@hachej/boring-core 0.1.82 → 0.1.84

package/dist/{PostgresModelBudgetStore-Ulw6ijJG.d.ts → PostgresModelBudgetStore-CViAvfFy.d.ts}

@@ -1,5 +1,5 @@
 import postgres from 'postgres';
-import { C as CoreConfig } from './types-Di-eoc58.js';
+import { C as CoreConfig } from './types-DKCtYltp.js';
 import { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
 
 type CoreMigrationSql = postgres.Sql;

package/dist/app/front/index.js

@@ -9,12 +9,12 @@ import {
   useSignIn,
   useSignUp,
   useWorkspaceRouteStatus
-} from "../../chunk-DGBJFPUK.js";
+} from "../../chunk-6G6Z52VQ.js";
 import "../../chunk-HYNKZSTF.js";
 import {
   isRuntimeEmailVerificationEnabled
 } from "../../chunk-I4PGL4ZD.js";
-import "../../chunk-H7EYII35.js";
+import "../../chunk-VWE46RW4.js";
 import "../../chunk-MLKGABMK.js";
 
 // src/app/front/CoreWorkspaceAgentFront.tsx

package/dist/app/server/index.d.ts

@@ -2,11 +2,11 @@ import { RuntimeProvisioningContribution, RegisterAgentRoutesOptions } from '@ha
 import { DirPluginEntry, CreateWorkspaceAgentServerOptions, WorkspaceAgentServerPluginContext } from '@hachej/boring-workspace/app/server';
 import { WorkspaceServerPlugin, WorkspaceBridgeOperationDefinition, WorkspaceBridgeHandler, WorkspaceBridgeRuntimeEnvOptions, WorkspaceBridgeCallRequest, WorkspaceBridgeCallResponse } from '@hachej/boring-workspace/server';
 import { FastifyRequest, FastifyReply, FastifyInstance } from 'fastify';
-import { C as CoreConfig } from '../../types-Di-eoc58.js';
+import { C as CoreConfig } from '../../types-DKCtYltp.js';
 import { T as TelemetrySink } from '../../telemetry-DR18MeI0.js';
-import { B as BetterAuthInstance, L as LoadConfigOptions } from '../../loadConfig-CuRGCFmt.js';
-import { D as Database, U as UserStore, W as WorkspaceStore, C as CoreRequestScopeResolver } from '../../types-CHdS89JJ.js';
-export { a as CoreRequestScope } from '../../types-CHdS89JJ.js';
+import { B as BetterAuthInstance, L as LoadConfigOptions } from '../../loadConfig-DEG0Tu5n.js';
+import { D as Database, U as UserStore, W as WorkspaceStore, C as CoreRequestScopeResolver } from '../../types-uK6CFlxr.js';
+export { a as CoreRequestScope } from '../../types-uK6CFlxr.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import 'better-auth';
 import 'drizzle-orm/postgres-js';

package/dist/app/server/index.js

@@ -10,13 +10,13 @@ import {
   registerRoutes,
   registerSettingsRoutes,
   registerWorkspaceRoutes
-} from "../../chunk-YFCR6SAS.js";
+} from "../../chunk-MWOZRTRG.js";
 import {
   PostgresUserStore,
   PostgresWorkspaceStore,
   createDatabase,
   telemetryEvents
-} from "../../chunk-RVVE5WOB.js";
+} from "../../chunk-C4YTZAZC.js";
 import {
   noopTelemetry,
   safeCapture
@@ -25,7 +25,7 @@ import "../../chunk-I4PGL4ZD.js";
 import {
   ERROR_CODES,
   HttpError
-} from "../../chunk-H7EYII35.js";
+} from "../../chunk-VWE46RW4.js";
 import "../../chunk-MLKGABMK.js";
 
