@opengeni/db 0.27.8 → 0.27.11

package/dist/insights.d.ts

@@ -1,4 +1,4 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 export type InsightsTimeWindow = {
     since: Date;
     until: Date;

package/dist/memory-governance.d.ts

@@ -1,4 +1,4 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 import { type MemoryOperationPlanInput, type MemoryRevertPlanInput } from "./memory-domain";
 export declare class MemoryGovernanceAuthorityError extends Error {
     readonly name = "MemoryGovernanceAuthorityError";

package/dist/new-session-drafts.d.ts

@@ -1,5 +1,5 @@
 import type { NewSessionDraftOptions, LatencyMode, ReasoningEffort, ResourceRef, ToolRef } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import * as schema from "./schema";
 export type NewSessionDraftRow = typeof schema.newSessionDrafts.$inferSelect;
 export declare class NewSessionDraftConflictError extends Error {

package/dist/preference-registry.d.ts

@@ -1,5 +1,5 @@
 import { PreferenceRegistryDescriptor, type CreatePreferenceRegistryProposalRequest, type PreferenceRegistryConflictStrategy, type PreferenceRegistryScope, type PreferenceRegistryStatus } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 export declare class PreferenceRegistryNotFoundError extends Error {
     readonly name = "PreferenceRegistryNotFoundError";
 }

package/dist/provision-roles.d.ts

@@ -1,4 +1,4 @@
-import type { RlsStrategy } from "./index";
+import type { RlsStrategy } from "./database";
 export type ProvisionResult = {
     appRole: string | null;
     hostExportRole: string | null;

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-IHPCI4GV.js";
+} from "./chunk-RPHPNVWW.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/runtime-posture.d.ts

@@ -1,10 +1,10 @@
-import type { Database, RlsStrategy } from "./index";
+import type { Database, RlsStrategy } from "./database";
 /**
  * The complete standalone tenant-table contract. Adding or removing a
  * FORCE-RLS table is an architectural change: update this list in the same
  * commit as the migration so startup cannot silently accept an unreviewed gap.
  */
-export declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "billing_customers", "capability_catalog_items", "capability_installations", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "import_batches", "integration_oauth_state_nonces", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "model_call_facts", "new_session_drafts", "pack_installations", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "social_connections", "social_posts", "usage_events", "workspace_artifact_events", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets"];
+export declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "billing_customers", "capability_catalog_items", "capability_installations", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "import_batches", "integration_oauth_state_nonces", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "model_call_facts", "new_session_drafts", "pack_installations", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "social_connections", "social_posts", "usage_events", "workspace_artifact_events", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets"];
 /**
  * Deployment-global and authentication tables used by ordinary API/worker
  * traffic. They intentionally do not carry workspace RLS: their access model
@@ -16,7 +16,7 @@ export declare const NON_RLS_RUNTIME_TABLES: readonly ["auth_identities", "auth_
  * explicit instead of being derived from FORCE_RLS_TABLES: adding a protected
  * table must not silently grant it broader DML than its migration intended.
  */
-export declare const RUNTIME_FULL_DML_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "billing_customers", "capability_catalog_items", "capability_installations", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "import_batches", "integration_oauth_clients", "integration_oauth_state_nonces", "knowledge_memories", "machine_metrics_latest", "machine_metrics_series", "managed_accounts", "model_call_facts", "new_session_drafts", "pack_installations", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "social_connections", "social_posts", "stripe_webhook_events", "usage_events", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_heads", "workspace_memberships", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspaces"];
+export declare const RUNTIME_FULL_DML_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "billing_customers", "capability_catalog_items", "capability_installations", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "import_batches", "integration_oauth_clients", "integration_oauth_state_nonces", "knowledge_memories", "machine_metrics_latest", "machine_metrics_series", "managed_accounts", "model_call_facts", "new_session_drafts", "pack_installations", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "social_connections", "social_posts", "stripe_webhook_events", "usage_events", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_heads", "workspace_memberships", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspaces"];
 /** Configuration and lifecycle-owned audit rows are read-only at runtime. */
 export declare const RUNTIME_READ_ONLY_TABLES: readonly ["knowledge_lifecycle_events", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "nested_agent_depth_configuration", "preference_registry_events", "preference_registry_snapshots", "workspace_instruction_policy_snapshots"];
 /** Append-only evidence/revision tables are insertable and queryable, never mutable. */

