@opengeni/db 0.13.4 → 0.14.0

package/dist/provision-roles.d.ts

@@ -1,10 +1,10 @@
-import { TurnInitiatorContext, SessionMcpApprovalPolicy, TurnInitiator, ResourceRef, ToolRef, ReasoningEffort, TurnExecutionPolicyV1, NewSessionDraftOptions, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyTarget, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, SecretForRedaction, KnowledgeMemoryKind, McpCredentialsRequest, McpCredentialAuthNeededReason, McpConnectionResourceScope, ConnectionCredentialsPort, SessionEvent, SessionStatus, SessionHumanInputRequest, SystemUpdateClassification, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdate, SessionEventType, SessionTurnStatus, HumanInputQuestion, Permission, SessionTurn, ConnectionKind, ConnectionStatus, ConnectionMetadata, KnowledgeMemory, CapabilityKind, CapabilitySource, KnowledgeMemoryStatus, KnowledgeSourceRef, ScheduledTaskStatus, ScheduledTaskScheduleSpec, ScheduledTaskRunMode, ScheduledTaskOverlapPolicy, ScheduledTaskAgentConfig, SessionGoalCreatedBy, McpServerConnectionRef as McpServerConnectionRef$1, SocialProvider, SocialConnectionStatus, Session, SessionTurnSource, SandboxBackend, SandboxOs, FileAsset, FileUploadStatus, GitHubRepositoryScope, GitHubInstallationAuthorityKind, SessionGoal, SessionEventReadDirection, SessionEventSemanticClass, SessionEventPayloadMode, SessionAuthorizationListScope, CapabilityPack, RigChangeKind, RigChangeStatus, RigCheck, SessionSkill, SessionToolPolicy, SessionGoalStatus, LineageNode, SessionMcpServerMetadata, RigVersion, BillingBalance, RigChange, AccessContext, HostEventExportBatch, HostUsageExportBatch, ApiKey, Rig, ScheduledTask, ScheduledTaskTriggerType, ScheduledTaskRun, SocialConnection, SocialPost, VariableSet, Workspace, CapabilityInstallation, PackInstallation, CapabilityCatalogItem, HumanInputResponse, ManagedAccount, SessionQueueSnapshot, WorkspaceControlEvent, AccessGrant, WorkspaceRegisteredPack, SessionListResponse, UsageEvent, WorkspaceMember, VariableSetVariableMetadata, PackInstallationStatus, ScheduledTaskRunStatus } from '@opengeni/contracts';
+import { TurnInitiatorContext, SessionMcpApprovalPolicy, TurnInitiator, ResourceRef, ToolRef, ReasoningEffort, TurnExecutionPolicyV1, NewSessionDraftOptions, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyTarget, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, SecretForRedaction, KnowledgeMemoryKind, McpCredentialsRequest, McpCredentialAuthNeededReason, McpConnectionResourceScope, ConnectionCredentialsPort, SessionEvent, SessionStatus, SessionHumanInputRequest, SystemUpdateClassification, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdate, SessionEventType, SessionTurnStatus, HumanInputQuestion, Permission, SessionTurn, ConnectionKind, ConnectionStatus, ConnectionMetadata, KnowledgeMemory, CapabilityKind, CapabilitySource, KnowledgeMemoryStatus, KnowledgeSourceRef, ScheduledTaskStatus, ScheduledTaskScheduleSpec, ScheduledTaskRunMode, ScheduledTaskOverlapPolicy, ScheduledTaskAgentConfig, SessionGoalCreatedBy, McpServerConnectionRef as McpServerConnectionRef$1, SocialProvider, SocialConnectionStatus, Session, SessionTurnSource, SandboxBackend, SandboxOs, FileAsset, FileUploadStatus, GitHubRepositoryScope, GitHubInstallationAuthorityKind, SessionGoal, SessionEventReadDirection, SessionEventSemanticClass, SessionEventPayloadMode, SessionAuthorizationListScope, CapabilityPack, RigChangeKind, RigChangeStatus, RigCheck, SessionSkill, SessionToolPolicy, FirstPartyMcpToolName, SessionGoalStatus, LineageNode, SessionMcpServerMetadata, RigVersion, BillingBalance, RigChange, AccessContext, HostEventExportBatch, HostUsageExportBatch, ApiKey, Rig, ScheduledTask, ScheduledTaskTriggerType, ScheduledTaskRun, SocialConnection, SocialPost, VariableSet, Workspace, CapabilityInstallation, PackInstallation, CapabilityCatalogItem, HumanInputResponse, ManagedAccount, SessionQueueSnapshot, WorkspaceControlEvent, AccessGrant, WorkspaceRegisteredPack, SessionListResponse, UsageEvent, WorkspaceMember, VariableSetVariableMetadata, PackInstallationStatus, ScheduledTaskRunStatus } from '@opengeni/contracts';
 import { environmentsEncryptionKeyBytes, Settings, McpServerConnectionRef } from '@opengeni/config';
 import { refreshCodexToken, CodexRateLimitResetCreditsDetails, ResetCreditFetchFailureReason, CodexTokenSnapshot, CodexFetch, CodexUsagePayload } from '@opengeni/codex';
 import { SQL } from 'drizzle-orm';
 import { PgDatabase, PgTransactionConfig } from 'drizzle-orm/pg-core';
 import postgres from 'postgres';
-import { s as sessionCommandReceipts, w as workspaces, a as sessions, b as sessionTurns, c as sessionTurnAttempts, d as composerDrafts, n as newSessionDrafts, e as schema, f as enrollmentOsValues, g as enrollmentExposureValues, h as deviceEnrollmentStatusValues, i as enrollmentStatusValues, j as sandboxKindValues, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues } from './schema-SbaSoRdr.js';
+import { s as sessionCommandReceipts, w as workspaces, a as sessions, b as sessionTurns, c as sessionTurnAttempts, d as composerDrafts, n as newSessionDrafts, e as schema, f as enrollmentOsValues, g as enrollmentExposureValues, h as deviceEnrollmentStatusValues, i as enrollmentStatusValues, j as sandboxKindValues, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues } from './schema-FoPub9yt.js';
 import './migrate.js';
 import { FetchLike, DnsLookup } from '@opengeni/network';
 
@@ -3482,6 +3482,7 @@ type SessionCreateInput = {
     rigId?: string | null;
     rigVersionId?: string | null;
     firstPartyMcpPermissions?: Permission[] | null;
+    firstPartyMcpTools?: FirstPartyMcpToolName[] | null;
     instructions?: string | null;
     parentSessionId?: string | null;
     createIdempotencyKey?: string | null;
@@ -6005,6 +6006,48 @@ declare function markSessionAttemptQuiesced(db: Database, input: {
      * receipt. */
     allowUninterrupted?: boolean;
 }): Promise<SessionEvent[]>;
+type ReconcileSessionAttemptQuiescenceResult = {
+    action: "quiesced";
+    events: SessionEvent[];
+} | {
+    action: "pending";
+    events: [];
+} | {
+    action: "stale";
+    events: [];
+};
+type SessionAttemptActivityRef = {
+    workflowId: string;
+    workflowRunId: string;
+    activityId: string;
+    quiesced: boolean;
+};
+declare function getSessionAttemptActivityRef(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    attemptId: string;
+    temporalWorkflowId: string;
+}): Promise<SessionAttemptActivityRef | null>;
+/**
+ * Recover the quiescence receipt when the original activity disappeared after
+ * its attempt was durably interrupted. The caller first proves through
+ * Temporal that the exact activity is absent or its server-owned heartbeat
+ * lease expired. The closed attempt then cannot admit another workspace writer,
+ * and every writer it did admit (including retained-process child writes) must
+ * carry a physical settlement before the ordinary receipt transaction is
+ * allowed to run.
+ */
+declare function reconcileSessionAttemptQuiescence(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    attemptId: string;
+    temporalWorkflowId: string;
+    temporalWorkflowRunId: string;
+    temporalActivityId: string;
+    activitySettled: boolean;
+}): Promise<ReconcileSessionAttemptQuiescenceResult>;
 /**
  * Settle every durable interruption cause for one exact first-class attempt.
  * Steer wins the logical-turn fate when causes coexist; effective control after
@@ -6353,12 +6396,13 @@ declare function enqueueSessionWorkflowWakeIfRunnable(db: Database, input: {
 declare function claimPendingSessionWorkflowWakes(db: Database, limit?: number): Promise<SessionWorkflowWake[]>;
 /**
  * Acknowledge an immediate post-commit signal only after it cannot strand an
- * accepted Agent Steer. Temporal accepting a signal is transport evidence, not
- * proof that a closing workflow observed Postgres or admitted its pending
- * direction. While active control still has an actionable Agent Steer, retain
- * the revision so the bounded outbox dispatcher retries signalWithStart. The
- * attempt-fenced claim consumes the update once; a real Pause is the typed
- * blocker and may acknowledge this revision because Resume commits a new one.
+ * accepted direction or an interrupted attempt awaiting writer-set proof.
+ * Temporal accepting a signal is transport evidence, not proof that a closing
+ * workflow observed Postgres. While active control still has an actionable
+ * Agent Steer or pending quiescence, retain the revision so the bounded outbox
+ * dispatcher retries signalWithStart. The attempt-fenced claim consumes an
+ * Agent Steer once; a real Pause is the typed blocker and may acknowledge this
+ * revision because Resume commits a new one.
