@opengeni/db 0.27.7 → 0.27.9

package/dist/insights.d.ts

@@ -1,4 +1,4 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 export type InsightsTimeWindow = {
     since: Date;
     until: Date;

package/dist/memory-governance.d.ts

@@ -1,4 +1,4 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 import { type MemoryOperationPlanInput, type MemoryRevertPlanInput } from "./memory-domain";
 export declare class MemoryGovernanceAuthorityError extends Error {
     readonly name = "MemoryGovernanceAuthorityError";

package/dist/new-session-drafts.d.ts

@@ -1,5 +1,5 @@
 import type { NewSessionDraftOptions, LatencyMode, ReasoningEffort, ResourceRef, ToolRef } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import * as schema from "./schema";
 export type NewSessionDraftRow = typeof schema.newSessionDrafts.$inferSelect;
 export declare class NewSessionDraftConflictError extends Error {

package/dist/preference-registry.d.ts

@@ -1,5 +1,5 @@
 import { PreferenceRegistryDescriptor, type CreatePreferenceRegistryProposalRequest, type PreferenceRegistryConflictStrategy, type PreferenceRegistryScope, type PreferenceRegistryStatus } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 export declare class PreferenceRegistryNotFoundError extends Error {
     readonly name = "PreferenceRegistryNotFoundError";
 }

package/dist/provision-roles.d.ts

@@ -1,4 +1,4 @@
-import type { RlsStrategy } from "./index";
+import type { RlsStrategy } from "./database";
 export type ProvisionResult = {
     appRole: string | null;
     hostExportRole: string | null;

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-IHPCI4GV.js";
+} from "./chunk-2JFRTKTG.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/runtime-posture.d.ts

@@ -1,4 +1,4 @@
-import type { Database, RlsStrategy } from "./index";
+import type { Database, RlsStrategy } from "./database";
 /**
  * The complete standalone tenant-table contract. Adding or removing a
  * FORCE-RLS table is an architectural change: update this list in the same

package/dist/schema.d.ts

@@ -6930,6 +6930,7 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -6948,6 +6949,7 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         toolPolicy: import("drizzle-orm/pg-core").PgColumn<{
@@ -11958,6 +11960,7 @@ export declare const sessionTurns: import("drizzle-orm/pg-core").PgTableWithColu
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -11976,6 +11979,7 @@ export declare const sessionTurns: import("drizzle-orm/pg-core").PgTableWithColu
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         cancelledBy: import("drizzle-orm/pg-core").PgColumn<{
@@ -14751,6 +14755,7 @@ export declare const sessionSystemUpdates: import("drizzle-orm/pg-core").PgTable
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -14769,6 +14774,7 @@ export declare const sessionSystemUpdates: import("drizzle-orm/pg-core").PgTable
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         state: import("drizzle-orm/pg-core").PgColumn<{
@@ -15088,6 +15094,7 @@ export declare const sessionSystemUpdateOutbox: import("drizzle-orm/pg-core").Pg
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -15106,6 +15113,7 @@ export declare const sessionSystemUpdateOutbox: import("drizzle-orm/pg-core").Pg
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         status: import("drizzle-orm/pg-core").PgColumn<{
@@ -15342,6 +15350,23 @@ export declare const sessionWorkflowWakeOutbox: import("drizzle-orm/pg-core").Pg
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        controlRevision: import("drizzle-orm/pg-core").PgColumn<{
+            name: "control_revision";
+            tableName: "session_workflow_wake_outbox";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         reason: import("drizzle-orm/pg-core").PgColumn<{
             name: "reason";
             tableName: "session_workflow_wake_outbox";
@@ -22703,6 +22728,7 @@ export declare const scheduledTasks: import("drizzle-orm/pg-core").PgTableWithCo
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -22721,6 +22747,7 @@ export declare const scheduledTasks: import("drizzle-orm/pg-core").PgTableWithCo
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         reusableSessionId: import("drizzle-orm/pg-core").PgColumn<{
@@ -27159,6 +27186,23 @@ export declare const socialConnections: import("drizzle-orm/pg-core").PgTableWit
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        subjectId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "subject_id";
+            tableName: "social_connections";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         provider: import("drizzle-orm/pg-core").PgColumn<{
             name: "provider";
             tableName: "social_connections";

package/dist/schema.js

@@ -139,7 +139,7 @@ import {
   workspaceVariableSetVariables,
   workspaceVariableSets,
   workspaces
-} from "./chunk-EX7CDSGH.js";
+} from "./chunk-NX2JNJJP.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,

