@opengeni/db 0.28.9 → 0.36.0

package/dist/schema.js

@@ -1,17 +1,46 @@
 import {
   agentRunStates,
   apiKeys,
+  attachedBrowserDevices,
+  attachedBrowserInventories,
   auditEvents,
+  authRuns,
   billingCustomers,
+  browserIdentities,
+  browserRevisionComponents,
+  browserRevisions,
+  browserSessionAssociations,
+  browserSessions,
+  browserStateArtifacts,
+  browserStateUploads,
+  capabilityApiFacets,
   capabilityCatalogItems,
+  capabilityComponentOwners,
+  capabilityFacetInstallations,
+  capabilityFacets,
   capabilityInstallations,
+  capabilityIntegrationFacets,
+  capabilityMcpFacets,
+  capabilityOperations,
+  capabilityPluginInstallations,
+  capabilityPluginVersions,
+  capabilityPlugins,
+  capabilitySkillFacets,
+  capabilitySkillFiles,
+  channels,
   codexAppsSettings,
   codexCapacityWaiters,
   codexCredentialLeases,
   codexResetRedemptionAttempts,
   codexRotationSettings,
   codexSubscriptionCredentials,
+  companyProfileActivationEvents,
+  companyProfileHeads,
+  companyProfileRevisions,
+  companyProfileSnapshots,
   composerDrafts,
+  computerSessionAssociations,
+  computerSessions,
   connectionDisconnectOperations,
   connections,
   connectorActionPolicies,
@@ -22,12 +51,29 @@ import {
   documentBases,
   documentChunks,
   documents,
+  editableArtifactBlobRefs,
+  editableArtifactIdempotencyReceipts,
+  editableArtifactLiveOutbox,
+  editableArtifactLiveTickets,
+  editableArtifactMaterializationJobs,
+  editableArtifactMaterializationResults,
+  editableArtifactOperations,
+  editableArtifactReplicaLeases,
+  editableArtifactScopeAuthorizationHeads,
+  editableArtifactSequenceCheckpoints,
+  editableArtifactSnapshots,
+  editableArtifactTransactions,
+  editableArtifactUndoClaims,
+  editableArtifactVersions,
+  editableArtifacts,
   enrollmentExposureValues,
   enrollmentOsValues,
   enrollmentStatusValues,
   enrollments,
   fileUploads,
   files,
+  generatedImageArtifacts,
+  generatedVideoArtifacts,
   githubInstallationRepositories,
   githubInstallations,
   hostExportConfig,
@@ -35,9 +81,21 @@ import {
   hostExportCursorState,
   hostExportDeadLetters,
   hostExportOutbox,
+  imageGenerationOperations,
   importBatches,
+  integrationFacetBindingOwners,
+  integrationFacetBindings,
+  integrationFacetDefinitions,
   integrationOauthClients,
   integrationOauthStateNonces,
+  integrationSpecRevisions,
+  integrationTools,
+  interactionInterventions,
+  interactionLifecycleValues,
+  interactionOperationKindValues,
+  interactionOperationStateValues,
+  interactionOperations,
+  interactionResourceOperations,
   knowledgeChangeProposals,
   knowledgeClaimEvidence,
   knowledgeClaimRelations,
@@ -55,6 +113,11 @@ import {
   knowledgeProviders,
   knowledgeSourceAclVersions,
   knowledgeSourceObjects,
+  knowledgeSourceSyncIndexObligations,
+  knowledgeSourceSyncItemOutcomes,
+  knowledgeSourceSyncObjectObservations,
+  knowledgeSourceSyncStates,
+  knowledgeSourceSyncWakes,
   knowledgeSources,
   knowledgeSyncRuns,
   machineMetricsLatest,
@@ -62,9 +125,18 @@ import {
   machineRemovalOperationOutcomeValues,
   machineRemovalOperations,
   managedAccounts,
+  memorySlackPublicationConfigurations,
+  memorySlackPublicationReceipts,
+  memorySlackPublications,
   modelCallFacts,
   nestedAgentDepthConfiguration,
+  networkRoutes,
   newSessionDrafts,
+  organizationMemberships,
+  organizationUserResourceAuthorities,
+  organizationUserResourceGrants,
+  organizationUserRetentionPolicies,
+  packInstallationComponents,
   packInstallations,
   preferenceRegistryEvents,
   preferenceRegistryPreferences,
@@ -90,9 +162,12 @@ import {
   sandboxes,
   scheduledTaskRuns,
   scheduledTasks,
+  sessionAttemptCodemodeCalls,
   sessionAttemptInterruptions,
+  sessionAttemptToolCatalogs,
   sessionCommandReceipts,
   sessionEvents,
+  sessionGoalRevisions,
   sessionGoals,
   sessionHistoryItems,
   sessionHumanInputRequests,
@@ -115,15 +190,29 @@ import {
   sessionTurns,
   sessionWorkflowWakeOutbox,
