nanocodex 0.6.5 → 0.6.6

package/README.md

@@ -252,6 +252,20 @@ normal browser Agent, an account-owned managed Agent, or a grant-scoped
 one-use ticket for that path. The browser binding never receives ChatGPT
 credentials or places its reusable grant bearer in a WebSocket URL.
 
+### Content-free Worker tracing
+
+`nanocodex/cloudflare/tracing` wraps native `tracing.enterSpan(name, callback)`
+with sanitized exception events. Use static operation names: they become
+exception codes on failure. The original error is rethrown; its message and
+stack are never passed to `recordException`.
+
+`setSpanAttributes(span, attributes)` sets bulk metadata, while
+`annotateActiveSpan(attributes)` annotates the current invocation or active
+span without changing nesting. `recordSpanException(span, code)` handles
+failures represented by results rather than thrown errors. Supply only static
+codes and content-free attributes. On older workerd versions, these retain
+individual attributes and `error.type` without requiring the September APIs.
+
 ### Durable Cloudflare Agent
 
 `nanocodex/cloudflare` is the standard Durable Object consumer. It keeps the
@@ -1167,7 +1181,7 @@ package manager or build step:
 
 ```html
 <script type="module">
-  import { Agent, Transport } from "https://cdn.jsdelivr.net/npm/nanocodex@0.6.5/host/index.mjs";
+  import { Agent, Transport } from "https://cdn.jsdelivr.net/npm/nanocodex@0.6.6/host/index.mjs";
   const agent = await Agent.create({
     transport: Transport.hostManaged({
       websocketUrl: "/api/responses",

package/browser/Voice.mjs

@@ -198,10 +198,17 @@ export function create(agent, options = {}) {
     // Media readiness updates the UI independently; start still waits for task
     // admission, and a later rejection closes media through the same error path.
     startPromise = next.start().then(publishReady).catch(async (cause) => {
-      if (session === next) session = undefined;
-      if (activeResources.get(agent) === resource) activeResources.delete(agent);
-      cleanupWatcher();
-      await next.close().catch(() => next.abort());
+      if (session === next) {
+        session = undefined;
+        if (activeResources.get(agent) === resource) activeResources.delete(agent);
+        cleanupWatcher();
+      }
+      // Keep replacement starts behind failed startup cleanup, just like stop().
+      // A stale attempt must never detach a replacement session's event watcher.
+      const closing = next.close().catch(() => next.abort());
+      if (generation === current) stopPromise = closing;
+      await closing;
+      if (stopPromise === closing) stopPromise = undefined;
       if (destroyed || generation !== current) return;
       if (attempt === 0 && cause?.code === "peer_connection_timeout") return start(parameters, 1);
       const error = cause instanceof Error ? cause : new Error(String(cause));

package/browser/VoiceSession.mjs

@@ -90,6 +90,7 @@ export class BrowserVoiceSession {
   #elevenLabs;
   #muted = false;
   #inputGeneration = 0;
+  #playbackRevision = 0;
   #meterTimer;
   #backendReady;
   #resolveBackendReady;
@@ -267,7 +268,7 @@ export class BrowserVoiceSession {
     const channel = this.#channel;
     channel.addEventListener("message", (event) => {
       if (this.#directControl && !this.#closed && this.#channel === channel) {
-        this.#receiveControl(event.data, () => this.#channel === channel);
+        this.#receiveControl(event.data, () => this.#channel === channel && channel.readyState === "open");
       }
     });
     channel.addEventListener("close", () => {
@@ -311,6 +312,7 @@ export class BrowserVoiceSession {
   }
 
   noteTypedInput() {
+    this.#playbackRevision++;
     this.#playbackEnabled = false;
     this.#elevenLabs?.interrupt();
     this.#speaker?.setEnabled(false);
@@ -429,14 +431,19 @@ export class BrowserVoiceSession {
     for (const text of effects.undelivered_answers ?? []) this.#options.onUndeliveredAnswer?.(text);
     if (effects.input_generation !== undefined) {
       if (effects.input_generation < this.#inputGeneration) return;
-      if (effects.input_generation > this.#inputGeneration) this.#elevenLabs?.interrupt();
+      if (effects.input_generation > this.#inputGeneration) {
+        this.#playbackRevision++;
+        this.#elevenLabs?.interrupt();
+      }
       this.#inputGeneration = effects.input_generation;
     }
     if (effects.playback_enabled === false) {
+      this.#playbackRevision++;
       this.#playbackEnabled = false;
       this.#elevenLabs?.interrupt();
       this.#speaker?.setEnabled(false);
     }
+    const playbackRevision = this.#playbackRevision;
     let sent = 0;
     for (const frame of effects.frames ?? []) {
       if (this.#directControl && this.#channel?.readyState === "open") {
@@ -448,12 +455,15 @@ export class BrowserVoiceSession {
       }
     }
     if (effects.acknowledge_frames && sent > 0) await this.#core?.framesSent(sent);
-    if (!this.#closed && effects.playback_enabled === true && sent === (effects.frames?.length ?? 0)) {
+    // A live interruption can overtake asynchronous frame acknowledgement.
