@opengeni/db 0.36.1 → 1.0.1

package/dist/knowledge-source-sync.d.ts

@@ -30,6 +30,38 @@ export type KnowledgeSourceSyncObservationFence = {
     executionCheckpointGeneration: number;
     observations: KnowledgeSourceSyncObservationFloor[];
 };
+export type GoogleDriveObjectAclPrincipal = {
+    type: "user" | "group" | "domain" | "anyone";
+    permissionId?: string | null;
+    emailAddress?: string | null;
+    domain?: string | null;
+    role: "owner" | "organizer" | "fileOrganizer" | "writer" | "commenter" | "reader";
+    inherited?: boolean;
+    allowFileDiscovery?: boolean | null;
+    expirationTime?: string | null;
+};
+export type GoogleDriveObjectAclEvidenceInput = {
+    accountId: string;
+    workspaceId: string;
+    obligationId: string;
+    connectionId: string;
+    connectionVersion: number;
+    sourceGooglePermissionId: string;
+    sourceSyncGeneration: number;
+    sourceConfigGeneration: number;
+    sourceLifecycleGeneration: number;
+    objectLifecycleGeneration: number;
+    objectVersionGeneration: number;
+    providerRevision: string | null;
+    driveId: string | null;
+    aclRevision: string;
+    eligibility: "eligible" | "denied";
+    observedAt: string;
+    expiresAt: string;
+    citationLocator: Record<string, unknown>;
+    operationId: string;
+    principals: GoogleDriveObjectAclPrincipal[];
+};
 export type KnowledgeSourceSyncObjectObservationResult = KnowledgeSourceSyncObservationFloor & {
     disposition: "accepted" | "replayed" | "stale" | "conflict";
     currentVersion: {
@@ -241,6 +273,34 @@ export declare function recordKnowledgeSourceSyncAclEvidence(db: Database, input
     eligibility: "eligible" | "denied";
     evidence: Record<string, unknown>;
 }): Promise<void>;
+/**
+ * Persist one append-only Google Drive object ACL observation and atomically
+ * make it the current authorization pointer for the exact index obligation.
+ * Raw provider principals never enter storage: only domain-separated hashes
+ * are retained. Denial deletes chunks in the same transaction so stale vector
+ * or keyword rows cannot survive permission loss.
+ */
+export declare function recordGoogleDriveObjectAclEvidence(db: Database, input: GoogleDriveObjectAclEvidenceInput): Promise<{
+    evidenceId: string;
+    aclHash: string;
+}>;
+/**
+ * Clear the current Drive authorization pointer before provider I/O without
+ * destroying an otherwise valid index. All read surfaces immediately deny
+ * because agent_access is false and the current evidence pointer is null. A
+ * successful refresh can restore access without re-embedding; a final denied
+ * observation uses recordGoogleDriveObjectAclEvidence and deletes chunks.
+ */
+export declare function beginGoogleDriveObjectAclRefresh(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    obligationId: string;
+    sourceSyncGeneration: number;
+    sourceConfigGeneration: number;
+    sourceLifecycleGeneration: number;
+    objectLifecycleGeneration: number;
+    objectVersionGeneration: number;
+}): Promise<void>;
 /** Bounded retention hook. Callers choose policy and cadence; pending index or
  * ACL obligations are never deleted by age alone. */
 export declare function pruneKnowledgeSourceSyncEvidence(db: Database, input: {

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-VKLB2ZGI.js";
+} from "./chunk-NXAFLCQX.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/runtime-posture.d.ts