package/dist/scoped-knowledge.d.ts

@@ -1,5 +1,5 @@
 import type { EligibleKnowledgeClaim, KnowledgeChangeProposalRecord, KnowledgeClaimEvidencePolarity, KnowledgeClaimOrigin, KnowledgeClaimRecord, KnowledgeClaimRelationType, KnowledgeClaimReviewState, KnowledgeDocumentVersionRecord, KnowledgeFactObjectKind, KnowledgeFactRecord, KnowledgeLifecycleEventType, KnowledgeLifecycleState, KnowledgeProviderRecord, KnowledgeSourceAclVersionRecord, KnowledgeSourceObjectRecord, KnowledgeSourceRecord, KnowledgeSyncRunRecord, ScopedKnowledgeActor, ScopedKnowledgeScope } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 type KnowledgeWriteContext = {
     accountId: string;
     workspaceId: string;

package/dist/session-control.d.ts

@@ -1,5 +1,5 @@
 import { type SessionMcpApprovalPolicy, type TurnInitiatorContext } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import * as schema from "./schema";
 export declare const SESSION_ANCESTRY_LIMIT = 10000;
 export type WorkspaceControlLockMode = "none" | "share" | "update";
@@ -259,6 +259,7 @@ export declare function registerSessionWorkflowWakeInTransaction(db: Database, i
     sessionId: string;
     temporalWorkflowId: string;
     reason: string;
+    controlRequested?: boolean;
 }): Promise<number>;
 /**
  * Internal producers share one outstanding session-level receipt. While a wake

package/dist/session-queue-commands.d.ts

@@ -1,5 +1,5 @@
 import { ResourceRef, type McpPersonalConnectionDelegation, type LatencyMode, type ReasoningEffort, type TurnExecutionPolicyV1 } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import { type SessionCommandActor, type SessionCommandReceiptRow } from "./session-control";
 import * as schema from "./schema";
 export type QueueCommandConflictCode = "QUEUE_VERSION_CHANGED" | "QUEUE_PROMPT_STARTED" | "QUEUE_ANCHOR_CHANGED" | "PROMPT_CHANGED" | "DRAFT_CHANGED" | "DRAFT_NOT_EMPTY" | "EDIT_SOURCE_CHANGED";

package/dist/session-realtime-context.d.ts

@@ -1,4 +1,4 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 export declare const SESSION_REALTIME_CONTEXT_MAX_BYTES = 65536;
 export declare const SESSION_REALTIME_TAIL_SOURCE = "transcript_tail_flush";
 export declare const SESSION_REALTIME_TAIL_INSTRUCTION = "The user just ended the realtime voice session but remains reachable by text. Ending voice changes only the communication mode; it does not stop, pause, or complete existing work. Treat the remaining transcript tail as additional context. If work was already underway, continue it from the current state. Change or stop that work only if the user explicitly requested it. If nothing was underway and the transcript contains no unhandled request, acknowledge briefly; otherwise handle any unhandled request.";

package/dist/session-realtime-ledger.d.ts

@@ -1,5 +1,5 @@
 import { type SessionRealtimeMode } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import { type AssertSessionRealtimeOwnerInput } from "./session-realtime";
 export declare const SESSION_REALTIME_LEDGER_MAX_BATCH = 64;
 export declare const SESSION_REALTIME_LEDGER_MAX_TEXT_BYTES = 131072;

package/dist/session-realtime-mirror.d.ts

@@ -1,5 +1,5 @@
 import type { HumanInputQuestion, HumanInputResponse } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import * as schema from "./schema";
 export type SessionRealtimeMirrorChannel = "speakable" | "commentary" | null;
 export type MirrorSessionRealtimeContextInput = {

package/dist/session-realtime-state.d.ts

@@ -1,2 +1,2 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 export declare function sessionRealtimeIsActiveInTransaction(db: Database, workspaceId: string, sessionId: string, now?: Date): Promise<boolean>;

package/dist/session-realtime-terminal.d.ts

@@ -1,4 +1,4 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 export type ProjectSessionRealtimeDelegationTerminalInput = {
     accountId: string;
     workspaceId: string;

package/dist/session-realtime.d.ts

@@ -1,5 +1,5 @@
 import type { SessionRealtimeEndReason, SessionRealtimeMode, SessionRealtimeModel } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import * as schema from "./schema";
 export { sessionRealtimeIsActiveInTransaction } from "./session-realtime-state";
 export declare const SESSION_REALTIME_LEASE_MS = 30000;

package/dist/session-tool-call-settlement.d.ts

@@ -1,5 +1,5 @@
 import type { SessionEvent } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 export declare const TOOL_RESULT_TYPE_BY_CALL_TYPE: Readonly<Record<string, string>>;
 export declare function historyCallId(item: Record<string, unknown>): string | null;
 export declare function historyItemType(item: Record<string, unknown>): string | null;

