@opengeni/db 0.13.1 → 0.14.0

package/dist/index.d.ts

@@ -2,9 +2,9 @@ import '@opengeni/contracts';
 import '@opengeni/config';
 export { isCodexBilledModel } from '@opengeni/codex';
 export { sql as dbSql } from 'drizzle-orm';
-export { A as AGENT_VISIBLE_MEMORY_STATUSES, a as AcceptSessionApprovalDecisionResult, b as AcceptSessionHumanInputResponseResult, c as AccrueWarmSecondsResult, d as AcquireLeaseInput, e as AcquireLeaseResult, f as ActiveRetainedProcessOwnerCount, g as ActiveSandboxPointer, h as AddSessionSystemUpdateInput, i as AddSessionSystemUpdateResult, j as AdoptCodexResetRedemptionResult, k as AgentCommandAuthorityError, l as AgentInternalUpdateCommandResult, m as AppendEventInput, n as ApplyContextCompactionResult, o as ApplySessionTurnSettlementInput, p as ApplySessionTurnSettlementResult, q as ArmCodexCapacityWaitResult, B as BeginSandboxRematerializationResult, r as BootstrapWorkspaceInput, C as CODEX_CAPACITY_REFRESH_MAX_MS, s as CODEX_CAPACITY_REFRESH_MIN_MS, t as CODEX_CREDENTIAL_LEASE_TTL_MS, u as CODEX_RESET_REDEMPTION_OUTCOMES, v as CODEX_ROTATION_STRATEGIES, w as ClaimCodexResetRedemptionResult, x as ClaimSessionWorkForAttemptInput, y as ClaimSessionWorkForAttemptResult, z as ClaimSlackBotPostOperationResult, D as ClearSessionContextResult, E as CodexAccountStatus, F as CodexAccountUsageSnapshot, G as CodexAllocatorUpdateResult, H as CodexAuthDeps, I as CodexCapacityAvailabilityDecision, J as CodexCapacityMutationResult, K as CodexCapacityResetKind, L as CodexCapacitySelectionContext, M as CodexCapacityWait, N as CodexCapacityWaitStatus, O as CodexCapacityWakeTarget, P as CodexCredentialForRun, Q as CodexCredentialLeaseCandidateFilter, R as CodexCredentialLeaseCandidateFilterResult, S as CodexCredentialLeasePolicyScopeResolver, T as CodexCredentialLeaseQuarantine, U as CodexCredentialLeaseResult, V as CodexCredentialLeaseSelection, W as CodexCredentialLeaseSelectionContext, X as CodexCredentialStatus, Y as CodexCredentialTokens, Z as CodexLeaseAccountStatus, _ as CodexPinSource, $ as CodexRateLimitResetCreditsAccountResult, a0 as CodexResetRedemptionAttempt, a1 as CodexResetRedemptionOutcome, a2 as CodexResetRedemptionRecovery, a3 as CodexResetRedemptionSendNotReadyReason, a4 as CodexResetRedemptionStatus, a5 as CodexRotationSettings, a6 as CodexRotationStrategy, a7 as CodexTokenDeadlineClock, a8 as CodexTokenDeadlineOptions, a9 as CompleteSlackBotPostOperationResult, aa as ComposerDraftRow, ab as ConnectionBrokerDeps, ac as ConnectionCredentialForBroker, ad as ConnectionMetadataWithVerification, ae as ConnectionRefreshHttpError, af as ConsumeOAuthStateNonceInput, ag as CorrectWorkspaceMemoryInput, ah as CorrectWorkspaceMemoryResult, ai as CreateCapabilityCatalogItemInput, aj as CreateConnectionInput, ak as CreateDbOptions, al as CreateImportBatchInput, am as CreateKnowledgeMemoryInput, an as CreatePackInstallationInput, ao as CreateScheduledTaskInput, ap as CreateSessionGoalInput, aq as CreateSessionMcpServerInput, ar as CreateSocialConnectionInput, as as CreateSocialPostInput, at as CreditBalanceByAccount, au as Database, av as DatabaseFailureCode, aw as DbClient, ax as DbSession, ay as DeviceEnrollmentRequestRecord, az as DeviceEnrollmentStatus, aA as EditQueueCommandResult, aB as EffectiveControlBlocker, aC as EffectiveControlResumeOption, aD as EffectiveControlState, aE as EffectiveSessionControl, aF as EnableCapabilityInstallationInput, aG as EnabledMcpCapabilityServer, aH as EnqueueSessionTurnInput, aI as EnrollmentExposure, aJ as EnrollmentOs, aK as EnrollmentRecord, aL as EnrollmentStatus, aM as ExpiredDrainingSandboxLeaseCount, aN as ExpiredFileUploadCleanupClaim, aO as FORCE_RLS_TABLES, aP as FenceCodexResetRedemptionSendResult, aQ as FileUploadCleanupClaimResult, aR as ForceDrainResult, aS as FrozenTurnInitiator, aT as GitHubInstallation, aU as GitHubInstallationAccess, aV as GitHubInstallationAuthorityCommitError, aW as GoalContinuationDecision, aX as HostExportConsumerStatus, aY as HostExportKind, aZ as HostExportPayloadError, a_ as HostMcpCredentialBindingError, a$ as HostMcpCredentialResolverContext, b0 as HostMcpCredentialScopeError, b1 as HumanInputResponseValidationError, b2 as IdempotentPersistenceTransactionOptions, b3 as ImportBatch, b4 as InitializeSessionStartInput, b5 as InitializeSessionStartResult, b6 as InstallOrReadTurnExecutionPolicyForAttemptResult, b7 as IntegrationOAuthClientForUse, b8 as LeaseHolderKind, b9 as LeaseSnapshot, ba as ListKnowledgeMemoryOptions, bb as ListSessionEventPageOptions, bc as ListSessionEventsOptions, bd as ListSessionsForSubjectOptions, be as ListSessionsOptions, bf as LiveModalSandboxLeaseAttribution, bg as LostProviderWorkspaceSettlement, bh as MACHINE_METRICS_SERIES_INTERVAL_MS, bi as MAX_INTERNAL_UPDATE_BATCH_BYTES, bj as MAX_INTERNAL_UPDATE_BATCH_MEMBERS, bk as MAX_INTERNAL_UPDATE_BYTES, bl as MEMORY_ACTIVE_RECORD_CAP, bm as MEMORY_BLOCK_KIND_ORDER, bn as MEMORY_BLOCK_RECORD_LIMIT, bo as MEMORY_CORRECT_TOOL_DESCRIPTION, bp as MEMORY_KIND_SECTION_TITLES, bq as MEMORY_NEAR_DUP_COSINE_THRESHOLD, br as MEMORY_NEAR_DUP_NEIGHBORS, bs as MEMORY_SAVE_TOOL_DESCRIPTION, bt as MEMORY_SEARCH_DEFAULT_LIMIT, bu as MEMORY_SEARCH_MAX_LIMIT, bv as MEMORY_SEARCH_TOOL_DESCRIPTION, bw as MEMORY_TEXT_MAX_CHARS, bx as MEMORY_VISIBLE_RECORD_CAP, by as MachineMetricsRow, bz as MachineMetricsSample, bA as MarkWarmLeaseInstanceLostResult, bB as MaterializeGoalContinuationResult, bC as MemoryBlockRecord, bD as MemoryEmbedder, bE as MemorySanitizeResult, bF as MeterableWarmLease, bG as NON_RLS_RUNTIME_TABLES, bH as NestedAgentDepthDeploymentPolicy, bI as NestedAgentDepthPolicySource, bJ as NewSessionDraftAccessError, bK as NewSessionDraftConflictError, bL as NewSessionDraftRow, bM as PROTECTED_NO_DIRECT_DML_TABLES, bN as PendingSessionToolCallInput, bO as PersistenceFailureDetails, bP as PersistenceRetryOutcome, ProvisionResult, ProvisionRolesOptions, bQ as QueueCommandConflictCode, bR as QueueCommandConflictError, bS as QueueCommandResult, bT as QueuedTurnRow, bU as RUNTIME_DML_TABLES, bV as RUNTIME_FULL_DML_TABLES, bW as RUNTIME_READ_INSERT_TABLES, bX as RUNTIME_READ_ONLY_TABLES, bY as RUNTIME_TABLE_PRIVILEGES, bZ as ReapDrainable, b_ as ReconcileCodexCapacityWaitResult, b$ as ReconcileColdLostLeaseInstanceBlockersResult, c0 as RecoverSessionDispatchInput, c1 as RecoverSessionDispatchResult, c2 as RefreshTransportOptions, c3 as RegisterWorkspacePackInput, c4 as RegistryCapabilityCatalogItemInput, c5 as RegistryCatalogSurfaceKey, c6 as ReplaceIntegrationOAuthClientInput, c7 as RequestSessionTurnRecoveryInput, c8 as RequestSessionTurnRecoveryResult, c9 as ResolveConnectionCredentialInput, ca as ResolveConnectionCredentialResult, cb as RetainedFileArtifact, cc as RetainedProcessProviderProof, cd as RigActiveVersionChangedError, ce as RigChangeAlreadyVerifyingError, cf as RigChangeMonitoringSummary, cg as RigChangeTransitionError, ch as RigVersionContentInput, ci as RigVersionMonitoringSummary, cj as RlsContext, ck as RlsStrategy, cl as RuntimeDatabaseIdentity, cm as RuntimeDatabasePosture, cn as RuntimeDatabasePostureError, co as RuntimeDatabasePostureOptions, cp as RuntimeRoutinePosture, cq as RuntimeSchemaPosture, cr as RuntimeTableDmlPrivilege, cs as RuntimeTablePosture, ct as RuntimeTablePrivilegeContract, cu as SESSION_ANCESTRY_LIMIT, cv as SESSION_DISCOVERY_CONTROL_TARGET_LIMIT, cw as SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS, cx as SESSION_DISCOVERY_GOAL_MAX_CHARS, cy as SESSION_DISCOVERY_MESSAGE_MAX_CHARS, cz as SESSION_EVENT_DB_PAGE_MAX_BYTES, cA as SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT, cB as SESSION_LIST_SNAPSHOT_MAX_IDS, cC as SafeDatabaseErrorFacts, cD as SandboxArchiveAvailability, cE as SandboxArchiveRevision, cF as SandboxImageConflictError, cG as SandboxKind, cH as SandboxLeaseLiveness, cI as SandboxLeaseRecoveryBlockedError, cJ as SandboxLeaseSupersededError, cK as SandboxOpenPtySessionRow, cL as SandboxProviderExistence, cM as SandboxPtyProcessIdentity, cN as SandboxPtySessionRow, cO as SandboxRecord, cP as SandboxRecoveryState, cQ as SandboxRestoreStatus, cR as SandboxRetainedProcess, cS as SandboxRetainedProcessIdentity, cT as SandboxRetainedProcessPromotionFencedError, cU as SandboxRetainedProcessReconciliationClaim, cV as SandboxRetainedProcessState, cW as SandboxRigConflictError, cX as SandboxWorkspaceMutationAdmission, cY as SandboxWorkspaceMutationFencedError, cZ as SandboxWorkspaceMutationProviderOutcome, c_ as SandboxWorkspaceReadiness, c$ as SanitizedDatabasePersistenceCause, d0 as SaveWorkspaceMemoryInput, d1 as SaveWorkspaceMemoryResult, d2 as SessionAttemptInterruptionSettlement, d3 as SessionCodexState, d4 as SessionCommandActor, d5 as SessionCommandIdempotencyError, d6 as SessionCommandReceiptRow, d7 as SessionContextBusyError, d8 as SessionControlConflictError, d9 as SessionControlInvariantError, da as SessionControlMutationResult, db as SessionCreateDeniedResult, dc as SessionCreateInput, dd as SessionCreateResult, de as SessionCreateSuccessResult, df as SessionDepthPolicy, dg as SessionDiscoveryControl, dh as SessionDiscoveryCursor, di as SessionDiscoveryOrderBy, dj as SessionDiscoverySummary, dk as SessionEventPage, dl as SessionEventPersistenceError, dm as SessionEventWriteLockInput, dn as SessionEventWriteLocks, dp as SessionGoalContinuationProjection, dq as SessionIdConflictError, dr as SessionLineage, ds as SessionListAccessError, dt as SessionListCursor, du as SessionListCursorError, dv as SessionListCursorExpiredError, dw as SessionListSnapshotLimitError, dx as SessionMcpServerForRun, dy as SessionPinAccessError, dz as SessionPinVersionConflictError, dA as SessionRecordingCodec, dB as SessionRecordingMode, dC as SessionRecordingRow, dD as SessionRecordingState, dE as SessionSpawnDenial, dF as SessionSpawnDenialCode, dG as SessionSpawnDeniedDbError, dH as SessionSystemUpdateOutboxDelivery, dI as SessionToolPolicyVersionConflictError, dJ as SessionTurnAttemptOutcome, dK as SessionTurnForExecution, dL as SessionTurnRecordingSettlement, dM as SessionWorkPeek, dN as SessionWorkTrigger, dO as SessionWorkflowWake, dP as SessionWorkflowWakeDeliveryResult, dQ as SetSessionCodexPinOptions, dR as SetSessionGoalStatusEvent, dS as SettleCodexCredentialFailoverResult, dT as SettleCodexCredentialLeaseLossResult, dU as SlackBotPostOperation, dV as SteerQueueCommandResult, dW as StoreIntegrationOAuthClientInput, dX as StoredIntegrationOAuthClient, dY as StreamAcknowledgment, dZ as SubmitHumanPromptResult, d_ as ToolspaceCallReservation, d$ as ToolspaceTurnAttemptClaims, e0 as TurnAttemptFenceRejectReason, e1 as UpdateConnectionInput, e2 as UpdateImportBatchCountsInput, e3 as UpdateKnowledgeMemoryInput, e4 as UpdateScheduledTaskInput, e5 as UpdateSessionMcpApprovalPolicyResult, e6 as UpdateSessionMcpServerCredentialsInput, e7 as UpdateSessionMcpServerCredentialsResult, e8 as UpsertCodexSubscriptionCredentialResult, e9 as UserLookup, ea as VariableSetForRun, eb as WORKSPACE_MEMORY_BLOCK_EMPTY, ec as WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED, ed as WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET, ee as WorkspaceCaptureCommitResult, ef as WorkspaceCaptureGcPlan, eg as WorkspaceCaptureGcRow, eh as WorkspaceCaptureRow, ei as WorkspaceControlLockMode, ej as WorkspaceControlMutationResult, ek as WorkspaceControlRow, el as WorkspaceEnvironmentForRun, em as WorkspaceInstructionPolicyConflictError, en as WorkspaceInstructionPolicyInvalidOperationError, eo as WorkspaceInstructionPolicyLegacyUnavailableError, ep as WorkspaceInstructionPolicyNotFoundError, eq as WorkspaceMemoryOrigin, er as WorkspaceMemorySearchInput, es as WorkspaceMemorySearchMode, et as WorkspaceMemorySearchResult, eu as WorkspaceModelPolicy, ev as abandonCodexResetRedemptionBeforeProvider, ew as abandonRecordingForTurnAttempt, ex as acceptSessionApprovalDecision, ey as acceptSessionHumanInputResponse, ez as accrueWarmSeconds, eA as acknowledgeHostExportBatch, eB as acquireCodexCredentialLease, eC as acquireLease, eD as activateRigVersion, eE as activateWorkspaceInstructionPolicyRevision, eF as addSessionSystemUpdate, eG as addSessionSystemUpdateWithSourceMutation, eH as admitToolspaceTurnAttempt, eI as adoptCodexResetRedemptionAttempt, eJ as advanceWorkspaceGeneration, eK as advanceWorkspaceGenerationForDirectRequest, eL as advanceWorkspaceGenerationForRetainedProcess, eM as allAccountPermissions, eN as allWorkspacePermissions, eO as appendSessionEventToSandboxGroup, eP as appendSessionEvents, eQ as appendSessionEventsAndUpdateSession, eR as appendSessionEventsForTurnAttempt, eS as appendSessionEventsWithLockedSessionUpdate, eT as appendSessionHistoryItems, eU as applyContextCompaction, eV as applyCreditDebitUpToBalance, eW as applyCreditLedgerEntry, eX as applySessionTurnSettlement, eY as approveDeviceEnrollmentRequest, eZ as areGitHubRepositoriesAllowedForWorkspace, e_ as armCodexCapacityWait, e$ as assertAgentCommandAuthorityInTransaction, f0 as assertRuntimeDatabasePosture, f1 as autoResumeSessionBranchInTransaction, f2 as beginRigChangeVerificationAttempt, f3 as beginSandboxRematerialization, f4 as bindAuthorizedGitHubInstallationRepositories, f5 as bindGitHubInstallationRepositories, f6 as bootstrapWorkspace, f7 as buildChildCompletionDigest, f8 as buildCodexTokenResolver, f9 as buildConnectionTokenResolver, fa as buildHostConnectionTokenResolver, fb as canonicalSessionCommandHash, fc as claimCodexResetRedemption, fd as claimExpiredFileUploadCleanup, fe as claimFileUploadCleanup, ff as claimHostExportBatch, fg as claimPendingSessionSystemUpdateOutbox, fh as claimPendingSessionWorkflowWakes, fi as claimSessionWorkForAttempt, fj as claimSlackBotPostOperation, fk as claimTerminalRetainedProcesses, fl as clearDurablePendingSessionToolCalls, fm as clearEnrollmentWentOffline, fn as clearPendingSessionToolspaceCall, fo as clearSessionContext, fp as clearSessionGoal, fq as clearedContextMarkerItem, fr as closePtySession, fs as closeSessionTurnAttemptInTransaction, ft as codexCapacityRefreshBackoffMs, fu as commitWarmingToWarm, fv as completeCodexResetRedemption, fw as completeExpiredFileUploadCleanup, fx as completeFileUpload, fy as completeFileUploadCleanup, fz as completeSlackBotPostOperation, fA as computeWorkspaceCaptureGcPlan, fB as confirmDrainCold, fC as consumeDeviceEnrollmentRequest, fD as consumeIntegrationOAuthStateNonce, fE as consumeNewSessionDraftInTransaction, fF as correctWorkspaceMemory, fG as countActiveApiKeysForWorkspace, fH as countActiveRetainedProcessesByOwnerState, fI as countActiveSessionHistoryItems, fJ as countActiveSessionsForWorkspace, fK as countActiveSessionsUsingEnvironment, fL as countActiveSessionsUsingVariableSet, fM as countConsecutiveReactiveRotations, fN as countExpiredDrainingSandboxLeases, fO as countQueuedTurns, fP as countRigs, fQ as countSandboxLeasesByLiveness, fR as countScheduledTasksForWorkspace, fS as countScheduledTasksUsingEnvironment, fT as countScheduledTasksUsingVariableSet, fU as countSessionHistoryItems, fV as countSessionsUsingRig, fW as countVariableSets, fX as countWorkspaceEnvironments, fY as countWorkspacesForAccount, fZ as createApiKey, f_ as createConnection, f$ as createDb, g0 as createDeviceEnrollmentRequest, g1 as createEnrollment, g2 as createFileUpload, g3 as createImportBatch, g4 as createKnowledgeMemory, g5 as createRig, g6 as createRigChange, g7 as createRigVersion, g8 as createRigVersionForChangePromotion, g9 as createSandbox, ga as createScheduledTask, gb as createScheduledTaskRun, gc as createSession, gd as createSessionGoal, ge as createSessionMcpServers, gf as createSessionWithIdempotencyKey, gg as createSessionWithIdempotencyKeyResult, gh as createSocialConnection, gi as createSocialPost, gj as createVariableSet, gk as createWorkspace, gl as createWorkspaceEnvironment, gm as createWorkspaceInstructionPolicyDraft, gn as databaseFailureCode, go as deadLetterHostExportHead, gp as decodeSessionListCursor, gq as decryptEnvironmentValue, gq as decryptVariableSetValue, gr as decryptedCapabilityHeaders, gs as deferRetainedProcessReconciliation, gt as deleteGitHubInstallationBinding, gu as deleteRecording, gv as deleteRig, gw as deleteRigIfNoActiveSessions, gx as deleteScheduledTask, gy as deleteSessionQueueItemInTransaction, gz as deleteVariableSet, gA as deleteVariableSetVariable, gB as deleteWorkspace, gC as deleteWorkspaceCaptureRows, gD as deleteWorkspaceEnvironment, gE as deleteWorkspaceEnvironmentVariable, gF as deleteWorkspacePack, gG as denyDeviceEnrollmentRequest, gH as diffWorkspaceInstructionPolicyContent, gI as diffWorkspaceInstructionPolicyRevisions, gJ as disableCapabilityInstallation, gK as disableHostExportConsumer, gL as disconnectAllCodexAccounts, gM as disconnectCodexAccount, gN as editQueuedTurnInTransaction, gO as enableCapabilityInstallation, gP as enablePackInstallation, gQ as encodeSessionListCursor, gR as encryptEnvironmentValue, gR as encryptVariableSetValue, gS as enqueueSessionTurn, gT as enqueueSessionWorkflowWake, gU as enqueueSessionWorkflowWakeIfRunnable, gV as enqueueSessionWorkflowWakeInTransaction, gW as ensureCodexRotationSettings, gX as ensureManagedAccessForUser, gY as estimateMemoryTokens, gZ as evaluateGoalContinuation, g_ as evaluateRuntimeDatabasePosture, g$ as evaluateSessionControl, h0 as evaluateSessionControls, h1 as evaluateSessionDiscoveryControls, h2 as expireSessionHumanInputRequest, h3 as failHostExportBatch, h4 as failSandboxRematerialization, h5 as failWarmingToCold, h6 as fenceCodexResetRedemptionSend, h7 as fetchCodexRateLimitResetCreditsForAccount, h8 as fetchCodexUsageForAccount, h9 as finalizeEnrollmentByToken, ha as findActiveApiKeyByHash, hb as forceDrainOverLimitViewerOnlyBoxes, hc as frozenInitiatorForCommandActor, hd as getActiveSessionHistoryItems, he as getActiveSessionTurnForExecution, hf as getAnySessionInGroup, hg as getBillingBalance, hh as getBillingCustomer, hi as getCapabilityCatalogItem, hj as getCapabilityInstallation, hk as getCodexCapacityWaitForSession, hl as getCodexCredentialStatus, hm as getCodexResetRedemptionAttempt, hn as getCodexRotationSettings, ho as getComposerDraftInTransaction, hp as getConnectionMetadata, hq as getDeviceEnrollmentRequestByDeviceCode, hr as getEnrollment, hs as getFile, ht as getFileUpload, hu as getHostExportConsumerStatus, hv as getHumanInputResumeForEvent, hw as getKnowledgeMemory, hx as getLatestRunState, hy as getLatestStartedSessionTurn, hz as getManagedAccount, hA as getManagedUserByEmail, hB as getMaterializedSandboxFileResources, hC as getNestedAgentDepthDeploymentPolicy, hD as getNewSessionDraftInTransaction, hE as getOpenPtySession, hF as getOrCreateSessionSystemUpdateOutbox, hG as getPackInstallation, hH as getPendingDeviceEnrollmentRequestByUserCode, hI as getPendingDeviceEnrollmentRequestByUserCodeGlobal, hJ as getRecording, hK as getRetainedFileArtifact, hL as getRetainedProcess, hM as getRig, hN as getRigByName, hO as getRigChange, hP as getRigName, hQ as getRigVersion, hR as getRigVersionById, hS as getSandbox, hT as getSandboxSessionEnvelope, hU as getScheduledTask, hV as getSession, hW as getSessionByCreateIdempotencyKey, hX as getSessionCodexState, hY as getSessionEvent, hZ as getSessionEventByClientEventId, h_ as getSessionForSubject, h$ as getSessionGoal, i0 as getSessionGoalWithContinuation, i1 as getSessionHistoryItems, i2 as getSessionHumanInputRequest, i3 as getSessionLineage, i4 as getSessionQueueSnapshot, i5 as getSessionRootId, i6 as getSessionSpawnDenial, i7 as getSessionSpawnDenialByIdempotencyKey, i8 as getSessionSystemUpdateOutboxByDedupeKey, i9 as getSessionTurn, ia as getSessionTurnForAttempt, ib as getSlackBotPostOperation, ic as getSocialConnection, id as getStoredCapabilityHeaderCiphertext, ie as getStreamAcknowledgment, ig as getVariableSet, ih as getVariableSetByName, ii as getVariableSetValuesForRun, ij as getWorkspace, ik as getWorkspaceControlEvent, il as getWorkspaceDefaultRigId, im as getWorkspaceEnvironment, io as getWorkspaceEnvironmentByName, ip as getWorkspaceEnvironmentValuesForRun, iq as getWorkspaceGrant, ir as getWorkspaceInstructionPolicyRevision, is as getWorkspaceModelPolicy, it as getWorkspacePack, iu as grantWorkspaceAccess, iv as hasAuditableGitHubInstallationAuthority, iw as hasCreditLedgerEntry, ix as hashMemoryText, iy as heartbeatCodexCredentialLease, iz as heartbeatCodexCredentialLeaseUntil, iA as heartbeatLeaseHolder, iB as importLegacyWorkspaceInstructionPolicyDraft, iC as ingestMachineMetricsSample, iD as initializeSessionStartAtomically, iE as insertFailedWorkspaceCapture, iF as insertMachineMetricsSeries, iG as insertPtySession, iH as insertRecording, iI as insertWorkspaceCapture, iJ as inspectRuntimeDatabasePosture, iK as installOrReadTurnExecutionPolicyForAttempt, iL as interruptedToolCallResult, iM as isCodexBilledTurn, iN as isDatabasePersistenceFailure, iO as isMemoryTextTooLong, iP as isRetryablePersistenceSqlState, iQ as isSessionCompactionRequested, iR as isSessionEventPersistenceError, iS as isStripeWebhookProcessed, iT as latestWorkspaceCapture, iU as listApiKeys, iV as listCapabilityCatalogItems, iW as listCapabilityInstallations, iX as listCodexAccountStatuses, iY as listCodexResetRedemptionRecoveries, iZ as listConnectionsMetadata, i_ as listCreditBalancesByAccount, i$ as listDistinctRigVersionIdsInGroup, j0 as listDistinctVariableSetIdsInGroup, j1 as listEnabledMcpCapabilityServers, j2 as listEnrollments, j3 as listGitHubInstallationAccessForWorkspace, j4 as listGitHubInstallationIdsForWorkspace, j5 as listGitHubInstallationsForWorkspace, j6 as listKnowledgeMemories, j7 as listLiveModalSandboxLeaseAttributions, j8 as listMeterableWarmLeases, j9 as listOpenPtySessions, ja as listOutstandingSessionSystemUpdates, jb as listPackInstallations, jc as listPendingCodexCapacityWakeTargets, jd as listPendingSessionTurns, je as listRecordings, jf as listRegistryCatalogSurfaceKeys, jg as listRigChangeMonitoringSummaries, jh as listRigChanges, ji as listRigVersionMonitoringSummaries, jj as listRigVersions, jk as listRigs, jl as listSandboxes, jm as listScheduledTaskRuns, jn as listScheduledTasks, jo as listSessionDiscoverySummaries, jp as listSessionEventPage, jq as listSessionEvents, jr as listSessionHumanInputRequests, js as listSessionIdsInGroup, jt as listSessionMcpServerMetadata, ju as listSessionMcpServersForChildInheritance, jv as listSessionMcpServersForRun, jw as listSessionSpawnDenials, jx as listSessionSystemUpdatesForTurn, jy as listSessionTurns, jz as listSessions, jA as listSessionsForSubject, jB as listSocialConnections, jC as listSocialPosts, jD as listUsageEvents, jE as listVariableSets, jF as listWorkspaceControlEvents, jG as