@@ -1,12 +1,12 @@
 import type { Database, RlsStrategy } from "./database.js";
-export declare const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES: readonly ["fork_session_content(uuid, uuid, uuid, text, uuid, text, text, text)", "xai_subscription_authority_live(uuid, uuid, text, uuid, text, uuid, uuid, bigint)", "create_xai_subscription_credential(uuid, uuid, text, text, text, text, text, text, text, timestamp with time zone)", "disconnect_xai_subscription_credential(uuid, uuid, text, uuid, jsonb)", "knowledge_source_sync_lock_authority(uuid, uuid, uuid)", "ensure_managed_human_personal_workspace(uuid, text, uuid)", "ensure_canonical_human_identity(text, text)", "validate_canonical_human_session(text, text, boolean)", "get_canonical_human_identity_projection(text)", "apply_canonical_human_identity_operation(uuid, text, bigint, text, uuid, text, text, text)", "session_private_actor_visible(uuid, uuid, uuid, text)", "session_reference_visible(uuid, uuid, uuid)", "transition_session_visibility(uuid, uuid, uuid, text, text, integer, text, text)", "xai_subscription_pool_visible(uuid, uuid, text, text, uuid)", "resolve_xai_authority_pool(uuid, uuid, text, jsonb)", "revalidate_xai_subscription_authority(uuid, text, uuid, jsonb)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
+export declare const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES: readonly ["fork_session_content(uuid, uuid, uuid, text, uuid, text, text, text)", "xai_subscription_authority_live(uuid, uuid, text, uuid, text, uuid, uuid, bigint)", "create_xai_subscription_credential(uuid, uuid, text, text, text, text, text, text, text, timestamp with time zone)", "disconnect_xai_subscription_credential(uuid, uuid, text, uuid, jsonb)", "google_drive_document_citation(uuid, uuid, text, uuid, uuid)", "google_drive_file_authorized(uuid, uuid, text, uuid)", "knowledge_source_sync_lock_authority(uuid, uuid, uuid)", "ensure_managed_human_personal_workspace(uuid, text, uuid)", "ensure_canonical_human_identity(text, text)", "validate_canonical_human_session(text, text, boolean)", "get_canonical_human_identity_projection(text)", "apply_canonical_human_identity_operation(uuid, text, bigint, text, uuid, text, text, text)", "session_private_actor_visible(uuid, uuid, uuid, text)", "session_reference_visible(uuid, uuid, uuid)", "transition_session_visibility(uuid, uuid, uuid, text, text, integer, text, text)", "xai_subscription_pool_visible(uuid, uuid, text, text, uuid)", "resolve_xai_authority_pool(uuid, uuid, text, jsonb)", "revalidate_xai_subscription_authority(uuid, text, uuid, jsonb)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
 export declare const RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINES: readonly ["session_reference_visible(uuid, uuid, uuid)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
 /**
  * The complete standalone tenant-table contract. Adding or removing a
  * FORCE-RLS table is an architectural change: update this list in the same
  * commit as the migration so startup cannot silently accept an unreviewed gap.
  */
-export declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "attached_browser_devices", "attached_browser_inventories", "audit_events", "auth_runs", "billing_customers", "browser_identities", "browser_revision_components", "browser_revisions", "browser_session_associations", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "canonical_human_identities", "canonical_human_identity_operations", "canonical_human_identity_subjects", "canonical_human_login_bindings", "capability_api_facets", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_facets", "capability_installations", "capability_integration_facets", "capability_mcp_facets", "capability_operations", "capability_plugin_installations", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "channels", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "company_profile_activation_events", "company_profile_heads", "company_profile_revisions", "company_profile_snapshots", "composer_drafts", "computer_session_associations", "computer_sessions", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_live_tickets", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_replica_leases", "editable_artifact_scope_authorization_heads", "editable_artifact_sequence_checkpoints", "editable_artifact_session_links", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "editable_artifacts", "enrollments", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_facet_definitions", "integration_oauth_state_nonces", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_facts", "network_routes", "new_session_drafts", "organization_memberships", "organization_user_resource_authorities", "organization_user_resource_grants", "organization_user_retention_policies", "pack_installation_components", "pack_installations", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_codemode_calls", "session_attempt_interruptions", "session_attempt_tool_catalogs", "session_command_receipts", "session_events", "session_goal_revisions", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_visibility_write_capabilities", "session_workflow_wake_outbox", "sessions", "site_auth_connections", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_installation_bindings", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_shared_task_origins", "slack_task_policy_activation_events", "slack_task_policy_heads", "slack_task_policy_revisions", "slack_user_link_access_request_operations", "slack_user_link_access_requests", "social_connections", "social_posts", "task_note_events", "task_note_write_capabilities", "task_notes", "temporal_schedule_cleanup_outbox", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifact_events", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_interaction_revisions", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_revisions", "workspace_learning_policy_snapshots", "workspace_model_policies", "workspace_packs", "workspace_screenshot_quotas", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas", "xai_capacity_waiters", "xai_credential_leases", "xai_rotation_settings", "xai_session_account_pins", "xai_subscription_credentials"];
