@opengeni/db 0.13.1 → 0.13.4

package/dist/index.d.ts

@@ -2,9 +2,9 @@ import '@opengeni/contracts';
 import '@opengeni/config';
 export { isCodexBilledModel } from '@opengeni/codex';
 export { sql as dbSql } from 'drizzle-orm';
-export { A as AGENT_VISIBLE_MEMORY_STATUSES, a as AcceptSessionApprovalDecisionResult, b as AcceptSessionHumanInputResponseResult, c as AccrueWarmSecondsResult, d as AcquireLeaseInput, e as AcquireLeaseResult, f as ActiveRetainedProcessOwnerCount, g as ActiveSandboxPointer, h as AddSessionSystemUpdateInput, i as AddSessionSystemUpdateResult, j as AdoptCodexResetRedemptionResult, k as AgentCommandAuthorityError, l as AgentInternalUpdateCommandResult, m as AppendEventInput, n as ApplyContextCompactionResult, o as ApplySessionTurnSettlementInput, p as ApplySessionTurnSettlementResult, q as ArmCodexCapacityWaitResult, B as BeginSandboxRematerializationResult, r as BootstrapWorkspaceInput, C as CODEX_CAPACITY_REFRESH_MAX_MS, s as CODEX_CAPACITY_REFRESH_MIN_MS, t as CODEX_CREDENTIAL_LEASE_TTL_MS, u as CODEX_RESET_REDEMPTION_OUTCOMES, v as CODEX_ROTATION_STRATEGIES, w as ClaimCodexResetRedemptionResult, x as ClaimSessionWorkForAttemptInput, y as ClaimSessionWorkForAttemptResult, z as ClaimSlackBotPostOperationResult, D as ClearSessionContextResult, E as CodexAccountStatus, F as CodexAccountUsageSnapshot, G as CodexAllocatorUpdateResult, H as CodexAuthDeps, I as CodexCapacityAvailabilityDecision, J as CodexCapacityMutationResult, K as CodexCapacityResetKind, L as CodexCapacitySelectionContext, M as CodexCapacityWait, N as CodexCapacityWaitStatus, O as CodexCapacityWakeTarget, P as CodexCredentialForRun, Q as CodexCredentialLeaseCandidateFilter, R as CodexCredentialLeaseCandidateFilterResult, S as CodexCredentialLeasePolicyScopeResolver, T as CodexCredentialLeaseQuarantine, U as CodexCredentialLeaseResult, V as CodexCredentialLeaseSelection, W as CodexCredentialLeaseSelectionContext, X as CodexCredentialStatus, Y as CodexCredentialTokens, Z as CodexLeaseAccountStatus, _ as CodexPinSource, $ as CodexRateLimitResetCreditsAccountResult, a0 as CodexResetRedemptionAttempt, a1 as CodexResetRedemptionOutcome, a2 as CodexResetRedemptionRecovery, a3 as CodexResetRedemptionSendNotReadyReason, a4 as CodexResetRedemptionStatus, a5 as CodexRotationSettings, a6 as CodexRotationStrategy, a7 as CodexTokenDeadlineClock, a8 as CodexTokenDeadlineOptions, a9 as CompleteSlackBotPostOperationResult, aa as ComposerDraftRow, ab as ConnectionBrokerDeps, ac as ConnectionCredentialForBroker, ad as ConnectionMetadataWithVerification, ae as ConnectionRefreshHttpError, af as ConsumeOAuthStateNonceInput, ag as CorrectWorkspaceMemoryInput, ah as CorrectWorkspaceMemoryResult, ai as CreateCapabilityCatalogItemInput, aj as CreateConnectionInput, ak as CreateDbOptions, al as CreateImportBatchInput, am as CreateKnowledgeMemoryInput, an as CreatePackInstallationInput, ao as CreateScheduledTaskInput, ap as CreateSessionGoalInput, aq as CreateSessionMcpServerInput, ar as CreateSocialConnectionInput, as as CreateSocialPostInput, at as CreditBalanceByAccount, au as Database, av as DatabaseFailureCode, aw as DbClient, ax as DbSession, ay as DeviceEnrollmentRequestRecord, az as DeviceEnrollmentStatus, aA as EditQueueCommandResult, aB as EffectiveControlBlocker, aC as EffectiveControlResumeOption, aD as EffectiveControlState, aE as EffectiveSessionControl, aF as EnableCapabilityInstallationInput, aG as EnabledMcpCapabilityServer, aH as EnqueueSessionTurnInput, aI as EnrollmentExposure, aJ as EnrollmentOs, aK as EnrollmentRecord, aL as EnrollmentStatus, aM as ExpiredDrainingSandboxLeaseCount, aN as ExpiredFileUploadCleanupClaim, aO as FORCE_RLS_TABLES, aP as FenceCodexResetRedemptionSendResult, aQ as FileUploadCleanupClaimResult, aR as ForceDrainResult, aS as FrozenTurnInitiator, aT as GitHubInstallation, aU as GitHubInstallationAccess, aV as GitHubInstallationAuthorityCommitError, aW as GoalContinuationDecision, aX as HostExportConsumerStatus, aY as HostExportKind, aZ as HostExportPayloadError, a_ as HostMcpCredentialBindingError, a$ as HostMcpCredentialResolverContext, b0 as HostMcpCredentialScopeError, b1 as HumanInputResponseValidationError, b2 as IdempotentPersistenceTransactionOptions, b3 as ImportBatch, b4 as InitializeSessionStartInput, b5 as InitializeSessionStartResult, b6 as InstallOrReadTurnExecutionPolicyForAttemptResult, b7 as IntegrationOAuthClientForUse, b8 as LeaseHolderKind, b9 as LeaseSnapshot, ba as ListKnowledgeMemoryOptions, bb as ListSessionEventPageOptions, bc as ListSessionEventsOptions, bd as ListSessionsForSubjectOptions, be as ListSessionsOptions, bf as LiveModalSandboxLeaseAttribution, bg as LostProviderWorkspaceSettlement, bh as MACHINE_METRICS_SERIES_INTERVAL_MS, bi as MAX_INTERNAL_UPDATE_BATCH_BYTES, bj as MAX_INTERNAL_UPDATE_BATCH_MEMBERS, bk as MAX_INTERNAL_UPDATE_BYTES, bl as MEMORY_ACTIVE_RECORD_CAP, bm as MEMORY_BLOCK_KIND_ORDER, bn as MEMORY_BLOCK_RECORD_LIMIT, bo as MEMORY_CORRECT_TOOL_DESCRIPTION, bp as MEMORY_KIND_SECTION_TITLES, bq as MEMORY_NEAR_DUP_COSINE_THRESHOLD, br as MEMORY_NEAR_DUP_NEIGHBORS, bs as MEMORY_SAVE_TOOL_DESCRIPTION, bt as MEMORY_SEARCH_DEFAULT_LIMIT, bu as MEMORY_SEARCH_MAX_LIMIT, bv as MEMORY_SEARCH_TOOL_DESCRIPTION, bw as MEMORY_TEXT_MAX_CHARS, bx as MEMORY_VISIBLE_RECORD_CAP, by as MachineMetricsRow, bz as MachineMetricsSample, bA as MarkWarmLeaseInstanceLostResult, bB as MaterializeGoalContinuationResult, bC as MemoryBlockRecord, bD as MemoryEmbedder, bE as MemorySanitizeResult, bF as MeterableWarmLease, bG as NON_RLS_RUNTIME_TABLES, bH as NestedAgentDepthDeploymentPolicy, bI as NestedAgentDepthPolicySource, bJ as NewSessionDraftAccessError, bK as NewSessionDraftConflictError, bL as NewSessionDraftRow, bM as PROTECTED_NO_DIRECT_DML_TABLES, bN as PendingSessionToolCallInput, bO as PersistenceFailureDetails, bP as PersistenceRetryOutcome, ProvisionResult, ProvisionRolesOptions, bQ as QueueCommandConflictCode, bR as QueueCommandConflictError, bS as QueueCommandResult, bT as QueuedTurnRow, bU as RUNTIME_DML_TABLES, bV as RUNTIME_FULL_DML_TABLES, bW as RUNTIME_READ_INSERT_TABLES, bX as RUNTIME_READ_ONLY_TABLES, bY as RUNTIME_TABLE_PRIVILEGES, bZ as ReapDrainable, b_ as ReconcileCodexCapacityWaitResult, b$ as ReconcileColdLostLeaseInstanceBlockersResult, c0 as RecoverSessionDispatchInput, c1 as RecoverSessionDispatchResult, c2 as RefreshTransportOptions, c3 as RegisterWorkspacePackInput, c4 as RegistryCapabilityCatalogItemInput, c5 as RegistryCatalogSurfaceKey, c6 as ReplaceIntegrationOAuthClientInput, c7 as RequestSessionTurnRecoveryInput, c8 as RequestSessionTurnRecoveryResult, c9 as ResolveConnectionCredentialInput, ca as ResolveConnectionCredentialResult, cb as RetainedFileArtifact, cc as RetainedProcessProviderProof, cd as RigActiveVersionChangedError, ce as RigChangeAlreadyVerifyingError, cf as RigChangeMonitoringSummary, cg as RigChangeTransitionError, ch as RigVersionContentInput, ci as RigVersionMonitoringSummary, cj as RlsContext, ck as RlsStrategy, cl as RuntimeDatabaseIdentity, cm as RuntimeDatabasePosture, cn as RuntimeDatabasePostureError, co as RuntimeDatabasePostureOptions, cp as RuntimeRoutinePosture, cq as RuntimeSchemaPosture, cr as RuntimeTableDmlPrivilege, cs as RuntimeTablePosture, ct as RuntimeTablePrivilegeContract, cu as SESSION_ANCESTRY_LIMIT, cv as SESSION_DISCOVERY_CONTROL_TARGET_LIMIT, cw as SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS, cx as SESSION_DISCOVERY_GOAL_MAX_CHARS, cy as SESSION_DISCOVERY_MESSAGE_MAX_CHARS, cz as SESSION_EVENT_DB_PAGE_MAX_BYTES, cA as SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT, cB as SESSION_LIST_SNAPSHOT_MAX_IDS, cC as SafeDatabaseErrorFacts, cD as SandboxArchiveAvailability, cE as SandboxArchiveRevision, cF as SandboxImageConflictError, cG as SandboxKind, cH as SandboxLeaseLiveness, cI as SandboxLeaseRecoveryBlockedError, cJ as SandboxLeaseSupersededError, cK as SandboxOpenPtySessionRow, cL as SandboxProviderExistence, cM as SandboxPtyProcessIdentity, cN as SandboxPtySessionRow, cO as SandboxRecord, cP as SandboxRecoveryState, cQ as SandboxRestoreStatus, cR as SandboxRetainedProcess, cS as SandboxRetainedProcessIdentity, cT as SandboxRetainedProcessPromotionFencedError, cU as SandboxRetainedProcessReconciliationClaim, cV as SandboxRetainedProcessState, cW as SandboxRigConflictError, cX as SandboxWorkspaceMutationAdmission, cY as SandboxWorkspaceMutationFencedError, cZ as SandboxWorkspaceMutationProviderOutcome, c_ as SandboxWorkspaceReadiness, c$ as SanitizedDatabasePersistenceCause, d0 as SaveWorkspaceMemoryInput, d1 as SaveWorkspaceMemoryResult, d2 as SessionAttemptInterruptionSettlement, d3 as SessionCodexState, d4 as SessionCommandActor, d5 as SessionCommandIdempotencyError, d6 as SessionCommandReceiptRow, d7 as SessionContextBusyError, d8 as SessionControlConflictError, d9 as SessionControlInvariantError, da as SessionControlMutationResult, db as SessionCreateDeniedResult, dc as SessionCreateInput, dd as SessionCreateResult, de as SessionCreateSuccessResult, df as SessionDepthPolicy, dg as SessionDiscoveryControl, dh as SessionDiscoveryCursor, di as SessionDiscoveryOrderBy, dj as SessionDiscoverySummary, dk as SessionEventPage, dl as SessionEventPersistenceError, dm as SessionEventWriteLockInput, dn as SessionEventWriteLocks, dp as SessionGoalContinuationProjection, dq as SessionIdConflictError, dr as SessionLineage, ds as SessionListAccessError, dt as SessionListCursor, du as SessionListCursorError, dv as SessionListCursorExpiredError, dw as SessionListSnapshotLimitError, dx as SessionMcpServerForRun, dy as SessionPinAccessError, dz as SessionPinVersionConflictError, dA as SessionRecordingCodec, dB as SessionRecordingMode, dC as SessionRecordingRow, dD as SessionRecordingState, dE as SessionSpawnDenial, dF as SessionSpawnDenialCode, dG as SessionSpawnDeniedDbError, dH as SessionSystemUpdateOutboxDelivery, dI as SessionToolPolicyVersionConflictError, dJ as SessionTurnAttemptOutcome, dK as SessionTurnForExecution, dL as SessionTurnRecordingSettlement, dM as SessionWorkPeek, dN as SessionWorkTrigger, dO as SessionWorkflowWake, dP as SessionWorkflowWakeDeliveryResult, dQ as SetSessionCodexPinOptions, dR as SetSessionGoalStatusEvent, dS as SettleCodexCredentialFailoverResult, dT as SettleCodexCredentialLeaseLossResult, dU as SlackBotPostOperation, dV as SteerQueueCommandResult, dW as StoreIntegrationOAuthClientInput, dX as StoredIntegrationOAuthClient, dY as StreamAcknowledgment, dZ as SubmitHumanPromptResult, d_ as ToolspaceCallReservation, d$ as ToolspaceTurnAttemptClaims, e0 as TurnAttemptFenceRejectReason, e1 as UpdateConnectionInput, e2 as UpdateImportBatchCountsInput, e3 as UpdateKnowledgeMemoryInput, e4 as UpdateScheduledTaskInput, e5 as UpdateSessionMcpApprovalPolicyResult, e6 as UpdateSessionMcpServerCredentialsInput, e7 as UpdateSessionMcpServerCredentialsResult, e8 as UpsertCodexSubscriptionCredentialResult, e9 as UserLookup, ea as VariableSetForRun, eb as WORKSPACE_MEMORY_BLOCK_EMPTY, ec as WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED, ed as WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET, ee as WorkspaceCaptureCommitResult, ef as WorkspaceCaptureGcPlan, eg as WorkspaceCaptureGcRow, eh as WorkspaceCaptureRow, ei as WorkspaceControlLockMode, ej as WorkspaceControlMutationResult, ek as WorkspaceControlRow, el as WorkspaceEnvironmentForRun, em as WorkspaceInstructionPolicyConflictError, en as WorkspaceInstructionPolicyInvalidOperationError, eo as WorkspaceInstructionPolicyLegacyUnavailableError, ep as WorkspaceInstructionPolicyNotFoundError, eq as WorkspaceMemoryOrigin, er as WorkspaceMemorySearchInput, es as WorkspaceMemorySearchMode, et as WorkspaceMemorySearchResult, eu as WorkspaceModelPolicy, ev as abandonCodexResetRedemptionBeforeProvider, ew as abandonRecordingForTurnAttempt, ex as acceptSessionApprovalDecision, ey as acceptSessionHumanInputResponse, ez as accrueWarmSeconds, eA as acknowledgeHostExportBatch, eB as acquireCodexCredentialLease, eC as acquireLease, eD as activateRigVersion, eE as activateWorkspaceInstructionPolicyRevision, eF as addSessionSystemUpdate, eG as addSessionSystemUpdateWithSourceMutation, eH as admitToolspaceTurnAttempt, eI as adoptCodexResetRedemptionAttempt, eJ as advanceWorkspaceGeneration, eK as advanceWorkspaceGenerationForDirectRequest, eL as advanceWorkspaceGenerationForRetainedProcess, eM as allAccountPermissions, eN as allWorkspacePermissions, eO as appendSessionEventToSandboxGroup, eP as appendSessionEvents, eQ as appendSessionEventsAndUpdateSession, eR as appendSessionEventsForTurnAttempt, eS as appendSessionEventsWithLockedSessionUpdate, eT as appendSessionHistoryItems, eU as applyContextCompaction, eV as applyCreditDebitUpToBalance, eW as applyCreditLedgerEntry, eX as applySessionTurnSettlement, eY as approveDeviceEnrollmentRequest, eZ as areGitHubRepositoriesAllowedForWorkspace, e_ as armCodexCapacityWait, e$ as assertAgentCommandAuthorityInTransaction, f0 as assertRuntimeDatabasePosture, f1 as autoResumeSessionBranchInTransaction, f2 as beginRigChangeVerificationAttempt, f3 as beginSandboxRematerialization, f4 as bindAuthorizedGitHubInstallationRepositories, f5 as bindGitHubInstallationRepositories, f6 as bootstrapWorkspace, f7 as buildChildCompletionDigest, f8 as buildCodexTokenResolver, f9 as buildConnectionTokenResolver, fa as buildHostConnectionTokenResolver, fb as canonicalSessionCommandHash, fc as claimCodexResetRedemption, fd as claimExpiredFileUploadCleanup, fe as claimFileUploadCleanup, ff as claimHostExportBatch, fg as claimPendingSessionSystemUpdateOutbox, fh as claimPendingSessionWorkflowWakes, fi as claimSessionWorkForAttempt, fj as claimSlackBotPostOperation, fk as claimTerminalRetainedProcesses, fl as clearDurablePendingSessionToolCalls, fm as clearEnrollmentWentOffline, fn as clearPendingSessionToolspaceCall, fo as clearSessionContext, fp as clearSessionGoal, fq as clearedContextMarkerItem, fr as closePtySession, fs as closeSessionTurnAttemptInTransaction, ft as codexCapacityRefreshBackoffMs, fu as commitWarmingToWarm, fv as completeCodexResetRedemption, fw as completeExpiredFileUploadCleanup, fx as completeFileUpload, fy as completeFileUploadCleanup, fz as completeSlackBotPostOperation, fA as computeWorkspaceCaptureGcPlan, fB as confirmDrainCold, fC as consumeDeviceEnrollmentRequest, fD as consumeIntegrationOAuthStateNonce, fE as consumeNewSessionDraftInTransaction, fF as correctWorkspaceMemory, fG as countActiveApiKeysForWorkspace, fH as countActiveRetainedProcessesByOwnerState, fI as countActiveSessionHistoryItems, fJ as countActiveSessionsForWorkspace, fK as countActiveSessionsUsingEnvironment, fL as countActiveSessionsUsingVariableSet, fM as countConsecutiveReactiveRotations, fN as countExpiredDrainingSandboxLeases, fO as countQueuedTurns, fP as countRigs, fQ as countSandboxLeasesByLiveness, fR as countScheduledTasksForWorkspace, fS as countScheduledTasksUsingEnvironment, fT as countScheduledTasksUsingVariableSet, fU as countSessionHistoryItems, fV as countSessionsUsingRig, fW as countVariableSets, fX as