listWorkspaceEnvironments, jH as listWorkspaceInstructionPolicyRevisions, jI as listWorkspaceMembers, jJ as listWorkspacePacks, jK as listWorkspacesForSubject, jL as loadCodexCredentialForRun, jM as loadConnectionCredentialForBroker, jN as loadIntegrationOAuthClient, jO as loadVariableSetForRun, jP as loadWorkspaceEnvironmentForRun, jQ as lockSessionEventWriteRows, jR as lockWorkspaceInferenceControl, jS as markFileUploadFailed, jT as markSandboxFileResourcesMaterialized, jU as markSandboxProviderReady, jV as markSandboxRestoreVerifying, jW as markScheduledTaskRunFailedIfQueued, jX as markSessionAttemptQuiesced, jY as markSessionSystemUpdateOutboxDeliveredInTransaction, jZ as markSessionSystemUpdateOutboxFailed, j_ as markSessionWorkflowWakeDelivered, j$ as markSessionWorkflowWakeFailed, k0 as markStaleRegistryCatalogItems, k1 as markStripeWebhookProcessed, k2 as markWarmLeaseInstanceLost, k3 as materializeGoalContinuation, k4 as mcpServerIdForCapability, k5 as moveQueuedTurnInTransaction, k6 as mutateSessionControlInTransaction, k7 as mutateWorkspaceControlInTransaction, k8 as nestedPostgresSqlState, k9 as newSessionDraftToolsProvided, ka as nextSessionHistoryPosition, kb as normalizeBearerScheme, kc as normalizeMemoryText, kd as orphanedResultRowIndicesForRepair, ke as peekSessionWork, kf as persistDrainSnapshot, kg as persistWarmSnapshot, kh as planWorkspaceCaptureGc, ki as projectEffectiveControlForRelatedAccess, kj as projectSessionForRelatedAccess, provisionRoles, kk as pruneHostExportOutbox, kl as publicNewSessionDraftOptions, km as quarantineCodexCredentialForLease, kn as reArmDrainingLease, ko as readActiveSandbox, kp as readLease, kq as readMachineMetricsLatest, kr as readMachineMetricsLatestForWorkspace, ks as readMachineMetricsSeries, kt as readWorkspaceArchiveCapturePreflight, ku as reapExpiredSessionListSnapshots, kv as reapStaleLeaseHolders, kw as reapStaleLeaseHoldersGlobal, kx as reconcileCodexCapacityWait, ky as reconcileColdLostLeaseInstanceBlockers, kz as recordAuditEvent, kA as recordCodexAccountConnectors, kB as recordCodexAccountUsage, kC as recordCodexAccountUsageWithWakeTargets, kD as recordCodexTokenRefresh, kE as recordConnectionTokenRefresh, kF as recordConnectionUsed, kG as recordLeaseDataPlaneUrl, kH as recordLeaseTerminalDataPlaneUrl, kI as recordPendingSessionToolCallResult, kJ as recordRetainedProcessReconciliationProof, kK as recordSessionActiveCodexCredential, kL as recordSkippedContextCompaction, kM as recordStreamAcknowledgment, kN as recordStripeWebhookEvent, kO as recordUsageEvent, kP as recordWarmingSandboxCreated, kQ as recoverSessionDispatch, kR as refreshOAuthConnectionCredential, kS as registerDbBinding, kT as registerHostExportConsumer, kU as registerInternalUpdateWakeInTransaction, kV as registerPendingSessionToolCall, kW as registerSessionTurnAttemptClaim, kX as registerSessionWorkflowWakeInTransaction, kY as registerWorkspacePack, kZ as releaseCodexCredentialLease, k_ as releaseCodexResetRedemptionClaim, k$ as releaseLeaseHolder, l0 as releaseSlackBotPostOperationClaim, l1 as removeWorkspaceMember, l2 as renameCodexAccount, l3 as renderWorkspaceMemoryBlock, l4 as replaceIntegrationOAuthClient, l5 as requestSessionCompaction, l6 as requestSessionTurnRecovery, l7 as requireFile, l8 as requireScheduledTask, l9 as requireSession, la as requireSocialConnection, lb as requireWorkspace, lc as reserveSessionCommandReceipt, ld as reserveToolspaceCallForAttempt, le as resolveWorkspaceMemoryBlock, lf as resumeHostExportConsumer, lg as retainWorkspaceMutationProcess, lh as retainedProcessReconciliationProof, li as retainedProcessSettlementIdentity, lj as retireHostExportConsumer, lk as revokeApiKey, ll as revokeConnection, lm as revokeEnrollment, ln as revokeViewer, lo as rewindHostExportConsumer, lp as rlsContextForWorkspace, lq as rlsStrategyFor, lr as rollbackWorkspaceInstructionPolicyRevision, ls as rotateWorkspaceArchives, lt as runIdempotentPersistenceTransaction, lu as runtimeDatabaseReadyCheck, lv as safeDatabaseErrorFacts, lw as sanitizeEventPayload, lx as sanitizeEventString, ly as sanitizeMemoryText, lz as sanitizeModelPayload, lA as saveComposerDraftInTransaction, lB as saveNewSessionDraftInTransaction, lC as saveRunState, lD as saveWorkspaceMemory, lE as searchWorkspaceMemories, lF as seedNewSessionDraftInTransaction, lG as sendAgentMessageInTransaction, lH as serializeEffectiveSessionControl, lI as sessionAuthorizationScopeFilter, lJ as sessionSubject, lK as sessionTreeStatsForSessions, lL as sessionsWithActiveOpOnEnrollment, lM as setActiveCodexCredential, lN as setActiveSandbox, lO as setCodexCredentialExhausted, lP as setCodexCredentialExhaustedWithWakeTargets, lQ as setCodexCredentialStatus, lR as setCodexCredentialStatusById, lS as setConnectionStatus, lT as setEnrollmentDisplayState, lU as setEnrollmentOpStreamState, lV as setEnrollmentWentOffline, lW as setInitialActiveCodexCredential, lX as setRlsContext, lY as setSessionCodexPin, lZ as setSessionGoalLastContinuationTurn, l_ as setSessionGoalStatus, l$ as setSessionGoalStatusWithEvent, m0 as setSessionLastInputTokensForTurnAttempt, m1 as setSessionPin, m2 as setSubjectRlsContext, m3 as setTemporalWorkflowId, m4 as setVariableSetVariable, m5 as setWorkspaceDefaultRig, m6 as setWorkspaceEnvironmentVariable, m7 as settleCodexCredentialFailover, m8 as settleCodexCredentialLeaseLoss, m9 as settleRetainedProcess, ma as settleScheduledTaskRunInTransaction, mb as settleSessionAttemptInterruptions, mc as settleSessionIdleWithParentOutbox, md as shortMemoryId, me as steerAgentSessionInTransaction, mf as steerQueuedTurnInTransaction, mg as storeIntegrationOAuthClient, mh as submitHumanPromptInTransaction, mi as sumUsageQuantity, mj as supersedeSessionCurrentDirectionInTransaction, mk as touchEnrollmentLastSeen, ml as touchLeaseHolder, mm as updateCodexAllocatorEligibility, mn as updateCodexRotationSettings, mo as updateConnection, mp as updateImportBatchCounts, mq as updateKnowledgeMemory, mr as updatePackInstallationStatus, ms as updatePtySessionActivity, mt as updateRecording, mu as updateRig, mv as updateRigChangeStatus, mw as updateScheduledTask, mx as updateScheduledTaskRun, my as updateSessionCommandReceiptResult, mz as updateSessionGoal, mA as updateSessionGoalWithEvent, mB as updateSessionMcpApprovalPolicy, mC as updateSessionMcpServerCredentials, mD as updateSessionTitle, mE as updateVariableSet, mF as updateWorkspace, mG as updateWorkspaceEnvironment, mH as updateWorkspaceSettings, mI as upsertBillingCustomer, mJ as upsertCapabilityCatalogItem, mK as upsertCodexSubscriptionCredential, mL as upsertGitHubInstallation, mM as upsertMachineMetricsLatest, mN as upsertRegistryCapabilityCatalogItem, mO as upsertSandboxSessionEnvelope, mP as upsertSessionGoal, mQ as upsertSessionGoalWithEvent, mR as upsertWorkspaceModelPolicy, mS as validateHumanInputResponse, mT as verifyDirectWorkspaceMutationSettlement, mU as verifyRetainedProcessMutationSettlement, mV as verifyWorkspaceMutationSettlement, mW as withAccountRls, mX as withCodexCapacityMutation, mY as withCodexCredentialRefreshLock, mZ as withCodexTokenDeadline, m_ as withRlsContext, m$ as withWorkspaceRls, n0 as withWorkspaceSubjectRls, n1 as withWorkspaceUsageLock, n2 as workspaceCaptureAtRevision, n3 as workspaceCodexSubscriptionActive } from './provision-roles.js';
