@opengeni/core 0.21.2 → 0.24.1

package/dist/access/index.d.ts

@@ -2,7 +2,7 @@ import { type Settings } from "@opengeni/config";
 import { type AccountGrant, type AccessContext, type AccessGrant, type Permission } from "@opengeni/contracts";
 import { type Database } from "@opengeni/db";
 import type { Context } from "hono";
-import type { ManagedAuth } from "../managed-auth-type";
+import type { ManagedAuth } from "../managed-auth-type.js";
 export type AccessDeps = {
     db: Database;
     settings: Settings;
@@ -19,4 +19,12 @@ export type AccessGrantAuthorization = {
 export declare function accessGrantAuthorizationFromContext(context: AccessContext, grant: AccessGrant): AccessGrantAuthorization;
 export declare function requireAccessGrantAuthorization(c: Context, deps: AccessDeps, workspaceId: string, permission?: Permission): Promise<AccessGrantAuthorization>;
 export declare function requirePermission(grant: AccessGrant, permission: Permission): void;
+/**
+ * Require a permission to be present literally on the grant. This deliberately
+ * does not expand workspace:admin or deprecated aliases and is reserved for
+ * authorities, such as plaintext secret reads, that old broad grants must not
+ * acquire implicitly.
+ */
+export declare function requireLiteralPermission(grant: AccessGrant, permission: Permission): void;
+export declare function hasLiteralPermission(permissions: Permission[], permission: Permission): boolean;
 export declare function hasPermission(permissions: Permission[], permission: Permission): boolean;

package/dist/application/new-session-drafts.d.ts

@@ -1,5 +1,5 @@
 import { type AccessGrant, type NewSessionDraft as NewSessionDraftValue } from "@opengeni/contracts";
-import type { AppDependencies } from "../dependencies";
+import type { AppDependencies } from "../dependencies.js";
 type NewSessionDraftDependencies = Pick<AppDependencies, "settings" | "db" | "objectStorage">;
 /** Read the authenticated actor's server-authoritative pre-session composer state. */
 export declare function getActorNewSessionDraft(deps: Pick<NewSessionDraftDependencies, "settings" | "db">, grant: AccessGrant, workspaceId: string): Promise<NewSessionDraftValue>;

package/dist/application/session-commands.d.ts

@@ -1,8 +1,8 @@
 import type { ComposerDraft, DeleteSessionQueueItemRequest, EditSessionQueueItemRequest, MoveSessionQueueItemRequest, SaveComposerDraftRequest, SessionAuthorizationPort, SessionAuthorizationSurface, SessionControlRequest, SessionControlResponse, SessionQueueMutationResponse, SteerSessionQueueItemRequest, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse } from "@opengeni/contracts";
 import { type Database, type SessionCommandReceiptRow } from "@opengeni/db";
 import { type EventBus } from "@opengeni/events";
-import type { SessionWorkflowClient } from "../dependencies";
-import { type ResolvedSessionAuthorization } from "../session-authorization";
+import type { SessionWorkflowClient } from "../dependencies.js";
+import { type ResolvedSessionAuthorization } from "../session-authorization.js";
 export type HumanSessionCommandContext = {
     accountId: string;
     workspaceId: string;
@@ -97,12 +97,17 @@ export declare function steerHumanQueuePrompt(deps: {
     bus: EventBus;
     sessionAuthorization?: SessionAuthorizationPort | null;
 }, context: HumanSessionCommandContext, turnId: string, input: SteerSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
-export declare function controlHumanSessionWorkstream(deps: {
+export declare function controlHumanSessionWorkstreamWithOutcome(deps: {
     db: Database;
     bus: EventBus;
     workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch">;
     sessionAuthorization?: SessionAuthorizationPort | null;
-}, context: HumanSessionCommandContext, input: SessionControlRequest): Promise<SessionControlResponse>;
+}, context: HumanSessionCommandContext, input: SessionControlRequest): Promise<{
+    response: SessionControlResponse;
+    replay: boolean;
+}>;
+/** Backward-compatible response path used by the REST control route. */
+export declare function controlHumanSessionWorkstream(deps: Parameters<typeof controlHumanSessionWorkstreamWithOutcome>[0], context: Parameters<typeof controlHumanSessionWorkstreamWithOutcome>[1], input: Parameters<typeof controlHumanSessionWorkstreamWithOutcome>[2]): Promise<SessionControlResponse>;
 export declare function controlHumanWorkspace(deps: {
     db: Database;
     bus: EventBus;

package/dist/billing/limits.d.ts

@@ -1,5 +1,5 @@
 import type { LimitAction, LimitDecision, SessionTurnSource, TurnInitiator, TurnInitiatorContext } from "@opengeni/contracts";
-import type { ApiRouteDeps } from "../dependencies";
+import type { ApiRouteDeps } from "../dependencies.js";
 export type LimitDependencies = Pick<ApiRouteDeps, "db" | "settings">;
 export type LimitCheckInput = {
     accountId: string;