@opengeni/db 0.17.1 → 0.18.1

package/dist/index.d.ts

@@ -680,9 +680,28 @@ export type CreateSocialConnectionInput = {
     status: SocialConnectionStatus;
     scopes?: string[];
     credentialRef?: string | null;
+    credentialEncrypted?: string | null;
     tokenMetadata?: Record<string, unknown>;
     metadata?: Record<string, unknown>;
 };
+export type UpsertSocialOAuthConnectionInput = {
+    accountId: string;
+    workspaceId: string;
+    provider: SocialProvider;
+    accountHandle: string;
+    accountName?: string | null;
+    externalAccountId?: string | null;
+    scopes: string[];
+    credentialEncrypted: string;
+    tokenMetadata?: Record<string, unknown>;
+};
+export type UpdateSocialConnectionCredentialInput = {
+    workspaceId: string;
+    connectionId: string;
+    credentialEncrypted?: string | null;
+    status?: SocialConnectionStatus;
+    tokenMetadata?: Record<string, unknown>;
+};
 export type CreateSocialPostInput = {
     accountId: string;
     workspaceId: string;
@@ -1173,6 +1192,7 @@ export type SlackInteractionInboxEntry = {
     claimHolderId: string | null;
     claimExpiresAt: Date | null;
     attemptCount: number;
+    retryAt: Date | null;
     lastErrorCode: string | null;
     processedAt: Date | null;
     createdAt: Date;
@@ -1195,6 +1215,9 @@ export type SlackInteraction = {
     lastDeliveredSessionEventSequence: number;
     deliveryClaimHolderId: string | null;
     deliveryClaimExpiresAt: Date | null;
+    deliveryAttemptCount: number;
+    deliveryRetryAt: Date | null;
+    deliveryLastErrorCode: string | null;
     ackSlackMessageTs: string | null;
     progressCount: number;
     terminalDeliveryState: "open" | "completed" | "failed" | "cancelled" | "blocked";
@@ -1215,7 +1238,7 @@ export declare function resolveSlackInstallationRoute(db: Database, slackTeamId:
 export declare function saveSlackBotUserLink(db: Database, input: Omit<SlackBotUserLink, "id" | "createdAt" | "updatedAt">): Promise<SlackBotUserLink>;
 export declare function getSlackBotUserLink(db: Database, workspaceId: string, connectionId: string, slackUserId: string): Promise<SlackBotUserLink | null>;
 export declare function deleteSlackBotUserLink(db: Database, workspaceId: string, connectionId: string, slackUserId: string): Promise<boolean>;
-export declare function enqueueSlackInteractionInbox(db: Database, input: Omit<SlackInteractionInboxEntry, "id" | "status" | "claimHolderId" | "claimExpiresAt" | "attemptCount" | "lastErrorCode" | "processedAt" | "createdAt" | "updatedAt">): Promise<{
+export declare function enqueueSlackInteractionInbox(db: Database, input: Omit<SlackInteractionInboxEntry, "id" | "status" | "claimHolderId" | "claimExpiresAt" | "attemptCount" | "retryAt" | "lastErrorCode" | "processedAt" | "createdAt" | "updatedAt">): Promise<{
     inserted: boolean;
     entry: SlackInteractionInboxEntry;
 }>;
@@ -1230,8 +1253,9 @@ export declare function releaseSlackInteractionInbox(db: Database, input: {
     entry: Pick<SlackInteractionInboxEntry, "id" | "accountId" | "workspaceId">;
     claimHolderId: string;
     errorCode: string;
+    retryAt: Date;
 }): Promise<boolean>;
-export declare function getOrCreateSlackInteraction(db: Database, input: Omit<SlackInteraction, "id" | "sessionReservationId" | "sessionId" | "lastDeliveredSessionEventSequence" | "deliveryClaimHolderId" | "deliveryClaimExpiresAt" | "ackSlackMessageTs" | "progressCount" | "terminalDeliveryState" | "createdAt" | "updatedAt">): Promise<{
+export declare function getOrCreateSlackInteraction(db: Database, input: Omit<SlackInteraction, "id" | "sessionReservationId" | "sessionId" | "lastDeliveredSessionEventSequence" | "deliveryClaimHolderId" | "deliveryClaimExpiresAt" | "deliveryAttemptCount" | "deliveryRetryAt" | "deliveryLastErrorCode" | "ackSlackMessageTs" | "progressCount" | "terminalDeliveryState" | "createdAt" | "updatedAt">): Promise<{
     created: boolean;
     interaction: SlackInteraction;
 }>;
@@ -1286,10 +1310,16 @@ export declare function advanceSlackInteractionDelivery(db: Database, input: Pic
 export declare function releaseSlackInteractionDelivery(db: Database, input: Pick<SlackInteraction, "id" | "accountId" | "workspaceId"> & {