+export { A as AGENT_VISIBLE_MEMORY_STATUSES, a as AcceptSessionApprovalDecisionResult, b as AcceptSessionHumanInputResponseResult, c as AccrueWarmSecondsResult, d as AcquireLeaseInput, e as AcquireLeaseResult, f as ActiveRetainedProcessOwnerCount, g as ActiveSandboxPointer, h as AddSessionSystemUpdateInput, i as AddSessionSystemUpdateResult, j as AdoptCodexResetRedemptionResult, k as AgentCommandAuthorityError, l as AgentInternalUpdateCommandResult, m as AppendEventInput, n as ApplyContextCompactionResult, o as ApplySessionTurnSettlementInput, p as ApplySessionTurnSettlementResult, q as ArmCodexCapacityWaitResult, B as BeginSandboxRematerializationResult, r as BootstrapWorkspaceInput, C as CODEX_CAPACITY_REFRESH_MAX_MS, s as CODEX_CAPACITY_REFRESH_MIN_MS, t as CODEX_CREDENTIAL_LEASE_TTL_MS, u as CODEX_RESET_REDEMPTION_OUTCOMES, v as CODEX_ROTATION_STRATEGIES, w as ClaimCodexResetRedemptionResult, x as ClaimSessionWorkForAttemptInput, y as ClaimSessionWorkForAttemptResult, z as ClaimSlackBotPostOperationResult, D as ClearSessionContextResult, E as CodexAccountStatus, F as CodexAccountUsageSnapshot, G as CodexAllocatorUpdateResult, H as CodexAuthDeps, I as CodexCapacityAvailabilityDecision, J as CodexCapacityMutationResult, K as CodexCapacityResetKind, L as CodexCapacitySelectionContext, M as CodexCapacityWait, N as CodexCapacityWaitStatus, O as CodexCapacityWakeTarget, P as CodexCredentialForRun, Q as CodexCredentialLeaseCandidateFilter, R as CodexCredentialLeaseCandidateFilterResult, S as CodexCredentialLeasePolicyScopeResolver, T as CodexCredentialLeaseQuarantine, U as CodexCredentialLeaseResult, V as CodexCredentialLeaseSelection, W as CodexCredentialLeaseSelectionContext, X as CodexCredentialStatus, Y as CodexCredentialTokens, Z as CodexLeaseAccountStatus, _ as CodexPinSource, $ as CodexRateLimitResetCreditsAccountResult, a0 as CodexResetRedemptionAttempt, a1 as CodexResetRedemptionOutcome, a2 as CodexResetRedemptionRecovery, a3 as CodexResetRedemptionSendNotReadyReason, a4 as CodexResetRedemptionStatus, a5 as CodexRotationSettings, a6 as CodexRotationStrategy, a7 as CodexTokenDeadlineClock, a8 as CodexTokenDeadlineOptions, a9 as CompleteSlackBotPostOperationResult, aa as ComposerDraftRow, ab as ConnectionBrokerDeps, ac as ConnectionCredentialForBroker, ad as ConnectionMetadataWithVerification, ae as ConnectionRefreshHttpError, af as ConsumeOAuthStateNonceInput, ag as CorrectWorkspaceMemoryInput, ah as CorrectWorkspaceMemoryResult, ai as CreateCapabilityCatalogItemInput, aj as CreateConnectionInput, ak as CreateDbOptions, al as CreateImportBatchInput, am as CreateKnowledgeMemoryInput, an as CreatePackInstallationInput, ao as CreateScheduledTaskInput, ap as CreateSessionGoalInput, aq as CreateSessionMcpServerInput, ar as CreateSocialConnectionInput, as as CreateSocialPostInput, at as CreditBalanceByAccount, au as Database, av as DatabaseFailureCode, aw as DbClient, ax as DbSession, ay as DeviceEnrollmentRequestRecord, az as DeviceEnrollmentStatus, aA as EditQueueCommandResult, aB as EffectiveControlBlocker, aC as EffectiveControlResumeOption, aD as EffectiveControlState, aE as EffectiveSessionControl, aF as EnableCapabilityInstallationInput, aG as EnabledMcpCapabilityServer, aH as EnqueueSessionTurnInput, aI as EnrollmentExposure, aJ as EnrollmentOs, aK as EnrollmentRecord, aL as EnrollmentStatus, aM as ExpiredDrainingSandboxLeaseCount, aN as ExpiredFileUploadCleanupClaim, aO as FORCE_RLS_TABLES, aP as FenceCodexResetRedemptionSendResult, aQ as FileUploadCleanupClaimResult, aR as ForceDrainResult, aS as FrozenTurnInitiator, aT as GitHubInstallation, aU as GitHubInstallationAccess, aV as GitHubInstallationAuthorityCommitError, aW as GoalContinuationDecision, aX as HostExportConsumerStatus, aY as HostExportKind, aZ as HostExportPayloadError, a_ as HostMcpCredentialBindingError, a$ as HostMcpCredentialResolverContext, b0 as HostMcpCredentialScopeError, b1 as HumanInputResponseValidationError, b2 as IdempotentPersistenceTransactionOptions, b3 as ImportBatch, b4 as InitializeSessionStartInput, b5 as InitializeSessionStartResult, b6 as InstallOrReadTurnExecutionPolicyForAttemptResult, b7 as IntegrationOAuthClientForUse, b8 as LeaseHolderKind, b9 as LeaseSnapshot, ba as ListKnowledgeMemoryOptions, bb as ListSessionEventPageOptions, bc as ListSessionEventsOptions, bd as ListSessionsForSubjectOptions, be as ListSessionsOptions, bf as LiveModalSandboxLeaseAttribution, bg as LostProviderWorkspaceSettlement, bh as MACHINE_METRICS_SERIES_INTERVAL_MS, bi as MAX_INTERNAL_UPDATE_BATCH_BYTES, bj as MAX_INTERNAL_UPDATE_BATCH_MEMBERS, bk as MAX_INTERNAL_UPDATE_BYTES, bl as MEMORY_ACTIVE_RECORD_CAP, bm as MEMORY_BLOCK_KIND_ORDER, bn as MEMORY_BLOCK_RECORD_LIMIT, bo as MEMORY_CORRECT_TOOL_DESCRIPTION, bp as MEMORY_KIND_SECTION_TITLES, bq as MEMORY_NEAR_DUP_COSINE_THRESHOLD, br as MEMORY_NEAR_DUP_NEIGHBORS, bs as MEMORY_SAVE_TOOL_DESCRIPTION, bt as MEMORY_SEARCH_DEFAULT_LIMIT, bu as MEMORY_SEARCH_MAX_LIMIT, bv as MEMORY_SEARCH_TOOL_DESCRIPTION, bw as MEMORY_TEXT_MAX_CHARS, bx as MEMORY_VISIBLE_RECORD_CAP, by as MachineMetricsRow, bz as MachineMetricsSample, bA as MarkWarmLeaseInstanceLostResult, bB as MaterializeGoalContinuationResult, bC as MemoryBlockRecord, bD as MemoryEmbedder, bE as MemorySanitizeResult, bF as MeterableWarmLease, bG as NON_RLS_RUNTIME_TABLES, bH as NestedAgentDepthDeploymentPolicy, bI as NestedAgentDepthPolicySource, bJ as NewSessionDraftAccessError, bK as NewSessionDraftConflictError, bL as NewSessionDraftRow, bM as PROTECTED_NO_DIRECT_DML_TABLES, bN as PendingSessionToolCallInput, bO as PersistenceFailureDetails, bP as PersistenceRetryOutcome, ProvisionResult, ProvisionRolesOptions, bQ as QueueCommandConflictCode, bR as QueueCommandConflictError, bS as QueueCommandResult, bT as QueuedTurnRow, bU as RUNTIME_DML_TABLES, bV as RUNTIME_FULL_DML_TABLES, bW as RUNTIME_READ_INSERT_TABLES, bX as RUNTIME_READ_ONLY_TABLES, bY as RUNTIME_TABLE_PRIVILEGES, bZ as ReapDrainable, b_ as ReconcileCodexCapacityWaitResult, b$ as ReconcileColdLostLeaseInstanceBlockersResult, c0 as ReconcileSessionAttemptQuiescenceResult, c1 as RecoverSessionDispatchInput, c2 as RecoverSessionDispatchResult, c3 as RefreshTransportOptions, c4 as RegisterWorkspacePackInput, c5 as RegistryCapabilityCatalogItemInput, c6 as RegistryCatalogSurfaceKey, c7 as ReplaceIntegrationOAuthClientInput, c8 as RequestSessionTurnRecoveryInput, c9 as RequestSessionTurnRecoveryResult, ca as ResolveConnectionCredentialInput, cb as ResolveConnectionCredentialResult, cc as RetainedFileArtifact, cd as RetainedProcessProviderProof, ce as RigActiveVersionChangedError, cf as RigChangeAlreadyVerifyingError, cg as RigChangeMonitoringSummary, ch as RigChangeTransitionError, ci as RigVersionContentInput, cj as RigVersionMonitoringSummary, ck as RlsContext, cl as RlsStrategy, cm as RuntimeDatabaseIdentity, cn as RuntimeDatabasePosture, co as RuntimeDatabasePostureError, cp as RuntimeDatabasePostureOptions, cq as RuntimeRoutinePosture, cr as RuntimeSchemaPosture, cs as RuntimeTableDmlPrivilege, ct as RuntimeTablePosture, cu as RuntimeTablePrivilegeContract, cv as SESSION_ANCESTRY_LIMIT, cw as SESSION_DISCOVERY_CONTROL_TARGET_LIMIT, cx as SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS, cy as SESSION_DISCOVERY_GOAL_MAX_CHARS, cz as SESSION_DISCOVERY_MESSAGE_MAX_CHARS, cA as SESSION_EVENT_DB_PAGE_MAX_BYTES, cB as SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT, cC as SESSION_LIST_SNAPSHOT_MAX_IDS, cD as SafeDatabaseErrorFacts, cE as SandboxArchiveAvailability, cF as SandboxArchiveRevision, cG as SandboxImageConflictError, cH as SandboxKind, cI as SandboxLeaseLiveness, cJ as SandboxLeaseRecoveryBlockedError, cK as SandboxLeaseSupersededError, cL as SandboxOpenPtySessionRow, cM as SandboxProviderExistence, cN as