@opengeni/core 3.0.1 → 3.1.2

package/dist/goal-admission.d.ts

@@ -0,0 +1,627 @@
+import { type Settings } from "@opengeni/config";
+import { type GoalAdmissionPausedReason, type Session } from "@opengeni/contracts";
+import { getWorkspaceModelPolicy, type Database } from "@opengeni/db";
+import { agentRunAdmissionDenial } from "./billing/agent-run-admission.js";
+export type GoalAdmissionBlock = {
+    pausedReason: GoalAdmissionPausedReason;
+    message: string;
+};
+/** Catalog membership never grants access to a connection or changes the selected model. */
+export declare function goalContinuationModelDecision(input: {
+    settings: Settings;
+    workspaceModelPolicy: Awaited<ReturnType<typeof getWorkspaceModelPolicy>>;
+    inheritedModel: string;
+    codexCompactionMode?: Session["codexCompactionMode"];
+    latencyMode?: Session["latencyMode"];
+}): {
+    model: string;
+    blocked: string | null;
+    pausedReason?: GoalAdmissionPausedReason;
+};
+/** The same scoped, secret-free catalog used at ordinary turn admission. */
+export declare function resolveGoalModelAdmission(db: Database, settings: Settings, input: {
+    accountId: string;
+    workspaceId: string;
+    model: string;
+    codexCompactionMode?: Session["codexCompactionMode"];
+    latencyMode?: Session["latencyMode"];
+}): Promise<{
+    model: string;
+    blocked: string | null;
+    pausedReason?: GoalAdmissionPausedReason;
+    settings: {
+        serviceName: string;
+        environment: string;
+        deploymentRevision: string;
+        serverVersion?: string | undefined;
+        databaseUrl: string;
+        apiDatabasePoolMax: number;
+        dbSchema: string;
+        rlsStrategy: "force" | "scoped";
+        runtimeDatabaseRole: string;
+        natsUrl: string;
+        temporalHost: string;
+        temporalNamespace: string;
+        temporalTaskQueue: string;
+        temporalTlsEnabled: boolean;
+        temporalApiKey?: string | undefined;
+        temporalTlsServerName?: string | undefined;
+        temporalTlsRootCaCertificateBase64?: string | undefined;
+        temporalTlsClientCertificateBase64?: string | undefined;
+        temporalTlsClientPrivateKeyBase64?: string | undefined;
+        startupDependencyRetryAttempts: number;
+        startupDependencyRetryInitialDelayMs: number;
+        startupDependencyRetryMaxDelayMs: number;
+        turnWorkerConcurrencyMode: "fixed" | "resource-based";
+        turnWorkerMaxConcurrentTurns: number;
+        turnWorkerTargetCpuUsage: number;
+        turnWorkerTargetMemoryUsage: number;
+        turnWorkerEmergencyMemoryUsage: number;
+        turnWorkerMemoryGuardIntervalMs: number;
+        turnWorkerMemoryGuardSustainMs: number;
+        observabilityStructuredLogs: boolean;
+        observabilityMetricsEnabled: boolean;
+        observabilityOtlpEndpoint?: string | undefined;
+        observabilityOtlpHeaders: string;
+        observabilityDiagnosticsEndpoint?: string | undefined;
+        observabilityDiagnosticsHeaders: string;
+        analyticsEnabled: boolean;
+        analyticsConsentRequired: boolean;
+        analyticsReoClientId?: string | undefined;
+        analyticsPosthogProjectKey?: string | undefined;
+        analyticsPosthogHost?: string | undefined;
+        analyticsGa4MeasurementId?: string | undefined;
+        legalPrivacyPolicyUrl?: string | undefined;
+        legalTermsOfServiceUrl?: string | undefined;
+        supportEmail?: string | undefined;
+        publicBaseUrl?: string | undefined;
+        documentationUrl: string | null;
+        mcpOauthEnabled: boolean;
+        apiTrustedProxyHops: number;
+        apiTrustedProxyCidrs: string;
+        webBaseUrl?: string | undefined;
+        agentReleasesBaseUrl: string;
+        agentStableVersion: string;
+        desktopStableVersion?: string | undefined;
+        agentBetaVersion?: string | undefined;
+        agentAutoUpdate: boolean;
+        productAccessMode: "configured" | "local" | "managed";
+        billingMode: "disabled" | "stripe";
+        verifiedSignupTrialCreditsEnabled: boolean;
+        creditPromotionPolicy: {
+            defaultModelIds?: string[] | undefined;
+            signupModelIds?: string[] | undefined;
+            offers: Record<string, {
+                label: string;
+                eligibleModelIds?: string[] | undefined;
+            }>;
+        };
+        entitlementsMode: "managed" | "none" | "static";
