@opengeni/db 0.12.6 → 0.13.0

package/dist/provision-roles.d.ts

@@ -1,10 +1,10 @@
-import { TurnInitiatorContext, SessionMcpApprovalPolicy, TurnInitiator, ResourceRef, ToolRef, ReasoningEffort, TurnExecutionPolicyV1, NewSessionDraftOptions, SecretForRedaction, KnowledgeMemoryKind, McpCredentialsRequest, McpCredentialAuthNeededReason, McpConnectionResourceScope, ConnectionCredentialsPort, SessionEvent, SessionStatus, SessionHumanInputRequest, SystemUpdateClassification, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdate, SessionEventType, SessionTurnStatus, HumanInputQuestion, Permission, SessionTurn, ConnectionKind, ConnectionStatus, KnowledgeMemory, CapabilityKind, CapabilitySource, KnowledgeMemoryStatus, KnowledgeSourceRef, ScheduledTaskStatus, ScheduledTaskScheduleSpec, ScheduledTaskRunMode, ScheduledTaskOverlapPolicy, ScheduledTaskAgentConfig, SessionGoalCreatedBy, McpServerConnectionRef as McpServerConnectionRef$1, SocialProvider, SocialConnectionStatus, Session, SessionTurnSource, SandboxBackend, SandboxOs, FileAsset, FileUploadStatus, GitHubRepositoryScope, GitHubInstallationAuthorityKind, SessionGoal, SessionEventReadDirection, SessionEventSemanticClass, SessionEventPayloadMode, SessionAuthorizationListScope, CapabilityPack, RigChangeKind, RigChangeStatus, RigCheck, SessionToolPolicy, SessionGoalStatus, LineageNode, SessionMcpServerMetadata, RigVersion, BillingBalance, RigChange, AccessContext, HostEventExportBatch, HostUsageExportBatch, ApiKey, ConnectionMetadata, Rig, ScheduledTask, ScheduledTaskTriggerType, ScheduledTaskRun, SocialConnection, SocialPost, VariableSet, Workspace, CapabilityInstallation, PackInstallation, CapabilityCatalogItem, HumanInputResponse, ManagedAccount, SessionQueueSnapshot, WorkspaceControlEvent, AccessGrant, WorkspaceRegisteredPack, SessionListResponse, UsageEvent, WorkspaceMember, VariableSetVariableMetadata, PackInstallationStatus, ScheduledTaskRunStatus } from '@opengeni/contracts';
+import { TurnInitiatorContext, SessionMcpApprovalPolicy, TurnInitiator, ResourceRef, ToolRef, ReasoningEffort, TurnExecutionPolicyV1, NewSessionDraftOptions, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyTarget, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, SecretForRedaction, KnowledgeMemoryKind, McpCredentialsRequest, McpCredentialAuthNeededReason, McpConnectionResourceScope, ConnectionCredentialsPort, SessionEvent, SessionStatus, SessionHumanInputRequest, SystemUpdateClassification, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdate, SessionEventType, SessionTurnStatus, HumanInputQuestion, Permission, SessionTurn, ConnectionKind, ConnectionStatus, ConnectionMetadata, KnowledgeMemory, CapabilityKind, CapabilitySource, KnowledgeMemoryStatus, KnowledgeSourceRef, ScheduledTaskStatus, ScheduledTaskScheduleSpec, ScheduledTaskRunMode, ScheduledTaskOverlapPolicy, ScheduledTaskAgentConfig, SessionGoalCreatedBy, McpServerConnectionRef as McpServerConnectionRef$1, SocialProvider, SocialConnectionStatus, Session, SessionTurnSource, SandboxBackend, SandboxOs, FileAsset, FileUploadStatus, GitHubRepositoryScope, GitHubInstallationAuthorityKind, SessionGoal, SessionEventReadDirection, SessionEventSemanticClass, SessionEventPayloadMode, SessionAuthorizationListScope, CapabilityPack, RigChangeKind, RigChangeStatus, RigCheck, SessionToolPolicy, SessionGoalStatus, LineageNode, SessionMcpServerMetadata, RigVersion, BillingBalance, RigChange, AccessContext, HostEventExportBatch, HostUsageExportBatch, ApiKey, Rig, ScheduledTask, ScheduledTaskTriggerType, ScheduledTaskRun, SocialConnection, SocialPost, VariableSet, Workspace, CapabilityInstallation, PackInstallation, CapabilityCatalogItem, HumanInputResponse, ManagedAccount, SessionQueueSnapshot, WorkspaceControlEvent, AccessGrant, WorkspaceRegisteredPack, SessionListResponse, UsageEvent, WorkspaceMember, VariableSetVariableMetadata, PackInstallationStatus, ScheduledTaskRunStatus } from '@opengeni/contracts';
 import { environmentsEncryptionKeyBytes, Settings, McpServerConnectionRef } from '@opengeni/config';
 import { refreshCodexToken, CodexRateLimitResetCreditsDetails, ResetCreditFetchFailureReason, CodexTokenSnapshot, CodexFetch, CodexUsagePayload } from '@opengeni/codex';
 import { SQL } from 'drizzle-orm';
 import { PgDatabase, PgTransactionConfig } from 'drizzle-orm/pg-core';
 import postgres from 'postgres';
-import { s as sessionCommandReceipts, w as workspaces, a as sessions, b as sessionTurns, c as sessionTurnAttempts, d as composerDrafts, n as newSessionDrafts, e as schema, f as enrollmentOsValues, g as enrollmentExposureValues, h as deviceEnrollmentStatusValues, i as enrollmentStatusValues, j as sandboxKindValues, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues } from './schema-CeXWlYcG.js';
+import { s as sessionCommandReceipts, w as workspaces, a as sessions, b as sessionTurns, c as sessionTurnAttempts, d as composerDrafts, n as newSessionDrafts, e as schema, f as enrollmentOsValues, g as enrollmentExposureValues, h as deviceEnrollmentStatusValues, i as enrollmentStatusValues, j as sandboxKindValues, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues } from './schema-Bh1Hr7xY.js';
 import './migrate.js';
 import { FetchLike, DnsLookup } from '@opengeni/network';
 
@@ -573,6 +573,68 @@ declare function seedNewSessionDraftInTransaction(db: Database, input: {
 /** @deprecated Kept as a compatibility name for low-level callers. */
 declare const consumeNewSessionDraftInTransaction: typeof seedNewSessionDraftInTransaction;
 
+type DraftInput = WorkspaceInstructionPolicyTarget & {
+    accountId: string;
+    workspaceId: string;
+    content: string;
+    provenanceSource: WorkspaceInstructionPolicyProvenanceSource;
+    provenanceSourceId: string | null;
+    supersedesRevisionId: string | null;
+    createdBySubjectId: string;
+};
+type CallerDraftInput = Omit<DraftInput, "provenanceSource"> & {
+    provenanceSource: WorkspaceInstructionPolicyDraftProvenanceSource;
+};
+declare class WorkspaceInstructionPolicyConflictError extends Error {
+    readonly currentHead: WorkspaceInstructionPolicyHead | null;
+    readonly name = "WorkspaceInstructionPolicyConflictError";
+    readonly code = "WORKSPACE_INSTRUCTION_POLICY_CONFLICT";
+    constructor(currentHead: WorkspaceInstructionPolicyHead | null);
+}
+declare class WorkspaceInstructionPolicyNotFoundError extends Error {
+    readonly name = "WorkspaceInstructionPolicyNotFoundError";
+    constructor(message?: string);
+}
+declare class WorkspaceInstructionPolicyInvalidOperationError extends Error {
+    readonly name = "WorkspaceInstructionPolicyInvalidOperationError";
+}
+declare class WorkspaceInstructionPolicyLegacyUnavailableError extends Error {
+    readonly name = "WorkspaceInstructionPolicyLegacyUnavailableError";
+    constructor();
+}
+declare function createWorkspaceInstructionPolicyDraft(db: Database, input: CallerDraftInput): Promise<WorkspaceInstructionPolicyRevision>;
+/** Import only the stored legacy override; never materialize a deployment default or activate it. */
+declare function importLegacyWorkspaceInstructionPolicyDraft(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    createdBySubjectId: string;
+    supersedesRevisionId: string | null;
+}): Promise<WorkspaceInstructionPolicyRevision>;
+declare function listWorkspaceInstructionPolicyRevisions(db: Database, workspaceId: string, query: WorkspaceInstructionPolicyListQuery): Promise<WorkspaceInstructionPolicyListResponse>;
+declare function getWorkspaceInstructionPolicyRevision(db: Database, workspaceId: string, revisionId: string): Promise<WorkspaceInstructionPolicyRevision>;
+/** Deterministic, dependency-free unified line diff; large inputs degrade to a full replacement. */
+declare function diffWorkspaceInstructionPolicyContent(from: WorkspaceInstructionPolicyRevision, to: WorkspaceInstructionPolicyRevision): string;
+declare function diffWorkspaceInstructionPolicyRevisions(db: Database, workspaceId: string, input: {
+    fromRevisionId: string;
+    toRevisionId: string;
+}): Promise<WorkspaceInstructionPolicyDiffResponse>;
+declare function activateWorkspaceInstructionPolicyRevision(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    revisionId: string;
+    expectedCurrentRevisionId: string | null;
+    actorSubjectId: string;
+    reason: string;
+}): Promise<WorkspaceInstructionPolicyActivationResponse>;
+declare function rollbackWorkspaceInstructionPolicyRevision(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    targetRevisionId: string;
+    expectedCurrentRevisionId: string;
+    actorSubjectId: string;
+    reason: string;
+}): Promise<WorkspaceInstructionPolicyActivationResponse>;
+
 /** Provider-valid result for a started call whose durable outcome is unknown. */
 declare function interruptedToolCallResult(input: {
     callType: string;
@@ -700,7 +762,7 @@ declare function runIdempotentPersistenceTransaction<T>(options: IdempotentPersi
  * FORCE-RLS table is an architectural change: update this list in the same
  * commit as the migration so startup cannot silently accept an unreviewed gap.
  */
-declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "billing_customers", "capability_catalog_items", "capability_installations", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connections", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "import_batches", "integration_oauth_state_nonces", "knowledge_memories", "machine_metrics_latest", "machine_metrics_series", "new_session_drafts", "pack_installations", "rig_changes", "rig_versions", "rigs", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "social_connections", "social_posts", "usage_events", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets"];
+declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "billing_customers", "capability_catalog_items", "capability_installations", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connections", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "import_batches", "integration_oauth_state_nonces", "knowledge_memories", "machine_metrics_latest", "machine_metrics_series", "new_session_drafts", "pack_installations", "rig_changes", "rig_versions", "rigs", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_post_operations", "social_connections", "social_posts", "usage_events", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_revisions", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets"];
 /**
  * Deployment-global and authentication tables used by ordinary API/worker
  * traffic. They intentionally do not carry workspace RLS: their access model
@@ -712,11 +774,11 @@ declare const NON_RLS_RUNTIME_TABLES: readonly ["auth_identities", "auth_rate_li
  * explicit instead of being derived from FORCE_RLS_TABLES: adding a protected
  * table must not silently grant it broader DML than its migration intended.
