@opengeni/db 0.14.0 → 0.14.3

package/dist/index.d.ts

@@ -2,9 +2,9 @@ import '@opengeni/contracts';
 import '@opengeni/config';
 export { isCodexBilledModel } from '@opengeni/codex';
 export { sql as dbSql } from 'drizzle-orm';
-export { A as AGENT_VISIBLE_MEMORY_STATUSES, a as AcceptSessionApprovalDecisionResult, b as AcceptSessionHumanInputResponseResult, c as AccrueWarmSecondsResult, d as AcquireLeaseInput, e as AcquireLeaseResult, f as ActiveRetainedProcessOwnerCount, g as ActiveSandboxPointer, h as AddSessionSystemUpdateInput, i as AddSessionSystemUpdateResult, j as AdoptCodexResetRedemptionResult, k as AgentCommandAuthorityError, l as AgentInternalUpdateCommandResult, m as AppendEventInput, n as ApplyContextCompactionResult, o as ApplySessionTurnSettlementInput, p as ApplySessionTurnSettlementResult, q as ArmCodexCapacityWaitResult, B as BeginSandboxRematerializationResult, r as BootstrapWorkspaceInput, C as CODEX_CAPACITY_REFRESH_MAX_MS, s as CODEX_CAPACITY_REFRESH_MIN_MS, t as CODEX_CREDENTIAL_LEASE_TTL_MS, u as CODEX_RESET_REDEMPTION_OUTCOMES, v as CODEX_ROTATION_STRATEGIES, w as ClaimCodexResetRedemptionResult, x as ClaimSessionWorkForAttemptInput, y as ClaimSessionWorkForAttemptResult, z as ClaimSlackBotPostOperationResult, D as ClearSessionContextResult, E as CodexAccountStatus, F as CodexAccountUsageSnapshot, G as CodexAllocatorUpdateResult, H as CodexAuthDeps, I as CodexCapacityAvailabilityDecision, J as CodexCapacityMutationResult, K as CodexCapacityResetKind, L as CodexCapacitySelectionContext, M as CodexCapacityWait, N as CodexCapacityWaitStatus, O as CodexCapacityWakeTarget, P as CodexCredentialForRun, Q as CodexCredentialLeaseCandidateFilter, R as CodexCredentialLeaseCandidateFilterResult, S as CodexCredentialLeasePolicyScopeResolver, T as CodexCredentialLeaseQuarantine, U as CodexCredentialLeaseResult, V as CodexCredentialLeaseSelection, W as CodexCredentialLeaseSelectionContext, X as CodexCredentialStatus, Y as CodexCredentialTokens, Z as CodexLeaseAccountStatus, _ as CodexPinSource, $ as CodexRateLimitResetCreditsAccountResult, a0 as CodexResetRedemptionAttempt, a1 as CodexResetRedemptionOutcome, a2 as CodexResetRedemptionRecovery, a3 as CodexResetRedemptionSendNotReadyReason, a4 as CodexResetRedemptionStatus, a5 as CodexRotationSettings, a6 as CodexRotationStrategy, a7 as CodexTokenDeadlineClock, a8 as CodexTokenDeadlineOptions, a9 as CompleteSlackBotPostOperationResult, aa as ComposerDraftRow, ab as ConnectionBrokerDeps, ac as ConnectionCredentialForBroker, ad as ConnectionMetadataWithVerification, ae as ConnectionRefreshHttpError, af as ConsumeOAuthStateNonceInput, ag as CorrectWorkspaceMemoryInput, ah as CorrectWorkspaceMemoryResult, ai as CreateCapabilityCatalogItemInput, aj as CreateConnectionInput, ak as CreateDbOptions, al as CreateImportBatchInput, am as CreateKnowledgeMemoryInput, an as CreatePackInstallationInput, ao as CreateScheduledTaskInput, ap as CreateSessionGoalInput, aq as CreateSessionMcpServerInput, ar as CreateSocialConnectionInput, as as CreateSocialPostInput, at as CreditBalanceByAccount, au as Database, av as DatabaseFailureCode, aw as DbClient, ax as DbSession, ay as DeviceEnrollmentRequestRecord, az as DeviceEnrollmentStatus, aA as EditQueueCommandResult, aB as EffectiveControlBlocker, aC as EffectiveControlResumeOption, aD as EffectiveControlState, aE as EffectiveSessionControl, aF as EnableCapabilityInstallationInput, aG as EnabledMcpCapabilityServer, aH as EnqueueSessionTurnInput, aI as EnrollmentExposure, aJ as EnrollmentOs, aK as EnrollmentRecord, aL as EnrollmentStatus, aM as ExpiredDrainingSandboxLeaseCount, aN as ExpiredFileUploadCleanupClaim, aO as FORCE_RLS_TABLES, aP as FenceCodexResetRedemptionSendResult, aQ as FileUploadCleanupClaimResult, aR as ForceDrainResult, aS as FrozenTurnInitiator, aT as GitHubInstallation, aU as GitHubInstallationAccess, aV as GitHubInstallationAuthorityCommitError, aW as GoalContinuationDecision, aX as HostExportConsumerStatus, aY as HostExportKind, aZ as HostExportPayloadError, a_ as HostMcpCredentialBindingError, a$ as HostMcpCredentialResolverContext, b0 as HostMcpCredentialScopeError, b1 as HumanInputResponseValidationError, b2 as IdempotentPersistenceTransactionOptions, b3 as ImportBatch, b4 as InitializeSessionStartInput, b5 as InitializeSessionStartResult, b6 as InstallOrReadTurnExecutionPolicyForAttemptResult, b7 as IntegrationOAuthClientForUse, b8 as LeaseHolderKind, b9 as LeaseSnapshot, ba as ListKnowledgeMemoryOptions, bb as ListSessionEventPageOptions, bc as ListSessionEventsOptions, bd as ListSessionsForSubjectOptions, be as ListSessionsOptions, bf as LiveModalSandboxLeaseAttribution, bg as LostProviderWorkspaceSettlement, bh as MACHINE_METRICS_SERIES_INTERVAL_MS, bi as MAX_INTERNAL_UPDATE_BATCH_BYTES, bj as MAX_INTERNAL_UPDATE_BATCH_MEMBERS, bk as MAX_INTERNAL_UPDATE_BYTES, bl as MEMORY_ACTIVE_RECORD_CAP, bm as MEMORY_BLOCK_KIND_ORDER, bn as MEMORY_BLOCK_RECORD_LIMIT, bo as MEMORY_CORRECT_TOOL_DESCRIPTION, bp as MEMORY_KIND_SECTION_TITLES, bq as MEMORY_NEAR_DUP_COSINE_THRESHOLD, br as MEMORY_NEAR_DUP_NEIGHBORS, bs as MEMORY_SAVE_TOOL_DESCRIPTION, bt as MEMORY_SEARCH_DEFAULT_LIMIT, bu as MEMORY_SEARCH_MAX_LIMIT, bv as MEMORY_SEARCH_TOOL_DESCRIPTION, bw as MEMORY_TEXT_MAX_CHARS, bx as MEMORY_VISIBLE_RECORD_CAP, by as MachineMetricsRow, bz as MachineMetricsSample, bA as MarkWarmLeaseInstanceLostResult, bB as MaterializeGoalContinuationResult, bC as MemoryBlockRecord, bD as MemoryEmbedder, bE as MemorySanitizeResult, bF as MeterableWarmLease, bG as NON_RLS_RUNTIME_TABLES, bH as NestedAgentDepthDeploymentPolicy, bI as NestedAgentDepthPolicySource, bJ as NewSessionDraftAccessError, bK as NewSessionDraftConflictError, bL as NewSessionDraftRow, bM as PROTECTED_NO_DIRECT_DML_TABLES, bN as PendingSessionToolCallInput, bO as PersistenceFailureDetails, bP as PersistenceRetryOutcome, ProvisionResult, ProvisionRolesOptions, bQ as QueueCommandConflictCode, bR as QueueCommandConflictError, bS as QueueCommandResult, bT as QueuedTurnRow, bU as RUNTIME_DML_TABLES, bV as RUNTIME_FULL_DML_TABLES, bW as RUNTIME_READ_INSERT_TABLES, bX as RUNTIME_READ_ONLY_TABLES, bY as RUNTIME_TABLE_PRIVILEGES, bZ as ReapDrainable, b_ as ReconcileCodexCapacityWaitResult, b$ as ReconcileColdLostLeaseInstanceBlockersResult, c0 as ReconcileSessionAttemptQuiescenceResult, c1 as RecoverSessionDispatchInput, c2 as RecoverSessionDispatchResult, c3 as RefreshTransportOptions, c4 as RegisterWorkspacePackInput, c5 as RegistryCapabilityCatalogItemInput, c6 as RegistryCatalogSurfaceKey, c7 as ReplaceIntegrationOAuthClientInput, c8 as RequestSessionTurnRecoveryInput, c9 as RequestSessionTurnRecoveryResult, ca as ResolveConnectionCredentialInput, cb as ResolveConnectionCredentialResult, cc as RetainedFileArtifact, cd as RetainedProcessProviderProof, ce as RigActiveVersionChangedError, cf as RigChangeAlreadyVerifyingError, cg as RigChangeMonitoringSummary, ch as RigChangeTransitionError, ci as RigVersionContentInput, cj as RigVersionMonitoringSummary, ck as RlsContext, cl as RlsStrategy, cm as RuntimeDatabaseIdentity, cn as RuntimeDatabasePosture, co as RuntimeDatabasePostureError, cp as RuntimeDatabasePostureOptions, cq as RuntimeRoutinePosture, cr as RuntimeSchemaPosture, cs as RuntimeTableDmlPrivilege, ct as RuntimeTablePosture, cu as RuntimeTablePrivilegeContract, cv as SESSION_ANCESTRY_LIMIT, cw as SESSION_DISCOVERY_CONTROL_TARGET_LIMIT, cx as SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS, cy as SESSION_DISCOVERY_GOAL_MAX_CHARS, cz as SESSION_DISCOVERY_MESSAGE_MAX_CHARS, cA as SESSION_EVENT_DB_PAGE_MAX_BYTES, cB as SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT, cC as SESSION_LIST_SNAPSHOT_MAX_IDS, cD as SafeDatabaseErrorFacts, cE as SandboxArchiveAvailability, cF as SandboxArchiveRevision, cG as SandboxImageConflictError, cH as SandboxKind, cI as SandboxLeaseLiveness, cJ as SandboxLeaseRecoveryBlockedError, cK as SandboxLeaseSupersededError, cL as SandboxOpenPtySessionRow, cM as SandboxProviderExistence, cN as SandboxPtyProcessIdentity, cO as SandboxPtySessionRow, cP as SandboxRecord, cQ as SandboxRecoveryState, cR as SandboxRestoreStatus, cS as SandboxRetainedProcess, cT as SandboxRetainedProcessIdentity, cU as SandboxRetainedProcessPromotionFencedError, cV as SandboxRetainedProcessReconciliationClaim, cW as SandboxRetainedProcessState, cX as SandboxRigConflictError, cY as SandboxWorkspaceMutationAdmission, cZ as SandboxWorkspaceMutationFencedError, c_ as SandboxWorkspaceMutationProviderOutcome, c$ as SandboxWorkspaceReadiness, d0 as SanitizedDatabasePersistenceCause, d1 as SaveWorkspaceMemoryInput, d2 as SaveWorkspaceMemoryResult, d3 as SessionAttemptActivityRef, d4 as SessionAttemptInterruptionSettlement, d5 as SessionCodexState, d6 as SessionCommandActor, d7 as SessionCommandIdempotencyError, d8 as SessionCommandReceiptRow, d9 as SessionContextBusyError, da as SessionControlConflictError, db as SessionControlInvariantError, dc as