+        usageLimitsMode: "managed" | "none" | "static";
+        usageAllowancesEnabled: boolean;
+        staticEntitlementsJson: string;
+        staticUsageLimitsJson: string;
+        delegationSecret?: string | undefined;
+        defaultFirstPartyMcpTools?: ("admin_action_call" | "admin_action_describe" | "admin_actions_search" | "artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_download_save" | "browser_downloads" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_read" | "browser_screenshot" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_enable_screen_control" | "connected_machine_enroll_token" | "connected_machine_remove" | "custom_mcp_setup_request" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "inbox_tidy" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "notification_withdraw" | "notify_user" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "secret_delete" | "secret_get" | "secret_move" | "secret_save" | "secret_search" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_message_status" | "session_pause" | "session_resume" | "session_send_message" | "session_set_model" | "session_set_project" | "session_steer" | "session_target_get" | "session_target_set" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "site_data_define_collection" | "site_data_describe" | "site_data_export" | "site_data_import" | "site_data_query" | "site_data_reset" | "site_data_write" | "site_files_delete" | "site_files_list" | "site_files_upload" | "site_hostname_check" | "site_publication_apply_fix" | "site_publication_get" | "site_publication_update" | "site_sql_define_query" | "site_sql_enable" | "site_sql_execute" | "site_sql_export" | "site_sql_import" | "site_sql_inspect" | "site_sql_migrate" | "site_sql_query" | "site_sql_reset" | "site_sql_run" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_prepare_message" | "slack_bot_search" | "slack_bot_send_prepared_message" | "slack_bot_thread_replies" | "slack_bot_upload_file" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[] | undefined;
+        allowedFirstPartyMcpTools?: ("admin_action_call" | "admin_action_describe" | "admin_actions_search" | "artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_download_save" | "browser_downloads" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_read" | "browser_screenshot" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_enable_screen_control" | "connected_machine_enroll_token" | "connected_machine_remove" | "custom_mcp_setup_request" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "inbox_tidy" | "instruction_policy_get" | "instruction_policy_propose" | "instruction_policy_save" | "interaction_discover" | "interaction_request_human" | "knowledge_archive" | "knowledge_browse" | "knowledge_correct" | "knowledge_get" | "knowledge_prepare_save" | "knowledge_propose" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_save" | "knowledge_search" | "memory_correct" | "memory_save" | "memory_search" | "notification_withdraw" | "notify_user" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "project_create" | "project_delete" | "project_get" | "project_list" | "project_reorder" | "project_update" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "secret_delete" | "secret_get" | "secret_move" | "secret_save" | "secret_search" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_message_status" | "session_pause" | "session_resume" | "session_send_message" | "session_set_model" | "session_set_project" | "session_steer" | "session_target_get" | "session_target_set" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "site_data_define_collection" | "site_data_describe" | "site_data_export" | "site_data_import" | "site_data_query" | "site_data_reset" | "site_data_write" | "site_files_delete" | "site_files_list" | "site_files_upload" | "site_hostname_check" | "site_publication_apply_fix" | "site_publication_get" | "site_publication_update" | "site_sql_define_query" | "site_sql_enable" | "site_sql_execute" | "site_sql_export" | "site_sql_import" | "site_sql_inspect" | "site_sql_migrate" | "site_sql_query" | "site_sql_reset" | "site_sql_run" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_prepare_message" | "slack_bot_search" | "slack_bot_send_prepared_message" | "slack_bot_thread_replies" | "slack_bot_upload_file" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[] | undefined;
+        artifactMaterializerDeployed: boolean;
