@opengeni/db 0.31.1 → 0.36.0

package/dist/schema.js

@@ -12,6 +12,7 @@ import {
   browserSessionAssociations,
   browserSessions,
   browserStateArtifacts,
+  browserStateUploads,
   capabilityApiFacets,
   capabilityCatalogItems,
   capabilityComponentOwners,
@@ -26,6 +27,7 @@ import {
   capabilityPlugins,
   capabilitySkillFacets,
   capabilitySkillFiles,
+  channels,
   codexAppsSettings,
   codexCapacityWaiters,
   codexCredentialLeases,
@@ -81,9 +83,9 @@ import {
   hostExportOutbox,
   imageGenerationOperations,
   importBatches,
-  integrationFeatureBindingOwners,
-  integrationFeatureBindings,
-  integrationFeatureFacets,
+  integrationFacetBindingOwners,
+  integrationFacetBindings,
+  integrationFacetDefinitions,
   integrationOauthClients,
   integrationOauthStateNonces,
   integrationSpecRevisions,
@@ -130,6 +132,10 @@ import {
   nestedAgentDepthConfiguration,
   networkRoutes,
   newSessionDrafts,
+  organizationMemberships,
+  organizationUserResourceAuthorities,
+  organizationUserResourceGrants,
+  organizationUserRetentionPolicies,
   packInstallationComponents,
   packInstallations,
   preferenceRegistryEvents,
@@ -161,6 +167,7 @@ import {
   sessionAttemptToolCatalogs,
   sessionCommandReceipts,
   sessionEvents,
+  sessionGoalRevisions,
   sessionGoals,
   sessionHistoryItems,
   sessionHumanInputRequests,
@@ -186,16 +193,25 @@ import {
   siteAuthConnections,
   slackBotDeleteOperations,
   slackBotPostOperations,
+  slackBotUpdateOperations,
   slackBotUserLinks,
   slackInstallationBindings,
+  slackInteractionActionHandles,
   slackInteractionInbox,
   slackInteractionProgressDeliveries,
   slackInteractions,
+  slackSharedTaskOrigins,
+  slackTaskPolicyActivationEvents,
+  slackTaskPolicyHeads,
+  slackTaskPolicyRevisions,
   slackUserLinkAccessRequestOperations,
   slackUserLinkAccessRequests,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
+  taskNoteEvents,
+  taskNoteWriteCapabilities,
+  taskNotes,
   temporalScheduleCleanupOutbox,
   transcriptionRecordingChunkStateValues,
   transcriptionRecordingChunks,
@@ -233,8 +249,13 @@ import {
   workspaceVariableSets,
   workspaceVideoGenerationPolicies,
   workspaceVideoGenerationQuotas,
-  workspaces
-} from "./chunk-MWDVXQOL.js";
+  workspaces,
+  xaiCapacityWaiters,
+  xaiCredentialLeases,
+  xaiRotationSettings,
+  xaiSessionAccountPins,
+  xaiSubscriptionCredentials
+} from "./chunk-5KTIEDX7.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
@@ -250,6 +271,7 @@ export {
   browserSessionAssociations,
   browserSessions,
   browserStateArtifacts,
+  browserStateUploads,
   capabilityApiFacets,
   capabilityCatalogItems,
   capabilityComponentOwners,
@@ -264,6 +286,7 @@ export {
   capabilityPlugins,
   capabilitySkillFacets,
   capabilitySkillFiles,
+  channels,
   codexAppsSettings,
   codexCapacityWaiters,
   codexCredentialLeases,
@@ -319,9 +342,9 @@ export {
   hostExportOutbox,
   imageGenerationOperations,
   importBatches,
-  integrationFeatureBindingOwners,
-  integrationFeatureBindings,
-  integrationFeatureFacets,
+  integrationFacetBindingOwners,
+  integrationFacetBindings,
+  integrationFacetDefinitions,
   integrationOauthClients,
   integrationOauthStateNonces,
   integrationSpecRevisions,
@@ -368,6 +391,10 @@ export {
   nestedAgentDepthConfiguration,
   networkRoutes,
   newSessionDrafts,
+  organizationMemberships,
+  organizationUserResourceAuthorities,
+  organizationUserResourceGrants,
+  organizationUserRetentionPolicies,
   packInstallationComponents,
   packInstallations,
   preferenceRegistryEvents,
@@ -399,6 +426,7 @@ export {
   sessionAttemptToolCatalogs,
   sessionCommandReceipts,
   sessionEvents,
+  sessionGoalRevisions,
   sessionGoals,
   sessionHistoryItems,
   sessionHumanInputRequests,
@@ -424,16 +452,25 @@ export {
   siteAuthConnections,
   slackBotDeleteOperations,
   slackBotPostOperations,
+  slackBotUpdateOperations,
   slackBotUserLinks,
   slackInstallationBindings,
+  slackInteractionActionHandles,
   slackInteractionInbox,
   slackInteractionProgressDeliveries,
   slackInteractions,
+  slackSharedTaskOrigins,
+  slackTaskPolicyActivationEvents,
+  slackTaskPolicyHeads,
+  slackTaskPolicyRevisions,
   slackUserLinkAccessRequestOperations,
   slackUserLinkAccessRequests,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
+  taskNoteEvents,
+  taskNoteWriteCapabilities,
+  taskNotes,
   temporalScheduleCleanupOutbox,
   transcriptionRecordingChunkStateValues,
   transcriptionRecordingChunks,
@@ -471,6 +508,11 @@ export {
   workspaceVariableSets,
   workspaceVideoGenerationPolicies,
   workspaceVideoGenerationQuotas,
-  workspaces
+  workspaces,
+  xaiCapacityWaiters,
+  xaiCredentialLeases,
+  xaiRotationSettings,
+  xaiSessionAccountPins,
+  xaiSubscriptionCredentials
 };
 //# sourceMappingURL=schema.js.map