   sessions,
+  siteAuthConnections,
   slackBotDeleteOperations,
   slackBotPostOperations,
+  slackBotUpdateOperations,
   slackBotUserLinks,
+  slackInstallationBindings,
+  slackInteractionActionHandles,
   slackInteractionInbox,
   slackInteractionProgressDeliveries,
   slackInteractions,
+  slackSharedTaskOrigins,
+  slackTaskPolicyActivationEvents,
+  slackTaskPolicyHeads,
+  slackTaskPolicyRevisions,
+  slackUserLinkAccessRequestOperations,
+  slackUserLinkAccessRequests,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
+  taskNoteEvents,
+  taskNoteWriteCapabilities,
+  taskNotes,
+  temporalScheduleCleanupOutbox,
   transcriptionRecordingChunkStateValues,
   transcriptionRecordingChunks,
   transcriptionRecordingObjectKindValues,
@@ -133,6 +222,8 @@ import {
   transcriptionRecordingStateValues,
   transcriptionRecordings,
   usageEvents,
+  videoGenerationOperations,
+  videoGenerationReferences,
   workspaceArtifactEvents,
   workspaceArtifactVersions,
   workspaceArtifacts,
@@ -144,6 +235,11 @@ import {
   workspaceInstructionPolicyOnboardingProposals,
   workspaceInstructionPolicyRevisions,
   workspaceInstructionPolicySnapshots,
+  workspaceInteractionRevisions,
+  workspaceLearningPolicyActivationEvents,
+  workspaceLearningPolicyHeads,
+  workspaceLearningPolicyRevisions,
+  workspaceLearningPolicySnapshots,
   workspaceMemberships,
   workspaceModelPolicies,
   workspacePacks,
@@ -151,23 +247,59 @@ import {
   workspaceSessionActivityRevisions,
   workspaceVariableSetVariables,
   workspaceVariableSets,
-  workspaces
-} from "./chunk-P6CUHXQZ.js";
+  workspaceVideoGenerationPolicies,
+  workspaceVideoGenerationQuotas,
+  workspaces,
+  xaiCapacityWaiters,
+  xaiCredentialLeases,
+  xaiRotationSettings,
+  xaiSessionAccountPins,
+  xaiSubscriptionCredentials
+} from "./chunk-5KTIEDX7.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
   apiKeys,
+  attachedBrowserDevices,
+  attachedBrowserInventories,
   auditEvents,
+  authRuns,
   billingCustomers,
+  browserIdentities,
+  browserRevisionComponents,
+  browserRevisions,
+  browserSessionAssociations,
+  browserSessions,
+  browserStateArtifacts,
+  browserStateUploads,
+  capabilityApiFacets,
   capabilityCatalogItems,
+  capabilityComponentOwners,
+  capabilityFacetInstallations,
+  capabilityFacets,
   capabilityInstallations,
+  capabilityIntegrationFacets,
+  capabilityMcpFacets,
+  capabilityOperations,
+  capabilityPluginInstallations,
+  capabilityPluginVersions,
+  capabilityPlugins,
+  capabilitySkillFacets,
+  capabilitySkillFiles,
+  channels,
   codexAppsSettings,
   codexCapacityWaiters,
   codexCredentialLeases,
   codexResetRedemptionAttempts,
   codexRotationSettings,
   codexSubscriptionCredentials,
+  companyProfileActivationEvents,
+  companyProfileHeads,
+  companyProfileRevisions,
+  companyProfileSnapshots,
   composerDrafts,
+  computerSessionAssociations,
+  computerSessions,
   connectionDisconnectOperations,
   connections,
   connectorActionPolicies,
@@ -178,12 +310,29 @@ export {
   documentBases,
   documentChunks,
   documents,
+  editableArtifactBlobRefs,
+  editableArtifactIdempotencyReceipts,
+  editableArtifactLiveOutbox,
+  editableArtifactLiveTickets,
+  editableArtifactMaterializationJobs,
+  editableArtifactMaterializationResults,
+  editableArtifactOperations,
+  editableArtifactReplicaLeases,
+  editableArtifactScopeAuthorizationHeads,
+  editableArtifactSequenceCheckpoints,
+  editableArtifactSnapshots,
+  editableArtifactTransactions,
+  editableArtifactUndoClaims,
+  editableArtifactVersions,
+  editableArtifacts,
   enrollmentExposureValues,
   enrollmentOsValues,
   enrollmentStatusValues,
   enrollments,
   fileUploads,
   files,
+  generatedImageArtifacts,
+  generatedVideoArtifacts,
   githubInstallationRepositories,
   githubInstallations,
   hostExportConfig,
@@ -191,9 +340,21 @@ export {
   hostExportCursorState,
   hostExportDeadLetters,
   hostExportOutbox,
+  imageGenerationOperations,
   importBatches,
