@opengeni/db 0.31.1 → 0.36.0

package/dist/browser-auth.d.ts

@@ -1,5 +1,7 @@
-import { type AuthRun as AuthRunValue, type AuthRunListResponse as AuthRunListResponseValue, type AuthRunMutationResponse as AuthRunMutationResponseValue, type CreateInteractionInterventionRequest as CreateInteractionInterventionRequestValue, type CreateNetworkRouteRequest as CreateNetworkRouteRequestValue, type CreateSiteAuthConnectionRequest as CreateSiteAuthConnectionRequestValue, type InteractionIntervention as InteractionInterventionValue, type InteractionInterventionListResponse as InteractionInterventionListResponseValue, type InteractionInterventionMutationResponse as InteractionInterventionMutationResponseValue, type NetworkRoute as NetworkRouteValue, type NetworkRouteListResponse as NetworkRouteListResponseValue, type NetworkRouteMutationResponse as NetworkRouteMutationResponseValue, type ReportAuthRunRequest as ReportAuthRunRequestValue, type ResolveInteractionInterventionRequest as ResolveInteractionInterventionRequestValue, type SiteAuthConnection as SiteAuthConnectionValue, type SiteAuthConnectionListResponse as SiteAuthConnectionListResponseValue, type SiteAuthConnectionMutationResponse as SiteAuthConnectionMutationResponseValue, type StartAuthRunRequest as StartAuthRunRequestValue, type UpdateNetworkRouteRequest as UpdateNetworkRouteRequestValue, type UpdateSiteAuthConnectionRequest as UpdateSiteAuthConnectionRequestValue } from "@opengeni/contracts";
+import { type AuthRun as AuthRunValue, type AuthRunListResponse as AuthRunListResponseValue, type AuthRunMutationResponse as AuthRunMutationResponseValue, type CreateInteractionInterventionRequest as CreateInteractionInterventionRequestValue, type CreateNetworkRouteRequest as CreateNetworkRouteRequestValue, type CreateSiteAuthConnectionRequest as CreateSiteAuthConnectionRequestValue, type BrowserExternalAuthResult as BrowserExternalAuthResultValue, type ExternalAuthInteractiveRequest as ExternalAuthInteractiveRequestValue, type ExternalAuthRunRequest as ExternalAuthRunRequestValue, type ExternalAuthRunResponse as ExternalAuthRunResponseValue, type InteractionIntervention as InteractionInterventionValue, type InteractionInterventionListResponse as InteractionInterventionListResponseValue, type InteractionInterventionMutationResponse as InteractionInterventionMutationResponseValue, type NetworkRoute as NetworkRouteValue, type NetworkRouteListResponse as NetworkRouteListResponseValue, type NetworkRouteMutationResponse as NetworkRouteMutationResponseValue, type ProtectedAuthFillRequest as ProtectedAuthFillRequestValue, type ProtectedAuthFillResponse as ProtectedAuthFillResponseValue, type ReportAuthRunRequest as ReportAuthRunRequestValue, type ResolveInteractionInterventionRequest as ResolveInteractionInterventionRequestValue, type RequestHumanInteractionToolInput as RequestHumanInteractionToolInputValue, type SessionEvent, type SiteAuthAuthority as SiteAuthAuthorityValue, type SiteAuthConnection as SiteAuthConnectionValue, type SiteAuthConnectionListResponse as SiteAuthConnectionListResponseValue, type SiteAuthConnectionMutationResponse as SiteAuthConnectionMutationResponseValue, type StartAuthRunRequest as StartAuthRunRequestValue, type UpdateNetworkRouteRequest as UpdateNetworkRouteRequestValue, type UpdateSiteAuthConnectionRequest as UpdateSiteAuthConnectionRequestValue, type VerifyAuthRunRequest as VerifyAuthRunRequestValue } from "@opengeni/contracts";
 import { type Database } from "./database.js";
+import * as schema from "./schema.js";
+type ResourceOperationRow = typeof schema.interactionResourceOperations.$inferSelect;
 type InteractionMutationScope = {
     accountId: string;
     workspaceId: string;
@@ -14,6 +16,53 @@ export declare class InteractionResourceConflictError extends Error {
 export declare class InteractionResourceStateError extends Error {
     readonly name = "InteractionResourceStateError";
 }
+export type SiteAuthMaintenanceClaim = {
+    operationId: string;
+    sessionId: string;
+    accountId: string;
+    workspaceId: string;
+    siteAuthConnectionId: string;
+    connectionVersion: number;
+    action: "health_check" | "repair";
+    dueAt: Date;
+    claimedAt: Date;
+    name: string;
+    accountLabel: string;
+    loginUrl: string | null;
+    verificationUrlPrefixes: string[];
+    preferredIdentityId: string | null;
+    preferredPlacement: SiteAuthConnectionValue["preferredPlacement"];
+    preferredNetworkRouteId: string | null;
+    healthPolicy: SiteAuthConnectionValue["healthPolicy"];
+    verificationState: SiteAuthConnectionValue["verificationState"];
+};
+/** Claim a bounded cross-workspace batch. Stale pre-start claims keep the same
+ * operation/session ids, so worker loss repairs one durable dispatch. */
+export declare function claimSiteAuthMaintenance(db: Database, input: {
+    claimTimeoutMs: number;
+    limit: number;
+}): Promise<SiteAuthMaintenanceClaim[]>;
