@opengeni/db 0.28.1 → 0.31.1

package/dist/persistence-errors.d.ts

@@ -25,29 +25,22 @@ export declare function databaseFailureCode(sqlState: string | null): DatabaseFa
 export declare function isRetryablePersistenceSqlState(sqlState: string | null): boolean;
 /**
  * Distinguish database/ORM failures from expected domain exceptions when a
- * driver omitted SQLSTATE. This checks shape only and never retains query text,
- * bound parameters, or a raw driver cause.
+ * driver omitted SQLSTATE. This checks shape only; callers retain the original
+ * failure independently as canonical error evidence.
  */
 export declare function isDatabasePersistenceFailure(error: unknown): boolean;
 /** Extract only PostgreSQL diagnostic identifiers; never query text/parameters. */
 export declare function safeDatabaseErrorFacts(error: unknown): SafeDatabaseErrorFacts;
-/** Public-safe cause that preserves database classification without driver data. */
-export declare class SanitizedDatabasePersistenceCause extends Error {
-    readonly sqlState: string | null;
-    readonly database: SafeDatabaseErrorFacts;
-    readonly name = "SanitizedDatabasePersistenceCause";
-    constructor(sqlState: string | null, database: SafeDatabaseErrorFacts);
-}
 /**
- * Public-safe replacement for a raw Drizzle/postgres-js failure. Its `cause`
- * is a newly constructed sanitized projection; the original driver cause can
- * contain full SQL and bound parameters and is never retained.
+ * Typed persistence classification that retains the exact original failure as
+ * `cause` for internal diagnostics. The ordinary Error message is deliberately
+ * stable and source-free so a generic presentation path can never disclose SQL,
+ * parameters, or driver detail by rendering `.message`.
  */
 export declare class SessionEventPersistenceError extends Error {
     readonly details: PersistenceFailureDetails;
     readonly name = "SessionEventPersistenceError";
-    readonly cause: SanitizedDatabasePersistenceCause;
-    constructor(details: PersistenceFailureDetails);
+    constructor(details: PersistenceFailureDetails, cause?: unknown);
     get code(): DatabaseFailureCode;
 }
 export declare function isSessionEventPersistenceError(error: unknown): error is SessionEventPersistenceError;

