@xfey/tutti 0.1.106 → 0.1.108

package/README.md

@@ -15,6 +15,7 @@
 - host 到 Relay 的连接与工作区加入协作
 - machine-local `standalone | feishu` Project Surface authority，以及Standalone browser session / Feishu trusted integration的双向Host gate
 - Feishu主群聊Chat Assistant canonical response与Host-owned durable outbound handoff intent
+- Feishu 外部来源的按需读取、受控临时 cache、invocation 版本和 SQLite 读取证据；正式 Reference／Standalone 上传与历史 snapshot 保持，见 [external-reference-access.md](../../docs/system/external-reference-access.md)
 
 ## 结构
 
@@ -26,6 +27,7 @@
 - `prepare-package-assets.mjs`：把 Web build output 和内部 runtime package 复制到 staging package 所需位置。
 - `pack-dry-run.mjs`：构建 staging package 并执行 `npm pack --dry-run --json` 文件列表校验。
 - `smoke-packed-cli.mjs`：安装并验证 packed CLI tarball 的本地 smoke，包括 CLI help / version、runtime deps 和 QR dependency。
+  - 发布时可将 `TUTTI_PACKED_CLI_ARTIFACT_DIR` 指向已存在的独立绝对目录；仅全部 smoke 成功后保留同一已测 `.tgz`，拒绝覆盖同名文件，输出 SHA-256 而不输出临时路径。默认仍清理临时产物。
 - `smoke-desktop-protocol.mjs`：在真实 `~/Applications` 下使用唯一临时 bundle / scheme 验证 macOS 图标点击与 LaunchServices URL event，并在结束时注销、清理。
 - `vitest.config.mjs`：默认快速 Server 测试入口，排除真实 Git、子进程、loopback Host 与 npm preview 集成套件。
 - `vitest.integration.config.mjs`：显式 Server integration 入口；完整保留上述慢套件的行为覆盖。

package/dist/collaboration-ingestion/external-source.js

@@ -86,7 +86,13 @@ export function ingestTrustedConversationSource(options) {
             account_ref: options.command.actor.account_ref,
             display_name: options.command.actor.display_name,
         },
-        materialize: () => ({ kind: "message", body: source.content.text }),
+        materialize: () => ({
+            kind: "message",
+            body: source.content.text,
+            ...(source.external_references === undefined
+                ? {}
+                : { refs: { external_references: source.external_references } }),
+        }),
         idempotencyContext: {
             kind: "external_conversation_source",
             platform: source.locator.conversation.installation.platform,
@@ -94,6 +100,9 @@ export function ingestTrustedConversationSource(options) {
             external_message_ref: source.locator.message_ref,
             binding_ref: options.command.binding_ref,
             receipt_key: options.command.receipt.receipt_key,
+            ...(source.external_references === undefined
+                ? {}
+                : { external_references: source.external_references }),
         },
         afterCreate: (tx, message) => insertExternalSourceEvidence(tx, options.command, message),
         ...(options.scratchpadSource === undefined

package/dist/control-plane/procedure-logging.d.ts

@@ -1,6 +1,7 @@
 import type { ActivityRef, WorkflowInvocationRef } from "@tutti/shared/ids";
 import type { WorkflowKind } from "@tutti/shared/domain";
 import type { ControlPlaneLogger } from "./types.js";
+export declare function procedureExecutionErrorFields(error: unknown): Record<string, unknown>;
 export declare function logProcedureExecutionError(input: {
     logger: ControlPlaneLogger | undefined;
     workflowKind: WorkflowKind;

