@opengeni/core 0.4.6 → 0.4.8

package/dist/index.d.ts

@@ -1,13 +1,14 @@
 import { Settings } from '@opengeni/config';
-import { ScheduledTask, Document, Permission, AccessContext, AccessGrant, LimitAction, LimitDecision, CapabilityCatalogItem, CapabilityInstallation, CapabilityCatalogResponse, CreateCapabilityCatalogItemRequest, EnableCapabilityRequest, WorkspaceEnvironment, CapabilityPack, SocialConnection, ScheduledTaskAgentConfig, ToolRef, ResourceRef, CreateScheduledTaskRequest, UpdateScheduledTaskRequest, ReasoningEffort, SessionMcpCredentialUpdateInput, SessionEvent, SessionTurn, GoalSpec, SessionMcpServerMetadata, Session, WorkspaceMember } from '@opengeni/contracts';
+import { ScheduledTask, Document, Permission, AccessContext, AccessGrant, LimitAction, LimitDecision, CapabilityCatalogItem, CapabilityInstallation, CapabilityCatalogResponse, CreateCapabilityCatalogItemRequest, EnableCapabilityRequest, VariableSet, Rig, RigVersion, CreateRigRequest, RigDefinitionEditPayload, RigChange, ProposeRigChangeRequest, UpdateRigRequest, CapabilityPack, SocialConnection, ScheduledTaskAgentConfig, ToolRef, ResourceRef, CreateScheduledTaskRequest, UpdateScheduledTaskRequest, ReasoningEffort, SessionMcpCredentialUpdateInput, SessionEvent, SessionTurn, GoalSpec, SessionMcpServerMetadata, Session, WorkspaceMember, SessionControlRequest, SessionControlResponse, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse, DeleteSessionQueueItemRequest, SessionQueueMutationResponse, EditSessionQueueItemRequest, ComposerDraft, MoveSessionQueueItemRequest, SaveComposerDraftRequest, SteerSessionQueueItemRequest } from '@opengeni/contracts';
 export { mergeToolRefs, stableJson } from '@opengeni/contracts';
+import * as _opengeni_db from '@opengeni/db';
 import { Database, SandboxRecord, EnabledMcpCapabilityServer, UpdateScheduledTaskInput, CreateSessionMcpServerInput, UpdateSessionMcpServerCredentialsInput } from '@opengeni/db';
 import { DocumentServices } from '@opengeni/documents';
 import { EventBus } from '@opengeni/events';
 import { Observability } from '@opengeni/observability';
 import { createObjectStorage } from '@opengeni/storage';
 import { Auth } from 'better-auth';
-import { SelfhostedRelayConfig, EstablishedSandboxSession } from '@opengeni/runtime/sandbox';
+import { BackendUnresolvableCode, SelfhostedRelayConfig, EstablishedSandboxSession } from '@opengeni/runtime/sandbox';
 import { Context } from 'hono';
 
 type ManagedAuth = Auth<any>;
@@ -37,9 +38,9 @@ type ApiSandboxSession = {
 };
 type ApiSandboxClient = {
     backendId: string;
-    deserializeSessionState?(state: Record<string, unknown>): Promise<unknown>;
-    resume?(state: unknown, options?: unknown): Promise<ApiSandboxSession>;
-    delete?(state: unknown): Promise<void>;
+    deserializeSessionState?(state: Record<string, unknown>): Promise<Record<string, unknown>>;
+    resume?(state: Record<string, unknown>, options?: unknown): Promise<ApiSandboxSession>;
+    delete?(state: Record<string, unknown>): Promise<void>;
 };
 type ResumeBoxByIdInput = {
     /**
@@ -76,18 +77,26 @@ type SessionWorkflowClient = {
         workspaceId: string;
         sessionId: string;
         workflowId: string;
+        wakeRevision: number;
+        interruptionRequested?: boolean;
     }) => Promise<void>;
-    signalApprovalDecision: (input: {
+    /** Trigger one bounded drain of already-committed workflow-wake revisions. */
+    requestSessionWorkflowWakeDispatch: () => Promise<void>;
+    signalCodexCapacity?: (input: {
+        accountId: string;
+        workspaceId: string;
         sessionId: string;
-        eventId: string;
         workflowId: string;
+        wakeRevision: number;
+        workflowWakeRevision: number;
     }) => Promise<void>;
-    signalInterrupt: (input: {
+    signalApprovalDecision: (input: {
         accountId: string;
         workspaceId: string;
         sessionId: string;
         eventId: string;
         workflowId: string;
+        workflowWakeRevision: number;
     }) => Promise<void>;
     syncScheduledTask: (input: {
         task: ScheduledTask;
@@ -100,6 +109,12 @@ type SessionWorkflowClient = {
         agentRunUsageIdempotencyKey?: string;
