veryfront 0.1.1271 → 0.1.1272-rc.23463

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1271",
+    "version": "0.1.1272-rc.23463",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/agent/hosted/executor-model-bridge.d.ts

@@ -19,6 +19,8 @@ export interface ExecutorModelDispatchPermit {
     assertActive(): void;
     /** Enter the owner-selected scope for this exact provider invocation. */
     run?<T>(operation: () => T): T;
+    /** Called after the provider accepts the dispatch. */
+    dispatchSucceeded?(): void;
 }
 /** Generic broker hook; hosted callers use the required persistence wrapper. */
 export type ExecutorModelDispatchGate = (request: ExecutorModelDispatch, context: ExecutorOperationContext) => void | ExecutorModelDispatchPermit | Promise<void | ExecutorModelDispatchPermit>;

package/esm/src/agent/hosted/executor-model-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor-model-bridge.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/hosted/executor-model-bridge.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,KAAK,EAAgB,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAIrF,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,yBAAyB,EAE/B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAGL,KAAK,qBAAqB,EAY3B,MAAM,4BAA4B,CAAC;AAEpC,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,aAAa,CAAC,CAAC;CAC5E;AAED,iFAAiF;AACjF,MAAM,WAAW,2BAA2B;IAC1C,YAAY,IAAI,IAAI,CAAC;IACrB,yEAAyE;IACzE,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CAChC;AAED,gFAAgF;AAChF,MAAM,MAAM,yBAAyB,GAAG,CACtC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,wBAAwB,KAC9B,IAAI,GAAG,2BAA2B,GAAG,OAAO,CAAC,IAAI,GAAG,2BAA2B,CAAC,CAAC;AAEtF,kGAAkG;AAClG,MAAM,MAAM,2BAA2B,GAAG,CACxC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,wBAAwB,KAC9B,qBAAqB,CAAC,SAAS,CAAC,CAAC;AAEtC;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IACjD,mBAAmB,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAC3D,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;CAClD,GAAG,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAyOzC;AAoFD;;;;;GAKG;AACH,wBAAsB,kCAAkC,CAAC,OAAO,EAAE;IAChE,OAAO,EAAE,eAAe,CAAC;IACzB,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAuCrC;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,OAAO,EAAE,eAAe,CAAC;IACzB,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAcrD"}
+{"version":3,"file":"executor-model-bridge.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/hosted/executor-model-bridge.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,KAAK,EAAgB,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAIrF,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,yBAAyB,EAE/B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAGL,KAAK,qBAAqB,EAY3B,MAAM,4BAA4B,CAAC;AAEpC,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,aAAa,CAAC,CAAC;CAC5E;AAED,iFAAiF;AACjF,MAAM,WAAW,2BAA2B;IAC1C,YAAY,IAAI,IAAI,CAAC;IACrB,yEAAyE;IACzE,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,sDAAsD;IACtD,iBAAiB,CAAC,IAAI,IAAI,CAAC;CAC5B;AAED,gFAAgF;AAChF,MAAM,MAAM,yBAAyB,GAAG,CACtC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,wBAAwB,KAC9B,IAAI,GAAG,2BAA2B,GAAG,OAAO,CAAC,IAAI,GAAG,2BAA2B,CAAC,CAAC;AAEtF,kGAAkG;AAClG,MAAM,MAAM,2BAA2B,GAAG,CACxC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,wBAAwB,KAC9B,qBAAqB,CAAC,SAAS,CAAC,CAAC;AAEtC;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IACjD,mBAAmB,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAC3D,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;CAClD,GAAG,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA2OzC;AAoFD;;;;;GAKG;AACH,wBAAsB,kCAAkC,CAAC,OAAO,EAAE;IAChE,OAAO,EAAE,eAAe,CAAC;IACzB,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAuCrC;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,OAAO,EAAE,eAAe,CAAC;IACzB,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAcrD"}

package/esm/src/agent/hosted/executor-model-bridge.js

@@ -139,6 +139,7 @@ export function createExecutorModelBroker(options) {
                         permit?.assertActive();
                         const dispatch = () => call.model.doGenerate({ ...call.options, abortSignal: context.signal });
                         result = await (permit?.run ? permit.run(dispatch) : dispatch());
+                        permit?.dispatchSucceeded?.();
                     }
                     catch (error) {
                         return modelFailureOrThrow(error, context);
@@ -166,6 +167,7 @@ export function createExecutorModelBroker(options) {
                         permit?.assertActive();
                         const dispatch = () => call.model.doStream({ ...call.options, abortSignal: context.signal });
                         result = await (permit?.run ? permit.run(dispatch) : dispatch());
+                        permit?.dispatchSucceeded?.();
                     }
                     catch (error) {
                         yield modelFailureOrThrow(error, context);

package/esm/src/agent/hosted/executor-model-dispatch.d.ts

@@ -3,6 +3,7 @@ import type { ExecutorOperation } from "../executor/channel.js";
 import { type ExecutorBinding } from "../executor/protocol.js";
 import type { AgentModelRuntimeResolver } from "../runtime/model-transport.js";
 import { type ExecutorModelGrant } from "./executor-model-grant.js";
+import type { ExecutorSkillObservation } from "./executor-skill-observation.js";
 /** Ingress-owned invocation authority. The sink already owns its exact run identity. */
 export interface HostedExecutorModelScope {
     readonly binding: ExecutorBinding;
@@ -15,6 +16,8 @@ interface HostedModelBrokerInput {
     allowedModelIds: ReadonlySet<string>;
     scope: HostedExecutorModelScope;
     grant: ExecutorModelGrant;
+    /** Host-owned record updated with each prompt dispatched to the provider. */
+    skillObservation?: ExecutorSkillObservation;
 }
 /**
  * Hosted model operations require a captured, acknowledging run event sink.

package/esm/src/agent/hosted/executor-model-dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor-model-dispatch.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/hosted/executor-model-dispatch.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,iBAAiB,EAGlB,MAAM,qCAAqC,CAAC;AAO7C,OAAO,KAAK,EAAE,iBAAiB,EAA4B,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,KAAK,eAAe,EAA4B,MAAM,yBAAyB,CAAC;AACzF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAI/E,OAAO,EAAgC,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAgGlG,wFAAwF;AACxF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,uFAAuF;IACvF,QAAQ,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC;CACnC;AAED,UAAU,sBAAsB;IAC9B,mBAAmB,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAC3D,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,EAAE,wBAAwB,CAAC;IAChC,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,sBAAsB,GAAG;IAC9B,uFAAuF;IACvF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC5C,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,IAAI,CAAC;CACjC,GACA,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA2CxC;AAED;;;;;GAKG;AACH,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,sBAAsB,GAAG;IAC9B,QAAQ,EAAE;QAAE,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;CACpF,GACA,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAKxC"}
+{"version":3,"file":"executor-model-dispatch.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/hosted/executor-model-dispatch.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,iBAAiB,EAGlB,MAAM,qCAAqC,CAAC;AAO7C,OAAO,KAAK,EAAE,iBAAiB,EAA4B,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,KAAK,eAAe,EAA4B,MAAM,yBAAyB,CAAC;AACzF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAI/E,OAAO,EAAgC,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAElG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AA+FhF,wFAAwF;AACxF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,uFAAuF;IACvF,QAAQ,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC;CACnC;AAED,UAAU,sBAAsB;IAC9B,mBAAmB,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAC3D,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,EAAE,wBAAwB,CAAC;IAChC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;CAC7C;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,sBAAsB,GAAG;IAC9B,uFAAuF;IACvF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC5C,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,IAAI,CAAC;CACjC,GACA,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA2CxC;AAED;;;;;GAKG;AACH,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,sBAAsB,GAAG;IAC9B,QAAQ,EAAE;QAAE,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;CACpF,GACA,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAKxC"}

