@opengeni/core 1.0.1 → 2.1.0-canary.0

package/dist/access/index.d.ts

@@ -3,6 +3,18 @@ import { type AccountGrant, type AccessContext, type AccessGrant, type Permissio
 import { type Database } from "@opengeni/db";
 import type { Context } from "hono";
 import type { ManagedAuth } from "../managed-auth-type.js";
+/**
+ * Opaque, request-local proof that the canonical access resolver authorized the
+ * exact account administrator named by the stamp. The random id is audit and
+ * replay provenance only; object identity is what prevents a caller from
+ * manufacturing this proof inside the API process.
+ */
+export type AccountAdminAuthorizationStamp = Readonly<{
+    authorizationId: string;
+    accountId: string;
+    actorSubjectId: string;
+    permission: "account:admin";
+}>;
 export type AccessDeps = {
     db: Database;
     settings: Settings;
@@ -10,13 +22,38 @@ export type AccessDeps = {
 };
 export declare function requireAccessContext(c: Context, deps: AccessDeps): Promise<AccessContext>;
 export declare function requireAccessGrant(c: Context, deps: AccessDeps, workspaceId: string, permission?: Permission): Promise<AccessGrant>;
+/**
+ * Re-resolve the authenticated principal and its current grants without using
+ * the request-local access cache. Long-lived responses use this to ensure a
+ * membership suspension or revocation takes effect while the connection is
+ * still open.
+ */
+export declare function requireFreshAccessGrant(c: Context, deps: AccessDeps, workspaceId: string, permission?: Permission): Promise<AccessGrant>;
 export type AccessGrantAuthorization = {
     grant: AccessGrant;
     accountGrant: AccountGrant | null;
     authenticatedSubjectId: string;
     contextIntegrity: boolean;
+    /**
+     * Did this request authenticate as the canonical managed-cookie (Better Auth)
+     * session that OWNS this grant's subject? The single input to the owner-only
+     * managed personal-workspace exception; see `isCanonicalManagedHumanSession`.
+     * False for every bearer, API-key, delegated, service, local, and configured
+     * principal, and for any future path that does not verify a cookie.
+     */
+    canonicalManagedHumanSession: boolean;
 };
 export declare function accessGrantAuthorizationFromContext(context: AccessContext, grant: AccessGrant): AccessGrantAuthorization;
+/**
+ * Mint the capability passed to an account-admin database lifecycle.
+ *
+ * This deliberately accepts every canonical access mode (managed,
+ * local/configured, and signed delegation). Organization-membership rows are
+ * one possible source of account authority, not the definition of it. A plain
+ * object with matching fields is rejected because only values returned by the
+ * access resolver are present in `resolvedAccessGrantAuthorizations`.
+ */
+export declare function requireAccountAdminAuthorizationStamp(authorization: AccessGrantAuthorization): AccountAdminAuthorizationStamp;
 export declare function requireAccessGrantAuthorization(c: Context, deps: AccessDeps, workspaceId: string, permission?: Permission): Promise<AccessGrantAuthorization>;
 export declare function requirePermission(grant: AccessGrant, permission: Permission): void;
 /**

package/dist/application/new-session-drafts.d.ts

@@ -10,5 +10,12 @@ export declare function getActorNewSessionDraft(deps: Pick<NewSessionDraftDepend
  * draft may represent incomplete options, while no invalid option can become a
  * session without passing that single canonical create boundary.
  */
-export declare function saveActorNewSessionDraft(deps: NewSessionDraftDependencies, grant: AccessGrant, workspaceId: string, rawInput: unknown): Promise<NewSessionDraftValue>;
+export declare function saveActorNewSessionDraft(deps: NewSessionDraftDependencies, grant: AccessGrant, workspaceId: string, rawInput: unknown, 
+/**
+ * `AccessGrantAuthorization.canonicalManagedHumanSession` — did this request
+ * authenticate as the canonical managed cookie that owns `grant.subjectId`?
+ * Defaults to false so every caller that has not proven it fails closed onto
+ * the historical bare-membership fence.
+ */
+canonicalManagedHumanSession?: boolean): Promise<NewSessionDraftValue>;
 export {};