package/dist/plugin-packages.d.ts

@@ -0,0 +1,126 @@
+import { type CapabilityCatalogAuthKind } from "@opengeni/contracts";
+import { type Database } from "./database.js";
+export type PluginBomComponent = {
+    key: string;
+    kind: "skill" | "integration" | "mcp";
+    capabilityId: string;
+    digest: string;
+};
+export type InstalledPluginPackage = {
+    pluginKey: string;
+    version: string;
+    pluginId: string;
+    pluginVersionId: string;
+    pluginInstallationId: string;
+    installationVersion: number;
+    manifest: Record<string, unknown>;
+    status: string;
+};
+export type InstalledPluginPackageSummary = {
+    pluginKey: string;
+    version: string;
+    name: string;
+    description: string;
+    category: string;
+    tags: string[];
+    sourceUrl: string | null;
+    manifestDigest: string;
+    installationVersion: number;
+    componentCount: number;
+    status: "active" | "needs_attention";
+    installedAt: string;
+    updatedAt: string;
+};
+export type PreparedPluginPackage = InstalledPluginPackage & {
+    operationId: string;
+    replayResult: Record<string, unknown> | null;
+};
+export declare class PluginOperationIdempotencyError extends Error {
+    readonly name = "PluginOperationIdempotencyError";
+}
+export declare class PluginInstallationVersionConflictError extends Error {
+    readonly name = "PluginInstallationVersionConflictError";
+}
+export declare class PluginInstallationVersionRequiredError extends Error {
+    readonly name = "PluginInstallationVersionRequiredError";
+}
+export declare function getInstalledPluginPackage(db: Database, workspaceId: string, pluginKey: string): Promise<InstalledPluginPackage | null>;
+export declare function listInstalledPluginPackages(db: Database, workspaceId: string): Promise<InstalledPluginPackageSummary[]>;
+export declare function preparePluginPackageInstall(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    pluginKey: string;
+    version: string;
+    name: string;
+    description: string;
+    category: string;
+    tags: string[];
+    manifestDigest: string;
+    manifest: Record<string, unknown>;
+    idempotencyKey: string;
+    requestDigest: string;
+    expectedInstallationVersion?: number;
+}): Promise<PreparedPluginPackage>;
+export declare function checkpointPluginPackageOperation(db: Database, input: {
+    workspaceId: string;
+    operationId: string;
+    phase: string;
+    completedKeys: string[];
+}): Promise<void>;
+export declare function deferPluginPackageOperation(db: Database, input: {
+    workspaceId: string;
+    operationId: string;
+    phase: string;
+    errorCode: string;
+}): Promise<void>;
+export declare function finalizePluginPackageInstall(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    operationId: string;
+    pluginInstallationId: string;
+    retainedFacetInstallationIds: string[];
+    retainedBindingIds: string[];
+    result: Record<string, unknown>;
+}): Promise<void>;
+export declare function installPluginMcpReference(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    ownerPluginInstallationId: string;
+    serverId: string;
+    name: string;
+    url: string;
+    allowedTools: string[];
+    timeoutMs?: number;
+    cacheToolsList?: boolean;
+    requireApproval?: boolean | string[];
+    connectionRef?: Record<string, unknown>;
+    authKind: CapabilityCatalogAuthKind;
+    digest: string;
+}): Promise<{
+    capabilityId: string;
+    facetInstallationId: string;
+}>;
+export declare function getPluginPackageUninstallPreview(db: Database, workspaceId: string, pluginKey: string): Promise<{
+    installed: boolean;
+    version: string | null;
+    installationVersion: number | null;
+    components: Array<{
+        capabilityId: string;
+        kind: "skill" | "integration" | "mcp";
+        retainedByOtherOwners: boolean;
+    }>;
+}>;
+export declare function uninstallPluginPackage(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    pluginKey: string;
+    expectedInstallationVersion: number;
+    idempotencyKey: string;
+}): Promise<{
+    status: "not_installed" | "uninstalled";
+    retainedComponents: string[];
+}>;

package/dist/preference-registry.d.ts

@@ -1,5 +1,5 @@
 import { PreferenceRegistryDescriptor, type CreatePreferenceRegistryProposalRequest, type PreferenceRegistryConflictStrategy, type PreferenceRegistryScope, type PreferenceRegistryStatus } from "@opengeni/contracts";
-import type { Database } from "./database";
+import type { Database } from "./database.js";
 export declare class PreferenceRegistryNotFoundError extends Error {
     readonly name = "PreferenceRegistryNotFoundError";
 }

package/dist/provision-roles.d.ts

@@ -1,6 +1,8 @@
-import type { RlsStrategy } from "./database";
+import type { RlsStrategy } from "./database.js";
 export type ProvisionResult = {
     appRole: string | null;
+    artifactOutboxDispatcherRole: string | null;
+    artifactMaterializerRole: string | null;
     hostExportRole: string | null;
     temporalRole: string | null;
     temporalDatabases: string[];
@@ -25,6 +27,12 @@ export type ProvisionRolesOptions = {
     rlsStrategy?: RlsStrategy;
     appRole?: string;
     appPassword?: string;
+    /** Global, EXECUTE-only artifact live-hint dispatcher capability. */
+    artifactOutboxDispatcherRole?: string;
+    artifactOutboxDispatcherPassword?: string;
+    /** Global, EXECUTE-only artifact materialization worker capability. */
+    artifactMaterializerRole?: string;
+    artifactMaterializerPassword?: string;
     /**
      * Optional cross-workspace projection role. It receives schema USAGE and
      * EXECUTE only on the host-export API; it receives no table privileges.