+    // Keep its speaker gate authoritative while retaining accepted captions.
+    const currentPlayback = playbackRevision === this.#playbackRevision;
+    if (currentPlayback && !this.#closed && effects.playback_enabled === true && sent === (effects.frames?.length ?? 0)) {
       this.#playbackEnabled = true;
       this.#speaker?.setEnabled(!this.#elevenLabs);
     }
     for (const entry of effects.transcripts ?? []) {
-      if (this.#playbackEnabled && !this.#closed) this.#elevenLabs?.transcript(entry);
+      if (currentPlayback && this.#playbackEnabled && !this.#closed) this.#elevenLabs?.transcript(entry);
       this.#options.onTranscript(entry.speaker, entry.text, entry);
     }
     if (effects.status) this.#status(effects.status);
@@ -490,7 +500,7 @@ export class BrowserVoiceSession {
     let opened = false;
     sideband.addEventListener("message", (event) => {
       if (!this.#closed && generation === this.#sidebandGeneration) {
-        this.#receiveControl(event.data, () => generation === this.#sidebandGeneration);
+        this.#receiveControl(event.data, () => generation === this.#sidebandGeneration && sideband.readyState === WebSocket.OPEN);
       }
     });
     sideband.addEventListener("close", () => {
@@ -516,7 +526,11 @@ export class BrowserVoiceSession {
     this.#applyLive(async () => {
       if (!this.#directControl) await this.#admission;
       if (this.#closed || !isCurrent()) return;
-      if (await this.#core.requiresAgentAdmission(payload)) {
+      const requiresAdmission = await this.#core.requiresAgentAdmission(payload);
+      // Classification can yield while this transport closes or is replaced.
+      // Only requests accepted on the current connection may enter the queue.
+      if (this.#closed || !isCurrent()) return;
+      if (requiresAdmission) {
         // Retain accepted requests on close, but keep captions and interruptions
         // independent of the durable route and its ordered task queue.
         void this.#enqueue(async () => {

package/cloud/types.d.mts

@@ -22,6 +22,7 @@ export type ConnectorConnection = Readonly<{
   label: string;
   accountId?: string | undefined;
   capabilities?: readonly CloudAccount[] | undefined;
+  scopes?: readonly string[] | undefined;
 }>;
 
 /** Provider-neutral status for a connector service capability. */

package/cloudflare/Agent.d.mts

@@ -5,6 +5,7 @@ import type {
   AgentEvent,
   DefaultAgent,
   ToolConfiguration,
+  SessionSnapshot,
 } from "../types.mjs";
 import type { CloudflareDurableObjectStorage } from "../runtime/cloudflare-durability-store.mjs";
 import type { Tool as SubagentTool } from "../runtime/subagents.mjs";
@@ -52,6 +53,9 @@ export type Agent<extended extends object = {}> =
     ): Agent<extended & extension>;
   }>;
 
+/** Copies the exact latest committed model boundary; rejects before the first safe boundary. */
+export function checkpoint(agent: Agent): Promise<SessionSnapshot>;
+
 /** Removes the package-owned durable history for one Cloudflare Agent. */
 export function destroy(owner: DurableObjectOwner): void;
 

package/cloudflare/Agent.mjs

@@ -6,6 +6,7 @@ import { responseControlsBody, responseControlsSocket } from "../runtime/respons
 import * as HostAgent from "../host/Agent.mjs";
 import {
   CLOUDFLARE_SESSION_RESERVATION,
+  checkpoint as checkpointAgent,
   commitCloudflareAgentSession,
   installHostBridge,
   loadDurabilityRuntime,
@@ -38,6 +39,7 @@ import {
 const STARTUP_TIMEOUT_MS = 10_000;
 const INTERNAL_RUNTIME = Symbol.for("nanocodex.cloudflare.internalRuntime");
 const INTERNAL_CONFIGURATION = Symbol.for("nanocodex.cloudflare.internalConfiguration");
+const INTERNAL_FORK_RESUME = Symbol.for("nanocodex.cloudflare.internalForkResume");
 const EPHEMERAL_APPLICATION_OPTIONS = new Set([
   "beforeCompaction",
   "additionalInstructions",
@@ -70,6 +72,7 @@ export function bindAgent(module, hostAgent = HostAgent) {
     pruneDurableReceipts: (owner, options) => pruneDurableReceipts(module, owner, options),
     create: (owner, options) => create(module, owner, options, hostAgent),
     createEphemeral: (owner, options) => createEphemeral(module, owner, options),
+    checkpoint,
     destroy,
     exportDurabilityState,
     exportDurabilityHead,
@@ -78,6 +81,11 @@ export function bindAgent(module, hostAgent = HostAgent) {
   });
 }
 
+/** Copies the latest safe committed boundary as a resumable SessionSnapshot. */
+export function checkpoint(agent) {
+  return checkpointAgent(agent);
+}
+
 /** Atomically steers an active Cloudflare Agent turn or starts a new turn. */
 export function route(agent, options) {
   return routePrompt(agent, options);
@@ -122,6 +130,7 @@ export function destroy(owner) {
         stateId,
       );
     }
+    storage.sql.exec("DROP TABLE IF EXISTS nanocodex_cloudflare_fork_resume");
     clearCloudflareEventSocket(context);
   });
