@opengeni/core 0.18.0 → 0.19.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/core",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "OpenGeni framework-agnostic core: the domain, access, and billing layers (neutral access, off-HTTP V2 surface). Behavior-preserving extraction from apps/api — keeps Hono's HTTPException for error throwing (typed-errors cleanup deferred).",
   "license": "Apache-2.0",
   "repository": {
@@ -34,15 +34,15 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@opengeni/codex": "^0.2.9",
-    "@opengeni/config": "^0.10.0",
-    "@opengeni/contracts": "^0.31.0",
-    "@opengeni/db": "^0.22.1",
-    "@opengeni/documents": "^0.2.69",
-    "@opengeni/events": "^0.3.59",
-    "@opengeni/observability": "^0.4.3",
-    "@opengeni/runtime": "^0.17.0",
-    "@opengeni/storage": "^0.2.53",
+    "@opengeni/codex": "^0.2.10",
+    "@opengeni/config": "^0.10.3",
+    "@opengeni/contracts": "^0.32.0",
+    "@opengeni/db": "^0.23.0",
+    "@opengeni/documents": "^0.2.72",
+    "@opengeni/events": "^0.3.62",
+    "@opengeni/observability": "^0.4.6",
+    "@opengeni/runtime": "^0.18.0",
+    "@opengeni/storage": "^0.2.56",
     "hono": "^4.12.18"
   },
   "engines": {

package/src/application/session-commands.ts

@@ -595,10 +595,12 @@ export async function controlHumanSessionWorkstream(
     ),
     interruptionCount: result.interruptionCount,
     wakeCount: result.wakeCount,
+    cancelledSessionCount: result.cancelledSessionCount,
+    cancelledTurnCount: result.cancelledTurnCount,
   };
-  await publishSessionEventIds(deps, context.workspaceId, context.sessionId, [
-    result.sessionControlEventId,
-  ]);
+  for (const affected of result.affectedSessionEvents) {
+    await publishSessionEventIds(deps, context.workspaceId, affected.sessionId, affected.eventIds);
+  }
   await publishWorkspaceControlEvent(deps, context.workspaceId, result.workspaceControlEventId);
   await requestControlWakeDispatch(deps, result.wakeCount);
   return response;

package/src/domain/sessions.ts

@@ -4,6 +4,7 @@ import {
   configuredAllowedModels,
   policyProviderIdForModel,
   resolveTurnExecutionPolicyV1,
+  WORKSPACE_GATEWAY_MODEL_ID_PREFIX,
   type Settings,
 } from "@opengeni/config";
 import {
@@ -513,6 +514,8 @@ export async function createAndStartSession(input: {
   accountId: string;
   workspaceId: string;
   initialMessage: string;
+  /** Create the session shell without an initial user event/agent turn. */
+  deferInitialTurn?: boolean;
   turnInstructions?: string | null;
   resources: ResourceRef[];
   skills?: SessionSkill[];
@@ -545,6 +548,9 @@ export async function createAndStartSession(input: {
   // workspace agentInstructions at turn time; never emitted as a timeline event.
   // Null/omitted ⇒ the session carries none.
   instructions?: string | null;
+  // Immutable normalized prompt-policy role. This never derives from a
+  // workspace membership role; null retains the bounded metadata.role fallback.
+  policyRole?: string | null;
   // Validated against the creating grant before this is called.
   firstPartyMcpPermissions?: Permission[] | null;
   // Model-visible first-party tool names. Authorization remains controlled by
@@ -625,6 +631,7 @@ export async function createAndStartSession(input: {
       firstPartyMcpPermissions: input.firstPartyMcpPermissions ?? null,
       firstPartyMcpTools: input.firstPartyMcpTools,
       instructions: input.instructions ?? null,
+      policyRole: input.policyRole ?? null,
       parentSessionId: input.parentSessionId ?? null,
       createIdempotencyKey: input.createIdempotencyKey,
       sandboxGroupId: input.sandboxGroupId ?? null,
@@ -671,6 +678,7 @@ export async function createAndStartSession(input: {
       firstPartyMcpPermissions: input.firstPartyMcpPermissions ?? null,
       firstPartyMcpTools: input.firstPartyMcpTools,
       instructions: input.instructions ?? null,
+      policyRole: input.policyRole ?? null,
       parentSessionId: input.parentSessionId ?? null,
       sandboxGroupId: input.sandboxGroupId ?? null,
       ...(input.sandboxOs ? { sandboxOs: input.sandboxOs } : {}),
@@ -701,6 +709,7 @@ async function finishStartSession(
     bus: EventBus;
     workflowClient: SessionWorkflowClient;
     initialMessage: string;
+    deferInitialTurn?: boolean;
     turnInstructions?: string | null;
     resources: ResourceRef[];
     tools: ToolRef[];
@@ -780,6 +789,7 @@ async function finishStartSession(
         }
       : null,
     consumeNewSessionDraft: input.consumeNewSessionDraft ?? null,
+    deferInitialTurn: input.deferInitialTurn === true,
   });
   await publishDurableSessionEvents(input.bus, session.workspaceId, session.id, started.events);
   if (started.workflowWakeRevision !== null) {
@@ -839,6 +849,9 @@ export function canonicalConfiguredModel(
   if (settings.codexSubscriptionEnabled && canonicalModel.startsWith(CODEX_MODEL_ID_PREFIX)) {
     return canonicalModel;
   }
+  if (canonicalModel.startsWith(WORKSPACE_GATEWAY_MODEL_ID_PREFIX)) {
+    return canonicalModel;
+  }
   throw new HTTPException(422, { message: `model is not available: ${model}` });
 }
 