  */
-declare const RUNTIME_FULL_DML_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "billing_customers", "capability_catalog_items", "capability_installations", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connections", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "import_batches", "integration_oauth_clients", "integration_oauth_state_nonces", "knowledge_memories", "machine_metrics_latest", "machine_metrics_series", "managed_accounts", "new_session_drafts", "pack_installations", "rig_changes", "rig_versions", "rigs", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_recordings", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "social_connections", "social_posts", "stripe_webhook_events", "usage_events", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_memberships", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspaces"];
+declare const RUNTIME_FULL_DML_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "billing_customers", "capability_catalog_items", "capability_installations", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connections", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "import_batches", "integration_oauth_clients", "integration_oauth_state_nonces", "knowledge_memories", "machine_metrics_latest", "machine_metrics_series", "managed_accounts", "new_session_drafts", "pack_installations", "rig_changes", "rig_versions", "rigs", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_recordings", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_post_operations", "social_connections", "social_posts", "stripe_webhook_events", "usage_events", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_heads", "workspace_memberships", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspaces"];
 /** Configuration is deployment-global and intentionally read-only at runtime. */
 declare const RUNTIME_READ_ONLY_TABLES: readonly ["nested_agent_depth_configuration"];
-/** Spawn-denial evidence is append-only to the runtime, but remains queryable. */
-declare const RUNTIME_READ_INSERT_TABLES: readonly ["session_spawn_denials"];
+/** Append-only evidence/revision tables are insertable and queryable, never mutable. */
+declare const RUNTIME_READ_INSERT_TABLES: readonly ["session_spawn_denials", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_revisions"];
 /**
  * These FORCE-RLS tables are owned by security-definer host-export routines.
  * The ordinary application role must have no direct table privileges on them.
@@ -1660,6 +1722,8 @@ type CreateConnectionInput = {
     credentialEncrypted: string;
     grantedScopes?: string[];
     expiresAt?: Date | null;
+    verifiedInstallAt?: Date | null;
+    verifiedInstallVersion?: number | null;
     metadata?: Record<string, unknown>;
     createdBySubjectId?: string | null;
     updatedBySubjectId?: string | null;
@@ -1676,9 +1740,37 @@ type UpdateConnectionInput = {
     credentialEncrypted?: string;
     grantedScopes?: string[];
     expiresAt?: Date | null;
+    verifiedInstallAt?: Date | null;
+    verifiedInstallVersion?: number | null;
     metadata?: Record<string, unknown>;
     updatedBySubjectId?: string | null;
 };
+/** Server-owned verification facts; public schemas expose them read-only and nullable. */
+type ConnectionMetadataWithVerification = ConnectionMetadata & {
+    verifiedInstallAt: string | null;
+    verifiedInstallVersion: number | null;
+};
+type SlackBotPostOperation = {
+    id: string;
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    operationId: string;
+    clientMessageId: string;
+    targetKind: "channel" | "user";
+    targetId: string;
+    requestDigest: string;
+    status: "provider_started" | "completed";
+    claimHolderId: string | null;
+    claimExpiresAt: Date | null;
+    attemptCount: number;
+    lastFailureCode: string | null;
+    slackChannelId: string | null;
+    slackMessageTimestamp: string | null;
+    completedAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+};
 type ConnectionCredentialForBroker = {
     id: string;
     accountId: string;
@@ -2025,11 +2117,62 @@ declare function decryptedCapabilityHeaders(server: EnabledMcpCapabilityServer,
  */
 declare function getStoredCapabilityHeaderCiphertext(db: Database, workspaceId: string, capabilityId: string): Promise<Record<string, string> | null>;
 declare function mcpServerIdForCapability(capabilityId: string, metadata?: Record<string, unknown>): string;
-declare function createConnection(db: Database, input: CreateConnectionInput): Promise<ConnectionMetadata>;
-declare function listConnectionsMetadata(db: Database, workspaceId: string, subjectId?: string | null): Promise<ConnectionMetadata[]>;
-declare function getConnectionMetadata(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<ConnectionMetadata | null>;
-declare function updateConnection(db: Database, input: UpdateConnectionInput): Promise<ConnectionMetadata | null>;
-declare function revokeConnection(db: Database, workspaceId: string, connectionId: string, updatedBySubjectId?: string | null): Promise<ConnectionMetadata | null>;
+declare function createConnection(db: Database, input: CreateConnectionInput): Promise<ConnectionMetadataWithVerification>;
+declare function listConnectionsMetadata(db: Database, workspaceId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification[]>;
+declare function getConnectionMetadata(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification | null>;
+declare function updateConnection(db: Database, input: UpdateConnectionInput): Promise<ConnectionMetadataWithVerification | null>;
+declare function revokeConnection(db: Database, workspaceId: string, connectionId: string, updatedBySubjectId?: string | null): Promise<ConnectionMetadataWithVerification | null>;
+type ClaimSlackBotPostOperationResult = {
+    kind: "claimed" | "in_progress" | "completed";
+    operation: SlackBotPostOperation;
+} | {
+    kind: "conflict" | "connection_not_found";
+};
+/**
+ * Claims one durable Slack post identity. The insert occurs before any provider
+ * call; retries retain the original client_msg_id and immutable request digest.
+ * A live claim suppresses concurrent sends, while a released/expired claim can
+ * be reclaimed after response loss or process death.
+ */
+declare function claimSlackBotPostOperation(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    operationId: string;
+    targetKind: "channel" | "user";
+    targetId: string;
+    requestDigest: string;
+    claimHolderId: string;
+    claimLeaseMs: number;
+}): Promise<ClaimSlackBotPostOperationResult>;
+declare function releaseSlackBotPostOperationClaim(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    operationId: string;
+    claimHolderId: string;
+    failureCode: string;
+}): Promise<boolean>;
+type CompleteSlackBotPostOperationResult = {
+    kind: "completed";
+    operation: SlackBotPostOperation;
+    newlyCompleted: boolean;
+} | {
+    kind: "not_found" | "not_owned";
+};
+/** Completion and the single success audit receipt commit atomically. */
+declare function completeSlackBotPostOperation(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    operationId: string;
+    claimHolderId: string;
+    slackChannelId: string;
+    slackMessageTimestamp: string;
+    subjectId?: string | null;
+    auditMetadata: Record<string, unknown>;
+}): Promise<CompleteSlackBotPostOperationResult>;
+declare function getSlackBotPostOperation(db: Database, workspaceId: string, connectionId: string, operationId: string): Promise<SlackBotPostOperation | null>;
 declare function loadConnectionCredentialForBroker(db: Database, settings: Settings, input: {
     workspaceId: string;
     connectionId?: string;
@@ -6303,4 +6446,4 @@ declare function appendSessionEventsWithLockedSessionUpdate(db: Database, worksp
 }): Promise<SessionEvent[]>;
 declare function sessionSubject(workspaceId: string, sessionId: string): string;
 
-export { type CodexResetRedemptionAttempt as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BeginSandboxRematerializationResult as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type CodexAccountStatus as D, type CodexAccountUsageSnapshot as E, type CodexAllocatorUpdateResult as F, type CodexAuthDeps as G, type CodexCapacityAvailabilityDecision as H, type CodexCapacityMutationResult as I, type CodexCapacityResetKind as J, type CodexCapacitySelectionContext as K, type CodexCapacityWait as L, type CodexCapacityWaitStatus as M, type CodexCapacityWakeTarget as N, type CodexCredentialForRun as O, type CodexCredentialLeaseCandidateFilter as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialLeaseCandidateFilterResult as Q, type CodexCredentialLeasePolicyScopeResolver as R, type CodexCredentialLeaseQuarantine as S, type CodexCredentialLeaseResult as T, type CodexCredentialLeaseSelection as U, type CodexCredentialLeaseSelectionContext as V, type CodexCredentialStatus as W, type CodexCredentialTokens as X, type CodexLeaseAccountStatus as Y, type CodexPinSource as Z, type CodexRateLimitResetCreditsAccountResult as _, type AcceptSessionApprovalDecisionResult as a, type IdempotentPersistenceTransactionOptions as a$, type CodexResetRedemptionOutcome as a0, type CodexResetRedemptionRecovery as a1, type CodexResetRedemptionSendNotReadyReason as a2, type CodexResetRedemptionStatus as a3, type CodexRotationSettings as a4, type CodexRotationStrategy as a5, type CodexTokenDeadlineClock as a6, type CodexTokenDeadlineOptions as a7, type ComposerDraftRow as a8, type ConnectionBrokerDeps as a9, type EffectiveControlState as aA, type EffectiveSessionControl as aB, type EnableCapabilityInstallationInput as aC, type EnabledMcpCapabilityServer as aD, type EnqueueSessionTurnInput as aE, type EnrollmentExposure as aF, type EnrollmentOs as aG, type EnrollmentRecord as aH, type EnrollmentStatus as aI, type ExpiredDrainingSandboxLeaseCount as