@opengeni/db 0.13.1 → 0.13.4

package/dist/provision-roles.d.ts

@@ -1,10 +1,10 @@
-import { TurnInitiatorContext, SessionMcpApprovalPolicy, TurnInitiator, ResourceRef, ToolRef, ReasoningEffort, TurnExecutionPolicyV1, NewSessionDraftOptions, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyTarget, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, SecretForRedaction, KnowledgeMemoryKind, McpCredentialsRequest, McpCredentialAuthNeededReason, McpConnectionResourceScope, ConnectionCredentialsPort, SessionEvent, SessionStatus, SessionHumanInputRequest, SystemUpdateClassification, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdate, SessionEventType, SessionTurnStatus, HumanInputQuestion, Permission, SessionTurn, ConnectionKind, ConnectionStatus, ConnectionMetadata, KnowledgeMemory, CapabilityKind, CapabilitySource, KnowledgeMemoryStatus, KnowledgeSourceRef, ScheduledTaskStatus, ScheduledTaskScheduleSpec, ScheduledTaskRunMode, ScheduledTaskOverlapPolicy, ScheduledTaskAgentConfig, SessionGoalCreatedBy, McpServerConnectionRef as McpServerConnectionRef$1, SocialProvider, SocialConnectionStatus, Session, SessionTurnSource, SandboxBackend, SandboxOs, FileAsset, FileUploadStatus, GitHubRepositoryScope, GitHubInstallationAuthorityKind, SessionGoal, SessionEventReadDirection, SessionEventSemanticClass, SessionEventPayloadMode, SessionAuthorizationListScope, CapabilityPack, RigChangeKind, RigChangeStatus, RigCheck, SessionToolPolicy, SessionGoalStatus, LineageNode, SessionMcpServerMetadata, RigVersion, BillingBalance, RigChange, AccessContext, HostEventExportBatch, HostUsageExportBatch, ApiKey, Rig, ScheduledTask, ScheduledTaskTriggerType, ScheduledTaskRun, SocialConnection, SocialPost, VariableSet, Workspace, CapabilityInstallation, PackInstallation, CapabilityCatalogItem, HumanInputResponse, ManagedAccount, SessionQueueSnapshot, WorkspaceControlEvent, AccessGrant, WorkspaceRegisteredPack, SessionListResponse, UsageEvent, WorkspaceMember, VariableSetVariableMetadata, PackInstallationStatus, ScheduledTaskRunStatus } from '@opengeni/contracts';
+import { TurnInitiatorContext, SessionMcpApprovalPolicy, TurnInitiator, ResourceRef, ToolRef, ReasoningEffort, TurnExecutionPolicyV1, NewSessionDraftOptions, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyTarget, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, SecretForRedaction, KnowledgeMemoryKind, McpCredentialsRequest, McpCredentialAuthNeededReason, McpConnectionResourceScope, ConnectionCredentialsPort, SessionEvent, SessionStatus, SessionHumanInputRequest, SystemUpdateClassification, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdate, SessionEventType, SessionTurnStatus, HumanInputQuestion, Permission, SessionTurn, ConnectionKind, ConnectionStatus, ConnectionMetadata, KnowledgeMemory, CapabilityKind, CapabilitySource, KnowledgeMemoryStatus, KnowledgeSourceRef, ScheduledTaskStatus, ScheduledTaskScheduleSpec, ScheduledTaskRunMode, ScheduledTaskOverlapPolicy, ScheduledTaskAgentConfig, SessionGoalCreatedBy, McpServerConnectionRef as McpServerConnectionRef$1, SocialProvider, SocialConnectionStatus, Session, SessionTurnSource, SandboxBackend, SandboxOs, FileAsset, FileUploadStatus, GitHubRepositoryScope, GitHubInstallationAuthorityKind, SessionGoal, SessionEventReadDirection, SessionEventSemanticClass, SessionEventPayloadMode, SessionAuthorizationListScope, CapabilityPack, RigChangeKind, RigChangeStatus, RigCheck, SessionSkill, SessionToolPolicy, SessionGoalStatus, LineageNode, SessionMcpServerMetadata, RigVersion, BillingBalance, RigChange, AccessContext, HostEventExportBatch, HostUsageExportBatch, ApiKey, Rig, ScheduledTask, ScheduledTaskTriggerType, ScheduledTaskRun, SocialConnection, SocialPost, VariableSet, Workspace, CapabilityInstallation, PackInstallation, CapabilityCatalogItem, HumanInputResponse, ManagedAccount, SessionQueueSnapshot, WorkspaceControlEvent, AccessGrant, WorkspaceRegisteredPack, SessionListResponse, UsageEvent, WorkspaceMember, VariableSetVariableMetadata, PackInstallationStatus, ScheduledTaskRunStatus } from '@opengeni/contracts';
 import { environmentsEncryptionKeyBytes, Settings, McpServerConnectionRef } from '@opengeni/config';
 import { refreshCodexToken, CodexRateLimitResetCreditsDetails, ResetCreditFetchFailureReason, CodexTokenSnapshot, CodexFetch, CodexUsagePayload } from '@opengeni/codex';
 import { SQL } from 'drizzle-orm';
 import { PgDatabase, PgTransactionConfig } from 'drizzle-orm/pg-core';
 import postgres from 'postgres';
-import { s as sessionCommandReceipts, w as workspaces, a as sessions, b as sessionTurns, c as sessionTurnAttempts, d as composerDrafts, n as newSessionDrafts, e as schema, f as enrollmentOsValues, g as enrollmentExposureValues, h as deviceEnrollmentStatusValues, i as enrollmentStatusValues, j as sandboxKindValues, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues } from './schema-D-hyrsFt.js';
+import { s as sessionCommandReceipts, w as workspaces, a as sessions, b as sessionTurns, c as sessionTurnAttempts, d as composerDrafts, n as newSessionDrafts, e as schema, f as enrollmentOsValues, g as enrollmentExposureValues, h as deviceEnrollmentStatusValues, i as enrollmentStatusValues, j as sandboxKindValues, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues } from './schema-SbaSoRdr.js';
 import './migrate.js';
 import { FetchLike, DnsLookup } from '@opengeni/network';
 
@@ -2123,6 +2123,38 @@ declare function listConnectionsMetadata(db: Database, workspaceId: string, subj
 declare function getConnectionMetadata(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification | null>;
 declare function updateConnection(db: Database, input: UpdateConnectionInput): Promise<ConnectionMetadataWithVerification | null>;
 declare function revokeConnection(db: Database, workspaceId: string, connectionId: string, updatedBySubjectId?: string | null): Promise<ConnectionMetadataWithVerification | null>;
+declare class SlackBotLifecycleSuccessAuditError extends Error {
+    constructor();
+}
+type SlackBotLifecycleSuccessAuditInput = {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    credentialRole: string;
+    credentialLabel: string;
+    slackTeamId: string;
+};
+declare function createConnectionWithSlackBotSuccessAudit(db: Database, input: SlackBotLifecycleSuccessAuditInput & {
+    connection: CreateConnectionInput;
+}): Promise<ConnectionMetadataWithVerification>;
+declare function updateConnectionWithSlackBotSuccessAudit(db: Database, input: SlackBotLifecycleSuccessAuditInput & {
+    connection: UpdateConnectionInput;
+}): Promise<ConnectionMetadataWithVerification | null>;
+declare function revokeConnectionWithSlackBotSuccessAudit(db: Database, input: SlackBotLifecycleSuccessAuditInput & {
+    connectionId: string;
+    expectedVersion: number;
+}): Promise<ConnectionMetadataWithVerification | null>;
+type SlackBotInstallCallbackFailureStage = "permission_check" | "nonce_consume" | "provider_denial" | "code_exchange" | "credential_verification" | "permission_recheck" | "principal_validation" | "persistence";
+type SlackBotInstallCallbackFailureReason = "permission_lost" | "state_replayed" | "provider_denied" | "missing_code" | "exchange_failed" | "scope_mismatch" | "identity_mismatch" | "credential_verification_failed" | "connection_conflict" | "principal_mismatch" | "persistence_failed" | "success_audit_failed";
+declare function recordSlackBotInstallCallbackFailure(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    callbackDigest: string;
+    installMode: "connect" | "reinstall";
+    stage: SlackBotInstallCallbackFailureStage;
+    reason: SlackBotInstallCallbackFailureReason;
+}): Promise<boolean>;
 type ClaimSlackBotPostOperationResult = {
     kind: "claimed" | "in_progress" | "completed";
     operation: SlackBotPostOperation;
@@ -2190,12 +2222,14 @@ declare function recordConnectionTokenRefresh(db: Database, input: {
     expiresAt: Date | null;
     grantedScopes?: string[];
     lastRefreshAt: Date;
+    subjectId?: string | null;
 }): Promise<boolean>;
 declare function setConnectionStatus(db: Database, workspaceId: string, status: ConnectionStatus, lastError: string | null, guard: {
     id: string;
     version: number;
+    subjectId?: string | null;
 }): Promise<boolean>;
-declare function recordConnectionUsed(db: Database, workspaceId: string, connectionId: string): Promise<void>;
+declare function recordConnectionUsed(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<void>;
 declare function loadIntegrationOAuthClient(db: Database, settings: Settings, issuer: string): Promise<IntegrationOAuthClientForUse | null>;
 declare function storeIntegrationOAuthClient(db: Database, input: StoreIntegrationOAuthClientInput): Promise<StoredIntegrationOAuthClient>;
 declare function replaceIntegrationOAuthClient(db: Database, input: ReplaceIntegrationOAuthClientInput): Promise<StoredIntegrationOAuthClient>;
@@ -3435,6 +3469,7 @@ type SessionCreateInput = {
     initialMessage: string;
     initialTurnInstructions?: string | null;
     resources: ResourceRef[];
+    skills?: SessionSkill[];
     tools?: ToolRef[];
     toolPolicy?: SessionToolPolicy | null;
     metadata: Record<string, unknown>;
@@ -3689,8 +3724,10 @@ declare function getSessionRootId(db: Database, workspaceId: string, sessionId:
 /**
  * Read the full lineage slice around a session. Every recursive step carries
  * workspace_id as a hard predicate; a foreign parent/child id is invisible even
- * before RLS is considered. Ancestors are capped at 10 and returned root-first.
- * Descendants are capped at depth 5 and 200 total rows, returned as a nested tree.
+ * before RLS is considered. Up to 63 ancestors are returned root-first; an
+ * invalid, cyclic, foreign, or deeper chain fails closed instead of presenting
+ * a partial path as if it were rooted. Descendants are capped at depth 5 and
+ * 200 total rows, returned as a nested tree.
  */
 declare function getSessionLineage(db: Database, workspaceId: string, sessionId: string): Promise<SessionLineage | null>;
 /**
@@ -6447,4 +6484,4 @@ declare function appendSessionEventsWithLockedSessionUpdate(db: Database, worksp
 }): Promise<SessionEvent[]>;
 declare function sessionSubject(workspaceId: string, sessionId: string): string;
 
