@opengeni/db 0.13.1 → 0.14.0

package/dist/provision-roles.d.ts

@@ -1,10 +1,10 @@
-import { TurnInitiatorContext, SessionMcpApprovalPolicy, TurnInitiator, ResourceRef, ToolRef, ReasoningEffort, TurnExecutionPolicyV1, NewSessionDraftOptions, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyTarget, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, SecretForRedaction, KnowledgeMemoryKind, McpCredentialsRequest, McpCredentialAuthNeededReason, McpConnectionResourceScope, ConnectionCredentialsPort, SessionEvent, SessionStatus, SessionHumanInputRequest, SystemUpdateClassification, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdate, SessionEventType, SessionTurnStatus, HumanInputQuestion, Permission, SessionTurn, ConnectionKind, ConnectionStatus, ConnectionMetadata, KnowledgeMemory, CapabilityKind, CapabilitySource, KnowledgeMemoryStatus, KnowledgeSourceRef, ScheduledTaskStatus, ScheduledTaskScheduleSpec, ScheduledTaskRunMode, ScheduledTaskOverlapPolicy, ScheduledTaskAgentConfig, SessionGoalCreatedBy, McpServerConnectionRef as McpServerConnectionRef$1, SocialProvider, SocialConnectionStatus, Session, SessionTurnSource, SandboxBackend, SandboxOs, FileAsset, FileUploadStatus, GitHubRepositoryScope, GitHubInstallationAuthorityKind, SessionGoal, SessionEventReadDirection, SessionEventSemanticClass, SessionEventPayloadMode, SessionAuthorizationListScope, CapabilityPack, RigChangeKind, RigChangeStatus, RigCheck, SessionToolPolicy, SessionGoalStatus, LineageNode, SessionMcpServerMetadata, RigVersion, BillingBalance, RigChange, AccessContext, HostEventExportBatch, HostUsageExportBatch, ApiKey, Rig, ScheduledTask, ScheduledTaskTriggerType, ScheduledTaskRun, SocialConnection, SocialPost, VariableSet, Workspace, CapabilityInstallation, PackInstallation, CapabilityCatalogItem, HumanInputResponse, ManagedAccount, SessionQueueSnapshot, WorkspaceControlEvent, AccessGrant, WorkspaceRegisteredPack, SessionListResponse, UsageEvent, WorkspaceMember, VariableSetVariableMetadata, PackInstallationStatus, ScheduledTaskRunStatus } from '@opengeni/contracts';
+import { TurnInitiatorContext, SessionMcpApprovalPolicy, TurnInitiator, ResourceRef, ToolRef, ReasoningEffort, TurnExecutionPolicyV1, NewSessionDraftOptions, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyTarget, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, SecretForRedaction, KnowledgeMemoryKind, McpCredentialsRequest, McpCredentialAuthNeededReason, McpConnectionResourceScope, ConnectionCredentialsPort, SessionEvent, SessionStatus, SessionHumanInputRequest, SystemUpdateClassification, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdate, SessionEventType, SessionTurnStatus, HumanInputQuestion, Permission, SessionTurn, ConnectionKind, ConnectionStatus, ConnectionMetadata, KnowledgeMemory, CapabilityKind, CapabilitySource, KnowledgeMemoryStatus, KnowledgeSourceRef, ScheduledTaskStatus, ScheduledTaskScheduleSpec, ScheduledTaskRunMode, ScheduledTaskOverlapPolicy, ScheduledTaskAgentConfig, SessionGoalCreatedBy, McpServerConnectionRef as McpServerConnectionRef$1, SocialProvider, SocialConnectionStatus, Session, SessionTurnSource, SandboxBackend, SandboxOs, FileAsset, FileUploadStatus, GitHubRepositoryScope, GitHubInstallationAuthorityKind, SessionGoal, SessionEventReadDirection, SessionEventSemanticClass, SessionEventPayloadMode, SessionAuthorizationListScope, CapabilityPack, RigChangeKind, RigChangeStatus, RigCheck, SessionSkill, SessionToolPolicy, FirstPartyMcpToolName, SessionGoalStatus, LineageNode, SessionMcpServerMetadata, RigVersion, BillingBalance, RigChange, AccessContext, HostEventExportBatch, HostUsageExportBatch, ApiKey, Rig, ScheduledTask, ScheduledTaskTriggerType, ScheduledTaskRun, SocialConnection, SocialPost, VariableSet, Workspace, CapabilityInstallation, PackInstallation, CapabilityCatalogItem, HumanInputResponse, ManagedAccount, SessionQueueSnapshot, WorkspaceControlEvent, AccessGrant, WorkspaceRegisteredPack, SessionListResponse, UsageEvent, WorkspaceMember, VariableSetVariableMetadata, PackInstallationStatus, ScheduledTaskRunStatus } from '@opengeni/contracts';
 import { environmentsEncryptionKeyBytes, Settings, McpServerConnectionRef } from '@opengeni/config';
 import { refreshCodexToken, CodexRateLimitResetCreditsDetails, ResetCreditFetchFailureReason, CodexTokenSnapshot, CodexFetch, CodexUsagePayload } from '@opengeni/codex';
 import { SQL } from 'drizzle-orm';
 import { PgDatabase, PgTransactionConfig } from 'drizzle-orm/pg-core';
 import postgres from 'postgres';
-import { s as sessionCommandReceipts, w as workspaces, a as sessions, b as sessionTurns, c as sessionTurnAttempts, d as composerDrafts, n as newSessionDrafts, e as schema, f as enrollmentOsValues, g as enrollmentExposureValues, h as deviceEnrollmentStatusValues, i as enrollmentStatusValues, j as sandboxKindValues, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues } from './schema-D-hyrsFt.js';
+import { s as sessionCommandReceipts, w as workspaces, a as sessions, b as sessionTurns, c as sessionTurnAttempts, d as composerDrafts, n as newSessionDrafts, e as schema, f as enrollmentOsValues, g as enrollmentExposureValues, h as deviceEnrollmentStatusValues, i as enrollmentStatusValues, j as sandboxKindValues, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues } from './schema-FoPub9yt.js';
 import './migrate.js';
 import { FetchLike, DnsLookup } from '@opengeni/network';
 
@@ -2123,6 +2123,38 @@ declare function listConnectionsMetadata(db: Database, workspaceId: string, subj
 declare function getConnectionMetadata(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification | null>;
 declare function updateConnection(db: Database, input: UpdateConnectionInput): Promise<ConnectionMetadataWithVerification | null>;
 declare function revokeConnection(db: Database, workspaceId: string, connectionId: string, updatedBySubjectId?: string | null): Promise<ConnectionMetadataWithVerification | null>;
+declare class SlackBotLifecycleSuccessAuditError extends Error {
+    constructor();
+}
+type SlackBotLifecycleSuccessAuditInput = {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    credentialRole: string;
+    credentialLabel: string;
+    slackTeamId: string;
+};
+declare function createConnectionWithSlackBotSuccessAudit(db: Database, input: SlackBotLifecycleSuccessAuditInput & {
+    connection: CreateConnectionInput;
+}): Promise<ConnectionMetadataWithVerification>;
+declare function updateConnectionWithSlackBotSuccessAudit(db: Database, input: SlackBotLifecycleSuccessAuditInput & {
+    connection: UpdateConnectionInput;
+}): Promise<ConnectionMetadataWithVerification | null>;
+declare function revokeConnectionWithSlackBotSuccessAudit(db: Database, input: SlackBotLifecycleSuccessAuditInput & {
+    connectionId: string;
+    expectedVersion: number;
+}): Promise<ConnectionMetadataWithVerification | null>;
+type SlackBotInstallCallbackFailureStage = "permission_check" | "nonce_consume" | "provider_denial" | "code_exchange" | "credential_verification" | "permission_recheck" | "principal_validation" | "persistence";
+type SlackBotInstallCallbackFailureReason = "permission_lost" | "state_replayed" | "provider_denied" | "missing_code" | "exchange_failed" | "scope_mismatch" | "identity_mismatch" | "credential_verification_failed" | "connection_conflict" | "principal_mismatch" | "persistence_failed" | "success_audit_failed";
+declare function recordSlackBotInstallCallbackFailure(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    callbackDigest: string;
+    installMode: "connect" | "reinstall";
+    stage: SlackBotInstallCallbackFailureStage;
+    reason: SlackBotInstallCallbackFailureReason;
+}): Promise<boolean>;
 type ClaimSlackBotPostOperationResult = {
     kind: "claimed" | "in_progress" | "completed";
     operation: SlackBotPostOperation;
@@ -2190,12 +2222,14 @@ declare function recordConnectionTokenRefresh(db: Database, input: {
     expiresAt: Date | null;
     grantedScopes?: string[];
     lastRefreshAt: Date;
+    subjectId?: string | null;
 }): Promise<boolean>;
 declare function setConnectionStatus(db: Database, workspaceId: string, status: ConnectionStatus, lastError: string | null, guard: {
     id: string;
     version: number;
+    subjectId?: string | null;
 }): Promise<boolean>;
-declare function recordConnectionUsed(db: Database, workspaceId: string, connectionId: string): Promise<void>;
+declare function recordConnectionUsed(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<void>;
 declare function loadIntegrationOAuthClient(db: Database, settings: Settings, issuer: string): Promise<IntegrationOAuthClientForUse | null>;
 declare function storeIntegrationOAuthClient(db: Database, input: StoreIntegrationOAuthClientInput): Promise<StoredIntegrationOAuthClient>;
 declare function replaceIntegrationOAuthClient(db: Database, input: ReplaceIntegrationOAuthClientInput): Promise<StoredIntegrationOAuthClient>;
@@ -3435,6 +3469,7 @@ type SessionCreateInput = {
     initialMessage: string;
     initialTurnInstructions?: string | null;
     resources: ResourceRef[];
+    skills?: SessionSkill[];
     tools?: ToolRef[];
     toolPolicy?: SessionToolPolicy | null;
     metadata: Record<string, unknown>;
@@ -3447,6 +3482,7 @@ type SessionCreateInput = {
     rigId?: string | null;
     rigVersionId?: string | null;
     firstPartyMcpPermissions?: Permission[] | null;
+    firstPartyMcpTools?: FirstPartyMcpToolName[] | null;
     instructions?: string | null;
     parentSessionId?: string | null;
     createIdempotencyKey?: string | null;
@@ -3689,8 +3725,10 @@ declare function getSessionRootId(db: Database, workspaceId: string, sessionId:
 /**
  * Read the full lineage slice around a session. Every recursive step carries
  * workspace_id as a hard predicate; a foreign parent/child id is invisible even
- * before RLS is considered. Ancestors are capped at 10 and returned root-first.
- * Descendants are capped at depth 5 and 200 total rows, returned as a nested tree.
+ * before RLS is considered. Up to 63 ancestors are returned root-first; an
+ * invalid, cyclic, foreign, or deeper chain fails closed instead of presenting
+ * a partial path as if it were rooted. Descendants are capped at depth 5 and
+ * 200 total rows, returned as a nested tree.
  */
 declare function getSessionLineage(db: Database, workspaceId: string, sessionId: string): Promise<SessionLineage | null>;
 /**
@@ -5968,6 +6006,48 @@ declare function markSessionAttemptQuiesced(db: Database, input: {
      * receipt. */
     allowUninterrupted?: boolean;
 }): Promise<SessionEvent[]>;
+type ReconcileSessionAttemptQuiescenceResult = {
+    action: "quiesced";
+    events: SessionEvent[];
+} | {
+    action: "pending";
+    events: [];
+} | {
+    action: "stale";
+    events: [];
+};
+type SessionAttemptActivityRef = {
+    workflowId: string;
+    workflowRunId: string;
+    activityId: string;
+    quiesced: boolean;
+};
+declare function getSessionAttemptActivityRef(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    attemptId: string;
+    temporalWorkflowId: string;
+}): Promise<SessionAttemptActivityRef | null>;
+/**
+ * Recover the quiescence receipt when the original activity disappeared after
+ * its attempt was durably interrupted. The caller first proves through
+ * Temporal that the exact activity is absent or its server-owned heartbeat
+ * lease expired. The closed attempt then cannot admit another workspace writer,
+ * and every writer it did admit (including retained-process child writes) must
+ * carry a physical settlement before the ordinary receipt transaction is
+ * allowed to run.