+  integrationFacetBindingOwners,
+  integrationFacetBindings,
+  integrationFacetDefinitions,
   integrationOauthClients,
   integrationOauthStateNonces,
+  integrationSpecRevisions,
+  integrationTools,
+  interactionInterventions,
+  interactionLifecycleValues,
+  interactionOperationKindValues,
+  interactionOperationStateValues,
+  interactionOperations,
+  interactionResourceOperations,
   knowledgeChangeProposals,
   knowledgeClaimEvidence,
   knowledgeClaimRelations,
@@ -211,6 +372,11 @@ export {
   knowledgeProviders,
   knowledgeSourceAclVersions,
   knowledgeSourceObjects,
+  knowledgeSourceSyncIndexObligations,
+  knowledgeSourceSyncItemOutcomes,
+  knowledgeSourceSyncObjectObservations,
+  knowledgeSourceSyncStates,
+  knowledgeSourceSyncWakes,
   knowledgeSources,
   knowledgeSyncRuns,
   machineMetricsLatest,
@@ -218,9 +384,18 @@ export {
   machineRemovalOperationOutcomeValues,
   machineRemovalOperations,
   managedAccounts,
+  memorySlackPublicationConfigurations,
+  memorySlackPublicationReceipts,
+  memorySlackPublications,
   modelCallFacts,
   nestedAgentDepthConfiguration,
+  networkRoutes,
   newSessionDrafts,
+  organizationMemberships,
+  organizationUserResourceAuthorities,
+  organizationUserResourceGrants,
+  organizationUserRetentionPolicies,
+  packInstallationComponents,
   packInstallations,
   preferenceRegistryEvents,
   preferenceRegistryPreferences,
@@ -246,9 +421,12 @@ export {
   sandboxes,
   scheduledTaskRuns,
   scheduledTasks,
+  sessionAttemptCodemodeCalls,
   sessionAttemptInterruptions,
+  sessionAttemptToolCatalogs,
   sessionCommandReceipts,
   sessionEvents,
+  sessionGoalRevisions,
   sessionGoals,
   sessionHistoryItems,
   sessionHumanInputRequests,
@@ -271,15 +449,29 @@ export {
   sessionTurns,
   sessionWorkflowWakeOutbox,
   sessions,
+  siteAuthConnections,
   slackBotDeleteOperations,
   slackBotPostOperations,
+  slackBotUpdateOperations,
   slackBotUserLinks,
+  slackInstallationBindings,
+  slackInteractionActionHandles,
   slackInteractionInbox,
   slackInteractionProgressDeliveries,
   slackInteractions,
+  slackSharedTaskOrigins,
+  slackTaskPolicyActivationEvents,
+  slackTaskPolicyHeads,
+  slackTaskPolicyRevisions,
+  slackUserLinkAccessRequestOperations,
+  slackUserLinkAccessRequests,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
+  taskNoteEvents,
+  taskNoteWriteCapabilities,
+  taskNotes,
+  temporalScheduleCleanupOutbox,
   transcriptionRecordingChunkStateValues,
   transcriptionRecordingChunks,
   transcriptionRecordingObjectKindValues,
@@ -289,6 +481,8 @@ export {
   transcriptionRecordingStateValues,
   transcriptionRecordings,
   usageEvents,
+  videoGenerationOperations,
+  videoGenerationReferences,
   workspaceArtifactEvents,
   workspaceArtifactVersions,
   workspaceArtifacts,
@@ -300,6 +494,11 @@ export {
   workspaceInstructionPolicyOnboardingProposals,
   workspaceInstructionPolicyRevisions,
   workspaceInstructionPolicySnapshots,
+  workspaceInteractionRevisions,
+  workspaceLearningPolicyActivationEvents,
+  workspaceLearningPolicyHeads,
+  workspaceLearningPolicyRevisions,
+  workspaceLearningPolicySnapshots,
   workspaceMemberships,
   workspaceModelPolicies,
   workspacePacks,
@@ -307,6 +506,13 @@ export {
   workspaceSessionActivityRevisions,
   workspaceVariableSetVariables,
   workspaceVariableSets,
-  workspaces
+  workspaceVideoGenerationPolicies,
+  workspaceVideoGenerationQuotas,
+  workspaces,
+  xaiCapacityWaiters,
+  xaiCredentialLeases,
+  xaiRotationSettings,
+  xaiSessionAccountPins,
+  xaiSubscriptionCredentials
 };
 //# sourceMappingURL=schema.js.map

package/dist/scoped-knowledge.d.ts

@@ -1,5 +1,5 @@
 import type { EligibleKnowledgeClaim, KnowledgeChangeProposalRecord, KnowledgeClaimEvidencePolarity, KnowledgeClaimOrigin, KnowledgeClaimRecord, KnowledgeClaimRelationType, KnowledgeClaimReviewState, KnowledgeDocumentVersionRecord, KnowledgeFactObjectKind, KnowledgeFactRecord, KnowledgeLifecycleEventType, KnowledgeLifecycleState, KnowledgeProviderRecord, KnowledgeSourceAclVersionRecord, KnowledgeSourceObjectRecord, KnowledgeSourceRecord, KnowledgeSyncRunRecord, ScopedKnowledgeActor, ScopedKnowledgeScope } from "@opengeni/contracts";