+export declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "attached_browser_devices", "attached_browser_inventories", "audit_events", "auth_runs", "billing_customers", "browser_identities", "browser_revision_components", "browser_revisions", "browser_session_associations", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "canonical_human_identities", "canonical_human_identity_operations", "canonical_human_identity_subjects", "canonical_human_login_bindings", "capability_api_facets", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_facets", "capability_installations", "capability_integration_facets", "capability_mcp_facets", "capability_operations", "capability_plugin_installations", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "channels", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "company_profile_activation_events", "company_profile_heads", "company_profile_revisions", "company_profile_snapshots", "composer_drafts", "computer_session_associations", "computer_sessions", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_live_tickets", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_replica_leases", "editable_artifact_scope_authorization_heads", "editable_artifact_sequence_checkpoints", "editable_artifact_session_links", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "editable_artifacts", "enrollments", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_facet_definitions", "integration_oauth_state_nonces", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_facts", "network_routes", "new_session_drafts", "organization_memberships", "organization_user_resource_authorities", "organization_user_resource_grants", "organization_user_retention_policies", "pack_installation_components", "pack_installations", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_codemode_calls", "session_attempt_interruptions", "session_attempt_tool_catalogs", "session_command_receipts", "session_events", "session_goal_revisions", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_visibility_write_capabilities", "session_workflow_wake_outbox", "sessions", "site_auth_connections", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_installation_bindings", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_shared_task_origins", "slack_task_policy_activation_events", "slack_task_policy_heads", "slack_task_policy_revisions", "slack_user_link_access_request_operations", "slack_user_link_access_requests", "social_connections", "social_posts", "task_note_events", "task_note_write_capabilities", "task_notes", "temporal_schedule_cleanup_outbox", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifact_events", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_interaction_revisions", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_revisions", "workspace_learning_policy_snapshots", "workspace_model_policies", "workspace_packs", "workspace_screenshot_quotas", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas", "xai_capacity_waiters", "xai_credential_leases", "xai_rotation_settings", "xai_session_account_pins", "xai_subscription_credentials"];
 /**
  * Deployment-global and authentication tables used by ordinary API/worker
  * traffic. They intentionally do not carry workspace RLS: their access model
@@ -24,7 +24,7 @@ export declare const RUNTIME_READ_ONLY_TABLES: readonly ["company_profile_activa
 /** Existing runtime authorities that may be observed and advanced, never created or deleted. */
 export declare const RUNTIME_READ_UPDATE_TABLES: readonly ["workspace_session_activity_revisions"];
 /** Append-only evidence/revision tables are insertable and queryable, never mutable. */
-export declare const RUNTIME_READ_INSERT_TABLES: readonly ["browser_revision_components", "browser_revisions", "company_profile_revisions", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_sequence_checkpoints", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "preference_registry_preferences", "preference_registry_revisions", "session_attempt_tool_catalogs", "session_goal_revisions", "session_spawn_denials", "slack_shared_task_origins", "slack_user_link_access_request_operations", "temporal_schedule_cleanup_outbox", "workspace_artifact_events", "workspace_artifact_versions", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_learning_policy_revisions"];
+export declare const RUNTIME_READ_INSERT_TABLES: readonly ["browser_revision_components", "browser_revisions", "company_profile_revisions", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_sequence_checkpoints", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "preference_registry_preferences", "preference_registry_revisions", "session_attempt_tool_catalogs", "session_goal_revisions", "session_spawn_denials", "slack_shared_task_origins", "slack_user_link_access_request_operations", "temporal_schedule_cleanup_outbox", "workspace_artifact_events", "workspace_artifact_versions", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_learning_policy_revisions"];
 /** Durable operation journals are append/read plus claim/settle updates, never deletes. */
 export declare const RUNTIME_READ_INSERT_UPDATE_TABLES: readonly ["attached_browser_devices", "attached_browser_inventories", "auth_runs", "browser_identities", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "capability_api_facets", "capability_facets", "capability_integration_facets", "capability_mcp_facets", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "computer_sessions", "editable_artifact_session_links", "editable_artifacts", "integration_facet_definitions", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "network_routes", "session_attempt_codemode_calls", "site_auth_connections", "slack_user_link_access_requests", "workspace_interaction_revisions"];
 /**

