@opengeni/db 0.7.1 → 0.7.3

package/dist/provision-roles.d.ts

@@ -3930,7 +3930,7 @@ declare function peekSessionWork(db: Database, workspaceId: string, sessionId: s
  * Commit the workflow's terminal-for-now idle decision and its parent delivery
  * source in one transaction. A crash after commit leaves a pending outbox row for
  * the global reconciler; a normal caller immediately enriches/delivers the same
- * dedupe identity through notifyParentOfChildTerminal.
+ * dedupe identity through notifyParentOfChildIdle.
  */
 declare function settleSessionIdleWithParentOutbox(db: Database, workspaceId: string, sessionId: string): Promise<{
     action: "settled";
@@ -4144,6 +4144,16 @@ type SessionSystemUpdateOutboxDelivery = {
     payload: ChildTerminalResultPayload;
     lineage: Record<string, unknown>;
 };
+/**
+ * Read the exact durable parent-update row created by terminal turn settlement.
+ * Failure delivery must never upsert this row: settlement owns its payload and
+ * turn provenance, while the activity layer only delivers the committed fact.
+ */
+declare function getSessionSystemUpdateOutboxByDedupeKey(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    dedupeKey: string;
+}): Promise<SessionSystemUpdateOutboxDelivery | null>;
 declare function claimPendingSessionSystemUpdateOutbox(db: Database, limit?: number): Promise<SessionSystemUpdateOutboxDelivery[]>;
 type SessionWorkflowWake = {
     accountId: string;
@@ -4301,4 +4311,4 @@ type LockedSessionUpdateResult = {
 declare function appendSessionEventsWithLockedSessionUpdate(db: Database, workspaceId: string, sessionId: string, build: (session: Session, context: LockedSessionUpdateContext) => LockedSessionUpdateResult | Promise<LockedSessionUpdateResult>): Promise<SessionEvent[]>;
 declare function sessionSubject(workspaceId: string, sessionId: string): string;
 
-export { type CorrectWorkspaceMemoryResult as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BootstrapWorkspaceInput as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type CodexCapacitySelectionContext as D, type CodexCapacityWait as E, type CodexCapacityWaitStatus as F, type CodexCapacityWakeTarget as G, type CodexCredentialForRun as H, type CodexCredentialLeaseCandidateFilter as I, type CodexCredentialLeaseCandidateFilterResult as J, type CodexCredentialLeasePolicyScopeResolver as K, type CodexCredentialLeaseQuarantine as L, type CodexCredentialLeaseResult as M, type CodexCredentialLeaseSelection as N, type CodexCredentialLeaseSelectionContext as O, type CodexCredentialStatus as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialTokens as Q, type CodexLeaseAccountStatus as R, type CodexPinSource as S, type CodexRotationSettings as T, type CodexRotationStrategy as U, type ComposerDraftRow as V, type ConnectionBrokerDeps as W, type ConnectionCredentialForBroker as X, ConnectionRefreshHttpError as Y, type ConsumeOAuthStateNonceInput as Z, type CorrectWorkspaceMemoryInput as _, type AcceptSessionApprovalDecisionResult as a, type MarkWarmLeaseInstanceLostResult as a$, type CreateCapabilityCatalogItemInput as a0, type CreateConnectionInput as a1, type CreateDbOptions as a2, type CreateImportBatchInput as a3, type CreateKnowledgeMemoryInput as a4, type CreatePackInstallationInput as a5, type CreateScheduledTaskInput as a6, type CreateSessionGoalInput as a7, type CreateSessionMcpServerInput as a8, type CreateSocialConnectionInput as a9, type IntegrationOAuthClientForUse as aA, type LeaseHolderKind as aB, type LeaseSnapshot as aC, type ListKnowledgeMemoryOptions as aD, type ListSessionEventsOptions as aE, type ListSessionsForSubjectOptions as aF, type ListSessionsOptions as aG, type LiveModalSandboxLeaseAttribution as aH, MACHINE_METRICS_SERIES_INTERVAL_MS as aI, MAX_INTERNAL_UPDATE_BATCH_BYTES as aJ, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as aK, MAX_INTERNAL_UPDATE_BYTES as aL, MEMORY_ACTIVE_RECORD_CAP as aM, MEMORY_BLOCK_KIND_ORDER as aN, MEMORY_BLOCK_RECORD_LIMIT as aO, MEMORY_CORRECT_TOOL_DESCRIPTION as aP, MEMORY_KIND_SECTION_TITLES as aQ, MEMORY_NEAR_DUP_COSINE_THRESHOLD as aR, MEMORY_NEAR_DUP_NEIGHBORS as aS, MEMORY_SAVE_TOOL_DESCRIPTION as aT, MEMORY_SEARCH_DEFAULT_LIMIT as aU, MEMORY_SEARCH_MAX_LIMIT as aV, MEMORY_SEARCH_TOOL_DESCRIPTION as aW, MEMORY_TEXT_MAX_CHARS as aX, MEMORY_VISIBLE_RECORD_CAP as aY, type MachineMetricsRow as aZ, type MachineMetricsSample as a_, type CreateSocialPostInput as aa, type CreditBalanceByAccount as ab, type Database as ac, type DbClient as ad, type DeviceEnrollmentRequestRecord as ae, type DeviceEnrollmentStatus as af, type EditQueueCommandResult as ag, type EffectiveControlBlocker as ah, type EffectiveControlResumeOption as ai, type EffectiveControlState as aj, type EffectiveSessionControl as ak, type EnableCapabilityInstallationInput as al, type EnabledMcpCapabilityServer as am, type EnqueueSessionTurnInput as an, type EnrollmentExposure as ao, type EnrollmentOs as ap, type EnrollmentRecord as aq, type EnrollmentStatus as ar, type ExpiredFileUploadCleanupClaim as as, type FileUploadCleanupClaimResult as at, type ForceDrainResult as au, type GitHubInstallation as av, type GoalContinuationDecision as aw, type ImportBatch as ax, type InitializeSessionStartInput as ay, type InitializeSessionStartResult as az, type AccrueWarmSecondsResult as b, type SetSessionCodexPinOptions as b$, type MemoryBlockRecord as b0, type MemoryEmbedder as b1, type MemorySanitizeResult as b2, type MeterableWarmLease as b3, type PendingSessionToolCallInput as b4, type QueueCommandConflictCode as b5, QueueCommandConflictError as b6, type QueueCommandResult as b7, type QueuedTurnRow as b8, type ReapDrainable as b9, type SaveWorkspaceMemoryResult as bA, type SessionAttemptInterruptionSettlement as bB, type SessionCodexState as bC, type SessionCommandActor as bD, SessionCommandIdempotencyError as bE, type SessionCommandReceiptRow as bF, SessionContextBusyError as bG, SessionControlConflictError as bH, SessionControlInvariantError