package/dist/schema.d.ts

@@ -2422,66 +2422,6 @@ export declare const codexSubscriptionCredentials: import("drizzle-orm/pg-core")
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
-        connectorNamespaces: import("drizzle-orm/pg-core").PgColumn<{
-            name: "connector_namespaces";
-            tableName: "codex_subscription_credentials";
-            dataType: "array";
-            columnType: "PgArray";
-            data: string[];
-            driverParam: string | string[];
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: import("drizzle-orm").Column<{
-                name: "connector_namespaces";
-                tableName: "codex_subscription_credentials";
-                dataType: "string";
-                columnType: "PgText";
-                data: string;
-                driverParam: string;
-                notNull: false;
-                hasDefault: false;
-                isPrimaryKey: false;
-                isAutoincrement: false;
-                hasRuntimeDefault: false;
-                enumValues: [string, ...string[]];
-                baseColumn: never;
-                identity: undefined;
-                generated: undefined;
-            }, {}, {}>;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            baseBuilder: import("drizzle-orm/pg-core").PgColumnBuilder<{
-                name: "connector_namespaces";
-                dataType: 'string';
-                columnType: 'PgText';
-                data: string;
-                enumValues: [string, ...string[]];
-                driverParam: string;
-            }, {}, {}, import("drizzle-orm").ColumnBuilderExtraConfig>;
-            size: undefined;
-        }>;
-        connectorsCheckedAt: import("drizzle-orm/pg-core").PgColumn<{
-            name: "connectors_checked_at";
-            tableName: "codex_subscription_credentials";
-            dataType: "date";
-            columnType: "PgTimestamp";
-            data: Date;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
         allocatorEnabled: import("drizzle-orm/pg-core").PgColumn<{
             name: "allocator_enabled";
             tableName: "codex_subscription_credentials";
@@ -2672,6 +2612,132 @@ export declare const codexSubscriptionCredentials: import("drizzle-orm/pg-core")
     };
     dialect: 'pg';
 }>;
+export declare const codexAppsSettings: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "codex_apps_settings";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "codex_apps_settings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        accountId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "account_id";
+            tableName: "codex_apps_settings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        workspaceId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "workspace_id";
+            tableName: "codex_apps_settings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        credentialId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "credential_id";
+            tableName: "codex_apps_settings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        version: import("drizzle-orm/pg-core").PgColumn<{
+            name: "version";
+            tableName: "codex_apps_settings";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        designatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "designated_at";
+            tableName: "codex_apps_settings";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "codex_apps_settings";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: 'pg';
+}>;
 export declare const codexResetRedemptionAttempts: import("drizzle-orm/pg-core").PgTableWithColumns<{
     name: "codex_reset_redemption_attempts";
     schema: undefined;
@@ -6905,7 +6971,7 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
             tableName: "sessions";
             dataType: "json";
             columnType: "PgJsonb";
-            data: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "environment_list" | "environment_set_variable" | "github_connect_link" | "github_repositories_list" | "github_token" | "goal_complete" | "goal_pause" | "goal_set" | "goal_update" | "memory_correct" | "memory_save" | "memory_search" | "preference_registry_get" | "preference_registry_summary" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "variable_set_list" | "variable_set_set_variable")[];
+            data: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "environment_list" | "environment_set_variable" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_set" | "goal_update" | "memory_correct" | "memory_save" | "memory_search" | "preference_registry_get" | "preference_registry_summary" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "variable_set_list" | "variable_set_set_variable")[];
             driverParam: unknown;
             notNull: true;
             hasDefault: false;
@@ -6917,7 +6983,7 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "environment_list" | "environment_set_variable" | "github_connect_link" | "github_repositories_list" | "github_token" | "goal_complete" | "goal_pause" | "goal_set" | "goal_update" | "memory_correct" | "memory_save" | "memory_search" | "preference_registry_get" | "preference_registry_summary" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "variable_set_list" | "variable_set_set_variable")[];
+            $type: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "environment_list" | "environment_set_variable" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_set" | "goal_update" | "memory_correct" | "memory_save" | "memory_search" | "preference_registry_get" | "preference_registry_summary" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "variable_set_list" | "variable_set_set_variable")[];
         }>;
         initialPersonalConnectionDelegations: import("drizzle-orm/pg-core").PgColumn<{
             name: "initial_personal_connection_delegations";
@@ -6930,6 +6996,7 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -6948,6 +7015,7 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         toolPolicy: import("drizzle-orm/pg-core").PgColumn<{
@@ -11958,6 +12026,7 @@ export declare const sessionTurns: import("drizzle-orm/pg-core").PgTableWithColu
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -11976,6 +12045,7 @@ export declare const sessionTurns: import("drizzle-orm/pg-core").PgTableWithColu
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         cancelledBy: import("drizzle-orm/pg-core").PgColumn<{
@@ -14751,6 +14821,7 @@ export declare const sessionSystemUpdates: import("drizzle-orm/pg-core").PgTable
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -14769,6 +14840,7 @@ export declare const sessionSystemUpdates: import("drizzle-orm/pg-core").PgTable
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         state: import("drizzle-orm/pg-core").PgColumn<{
@@ -15088,6 +15160,7 @@ export declare const sessionSystemUpdateOutbox: import("drizzle-orm/pg-core").Pg
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -15106,6 +15179,7 @@ export declare const sessionSystemUpdateOutbox: import("drizzle-orm/pg-core").Pg
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         status: import("drizzle-orm/pg-core").PgColumn<{
@@ -16685,23 +16759,6 @@ export declare const agentRunStates: import("drizzle-orm/pg-core").PgTableWithCo
         }, {}, {
             $type: unknown[];
         }>;
-        frozenCodexCredentialId: import("drizzle-orm/pg-core").PgColumn<{
-            name: "frozen_codex_credential_id";
-            tableName: "agent_run_states";
-            dataType: "string";
-            columnType: "PgUUID";
-            data: string;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
         providerArtifactInvalidatedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "provider_artifact_invalidated_at";
             tableName: "agent_run_states";
@@ -17275,23 +17332,6 @@ export declare const sessionHistoryItems: import("drizzle-orm/pg-core").PgTableW
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
-        producerCodexCredentialId: import("drizzle-orm/pg-core").PgColumn<{
-            name: "producer_codex_credential_id";
-            tableName: "session_history_items";
-            dataType: "string";
-            columnType: "PgUUID";
-            data: string;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
         providerArtifactInvalidatedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "provider_artifact_invalidated_at";
             tableName: "session_history_items";
@@ -22720,6 +22760,7 @@ export declare const scheduledTasks: import("drizzle-orm/pg-core").PgTableWithCo
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
             driverParam: unknown;
             notNull: true;
@@ -22738,6 +22779,7 @@ export declare const scheduledTasks: import("drizzle-orm/pg-core").PgTableWithCo
                 ownerSubjectId: string;
                 providerDomain: string;
                 kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+                connectionType?: "mcp" | "social" | undefined;
             }[];
         }>;
         reusableSessionId: import("drizzle-orm/pg-core").PgColumn<{
@@ -27176,6 +27218,23 @@ export declare const socialConnections: import("drizzle-orm/pg-core").PgTableWit
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        subjectId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "subject_id";
+            tableName: "social_connections";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         provider: import("drizzle-orm/pg-core").PgColumn<{
             name: "provider";
             tableName: "social_connections";