+/** Link the exact hidden maintenance claim to its service-created session in
+ * the caller's create transaction. A false result must abort that transaction. */
+export declare function confirmSiteAuthMaintenanceSessionInTransaction(tx: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    siteAuthConnectionId: string;
+    operationId: string;
+    sessionId: string;
+}): Promise<boolean>;
+/** Standalone wrapper retained for exact DB callers and tests. Session creation
+ * uses the in-transaction form so a changed claim cannot leave an empty shell. */
+export declare function confirmSiteAuthMaintenanceSession(db: Database, input: Parameters<typeof confirmSiteAuthMaintenanceSessionInTransaction>[1]): Promise<boolean>;
+/** Release an exact claim that failed before a maintenance session started. */
+export declare function deferSiteAuthMaintenance(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    siteAuthConnectionId: string;
+    operationId: string;
+    sessionId: string;
+    retryAt: Date;
+}): Promise<boolean>;
 export declare function listNetworkRoutes(db: Database, input: {
     accountId: string;
     workspaceId: string;
@@ -42,6 +91,32 @@ export declare function createSiteAuthConnection(db: Database, input: Interactio
 export declare function updateSiteAuthConnection(db: Database, input: InteractionMutationScope & {
     siteAuthConnectionId: string;
 } & UpdateSiteAuthConnectionRequestValue): Promise<SiteAuthConnectionMutationResponseValue>;
+type ExternalAuthOperationMetadata = {
+    schemaVersion: 1;
+    authRunVersion: number;
+    authority: Extract<SiteAuthAuthorityValue, {
+        kind: "external_provider";
+    }>;
+};
+export type ExternalAuthPreparation = {
+    run: AuthRunValue;
+    authority: ExternalAuthOperationMetadata["authority"];
+    operationState: ResourceOperationRow["state"];
+    response: ExternalAuthRunResponseValue | null;
+    replayed: boolean;
+};
+export type ProtectedAuthFillPreparation = {
+    run: AuthRunValue;
+    authority: SiteAuthAuthorityValue;
+    origins: string[];
+    credentialVersion: number | null;
+    operationState: ResourceOperationRow["state"];
+    response: ProtectedAuthFillResponseValue | null;
+    replayed: boolean;
+};
+export declare function getProtectedAuthFillPreparation(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+} & ProtectedAuthFillRequestValue): Promise<ProtectedAuthFillPreparation | null>;
 export declare function listAuthRuns(db: Database, input: {
     accountId: string;
     workspaceId: string;
@@ -54,13 +129,103 @@ export declare function getAuthRun(db: Database, input: {
     workspaceId: string;
     authRunId: string;
 }): Promise<AuthRunValue>;
+export type ExternalAuthInteractiveContext = {
+    run: AuthRunValue;
+    authority: Extract<SiteAuthAuthorityValue, {
+        kind: "external_provider";
+    }>;
+};
+/** Resolve only the durable authority needed to reveal an external provider's
+ * hosted login UI. The hosted URL itself is deliberately never persisted. */
+export declare function getExternalAuthInteractiveContext(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+} & ExternalAuthInteractiveRequestValue): Promise<ExternalAuthInteractiveContext>;
 export declare function startAuthRun(db: Database, input: InteractionMutationScope & {
     browserSessionId: string;
+    controllerGeneration: string;
+    /** Trusted attempt provenance supplied by the API grant. */
+    originatingSessionId?: string | null;
 } & StartAuthRunRequestValue): Promise<AuthRunMutationResponseValue>;
+export type SettleSessionMaintenanceResult = {
+    cancelledAuthRuns: number;
+    releasedClaim: boolean;
+};
+/** A terminal-for-now maintenance session cannot leave an AuthRun or its claim
+ * pinned. Interventions settle linked runs first; this covers every other path. */
+export declare function settleSessionMaintenanceInTransaction(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+}): Promise<SettleSessionMaintenanceResult>;
 export declare function reportAuthRun(db: Database, input: InteractionMutationScope & {
     authRunId: string;
     controllerGeneration: string;
 } & ReportAuthRunRequestValue): Promise<AuthRunMutationResponseValue>;
+export declare function getExternalAuthPreparation(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+} & ExternalAuthRunRequestValue): Promise<ExternalAuthPreparation | null>;
+export declare function prepareExternalAuth(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+} & ExternalAuthRunRequestValue): Promise<ExternalAuthPreparation>;
+export declare function dispatchExternalAuth(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+    operationId: string;
+}): Promise<ResourceOperationRow["state"]>;
+export declare function completeExternalAuth(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+    operationId: string;
+    result: BrowserExternalAuthResultValue;
+    target?: {
+        id: string;
