@opengeni/db 1.1.0 → 1.2.0

package/dist/managed-auth-session-sets.js

@@ -20,9 +20,9 @@ import {
   reapManagedAuthIsolatedSessions,
   releaseManagedAuthActorMutationLease,
   validateManagedAuthActorMutationLease
-} from "./chunk-J4WFOVBV.js";
-import "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+} from "./chunk-3GAR5UN3.js";
+import "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/managed-user-setup.d.ts

@@ -13,6 +13,7 @@ export declare function completeSelfServiceOrganizationSetup(db: Database, input
     operationId: string;
     requestFingerprint: string;
     trialCreditsEnabled?: boolean;
+    trialCreditModelIds?: string[] | undefined;
 }): Promise<CompleteSelfServiceOrganizationSetupResponseType>;
 export declare function ensureOrganizationUserSetupIntent(db: Database, input: {
     organizationId: string;

package/dist/mcp-operations.js

@@ -1,7 +1,7 @@
 import {
   withRlsContext
-} from "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+} from "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   fromPostgresLosslessJson,

package/dist/organization-integration-policy.js

@@ -3,10 +3,10 @@ import {
   updateOrganizationIntegrationPolicy,
   withOrganizationIntegrationAcquisition,
   withOrganizationIntegrationPolicyFence
-} from "./chunk-M3SWH4MU.js";
+} from "./chunk-JICUP7ZR.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+import "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/organization-membership-lifecycle.d.ts

@@ -6,6 +6,7 @@ export declare function createManagedOrganization(db: Database, input: {
     name: string;
     operationId: string;
     trialCreditsEnabled?: boolean;
+    trialCreditModelIds?: string[] | undefined;
 }): Promise<CreateOrganizationResponseType>;
 export declare function createAdditionalManagedOrganization(db: Database, input: {
     subjectId: string;

package/dist/persistence-errors.d.ts

@@ -39,12 +39,15 @@ export declare function isRetryableDatabaseTransportFailure(error: unknown): boo
 export declare function isDatabasePersistenceFailure(error: unknown): boolean;
 /** Extract only PostgreSQL diagnostic identifiers; never query text/parameters. */
 export declare function safeDatabaseErrorFacts(error: unknown): SafeDatabaseErrorFacts;
-/**
- * Typed persistence classification that retains the exact original failure as
- * `cause` for internal diagnostics. The ordinary Error message is deliberately
- * stable and source-free so a generic presentation path can never disclose SQL,
- * parameters, or driver detail by rendering `.message`.
- */
+/** Own-driver transaction boundary; callback errors never establish provenance. */
+export declare class DatabaseTransactionError extends Error {
+    readonly stage: "admission" | "settlement";
+    readonly original?: unknown;
+    readonly name = "DatabaseTransactionError";
+    constructor(stage: "admission" | "settlement", cause: unknown, original?: unknown);
+}
+/** Typed persistence classification retaining the original cause internally.
+ * Its ordinary message is stable and contains no SQL or driver parameters. */
 export declare class SessionEventPersistenceError extends Error {
     readonly details: PersistenceFailureDetails;
     readonly name = "SessionEventPersistenceError";

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-T5NHDEZW.js";
+} from "./chunk-YOYILDLY.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/retained-provider-commands.js

@@ -14,13 +14,13 @@ import {
   retainedProviderCommandPersistence,
   supervisedCommandProtocolReady,
   validateRouterOutputAdvance
-} from "./chunk-ODKYBA3C.js";
-import "./chunk-GLA5YCQS.js";
-import "./chunk-EKXCF3FH.js";
-import "./chunk-CIGHXFPD.js";
+} from "./chunk-VDPCIFKL.js";
+import "./chunk-6EIEGHPK.js";
+import "./chunk-CYP72JTQ.js";
+import "./chunk-UCIMHNII.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+import "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/runtime-posture.d.ts