+ */
+declare function reconcileSessionAttemptQuiescence(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    attemptId: string;
+    temporalWorkflowId: string;
+    temporalWorkflowRunId: string;
+    temporalActivityId: string;
+    activitySettled: boolean;
+}): Promise<ReconcileSessionAttemptQuiescenceResult>;
 /**
  * Settle every durable interruption cause for one exact first-class attempt.
  * Steer wins the logical-turn fate when causes coexist; effective control after
@@ -6316,12 +6396,13 @@ declare function enqueueSessionWorkflowWakeIfRunnable(db: Database, input: {
 declare function claimPendingSessionWorkflowWakes(db: Database, limit?: number): Promise<SessionWorkflowWake[]>;
 /**
  * Acknowledge an immediate post-commit signal only after it cannot strand an
- * accepted Agent Steer. Temporal accepting a signal is transport evidence, not
- * proof that a closing workflow observed Postgres or admitted its pending
- * direction. While active control still has an actionable Agent Steer, retain
- * the revision so the bounded outbox dispatcher retries signalWithStart. The
- * attempt-fenced claim consumes the update once; a real Pause is the typed
- * blocker and may acknowledge this revision because Resume commits a new one.
+ * accepted direction or an interrupted attempt awaiting writer-set proof.
+ * Temporal accepting a signal is transport evidence, not proof that a closing
+ * workflow observed Postgres. While active control still has an actionable
+ * Agent Steer or pending quiescence, retain the revision so the bounded outbox
+ * dispatcher retries signalWithStart. The attempt-fenced claim consumes an
+ * Agent Steer once; a real Pause is the typed blocker and may acknowledge this
+ * revision because Resume commits a new one.
  *
  * An older sender may advance only its own revision; it cannot clear a claim or
  * failure state belonging to a newer revision. The control -> workspace ->
@@ -6332,7 +6413,7 @@ type SessionWorkflowWakeDeliveryResult = {
     action: "acknowledged";
 } | {
     action: "pending_admission";
-    blocker: "pending_agent_steer";
+    blocker: "pending_agent_steer" | "pending_quiescence";
 };
 declare function markSessionWorkflowWakeDelivered(db: Database, input: Omit<SessionWorkflowWake, "interruptionRequested">): Promise<SessionWorkflowWakeDeliveryResult>;
 /** Record delivery failure; the claim already scheduled the bounded retry. */
@@ -6447,4 +6528,4 @@ declare function appendSessionEventsWithLockedSessionUpdate(db: Database, worksp
 }): Promise<SessionEvent[]>;
 declare function sessionSubject(workspaceId: string, sessionId: string): string;
 
-export { type CodexRateLimitResetCreditsAccountResult as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BeginSandboxRematerializationResult as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type ClearSessionContextResult as D, type CodexAccountStatus as E, type CodexAccountUsageSnapshot as F, type CodexAllocatorUpdateResult as G, type CodexAuthDeps as H, type CodexCapacityAvailabilityDecision as I, type CodexCapacityMutationResult as J, type CodexCapacityResetKind as K, type CodexCapacitySelectionContext as L, type CodexCapacityWait as M, type CodexCapacityWaitStatus as N, type CodexCapacityWakeTarget as O, type CodexCredentialForRun as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialLeaseCandidateFilter as Q, type CodexCredentialLeaseCandidateFilterResult as R, type CodexCredentialLeasePolicyScopeResolver as S, type CodexCredentialLeaseQuarantine as T, type CodexCredentialLeaseResult as U, type CodexCredentialLeaseSelection as V, type CodexCredentialLeaseSelectionContext as W, type CodexCredentialStatus as X, type CodexCredentialTokens as Y, type CodexLeaseAccountStatus as Z, type CodexPinSource as _, type AcceptSessionApprovalDecisionResult as a, type HostMcpCredentialResolverContext as a$, type CodexResetRedemptionAttempt as a0, type CodexResetRedemptionOutcome as a1, type CodexResetRedemptionRecovery as a2, type CodexResetRedemptionSendNotReadyReason as a3, type CodexResetRedemptionStatus as a4, type CodexRotationSettings as a5, type CodexRotationStrategy as a6, type CodexTokenDeadlineClock as a7, type CodexTokenDeadlineOptions as a8, type CompleteSlackBotPostOperationResult as a9, type EditQueueCommandResult as aA, type EffectiveControlBlocker as aB, type EffectiveControlResumeOption as aC, type EffectiveControlState as aD, type EffectiveSessionControl as aE, type EnableCapabilityInstallationInput as aF, type EnabledMcpCapabilityServer as aG, type EnqueueSessionTurnInput as aH, type EnrollmentExposure as aI, type EnrollmentOs as aJ, type EnrollmentRecord as aK, type EnrollmentStatus as aL, type ExpiredDrainingSandboxLeaseCount as aM, type ExpiredFileUploadCleanupClaim as aN, FORCE_RLS_TABLES as aO, type FenceCodexResetRedemptionSendResult as aP, type FileUploadCleanupClaimResult as aQ, type ForceDrainResult as aR, type FrozenTurnInitiator as aS, type GitHubInstallation as aT, type GitHubInstallationAccess as aU, GitHubInstallationAuthorityCommitError as aV, type GoalContinuationDecision as aW, type HostExportConsumerStatus as aX, type HostExportKind as aY, HostExportPayloadError as aZ, HostMcpCredentialBindingError as a_, type ComposerDraftRow as aa, type ConnectionBrokerDeps as ab, type ConnectionCredentialForBroker as ac, type ConnectionMetadataWithVerification as ad, ConnectionRefreshHttpError as ae, type ConsumeOAuthStateNonceInput as af, type CorrectWorkspaceMemoryInput as ag, type CorrectWorkspaceMemoryResult as ah, type CreateCapabilityCatalogItemInput as ai, type CreateConnectionInput as aj, type CreateDbOptions as ak, type CreateImportBatchInput as al, type CreateKnowledgeMemoryInput as am, type CreatePackInstallationInput as an, type CreateScheduledTaskInput as ao, type CreateSessionGoalInput as ap, type CreateSessionMcpServerInput as aq, type CreateSocialConnectionInput as ar, type CreateSocialPostInput as as, type CreditBalanceByAccount as at, type Database as au, type DatabaseFailureCode as av, type DbClient as aw, type DbSession as ax, type DeviceEnrollmentRequestRecord as ay, type DeviceEnrollmentStatus as az, type AcceptSessionHumanInputResponseResult as b, type ReconcileColdLostLeaseInstanceBlockersResult as b$, HostMcpCredentialScopeError as b0, HumanInputResponseValidationError as b1, type IdempotentPersistenceTransactionOptions as b2, type ImportBatch as b3, type InitializeSessionStartInput as b4, type InitializeSessionStartResult as b5, type InstallOrReadTurnExecutionPolicyForAttemptResult as b6, type IntegrationOAuthClientForUse as b7, type LeaseHolderKind as b8, type LeaseSnapshot as b9, type MarkWarmLeaseInstanceLostResult as bA, type MaterializeGoalContinuationResult as bB, type MemoryBlockRecord as bC, type MemoryEmbedder as bD, type MemorySanitizeResult as bE, type MeterableWarmLease as bF, NON_RLS_RUNTIME_TABLES as bG, type NestedAgentDepthDeploymentPolicy as bH, type NestedAgentDepthPolicySource as bI, NewSessionDraftAccessError as bJ, NewSessionDraftConflictError as bK, type NewSessionDraftRow as bL, PROTECTED_NO_DIRECT_DML_TABLES as bM, type PendingSessionToolCallInput as bN, type PersistenceFailureDetails as bO, type PersistenceRetryOutcome as bP, type QueueCommandConflictCode as bQ, QueueCommandConflictError as bR, type QueueCommandResult as bS, type QueuedTurnRow as bT, RUNTIME_DML_TABLES as bU, RUNTIME_FULL_DML_TABLES as bV, RUNTIME_READ_INSERT_TABLES as bW, RUNTIME_READ_ONLY_TABLES as bX, RUNTIME_TABLE_PRIVILEGES as bY, type ReapDrainable as bZ, type ReconcileCodexCapacityWaitResult as b_, type ListKnowledgeMemoryOptions as ba, type ListSessionEventPageOptions as bb, type ListSessionEventsOptions as bc, type ListSessionsForSubjectOptions as bd, type ListSessionsOptions as be, type LiveModalSandboxLeaseAttribution as bf, type LostProviderWorkspaceSettlement as bg, MACHINE_METRICS_SERIES_INTERVAL_MS as bh, MAX_INTERNAL_UPDATE_BATCH_BYTES as bi, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as bj, MAX_INTERNAL_UPDATE_BYTES as bk, MEMORY_ACTIVE_RECORD_CAP as bl, MEMORY_BLOCK_KIND_ORDER as bm, MEMORY_BLOCK_RECORD_LIMIT as bn, MEMORY_CORRECT_TOOL_DESCRIPTION as bo, MEMORY_KIND_SECTION_TITLES as bp, MEMORY_NEAR_DUP_COSINE_THRESHOLD as bq, MEMORY_NEAR_DUP_NEIGHBORS as br, MEMORY_SAVE_TOOL_DESCRIPTION as bs, MEMORY_SEARCH_DEFAULT_LIMIT as bt, MEMORY_SEARCH_MAX_LIMIT as bu, MEMORY_SEARCH_TOOL_DESCRIPTION as bv, MEMORY_TEXT_MAX_CHARS as bw, MEMORY_VISIBLE_RECORD_CAP as bx, type MachineMetricsRow as by, type MachineMetricsSample as bz, type AccrueWarmSecondsResult as c, SanitizedDatabasePersistenceCause as c$, type RecoverSessionDispatchInput as c0, type RecoverSessionDispatchResult as c1, type RefreshTransportOptions as c2, type RegisterWorkspacePackInput as c3, type RegistryCapabilityCatalogItemInput as c4, type RegistryCatalogSurfaceKey as c5, type ReplaceIntegrationOAuthClientInput as c6, type RequestSessionTurnRecoveryInput as c7, type RequestSessionTurnRecoveryResult as c8, type ResolveConnectionCredentialInput as c9, SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT as cA, SESSION_LIST_SNAPSHOT_MAX_IDS as cB, type SafeDatabaseErrorFacts as cC, type SandboxArchiveAvailability as cD, type SandboxArchiveRevision as cE, SandboxImageConflictError as cF, type SandboxKind as cG, type SandboxLeaseLiveness as cH, SandboxLeaseRecoveryBlockedError as cI, SandboxLeaseSupersededError as cJ, type SandboxOpenPtySessionRow as cK, type SandboxProviderExistence as cL, type SandboxPtyProcessIdentity as cM, type SandboxPtySessionRow as cN, type SandboxRecord as cO, type SandboxRecoveryState as cP, type SandboxRestoreStatus as cQ, type SandboxRetainedProcess as cR, type SandboxRetainedProcessIdentity as cS, SandboxRetainedProcessPromotionFencedError as cT, type SandboxRetainedProcessReconciliationClaim as cU, type SandboxRetainedProcessState as cV, SandboxRigConflictError as cW, type SandboxWorkspaceMutationAdmission as cX, SandboxWorkspaceMutationFencedError as cY, type SandboxWorkspaceMutationProviderOutcome as cZ, type SandboxWorkspaceReadiness as c_, type ResolveConnectionCredentialResult as ca, type RetainedFileArtifact as cb, type RetainedProcessProviderProof as cc, RigActiveVersionChangedError as cd, RigChangeAlreadyVerifyingError as ce, type RigChangeMonitoringSummary as cf, RigChangeTransitionError as cg, type RigVersionContentInput as ch, type RigVersionMonitoringSummary as ci, type RlsContext as cj, type RlsStrategy as ck, type RuntimeDatabaseIdentity as cl, type RuntimeDatabasePosture as cm, RuntimeDatabasePostureError as cn, type RuntimeDatabasePostureOptions as co, type RuntimeRoutinePosture as cp, type RuntimeSchemaPosture as cq, type RuntimeTableDmlPrivilege as cr, type RuntimeTablePosture as cs, type RuntimeTablePrivilegeContract as ct, SESSION_ANCESTRY_LIMIT as cu, SESSION_DISCOVERY_CONTROL_TARGET_LIMIT