@opengeni/core 5.0.0 → 5.0.1-canary.36919050519001

package/dist/access/index.d.ts

@@ -1,6 +1,6 @@
 import { type Settings } from "@opengeni/config";
 import { ExternalActorAttribution, type ExternalActorContinuation } from "@opengeni/contracts/external-identities";
-import { type AccountGrant, type AccessContext, type AccessGrant, Permission, type Workspace } from "@opengeni/contracts";
+import { type AccountGrant, type AccessContext, type AccessGrant, type OrganizationApiKeyAccess, Permission, type Workspace } from "@opengeni/contracts";
 import { type Database } from "@opengeni/db";
 import type { Context } from "hono";
 import type { ManagedAuth } from "../managed-auth-type.js";
@@ -24,6 +24,8 @@ export type AccountScopedApiKeyWorkspaceAuthority = Readonly<{
  * shape alone is deliberately insufficient.
  */
 export declare function accountScopedApiKeyWorkspaceAuthority(context: AccessContext): AccountScopedApiKeyWorkspaceAuthority | null;
+/** The organization access tier is derived from the stored workspace-admin wildcard. */
+export declare function organizationApiKeyAccess(permissions: Permission[]): OrganizationApiKeyAccess;
 /**
  * Opaque, request-local proof that the canonical access resolver authorized the
  * exact account administrator named by the stamp. The random id is audit and

package/dist/application/archived-session-imports.d.ts

@@ -0,0 +1,6 @@
+import { AppendArchivedSessionEventsResponse, ImportArchivedSessionResponse } from "@opengeni/contracts";
+import { type AccessGrantAuthorization } from "../access/index.js";
+import type { ApiRouteDeps } from "../dependencies.js";
+export { ArchivedSessionImportError } from "@opengeni/db";
+export declare function importArchivedSessionForRequest(deps: ApiRouteDeps, authorization: AccessGrantAuthorization, workspaceId: string, rawPayload: unknown): Promise<ImportArchivedSessionResponse>;
+export declare function appendArchivedSessionEventsForRequest(deps: ApiRouteDeps, authorization: AccessGrantAuthorization, workspaceId: string, importId: string, rawPayload: unknown): Promise<AppendArchivedSessionEventsResponse>;

package/dist/application/session-commands.d.ts

@@ -1,4 +1,5 @@
 import type { ComposerDraft, DeleteSessionQueueItemRequest, EditSessionQueueItemRequest, MoveSessionQueueItemRequest, SaveComposerDraftRequest, SessionAuthorizationPort, SessionAuthorizationSurface, SessionControlRequest, SessionControlResponse, SessionQueueMutationResponse, SteerSessionQueueItemRequest, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse } from "@opengeni/contracts";
+import type { Settings } from "@opengeni/config";
 import { type Database, type SessionCommandReceiptRow } from "@opengeni/db";
 import { type EventBus } from "@opengeni/events";
 import type { SessionWorkflowClient } from "../dependencies.js";
@@ -37,6 +38,7 @@ type SessionCommandPostCommitDeps = {
 };
 export declare function sendAgentSessionMessage(deps: {
     db: Database;
+    settings?: Settings;
     bus: EventBus;
     workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
     sessionAuthorization?: SessionAuthorizationPort | null;
@@ -47,6 +49,7 @@ export declare function sendAgentSessionMessage(deps: {
 }): Promise<import("@opengeni/db").AgentInternalUpdateCommandResult>;
 export declare function steerAgentSession(deps: {
     db: Database;
+    settings?: Settings;
     bus: EventBus;
     workflowClient: Pick<SessionWorkflowClient, "wakeSessionWorkflow">;
     sessionAuthorization?: SessionAuthorizationPort | null;

package/dist/billing/limits.d.ts

@@ -9,6 +9,8 @@ export declare function documentEmbeddingCostMicros(settings: Settings, inputByt
 export type LimitCheckInput = {
     accountId: string;
     workspaceId?: string;
+    /** Frozen causal human, never the API key or service admitting the work. */
+    initiatingHumanSubjectId?: string | null;
     action: LimitAction;
     quantity?: number;
     model?: string | null;

package/dist/{chunk-2JXLQTMR.js → chunk-2MKMRGSY.js}

@@ -25,7 +25,7 @@ import {
   editableArtifactSnapshotId,
   editableArtifactStateHash,
   validateEditableArtifactActor
-} from "./chunk-VCZFFEPB.js";
+} from "./chunk-LCQXNR62.js";
 
 // src/domain/editable-artifacts/durable-export.ts
 import { createHash } from "crypto";
@@ -1288,6 +1288,9 @@ var InMemoryEditableArtifactStore = class {
     });
   }
   async readTransactionBasis(scope, artifactId, request) {
+    if (request.authorizeCommit) {
+      throw new TypeError("Transactional artifact authority requires a PostgreSQL store");
+    }
     const normalizedScope = editableArtifactScope(scope);
     const normalizedArtifactId = editableArtifactId(artifactId);
     const key = aggregateKey(normalizedScope, normalizedArtifactId);
@@ -1337,6 +1340,9 @@ var InMemoryEditableArtifactStore = class {
     });
   }
   async tryCommitAppliedTransaction(request) {
+    if (request.authorizeCommit) {
+      throw new TypeError("Transactional artifact authority requires a PostgreSQL store");
+    }
     const scope = editableArtifactScope(request.scope);
     const artifactId = editableArtifactId(request.artifactId);
     const key = aggregateKey(scope, artifactId);
@@ -2455,4 +2461,4 @@ export {
   EditableArtifactGenesisPipeline,
   editableArtifactMaterializationKey
 };
-//# sourceMappingURL=chunk-2JXLQTMR.js.map
+//# sourceMappingURL=chunk-2MKMRGSY.js.map