  *
  * An older sender may advance only its own revision; it cannot clear a claim or
  * failure state belonging to a newer revision. The control -> workspace ->
@@ -6369,7 +6413,7 @@ type SessionWorkflowWakeDeliveryResult = {
     action: "acknowledged";
 } | {
     action: "pending_admission";
-    blocker: "pending_agent_steer";
+    blocker: "pending_agent_steer" | "pending_quiescence";
 };
 declare function markSessionWorkflowWakeDelivered(db: Database, input: Omit<SessionWorkflowWake, "interruptionRequested">): Promise<SessionWorkflowWakeDeliveryResult>;
 /** Record delivery failure; the claim already scheduled the bounded retry. */
@@ -6484,4 +6528,4 @@ declare function appendSessionEventsWithLockedSessionUpdate(db: Database, worksp
 }): Promise<SessionEvent[]>;
 declare function sessionSubject(workspaceId: string, sessionId: string): string;
 
-export { type CodexRateLimitResetCreditsAccountResult as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BeginSandboxRematerializationResult as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type ClearSessionContextResult as D, type CodexAccountStatus as E, type CodexAccountUsageSnapshot as F, type CodexAllocatorUpdateResult as G, type CodexAuthDeps as H, type CodexCapacityAvailabilityDecision as I, type CodexCapacityMutationResult as J, type CodexCapacityResetKind as K, type CodexCapacitySelectionContext as L, type CodexCapacityWait as M, type CodexCapacityWaitStatus as N, type CodexCapacityWakeTarget as O, type CodexCredentialForRun as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialLeaseCandidateFilter as Q, type CodexCredentialLeaseCandidateFilterResult as R, type CodexCredentialLeasePolicyScopeResolver as S, type CodexCredentialLeaseQuarantine as T, type CodexCredentialLeaseResult as U, type CodexCredentialLeaseSelection as V, type CodexCredentialLeaseSelectionContext as W, type CodexCredentialStatus as X, type CodexCredentialTokens as Y, type CodexLeaseAccountStatus as Z, type CodexPinSource as _, type AcceptSessionApprovalDecisionResult as a, type HostMcpCredentialResolverContext as a$, type CodexResetRedemptionAttempt as a0, type CodexResetRedemptionOutcome as a1, type CodexResetRedemptionRecovery as a2, type CodexResetRedemptionSendNotReadyReason as a3, type CodexResetRedemptionStatus as a4, type CodexRotationSettings as a5, type CodexRotationStrategy as a6, type CodexTokenDeadlineClock as a7, type CodexTokenDeadlineOptions as a8, type CompleteSlackBotPostOperationResult as a9, type EditQueueCommandResult as aA, type EffectiveControlBlocker as aB, type EffectiveControlResumeOption as aC, type EffectiveControlState as aD, type EffectiveSessionControl as aE, type EnableCapabilityInstallationInput as aF, type EnabledMcpCapabilityServer as aG, type EnqueueSessionTurnInput as aH, type EnrollmentExposure as aI, type EnrollmentOs as aJ, type EnrollmentRecord as aK, type EnrollmentStatus as aL, type ExpiredDrainingSandboxLeaseCount as aM, type ExpiredFileUploadCleanupClaim as aN, FORCE_RLS_TABLES as aO, type FenceCodexResetRedemptionSendResult as aP, type FileUploadCleanupClaimResult as aQ, type ForceDrainResult as aR, type FrozenTurnInitiator as aS, type GitHubInstallation as aT, type GitHubInstallationAccess as aU, GitHubInstallationAuthorityCommitError as aV, type GoalContinuationDecision as aW, type HostExportConsumerStatus as aX, type HostExportKind as aY, HostExportPayloadError as aZ, HostMcpCredentialBindingError as a_, type ComposerDraftRow as aa, type ConnectionBrokerDeps as ab, type ConnectionCredentialForBroker as ac, type ConnectionMetadataWithVerification as ad, ConnectionRefreshHttpError as ae, type ConsumeOAuthStateNonceInput as af, type CorrectWorkspaceMemoryInput as ag, type CorrectWorkspaceMemoryResult as ah, type CreateCapabilityCatalogItemInput as ai, type CreateConnectionInput as aj, type CreateDbOptions as ak, type CreateImportBatchInput as al, type CreateKnowledgeMemoryInput as am, type CreatePackInstallationInput as an, type CreateScheduledTaskInput as ao, type CreateSessionGoalInput as ap, type CreateSessionMcpServerInput as aq, type CreateSocialConnectionInput as ar, type CreateSocialPostInput as as, type CreditBalanceByAccount as at, type Database as au, type DatabaseFailureCode as av, type DbClient as aw, type DbSession as ax, type DeviceEnrollmentRequestRecord as ay, type DeviceEnrollmentStatus as az, type AcceptSessionHumanInputResponseResult as b, type ReconcileColdLostLeaseInstanceBlockersResult as b$, HostMcpCredentialScopeError as b0, HumanInputResponseValidationError as b1, type IdempotentPersistenceTransactionOptions as b2, type ImportBatch as b3, type InitializeSessionStartInput as b4, type InitializeSessionStartResult as b5, type InstallOrReadTurnExecutionPolicyForAttemptResult as b6, type IntegrationOAuthClientForUse as b7, type LeaseHolderKind as b8, type LeaseSnapshot as b9, type MarkWarmLeaseInstanceLostResult as bA, type MaterializeGoalContinuationResult as bB, type MemoryBlockRecord as bC, type MemoryEmbedder as bD, type MemorySanitizeResult as bE, type MeterableWarmLease as bF, NON_RLS_RUNTIME_TABLES as bG, type NestedAgentDepthDeploymentPolicy as bH, type NestedAgentDepthPolicySource as bI, NewSessionDraftAccessError as bJ, NewSessionDraftConflictError as bK, type NewSessionDraftRow as bL, PROTECTED_NO_DIRECT_DML_TABLES as bM, type PendingSessionToolCallInput as bN, type PersistenceFailureDetails as bO, type PersistenceRetryOutcome as bP, type QueueCommandConflictCode as bQ, QueueCommandConflictError as bR, type QueueCommandResult as bS, type QueuedTurnRow as bT, RUNTIME_DML_TABLES as bU, RUNTIME_FULL_DML_TABLES as bV, RUNTIME_READ_INSERT_TABLES as bW, RUNTIME_READ_ONLY_TABLES as bX, RUNTIME_TABLE_PRIVILEGES as bY, type ReapDrainable as bZ, type ReconcileCodexCapacityWaitResult as b_, type ListKnowledgeMemoryOptions as ba, type ListSessionEventPageOptions as bb, type ListSessionEventsOptions as bc, type ListSessionsForSubjectOptions as bd, type ListSessionsOptions as be, type LiveModalSandboxLeaseAttribution as bf, type LostProviderWorkspaceSettlement as bg, MACHINE_METRICS_SERIES_INTERVAL_MS as bh, MAX_INTERNAL_UPDATE_BATCH_BYTES as bi, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as bj, MAX_INTERNAL_UPDATE_BYTES as bk, MEMORY_ACTIVE_RECORD_CAP as bl, MEMORY_BLOCK_KIND_ORDER as bm, MEMORY_BLOCK_RECORD_LIMIT as bn, MEMORY_CORRECT_TOOL_DESCRIPTION as bo, MEMORY_KIND_SECTION_TITLES as bp, MEMORY_NEAR_DUP_COSINE_THRESHOLD as bq, MEMORY_NEAR_DUP_NEIGHBORS as br, MEMORY_SAVE_TOOL_DESCRIPTION as bs, MEMORY_SEARCH_DEFAULT_LIMIT as bt, MEMORY_SEARCH_MAX_LIMIT as bu, MEMORY_SEARCH_TOOL_DESCRIPTION as bv, MEMORY_TEXT_MAX_CHARS as bw, MEMORY_VISIBLE_RECORD_CAP as bx, type MachineMetricsRow as by, type MachineMetricsSample as bz, type AccrueWarmSecondsResult as c, SanitizedDatabasePersistenceCause as c$, type RecoverSessionDispatchInput as c0, type RecoverSessionDispatchResult as c1, type RefreshTransportOptions as c2, type RegisterWorkspacePackInput as c3, type RegistryCapabilityCatalogItemInput as c4, type RegistryCatalogSurfaceKey as c5, type ReplaceIntegrationOAuthClientInput as c6, type RequestSessionTurnRecoveryInput as c7, type RequestSessionTurnRecoveryResult as c8, type ResolveConnectionCredentialInput as c9, SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT as cA, SESSION_LIST_SNAPSHOT_MAX_IDS as cB, type SafeDatabaseErrorFacts as cC, type SandboxArchiveAvailability as cD, type SandboxArchiveRevision as cE, SandboxImageConflictError as cF, type SandboxKind as cG, type SandboxLeaseLiveness as cH, SandboxLeaseRecoveryBlockedError as cI, SandboxLeaseSupersededError as cJ, type SandboxOpenPtySessionRow as cK, type SandboxProviderExistence as cL, type SandboxPtyProcessIdentity as cM, type SandboxPtySessionRow as cN, type SandboxRecord as cO, type SandboxRecoveryState as cP, type SandboxRestoreStatus as cQ, type SandboxRetainedProcess as cR, type SandboxRetainedProcessIdentity as cS, SandboxRetainedProcessPromotionFencedError as cT, type SandboxRetainedProcessReconciliationClaim as cU, type SandboxRetainedProcessState as cV, SandboxRigConflictError as cW, type SandboxWorkspaceMutationAdmission as cX, SandboxWorkspaceMutationFencedError as cY, type SandboxWorkspaceMutationProviderOutcome as cZ, type SandboxWorkspaceReadiness as c_, type ResolveConnectionCredentialResult as ca, type RetainedFileArtifact as cb, type RetainedProcessProviderProof as cc, RigActiveVersionChangedError as cd, RigChangeAlreadyVerifyingError as ce, type RigChangeMonitoringSummary as cf, RigChangeTransitionError as cg, type RigVersionContentInput as ch, type RigVersionMonitoringSummary as ci, type RlsContext as cj, type RlsStrategy as ck, type RuntimeDatabaseIdentity as cl, type RuntimeDatabasePosture as cm, RuntimeDatabasePostureError as cn, type RuntimeDatabasePostureOptions as co, type RuntimeRoutinePosture as cp, type RuntimeSchemaPosture as cq, type RuntimeTableDmlPrivilege as cr, type RuntimeTablePosture as cs, type RuntimeTablePrivilegeContract as ct, SESSION_ANCESTRY_LIMIT as cu, SESSION_DISCOVERY_CONTROL_TARGET_LIMIT as cv, SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS as cw, SESSION_DISCOVERY_GOAL_MAX_CHARS as cx, SESSION_DISCOVERY_MESSAGE_MAX_CHARS as cy, SESSION_EVENT_DB_PAGE_MAX_BYTES as cz, type AcquireLeaseInput as d, type StreamAcknowledgment as d$, type SaveWorkspaceMemoryInput as d0, type SaveWorkspaceMemoryResult as d1, type SessionAttemptInterruptionSettlement as d2, type SessionCodexState as d3, type SessionCommandActor as d4, SessionCommandIdempotencyError as d5, type SessionCommandReceiptRow as d6, SessionContextBusyError as d7, SessionControlConflictError as d8, SessionControlInvariantError as d9, type SessionRecordingCodec as dA, type SessionRecordingMode as dB, type SessionRecordingRow as dC, type SessionRecordingState as dD, type SessionSpawnDenial as dE, type SessionSpawnDenialCode as dF, SessionSpawnDeniedDbError as dG, type SessionSystemUpdateOutboxDelivery as dH, SessionToolPolicyVersionConflictError as dI, type SessionTurnAttemptOutcome as dJ, type SessionTurnForExecution as dK, type SessionTurnRecordingSettlement as dL, type SessionWorkPeek as dM, type SessionWorkTrigger as dN, type SessionWorkflowWake as dO, type SessionWorkflowWakeDeliveryResult as dP, type SetSessionCodexPinOptions as dQ, type SetSessionGoalStatusEvent as dR, type SettleCodexCredentialFailoverResult as dS, type SettleCodexCredentialLeaseLossResult as dT, type SlackBotInstallCallbackFailureReason as dU, type SlackBotInstallCallbackFailureStage as dV, SlackBotLifecycleSuccessAuditError as dW, type SlackBotPostOperation as dX, type SteerQueueCommandResult as dY, type