@opengeni/core 0.18.1 → 0.20.2

package/dist/application/session-commands.d.ts

@@ -68,6 +68,12 @@ export declare function controlAgentSessionWorkstream(deps: {
     workspaceControlEventId: string;
     interruptionCount: number;
     wakeCount: number;
+    cancelledSessionCount: number;
+    cancelledTurnCount: number;
+    affectedSessionEvents: Array<{
+        sessionId: string;
+        eventIds: string[];
+    }>;
     replay: boolean;
     authorization: ResolvedSessionAuthorization | null;
 }>;

package/dist/dependencies.d.ts

@@ -1,5 +1,5 @@
 import type { Settings } from "@opengeni/config";
-import type { ConnectionCredentialsPort, Document, GitHubAppApiPort, ScheduledTask, SessionAuthorizationPort, TurnInitiator } from "@opengeni/contracts";
+import type { ConnectionCredentialsPort, Document, DocumentAuthorityKind, GitHubAppApiPort, ScheduledTask, SessionAuthorizationPort, TurnInitiator } from "@opengeni/contracts";
 import type { Database } from "@opengeni/db";
 import type { DocumentServices } from "@opengeni/documents";
 import type { EventBus } from "@opengeni/events";
@@ -65,6 +65,9 @@ export type DocumentIndexClient = {
         accountId: string;
         workspaceId: string;
         documentId: string;
+        authorityKind: DocumentAuthorityKind;
+        authorityWorkspaceId: string | null;
+        authoritySubjectId: string | null;
     }) => Promise<Document | void>;
 };
 export type AppDependencies = {

package/dist/domain/sessions.d.ts

@@ -57,6 +57,8 @@ export declare function createAndStartSession(input: {
     accountId: string;
     workspaceId: string;
     initialMessage: string;
+    /** Create the session shell without an initial user event/agent turn. */
+    deferInitialTurn?: boolean;
     turnInstructions?: string | null;
     resources: ResourceRef[];
     skills?: SessionSkill[];
@@ -83,6 +85,7 @@ export declare function createAndStartSession(input: {
     rigVersionId?: string | null;
     goal?: GoalSpec | null;
     instructions?: string | null;
+    policyRole?: string | null;
     firstPartyMcpPermissions?: Permission[] | null;
     firstPartyMcpTools: FirstPartyMcpToolName[];
     mcpServers?: CreateSessionMcpServerInput[];

