@opengeni/worker-bundle 1.2.1-canary.37222965366001 → 1.4.0

package/dist/{chunk-JKMG5ZHH.js → chunk-BMTWULF7.js}

@@ -1,10 +1,11 @@
 import {
   observabilityEventBusOptions
-} from "./chunk-XONQEVAD.js";
+} from "./chunk-FF4HPY7L.js";
 
 // src/activity-services.ts
 import {
   codeSearchDeploymentPolicy,
+  resolveWebSearchProvider,
   dbSearchPath,
   getSettings,
   resolveNatsControlPlaneAuth
@@ -413,6 +414,12 @@ function createSharedActivityServices(dependencies) {
       const resolvedSettings = (await resolveCatalogSettings(db, settings)).settings;
       configureChildLifecycleNotices({ enabled: settings.childLifecycleNoticesEnabled });
       configureCodeSearchDeploymentPolicy(codeSearchDeploymentPolicy(settings));
+      const webSearchProvider = resolveWebSearchProvider(settings);
+      if (webSearchProvider.status === "invalid") {
+        observability.warn("web search provider is misconfigured; web_search stays off", {
+          reason: webSearchProvider.reason
+        });
+      }
       return {
         settings: resolvedSettings,
         catalogSourceSettings: settings,
@@ -4990,7 +4997,8 @@ import {
   readLease as readLease2,
   readActiveSandbox,
   resolvePersonalMachineConnectionForAttempt,
-  SandboxRetainedProcessPromotionFencedError
+  SandboxRetainedProcessPromotionFencedError,
+  SandboxWorkspaceMutationOutputRejectedError
 } from "@opengeni/db";
 import {
   observeSessionBackgroundCommandCompletion,
@@ -5008,6 +5016,7 @@ import {
   NatsOpStreamTransport,
   RoutingBackendRecoveryRequiredError,
   RoutingSandboxSession,
+  RoutingMutationOutputRejectedError,
   resolveModalCheckpointProviderBindingForSession as resolveModalCheckpointProviderBindingForSession2,
   resolveConnectedMachineWorkspaceRoot,
   sandboxProviderInstanceIdFromEnvelope,
@@ -6655,21 +6664,34 @@ function afterPersistableHomeMutation(services, ids, home) {
     }
     if (outcome === "outcome_unknown")
       throw new Error("Outcome-unknown command settlement requires its exact retained invocation");
-    await verifyWorkspaceMutationSettlement(services.db, {
-      accountId: fence.accountId,
-      workspaceId: ids.workspaceId,
-      sessionId: ids.sessionId,
-      turnId: fence.turnId,
-      executionGeneration: fence.executionGeneration,
-      attemptId: fence.attemptId,
-      holderId: sandboxLeaseHolderIdForAttempt(fence.attemptId),
-      sandboxGroupId: home.sandboxGroupId,
-      expectedEpoch: backend.leaseEpoch,
-      expectedInstanceId: backend.providerInstanceId,
-      admission: exactAdmission,
-      operation: op,
-      outcome
-    });
+    try {
+      await verifyWorkspaceMutationSettlement(services.db, {
+        accountId: fence.accountId,
+        workspaceId: ids.workspaceId,
+        sessionId: ids.sessionId,
+        turnId: fence.turnId,
+        executionGeneration: fence.executionGeneration,
+        attemptId: fence.attemptId,
+        holderId: sandboxLeaseHolderIdForAttempt(fence.attemptId),
+        sandboxGroupId: home.sandboxGroupId,
+        expectedEpoch: backend.leaseEpoch,
+        expectedInstanceId: backend.providerInstanceId,
+        admission: exactAdmission,
+        operation: op,
+        outcome
+      });
+    } catch (error) {
+      if (error instanceof SandboxWorkspaceMutationOutputRejectedError && error.matchesPhysicalSettlement({
+        accountId: fence.accountId,
+        workspaceId: ids.workspaceId,
+        admission: exactAdmission,
+        operation: op,
+        outcome
