@opengeni/db 1.0.2-canary.37202341988001 → 1.1.0

package/dist/artifact-catalog.d.ts

@@ -4,6 +4,8 @@ export type ArtifactCatalogPosition = {
     key: string;
     kind: ArtifactCatalogKind;
     id: string;
+    /** Legacy cursor frontiers did not carry this bit. */
+    pinned?: boolean | undefined;
 };
 /** Internal candidates are NOT an authorized public projection. */
 export type ArtifactCatalogCandidate = {
@@ -18,7 +20,17 @@ export type ArtifactCatalogCandidate = {
     source_session_id: string | null;
     version_id: string | null;
     sort_key: string;
+    pinned?: boolean;
 };
+/** API callers must first verify publish permission and domain-specific read authority. */
+export declare function updateArtifactPin(db: Database, scope: {
+    accountId: string;
+    workspaceId: string;
+}, input: {
+    kind: ArtifactCatalogKind;
+    artifactId: string;
+    pinned: boolean;
+}): Promise<void>;
 /** Called only after immutable bytes have been retained by explicit publication. */
 export declare function recordSandboxFilePublication(db: Database, input: {
     accountId: string;

package/dist/canonical-human-identities.js

@@ -11,9 +11,9 @@ import {
   getCanonicalHumanIdentityProjection,
   synchronizeCanonicalHumanLoginBindings,
   validateCanonicalHumanSession
-} from "./chunk-KEDWSSNP.js";
-import "./chunk-56MYWKQV.js";
-import "./chunk-LDTQGYD2.js";
+} from "./chunk-7Z7ALFRE.js";
+import "./chunk-SKYRM7R7.js";
+import "./chunk-VOB6TXSJ.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/capability-reconciliation.js

@@ -1,7 +1,7 @@
 import {
   withWorkspaceRls
-} from "./chunk-56MYWKQV.js";
-import "./chunk-LDTQGYD2.js";
+} from "./chunk-SKYRM7R7.js";
+import "./chunk-VOB6TXSJ.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 

package/dist/{chunk-KEDWSSNP.js → chunk-7Z7ALFRE.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 
 // src/canonical-human-identities.ts
 import { createHash } from "crypto";
@@ -318,4 +318,4 @@ export {
   getCanonicalHumanIdentityProjection,
   applyCanonicalHumanIdentityOperation
 };
-//# sourceMappingURL=chunk-KEDWSSNP.js.map
+//# sourceMappingURL=chunk-7Z7ALFRE.js.map

package/dist/{chunk-OQZOGCLG.js → chunk-BLUQG54M.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withWorkspaceSubjectRls
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 
 // src/connect-attempts.ts
 import { createHash } from "crypto";
@@ -216,4 +216,4 @@ export {
   claimConnectOperation,
   finishConnectOperation
 };
-//# sourceMappingURL=chunk-OQZOGCLG.js.map
+//# sourceMappingURL=chunk-BLUQG54M.js.map

package/dist/{chunk-Y77PVZZD.js → chunk-BZV5ZDRY.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 
 // src/editable-artifacts.ts
 import { createHash } from "crypto";
@@ -3592,4 +3592,4 @@ export {
   PostgresEditableArtifactLiveReadStore,
   transactionallyAuthorizeEditableArtifactActor
 };
-//# sourceMappingURL=chunk-Y77PVZZD.js.map
+//# sourceMappingURL=chunk-BZV5ZDRY.js.map

package/dist/{chunk-MACELCXG.js → chunk-CIGHXFPD.js}

@@ -6,7 +6,7 @@ import {
   setSubjectRlsContext,
   withRlsContext,
   withWorkspaceRls
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 import {
   connections,
   creditLedgerEntries,
@@ -18,7 +18,7 @@ import {
   workspaceVideoGenerationPolicies,
   workspaceVideoGenerationQuotas,
   workspaces
-} from "./chunk-LDTQGYD2.js";
+} from "./chunk-VOB6TXSJ.js";
 
