@opengeni/db 0.16.2 → 0.18.1

package/dist/{chunk-HZD7KVAR.js → chunk-YKWJ7QJ2.js}

@@ -94,10 +94,17 @@ __export(schema_exports, {
   sessions: () => sessions,
   slackBotDeleteOperations: () => slackBotDeleteOperations,
   slackBotPostOperations: () => slackBotPostOperations,
+  slackBotUserLinks: () => slackBotUserLinks,
+  slackInteractionInbox: () => slackInteractionInbox,
+  slackInteractionProgressDeliveries: () => slackInteractionProgressDeliveries,
+  slackInteractions: () => slackInteractions,
   socialConnections: () => socialConnections,
   socialPosts: () => socialPosts,
   stripeWebhookEvents: () => stripeWebhookEvents,
   usageEvents: () => usageEvents,
+  workspaceArtifactEvents: () => workspaceArtifactEvents,
+  workspaceArtifactVersions: () => workspaceArtifactVersions,
+  workspaceArtifacts: () => workspaceArtifacts,
   workspaceCaptures: () => workspaceCaptures,
   workspaceControlEvents: () => workspaceControlEvents,
   workspaceInferenceControls: () => workspaceInferenceControls,
@@ -492,6 +499,152 @@ var workspaces = pgTable3(
     )
   })
 );
+var workspaceArtifacts = pgTable3(
+  "workspace_artifacts",
+  {
+    id: uuid3("id").primaryKey().defaultRandom(),
+    accountId: uuid3("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid3("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    slug: text3("slug").notNull(),
+    title: text3("title").notNull(),
+    description: text3("description"),
+    status: text3("status").$type().notNull().default("active"),
+    // The FK to workspace_artifact_versions is installed by migration after
+    // that table exists. Keeping this pointer here makes reads inexpensive.
+    currentVersionId: uuid3("current_version_id"),
+    createdBySubjectId: text3("created_by_subject_id").notNull(),
+    createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp3("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "workspace_artifacts_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("cascade"),
+    workspaceSlug: uniqueIndex3("workspace_artifacts_workspace_slug_uq").on(
+      table.workspaceId,
+      table.slug
+    ),
+    workspaceId: uniqueIndex3("workspace_artifacts_workspace_id_uq").on(table.workspaceId, table.id),
+    list: index3("workspace_artifacts_list_idx").on(table.workspaceId, table.updatedAt)
+  })
+);
+var workspaceArtifactVersions = pgTable3(
+  "workspace_artifact_versions",
+  {
+    id: uuid3("id").primaryKey().defaultRandom(),
+    accountId: uuid3("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid3("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    artifactId: uuid3("artifact_id").notNull(),
+    revision: integer2("revision").notNull(),
+    contentKey: text3("content_key").notNull(),
+    contentType: text3("content_type").$type().notNull().default("text/html"),
+    contentSha256: text3("content_sha256").notNull(),
+    sizeBytes: integer2("size_bytes").notNull(),
+    operationKey: text3("operation_key").notNull(),
+    sourceSessionId: uuid3("source_session_id"),
+    sourceTurnId: uuid3("source_turn_id"),
+    sourceAttemptId: uuid3("source_attempt_id"),
+    sourceExecutionGeneration: integer2("source_execution_generation"),
+    createdBySubjectId: text3("created_by_subject_id").notNull(),
+    createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "workspace_artifact_versions_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("cascade"),
+    artifact: foreignKey({
+      name: "workspace_artifact_versions_artifact_fk",
+      columns: [table.workspaceId, table.artifactId],
+      foreignColumns: [workspaceArtifacts.workspaceId, workspaceArtifacts.id]
+    }).onDelete("cascade"),
+    workspaceId: uniqueIndex3("workspace_artifact_versions_workspace_id_uq").on(
+      table.workspaceId,
+      table.id
+    ),
+    revision: uniqueIndex3("workspace_artifact_versions_revision_uq").on(
+      table.workspaceId,
+      table.artifactId,