+      })) {
+        throw new RoutingMutationOutputRejectedError(op, error.code, { cause: error });
+      }
+      throw error;
+    }
   };
 }
 function beforeRetainedProcessMutation(services, ids) {
@@ -6692,15 +6714,28 @@ function afterRetainedProcessMutation(services, ids) {
     if (!admission || typeof admission !== "object" || typeof admission.id !== "string" || typeof admission.workspaceGeneration !== "number") {
       throw new Error("Retained-process mutation settlement lacked its exact admission");
     }
-    await verifyRetainedProcessMutationSettlement(services.db, {
-      accountId: fence.accountId,
-      workspaceId: ids.workspaceId,
-      sessionId: ids.sessionId,
-      processId: process2.id,
-      admission,
-      operation: op,
-      outcome
-    });
+    try {
+      await verifyRetainedProcessMutationSettlement(services.db, {
+        accountId: fence.accountId,
+        workspaceId: ids.workspaceId,
+        sessionId: ids.sessionId,
+        processId: process2.id,
+        admission,
+        operation: op,
+        outcome
+      });
+    } catch (error) {
+      if (error instanceof SandboxWorkspaceMutationOutputRejectedError && error.matchesPhysicalSettlement({
+        accountId: fence.accountId,
+        workspaceId: ids.workspaceId,
+        admission,
+        operation: op,
+        outcome
+      })) {
+        throw new RoutingMutationOutputRejectedError(op, error.code, { cause: error });
+      }
+      throw error;
+    }
   };
 }
 function captureConnectedCommandOutput(db, ids, bus) {
@@ -9101,8 +9136,12 @@ import {
   isModalTaskExecStartPreDispatchUnavailableError,
   isModalCommandStartOutcomeUnknownError,
   isProviderCommandObservationUnavailableError,
+  ProviderCommandInputOutcomeUnknownError,
+  ProviderCommandStartOutcomeUnknownError,
   isRoutingMutationOutcomeUnknownError,
+  isRoutingMutationOutputRejectedError,
   RoutingWorkspaceRootChangedError,
+  RoutingBackendRecoveryRequiredError as RoutingBackendRecoveryRequiredError2,
   ResponsesStreamingTerminalError,
   SandboxMaterializationVerificationError,
   materializationVerificationDiagnostic,
@@ -9424,6 +9463,7 @@ async function turnInput(db, runtime, agent, trigger, options) {
     options.unavailableSandboxFilesNote,
     options.runCredentialsNote,
     options.mcpAvailabilityNote,
+    options.codemodeContinuationNote,
     options.knowledgeSourcePreparationNote
   );
   if (trigger.type === "user.message") {
@@ -9497,7 +9537,7 @@ async function openSuffixMessageInput(db, runtime, agent, trigger, internalConte
     trigger.sessionId,
     options.turnId
   );
-  if (suffixRows.length === 0) {
+  if (suffixRows.length === 0 && !options.programmaticApprovalAcknowledged) {
     throw new Error("Open suffix resume has no interruption rows");
   }
   if (suffixRows.some((row) => row.resultItem == null)) {
@@ -9899,7 +9939,7 @@ function preClaimAdmissionFailure(error) {
     details: [detail]
   });
 }
-function databaseRecoveryCauseGraph(error) {
+function structuredRecoveryCauseGraph(error) {
   const graph = /* @__PURE__ */ new Map();
   const queue = [];
   let links = 0;
@@ -9927,7 +9967,7 @@ function databaseRecoveryCauseGraph(error) {
 }
 function retryableDatabaseFailureCode(error, requireDatabaseProvenance = false) {
   try {
-    const graph = databaseRecoveryCauseGraph(error);
+    const graph = structuredRecoveryCauseGraph(error);
     if (!graph) return null;
     const transports = /* @__PURE__ */ new Set();