StoreIntegrationOAuthClientInput as dZ, type StoredIntegrationOAuthClient as d_, type SessionControlMutationResult as da, type SessionCreateDeniedResult as db, type SessionCreateInput as dc, type SessionCreateResult as dd, type SessionCreateSuccessResult as de, type SessionDepthPolicy as df, type SessionDiscoveryControl as dg, type SessionDiscoveryCursor as dh, type SessionDiscoveryOrderBy as di, type SessionDiscoverySummary as dj, type SessionEventPage as dk, SessionEventPersistenceError as dl, type SessionEventWriteLockInput as dm, type SessionEventWriteLocks as dn, type SessionGoalContinuationProjection as dp, SessionIdConflictError as dq, type SessionLineage as dr, SessionListAccessError as ds, type SessionListCursor as dt, SessionListCursorError as du, SessionListCursorExpiredError as dv, SessionListSnapshotLimitError as dw, type SessionMcpServerForRun as dx, SessionPinAccessError as dy, SessionPinVersionConflictError as dz, type AcquireLeaseResult as e, approveDeviceEnrollmentRequest as e$, type SubmitHumanPromptResult as e0, type ToolspaceCallReservation as e1, type ToolspaceTurnAttemptClaims as e2, type TurnAttemptFenceRejectReason as e3, type UpdateConnectionInput as e4, type UpdateImportBatchCountsInput as e5, type UpdateKnowledgeMemoryInput as e6, type UpdateScheduledTaskInput as e7, type UpdateSessionMcpApprovalPolicyResult as e8, type UpdateSessionMcpServerCredentialsInput as e9, acceptSessionApprovalDecision as eA, acceptSessionHumanInputResponse as eB, accrueWarmSeconds as eC, acknowledgeHostExportBatch as eD, acquireCodexCredentialLease as eE, acquireLease as eF, activateRigVersion as eG, activateWorkspaceInstructionPolicyRevision as eH, addSessionSystemUpdate as eI, addSessionSystemUpdateWithSourceMutation as eJ, admitToolspaceTurnAttempt as eK, adoptCodexResetRedemptionAttempt as eL, advanceWorkspaceGeneration as eM, advanceWorkspaceGenerationForDirectRequest as eN, advanceWorkspaceGenerationForRetainedProcess as eO, allAccountPermissions as eP, allWorkspacePermissions as eQ, appendSessionEventToSandboxGroup as eR, appendSessionEvents as eS, appendSessionEventsAndUpdateSession as eT, appendSessionEventsForTurnAttempt as eU, appendSessionEventsWithLockedSessionUpdate as eV, appendSessionHistoryItems as eW, applyContextCompaction as eX, applyCreditDebitUpToBalance as eY, applyCreditLedgerEntry as eZ, applySessionTurnSettlement as e_, type UpdateSessionMcpServerCredentialsResult as ea, type UpsertCodexSubscriptionCredentialResult as eb, type UserLookup as ec, type VariableSetForRun as ed, WORKSPACE_MEMORY_BLOCK_EMPTY as ee, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as ef, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as eg, type WorkspaceCaptureCommitResult as eh, type WorkspaceCaptureGcPlan as ei, type WorkspaceCaptureGcRow as ej, type WorkspaceCaptureRow as ek, type WorkspaceControlLockMode as el, type WorkspaceControlMutationResult as em, type WorkspaceControlRow as en, type WorkspaceEnvironmentForRun as eo, WorkspaceInstructionPolicyConflictError as ep, WorkspaceInstructionPolicyInvalidOperationError as eq, WorkspaceInstructionPolicyLegacyUnavailableError as er, WorkspaceInstructionPolicyNotFoundError as es, type WorkspaceMemoryOrigin as et, type WorkspaceMemorySearchInput as eu, type WorkspaceMemorySearchMode as ev, type WorkspaceMemorySearchResult as ew, type WorkspaceModelPolicy as ex, abandonCodexResetRedemptionBeforeProvider as ey, abandonRecordingForTurnAttempt as ez, type ActiveRetainedProcessOwnerCount as f, countWorkspacesForAccount as f$, areGitHubRepositoriesAllowedForWorkspace as f0, armCodexCapacityWait as f1, assertAgentCommandAuthorityInTransaction as f2, assertRuntimeDatabasePosture as f3, autoResumeSessionBranchInTransaction as f4, beginRigChangeVerificationAttempt as f5, beginSandboxRematerialization as f6, bindAuthorizedGitHubInstallationRepositories as f7, bindGitHubInstallationRepositories as f8, bootstrapWorkspace as f9, completeFileUpload as fA, completeFileUploadCleanup as fB, completeSlackBotPostOperation as fC, computeWorkspaceCaptureGcPlan as fD, confirmDrainCold as fE, consumeDeviceEnrollmentRequest as fF, consumeIntegrationOAuthStateNonce as fG, consumeNewSessionDraftInTransaction as fH, correctWorkspaceMemory as fI, countActiveApiKeysForWorkspace as fJ, countActiveRetainedProcessesByOwnerState as fK, countActiveSessionHistoryItems as fL, countActiveSessionsForWorkspace as fM, countActiveSessionsUsingEnvironment as fN, countActiveSessionsUsingVariableSet as fO, countConsecutiveReactiveRotations as fP, countExpiredDrainingSandboxLeases as fQ, countQueuedTurns as fR, countRigs as fS, countSandboxLeasesByLiveness as fT, countScheduledTasksForWorkspace as fU, countScheduledTasksUsingEnvironment as fV, countScheduledTasksUsingVariableSet as fW, countSessionHistoryItems as fX, countSessionsUsingRig as fY, countVariableSets as fZ, countWorkspaceEnvironments as f_, buildChildCompletionDigest as fa, buildCodexTokenResolver as fb, buildConnectionTokenResolver as fc, buildHostConnectionTokenResolver as fd, canonicalSessionCommandHash as fe, claimCodexResetRedemption as ff, claimExpiredFileUploadCleanup as fg, claimFileUploadCleanup as fh, claimHostExportBatch as fi, claimPendingSessionSystemUpdateOutbox as fj, claimPendingSessionWorkflowWakes as fk, claimSessionWorkForAttempt as fl, claimSlackBotPostOperation as fm, claimTerminalRetainedProcesses as fn, clearDurablePendingSessionToolCalls as fo, clearEnrollmentWentOffline as fp, clearPendingSessionToolspaceCall as fq, clearSessionContext as fr, clearSessionGoal as fs, clearedContextMarkerItem as ft, closePtySession as fu, closeSessionTurnAttemptInTransaction as fv, codexCapacityRefreshBackoffMs as fw, commitWarmingToWarm as fx, completeCodexResetRedemption as fy, completeExpiredFileUploadCleanup as fz, type ActiveSandboxPointer as g, ensureManagedAccessForUser as g$, createApiKey as g0, createConnection as g1, createConnectionWithSlackBotSuccessAudit as g2, createDb as g3, createDeviceEnrollmentRequest as g4, createEnrollment as g5, createFileUpload as g6, createImportBatch as g7, createKnowledgeMemory as g8, createRig as g9, deleteRigIfNoActiveSessions as gA, deleteScheduledTask as gB, deleteSessionQueueItemInTransaction as gC, deleteVariableSet as gD, deleteVariableSetVariable as gE, deleteWorkspace as gF, deleteWorkspaceCaptureRows as gG, deleteWorkspaceEnvironment as gH, deleteWorkspaceEnvironmentVariable as gI, deleteWorkspacePack as gJ, denyDeviceEnrollmentRequest as gK, diffWorkspaceInstructionPolicyContent as gL, diffWorkspaceInstructionPolicyRevisions as gM, disableCapabilityInstallation as gN, disableHostExportConsumer as gO, disconnectAllCodexAccounts as gP, disconnectCodexAccount as gQ, editQueuedTurnInTransaction as gR, enableCapabilityInstallation as gS, enablePackInstallation as gT, encodeSessionListCursor as gU, encryptEnvironmentValue as gV, enqueueSessionTurn as gW, enqueueSessionWorkflowWake as gX, enqueueSessionWorkflowWakeIfRunnable as gY, enqueueSessionWorkflowWakeInTransaction as gZ, ensureCodexRotationSettings as g_, createRigChange as ga, createRigVersion as gb, createRigVersionForChangePromotion as gc, createSandbox as gd, createScheduledTask as ge, createScheduledTaskRun as gf, createSession as gg, createSessionGoal as gh, createSessionMcpServers as gi, createSessionWithIdempotencyKey as gj, createSessionWithIdempotencyKeyResult as gk, createSocialConnection as gl, createSocialPost as gm, createVariableSet as gn, createWorkspace as go, createWorkspaceEnvironment as gp, createWorkspaceInstructionPolicyDraft as gq, databaseFailureCode as gr, deadLetterHostExportHead as gs, decodeSessionListCursor as gt, decryptEnvironmentValue as gu, decryptedCapabilityHeaders as gv, deferRetainedProcessReconciliation as gw, deleteGitHubInstallationBinding as gx, deleteRecording as gy, deleteRig as gz, type AddSessionSystemUpdateInput as h, getSessionCodexState as h$, estimateMemoryTokens as h0, evaluateGoalContinuation as h1, evaluateRuntimeDatabasePosture as h2, evaluateSessionControl as h3, evaluateSessionControls as h4, evaluateSessionDiscoveryControls as h5, expireSessionHumanInputRequest as h6, failHostExportBatch as h7, failSandboxRematerialization as h8, failWarmingToCold as h9, getKnowledgeMemory as hA, getLatestRunState as hB, getLatestStartedSessionTurn as hC, getManagedAccount as hD, getManagedUserByEmail as hE, getMaterializedSandboxFileResources as hF, getNestedAgentDepthDeploymentPolicy as hG, getNewSessionDraftInTransaction as hH, getOpenPtySession as hI, getOrCreateSessionSystemUpdateOutbox as hJ, getPackInstallation as hK, getPendingDeviceEnrollmentRequestByUserCode as hL, getPendingDeviceEnrollmentRequestByUserCodeGlobal as hM, getRecording as hN, getRetainedFileArtifact as hO, getRetainedProcess as hP, getRig as hQ, getRigByName as hR, getRigChange as hS, getRigName as hT, getRigVersion as hU, getRigVersionById as hV, getSandbox as hW, getSandboxSessionEnvelope as hX, getScheduledTask as hY, getSession as hZ, getSessionByCreateIdempotencyKey as h_, fenceCodexResetRedemptionSend as ha, fetchCodexRateLimitResetCreditsForAccount as hb, fetchCodexUsageForAccount as hc, finalizeEnrollmentByToken as hd, findActiveApiKeyByHash as he, forceDrainOverLimitViewerOnlyBoxes as hf, frozenInitiatorForCommandActor as hg, getActiveSessionHistoryItems as hh, getActiveSessionTurnForExecution as hi, getAnySessionInGroup as hj, getBillingBalance as hk, getBillingCustomer as hl, getCapabilityCatalogItem as hm, getCapabilityInstallation as hn, getCodexCapacityWaitForSession as ho, getCodexCredentialStatus as hp, getCodexResetRedemptionAttempt as hq, getCodexRotationSettings as hr, getComposerDraftInTransaction as hs, getConnectionMetadata as ht, getDeviceEnrollmentRequestByDeviceCode as hu, getEnrollment as hv, getFile as hw, getFileUpload as hx, getHostExportConsumerStatus as hy, getHumanInputResumeForEvent as hz, type AddSessionSystemUpdateResult as i, listCodexAccountStatuses as i$, getSessionEvent as i0, getSessionEventByClientEventId as i1, getSessionForSubject as i2, getSessionGoal as i3, getSessionGoalWithContinuation as i4, getSessionHistoryItems as i5, getSessionHumanInputRequest as i6, getSessionLineage as i7, getSessionQueueSnapshot as i8, getSessionRootId as i9, hasCreditLedgerEntry as iA, hashMemoryText as iB, heartbeatCodexCredentialLease as iC, heartbeatCodexCredentialLeaseUntil as iD, heartbeatLeaseHolder as iE, importLegacyWorkspaceInstructionPolicyDraft as iF, ingestMachineMetricsSample as iG, initializeSessionStartAtomically as iH, insertFailedWorkspaceCapture as iI, insertMachineMetricsSeries as iJ, insertPtySession as iK, insertRecording as