+        streamTokenSecret?: string | undefined;
+        streamControlEnabled: boolean;
+        workDiscoveryEnabled: boolean;
+        workClaimMutationsEnabled: boolean;
+        workDiscoveryHumanAdvisoriesEnabled: boolean;
+        workDiscoveryAutomaticNudgesEnabled: boolean;
+        ogtoolPackageSpec?: string | undefined;
+        environmentsEncryptionKey?: string | undefined;
+        onePasswordFakeTokens: boolean;
+        integrationsEnabled: boolean;
+        integrationsStateSecret?: string | undefined;
+        integrationsAllowPrivateNetworkTargets: boolean;
+        privacyOnlyMeAllowed: boolean;
+        privacyWorkspaceDefaultRequired: boolean;
+        privacyAdminScheduleSummariesRequired: boolean;
+        integrationsOauthClientsJson: string;
+        gmailWatchTopicName?: string | undefined;
+        slackClientId?: string | undefined;
+        slackClientSecret?: string | undefined;
+        slackSigningSecret?: string | undefined;
+        slackAccessMode: "full" | "limited";
+        slackBotDisplayName: "OpenGeni" | "OpenGeni Staging" | "Opengeni" | "Opengeni Staging";
+        slackCommand: string;
+        googleDriveClientId?: string | undefined;
+        googleDriveClientSecret?: string | undefined;
+        googleDriveSyncMaxItems: number;
+        googleDriveSyncMaxBytes: number;
+        googleDriveSyncMaxFileBytes: number;
+        googleDriveSyncMaxProviderRequests: number;
+        googleDriveSyncMaxElapsedSeconds: number;
+        googleDriveSyncMaxFailureDetails: number;
+        googleDriveProviderRequestTimeoutMs: number;
+        googleDriveProviderRetryAttempts: number;
+        googleDriveProviderRetryInitialDelayMs: number;
+        googleDriveProviderRetryMaxDelayMs: number;
+        googleDriveProviderRetryBudgetMs: number;
+        fikenClientId?: string | undefined;
+        fikenClientSecret?: string | undefined;
+        googleDriveWorkspaceEventsEnabled?: boolean | undefined;
+        atlassianClientId?: string | undefined;
+        atlassianClientSecret?: string | undefined;
+        maxNestedAgentDepth?: number | undefined;
+        socialOauthClientsJson: string;
+        goalMaxAutoContinuations?: number | undefined;
+        goalIdleBackoffMs: readonly number[];
+        goalIdleBackoffMaxMs: number;
+        childLifecycleNoticesEnabled: boolean;
+        sessionUsageLimitsEnabled: boolean;
+        slackWorkspaceRoutingEnabled: boolean;
+        agentMaxModelCallsPerTurn: number;
+        contextWindowTokens: number;
+        contextEffectiveWindowTokens?: number | undefined;
+        contextCompactionThresholdRatio: number;
+        contextReservedOutputTokens: number;
+        contextAutoCompactThresholdTokens?: number | undefined;
+        modelToolOutputTruncationTokens: number;
+        authRequired: boolean;
+        accessKey?: string | undefined;
+        authAllowHealth: boolean;
+        authAllowMetrics: boolean;
+        apiHost: string;
+        apiPort: number;
+        apiMetricsPort?: number | undefined;
+        workerHttpPort: number;
+        opengeniMcpInternalUrl?: string | undefined;
+        opengeniMcpUrl?: string | undefined;
+        corsAllowOriginRegex: string;
+        localAllowedOrigins?: string | undefined;
+        openaiProvider: "azure" | "openai";
+        openaiApiKey?: string | undefined;
+        openaiBaseUrl?: string | undefined;
+        openaiModel: string;
+        openaiAllowedModels: string;
+        vercelAiGatewayApiKey?: string | undefined;
+        imageGenerationModel: string;
+        videoGenerationPollIntervalMs: number;
+        videoGenerationRecoveryDeadlineMs: number;
+        videoGenerationReferenceUrlTtlSeconds: number;
+        videoGenerationMaxConcurrentPerWorkspace: number;
+        videoGenerationWorkspaceQuotaBytes: number;
+        videoGenerationTempDirectory: string;
+        videoGenerationFfprobePath: string;
+        videoGenerationCredit480pMicrosPerSecond: number;
+        videoGenerationCredit720pMicrosPerSecond: number;
+        voiceInputMaxDurationSeconds: number;
+        voiceInputMaxSizeBytes: number;
+        voiceInputResumableEnabled: boolean;
+        voiceInputResumableMaxDurationSeconds: number;
+        voiceInputResumableMaxSizeBytes: number;
+        voiceInputResumableMaxChunkSizeBytes: number;
+        sessionArchiveEnabled: boolean;
+        sessionArchiveIdleDays: number;
+        voiceInputResumableRetentionSeconds: number;