as cv, SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS as cw, SESSION_DISCOVERY_GOAL_MAX_CHARS as cx, SESSION_DISCOVERY_MESSAGE_MAX_CHARS as cy, SESSION_EVENT_DB_PAGE_MAX_BYTES as cz, type AcquireLeaseInput as d, type ToolspaceTurnAttemptClaims as d$, type SaveWorkspaceMemoryInput as d0, type SaveWorkspaceMemoryResult as d1, type SessionAttemptInterruptionSettlement as d2, type SessionCodexState as d3, type SessionCommandActor as d4, SessionCommandIdempotencyError as d5, type SessionCommandReceiptRow as d6, SessionContextBusyError as d7, SessionControlConflictError as d8, SessionControlInvariantError as d9, type SessionRecordingCodec as dA, type SessionRecordingMode as dB, type SessionRecordingRow as dC, type SessionRecordingState as dD, type SessionSpawnDenial as dE, type SessionSpawnDenialCode as dF, SessionSpawnDeniedDbError as dG, type SessionSystemUpdateOutboxDelivery as dH, SessionToolPolicyVersionConflictError as dI, type SessionTurnAttemptOutcome as dJ, type SessionTurnForExecution as dK, type SessionTurnRecordingSettlement as dL, type SessionWorkPeek as dM, type SessionWorkTrigger as dN, type SessionWorkflowWake as dO, type SessionWorkflowWakeDeliveryResult as dP, type SetSessionCodexPinOptions as dQ, type SetSessionGoalStatusEvent as dR, type SettleCodexCredentialFailoverResult as dS, type SettleCodexCredentialLeaseLossResult as dT, type SlackBotPostOperation as dU, type SteerQueueCommandResult as dV, type StoreIntegrationOAuthClientInput as dW, type StoredIntegrationOAuthClient as dX, type StreamAcknowledgment as dY, type SubmitHumanPromptResult as dZ, type ToolspaceCallReservation as d_, type SessionControlMutationResult as da, type SessionCreateDeniedResult as db, type SessionCreateInput as dc, type SessionCreateResult as dd, type SessionCreateSuccessResult as de, type SessionDepthPolicy as df, type SessionDiscoveryControl as dg, type SessionDiscoveryCursor as dh, type SessionDiscoveryOrderBy as di, type SessionDiscoverySummary as dj, type SessionEventPage as dk, SessionEventPersistenceError as dl, type SessionEventWriteLockInput as dm, type SessionEventWriteLocks as dn, type SessionGoalContinuationProjection as dp, SessionIdConflictError as dq, type SessionLineage as dr, SessionListAccessError as ds, type SessionListCursor as dt, SessionListCursorError as du, SessionListCursorExpiredError as dv, SessionListSnapshotLimitError as dw, type SessionMcpServerForRun as dx, SessionPinAccessError as dy, SessionPinVersionConflictError as dz, type AcquireLeaseResult as e, assertAgentCommandAuthorityInTransaction as e$, type TurnAttemptFenceRejectReason as e0, type UpdateConnectionInput as e1, type UpdateImportBatchCountsInput as e2, type UpdateKnowledgeMemoryInput as e3, type UpdateScheduledTaskInput as e4, type UpdateSessionMcpApprovalPolicyResult as e5, type UpdateSessionMcpServerCredentialsInput as e6, type UpdateSessionMcpServerCredentialsResult as e7, type UpsertCodexSubscriptionCredentialResult as e8, type UserLookup as e9, acknowledgeHostExportBatch as eA, acquireCodexCredentialLease as eB, acquireLease as eC, activateRigVersion as eD, activateWorkspaceInstructionPolicyRevision as eE, addSessionSystemUpdate as eF, addSessionSystemUpdateWithSourceMutation as eG, admitToolspaceTurnAttempt as eH, adoptCodexResetRedemptionAttempt as eI, advanceWorkspaceGeneration as eJ, advanceWorkspaceGenerationForDirectRequest as eK, advanceWorkspaceGenerationForRetainedProcess as eL, allAccountPermissions as eM, allWorkspacePermissions as eN, appendSessionEventToSandboxGroup as eO, appendSessionEvents as eP, appendSessionEventsAndUpdateSession as eQ, appendSessionEventsForTurnAttempt as eR, appendSessionEventsWithLockedSessionUpdate as eS, appendSessionHistoryItems as eT, applyContextCompaction as eU, applyCreditDebitUpToBalance as eV, applyCreditLedgerEntry as eW, applySessionTurnSettlement as eX, approveDeviceEnrollmentRequest as eY, areGitHubRepositoriesAllowedForWorkspace as eZ, armCodexCapacityWait as e_, type VariableSetForRun as ea, WORKSPACE_MEMORY_BLOCK_EMPTY as eb, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as ec, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as ed, type WorkspaceCaptureCommitResult as ee, type WorkspaceCaptureGcPlan as ef, type WorkspaceCaptureGcRow as eg, type WorkspaceCaptureRow as eh, type WorkspaceControlLockMode as ei, type WorkspaceControlMutationResult as ej, type WorkspaceControlRow as ek, type WorkspaceEnvironmentForRun as el, WorkspaceInstructionPolicyConflictError as em, WorkspaceInstructionPolicyInvalidOperationError as en, WorkspaceInstructionPolicyLegacyUnavailableError as eo, WorkspaceInstructionPolicyNotFoundError as ep, type WorkspaceMemoryOrigin as eq, type WorkspaceMemorySearchInput as er, type WorkspaceMemorySearchMode as es, type WorkspaceMemorySearchResult as et, type WorkspaceModelPolicy as eu, abandonCodexResetRedemptionBeforeProvider as ev, abandonRecordingForTurnAttempt as ew, acceptSessionApprovalDecision as ex, acceptSessionHumanInputResponse as ey, accrueWarmSeconds as ez, type ActiveRetainedProcessOwnerCount as f, createDb as f$, assertRuntimeDatabasePosture as f0, autoResumeSessionBranchInTransaction as f1, beginRigChangeVerificationAttempt as f2, beginSandboxRematerialization as f3, bindAuthorizedGitHubInstallationRepositories as f4, bindGitHubInstallationRepositories as f5, bootstrapWorkspace as f6, buildChildCompletionDigest as f7, buildCodexTokenResolver as f8, buildConnectionTokenResolver as f9, computeWorkspaceCaptureGcPlan as fA, confirmDrainCold as fB, consumeDeviceEnrollmentRequest as fC, consumeIntegrationOAuthStateNonce as fD, consumeNewSessionDraftInTransaction as fE, correctWorkspaceMemory as fF, countActiveApiKeysForWorkspace as fG, countActiveRetainedProcessesByOwnerState as fH, countActiveSessionHistoryItems as fI, countActiveSessionsForWorkspace as fJ, countActiveSessionsUsingEnvironment as fK, countActiveSessionsUsingVariableSet as fL, countConsecutiveReactiveRotations as fM, countExpiredDrainingSandboxLeases as fN, countQueuedTurns as fO, countRigs as fP, countSandboxLeasesByLiveness as fQ, countScheduledTasksForWorkspace as fR, countScheduledTasksUsingEnvironment as fS, countScheduledTasksUsingVariableSet as fT, countSessionHistoryItems as fU, countSessionsUsingRig as fV, countVariableSets as fW, countWorkspaceEnvironments as fX, countWorkspacesForAccount as fY, createApiKey as fZ, createConnection as f_, buildHostConnectionTokenResolver as fa, canonicalSessionCommandHash as fb, claimCodexResetRedemption as fc, claimExpiredFileUploadCleanup as fd, claimFileUploadCleanup as fe, claimHostExportBatch as ff, claimPendingSessionSystemUpdateOutbox as fg, claimPendingSessionWorkflowWakes as fh, claimSessionWorkForAttempt as fi, claimSlackBotPostOperation as fj, claimTerminalRetainedProcesses as fk, clearDurablePendingSessionToolCalls as fl, clearEnrollmentWentOffline as fm, clearPendingSessionToolspaceCall as fn, clearSessionContext as fo, clearSessionGoal as fp, clearedContextMarkerItem as fq, closePtySession as fr, closeSessionTurnAttemptInTransaction as fs, codexCapacityRefreshBackoffMs as ft, commitWarmingToWarm as fu, completeCodexResetRedemption as fv, completeExpiredFileUploadCleanup as fw, completeFileUpload as fx, completeFileUploadCleanup as fy, completeSlackBotPostOperation as fz, type ActiveSandboxPointer as g, evaluateSessionControl as g$, createDeviceEnrollmentRequest as g0, createEnrollment as g1, createFileUpload as g2, createImportBatch as g3, createKnowledgeMemory as g4, createRig as g5, createRigChange as g6, createRigVersion as g7, createRigVersionForChangePromotion as g8, createSandbox as g9, deleteVariableSetVariable as gA, deleteWorkspace as gB, deleteWorkspaceCaptureRows as gC, deleteWorkspaceEnvironment as gD, deleteWorkspaceEnvironmentVariable as gE, deleteWorkspacePack as gF, denyDeviceEnrollmentRequest as gG, diffWorkspaceInstructionPolicyContent as gH, diffWorkspaceInstructionPolicyRevisions as gI, disableCapabilityInstallation as gJ, disableHostExportConsumer as gK, disconnectAllCodexAccounts as gL, disconnectCodexAccount as gM, editQueuedTurnInTransaction as gN, enableCapabilityInstallation as gO, enablePackInstallation as gP, encodeSessionListCursor as gQ, encryptEnvironmentValue as gR, enqueueSessionTurn as gS, enqueueSessionWorkflowWake as gT, enqueueSessionWorkflowWakeIfRunnable as gU, enqueueSessionWorkflowWakeInTransaction as gV, ensureCodexRotationSettings as gW, ensureManagedAccessForUser as gX, estimateMemoryTokens as gY, evaluateGoalContinuation as gZ, evaluateRuntimeDatabasePosture as g_, createScheduledTask as ga, createScheduledTaskRun as gb, createSession as gc, createSessionGoal as gd, createSessionMcpServers as ge, createSessionWithIdempotencyKey as gf, createSessionWithIdempotencyKeyResult as gg, createSocialConnection as gh, createSocialPost as gi, createVariableSet as gj, createWorkspace as gk, createWorkspaceEnvironment as gl, createWorkspaceInstructionPolicyDraft as gm, databaseFailureCode as gn, deadLetterHostExportHead as go, decodeSessionListCursor as gp, decryptEnvironmentValue as gq, decryptedCapabilityHeaders as gr, deferRetainedProcessReconciliation as gs, deleteGitHubInstallationBinding as gt, deleteRecording as gu, deleteRig as gv, deleteRigIfNoActiveSessions as gw, deleteScheduledTask as gx, deleteSessionQueueItemInTransaction as gy, deleteVariableSet as gz, type AddSessionSystemUpdateInput as h, getSessionGoal as h$, evaluateSessionControls as h0, evaluateSessionDiscoveryControls as h1, expireSessionHumanInputRequest as h2, failHostExportBatch as h3, failSandboxRematerialization as h4, failWarmingToCold as h5, fenceCodexResetRedemptionSend as h6, fetchCodexRateLimitResetCreditsForAccount as h7, fetchCodexUsageForAccount as h8, finalizeEnrollmentByToken as h9, getManagedUserByEmail as hA, getMaterializedSandboxFileResources as hB, getNestedAgentDepthDeploymentPolicy as hC, getNewSessionDraftInTransaction as hD, getOpenPtySession as hE, getOrCreateSessionSystemUpdateOutbox as hF, getPackInstallation as hG, getPendingDeviceEnrollmentRequestByUserCode as hH, getPendingDeviceEnrollmentRequestByUserCodeGlobal as hI, getRecording as hJ, getRetainedFileArtifact as hK, getRetainedProcess as hL, getRig as hM, getRigByName as hN, getRigChange as hO, getRigName as hP, getRigVersion as hQ, getRigVersionById as hR, getSandbox as hS, getSandboxSessionEnvelope as hT, getScheduledTask as hU, getSession as hV, getSessionByCreateIdempotencyKey as hW, getSessionCodexState as hX, getSessionEvent as hY, getSessionEventByClientEventId as hZ, getSessionForSubject as h_, findActiveApiKeyByHash as ha, forceDrainOverLimitViewerOnlyBoxes as hb, frozenInitiatorForCommandActor as hc, getActiveSessionHistoryItems as hd, getActiveSessionTurnForExecution as he, getAnySessionInGroup as hf, getBillingBalance as hg, getBillingCustomer as