@opengeni/core 1.0.1 → 2.1.0-canary.0

package/dist/domain/automations.d.ts

@@ -0,0 +1,51 @@
+import { AutomationAcceptedExecution, AutomationNormalizedEvent, AutomationSessionTemplate, type AutomationAdapterId, type AutomationSource, type AutomationTrigger } from "@opengeni/contracts";
+export type AutomationAdapterRenderResult = {
+    initialMessage: string;
+    sessionTemplate: AutomationSessionTemplate;
+    provenance: Record<string, unknown>;
+};
+export type AutomationAdapter = {
+    id: AutomationAdapterId;
+    verify(input: {
+        rawBody: Uint8Array;
+        headers: Headers;
+        secret: string;
+        sourceConfiguration: Record<string, unknown>;
+    }): boolean;
+    deliveryKey(input: {
+        headers: Headers;
+        requestDigest: string;
+    }): string;
+    normalize(input: {
+        rawBody: Uint8Array;
+        headers: Headers;
+        sourceConfiguration: Record<string, unknown>;
+    }): AutomationNormalizedEvent;
+    validateSourceConfiguration(configuration: Record<string, unknown>): void;
+    validateTriggerConfiguration(configuration: Record<string, unknown>): void;
+    validateTriggerParameters(parameters: Record<string, unknown>): void;
+    matches(input: {
+        event: AutomationNormalizedEvent;
+        trigger: AutomationTrigger;
+    }): boolean;
+    render(input: {
+        event: AutomationNormalizedEvent;
+        trigger: AutomationTrigger;
+        source: Pick<AutomationSource, "id" | "adapterId" | "version" | "configuration">;
+    }): AutomationAdapterRenderResult;
+};
+export declare const SIGNED_JSON_AUTOMATION_ADAPTER_ID: "signed-json.v1";
+export declare const signedJsonAutomationAdapter: AutomationAdapter;
+export declare function registerAutomationAdapter(adapter: AutomationAdapter): void;
+export declare function getAutomationAdapter(adapterId: string): AutomationAdapter | null;
+export declare function requireAutomationAdapter(adapterId: string): AutomationAdapter;
+export declare function automationRequestDigest(adapterId: string, rawBody: Uint8Array): string;
+export declare function buildAutomationAcceptedExecution(input: {
+    accountId: string;
+    workspaceId: string;
+    source: AutomationSource;
+    trigger: AutomationTrigger;
+    eventId: string;
+    event: AutomationNormalizedEvent;
+    render: AutomationAdapterRenderResult;
+}): AutomationAcceptedExecution;

package/dist/domain/company-brain-governed-writes.d.ts

@@ -0,0 +1,70 @@
+import { type CompanyBrainGovernedWriteReceipt as CompanyBrainGovernedWriteReceiptType, type CompanyBrainLearningPolicyRouteReceipt as CompanyBrainLearningPolicyRouteReceiptType, type GovernedLearningActivationDestination, type GovernedLearningActivationReceipt } from "@opengeni/contracts";
+import { type Database, activateGovernedLearningDecision, evaluateGovernedLearningProposal, getOrCreateWorkspaceLearningPolicySnapshot, writeCompanyBrainGovernedProposal } from "@opengeni/db";
+import { type GovernedLearningSlackPublicationResult } from "./governed-learning-slack-publication.js";
+export type CompanyBrainGovernedWriteInput = {
+    attempt: unknown;
+    request: unknown;
+};
+export type CompanyBrainGovernedWriteRouterOptions = {
+    db: Database;
+    authority?: typeof writeCompanyBrainGovernedProposal;
+    learningPolicySnapshot?: typeof getOrCreateWorkspaceLearningPolicySnapshot;
+    /** Governed-learning evaluator (migration 0268). Defaults to the DB capability. */
+    evaluate?: typeof evaluateGovernedLearningProposal;
+    /** Governed-learning activation controller (migration 0269). Defaults to the DB capability. */
+    activate?: typeof activateGovernedLearningDecision;
+    /**
+     * Destinations the router may activate automatically from a final eligible
+     * decision. Defaults to preferences only: mandatory instruction policy keeps
+     * requiring human-authoritative activation even under `automatic`, so its
+     * decision receipt is recorded but the inactive draft stays for review.
+     */
+    automaticDestinations?: ReadonlyArray<GovernedLearningActivationDestination>;
+    /**
+     * Optional post-activation notification sink (Slack publication outbox).
+     * Notification is never authority: failures are swallowed after the
+     * activation receipt is durable and never change the route receipt.
+     */
+    notifyActivation?: (input: {
+        db: Database;
+        receipt: GovernedLearningActivationReceipt;
+        sessionId: string;
+        attemptId: string;
+    }) => Promise<GovernedLearningSlackPublicationResult>;
+};
+export declare const DEFAULT_AUTOMATIC_LEARNING_DESTINATIONS: ReadonlyArray<GovernedLearningActivationDestination>;
+/**
+ * Transport-neutral facade for explicit governed Company Brain proposals.
+ * It intentionally exposes no generic remember call, selector, activation,
+ * rollback token, or personal/organization destination.
+ */
+export declare function createCompanyBrainGovernedWriteRouter(options: CompanyBrainGovernedWriteRouterOptions): {
+    write: (input: CompanyBrainGovernedWriteInput) => Promise<CompanyBrainGovernedWriteReceiptType>;
+};
+/**
+ * Deterministic UUIDv5-shaped operation id derived from the caller's proposal
+ * operation id, so an exact retry of the same write converges on the same
+ * evaluator/activation receipts instead of conflicting.
+ */
+export declare function derivedGovernedLearningOperationId(operationId: string, stage: "evaluation" | "activation"): string;
+/**
+ * Resolve one derived Company Brain write from the immutable policy snapshot
+ * frozen for the exact accepted attempt. The evidence identity is the policy
+ * source identity; callers cannot select another override key to widen the
+ * decision.
+ *
+ * After the proposal commits, a Ways-of-working proposal (instruction policy or
+ * preference, i.e. one that materialized a `knowledge_change_proposals` row) is
+ * evaluated by the governed-learning evaluator against the same accepted
+ * snapshot. `suggest` records the content-free decision receipt only. Under
+ * `automatic`, a final `automaticEligible` receipt is handed to the activation
+ * controller, which revalidates current authority and applies the change only
+ * through the destination-owned lifecycle. By default only preferences may
+ * activate automatically; mandatory instruction policy always keeps a human
+ * activation boundary. Evaluation or activation failure
+ * never rolls back the durable proposal; it is reported as a bounded
+ * `learningFailure` and the proposal remains for human review.
+ */
+export declare function createCompanyBrainLearningPolicyRouter(options: CompanyBrainGovernedWriteRouterOptions): {
+    write: (input: CompanyBrainGovernedWriteInput) => Promise<CompanyBrainLearningPolicyRouteReceiptType>;
+};