+        targetGeneration: string;
+        documentGeneration: string | null;
+    };
+    intervention?: {
+        originatingSessionId: string;
+        originatingTurnId?: string | null;
+        originatingAttemptId?: string | null;
+        originatingToolOperationId?: string | null;
+        expiresInSeconds: number;
+    };
+}): Promise<ExternalAuthRunResponseValue>;
+export declare function prepareProtectedAuthFill(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+    credentialVersion: number | null;
+} & ProtectedAuthFillRequestValue): Promise<ProtectedAuthFillPreparation>;
+export declare function dispatchProtectedAuthFill(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+    operationId: string;
+}): Promise<ResourceOperationRow["state"]>;
+export declare function completeProtectedAuthFill(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+    operationId: string;
+    status: ProtectedAuthFillResponseValue["status"];
+    targetGeneration?: string;
+    documentGeneration?: string | null;
+    failureCode?: string;
+    intervention?: {
+        originatingSessionId: string;
+        originatingTurnId?: string | null;
+        originatingAttemptId?: string | null;
+        originatingToolOperationId?: string | null;
+        kind: "manual_login" | "mfa" | "external_action" | "confirmation" | "other";
+        reason: string;
+        expiresInSeconds: number;
+    };
+}): Promise<ProtectedAuthFillResponseValue>;
+export declare function markProtectedAuthFillOutcomeUnknown(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+    operationId: string;
+    errorCode: string;
+}): Promise<void>;
+export declare function verifyAuthRun(db: Database, input: InteractionMutationScope & {
+    authRunId: string;
+    controllerGeneration: string;
+    targetId: string;
+    targetGeneration: string;
+    documentGeneration: string | null;
+    url: string;
+} & VerifyAuthRunRequestValue): Promise<AuthRunMutationResponseValue>;
 export declare function listInteractionInterventions(db: Database, input: {
     accountId: string;
     workspaceId: string;
@@ -73,15 +238,58 @@ export declare function getInteractionIntervention(db: Database, input: {
     workspaceId: string;
     interventionId: string;
 }): Promise<InteractionInterventionValue>;
+export type AttemptInteractionInterventionRequest = {
+    id: string;
+    operationId: string;
+    accountId: string;
+    workspaceId: string;
+    originatingSessionId: string;
+    originatingTurnId: string;
+    originatingAttemptId: string;
+    toolCallId: string;
+    input: RequestHumanInteractionToolInputValue;
+};
+/**
+ * Persist one interaction interruption inside the same transaction as its
+ * frozen Agent RunState. This is deliberately transaction-local: callers must
+ * already hold the session/turn/attempt settlement locks and RLS context.
+ */
+export declare function persistAttemptInteractionInterventionInTransaction(db: Database, raw: AttemptInteractionInterventionRequest): Promise<InteractionInterventionValue>;
+export declare function getInteractionInterventionApprovalTarget(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    interventionId: string;
+}): Promise<{
+    sessionId: string;
+    toolCallId: string;
+} | null>;
+export declare function getInteractionInterventionResumeForEvent(db: Database, workspaceId: string, sessionId: string, event: Pick<SessionEvent, "type" | "payload">): Promise<{
+    toolCallId: string;
+    intervention: InteractionInterventionValue;
+} | null>;
 export declare function createInteractionIntervention(db: Database, input: InteractionMutationScope & CreateInteractionInterventionRequestValue & {
     originatingSessionId: string;
     originatingTurnId?: string | null;
     originatingAttemptId?: string | null;
     originatingToolOperationId?: string | null;
 }): Promise<InteractionInterventionMutationResponseValue>;
+export declare function resolveInteractionInterventionInTransaction(db: Database, input: InteractionMutationScope & {
+    interventionId: string;
+} & ResolveInteractionInterventionRequestValue): Promise<InteractionInterventionMutationResponseValue>;
 export declare function resolveInteractionIntervention(db: Database, input: InteractionMutationScope & {
     interventionId: string;
 } & ResolveInteractionInterventionRequestValue): Promise<InteractionInterventionMutationResponseValue>;
+/**
+ * Cancel every still-open intervention created by a logical agent turn when
+ * that turn becomes terminal. The caller already owns the turn-settlement
+ * transaction, so no resource can outlive the terminal session truth.
+ */
+export declare function cancelTurnInteractionInterventionsInTransaction(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    turnId: string;
+}): Promise<number>;
 export declare function cancelOpenInteractionInterventions(db: Database, input: {
     accountId: string;
     workspaceId: string;

