@opengeni/db 0.27.8 → 0.27.11

package/dist/index.d.ts

@@ -1,11 +1,10 @@
 import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityKind, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, McpPersonalConnectionDelegation, Permission, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, Session, SessionAuthorizationListScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalCreatedBy, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetVariableMetadata, WorkspaceMember, WorkspaceRegisteredPack, Rig, RigVersion, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding } from "@opengeni/contracts";
 import { type LatencyMode, SessionSystemUpdatePayload, TurnExecutionPolicyV1 } from "@opengeni/contracts";
 import { type Settings } from "@opengeni/config";
+import { type CodexFetch } from "@opengeni/codex";
 export { isCodexBilledModel } from "@opengeni/codex";
 import { type SQL } from "drizzle-orm";
 export { frozenInitiatorForCommandActor, type FrozenTurnInitiator } from "./turn-initiator";
-import type { PgDatabase, PgTransactionConfig } from "drizzle-orm/pg-core";
-import postgres from "postgres";
 import { type SessionDiscoveryControl, type SessionCommandActor, type SessionTurnAttemptOutcome } from "./session-control";
 import { type SessionRealtimeContinuityEntry } from "./session-realtime-context";
 import * as schema from "./schema";
@@ -31,21 +30,16 @@ export { sanitizeMemoryText } from "./memory-domain";
 export { migrate, runMigrations } from "./migrate";
 export { provisionRoles, type ProvisionResult, type ProvisionRolesOptions, } from "./provision-roles";
 export * from "./memory-domain";
-export type Database = PgDatabase<any, typeof schema>;
+import { type Database } from "./database";
+export { createDb, registerDbBinding, rlsContextForWorkspace, rlsStrategyFor, setRlsContext, setSubjectRlsContext, withAccountRls, withDatabaseStatementTimeout, withRlsContext, withWorkspaceRls, withWorkspaceSubjectRls, withWorkspaceUsageLock, type CreateDbOptions, type Database, type DbClient, type RlsContext, type RlsStrategy, type UserLookup, } from "./database";
+import { buildCodexTokenResolver as buildCodexTokenResolverCore, fetchCodexRateLimitResetCreditsForAccount as fetchCodexRateLimitResetCreditsForAccountCore, fetchCodexUsageForAccount as fetchCodexUsageForAccountCore, type CodexAccountUsageSnapshot, type CodexAuthDeps, type CodexCredentialForRun } from "./codex-token-resolver";
+import { buildConnectionTokenResolver as buildConnectionTokenResolverCore, type ConnectionBrokerDeps, type ConnectionCredentialForBroker, type ConnectionTokenResolverOptions } from "./connection-token-resolver";
 /** Raised when a durable session tool-policy write lost its version fence. */
 export declare class SessionToolPolicyVersionConflictError extends Error {
     readonly currentVersion: number;
     readonly code = "SESSION_TOOL_POLICY_CONFLICT";
     constructor(currentVersion: number);
 }
-export type DbClient = {
-    db: Database;
-    close: () => Promise<void>;
-};
-export type RlsContext = {
-    accountId: string;
-    workspaceId?: string | null;
-};
 export type NestedAgentDepthPolicySource = "session" | "workspace" | "deployment" | "default";
 export type SessionDepthPolicy = {
     rootSessionId: string;
@@ -94,77 +88,6 @@ export declare class SessionSpawnDeniedDbError extends Error {
     readonly denial: SessionSpawnDenial;
     constructor(denial: SessionSpawnDenial);
 }
-/**
- * RLS posture for the connection OpenGeni's query layer runs over (Step I, §7.7).
- *
- * - `"force"` (DEFAULT — today's standalone behavior, byte-for-byte): OpenGeni
- *   connects as a NON-OWNER role (`opengeni_app`) and every table carries
- *   `FORCE ROW LEVEL SECURITY`, so the workspace/account GUCs set by
- *   `setRlsContext` are the ONLY thing that admits rows — even the table owner
- *   is subject to RLS. This is the Fork-A isolation guarantee.