package/esm/src/agent/hosted/executor-model-dispatch.js

@@ -187,6 +187,9 @@ function createScopedHostedModelBroker(input, persist) {
                 run(operation) {
                     return runWithVeryfrontCloudModelCallCapture({ receipt, assertActive }, operation);
                 },
+                dispatchSucceeded() {
+                    input.skillObservation?.observePrompt(request.options.prompt);
+                },
             };
         },
     });

package/esm/src/agent/hosted/executor-skill-observation.d.ts

@@ -0,0 +1,18 @@
+import type { ModelRuntimePromptMessage } from "../../provider/types.js";
+import type { ProviderObservedSkillBody } from "../../tool/provider-observed-skill-bodies.js";
+import { type TrustedSkillLoadHistoryMessage } from "../runtime/skill-policy-enforcement.js";
+/**
+ * Host-side record of which skill bodies the provider has received, built only
+ * from load_skill results the host returned and model requests the host brokered.
+ */
+export interface ExecutorSkillObservation {
+    /** Record trusted historical load_skill bodies for later exact prompt matching. */
+    recordTrustedHistory(messages: readonly TrustedSkillLoadHistoryMessage[]): void;
+    /** Record a host-executed tool result; only successful load_skill bodies count. */
+    recordToolResult(toolName: string, toolCallId: string | undefined, result: unknown): void;
+    /** Mark bodies observed when a brokered model request carries their results. */
+    observePrompt(prompt: readonly ModelRuntimePromptMessage[]): void;
+    observedSkillBodies(): ProviderObservedSkillBody[];
+}
+export declare function createExecutorSkillObservation(): ExecutorSkillObservation;
+//# sourceMappingURL=executor-skill-observation.d.ts.map

package/esm/src/agent/hosted/executor-skill-observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-skill-observation.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/hosted/executor-skill-observation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEzE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAE9F,OAAO,EAIL,KAAK,8BAA8B,EACpC,MAAM,wCAAwC,CAAC;AAEhD;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,mFAAmF;IACnF,oBAAoB,CAAC,QAAQ,EAAE,SAAS,8BAA8B,EAAE,GAAG,IAAI,CAAC;IAChF,mFAAmF;IACnF,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1F,gFAAgF;IAChF,aAAa,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,GAAG,IAAI,CAAC;IAClE,mBAAmB,IAAI,yBAAyB,EAAE,CAAC;CACpD;AAgCD,wBAAgB,8BAA8B,IAAI,wBAAwB,CA4DzE"}

package/esm/src/agent/hosted/executor-skill-observation.js

@@ -0,0 +1,96 @@
+import { createPrivateMap } from "../../security/private-map.js";
+import { isLoadSkillToolName } from "../platform-tool-names.js";
+import { extractSkillId, extractSkillToolAvailability, snapshotTrustedSkillLoadResults, } from "../runtime/skill-policy-enforcement.js";
+import { snapshotBoundedJsonValue } from "../../schemas/json-value.js";
+import { readToolResultOwnDataProperty as readOwn } from "../../tool/result.js";
+const hasOwn = Object.hasOwn;
+const isArray = Array.isArray;
+const keys = Object.keys;
+const freeze = Object.freeze;
+function equalBody(left, right) {
+    if (left === right)
+        return true;
+    if (typeof left !== "object" || left === null || typeof right !== "object" || right === null) {
+        return false;
+    }
+    if (isArray(left)) {
+        if (!isArray(right) || left.length !== right.length)
+            return false;
+        for (let index = 0; index < left.length; index++) {
+            if (!equalBody(left[index], right[index]))
+                return false;
+        }
+        return true;
+    }
+    if (isArray(right))
+        return false;
+    const names = keys(left);
+    if (names.length !== keys(right).length)
+        return false;
+    for (let index = 0; index < names.length; index++) {
+        const name = names[index];
+        if (!hasOwn(right, name) || !equalBody(left[name], right[name]))
+            return false;
+    }
+    return true;
+}
+export function createExecutorSkillObservation() {
+    const bodies = createPrivateMap();
+    const observed = createPrivateMap();
+    const recordBody = (toolName, toolCallId, result) => {
+        if (!toolCallId || !isLoadSkillToolName(toolName))
+            return;
+        const skillId = extractSkillId(result);
+        const snapshot = snapshotBoundedJsonValue(result);
+        const references = snapshot.success
+            ? extractSkillToolAvailability(snapshot.value)?.references
+            : undefined;
+        // A repeated call ID is ambiguous provenance and never becomes observable.
+        bodies.set(toolCallId, bodies.has(toolCallId) || !skillId || !snapshot.success || references === undefined
+            ? null
+            : { body: freeze({ skillId, references: freeze(references) }), value: snapshot.value });
+    };
+    return {
+        recordTrustedHistory(messages) {
+            const results = snapshotTrustedSkillLoadResults(messages);
+            for (let index = 0; index < results.length; index++) {
+                if (!hasOwn(results, index))
+                    continue;
+                const result = results[index];
+                recordBody(result.toolName, result.toolCallId, result.result);
+            }
+        },
+        recordToolResult(toolName, toolCallId, result) {
+            recordBody(toolName, toolCallId, result);
+        },
+        observePrompt(prompt) {
+            for (let index = 0; index < prompt.length; index++) {
+                if (!hasOwn(prompt, index))
+                    continue;
+                const message = prompt[index];
+                const content = readOwn(message, "content");
+                if (readOwn(message, "role") !== "tool" || !isArray(content))
+                    continue;
+                for (let partIndex = 0; partIndex < content.length; partIndex++) {
+                    if (!hasOwn(content, partIndex))
+                        continue;
+                    const part = content[partIndex];
+                    const toolCallId = readOwn(part, "toolCallId");
+                    const toolName = readOwn(part, "toolName");
+                    if (readOwn(part, "type") !== "tool-result" || typeof toolCallId !== "string" ||
+                        typeof toolName !== "string" || !isLoadSkillToolName(toolName))
+                        continue;
+                    const body = bodies.get(toolCallId);
+                    const output = readOwn(part, "output");
+                    if (!body || readOwn(output, "type") !== "json")
+                        continue;
+                    const snapshot = snapshotBoundedJsonValue(readOwn(output, "value"));
+                    if (snapshot.success && equalBody(body.value, snapshot.value)) {
+                        observed.set(toolCallId, body.body);
+                    }
+                }
+            }
+        },
+        observedSkillBodies: () => [...observed.values()],
+    };
+}