package/dist/browser-downloads.d.ts

@@ -0,0 +1,51 @@
+import { type BrowserDownload as BrowserDownloadValue, type BrowserDownloadSaveRequest as BrowserDownloadSaveRequestValue, type BrowserDownloadSaveResponse as BrowserDownloadSaveResponseValue } from "@opengeni/contracts";
+import { type Database } from "./database.js";
+import * as schema from "./schema.js";
+type OperationRow = typeof schema.interactionResourceOperations.$inferSelect;
+type SaveMetadata = {
+    browserSessionId: string;
+    controllerGeneration: string;
+    sourceSessionId: string;
+    destinationPath: string;
+    overwrite: boolean;
+    fileId: string;
+    uploadId: string;
+    objectKey: string;
+    safeFilename: string;
+    contentType: string;
+    download: BrowserDownloadValue;
+};
+export type BrowserDownloadSavePreparation = SaveMetadata & {
+    operationId: string;
+    state: OperationRow["state"];
+    errorCode: string | null;
+    replayed: boolean;
+    dispatchedNow: boolean;
+    response: BrowserDownloadSaveResponseValue | null;
+};
+type SaveIdentity = {
+    accountId: string;
+    workspaceId: string;
+    actorSubjectId: string;
+    browserSessionId: string;
+    downloadId: string;
+    request: BrowserDownloadSaveRequestValue;
+};
+export declare function findBrowserDownloadSave(db: Database, inputValue: SaveIdentity): Promise<BrowserDownloadSavePreparation | null>;
+export declare function prepareBrowserDownloadSave(db: Database, inputValue: SaveIdentity & {
+    sourceSessionId: string;
+    download: BrowserDownloadValue;
+    fileId: string;
+    safeFilename: string;
+    contentType: string;
+    bucket: string;
+    objectKey: string;
+    uploadExpiresAt: Date;
+}): Promise<BrowserDownloadSavePreparation>;
+export declare function dispatchBrowserDownloadSave(db: Database, inputValue: SaveIdentity): Promise<BrowserDownloadSavePreparation>;
+export declare function completeBrowserDownloadSave(db: Database, inputValue: SaveIdentity): Promise<BrowserDownloadSaveResponseValue>;
+export declare function settleBrowserDownloadSaveFailure(db: Database, inputValue: SaveIdentity & {
+    state: "failed" | "outcome_unknown";
+    errorCode: string;
+}): Promise<void>;
+export {};