+      table.revision
+    ),
+    operation: uniqueIndex3("workspace_artifact_versions_operation_uq").on(
+      table.workspaceId,
+      table.operationKey
+    ),
+    provenance: check3(
+      "workspace_artifact_versions_provenance_chk",
+      sql3`(
+        ${table.sourceSessionId} is null
+        and ${table.sourceTurnId} is null
+        and ${table.sourceAttemptId} is null
+        and ${table.sourceExecutionGeneration} is null
+      ) or (
+        ${table.sourceSessionId} is not null
+        and ${table.sourceTurnId} is not null
+        and ${table.sourceAttemptId} is not null
+        and ${table.sourceExecutionGeneration} > 0
+      )`
+    )
+  })
+);
+var workspaceArtifactEvents = pgTable3(
+  "workspace_artifact_events",
+  {
+    id: uuid3("id").primaryKey().defaultRandom(),
+    accountId: uuid3("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid3("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    artifactId: uuid3("artifact_id").notNull(),
+    type: text3("type").$type().notNull(),
+    fromVersionId: uuid3("from_version_id"),
+    toVersionId: uuid3("to_version_id").notNull(),
+    operationKey: text3("operation_key").notNull(),
+    sourceSessionId: uuid3("source_session_id"),
+    sourceTurnId: uuid3("source_turn_id"),
+    sourceAttemptId: uuid3("source_attempt_id"),
+    sourceExecutionGeneration: integer2("source_execution_generation"),
+    actorSubjectId: text3("actor_subject_id").notNull(),
+    reason: text3("reason").notNull(),
+    createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "workspace_artifact_events_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("cascade"),
+    artifact: foreignKey({
+      name: "workspace_artifact_events_artifact_fk",
+      columns: [table.workspaceId, table.artifactId],
+      foreignColumns: [workspaceArtifacts.workspaceId, workspaceArtifacts.id]
+    }).onDelete("cascade"),
+    operation: uniqueIndex3("workspace_artifact_events_operation_uq").on(
+      table.workspaceId,
+      table.operationKey
+    ),
+    list: index3("workspace_artifact_events_list_idx").on(
+      table.workspaceId,
+      table.artifactId,
+      table.createdAt
+    ),
+    provenance: check3(
+      "workspace_artifact_events_provenance_chk",
+      sql3`(
+        ${table.sourceSessionId} is null
+        and ${table.sourceTurnId} is null
+        and ${table.sourceAttemptId} is null
+        and ${table.sourceExecutionGeneration} is null
+      ) or (
+        ${table.sourceSessionId} is not null
+        and ${table.sourceTurnId} is not null
+        and ${table.sourceAttemptId} is not null
+        and ${table.sourceExecutionGeneration} > 0
+      )`
+    )
+  })
+);
 var nestedAgentDepthConfiguration = pgTable3(
   "nested_agent_depth_configuration",
   {
@@ -729,12 +882,16 @@ var codexSubscriptionCredentials = pgTable3(
     // continues to own `version`; quota/cache writes own neither counter.
     allocatorVersion: integer2("allocator_version").notNull().default(1),
     allocatorUpdatedBySubjectId: text3("allocator_updated_by_subject_id"),
-    allocatorUpdatedAt: timestamp3("allocator_updated_at", { withTimezone: true }),
+    allocatorUpdatedAt: timestamp3("allocator_updated_at", {
+      withTimezone: true
+    }),
     // Authoritative count-only summary cached from /wham/usage. Detailed rows
     // are never persisted as redemption authority; every first POST preflights
     // the provider's fresh detail endpoint.
     resetCreditAvailableCount: integer2("reset_credit_available_count"),
-    resetCreditsCheckedAt: timestamp3("reset_credits_checked_at", { withTimezone: true }),
+    resetCreditsCheckedAt: timestamp3("reset_credits_checked_at", {
+      withTimezone: true
+    }),
     // Set only by a direct Better Auth cookie connection/reconnection. Legacy,
     // configured, delegated, API-key, and agent-created rows remain view-only.