SessionControlMutationResult, dd as SessionCreateDeniedResult, de as SessionCreateInput, df as SessionCreateResult, dg as SessionCreateSuccessResult, dh as SessionDepthPolicy, di as SessionDiscoveryControl, dj as SessionDiscoveryCursor, dk as SessionDiscoveryOrderBy, dl as SessionDiscoverySummary, dm as SessionEventPage, dn as SessionEventPersistenceError, dp as SessionEventWriteLockInput, dq as SessionEventWriteLocks, dr as SessionGoalContinuationProjection, ds as SessionIdConflictError, dt as SessionLineage, du as SessionListAccessError, dv as SessionListCursor, dw as SessionListCursorError, dx as SessionListCursorExpiredError, dy as SessionListSnapshotLimitError, dz as SessionMcpServerForRun, dA as SessionPinAccessError, dB as SessionPinVersionConflictError, dC as SessionRecordingCodec, dD as SessionRecordingMode, dE as SessionRecordingRow, dF as SessionRecordingState, dG as SessionSpawnDenial, dH as SessionSpawnDenialCode, dI as SessionSpawnDeniedDbError, dJ as SessionSystemUpdateOutboxDelivery, dK as SessionToolPolicyVersionConflictError, dL as SessionTurnAttemptOutcome, dM as SessionTurnForExecution, dN as SessionTurnRecordingSettlement, dO as SessionWorkPeek, dP as SessionWorkTrigger, dQ as SessionWorkflowWake, dR as SessionWorkflowWakeDeliveryResult, dS as SetSessionCodexPinOptions, dT as SetSessionGoalStatusEvent, dU as SettleCodexCredentialFailoverResult, dV as SettleCodexCredentialLeaseLossResult, dW as SlackBotInstallCallbackFailureReason, dX as SlackBotInstallCallbackFailureStage, dY as SlackBotLifecycleSuccessAuditError, dZ as SlackBotPostOperation, d_ as SteerQueueCommandResult, d$ as StoreIntegrationOAuthClientInput, e0 as StoredIntegrationOAuthClient, e1 as StreamAcknowledgment, e2 as SubmitHumanPromptResult, e3 as ToolspaceCallReservation, e4 as ToolspaceTurnAttemptClaims, e5 as TurnAttemptFenceRejectReason, e6 as UpdateConnectionInput, e7 as UpdateImportBatchCountsInput, e8 as UpdateKnowledgeMemoryInput, e9 as UpdateScheduledTaskInput, ea as UpdateSessionMcpApprovalPolicyResult, eb as UpdateSessionMcpServerCredentialsInput, ec as UpdateSessionMcpServerCredentialsResult, ed as UpsertCodexSubscriptionCredentialResult, ee as UserLookup, ef as VariableSetForRun, eg as WORKSPACE_MEMORY_BLOCK_EMPTY, eh as WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED, ei as WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET, ej as WorkspaceCaptureCommitResult, ek as WorkspaceCaptureGcPlan, el as WorkspaceCaptureGcRow, em as WorkspaceCaptureRow, en as WorkspaceControlLockMode, eo as WorkspaceControlMutationResult, ep as WorkspaceControlRow, eq as WorkspaceEnvironmentForRun, er as WorkspaceInstructionPolicyConflictError, es as WorkspaceInstructionPolicyInvalidOperationError, et as WorkspaceInstructionPolicyLegacyUnavailableError, eu as WorkspaceInstructionPolicyNotFoundError, ev as WorkspaceMemoryOrigin, ew as WorkspaceMemorySearchInput, ex as WorkspaceMemorySearchMode, ey as WorkspaceMemorySearchResult, ez as WorkspaceModelPolicy, eA as abandonCodexResetRedemptionBeforeProvider, eB as abandonRecordingForTurnAttempt, eC as acceptSessionApprovalDecision, eD as acceptSessionHumanInputResponse, eE as accrueWarmSeconds, eF as acknowledgeHostExportBatch, eG as acquireCodexCredentialLease, eH as acquireLease, eI as activateRigVersion, eJ as activateWorkspaceInstructionPolicyRevision, eK as addSessionSystemUpdate, eL as addSessionSystemUpdateWithSourceMutation, eM as admitToolspaceTurnAttempt, eN as adoptCodexResetRedemptionAttempt, eO as advanceWorkspaceGeneration, eP as advanceWorkspaceGenerationForDirectRequest, eQ as advanceWorkspaceGenerationForRetainedProcess, eR as allAccountPermissions, eS as allWorkspacePermissions, eT as appendSessionEventToSandboxGroup, eU as appendSessionEvents, eV as appendSessionEventsAndUpdateSession, eW as appendSessionEventsForTurnAttempt, eX as appendSessionEventsWithLockedSessionUpdate, eY as appendSessionHistoryItems, eZ as applyContextCompaction, e_ as applyCreditDebitUpToBalance, e$ as applyCreditLedgerEntry, f0 as applySessionTurnSettlement, f1 as approveDeviceEnrollmentRequest, f2 as areGitHubRepositoriesAllowedForWorkspace, f3 as armCodexCapacityWait, f4 as assertAgentCommandAuthorityInTransaction, f5 as assertRuntimeDatabasePosture, f6 as autoResumeSessionBranchInTransaction, f7 as beginRigChangeVerificationAttempt, f8 as beginSandboxRematerialization, f9 as bindAuthorizedGitHubInstallationRepositories, fa as bindGitHubInstallationRepositories, fb as bootstrapWorkspace, fc as buildChildCompletionDigest, fd as buildCodexTokenResolver, fe as buildConnectionTokenResolver, ff as buildHostConnectionTokenResolver, fg as canonicalSessionCommandHash, fh as claimCodexResetRedemption, fi as claimExpiredFileUploadCleanup, fj as claimFileUploadCleanup, fk as claimHostExportBatch, fl as claimPendingSessionSystemUpdateOutbox, fm as claimPendingSessionWorkflowWakes, fn as claimSessionWorkForAttempt, fo as claimSlackBotPostOperation, fp as claimTerminalRetainedProcesses, fq as clearDurablePendingSessionToolCalls, fr as clearEnrollmentWentOffline, fs as clearPendingSessionToolspaceCall, ft as clearSessionContext, fu as clearSessionGoal, fv as clearedContextMarkerItem, fw as closePtySession, fx as closeSessionTurnAttemptInTransaction, fy as codexCapacityRefreshBackoffMs, fz as commitWarmingToWarm, fA as completeCodexResetRedemption, fB as completeExpiredFileUploadCleanup, fC as completeFileUpload, fD as completeFileUploadCleanup, fE as completeSlackBotPostOperation, fF as computeWorkspaceCaptureGcPlan, fG as confirmDrainCold, fH as consumeDeviceEnrollmentRequest, fI as consumeIntegrationOAuthStateNonce, fJ as consumeNewSessionDraftInTransaction, fK as correctWorkspaceMemory, fL as countActiveApiKeysForWorkspace, fM as countActiveRetainedProcessesByOwnerState, fN as countActiveSessionHistoryItems, fO as countActiveSessionsForWorkspace, fP as countActiveSessionsUsingEnvironment, fQ as countActiveSessionsUsingVariableSet, fR as countConsecutiveReactiveRotations, fS as countExpiredDrainingSandboxLeases, fT as countQueuedTurns, fU as countRigs, fV as countSandboxLeasesByLiveness, fW as countScheduledTasksForWorkspace, fX as countScheduledTasksUsingEnvironment, fY as countScheduledTasksUsingVariableSet, fZ as countSessionHistoryItems, f_ as countSessionsUsingRig, f$ as countVariableSets, g0 as countWorkspaceEnvironments, g1 as countWorkspacesForAccount, g2 as createApiKey, g3 as createConnection, g4 as createConnectionWithSlackBotSuccessAudit, g5 as createDb, g6 as createDeviceEnrollmentRequest, g7 as createEnrollment, g8 as createFileUpload, g9 as createImportBatch, ga as createKnowledgeMemory, gb as createRig, gc as createRigChange, gd as createRigVersion, ge as createRigVersionForChangePromotion, gf as createSandbox, gg as createScheduledTask, gh as createScheduledTaskRun, gi as createSession, gj as createSessionGoal, gk as createSessionMcpServers, gl as createSessionWithIdempotencyKey, gm as createSessionWithIdempotencyKeyResult, gn as createSocialConnection, go as createSocialPost, gp as createVariableSet, gq as createWorkspace, gr as createWorkspaceEnvironment, gs as createWorkspaceInstructionPolicyDraft, gt as databaseFailureCode, gu as deadLetterHostExportHead, gv as decodeSessionListCursor, gw as decryptEnvironmentValue, gw as decryptVariableSetValue, gx as decryptedCapabilityHeaders, gy as deferRetainedProcessReconciliation, gz as deleteGitHubInstallationBinding, gA as deleteRecording, gB as deleteRig, gC as deleteRigIfNoActiveSessions, gD as deleteScheduledTask, gE as deleteSessionQueueItemInTransaction, gF as deleteVariableSet, gG as deleteVariableSetVariable, gH as deleteWorkspace, gI as deleteWorkspaceCaptureRows, gJ as deleteWorkspaceEnvironment, gK as deleteWorkspaceEnvironmentVariable, gL as deleteWorkspacePack, gM as denyDeviceEnrollmentRequest, gN as diffWorkspaceInstructionPolicyContent, gO as diffWorkspaceInstructionPolicyRevisions, gP as disableCapabilityInstallation, gQ as disableHostExportConsumer, gR as disconnectAllCodexAccounts, gS as disconnectCodexAccount, gT as editQueuedTurnInTransaction, gU as enableCapabilityInstallation, gV as enablePackInstallation, gW as encodeSessionListCursor, gX as encryptEnvironmentValue, gX as encryptVariableSetValue, gY as enqueueSessionTurn, gZ as enqueueSessionWorkflowWake, g_ as enqueueSessionWorkflowWakeIfRunnable, g$ as enqueueSessionWorkflowWakeInTransaction, h0 as ensureCodexRotationSettings, h1 as ensureManagedAccessForUser, h2 as estimateMemoryTokens, h3 as evaluateGoalContinuation, h4 as evaluateRuntimeDatabasePosture, h5 as evaluateSessionControl, h6 as evaluateSessionControls, h7 as evaluateSessionDiscoveryControls, h8 as expireSessionHumanInputRequest, h9 as failHostExportBatch, ha as failSandboxRematerialization, hb as failWarmingToCold, hc as fenceCodexResetRedemptionSend, hd as fetchCodexRateLimitResetCreditsForAccount, he as fetchCodexUsageForAccount, hf as finalizeEnrollmentByToken, hg as findActiveApiKeyByHash, hh