 }
@@ -294,7 +303,7 @@ async function createPrepared(module, resolved, options, hostAgent, lifecycle, p
   if (typeof prepare !== "function") throw new TypeError("Cloudflare Agent preparation must be a function");
   const configuration = options[INTERNAL_CONFIGURATION];
   validateInternalConfiguration(configuration);
-  if (!configuration || !["gpt-6-astra", "gpt-6-sol", "gpt-6-luna"].includes(configuration.model)) {
+  if (!configuration || !["gpt-6-astra", "gpt-6.1-sol", "gpt-6-luna"].includes(configuration.model)) {
     throw new Error("Cloudflare Agent preparation requires a native root configuration");
   }
   const runtime = options[INTERNAL_RUNTIME];
@@ -304,7 +313,37 @@ async function createPrepared(module, resolved, options, hostAgent, lifecycle, p
   const signal = runtime.preparationSignal;
   signal?.throwIfAborted();
   createCloudflareDurabilityStore(resolved.context.storage);
+  initializeAgentStorage(resolved.context.storage);
+  const pristineAtStart = storedSessionId(resolved.context.storage) === undefined
+    && storedStateId(resolved.context.storage) === undefined;
+  const initialForkResume = options?.[INTERNAL_FORK_RESUME];
+  let initialForkDigest;
+  if (initialForkResume !== undefined) {
+    if (!initialForkResume || typeof initialForkResume !== "object" || Array.isArray(initialForkResume))
+      throw new TypeError("Cloudflare Agent fork resume must be a SessionSnapshot");
+    const bytes = new Uint8Array(await crypto.subtle.digest("SHA-256",
+      new TextEncoder().encode(JSON.stringify(initialForkResume))));
+    initialForkDigest = [...bytes].map(byte => byte.toString(16).padStart(2, "0")).join("");
+  }
   const { sessionId, stateId } = durableIdentity(resolved.context.storage, options.durabilityId);
+  if (initialForkDigest !== undefined) {
+    // Pin the seed before optional tool discovery/transport preparation. A
+    // failed preparation can reopen the exact fork with the same snapshot.
+    resolved.context.storage.sql.exec(`CREATE TABLE IF NOT EXISTS nanocodex_cloudflare_fork_resume (
+      singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+      state_id TEXT NOT NULL, digest TEXT NOT NULL
+    )`);
+    const previous = resolved.context.storage.sql.exec(
+      "SELECT state_id, digest FROM nanocodex_cloudflare_fork_resume WHERE singleton = 1",
+    ).toArray()[0];
+    if ((!pristineAtStart && !previous) || (previous
+      && (previous.state_id !== stateId || previous.digest !== initialForkDigest))) {
+      throw new Error("Cloudflare Agent fork resume conflicts with its retained seed");
+    }
+    resolved.context.storage.sql.exec(
+      "INSERT OR IGNORE INTO nanocodex_cloudflare_fork_resume(singleton,state_id,digest) VALUES (1,?,?)",
+      stateId, initialForkDigest);
+  }
   const endpoint = cloudflareEgress({ binding: scopeCloudflareEgress(resolved.egress, resolved.subject) });
   const connection = prepareConnection(endpoint, sessionId, signal);
   let completing;
@@ -328,10 +367,12 @@ async function createPrepared(module, resolved, options, hostAgent, lifecycle, p
         if (prepared?.durabilityId !== stateId
           || ["model", "reasoning_mode"].some(key => pinned?.[key] !== configuration[key])
           || runtime?.prepare !== undefined || runtime?.workersAi !== undefined || runtime?.gateway !== undefined
-          || (runtime?.inferenceForSession !== undefined && runtime?.preserveRootTransport !== true)) {
+          || (runtime?.inferenceForSession !== undefined && runtime?.preserveRootTransport !== true)
+          || (initialForkDigest !== undefined && JSON.stringify(prepared?.[INTERNAL_FORK_RESUME]) !== JSON.stringify(initialForkResume))) {
           throw new Error("Cloudflare Agent preparation changed its pinned transport or configuration");
         }
-        return createOwned(module, resolved, prepared, hostAgent, lifecycle, connection);
+        return createOwned(module, resolved, prepared, hostAgent, lifecycle, connection,
+          pristineAtStart ? { sessionId, stateId } : undefined);
       });
       void completing.catch(() => {});
       return completing;
@@ -350,7 +391,7 @@ async function createPrepared(module, resolved, options, hostAgent, lifecycle, p
   }
 }
 
-async function createOwned(module, resolved, options, hostAgent, lifecycle, preparedConnection) {
+async function createOwned(module, resolved, options, hostAgent, lifecycle, preparedConnection, pristinePreparedIdentity) {
   const { context, egress, subject } = resolved;
   const configured = applicationOptions(options);
   const {
@@ -358,6 +399,7 @@ async function createOwned(module, resolved, options, hostAgent, lifecycle, prep
     eventPersistence = "durable",
     [INTERNAL_RUNTIME]: internalRuntime,
     [INTERNAL_CONFIGURATION]: internalConfiguration,
+    [INTERNAL_FORK_RESUME]: forkResume,
     ...agentOptions
   } = configured;
