@opengeni/worker-bundle 0.28.4-canary.0 → 0.28.4-canary.2

package/dist/{activities-turn-ZJBY3W5D.js → activities-turn-5MZZ6HQA.js}

@@ -86,7 +86,7 @@ import {
   withFirstPartyTools,
   wrapLazyTurnBoxWithRouting,
   wrapTurnBoxWithRouting
-} from "./chunk-ZNIKZQMN.js";
+} from "./chunk-OA5CSY5N.js";
 import {
   StreamTimingMetrics,
   makeMachineOpObserver,
@@ -9769,7 +9769,7 @@ import {
   CodexCredentialLeaseAttemptFencedError,
   CodexCredentialFailoverExhaustedError,
   CODEX_CREDENTIAL_LEASE_TTL_MS as CODEX_CREDENTIAL_LEASE_TTL_MS2,
-  recordSessionActiveCodexCredential,
+  recordSessionCodexSelectionForTurnAttempt,
   setSessionCodexPinInTransaction,
   settleCodexCredentialFailover as settleCodexCredentialFailover2,
   withSessionCodexCapacityMutation
@@ -10138,8 +10138,33 @@ async function selectCodexTurnCapacity(deps) {
       leases.codex.confirmedUntilMs = leased.leasedUntil && leaseAcquisitionStartedAtMs !== null ? leaseAcquisitionStartedAtMs + CODEX_CREDENTIAL_LEASE_TTL_MS2 : null;
       leases.codex.held = providerTurn.effectiveCodexCredentialId !== null && leased.holderId !== null && leased.generation !== null && leases.codex.confirmedUntilMs !== null;
       if (leases.codex.held) leases.codex.startHeartbeat();
+      const eligibleCount = leased.accounts.filter(
+        (account) => isCodexCredentialEligible(account, /* @__PURE__ */ new Date())
+      ).length;
+      const selectionReceipt = providerTurn.effectiveCodexCredentialId ? await recordSessionCodexSelectionForTurnAttempt(db, {
+        workspaceId: input.workspaceId,
+        sessionId: input.sessionId,
+        turnId,
+        attemptId: input.attemptId,
+        executionGeneration: attempt.executionGeneration,
+        credentialId: providerTurn.effectiveCodexCredentialId,
+        strategy: leased.rotationStrategy,
+        reusedLease: leased.reused,
+        pinnedCredentialId: sessionPin,
+        pinSource: sessionPinSource,
+        eligibleCount,
+        connectedCount: leased.accounts.length
+      }) : null;
+      if (selectionReceipt)
+        await publishDurableSessionEvents5(
+          bus,
+          input.workspaceId,
+          input.sessionId,
+          selectionReceipt.events
+        );
+      const selectionDiagnostics = selectionReceipt?.diagnostics ?? null;
       const actualOutcome = providerTurn.effectiveCodexCredentialId ? "selected" : rotationDecision.kind === "allCapped" || rotationDecision.kind === "allocatorDisabled" ? "waiting" : "none";
-      const actualReason = providerTurn.effectiveCodexCredentialId ? leased.reused ? "lease_reused" : sessionPin === providerTurn.effectiveCodexCredentialId ? "pin" : rotationDecision.kind === "active" && rotationDecision.moved ? "rotation" : "active" : rotationDecision.kind === "allCapped" ? "all_capped" : rotationDecision.kind === "allocatorDisabled" ? "allocator_disabled" : "none";
+      const actualReason = selectionDiagnostics ? selectionDiagnostics.reason : rotationDecision.kind === "allCapped" ? "all_capped" : rotationDecision.kind === "allocatorDisabled" ? "allocator_disabled" : "none";
       const fencedInFlight = leased.reused;
       const shadowResult = await publishCodexFleetShadowDecisionV1({
         enabled: settings.codexFleetPolicyShadowEnabled,
@@ -10190,9 +10215,6 @@ async function selectCodexTurnCapacity(deps) {
           payloadBytes: shadowResult.payloadBytes
         });
       }
-      const eligibleCount = leased.accounts.filter(
-        (account) => isCodexCredentialEligible(account, /* @__PURE__ */ new Date())
-      ).length;
       const poolDepth = eligibleCount === 0 ? "zero" : eligibleCount === 1 ? "one" : "many";
       observability.incrementCounter({
         name: "opengeni_codex_pool_observations_total",
@@ -10464,27 +10486,7 @@ async function selectCodexTurnCapacity(deps) {
         return { exit: claimedResult({ status: "cancelled" }) };
       }
       if (providerTurn.effectiveCodexCredentialId) {
-        const priorAccountId = lockedSessionCodexState.lastCredentialId;
-        if (priorAccountId !== providerTurn.effectiveCodexCredentialId) {
-          await recordSessionActiveCodexCredential(
-            db,
-            input.workspaceId,
-            input.sessionId,
-            providerTurn.effectiveCodexCredentialId
-          );
-          const rotated = rotationDecision.kind === "active" && rotationDecision.moved;
-          await eventing.publish([
-            {
-              type: "codex.account.switched",
-              payload: {
-                fromAccountId: priorAccountId,
-                toAccountId: providerTurn.effectiveCodexCredentialId,
-                reason: rotated ? "rotation" : "manual"
-              }
-            }
-          ]);
-        }
-        const selectionReason = leased.reused ? "lease_reused" : sessionPin === providerTurn.effectiveCodexCredentialId ? "pin" : rotationDecision.kind === "active" && rotationDecision.moved ? "rotation" : "active";
+        const selectionReason = selectionDiagnostics.reason;
         observability.incrementCounter({
           name: "opengeni_codex_credential_selections_total",
           help: "Codex credential selections by strategy and reason.",
@@ -10494,19 +10496,6 @@ async function selectCodexTurnCapacity(deps) {
             reason: selectionReason
           }
         });
-        await eventing.publish([
-          {
-            type: "codex.credential.selected",
-            payload: {
-              credentialId: providerTurn.effectiveCodexCredentialId,
-              strategy: leased.rotationStrategy,
-              reason: selectionReason,
-              eligibleCount,
-              connectedCount: leased.accounts.length,
-              reused: leased.reused
-            }
-          }
-        ]);
       }
     } catch (error51) {
       credentialSelectionOutcome = "failed";
@@ -12527,6 +12516,7 @@ async function establishTurnSandbox(deps) {
             },
             operationResourcePolicySupported: liveMachineEnrollment?.agentCapabilities.operationResourcePolicy === true,
             operationCpuQuotaSupported: liveMachineEnrollment?.agentCapabilities.operationCpuQuota === true,
+            transactionalFsWriteSupported: liveMachineEnrollment?.agentCapabilities.transactionalFsWrite === true,
             ...activeSandboxRecord.scope === "user" && fileAuthoritySubjectId ? {
               personalMachineAttempt: {
                 accountId: input.accountId,
@@ -31150,14 +31140,13 @@ function createSkillReadAttemptToolDefinition(input) {
 