package/dist/schema.js

@@ -5,6 +5,7 @@ import {
   billingCustomers,
   capabilityCatalogItems,
   capabilityInstallations,
+  codexAppsSettings,
   codexCapacityWaiters,
   codexCredentialLeases,
   codexResetRedemptionAttempts,
@@ -139,7 +140,7 @@ import {
   workspaceVariableSetVariables,
   workspaceVariableSets,
   workspaces
-} from "./chunk-M6EOXYHK.js";
+} from "./chunk-JYQPJ6Y5.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
@@ -148,6 +149,7 @@ export {
   billingCustomers,
   capabilityCatalogItems,
   capabilityInstallations,
+  codexAppsSettings,
   codexCapacityWaiters,
   codexCredentialLeases,
   codexResetRedemptionAttempts,

package/dist/scoped-knowledge.d.ts

@@ -1,5 +1,5 @@
 import type { EligibleKnowledgeClaim, KnowledgeChangeProposalRecord, KnowledgeClaimEvidencePolarity, KnowledgeClaimOrigin, KnowledgeClaimRecord, KnowledgeClaimRelationType, KnowledgeClaimReviewState, KnowledgeDocumentVersionRecord, KnowledgeFactObjectKind, KnowledgeFactRecord, KnowledgeLifecycleEventType, KnowledgeLifecycleState, KnowledgeProviderRecord, KnowledgeSourceAclVersionRecord, KnowledgeSourceObjectRecord, KnowledgeSourceRecord, KnowledgeSyncRunRecord, ScopedKnowledgeActor, ScopedKnowledgeScope } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 type KnowledgeWriteContext = {
     accountId: string;
     workspaceId: string;

package/dist/session-control.d.ts

@@ -1,5 +1,5 @@
 import { type SessionMcpApprovalPolicy, type TurnInitiatorContext } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import * as schema from "./schema";
 export declare const SESSION_ANCESTRY_LIMIT = 10000;
 export type WorkspaceControlLockMode = "none" | "share" | "update";

