@opengeni/db 0.36.0 → 1.0.1

package/dist/knowledge-source-sync.d.ts

@@ -30,6 +30,38 @@ export type KnowledgeSourceSyncObservationFence = {
     executionCheckpointGeneration: number;
     observations: KnowledgeSourceSyncObservationFloor[];
 };
+export type GoogleDriveObjectAclPrincipal = {
+    type: "user" | "group" | "domain" | "anyone";
+    permissionId?: string | null;
+    emailAddress?: string | null;
+    domain?: string | null;
+    role: "owner" | "organizer" | "fileOrganizer" | "writer" | "commenter" | "reader";
+    inherited?: boolean;
+    allowFileDiscovery?: boolean | null;
+    expirationTime?: string | null;
+};
+export type GoogleDriveObjectAclEvidenceInput = {
+    accountId: string;
+    workspaceId: string;
+    obligationId: string;
+    connectionId: string;
+    connectionVersion: number;
+    sourceGooglePermissionId: string;
+    sourceSyncGeneration: number;
+    sourceConfigGeneration: number;
+    sourceLifecycleGeneration: number;
+    objectLifecycleGeneration: number;
+    objectVersionGeneration: number;
+    providerRevision: string | null;
+    driveId: string | null;
+    aclRevision: string;
+    eligibility: "eligible" | "denied";
+    observedAt: string;
+    expiresAt: string;
+    citationLocator: Record<string, unknown>;
+    operationId: string;
+    principals: GoogleDriveObjectAclPrincipal[];
+};
 export type KnowledgeSourceSyncObjectObservationResult = KnowledgeSourceSyncObservationFloor & {
     disposition: "accepted" | "replayed" | "stale" | "conflict";
     currentVersion: {
@@ -241,6 +273,34 @@ export declare function recordKnowledgeSourceSyncAclEvidence(db: Database, input
     eligibility: "eligible" | "denied";
     evidence: Record<string, unknown>;
 }): Promise<void>;
+/**
+ * Persist one append-only Google Drive object ACL observation and atomically
+ * make it the current authorization pointer for the exact index obligation.
+ * Raw provider principals never enter storage: only domain-separated hashes
+ * are retained. Denial deletes chunks in the same transaction so stale vector
+ * or keyword rows cannot survive permission loss.
+ */
+export declare function recordGoogleDriveObjectAclEvidence(db: Database, input: GoogleDriveObjectAclEvidenceInput): Promise<{
+    evidenceId: string;
+    aclHash: string;
+}>;
+/**
+ * Clear the current Drive authorization pointer before provider I/O without
+ * destroying an otherwise valid index. All read surfaces immediately deny
+ * because agent_access is false and the current evidence pointer is null. A
+ * successful refresh can restore access without re-embedding; a final denied
+ * observation uses recordGoogleDriveObjectAclEvidence and deletes chunks.
+ */
+export declare function beginGoogleDriveObjectAclRefresh(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    obligationId: string;
+    sourceSyncGeneration: number;
+    sourceConfigGeneration: number;
+    sourceLifecycleGeneration: number;
+    objectLifecycleGeneration: number;
+    objectVersionGeneration: number;
+}): Promise<void>;
 /** Bounded retention hook. Callers choose policy and cadence; pending index or
  * ACL obligations are never deleted by age alone. */
 export declare function pruneKnowledgeSourceSyncEvidence(db: Database, input: {

package/dist/persistence-errors.d.ts

@@ -23,6 +23,14 @@ export type PersistenceFailureDetails = {
 export declare function nestedPostgresSqlState(error: unknown): string | null;
 export declare function databaseFailureCode(sqlState: string | null): DatabaseFailureCode;
 export declare function isRetryablePersistenceSqlState(sqlState: string | null): boolean;
+/**
+ * Recognize only explicit postgres.js/Node transport codes, including nested
+ * driver causes. These failures can arrive as plain Errors with no SQLSTATE or
+ * database diagnostic fields when the connection dies before PostgreSQL can
+ * answer. Messages are intentionally ignored: they are unstable and may
+ * contain connection detail.
+ */
+export declare function isRetryableDatabaseTransportFailure(error: unknown): boolean;
 /**
  * Distinguish database/ORM failures from expected domain exceptions when a
  * driver omitted SQLSTATE. This checks shape only; callers retain the original