aJ, type ExpiredFileUploadCleanupClaim as aK, FORCE_RLS_TABLES as aL, type FenceCodexResetRedemptionSendResult as aM, type FileUploadCleanupClaimResult as aN, type ForceDrainResult as aO, type FrozenTurnInitiator as aP, type GitHubInstallation as aQ, type GitHubInstallationAccess as aR, GitHubInstallationAuthorityCommitError as aS, type GoalContinuationDecision as aT, type HostExportConsumerStatus as aU, type HostExportKind as aV, HostExportPayloadError as aW, HostMcpCredentialBindingError as aX, type HostMcpCredentialResolverContext as aY, HostMcpCredentialScopeError as aZ, HumanInputResponseValidationError as a_, type ConnectionCredentialForBroker as aa, ConnectionRefreshHttpError as ab, type ConsumeOAuthStateNonceInput as ac, type CorrectWorkspaceMemoryInput as ad, type CorrectWorkspaceMemoryResult as ae, type CreateCapabilityCatalogItemInput as af, type CreateConnectionInput as ag, type CreateDbOptions as ah, type CreateImportBatchInput as ai, type CreateKnowledgeMemoryInput as aj, type CreatePackInstallationInput as ak, type CreateScheduledTaskInput as al, type CreateSessionGoalInput as am, type CreateSessionMcpServerInput as an, type CreateSocialConnectionInput as ao, type CreateSocialPostInput as ap, type CreditBalanceByAccount as aq, type Database as ar, type DatabaseFailureCode as as, type DbClient as at, type DbSession as au, type DeviceEnrollmentRequestRecord as av, type DeviceEnrollmentStatus as aw, type EditQueueCommandResult as ax, type EffectiveControlBlocker as ay, type EffectiveControlResumeOption as az, type AcceptSessionHumanInputResponseResult as b, type RefreshTransportOptions as b$, type ImportBatch as b0, type InitializeSessionStartInput as b1, type InitializeSessionStartResult as b2, type InstallOrReadTurnExecutionPolicyForAttemptResult as b3, type IntegrationOAuthClientForUse as b4, type LeaseHolderKind as b5, type LeaseSnapshot as b6, type ListKnowledgeMemoryOptions as b7, type ListSessionEventPageOptions as b8, type ListSessionEventsOptions as b9, type MemoryEmbedder as bA, type MemorySanitizeResult as bB, type MeterableWarmLease as bC, NON_RLS_RUNTIME_TABLES as bD, type NestedAgentDepthDeploymentPolicy as bE, type NestedAgentDepthPolicySource as bF, NewSessionDraftAccessError as bG, NewSessionDraftConflictError as bH, type NewSessionDraftRow as bI, PROTECTED_NO_DIRECT_DML_TABLES as bJ, type PendingSessionToolCallInput as bK, type PersistenceFailureDetails as bL, type PersistenceRetryOutcome as bM, type QueueCommandConflictCode as bN, QueueCommandConflictError as bO, type QueueCommandResult as bP, type QueuedTurnRow as bQ, RUNTIME_DML_TABLES as bR, RUNTIME_FULL_DML_TABLES as bS, RUNTIME_READ_INSERT_TABLES as bT, RUNTIME_READ_ONLY_TABLES as bU, RUNTIME_TABLE_PRIVILEGES as bV, type ReapDrainable as bW, type ReconcileCodexCapacityWaitResult as bX, type ReconcileColdLostLeaseInstanceBlockersResult as bY, type RecoverSessionDispatchInput as bZ, type RecoverSessionDispatchResult as b_, type ListSessionsForSubjectOptions as ba, type ListSessionsOptions as bb, type LiveModalSandboxLeaseAttribution as bc, type LostProviderWorkspaceSettlement as bd, MACHINE_METRICS_SERIES_INTERVAL_MS as be, MAX_INTERNAL_UPDATE_BATCH_BYTES as bf, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as bg, MAX_INTERNAL_UPDATE_BYTES as bh, MEMORY_ACTIVE_RECORD_CAP as bi, MEMORY_BLOCK_KIND_ORDER as bj, MEMORY_BLOCK_RECORD_LIMIT as bk, MEMORY_CORRECT_TOOL_DESCRIPTION as bl, MEMORY_KIND_SECTION_TITLES as bm, MEMORY_NEAR_DUP_COSINE_THRESHOLD as bn, MEMORY_NEAR_DUP_NEIGHBORS as bo, MEMORY_SAVE_TOOL_DESCRIPTION as bp, MEMORY_SEARCH_DEFAULT_LIMIT as bq, MEMORY_SEARCH_MAX_LIMIT as br, MEMORY_SEARCH_TOOL_DESCRIPTION as bs, MEMORY_TEXT_MAX_CHARS as bt, MEMORY_VISIBLE_RECORD_CAP as bu, type MachineMetricsRow as bv, type MachineMetricsSample as bw, type MarkWarmLeaseInstanceLostResult as bx, type MaterializeGoalContinuationResult as by, type MemoryBlockRecord as bz, type AccrueWarmSecondsResult as c, type SessionAttemptInterruptionSettlement as c$, type RegisterWorkspacePackInput as c0, type RegistryCapabilityCatalogItemInput as c1, type RegistryCatalogSurfaceKey as c2, type ReplaceIntegrationOAuthClientInput as c3, type RequestSessionTurnRecoveryInput as c4, type RequestSessionTurnRecoveryResult as c5, type ResolveConnectionCredentialInput as c6, type ResolveConnectionCredentialResult as c7, type RetainedFileArtifact as c8, type RetainedProcessProviderProof as c9, type SandboxArchiveAvailability as cA, type SandboxArchiveRevision as cB, SandboxImageConflictError as cC, type SandboxKind as cD, type SandboxLeaseLiveness as cE, SandboxLeaseRecoveryBlockedError as cF, SandboxLeaseSupersededError as cG, type SandboxOpenPtySessionRow as cH, type SandboxProviderExistence as cI, type SandboxPtyProcessIdentity as cJ, type SandboxPtySessionRow as cK, type SandboxRecord as cL, type SandboxRecoveryState as cM, type SandboxRestoreStatus as cN, type SandboxRetainedProcess as cO, type SandboxRetainedProcessIdentity as cP, SandboxRetainedProcessPromotionFencedError as cQ, type SandboxRetainedProcessReconciliationClaim as cR, type SandboxRetainedProcessState as cS, SandboxRigConflictError as cT, type SandboxWorkspaceMutationAdmission as cU, SandboxWorkspaceMutationFencedError as cV, type SandboxWorkspaceMutationProviderOutcome as cW, type SandboxWorkspaceReadiness as cX, SanitizedDatabasePersistenceCause as cY, type SaveWorkspaceMemoryInput as cZ, type SaveWorkspaceMemoryResult as c_, RigActiveVersionChangedError as ca, RigChangeAlreadyVerifyingError as cb, type RigChangeMonitoringSummary as cc, RigChangeTransitionError as cd, type RigVersionContentInput as ce, type RigVersionMonitoringSummary as cf, type RlsContext as cg, type RlsStrategy as ch, type RuntimeDatabaseIdentity as ci, type RuntimeDatabasePosture as cj, RuntimeDatabasePostureError as ck, type RuntimeDatabasePostureOptions as cl, type RuntimeRoutinePosture as cm, type RuntimeSchemaPosture as cn, type RuntimeTableDmlPrivilege as co, type RuntimeTablePosture as cp, type RuntimeTablePrivilegeContract as cq, SESSION_ANCESTRY_LIMIT as cr, SESSION_DISCOVERY_CONTROL_TARGET_LIMIT as cs, SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS as ct, SESSION_DISCOVERY_GOAL_MAX_CHARS as cu, SESSION_DISCOVERY_MESSAGE_MAX_CHARS as cv, SESSION_EVENT_DB_PAGE_MAX_BYTES as cw, SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT as cx, SESSION_LIST_SNAPSHOT_MAX_IDS as cy, type SafeDatabaseErrorFacts as cz, type AcquireLeaseInput as d, type UpdateKnowledgeMemoryInput as d$, type SessionCodexState as d0, type SessionCommandActor as d1, SessionCommandIdempotencyError as d2, type SessionCommandReceiptRow as d3, SessionContextBusyError as d4, SessionControlConflictError as d5, SessionControlInvariantError as d6, type SessionControlMutationResult as d7, type SessionCreateDeniedResult as d8, type SessionCreateInput as d9, type SessionRecordingState as dA, type SessionSpawnDenial as dB, type SessionSpawnDenialCode as dC, SessionSpawnDeniedDbError as dD, type SessionSystemUpdateOutboxDelivery as dE, SessionToolPolicyVersionConflictError as dF, type SessionTurnAttemptOutcome as dG, type SessionTurnForExecution as dH, type SessionTurnRecordingSettlement as dI, type SessionWorkPeek as dJ, type SessionWorkTrigger as dK, type SessionWorkflowWake as dL, type SessionWorkflowWakeDeliveryResult as dM, type SetSessionCodexPinOptions as dN, type SetSessionGoalStatusEvent as dO, type SettleCodexCredentialFailoverResult as dP, type SettleCodexCredentialLeaseLossResult as dQ, type SteerQueueCommandResult as dR, type StoreIntegrationOAuthClientInput as dS, type StoredIntegrationOAuthClient as dT, type StreamAcknowledgment as dU, type SubmitHumanPromptResult as dV, type ToolspaceCallReservation as dW, type ToolspaceTurnAttemptClaims as dX, type TurnAttemptFenceRejectReason as dY, type UpdateConnectionInput as dZ, type UpdateImportBatchCountsInput as d_, type SessionCreateResult as da, type SessionCreateSuccessResult as db, type SessionDepthPolicy as dc, type SessionDiscoveryControl as dd, type SessionDiscoveryCursor as de, type SessionDiscoveryOrderBy as df, type SessionDiscoverySummary as dg, type SessionEventPage as dh, SessionEventPersistenceError as di, type SessionEventWriteLockInput as dj, type SessionEventWriteLocks as dk, type SessionGoalContinuationProjection as dl, SessionIdConflictError as dm, type SessionLineage as dn, SessionListAccessError as dp, type SessionListCursor as dq, SessionListCursorError as dr, SessionListCursorExpiredError as ds, SessionListSnapshotLimitError as dt, type SessionMcpServerForRun as du, SessionPinAccessError as dv, SessionPinVersionConflictError as dw, type SessionRecordingCodec as dx, type SessionRecordingMode as dy, type SessionRecordingRow as dz, type AcquireLeaseResult as e, buildCodexTokenResolver as e$, type UpdateScheduledTaskInput as e0, type UpdateSessionMcpApprovalPolicyResult as e1, type UpdateSessionMcpServerCredentialsInput as e2, type UpdateSessionMcpServerCredentialsResult as e3, type UpsertCodexSubscriptionCredentialResult as e4, type UserLookup as e5, type VariableSetForRun as e6, WORKSPACE_MEMORY_BLOCK_EMPTY as e7, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as e8, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as e9, advanceWorkspaceGeneration as eA, advanceWorkspaceGenerationForDirectRequest as eB, advanceWorkspaceGenerationForRetainedProcess as eC, allAccountPermissions as eD, allWorkspacePermissions as eE, appendSessionEventToSandboxGroup as eF, appendSessionEvents as eG, appendSessionEventsAndUpdateSession as eH, appendSessionEventsForTurnAttempt as eI, appendSessionEventsWithLockedSessionUpdate as eJ, appendSessionHistoryItems as eK, applyContextCompaction as eL, applyCreditDebitUpToBalance as eM, applyCreditLedgerEntry as eN, applySessionTurnSettlement as eO, approveDeviceEnrollmentRequest as eP, areGitHubRepositoriesAllowedForWorkspace as