@opengeni/api-router 0.3.0 → 0.4.1

package/dist/app.js

@@ -14,7 +14,7 @@ import {
   validateToolRefs,
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession
-} from "./chunk-SVBM6RM6.js";
+} from "./chunk-2JL5OXRE.js";
 export {
   allowedCorsOrigin,
   createApp,

package/dist/{chunk-SVBM6RM6.js → chunk-2JL5OXRE.js}

@@ -6,6 +6,7 @@ import {
 } from "@opengeni/config";
 import { ClientConfig } from "@opengeni/contracts";
 import { createDocumentServices, indexDocumentNow } from "@opengeni/documents";
+import { dbSql } from "@opengeni/db";
 import { createObservability } from "@opengeni/observability";
 import { createObjectStorage } from "@opengeni/storage";
 import { WebStandardStreamableHTTPServerTransport as WebStandardStreamableHTTPServerTransport2 } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
@@ -929,6 +930,11 @@ function registerWorkspaceOrchestrationTools(server, deps, grant, can, json) {
       description: "Spawn a new agent session (a worker) with an initial message and optional goal, resources (e.g. repositories from github_repositories_list), tools, and workspace environment attachment. Environment attachment happens at creation only \u2014 it cannot be added to a running session \u2014 and requires the environments:use permission. When targetSandboxId names a machine, workingDir sets the working directory (cwd) the spawned session runs under on that machine.",
       inputSchema: {
         initialMessage: z4.string().min(1),
+        // Per-session agent persona/system instructions for the spawned worker
+        // (a per-agent-type prompt). Delivered system-level, composed AFTER the
+        // workspace persona; never shown in the worker's timeline. Trimmed,
+        // non-empty, max 32768 chars (re-validated by the contracts schema).
+        instructions: z4.string().min(1).max(32768).optional(),
         goal: z4.unknown().optional(),
         resources: z4.array(z4.unknown()).optional(),
         tools: z4.array(z4.unknown()).optional(),
@@ -1362,7 +1368,7 @@ function isAuthExempt(c, settings) {
   if (installExactPaths.has(path) || isInstallRedirectPath(path)) {
     return true;
   }
-  if (settings.authAllowHealth && path === "/healthz") {
+  if (settings.authAllowHealth && (path === "/healthz" || path === "/readyz")) {
     return true;
   }
   if (settings.authAllowMetrics && path === "/metrics") {
@@ -3389,6 +3395,7 @@ async function handleCheckoutSessionCompleted(deps, event) {
       stripeCreditAmountUsd: credit.amountUsd
     }
   });
+  recordCreditMicrosMetric(deps, "topup", credit.amountMicros);
 }
 async function mirrorPaymentIntentCustomer(deps, event) {
   const intent = event.data.object;
@@ -3421,18 +3428,23 @@ async function applyRefundDebit(deps, stripe, refund) {
   if (!accountId) {
     return;
   }
+  const idempotencyKey = `stripe:refund:${refund.id}`;
+  if (await hasCreditLedgerEntry(deps.db, accountId, idempotencyKey)) {
+    return;
+  }
   await applyCreditLedgerEntry(deps.db, {
     accountId,
     type: "credit_refund",
     amountMicros: -centsToMicros(refund.amount),
     sourceType: "stripe_refund",
     sourceId: refund.id,
-    idempotencyKey: `stripe:refund:${refund.id}`,
+    idempotencyKey,
     metadata: {
       stripeRefundId: refund.id,
       stripePaymentIntentId: paymentIntentId(refund.payment_intent)
     }
   });
+  recordCreditMicrosMetric(deps, "refund", centsToMicros(refund.amount));
 }
 async function holdDisputedCredits(deps, stripe, event) {
   const dispute = event.data.object;
@@ -3487,6 +3499,17 @@ async function mirrorCustomer(deps, event, customer) {
     email: typeof customer.email === "string" ? customer.email : null
   });
 }