package/dist/domain/company-profile-agent-admin.d.ts

@@ -0,0 +1,24 @@
+import { type CompanyProfileAgentConfirmationReceipt, type CompanyProfileAgentProposalReceipt } from "@opengeni/contracts";
+import { confirmCompanyProfileForAgent, proposeCompanyProfileForAgent, type Database } from "@opengeni/db";
+export { CompanyProfileAgentAdminError } from "@opengeni/db";
+export type CompanyProfileAgentAdminRouterOptions = {
+    db: Database;
+    propose?: typeof proposeCompanyProfileForAgent;
+    confirm?: typeof confirmCompanyProfileForAgent;
+};
+/**
+ * Explicit organization administration is intentionally separate from derived
+ * workspace learning. The database capabilities own exact-attempt admission,
+ * current organization-owner authority, canonical human confirmation,
+ * tenant isolation, CAS, and immutable receipts.
+ */
+export declare function createCompanyProfileAgentAdminRouter(options: CompanyProfileAgentAdminRouterOptions): {
+    propose: (input: {
+        attempt: unknown;
+        request: unknown;
+    }) => Promise<CompanyProfileAgentProposalReceipt>;
+    confirm: (input: {
+        attempt: unknown;
+        request: unknown;
+    }) => Promise<CompanyProfileAgentConfirmationReceipt>;
+};

package/dist/domain/connection-authority.d.ts

@@ -0,0 +1,97 @@
+import type { ConnectionKind, ConnectionStatus, SessionTenancyVisibility, UserResourceGrantMode, UserResourceGrantStatus } from "@opengeni/contracts";
+import { ConnectionUseAuthoritySnapshot, type ConnectionUseAuthorizationResult, type ConnectionUseSelectionSource } from "@opengeni/contracts/connection-authority";
+export type ConnectionAuthorityCandidate = {
+    id: string;
+    organizationId: string;
+    workspaceId: string;
+    generation: number;
+    status: ConnectionStatus;
+    providerDomain: string;
+    kind: ConnectionKind;
+    subjectId: string | null;
+    ownerOrganizationMembershipId: string | null;
+};
+export type UserConnectionAuthorityCandidate = {
+    id: string;
+    organizationId: string;
+    resourceKind: "connection";
+    resourceId: string;
+    originWorkspaceId: string;
+    ownerSubjectId: string;
+    ownerOrganizationMembershipId: string;
+    ownerMembershipAuthorizationRevision: number;
+    generation: number;
+    status: "active" | "retained" | "revoked";
+};
+export declare class ConnectionAuthorityInvariantError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export declare function captureConnectionUseAuthority(input: {
+    organizationId: string;
+    targetWorkspaceId: string;
+    targetSessionId: string;
+    targetSessionVisibility: SessionTenancyVisibility;
+    targetSessionAuthorityEpoch: number;
+    acceptedWork: {
+        kind: "turn";
+        turnId: string;
+    } | {
+        kind: "scheduled_task";
+        taskId: string;
+        taskAuthorityRevision: number;
+        runId: string;
+    };
+    connection: ConnectionAuthorityCandidate;
+    authority?: unknown;
+    authorityWasOmitted?: boolean;
+    userAuthority?: UserConnectionAuthorityCandidate | null;
+    selectionSources: ConnectionUseSelectionSource[];
+}): ConnectionUseAuthoritySnapshot;
+export type LiveConnectionUseState = {
+    organizationId: string;
+    targetWorkspaceId: string;
+    targetWorkspaceAccessActive: boolean;
+    session: {
+        id: string;
+        organizationId: string;
+        workspaceId: string;
+        visibility: SessionTenancyVisibility;
+        authorityEpoch: number;
+        active: boolean;
+    };
+    connection: ConnectionAuthorityCandidate | null;
+    ownerMembership: {
+        id: string;
+        organizationId: string;
+        subjectId: string;
+        status: "provisioning" | "active" | "suspended" | "revoked";
+        authorizationRevision: number;
+    } | null;
+    userAuthority: UserConnectionAuthorityCandidate | null;
+    grant: {
+        id: string;
+        authorityId: string;
+        organizationId: string;
+        workspaceId: string;
+        sessionId: string | null;
+        action: string;
+        mode: UserResourceGrantMode;
+        context: SessionTenancyVisibility;
+        authorityEpoch: number | null;
+        generation: number;
+        status: UserResourceGrantStatus;
+        expiresAt: string | null;
+        consumed: boolean;
+    } | null;
+};
+/**
+ * Revalidates every mutable fence immediately before provider use. Callers must
+ * resolve the live state in one DB authority boundary; this pure function does
+ * not cache, refresh, decrypt, or invoke a provider.
+ */
+export declare function revalidateConnectionUseAuthority(input: {
+    snapshot: ConnectionUseAuthoritySnapshot;
+    live: LiveConnectionUseState;
+    now?: Date;
+}): ConnectionUseAuthorizationResult;