@@ -16,14 +16,14 @@ export declare const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES: readonly [...str
  */
 export declare const RUNTIME_TARGET_SCHEMA_PUBLIC_POLICY_PREDICATE_ROUTINES: readonly ["connection_authority_convergence_audit_capability_active(uuid)", "usage_allowance_capability_active(uuid, uuid)"];
 /** Owner-internal helpers that must exist but must never be callable by the runtime role. */
-export declare const RUNTIME_TARGET_SCHEMA_FORBIDDEN_ROUTINES: readonly ["enable_organization_private_sessions_from_activation(uuid, text[])", "usage_allowance_members(uuid, uuid)", "usage_allowance_effective_period(uuid, jsonb, timestamp with time zone)", "count_workspace_allowance_debit()", "capture_usage_allowance_attribution()", "reverse_video_allowance_refund()", "capture_usage_allowance_period(uuid, uuid, jsonb, timestamp with time zone)", "emit_usage_allowance_notifications(uuid, uuid, jsonb, text, timestamp with time zone, text)", "usage_allowance_period(jsonb, timestamp with time zone)", "validate_usage_allowance_config(jsonb)", "validate_usage_allowance_rule(jsonb)", "guard_slack_file_upload_operation()", "activate_session_tenancy_from_additional_organization(uuid)", "acquire_automatic_session_title_quarantine_fences_v1(integer)", "organization_private_sessions_enabled(uuid)", "activate_greenfield_session_tenancy_from_setup(text)", "assert_session_tenancy_quiescent(uuid, uuid, uuid, boolean)", "check_tenancy_backfill_activation_evidence(uuid)", "set_verified_signup_trial_credits_enabled(boolean, text, text)", "set_managed_auth_new_signups_enabled(boolean, text, text)", "document_migration_audit_capability_active(text)", "assert_document_migration_audit_authority(jsonb)"];
-export declare const RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINES: readonly [string, "usage_allowance_period(jsonb, timestamp with time zone)", "validate_usage_allowance_config(jsonb)", "validate_usage_allowance_rule(jsonb)", "guard_slack_file_upload_operation()", "resolve_workspace_codex_subscription_source(uuid, uuid)", "session_reference_visible(uuid, uuid, uuid)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
+export declare const RUNTIME_TARGET_SCHEMA_FORBIDDEN_ROUTINES: readonly ["enable_organization_private_sessions_from_activation(uuid, text[])", "usage_allowance_members(uuid, uuid)", "usage_allowance_effective_period(uuid, jsonb, timestamp with time zone)", "count_workspace_allowance_debit()", "capture_usage_allowance_attribution()", "reverse_video_allowance_refund()", "capture_usage_allowance_period(uuid, uuid, jsonb, timestamp with time zone)", "emit_usage_allowance_notifications(uuid, uuid, jsonb, text, timestamp with time zone, text)", "usage_allowance_period(jsonb, timestamp with time zone)", "validate_usage_allowance_config(jsonb)", "validate_usage_allowance_rule(jsonb)", "guard_slack_file_upload_operation()", "activate_session_tenancy_from_additional_organization(uuid)", "acquire_automatic_session_title_quarantine_fences_v1(integer)", "organization_private_sessions_enabled(uuid)", "activate_greenfield_session_tenancy_from_setup(text)", "assert_session_tenancy_quiescent(uuid, uuid, uuid, boolean)", "check_tenancy_backfill_activation_evidence(uuid)", "set_verified_signup_trial_credits_enabled(boolean, text, text)", "set_credit_promotion_policy(jsonb, text, text)", "set_managed_auth_new_signups_enabled(boolean, text, text)", "document_migration_audit_capability_active(text)", "assert_document_migration_audit_authority(jsonb)"];
+export declare const RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINES: readonly ["set_credit_promotion_policy(jsonb, text, text)", string, "usage_allowance_period(jsonb, timestamp with time zone)", "validate_usage_allowance_config(jsonb)", "validate_usage_allowance_rule(jsonb)", "guard_slack_file_upload_operation()", "resolve_workspace_codex_subscription_source(uuid, uuid)", "session_reference_visible(uuid, uuid, uuid)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
 /**
  * The complete standalone tenant-table contract. Adding or removing a
  * FORCE-RLS table is an architectural change: update this list in the same
  * commit as the migration so startup cannot silently accept an unreviewed gap.
  */
-export declare const FORCE_RLS_TABLES: readonly ["additional_organization_creation_receipts", "agent_instruction_operations", "agent_learning_revisions", "agent_learning_snapshots", "agent_run_states", "api_keys", "attached_browser_devices", "attached_browser_inventories", "audit_events", "auth_runs", "automation_run_event_links", "automation_runs", "automation_sources", "automation_trigger_events", "automation_trigger_revisions", "automation_triggers", "billing_customers", "browser_identities", "browser_revision_components", "browser_revisions", "browser_session_associations", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "canonical_human_identities", "canonical_human_identity_operations", "canonical_human_identity_subjects", "canonical_human_login_bindings", "capability_api_facets", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_facets", "capability_installations", "capability_integration_facets", "capability_mcp_facets", "capability_operations", "capability_plugin_installations", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "channels", "claude_capacity_waiters", "claude_credential_leases", "claude_rotation_settings", "claude_session_account_pins", "claude_subscription_account_usage", "claude_subscription_credentials", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "codex_turn_