 // src/video-generation.ts
 import {
@@ -1332,4 +1332,4 @@ export {
   mediaGenerationResultForStoredOperation,
   getVideoGenerationOperationSummary
 };
-//# sourceMappingURL=chunk-MACELCXG.js.map
+//# sourceMappingURL=chunk-CIGHXFPD.js.map

package/dist/{chunk-7S53WLPI.js → chunk-EKXCF3FH.js}

@@ -1,6 +1,6 @@
 import {
   cancelUnacceptedVideoGenerationsForToolCallsInTransaction
-} from "./chunk-MACELCXG.js";
+} from "./chunk-CIGHXFPD.js";
 import {
   external_exports
 } from "./chunk-4UJCXBR2.js";
@@ -14,7 +14,7 @@ import {
   withSessionActivityRlsContext,
   withWorkspaceRls,
   withWorkspaceSubjectRls
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 import {
   auditEvents,
   codexCapacityWaiters,
@@ -41,7 +41,7 @@ import {
   workspaceInferenceControls,
   workspaceMemberships,
   workspaces
-} from "./chunk-LDTQGYD2.js";
+} from "./chunk-VOB6TXSJ.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   fromPostgresLosslessJson,
@@ -6416,4 +6416,4 @@ export {
   setWorkspacePauseTimerInTransaction,
   fireWorkspacePauseTimerInTransaction
 };
-//# sourceMappingURL=chunk-7S53WLPI.js.map
+//# sourceMappingURL=chunk-EKXCF3FH.js.map

package/dist/{chunk-F3YMVRF4.js → chunk-GLA5YCQS.js}

@@ -1,15 +1,15 @@
 import {
   lockSessionEventWriteRows
-} from "./chunk-7S53WLPI.js";
+} from "./chunk-EKXCF3FH.js";
 import {
   withSessionActivityRlsContext
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 import {
   sandboxRetainedProcesses,
   sessionBackgroundCommands,
   sessionEvents,
   sessions
-} from "./chunk-LDTQGYD2.js";
+} from "./chunk-VOB6TXSJ.js";
 import {
   fromPostgresLosslessJson,
   withLosslessContentWriteVersion
@@ -140,4 +140,4 @@ async function appendSessionCommandOutput(db, input) {
 export {
   appendSessionCommandOutput
 };
-//# sourceMappingURL=chunk-F3YMVRF4.js.map
+//# sourceMappingURL=chunk-GLA5YCQS.js.map

package/dist/{chunk-KH3TYDGY.js → chunk-J4WFOVBV.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-KH3TYDGY.js.map
+//# sourceMappingURL=chunk-J4WFOVBV.js.map

package/dist/{chunk-NLSG7GGA.js → chunk-KJVOBLFC.js}

@@ -1,11 +1,11 @@
 import {
   rawRows,
   withWorkspaceRls
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 import {
   sessionEvents,
   sessionTurns
-} from "./chunk-LDTQGYD2.js";
+} from "./chunk-VOB6TXSJ.js";
 import {
   LOSSLESS_JSON_STRING_PREFIX,
   fromPostgresLosslessJson,
@@ -254,4 +254,4 @@ export {
   readSessionMessageSliceInScope,
   listSessionEventSlices
 };
-//# sourceMappingURL=chunk-NLSG7GGA.js.map
+//# sourceMappingURL=chunk-KJVOBLFC.js.map

package/dist/{chunk-7POTLB24.js → chunk-M2YGXCCQ.js}

@@ -1,7 +1,7 @@
 import {
   setSubjectRlsContext,
   withRlsContext
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 
 // src/connection-token-resolver.ts
 import { normalizeSlackScopes, OFFICIAL_SLACK_MCP_URL } from "@opengeni/contracts/slack-rest-mcp";
@@ -857,4 +857,4 @@ export {
   refreshOAuthConnectionCredential,
   isPrivateAddress
 };
-//# sourceMappingURL=chunk-7POTLB24.js.map
+//# sourceMappingURL=chunk-M2YGXCCQ.js.map