hh, getCapabilityCatalogItem as hi, getCapabilityInstallation as hj, getCodexCapacityWaitForSession as hk, getCodexCredentialStatus as hl, getCodexResetRedemptionAttempt as hm, getCodexRotationSettings as hn, getComposerDraftInTransaction as ho, getConnectionMetadata as hp, getDeviceEnrollmentRequestByDeviceCode as hq, getEnrollment as hr, getFile as hs, getFileUpload as ht, getHostExportConsumerStatus as hu, getHumanInputResumeForEvent as hv, getKnowledgeMemory as hw, getLatestRunState as hx, getLatestStartedSessionTurn as hy, getManagedAccount as hz, type AddSessionSystemUpdateResult as i, listDistinctRigVersionIdsInGroup as i$, getSessionGoalWithContinuation as i0, getSessionHistoryItems as i1, getSessionHumanInputRequest as i2, getSessionLineage as i3, getSessionQueueSnapshot as i4, getSessionRootId as i5, getSessionSpawnDenial as i6, getSessionSpawnDenialByIdempotencyKey as i7, getSessionSystemUpdateOutboxByDedupeKey as i8, getSessionTurn as i9, heartbeatLeaseHolder as iA, importLegacyWorkspaceInstructionPolicyDraft as iB, ingestMachineMetricsSample as iC, initializeSessionStartAtomically as iD, insertFailedWorkspaceCapture as iE, insertMachineMetricsSeries as iF, insertPtySession as iG, insertRecording as iH, insertWorkspaceCapture as iI, inspectRuntimeDatabasePosture as iJ, installOrReadTurnExecutionPolicyForAttempt as iK, interruptedToolCallResult as iL, isCodexBilledTurn as iM, isDatabasePersistenceFailure as iN, isMemoryTextTooLong as iO, isRetryablePersistenceSqlState as iP, isSessionCompactionRequested as iQ, isSessionEventPersistenceError as iR, isStripeWebhookProcessed as iS, latestWorkspaceCapture as iT, listApiKeys as iU, listCapabilityCatalogItems as iV, listCapabilityInstallations as iW, listCodexAccountStatuses as iX, listCodexResetRedemptionRecoveries as iY, listConnectionsMetadata as iZ, listCreditBalancesByAccount as i_, getSessionTurnForAttempt as ia, getSlackBotPostOperation as ib, getSocialConnection as ic, getStoredCapabilityHeaderCiphertext as id, getStreamAcknowledgment as ie, getVariableSet as ig, getVariableSetByName as ih, getVariableSetValuesForRun as ii, getWorkspace as ij, getWorkspaceControlEvent as ik, getWorkspaceDefaultRigId as il, getWorkspaceEnvironment as im, getWorkspaceEnvironmentByName as io, getWorkspaceEnvironmentValuesForRun as ip, getWorkspaceGrant as iq, getWorkspaceInstructionPolicyRevision as ir, getWorkspaceModelPolicy as is, getWorkspacePack as it, grantWorkspaceAccess as iu, hasAuditableGitHubInstallationAuthority as iv, hasCreditLedgerEntry as iw, hashMemoryText as ix, heartbeatCodexCredentialLease as iy, heartbeatCodexCredentialLeaseUntil as iz, type AdoptCodexResetRedemptionResult as j, markSessionWorkflowWakeFailed as j$, listDistinctVariableSetIdsInGroup as j0, listEnabledMcpCapabilityServers as j1, listEnrollments as j2, listGitHubInstallationAccessForWorkspace as j3, listGitHubInstallationIdsForWorkspace as j4, listGitHubInstallationsForWorkspace as j5, listKnowledgeMemories as j6, listLiveModalSandboxLeaseAttributions as j7, listMeterableWarmLeases as j8, listOpenPtySessions as j9, listSessionsForSubject as jA, listSocialConnections as jB, listSocialPosts as jC, listUsageEvents as jD, listVariableSets as jE, listWorkspaceControlEvents as jF, listWorkspaceEnvironments as jG, listWorkspaceInstructionPolicyRevisions as jH, listWorkspaceMembers as jI, listWorkspacePacks as jJ, listWorkspacesForSubject as jK, loadCodexCredentialForRun as jL, loadConnectionCredentialForBroker as jM, loadIntegrationOAuthClient as jN, loadVariableSetForRun as jO, loadWorkspaceEnvironmentForRun as jP, lockSessionEventWriteRows as jQ, lockWorkspaceInferenceControl as jR, markFileUploadFailed as jS, markSandboxFileResourcesMaterialized as jT, markSandboxProviderReady as jU, markSandboxRestoreVerifying as jV, markScheduledTaskRunFailedIfQueued as jW, markSessionAttemptQuiesced as jX, markSessionSystemUpdateOutboxDeliveredInTransaction as jY, markSessionSystemUpdateOutboxFailed as jZ, markSessionWorkflowWakeDelivered as j_, listOutstandingSessionSystemUpdates as ja, listPackInstallations as jb, listPendingCodexCapacityWakeTargets as jc, listPendingSessionTurns as jd, listRecordings as je, listRegistryCatalogSurfaceKeys as jf, listRigChangeMonitoringSummaries as jg, listRigChanges as jh, listRigVersionMonitoringSummaries as ji, listRigVersions as jj, listRigs as jk, listSandboxes as jl, listScheduledTaskRuns as jm, listScheduledTasks as jn, listSessionDiscoverySummaries as jo, listSessionEventPage as jp, listSessionEvents as jq, listSessionHumanInputRequests as jr, listSessionIdsInGroup as js, listSessionMcpServerMetadata as jt, listSessionMcpServersForChildInheritance as ju, listSessionMcpServersForRun as jv, listSessionSpawnDenials as jw, listSessionSystemUpdatesForTurn as jx, listSessionTurns as jy, listSessions as jz, AgentCommandAuthorityError as k, releaseLeaseHolder as k$, markStaleRegistryCatalogItems as k0, markStripeWebhookProcessed as k1, markWarmLeaseInstanceLost as k2, materializeGoalContinuation as k3, mcpServerIdForCapability as k4, moveQueuedTurnInTransaction as k5, mutateSessionControlInTransaction as k6, mutateWorkspaceControlInTransaction as k7, nestedPostgresSqlState as k8, newSessionDraftToolsProvided as k9, recordCodexAccountConnectors as kA, recordCodexAccountUsage as kB, recordCodexAccountUsageWithWakeTargets as kC, recordCodexTokenRefresh as kD, recordConnectionTokenRefresh as kE, recordConnectionUsed as kF, recordLeaseDataPlaneUrl as kG, recordLeaseTerminalDataPlaneUrl as kH, recordPendingSessionToolCallResult as kI, recordRetainedProcessReconciliationProof as kJ, recordSessionActiveCodexCredential as kK, recordSkippedContextCompaction as kL, recordStreamAcknowledgment as kM, recordStripeWebhookEvent as kN, recordUsageEvent as kO, recordWarmingSandboxCreated as kP, recoverSessionDispatch as kQ, refreshOAuthConnectionCredential as kR, registerDbBinding as kS, registerHostExportConsumer as kT, registerInternalUpdateWakeInTransaction as kU, registerPendingSessionToolCall as kV, registerSessionTurnAttemptClaim as kW, registerSessionWorkflowWakeInTransaction as kX, registerWorkspacePack as kY, releaseCodexCredentialLease as kZ, releaseCodexResetRedemptionClaim as k_, nextSessionHistoryPosition as ka, normalizeBearerScheme as kb, normalizeMemoryText as kc, orphanedResultRowIndicesForRepair as kd, peekSessionWork as ke, persistDrainSnapshot as kf, persistWarmSnapshot as kg, planWorkspaceCaptureGc as kh, projectEffectiveControlForRelatedAccess as ki, projectSessionForRelatedAccess as kj, pruneHostExportOutbox as kk, publicNewSessionDraftOptions as kl, quarantineCodexCredentialForLease as km, reArmDrainingLease as kn, readActiveSandbox as ko, readLease as kp, readMachineMetricsLatest as kq, readMachineMetricsLatestForWorkspace as kr, readMachineMetricsSeries as ks, readWorkspaceArchiveCapturePreflight as kt, reapExpiredSessionListSnapshots as ku, reapStaleLeaseHolders as kv, reapStaleLeaseHoldersGlobal as kw, reconcileCodexCapacityWait as kx, reconcileColdLostLeaseInstanceBlockers as ky, recordAuditEvent as kz, type AgentInternalUpdateCommandResult as l, setSessionGoalStatusWithEvent as l$, releaseSlackBotPostOperationClaim as l0, removeWorkspaceMember as l1, renameCodexAccount as l2, renderWorkspaceMemoryBlock as l3, replaceIntegrationOAuthClient as l4, requestSessionCompaction as l5, requestSessionTurnRecovery as l6, requireFile as l7, requireScheduledTask as l8, requireSession as l9, saveComposerDraftInTransaction as lA, saveNewSessionDraftInTransaction as lB, saveRunState as lC, saveWorkspaceMemory as lD, searchWorkspaceMemories as lE, seedNewSessionDraftInTransaction as lF, sendAgentMessageInTransaction as lG, serializeEffectiveSessionControl as lH, sessionAuthorizationScopeFilter as lI, sessionSubject as lJ, sessionTreeStatsForSessions as lK, sessionsWithActiveOpOnEnrollment as lL, setActiveCodexCredential as lM, setActiveSandbox as lN, setCodexCredentialExhausted as lO, setCodexCredentialExhaustedWithWakeTargets as lP, setCodexCredentialStatus as lQ, setCodexCredentialStatusById as lR, setConnectionStatus as lS, setEnrollmentDisplayState as lT, setEnrollmentOpStreamState as lU, setEnrollmentWentOffline as lV, setInitialActiveCodexCredential as lW, setRlsContext as lX, setSessionCodexPin as lY, setSessionGoalLastContinuationTurn as lZ, setSessionGoalStatus as l_, requireSocialConnection as la, requireWorkspace as lb, reserveSessionCommandReceipt as lc, reserveToolspaceCallForAttempt as ld, resolveWorkspaceMemoryBlock as le, resumeHostExportConsumer as lf, retainWorkspaceMutationProcess as lg, retainedProcessReconciliationProof as lh, retainedProcessSettlementIdentity as li, retireHostExportConsumer as lj, revokeApiKey as lk, revokeConnection as ll, revokeEnrollment as lm, revokeViewer as ln, rewindHostExportConsumer as lo, rlsContextForWorkspace as lp, rlsStrategyFor as lq, rollbackWorkspaceInstructionPolicyRevision as lr, rotateWorkspaceArchives as ls, runIdempotentPersistenceTransaction as lt, runtimeDatabaseReadyCheck as lu, safeDatabaseErrorFacts as lv, sanitizeEventPayload as lw, sanitizeEventString as lx, sanitizeMemoryText as ly, sanitizeModelPayload as lz, type AppendEventInput as m, withWorkspaceRls as m$, setSessionLastInputTokensForTurnAttempt as m0, setSessionPin as m1, setSubjectRlsContext as m2, setTemporalWorkflowId as m3, setVariableSetVariable as m4, setWorkspaceDefaultRig as m5, setWorkspaceEnvironmentVariable as m6, settleCodexCredentialFailover as m7, settleCodexCredentialLeaseLoss as m8, settleRetainedProcess as m9, updateSessionGoalWithEvent as mA, updateSessionMcpApprovalPolicy as mB, updateSessionMcpServerCredentials as mC, updateSessionTitle as mD, updateVariableSet as mE, updateWorkspace as mF, updateWorkspaceEnvironment as mG, updateWorkspaceSettings as mH, upsertBillingCustomer as mI, upsertCapabilityCatalogItem as mJ, upsertCodexSubscriptionCredential as mK, upsertGitHubInstallation as mL, upsertMachineMetricsLatest as mM, upsertRegistryCapabilityCatalogItem as mN, upsertSandboxSessionEnvelope as mO, upsertSessionGoal as mP, upsertSessionGoalWithEvent as mQ, upsertWorkspaceModelPolicy as mR, validateHumanInputResponse as mS, verifyDirectWorkspaceMutationSettlement as mT, verifyRetainedProcessMutationSettlement as mU, verifyWorkspaceMutationSettlement as mV, withAccountRls as mW, withCodexCapacityMutation as mX, withCodexCredentialRefreshLock as mY, withCodexTokenDeadline as mZ, withRlsContext as m_, settleScheduledTaskRunInTransaction as ma, settleSessionAttemptInterruptions as mb, settleSessionIdleWithParentOutbox as mc, shortMemoryId as md, steerAgentSessionInTransaction as me, steerQueuedTurnInTransaction as mf, storeIntegrationOAuthClient as mg, submitHumanPromptInTransaction as mh, sumUsageQuantity as mi, supersedeSessionCurrentDirectionInTransaction as mj, touchEnrollmentLastSeen as mk, touchLeaseHolder as ml, updateCodexAllocatorEligibility as mm, updateCodexRotationSettings as mn, updateConnection as mo, updateImportBatchCounts as mp, updateKnowledgeMemory as mq, updatePackInstallationStatus as mr, updatePtySessionActivity as ms, updateRecording as mt, updateRig as mu, updateRigChangeStatus as mv, updateScheduledTask as mw, updateScheduledTaskRun as mx, updateSessionCommandReceiptResult as my, updateSessionGoal as mz, type ApplyContextCompactionResult as n, withWorkspaceSubjectRls as n0, withWorkspaceUsageLock as n1, workspaceCaptureAtRevision as n2, workspaceCodexSubscriptionActive as n3, type ApplySessionTurnSettlementInput as o, type ApplySessionTurnSettlementResult as p, provisionRoles, type ArmCodexCapacityWaitResult as q, type BootstrapWorkspaceInput as r, CODEX_CAPACITY_REFRESH_MIN_MS as s, CODEX_CREDENTIAL_LEASE_TTL_MS as t, CODEX_RESET_REDEMPTION_OUTCOMES as u, CODEX_ROTATION_STRATEGIES as v, type ClaimCodexResetRedemptionResult as w, type ClaimSessionWorkForAttemptInput as x, type ClaimSessionWorkForAttemptResult as y, type ClaimSlackBotPostOperationResult as z };