iL, insertWorkspaceCapture as iM, inspectRuntimeDatabasePosture as iN, installOrReadTurnExecutionPolicyForAttempt as iO, interruptedToolCallResult as iP, isCodexBilledTurn as iQ, isDatabasePersistenceFailure as iR, isMemoryTextTooLong as iS, isRetryablePersistenceSqlState as iT, isSessionCompactionRequested as iU, isSessionEventPersistenceError as iV, isStripeWebhookProcessed as iW, latestWorkspaceCapture as iX, listApiKeys as iY, listCapabilityCatalogItems as iZ, listCapabilityInstallations as i_, getSessionSpawnDenial as ia, getSessionSpawnDenialByIdempotencyKey as ib, getSessionSystemUpdateOutboxByDedupeKey as ic, getSessionTurn as id, getSessionTurnForAttempt as ie, getSlackBotPostOperation as ig, getSocialConnection as ih, getStoredCapabilityHeaderCiphertext as ii, getStreamAcknowledgment as ij, getVariableSet as ik, getVariableSetByName as il, getVariableSetValuesForRun as im, getWorkspace as io, getWorkspaceControlEvent as ip, getWorkspaceDefaultRigId as iq, getWorkspaceEnvironment as ir, getWorkspaceEnvironmentByName as is, getWorkspaceEnvironmentValuesForRun as it, getWorkspaceGrant as iu, getWorkspaceInstructionPolicyRevision as iv, getWorkspaceModelPolicy as iw, getWorkspacePack as ix, grantWorkspaceAccess as iy, hasAuditableGitHubInstallationAuthority as iz, type AdoptCodexResetRedemptionResult as j, markSessionAttemptQuiesced as j$, listCodexResetRedemptionRecoveries as j0, listConnectionsMetadata as j1, listCreditBalancesByAccount as j2, listDistinctRigVersionIdsInGroup as j3, listDistinctVariableSetIdsInGroup as j4, listEnabledMcpCapabilityServers as j5, listEnrollments as j6, listGitHubInstallationAccessForWorkspace as j7, listGitHubInstallationIdsForWorkspace as j8, listGitHubInstallationsForWorkspace as j9, listSessionSpawnDenials as jA, listSessionSystemUpdatesForTurn as jB, listSessionTurns as jC, listSessions as jD, listSessionsForSubject as jE, listSocialConnections as jF, listSocialPosts as jG, listUsageEvents as jH, listVariableSets as jI, listWorkspaceControlEvents as jJ, listWorkspaceEnvironments as jK, listWorkspaceInstructionPolicyRevisions as jL, listWorkspaceMembers as jM, listWorkspacePacks as jN, listWorkspacesForSubject as jO, loadCodexCredentialForRun as jP, loadConnectionCredentialForBroker as jQ, loadIntegrationOAuthClient as jR, loadVariableSetForRun as jS, loadWorkspaceEnvironmentForRun as jT, lockSessionEventWriteRows as jU, lockWorkspaceInferenceControl as jV, markFileUploadFailed as jW, markSandboxFileResourcesMaterialized as jX, markSandboxProviderReady as jY, markSandboxRestoreVerifying as jZ, markScheduledTaskRunFailedIfQueued as j_, listKnowledgeMemories as ja, listLiveModalSandboxLeaseAttributions as jb, listMeterableWarmLeases as jc, listOpenPtySessions as jd, listOutstandingSessionSystemUpdates as je, listPackInstallations as jf, listPendingCodexCapacityWakeTargets as jg, listPendingSessionTurns as jh, listRecordings as ji, listRegistryCatalogSurfaceKeys as jj, listRigChangeMonitoringSummaries as jk, listRigChanges as jl, listRigVersionMonitoringSummaries as jm, listRigVersions as jn, listRigs as jo, listSandboxes as jp, listScheduledTaskRuns as jq, listScheduledTasks as jr, listSessionDiscoverySummaries as js, listSessionEventPage as jt, listSessionEvents as ju, listSessionHumanInputRequests as jv, listSessionIdsInGroup as jw, listSessionMcpServerMetadata as jx, listSessionMcpServersForChildInheritance as jy, listSessionMcpServersForRun as jz, AgentCommandAuthorityError as k, registerSessionTurnAttemptClaim as k$, markSessionSystemUpdateOutboxDeliveredInTransaction as k0, markSessionSystemUpdateOutboxFailed as k1, markSessionWorkflowWakeDelivered as k2, markSessionWorkflowWakeFailed as k3, markStaleRegistryCatalogItems as k4, markStripeWebhookProcessed as k5, markWarmLeaseInstanceLost as k6, materializeGoalContinuation as k7, mcpServerIdForCapability as k8, moveQueuedTurnInTransaction as k9, reapStaleLeaseHoldersGlobal as kA, reconcileCodexCapacityWait as kB, reconcileColdLostLeaseInstanceBlockers as kC, recordAuditEvent as kD, recordCodexAccountConnectors as kE, recordCodexAccountUsage as kF, recordCodexAccountUsageWithWakeTargets as kG, recordCodexTokenRefresh as kH, recordConnectionTokenRefresh as kI, recordConnectionUsed as kJ, recordLeaseDataPlaneUrl as kK, recordLeaseTerminalDataPlaneUrl as kL, recordPendingSessionToolCallResult as kM, recordRetainedProcessReconciliationProof as kN, recordSessionActiveCodexCredential as kO, recordSkippedContextCompaction as kP, recordSlackBotInstallCallbackFailure as kQ, recordStreamAcknowledgment as kR, recordStripeWebhookEvent as kS, recordUsageEvent as kT, recordWarmingSandboxCreated as kU, recoverSessionDispatch as kV, refreshOAuthConnectionCredential as kW, registerDbBinding as kX, registerHostExportConsumer as kY, registerInternalUpdateWakeInTransaction as kZ, registerPendingSessionToolCall as k_, mutateSessionControlInTransaction as ka, mutateWorkspaceControlInTransaction as kb, nestedPostgresSqlState as kc, newSessionDraftToolsProvided as kd, nextSessionHistoryPosition as ke, normalizeBearerScheme as kf, normalizeMemoryText as kg, orphanedResultRowIndicesForRepair as kh, peekSessionWork as ki, persistDrainSnapshot as kj, persistWarmSnapshot as kk, planWorkspaceCaptureGc as kl, projectEffectiveControlForRelatedAccess as km, projectSessionForRelatedAccess as kn, pruneHostExportOutbox as ko, publicNewSessionDraftOptions as kp, quarantineCodexCredentialForLease as kq, reArmDrainingLease as kr, readActiveSandbox as ks, readLease as kt, readMachineMetricsLatest as ku, readMachineMetricsLatestForWorkspace as kv, readMachineMetricsSeries as kw, readWorkspaceArchiveCapturePreflight as kx, reapExpiredSessionListSnapshots as ky, reapStaleLeaseHolders as kz, type AgentInternalUpdateCommandResult as l, setEnrollmentWentOffline as l$, registerSessionWorkflowWakeInTransaction as l0, registerWorkspacePack as l1, releaseCodexCredentialLease as l2, releaseCodexResetRedemptionClaim as l3, releaseLeaseHolder as l4, releaseSlackBotPostOperationClaim as l5, removeWorkspaceMember as l6, renameCodexAccount as l7, renderWorkspaceMemoryBlock as l8, replaceIntegrationOAuthClient as l9, runtimeDatabaseReadyCheck as lA, safeDatabaseErrorFacts as lB, sanitizeEventPayload as lC, sanitizeEventString as lD, sanitizeMemoryText as lE, sanitizeModelPayload as lF, saveComposerDraftInTransaction as lG, saveNewSessionDraftInTransaction as lH, saveRunState as lI, saveWorkspaceMemory as lJ, searchWorkspaceMemories as lK, seedNewSessionDraftInTransaction as lL, sendAgentMessageInTransaction as lM, serializeEffectiveSessionControl as lN, sessionAuthorizationScopeFilter as lO, sessionSubject as lP, sessionTreeStatsForSessions as lQ, sessionsWithActiveOpOnEnrollment as lR, setActiveCodexCredential as lS, setActiveSandbox as lT, setCodexCredentialExhausted as lU, setCodexCredentialExhaustedWithWakeTargets as lV, setCodexCredentialStatus as lW, setCodexCredentialStatusById as lX, setConnectionStatus as lY, setEnrollmentDisplayState as lZ, setEnrollmentOpStreamState as l_, requestSessionCompaction as la, requestSessionTurnRecovery as lb, requireFile as lc, requireScheduledTask as ld, requireSession as le, requireSocialConnection as lf, requireWorkspace as lg, reserveSessionCommandReceipt as lh, reserveToolspaceCallForAttempt as li, resolveWorkspaceMemoryBlock as lj, resumeHostExportConsumer as lk, retainWorkspaceMutationProcess as ll, retainedProcessReconciliationProof as lm, retainedProcessSettlementIdentity as ln, retireHostExportConsumer as lo, revokeApiKey as lp, revokeConnection as lq, revokeConnectionWithSlackBotSuccessAudit as lr, revokeEnrollment as ls, revokeViewer as lt, rewindHostExportConsumer as lu, rlsContextForWorkspace as lv, rlsStrategyFor as lw, rollbackWorkspaceInstructionPolicyRevision as lx, rotateWorkspaceArchives as ly, runIdempotentPersistenceTransaction as lz, type AppendEventInput as m, verifyRetainedProcessMutationSettlement as m$, setInitialActiveCodexCredential as m0, setRlsContext as m1, setSessionCodexPin as m2, setSessionGoalLastContinuationTurn as m3, setSessionGoalStatus as m4, setSessionGoalStatusWithEvent as m5, setSessionLastInputTokensForTurnAttempt as m6, setSessionPin as m7, setSubjectRlsContext as m8, setTemporalWorkflowId as m9, updateRecording as mA, updateRig as mB, updateRigChangeStatus as mC, updateScheduledTask as mD, updateScheduledTaskRun as mE, updateSessionCommandReceiptResult as mF, updateSessionGoal as mG, updateSessionGoalWithEvent as mH, updateSessionMcpApprovalPolicy as mI, updateSessionMcpServerCredentials as mJ, updateSessionTitle as mK, updateVariableSet as mL, updateWorkspace as mM, updateWorkspaceEnvironment as mN, updateWorkspaceSettings as mO, upsertBillingCustomer as mP, upsertCapabilityCatalogItem as mQ, upsertCodexSubscriptionCredential as mR, upsertGitHubInstallation as mS, upsertMachineMetricsLatest as mT, upsertRegistryCapabilityCatalogItem as mU, upsertSandboxSessionEnvelope as mV, upsertSessionGoal as mW, upsertSessionGoalWithEvent as mX, upsertWorkspaceModelPolicy as mY, validateHumanInputResponse as mZ, verifyDirectWorkspaceMutationSettlement as m_, setVariableSetVariable as ma, setWorkspaceDefaultRig as mb, setWorkspaceEnvironmentVariable as mc, settleCodexCredentialFailover as md, settleCodexCredentialLeaseLoss as me, settleRetainedProcess as mf, settleScheduledTaskRunInTransaction as mg, settleSessionAttemptInterruptions as mh, settleSessionIdleWithParentOutbox as mi, shortMemoryId as mj, steerAgentSessionInTransaction as mk, steerQueuedTurnInTransaction as ml, storeIntegrationOAuthClient as mm, submitHumanPromptInTransaction as mn, sumUsageQuantity as mo, supersedeSessionCurrentDirectionInTransaction as mp, touchEnrollmentLastSeen as mq, touchLeaseHolder as mr, updateCodexAllocatorEligibility as ms, updateCodexRotationSettings as mt, updateConnection as mu, updateConnectionWithSlackBotSuccessAudit as mv, updateImportBatchCounts as mw, updateKnowledgeMemory as mx, updatePackInstallationStatus as my, updatePtySessionActivity as mz, type ApplyContextCompactionResult as n, verifyWorkspaceMutationSettlement as n0, withAccountRls as n1, withCodexCapacityMutation as n2, withCodexCredentialRefreshLock as n3, withCodexTokenDeadline as n4, withRlsContext as n5, withWorkspaceRls as n6, withWorkspaceSubjectRls as n7, withWorkspaceUsageLock as n8, workspaceCaptureAtRevision as n9, workspaceCodexSubscriptionActive as na, type ApplySessionTurnSettlementInput as o, type ApplySessionTurnSettlementResult as p, provisionRoles, type ArmCodexCapacityWaitResult as q, type BootstrapWorkspaceInput as r, CODEX_CAPACITY_REFRESH_MIN_MS as s, CODEX_CREDENTIAL_LEASE_TTL_MS as t, CODEX_RESET_REDEMPTION_OUTCOMES as u, CODEX_ROTATION_STRATEGIES as v, type ClaimCodexResetRedemptionResult as w, type ClaimSessionWorkForAttemptInput as x, type ClaimSessionWorkForAttemptResult as y, type ClaimSlackBotPostOperationResult as z };