as forceDrainOverLimitViewerOnlyBoxes, hi as frozenInitiatorForCommandActor, hj as getActiveSessionHistoryItems, hk as getActiveSessionTurnForExecution, hl as getAnySessionInGroup, hm as getBillingBalance, hn as getBillingCustomer, ho as getCapabilityCatalogItem, hp as getCapabilityInstallation, hq as getCodexCapacityWaitForSession, hr as getCodexCredentialStatus, hs as getCodexResetRedemptionAttempt, ht as getCodexRotationSettings, hu as getComposerDraftInTransaction, hv as getConnectionMetadata, hw as getDeviceEnrollmentRequestByDeviceCode, hx as getEnrollment, hy as getFile, hz as getFileUpload, hA as getHostExportConsumerStatus, hB as getHumanInputResumeForEvent, hC as getKnowledgeMemory, hD as getLatestRunState, hE as getLatestStartedSessionTurn, hF as getManagedAccount, hG as getManagedUserByEmail, hH as getMaterializedSandboxFileResources, hI as getNestedAgentDepthDeploymentPolicy, hJ as getNewSessionDraftInTransaction, hK as getOpenPtySession, hL as getOrCreateSessionSystemUpdateOutbox, hM as getPackInstallation, hN as getPendingDeviceEnrollmentRequestByUserCode, hO as getPendingDeviceEnrollmentRequestByUserCodeGlobal, hP as getRecording, hQ as getRetainedFileArtifact, hR as getRetainedProcess, hS as getRig, hT as getRigByName, hU as getRigChange, hV as getRigName, hW as getRigVersion, hX as getRigVersionById, hY as getSandbox, hZ as getSandboxSessionEnvelope, h_ as getScheduledTask, h$ as getSession, i0 as getSessionAttemptActivityRef, i1 as getSessionByCreateIdempotencyKey, i2 as getSessionCodexState, i3 as getSessionEvent, i4 as getSessionEventByClientEventId, i5 as getSessionForSubject, i6 as getSessionGoal, i7 as getSessionGoalWithContinuation, i8 as getSessionHistoryItems, i9 as getSessionHumanInputRequest, ia as getSessionLineage, ib as getSessionQueueSnapshot, ic as getSessionRootId, id as getSessionSpawnDenial, ie as getSessionSpawnDenialByIdempotencyKey, ig as getSessionSystemUpdateOutboxByDedupeKey, ih as getSessionTurn, ii as getSessionTurnForAttempt, ij as getSlackBotPostOperation, ik as getSocialConnection, il as getStoredCapabilityHeaderCiphertext, im as getStreamAcknowledgment, io as getVariableSet, ip as getVariableSetByName, iq as getVariableSetValuesForRun, ir as getWorkspace, is as getWorkspaceControlEvent, it as getWorkspaceDefaultRigId, iu as getWorkspaceEnvironment, iv as getWorkspaceEnvironmentByName, iw as getWorkspaceEnvironmentValuesForRun, ix as getWorkspaceGrant, iy as getWorkspaceInstructionPolicyRevision, iz as getWorkspaceModelPolicy, iA as getWorkspacePack, iB as grantWorkspaceAccess, iC as hasAuditableGitHubInstallationAuthority, iD as hasCreditLedgerEntry, iE as hashMemoryText, iF as heartbeatCodexCredentialLease, iG as heartbeatCodexCredentialLeaseUntil, iH as heartbeatLeaseHolder, iI as importLegacyWorkspaceInstructionPolicyDraft, iJ as ingestMachineMetricsSample, iK as initializeSessionStartAtomically, iL as insertFailedWorkspaceCapture, iM as insertMachineMetricsSeries, iN as insertPtySession, iO as insertRecording, iP as insertWorkspaceCapture, iQ as inspectRuntimeDatabasePosture, iR as installOrReadTurnExecutionPolicyForAttempt, iS as interruptedToolCallResult, iT as isCodexBilledTurn, iU as isDatabasePersistenceFailure, iV as isMemoryTextTooLong, iW as isRetryablePersistenceSqlState, iX as isSessionCompactionRequested, iY as isSessionEventPersistenceError, iZ as isStripeWebhookProcessed, i_ as latestWorkspaceCapture, i$ as listApiKeys, j0 as listCapabilityCatalogItems, j1 as listCapabilityInstallations, j2 as listCodexAccountStatuses, j3 as listCodexResetRedemptionRecoveries, j4 as listConnectionsMetadata, j5 as listCreditBalancesByAccount, j6 as listDistinctRigVersionIdsInGroup, j7 as listDistinctVariableSetIdsInGroup, j8 as listEnabledMcpCapabilityServers, j9 as listEnrollments, ja as listGitHubInstallationAccessForWorkspace, jb as listGitHubInstallationIdsForWorkspace, jc as listGitHubInstallationsForWorkspace, jd as listKnowledgeMemories, je as listLiveModalSandboxLeaseAttributions, jf as listMeterableWarmLeases, jg as listOpenPtySessions, jh as listOutstandingSessionSystemUpdates, ji as listPackInstallations, jj as listPendingCodexCapacityWakeTargets, jk as listPendingSessionTurns, jl as listRecordings, jm as listRegistryCatalogSurfaceKeys, jn as listRigChangeMonitoringSummaries, jo as listRigChanges, jp as listRigVersionMonitoringSummaries, jq as listRigVersions, jr as listRigs, js as listSandboxes, jt as listScheduledTaskRuns, ju as listScheduledTasks, jv as listSessionDiscoverySummaries, jw as listSessionEventPage, jx as listSessionEvents, jy as listSessionHumanInputRequests, jz as listSessionIdsInGroup, jA as listSessionMcpServerMetadata, jB as listSessionMcpServersForChildInheritance, jC as listSessionMcpServersForRun, jD as listSessionSpawnDenials, jE as listSessionSystemUpdatesForTurn, jF as listSessionTurns, jG as listSessions, jH as listSessionsForSubject, jI as listSocialConnections, jJ as listSocialPosts, jK as listUsageEvents, jL as listVariableSets, jM as listWorkspaceControlEvents, jN as listWorkspaceEnvironments, jO as listWorkspaceInstructionPolicyRevisions, jP as listWorkspaceMembers, jQ as listWorkspacePacks, jR as listWorkspacesForSubject, jS as loadCodexCredentialForRun, jT as loadConnectionCredentialForBroker, jU as loadIntegrationOAuthClient, jV as loadVariableSetForRun, jW as loadWorkspaceEnvironmentForRun, jX as lockSessionEventWriteRows, jY as lockWorkspaceInferenceControl, jZ as markFileUploadFailed, j_ as markSandboxFileResourcesMaterialized, j$ as markSandboxProviderReady, k0 as markSandboxRestoreVerifying, k1 as markScheduledTaskRunFailedIfQueued, k2 as markSessionAttemptQuiesced, k3 as markSessionSystemUpdateOutboxDeliveredInTransaction, k4 as markSessionSystemUpdateOutboxFailed, k5 as markSessionWorkflowWakeDelivered, k6 as markSessionWorkflowWakeFailed, k7 as markStaleRegistryCatalogItems, k8 as markStripeWebhookProcessed, k9 as markWarmLeaseInstanceLost, ka as materializeGoalContinuation, kb as mcpServerIdForCapability, kc as moveQueuedTurnInTransaction, kd as mutateSessionControlInTransaction, ke as mutateWorkspaceControlInTransaction, kf as nestedPostgresSqlState, kg as newSessionDraftToolsProvided, kh as nextSessionHistoryPosition, ki as normalizeBearerScheme, kj as normalizeMemoryText, kk as orphanedResultRowIndicesForRepair, kl as peekSessionWork, km as persistDrainSnapshot, kn as persistWarmSnapshot, ko as planWorkspaceCaptureGc, kp as projectEffectiveControlForRelatedAccess, kq as projectSessionForRelatedAccess, provisionRoles, kr as pruneHostExportOutbox, ks as publicNewSessionDraftOptions, kt as quarantineCodexCredentialForLease, ku as reArmDrainingLease, kv as readActiveSandbox, kw as readLease, kx as readMachineMetricsLatest, ky as readMachineMetricsLatestForWorkspace, kz as readMachineMetricsSeries, kA as readWorkspaceArchiveCapturePreflight, kB as reapExpiredSessionListSnapshots, kC as reapStaleLeaseHolders, kD as reapStaleLeaseHoldersGlobal, kE as reconcileCodexCapacityWait, kF as reconcileColdLostLeaseInstanceBlockers, kG as reconcileSessionAttemptQuiescence, kH as recordAuditEvent, kI as recordCodexAccountConnectors, kJ as recordCodexAccountUsage, kK as recordCodexAccountUsageWithWakeTargets, kL as recordCodexTokenRefresh, kM as recordConnectionTokenRefresh, kN as recordConnectionUsed, kO as recordLeaseDataPlaneUrl, kP as recordLeaseTerminalDataPlaneUrl, kQ as recordPendingSessionToolCallResult, kR as recordRetainedProcessReconciliationProof, kS as recordSessionActiveCodexCredential, kT as recordSkippedContextCompaction, kU as recordSlackBotInstallCallbackFailure, kV as recordStreamAcknowledgment, kW as recordStripeWebhookEvent, kX as recordUsageEvent, kY as recordWarmingSandboxCreated, kZ as recoverSessionDispatch, k_ as refreshOAuthConnectionCredential, k$ as registerDbBinding, l0 as registerHostExportConsumer, l1 as registerInternalUpdateWakeInTransaction, l2 as registerPendingSessionToolCall, l3 as registerSessionTurnAttemptClaim, l4 as registerSessionWorkflowWakeInTransaction, l5 as registerWorkspacePack, l6 as releaseCodexCredentialLease, l7 as releaseCodexResetRedemptionClaim, l8 as releaseLeaseHolder, l9 as releaseSlackBotPostOperationClaim, la as removeWorkspaceMember, lb as renameCodexAccount, lc as renderWorkspaceMemoryBlock, ld as replaceIntegrationOAuthClient, le as requestSessionCompaction, lf as requestSessionTurnRecovery, lg as requireFile, lh as requireScheduledTask, li as requireSession, lj as requireSocialConnection, lk as requireWorkspace, ll as reserveSessionCommandReceipt, lm as reserveToolspaceCallForAttempt, ln as resolveWorkspaceMemoryBlock, lo as resumeHostExportConsumer, lp as retainWorkspaceMutationProcess, lq as retainedProcessReconciliationProof, lr as retainedProcessSettlementIdentity, ls as retireHostExportConsumer, lt as revokeApiKey, lu as revokeConnection, lv as revokeConnectionWithSlackBotSuccessAudit, lw as revokeEnrollment, lx as revokeViewer, ly as rewindHostExportConsumer, lz