         triggerWorkflowId?: string;
     }) => Promise<void>;
+    startRigVerification: (input: {
+        workspaceId: string;
+        changeId?: string;
+        versionId?: string;
+        workflowId?: string;
+    }) => Promise<void>;
     check?: () => Promise<void>;
 };
 type DocumentIndexClient = {
@@ -114,6 +129,8 @@ type AppDependencies = {
     db: Database;
     bus: EventBus;
     workflowClient: SessionWorkflowClient;
+    /** Optional provider override for deterministic API/object-storage tests. */
+    objectStorage?: ObjectStorageDependency;
     documentIndexer?: DocumentIndexClient;
     documentServices?: DocumentServices;
     observability?: Observability;
@@ -138,6 +155,22 @@ type ApiRouteDeps = AppDependencies & {
     getDocumentServices: () => DocumentServices;
     resumeBoxById: (input: ResumeBoxByIdInput) => Promise<ResumedSandboxSession>;
 };
+/**
+ * The exact dependency slice used by `acceptSessionUserMessage`.
+ *
+ * Keeping this narrower than `ApiRouteDeps` lets control-plane callers reuse
+ * the canonical admission path without constructing unrelated HTTP, document,
+ * or sandbox services. The public API still passes its `ApiRouteDeps` superset.
+ */
+type AcceptSessionUserMessageDependencies = Pick<AppDependencies, "settings" | "db" | "bus"> & {
+    workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
+    objectStorage: ObjectStorageDependency;
+};
+
+/** One global Temporal Schedule owns bounded delivery of committed session wakes. */
+declare const SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID = "opengeni-session-workflow-wake-dispatcher";
+declare const SESSION_WORKFLOW_WAKE_DISPATCHER_WORKFLOW_TYPE = "sessionWorkflowWakeDispatcherWorkflow";
+declare const SESSION_WORKFLOW_WAKE_DISPATCHER_PERIOD_MS = 10000;
 
 type FleetServices = {
     db: Database;
@@ -206,12 +239,14 @@ type FleetListResult = {
     activeEpoch: number;
     sandboxes: FleetSandboxEntry[];
 };
-/** A swap/attach outcome the tool returns. */
+/** A swap/attach outcome the tool returns. On a rejection, `code` carries the
+ *  typed reason (issue #341 typed diagnostics) alongside the human `reason`. */
 type FleetSwapResult = {
     swapped: boolean;
     activeSandboxId: string | null;
     activeEpoch: number;
     reason?: string;
+    code?: BackendUnresolvableCode | "concurrent_swap";
 };
 /**
  * List the fleet: the session's own Modal group box (a synthetic entry) + the
@@ -332,6 +367,7 @@ declare function requireAccessGrant(c: Context, deps: AccessDeps, workspaceId: s
 declare function requirePermission(grant: AccessGrant, permission: Permission): void;
 declare function hasPermission(permissions: Permission[], permission: Permission): boolean;
 
+type LimitDependencies = Pick<ApiRouteDeps, "db" | "settings">;
 type LimitCheckInput = {
     accountId: string;
     workspaceId?: string;
@@ -339,9 +375,9 @@ type LimitCheckInput = {
     quantity?: number;
     model?: string | null;
 };
-declare function requireLimit(deps: ApiRouteDeps, input: LimitCheckInput): Promise<void>;
-declare function checkLimit(deps: ApiRouteDeps, input: LimitCheckInput): Promise<LimitDecision>;
-declare function recordWorkspaceUsage(deps: ApiRouteDeps, input: {
+declare function requireLimit(deps: LimitDependencies, input: LimitCheckInput): Promise<void>;
+declare function checkLimit(deps: LimitDependencies, input: LimitCheckInput): Promise<LimitDecision>;
+declare function recordWorkspaceUsage(deps: LimitDependencies, input: {
     accountId: string;
     workspaceId: string;
     subjectId?: string | null;
@@ -408,31 +444,90 @@ declare function applyCapabilityEnablement(item: CapabilityCatalogItem, installa
 
 declare const MAX_ENVIRONMENTS_PER_WORKSPACE = 25;
 declare const MAX_VARIABLES_PER_ENVIRONMENT = 100;
-declare function assertAllowedEnvironmentVariableName(name: string): void;
-declare function requireEnvironmentEncryption(settings: Settings): Uint8Array;
-declare function requireEnvironmentForApi(db: Database, workspaceId: string, environmentId: string): Promise<WorkspaceEnvironment>;
+declare function assertAllowedVariableSetVariableName(name: string): void;