package/dist/browser-identities.d.ts

@@ -1,4 +1,4 @@
-import { type BrowserIdentity as BrowserIdentityValue, type BrowserIdentityListResponse as BrowserIdentityListResponseValue, type BrowserIdentityMutationResponse as BrowserIdentityMutationResponseValue, type BrowserRevision as BrowserRevisionValue, type BrowserRevisionListResponse as BrowserRevisionListResponseValue, type BrowserRevisionMaterialization as BrowserRevisionMaterializationValue, type InteractionError as InteractionErrorValue, type PublishBrowserRevisionResponse as PublishBrowserRevisionResponseValue } from "@opengeni/contracts";
+import { type BrowserIdentity as BrowserIdentityValue, type BrowserIdentityListResponse as BrowserIdentityListResponseValue, type BrowserIdentityMutationResponse as BrowserIdentityMutationResponseValue, type BrowserRevision as BrowserRevisionValue, type BrowserRevisionListResponse as BrowserRevisionListResponseValue, type BrowserRevisionMaterialization as BrowserRevisionMaterializationValue, type InteractionError as InteractionErrorValue, type PublishBrowserRevisionResponse as PublishBrowserRevisionResponseValue, type UpdateBrowserIdentityRequest as UpdateBrowserIdentityRequestValue } from "@opengeni/contracts";
 import { type Database } from "./database.js";
 import { type BrowserStateArtifactCommitInput } from "./browser-state-artifacts.js";
 export declare class BrowserIdentityNotFoundError extends Error {
@@ -10,7 +10,6 @@ export declare class BrowserIdentityConflictError extends Error {
 export declare class BrowserIdentityStateError extends Error {
     readonly name = "BrowserIdentityStateError";
 }
-export type { BrowserStateArtifactCommitInput } from "./browser-state-artifacts.js";
 export type BrowserRevisionPublicationPreparation = {
     kind: "completed";
     response: PublishBrowserRevisionResponseValue;
@@ -68,6 +67,12 @@ export declare function createBrowserIdentity(db: Database, input: {
     name: string;
     actorSubjectId: string;
 }): Promise<BrowserIdentityMutationResponseValue>;
+export declare function updateBrowserIdentity(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    identityId: string;
+    actorSubjectId: string;
+} & UpdateBrowserIdentityRequestValue): Promise<BrowserIdentityMutationResponseValue>;
 export declare function browserRevisionPublicationRequestDigest(input: {
     browserSessionId: string;
     identityId: string;
@@ -95,6 +100,10 @@ export declare function dispatchBrowserRevisionPublication(db: Database, input:
     expectedHeadGeneration: number;
     advanceDefault: boolean;
     actorSubjectId: string;
+    stateUpload?: {
+        objectKey: string;
+        cleanupAfter: Date;
+    };
 }): Promise<BrowserRevisionPublicationDispatch>;
 export declare function commitBrowserRevisionPublication(db: Database, input: {
     accountId: string;