   if (internalRuntime !== undefined
@@ -368,6 +410,10 @@ async function createOwned(module, resolved, options, hostAgent, lifecycle, prep
     && typeof internalRuntime.onSocketTiming !== "function") {
     throw new TypeError("Cloudflare Agent socket timing hook must be a function");
   }
+  if (internalRuntime?.onResponseCreateSent !== undefined
+    && typeof internalRuntime.onResponseCreateSent !== "function") {
+    throw new TypeError("Cloudflare Agent response.create sent hook must be a function");
+  }
   if (internalRuntime?.onRequestShape !== undefined
     && typeof internalRuntime.onRequestShape !== "function") {
     throw new TypeError("Cloudflare Agent request shape hook must be a function");
@@ -397,7 +443,54 @@ async function createOwned(module, resolved, options, hostAgent, lifecycle, prep
     : undefined;
   if (eventPersistence === "caller") clearCloudflareEventSocket(context);
   const durability = createCloudflareDurabilityStore(context.storage);
+  let resumeDigest;
+  if (forkResume !== undefined) {
+    if (!forkResume || typeof forkResume !== "object" || Array.isArray(forkResume)) {
+      throw new TypeError("Cloudflare Agent fork resume must be a SessionSnapshot");
+    }
+    initializeAgentStorage(context.storage);
+    context.storage.sql.exec(`CREATE TABLE IF NOT EXISTS nanocodex_cloudflare_fork_resume (
+      singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+      state_id TEXT NOT NULL, digest TEXT NOT NULL
+    )`);
+    const digestBytes = new Uint8Array(await crypto.subtle.digest("SHA-256",
+      new TextEncoder().encode(JSON.stringify(forkResume))));
+    resumeDigest = [...digestBytes].map(byte => byte.toString(16).padStart(2, "0")).join("");
+    const recordedSeed = context.storage.sql.exec(
+      "SELECT state_id, digest FROM nanocodex_cloudflare_fork_resume WHERE singleton = 1",
+    ).toArray()[0];
+    const existingSessionId = storedSessionId(context.storage);
+    const existingStateId = storedStateId(context.storage);
+    // The preparation barrier may have installed the new identity already. A
+    // failed/restarted child construction may retain that identity and a
+    // revision-zero owner fence, but still has no executed checkpoint. The
+    // durable seed is unchanged; allow that cold retry and reject any real head.
+    if ((existingSessionId !== undefined || existingStateId !== undefined)
+      && !((pristinePreparedIdentity?.sessionId === existingSessionId
+          && pristinePreparedIdentity?.stateId === existingStateId)
+        || (existingSessionId !== undefined && existingStateId !== undefined
+          && (durabilityId === undefined || existingStateId === durabilityId)
+          && recordedSeed?.state_id === existingStateId
+          && recordedSeed?.digest === resumeDigest))) {
+      throw new Error("Cloudflare Agent fork resume requires a pristine Durable Object");
+    }
+    if (recordedSeed && (recordedSeed.digest !== resumeDigest
+      || (existingStateId !== undefined && recordedSeed.state_id !== existingStateId))) {
+      throw new Error("Cloudflare Agent fork resume conflicts with its retained seed");
+    }
+    const checkStateId = existingStateId ?? durabilityId;
+    if (checkStateId !== undefined && context.storage.sql.exec(
+      "SELECT revision, payload FROM nanocodex_durable_states WHERE state_id = ?", checkStateId,
+    ).toArray().some(row => row.revision !== "0" || row.payload !== null)) {
+      throw new Error("Cloudflare Agent fork resume requires pristine durability state");
+    }
+  }
   const { sessionId, stateId } = durableIdentity(context.storage, durabilityId);
+  if (resumeDigest !== undefined) {
+    context.storage.sql.exec(
+      "INSERT OR IGNORE INTO nanocodex_cloudflare_fork_resume(singleton,state_id,digest) VALUES (1,?,?)",
+      stateId, resumeDigest);
+  }
   const workersAi = internalRuntime?.workersAi;
   const gateway = internalRuntime?.gateway;
   if (gateway !== undefined && (workersAi !== undefined
@@ -439,7 +532,7 @@ async function createOwned(module, resolved, options, hostAgent, lifecycle, prep
             throw new Error("Native inference cannot replace a routed transport");
           }
           const parsed = JSON.parse(body);
-          if (!["gpt-6-astra", "gpt-6-sol", "gpt-6-luna"].includes(parsed.model)
+          if (!["gpt-6-astra", "gpt-6.1-sol", "gpt-6-luna"].includes(parsed.model)
             || !["none", "low", "medium", "high", "xhigh", "max"].includes(parsed.reasoning?.effort)) {
             throw new Error("Native inference requires a supported GPT model and thinking");
           }
@@ -473,7 +566,7 @@ async function createOwned(module, resolved, options, hostAgent, lifecycle, prep
             }
             selected = createWorkersAiResponses(profile.workersAi.ai);
           } else {
-            if (!["gpt-6-astra", "gpt-6-sol", "gpt-6-luna"].includes(profile.model)) {