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-VKLB2ZGI.js";
+} from "./chunk-NXAFLCQX.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/runtime-posture.d.ts

@@ -1,12 +1,12 @@
 import type { Database, RlsStrategy } from "./database.js";
-export declare const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES: readonly ["fork_session_content(uuid, uuid, uuid, text, uuid, text, text, text)", "xai_subscription_authority_live(uuid, uuid, text, uuid, text, uuid, uuid, bigint)", "create_xai_subscription_credential(uuid, uuid, text, text, text, text, text, text, text, timestamp with time zone)", "disconnect_xai_subscription_credential(uuid, uuid, text, uuid, jsonb)", "knowledge_source_sync_lock_authority(uuid, uuid, uuid)", "ensure_managed_human_personal_workspace(uuid, text, uuid)", "ensure_canonical_human_identity(text, text)", "validate_canonical_human_session(text, text, boolean)", "get_canonical_human_identity_projection(text)", "apply_canonical_human_identity_operation(uuid, text, bigint, text, uuid, text, text, text)", "session_private_actor_visible(uuid, uuid, uuid, text)", "session_reference_visible(uuid, uuid, uuid)", "transition_session_visibility(uuid, uuid, uuid, text, text, integer, text, text)", "xai_subscription_pool_visible(uuid, uuid, text, text, uuid)", "resolve_xai_authority_pool(uuid, uuid, text, jsonb)", "revalidate_xai_subscription_authority(uuid, text, uuid, jsonb)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
+export declare const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES: readonly ["fork_session_content(uuid, uuid, uuid, text, uuid, text, text, text)", "xai_subscription_authority_live(uuid, uuid, text, uuid, text, uuid, uuid, bigint)", "create_xai_subscription_credential(uuid, uuid, text, text, text, text, text, text, text, timestamp with time zone)", "disconnect_xai_subscription_credential(uuid, uuid, text, uuid, jsonb)", "google_drive_document_citation(uuid, uuid, text, uuid, uuid)", "google_drive_file_authorized(uuid, uuid, text, uuid)", "knowledge_source_sync_lock_authority(uuid, uuid, uuid)", "ensure_managed_human_personal_workspace(uuid, text, uuid)", "ensure_canonical_human_identity(text, text)", "validate_canonical_human_session(text, text, boolean)", "get_canonical_human_identity_projection(text)", "apply_canonical_human_identity_operation(uuid, text, bigint, text, uuid, text, text, text)", "session_private_actor_visible(uuid, uuid, uuid, text)", "session_reference_visible(uuid, uuid, uuid)", "transition_session_visibility(uuid, uuid, uuid, text, text, integer, text, text)", "xai_subscription_pool_visible(uuid, uuid, text, text, uuid)", "resolve_xai_authority_pool(uuid, uuid, text, jsonb)", "revalidate_xai_subscription_authority(uuid, text, uuid, jsonb)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
 export declare const RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINES: readonly ["session_reference_visible(uuid, uuid, uuid)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
 /**
  * The complete standalone tenant-table contract. Adding or removing a
  * FORCE-RLS table is an architectural change: update this list in the same
  * commit as the migration so startup cannot silently accept an unreviewed gap.
  */
-export declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "attached_browser_devices", "attached_browser_inventories", "audit_events", "auth_runs", "billing_customers", "browser_identities", "browser_revision_components", "browser_revisions", "browser_session_associations", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "canonical_human_identities", "canonical_human_identity_operations", "canonical_human_identity_subjects", "canonical_human_login_bindings", "capability_api_facets", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_facets", "capability_installations", "capability_integration_facets", "capability_mcp_facets", "capability_operations", "capability_plugin_installations", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "channels", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "company_profile_activation_events", "company_profile_heads", "company_profile_revisions", "company_profile_snapshots", "composer_drafts", "computer_session_associations", "computer_sessions", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_live_tickets", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_replica_leases", "editable_artifact_scope_authorization_heads", "editable_artifact_sequence_checkpoints", "editable_artifact_session_links", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "editable_artifacts", "enrollments", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_facet_definitions", "integration_oauth_state_nonces", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_facts", "network_routes", "new_session_drafts", "organization_memberships", "organization_user_resource_authorities", "organization_user_resource_grants", "organization_user_retention_policies", "pack_installation_components", "pack_installations", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_codemode_calls", "session_attempt_interruptions", "session_attempt_tool_catalogs", "session_command_receipts", "session_events", "session_goal_revisions", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_visibility_write_capabilities", "session_workflow_wake_outbox", "sessions", "site_auth_connections", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_installation_bindings", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_shared_task_origins", "slack_task_policy_activation_events", "slack_task_policy_heads", "slack_task_policy_revisions", "slack_user_link_access_request_operations", "slack_user_link_access_requests", "social_connections", "social_posts", "task_note_events", "task_note_write_capabilities", "task_notes", "temporal_schedule_cleanup_outbox", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifact_events", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_interaction_revisions", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_revisions", "workspace_learning_policy_snapshots", "workspace_model_policies", "workspace_packs", "workspace_screenshot_quotas", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas", "xai_capacity_waiters", "xai_credential_leases", "xai_rotation_settings", "xai_session_account_pins", "xai_subscription_credentials"];