+        voiceInputFfmpegPath: string;
+        voiceInputProviderOrder: string;
+        voiceInputOpenaiEnabled: boolean;
+        voiceInputOpenaiApiKey?: string | undefined;
+        voiceInputOpenaiBaseUrl?: string | undefined;
+        voiceInputOpenaiModel: string;
+        voiceInputAzureEnabled: boolean;
+        voiceInputAzureEndpoint?: string | undefined;
+        voiceInputAzureDeployment?: string | undefined;
+        voiceInputAzureApiVersion?: string | undefined;
+        voiceInputAzureApiKey?: string | undefined;
+        voiceInputAzureAdToken?: string | undefined;
+        azureLiveEndpoint?: string | undefined;
+        azureLiveApiKey?: string | undefined;
+        azureLiveDeployment: string;
+        azureLiveVoice: string;
+        azureLivePricingJson?: string | undefined;
+        aiGatewayRealtimePricingJson?: string | undefined;
+        voiceInputMaiEndpoint?: string | undefined;
+        voiceInputMaiApiKey?: string | undefined;
+        voiceInputMaiApiVersion: string;
+        voiceInputMaiPricingJson?: string | undefined;
+        voiceInputMaiModel: string;
+        voiceInputAzureModel?: string | undefined;
+        voiceInputOpenaiPricingJson?: string | undefined;
+        voiceInputAzurePricingJson?: string | undefined;
+        voiceInputCodexExperimentalEnabled: boolean;
+        modelPricingJson: string;
+        modelCatalogSource: "code" | "database";
+        modelCostPolicyJson: string;
+        modelNotesJson: string;
+        openrouterApiKey?: string | undefined;
+        opperApiKey?: string | undefined;
+        managedModelsJson?: string | undefined;
+        resolvedGatewayModelsJson?: string | undefined;
+        resolvedOpenRouterModelsJson?: string | undefined;
+        resolvedOpperModelsJson?: string | undefined;
+        resolvedCodexModelsJson?: string | undefined;
+        modelProvidersJson: string;
+        codexSubscriptionEnabled: boolean;
+        experimentSystemPromptCacheSplit: boolean;
+        experimentCutPolling: boolean;
+        experimentOutputCost: boolean;
+        supergrokSubscriptionEnabled: boolean;
+        claudeSubscriptionEnabled: boolean;
+        supergrokResponseStreamIdleTimeoutMs: number;
+        modelStreamIdleTimeoutMs: number;
+        modelStreamProgressTimeoutMs: number;
+        codexConnectedAppsEnabled: boolean;
+        codexProductSku?: string | undefined;
+        codexToolSearchEnabled: boolean;
+        codexResponsesWebSocketEnabled: boolean;
+        lazyToolSearchEnabled: boolean;
+        codexFleetPolicyShadowEnabled: boolean;
+        subscriptionCoreShadowEnabled: boolean;
+        subscriptionCrossProviderFailoverEnabled: boolean;
+        subscriptionCoreShadowTimeoutMs: number;
+        codexRotationNearExhaustionPct: number;
+        reasoningConfigurationUpdatesEnabled: boolean;
+        openaiReasoningEffort: "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh";
+        openaiAllowedReasoningEfforts: string;
+        creditsDefaultModel: string;
+        creditsDefaultReasoningEffort: "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh";
+        openaiResponsesTransport: "http" | "websocket";
+        openaiProviderItemIds: "preserve" | "strip";
+        openaiReasoningEncryptedContent: boolean;
+        openaiMaxRetries: number;
+        webSearchEnabled: boolean;
+        webSearchProvider?: string | undefined;
+        webFetchProvider?: string | undefined;
+        webSearchPrefer?: string | undefined;
+        webSearchProviderCredentials: Record<string, {
+            apiKey?: string | undefined;
+            baseUrl?: string | undefined;
+        }>;
+        webSearchApiKey?: string | undefined;
+        webSearchBaseUrl?: string | undefined;
+        webFetchApiKey?: string | undefined;
+        webFetchBaseUrl?: string | undefined;
+        webSearchProviderMode?: string | undefined;
+        webSearchPricingJson?: string | undefined;
+        webSearchRequestTimeoutMs: number;
+        jevApiKey?: string | undefined;
+        jevBaseUrl: string;
+        jevModel: string;
+        jevRequestTimeoutMs: number;
+        codeSearchMode: "default_on" | "experiment" | "off" | "opt_in";
+        agentInstructionsTemplate: string;
+        experimentKnowledgeRetrievalGuidance: boolean;
+        azureOpenaiBaseUrl?: string | undefined;
+        azureOpenaiEndpoint?: string | undefined;
+        azureOpenaiDeployment?: string | undefined;