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-DBS5HPEW.js";
+} from "./chunk-YHZXQ7HP.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/runtime-posture.d.ts

@@ -1,10 +1,11 @@
-import type { Database, RlsStrategy } from "./database";
+import type { Database, RlsStrategy } from "./database.js";
+export declare const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES: readonly ["knowledge_source_sync_lock_authority(uuid, uuid, uuid)"];
 /**
  * The complete standalone tenant-table contract. Adding or removing a
  * FORCE-RLS table is an architectural change: update this list in the same
  * commit as the migration so startup cannot silently accept an unreviewed gap.
  */
-export declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "billing_customers", "capability_catalog_items", "capability_installations", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "import_batches", "integration_oauth_state_nonces", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "model_call_facts", "new_session_drafts", "pack_installations", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "social_connections", "social_posts", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "workspace_artifact_events", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets"];
+export declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "attached_browser_devices", "attached_browser_inventories", "audit_events", "auth_runs", "billing_customers", "browser_identities", "browser_revision_components", "browser_revisions", "browser_session_associations", "browser_sessions", "browser_state_artifacts", "capability_api_facets", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_facets", "capability_installations", "capability_integration_facets", "capability_mcp_facets", "capability_operations", "capability_plugin_installations", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "company_profile_activation_events", "company_profile_heads", "company_profile_revisions", "company_profile_snapshots", "composer_drafts", "computer_session_associations", "computer_sessions", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_live_tickets", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_replica_leases", "editable_artifact_scope_authorization_heads", "editable_artifact_sequence_checkpoints", "editable_artifact_session_links", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "editable_artifacts", "enrollments", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "image_generation_operations", "import_batches", "integration_feature_binding_owners", "integration_feature_bindings", "integration_feature_facets", "integration_oauth_state_nonces", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_facts", "network_routes", "new_session_drafts", "pack_installation_components", "pack_installations", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_codemode_calls", "session_attempt_interruptions", "session_attempt_tool_catalogs", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "site_auth_connections", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_installation_bindings", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_user_link_access_request_operations", "slack_user_link_access_requests", "social_connections", "social_posts", "temporal_schedule_cleanup_outbox", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifact_events", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_interaction_revisions", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_revisions", "workspace_learning_policy_snapshots", "workspace_model_policies", "workspace_packs", "workspace_screenshot_quotas", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas"];
 /**
  * Deployment-global and authentication tables used by ordinary API/worker
  * traffic. They intentionally do not carry workspace RLS: their access model
@@ -16,16 +17,20 @@ export declare const NON_RLS_RUNTIME_TABLES: readonly ["auth_identities", "auth_
  * explicit instead of being derived from FORCE_RLS_TABLES: adding a protected
  * table must not silently grant it broader DML than its migration intended.
  */
-export declare const RUNTIME_FULL_DML_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "billing_customers", "capability_catalog_items", "capability_installations", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "import_batches", "integration_oauth_clients", "integration_oauth_state_nonces", "knowledge_memories", "machine_metrics_latest", "machine_metrics_series", "managed_accounts", "model_call_facts", "new_session_drafts", "pack_installations", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "social_connections", "social_posts", "stripe_webhook_events", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_heads", "workspace_memberships", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspaces"];