     claimHolderId: string;
 }): Promise<boolean>;
+export declare function deferSlackInteractionDelivery(db: Database, input: Pick<SlackInteraction, "id" | "accountId" | "workspaceId"> & {
+    claimHolderId: string;
+    retryAt: Date;
+    errorCode: string;
+}): Promise<boolean>;
 export declare function closeSlackInteractionDelivery(db: Database, input: Pick<SlackInteraction, "id" | "accountId" | "workspaceId"> & {
     claimHolderId: string;
     sequence: number;
     state: Exclude<SlackInteraction["terminalDeliveryState"], "open">;
+    errorCode?: string | null;
 }): Promise<boolean>;
 export declare class SlackBotLifecycleSuccessAuditError extends Error {
     constructor();
@@ -1526,10 +1556,48 @@ export declare function correctWorkspaceMemory(db: Database, input: CorrectWorks
 export declare function searchWorkspaceMemories(db: Database, workspaceId: string, input: WorkspaceMemorySearchInput, embedder?: MemoryEmbedder): Promise<WorkspaceMemorySearchResult[]>;
 export declare function resolveWorkspaceMemoryBlock(db: Database, workspaceId: string): Promise<string | null>;
 export declare function createSocialConnection(db: Database, input: CreateSocialConnectionInput): Promise<SocialConnection>;
+/**
+ * OAuth-callback persistence: reconnecting the same provider account replaces
+ * the stored credential and revives the connection instead of failing on the
+ * (workspace, provider, handle) unique index.
+ */
+export declare function upsertSocialOAuthConnection(db: Database, input: UpsertSocialOAuthConnectionInput): Promise<SocialConnection>;
+/**
+ * Host-side credential read for the social API client. Deliberately not part
+ * of mapSocialConnection so the encrypted bundle never rides along on list or
+ * MCP responses.
+ */
+export declare function loadSocialConnectionCredential(db: Database, workspaceId: string, connectionId: string): Promise<{
+    connection: SocialConnection;
+    credentialEncrypted: string | null;
+} | null>;
+export declare function updateSocialConnectionCredential(db: Database, input: UpdateSocialConnectionCredentialInput): Promise<SocialConnection | null>;
 export declare function listSocialConnections(db: Database, workspaceId: string, limit?: number): Promise<SocialConnection[]>;
 export declare function getSocialConnection(db: Database, workspaceId: string, connectionId: string): Promise<SocialConnection | null>;
 export declare function requireSocialConnection(db: Database, workspaceId: string, connectionId: string): Promise<SocialConnection>;
 export declare function createSocialPost(db: Database, input: CreateSocialPostInput): Promise<SocialPost>;
+/**
+ * Idempotent bulk ingest for provider sync: rows already present under the
+ * (workspace, connection, external post id) unique index are skipped, so a
+ * scheduled re-sync never duplicates or fails.
+ */
+export declare function recordSyncedSocialPosts(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    posts: Array<{
+        externalPostId: string;
+        url?: string | null;
+        authorHandle?: string | null;
+        text: string;
+        publishedAt: Date;
+        metrics?: Record<string, number>;
+        raw?: Record<string, unknown>;
+    }>;
+}): Promise<{
+    inserted: number;
+    skipped: number;
+}>;
 export declare function listSocialPosts(db: Database, options: {
     workspaceId: string;
     connectionIds?: string[];

package/dist/index.js

@@ -90,7 +90,7 @@ import {
   workspaceVariableSetVariables,
   workspaceVariableSets,
   workspaces
-} from "./chunk-TLAC622R.js";
+} from "./chunk-YKWJ7QJ2.js";
 import {
   migrate,
   runMigrations
@@ -164,6 +164,7 @@ import {
   asc as asc5,
   desc as desc5,
   eq as eq10,
+  getTableColumns,
   gt as gt2,
   gte as gte2,
   inArray as inArray5,
@@ -10114,6 +10115,20 @@ function connectionSubjectVisibility(subjectId) {
 function connectionExactSubject(subjectId) {
   return subjectId ? eq10(connections.subjectId, subjectId) : isNull3(connections.subjectId);
 }
+function personalSlackCanonicalConnectionOrder() {
+  return [
+    sql7`case ${connections.status}
+      when 'active' then 0
+      when 'needs_reauth' then 1
+      when 'error' then 2
+      when 'revoked' then 3
+      else 4