eQ, armCodexCapacityWait as eR, assertAgentCommandAuthorityInTransaction as eS, assertRuntimeDatabasePosture as eT, autoResumeSessionBranchInTransaction as eU, beginRigChangeVerificationAttempt as eV, beginSandboxRematerialization as eW, bindAuthorizedGitHubInstallationRepositories as eX, bindGitHubInstallationRepositories as eY, bootstrapWorkspace as eZ, buildChildCompletionDigest as e_, type WorkspaceCaptureCommitResult as ea, type WorkspaceCaptureGcPlan as eb, type WorkspaceCaptureGcRow as ec, type WorkspaceCaptureRow as ed, type WorkspaceControlLockMode as ee, type WorkspaceControlMutationResult as ef, type WorkspaceControlRow as eg, type WorkspaceEnvironmentForRun as eh, type WorkspaceMemoryOrigin as ei, type WorkspaceMemorySearchInput as ej, type WorkspaceMemorySearchMode as ek, type WorkspaceMemorySearchResult as el, type WorkspaceModelPolicy as em, abandonCodexResetRedemptionBeforeProvider as en, abandonRecordingForTurnAttempt as eo, acceptSessionApprovalDecision as ep, acceptSessionHumanInputResponse as eq, accrueWarmSeconds as er, acknowledgeHostExportBatch as es, acquireCodexCredentialLease as et, acquireLease as eu, activateRigVersion as ev, addSessionSystemUpdate as ew, addSessionSystemUpdateWithSourceMutation as ex, admitToolspaceTurnAttempt as ey, adoptCodexResetRedemptionAttempt as ez, type ActiveRetainedProcessOwnerCount as f, createScheduledTask as f$, buildConnectionTokenResolver as f0, buildHostConnectionTokenResolver as f1, canonicalSessionCommandHash as f2, claimCodexResetRedemption as f3, claimExpiredFileUploadCleanup as f4, claimFileUploadCleanup as f5, claimHostExportBatch as f6, claimPendingSessionSystemUpdateOutbox as f7, claimPendingSessionWorkflowWakes as f8, claimSessionWorkForAttempt as f9, countActiveSessionsUsingVariableSet as fA, countConsecutiveReactiveRotations as fB, countExpiredDrainingSandboxLeases as fC, countQueuedTurns as fD, countRigs as fE, countSandboxLeasesByLiveness as fF, countScheduledTasksForWorkspace as fG, countScheduledTasksUsingEnvironment as fH, countScheduledTasksUsingVariableSet as fI, countSessionHistoryItems as fJ, countSessionsUsingRig as fK, countVariableSets as fL, countWorkspaceEnvironments as fM, countWorkspacesForAccount as fN, createApiKey as fO, createConnection as fP, createDb as fQ, createDeviceEnrollmentRequest as fR, createEnrollment as fS, createFileUpload as fT, createImportBatch as fU, createKnowledgeMemory as fV, createRig as fW, createRigChange as fX, createRigVersion as fY, createRigVersionForChangePromotion as fZ, createSandbox as f_, claimTerminalRetainedProcesses as fa, clearDurablePendingSessionToolCalls as fb, clearEnrollmentWentOffline as fc, clearPendingSessionToolspaceCall as fd, clearSessionContext as fe, clearSessionGoal as ff, clearedContextMarkerItem as fg, closePtySession as fh, closeSessionTurnAttemptInTransaction as fi, codexCapacityRefreshBackoffMs as fj, commitWarmingToWarm as fk, completeCodexResetRedemption as fl, completeExpiredFileUploadCleanup as fm, completeFileUpload as fn, completeFileUploadCleanup as fo, computeWorkspaceCaptureGcPlan as fp, confirmDrainCold as fq, consumeDeviceEnrollmentRequest as fr, consumeIntegrationOAuthStateNonce as fs, consumeNewSessionDraftInTransaction as ft, correctWorkspaceMemory as fu, countActiveApiKeysForWorkspace as fv, countActiveRetainedProcessesByOwnerState as fw, countActiveSessionHistoryItems as fx, countActiveSessionsForWorkspace as fy, countActiveSessionsUsingEnvironment as fz, type ActiveSandboxPointer as g, getActiveSessionHistoryItems as g$, createScheduledTaskRun as g0, createSession as g1, createSessionGoal as g2, createSessionMcpServers as g3, createSessionWithIdempotencyKey as g4, createSessionWithIdempotencyKeyResult as g5, createSocialConnection as g6, createSocialPost as g7, createVariableSet as g8, createWorkspace as g9, enableCapabilityInstallation as gA, enablePackInstallation as gB, encodeSessionListCursor as gC, encryptEnvironmentValue as gD, enqueueSessionTurn as gE, enqueueSessionWorkflowWake as gF, enqueueSessionWorkflowWakeIfRunnable as gG, enqueueSessionWorkflowWakeInTransaction as gH, ensureCodexRotationSettings as gI, ensureManagedAccessForUser as gJ, estimateMemoryTokens as gK, evaluateGoalContinuation as gL, evaluateRuntimeDatabasePosture as gM, evaluateSessionControl as gN, evaluateSessionControls as gO, evaluateSessionDiscoveryControls as gP, expireSessionHumanInputRequest as gQ, failHostExportBatch as gR, failSandboxRematerialization as gS, failWarmingToCold as gT, fenceCodexResetRedemptionSend as gU, fetchCodexRateLimitResetCreditsForAccount as gV, fetchCodexUsageForAccount as gW, finalizeEnrollmentByToken as gX, findActiveApiKeyByHash as gY, forceDrainOverLimitViewerOnlyBoxes as gZ, frozenInitiatorForCommandActor as g_, createWorkspaceEnvironment as ga, databaseFailureCode as gb, deadLetterHostExportHead as gc, decodeSessionListCursor as gd, decryptEnvironmentValue as ge, decryptedCapabilityHeaders as gf, deferRetainedProcessReconciliation as gg, deleteGitHubInstallationBinding as gh, deleteRecording as gi, deleteRig as gj, deleteRigIfNoActiveSessions as gk, deleteScheduledTask as gl, deleteSessionQueueItemInTransaction as gm, deleteVariableSet as gn, deleteVariableSetVariable as go, deleteWorkspace as gp, deleteWorkspaceCaptureRows as gq, deleteWorkspaceEnvironment as gr, deleteWorkspaceEnvironmentVariable as gs, deleteWorkspacePack as gt, denyDeviceEnrollmentRequest as gu, disableCapabilityInstallation as gv, disableHostExportConsumer as gw, disconnectAllCodexAccounts as gx, disconnectCodexAccount as gy, editQueuedTurnInTransaction as gz, type AddSessionSystemUpdateInput as h, getStreamAcknowledgment as h$, getActiveSessionTurnForExecution as h0, getAnySessionInGroup as h1, getBillingBalance as h2, getBillingCustomer as h3, getCapabilityCatalogItem as h4, getCapabilityInstallation as h5, getCodexCapacityWaitForSession as h6, getCodexCredentialStatus as h7, getCodexResetRedemptionAttempt as h8, getCodexRotationSettings as h9, getRigChange as hA, getRigName as hB, getRigVersion as hC, getRigVersionById as hD, getSandbox as hE, getSandboxSessionEnvelope as hF, getScheduledTask as hG, getSession as hH, getSessionByCreateIdempotencyKey as hI, getSessionCodexState as hJ, getSessionEvent as hK, getSessionEventByClientEventId as hL, getSessionForSubject as hM, getSessionGoal as hN, getSessionGoalWithContinuation as hO, getSessionHistoryItems as hP, getSessionHumanInputRequest as hQ, getSessionLineage as hR, getSessionQueueSnapshot as hS, getSessionRootId as hT, getSessionSpawnDenial as hU, getSessionSpawnDenialByIdempotencyKey as hV, getSessionSystemUpdateOutboxByDedupeKey as hW, getSessionTurn as hX, getSessionTurnForAttempt as hY, getSocialConnection as hZ, getStoredCapabilityHeaderCiphertext as h_, getComposerDraftInTransaction as ha, getConnectionMetadata as hb, getDeviceEnrollmentRequestByDeviceCode as hc, getEnrollment as hd, getFile as he, getFileUpload as hf, getHostExportConsumerStatus as hg, getHumanInputResumeForEvent as hh, getKnowledgeMemory as hi, getLatestRunState as hj, getLatestStartedSessionTurn as hk, getManagedAccount as hl, getManagedUserByEmail as hm, getMaterializedSandboxFileResources as hn, getNestedAgentDepthDeploymentPolicy as ho, getNewSessionDraftInTransaction as hp, getOpenPtySession as hq, getOrCreateSessionSystemUpdateOutbox as hr, getPackInstallation as hs, getPendingDeviceEnrollmentRequestByUserCode as ht, getPendingDeviceEnrollmentRequestByUserCodeGlobal as hu, getRecording as hv, getRetainedFileArtifact as hw, getRetainedProcess as hx, getRig as hy, getRigByName as hz, type AddSessionSystemUpdateResult as i, listRigChangeMonitoringSummaries as i$, getVariableSet as i0, getVariableSetByName as i1, getVariableSetValuesForRun as i2, getWorkspace as i3, getWorkspaceControlEvent as i4, getWorkspaceDefaultRigId as i5, getWorkspaceEnvironment as i6, getWorkspaceEnvironmentByName as i7, getWorkspaceEnvironmentValuesForRun as i8, getWorkspaceGrant as i9, isSessionEventPersistenceError as iA, isStripeWebhookProcessed as iB, latestWorkspaceCapture as iC, listApiKeys as iD, listCapabilityCatalogItems as iE, listCapabilityInstallations as iF, listCodexAccountStatuses as iG, listCodexResetRedemptionRecoveries as iH, listConnectionsMetadata as iI, listCreditBalancesByAccount as iJ, listDistinctRigVersionIdsInGroup as iK, listDistinctVariableSetIdsInGroup as iL, listEnabledMcpCapabilityServers as iM, listEnrollments as iN, listGitHubInstallationAccessForWorkspace as iO, listGitHubInstallationIdsForWorkspace as iP, listGitHubInstallationsForWorkspace as iQ, listKnowledgeMemories as iR, listLiveModalSandboxLeaseAttributions as iS, listMeterableWarmLeases as iT, listOpenPtySessions as iU, listOutstandingSessionSystemUpdates as iV, listPackInstallations as iW, listPendingCodexCapacityWakeTargets as iX, listPendingSessionTurns as iY, listRecordings as iZ, listRegistryCatalogSurfaceKeys as i_, getWorkspaceModelPolicy as ia, getWorkspacePack as ib, grantWorkspaceAccess as ic, hasAuditableGitHubInstallationAuthority as id, hasCreditLedgerEntry as ie, hashMemoryText as ig, heartbeatCodexCredentialLease as ih, heartbeatCodexCredentialLeaseUntil as ii, heartbeatLeaseHolder as ij, ingestMachineMetricsSample as ik, initializeSessionStartAtomically as il, insertFailedWorkspaceCapture as im, insertMachineMetricsSeries as io, insertPtySession as ip, insertRecording as iq, insertWorkspaceCapture as ir, inspectRuntimeDatabasePosture as is, installOrReadTurnExecutionPolicyForAttempt as it, interruptedToolCallResult as iu, isCodexBilledTurn as iv, isDatabasePersistenceFailure as iw, isMemoryTextTooLong as ix, isRetryablePersistenceSqlState as iy, isSessionCompactionRequested as iz, type AdoptCodexResetRedemptionResult as j, planWorkspaceCaptureGc as j$, listRigChanges as j0, listRigVersionMonitoringSummaries as j1, listRigVersions as j2, listRigs as j3, listSandboxes