package/esm/src/agent/hosted/executor-tool-bridge.d.ts

@@ -1,4 +1,5 @@
 import type { RemoteToolSource, ToolExecutionContext } from "../../tool/types.js";
+import type { ExecutorSkillObservation } from "./executor-skill-observation.js";
 import { type AdmitExecutorToolCall } from "../../runtime/tool-call-admission-dispatch.js";
 import type { ExecutorOperation } from "../executor/channel.js";
 import { type ExecutorBinding } from "../executor/protocol.js";
@@ -31,5 +32,7 @@ export declare function createExecutorToolBroker(options: {
     limits?: Partial<ExecutorToolLimits>;
     /** Trusted private writer hook; absent preserves the released tool path. */
     admitToolCall?: AdmitExecutorToolCall;
+    /** Host-owned record of skill bodies the brokered model requests delivered. */
+    skillObservation?: ExecutorSkillObservation;
 }): ReadonlyMap<string, ExecutorOperation>;
 //# sourceMappingURL=executor-tool-bridge.d.ts.map

package/esm/src/agent/hosted/executor-tool-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor-tool-bridge.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/hosted/executor-tool-bridge.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,+CAA+C,CAAC;AAGvD,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAOL,KAAK,kBAAkB,EASxB,MAAM,2BAA2B,CAAC;AAOnC,yFAAyF;AACzF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC,mGAAmG;IACnG,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,KAAK,EAAE;QACL,OAAO,EAAE,eAAe,CAAC;QACzB,MAAM,EAAE,WAAW,CAAC;QACpB,YAAY,IAAI,IAAI,CAAC;KACtB,CAAC;IACF,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACrD,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,4EAA4E;IAC5E,aAAa,CAAC,EAAE,qBAAqB,CAAC;CACvC,GAAG,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAwQzC"}
+{"version":3,"file":"executor-tool-bridge.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/hosted/executor-tool-bridge.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAKlF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,+CAA+C,CAAC;AAGvD,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAOL,KAAK,kBAAkB,EASxB,MAAM,2BAA2B,CAAC;AAOnC,yFAAyF;AACzF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC,mGAAmG;IACnG,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,KAAK,EAAE;QACL,OAAO,EAAE,eAAe,CAAC;QACzB,MAAM,EAAE,WAAW,CAAC;QACpB,YAAY,IAAI,IAAI,CAAC;KACtB,CAAC;IACF,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACrD,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,4EAA4E;IAC5E,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;CAC7C,GAAG,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA6QzC"}

package/esm/src/agent/hosted/executor-tool-bridge.js

@@ -2,6 +2,7 @@ import { copyPrivateSet, createPrivateSet } from "../../security/private-set.js"
 import { copyPrivateMap, createPrivateMap } from "../../security/private-map.js";
 import { pushPrivateArray } from "../../security/private-array.js";
 import { chainPrivatePromise, createPrivateDeferred, observePrivatePromise, resolvePrivatePromise, } from "../../security/private-promise.js";
+import { setProviderObservedSkillBodies, } from "../../tool/provider-observed-skill-bodies.js";
 import { runWithToolCallAdmissionReceipt, } from "../../runtime/tool-call-admission-dispatch.js";
 import { getToolCallAdmissionReceiptSchema } from "../../runtime/tool-call-admission-receipt.js";
 import { DurableRunEventPersistenceError } from "../conversation/private-run-event.js";
@@ -19,6 +20,7 @@ const getOwnPropertyDescriptor = Object.getOwnPropertyDescriptor;
  */
 export function createExecutorToolBroker(options) {
     const limits = executorToolLimits(options.limits);
+    const skillObservation = options.skillObservation;
     const admitToolCall = options.admitToolCall;
     if (admitToolCall !== undefined && typeof admitToolCall !== "function") {
         throw new TypeError("Invalid tool-call admission hook");
@@ -181,6 +183,7 @@ export function createExecutorToolBroker(options) {
                         ...call?.projectContext,
                     }
                     : capability.context,
+                observedSkillBodies: skillObservation?.observedSkillBodies() ?? [],
                 publisher: capability.publisher,
                 publisherReceiver: capability.publisherReceiver,
                 correlation: request,
@@ -194,10 +197,11 @@ export function createExecutorToolBroker(options) {
             });
             assertCall();
             if (mode === "execute") {
-                yield executorToolJson({
-                    type: "result",
-                    result: executorToolJson(result === undefined ? null : result, limits.maxResultBytes),
-                });
+                const delivered = executorToolJson(result === undefined ? null : result, limits.maxResultBytes);
+                yield executorToolJson({ type: "result", result: delivered });
+                // Resuming after yield means the channel drained the validated result frame.
+                if (call)
+                    skillObservation?.recordToolResult(call.toolName, call.toolCallId, delivered);
             }
             else {
                 if (!isArray(result) || result.length > limits.maxToolsPerSource ||
@@ -375,6 +379,8 @@ async function* callWithProgress(options) {
             }
         },
     };
+    // Only host-verified observations count; executor-side state never crosses the channel.
+    setProviderObservedSkillBodies(context, options.observedSkillBodies);
     const started = chainPrivatePromise(resolvePrivatePromise(), () => {
         check();
         return options.invoke(context);