+export declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "attached_browser_devices", "attached_browser_inventories", "audit_events", "auth_runs", "billing_customers", "browser_identities", "browser_revision_components", "browser_revisions", "browser_session_associations", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "canonical_human_identities", "canonical_human_identity_operations", "canonical_human_identity_subjects", "canonical_human_login_bindings", "capability_api_facets", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_facets", "capability_installations", "capability_integration_facets", "capability_mcp_facets", "capability_operations", "capability_plugin_installations", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "channels", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "company_profile_activation_events", "company_profile_heads", "company_profile_revisions", "company_profile_snapshots", "composer_drafts", "computer_session_associations", "computer_sessions", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_live_tickets", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_replica_leases", "editable_artifact_scope_authorization_heads", "editable_artifact_sequence_checkpoints", "editable_artifact_session_links", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "editable_artifacts", "enrollments", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_facet_definitions", "integration_oauth_state_nonces", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_facts", "network_routes", "new_session_drafts", "organization_memberships", "organization_user_resource_authorities", "organization_user_resource_grants", "organization_user_retention_policies", "pack_installation_components", "pack_installations", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_codemode_calls", "session_attempt_interruptions", "session_attempt_tool_catalogs", "session_command_receipts", "session_events", "session_goal_revisions", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_visibility_write_capabilities", "session_workflow_wake_outbox", "sessions", "site_auth_connections", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_installation_bindings", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_shared_task_origins", "slack_task_policy_activation_events", "slack_task_policy_heads", "slack_task_policy_revisions", "slack_user_link_access_request_operations", "slack_user_link_access_requests", "social_connections", "social_posts", "task_note_events", "task_note_write_capabilities", "task_notes", "temporal_schedule_cleanup_outbox", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifact_events", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_interaction_revisions", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_revisions", "workspace_learning_policy_snapshots", "workspace_model_policies", "workspace_packs", "workspace_screenshot_quotas", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas", "xai_capacity_waiters", "xai_credential_leases", "xai_rotation_settings", "xai_session_account_pins", "xai_subscription_credentials"];
 /**
  * Deployment-global and authentication tables used by ordinary API/worker
  * traffic. They intentionally do not carry workspace RLS: their access model
@@ -24,7 +24,7 @@ export declare const RUNTIME_READ_ONLY_TABLES: readonly ["company_profile_activa
 /** Existing runtime authorities that may be observed and advanced, never created or deleted. */
 export declare const RUNTIME_READ_UPDATE_TABLES: readonly ["workspace_session_activity_revisions"];
 /** Append-only evidence/revision tables are insertable and queryable, never mutable. */
-export declare const RUNTIME_READ_INSERT_TABLES: readonly ["browser_revision_components", "browser_revisions", "company_profile_revisions", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_sequence_checkpoints", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "preference_registry_preferences", "preference_registry_revisions", "session_attempt_tool_catalogs", "session_goal_revisions", "session_spawn_denials", "slack_shared_task_origins", "slack_user_link_access_request_operations", "temporal_schedule_cleanup_outbox", "workspace_artifact_events", "workspace_artifact_versions", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_learning_policy_revisions"];
+export declare const RUNTIME_READ_INSERT_TABLES: readonly ["browser_revision_components", "browser_revisions", "company_profile_revisions", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_sequence_checkpoints", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "preference_registry_preferences", "preference_registry_revisions", "session_attempt_tool_catalogs", "session_goal_revisions", "session_spawn_denials", "slack_shared_task_origins", "slack_user_link_access_request_operations", "temporal_schedule_cleanup_outbox", "workspace_artifact_events", "workspace_artifact_versions", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_learning_policy_revisions"];
 /** Durable operation journals are append/read plus claim/settle updates, never deletes. */
 export declare const RUNTIME_READ_INSERT_UPDATE_TABLES: readonly ["attached_browser_devices", "attached_browser_inventories", "auth_runs", "browser_identities", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "capability_api_facets", "capability_facets", "capability_integration_facets", "capability_mcp_facets", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "computer_sessions", "editable_artifact_session_links", "editable_artifacts", "integration_facet_definitions", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "network_routes", "session_attempt_codemode_calls", "site_auth_connections", "slack_user_link_access_requests", "workspace_interaction_revisions"];
 /**