- * - `"scoped"` (embedded Fork-B opt-in): the host runs OpenGeni's queries over a
- *   role that OWNS the dedicated schema (RLS need not be forced for that role),
- *   relying on the host's own tenant boundary. OpenGeni STILL emits the
- *   `set_config('opengeni.account_id'/'workspace_id', …)` GUCs defensively on
- *   every scoped query, so the application query path is byte-identical between
- *   the two strategies and the app code is RLS-mode-agnostic. The strategy is a
- *   declared posture (consumed by `provisionRoles` and as a documented
- *   invariant), NOT a query-path branch — there is deliberately no `if
- *   (strategy === …)` anywhere in the helpers below. Picking `"scoped"` does not
- *   relax any GUC; it only changes which DB role the host provisions/connects as
- *   and asserts that the host accepts owning the isolation boundary.
- */
-export type RlsStrategy = "force" | "scoped";
-/**
- * Resolve a host-IdP/Better-Auth user *identifier* by email. Injected via
- * `createDb({ userLookup })` (Step I). UNSET → today's raw parameterized select
- * against Better Auth's `auth_users` table (see `getManagedUserByEmail`), which
- * relies on the postgres-js array-shaped `db.execute` result. An embedded host
- * whose identity lives elsewhere (a different IdP table, a different driver, or
- * a non-`auth_users` user store) injects this closure so OpenGeni never touches
- * `auth_users` directly. Returns the user id, or null when no such user exists.
- */
-export type UserLookup = (db: Database, email: string) => Promise<string | null>;
-export type CreateDbOptions = {
-    /**
-     * The Postgres `search_path` for this connection (Step I, §7.8 runtime half).
-     * UNSET → today's behavior: NO `search_path` startup parameter is sent, so the
-     * server default applies (`public` for standalone, where every table + the
-     * `vector` extension + `gen_random_uuid()` live). For an embedded dedicated
-     * schema, pass e.g. `"opengeni,opengeni_private,public"` — postgres-js sends
-     * it as a per-session startup parameter (the supported, query-param-free way;
-     * URL `?search_path=` is IGNORED by postgres-js). Keep `public` LAST so the
-     * `vector` type and `gen_random_uuid()` (which live in `public` on the
-     * pgvector image) still resolve — the schema-isolation contract live footgun.
-     */
-    searchPath?: string;
-    /** RLS posture; defaults to `"force"` (today's standalone). */
-    rlsStrategy?: RlsStrategy;
-    /** Host-provided user-by-email resolver; unset → today's raw `auth_users` query. */
-    userLookup?: UserLookup;
-    /** postgres-js pool size; defaults to today's `10`. */
-    max?: number;
-    /**
-     * Connection-local default transaction isolation sent in the postgres-js
-     * startup parameters. This is intentionally not a role/database default:
-     * tests and embedded callers can exercise a different ambient isolation
-     * without mutating a shared PostgreSQL role or affecting other connections.
-     */
-    isolationLevel?: postgres.ConnectionParameters["default_transaction_isolation"];
-};
-/** The strategy bound to a handle (or the `"force"` default). */
-export declare function rlsStrategyFor(db: Database): RlsStrategy;
-export declare function createDb(databaseUrl: string, options?: CreateDbOptions): DbClient;
-/**
- * Register a host's `rlsStrategy`/`userLookup` against an externally-constructed
- * `Database` handle (e.g. one the embedded host built from its own driver and
- * injected, rather than via `createDb`). Lets the same WeakMap-backed lookups
- * work for injected handles. Standalone never calls this (it uses `createDb`).
- */
-export declare function registerDbBinding(db: Database, binding: {
-    rlsStrategy?: RlsStrategy;
-    userLookup?: UserLookup;
-}): void;
 export type HostExportKind = "session_event" | "usage_event";
 /**
  * A leased row did not satisfy this consumer build's export contract. Only
@@ -274,27 +197,6 @@ export declare function getHostExportConsumerStatus(db: Database, input: {
     kind: HostExportKind;
     consumerId: string;
 }): Promise<HostExportConsumerStatus | null>;
-export declare function setRlsContext(db: Database, context: RlsContext): Promise<void>;
-export declare function withRlsContext<T>(db: Database, context: RlsContext, fn: (db: Database) => Promise<T>, transactionConfig?: PgTransactionConfig): Promise<T>;
-/**
- * Run one bounded database operation on a transaction-pinned backend.