+        azureOpenaiApiVersion?: string | undefined;
+        azureOpenaiApiKey?: string | undefined;
+        azureOpenaiAdToken?: string | undefined;
+        disableOpenaiTracing: boolean;
+        sandboxBackend: "blaxel" | "cloudflare" | "daytona" | "docker" | "e2b" | "local" | "modal" | "none" | "opensandbox" | "runloop" | "selfhosted" | "vercel";
+        dockerImage: string;
+        sandboxArtifactRuntimeEnabled: boolean;
+        dockerExposedPorts: string;
+        dockerNetwork?: string | undefined;
+        dockerWorkspaceBaseDir?: string | undefined;
+        modalAppName: string;
+        modalImageRef?: string | undefined;
+        modalCommandSupervisionEnabled: boolean;
+        modalImageId?: string | undefined;
+        modalImageRegistrySecret?: string | undefined;
+        modalTimeoutSeconds: number;
+        modalSandboxCpu?: number | undefined;
+        modalSandboxMemoryMiB?: number | undefined;
+        modalTokenId?: string | undefined;
+        modalTokenSecret?: string | undefined;
+        modalEnvironment?: string | undefined;
+        modalIdleTimeoutSeconds?: number | undefined;
+        modalWorkspacePersistence: "snapshot_directory" | "snapshot_filesystem" | "tar";
+        sandboxDesktopEnabled: boolean;
+        sandboxDesktopInteractive: boolean;
+        sandboxTerminalEnabled: boolean;
+        streamResolutionWidth: number;
+        streamResolutionHeight: number;
+        recordingEnabled: boolean;
+        recordingDefaultCodec: "h264-mp4" | "vp9-webm";
+        workspaceCaptureEnabled: boolean;
+        recordingFramerate: number;
+        recordingMaxSeconds: number;
+        recordingMaxBytes: number;
+        daytonaApiKey?: string | undefined;
+        daytonaApiUrl?: string | undefined;
+        daytonaTarget?: string | undefined;
+        daytonaImage?: string | undefined;
+        daytonaSnapshotName?: string | undefined;
+        daytonaAutoStopInterval?: number | undefined;
+        daytonaTimeoutSeconds?: number | undefined;
+        daytonaExposedPortUrlTtlSeconds?: number | undefined;
+        runloopApiKey?: string | undefined;
+        runloopBaseUrl?: string | undefined;
+        runloopBlueprintName?: string | undefined;
+        runloopBlueprintId?: string | undefined;
+        runloopTunnel: boolean;
+        runloopKeepAliveSeconds?: number | undefined;
+        e2bApiKey?: string | undefined;
+        e2bTemplate?: string | undefined;
+        e2bTimeoutSeconds?: number | undefined;
+        e2bTimeoutAction?: "kill" | "pause" | undefined;
+        e2bAllowInternetAccess?: boolean | undefined;
+        e2bAutoResume?: boolean | undefined;
+        e2bWorkspacePersistence?: "snapshot" | "tar" | undefined;
+        blaxelApiKey?: string | undefined;
+        blaxelImage?: string | undefined;
+        blaxelRegion?: string | undefined;
+        blaxelExposedPortPublic?: boolean | undefined;
+        blaxelExposedPortUrlTtlSeconds?: number | undefined;
+        blaxelMemoryMb?: number | undefined;
+        blaxelTtl?: string | undefined;
+        cloudflareWorkerUrl?: string | undefined;
+        cloudflareApiKey?: string | undefined;
+        experimentalBrowserContextPoolEnabled: boolean;
+        browserbaseApiKey?: string | undefined;
+        kernelApiKey?: string | undefined;
+        kernelEndpoint?: string | undefined;
+        kernelBrowserTimeoutSeconds: number;
+        kernelBrowserStealth: boolean;
+        vercelToken?: string | undefined;
+        vercelProjectId?: string | undefined;
+        vercelTeamId?: string | undefined;
+        vercelRuntime?: string | undefined;
+        openSandboxBaseUrl?: string | undefined;
+        openSandboxApiKey?: string | undefined;
+        openSandboxImage?: string | undefined;
+        openSandboxTtlSeconds: number;
+        openSandboxUseServerProxy: boolean;
+        openSandboxSignedEndpoints: boolean;
+        openSandboxSignedEndpointTtlSeconds: number;
+        openSandboxChannelBPublicBaseUrl?: string | undefined;
+        openSandboxInteractionFrameProxy?: boolean | undefined;
+        openSandboxPoolRef?: string | undefined;
+        openSandboxKubernetesInventoryNamespace?: string | undefined;
+        sandboxOwnershipEnabled: boolean;
+        rigVerificationLeaseOwnershipEnabled: boolean;
+        sandboxLazyProvisionEnabled: boolean;
+        sandboxSelfhostedEnabled: boolean;
+        agentOpStreamEnabled: boolean;
+        enrollmentSigningSecret?: string | undefined;