as bI, type SessionControlMutationResult as bJ, type SessionLineage as bK, SessionListAccessError as bL, type SessionListCursor as bM, SessionListCursorError as bN, type SessionMcpServerForRun as bO, SessionPinAccessError as bP, SessionPinVersionConflictError as bQ, type SessionRecordingCodec as bR, type SessionRecordingMode as bS, type SessionRecordingRow as bT, type SessionRecordingState as bU, type SessionSystemUpdateOutboxDelivery as bV, type SessionTurnAttemptOutcome as bW, type SessionTurnRecordingSettlement as bX, type SessionWorkPeek as bY, type SessionWorkTrigger as bZ, type SessionWorkflowWake as b_, type ReconcileCodexCapacityWaitResult as ba, type RecoverSessionDispatchInput as bb, type RecoverSessionDispatchResult as bc, type RegisterWorkspacePackInput as bd, type RegistryCapabilityCatalogItemInput as be, type RegistryCatalogSurfaceKey as bf, type ReplaceIntegrationOAuthClientInput as bg, type RequestSessionTurnRecoveryInput as bh, type RequestSessionTurnRecoveryResult as bi, type ResolveConnectionCredentialInput as bj, type ResolveConnectionCredentialResult as bk, RigActiveVersionChangedError as bl, RigChangeAlreadyVerifyingError as bm, RigChangeTransitionError as bn, type RigVersionContentInput as bo, type RlsContext as bp, type RlsStrategy as bq, SESSION_ANCESTRY_LIMIT as br, SandboxImageConflictError as bs, type SandboxKind as bt, type SandboxLeaseLiveness as bu, SandboxLeaseSupersededError as bv, type SandboxPtySessionRow as bw, type SandboxRecord as bx, SandboxRigConflictError as by, type SaveWorkspaceMemoryInput as bz, type AcquireLeaseInput as c, claimFileUploadCleanup as c$, type SettleCodexCredentialFailoverResult as c0, type SettleCodexCredentialLeaseLossResult as c1, type SteerQueueCommandResult as c2, type StoreIntegrationOAuthClientInput as c3, type StoredIntegrationOAuthClient as c4, type StreamAcknowledgment as c5, type SubmitHumanPromptResult as c6, type ToolspaceCallReservation as c7, type TurnAttemptFenceRejectReason as c8, type UpdateConnectionInput as c9, acquireLease as cA, activateRigVersion as cB, addSessionSystemUpdate as cC, addSessionSystemUpdateWithSourceMutation as cD, allAccountPermissions as cE, allWorkspacePermissions as cF, appendSessionEventToSandboxGroup as cG, appendSessionEvents as cH, appendSessionEventsAndUpdateSession as cI, appendSessionEventsForTurnAttempt as cJ, appendSessionEventsWithLockedSessionUpdate as cK, appendSessionHistoryItems as cL, applyContextCompaction as cM, applyCreditDebitUpToBalance as cN, applyCreditLedgerEntry as cO, applySessionTurnSettlement as cP, approveDeviceEnrollmentRequest as cQ, armCodexCapacityWait as cR, assertAgentCommandAuthorityInTransaction as cS, autoResumeSessionBranchInTransaction as cT, beginRigChangeVerificationAttempt as cU, bootstrapWorkspace as cV, buildChildCompletionDigest as cW, buildCodexTokenResolver as cX, buildConnectionTokenResolver as cY, canonicalSessionCommandHash as cZ, claimExpiredFileUploadCleanup as c_, type UpdateImportBatchCountsInput as ca, type UpdateKnowledgeMemoryInput as cb, type UpdateScheduledTaskInput as cc, type UpdateSessionMcpServerCredentialsInput as cd, type UpdateSessionMcpServerCredentialsResult as ce, type UserLookup as cf, type VariableSetForRun as cg, WORKSPACE_MEMORY_BLOCK_EMPTY as ch, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as ci, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as cj, type WorkspaceCaptureCommitResult as ck, type WorkspaceCaptureGcPlan as cl, type WorkspaceCaptureGcRow as cm, type WorkspaceCaptureRow as cn, type WorkspaceControlLockMode as co, type WorkspaceControlMutationResult as cp, type WorkspaceEnvironmentForRun as cq, type WorkspaceMemoryOrigin as cr, type WorkspaceMemorySearchInput as cs, type WorkspaceMemorySearchMode as ct, type WorkspaceMemorySearchResult as cu, type WorkspaceModelPolicy as cv, abandonRecordingForTurnAttempt as cw, acceptSessionApprovalDecision as cx, accrueWarmSeconds as cy, acquireCodexCredentialLease as cz, type AcquireLeaseResult as d, decryptEnvironmentValue as d$, claimPendingSessionSystemUpdateOutbox as d0, claimPendingSessionWorkflowWakes as d1, claimSessionWorkForAttempt as d2, clearDurablePendingSessionToolCalls as d3, clearEnrollmentWentOffline as d4, clearSessionContext as d5, clearSessionGoal as d6, clearedContextMarkerItem as d7, closePtySession as d8, closeSessionTurnAttemptInTransaction as d9, countWorkspaceEnvironments as dA, countWorkspacesForAccount as dB, createApiKey as dC, createConnection as dD, createDb as dE, createDeviceEnrollmentRequest as dF, createEnrollment as dG, createFileUpload as dH, createImportBatch as dI, createKnowledgeMemory as dJ, createRig as dK, createRigChange as dL, createRigVersion as dM, createRigVersionForChangePromotion as dN, createSandbox as dO, createScheduledTask as dP, createScheduledTaskRun as dQ, createSession as dR, createSessionGoal as dS, createSessionMcpServers as dT, createSessionWithIdempotencyKey as dU, createSocialConnection as dV, createSocialPost as dW, createVariableSet as dX, createWorkspace as dY, createWorkspaceEnvironment as dZ, decodeSessionListCursor as d_, codexCapacityRefreshBackoffMs as da, commitWarmingToWarm as db, completeExpiredFileUploadCleanup as dc, completeFileUpload as dd, completeFileUploadCleanup as de, computeWorkspaceCaptureGcPlan as df, confirmDrainCold as dg, consumeDeviceEnrollmentRequest as dh, consumeIntegrationOAuthStateNonce as di, correctWorkspaceMemory as dj, countActiveApiKeysForWorkspace as dk, countActiveSessionHistoryItems as dl, countActiveSessionsForWorkspace as dm, countActiveSessionsUsingEnvironment as dn, countActiveSessionsUsingVariableSet as dp, countConsecutiveReactiveRotations as dq, countQueuedTurns as dr, countRigs as ds, countSandboxLeasesByLiveness as dt, countScheduledTasksForWorkspace as du, countScheduledTasksUsingEnvironment as dv, countScheduledTasksUsingVariableSet as dw, countSessionHistoryItems as dx, countSessionsUsingRig as dy, countVariableSets as