+export { type CodexRateLimitResetCreditsAccountResult as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BeginSandboxRematerializationResult as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type ClearSessionContextResult as D, type CodexAccountStatus as E, type CodexAccountUsageSnapshot as F, type CodexAllocatorUpdateResult as G, type CodexAuthDeps as H, type CodexCapacityAvailabilityDecision as I, type CodexCapacityMutationResult as J, type CodexCapacityResetKind as K, type CodexCapacitySelectionContext as L, type CodexCapacityWait as M, type CodexCapacityWaitStatus as N, type CodexCapacityWakeTarget as O, type CodexCredentialForRun as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialLeaseCandidateFilter as Q, type CodexCredentialLeaseCandidateFilterResult as R, type CodexCredentialLeasePolicyScopeResolver as S, type CodexCredentialLeaseQuarantine as T, type CodexCredentialLeaseResult as U, type CodexCredentialLeaseSelection as V, type CodexCredentialLeaseSelectionContext as W, type CodexCredentialStatus as X, type CodexCredentialTokens as Y, type CodexLeaseAccountStatus as Z, type CodexPinSource as _, type AcceptSessionApprovalDecisionResult as a, type HostMcpCredentialResolverContext as a$, type CodexResetRedemptionAttempt as a0, type CodexResetRedemptionOutcome as a1, type CodexResetRedemptionRecovery as a2, type CodexResetRedemptionSendNotReadyReason as a3, type CodexResetRedemptionStatus as a4, type CodexRotationSettings as a5, type CodexRotationStrategy as a6, type CodexTokenDeadlineClock as a7, type CodexTokenDeadlineOptions as a8, type CompleteSlackBotPostOperationResult as a9, type EditQueueCommandResult as aA, type EffectiveControlBlocker as aB, type EffectiveControlResumeOption as aC, type EffectiveControlState as aD, type EffectiveSessionControl as aE, type EnableCapabilityInstallationInput as aF, type EnabledMcpCapabilityServer as aG, type EnqueueSessionTurnInput as aH, type EnrollmentExposure as aI, type EnrollmentOs as aJ, type EnrollmentRecord as aK, type EnrollmentStatus as aL, type ExpiredDrainingSandboxLeaseCount as aM, type ExpiredFileUploadCleanupClaim as aN, FORCE_RLS_TABLES as aO, type FenceCodexResetRedemptionSendResult as aP, type FileUploadCleanupClaimResult as aQ, type ForceDrainResult as aR, type FrozenTurnInitiator as aS, type GitHubInstallation as aT, type GitHubInstallationAccess as aU, GitHubInstallationAuthorityCommitError as aV, type GoalContinuationDecision as aW, type HostExportConsumerStatus as aX, type HostExportKind as aY, HostExportPayloadError as aZ, HostMcpCredentialBindingError as a_, type ComposerDraftRow as aa, type ConnectionBrokerDeps as ab, type ConnectionCredentialForBroker as ac, type ConnectionMetadataWithVerification as ad, ConnectionRefreshHttpError as ae, type ConsumeOAuthStateNonceInput as af, type CorrectWorkspaceMemoryInput as ag, type CorrectWorkspaceMemoryResult as ah, type CreateCapabilityCatalogItemInput as ai, type CreateConnectionInput as aj, type CreateDbOptions as ak, type CreateImportBatchInput as al, type CreateKnowledgeMemoryInput as am, type CreatePackInstallationInput as an, type CreateScheduledTaskInput as ao, type CreateSessionGoalInput as ap, type CreateSessionMcpServerInput as aq, type CreateSocialConnectionInput as ar, type CreateSocialPostInput as as, type CreditBalanceByAccount as at, type Database as au, type DatabaseFailureCode as av, type DbClient as aw, type DbSession as ax, type DeviceEnrollmentRequestRecord as ay, type DeviceEnrollmentStatus as az, type AcceptSessionHumanInputResponseResult as b, type ReconcileColdLostLeaseInstanceBlockersResult as b$, HostMcpCredentialScopeError as b0, HumanInputResponseValidationError as b1, type IdempotentPersistenceTransactionOptions as b2, type ImportBatch as b3, type InitializeSessionStartInput as b4, type InitializeSessionStartResult as b5, type InstallOrReadTurnExecutionPolicyForAttemptResult as b6, type IntegrationOAuthClientForUse as b7, type LeaseHolderKind as b8, type LeaseSnapshot as b9, type MarkWarmLeaseInstanceLostResult as bA, type MaterializeGoalContinuationResult as bB, type MemoryBlockRecord as bC, type MemoryEmbedder as bD, type MemorySanitizeResult as bE, type MeterableWarmLease as bF, NON_RLS_RUNTIME_TABLES as bG, type NestedAgentDepthDeploymentPolicy as bH, type NestedAgentDepthPolicySource as bI, NewSessionDraftAccessError as bJ, NewSessionDraftConflictError as bK, type NewSessionDraftRow as bL, PROTECTED_NO_DIRECT_DML_TABLES as bM, type PendingSessionToolCallInput as bN, type PersistenceFailureDetails as bO, type PersistenceRetryOutcome as bP, type QueueCommandConflictCode as bQ, QueueCommandConflictError as bR, type QueueCommandResult as bS, type QueuedTurnRow as bT, RUNTIME_DML_TABLES as bU, RUNTIME_FULL_DML_TABLES as bV, RUNTIME_READ_INSERT_TABLES as bW, RUNTIME_READ_ONLY_TABLES as bX, RUNTIME_TABLE_PRIVILEGES as bY, type ReapDrainable as bZ, type ReconcileCodexCapacityWaitResult as b_, type ListKnowledgeMemoryOptions as ba, type ListSessionEventPageOptions as bb, type ListSessionEventsOptions as bc, type ListSessionsForSubjectOptions as bd, type ListSessionsOptions as be, type LiveModalSandboxLeaseAttribution as bf, type LostProviderWorkspaceSettlement as bg, MACHINE_METRICS_SERIES_INTERVAL_MS as bh, MAX_INTERNAL_UPDATE_BATCH_BYTES as bi, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as bj, MAX_INTERNAL_UPDATE_BYTES as bk, MEMORY_ACTIVE_RECORD_CAP as bl, MEMORY_BLOCK_KIND_ORDER as bm, MEMORY_BLOCK_RECORD_LIMIT as bn, MEMORY_CORRECT_TOOL_DESCRIPTION as bo, MEMORY_KIND_SECTION_TITLES as bp, MEMORY_NEAR_DUP_COSINE_THRESHOLD as bq, MEMORY_NEAR_DUP_NEIGHBORS as br, MEMORY_SAVE_TOOL_DESCRIPTION as bs, MEMORY_SEARCH_DEFAULT_LIMIT as bt, MEMORY_SEARCH_MAX_LIMIT as bu, MEMORY_SEARCH_TOOL_DESCRIPTION as bv, MEMORY_TEXT_MAX_CHARS as bw, MEMORY_VISIBLE_RECORD_CAP as bx, type MachineMetricsRow as by, type MachineMetricsSample as bz, type AccrueWarmSecondsResult as c, type SandboxWorkspaceReadiness as c$, type ReconcileSessionAttemptQuiescenceResult as c0, type RecoverSessionDispatchInput as c1, type RecoverSessionDispatchResult as c2, type RefreshTransportOptions as c3, type RegisterWorkspacePackInput as c4, type RegistryCapabilityCatalogItemInput as c5, type RegistryCatalogSurfaceKey as c6, type ReplaceIntegrationOAuthClientInput as c7, type RequestSessionTurnRecoveryInput as c8, type RequestSessionTurnRecoveryResult as c9, SESSION_EVENT_DB_PAGE_MAX_BYTES as cA, SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT as cB, SESSION_LIST_SNAPSHOT_MAX_IDS as cC, type SafeDatabaseErrorFacts as cD, type SandboxArchiveAvailability as cE, type SandboxArchiveRevision as cF, SandboxImageConflictError as cG, type SandboxKind as cH, type SandboxLeaseLiveness as cI, SandboxLeaseRecoveryBlockedError as cJ, SandboxLeaseSupersededError as cK, type SandboxOpenPtySessionRow as cL, type SandboxProviderExistence as cM, type SandboxPtyProcessIdentity as cN, type SandboxPtySessionRow as cO, type SandboxRecord as cP, type SandboxRecoveryState as cQ, type SandboxRestoreStatus as cR, type SandboxRetainedProcess as cS, type SandboxRetainedProcessIdentity as cT, SandboxRetainedProcessPromotionFencedError as cU, type SandboxRetainedProcessReconciliationClaim as cV, type SandboxRetainedProcessState as cW, SandboxRigConflictError as cX, type SandboxWorkspaceMutationAdmission as cY, SandboxWorkspaceMutationFencedError as cZ, type SandboxWorkspaceMutationProviderOutcome as c_, type ResolveConnectionCredentialInput as ca, type ResolveConnectionCredentialResult as cb, type RetainedFileArtifact as cc, type RetainedProcessProviderProof as cd, RigActiveVersionChangedError as ce, RigChangeAlreadyVerifyingError as cf, type RigChangeMonitoringSummary as cg, RigChangeTransitionError as ch, type RigVersionContentInput as ci, type RigVersionMonitoringSummary as cj, type RlsContext as ck, type RlsStrategy as cl, type RuntimeDatabaseIdentity as cm, type RuntimeDatabasePosture as cn, RuntimeDatabasePostureError as co, type RuntimeDatabasePostureOptions as cp, type RuntimeRoutinePosture as cq, type RuntimeSchemaPosture as cr, type RuntimeTableDmlPrivilege as cs, type RuntimeTablePosture as ct, type RuntimeTablePrivilegeContract as cu, SESSION_ANCESTRY_LIMIT as cv, SESSION_DISCOVERY_CONTROL_TARGET_LIMIT as cw, SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS as cx, SESSION_DISCOVERY_GOAL_MAX_CHARS as cy, SESSION_DISCOVERY_MESSAGE_MAX_CHARS as cz, type AcquireLeaseInput as d, type StoreIntegrationOAuthClientInput as d$, SanitizedDatabasePersistenceCause as d0, type SaveWorkspaceMemoryInput as d1, type SaveWorkspaceMemoryResult as d2, type SessionAttemptActivityRef as d3, type SessionAttemptInterruptionSettlement as d4, type SessionCodexState as d5, type SessionCommandActor as d6, SessionCommandIdempotencyError as d7, type SessionCommandReceiptRow as d8, SessionContextBusyError as d9, SessionPinAccessError as dA, SessionPinVersionConflictError as dB, type SessionRecordingCodec as dC, type SessionRecordingMode as dD, type SessionRecordingRow as dE, type SessionRecordingState as dF, type SessionSpawnDenial as dG, type SessionSpawnDenialCode as dH, SessionSpawnDeniedDbError as dI, type SessionSystemUpdateOutboxDelivery as dJ, SessionToolPolicyVersionConflictError as dK, type SessionTurnAttemptOutcome as dL, type SessionTurnForExecution as dM, type SessionTurnRecordingSettlement as dN, type SessionWorkPeek as dO, type SessionWorkTrigger as dP, type SessionWorkflowWake as dQ, type SessionWorkflowWakeDeliveryResult as dR, type SetSessionCodexPinOptions as dS, type SetSessionGoalStatusEvent as dT, type SettleCodexCredentialFailoverResult as dU, type SettleCodexCredentialLeaseLossResult as dV, type SlackBotInstallCallbackFailureReason as dW, type