+        selfhostedNatsUrl?: string | undefined;
+        selfhostedRelayUrl?: string | undefined;
+        selfhostedRelayTokenSecret?: string | undefined;
+        agentUpdatePublicKey?: string | undefined;
+        selfhostedNatsCalloutAccountSeed?: string | undefined;
+        selfhostedNatsCalloutAccountName?: string | undefined;
+        selfhostedNatsCalloutUser?: string | undefined;
+        selfhostedNatsCalloutPassword?: string | undefined;
+        selfhostedNatsControlUser?: string | undefined;
+        selfhostedNatsControlPassword?: string | undefined;
+        sandboxSelfhostedExecTimeoutMs: number;
+        sandboxSelfhostedControlTimeoutMs: number;
+        sandboxLeaseReaperPeriodMs: number;
+        sandboxViewerHolderTtlMs: number;
+        sandboxInteractionHolderTtlMs: number;
+        sandboxIdleGraceMs: number;
+        sandboxIdleCommandContainmentMs: number | undefined;
+        sandboxSnapshotIntervalMs: number;
+        sandboxSnapshotTimeoutMs: number;
+        sandboxDrainSnapshotTimeoutMs?: number | undefined;
+        sandboxRotationLeadMs: number;
+        sandboxRotationBatchSize: number;
+        sandboxLeaseTtlMs: number;
+        sandboxLeaseWarmingTtlMs: number;
+        sandboxWarmingTimeoutMs: number;
+        workspaceControlLockTimeoutMs: number;
+        rigSetupTimeoutMs: number;
+        sandboxWarmRateMicrosPerSecondJson: string;
+        sandboxWarmBillingMode: "credits" | "shadow" | "usage_only";
+        sandboxMaxWarmSecondsPerWorkspace: number;
+        sandboxPreparationProfiles: string;
+        sandboxEnvAllowlist: string;
+        sandboxImageAllowlist: string;
+        objectStorageEndpoint?: string | undefined;
+        objectStorageInternalEndpoint?: string | undefined;
+        objectStorageSandboxEndpoint?: string | undefined;
+        objectStorageBackend: "aws-s3" | "azure-blob" | "gcs" | "s3-compatible";
+        objectStorageBucket: string;
+        objectStorageRegion: string;
+        objectStorageS3Provider: string;
+        objectStorageAccessKeyId?: string | undefined;
+        objectStorageSecretAccessKey?: string | undefined;
+        objectStorageForcePathStyle: boolean;
+        objectStorageAzureConnectionString?: string | undefined;
+        objectStorageAzureAccountName?: string | undefined;
+        objectStorageAzureAccountKey?: string | undefined;
+        objectStorageAzureEndpoint?: string | undefined;
+        objectStorageGcsProjectId?: string | undefined;
+        objectStorageGcsCredentialsJson?: string | undefined;
+        objectStorageGcsKeyFilename?: string | undefined;
+        objectStorageGcsApiEndpoint?: string | undefined;
+        documentParser: string;
+        documentChunkSize: number;
+        documentChunkOverlap: number;
+        documentEmbeddingProvider: "deterministic" | "openai";
+        documentEmbeddingModel: string;
+        documentEmbeddingDimensions: number;
+        documentEmbeddingApiKey?: string | undefined;
+        documentEmbeddingBaseUrl?: string | undefined;
+        documentEmbeddingBillingMode: "credits" | "shadow" | "usage_only";
+        sitesCloudflareStorageEnabled: boolean;
+        sitesGatewayInternalOrigin?: string | undefined;
+        sitesSqlFreeStorageBytes: number;
+        sitesSqlFreeRowsReadPerMonth?: number | undefined;
+        sitesSqlFreeRowsWrittenPerMonth?: number | undefined;
+        sitesSqlFreeCallsPerMinutePerViewer: number;
+        sitesSqlFreeCallsPerMinutePerSite: number;
+        sitesSqlMaxRowsPerCall: number;
+        sitesSqlMaxResponseBytes: number;
+        sitesSqlTimeoutMs: number;
+        siteDataRecordBytesPerSite: number;
+        siteDataMaxRecordBytes: number;
+        siteDataMaxCollectionsPerSite: number;
+        siteDataFileBytesPerSite: number;
+        siteDataMaxFileBytes: number;
+        siteDataWorkspaceBytes: number;
+        siteDataViewerWritesPerMinute: number;
+        siteDataSiteWritesPerMinute: number;
+        siteDataViewerReadsPerMinute: number;
+        siteDataManagerWritesPerMinute: number;
+        siteDataSiteValidationMsPerMinute: number;
+        siteDataWorkspaceValidationMsPerMinute: number;
+        siteDataMaxRecordsPerCollection: number;
+        sitesDomain?: string | undefined;
+        sitesGatewaySecret?: string | undefined;
+        sitesGatewaySecretPrevious?: string | undefined;
+        sitesPublicEnabled: boolean;
+        sitesPublicAgentsEnabled: boolean;