source_bindings", "company_brain_context_selection_receipts", "company_brain_preference_proposal_receipts", "company_brain_turn_context_snapshots", "company_profile_activation_events", "company_profile_agent_automatic_activation_receipts", "company_profile_agent_confirmation_receipts", "company_profile_agent_proposal_receipts", "company_profile_heads", "company_profile_revisions", "company_profile_snapshots", "composer_drafts", "computer_session_associations", "computer_sessions", "connect_attempts", "connection_disconnect_operations", "connection_use_audit_facts", "connection_use_once_consumption_receipts", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_authority_reclassifications", "document_bases", "document_chunks", "document_default_collection_backfill_operations", "document_default_collection_backfill_receipts", "document_default_collection_backfill_runs", "documents", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_live_tickets", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_replica_leases", "editable_artifact_scope_authorization_heads", "editable_artifact_sequence_checkpoints", "editable_artifact_session_links", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "editable_artifacts", "enrollments", "external_identities", "external_identity_links", "external_link_task_authorities", "external_link_turn_authorities", "feedback_submissions", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "governed_learning_activation_receipts", "governed_learning_activation_undo_receipts", "governed_learning_decision_receipts", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "host_mcp_bindings", "host_mcp_delegations", "host_mcp_resolver_operations", "host_mcp_resolvers", "host_mcp_task_authorities", "host_mcp_turn_authorities", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_facet_definitions", "integration_oauth_pending_states", "integration_oauth_state_nonces", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_entries", "knowledge_entry_decisions", "knowledge_entry_links", "knowledge_entry_operations", "knowledge_entry_revisions", "knowledge_entry_search", "knowledge_entry_vectors", "knowledge_facts", "knowledge_index_jobs", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_review_batches", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "managed_auth_actor_mutation_leases", "managed_auth_browser_installations", "managed_auth_login_return_intents", "managed_auth_login_slots", "managed_auth_login_transaction_rate_limits", "managed_auth_login_transactions", "managed_auth_session_set_operations", "managed_auth_session_sets", "managed_sign_in_method_operations", "mcp_operations", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_facts", "network_routes", "new_session_drafts", "organization_api_key_workspaces", "organization_codex_rotation_settings", "organization_company_profile_agent_policies", "organization_company_profile_agent_policy_events", "organization_credential_providers", "organization_integration_policies", "organization_integration_policy_operations", "organization_invitation_binding_events", "organization_membership_invitations", "organization_membership_lifecycle_events", "organization_membership_operation_receipts", "organization_memberships", "organization_model_provider_connection_operations", "organization_model_provider_connections", "organization_model_provider_custom_models", "organization_private_session_setting_events", "organization_private_session_settings", "organization_profile_events", "organization_recovery_approvals", "organization_recovery_command_receipts", "organization_recovery_custodian_acceptances", "organization_recovery_custodians", "organization_recovery_events", "organization_recovery_notification_attempts", "organization_recovery_notification_outbox", "organization_recovery_operations", "organization_recovery_policies", "organization_recovery_policy_heads", "organization_service_accounts", "organization_shared_workspace_administration_capabilities", "organization_user_resource_authorities", "organization_user_resource_grants", "organization_user_retention_deletion_events", "organization_user_retention_deletions", "organization_user_retention_object_deletion_receipts", "organization_user_retention_object_obligations", "organization_user_retention_policies", "organization_user_setup_deliveries", "organization_user_setup_delivery_attempts", "organization_user_setup_intents", "organization_webhook_deliveries", "organization_webhooks", "organization_workspace_lifecycle_events", "organization_workspace_operation_receipts", "personal_document_once_consumption_receipts", "personal_github_repository_selection_heads", "personal_github_repository_selection_operations", "personal_github_repository_selections", "personal_resource_once_consumption_receipts", "pr_review_app_registrations", "pr_review_managed_github_authority_nonces", "pr_review_repository_bindings", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "private_session_create_capabilities", "remember_knowledge_confirmation_receipts", "remember_knowledge_memory_materializations", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_connection_authority_snapshots", "scheduled_task_personal_resource_authorities", "scheduled_task_personal_resource_snapshots", "scheduled_task_reusable_connection_materializations", "scheduled_task_revision_authorities", "scheduled_task_run_connection_authority_snapshots", "scheduled_task_run_personal_resource_admissions", "scheduled_task_run_personal_resource_once_receipts", "scheduled_task_run_personal_resource