package/dist/session-control.d.ts

@@ -130,8 +130,8 @@ export declare class SessionCommandIdempotencyError extends Error {
     constructor();
 }
 export declare class AgentCommandAuthorityError extends Error {
-    readonly code: "CALLER_STALE" | "CALLER_INTERRUPTED" | "SELF_OR_ANCESTOR_PAUSE" | "SELF_STEER";
-    constructor(code: "CALLER_STALE" | "CALLER_INTERRUPTED" | "SELF_OR_ANCESTOR_PAUSE" | "SELF_STEER", message: string);
+    readonly code: "CALLER_STALE" | "CALLER_INTERRUPTED" | "TARGET_NOT_VERTICAL" | "SELF_STEER";
+    constructor(code: "CALLER_STALE" | "CALLER_INTERRUPTED" | "TARGET_NOT_VERTICAL" | "SELF_STEER", message: string);
 }
 export declare function assertAgentCommandAuthorityInTransaction(db: Database, input: {
     workspaceId: string;
@@ -169,7 +169,7 @@ export type SessionEventWriteLocks = {
  *
  *   workspace_inference_controls (when control-aware)
  *     -> actual workspaces row FOR KEY SHARE
- *     -> session rows FOR UPDATE, UUID ordered
+ *     -> session rows FOR NO KEY UPDATE, UUID ordered
  *     -> exact turn rows FOR UPDATE, UUID ordered
  *     -> exact attempt rows FOR UPDATE, UUID ordered
  *
@@ -178,6 +178,11 @@ export type SessionEventWriteLocks = {
  * `FOR UPDATE` lock serialized unrelated sessions and inverted the activity
  * path's session -> implicit workspace-FK edge.
  *
+ * `FOR NO KEY UPDATE` is equally deliberate for sessions. Session primary and
+ * composite identity keys are immutable, so writers need to exclude only concurrent
+ * non-key mutation. Keeping FK `FOR KEY SHARE` checks compatible prevents the
+ * activity finalizer's workspace counter from participating in a lock cycle.
+ *
  * Complex lifecycle transactions may acquire allocator/control locks before
  * this helper and may discover exact turn IDs only after locking the session.
  * They use the explicit `already_locked` stages, while retaining the same
@@ -195,9 +200,30 @@ export declare function registerSessionTurnAttemptClaim(db: Database, input: {
     temporalWorkflowRunId: string;
     temporalActivityId: string;
     verifiedControlRevision: number;
+    authorityEpoch: number;
+    authorityVisibility: "user_private" | "workspace_shared";
+    authorityOwnerOrganizationMembershipId: string | null;
     mcpApprovalPolicies: Record<string, SessionMcpApprovalPolicy>;
     connectorActionPolicies: schema.ConnectorActionPolicySnapshotEntry[];
 }): Promise<typeof schema.sessionTurnAttempts.$inferSelect>;
+export type SessionAuthoritySnapshot = {
+    authorityEpoch: number;
+    authorityVisibility: "user_private" | "workspace_shared";
+    authorityOwnerOrganizationMembershipId: string | null;
+};
+/**
+ * Validate the complete accepted-attempt authority tuple. Missing or partial
+ * values are not legacy defaults: current claim writers must provide the
+ * exact locked session authority explicitly.
+ */
+export declare function assertSessionAuthoritySnapshot(input: {
+    attemptId?: string;
+    authorityEpoch: unknown;
+    authorityVisibility: unknown;
+    authorityOwnerOrganizationMembershipId: unknown;
+}): SessionAuthoritySnapshot;
+export declare function sessionAuthoritySnapshotMatchesSession(snapshot: SessionAuthoritySnapshot, session: Pick<typeof schema.sessions.$inferSelect, "authorityEpoch" | "visibility" | "ownerOrganizationMembershipId">): boolean;
+export declare function sessionAuthoritySnapshotsEqual(left: Pick<SessionAuthoritySnapshot, "authorityEpoch" | "authorityVisibility" | "authorityOwnerOrganizationMembershipId">, right: Pick<SessionAuthoritySnapshot, "authorityEpoch" | "authorityVisibility" | "authorityOwnerOrganizationMembershipId">): boolean;
 /**
  * Close the exact first-class owner while the caller still holds the owning
  * session/turn locks. Every path that clears `session_turns.active_attempt_id`