-export { type CodexRateLimitResetCreditsAccountResult as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BeginSandboxRematerializationResult as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type ClearSessionContextResult as D, type CodexAccountStatus as E, type CodexAccountUsageSnapshot as F, type CodexAllocatorUpdateResult as G, type CodexAuthDeps as H, type CodexCapacityAvailabilityDecision as I, type CodexCapacityMutationResult as J, type CodexCapacityResetKind as K, type CodexCapacitySelectionContext as L, type CodexCapacityWait as M, type CodexCapacityWaitStatus as N, type CodexCapacityWakeTarget as O, type CodexCredentialForRun as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialLeaseCandidateFilter as Q, type CodexCredentialLeaseCandidateFilterResult as R, type CodexCredentialLeasePolicyScopeResolver as S, type CodexCredentialLeaseQuarantine as T, type CodexCredentialLeaseResult as U, type CodexCredentialLeaseSelection as V, type CodexCredentialLeaseSelectionContext as W, type CodexCredentialStatus as X, type CodexCredentialTokens as Y, type CodexLeaseAccountStatus as Z, type CodexPinSource as _, type AcceptSessionApprovalDecisionResult as a, type HostMcpCredentialResolverContext as a$, type CodexResetRedemptionAttempt as a0, type CodexResetRedemptionOutcome as a1, type CodexResetRedemptionRecovery as a2, type CodexResetRedemptionSendNotReadyReason as a3, type CodexResetRedemptionStatus as a4, type CodexRotationSettings as a5, type CodexRotationStrategy as a6, type CodexTokenDeadlineClock as a7, type CodexTokenDeadlineOptions as a8, type CompleteSlackBotPostOperationResult as a9, type EditQueueCommandResult as aA, type EffectiveControlBlocker as aB, type EffectiveControlResumeOption as aC, type EffectiveControlState as aD, type EffectiveSessionControl as aE, type EnableCapabilityInstallationInput as aF, type EnabledMcpCapabilityServer as aG, type EnqueueSessionTurnInput as aH, type EnrollmentExposure as aI, type EnrollmentOs as aJ, type EnrollmentRecord as aK, type EnrollmentStatus as aL, type ExpiredDrainingSandboxLeaseCount as aM, type ExpiredFileUploadCleanupClaim as aN, FORCE_RLS_TABLES as aO, type FenceCodexResetRedemptionSendResult as aP, type FileUploadCleanupClaimResult as aQ, type ForceDrainResult as aR, type FrozenTurnInitiator as aS, type GitHubInstallation as aT, type GitHubInstallationAccess as aU, GitHubInstallationAuthorityCommitError as aV, type GoalContinuationDecision as aW, type HostExportConsumerStatus as aX, type HostExportKind as aY, HostExportPayloadError as aZ, HostMcpCredentialBindingError as a_, type ComposerDraftRow as aa, type ConnectionBrokerDeps as ab, type ConnectionCredentialForBroker as ac, type ConnectionMetadataWithVerification as ad, ConnectionRefreshHttpError as ae, type ConsumeOAuthStateNonceInput as af, type CorrectWorkspaceMemoryInput as ag, type CorrectWorkspaceMemoryResult as ah, type CreateCapabilityCatalogItemInput as ai, type CreateConnectionInput as aj, type CreateDbOptions as ak, type CreateImportBatchInput as al, type CreateKnowledgeMemoryInput as am, type CreatePackInstallationInput as an, type CreateScheduledTaskInput as ao, type CreateSessionGoalInput as ap, type CreateSessionMcpServerInput as aq, type CreateSocialConnectionInput as ar, type CreateSocialPostInput as as, type CreditBalanceByAccount as at, type Database as au, type DatabaseFailureCode as av, type DbClient as aw, type DbSession as ax, type DeviceEnrollmentRequestRecord as ay, type DeviceEnrollmentStatus as az, type AcceptSessionHumanInputResponseResult as b, type ReconcileColdLostLeaseInstanceBlockersResult as b$, HostMcpCredentialScopeError as b0, HumanInputResponseValidationError as b1, type IdempotentPersistenceTransactionOptions as b2, type ImportBatch as b3, type InitializeSessionStartInput as b4, type InitializeSessionStartResult as b5, type InstallOrReadTurnExecutionPolicyForAttemptResult as b6, type IntegrationOAuthClientForUse as b7, type LeaseHolderKind as b8, type LeaseSnapshot as b9, type MarkWarmLeaseInstanceLostResult as bA, type MaterializeGoalContinuationResult as bB, type MemoryBlockRecord as bC, type MemoryEmbedder as bD, type MemorySanitizeResult as bE, type MeterableWarmLease as bF, NON_RLS_RUNTIME_TABLES as bG, type NestedAgentDepthDeploymentPolicy as bH, type NestedAgentDepthPolicySource as bI, NewSessionDraftAccessError as bJ, NewSessionDraftConflictError as bK, type NewSessionDraftRow as bL, PROTECTED_NO_DIRECT_DML_TABLES as bM, type PendingSessionToolCallInput as bN, type PersistenceFailureDetails as bO, type PersistenceRetryOutcome as bP, type QueueCommandConflictCode as bQ, QueueCommandConflictError as bR, type QueueCommandResult as bS, type QueuedTurnRow as bT, RUNTIME_DML_TABLES as bU, RUNTIME_FULL_DML_TABLES as bV, RUNTIME_READ_INSERT_TABLES as bW, RUNTIME_READ_ONLY_TABLES as bX, RUNTIME_TABLE_PRIVILEGES as bY, type ReapDrainable as bZ, type ReconcileCodexCapacityWaitResult as b_, type ListKnowledgeMemoryOptions as ba, type ListSessionEventPageOptions as bb, type ListSessionEventsOptions as bc, type ListSessionsForSubjectOptions as bd, type ListSessionsOptions as be, type LiveModalSandboxLeaseAttribution as bf, type LostProviderWorkspaceSettlement as bg, MACHINE_METRICS_SERIES_INTERVAL_MS as bh, MAX_INTERNAL_UPDATE_BATCH_BYTES as bi, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as bj, MAX_INTERNAL_UPDATE_BYTES as bk, MEMORY_ACTIVE_RECORD_CAP as bl, MEMORY_BLOCK_KIND_ORDER as bm, MEMORY_BLOCK_RECORD_LIMIT as bn, MEMORY_CORRECT_TOOL_DESCRIPTION as bo, MEMORY_KIND_SECTION_TITLES as bp, MEMORY_NEAR_DUP_COSINE_THRESHOLD as bq, MEMORY_NEAR_DUP_NEIGHBORS as br, MEMORY_SAVE_TOOL_DESCRIPTION as bs, MEMORY_SEARCH_DEFAULT_LIMIT as bt, MEMORY_SEARCH_MAX_LIMIT as bu, MEMORY_SEARCH_TOOL_DESCRIPTION as bv, MEMORY_TEXT_MAX_CHARS as bw, MEMORY_VISIBLE_RECORD_CAP as bx, type MachineMetricsRow as by, type MachineMetricsSample as bz, type AccrueWarmSecondsResult as c, SanitizedDatabasePersistenceCause as c$, type RecoverSessionDispatchInput as c0, type RecoverSessionDispatchResult as c1, type RefreshTransportOptions as c2, type RegisterWorkspacePackInput as c3, type RegistryCapabilityCatalogItemInput as c4, type RegistryCatalogSurfaceKey as c5, type ReplaceIntegrationOAuthClientInput as c6, type RequestSessionTurnRecoveryInput as c7, type RequestSessionTurnRecoveryResult as c8, type ResolveConnectionCredentialInput as c9, SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT as cA, SESSION_LIST_SNAPSHOT_MAX_IDS as cB, type SafeDatabaseErrorFacts as cC, type SandboxArchiveAvailability as cD, type SandboxArchiveRevision as cE, SandboxImageConflictError as cF, type SandboxKind as cG, type SandboxLeaseLiveness as cH, SandboxLeaseRecoveryBlockedError as cI, SandboxLeaseSupersededError as cJ, type SandboxOpenPtySessionRow as cK, type SandboxProviderExistence as cL, type SandboxPtyProcessIdentity as cM, type SandboxPtySessionRow as cN, type SandboxRecord as cO, type SandboxRecoveryState as cP, type SandboxRestoreStatus as cQ, type SandboxRetainedProcess as cR, type SandboxRetainedProcessIdentity as cS, SandboxRetainedProcessPromotionFencedError as cT, type SandboxRetainedProcessReconciliationClaim as cU, type SandboxRetainedProcessState as cV, SandboxRigConflictError as cW, type SandboxWorkspaceMutationAdmission as cX, SandboxWorkspaceMutationFencedError as cY, type SandboxWorkspaceMutationProviderOutcome as cZ, type SandboxWorkspaceReadiness as c_, type ResolveConnectionCredentialResult as ca, type RetainedFileArtifact as cb, type RetainedProcessProviderProof as cc, RigActiveVersionChangedError as cd, RigChangeAlreadyVerifyingError as ce, type RigChangeMonitoringSummary as cf, RigChangeTransitionError as cg, type RigVersionContentInput as ch, type RigVersionMonitoringSummary as ci, type RlsContext as cj, type RlsStrategy as ck, type RuntimeDatabaseIdentity as cl, type RuntimeDatabasePosture as cm, RuntimeDatabasePostureError as cn, type RuntimeDatabasePostureOptions as co, type RuntimeRoutinePosture as cp, type RuntimeSchemaPosture as cq, type RuntimeTableDmlPrivilege as cr, type RuntimeTablePosture as cs, type RuntimeTablePrivilegeContract as ct, SESSION_ANCESTRY_LIMIT as cu, SESSION_DISCOVERY_CONTROL_TARGET_LIMIT as cv, SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS as cw, SESSION_DISCOVERY_GOAL_MAX_CHARS as cx, SESSION_DISCOVERY_MESSAGE_MAX_CHARS as cy, SESSION_EVENT_DB_PAGE_MAX_BYTES as cz, type AcquireLeaseInput as d, type ToolspaceTurnAttemptClaims as d$, type SaveWorkspaceMemoryInput as d0, type SaveWorkspaceMemoryResult as d1, type SessionAttemptInterruptionSettlement as d2, type SessionCodexState as d3, type SessionCommandActor as d4, SessionCommandIdempotencyError as d5, type SessionCommandReceiptRow as d6, SessionContextBusyError as d7, SessionControlConflictError as d8, SessionControlInvariantError as d9, type SessionRecordingCodec as dA, type SessionRecordingMode as dB, type SessionRecordingRow as dC, type SessionRecordingState as dD, type SessionSpawnDenial as dE, type SessionSpawnDenialCode as dF, SessionSpawnDeniedDbError as dG, type SessionSystemUpdateOutboxDelivery as dH, SessionToolPolicyVersionConflictError as dI, type SessionTurnAttemptOutcome as dJ, type SessionTurnForExecution as dK, type SessionTurnRecordingSettlement as dL, type SessionWorkPeek as dM, type SessionWorkTrigger as dN, type SessionWorkflowWake as dO, type SessionWorkflowWakeDeliveryResult as dP, type SetSessionCodexPinOptions as dQ, type SetSessionGoalStatusEvent as dR, type SettleCodexCredentialFailoverResult as dS, type SettleCodexCredentialLeaseLossResult as dT, type SlackBotPostOperation as dU, type SteerQueueCommandResult as dV, type StoreIntegrationOAuthClientInput as dW, type StoredIntegrationOAuthClient as dX, type StreamAcknowledgment as dY, type SubmitHumanPromptResult as dZ, type ToolspaceCallReservation as d_, type SessionControlMutationResult as da, type SessionCreateDeniedResult as db, type SessionCreateInput as dc, type SessionCreateResult as dd, type SessionCreateSuccessResult as de, type SessionDepthPolicy as df, type SessionDiscoveryControl as dg, type SessionDiscoveryCursor as dh, type SessionDiscoveryOrderBy as di, type SessionDiscoverySummary as dj, type SessionEventPage as dk, SessionEventPersistenceError as dl, type SessionEventWriteLockInput as dm, type SessionEventWriteLocks as dn, type SessionGoalContinuationProjection as dp, SessionIdConflictError