countWorkspaceEnvironments, fY as countWorkspacesForAccount, fZ as createApiKey, f_ as createConnection, f$ as createDb, g0 as createDeviceEnrollmentRequest, g1 as createEnrollment, g2 as createFileUpload, g3 as createImportBatch, g4 as createKnowledgeMemory, g5 as createRig, g6 as createRigChange, g7 as createRigVersion, g8 as createRigVersionForChangePromotion, g9 as createSandbox, ga as createScheduledTask, gb as createScheduledTaskRun, gc as createSession, gd as createSessionGoal, ge as createSessionMcpServers, gf as createSessionWithIdempotencyKey, gg as createSessionWithIdempotencyKeyResult, gh as createSocialConnection, gi as createSocialPost, gj as createVariableSet, gk as createWorkspace, gl as createWorkspaceEnvironment, gm as createWorkspaceInstructionPolicyDraft, gn as databaseFailureCode, go as deadLetterHostExportHead, gp as decodeSessionListCursor, gq as decryptEnvironmentValue, gq as decryptVariableSetValue, gr as decryptedCapabilityHeaders, gs as deferRetainedProcessReconciliation, gt as deleteGitHubInstallationBinding, gu as deleteRecording, gv as deleteRig, gw as deleteRigIfNoActiveSessions, gx as deleteScheduledTask, gy as deleteSessionQueueItemInTransaction, gz as deleteVariableSet, gA as deleteVariableSetVariable, gB as deleteWorkspace, gC as deleteWorkspaceCaptureRows, gD as deleteWorkspaceEnvironment, gE as deleteWorkspaceEnvironmentVariable, gF as deleteWorkspacePack, gG as denyDeviceEnrollmentRequest, gH as diffWorkspaceInstructionPolicyContent, gI as diffWorkspaceInstructionPolicyRevisions, gJ as disableCapabilityInstallation, gK as disableHostExportConsumer, gL as disconnectAllCodexAccounts, gM as disconnectCodexAccount, gN as editQueuedTurnInTransaction, gO as enableCapabilityInstallation, gP as enablePackInstallation, gQ as encodeSessionListCursor, gR as encryptEnvironmentValue, gR as encryptVariableSetValue, gS as enqueueSessionTurn, gT as enqueueSessionWorkflowWake, gU as enqueueSessionWorkflowWakeIfRunnable, gV as enqueueSessionWorkflowWakeInTransaction, gW as ensureCodexRotationSettings, gX as ensureManagedAccessForUser, gY as estimateMemoryTokens, gZ as evaluateGoalContinuation, g_ as evaluateRuntimeDatabasePosture, g$ as evaluateSessionControl, h0 as evaluateSessionControls, h1 as evaluateSessionDiscoveryControls, h2 as expireSessionHumanInputRequest, h3 as failHostExportBatch, h4 as failSandboxRematerialization, h5 as failWarmingToCold, h6 as fenceCodexResetRedemptionSend, h7 as fetchCodexRateLimitResetCreditsForAccount, h8 as fetchCodexUsageForAccount, h9 as finalizeEnrollmentByToken, ha as findActiveApiKeyByHash, hb as forceDrainOverLimitViewerOnlyBoxes, hc as frozenInitiatorForCommandActor, hd as getActiveSessionHistoryItems, he as getActiveSessionTurnForExecution, hf as getAnySessionInGroup, hg as getBillingBalance, hh as getBillingCustomer, hi as getCapabilityCatalogItem, hj as getCapabilityInstallation, hk as getCodexCapacityWaitForSession, hl as getCodexCredentialStatus, hm as getCodexResetRedemptionAttempt, hn as getCodexRotationSettings, ho as getComposerDraftInTransaction, hp as getConnectionMetadata, hq as getDeviceEnrollmentRequestByDeviceCode, hr as getEnrollment, hs as getFile, ht as getFileUpload, hu as getHostExportConsumerStatus, hv as getHumanInputResumeForEvent, hw as getKnowledgeMemory, hx as getLatestRunState, hy as getLatestStartedSessionTurn, hz as getManagedAccount, hA as getManagedUserByEmail, hB as getMaterializedSandboxFileResources, hC as getNestedAgentDepthDeploymentPolicy, hD as getNewSessionDraftInTransaction, hE as getOpenPtySession, hF as getOrCreateSessionSystemUpdateOutbox, hG as getPackInstallation, hH as getPendingDeviceEnrollmentRequestByUserCode, hI as getPendingDeviceEnrollmentRequestByUserCodeGlobal, hJ as getRecording, hK as getRetainedFileArtifact, hL as getRetainedProcess, hM as getRig, hN as getRigByName, hO as getRigChange, hP as getRigName, hQ as getRigVersion, hR as getRigVersionById, hS as getSandbox, hT as getSandboxSessionEnvelope, hU as getScheduledTask, hV as getSession, hW as getSessionByCreateIdempotencyKey, hX as getSessionCodexState, hY as getSessionEvent, hZ as getSessionEventByClientEventId, h_ as getSessionForSubject, h$ as getSessionGoal, i0 as getSessionGoalWithContinuation, i1 as getSessionHistoryItems, i2 as getSessionHumanInputRequest, i3 as getSessionLineage, i4 as getSessionQueueSnapshot, i5 as getSessionRootId, i6 as getSessionSpawnDenial, i7 as getSessionSpawnDenialByIdempotencyKey, i8 as getSessionSystemUpdateOutboxByDedupeKey, i9 as getSessionTurn, ia as getSessionTurnForAttempt, ib as getSlackBotPostOperation, ic as getSocialConnection, id as getStoredCapabilityHeaderCiphertext, ie as getStreamAcknowledgment, ig as getVariableSet, ih as getVariableSetByName, ii as getVariableSetValuesForRun, ij as getWorkspace, ik as getWorkspaceControlEvent, il as getWorkspaceDefaultRigId, im as getWorkspaceEnvironment, io as getWorkspaceEnvironmentByName, ip as getWorkspaceEnvironmentValuesForRun, iq as getWorkspaceGrant, ir as getWorkspaceInstructionPolicyRevision, is as getWorkspaceModelPolicy, it as getWorkspacePack, iu as grantWorkspaceAccess, iv as hasAuditableGitHubInstallationAuthority, iw as hasCreditLedgerEntry, ix as hashMemoryText, iy as heartbeatCodexCredentialLease, iz as heartbeatCodexCredentialLeaseUntil, iA as heartbeatLeaseHolder, iB as importLegacyWorkspaceInstructionPolicyDraft, iC as ingestMachineMetricsSample, iD as initializeSessionStartAtomically, iE as insertFailedWorkspaceCapture, iF as insertMachineMetricsSeries, iG as insertPtySession, iH as insertRecording, iI as insertWorkspaceCapture, iJ as inspectRuntimeDatabasePosture, iK as installOrReadTurnExecutionPolicyForAttempt, iL as interruptedToolCallResult, iM as isCodexBilledTurn, iN as isDatabasePersistenceFailure, iO as isMemoryTextTooLong, iP as isRetryablePersistenceSqlState, iQ as isSessionCompactionRequested, iR as isSessionEventPersistenceError, iS as isStripeWebhookProcessed, iT as latestWorkspaceCapture, iU as listApiKeys, iV as listCapabilityCatalogItems, iW as listCapabilityInstallations, iX as listCodexAccountStatuses, iY as listCodexResetRedemptionRecoveries, iZ as listConnectionsMetadata, i_ as listCreditBalancesByAccount, i$ as listDistinctRigVersionIdsInGroup, j0 as listDistinctVariableSetIdsInGroup, j1 as listEnabledMcpCapabilityServers, j2 as listEnrollments, j3 as listGitHubInstallationAccessForWorkspace, j4 as listGitHubInstallationIdsForWorkspace, j5 as listGitHubInstallationsForWorkspace, j6 as listKnowledgeMemories, j7 as listLiveModalSandboxLeaseAttributions, j8 as listMeterableWarmLeases, j9 as listOpenPtySessions, ja as listOutstandingSessionSystemUpdates, jb as listPackInstallations, jc as listPendingCodexCapacityWakeTargets, jd as listPendingSessionTurns, je as listRecordings, jf as listRegistryCatalogSurfaceKeys, jg as listRigChangeMonitoringSummaries, jh as listRigChanges, ji as listRigVersionMonitoringSummaries, jj as listRigVersions, jk as listRigs, jl as listSandboxes, jm as listScheduledTaskRuns, jn as listScheduledTasks, jo as listSessionDiscoverySummaries, jp as listSessionEventPage, jq as listSessionEvents, jr as listSessionHumanInputRequests, js as listSessionIdsInGroup, jt as listSessionMcpServerMetadata, ju as listSessionMcpServersForChildInheritance, jv as listSessionMcpServersForRun, jw as listSessionSpawnDenials, jx as listSessionSystemUpdatesForTurn, jy as listSessionTurns, jz as listSessions, jA as listSessionsForSubject, jB as listSocialConnections, jC as listSocialPosts, jD as listUsageEvents, jE as listVariableSets, jF