+/** @deprecated use assertAllowedVariableSetVariableName */
+declare const assertAllowedEnvironmentVariableName: typeof assertAllowedVariableSetVariableName;
+declare function requireVariableSetEncryption(settings: Settings): Uint8Array;
+/** @deprecated use requireVariableSetEncryption */
+declare const requireEnvironmentEncryption: typeof requireVariableSetEncryption;
+declare function requireVariableSetForApi(db: Database, workspaceId: string, variableSetId: string): Promise<VariableSet>;
 /**
- * Validates an environment attachment supplied in a request payload (session
+ * Validates an variableSet attachment supplied in a request payload (session
  * create, scheduled task create/update, pack enable). Requires the
- * `environments:use` permission unless the attachment was already authorized
+ * `variable-sets:use` permission unless the attachment was already authorized
  * (pack-installation-inherited attachments), and maps a missing or
- * cross-workspace environment to 422 because the id is payload, not the route
+ * cross-variable set to 422 because the id is payload, not the route
  * target. RLS plus the workspace_id clause make cross-workspace ids
  * indistinguishable from missing ones.
  */
-declare function validateEnvironmentAttachment(deps: {
+declare function validateVariableSetAttachment(deps: {
     settings: Settings;
     db: Database;
-}, grant: AccessGrant, workspaceId: string, environmentId: string, options?: {
+}, grant: AccessGrant, workspaceId: string, variableSetId: string, options?: {
     preauthorized?: boolean;
-}): Promise<WorkspaceEnvironment>;
-declare function recordEnvironmentAuditEvent(db: Database, input: {
+}): Promise<VariableSet>;
+declare function recordVariableSetAuditEvent(db: Database, input: {
     grant: AccessGrant;
-    action: "environment.created" | "environment.updated" | "environment.deleted" | "environment.variable.set" | "environment.variable.deleted";
-    environmentId: string;
+    action: "variable_set.created" | "variable_set.updated" | "variable_set.deleted" | "variable_set.variable.set" | "variable_set.variable.deleted";
+    variableSetId: string;
     variableName?: string;
 }): Promise<void>;
 
+declare const MAX_RIGS_PER_WORKSPACE = 50;
+declare const MAX_CHECKS_PER_RIG = 100;
+declare const MAX_CREDENTIAL_HOOKS_PER_RIG = 50;
+declare const MAX_DEFAULT_VARIABLE_SETS_PER_RIG = 25;
+type RigServices = {
+    db: Database;
+};
+type RigAuditAction = "rig.created" | "rig.updated" | "rig.deleted" | "rig.change.proposed" | "rig.change.verified" | "rig.change.rejected" | "rig.change.failed" | "rig.change.merged" | "rig.verification.started" | "rig.verification.passed" | "rig.verification.failed" | "rig.version.activated" | "rig.version.promoted";
+declare function recordRigAuditEvent(db: Database, input: {
+    grant: AccessGrant;
+    action: RigAuditAction;
+    rigId: string;
+    metadata?: Record<string, unknown>;
+}): Promise<void>;
+declare function rigActorForGrant(grant: AccessGrant): string;
+declare function requireRigForApi(db: Database, workspaceId: string, rigId: string): Promise<Rig>;
+declare function requireRigChangeForApi(db: Database, workspaceId: string, rigId: string, changeId: string): Promise<RigChange>;
+declare function createRigForApi(deps: RigServices, grant: AccessGrant, payload: CreateRigRequest): Promise<Rig>;
+declare function updateRigForApi(deps: RigServices, grant: AccessGrant, rig: Rig, payload: UpdateRigRequest): Promise<Rig>;
+declare function deleteRigForApi(deps: RigServices, grant: AccessGrant, rig: Rig): Promise<void>;
+declare function proposeRigChangeForApi(deps: RigServices, grant: AccessGrant, rig: Rig, request: ProposeRigChangeRequest, options?: {
+    proposedBy?: string;
+}): Promise<RigChange>;
+type RigVerificationClassification = {
+    status: "merged";
+    action: "auto_promote";
+} | {
+    status: "proposed";
+    action: "await_manage_promote";
+} | {
+    status: "rejected";
+    action: "reject";
+} | {
+    status: "failed";
+    action: "retryable_failure";
+};
+declare function classifyRigVerificationOutcome(input: {
+    kind: "setup_append" | "definition_edit";
+    passed: boolean;
+    infraError?: boolean;