as dq, type SessionLineage as dr, SessionListAccessError as ds, type SessionListCursor as dt, SessionListCursorError as du, SessionListCursorExpiredError as dv, SessionListSnapshotLimitError as dw, type SessionMcpServerForRun as dx, SessionPinAccessError as dy, SessionPinVersionConflictError as dz, type AcquireLeaseResult as e, assertAgentCommandAuthorityInTransaction as e$, type TurnAttemptFenceRejectReason as e0, type UpdateConnectionInput as e1, type UpdateImportBatchCountsInput as e2, type UpdateKnowledgeMemoryInput as e3, type UpdateScheduledTaskInput as e4, type UpdateSessionMcpApprovalPolicyResult as e5, type UpdateSessionMcpServerCredentialsInput as e6, type UpdateSessionMcpServerCredentialsResult as e7, type UpsertCodexSubscriptionCredentialResult as e8, type UserLookup as e9, acknowledgeHostExportBatch as eA, acquireCodexCredentialLease as eB, acquireLease as eC, activateRigVersion as eD, activateWorkspaceInstructionPolicyRevision as eE, addSessionSystemUpdate as eF, addSessionSystemUpdateWithSourceMutation as eG, admitToolspaceTurnAttempt as eH, adoptCodexResetRedemptionAttempt as eI, advanceWorkspaceGeneration as eJ, advanceWorkspaceGenerationForDirectRequest as eK, advanceWorkspaceGenerationForRetainedProcess as eL, allAccountPermissions as eM, allWorkspacePermissions as eN, appendSessionEventToSandboxGroup as eO, appendSessionEvents as eP, appendSessionEventsAndUpdateSession as eQ, appendSessionEventsForTurnAttempt as eR, appendSessionEventsWithLockedSessionUpdate as eS, appendSessionHistoryItems as eT, applyContextCompaction as eU, applyCreditDebitUpToBalance as eV, applyCreditLedgerEntry as eW, applySessionTurnSettlement as eX, approveDeviceEnrollmentRequest as eY, areGitHubRepositoriesAllowedForWorkspace as eZ, armCodexCapacityWait as e_, type VariableSetForRun as ea, WORKSPACE_MEMORY_BLOCK_EMPTY as eb, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as ec, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as ed, type WorkspaceCaptureCommitResult as ee, type WorkspaceCaptureGcPlan as ef, type WorkspaceCaptureGcRow as eg, type WorkspaceCaptureRow as eh, type WorkspaceControlLockMode as ei, type WorkspaceControlMutationResult as ej, type WorkspaceControlRow as ek, type WorkspaceEnvironmentForRun as el, WorkspaceInstructionPolicyConflictError as em, WorkspaceInstructionPolicyInvalidOperationError as en, WorkspaceInstructionPolicyLegacyUnavailableError as eo, WorkspaceInstructionPolicyNotFoundError as ep, type WorkspaceMemoryOrigin as eq, type WorkspaceMemorySearchInput as er, type WorkspaceMemorySearchMode as es, type WorkspaceMemorySearchResult as et, type WorkspaceModelPolicy as eu, abandonCodexResetRedemptionBeforeProvider as ev, abandonRecordingForTurnAttempt as ew, acceptSessionApprovalDecision as ex, acceptSessionHumanInputResponse as ey, accrueWarmSeconds as ez, type ActiveRetainedProcessOwnerCount as f, createDb as f$, assertRuntimeDatabasePosture as f0, autoResumeSessionBranchInTransaction as f1, beginRigChangeVerificationAttempt as f2, beginSandboxRematerialization as f3, bindAuthorizedGitHubInstallationRepositories as f4, bindGitHubInstallationRepositories as f5, bootstrapWorkspace as f6, buildChildCompletionDigest as f7, buildCodexTokenResolver as f8, buildConnectionTokenResolver as f9, computeWorkspaceCaptureGcPlan as fA, confirmDrainCold as fB, consumeDeviceEnrollmentRequest as fC, consumeIntegrationOAuthStateNonce as fD, consumeNewSessionDraftInTransaction as fE, correctWorkspaceMemory as fF, countActiveApiKeysForWorkspace as fG, countActiveRetainedProcessesByOwnerState as fH, countActiveSessionHistoryItems as fI, countActiveSessionsForWorkspace as fJ, countActiveSessionsUsingEnvironment as fK, countActiveSessionsUsingVariableSet as fL, countConsecutiveReactiveRotations as fM, countExpiredDrainingSandboxLeases as fN, countQueuedTurns as fO, countRigs as fP, countSandboxLeasesByLiveness as fQ, countScheduledTasksForWorkspace as fR, countScheduledTasksUsingEnvironment as fS, countScheduledTasksUsingVariableSet as fT, countSessionHistoryItems as fU, countSessionsUsingRig as fV, countVariableSets as fW, countWorkspaceEnvironments as fX, countWorkspacesForAccount as fY, createApiKey as fZ, createConnection as f_, buildHostConnectionTokenResolver as fa, canonicalSessionCommandHash as fb, claimCodexResetRedemption as fc, claimExpiredFileUploadCleanup as fd, claimFileUploadCleanup as fe, claimHostExportBatch as ff, claimPendingSessionSystemUpdateOutbox as fg, claimPendingSessionWorkflowWakes as fh, claimSessionWorkForAttempt as fi, claimSlackBotPostOperation as fj, claimTerminalRetainedProcesses as fk, clearDurablePendingSessionToolCalls as fl, clearEnrollmentWentOffline as fm, clearPendingSessionToolspaceCall as fn, clearSessionContext as fo, clearSessionGoal as fp, clearedContextMarkerItem as fq, closePtySession as fr, closeSessionTurnAttemptInTransaction as fs, codexCapacityRefreshBackoffMs as ft, commitWarmingToWarm as fu, completeCodexResetRedemption as fv, completeExpiredFileUploadCleanup as fw, completeFileUpload as fx, completeFileUploadCleanup as fy, completeSlackBotPostOperation as fz, type ActiveSandboxPointer as g, evaluateSessionControl as g$, createDeviceEnrollmentRequest as g0, createEnrollment as g1, createFileUpload as g2, createImportBatch as g3, createKnowledgeMemory as g4, createRig as g5, createRigChange as g6, createRigVersion as g7, createRigVersionForChangePromotion as g8, createSandbox as g9, deleteVariableSetVariable as gA, deleteWorkspace as gB, deleteWorkspaceCaptureRows as gC, deleteWorkspaceEnvironment as gD, deleteWorkspaceEnvironmentVariable as gE, deleteWorkspacePack as gF, denyDeviceEnrollmentRequest as gG, diffWorkspaceInstructionPolicyContent as gH, diffWorkspaceInstructionPolicyRevisions as gI, disableCapabilityInstallation as gJ, disableHostExportConsumer as gK, disconnectAllCodexAccounts as gL, disconnectCodexAccount as gM, editQueuedTurnInTransaction as gN, enableCapabilityInstallation as gO, enablePackInstallation as gP, encodeSessionListCursor as gQ, encryptEnvironmentValue as gR, enqueueSessionTurn as gS, enqueueSessionWorkflowWake as gT, enqueueSessionWorkflowWakeIfRunnable as gU, enqueueSessionWorkflowWakeInTransaction as gV, ensureCodexRotationSettings as gW, ensureManagedAccessForUser as gX, estimateMemoryTokens as gY, evaluateGoalContinuation as gZ, evaluateRuntimeDatabasePosture as g_, createScheduledTask as ga, createScheduledTaskRun as gb, createSession as gc, createSessionGoal as gd, createSessionMcpServers as ge, createSessionWithIdempotencyKey as gf, createSessionWithIdempotencyKeyResult as gg, createSocialConnection as gh, createSocialPost as gi, createVariableSet as gj, createWorkspace as gk, createWorkspaceEnvironment as gl, createWorkspaceInstructionPolicyDraft as gm, databaseFailureCode as gn, deadLetterHostExportHead as go, decodeSessionListCursor as gp, decryptEnvironmentValue as gq, decryptedCapabilityHeaders as gr, deferRetainedProcessReconciliation as gs, deleteGitHubInstallationBinding as gt, deleteRecording as gu, deleteRig as gv, deleteRigIfNoActiveSessions as gw, deleteScheduledTask as gx, deleteSessionQueueItemInTransaction as gy, deleteVariableSet as gz, type AddSessionSystemUpdateInput as h, getSessionGoal as h$, evaluateSessionControls as h0, evaluateSessionDiscoveryControls as h1, expireSessionHumanInputRequest as h2, failHostExportBatch as h3, failSandboxRematerialization as h4, failWarmingToCold as h5, fenceCodexResetRedemptionSend as h6, fetchCodexRateLimitResetCreditsForAccount as h7, fetchCodexUsageForAccount as h8, finalizeEnrollmentByToken as h9, getManagedUserByEmail as hA, getMaterializedSandboxFileResources as hB, getNestedAgentDepthDeploymentPolicy as hC, getNewSessionDraftInTransaction as hD, getOpenPtySession as hE, getOrCreateSessionSystemUpdateOutbox as hF, getPackInstallation as hG, getPendingDeviceEnrollmentRequestByUserCode as hH, getPendingDeviceEnrollmentRequestByUserCodeGlobal as hI, getRecording as hJ, getRetainedFileArtifact as hK, getRetainedProcess as hL, getRig as hM, getRigByName as hN, getRigChange as hO, getRigName as hP, getRigVersion as hQ, getRigVersionById as hR, getSandbox as hS, getSandboxSessionEnvelope as hT, getScheduledTask as hU, getSession as hV, getSessionByCreateIdempotencyKey as hW, getSessionCodexState as hX, getSessionEvent as hY, getSessionEventByClientEventId as hZ, getSessionForSubject as h_, findActiveApiKeyByHash as ha, forceDrainOverLimitViewerOnlyBoxes as hb, frozenInitiatorForCommandActor as hc, getActiveSessionHistoryItems as hd, getActiveSessionTurnForExecution as he, getAnySessionInGroup as hf, getBillingBalance as hg, getBillingCustomer as hh, getCapabilityCatalogItem as hi, getCapabilityInstallation as hj, getCodexCapacityWaitForSession as hk, getCodexCredentialStatus as hl, getCodexResetRedemptionAttempt as hm, getCodexRotationSettings as hn, getComposerDraftInTransaction as ho, getConnectionMetadata as hp, getDeviceEnrollmentRequestByDeviceCode as hq, getEnrollment as hr, getFile as hs, getFileUpload as ht, getHostExportConsumerStatus as hu, getHumanInputResumeForEvent as hv, getKnowledgeMemory as hw, getLatestRunState as hx, getLatestStartedSessionTurn as hy, getManagedAccount as hz, type AddSessionSystemUpdateResult as i, listDistinctRigVersionIdsInGroup as i$, getSessionGoalWithContinuation as i0, getSessionHistoryItems as i1, getSessionHumanInputRequest as i2, getSessionLineage as i3, getSessionQueueSnapshot as i4, getSessionRootId as i5, getSessionSpawnDenial as i6, getSessionSpawnDenialByIdempotencyKey as i7, getSessionSystemUpdateOutboxByDedupeKey as i8, getSessionTurn as i9, heartbeatLeaseHolder as iA, importLegacyWorkspaceInstructionPolicyDraft as iB, ingestMachineMetricsSample as iC, initializeSessionStartAtomically as iD, insertFailedWorkspaceCapture as iE, insertMachineMetricsSeries as iF, insertPtySession as iG, insertRecording as iH, insertWorkspaceCapture as iI, inspectRuntimeDatabasePosture as iJ, installOrReadTurnExecutionPolicyForAttempt as iK, interruptedToolCallResult as iL, isCodexBilledTurn as iM, isDatabasePersistenceFailure as iN, isMemoryTextTooLong as iO, isRetryablePersistenceSqlState as iP, isSessionCompactionRequested as iQ, isSessionEventPersistenceError as iR, isStripeWebhookProcessed as iS, latestWorkspaceCapture as iT, listApiKeys as iU, listCapabilityCatalogItems as iV, listCapabilityInstallations as