@opengeni/worker-bundle 2.2.1-canary.36927100590001 → 2.2.1

package/dist/{activities-turn-TESOIOEX.js → activities-turn-T7Y3BWYO.js}

@@ -83,7 +83,6 @@ import {
   signalPendingCodexCapacityWakeTargets,
   startActivityHeartbeat,
   throwIfTurnOperationCancelled,
-  turnCredentialRestriction,
   turnFinalizerCancellationSignal,
   turnInput,
   turnOperationCancellationFailure,
@@ -95,7 +94,7 @@ import {
   withFirstPartyTools,
   wrapLazyTurnBoxWithRouting,
   wrapTurnBoxWithRouting
-} from "./chunk-4PJTUBWQ.js";
+} from "./chunk-OWNLATJL.js";
 import {
   StreamTimingMetrics,
   makeMachineOpObserver,
@@ -127,7 +126,7 @@ import {
   runtimeMetricsHooksForObservability,
   sandboxAutomaticRecoveryOutcome,
   turnLifecycleMetricsFor
-} from "./chunk-YG27NEMX.js";
+} from "./chunk-IJZU752L.js";
 import {
   __export
 } from "./chunk-PZ5AY32C.js";
@@ -4461,16 +4460,13 @@ async function runCapture(input, ctx, startedAt, signal, stage, ownership) {
       "error.message": gcError instanceof Error ? gcError.message : String(gcError)
     });
   }
-  recordWorkspaceCaptureCompleted(observability, Date.now() - startedAt);
-}
-function recordWorkspaceCaptureCompleted(observability, durationMs) {
+  const durationMs = Date.now() - startedAt;
   observability.incrementCounter({
     name: "opengeni_workspace_capture_total",
     labels: { result: "ok" }
   });
   observability.observeHistogram({
-    name: "opengeni_workspace_capture_revision_duration_seconds",
-    help: "Turn-end logical workspace revision capture duration for committed revisions.",
+    name: "opengeni_workspace_capture_duration_seconds",
     value: durationMs / 1e3
   });
 }
@@ -10462,9 +10458,7 @@ async function claimTurnAttempt(deps) {
     claimedPolicy.kind === "valid" ? claimedPolicy.policy.productModelId : turn.model
   );
   const codexAppsCredentialId = capabilitySettings.codexConnectedAppsEnabled ? await resolveCodexAppsCredentialIdForRun(db, input.workspaceId) : null;
-  const candidatePolicy = claimedPolicy.kind === "valid" ? claimedPolicy.policy : resolveTurnExecutionPolicyV12(capabilitySettings, legacyTurnExecutionPolicyInput(turn));
-  const credentialRestriction = claimedPolicy.kind === "absent" ? turn.initiatorContext?.credentialRestriction === "developer_setup" ? "developer_setup" : turnCredentialRestriction(candidatePolicy, session.metadata) : void 0;
-  const policyForAbsent = credentialRestriction ? { ...candidatePolicy, credentialRestriction } : candidatePolicy;
+  const policyForAbsent = claimedPolicy.kind === "valid" ? claimedPolicy.policy : resolveTurnExecutionPolicyV12(capabilitySettings, legacyTurnExecutionPolicyInput(turn));
   const installedPolicy = await installOrReadTurnExecutionPolicyForAttempt(db, {
     accountId: input.accountId,
     workspaceId: input.workspaceId,
@@ -15419,7 +15413,6 @@ async function prepareRunCredentials(deps) {
     sandboxState,
     turn,
     session,
-    turnExecutionPolicy,
     fileAuthoritySubjectId,
     runSettings,
     workspaceVariableSet,
@@ -15578,13 +15571,11 @@ async function prepareRunCredentials(deps) {
     attemptId: input.attemptId,
     turn
   }) : void 0;
-  const credentialRestriction = turnCredentialRestriction(turnExecutionPolicy, session.metadata);
   const codemodeAuthority = {
     sessionId: input.sessionId,
     turnId: turn.id,
     attemptId: input.attemptId,
-    executionGeneration: turn.executionGeneration,
-    ...credentialRestriction ? { credentialRestriction } : {}
+    executionGeneration: turn.executionGeneration
   };
   const sandboxArtifactRuntime = sandboxArtifactRuntimeAdmission(
     settings,
@@ -34236,7 +34227,6 @@ async function prepareTurnToolRuntime(deps) {
   });
   const runSettings = accountRoutes.settings;
   const turnTools = accountRoutes.tools;
-  const credentialRestriction = turnCredentialRestriction(turnExecutionPolicy, session.metadata);
   const toolContextPreparationStartedAt = performance.now();
   throwIfWorkerShuttingDown();
   throwIfTurnCancelled();
@@ -34760,7 +34750,6 @@ async function prepareTurnToolRuntime(deps) {
     ] : [],
     ...createFirstPartyInteractionAttemptToolDefinitions({
       settings: runSettings,
-      ...credentialRestriction ? { credentialRestriction } : {},
       scope: {
         accountId: input.accountId,
         workspaceId: input.workspaceId,
@@ -34847,7 +34836,6 @@ async function prepareTurnToolRuntime(deps) {
   try {
     eventing.preparedTools = await waitForTurnOperation(
       runtime.prepareTools(githubRestMcp.settings, githubRestMcp.tools, {
-        ...credentialRestriction ? { credentialRestriction } : {},
         mcpAccountLabels: accountRoutes.accountLabels,
         accountId: input.accountId,
         workspaceId: input.workspaceId,
@@ -37999,7 +37987,6 @@ These are publication receipts for the human's earlier answer. Do not call the r
             sandboxRuntime,
             turn,
             session,
-            turnExecutionPolicy,
             fileAuthoritySubjectId,
             runSettings,
             workspaceVariableSet,
@@ -39752,4 +39739,4 @@ export {
   createTurnActivities,
   createTurnActivitiesFromServices
 };
-//# sourceMappingURL=activities-turn-TESOIOEX.js.map
+//# sourceMappingURL=activities-turn-T7Y3BWYO.js.map