@tangle-network/agent-app 0.60.192 → 0.60.194

package/dist/chat-routes/model-failover-stream.d.ts

@@ -50,6 +50,7 @@
  *   byte-identical to no failover. A silent chain is now deliberately bounded.
  */
 import { ModelFailoverExhaustedError, type ModelFailoverAttempt } from '../model-resolution/failover';
+import type { ModelPolicy } from '../policy-filters/index';
 /**
  * True when `event` puts content in front of the user (or in the persisted
  * transcript), making a restart on another model unsafe.
@@ -118,6 +119,13 @@ export interface ModelFailoverStreamOptions {
     /** Preferred model first, then fallbacks in descending preference. */
     models: readonly string[];
     open: OpenModelStream;
+    /**
+     * Product admission policy applied to EVERY chain member before its stream
+     * is opened — see `runWithModelFailover`'s `policy`. A member the policy
+     * refuses is skipped (never opened, never sent the turn's data) and the walk
+     * continues; an all-refused chain ends in `ModelFailoverExhaustedError`.
+     */
+    policy?: ModelPolicy;
     /**
      * Maximum time to open/start one model's event source, including its first
      * iterator pull. Default 120 seconds, matching the sandbox provisioning

package/dist/chat-routes/sandbox-producer.d.ts

@@ -15,6 +15,7 @@
  */
 import { type InteractionRequestWire } from '../interactions/contract';
 import { type JsonRecord } from '../stream/index';
+import type { ModelPolicy } from '../policy-filters/index';
 import { type EmptyTurnRetryInfo, type ModelFallbackInfo, type OpenModelStream } from './model-failover-stream';
 import type { ChatTurnRouteProducer } from './turn-routes';
 /** Outcome of a `promoteFilePart` attempt. `key`, when given, becomes the
@@ -80,6 +81,17 @@ export interface SandboxChatProducerOptions {
     /** Opt out of failover while still using {@link openEvents}. `false` collapses
      *  the chain to `model` alone. */
     modelFailover?: false;
+    /**
+     * Product admission policy applied to every chain member — the RESOLVED
+     * preferred model AND every fallback — before its stream is opened. This is
+     * the execution-time half of policy enforcement: it covers the model
+     * whatever its source (request body, env, product default), and it is what
+     * stops a compliant model's mid-turn 502 from re-running the turn's data
+     * through a non-compliant fallback. A refused member is skipped with the
+     * refusal recorded in `modelFailover().attempts`; an all-refused chain
+     * exhausts. Omit → availability only (today's behavior).
+     */
+    modelPolicy?: ModelPolicy;
     /** Maximum time to open/start one model event source through its first event.
      *  Default 120 seconds. This is separate from provider first-output latency
      *  so cold sandbox startup is not mislabeled as an inference failure. */

package/dist/chat-routes/turn-routes.d.ts

@@ -54,6 +54,7 @@ import { type DraftPersistenceTuning } from './draft-persistence';
 import { type InteractionAnswerRoute, type InteractionAnswerRouteOptions } from '../interactions/route';
 import { type PersistedChatMessageForTurn, type TurnEventStore } from '../stream/index';
 import type { ModelFailoverAttempt } from '../model-resolution/failover';
+import { type ModelPolicy } from '../policy-filters/index';
 import { type TurnRoutePhase } from './turn-progress';
 import { type ChatTurnPartInput, type ChatTurnRequestPayload } from './wire';
 /** Usage receipt persisted onto the assistant message (the flattened
@@ -471,6 +472,19 @@ export interface CreateChatTurnRoutesOptions<TContext = void> {
      *  a plain response without the progress header, a `turn.response` event
      *  with it. Omit → nothing to prepare. */
     prepareTurn?(args: ChatTurnPrepareArgs<TContext>): ChatTurnPrepareResult | Promise<ChatTurnPrepareResult>;
+    /** Product admission policy over the model a turn NAMES. When the request
+     *  body carries a `model`, it is checked here — after `authorize`, before
+     *  the conversation loads, the lock is taken, or any row is written — and a
+     *  refusal answers 403 with the policy's reason. Fail-closed: a named model
+     *  carrying no policy metadata is refused.
+     *
+     *  This is half the enforcement. A body without `model` resolves to a
+     *  product default inside `produce`, which this seam never sees — enforce
+     *  that half at execution with `createSandboxChatProducer`'s `modelPolicy`
+     *  (or `runWithModelFailover`'s `policy` on a custom producer), which also
+     *  covers every fallback the turn could fail over to. Wire the SAME policy
+     *  object to both. Omit → no policy check (today's behavior). */
+    modelPolicy?: ModelPolicy;
     /** Thread/message persistence (`/chat-store`'s store or a product adapter). */
     store: ChatTurnMessageStore;
     /** Turn-event buffer (`createD1TurnEventStore(env.DB)` or `/turn-stream`'s

package/dist/{chunk-QAF7ZTO3.js → chunk-L5JLOC2F.js}

@@ -2,15 +2,15 @@ import {
   authenticateToolRequest,
   createMcpToolHandler
 } from "./chunk-6A7MYOUI.js";
+import {
+  assertRenderUiSchema
+} from "./chunk-2RCPPOQ4.js";
 import {
   base64UrlDecodeText,
   base64UrlEncodeText,
   constantTimeEqual,
   hmacSha256Base64Url
 } from "./chunk-S5SRJJQG.js";
-import {
-  assertRenderUiSchema
-} from "./chunk-2RCPPOQ4.js";
 import {
   buildAppToolOpenAITools,
   findCustomTool,
@@ -270,4 +270,4 @@ export {
   createAppToolRuntimeExecutor,
   handleAppToolRequest
 };
-//# sourceMappingURL=chunk-QAF7ZTO3.js.map
+//# sourceMappingURL=chunk-L5JLOC2F.js.map

package/dist/{chunk-QW4UOEPH.js → chunk-SUIH5B55.js}

@@ -47,6 +47,7 @@ function backendModelFields(model) {
       model: model.model,
       provider: model.provider,
       ...model.apiKey !== void 0 ? { apiKey: model.apiKey } : {},
+      ...model.apiKeyEnv !== void 0 ? { apiKeyEnv: model.apiKeyEnv } : {},
       ...model.baseUrl !== void 0 ? { baseUrl: model.baseUrl } : {}
     }
   };
@@ -66,7 +67,8 @@ function resolveModelSelection(config, override) {
   const source = overrideModel ? "override" : configModel ? "config" : "default";
   if (!provider) return { succeeded: false, error: "no_provider", model: modelName, source };
   const apiKey = explicitApiKey ?? (provider === "openai" ? openaiApiKey : void 0);
-  if (!apiKey && !c.allowKeylessModel) {
+  const apiKeyEnv = apiKey ? null : trimOrNull(c.apiKeyEnv);
+  if (!apiKey && !apiKeyEnv && !c.allowKeylessModel) {
     return { succeeded: false, error: "no_api_key", model: modelName, provider, source };
   }
   return {
@@ -74,7 +76,7 @@ function resolveModelSelection(config, override) {
     value: {
       model: modelName,
       provider,
-      ...apiKey ? { apiKey } : {},
+      ...apiKey ? { apiKey } : apiKeyEnv ? { apiKeyEnv } : {},
       ...explicitBaseUrl ? { baseUrl: explicitBaseUrl } : {}
     }
   };
@@ -3343,4 +3345,4 @@ export {
   isTerminalPromptEvent,
   detectInteractiveQuestion
 };
-//# sourceMappingURL=chunk-QW4UOEPH.js.map
+//# sourceMappingURL=chunk-SUIH5B55.js.map