package/dist/{chunk-PQGTWFRF.js → chunk-M3SWH4MU.js}

@@ -6,7 +6,7 @@ import {
   rlsContextForWorkspace,
   setSubjectRlsContext,
   withRlsContext
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 
 // src/organization-integration-policy.ts
 import {
@@ -153,4 +153,4 @@ export {
   withOrganizationIntegrationPolicyFence,
   withOrganizationIntegrationAcquisition
 };
-//# sourceMappingURL=chunk-PQGTWFRF.js.map
+//# sourceMappingURL=chunk-M3SWH4MU.js.map

package/dist/{chunk-OMHBVHX7.js → chunk-ODKYBA3C.js}

@@ -1,16 +1,16 @@
 import {
   appendSessionCommandOutput
-} from "./chunk-F3YMVRF4.js";
+} from "./chunk-GLA5YCQS.js";
 import {
   lockSessionEventWriteRows
-} from "./chunk-7S53WLPI.js";
+} from "./chunk-EKXCF3FH.js";
 import {
   withRlsContext,
   withSessionActivityRlsContext
-} from "./chunk-56MYWKQV.js";
+} from "./chunk-SKYRM7R7.js";
 import {
   sandboxRetainedProcesses
-} from "./chunk-LDTQGYD2.js";
+} from "./chunk-VOB6TXSJ.js";
 
 // src/retained-provider-commands.ts
 import { and, eq, sql } from "drizzle-orm";
@@ -299,4 +299,4 @@ export {
   retainedProcessCancellationRequested,
   requestRetainedProcessDeadlineCancellation
 };
-//# sourceMappingURL=chunk-OMHBVHX7.js.map
+//# sourceMappingURL=chunk-ODKYBA3C.js.map

package/dist/{chunk-56MYWKQV.js → chunk-SKYRM7R7.js}

@@ -3,7 +3,7 @@ import {
   sessions,
   workspaceSessionActivityRevisions,
   workspaces
-} from "./chunk-LDTQGYD2.js";
+} from "./chunk-VOB6TXSJ.js";
 import {
   LOSSLESS_CONTENT_WRITER_APPLICATION_NAME
 } from "./chunk-P7YDM2RI.js";
@@ -853,4 +853,4 @@ export {
   withAccountRls,
   dbBindingFor
 };
-//# sourceMappingURL=chunk-56MYWKQV.js.map
+//# sourceMappingURL=chunk-SKYRM7R7.js.map