package/esm/src/agent/hosted/managed-executor-broker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"managed-executor-broker.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/hosted/managed-executor-broker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,+CAA+C,CAAC;AAavD,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAG7C,OAAO,KAAK,EAEV,4BAA4B,EAC7B,MAAM,uCAAuC,CAAC;AAM/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAErF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAM/E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,4BAA4B,EAClC,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,KAAK,sBAAsB,EAG5B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAEL,KAAK,6BAA6B,EAKnC,MAAM,sCAAsC,CAAC;AAY9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,wBAAwB,EACxB,KAAK,sBAAsB,EAC5B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AAEnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAIvE,KAAK,YAAY,GAAG,IAAI,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC;AAC3E,KAAK,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;AAC5D,KAAK,gBAAgB,GAAG,IAAI,CAC1B,UAAU,CAAC,OAAO,+BAA+B,CAAC,CAAC,CAAC,CAAC,EACrD,iBAAiB,GAAG,eAAe,CACpC,CAAC;AACF,KAAK,UAAU,GAAG,IAAI,CACpB,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAC/C,iBAAiB,GAAG,eAAe,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,kBAAkB,CAChG,CAAC;AAEF,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3F,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;CACrF;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,mFAAmF;IACnF,cAAc,CAAC,EAAE;QACf,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,uBAAuB,EAAE,+BAA+B,CAAC;QACzD,+FAA+F;QAC/F,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,kFAAkF;QAClF,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;IAChE,OAAO,EAAE,YAAY,CAAC;IACtB,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,6BAA6B,CAAC;IACvC,KAAK,EAAE;QACL,QAAQ,EAAE,yBAAyB,CAAC;QACpC,KAAK,EAAE,kBAAkB,CAAC;QAC1B,YAAY,CAAC,EAAE,iBAAiB,CAAC;QACjC,kFAAkF;QAClF,wBAAwB,CAAC,EAAE,IAAI,CAAC;KACjC,CAAC;IACF,KAAK,EAAE;QACL,6FAA6F;QAC7F,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QACrD,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClE,aAAa,CAAC,EAAE,qBAAqB,CAAC;KACvC,CAAC;IACF,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,UAAU,CAAC;CACnB;AAQD,kEAAkE;AAClE,MAAM,MAAM,4BAA4B,GAAG,IAAI,CAC7C,gCAAgC,EAChC,eAAe,CAChB,CAAC;AAEF,oFAAoF;AACpF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,EACrC,qBAAqB,CAAC,EAAE,4BAA4B;;;;;mBAQ3C,yBAAyB,cACrB;QAAE,UAAU,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;KAAE,KACvD,OAAO,CAAC,sBAAsB,CAAC;;EA6SnC"}
+{"version":3,"file":"managed-executor-broker.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/hosted/managed-executor-broker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,+CAA+C,CAAC;AAavD,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAO7C,OAAO,KAAK,EAEV,4BAA4B,EAC7B,MAAM,uCAAuC,CAAC;AAM/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAErF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAM/E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,4BAA4B,EAClC,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,KAAK,sBAAsB,EAG5B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAEL,KAAK,6BAA6B,EAKnC,MAAM,sCAAsC,CAAC;AAY9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,wBAAwB,EACxB,KAAK,sBAAsB,EAC5B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AAEnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAIvE,KAAK,YAAY,GAAG,IAAI,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC;AAC3E,KAAK,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;AAC5D,KAAK,gBAAgB,GAAG,IAAI,CAC1B,UAAU,CAAC,OAAO,+BAA+B,CAAC,CAAC,CAAC,CAAC,EACrD,iBAAiB,GAAG,eAAe,CACpC,CAAC;AACF,KAAK,UAAU,GAAG,IAAI,CACpB,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAC/C,iBAAiB,GAAG,eAAe,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,kBAAkB,CAChG,CAAC;AAEF,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3F,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;CACrF;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,mFAAmF;IACnF,cAAc,CAAC,EAAE;QACf,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,uBAAuB,EAAE,+BAA+B,CAAC;QACzD,+FAA+F;QAC/F,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,kFAAkF;QAClF,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;IAChE,OAAO,EAAE,YAAY,CAAC;IACtB,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,6BAA6B,CAAC;IACvC,KAAK,EAAE;QACL,QAAQ,EAAE,yBAAyB,CAAC;QACpC,KAAK,EAAE,kBAAkB,CAAC;QAC1B,YAAY,CAAC,EAAE,iBAAiB,CAAC;QACjC,kFAAkF;QAClF,wBAAwB,CAAC,EAAE,IAAI,CAAC;KACjC,CAAC;IACF,KAAK,EAAE;QACL,6FAA6F;QAC7F,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QACrD,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClE,aAAa,CAAC,EAAE,qBAAqB,CAAC;KACvC,CAAC;IACF,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,UAAU,CAAC;CACnB;AAQD,kEAAkE;AAClE,MAAM,MAAM,4BAA4B,GAAG,IAAI,CAC7C,gCAAgC,EAChC,eAAe,CAChB,CAAC;AAEF,oFAAoF;AACpF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,EACrC,qBAAqB,CAAC,EAAE,4BAA4B;;;;;mBAQ3C,yBAAyB,cACrB;QAAE,UAAU,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;KAAE,KACvD,OAAO,CAAC,sBAAsB,CAAC;;EAmTnC"}

package/esm/src/agent/hosted/managed-executor-broker.js

@@ -4,6 +4,7 @@ import { hasTrustedPlatformSource, inheritTrustedPlatformSource, } from "../../t
 import { hasTrustedHostToolProvenance, inheritTrustedHostToolProvenance, } from "../../tool/host-tool-provenance.js";
 import { parseSourceIntegrationPolicyManifest, } from "../../integrations/source-policy.js";
 import { snapshotOwnDataRecords } from "../../security/own-data-record.js";
+import { createExecutorSkillObservation, } from "./executor-skill-observation.js";
 import { reserveExecutorToolMetadata } from "./executor-tool-schema.js";
 import { EXECUTOR_PROJECT_TOOL_SOURCE_ID } from "./executor-runtime-install-schema.js";
 import { getExecutorProjectToolInstallSchema, } from "./executor-runtime-install-schema.js";
@@ -96,8 +97,9 @@ export function createManagedExecutorBroker(options, trustedRuntimeFactory) {
         if (bindSessionOwnedWork !== undefined && typeof bindSessionOwnedWork !== "function") {
             throw new TypeError("Invalid executor session-owned work binder");
         }
+        const skillObservation = createExecutorSkillObservation();
         // Validate every trusted capability before reserving pool admission.
-        buildBrokerOperations(validationBinding, new AbortController().signal, operationInput, installation, allowedModelIds, selectedModelId);
+        buildBrokerOperations(validationBinding, new AbortController().signal, operationInput, installation, allowedModelIds, selectedModelId, skillObservation);
         let gate;
         let localRuntime;
         const session = pool.start({
@@ -115,7 +117,7 @@ export function createManagedExecutorBroker(options, trustedRuntimeFactory) {
                     };
                 }
                 const channelBinding = toChannelBinding(binding);
-                const operations = buildBrokerOperations(channelBinding, signal, operationInput, installation, allowedModelIds, selectedModelId);
+                const operations = buildBrokerOperations(channelBinding, signal, operationInput, installation, allowedModelIds, selectedModelId, skillObservation);
                 gate = createExecutorOperationGate({
                     binding: channelBinding,
                     signal,
@@ -185,7 +187,7 @@ export function createManagedExecutorBroker(options, trustedRuntimeFactory) {
                                             },
                                         }]]),
                             },
-                        }, installation, allowedModelIds, selectedModelId);
+                        }, installation, allowedModelIds, selectedModelId, skillObservation);
                         return createExecutorOperationGate({
                             binding: channelBinding,
                             signal: session.signal,
@@ -229,6 +231,8 @@ export function createManagedExecutorBroker(options, trustedRuntimeFactory) {
                     if (!session.accepted || gate.state !== "prepared") {
                         throw new Error("Managed executor runtime is not accepted");
                     }
+                    streamInput.abortSignal.throwIfAborted();
+                    skillObservation.recordTrustedHistory(streamInput.messages);
                     gate.beginExecution();
                     return await remoteAgent.stream(streamInput);
                 },
@@ -424,10 +428,11 @@ function installedToolNames(installation, catalog) {
     }
     return allowed;
 }
-function buildBrokerOperations(binding, signal, input, installation, allowedModelIds, selectedModelId) {
+function buildBrokerOperations(binding, signal, input, installation, allowedModelIds, selectedModelId, skillObservation) {
     const scope = { binding, signal, assertActive: () => signal.throwIfAborted() };
     const model = installation.grant.execution.kind === "canonical"
         ? createHostedExecutorModelBroker({
+            skillObservation,
             projectId: installation.grant.execution.projectId,
             resolveModelRuntime: input.model.resolver,
             allowedModelIds,
@@ -437,13 +442,14 @@ function buildBrokerOperations(binding, signal, input, installation, allowedMode
             ...(input.model.modelCallCaptureReceipts ? { modelCallCaptureReceipts: true } : {}),
         })
         : createEphemeralHostedExecutorModelBroker({
+            skillObservation,
             resolveModelRuntime: input.model.resolver,
             allowedModelIds,
             scope,
             grant: input.model.grant,
             prepared: { conversationId: null, canonicalRootRun: null },
         });
-    const tools = createExecutorToolBroker({ scope, ...input.tools });
+    const tools = createExecutorToolBroker({ scope, ...input.tools, skillObservation });
     const persistence = createExecutorPersistenceBroker({
         expectedBinding: binding,
         capabilityIds: installation.capabilities.persistence,

