@opengeni/worker-bundle 4.3.3-canary.39786771332001 → 4.5.0

package/dist/activities/agent-turn/owned-sandbox-setup.d.ts

@@ -0,0 +1,38 @@
+import { type PreparedAgentInput } from "@opengeni/runtime";
+import type { TurnStreamAttemptDeps } from "./stream-attempt.js";
+export type EagerOwnedSandboxSetupDeps = Pick<TurnStreamAttemptDeps, "input" | "db" | "observability" | "runtimeCancellationSignal" | "sandboxState" | "eventing" | "leases" | "runWorkspaceMutationForSandbox" | "attachGitCredentialRenewal" | "attachRunCredentialRenewal" | "activeSandboxBackend" | "groupBoxBackend" | "turnExecutionPolicy" | "agent" | "runSettings" | "initialRunCredentialMaterial" | "initialGitCredentials" | "sandboxEnvironment" | "fileResourceDownloads">;
+export type EagerOwnedSandboxSetupOptions = {
+    /** The worker delivers this turn's file resources itself. */
+    fileDownloadsMaterialized: boolean;
+    /** Receives the runtime's file-failure note when the runtime delivers files. */
+    preparedInput?: PreparedAgentInput;
+};
+/**
+ * Whether this turn's platform setup runs eagerly against an owned box the
+ * worker already holds. Lazy boxes run the same setup in their first-operation
+ * provisioner, and connected machines receive no platform setup.
+ */
+export declare function hasEagerOwnedSandboxSetup(sandboxState: EagerOwnedSandboxSetupDeps["sandboxState"]): boolean;
+/**
+ * Run the turn's platform setup (rig setup, credential hooks, repository
+ * clones) against the eager owned box. The setup settles its workspace
+ * admission before returning, so no admission stays open into the model stream.
+ */
+export declare function runEagerOwnedSandboxSetup(deps: EagerOwnedSandboxSetupDeps, options: EagerOwnedSandboxSetupOptions): Promise<void>;
+/**
+ * The eager platform setup for each model stream of one turn attempt.
+ *
+ * The first stream's setup may already be running: it needs nothing from the
+ * model input, so the worker starts it with file delivery and input
+ * preparation instead of after them. Each later stream of the attempt runs the
+ * idempotent setup again, as before.
+ */
+export type EagerOwnedSandboxSetup = {
+    /** Run, or join the already started, setup for the next model stream. */
+    beforeModelStream(options: EagerOwnedSandboxSetupOptions): Promise<void>;
+    /** Resolves once a started setup has finished, whatever its outcome. */
+    settled(): Promise<void>;
+};
+export declare function createEagerOwnedSandboxSetup(deps: EagerOwnedSandboxSetupDeps, start?: {
+    fileDownloadsMaterialized: boolean;
+}, runSetup?: typeof runEagerOwnedSandboxSetup): EagerOwnedSandboxSetup;

package/dist/activities/agent-turn/stream-attempt.d.ts

@@ -14,6 +14,7 @@ import { createTurnHistorySink } from "./history-sink.js";
 import { type SessionEvent, type SessionTurn } from "@opengeni/contracts";
 import { createModelCheckpointMemoryCollector } from "../../model-checkpoint-memory-collector.js";
 import { TurnEventPublisher } from "./model-usage.js";
+import { type EagerOwnedSandboxSetup } from "./owned-sandbox-setup.js";
 import type { CompactionSummarizer } from "../context-compaction.js";
 import type { TurnExecutionPolicyV1 } from "@opengeni/contracts";
 import type { BoundRunCredentialResolver } from "../run-credentials.js";
@@ -77,6 +78,8 @@ export type TurnStreamAttemptDeps = {
     modelUsageDispatchId: string;
     workerPreparationStartedAt: number;
     fileDownloadsMaterializedForRun: boolean;
+    /** Eager owned-box platform setup, possibly already started by the worker. */
+    eagerOwnedSandboxSetup?: EagerOwnedSandboxSetup;
     unavailableSandboxFilesNote: string | undefined;
     runCredentialsNote: string | undefined;
     mcpAvailabilityNote: string | undefined;

package/dist/activities/agent-turn/user-setup-card.d.ts

@@ -0,0 +1,30 @@
+import { appendTurnCapabilityCardOnce } from "@opengeni/db";
+import { publishDurableSessionEvents } from "@opengeni/events";
+import type { UserSetupCardPoster } from "@opengeni/runtime";
+type AppendCardOnce = typeof appendTurnCapabilityCardOnce;
+type PublishEvents = typeof publishDurableSessionEvents;
+export type UserSetupCardInput = {
+    db: Parameters<AppendCardOnce>[0];
+    bus: Parameters<PublishEvents>[0];
+    /** Connected Machines are enabled on this deployment; their cards can't help otherwise. */
+    connectedMachinesEnabled: boolean;
+    /** The web app's base URL, for the chat link the agent can hand out. */
+    webBaseUrl: string | null | undefined;
+    workspaceId: string;
+    sessionId: string;
+    turnId: string;
+    executionGeneration: number;
+    attemptId: string;
+    append?: AppendCardOnce;
+    publish?: PublishEvents;
+};
+/**
+ * Posts the setup card for a tool refusal the person can fix (see
+ * USER_SETUP_BLOCKERS) in the calling turn, at most once per turn and card: a
+ * later refusal in the same turn reuses the card already shown. The append
+ * runs under the attempt fence, so a replaced turn posts nothing. Resolves
+ * "unavailable" when the card can't help on this deployment, and null when it
+ * was not posted.
+ */
+export declare function userSetupCardPoster(input: UserSetupCardInput): UserSetupCardPoster;
+export {};