@opengeni/db 1.3.0 → 1.4.0

package/dist/{chunk-OEFNTGR3.js → chunk-NT7OGKYX.js}

@@ -1,6 +1,6 @@
 import {
   cancelUnacceptedVideoGenerationsForToolCallsInTransaction
-} from "./chunk-BID3CNN3.js";
+} from "./chunk-T3CYF3DH.js";
 import {
   external_exports
 } from "./chunk-4UJCXBR2.js";
@@ -14,7 +14,7 @@ import {
   withSessionActivityRlsContext,
   withWorkspaceRls,
   withWorkspaceSubjectRls
-} from "./chunk-LRSIODCQ.js";
+} from "./chunk-27T4AP25.js";
 import {
   auditEvents,
   codexCapacityWaiters,
@@ -42,7 +42,7 @@ import {
   workspaceInferenceControls,
   workspaceMemberships,
   workspaces
-} from "./chunk-DSNEIW5E.js";
+} from "./chunk-JL6TBB76.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   fromPostgresLosslessJson,
@@ -6449,4 +6449,4 @@ export {
   setWorkspacePauseTimerInTransaction,
   fireWorkspacePauseTimerInTransaction
 };
-//# sourceMappingURL=chunk-OEFNTGR3.js.map
+//# sourceMappingURL=chunk-NT7OGKYX.js.map

package/dist/{chunk-BID3CNN3.js → chunk-T3CYF3DH.js}

@@ -7,7 +7,7 @@ import {
   withAccountRls,
   withRlsContext,
   withWorkspaceRls
-} from "./chunk-LRSIODCQ.js";
+} from "./chunk-27T4AP25.js";
 import {
   connections,
   creditDebitAllocations,
@@ -20,7 +20,7 @@ import {
   workspaceVideoGenerationPolicies,
   workspaceVideoGenerationQuotas,
   workspaces
-} from "./chunk-DSNEIW5E.js";
+} from "./chunk-JL6TBB76.js";
 
 // src/video-generation.ts
 import {
@@ -1412,4 +1412,4 @@ export {
   mediaGenerationResultForStoredOperation,
   getVideoGenerationOperationSummary
 };
-//# sourceMappingURL=chunk-BID3CNN3.js.map
+//# sourceMappingURL=chunk-T3CYF3DH.js.map

package/dist/{chunk-3XHC5KC5.js → chunk-TRUEH4I2.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-LRSIODCQ.js";
+} from "./chunk-27T4AP25.js";
 
 // src/editable-artifacts.ts
 import { createHash } from "crypto";
@@ -3592,4 +3592,4 @@ export {
   PostgresEditableArtifactLiveReadStore,
   transactionallyAuthorizeEditableArtifactActor
 };
-//# sourceMappingURL=chunk-3XHC5KC5.js.map
+//# sourceMappingURL=chunk-TRUEH4I2.js.map

package/dist/{chunk-7S3O33NM.js → chunk-UQELJ6OM.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-LRSIODCQ.js";
+} from "./chunk-27T4AP25.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-7S3O33NM.js.map
+//# sourceMappingURL=chunk-UQELJ6OM.js.map

package/dist/{chunk-OI6YZXTU.js → chunk-VCHK4D6S.js}

@@ -4,7 +4,7 @@ import {
   rlsContextForWorkspace,
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls
-} from "./chunk-LRSIODCQ.js";
+} from "./chunk-27T4AP25.js";
 
 // src/session-tenancy.ts
 import { createHash } from "crypto";
@@ -479,4 +479,4 @@ export {
   forkSessionContent,
   replayAppliedSessionFork
 };
-//# sourceMappingURL=chunk-OI6YZXTU.js.map
+//# sourceMappingURL=chunk-VCHK4D6S.js.map

package/dist/connect-attempts.js

@@ -7,9 +7,9 @@ import {
   getConnectAttempt,
   getConnectBeginReplay,
   listPendingConnectAttempts
-} from "./chunk-HYBQABBJ.js";
-import "./chunk-LRSIODCQ.js";
-import "./chunk-DSNEIW5E.js";
+} from "./chunk-EFANLEWI.js";
+import "./chunk-27T4AP25.js";
+import "./chunk-JL6TBB76.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/connection-metadata.d.ts