SandboxPtyProcessIdentity, cO as SandboxPtySessionRow, cP as SandboxRecord, cQ as SandboxRecoveryState, cR as SandboxRestoreStatus, cS as SandboxRetainedProcess, cT as SandboxRetainedProcessIdentity, cU as SandboxRetainedProcessPromotionFencedError, cV as SandboxRetainedProcessReconciliationClaim, cW as SandboxRetainedProcessState, cX as SandboxRigConflictError, cY as SandboxWorkspaceMutationAdmission, cZ as SandboxWorkspaceMutationFencedError, c_ as SandboxWorkspaceMutationProviderOutcome, c$ as SandboxWorkspaceReadiness, d0 as SanitizedDatabasePersistenceCause, d1 as SaveWorkspaceMemoryInput, d2 as SaveWorkspaceMemoryResult, d3 as SessionAttemptActivityRef, d4 as SessionAttemptInterruptionSettlement, d5 as SessionCodexState, d6 as SessionCommandActor, d7 as SessionCommandIdempotencyError, d8 as SessionCommandReceiptRow, d9 as SessionContextBusyError, da as SessionControlConflictError, db as SessionControlInvariantError, dc as SessionControlMutationResult, dd as SessionCreateDeniedResult, de as SessionCreateInput, df as SessionCreateResult, dg as SessionCreateSuccessResult, dh as SessionDepthPolicy, di as SessionDiscoveryControl, dj as SessionDiscoveryCursor, dk as SessionDiscoveryOrderBy, dl as SessionDiscoverySummary, dm as SessionEventPage, dn as SessionEventPersistenceError, dp as SessionEventWriteLockInput, dq as SessionEventWriteLocks, dr as SessionGoalContinuationProjection, ds as SessionIdConflictError, dt as SessionLineage, du as SessionListAccessError, dv as SessionListCursor, dw as SessionListCursorError, dx as SessionListCursorExpiredError, dy as SessionListSnapshotLimitError, dz as SessionMcpServerForRun, dA as SessionPinAccessError, dB as SessionPinVersionConflictError, dC as SessionRecordingCodec, dD as SessionRecordingMode, dE as SessionRecordingRow, dF as SessionRecordingState, dG as SessionSpawnDenial, dH as SessionSpawnDenialCode, dI as SessionSpawnDeniedDbError, dJ as SessionSystemUpdateOutboxDelivery, dK as SessionToolPolicyVersionConflictError, dL as SessionTurnAttemptOutcome, dM as SessionTurnForExecution, dN as SessionTurnRecordingSettlement, dO as SessionWorkPeek, dP as SessionWorkTrigger, dQ as SessionWorkflowWake, dR as SessionWorkflowWakeDeliveryResult, dS as SetSessionCodexPinOptions, dT as SetSessionGoalStatusEvent, dU as SettleCodexCredentialFailoverResult, dV as SettleCodexCredentialLeaseLossResult, dW as SlackBotInstallCallbackFailureReason, dX as SlackBotInstallCallbackFailureStage, dY as SlackBotLifecycleSuccessAuditError, dZ as SlackBotPostOperation, d_ as SteerQueueCommandResult, d$ as StoreIntegrationOAuthClientInput, e0 as StoredIntegrationOAuthClient, e1 as StreamAcknowledgment, e2 as SubmitHumanPromptResult, e3 as ToolspaceCallReservation, e4 as ToolspaceTurnAttemptClaims, e5 as TurnAttemptFenceRejectReason, e6 as UpdateConnectionInput, e7 as UpdateImportBatchCountsInput, e8 as UpdateKnowledgeMemoryInput, e9 as UpdateScheduledTaskInput, ea as UpdateSessionMcpApprovalPolicyResult, eb as UpdateSessionMcpServerCredentialsInput, ec as UpdateSessionMcpServerCredentialsResult, ed as UpsertCodexSubscriptionCredentialResult, ee as UserLookup, ef as VariableSetForRun, eg as WORKSPACE_MEMORY_BLOCK_EMPTY, eh as WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED, ei as WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET, ej as WorkspaceCaptureCommitResult, ek as WorkspaceCaptureGcPlan, el as WorkspaceCaptureGcRow, em as WorkspaceCaptureRow, en as WorkspaceControlLockMode, eo as WorkspaceControlMutationResult, ep as WorkspaceControlRow, eq as WorkspaceEnvironmentForRun, er as WorkspaceInstructionPolicyConflictError, es as WorkspaceInstructionPolicyInvalidOperationError, et as WorkspaceInstructionPolicyLegacyUnavailableError, eu as WorkspaceInstructionPolicyNotFoundError, ev as WorkspaceMemoryOrigin, ew as WorkspaceMemorySearchInput, ex as WorkspaceMemorySearchMode, ey as WorkspaceMemorySearchResult, ez as WorkspaceModelPolicy, eA as abandonCodexResetRedemptionBeforeProvider, eB as abandonRecordingForTurnAttempt, eC as acceptSessionApprovalDecision, eD as acceptSessionHumanInputResponse, eE as accrueWarmSeconds, eF as acknowledgeHostExportBatch, eG as acquireCodexCredentialLease, eH as acquireLease, eI as activateRigVersion, eJ as activateWorkspaceInstructionPolicyRevision, eK as addSessionSystemUpdate, eL as addSessionSystemUpdateWithSourceMutation, eM as admitToolspaceTurnAttempt, eN as adoptCodexResetRedemptionAttempt, eO as advanceWorkspaceGeneration, eP as advanceWorkspaceGenerationForDirectRequest, eQ as advanceWorkspaceGenerationForRetainedProcess, eR as allAccountPermissions, eS as allWorkspacePermissions, eT as appendSessionEventToSandboxGroup, eU as appendSessionEvents, eV as appendSessionEventsAndUpdateSession, eW as appendSessionEventsForTurnAttempt, eX as appendSessionEventsWithLockedSessionUpdate, eY as appendSessionHistoryItems, eZ as applyContextCompaction, e_ as applyCreditDebitUpToBalance, e$ as applyCreditLedgerEntry, f0 as applySessionTurnSettlement, f1 as approveDeviceEnrollmentRequest, f2 as areGitHubRepositoriesAllowedForWorkspace, f3 as armCodexCapacityWait, f4 as assertAgentCommandAuthorityInTransaction, f5 as assertRuntimeDatabasePosture, f6 as autoResumeSessionBranchInTransaction, f7 as beginRigChangeVerificationAttempt, f8 as beginSandboxRematerialization, f9 as bindAuthorizedGitHubInstallationRepositories, fa as bindGitHubInstallationRepositories, fb as bootstrapWorkspace, fc as buildChildCompletionDigest, fd as buildCodexTokenResolver, fe as buildConnectionTokenResolver, ff as buildHostConnectionTokenResolver, fg as canonicalSessionCommandHash, fh as claimCodexResetRedemption, fi as claimExpiredFileUploadCleanup, fj as claimFileUploadCleanup, fk as claimHostExportBatch, fl as claimPendingSessionSystemUpdateOutbox, fm as claimPendingSessionWorkflowWakes, fn as claimSessionWorkForAttempt, fo as claimSlackBotPostOperation, fp as claimTerminalRetainedProcesses, fq as clearDurablePendingSessionToolCalls, fr as clearEnrollmentWentOffline, fs as clearPendingSessionToolspaceCall, ft as clearSessionContext, fu as clearSessionGoal, fv as clearedContextMarkerItem, fw as closePtySession, fx as closeSessionTurnAttemptInTransaction, fy as codexCapacityRefreshBackoffMs, fz as commitWarmingToWarm, fA as completeCodexResetRedemption, fB as completeExpiredFileUploadCleanup, fC as completeFileUpload, fD as completeFileUploadCleanup, fE as completeSlackBotPostOperation, fF as computeWorkspaceCaptureGcPlan, fG as confirmDrainCold, fH as consumeDeviceEnrollmentRequest, fI as consumeIntegrationOAuthStateNonce, fJ as consumeNewSessionDraftInTransaction, fK as correctWorkspaceMemory, fL as countActiveApiKeysForWorkspace, fM as countActiveRetainedProcessesByOwnerState, fN as countActiveSessionHistoryItems, fO as countActiveSessionsForWorkspace, fP as countActiveSessionsUsingEnvironment, fQ as countActiveSessionsUsingVariableSet, fR as countConsecutiveReactiveRotations, fS as countExpiredDrainingSandboxLeases, fT as countQueuedTurns, fU as countRigs, fV as countSandboxLeasesByLiveness, fW as countScheduledTasksForWorkspace, fX as countScheduledTasksUsingEnvironment, fY as countScheduledTasksUsingVariableSet, fZ as countSessionHistoryItems, f_ as countSessionsUsingRig, f$ as countVariableSets, g0 as countWorkspaceEnvironments, g1 as countWorkspacesForAccount, g2 as createApiKey, g3 as createConnection, g4 as createConnectionWithSlackBotSuccessAudit, g5 as createDb, g6 as createDeviceEnrollmentRequest, g7 as createEnrollment, g8 as createFileUpload, g9 as createImportBatch, ga as createKnowledgeMemory, gb