package/dist/{chunk-N5QCKHYL.js → chunk-T5NHDEZW.js}

@@ -153,6 +153,12 @@ var SANDBOX_FILE_PUBLICATION_RUNTIME_ROUTINES = [
   "list_sandbox_file_publications(uuid, uuid, jsonb)"
 ];
 var SANDBOX_FILE_PUBLICATIONS_TABLE = "sandbox_file_publications";
+var ARTIFACT_PIN_RUNTIME_ROUTINES = [
+  "update_artifact_pin(uuid, uuid, text, text, boolean)",
+  "list_artifact_pins(uuid, uuid)",
+  "list_sandbox_file_publications_pinned(uuid, uuid, jsonb)"
+];
+var ARTIFACT_PINS_TABLE = "artifact_catalog_pins";
 var SCHEDULED_SLACK_BOT_MESSAGE_RUNTIME_ROUTINES = [
   "prepare_scheduled_slack_bot_message(uuid, uuid, uuid, uuid, uuid, integer, text, text, text)",
   "read_scheduled_slack_bot_message(uuid, uuid, uuid, uuid)"
@@ -1785,10 +1791,6 @@ async function inspectRuntimeDatabasePosture(db, options) {
         replication: identity.rolreplication,
         bypassRls: identity.rolbypassrls
       };
-      const activationRows = resultRows(
-        await tx.execute(sql`select session_tenancy_any_product_activation() as activated`)
-      );
-      const sessionTenancyProductActivationPresent = activationRows[0]?.activated === true;
       const variableSetCutoverRows = resultRows(
         await tx.execute(sql`
           select to_regprocedure(
@@ -1814,7 +1816,6 @@ async function inspectRuntimeDatabasePosture(db, options) {
           privateTables: [],
           targetRoutines: [],
           privateRoutines: [],
-          sessionTenancyProductActivationPresent,
           sessionVariableSetAttachmentsCutoverPresent,
           claudeSubscriptionPoolActivationPresent
         };
@@ -1917,25 +1918,31 @@ async function inspectRuntimeDatabasePosture(db, options) {
             c.relforcerowsecurity as rls_forced,
             row_security_active(c.oid) as rls_active,
             (select count(*)::int from pg_policy policy where policy.polrelid = c.oid) as policy_count,
-            -- Column-only grants on the inventory stamp are also unsafe; in
-            -- particular INSERT can mint authority without a table grant.
+            -- Column-only grants on capability tables are also unsafe; a pin
+            -- table must remain EXECUTE-only even after column ACL drift.
             (has_table_privilege(current_user, c.oid, 'SELECT') or
-              ((c.relname in ('modal_inventory_read_capabilities','usage_allowance_capabilities','session_import_batches') or
+              ((c.relname in ('modal_inventory_read_capabilities','usage_allowance_capabilities','session_import_batches', ${ARTIFACT_PINS_TABLE}) or
                 c.relname in (select jsonb_array_elements_text(${JSON.stringify(RUNTIME_ALLOWANCE_PRIVATE_TABLES)}::jsonb))) and
                 has_any_column_privilege(current_user, c.oid, 'SELECT'))) as can_select,
             (has_table_privilege(current_user, c.oid, 'INSERT') or
-              ((c.relname in ('modal_inventory_read_capabilities','usage_allowance_capabilities','session_import_batches') or
+              ((c.relname in ('modal_inventory_read_capabilities','usage_allowance_capabilities','session_import_batches', ${ARTIFACT_PINS_TABLE}) or
                 c.relname in (select jsonb_array_elements_text(${JSON.stringify(RUNTIME_ALLOWANCE_PRIVATE_TABLES)}::jsonb))) and
                 has_any_column_privilege(current_user, c.oid, 'INSERT'))) as can_insert,
             (has_table_privilege(current_user, c.oid, 'UPDATE') or
-              ((c.relname in ('modal_inventory_read_capabilities','usage_allowance_capabilities','session_import_batches') or
+              ((c.relname in ('modal_inventory_read_capabilities','usage_allowance_capabilities','session_import_batches', ${ARTIFACT_PINS_TABLE}) or