package/esm/src/agent/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,gBAAgB,EAKtB,MAAM,mBAAmB,CAAC;AAyD3B,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,6BAA6B,EAClC,KAAK,aAAa,EAIlB,KAAK,OAAO,EAGZ,KAAK,sBAAsB,EAC3B,KAAK,QAAQ,EAGd,MAAM,aAAa,CAAC;AAUrB,OAAO,EAAqB,KAAK,MAAM,EAAY,MAAM,oBAAoB,CAAC;AA2B9E,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,8CAA8C,CAAC;AAwKtD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,8BAA8B,EAC9B,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,sBAAsB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE5E,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,gCAAgC,EAChC,4BAA4B,EAC5B,gBAAgB,EAChB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,+BAA+B,GACrC,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAgC3F,OAAO,EACL,KAAK,yBAAyB,EAM/B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAoC,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAsnBjG,wBAAgB,4BAA4B,CAAC,CAAC,EAC5C,KAAK,EAAE,CAAC,EACR,uBAAuB,UAA+B,EACtD,iBAAiB,CAAC,EAAE,MAAM,GACzB,CAAC,CAQH;AA4+CD,kEAAkE;AAClE,MAAM,MAAM,2BAA2B,GAAG;IACxC,iFAAiF;IACjF,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD,8FAA8F;IAC9F,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,sBAAsB,GAAG;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAClE,yFAAyF;IACzF,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACzD,yEAAyE;IACzE,cAAc,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAC9E,6FAA6F;IAC7F,4BAA4B,CAAC,EAAE,4BAA4B,CAAC;CAC7D,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM;IACtB,uBAAuB,CAAC,EAAE,MAAM;IAChC,WAAW,CAAC,EAAE,WAAW;IACzB,OAAO,CAAC,EAAE;QACR,gBAAgB,CAAC,EAAE,6BAA6B,CAAC;QACjD,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB;CACF,CAAC;AAEF,KAAK,2BAA2B,GAAG;IACjC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;IAC7C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;CACnD,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,QAAQ,EAAE,OAAO,EAAE;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjC,SAAS,CAAC,EAAE,2BAA2B;IACvC,aAAa,CAAC,EAAE,MAAM;IACtB,uBAAuB,CAAC,EAAE,MAAM;IAChC,WAAW,CAAC,EAAE,WAAW;IACzB,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE;CACrC,CAAC;AAgCF,sGAAsG;AACtG,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,YAAY,EACrB,GAAG,IAAI,EAAE,wBAAwB,GAChC,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,sGAAsG;AACtG,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,YAAY,EACrB,GAAG,IAAI,EAAE,sBAAsB,GAC9B,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAErC;AAED,+BAA+B;AAC/B,qBAAa,YAAY;;IAOvB,OAAO,CAAC,EAAE,CAAS;IACnB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAuB;gBAGnC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,WAAW,EACnB,eAAe,GAAE,2BAAgC;IAuCnD;;;;;;;;;;;;;;;;OAgBG;YACW,0BAA0B;IAWxC,OAAO,CAAC,mBAAmB;IAgF3B,OAAO,CAAC,qBAAqB;YAySf,mBAAmB;YAiCnB,gBAAgB;IAS9B,OAAO,CAAC,8BAA8B;IA0BtC;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAI3B;;OAEG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,CAAC,EAAE;QACR,gBAAgB,CAAC,EAAE,6BAA6B,CAAC;QACjD,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,GACA,OAAO,CAAC,aAAa,CAAC;IAoLzB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE,2BAA2B,EACvC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAi8FtC;;OAEG;YACW,wBAAwB;IAoEtC,OAAO,CAAC,0BAA0B;YAUpB,eAAe;IA0D7B;;OAEG;YACW,mBAAmB;IAMjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,sBAAsB;IAoB9B;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;IAI5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IAIF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAGnC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,gBAAgB,EAKtB,MAAM,mBAAmB,CAAC;AA0D3B,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,6BAA6B,EAClC,KAAK,aAAa,EAIlB,KAAK,OAAO,EAGZ,KAAK,sBAAsB,EAC3B,KAAK,QAAQ,EAGd,MAAM,aAAa,CAAC;AAUrB,OAAO,EAAqB,KAAK,MAAM,EAAY,MAAM,oBAAoB,CAAC;AA2B9E,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,8CAA8C,CAAC;AA+KtD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,8BAA8B,EAC9B,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,sBAAsB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE5E,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,gCAAgC,EAChC,4BAA4B,EAC5B,gBAAgB,EAChB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,+BAA+B,GACrC,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAgC3F,OAAO,EACL,KAAK,yBAAyB,EAM/B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAoC,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAsnBjG,wBAAgB,4BAA4B,CAAC,CAAC,EAC5C,KAAK,EAAE,CAAC,EACR,uBAAuB,UAA+B,EACtD,iBAAiB,CAAC,EAAE,MAAM,GACzB,CAAC,CAQH;AAg/CD,kEAAkE;AAClE,MAAM,MAAM,2BAA2B,GAAG;IACxC,iFAAiF;IACjF,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD,8FAA8F;IAC9F,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,sBAAsB,GAAG;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAClE,yFAAyF;IACzF,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACzD,yEAAyE;IACzE,cAAc,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAC9E,6FAA6F;IAC7F,4BAA4B,CAAC,EAAE,4BAA4B,CAAC;CAC7D,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM;IACtB,uBAAuB,CAAC,EAAE,MAAM;IAChC,WAAW,CAAC,EAAE,WAAW;IACzB,OAAO,CAAC,EAAE;QACR,gBAAgB,CAAC,EAAE,6BAA6B,CAAC;QACjD,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB;CACF,CAAC;AAEF,KAAK,2BAA2B,GAAG;IACjC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;IAC7C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;CACnD,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,QAAQ,EAAE,OAAO,EAAE;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjC,SAAS,CAAC,EAAE,2BAA2B;IACvC,aAAa,CAAC,EAAE,MAAM;IACtB,uBAAuB,CAAC,EAAE,MAAM;IAChC,WAAW,CAAC,EAAE,WAAW;IACzB,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE;CACrC,CAAC;AAgCF,sGAAsG;AACtG,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,YAAY,EACrB,GAAG,IAAI,EAAE,wBAAwB,GAChC,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,sGAAsG;AACtG,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,YAAY,EACrB,GAAG,IAAI,EAAE,sBAAsB,GAC9B,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAErC;AAED,+BAA+B;AAC/B,qBAAa,YAAY;;IAOvB,OAAO,CAAC,EAAE,CAAS;IACnB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAuB;gBAGnC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,WAAW,EACnB,eAAe,GAAE,2BAAgC;IAuCnD;;;;;;;;;;;;;;;;OAgBG;YACW,0BAA0B;IAWxC,OAAO,CAAC,mBAAmB;IAgF3B,OAAO,CAAC,qBAAqB;YAySf,mBAAmB;YAiCnB,gBAAgB;IAS9B,OAAO,CAAC,8BAA8B;IA0BtC;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAI3B;;OAEG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,CAAC,EAAE;QACR,gBAAgB,CAAC,EAAE,6BAA6B,CAAC;QACjD,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,GACA,OAAO,CAAC,aAAa,CAAC;IAoLzB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE,2BAA2B,EACvC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IA29FtC;;OAEG;YACW,wBAAwB;IAoEtC,OAAO,CAAC,0BAA0B;YAUpB,eAAe;IA0D7B;;OAEG;YACW,mBAAmB;IAMjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,sBAAsB;IAoB9B;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;IAI5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IAIF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAGnC"}