as rlsContextForWorkspace, lA as rlsStrategyFor, lB as rollbackWorkspaceInstructionPolicyRevision, lC as rotateWorkspaceArchives, lD as runIdempotentPersistenceTransaction, lE as runtimeDatabaseReadyCheck, lF as safeDatabaseErrorFacts, lG as sanitizeEventPayload, lH as sanitizeEventString, lI as sanitizeMemoryText, lJ as sanitizeModelPayload, lK as saveComposerDraftInTransaction, lL as saveNewSessionDraftInTransaction, lM as saveRunState, lN as saveWorkspaceMemory, lO as searchWorkspaceMemories, lP as seedNewSessionDraftInTransaction, lQ as sendAgentMessageInTransaction, lR as serializeEffectiveSessionControl, lS as sessionAuthorizationScopeFilter, lT as sessionSubject, lU as sessionTreeStatsForSessions, lV as sessionsWithActiveOpOnEnrollment, lW as setActiveCodexCredential, lX as setActiveSandbox, lY as setCodexCredentialExhausted, lZ as setCodexCredentialExhaustedWithWakeTargets, l_ as setCodexCredentialStatus, l$ as setCodexCredentialStatusById, m0 as setConnectionStatus, m1 as setEnrollmentDisplayState, m2 as setEnrollmentOpStreamState, m3 as setEnrollmentWentOffline, m4 as setInitialActiveCodexCredential, m5 as setRlsContext, m6 as setSessionCodexPin, m7 as setSessionGoalLastContinuationTurn, m8 as setSessionGoalStatus, m9 as setSessionGoalStatusWithEvent, ma as setSessionLastInputTokensForTurnAttempt, mb as setSessionPin, mc as setSubjectRlsContext, md as setTemporalWorkflowId, me as setVariableSetVariable, mf as setWorkspaceDefaultRig, mg as setWorkspaceEnvironmentVariable, mh as settleCodexCredentialFailover, mi as settleCodexCredentialLeaseLoss, mj as settleRetainedProcess, mk as settleScheduledTaskRunInTransaction, ml as settleSessionAttemptInterruptions, mm as settleSessionIdleWithParentOutbox, mn as shortMemoryId, mo as steerAgentSessionInTransaction, mp as steerQueuedTurnInTransaction, mq as storeIntegrationOAuthClient, mr as submitHumanPromptInTransaction, ms as sumUsageQuantity, mt as supersedeSessionCurrentDirectionInTransaction, mu as touchEnrollmentLastSeen, mv as touchLeaseHolder, mw as updateCodexAllocatorEligibility, mx as updateCodexRotationSettings, my as updateConnection, mz as updateConnectionWithSlackBotSuccessAudit, mA as updateImportBatchCounts, mB as updateKnowledgeMemory, mC as updatePackInstallationStatus, mD as updatePtySessionActivity, mE as updateRecording, mF as updateRig, mG as updateRigChangeStatus, mH as updateScheduledTask, mI as updateScheduledTaskRun, mJ as updateSessionCommandReceiptResult, mK as updateSessionGoal, mL as updateSessionGoalWithEvent, mM as updateSessionMcpApprovalPolicy, mN as updateSessionMcpServerCredentials, mO as updateSessionTitle, mP as updateVariableSet, mQ as updateWorkspace, mR as updateWorkspaceEnvironment, mS as updateWorkspaceSettings, mT as upsertBillingCustomer, mU as upsertCapabilityCatalogItem, mV as upsertCodexSubscriptionCredential, mW as upsertGitHubInstallation, mX as upsertMachineMetricsLatest, mY as upsertRegistryCapabilityCatalogItem, mZ as upsertSandboxSessionEnvelope, m_ as upsertSessionGoal, m$ as upsertSessionGoalWithEvent, n0 as upsertWorkspaceModelPolicy, n1 as validateHumanInputResponse, n2 as verifyDirectWorkspaceMutationSettlement, n3 as verifyRetainedProcessMutationSettlement, n4 as verifyWorkspaceMutationSettlement, n5 as withAccountRls, n6 as withCodexCapacityMutation, n7 as withCodexCredentialRefreshLock, n8 as withCodexTokenDeadline, n9 as withRlsContext, na as withWorkspaceRls, nb as withWorkspaceSubjectRls, nc as withWorkspaceUsageLock, nd as workspaceCaptureAtRevision, ne as workspaceCodexSubscriptionActive } from './provision-roles.js';
+export { A as AGENT_VISIBLE_MEMORY_STATUSES, a as AcceptSessionApprovalDecisionResult, b as AcceptSessionHumanInputResponseResult, c as AccrueWarmSecondsResult, d as AcquireLeaseInput, e as AcquireLeaseResult, f as ActiveRetainedProcessOwnerCount, g as ActiveSandboxPointer, h as AddSessionSystemUpdateInput, i as AddSessionSystemUpdateResult, j as AdoptCodexResetRedemptionResult, k as AgentCommandAuthorityError, l as AgentInternalUpdateCommandResult, m as AppendEventInput, n as ApplyContextCompactionResult, o as ApplySessionTurnSettlementInput, p as ApplySessionTurnSettlementResult, q as ArmCodexCapacityWaitResult, B as BeginSandboxRematerializationResult, r as BootstrapWorkspaceInput, C as CODEX_CAPACITY_REFRESH_MAX_MS, s as CODEX_CAPACITY_REFRESH_MIN_MS, t as CODEX_CREDENTIAL_LEASE_TTL_MS, u as CODEX_RESET_REDEMPTION_OUTCOMES, v as CODEX_ROTATION_STRATEGIES, w as ClaimCodexResetRedemptionResult, x as ClaimSessionWorkForAttemptInput, y as ClaimSessionWorkForAttemptResult, z as ClaimSlackBotPostOperationResult, D as ClearSessionContextResult, E as CodexAccountStatus, F as CodexAccountUsageSnapshot, G as CodexAllocatorUpdateResult, H as CodexAuthDeps, I as CodexCapacityAvailabilityDecision, J as CodexCapacityMutationResult, K as CodexCapacityResetKind, L as CodexCapacitySelectionContext, M as CodexCapacityWait, N as CodexCapacityWaitStatus, O as CodexCapacityWakeTarget, P as CodexCredentialForRun, Q as CodexCredentialLeaseCandidateFilter, R as CodexCredentialLeaseCandidateFilterResult, S as CodexCredentialLeasePolicyScopeResolver, T as CodexCredentialLeaseQuarantine, U as CodexCredentialLeaseResult, V as CodexCredentialLeaseSelection, W as CodexCredentialLeaseSelectionContext, X as CodexCredentialStatus, Y as CodexCredentialTokens, Z as CodexLeaseAccountStatus, _ as CodexPinSource, $ as CodexRateLimitResetCreditsAccountResult, a0 as CodexResetRedemptionAttempt, a1 as CodexResetRedemptionOutcome, a2 as CodexResetRedemptionRecovery, a3 as CodexResetRedemptionSendNotReadyReason, a4 as CodexResetRedemptionStatus, a5 as CodexRotationSettings, a6 as CodexRotationStrategy, a7 as CodexTokenDeadlineClock, a8 as CodexTokenDeadlineOptions, a9 as CompleteSlackBotPostOperationResult, aa as ComposerDraftRow, ab as ConnectionBrokerDeps, ac as ConnectionCredentialForBroker, ad as ConnectionMetadataWithVerification, ae as ConnectionRefreshHttpError, af as ConsumeOAuthStateNonceInput, ag as CorrectWorkspaceMemoryInput, ah as CorrectWorkspaceMemoryResult, ai as CreateCapabilityCatalogItemInput, aj as CreateConnectionInput, ak as CreateDbOptions, al as CreateImportBatchInput, am as CreateKnowledgeMemoryInput, an as CreatePackInstallationInput, ao as CreateScheduledTaskInput, ap as CreateSessionGoalInput, aq as CreateSessionMcpServerInput, ar as CreateSocialConnectionInput, as as CreateSocialPostInput, at as CreditBalanceByAccount, au as Database, av as DatabaseFailureCode, aw as DbClient, ax as DbSession, ay as DeviceEnrollmentRequestRecord, az as DeviceEnrollmentStatus, aA as EditQueueCommandResult, aB as EffectiveControlBlocker, aC as EffectiveControlResumeOption, aD as EffectiveControlState, aE as EffectiveSessionControl, aF as EnableCapabilityInstallationInput, aG as EnabledMcpCapabilityServer, aH as EnqueueSessionTurnInput, aI as EnrollmentExposure, aJ as EnrollmentOs, aK as EnrollmentRecord, aL as EnrollmentStatus, aM as ExpiredDrainingSandboxLeaseCount, aN as ExpiredFileUploadCleanupClaim, aO as FORCE_RLS_TABLES, aP as FenceCodexResetRedemptionSendResult, aQ as FileUploadCleanupClaimResult, aR as ForceDrainResult, aS as FrozenTurnInitiator, aT as GitHubInstallation, aU as GitHubInstallationAccess, aV as GitHubInstallationAuthorityCommitError, aW as GoalContinuationDecision, aX as HostExportConsumerStatus, aY as HostExportKind, aZ as HostExportPayloadError, a_ as HostMcpCredentialBindingError, a$ as HostMcpCredentialResolverContext, b0 as HostMcpCredentialScopeError, b1 as HumanInputResponseValidationError, b2 as IdempotentPersistenceTransactionOptions, b3 as ImportBatch, b4 as InitializeSessionStartInput, b5 as InitializeSessionStartResult, b6 as InstallOrReadTurnExecutionPolicyForAttemptResult, b7 as IntegrationOAuthClientForUse, b8 as LeaseHolderKind, b9 as LeaseSnapshot, ba as ListKnowledgeMemoryOptions, bb as ListSessionEventPageOptions, bc as ListSessionEventsOptions, bd as ListSessionsForSubjectOptions, be as ListSessionsOptions, bf as LiveModalSandboxLeaseAttribution, bg as LostProviderWorkspaceSettlement, bh as MACHINE_METRICS_SERIES_INTERVAL_MS, bi as MAX_INTERNAL_UPDATE_BATCH_BYTES, bj as MAX_INTERNAL_UPDATE_BATCH_MEMBERS, bk as MAX_INTERNAL_UPDATE_BYTES, bl as MEMORY_ACTIVE_RECORD_CAP, bm as MEMORY_BLOCK_KIND_ORDER, bn as MEMORY_BLOCK_RECORD_LIMIT, bo as MEMORY_CORRECT_TOOL_DESCRIPTION, bp as MEMORY_KIND_SECTION_TITLES, bq as MEMORY_NEAR_DUP_COSINE_THRESHOLD, br as MEMORY_NEAR_DUP_NEIGHBORS, bs as MEMORY_SAVE_TOOL_DESCRIPTION, bt as MEMORY_SEARCH_DEFAULT_LIMIT, bu as MEMORY_SEARCH_MAX_LIMIT, bv as MEMORY_SEARCH_TOOL_DESCRIPTION, bw as MEMORY_TEXT_MAX_CHARS, bx as MEMORY_VISIBLE_RECORD_CAP, by as MachineMetricsRow, bz as MachineMetricsSample, bA as MarkWarmLeaseInstanceLostResult, bB as MaterializeGoalContinuationResult, bC as MemoryBlockRecord, bD as MemoryEmbedder, bE as MemorySanitizeResult, bF as MeterableWarmLease, bG as NON_RLS_RUNTIME_TABLES, bH as