 // src/app/server/createCoreWorkspaceAgentServer.ts
@@ -69,6 +69,7 @@ var MAX_SESSION_OWNER_CACHE = 5e3;
 function createCoreWorkspaceBridge(options) {
   const { resolveWorkspaceId, workspaceStore, validateWorkspaceId, agentSessionId } = options;
   const admittedBrowserWorkspaces = /* @__PURE__ */ new WeakMap();
+  const admittedRuntimeWorkspaces = /* @__PURE__ */ new WeakMap();
   const bridges = /* @__PURE__ */ new Map();
   const getBridge = (workspaceId) => {
     const safeWorkspaceId = validateWorkspaceId(workspaceId);
@@ -100,6 +101,8 @@ function createCoreWorkspaceBridge(options) {
     return runtime;
   };
   const resolveBridgeWorkspaceId = async (request) => {
+    const admittedRuntimeWorkspace = admittedRuntimeWorkspaces.get(request);
+    if (admittedRuntimeWorkspace) return admittedRuntimeWorkspace;
     const authHeader = request.headers.authorization;
     if (options.workspaceBridge?.runtimeTokenSecret && typeof authHeader === "string" && authHeader.startsWith("Bearer ")) {
       return verifyWorkspaceBridgeRuntimeToken(authHeader.slice("Bearer ".length), {
@@ -176,6 +179,7 @@ function createCoreWorkspaceBridge(options) {
     }
   } : void 0;
   const registerHttpRoutes = async (app) => {
+    const assertRuntimeWorkspaceScope = options.assertRuntimeWorkspaceScope;
     await app.register(async (bridgeApp) => {
       bridgeApp.addHook("preHandler", async (request) => {
         const pathname = request.url.split("?")[0];
@@ -189,6 +193,11 @@ function createCoreWorkspaceBridge(options) {
         getIdempotencyStore: async (request) => getRuntime(await resolveBridgeWorkspaceId(request)).idempotencyStore,
         runtimeTokenSecret: options.workspaceBridge?.runtimeTokenSecret,
         runtimeRefreshTokenSecret: options.workspaceBridge?.runtimeRefreshTokenSecret,
+        assertRuntimeWorkspaceScope: assertRuntimeWorkspaceScope ? async (request, claims) => {
+          await assertRuntimeWorkspaceScope(request, claims.workspaceId);
+          admittedRuntimeWorkspaces.set(request, claims.workspaceId);
+        } : void 0,
+        admitRuntimeOperation: options.admitRuntimeOperation,
         getRuntimeRefreshTokenStore: (_request, claims) => getRuntime(claims.workspaceId).refreshTokenStore,
         getOwnerWorkspaceId: async (request) => await resolveBridgeWorkspaceId(request),
         browserAuthPolicy: createBrowserBridgeAuthPolicy({
@@ -923,7 +932,21 @@ async function createCoreWorkspaceAgentServer(options = {}) {
     workspaceStore,
     corsOrigins: app.config.cors.origins,
     validateWorkspaceId: validateWorkspaceIdSegment,
-    agentSessionId: agentSessionIdFromRequest
+    agentSessionId: agentSessionIdFromRequest,
+    assertRuntimeWorkspaceScope: options.requestScopeResolver ? (request, workspaceId) => {
+      if (request.requestScope?.workspaceId !== workspaceId) d1HostScopeViolation(request);
+    } : void 0,
+    admitRuntimeOperation: options.admitEffect ? async (workspaceId) => {
+      try {
+        await options.admitEffect({ workspaceId, requestId: "workspace-bridge-runtime" });
+      } catch {
+        throw new HttpError({
+          status: 500,
+          code: ERROR_CODES.D1_ADMISSION_RECORD_FAILED,
+          message: ERROR_CODES.D1_ADMISSION_RECORD_FAILED
+        });
+      }
+    } : void 0
   });
   app.addHook("preHandler", async (request) => {
     await coreBridge.rememberSessionOwner(request);
@@ -991,6 +1014,7 @@ async function createCoreWorkspaceAgentServer(options = {}) {
     externalPlugins: externalPluginsEnabled,
     runtimeModeAdapter: remoteWorkerModeAdapter,
     version: options.version,
+    admitEffect: options.admitEffect,
     extraTools: [
       ...options.extraTools ?? [],
       ...pluginCollection.agentOptions.extraTools ?? []

package/dist/{chunk-DGBJFPUK.js → chunk-6G6Z52VQ.js}

@@ -9,7 +9,7 @@ import {
   ConfigFetchError,
   ERROR_CODES,
   HttpError
-} from "./chunk-H7EYII35.js";
+} from "./chunk-VWE46RW4.js";
 