as j4, listScheduledTaskRuns as j5, listScheduledTasks as j6, listSessionDiscoverySummaries as j7, listSessionEventPage as j8, listSessionEvents as j9, markFileUploadFailed as jA, markSandboxFileResourcesMaterialized as jB, markSandboxProviderReady as jC, markSandboxRestoreVerifying as jD, markScheduledTaskRunFailedIfQueued as jE, markSessionAttemptQuiesced as jF, markSessionSystemUpdateOutboxDeliveredInTransaction as jG, markSessionSystemUpdateOutboxFailed as jH, markSessionWorkflowWakeDelivered as jI, markSessionWorkflowWakeFailed as jJ, markStaleRegistryCatalogItems as jK, markStripeWebhookProcessed as jL, markWarmLeaseInstanceLost as jM, materializeGoalContinuation as jN, mcpServerIdForCapability as jO, moveQueuedTurnInTransaction as jP, mutateSessionControlInTransaction as jQ, mutateWorkspaceControlInTransaction as jR, nestedPostgresSqlState as jS, newSessionDraftToolsProvided as jT, nextSessionHistoryPosition as jU, normalizeBearerScheme as jV, normalizeMemoryText as jW, orphanedResultRowIndicesForRepair as jX, peekSessionWork as jY, persistDrainSnapshot as jZ, persistWarmSnapshot as j_, listSessionHumanInputRequests as ja, listSessionIdsInGroup as jb, listSessionMcpServerMetadata as jc, listSessionMcpServersForChildInheritance as jd, listSessionMcpServersForRun as je, listSessionSpawnDenials as jf, listSessionSystemUpdatesForTurn as jg, listSessionTurns as jh, listSessions as ji, listSessionsForSubject as jj, listSocialConnections as jk, listSocialPosts as jl, listUsageEvents as jm, listVariableSets as jn, listWorkspaceControlEvents as jo, listWorkspaceEnvironments as jp, listWorkspaceMembers as jq, listWorkspacePacks as jr, listWorkspacesForSubject as js, loadCodexCredentialForRun as jt, loadConnectionCredentialForBroker as ju, loadIntegrationOAuthClient as jv, loadVariableSetForRun as jw, loadWorkspaceEnvironmentForRun as jx, lockSessionEventWriteRows as jy, lockWorkspaceInferenceControl as jz, AgentCommandAuthorityError as k, retainedProcessSettlementIdentity as k$, projectEffectiveControlForRelatedAccess as k0, projectSessionForRelatedAccess as k1, pruneHostExportOutbox as k2, publicNewSessionDraftOptions as k3, quarantineCodexCredentialForLease as k4, reArmDrainingLease as k5, readActiveSandbox as k6, readLease as k7, readMachineMetricsLatest as k8, readMachineMetricsLatestForWorkspace as k9, registerDbBinding as kA, registerHostExportConsumer as kB, registerInternalUpdateWakeInTransaction as kC, registerPendingSessionToolCall as kD, registerSessionTurnAttemptClaim as kE, registerSessionWorkflowWakeInTransaction as kF, registerWorkspacePack as kG, releaseCodexCredentialLease as kH, releaseCodexResetRedemptionClaim as kI, releaseLeaseHolder as kJ, removeWorkspaceMember as kK, renameCodexAccount as kL, renderWorkspaceMemoryBlock as kM, replaceIntegrationOAuthClient as kN, requestSessionCompaction as kO, requestSessionTurnRecovery as kP, requireFile as kQ, requireScheduledTask as kR, requireSession as kS, requireSocialConnection as kT, requireWorkspace as kU, reserveSessionCommandReceipt as kV, reserveToolspaceCallForAttempt as kW, resolveWorkspaceMemoryBlock as kX, resumeHostExportConsumer as kY, retainWorkspaceMutationProcess as kZ, retainedProcessReconciliationProof as k_, readMachineMetricsSeries as ka, readWorkspaceArchiveCapturePreflight as kb, reapExpiredSessionListSnapshots as kc, reapStaleLeaseHolders as kd, reapStaleLeaseHoldersGlobal as ke, reconcileCodexCapacityWait as kf, reconcileColdLostLeaseInstanceBlockers as kg, recordAuditEvent as kh, recordCodexAccountConnectors as ki, recordCodexAccountUsage as kj, recordCodexAccountUsageWithWakeTargets as kk, recordCodexTokenRefresh as kl, recordConnectionTokenRefresh as km, recordConnectionUsed as kn, recordLeaseDataPlaneUrl as ko, recordLeaseTerminalDataPlaneUrl as kp, recordPendingSessionToolCallResult as kq, recordRetainedProcessReconciliationProof as kr, recordSessionActiveCodexCredential as ks, recordSkippedContextCompaction as kt, recordStreamAcknowledgment as ku, recordStripeWebhookEvent as kv, recordUsageEvent as kw, recordWarmingSandboxCreated as kx, recoverSessionDispatch as ky, refreshOAuthConnectionCredential as kz, type AgentInternalUpdateCommandResult as l, supersedeSessionCurrentDirectionInTransaction as l$, retireHostExportConsumer as l0, revokeApiKey as l1, revokeConnection as l2, revokeEnrollment as l3, revokeViewer as l4, rewindHostExportConsumer as l5, rlsContextForWorkspace as l6, rlsStrategyFor as l7, rotateWorkspaceArchives as l8, runIdempotentPersistenceTransaction as l9, setEnrollmentOpStreamState as lA, setEnrollmentWentOffline as lB, setInitialActiveCodexCredential as lC, setRlsContext as lD, setSessionCodexPin as lE, setSessionGoalLastContinuationTurn as lF, setSessionGoalStatus as lG, setSessionGoalStatusWithEvent as lH, setSessionLastInputTokensForTurnAttempt as lI, setSessionPin as lJ, setSubjectRlsContext as lK, setTemporalWorkflowId as lL, setVariableSetVariable as lM, setWorkspaceDefaultRig as lN, setWorkspaceEnvironmentVariable as lO, settleCodexCredentialFailover as lP, settleCodexCredentialLeaseLoss as lQ, settleRetainedProcess as lR, settleScheduledTaskRunInTransaction as lS, settleSessionAttemptInterruptions as lT, settleSessionIdleWithParentOutbox as lU, shortMemoryId as lV, steerAgentSessionInTransaction as lW, steerQueuedTurnInTransaction as lX, storeIntegrationOAuthClient as lY, submitHumanPromptInTransaction as lZ, sumUsageQuantity as l_, runtimeDatabaseReadyCheck as la, safeDatabaseErrorFacts as lb, sanitizeEventPayload as lc, sanitizeEventString as ld, sanitizeMemoryText as le, sanitizeModelPayload as lf, saveComposerDraftInTransaction as lg, saveNewSessionDraftInTransaction as lh, saveRunState as li, saveWorkspaceMemory as lj, searchWorkspaceMemories as lk, seedNewSessionDraftInTransaction as ll, sendAgentMessageInTransaction as lm, serializeEffectiveSessionControl as ln, sessionAuthorizationScopeFilter as lo, sessionSubject as lp, sessionTreeStatsForSessions as lq, sessionsWithActiveOpOnEnrollment as lr, setActiveCodexCredential as ls, setActiveSandbox as lt, setCodexCredentialExhausted as lu, setCodexCredentialExhaustedWithWakeTargets as lv, setCodexCredentialStatus as lw, setCodexCredentialStatusById as lx, setConnectionStatus as ly, setEnrollmentDisplayState as lz, type AppendEventInput as m, touchEnrollmentLastSeen as m0, touchLeaseHolder as m1, updateCodexAllocatorEligibility as m2, updateCodexRotationSettings as m3, updateConnection as m4, updateImportBatchCounts as m5, updateKnowledgeMemory as m6, updatePackInstallationStatus as m7, updatePtySessionActivity as m8, updateRecording as m9, verifyRetainedProcessMutationSettlement as mA, verifyWorkspaceMutationSettlement as mB, withAccountRls as mC, withCodexCapacityMutation as mD, withCodexCredentialRefreshLock as mE, withCodexTokenDeadline as mF, withRlsContext as mG, withWorkspaceRls as mH, withWorkspaceSubjectRls as mI, withWorkspaceUsageLock as mJ, workspaceCaptureAtRevision as mK, workspaceCodexSubscriptionActive as mL, updateRig as ma, updateRigChangeStatus as mb, updateScheduledTask as mc, updateScheduledTaskRun as md, updateSessionCommandReceiptResult as me, updateSessionGoal as mf, updateSessionGoalWithEvent as mg, updateSessionMcpApprovalPolicy as mh, updateSessionMcpServerCredentials as mi, updateSessionTitle as mj, updateVariableSet as mk, updateWorkspace as ml, updateWorkspaceEnvironment as mm, updateWorkspaceSettings as mn, upsertBillingCustomer as mo, upsertCapabilityCatalogItem as mp, upsertCodexSubscriptionCredential as mq, upsertGitHubInstallation as mr, upsertMachineMetricsLatest as ms, upsertRegistryCapabilityCatalogItem as mt, upsertSandboxSessionEnvelope as mu, upsertSessionGoal as mv, upsertSessionGoalWithEvent as mw, upsertWorkspaceModelPolicy as mx, validateHumanInputResponse as my, verifyDirectWorkspaceMutationSettlement as mz, type ApplyContextCompactionResult as n, type ApplySessionTurnSettlementInput as o, type ApplySessionTurnSettlementResult as p, provisionRoles, type ArmCodexCapacityWaitResult as q, type BootstrapWorkspaceInput as r, CODEX_CAPACITY_REFRESH_MIN_MS as s, CODEX_CREDENTIAL_LEASE_TTL_MS as t, CODEX_RESET_REDEMPTION_OUTCOMES as u, CODEX_ROTATION_STRATEGIES as v, type ClaimCodexResetRedemptionResult as w, type ClaimSessionWorkForAttemptInput as x, type ClaimSessionWorkForAttemptResult as y, type ClearSessionContextResult as z };
+export { type CodexRateLimitResetCreditsAccountResult as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BeginSandboxRematerializationResult as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type ClearSessionContextResult as D, type CodexAccountStatus as E, type CodexAccountUsageSnapshot as F, type CodexAllocatorUpdateResult as G, type CodexAuthDeps as H, type CodexCapacityAvailabilityDecision as I, type CodexCapacityMutationResult as J, type CodexCapacityResetKind as K, type CodexCapacitySelectionContext as L, type CodexCapacityWait as M, type CodexCapacityWaitStatus as N, type CodexCapacityWakeTarget as O, type CodexCredentialForRun as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialLeaseCandidateFilter as Q, type CodexCredentialLeaseCandidateFilterResult as R, type CodexCredentialLeasePolicyScopeResolver as S, type CodexCredentialLeaseQuarantine as T, type CodexCredentialLeaseResult as U, type CodexCredentialLeaseSelection as V, type CodexCredentialLeaseSelectionContext as W, type CodexCredentialStatus as X, type CodexCredentialTokens as Y, type CodexLeaseAccountStatus as Z, type CodexPinSource as _, type AcceptSessionApprovalDecisionResult as a, type HostMcpCredentialResolverContext as a$, type CodexResetRedemptionAttempt as a0, type CodexResetRedemptionOutcome as a1, type CodexResetRedemptionRecovery as a2, type CodexResetRedemptionSendNotReadyReason as a3, type CodexResetRedemptionStatus as a4, type CodexRotationSettings as a5, type CodexRotationStrategy as