NestedAgentDepthDeploymentPolicy, bI as NestedAgentDepthPolicySource, bJ as NewSessionDraftAccessError, bK as NewSessionDraftConflictError, bL as NewSessionDraftRow, bM as PROTECTED_NO_DIRECT_DML_TABLES, bN as PendingSessionToolCallInput, bO as PersistenceFailureDetails, bP as PersistenceRetryOutcome, ProvisionResult, ProvisionRolesOptions, bQ as QueueCommandConflictCode, bR as QueueCommandConflictError, bS as QueueCommandResult, bT as QueuedTurnRow, bU as RUNTIME_DML_TABLES, bV as RUNTIME_FULL_DML_TABLES, bW as RUNTIME_READ_INSERT_TABLES, bX as RUNTIME_READ_ONLY_TABLES, bY as RUNTIME_TABLE_PRIVILEGES, bZ as ReapDrainable, b_ as ReconcileCodexCapacityWaitResult, b$ as ReconcileColdLostLeaseInstanceBlockersResult, c0 as ReconcileSessionAttemptQuiescenceResult, c1 as RecoverSessionDispatchInput, c2 as RecoverSessionDispatchResult, c3 as RefreshTransportOptions, c4 as RegisterWorkspacePackInput, c5 as RegistryCapabilityCatalogItemInput, c6 as RegistryCatalogSurfaceKey, c7 as ReplaceIntegrationOAuthClientInput, c8 as RequestSessionTurnRecoveryInput, c9 as RequestSessionTurnRecoveryResult, ca as ResolveConnectionCredentialInput, cb as ResolveConnectionCredentialResult, cc as RetainedFileArtifact, cd as RetainedProcessProviderProof, ce as RigActiveVersionChangedError, cf as RigChangeAlreadyVerifyingError, cg as RigChangeMonitoringSummary, ch as RigChangeTransitionError, ci as RigVersionContentInput, cj as RigVersionMonitoringSummary, ck as RlsContext, cl as RlsStrategy, cm as RuntimeDatabaseIdentity, cn as RuntimeDatabasePosture, co as RuntimeDatabasePostureError, cp as RuntimeDatabasePostureOptions, cq as RuntimeRoutinePosture, cr as RuntimeSchemaPosture, cs as RuntimeTableDmlPrivilege, ct as RuntimeTablePosture, cu as RuntimeTablePrivilegeContract, cv as SESSION_ANCESTRY_LIMIT, cw as SESSION_DISCOVERY_CONTROL_TARGET_LIMIT, cx as SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS, cy as SESSION_DISCOVERY_GOAL_MAX_CHARS, cz as SESSION_DISCOVERY_MESSAGE_MAX_CHARS, cA as SESSION_EVENT_DB_PAGE_MAX_BYTES, cB as SESSION_LIST_SNAPSHOT_MAX_ACTIVE_PER_SUBJECT, cC as SESSION_LIST_SNAPSHOT_MAX_IDS, cD as SafeDatabaseErrorFacts, cE as SandboxArchiveAvailability, cF as SandboxArchiveRevision, cG as SandboxImageConflictError, cH as SandboxKind, cI as SandboxLeaseLiveness, cJ as SandboxLeaseRecoveryBlockedError, cK as SandboxLeaseSupersededError, cL as SandboxOpenPtySessionRow, cM as SandboxProviderExistence, cN as SandboxPtyProcessIdentity, cO as SandboxPtySessionRow, cP as SandboxRecord, cQ as SandboxRecoveryState, cR as SandboxRestoreStatus, cS as SandboxRetainedProcess, cT as SandboxRetainedProcessIdentity, cU as SandboxRetainedProcessPromotionFencedError, cV as SandboxRetainedProcessReconciliationClaim, cW as SandboxRetainedProcessState, cX as SandboxRigConflictError, cY as SandboxWorkspaceMutationAdmission, cZ as SandboxWorkspaceMutationFencedError, c_ as SandboxWorkspaceMutationProviderOutcome, c$ as SandboxWorkspaceReadiness, d0 as SanitizedDatabasePersistenceCause, d1 as SaveWorkspaceMemoryInput, d2 as SaveWorkspaceMemoryResult, d3 as SessionAttemptActivityRef, d4 as SessionAttemptInterruptionSettlement, d5 as SessionCodexState, d6 as SessionCommandActor, d7 as SessionCommandIdempotencyError, d8 as SessionCommandReceiptRow, d9 as SessionContextBusyError, da as SessionControlConflictError, db as SessionControlInvariantError, dc as SessionControlMutationResult, dd as SessionCreateDeniedResult, de as SessionCreateInput, df as SessionCreateResult, dg as SessionCreateSuccessResult, dh as SessionDepthPolicy, di as SessionDiscoveryControl, dj as SessionDiscoveryCursor, dk as SessionDiscoveryOrderBy, dl as SessionDiscoverySummary, dm as SessionEventPage, dn as SessionEventPersistenceError, dp as SessionEventWriteLockInput, dq as SessionEventWriteLocks, dr as SessionGoalContinuationProjection, ds as SessionIdConflictError, dt as SessionLineage, du as SessionListAccessError, dv as SessionListCursor, dw as SessionListCursorError, dx as SessionListCursorExpiredError, dy as SessionListSnapshotLimitError, dz as SessionMcpServerForRun, dA as SessionPinAccessError, dB as SessionPinVersionConflictError, dC as SessionRecordingCodec, dD as SessionRecordingMode, dE as SessionRecordingRow, dF as SessionRecordingState, dG as SessionSpawnDenial, dH as SessionSpawnDenialCode, dI as SessionSpawnDeniedDbError, dJ as SessionSystemUpdateOutboxDelivery, dK as SessionToolPolicyVersionConflictError, dL as SessionTurnAttemptOutcome, dM as SessionTurnForExecution, dN as SessionTurnRecordingSettlement, dO as SessionWorkPeek, dP as SessionWorkTrigger, dQ as SessionWorkflowWake, dR as SessionWorkflowWakeDeliveryResult, dS as SessionWorkspaceCaptureLookup, dT as SetSessionCodexPinOptions, dU as SetSessionGoalStatusEvent, dV as SettleCodexCredentialFailoverResult, dW as SettleCodexCredentialLeaseLossResult, dX as SlackBotInstallCallbackFailureReason, dY as SlackBotInstallCallbackFailureStage, dZ as SlackBotLifecycleSuccessAuditError, d_ as SlackBotPostOperation, d$ as SteerQueueCommandResult, e0 as StoreIntegrationOAuthClientInput, e1 as StoredIntegrationOAuthClient, e2 as StreamAcknowledgment, e3 as SubmitHumanPromptResult, e4 as ToolspaceCallReservation, e5 as ToolspaceTurnAttemptClaims, e6 as TurnAttemptFenceRejectReason, e7 as UpdateConnectionInput, e8 as UpdateImportBatchCountsInput, e9 as UpdateKnowledgeMemoryInput, ea as UpdateScheduledTaskInput, eb as UpdateSessionMcpApprovalPolicyResult, ec as UpdateSessionMcpServerCredentialsInput, ed as UpdateSessionMcpServerCredentialsResult, ee as UpsertCodexSubscriptionCredentialResult, ef as UserLookup, eg as VariableSetForRun, eh as WORKSPACE_MEMORY_BLOCK_EMPTY, ei as WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED, ej as WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET, ek as WorkspaceCaptureCommitResult, el as WorkspaceCaptureGcPlan, em as WorkspaceCaptureGcRow, en as WorkspaceCaptureRow, eo as WorkspaceControlLockMode, ep as WorkspaceControlMutationResult, eq as WorkspaceControlRow, er as WorkspaceEnvironmentForRun, es as WorkspaceInstructionPolicyConflictError, et as WorkspaceInstructionPolicyInvalidOperationError, eu as WorkspaceInstructionPolicyLegacyUnavailableError, ev as WorkspaceInstructionPolicyNotFoundError, ew as WorkspaceMemoryOrigin, ex as WorkspaceMemorySearchInput, ey as WorkspaceMemorySearchMode, ez as WorkspaceMemorySearchResult, eA as WorkspaceModelPolicy, eB as abandonCodexResetRedemptionBeforeProvider, eC as abandonRecordingForTurnAttempt, eD as acceptSessionApprovalDecision, eE as acceptSessionHumanInputResponse, eF as accrueWarmSeconds, eG as acknowledgeHostExportBatch, eH as acquireCodexCredentialLease, eI as acquireLease, eJ as activateRigVersion, eK as activateWorkspaceInstructionPolicyRevision, eL as addSessionSystemUpdate, eM as addSessionSystemUpdateWithSourceMutation, eN as admitToolspaceTurnAttempt, eO as adoptCodexResetRedemptionAttempt, eP as advanceWorkspaceGeneration, eQ as advanceWorkspaceGenerationForDirectRequest, eR as advanceWorkspaceGenerationForRetainedProcess, eS as allAccountPermissions, eT as allWorkspacePermissions, eU as appendSessionEventToSandboxGroup, eV as appendSessionEvents, eW as appendSessionEventsAndUpdateSession, eX as appendSessionEventsForTurnAttempt, eY as appendSessionEventsWithLockedSessionUpdate, eZ as appendSessionHistoryItems, e_ as applyContextCompaction, e$ as applyCreditDebitUpToBalance, f0 as applyCreditLedgerEntry, f1 as applySessionTurnSettlement, f2 as approveDeviceEnrollmentRequest, f3 as areGitHubRepositoriesAllowedForWorkspace, f4 as armCodexCapacityWait, f5 as assertAgentCommandAuthorityInTransaction, f6 as assertRuntimeDatabasePosture, f7 as autoResumeSessionBranchInTransaction, f8 as beginRigChangeVerificationAttempt, f9 as beginSandboxRematerialization, fa as bindAuthorizedGitHubInstallationRepositories, fb as bindGitHubInstallationRepositories, fc as bootstrapWorkspace, fd as buildChildCompletionDigest, fe as buildCodexTokenResolver, ff as buildConnectionTokenResolver, fg as buildHostConnectionTokenResolver, fh as canonicalSessionCommandHash, fi as claimCodexResetRedemption, fj as claimExpiredFileUploadCleanup, fk as claimFileUploadCleanup, fl as claimHostExportBatch, fm as claimPendingSessionSystemUpdateOutbox, fn as claimPendingSessionWorkflowWakes, fo as claimSessionWorkForAttempt, fp as claimSlackBotPostOperation, fq as claimTerminalRetainedProcesses, fr as clearDurablePendingSessionToolCalls, fs as clearEnrollmentWentOffline, ft as clearPendingSessionToolspaceCall, fu as clearSessionContext, fv as clearSessionGoal, fw as clearedContextMarkerItem, fx as closePtySession, fy as closeSessionTurnAttemptInTransaction, fz as codexCapacityRefreshBackoffMs, fA as commitWarmingToWarm, fB as completeCodexResetRedemption, fC as completeExpiredFileUploadCleanup, fD as completeFileUpload, fE as completeFileUploadCleanup, fF as completeSlackBotPostOperation, fG as computeWorkspaceCaptureGcPlan, fH as confirmDrainCold, fI as