-import type { Database } from "./database";
+import type { Database } from "./database.js";
 type KnowledgeWriteContext = {
     accountId: string;
     workspaceId: string;
@@ -30,6 +30,16 @@ export declare class ScopedKnowledgeInvalidOperationError extends Error {
 export declare class ScopedKnowledgeAuthorityError extends Error {
     readonly name = "ScopedKnowledgeAuthorityError";
 }
+export declare class KnowledgeSourceSyncObservationFenceError extends Error {
+    readonly name = "KnowledgeSourceSyncObservationFenceError";
+    readonly code = "KNOWLEDGE_SOURCE_SYNC_OBSERVATION_FENCE";
+}
+export type KnowledgeSourceSyncVersionObservationFence = {
+    scheduledTaskRunId: string;
+    scanGeneration: number;
+    providerRevision: string | null;
+    metadataHash: string | null;
+};
 export declare function scopedKnowledgeInputHash(value: unknown): string;
 export declare function normalizeScopedKnowledgeKey(value: string): string;
 export declare function scopedKnowledgeScopeKey(scope: ScopedKnowledgeScope): string;
@@ -43,6 +53,54 @@ export declare function upsertKnowledgeSource(db: Database, input: KnowledgeWrit
     sourceKind: string;
     sourceUri?: string | null;
 }): Promise<KnowledgeSourceRecord>;
+export declare function getKnowledgeSourceForSyncAuthority(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sourceId: string;
+    initiatingSubjectId: string;
+}): Promise<{
+    source: KnowledgeSourceRecord;
+    provider: KnowledgeProviderRecord;
+} | null>;
+export declare function getKnowledgeSourceByExternalIdentityForSyncAuthority(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    providerId: string;
+    externalSourceId: string;
+    initiatingSubjectId: string;
+}): Promise<KnowledgeSourceRecord | null>;
+export declare function getKnowledgeSourceAclForSyncAuthority(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sourceId: string;
+    generation: number;
+    initiatingSubjectId: string;
+}): Promise<KnowledgeSourceAclVersionRecord | null>;
+export declare function getKnowledgeSourceObjectForSyncAuthority(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sourceId: string;
+    externalObjectId: string;
+    initiatingSubjectId: string;
+}): Promise<KnowledgeSourceObjectRecord | null>;
+export declare function getKnowledgeDocumentVersionForSyncAuthority(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    versionId: string;
+    initiatingSubjectId: string;
+}): Promise<KnowledgeDocumentVersionRecord | null>;
+export declare function getKnowledgeDocumentVersionObservationForSyncAuthority(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    versionId: string;
+    initiatingSubjectId: string;
+}): Promise<{
+    version: KnowledgeDocumentVersionRecord;
+    sourceMetadata: Record<string, unknown>;
+    sourceUpdatedAt: string | null;
+    locationMetadata: Record<string, unknown>;
+    documentChunkCount: number;
+} | null>;
 export declare function appendKnowledgeSourceAclVersion(db: Database, input: Omit<KnowledgeWriteContext, "scope"> & {
     sourceId: string;
     audience: ScopedKnowledgeScope;
@@ -52,12 +110,42 @@ export declare function appendKnowledgeSourceAclVersion(db: Database, input: Omi
     agentAccess: boolean;
     reasonCode: string;
 }): Promise<KnowledgeSourceAclVersionRecord>;
+/** Atomically advance the source ACL to a deny generation and revoke every
+ * materialized retrieval path. Delivery pause alone is never authorization. */
+export declare function deauthorizeKnowledgeSourceRetrieval(db: Database, input: Omit<KnowledgeWriteContext, "scope"> & {
+    sourceId: string;
+    audience: ScopedKnowledgeScope;
+    reasonCode: string;
+}): Promise<KnowledgeSourceAclVersionRecord>;
+export declare function updateKnowledgeSourceDocumentObservationMetadata(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    initiatingSubjectId: string;