+}): RigVerificationClassification;
+declare function appendRigSetupCommand(baseSetupScript: string | null | undefined, command: string): string;
+declare function promoteSetupAppendChange(deps: RigServices, grant: AccessGrant, rig: Rig, change: RigChange): Promise<{
+    change: RigChange;
+    version: RigVersion;
+}>;
+declare function promoteVerifiedDefinitionEditChangeForApi(deps: RigServices, grant: AccessGrant, rig: Rig, change: RigChange): Promise<{
+    change: RigChange;
+    version: RigVersion;
+}>;
+declare function createRigVersionForApi(deps: RigServices, grant: AccessGrant, rig: Rig, payload: RigDefinitionEditPayload): Promise<RigVersion>;
+declare function activateRigVersionForApi(deps: RigServices, grant: AccessGrant, rig: Rig, versionId: string): Promise<RigVersion>;
+declare function listRigVersionsForApi(deps: RigServices, workspaceId: string, rigId: string): Promise<RigVersion[]>;
+declare function listRigChangesForApi(deps: RigServices, workspaceId: string, rigId: string, limit?: number): Promise<RigChange[]>;
+
 declare const MARKETING_SOCIAL_PACK_ID = "marketing-social-daily-analysis";
 declare function listCapabilityPacks(): CapabilityPack[];
 declare function getCapabilityPack(packId: string): CapabilityPack | null;
@@ -485,7 +580,7 @@ declare function createValidatedScheduledTask(input: {
     grant: AccessGrant;
     payload: CreateScheduledTaskRequest;
     toolsProvided?: boolean;
-    environmentPreauthorized?: boolean;
+    variableSetPreauthorized?: boolean;
 }): Promise<ScheduledTask>;
 declare function validatedScheduledTaskUpdate(input: {
     settings: Settings;
@@ -552,10 +647,12 @@ declare function createAndStartSession(input: {
     reasoningEffort: Settings["openaiReasoningEffort"];
     sandboxBackend: Settings["sandboxBackend"];
     metadata: Record<string, unknown>;
-    environment?: {
+    variableSet?: {
         id: string;
         name: string;
     } | null;
+    rigId?: string | null;
+    rigVersionId?: string | null;
     goal?: GoalSpec | null;
     instructions?: string | null;
     firstPartyMcpPermissions?: Permission[] | null;
@@ -574,7 +671,7 @@ declare function createAndStartSession(input: {
     id: string;
     workspaceId: string;
     accountId: string;
-    status: "queued" | "running" | "idle" | "requires_action" | "failed" | "cancelled";
+    status: "queued" | "running" | "idle" | "requires_action" | "recovering" | "waiting_capacity" | "failed" | "cancelled";
     initialMessage: string;
     title: string | null;
     titleSource: "user" | "agent" | null;
@@ -585,6 +682,11 @@ declare function createAndStartSession(input: {
         ref: string;
         mountPath?: string | undefined;
         subpath?: string | undefined;
+        provider?: "github" | "gitlab" | "azure_devops" | undefined;
+        repositoryId?: string | number | undefined;
+        installationId?: string | number | undefined;
+        projectId?: string | number | undefined;
+        connectionId?: string | undefined;
         githubInstallationId?: number | undefined;
         githubRepositoryId?: number | undefined;
     } | {
@@ -604,8 +706,11 @@ declare function createAndStartSession(input: {
     sandboxGroupId: string;
     activeSandboxId: string | null;
     activeEpoch: number;
+    variableSetId: string | null;
     environmentId: string | null;
-    firstPartyMcpPermissions: ("account:read" | "account:admin" | "members:manage" | "workspace:create" | "billing:read" | "billing:manage" | "workspace:read" | "workspace:admin" | "sessions:create" | "sessions:read" | "sessions:control" | "stream:view" | "stream:control" | "stream:acknowledge" | "files:upload" | "files:read" | "files:write" | "terminal:attach" | "documents:manage" | "documents:search" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "github:manage" | "github:use" | "api_keys:manage" | "connections:read" | "connections:write" | "environments:manage" | "environments:use" | "mcp_servers:attach" | "toolspace:call" | "goals:manage" | "enrollments:read" | "enrollments:manage")[] | null;
+    rigId: string | null;
+    rigVersionId: string | null;