_snapshots", "scheduled_task_runs", "scheduled_tasks", "self_service_organization_setup_receipts", "session_attempt_codemode_calls", "session_attempt_connected_machine_authorizations", "session_attempt_interruptions", "session_attempt_model_context_snapshots", "session_attempt_personal_document_admissions", "session_attempt_personal_document_snapshots", "session_attempt_personal_resource_admissions", "session_attempt_personal_resource_snapshots", "session_attempt_tool_catalogs", "session_background_commands", "session_command_receipts", "session_event_cursors", "session_events", "session_goal_revisions", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_tenancy_activations", "session_tenancy_additional_organization_activation_evidence", "session_tenancy_greenfield_activation_evidence", "session_turn_attempts", "session_turn_startup_milestones", "session_turns", "session_variable_set_attachments", "session_visibility_write_capabilities", "session_work_claim_revisions", "session_work_claim_write_capabilities", "session_work_claims", "session_workflow_wake_outbox", "sessions", "site_auth_connections", "skill_config_conversion_receipts", "skill_source_bindings", "skill_write_receipts", "slack_app_home_refreshes", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_channel_routes", "slack_installation_bindings", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_route_prompt_options", "slack_route_prompts", "slack_shared_task_origins", "slack_task_policy_activation_events", "slack_task_policy_heads", "slack_task_policy_revisions", "slack_user_dm_routes", "slack_user_link_access_request_operations", "slack_user_link_access_requests", "social_connections", "social_posts", "task_note_events", "task_note_knowledge_promotion_capabilities", "task_note_replacement_receipts", "task_note_write_capabilities", "task_notes", "temporal_schedule_cleanup_outbox", "tenancy_backfill_receipts", "tenancy_backfill_unresolved_rows", "tool_gateway_approval_capabilities", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "turn_connection_authority_snapshots", "turn_personal_resource_attachment_receipts", "turn_personal_resource_once_receipts", "turn_personal_resource_snapshots", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifact_events", "workspace_artifact_uploads", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_codex_subscription_preferences", "workspace_control_events", "workspace_credential_providers", "workspace_gateway_custom_models", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_deactivation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_interaction_revisions", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_revisions", "workspace_learning_policy_snapshots", "workspace_model_policies", "workspace_screenshot_quotas", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas", "workspace_webhook_deliveries", "workspace_webhooks", "xai_capacity_waiters", "xai_credential_leases", "xai_rotation_settings", "xai_session_account_pins", "xai_subscription_credentials"];
+export declare const FORCE_RLS_TABLES: readonly ["additional_organization_creation_receipts", "agent_instruction_operations", "agent_learning_revisions", "agent_learning_snapshots", "agent_run_states", "api_keys", "attached_browser_devices", "attached_browser_inventories", "audit_events", "auth_runs", "automation_run_event_links", "automation_runs", "automation_sources", "automation_trigger_events", "automation_trigger_revisions", "automation_triggers", "billing_customers", "browser_identities", "browser_revision_components", "browser_revisions", "browser_session_associations", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "canonical_human_identities", "canonical_human_identity_operations", "canonical_human_identity_subjects", "canonical_human_login_bindings", "capability_api_facets", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_facets", "capability_installations", "capability_integration_facets", "capability_mcp_facets", "capability_operations", "capability_plugin_installations", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "channels", "claude_capacity_waiters", "claude_credential_leases", "claude_rotation_settings", "claude_session_account_pins", "claude_subscription_account_usage", "claude_subscription_credentials", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "codex_turn_source_bindings", "company_brain_context_selection_receipts", "company_brain_preference_proposal_receipts", "company_brain_turn_context_snapshots", "company_profile_activation_events", "company_profile_agent_automatic_activation_receipts", "company_profile_agent_confirmation_receipts", "company_profile_agent_proposal_receipts", "company_profile_heads", "company_profile_revisions", "company_profile_snapshots", "composer_drafts", "computer_session_associations", "computer_sessions", "connect_attempts", "connection_disconnect_operations", "connection_use_audit_facts", "connection_use_once_consumption_receipts", "connections", "connector_action_policies", "connector_action_requests", "credit_debit_allocations", "credit_ledger_entries", "device_enrollment_requests", "document_authority_reclassifications", "document_bases", "document_chunks", "document_default_collection_backfill_operations", "document_default_collection_backfill_receipts", "document_default_collection_backfill_runs", "documents", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_live_tickets", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_replica_leases", "editable_artifact_scope_authorization_heads", "editable_artifact