+export { type CodexRateLimitResetCreditsAccountResult as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BeginSandboxRematerializationResult as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type ClearSessionContextResult as D, type CodexAccountStatus as E, type CodexAccountUsageSnapshot as F, type CodexAllocatorUpdateResult as G, type CodexAuthDeps as H, type CodexCapacityAvailabilityDecision as I, type CodexCapacityMutationResult as J, type CodexCapacityResetKind as K, type CodexCapacitySelectionContext as L, type CodexCapacityWait as M, type CodexCapacityWaitStatus as N, type CodexCapacityWakeTarget as O, type CodexCredentialForRun as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialLeaseCandidateFilter as Q, type CodexCredentialLeaseCandidateFilterResult as R, type CodexCredentialLeasePolicyScopeResolver as S, type CodexCredentialLeaseQuarantine as T, type CodexCredentialLeaseResult as U, type CodexCredentialLeaseSelection as V, type CodexCredentialLeaseSelectionContext as W, type CodexCredentialStatus as X, type CodexCredentialTokens as Y, type CodexLeaseAccountStatus as Z, type CodexPinSource as _, type AcceptSessionApprovalDecisionResult as a, type HostMcpCredentialResolverContext as a$, type CodexResetRedemptionAttempt as a0, type CodexResetRedemptionOutcome as a1, type CodexResetRedemptionRecovery as a2, type CodexResetRedemptionSendNotReadyReason as a3, type CodexResetRedemptionStatus as a4, type CodexRotationSettings as a5, type CodexRotationStrategy as a6, type CodexTokenDeadlineClock as a7, type CodexTokenDeadlineOptions as a8, type CompleteSlackBotPostOperationResult as a9, type EditQueueCommandResult as aA, type EffectiveControlBlocker as aB, type EffectiveControlResumeOption as aC, type EffectiveControlState as aD, type EffectiveSessionControl as aE, type EnableCapabilityInstallationInput as aF, type EnabledMcpCapabilityServer as aG, type EnqueueSessionTurnInput as aH, type EnrollmentExposure as aI, type EnrollmentOs as aJ, type EnrollmentRecord as aK, type EnrollmentStatus as aL, type ExpiredDrainingSandboxLeaseCount as aM, type ExpiredFileUploadCleanupClaim as aN, FORCE_RLS_TABLES as aO, type FenceCodexResetRedemptionSendResult as aP, type FileUploadCleanupClaimResult as aQ, type ForceDrainResult as aR, type FrozenTurnInitiator as aS, type GitHubInstallation as aT, type GitHubInstallationAccess as aU, GitHubInstallationAuthorityCommitError as aV, type GoalContinuationDecision as aW, type HostExportConsumerStatus as aX, type HostExportKind as aY, HostExportPayloadError as aZ, HostMcpCredentialBindingError as a_, type ComposerDraftRow as aa, type ConnectionBrokerDeps as ab, type ConnectionCredentialForBroker as ac, type ConnectionMetadataWithVerification as ad, ConnectionRefreshHttpError as ae, type ConsumeOAuthStateNonceInput as af, type CorrectWorkspaceMemoryInput as ag, type CorrectWorkspaceMemoryResult as ah, type CreateCapabilityCatalogItemInput as ai, type CreateConnectionInput as aj, type CreateDbOptions as ak, type CreateImportBatchInput as al, type CreateKnowledgeMemoryInput as am, type CreatePackInstallationInput as an, type CreateScheduledTaskInput as ao, type CreateSessionGoalInput as ap, type CreateSessionMcpServerInput as aq, type CreateSocialConnectionInput as ar, type CreateSocialPostInput as as, type CreditBalanceByAccount as at, type Database as au, type DatabaseFailureCode as av, type DbClient as aw, type DbSession as ax, type DeviceEnrollmentRequestRecord as ay, type DeviceEnrollmentStatus as az, type AcceptSessionHumanInputResponseResult as b, type ReconcileColdLostLeaseInstanceBlockersResult as b$, HostMcpCredentialScopeError as b0, HumanInputResponseValidationError as b1, type IdempotentPersistenceTransactionOptions as b2, type ImportBatch as b3, type InitializeSessionStartInput as b4, type InitializeSessionStartResult as b5, type InstallOrReadTurnExecutionPolicyForAttemptResult as b6, type IntegrationOAuthClientForUse as b7, type LeaseHolderKind as b8, type LeaseSnapshot as b9, type MarkWarmLeaseInstanceLostResult as bA, type MaterializeGoalContinuationResult as bB, type MemoryBlockRecord as bC, type MemoryEmbedder as bD, type MemorySanitizeResult as bE, type MeterableWarmLease as bF, NON_RLS_RUNTIME_TABLES as bG, type NestedAgentDepthDeploymentPolicy as bH, type NestedAgentDepthPolicySource as bI, NewSessionDraftAccessError as bJ, NewSessionDraftConflictError as bK, type NewSessionDraftRow as bL, PROTECTED_NO_DIRECT_DML_TABLES as bM, type PendingSessionToolCallInput as bN, type PersistenceFailureDetails as bO, type PersistenceRetryOutcome as bP, type QueueCommandConflictCode as bQ, QueueCommandConflictError as bR, type QueueCommandResult as bS, type QueuedTurnRow as bT, RUNTIME_DML_TABLES as bU, RUNTIME_FULL_DML_TABLES as bV, RUNTIME_READ_INSERT_TABLES as bW, RUNTIME_READ_ONLY_TABLES as bX, RUNTIME_TABLE_PRIVILEGES as bY, type ReapDrainable as bZ, type ReconcileCodexCapacityWaitResult as b_, type ListKnowledgeMemoryOptions as ba, type ListSessionEventPageOptions as bb, type ListSessionEventsOptions as bc, type ListSessionsForSubjectOptions as bd, type ListSessionsOptions as be, type LiveModalSandboxLeaseAttribution as bf, type LostProviderWorkspaceSettlement as bg, MACHINE_METRICS_SERIES_INTERVAL_MS as bh, MAX_INTERNAL_UPDATE_BATCH_BYTES as bi, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as bj, MAX_INTERNAL_UPDATE_BYTES as bk, MEMORY_ACTIVE_RECORD_CAP as bl, MEMORY_BLOCK_KIND_ORDER as bm, MEMORY_BLOCK_RECORD_LIMIT as bn, MEMORY_CORRECT_TOOL_DESCRIPTION as bo, MEMORY_KIND_SECTION_TITLES as bp, MEMORY_NEAR_DUP_COSINE_THRESHOLD as bq, MEMORY_NEAR_DUP_NEIGHBORS as br, MEMORY_SAVE_TOOL_DESCRIPTION as bs, MEMORY_SEARCH_DEFAULT_LIMIT as bt, MEMORY_SEARCH_MAX_LIMIT as bu, MEMORY_SEARCH_TOOL_DESCRIPTION as bv, MEMORY_TEXT_MAX_CHARS as bw, MEMORY_VISIBLE_RECORD_CAP as bx, type MachineMetricsRow as by, type MachineMetricsSample as bz, type AccrueWarmSecondsResult as c, type SandboxWorkspaceReadiness as c$, type ReconcileSessionAttemptQuiescenceResult as c0, type RecoverSessionDispatchInput as c1, type RecoverSessionDispatchResult as c2, type RefreshTransportOptions as c3, type RegisterWorkspacePackInput as c4, type RegistryCapabilityCatalogItemInput as c5, type RegistryCatalogSurfaceKey as c6, type ReplaceIntegrationOAuthClientInput as c7, type RequestSessionTurnRecoveryInput as c8, type RequestSessionTurnRecoveryResult as c9, SESSION_EVENT_DB_PAGE_MAX_BYTES as cA, SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT as cB, SESSION_LIST_SNAPSHOT_MAX_IDS as cC, type SafeDatabaseErrorFacts as cD, type SandboxArchiveAvailability as cE, type SandboxArchiveRevision as cF, SandboxImageConflictError as cG, type SandboxKind as cH, type SandboxLeaseLiveness as cI, SandboxLeaseRecoveryBlockedError as cJ, SandboxLeaseSupersededError as cK, type SandboxOpenPtySessionRow as cL, type SandboxProviderExistence as cM, type SandboxPtyProcessIdentity as cN, type SandboxPtySessionRow as cO, type SandboxRecord as cP, type SandboxRecoveryState as cQ, type SandboxRestoreStatus as cR, type SandboxRetainedProcess as cS, type SandboxRetainedProcessIdentity as cT, SandboxRetainedProcessPromotionFencedError as cU, type SandboxRetainedProcessReconciliationClaim as cV, type SandboxRetainedProcessState as cW, SandboxRigConflictError as cX, type SandboxWorkspaceMutationAdmission as cY, SandboxWorkspaceMutationFencedError as cZ, type SandboxWorkspaceMutationProviderOutcome as c_, type ResolveConnectionCredentialInput as ca, type ResolveConnectionCredentialResult as cb, type RetainedFileArtifact as cc, type RetainedProcessProviderProof as cd, RigActiveVersionChangedError as ce, RigChangeAlreadyVerifyingError as cf, type RigChangeMonitoringSummary as cg, RigChangeTransitionError as ch, type RigVersionContentInput as ci, type RigVersionMonitoringSummary as cj, type RlsContext as ck, type RlsStrategy as cl, type RuntimeDatabaseIdentity as cm, type RuntimeDatabasePosture as cn, RuntimeDatabasePostureError as co, type RuntimeDatabasePostureOptions as cp, type RuntimeRoutinePosture as cq, type RuntimeSchemaPosture as cr, type RuntimeTableDmlPrivilege as cs, type RuntimeTablePosture as ct, type RuntimeTablePrivilegeContract as cu, SESSION_ANCESTRY_LIMIT as cv, SESSION_DISCOVERY_CONTROL_TARGET_LIMIT as cw, SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS as cx, SESSION_DISCOVERY_GOAL_MAX_CHARS as cy, SESSION_DISCOVERY_MESSAGE_MAX_CHARS as cz, type AcquireLeaseInput as d, type StoreIntegrationOAuthClientInput as d$, SanitizedDatabasePersistenceCause as d0, type SaveWorkspaceMemoryInput as d1, type SaveWorkspaceMemoryResult as d2, type SessionAttemptActivityRef as d3, type SessionAttemptInterruptionSettlement as d4, type SessionCodexState as d5, type SessionCommandActor as d6, SessionCommandIdempotencyError as d7, type SessionCommandReceiptRow as d8, SessionContextBusyError as d9, SessionPinAccessError as dA, SessionPinVersionConflictError as dB, type SessionRecordingCodec as dC, type SessionRecordingMode as dD, type SessionRecordingRow as dE, type SessionRecordingState as dF, type SessionSpawnDenial as dG, type SessionSpawnDenialCode as dH, SessionSpawnDeniedDbError as dI, type SessionSystemUpdateOutboxDelivery as dJ, SessionToolPolicyVersionConflictError as dK, type SessionTurnAttemptOutcome as dL, type SessionTurnForExecution as dM, type SessionTurnRecordingSettlement as dN, type SessionWorkPeek as dO, type SessionWorkTrigger as dP, type SessionWorkflowWake as dQ, type SessionWorkflowWakeDeliveryResult as dR, type SetSessionCodexPinOptions as dS, type SetSessionGoalStatusEvent as dT, type SettleCodexCredentialFailoverResult as dU, type SettleCodexCredentialLeaseLossResult as dV, type SlackBotInstallCallbackFailureReason as dW, type SlackBotInstallCallbackFailureStage as dX, SlackBotLifecycleSuccessAuditError as dY, type SlackBotPostOperation as dZ, type SteerQueueCommandResult as d_, SessionControlConflictError as da, SessionControlInvariantError as db, type SessionControlMutationResult as dc, type SessionCreateDeniedResult as dd, type SessionCreateInput as de, type SessionCreateResult as df, type SessionCreateSuccessResult as dg, type SessionDepthPolicy as dh, type SessionDiscoveryControl as di, type SessionDiscoveryCursor as dj, type SessionDiscoveryOrderBy as dk, type SessionDiscoverySummary as dl, type SessionEventPage as dm, SessionEventPersistenceError as dn, type SessionEventWriteLockInput as dp, type