package/dist/schema.d.ts

@@ -10929,8 +10929,8 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
-        initialTurnInstructions: import("drizzle-orm/pg-core").PgColumn<{
-            name: "initial_turn_instructions";
+        initialModelContext: import("drizzle-orm/pg-core").PgColumn<{
+            name: "initial_model_context";
             tableName: "sessions";
             dataType: "string";
             columnType: "PgText";
@@ -13498,6 +13498,23 @@ export declare const sessionRealtimeEntries: import("drizzle-orm/pg-core").PgTab
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        modelContext: import("drizzle-orm/pg-core").PgColumn<{
+            name: "model_context";
+            tableName: "session_realtime_entries";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         clientAckedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "client_acked_at";
             tableName: "session_realtime_entries";
@@ -19703,8 +19720,8 @@ export declare const sessionTurns: import("drizzle-orm/pg-core").PgTableWithColu
                 ordinal: number;
             }[];
         }>;
-        turnInstructions: import("drizzle-orm/pg-core").PgColumn<{
-            name: "turn_instructions";
+        modelContext: import("drizzle-orm/pg-core").PgColumn<{
+            name: "model_context";
             tableName: "session_turns";
             dataType: "string";
             columnType: "PgText";

package/dist/schema.js

@@ -76,6 +76,8 @@ import {
   generatedVideoArtifacts,
   githubInstallationRepositories,
   githubInstallations,
+  googleDriveObjectAclEvidence,
+  googleDriveObjectAclPrincipals,
   hostExportConfig,
   hostExportConsumers,
   hostExportCursorState,
@@ -255,7 +257,7 @@ import {
   xaiRotationSettings,
   xaiSessionAccountPins,
   xaiSubscriptionCredentials
-} from "./chunk-5KTIEDX7.js";
+} from "./chunk-6ZYKCRFO.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
@@ -335,6 +337,8 @@ export {
   generatedVideoArtifacts,
   githubInstallationRepositories,
   githubInstallations,
+  googleDriveObjectAclEvidence,
+  googleDriveObjectAclPrincipals,
   hostExportConfig,
   hostExportConsumers,
   hostExportCursorState,

package/dist/session-queue-commands.d.ts

@@ -155,7 +155,7 @@ export declare function submitHumanPromptInTransaction(db: SessionActivityDataba
     expectedDraftRevision?: number | null;
     text: string;
     annotations?: TimelineAnnotation[];
-    turnInstructions?: string | null;
+    modelContext?: string | null;
     resources: ResourceRef[];
     model?: string | null;
     reasoningEffort?: ReasoningEffort | null;

package/dist/session-realtime-ledger.d.ts

@@ -102,6 +102,7 @@ export type SessionRealtimeInboundEntryInput = {
     delegationItemId?: string | null | undefined;
     text?: string | null | undefined;
     payload?: Record<string, unknown> | undefined;
+    modelContext?: string | undefined;
 };
 export type SyncSessionRealtimeLedgerInput = AssertSessionRealtimeOwnerInput & {
     connectionId: string;