@@ -1251,9 +1264,10 @@ export async function createSessionForRequest(
         payload.variableSetId,
       )
     : null;
-  // RIG BINDING (M3). Resolve the rig this session rides — the EXPLICIT payload
-  // rigId when given, else the workspace default rig (workspaces.default_rig_id)
-  // — and FREEZE both the rig id and its currently-ACTIVE version onto the row.
+  // RIG BINDING (M3). Resolve the rig this session rides — a UUID binds that
+  // rig, null explicitly opts out, and omission inherits the workspace default
+  // (workspaces.default_rig_id) — then FREEZE both the rig id and its currently-
+  // ACTIVE version onto the row.
   // The session then rides that exact version for its whole life; a later
   // promote never moves it. Rig-less (both null) when neither resolves, which is
   // byte-for-byte today's behavior (zero extra work, zero row change).
@@ -1261,7 +1275,8 @@ export async function createSessionForRequest(
   //   - A stale workspace-default rig (deleted → FK-nulled, or somehow with no
   //     active version) degrades SILENTLY to rig-less: an operator-side default
   //     must never brick every create in the workspace.
-  const requestedRigId = payload.rigId ?? (await getWorkspaceDefaultRigId(db, workspaceId));
+  const requestedRigId =
+    payload.rigId === undefined ? await getWorkspaceDefaultRigId(db, workspaceId) : payload.rigId;
   let frozenRigId: string | null = null;
   let frozenRigVersionId: string | null = null;
   if (requestedRigId) {
@@ -1594,13 +1609,15 @@ export async function createSessionForRequest(
       }
     }
   }
-  await requireLimit(deps, {
-    accountId: grant.accountId,
-    workspaceId,
-    action: "agent_run:create",
-    quantity: 1,
-    model,
-  });
+  if (payload.startMode !== "realtime") {
+    await requireLimit(deps, {
+      accountId: grant.accountId,
+      workspaceId,
+      action: "agent_run:create",
+      quantity: 1,
+      model,
+    });
+  }
   const creationInitiator = creationInitiatorForGrant(grant);
   let session: CreateSessionResponse;
   try {
@@ -1611,7 +1628,8 @@ export async function createSessionForRequest(
       workflowClient,
       accountId: grant.accountId,
       workspaceId,
-      initialMessage: payload.initialMessage,
+      initialMessage: payload.initialMessage ?? "",
+      deferInitialTurn: payload.startMode === "realtime",
       turnInstructions: payload.turnInstructions ?? null,
       resources,
       skills,
@@ -1647,6 +1665,7 @@ export async function createSessionForRequest(
       // contracts schema). Persisted on the row; composed system-level at turn
       // time. Not surfaced as an event.
       instructions: payload.instructions ?? null,
+      policyRole: payload.policyRole ?? null,
       firstPartyMcpPermissions,
       firstPartyMcpTools,
       mcpServers: sessionMcpServers.dbServers,
@@ -1683,21 +1702,23 @@ export async function createSessionForRequest(
     }
     throw error;
   }
-  await recordWorkspaceUsage(deps, {
-    accountId: grant.accountId,
-    workspaceId,
-    subjectId: grant.subjectId,
-    eventType: "agent_run.created",
-    quantity: 1,
-    unit: "run",
-    sourceResourceType: "session",
-    sourceResourceId: session.id,
-    sessionId: session.id,
-    initiator: session.createdBy,
-    initiatorContext: session.createdByContext,
-    origin: creationInitiator.actor ? "system" : "user",
-    idempotencyKey: `agent_run.created:${workspaceId}:${session.id}`,
-  });
+  if (payload.startMode !== "realtime") {
+    await recordWorkspaceUsage(deps, {
+      accountId: grant.accountId,
+      workspaceId,
+      subjectId: grant.subjectId,
+      eventType: "agent_run.created",
+      quantity: 1,
+      unit: "run",
+      sourceResourceType: "session",
+      sourceResourceId: session.id,
+      sessionId: session.id,
+      initiator: session.createdBy,
+      initiatorContext: session.createdByContext,
+      origin: creationInitiator.actor ? "system" : "user",
+      idempotencyKey: `agent_run.created:${workspaceId}:${session.id}`,
+    });
+  }
   return session;
 }