SessionEventWriteLocks as dq, type SessionGoalContinuationProjection as dr, SessionIdConflictError as ds, type SessionLineage as dt, SessionListAccessError as du, type SessionListCursor as dv, SessionListCursorError as dw, SessionListCursorExpiredError as dx, SessionListSnapshotLimitError as dy, type SessionMcpServerForRun as dz, type AcquireLeaseResult as e, applyCreditLedgerEntry as e$, type StoredIntegrationOAuthClient as e0, type StreamAcknowledgment as e1, type SubmitHumanPromptResult as e2, type ToolspaceCallReservation as e3, type ToolspaceTurnAttemptClaims as e4, type TurnAttemptFenceRejectReason as e5, type UpdateConnectionInput as e6, type UpdateImportBatchCountsInput as e7, type UpdateKnowledgeMemoryInput as e8, type UpdateScheduledTaskInput as e9, abandonCodexResetRedemptionBeforeProvider as eA, abandonRecordingForTurnAttempt as eB, acceptSessionApprovalDecision as eC, acceptSessionHumanInputResponse as eD, accrueWarmSeconds as eE, acknowledgeHostExportBatch as eF, acquireCodexCredentialLease as eG, acquireLease as eH, activateRigVersion as eI, activateWorkspaceInstructionPolicyRevision as eJ, addSessionSystemUpdate as eK, addSessionSystemUpdateWithSourceMutation as eL, admitToolspaceTurnAttempt as eM, adoptCodexResetRedemptionAttempt as eN, advanceWorkspaceGeneration as eO, advanceWorkspaceGenerationForDirectRequest as eP, advanceWorkspaceGenerationForRetainedProcess as eQ, allAccountPermissions as eR, allWorkspacePermissions as eS, appendSessionEventToSandboxGroup as eT, appendSessionEvents as eU, appendSessionEventsAndUpdateSession as eV, appendSessionEventsForTurnAttempt as eW, appendSessionEventsWithLockedSessionUpdate as eX, appendSessionHistoryItems as eY, applyContextCompaction as eZ, applyCreditDebitUpToBalance as e_, type UpdateSessionMcpApprovalPolicyResult as ea, type UpdateSessionMcpServerCredentialsInput as eb, type UpdateSessionMcpServerCredentialsResult as ec, type UpsertCodexSubscriptionCredentialResult as ed, type UserLookup as ee, type VariableSetForRun as ef, WORKSPACE_MEMORY_BLOCK_EMPTY as eg, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as eh, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as ei, type WorkspaceCaptureCommitResult as ej, type WorkspaceCaptureGcPlan as ek, type WorkspaceCaptureGcRow as el, type WorkspaceCaptureRow as em, type WorkspaceControlLockMode as en, type WorkspaceControlMutationResult as eo, type WorkspaceControlRow as ep, type WorkspaceEnvironmentForRun as eq, WorkspaceInstructionPolicyConflictError as er, WorkspaceInstructionPolicyInvalidOperationError as es, WorkspaceInstructionPolicyLegacyUnavailableError as et, WorkspaceInstructionPolicyNotFoundError as eu, type WorkspaceMemoryOrigin as ev, type WorkspaceMemorySearchInput as ew, type WorkspaceMemorySearchMode as ex, type WorkspaceMemorySearchResult as ey, type WorkspaceModelPolicy as ez, type ActiveRetainedProcessOwnerCount as f, countVariableSets as f$, applySessionTurnSettlement as f0, approveDeviceEnrollmentRequest as f1, areGitHubRepositoriesAllowedForWorkspace as f2, armCodexCapacityWait as f3, assertAgentCommandAuthorityInTransaction as f4, assertRuntimeDatabasePosture as f5, autoResumeSessionBranchInTransaction as f6, beginRigChangeVerificationAttempt as f7, beginSandboxRematerialization as f8, bindAuthorizedGitHubInstallationRepositories as f9, completeCodexResetRedemption as fA, completeExpiredFileUploadCleanup as fB, completeFileUpload as fC, completeFileUploadCleanup as fD, completeSlackBotPostOperation as fE, computeWorkspaceCaptureGcPlan as fF, confirmDrainCold as fG, consumeDeviceEnrollmentRequest as fH, consumeIntegrationOAuthStateNonce as fI, consumeNewSessionDraftInTransaction as fJ, correctWorkspaceMemory as fK, countActiveApiKeysForWorkspace as fL, countActiveRetainedProcessesByOwnerState as fM, countActiveSessionHistoryItems as fN, countActiveSessionsForWorkspace as fO, countActiveSessionsUsingEnvironment as fP, countActiveSessionsUsingVariableSet as fQ, countConsecutiveReactiveRotations as fR, countExpiredDrainingSandboxLeases as fS, countQueuedTurns as fT, countRigs as fU, countSandboxLeasesByLiveness as fV, countScheduledTasksForWorkspace as fW, countScheduledTasksUsingEnvironment as fX, countScheduledTasksUsingVariableSet as fY, countSessionHistoryItems as fZ, countSessionsUsingRig as f_, bindGitHubInstallationRepositories as fa, bootstrapWorkspace as fb, buildChildCompletionDigest as fc, buildCodexTokenResolver as fd, buildConnectionTokenResolver as fe, buildHostConnectionTokenResolver as ff, canonicalSessionCommandHash as fg, claimCodexResetRedemption as fh, claimExpiredFileUploadCleanup as fi, claimFileUploadCleanup as fj, claimHostExportBatch as fk, claimPendingSessionSystemUpdateOutbox as fl, claimPendingSessionWorkflowWakes as fm, claimSessionWorkForAttempt as fn, claimSlackBotPostOperation as fo, claimTerminalRetainedProcesses as fp, clearDurablePendingSessionToolCalls as fq, clearEnrollmentWentOffline as fr, clearPendingSessionToolspaceCall as fs, clearSessionContext as ft, clearSessionGoal as fu, clearedContextMarkerItem as fv, closePtySession as fw, closeSessionTurnAttemptInTransaction as fx, codexCapacityRefreshBackoffMs as fy, commitWarmingToWarm as fz, type ActiveSandboxPointer as g, enqueueSessionWorkflowWakeInTransaction as g$, countWorkspaceEnvironments as g0, countWorkspacesForAccount as g1, createApiKey as g2, createConnection as g3, createConnectionWithSlackBotSuccessAudit as g4, createDb as g5, createDeviceEnrollmentRequest as g6, createEnrollment as g7, createFileUpload as g8, createImportBatch as g9, deleteRecording as gA, deleteRig as gB, deleteRigIfNoActiveSessions as gC, deleteScheduledTask as gD, deleteSessionQueueItemInTransaction as gE, deleteVariableSet as gF, deleteVariableSetVariable as gG, deleteWorkspace as gH, deleteWorkspaceCaptureRows as gI, deleteWorkspaceEnvironment as gJ, deleteWorkspaceEnvironmentVariable as gK, deleteWorkspacePack as gL, denyDeviceEnrollmentRequest as gM, diffWorkspaceInstructionPolicyContent as gN, diffWorkspaceInstructionPolicyRevisions as gO, disableCapabilityInstallation as gP, disableHostExportConsumer as gQ, disconnectAllCodexAccounts as gR, disconnectCodexAccount as gS, editQueuedTurnInTransaction as gT, enableCapabilityInstallation as gU, enablePackInstallation as gV, encodeSessionListCursor as gW, encryptEnvironmentValue as gX, enqueueSessionTurn as gY, enqueueSessionWorkflowWake as gZ, enqueueSessionWorkflowWakeIfRunnable as g_, createKnowledgeMemory as ga, createRig as gb, createRigChange as gc, createRigVersion as gd, createRigVersionForChangePromotion as ge, createSandbox as gf, createScheduledTask as gg, createScheduledTaskRun as gh, createSession as gi, createSessionGoal as gj, createSessionMcpServers as gk, createSessionWithIdempotencyKey as gl, createSessionWithIdempotencyKeyResult as gm, createSocialConnection as gn, createSocialPost as go, createVariableSet as gp, createWorkspace as gq, createWorkspaceEnvironment as gr, createWorkspaceInstructionPolicyDraft as gs, databaseFailureCode as gt, deadLetterHostExportHead as gu, decodeSessionListCursor as gv, decryptEnvironmentValue as gw, decryptedCapabilityHeaders as gx, deferRetainedProcessReconciliation as gy, deleteGitHubInstallationBinding as gz, type AddSessionSystemUpdateInput as h, getSession as h$, ensureCodexRotationSettings as h0, ensureManagedAccessForUser as h1, estimateMemoryTokens as h2, evaluateGoalContinuation as h3, evaluateRuntimeDatabasePosture as h4, evaluateSessionControl as h5, evaluateSessionControls as h6, evaluateSessionDiscoveryControls as h7, expireSessionHumanInputRequest as h8, failHostExportBatch as h9, getHostExportConsumerStatus as hA, getHumanInputResumeForEvent as hB, getKnowledgeMemory as hC, getLatestRunState as hD, getLatestStartedSessionTurn as hE, getManagedAccount as hF, getManagedUserByEmail as hG, getMaterializedSandboxFileResources as hH, getNestedAgentDepthDeploymentPolicy as hI, getNewSessionDraftInTransaction as hJ, getOpenPtySession as hK, getOrCreateSessionSystemUpdateOutbox as hL, getPackInstallation as hM, getPendingDeviceEnrollmentRequestByUserCode as hN, getPendingDeviceEnrollmentRequestByUserCodeGlobal as hO, getRecording as hP, getRetainedFileArtifact as hQ, getRetainedProcess as hR, getRig as hS, getRigByName as hT, getRigChange as hU, getRigName as hV, getRigVersion as hW, getRigVersionById as hX, getSandbox as hY, getSandboxSessionEnvelope as hZ, getScheduledTask as h_, failSandboxRematerialization as ha, failWarmingToCold as hb, fenceCodexResetRedemptionSend as hc, fetchCodexRateLimitResetCreditsForAccount as hd, fetchCodexUsageForAccount as he, finalizeEnrollmentByToken as hf, findActiveApiKeyByHash as hg, forceDrainOverLimitViewerOnlyBoxes as hh, frozenInitiatorForCommandActor as hi, getActiveSessionHistoryItems as hj, getActiveSessionTurnForExecution as hk, getAnySessionInGroup as hl, getBillingBalance as hm, getBillingCustomer as hn, getCapabilityCatalogItem as ho, getCapabilityInstallation as hp, getCodexCapacityWaitForSession as hq, getCodexCredentialStatus as hr, getCodexResetRedemptionAttempt as hs, getCodexRotationSettings as ht, getComposerDraftInTransaction as hu, getConnectionMetadata as hv, getDeviceEnrollmentRequestByDeviceCode as hw, getEnrollment as hx, getFile as hy, getFileUpload as hz, type AddSessionSystemUpdateResult as i, listApiKeys as i$, getSessionAttemptActivityRef as i0, getSessionByCreateIdempotencyKey as i1, getSessionCodexState as i2, getSessionEvent as i3, getSessionEventByClientEventId as i4, getSessionForSubject as i5, getSessionGoal as i6, getSessionGoalWithContinuation as i7, getSessionHistoryItems as i8, getSessionHumanInputRequest as i9, getWorkspacePack as iA, grantWorkspaceAccess as iB, hasAuditableGitHubInstallationAuthority as iC, hasCreditLedgerEntry as iD, hashMemoryText as iE, heartbeatCodexCredentialLease as iF, heartbeatCodexCredentialLeaseUntil as iG, heartbeatLeaseHolder as iH, importLegacyWorkspaceInstructionPolicyDraft as iI, ingestMachineMetricsSample as iJ, initializeSessionStartAtomically as iK, insertFailedWorkspaceCapture as iL, insertMachineMetricsSeries as iM, insertPtySession as iN, insertRecording as iO, insertWorkspaceCapture as iP, inspectRuntimeDatabasePosture as iQ, installOrReadTurnExecutionPolicyForAttempt as iR, interruptedToolCallResult as iS, isCodexBilledTurn as iT, isDatabasePersistenceFailure as iU, isMemoryTextTooLong as iV, isRetryablePersistenceSqlState as iW, isSessionCompactionRequested as iX, isSessionEventPersistenceError as iY, isStripeWebhookProcessed as iZ, latestWorkspaceCapture as i_, getSessionLineage as ia, getSessionQueueSnapshot as ib, getSessionRootId as