package/dist/session-tenancy.js

@@ -3,9 +3,9 @@ import {
   canonicalSessionVisibilityTransitionHash,
   forkSessionContent,
   transitionSessionVisibility
-} from "./chunk-F32YT7MP.js";
-import "./chunk-JC5QPLUM.js";
-import "./chunk-5KTIEDX7.js";
+} from "./chunk-WD5ROSLL.js";
+import "./chunk-ZWREYEWA.js";
+import "./chunk-6ZYKCRFO.js";
 import "./chunk-PZ5AY32C.js";
 export {
   canonicalSessionForkHash,

package/dist/video-generation.js

@@ -29,9 +29,9 @@ import {
   settleVideoGenerationFailure,
   settleVideoGenerationReady,
   updateWorkspaceVideoGenerationPolicy
-} from "./chunk-CQZ4QSP5.js";
-import "./chunk-JC5QPLUM.js";
-import "./chunk-5KTIEDX7.js";
+} from "./chunk-CUPM3FGB.js";
+import "./chunk-ZWREYEWA.js";
+import "./chunk-6ZYKCRFO.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ACTIVE_VIDEO_GENERATION_STATUSES,

package/drizzle/0238_recover_unclaimed_session_turns.sql

@@ -0,0 +1,307 @@
+-- deployment-mode: rolling
+-- A turn activity could previously exhaust a transient attempt-claim failure,
+-- leave durable work with no active attempt, and then let its Temporal workflow
+-- complete. This includes queued/recovering turns, a resumed approval, a
+-- released capacity wait, manual compaction, and pending internal updates. Seed
+-- one delayed durable wake for those exact admitted rows; current workflows may
+-- consume it as an idempotent hint, while closed workflows are restarted by the
+-- ordinary outbox dispatcher. A normal queued turn with an undelivered wake is
+-- healthy and must remain untouched.
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '10min';
+
+WITH RECURSIVE candidates AS MATERIALIZED (
+  SELECT
+    session_row.id AS session_id,
+    session_row.account_id,
+    session_row.workspace_id,
+    coalesce(
+      session_row.temporal_workflow_id,
+      'session-' || session_row.id::text
+    ) AS temporal_workflow_id
+  FROM sessions session_row
+  WHERE session_row.status NOT IN ('failed', 'cancelled')
+    AND NOT EXISTS (
+      SELECT 1
+      FROM session_turn_attempts live_attempt
+      WHERE live_attempt.workspace_id = session_row.workspace_id
+        AND live_attempt.session_id = session_row.id
+        AND live_attempt.state IN ('claimed', 'running')
+    )
+    AND (
+      (
+        session_row.status = 'recovering'
+        AND EXISTS (
+          SELECT 1
+          FROM session_turns turn_row
+          WHERE turn_row.workspace_id = session_row.workspace_id
+            AND turn_row.session_id = session_row.id
+            AND turn_row.id = session_row.active_turn_id
+            AND turn_row.status = 'recovering'
+            AND turn_row.active_attempt_id IS NULL
+        )
+      )
+      OR (
+        EXISTS (
+          SELECT 1
+          FROM session_workflow_wake_outbox wake_row
+          WHERE wake_row.session_id = session_row.id
+            AND wake_row.wake_revision > 0
+            AND wake_row.wake_revision = wake_row.delivered_revision
+        )
+        AND (
+          (
+            session_row.status = 'queued'
+            AND session_row.active_turn_id IS NULL
+            AND EXISTS (
+              SELECT 1
+              FROM session_turns turn_row
+              WHERE turn_row.workspace_id = session_row.workspace_id
+                AND turn_row.session_id = session_row.id
+                AND turn_row.status = 'queued'
+                AND turn_row.source IN ('user', 'api')
+                AND turn_row.active_attempt_id IS NULL
+            )
+          )
+          OR (
+            session_row.status = 'waiting_capacity'
+            AND EXISTS (
+              SELECT 1
+              FROM session_turns turn_row
+              WHERE turn_row.workspace_id = session_row.workspace_id
+                AND turn_row.session_id = session_row.id
+                AND turn_row.id = session_row.active_turn_id
+                AND turn_row.status = 'waiting_capacity'
+                AND turn_row.active_attempt_id IS NULL
+            )
+            AND NOT EXISTS (
+              SELECT 1