+function recordCreditMicrosMetric(deps, kind, amountMicros) {
+  if (amountMicros <= 0) {
+    return;
+  }
+  deps.observability?.incrementCounter({
+    name: "opengeni_credit_micros_total",
+    help: "Total credit micros recorded by kind.",
+    labels: { kind },
+    amount: amountMicros
+  });
+}
 async function metadataForRefund(stripe, refund) {
   if (Object.keys(refund.metadata ?? {}).length > 0) {
     return refund.metadata;
@@ -6189,13 +6212,19 @@ function createApp(deps) {
     service: deps.settings.serviceName,
     environment: deps.settings.environment,
     deploymentRevision: deps.settings.deploymentRevision,
+    ...deps.settings.serverVersion ? { serverVersion: deps.settings.serverVersion } : {},
     ok: true
   }));
-  app.get("/metrics", (c) => c.text(observability.prometheusMetrics(), 200, {
+  app.get("/readyz", async (c) => {
+    const result = await runReadinessChecks(readinessChecks(deps), 2e3);
+    return c.json(result, result.ok ? 200 : 503);
+  });
+  app.get("/metrics", async (c) => c.text(await observability.prometheusMetrics(), 200, {
     "content-type": "text/plain; version=0.0.4; charset=utf-8"
   }));
   app.get("/v1/config/client", (c) => c.json(ClientConfig.parse({
     deploymentRevision: deps.settings.deploymentRevision,
+    ...deps.settings.serverVersion ? { serverVersion: deps.settings.serverVersion } : {},
     defaultModel: deps.settings.openaiModel,
     allowedModels: configuredAllowedModels(deps.settings),
     // Provider-grouped model list for the picker. configuredModels() carries the
@@ -6278,8 +6307,56 @@ function httpStatusForError(error) {
   }
   return 500;
 }
+function readinessChecks(deps) {
+  return {
+    db: deps.readinessChecks?.db ?? (async () => {
+      await deps.db.execute(dbSql`select 1`);
+    }),
+    nats: deps.readinessChecks?.nats ?? (() => {
+      if (deps.bus.isConnected && !deps.bus.isConnected()) {
+        throw new Error("NATS is not connected");
+      }
+    }),
+    temporal: deps.readinessChecks?.temporal ?? deps.workflowClient.check ?? (() => {
+      throw new Error("Temporal readiness check unavailable");
+    })
+  };
+}
+async function runReadinessChecks(checks, timeoutMs) {
+  const entries = await Promise.all(
+    Object.entries(checks).map(async ([name, check]) => {
+      try {
+        await withTimeout(Promise.resolve().then(check), timeoutMs);
+        return [name, { ok: true }];
+      } catch (error) {
+        return [name, { ok: false, error: error instanceof Error ? error.message : String(error) }];
+      }
+    })
+  );
+  const result = Object.fromEntries(entries);
+  return {
+    ok: Object.values(result).every((check) => check.ok),
+    checks: result
+  };
+}
+async function withTimeout(promise, timeoutMs) {
+  let timer;
+  try {
+    return await Promise.race([
+      promise,
+      new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new Error(`readiness check timed out after ${timeoutMs}ms`)), timeoutMs);
+      })
+    ]);
+  } finally {
+    if (timer) {
+      clearTimeout(timer);
+    }
+  }
+}
 var routeLabelPatterns = [
   { pattern: /^\/healthz$/, label: "/healthz" },
+  { pattern: /^\/readyz$/, label: "/readyz" },
   { pattern: /^\/v1\/workspaces\/[^/]+\/codex\/connect\/start$/, label: "/v1/workspaces/:workspaceId/codex/connect/start" },
   { pattern: /^\/v1\/workspaces\/[^/]+\/codex\/connect\/poll$/, label: "/v1/workspaces/:workspaceId/codex/connect/poll" },
   { pattern: /^\/v1\/workspaces\/[^/]+\/codex\/status$/, label: "/v1/workspaces/:workspaceId/codex/status" },
@@ -6379,4 +6456,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession3 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-SVBM6RM6.js.map
+//# sourceMappingURL=chunk-2JL5OXRE.js.map