dz, type ActiveSandboxPointer as e, getRecording as e$, decryptedCapabilityHeaders as e0, deleteRecording as e1, deleteRig as e2, deleteRigIfNoActiveSessions as e3, deleteScheduledTask as e4, deleteSessionQueueItemInTransaction as e5, deleteVariableSet as e6, deleteVariableSetVariable as e7, deleteWorkspace as e8, deleteWorkspaceCaptureRows as e9, forceDrainOverLimitViewerOnlyBoxes as eA, getActiveSessionHistoryItems as eB, getAnySessionInGroup as eC, getBillingBalance as eD, getBillingCustomer as eE, getCapabilityCatalogItem as eF, getCapabilityInstallation as eG, getCodexCapacityWaitForSession as eH, getCodexCredentialStatus as eI, getCodexRotationSettings as eJ, getComposerDraftInTransaction as eK, getConnectionMetadata as eL, getDeviceEnrollmentRequestByDeviceCode as eM, getEnrollment as eN, getFile as eO, getFileUpload as eP, getKnowledgeMemory as eQ, getLatestRunState as eR, getLatestStartedSessionTurn as eS, getManagedAccount as eT, getManagedUserByEmail as eU, getMaterializedSandboxFileResources as eV, getOpenPtySession as eW, getOrCreateSessionSystemUpdateOutbox as eX, getPackInstallation as eY, getPendingDeviceEnrollmentRequestByUserCode as eZ, getPendingDeviceEnrollmentRequestByUserCodeGlobal as e_, deleteWorkspaceEnvironment as ea, deleteWorkspaceEnvironmentVariable as eb, deleteWorkspacePack as ec, denyDeviceEnrollmentRequest as ed, disableCapabilityInstallation as ee, disconnectAllCodexAccounts as ef, disconnectCodexAccount as eg, editQueuedTurnInTransaction as eh, enableCapabilityInstallation as ei, enablePackInstallation as ej, encodeSessionListCursor as ek, encryptEnvironmentValue as el, enqueueSessionTurn as em, enqueueSessionWorkflowWake as en, enqueueSessionWorkflowWakeIfRunnable as eo, enqueueSessionWorkflowWakeInTransaction as ep, ensureCodexRotationSettings as eq, ensureManagedAccessForUser as er, estimateMemoryTokens as es, evaluateGoalContinuation as et, evaluateSessionControl as eu, evaluateSessionControls as ev, failWarmingToCold as ew, fetchCodexUsageForAccount as ex, finalizeEnrollmentByToken as ey, findActiveApiKeyByHash as ez, type AddSessionSystemUpdateInput as f, listDistinctVariableSetIdsInGroup as f$, getRig as f0, getRigByName as f1, getRigChange as f2, getRigName as f3, getRigVersion as f4, getRigVersionById as f5, getSandbox as f6, getSandboxSessionEnvelope as f7, getScheduledTask as f8, getSession as f9, grantWorkspaceAccess as fA, hasCreditLedgerEntry as fB, hashMemoryText as fC, heartbeatCodexCredentialLease as fD, heartbeatCodexCredentialLeaseUntil as fE, heartbeatLeaseHolder as fF, ingestMachineMetricsSample as fG, initializeSessionStartAtomically as fH, insertFailedWorkspaceCapture as fI, insertMachineMetricsSeries as fJ, insertPtySession as fK, insertRecording as fL, insertWorkspaceCapture as fM, interruptedToolCallResult as fN, isCodexBilledTurn as fO, isMemoryTextTooLong as fP, isPrivateAddress as fQ, isSessionCompactionRequested as fR, isStripeWebhookProcessed as fS, latestWorkspaceCapture as fT, listApiKeys as fU, listCapabilityCatalogItems as fV, listCapabilityInstallations as fW, listCodexAccountStatuses as fX, listConnectionsMetadata as fY, listCreditBalancesByAccount as fZ, listDistinctRigVersionIdsInGroup as f_, getSessionByCreateIdempotencyKey as fa, getSessionCodexState as fb, getSessionEvent as fc, getSessionEventByClientEventId as fd, getSessionForSubject as fe, getSessionGoal as ff, getSessionHistoryItems as fg, getSessionLineage as fh, getSessionQueueSnapshot as fi, getSessionTurn as fj, getSessionTurnForAttempt as fk, getSocialConnection as fl, getStoredCapabilityHeaderCiphertext as fm, getStreamAcknowledgment as fn, getVariableSet as fo, getVariableSetByName as fp, getVariableSetValuesForRun as fq, getWorkspace as fr, getWorkspaceControlEvent as fs, getWorkspaceDefaultRigId as ft, getWorkspaceEnvironment as fu, getWorkspaceEnvironmentByName as fv, getWorkspaceEnvironmentValuesForRun as fw, getWorkspaceGrant as fx, getWorkspaceModelPolicy as fy, getWorkspacePack as fz, type AddSessionSystemUpdateResult as g, persistWarmSnapshot as g$, listEnabledMcpCapabilityServers as g0, listEnrollments as g1, listGitHubInstallationIdsForWorkspace as g2, listGitHubInstallationsForWorkspace as g3, listKnowledgeMemories as g4, listLiveModalSandboxLeaseAttributions as g5, listMeterableWarmLeases as g6, listOpenPtySessions as g7, listOutstandingSessionSystemUpdates as g8, listPackInstallations as g9, listWorkspacesForSubject as gA, loadCodexCredentialForRun as gB, loadConnectionCredentialForBroker as gC, loadIntegrationOAuthClient as gD, loadVariableSetForRun as gE, loadWorkspaceEnvironmentForRun as gF, lockWorkspaceInferenceControl as gG, markFileUploadFailed as gH, markSandboxFileResourcesMaterialized as gI, markScheduledTaskRunFailedIfQueued as gJ, markSessionSystemUpdateOutboxDeliveredInTransaction as gK, markSessionSystemUpdateOutboxFailed as gL, markSessionWorkflowWakeDelivered as gM, markSessionWorkflowWakeFailed as gN, markStaleRegistryCatalogItems as gO, markStripeWebhookProcessed as gP, markWarmLeaseInstanceLost as gQ, mcpServerIdForCapability as gR, moveQueuedTurnInTransaction as gS, mutateSessionControlInTransaction as gT, mutateWorkspaceControlInTransaction as gU, nextSessionHistoryPosition as gV, normalizeBearerScheme as gW, normalizeMemoryText as gX, orphanedResultRowIndicesForRepair as gY, peekSessionWork as gZ, persistDrainSnapshot as g_, listPendingCodexCapacityWakeTargets as ga, listPendingSessionTurns as gb, listRecordings as gc, listRegistryCatalogSurfaceKeys as gd, listRigChanges as ge, listRigVersions as gf, listRigs as gg, listSandboxes as gh, listScheduledTaskRuns as gi, listScheduledTasks as gj, listSessionEvents as gk, listSessionIdsInGroup as gl, listSessionMcpServerMetadata as gm, listSessionMcpServersForRun as gn, listSessionSystemUpdatesForTurn as go, listSessionTurns as gp, listSessions as gq, listSessionsForSubject as gr, listSocialConnections as gs, listSocialPosts as gt, listUsageEvents as gu, listVariableSets