@opengeni/worker-bundle 1.0.2 → 1.2.0

package/dist/{chunk-LJX7Z2KP.js → chunk-JKMG5ZHH.js}

@@ -1,6 +1,6 @@
 import {
   observabilityEventBusOptions
-} from "./chunk-3ZTRWDMN.js";
+} from "./chunk-XONQEVAD.js";
 
 // src/activity-services.ts
 import {
@@ -1235,109 +1235,25 @@ function createDocumentActivities(services, resolveDocumentServices) {
 // src/activities/goals.ts
 import {
   allowedFirstPartyMcpToolsForSession,
-  configuredStaticUsageLimits as configuredStaticUsageLimits2,
-  isModelAvailableForNewSelection,
-  policyProviderIdForModel,
-  resolveModelProvider,
-  resolveTurnExecutionPolicyV1,
-  withCodexCatalogProvider,
-  withXaiSubscriptionCatalogProvider,
-  WORKSPACE_GATEWAY_MODEL_ID_PREFIX,
-  WORKSPACE_OPENROUTER_MODEL_ID_PREFIX
+  resolveTurnExecutionPolicyV1
 } from "@opengeni/config";
 import {
-  evaluateWorkspaceModelPolicy,
   mergeToolRefs,
   readTurnExecutionPolicyV1 as readTurnExecutionPolicyV12
 } from "@opengeni/contracts";
-import { isCodexBilledModel } from "@opengeni/codex";
 import {
   enqueueSessionWorkflowWakeIfRunnable,
-  getWorkspaceModelPolicy,
   getSessionGoal,
   getSessionTurn,
   materializeGoalContinuation,
   requireSession
 } from "@opengeni/db";
 import {
-  modelFundingForAdmission as modelFundingForAdmission2,
-  resolveCatalogSettings as resolveCatalogSettings2,
-  resolveWorkspaceCatalogSettings
+  modelFundingForAdmission,
+  goalRunBudgetBlocked,
+  resolveGoalModelAdmission
 } from "@opengeni/core";
-
-// src/activities/agent-run-admission.ts
-import { configuredStaticUsageLimits } from "@opengeni/config";
-import { modelFundingForAdmission } from "@opengeni/core";
-import {
-  checkWorkspaceAllowance,
-  getBillingBalance,
-  isCodexBilledTurn,
-  sumUsageQuantity
-} from "@opengeni/db";
-async function agentRunAdmissionDenial(services, input) {
-  const codexBilled = await isCodexBilledTurn({
-    db: services.db,
-    settings: services.settings,
-    workspaceId: input.workspaceId,
-    model: input.model
-  });
-  const externallyBilled = modelFundingForAdmission(
-    services.settings,
-    input.model,
-    codexBilled
-  ).fundedWithoutCredits;
-  if (!externallyBilled && (services.settings.billingMode === "stripe" || services.settings.usageLimitsMode === "managed")) {
-    if (services.entitlements) {
-      const decision = await services.entitlements.admitRun({
-        accountId: input.accountId,
-        workspaceId: input.workspaceId,
-        action: "agent_run:create",
-        quantity: input.requestedAgentRuns
-      });
-      if (!decision.allowed) return "insufficient_credits";
-    } else {
-      const balance = await getBillingBalance(services.db, input.accountId);
-      if (balance.balanceMicros <= 0) return "insufficient_credits";
-    }
-  }
-  if (!externallyBilled) {
-    const refusal = await checkWorkspaceAllowance(services.db, {
-      accountId: input.accountId,
-      workspaceId: input.workspaceId,
-      subjectId: input.initiatingHumanSubjectId ?? null
-    });
-    if (refusal) return refusal.code;
-  }
-  if (services.settings.usageLimitsMode !== "static" && services.settings.usageLimitsMode !== "managed") {
-    return null;
-  }
-  const limits = configuredStaticUsageLimits(services.settings);
-  if (!externallyBilled && limits.maxMonthlyCostMicrosPerAccount) {
-    const used = await sumUsageQuantity(services.db, {
-      accountId: input.accountId,
-      eventType: "model.cost",
-      since: startOfUtcMonth()
-    });
-    if (used >= limits.maxMonthlyCostMicrosPerAccount) {
-      return "monthly_model_cost_limit";
-    }
-  }
-  if (limits.maxMonthlyAgentRunsPerWorkspace) {
-    const used = await sumUsageQuantity(services.db, {
-      workspaceId: input.workspaceId,
-      eventType: "agent_run.created",
-      since: startOfUtcMonth()
-    });
-    if (used + input.requestedAgentRuns > limits.maxMonthlyAgentRunsPerWorkspace) {
-      return "monthly_agent_run_limit";
-    }
-  }
-  return null;
-}