+    sourceId: string;
+    expectedSourceLifecycleGeneration: number;
+    objectId: string;
+    expectedObjectLifecycleGeneration: number;
+    versionId: string;
+    documentId: string;
+    title: string;
+    sourceUri: string;
+    sourceVersion: string;
+    sourceUpdatedAt: string | null;
+    syncObservation?: KnowledgeSourceSyncVersionObservationFence;
+}): Promise<void>;
 export declare function beginKnowledgeSyncRun(db: Database, input: Omit<KnowledgeWriteContext, "scope"> & {
     sourceId: string;
     expectedSourceLifecycleGeneration: number;
     expectedSyncGeneration: number;
     inputCursor: string | null;
 }): Promise<KnowledgeSyncRunRecord>;
+export declare function getKnowledgeSyncRunForSyncAuthority(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sourceId: string;
+    operationId: string;
+    initiatingSubjectId: string;
+}): Promise<KnowledgeSyncRunRecord | null>;
 export declare function completeKnowledgeSyncRun(db: Database, input: {
     accountId: string;
     workspaceId: string;
@@ -77,6 +165,7 @@ export declare function upsertKnowledgeSourceObject(db: Database, input: Omit<Kn
 }): Promise<KnowledgeSourceObjectRecord>;
 export declare function appendKnowledgeDocumentVersion(db: Database, input: Omit<KnowledgeWriteContext, "scope"> & {
     objectId: string;
+    expectedSourceLifecycleGeneration: number;
     expectedObjectLifecycleGeneration: number;
     expectedVersionGeneration: number;
     externalVersionId: string;
@@ -91,6 +180,13 @@ export declare function appendKnowledgeDocumentVersion(db: Database, input: Omit
     documentId?: string | null;
     fileId?: string | null;
     locationMetadata?: Record<string, unknown> | undefined;
+    documentObservationMetadata?: {
+        title: string;
+        sourceUri: string;
+        sourceVersion: string;
+        sourceUpdatedAt: string | null;
+    };
+    syncObservation?: KnowledgeSourceSyncVersionObservationFence;
     reasonCode: string;
 }): Promise<KnowledgeDocumentVersionRecord>;
 export declare function recordKnowledgeLifecycleEvent(db: Database, input: Omit<KnowledgeWriteContext, "scope"> & {

package/dist/session-control.d.ts

@@ -1,6 +1,6 @@
 import { type SessionMcpApprovalPolicy, type TurnInitiatorContext } from "@opengeni/contracts";
-import type { Database } from "./database";
-import * as schema from "./schema";
+import type { Database, SessionActivityDatabase } from "./database.js";
+import * as schema from "./schema.js";
 export declare const SESSION_ANCESTRY_LIMIT = 10000;
 export type WorkspaceControlLockMode = "none" | "share" | "update";
 export type EffectiveControlState = "active" | "paused";
@@ -130,8 +130,8 @@ export declare class SessionCommandIdempotencyError extends Error {
     constructor();
 }
 export declare class AgentCommandAuthorityError extends Error {
-    readonly code: "CALLER_STALE" | "CALLER_INTERRUPTED" | "SELF_OR_ANCESTOR_PAUSE" | "SELF_STEER";
-    constructor(code: "CALLER_STALE" | "CALLER_INTERRUPTED" | "SELF_OR_ANCESTOR_PAUSE" | "SELF_STEER", message: string);
+    readonly code: "CALLER_STALE" | "CALLER_INTERRUPTED" | "TARGET_NOT_VERTICAL" | "SELF_STEER";
+    constructor(code: "CALLER_STALE" | "CALLER_INTERRUPTED" | "TARGET_NOT_VERTICAL" | "SELF_STEER", message: string);
 }
 export declare function assertAgentCommandAuthorityInTransaction(db: Database, input: {
     workspaceId: string;
@@ -169,7 +169,7 @@ export type SessionEventWriteLocks = {
  *
  *   workspace_inference_controls (when control-aware)
  *     -> actual workspaces row FOR KEY SHARE
- *     -> session rows FOR UPDATE, UUID ordered
+ *     -> session rows FOR NO KEY UPDATE, UUID ordered
  *     -> exact turn rows FOR UPDATE, UUID ordered
  *     -> exact attempt rows FOR UPDATE, UUID ordered
  *
@@ -178,6 +178,11 @@ export type SessionEventWriteLocks = {
  * `FOR UPDATE` lock serialized unrelated sessions and inverted the activity
  * path's session -> implicit workspace-FK edge.