package/dist/domain/connection-authority.js

@@ -0,0 +1,169 @@
+// src/domain/connection-authority.ts
+import {
+  ConnectionAuthorityEnvelope,
+  ConnectionUseAttribution,
+  ConnectionUseAuthoritySnapshot
+} from "@opengeni/contracts/connection-authority";
+var ConnectionAuthorityInvariantError = class extends Error {
+  constructor(code) {
+    super(`connection authority invariant failed: ${code}`);
+    this.code = code;
+    this.name = "ConnectionAuthorityInvariantError";
+  }
+};
+function captureConnectionUseAuthority(input) {
+  const authority = ConnectionAuthorityEnvelope.parse(input.authority ?? {});
+  const connection = input.connection;
+  if (connection.organizationId !== input.organizationId) {
+    throw new ConnectionAuthorityInvariantError("tenant_mismatch");
+  }
+  if (connection.status !== "active") {
+    throw new ConnectionAuthorityInvariantError("connection_status_inactive");
+  }
+  let authoritySource;
+  let userDelegation = null;
+  if (authority.scope === "workspace") {
+    if (connection.subjectId !== null || connection.ownerOrganizationMembershipId !== null) {
+      throw new ConnectionAuthorityInvariantError("workspace_borrowed_personal_connection");
+    }
+    if (connection.workspaceId !== input.targetWorkspaceId) {
+      throw new ConnectionAuthorityInvariantError("workspace_connection_scope_mismatch");
+    }
+    authoritySource = input.authorityWasOmitted ? "legacy_workspace_omission" : "explicit_workspace";
+  } else {
+    const delegation = authority.userDelegation;
+    const resourceAuthority = input.userAuthority;
+    if (!delegation || !resourceAuthority) {
+      throw new ConnectionAuthorityInvariantError("user_authority_missing");
+    }
+    if (!connection.subjectId || !connection.ownerOrganizationMembershipId) {
+      throw new ConnectionAuthorityInvariantError("personal_owner_missing");
+    }
+    if (resourceAuthority.id !== delegation.authorityId || resourceAuthority.organizationId !== input.organizationId || resourceAuthority.resourceKind !== "connection" || resourceAuthority.resourceId !== connection.id || resourceAuthority.originWorkspaceId !== connection.workspaceId || resourceAuthority.ownerSubjectId !== connection.subjectId || resourceAuthority.ownerOrganizationMembershipId !== connection.ownerOrganizationMembershipId || resourceAuthority.generation !== delegation.authorityGeneration || resourceAuthority.status !== "active") {
+      throw new ConnectionAuthorityInvariantError("user_authority_mismatch");
+    }
+    userDelegation = delegation;
+    authoritySource = "user_delegation";
+  }
+  return ConnectionUseAuthoritySnapshot.parse({
+    organizationId: input.organizationId,
+    originWorkspaceId: connection.workspaceId,
+    targetWorkspaceId: input.targetWorkspaceId,
+    targetSessionId: input.targetSessionId,
+    targetSessionVisibility: input.targetSessionVisibility,
+    targetSessionAuthorityEpoch: input.targetSessionAuthorityEpoch,
+    acceptedWork: input.acceptedWork,
+    connectionId: connection.id,
+    connectionGeneration: connection.generation,
+    connectionStatus: "active",
+    providerDomain: connection.providerDomain.toLowerCase(),
+    connectionKind: connection.kind,
+    scope: authority.scope,
+    ownerSubjectId: connection.subjectId,
+    ownerOrganizationMembershipId: connection.ownerOrganizationMembershipId,
+    ownerMembershipAuthorizationRevision: authority.scope === "user" ? input.userAuthority.ownerMembershipAuthorizationRevision : null,
+    authoritySource,
+    selectionSources: input.selectionSources,
+    userDelegation
+  });
+}
+function denied(reason) {
+  return { status: "denied", reason };
+}
+function revalidateConnectionUseAuthority(input) {
+  const snapshot = ConnectionUseAuthoritySnapshot.parse(input.snapshot);
+  const live = input.live;
+  const now = input.now ?? /* @__PURE__ */ new Date();
+  if (live.organizationId !== snapshot.organizationId || live.targetWorkspaceId !== snapshot.targetWorkspaceId) {
+    return denied("tenant_mismatch");
+  }
+  if (!live.targetWorkspaceAccessActive) return denied("workspace_access_inactive");
+  if (!live.session.active) return denied("session_inactive");
+  if (live.session.id !== snapshot.targetSessionId || live.session.organizationId !== snapshot.organizationId || live.session.workspaceId !== snapshot.targetWorkspaceId) {
+    return denied("session_identity_changed");
+  }
+  if (live.session.visibility !== snapshot.targetSessionVisibility) {
+    return denied("session_visibility_changed");
+  }
+  if (live.session.authorityEpoch !== snapshot.targetSessionAuthorityEpoch) {
+    return denied("session_authority_epoch_changed");
+  }
+  const connection = live.connection;
+  if (!connection) return denied("connection_missing");
+  if (connection.id !== snapshot.connectionId || connection.organizationId !== snapshot.organizationId || connection.workspaceId !== snapshot.originWorkspaceId || connection.providerDomain.toLowerCase() !== snapshot.providerDomain || connection.kind !== snapshot.connectionKind) {
+    return denied("connection_identity_changed");
+  }
+  if (connection.generation !== snapshot.connectionGeneration) {
+    return denied("connection_generation_changed");
+  }
+  if (connection.status !== "active") return denied("connection_status_inactive");
+  if (connection.subjectId !== snapshot.ownerSubjectId || connection.ownerOrganizationMembershipId !== snapshot.ownerOrganizationMembershipId) {
+    return denied("connection_owner_changed");
+  }
+  if (snapshot.scope === "workspace") {
+    if (connection.subjectId !== null || connection.workspaceId !== snapshot.targetWorkspaceId) {
+      return denied("connection_owner_changed");
+    }
+    return {
+      status: "authorized",
+      attribution: ConnectionUseAttribution.parse({
+        organizationId: snapshot.organizationId,
+        workspaceId: snapshot.targetWorkspaceId,
+        sessionId: snapshot.targetSessionId,
+        connectionId: snapshot.connectionId,
+        connectionGeneration: snapshot.connectionGeneration,
+        scope: "workspace",
+        ownerSubjectId: null,
+        authorityId: null,
+        grantId: null
+      })
+    };
+  }
+  const delegation = snapshot.userDelegation;
+  const membership = live.ownerMembership;
+  if (!membership || membership.status !== "active" || membership.id !== snapshot.ownerOrganizationMembershipId || membership.organizationId !== snapshot.organizationId || membership.subjectId !== snapshot.ownerSubjectId || membership.authorizationRevision !== snapshot.ownerMembershipAuthorizationRevision) {
+    return denied("owner_membership_inactive");
+  }
+  const authority = live.userAuthority;
+  if (!authority) return denied("authority_missing");
+  if (authority.id !== delegation.authorityId || authority.organizationId !== snapshot.organizationId || authority.resourceKind !== "connection" || authority.resourceId !== snapshot.connectionId || authority.originWorkspaceId !== snapshot.originWorkspaceId || authority.ownerSubjectId !== snapshot.ownerSubjectId || authority.ownerOrganizationMembershipId !== snapshot.ownerOrganizationMembershipId) {
+    return denied("authority_identity_changed");
+  }
+  if (authority.generation !== delegation.authorityGeneration) {
+    return denied("authority_generation_changed");
+  }
+  if (authority.status !== "active") return denied("authority_status_inactive");
+  const grant = live.grant;
+  if (!grant) return denied("grant_missing");
+  if (grant.id !== delegation.grantId || grant.authorityId !== delegation.authorityId || grant.organizationId !== snapshot.organizationId || grant.workspaceId !== snapshot.targetWorkspaceId || grant.sessionId !== delegation.sessionId || grant.action !== "connection.use" || grant.mode !== delegation.mode || grant.context !== snapshot.targetSessionVisibility || grant.authorityEpoch !== delegation.authorityEpoch) {
+    return denied("grant_identity_changed");
+  }
+  if (grant.generation !== delegation.grantGeneration) {
+    return denied("grant_generation_changed");
+  }
+  if (grant.status !== "active") return denied("grant_status_inactive");
+  if (grant.expiresAt !== null && Date.parse(grant.expiresAt) <= now.getTime()) {
+    return denied("grant_expired");
+  }
+  if (grant.mode === "once" && grant.consumed) return denied("grant_already_consumed");
+  return {
+    status: "authorized",
+    attribution: ConnectionUseAttribution.parse({
+      organizationId: snapshot.organizationId,
+      workspaceId: snapshot.targetWorkspaceId,
+      sessionId: snapshot.targetSessionId,
+      connectionId: snapshot.connectionId,
+      connectionGeneration: snapshot.connectionGeneration,
+      scope: "user",
+      ownerSubjectId: snapshot.ownerSubjectId,
+      authorityId: delegation.authorityId,
+      grantId: delegation.grantId
+    })
+  };
+}
+export {
+  ConnectionAuthorityInvariantError,
+  captureConnectionUseAuthority,
+  revalidateConnectionUseAuthority
+};
+//# sourceMappingURL=connection-authority.js.map