package/dist/browser-sessions.d.ts

@@ -1,4 +1,4 @@
-import { BrowserSession, InteractionControllerBinding, type BrowserSessionCapabilities as BrowserSessionCapabilitiesValue, type BrowserRevisionMaterialization as BrowserRevisionMaterializationValue, type BrowserSessionListResponse as BrowserSessionListResponseValue, type BrowserSessionMutationResponse as BrowserSessionMutationResponseValue, type InteractionError as InteractionErrorValue, type InteractionLifecycleOperationKind, type InteractionLifecycleOperationReceipt as InteractionLifecycleOperationReceiptValue, type InteractionPlacement } from "@opengeni/contracts";
+import { BrowserSession, InteractionControllerBinding, type BrowserSessionCapabilities as BrowserSessionCapabilitiesValue, type BrowserRevisionMaterialization as BrowserRevisionMaterializationValue, type BrowserSessionListResponse as BrowserSessionListResponseValue, type BrowserSessionMutationResponse as BrowserSessionMutationResponseValue, type InteractionError as InteractionErrorValue, type InteractionLifecycleOperationKind, type InteractionLifecycleOperationReceipt as InteractionLifecycleOperationReceiptValue, type InteractionPlacement, type NetworkRouteConfiguration as NetworkRouteConfigurationValue, type NetworkRouteConsistency as NetworkRouteConsistencyValue } from "@opengeni/contracts";
 import { type Database } from "./database.js";
 import { type BrowserStateArtifactCommitInput } from "./browser-state-artifacts.js";
 import * as schema from "./schema.js";
@@ -13,6 +13,7 @@ export declare const MANAGED_BROWSER_SESSION_CAPABILITIES: {
     downloads: boolean;
     uploads: boolean;
     clipboard: boolean;
+    permissions: boolean;
     diagnostics: boolean;
     rawCdp: boolean;
     linkedComputer: boolean;
@@ -29,6 +30,45 @@ export declare const ATTACHED_BROWSER_SESSION_CAPABILITIES: {
     downloads: boolean;
     uploads: boolean;
     clipboard: boolean;
+    permissions: boolean;
+    diagnostics: boolean;
+    rawCdp: boolean;
+    linkedComputer: boolean;
+    privateCheckpoint: boolean;
+    identityPublication: boolean;
+    parallelTargets: boolean;
+};
+/** Remote Chromium controlled through the same native CDP driver. Files and
+ * portable profile state remain false because their bytes live on another host. */
+export declare const EXTERNAL_BROWSER_SESSION_CAPABILITIES: {
+    semanticObservation: boolean;
+    screenshots: boolean;
+    liveFrames: boolean;
+    humanInput: boolean;
+    tabs: boolean;
+    downloads: boolean;
+    uploads: boolean;
+    clipboard: boolean;
+    permissions: boolean;
+    diagnostics: boolean;
+    rawCdp: boolean;
+    linkedComputer: boolean;
+    privateCheckpoint: boolean;
+    identityPublication: boolean;
+    parallelTargets: boolean;
+};
+/** Measured against Lightpanda 0.3.5. Unsupported Chromium-only affordances
+ * remain false instead of being emulated or silently routed elsewhere. */
+export declare const LIGHTPANDA_BROWSER_SESSION_CAPABILITIES: {
+    semanticObservation: boolean;
+    screenshots: boolean;
+    liveFrames: boolean;
+    humanInput: boolean;
+    tabs: boolean;
+    downloads: boolean;
+    uploads: boolean;
+    clipboard: boolean;
+    permissions: boolean;
     diagnostics: boolean;
     rawCdp: boolean;
     linkedComputer: boolean;
@@ -91,7 +131,11 @@ export type BrowserSessionControlRecord = {
     session: BrowserSession;
     tokenGeneration: number;
     sourceSessionId: string;
+    /** Placement hosting browserd. It equals the logical sandbox placement for
+     * managed browsers and remains the source home sandbox for remote browsers. */
+    controllerHostSandboxGroupId: string | null;
     createOperationId: string;
+    networkRouteAuthority: BrowserSessionNetworkRouteAuthority | null;
     operation: null | {
         operationId: string;
         kind: InteractionLifecycleOperationKind;
@@ -100,6 +144,14 @@ export type BrowserSessionControlRecord = {
         actorSubjectId: string;
     };
 };
+export type BrowserSessionNetworkRouteAuthority = {
+    routeId: string;
+    routeVersion: number;
+    credentialVersion: number | null;
+    authorityDigest: string | null;
+    configuration: NetworkRouteConfigurationValue;
+    consistency: NetworkRouteConsistencyValue;
+};
 export declare function browserSessionCreateRequestDigest(input: PrepareBrowserSessionCreateInput): string;
 export declare function listBrowserSessions(db: Database, input: {
     accountId: string;
@@ -151,6 +203,7 @@ export declare function getBrowserSession(db: Database, input: {
         downloads: boolean;
         uploads: boolean;
         clipboard: boolean;
+        permissions: boolean;
         diagnostics: boolean;
         rawCdp: boolean;
         linkedComputer: boolean;
@@ -191,6 +244,20 @@ export declare function findBrowserSessionControlRecordByOperation(db: Database,
     operationId: string;
 }): Promise<BrowserSessionControlRecord | null>;
 export declare function prepareBrowserSessionCreate(db: Database, input: PrepareBrowserSessionCreateInput): Promise<BrowserSessionMutationResponseValue>;
+/**
+ * Bind the broker-resolved, secret-free launch authority before controller
+ * dispatch. A prepared operation may refresh this binding while no physical
+ * controller owns it; after dispatch it is immutable and replay-fenced.
+ */
+export declare function bindBrowserSessionNetworkRouteAuthority(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    browserSessionId: string;
+    operationId: string;
+    routeVersion: number;
+    credentialVersion: number | null;
+    authorityDigest: string;
+}): Promise<BrowserSessionNetworkRouteAuthority>;
 export declare function dispatchBrowserSessionOperation(db: Database, input: {
     accountId: string;
     workspaceId: string;
@@ -198,7 +265,22 @@ export declare function dispatchBrowserSessionOperation(db: Database, input: {
     browserSessionId: string;
     controllerGeneration: string;
     controller?: InteractionControllerBinding;
+    stateUpload?: {
+        objectKey: string;
+        cleanupAfter: Date;
+    };
 }): Promise<InteractionLifecycleOperationReceiptValue>;
+/** Pulse one exact dispatched lifecycle operation while its controller mutation
+ * is still in flight. This is not viewer or resource activity: it exists only
+ * so the global reaper can distinguish a long profile transfer from an API
+ * caller that disappeared after dispatch. */
+export declare function touchInteractionOperation(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    operationId: string;
+    resourceId: string;
+    controllerGeneration: string;
+}): Promise<boolean>;
 export declare function activateBrowserSession(db: Database, input: {
     accountId: string;
     workspaceId: string;