+            if (!["gpt-6-astra", "gpt-6.1-sol", "gpt-6-luna"].includes(profile.model)) {
               throw new Error("Session model requires an explicit inference binding");
             }
             selected = frontierEndpoint;
@@ -500,7 +593,7 @@ async function createOwned(module, resolved, options, hostAgent, lifecycle, prep
         const opened = await (preparation === undefined
           ? endpoint.createWebSocket(url, id, request) : preparation.take(url, id, request));
         if (request.authorization === "preconnect") startup.resolve();
-        return { ...opened, socket: responseControlsSocket(opened.socket, internalRuntime?.responseControls, internalRuntime?.onRequestShape) };
+        return { ...opened, socket: responseControlsSocket(opened.socket, internalRuntime?.responseControls, internalRuntime?.onRequestShape, internalRuntime?.onResponseCreateSent) };
       } catch (error) {
         if (request.authorization === "preconnect") startup.reject(error);
         throw error;
@@ -542,6 +635,7 @@ async function createOwned(module, resolved, options, hostAgent, lifecycle, prep
       sessionId,
       durability,
       durabilityId: stateId,
+      ...(forkResume === undefined ? {} : { resume: forkResume }),
     });
     // Managed voice needs the durable session before the separate Responses
     // relay is ready. Its preconnection remains owned by the host and a later
@@ -730,14 +824,14 @@ function validateInternalConfiguration(configuration) {
       "reasoning_mode",
       "fast_mode",
     ].includes(key))
-    || !["gpt-6-sol", "gpt-6-luna", "gpt-6-astra", "@cf/zai-org/glm-5.3", "kimi-k3", "mimo-v2.6-pro"]
+    || !["gpt-6.1-sol", "gpt-6-luna", "gpt-6-astra", "@cf/zai-org/glm-5.3", "kimi-k3", "mimo-v2.6-pro"]
       .includes(configuration.model)
     || !["none", "low", "medium", "high", "xhigh", "max"].includes(configuration.thinking)
     || !["standard", "pro"].includes(configuration.reasoning_mode)
     || typeof configuration.fast_mode !== "boolean"
     || (["@cf/zai-org/glm-5.3", "kimi-k3", "mimo-v2.6-pro"].includes(configuration.model)
       && (!(configuration.model === "kimi-k3" ? ["low", "high"] : ["low", "medium", "high"]).includes(configuration.thinking) || configuration.reasoning_mode !== "standard"))
-    || (configuration.model === "gpt-6-astra" && configuration.thinking === "none")) {
+    || (["gpt-6-astra", "gpt-6.1-sol"].includes(configuration.model) && configuration.thinking === "none")) {
     throw new TypeError("Cloudflare Agent internal configuration is invalid");
   }
 }

package/cloudflare/agent-settings.d.mts

@@ -1,4 +1,4 @@
-export const AGENT_MODELS: readonly ["gpt-6-sol", "gpt-6-luna", "gpt-6-astra", "@cf/zai-org/glm-5.3", "kimi-k3", "mimo-v2.6-pro"];
+export const AGENT_MODELS: readonly ["gpt-6.1-sol", "gpt-6-luna", "gpt-6-astra", "@cf/zai-org/glm-5.3", "kimi-k3", "mimo-v2.6-pro"];
 export const AGENT_THINKING: readonly ["none", "low", "medium", "high", "xhigh", "max"];
 export const AGENT_REASONING_MODES: readonly ["standard", "pro"];
 export type ManagedAgentSettings = Readonly<{ model: typeof AGENT_MODELS[number]; thinking: typeof AGENT_THINKING[number]; reasoning_mode: typeof AGENT_REASONING_MODES[number]; fast_mode: boolean }>;

package/cloudflare/agent-settings.mjs

@@ -1,5 +1,5 @@
 export const AGENT_MODELS = [
-    "gpt-6-sol",
+    "gpt-6.1-sol",
     "gpt-6-luna",
     "gpt-6-astra",
     "@cf/zai-org/glm-5.3",
@@ -108,8 +108,8 @@ export function validateAgentSettings(settings) {
         && (!(settings.model === "kimi-k3" ? ["low", "high"] : ["low", "medium", "high"]).includes(settings.thinking) || settings.reasoning_mode !== "standard" || settings.fast_mode)) {
         throw new TypeError("Gateway model requires a supported effort, standard mode, and no fast mode");
     }
-    if (settings.model === "gpt-6-astra" && settings.thinking === "none") {
-        throw new TypeError("GPT-6 Astra requires low, medium, high, xhigh, or max thinking");
+    if (["gpt-6-astra", "gpt-6.1-sol"].includes(settings.model) && settings.thinking === "none") {
+        throw new TypeError("GPT-6 Astra and GPT-6.1 Sol require low, medium, high, xhigh, or max thinking");
     }
     if (settings.model === "gpt-6-astra" && settings.reasoning_mode === "pro") {
         throw new TypeError("GPT-6 Astra does not support pro reasoning mode");

package/cloudflare/gateway-binding-responses.mjs

@@ -23,9 +23,9 @@ export function toBindingResponsesInput(chat, effort) {
   }
   const payload = { input, stream: chat.stream === true, store: false, reasoning: { effort } };
   if (chat.tools) payload.tools = chat.tools.map(tool => ({ type: "function", ...tool.function,
-    // Preserve optional/loose managed schemas; Responses otherwise normalizes
-    // omitted strict to true, unlike the existing Chat transport.