package/dist/domain/connection-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/domain/connection-authority.ts"],"sourcesContent":["import type {\n  ConnectionKind,\n  ConnectionStatus,\n  SessionTenancyVisibility,\n  UserResourceDelegation,\n  UserResourceGrantMode,\n  UserResourceGrantStatus,\n} from \"@opengeni/contracts\";\nimport {\n  ConnectionAuthorityEnvelope,\n  ConnectionUseAttribution,\n  ConnectionUseAuthoritySnapshot,\n  type ConnectionUseAuthorizationResult,\n  type ConnectionAuthoritySelectionSource,\n  type ConnectionUseDenialReason,\n  type ConnectionUseSelectionSource,\n} from \"@opengeni/contracts/connection-authority\";\n\nexport type ConnectionAuthorityCandidate = {\n  id: string;\n  organizationId: string;\n  workspaceId: string;\n  generation: number;\n  status: ConnectionStatus;\n  providerDomain: string;\n  kind: ConnectionKind;\n  subjectId: string | null;\n  ownerOrganizationMembershipId: string | null;\n};\n\nexport type UserConnectionAuthorityCandidate = {\n  id: string;\n  organizationId: string;\n  resourceKind: \"connection\";\n  resourceId: string;\n  originWorkspaceId: string;\n  ownerSubjectId: string;\n  ownerOrganizationMembershipId: string;\n  ownerMembershipAuthorizationRevision: number;\n  generation: number;\n  status: \"active\" | \"retained\" | \"revoked\";\n};\n\nexport class ConnectionAuthorityInvariantError extends Error {\n  constructor(readonly code: string) {\n    super(`connection authority invariant failed: ${code}`);\n    this.name = \"ConnectionAuthorityInvariantError\";\n  }\n}\n\nexport function captureConnectionUseAuthority(input: {\n  organizationId: string;\n  targetWorkspaceId: string;\n  targetSessionId: string;\n  targetSessionVisibility: SessionTenancyVisibility;\n  targetSessionAuthorityEpoch: number;\n  acceptedWork:\n    | { kind: \"turn\"; turnId: string }\n    | {\n        kind: \"scheduled_task\";\n        taskId: string;\n        taskAuthorityRevision: number;\n        runId: string;\n      };\n  connection: ConnectionAuthorityCandidate;\n  authority?: unknown;\n  authorityWasOmitted?: boolean;\n  userAuthority?: UserConnectionAuthorityCandidate | null;\n  selectionSources: ConnectionUseSelectionSource[];\n}): ConnectionUseAuthoritySnapshot {\n  const authority = ConnectionAuthorityEnvelope.parse(input.authority ?? {});\n  const connection = input.connection;\n  if (connection.organizationId !== input.organizationId) {\n    throw new ConnectionAuthorityInvariantError(\"tenant_mismatch\");\n  }\n  if (connection.status !== \"active\") {\n    throw new ConnectionAuthorityInvariantError(\"connection_status_inactive\");\n  }\n\n  let authoritySource: ConnectionAuthoritySelectionSource;\n  let userDelegation: UserResourceDelegation | null = null;\n  if (authority.scope === \"workspace\") {\n    if (connection.subjectId !== null || connection.ownerOrganizationMembershipId !== null) {\n      throw new ConnectionAuthorityInvariantError(\"workspace_borrowed_personal_connection\");\n    }\n    if (connection.workspaceId !== input.targetWorkspaceId) {\n      throw new ConnectionAuthorityInvariantError(\"workspace_connection_scope_mismatch\");\n    }\n    authoritySource = input.authorityWasOmitted\n      ? \"legacy_workspace_omission\"\n      : \"explicit_workspace\";\n  } else {\n    const delegation = authority.userDelegation;\n    const resourceAuthority = input.userAuthority;\n    if (!delegation || !resourceAuthority) {\n      throw new ConnectionAuthorityInvariantError(\"user_authority_missing\");\n    }\n    if (!connection.subjectId || !connection.ownerOrganizationMembershipId) {\n      throw new ConnectionAuthorityInvariantError(\"personal_owner_missing\");\n    }\n    if (\n      resourceAuthority.id !== delegation.authorityId ||\n      resourceAuthority.organizationId !== input.organizationId ||\n      resourceAuthority.resourceKind !== \"connection\" ||\n      resourceAuthority.resourceId !== connection.id ||\n      resourceAuthority.originWorkspaceId !== connection.workspaceId ||\n      resourceAuthority.ownerSubjectId !== connection.subjectId ||\n      resourceAuthority.ownerOrganizationMembershipId !==\n        connection.ownerOrganizationMembershipId ||\n      resourceAuthority.generation !== delegation.authorityGeneration ||\n      resourceAuthority.status !== \"active\"\n    ) {\n      throw new ConnectionAuthorityInvariantError(\"user_authority_mismatch\");\n    }\n    userDelegation = delegation;\n    authoritySource = \"user_delegation\";\n  }\n\n  return ConnectionUseAuthoritySnapshot.parse({\n    organizationId: input.organizationId,\n    originWorkspaceId: connection.workspaceId,\n    targetWorkspaceId: input.targetWorkspaceId,\n    targetSessionId: input.targetSessionId,\n    targetSessionVisibility: input.targetSessionVisibility,\n    targetSessionAuthorityEpoch: input.targetSessionAuthorityEpoch,\n    acceptedWork: input.acceptedWork,\n    connectionId: connection.id,\n    connectionGeneration: connection.generation,\n    connectionStatus: \"active\",\n    providerDomain: connection.providerDomain.toLowerCase(),\n    connectionKind: connection.kind,\n    scope: authority.scope,\n    ownerSubjectId: connection.subjectId,\n    ownerOrganizationMembershipId: connection.ownerOrganizationMembershipId,\n    ownerMembershipAuthorizationRevision:\n      authority.scope === \"user\" ? input.userAuthority!.ownerMembershipAuthorizationRevision : null,\n    authoritySource,\n    selectionSources: input.selectionSources,\n    userDelegation,\n  });\n}\n\nexport type LiveConnectionUseState = {\n  organizationId: string;\n  targetWorkspaceId: string;\n  targetWorkspaceAccessActive: boolean;\n  session: {\n    id: string;\n    organizationId: string;\n    