iW, listCodexAccountStatuses as iX, listCodexResetRedemptionRecoveries as iY, listConnectionsMetadata as iZ, listCreditBalancesByAccount as i_, getSessionTurnForAttempt as ia, getSlackBotPostOperation as ib, getSocialConnection as ic, getStoredCapabilityHeaderCiphertext as id, getStreamAcknowledgment as ie, getVariableSet as ig, getVariableSetByName as ih, getVariableSetValuesForRun as ii, getWorkspace as ij, getWorkspaceControlEvent as ik, getWorkspaceDefaultRigId as il, getWorkspaceEnvironment as im, getWorkspaceEnvironmentByName as io, getWorkspaceEnvironmentValuesForRun as ip, getWorkspaceGrant as iq, getWorkspaceInstructionPolicyRevision as ir, getWorkspaceModelPolicy as is, getWorkspacePack as it, grantWorkspaceAccess as iu, hasAuditableGitHubInstallationAuthority as iv, hasCreditLedgerEntry as iw, hashMemoryText as ix, heartbeatCodexCredentialLease as iy, heartbeatCodexCredentialLeaseUntil as iz, type AdoptCodexResetRedemptionResult as j, markSessionWorkflowWakeFailed as j$, listDistinctVariableSetIdsInGroup as j0, listEnabledMcpCapabilityServers as j1, listEnrollments as j2, listGitHubInstallationAccessForWorkspace as j3, listGitHubInstallationIdsForWorkspace as j4, listGitHubInstallationsForWorkspace as j5, listKnowledgeMemories as j6, listLiveModalSandboxLeaseAttributions as j7, listMeterableWarmLeases as j8, listOpenPtySessions as j9, listSessionsForSubject as jA, listSocialConnections as jB, listSocialPosts as jC, listUsageEvents as jD, listVariableSets as jE, listWorkspaceControlEvents as jF, listWorkspaceEnvironments as jG, listWorkspaceInstructionPolicyRevisions as jH, listWorkspaceMembers as jI, listWorkspacePacks as jJ, listWorkspacesForSubject as jK, loadCodexCredentialForRun as jL, loadConnectionCredentialForBroker as jM, loadIntegrationOAuthClient as jN, loadVariableSetForRun as jO, loadWorkspaceEnvironmentForRun as jP, lockSessionEventWriteRows as jQ, lockWorkspaceInferenceControl as jR, markFileUploadFailed as jS, markSandboxFileResourcesMaterialized as jT, markSandboxProviderReady as jU, markSandboxRestoreVerifying as jV, markScheduledTaskRunFailedIfQueued as jW, markSessionAttemptQuiesced as jX, markSessionSystemUpdateOutboxDeliveredInTransaction as jY, markSessionSystemUpdateOutboxFailed as jZ, markSessionWorkflowWakeDelivered as j_, listOutstandingSessionSystemUpdates as ja, listPackInstallations as jb, listPendingCodexCapacityWakeTargets as jc, listPendingSessionTurns as jd, listRecordings as je, listRegistryCatalogSurfaceKeys as jf, listRigChangeMonitoringSummaries as jg, listRigChanges as jh, listRigVersionMonitoringSummaries as ji, listRigVersions as jj, listRigs as jk, listSandboxes as jl, listScheduledTaskRuns as jm, listScheduledTasks as jn, listSessionDiscoverySummaries as jo, listSessionEventPage as jp, listSessionEvents as jq, listSessionHumanInputRequests as jr, listSessionIdsInGroup as js, listSessionMcpServerMetadata as jt, listSessionMcpServersForChildInheritance as ju, listSessionMcpServersForRun as jv, listSessionSpawnDenials as jw, listSessionSystemUpdatesForTurn as jx, listSessionTurns as jy, listSessions as jz, AgentCommandAuthorityError as k, releaseLeaseHolder as k$, markStaleRegistryCatalogItems as k0, markStripeWebhookProcessed as k1, markWarmLeaseInstanceLost as k2, materializeGoalContinuation as k3, mcpServerIdForCapability as k4, moveQueuedTurnInTransaction as k5, mutateSessionControlInTransaction as k6, mutateWorkspaceControlInTransaction as k7, nestedPostgresSqlState as k8, newSessionDraftToolsProvided as k9, recordCodexAccountConnectors as kA, recordCodexAccountUsage as kB, recordCodexAccountUsageWithWakeTargets as kC, recordCodexTokenRefresh as kD, recordConnectionTokenRefresh as kE, recordConnectionUsed as kF, recordLeaseDataPlaneUrl as kG, recordLeaseTerminalDataPlaneUrl as kH, recordPendingSessionToolCallResult as kI, recordRetainedProcessReconciliationProof as kJ, recordSessionActiveCodexCredential as kK, recordSkippedContextCompaction as kL, recordStreamAcknowledgment as kM, recordStripeWebhookEvent as kN, recordUsageEvent as kO, recordWarmingSandboxCreated as kP, recoverSessionDispatch as kQ, refreshOAuthConnectionCredential as kR, registerDbBinding as kS, registerHostExportConsumer as kT, registerInternalUpdateWakeInTransaction as kU, registerPendingSessionToolCall as kV, registerSessionTurnAttemptClaim as kW, registerSessionWorkflowWakeInTransaction as kX, registerWorkspacePack as kY, releaseCodexCredentialLease as kZ, releaseCodexResetRedemptionClaim as k_, nextSessionHistoryPosition as ka, normalizeBearerScheme as kb, normalizeMemoryText as kc, orphanedResultRowIndicesForRepair as kd, peekSessionWork as ke, persistDrainSnapshot as kf, persistWarmSnapshot as kg, planWorkspaceCaptureGc as kh, projectEffectiveControlForRelatedAccess as ki, projectSessionForRelatedAccess as kj, pruneHostExportOutbox as kk, publicNewSessionDraftOptions as kl, quarantineCodexCredentialForLease as km, reArmDrainingLease as kn, readActiveSandbox as ko, readLease as kp, readMachineMetricsLatest as kq, readMachineMetricsLatestForWorkspace as kr, readMachineMetricsSeries as ks, readWorkspaceArchiveCapturePreflight as kt, reapExpiredSessionListSnapshots as ku, reapStaleLeaseHolders as kv, reapStaleLeaseHoldersGlobal as kw, reconcileCodexCapacityWait as kx, reconcileColdLostLeaseInstanceBlockers as ky, recordAuditEvent as kz, type AgentInternalUpdateCommandResult as l, setSessionGoalStatusWithEvent as l$, releaseSlackBotPostOperationClaim as l0, removeWorkspaceMember as l1, renameCodexAccount as l2, renderWorkspaceMemoryBlock as l3, replaceIntegrationOAuthClient as l4, requestSessionCompaction as l5, requestSessionTurnRecovery as l6, requireFile as l7, requireScheduledTask as l8, requireSession as l9, saveComposerDraftInTransaction as lA, saveNewSessionDraftInTransaction as lB, saveRunState as lC, saveWorkspaceMemory as lD, searchWorkspaceMemories as lE, seedNewSessionDraftInTransaction as lF, sendAgentMessageInTransaction as lG, serializeEffectiveSessionControl as lH, sessionAuthorizationScopeFilter as lI, sessionSubject as lJ, sessionTreeStatsForSessions as lK, sessionsWithActiveOpOnEnrollment as lL, setActiveCodexCredential as lM, setActiveSandbox as lN, setCodexCredentialExhausted as lO, setCodexCredentialExhaustedWithWakeTargets as lP, setCodexCredentialStatus as lQ, setCodexCredentialStatusById as lR, setConnectionStatus as lS, setEnrollmentDisplayState as lT, setEnrollmentOpStreamState as lU, setEnrollmentWentOffline as lV, setInitialActiveCodexCredential as lW, setRlsContext as lX, setSessionCodexPin as lY, setSessionGoalLastContinuationTurn as lZ, setSessionGoalStatus as l_, requireSocialConnection as la, requireWorkspace as lb, reserveSessionCommandReceipt as lc, reserveToolspaceCallForAttempt as ld, resolveWorkspaceMemoryBlock as le, resumeHostExportConsumer as lf, retainWorkspaceMutationProcess as lg, retainedProcessReconciliationProof as lh, retainedProcessSettlementIdentity as li, retireHostExportConsumer as lj, revokeApiKey as lk, revokeConnection as ll, revokeEnrollment as lm, revokeViewer as ln, rewindHostExportConsumer as lo, rlsContextForWorkspace as lp, rlsStrategyFor as lq, rollbackWorkspaceInstructionPolicyRevision as lr, rotateWorkspaceArchives as ls, runIdempotentPersistenceTransaction as lt, runtimeDatabaseReadyCheck as lu, safeDatabaseErrorFacts as lv, sanitizeEventPayload as lw, sanitizeEventString as lx, sanitizeMemoryText as ly, sanitizeModelPayload as lz, type AppendEventInput as m, withWorkspaceRls as m$, setSessionLastInputTokensForTurnAttempt as m0, setSessionPin as m1, setSubjectRlsContext as m2, setTemporalWorkflowId as m3, setVariableSetVariable as m4, setWorkspaceDefaultRig as m5, setWorkspaceEnvironmentVariable as m6, settleCodexCredentialFailover as m7, settleCodexCredentialLeaseLoss as m8, settleRetainedProcess as m9, updateSessionGoalWithEvent as mA, updateSessionMcpApprovalPolicy as mB, updateSessionMcpServerCredentials as mC, updateSessionTitle as mD, updateVariableSet as mE, updateWorkspace as mF, updateWorkspaceEnvironment as mG, updateWorkspaceSettings as mH, upsertBillingCustomer as mI, upsertCapabilityCatalogItem as mJ, upsertCodexSubscriptionCredential as mK, upsertGitHubInstallation as mL, upsertMachineMetricsLatest as mM, upsertRegistryCapabilityCatalogItem as mN, upsertSandboxSessionEnvelope as mO, upsertSessionGoal as mP, upsertSessionGoalWithEvent as mQ, upsertWorkspaceModelPolicy as mR, validateHumanInputResponse as mS, verifyDirectWorkspaceMutationSettlement as mT, verifyRetainedProcessMutationSettlement as mU, verifyWorkspaceMutationSettlement as mV, withAccountRls as mW, withCodexCapacityMutation as mX, withCodexCredentialRefreshLock as mY, withCodexTokenDeadline as mZ, withRlsContext as m_, settleScheduledTaskRunInTransaction as ma, settleSessionAttemptInterruptions as mb, settleSessionIdleWithParentOutbox as mc, shortMemoryId as md, steerAgentSessionInTransaction as me, steerQueuedTurnInTransaction as mf, storeIntegrationOAuthClient as mg, submitHumanPromptInTransaction as mh, sumUsageQuantity as mi, supersedeSessionCurrentDirectionInTransaction as mj, touchEnrollmentLastSeen as mk, touchLeaseHolder as ml, updateCodexAllocatorEligibility as mm, updateCodexRotationSettings as mn, updateConnection as mo, updateImportBatchCounts as mp, updateKnowledgeMemory as mq, updatePackInstallationStatus as mr, updatePtySessionActivity as ms, updateRecording as mt, updateRig as mu, updateRigChangeStatus as mv, updateScheduledTask as mw, updateScheduledTaskRun as mx, updateSessionCommandReceiptResult as my, updateSessionGoal as mz, type ApplyContextCompactionResult as n, withWorkspaceSubjectRls as n0, withWorkspaceUsageLock as n1, workspaceCaptureAtRevision as n2, workspaceCodexSubscriptionActive as n3, type ApplySessionTurnSettlementInput as o, type ApplySessionTurnSettlementResult as p, provisionRoles, type ArmCodexCapacityWaitResult as q, type BootstrapWorkspaceInput as r, CODEX_CAPACITY_REFRESH_MIN_MS as s, CODEX_CREDENTIAL_LEASE_TTL_MS as t, CODEX_RESET_REDEMPTION_OUTCOMES as u, CODEX_ROTATION_STRATEGIES as v, type ClaimCodexResetRedemptionResult as w, type ClaimSessionWorkForAttemptInput as x, type ClaimSessionWorkForAttemptResult as y, type ClaimSlackBotPostOperationResult as z };