package/dist/browser-state-artifacts.d.ts

@@ -1,6 +1,8 @@
 import { type BrowserRevisionMaterialization as BrowserRevisionMaterializationValue } from "@opengeni/contracts";
-import type * as schema from "./schema.js";
+import { type Database } from "./database.js";
+import * as schema from "./schema.js";
 type BrowserStateArtifactRow = typeof schema.browserStateArtifacts.$inferSelect;
+type BrowserStateUploadRow = typeof schema.browserStateUploads.$inferSelect;
 export type BrowserStateArtifactCommitInput = {
     kind: BrowserStateArtifactRow["kind"];
     format: string;
@@ -12,6 +14,78 @@ export type BrowserStateArtifactCommitInput = {
     sizeBytes: number;
     materialization: BrowserRevisionMaterializationValue;
 };
+export type BrowserStateArtifactCleanupClaim = {
+    claimId: string;
+    artifactId: string;
+    accountId: string;
+    workspaceId: string;
+    objectKey: string;
+};
+export type BrowserStateUploadPurpose = BrowserStateUploadRow["purpose"];
+export type BrowserStateUploadCleanupClaim = {
+    claimId: string;
+    uploadId: string;
+    accountId: string;
+    workspaceId: string;
+    objectKey: string;
+};
+export declare class BrowserStateUploadStateError extends Error {
+    readonly name = "BrowserStateUploadStateError";
+}
+export type BrowserStateUploadPreparationInput = {
+    accountId: string;
+    workspaceId: string;
+    operationId: string;
+    sourceBrowserSessionId: string;
+    purpose: BrowserStateUploadPurpose;
+    objectKey: string;
+    cleanupAfter: Date;
+};
 /** Validate storage authority before it can become durable state. */
 export declare function validateBrowserStateArtifactCommitInput(workspaceId: string, value: BrowserStateArtifactCommitInput): BrowserStateArtifactCommitInput;
+/** Establish durable cleanup authority before a controller receives a PUT URL. */
+export declare function prepareBrowserStateUpload(db: Database, input: BrowserStateUploadPreparationInput): Promise<{
+    uploadId: string;
+    state: BrowserStateUploadRow["state"];
+}>;
+/** Compose upload authority with operation dispatch in one transaction. */
+export declare function prepareBrowserStateUploadInTransaction(db: Database, input: BrowserStateUploadPreparationInput): Promise<{
+    uploadId: string;
+    state: BrowserStateUploadRow["state"];
+}>;
+/** Queue every uncommitted object owned by a terminal capture operation. */
+export declare function markBrowserStateUploadsDeletePendingInTransaction(db: Database, input: {
+    workspaceId: string;
+    operationId: string;
+}): Promise<void>;
+/** Atomically turn one pre-upload authority into the exact artifact root. */
+export declare function commitBrowserStateUploadInTransaction(db: Database, input: {
+    workspaceId: string;
+    operationId: string;
+    sourceBrowserSessionId: string;
+    purpose: BrowserStateUploadPurpose;
+    objectKey: string;
+    artifactId: string;
+}): Promise<void>;
+/**
+ * Claim a bounded cross-workspace batch of retired private checkpoints. The
+ * privileged SQL function is the only FORCE-RLS bypass; stale claims are
+ * reclaimable and published revision components are structurally ineligible.
+ */
+export declare function claimBrowserStateArtifactCleanup(db: Database, input: {
+    claimTimeoutMs: number;
+    limit: number;
+}): Promise<BrowserStateArtifactCleanupClaim[]>;
+/**
+ * Settle one exact claim only after its provider object was deleted. Completion
+ * is idempotent after a lost response and erases the wrapped data key.
+ */
+export declare function completeBrowserStateArtifactCleanup(db: Database, input: BrowserStateArtifactCleanupClaim): Promise<boolean>;
+/** Claim orphan/failed upload objects after their safety horizon. */
+export declare function claimBrowserStateUploadCleanup(db: Database, input: {
+    claimTimeoutMs: number;
+    limit: number;
+}): Promise<BrowserStateUploadCleanupClaim[]>;
+/** Tombstone one exact orphan upload after its provider object is absent. */
+export declare function completeBrowserStateUploadCleanup(db: Database, input: BrowserStateUploadCleanupClaim): Promise<boolean>;
 export {};