+              FROM codex_capacity_waiters waiter
+              WHERE waiter.workspace_id = session_row.workspace_id
+                AND waiter.session_id = session_row.id
+                AND waiter.status = 'waiting'
+            )
+            AND NOT EXISTS (
+              SELECT 1
+              FROM xai_capacity_waiters waiter
+              WHERE waiter.workspace_id = session_row.workspace_id
+                AND waiter.session_id = session_row.id
+                AND waiter.status = 'waiting'
+            )
+          )
+          OR (
+            session_row.status = 'requires_action'
+            AND EXISTS (
+              SELECT 1
+              FROM session_turns turn_row
+              JOIN session_events trigger_event
+                ON trigger_event.workspace_id = turn_row.workspace_id
+               AND trigger_event.session_id = turn_row.session_id
+               AND trigger_event.id = turn_row.trigger_event_id
+              WHERE turn_row.workspace_id = session_row.workspace_id
+                AND turn_row.session_id = session_row.id
+                AND turn_row.id = session_row.active_turn_id
+                AND turn_row.status = 'requires_action'
+                AND turn_row.active_attempt_id IS NULL
+                AND EXISTS (
+                  SELECT 1
+                  FROM session_events response_event
+                  WHERE response_event.workspace_id = session_row.workspace_id
+                    AND response_event.session_id = session_row.id
+                    AND response_event.type IN (
+                      'user.approvalDecision',
+                      'user.humanInputResponse'
+                    )
+                    AND response_event.sequence > trigger_event.sequence
+                )
+            )
+          )
+          OR (
+            session_row.active_turn_id IS NULL
+            AND session_row.status IN ('queued', 'idle')
+            AND session_row.compact_requested
+          )
+          OR (
+            session_row.active_turn_id IS NULL
+            AND session_row.status IN ('queued', 'idle')
+            AND EXISTS (
+              SELECT 1
+              FROM session_system_updates update_row
+              WHERE update_row.workspace_id = session_row.workspace_id
+                AND update_row.session_id = session_row.id
+                AND update_row.state = 'pending'
+            )
+            AND (
+              EXISTS (
+                SELECT 1
+                FROM session_system_updates update_row
+                WHERE update_row.workspace_id = session_row.workspace_id
+                  AND update_row.session_id = session_row.id
+                  AND update_row.state = 'pending'
+                  AND update_row.kind = 'agent_steer_instruction'
+              )
+              OR NOT EXISTS (
+                SELECT 1
+                FROM session_turns failed_turn
+                JOIN session_events failure_event
+                  ON failure_event.workspace_id = failed_turn.workspace_id
+                 AND failure_event.session_id = failed_turn.session_id
+                 AND failure_event.turn_id = failed_turn.id
+                 AND failure_event.type = 'turn.failed'
+                 AND failure_event.payload ->> 'code' = 'context_compaction_failed'
+                WHERE failed_turn.workspace_id = session_row.workspace_id
+                  AND failed_turn.session_id = session_row.id
+                  AND failed_turn.finished_at IS NOT NULL
+                  AND failed_turn.id = (
+                    SELECT latest_turn.id
+                    FROM session_turns latest_turn
+                    WHERE latest_turn.workspace_id = session_row.workspace_id
+                      AND latest_turn.session_id = session_row.id
+                      AND latest_turn.finished_at IS NOT NULL
+                    ORDER BY
+                      latest_turn.position DESC,
+                      latest_turn.created_at DESC
+                    LIMIT 1
+                  )
+              )
+            )
+          )
+        )