as listWorkspaceControlEvents, jG as listWorkspaceEnvironments, jH as listWorkspaceInstructionPolicyRevisions, jI as listWorkspaceMembers, jJ as listWorkspacePacks, jK as listWorkspacesForSubject, jL as loadCodexCredentialForRun, jM as loadConnectionCredentialForBroker, jN as loadIntegrationOAuthClient, jO as loadVariableSetForRun, jP as loadWorkspaceEnvironmentForRun, jQ as lockSessionEventWriteRows, jR as lockWorkspaceInferenceControl, jS as markFileUploadFailed, jT as markSandboxFileResourcesMaterialized, jU as markSandboxProviderReady, jV as markSandboxRestoreVerifying, jW as markScheduledTaskRunFailedIfQueued, jX as markSessionAttemptQuiesced, jY as markSessionSystemUpdateOutboxDeliveredInTransaction, jZ as markSessionSystemUpdateOutboxFailed, j_ as markSessionWorkflowWakeDelivered, j$ as markSessionWorkflowWakeFailed, k0 as markStaleRegistryCatalogItems, k1 as markStripeWebhookProcessed, k2 as markWarmLeaseInstanceLost, k3 as materializeGoalContinuation, k4 as mcpServerIdForCapability, k5 as moveQueuedTurnInTransaction, k6 as mutateSessionControlInTransaction, k7 as mutateWorkspaceControlInTransaction, k8 as nestedPostgresSqlState, k9 as newSessionDraftToolsProvided, ka as nextSessionHistoryPosition, kb as normalizeBearerScheme, kc as normalizeMemoryText, kd as orphanedResultRowIndicesForRepair, ke as peekSessionWork, kf as persistDrainSnapshot, kg as persistWarmSnapshot, kh as planWorkspaceCaptureGc, ki as projectEffectiveControlForRelatedAccess, kj as projectSessionForRelatedAccess, provisionRoles, kk as pruneHostExportOutbox, kl as publicNewSessionDraftOptions, km as quarantineCodexCredentialForLease, kn as reArmDrainingLease, ko as readActiveSandbox, kp as readLease, kq as readMachineMetricsLatest, kr as readMachineMetricsLatestForWorkspace, ks as readMachineMetricsSeries, kt as readWorkspaceArchiveCapturePreflight, ku as reapExpiredSessionListSnapshots, kv as reapStaleLeaseHolders, kw as reapStaleLeaseHoldersGlobal, kx as reconcileCodexCapacityWait, ky as reconcileColdLostLeaseInstanceBlockers, kz as recordAuditEvent, kA as recordCodexAccountConnectors, kB as recordCodexAccountUsage, kC as recordCodexAccountUsageWithWakeTargets, kD as recordCodexTokenRefresh, kE as recordConnectionTokenRefresh, kF as recordConnectionUsed, kG as recordLeaseDataPlaneUrl, kH as recordLeaseTerminalDataPlaneUrl, kI as recordPendingSessionToolCallResult, kJ as recordRetainedProcessReconciliationProof, kK as recordSessionActiveCodexCredential, kL as recordSkippedContextCompaction, kM as recordStreamAcknowledgment, kN as recordStripeWebhookEvent, kO as recordUsageEvent, kP as recordWarmingSandboxCreated, kQ as recoverSessionDispatch, kR as refreshOAuthConnectionCredential, kS as registerDbBinding, kT as registerHostExportConsumer, kU as registerInternalUpdateWakeInTransaction, kV as registerPendingSessionToolCall, kW as registerSessionTurnAttemptClaim, kX as registerSessionWorkflowWakeInTransaction, kY as registerWorkspacePack, kZ as releaseCodexCredentialLease, k_ as releaseCodexResetRedemptionClaim, k$ as releaseLeaseHolder, l0 as releaseSlackBotPostOperationClaim, l1 as removeWorkspaceMember, l2 as renameCodexAccount, l3 as renderWorkspaceMemoryBlock, l4 as replaceIntegrationOAuthClient, l5 as requestSessionCompaction, l6 as requestSessionTurnRecovery, l7 as requireFile, l8 as requireScheduledTask, l9 as requireSession, la as requireSocialConnection, lb as requireWorkspace, lc as reserveSessionCommandReceipt, ld as reserveToolspaceCallForAttempt, le as resolveWorkspaceMemoryBlock, lf as resumeHostExportConsumer, lg as retainWorkspaceMutationProcess, lh as retainedProcessReconciliationProof, li as retainedProcessSettlementIdentity, lj as retireHostExportConsumer, lk as revokeApiKey, ll as revokeConnection, lm as revokeEnrollment, ln as revokeViewer, lo as rewindHostExportConsumer, lp as rlsContextForWorkspace, lq as rlsStrategyFor, lr as rollbackWorkspaceInstructionPolicyRevision, ls as rotateWorkspaceArchives, lt as runIdempotentPersistenceTransaction, lu as runtimeDatabaseReadyCheck, lv as safeDatabaseErrorFacts, lw as sanitizeEventPayload, lx as sanitizeEventString, ly as sanitizeMemoryText, lz as sanitizeModelPayload, lA as saveComposerDraftInTransaction, lB as saveNewSessionDraftInTransaction, lC as saveRunState, lD as saveWorkspaceMemory, lE as searchWorkspaceMemories, lF as seedNewSessionDraftInTransaction, lG as sendAgentMessageInTransaction, lH as serializeEffectiveSessionControl, lI as sessionAuthorizationScopeFilter, lJ as sessionSubject, lK as sessionTreeStatsForSessions, lL as sessionsWithActiveOpOnEnrollment, lM as setActiveCodexCredential, lN as setActiveSandbox, lO as setCodexCredentialExhausted, lP as setCodexCredentialExhaustedWithWakeTargets, lQ as setCodexCredentialStatus, lR as setCodexCredentialStatusById, lS as setConnectionStatus, lT as setEnrollmentDisplayState, lU as setEnrollmentOpStreamState, lV as setEnrollmentWentOffline, lW as setInitialActiveCodexCredential, lX as setRlsContext, lY as setSessionCodexPin, lZ as setSessionGoalLastContinuationTurn, l_ as setSessionGoalStatus, l$ as setSessionGoalStatusWithEvent, m0 as setSessionLastInputTokensForTurnAttempt, m1 as setSessionPin, m2 as setSubjectRlsContext, m3 as setTemporalWorkflowId, m4 as setVariableSetVariable, m5 as setWorkspaceDefaultRig, m6 as setWorkspaceEnvironmentVariable, m7 as settleCodexCredentialFailover, m8 as settleCodexCredentialLeaseLoss, m9 as settleRetainedProcess, ma as settleScheduledTaskRunInTransaction, mb as settleSessionAttemptInterruptions, mc as settleSessionIdleWithParentOutbox, md as shortMemoryId, me as steerAgentSessionInTransaction, mf as steerQueuedTurnInTransaction, mg as storeIntegrationOAuthClient, mh as submitHumanPromptInTransaction, mi as sumUsageQuantity, mj as supersedeSessionCurrentDirectionInTransaction, mk as touchEnrollmentLastSeen, ml as touchLeaseHolder, mm as updateCodexAllocatorEligibility, mn as updateCodexRotationSettings, mo as updateConnection, mp as updateImportBatchCounts, mq as updateKnowledgeMemory, mr as updatePackInstallationStatus, ms as updatePtySessionActivity, mt as updateRecording, mu as updateRig, mv as updateRigChangeStatus, mw as updateScheduledTask, mx as updateScheduledTaskRun, my as updateSessionCommandReceiptResult, mz as updateSessionGoal, mA as updateSessionGoalWithEvent, mB as updateSessionMcpApprovalPolicy, mC as updateSessionMcpServerCredentials, mD as updateSessionTitle, mE as updateVariableSet, mF as updateWorkspace, mG as updateWorkspaceEnvironment, mH as updateWorkspaceSettings, mI as upsertBillingCustomer, mJ as upsertCapabilityCatalogItem, mK as upsertCodexSubscriptionCredential, mL as upsertGitHubInstallation, mM as upsertMachineMetricsLatest, mN as upsertRegistryCapabilityCatalogItem, mO as upsertSandboxSessionEnvelope, mP as upsertSessionGoal, mQ as upsertSessionGoalWithEvent, mR as upsertWorkspaceModelPolicy, mS as validateHumanInputResponse, mT as verifyDirectWorkspaceMutationSettlement, mU as verifyRetainedProcessMutationSettlement, mV as verifyWorkspaceMutationSettlement, mW as withAccountRls, mX as withCodexCapacityMutation, mY as withCodexCredentialRefreshLock, mZ as withCodexTokenDeadline, m_ as withRlsContext, m$ as withWorkspaceRls, n0 as withWorkspaceSubjectRls, n1 as withWorkspaceUsageLock, n2 as workspaceCaptureAtRevision, n3 as workspaceCodexSubscriptionActive } from './provision-roles.js';