package/dist/control-plane/procedure-logging.js

@@ -8,6 +8,12 @@ const SAFE_DETAIL_KEYS = [
     "notification_count",
     "server_request_methods",
     "notification_methods",
+    "output_parse_reason",
+    "agent_output_chars",
+    "json_candidate_count",
+    "agent_message_count",
+    "completed_tool_count",
+    "file_tool_count",
 ];
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -37,16 +43,21 @@ function errorCode(error) {
     }
     return error.code;
 }
+export function procedureExecutionErrorFields(error) {
+    const code = errorCode(error);
+    const details = errorDetails(error);
+    return {
+        error_name: error instanceof Error ? error.name : "NonError",
+        ...(code === undefined ? {} : { error_code: code }),
+        ...(details === undefined ? {} : { error_details: details }),
+    };
+}
 export function logProcedureExecutionError(input) {
     input.logger?.info({
         activity_ref: input.activityRef,
         workflow_ref: input.workflowRef,
         workflow_kind: input.workflowKind,
-        error_name: input.error instanceof Error ? input.error.name : "NonError",
-        ...(errorCode(input.error) === undefined ? {} : { error_code: errorCode(input.error) }),
-        ...(errorDetails(input.error) === undefined
-            ? {}
-            : { error_details: errorDetails(input.error) }),
+        ...procedureExecutionErrorFields(input.error),
     }, "Procedure execution error");
 }
 //# sourceMappingURL=procedure-logging.js.map

package/dist/control-plane/reference-summary-refresh.js

@@ -2,7 +2,7 @@ import { createWorkflowInvocationRef } from "@tutti/shared/ids";
 import { recordProjectTimelineEvent } from "../project-timeline/index.js";
 import { withHostStoreTransaction } from "../store/index.js";
 import { WorkspaceOpsError, readReferenceSummaryTargets, updateReferenceSummaries, } from "../workspace-ops/index.js";
-import { logProcedureExecutionError } from "./procedure-logging.js";
+import { logProcedureExecutionError, procedureExecutionErrorFields } from "./procedure-logging.js";
 import { enqueueControlPlaneIntent, readControlPlaneIntentByDedupeKey, settlePendingControlPlaneIntent, } from "./dispatch-intents.js";
 const REFERENCE_SUMMARY_CONCURRENCY = 1;
 const REFERENCE_SUMMARY_MAX_ATTEMPTS = 2;
@@ -255,7 +255,7 @@ async function summarizeReferenceTarget(options) {
                 path: options.target.path,
                 attempt,
                 retrying: attempt < REFERENCE_SUMMARY_MAX_ATTEMPTS,
-                error_name: error instanceof Error ? error.name : "UnknownError",
+                ...procedureExecutionErrorFields(error),
             }, attempt < REFERENCE_SUMMARY_MAX_ATTEMPTS
                 ? "Reference summary target retrying"
                 : "Reference summary target failed");

package/dist/control-plane/task-source-context-types.d.ts

@@ -1,8 +1,9 @@
-import type { ClarificationRequestPayload } from "@tutti/shared/schemas/api";
+import type { ClarificationRequestPayload, ExternalReferenceDescriptor } from "@tutti/shared/schemas/api";
 export type PromptSourceMessage = {
     role: "human" | "tutti";
     author_display_name?: string;
     text: string;
+    external_references?: ExternalReferenceDescriptor[];
 };
 export type TaskCompileClarificationContext = {
     request_payload: ClarificationRequestPayload;

package/dist/control-plane/task-source-context.js

@@ -16,6 +16,13 @@ function promptSourceMessage(db, source) {
                 ? {}
                 : { author_display_name: displayName }),
             text: messageTextForModel(message),
+            ...(message.refs?.external_references === undefined
+                ? {}
+                : {
+                    external_references: message.refs.external_references.map((reference) => ({
+                        ...reference,
+                    })),
+                }),
         };
     }
     if (message.message_kind === "agent_text" && message.author.kind === "agent") {

package/dist/control-plane/workflows/openai.js

@@ -447,6 +447,7 @@ export function createOpenAiProcedureWorkflowRunner(options) {
                     appServerCwd: workspace.cwd,
                     validateOutput: isReferenceFileSummaryStructuredOutput,
                     readablePaths: [workspace.cwd],
+                    requireFileToolUse: true,
                     networkAccess: false,
                     webSearchMode: "disabled",
                 });