+      )
+    )
+), ancestry AS (
+  SELECT
+    candidate.session_id AS candidate_session_id,
+    session_row.workspace_id,
+    session_row.id AS session_id,
+    session_row.parent_session_id,
+    session_row.direct_control_state,
+    session_row.direct_pause_revision,
+    session_row.subtree_run_override_revision,
+    0::integer AS depth,
+    ARRAY[session_row.id]::uuid[] AS path,
+    false AS cycle
+  FROM candidates candidate
+  JOIN sessions session_row
+    ON session_row.workspace_id = candidate.workspace_id
+   AND session_row.id = candidate.session_id
+  UNION ALL
+  SELECT
+    child.candidate_session_id,
+    parent.workspace_id,
+    parent.id,
+    parent.parent_session_id,
+    parent.direct_control_state,
+    parent.direct_pause_revision,
+    parent.subtree_run_override_revision,
+    child.depth + 1,
+    child.path || parent.id,
+    parent.id = ANY(child.path)
+  FROM ancestry child
+  JOIN sessions parent
+    ON parent.workspace_id = child.workspace_id
+   AND parent.id = child.parent_session_id
+  WHERE child.parent_session_id IS NOT NULL
+    AND NOT child.cycle
+    AND child.depth < 10000
+), orphaned AS (
+  SELECT candidate.*
+  FROM candidates candidate
+  JOIN workspace_inference_controls control_row
+    ON control_row.workspace_id = candidate.workspace_id
+  WHERE EXISTS (
+      SELECT 1
+      FROM ancestry root
+      WHERE root.candidate_session_id = candidate.session_id
+        AND root.parent_session_id IS NULL
+        AND NOT root.cycle
+    )
+    AND NOT EXISTS (
+      SELECT 1
+      FROM ancestry invalid
+      WHERE invalid.candidate_session_id = candidate.session_id
+        AND invalid.cycle
+    )
+    AND NOT EXISTS (
+      SELECT 1
+      FROM ancestry pause
+      WHERE pause.candidate_session_id = candidate.session_id
+        AND pause.direct_control_state = 'paused'
+        AND NOT EXISTS (
+          SELECT 1
+          FROM ancestry override_row
+          WHERE override_row.candidate_session_id = candidate.session_id
+            AND override_row.depth < pause.depth
+            AND override_row.subtree_run_override_revision > pause.direct_pause_revision
+        )
+    )
+    AND (
+      control_row.workspace_state = 'active'
+      OR (
+        control_row.workspace_state = 'paused'
+        AND EXISTS (
+          SELECT 1
+          FROM ancestry override_row
+          WHERE override_row.candidate_session_id = candidate.session_id
+            AND override_row.subtree_run_override_revision
+              > control_row.workspace_pause_revision
+        )
+      )
+    )
+), seeded AS (
+  INSERT INTO session_workflow_wake_outbox (
+    session_id,
+    account_id,
+    workspace_id,
+    temporal_workflow_id,
+    reason,
+    next_attempt_at
+  )
+  SELECT
+    orphaned.session_id,
+    orphaned.account_id,
+    orphaned.workspace_id,
+    orphaned.temporal_workflow_id,
+    'unclaimed_attempt_recovery_cutover',
+    now() + interval '60 seconds'
+  FROM orphaned
+  ON CONFLICT (session_id) DO UPDATE SET
+    wake_revision = session_workflow_wake_outbox.wake_revision + 1,
+    temporal_workflow_id = excluded.temporal_workflow_id,
+    reason = excluded.reason,
+    attempts = 0,
+    next_attempt_at = CASE
+      WHEN session_workflow_wake_outbox.wake_revision
+        > session_workflow_wake_outbox.delivered_revision
+        THEN least(
+          session_workflow_wake_outbox.next_attempt_at,
+          excluded.next_attempt_at
+        )
+      ELSE excluded.next_attempt_at
+    END,
+    last_error = NULL,
+    updated_at = now()
+  RETURNING account_id, workspace_id, session_id, wake_revision, reason
+)
+INSERT INTO audit_events (
+  account_id,
+  workspace_id,
+  subject_id,
+  action,
+  target_type,
+  target_id,
+  metadata
+)
+SELECT
+  seeded.account_id,
+  seeded.workspace_id,
+  'session-recovery-migration',
+  'session.workflow.unclaimed_attempt_wake_seeded',
+  'session',
+  seeded.session_id::text,
+  jsonb_build_object(
+    'wakeRevision', seeded.wake_revision,
+    'reason', seeded.reason
+  )
+FROM seeded;