as createRig, gc as createRigChange, gd as createRigVersion, ge as createRigVersionForChangePromotion, gf as createSandbox, gg as createScheduledTask, gh as createScheduledTaskRun, gi as createSession, gj as createSessionGoal, gk as createSessionMcpServers, gl as createSessionWithIdempotencyKey, gm as createSessionWithIdempotencyKeyResult, gn as createSocialConnection, go as createSocialPost, gp as createVariableSet, gq as createWorkspace, gr as createWorkspaceEnvironment, gs as createWorkspaceInstructionPolicyDraft, gt as databaseFailureCode, gu as deadLetterHostExportHead, gv as decodeSessionListCursor, gw as decryptEnvironmentValue, gw as decryptVariableSetValue, gx as decryptedCapabilityHeaders, gy as deferRetainedProcessReconciliation, gz as deleteGitHubInstallationBinding, gA as deleteRecording, gB as deleteRig, gC as deleteRigIfNoActiveSessions, gD as deleteScheduledTask, gE as deleteSessionQueueItemInTransaction, gF as deleteVariableSet, gG as deleteVariableSetVariable, gH as deleteWorkspace, gI as deleteWorkspaceCaptureRows, gJ as deleteWorkspaceEnvironment, gK as deleteWorkspaceEnvironmentVariable, gL as deleteWorkspacePack, gM as denyDeviceEnrollmentRequest, gN as diffWorkspaceInstructionPolicyContent, gO as diffWorkspaceInstructionPolicyRevisions, gP as disableCapabilityInstallation, gQ as disableHostExportConsumer, gR as disconnectAllCodexAccounts, gS as disconnectCodexAccount, gT as editQueuedTurnInTransaction, gU as enableCapabilityInstallation, gV as enablePackInstallation, gW as encodeSessionListCursor, gX as encryptEnvironmentValue, gX as encryptVariableSetValue, gY as enqueueSessionTurn, gZ as enqueueSessionWorkflowWake, g_ as enqueueSessionWorkflowWakeIfRunnable, g$ as enqueueSessionWorkflowWakeInTransaction, h0 as ensureCodexRotationSettings, h1 as ensureManagedAccessForUser, h2 as estimateMemoryTokens, h3 as evaluateGoalContinuation, h4 as evaluateRuntimeDatabasePosture, h5 as evaluateSessionControl, h6 as evaluateSessionControls, h7 as evaluateSessionDiscoveryControls, h8 as expireSessionHumanInputRequest, h9 as failHostExportBatch, ha as failSandboxRematerialization, hb as failWarmingToCold, hc as fenceCodexResetRedemptionSend, hd as fetchCodexRateLimitResetCreditsForAccount, he as fetchCodexUsageForAccount, hf as finalizeEnrollmentByToken, hg as findActiveApiKeyByHash, hh as forceDrainOverLimitViewerOnlyBoxes, hi as frozenInitiatorForCommandActor, hj as getActiveSessionHistoryItems, hk as getActiveSessionTurnForExecution, hl as getAnySessionInGroup, hm as getBillingBalance, hn as getBillingCustomer, ho as getCapabilityCatalogItem, hp as getCapabilityInstallation, hq as getCodexCapacityWaitForSession, hr as getCodexCredentialStatus, hs as getCodexResetRedemptionAttempt, ht as getCodexRotationSettings, hu as getComposerDraftInTransaction, hv as getConnectionMetadata, hw as getDeviceEnrollmentRequestByDeviceCode, hx as getEnrollment, hy as getFile, hz as getFileUpload, hA as getHostExportConsumerStatus, hB as getHumanInputResumeForEvent, hC as getKnowledgeMemory, hD as getLatestRunState, hE as getLatestStartedSessionTurn, hF as getManagedAccount, hG as getManagedUserByEmail, hH as getMaterializedSandboxFileResources, hI as getNestedAgentDepthDeploymentPolicy, hJ as getNewSessionDraftInTransaction, hK as getOpenPtySession, hL as getOrCreateSessionSystemUpdateOutbox, hM as getPackInstallation, hN as getPendingDeviceEnrollmentRequestByUserCode, hO as getPendingDeviceEnrollmentRequestByUserCodeGlobal, hP as getRecording, hQ as getRetainedFileArtifact, hR as getRetainedProcess, hS as getRig, hT as getRigByName, hU as getRigChange, hV as getRigName, hW as getRigVersion, hX as getRigVersionById, hY as getSandbox, hZ as getSandboxSessionEnvelope, h_ as getScheduledTask, h$ as getSession, i0 as getSessionAttemptActivityRef, i1 as getSessionByCreateIdempotencyKey, i2 as getSessionCodexState, i3 as getSessionEvent, i4 as getSessionEventByClientEventId, i5 as getSessionForSubject, i6 as getSessionGoal, i7 as getSessionGoalWithContinuation, i8 as getSessionHistoryItems, i9 as getSessionHumanInputRequest, ia as getSessionLineage, ib as getSessionQueueSnapshot, ic as getSessionRootId, id as getSessionSpawnDenial, ie as getSessionSpawnDenialByIdempotencyKey, ig as getSessionSystemUpdateOutboxByDedupeKey, ih as getSessionTurn, ii as getSessionTurnForAttempt, ij as getSlackBotPostOperation, ik as getSocialConnection, il as getStoredCapabilityHeaderCiphertext, im as getStreamAcknowledgment, io as getVariableSet, ip as getVariableSetByName, iq as getVariableSetValuesForRun, ir as getWorkspace, is as getWorkspaceControlEvent, it as getWorkspaceDefaultRigId, iu as getWorkspaceEnvironment, iv as getWorkspaceEnvironmentByName, iw as getWorkspaceEnvironmentValuesForRun, ix as getWorkspaceGrant, iy as getWorkspaceInstructionPolicyRevision, iz as getWorkspaceModelPolicy, iA as getWorkspacePack, iB as grantWorkspaceAccess, iC as hasAuditableGitHubInstallationAuthority, iD as hasCreditLedgerEntry, iE as hashMemoryText, iF as heartbeatCodexCredentialLease, iG as heartbeatCodexCredentialLeaseUntil, iH as heartbeatLeaseHolder, iI as importLegacyWorkspaceInstructionPolicyDraft, iJ as ingestMachineMetricsSample, iK as initializeSessionStartAtomically, iL as insertFailedWorkspaceCapture, iM as insertMachineMetricsSeries, iN as insertPtySession, iO as insertRecording, iP as insertWorkspaceCapture, iQ as inspectRuntimeDatabasePosture, iR as installOrReadTurnExecutionPolicyForAttempt, iS as interruptedToolCallResult, iT as isCodexBilledTurn, iU as isDatabasePersistenceFailure, iV as isMemoryTextTooLong, iW as isRetryablePersistenceSqlState, iX as isSessionCompactionRequested, iY as isSessionEventPersistenceError, iZ as isStripeWebhookProcessed, i_ as latestWorkspaceCapture, i$ as listApiKeys, j0 as listCapabilityCatalogItems, j1 as listCapabilityInstallations, j2 as listCodexAccountStatuses, j3 as listCodexResetRedemptionRecoveries, j4 as listConnectionsMetadata, j5 as listCreditBalancesByAccount, j6 as listDistinctRigVersionIdsInGroup, j7 as listDistinctVariableSetIdsInGroup, j8 as listEnabledMcpCapabilityServers, j9 as listEnrollments, ja as listGitHubInstallationAccessForWorkspace, jb as listGitHubInstallationIdsForWorkspace, jc as listGitHubInstallationsForWorkspace, jd as listKnowledgeMemories, je as listLiveModalSandboxLeaseAttributions, jf as listMeterableWarmLeases, jg as listOpenPtySessions, jh as listOutstandingSessionSystemUpdates, ji as listPackInstallations, jj as listPendingCodexCapacityWakeTargets, jk as listPendingSessionTurns, jl as listRecordings, jm as listRegistryCatalogSurfaceKeys, jn as listRigChangeMonitoringSummaries, jo as listRigChanges, jp as listRigVersionMonitoringSummaries, jq as listRigVersions, jr as listRigs, js as listSandboxes, jt as listScheduledTaskRuns, ju as listScheduledTasks, jv as listSessionDiscoverySummaries, jw as listSessionEventPage, jx as listSessionEvents, jy as listSessionHumanInputRequests, jz as listSessionIdsInGroup, jA as listSessionMcpServerMetadata, jB as listSessionMcpServersForChildInheritance, jC as listSessionMcpServersForRun, jD as listSessionSpawnDenials, jE as listSessionSystemUpdatesForTurn, jF as listSessionTurns, jG as listSessions, jH as listSessionsForSubject, jI as listSocialConnections, jJ as listSocialPosts, jK as listUsageEvents, jL as listVariableSets, jM as listWorkspaceControlEvents, jN as listWorkspaceEnvironments, jO as listWorkspaceInstructionPolicyRevisions, jP as listWorkspaceMembers, jQ as listWorkspacePacks, jR as listWorkspacesForSubject, jS as loadCodexCredentialForRun, jT