 // src/front/AppErrorBoundary.tsx
 import { Component } from "react";

package/dist/{chunk-RVVE5WOB.js → chunk-C4YTZAZC.js}

@@ -1,7 +1,7 @@
 import {
   ERROR_CODES,
   HttpError
-} from "./chunk-H7EYII35.js";
+} from "./chunk-VWE46RW4.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -565,6 +565,7 @@ __export(schema_exports, {
   budgetReservations: () => budgetReservations,
   creditGrants: () => creditGrants,
   creditPurchases: () => creditPurchases,
+  d1BindingAdmissions: () => d1BindingAdmissions,
   idempotencyKeys: () => idempotencyKeys,
   modelBudgetReservations: () => modelBudgetReservations,
   sessions: () => sessions,
@@ -1061,6 +1062,21 @@ var telemetryEvents = pgTable2(
     index2("telemetry_events_event_name_idx").on(table.eventName)
   ]
 );
+var d1BindingAdmissions = pgTable2(
+  "d1_binding_admissions",
+  {
+    sequence: bigint("sequence", { mode: "bigint" }).generatedAlwaysAsIdentity(),
+    hostId: text2("host_id").notNull(),
+    bindingId: text2("binding_id").notNull(),
+    activeRevision: text2("active_revision").notNull(),
+    admittedAt: timestamp2("admitted_at", { withTimezone: true }).defaultNow().notNull()
+  },
+  (table) => [
+    primaryKey({ name: "d1_binding_admissions_pk", columns: [table.hostId, table.bindingId] }),
+    uniqueIndex("d1_binding_admissions_sequence_unique").on(table.sequence),
+    check("d1_binding_admissions_revision_check", sql3`${table.activeRevision} ~ '^r[0-9]{10}$'`)
+  ]
+);
 
 // src/server/db/stores/PostgresWorkspaceStore.ts
 var UI_STATE_KEY_PREFIX = "workspace_ui_state:";

package/dist/{chunk-YFCR6SAS.js → chunk-MWOZRTRG.js}

@@ -13,7 +13,7 @@ import {
   workspaceRuntimes,
   workspaceSettings,
   workspaces
-} from "./chunk-RVVE5WOB.js";
+} from "./chunk-C4YTZAZC.js";
 import {
   noopTelemetry,
   safeCapture
@@ -25,7 +25,7 @@ import {
   ConfigValidationError,
   ERROR_CODES,
   HttpError
-} from "./chunk-H7EYII35.js";
+} from "./chunk-VWE46RW4.js";
 
 // src/server/config/schema.ts
 import { z } from "zod";

package/dist/{chunk-H7EYII35.js → chunk-VWE46RW4.js}

@@ -30,6 +30,7 @@ var ERROR_CODES = {
   DB_UNAVAILABLE: "db_unavailable",
   INTERNAL_ERROR: "internal_error",
   D1_HOST_SCOPE_VIOLATION: "D1_HOST_SCOPE_VIOLATION",
+  D1_ADMISSION_RECORD_FAILED: "D1_ADMISSION_RECORD_FAILED",
   D1_MANAGED_WORKSPACE_MUTATION_FORBIDDEN: "D1_MANAGED_WORKSPACE_MUTATION_FORBIDDEN",
   // Credits + purchases
   PAYMENT_REQUIRED: "payment_required",