as gv, listWorkspaceControlEvents as gw, listWorkspaceEnvironments as gx, listWorkspaceMembers as gy, listWorkspacePacks as gz, AgentCommandAuthorityError as h, saveRunState as h$, planWorkspaceCaptureGc as h0, quarantineCodexCredentialForLease as h1, reArmDrainingLease as h2, readActiveSandbox as h3, readLease as h4, readMachineMetricsLatest as h5, readMachineMetricsLatestForWorkspace as h6, readMachineMetricsSeries as h7, reapExpiredSessionListSnapshots as h8, reapStaleLeaseHolders as h9, releaseCodexCredentialLease as hA, releaseLeaseHolder as hB, removeWorkspaceMember as hC, renameCodexAccount as hD, renderWorkspaceMemoryBlock as hE, replaceIntegrationOAuthClient as hF, requestSessionCompaction as hG, requestSessionTurnRecovery as hH, requireFile as hI, requireScheduledTask as hJ, requireSession as hK, requireSocialConnection as hL, requireWorkspace as hM, reserveSessionCommandReceipt as hN, reserveToolspaceCallForTurn as hO, resolveWorkspaceMemoryBlock as hP, revokeApiKey as hQ, revokeConnection as hR, revokeEnrollment as hS, revokeViewer as hT, rlsContextForWorkspace as hU, rlsStrategyFor as hV, sanitizeEventPayload as hW, sanitizeEventString as hX, sanitizeMemoryText as hY, sanitizeModelPayload as hZ, saveComposerDraftInTransaction as h_, reapStaleLeaseHoldersGlobal as ha, reconcileCodexCapacityWait as hb, recordAuditEvent as hc, recordCodexAccountConnectors as hd, recordCodexAccountUsage as he, recordCodexAccountUsageWithWakeTargets as hf, recordCodexTokenRefresh as hg, recordConnectionTokenRefresh as hh, recordConnectionUsed as hi, recordLeaseDataPlaneUrl as hj, recordLeaseTerminalDataPlaneUrl as hk, recordPendingSessionToolCallResult as hl, recordSessionActiveCodexCredential as hm, recordSkippedContextCompaction as hn, recordStreamAcknowledgment as ho, recordStripeWebhookEvent as hp, recordUsageEvent as hq, recordWarmingSandboxCreated as hr, recoverSessionDispatch as hs, refreshOAuthConnectionCredential as ht, registerDbBinding as hu, registerInternalUpdateWakeInTransaction as hv, registerPendingSessionToolCall as hw, registerSessionTurnAttemptClaim as hx, registerSessionWorkflowWakeInTransaction as hy, registerWorkspacePack as hz, type AgentInternalUpdateCommandResult as i, upsertCapabilityCatalogItem as i$, saveWorkspaceMemory as i0, searchWorkspaceMemories as i1, sendAgentMessageInTransaction as i2, serializeEffectiveSessionControl as i3, sessionSubject as i4, sessionsWithActiveOpOnEnrollment as i5, setActiveCodexCredential as i6, setActiveSandbox as i7, setCodexCredentialExhausted as i8, setCodexCredentialExhaustedWithWakeTargets as i9, steerQueuedTurnInTransaction as iA, storeIntegrationOAuthClient as iB, submitHumanPromptInTransaction as iC, sumUsageQuantity as iD, supersedeSessionCurrentDirectionInTransaction as iE, touchEnrollmentLastSeen as iF, touchLeaseHolder as iG, updateCodexRotationSettings as iH, updateConnection as iI, updateImportBatchCounts as iJ, updateKnowledgeMemory as iK, updatePackInstallationStatus as iL, updatePtySessionActivity as iM, updateRecording as iN, updateRig as iO, updateRigChangeStatus as iP, updateScheduledTask as iQ, updateScheduledTaskRun as iR, updateSessionCommandReceiptResult as iS, updateSessionGoal as iT, updateSessionMcpServerCredentials as iU, updateSessionTitle as iV, updateVariableSet as iW, updateWorkspace as iX, updateWorkspaceEnvironment as iY, updateWorkspaceSettings as iZ, upsertBillingCustomer as i_, setCodexCredentialStatus as ia, setCodexCredentialStatusById as ib, setConnectionStatus as ic, setEnrollmentDisplayState as id, setEnrollmentOpStreamState as ie, setEnrollmentWentOffline as ig, setInitialActiveCodexCredential as ih, setRlsContext as ii, setSessionCodexPin as ij, setSessionGoalLastContinuationTurn as ik, setSessionGoalStatus as il, setSessionLastInputTokensForTurnAttempt as im, setSessionPin as io, setTemporalWorkflowId as ip, setVariableSetVariable as iq, setWorkspaceDefaultRig as ir, setWorkspaceEnvironmentVariable as is, settleCodexCredentialFailover as it, settleCodexCredentialLeaseLoss as iu, settleScheduledTaskRunInTransaction as iv, settleSessionAttemptInterruptions as iw, settleSessionIdleWithParentOutbox as ix, shortMemoryId as iy, steerAgentSessionInTransaction as iz, type AppendEventInput as j, upsertCodexSubscriptionCredential as j0, upsertGitHubInstallation as j1, upsertMachineMetricsLatest as j2, upsertRegistryCapabilityCatalogItem as j3, upsertSandboxSessionEnvelope as j4, upsertSessionGoal as j5, upsertWorkspaceModelPolicy as j6, withAccountRls as j7, withCodexCapacityMutation as j8, withCodexCredentialRefreshLock as j9, withRlsContext as ja, withWorkspaceRls as jb, withWorkspaceSubjectRls as jc, withWorkspaceUsageLock as jd, workspaceCaptureAtRevision as je, workspaceCodexSubscriptionActive as jf, type ApplyContextCompactionResult as k, type ApplySessionTurnSettlementInput as l, type ApplySessionTurnSettlementResult as m, type ArmCodexCapacityWaitResult as n, CODEX_CAPACITY_REFRESH_MIN_MS as o, CODEX_CREDENTIAL_LEASE_TTL_MS as p, provisionRoles, CODEX_ROTATION_STRATEGIES as q, type ClaimSessionWorkForAttemptInput as r, type ClaimSessionWorkForAttemptResult as s, type ClearSessionContextResult as t, type CodexAccountStatus as u, type CodexAccountUsageSnapshot as v, type CodexAuthDeps as w, type CodexCapacityAvailabilityDecision as x, type CodexCapacityMutationResult as y, type CodexCapacityResetKind as z };