-function startOfUtcMonth() {
-  const now = /* @__PURE__ */ new Date();
-  return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1));
-}
+import { goalContinuationModelDecision, goalRunBudgetBlocked as goalRunBudgetBlocked2 } from "@opengeni/core";
 
 // src/activities/agent-turn/credential-restriction.ts
 import { readTurnExecutionPolicyV1 } from "@opengeni/contracts";
@@ -1373,29 +1289,18 @@ function createGoalActivities(services) {
     if (session.status === "failed" || session.status === "cancelled") {
       return { action: "none" };
     }
-    let settings = (await resolveCatalogSettings2(db, catalogSourceSettings)).settings;
-    const inheritedContinuationModel = session.model;
-    let continuationModel = inheritedContinuationModel;
+    const modelDecision = await resolveGoalModelAdmission(db, catalogSourceSettings, {
+      accountId: input.accountId,
+      workspaceId: input.workspaceId,
+      model: session.model,
+      codexCompactionMode: session.codexCompactionMode,
+      latencyMode: session.latencyMode
+    });
+    const settings = modelDecision.settings;
+    const continuationModel = modelDecision.model;
     const continuationReasoningEffort = session.reasoningEffort;
     const continuationLatencyMode = session.latencyMode;
-    const workspaceModelPolicy = await getWorkspaceModelPolicy(db, input.workspaceId);
-    if (inheritedContinuationModel.startsWith(WORKSPACE_GATEWAY_MODEL_ID_PREFIX) || inheritedContinuationModel.startsWith(WORKSPACE_OPENROUTER_MODEL_ID_PREFIX) || session.model.startsWith(WORKSPACE_GATEWAY_MODEL_ID_PREFIX) || session.model.startsWith(WORKSPACE_OPENROUTER_MODEL_ID_PREFIX)) {
-      settings = (await resolveWorkspaceCatalogSettings(db, catalogSourceSettings, {
-        accountId: input.accountId,
-        workspaceId: input.workspaceId,
-        retainedProductModelIds: [inheritedContinuationModel, session.model]
-      })).settings;
-    }
-    const modelDecision = goalContinuationModelDecision({
-      settings,
-      workspaceModelPolicy,
-      inheritedModel: inheritedContinuationModel
-    });
-    continuationModel = modelDecision.model;
-    let modelPolicyBlocked = modelDecision.blocked;
-    if (!modelPolicyBlocked && session.codexCompactionMode === "remote_v2" && !isCodexBilledModel(continuationModel)) {
-      modelPolicyBlocked = `session is locked to Codex remote compaction v2; model "${continuationModel}" is not a Codex subscription model`;
-    }
+    const modelPolicyBlocked = modelDecision.blocked;
     const turnExecutionPolicy = modelPolicyBlocked ? void 0 : resolveTurnExecutionPolicyV1(settings, {
       modelId: continuationModel,
       requestedModelId: null,
@@ -1450,9 +1355,10 @@ function createGoalActivities(services) {
             initiatingHumanSubjectId: causalTurn?.initiatingHumanSubjectId ?? null
           }
         );
+        const pausedReason = modelPolicyBlocked ? modelDecision.pausedReason : budgetBlocked?.pausedReason;
         return {
           budgetBlocked: modelPolicyBlocked ?? budgetBlocked?.message ?? null,
-          budgetPausedReason: modelPolicyBlocked ? "limits" : budgetBlocked?.pausedReason ?? "limits"
+          ...pausedReason ? { budgetPausedReason: pausedReason } : {}
         };
       },
       policy: continuationPolicy,
@@ -1483,34 +1389,6 @@ function createGoalActivities(services) {
     maybeContinueGoal
   };
 }
-function goalContinuationModelDecision(input) {
-  const catalogSettings = input.settings.supergrokSubscriptionEnabled ? withXaiSubscriptionCatalogProvider(
-    input.settings.codexSubscriptionEnabled ? withCodexCatalogProvider(input.settings) : input.settings
-  ) : input.settings.codexSubscriptionEnabled ? withCodexCatalogProvider(input.settings) : input.settings;
-  const policyBlocks = (modelId) => input.workspaceModelPolicy !== null && !evaluateWorkspaceModelPolicy(input.workspaceModelPolicy, {
-    providerId: policyProviderIdForModel(catalogSettings, modelId),
-    modelId
-  }).allowed;