package/dist/front/index.d.ts

@@ -1,6 +1,6 @@
 import * as react from 'react';
 import { Component, ReactNode, ErrorInfo } from 'react';
-import { R as RuntimeConfig, a as CapabilitiesResponse, W as WorkspaceMember, U as User, b as Workspace, M as MemberRole, S as SessionState } from '../types-Di-eoc58.js';
+import { R as RuntimeConfig, a as CapabilitiesResponse, W as WorkspaceMember, U as User, b as Workspace, M as MemberRole, S as SessionState } from '../types-DKCtYltp.js';
 export { b as CompanyAdminLabels, c as CompanyAdminProvider, d as CompanyAdminProviderProps, e as CompanyAdminStatus, f as CoreFront, C as CoreFrontAuthPagesOverride, a as CoreFrontCompanyAdminOptions, g as CoreFrontProps, L as LoadCompanyAdminStatus, R as RenderCompanyAdminContent, u as useCompanyAdminStatus } from '../CoreFront-DB1OfNJU.js';
 import * as _tanstack_react_query from '@tanstack/react-query';
 import * as better_auth_react from 'better-auth/react';

package/dist/front/index.js

@@ -62,13 +62,13 @@ import {
   useWorkspaceMembers,
   useWorkspaceRole,
   useWorkspaceRouteStatus
-} from "../chunk-DGBJFPUK.js";
+} from "../chunk-6G6Z52VQ.js";
 import {
   TopBarSlotProvider,
   useTopBarSlot
 } from "../chunk-HYNKZSTF.js";
 import "../chunk-I4PGL4ZD.js";
-import "../chunk-H7EYII35.js";
+import "../chunk-VWE46RW4.js";
 import "../chunk-MLKGABMK.js";
 export {
   AppErrorBoundary,

package/dist/{loadConfig-CuRGCFmt.d.ts → loadConfig-DEG0Tu5n.d.ts}

@@ -1,7 +1,7 @@
 import { FastifyPluginAsync } from 'fastify';
 import { Auth } from 'better-auth';
-import { C as CoreConfig, R as RuntimeConfig } from './types-Di-eoc58.js';
-import { W as WorkspaceStore, D as Database } from './types-CHdS89JJ.js';
+import { C as CoreConfig, R as RuntimeConfig } from './types-DKCtYltp.js';
+import { W as WorkspaceStore, D as Database } from './types-uK6CFlxr.js';
 import { T as TelemetrySink } from './telemetry-DR18MeI0.js';
 
 declare function validatePasswordStrength(password: string): {

package/dist/server/db/index.d.ts

@@ -1,7 +1,7 @@
-import { U as UserStore, W as WorkspaceStore } from '../../types-CHdS89JJ.js';
-export { D as Database, c as createDatabase } from '../../types-CHdS89JJ.js';
-export { B as BudgetReservationAdmission, a as BudgetReservationAdmissionInput, b as BudgetReservationScope, c as BudgetSpendQuery, d as BudgetSpendSnapshot, F as FinishBudgetReservationInput, e as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, f as ModelBudgetExceededError, P as PostgresBudgetReservationStore, g as PostgresMeteringStore, h as PostgresModelBudgetStore, R as RecordUsageInput, i as RecordUsageResult, j as ReservationFinalStatus, k as ReserveBudgetInput, l as ReserveBudgetResult, m as ReserveInput, n as ReserveResult, o as RunMigrationsOptions, U as UserBudgetExceededError, r as runMigrations } from '../../PostgresModelBudgetStore-Ulw6ijJG.js';
-import { U as User, b as Workspace, E as ERROR_CODES, M as MemberRole, W as WorkspaceMember, c as WorkspaceInvite, d as WorkspaceRuntime, e as WorkspaceRuntimeResourceSelector, f as WorkspaceRuntimeResource, g as WorkspaceRuntimeResourceInput } from '../../types-Di-eoc58.js';
+import { U as UserStore, W as WorkspaceStore } from '../../types-uK6CFlxr.js';
+export { D as Database, c as createDatabase } from '../../types-uK6CFlxr.js';
+export { B as BudgetReservationAdmission, a as BudgetReservationAdmissionInput, b as BudgetReservationScope, c as BudgetSpendQuery, d as BudgetSpendSnapshot, F as FinishBudgetReservationInput, e as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, f as ModelBudgetExceededError, P as PostgresBudgetReservationStore, g as PostgresMeteringStore, h as PostgresModelBudgetStore, R as RecordUsageInput, i as RecordUsageResult, j as ReservationFinalStatus, k as ReserveBudgetInput, l as ReserveBudgetResult, m as ReserveInput, n as ReserveResult, o as RunMigrationsOptions, U as UserBudgetExceededError, r as runMigrations } from '../../PostgresModelBudgetStore-CViAvfFy.js';
+import { U as User, b as Workspace, E as ERROR_CODES, M as MemberRole, W as WorkspaceMember, c as WorkspaceInvite, d as WorkspaceRuntime, e as WorkspaceRuntimeResourceSelector, f as WorkspaceRuntimeResource, g as WorkspaceRuntimeResourceInput } from '../../types-DKCtYltp.js';
 import { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
 import 'postgres';
 import 'fastify';