+export { type CorrectWorkspaceMemoryResult as $, AGENT_VISIBLE_MEMORY_STATUSES as A, type BootstrapWorkspaceInput as B, CODEX_CAPACITY_REFRESH_MAX_MS as C, type CodexCapacitySelectionContext as D, type CodexCapacityWait as E, type CodexCapacityWaitStatus as F, type CodexCapacityWakeTarget as G, type CodexCredentialForRun as H, type CodexCredentialLeaseCandidateFilter as I, type CodexCredentialLeaseCandidateFilterResult as J, type CodexCredentialLeasePolicyScopeResolver as K, type CodexCredentialLeaseQuarantine as L, type CodexCredentialLeaseResult as M, type CodexCredentialLeaseSelection as N, type CodexCredentialLeaseSelectionContext as O, type CodexCredentialStatus as P, type ProvisionResult, type ProvisionRolesOptions, type CodexCredentialTokens as Q, type CodexLeaseAccountStatus as R, type CodexPinSource as S, type CodexRotationSettings as T, type CodexRotationStrategy as U, type ComposerDraftRow as V, type ConnectionBrokerDeps as W, type ConnectionCredentialForBroker as X, ConnectionRefreshHttpError as Y, type ConsumeOAuthStateNonceInput as Z, type CorrectWorkspaceMemoryInput as _, type AcceptSessionApprovalDecisionResult as a, type MarkWarmLeaseInstanceLostResult as a$, type CreateCapabilityCatalogItemInput as a0, type CreateConnectionInput as a1, type CreateDbOptions as a2, type CreateImportBatchInput as a3, type CreateKnowledgeMemoryInput as a4, type CreatePackInstallationInput as a5, type CreateScheduledTaskInput as a6, type CreateSessionGoalInput as a7, type CreateSessionMcpServerInput as a8, type CreateSocialConnectionInput as a9, type IntegrationOAuthClientForUse as aA, type LeaseHolderKind as aB, type LeaseSnapshot as aC, type ListKnowledgeMemoryOptions as aD, type ListSessionEventsOptions as aE, type ListSessionsForSubjectOptions as aF, type ListSessionsOptions as aG, type LiveModalSandboxLeaseAttribution as aH, MACHINE_METRICS_SERIES_INTERVAL_MS as aI, MAX_INTERNAL_UPDATE_BATCH_BYTES as aJ, MAX_INTERNAL_UPDATE_BATCH_MEMBERS as aK, MAX_INTERNAL_UPDATE_BYTES as aL, MEMORY_ACTIVE_RECORD_CAP as aM, MEMORY_BLOCK_KIND_ORDER as aN, MEMORY_BLOCK_RECORD_LIMIT as aO, MEMORY_CORRECT_TOOL_DESCRIPTION as aP, MEMORY_KIND_SECTION_TITLES as aQ, MEMORY_NEAR_DUP_COSINE_THRESHOLD as aR, MEMORY_NEAR_DUP_NEIGHBORS as aS, MEMORY_SAVE_TOOL_DESCRIPTION as aT, MEMORY_SEARCH_DEFAULT_LIMIT as aU, MEMORY_SEARCH_MAX_LIMIT as aV, MEMORY_SEARCH_TOOL_DESCRIPTION as aW, MEMORY_TEXT_MAX_CHARS as aX, MEMORY_VISIBLE_RECORD_CAP as aY, type MachineMetricsRow as aZ, type MachineMetricsSample as a_, type CreateSocialPostInput as aa, type CreditBalanceByAccount as ab, type Database as ac, type DbClient as ad, type DeviceEnrollmentRequestRecord as ae, type DeviceEnrollmentStatus as af, type EditQueueCommandResult as ag, type EffectiveControlBlocker as ah, type EffectiveControlResumeOption as ai, type EffectiveControlState as aj, type EffectiveSessionControl as ak, type EnableCapabilityInstallationInput as al, type EnabledMcpCapabilityServer as am, type EnqueueSessionTurnInput as an, type EnrollmentExposure as ao, type EnrollmentOs as ap, type EnrollmentRecord as aq, type EnrollmentStatus as ar, type ExpiredFileUploadCleanupClaim as as, type FileUploadCleanupClaimResult as at, type ForceDrainResult as au, type GitHubInstallation as av, type GoalContinuationDecision as aw, type ImportBatch as ax, type InitializeSessionStartInput as ay, type InitializeSessionStartResult as az, type AccrueWarmSecondsResult as b, type SetSessionCodexPinOptions as b$, type MemoryBlockRecord as b0, type MemoryEmbedder as b1, type MemorySanitizeResult as b2, type MeterableWarmLease as b3, type PendingSessionToolCallInput as b4, type QueueCommandConflictCode as b5, QueueCommandConflictError as b6, type QueueCommandResult as b7, type QueuedTurnRow as b8, type ReapDrainable as b9, type SaveWorkspaceMemoryResult as bA, type SessionAttemptInterruptionSettlement as bB, type SessionCodexState as bC, type SessionCommandActor as bD, SessionCommandIdempotencyError as bE, type SessionCommandReceiptRow as bF, SessionContextBusyError as bG, SessionControlConflictError as bH, SessionControlInvariantError as bI, type SessionControlMutationResult as bJ, type SessionLineage as bK, SessionListAccessError as bL, type SessionListCursor as bM, SessionListCursorError as bN, type SessionMcpServerForRun as bO, SessionPinAccessError as bP, SessionPinVersionConflictError as bQ, type SessionRecordingCodec as bR, type SessionRecordingMode as bS, type SessionRecordingRow as bT, type SessionRecordingState as bU, type SessionSystemUpdateOutboxDelivery as bV, type SessionTurnAttemptOutcome as bW, type SessionTurnRecordingSettlement as bX, type SessionWorkPeek as bY, type SessionWorkTrigger as bZ, type SessionWorkflowWake as b_, type ReconcileCodexCapacityWaitResult as ba, type RecoverSessionDispatchInput as bb, type RecoverSessionDispatchResult as bc, type RegisterWorkspacePackInput as bd, type RegistryCapabilityCatalogItemInput as be, type RegistryCatalogSurfaceKey as bf, type ReplaceIntegrationOAuthClientInput as bg, type RequestSessionTurnRecoveryInput as bh, type RequestSessionTurnRecoveryResult as bi, type ResolveConnectionCredentialInput as bj, type ResolveConnectionCredentialResult as bk, RigActiveVersionChangedError as bl, RigChangeAlreadyVerifyingError as bm, RigChangeTransitionError as bn, type RigVersionContentInput as bo, type RlsContext as bp, type RlsStrategy as bq, SESSION_ANCESTRY_LIMIT as br, SandboxImageConflictError as bs, type SandboxKind as bt, type SandboxLeaseLiveness as bu, SandboxLeaseSupersededError as bv, type SandboxPtySessionRow as bw, type SandboxRecord as bx, SandboxRigConflictError as by, type SaveWorkspaceMemoryInput as bz, type AcquireLeaseInput as c, claimFileUploadCleanup as c$, type SettleCodexCredentialFailoverResult as c0, type SettleCodexCredentialLeaseLossResult as c1, type SteerQueueCommandResult as c2, type StoreIntegrationOAuthClientInput as c3, type StoredIntegrationOAuthClient as c4, type StreamAcknowledgment as c5, type SubmitHumanPromptResult as c6, type ToolspaceCallReservation as c7, type TurnAttemptFenceRejectReason as c8, type UpdateConnectionInput as c9, acquireLease as cA, activateRigVersion as cB, addSessionSystemUpdate as cC, addSessionSystemUpdateWithSourceMutation as cD, allAccountPermissions as cE, allWorkspacePermissions as cF, appendSessionEventToSandboxGroup as cG, appendSessionEvents as cH, appendSessionEventsAndUpdateSession as cI, appendSessionEventsForTurnAttempt as cJ, appendSessionEventsWithLockedSessionUpdate as cK, appendSessionHistoryItems as cL, applyContextCompaction