-  if (!resolveModelProvider(catalogSettings, input.inheritedModel)) {
-    return {
-      model: input.inheritedModel,
-      blocked: `model "${input.inheritedModel}" is no longer in the deployment or workspace catalog; choose an available model before resuming the goal`
-    };
-  }
-  if (!isModelAvailableForNewSelection(catalogSettings, input.inheritedModel)) {
-    return {
-      model: input.inheritedModel,
-      blocked: `model "${input.inheritedModel}" is retired from new selection; choose an available model before resuming the goal`
-    };
-  }
-  if (!policyBlocks(input.inheritedModel)) {
-    return { model: input.inheritedModel, blocked: null };
-  }
-  return {
-    model: input.inheritedModel,
-    blocked: `workspace model policy blocks model "${input.inheritedModel}"; pick an allowed model or change the workspace model policy`
-  };
-}
 function goalContinuationPrompt(_goal, _autoContinuation, _cap, options = {}) {
   const waitingGuidance = options.inputWaitAvailable ? [
     "Waiting on child sessions, background commands, or external events:",
@@ -1587,20 +1465,6 @@ function withFirstPartyTools(settings, tools) {
   }
   return mergeToolRefs(tools, [{ kind: "mcp", id: "opengeni" }]);
 }
-async function goalRunBudgetBlocked(services, input) {
-  const denial = await agentRunAdmissionDenial(services, { ...input, requestedAgentRuns: 1 });
-  if (denial === null) return null;
-  if (denial === "allowance_exhausted") {
-    return { pausedReason: "allowance", message: "Opengeni usage allowance exhausted" };
-  }
-  const limits = configuredStaticUsageLimits2(services.settings);
-  const messages = {
-    insufficient_credits: "insufficient Opengeni credits",
-    monthly_model_cost_limit: `monthly model cost limit reached (${limits.maxMonthlyCostMicrosPerAccount} micros)`,
-    monthly_agent_run_limit: `monthly agent run limit reached (${limits.maxMonthlyAgentRunsPerWorkspace})`
-  };
-  return { pausedReason: "limits", message: messages[denial] };
-}
 
 // src/activities/knowledge-source-sync.ts
 import {
@@ -9222,6 +9086,7 @@ import {
   safeDatabaseErrorFacts,
   isRetryableDatabaseTransportFailure,
   isSessionEventPersistenceError,
+  DatabaseTransactionError,
   SandboxLeaseTransitionError as SandboxLeaseTransitionError3
 } from "@opengeni/db";
 import {
@@ -9903,6 +9768,10 @@ var PROVIDER_BACKPRESSURE_DELAY_MS = 6e4;
 var PROVIDER_CONNECTIVITY_BACKOFF_MS = [2e3, 5e3, 15e3, 3e4, 6e4];
 var MAX_AUTOMATIC_PROVIDER_RECOVERIES = PROVIDER_CONNECTIVITY_BACKOFF_MS.length;
 var PROVIDER_RATE_LIMIT_BACKOFF_MS = [1e4, 2e4, 4e4, 6e4, 12e4];
+function providerRecoveryJitterMs(delayMs, sample) {
+  const bounded = Number.isFinite(sample) ? Math.max(0, Math.min(sample, 1)) : 0;
+  return Math.floor(Math.min(5e3, delayMs * 0.2) * bounded);
+}
 var POST_COMPACTION_CONTINUATION_EMPTY_CODE = "post_compaction_continuation_empty";
 var PostCompactionContinuationEmptyError = class extends Error {
   code = POST_COMPACTION_CONTINUATION_EMPTY_CODE;
@@ -9935,7 +9804,7 @@ function providerRecoveryResult(input) {
   ) : PROVIDER_BACKPRESSURE_DELAY_MS;
   return {
     status: "recovering",
-    continueDelayMs
+    continueDelayMs: continueDelayMs + (input.failureCode === "provider_rate_limited" || input.failureCode === "provider_unavailable" || input.failureCode === "upstream_connectivity_unavailable" ? providerRecoveryJitterMs(continueDelayMs, input.jitterSample ?? 0) : 0)
   };
 }
 function providerRecoveryExhaustedFailure(failure, recovery) {
@@ -10064,6 +9933,11 @@ function retryableDatabaseFailureCode(error, requireDatabaseProvenance = false)
     const boundaries = /* @__PURE__ */ new Set();
     const ownDatabaseNodes = /* @__PURE__ */ new Set();
     const codes = /* @__PURE__ */ new Set();
+    const ownChildren = (node) => node instanceof DatabaseTransactionError ? (
+      // Callback failures retained beside a failed rollback supply vetoes,
+      // never driver provenance for a provider's connection-looking error.