-    strict: false }));
+    // Responses normalizes omitted strict to true; preserve explicit strict
+    // functions while leaving legacy optional/loose schemas non-strict.
+    strict: tool.function.strict === true }));
   if (chat.tool_choice !== undefined) payload.tool_choice = typeof chat.tool_choice === "string"
     ? chat.tool_choice : { type: "function", name: chat.tool_choice.function.name };
   if (chat.max_completion_tokens !== undefined) payload.max_output_tokens = chat.max_completion_tokens;

package/cloudflare/gateway-responses.mjs

@@ -6,7 +6,7 @@ const ENDPOINTS = Object.freeze({
   openrouter: "https://openrouter.ai/api/v1/chat/completions",
   vercel: "https://ai-gateway.vercel.sh/v1/chat/completions",
 });
-const MODELS = ["@cf/zai-org/glm-5.3", "gpt-6-astra", "gpt-6-sol", "gpt-6-luna", "kimi-k3", "mimo-v2.6-pro"];
+const MODELS = ["@cf/zai-org/glm-5.3", "gpt-6-astra", "gpt-6.1-sol", "gpt-6-luna", "kimi-k3", "mimo-v2.6-pro"];
 const fail = message => { throw new Error(`Gateway Responses: ${message}`); };
 
 /** Server-side, full-history transport; no WebSocket or opaque compaction. */
@@ -14,7 +14,7 @@ export function createGatewayResponses(options) {
   const { provider, model, reasoningEffort, apiKey, fetch: fetchImpl = globalThis.fetch } = options;
   if (provider !== "cloudflare" && !Object.hasOwn(ENDPOINTS, provider)) fail("unsupported provider");
   if (!MODELS.includes(model)) fail("unsupported canonical model");
-  if (!(["gpt-6-sol", "gpt-6-luna"].includes(model) ? ["none", "low", "medium", "high", "xhigh", "max"] : model === "kimi-k3" ? ["low", "high"] : ["low", "medium", "high"]).includes(reasoningEffort)) fail("unsupported reasoning effort");
+  if (!(model === "gpt-6-luna" ? ["none", "low", "medium", "high", "xhigh", "max"] : model === "gpt-6.1-sol" ? ["low", "medium", "high", "xhigh", "max"] : model === "kimi-k3" ? ["low", "high"] : ["low", "medium", "high"]).includes(reasoningEffort)) fail("unsupported reasoning effort");
   const cloudflareHttp = provider === "cloudflare" && (options.accountId !== undefined || apiKey !== undefined);
   if (provider === "cloudflare") {
     if (!model.startsWith("gpt-")) fail("Cloudflare gateway requires an OpenAI canonical model");
@@ -36,8 +36,8 @@ export function createGatewayResponses(options) {
   const adapter = (signal, attempt, reasoningMode) => createWorkersAiResponses({
     async run(_model, input) {
       signal?.throwIfAborted();
-      if (provider !== "cloudflare" && ["gpt-6-sol", "gpt-6-luna"].includes(model) && reasoningEffort !== "none" && input.tools?.length) {
-        fail("GPT-6 Sol/Luna function calling requires Responses or reasoning effort none");
+      if (provider !== "cloudflare" && input.tools?.length && (model === "gpt-6.1-sol" || model === "gpt-6-luna" && reasoningEffort !== "none")) {
+        fail("pinned Chat model/effort cannot call tools; use Responses");
       }
       if (input.reasoning_effort !== undefined && input.reasoning_effort !== reasoningEffort) fail("reasoning override does not match pinned effort");
       if (provider === "cloudflare" && !cloudflareHttp) {
@@ -160,7 +160,7 @@ export function createGatewayResponses(options) {
         // The portable Chat translator has no reasoning.mode field. Preserve it
         // explicitly on Responses transports and reject unsupported pro requests.