SlackBotInstallCallbackFailureStage as dX, SlackBotLifecycleSuccessAuditError as dY, type SlackBotPostOperation as dZ, type SteerQueueCommandResult as d_, SessionControlConflictError as da, SessionControlInvariantError as db, type SessionControlMutationResult as dc, type SessionCreateDeniedResult as dd, type SessionCreateInput as de, type SessionCreateResult as df, type SessionCreateSuccessResult as dg, type SessionDepthPolicy as dh, type SessionDiscoveryControl as di, type SessionDiscoveryCursor as dj, type SessionDiscoveryOrderBy as dk, type SessionDiscoverySummary as dl, type SessionEventPage as dm, SessionEventPersistenceError as dn, type SessionEventWriteLockInput as dp, type SessionEventWriteLocks as dq, type SessionGoalContinuationProjection as dr, SessionIdConflictError as ds, type SessionLineage as dt, SessionListAccessError as du, type SessionListCursor as dv, SessionListCursorError as dw, SessionListCursorExpiredError as dx, SessionListSnapshotLimitError as dy, type SessionMcpServerForRun as dz, type AcquireLeaseResult as e, applyCreditLedgerEntry as e$, type StoredIntegrationOAuthClient as e0, type StreamAcknowledgment as e1, type SubmitHumanPromptResult as e2, type ToolspaceCallReservation as e3, type ToolspaceTurnAttemptClaims as e4, type TurnAttemptFenceRejectReason as e5, type UpdateConnectionInput as e6, type UpdateImportBatchCountsInput as e7, type UpdateKnowledgeMemoryInput as e8, type UpdateScheduledTaskInput as e9, abandonCodexResetRedemptionBeforeProvider as eA, abandonRecordingForTurnAttempt as eB, acceptSessionApprovalDecision as eC, acceptSessionHumanInputResponse as eD, accrueWarmSeconds as eE, acknowledgeHostExportBatch as eF, acquireCodexCredentialLease as eG, acquireLease as eH, activateRigVersion as eI, activateWorkspaceInstructionPolicyRevision as eJ, addSessionSystemUpdate as eK, addSessionSystemUpdateWithSourceMutation as eL, admitToolspaceTurnAttempt as eM, adoptCodexResetRedemptionAttempt as eN, advanceWorkspaceGeneration as eO, advanceWorkspaceGenerationForDirectRequest as eP, advanceWorkspaceGenerationForRetainedProcess as eQ, allAccountPermissions as eR, allWorkspacePermissions as eS, appendSessionEventToSandboxGroup as eT, appendSessionEvents as eU, appendSessionEventsAndUpdateSession as eV, appendSessionEventsForTurnAttempt as eW, appendSessionEventsWithLockedSessionUpdate as eX, appendSessionHistoryItems as eY, applyContextCompaction as eZ, applyCreditDebitUpToBalance as e_, type UpdateSessionMcpApprovalPolicyResult as ea, type UpdateSessionMcpServerCredentialsInput as eb, type UpdateSessionMcpServerCredentialsResult as ec, type UpsertCodexSubscriptionCredentialResult as ed, type UserLookup as ee, type VariableSetForRun as ef, WORKSPACE_MEMORY_BLOCK_EMPTY as eg, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as eh, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as ei, type WorkspaceCaptureCommitResult as ej, type WorkspaceCaptureGcPlan as ek, type WorkspaceCaptureGcRow as el, type WorkspaceCaptureRow as em, type WorkspaceControlLockMode as en, type WorkspaceControlMutationResult as eo, type WorkspaceControlRow as ep, type WorkspaceEnvironmentForRun as eq, WorkspaceInstructionPolicyConflictError as er, WorkspaceInstructionPolicyInvalidOperationError as es, WorkspaceInstructionPolicyLegacyUnavailableError as et, WorkspaceInstructionPolicyNotFoundError as eu, type WorkspaceMemoryOrigin as ev, type WorkspaceMemorySearchInput as ew, type WorkspaceMemorySearchMode as ex, type WorkspaceMemorySearchResult as ey, type WorkspaceModelPolicy as ez, type ActiveRetainedProcessOwnerCount as f, countVariableSets as f$, applySessionTurnSettlement as f0, approveDeviceEnrollmentRequest as f1, areGitHubRepositoriesAllowedForWorkspace as f2, armCodexCapacityWait as f3, assertAgentCommandAuthorityInTransaction as f4, assertRuntimeDatabasePosture as f5, autoResumeSessionBranchInTransaction as f6, beginRigChangeVerificationAttempt as f7, beginSandboxRematerialization as f8, bindAuthorizedGitHubInstallationRepositories as f9, completeCodexResetRedemption as fA, completeExpiredFileUploadCleanup as fB, completeFileUpload as fC, completeFileUploadCleanup as fD, completeSlackBotPostOperation as fE, computeWorkspaceCaptureGcPlan as fF, confirmDrainCold as fG, consumeDeviceEnrollmentRequest as fH, consumeIntegrationOAuthStateNonce as fI, consumeNewSessionDraftInTransaction as fJ, correctWorkspaceMemory as fK, countActiveApiKeysForWorkspace as fL, countActiveRetainedProcessesByOwnerState as fM, countActiveSessionHistoryItems as fN, countActiveSessionsForWorkspace as fO, countActiveSessionsUsingEnvironment as fP, countActiveSessionsUsingVariableSet as fQ, countConsecutiveReactiveRotations as fR, countExpiredDrainingSandboxLeases as fS, countQueuedTurns as fT, countRigs as fU, countSandboxLeasesByLiveness as fV, countScheduledTasksForWorkspace as fW, countScheduledTasksUsingEnvironment as fX, countScheduledTasksUsingVariableSet as fY, countSessionHistoryItems as fZ, countSessionsUsingRig as f_, bindGitHubInstallationRepositories as fa, bootstrapWorkspace as fb, buildChildCompletionDigest as fc, buildCodexTokenResolver as fd, buildConnectionTokenResolver as fe, buildHostConnectionTokenResolver as ff, canonicalSessionCommandHash as fg, claimCodexResetRedemption as fh, claimExpiredFileUploadCleanup as fi, claimFileUploadCleanup as fj, claimHostExportBatch as fk, claimPendingSessionSystemUpdateOutbox as fl, claimPendingSessionWorkflowWakes as fm, claimSessionWorkForAttempt as fn, claimSlackBotPostOperation as fo, claimTerminalRetainedProcesses as fp, clearDurablePendingSessionToolCalls as fq, clearEnrollmentWentOffline as fr, clearPendingSessionToolspaceCall as fs, clearSessionContext as ft, clearSessionGoal as fu, clearedContextMarkerItem as fv, closePtySession as fw, closeSessionTurnAttemptInTransaction as fx, codexCapacityRefreshBackoffMs as fy, commitWarmingToWarm as fz, type ActiveSandboxPointer as g, enqueueSessionWorkflowWakeInTransaction as g$, countWorkspaceEnvironments as g0, countWorkspacesForAccount as g1, createApiKey as g2, createConnection as g3, createConnectionWithSlackBotSuccessAudit as g4, createDb as g5, createDeviceEnrollmentRequest as g6, createEnrollment as g7, createFileUpload as g8, createImportBatch as g9, deleteRecording as gA, deleteRig as gB, deleteRigIfNoActiveSessions as gC, deleteScheduledTask as gD, deleteSessionQueueItemInTransaction as gE, deleteVariableSet as gF, deleteVariableSetVariable as gG, deleteWorkspace as gH, deleteWorkspaceCaptureRows as gI, deleteWorkspaceEnvironment as gJ, deleteWorkspaceEnvironmentVariable as gK, deleteWorkspacePack as gL, denyDeviceEnrollmentRequest as gM, diffWorkspaceInstructionPolicyContent as gN, diffWorkspaceInstructionPolicyRevisions as gO, disableCapabilityInstallation as gP, disableHostExportConsumer as gQ, disconnectAllCodexAccounts as gR, disconnectCodexAccount as gS, editQueuedTurnInTransaction as gT, enableCapabilityInstallation as gU, enablePackInstallation as gV, encodeSessionListCursor as gW, encryptEnvironmentValue as gX, enqueueSessionTurn as gY, enqueueSessionWorkflowWake as gZ, enqueueSessionWorkflowWakeIfRunnable as g_, createKnowledgeMemory as ga, createRig as gb, createRigChange as gc, createRigVersion as gd, createRigVersionForChangePromotion as ge, createSandbox as gf, createScheduledTask as gg, createScheduledTaskRun as gh, createSession as gi, createSessionGoal as gj, createSessionMcpServers as gk, createSessionWithIdempotencyKey as gl, createSessionWithIdempotencyKeyResult as gm, createSocialConnection as gn, createSocialPost as go, createVariableSet as gp, createWorkspace as gq, createWorkspaceEnvironment as gr, createWorkspaceInstructionPolicyDraft as gs, databaseFailureCode as gt, deadLetterHostExportHead as gu, decodeSessionListCursor as gv, decryptEnvironmentValue as gw, decryptedCapabilityHeaders as gx, deferRetainedProcessReconciliation as gy, deleteGitHubInstallationBinding as gz, type AddSessionSystemUpdateInput as h, getSession as h$, ensureCodexRotationSettings as h0, ensureManagedAccessForUser as h1, estimateMemoryTokens as h2, evaluateGoalContinuation as h3, evaluateRuntimeDatabasePosture as h4, evaluateSessionControl as h5, evaluateSessionControls as h6, evaluateSessionDiscoveryControls as h7, expireSessionHumanInputRequest as h8, failHostExportBatch as h9, getHostExportConsumerStatus as hA, getHumanInputResumeForEvent as hB, getKnowledgeMemory as hC, getLatestRunState as hD, getLatestStartedSessionTurn as hE, getManagedAccount as hF, getManagedUserByEmail as hG, getMaterializedSandboxFileResources as hH, getNestedAgentDepthDeploymentPolicy as hI, getNewSessionDraftInTransaction as hJ, getOpenPtySession as hK, getOrCreateSessionSystemUpdateOutbox as hL, getPackInstallation as hM, getPendingDeviceEnrollmentRequestByUserCode as hN, getPendingDeviceEnrollmentRequestByUserCodeGlobal as hO, getRecording as hP, getRetainedFileArtifact as hQ, getRetainedProcess as hR, getRig as hS, getRigByName as hT, getRigChange as hU, getRigName as hV, getRigVersion as hW, getRigVersionById as hX, getSandbox as hY, getSandboxSessionEnvelope as hZ, getScheduledTask as h_, failSandboxRematerialization as ha, failWarmingToCold as hb, fenceCodexResetRedemptionSend as hc, fetchCodexRateLimitResetCreditsForAccount as hd, fetchCodexUsageForAccount as he, finalizeEnrollmentByToken as hf, findActiveApiKeyByHash as hg, forceDrainOverLimitViewerOnlyBoxes as hh, frozenInitiatorForCommandActor as hi, getActiveSessionHistoryItems as hj, getActiveSessionTurnForExecution as hk, getAnySessionInGroup as hl, getBillingBalance as hm, getBillingCustomer as hn, getCapabilityCatalogItem as ho, getCapabilityInstallation as hp, getCodexCapacityWaitForSession as hq, getCodexCredentialStatus as hr, getCodexResetRedemptionAttempt as hs, getCodexRotationSettings as ht, getComposerDraftInTransaction as hu, getConnectionMetadata as hv, getDeviceEnrollmentRequestByDeviceCode as hw, getEnrollment as hx, getFile as hy, getFileUpload as hz, type AddSessionSystemUpdateResult as i, listApiKeys as i$, getSessionAttemptActivityRef as i0, getSessionByCreateIdempotencyKey as i1, getSessionCodexState as i2, getSessionEvent as i3, getSessionEventByClientEventId as i4, getSessionForSubject as i5, getSessionGoal as i6, getSessionGoalWithContinuation as i7, getSessionHistoryItems as i8, getSessionHumanInputRequest as i9, getWorkspacePack as iA, grantWorkspaceAccess as iB, hasAuditableGitHubInstallationAuthority as iC, hasCreditLedgerEntry as iD, hashMemoryText as iE, heartbeatCodexCredentialLease as iF, heartbeatCodexCredentialLeaseUntil as iG, heartbeatLeaseHolder as iH, importLegacyWorkspaceInstructionPolicyDraft as iI, ingestMachineMetricsSample as iJ, initializeSessionStartAtomically as iK, insertFailedWorkspaceCapture as iL, insertMachineMetricsSeries as iM, insertPtySession as iN, insertRecording as