_sequence_checkpoints", "editable_artifact_session_links", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "editable_artifacts", "enrollments", "external_identities", "external_identity_links", "external_link_task_authorities", "external_link_turn_authorities", "feedback_submissions", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "governed_learning_activation_receipts", "governed_learning_activation_undo_receipts", "governed_learning_decision_receipts", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "host_mcp_bindings", "host_mcp_delegations", "host_mcp_resolver_operations", "host_mcp_resolvers", "host_mcp_task_authorities", "host_mcp_turn_authorities", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_facet_definitions", "integration_oauth_pending_states", "integration_oauth_state_nonces", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_entries", "knowledge_entry_decisions", "knowledge_entry_links", "knowledge_entry_operations", "knowledge_entry_revisions", "knowledge_entry_search", "knowledge_entry_vectors", "knowledge_facts", "knowledge_index_jobs", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_review_batches", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "managed_auth_actor_mutation_leases", "managed_auth_browser_installations", "managed_auth_login_return_intents", "managed_auth_login_slots", "managed_auth_login_transaction_rate_limits", "managed_auth_login_transactions", "managed_auth_session_set_operations", "managed_auth_session_sets", "managed_sign_in_method_operations", "mcp_operations", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_facts", "network_routes", "new_session_drafts", "organization_api_key_workspaces", "organization_codex_rotation_settings", "organization_company_profile_agent_policies", "organization_company_profile_agent_policy_events", "organization_credential_providers", "organization_integration_policies", "organization_integration_policy_operations", "organization_invitation_binding_events", "organization_membership_invitations", "organization_membership_lifecycle_events", "organization_membership_operation_receipts", "organization_memberships", "organization_model_provider_connection_operations", "organization_model_provider_connections", "organization_model_provider_custom_models", "organization_private_session_setting_events", "organization_private_session_settings", "organization_profile_events", "organization_recovery_approvals", "organization_recovery_command_receipts", "organization_recovery_custodian_acceptances", "organization_recovery_custodians", "organization_recovery_events", "organization_recovery_notification_attempts", "organization_recovery_notification_outbox", "organization_recovery_operations", "organization_recovery_policies", "organization_recovery_policy_heads", "organization_service_accounts", "organization_shared_workspace_administration_capabilities", "organization_user_resource_authorities", "organization_user_resource_grants", "organization_user_retention_deletion_events", "organization_user_retention_deletions", "organization_user_retention_object_deletion_receipts", "organization_user_retention_object_obligations", "organization_user_retention_policies", "organization_user_setup_deliveries", "organization_user_setup_delivery_attempts", "organization_user_setup_intents", "organization_webhook_deliveries", "organization_webhooks", "organization_workspace_lifecycle_events", "organization_workspace_operation_receipts", "personal_document_once_consumption_receipts", "personal_github_repository_selection_heads", "personal_github_repository_selection_operations", "personal_github_repository_selections", "personal_resource_once_consumption_receipts", "pr_review_app_registrations", "pr_review_managed_github_authority_nonces", "pr_review_repository_bindings", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "private_session_create_capabilities", "remember_knowledge_confirmation_receipts", "remember_knowledge_memory_materializations", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_connection_authority_snapshots", "scheduled_task_personal_resource_authorities", "scheduled_task_personal_resource_snapshots", "scheduled_task_reusable_connection_materializations", "scheduled_task_revision_authorities", "scheduled_task_run_connection_authority_snapshots", "scheduled_task_run_personal_resource_admissions", "scheduled_task_run_personal_resource_once_receipts", "scheduled_task_run_personal_resource_snapshots", "scheduled_task_runs", "scheduled_tasks", "self_service_organization_setup_receipts", "session_attempt_codemode_calls", "session_attempt_connected_machine_authorizations", "session_attempt_interruptions", "session_attempt_model_context_snapshots", "session_attempt_personal_document_admissions", "session_attempt_personal_document_snapshots", "session_attempt_personal_resource_admissions", "session_attempt_personal_resource_snapshots", "session_attempt_tool_catalogs", "session_background_commands", "session_command_receipts", "session_event_cursors", "session_events", "session_goal_revisions", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_tenancy_activations", "session_tenancy_additional_organization_activation_evidence", "session_tenancy_greenfield_activation_evidence", "session_turn_attempts", "session_turn_startup_milestones", "session_turns", "session_variable_set_attachments", "session_visibility_write_capabilities", "session_work_claim_revisions", "session_work_claim_write_capabilities", "session_work_claims", "session_workflow_wake_outbox", "sessions", "site