package/dist/session-tenancy.d.ts

@@ -0,0 +1,44 @@
+import { type Database } from "./database.js";
+export type SessionTenancyVisibility = "user_private" | "workspace_shared";
+export type TransitionSessionVisibilityInput = {
+    workspaceId: string;
+    sessionId: string;
+    actorSubjectId: string;
+    targetVisibility: SessionTenancyVisibility;
+    expectedAuthorityEpoch: number;
+    operationKey: string;
+};
+export type TransitionSessionVisibilityResult = {
+    operationId: string;
+    visibility: SessionTenancyVisibility;
+    authorityEpoch: number;
+    ownerOrganizationMembershipId: string | null;
+    changed: boolean;
+    replay: boolean;
+    interruptedAttemptCount: number;
+    cancelledTurnCount: number;
+    cancelledUpdateCount: number;
+    pausedGoalCount: number;
+    revokedGrantCount: number;
+};
+export type ForkSessionContentInput = {
+    sourceWorkspaceId: string;
+    sourceSessionId: string;
+    actorSubjectId: string;
+    destinationWorkspaceId: string;
+    destinationVisibility: SessionTenancyVisibility;
+    operationKey: string;
+};
+export type ForkSessionContentResult = {
+    operationId: string;
+    sessionId: string;
+    workspaceId: string;
+    visibility: SessionTenancyVisibility;
+    authorityEpoch: number;
+    copiedHistoryItemCount: number;
+    replay: boolean;
+};
+export declare function canonicalSessionVisibilityTransitionHash(input: Pick<TransitionSessionVisibilityInput, "sessionId" | "targetVisibility" | "expectedAuthorityEpoch">): string;
+export declare function canonicalSessionForkHash(input: Pick<ForkSessionContentInput, "sourceSessionId" | "destinationWorkspaceId" | "destinationVisibility">): string;
+export declare function transitionSessionVisibility(db: Database, input: TransitionSessionVisibilityInput): Promise<TransitionSessionVisibilityResult>;
+export declare function forkSessionContent(db: Database, input: ForkSessionContentInput): Promise<ForkSessionContentResult>;

package/dist/session-tenancy.js

@@ -0,0 +1,16 @@
+import {
+  canonicalSessionForkHash,
+  canonicalSessionVisibilityTransitionHash,
+  forkSessionContent,
+  transitionSessionVisibility
+} from "./chunk-F32YT7MP.js";
+import "./chunk-JC5QPLUM.js";
+import "./chunk-5KTIEDX7.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  canonicalSessionForkHash,
+  canonicalSessionVisibilityTransitionHash,
+  forkSessionContent,
+  transitionSessionVisibility
+};
+//# sourceMappingURL=session-tenancy.js.map

package/dist/session-tenancy.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}