a6, type CodexTokenDeadlineClock as a7, type CodexTokenDeadlineOptions as a8, type CompleteSlackBotPostOperationResult as a9, type EditQueueCommandResult as aA, type EffectiveControlBlocker as aB, type EffectiveControlResumeOption as aC, type EffectiveControlState as aD, type EffectiveSessionControl as aE, type EnableCapabilityInstallationInput as aF, type EnabledMcpCapabilityServer as aG, type EnqueueSessionTurnInput as aH, type EnrollmentExposure as aI, type EnrollmentOs as aJ, type EnrollmentRecord as aK, type EnrollmentStatus as aL, type ExpiredDrainingSandboxLeaseCount as aM, type ExpiredFileUploadCleanupClaim as aN, FORCE_RLS_TABLES as aO, type FenceCodexResetRedemptionSendResult as aP, type FileUploadCleanupClaimResult as aQ, type ForceDrainResult as aR, type FrozenTurnInitiator as aS, type GitHubInstallation as aT, type GitHubInstallationAccess as aU, GitHubInstallationAuthorityCommitError as aV, type GoalContinuationDecision as aW, type HostExportConsumerStatus as aX, type HostExportKind as aY, HostExportPayloadError as aZ, HostMcpCredentialBindingError as a_, type ComposerDraftRow as aa, type ConnectionBrokerDeps as ab, type ConnectionCredentialForBroker as ac, type ConnectionMetadataWithVerification as ad, ConnectionRefreshHttpError as ae, type ConsumeOAuthStateNonceInput as af, type CorrectWorkspaceMemoryInput as ag, type CorrectWorkspaceMemoryResult as ah, type CreateCapabilityCatalogItemInput as ai, type CreateConnectionInput as aj, type CreateDbOptions as ak, type CreateImportBatchInput as al, type CreateKnowledgeMemoryInput as am, type CreatePackInstallationInput as an, type CreateScheduledTaskInput as ao, type CreateSessionGoalInput as ap, type CreateSessionMcpServerInput as aq, type CreateSocialConnectionInput as ar, type CreateSocialPostInput as as, type CreditBalanceByAccount as at, type Database as au, type DatabaseFailureCode as av, type DbClient as aw, type DbSession as ax, type DeviceEnrollmentRequestRecord as ay, type DeviceEnrollmentStatus as az, type AcceptSessionHumanInputResponseResult as b, type ReconcileColdLostLeaseInstanceBlockersResult as b$, HostMcpCredentialScopeError as b0, HumanInputResponseValidationError as b1, type IdempotentPersistenceTransactionOptions as b2, type ImportBatch as b3, type InitializeSessionStartInput as b4, type InitializeSessionStartResult as b5, type InstallOrReadTurnExecutionPolicyForAttemptResult as b6, type IntegrationOAuthClientForUse as b7, type LeaseHolderKind as b8, type LeaseSnapshot as b9, type MarkWarmLeaseInstanceLostResult as bA, type MaterializeGoalContinuationResult as bB, type MemoryBlockRecord as bC, type MemoryEmbedder as bD, type MemorySanitizeResult as bE, type MeterableWarmLease as bF, NON_RLS_RUNTIME_TABLES as bG, type NestedAgentDepthDeploymentPolicy as bH, type NestedAgentDepthPolicySource as bI, NewSessionDraftAccessError as bJ, NewSessionDraftConflictError as bK, type NewSessionDraftRow as bL, PROTECTED_NO_DIRECT_DML_TABLES as bM, type PendingSessionToolCallInput as bN, type PersistenceFailureDetails as bO, type PersistenceRetryOutcome as bP, type QueueCommandConflictCode as bQ, QueueCommandConflictError as bR, type QueueCommandResult as bS, type QueuedTurnRow as bT, RUNTIME_DML_TABLES as bU, RUNTIME_FULL_DML_TABLES as bV, RUNTIME_READ_INSERT_TABLES as bW, RUNTIME_READ_ONLY_TABLES as bX, RUNTIME_TABLE_PRIVILEGES as bY, type ReapDrainable as bZ, type ReconcileCodexCapacityWaitResult as b_, type ListKnowledgeMemoryOptions as ba, type ListSessionEventPageOptions as bb, type ListSessionEventsOptions as bc, type ListSessionsForSubjectOptions as bd, type ListSessionsOptions as be, type LiveModalSandboxLeaseAttribution as bf, type LostProviderWorkspaceSettlement as bg, MACHINE_METRICS_SERIES_INTERVAL_MS as bh, MAX_INTERNAL_UPDATE_BATCH_BYTES as bi, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as bj, MAX_INTERNAL_UPDATE_BYTES as bk, MEMORY_ACTIVE_RECORD_CAP as bl, MEMORY_BLOCK_KIND_ORDER as bm, MEMORY_BLOCK_RECORD_LIMIT as bn, MEMORY_CORRECT_TOOL_DESCRIPTION as bo, MEMORY_KIND_SECTION_TITLES as bp, MEMORY_NEAR_DUP_COSINE_THRESHOLD as bq, MEMORY_NEAR_DUP_NEIGHBORS as br, MEMORY_SAVE_TOOL_DESCRIPTION as bs, MEMORY_SEARCH_DEFAULT_LIMIT as bt, MEMORY_SEARCH_MAX_LIMIT as bu, MEMORY_SEARCH_TOOL_DESCRIPTION as bv, MEMORY_TEXT_MAX_CHARS as bw, MEMORY_VISIBLE_RECORD_CAP as bx, type MachineMetricsRow as by, type MachineMetricsSample as bz, type AccrueWarmSecondsResult as c, SanitizedDatabasePersistenceCause as c$, type RecoverSessionDispatchInput as c0, type RecoverSessionDispatchResult as c1, type RefreshTransportOptions as c2, type RegisterWorkspacePackInput as c3, type RegistryCapabilityCatalogItemInput as c4, type RegistryCatalogSurfaceKey as c5, type ReplaceIntegrationOAuthClientInput as c6, type RequestSessionTurnRecoveryInput as c7, type RequestSessionTurnRecoveryResult as c8, type ResolveConnectionCredentialInput as c9, SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT as cA, SESSION_LIST_SNAPSHOT_MAX_IDS as cB, type SafeDatabaseErrorFacts as cC, type SandboxArchiveAvailability as cD, type SandboxArchiveRevision as cE, SandboxImageConflictError as cF, type SandboxKind as cG, type SandboxLeaseLiveness as cH, SandboxLeaseRecoveryBlockedError as cI, SandboxLeaseSupersededError as cJ, type SandboxOpenPtySessionRow as cK, type SandboxProviderExistence as cL, type SandboxPtyProcessIdentity as cM, type SandboxPtySessionRow as cN, type SandboxRecord as cO, type SandboxRecoveryState as cP, type SandboxRestoreStatus as cQ, type SandboxRetainedProcess as cR, type SandboxRetainedProcessIdentity as cS, SandboxRetainedProcessPromotionFencedError as cT, type SandboxRetainedProcessReconciliationClaim as cU, type SandboxRetainedProcessState as cV, SandboxRigConflictError as cW, type SandboxWorkspaceMutationAdmission as cX, SandboxWorkspaceMutationFencedError as cY, type SandboxWorkspaceMutationProviderOutcome as cZ, type SandboxWorkspaceReadiness as c_, type ResolveConnectionCredentialResult as ca, type RetainedFileArtifact as cb, type RetainedProcessProviderProof as cc, RigActiveVersionChangedError as cd, RigChangeAlreadyVerifyingError as ce, type RigChangeMonitoringSummary as cf, RigChangeTransitionError as cg, type RigVersionContentInput as ch, type RigVersionMonitoringSummary as ci, type RlsContext as cj, type RlsStrategy as ck, type RuntimeDatabaseIdentity as cl, type RuntimeDatabasePosture as cm, RuntimeDatabasePostureError as cn, type RuntimeDatabasePostureOptions as co, type RuntimeRoutinePosture as cp, type RuntimeSchemaPosture as cq, type RuntimeTableDmlPrivilege as cr, type RuntimeTablePosture as cs, type RuntimeTablePrivilegeContract as ct, SESSION_ANCESTRY_LIMIT as cu, SESSION_DISCOVERY_CONTROL_TARGET_LIMIT as cv, SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS as cw, SESSION_DISCOVERY_GOAL_MAX_CHARS as cx, SESSION_DISCOVERY_MESSAGE_MAX_CHARS as cy, SESSION_EVENT_DB_PAGE_MAX_BYTES as cz, type AcquireLeaseInput as d, type ToolspaceTurnAttemptClaims as d$, type SaveWorkspaceMemoryInput as d0, type SaveWorkspaceMemoryResult as d1, type SessionAttemptInterruptionSettlement as d2, type SessionCodexState as d3, type SessionCommandActor as d4, SessionCommandIdempotencyError as d5, type SessionCommandReceiptRow as d6, SessionContextBusyError as d7, SessionControlConflictError as d8, SessionControlInvariantError as d9, type SessionRecordingCodec as dA, type SessionRecordingMode as dB, type SessionRecordingRow as dC, type SessionRecordingState as dD, type SessionSpawnDenial as dE, type SessionSpawnDenialCode as dF, SessionSpawnDeniedDbError as dG, type SessionSystemUpdateOutboxDelivery as dH, SessionToolPolicyVersionConflictError as dI, type SessionTurnAttemptOutcome as dJ, type SessionTurnForExecution as dK, type SessionTurnRecordingSettlement as dL, type SessionWorkPeek as dM, type SessionWorkTrigger as dN, type SessionWorkflowWake as dO, type SessionWorkflowWakeDeliveryResult as dP, type SetSessionCodexPinOptions as dQ, type SetSessionGoalStatusEvent as dR, type SettleCodexCredentialFailoverResult as dS, type SettleCodexCredentialLeaseLossResult as dT, type SlackBotPostOperation as dU, type SteerQueueCommandResult as dV, type StoreIntegrationOAuthClientInput as dW, type StoredIntegrationOAuthClient as dX, type StreamAcknowledgment as dY, type SubmitHumanPromptResult as dZ, type ToolspaceCallReservation as d_, type SessionControlMutationResult as da, type SessionCreateDeniedResult as db, type SessionCreateInput as dc, type SessionCreateResult as dd, type SessionCreateSuccessResult as de, type SessionDepthPolicy as df, type SessionDiscoveryControl as dg, type SessionDiscoveryCursor as dh, type SessionDiscoveryOrderBy as di, type SessionDiscoverySummary as dj, type SessionEventPage as dk, SessionEventPersistenceError as dl, type SessionEventWriteLockInput as dm, type SessionEventWriteLocks as dn, type SessionGoalContinuationProjection as dp, SessionIdConflictError as dq, type SessionLineage as dr, SessionListAccessError as ds, type SessionListCursor as dt, SessionListCursorError as du, SessionListCursorExpiredError as dv, SessionListSnapshotLimitError as dw, type SessionMcpServerForRun as dx, SessionPinAccessError as dy, SessionPinVersionConflictError as dz, type AcquireLeaseResult as e, assertAgentCommandAuthorityInTransaction as e$, type TurnAttemptFenceRejectReason as e0, type UpdateConnectionInput as e1, type UpdateImportBatchCountsInput as e2, type UpdateKnowledgeMemoryInput as e3, type UpdateScheduledTaskInput as e4, type UpdateSessionMcpApprovalPolicyResult as e5, type UpdateSessionMcpServerCredentialsInput as e6, type UpdateSessionMcpServerCredentialsResult as e7, type UpsertCodexSubscriptionCredentialResult as e8, type UserLookup as e9, acknowledgeHostExportBatch as eA, acquireCodexCredentialLease as eB, acquireLease as eC, activateRigVersion as eD, activateWorkspaceInstructionPolicyRevision as eE, addSessionSystemUpdate as