package/dist/application/session-commands.d.ts

@@ -31,12 +31,16 @@ type SessionAuthorizationCommandDeps = {
     db: Database;
     sessionAuthorization?: SessionAuthorizationPort | null;
 };
+type SessionCommandPostCommitDeps = {
+    /** Historical name; now schedules replayable follow-up for every interactive session command. */
+    schedulePromptPostCommit?: ((task: () => Promise<void>) => void) | undefined;
+};
 export declare function sendAgentSessionMessage(deps: {
     db: Database;
     bus: EventBus;
     workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
     sessionAuthorization?: SessionAuthorizationPort | null;
-}, context: AgentSessionCommandContext, input: {
+} & SessionCommandPostCommitDeps, context: AgentSessionCommandContext, input: {
     targetSessionId: string;
     text: string;
     idempotencyKey: string;
@@ -46,7 +50,7 @@ export declare function steerAgentSession(deps: {
     bus: EventBus;
     workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
     sessionAuthorization?: SessionAuthorizationPort | null;
-}, context: AgentSessionCommandContext, input: {
+} & SessionCommandPostCommitDeps, context: AgentSessionCommandContext, input: {
     targetSessionId: string;
     instruction: string;
     idempotencyKey: string;
@@ -54,9 +58,9 @@ export declare function steerAgentSession(deps: {
 export declare function controlAgentSessionWorkstream(deps: {
     db: Database;
     bus: EventBus;
-    workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch">;
+    workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch" | "wakeSessionWorkflow">;
     sessionAuthorization?: SessionAuthorizationPort | null;
-}, context: AgentSessionCommandContext, input: {
+} & SessionCommandPostCommitDeps, context: AgentSessionCommandContext, input: {
     targetSessionId: string;
     action: "pause" | "resume";
     idempotencyKey: string;
@@ -67,6 +71,7 @@ export declare function controlAgentSessionWorkstream(deps: {
     sessionControlEventId: string;
     workspaceControlEventId: string;
     interruptionCount: number;
+    backgroundCommandCount: number;
     wakeCount: number;
     cancelledSessionCount: number;
     cancelledTurnCount: number;
@@ -74,6 +79,7 @@ export declare function controlAgentSessionWorkstream(deps: {
         sessionId: string;
         eventIds: string[];
     }>;
+    workflowWake: import("@opengeni/db").SessionControlWorkflowWake | null;
     replay: boolean;
     authorization: ResolvedSessionAuthorization | null;
 }>;
@@ -81,28 +87,29 @@ export declare function moveHumanQueuePrompt(deps: {
     db: Database;
     bus: EventBus;
     sessionAuthorization?: SessionAuthorizationPort | null;
-}, context: HumanSessionCommandContext, turnId: string, input: MoveSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+} & SessionCommandPostCommitDeps, context: HumanSessionCommandContext, turnId: string, input: MoveSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
 export declare function deleteHumanQueuePrompt(deps: {
     db: Database;
     bus: EventBus;
     sessionAuthorization?: SessionAuthorizationPort | null;
-}, context: HumanSessionCommandContext, turnId: string, input: DeleteSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+} & SessionCommandPostCommitDeps, context: HumanSessionCommandContext, turnId: string, input: DeleteSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
 export declare function editHumanQueuePrompt(deps: {
     db: Database;
     bus: EventBus;
     sessionAuthorization?: SessionAuthorizationPort | null;
-}, context: HumanSessionCommandContext, turnId: string, input: EditSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+} & SessionCommandPostCommitDeps, context: HumanSessionCommandContext, turnId: string, input: EditSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
 export declare function steerHumanQueuePrompt(deps: {
     db: Database;
     bus: EventBus;
+    workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
     sessionAuthorization?: SessionAuthorizationPort | null;
-}, context: HumanSessionCommandContext, turnId: string, input: SteerSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+} & SessionCommandPostCommitDeps, context: HumanSessionCommandContext, turnId: string, input: SteerSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
 export declare function controlHumanSessionWorkstreamWithOutcome(deps: {
     db: Database;
     bus: EventBus;
-    workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch">;
+    workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch" | "wakeSessionWorkflow">;
     sessionAuthorization?: SessionAuthorizationPort | null;
-}, context: HumanSessionCommandContext, input: SessionControlRequest): Promise<{
+} & SessionCommandPostCommitDeps, context: HumanSessionCommandContext, input: SessionControlRequest): Promise<{
     response: SessionControlResponse;
     replay: boolean;
 }>;
@@ -112,7 +119,7 @@ export declare function controlHumanWorkspace(deps: {
     db: Database;
     bus: EventBus;
     workflowClient: Pick<SessionWorkflowClient, "requestSessionWorkflowWakeDispatch">;
-}, context: Omit<HumanSessionCommandContext, "sessionId">, input: WorkspaceInferenceControlRequest): Promise<WorkspaceInferenceControlResponse>;
+} & SessionCommandPostCommitDeps, context: Omit<HumanSessionCommandContext, "sessionId">, input: WorkspaceInferenceControlRequest): Promise<WorkspaceInferenceControlResponse>;
 export declare function getHumanComposerDraft(deps: SessionAuthorizationCommandDeps, context: HumanSessionCommandContext): Promise<ComposerDraft>;
 export declare function saveHumanComposerDraft(deps: SessionAuthorizationCommandDeps, context: HumanSessionCommandContext, input: SaveComposerDraftRequest): Promise<ComposerDraft>;
 export {};