iO, insertWorkspaceCapture as iP, inspectRuntimeDatabasePosture as iQ, installOrReadTurnExecutionPolicyForAttempt as iR, interruptedToolCallResult as iS, isCodexBilledTurn as iT, isDatabasePersistenceFailure as iU, isMemoryTextTooLong as iV, isRetryablePersistenceSqlState as iW, isSessionCompactionRequested as iX, isSessionEventPersistenceError as iY, isStripeWebhookProcessed as iZ, latestWorkspaceCapture as i_, getSessionLineage as ia, getSessionQueueSnapshot as ib, getSessionRootId as ic, getSessionSpawnDenial as id, getSessionSpawnDenialByIdempotencyKey as ie, getSessionSystemUpdateOutboxByDedupeKey as ig, getSessionTurn as ih, getSessionTurnForAttempt as ii, getSlackBotPostOperation as ij, getSocialConnection as ik, getStoredCapabilityHeaderCiphertext as il, getStreamAcknowledgment as im, getVariableSet as io, getVariableSetByName as ip, getVariableSetValuesForRun as iq, getWorkspace as ir, getWorkspaceControlEvent as is, getWorkspaceDefaultRigId as it, getWorkspaceEnvironment as iu, getWorkspaceEnvironmentByName as iv, getWorkspaceEnvironmentValuesForRun as iw, getWorkspaceGrant as ix, getWorkspaceInstructionPolicyRevision as iy, getWorkspaceModelPolicy as iz, type AdoptCodexResetRedemptionResult as j, markSandboxProviderReady as j$, listCapabilityCatalogItems as j0, listCapabilityInstallations as j1, listCodexAccountStatuses as j2, listCodexResetRedemptionRecoveries as j3, listConnectionsMetadata as j4, listCreditBalancesByAccount as j5, listDistinctRigVersionIdsInGroup as j6, listDistinctVariableSetIdsInGroup as j7, listEnabledMcpCapabilityServers as j8, listEnrollments as j9, listSessionMcpServerMetadata as jA, listSessionMcpServersForChildInheritance as jB, listSessionMcpServersForRun as jC, listSessionSpawnDenials as jD, listSessionSystemUpdatesForTurn as jE, listSessionTurns as jF, listSessions as jG, listSessionsForSubject as jH, listSocialConnections as jI, listSocialPosts as jJ, listUsageEvents as jK, listVariableSets as jL, listWorkspaceControlEvents as jM, listWorkspaceEnvironments as jN, listWorkspaceInstructionPolicyRevisions as jO, listWorkspaceMembers as jP, listWorkspacePacks as jQ, listWorkspacesForSubject as jR, loadCodexCredentialForRun as jS, loadConnectionCredentialForBroker as jT, loadIntegrationOAuthClient as jU, loadVariableSetForRun as jV, loadWorkspaceEnvironmentForRun as jW, lockSessionEventWriteRows as jX, lockWorkspaceInferenceControl as jY, markFileUploadFailed as jZ, markSandboxFileResourcesMaterialized as j_, listGitHubInstallationAccessForWorkspace as ja, listGitHubInstallationIdsForWorkspace as jb, listGitHubInstallationsForWorkspace as jc, listKnowledgeMemories as jd, listLiveModalSandboxLeaseAttributions as je, listMeterableWarmLeases as jf, listOpenPtySessions as jg, listOutstandingSessionSystemUpdates as jh, listPackInstallations as ji, listPendingCodexCapacityWakeTargets as jj, listPendingSessionTurns as jk, listRecordings as jl, listRegistryCatalogSurfaceKeys as jm, listRigChangeMonitoringSummaries as jn, listRigChanges as jo, listRigVersionMonitoringSummaries as jp, listRigVersions as jq, listRigs as jr, listSandboxes as js, listScheduledTaskRuns as jt, listScheduledTasks as ju, listSessionDiscoverySummaries as jv, listSessionEventPage as jw, listSessionEvents as jx, listSessionHumanInputRequests as jy, listSessionIdsInGroup as jz, AgentCommandAuthorityError as k, registerDbBinding as k$, markSandboxRestoreVerifying as k0, markScheduledTaskRunFailedIfQueued as k1, markSessionAttemptQuiesced as k2, markSessionSystemUpdateOutboxDeliveredInTransaction as k3, markSessionSystemUpdateOutboxFailed as k4, markSessionWorkflowWakeDelivered as k5, markSessionWorkflowWakeFailed as k6, markStaleRegistryCatalogItems as k7, markStripeWebhookProcessed as k8, markWarmLeaseInstanceLost as k9, readWorkspaceArchiveCapturePreflight as kA, reapExpiredSessionListSnapshots as kB, reapStaleLeaseHolders as kC, reapStaleLeaseHoldersGlobal as kD, reconcileCodexCapacityWait as kE, reconcileColdLostLeaseInstanceBlockers as kF, reconcileSessionAttemptQuiescence as kG, recordAuditEvent as kH, recordCodexAccountConnectors as kI, recordCodexAccountUsage as kJ, recordCodexAccountUsageWithWakeTargets as kK, recordCodexTokenRefresh as kL, recordConnectionTokenRefresh as kM, recordConnectionUsed as kN, recordLeaseDataPlaneUrl as kO, recordLeaseTerminalDataPlaneUrl as kP, recordPendingSessionToolCallResult as kQ, recordRetainedProcessReconciliationProof as kR, recordSessionActiveCodexCredential as kS, recordSkippedContextCompaction as kT, recordSlackBotInstallCallbackFailure as kU, recordStreamAcknowledgment as kV, recordStripeWebhookEvent as kW, recordUsageEvent as kX, recordWarmingSandboxCreated as kY, recoverSessionDispatch as kZ, refreshOAuthConnectionCredential as k_, materializeGoalContinuation as ka, mcpServerIdForCapability as kb, moveQueuedTurnInTransaction as kc, mutateSessionControlInTransaction as kd, mutateWorkspaceControlInTransaction as ke, nestedPostgresSqlState as kf, newSessionDraftToolsProvided as kg, nextSessionHistoryPosition as kh, normalizeBearerScheme as ki, normalizeMemoryText as kj, orphanedResultRowIndicesForRepair as kk, peekSessionWork as kl, persistDrainSnapshot as km, persistWarmSnapshot as kn, planWorkspaceCaptureGc as ko, projectEffectiveControlForRelatedAccess as kp, projectSessionForRelatedAccess as kq, pruneHostExportOutbox as kr, publicNewSessionDraftOptions as ks, quarantineCodexCredentialForLease as kt, reArmDrainingLease as ku, readActiveSandbox as kv, readLease as kw, readMachineMetricsLatest as kx, readMachineMetricsLatestForWorkspace as ky, readMachineMetricsSeries as kz, type AgentInternalUpdateCommandResult as l, setCodexCredentialStatusById as l$, registerHostExportConsumer as l0, registerInternalUpdateWakeInTransaction as l1, registerPendingSessionToolCall as l2, registerSessionTurnAttemptClaim as l3, registerSessionWorkflowWakeInTransaction as l4, registerWorkspacePack as l5, releaseCodexCredentialLease as l6, releaseCodexResetRedemptionClaim as l7, releaseLeaseHolder as l8, releaseSlackBotPostOperationClaim as l9, rlsStrategyFor as lA, rollbackWorkspaceInstructionPolicyRevision as lB, rotateWorkspaceArchives as lC, runIdempotentPersistenceTransaction as lD, runtimeDatabaseReadyCheck as lE, safeDatabaseErrorFacts as lF, sanitizeEventPayload as lG, sanitizeEventString as lH, sanitizeMemoryText as lI, sanitizeModelPayload as lJ, saveComposerDraftInTransaction as lK, saveNewSessionDraftInTransaction as lL, saveRunState as lM, saveWorkspaceMemory as lN, searchWorkspaceMemories as lO, seedNewSessionDraftInTransaction as lP, sendAgentMessageInTransaction as lQ, serializeEffectiveSessionControl as lR, sessionAuthorizationScopeFilter as lS, sessionSubject as lT, sessionTreeStatsForSessions as lU, sessionsWithActiveOpOnEnrollment as lV, setActiveCodexCredential as lW, setActiveSandbox as lX, setCodexCredentialExhausted as lY, setCodexCredentialExhaustedWithWakeTargets as lZ, setCodexCredentialStatus as l_, removeWorkspaceMember as la, renameCodexAccount as lb, renderWorkspaceMemoryBlock as lc, replaceIntegrationOAuthClient as ld, requestSessionCompaction as le, requestSessionTurnRecovery as lf, requireFile as lg, requireScheduledTask as lh, requireSession as li, requireSocialConnection as lj, requireWorkspace as lk, reserveSessionCommandReceipt as ll, reserveToolspaceCallForAttempt as lm, resolveWorkspaceMemoryBlock as ln, resumeHostExportConsumer as lo, retainWorkspaceMutationProcess as lp, retainedProcessReconciliationProof as lq, retainedProcessSettlementIdentity as lr, retireHostExportConsumer as ls, revokeApiKey as lt, revokeConnection as lu, revokeConnectionWithSlackBotSuccessAudit as lv, revokeEnrollment as lw, revokeViewer as lx, rewindHostExportConsumer as ly, rlsContextForWorkspace as lz, type AppendEventInput as m, upsertSessionGoalWithEvent as m$, setConnectionStatus as m0, setEnrollmentDisplayState as m1, setEnrollmentOpStreamState as m2, setEnrollmentWentOffline as m3, setInitialActiveCodexCredential as m4, setRlsContext as m5, setSessionCodexPin as m6, setSessionGoalLastContinuationTurn as m7, setSessionGoalStatus as m8, setSessionGoalStatusWithEvent as m9, updateImportBatchCounts as mA, updateKnowledgeMemory as mB, updatePackInstallationStatus as mC, updatePtySessionActivity as mD, updateRecording as mE, updateRig as mF, updateRigChangeStatus as mG, updateScheduledTask as mH, updateScheduledTaskRun as mI, updateSessionCommandReceiptResult as mJ, updateSessionGoal as mK, updateSessionGoalWithEvent as mL, updateSessionMcpApprovalPolicy as mM, updateSessionMcpServerCredentials as mN, updateSessionTitle as mO, updateVariableSet as mP, updateWorkspace as mQ, updateWorkspaceEnvironment as mR, updateWorkspaceSettings as mS, upsertBillingCustomer as mT, upsertCapabilityCatalogItem as mU, upsertCodexSubscriptionCredential as mV, upsertGitHubInstallation as mW, upsertMachineMetricsLatest as mX, upsertRegistryCapabilityCatalogItem as mY, upsertSandboxSessionEnvelope as mZ, upsertSessionGoal as m_, setSessionLastInputTokensForTurnAttempt as ma, setSessionPin as mb, setSubjectRlsContext as mc, setTemporalWorkflowId as md, setVariableSetVariable as me, setWorkspaceDefaultRig as mf, setWorkspaceEnvironmentVariable as mg, settleCodexCredentialFailover as mh, settleCodexCredentialLeaseLoss as mi, settleRetainedProcess as mj, settleScheduledTaskRunInTransaction as mk, settleSessionAttemptInterruptions as ml, settleSessionIdleWithParentOutbox as mm, shortMemoryId as mn, steerAgentSessionInTransaction as mo, steerQueuedTurnInTransaction as mp, storeIntegrationOAuthClient as mq, submitHumanPromptInTransaction as mr, sumUsageQuantity as ms, supersedeSessionCurrentDirectionInTransaction as mt, touchEnrollmentLastSeen as mu, touchLeaseHolder as mv, updateCodexAllocatorEligibility as mw, updateCodexRotationSettings as mx, updateConnection as my, updateConnectionWithSlackBotSuccessAudit as mz, type ApplyContextCompactionResult as n, upsertWorkspaceModelPolicy as n0, validateHumanInputResponse as n1, verifyDirectWorkspaceMutationSettlement as n2, verifyRetainedProcessMutationSettlement as n3, verifyWorkspaceMutationSettlement as n4, withAccountRls as n5, withCodexCapacityMutation as n6, withCodexCredentialRefreshLock as n7, withCodexTokenDeadline as n8, withRlsContext as n9, withWorkspaceRls as na, withWorkspaceSubjectRls as nb, withWorkspaceUsageLock as nc, workspaceCaptureAtRevision as nd, workspaceCodexSubscriptionActive as ne, type ApplySessionTurnSettlementInput as o, type ApplySessionTurnSettlementResult as p, provisionRoles, type ArmCodexCapacityWaitResult as q, type BootstrapWorkspaceInput as r, CODEX_CAPACITY_REFRESH_MIN_MS as s, CODEX_CREDENTIAL_LEASE_TTL_MS as t, CODEX_RESET_REDEMPTION_OUTCOMES as u, CODEX_ROTATION_STRATEGIES as v, type ClaimCodexResetRedemptionResult as w, type ClaimSessionWorkForAttemptInput as x, type ClaimSessionWorkForAttemptResult as y, type ClaimSlackBotPostOperationResult as z };