as cM, applyCreditDebitUpToBalance as cN, applyCreditLedgerEntry as cO, applySessionTurnSettlement as cP, approveDeviceEnrollmentRequest as cQ, armCodexCapacityWait as cR, assertAgentCommandAuthorityInTransaction as cS, autoResumeSessionBranchInTransaction as cT, beginRigChangeVerificationAttempt as cU, bootstrapWorkspace as cV, buildChildCompletionDigest as cW, buildCodexTokenResolver as cX, buildConnectionTokenResolver as cY, canonicalSessionCommandHash as cZ, claimExpiredFileUploadCleanup as c_, type UpdateImportBatchCountsInput as ca, type UpdateKnowledgeMemoryInput as cb, type UpdateScheduledTaskInput as cc, type UpdateSessionMcpServerCredentialsInput as cd, type UpdateSessionMcpServerCredentialsResult as ce, type UserLookup as cf, type VariableSetForRun as cg, WORKSPACE_MEMORY_BLOCK_EMPTY as ch, WORKSPACE_MEMORY_BLOCK_HEADER_POPULATED as ci, WORKSPACE_MEMORY_BLOCK_TOKEN_BUDGET as cj, type WorkspaceCaptureCommitResult as ck, type WorkspaceCaptureGcPlan as cl, type WorkspaceCaptureGcRow as cm, type WorkspaceCaptureRow as cn, type WorkspaceControlLockMode as co, type WorkspaceControlMutationResult as cp, type WorkspaceEnvironmentForRun as cq, type WorkspaceMemoryOrigin as cr, type WorkspaceMemorySearchInput as cs, type WorkspaceMemorySearchMode as ct, type WorkspaceMemorySearchResult as cu, type WorkspaceModelPolicy as cv, abandonRecordingForTurnAttempt as cw, acceptSessionApprovalDecision as cx, accrueWarmSeconds as cy, acquireCodexCredentialLease as cz, type AcquireLeaseResult as d, decryptEnvironmentValue as d$, claimPendingSessionSystemUpdateOutbox as d0, claimPendingSessionWorkflowWakes as d1, claimSessionWorkForAttempt as d2, clearDurablePendingSessionToolCalls as d3, clearEnrollmentWentOffline as d4, clearSessionContext as d5, clearSessionGoal as d6, clearedContextMarkerItem as d7, closePtySession as d8, closeSessionTurnAttemptInTransaction as d9, countWorkspaceEnvironments as dA, countWorkspacesForAccount as dB, createApiKey as dC, createConnection as dD, createDb as dE, createDeviceEnrollmentRequest as dF, createEnrollment as dG, createFileUpload as dH, createImportBatch as dI, createKnowledgeMemory as dJ, createRig as dK, createRigChange as dL, createRigVersion as dM, createRigVersionForChangePromotion as dN, createSandbox as dO, createScheduledTask as dP, createScheduledTaskRun as dQ, createSession as dR, createSessionGoal as dS, createSessionMcpServers as dT, createSessionWithIdempotencyKey as dU, createSocialConnection as dV, createSocialPost as dW, createVariableSet as dX, createWorkspace as dY, createWorkspaceEnvironment as dZ, decodeSessionListCursor as d_, codexCapacityRefreshBackoffMs as da, commitWarmingToWarm as db, completeExpiredFileUploadCleanup as dc, completeFileUpload as dd, completeFileUploadCleanup as de, computeWorkspaceCaptureGcPlan as df, confirmDrainCold as dg, consumeDeviceEnrollmentRequest as dh, consumeIntegrationOAuthStateNonce as di, correctWorkspaceMemory as dj, countActiveApiKeysForWorkspace as dk, countActiveSessionHistoryItems as dl, countActiveSessionsForWorkspace as dm, countActiveSessionsUsingEnvironment as dn, countActiveSessionsUsingVariableSet as dp, countConsecutiveReactiveRotations as dq, countQueuedTurns as dr, countRigs as ds, countSandboxLeasesByLiveness as dt, countScheduledTasksForWorkspace as du, countScheduledTasksUsingEnvironment as dv, countScheduledTasksUsingVariableSet as dw, countSessionHistoryItems as dx, countSessionsUsingRig as dy, countVariableSets as dz, type ActiveSandboxPointer as e, getRecording as e$, decryptedCapabilityHeaders as e0, deleteRecording as e1, deleteRig as e2, deleteRigIfNoActiveSessions as e3, deleteScheduledTask as e4, deleteSessionQueueItemInTransaction as e5, deleteVariableSet as e6, deleteVariableSetVariable as e7, deleteWorkspace as e8, deleteWorkspaceCaptureRows as e9, forceDrainOverLimitViewerOnlyBoxes as eA, getActiveSessionHistoryItems as eB, getAnySessionInGroup as eC, getBillingBalance as eD, getBillingCustomer as eE, getCapabilityCatalogItem as eF, getCapabilityInstallation as eG, getCodexCapacityWaitForSession as eH, getCodexCredentialStatus as eI, getCodexRotationSettings as eJ, getComposerDraftInTransaction as eK, getConnectionMetadata as eL, getDeviceEnrollmentRequestByDeviceCode as eM, getEnrollment as eN, getFile as eO, getFileUpload as eP, getKnowledgeMemory as eQ, getLatestRunState as eR, getLatestStartedSessionTurn as eS, getManagedAccount as eT, getManagedUserByEmail as eU, getMaterializedSandboxFileResources as eV, getOpenPtySession as eW, getOrCreateSessionSystemUpdateOutbox as eX, getPackInstallation as eY, getPendingDeviceEnrollmentRequestByUserCode as eZ, getPendingDeviceEnrollmentRequestByUserCodeGlobal as e_, deleteWorkspaceEnvironment as ea, deleteWorkspaceEnvironmentVariable as eb, deleteWorkspacePack as ec, denyDeviceEnrollmentRequest as ed, disableCapabilityInstallation as ee, disconnectAllCodexAccounts as ef, disconnectCodexAccount as eg, editQueuedTurnInTransaction as eh, enableCapabilityInstallation as ei, enablePackInstallation as ej, encodeSessionListCursor as ek, encryptEnvironmentValue as el, enqueueSessionTurn as em, enqueueSessionWorkflowWake as en, enqueueSessionWorkflowWakeIfRunnable as eo, enqueueSessionWorkflowWakeInTransaction as ep, ensureCodexRotationSettings as eq, ensureManagedAccessForUser as er, estimateMemoryTokens as es, evaluateGoalContinuation as et, evaluateSessionControl as eu, evaluateSessionControls as ev, failWarmingToCold as ew, fetchCodexUsageForAccount as ex, finalizeEnrollmentByToken as ey, findActiveApiKeyByHash as ez, type AddSessionSystemUpdateInput as f, listDistinctRigVersionIdsInGroup as f$, getRig as f0, getRigByName as f1, getRigChange as f2, getRigName as f3, getRigVersion as f4, getRigVersionById as f5, getSandbox as f6, getSandboxSessionEnvelope as f7, getScheduledTask as f8, getSession as f9, getWorkspacePack as fA, grantWorkspaceAccess as fB, hasCreditLedgerEntry as fC, hashMemoryText as