@opengeni/db 0.28.1 → 0.28.9

package/dist/index.d.ts

@@ -1,10 +1,11 @@
-import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityKind, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, McpPersonalConnectionDelegation, Permission, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, Session, SessionAuthorizationListScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalCreatedBy, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetVariableMetadata, WorkspaceMember, WorkspaceRegisteredPack, Rig, RigVersion, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding } from "@opengeni/contracts";
+import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityKind, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, McpPersonalConnectionDelegation, Permission, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, Session, SessionAuthorizationListScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalCreatedBy, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetSecret, VariableSetVariableMetadata, WorkspaceMember, WorkspaceRegisteredPack, Rig, RigVersion, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding } from "@opengeni/contracts";
 import { type LatencyMode, SessionSystemUpdatePayload, TurnExecutionPolicyV1 } from "@opengeni/contracts";
 import { type Settings } from "@opengeni/config";
 import { type CodexFetch } from "@opengeni/codex";
 export { isCodexBilledModel } from "@opengeni/codex";
 import { type SQL } from "drizzle-orm";
 export { frozenInitiatorForCommandActor, type FrozenTurnInitiator } from "./turn-initiator";
+export { LOSSLESS_TEXT_PREFIX } from "./lossless-json";
 import { type SessionDiscoveryControl, type SessionCommandActor, type SessionTurnAttemptOutcome } from "./session-control";
 import { type SessionRealtimeContinuityEntry } from "./session-realtime-context";
 import * as schema from "./schema";
@@ -22,11 +23,10 @@ export * from "./scoped-knowledge";
 export { interruptedToolCallResult } from "./session-tool-call-settlement";
 export { decryptEnvironmentValue, encryptEnvironmentValue } from "./environment-crypto";
 export { decryptEnvironmentValue as decryptVariableSetValue, encryptEnvironmentValue as encryptVariableSetValue, } from "./environment-crypto";
-export { sanitizeEventPayload, sanitizeEventString, sanitizeModelPayload, } from "./event-payload-sanitizer";
 export * from "./persistence-errors";
 export * from "./runtime-posture";
 export * from "./insights";
-export { sanitizeMemoryText } from "./memory-domain";
+export { memoryTextForStorage } from "./memory-domain";
 export { migrate, runMigrations } from "./migrate";
 export { provisionRoles, type ProvisionResult, type ProvisionRolesOptions, } from "./provision-roles";
 export * from "./memory-domain";
@@ -539,6 +539,7 @@ export type CreateScheduledTaskInput = {
     createdByContext?: TurnInitiatorContext;
     createdByActor?: AgentSessionCreationActor | null;
     personalConnectionDelegations?: McpPersonalConnectionDelegation[];
+    targetSessionId?: string | null;
     variableSetId?: string | null;
     rigId?: string | null;
     metadata: Record<string, unknown>;
@@ -552,6 +553,7 @@ export type UpdateScheduledTaskInput = Partial<{
     agentConfig: ScheduledTaskAgentConfig;
     personalConnectionDelegations: McpPersonalConnectionDelegation[];
     reusableSessionId: string | null;
+    targetSessionId: string | null;
     variableSetId: string | null;
     rigId: string | null;
     metadata: Record<string, unknown>;
@@ -689,6 +691,15 @@ export type UpdateConnectionInput = {
     metadata?: Record<string, unknown>;
     updatedBySubjectId?: string | null;
 };
+export type UpdateSlackBotDocumentDestinationInput = {
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    visibleToSubjectId: string;
+    expectedVersion: number;
+    metadata: Record<string, unknown>;
+    updatedBySubjectId: string;
+};
 export type TransitionConnectionStateInput = {
     workspaceId: string;
     connectionId: string;
@@ -1006,6 +1017,138 @@ export type RetainedFileArtifact = {
  * location remain in the existing FileAsset/object-storage seam.