package/dist/providers/openai/app-server/read-only-procedure.d.ts

@@ -11,6 +11,8 @@ export type CodexAppServerReadOnlyProcedureInput<TOutput> = {
     workspaceRoot: string;
     appServerCwd?: string;
     readablePaths?: string[];
+    /** File-only workflows must not accept an answer produced without a filesystem tool attempt. */
+    requireFileToolUse?: boolean;
     prompt: string;
     outputSchema: unknown;
     validateOutput: (value: unknown) => value is TOutput;
@@ -66,11 +68,17 @@ export type CodexAppServerReadOnlyProcedureErrorDetails = {
     notification_methods?: string[];
     agent_message_excerpt?: string;
     stderr_excerpt?: string;
+    output_parse_reason?: "no_json_object" | "malformed_json";
+    agent_output_chars?: number;
+    json_candidate_count?: number;
+    agent_message_count?: number;
+    completed_tool_count?: number;
+    file_tool_count?: number;
 };
 export declare class CodexAppServerReadOnlyProcedureError extends Error {
-    readonly code: "app_server_protocol_error" | "auth_failed" | "thread_start_failed" | "turn_failed" | "turn_timeout" | "unexpected_server_request" | "skill_selection_failed" | "output_parse_failed" | "output_validation_failed" | "write_detected" | "secret_leak_detected" | "process_lifecycle_failed" | "admission_unavailable";
+    readonly code: "app_server_protocol_error" | "auth_failed" | "thread_start_failed" | "turn_failed" | "turn_timeout" | "unexpected_server_request" | "skill_selection_failed" | "output_parse_failed" | "output_validation_failed" | "file_read_not_observed" | "write_detected" | "secret_leak_detected" | "process_lifecycle_failed" | "admission_unavailable";
     readonly details: CodexAppServerReadOnlyProcedureErrorDetails;
-    constructor(code: "app_server_protocol_error" | "auth_failed" | "thread_start_failed" | "turn_failed" | "turn_timeout" | "unexpected_server_request" | "skill_selection_failed" | "output_parse_failed" | "output_validation_failed" | "write_detected" | "secret_leak_detected" | "process_lifecycle_failed" | "admission_unavailable", message: string, details?: CodexAppServerReadOnlyProcedureErrorDetails);
+    constructor(code: "app_server_protocol_error" | "auth_failed" | "thread_start_failed" | "turn_failed" | "turn_timeout" | "unexpected_server_request" | "skill_selection_failed" | "output_parse_failed" | "output_validation_failed" | "file_read_not_observed" | "write_detected" | "secret_leak_detected" | "process_lifecycle_failed" | "admission_unavailable", message: string, details?: CodexAppServerReadOnlyProcedureErrorDetails);
 }
 export declare function resolveReadOnlyWebSearchMode(input: {
     networkAccess?: boolean;