+    firstPartyMcpPermissions: ("account:read" | "account:admin" | "members:manage" | "workspace:create" | "billing:read" | "billing:manage" | "workspace:read" | "workspace:admin" | "sessions:create" | "sessions:read" | "sessions:control" | "stream:view" | "stream:control" | "stream:acknowledge" | "files:upload" | "files:read" | "files:write" | "terminal:attach" | "documents:manage" | "documents:search" | "scheduled_tasks:manage" | "scheduled_tasks:run" | "github:manage" | "github:use" | "api_keys:manage" | "connections:read" | "connections:write" | "environments:manage" | "environments:use" | "variable-sets:manage" | "variable-sets:use" | "mcp_servers:attach" | "toolspace:call" | "goals:manage" | "enrollments:read" | "enrollments:manage" | "rigs:use" | "rigs:manage")[] | null;
     mcpServers: {
         id: string;
         name: string | null;
@@ -618,11 +723,74 @@ declare function createAndStartSession(input: {
     temporalWorkflowId: string | null;
     activeTurnId: string | null;
     lastInputTokens: number | null;
+    queueVersion: number;
+    queueHeadPosition: number;
+    queueTailPosition: number;
+    effectiveControl: {
+        state: "active" | "paused";
+        controlVersion: number;
+        controlEtag: string;
+        directState: "active" | "paused";
+        primaryBlocker: {
+            kind: "workspace" | "session";
+            displayName: string;
+            actor: string | null;
+            reason: string | null;
+            changedAt: string | null;
+            revision: number;
+            sessionId?: string | undefined;
+        } | null;
+        additionalBlockerCount: number;
+        blockers: {
+            kind: "workspace" | "session";
+            displayName: string;
+            actor: string | null;
+            reason: string | null;
+            changedAt: string | null;
+            revision: number;
+            sessionId?: string | undefined;
+        }[];
+        resumeOptions: {
+            scope: "workspace" | "session" | "selected";
+            selectedStateAfter: "active" | "paused";
+            impactCopy: string;
+            targetId?: string | undefined;
+            remainingPrimaryBlocker?: {
+                kind: "workspace" | "session";
+                displayName: string;
+                actor: string | null;
+                reason: string | null;
+                changedAt: string | null;
+                revision: number;
+                sessionId?: string | undefined;
+            } | undefined;
+        }[];
+        override: {
+            rootSessionId: string;
+            revision: number;
+        } | null;
+        settlement: {
+            state: "stopping";
+            attemptCount: number;
+        } | null;
+    };
     lastSequence: number;
     codexPinnedCredentialId: string | null;
     codexLastCredentialId: string | null;
+    pinned: boolean;
+    pinnedAt: string | null;
+    pinVersion: number;
     createdAt: string;
     updatedAt: string;
+    treeStats?: {
+        directChildren: number;
+        totalDescendants: number;
+        runningDescendants: number;
+        queuedDescendants: number;
+        attentionDescendants: number;
+        pausedDescendants: number;
+        failedDescendants: number;
+    } | undefined;
 }>;
 declare function workflowIdForSession(sessionId: string): string;
 /**
@@ -642,6 +810,18 @@ declare function workflowIdForSession(sessionId: string): string;
  * drift.
  */
 declare function assertConfiguredModel(settings: Settings, model: string | null | undefined): void;
+/**
+ * Reject a model the WORKSPACE's model policy blocks, at the same choke points
+ * as assertConfiguredModel — a 422 at the edge instead of a queued turn the
+ * worker's authoritative post-resolution gate would fail. `model` is the
+ * EFFECTIVE value the caller is about to persist: pass the explicit value at
+ * message/turn-update/scheduled-task edges (omitted inherits an
+ * already-validated stored default), but at session CREATION pass
+ * `payload.model ?? settings.openaiModel` — an omitted model stamps the
+ * deployment default onto the session, and under a restricted policy that
+ * default may be exactly the provider the policy exists to block.