workspaceId: string;\n    visibility: SessionTenancyVisibility;\n    authorityEpoch: number;\n    active: boolean;\n  };\n  connection: ConnectionAuthorityCandidate | null;\n  ownerMembership: {\n    id: string;\n    organizationId: string;\n    subjectId: string;\n    status: \"provisioning\" | \"active\" | \"suspended\" | \"revoked\";\n    authorizationRevision: number;\n  } | null;\n  userAuthority: UserConnectionAuthorityCandidate | null;\n  grant: {\n    id: string;\n    authorityId: string;\n    organizationId: string;\n    workspaceId: string;\n    sessionId: string | null;\n    action: string;\n    mode: UserResourceGrantMode;\n    context: SessionTenancyVisibility;\n    authorityEpoch: number | null;\n    generation: number;\n    status: UserResourceGrantStatus;\n    expiresAt: string | null;\n    consumed: boolean;\n  } | null;\n};\n\nfunction denied(reason: ConnectionUseDenialReason): ConnectionUseAuthorizationResult {\n  return { status: \"denied\", reason };\n}\n\n/**\n * Revalidates every mutable fence immediately before provider use. Callers must\n * resolve the live state in one DB authority boundary; this pure function does\n * not cache, refresh, decrypt, or invoke a provider.\n */\nexport function revalidateConnectionUseAuthority(input: {\n  snapshot: ConnectionUseAuthoritySnapshot;\n  live: LiveConnectionUseState;\n  now?: Date;\n}): ConnectionUseAuthorizationResult {\n  const snapshot = ConnectionUseAuthoritySnapshot.parse(input.snapshot);\n  const live = input.live;\n  const now = input.now ?? new Date();\n  if (\n    live.organizationId !== snapshot.organizationId ||\n    live.targetWorkspaceId !== snapshot.targetWorkspaceId\n  ) {\n    return denied(\"tenant_mismatch\");\n  }\n  if (!live.targetWorkspaceAccessActive) return denied(\"workspace_access_inactive\");\n  if (!live.session.active) return denied(\"session_inactive\");\n  if (\n    live.session.id !== snapshot.targetSessionId ||\n    live.session.organizationId !== snapshot.organizationId ||\n    live.session.workspaceId !== snapshot.targetWorkspaceId\n  ) {\n    return denied(\"session_identity_changed\");\n  }\n  if (live.session.visibility !== snapshot.targetSessionVisibility) {\n    return denied(\"session_visibility_changed\");\n  }\n  if (live.session.authorityEpoch !== snapshot.targetSessionAuthorityEpoch) {\n    return denied(\"session_authority_epoch_changed\");\n  }\n  const connection = live.connection;\n  if (!connection) return denied(\"connection_missing\");\n  if (\n    connection.id !== snapshot.connectionId ||\n    connection.organizationId !== snapshot.organizationId ||\n    connection.workspaceId !== snapshot.originWorkspaceId ||\n    connection.providerDomain.toLowerCase() !== snapshot.providerDomain ||\n    connection.kind !== snapshot.connectionKind\n  ) {\n    return denied(\"connection_identity_changed\");\n  }\n  if (connection.generation !== snapshot.connectionGeneration) {\n    return denied(\"connection_generation_changed\");\n  }\n  if (connection.status !== \"active\") return denied(\"connection_status_inactive\");\n  if (\n    connection.subjectId !== snapshot.ownerSubjectId ||\n    connection.ownerOrganizationMembershipId !== snapshot.ownerOrganizationMembershipId\n  ) {\n    return denied(\"connection_owner_changed\");\n  }\n\n  if (snapshot.scope === \"workspace\") {\n    if (connection.subjectId !== null || connection.workspaceId !== snapshot.targetWorkspaceId) {\n      return denied(\"connection_owner_changed\");\n    }\n    return {\n      status: \"authorized\",\n      attribution: ConnectionUseAttribution.parse({\n        organizationId: snapshot.organizationId,\n        workspaceId: snapshot.targetWorkspaceId,\n        sessionId: snapshot.targetSessionId,\n        connectionId: snapshot.connectionId,\n        connectionGeneration: snapshot.connectionGeneration,\n        scope: \"workspace\",\n        ownerSubjectId: null,\n        authorityId: null,\n        grantId: null,\n      }),\n    };\n  }\n\n  const delegation = snapshot.userDelegation!;\n  const membership = live.ownerMembership;\n  if (\n    !membership ||\n    membership.status !== \"active\" ||\n    membership.id !== snapshot.ownerOrganizationMembershipId ||\n    membership.organizationId !== snapshot.organizationId ||\n    membership.subjectId !== snapshot.ownerSubjectId ||\n    membership.authorizationRevision !== snapshot.ownerMembershipAuthorizationRevision\n  ) {\n    return denied(\"owner_membership_inactive\");\n  }\n  const authority = live.userAuthority;\n  if (!authority) return denied(\"authority_missing\");\n  if (\n    authority.id !== delegation.authorityId ||\n    authority.organizationId !== snapshot.organizationId ||\n    authority.resourceKind !== \"connection\" ||\n    authority.resourceId !== snapshot.connectionId ||\n    authority.originWorkspaceId !== snapshot.originWorkspaceId ||\n    authority.ownerSubjectId !== snapshot.ownerSubjectId ||\n    authority.ownerOrganizationMembershipId !== snapshot.ownerOrganizationMembershipId\n  ) {\n    return denied(\"authority_identity_changed\");\n  }\n  if (authority.generation !== delegation.authorityGeneration) {\n    return denied(\"authority_generation_changed\");\n  }\n  if (authority.status !== \"active\") return denied(\"authority_status_inactive\");\n\n  const grant = live.grant;\n  if (!grant) return denied(\"grant_missing\");\n  if (\n    grant.id !== delegation.grantId ||\n    grant.authorityId !== delegation.authorityId ||\n    grant.organizationId !== snapshot.organizationId ||\n    grant.workspaceId !== snapshot.targetWorkspaceId ||\n    grant.sessionId !== delegation.sessionId ||\n    grant.action !== \"connection.use\" ||\n    grant.mode !== delegation.mode ||\n    grant.context !