@opengeni/db 1.4.0 → 1.4.4

package/dist/{chunk-AMK3FNOW.js → chunk-WAFY2TCB.js}

@@ -1,9 +1,9 @@
 import {
   lockSessionEventWriteRows
-} from "./chunk-NT7OGKYX.js";
+} from "./chunk-SG5YDHSE.js";
 import {
   withSessionActivityRlsContext
-} from "./chunk-27T4AP25.js";
+} from "./chunk-45EMCVJC.js";
 import {
   sandboxRetainedProcesses,
   sessionBackgroundCommands,
@@ -140,4 +140,4 @@ async function appendSessionCommandOutput(db, input) {
 export {
   appendSessionCommandOutput
 };
-//# sourceMappingURL=chunk-AMK3FNOW.js.map
+//# sourceMappingURL=chunk-WAFY2TCB.js.map

package/dist/codemode-approvals.d.ts

@@ -33,7 +33,13 @@ export declare function adoptCodemodeApproval(db: Database, input: CodemodeConti
     catalogDigest: string;
     effectDigest: string | null;
 }, onTerminal?: (tx: Database, operation: CodemodeOperation) => Promise<void>): Promise<CodemodeOperation | null>;
-/** Read a handle with the current exact attempt and same original caller; old bearer authority is insufficient. */
+/**
+ * Read a handle with the current exact attempt and same original caller; old
+ * bearer authority is insufficient. This is a status read polled while a
+ * caller waits, so it is one plain snapshot select: it proves the exact live
+ * attempt in the same statement but takes no session/turn/attempt row locks
+ * and is not refused by a pending Pause/Steer, which owns the write fence only.
+ */
 export declare function readTurnCodemodeOperation(db: Database, input: CodemodeContinuationScope & {
     operationId: string;
     callerSubjectId: string;

package/dist/connect-attempts.js

@@ -7,8 +7,8 @@ import {
   getConnectAttempt,
   getConnectBeginReplay,
   listPendingConnectAttempts
-} from "./chunk-EFANLEWI.js";
-import "./chunk-27T4AP25.js";
+} from "./chunk-LGXWM3UJ.js";
+import "./chunk-45EMCVJC.js";
 import "./chunk-JL6TBB76.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";

package/dist/credit-balances.d.ts

@@ -5,14 +5,35 @@ type CreditBalanceSnapshot = BillingBalance & {
     creditPolicyRevision?: number;
 };
 export declare function getBillingBalance(db: Database, accountId: string, policyRevision?: number): Promise<CreditBalanceSnapshot>;
-/** Missing model means a non-model resource, which can only use general credits. */
-export declare function spendableCreditMicros(balance: BillingBalance, modelId?: string): number;
-export declare function getSpendableCreditBalance(db: Database, accountId: string, modelId?: string, policyRevision?: number): Promise<CreditBalanceSnapshot>;
-export declare function planCreditDebit(balance: BillingBalance, requestedMicros: number, modelId?: string): {
+/**
+ * What a charge pays for. A canonical model ID uses grants scoped to that
+ * model; {@link VOICE_CREDIT_USAGE} (dictation and live voice) uses grants
+ * that cover voice, which are the verified-signup trial credits. Omitted means
+ * a non-model resource, which can only use general credits.
+ */
+export type CreditUsage = string | {
+    readonly kind: "voice";
+} | undefined;
+/** Deployment-funded dictation and live voice. */
+export declare const VOICE_CREDIT_USAGE: {
+    readonly kind: "voice";
+};
+export declare function spendableCreditMicros(balance: BillingBalance, usage?: CreditUsage): number;
+export declare function getSpendableCreditBalance(db: Database, accountId: string, usage?: CreditUsage, policyRevision?: number): Promise<CreditBalanceSnapshot>;
+export declare function planCreditDebit(balance: BillingBalance, requestedMicros: number, usage?: CreditUsage): {
     debitedMicros: number;
     allocations: {
         grantEntryId: string;
         amountMicros: number;
     }[];
 };
+/**
+ * Allocations for an already-consumed charge of the full amount: covering
+ * grants pay what they can and general credit takes the rest, possibly going
+ * negative.
+ */
+export declare function planPostUseCreditAllocations(balance: BillingBalance, amountMicros: number, usage: CreditUsage): {
+    grantEntryId: string;
+    amountMicros: number;
+}[];
 export {};