consumeDeviceEnrollmentRequest, fJ as consumeIntegrationOAuthStateNonce, fK as consumeNewSessionDraftInTransaction, fL as correctWorkspaceMemory, fM as countActiveApiKeysForWorkspace, fN as countActiveRetainedProcessesByOwnerState, fO as countActiveSessionHistoryItems, fP as countActiveSessionsForWorkspace, fQ as countActiveSessionsUsingEnvironment, fR as countActiveSessionsUsingVariableSet, fS as countConsecutiveReactiveRotations, fT as countExpiredDrainingSandboxLeases, fU as countQueuedTurns, fV as countRigs, fW as countSandboxLeasesByLiveness, fX as countScheduledTasksForWorkspace, fY as countScheduledTasksUsingEnvironment, fZ as countScheduledTasksUsingVariableSet, f_ as countSessionHistoryItems, f$ as countSessionsUsingRig, g0 as countVariableSets, g1 as countWorkspaceEnvironments, g2 as countWorkspacesForAccount, g3 as createApiKey, g4 as createConnection, g5 as createConnectionWithSlackBotSuccessAudit, g6 as createDb, g7 as createDeviceEnrollmentRequest, g8 as createEnrollment, g9 as createFileUpload, ga as createImportBatch, gb as createKnowledgeMemory, gc as createRig, gd as createRigChange, ge as createRigVersion, gf as createRigVersionForChangePromotion, gg as createSandbox, gh as createScheduledTask, gi as createScheduledTaskRun, gj as createSession, gk as createSessionGoal, gl as createSessionMcpServers, gm as createSessionWithIdempotencyKey, gn as createSessionWithIdempotencyKeyResult, go as createSocialConnection, gp as createSocialPost, gq as createVariableSet, gr as createWorkspace, gs as createWorkspaceEnvironment, gt as createWorkspaceInstructionPolicyDraft, gu as databaseFailureCode, gv as deadLetterHostExportHead, gw as decodeSessionListCursor, gx as decryptEnvironmentValue, gx as decryptVariableSetValue, gy as decryptedCapabilityHeaders, gz as deferRetainedProcessReconciliation, gA as deleteGitHubInstallationBinding, gB as deleteRecording, gC as deleteRig, gD as deleteRigIfNoActiveSessions, gE as deleteScheduledTask, gF as deleteSessionQueueItemInTransaction, gG as deleteVariableSet, gH as deleteVariableSetVariable, gI as deleteWorkspace, gJ as deleteWorkspaceCaptureRows, gK as deleteWorkspaceEnvironment, gL as deleteWorkspaceEnvironmentVariable, gM as deleteWorkspacePack, gN as denyDeviceEnrollmentRequest, gO as diffWorkspaceInstructionPolicyContent, gP as diffWorkspaceInstructionPolicyRevisions, gQ as disableCapabilityInstallation, gR as disableHostExportConsumer, gS as disconnectAllCodexAccounts, gT as disconnectCodexAccount, gU as editQueuedTurnInTransaction, gV as enableCapabilityInstallation, gW as enablePackInstallation, gX as encodeSessionListCursor, gY as encryptEnvironmentValue, gY as encryptVariableSetValue, gZ as enqueueSessionTurn, g_ as enqueueSessionWorkflowWake, g$ as enqueueSessionWorkflowWakeIfRunnable, h0 as enqueueSessionWorkflowWakeInTransaction, h1 as ensureCodexRotationSettings, h2 as ensureManagedAccessForUser, h3 as estimateMemoryTokens, h4 as evaluateGoalContinuation, h5 as evaluateRuntimeDatabasePosture, h6 as evaluateSessionControl, h7 as evaluateSessionControls, h8 as evaluateSessionDiscoveryControls, h9 as expireSessionHumanInputRequest, ha as failHostExportBatch, hb as failSandboxRematerialization, hc as failWarmingToCold, hd as fenceCodexResetRedemptionSend, he as fetchCodexRateLimitResetCreditsForAccount, hf as fetchCodexUsageForAccount, hg as finalizeEnrollmentByToken, hh as findActiveApiKeyByHash, hi as forceDrainOverLimitViewerOnlyBoxes, hj as frozenInitiatorForCommandActor, hk as getActiveSessionHistoryItems, hl as getActiveSessionTurnForExecution, hm as getAnySessionInGroup, hn as getBillingBalance, ho as getBillingCustomer, hp as getCapabilityCatalogItem, hq as getCapabilityInstallation, hr as getCodexCapacityWaitForSession, hs as getCodexCredentialStatus, ht as getCodexResetRedemptionAttempt, hu as getCodexRotationSettings, hv as getComposerDraftInTransaction, hw as getConnectionMetadata, hx as getDeviceEnrollmentRequestByDeviceCode, hy as getEnrollment, hz as getFile, hA as getFileUpload, hB as getHostExportConsumerStatus, hC as getHumanInputResumeForEvent, hD as getKnowledgeMemory, hE as getLatestRunState, hF as getLatestStartedSessionTurn, hG as getManagedAccount, hH as getManagedUserByEmail, hI as getMaterializedSandboxFileResources, hJ as getNestedAgentDepthDeploymentPolicy, hK as getNewSessionDraftInTransaction, hL as getOpenPtySession, hM as getOrCreateSessionSystemUpdateOutbox, hN as getPackInstallation, hO as getPendingDeviceEnrollmentRequestByUserCode, hP as getPendingDeviceEnrollmentRequestByUserCodeGlobal, hQ as getRecording, hR as getRetainedFileArtifact, hS as getRetainedProcess, hT as getRig, hU as getRigByName, hV as getRigChange, hW as getRigName, hX as getRigVersion, hY as getRigVersionById, hZ as getSandbox, h_ as getSandboxSessionEnvelope, h$ as getScheduledTask, i0 as getSession, i1 as getSessionAttemptActivityRef, i2 as getSessionByCreateIdempotencyKey, i3 as getSessionCodexState, i4 as getSessionEvent, i5 as getSessionEventByClientEventId, i6 as getSessionForSubject, i7 as getSessionGoal, i8 as getSessionGoalWithContinuation, i9 as getSessionHistoryItems, ia as getSessionHumanInputRequest, ib as getSessionLineage, ic as getSessionQueueSnapshot, id as getSessionRootId, ie as getSessionSpawnDenial, ig as getSessionSpawnDenialByIdempotencyKey, ih as getSessionSystemUpdateOutboxByDedupeKey, ii as getSessionTurn, ij as getSessionTurnForAttempt, ik as getSlackBotPostOperation, il as getSocialConnection, im as getStoredCapabilityHeaderCiphertext, io as getStreamAcknowledgment, ip as getVariableSet, iq as getVariableSetByName, ir as getVariableSetValuesForRun, is as getWorkspace, it as getWorkspaceControlEvent, iu as getWorkspaceDefaultRigId, iv as getWorkspaceEnvironment, iw as getWorkspaceEnvironmentByName, ix as getWorkspaceEnvironmentValuesForRun, iy as getWorkspaceGrant, iz as getWorkspaceInstructionPolicyRevision, iA as getWorkspaceModelPolicy, iB as getWorkspacePack, iC as grantWorkspaceAccess, iD as hasAuditableGitHubInstallationAuthority, iE as hasCreditLedgerEntry, iF as hashMemoryText, iG as heartbeatCodexCredentialLease, iH as heartbeatCodexCredentialLeaseUntil, iI as heartbeatLeaseHolder, iJ as importLegacyWorkspaceInstructionPolicyDraft, iK as ingestMachineMetricsSample, iL as initializeSessionStartAtomically, iM as insertFailedWorkspaceCapture, iN as insertMachineMetricsSeries, iO as insertPtySession, iP as insertRecording, iQ as insertWorkspaceCapture, iR as inspectRuntimeDatabasePosture, iS as installOrReadTurnExecutionPolicyForAttempt, iT as interruptedToolCallResult, iU as isCodexBilledTurn, iV as isDatabasePersistenceFailure, iW as isMemoryTextTooLong, iX as isRetryablePersistenceSqlState, iY as isSessionCompactionRequested, iZ as isSessionEventPersistenceError, i_ as isStripeWebhookProcessed, i$ as latestWorkspaceCapture, j0 as listApiKeys, j1 as listCapabilityCatalogItems, j2 as listCapabilityInstallations, j3 as listCodexAccountStatuses, j4 as listCodexResetRedemptionRecoveries, j5 as listConnectionsMetadata, j6 as listCreditBalancesByAccount, j7 as listDistinctRigVersionIdsInGroup, j8 as listDistinctVariableSetIdsInGroup, j9 as listEnabledMcpCapabilityServers, ja as listEnrollments, jb as listGitHubInstallationAccessForWorkspace, jc as listGitHubInstallationIdsForWorkspace, jd as listGitHubInstallationsForWorkspace, je as listKnowledgeMemories, jf as listLiveModalSandboxLeaseAttributions, jg as listMeterableWarmLeases, jh as listOpenPtySessions, ji as listOutstandingSessionSystemUpdates, jj as listPackInstallations, jk as listPendingCodexCapacityWakeTargets, jl as listPendingSessionTurns, jm as listRecordings, jn as listRegistryCatalogSurfaceKeys, jo as listRigChangeMonitoringSummaries, jp as listRigChanges, jq as listRigVersionMonitoringSummaries, jr as listRigVersions, js as listRigs, jt as listSandboxes, ju as listScheduledTaskRuns, jv as listScheduledTasks, jw as listSessionDiscoverySummaries, jx as listSessionEventPage, jy as listSessionEvents, jz as listSessionHumanInputRequests, jA as listSessionIdsInGroup, jB as listSessionMcpServerMetadata, jC as listSessionMcpServersForChildInheritance, jD as listSessionMcpServersForRun, jE as listSessionSpawnDenials, jF as listSessionSystemUpdatesForTurn, jG as listSessionTurns, jH as listSessions, jI as listSessionsForSubject, jJ as listSocialConnections, jK as listSocialPosts, jL as listUsageEvents, jM as listVariableSets, jN as listWorkspaceControlEvents, jO as listWorkspaceEnvironments, jP as listWorkspaceInstructionPolicyRevisions, jQ as listWorkspaceMembers, jR as listWorkspacePacks, jS as listWorkspacesForSubject, jT as loadCodexCredentialForRun, jU as loadConnectionCredentialForBroker, jV as loadIntegrationOAuthClient, jW as loadVariableSetForRun, jX as loadWorkspaceEnvironmentForRun, jY as lockSessionEventWriteRows, jZ as lockWorkspaceInferenceControl, j_ as markFileUploadFailed, j$ as markSandboxFileResourcesMaterialized, k0 as markSandboxProviderReady, k1 as