         const body = JSON.parse(request.body);
-        const supportsMode = ["gpt-6-sol", "gpt-6-luna"].includes(model);
+        const supportsMode = ["gpt-6.1-sol", "gpt-6-luna"].includes(model);
         const validateMode = value => {
           if (value !== undefined && !["standard", "pro"].includes(value)) fail("unsupported reasoning mode");
           if (value === "pro" && (provider !== "cloudflare" || !supportsMode)) fail("pro reasoning requires a supported Responses model");

package/cloudflare/managed-auth.d.mts

@@ -2,7 +2,7 @@ export type OrganizationCapability = "agents:read" | "agents:portability" | "age
 export type ApiKeyBase = Readonly<{ id: string; label: string; prefix: string; createdAt: number; digest: string; userId: string }>;
 export type StoredApiKey = ApiKeyBase & Readonly<{ organizationId: string; teamId: string; role: "owner" | "writer" | "reader"; capabilities: readonly OrganizationCapability[]; authorizationEpoch: number }>;
 export type ApiKeyPrincipal = Readonly<{ kind: "api_key"; userId: string; organizationId: string; teamId: string; role: StoredApiKey["role"]; subjectId: `api_key:${string}`; credentialId: string; authorizationEpoch: number; capabilities: readonly OrganizationCapability[] }>;
-export type AdmissionPrincipal = Readonly<{ kind: "api_key" | "account_session" | "connect_grant" | "service"; userId: string; organizationId: string; teamId: string; authorizationEpoch: number; capabilities: readonly string[]; connectGrant?: Readonly<{ grantId: string; connectors: readonly string[]; connectorConnections?: unknown; mcpIds: readonly string[]; appToolCatalogDigest?: string }> }>;
+export type AdmissionPrincipal = Readonly<{ kind: "api_key" | "account_session" | "connect_grant" | "service"; userId: string; organizationId: string; teamId: string; authorizationEpoch: number; capabilities: readonly string[]; connectGrant?: Readonly<{ grantId: string; connectors: readonly string[]; connectorConnections?: unknown; mcpIds: readonly string[]; appToolCatalogDigest?: string; sandboxExecution?: true; outputCheckpoints?: true }> }>;
 export const API_KEY: RegExp;
 export function isUserId(value: unknown): value is string;
 export function isOrganizationCapabilities(value: unknown): value is readonly OrganizationCapability[];

package/cloudflare/managed-auth.mjs

@@ -77,10 +77,16 @@ export function forwardPrincipalAssertions(headers, principal) {
         CONNECT_CONNECTOR_CONNECTIONS_HEADER,
         CONNECT_MCP_IDS_HEADER,
         CONNECT_APP_TOOL_CATALOG_DIGEST_HEADER,
+        "x-nanocodex-connect-sandbox-execution",
+        "x-nanocodex-connect-output-checkpoints",
     ]) {
         headers.delete(name);
     }
     if (principal.connectGrant) {
+        if (principal.connectGrant.outputCheckpoints === true) headers.set("x-nanocodex-connect-output-checkpoints", "true");
+        if (principal.connectGrant.sandboxExecution === true) {
+            headers.set("x-nanocodex-connect-sandbox-execution", "true");
+        }
         headers.set(CONNECT_GRANT_ID_HEADER, principal.connectGrant.grantId);
         headers.set(CONNECT_CONNECTORS_HEADER, JSON.stringify(principal.connectGrant.connectors));
         if (principal.connectGrant.connectorConnections !== undefined) {

package/cloudflare/tracing.d.mts

@@ -0,0 +1,16 @@
+export type SpanAttributes = Record<string, string | number | boolean | undefined>;
+export interface TraceSpan {
+  setAttribute(key: string, value: string | number | boolean): unknown;
+  setAttributes?(attributes: SpanAttributes): unknown;
+  recordException?(exception: { code: string }): void;
+}
+/** Only content-free metadata may be supplied. Uses individual attributes on older workerd. */
+export declare function setSpanAttributes(span: TraceSpan, attributes: SpanAttributes): void;
+/** Annotates the active native span when supported; does not create a span. */
+export declare function annotateActiveSpan(attributes: SpanAttributes): void;
+/** code must be a static operation label, never derived from a caught error. */
+export declare function recordSpanException(span: TraceSpan, code: string): void;
+/** Native nested spans that record sanitized failures and rethrow the original error. */
+export declare const tracing: {
+  enterSpan<T, A extends unknown[]>(name: string, callback: (span: TraceSpan, ...args: A) => T, ...args: A): T;
+};

package/cloudflare/tracing.mjs

@@ -0,0 +1,47 @@
+import { tracing as runtimeTracing } from "cloudflare:workers";
+
+/** Attributes must be content-free metadata, never prompts, credentials or bodies. */
+export function setSpanAttributes(span, attributes) {
+  if (typeof span.setAttributes === "function") {
+    span.setAttributes(attributes);
+  } else {
+    // The pinned local workerd predates the September 2026 span additions.