  *
+ * `FOR NO KEY UPDATE` is equally deliberate for sessions. Session primary and
+ * composite identity keys are immutable, so writers need to exclude only concurrent
+ * non-key mutation. Keeping FK `FOR KEY SHARE` checks compatible prevents the
+ * activity finalizer's workspace counter from participating in a lock cycle.
+ *
  * Complex lifecycle transactions may acquire allocator/control locks before
  * this helper and may discover exact turn IDs only after locking the session.
  * They use the explicit `already_locked` stages, while retaining the same
@@ -195,9 +200,30 @@ export declare function registerSessionTurnAttemptClaim(db: Database, input: {
     temporalWorkflowRunId: string;
     temporalActivityId: string;
     verifiedControlRevision: number;
+    authorityEpoch: number;
+    authorityVisibility: "user_private" | "workspace_shared";
+    authorityOwnerOrganizationMembershipId: string | null;
     mcpApprovalPolicies: Record<string, SessionMcpApprovalPolicy>;
     connectorActionPolicies: schema.ConnectorActionPolicySnapshotEntry[];
 }): Promise<typeof schema.sessionTurnAttempts.$inferSelect>;
+export type SessionAuthoritySnapshot = {
+    authorityEpoch: number;
+    authorityVisibility: "user_private" | "workspace_shared";
+    authorityOwnerOrganizationMembershipId: string | null;
+};
+/**
+ * Validate the complete accepted-attempt authority tuple. Missing or partial
+ * values are not legacy defaults: current claim writers must provide the
+ * exact locked session authority explicitly.
+ */
+export declare function assertSessionAuthoritySnapshot(input: {
+    attemptId?: string;
+    authorityEpoch: unknown;
+    authorityVisibility: unknown;
+    authorityOwnerOrganizationMembershipId: unknown;
+}): SessionAuthoritySnapshot;
+export declare function sessionAuthoritySnapshotMatchesSession(snapshot: SessionAuthoritySnapshot, session: Pick<typeof schema.sessions.$inferSelect, "authorityEpoch" | "visibility" | "ownerOrganizationMembershipId">): boolean;
+export declare function sessionAuthoritySnapshotsEqual(left: Pick<SessionAuthoritySnapshot, "authorityEpoch" | "authorityVisibility" | "authorityOwnerOrganizationMembershipId">, right: Pick<SessionAuthoritySnapshot, "authorityEpoch" | "authorityVisibility" | "authorityOwnerOrganizationMembershipId">): boolean;
 /**
  * Close the exact first-class owner while the caller still holds the owning
  * session/turn locks. Every path that clears `session_turns.active_attempt_id`
@@ -297,7 +323,7 @@ export type SessionControlMutationResult = {
     }>;
     replay: boolean;
 };
-export declare function mutateSessionControlInTransaction(db: Database, input: {
+export declare function mutateSessionControlInTransaction(db: SessionActivityDatabase, input: {
     accountId: string;
     workspaceId: string;
     sessionId: string;
@@ -307,7 +333,7 @@ export declare function mutateSessionControlInTransaction(db: Database, input: {
     reason?: string | null;
     expectedControlEtag?: string | null;
 }): Promise<SessionControlMutationResult>;
-export declare function autoResumeSessionBranchInTransaction(db: Database, input: {
+export declare function autoResumeSessionBranchInTransaction(db: SessionActivityDatabase, input: {
     workspaceId: string;
     sessionId: string;
     actor: string;