markSandboxRestoreVerifying, k2 as markScheduledTaskRunFailedIfQueued, k3 as markSessionAttemptQuiesced, k4 as markSessionSystemUpdateOutboxDeliveredInTransaction, k5 as markSessionSystemUpdateOutboxFailed, k6 as markSessionWorkflowWakeDelivered, k7 as markSessionWorkflowWakeFailed, k8 as markStaleRegistryCatalogItems, k9 as markStripeWebhookProcessed, ka as markWarmLeaseInstanceLost, kb as materializeGoalContinuation, kc as mcpServerIdForCapability, kd as moveQueuedTurnInTransaction, ke as mutateSessionControlInTransaction, kf as mutateWorkspaceControlInTransaction, kg as nestedPostgresSqlState, kh as newSessionDraftToolsProvided, ki as nextSessionHistoryPosition, kj as normalizeBearerScheme, kk as normalizeMemoryText, kl as orphanedResultRowIndicesForRepair, km as peekSessionWork, kn as persistDrainSnapshot, ko as persistWarmSnapshot, kp as planWorkspaceCaptureGc, kq as projectEffectiveControlForRelatedAccess, kr as projectSessionForRelatedAccess, provisionRoles, ks as pruneHostExportOutbox, kt as publicNewSessionDraftOptions, ku as quarantineCodexCredentialForLease, kv as reArmDrainingLease, kw as readActiveSandbox, kx as readLease, ky as readMachineMetricsLatest, kz as readMachineMetricsLatestForWorkspace, kA as readMachineMetricsSeries, kB as readWorkspaceArchiveCapturePreflight, kC as reapExpiredSessionListSnapshots, kD as reapStaleLeaseHolders, kE as reapStaleLeaseHoldersGlobal, kF as reconcileCodexCapacityWait, kG as reconcileColdLostLeaseInstanceBlockers, kH as reconcileSessionAttemptQuiescence, kI as recordAuditEvent, kJ as recordCodexAccountConnectors, kK as recordCodexAccountUsage, kL as recordCodexAccountUsageWithWakeTargets, kM as recordCodexTokenRefresh, kN as recordConnectionTokenRefresh, kO as recordConnectionUsed, kP as recordLeaseDataPlaneUrl, kQ as recordLeaseTerminalDataPlaneUrl, kR as recordPendingSessionToolCallResult, kS as recordRetainedProcessReconciliationProof, kT as recordSessionActiveCodexCredential, kU as recordSkippedContextCompaction, kV as recordSlackBotInstallCallbackFailure, kW as recordStreamAcknowledgment, kX as recordStripeWebhookEvent, kY as recordUsageEvent, kZ as recordWarmingSandboxCreated, k_ as recoverSessionDispatch, k$ as refreshOAuthConnectionCredential, l0 as registerDbBinding, l1 as registerHostExportConsumer, l2 as registerInternalUpdateWakeInTransaction, l3 as registerPendingSessionToolCall, l4 as registerSessionTurnAttemptClaim, l5 as registerSessionWorkflowWakeInTransaction, l6 as registerWorkspacePack, l7 as releaseCodexCredentialLease, l8 as releaseCodexResetRedemptionClaim, l9 as releaseLeaseHolder, la as releaseSlackBotPostOperationClaim, lb as removeWorkspaceMember, lc as renameCodexAccount, ld as renderWorkspaceMemoryBlock, le as replaceIntegrationOAuthClient, lf as requestSessionCompaction, lg as requestSessionTurnRecovery, lh as requireFile, li as requireScheduledTask, lj as requireSession, lk as requireSocialConnection, ll as requireWorkspace, lm as reserveSessionCommandReceipt, ln as reserveToolspaceCallForAttempt, lo as resolveWorkspaceMemoryBlock, lp as resumeHostExportConsumer, lq as retainWorkspaceMutationProcess, lr as retainedProcessReconciliationProof, ls as retainedProcessSettlementIdentity, lt as retireHostExportConsumer, lu as revokeApiKey, lv as revokeConnection, lw as revokeConnectionWithSlackBotSuccessAudit, lx as revokeEnrollment, ly as revokeViewer, lz as rewindHostExportConsumer, lA as rlsContextForWorkspace, lB as rlsStrategyFor, lC as rollbackWorkspaceInstructionPolicyRevision, lD as rotateWorkspaceArchives, lE as runIdempotentPersistenceTransaction, lF as runtimeDatabaseReadyCheck, lG as safeDatabaseErrorFacts, lH as sanitizeEventPayload, lI as sanitizeEventString, lJ as sanitizeMemoryText, lK as sanitizeModelPayload, lL as saveComposerDraftInTransaction, lM as saveNewSessionDraftInTransaction, lN as saveRunState, lO as saveWorkspaceMemory, lP as searchWorkspaceMemories, lQ as seedNewSessionDraftInTransaction, lR as sendAgentMessageInTransaction, lS as serializeEffectiveSessionControl, lT as sessionAuthorizationScopeFilter, lU as sessionLatestWorkspaceCapture, lV as sessionSubject, lW as sessionTreeStatsForSessions, lX as sessionsWithActiveOpOnEnrollment, lY as setActiveCodexCredential, lZ as setActiveSandbox, l_ as setCodexCredentialExhausted, l$ as setCodexCredentialExhaustedWithWakeTargets, m0 as setCodexCredentialStatus, m1 as setCodexCredentialStatusById, m2 as setConnectionStatus, m3 as setEnrollmentDisplayState, m4 as setEnrollmentOpStreamState, m5 as setEnrollmentWentOffline, m6 as setInitialActiveCodexCredential, m7 as setRlsContext, m8 as setSessionCodexPin, m9 as setSessionGoalLastContinuationTurn, ma as setSessionGoalStatus, mb as setSessionGoalStatusWithEvent, mc as setSessionLastInputTokensForTurnAttempt, md as setSessionPin, me as setSubjectRlsContext, mf as setTemporalWorkflowId, mg as setVariableSetVariable, mh as setWorkspaceDefaultRig, mi as setWorkspaceEnvironmentVariable, mj as settleCodexCredentialFailover, mk as settleCodexCredentialLeaseLoss, ml as settleRetainedProcess, mm as settleScheduledTaskRunInTransaction, mn as settleSessionAttemptInterruptions, mo as settleSessionIdleWithParentOutbox, mp as shortMemoryId, mq as steerAgentSessionInTransaction, mr as steerQueuedTurnInTransaction, ms as storeIntegrationOAuthClient, mt as submitHumanPromptInTransaction, mu as sumUsageQuantity, mv as supersedeSessionCurrentDirectionInTransaction, mw as touchEnrollmentLastSeen, mx as touchLeaseHolder, my as updateCodexAllocatorEligibility, mz as updateCodexRotationSettings, mA as updateConnection, mB as updateConnectionWithSlackBotSuccessAudit, mC as updateImportBatchCounts, mD as updateKnowledgeMemory, mE as updatePackInstallationStatus, mF as updatePtySessionActivity, mG as updateRecording, mH as updateRig, mI as updateRigChangeStatus, mJ as updateScheduledTask, mK as updateScheduledTaskRun, mL as updateSessionCommandReceiptResult, mM as updateSessionGoal, mN as updateSessionGoalWithEvent, mO as updateSessionMcpApprovalPolicy, mP as updateSessionMcpServerCredentials, mQ as updateSessionTitle, mR as updateVariableSet, mS as updateWorkspace, mT as updateWorkspaceEnvironment, mU as updateWorkspaceSettings, mV as upsertBillingCustomer, mW as upsertCapabilityCatalogItem, mX as upsertCodexSubscriptionCredential, mY as upsertGitHubInstallation, mZ as upsertMachineMetricsLatest, m_ as upsertRegistryCapabilityCatalogItem, m$ as upsertSandboxSessionEnvelope, n0 as upsertSessionGoal, n1 as upsertSessionGoalWithEvent, n2 as upsertWorkspaceModelPolicy, n3 as validateHumanInputResponse, n4 as verifyDirectWorkspaceMutationSettlement, n5 as verifyRetainedProcessMutationSettlement, n6 as verifyWorkspaceMutationSettlement, n7 as withAccountRls, n8 as withCodexCapacityMutation, n9 as withCodexCredentialRefreshLock, na as withCodexTokenDeadline, nb as withRlsContext, nc as withWorkspaceRls, nd as withWorkspaceSubjectRls, ne as withWorkspaceUsageLock, nf as workspaceCaptureAtRevision, ng as workspaceCodexSubscriptionActive } from './provision-roles.js';
 import 'drizzle-orm/pg-core';
 import 'postgres';
-import './schema-FoPub9yt.js';
+import './schema-DhkRhcuQ.js';
 export { migrate, runMigrations } from './migrate.js';
 export { isPrivateAddress } from '@opengeni/network';

package/dist/index.js

@@ -76,7 +76,7 @@ import {
   workspaceVariableSetVariables,
   workspaceVariableSets,
   workspaces
-} from "./chunk-PQKVUWQW.js";
+} from "./chunk-DW24CKCT.js";
 import {
   migrate,
   runMigrations
@@ -100,7 +100,10 @@ import {
 import "./chunk-PZ5AY32C.js";
 
 // src/index.ts
-import { SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS } from "@opengeni/contracts";
+import {
+  DEFAULT_FIRST_PARTY_MCP_TOOLS,
+  SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS
+} from "@opengeni/contracts";
 import {
   approvalIdentifier,
   boundWorkspaceControlEvent as boundWorkspaceControlEvent2,
@@ -2760,7 +2763,6 @@ import { sql as sql5 } from "drizzle-orm";
 import {
   metadataWithTurnExecutionPolicyV1,
   mergeResourceRefs,
-  mergeToolRefs,
   turnExecutionPolicyAuditMetadata
 } from "@opengeni/contracts";
 import { and as and5, asc as asc2, eq as eq5, inArray as inArray2, sql as sql3 } from "drizzle-orm";
@@ -2958,7 +2960,7 @@ async function normalizeQueuePositions(db, workspaceId, sessionId, orderedIds) {
   }).where(and5(eq5(sessions.workspaceId, workspaceId), eq5(sessions.id, sessionId)));
 }
 function draftIsNonEmpty(draft) {
-  return draft.text.length > 0 || draft.resources.length > 0 || draft.tools.length > 0 || draft.toolsProvided || draft.sourceTurnId !== null;
+  return draft.text.length > 0 || draft.resources.length > 0 || draft.sourceTurnId !== null;
 }
 async function getComposerDraftInTransaction(db, input) {
   const query = db.select().from(composerDrafts).where(
@@ -2998,8 +3000,8 @@ async function saveComposerDraftInTransaction(db, input) {
     revision,
     text: input.text,
     resources: input.resources,