package/dist/application/session-tenancy.d.ts

@@ -0,0 +1,18 @@
+import { ForkSessionResponse, SessionTenancyCreateCapabilities, UpdateSessionVisibilityResponse, type ForkSessionRequest, type SessionAuthorizationSurface, type UpdateSessionVisibilityRequest } from "@opengeni/contracts";
+import { type AccessGrantAuthorization } from "../access/index.js";
+import type { AppDependencies } from "../dependencies.js";
+type SessionTenancyDependencies = Pick<AppDependencies, "db" | "bus" | "sessionAuthorization">;
+export declare class SessionTenancyManagedHumanRequiredError extends Error {
+    readonly name = "SessionTenancyManagedHumanRequiredError";
+    constructor();
+}
+export declare class SessionTenancyPersistenceOutcomeUnknownError extends Error {
+    readonly name = "SessionTenancyPersistenceOutcomeUnknownError";
+    constructor(options?: ErrorOptions);
+}
+export declare function requireCanonicalManagedHuman(authorization: AccessGrantAuthorization, workspaceId: string): void;
+export declare function getManagedHumanSessionCreateCapabilities(deps: Pick<SessionTenancyDependencies, "db">, authorization: AccessGrantAuthorization, workspaceId: string): Promise<SessionTenancyCreateCapabilities>;
+export declare function requireManagedHumanPrivateSessionCreate(deps: Pick<SessionTenancyDependencies, "db">, authorization: AccessGrantAuthorization, workspaceId: string): Promise<void>;
+export declare function updateManagedHumanSessionVisibility(deps: SessionTenancyDependencies, authorization: AccessGrantAuthorization, workspaceId: string, sessionId: string, request: UpdateSessionVisibilityRequest, authorizationSurface?: SessionAuthorizationSurface): Promise<UpdateSessionVisibilityResponse>;
+export declare function forkManagedHumanSession(deps: SessionTenancyDependencies, authorization: AccessGrantAuthorization, workspaceId: string, sourceSessionId: string, request: ForkSessionRequest, authorizationSurface?: SessionAuthorizationSurface): Promise<ForkSessionResponse>;
+export {};

package/dist/application/user-resource-grants.d.ts

@@ -0,0 +1,20 @@
+import type { IssueUserResourceGrantRequest, SessionAuthorizationSurface, UserResourceKind } from "@opengeni/contracts";
+import { type AccessGrantAuthorization } from "../access/index.js";
+import type { AppDependencies } from "../dependencies.js";
+type UserResourceGrantDependencies = Pick<AppDependencies, "db" | "sessionAuthorization">;
+export declare function listManagedHumanUserResourceAuthorities(deps: Pick<UserResourceGrantDependencies, "db">, authorization: AccessGrantAuthorization, workspaceId: string, input: {
+    resourceKind: UserResourceKind;
+    cursor?: string | undefined;
+    limit: number;
+}): Promise<{
+    authorities: import("@opengeni/db").UserResourceAuthoritySummary[];
+    nextCursor: string | null;
+}>;
+export declare function issueManagedHumanUserResourceGrant(deps: UserResourceGrantDependencies, authorization: AccessGrantAuthorization, workspaceId: string, authorityId: string, request: IssueUserResourceGrantRequest, authorizationSurface?: SessionAuthorizationSurface): Promise<import("@opengeni/db").UserResourceAuthorityGrant>;
+export declare function revokeManagedHumanUserResourceGrant(deps: Pick<UserResourceGrantDependencies, "db">, authorization: AccessGrantAuthorization, workspaceId: string, grantId: string): Promise<{
+    grantId: string;
+    generation: number;
+    status: "revoked";
+    revokedAt: string;
+}>;
+export {};