package/dist/database.d.ts

@@ -191,8 +191,20 @@ export declare function withWorkspaceRls<T>(db: Database, workspaceId: string, f
  */
 export declare function withSessionActivityRlsContext<T>(db: Database, context: RlsContext & {
     workspaceId: string;
-}, fn: (db: SessionActivityDatabase) => Promise<T>, transactionConfig?: PgTransactionConfig, fenceMode?: "shared" | "none", organizationMembershipFence?: boolean): Promise<T>;
-export declare function withWorkspaceSessionActivityRls<T>(db: Database, workspaceId: string, fn: (db: SessionActivityDatabase) => Promise<T>, transactionConfig?: PgTransactionConfig): Promise<T>;
+}, fn: (db: SessionActivityDatabase) => Promise<T>, transactionConfig?: PgTransactionConfig, fenceMode?: "shared" | "none", organizationMembershipFence?: OrganizationMembershipFenceMode): Promise<T>;
+/**
+ * `true`/`"exclusive"`: the callback reauthorizes or mutates under the
+ * organization-membership lifecycle lock. `"shared"`: the callback only reads
+ * membership-fenced authority and must never escalate to exclusive.
+ */
+export type OrganizationMembershipFenceMode = boolean | "exclusive" | "shared";
+/**
+ * `organizationMembershipFence` is required when the callback takes the
+ * organization-membership lifecycle lock (for example external-actor
+ * reauthorization): that lock precedes the session-tenancy fence and the
+ * canonical control/workspace/session prefix, never follows it.
+ */
+export declare function withWorkspaceSessionActivityRls<T>(db: Database, workspaceId: string, fn: (db: SessionActivityDatabase) => Promise<T>, transactionConfig?: PgTransactionConfig, organizationMembershipFence?: boolean): Promise<T>;
 /**
  * Run one of several ordered workspace activity scopes inside a caller-owned
  * transaction. Each scope is fully finalized before restoring the caller's
@@ -211,7 +223,7 @@ export declare function retrySessionActivityRls<T>(db: Database, workspaceId: st
     /** Claim can inherit membership-fenced causal authority after locking the
      * session. Acquire that fence before tenancy/control/session instead. An
      * enclosing transaction must preserve this same lock prefix. */
-    organizationMembershipFence?: boolean;
+    organizationMembershipFence?: OrganizationMembershipFenceMode;
 }, fn: (db: SessionActivityDatabase) => Promise<T>): Promise<T>;
 export declare function retryWorkspacePersistence<T>(db: Database, workspaceId: string, options: IdempotentPersistenceTransactionOptions, fn: (db: Database) => Promise<T>): Promise<T>;
 export declare function retryRlsPersistence<T>(db: Database, context: RlsContext, options: IdempotentPersistenceTransactionOptions, fn: (db: Database) => Promise<T>): Promise<T>;

package/dist/editable-artifact-durable-export.js

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-27T4AP25.js";
+} from "./chunk-45EMCVJC.js";
 import "./chunk-JL6TBB76.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";

package/dist/editable-artifacts.js

@@ -10,8 +10,8 @@ import {
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink,
   transactionallyAuthorizeEditableArtifactActor
-} from "./chunk-TRUEH4I2.js";
-import "./chunk-27T4AP25.js";
+} from "./chunk-PUOQEL6A.js";
+import "./chunk-45EMCVJC.js";
 import "./chunk-JL6TBB76.js";
 import "./chunk-P7YDM2RI.js";
 import "./chunk-PZ5AY32C.js";