@@ -0,0 +1,416 @@
+import { type ConnectionMetadata } from "@opengeni/contracts";
+import { type SQL } from "drizzle-orm";
+import { type Database } from "./database.js";
+/** Server-owned verification facts; public schemas expose them read-only and nullable. */
+export type ConnectionMetadataWithVerification = ConnectionMetadata & {
+    verifiedInstallAt: string | null;
+    verifiedInstallVersion: number | null;
+};
+export declare const connectionMetadataColumns: {
+    id: import("drizzle-orm/pg-core").PgColumn<{
+        name: "id";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgUUID";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    authorityId: import("drizzle-orm/pg-core").PgColumn<{
+        name: "authority_id";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgUUID";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    authorityGeneration: import("drizzle-orm/pg-core").PgColumn<{
+        name: "authority_generation";
+        tableName: "connections";
+        dataType: "number";
+        columnType: "PgBigInt53";
+        data: number;
+        driverParam: string | number;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    accountId: import("drizzle-orm/pg-core").PgColumn<{
+        name: "account_id";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgUUID";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    workspaceId: import("drizzle-orm/pg-core").PgColumn<{
+        name: "workspace_id";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgUUID";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    subjectId: import("drizzle-orm/pg-core").PgColumn<{
+        name: "subject_id";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    providerDomain: import("drizzle-orm/pg-core").PgColumn<{
+        name: "provider_domain";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    kind: import("drizzle-orm/pg-core").PgColumn<{
+        name: "kind";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    status: import("drizzle-orm/pg-core").PgColumn<{
+        name: "status";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    grantedScopes: import("drizzle-orm/pg-core").PgColumn<{
+        name: "granted_scopes";
+        tableName: "connections";
+        dataType: "json";
+        columnType: "PgJsonb";
+        data: string[];
+        driverParam: unknown;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        $type: string[];
+    }>;
+    expiresAt: import("drizzle-orm/pg-core").PgColumn<{
+        name: "expires_at";
+        tableName: "connections";
+        dataType: "date";
+        columnType: "PgTimestamp";
+        data: Date;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    lastRefreshAt: import("drizzle-orm/pg-core").PgColumn<{
+        name: "last_refresh_at";
+        tableName: "connections";
+        dataType: "date";
+        columnType: "PgTimestamp";
+        data: Date;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    lastUsedAt: import("drizzle-orm/pg-core").PgColumn<{
+        name: "last_used_at";
+        tableName: "connections";
+        dataType: "date";
+        columnType: "PgTimestamp";
+        data: Date;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    lastError: import("drizzle-orm/pg-core").PgColumn<{
+        name: "last_error";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    version: import("drizzle-orm/pg-core").PgColumn<{
+        name: "version";
+        tableName: "connections";
+        dataType: "number";
+        columnType: "PgInteger";
+        data: number;
+        driverParam: string | number;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    verifiedInstallAt: import("drizzle-orm/pg-core").PgColumn<{
+        name: "verified_install_at";
+        tableName: "connections";
+        dataType: "date";
+        columnType: "PgTimestamp";
+        data: Date;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    verifiedInstallVersion: import("drizzle-orm/pg-core").PgColumn<{
+        name: "verified_install_version";
+        tableName: "connections";
+        dataType: "number";
+        columnType: "PgInteger";
+        data: number;
+        driverParam: string | number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    metadata: import("drizzle-orm/pg-core").PgColumn<{
+        name: "metadata";
+        tableName: "connections";
+        dataType: "json";
+        columnType: "PgJsonb";
+        data: Record<string, unknown>;
+        driverParam: unknown;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        $type: Record<string, unknown>;
+    }>;
+    createdBySubjectId: import("drizzle-orm/pg-core").PgColumn<{
+        name: "created_by_subject_id";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    updatedBySubjectId: import("drizzle-orm/pg-core").PgColumn<{
+        name: "updated_by_subject_id";
+        tableName: "connections";
+        dataType: "string";
+        columnType: "PgText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    createdAt: import("drizzle-orm/pg-core").PgColumn<{
+        name: "created_at";
+        tableName: "connections";
+        dataType: "date";
+        columnType: "PgTimestamp";
+        data: Date;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+        name: "updated_at";
+        tableName: "connections";
+        dataType: "date";
+        columnType: "PgTimestamp";
+        data: Date;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+};
+export declare function connectionSubjectVisibility(subjectId?: string | null): SQL;
+export declare function withConnectionSubjectRls<T>(db: Database, workspaceId: string, subjectId: string | null | undefined, fn: (db: Database) => Promise<T>): Promise<T>;
+export declare function listConnectionsMetadata(db: Database, workspaceId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification[]>;
+export declare function getConnectionMetadata(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification | null>;
+export declare function mapConnectionMetadata(row: {
+    id: string;
+    authorityId?: string | null;
+    authorityGeneration: number;
+    accountId: string;
+    workspaceId: string;
+    subjectId: string | null;
+    providerDomain: string;
+    kind: string;
+    status: string;
+    grantedScopes: string[];
+    expiresAt: Date | null;
+    lastRefreshAt: Date | null;
+    lastUsedAt: Date | null;
+    lastError: string | null;
+    version: number;
+    verifiedInstallAt: Date | null;
+    verifiedInstallVersion: number | null;
+    metadata: Record<string, unknown>;
+    createdBySubjectId: string | null;
+    updatedBySubjectId: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+}): ConnectionMetadataWithVerification;