package/dist/canonical-human-identities.d.ts

@@ -0,0 +1,48 @@
+import { type CanonicalHumanIdentityMutationResponse as CanonicalHumanIdentityMutationResponseType, type CanonicalHumanIdentityProjection as CanonicalHumanIdentityProjectionType } from "@opengeni/contracts/canonical-human-identities";
+import type { Database } from "./database.js";
+export type CanonicalHumanSessionAuthority = {
+    identityId: string;
+    identityRevision: number;
+    authRevision: number;
+    identityStatus: "active" | "recovery_required" | "disputed" | "disabled";
+};
+export declare class CanonicalHumanIdentityConflictError extends Error {
+    readonly name = "CanonicalHumanIdentityConflictError";
+    readonly code = "CANONICAL_HUMAN_IDENTITY_CONFLICT";
+    constructor();
+}
+export declare class CanonicalHumanIdentityOperationReuseError extends Error {
+    readonly name = "CanonicalHumanIdentityOperationReuseError";
+    readonly code = "CANONICAL_HUMAN_IDENTITY_OPERATION_REUSED";
+    constructor();
+}
+export declare class CanonicalHumanIdentityNotFoundError extends Error {
+    readonly name = "CanonicalHumanIdentityNotFoundError";
+    constructor(message?: string);
+}
+export declare class CanonicalHumanIdentityAuthorityError extends Error {
+    readonly name = "CanonicalHumanIdentityAuthorityError";
+}
+export declare function ensureCanonicalHumanIdentity(db: Database, input: {
+    authUserId: string;
+    displayName: string;
+}): Promise<CanonicalHumanSessionAuthority>;
+export declare function ensureCanonicalHumanIdentityForAuthUser(db: Database, authUserId: string): Promise<CanonicalHumanSessionAuthority>;
+export declare function synchronizeCanonicalHumanLoginBindings(db: Database, authUserId: string): Promise<CanonicalHumanSessionAuthority>;
+export declare function validateCanonicalHumanSession(db: Database, input: {
+    authSessionId: string;
+    authUserId: string;
+    allowRecovery?: boolean;
+}): Promise<boolean>;
+export declare function getCanonicalHumanIdentityProjection(db: Database, authUserId: string): Promise<CanonicalHumanIdentityProjectionType>;
+export type ApplyCanonicalHumanIdentityOperationInput = {
+    operationId: string;
+    authUserId: string;
+    expectedIdentityRevision: number;
+    operationType: "link" | "unlink" | "begin_recovery" | "recover";
+    bindingId?: string | null;
+    providerId?: string | null;
+    providerAccountId?: string | null;
+    reason: string;
+};
+export declare function applyCanonicalHumanIdentityOperation(db: Database, input: ApplyCanonicalHumanIdentityOperationInput): Promise<CanonicalHumanIdentityMutationResponseType>;

package/dist/canonical-human-identities.js

@@ -0,0 +1,28 @@
+import {
+  CanonicalHumanIdentityAuthorityError,
+  CanonicalHumanIdentityConflictError,
+  CanonicalHumanIdentityNotFoundError,
+  CanonicalHumanIdentityOperationReuseError,
+  applyCanonicalHumanIdentityOperation,
+  ensureCanonicalHumanIdentity,
+  ensureCanonicalHumanIdentityForAuthUser,
+  getCanonicalHumanIdentityProjection,
+  synchronizeCanonicalHumanLoginBindings,
+  validateCanonicalHumanSession
+} from "./chunk-TAUTWOS5.js";
+import "./chunk-JC5QPLUM.js";
+import "./chunk-5KTIEDX7.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  CanonicalHumanIdentityAuthorityError,
+  CanonicalHumanIdentityConflictError,
+  CanonicalHumanIdentityNotFoundError,
+  CanonicalHumanIdentityOperationReuseError,
+  applyCanonicalHumanIdentityOperation,
+  ensureCanonicalHumanIdentity,
+  ensureCanonicalHumanIdentityForAuthUser,
+  getCanonicalHumanIdentityProjection,
+  synchronizeCanonicalHumanLoginBindings,
+  validateCanonicalHumanSession
+};
+//# sourceMappingURL=canonical-human-identities.js.map

package/dist/canonical-human-identities.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}