== snapshot.targetSessionVisibility ||\n    grant.authorityEpoch !== delegation.authorityEpoch\n  ) {\n    return denied(\"grant_identity_changed\");\n  }\n  if (grant.generation !== delegation.grantGeneration) {\n    return denied(\"grant_generation_changed\");\n  }\n  if (grant.status !== \"active\") return denied(\"grant_status_inactive\");\n  if (grant.expiresAt !== null && Date.parse(grant.expiresAt) <= now.getTime()) {\n    return denied(\"grant_expired\");\n  }\n  if (grant.mode === \"once\" && grant.consumed) return denied(\"grant_already_consumed\");\n\n  return {\n    status: \"authorized\",\n    attribution: ConnectionUseAttribution.parse({\n      organizationId: snapshot.organizationId,\n      workspaceId: snapshot.targetWorkspaceId,\n      sessionId: snapshot.targetSessionId,\n      connectionId: snapshot.connectionId,\n      connectionGeneration: snapshot.connectionGeneration,\n      scope: \"user\",\n      ownerSubjectId: snapshot.ownerSubjectId,\n      authorityId: delegation.authorityId,\n      grantId: delegation.grantId,\n    }),\n  };\n}\n"],"mappings":";AAQA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AA2BA,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAC3D,YAAqB,MAAc;AACjC,UAAM,0CAA0C,IAAI,EAAE;AADnC;AAEnB,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,8BAA8B,OAmBX;AACjC,QAAM,YAAY,4BAA4B,MAAM,MAAM,aAAa,CAAC,CAAC;AACzE,QAAM,aAAa,MAAM;AACzB,MAAI,WAAW,mBAAmB,MAAM,gBAAgB;AACtD,UAAM,IAAI,kCAAkC,iBAAiB;AAAA,EAC/D;AACA,MAAI,WAAW,WAAW,UAAU;AAClC,UAAM,IAAI,kCAAkC,4BAA4B;AAAA,EAC1E;AAEA,MAAI;AACJ,MAAI,iBAAgD;AACpD,MAAI,UAAU,UAAU,aAAa;AACnC,QAAI,WAAW,cAAc,QAAQ,WAAW,kCAAkC,MAAM;AACtF,YAAM,IAAI,kCAAkC,wCAAwC;AAAA,IACtF;AACA,QAAI,WAAW,gBAAgB,MAAM,mBAAmB;AACtD,YAAM,IAAI,kCAAkC,qCAAqC;AAAA,IACnF;AACA,sBAAkB,MAAM,sBACpB,8BACA;AAAA,EACN,OAAO;AACL,UAAM,aAAa,UAAU;AAC7B,UAAM,oBAAoB,MAAM;AAChC,QAAI,CAAC,cAAc,CAAC,mBAAmB;AACrC,YAAM,IAAI,kCAAkC,wBAAwB;AAAA,IACtE;AACA,QAAI,CAAC,WAAW,aAAa,CAAC,WAAW,+BAA+B;AACtE,YAAM,IAAI,kCAAkC,wBAAwB;AAAA,IACtE;AACA,QACE,kBAAkB,OAAO,WAAW,eACpC,kBAAkB,mBAAmB,MAAM,kBAC3C,kBAAkB,iBAAiB,gBACnC,kBAAkB,eAAe,WAAW,MAC5C,kBAAkB,sBAAsB,WAAW,eACnD,kBAAkB,mBAAmB,WAAW,aAChD,kBAAkB,kCAChB,WAAW,iCACb,kBAAkB,eAAe,WAAW,uBAC5C,kBAAkB,WAAW,UAC7B;AACA,YAAM,IAAI,kCAAkC,yBAAyB;AAAA,IACvE;AACA,qBAAiB;AACjB,sBAAkB;AAAA,EACpB;AAEA,SAAO,+BAA+B,MAAM;AAAA,IAC1C,gBAAgB,MAAM;AAAA,IACtB,mBAAmB,WAAW;AAAA,IAC9B,mBAAmB,MAAM;AAAA,IACzB,iBAAiB,MAAM;AAAA,IACvB,yBAAyB,MAAM;AAAA,IAC/B,6BAA6B,MAAM;AAAA,IACnC,cAAc,MAAM;AAAA,IACpB,cAAc,WAAW;AAAA,IACzB,sBAAsB,WAAW;AAAA,IACjC,kBAAkB;AAAA,IAClB,gBAAgB,WAAW,eAAe,YAAY;AAAA,IACtD,gBAAgB,WAAW;AAAA,IAC3B,OAAO,UAAU;AAAA,IACjB,gBAAgB,WAAW;AAAA,IAC3B,+BAA+B,WAAW;AAAA,IAC1C,sCACE,UAAU,UAAU,SAAS,MAAM,cAAe,uCAAuC;AAAA,IAC3F;AAAA,IACA,kBAAkB,MAAM;AAAA,IACxB;AAAA,EACF,CAAC;AACH;AAwCA,SAAS,OAAO,QAAqE;AACnF,SAAO,EAAE,QAAQ,UAAU,OAAO;AACpC;AAOO,SAAS,iCAAiC,OAIZ;AACnC,QAAM,WAAW,+BAA+B,MAAM,MAAM,QAAQ;AACpE,QAAM,OAAO,MAAM;AACnB,QAAM,MAAM,MAAM,OAAO,oBAAI,KAAK;AAClC,MACE,KAAK,mBAAmB,SAAS,kBACjC,KAAK,sBAAsB,SAAS,mBACpC;AACA,WAAO,OAAO,iBAAiB;AAAA,EACjC;AACA,MAAI,CAAC,KAAK,4BAA6B,QAAO,OAAO,2BAA2B;AAChF,MAAI,CAAC,KAAK,QAAQ,OAAQ,QAAO,OAAO,kBAAkB;AAC1D,MACE,KAAK,QAAQ,OAAO,SAAS,mBAC7B,KAAK,QAAQ,mBAAmB,SAAS,kBACzC,KAAK,QAAQ,gBAAgB,SAAS,mBACtC;AACA,WAAO,OAAO,0BAA0B;AAAA,EAC1C;AACA,MAAI,KAAK,QAAQ,eAAe,SAAS,yBAAyB;AAChE,WAAO,OAAO,4BAA4B;AAAA,EAC5C;AACA,MAAI,KAAK,QAAQ,mBAAmB,SAAS,6BAA6B;AACxE,WAAO,OAAO,iCAAiC;AAAA,EACjD;AACA,QAAM,aAAa,KAAK;AACxB,MAAI,CAAC,WAAY,QAAO,OAAO,oBAAoB;AACnD,MACE,WAAW,OAAO,SAAS,gBAC3B,WAAW,mBAAmB,SAAS,kBACvC,WAAW,gBAAgB,SAAS,qBACpC,WAAW,eAAe,YAAY,MAAM,SAAS,kBACrD,WAAW,SAAS,SAAS,gBAC7B;AACA,WAAO,OAAO,6BAA6B;AAAA,EAC7C;AACA,MAAI,WAAW,eAAe,SAAS,sBAAsB;AAC3D,WAAO,OAAO,+BAA+B;AAAA,EAC/C;AACA,MAAI,WAAW,WAAW,SAAU,QAAO,OAAO,4BAA4B;AAC9E,MACE,WAAW,cAAc,SAAS,kBAClC,WAAW,kCAAkC,SAAS,+BACtD;AACA,WAAO,OAAO,0BAA0B;AAAA,EAC1C;AAEA,MAAI,SAAS,UAAU,aAAa;AAClC,QAAI,WAAW,cAAc,QAAQ,WAAW,gBAAgB,SAAS,mBAAmB;AAC1F,aAAO,OAAO,0BAA0B;AAAA,IAC1C;AACA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,aAAa,yBAAyB,MAAM;AAAA,QAC1C,gBAAgB,SAAS;AAAA,QACzB,aAAa,SAAS;AAAA,QACtB,WAAW,SAAS;AAAA,QACpB,cAAc,SAAS;AAAA,QACvB,sBAAsB,SAAS;AAAA,QAC/B,OAAO;AAAA,QACP,gBAAgB;AAAA,QAChB,aAAa;AAAA,QACb,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,aAAa,SAAS;AAC5B,QAAM,aAAa,KAAK;AACxB,MACE,CAAC,cACD,WAAW,WAAW,YACtB,WAAW,OAAO,SAAS,iCAC3B,WAAW,mBAAmB,SAAS,kBACvC,WAAW,cAAc,SAAS,kBAClC,WAAW,0BAA0B,SAAS,sCAC9C;AACA,WAAO,OAAO,2BAA2B;AAAA,EAC3C;AACA,QAAM,YAAY,KAAK;AACvB,MAAI,CAAC,UAAW,QAAO,OAAO,mBAAmB;AACjD,MACE,UAAU,OAAO,WAAW,eAC5B,UAAU,mBAAmB,SAAS,kBACtC,UAAU,iBAAiB,gBAC3B,UAAU,eAAe,SAAS,gBAClC,UAAU,sBAAsB,SAAS,qBACzC,UAAU,mBAAmB,SAAS,kBACtC,UAAU,kCAAkC,SAAS,+BACrD;AACA,WAAO,OAAO,4BAA4B;AAAA,EAC5C;AACA,MAAI,UAAU,eAAe,WAAW,qBAAqB;AAC3D,WAAO,OAAO,8BAA8B;AAAA,EAC9C;AACA,MAAI,UAAU,WAAW,SAAU,QAAO,OAAO,2BAA2B;AAE5E,QAAM,QAAQ,KAAK;AACnB,MAAI,CAAC,MAAO,QAAO,OAAO,eAAe;AACzC,MACE,MAAM,OAAO,WAAW,WACxB,MAAM,gBAAgB,WAAW,eACjC,MAAM,mBAAmB,SAAS,kBAClC,MAAM,gBAAgB,SAAS,qBAC/B,MAAM,cAAc,WAAW,aAC/B,MAAM,WAAW,oBACjB,MAAM,SAAS,WAAW,QAC1B,MAAM,YAAY,SAAS,2BAC3B,MAAM,mBAAmB,WAAW,gBACpC;AACA,WAAO,OAAO,wBAAwB;AAAA,EACxC;AACA,MAAI,MAAM,eAAe,WAAW,iBAAiB;AACnD,WAAO,OAAO,0BAA0B;AAAA,EAC1C;AACA,MAAI,MAAM,WAAW,SAAU,QAAO,OAAO,uBAAuB;AACpE,MAAI,MAAM,cAAc,QAAQ,KAAK,MAAM,MAAM,SAAS,KAAK,IAAI,QAAQ,GAAG;AAC5E,WAAO,OAAO,eAAe;AAAA,EAC/B;AACA,MAAI,MAAM,SAAS,UAAU,MAAM,SAAU,QAAO,OAAO,wBAAwB;AAEnF,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,aAAa,yBAAyB,MAAM;AAAA,MAC1C,gBAAgB,SAAS;AAAA,MACzB,aAAa,SAAS;AAAA,MACtB,WAAW,SAAS;AAAA,MACpB,cAAc,SAAS;AAAA,MACvB,sBAAsB,SAAS;AAAA,MAC/B,OAAO;AAAA,MACP,gBAAgB,SAAS;AAAA,MACzB,aAAa,WAAW;AAAA,MACxB,SAAS,WAAW;AAAA,IACtB,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/domain/editable-artifacts/service.d.ts