package/dist/providers/openai/app-server/read-only-procedure.js

@@ -4,14 +4,14 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { buildCodexAppServerProcessPlan } from "../codex-app-server.js";
 import { DEFAULT_OPENAI_MODEL } from "../model-config.js";
-import { CodexAppServerJsonRpcClient, CodexAppServerProtocolError, } from "./json-rpc.js";
+import { CodexAppServerJsonRpcClient, CodexAppServerProtocolError } from "./json-rpc.js";
 import { CodexAppServerInvocation, CodexAppServerLifecycleError, createManagedProcess, } from "./invocation-lifecycle.js";
 import { CodexAppServerAdmissionError, } from "./invocation-coordinator.js";
 import { createCodexAppServerRuntimeObserver, } from "./runtime-telemetry.js";
 import { createReadOnlySandboxPolicy } from "./sandbox-policy.js";
 import { buildCodexAppServerProviderConfigOverrides, resolveCodexAppServerModelProvider, } from "./provider-config.js";
 import { buildCodexAppServerTurnInput, resolveCodexAppServerContextRuntimeHint, resolveCodexAppServerSkillInputs, CodexAppServerSkillSelectionError, } from "./skills.js";
-import { containsKnownSecret, createCodexSpawnEnv, extractAgentText, extractServerRequestMethod, findJsonObjectCandidates, isApiKeyAccount, readThreadId, readTurnError, readTurnStatus, redactWithKnownValues, compactText, } from "./runtime-helpers.js";
+import { containsKnownSecret, createCodexSpawnEnv, extractAgentText, extractServerRequestMethod, findJsonObjectCandidates, isRecord, isApiKeyAccount, readThreadId, readTurnError, readTurnStatus, redactWithKnownValues, compactText, } from "./runtime-helpers.js";
 import { extractCodexAppServerTokenUsage } from "../token-usage.js";
 const DEFAULT_REQUEST_TIMEOUT_MS = 60_000;
 const DEFAULT_TURN_TIMEOUT_MS = 600_000;
@@ -65,7 +65,11 @@ function readOnlyTimeoutDetails(input) {
 export function parseCodexAppServerStructuredJson(text) {
     const candidates = findJsonObjectCandidates(text);
     if (candidates.length === 0) {
-        throw new CodexAppServerReadOnlyProcedureError("output_parse_failed", "Codex app-server did not return a JSON object.");
+        throw new CodexAppServerReadOnlyProcedureError("output_parse_failed", "Codex app-server did not return a JSON object.", {
+            output_parse_reason: "no_json_object",
+            agent_output_chars: text.length,
+            json_candidate_count: 0,
+        });
     }
     for (const jsonText of candidates.toReversed()) {
         try {
@@ -75,7 +79,37 @@ export function parseCodexAppServerStructuredJson(text) {
             // Earlier app-server progress can contain brace-shaped text.
         }
     }
-    throw new CodexAppServerReadOnlyProcedureError("output_parse_failed", "Codex app-server returned malformed JSON.");
+    throw new CodexAppServerReadOnlyProcedureError("output_parse_failed", "Codex app-server returned malformed JSON.", {
+        output_parse_reason: "malformed_json",
+        agent_output_chars: text.length,
+        json_candidate_count: candidates.length,
+    });
+}
+/** Counts only; model text, tool arguments and stderr never enter structured diagnostics. */
+function structuredOutputDetails(client, text) {
+    const itemTypes = client.notifications.flatMap((notification) => {
+        const params = notification.params;
+        return notification.method === "item/completed" &&
+            isRecord(params) &&
+            isRecord(params.item) &&
+            typeof params.item.type === "string"
+            ? [params.item.type]
+            : [];
+    });
+    return {
+        turn_status: "completed",
+        notification_count: client.notifications.length,
+        notification_methods: client.notifications
+            .map((notification) => notification.method)
+            .slice(-20),
+        server_request_methods: client.serverRequests.map(extractServerRequestMethod),
+        agent_output_chars: text.length,
+        json_candidate_count: findJsonObjectCandidates(text).length,
+        agent_message_count: itemTypes.filter((type) => type === "agentMessage").length,
+        completed_tool_count: itemTypes.filter((type) => ["commandExecution", "mcpToolCall", "dynamicToolCall", "imageView", "webSearch"].includes(type)).length,