  */
 export declare function getRetainedFileArtifact(db: Database, workspaceId: string, fileId: string): Promise<RetainedFileArtifact | null>;
+export type RetainedScreenshotArtifactStatus = "pending" | "reconciling" | "ready" | "cleanup_queued" | "cleanup_pending" | "failed" | "expired" | "deleted";
+export type RetainedScreenshotQuotaState = "reserved" | "ready" | "released";
+export type RetainedScreenshotArtifact = {
+    artifactId: string;
+    accountId: string;
+    workspaceId: string;
+    sessionId: string | null;
+    turnId: string | null;
+    attemptId: string | null;
+    settlementKey: string;
+    toolCallId: string;
+    toolOutputId: string;
+    status: RetainedScreenshotArtifactStatus;
+    quotaState: RetainedScreenshotQuotaState;
+    mediaType: string;
+    sizeBytes: number;
+    sha256: string;
+    width: number;
+    height: number;
+    retentionExpiresAt: Date;
+    readyAt: Date | null;
+    cleanupReason: string | null;
+    lastError: string | null;
+    maintenanceClaimId: string | null;
+    maintenanceClaimedAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+    file: FileAsset;
+};
+export declare class RetainedScreenshotQuotaExceededError extends Error {
+    readonly quotaBytes: number;
+    readonly usedBytes: number;
+    readonly requestedBytes: number;
+    readonly code = "retained_screenshot_workspace_quota_exceeded";
+    constructor(quotaBytes: number, usedBytes: number, requestedBytes: number);
+}
+export type PrepareRetainedScreenshotArtifactInput = {
+    artifactId: string;
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    turnId: string;
+    attemptId: string;
+    settlementKey: string;
+    toolCallId: string;
+    toolOutputId: string;
+    mediaType: "image/png";
+    sizeBytes: number;
+    sha256: string;
+    width: number;
+    height: number;
+    retentionExpiresAt: Date;
+    bucket: string;
+    objectKey: string;
+    workspaceQuotaBytes: number;
+};
+/**
+ * Reserve quota and create one deterministic pending file/artifact pair.
+ * Replays return the original row only when every immutable identity and byte
+ * fact matches; a UUID/settlement collision fails closed.
+ */
+export declare function prepareRetainedScreenshotArtifact(db: Database, input: PrepareRetainedScreenshotArtifactInput): Promise<{
+    artifact: RetainedScreenshotArtifact;
+    created: boolean;
+}>;
+/** Settle one exact pending/reconciling artifact ready and move its quota once. */
+export declare function settleRetainedScreenshotArtifactReady(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    artifactId: string;
+    settlementKey: string;
+    maintenanceClaimId?: string;
+}): Promise<RetainedScreenshotArtifact>;
+/** Record a bounded diagnostic while preserving retryable pending truth. */
+export declare function recordRetainedScreenshotArtifactError(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    artifactId: string;
+    settlementKey: string;
+    error: string;
+}): Promise<void>;
+/** Session-qualified lookup: a screenshot from another session is indistinguishable from absent. */
+export declare function getRetainedScreenshotArtifact(db: Database, workspaceId: string, sessionId: string, artifactId: string): Promise<RetainedScreenshotArtifact | null>;
+export type RetainedScreenshotMaintenanceClaim = {
+    action: "reconcile" | "delete";
+    claimId: string;
+    artifactId: string;
+    accountId: string;
+    workspaceId: string;
+    sessionId: string | null;
+    objectKey: string;
+    mediaType: string;
+    sizeBytes: number;
+    sha256: string;
+    width: number;
+    height: number;
+    retentionExpiresAt: Date;
+    cleanupReason: string | null;
+};
+/** Bounded global claim through the migration's sole FORCE-RLS bypass. */
+export declare function claimRetainedScreenshotMaintenance(db: Database, input: {
+    pendingGraceMs: number;
+    claimTimeoutMs: number;
+    limit: number;
+}): Promise<RetainedScreenshotMaintenanceClaim[]>;
+/**
+ * Atomically transfer one exact reconcile claim into cleanup ownership before
+ * any provider delete. A concurrent ready settlement clears/replaces the claim
+ * and makes this a stale no-op.
+ */
+export declare function promoteRetainedScreenshotMaintenanceCleanup(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    artifactId: string;
+    claimId: string;
+    cleanupReason: string;
+}): Promise<boolean>;
+/**
+ * Complete a claimed reconcile/delete operation and release exactly one quota
+ * bucket. A lost response is idempotent on the requested terminal state.