package/esm/src/agent/runtime/index.js

@@ -6,7 +6,7 @@ import { forEachSequential } from "./sequential.js";
 import { agentManualPauseBoundary, isAgentManualPauseBoundary, parseAgentPauseCheckpoint, } from "./manual-pause.js";
 import { getAgentRuntimeToolCallPart } from "./message-adapter.js";
 import { admitTerminalDispatch, createTerminalRunControl, isTerminalRunControlError, isTerminalRunToolName, terminalCompletionResponse, terminalDispatchRecord, terminalReceiptPersistenceFailure, } from "./terminal-run-control.js";
-import { appendPrivateArray, concatPrivateArrays, filterPrivateArray, flatMapPrivateArray, forEachPrivateArray, mapPrivateArray, pushPrivateArray, somePrivateArray, } from "../../security/private-array.js";
+import { appendPrivateArray, concatPrivateArrays, filterPrivateArray, flatMapPrivateArray, forEachPrivateArray, mapPrivateArray, pushPrivateArray, slicePrivateArray, somePrivateArray, } from "../../security/private-array.js";
 import { utf8ByteLength } from "../../utils/utf8-byte-length.js";
 import { createPrivateTextDecoder, encodePrivateText, PrivateTextEncoder, privateTextSlice, privateTextStartsWith, privateTextTrim, } from "../../security/private-text.js";
 /**
@@ -59,7 +59,8 @@ import { resolveAgentSystem } from "./effective-agent-system.js";
 import { resolveActiveProviderReplayProvider, resolveRuntimeGenAiProviderName, } from "./provider-replay-protocol.js";
 import { attachOutputSchemaParser, resolveAgentOutputSchema, } from "../output-schema.js";
 import { captureStreamedToolCallInput, collectFinalStreamToolResults, collectGeneratedToolResults, createToolErrorMessage, createToolResultMessage, getProviderExecutedToolNames, getToolResultError, hasSubstantiveAssistantText, isInterruptedClientToolCall, isRecoverablePlaceholderToolCall, isStreamedToolCallIncomplete, isToolResultPart, materializeStreamedToolCall, shouldContinueAfterStreamStep, } from "./tool-result-continuation.js";
-import { enforceSkillPolicy, hasTrustedPlatformPolicyToolDefinition, hasTrustedPlatformPolicyToolResultPart, inheritTrustedPlatformPolicyToolResultPart, isFormInputToolName, isLoadSkillToolName, markTrustedPlatformPolicyToolResultPart, prepareTrustedPlatformPolicyMessageForPersistence, restoreTrustedPlatformPolicyResultsFromPersistedHistory, SUBMITTED_FORM_INPUT_CONTEXT_KEY, } from "./skill-policy-enforcement.js";
+import { enforceSkillPolicy, getProviderObservedSkillBodies, getTrustedSkillLoadResultIds, hasTrustedPlatformPolicyToolDefinition, hasTrustedPlatformPolicyToolResultPart, inheritTrustedPlatformPolicyToolResultPart, isFormInputToolName, isLoadSkillToolName, markTrustedPlatformPolicyToolResultPart, prepareTrustedPlatformPolicyMessageForPersistence, restoreTrustedPlatformPolicyResultsFromPersistedHistory, restoreTrustedSkillLoadResultsFromPauseCheckpoint, SUBMITTED_FORM_INPUT_CONTEXT_KEY, } from "./skill-policy-enforcement.js";
+import { setProviderObservedSkillBodies, } from "../../tool/provider-observed-skill-bodies.js";
 import { AgentLoopSkillState } from "./agent-loop-skill-state.js";
 import { isRuntimeGeneratedUserMessage, markRuntimeGeneratedUserMessage, } from "./runtime-message-origin.js";
 import { EMPTY_RESPONSE_RECOVERY_PROMPT, RuntimeEmptyResponseError, } from "./empty-response-recovery.js";
@@ -1649,8 +1650,11 @@ const ownContextKeys = Reflect.ownKeys;
 const contextDescriptor = Object.getOwnPropertyDescriptor;
 const defineContextProperty = Object.defineProperty;
 const readContextProperty = Reflect.get;
-function applicationExecutionContext(context) {
+function applicationExecutionContext(context, providerObservedSkillBodies) {
     const projected = {};
+    if (providerObservedSkillBodies !== undefined) {
+        setProviderObservedSkillBodies(projected, providerObservedSkillBodies);
+    }
     if (!context)
         return projected;
     forEachPrivateArray(ownContextKeys(context), (key) => {
@@ -2836,6 +2840,8 @@ export class AgentRuntime {
                 currentSystemPrompt = preparedStep.systemPrompt;
                 currentRuntimeContext = preparedStep.runtimeContext;
                 const toolContext = preparedStep.toolContext;
+                // Keep this snapshot fixed while calls from the same provider response execute.
+                const providerObservedSkillBodies = getProviderObservedSkillBodies(currentMessages);
                 const effectiveToolExposurePlan = agentWriteFinalResponseToolGuardEnabled
                     ? applyAgentWriteFinalResponseGuard(preparedStep.toolExposurePlan, {
                         reloadable: runtimeStepToolLoading.mode === "deferred",
@@ -3346,7 +3352,7 @@ export class AgentRuntime {
                                         agentId: this.id,
                                     }) ??
                                         undefined);
-                                const executionContext = applicationExecutionContext(toolContext);
+                                const executionContext = applicationExecutionContext(toolContext, providerObservedSkillBodies);
                                 executionContext.projectId = cacheCtx?.projectId ?? toolContext?.projectId;
                                 throwIfAborted(abortSignal);
                                 const result = await traceConfiguredToolExecution({
@@ -3497,6 +3503,8 @@ export class AgentRuntime {
                 markRuntimeGeneratedUserMessage(message);
             return message;
         });
+        // JSON checkpoints drop in-memory trust markers; restore only the runtime-recorded results.
+        restoreTrustedSkillLoadResultsFromPauseCheckpoint(currentMessages, checkpoint?.trustedSkillLoadResultIds);
         applyProviderReplayCheckpointsToMessages(currentMessages, getRuntimeProviderReplayCheckpoints(this.config), { activeProvider: resolveActiveProviderReplayProvider(languageModel) });
         const totalUsage = checkpoint?.usage ??
             { promptTokens: 0, completionTokens: 0, totalTokens: 0 };
@@ -3570,6 +3578,11 @@ export class AgentRuntime {
                     recoveredInterruptedLocalToolBatch,
                     hasSubmittedFormInput: skillState.hasSubmittedFormInput,
                     activeSkillDelegationOverrides: skillState.activeSkillDelegationOverrides,
+                    // Omitted when empty so checkpoints without trusted loads keep the prior shape.
+                    ...(() => {
+                        const ids = getTrustedSkillLoadResultIds(currentMessages);
+                        return ids.length > 0 ? { trustedSkillLoadResultIds: ids } : {};
+                    })(),
                     resumeToolCallExecuted,
                     agentWriteFinalResponseToolGuardEnabled,
                     interruptedLocalToolBatchRecoveryStep,
@@ -3735,7 +3748,9 @@ export class AgentRuntime {
                     args: resumeToolCall.input,
                     status: "executing",
                 };
-                const executionContext = applicationExecutionContext(toolContext);
+                const executionContext = applicationExecutionContext(toolContext, 
+                // Partial results from the parked assistant turn were not yet provider-observed.
+                getProviderObservedSkillBodies(slicePrivateArray(currentMessages, 0, admittedTurn.start)));
                 try {
                     // The trusted parked call was already exposed in the prior segment.
                     // Recheck current authorization without requiring its lost step visibility.
@@ -3819,6 +3834,8 @@ export class AgentRuntime {
                     await this.recordToolError(persistMessage, toolCall, error instanceof Error ? error.message : String(error), { controller, encoder }, currentMessages, toolCalls);
                 }
             }
+            // Include the parked result delivered to this request, but exclude new same-step results.
+            const providerObservedSkillBodies = getProviderObservedSkillBodies(currentMessages);
             const modelMessages = toolResultContext
                 ? createModelToolResultContextMessages(currentMessages, toolResultContext)
                 : currentMessages;
@@ -4620,7 +4637,7 @@ export class AgentRuntime {
                     const startTime = Date.now();
                     toolCall.args = applySkillDelegationOverridesToToolInput(tc.name, toolCall.args, skillState.activeSkillDelegationOverrides, resolveConfiguredTool(this.config.tools, tc.name, { agentId: this.id }) ?? undefined);
                     callbacks?.onToolCall?.(toolCall);
-                    const executionContext = applicationExecutionContext(toolContext);
+                    const executionContext = applicationExecutionContext(toolContext, providerObservedSkillBodies);
                     const result = await runWithToolCallOccurrenceDispatch(tc, () => traceConfiguredToolExecution({
                         mode: "stream",
                         agentId: this.id,