@@ -4,11 +4,10 @@ export declare const EDITABLE_ARTIFACT_MAX_OPERATIONS_PER_TRANSACTION = 4096;
 export declare const EDITABLE_ARTIFACT_MAX_UNDO_TARGETS_PER_TRANSACTION: number;
 export declare const EDITABLE_ARTIFACT_MAX_COMMAND_BYTES_PER_TRANSACTION: number;
 export declare const EDITABLE_ARTIFACT_MAX_INTENT_BYTES_PER_TRANSACTION: number;
-export declare const EDITABLE_ARTIFACT_INTENT_PROTOCOL_VERSION = 1;
 export declare const EDITABLE_ARTIFACT_MAX_OPERATION_BYTES_PER_TRANSACTION: number;
 /** Canonical OGACO envelope bound. Kept as an alias for existing consumers. */
 export declare const EDITABLE_ARTIFACT_MAX_COMMITTED_TRANSACTION_BYTES: number;
-export declare const EDITABLE_ARTIFACT_OPERATION_PROTOCOL_VERSION: 1;
+export declare const EDITABLE_ARTIFACT_OPERATION_PROTOCOL_VERSION: 2;
 export declare const EDITABLE_ARTIFACT_MAX_COMMIT_ATTEMPTS = 4;
 /** Compact well before hard replay ceilings so one maximum transaction cannot cross them. */
 export declare const EDITABLE_ARTIFACT_COMPACTION_TRANSACTION_THRESHOLD = 1024;