- *
- * Callers that also have an application deadline should check their abort
- * signal before returning from `fn`; throwing there rolls the transaction back
- * even when the application deadline won a surrounding Promise race.
- */
-export declare function withDatabaseStatementTimeout<T>(db: Database, timeoutMs: number, fn: (db: Database) => Promise<T>): Promise<T>;
-export declare function rlsContextForWorkspace(db: Database, workspaceId: string): Promise<RlsContext>;
-export declare function withWorkspaceRls<T>(db: Database, workspaceId: string, fn: (db: Database) => Promise<T>): Promise<T>;
-/**
- * Personal workspace data needs both tenant and authenticated-principal GUCs.
- * `session_pins` uses this helper so FORCE RLS rejects another member's rows
- * even if a future query accidentally omits its explicit subject predicate.
- */
-export declare function withWorkspaceSubjectRls<T>(db: Database, workspaceId: string, subjectId: string, fn: (db: Database) => Promise<T>, transactionConfig?: PgTransactionConfig): Promise<T>;
-/** Apply and verify actor-private RLS on an already transaction-pinned handle. */
-export declare function setSubjectRlsContext(db: Database, subjectId: string): Promise<void>;
-export declare function withWorkspaceUsageLock<T>(db: Database, workspaceId: string, fn: (db: Database) => Promise<T>): Promise<T>;
 export type DocumentIndexAuthority = {
     authorityKind: DocumentAuthorityKind;
     authorityWorkspaceId: string | null;
@@ -313,7 +215,6 @@ export declare function resolveDocumentIndexAuthority(db: Database, input: {
     workspaceId: string;
     documentId: string;
 }): Promise<DocumentIndexAuthority | null>;
-export declare function withAccountRls<T>(db: Database, accountId: string, fn: (db: Database) => Promise<T>): Promise<T>;
 export declare const allWorkspacePermissions: Permission[];
 export declare const allAccountPermissions: Permission[];
 export type BootstrapWorkspaceInput = {
@@ -710,6 +611,7 @@ export type WorkspaceStateMemoryRecord = {
 export type CreateSocialConnectionInput = {
     accountId: string;
     workspaceId: string;
+    subjectId?: string | null;
     provider: SocialProvider;
     accountHandle: string;
     accountName?: string | null;
@@ -724,6 +626,7 @@ export type CreateSocialConnectionInput = {
 export type UpsertSocialOAuthConnectionInput = {
     accountId: string;
     workspaceId: string;
+    subjectId?: string | null;
     provider: SocialProvider;
     accountHandle: string;
     accountName?: string | null;
@@ -735,6 +638,7 @@ export type UpsertSocialOAuthConnectionInput = {
 export type UpdateSocialConnectionCredentialInput = {
     workspaceId: string;
     connectionId: string;
+    subjectId?: string | null;
     credentialEncrypted?: string | null;
     status?: SocialConnectionStatus;
     tokenMetadata?: Record<string, unknown>;
@@ -742,6 +646,7 @@ export type UpdateSocialConnectionCredentialInput = {
 export type CreateSocialPostInput = {
     accountId: string;
     workspaceId: string;
+    subjectId?: string | null;
     connectionId: string;
     externalPostId?: string | null;
     url?: string | null;
@@ -862,21 +767,6 @@ export type SlackBotDeleteOperation = {
     createdAt: Date;
     updatedAt: Date;
 };
-export type ConnectionCredentialForBroker = {
-    id: string;
-    accountId: string;
-    workspaceId: string;
-    subjectId: string | null;
-    providerDomain: string;
-    kind: ConnectionKind;
-    status: ConnectionStatus;
-    credential: Record<string, unknown>;
-    grantedScopes: string[];
-    expiresAt: Date | null;
-    lastRefreshAt: Date | null;
-    version: number;
-    metadata: Record<string, unknown>;
-};
 export type IntegrationOAuthClientForUse = {
     id: string;
     issuer: string;
@@ -1681,14 +1571,14 @@ export declare function upsertSocialOAuthConnection(db: Database, input: UpsertS
  * of mapSocialConnection so the encrypted bundle never rides along on list or
  * MCP responses.