ic, getSessionSpawnDenial as id, getSessionSpawnDenialByIdempotencyKey as ie, getSessionSystemUpdateOutboxByDedupeKey as ig, getSessionTurn as ih, getSessionTurnForAttempt as ii, getSlackBotPostOperation as ij, getSocialConnection as ik, getStoredCapabilityHeaderCiphertext as il, getStreamAcknowledgment as im, getVariableSet as io, getVariableSetByName as ip, getVariableSetValuesForRun as iq, getWorkspace as ir, getWorkspaceControlEvent as is, getWorkspaceDefaultRigId as it, getWorkspaceEnvironment as iu, getWorkspaceEnvironmentByName as iv, getWorkspaceEnvironmentValuesForRun as iw, getWorkspaceGrant as ix, getWorkspaceInstructionPolicyRevision as iy, getWorkspaceModelPolicy as iz, type AdoptCodexResetRedemptionResult as j, markSandboxProviderReady as j$, listCapabilityCatalogItems as j0, listCapabilityInstallations as j1, listCodexAccountStatuses as j2, listCodexResetRedemptionRecoveries as j3, listConnectionsMetadata as j4, listCreditBalancesByAccount as j5, listDistinctRigVersionIdsInGroup as j6, listDistinctVariableSetIdsInGroup as j7, listEnabledMcpCapabilityServers as j8, listEnrollments as j9, listSessionMcpServerMetadata as jA, listSessionMcpServersForChildInheritance as jB, listSessionMcpServersForRun as jC, listSessionSpawnDenials as jD, listSessionSystemUpdatesForTurn as jE, listSessionTurns as jF, listSessions as jG, listSessionsForSubject as jH, listSocialConnections as jI, listSocialPosts as jJ, listUsageEvents as jK, listVariableSets as jL, listWorkspaceControlEvents as jM, listWorkspaceEnvironments as jN, listWorkspaceInstructionPolicyRevisions as jO, listWorkspaceMembers as jP, listWorkspacePacks as jQ, listWorkspacesForSubject as jR, loadCodexCredentialForRun as jS, loadConnectionCredentialForBroker as jT, loadIntegrationOAuthClient as jU, loadVariableSetForRun as jV, loadWorkspaceEnvironmentForRun as jW, lockSessionEventWriteRows as jX, lockWorkspaceInferenceControl as jY, markFileUploadFailed as jZ, markSandboxFileResourcesMaterialized as j_, listGitHubInstallationAccessForWorkspace as ja, listGitHubInstallationIdsForWorkspace as jb, listGitHubInstallationsForWorkspace as jc, listKnowledgeMemories as jd, listLiveModalSandboxLeaseAttributions as je, listMeterableWarmLeases as jf, listOpenPtySessions as jg, listOutstandingSessionSystemUpdates as jh, listPackInstallations as ji, listPendingCodexCapacityWakeTargets as jj, listPendingSessionTurns as jk, listRecordings as jl, listRegistryCatalogSurfaceKeys as jm, listRigChangeMonitoringSummaries as jn, listRigChanges as jo, listRigVersionMonitoringSummaries as jp, listRigVersions as jq, listRigs as jr, listSandboxes as js, listScheduledTaskRuns as jt, listScheduledTasks as ju, listSessionDiscoverySummaries as jv, listSessionEventPage as jw, listSessionEvents as jx, listSessionHumanInputRequests as jy, listSessionIdsInGroup as jz, AgentCommandAuthorityError as k, registerDbBinding as k$, markSandboxRestoreVerifying as k0, markScheduledTaskRunFailedIfQueued as k1, markSessionAttemptQuiesced as k2, markSessionSystemUpdateOutboxDeliveredInTransaction as k3, markSessionSystemUpdateOutboxFailed as k4, markSessionWorkflowWakeDelivered as k5, markSessionWorkflowWakeFailed as k6, markStaleRegistryCatalogItems as k7, markStripeWebhookProcessed as k8, markWarmLeaseInstanceLost as k9, readWorkspaceArchiveCapturePreflight as kA, reapExpiredSessionListSnapshots as kB, reapStaleLeaseHolders as kC, reapStaleLeaseHoldersGlobal as kD, reconcileCodexCapacityWait as kE, reconcileColdLostLeaseInstanceBlockers as kF, reconcileSessionAttemptQuiescence as kG, recordAuditEvent as kH, recordCodexAccountConnectors as kI, recordCodexAccountUsage as kJ, recordCodexAccountUsageWithWakeTargets as kK, recordCodexTokenRefresh as kL, recordConnectionTokenRefresh as kM, recordConnectionUsed as kN, recordLeaseDataPlaneUrl as kO, recordLeaseTerminalDataPlaneUrl as kP, recordPendingSessionToolCallResult as kQ, recordRetainedProcessReconciliationProof as kR, recordSessionActiveCodexCredential as kS, recordSkippedContextCompaction as kT, recordSlackBotInstallCallbackFailure as kU, recordStreamAcknowledgment as kV, recordStripeWebhookEvent as kW, recordUsageEvent as kX, recordWarmingSandboxCreated as kY, recoverSessionDispatch as kZ, refreshOAuthConnectionCredential as k_, materializeGoalContinuation as ka, mcpServerIdForCapability as kb, moveQueuedTurnInTransaction as kc, mutateSessionControlInTransaction as kd, mutateWorkspaceControlInTransaction as ke, nestedPostgresSqlState as kf, newSessionDraftToolsProvided as kg, nextSessionHistoryPosition as kh, normalizeBearerScheme as ki, normalizeMemoryText as kj, orphanedResultRowIndicesForRepair as kk, peekSessionWork as kl, persistDrainSnapshot as km, persistWarmSnapshot as kn, planWorkspaceCaptureGc as ko, projectEffectiveControlForRelatedAccess as kp, projectSessionForRelatedAccess as kq, pruneHostExportOutbox as kr, publicNewSessionDraftOptions as ks, quarantineCodexCredentialForLease as kt, reArmDrainingLease as ku, readActiveSandbox as kv, readLease as kw, readMachineMetricsLatest as kx, readMachineMetricsLatestForWorkspace as ky, readMachineMetricsSeries as kz, type AgentInternalUpdateCommandResult as l, setCodexCredentialStatusById as l$, registerHostExportConsumer as l0, registerInternalUpdateWakeInTransaction as l1, registerPendingSessionToolCall as l2, registerSessionTurnAttemptClaim as l3, registerSessionWorkflowWakeInTransaction as l4, registerWorkspacePack as l5, releaseCodexCredentialLease as l6, releaseCodexResetRedemptionClaim as l7, releaseLeaseHolder as l8, releaseSlackBotPostOperationClaim as l9, rlsStrategyFor as lA, rollbackWorkspaceInstructionPolicyRevision as lB, rotateWorkspaceArchives as lC, runIdempotentPersistenceTransaction as lD, runtimeDatabaseReadyCheck as lE, safeDatabaseErrorFacts as lF, sanitizeEventPayload as lG, sanitizeEventString as lH, sanitizeMemoryText as lI, sanitizeModelPayload as lJ, saveComposerDraftInTransaction as lK, saveNewSessionDraftInTransaction as lL, saveRunState as lM, saveWorkspaceMemory as lN, searchWorkspaceMemories as lO, seedNewSessionDraftInTransaction as lP, sendAgentMessageInTransaction as lQ, serializeEffectiveSessionControl as lR, sessionAuthorizationScopeFilter as lS, sessionSubject as lT, sessionTreeStatsForSessions as lU, sessionsWithActiveOpOnEnrollment as lV, setActiveCodexCredential as lW, setActiveSandbox as lX, setCodexCredentialExhausted as lY, setCodexCredentialExhaustedWithWakeTargets as lZ, setCodexCredentialStatus as l_, removeWorkspaceMember as la, renameCodexAccount as lb, renderWorkspaceMemoryBlock as lc, replaceIntegrationOAuthClient as ld, requestSessionCompaction as le, requestSessionTurnRecovery as lf, requireFile as lg, requireScheduledTask as lh, requireSession as li, requireSocialConnection as lj, requireWorkspace as lk, reserveSessionCommandReceipt as ll, reserveToolspaceCallForAttempt as lm, resolveWorkspaceMemoryBlock as ln, resumeHostExportConsumer as lo, retainWorkspaceMutationProcess as lp, retainedProcessReconciliationProof as lq, retainedProcessSettlementIdentity as lr, retireHostExportConsumer as ls, revokeApiKey as lt, revokeConnection as lu, revokeConnectionWithSlackBotSuccessAudit as lv, revokeEnrollment as lw, revokeViewer as lx, rewindHostExportConsumer as ly, rlsContextForWorkspace as lz, type AppendEventInput as m, upsertSessionGoalWithEvent as m$, setConnectionStatus as m0, setEnrollmentDisplayState as m1, setEnrollmentOpStreamState as m2, setEnrollmentWentOffline as m3, setInitialActiveCodexCredential as m4, setRlsContext as m5, setSessionCodexPin as m6, setSessionGoalLastContinuationTurn as m7, setSessionGoalStatus as m8, setSessionGoalStatusWithEvent as m9, updateImportBatchCounts as mA, updateKnowledgeMemory as mB, updatePackInstallationStatus as mC, updatePtySessionActivity as mD, updateRecording as mE, updateRig as mF, updateRigChangeStatus as mG, updateScheduledTask as mH, updateScheduledTaskRun as mI, updateSessionCommandReceiptResult as mJ, updateSessionGoal as mK, updateSessionGoalWithEvent as mL, updateSessionMcpApprovalPolicy as mM, updateSessionMcpServerCredentials as mN, updateSessionTitle as mO, updateVariableSet as mP, updateWorkspace as mQ, updateWorkspaceEnvironment as mR, updateWorkspaceSettings as mS, upsertBillingCustomer as mT, upsertCapabilityCatalogItem as mU, upsertCodexSubscriptionCredential as mV, upsertGitHubInstallation as mW, upsertMachineMetricsLatest as mX, upsertRegistryCapabilityCatalogItem as mY, upsertSandboxSessionEnvelope as mZ, upsertSessionGoal as m_, setSessionLastInputTokensForTurnAttempt as ma, setSessionPin as mb, setSubjectRlsContext as mc, setTemporalWorkflowId as md, setVariableSetVariable as me, setWorkspaceDefaultRig as mf, setWorkspaceEnvironmentVariable as mg, settleCodexCredentialFailover as mh, settleCodexCredentialLeaseLoss as mi, settleRetainedProcess as mj, settleScheduledTaskRunInTransaction as mk, settleSessionAttemptInterruptions as ml, settleSessionIdleWithParentOutbox as mm, shortMemoryId as mn, steerAgentSessionInTransaction as mo, steerQueuedTurnInTransaction as mp, storeIntegrationOAuthClient as mq, submitHumanPromptInTransaction as mr, sumUsageQuantity as ms, supersedeSessionCurrentDirectionInTransaction as mt, touchEnrollmentLastSeen as mu, touchLeaseHolder as mv, updateCodexAllocatorEligibility as mw, updateCodexRotationSettings as mx, updateConnection as my, updateConnectionWithSlackBotSuccessAudit as mz, type ApplyContextCompactionResult as n, upsertWorkspaceModelPolicy as n0, validateHumanInputResponse as n1, verifyDirectWorkspaceMutationSettlement as n2, verifyRetainedProcessMutationSettlement as n3, verifyWorkspaceMutationSettlement as n4, withAccountRls as n5, withCodexCapacityMutation as n6, withCodexCredentialRefreshLock as n7, withCodexTokenDeadline as n8, withRlsContext as n9, withWorkspaceRls as na, withWorkspaceSubjectRls as nb, withWorkspaceUsageLock as nc, workspaceCaptureAtRevision as nd, workspaceCodexSubscriptionActive as ne, type ApplySessionTurnSettlementInput as o, type ApplySessionTurnSettlementResult as p, provisionRoles, type ArmCodexCapacityWaitResult as q, type BootstrapWorkspaceInput as r, CODEX_CAPACITY_REFRESH_MIN_MS as s, CODEX_CREDENTIAL_LEASE_TTL_MS as t, CODEX_RESET_REDEMPTION_OUTCOMES as u, CODEX_ROTATION_STRATEGIES as v, type ClaimCodexResetRedemptionResult as w, type ClaimSessionWorkForAttemptInput as x, type ClaimSessionWorkForAttemptResult as y, type ClaimSlackBotPostOperationResult as z };

package/dist/{schema-SbaSoRdr.d.ts → schema-FoPub9yt.d.ts}

@@ -1085,7 +1085,7 @@ declare const nestedAgentDepthConfiguration: drizzle_orm_pg_core.PgTableWithColu
             tableName: "nested_agent_depth_configuration";