as loadConnectionCredentialForBroker, jU as loadIntegrationOAuthClient, jV as loadVariableSetForRun, jW as loadWorkspaceEnvironmentForRun, jX as lockSessionEventWriteRows, jY as lockWorkspaceInferenceControl, jZ as markFileUploadFailed, j_ as markSandboxFileResourcesMaterialized, j$ as markSandboxProviderReady, k0 as markSandboxRestoreVerifying, k1 as markScheduledTaskRunFailedIfQueued, k2 as markSessionAttemptQuiesced, k3 as markSessionSystemUpdateOutboxDeliveredInTransaction, k4 as markSessionSystemUpdateOutboxFailed, k5 as markSessionWorkflowWakeDelivered, k6 as markSessionWorkflowWakeFailed, k7 as markStaleRegistryCatalogItems, k8 as markStripeWebhookProcessed, k9 as markWarmLeaseInstanceLost, ka as materializeGoalContinuation, kb as mcpServerIdForCapability, kc as moveQueuedTurnInTransaction, kd as mutateSessionControlInTransaction, ke as mutateWorkspaceControlInTransaction, kf as nestedPostgresSqlState, kg as newSessionDraftToolsProvided, kh as nextSessionHistoryPosition, ki as normalizeBearerScheme, kj as normalizeMemoryText, kk as orphanedResultRowIndicesForRepair, kl as peekSessionWork, km as persistDrainSnapshot, kn as persistWarmSnapshot, ko as planWorkspaceCaptureGc, kp as projectEffectiveControlForRelatedAccess, kq as projectSessionForRelatedAccess, provisionRoles, kr as pruneHostExportOutbox, ks as publicNewSessionDraftOptions, kt as quarantineCodexCredentialForLease, ku as reArmDrainingLease, kv as readActiveSandbox, kw as readLease, kx as readMachineMetricsLatest, ky as readMachineMetricsLatestForWorkspace, kz as readMachineMetricsSeries, kA as readWorkspaceArchiveCapturePreflight, kB as reapExpiredSessionListSnapshots, kC as reapStaleLeaseHolders, kD as reapStaleLeaseHoldersGlobal, kE as reconcileCodexCapacityWait, kF as reconcileColdLostLeaseInstanceBlockers, kG as reconcileSessionAttemptQuiescence, kH as recordAuditEvent, kI as recordCodexAccountConnectors, kJ as recordCodexAccountUsage, kK as recordCodexAccountUsageWithWakeTargets, kL as recordCodexTokenRefresh, kM as recordConnectionTokenRefresh, kN as recordConnectionUsed, kO as recordLeaseDataPlaneUrl, kP as recordLeaseTerminalDataPlaneUrl, kQ as recordPendingSessionToolCallResult, kR as recordRetainedProcessReconciliationProof, kS as recordSessionActiveCodexCredential, kT as recordSkippedContextCompaction, kU as recordSlackBotInstallCallbackFailure, kV as recordStreamAcknowledgment, kW as recordStripeWebhookEvent, kX as recordUsageEvent, kY as recordWarmingSandboxCreated, kZ as recoverSessionDispatch, k_ as refreshOAuthConnectionCredential, k$ as registerDbBinding, l0 as registerHostExportConsumer, l1 as registerInternalUpdateWakeInTransaction, l2 as registerPendingSessionToolCall, l3 as registerSessionTurnAttemptClaim, l4 as registerSessionWorkflowWakeInTransaction, l5 as registerWorkspacePack, l6 as releaseCodexCredentialLease, l7 as releaseCodexResetRedemptionClaim, l8 as releaseLeaseHolder, l9 as releaseSlackBotPostOperationClaim, la as removeWorkspaceMember, lb as renameCodexAccount, lc as renderWorkspaceMemoryBlock, ld as replaceIntegrationOAuthClient, le as requestSessionCompaction, lf as requestSessionTurnRecovery, lg as requireFile, lh as requireScheduledTask, li as requireSession, lj as requireSocialConnection, lk as requireWorkspace, ll as reserveSessionCommandReceipt, lm as reserveToolspaceCallForAttempt, ln as resolveWorkspaceMemoryBlock, lo as resumeHostExportConsumer, lp as retainWorkspaceMutationProcess, lq as retainedProcessReconciliationProof, lr as retainedProcessSettlementIdentity, ls as retireHostExportConsumer, lt as revokeApiKey, lu as revokeConnection, lv as revokeConnectionWithSlackBotSuccessAudit, lw as revokeEnrollment, lx as revokeViewer, ly as rewindHostExportConsumer, lz as rlsContextForWorkspace, lA as rlsStrategyFor, lB as rollbackWorkspaceInstructionPolicyRevision, lC as rotateWorkspaceArchives, lD as runIdempotentPersistenceTransaction, lE as runtimeDatabaseReadyCheck, lF as safeDatabaseErrorFacts, lG as sanitizeEventPayload, lH as sanitizeEventString, lI as sanitizeMemoryText, lJ as sanitizeModelPayload, lK as saveComposerDraftInTransaction, lL as saveNewSessionDraftInTransaction, lM as saveRunState, lN as saveWorkspaceMemory, lO as searchWorkspaceMemories, lP as seedNewSessionDraftInTransaction, lQ as sendAgentMessageInTransaction, lR as serializeEffectiveSessionControl, lS as sessionAuthorizationScopeFilter, lT as sessionSubject, lU as sessionTreeStatsForSessions, lV as sessionsWithActiveOpOnEnrollment, lW as setActiveCodexCredential, lX as setActiveSandbox, lY as setCodexCredentialExhausted, lZ as setCodexCredentialExhaustedWithWakeTargets, l_ as setCodexCredentialStatus, l$ as setCodexCredentialStatusById, m0 as setConnectionStatus, m1 as setEnrollmentDisplayState, m2 as setEnrollmentOpStreamState, m3 as setEnrollmentWentOffline, m4 as setInitialActiveCodexCredential, m5 as setRlsContext, m6 as setSessionCodexPin, m7 as setSessionGoalLastContinuationTurn, m8 as setSessionGoalStatus, m9 as setSessionGoalStatusWithEvent, ma as setSessionLastInputTokensForTurnAttempt, mb as setSessionPin, mc as setSubjectRlsContext, md as setTemporalWorkflowId, me as setVariableSetVariable, mf as setWorkspaceDefaultRig, mg as setWorkspaceEnvironmentVariable, mh as settleCodexCredentialFailover, mi as settleCodexCredentialLeaseLoss, mj as settleRetainedProcess, mk as settleScheduledTaskRunInTransaction, ml as settleSessionAttemptInterruptions, mm as settleSessionIdleWithParentOutbox, mn as shortMemoryId, mo as steerAgentSessionInTransaction, mp as steerQueuedTurnInTransaction, mq as storeIntegrationOAuthClient, mr as submitHumanPromptInTransaction, ms as sumUsageQuantity, mt as supersedeSessionCurrentDirectionInTransaction, mu as touchEnrollmentLastSeen, mv as touchLeaseHolder, mw as updateCodexAllocatorEligibility, mx as updateCodexRotationSettings, my as updateConnection, mz as updateConnectionWithSlackBotSuccessAudit, mA as updateImportBatchCounts, mB as updateKnowledgeMemory, mC as updatePackInstallationStatus, mD as updatePtySessionActivity, mE as updateRecording, mF as updateRig, mG as updateRigChangeStatus, mH as updateScheduledTask, mI as updateScheduledTaskRun, mJ as updateSessionCommandReceiptResult, mK as updateSessionGoal, mL as updateSessionGoalWithEvent, mM as updateSessionMcpApprovalPolicy, mN as updateSessionMcpServerCredentials, mO as updateSessionTitle, mP as updateVariableSet, mQ as updateWorkspace, mR as updateWorkspaceEnvironment, mS as updateWorkspaceSettings, mT as upsertBillingCustomer, mU as upsertCapabilityCatalogItem, mV as upsertCodexSubscriptionCredential, mW as upsertGitHubInstallation, mX as upsertMachineMetricsLatest, mY as upsertRegistryCapabilityCatalogItem, mZ as upsertSandboxSessionEnvelope, m_ as upsertSessionGoal, m$ as upsertSessionGoalWithEvent, n0 as upsertWorkspaceModelPolicy, n1 as validateHumanInputResponse, n2 as verifyDirectWorkspaceMutationSettlement, n3 as verifyRetainedProcessMutationSettlement, n4 as verifyWorkspaceMutationSettlement, n5 as withAccountRls, n6 as withCodexCapacityMutation, n7 as withCodexCredentialRefreshLock, n8 as withCodexTokenDeadline, n9 as withRlsContext, na as withWorkspaceRls, nb as withWorkspaceSubjectRls, nc as withWorkspaceUsageLock, nd as workspaceCaptureAtRevision, ne as workspaceCodexSubscriptionActive } from './provision-roles.js';
 import 'drizzle-orm/pg-core';
 import 'postgres';
-import './schema-D-hyrsFt.js';
+import './schema-FoPub9yt.js';
 export { migrate, runMigrations } from './migrate.js';
 export { isPrivateAddress } from '@opengeni/network';