  */
-export declare function loadSocialConnectionCredential(db: Database, workspaceId: string, connectionId: string): Promise<{
+export declare function loadSocialConnectionCredential(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<{
     connection: SocialConnection;
     credentialEncrypted: string | null;
 } | null>;
 export declare function updateSocialConnectionCredential(db: Database, input: UpdateSocialConnectionCredentialInput): Promise<SocialConnection | null>;
-export declare function listSocialConnections(db: Database, workspaceId: string, limit?: number): Promise<SocialConnection[]>;
-export declare function getSocialConnection(db: Database, workspaceId: string, connectionId: string): Promise<SocialConnection | null>;
-export declare function requireSocialConnection(db: Database, workspaceId: string, connectionId: string): Promise<SocialConnection>;
+export declare function listSocialConnections(db: Database, workspaceId: string, limit?: number, subjectId?: string | null): Promise<SocialConnection[]>;
+export declare function getSocialConnection(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<SocialConnection | null>;
+export declare function requireSocialConnection(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<SocialConnection>;
 export declare function createSocialPost(db: Database, input: CreateSocialPostInput): Promise<SocialPost>;
 /**
  * Idempotent bulk ingest for provider sync: rows already present under the
@@ -1699,6 +1589,7 @@ export declare function recordSyncedSocialPosts(db: Database, input: {
     accountId: string;
     workspaceId: string;
     connectionId: string;
+    subjectId?: string | null;
     posts: Array<{
         externalPostId: string;
         url?: string | null;
@@ -1714,6 +1605,7 @@ export declare function recordSyncedSocialPosts(db: Database, input: {
 }>;
 export declare function listSocialPosts(db: Database, options: {
     workspaceId: string;
+    subjectId?: string | null;
     connectionIds?: string[];
     since?: Date;
     limit?: number;
@@ -1970,25 +1862,6 @@ export declare function loadVariableSetForRun(db: Database, settings: Settings,
 export declare const loadWorkspaceEnvironmentForRun: typeof loadVariableSetForRun;
 /** @deprecated use VariableSetForRun */
 export type WorkspaceEnvironmentForRun = VariableSetForRun;
-export type CodexCredentialTokens = {
-    accessToken: string;
-    refreshToken: string;
-    idToken: string;
-};
-export type CodexCredentialForRun = {
-    id: string;
-    version: number;
-    workspaceId: string;
-    tokens: CodexCredentialTokens;
-    chatgptAccountId: string | null;
-    scopes: string | null;
-    planType: string | null;
-    isFedramp: boolean;
-    expiresAt: Date | null;
-    lastRefreshAt: Date | null;
-    status: string;
-    lastError: string | null;
-};
 /**
  * Login / rotation write (multi-account P1). Caller passes the PRE-encrypted
  * credential blob. Keyed on the composite partial index (workspace, chatgpt
@@ -2022,6 +1895,61 @@ export declare function upsertCodexSubscriptionCredential(db: Database, input: {
     /** Direct managed-cookie human who most recently connected this row. */
     connectedBySubjectId?: string | null;
 }): Promise<UpsertCodexSubscriptionCredentialResult>;
+export type CodexAppsSettings = {
+    credentialId: string | null;
+    version: number;
+    designatedAt: Date | null;
+};
+export declare function getCodexAppsSettings(db: Database, workspaceId: string): Promise<CodexAppsSettings>;
+export type CodexAppsCredentialAuthorization = {
+    credentialId: string;
+    ownerSubjectId: string;
+};
+export declare class CodexAppsAuthorizationRevokedError extends Error {
+    constructor();
+}
+/** Exact Apps credential and owner, independent of every inference-capacity field. */
+export declare function getCodexAppsCredentialAuthorizationForRun(db: Database, workspaceId: string): Promise<CodexAppsCredentialAuthorization | null>;
+/**
+ * Hold the exact designation, credential, and owner-membership authorization
+ * stable through one outbound Apps request. Clear/disconnect operations share
+ * the workspace advisory lock; credential or membership revocation must wait on
+ * the row locks. The callback deliberately runs inside this short transaction so
+ * no revocation can commit in the gap between a final check and network dispatch.