fD, heartbeatCodexCredentialLease as fE, heartbeatCodexCredentialLeaseUntil as fF, heartbeatLeaseHolder as fG, ingestMachineMetricsSample as fH, initializeSessionStartAtomically as fI, insertFailedWorkspaceCapture as fJ, insertMachineMetricsSeries as fK, insertPtySession as fL, insertRecording as fM, insertWorkspaceCapture as fN, interruptedToolCallResult as fO, isCodexBilledTurn as fP, isMemoryTextTooLong as fQ, isPrivateAddress as fR, isSessionCompactionRequested as fS, isStripeWebhookProcessed as fT, latestWorkspaceCapture as fU, listApiKeys as fV, listCapabilityCatalogItems as fW, listCapabilityInstallations as fX, listCodexAccountStatuses as fY, listConnectionsMetadata as fZ, listCreditBalancesByAccount as f_, getSessionByCreateIdempotencyKey as fa, getSessionCodexState as fb, getSessionEvent as fc, getSessionEventByClientEventId as fd, getSessionForSubject as fe, getSessionGoal as ff, getSessionHistoryItems as fg, getSessionLineage as fh, getSessionQueueSnapshot as fi, getSessionSystemUpdateOutboxByDedupeKey as fj, getSessionTurn as fk, getSessionTurnForAttempt as fl, getSocialConnection as fm, getStoredCapabilityHeaderCiphertext as fn, getStreamAcknowledgment as fo, getVariableSet as fp, getVariableSetByName as fq, getVariableSetValuesForRun as fr, getWorkspace as fs, getWorkspaceControlEvent as ft, getWorkspaceDefaultRigId as fu, getWorkspaceEnvironment as fv, getWorkspaceEnvironmentByName as fw, getWorkspaceEnvironmentValuesForRun as fx, getWorkspaceGrant as fy, getWorkspaceModelPolicy as fz, type AddSessionSystemUpdateResult as g, persistDrainSnapshot as g$, listDistinctVariableSetIdsInGroup as g0, listEnabledMcpCapabilityServers as g1, listEnrollments as g2, listGitHubInstallationIdsForWorkspace as g3, listGitHubInstallationsForWorkspace as g4, listKnowledgeMemories as g5, listLiveModalSandboxLeaseAttributions as g6, listMeterableWarmLeases as g7, listOpenPtySessions as g8, listOutstandingSessionSystemUpdates as g9, listWorkspacePacks as gA, listWorkspacesForSubject as gB, loadCodexCredentialForRun as gC, loadConnectionCredentialForBroker as gD, loadIntegrationOAuthClient as gE, loadVariableSetForRun as gF, loadWorkspaceEnvironmentForRun as gG, lockWorkspaceInferenceControl as gH, markFileUploadFailed as gI, markSandboxFileResourcesMaterialized as gJ, markScheduledTaskRunFailedIfQueued as gK, markSessionSystemUpdateOutboxDeliveredInTransaction as gL, markSessionSystemUpdateOutboxFailed as gM, markSessionWorkflowWakeDelivered as gN, markSessionWorkflowWakeFailed as gO, markStaleRegistryCatalogItems as gP, markStripeWebhookProcessed as gQ, markWarmLeaseInstanceLost as gR, mcpServerIdForCapability as gS, moveQueuedTurnInTransaction as gT, mutateSessionControlInTransaction as gU, mutateWorkspaceControlInTransaction as gV, nextSessionHistoryPosition as gW, normalizeBearerScheme as gX, normalizeMemoryText as gY, orphanedResultRowIndicesForRepair as gZ, peekSessionWork as g_, listPackInstallations as ga, listPendingCodexCapacityWakeTargets as gb, listPendingSessionTurns as gc, listRecordings as gd, listRegistryCatalogSurfaceKeys as ge, listRigChanges as gf, listRigVersions as gg, listRigs as gh, listSandboxes as gi, listScheduledTaskRuns as gj, listScheduledTasks as gk, listSessionEvents as gl, listSessionIdsInGroup as gm, listSessionMcpServerMetadata as gn, listSessionMcpServersForRun as go, listSessionSystemUpdatesForTurn as gp, listSessionTurns as gq, listSessions as gr, listSessionsForSubject as gs, listSocialConnections as gt, listSocialPosts as gu, listUsageEvents as gv, listVariableSets as gw, listWorkspaceControlEvents as gx, listWorkspaceEnvironments as gy, listWorkspaceMembers as gz, AgentCommandAuthorityError as h, saveComposerDraftInTransaction as h$, persistWarmSnapshot as h0, planWorkspaceCaptureGc as h1, quarantineCodexCredentialForLease as h2, reArmDrainingLease as h3, readActiveSandbox as h4, readLease as h5, readMachineMetricsLatest as h6, readMachineMetricsLatestForWorkspace as h7, readMachineMetricsSeries as h8, reapExpiredSessionListSnapshots as h9, registerWorkspacePack as hA, releaseCodexCredentialLease as hB, releaseLeaseHolder as hC, removeWorkspaceMember as hD, renameCodexAccount as hE, renderWorkspaceMemoryBlock as hF, replaceIntegrationOAuthClient as hG, requestSessionCompaction as hH, requestSessionTurnRecovery as hI, requireFile as hJ, requireScheduledTask as hK, requireSession as hL, requireSocialConnection as hM, requireWorkspace as hN, reserveSessionCommandReceipt as hO, reserveToolspaceCallForTurn as hP, resolveWorkspaceMemoryBlock as hQ, revokeApiKey as hR, revokeConnection as hS, revokeEnrollment as hT, revokeViewer as hU, rlsContextForWorkspace as hV, rlsStrategyFor as hW, sanitizeEventPayload as hX, sanitizeEventString as hY, sanitizeMemoryText as hZ, sanitizeModelPayload as h_, reapStaleLeaseHolders as ha, reapStaleLeaseHoldersGlobal as hb, reconcileCodexCapacityWait as hc, recordAuditEvent as hd, recordCodexAccountConnectors as he, recordCodexAccountUsage as hf, recordCodexAccountUsageWithWakeTargets as hg, recordCodexTokenRefresh as hh, recordConnectionTokenRefresh as hi, recordConnectionUsed as hj, recordLeaseDataPlaneUrl as hk, recordLeaseTerminalDataPlaneUrl as hl, recordPendingSessionToolCallResult as hm, recordSessionActiveCodexCredential as hn, recordSkippedContextCompaction as ho, recordStreamAcknowledgment as hp, recordStripeWebhookEvent as hq, recordUsageEvent as hr, recordWarmingSandboxCreated as hs, recoverSessionDispatch as ht, refreshOAuthConnectionCredential as hu, registerDbBinding as hv, registerInternalUpdateWakeInTransaction as hw, registerPendingSessionToolCall as hx, registerSessionTurnAttemptClaim as hy, registerSessionWorkflowWakeInTransaction as hz, type AgentInternalUpdateCommandResult as i, upsertBillingCustomer as i$, saveRunState as i0, saveWorkspaceMemory as i1, searchWorkspaceMemories as i2, sendAgentMessageInTransaction as i3, serializeEffectiveSessionControl as i4, sessionSubject as i5, sessionsWithActiveOpOnEnrollment