package/dist/session-queue-commands.d.ts

@@ -1,5 +1,5 @@
 import { ResourceRef, type McpPersonalConnectionDelegation, type LatencyMode, type ReasoningEffort, type TurnExecutionPolicyV1 } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import { type SessionCommandActor, type SessionCommandReceiptRow } from "./session-control";
 import * as schema from "./schema";
 export type QueueCommandConflictCode = "QUEUE_VERSION_CHANGED" | "QUEUE_PROMPT_STARTED" | "QUEUE_ANCHOR_CHANGED" | "PROMPT_CHANGED" | "DRAFT_CHANGED" | "DRAFT_NOT_EMPTY" | "EDIT_SOURCE_CHANGED";

package/dist/session-realtime-context.d.ts

@@ -1,4 +1,4 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 export declare const SESSION_REALTIME_CONTEXT_MAX_BYTES = 65536;
 export declare const SESSION_REALTIME_TAIL_SOURCE = "transcript_tail_flush";
 export declare const SESSION_REALTIME_TAIL_INSTRUCTION = "The user just ended the realtime voice session but remains reachable by text. Ending voice changes only the communication mode; it does not stop, pause, or complete existing work. Treat the remaining transcript tail as additional context. If work was already underway, continue it from the current state. Change or stop that work only if the user explicitly requested it. If nothing was underway and the transcript contains no unhandled request, acknowledge briefly; otherwise handle any unhandled request.";

package/dist/session-realtime-ledger.d.ts

@@ -1,5 +1,5 @@
 import { type SessionRealtimeMode } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import { type AssertSessionRealtimeOwnerInput } from "./session-realtime";
 export declare const SESSION_REALTIME_LEDGER_MAX_BATCH = 64;
 export declare const SESSION_REALTIME_LEDGER_MAX_TEXT_BYTES = 131072;

package/dist/session-realtime-mirror.d.ts

@@ -1,5 +1,5 @@
 import type { HumanInputQuestion, HumanInputResponse } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import * as schema from "./schema";
 export type SessionRealtimeMirrorChannel = "speakable" | "commentary" | null;
 export type MirrorSessionRealtimeContextInput = {

package/dist/session-realtime-state.d.ts

@@ -1,2 +1,2 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 export declare function sessionRealtimeIsActiveInTransaction(db: Database, workspaceId: string, sessionId: string, now?: Date): Promise<boolean>;

package/dist/session-realtime-terminal.d.ts

@@ -1,4 +1,4 @@
-import type { Database } from "./index";
+import type { Database } from "./database";
 export type ProjectSessionRealtimeDelegationTerminalInput = {
     accountId: string;
     workspaceId: string;

package/dist/session-realtime.d.ts

@@ -1,5 +1,5 @@
 import type { SessionRealtimeEndReason, SessionRealtimeMode, SessionRealtimeModel } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import * as schema from "./schema";
 export { sessionRealtimeIsActiveInTransaction } from "./session-realtime-state";
 export declare const SESSION_REALTIME_LEASE_MS = 30000;

package/dist/session-tool-call-settlement.d.ts

@@ -1,5 +1,5 @@
 import type { SessionEvent } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 export declare const TOOL_RESULT_TYPE_BY_CALL_TYPE: Readonly<Record<string, string>>;
 export declare function historyCallId(item: Record<string, unknown>): string | null;
 export declare function historyItemType(item: Record<string, unknown>): string | null;

package/dist/turn-initiator.d.ts

@@ -1,5 +1,5 @@
 import { type TurnInitiator, type TurnInitiatorContext } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 import type { SessionCommandActor } from "./session-control";
 export declare const UNATTRIBUTED_LEGACY_INITIATOR: TurnInitiator;
 export type FrozenTurnInitiator = {

package/dist/workspace-artifacts.d.ts

@@ -1,5 +1,5 @@
 import type { WorkspaceArtifact, WorkspaceArtifactDetailResponse, WorkspaceArtifactMutationResponse, WorkspaceArtifactVersion } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 type ArtifactMutationToolName = "artifacts_create" | "artifacts_publish" | "artifacts_rollback";
 export declare class WorkspaceArtifactNotFoundError extends Error {
     readonly name = "WorkspaceArtifactNotFoundError";

package/dist/workspace-instruction-policies.d.ts

@@ -1,6 +1,6 @@
 import { WorkspaceInstructionPolicySnapshot } from "@opengeni/contracts";
 import type { WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, WorkspaceInstructionPolicyOnboardingProposal, WorkspaceInstructionPolicyOnboardingProposalListQuery, WorkspaceInstructionPolicyOnboardingProposalListResponse, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyTarget } from "@opengeni/contracts";
-import type { Database } from "./index";
+import type { Database } from "./database";
 type DraftRequestInput = WorkspaceInstructionPolicyTarget & {
     operationId: string;
     accountId: string;