+        file_tool_count: itemTypes.filter((type) => ["commandExecution", "imageView"].includes(type))
+            .length,
+    };
 }
 export async function runCodexAppServerReadOnlyProcedure(options) {
     if (options.invocationCoordinator !== undefined && options.invocationLease === undefined) {
@@ -102,14 +136,21 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
     let contextRuntimeHint;
     try {
         skillInputs = resolveCodexAppServerSkillInputs({
-            ...(options.skillSelectionName === undefined ? {} : { selectionName: options.skillSelectionName }),
+            ...(options.skillSelectionName === undefined
+                ? {}
+                : { selectionName: options.skillSelectionName }),
             ...(options.userSkillsRoot === undefined ? {} : { userSkillsRoot: options.userSkillsRoot }),
             ...(options.builtInSkillsRoot === undefined
                 ? {}
                 : { builtInSkillsRoot: options.builtInSkillsRoot }),
         });
         contextRuntimeHint = resolveCodexAppServerContextRuntimeHint({
-            ...(options.skillSelectionName === undefined ? {} : { selectionName: options.skillSelectionName }),
+            ...(options.runtimeTelemetry?.activityRef === undefined
+                ? {}
+                : { activityRef: options.runtimeTelemetry.activityRef }),
+            ...(options.skillSelectionName === undefined
+                ? {}
+                : { selectionName: options.skillSelectionName }),
             ...(options.agentContext === undefined ? {} : { agentContext: options.agentContext }),
         });
     }
@@ -184,10 +225,7 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
         ...(contextRuntimeHint?.sensitiveValues ?? []),
         ...skillInputs.map((skill) => skill.path),
     ];
-    const strictLeakCheckValues = [
-        options.apiKey,
-        ...(contextRuntimeHint?.sensitiveValues ?? []),
-    ];
+    const strictLeakCheckValues = [options.apiKey, ...(contextRuntimeHint?.sensitiveValues ?? [])];
     let primaryError;
     let procedureResult;
     let lifecycleError;
@@ -249,9 +287,7 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
             input: buildCodexAppServerTurnInput({
                 prompt: options.prompt,
                 skills: skillInputs,
-                ...(contextRuntimeHint === undefined
-                    ? {}
-                    : { runtimeHints: [contextRuntimeHint.text] }),
+                ...(contextRuntimeHint === undefined ? {} : { runtimeHints: [contextRuntimeHint.text] }),
             }),
             cwd: appServerCwd,
             approvalPolicy: "never",
@@ -314,9 +350,26 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
         const agentText = client.notifications
             .map((notification) => extractAgentText(notification))
             .join("");
-        const parsed = parseCodexAppServerStructuredJson(agentText);
+        let parsed;
+        try {
+            parsed = parseCodexAppServerStructuredJson(agentText);
+        }
+        catch (error) {
+            if (!(error instanceof CodexAppServerReadOnlyProcedureError))
+                throw error;
+            throw new CodexAppServerReadOnlyProcedureError(error.code, error.message, {
+                ...structuredOutputDetails(client, agentText),
+                ...error.details,
+            });
+        }
         if (!options.validateOutput(parsed)) {
-            throw new CodexAppServerReadOnlyProcedureError("output_validation_failed", "Codex app-server structured output did not match the expected schema.");
+            throw new CodexAppServerReadOnlyProcedureError("output_validation_failed", "Codex app-server structured output did not match the expected schema.", structuredOutputDetails(client, agentText));
+        }
+        if (options.requireFileToolUse === true) {
+            const details = structuredOutputDetails(client, agentText);
+            if (details.file_tool_count === 0) {
+                throw new CodexAppServerReadOnlyProcedureError("file_read_not_observed", "Codex app-server did not attempt to inspect the summary source file.", details);
+            }
         }
         const gitStatusAfter = readGitStatus(options.workspaceRoot);
         if (gitStatusAfter !== gitStatusBefore) {

