impel-cli 0.20.27 → 0.20.28

package/RELEASE_NOTES.md

@@ -1,5 +1,15 @@
 # Release notes
 
+## 0.20.28 — Exact opaque answer resumes
+
+- Aligns generated Claude and Codex direct-answer adapters with the opaque
+  `impel.native-agent-continuation.v1` contract instead of telling them to
+  reconstruct the durable fingerprint-bearing handle.
+- Restricts the answer-only resume tool schema to the exact two-field opaque
+  continuation and regenerates existing managed agent profiles on update.
+- Keeps durable handle integrity checks strict and rejects altered metadata
+  rather than restoring the deprecated direct-answer shape.
+
 ## 0.20.26 — Native task-board navigation
 
 - Embeds Tasks in each managed desktop app's content view instead of a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.20.27",
+  "version": "0.20.28",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/agents.js

@@ -53,8 +53,9 @@ export const NATIVE_AGENT_ANSWER_TOOL = "answer_native_agent";
 export const NATIVE_AGENT_RUN_TOOL = "run_native_agent";
 export const NATIVE_AGENT_RESUME_TOOL = "resume_native_agent_run";
 export const NATIVE_AGENT_RECOVER_TOOL = "recover_native_agent_runs";
+export const NATIVE_AGENT_CONTINUATION_SCHEMA = "impel.native-agent-continuation.v1";
 export const MANAGED_AGENT_MCP_SERVER = "impel_agent";
-export const MANAGED_AGENT_MANIFEST_VERSION = 17;
+export const MANAGED_AGENT_MANIFEST_VERSION = 18;
 
 // The host model only selects the fixed MCP tool and faithfully returns its
 // result. Luna preserves deterministic direct-only code-mode routing while the
@@ -620,7 +621,7 @@ function claudeAdapterInstructions(tenantId, agent) {
       `Confirm that the request fits the synchronized capabilities ${JSON.stringify(agent.capabilities)} and none of the exclusions ${JSON.stringify(agent.exclusions)}.${contextRequirement}`,
       sideEffectInstruction,
       `Call ${nativeToolName(NATIVE_AGENT_ANSWER_TOOL)} exactly once with question set to the complete assigned task, optional context set to one string containing all supplied context, and contextKeys naming the fields present in that string.`,
-      `If the bounded answer returns an ${JSON.stringify("impel.native-agent-run.v1")} continuation handle, call ${nativeToolName(NATIVE_AGENT_RESUME_TOOL)} with exactly that handle until terminal. Never call answer_native_agent again for this request.`,
+      `If the bounded answer returns an object whose schema is exactly ${JSON.stringify(NATIVE_AGENT_CONTINUATION_SCHEMA)}, pass that complete object unchanged as the handle to ${nativeToolName(NATIVE_AGENT_RESUME_TOOL)} until terminal. Never change its schema or add handle metadata. Never call answer_native_agent again for this request.`,
       completionGuidance,
     ].join(" ");
   }
@@ -670,7 +671,7 @@ function codexAdapterInstructions(tenantId, agent) {
       `Confirm that the assigned request fits the cataloged capabilities ${JSON.stringify(agent.capabilities)} and none of the exclusions ${JSON.stringify(agent.exclusions)} before answering.${contextRequirement}`,
       sideEffectInstruction,
       `Call ${nativeToolName(NATIVE_AGENT_ANSWER_TOOL)} exactly once with question set to the complete assigned task, optional context set to one string containing all supplied context, and contextKeys naming the fields present in that string.`,
-      `If the bounded answer returns an ${JSON.stringify("impel.native-agent-run.v1")} continuation handle, call ${nativeToolName(NATIVE_AGENT_RESUME_TOOL)} with exactly that handle until terminal. Never call answer_native_agent again for this request.`,
+      `If the bounded answer returns an object whose schema is exactly ${JSON.stringify(NATIVE_AGENT_CONTINUATION_SCHEMA)}, pass that complete object unchanged as the handle to ${nativeToolName(NATIVE_AGENT_RESUME_TOOL)} until terminal. Never change its schema or add handle metadata. Never call answer_native_agent again for this request.`,
       completionGuidance,
     ].join("\n\n");
   }

package/src/nativeAgentTransport.js

@@ -10,6 +10,7 @@ import {
 } from "./config.js";
 import {
   NATIVE_AGENT_ANSWER_TOOL,
+  NATIVE_AGENT_CONTINUATION_SCHEMA,
   NATIVE_AGENT_GET_TOOL,
   NATIVE_AGENT_READ_TOOL,
   NATIVE_AGENT_RECOVER_TOOL,
@@ -29,12 +30,12 @@ import { renameWithWindowsRetry } from "./windowsFs.js";
 
 export {
   NATIVE_AGENT_ANSWER_TOOL,
+  NATIVE_AGENT_CONTINUATION_SCHEMA,
   NATIVE_AGENT_RECOVER_TOOL,
   NATIVE_AGENT_RESUME_TOOL,
   NATIVE_AGENT_RUN_TOOL,
 };
 export const NATIVE_AGENT_HANDLE_SCHEMA = "impel.native-agent-run.v1";
-export const NATIVE_AGENT_CONTINUATION_SCHEMA = "impel.native-agent-continuation.v1";
 export const NATIVE_AGENT_RESULT_SCHEMA = "impel.native-agent-result.v1";
 export const NATIVE_AGENT_RECOVERY_SCHEMA = "impel.native-agent-recovery.v1";
 
@@ -2220,11 +2221,8 @@ const ANSWER_RESUME_SCHEMA = {
   additionalProperties: false,
   required: ["schema", "invocationId"],
   properties: {
-    ...HANDLE_SCHEMA.properties,
-    schema: {
-      type: "string",
-      enum: [NATIVE_AGENT_CONTINUATION_SCHEMA, NATIVE_AGENT_HANDLE_SCHEMA],
-    },
+    schema: { type: "string", const: NATIVE_AGENT_CONTINUATION_SCHEMA },
+    invocationId: { type: "string" },
   },
 };