+ */
+export declare function withCodexAppsRequestAuthorization<T>(db: Database, input: {
+    workspaceId: string;
+    credentialId: string;
+}, use: () => Promise<T>): Promise<T>;
+export type DesignateCodexAppsCredentialResult = ({
+    kind: "updated";
+} & CodexAppsSettings) | ({
+    kind: "conflict" | "already_designated";
+} & CodexAppsSettings) | {
+    kind: "not_found";
+} | {
+    kind: "not_owner";
+} | {
+    kind: "forbidden";
+} | {
+    kind: "unavailable";
+};
+export declare function designateCodexAppsCredential(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    credentialId: string;
+    subjectId: string;
+    expectedVersion: number;
+}): Promise<DesignateCodexAppsCredentialResult>;
+export type ClearCodexAppsCredentialResult = {
+    kind: "updated" | "unchanged" | "conflict" | "forbidden";
+} & CodexAppsSettings;
+export declare function clearCodexAppsCredential(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    expectedVersion: number;
+}): Promise<ClearCodexAppsCredentialResult>;
 /**
  * The ONLY decrypt-read accessor. Fails closed. Never call from an API route that
  * returns the result.
@@ -2166,8 +2094,6 @@ export type CodexAccountStatus = {
     secondaryResetAt: Date | null;
     usageCheckedAt: Date | null;
     exhaustedUntil: Date | null;
-    connectorNamespaces: string[] | null;
-    connectorsCheckedAt: Date | null;
 };
 /**
  * A metadata-only scheduling candidate observed while the workspace's rotation
@@ -2264,8 +2190,6 @@ export declare function acquireCodexCredentialLease<T, TPolicyScope = never, TUn
     holderId: string;
     /** Pins must not move the workspace-global cursor. */
     advanceActivePointer: boolean;
-    /** Exact frozen credential for this same durable turn, if it is resuming. */
-    continuationCredentialId?: string | null;
     /**
      * Optional downstream parser for private accepted-turn policy metadata.
      * It is pure, runs under the turn/rotation transaction, and must not query
@@ -2274,8 +2198,8 @@ export declare function acquireCodexCredentialLease<T, TPolicyScope = never, TUn
     resolvePolicyScope?: CodexCredentialLeasePolicyScopeResolver<TPolicyScope>;
     /**
      * Optional downstream membership policy for NEW allocations only. A live
-     * lease or validated frozen credential is offered to the selector against
-     * the complete workspace rows first and can never be filtered out here.
+     * exact-turn lease is offered to the selector against the complete workspace
+     * rows first and can never be filtered out here.
      */
     filterNewAllocationCandidates?: CodexCredentialLeaseCandidateFilter<TPolicyScope, TUnavailableDiagnostic>;
     leaseTtlMs?: number;
@@ -2664,16 +2588,6 @@ export declare function completeCodexResetRedemption(db: Database, input: {
     outcome: CodexResetRedemptionOutcome;
 }): Promise<CodexCapacityMutationResult<CodexResetRedemptionAttempt | null>>;
 /** The P2 usage-cache snapshot written by the refreshing usage wrapper. */
-export type CodexAccountUsageSnapshot = {
-    primaryUsedPercent?: number | null;
-    primaryResetAt?: Date | null;
-    secondaryUsedPercent?: number | null;
-    secondaryResetAt?: Date | null;
-    /** Present only when the quota body parsed successfully. */
-    checkedAt?: Date;
-    resetCreditAvailableCount?: number | null;
-    resetCreditsCheckedAt?: Date | null;
-};
 /**
  * Cache-write for P2 quota bars: persist the five plaintext usage columns on a
  * SPECIFIC credential row. NEVER touches credential_encrypted. RLS-scoped, guarded
@@ -2756,20 +2670,6 @@ export declare function setCodexCredentialExhaustedWithWakeTargets(db: Database,
  * the Temporal re-dispatch (each failover is a NEW turn, but its event survives).