package/dist/editable-artifact-durable-export.js

@@ -1,8 +1,8 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-LRSIODCQ.js";
-import "./chunk-DSNEIW5E.js";
+} from "./chunk-27T4AP25.js";
+import "./chunk-JL6TBB76.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 

package/dist/editable-artifacts.js

@@ -10,9 +10,9 @@ import {
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink,
   transactionallyAuthorizeEditableArtifactActor
-} from "./chunk-3XHC5KC5.js";
-import "./chunk-LRSIODCQ.js";
-import "./chunk-DSNEIW5E.js";
+} from "./chunk-TRUEH4I2.js";
+import "./chunk-27T4AP25.js";
+import "./chunk-JL6TBB76.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/index.d.ts

@@ -1,4 +1,7 @@
 export * from "./organization-slack-bots.js";
+export * from "./voice-transcription-settlement.js";
+import { type ConnectionMetadataWithVerification } from "./connection-metadata.js";
+export { getConnectionMetadata, listConnectionsMetadata, type ConnectionMetadataWithVerification, } from "./connection-metadata.js";
 export { readCreditPromotionPolicy } from "./credit-promotion-policy.js";
 export { getBillingBalance, getSpendableCreditBalance, spendableCreditMicros, } from "./credit-balances.js";
 import { type TurnAttemptFenceRejectReason } from "./session-attempt-fence.js";
@@ -260,6 +263,7 @@ export * from "./session-queue-commands.js";
 export * from "./session-realtime.js";
 export * from "./session-realtime-context.js";
 export * from "./session-realtime-ledger.js";
+export * from "./session-realtime-billing.js";
 export * from "./new-session-drafts.js";
 export * from "./workspace-instruction-policies.js";
 export * from "./company-profile.js";
@@ -1518,11 +1522,6 @@ export declare class PersonalGitHubRepositorySelectionUnavailableError extends E
     readonly code = "PERSONAL_GITHUB_REPOSITORY_SELECTION_UNAVAILABLE";
     constructor();
 }
-/** Server-owned verification facts; public schemas expose them read-only and nullable. */
-export type ConnectionMetadataWithVerification = ConnectionMetadata & {
-    verifiedInstallAt: string | null;
-    verifiedInstallVersion: number | null;
-};
 export type SlackBotPostOperation = {
     id: string;
     accountId: string;
@@ -2363,8 +2362,6 @@ export declare function revokeWorkspaceOpenRouterConnections(db: Database, input
  * reconnect remains fenced to the exact Connection version captured in state.
  */
 export declare function persistProviderOAuthConnection(db: Database, input: PersistProviderOAuthConnectionInput): Promise<ConnectionMetadataWithVerification | null>;
-export declare function listConnectionsMetadata(db: Database, workspaceId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification[]>;
-export declare function getConnectionMetadata(db: Database, workspaceId: string, connectionId: string, subjectId?: string | null): Promise<ConnectionMetadataWithVerification | null>;
 export declare function getPersonalGitHubRepositorySelectionState(db: Database, input: {
     accountId: string;
     originWorkspaceId: string;
@@ -8452,6 +8449,30 @@ export type SandboxWorkspaceMutationAdmission = {
     workspaceGeneration: number;
 };
 export type SandboxWorkspaceMutationProviderOutcome = "resolved" | "rejected";
+/** Evidence from a committed exact admission settlement. It establishes the
+ * physical provider outcome only; mutable output authority remains rejected. */
+export type SandboxWorkspaceMutationPhysicalSettlement = Readonly<{
+    accountId: string;
+    workspaceId: string;
+    admission: Readonly<SandboxWorkspaceMutationAdmission>;
+    operation: string;
+    outcome: "resolved";
+}>;
+/** The exact provider outcome committed before its output failed an acceptance
+ * fence. A generic admission fence or failed transaction carries no receipt.
+ * This error never authorizes accepting output or replaying provider work. */
+export declare class SandboxWorkspaceMutationOutputRejectedError extends SandboxWorkspaceMutationFencedError {
+    readonly name = "SandboxWorkspaceMutationOutputRejectedError";
+    readonly physicalSettlement: SandboxWorkspaceMutationPhysicalSettlement;
+    constructor(code: SandboxWorkspaceMutationFencedError["code"], message: string, physicalSettlement: SandboxWorkspaceMutationPhysicalSettlement);
+    matchesPhysicalSettlement(input: {
+        accountId: string;
+        workspaceId: string;
+        admission: SandboxWorkspaceMutationAdmission;
+        operation: string;
+        outcome: SandboxWorkspaceMutationProviderOutcome;
+    }): boolean;
+}
 export type SandboxRetainedProcessState = "active" | "exited" | "lost";
 export type SandboxRetainedProcess = {
     id: string;