+ */
+export declare function completeRetainedScreenshotMaintenance(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    artifactId: string;
+    claimId: string;
+    outcome: "ready" | "failed" | "expired" | "deleted";
+}): Promise<boolean>;
+export declare function getWorkspaceScreenshotQuota(db: Database, workspaceId: string): Promise<{
+    reservedBytes: number;
+    readyBytes: number;
+} | null>;
 export declare function getFileUpload(db: Database, workspaceId: string, uploadId: string): Promise<{
     id: string;
     status: FileUploadStatus;
@@ -1110,7 +1253,7 @@ export declare function decryptedCapabilityHeaders(server: EnabledMcpCapabilityS
  * Returns the encrypted credential-header map stored on a capability
  * installation, or null when none is stored. This is the only read path for
  * the ciphertext besides listEnabledMcpCapabilityServers; the generic
- * installation mapping redacts it to header names.
+ * installation mapping projects it to header names.
  */
 export declare function getStoredCapabilityHeaderCiphertext(db: Database, workspaceId: string, capabilityId: string): Promise<Record<string, string> | null>;
 export declare function mcpServerIdForCapability(capabilityId: string, metadata?: Record<string, unknown>): string;
@@ -1118,6 +1261,12 @@ export declare function createConnection(db: Database, input: CreateConnectionIn
 export declare function listConnectionsMetadata(db: Database, workspaceId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification[]>;
 export declare function getConnectionMetadata(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification | null>;
 export declare function updateConnection(db: Database, input: UpdateConnectionInput): Promise<ConnectionMetadataWithVerification | null>;
+/**
+ * Updates only pre-validated workspace Slack-bot destination metadata while
+ * atomically advancing its install proof to the new connection generation.
+ * A stale version or already-invalid proof returns null without writing.
+ */
+export declare function updateSlackBotDocumentDestination(db: Database, input: UpdateSlackBotDocumentDestinationInput): Promise<ConnectionMetadataWithVerification | null>;
 /**
  * Applies a metadata/status lifecycle transition behind the connection's
  * existing `(id, version)` fence. Unlike ordinary metadata edits, every
@@ -1297,8 +1446,10 @@ export declare function claimSlackInteractionProgressDelivery(db: Database, inpu
 }): Promise<SlackInteractionProgressClaim>;
 export declare function rekeySlackInteractionRoute(db: Database, input: Pick<SlackInteraction, "id" | "accountId" | "workspaceId"> & {
     routeKey: string;
+    slackChannelId?: string;
     slackThreadTs: string;
     ackSlackMessageTs: string;
+    repairUnacknowledgedPrivateShortcutDelivery?: boolean;
 }): Promise<SlackInteraction | null>;
 export declare function claimSlackInteractionDelivery(db: Database, claimHolderId: string, claimLeaseMs: number): Promise<SlackInteraction | null>;
 export declare function reopenSlackInteractionDelivery(db: Database, input: Pick<SlackInteraction, "id" | "accountId" | "workspaceId">): Promise<boolean>;
@@ -1525,7 +1676,6 @@ export type SaveWorkspaceMemoryResult = {
     superseded: KnowledgeMemory | null;
     supersededId: string | null;
     updated: boolean;
-    redactionCount: number;
     embedded: boolean;
 };
 export type CorrectWorkspaceMemoryInput = {
@@ -1615,7 +1765,21 @@ export declare function updateScheduledTask(db: Database, workspaceId: string, t
 export declare function getScheduledTask(db: Database, workspaceId: string, taskId: string): Promise<ScheduledTask | null>;
 export declare function getScheduledTaskPersonalConnectionDelegations(db: Database, workspaceId: string, taskId: string): Promise<McpPersonalConnectionDelegation[]>;
 export declare function requireScheduledTask(db: Database, workspaceId: string, taskId: string): Promise<ScheduledTask>;
-export declare function listScheduledTasks(db: Database, workspaceId: string, limit?: number): Promise<ScheduledTask[]>;
+export declare class ScheduledTaskTargetConflictError extends Error {
+    constructor();
+}
+/**
+ * DB-only delivery fence used inside the system-update source transaction.
+ * The task row is locked after the target session row, so a concurrent retarget
+ * linearizes before or after the complete scheduled occurrence instead of
+ * delivering one fire to a stale session snapshot.