     connectedBySubjectId: text3("connected_by_subject_id"),
@@ -773,7 +930,9 @@ var codexResetRedemptionAttempts = pgTable3(
     outcome: text3("outcome"),
     claimHolderId: uuid3("claim_holder_id"),
     claimExpiresAt: timestamp3("claim_expires_at", { withTimezone: true }),
-    confirmationExpiresAt: timestamp3("confirmation_expires_at", { withTimezone: true }).notNull(),
+    confirmationExpiresAt: timestamp3("confirmation_expires_at", {
+      withTimezone: true
+    }).notNull(),
     providerStartedAt: timestamp3("provider_started_at", { withTimezone: true }),
     completedAt: timestamp3("completed_at", { withTimezone: true }),
     lastFailureKind: text3("last_failure_kind"),
@@ -868,6 +1027,162 @@ var connections = pgTable3(
     )
   })
 );
+var slackBotUserLinks = pgTable3(
+  "slack_bot_user_links",
+  {
+    id: uuid3("id").primaryKey().defaultRandom(),
+    accountId: uuid3("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid3("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    connectionId: uuid3("connection_id").notNull().references(() => connections.id, { onDelete: "cascade" }),
+    slackTeamId: text3("slack_team_id").notNull(),
+    slackUserId: text3("slack_user_id").notNull(),
+    subjectId: text3("subject_id").notNull(),
+    linkedBySubjectId: text3("linked_by_subject_id").notNull(),
+    createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp3("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    connectionUser: uniqueIndex3("slack_bot_user_links_connection_user_uq").on(
+      table.connectionId,
+      table.slackUserId
+    ),
+    workspaceSubject: index3("slack_bot_user_links_workspace_subject_idx").on(
+      table.workspaceId,
+      table.subjectId
+    )
+  })
+);
+var slackInteractionInbox = pgTable3(
+  "slack_interaction_inbox",
+  {
+    id: uuid3("id").primaryKey().defaultRandom(),
+    accountId: uuid3("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid3("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    connectionId: uuid3("connection_id").notNull().references(() => connections.id, { onDelete: "cascade" }),
+    providerEventId: text3("provider_event_id").notNull(),
+    providerMessageId: text3("provider_message_id").notNull(),
+    slackTeamId: text3("slack_team_id").notNull(),
+    slackUserId: text3("slack_user_id").notNull(),
+    slackChannelId: text3("slack_channel_id").notNull(),
+    slackMessageTs: text3("slack_message_ts").notNull(),
+    slackThreadTs: text3("slack_thread_ts"),
+    triggerKind: text3("trigger_kind").$type().notNull(),
+    text: text3("text").notNull(),
+    status: text3("status").$type().notNull().default("pending"),
+    claimHolderId: uuid3("claim_holder_id"),
+    claimExpiresAt: timestamp3("claim_expires_at", { withTimezone: true }),
+    attemptCount: integer2("attempt_count").notNull().default(0),
+    retryAt: timestamp3("retry_at", { withTimezone: true }),
+    lastErrorCode: text3("last_error_code"),
+    processedAt: timestamp3("processed_at", { withTimezone: true }),
+    createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp3("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    providerEvent: uniqueIndex3("slack_interaction_inbox_provider_event_uq").on(
+      table.connectionId,
+      table.providerEventId
+    ),
+    providerMessage: uniqueIndex3("slack_interaction_inbox_provider_message_uq").on(
+      table.connectionId,
+      table.providerMessageId
+    ),
+    pending: index3("slack_interaction_inbox_pending_idx").on(
+      table.status,
+      table.retryAt,
+      table.createdAt,
+      table.id
+    )
+  })
+);
+var slackInteractions = pgTable3(
+  "slack_interactions",
+  {
+    id: uuid3("id").primaryKey().defaultRandom(),
+    accountId: uuid3("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid3("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    connectionId: uuid3("connection_id").notNull().references(() => connections.id, { onDelete: "cascade" }),