+    end`,
+    desc5(connections.updatedAt),
+    desc5(connections.createdAt),
+    desc5(connections.id)
+  ];
+}
 async function withConnectionSubjectRls(db, workspaceId, subjectId, fn) {
   return subjectId ? await withWorkspaceSubjectRls(db, workspaceId, subjectId, fn) : await withWorkspaceRls(db, workspaceId, fn);
 }
@@ -10332,6 +10347,7 @@ async function settleSlackInteractionInbox(db, input) {
       status: input.outcome,
       claimHolderId: null,
       claimExpiresAt: null,
+      retryAt: null,
       processedAt: sql7`now()`,
       lastErrorCode: input.errorCode ?? null,
       updatedAt: sql7`now()`
@@ -10351,6 +10367,7 @@ async function releaseSlackInteractionInbox(db, input) {
       status: "pending",
       claimHolderId: null,
       claimExpiresAt: null,
+      retryAt: input.retryAt,
       lastErrorCode: input.errorCode,
       updatedAt: sql7`now()`
     }).where(
@@ -10561,7 +10578,13 @@ async function claimSlackInteractionDelivery(db, claimHolderId, claimLeaseMs) {
 }
 async function reopenSlackInteractionDelivery(db, input) {
   return await withRlsContext(db, input, async (scopedDb) => {
-    const rows = await scopedDb.update(slackInteractions).set({ terminalDeliveryState: "open", updatedAt: sql7`now()` }).where(eq10(slackInteractions.id, input.id)).returning({ id: slackInteractions.id });
+    const rows = await scopedDb.update(slackInteractions).set({
+      terminalDeliveryState: "open",
+      deliveryAttemptCount: 0,
+      deliveryRetryAt: null,
+      deliveryLastErrorCode: null,
+      updatedAt: sql7`now()`
+    }).where(eq10(slackInteractions.id, input.id)).returning({ id: slackInteractions.id });
     return rows.length === 1;
   });
 }
@@ -10570,6 +10593,9 @@ async function advanceSlackInteractionDelivery(db, input) {
     const rows = await scopedDb.update(slackInteractions).set({
       lastDeliveredSessionEventSequence: input.sequence,
       ...input.ackSlackMessageTs !== void 0 ? { ackSlackMessageTs: input.ackSlackMessageTs } : {},
+      deliveryAttemptCount: 0,
+      deliveryRetryAt: null,
+      deliveryLastErrorCode: null,
       updatedAt: sql7`now()`
     }).where(
       and10(
@@ -10596,6 +10622,23 @@ async function releaseSlackInteractionDelivery(db, input) {
     return rows.length === 1;
   });
 }
+async function deferSlackInteractionDelivery(db, input) {
+  return await withRlsContext(db, input, async (scopedDb) => {
+    const rows = await scopedDb.update(slackInteractions).set({
+      deliveryClaimHolderId: null,
+      deliveryClaimExpiresAt: null,
+      deliveryRetryAt: input.retryAt,
+      deliveryLastErrorCode: input.errorCode.slice(0, 128),
+      updatedAt: sql7`now()`
+    }).where(
+      and10(
+        eq10(slackInteractions.id, input.id),
+        eq10(slackInteractions.deliveryClaimHolderId, input.claimHolderId)
+      )
+    ).returning({ id: slackInteractions.id });
+    return rows.length === 1;
+  });
+}
 async function closeSlackInteractionDelivery(db, input) {
   return await withRlsContext(db, input, async (scopedDb) => {
     const rows = await scopedDb.update(slackInteractions).set({
@@ -10603,6 +10646,8 @@ async function closeSlackInteractionDelivery(db, input) {
       terminalDeliveryState: input.state,
       deliveryClaimHolderId: null,
       deliveryClaimExpiresAt: null,
+      deliveryRetryAt: null,
+      deliveryLastErrorCode: input.errorCode?.slice(0, 128) ?? null,
       updatedAt: sql7`now()`
     }).where(
       and10(
@@ -10635,6 +10680,7 @@ function mapSlackInteractionInbox(row) {
     claimHolderId: slackRowNullableString(row, "claimHolderId", "claim_holder_id"),
     claimExpiresAt: slackRowNullableDate(row, "claimExpiresAt", "claim_expires_at"),
     attemptCount: slackRowNumber(row, "attemptCount", "attempt_count"),
+    retryAt: slackRowNullableDate(row, "retryAt", "retry_at"),
     lastErrorCode: slackRowNullableString(row, "lastErrorCode", "last_error_code"),
     processedAt: slackRowNullableDate(row, "processedAt", "processed_at"),
     createdAt: slackRowDate(row, "createdAt", "created_at"),
@@ -10675,6 +10721,13 @@ function mapSlackInteraction(row) {
       "deliveryClaimExpiresAt",
       "delivery_claim_expires_at"
     ),