+export { A as AGENT_VISIBLE_MEMORY_STATUSES, a as AcceptSessionApprovalDecisionResult, b as AcceptSessionHumanInputResponseResult, c as AccrueWarmSecondsResult, d as AcquireLeaseInput, e as AcquireLeaseResult, f as ActiveRetainedProcessOwnerCount, g as ActiveSandboxPointer, h as AddSessionSystemUpdateInput, i as AddSessionSystemUpdateResult, j as AdoptCodexResetRedemptionResult, k as AgentCommandAuthorityError, l as AgentInternalUpdateCommandResult, m as AppendEventInput, n as ApplyContextCompactionResult, o as ApplySessionTurnSettlementInput, p as ApplySessionTurnSettlementResult, q as ArmCodexCapacityWaitResult, B as BeginSandboxRematerializationResult, r as BootstrapWorkspaceInput, C as CODEX_CAPACITY_REFRESH_MAX_MS, s as CODEX_CAPACITY_REFRESH_MIN_MS, t as CODEX_CREDENTIAL_LEASE_TTL_MS, u as CODEX_RESET_REDEMPTION_OUTCOMES, v as CODEX_ROTATION_STRATEGIES, w as ClaimCodexResetRedemptionResult, x as ClaimSessionWorkForAttemptInput, y as ClaimSessionWorkForAttemptResult, z as ClaimSlackBotPostOperationResult, D as ClearSessionContextResult, E as CodexAccountStatus, F as CodexAccountUsageSnapshot, G as CodexAllocatorUpdateResult, H as CodexAuthDeps, I as CodexCapacityAvailabilityDecision, J as CodexCapacityMutationResult, K as CodexCapacityResetKind, L as CodexCapacitySelectionContext, M as CodexCapacityWait, N as CodexCapacityWaitStatus, O as CodexCapacityWakeTarget, P as CodexCredentialForRun, Q as CodexCredentialLeaseCandidateFilter, R as CodexCredentialLeaseCandidateFilterResult, S as CodexCredentialLeasePolicyScopeResolver, T as CodexCredentialLeaseQuarantine, U as CodexCredentialLeaseResult, V as CodexCredentialLeaseSelection, W as CodexCredentialLeaseSelectionContext, X as CodexCredentialStatus, Y as CodexCredentialTokens, Z as CodexLeaseAccountStatus, _ as CodexPinSource, $ as CodexRateLimitResetCreditsAccountResult, a0 as CodexResetRedemptionAttempt, a1 as CodexResetRedemptionOutcome, a2 as CodexResetRedemptionRecovery, a3 as CodexResetRedemptionSendNotReadyReason, a4 as CodexResetRedemptionStatus, a5 as CodexRotationSettings, a6 as CodexRotationStrategy, a7 as CodexTokenDeadlineClock, a8 as CodexTokenDeadlineOptions, a9 as CompleteSlackBotPostOperationResult, aa as ComposerDraftRow, ab as ConnectionBrokerDeps, ac as ConnectionCredentialForBroker, ad as ConnectionMetadataWithVerification, ae as ConnectionRefreshHttpError, af as ConsumeOAuthStateNonceInput, ag as CorrectWorkspaceMemoryInput, ah as CorrectWorkspaceMemoryResult, ai as CreateCapabilityCatalogItemInput, aj as CreateConnectionInput, ak as CreateDbOptions, al as CreateImportBatchInput, am as CreateKnowledgeMemoryInput, an as CreatePackInstallationInput, ao as CreateScheduledTaskInput, ap as CreateSessionGoalInput, aq as CreateSessionMcpServerInput, ar as CreateSocialConnectionInput, as as CreateSocialPostInput, at as CreditBalanceByAccount, au as Database, av as DatabaseFailureCode, aw as DbClient, ax as DbSession, ay as DeviceEnrollmentRequestRecord, az as DeviceEnrollmentStatus, aA as EditQueueCommandResult, aB as EffectiveControlBlocker, aC as EffectiveControlResumeOption, aD as EffectiveControlState, aE as EffectiveSessionControl, aF as EnableCapabilityInstallationInput, aG as EnabledMcpCapabilityServer, aH as EnqueueSessionTurnInput, aI as EnrollmentExposure, aJ as EnrollmentOs, aK as EnrollmentRecord, aL as EnrollmentStatus, aM as ExpiredDrainingSandboxLeaseCount, aN as ExpiredFileUploadCleanupClaim, aO as FORCE_RLS_TABLES, aP as FenceCodexResetRedemptionSendResult, aQ as FileUploadCleanupClaimResult, aR as ForceDrainResult, aS as FrozenTurnInitiator, aT as GitHubInstallation, aU as GitHubInstallationAccess, aV as GitHubInstallationAuthorityCommitError, aW as GoalContinuationDecision, aX as HostExportConsumerStatus, aY as HostExportKind, aZ as HostExportPayloadError, a_ as HostMcpCredentialBindingError, a$ as HostMcpCredentialResolverContext, b0 as HostMcpCredentialScopeError, b1 as HumanInputResponseValidationError, b2 as IdempotentPersistenceTransactionOptions, b3 as ImportBatch, b4 as InitializeSessionStartInput, b5 as InitializeSessionStartResult, b6 as InstallOrReadTurnExecutionPolicyForAttemptResult, b7 as IntegrationOAuthClientForUse, b8 as LeaseHolderKind, b9 as LeaseSnapshot, ba as ListKnowledgeMemoryOptions, bb as ListSessionEventPageOptions, bc as ListSessionEventsOptions, bd as ListSessionsForSubjectOptions, be as ListSessionsOptions, bf as LiveModalSandboxLeaseAttribution, bg as LostProviderWorkspaceSettlement, bh as MACHINE_METRICS_SERIES_INTERVAL_MS, bi as MAX_INTERNAL_UPDATE_BATCH_BYTES, bj as MAX_INTERNAL_UPDATE_BATCH_MEMBERS, bk as MAX_INTERNAL_UPDATE_BYTES, bl as MEMORY_ACTIVE_RECORD_CAP, bm as MEMORY_BLOCK_KIND_ORDER, bn as MEMORY_BLOCK_RECORD_LIMIT, bo as MEMORY_CORRECT_TOOL_DESCRIPTION, bp as MEMORY_KIND_SECTION_TITLES, bq as MEMORY_NEAR_DUP_COSINE_THRESHOLD, br as MEMORY_NEAR_DUP_NEIGHBORS, bs as MEMORY_SAVE_TOOL_DESCRIPTION, bt as MEMORY_SEARCH_DEFAULT_LIMIT, bu as MEMORY_SEARCH_MAX_LIMIT, bv as MEMORY_SEARCH_TOOL_DESCRIPTION, bw as MEMORY_TEXT_MAX_CHARS, bx as MEMORY_VISIBLE_RECORD_CAP, by as MachineMetricsRow, bz as MachineMetricsSample, bA as MarkWarmLeaseInstanceLostResult, bB as MaterializeGoalContinuationResult, bC as MemoryBlockRecord, bD as MemoryEmbedder, bE as MemorySanitizeResult, bF as MeterableWarmLease, bG as NON_RLS_RUNTIME_TABLES, bH as NestedAgentDepthDeploymentPolicy, bI as NestedAgentDepthPolicySource, bJ as NewSessionDraftAccessError, bK as NewSessionDraftConflictError, bL as NewSessionDraftRow, bM as PROTECTED_NO_DIRECT_DML_TABLES, bN as PendingSessionToolCallInput, bO as PersistenceFailureDetails, bP as PersistenceRetryOutcome, ProvisionResult, ProvisionRolesOptions, bQ as QueueCommandConflictCode, bR as QueueCommandConflictError, bS as QueueCommandResult, bT as QueuedTurnRow, bU as RUNTIME_DML_TABLES, bV as RUNTIME_FULL_DML_TABLES, bW as RUNTIME_READ_INSERT_TABLES, bX as RUNTIME_READ_ONLY_TABLES, bY as RUNTIME_TABLE_PRIVILEGES, bZ as ReapDrainable, b_ as ReconcileCodexCapacityWaitResult, b$ as ReconcileColdLostLeaseInstanceBlockersResult, c0 as RecoverSessionDispatchInput, c1 as RecoverSessionDispatchResult, c2 as RefreshTransportOptions, c3 as RegisterWorkspacePackInput, c4 as RegistryCapabilityCatalogItemInput, c5 as RegistryCatalogSurfaceKey, c6 as ReplaceIntegrationOAuthClientInput, c7 as RequestSessionTurnRecoveryInput, c8 as RequestSessionTurnRecoveryResult, c9 as ResolveConnectionCredentialInput, ca as ResolveConnectionCredentialResult, cb as RetainedFileArtifact, cc as RetainedProcessProviderProof, cd as RigActiveVersionChangedError, ce as RigChangeAlreadyVerifyingError, cf as RigChangeMonitoringSummary, cg as RigChangeTransitionError, ch as RigVersionContentInput, ci as RigVersionMonitoringSummary, cj as RlsContext, ck as RlsStrategy, cl as RuntimeDatabaseIdentity, cm as RuntimeDatabasePosture, cn as RuntimeDatabasePostureError, co as RuntimeDatabasePostureOptions, cp as RuntimeRoutinePosture, cq as RuntimeSchemaPosture, cr as RuntimeTableDmlPrivilege, cs as RuntimeTablePosture, ct as RuntimeTablePrivilegeContract, cu as SESSION_ANCESTRY_LIMIT, cv as SESSION_DISCOVERY_CONTROL_TARGET_LIMIT, cw as SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS, cx as SESSION_DISCOVERY_GOAL_MAX_CHARS, cy as SESSION_DISCOVERY_MESSAGE_MAX_CHARS, cz as SESSION_EVENT_DB_PAGE_MAX_BYTES, cA as SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT, cB as SESSION_LIST_SNAPSHOT_MAX_IDS, cC as SafeDatabaseErrorFacts, cD as SandboxArchiveAvailability, cE as SandboxArchiveRevision, cF as SandboxImageConflictError, cG as SandboxKind, cH as SandboxLeaseLiveness, cI as SandboxLeaseRecoveryBlockedError, cJ as SandboxLeaseSupersededError, cK as SandboxOpenPtySessionRow, cL