+export { type CodexRateLimitResetCreditsAccountResult as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BeginSandboxRematerializationResult as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type ClearSessionContextResult as D, type CodexAccountStatus as E, type CodexAccountUsageSnapshot as F, type CodexAllocatorUpdateResult as G, type CodexAuthDeps as H, type CodexCapacityAvailabilityDecision as I, type CodexCapacityMutationResult as J, type CodexCapacityResetKind as K, type CodexCapacitySelectionContext as L, type CodexCapacityWait as M, type CodexCapacityWaitStatus as N, type CodexCapacityWakeTarget as O, type CodexCredentialForRun as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialLeaseCandidateFilter as Q, type CodexCredentialLeaseCandidateFilterResult as R, type CodexCredentialLeasePolicyScopeResolver as S, type CodexCredentialLeaseQuarantine as T, type CodexCredentialLeaseResult as U, type CodexCredentialLeaseSelection as V, type CodexCredentialLeaseSelectionContext as W, type CodexCredentialStatus as X, type CodexCredentialTokens as Y, type CodexLeaseAccountStatus as Z, type CodexPinSource as _, type AcceptSessionApprovalDecisionResult as a, type HostMcpCredentialResolverContext as a$, type CodexResetRedemptionAttempt as a0, type CodexResetRedemptionOutcome as a1, type CodexResetRedemptionRecovery as a2, type CodexResetRedemptionSendNotReadyReason as a3, type CodexResetRedemptionStatus as a4, type CodexRotationSettings as a5, type CodexRotationStrategy as a6, type CodexTokenDeadlineClock as a7, type CodexTokenDeadlineOptions as a8, type CompleteSlackBotPostOperationResult as a9, type EditQueueCommandResult as aA, type EffectiveControlBlocker as aB, type EffectiveControlResumeOption as aC, type EffectiveControlState as aD, type EffectiveSessionControl as aE, type EnableCapabilityInstallationInput as aF, type EnabledMcpCapabilityServer as aG, type EnqueueSessionTurnInput as aH, type EnrollmentExposure as aI, type EnrollmentOs as aJ, type EnrollmentRecord as aK, type EnrollmentStatus as aL, type ExpiredDrainingSandboxLeaseCount as aM, type ExpiredFileUploadCleanupClaim as aN, FORCE_RLS_TABLES as aO, type FenceCodexResetRedemptionSendResult as aP, type FileUploadCleanupClaimResult as aQ, type ForceDrainResult as aR, type FrozenTurnInitiator as aS, type GitHubInstallation as aT, type GitHubInstallationAccess as aU, GitHubInstallationAuthorityCommitError as aV, type GoalContinuationDecision as aW, type HostExportConsumerStatus as aX, type HostExportKind as aY, HostExportPayloadError as aZ, HostMcpCredentialBindingError as a_, type ComposerDraftRow as aa, type ConnectionBrokerDeps as ab, type ConnectionCredentialForBroker as ac, type ConnectionMetadataWithVerification as ad, ConnectionRefreshHttpError as ae, type ConsumeOAuthStateNonceInput as af, type CorrectWorkspaceMemoryInput as ag, type CorrectWorkspaceMemoryResult as ah, type CreateCapabilityCatalogItemInput as ai, type CreateConnectionInput as aj, type CreateDbOptions as ak, type CreateImportBatchInput as al, type CreateKnowledgeMemoryInput as am, type CreatePackInstallationInput as an, type CreateScheduledTaskInput as ao, type CreateSessionGoalInput as ap, type CreateSessionMcpServerInput as aq, type CreateSocialConnectionInput as ar, type CreateSocialPostInput as as, type CreditBalanceByAccount as at, type Database as au, type DatabaseFailureCode as av, type DbClient as aw, type DbSession as ax, type DeviceEnrollmentRequestRecord as ay, type DeviceEnrollmentStatus as az, type AcceptSessionHumanInputResponseResult as b, type ReconcileColdLostLeaseInstanceBlockersResult as b$, HostMcpCredentialScopeError as b0, HumanInputResponseValidationError as b1, type IdempotentPersistenceTransactionOptions as b2, type ImportBatch as b3, type InitializeSessionStartInput as b4, type InitializeSessionStartResult as b5, type InstallOrReadTurnExecutionPolicyForAttemptResult as b6, type IntegrationOAuthClientForUse as b7, type LeaseHolderKind as b8, type LeaseSnapshot as b9, type MarkWarmLeaseInstanceLostResult as bA, type MaterializeGoalContinuationResult as bB, type MemoryBlockRecord as bC, type MemoryEmbedder as bD, type MemorySanitizeResult as bE, type MeterableWarmLease as bF, NON_RLS_RUNTIME_TABLES as bG, type NestedAgentDepthDeploymentPolicy as bH, type NestedAgentDepthPolicySource as bI, NewSessionDraftAccessError as bJ, NewSessionDraftConflictError as bK, type NewSessionDraftRow as bL, PROTECTED_NO_DIRECT_DML_TABLES as bM, type PendingSessionToolCallInput as bN, type PersistenceFailureDetails as bO, type PersistenceRetryOutcome as bP, type QueueCommandConflictCode as bQ, QueueCommandConflictError as bR, type QueueCommandResult as bS, type QueuedTurnRow as bT, RUNTIME_DML_TABLES as bU, RUNTIME_FULL_DML_TABLES as bV, RUNTIME_READ_INSERT_TABLES as bW, RUNTIME_READ_ONLY_TABLES as bX, RUNTIME_TABLE_PRIVILEGES as bY, type ReapDrainable as bZ, type ReconcileCodexCapacityWaitResult as b_, type ListKnowledgeMemoryOptions as ba, type ListSessionEventPageOptions as bb, type ListSessionEventsOptions as bc, type ListSessionsForSubjectOptions as bd, type ListSessionsOptions as be, type LiveModalSandboxLeaseAttribution as bf, type LostProviderWorkspaceSettlement as bg, MACHINE_METRICS_SERIES_INTERVAL_MS as bh, MAX_INTERNAL_UPDATE_BATCH_BYTES as bi, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as bj, MAX_INTERNAL_UPDATE_BYTES as bk, MEMORY_ACTIVE_RECORD_CAP as bl, MEMORY_BLOCK_KIND_ORDER as bm, MEMORY_BLOCK_RECORD_LIMIT as bn, MEMORY_CORRECT_TOOL_DESCRIPTION as bo, MEMORY_KIND_SECTION_TITLES as bp, MEMORY_NEAR_DUP_COSINE_THRESHOLD as bq, MEMORY_NEAR_DUP_NEIGHBORS as br, MEMORY_SAVE_TOOL_DESCRIPTION as bs, MEMORY_SEARCH_DEFAULT_LIMIT as bt, MEMORY_SEARCH_MAX_LIMIT as bu, MEMORY_SEARCH_TOOL_DESCRIPTION as bv, MEMORY_TEXT_MAX_CHARS as bw, MEMORY_VISIBLE_RECORD_CAP as bx, type MachineMetricsRow as by, type MachineMetricsSample as bz, type AccrueWarmSecondsResult as c, SanitizedDatabasePersistenceCause as c$, type RecoverSessionDispatchInput as c0, type RecoverSessionDispatchResult as c1, type RefreshTransportOptions as c2, type RegisterWorkspacePackInput as c3, type RegistryCapabilityCatalogItemInput as c4, type RegistryCatalogSurfaceKey as c5, type ReplaceIntegrationOAuthClientInput as c6, type RequestSessionTurnRecoveryInput as c7, type RequestSessionTurnRecoveryResult as c8, type ResolveConnectionCredentialInput as c9, SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT as cA, SESSION_LIST_SNAPSHOT_MAX_IDS as cB, type SafeDatabaseErrorFacts as cC, type SandboxArchiveAvailability as cD, type SandboxArchiveRevision as cE, SandboxImageConflictError as cF, type SandboxKind as cG, type SandboxLeaseLiveness as cH, SandboxLeaseRecoveryBlockedError as cI, SandboxLeaseSupersededError as cJ, type SandboxOpenPtySessionRow as cK, type SandboxProviderExistence as cL, type SandboxPtyProcessIdentity as cM, type SandboxPtySessionRow as cN, type SandboxRecord as cO, type SandboxRecoveryState as cP, type SandboxRestoreStatus as cQ, type SandboxRetainedProcess as cR, type SandboxRetainedProcessIdentity as cS, SandboxRetainedProcessPromotionFencedError as cT, type SandboxRetainedProcessReconciliationClaim as cU, type SandboxRetainedProcessState as cV, SandboxRigConflictError as cW, type SandboxWorkspaceMutationAdmission as cX, SandboxWorkspaceMutationFencedError as cY, type SandboxWorkspaceMutationProviderOutcome as cZ, type SandboxWorkspaceReadiness as c_, type ResolveConnectionCredentialResult as ca, type RetainedFileArtifact as cb, type RetainedProcessProviderProof as cc, RigActiveVersionChangedError as cd, RigChangeAlreadyVerifyingError as ce, type RigChangeMonitoringSummary as cf, RigChangeTransitionError as cg, type RigVersionContentInput as ch, type RigVersionMonitoringSummary as ci, type RlsContext as cj, type RlsStrategy as ck, type RuntimeDatabaseIdentity as cl, type RuntimeDatabasePosture as cm, RuntimeDatabasePostureError as cn, type RuntimeDatabasePostureOptions as co, type RuntimeRoutinePosture as cp, type RuntimeSchemaPosture as cq, type RuntimeTableDmlPrivilege as cr, type RuntimeTablePosture as cs, type RuntimeTablePrivilegeContract as ct, SESSION_ANCESTRY_LIMIT as cu, SESSION_DISCOVERY_CONTROL_TARGET_LIMIT as cv, SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS as cw, SESSION_DISCOVERY_GOAL_MAX_CHARS as cx, SESSION_DISCOVERY_MESSAGE_MAX_CHARS as cy, SESSION_EVENT_DB_PAGE_MAX_BYTES as cz, type AcquireLeaseInput as d, type StreamAcknowledgment as d$, type SaveWorkspaceMemoryInput as d0, type SaveWorkspaceMemoryResult as d1, type SessionAttemptInterruptionSettlement as d2, type SessionCodexState as d3, type SessionCommandActor as d4, SessionCommandIdempotencyError as d5, type SessionCommandReceiptRow as d6, SessionContextBusyError as d7, SessionControlConflictError as d8, SessionControlInvariantError as d9, type SessionRecordingCodec as dA, type SessionRecordingMode as dB, type SessionRecordingRow as dC, type SessionRecordingState as dD, type SessionSpawnDenial as dE, type SessionSpawnDenialCode as dF, SessionSpawnDeniedDbError as dG, type SessionSystemUpdateOutboxDelivery as dH, SessionToolPolicyVersionConflictError as dI, type SessionTurnAttemptOutcome as dJ, type SessionTurnForExecution as dK, type SessionTurnRecordingSettlement as dL, type SessionWorkPeek as dM, type SessionWorkTrigger as dN, type SessionWorkflowWake as dO, type SessionWorkflowWakeDeliveryResult as dP, type SetSessionCodexPinOptions as dQ, type SetSessionGoalStatusEvent as dR, type SettleCodexCredentialFailoverResult as dS, type SettleCodexCredentialLeaseLossResult as dT, type SlackBotInstallCallbackFailureReason as dU, type SlackBotInstallCallbackFailureStage as dV, SlackBotLifecycleSuccessAuditError as dW, type SlackBotPostOperation as dX, type SteerQueueCommandResult as dY, type StoreIntegrationOAuthClientInput as dZ, type StoredIntegrationOAuthClient as d_, type SessionControlMutationResult as da, type SessionCreateDeniedResult as db, type SessionCreateInput as dc, type SessionCreateResult as dd, type SessionCreateSuccessResult as de, type SessionDepthPolicy as df, type SessionDiscoveryControl as dg, type SessionDiscoveryCursor as dh, type SessionDiscoveryOrderBy as di, type SessionDiscoverySummary as dj, type SessionEventPage as dk, SessionEventPersistenceError as dl, type SessionEventWriteLockInput as dm, type SessionEventWriteLocks as dn, type SessionGoalContinuationProjection as dp, SessionIdConflictError as dq, type SessionLineage as dr, SessionListAccessError as ds, type SessionListCursor as dt, SessionListCursorError as