                 c.relname in (select jsonb_array_elements_text(${JSON.stringify(RUNTIME_ALLOWANCE_PRIVATE_TABLES)}::jsonb))) and
                 has_any_column_privilege(current_user, c.oid, 'UPDATE'))) as can_update,
             has_table_privilege(current_user, c.oid, 'DELETE') as can_delete,
             has_table_privilege(current_user, c.oid, 'TRUNCATE') as can_truncate,
             (has_table_privilege(current_user, c.oid, 'REFERENCES') or
               has_any_column_privilege(current_user, c.oid, 'REFERENCES')) as can_references,
-            has_table_privilege(current_user, c.oid, 'TRIGGER') as can_trigger
+            has_table_privilege(current_user, c.oid, 'TRIGGER') as can_trigger,
+            CASE WHEN c.relname = ${ARTIFACT_PINS_TABLE} THEN ARRAY(
+              SELECT DISTINCT acl.privilege_type FROM aclexplode(coalesce(c.relacl, acldefault('r', c.relowner))) acl
+              WHERE acl.privilege_type NOT IN ('SELECT','INSERT','UPDATE','DELETE','TRUNCATE','REFERENCES','TRIGGER')
+                AND CASE WHEN acl.grantee = 0 THEN true ELSE pg_has_role(current_user, acl.grantee, 'USAGE') END
+              ORDER BY acl.privilege_type
+            ) ELSE ARRAY[]::text[] END AS extra_privileges
           from pg_class c
           join pg_namespace n on n.oid = c.relnamespace
           where n.nspname = 'opengeni_private'
@@ -1949,6 +1956,7 @@ async function inspectRuntimeDatabasePosture(db, options) {
               ${SCOPED_COMPUTE_CAPABILITY_TABLE},
               ${CONNECTION_TENANCY_BACKFILL_CAPABILITY_TABLE},
               ${SANDBOX_FILE_PUBLICATIONS_TABLE},
+              ${ARTIFACT_PINS_TABLE},
               ${SCHEDULED_SLACK_BOT_MESSAGES_TABLE},
               ${ORGANIZATION_SIGNUP_USE_CASES_TABLE},
               ${SLACK_FILE_UPLOAD_OPERATIONS_TABLE},
@@ -1985,7 +1993,8 @@ async function inspectRuntimeDatabasePosture(db, options) {
         delete: row.can_delete,
         truncate: row.can_truncate,
         references: row.can_references,
-        trigger: row.can_trigger
+        trigger: row.can_trigger,
+        ...row.extra_privileges?.length ? { extraPrivileges: row.extra_privileges } : {}
       }));
       const targetRoutines = resultRows(
         await tx.execute(sql`
@@ -2059,7 +2068,6 @@ async function inspectRuntimeDatabasePosture(db, options) {
         privateTables,
         targetRoutines,
         privateRoutines,
-        sessionTenancyProductActivationPresent,
         sessionVariableSetAttachmentsCutoverPresent,
         claudeSubscriptionPoolActivationPresent
       };
@@ -2086,11 +2094,6 @@ function evaluateRuntimeDatabasePosture(posture, options) {
   if (!posture.sessionVariableSetAttachmentsCutoverPresent) {
     violations.push("database is missing the 0352 session Variable Set attachment runtime receipt");
   }
-  if (posture.sessionTenancyProductActivationPresent && options.organizationTenancyCanonicalActivationEnabled !== true) {
-    violations.push(
-      "session-tenancy product activation is durable but OPENGENI_ORGANIZATION_TENANCY_CANONICAL_ACTIVATION_ENABLED is not true"
-    );
-  }
   if (!identity.currentUser || !identity.sessionUser) {
     violations.push("database identity is empty");
   }
@@ -3504,6 +3507,29 @@ function evaluateRuntimeDatabasePosture(posture, options) {
       }
     }
   }
+  const pinTables = posture.privateTables.filter((table) => table.name === ARTIFACT_PINS_TABLE);
+  if (pinTables.length !== 1) {
+    if (!options.protectedTables)
+      violations.push("artifact pin private relation is missing or ambiguous");
+  } else {
+    const table = pinTables[0];
+    if (!table.rlsEnabled || !table.rlsForced || !table.rlsActive || (table.policyCount ?? 0) < 1)
