b115e870f0
InputItem::ReasoningState and TransportEventPayload::ReasoningState carry the connector's own bytes as MessagePack bin. TransportService owns the provider tag: partition_reasoning is the one place foreignness is decided, begin refuses foreign state in the in-flight exchange (ForeignReasoningState), drops and counts it earlier (receipt.foreign_reasoning_dropped), and complete gates the receipt's provider and count. A backend now receives a ProviderCall holding only the filtered request and builds its result through call.transported, so it can neither see foreign state nor write receipt identity. TransportResult::transcript_items hands a completed result back as items the caller replays verbatim. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
53 lines
1 KiB
JSON
53 lines
1 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"title": "TransportEnvelope",
|
|
"type": "object",
|
|
"properties": {
|
|
"caller_runtime_id": {
|
|
"type": "string"
|
|
},
|
|
"ciphertext": {
|
|
"description": "MessagePack bin: raw bytes, never an array of integers",
|
|
"type": "string",
|
|
"format": "binary"
|
|
},
|
|
"message_kind": {
|
|
"$ref": "#/$defs/EnvelopeKind"
|
|
},
|
|
"nonce": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "integer",
|
|
"format": "uint8",
|
|
"maximum": 255,
|
|
"minimum": 0
|
|
},
|
|
"maxItems": 12,
|
|
"minItems": 12
|
|
},
|
|
"request_id": {
|
|
"type": "string"
|
|
},
|
|
"schema_id": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"additionalProperties": false,
|
|
"required": [
|
|
"schema_id",
|
|
"caller_runtime_id",
|
|
"request_id",
|
|
"message_kind",
|
|
"nonce",
|
|
"ciphertext"
|
|
],
|
|
"$defs": {
|
|
"EnvelopeKind": {
|
|
"type": "string",
|
|
"enum": [
|
|
"Invocation",
|
|
"Result"
|
|
]
|
|
}
|
|
}
|
|
}
|