_auth_connections", "skill_config_conversion_receipts", "skill_source_bindings", "skill_write_receipts", "slack_app_home_refreshes", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_channel_routes", "slack_installation_bindings", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_route_prompt_options", "slack_route_prompts", "slack_shared_task_origins", "slack_task_policy_activation_events", "slack_task_policy_heads", "slack_task_policy_revisions", "slack_user_dm_routes", "slack_user_link_access_request_operations", "slack_user_link_access_requests", "social_connections", "social_posts", "task_note_events", "task_note_knowledge_promotion_capabilities", "task_note_replacement_receipts", "task_note_write_capabilities", "task_notes", "temporal_schedule_cleanup_outbox", "tenancy_backfill_receipts", "tenancy_backfill_unresolved_rows", "tool_gateway_approval_capabilities", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "turn_connection_authority_snapshots", "turn_personal_resource_attachment_receipts", "turn_personal_resource_once_receipts", "turn_personal_resource_snapshots", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifact_events", "workspace_artifact_uploads", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_codex_subscription_preferences", "workspace_control_events", "workspace_credential_providers", "workspace_gateway_custom_models", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_deactivation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_interaction_revisions", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_revisions", "workspace_learning_policy_snapshots", "workspace_model_policies", "workspace_screenshot_quotas", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas", "workspace_webhook_deliveries", "workspace_webhooks", "xai_capacity_waiters", "xai_credential_leases", "xai_rotation_settings", "xai_session_account_pins", "xai_subscription_credentials"];
 /**
  * Deployment-global and authentication tables used by ordinary API/worker
  * traffic. They intentionally do not carry workspace RLS: their access model
@@ -41,7 +41,7 @@ export declare const RUNTIME_READ_ONLY_TABLES: readonly ["codex_turn_source_bind
 /** Existing runtime authorities that may be observed and advanced, never created or deleted. */
 export declare const RUNTIME_READ_UPDATE_TABLES: readonly ["workspace_session_activity_revisions"];
 /** Append-only evidence/revision tables are insertable and queryable, never mutable. */
-export declare const RUNTIME_READ_INSERT_TABLES: readonly ["browser_revision_components", "browser_revisions", "company_profile_revisions", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_sequence_checkpoints", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "external_link_task_authorities", "external_link_turn_authorities", "feedback_submissions", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "host_mcp_resolver_operations", "host_mcp_task_authorities", "host_mcp_turn_authorities", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "pr_review_managed_github_authority_nonces", "preference_registry_preferences", "preference_registry_revisions", "session_attempt_tool_catalogs", "session_goal_revisions", "session_spawn_denials", "slack_shared_task_origins", "slack_user_link_access_request_operations", "temporal_schedule_cleanup_outbox", "workspace_artifact_events", "workspace_artifact_versions", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions"];
+export declare const RUNTIME_READ_INSERT_TABLES: readonly ["browser_revision_components", "browser_revisions", "company_profile_revisions", "credit_debit_allocations", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_sequence_checkpoints", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "external_link_task_authorities", "external_link_turn_authorities", "feedback_submissions", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "host_mcp_resolver_operations", "host_mcp_task_authorities", "host_mcp_turn_authorities", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_facts", "knowledge_operation_receipts", "knowledge_providers", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_sources", "knowledge_sync_runs", "pr_review_managed_github_authority_nonces", "preference_registry_preferences", "preference_registry_revisions", "session_attempt_tool_catalogs", "session_goal_revisions", "session_spawn_denials", "slack_shared_task_origins", "slack_user_link_access_request_operations", "temporal_schedule_cleanup_outbox", "workspace_artifact_events", "workspace_artifact_versions", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions"];
 /** Durable operation journals are append/read plus claim/settle updates, never deletes. */
 export declare const RUNTIME_READ_INSERT_UPDATE_TABLES: readonly ["attached_browser_devices", "attached_browser_inventories", "auth_runs", "browser_identities", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "capability_api_facets", "capability_facets", "capability_integration_facets", "capability_mcp_facets", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "computer_sessions", "editable_artifact_session_links", "editable_artifacts", "external_identity_links", "host_mcp_resolvers", "integration_facet_definitions", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "network_routes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_codemode_calls", "session_attempt_model_context_snapshots", "session_turn_startup_milestones", "site_auth_connections", "slack_user_link_access_requests", "workspace_interaction_revisions"];
 /**