package/dist/domain/environments.d.ts

@@ -9,7 +9,7 @@ export declare const assertAllowedEnvironmentVariableName: typeof assertAllowedV
 export declare function requireVariableSetEncryption(settings: Settings): Uint8Array;
 /** @deprecated use requireVariableSetEncryption */
 export declare const requireEnvironmentEncryption: typeof requireVariableSetEncryption;
-export declare function requireVariableSetForApi(db: Database, workspaceId: string, variableSetId: string): Promise<VariableSet>;
+export declare function requireVariableSetForApi(db: Database, grant: AccessGrant, variableSetId: string): Promise<VariableSet>;
 /**
  * Validates an variableSet attachment supplied in a request payload (session
  * create, scheduled task create/update, pack enable). Requires the

package/dist/domain/github-repository-bindings.d.ts

@@ -0,0 +1,117 @@
+import type { RepositoryResourceRef, ResourceRef } from "@opengeni/contracts";
+import { type Database } from "@opengeni/db";
+/**
+ * GitHub App repository-binding resolution for bare repository resources.
+ *
+ * A repository resource that names a GitHub repository by URI alone (no
+ * `githubInstallationId`/`githubRepositoryId`) never mints an installation
+ * token, so the sandbox clones it anonymously and cannot push or use `gh`.
+ * The workspace allowlist (`github_installation_repositories`) stores only
+ * numeric repository ids, so resolving a URI needs the installation's owner
+ * login from the durable binding plus one provider read for the repository id.
+ * This module owns the pure parts: URI parsing, candidate selection under the
+ * workspace's auditable bindings, and the exactly-one-match stamping rule. The
+ * provider read is injected so the worker can supply the live GitHub lookup
+ * while tests stay deterministic.
+ */
+export type GitHubRepositoryCoordinates = {
+    owner: string;
+    name: string;
+};
+/**
+ * Parse a GitHub repository reference into owner/name, else null. Accepts
+ * `https://github.com/<owner>/<repo>[.git][/]`, `www.github.com`,
+ * `ssh://git@github.com/<owner>/<repo>[.git]`, and the scp-like
+ * `git@github.com:<owner>/<repo>[.git]`.
+ */
+export declare function parseGitHubRepositoryCoordinates(uri: string): GitHubRepositoryCoordinates | null;
+export type UnboundGitHubRepositoryResource = {
+    resource: RepositoryResourceRef;
+    owner: string;
+    name: string;
+};
+/**
+ * Repository resources that name a github.com repository without any
+ * platform identity: no GitHub App ids, no credential binding, no personal
+ * connection, and either the explicit `github` provider or no provider at all.
+ * Resources that already carry ids, legacy provider ids, a binding, or a
+ * connection are someone else's authority and are never rewritten here.
+ */
+export declare function unboundGitHubRepositoryResources(resources: readonly ResourceRef[]): UnboundGitHubRepositoryResource[];
+export type GitHubRepositoryBindingCandidate = {
+    installationId: number;
+    accountLogin: string;
+    repositoryIds: number[];
+};
+/**
+ * The workspace's auditable GitHub App bindings, under workspace RLS. Only
+ * bindings that could authorize a token mint are candidates; legacy
+ * `unverified` rows never resolve a URI.
+ */
+export declare function listGitHubRepositoryBindingCandidates(db: Database, workspaceId: string): Promise<GitHubRepositoryBindingCandidate[]>;
+export type GitHubRepositoryBindingLookup = (input: {
+    installationId: number;
+    owner: string;
+    name: string;
+}) => Promise<{
+    id: number;
+} | null>;
+export type GitHubRepositoryBinding = {
+    installationId: number;
+    repositoryId: number;
+};
+export type GitHubRepositoryBindingOutcome = {
+    status: "resolved";
+    binding: GitHubRepositoryBinding;
+}
+/** No workspace binding owns this repository's account: anonymous, as before. */
+ | {
+    status: "unbound";
+}
+/** The account is bound, but no installation's allowlist holds this repository. */
+ | {
+    status: "not_allowlisted";
+    installationIds: number[];
+}
+/** More than one bound installation's allowlist holds this repository. */
+ | {
+    status: "ambiguous";
+    installationIds: number[];
+}
+/** The provider lookup failed (suspended/deleted installation, outage). */
+ | {
+    status: "unavailable";
+    installationIds: number[];
+    message: string;
+};
+export type GitHubRepositoryBindingResolution = {
+    uri: string;
+    owner: string;
+    name: string;
+    outcome: GitHubRepositoryBindingOutcome;
+};
+export type GitHubRepositoryBindingResolutionResult = {
+    resources: ResourceRef[];
+    bindings: Map<string, GitHubRepositoryBinding>;
+    resolutions: GitHubRepositoryBindingResolution[];
+};
+/**
+ * Resolve every bare github.com repository resource against the workspace's
+ * auditable bindings. A resource is stamped only when exactly one bound
+ * installation's allowlist contains the repository id GitHub reports for that
+ * URI through that installation. Every other case leaves the resource bare
+ * and reports why, so the caller can surface a warning without ever failing
+ * the turn or the session. Distinct URIs resolve concurrently, as do the
+ * candidate installations of one owner.
+ */
+export declare function resolveGitHubRepositoryBindings(input: {
+    resources: readonly ResourceRef[];
+    candidates: readonly GitHubRepositoryBindingCandidate[];
+    lookup: GitHubRepositoryBindingLookup;
+}): Promise<GitHubRepositoryBindingResolutionResult>;
+/**
+ * Stamp resolved GitHub App ids onto the matching bare resources of any
+ * resource list (turn resources and runtime resources must agree, because the
+ * credential binding id and token filename derive from the installation id).
+ */
+export declare function applyGitHubRepositoryBindings(resources: readonly ResourceRef[], bindings: ReadonlyMap<string, GitHubRepositoryBinding>): ResourceRef[];

package/dist/domain/governed-learning-activation.d.ts

@@ -0,0 +1,16 @@
+import { type GovernedLearningActivationReceipt, type GovernedLearningActivationUndoReceipt } from "@opengeni/contracts";
+import { activateGovernedLearningDecision, undoGovernedLearningActivation, type Database } from "@opengeni/db";
+export declare function createGovernedLearningActivationController(options: {
+    db: Database;
+    activate?: typeof activateGovernedLearningDecision;
+    undo?: typeof undoGovernedLearningActivation;
+}): {
+    activate(input: {
+        caller: unknown;
+        request: unknown;
+    }): Promise<GovernedLearningActivationReceipt>;
+    undo(input: {
+        caller: unknown;
+        request: unknown;
+    }): Promise<GovernedLearningActivationUndoReceipt>;
+};

package/dist/domain/governed-learning-evaluator.d.ts

@@ -0,0 +1,6 @@
+import { type GovernedLearningDecision as GovernedLearningDecisionType, type GovernedLearningDecisionFacts as GovernedLearningDecisionFactsType } from "@opengeni/contracts";
+/**
+ * Pure, closed evaluator mirrored by the 0268 database authority. It never
+ * receives source content and cannot activate a destination authority.
+ */
+export declare function deriveGovernedLearningDecision(input: GovernedLearningDecisionFactsType): GovernedLearningDecisionType;