du, SessionListCursorExpiredError as dv, SessionListSnapshotLimitError as dw, type SessionMcpServerForRun as dx, SessionPinAccessError as dy, SessionPinVersionConflictError as dz, type AcquireLeaseResult as e, approveDeviceEnrollmentRequest as e$, type SubmitHumanPromptResult as e0, type ToolspaceCallReservation as e1, type ToolspaceTurnAttemptClaims as e2, type TurnAttemptFenceRejectReason as e3, type UpdateConnectionInput as e4, type UpdateImportBatchCountsInput as e5, type UpdateKnowledgeMemoryInput as e6, type UpdateScheduledTaskInput as e7, type UpdateSessionMcpApprovalPolicyResult as e8, type UpdateSessionMcpServerCredentialsInput as e9, acceptSessionApprovalDecision as eA, acceptSessionHumanInputResponse as eB, accrueWarmSeconds as eC, acknowledgeHostExportBatch as eD, acquireCodexCredentialLease as eE, acquireLease as eF, activateRigVersion as eG, activateWorkspaceInstructionPolicyRevision as eH, addSessionSystemUpdate as eI, addSessionSystemUpdateWithSourceMutation as eJ, admitToolspaceTurnAttempt as eK, adoptCodexResetRedemptionAttempt as eL, advanceWorkspaceGeneration as eM, advanceWorkspaceGenerationForDirectRequest as eN, advanceWorkspaceGenerationForRetainedProcess as eO, allAccountPermissions as eP, allWorkspacePermissions as eQ, appendSessionEventToSandboxGroup as eR, appendSessionEvents as eS, appendSessionEventsAndUpdateSession as eT, appendSessionEventsForTurnAttempt as eU, appendSessionEventsWithLockedSessionUpdate as eV, appendSessionHistoryItems as eW, applyContextCompaction as eX, applyCreditDebitUpToBalance as eY, applyCreditLedgerEntry as eZ, applySessionTurnSettlement as e_, type UpdateSessionMcpServerCredentialsResult as ea, type UpsertCodexSubscriptionCredentialResult as eb, type UserLookup as ec, type VariableSetForRun as ed, WORKSPACE_MEMORY_BLOCK_EMPTY as ee, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as ef, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as eg, type WorkspaceCaptureCommitResult as eh, type WorkspaceCaptureGcPlan as ei, type WorkspaceCaptureGcRow as ej, type WorkspaceCaptureRow as ek, type WorkspaceControlLockMode as el, type WorkspaceControlMutationResult as em, type WorkspaceControlRow as en, type WorkspaceEnvironmentForRun as eo, WorkspaceInstructionPolicyConflictError as ep, WorkspaceInstructionPolicyInvalidOperationError as eq, WorkspaceInstructionPolicyLegacyUnavailableError as er, WorkspaceInstructionPolicyNotFoundError as es, type WorkspaceMemoryOrigin as et, type WorkspaceMemorySearchInput as eu, type WorkspaceMemorySearchMode as ev, type WorkspaceMemorySearchResult as ew, type WorkspaceModelPolicy as ex, abandonCodexResetRedemptionBeforeProvider as ey, abandonRecordingForTurnAttempt as ez, type ActiveRetainedProcessOwnerCount as f, countWorkspacesForAccount as f$, areGitHubRepositoriesAllowedForWorkspace as f0, armCodexCapacityWait as f1, assertAgentCommandAuthorityInTransaction as f2, assertRuntimeDatabasePosture as f3, autoResumeSessionBranchInTransaction as f4, beginRigChangeVerificationAttempt as f5, beginSandboxRematerialization as f6, bindAuthorizedGitHubInstallationRepositories as f7, bindGitHubInstallationRepositories as f8, bootstrapWorkspace as f9, completeFileUpload as fA, completeFileUploadCleanup as fB, completeSlackBotPostOperation as fC, computeWorkspaceCaptureGcPlan as fD, confirmDrainCold as fE, consumeDeviceEnrollmentRequest as fF, consumeIntegrationOAuthStateNonce as fG, consumeNewSessionDraftInTransaction as fH, correctWorkspaceMemory as fI, countActiveApiKeysForWorkspace as fJ, countActiveRetainedProcessesByOwnerState as fK, countActiveSessionHistoryItems as fL, countActiveSessionsForWorkspace as fM, countActiveSessionsUsingEnvironment as fN, countActiveSessionsUsingVariableSet as fO, countConsecutiveReactiveRotations as fP, countExpiredDrainingSandboxLeases as fQ, countQueuedTurns as fR, countRigs as fS, countSandboxLeasesByLiveness as fT, countScheduledTasksForWorkspace as fU, countScheduledTasksUsingEnvironment as fV, countScheduledTasksUsingVariableSet as fW, countSessionHistoryItems as fX, countSessionsUsingRig as fY, countVariableSets as fZ, countWorkspaceEnvironments as f_, buildChildCompletionDigest as fa, buildCodexTokenResolver as fb, buildConnectionTokenResolver as fc, buildHostConnectionTokenResolver as fd, canonicalSessionCommandHash as fe, claimCodexResetRedemption as ff, claimExpiredFileUploadCleanup as fg, claimFileUploadCleanup as fh, claimHostExportBatch as fi, claimPendingSessionSystemUpdateOutbox as fj, claimPendingSessionWorkflowWakes as fk, claimSessionWorkForAttempt as fl, claimSlackBotPostOperation as fm, claimTerminalRetainedProcesses as fn, clearDurablePendingSessionToolCalls as fo, clearEnrollmentWentOffline as fp, clearPendingSessionToolspaceCall as fq, clearSessionContext as fr, clearSessionGoal as fs, clearedContextMarkerItem as ft, closePtySession as fu, closeSessionTurnAttemptInTransaction as fv, codexCapacityRefreshBackoffMs as fw, commitWarmingToWarm as fx, completeCodexResetRedemption as fy, completeExpiredFileUploadCleanup as fz, type ActiveSandboxPointer as g, ensureManagedAccessForUser as g$, createApiKey as g0, createConnection as g1, createConnectionWithSlackBotSuccessAudit as g2, createDb as g3, createDeviceEnrollmentRequest as g4, createEnrollment as g5, createFileUpload as g6, createImportBatch as g7, createKnowledgeMemory as g8, createRig as g9, deleteRigIfNoActiveSessions as gA, deleteScheduledTask as gB, deleteSessionQueueItemInTransaction as gC, deleteVariableSet as gD, deleteVariableSetVariable as gE, deleteWorkspace as gF, deleteWorkspaceCaptureRows as gG, deleteWorkspaceEnvironment as gH, deleteWorkspaceEnvironmentVariable as gI, deleteWorkspacePack as gJ, denyDeviceEnrollmentRequest as gK, diffWorkspaceInstructionPolicyContent as gL, diffWorkspaceInstructionPolicyRevisions as gM, disableCapabilityInstallation as gN, disableHostExportConsumer as gO, disconnectAllCodexAccounts as gP, disconnectCodexAccount as gQ, editQueuedTurnInTransaction as gR, enableCapabilityInstallation as gS, enablePackInstallation as gT, encodeSessionListCursor as gU, encryptEnvironmentValue as gV, enqueueSessionTurn as gW, enqueueSessionWorkflowWake as gX, enqueueSessionWorkflowWakeIfRunnable as gY, enqueueSessionWorkflowWakeInTransaction as gZ, ensureCodexRotationSettings as g_, createRigChange as ga, createRigVersion as gb, createRigVersionForChangePromotion as gc, createSandbox as gd, createScheduledTask as ge, createScheduledTaskRun as gf, createSession as gg, createSessionGoal as gh, createSessionMcpServers as gi, createSessionWithIdempotencyKey as gj, createSessionWithIdempotencyKeyResult as gk, createSocialConnection as gl, createSocialPost as gm, createVariableSet as gn, createWorkspace as go, createWorkspaceEnvironment as gp, createWorkspaceInstructionPolicyDraft as gq, databaseFailureCode as gr, deadLetterHostExportHead as gs, decodeSessionListCursor as gt, decryptEnvironmentValue as gu, decryptedCapabilityHeaders as gv, deferRetainedProcessReconciliation as gw, deleteGitHubInstallationBinding as gx, deleteRecording as gy, deleteRig as gz, type AddSessionSystemUpdateInput as h, getSessionCodexState as h$, estimateMemoryTokens as h0, evaluateGoalContinuation as h1, evaluateRuntimeDatabasePosture as h2, evaluateSessionControl as h3, evaluateSessionControls as h4, evaluateSessionDiscoveryControls as h5, expireSessionHumanInputRequest as h6, failHostExportBatch as h7, failSandboxRematerialization as h8, failWarmingToCold as h9, getKnowledgeMemory as hA, getLatestRunState as hB, getLatestStartedSessionTurn as hC, getManagedAccount as hD, getManagedUserByEmail as hE, getMaterializedSandboxFileResources as hF, getNestedAgentDepthDeploymentPolicy as hG, getNewSessionDraftInTransaction as hH, getOpenPtySession as hI, getOrCreateSessionSystemUpdateOutbox as hJ, getPackInstallation as hK, getPendingDeviceEnrollmentRequestByUserCode as hL, getPendingDeviceEnrollmentRequestByUserCodeGlobal as hM, getRecording as hN, getRetainedFileArtifact as hO, getRetainedProcess as hP, getRig as hQ, getRigByName as hR, getRigChange as hS, getRigName as hT, getRigVersion as hU, getRigVersionById as hV, getSandbox as hW, getSandboxSessionEnvelope as hX, getScheduledTask as hY, getSession as hZ, getSessionByCreateIdempotencyKey as h_, fenceCodexResetRedemptionSend as ha, fetchCodexRateLimitResetCreditsForAccount as hb, fetchCodexUsageForAccount as hc, finalizeEnrollmentByToken as hd, findActiveApiKeyByHash as he, forceDrainOverLimitViewerOnlyBoxes as hf, frozenInitiatorForCommandActor as hg, getActiveSessionHistoryItems as hh, getActiveSessionTurnForExecution as hi, getAnySessionInGroup as hj, getBillingBalance as hk, getBillingCustomer as hl, getCapabilityCatalogItem as hm, getCapabilityInstallation as hn, getCodexCapacityWaitForSession as ho, getCodexCredentialStatus as hp, getCodexResetRedemptionAttempt as hq, getCodexRotationSettings as hr, getComposerDraftInTransaction as hs, getConnectionMetadata as ht, getDeviceEnrollmentRequestByDeviceCode as hu, getEnrollment as hv, getFile as hw, getFileUpload as hx, getHostExportConsumerStatus as hy, getHumanInputResumeForEvent as hz, type AddSessionSystemUpdateResult as i, listCodexAccountStatuses as i$, getSessionEvent as i0, getSessionEventByClientEventId as i1, getSessionForSubject as i2, getSessionGoal as i3, getSessionGoalWithContinuation as i4, getSessionHistoryItems as i5, getSessionHumanInputRequest as i6, getSessionLineage as i7, getSessionQueueSnapshot as i8, getSessionRootId as i9, hasCreditLedgerEntry as iA, hashMemoryText as iB, heartbeatCodexCredentialLease as iC, heartbeatCodexCredentialLeaseUntil as iD, heartbeatLeaseHolder as iE, importLegacyWorkspaceInstructionPolicyDraft as iF, ingestMachineMetricsSample as iG, initializeSessionStartAtomically as iH, insertFailedWorkspaceCapture as iI, insertMachineMetricsSeries as iJ, insertPtySession as iK, insertRecording as iL, insertWorkspaceCapture as iM, inspectRuntimeDatabasePosture as iN, installOrReadTurnExecutionPolicyForAttempt as iO, interruptedToolCallResult as iP, isCodexBilledTurn as iQ, isDatabasePersistenceFailure as iR, isMemoryTextTooLong as iS, isRetryablePersistenceSqlState as iT, isSessionCompactionRequested as iU, isSessionEventPersistenceError as iV, isStripeWebhookProcessed as iW, latestWorkspaceCapture as iX, listApiKeys as iY, listCapabilityCatalogItems as iZ, listCapabilityInstallations as i_, getSessionSpawnDenial