@opengeni/db 1.0.2-canary.37191796234001 → 1.0.2

package/dist/canonical-human-identities.js

@@ -11,9 +11,9 @@ import {
   getCanonicalHumanIdentityProjection,
   synchronizeCanonicalHumanLoginBindings,
   validateCanonicalHumanSession
-} from "./chunk-O6BNEXM5.js";
-import "./chunk-3USJENNH.js";
-import "./chunk-CPVKIK7O.js";
+} from "./chunk-KEDWSSNP.js";
+import "./chunk-56MYWKQV.js";
+import "./chunk-LDTQGYD2.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/capability-reconciliation.js

@@ -1,7 +1,7 @@
 import {
   withWorkspaceRls
-} from "./chunk-3USJENNH.js";
-import "./chunk-CPVKIK7O.js";
+} from "./chunk-56MYWKQV.js";
+import "./chunk-LDTQGYD2.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 

package/dist/child-outbox-authority.d.ts

@@ -0,0 +1,120 @@
+import type { Database } from "./database.js";
+import * as schema from "./schema.js";
+/** Preserve the accepted producer evidence identically for every notice kind. */
+export declare function parentOutboxAuthorityTx(tx: Database, workspaceId: string, session: Pick<typeof schema.sessions.$inferSelect, "id" | "accountId" | "parentTurnId"> & {
+    parentSessionId: string;
+}): Promise<{
+    personalConnectionDelegations: {
+        serverId: string;
+        canonicalServerId?: string | undefined;
+        connectionId: string;
+        originWorkspaceId?: string | undefined;
+        ownerSubjectId: string;
+        providerDomain: string;
+        kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+        connectionType?: "atlassian" | "github_personal" | "mcp" | "social" | undefined;
+        userDelegation?: {
+            authorityId: string;
+            grantId: string;
+            organizationId: string;
+            workspaceId: string;
+            sessionId: string | null;
+            action: string;
+            mode: "always" | "once" | "session";
+            context: "user_private" | "workspace_shared";
+            authorityEpoch: number | null;
+            authorityGeneration: number;
+            grantGeneration: number;
+            resourceVersionId?: string | null | undefined;
+        } | undefined;
+        personalGitHubRepositorySelection?: {
+            credentialBindingId: string;
+            connectionAuthorityGeneration: number;
+            selectionGeneration: number;
+            repositories: {
+                repositoryId: string;
+                fullName: string;
+                canonicalUrl: string;
+                ref: string;
+                access: "read" | "write";
+                selectionGeneration: number;
+            }[];
+        } | undefined;
+        outputDestination?: {
+            folderId: string;
+            folderName: string;
+            driveId: string | null;
+            location: "my_drive" | "shared_drive";
+            selectedAt: string;
+        } | undefined;
+    }[];
+    mcpAccountBindings: {
+        serverId: string;
+        canonicalServerId: string;
+        connectionId: string;
+        originWorkspaceId: string;
+        subjectScope: "subject" | "workspace";
+        ownerSubjectId: string | null;
+        accountLabel: string;
+        providerDomain: string;
+        kind: "api_key" | "app_install" | "delegated" | "oauth2";
+        connectionRef: {
+            connectionId?: string | undefined;
+            accountSelection?: "all_eligible" | undefined;
+            authoritySource?: "host" | undefined;
+            hostBinding?: {
+                bindingId: string;
+                generation: number;
+            } | {
+                selection: "accepted_turn";
+            } | undefined;
+            provider?: string | undefined;
+            providerDomain: string;
+            kind?: "api_key" | "app_install" | "delegated" | "oauth2" | undefined;
+            scopes?: string[] | undefined;
+            resource?: string | undefined;
+            selectedResources?: {
+                id: string;
+                kind: "repository";
+            }[] | undefined;
+            subjectScope?: "subject" | "workspace" | undefined;
+        };
+        connectionAuthorityGeneration?: number | undefined;
+    }[] | null;
+    xaiProviderAccountAuthoritySnapshot: {
+        version: 1;
+        scope: "organization";
+    } | {
+        version: 1;
+        scope: "workspace";
+    } | {
+        version: 1;
+        scope: "user";
+        authorityGeneration: number;
+    } | {
+        readonly version: 1;
+        readonly scope: "workspace";
+    };
+    claudeProviderAccountAuthoritySnapshot: {
+        version: 1;
+        scope: "organization";
+    } | {
+        version: 1;
+        scope: "workspace";
+    } | {
+        version: 1;
+        scope: "user";
+        authorityGeneration: number;
+    } | {
+        readonly version: 1;
+        readonly scope: "workspace";
+    };
+    lineage: {
+        childSessionId: string;
+        parentSessionId: string;
+        parentTurnId?: string;
+        connectionAuthoritySubjectId?: string | null;
+        xaiAuthoritySubjectId?: string;
+        claudeAuthoritySubjectId?: string;
+    };
+}>;

package/dist/{chunk-3USJENNH.js → chunk-56MYWKQV.js}

@@ -3,7 +3,7 @@ import {
   sessions,
   workspaceSessionActivityRevisions,
   workspaces
-} from "./chunk-CPVKIK7O.js";
+} from "./chunk-LDTQGYD2.js";
 import {
   LOSSLESS_CONTENT_WRITER_APPLICATION_NAME
 } from "./chunk-P7YDM2RI.js";
@@ -853,4 +853,4 @@ export {
   withAccountRls,
   dbBindingFor
 };
-//# sourceMappingURL=chunk-3USJENNH.js.map
+//# sourceMappingURL=chunk-56MYWKQV.js.map

package/dist/{chunk-A7H7XNLA.js → chunk-7POTLB24.js}

@@ -1,7 +1,7 @@
 import {
   setSubjectRlsContext,
   withRlsContext
-} from "./chunk-3USJENNH.js";
+} from "./chunk-56MYWKQV.js";
 
 // src/connection-token-resolver.ts
 import { normalizeSlackScopes, OFFICIAL_SLACK_MCP_URL } from "@opengeni/contracts/slack-rest-mcp";
@@ -857,4 +857,4 @@ export {
   refreshOAuthConnectionCredential,
   isPrivateAddress
 };
-//# sourceMappingURL=chunk-A7H7XNLA.js.map
+//# sourceMappingURL=chunk-7POTLB24.js.map