package/dist/index.js

@@ -705,6 +705,7 @@ async function runOnSandbox(services, ctx, target, op) {
   if (sandbox.kind !== "selfhosted" || !sandbox.enrollmentId) {
     return {
       target,
+      targetName: sandbox.name,
       kind: op.kind,
       ok: false,
       reason: `run_on routes one-off ops to enrolled selfhosted machines; ${sandbox.kind} targets are reached via the active sandbox (swap to it first)`
@@ -712,9 +713,15 @@ async function runOnSandbox(services, ctx, target, op) {
   }
   const enrollment = await getEnrollment(services.db, ctx.workspaceId, sandbox.enrollmentId);
   if (!enrollment || enrollment.status !== "active") {
-    return { target, kind: op.kind, ok: false, reason: `sandbox ${target} is not enrolled/active` };
+    return {
+      target,
+      targetName: sandbox.name,
+      kind: op.kind,
+      ok: false,
+      reason: `sandbox ${target} is not enrolled/active`
+    };
   }
-  return executeRunOnSelfhostedMachine(
+  const result = await executeRunOnSelfhostedMachine(
     {
       workspaceId: ctx.workspaceId,
       agentId: sandbox.enrollmentId,
@@ -726,6 +733,7 @@ async function runOnSandbox(services, ctx, target, op) {
     target,
     op
   );
+  return { ...result, targetName: sandbox.name };
 }
 async function provisionSandbox(services, ctx, input) {
   if (input.kind === "selfhosted") {
@@ -3327,6 +3335,7 @@ import {
   normalizeRepositorySubpath,
   normalizeResourceMountPath,
   resourceIdentityKey,
+  resourceMountPath,
   resourceMountPathCollisionKey,
   ResourceRefConflictError,
   ResourceMountPathError,
@@ -3388,7 +3397,7 @@ function normalizeResources(resources) {
   for (const resource of resources) {
     let normalized;
     if (resource.kind === "file") {
-      const mountPath = normalizeMountPath(resource.mountPath ?? `files/${resource.fileId}`);
+      const mountPath = normalizeMountPath(resourceMountPath(resource));
       normalized = {
         kind: "file",
         fileId: resource.fileId,
@@ -4172,6 +4181,7 @@ async function createAndStartSession(input) {
       firstPartyMcpPermissions: input.firstPartyMcpPermissions ?? null,
       firstPartyMcpTools: input.firstPartyMcpTools,
       instructions: input.instructions ?? null,
+      policyRole: input.policyRole ?? null,
       parentSessionId: input.parentSessionId ?? null,
       createIdempotencyKey: input.createIdempotencyKey,
       sandboxGroupId: input.sandboxGroupId ?? null,
@@ -4218,6 +4228,7 @@ async function createAndStartSession(input) {
       firstPartyMcpPermissions: input.firstPartyMcpPermissions ?? null,
       firstPartyMcpTools: input.firstPartyMcpTools,
       instructions: input.instructions ?? null,
+      policyRole: input.policyRole ?? null,
       parentSessionId: input.parentSessionId ?? null,
       sandboxGroupId: input.sandboxGroupId ?? null,
       ...input.sandboxOs ? { sandboxOs: input.sandboxOs } : {},
@@ -4280,7 +4291,8 @@ async function finishStartSession(input, session) {
       ...input.goal.successCriteria !== void 0 ? { successCriteria: input.goal.successCriteria } : {},
       ...input.goal.maxAutoContinuations !== void 0 ? { maxAutoContinuations: input.goal.maxAutoContinuations } : {}
     } : null,
-    consumeNewSessionDraft: input.consumeNewSessionDraft ?? null
+    consumeNewSessionDraft: input.consumeNewSessionDraft ?? null,
+    deferInitialTurn: input.deferInitialTurn === true
   });
   await publishDurableSessionEvents(input.bus, session.workspaceId, session.id, started.events);
   if (started.workflowWakeRevision !== null) {
@@ -4597,7 +4609,7 @@ async function createSessionForRequest(deps, grant, workspaceId, rawPayload) {
     workspaceId,
     payload.variableSetId
   ) : null;
-  const requestedRigId = payload.rigId ?? await getWorkspaceDefaultRigId(db, workspaceId);
+  const requestedRigId = payload.rigId === void 0 ? await getWorkspaceDefaultRigId(db, workspaceId) : payload.rigId;
   let frozenRigId = null;
   let frozenRigVersionId = null;
   if (requestedRigId) {
@@ -4765,13 +4777,15 @@ async function createSessionForRequest(deps, grant, workspaceId, rawPayload) {
       }
     }
   }
-  await requireLimit(deps, {
-    accountId: grant.accountId,
-    workspaceId,
-    action: "agent_run:create",
-    quantity: 1,
-    model
-  });
+  if (payload.startMode !== "realtime") {
+    await requireLimit(deps, {
+      accountId: grant.accountId,
+      workspaceId,
+      action: "agent_run:create",
+      quantity: 1,
+      model
+    });
+  }
   const creationInitiator = creationInitiatorForGrant(grant);
   let session;
   try {
@@ -4782,7 +4796,8 @@ async function createSessionForRequest(deps, grant, workspaceId, rawPayload) {
       workflowClient,
       accountId: grant.accountId,
       workspaceId,
-      initialMessage: payload.initialMessage,
+      initialMessage: payload.initialMessage ?? "",
+      deferInitialTurn: payload.startMode === "realtime",
       turnInstructions: payload.turnInstructions ?? null,
       resources,
       skills,
@@ -4817,6 +4832,7 @@ async function createSessionForRequest(deps, grant, workspaceId, rawPayload) {
       // contracts schema). Persisted on the row; composed system-level at turn
       // time. Not surfaced as an event.
       instructions: payload.instructions ?? null,
+      policyRole: payload.policyRole ?? null,
       firstPartyMcpPermissions,
       firstPartyMcpTools,
       mcpServers: sessionMcpServers.dbServers,
@@ -4848,21 +4864,23 @@ async function createSessionForRequest(deps, grant, workspaceId, rawPayload) {
     }
     throw error;
   }
-  await recordWorkspaceUsage(deps, {
-    accountId: grant.accountId,
-    workspaceId,
-    subjectId: grant.subjectId,
-    eventType: "agent_run.created",
-    quantity: 1,
-    unit: "run",
-    sourceResourceType: "session",
-    sourceResourceId: session.id,
-    sessionId: session.id,
-    initiator: session.createdBy,
-    initiatorContext: session.createdByContext,
-    origin: creationInitiator.actor ? "system" : "user",
-    idempotencyKey: `agent_run.created:${workspaceId}:${session.id}`
-  });
+  if (payload.startMode !== "realtime") {
+    await recordWorkspaceUsage(deps, {
+      accountId: grant.accountId,
+      workspaceId,
+      subjectId: grant.subjectId,
+      eventType: "agent_run.created",
+      quantity: 1,
+      unit: "run",
+      sourceResourceType: "session",
+      sourceResourceId: session.id,
+      sessionId: session.id,
+      initiator: session.createdBy,
+      initiatorContext: session.createdByContext,
+      origin: creationInitiator.actor ? "system" : "user",
+      idempotencyKey: `agent_run.created:${workspaceId}:${session.id}`
+    });
+  }
   return session;
 }
 async function acceptSessionUserMessage(deps, grant, workspaceId, sessionId, input) {
@@ -6843,11 +6861,13 @@ async function controlHumanSessionWorkstream(deps, context, input) {
       authorization?.relatedSessionAccess ?? "root"
     ),
     interruptionCount: result.interruptionCount,
-    wakeCount: result.wakeCount
+    wakeCount: result.wakeCount,
+    cancelledSessionCount: result.cancelledSessionCount,
+    cancelledTurnCount: result.cancelledTurnCount
   };
-  await publishSessionEventIds(deps, context.workspaceId, context.sessionId, [
-    result.sessionControlEventId
-  ]);
+  for (const affected of result.affectedSessionEvents) {
+    await publishSessionEventIds(deps, context.workspaceId, affected.sessionId, affected.eventIds);
+  }
   await publishWorkspaceControlEvent(deps, context.workspaceId, result.workspaceControlEventId);
   await requestControlWakeDispatch(deps, result.wakeCount);
   return response;