  */
 export declare function countConsecutiveReactiveRotations(db: Database, workspaceId: string, sessionId: string): Promise<number>;
-/**
- * P4 connector-set cache writer: persist the set of ORIGINAL-dotted connector
- * namespaces a SPECIFIC credential exposes via codex_apps (+ the freshness clock).
- * Modeled byte-for-byte on recordCodexAccountUsage / setCodexCredentialExhausted:
- * RLS-scoped, guarded by (id, workspace_id), and — critically — NO `version` bump and
- * NO `updatedAt` touch, so it can never race the (id, version) token-refresh CAS.
- *
- * The CALLER must only invoke this with a NON-EMPTY set: codex_apps connects
- * best-effort (a transient failure yields an empty tools/list), and overwriting a
- * known non-empty set with [] would falsely "drop" coverage on a flaky turn. A
- * genuinely connector-less account stays null (the ranker treats null as unknown).
- * Returns true iff a row was updated (false ⇒ the credential was disconnected under us).
- */
-export declare function recordCodexAccountConnectors(db: Database, workspaceId: string, credentialId: string, namespaces: string[]): Promise<boolean>;
 /** The supported rotation strategies (P3). */
 export declare const CODEX_ROTATION_STRATEGIES: readonly ["most_remaining", "round_robin", "drain_then_next", "sharded"];
 export type CodexRotationStrategy = (typeof CODEX_ROTATION_STRATEGIES)[number];
@@ -2815,13 +2715,13 @@ export declare function recordSessionActiveCodexCredential(db: Database, workspa
  * re-picks the most-recently-connected remaining account as active, atomically in
  * the same RLS txn. Returns whether a row was removed + the new active id.
  */
-export declare function disconnectCodexAccount(db: Database, workspaceId: string, credentialId: string): Promise<{
+export declare function disconnectCodexAccount(db: Database, workspaceId: string, credentialId: string, actorSubjectId?: string | null): Promise<{
     removed: boolean;
     newActiveCredentialId: string | null;
     blockedByUnresolvedRedemption: boolean;
 }>;
 /** Legacy "disconnect all"; atomically rejects when any provider work is unresolved. */
-export declare function disconnectAllCodexAccounts(db: Database, workspaceId: string): Promise<{
+export declare function disconnectAllCodexAccounts(db: Database, workspaceId: string, actorSubjectId?: string | null): Promise<{
     removed: number;
     blockedCredentialIds: string[];
 }>;
@@ -3361,7 +3261,6 @@ export declare function getLatestRunState(db: Database, workspaceId: string, ses
     turnId: string | null;
     serializedRunState: string;
     pendingApprovals: unknown[];
-    frozenCodexCredentialId: string | null;
     providerArtifactInvalidatedAt: Date | null;
 } | null>;
 export declare class HumanInputResponseValidationError extends Error {
@@ -3453,7 +3352,6 @@ export declare function appendSessionHistoryItems(db: Database, input: {
     turnId: string;
     expectedExecutionGeneration: number;
     expectedAttemptId: string;
-    producerCodexCredentialId?: string | null;
     modelToolOutputTruncationTokens?: number;
     items: Array<{
         position: number;
@@ -3524,9 +3422,9 @@ export declare function getSessionHistoryItems(db: Database, workspaceId: string
  * the table as an audit trail.