package/dist/providers/openai/app-server/skills.d.ts

@@ -1,3 +1,4 @@
+import type { ActivityRef } from "@tutti/shared/ids";
 export type CodexAppServerSkillInput = {
     name: string;
     path: string;
@@ -15,13 +16,14 @@ export type CodexAppServerSkillInputItem = {
 export type CodexAppServerTurnInputItem = CodexAppServerSkillInputItem | CodexAppServerTextInputItem;
 export type CodexAppServerBuiltInSkillName = "read-main-chat" | "read-project-docs" | "read-scratchpad" | "read-worklist" | "read-references" | "read-user-skills";
 export type CodexAppServerSkillSelectionName = "chat_assistant" | "project_context_bootstrap" | "task_compile" | "context_sync" | "reference_summary_refresh" | "workspace_write_run" | "follow_up_run";
-export type CodexAppServerContextApiScope = "messages:read" | "project-docs:list" | "project-docs:read" | "scratchpad:read" | "worklist:read" | "task:read" | "references:list" | "references:read" | "skills:list" | "skills:read";
+export type CodexAppServerContextApiScope = "messages:read" | "project-docs:list" | "project-docs:read" | "scratchpad:read" | "worklist:read" | "task:read" | "references:list" | "references:read" | "references:external" | "skills:list" | "skills:read";
 export type CodexAppServerSkillSelection = {
     builtInSkillNames: CodexAppServerBuiltInSkillName[];
     userSkillMode: "disabled" | "all_enabled";
     contextApiScopes: CodexAppServerContextApiScope[];
 };
 export type CodexAppServerAgentContextTokenRequest = {
+    activityRef?: ActivityRef;
     selectionName: CodexAppServerSkillSelectionName;
     scopes: CodexAppServerContextApiScope[];
 };
@@ -76,6 +78,7 @@ export declare function buildCodexAppServerContextRuntimeHint(options: {
     expiresAt?: string;
 }): string;
 export declare function resolveCodexAppServerContextRuntimeHint(options: {
+    activityRef?: ActivityRef;
     selectionName?: CodexAppServerSkillSelectionName;
     agentContext?: CodexAppServerAgentContextRuntime;
 }): CodexAppServerContextRuntimeHint | undefined;

package/dist/providers/openai/app-server/skills.js

@@ -30,6 +30,7 @@ export const CODEX_APP_SERVER_SKILL_SELECTIONS = {
             "task:read",
             "references:list",
             "references:read",
+            "references:external",
             "skills:list",
             "skills:read",
         ],
@@ -42,6 +43,7 @@ export const CODEX_APP_SERVER_SKILL_SELECTIONS = {
             "project-docs:read",
             "references:list",
             "references:read",
+            "references:external",
         ],
     },
     task_compile: {
@@ -54,6 +56,7 @@ export const CODEX_APP_SERVER_SKILL_SELECTIONS = {
             "task:read",
             "references:list",
             "references:read",
+            "references:external",
         ],
     },
     context_sync: {
@@ -74,23 +77,29 @@ export const CODEX_APP_SERVER_SKILL_SELECTIONS = {
         contextApiScopes: [],
     },
     workspace_write_run: {
-        builtInSkillNames: ["read-project-docs", "read-worklist"],
+        builtInSkillNames: ["read-project-docs", "read-worklist", "read-references"],
         userSkillMode: "all_enabled",
         contextApiScopes: [
             "project-docs:list",
             "project-docs:read",
             "worklist:read",
             "task:read",
+            "references:list",
+            "references:read",
+            "references:external",
         ],
     },
     follow_up_run: {
-        builtInSkillNames: ["read-project-docs", "read-worklist"],
+        builtInSkillNames: ["read-project-docs", "read-worklist", "read-references"],
         userSkillMode: "all_enabled",
         contextApiScopes: [
             "project-docs:list",
             "project-docs:read",
             "worklist:read",
             "task:read",
+            "references:list",
+            "references:read",
+            "references:external",
         ],
     },
 };
@@ -206,6 +215,7 @@ export function resolveCodexAppServerContextRuntimeHint(options) {
         return undefined;
     }
     const issued = options.agentContext.issueToken({
+        ...(options.activityRef === undefined ? {} : { activityRef: options.activityRef }),
         selectionName: options.selectionName,
         scopes: selection.contextApiScopes,
     });