package/dist/schema.d.ts

@@ -47140,14 +47140,14 @@ export declare const sandboxLeases: import("drizzle-orm/pg-core").PgTableWithCol
             tableName: "sandbox_leases";
             dataType: "string";
             columnType: "PgText";
-            data: "idle_containment" | "provider_deadline_containment";
+            data: "idle_containment" | "provider_deadline_containment" | "quiescence_containment";
             driverParam: string;
             notNull: false;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["idle_containment", "provider_deadline_containment"];
+            enumValues: ["idle_containment", "provider_deadline_containment", "quiescence_containment"];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
@@ -58658,6 +58658,49 @@ export declare const creditLedgerEntries: import("drizzle-orm/pg-core").PgTableW
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        eligibleModelIds: import("drizzle-orm/pg-core").PgColumn<{
+            name: "eligible_model_ids";
+            tableName: "credit_ledger_entries";
+            dataType: "array";
+            columnType: "PgArray";
+            data: string[];
+            driverParam: string | string[];
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: import("drizzle-orm").Column<{
+                name: "eligible_model_ids";
+                tableName: "credit_ledger_entries";
+                dataType: "string";
+                columnType: "PgText";
+                data: string;
+                driverParam: string;
+                notNull: false;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            baseBuilder: import("drizzle-orm/pg-core").PgColumnBuilder<{
+                name: "eligible_model_ids";
+                dataType: 'string';
+                columnType: 'PgText';
+                data: string;
+                enumValues: [string, ...string[]];
+                driverParam: string;
+            }, {}, {}, import("drizzle-orm").ColumnBuilderExtraConfig>;
+            size: undefined;
+        }>;
         currency: import("drizzle-orm/pg-core").PgColumn<{
             name: "currency";
             tableName: "credit_ledger_entries";
@@ -58782,6 +58825,82 @@ export declare const creditLedgerEntries: import("drizzle-orm/pg-core").PgTableW
     };
     dialect: 'pg';
 }>;
+/** One debit can consume several grants; the remainder is paid by general credits. */
+export declare const creditDebitAllocations: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "credit_debit_allocations";
+    schema: undefined;
+    columns: {
+        accountId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "account_id";
+            tableName: "credit_debit_allocations";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        debitEntryId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "debit_entry_id";
+            tableName: "credit_debit_allocations";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        grantEntryId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "grant_entry_id";
+            tableName: "credit_debit_allocations";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        amountMicros: import("drizzle-orm/pg-core").PgColumn<{
+            name: "amount_micros";
+            tableName: "credit_debit_allocations";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: 'pg';
+}>;
 /** Content-free immutable accepted billing facts; no runtime table privileges. */
 export declare const usageAllowanceAttributionReceipts: import("drizzle-orm/pg-core").PgTableWithColumns<{
     name: "usage_allowance_attribution_receipts";