package/dist/index.d.ts

@@ -3,10 +3,12 @@ export * from "./voice-transcription-settlement.js";
 import { type ConnectionMetadataWithVerification } from "./connection-metadata.js";
 export { getConnectionMetadata, listConnectionsMetadata, type ConnectionMetadataWithVerification, } from "./connection-metadata.js";
 export { readCreditPromotionPolicy } from "./credit-promotion-policy.js";
-export { getBillingBalance, getSpendableCreditBalance, spendableCreditMicros, } from "./credit-balances.js";
+import { type CreditUsage } from "./credit-balances.js";
+export { getBillingBalance, getSpendableCreditBalance, spendableCreditMicros, VOICE_CREDIT_USAGE, type CreditUsage, } from "./credit-balances.js";
 import { type TurnAttemptFenceRejectReason } from "./session-attempt-fence.js";
 export type { TurnAttemptFenceRejectReason } from "./session-attempt-fence.js";
 export { resolveConnectorActionPolicy, connectorActionPolicyDecision, projectConnectorToolPermission, connectorActionPoliciesForAccountRoutes, connectorToolPolicyRevision, ConnectorToolPermissionConflictError, } from "./connector-action-policy.js";
+export { lockLiveNativeOriginalOriginTx, type ModalNativeLiveOriginScope, type ModalNativeLiveOriginProjection, type ModalNativeLiveOriginResult, } from "./modal-native-live-origin.js";
 export { SubscriptionAccountChangedError } from "./subscription-account-conflict.js";
 import type { GoalAdmissionPausedReason } from "@opengeni/contracts";
 export declare const getScheduledTaskClaudeProviderAccountAuthoritySnapshot: (db: Database, workspaceId: string, taskId: string) => Promise<{
@@ -1099,6 +1101,11 @@ export declare function applyCreditDebitAfterUse(db: Database, input: {
     idempotencyKey: string;
     metadata?: Record<string, unknown>;
     occurredAt?: Date;
+    /**
+     * What the charge paid for. When set, grants covering it pay first (oldest
+     * first) and general credit takes the rest. Omitted: general credit only.
+     */
+    usage?: CreditUsage;
 }): Promise<{
     balance: BillingBalance;
     debitedMicros: number;
@@ -8406,6 +8413,9 @@ export declare function confirmDrainCold(db: Database, input: {
     idleCommandContainmentMs?: number | undefined;
 }): Promise<{
     wentCold: boolean;
+    /** The missing provider was an unpublished warming replacement: its loss
+     *  recorded no lost workspace (see `unpublishedWarmingLoss`). */
+    unpublishedProviderLost?: boolean;
     backgroundCommandEvents?: SessionEvent[];
 }>;
 export declare class SandboxWorkspaceMutationFencedError extends Error {
@@ -8458,13 +8468,24 @@ export type SandboxWorkspaceMutationPhysicalSettlement = Readonly<{
     operation: string;
     outcome: "resolved";
 }>;
+/** Durable terminal truth of the retained process whose concurrent settlement
+ * fenced a physically settled mutation's output. */
+export type SandboxRetainedProcessTerminalState = Readonly<{
+    state: "exited" | "lost";
+    exitCode: number | null;
+}>;
 /** The exact provider outcome committed before its output failed an acceptance
  * fence. A generic admission fence or failed transaction carries no receipt.
  * This error never authorizes accepting output or replaying provider work. */
 export declare class SandboxWorkspaceMutationOutputRejectedError extends SandboxWorkspaceMutationFencedError {
     readonly name = "SandboxWorkspaceMutationOutputRejectedError";
     readonly physicalSettlement: SandboxWorkspaceMutationPhysicalSettlement;
-    constructor(code: SandboxWorkspaceMutationFencedError["code"], message: string, physicalSettlement: SandboxWorkspaceMutationPhysicalSettlement);
+    /** Non-null only when the fence was the retained process itself having
+     * already reached a durable terminal state (for example the reaper settled
+     * the exit between admission and settlement). The output stays rejected;
+     * callers may report this stored terminal truth instead of failing. */
+    readonly retainedProcessTerminal: SandboxRetainedProcessTerminalState | null;
+    constructor(code: SandboxWorkspaceMutationFencedError["code"], message: string, physicalSettlement: SandboxWorkspaceMutationPhysicalSettlement, retainedProcessTerminal?: SandboxRetainedProcessTerminalState | null);
     matchesPhysicalSettlement(input: {
         accountId: string;
         workspaceId: string;
@@ -11984,6 +12005,7 @@ export * from "./codemode-approvals.js";
 export * from "./tool-action-reviews.js";
 export * from "./browser-sessions.js";
 export * from "./browser-deadline-checkpoints.js";
+export * from "./sandbox-interaction-idle.js";
 export * from "./computer-sessions.js";
 export * from "./browser-identities.js";
 export * from "./browser-state-artifacts.js";