package/esm/src/agent/runtime/load-skill-tool.d.ts

@@ -41,6 +41,11 @@ export type RuntimeLoadSkillToolOptions = {
     description?: string;
     logger?: RuntimeSkillMetadataLogger;
     skillDocumentParserProvider?: SkillDocumentParserProvider;
+    /**
+     * Reject reference reads when the execution context carries no provider-observed
+     * skill body snapshot. Hosts that execute this tool for a remote runtime set it.
+     */
+    requireProviderObservation?: boolean;
 };
 export declare const getRuntimeLoadSkillToolInputSchema: () => import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
     cursor: import("../../internal-agents/schema.js").Schema<number | undefined>;

package/esm/src/agent/runtime/load-skill-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-skill-tool.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/load-skill-tool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EAAE,IAAI,EAAwB,MAAM,qBAAqB,CAAC;AAUtE,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,iCAAiC,CAAC;AAWzC,OAAO,KAAK,EAEV,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AA2BpG,mDAAmD;AACnD,eAAO,MAAM,8BAA8B,QACwqB,CAAC;AAoMptB,2CAA2C;AAC3C,MAAM,MAAM,2BAA2B,GAAG,0BAA0B,GAAG;IACrE,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,mBAAmB,CAAC,EAAE,2BAA2B,CAAC;IAClD,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAClE,6BAA6B,CAAC,EAAE,MAAM,CACpC,MAAM,EACN,IAAI,GAAG,mCAAmC,CAC3C,CAAC;CACH,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,EAAE,CACT,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,oBAAoB,KACzB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5B,iBAAiB,EAAE,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,oBAAoB,KACzB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5B,cAAc,EAAE,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,oBAAoB,KACzB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACxB,CAAC;AAEF,gEAAgE;AAEhE,mDAAmD;AACnD,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,2BAA2B,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,YAAY,CAAC,EAAE,4BAA4B,CAAC;IAC5C,4GAA4G;IAC5G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAaF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;GAyD9C,CAAC;AAsEF;;;;;;;;GAQG;AACH,MAAM,MAAM,yBAAyB,GAAG,WAAW,CACjD,UAAU,CAAC,OAAO,kCAAkC,CAAC,CACtD,CAAC;AAeF,qDAAqD;AACrD,MAAM,MAAM,mCAAmC,GAAG;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,+EAA+E;AAC/E,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,2CAA2C;AAC3C,MAAM,MAAM,0BAA0B,GAClC,0BAA0B,GAC1B,mCAAmC,GACnC,+BAA+B,GAC/B,2BAA2B,CAAC;AAwxChC;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,IAAI,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,CA+Z7D"}
+{"version":3,"file":"load-skill-tool.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/load-skill-tool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EAAE,IAAI,EAAwB,MAAM,qBAAqB,CAAC;AAUtE,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,iCAAiC,CAAC;AAWzC,OAAO,KAAK,EAEV,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AA+BpG,mDAAmD;AACnD,eAAO,MAAM,8BAA8B,QACsrB,CAAC;AAoMluB,2CAA2C;AAC3C,MAAM,MAAM,2BAA2B,GAAG,0BAA0B,GAAG;IACrE,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,mBAAmB,CAAC,EAAE,2BAA2B,CAAC;IAClD,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAClE,6BAA6B,CAAC,EAAE,MAAM,CACpC,MAAM,EACN,IAAI,GAAG,mCAAmC,CAC3C,CAAC;CACH,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,EAAE,CACT,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,oBAAoB,KACzB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5B,iBAAiB,EAAE,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,oBAAoB,KACzB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5B,cAAc,EAAE,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,oBAAoB,KACzB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACxB,CAAC;AAEF,gEAAgE;AAEhE,mDAAmD;AACnD,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,2BAA2B,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,YAAY,CAAC,EAAE,4BAA4B,CAAC;IAC5C,4GAA4G;IAC5G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IAC1D;;;OAGG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC,CAAC;AAaF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;GAyD9C,CAAC;AAsEF;;;;;;;;GAQG;AACH,MAAM,MAAM,yBAAyB,GAAG,WAAW,CACjD,UAAU,CAAC,OAAO,kCAAkC,CAAC,CACtD,CAAC;AAeF,qDAAqD;AACrD,MAAM,MAAM,mCAAmC,GAAG;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,+EAA+E;AAC/E,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,2CAA2C;AAC3C,MAAM,MAAM,0BAA0B,GAClC,0BAA0B,GAC1B,mCAAmC,GACnC,+BAA+B,GAC/B,2BAA2B,CAAC;AAuzChC;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,IAAI,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,CA+Z7D"}