as ia, getSessionSpawnDenialByIdempotencyKey as ib, getSessionSystemUpdateOutboxByDedupeKey as ic, getSessionTurn as id, getSessionTurnForAttempt as ie, getSlackBotPostOperation as ig, getSocialConnection as ih, getStoredCapabilityHeaderCiphertext as ii, getStreamAcknowledgment as ij, getVariableSet as ik, getVariableSetByName as il, getVariableSetValuesForRun as im, getWorkspace as io, getWorkspaceControlEvent as ip, getWorkspaceDefaultRigId as iq, getWorkspaceEnvironment as ir, getWorkspaceEnvironmentByName as is, getWorkspaceEnvironmentValuesForRun as it, getWorkspaceGrant as iu, getWorkspaceInstructionPolicyRevision as iv, getWorkspaceModelPolicy as iw, getWorkspacePack as ix, grantWorkspaceAccess as iy, hasAuditableGitHubInstallationAuthority as iz, type AdoptCodexResetRedemptionResult as j, markSessionAttemptQuiesced as j$, listCodexResetRedemptionRecoveries as j0, listConnectionsMetadata as j1, listCreditBalancesByAccount as j2, listDistinctRigVersionIdsInGroup as j3, listDistinctVariableSetIdsInGroup as j4, listEnabledMcpCapabilityServers as j5, listEnrollments as j6, listGitHubInstallationAccessForWorkspace as j7, listGitHubInstallationIdsForWorkspace as j8, listGitHubInstallationsForWorkspace as j9, listSessionSpawnDenials as jA, listSessionSystemUpdatesForTurn as jB, listSessionTurns as jC, listSessions as jD, listSessionsForSubject as jE, listSocialConnections as jF, listSocialPosts as jG, listUsageEvents as jH, listVariableSets as jI, listWorkspaceControlEvents as jJ, listWorkspaceEnvironments as jK, listWorkspaceInstructionPolicyRevisions as jL, listWorkspaceMembers as jM, listWorkspacePacks as jN, listWorkspacesForSubject as jO, loadCodexCredentialForRun as jP, loadConnectionCredentialForBroker as jQ, loadIntegrationOAuthClient as jR, loadVariableSetForRun as jS, loadWorkspaceEnvironmentForRun as jT, lockSessionEventWriteRows as jU, lockWorkspaceInferenceControl as jV, markFileUploadFailed as jW, markSandboxFileResourcesMaterialized as jX, markSandboxProviderReady as jY, markSandboxRestoreVerifying as jZ, markScheduledTaskRunFailedIfQueued as j_, listKnowledgeMemories as ja, listLiveModalSandboxLeaseAttributions as jb, listMeterableWarmLeases as jc, listOpenPtySessions as jd, listOutstandingSessionSystemUpdates as je, listPackInstallations as jf, listPendingCodexCapacityWakeTargets as jg, listPendingSessionTurns as jh, listRecordings as ji, listRegistryCatalogSurfaceKeys as jj, listRigChangeMonitoringSummaries as jk, listRigChanges as jl, listRigVersionMonitoringSummaries as jm, listRigVersions as jn, listRigs as jo, listSandboxes as jp, listScheduledTaskRuns as jq, listScheduledTasks as jr, listSessionDiscoverySummaries as js, listSessionEventPage as jt, listSessionEvents as ju, listSessionHumanInputRequests as jv, listSessionIdsInGroup as jw, listSessionMcpServerMetadata as jx, listSessionMcpServersForChildInheritance as jy, listSessionMcpServersForRun as jz, AgentCommandAuthorityError as k, registerSessionTurnAttemptClaim as k$, markSessionSystemUpdateOutboxDeliveredInTransaction as k0, markSessionSystemUpdateOutboxFailed as k1, markSessionWorkflowWakeDelivered as k2, markSessionWorkflowWakeFailed as k3, markStaleRegistryCatalogItems as k4, markStripeWebhookProcessed as k5, markWarmLeaseInstanceLost as k6, materializeGoalContinuation as k7, mcpServerIdForCapability as k8, moveQueuedTurnInTransaction as k9, reapStaleLeaseHoldersGlobal as kA, reconcileCodexCapacityWait as kB, reconcileColdLostLeaseInstanceBlockers as kC, recordAuditEvent as kD, recordCodexAccountConnectors as kE, recordCodexAccountUsage as kF, recordCodexAccountUsageWithWakeTargets as kG, recordCodexTokenRefresh as kH, recordConnectionTokenRefresh as kI, recordConnectionUsed as kJ, recordLeaseDataPlaneUrl as kK, recordLeaseTerminalDataPlaneUrl as kL, recordPendingSessionToolCallResult as kM, recordRetainedProcessReconciliationProof as kN, recordSessionActiveCodexCredential as kO, recordSkippedContextCompaction as kP, recordSlackBotInstallCallbackFailure as kQ, recordStreamAcknowledgment as kR, recordStripeWebhookEvent as kS, recordUsageEvent as kT, recordWarmingSandboxCreated as kU, recoverSessionDispatch as kV, refreshOAuthConnectionCredential as kW, registerDbBinding as kX, registerHostExportConsumer as kY, registerInternalUpdateWakeInTransaction as kZ, registerPendingSessionToolCall as k_, mutateSessionControlInTransaction as ka, mutateWorkspaceControlInTransaction as kb, nestedPostgresSqlState as kc, newSessionDraftToolsProvided as kd, nextSessionHistoryPosition as ke, normalizeBearerScheme as kf, normalizeMemoryText as kg, orphanedResultRowIndicesForRepair as kh, peekSessionWork as ki, persistDrainSnapshot as kj, persistWarmSnapshot as kk, planWorkspaceCaptureGc as kl, projectEffectiveControlForRelatedAccess as km, projectSessionForRelatedAccess as kn, pruneHostExportOutbox as ko, publicNewSessionDraftOptions as kp, quarantineCodexCredentialForLease as kq, reArmDrainingLease as kr, readActiveSandbox as ks, readLease as kt, readMachineMetricsLatest as ku, readMachineMetricsLatestForWorkspace as kv, readMachineMetricsSeries as kw, readWorkspaceArchiveCapturePreflight as kx, reapExpiredSessionListSnapshots as ky, reapStaleLeaseHolders as kz, type AgentInternalUpdateCommandResult as l, setEnrollmentWentOffline as l$, registerSessionWorkflowWakeInTransaction as l0, registerWorkspacePack as l1, releaseCodexCredentialLease as l2, releaseCodexResetRedemptionClaim as l3, releaseLeaseHolder as l4, releaseSlackBotPostOperationClaim as l5, removeWorkspaceMember as l6, renameCodexAccount as l7, renderWorkspaceMemoryBlock as l8, replaceIntegrationOAuthClient as l9, runtimeDatabaseReadyCheck as lA, safeDatabaseErrorFacts as lB, sanitizeEventPayload as lC, sanitizeEventString as lD, sanitizeMemoryText as lE, sanitizeModelPayload as lF, saveComposerDraftInTransaction as lG, saveNewSessionDraftInTransaction as lH, saveRunState as lI, saveWorkspaceMemory as lJ, searchWorkspaceMemories as lK, seedNewSessionDraftInTransaction as lL, sendAgentMessageInTransaction as lM, serializeEffectiveSessionControl as lN, sessionAuthorizationScopeFilter as lO, sessionSubject as lP, sessionTreeStatsForSessions as lQ, sessionsWithActiveOpOnEnrollment as lR, setActiveCodexCredential as lS, setActiveSandbox as lT, setCodexCredentialExhausted as lU, setCodexCredentialExhaustedWithWakeTargets as lV, setCodexCredentialStatus as lW, setCodexCredentialStatusById as lX, setConnectionStatus as lY, setEnrollmentDisplayState as lZ, setEnrollmentOpStreamState as l_, requestSessionCompaction as la, requestSessionTurnRecovery as lb, requireFile as lc, requireScheduledTask as ld, requireSession as le, requireSocialConnection as lf, requireWorkspace as lg, reserveSessionCommandReceipt as lh, reserveToolspaceCallForAttempt as li, resolveWorkspaceMemoryBlock as lj, resumeHostExportConsumer as lk, retainWorkspaceMutationProcess as ll, retainedProcessReconciliationProof as lm, retainedProcessSettlementIdentity as ln, retireHostExportConsumer as lo, revokeApiKey as lp, revokeConnection as lq, revokeConnectionWithSlackBotSuccessAudit as lr, revokeEnrollment as ls, revokeViewer as lt, rewindHostExportConsumer as lu, rlsContextForWorkspace as lv, rlsStrategyFor as lw, rollbackWorkspaceInstructionPolicyRevision as lx, rotateWorkspaceArchives as ly, runIdempotentPersistenceTransaction as lz, type AppendEventInput as m, verifyRetainedProcessMutationSettlement as m$, setInitialActiveCodexCredential as m0, setRlsContext as m1, setSessionCodexPin as m2, setSessionGoalLastContinuationTurn as m3, setSessionGoalStatus as m4, setSessionGoalStatusWithEvent as m5, setSessionLastInputTokensForTurnAttempt as m6, setSessionPin as m7, setSubjectRlsContext as m8, setTemporalWorkflowId as m9, updateRecording as mA, updateRig as mB, updateRigChangeStatus as mC, updateScheduledTask as mD, updateScheduledTaskRun as mE, updateSessionCommandReceiptResult as mF, updateSessionGoal as mG, updateSessionGoalWithEvent as mH, updateSessionMcpApprovalPolicy as mI, updateSessionMcpServerCredentials as mJ, updateSessionTitle as mK, updateVariableSet as mL, updateWorkspace as mM, updateWorkspaceEnvironment as mN, updateWorkspaceSettings as mO, upsertBillingCustomer as mP, upsertCapabilityCatalogItem as mQ, upsertCodexSubscriptionCredential as mR, upsertGitHubInstallation as mS, upsertMachineMetricsLatest as mT, upsertRegistryCapabilityCatalogItem as mU, upsertSandboxSessionEnvelope as mV, upsertSessionGoal as mW, upsertSessionGoalWithEvent as mX, upsertWorkspaceModelPolicy as mY, validateHumanInputResponse as mZ, verifyDirectWorkspaceMutationSettlement as m_, setVariableSetVariable as ma, setWorkspaceDefaultRig as mb, setWorkspaceEnvironmentVariable as mc, settleCodexCredentialFailover as md, settleCodexCredentialLeaseLoss as me, settleRetainedProcess as mf, settleScheduledTaskRunInTransaction as mg, settleSessionAttemptInterruptions as mh, settleSessionIdleWithParentOutbox as mi, shortMemoryId as mj, steerAgentSessionInTransaction as mk, steerQueuedTurnInTransaction as ml, storeIntegrationOAuthClient as mm, submitHumanPromptInTransaction as mn, sumUsageQuantity as mo, supersedeSessionCurrentDirectionInTransaction as mp, touchEnrollmentLastSeen as mq, touchLeaseHolder as mr, updateCodexAllocatorEligibility as ms, updateCodexRotationSettings as mt, updateConnection as mu, updateConnectionWithSlackBotSuccessAudit as mv, updateImportBatchCounts as mw, updateKnowledgeMemory as mx, updatePackInstallationStatus as my, updatePtySessionActivity as mz, type ApplyContextCompactionResult as n, verifyWorkspaceMutationSettlement as n0, withAccountRls as n1, withCodexCapacityMutation as n2, withCodexCredentialRefreshLock as n3, withCodexTokenDeadline as n4, withRlsContext as n5, withWorkspaceRls as n6, withWorkspaceSubjectRls as n7, withWorkspaceUsageLock as n8, workspaceCaptureAtRevision as n9, workspaceCodexSubscriptionActive as na, type ApplySessionTurnSettlementInput as o, type ApplySessionTurnSettlementResult as p, provisionRoles, type ArmCodexCapacityWaitResult as q, type BootstrapWorkspaceInput as r, CODEX_CAPACITY_REFRESH_MIN_MS as s, CODEX_CREDENTIAL_LEASE_TTL_MS as t, CODEX_RESET_REDEMPTION_OUTCOMES as u, CODEX_ROTATION_STRATEGIES as v, type ClaimCodexResetRedemptionResult as w, type ClaimSessionWorkForAttemptInput as x, type ClaimSessionWorkForAttemptResult as y, type ClaimSlackBotPostOperationResult as z };