+    slackTeamId: text3("slack_team_id").notNull(),
+    slackChannelId: text3("slack_channel_id").notNull(),
+    slackThreadTs: text3("slack_thread_ts").notNull(),
+    routeKey: text3("route_key").notNull(),
+    triggeringProviderEventId: text3("triggering_provider_event_id").notNull(),
+    owningSubjectId: text3("owning_subject_id").notNull(),
+    visibility: text3("visibility").$type().notNull(),
+    sessionReservationId: uuid3("session_reservation_id").notNull().defaultRandom(),
+    sessionId: uuid3("session_id").references(() => sessions.id, {
+      onDelete: "cascade"
+    }),
+    lastDeliveredSessionEventSequence: integer2("last_delivered_session_event_sequence").notNull().default(0),
+    deliveryClaimHolderId: uuid3("delivery_claim_holder_id"),
+    deliveryClaimExpiresAt: timestamp3("delivery_claim_expires_at", {
+      withTimezone: true
+    }),
+    deliveryAttemptCount: integer2("delivery_attempt_count").notNull().default(0),
+    deliveryRetryAt: timestamp3("delivery_retry_at", { withTimezone: true }),
+    deliveryLastErrorCode: text3("delivery_last_error_code"),
+    ackSlackMessageTs: text3("ack_slack_message_ts"),
+    progressCount: integer2("progress_count").notNull().default(0),
+    terminalDeliveryState: text3("terminal_delivery_state").$type().notNull().default("open"),
+    createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp3("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    route: uniqueIndex3("slack_interactions_route_uq").on(table.connectionId, table.routeKey),
+    identity: uniqueIndex3("slack_interactions_identity_uq").on(
+      table.accountId,
+      table.workspaceId,
+      table.id
+    ),
+    workspaceReservation: uniqueIndex3("slack_interactions_workspace_reservation_uq").on(
+      table.workspaceId,
+      table.sessionReservationId
+    ),
+    workspaceSession: uniqueIndex3("slack_interactions_workspace_session_uq").on(table.workspaceId, table.sessionId).where(sql3`${table.sessionId} is not null`),
+    delivery: index3("slack_interactions_delivery_idx").on(
+      table.terminalDeliveryState,
+      table.deliveryRetryAt,
+      table.updatedAt,
+      table.id
+    )
+  })
+);
+var slackInteractionProgressDeliveries = pgTable3(
+  "slack_interaction_progress_deliveries",
+  {
+    id: uuid3("id").primaryKey().defaultRandom(),
+    accountId: uuid3("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid3("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    interactionId: uuid3("interaction_id").notNull(),
+    sessionEventSequence: integer2("session_event_sequence").notNull(),
+    slot: integer2("slot").notNull(),
+    operationId: uuid3("operation_id").notNull(),
+    createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    interactionIdentity: foreignKey({
+      columns: [table.accountId, table.workspaceId, table.interactionId],
+      foreignColumns: [
+        slackInteractions.accountId,
+        slackInteractions.workspaceId,
+        slackInteractions.id
+      ],
+      name: "slack_interaction_progress_deliveries_interaction_fk"
+    }).onDelete("cascade"),
+    event: uniqueIndex3("slack_interaction_progress_deliveries_event_uq").on(
+      table.interactionId,
+      table.sessionEventSequence
+    ),
+    slot: uniqueIndex3("slack_interaction_progress_deliveries_slot_uq").on(
+      table.interactionId,
+      table.slot
+    ),
+    operation: uniqueIndex3("slack_interaction_progress_deliveries_operation_uq").on(
+      table.workspaceId,
+      table.operationId
+    )
+  })
+);
 var slackBotPostOperations = pgTable3(
   "slack_bot_post_operations",
   {
@@ -2306,8 +2621,12 @@ var sessionGoals = pgTable3(
     // update, timeline events, usage row, and workflow-wake outbox row.
     // Temporal signals and workflow history are replaceable nudges over these
     // monotonic revisions.