+      violations.push("artifact pin relation lacks active FORCE-RLS workspace isolation");
+    if (table.select || table.insert || table.update || table.delete || table.truncate || table.references || table.trigger || table.extraPrivileges?.length || table.owner === expectedRole)
+      violations.push("runtime role has forbidden direct artifact pin authority");
+    if (tableByName.get("files")?.owner && table.owner !== tableByName.get("files").owner)
+      violations.push("artifact pin owner does not match workspace authority");
+    const quotedSchema = `"${targetSchema.replaceAll('"', '""')}"`;
+    const searchPaths = /* @__PURE__ */ new Set([
+      `search_path=pg_catalog, ${quotedSchema}, pg_temp`,
+      `search_path=pg_catalog, ${/^[a-z_][a-z0-9_]*$/.test(targetSchema) ? targetSchema : quotedSchema}, pg_temp`
+    ]);
+    for (const name of ARTIFACT_PIN_RUNTIME_ROUTINES) {
+      const routines = posture.privateRoutines.filter((routine) => routine.name === name);
+      if (routines.length !== 1 || !routines[0].execute || routines[0].publicExecute || !routines[0].securityDefiner || routines[0].owner !== table.owner || !routines[0].configuration?.some((configuration) => searchPaths.has(configuration)))
+        violations.push(`artifact pin capability ${name} is missing or unsafe`);
+    }
+  }
   const slackFileUploadTables = posture.privateTables.filter(
     (table) => table.name === SLACK_FILE_UPLOAD_OPERATIONS_TABLE
   );
@@ -5799,6 +5825,22 @@ BEGIN
       REVOKE ALL ON FUNCTION opengeni_private.record_sandbox_file_publication(uuid,uuid,uuid,uuid) FROM PUBLIC;
       REVOKE ALL ON FUNCTION opengeni_private.list_sandbox_file_publications(uuid,uuid,jsonb) FROM PUBLIC;
     END IF;
+    IF to_regclass('opengeni_private.artifact_catalog_pins') IS NOT NULL THEN
+      EXECUTE format('REVOKE ALL ON TABLE opengeni_private.artifact_catalog_pins FROM %I', ${literal(role)});
+      -- Table revocation does not remove column ACLs. Reconcile every current
+      -- column for both the runtime and PUBLIC, including future additions.
+      EXECUTE format('REVOKE ALL (%s) ON TABLE opengeni_private.artifact_catalog_pins FROM %I',
+        (SELECT string_agg(quote_ident(attname),',' ORDER BY attnum) FROM pg_attribute
+          WHERE attrelid='opengeni_private.artifact_catalog_pins'::regclass AND attnum>0 AND NOT attisdropped),
+        ${literal(role)});
+      REVOKE ALL ON TABLE opengeni_private.artifact_catalog_pins FROM PUBLIC;
+      EXECUTE format('REVOKE ALL (%s) ON TABLE opengeni_private.artifact_catalog_pins FROM PUBLIC',
+        (SELECT string_agg(quote_ident(attname),',' ORDER BY attnum) FROM pg_attribute
+          WHERE attrelid='opengeni_private.artifact_catalog_pins'::regclass AND attnum>0 AND NOT attisdropped));
+      REVOKE ALL ON FUNCTION opengeni_private.update_artifact_pin(uuid,uuid,text,text,boolean),
+        opengeni_private.list_artifact_pins(uuid,uuid),
+        opengeni_private.list_sandbox_file_publications_pinned(uuid,uuid,jsonb) FROM PUBLIC;
+    END IF;
     IF to_regclass('opengeni_private.slack_file_upload_operations') IS NOT NULL THEN
       -- Ordinary RLS repositories own the upload CAS, not owner capabilities.
       -- Never allow deletion/truncation to erase its durable completion fence.
@@ -6043,6 +6085,7 @@ if (import.meta.main) {
 
 export {
   SANDBOX_FILE_PUBLICATION_RUNTIME_ROUTINES,
+  ARTIFACT_PIN_RUNTIME_ROUTINES,
   SCHEDULED_SLACK_BOT_MESSAGE_RUNTIME_ROUTINES,
   ORGANIZATION_SIGNUP_USE_CASE_RUNTIME_ROUTINES,
   SLACK_FILE_UPLOAD_OPERATIONS_TABLE,
@@ -6072,4 +6115,4 @@ export {
   runtimeDatabaseReadyCheck,
   provisionRoles
 };
-//# sourceMappingURL=chunk-N5QCKHYL.js.map
+//# sourceMappingURL=chunk-T5NHDEZW.js.map