+ */
+declare function assertWorkspaceModelPolicyAllows(db: Database, settings: Settings, workspaceId: string, model: string | null | undefined): Promise<void>;
 declare function requireQueuedTurnForApi(db: Database, workspaceId: string, sessionId: string, turnId: string): Promise<SessionTurn>;
 declare function reasoningEffortForSession(metadata: Record<string, unknown>, fallback: Settings["openaiReasoningEffort"]): Settings["openaiReasoningEffort"];
 /**
@@ -654,7 +834,7 @@ declare function reasoningEffortForSession(metadata: Record<string, unknown>, fa
 declare function postUserMessageTurn(input: {
     db: Database;
     bus: EventBus;
-    workflowClient: SessionWorkflowClient;
+    workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
     settings: Settings;
     accountId: string;
     workspaceId: string;
@@ -666,13 +846,18 @@ declare function postUserMessageTurn(input: {
     reasoningEffort?: Settings["openaiReasoningEffort"] | null;
     clientEventId?: string;
     mcpCredentialUpdates?: UpdateSessionMcpServerCredentialsInput[];
+    delivery?: "send" | "steer";
+    origin?: "human" | "operator";
+    actor?: string;
+    controlEtag?: string | null;
+    expectedDraftRevision?: number | null;
 }): Promise<{
     accepted: SessionEvent;
     turn: SessionTurn;
 }>;
 /**
  * Full create-session flow shared by `POST /sessions` and the first-party MCP
- * `session_create` tool: payload validation, resource/tool/environment
+ * `session_create` tool: payload validation, resource/tool/variableSet
  * checks, usage limits, session start, and usage recording. `rawPayload` is
  * the unparsed request body so absent-vs-empty `tools` keeps its meaning
  * (absent applies the workspace's default capability MCP tools).
@@ -685,7 +870,7 @@ declare function createSessionForRequest(deps: ApiRouteDeps, grant: AccessGrant,
  * enqueue, and usage recording. `toolsProvided: false` applies the
  * workspace's default capability MCP tools, matching an absent `tools` key.
  */
-declare function acceptSessionUserMessage(deps: ApiRouteDeps, grant: AccessGrant, workspaceId: string, sessionId: string, input: {
+declare function acceptSessionUserMessage(deps: AcceptSessionUserMessageDependencies, grant: AccessGrant, workspaceId: string, sessionId: string, input: {
     text: string;
     resources?: ResourceRef[];
     tools?: ToolRef[];
@@ -694,6 +879,10 @@ declare function acceptSessionUserMessage(deps: ApiRouteDeps, grant: AccessGrant
     reasoningEffort?: ReasoningEffort | null;
     clientEventId?: string;
     mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[];
+    delivery?: "send" | "steer";
+    origin?: "human" | "operator";
+    controlEtag?: string | null;
+    expectedDraftRevision?: number | null;
 }): Promise<{
     accepted: SessionEvent;
     turn: SessionTurn;
@@ -714,6 +903,7 @@ declare function updateSessionTitle(deps: {
     updated: boolean;
     title: string | null;
 }>;
+declare function readSessionLineage(db: Database, workspaceId: string, sessionId: string): Promise<_opengeni_db.SessionLineage>;
 
 /** A member can manage other members (directly or via the admin wildcard). */
 declare function memberCanAdminister(member: Pick<WorkspaceMember, "permissions">): boolean;
@@ -749,4 +939,75 @@ declare function assertWorkspaceDeletable(input: {
     activeSessionCount: number;
 }): void;
 
-export { type AccessDeps, type ApiRouteDeps, type ApiSandboxClient, type ApiSandboxSession, type AppDependencies, type ChannelARoutingServices, type DocumentIndexClient, type FleetContext, type FleetListResult, type FleetLiveness, type FleetSandboxEntry, type FleetServices, type FleetSwapResult, type LimitCheckInput, MARKETING_SOCIAL_PACK_ID, MAX_ENVIRONMENTS_PER_WORKSPACE, MAX_VARIABLES_PER_ENVIRONMENT, type ManagedAuth, type McpCapabilityProbe, type McpCapabilityProbeInput, type McpCapabilityProbeResult, type ObjectStorageDependency, type ProvisionResult, type ResumeBoxByIdInput, type ResumedSandboxSession, type RunOnOp, type RunOnResult, type