package/dist/{schema-D-hyrsFt.d.ts → schema-SbaSoRdr.d.ts}

@@ -4637,6 +4637,25 @@ declare const sessions: drizzle_orm_pg_core.PgTableWithColumns<{
         }, {}, {
             $type: unknown[];
         }>;
+        skills: drizzle_orm_pg_core.PgColumn<{
+            name: "skills";
+            tableName: "sessions";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown[];
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: unknown[];
+        }>;
         tools: drizzle_orm_pg_core.PgColumn<{
             name: "tools";
             tableName: "sessions";

package/dist/schema.d.ts

@@ -1,3 +1,3 @@
 import 'drizzle-orm';
 import 'drizzle-orm/pg-core';
-export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as slackBotPostOperations, at as socialConnections, au as socialPosts, av as stripeWebhookEvents, aw as usageEvents, ax as workspaceCaptures, ay as workspaceControlEvents, az as workspaceInferenceControls, aA as workspaceInstructionPolicyActivationEvents, aB as workspaceInstructionPolicyHeads, aC as workspaceInstructionPolicyRevisions, aD as workspaceMemberships, aE as workspaceModelPolicies, aF as workspacePacks, aG as workspaceSessionActivityRevisions, aH as workspaceVariableSetVariables, aI as workspaceVariableSets, w as workspaces } from './schema-D-hyrsFt.js';
+export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as slackBotPostOperations, at as socialConnections, au as socialPosts, av as stripeWebhookEvents, aw as usageEvents, ax as workspaceCaptures, ay as workspaceControlEvents, az as workspaceInferenceControls, aA as workspaceInstructionPolicyActivationEvents, aB as workspaceInstructionPolicyHeads, aC as workspaceInstructionPolicyRevisions, aD as workspaceMemberships, aE as workspaceModelPolicies, aF as workspacePacks, aG as workspaceSessionActivityRevisions, aH as workspaceVariableSetVariables, aI as workspaceVariableSets, w as workspaces } from './schema-SbaSoRdr.js';

package/dist/schema.js

@@ -97,7 +97,7 @@ import {
   workspaceVariableSetVariables,
   workspaceVariableSets,
   workspaces
-} from "./chunk-N4WTE6SB.js";
+} from "./chunk-IQOXTFKA.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,

package/drizzle/0132_connection_subject_isolation.sql

@@ -0,0 +1,100 @@
+-- deployment-mode: maintenance
+-- Make personal integration credentials subject-owned at the database boundary.
+-- Every old API/control/turn writer MUST be stopped before activation: old writers
+-- do not establish opengeni.subject_id and can persist workspace-visible OAuth refs.
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '30min';
+
+DO $maintenance_preflight_guard$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app')
+    AND EXISTS (
+      SELECT 1
+      FROM pg_stat_activity
+      WHERE datname = current_database()
+        AND usename = 'opengeni_app'
+        AND pid <> pg_backend_pid()
+    )
+  THEN
+    RAISE EXCEPTION
+      'connection subject-isolation activation requires all opengeni_app sessions to be stopped'
+      USING ERRCODE = '55000';
+  END IF;
+END
+$maintenance_preflight_guard$;
+
+LOCK TABLE connections IN ACCESS EXCLUSIVE MODE;
+LOCK TABLE capability_installations IN ACCESS EXCLUSIVE MODE;
+
+DO $maintenance_guard$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app')
+    AND EXISTS (
+      SELECT 1
+      FROM pg_stat_activity
+      WHERE datname = current_database()
+        AND usename = 'opengeni_app'
+        AND pid <> pg_backend_pid()
+    )
+  THEN
+    RAISE EXCEPTION
+      'connection subject-isolation activation requires all opengeni_app sessions to be stopped'
+      USING ERRCODE = '55000';
+  END IF;
+END
+$maintenance_guard$;
+
+-- Migration 0039 initially stored generic MCP OAuth rows as workspace-shared.
+-- Backfill only Slack's exact official hosted MCP endpoint, and only where the
+-- OAuth callback recorded the authenticating subject. Workspace app installs,
+-- manual Slack credentials, and ambiguous legacy rows are deliberately untouched.
+UPDATE connections
+SET subject_id = created_by_subject_id,
+    updated_at = now()
+WHERE subject_id IS NULL
+  AND kind = 'oauth2'
+  AND provider_domain = 'slack.com'
+  AND metadata ->> 'mcpUrl' = 'https://mcp.slack.com/mcp'
+  AND created_by_subject_id IS NOT NULL
+  AND btrim(created_by_subject_id) <> '';
+
+-- Capability installation metadata is workspace-visible. Preserve only a
+-- generic subject selector; the concrete personal connection UUID remains in
+-- the subject-protected connection row and is selected at turn execution.
+UPDATE capability_installations AS installation
+SET config = jsonb_set(
+  installation.config #- '{connectionRef,connectionId}',
+  '{connectionRef,subjectScope}',
+  '"subject"'::jsonb,
+  true
+)
+WHERE jsonb_typeof(installation.config -> 'connectionRef') = 'object'
+  AND EXISTS (
+    SELECT 1
+    FROM connections AS connection
+    WHERE connection.id::text = installation.config #>> '{connectionRef,connectionId}'
+      AND connection.account_id = installation.account_id
+      AND connection.workspace_id = installation.workspace_id
+      AND connection.subject_id IS NOT NULL
+      AND connection.kind = 'oauth2'
+      AND connection.provider_domain = 'slack.com'
+      AND connection.metadata ->> 'mcpUrl' = 'https://mcp.slack.com/mcp'
+  );
+
+DROP POLICY IF EXISTS workspace_isolation ON connections;
+CREATE POLICY workspace_isolation ON connections
+  USING (
+    opengeni_private.workspace_rls_visible(account_id, workspace_id)
+    AND (
+      subject_id IS NULL
+      OR subject_id = nullif(current_setting('opengeni.subject_id', true), '')
+    )
+  )
+  WITH CHECK (
+    opengeni_private.workspace_rls_visible(account_id, workspace_id)
+    AND (
+      subject_id IS NULL
+      OR subject_id = nullif(current_setting('opengeni.subject_id', true), '')
+    )
+  );

package/drizzle/0133_session_skills.sql

@@ -0,0 +1,3 @@
+-- deployment-mode: rolling
+ALTER TABLE "sessions"
+ADD COLUMN "skills" jsonb DEFAULT '[]'::jsonb NOT NULL;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/db",
-  "version": "0.13.1",
+  "version": "0.13.4",
   "description": "OpenGeni persistence: Drizzle schema, RLS-scoped query layer, the SQL migration runner, and role provisioning.",
   "license": "Apache-2.0",
   "repository": {
@@ -51,8 +51,8 @@
   },
   "dependencies": {
     "@opengeni/codex": "^0.2.7",
-    "@opengeni/config": "^0.7.8",
-    "@opengeni/contracts": "^0.20.1",
+    "@opengeni/config": "^0.7.10",
+    "@opengeni/contracts": "^0.21.0",
     "@opengeni/network": "^0.1.1",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.7"

package/src/connection-token-resolver.ts

@@ -369,11 +369,15 @@ export function buildConnectionTokenResolver(
   const load = async (
     input: CredentialLookupInput,
   ): Promise<ConnectionCredentialForBroker | null> => {
+    const subjectOwned = input.connectionRef.subjectScope === "subject";
+    if (subjectOwned && !input.subjectId) {
+      return null;
+    }
     const request: Parameters<typeof loadConnectionCredentialForBroker>[2] = {
       workspaceId: input.workspaceId,
       providerDomain: input.connectionRef.providerDomain,
-      // I1 deliberately accepts workspace-shared connections only at runtime.
-      allowSubjectOwned: false,
+      allowSubjectOwned: subjectOwned,
+      ...(subjectOwned ? { subjectId: input.subjectId! } : {}),
     };
     if (input.connectionRef.connectionId !== undefined) {
       request.connectionId = input.connectionRef.connectionId;
@@ -381,10 +385,12 @@ export function buildConnectionTokenResolver(
     if (input.connectionRef.kind !== undefined) {
       request.kind = input.connectionRef.kind;
     }
-    if (input.subjectId !== undefined) {
-      request.subjectId = input.subjectId;
+    const credential = await deps.loadCredential(db, settings, request);
+    if (!credential) return null;
+    if (subjectOwned) {
+      return credential.subjectId === input.subjectId ? credential : null;
     }
-    return deps.loadCredential(db, settings, request);
+    return credential.subjectId === null ? credential : null;
   };
 
   const snapshot = async (
@@ -428,7 +434,7 @@ export function buildConnectionTokenResolver(
           : {}),
       };
     }
-    await deps.recordUsed(db, cred.workspaceId, cred.id);
+    await deps.recordUsed(db, cred.workspaceId, cred.id, cred.subjectId);
     return {
       status: "ok",
       headers,
@@ -453,6 +459,7 @@ export function buildConnectionTokenResolver(
       credentialEncrypted: deps.encrypt(key, JSON.stringify(refreshed.credential)),
       expiresAt: refreshed.expiresAt,
       lastRefreshAt: deps.now(),
+      subjectId: cred.subjectId,
     };
     if (refreshed.grantedScopes !== undefined) {
       refreshRecord.grantedScopes = refreshed.grantedScopes;
@@ -462,6 +469,7 @@ export function buildConnectionTokenResolver(
       const current = await load({
         workspaceId: cred.workspaceId,
         connectionRef: { ...ref, connectionId: cred.id },
+        ...(cred.subjectId ? { subjectId: cred.subjectId } : {}),
       });
       if (current) {
         return current;
@@ -470,6 +478,7 @@ export function buildConnectionTokenResolver(
     const winner = await load({
       workspaceId: cred.workspaceId,
       connectionRef: { ...ref, connectionId: cred.id },
+      ...(cred.subjectId ? { subjectId: cred.subjectId } : {}),
     });
     if (winner?.status === "active") {
       return winner;
@@ -481,7 +490,7 @@ export function buildConnectionTokenResolver(
     cred: ConnectionCredentialForBroker,
     ref: McpServerConnectionRef,
   ): Promise<ConnectionCredentialForBroker> => {
-    const key = `${cred.id}:${cred.version}`;
+    const key = `${cred.subjectId ?? "workspace"}:${cred.id}:${cred.version}`;
     const existing = inflight.get(key);
     if (existing) {
       return existing;
@@ -538,6 +547,7 @@ export function buildConnectionTokenResolver(
               {
                 id: cred.id,
                 version: cred.version,
+                subjectId: cred.subjectId,
               },
             )
             .catch(() => undefined);