package/esm/src/agent/runtime/load-skill-tool.js

@@ -9,6 +9,7 @@ import { buildStrictRuntimeLoadedSkillResponse, normalizeStrictRuntimeSkillRefer
 import { hasControlCharacters, isWellFormedUtf16 } from "../../skill/string-safety.js";
 import { isOwnDataPropertyDescriptor, snapshotOwnDataPropertyArray, } from "./data-property-descriptor.js";
 import { compareStrings } from "../../utils/compare.js";
+import { hasProviderObservedSkillBody, hasProviderObservedSkillReferences, } from "../../tool/provider-observed-skill-bodies.js";
 const ArrayIsArray = Array.isArray;
 const ObjectDefineProperty = Object.defineProperty;
 const ObjectGetOwnPropertyDescriptor = Object.getOwnPropertyDescriptor;
@@ -27,7 +28,7 @@ function isRuntimeLoadSkillArray(value) {
     }
 }
 /** Shared runtime load skill description value. */
-export const RUNTIME_LOAD_SKILL_DESCRIPTION = `Load the full instructions for a skill. Use this when you need detailed guidance for a specific task type. load_skill does not perform the task by itself. ${LOAD_SKILL_POLICY_CLAUSES} ${LOAD_SKILL_OVERRIDE_FORWARDING} To discover authorized skill IDs, use the inventory object. Use a cursor listed in context when present, then follow each nextCursor value. To load a skill, use the load object with only skillId. To read a file listed in the loaded skill's references, use the reference object with that same skillId and the listed file path: {"reference":{"skillId":"<loaded-skill-id>","file":"<listed-relative-path>"}}. Reference filenames are not tool names or skill IDs. The legacy load.file form remains accepted.`;
+export const RUNTIME_LOAD_SKILL_DESCRIPTION = `Load skill instructions; loading does not perform the task. ${LOAD_SKILL_POLICY_CLAUSES} ${LOAD_SKILL_OVERRIDE_FORWARDING} To discover authorized skill IDs, use the inventory object. Use a cursor listed in context when present, then follow each nextCursor value. To load a skill, use the load object with only skillId. Wait for the body result before choosing a reference; never batch the first body load with a reference read. To read a file listed in the loaded skill's references, use the reference object with that same skillId and the listed file path: {"reference":{"skillId":"<loaded-skill-id>","file":"<listed-relative-path>"}}. Reference filenames are not tool names or skill IDs. The legacy load.file form remains accepted.`;
 function rememberBoundedRecordValue(record, key, value, maxEntries) {
     const keys = Object.keys(record);
     const keyIsEnumerable = keys.includes(key);
@@ -930,11 +931,20 @@ function buildRuntimeLoadSkillInputSchema(options, authorizationStore) {
             : v.union([firstAlternative, secondAlternative, ...restAlternatives]);
     })();
 }
+function buildUnobservedSkillBodyError(skillId) {
+    return {
+        error: `Read the load_skill result for "${skillId}" before requesting reference files. Retry this reference in the next step using a listed path.`,
+    };
+}
 async function loadRuntimeSkillReferenceFile(options, builtinStore, privateAuthority, authorizationStore, trustedResponseStore, trustedReferenceStore, loadedSkillResponses, loadedSkillReferenceResponses, skillId, file, executionContext, budget) {
     const normalizedFile = normalizeStrictRuntimeSkillReferencePath(file);
     if (!normalizedFile) {
         return { error: `Invalid reference file path: ${file}` };
     }
+    const observed = hasProviderObservedSkillBody(executionContext, skillId);
+    if (observed === false || (observed === undefined && options.requireProviderObservation === true)) {
+        return buildUnobservedSkillBodyError(skillId);
+    }
     authorityAttempts: for (let attempt = 0; attempt < RUNTIME_SKILL_PRIVATE_AUTHORITY_MAX_ATTEMPTS; attempt += 1) {
         let authorityGuard = privateAuthority.begin();
         const loadedSkillKey = buildRuntimeSkillCacheKey(options.context, skillId);
@@ -942,13 +952,18 @@ async function loadRuntimeSkillReferenceFile(options, builtinStore, privateAutho
         const cachedAuthorization = authorizationStore.get(loadedSkillKey);
         const resumedReferenceIsAdvertised = !hasLoadedSkillResponse &&
             executionContextAdvertisesReference(executionContext, skillId, file, normalizedFile);
+        const observedBodyMayAuthorizeColdReference = !hasLoadedSkillResponse &&
+            observed === true;
         const reusableCachedAuthorization = cachedAuthorization &&
-            (!cachedAuthorization.requiresActiveSkillContext || resumedReferenceIsAdvertised)
+            (!cachedAuthorization.requiresActiveSkillContext || resumedReferenceIsAdvertised ||
+                (observedBodyMayAuthorizeColdReference &&
+                    hasProviderObservedSkillReferences(executionContext, skillId, cachedAuthorization.references) === true))
             ? cachedAuthorization
             : undefined;
         if (!reusableCachedAuthorization &&
             !hasLoadedSkillResponse &&
-            !resumedReferenceIsAdvertised) {
+            !resumedReferenceIsAdvertised &&
+            !observedBodyMayAuthorizeColdReference) {
             return {
                 error: `Skill "${skillId}" must be loaded before reference file "${normalizedFile}". ` +
                     `Call load_skill with {"load":{"skillId":"${skillId}"}} first, then request one of the listed reference files.`,
@@ -956,7 +971,8 @@ async function loadRuntimeSkillReferenceFile(options, builtinStore, privateAutho
         }
         let authorization = reusableCachedAuthorization;
         if (!authorization) {
-            const requiresActiveSkillContext = !hasLoadedSkillResponse && resumedReferenceIsAdvertised;
+            const requiresActiveSkillContext = !hasLoadedSkillResponse &&
+                (resumedReferenceIsAdvertised || observedBodyMayAuthorizeColdReference);
             const bodyPublication = privateAuthority.captureBody(loadedSkillKey);
             const projectSkill = await loadRuntimeSkillBody(options, skillId, budget);
             budget.throwIfTerminated();
@@ -1020,6 +1036,12 @@ async function loadRuntimeSkillReferenceFile(options, builtinStore, privateAutho
             authorityGuard = published.guard;
             authorization = published.value;
         }
+        // Bind the observation to this scope's body: a body seen under another
+        // project or branch advertised a different reference list.
+        if (hasProviderObservedSkillReferences(executionContext, skillId, authorization.references) ===
+            false) {
+            return buildUnobservedSkillBodyError(skillId);
+        }
         if (!authorization.has(normalizedFile)) {
             const availableReferences = authorization.references.length > 0
                 ? authorization.references.join(", ")