SessionWorkflowClient, acceptSessionUserMessage, applyCapabilityEnablement, assertAllowedEnvironmentVariableName, assertConfiguredModel, assertPackSandboxImageCompatible, assertWorkspaceDeletable, assertWorkspaceMemberRemovable, buildCapabilityCatalog, buildFleetContextForSession, buildMarketingDailyAnalysisAgentConfig, checkLimit, createAndStartSession, createCatalogItem, createSessionForRequest, createValidatedScheduledTask, disableCapability, discoverMcpRegistryCapabilities, enableCapability, enabledCapabilityMcpToolRefs, getCapabilityPack, hasPermission, isBuiltInCapabilityPack, isUserMember, listCapabilityPacks, listFleet, listWorkspaceCapabilityPacks, manualScheduledTaskTriggerUsageKey, manualScheduledTaskTriggerWorkflowId, memberCanAdminister, mergeResourceRefs, normalizeResources, officialMcpRegistryUrl, postUserMessageTurn, provisionSandbox, reasoningEffortForSession, recordEnvironmentAuditEvent, recordWorkspaceUsage, relayConfigFromSettings, relayDialBaseFromSettings, requireAccessContext, requireAccessGrant, requireEnvironmentEncryption, requireEnvironmentForApi, requireLimit, requirePermission, requireQueuedTurnForApi, requireScheduledTaskForApi, resolveCapabilityPack, resolveMemberSubjectId, restoreScheduledTask, routingEnabled, runOnSandbox, scheduledTaskTemporalScheduleId, scheduledTaskToolsProvided, scheduledTaskTriggerToken, settingsWithEnabledCapabilityMcpServers, settingsWithMcpCapabilityServers, settingsWithSessionMcpServerMetadata, swapActiveSandbox, syncCreatedScheduledTask, syncUpdatedScheduledTask, updateSessionTitle, validateEnvironmentAttachment, validateFileResources, validateGitHubRepositorySelection, validateGitHubRepositorySelectionShape, validateMcpCapabilityConnection, validateToolRefs, validatedScheduledTaskUpdate, withDefaultEnabledCapabilityMcpTools, workflowIdForSession, wrapChannelABoxWithRouting };
+type HumanSessionCommandContext = {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    subjectId: string;
+};
+type AgentSessionCommandContext = {
+    accountId: string;
+    workspaceId: string;
+    callerSessionId: string;
+    callerTurnId: string;
+    callerAttemptId: string;
+    callerExecutionGeneration: number;
+};
+declare function sendAgentSessionMessage(deps: {
+    db: Database;
+    bus: EventBus;
+    workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
+}, context: AgentSessionCommandContext, input: {
+    targetSessionId: string;
+    text: string;
+    idempotencyKey: string;
+}): Promise<_opengeni_db.AgentInternalUpdateCommandResult>;
+declare function steerAgentSession(deps: {
+    db: Database;
+    bus: EventBus;
+    workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
+}, context: AgentSessionCommandContext, input: {
+    targetSessionId: string;
+    instruction: string;
+    idempotencyKey: string;
+}): Promise<_opengeni_db.AgentInternalUpdateCommandResult>;
+declare function controlAgentSessionWorkstream(deps: {
+    db: Database;
+    bus: EventBus;
+    workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch">;
+}, context: AgentSessionCommandContext, input: {
+    targetSessionId: string;
+    action: "pause" | "resume";
+    idempotencyKey: string;
+    reason?: string | null;
+}): Promise<_opengeni_db.SessionControlMutationResult>;
+declare function moveHumanQueuePrompt(deps: {
+    db: Database;
+    bus: EventBus;
+}, context: HumanSessionCommandContext, turnId: string, input: MoveSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+declare function deleteHumanQueuePrompt(deps: {
+    db: Database;
+    bus: EventBus;
+}, context: HumanSessionCommandContext, turnId: string, input: DeleteSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+declare function editHumanQueuePrompt(deps: {
+    db: Database;
+    bus: EventBus;
+}, context: HumanSessionCommandContext, turnId: string, input: EditSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+declare function steerHumanQueuePrompt(deps: {
+    db: Database;
+    bus: EventBus;
+}, context: HumanSessionCommandContext, turnId: string, input: SteerSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+declare function controlHumanSessionWorkstream(deps: {
+    db: Database;
+    bus: EventBus;
+    workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch">;
+}, context: HumanSessionCommandContext, input: SessionControlRequest): Promise<SessionControlResponse>;
+declare function controlHumanWorkspace(deps: {
+    db: Database;