package/dist/{schema-D-hyrsFt.d.ts → schema-FoPub9yt.d.ts}

@@ -1085,7 +1085,7 @@ declare const nestedAgentDepthConfiguration: drizzle_orm_pg_core.PgTableWithColu
             tableName: "nested_agent_depth_configuration";
             dataType: "string";
             columnType: "PgText";
-            data: "default" | "deployment";
+            data: "deployment" | "default";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -1097,7 +1097,7 @@ declare const nestedAgentDepthConfiguration: drizzle_orm_pg_core.PgTableWithColu
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: "default" | "deployment";
+            $type: "deployment" | "default";
         }>;
         updatedAt: drizzle_orm_pg_core.PgColumn<{
             name: "updated_at";
@@ -3435,7 +3435,7 @@ declare const slackBotPostOperations: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "slack_bot_post_operations";
             dataType: "string";
             columnType: "PgText";
-            data: "channel" | "user";
+            data: "user" | "channel";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -3447,7 +3447,7 @@ declare const slackBotPostOperations: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: "channel" | "user";
+            $type: "user" | "channel";
         }>;
         targetId: drizzle_orm_pg_core.PgColumn<{
             name: "target_id";
@@ -3488,7 +3488,7 @@ declare const slackBotPostOperations: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "slack_bot_post_operations";
             dataType: "string";
             columnType: "PgText";
-            data: "provider_started" | "completed";
+            data: "completed" | "provider_started";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -3500,7 +3500,7 @@ declare const slackBotPostOperations: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: "provider_started" | "completed";
+            $type: "completed" | "provider_started";
         }>;
         claimHolderId: drizzle_orm_pg_core.PgColumn<{
             name: "claim_holder_id";
@@ -4637,6 +4637,25 @@ declare const sessions: drizzle_orm_pg_core.PgTableWithColumns<{
         }, {}, {
             $type: unknown[];
         }>;
+        skills: drizzle_orm_pg_core.PgColumn<{
+            name: "skills";
+            tableName: "sessions";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown[];
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: unknown[];
+        }>;
         tools: drizzle_orm_pg_core.PgColumn<{
             name: "tools";
             tableName: "sessions";
@@ -4917,13 +4936,32 @@ declare const sessions: drizzle_orm_pg_core.PgTableWithColumns<{
         }, {}, {
             $type: string[];
         }>;
+        firstPartyMcpTools: drizzle_orm_pg_core.PgColumn<{
+            name: "first_party_mcp_tools";
+            tableName: "sessions";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: ("set_session_title" | "goal_set" | "goal_update" | "goal_complete" | "goal_pause" | "memory_search" | "memory_save" | "memory_correct" | "sandboxes_list" | "sandbox_attach" | "sandbox_swap" | "run_on" | "sandbox_provision" | "rig_list" | "rig_get" | "rig_propose_change" | "rig_verify" | "rig_promote" | "sessions_list" | "session_get" | "session_events" | "session_create" | "session_send_message" | "session_pause" | "session_resume" | "session_steer" | "set_other_session_title" | "variable_set_list" | "environment_list" | "variable_set_set_variable" | "environment_set_variable" | "github_connect_link" | "github_token" | "github_repositories_list" | "social_connections_list" | "social_posts_recent" | "social_daily_analysis_context" | "scheduled_tasks_list" | "scheduled_tasks_get" | "scheduled_tasks_create" | "scheduled_tasks_update" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_delete" | "scheduled_task_runs_list" | "slack_bot_list_channels" | "slack_bot_channel_history" | "slack_bot_list_users" | "slack_bot_post_message")[];
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: ("set_session_title" | "goal_set" | "goal_update" | "goal_complete" | "goal_pause" | "memory_search" | "memory_save" | "memory_correct" | "sandboxes_list" | "sandbox_attach" | "sandbox_swap" | "run_on" | "sandbox_provision" | "rig_list" | "rig_get" | "rig_propose_change" | "rig_verify" | "rig_promote" | "sessions_list" | "session_get" | "session_events" | "session_create" | "session_send_message" | "session_pause" | "session_resume" | "session_steer" | "set_other_session_title" | "variable_set_list" | "environment_list" | "variable_set_set_variable" | "environment_set_variable" | "github_connect_link" | "github_token" | "github_repositories_list" | "social_connections_list" | "social_posts_recent" | "social_daily_analysis_context" | "scheduled_tasks_list" | "scheduled_tasks_get" | "scheduled_tasks_create" | "scheduled_tasks_update" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_delete" | "scheduled_task_runs_list" | "slack_bot_list_channels" | "slack_bot_channel_history" | "slack_bot_list_users" | "slack_bot_post_message")[];
+        }>;
         toolPolicy: drizzle_orm_pg_core.PgColumn<{
             name: "tool_policy";
             tableName: "sessions";
             dataType: "json";
             columnType: "PgJsonb";
             data: {
-                mode: "workspace_default" | "explicit" | "inherited" | "legacy";
+                mode: "explicit" | "workspace_default" | "inherited" | "legacy";
                 inheritedFromSessionId: string | null;
             };
             driverParam: unknown;
@@ -4938,7 +4976,7 @@ declare const sessions: drizzle_orm_pg_core.PgTableWithColumns<{
             generated: undefined;
         }, {}, {
             $type: {
-                mode: "workspace_default" | "explicit" | "inherited" | "legacy";
+                mode: "explicit" | "workspace_default" | "inherited" | "legacy";
                 inheritedFromSessionId: string | null;
             };
         }>;
@@ -6257,7 +6295,7 @@ declare const sessionMcpServers: drizzle_orm_pg_core.PgTableWithColumns<{
                     id: string;
                     kind: "repository";
                 }[] | undefined;
-                subjectScope?: "subject" | "workspace" | undefined;
+                subjectScope?: "workspace" | "subject" | undefined;
             };
             driverParam: unknown;
             notNull: false;
@@ -6281,7 +6319,7 @@ declare const sessionMcpServers: drizzle_orm_pg_core.PgTableWithColumns<{
                     id: string;
                     kind: "repository";
                 }[] | undefined;
-                subjectScope?: "subject" | "workspace" | undefined;
+                subjectScope?: "workspace" | "subject" | undefined;
             };
         }>;
         headersEncrypted: drizzle_orm_pg_core.PgColumn<{
@@ -10457,6 +10495,23 @@ declare const sessionSystemUpdates: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        deliveredHistoryItemId: drizzle_orm_pg_core.PgColumn<{
+            name: "delivered_history_item_id";
+            tableName: "session_system_updates";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         deliveredAt: drizzle_orm_pg_core.PgColumn<{
             name: "delivered_at";
             tableName: "session_system_updates";
@@ -14192,7 +14247,7 @@ declare const sandboxWorkspaceMutationAdmissions: drizzle_orm_pg_core.PgTableWit
             tableName: "sandbox_workspace_mutation_admissions";
             dataType: "string";
             columnType: "PgText";
-            data: "resolved" | "rejected" | "retained";
+            data: "rejected" | "resolved" | "retained";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -14591,7 +14646,7 @@ declare const sandboxRetainedProcesses: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "sandbox_retained_processes";
             dataType: "string";
             columnType: "PgText";
-            data: "active" | "exited" | "lost";
+            data: "active" | "lost" | "exited";
             driverParam: string;
             notNull: true;
             hasDefault: true;
@@ -14761,7 +14816,7 @@ declare const sandboxRetainedProcesses: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "sandbox_retained_processes";
             dataType: "string";
             columnType: "PgText";
-            data: "exited" | "lost";
+            data: "lost" | "exited";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -14924,7 +14979,7 @@ declare const sessionRecordings: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "session_recordings";
             dataType: "string";
             columnType: "PgText";
-            data: "recording" | "finalizing" | "available" | "failed";
+            data: "failed" | "available" | "recording" | "finalizing";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -15239,7 +15294,7 @@ declare const workspaceCaptures: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "workspace_captures";
             dataType: "string";
             columnType: "PgText";
-            data: "available" | "failed";
+            data: "failed" | "available";
             driverParam: string;
             notNull: true;
             hasDefault: true;

package/dist/schema.d.ts

@@ -1,3 +1,3 @@
 import 'drizzle-orm';
 import 'drizzle-orm/pg-core';
-export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as slackBotPostOperations, at as socialConnections, au as socialPosts, av as stripeWebhookEvents, aw as usageEvents, ax as workspaceCaptures, ay as workspaceControlEvents, az as workspaceInferenceControls, aA as workspaceInstructionPolicyActivationEvents, aB as workspaceInstructionPolicyHeads, aC as workspaceInstructionPolicyRevisions, aD as workspaceMemberships, aE as workspaceModelPolicies, aF as workspacePacks, aG as workspaceSessionActivityRevisions, aH as workspaceVariableSetVariables, aI as workspaceVariableSets, w as workspaces } from './schema-D-hyrsFt.js';
+export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as slackBotPostOperations, at as socialConnections, au as socialPosts, av as stripeWebhookEvents, aw as usageEvents, ax as workspaceCaptures, ay as workspaceControlEvents, az as workspaceInferenceControls, aA as workspaceInstructionPolicyActivationEvents, aB as workspaceInstructionPolicyHeads, aC as workspaceInstructionPolicyRevisions, aD as workspaceMemberships, aE as workspaceModelPolicies, aF as workspacePacks, aG as workspaceSessionActivityRevisions, aH as workspaceVariableSetVariables, aI as workspaceVariableSets, w as workspaces } from './schema-FoPub9yt.js';

package/dist/schema.js

@@ -97,7 +97,7 @@ import {
   workspaceVariableSetVariables,
   workspaceVariableSets,
   workspaces
-} from "./chunk-N4WTE6SB.js";
+} from "./chunk-PQKVUWQW.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,