db/mcp-operations";
+import type { McpOperationReaderDependencies } from "./mcp-operation-reader.js";
+/** All DB calls remain bound to the actual accepted worker attempt. Locators
+ * supplied to operation_read cannot replace this scope or its principal. */
+export declare function createMcpOperationReadStore(db: Database, attempt: McpOperationAttempt): Pick<McpOperationReaderDependencies, "load" | "claim" | "release" | "settle">;

package/dist/{activities-control-JUBMDBDZ.js → activities-control-J5QNRWVH.js}

@@ -52,6 +52,7 @@ import {
   recordWorkerDeathRecoveryMetrics,
   runtimeMetricsHooksForObservability
 } from "./chunk-A4XQWVZK.js";
+import "./chunk-PZ5AY32C.js";
 
 // src/activities/browser-state-artifact-reaper.ts
 import {
@@ -10335,4 +10336,4 @@ export {
   createControlActivities,
   createControlActivitiesFromServices
 };
-//# sourceMappingURL=activities-control-JUBMDBDZ.js.map
+//# sourceMappingURL=activities-control-J5QNRWVH.js.map