+    bus: EventBus;
+    workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch">;
+}, context: Omit<HumanSessionCommandContext, "sessionId">, input: WorkspaceInferenceControlRequest): Promise<WorkspaceInferenceControlResponse>;
+declare function getHumanComposerDraft(db: Database, context: HumanSessionCommandContext): Promise<ComposerDraft>;
+declare function saveHumanComposerDraft(db: Database, context: HumanSessionCommandContext, input: SaveComposerDraftRequest): Promise<ComposerDraft>;
+
+export { type AcceptSessionUserMessageDependencies, type AccessDeps, type AgentSessionCommandContext, type ApiRouteDeps, type ApiSandboxClient, type ApiSandboxSession, type AppDependencies, type ChannelARoutingServices, type DocumentIndexClient, type FleetContext, type FleetListResult, type FleetLiveness, type FleetSandboxEntry, type FleetServices, type FleetSwapResult, type HumanSessionCommandContext, type LimitCheckInput, type LimitDependencies, MARKETING_SOCIAL_PACK_ID, MAX_CHECKS_PER_RIG, MAX_CREDENTIAL_HOOKS_PER_RIG, MAX_DEFAULT_VARIABLE_SETS_PER_RIG, MAX_ENVIRONMENTS_PER_WORKSPACE, MAX_RIGS_PER_WORKSPACE, MAX_VARIABLES_PER_ENVIRONMENT, type ManagedAuth, type McpCapabilityProbe, type McpCapabilityProbeInput, type McpCapabilityProbeResult, type ObjectStorageDependency, type ProvisionResult, type ResumeBoxByIdInput, type ResumedSandboxSession, type RigServices, type RigVerificationClassification, type RunOnOp, type RunOnResult, SESSION_WORKFLOW_WAKE_DISPATCHER_PERIOD_MS, SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID, SESSION_WORKFLOW_WAKE_DISPATCHER_WORKFLOW_TYPE, type SessionWorkflowClient, acceptSessionUserMessage, activateRigVersionForApi, appendRigSetupCommand, applyCapabilityEnablement, assertAllowedEnvironmentVariableName, assertAllowedVariableSetVariableName, assertConfiguredModel, assertPackSandboxImageCompatible, assertWorkspaceDeletable, assertWorkspaceMemberRemovable, assertWorkspaceModelPolicyAllows, buildCapabilityCatalog, buildFleetContextForSession, buildMarketingDailyAnalysisAgentConfig, checkLimit, classifyRigVerificationOutcome, controlAgentSessionWorkstream, controlHumanSessionWorkstream, controlHumanWorkspace, createAndStartSession, createCatalogItem, createRigForApi, createRigVersionForApi, createSessionForRequest, createValidatedScheduledTask, deleteHumanQueuePrompt, deleteRigForApi, disableCapability, discoverMcpRegistryCapabilities, editHumanQueuePrompt, enableCapability, enabledCapabilityMcpToolRefs, getCapabilityPack, getHumanComposerDraft, hasPermission, isBuiltInCapabilityPack, isUserMember, listCapabilityPacks, listFleet, listRigChangesForApi, listRigVersionsForApi, listWorkspaceCapabilityPacks, manualScheduledTaskTriggerUsageKey, manualScheduledTaskTriggerWorkflowId, memberCanAdminister, mergeResourceRefs, moveHumanQueuePrompt, normalizeResources, officialMcpRegistryUrl, postUserMessageTurn, promoteSetupAppendChange, promoteVerifiedDefinitionEditChangeForApi, proposeRigChangeForApi, provisionSandbox, readSessionLineage, reasoningEffortForSession, recordRigAuditEvent, recordVariableSetAuditEvent, recordWorkspaceUsage, relayConfigFromSettings, relayDialBaseFromSettings, requireAccessContext, requireAccessGrant, requireEnvironmentEncryption, requireLimit, requirePermission, requireQueuedTurnForApi, requireRigChangeForApi, requireRigForApi, requireScheduledTaskForApi, requireVariableSetEncryption, requireVariableSetForApi, resolveCapabilityPack, resolveMemberSubjectId, restoreScheduledTask, rigActorForGrant, routingEnabled, runOnSandbox, saveHumanComposerDraft, scheduledTaskTemporalScheduleId, scheduledTaskToolsProvided, scheduledTaskTriggerToken, sendAgentSessionMessage, settingsWithEnabledCapabilityMcpServers, settingsWithMcpCapabilityServers, settingsWithSessionMcpServerMetadata, steerAgentSession, steerHumanQueuePrompt, swapActiveSandbox, syncCreatedScheduledTask, syncUpdatedScheduledTask, updateRigForApi, updateSessionTitle, validateFileResources, validateGitHubRepositorySelection, validateGitHubRepositorySelectionShape, validateMcpCapabilityConnection, validateToolRefs, validateVariableSetAttachment, validatedScheduledTaskUpdate, withDefaultEnabledCapabilityMcpTools, workflowIdForSession, wrapChannelABoxWithRouting };