+    deliveryAttemptCount: slackRowNumber(row, "deliveryAttemptCount", "delivery_attempt_count"),
+    deliveryRetryAt: slackRowNullableDate(row, "deliveryRetryAt", "delivery_retry_at"),
+    deliveryLastErrorCode: slackRowNullableString(
+      row,
+      "deliveryLastErrorCode",
+      "delivery_last_error_code"
+    ),
     ackSlackMessageTs: slackRowNullableString(row, "ackSlackMessageTs", "ack_slack_message_ts"),
     progressCount: slackRowNumber(row, "progressCount", "progress_count"),
     terminalDeliveryState: slackRowString(
@@ -11257,9 +11310,12 @@ async function loadConnectionCredentialForBroker(db, settings, input) {
     input.workspaceId,
     input.allowSubjectOwned ? input.subjectId : null,
     async (scopedDb) => {
+      const personalSlackSubjectLookup = !input.connectionId && input.allowSubjectOwned === true && input.providerDomain === "slack.com" && input.kind === "oauth2";
       const [row] = await scopedDb.select().from(connections).where(and10(...conditions)).orderBy(
-        desc5(sql7`(${connections.status} = 'active')`),
-        desc5(connections.updatedAt)
+        ...personalSlackSubjectLookup ? personalSlackCanonicalConnectionOrder() : [
+          desc5(sql7`(${connections.status} = 'active')`),
+          desc5(connections.updatedAt)
+        ]
       ).limit(1);
       if (!row) {
         return null;
@@ -12312,6 +12368,7 @@ async function createSocialConnection(db, input) {
         status: input.status,
         scopes: input.scopes ?? [],
         credentialRef: input.credentialRef ?? null,
+        credentialEncrypted: input.credentialEncrypted ?? null,
         tokenMetadata: input.tokenMetadata ?? {},
         metadata: input.metadata ?? {}
       }).returning();
@@ -12322,15 +12379,85 @@ async function createSocialConnection(db, input) {
     }
   );
 }
+async function upsertSocialOAuthConnection(db, input) {
+  return await withRlsContext(
+    db,
+    { accountId: input.accountId, workspaceId: input.workspaceId },
+    async (scopedDb) => {
+      const [row] = await scopedDb.insert(socialConnections).values({
+        accountId: input.accountId,
+        workspaceId: input.workspaceId,
+        provider: input.provider,
+        accountHandle: input.accountHandle,
+        accountName: input.accountName ?? null,
+        externalAccountId: input.externalAccountId ?? null,
+        status: "connected",
+        scopes: input.scopes,
+        credentialEncrypted: input.credentialEncrypted,
+        tokenMetadata: input.tokenMetadata ?? {}
+      }).onConflictDoUpdate({
+        target: [
+          socialConnections.workspaceId,
+          socialConnections.provider,
+          socialConnections.accountHandle
+        ],
+        set: {
+          accountName: input.accountName ?? null,
+          externalAccountId: input.externalAccountId ?? null,
+          status: "connected",
+          scopes: input.scopes,
+          credentialEncrypted: input.credentialEncrypted,
+          tokenMetadata: input.tokenMetadata ?? {},
+          updatedAt: /* @__PURE__ */ new Date()
+        }
+      }).returning();
+      if (!row) {
+        throw new Error("Failed to upsert social connection");
+      }
+      return mapSocialConnection(row);
+    }
+  );
+}
+async function loadSocialConnectionCredential(db, workspaceId, connectionId) {
+  return await withWorkspaceRls(db, workspaceId, async (scopedDb) => {
+    const [row] = await scopedDb.select().from(socialConnections).where(
+      and10(
+        eq10(socialConnections.workspaceId, workspaceId),
+        eq10(socialConnections.id, connectionId)
+      )
+    ).limit(1);
+    if (!row) {
+      return null;
+    }
+    return { connection: mapSocialConnection(row), credentialEncrypted: row.credentialEncrypted };
+  });
+}
+async function updateSocialConnectionCredential(db, input) {
+  return await withWorkspaceRls(db, input.workspaceId, async (scopedDb) => {
+    const [row] = await scopedDb.update(socialConnections).set({
+      ...input.credentialEncrypted !== void 0 ? { credentialEncrypted: input.credentialEncrypted } : {},
+      ...input.status !== void 0 ? { status: input.status } : {},
+      ...input.tokenMetadata !== void 0 ? { tokenMetadata: input.tokenMetadata } : {},
