@opengeni/worker-bundle 2.2.0-canary.36855269964001 → 2.2.0

package/src/activities/knowledge-indexing.ts

@@ -4,10 +4,8 @@ import {
   applyCreditDebitAfterUse,
   appendKnowledgeIndexChunks,
   claimKnowledgeIndexJobs,
-  checkWorkspaceAllowance,
   completeKnowledgeIndexJob,
   continueKnowledgeIndexJob,
-  creditDebitAttributionMetadata,
   deferKnowledgeIndexJob,
   freezeKnowledgeIndexBillingMode,
   getBillingBalance,
@@ -200,16 +198,6 @@ export function createKnowledgeIndexingActivities(
                 return;
               }
               const paid = frozenPolicy.mode === "credits";
-              if (paid && claim.billingAttribution.kind === "unknown") {
-                // Unknown legacy/source-preparation causality is not service.
-                // Keep the checkpoint without making an uncountable paid call.
-                observability.warn("Paid Knowledge indexing awaits initiating attribution", {
-                  errorCode: "knowledge_index_attribution_unavailable",
-                });
-                await deferKnowledgeIndexJob(lockedDb, claim);
-                result.deferred++;
-                return;
-              }
               if (paid && current.nextIndex === 0) {
                 const balance = await getBillingBalance(lockedDb, claim.accountId);
                 if (balance.balanceMicros <= 0) {
@@ -218,22 +206,6 @@ export function createKnowledgeIndexingActivities(
                   return;
                 }
               }
-              if (paid) {
-                const refusal = await checkWorkspaceAllowance(lockedDb, {
-                  accountId: claim.accountId,
-                  workspaceId: current.billingWorkspaceId,
-                  subjectId:
-                    claim.billingAttribution.kind === "turn" ||
-                    claim.billingAttribution.kind === "human"
-                      ? claim.billingAttribution.initiatingHumanSubjectId
-                      : null,
-                });
-                if (refusal) {
-                  await deferKnowledgeIndexJob(lockedDb, claim);
-                  result.deferred++;
-                  return;
-                }
-              }
               if (settings.usageLimitsMode === "static" || settings.usageLimitsMode === "managed") {
                 const limit =
                   configuredStaticUsageLimits(settings).maxDocumentIndexedChunksPerWorkspace;
@@ -337,7 +309,6 @@ export function createKnowledgeIndexingActivities(
                     sourceId: claim.revisionId,
                     idempotencyKey: `knowledge.embedding:${claim.revisionId}:${claim.generation}:${current.nextIndex}`,
                     metadata: {
-                      ...creditDebitAttributionMetadata(claim.billingAttribution),
                       model: claim.model,
                       bytes,
                       chunks: chunks.length,

package/src/activities/run-credentials.ts

@@ -5,7 +5,6 @@ import type {
   RunCredentialsRequest,
   Session,
   SessionTurn,
-  ToolRef,
 } from "@opengeni/contracts";
 import type { Settings } from "@opengeni/config";
 import { getSessionRootId, type Database } from "@opengeni/db";
@@ -31,8 +30,6 @@ export type RunCredentialResolutionContext = {
   initiatingHumanSubjectId?: string | null;
   /** Installed in-process API routes must never enter a product callback. */
   localMcpServerIds?: readonly string[];
-  /** Exact execution selection, resolved once at the turn policy boundary. */
-  effectiveTools: readonly ToolRef[];
 };
 
 export type BoundRunCredentialResolver = {
@@ -45,7 +42,7 @@ export type BoundRunCredentialResolver = {
 export function buildRunCredentialsRequest(
   input: Omit<
     RunCredentialResolutionContext,
-    "db" | "connectionCredentials" | "settings" | "initiatingHumanSubjectId" | "effectiveTools"
+    "db" | "connectionCredentials" | "settings" | "initiatingHumanSubjectId"
   > & {
     rootSessionId: string;
     purpose: "provision" | "renewal";
@@ -128,7 +125,7 @@ export async function bindRunCredentialResolver(
           mcpServers: selectedSessionRemoteMcpTargets(
             input.settings,
             input.session.mcpServers ?? [],
-            input.effectiveTools,
+            input.turn.tools ?? [],
             (input.localMcpServerIds ?? []).map((id) => ({ id })),
           ),
         },
@@ -149,25 +146,22 @@ export async function bindRunCredentialResolver(
     workspaceId: input.workspaceId,
     sessionId: input.session.id,
   };
-  // A renewable resolver belongs to one admitted turn, even if its caller
-  // subsequently replaces or mutates an in-memory session/turn projection.
-  const frozenRequest = structuredClone(
-    buildRunCredentialsRequest({
-      accountId: input.accountId,
-      workspaceId: input.workspaceId,
-      session: input.session,
-      turn: input.turn,
-      attemptId: input.attemptId,
-      effectiveSandboxBackend: input.effectiveSandboxBackend,
-      variableSet: input.variableSet,
-      rootSessionId,
-      purpose: "provision",
-      forceRefresh: false,
-    }),
-  );
   return {
     resolve: async ({ purpose, forceRefresh }) => {
-      const resolution = await resolver({ ...frozenRequest, purpose, forceRefresh });
+      const resolution = await resolver(
+        buildRunCredentialsRequest({
+          accountId: input.accountId,
+          workspaceId: input.workspaceId,
+          session: input.session,
+          turn: input.turn,
+          attemptId: input.attemptId,
+          effectiveSandboxBackend: input.effectiveSandboxBackend,
+          variableSet: input.variableSet,
+          rootSessionId,
+          purpose,
+          forceRefresh,
+        }),
+      );
       return normalizeRunCredentialsResolution(resolution, scope);
     },
   };