package/dist/server/db/index.js

@@ -11,8 +11,8 @@ import {
   UserBudgetExceededError,
   createDatabase,
   runMigrations
-} from "../../chunk-RVVE5WOB.js";
-import "../../chunk-H7EYII35.js";
+} from "../../chunk-C4YTZAZC.js";
+import "../../chunk-VWE46RW4.js";
 import "../../chunk-MLKGABMK.js";
 export {
   InsufficientCreditError,

package/dist/server/index.d.ts

@@ -1,16 +1,16 @@
-import { L as LoadConfigOptions } from '../loadConfig-CuRGCFmt.js';
-export { A as AuthHookOptions, B as BetterAuthInstance, C as CreateAuthOptions, a as authHook, b as buildRuntimeConfigPayload, c as createAuth, l as loadConfig, v as validateConfig, d as validatePasswordStrength } from '../loadConfig-CuRGCFmt.js';
+import { L as LoadConfigOptions } from '../loadConfig-DEG0Tu5n.js';
+export { A as AuthHookOptions, B as BetterAuthInstance, C as CreateAuthOptions, a as authHook, b as buildRuntimeConfigPayload, c as createAuth, l as loadConfig, v as validateConfig, d as validatePasswordStrength } from '../loadConfig-DEG0Tu5n.js';
 import { z } from 'zod';
-import { C as CoreConfig, M as MemberRole, e as WorkspaceRuntimeResourceSelector, f as WorkspaceRuntimeResource, g as WorkspaceRuntimeResourceInput } from '../types-Di-eoc58.js';
+import { C as CoreConfig, M as MemberRole, e as WorkspaceRuntimeResourceSelector, f as WorkspaceRuntimeResource, g as WorkspaceRuntimeResourceInput } from '../types-DKCtYltp.js';
 import * as fastify from 'fastify';
 import { preHandlerHookHandler, FastifyInstance, FastifyPluginAsync, FastifyRequest, FastifyReply } from 'fastify';
 import * as http from 'http';
 import { IncomingMessage } from 'node:http';
-import { W as WorkspaceStore, b as CreateCoreAppOptions, D as Database, U as UserStore, d as WorkspaceProvisioner } from '../types-CHdS89JJ.js';
-export { A as AuthProvider, e as CapabilitiesContributor, a as CoreRequestScope, C as CoreRequestScopeResolver, P as ProvisionContext, f as ProvisionResult, c as createDatabase } from '../types-CHdS89JJ.js';
+import { W as WorkspaceStore, b as CreateCoreAppOptions, D as Database, U as UserStore, d as WorkspaceProvisioner } from '../types-uK6CFlxr.js';
+export { A as AuthProvider, e as CapabilitiesContributor, a as CoreRequestScope, C as CoreRequestScopeResolver, P as ProvisionContext, f as ProvisionResult, c as createDatabase } from '../types-uK6CFlxr.js';
 import postgres from 'postgres';
-import { o as RunMigrationsOptions, g as PostgresMeteringStore, C as CreditLedgerEntry } from '../PostgresModelBudgetStore-Ulw6ijJG.js';
-export { B as BudgetReservationAdmission, a as BudgetReservationAdmissionInput, b as BudgetReservationScope, c as BudgetSpendQuery, d as BudgetSpendSnapshot, F as FinishBudgetReservationInput, e as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, f as ModelBudgetExceededError, P as PostgresBudgetReservationStore, h as PostgresModelBudgetStore, R as RecordUsageInput, i as RecordUsageResult, j as ReservationFinalStatus, k as ReserveBudgetInput, l as ReserveBudgetResult, m as ReserveInput, n as ReserveResult, U as UserBudgetExceededError, r as runMigrations } from '../PostgresModelBudgetStore-Ulw6ijJG.js';
+import { o as RunMigrationsOptions, g as PostgresMeteringStore, C as CreditLedgerEntry } from '../PostgresModelBudgetStore-CViAvfFy.js';
+export { B as BudgetReservationAdmission, a as BudgetReservationAdmissionInput, b as BudgetReservationScope, c as BudgetSpendQuery, d as BudgetSpendSnapshot, F as FinishBudgetReservationInput, e as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, f as ModelBudgetExceededError, P as PostgresBudgetReservationStore, h as PostgresModelBudgetStore, R as RecordUsageInput, i as RecordUsageResult, j as ReservationFinalStatus, k as ReserveBudgetInput, l as ReserveBudgetResult, m as ReserveInput, n as ReserveResult, U as UserBudgetExceededError, r as runMigrations } from '../PostgresModelBudgetStore-CViAvfFy.js';
 import { T as TelemetrySink } from '../telemetry-DR18MeI0.js';
 import { AgentMeteringSink } from '@hachej/boring-agent/server';
 import 'better-auth';