package/dist/providers/openai/app-server/workspace-write-run.js

@@ -174,7 +174,9 @@ export async function runCodexAppServerWorkspaceWriteRun(options) {
     let contextRuntimeHint;
     try {
         skillInputs = resolveCodexAppServerSkillInputs({
-            ...(options.skillSelectionName === undefined ? {} : { selectionName: options.skillSelectionName }),
+            ...(options.skillSelectionName === undefined
+                ? {}
+                : { selectionName: options.skillSelectionName }),
             ...(options.userSkillsRoot === undefined ? {} : { userSkillsRoot: options.userSkillsRoot }),
             ...(options.builtInSkillsRoot === undefined
                 ? {}
@@ -182,11 +184,18 @@ export async function runCodexAppServerWorkspaceWriteRun(options) {
         });
         skillsListWarmup = resolveCodexAppServerSkillsListWarmup({
             cwd: options.workspaceRoot,
-            ...(options.skillSelectionName === undefined ? {} : { selectionName: options.skillSelectionName }),
+            ...(options.skillSelectionName === undefined
+                ? {}
+                : { selectionName: options.skillSelectionName }),
             ...(options.userSkillsRoot === undefined ? {} : { userSkillsRoot: options.userSkillsRoot }),
         });
         contextRuntimeHint = resolveCodexAppServerContextRuntimeHint({
-            ...(options.skillSelectionName === undefined ? {} : { selectionName: options.skillSelectionName }),
+            ...(options.approvalContext?.activityRef === undefined
+                ? {}
+                : { activityRef: options.approvalContext.activityRef }),
+            ...(options.skillSelectionName === undefined
+                ? {}
+                : { selectionName: options.skillSelectionName }),
             ...(options.agentContext === undefined ? {} : { agentContext: options.agentContext }),
         });
     }
@@ -264,10 +273,7 @@ export async function runCodexAppServerWorkspaceWriteRun(options) {
             ...entry.extraUserRoots,
         ]) ?? []),
     ];
-    const strictLeakCheckValues = [
-        options.apiKey,
-        ...(contextRuntimeHint?.sensitiveValues ?? []),
-    ];
+    const strictLeakCheckValues = [options.apiKey, ...(contextRuntimeHint?.sensitiveValues ?? [])];
     let primaryError;
     let runResult;
     let lifecycleError;
@@ -336,9 +342,7 @@ export async function runCodexAppServerWorkspaceWriteRun(options) {
             input: buildCodexAppServerTurnInput({
                 prompt: options.prompt,
                 skills: skillInputs,
-                ...(contextRuntimeHint === undefined
-                    ? {}
-                    : { runtimeHints: [contextRuntimeHint.text] }),
+                ...(contextRuntimeHint === undefined ? {} : { runtimeHints: [contextRuntimeHint.text] }),
             }),
             cwd: options.workspaceRoot,
             approvalPolicy,

package/dist/reference-access/cache.d.ts

@@ -0,0 +1,50 @@
+export declare class ReferenceCacheError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export type ReferenceCopy = {
+    source_ref: string;
+    revision: string;
+    sha256: string;
+    path: string;
+    size_bytes: number;
+    media_type: string;
+    checked_at: string;
+};
+export type ReferenceFetchResult = {
+    revision: string;
+    media_type: string;
+    content: Uint8Array;
+};
+export declare class ExternalReferenceCache {
+    private readonly options;
+    private readonly workspace;
+    private readonly ledgerFile;
+    private readonly ledger;
+    private tail;
+    constructor(options: {
+        workspaceRoot: string;
+        ledgerRoot: string;
+        now?: () => number;
+        maxTotalBytes?: number;
+        retentionMs?: number;
+    });
+    private now;
+    private validateLedger;
+    private save;
+    private bytes;
+    /** A pin belongs to a server-issued invocation, never to model-supplied identity. */
+    acquire(input: {
+        sourceRef: string;
+        invocationRef: string;
+        expiresAt: number;
+        fetch: () => Promise<ReferenceFetchResult>;
+    }): Promise<{
+        copy: ReferenceCopy;
+        cache_hit: boolean;
+        content: Buffer;
+    }>;
+    private projection;
+    private prune;
+}
+//# sourceMappingURL=cache.d.ts.map