package/dist/schema.d.ts

@@ -10929,8 +10929,8 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
-        initialTurnInstructions: import("drizzle-orm/pg-core").PgColumn<{
-            name: "initial_turn_instructions";
+        initialModelContext: import("drizzle-orm/pg-core").PgColumn<{
+            name: "initial_model_context";
             tableName: "sessions";
             dataType: "string";
             columnType: "PgText";
@@ -13498,6 +13498,23 @@ export declare const sessionRealtimeEntries: import("drizzle-orm/pg-core").PgTab
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        modelContext: import("drizzle-orm/pg-core").PgColumn<{
+            name: "model_context";
+            tableName: "session_realtime_entries";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         clientAckedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "client_acked_at";
             tableName: "session_realtime_entries";
@@ -19703,8 +19720,8 @@ export declare const sessionTurns: import("drizzle-orm/pg-core").PgTableWithColu
                 ordinal: number;
             }[];
         }>;
-        turnInstructions: import("drizzle-orm/pg-core").PgColumn<{
-            name: "turn_instructions";
+        modelContext: import("drizzle-orm/pg-core").PgColumn<{
+            name: "model_context";
             tableName: "session_turns";
             dataType: "string";
             columnType: "PgText";

package/dist/schema.js

@@ -76,6 +76,8 @@ import {
   generatedVideoArtifacts,
   githubInstallationRepositories,
   githubInstallations,
+  googleDriveObjectAclEvidence,
+  googleDriveObjectAclPrincipals,
   hostExportConfig,
   hostExportConsumers,
   hostExportCursorState,
@@ -255,7 +257,7 @@ import {
   xaiRotationSettings,
   xaiSessionAccountPins,
   xaiSubscriptionCredentials
-} from "./chunk-5KTIEDX7.js";
+} from "./chunk-6ZYKCRFO.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
@@ -335,6 +337,8 @@ export {
   generatedVideoArtifacts,
   githubInstallationRepositories,
   githubInstallations,
+  googleDriveObjectAclEvidence,
+  googleDriveObjectAclPrincipals,
   hostExportConfig,
   hostExportConsumers,
   hostExportCursorState,

package/dist/session-queue-commands.d.ts

@@ -155,7 +155,7 @@ export declare function submitHumanPromptInTransaction(db: SessionActivityDataba
     expectedDraftRevision?: number | null;
     text: string;
     annotations?: TimelineAnnotation[];
-    turnInstructions?: string | null;
+    modelContext?: string | null;
     resources: ResourceRef[];
     model?: string | null;
     reasoningEffort?: ReasoningEffort | null;

package/dist/session-realtime-ledger.d.ts

@@ -102,6 +102,7 @@ export type SessionRealtimeInboundEntryInput = {
     delegationItemId?: string | null | undefined;
     text?: string | null | undefined;
     payload?: Record<string, unknown> | undefined;
+    modelContext?: string | undefined;
 };
 export type SyncSessionRealtimeLedgerInput = AssertSessionRealtimeOwnerInput & {
     connectionId: string;

package/dist/session-tenancy.js

@@ -3,9 +3,9 @@ import {
   canonicalSessionVisibilityTransitionHash,
   forkSessionContent,
   transitionSessionVisibility
-} from "./chunk-FPVAD4CO.js";
-import "./chunk-Z7VYMNPZ.js";
-import "./chunk-5KTIEDX7.js";
+} from "./chunk-WD5ROSLL.js";
+import "./chunk-ZWREYEWA.js";
+import "./chunk-6ZYKCRFO.js";
 import "./chunk-PZ5AY32C.js";
 export {
   canonicalSessionForkHash,

package/dist/video-generation.js

@@ -29,9 +29,9 @@ import {
   settleVideoGenerationFailure,
   settleVideoGenerationReady,
   updateWorkspaceVideoGenerationPolicy
-} from "./chunk-VTPRIXKG.js";
-import "./chunk-Z7VYMNPZ.js";
-import "./chunk-5KTIEDX7.js";
+} from "./chunk-CUPM3FGB.js";
+import "./chunk-ZWREYEWA.js";
+import "./chunk-6ZYKCRFO.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ACTIVE_VIDEO_GENERATION_STATUSES,