as i6, setActiveCodexCredential as i7, setActiveSandbox as i8, setCodexCredentialExhausted as i9, steerAgentSessionInTransaction as iA, steerQueuedTurnInTransaction as iB, storeIntegrationOAuthClient as iC, submitHumanPromptInTransaction as iD, sumUsageQuantity as iE, supersedeSessionCurrentDirectionInTransaction as iF, touchEnrollmentLastSeen as iG, touchLeaseHolder as iH, updateCodexRotationSettings as iI, updateConnection as iJ, updateImportBatchCounts as iK, updateKnowledgeMemory as iL, updatePackInstallationStatus as iM, updatePtySessionActivity as iN, updateRecording as iO, updateRig as iP, updateRigChangeStatus as iQ, updateScheduledTask as iR, updateScheduledTaskRun as iS, updateSessionCommandReceiptResult as iT, updateSessionGoal as iU, updateSessionMcpServerCredentials as iV, updateSessionTitle as iW, updateVariableSet as iX, updateWorkspace as iY, updateWorkspaceEnvironment as iZ, updateWorkspaceSettings as i_, setCodexCredentialExhaustedWithWakeTargets as ia, setCodexCredentialStatus as ib, setCodexCredentialStatusById as ic, setConnectionStatus as id, setEnrollmentDisplayState as ie, setEnrollmentOpStreamState as ig, setEnrollmentWentOffline as ih, setInitialActiveCodexCredential as ii, setRlsContext as ij, setSessionCodexPin as ik, setSessionGoalLastContinuationTurn as il, setSessionGoalStatus as im, setSessionLastInputTokensForTurnAttempt as io, setSessionPin as ip, setTemporalWorkflowId as iq, setVariableSetVariable as ir, setWorkspaceDefaultRig as is, setWorkspaceEnvironmentVariable as it, settleCodexCredentialFailover as iu, settleCodexCredentialLeaseLoss as iv, settleScheduledTaskRunInTransaction as iw, settleSessionAttemptInterruptions as ix, settleSessionIdleWithParentOutbox as iy, shortMemoryId as iz, type AppendEventInput as j, upsertCapabilityCatalogItem as j0, upsertCodexSubscriptionCredential as j1, upsertGitHubInstallation as j2, upsertMachineMetricsLatest as j3, upsertRegistryCapabilityCatalogItem as j4, upsertSandboxSessionEnvelope as j5, upsertSessionGoal as j6, upsertWorkspaceModelPolicy as j7, withAccountRls as j8, withCodexCapacityMutation as j9, withCodexCredentialRefreshLock as ja, withRlsContext as jb, withWorkspaceRls as jc, withWorkspaceSubjectRls as jd, withWorkspaceUsageLock as je, workspaceCaptureAtRevision as jf, workspaceCodexSubscriptionActive as jg, type ApplyContextCompactionResult as k, type ApplySessionTurnSettlementInput as l, type ApplySessionTurnSettlementResult as m, type ArmCodexCapacityWaitResult as n, CODEX_CAPACITY_REFRESH_MIN_MS as o, CODEX_CREDENTIAL_LEASE_TTL_MS as p, provisionRoles, CODEX_ROTATION_STRATEGIES as q, type ClaimSessionWorkForAttemptInput as r, type ClaimSessionWorkForAttemptResult as s, type ClearSessionContextResult as t, type CodexAccountStatus as u, type CodexAccountUsageSnapshot as v, type CodexAuthDeps as w, type CodexCapacityAvailabilityDecision as x, type CodexCapacityMutationResult as y, type CodexCapacityResetKind as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/db",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "description": "OpenGeni persistence: Drizzle schema, RLS-scoped query layer, the SQL migration runner, and role provisioning.",
   "license": "Apache-2.0",
   "repository": {
@@ -49,8 +49,8 @@
     "prepublishOnly": "bash ../../scripts/prepublish-guard"
   },
   "dependencies": {
-    "@opengeni/codex": "^0.2.2",
-    "@opengeni/config": "^0.5.0",
+    "@opengeni/codex": "^0.2.3",
+    "@opengeni/config": "^0.5.1",
     "@opengeni/contracts": "^0.10.0",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.7"

package/src/index.ts

@@ -19826,7 +19826,7 @@ export async function peekSessionWork(
  * Commit the workflow's terminal-for-now idle decision and its parent delivery
  * source in one transaction. A crash after commit leaves a pending outbox row for
  * the global reconciler; a normal caller immediately enriches/delivers the same
- * dedupe identity through notifyParentOfChildTerminal.
+ * dedupe identity through notifyParentOfChildIdle.
  */
 export async function settleSessionIdleWithParentOutbox(
   db: Database,
@@ -21772,6 +21772,52 @@ function mapSystemUpdateOutboxRow(row: {
   };
 }
 
+/**
+ * Read the exact durable parent-update row created by terminal turn settlement.
+ * Failure delivery must never upsert this row: settlement owns its payload and
+ * turn provenance, while the activity layer only delivers the committed fact.
+ */
+export async function getSessionSystemUpdateOutboxByDedupeKey(
+  db: Database,
+  input: { accountId: string; workspaceId: string; dedupeKey: string },
+): Promise<SessionSystemUpdateOutboxDelivery | null> {
+  return await withRlsContext(
+    db,
+    { accountId: input.accountId, workspaceId: input.workspaceId },
+    async (scopedDb) => {
+      const [row] = await scopedDb
+        .select()
+        .from(schema.sessionSystemUpdateOutbox)
+        .where(
+          and(
+            eq(schema.sessionSystemUpdateOutbox.workspaceId, input.workspaceId),
+            eq(schema.sessionSystemUpdateOutbox.dedupeKey, input.dedupeKey),
+          ),
+        )
+        .limit(1);
+      if (!row) return null;
+      if (row.kind !== "child_terminal_result") {
+        throw new Error(`System-update outbox contains retired kind ${row.kind}`);
+      }
+      return {
+        id: row.id,
+        status: row.status as "pending" | "delivered",
+        accountId: row.accountId,
+        workspaceId: row.workspaceId,
+        sourceSessionId: row.sourceSessionId,
+        targetSessionId: row.targetSessionId,
+        dedupeKey: row.dedupeKey,
+        kind: "child_terminal_result",
+        classification: row.classification as SystemUpdateClassification,
+        sourceId: row.sourceId,
+        summary: row.summary,
+        payload: parseChildTerminalResultPayload(row.payload),
+        lineage: row.lineage,
+      };
+    },
+  );
+}
+
 export async function claimPendingSessionSystemUpdateOutbox(
   db: Database,
   limit = 100,