  */
 export declare function getActiveSessionHistoryItems(db: Database, workspaceId: string, sessionId: string): Promise<Array<{
+    id: string;
     position: number;
     item: Record<string, unknown>;
-    producerCodexCredentialId: string | null;
     providerArtifactInvalidatedAt: Date | null;
 }>>;
 /** Bounded finalized voice turns used only to resume a later realtime call. */
@@ -3598,8 +3496,6 @@ export declare function applyContextCompaction(db: Database, input: {
     replacementInputTokens: number;
     clearRequestedCompaction?: boolean;
     eventPayload?: Record<string, unknown>;
-    /** Tag inserted history rows with the Codex credential that produced them. */
-    producerCodexCredentialId?: string | null;
 }): Promise<ApplyContextCompactionResult>;
 /**
  * Attempt-fenced visible start of a compaction provider call. Emitted before
@@ -5798,7 +5694,6 @@ export declare function saveRunState(db: Database, input: {
     expectedAttemptId: string;
     serializedRunState: string;
     pendingApprovals: unknown[];
-    frozenCodexCredentialId?: string | null;
 }): Promise<boolean>;
 export type CreateSessionGoalInput = {
     accountId: string;
@@ -6254,7 +6149,6 @@ export type ApplySessionTurnSettlementInput = {
     runState?: {
         serializedRunState: string;
         pendingApprovals: unknown[];
-        frozenCodexCredentialId?: string | null;
         humanInputRequests?: Array<{
             id: string;
             toolCallId: string;
@@ -6378,7 +6272,8 @@ export type RequestSessionTurnRecoveryInput = {
     providerRecoveryCount?: number;
     fromStatuses?: SessionTurnStatus[];
     providerArtifactInvalidation?: {
-        codexCredentialId: string;
+        historyItemIds: string[];
+        runStateId?: string;
         reason: "encrypted_content_rejected";
     };
 };
@@ -6666,6 +6561,10 @@ export declare function appendSessionEventsWithLockedSessionUpdate(db: Database,
     lockParentSession?: boolean;
 }): Promise<SessionEvent[]>;
 export declare function sessionSubject(workspaceId: string, sessionId: string): string;
-export * from "./codex-token-resolver";
-export * from "./connection-token-resolver";
+export declare function buildCodexTokenResolver(db: Database, settings: Settings, workspaceId: string, credentialId: string, deps?: CodexAuthDeps): ReturnType<typeof buildCodexTokenResolverCore>;
+export declare function fetchCodexUsageForAccount(db: Database, settings: Settings, workspaceId: string, credentialId: string, fetchImpl?: CodexFetch): ReturnType<typeof fetchCodexUsageForAccountCore>;
+export declare function fetchCodexRateLimitResetCreditsForAccount(db: Database, settings: Settings, workspaceId: string, credentialId: string, fetchImpl?: CodexFetch): ReturnType<typeof fetchCodexRateLimitResetCreditsForAccountCore>;
+export declare function buildConnectionTokenResolver(db: Database, settings: Settings, deps?: ConnectionBrokerDeps, options?: ConnectionTokenResolverOptions): ReturnType<typeof buildConnectionTokenResolverCore>;
+export { withCodexTokenDeadline, type CodexAccountUsageSnapshot, type CodexAuthDeps, type CodexCredentialForRun, type CodexCredentialTokens, type CodexRateLimitResetCreditsAccountResult, type CodexTokenDeadlineClock, type CodexTokenDeadlineOptions, } from "./codex-token-resolver";
+export { buildHostConnectionTokenResolver, ConnectionRefreshHttpError, HostMcpCredentialBindingError, HostMcpCredentialScopeError, isPrivateAddress, normalizeBearerScheme, refreshOAuthConnectionCredential, type ConnectionBrokerDeps, type ConnectionCredentialForBroker, type ConnectionCredentialLookupInput, type ConnectionStatusGuard, type ConnectionTokenRefreshInput, type ConnectionTokenResolverOptions, type HostMcpCredentialResolverContext, type PermanentConnectionRefreshFailure, type RefreshTransportOptions, type ResolveConnectionCredentialInput, type ResolveConnectionCredentialResult, } from "./connection-token-resolver";
 export * from "./workspace-artifacts";