package/src/activities/scheduled-tasks.ts

@@ -917,7 +917,6 @@ export function createScheduledTaskActivities(services: () => Promise<ControlAct
           workspaceId: task.workspaceId,
           model: targetSessionExecution?.model ?? model,
           requestedAgentRuns: input.agentRunUsageIdempotencyKey ? 0 : 1,
-          initiatingHumanSubjectId: causalHumanSubjectId,
         },
       );
       if (admissionDenial) {

package/src/activities/types.ts

@@ -458,7 +458,6 @@ export type DispatchScheduledTaskRunResult =
       refusal?: import("@opengeni/contracts").ScheduledTaskAdmissionRefusal;
       reason:
         | "insufficient_credits"
-        | "allowance_exhausted"
         | "monthly_model_cost_limit"
         | "monthly_agent_run_limit"
         | "malformed_manual_trigger"

package/src/activities/workspace-credential-provider.ts

@@ -78,8 +78,6 @@ export function credentialProviderRequestBody(
     mcpServers: [],
   },
 ): CredentialProviderRequest {
-  const via = input.initiatorContext.via;
-  const latestHop = Array.isArray(via) ? via.at(-1) : null;
   return {
     type: "credentials.request",
     lane: selection.lane,
@@ -94,16 +92,6 @@ export function credentialProviderRequestBody(
     turnId: input.turnId,
     attemptId: input.attemptId,
     initiator: { kind: input.initiator.kind, subjectId: input.initiator.subjectId },
-    initiatorContext: {
-      kind:
-        latestHop?.kind === "agent"
-          ? "agent"
-          : input.initiator.kind === "subject"
-            ? "human"
-            : "service",
-      initiator: input.initiator,
-      context: input.initiatorContext,
-    },
     initiatingHumanSubjectId,
     initiatingHuman,
     sandboxBackend: input.effectiveSandboxBackend,

package/src/sandbox-routing.ts

@@ -496,7 +496,7 @@ function afterPersistableHomeMutation(
       op: string;
       backend: ResolvedActiveBackend;
       admission: unknown;
-      outcome: "resolved" | "rejected" | "outcome_unknown";
+      outcome: "resolved" | "rejected";
       result?: unknown;
       retainedProcess?: RoutingRetainedProcess;
     }) => Promise<void | RoutingMutationSettlementResult>)
@@ -523,7 +523,7 @@ function afterPersistableHomeMutation(
     ) {
       throw new Error("Persistable home mutation settlement lacked its bound admission");
     }
-    if ((outcome === "resolved" || outcome === "outcome_unknown") && retainedProcess) {
+    if (outcome === "resolved" && retainedProcess) {
       try {
         await retainWorkspaceProviderCommand(services.db, {
           accountId: fence.accountId,
@@ -582,8 +582,6 @@ function afterPersistableHomeMutation(
       }
       return;
     }
-    if (outcome === "outcome_unknown")
-      throw new Error("Outcome-unknown command settlement requires its exact retained invocation");
     await verifyWorkspaceMutationSettlement(services.db, {
       accountId: fence.accountId,
       workspaceId: ids.workspaceId,

package/dist/activities/agent-turn/final-reply.d.ts

@@ -1,18 +0,0 @@
-/** One durable, same-logical-turn handoff, not a retry of model/tool effects. */
-export declare function finalReplyNudge(turnId: string): {
-    type: "message";
-    role: "developer";
-    content: {
-        type: "input_text";
-        text: string;
-    }[];
-};
-export declare function hasFinalReplyNudge(history: readonly unknown[], turnId: string): boolean;
-export declare function needsFinalReply(input: {
-    output: unknown;
-    inputWaitYielded: boolean;
-    interrupted: boolean;
-    maintenance: boolean;
-    toolsExecuted: boolean;
-    completedGoal: boolean;
-}): boolean;

package/dist/activities/agent-turn/model-call-admission.d.ts

@@ -1,15 +0,0 @@
-import type { StreamEvent } from "@openai/agents";
-/** SDK producer/consumer rendezvous. Usage stays on the sole consumer writer. */
-export declare function createModelCallAdmission(input: {
-    signal: AbortSignal;
-    admit: () => Promise<void>;
-}): {
-    beforeModelRequest: () => Promise<void>;
-    onModelResponse: (event: StreamEvent) => Promise<void>;
-    settle: (event: {
-        type: string;
-        data?: unknown;
-    }) => void;
-    fail: (error: unknown) => void;
-    close: () => void;
-};