package/dist/turn-initiator.d.ts

@@ -1,5 +1,5 @@
 import { type TurnInitiator, type TurnInitiatorContext } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import type { SessionCommandActor } from "./session-control";
 export declare const UNATTRIBUTED_LEGACY_INITIATOR: TurnInitiator;
 export type FrozenTurnInitiator = {

package/dist/workspace-artifacts.d.ts

@@ -1,5 +1,5 @@
 import type { WorkspaceArtifact, WorkspaceArtifactDetailResponse, WorkspaceArtifactMutationResponse, WorkspaceArtifactVersion } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 type ArtifactMutationToolName = "artifacts_create" | "artifacts_publish" | "artifacts_rollback";
 export declare class WorkspaceArtifactNotFoundError extends Error {
     readonly name = "WorkspaceArtifactNotFoundError";

package/dist/workspace-instruction-policies.d.ts

@@ -1,6 +1,6 @@
 import { WorkspaceInstructionPolicySnapshot } from "@opengeni/contracts";
 import type { WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, WorkspaceInstructionPolicyOnboardingProposal, WorkspaceInstructionPolicyOnboardingProposalListQuery, WorkspaceInstructionPolicyOnboardingProposalListResponse, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyTarget } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 type DraftRequestInput = WorkspaceInstructionPolicyTarget & {
     operationId: string;
     accountId: string;

package/drizzle/0170_session_control_wake_revision.sql

@@ -0,0 +1,133 @@
+-- deployment-mode: rolling
+-- Preserve control-priority Temporal signals across coalesced session wakes.
+
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+ALTER TABLE "session_workflow_wake_outbox"
+  ADD COLUMN "control_revision" bigint NOT NULL DEFAULT 0;
+
+ALTER TABLE "session_workflow_wake_outbox"
+  ADD CONSTRAINT "session_workflow_wake_outbox_control_revision_check"
+  CHECK (
+    "control_revision" >= 0
+    AND "control_revision" <= "wake_revision"
+    AND "control_revision" <= 9007199254740991
+  ) NOT VALID;
+
+-- Mixed-version writers do not know the new column. Stamp recognized control
+-- reasons in the database so an old Steer followed by an old Send still leaves
+-- the earlier control revision outstanding until delivery.
+CREATE OR REPLACE FUNCTION opengeni_private.stamp_session_workflow_control_revision()
+RETURNS trigger
+LANGUAGE plpgsql
+SET search_path = pg_catalog
+AS $function$
+BEGIN
+  IF NEW.reason IN (
+    'prompt_steer',
+    'queue_steer',
+    'agent_steer',
+    'session_cancelled',
+    'session_pause_interruption',
+    'workspace_pause_interruption',
+    'attempt_interruption_settled',
+    'attempt_interruption_rejected_stale'
+  ) AND NEW.wake_revision > NEW.delivered_revision THEN
+    NEW.control_revision := greatest(NEW.control_revision, NEW.wake_revision);
+  END IF;
+  RETURN NEW;
+END
+$function$;
+
+DROP TRIGGER IF EXISTS session_workflow_wake_control_revision
+  ON "session_workflow_wake_outbox";
+CREATE TRIGGER session_workflow_wake_control_revision
+BEFORE INSERT OR UPDATE OF reason, wake_revision, control_revision
+ON "session_workflow_wake_outbox"
+FOR EACH ROW
+EXECUTE FUNCTION opengeni_private.stamp_session_workflow_control_revision();
+
+-- Preserve already-committed ownerless Steer/cancellation wakes during rolling
+-- activation. Active-attempt controls remain independently discoverable from
+-- the interruption ledger below.
+UPDATE "session_workflow_wake_outbox"
+SET "control_revision" = "wake_revision"
+WHERE "delivered_revision" < "wake_revision"
+  AND "reason" IN (
+    'prompt_steer',
+    'queue_steer',
+    'agent_steer',
+    'session_cancelled',
+    'session_pause_interruption',
+    'workspace_pause_interruption'
+  );
+
+ALTER TABLE "session_workflow_wake_outbox"
+  VALIDATE CONSTRAINT "session_workflow_wake_outbox_control_revision_check";
+
+DROP FUNCTION opengeni_private.claim_session_workflow_wakes(integer);
+DO $migration$
+DECLARE target_schema text := current_schema();
+BEGIN
+  EXECUTE format($create$
+    CREATE FUNCTION opengeni_private.claim_session_workflow_wakes(p_limit integer)
+    RETURNS TABLE (
+      account_id uuid,
+      workspace_id uuid,
+      session_id uuid,
+      temporal_workflow_id text,
+      wake_revision bigint,
+      interruption_requested boolean
+    )
+    LANGUAGE plpgsql
+    SECURITY DEFINER
+    SET search_path = pg_catalog
+    AS $function$
+    BEGIN
+      RETURN QUERY
+        WITH due AS (
+          SELECT o.session_id
+          FROM %1$I.session_workflow_wake_outbox o
+          WHERE o.wake_revision > o.delivered_revision
+            AND o.next_attempt_at <= now()
+          ORDER BY o.next_attempt_at, o.updated_at, o.session_id
+          FOR UPDATE SKIP LOCKED
+          LIMIT greatest(1, least(coalesce(p_limit, 100), 1000))
+        )
+        UPDATE %1$I.session_workflow_wake_outbox o
+        SET attempts = o.attempts + 1,
+            next_attempt_at = now() + make_interval(
+              secs => least(300, greatest(1, power(2, least(o.attempts, 8))::integer))
+            ),
+            updated_at = now()
+        FROM due
+        WHERE o.session_id = due.session_id
+        RETURNING o.account_id, o.workspace_id, o.session_id,
+          o.temporal_workflow_id, o.wake_revision,
+          o.control_revision > o.delivered_revision
+          OR EXISTS (
+            SELECT 1
+            FROM %1$I.session_attempt_interruptions interruption
+            WHERE interruption.workspace_id = o.workspace_id
+              AND interruption.session_id = o.session_id
+              AND interruption.state IN (
+                'pending', 'delivered', 'acknowledged', 'settled', 'rejected_stale'
+              )
+          ) AS interruption_requested;
+    END $function$;
+  $create$, target_schema);
+END $migration$;
+
+REVOKE ALL ON FUNCTION opengeni_private.claim_session_workflow_wakes(integer) FROM PUBLIC;
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT EXECUTE ON FUNCTION opengeni_private.claim_session_workflow_wakes(integer)
+      TO opengeni_app;
+  END IF;
+END $$;
+
+RESET statement_timeout;
+RESET lock_timeout;