package/dist/server/index.js

@@ -25,7 +25,7 @@ import {
   validateConfig,
   validatePasswordStrength,
   withUserSettingsWriteLock
-} from "../chunk-YFCR6SAS.js";
+} from "../chunk-MWOZRTRG.js";
 import {
   InsufficientCreditError,
   ModelBudgetExceededError,
@@ -35,7 +35,7 @@ import {
   UserBudgetExceededError,
   createDatabase,
   runMigrations
-} from "../chunk-RVVE5WOB.js";
+} from "../chunk-C4YTZAZC.js";
 import {
   noopTelemetry,
   safeCapture
@@ -43,7 +43,7 @@ import {
 import "../chunk-I4PGL4ZD.js";
 import {
   ERROR_CODES
-} from "../chunk-H7EYII35.js";
+} from "../chunk-VWE46RW4.js";
 import "../chunk-MLKGABMK.js";
 
 // src/server/security/safeRedirect.ts

package/dist/shared/index.d.ts

@@ -1,5 +1,5 @@
-import { U as User, C as CoreConfig, R as RuntimeConfig } from '../types-Di-eoc58.js';
-export { a as CapabilitiesResponse, h as ConfigFetchError, i as ConfigValidationError, j as CoreCapabilities, E as ERROR_CODES, k as ErrorCode, H as HttpError, J as JsonValue, M as MemberRole, l as RateLimitEndpointOverride, m as SessionPayload, S as SessionState, T as TrustedProxyPolicy, b as Workspace, c as WorkspaceInvite, W as WorkspaceMember, d as WorkspaceRuntime } from '../types-Di-eoc58.js';
+import { U as User, C as CoreConfig, R as RuntimeConfig } from '../types-DKCtYltp.js';
+export { a as CapabilitiesResponse, h as ConfigFetchError, i as ConfigValidationError, j as CoreCapabilities, E as ERROR_CODES, k as ErrorCode, H as HttpError, J as JsonValue, M as MemberRole, l as RateLimitEndpointOverride, m as SessionPayload, S as SessionState, T as TrustedProxyPolicy, b as Workspace, c as WorkspaceInvite, W as WorkspaceMember, d as WorkspaceRuntime } from '../types-DKCtYltp.js';
 export { a as TelemetryEvent, T as TelemetrySink, n as noopTelemetry, s as safeCapture } from '../telemetry-DR18MeI0.js';
 
 declare function isCoreEmailVerificationEnabled(config: Pick<CoreConfig, 'auth'>): boolean;

