@opengeni/db 0.21.0 → 0.22.2

package/dist/index.d.ts

@@ -1476,6 +1476,9 @@ export declare function loadConnectionCredentialForBroker(db: Database, settings
     subjectId?: string | null;
     allowSubjectOwned?: boolean;
 }): Promise<ConnectionCredentialForBroker | null>;
+export declare function workspaceVercelAiGatewayConnectionActive(db: Database, workspaceId: string): Promise<boolean>;
+/** Resolve only the reviewed workspace-shared AI Gateway credential shape. */
+export declare function loadWorkspaceVercelAiGatewayApiKey(db: Database, settings: Settings, workspaceId: string): Promise<string | null>;
 export declare function recordConnectionTokenRefresh(db: Database, input: {
     id: string;
     version: number;
@@ -2759,6 +2762,89 @@ export declare function updateSessionMcpApprovalPolicy(db: Database, input: {
     requireApproval: SessionMcpApprovalPolicy;
 }): Promise<UpdateSessionMcpApprovalPolicyResult>;
 export declare function listSessionMcpServersForRun(db: Database, workspaceId: string, sessionId: string, attemptId: string, encryptionKey: Uint8Array | null): Promise<SessionMcpServerForRun[]>;
+export type ConnectorActionPolicyDecision = schema.ConnectorActionPolicyDecision;
+export type ConnectorActionPolicySnapshotEntry = schema.ConnectorActionPolicySnapshotEntry;
+export type ConnectorActionAttemptIdentity = {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    turnId: string;
+    attemptId: string;
+    executionGeneration: number;
+    initiator: Pick<TurnInitiator, "kind" | "subjectId">;
+};
+export type ConnectorActionInvocation = {
+    approvalId: string;
+    connectionId?: string | null;
+    serverId: string;
+    toolName: string;
+    arguments: unknown;
+};
+export type PrepareConnectorActionApprovalResult = {
+    managed: false;
+    decision: "unmanaged";
+} | {
+    managed: true;
+    decision: ConnectorActionPolicyDecision;
+    requestId?: string;
+    actionFingerprint: string;
+};
+export type BeginConnectorActionExecutionResult = {
+    allowed: true;
+    managed: false;
+} | {
+    allowed: true;
+    managed: true;
+    requestId: string;
+    actionFingerprint: string;
+} | {
+    allowed: false;
+    managed: true;
+    reason: "approval_required" | "blocked" | "rejected" | "already_executed" | "uncertain_retry";
+    requestId: string;
+    actionFingerprint: string;
+};
+type ResolvedConnectorActionPolicy = {
+    managed: false;
+} | {
+    managed: true;
+    source: "explicit";
+    entry: ConnectorActionPolicySnapshotEntry;
+} | {
+    managed: true;
+    source: "ambiguous";
+    entry: null;
+    decision: "block";
+};
+/** Resolve one immutable attempt snapshot with exact-over-wildcard precedence. */
+export declare function resolveConnectorActionPolicy(snapshot: readonly ConnectorActionPolicySnapshotEntry[], input: {
+    connectionId: string;
+    serverId: string;
+    toolName: string;
+    actionName: string;
+}): ResolvedConnectorActionPolicy;
+export declare function upsertConnectorActionPolicy(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    connectionId: string;
+    serverId: string;
+    toolName: string;
+    actionName: string;
+    policy: ConnectorActionPolicyDecision;
+}): Promise<{
+    policy: typeof schema.connectorActionPolicies.$inferSelect;
+    changed: boolean;
+}>;
+export declare function prepareConnectorActionApproval(db: Database, identity: ConnectorActionAttemptIdentity, invocation: ConnectorActionInvocation): Promise<PrepareConnectorActionApprovalResult>;
+export declare function beginConnectorActionExecution(db: Database, identity: ConnectorActionAttemptIdentity, invocation: ConnectorActionInvocation): Promise<BeginConnectorActionExecutionResult>;
+export declare function completeConnectorActionExecution(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    requestId: string;
+    attemptId: string;
+    outcome: "completed" | "uncertain";
+}): Promise<void>;
 /** Read the persisted deployment fallback; process configuration is not policy authority. */
 export declare function getNestedAgentDepthDeploymentPolicy(db: Database): Promise<NestedAgentDepthDeploymentPolicy>;
 type AgentSessionCreationActor = Extract<SessionCommandActor, {
@@ -6414,6 +6500,7 @@ export declare function acceptSessionApprovalDecision(db: Database, input: {
     accountId: string;
     workspaceId: string;
     sessionId: string;
+    subjectId: string;
     payload: Record<string, unknown>;
     clientEventId?: string | null;
 }): Promise<AcceptSessionApprovalDecisionResult>;