+ */
+export declare function requireScheduledTaskTargetInTransaction(tx: Database, input: {
+    workspaceId: string;
+    taskId: string;
+    targetSessionId: string;
+}): Promise<void>;
+export declare function listScheduledTasks(db: Database, workspaceId: string, limit?: number, offset?: number): Promise<ScheduledTask[]>;
 export declare function deleteScheduledTask(db: Database, workspaceId: string, taskId: string): Promise<void>;
 export declare function createScheduledTaskRun(db: Database, input: {
     workspaceId: string;
@@ -1656,6 +1820,37 @@ export declare function createVariableSet(db: Database, input: {
 export declare function listVariableSets(db: Database, workspaceId: string): Promise<VariableSet[]>;
 export declare function getVariableSet(db: Database, workspaceId: string, variableSetId: string): Promise<VariableSet | null>;
 export declare function getVariableSetByName(db: Database, workspaceId: string, name: string): Promise<VariableSet | null>;
+export type VariableSetSecretAuditActor = {
+    kind: "subject";
+} | {
+    kind: "agent_attempt";
+    sessionId: string;
+    turnId: string;
+    attemptId: string;
+    executionGeneration: number;
+};
+export declare class VariableSetSecretReadAuthorityError extends Error {
+    readonly code = "VARIABLE_SET_SECRET_READ_AUTHORITY_STALE";
+    constructor();
+}
+/**
+ * Read one encrypted value, decrypt it, and commit its metadata-only audit in
+ * one RLS transaction. Agent reads lock and recheck the canonical attempt/control
+ * fence in that same transaction, so cancellation or replacement linearizes
+ * either before the read (denied) or after its committed audit. The plaintext is
+ * returned only after the audit insert commits; an audit failure rolls back and
+ * rejects the whole operation.
+ */
+export declare function readVariableSetSecretAtomically(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    variableSetId?: string;
+    variableSetName?: string;
+    name: string;
+    actor: VariableSetSecretAuditActor;
+    decrypt: (valueEncrypted: string) => string;
+}): Promise<VariableSetSecret | null>;
 export declare function updateVariableSet(db: Database, workspaceId: string, variableSetId: string, input: {
     name?: string;
     description?: string | null;
@@ -2119,7 +2314,7 @@ export type CodexCredentialLeasePolicyScopeResolver<TPolicyScope> = (turnMetadat
 export type CodexCredentialLeaseCandidateFilterResult<TUnavailableDiagnostic = never> = {
     /** Candidates from exactly one selected policy scope; never a union-ranked pool list. */
     accounts: readonly CodexLeaseAccountStatus[];
-    /** Downstream-owned, secret-safe diagnostics for rejected primary/fallback scopes. */
+    /** Downstream-owned, value-free metadata diagnostics for rejected primary/fallback scopes. */
     unavailableDiagnostics?: readonly TUnavailableDiagnostic[];
 };
 export type CodexCredentialLeaseCandidateFilter<TPolicyScope, TUnavailableDiagnostic = never> = (input: {
@@ -3189,16 +3384,11 @@ export type SessionEventPage = {
 };
 export declare const SESSION_EVENT_DB_PAGE_MAX_BYTES: number;
 /**
- * Read one direction-aware session-event page without transferring legacy raw
- * payloads or malformed free-form envelope strings out of PostgreSQL.
- *
- * Migration 0067 deliberately leaves historical rows untouched. This query
- * invokes its immutable payload projector in SQL and mirrors the rolling
- * envelope guard in SQL, then accumulates small batches under one RLS
- * transaction. `bytes` is the exact UTF-8 size of `JSON.stringify(events)`;
- * `hasMore` is true whenever count or byte selection stopped before the durable
- * range ended. A nonempty durable range can therefore never become an empty,
- * non-advancing HTTP page.
+ * Read one direction-aware session-event page. Full mode selects the canonical
+ * row exactly; summary/none modes derive bounded monitoring projections in SQL
+ * without rewriting the retained source. `bytes` is the exact UTF-8 size of
+ * `JSON.stringify(events)`; `hasMore` is true whenever count or byte selection
+ * stopped before the durable range ended.
  */
 export declare function listSessionEventPage(db: Database, workspaceId: string, sessionId: string, options?: ListSessionEventPageOptions): Promise<SessionEventPage>;
 export declare function listSessionEvents(db: Database, workspaceId: string, sessionId: string): Promise<SessionEvent[]>;
@@ -3372,8 +3562,8 @@ export type PendingSessionToolCallInput = {
 };
 /**
  * Durably capture the raw SDK call item at the exact attempt boundary. This is
- * model-facing truth, deliberately separate from the redacted session-event
- * projection. The receipt belongs to the logical turn so an approval resume can
+ * model-facing truth, deliberately separate from the session-event timeline.