     const boundaries = /* @__PURE__ */ new Set();
@@ -9939,7 +9979,8 @@ function retryableDatabaseFailureCode(error, requireDatabaseProvenance = false)
       [...graph.get(node)].filter((child) => child === node.cause)
     ) : [...graph.get(node)];
     for (const node of graph.keys()) {
-      if (isRoutingMutationOutcomeUnknownError(node)) return null;
+      if (isRoutingMutationOutcomeUnknownError(node) || isRoutingMutationOutputRejectedError(node))
+        return null;
       const record = node;
       if (requireDatabaseProvenance ? isRunningTurnDatabaseTransportFailure(record) : isRetryableDatabaseTransportFailure({ code: record.code, errno: record.errno }))
         transports.add(node);
@@ -10094,7 +10135,29 @@ function modelPreparationFailureEventPayload(error, durationMs) {
     } : {}
   };
 }
+function isPreDispatchHomeBackendRecoveryRequired(error) {
+  const graph = structuredRecoveryCauseGraph(error);
+  if (!graph) return false;
+  let found = false;
+  try {
+    for (const node of graph.keys()) {
+      if (isRoutingMutationOutcomeUnknownError(node) || isRoutingMutationOutputRejectedError(node) || isRawProviderCommandOutcomeUnknown(node) || isModalCommandStartOutcomeUnknownError(node) || isProviderCommandObservationUnavailableError(node))
+        return false;
+      if (node instanceof RoutingBackendRecoveryRequiredError2) {
+        if (node.op !== "resolve_home_backend" || !Number.isSafeInteger(node.leaseEpoch) || node.leaseEpoch < 0 || !node.retryable || node.recovery !== "pending" && node.recovery !== "superseded")
+          return false;
+        found = true;
+      }
+    }
+  } catch {
+    return false;
+  }
+  return found;
+}
 function sandboxRouteTransitionCode(error) {
+  if (isPreDispatchHomeBackendRecoveryRequired(error)) {
+    return "home_backend_recovery_pending";
+  }
   const pending = [error];
   const seen = /* @__PURE__ */ new WeakSet();
   let inspected = 0;
@@ -10384,7 +10447,28 @@ function anthropicRequestDiagnostic(error) {
   if (error instanceof AnthropicRequestError) return error;
   return error instanceof Error && error.cause instanceof AnthropicRequestError ? error.cause : void 0;
 }
+function isRawProviderCommandOutcomeUnknown(error) {
+  try {
+    return error instanceof ProviderCommandInputOutcomeUnknownError || error instanceof ProviderCommandStartOutcomeUnknownError;
+  } catch {
+    return false;
+  }
+}
 function agentRunFailurePayload(error, options = {}) {
+  const graph = structuredRecoveryCauseGraph(error);
+  const nodes = graph ? [...graph.keys()] : [];
+  const outputRejected = nodes.find(isRoutingMutationOutputRejectedError);
+  if (outputRejected) {
+    const unknown = nodes.find(
+      (node) => isRoutingMutationOutcomeUnknownError(node) || isModalCommandStartOutcomeUnknownError(node) || isProviderCommandObservationUnavailableError(node) || isRawProviderCommandOutcomeUnknown(node)
+    );
+    if (unknown) return { ...baseAgentRunFailurePayload(unknown, options), retryable: false };
+    return {
+      error: outputRejected.message,
+      code: outputRejected.code,
+      retryable: false
+    };
+  }
   const failure = baseAgentRunFailurePayload(error, options);
   const diagnostic = materializationVerificationDiagnostic(error);
   const anthropic = anthropicRequestDiagnostic(error);
@@ -10925,4 +11009,4 @@ export {
   CODEX_USAGE_LIMIT_MAX_RESUME_MS,
   classifyClaudeCredentialFailure
 };
-//# sourceMappingURL=chunk-JKMG5ZHH.js.map
+//# sourceMappingURL=chunk-BMTWULF7.js.map