as SandboxProviderExistence, cM as SandboxPtyProcessIdentity, cN as SandboxPtySessionRow, cO as SandboxRecord, cP as SandboxRecoveryState, cQ as SandboxRestoreStatus, cR as SandboxRetainedProcess, cS as SandboxRetainedProcessIdentity, cT as SandboxRetainedProcessPromotionFencedError, cU as SandboxRetainedProcessReconciliationClaim, cV as SandboxRetainedProcessState, cW as SandboxRigConflictError, cX as SandboxWorkspaceMutationAdmission, cY as SandboxWorkspaceMutationFencedError, cZ as SandboxWorkspaceMutationProviderOutcome, c_ as SandboxWorkspaceReadiness, c$ as SanitizedDatabasePersistenceCause, d0 as SaveWorkspaceMemoryInput, d1 as SaveWorkspaceMemoryResult, d2 as SessionAttemptInterruptionSettlement, d3 as SessionCodexState, d4 as SessionCommandActor, d5 as SessionCommandIdempotencyError, d6 as SessionCommandReceiptRow, d7 as SessionContextBusyError, d8 as SessionControlConflictError, d9 as SessionControlInvariantError, da as SessionControlMutationResult, db as SessionCreateDeniedResult, dc as SessionCreateInput, dd as SessionCreateResult, de as SessionCreateSuccessResult, df as SessionDepthPolicy, dg as SessionDiscoveryControl, dh as SessionDiscoveryCursor, di as SessionDiscoveryOrderBy, dj as SessionDiscoverySummary, dk as SessionEventPage, dl as SessionEventPersistenceError, dm as SessionEventWriteLockInput, dn as SessionEventWriteLocks, dp as SessionGoalContinuationProjection, dq as SessionIdConflictError, dr as SessionLineage, ds as SessionListAccessError, dt as SessionListCursor, du as SessionListCursorError, dv as SessionListCursorExpiredError, dw as SessionListSnapshotLimitError, dx as SessionMcpServerForRun, dy as SessionPinAccessError, dz as SessionPinVersionConflictError, dA as SessionRecordingCodec, dB as SessionRecordingMode, dC as SessionRecordingRow, dD as SessionRecordingState, dE as SessionSpawnDenial, dF as SessionSpawnDenialCode, dG as SessionSpawnDeniedDbError, dH as SessionSystemUpdateOutboxDelivery, dI as SessionToolPolicyVersionConflictError, dJ as SessionTurnAttemptOutcome, dK as SessionTurnForExecution, dL as SessionTurnRecordingSettlement, dM as SessionWorkPeek, dN as SessionWorkTrigger, dO as SessionWorkflowWake, dP as SessionWorkflowWakeDeliveryResult, dQ as SetSessionCodexPinOptions, dR as SetSessionGoalStatusEvent, dS as SettleCodexCredentialFailoverResult, dT as SettleCodexCredentialLeaseLossResult, dU as SlackBotInstallCallbackFailureReason, dV as SlackBotInstallCallbackFailureStage, dW as SlackBotLifecycleSuccessAuditError, dX as SlackBotPostOperation, dY as SteerQueueCommandResult, dZ as StoreIntegrationOAuthClientInput, d_ as StoredIntegrationOAuthClient, d$ as StreamAcknowledgment, e0 as SubmitHumanPromptResult, e1 as ToolspaceCallReservation, e2 as ToolspaceTurnAttemptClaims, e3 as TurnAttemptFenceRejectReason, e4 as UpdateConnectionInput, e5 as UpdateImportBatchCountsInput, e6 as UpdateKnowledgeMemoryInput, e7 as UpdateScheduledTaskInput, e8 as UpdateSessionMcpApprovalPolicyResult, e9 as UpdateSessionMcpServerCredentialsInput, ea as UpdateSessionMcpServerCredentialsResult, eb as UpsertCodexSubscriptionCredentialResult, ec as UserLookup, ed as VariableSetForRun, ee as WORKSPACE_MEMORY_BLOCK_EMPTY, ef as WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED, eg as WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET, eh as WorkspaceCaptureCommitResult, ei as WorkspaceCaptureGcPlan, ej as WorkspaceCaptureGcRow, ek as WorkspaceCaptureRow, el as WorkspaceControlLockMode, em as WorkspaceControlMutationResult, en as WorkspaceControlRow, eo as WorkspaceEnvironmentForRun, ep as WorkspaceInstructionPolicyConflictError, eq as WorkspaceInstructionPolicyInvalidOperationError, er as WorkspaceInstructionPolicyLegacyUnavailableError, es as WorkspaceInstructionPolicyNotFoundError, et as WorkspaceMemoryOrigin, eu as WorkspaceMemorySearchInput, ev as WorkspaceMemorySearchMode, ew as WorkspaceMemorySearchResult, ex as WorkspaceModelPolicy, ey as abandonCodexResetRedemptionBeforeProvider, ez as abandonRecordingForTurnAttempt, eA as acceptSessionApprovalDecision, eB as acceptSessionHumanInputResponse, eC as accrueWarmSeconds, eD as acknowledgeHostExportBatch, eE as acquireCodexCredentialLease, eF as acquireLease, eG as activateRigVersion, eH as activateWorkspaceInstructionPolicyRevision, eI as addSessionSystemUpdate, eJ as addSessionSystemUpdateWithSourceMutation, eK as admitToolspaceTurnAttempt, eL as adoptCodexResetRedemptionAttempt, eM as advanceWorkspaceGeneration, eN as advanceWorkspaceGenerationForDirectRequest, eO as advanceWorkspaceGenerationForRetainedProcess, eP as allAccountPermissions, eQ as allWorkspacePermissions, eR as appendSessionEventToSandboxGroup, eS as appendSessionEvents, eT as appendSessionEventsAndUpdateSession, eU as appendSessionEventsForTurnAttempt, eV as appendSessionEventsWithLockedSessionUpdate, eW as appendSessionHistoryItems, eX as applyContextCompaction, eY as applyCreditDebitUpToBalance, eZ as applyCreditLedgerEntry, e_ as applySessionTurnSettlement, e$ as approveDeviceEnrollmentRequest, f0 as areGitHubRepositoriesAllowedForWorkspace, f1 as armCodexCapacityWait, f2 as assertAgentCommandAuthorityInTransaction, f3 as assertRuntimeDatabasePosture, f4 as autoResumeSessionBranchInTransaction, f5 as beginRigChangeVerificationAttempt, f6 as beginSandboxRematerialization, f7 as bindAuthorizedGitHubInstallationRepositories, f8 as bindGitHubInstallationRepositories, f9 as bootstrapWorkspace, fa as buildChildCompletionDigest, fb as buildCodexTokenResolver, fc as buildConnectionTokenResolver, fd as buildHostConnectionTokenResolver, fe as canonicalSessionCommandHash, ff as claimCodexResetRedemption, fg as claimExpiredFileUploadCleanup, fh as claimFileUploadCleanup, fi as claimHostExportBatch, fj as claimPendingSessionSystemUpdateOutbox, fk as claimPendingSessionWorkflowWakes, fl as claimSessionWorkForAttempt, fm as claimSlackBotPostOperation, fn as claimTerminalRetainedProcesses, fo as clearDurablePendingSessionToolCalls, fp as clearEnrollmentWentOffline, fq as clearPendingSessionToolspaceCall, fr as clearSessionContext, fs as clearSessionGoal, ft as clearedContextMarkerItem, fu as closePtySession, fv as closeSessionTurnAttemptInTransaction, fw as codexCapacityRefreshBackoffMs, fx as commitWarmingToWarm, fy as completeCodexResetRedemption, fz as completeExpiredFileUploadCleanup, fA as completeFileUpload, fB as completeFileUploadCleanup, fC as completeSlackBotPostOperation, fD as computeWorkspaceCaptureGcPlan, fE as confirmDrainCold, fF as consumeDeviceEnrollmentRequest, fG as consumeIntegrationOAuthStateNonce, fH as consumeNewSessionDraftInTransaction, fI as correctWorkspaceMemory, fJ as countActiveApiKeysForWorkspace, fK as countActiveRetainedProcessesByOwnerState, fL as countActiveSessionHistoryItems, fM as countActiveSessionsForWorkspace, fN as countActiveSessionsUsingEnvironment, fO as countActiveSessionsUsingVariableSet, fP as countConsecutiveReactiveRotations, fQ as countExpiredDrainingSandboxLeases, fR as countQueuedTurns, fS as countRigs, fT as countSandboxLeasesByLiveness, fU as countScheduledTasksForWorkspace, fV as countScheduledTasksUsingEnvironment, fW as countScheduledTasksUsingVariableSet, fX as countSessionHistoryItems, fY as countSessionsUsingRig, fZ as countVariableSets, f_ as countWorkspaceEnvironments, f$ as countWorkspacesForAccount, g0 as createApiKey, g1 as createConnection, g2 as createConnectionWithSlackBotSuccessAudit, g3 as createDb, g4 as createDeviceEnrollmentRequest, g5 as createEnrollment, g6 as createFileUpload, g7 as