+        sitesLoginOnly: boolean;
+        sitesForceNoindex: boolean;
+        sitesAbuseEmail?: string | undefined;
+        sitesGuestAgentHumanCheck: boolean;
+        sitesFreeRequestsPerMinutePerVisitor: number;
+        sitesFreeGuestWritesPerMinute: number;
+        sitesFreeConversationsPerVisitorPerDay?: number | undefined;
+        sitesFreeConversationsPerSitePerDay?: number | undefined;
+        sitesFreeTurnsPerConversation?: number | undefined;
+        sitesFreeAgentMicrosPerConversation?: number | undefined;
+        sitesFreeAgentMicrosPerVisitorPerDay?: number | undefined;
+        sitesFreeAgentMicrosPerSitePerMonth?: number | undefined;
+        sitesAgentMicrosPerSitePerMonth?: number | undefined;
+        sitesAgentMicrosPerPersonPerDay?: number | undefined;
+        sitesGuestConversationsPerVisitorPerDay?: number | undefined;
+        sitesGuestConversationsPerSitePerDay?: number | undefined;
+        sitesGuestTurnsPerConversation?: number | undefined;
+        sitesGuestAgentMicrosPerConversation?: number | undefined;
+        sitesAgentReservationMicrosPerTurn: number;
+        sitesCreditsLimitMultiplier: number;
+        sitesPlatformBillingMode: "credits" | "shadow" | "usage_only";
+        sitesPlatformOverageEnabled: boolean;
+        sitesPlatformAllowanceRequests: number;
+        sitesPlatformAllowanceSqlRowsRead: number;
+        sitesPlatformAllowanceSqlRowsWritten: number;
+        sitesPlatformAllowanceStorageBytes: number;
+        sitesPlatformPriceMicrosPerMillionRequests: number;
+        sitesPlatformPriceMicrosPerMillionSqlRowsRead: number;
+        sitesPlatformPriceMicrosPerMillionSqlRowsWritten: number;
+        sitesPlatformPriceMicrosPerGbMonth: number;
+        sitesPlatformMonthlyLimitUsd: number;
+        sitesPlatformAlertPercent: number;
+        sitesReportsPerMinutePerVisitor: number;
+        sitesViewerSessionIdleSeconds: number;
+        sitesViewerSessionAbsoluteSeconds: number;
+        sitesHostnameHoldDays: number;
+        sitesCloudflareApiToken?: string | undefined;
+        sitesCloudflareAccountId?: string | undefined;
+        sitesCloudflareKvNamespaceId?: string | undefined;
+        sitesCloudflareZoneId?: string | undefined;
+        sitesHostMapTtlSeconds: number;
+        sitesWebRiskApiKey?: string | undefined;
+        documentEmbeddingCreditsActivatedAt?: string | undefined;
+        documentEmbeddingRateMicrosPerMillionBytes: number;
+        documentCurationProvider: "heuristic" | "none" | "openai";
+        documentCurationModel: string;
+        documentCurationApiKey?: string | undefined;
+        documentCurationBaseUrl?: string | undefined;
+        gitAuthorName?: string | undefined;
+        gitAuthorEmail?: string | undefined;
+        gitCommitterName?: string | undefined;
+        gitCommitterEmail?: string | undefined;
+        githubAppManifestBaseUrl?: string | undefined;
+        githubAppManifestStateSecret?: string | undefined;
+        githubAppId?: string | undefined;
+        githubClientId?: string | undefined;
+        githubClientSecret?: string | undefined;
+        githubRestMcpEnabled: boolean;
+        githubPersonalOauthEnabled: boolean;
+        githubPersonalOauthClientId?: string | undefined;
+        githubPersonalOauthClientSecret?: string | undefined;
+        githubAppSlug?: string | undefined;
+        githubWebhookSecret?: string | undefined;
+        githubAppPrivateKey?: string | undefined;
+        prReviewGithubAppId?: string | undefined;
+        prReviewGithubClientId?: string | undefined;
+        prReviewGithubClientSecret?: string | undefined;
+        prReviewGithubAppSlug?: string | undefined;
+        prReviewGithubWebhookSecret?: string | undefined;
+        prReviewGithubAppPrivateKey?: string | undefined;
+        betterAuthSecret?: string | undefined;
+        betterAuthAllowedHosts: string;
+        betterAuthCookieDomain?: string | undefined;
+        betterAuthTrustedOrigins: string;
+        managedAuthGoogleClientId?: string | undefined;
+        managedAuthGoogleClientSecret?: string | undefined;
+        managedAuthGithubClientId?: string | undefined;
+        managedAuthGithubClientSecret?: string | undefined;
+        allowedUserEmails?: string[] | undefined;
+        managedAuthSessionSetMode: "broker" | "dual" | "legacy";
+        nativeAppSchemes: string[];
+        nativeAppIds: string[];