+ * The receipt belongs to the logical turn so an approval resume can
  * settle it from a newer attempt. Duplicate SDK delivery converges on the
  * unique (turn, call) identity.
  */
@@ -5323,6 +5513,7 @@ export type EnrollmentRecord = {
     desktopUnavailableReason: string | null;
     allowScreenControl: boolean;
     status: EnrollmentStatus;
+    credentialGeneration: number;
     os: EnrollmentOs;
     arch: string;
     lastSeenAt: string | null;
@@ -5360,6 +5551,47 @@ export declare function getEnrollment(db: Database, workspaceId: string, enrollm
 export declare function listEnrollments(db: Database, workspaceId: string, options?: {
     status?: EnrollmentStatus;
 }): Promise<EnrollmentRecord[]>;
+export type MachineRemovalOutcome = (typeof schema.machineRemovalOperationOutcomeValues)[number];
+export type MachineRemovalBlockCode = "active_route" | "active_commands" | "active_lease" | "recovery_pending" | "not_selfhosted";
+export type MachineRemovalResult = {
+    enrollmentId: string;
+    outcome: MachineRemovalOutcome;
+    removed: boolean;
+    machineName: string | null;
+    lastSeenAt: string | null;
+    revokedAt: string | null;
+    code: MachineRemovalBlockCode | null;
+    message: string;
+    action: string;
+};
+export declare class MachineRemovalIdempotencyError extends Error {
+    readonly name = "MachineRemovalIdempotencyError";
+}
+export declare class MachineRemovalRevisionConflictError extends Error {
+    readonly currentUpdatedAt: string;
+    readonly name = "MachineRemovalRevisionConflictError";
+    constructor(message: string, currentUpdatedAt: string);
+}
+/**
+ * Remove one connected-machine enrollment without touching the durable identity
+ * or any session/route/archive evidence. The enrollment row is the lifecycle
+ * truth: status -> revoked rejects future auth-callout/heartbeat/reconnect
+ * attempts, while a fresh device-flow re-enrollment can reactivate the same
+ * public-key identity with a new credential family.
+ *
+ * The operation key is scoped to the workspace and is receipt-backed. A retry
+ * with the same key and request fingerprint replays the exact committed result;
+ * a different fingerprint is rejected rather than risking an accidental replay
+ * against a changed control-plane revision.
+ */
+export declare function removeEnrollment(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    enrollmentId: string;
+    operationKey: string;
+    expectedUpdatedAt?: string;
+    subjectId?: string | null;
+}): Promise<MachineRemovalResult | null>;
 export declare function revokeEnrollment(db: Database, input: {
     accountId: string;
     workspaceId: string;
@@ -5367,6 +5599,14 @@ export declare function revokeEnrollment(db: Database, input: {
 }): Promise<{
     revoked: boolean;
 }>;
+export declare function revokeEnrollmentByGeneration(db: Database, input: {
+    workspaceId: string;
+    enrollmentId: string;
+    credentialGeneration: number;
+}): Promise<{
+    matched: boolean;
+    revoked: boolean;
+}>;
 export declare function touchEnrollmentLastSeen(db: Database, input: {
     accountId: string;
     workspaceId: string;
@@ -5941,6 +6181,8 @@ export type InitializeSessionStartResult = {
     turn: SessionTurn | null;
     temporalWorkflowId: string;
     workflowWakeRevision: number | null;
+    /** True when this call installed/repaired start state or committed a new wake revision. */
+    changed: boolean;
 };
 /**
  * Install a newly created session's complete first runnable unit atomically.
@@ -5998,7 +6240,10 @@ export type SessionAttemptInterruptionSettlement = {
  * exact turn -> exact attempt lock order and require the durable interruption.
  * Temporal activity cancellation/terminalization is transport state only. The
  * workflow admits a replacement from this durable receipt, never from the
- * activity promise.
+ * activity promise. The same boundary also applies when the activity itself
+ * durably requested same-turn recovery (for example during a worker rollout):
+ * that recovery event is the logical settlement cause in place of a
+ * Pause/Steer interruption row.
  */
 export declare function markSessionAttemptQuiesced(db: Database, input: {
     accountId?: string;