-    continuationWakeRevision: bigint3("continuation_wake_revision", { mode: "number" }).notNull().default(0),
-    continuationObservedRevision: bigint3("continuation_observed_revision", { mode: "number" }).notNull().default(0),
+    continuationWakeRevision: bigint3("continuation_wake_revision", {
+      mode: "number"
+    }).notNull().default(0),
+    continuationObservedRevision: bigint3("continuation_observed_revision", {
+      mode: "number"
+    }).notNull().default(0),
     metadata: jsonb2("metadata").$type().notNull().default({}),
     createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp3("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -2863,8 +3182,12 @@ var sandboxLeases = pgTable3(
     lastMeterAt: timestamp3("last_meter_at", { withTimezone: true }),
     lastMeterTick: integer2("last_meter_tick").notNull().default(0),
     providerCreatedAt: timestamp3("provider_created_at", { withTimezone: true }),
-    providerDeadlineAt: timestamp3("provider_deadline_at", { withTimezone: true }),
-    rotationRequestedAt: timestamp3("rotation_requested_at", { withTimezone: true }),
+    providerDeadlineAt: timestamp3("provider_deadline_at", {
+      withTimezone: true
+    }),
+    rotationRequestedAt: timestamp3("rotation_requested_at", {
+      withTimezone: true
+    }),
     rotationReason: text3("rotation_reason", {
       enum: ["provider_deadline", "operator"]
     }),
@@ -2951,7 +3274,9 @@ var sandboxLeaseHolders = pgTable3(
     accountId: uuid3("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid3("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     leaseId: uuid3("lease_id").notNull().references(() => sandboxLeases.id, { onDelete: "cascade" }),
-    kind: text3("kind", { enum: ["turn", "viewer", "direct", "process"] }).notNull(),
+    kind: text3("kind", {
+      enum: ["turn", "viewer", "direct", "process"]
+    }).notNull(),
     holderId: text3("holder_id").notNull(),
     // The attributing session within the (possibly shared) group.
     subjectId: uuid3("subject_id"),
@@ -2984,7 +3309,9 @@ var sandboxWorkspaceMutationAdmissions = pgTable3(
     leaseId: uuid3("lease_id").notNull().references(() => sandboxLeases.id, { onDelete: "cascade" }),
     sandboxGroupId: uuid3("sandbox_group_id").notNull(),
     sessionId: uuid3("session_id").notNull(),
-    actorKind: text3("actor_kind", { enum: sandboxWorkspaceMutationActorKindValues }).notNull(),
+    actorKind: text3("actor_kind", {
+      enum: sandboxWorkspaceMutationActorKindValues
+    }).notNull(),
     actorId: uuid3("actor_id").notNull(),
     // Exact turn authority is present only for actor_kind='turn'. Direct HTTP
     // requests and retained processes never invent a turn or quiescence owner.
@@ -3122,7 +3449,9 @@ var sandboxRetainedProcesses = pgTable3(
     sandboxGroupId: uuid3("sandbox_group_id").notNull(),
     parentAdmissionId: uuid3("parent_admission_id").notNull(),
     holderId: text3("holder_id").notNull(),
-    ownerActorKind: text3("owner_actor_kind", { enum: ["turn", "direct"] }).notNull(),
+    ownerActorKind: text3("owner_actor_kind", {
+      enum: ["turn", "direct"]
+    }).notNull(),
     ownerActorId: uuid3("owner_actor_id").notNull(),
     ownerTurnId: uuid3("owner_turn_id"),
     ownerAttemptId: uuid3("owner_attempt_id"),
@@ -3150,13 +3479,19 @@ var sandboxRetainedProcesses = pgTable3(
     // never exit/loss proof.