+    for (const [key, value] of Object.entries(attributes)) {
+      if (value !== undefined) span.setAttribute(key, value);
+    }
+  }
+}
+
+/** Annotate the current invocation/context without creating another child span. */
+export function annotateActiveSpan(attributes) {
+  const span = runtimeTracing.getActiveSpan?.();
+  if (span) setSpanAttributes(span, attributes);
+}
+
+/** code must be a static operation label, never derived from a caught error. */
+export function recordSpanException(span, code) {
+  span.setAttribute("error.type", code);
+  // Error objects include their raw message and stack. These can contain secrets.
+  span.recordException?.({ code });
+}
+
+/** Native nesting and lifetime, with content-free exception events. */
+export const tracing = {
+  enterSpan(name, callback, ...args) {
+    return runtimeTracing.enterSpan(name, span => {
+      try {
+        const result = callback(span, ...args);
+        if (result != null && typeof result.then === "function") {
+          return Promise.resolve(result).catch(error => {
+            recordSpanException(span, name);
+            throw error;
+          });
+        }
+        return result;
+      } catch (error) {
+        recordSpanException(span, name);
+        throw error;
+      }
+    });
+  },
+};

package/cloudflare/workers-ai-responses.d.mts

@@ -1,6 +1,6 @@
 import type { BrowserHttpRequest } from "../browser/host.mjs";
 
-export type ResponsesCanonicalModel = "@cf/zai-org/glm-5.3" | "gpt-6-astra" | "gpt-6-sol" | "gpt-6-luna" | "kimi-k3" | "mimo-v2.6-pro";
+export type ResponsesCanonicalModel = "@cf/zai-org/glm-5.3" | "gpt-6-astra" | "gpt-6.1-sol" | "gpt-6-luna" | "kimi-k3" | "mimo-v2.6-pro";
 
 /** Structural Workers AI binding; provider credentials stay with Cloudflare. */
 export type WorkersAiBinding<Model extends ResponsesCanonicalModel = "@cf/zai-org/glm-5.3"> = {

package/cloudflare/workers-ai-responses.mjs

@@ -2,7 +2,7 @@ import { toolAliasFailure } from "./tool-alias-diagnostic.mjs";
 import { chatReasoningText } from "./chat-reasoning.mjs";
 import { providerStream, streamResponse } from "./provider-stream.mjs";
 const MODEL = "@cf/zai-org/glm-5.3";
-const MODELS = [MODEL, "gpt-6-astra", "gpt-6-sol", "gpt-6-luna", "kimi-k3", "mimo-v2.6-pro"];
+const MODELS = [MODEL, "gpt-6-astra", "gpt-6.1-sol", "gpt-6-luna", "kimi-k3", "mimo-v2.6-pro"];
 const BASE = "https://workers-ai.invalid/v1";
 const fail = (message) => { throw new Error(`Workers AI Responses: ${message}`); };
 const json = (value) => typeof value === "string" ? value : JSON.stringify(value);
@@ -68,7 +68,7 @@ function translate(body, model) {
   if (!body || typeof body !== "object" || Array.isArray(body)) fail("expected a Responses request object");
   if (body.model !== undefined && body.model !== model) fail("unsupported model override; expected pinned model");
   const effort = (value) => {
-    if (value !== undefined && !(["gpt-6-sol", "gpt-6-luna"].includes(model) ? ["none", "low", "medium", "high", "xhigh", "max"] : model === "kimi-k3" ? ["low", "high"] : ["low", "medium", "high"]).includes(value)) fail("unsupported reasoning effort for pinned model");
+    if (value !== undefined && !(model === "gpt-6-luna" ? ["none", "low", "medium", "high", "xhigh", "max"] : model === "gpt-6.1-sol" ? ["low", "medium", "high", "xhigh", "max"] : model === "kimi-k3" ? ["low", "high"] : ["low", "medium", "high"]).includes(value)) fail("unsupported reasoning effort for pinned model");
     return value;
   };
   if (body.previous_response_id) fail("previous_response_id is unsupported; send the complete Responses history");
@@ -100,6 +100,7 @@ function translate(body, model) {
       description: [namespace ? `${namespace}.${name}` : name, description, tool.description,
         tool.type === "custom" ? "Pass the exact free-form tool input as the JSON string field input. Preserve all code and newlines." : "",
         tool.format?.definition ? `Input grammar (${tool.format.syntax}): ${tool.format.definition}` : ""].filter(Boolean).join("\n"),
+      ...(tool.type === "function" && tool.strict === true ? { strict: true } : {}),
       parameters: tool.type === "custom" ? {
         type: "object", properties: { input: { type: "string" } }, required: ["input"], additionalProperties: false,
       } : tool.parameters ?? { type: "object", properties: {} },

package/internal.mjs

@@ -229,6 +229,11 @@ export function compact(agent) {
   return agentState(agent).raw.compact();
 }
 
+/** Copies the live agent's latest committed, resumable model boundary. */
+export async function checkpoint(agent) {
+  return JSON.parse(await agentState(agent).raw.checkpoint());
+}
+
 export async function context(agent) {
   return parseSessionContext(await agentState(agent).raw.context());
 }