createImportBatch, g8 as createKnowledgeMemory, g9 as createRig, ga as createRigChange, gb as createRigVersion, gc as createRigVersionForChangePromotion, gd as createSandbox, ge as createScheduledTask, gf as createScheduledTaskRun, gg as createSession, gh as createSessionGoal, gi as createSessionMcpServers, gj as createSessionWithIdempotencyKey, gk as createSessionWithIdempotencyKeyResult, gl as createSocialConnection, gm as createSocialPost, gn as createVariableSet, go as createWorkspace, gp as createWorkspaceEnvironment, gq as createWorkspaceInstructionPolicyDraft, gr as databaseFailureCode, gs as deadLetterHostExportHead, gt as decodeSessionListCursor, gu as decryptEnvironmentValue, gu as decryptVariableSetValue, gv as decryptedCapabilityHeaders, gw as deferRetainedProcessReconciliation, gx as deleteGitHubInstallationBinding, gy as deleteRecording, gz as deleteRig, gA as deleteRigIfNoActiveSessions, gB as deleteScheduledTask, gC as deleteSessionQueueItemInTransaction, gD as deleteVariableSet, gE as deleteVariableSetVariable, gF as deleteWorkspace, gG as deleteWorkspaceCaptureRows, gH as deleteWorkspaceEnvironment, gI as deleteWorkspaceEnvironmentVariable, gJ as deleteWorkspacePack, gK as denyDeviceEnrollmentRequest, gL as diffWorkspaceInstructionPolicyContent, gM as diffWorkspaceInstructionPolicyRevisions, gN as disableCapabilityInstallation, gO as disableHostExportConsumer, gP as disconnectAllCodexAccounts, gQ as disconnectCodexAccount, gR as editQueuedTurnInTransaction, gS as enableCapabilityInstallation, gT as enablePackInstallation, gU as encodeSessionListCursor, gV as encryptEnvironmentValue, gV as encryptVariableSetValue, gW as enqueueSessionTurn, gX as enqueueSessionWorkflowWake, gY as enqueueSessionWorkflowWakeIfRunnable, gZ as enqueueSessionWorkflowWakeInTransaction, g_ as ensureCodexRotationSettings, g$ as ensureManagedAccessForUser, h0 as estimateMemoryTokens, h1 as evaluateGoalContinuation, h2 as evaluateRuntimeDatabasePosture, h3 as evaluateSessionControl, h4 as evaluateSessionControls, h5 as evaluateSessionDiscoveryControls, h6 as expireSessionHumanInputRequest, h7 as failHostExportBatch, h8 as failSandboxRematerialization, h9 as failWarmingToCold, ha as fenceCodexResetRedemptionSend, hb as fetchCodexRateLimitResetCreditsForAccount, hc as fetchCodexUsageForAccount, hd as finalizeEnrollmentByToken, he as findActiveApiKeyByHash, hf as forceDrainOverLimitViewerOnlyBoxes, hg as frozenInitiatorForCommandActor, hh as getActiveSessionHistoryItems, hi as getActiveSessionTurnForExecution, hj as getAnySessionInGroup, hk as getBillingBalance, hl as getBillingCustomer, hm as getCapabilityCatalogItem, hn as getCapabilityInstallation, ho as getCodexCapacityWaitForSession, hp as getCodexCredentialStatus, hq as getCodexResetRedemptionAttempt, hr as getCodexRotationSettings, hs as getComposerDraftInTransaction, ht as getConnectionMetadata, hu as getDeviceEnrollmentRequestByDeviceCode, hv as getEnrollment, hw as getFile, hx as getFileUpload, hy as getHostExportConsumerStatus, hz as getHumanInputResumeForEvent, hA as getKnowledgeMemory, hB as getLatestRunState, hC as getLatestStartedSessionTurn, hD as getManagedAccount, hE as getManagedUserByEmail, hF as getMaterializedSandboxFileResources, hG as getNestedAgentDepthDeploymentPolicy, hH as getNewSessionDraftInTransaction, hI as getOpenPtySession, hJ as getOrCreateSessionSystemUpdateOutbox, hK as getPackInstallation, hL as getPendingDeviceEnrollmentRequestByUserCode, hM as getPendingDeviceEnrollmentRequestByUserCodeGlobal, hN as getRecording, hO as getRetainedFileArtifact, hP as getRetainedProcess, hQ as getRig, hR as getRigByName, hS as getRigChange, hT as getRigName, hU as getRigVersion, hV as getRigVersionById, hW as getSandbox, hX as getSandboxSessionEnvelope, hY as getScheduledTask, hZ as getSession, h_ as getSessionByCreateIdempotencyKey, h$ as getSessionCodexState, i0 as getSessionEvent, i1 as getSessionEventByClientEventId, i2 as getSessionForSubject, i3 as getSessionGoal, i4 as getSessionGoalWithContinuation, i5 as getSessionHistoryItems, i6 as getSessionHumanInputRequest, i7 as getSessionLineage, i8 as getSessionQueueSnapshot, i9 as getSessionRootId, ia as getSessionSpawnDenial, ib as getSessionSpawnDenialByIdempotencyKey, ic as getSessionSystemUpdateOutboxByDedupeKey, id as getSessionTurn, ie as getSessionTurnForAttempt, ig as getSlackBotPostOperation, ih as getSocialConnection, ii as getStoredCapabilityHeaderCiphertext, ij as getStreamAcknowledgment, ik as getVariableSet, il as getVariableSetByName, im as getVariableSetValuesForRun, io as getWorkspace, ip as getWorkspaceControlEvent, iq as getWorkspaceDefaultRigId, ir as getWorkspaceEnvironment, is as getWorkspaceEnvironmentByName, it as getWorkspaceEnvironmentValuesForRun, iu as getWorkspaceGrant, iv as getWorkspaceInstructionPolicyRevision, iw as getWorkspaceModelPolicy, ix as getWorkspacePack, iy as grantWorkspaceAccess, iz as hasAuditableGitHubInstallationAuthority, iA as hasCreditLedgerEntry, iB as hashMemoryText, iC as heartbeatCodexCredentialLease, iD as heartbeatCodexCredentialLeaseUntil, iE as heartbeatLeaseHolder, iF as importLegacyWorkspaceInstructionPolicyDraft, iG as ingestMachineMetricsSample, iH as initializeSessionStartAtomically, iI as insertFailedWorkspaceCapture, iJ as insertMachineMetricsSeries, iK as insertPtySession, iL as insertRecording, iM as insertWorkspaceCapture, iN as inspectRuntimeDatabasePosture, iO as installOrReadTurnExecutionPolicyForAttempt, iP as interruptedToolCallResult, iQ as isCodexBilledTurn, iR as isDatabasePersistenceFailure, iS as isMemoryTextTooLong, iT as isRetryablePersistenceSqlState, iU as isSessionCompactionRequested, iV as isSessionEventPersistenceError, iW as isStripeWebhookProcessed, iX as latestWorkspaceCapture, iY as listApiKeys, iZ as listCapabilityCatalogItems, i_ as listCapabilityInstallations, i$ as listCodexAccountStatuses, j0 as listCodexResetRedemptionRecoveries, j1 as listConnectionsMetadata, j2 as listCreditBalancesByAccount, j3 as listDistinctRigVersionIdsInGroup, j4 as listDistinctVariableSetIdsInGroup, j5 as listEnabledMcpCapabilityServers, j6 as listEnrollments, j7 as listGitHubInstallationAccessForWorkspace, j8 as listGitHubInstallationIdsForWorkspace, j9 as listGitHubInstallationsForWorkspace, ja as listKnowledgeMemories, jb as listLiveModalSandboxLeaseAttributions, jc as listMeterableWarmLeases, jd as listOpenPtySessions, je as listOutstandingSessionSystemUpdates, jf as listPackInstallations, jg as listPendingCodexCapacityWakeTargets, jh as listPendingSessionTurns, ji as listRecordings, jj as listRegistryCatalogSurfaceKeys, jk as listRigChangeMonitoringSummaries, jl as listRigChanges, jm as listRigVersionMonitoringSummaries, jn as listRigVersions, jo as listRigs, jp as listSandboxes, jq as listScheduledTaskRuns, jr as listScheduledTasks, js as listSessionDiscoverySummaries, jt as listSessionEventPage, ju as listSessionEvents, jv as listSessionHumanInputRequests, jw as listSessionIdsInGroup, jx as listSessionMcpServerMetadata, jy as listSessionMcpServersForChildInheritance, jz as listSessionMcpServersForRun, jA as listSessionSpawnDenials, jB as listSessionSystemUpdatesForTurn, jC as listSessionTurns, jD as listSessions, jE as listSessionsForSubject, jF as listSocialConnections, jG as listSocialPosts, jH as listUsageEvents, jI as listVariableSets, jJ as listWorkspaceControlEvents, jK as listWorkspaceEnvironments, jL as listWorkspaceInstructionPolicyRevisions, jM as listWorkspaceMembers, jN as listWorkspacePacks, jO as listWorkspacesForSubject, jP