-    tools: input.tools,
-    toolsProvided: input.toolsProvided,
+    tools: [],
+    toolsProvided: false,
     model: input.model,
     reasoningEffort: input.reasoningEffort,
     // A queue edit is still the same accepted work item. Preserve its frozen
@@ -3298,8 +3300,8 @@ async function editQueuedTurnInTransaction(db, input) {
     revision: nextDraftRevision,
     text: turn.prompt,
     resources: turn.resources,
-    tools: turn.tools,
-    toolsProvided: turn.toolsProvided,
+    tools: [],
+    toolsProvided: false,
     model: turn.model,
     reasoningEffort: turn.reasoningEffort,
     sourceTurnId: turn.id,
@@ -3565,8 +3567,6 @@ async function submitHumanPromptInTransaction(db, input) {
     text: input.text,
     turnInstructions: input.turnInstructions ?? null,
     resources: input.resources,
-    tools: input.tools,
-    toolsProvided: input.toolsProvided === true,
     model: input.model ?? null,
     reasoningEffort: input.reasoningEffort ?? null,
     source: input.source,
@@ -3649,15 +3649,11 @@ async function submitHumanPromptInTransaction(db, input) {
     if (draft && canonicalSessionCommandHash({
       text: draft.text,
       resources: draft.resources,
-      tools: draft.tools,
-      toolsProvided: draft.toolsProvided,
       model: draft.model,
       reasoningEffort: draft.reasoningEffort
     }) !== canonicalSessionCommandHash({
       text: input.text,
       resources: input.resources,
-      tools: input.tools,
-      toolsProvided: input.toolsProvided === true,
       model: input.model ?? session.model,
       reasoningEffort: input.reasoningEffort ?? input.reasoningEffortFallback
     })) {
@@ -3751,7 +3747,6 @@ async function submitHumanPromptInTransaction(db, input) {
       payload: sanitizeEventPayload({
         text: input.text,
         ...input.resources.length ? { resources: input.resources } : {},
-        ...input.toolsProvided === true ? { tools: input.tools } : input.tools.length ? { tools: input.tools } : {},
         ...input.model ? { model: input.model } : {},
         ...input.reasoningEffort ? { reasoningEffort: input.reasoningEffort } : {},
         delivery: input.delivery,
@@ -3774,8 +3769,8 @@ async function submitHumanPromptInTransaction(db, input) {
     prompt: input.text,
     turnInstructions: editedSourceTurnInstructions !== void 0 ? editedSourceTurnInstructions : input.turnInstructions ?? null,
     resources: input.resources,
-    tools: input.tools,
-    toolsProvided: input.toolsProvided === true,
+    tools: [],
+    toolsProvided: false,
     model: input.model ?? session.model,
     reasoningEffort: input.reasoningEffort ?? input.reasoningEffortFallback,
     sandboxBackend: session.sandboxBackend,
@@ -3895,7 +3890,7 @@ async function submitHumanPromptInTransaction(db, input) {
   const queueVersion = session.queueVersion + 1;
   await db.update(sessions).set({
     resources: mergeResourceRefs(session.resources, input.resources),
-    tools: sessionToolPolicyIsFixed(session.toolPolicy) ? session.tools : mergeToolRefs(session.tools, input.tools),
+    tools: session.tools,
     activeTurnId: input.delivery === "steer" ? liveCurrentTurnId : session.activeTurnId,
     status: nextStatus,
     queueVersion,
@@ -3959,11 +3954,6 @@ async function submitHumanPromptInTransaction(db, input) {
     replay: false
   };
 }
-function sessionToolPolicyIsFixed(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const mode = value.mode;
-  return mode === "workspace_default" || mode === "explicit" || mode === "inherited";
-}
 async function sendAgentMessageInTransaction(db, input) {
   const workspaceControl = await lockWorkspaceInferenceControl(db, input.workspaceId, "share");
   await lockSessionEventWriteRows(db, {
@@ -13745,7 +13735,10 @@ async function createSessionInTransaction(tx, input, id) {
     resources: input.resources,
     skills: input.skills ?? [],
     tools: input.tools ?? [],
-    toolPolicy: input.toolPolicy ?? null,
+    toolPolicy: input.toolPolicy ?? {
+      mode: "explicit",
+      inheritedFromSessionId: input.parentSessionId ?? null
+    },
     metadata: input.metadata,
     ...creatorColumns(frozenCreator),
     model: input.model,
@@ -13756,7 +13749,7 @@ async function createSessionInTransaction(tx, input, id) {
     rigId: input.rigId ?? null,
     rigVersionId: input.rigVersionId ?? null,
     firstPartyMcpPermissions: input.firstPartyMcpPermissions ?? null,
-    firstPartyMcpTools: input.firstPartyMcpTools ?? null,
+    firstPartyMcpTools: input.firstPartyMcpTools ?? [...DEFAULT_FIRST_PARTY_MCP_TOOLS],
     instructions: input.instructions ?? null,
     parentSessionId: input.parentSessionId ?? null,
     createIdempotencyKey,
@@ -20256,6 +20249,56 @@ async function latestWorkspaceCapture(db, workspaceId, sessionId) {
     return rows.length ? mapWorkspaceCaptureRow(rows[0]) : null;
   });
 }
+async function sessionLatestWorkspaceCapture(db, workspaceId, sessionId) {
+  return await withWorkspaceRls(db, workspaceId, async (scopedDb) => {
+    const rows = await scopedDb.execute(sql4`
+      select
+        sessions.id as found_session_id,
+        capture.id as capture_id,
+        capture.session_id as capture_session_id,
+        capture.turn_id as capture_turn_id,
+        capture.revision as capture_revision,
+        capture.lease_epoch as capture_lease_epoch,
+        capture.state as capture_state,
+        capture.manifest_key as capture_manifest_key,
+        capture.tree_index_key as capture_tree_index_key,
+        capture.blob_keys as capture_blob_keys,
+        capture.size_bytes as capture_size_bytes,
+        capture.stats as capture_stats,
+        capture.captured_at as capture_captured_at
+      from sessions
+      left join lateral (
+        select ${WORKSPACE_CAPTURE_COLUMNS}
+        from workspace_captures
+        where workspace_captures.session_id = sessions.id
+        order by workspace_captures.revision desc
+        limit 1
+      ) capture on true
+      where sessions.workspace_id = ${workspaceId} and sessions.id = ${sessionId}
+      limit 1
+    `);
+    const row = rows[0];
+    if (!row) return { sessionExists: false, capture: null };
+    if (!row.capture_id) return { sessionExists: true, capture: null };
+    return {
+      sessionExists: true,
+      capture: mapWorkspaceCaptureRow({
+        id: row.capture_id,
+        session_id: row.capture_session_id,
+        turn_id: row.capture_turn_id,
+        revision: row.capture_revision,
+        lease_epoch: row.capture_lease_epoch,
+        state: row.capture_state,
+        manifest_key: row.capture_manifest_key,
+        tree_index_key: row.capture_tree_index_key,
+        blob_keys: row.capture_blob_keys,
+        size_bytes: row.capture_size_bytes,
+        stats: row.capture_stats,
+        captured_at: row.capture_captured_at
+      })
+    };
+  });
+}
 async function workspaceCaptureAtRevision(db, workspaceId, sessionId, revision) {
   return await withWorkspaceRls(db, workspaceId, async (scopedDb) => {
     const rows = await scopedDb.execute(sql4`
@@ -27034,6 +27077,7 @@ async function appendSessionEventsWithLockedSessionUpdate(db, workspaceId, sessi
         lastSequence: sequence,
         ...update.resources !== void 0 ? { resources: update.resources } : {},
         ...update.tools !== void 0 ? { tools: update.tools } : {},
+        ...update.firstPartyMcpTools !== void 0 ? { firstPartyMcpTools: update.firstPartyMcpTools } : {},
         ...update.toolPolicy !== void 0 ? { toolPolicy: update.toolPolicy } : {},
         ...update.toolPolicyVersion !== void 0 ? { toolPolicyVersion: update.toolPolicyVersion } : {},
         ...update.model !== void 0 ? { model: update.model } : {},
@@ -27093,11 +27137,8 @@ function mapSession(row, effectiveControl, mcpServers = [], pin = mapSessionPin(
     resources: row.resources,
     skills: row.skills ?? [],
     tools: row.tools,
-    toolPolicy: row.toolPolicy ?? {
-      mode: "legacy",
-      inheritedFromSessionId: null
-    },
-    toolPolicyVersion: Number(row.toolPolicyVersion ?? 1),
+    toolPolicy: row.toolPolicy,
+    toolPolicyVersion: Number(row.toolPolicyVersion),
     metadata: row.metadata,
     createdBy: initiatorFromStorage(
       row.createdByKind,
@@ -27121,7 +27162,7 @@ function mapSession(row, effectiveControl, mcpServers = [], pin = mapSessionPin(
     rigId: row.rigId ?? null,
     rigVersionId: row.rigVersionId ?? null,
     firstPartyMcpPermissions: row.firstPartyMcpPermissions ?? null,
-    firstPartyMcpTools: row.firstPartyMcpTools ?? null,
+    firstPartyMcpTools: row.firstPartyMcpTools,
     mcpServers,
     parentSessionId: row.parentSessionId ?? null,
     rootSessionId: row.rootSessionId,
@@ -28317,6 +28358,7 @@ export {
   sendAgentMessageInTransaction,
   serializeEffectiveSessionControl,
   sessionAuthorizationScopeFilter,
+  sessionLatestWorkspaceCapture,
   sessionSubject,
   sessionTreeStatsForSessions,
   sessionsWithActiveOpOnEnrollment,