package/drizzle/0240_model_context_user_messages.sql

@@ -0,0 +1,204 @@
+-- deployment-mode: maintenance
+-- One-way semantic cutover: application-provided per-message context becomes
+-- ordinary user-role model content. Renaming the legacy columns hard-fences old
+-- workers, which would otherwise continue mutating the persistent instruction
+-- prefix and defeat prompt caching.
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '10min';
+
+-- Reject mixed-version writers before locking, then repeat after the locks to
+-- close the connect-before-lock race. Keep API and workers stopped until the new
+-- application version is active.
+DO $model_context_writer_drain_before_lock$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app')
+    AND EXISTS (
+      SELECT 1
+      FROM pg_stat_activity
+      WHERE datname = current_database()
+        AND usename = 'opengeni_app'
+        AND pid <> pg_backend_pid()
+    )
+  THEN
+    RAISE EXCEPTION
+      'model-context user-message activation requires all opengeni_app sessions to be stopped'
+      USING ERRCODE = '55000';
+  END IF;
+END
+$model_context_writer_drain_before_lock$;
+
+LOCK TABLE "sessions" IN ACCESS EXCLUSIVE MODE;
+LOCK TABLE "session_turns" IN ACCESS EXCLUSIVE MODE;
+LOCK TABLE "session_realtime_entries" IN ACCESS EXCLUSIVE MODE;
+LOCK TABLE "slack_interactions" IN ACCESS EXCLUSIVE MODE;
+
+DO $model_context_writer_drain_after_lock$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app')
+    AND EXISTS (
+      SELECT 1
+      FROM pg_stat_activity
+      WHERE datname = current_database()
+        AND usename = 'opengeni_app'
+        AND pid <> pg_backend_pid()
+    )
+  THEN
+    RAISE EXCEPTION
+      'model-context user-message activation requires all opengeni_app sessions to be stopped'
+      USING ERRCODE = '55000';
+  END IF;
+END
+$model_context_writer_drain_after_lock$;
+
+-- A queued turn has not entered model history yet, so the new worker can append
+-- its context correctly when it claims the turn. A live/resumable turn may have
+-- already shown the context only through the removed instruction-prefix path;
+-- fail rather than silently resume it with different model-visible history.
+DO $model_context_live_turn_guard$
+BEGIN
+  IF EXISTS (
+    SELECT 1
+    FROM "session_turns"
+    WHERE "turn_instructions" IS NOT NULL
+      AND "status" IN ('running', 'requires_action', 'recovering', 'waiting_capacity')
+  )
+  THEN
+    RAISE EXCEPTION
+      'model-context user-message activation requires legacy context-bearing live turns to settle or be superseded'
+      USING ERRCODE = '55000';
+  END IF;
+END
+$model_context_live_turn_guard$;
+
+-- Completed historical turns retain their original conversation truth: their
+-- context was model-visible only through the legacy exact-turn prefix and must
+-- not be rewritten into later persistent history. Only queued turns cross the
+-- cutover into the new same-message semantics; live/resumable turns are rejected
+-- above so no attempt can straddle both representations.
+
+-- Slack safety restrictions formerly rode the same legacy per-turn prefix. Move
+-- them to durable session-level authority before that prefix is removed. Match
+-- the reservation identity as well as bound routes so a create-before-bind crash
+-- cannot strand an existing Slack session without its safety policy. Preserve any
+-- pre-existing session persona exactly, and fail rather than truncate it.
+DO $model_context_slack_session_policy$
+DECLARE
+  slack_policy CONSTANT text := $slack_policy$This session is an OpenGeni Slack task surface. Treat Slack message and thread context as task-local unless a separate explicit authorized user action says otherwise. Execute direct, safe, sufficiently specified requests immediately. Ask one concise clarifying question only when materially required information is missing or the requested action is risky, irreversible, or authorization-sensitive. Do not write Slack context to Documents, Knowledge, Memory, preferences, Workspace Charter, instructions, or policy unless a separate explicit authorized user action requests it. Never expose private reasoning, credentials, secrets, raw logs, or unbounded output. Keep user-visible output concise, bounded, and safe to send back to Slack.$slack_policy$;
+BEGIN
+  IF EXISTS (