+      [...graph.get(node)].filter((child) => child === node.cause)
+    ) : [...graph.get(node)];
     for (const node of graph.keys()) {
       if (isRoutingMutationOutcomeUnknownError(node)) return null;
       const record = node;
@@ -10072,12 +9946,12 @@ function retryableDatabaseFailureCode(error, requireDatabaseProvenance = false)
       const sqlState = isSessionEventPersistenceError(node) ? node.details.sqlState : record.name === "PostgresError" && typeof record.code === "string" ? record.code : null;
       if (requireDatabaseProvenance ? isRunningTurnDatabaseConnectionSqlState(sqlState) : isDatabaseConnectionSqlState(sqlState))
         transports.add(node);
-      if (node instanceof DrizzleQueryError || isSessionEventPersistenceError(node)) {
+      if (node instanceof DrizzleQueryError || node instanceof DatabaseTransactionError || isSessionEventPersistenceError(node)) {
         const queue = [node];
         for (const source of queue) {
           if (ownDatabaseNodes.has(source)) continue;
           ownDatabaseNodes.add(source);
-          queue.push(...graph.get(source));
+          queue.push(...ownChildren(source));
         }
       }
     }
@@ -10088,13 +9962,13 @@ function retryableDatabaseFailureCode(error, requireDatabaseProvenance = false)
         if (seen.has(node)) continue;
         seen.add(node);
         if (transports.has(node)) return true;
-        queue.push(...graph.get(node));
+        queue.push(...ownChildren(node));
       }
       return false;
     };
     for (const node of graph.keys()) {
       const record = node;
-      if (node instanceof DrizzleQueryError) {
+      if (node instanceof DrizzleQueryError || node instanceof DatabaseTransactionError) {
         boundaries.add(node);
         if (hasOwnTransport(node)) codes.add("db_failure");
       }
@@ -10118,6 +9992,12 @@ function retryableDatabaseFailureCode(error, requireDatabaseProvenance = false)
   }
 }
 var RUNNING_TURN_DATABASE_TRANSPORT_CODES = /* @__PURE__ */ new Set([
+  // postgres.js reports these for a physically lost connection, including
+  // transaction cleanup after its socket has already closed. Own-client
+  // provenance and the unknown-outcome veto remain mandatory above.
+  "CONNECTION_CLOSED",
+  "CONNECTION_DESTROYED",
+  "CONNECTION_ENDED",
   "ECONNREFUSED",
   "ECONNRESET",
   "CONNECT_TIMEOUT"
@@ -10402,14 +10282,25 @@ function providerSafetyRefusalDiagnostic(error) {
 function isProviderSafetyRefusal(error) {
   return providerSafetyRefusalDiagnostic(error) !== void 0;
 }
+function providerHttpStatus(error) {
+  let current = error;
+  const seen = /* @__PURE__ */ new Set();
+  for (let depth = 0; depth < 6 && current && typeof current === "object"; depth += 1) {
+    if (seen.has(current)) break;
+    seen.add(current);
+    const value = current;
+    const status = Number(value.status ?? value.statusCode);
+    if (Number.isInteger(status) && status >= 100 && status < 600) return status;
+    current = value.cause;
+  }
+  return void 0;
+}
 function isTransientProviderError(error) {
   if (error instanceof ResponsesStreamingTerminalError) {
     return error.category === "unavailable";
   }
   if (isProviderSafetyRefusal(error)) return false;
-  const status = typeof error === "object" && error !== null ? Number(
-    error.status ?? error.statusCode
-  ) : void 0;
+  const status = providerHttpStatus(error);
   if (status !== void 0 && Number.isFinite(status)) {
     return status >= 500 && status < 600;
   }
@@ -10592,9 +10483,7 @@ function baseAgentRunFailurePayload(error, options = {}) {
     };
   }
   const message = error instanceof Error ? error.message : String(error);
-  const status = typeof error === "object" && error !== null ? Number(
-    error.status ?? error.statusCode
-  ) : void 0;
+  const status = providerHttpStatus(error);
   const code = typeof error === "object" && error !== null && "code" in error ? String(error.code) : void 0;
   if (error instanceof ActiveSessionHistoryLimitExceededError) {
     return {
@@ -10928,7 +10817,6 @@ export {
   signalPendingCodexCapacityWakeTargets,
   armAndReconcileCodexCapacityWait,
   createCodexCapacityActivities,
-  agentRunAdmissionDenial,
   createDocumentActivities,
   turnCredentialRestriction,
   createGoalActivities,
@@ -11037,4 +10925,4 @@ export {
   CODEX_USAGE_LIMIT_MAX_RESUME_MS,
   classifyClaudeCredentialFailure
 };
-//# sourceMappingURL=chunk-LJX7Z2KP.js.map
+//# sourceMappingURL=chunk-JKMG5ZHH.js.map