package/dist/{chunk-6WKPWE5S.js → chunk-H7X52RI2.js}

@@ -25,7 +25,7 @@ import {
   editableArtifactSnapshotId,
   editableArtifactStateHash,
   validateEditableArtifactActor
-} from "./chunk-JJU6I5XD.js";
+} from "./chunk-VCZFFEPB.js";
 
 // src/domain/editable-artifacts/durable-export.ts
 import { createHash } from "crypto";
@@ -423,15 +423,13 @@ function validateEditableArtifactMaterializationJob(job) {
 
 // src/domain/editable-artifacts/agent-application.ts
 import { createHash as createHash2 } from "crypto";
-import {
-  COMMITTED_TRANSACTION_PROTOCOL_VERSION,
-  EDITABLE_ARTIFACT_MODEL_SCHEMA_VERSION
-} from "@opengeni/contracts/editable-artifact-versions";
 import {
   DOCUMENT_ARTIFACT_COMMAND_VERSION,
+  EDITABLE_ARTIFACT_INTENT_PROTOCOL_VERSION,
   EDITABLE_ARTIFACT_INTENT_VERSION,
   PRESENTATION_ARTIFACT_COMMAND_VERSION,
   SPREADSHEET_ARTIFACT_COMMAND_VERSION,
+  currentEditableArtifactCompatibility,
   decodeEditableArtifactMutationIntent,
   decodeDocumentArtifactQueryResponse,
   decodePresentationArtifactQueryResponse,
@@ -586,8 +584,8 @@ var EditableArtifactAgentApplication = class {
     }
     const authored = hashEditableArtifactMutationIntent({
       envelopeVersion: EDITABLE_ARTIFACT_INTENT_VERSION,
-      protocolVersion: COMMITTED_TRANSACTION_PROTOCOL_VERSION,
-      modelSchemaVersion: EDITABLE_ARTIFACT_MODEL_SCHEMA_VERSION,
+      protocolVersion: EDITABLE_ARTIFACT_INTENT_PROTOCOL_VERSION,
+      modelSchemaVersion: currentEditableArtifactCompatibility(input.batch.modality).modelSchemaVersion,
       commandProtocolVersion: commandProtocolVersion(input.batch.modality),
       artifactId,
       clientTransactionId,
@@ -738,12 +736,21 @@ function agentContext(input) {
 }
 function encodeCommands(batch) {
   if (batch.modality === "spreadsheet") {
-    return encodeSpreadsheetArtifactCommandBatch({ version: 1, commands: batch.commands });
+    return encodeSpreadsheetArtifactCommandBatch({
+      version: SPREADSHEET_ARTIFACT_COMMAND_VERSION,
+      commands: batch.commands
+    });
   }
   if (batch.modality === "document") {
-    return encodeDocumentArtifactCommandBatch({ version: 1, commands: batch.commands });
+    return encodeDocumentArtifactCommandBatch({
+      version: DOCUMENT_ARTIFACT_COMMAND_VERSION,
+      commands: batch.commands
+    });
   }
-  return encodePresentationArtifactCommandBatch({ version: 1, commands: batch.commands });
+  return encodePresentationArtifactCommandBatch({
+    version: PRESENTATION_ARTIFACT_COMMAND_VERSION,
+    commands: batch.commands
+  });
 }
 function encodeQuery(request) {
   if (request.modality === "spreadsheet") {
@@ -2072,6 +2079,8 @@ function editableArtifactLiveTicketStorePortFromPostgres(store) {
 