     reconcileAfter: timestamp3("reconcile_after", { withTimezone: true }).notNull().defaultNow(),
     reconcileClaimId: uuid3("reconcile_claim_id"),
-    reconcileClaimedAt: timestamp3("reconcile_claimed_at", { withTimezone: true }),
+    reconcileClaimedAt: timestamp3("reconcile_claimed_at", {
+      withTimezone: true
+    }),
     reconcileAttempts: integer2("reconcile_attempts").notNull().default(0),
     lastReconcileOutcome: text3("last_reconcile_outcome"),
-    reconcileProofOutcome: text3("reconcile_proof_outcome", { enum: ["exited", "lost"] }),
+    reconcileProofOutcome: text3("reconcile_proof_outcome", {
+      enum: ["exited", "lost"]
+    }),
     reconcileProofExitCode: integer2("reconcile_proof_exit_code"),
     reconcileProofReason: text3("reconcile_proof_reason"),
-    reconcileProofObservedAt: timestamp3("reconcile_proof_observed_at", { withTimezone: true })
+    reconcileProofObservedAt: timestamp3("reconcile_proof_observed_at", {
+      withTimezone: true
+    })
   },
   (table) => ({
     workspaceAccount: foreignKey({
@@ -3742,8 +4077,12 @@ var githubInstallations = pgTable3(
     githubActorId: bigint3("github_actor_id", { mode: "number" }),
     githubActorLogin: text3("github_actor_login"),
     authorityKind: text3("authority_kind"),
-    authorityCheckedAt: timestamp3("authority_checked_at", { withTimezone: true }),
-    authorityExpiresAt: timestamp3("authority_expires_at", { withTimezone: true }),
+    authorityCheckedAt: timestamp3("authority_checked_at", {
+      withTimezone: true
+    }),
+    authorityExpiresAt: timestamp3("authority_expires_at", {
+      withTimezone: true
+    }),
     authorityNonce: text3("authority_nonce"),
     createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp3("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -4036,7 +4375,9 @@ var hostExportOutbox = pgTable3(
     payload: jsonb2("payload").$type().notNull(),
     envelopeBytes: integer2("envelope_bytes").notNull(),
     occurredAt: timestamp3("occurred_at", { withTimezone: true }).notNull(),
-    sourceRecordedAt: timestamp3("source_recorded_at", { withTimezone: true }).notNull(),
+    sourceRecordedAt: timestamp3("source_recorded_at", {
+      withTimezone: true
+    }).notNull(),
     enqueuedAt: timestamp3("enqueued_at", { withTimezone: true }).notNull()
   },
   (table) => ({
@@ -4400,6 +4741,10 @@ var socialConnections = pgTable3(
     status: text3("status").notNull().default("connected"),
     scopes: jsonb2("scopes").$type().notNull().default([]),
     credentialRef: text3("credential_ref"),
+    // AES-256-GCM envelope (environment-crypto v1 format) holding the OAuth
+    // token bundle. Never exposed through contracts or MCP tools; only the
+    // host-side social API client decrypts it.
+    credentialEncrypted: text3("credential_encrypted"),
     tokenMetadata: jsonb2("token_metadata").$type().notNull().default({}),
     metadata: jsonb2("metadata").$type().notNull().default({}),
     createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -4546,6 +4891,9 @@ export {
   preferenceRegistrySnapshots,
   managedAccounts,
   workspaces,
+  workspaceArtifacts,
+  workspaceArtifactVersions,
+  workspaceArtifactEvents,
   nestedAgentDepthConfiguration,
   workspaceInferenceControls,
   workspaceSessionActivityRevisions,
@@ -4556,6 +4904,10 @@ export {
   codexSubscriptionCredentials,
   codexResetRedemptionAttempts,
   connections,
+  slackBotUserLinks,
+  slackInteractionInbox,
+  slackInteractions,
+  slackInteractionProgressDeliveries,
   slackBotPostOperations,
   slackBotDeleteOperations,
   integrationOauthClients,
@@ -4645,4 +4997,4 @@ export {
   rigChanges,
   schema_exports
 };
-//# sourceMappingURL=chunk-HZD7KVAR.js.map
+//# sourceMappingURL=chunk-YKWJ7QJ2.js.map