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(
+      and10(
+        eq10(socialConnections.workspaceId, input.workspaceId),
+        eq10(socialConnections.id, input.connectionId)
+      )
+    ).returning();
+    return row ? mapSocialConnection(row) : null;
+  });
+}
+var { credentialEncrypted: _socialCredentialColumn, ...socialConnectionPublicColumns } = getTableColumns(socialConnections);
 async function listSocialConnections(db, workspaceId, limit = 100) {
   return await withWorkspaceRls(db, workspaceId, async (scopedDb) => {
-    const rows = await scopedDb.select().from(socialConnections).where(eq10(socialConnections.workspaceId, workspaceId)).orderBy(desc5(socialConnections.createdAt)).limit(limit);
+    const rows = await scopedDb.select(socialConnectionPublicColumns).from(socialConnections).where(eq10(socialConnections.workspaceId, workspaceId)).orderBy(desc5(socialConnections.createdAt)).limit(limit);
     return rows.map(mapSocialConnection);
   });
 }
 async function getSocialConnection(db, workspaceId, connectionId) {
   return await withWorkspaceRls(db, workspaceId, async (scopedDb) => {
-    const [row] = await scopedDb.select().from(socialConnections).where(
+    const [row] = await scopedDb.select(socialConnectionPublicColumns).from(socialConnections).where(
       and10(
         eq10(socialConnections.workspaceId, workspaceId),
         eq10(socialConnections.id, connectionId)
@@ -12376,6 +12503,44 @@ async function createSocialPost(db, input) {
     }
   );
 }
+async function recordSyncedSocialPosts(db, input) {
+  if (input.posts.length === 0) {
+    return { inserted: 0, skipped: 0 };
+  }
+  return await withRlsContext(
+    db,
+    { accountId: input.accountId, workspaceId: input.workspaceId },
+    async (scopedDb) => {
+      const connection = await requireSocialConnection(
+        scopedDb,
+        input.workspaceId,
+        input.connectionId
+      );
+      const rows = await scopedDb.insert(socialPosts).values(
+        input.posts.map((post) => ({
+          accountId: input.accountId,
+          workspaceId: input.workspaceId,
+          connectionId: input.connectionId,
+          provider: connection.provider,
+          externalPostId: post.externalPostId,
+          url: post.url ?? null,
+          authorHandle: post.authorHandle ?? connection.accountHandle,
+          text: post.text,
+          publishedAt: post.publishedAt,
+          metrics: post.metrics ?? {},
+          raw: post.raw ?? {}
+        }))
+      ).onConflictDoNothing({
+        target: [
+          socialPosts.workspaceId,
+          socialPosts.connectionId,
+          socialPosts.externalPostId
+        ]
+      }).returning({ id: socialPosts.id });
+      return { inserted: rows.length, skipped: input.posts.length - rows.length };
+    }
+  );
+}
 async function listSocialPosts(db, options) {
   const conditions = [eq10(socialPosts.workspaceId, options.workspaceId)];
   if (options.connectionIds?.length) {
@@ -33261,6 +33426,7 @@ export {
   decryptEnvironmentValue as decryptVariableSetValue,
   decryptedCapabilityHeaders,
   deferRetainedProcessReconciliation,
+  deferSlackInteractionDelivery,
   deleteGitHubInstallationBinding,
   deleteRecording,
   deleteRig,
@@ -33501,6 +33667,7 @@ export {
   loadCodexCredentialForRun,
   loadConnectionCredentialForBroker,
   loadIntegrationOAuthClient,
+  loadSocialConnectionCredential,
   loadVariableSetForRun,
   loadWorkspaceEnvironmentForRun,
   lockSessionEventWriteRows,
@@ -33577,6 +33744,7 @@ export {
   recordStartedContextCompaction,
   recordStreamAcknowledgment,
   recordStripeWebhookEvent,
+  recordSyncedSocialPosts,
   recordUsageEvent,
   recordWarmingSandboxCreated,
   recoverSessionDispatch,
@@ -33718,6 +33886,7 @@ export {
   updateSessionMcpApprovalPolicy,
   updateSessionMcpServerCredentials,
   updateSessionTitle,
+  updateSocialConnectionCredential,
   updateVariableSet,
   updateWorkspace,
   updateWorkspaceEnvironment,
@@ -33731,6 +33900,7 @@ export {
   upsertSandboxSessionEnvelope,
   upsertSessionGoal,
   upsertSessionGoalWithEvent,
+  upsertSocialOAuthConnection,
   upsertWorkspaceModelPolicy,
   validateHumanInputResponse,
   verifyDirectWorkspaceMutationSettlement,