+export declare const RUNTIME_FULL_DML_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "billing_customers", "browser_session_associations", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_installations", "capability_operations", "capability_plugin_installations", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "computer_session_associations", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "editable_artifact_replica_leases", "enrollments", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "image_generation_operations", "import_batches", "integration_feature_binding_owners", "integration_feature_bindings", "integration_oauth_clients", "integration_oauth_state_nonces", "knowledge_memories", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "managed_accounts", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_facts", "new_session_drafts", "pack_installation_components", "pack_installations", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "social_connections", "social_posts", "stripe_webhook_events", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_heads", "workspace_memberships", "workspace_model_policies", "workspace_packs", "workspace_screenshot_quotas", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas", "workspaces"];
 /** Configuration and lifecycle-owned audit rows are read-only at runtime. */
-export declare const RUNTIME_READ_ONLY_TABLES: readonly ["knowledge_lifecycle_events", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "nested_agent_depth_configuration", "preference_registry_events", "preference_registry_snapshots", "workspace_instruction_policy_snapshots"];
+export declare const RUNTIME_READ_ONLY_TABLES: readonly ["company_profile_activation_events", "company_profile_heads", "company_profile_snapshots", "knowledge_lifecycle_events", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "nested_agent_depth_configuration", "preference_registry_events", "preference_registry_snapshots", "slack_installation_bindings", "workspace_instruction_policy_snapshots", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_snapshots"];
+/** Existing runtime authorities that may be observed and advanced, never created or deleted. */
+export declare const RUNTIME_READ_UPDATE_TABLES: readonly ["workspace_session_activity_revisions"];
 /** Append-only evidence/revision tables are insertable and queryable, never mutable. */
-export declare const RUNTIME_READ_INSERT_TABLES: readonly ["knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "preference_registry_preferences", "preference_registry_revisions", "session_spawn_denials", "workspace_artifact_events", "workspace_artifact_versions", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions"];
+export declare const RUNTIME_READ_INSERT_TABLES: readonly ["browser_revision_components", "browser_revisions", "company_profile_revisions", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_sequence_checkpoints", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "preference_registry_preferences", "preference_registry_revisions", "session_attempt_tool_catalogs", "session_spawn_denials", "slack_user_link_access_request_operations", "temporal_schedule_cleanup_outbox", "workspace_artifact_events", "workspace_artifact_versions", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_learning_policy_revisions"];
+/** Durable operation journals are append/read plus claim/settle updates, never deletes. */
+export declare const RUNTIME_READ_INSERT_UPDATE_TABLES: readonly ["attached_browser_devices", "attached_browser_inventories", "auth_runs", "browser_identities", "browser_sessions", "browser_state_artifacts", "capability_api_facets", "capability_facets", "capability_integration_facets", "capability_mcp_facets", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "computer_sessions", "editable_artifact_session_links", "editable_artifacts", "integration_feature_facets", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "network_routes", "session_attempt_codemode_calls", "site_auth_connections", "slack_user_link_access_requests", "workspace_interaction_revisions"];
 /**
  * These FORCE-RLS tables are owned by security-definer host-export routines.
  * The ordinary application role must have no direct table privileges on them.
  */
-export declare const PROTECTED_NO_DIRECT_DML_TABLES: readonly ["host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox"];
+export declare const PROTECTED_NO_DIRECT_DML_TABLES: readonly ["editable_artifact_live_tickets", "editable_artifact_scope_authorization_heads", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox"];
 export type RuntimeTableDmlPrivilege = "SELECT" | "INSERT" | "UPDATE" | "DELETE";
 export type RuntimeTablePrivilegeContract = Readonly<Record<string, readonly RuntimeTableDmlPrivilege[]>>;
 /** Exact per-table DML contract. Absence means no direct table privileges. */
@@ -68,6 +73,8 @@ export type RuntimeTablePosture = {
     rlsForced: boolean;
     rlsActive: boolean;
     policyCount: number;
+    artifactOutboxDispatcherPolicy: boolean;
+    artifactMaterializerPolicy: boolean;
     select: boolean;
     insert: boolean;
     update: boolean;
@@ -80,6 +87,10 @@ export type RuntimeRoutinePosture = {
     name: string;
     owner: string;
     execute: boolean;
+    securityDefiner: boolean;
+};
+export type RuntimeTargetRoutinePosture = RuntimeRoutinePosture & {
+    publicExecute: boolean;
 };
 export type RuntimeDatabasePosture = {
     identity: RuntimeDatabaseIdentity;
@@ -89,6 +100,7 @@ export type RuntimeDatabasePosture = {
     ownedSchemas: string[];
     ownedRelations: string[];
     tables: RuntimeTablePosture[];
+    targetRoutines: RuntimeTargetRoutinePosture[];
     privateRoutines: RuntimeRoutinePosture[];
 };
 export declare class RuntimeDatabasePostureError extends Error {