as loadCodexCredentialForRun, jQ as loadConnectionCredentialForBroker, jR as loadIntegrationOAuthClient, jS as loadVariableSetForRun, jT as loadWorkspaceEnvironmentForRun, jU as lockSessionEventWriteRows, jV as lockWorkspaceInferenceControl, jW as markFileUploadFailed, jX as markSandboxFileResourcesMaterialized, jY as markSandboxProviderReady, jZ as markSandboxRestoreVerifying, j_ as markScheduledTaskRunFailedIfQueued, j$ as markSessionAttemptQuiesced, k0 as markSessionSystemUpdateOutboxDeliveredInTransaction, k1 as markSessionSystemUpdateOutboxFailed, k2 as markSessionWorkflowWakeDelivered, k3 as markSessionWorkflowWakeFailed, k4 as markStaleRegistryCatalogItems, k5 as markStripeWebhookProcessed, k6 as markWarmLeaseInstanceLost, k7 as materializeGoalContinuation, k8 as mcpServerIdForCapability, k9 as moveQueuedTurnInTransaction, ka as mutateSessionControlInTransaction, kb as mutateWorkspaceControlInTransaction, kc as nestedPostgresSqlState, kd as newSessionDraftToolsProvided, ke as nextSessionHistoryPosition, kf as normalizeBearerScheme, kg as normalizeMemoryText, kh as orphanedResultRowIndicesForRepair, ki as peekSessionWork, kj as persistDrainSnapshot, kk as persistWarmSnapshot, kl as planWorkspaceCaptureGc, km as projectEffectiveControlForRelatedAccess, kn as projectSessionForRelatedAccess, provisionRoles, ko as pruneHostExportOutbox, kp as publicNewSessionDraftOptions, kq as quarantineCodexCredentialForLease, kr as reArmDrainingLease, ks as readActiveSandbox, kt as readLease, ku as readMachineMetricsLatest, kv as readMachineMetricsLatestForWorkspace, kw as readMachineMetricsSeries, kx as readWorkspaceArchiveCapturePreflight, ky as reapExpiredSessionListSnapshots, kz as reapStaleLeaseHolders, kA as reapStaleLeaseHoldersGlobal, kB as reconcileCodexCapacityWait, kC as reconcileColdLostLeaseInstanceBlockers, kD as recordAuditEvent, kE as recordCodexAccountConnectors, kF as recordCodexAccountUsage, kG as recordCodexAccountUsageWithWakeTargets, kH as recordCodexTokenRefresh, kI as recordConnectionTokenRefresh, kJ as recordConnectionUsed, kK as recordLeaseDataPlaneUrl, kL as recordLeaseTerminalDataPlaneUrl, kM as recordPendingSessionToolCallResult, kN as recordRetainedProcessReconciliationProof, kO as recordSessionActiveCodexCredential, kP as recordSkippedContextCompaction, kQ as recordSlackBotInstallCallbackFailure, kR as recordStreamAcknowledgment, kS as recordStripeWebhookEvent, kT as recordUsageEvent, kU as recordWarmingSandboxCreated, kV as recoverSessionDispatch, kW as refreshOAuthConnectionCredential, kX as registerDbBinding, kY as registerHostExportConsumer, kZ as registerInternalUpdateWakeInTransaction, k_ as registerPendingSessionToolCall, k$ as registerSessionTurnAttemptClaim, l0 as registerSessionWorkflowWakeInTransaction, l1 as registerWorkspacePack, l2 as releaseCodexCredentialLease, l3 as releaseCodexResetRedemptionClaim, l4 as releaseLeaseHolder, l5 as releaseSlackBotPostOperationClaim, l6 as removeWorkspaceMember, l7 as renameCodexAccount, l8 as renderWorkspaceMemoryBlock, l9 as replaceIntegrationOAuthClient, la as requestSessionCompaction, lb as requestSessionTurnRecovery, lc as requireFile, ld as requireScheduledTask, le as requireSession, lf as requireSocialConnection, lg as requireWorkspace, lh as reserveSessionCommandReceipt, li as reserveToolspaceCallForAttempt, lj as resolveWorkspaceMemoryBlock, lk as resumeHostExportConsumer, ll as retainWorkspaceMutationProcess, lm as retainedProcessReconciliationProof, ln as retainedProcessSettlementIdentity, lo as retireHostExportConsumer, lp as revokeApiKey, lq as revokeConnection, lr as revokeConnectionWithSlackBotSuccessAudit, ls as revokeEnrollment, lt as revokeViewer, lu as rewindHostExportConsumer, lv as rlsContextForWorkspace, lw as rlsStrategyFor, lx as rollbackWorkspaceInstructionPolicyRevision, ly as rotateWorkspaceArchives, lz as runIdempotentPersistenceTransaction, lA as runtimeDatabaseReadyCheck, lB as safeDatabaseErrorFacts, lC as sanitizeEventPayload, lD as sanitizeEventString, lE as sanitizeMemoryText, lF as sanitizeModelPayload, lG as saveComposerDraftInTransaction, lH as saveNewSessionDraftInTransaction, lI as saveRunState, lJ as saveWorkspaceMemory, lK as searchWorkspaceMemories, lL as seedNewSessionDraftInTransaction, lM as sendAgentMessageInTransaction, lN as serializeEffectiveSessionControl, lO as sessionAuthorizationScopeFilter, lP as sessionSubject, lQ as sessionTreeStatsForSessions, lR as sessionsWithActiveOpOnEnrollment, lS as setActiveCodexCredential, lT as setActiveSandbox, lU as setCodexCredentialExhausted, lV as setCodexCredentialExhaustedWithWakeTargets, lW as setCodexCredentialStatus, lX as setCodexCredentialStatusById, lY as setConnectionStatus, lZ as setEnrollmentDisplayState, l_ as setEnrollmentOpStreamState, l$ as setEnrollmentWentOffline, m0 as setInitialActiveCodexCredential, m1 as setRlsContext, m2 as setSessionCodexPin, m3 as setSessionGoalLastContinuationTurn, m4 as setSessionGoalStatus, m5 as setSessionGoalStatusWithEvent, m6 as setSessionLastInputTokensForTurnAttempt, m7 as setSessionPin, m8 as setSubjectRlsContext, m9 as setTemporalWorkflowId, ma as setVariableSetVariable, mb as setWorkspaceDefaultRig, mc as setWorkspaceEnvironmentVariable, md as settleCodexCredentialFailover, me as settleCodexCredentialLeaseLoss, mf as settleRetainedProcess, mg as settleScheduledTaskRunInTransaction, mh as settleSessionAttemptInterruptions, mi as settleSessionIdleWithParentOutbox, mj as shortMemoryId, mk as steerAgentSessionInTransaction, ml as steerQueuedTurnInTransaction, mm as storeIntegrationOAuthClient, mn as submitHumanPromptInTransaction, mo as sumUsageQuantity, mp as supersedeSessionCurrentDirectionInTransaction, mq as touchEnrollmentLastSeen, mr as touchLeaseHolder, ms as updateCodexAllocatorEligibility, mt as updateCodexRotationSettings, mu as updateConnection, mv as updateConnectionWithSlackBotSuccessAudit, mw as updateImportBatchCounts, mx as updateKnowledgeMemory, my as updatePackInstallationStatus, mz as updatePtySessionActivity, mA as updateRecording, mB as updateRig, mC as updateRigChangeStatus, mD as updateScheduledTask, mE as updateScheduledTaskRun, mF as updateSessionCommandReceiptResult, mG as updateSessionGoal, mH as updateSessionGoalWithEvent, mI as updateSessionMcpApprovalPolicy, mJ as updateSessionMcpServerCredentials, mK as updateSessionTitle, mL as updateVariableSet, mM as updateWorkspace, mN as updateWorkspaceEnvironment, mO as updateWorkspaceSettings, mP as upsertBillingCustomer, mQ as upsertCapabilityCatalogItem, mR as upsertCodexSubscriptionCredential, mS as upsertGitHubInstallation, mT as upsertMachineMetricsLatest, mU as upsertRegistryCapabilityCatalogItem, mV as upsertSandboxSessionEnvelope, mW as upsertSessionGoal, mX as upsertSessionGoalWithEvent, mY as upsertWorkspaceModelPolicy, mZ as validateHumanInputResponse, m_ as verifyDirectWorkspaceMutationSettlement, m$ as verifyRetainedProcessMutationSettlement, n0 as verifyWorkspaceMutationSettlement, n1 as withAccountRls, n2 as withCodexCapacityMutation, n3 as withCodexCredentialRefreshLock, n4 as withCodexTokenDeadline, n5 as withRlsContext, n6 as withWorkspaceRls, n7 as withWorkspaceSubjectRls, n8 as withWorkspaceUsageLock, n9 as workspaceCaptureAtRevision, na as workspaceCodexSubscriptionActive } from './provision-roles.js';
 import 'drizzle-orm/pg-core';
 import 'postgres';
-import './schema-D-hyrsFt.js';
+import './schema-SbaSoRdr.js';
 export { migrate, runMigrations } from './migrate.js';
 export { isPrivateAddress } from '@opengeni/network';