eF, addSessionSystemUpdateWithSourceMutation as eG, admitToolspaceTurnAttempt as eH, adoptCodexResetRedemptionAttempt as eI, advanceWorkspaceGeneration as eJ, advanceWorkspaceGenerationForDirectRequest as eK, advanceWorkspaceGenerationForRetainedProcess as eL, allAccountPermissions as eM, allWorkspacePermissions as eN, appendSessionEventToSandboxGroup as eO, appendSessionEvents as eP, appendSessionEventsAndUpdateSession as eQ, appendSessionEventsForTurnAttempt as eR, appendSessionEventsWithLockedSessionUpdate as eS, appendSessionHistoryItems as eT, applyContextCompaction as eU, applyCreditDebitUpToBalance as eV, applyCreditLedgerEntry as eW, applySessionTurnSettlement as eX, approveDeviceEnrollmentRequest as eY, areGitHubRepositoriesAllowedForWorkspace as eZ, armCodexCapacityWait as e_, type VariableSetForRun as ea, WORKSPACE_MEMORY_BLOCK_EMPTY as eb, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as ec, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as ed, type WorkspaceCaptureCommitResult as ee, type WorkspaceCaptureGcPlan as ef, type WorkspaceCaptureGcRow as eg, type WorkspaceCaptureRow as eh, type WorkspaceControlLockMode as ei, type WorkspaceControlMutationResult as ej, type WorkspaceControlRow as ek, type WorkspaceEnvironmentForRun as el, WorkspaceInstructionPolicyConflictError as em, WorkspaceInstructionPolicyInvalidOperationError as en, WorkspaceInstructionPolicyLegacyUnavailableError as eo, WorkspaceInstructionPolicyNotFoundError as ep, type WorkspaceMemoryOrigin as eq, type WorkspaceMemorySearchInput as er, type WorkspaceMemorySearchMode as es, type WorkspaceMemorySearchResult as et, type WorkspaceModelPolicy as eu, abandonCodexResetRedemptionBeforeProvider as ev, abandonRecordingForTurnAttempt as ew, acceptSessionApprovalDecision as ex, acceptSessionHumanInputResponse as ey, accrueWarmSeconds as ez, type ActiveRetainedProcessOwnerCount as f, createDb as f$, assertRuntimeDatabasePosture as f0, autoResumeSessionBranchInTransaction as f1, beginRigChangeVerificationAttempt as f2, beginSandboxRematerialization as f3, bindAuthorizedGitHubInstallationRepositories as f4, bindGitHubInstallationRepositories as f5, bootstrapWorkspace as f6, buildChildCompletionDigest as f7, buildCodexTokenResolver as f8, buildConnectionTokenResolver as f9, computeWorkspaceCaptureGcPlan as fA, confirmDrainCold as fB, consumeDeviceEnrollmentRequest as fC, consumeIntegrationOAuthStateNonce as fD, consumeNewSessionDraftInTransaction as fE, correctWorkspaceMemory as fF, countActiveApiKeysForWorkspace as fG, countActiveRetainedProcessesByOwnerState as fH, countActiveSessionHistoryItems as fI, countActiveSessionsForWorkspace as fJ, countActiveSessionsUsingEnvironment as fK, countActiveSessionsUsingVariableSet as fL, countConsecutiveReactiveRotations as fM, countExpiredDrainingSandboxLeases as fN, countQueuedTurns as fO, countRigs as fP, countSandboxLeasesByLiveness as fQ, countScheduledTasksForWorkspace as fR, countScheduledTasksUsingEnvironment as fS, countScheduledTasksUsingVariableSet as fT, countSessionHistoryItems as fU, countSessionsUsingRig as fV, countVariableSets as fW, countWorkspaceEnvironments as fX, countWorkspacesForAccount as fY, createApiKey as fZ, createConnection as f_, buildHostConnectionTokenResolver as fa, canonicalSessionCommandHash as fb, claimCodexResetRedemption as fc, claimExpiredFileUploadCleanup as fd, claimFileUploadCleanup as fe, claimHostExportBatch as ff, claimPendingSessionSystemUpdateOutbox as fg, claimPendingSessionWorkflowWakes as fh, claimSessionWorkForAttempt as fi, claimSlackBotPostOperation as fj, claimTerminalRetainedProcesses as fk, clearDurablePendingSessionToolCalls as fl, clearEnrollmentWentOffline as fm, clearPendingSessionToolspaceCall as fn, clearSessionContext as fo, clearSessionGoal as fp, clearedContextMarkerItem as fq, closePtySession as fr, closeSessionTurnAttemptInTransaction as fs, codexCapacityRefreshBackoffMs as ft, commitWarmingToWarm as fu, completeCodexResetRedemption as fv, completeExpiredFileUploadCleanup as fw, completeFileUpload as fx, completeFileUploadCleanup as fy, completeSlackBotPostOperation as fz, type ActiveSandboxPointer as g, evaluateSessionControl as g$, createDeviceEnrollmentRequest as g0, createEnrollment as g1, createFileUpload as g2, createImportBatch as g3, createKnowledgeMemory as g4, createRig as g5, createRigChange as g6, createRigVersion as g7, createRigVersionForChangePromotion as g8, createSandbox as g9, deleteVariableSetVariable as gA, deleteWorkspace as gB, deleteWorkspaceCaptureRows as gC, deleteWorkspaceEnvironment as gD, deleteWorkspaceEnvironmentVariable as gE, deleteWorkspacePack as gF, denyDeviceEnrollmentRequest as gG, diffWorkspaceInstructionPolicyContent as gH, diffWorkspaceInstructionPolicyRevisions as gI, disableCapabilityInstallation as gJ, disableHostExportConsumer as gK, disconnectAllCodexAccounts as gL, disconnectCodexAccount as gM, editQueuedTurnInTransaction as gN, enableCapabilityInstallation as gO, enablePackInstallation as gP, encodeSessionListCursor as gQ, encryptEnvironmentValue as gR, enqueueSessionTurn as gS, enqueueSessionWorkflowWake as gT, enqueueSessionWorkflowWakeIfRunnable as gU, enqueueSessionWorkflowWakeInTransaction as gV, ensureCodexRotationSettings as gW, ensureManagedAccessForUser as gX, estimateMemoryTokens as gY, evaluateGoalContinuation as gZ, evaluateRuntimeDatabasePosture as g_, createScheduledTask as ga, createScheduledTaskRun as gb, createSession as gc, createSessionGoal as gd, createSessionMcpServers as ge, createSessionWithIdempotencyKey as gf, createSessionWithIdempotencyKeyResult as gg, createSocialConnection as gh, createSocialPost as gi, createVariableSet as gj, createWorkspace as gk, createWorkspaceEnvironment as gl, createWorkspaceInstructionPolicyDraft as gm, databaseFailureCode as gn, deadLetterHostExportHead as go, decodeSessionListCursor as gp, decryptEnvironmentValue as gq, decryptedCapabilityHeaders as gr, deferRetainedProcessReconciliation as gs, deleteGitHubInstallationBinding as gt, deleteRecording as gu, deleteRig as gv, deleteRigIfNoActiveSessions as gw, deleteScheduledTask as gx, deleteSessionQueueItemInTransaction as gy, deleteVariableSet as gz, type AddSessionSystemUpdateInput as h, getSessionGoal as h$, evaluateSessionControls as h0, evaluateSessionDiscoveryControls as h1, expireSessionHumanInputRequest as h2, failHostExportBatch as h3, failSandboxRematerialization as h4, failWarmingToCold as h5, fenceCodexResetRedemptionSend as h6, fetchCodexRateLimitResetCreditsForAccount as h7, fetchCodexUsageForAccount as h8, finalizeEnrollmentByToken as h9, getManagedUserByEmail as hA, getMaterializedSandboxFileResources as hB, getNestedAgentDepthDeploymentPolicy as hC, getNewSessionDraftInTransaction as hD, getOpenPtySession as hE, getOrCreateSessionSystemUpdateOutbox as hF, getPackInstallation as hG, getPendingDeviceEnrollmentRequestByUserCode as hH, getPendingDeviceEnrollmentRequestByUserCodeGlobal as hI, getRecording as hJ, getRetainedFileArtifact as hK, getRetainedProcess as hL, getRig as hM, getRigByName as hN, getRigChange as hO, getRigName as hP, getRigVersion as hQ, getRigVersionById as hR, getSandbox as hS, getSandboxSessionEnvelope as hT, getScheduledTask as hU, getSession as hV, getSessionByCreateIdempotencyKey as hW, getSessionCodexState as hX, getSessionEvent as hY, getSessionEventByClientEventId as hZ, getSessionForSubject as h_, findActiveApiKeyByHash as ha, forceDrainOverLimitViewerOnlyBoxes as hb, frozenInitiatorForCommandActor as hc, getActiveSessionHistoryItems as hd, getActiveSessionTurnForExecution as he, getAnySessionInGroup as hf, getBillingBalance as hg, getBillingCustomer as hh, getCapabilityCatalogItem as hi, getCapabilityInstallation as hj, getCodexCapacityWaitForSession as hk, getCodexCredentialStatus as hl, getCodexResetRedemptionAttempt as hm, getCodexRotationSettings as hn, getComposerDraftInTransaction as ho, getConnectionMetadata as hp, getDeviceEnrollmentRequestByDeviceCode as hq, getEnrollment as hr, getFile as hs, getFileUpload as ht, getHostExportConsumerStatus as hu, getHumanInputResumeForEvent as hv, getKnowledgeMemory as hw, getLatestRunState as hx, getLatestStartedSessionTurn as hy, getManagedAccount as hz, type AddSessionSystemUpdateResult as i, listDistinctRigVersionIdsInGroup as i$, getSessionGoalWithContinuation as i0, getSessionHistoryItems as i1, getSessionHumanInputRequest as i2, getSessionLineage as i3, getSessionQueueSnapshot as i4, getSessionRootId as i5, getSessionSpawnDenial as i6, getSessionSpawnDenialByIdempotencyKey as i7, getSessionSystemUpdateOutboxByDedupeKey as i8, getSessionTurn as i9, heartbeatLeaseHolder as iA, importLegacyWorkspaceInstructionPolicyDraft as iB, ingestMachineMetricsSample as iC, initializeSessionStartAtomically as iD, insertFailedWorkspaceCapture as iE, insertMachineMetricsSeries as iF, insertPtySession as iG, insertRecording as iH, insertWorkspaceCapture as iI, inspectRuntimeDatabasePosture as iJ, installOrReadTurnExecutionPolicyForAttempt as iK, interruptedToolCallResult as iL, isCodexBilledTurn as iM, isDatabasePersistenceFailure as iN, isMemoryTextTooLong as iO, isRetryablePersistenceSqlState as iP, isSessionCompactionRequested as iQ, isSessionEventPersistenceError as iR, isStripeWebhookProcessed as iS, latestWorkspaceCapture as iT, listApiKeys as iU, listCapabilityCatalogItems as iV, listCapabilityInstallations as iW, listCodexAccountStatuses as iX, listCodexResetRedemptionRecoveries as iY, listConnectionsMetadata as iZ, listCreditBalancesByAccount as i_, getSessionTurnForAttempt as ia, getSlackBotPostOperation as ib, getSocialConnection as ic, getStoredCapabilityHeaderCiphertext as id, getStreamAcknowledgment as ie, getVariableSet as ig, getVariableSetByName as ih, getVariableSetValuesForRun as ii, getWorkspace as ij, getWorkspaceControlEvent as ik, getWorkspaceDefaultRigId as il, getWorkspaceEnvironment as