package/dist/schema.js

@@ -72,6 +72,7 @@ import {
   connections,
   connectorActionPolicies,
   connectorActionRequests,
+  creditDebitAllocations,
   creditLedgerEntries,
   deploymentModelCatalog,
   deviceEnrollmentRequests,
@@ -400,7 +401,7 @@ import {
   xaiRotationSettings,
   xaiSessionAccountPins,
   xaiSubscriptionCredentials
-} from "./chunk-VOB6TXSJ.js";
+} from "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {
@@ -477,6 +478,7 @@ export {
   connections,
   connectorActionPolicies,
   connectorActionRequests,
+  creditDebitAllocations,
   creditLedgerEntries,
   deploymentModelCatalog,
   deviceEnrollmentRequests,

package/dist/session-background-commands.js

@@ -27,11 +27,11 @@ import {
   settleConnectedMachineSessionBackgroundCommandWithMutation,
   settleSessionBackgroundCommandForRetainedProcessInTransaction,
   unobservableRetainedProcessOutcomeSql
-} from "./chunk-EKXCF3FH.js";
-import "./chunk-CIGHXFPD.js";
+} from "./chunk-CYP72JTQ.js";
+import "./chunk-UCIMHNII.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+import "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/session-command-output.js

@@ -1,11 +1,11 @@
 import {
   appendSessionCommandOutput
-} from "./chunk-GLA5YCQS.js";
-import "./chunk-EKXCF3FH.js";
-import "./chunk-CIGHXFPD.js";
+} from "./chunk-6EIEGHPK.js";
+import "./chunk-CYP72JTQ.js";
+import "./chunk-UCIMHNII.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+import "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/session-event-slices.js

@@ -1,9 +1,9 @@
 import {
   listSessionEventSlices,
   readSessionMessageSliceInScope
-} from "./chunk-KJVOBLFC.js";
-import "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+} from "./chunk-JLVWBIEM.js";
+import "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/session-mcp-credential-rotation.js

@@ -1,23 +1,23 @@
 import {
   connectionMetadataMatchesBinding
-} from "./chunk-M2YGXCCQ.js";
+} from "./chunk-QFJNEXFL.js";
 import {
   lockSessionEventWriteRows,
   organizationApiKeyAllowsWorkspace
-} from "./chunk-EKXCF3FH.js";
-import "./chunk-CIGHXFPD.js";
+} from "./chunk-CYP72JTQ.js";
+import "./chunk-UCIMHNII.js";
 import "./chunk-4UJCXBR2.js";
 import {
   rawRows,
   setSubjectRlsContext,
   withRlsContext
-} from "./chunk-SKYRM7R7.js";
+} from "./chunk-O2Y5E5M3.js";
 import {
   apiKeys,
   sessionCommandReceipts,
   sessionMcpServers,
   sessions
-} from "./chunk-VOB6TXSJ.js";
+} from "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 

package/dist/session-tenancy.js

@@ -13,9 +13,9 @@ import {
   openPrivateSessionCreateCapability,
   replayAppliedSessionFork,
   transitionSessionVisibility
-} from "./chunk-Z5HJXH3X.js";
-import "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+} from "./chunk-3TGYFFZR.js";
+import "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/video-generation.js

@@ -29,10 +29,10 @@ import {
   settleVideoGenerationFailure,
   settleVideoGenerationReady,
   updateWorkspaceVideoGenerationPolicy
-} from "./chunk-CIGHXFPD.js";
+} from "./chunk-UCIMHNII.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+import "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/workspace-tool-defaults.js

@@ -1,12 +1,12 @@
 import {
   lockWorkspaceInferenceControl
-} from "./chunk-EKXCF3FH.js";
-import "./chunk-CIGHXFPD.js";
+} from "./chunk-CYP72JTQ.js";
+import "./chunk-UCIMHNII.js";
 import "./chunk-4UJCXBR2.js";
 import {
   withWorkspaceRls
-} from "./chunk-SKYRM7R7.js";
-import "./chunk-VOB6TXSJ.js";
+} from "./chunk-O2Y5E5M3.js";
+import "./chunk-FWQNHNOU.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";