+        apnsKeyId?: string | undefined;
+        apnsTeamId?: string | undefined;
+        apnsPrivateKey?: string | undefined;
+        fcmServiceAccountJson?: string | undefined;
+        managedAuthNewSignupsEnabled: boolean;
+        managedAuthRequireEmailVerification?: boolean | undefined;
+        organizationUserSetupEmailTokenTransport: "fragment" | "query";
+        organizationUserSetupQueryEdgeSanitizationConfirmed: boolean;
+        managedEmailDelivery: "disabled" | "resend";
+        resendApiKey?: string | undefined;
+        emailFrom: string;
+        stripeSecretKey?: string | undefined;
+        stripePublishableKey?: string | undefined;
+        stripeWebhookSecret?: string | undefined;
+        stripeCreditsProductId?: string | undefined;
+        mcpServers: {
+            id: string;
+            name?: string | undefined;
+            url: string;
+            allowedTools?: string[] | undefined;
+            timeoutMs?: number | undefined;
+            setupTimeoutMs?: number | undefined;
+            cacheToolsList: boolean;
+            requireApproval?: boolean | string[] | undefined;
+            headers?: Record<string, string> | undefined;
+            connectionRef?: {
+                connectionId?: string | undefined;
+                accountSelection?: "all_eligible" | undefined;
+                authoritySource?: "host" | undefined;
+                hostBinding?: {
+                    bindingId: string;
+                    generation: number;
+                } | {
+                    selection: "accepted_turn";
+                } | undefined;
+                provider?: string | undefined;
+                providerDomain: string;
+                kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                scopes?: string[] | undefined;
+                resource?: string | undefined;
+                selectedResources?: {
+                    id: string;
+                    kind: "repository";
+                }[] | undefined;
+                subjectScope?: "subject" | "workspace" | undefined;
+            } | undefined;
+            operationRecovery?: Record<string, {
+                observerTool: string;
+            }> | undefined;
+        }[];
+    };
+}>;
+/** Shared with scheduled work; reasons describe the actual admission gate. */
+export declare function goalRunBudgetBlocked(services: Parameters<typeof agentRunAdmissionDenial>[0], input: Omit<Parameters<typeof agentRunAdmissionDenial>[1], "requestedAgentRuns">): Promise<GoalAdmissionBlock | null>;
+/**
+ * Per-task usage limit gate for goal continuation and resume. A
+ * reached root limit blocks with its own reason; raising or clearing the limit
+ * never resumes a goal by itself. A read failure throws (never unlimited).
+ */
+export declare function goalSessionUsageLimitBlocked(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+}): Promise<GoalAdmissionBlock | null>;
+export declare class GoalResumeBlockedError extends Error {
+    readonly pausedReason: GoalAdmissionPausedReason;
+    constructor(pausedReason: GoalAdmissionPausedReason, message: string);
+}
+/** Called under the goal transition's locks, before counters, events or wakes change. */
+export declare function assertGoalResumeAllowed(services: Parameters<typeof agentRunAdmissionDenial>[0] & {
+    catalogSourceSettings?: Settings;
+}, session: Pick<Session, "accountId" | "workspaceId" | "model" | "codexCompactionMode"> & Partial<Pick<Session, "latencyMode" | "id">>, causalTurn: {
+    initiatingHumanSubjectId: string | null;
+} | null): Promise<void>;

package/dist/host-session-usage-limit.d.ts

@@ -0,0 +1,15 @@
+/**
+ * A task usage limit the trusted server applies to a root session it creates
+ * in this process, as the host actor `subjectId`. Published Site agents use
+ * it: site-runtime creates each conversation as `site:<siteId>` through an
+ * in-process dispatch, and the per-conversation budget must be in place in the
+ * create transaction, before the first model call. Only code in this process
+ * can set it; a request cannot.
+ */
+export type HostSessionUsageLimit = {
+    /** The service principal the session is created as; other callers are ignored. */
+    subjectId: string;
+    limitMicros: number;
+};
+export declare function withHostSessionUsageLimit<T>(limit: HostSessionUsageLimit, run: () => T): T;
+export declare function currentHostSessionUsageLimit(): HostSessionUsageLimit | undefined;