+    SELECT 1
+    FROM "sessions" session_row
+    WHERE EXISTS (
+      SELECT 1
+      FROM "slack_interactions" interaction
+      WHERE interaction."session_reservation_id" = session_row."id"
+    )
+      AND NULLIF(btrim(session_row."instructions"), '') IS NOT NULL
+      AND position(slack_policy in session_row."instructions") = 0
+      AND char_length(session_row."instructions") + 2 + char_length(slack_policy) > 32768
+  )
+  THEN
+    RAISE EXCEPTION
+      'model-context activation cannot append Slack session safety instructions within the session instruction bound'
+      USING ERRCODE = '22001';
+  END IF;
+
+  UPDATE "sessions" session_row
+  SET "instructions" = CASE
+    WHEN NULLIF(btrim(session_row."instructions"), '') IS NULL THEN slack_policy
+    WHEN position(slack_policy in session_row."instructions") > 0 THEN session_row."instructions"
+    ELSE session_row."instructions" || E'\n\n' || slack_policy
+  END
+  WHERE EXISTS (
+    SELECT 1
+    FROM "slack_interactions" interaction
+    WHERE interaction."session_reservation_id" = session_row."id"
+  );
+END
+$model_context_slack_session_policy$;
+
+ALTER TABLE "sessions"
+  RENAME COLUMN "initial_turn_instructions" TO "initial_model_context";
+
+ALTER TABLE "session_turns"
+  RENAME COLUMN "turn_instructions" TO "model_context";
+
+-- Match JavaScript String.prototype.trim() plus UTF-16 .length for every
+-- PostgreSQL-representable string. PostgreSQL text excludes lone surrogates,
+-- while astral code points count as two JavaScript code units.
+CREATE OR REPLACE FUNCTION opengeni_private.model_context_value_valid(value text)
+RETURNS boolean
+LANGUAGE plpgsql
+IMMUTABLE
+STRICT
+SET search_path = pg_catalog, pg_temp
+AS $body$
+DECLARE code_units integer;
+BEGIN
+  IF value = '' OR value <> btrim(
+    value,
+    U&'\0009\000A\000B\000C\000D\0020\00A0\1680\2000\2001\2002\2003\2004\2005\2006\2007\2008\2009\200A\2028\2029\202F\205F\3000\FEFF'
+  )
+  THEN
+    RETURN false;
+  END IF;
+  SELECT sum(CASE WHEN ascii(character) > 65535 THEN 2 ELSE 1 END)::integer
+  INTO code_units
+  FROM unnest(string_to_array(value, NULL)) AS characters(character);
+  RETURN code_units BETWEEN 1 AND 32768;
+EXCEPTION WHEN others THEN
+  RETURN false;
+END;
+$body$;
+
+REVOKE ALL ON FUNCTION opengeni_private.model_context_value_valid(text) FROM PUBLIC;
+DO $model_context_function_grant$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT EXECUTE ON FUNCTION opengeni_private.model_context_value_valid(text)
+      TO opengeni_app;
+  END IF;
+END
+$model_context_function_grant$;
+
+ALTER TABLE "sessions"
+  ADD CONSTRAINT "sessions_initial_model_context_check"
+  CHECK (
+    "initial_model_context" IS NULL
+    OR opengeni_private.model_context_value_valid("initial_model_context")
+  ) NOT VALID;
+
+ALTER TABLE "session_turns"
+  ADD CONSTRAINT "session_turns_model_context_check"
+  CHECK (
+    "model_context" IS NULL
+    OR opengeni_private.model_context_value_valid("model_context")
+  ) NOT VALID;
+
+ALTER TABLE "session_realtime_entries"
+  ADD COLUMN "model_context" text;
+
+ALTER TABLE "sessions" VALIDATE CONSTRAINT "sessions_initial_model_context_check";
+ALTER TABLE "session_turns" VALIDATE CONSTRAINT "session_turns_model_context_check";
+
+ALTER TABLE "session_realtime_entries"
+  ADD CONSTRAINT "session_realtime_entries_model_context_check"
+  CHECK (
+    "model_context" IS NULL
+    OR (
+      "direction" = 'provider_in'
+      AND "kind" IN ('delegation_call', 'user_transcript', 'assistant_transcript')
+      AND opengeni_private.model_context_value_valid("model_context")
+    )
+  ) NOT VALID;
+
+ALTER TABLE "session_realtime_entries"
+  VALIDATE CONSTRAINT "session_realtime_entries_model_context_check";
+
+COMMENT ON COLUMN "sessions"."initial_model_context" IS
+  'Application context frozen with the winning initial user message; ordinary model-visible user-role content, omitted by standard timeline rendering.';
+COMMENT ON COLUMN "session_turns"."model_context" IS
+  'Application context for the exact accepted user message; copied into canonical model history at first claim.';
+COMMENT ON COLUMN "session_realtime_entries"."model_context" IS
+  'Application context attached to an exact provider-in delegation or finalized transcript and materialized as ordinary user-role content.';