 // src/domain/editable-artifacts/snapshot-compaction.ts
 import { BoundedObjectWriteError } from "@opengeni/storage";
+import { EDITABLE_ARTIFACT_CODEC_REGISTRY } from "@opengeni/contracts/editable-artifacts";
+import { COMMITTED_TRANSACTION_PROTOCOL_VERSION } from "@opengeni/contracts/editable-artifact-committed-transaction";
 var SNAPSHOT_MIME_TYPE = "application/vnd.opengeni.editable-artifact-snapshot";
 var EditableArtifactCompactionPipeline = class {
   #dependencies;
@@ -2148,6 +2157,7 @@ function validateBasis(state, scope, artifactId) {
   }
 }
 function validateGenerated(value, state, scope, artifactId) {
+  const currentCodec = EDITABLE_ARTIFACT_CODEC_REGISTRY[value.modality];
   if (value.scope.accountId !== scope.accountId || value.scope.workspaceId !== scope.workspaceId || value.artifactId !== artifactId || value.modality !== state.modality) {
     throw new EditableArtifactSnapshotVerificationError("identity_mismatch");
   }
@@ -2161,8 +2171,7 @@ function validateGenerated(value, state, scope, artifactId) {
     throw new EditableArtifactSnapshotVerificationError("limit_exceeded");
   }
   editableArtifactContentHash(value.canonicalContentHash);
-  const versions = value.modality === "spreadsheet" ? [value.modelSchemaVersion, value.operationProtocolVersion, value.crdtStateVersion] : [value.modelSchemaVersion];
-  if (versions.some((version) => !Number.isSafeInteger(version) || version <= 0)) {
+  if (value.modelSchemaVersion !== currentCodec.modelSchemaVersion || value.modality === "spreadsheet" && (value.operationProtocolVersion !== COMMITTED_TRANSACTION_PROTOCOL_VERSION || value.crdtStateVersion !== currentCodec.snapshotVersion)) {
     throw new EditableArtifactSnapshotVerificationError("version_mismatch");
   }
   try {
@@ -2189,6 +2198,8 @@ function throwIfCancelled(signal) {
 
 // src/domain/editable-artifacts/snapshot-verifier-genesis.ts
 import { BoundedObjectWriteError as BoundedObjectWriteError2 } from "@opengeni/storage";
+import { EDITABLE_ARTIFACT_CODEC_REGISTRY as EDITABLE_ARTIFACT_CODEC_REGISTRY2 } from "@opengeni/contracts/editable-artifacts";
+import { COMMITTED_TRANSACTION_PROTOCOL_VERSION as COMMITTED_TRANSACTION_PROTOCOL_VERSION2 } from "@opengeni/contracts/editable-artifact-committed-transaction";
 var SNAPSHOT_MIME_TYPE2 = "application/vnd.opengeni.editable-artifact-snapshot";
 var EditableArtifactGenesisPipeline = class {
   #dependencies;
@@ -2265,6 +2276,7 @@ var EditableArtifactGenesisPipeline = class {
   }
 };
 function validateGeneratedGenesis(value, scope, artifactId, modality) {
+  const currentCodec = EDITABLE_ARTIFACT_CODEC_REGISTRY2[value.modality];
   if (value.scope.accountId !== scope.accountId || value.scope.workspaceId !== scope.workspaceId || value.artifactId !== artifactId || value.modality !== modality) {
     throw new EditableArtifactSnapshotVerificationError("identity_mismatch");
   }
@@ -2276,11 +2288,8 @@ function validateGeneratedGenesis(value, scope, artifactId, modality) {
   }
   editableArtifactContentHash(value.canonicalContentHash);
   editableArtifactStateHash(value.stateHash);
-  const versions = value.modality === "spreadsheet" ? [value.modelSchemaVersion, value.operationProtocolVersion, value.crdtStateVersion] : [value.modelSchemaVersion];
-  for (const version of versions) {
-    if (!Number.isSafeInteger(version) || version <= 0) {
-      throw new EditableArtifactSnapshotVerificationError("version_mismatch");
-    }
+  if (value.modelSchemaVersion !== currentCodec.modelSchemaVersion || value.modality === "spreadsheet" && (value.operationProtocolVersion !== COMMITTED_TRANSACTION_PROTOCOL_VERSION2 || value.crdtStateVersion !== currentCodec.snapshotVersion)) {
+    throw new EditableArtifactSnapshotVerificationError("version_mismatch");
   }
   try {
     assertBoundedKernelVersion(value.kernelVersion);
@@ -2377,4 +2386,4 @@ export {
   EditableArtifactGenesisPipeline,
   editableArtifactMaterializationKey
 };
-//# sourceMappingURL=chunk-6WKPWE5S.js.map
+//# sourceMappingURL=chunk-H7X52RI2.js.map