package/drizzle/0171_social_connection_subject_ownership.sql

@@ -0,0 +1,53 @@
+-- deployment-mode: rolling
+-- Extend first-party social credentials with the same workspace/personal ownership boundary as MCP connections.
+
+ALTER TABLE social_connections
+  ADD COLUMN subject_id text;
+
+DROP INDEX social_connections_workspace_provider_handle_idx;
+CREATE UNIQUE INDEX social_connections_workspace_provider_handle_idx
+  ON social_connections (workspace_id, provider, account_handle)
+  WHERE subject_id IS NULL;
+CREATE UNIQUE INDEX social_connections_subject_provider_handle_idx
+  ON social_connections (workspace_id, subject_id, provider)
+  WHERE subject_id IS NOT NULL;
+CREATE INDEX social_connections_subject_provider_status_idx
+  ON social_connections (workspace_id, subject_id, provider, status);
+
+DROP POLICY workspace_isolation ON social_connections;
+CREATE POLICY workspace_isolation ON social_connections
+  USING (
+    opengeni_private.workspace_rls_visible(account_id, workspace_id)
+    AND (
+      subject_id IS NULL
+      OR subject_id = nullif(current_setting('opengeni.subject_id', true), '')
+    )
+  )
+  WITH CHECK (
+    opengeni_private.workspace_rls_visible(account_id, workspace_id)
+    AND (
+      subject_id IS NULL
+      OR subject_id = nullif(current_setting('opengeni.subject_id', true), '')
+    )
+  );
+
+DROP POLICY workspace_isolation ON social_posts;
+CREATE POLICY workspace_isolation ON social_posts
+  USING (
+    opengeni_private.workspace_rls_visible(account_id, workspace_id)
+    AND EXISTS (
+      SELECT 1
+      FROM social_connections connection
+      WHERE connection.id = social_posts.connection_id
+        AND connection.workspace_id = social_posts.workspace_id
+    )
+  )
+  WITH CHECK (
+    opengeni_private.workspace_rls_visible(account_id, workspace_id)
+    AND EXISTS (
+      SELECT 1
+      FROM social_connections connection
+      WHERE connection.id = social_posts.connection_id
+        AND connection.workspace_id = social_posts.workspace_id
+    )
+  );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/db",
-  "version": "0.27.7",
+  "version": "0.27.9",
   "description": "OpenGeni persistence: Drizzle schema, RLS-scoped query layer, the SQL migration runner, and role provisioning.",
   "license": "Apache-2.0",
   "repository": {
@@ -51,8 +51,8 @@
   },
   "dependencies": {
     "@opengeni/codex": "^0.2.10",
-    "@opengeni/config": "^0.10.11",
-    "@opengeni/contracts": "^0.38.1",
+    "@opengeni/config": "^0.10.12",
+    "@opengeni/contracts": "^0.38.2",
     "@opengeni/network": "^0.2.0",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.7"