package/dist/shared/index.js

@@ -12,7 +12,7 @@ import {
   ConfigValidationError,
   ERROR_CODES,
   HttpError
-} from "../chunk-H7EYII35.js";
+} from "../chunk-VWE46RW4.js";
 import "../chunk-MLKGABMK.js";
 export {
   ConfigFetchError,

package/dist/{types-Di-eoc58.d.ts → types-DKCtYltp.d.ts}

@@ -24,6 +24,7 @@ declare const ERROR_CODES: {
     readonly DB_UNAVAILABLE: "db_unavailable";
     readonly INTERNAL_ERROR: "internal_error";
     readonly D1_HOST_SCOPE_VIOLATION: "D1_HOST_SCOPE_VIOLATION";
+    readonly D1_ADMISSION_RECORD_FAILED: "D1_ADMISSION_RECORD_FAILED";
     readonly D1_MANAGED_WORKSPACE_MUTATION_FORBIDDEN: "D1_MANAGED_WORKSPACE_MUTATION_FORBIDDEN";
     readonly PAYMENT_REQUIRED: "payment_required";
     readonly INVALID_PACK: "invalid_pack";

package/dist/{types-CHdS89JJ.d.ts → types-uK6CFlxr.d.ts}

@@ -1,6 +1,6 @@
 import { drizzle } from 'drizzle-orm/postgres-js';
 import postgres from 'postgres';
-import { C as CoreConfig, b as Workspace, E as ERROR_CODES, M as MemberRole, W as WorkspaceMember, U as User, c as WorkspaceInvite, d as WorkspaceRuntime, e as WorkspaceRuntimeResourceSelector, f as WorkspaceRuntimeResource, g as WorkspaceRuntimeResourceInput, a as CapabilitiesResponse } from './types-Di-eoc58.js';
+import { C as CoreConfig, b as Workspace, E as ERROR_CODES, M as MemberRole, W as WorkspaceMember, U as User, c as WorkspaceInvite, d as WorkspaceRuntime, e as WorkspaceRuntimeResourceSelector, f as WorkspaceRuntimeResource, g as WorkspaceRuntimeResourceInput, a as CapabilitiesResponse } from './types-DKCtYltp.js';
 import { FastifyRequest } from 'fastify';
 
 type Database = ReturnType<typeof drizzle>;

package/drizzle/0018_d1_binding_admissions.sql

@@ -0,0 +1,10 @@
+CREATE TABLE "d1_binding_admissions" (
+	"sequence" bigint GENERATED ALWAYS AS IDENTITY NOT NULL,
+	"host_id" text NOT NULL,
+	"binding_id" text NOT NULL,
+	"active_revision" text NOT NULL,
+	"admitted_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "d1_binding_admissions_pk" PRIMARY KEY("host_id","binding_id"),
+	CONSTRAINT "d1_binding_admissions_sequence_unique" UNIQUE("sequence"),
+	CONSTRAINT "d1_binding_admissions_revision_check" CHECK ("active_revision" ~ '^r[0-9]{10}$')
+);

package/drizzle/meta/_journal.json

@@ -127,6 +127,13 @@
       "when": 1783497600000,
       "tag": "0017_user_budget_reservations",
       "breakpoints": true
+    },
+    {
+      "idx": 18,
+      "version": "7",
+      "when": 1783900800000,
+      "tag": "0018_d1_binding_admissions",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-core",
-  "version": "0.1.82",
+  "version": "0.1.84",
   "type": "module",
   "license": "MIT",
   "description": "Foundation package for boring-ui-v2 apps: DB, auth, config, HTTP app factory, and frontend app shell.",
@@ -80,9 +80,9 @@
     "react-router-dom": "^7.18.0",
     "smol-toml": "^1.7.0",
     "zod": "^3.25.76",
-    "@hachej/boring-agent": "0.1.82",
-    "@hachej/boring-ui-kit": "0.1.82",
-    "@hachej/boring-workspace": "0.1.82"
+    "@hachej/boring-agent": "0.1.84",
+    "@hachej/boring-ui-kit": "0.1.84",
+    "@hachej/boring-workspace": "0.1.84"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",