             dataType: "string";
             columnType: "PgText";
-            data: "default" | "deployment";
+            data: "deployment" | "default";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -1097,7 +1097,7 @@ declare const nestedAgentDepthConfiguration: drizzle_orm_pg_core.PgTableWithColu
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: "default" | "deployment";
+            $type: "deployment" | "default";
         }>;
         updatedAt: drizzle_orm_pg_core.PgColumn<{
             name: "updated_at";
@@ -3435,7 +3435,7 @@ declare const slackBotPostOperations: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "slack_bot_post_operations";
             dataType: "string";
             columnType: "PgText";
-            data: "channel" | "user";
+            data: "user" | "channel";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -3447,7 +3447,7 @@ declare const slackBotPostOperations: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: "channel" | "user";
+            $type: "user" | "channel";
         }>;
         targetId: drizzle_orm_pg_core.PgColumn<{
             name: "target_id";
@@ -3488,7 +3488,7 @@ declare const slackBotPostOperations: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "slack_bot_post_operations";
             dataType: "string";
             columnType: "PgText";
-            data: "provider_started" | "completed";
+            data: "completed" | "provider_started";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -3500,7 +3500,7 @@ declare const slackBotPostOperations: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: "provider_started" | "completed";
+            $type: "completed" | "provider_started";
         }>;
         claimHolderId: drizzle_orm_pg_core.PgColumn<{
             name: "claim_holder_id";
@@ -4936,13 +4936,32 @@ declare const sessions: drizzle_orm_pg_core.PgTableWithColumns<{
         }, {}, {
             $type: string[];
         }>;
+        firstPartyMcpTools: drizzle_orm_pg_core.PgColumn<{
+            name: "first_party_mcp_tools";
+            tableName: "sessions";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: ("set_session_title" | "goal_set" | "goal_update" | "goal_complete" | "goal_pause" | "memory_search" | "memory_save" | "memory_correct" | "sandboxes_list" | "sandbox_attach" | "sandbox_swap" | "run_on" | "sandbox_provision" | "rig_list" | "rig_get" | "rig_propose_change" | "rig_verify" | "rig_promote" | "sessions_list" | "session_get" | "session_events" | "session_create" | "session_send_message" | "session_pause" | "session_resume" | "session_steer" | "set_other_session_title" | "variable_set_list" | "environment_list" | "variable_set_set_variable" | "environment_set_variable" | "github_connect_link" | "github_token" | "github_repositories_list" | "social_connections_list" | "social_posts_recent" | "social_daily_analysis_context" | "scheduled_tasks_list" | "scheduled_tasks_get" | "scheduled_tasks_create" | "scheduled_tasks_update" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_delete" | "scheduled_task_runs_list" | "slack_bot_list_channels" | "slack_bot_channel_history" | "slack_bot_list_users" | "slack_bot_post_message")[];
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: ("set_session_title" | "goal_set" | "goal_update" | "goal_complete" | "goal_pause" | "memory_search" | "memory_save" | "memory_correct" | "sandboxes_list" | "sandbox_attach" | "sandbox_swap" | "run_on" | "sandbox_provision" | "rig_list" | "rig_get" | "rig_propose_change" | "rig_verify" | "rig_promote" | "sessions_list" | "session_get" | "session_events" | "session_create" | "session_send_message" | "session_pause" | "session_resume" | "session_steer" | "set_other_session_title" | "variable_set_list" | "environment_list" | "variable_set_set_variable" | "environment_set_variable" | "github_connect_link" | "github_token" | "github_repositories_list" | "social_connections_list" | "social_posts_recent" | "social_daily_analysis_context" | "scheduled_tasks_list" | "scheduled_tasks_get" | "scheduled_tasks_create" | "scheduled_tasks_update" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_delete" | "scheduled_task_runs_list" | "slack_bot_list_channels" | "slack_bot_channel_history" | "slack_bot_list_users" | "slack_bot_post_message")[];
+        }>;
         toolPolicy: drizzle_orm_pg_core.PgColumn<{
             name: "tool_policy";
             tableName: "sessions";
             dataType: "json";
             columnType: "PgJsonb";
             data: {
-                mode: "workspace_default" | "explicit" | "inherited" | "legacy";
+                mode: "explicit" | "workspace_default" | "inherited" | "legacy";
                 inheritedFromSessionId: string | null;
             };
             driverParam: unknown;
@@ -4957,7 +4976,7 @@ declare const sessions: drizzle_orm_pg_core.PgTableWithColumns<{
             generated: undefined;
         }, {}, {
             $type: {
-                mode: "workspace_default" | "explicit" | "inherited" | "legacy";
+                mode: "explicit" | "workspace_default" | "inherited" | "legacy";
                 inheritedFromSessionId: string | null;
             };
         }>;
@@ -6276,7 +6295,7 @@ declare const sessionMcpServers: drizzle_orm_pg_core.PgTableWithColumns<{
                     id: string;
                     kind: "repository";
                 }[] | undefined;
-                subjectScope?: "subject" | "workspace" | undefined;
+                subjectScope?: "workspace" | "subject" | undefined;
             };
             driverParam: unknown;
             notNull: false;
@@ -6300,7 +6319,7 @@ declare const sessionMcpServers: drizzle_orm_pg_core.PgTableWithColumns<{
                     id: string;
                     kind: "repository";
                 }[] | undefined;
-                subjectScope?: "subject" | "workspace" | undefined;
+                subjectScope?: "workspace" | "subject" | undefined;
             };
         }>;
         headersEncrypted: drizzle_orm_pg_core.PgColumn<{
@@ -10476,6 +10495,23 @@ declare const sessionSystemUpdates: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        deliveredHistoryItemId: drizzle_orm_pg_core.PgColumn<{
+            name: "delivered_history_item_id";
+            tableName: "session_system_updates";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         deliveredAt: drizzle_orm_pg_core.PgColumn<{
             name: "delivered_at";
             tableName: "session_system_updates";
@@ -14211,7 +14247,7 @@ declare const sandboxWorkspaceMutationAdmissions: drizzle_orm_pg_core.PgTableWit
             tableName: "sandbox_workspace_mutation_admissions";
             dataType: "string";
             columnType: "PgText";
-            data: "resolved" | "rejected" | "retained";
+            data: "rejected" | "resolved" | "retained";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -14610,7 +14646,7 @@ declare const sandboxRetainedProcesses: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "sandbox_retained_processes";
             dataType: "string";
             columnType: "PgText";
-            data: "active" | "exited" | "lost";
+            data: "active" | "lost" | "exited";
             driverParam: string;
             notNull: true;
             hasDefault: true;
@@ -14780,7 +14816,7 @@ declare const sandboxRetainedProcesses: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "sandbox_retained_processes";
             dataType: "string";
             columnType: "PgText";
-            data: "exited" | "lost";
+            data: "lost" | "exited";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -14943,7 +14979,7 @@ declare const sessionRecordings: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "session_recordings";
             dataType: "string";
             columnType: "PgText";
-            data: "recording" | "finalizing" | "available" | "failed";
+            data: "failed" | "available" | "recording" | "finalizing";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -15258,7 +15294,7 @@ declare const workspaceCaptures: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "workspace_captures";
             dataType: "string";
             columnType: "PgText";
-            data: "available" | "failed";
+            data: "failed" | "available";
             driverParam: string;
             notNull: true;
             hasDefault: true;

package/dist/schema.d.ts

@@ -1,3 +1,3 @@
 import 'drizzle-orm';
 import 'drizzle-orm/pg-core';
-export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as slackBotPostOperations, at as socialConnections, au as socialPosts, av as stripeWebhookEvents, aw as usageEvents, ax as workspaceCaptures, ay as workspaceControlEvents, az as workspaceInferenceControls, aA as workspaceInstructionPolicyActivationEvents, aB as workspaceInstructionPolicyHeads, aC as workspaceInstructionPolicyRevisions, aD as workspaceMemberships, aE as workspaceModelPolicies, aF as workspacePacks, aG as workspaceSessionActivityRevisions, aH as workspaceVariableSetVariables, aI as workspaceVariableSets, w as workspaces } from './schema-SbaSoRdr.js';
+export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as slackBotPostOperations, at as socialConnections, au as socialPosts, av as stripeWebhookEvents, aw as usageEvents, ax as workspaceCaptures, ay as workspaceControlEvents, az as workspaceInferenceControls, aA as workspaceInstructionPolicyActivationEvents, aB as workspaceInstructionPolicyHeads, aC as workspaceInstructionPolicyRevisions, aD as workspaceMemberships, aE as workspaceModelPolicies, aF as workspacePacks, aG as workspaceSessionActivityRevisions, aH as workspaceVariableSetVariables, aI as workspaceVariableSets, w as workspaces } from './schema-FoPub9yt.js';

package/dist/schema.js

@@ -97,7 +97,7 @@ import {
   workspaceVariableSetVariables,
   workspaceVariableSets,
   workspaces
-} from "./chunk-IQOXTFKA.js";
+} from "./chunk-PQKVUWQW.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,

package/drizzle/0134_session_first_party_mcp_tools.sql

@@ -0,0 +1,15 @@
+-- deployment-mode: rolling
+-- Per-session model-visible selection for the broad first-party MCP server.
+-- NULL resolves to the fixed minimal default; [] intentionally selects none.
+ALTER TABLE "sessions"
+  ADD COLUMN "first_party_mcp_tools" jsonb;
+
+ALTER TABLE "sessions"
+  ADD CONSTRAINT "sessions_first_party_mcp_tools_array_chk"
+  CHECK (
+    "first_party_mcp_tools" IS NULL
+    OR jsonb_typeof("first_party_mcp_tools") = 'array'
+  ) NOT VALID;
+
+ALTER TABLE "sessions"
+  VALIDATE CONSTRAINT "sessions_first_party_mcp_tools_array_chk";