 // src/activities/agent-turn/skill-search.ts
 import { PublicSkillSearchError } from "@opengeni/core";
-import { listSkillLibraryEntries } from "@opengeni/runtime/skill-library";
 function createSkillSearchAttemptToolDefinition(input) {
   return {
     identity: { serverId: "opengeni", toolName: "skill_search" },
     modelName: "skill_search",
     codemodePath: ["opengeni", "skill_search"],
     title: "Search Skills",
-    description: "Find installed workspace Skills or available curated and public Skills. Returns identifiers and install sources, not file contents. Search never installs or starts a sandbox. Scope defaults to all; use installed to avoid external search.",
+    description: "Find installed workspace Skills or available public Skills. Returns identifiers and install sources, not file contents. Search never installs or starts a sandbox. Scope defaults to all; use installed to avoid external search.",
     inputSchema: {
       type: "object",
       properties: {
@@ -31191,13 +31180,6 @@ ${entry.description}`.toLowerCase().includes(searchText);
         source: entry.source ?? "workspace",
         installed: !entry.source || entry.source === "workspace"
       }));
-      const libraryHits = scope === "installed" ? [] : listSkillLibraryEntries().filter(matches).slice(0, limit).map((entry) => ({
-        id: `library:${entry.id}`,
-        name: entry.name,
-        description: entry.description,
-        source: "library",
-        libraryId: entry.id
-      }));
       let publicResult = null;
       let publicError = null;
       if (scope !== "installed") {
@@ -31214,7 +31196,8 @@ ${entry.description}`.toLowerCase().includes(searchText);
       }
       const output = {
         workspace: workspaceHits,
-        library: libraryHits,
+        library: [],
+        // Retained response field for older clients.
         public: publicResult?.items.map((entry) => ({ ...entry })) ?? [],
         // A provider outage is not an empty search. Keep local results useful
         // and expose partial failure explicitly, without leaking network details.
@@ -36944,4 +36927,4 @@ export {
   createTurnActivities,
   createTurnActivitiesFromServices
 };
-//# sourceMappingURL=activities-turn-ZJBY3W5D.js.map
+//# sourceMappingURL=activities-turn-5MZZ6HQA.js.map