im, getWorkspaceEnvironmentByName as io, getWorkspaceEnvironmentValuesForRun as ip, getWorkspaceGrant as iq, getWorkspaceInstructionPolicyRevision as ir, getWorkspaceModelPolicy as is, getWorkspacePack as it, grantWorkspaceAccess as iu, hasAuditableGitHubInstallationAuthority as iv, hasCreditLedgerEntry as iw, hashMemoryText as ix, heartbeatCodexCredentialLease as iy, heartbeatCodexCredentialLeaseUntil as iz, type AdoptCodexResetRedemptionResult as j, markSessionWorkflowWakeFailed as j$, listDistinctVariableSetIdsInGroup as j0, listEnabledMcpCapabilityServers as j1, listEnrollments as j2, listGitHubInstallationAccessForWorkspace as j3, listGitHubInstallationIdsForWorkspace as j4, listGitHubInstallationsForWorkspace as j5, listKnowledgeMemories as j6, listLiveModalSandboxLeaseAttributions as j7, listMeterableWarmLeases as j8, listOpenPtySessions as j9, listSessionsForSubject as jA, listSocialConnections as jB, listSocialPosts as jC, listUsageEvents as jD, listVariableSets as jE, listWorkspaceControlEvents as jF, listWorkspaceEnvironments as jG, listWorkspaceInstructionPolicyRevisions as jH, listWorkspaceMembers as jI, listWorkspacePacks as jJ, listWorkspacesForSubject as jK, loadCodexCredentialForRun as jL, loadConnectionCredentialForBroker as jM, loadIntegrationOAuthClient as jN, loadVariableSetForRun as jO, loadWorkspaceEnvironmentForRun as jP, lockSessionEventWriteRows as jQ, lockWorkspaceInferenceControl as jR, markFileUploadFailed as jS, markSandboxFileResourcesMaterialized as jT, markSandboxProviderReady as jU, markSandboxRestoreVerifying as jV, markScheduledTaskRunFailedIfQueued as jW, markSessionAttemptQuiesced as jX, markSessionSystemUpdateOutboxDeliveredInTransaction as jY, markSessionSystemUpdateOutboxFailed as jZ, markSessionWorkflowWakeDelivered as j_, listOutstandingSessionSystemUpdates as ja, listPackInstallations as jb, listPendingCodexCapacityWakeTargets as jc, listPendingSessionTurns as jd, listRecordings as je, listRegistryCatalogSurfaceKeys as jf, listRigChangeMonitoringSummaries as jg, listRigChanges as jh, listRigVersionMonitoringSummaries as ji, listRigVersions as jj, listRigs as jk, listSandboxes as jl, listScheduledTaskRuns as jm, listScheduledTasks as jn, listSessionDiscoverySummaries as jo, listSessionEventPage as jp, listSessionEvents as jq, listSessionHumanInputRequests as jr, listSessionIdsInGroup as js, listSessionMcpServerMetadata as jt, listSessionMcpServersForChildInheritance as ju, listSessionMcpServersForRun as jv, listSessionSpawnDenials as jw, listSessionSystemUpdatesForTurn as jx, listSessionTurns as jy, listSessions as jz, AgentCommandAuthorityError as k, releaseLeaseHolder as k$, markStaleRegistryCatalogItems as k0, markStripeWebhookProcessed as k1, markWarmLeaseInstanceLost as k2, materializeGoalContinuation as k3, mcpServerIdForCapability as k4, moveQueuedTurnInTransaction as k5, mutateSessionControlInTransaction as k6, mutateWorkspaceControlInTransaction as k7, nestedPostgresSqlState as k8, newSessionDraftToolsProvided as k9, recordCodexAccountConnectors as kA, recordCodexAccountUsage as kB, recordCodexAccountUsageWithWakeTargets as kC, recordCodexTokenRefresh as kD, recordConnectionTokenRefresh as kE, recordConnectionUsed as kF, recordLeaseDataPlaneUrl as kG, recordLeaseTerminalDataPlaneUrl as kH, recordPendingSessionToolCallResult as kI, recordRetainedProcessReconciliationProof as kJ, recordSessionActiveCodexCredential as kK, recordSkippedContextCompaction as kL, recordStreamAcknowledgment as kM, recordStripeWebhookEvent as kN, recordUsageEvent as kO, recordWarmingSandboxCreated as kP, recoverSessionDispatch as kQ, refreshOAuthConnectionCredential as kR, registerDbBinding as kS, registerHostExportConsumer as kT, registerInternalUpdateWakeInTransaction as kU, registerPendingSessionToolCall as kV, registerSessionTurnAttemptClaim as kW, registerSessionWorkflowWakeInTransaction as kX, registerWorkspacePack as kY, releaseCodexCredentialLease as kZ, releaseCodexResetRedemptionClaim as k_, nextSessionHistoryPosition as ka, normalizeBearerScheme as kb, normalizeMemoryText as kc, orphanedResultRowIndicesForRepair as kd, peekSessionWork as ke, persistDrainSnapshot as kf, persistWarmSnapshot as kg, planWorkspaceCaptureGc as kh, projectEffectiveControlForRelatedAccess as ki, projectSessionForRelatedAccess as kj, pruneHostExportOutbox as kk, publicNewSessionDraftOptions as kl, quarantineCodexCredentialForLease as km, reArmDrainingLease as kn, readActiveSandbox as ko, readLease as kp, readMachineMetricsLatest as kq, readMachineMetricsLatestForWorkspace as kr, readMachineMetricsSeries as ks, readWorkspaceArchiveCapturePreflight as kt, reapExpiredSessionListSnapshots as ku, reapStaleLeaseHolders as kv, reapStaleLeaseHoldersGlobal as kw, reconcileCodexCapacityWait as kx, reconcileColdLostLeaseInstanceBlockers as ky, recordAuditEvent as kz, type AgentInternalUpdateCommandResult as l, setSessionGoalStatusWithEvent as l$, releaseSlackBotPostOperationClaim as l0, removeWorkspaceMember as l1, renameCodexAccount as l2, renderWorkspaceMemoryBlock as l3, replaceIntegrationOAuthClient as l4, requestSessionCompaction as l5, requestSessionTurnRecovery as l6, requireFile as l7, requireScheduledTask as l8, requireSession as l9, saveComposerDraftInTransaction as lA, saveNewSessionDraftInTransaction as lB, saveRunState as lC, saveWorkspaceMemory as lD, searchWorkspaceMemories as lE, seedNewSessionDraftInTransaction as lF, sendAgentMessageInTransaction as lG, serializeEffectiveSessionControl as lH, sessionAuthorizationScopeFilter as lI, sessionSubject as lJ, sessionTreeStatsForSessions as lK, sessionsWithActiveOpOnEnrollment as lL, setActiveCodexCredential as lM, setActiveSandbox as lN, setCodexCredentialExhausted as lO, setCodexCredentialExhaustedWithWakeTargets as lP, setCodexCredentialStatus as lQ, setCodexCredentialStatusById as lR, setConnectionStatus as lS, setEnrollmentDisplayState as lT, setEnrollmentOpStreamState as lU, setEnrollmentWentOffline as lV, setInitialActiveCodexCredential as lW, setRlsContext as lX, setSessionCodexPin as lY, setSessionGoalLastContinuationTurn as lZ, setSessionGoalStatus as l_, requireSocialConnection as la, requireWorkspace as lb, reserveSessionCommandReceipt as lc, reserveToolspaceCallForAttempt as ld, resolveWorkspaceMemoryBlock as le, resumeHostExportConsumer as lf, retainWorkspaceMutationProcess as lg, retainedProcessReconciliationProof as lh, retainedProcessSettlementIdentity as li, retireHostExportConsumer as lj, revokeApiKey as lk, revokeConnection as ll, revokeEnrollment as lm, revokeViewer as ln, rewindHostExportConsumer as lo, rlsContextForWorkspace as lp, rlsStrategyFor as lq, rollbackWorkspaceInstructionPolicyRevision as lr, rotateWorkspaceArchives as ls, runIdempotentPersistenceTransaction as lt, runtimeDatabaseReadyCheck as lu, safeDatabaseErrorFacts as lv, sanitizeEventPayload as lw, sanitizeEventString as lx, sanitizeMemoryText as ly, sanitizeModelPayload as lz, type AppendEventInput as m, withWorkspaceRls as m$, setSessionLastInputTokensForTurnAttempt as m0, setSessionPin as m1, setSubjectRlsContext as m2, setTemporalWorkflowId as m3, setVariableSetVariable as m4, setWorkspaceDefaultRig as m5, setWorkspaceEnvironmentVariable as m6, settleCodexCredentialFailover as m7, settleCodexCredentialLeaseLoss as m8, settleRetainedProcess as m9, updateSessionGoalWithEvent as mA, updateSessionMcpApprovalPolicy as mB, updateSessionMcpServerCredentials as mC, updateSessionTitle as mD, updateVariableSet as mE, updateWorkspace as mF, updateWorkspaceEnvironment as mG, updateWorkspaceSettings as mH, upsertBillingCustomer as mI, upsertCapabilityCatalogItem as mJ, upsertCodexSubscriptionCredential as mK, upsertGitHubInstallation as mL, upsertMachineMetricsLatest as mM, upsertRegistryCapabilityCatalogItem as mN, upsertSandboxSessionEnvelope as mO, upsertSessionGoal as mP, upsertSessionGoalWithEvent as mQ, upsertWorkspaceModelPolicy as mR, validateHumanInputResponse as mS, verifyDirectWorkspaceMutationSettlement as mT, verifyRetainedProcessMutationSettlement as mU, verifyWorkspaceMutationSettlement as mV, withAccountRls as mW, withCodexCapacityMutation as mX, withCodexCredentialRefreshLock as mY, withCodexTokenDeadline as mZ, withRlsContext as m_, settleScheduledTaskRunInTransaction as ma, settleSessionAttemptInterruptions as mb, settleSessionIdleWithParentOutbox as mc, shortMemoryId as md, steerAgentSessionInTransaction as me, steerQueuedTurnInTransaction as mf, storeIntegrationOAuthClient as mg, submitHumanPromptInTransaction as mh, sumUsageQuantity as mi, supersedeSessionCurrentDirectionInTransaction as mj, touchEnrollmentLastSeen as mk, touchLeaseHolder as ml, updateCodexAllocatorEligibility as mm, updateCodexRotationSettings as mn, updateConnection as mo, updateImportBatchCounts as mp, updateKnowledgeMemory as mq, updatePackInstallationStatus as mr, updatePtySessionActivity as ms, updateRecording as mt, updateRig as mu, updateRigChangeStatus as mv, updateScheduledTask as mw, updateScheduledTaskRun as mx, updateSessionCommandReceiptResult as my, updateSessionGoal as mz, type ApplyContextCompactionResult as n, withWorkspaceSubjectRls as n0, withWorkspaceUsageLock as n1, workspaceCaptureAtRevision as n2, workspaceCodexSubscriptionActive as n3, type ApplySessionTurnSettlementInput as o, type ApplySessionTurnSettlementResult as p, provisionRoles, type ArmCodexCapacityWaitResult as q, type BootstrapWorkspaceInput as r, CODEX_CAPACITY_REFRESH_MIN_MS as s, CODEX_CREDENTIAL_LEASE_TTL_MS as t, CODEX_RESET_REDEMPTION_OUTCOMES as u, CODEX_ROTATION_STRATEGIES as v, type ClaimCodexResetRedemptionResult as w, type ClaimSessionWorkForAttemptInput as x, type ClaimSessionWorkForAttemptResult as y, type ClaimSlackBotPostOperationResult as z };

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-XRVNI2GB.js";
+} from "./chunk-ELMUCYZF.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles