@opengeni/db 3.1.0-canary.0 → 3.2.0-canary.0

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-OF5OBB76.js";
+} from "./chunk-UZNXG44K.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/runtime-posture.d.ts

@@ -1,7 +1,14 @@
 import type { Database, RlsStrategy } from "./database.js";
-export declare const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES: readonly ["company_brain_inspect_context_receipts(uuid, uuid, text, uuid, timestamp with time zone, uuid, integer)", "company_brain_context_get_or_create_selection(uuid, uuid, uuid, uuid, uuid, integer)", "propose_company_profile_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, text)", "confirm_company_profile_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid)", "evaluate_governed_learning_proposal(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid, uuid, uuid)", "activate_governed_learning_decision(uuid, uuid, uuid, uuid)", "activate_human_confirmed_learning_decision(uuid, uuid, uuid, uuid, uuid)", "confirm_remember_knowledge_claim(uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid)", "undo_governed_learning_activation(uuid, uuid, uuid, uuid)", "inspect_governed_learning_decisions(uuid, uuid, text, integer)", "inspect_governed_learning_activations(uuid, uuid, text, integer)", "inspect_governed_learning_activation_undos(uuid, uuid, text, integer)", "fork_session_content(uuid, uuid, uuid, text, uuid, text, boolean, text, text, integer)", "fork_session_content(uuid, uuid, uuid, text, uuid, text, text, text, integer)", "replay_applied_session_fork(uuid, uuid, uuid, text, uuid, text, boolean, text, text, integer)", "session_tenancy_product_activated(uuid, integer)", "session_tenancy_any_product_activation()", "xai_subscription_authority_live(uuid, uuid, text, uuid, text, uuid, uuid, bigint)", "create_xai_subscription_credential(uuid, uuid, text, text, text, text, text, text, text, timestamp with time zone)", "disconnect_xai_subscription_credential(uuid, uuid, text, uuid, jsonb)", "google_drive_document_citation(uuid, uuid, text, uuid, uuid)", "google_drive_file_authorized(uuid, uuid, text, uuid)", "knowledge_source_sync_lock_authority(uuid, uuid, uuid)", "ensure_managed_human_personal_workspace(uuid, text, uuid)", "list_self_organization_memberships(text)", "list_self_organization_invitations(text)", "list_self_organization_invitations(text, uuid, integer)", "get_self_organization_invitation(text, uuid)", "list_organization_invitations(uuid, text, uuid, integer)", "list_organization_members(uuid, text)", "get_organization_administration_overview(uuid, text)", "create_managed_organization(text, text, text, uuid)", "assert_organization_shared_workspace_administrator(uuid, uuid, text)", "open_organization_shared_workspace_administration_capability(uuid, uuid, text)", "close_organization_shared_workspace_administration_capability(uuid)", "create_organization_shared_workspace(uuid, text, text, text, text, uuid)", "upsert_organization_shared_workspace_member(uuid, uuid, text, uuid, text, text, jsonb, boolean)", "update_organization_name(uuid, text, text, timestamp with time zone, uuid)", "create_organization_invitation_v2(jsonb)", "bind_pending_organization_invitations_for_verified_email(text, text)", "has_pending_organization_invitation_for_subject(text)", "accept_organization_invitation_v2(jsonb)", "organization_membership_command(jsonb)", "prepare_organization_membership_protocol_settlements(jsonb)", "assert_active_managed_human_organization_membership(uuid, text)", "resolve_workspace_writer_grant_identity(uuid, text)", "prepare_workspace_membership_removal_settlements(jsonb)", "workspace_membership_removal_command(jsonb)", "get_organization_retention_policy(uuid, text)", "preview_organization_retention_deletions(uuid, integer)", "claim_organization_retention_deletion(uuid, uuid, uuid[])", "list_organization_retention_deletion_objects(uuid, uuid, uuid, text, integer)", "record_organization_retention_object_deleted(uuid, uuid, uuid, text, text, text, text)", "fail_organization_retention_deletion(uuid, uuid, uuid, text)", "finalize_organization_retention_deletion(uuid, uuid, uuid, text)", "complete_organization_retention_deletion(uuid, uuid, uuid, text)", ...string[], "open_private_session_create_capability(uuid, uuid, uuid, text)", "open_private_child_session_create_capability(uuid, uuid, uuid, uuid, uuid, uuid, integer)", "close_private_session_create_capability(uuid)", "resolve_session_attempt_personal_resources(uuid, uuid, uuid)", "accept_turn_personal_resource_attachment(uuid, uuid, uuid, uuid, text, integer, boolean, integer)", "list_self_user_resource_authorities(uuid, uuid, text, uuid, integer)", "issue_self_user_resource_grant(uuid, uuid, uuid, text, text, text, uuid, integer, boolean)", "revoke_self_user_resource_grant(uuid, uuid, uuid)", "authorize_session_attempt_personal_resource_reads(uuid, uuid, uuid)", "preference_registry_create_knowledge_proposal_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, uuid, text, text, text, text, integer, text, jsonb, timestamp with time zone, text)", "create_scoped_variable_set(uuid, uuid, text, text, text, jsonb, boolean)", "list_scoped_variable_sets(uuid, uuid, uuid, text, text)", "count_scoped_variable_sets(uuid, uuid, text)", "mutate_scoped_variable_set(uuid, uuid, uuid, text, text, boolean, text, boolean, text, text, boolean)", "read_scoped_variable_set_secret(uuid, uuid, uuid, text, text, text, uuid, uuid, uuid, integer)", "materialize_scoped_variable_set_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid)", "materialize_scoped_variable_set_for_session(uuid, uuid, uuid, uuid)", "resolve_personal_connection_authority_selection(uuid, uuid, text, uuid, jsonb)", "resolve_accepted_connection_use(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, uuid, text, text, text, text)", "resolve_connection_use_authority(uuid, uuid, uuid, jsonb)", "get_self_personal_github_repository_selection(uuid, uuid, text, uuid)", "mutate_self_personal_github_repository_selection(uuid, uuid, text, uuid, bigint, bigint, text, jsonb, boolean)", "create_personal_document_authority(uuid, uuid, uuid)", "resolve_document_original_file(uuid, uuid, text, uuid)", "resolve_session_attempt_personal_document_reads(uuid, uuid, uuid, uuid)", "list_document_authority_reclassifications(uuid, uuid, text, uuid, integer, timestamp with time zone, uuid)", "reclassify_document_authority(jsonb)", "run_document_default_collection_backfill(jsonb)", "create_scoped_rig(uuid, uuid, text, text, text, text, jsonb, boolean)", "list_scoped_rigs(uuid, uuid, uuid, text, text)", "count_scoped_rigs(uuid, uuid, text)", "mutate_scoped_rig(uuid, uuid, uuid, text, text, boolean, text, boolean, boolean)", "finalize_scoped_enrollment(uuid, uuid, text, text, boolean, boolean, text, text, text, boolean)", "list_scoped_enrollments(uuid, uuid, uuid, text)", "get_scoped_sandbox(uuid, uuid, uuid)", "authorize_scoped_sandbox_attach(uuid, uuid, uuid)", "materialize_scoped_rig_version_for_attempt(uuid, uuid, uuid, uuid, uuid, integer)", "authorize_session_attempt_personal_machine(uuid, uuid, uuid, uuid, uuid, integer, uuid)", "assert_session_attempt_personal_machine(uuid, uuid, uuid, uuid, uuid, integer, uuid, boolean)", "list_scoped_machine_dependent_sessions(uuid, uuid, uuid)", "detach_scoped_machine_dependent_sessions(uuid, uuid, uuid)", "freeze_scheduled_task_personal_resources(uuid, uuid, uuid, bigint)", "clone_scheduled_task_personal_resource_authority(uuid, uuid, uuid, bigint, bigint)", "refresh_scheduled_task_personal_resources_clone_connections(uuid, uuid, uuid, bigint, bigint)", "create_scheduled_agent_run_with_admission(uuid, uuid, uuid, uuid, bigint, text, text, text, timestamp with time zone, timestamp with time zone, jsonb)", "materialize_scheduled_task_reusable_session_from_run(uuid, uuid, uuid, uuid, uuid, bigint, text)", "scheduled_task_run_personal_resource_authority(uuid, uuid, uuid)", "scheduled_task_run_connection_authority_subject(uuid, uuid, uuid)", "scheduled_task_personal_resource_authority_subject(uuid, uuid, uuid, bigint)", "record_scheduled_task_revision_authority(uuid, uuid, uuid, bigint)", "clone_scheduled_task_revision_authority(uuid, uuid, uuid, bigint, bigint)", "scheduled_task_revision_authority_subject(uuid, uuid, uuid, bigint)", "scheduled_task_revision_authority_snapshot(uuid, uuid, uuid, bigint)", "validate_scheduled_agent_run_live_authority(uuid, uuid, uuid)", "scheduled_scoped_rig_version_metadata(uuid, uuid, text, uuid, uuid)", "scheduled_variable_set_expected_generation_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid)", "bind_scheduled_task_run_session(uuid, uuid, uuid, uuid)", "transition_scheduled_agent_run(uuid, uuid, uuid, uuid, uuid, text, text)", "ensure_canonical_human_identity(text, text)", "validate_canonical_human_session(text, text, boolean)", "get_canonical_human_identity_projection(text)", "apply_canonical_human_identity_operation(uuid, text, bigint, text, uuid, text, text, text)", "create_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, integer)", "archive_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, integer, text)", "list_task_notes_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, boolean, integer)", "replace_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid, uuid, integer, text, text, integer, text)", "resolve_task_note_knowledge_promotion_source(uuid, uuid, uuid, uuid, uuid, integer, uuid, integer, text, text, text)", "session_private_actor_visible(uuid, uuid, uuid, text)", "session_reference_visible(uuid, uuid, uuid)", "session_visibility_lifecycle_capability_held()", "transition_session_visibility(uuid, uuid, uuid, text, text, integer, text, text, integer)", "xai_subscription_pool_visible(uuid, uuid, text, text, uuid)", "resolve_xai_authority_pool(uuid, uuid, text, jsonb)", "revalidate_xai_subscription_authority(uuid, text, uuid, jsonb)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
+export declare const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES: readonly ["company_brain_inspect_context_receipts(uuid, uuid, text, uuid, timestamp with time zone, uuid, integer)", "company_brain_context_get_or_create_selection(uuid, uuid, uuid, uuid, uuid, integer)", "propose_company_profile_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, text)", "confirm_company_profile_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid)", "evaluate_governed_learning_proposal(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid, uuid, uuid)", "activate_governed_learning_decision(uuid, uuid, uuid, uuid)", "activate_human_confirmed_learning_decision(uuid, uuid, uuid, uuid, uuid)", "confirm_remember_knowledge_claim(uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid)", "undo_governed_learning_activation(uuid, uuid, uuid, uuid)", "inspect_governed_learning_decisions(uuid, uuid, text, integer)", "inspect_governed_learning_activations(uuid, uuid, text, integer)", "inspect_governed_learning_activation_undos(uuid, uuid, text, integer)", "fork_session_content(uuid, uuid, uuid, text, uuid, text, boolean, text, text, integer)", "fork_session_content(uuid, uuid, uuid, text, uuid, text, text, text, integer)", "replay_applied_session_fork(uuid, uuid, uuid, text, uuid, text, boolean, text, text, integer)", "session_tenancy_product_activated(uuid, integer)", "session_tenancy_any_product_activation()", "xai_subscription_authority_live(uuid, uuid, text, uuid, text, uuid, uuid, bigint)", "create_xai_subscription_credential(uuid, uuid, text, text, text, text, text, text, text, timestamp with time zone)", "disconnect_xai_subscription_credential(uuid, uuid, text, uuid, jsonb)", "google_drive_document_citation(uuid, uuid, text, uuid, uuid)", "google_drive_file_authorized(uuid, uuid, text, uuid)", "knowledge_source_sync_lock_authority(uuid, uuid, uuid)", "ensure_managed_human_personal_workspace(uuid, text, uuid)", "list_self_organization_memberships(text)", "list_self_organization_invitations(text)", "list_self_organization_invitations(text, uuid, integer)", "get_self_organization_invitation(text, uuid)", "list_organization_invitations(uuid, text, uuid, integer)", "list_organization_members(uuid, text)", "get_organization_administration_overview(uuid, text)", "create_managed_organization(text, text, text, uuid)", "assert_organization_shared_workspace_administrator(uuid, uuid, text)", "open_organization_shared_workspace_administration_capability(uuid, uuid, text)", "close_organization_shared_workspace_administration_capability(uuid)", "create_organization_shared_workspace(uuid, text, text, text, text, uuid)", "upsert_organization_shared_workspace_member(uuid, uuid, text, uuid, text, text, jsonb, boolean)", "update_organization_name(uuid, text, text, timestamp with time zone, uuid)", "create_organization_invitation_v2(jsonb)", "bind_pending_organization_invitations_for_verified_email(text, text)", "has_pending_organization_invitation_for_subject(text)", "accept_organization_invitation_v2(jsonb)", "organization_membership_command(jsonb)", "prepare_organization_membership_protocol_settlements(jsonb)", "assert_active_managed_human_organization_membership(uuid, text)", "resolve_workspace_writer_grant_identity(uuid, text)", "prepare_workspace_membership_removal_settlements(jsonb)", "workspace_membership_removal_command(jsonb)", "get_organization_retention_policy(uuid, text)", "preview_organization_retention_deletions(uuid, integer)", "claim_organization_retention_deletion(uuid, uuid, uuid[])", "list_organization_retention_deletion_objects(uuid, uuid, uuid, text, integer)", "record_organization_retention_object_deleted(uuid, uuid, uuid, text, text, text, text)", "fail_organization_retention_deletion(uuid, uuid, uuid, text)", "finalize_organization_retention_deletion(uuid, uuid, uuid, text)", "complete_organization_retention_deletion(uuid, uuid, uuid, text)", ...string[], "open_private_session_create_capability(uuid, uuid, uuid, text)", "open_private_child_session_create_capability(uuid, uuid, uuid, uuid, uuid, uuid, integer)", "close_private_session_create_capability(uuid)", "resolve_session_attempt_personal_resources(uuid, uuid, uuid)", "accept_turn_personal_resource_attachment(uuid, uuid, uuid, uuid, text, integer, boolean, integer)", "list_self_user_resource_authorities(uuid, uuid, text, uuid, integer)", "issue_self_user_resource_grant(uuid, uuid, uuid, text, text, text, uuid, integer, boolean)", "revoke_self_user_resource_grant(uuid, uuid, uuid)", "authorize_session_attempt_personal_resource_reads(uuid, uuid, uuid)", "preference_registry_create_knowledge_proposal_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, uuid, text, text, text, text, integer, text, jsonb, timestamp with time zone, text)", "create_scoped_variable_set(uuid, uuid, text, text, text, jsonb, boolean)", "list_scoped_variable_sets(uuid, uuid, uuid, text, text)", "count_scoped_variable_sets(uuid, uuid, text)", "mutate_scoped_variable_set(uuid, uuid, uuid, text, text, boolean, text, boolean, text, text, boolean)", "read_scoped_variable_set_secret(uuid, uuid, uuid, text, text, text, uuid, uuid, uuid, integer)", "materialize_scoped_variable_set_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid)", "materialize_scoped_variable_set_for_session(uuid, uuid, uuid, uuid)", "connection_authority_convergence_audit_capability_active(uuid)", "resolve_personal_connection_authority_selection(uuid, uuid, text, uuid, jsonb)", "resolve_accepted_connection_use(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, uuid, text, text, text, text)", "resolve_connection_use_authority(uuid, uuid, uuid, jsonb)", "inspect_organization_connection_authority_convergence(uuid, integer, uuid)", "get_self_personal_github_repository_selection(uuid, uuid, text, uuid)", "mutate_self_personal_github_repository_selection(uuid, uuid, text, uuid, bigint, bigint, text, jsonb, boolean)", "create_personal_document_authority(uuid, uuid, uuid)", "resolve_document_original_file(uuid, uuid, text, uuid)", "resolve_session_attempt_personal_document_reads(uuid, uuid, uuid, uuid)", "list_document_authority_reclassifications(uuid, uuid, text, uuid, integer, timestamp with time zone, uuid)", "reclassify_document_authority(jsonb)", "run_document_default_collection_backfill(jsonb)", "list_document_default_collection_backfill_runs(jsonb)", "get_document_default_collection_backfill_audit(jsonb)", "list_organization_document_authority_reclassifications(jsonb)", "create_scoped_rig(uuid, uuid, text, text, text, text, jsonb, boolean)", "list_scoped_rigs(uuid, uuid, uuid, text, text)", "count_scoped_rigs(uuid, uuid, text)", "mutate_scoped_rig(uuid, uuid, uuid, text, text, boolean, text, boolean, boolean)", "finalize_scoped_enrollment(uuid, uuid, text, text, boolean, boolean, text, text, text, boolean)", "list_scoped_enrollments(uuid, uuid, uuid, text)", "get_scoped_sandbox(uuid, uuid, uuid)", "authorize_scoped_sandbox_attach(uuid, uuid, uuid)", "materialize_scoped_rig_version_for_attempt(uuid, uuid, uuid, uuid, uuid, integer)", "authorize_session_attempt_personal_machine(uuid, uuid, uuid, uuid, uuid, integer, uuid)", "assert_session_attempt_personal_machine(uuid, uuid, uuid, uuid, uuid, integer, uuid, boolean)", "list_scoped_machine_dependent_sessions(uuid, uuid, uuid)", "detach_scoped_machine_dependent_sessions(uuid, uuid, uuid)", "freeze_scheduled_task_personal_resources(uuid, uuid, uuid, bigint)", "clone_scheduled_task_personal_resource_authority(uuid, uuid, uuid, bigint, bigint)", "refresh_scheduled_task_personal_resources_clone_connections(uuid, uuid, uuid, bigint, bigint)", "create_scheduled_agent_run_with_admission(uuid, uuid, uuid, uuid, bigint, text, text, text, timestamp with time zone, timestamp with time zone, jsonb)", "materialize_scheduled_task_reusable_session_from_run(uuid, uuid, uuid, uuid, uuid, bigint, text)", "scheduled_task_run_personal_resource_authority(uuid, uuid, uuid)", "scheduled_task_run_connection_authority_subject(uuid, uuid, uuid)", "scheduled_task_personal_resource_authority_subject(uuid, uuid, uuid, bigint)", "record_scheduled_task_revision_authority(uuid, uuid, uuid, bigint)", "clone_scheduled_task_revision_authority(uuid, uuid, uuid, bigint, bigint)", "scheduled_task_revision_authority_subject(uuid, uuid, uuid, bigint)", "scheduled_task_revision_authority_snapshot(uuid, uuid, uuid, bigint)", "validate_scheduled_agent_run_live_authority(uuid, uuid, uuid)", "scheduled_scoped_rig_version_metadata(uuid, uuid, text, uuid, uuid)", "scheduled_variable_set_expected_generation_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid)", "bind_scheduled_task_run_session(uuid, uuid, uuid, uuid)", "transition_scheduled_agent_run(uuid, uuid, uuid, uuid, uuid, text, text)", "ensure_canonical_human_identity(text, text)", "validate_canonical_human_session(text, text, boolean)", "get_canonical_human_identity_projection(text)", "apply_canonical_human_identity_operation(uuid, text, bigint, text, uuid, text, text, text)", "create_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, integer)", "archive_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, integer, text)", "list_task_notes_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, boolean, integer)", "replace_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid, uuid, integer, text, text, integer, text)", "resolve_task_note_knowledge_promotion_source(uuid, uuid, uuid, uuid, uuid, integer, uuid, integer, text, text, text)", "session_private_actor_visible(uuid, uuid, uuid, text)", "session_reference_visible(uuid, uuid, uuid)", "session_visibility_lifecycle_capability_held()", "transition_session_visibility(uuid, uuid, uuid, text, text, integer, text, text, integer)", "xai_subscription_pool_visible(uuid, uuid, text, text, uuid)", "resolve_xai_authority_pool(uuid, uuid, text, jsonb)", "revalidate_xai_subscription_authority(uuid, text, uuid, jsonb)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
+/**
+ * Boolean-only predicates that shared-table RLS policies must be able to
+ * evaluate under table owners and SECURITY DEFINER roles unknown at migration
+ * time. The capability ledger and the routine that mints its opaque token stay
+ * private; only these exact policy predicates may be PUBLIC-executable.
+ */
+export declare const RUNTIME_TARGET_SCHEMA_PUBLIC_POLICY_PREDICATE_ROUTINES: readonly ["connection_authority_convergence_audit_capability_active(uuid)"];
 /** Owner-internal helpers that must exist but must never be callable by the runtime role. */
-export declare const RUNTIME_TARGET_SCHEMA_FORBIDDEN_ROUTINES: readonly ["organization_private_sessions_enabled(uuid)", "assert_session_tenancy_quiescent(uuid, uuid, uuid, boolean)", "check_tenancy_backfill_activation_evidence(uuid)"];
+export declare const RUNTIME_TARGET_SCHEMA_FORBIDDEN_ROUTINES: readonly ["organization_private_sessions_enabled(uuid)", "assert_session_tenancy_quiescent(uuid, uuid, uuid, boolean)", "check_tenancy_backfill_activation_evidence(uuid)", "document_migration_audit_capability_active(text)", "assert_document_migration_audit_authority(jsonb)"];
 export declare const RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINES: readonly ["session_reference_visible(uuid, uuid, uuid)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
 /**
  * The complete standalone tenant-table contract. Adding or removing a

package/dist/schema.js

@@ -306,7 +306,7 @@ import {
   xaiRotationSettings,
   xaiSessionAccountPins,
   xaiSubscriptionCredentials
-} from "./chunk-PR2WMLOQ.js";
+} from "./chunk-KRLPEMLH.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,

package/dist/session-background-commands.js

@@ -12,9 +12,9 @@ import {
   settleClaimedConnectedMachineBackgroundCommand,
   settleConnectedMachineSessionBackgroundCommand,
   settleSessionBackgroundCommandForRetainedProcess
-} from "./chunk-ZZ5LJEFX.js";
-import "./chunk-SCPUJS53.js";
-import "./chunk-PR2WMLOQ.js";
+} from "./chunk-NAB6FKFN.js";
+import "./chunk-AZHW7R5V.js";
+import "./chunk-KRLPEMLH.js";
 import "./chunk-PZ5AY32C.js";
 export {
   backgroundCommandActivityForSessions,

package/dist/session-queue-commands.d.ts

@@ -198,6 +198,8 @@ export declare function submitHumanPromptInTransaction(db: SessionActivityDataba
         text: string;
         context: string;
     };
+    /** False when the human input originated inside the active realtime provider session. */
+    mirrorToRealtime?: boolean;
     source: "user" | "api";
     /** Record the admitted run's durable usage fact in this transaction. */
     recordAgentRunUsage?: boolean;

package/dist/session-tenancy.js

@@ -14,9 +14,9 @@ import {
   replayAppliedSessionFork,
   sessionTenancyProductActivated,
   transitionSessionVisibility
-} from "./chunk-TIKF3KTI.js";
-import "./chunk-SCPUJS53.js";
-import "./chunk-PR2WMLOQ.js";
+} from "./chunk-6HMM2R5T.js";
+import "./chunk-AZHW7R5V.js";
+import "./chunk-KRLPEMLH.js";
 import "./chunk-PZ5AY32C.js";
 export {
   SessionTenancyAccessError,

package/dist/slack-routing.d.ts

@@ -1,4 +1,5 @@
 import { type Database } from "./database.js";
+import * as schema from "./schema.js";
 /** The installation binding's own tenancy: credential, identity, and inbox. */
 export type SlackRouteHome = {
     accountId: string;
@@ -84,6 +85,10 @@ export declare function probeSlackActionHandleTenancy(db: Database, input: {
     connectionId: string;
     handleId: string;
 }): Promise<SlackRouteHome | null>;
+/** Every channel route this installation has, for the admin surface. */
+export declare function listSlackChannelRoutes(db: Database, home: SlackRouteHome, input: {
+    connectionId: string;
+}): Promise<SlackChannelRoute[]>;
 export declare function getSlackChannelRoute(db: Database, home: SlackRouteHome, input: {
     connectionId: string;
     slackChannelId: string;
@@ -151,3 +156,113 @@ export declare function listNamedSubjectSlackRoutableWorkspaces(db: Database, in
     accountId: string;
     subjectId: string;
 }): Promise<SlackRoutableWorkspace[]>;
+/** The trigger kinds a picker can be opened from, mirroring the table's CHECK. */
+export type SlackRoutePromptTriggerKind = (typeof schema.slackRoutePrompts.$inferSelect)["triggerKind"];
+/** A pending first-use picker plus the workspaces it offered. */
+export type SlackRoutePrompt = {
+    id: string;
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    inboxId: string;
+    slackTeamId: string;
+    slackUserId: string;
+    slackChannelId: string;
+    slackMessageTs: string;
+    providerEventId: string;
+    triggerKind: SlackRoutePromptTriggerKind;
+    requestText: string;
+    hasFiles: boolean;
+    slackThreadTs: string | null;
+    messageOperationId: string;
+    status: "pending" | "answered" | "expired" | "cancelled";
+    expiresAt: Date;
+    options: readonly SlackRoutePromptOption[];
+};
+export type SlackRoutePromptOption = {
+    id: string;
+    candidateAccountId: string;
+    candidateWorkspaceId: string;
+    candidateLabel: string;
+    position: number;
+};
+/**
+ * Open one first-use picker for a conversation, or return the one already open.
+ *
+ * Three separate uniques make this idempotent from three directions: Slack's
+ * retries of one event collide on `(connection_id, provider_event_id)`, a
+ * replayed inbox row collides on `(connection_id, inbox_id)`, and a genuinely
+ * different message in the same conversation collides on the partial pending
+ * index. The last one is why a second message never posts a second card: the
+ * person is already being asked the same question.
+ */
+export declare function openSlackRoutePrompt(db: Database, home: SlackRouteHome, input: {
+    connectionId: string;
+    inboxId: string;
+    slackTeamId: string;
+    slackUserId: string;
+    slackChannelId: string;
+    slackMessageTs: string;
+    providerEventId: string;
+    triggerKind: SlackRoutePromptTriggerKind;
+    requestText: string;
+    hasFiles: boolean;
+    slackThreadTs: string | null;
+    messageOperationId: string;
+    expiresAt: Date;
+    candidates: readonly SlackRoutableWorkspace[];
+    now?: Date;
+}): Promise<{
+    opened: boolean;
+    prompt: SlackRoutePrompt;
+} | null>;
+/**
+ * The prompt one offered button belongs to.
+ *
+ * The button's `value` is the option row id, which is a UUID precisely because
+ * the block-action normalizer already requires that shape. The option rows are a
+ * prompt-time SNAPSHOT and are never authority: the caller must re-authorize the
+ * chosen workspace live.
+ */
+export declare function getSlackRoutePromptByOption(db: Database, home: SlackRouteHome, optionId: string): Promise<{
+    prompt: SlackRoutePrompt;
+    chosen: SlackRoutePromptOption;
+} | null>;
+/**
+ * Settle a prompt without answering it: the person pressed the cancel action, or
+ * it aged out. Only a still-pending row moves, so this cannot overwrite an
+ * answer that landed first.
+ */
+export declare function settleSlackRoutePrompt(db: Database, home: SlackRouteHome, input: {
+    promptId: string;
+    status: "expired" | "cancelled";
+}): Promise<boolean>;
+/**
+ * Answer a picker: freeze the choice, remember it, and re-queue the request.
+ *
+ * All three commit together. The route row is the ask-once memory, so a later
+ * message in that conversation never asks again, and the re-queued inbox row is
+ * what actually starts the work the person asked for before they were
+ * interrupted by the question.
+ *
+ * The re-queued row carries a DERIVED provider event id, not the original one.
+ * The original inbox row still exists and is settled, so re-using its id would
+ * collide with the inbox's own `(connection_id, provider_event_id)` dedupe and
+ * silently queue nothing at all. Deriving it from the prompt keeps the insert
+ * idempotent for exactly this answer, so a double-click cannot create two
+ * sessions.
+ *
+ * Only a still-pending prompt answers. A second click, an expiry sweep, or a
+ * cancel that landed first all leave `answered: false` and change nothing.
+ */
+export declare function answerSlackRoutePrompt(db: Database, home: SlackRouteHome, input: {
+    promptId: string;
+    targetAccountId: string;
+    targetWorkspaceId: string;
+    answeredBySubjectId: string;
+    decidedBySlackUserId: string;
+    now?: Date;
+}): Promise<{
+    answered: boolean;
+    queuedProviderEventId: string | null;
+}>;

package/dist/slack-user-link-access.d.ts

@@ -22,9 +22,32 @@ export type SlackUserLinkAccessMutationInput = {
     expectedVersion: number;
     idempotencyKey: string;
 };
+/**
+ * The Slack team one access request was raised from.
+ *
+ * The public request shape deliberately omits it, but an approver has to
+ * resolve the installation binding to know where the identity link belongs, and
+ * for a routed request that is not the workspace being granted.
+ */
+export declare function slackUserLinkAccessRequestTeam(db: Database, input: {
+    workspaceId: string;
+    requestId: string;
+}): Promise<{
+    slackTeamId: string;
+    connectionId: string;
+} | null>;
+/**
+ * The tenancy an identity link belongs to. See `withSlackIdentityHomeScope`.
+ */
+export type SlackIdentityHome = {
+    accountId: string;
+    workspaceId: string;
+};
 export type ApproveSlackUserLinkAccessInput = SlackUserLinkAccessMutationInput & {
     role?: string;
     permissions: Permission[];
+    /** The installation's tenancy, when it differs from the routed request's. */
+    identityHome?: SlackIdentityHome;
 };
 /**
  * Persist one verified Slack bearer as token-free, subject-bound state. A
@@ -36,6 +59,8 @@ export declare function getSlackUserLinkAccessRequestForSubject(db: Database, in
     workspaceId: string;
     requestId: string;
     subjectId: string;
+    /** The installation's tenancy, when it differs from the routed request's. */
+    identityHome?: SlackIdentityHome;
 }, now?: Date): Promise<SlackUserLinkAccessRequest | null>;
 export declare function requestSlackUserLinkWorkspaceAccess(db: Database, input: SlackUserLinkAccessMutationInput, now?: Date): Promise<SlackUserLinkAccessRequest>;
 export declare function cancelSlackUserLinkAccessRequest(db: Database, input: SlackUserLinkAccessMutationInput, now?: Date): Promise<SlackUserLinkAccessRequest>;
@@ -50,6 +75,8 @@ export declare function completeSlackUserLinkAccessIfGranted(db: Database, input
     workspaceId: string;
     requestId: string;
     subjectId: string;
+    /** The installation's tenancy, when it differs from the routed request's. */
+    identityHome?: SlackIdentityHome;
 }, now?: Date): Promise<SlackUserLinkAccessRequest | null>;
 export declare function listPendingSlackUserLinkAccessRequests(db: Database, workspaceId: string, now?: Date): Promise<SlackUserLinkAccessRequest[]>;
 export declare function workspaceMembershipPermissionsAllowSlackLink(value: unknown): boolean;

package/dist/video-generation.js

@@ -29,9 +29,9 @@ import {
   settleVideoGenerationFailure,
   settleVideoGenerationReady,
   updateWorkspaceVideoGenerationPolicy
-} from "./chunk-NJVZPWXY.js";
-import "./chunk-SCPUJS53.js";
-import "./chunk-PR2WMLOQ.js";
+} from "./chunk-2PRS4J5Q.js";
+import "./chunk-AZHW7R5V.js";
+import "./chunk-KRLPEMLH.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ACTIVE_VIDEO_GENERATION_STATUSES,

package/drizzle/0342_slack_route_prompt_single_pending.sql

@@ -0,0 +1,32 @@
+-- deployment-mode: rolling
+-- One pending Slack route picker per person per conversation.
+--
+-- `slack_route_prompts` is unique on `(connection_id, inbox_id)` and
+-- `(connection_id, provider_event_id)`, both keyed to the originating event, so
+-- Slack's retries of one event cannot post a second card but two DIFFERENT
+-- messages each open their own. One person would get two cards for the same
+-- question, and answering either would write the route while the other stayed
+-- live and answerable.
+--
+-- The key includes `slack_user_id` on purpose. A shared channel has many people
+-- in it, and asking one of them must not swallow another's request: each person
+-- is asked once. A direct message is already one channel per person, so the same
+-- index covers both surfaces.
+--
+-- Expiry is not part of the predicate, because `now()` is not immutable and a
+-- partial index cannot call it. A timed-out row is settled `expired`
+-- opportunistically by the writer before it opens a new prompt, which is what
+-- keeps a card nobody ever clicked from holding the slot forever.
+--
+-- Rolling and safe to build without CONCURRENTLY: the table has no rows and no
+-- writer until the picker ships in this same change.
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '10min';
+
+CREATE UNIQUE INDEX "slack_route_prompts_pending_conversation_uq"
+  ON "slack_route_prompts" ("connection_id", "slack_channel_id", "slack_user_id")
+  WHERE "status" = 'pending';
+
+RESET statement_timeout;
+RESET lock_timeout;

package/drizzle/0343_personal_document_force_rls_lock_repair.sql

@@ -0,0 +1,146 @@
+-- deployment-mode: rolling
+-- Repair the two personal-Document membership reads shipped by 0258. A
+-- row-locking SELECT is also subject to an UPDATE policy; the capability only
+-- grants SELECT, so a real NOSUPERUSER/NOBYPASSRLS migration owner saw zero
+-- memberships and silently selected the legacy workspace-anchored lane.
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '5min';
+
+-- The checker cannot distinguish the function-body source strings below from
+-- top-level executable membership probes. Keep the migration owner's own
+-- transformation/assertion block inside the house owner-only window; ordinary
+-- runtime roles remain RLS-bound throughout and FORCE is restored atomically.
+ALTER TABLE organization_memberships NO FORCE ROW LEVEL SECURITY;
+
+DO $repair_personal_document_membership_reads$
+DECLARE
+  data_schema text := pg_catalog.current_schema();
+  function_oid regprocedure;
+  definition text;
+  repaired text;
+  old_fragment text;
+  new_fragment text;
+BEGIN
+  function_oid := pg_catalog.to_regprocedure(
+    pg_catalog.format('%I.create_personal_document_authority(uuid,uuid,uuid)', data_schema)
+  );
+  IF function_oid IS NULL THEN
+    RAISE EXCEPTION 'create_personal_document_authority is unavailable for repair'
+      USING ERRCODE = '55000';
+  END IF;
+  definition := pg_catalog.pg_get_functiondef(function_oid);
+  old_fragment := $old$
+      SELECT membership.* INTO member_row
+      FROM organization_memberships membership
+      WHERE membership.account_id = p_account_id
+        AND membership.subject_id = caller_subject
+        AND membership.status = 'active'
+        AND membership.revoked_at IS NULL
+      FOR SHARE;
+$old$;
+  new_fragment := $new$
+      SELECT membership.* INTO member_row
+      FROM organization_memberships membership
+      WHERE membership.account_id = p_account_id
+        AND membership.subject_id = caller_subject
+        AND membership.status = 'active'
+        AND membership.revoked_at IS NULL;
+
+      -- The plain control probe makes a future command/policy mismatch loud.
+      -- With this migration's non-locking read the two predicates are
+      -- identical. If a later revision restores a locking read without its
+      -- exact policy, the capability-visible control row cannot silently fall
+      -- through to the legacy authority lane.
+      IF NOT FOUND AND EXISTS (
+        SELECT 1
+        FROM organization_memberships membership
+        WHERE membership.account_id = p_account_id
+          AND membership.subject_id = caller_subject
+          AND membership.status = 'active'
+          AND membership.revoked_at IS NULL
+      ) THEN
+        RAISE EXCEPTION 'personal document membership read was RLS-blinded'
+          USING ERRCODE = '55000';
+      END IF;
+$new$;
+  repaired := pg_catalog.replace(definition, old_fragment, new_fragment);
+  IF repaired = definition THEN
+    RAISE EXCEPTION 'create_personal_document_authority repair shape changed'
+      USING ERRCODE = '55000';
+  END IF;
+  EXECUTE repaired;
+
+  function_oid := pg_catalog.to_regprocedure(
+    pg_catalog.format(
+      '%I.prepare_session_attempt_personal_document_reads(uuid,uuid,uuid,uuid)',
+      data_schema
+    )
+  );
+  IF function_oid IS NULL THEN
+    RAISE EXCEPTION 'prepare_session_attempt_personal_document_reads is unavailable for repair'
+      USING ERRCODE = '55000';
+  END IF;
+  definition := pg_catalog.pg_get_functiondef(function_oid);
+  old_fragment := $old$
+      SELECT membership.* INTO member_row
+      FROM organization_memberships membership
+      WHERE membership.account_id = p_account_id
+        AND membership.subject_id = initiating_subject
+        AND membership.status = 'active'
+        AND membership.revoked_at IS NULL
+      FOR SHARE;
+$old$;
+  new_fragment := $new$
+      SELECT membership.* INTO member_row
+      FROM organization_memberships membership
+      WHERE membership.account_id = p_account_id
+        AND membership.subject_id = initiating_subject
+        AND membership.status = 'active'
+        AND membership.revoked_at IS NULL;
+
+      IF NOT FOUND AND EXISTS (
+        SELECT 1
+        FROM organization_memberships membership
+        WHERE membership.account_id = p_account_id
+          AND membership.subject_id = initiating_subject
+          AND membership.status = 'active'
+          AND membership.revoked_at IS NULL
+      ) THEN
+        RAISE EXCEPTION 'personal document admission membership read was RLS-blinded'
+          USING ERRCODE = '55000';
+      END IF;
+$new$;
+  repaired := pg_catalog.replace(definition, old_fragment, new_fragment);
+  IF repaired = definition THEN
+    RAISE EXCEPTION 'prepare_session_attempt_personal_document_reads repair shape changed'
+      USING ERRCODE = '55000';
+  END IF;
+
+  -- The later portable-document scan has the same command mismatch: locking
+  -- both documents and authorities makes PostgreSQL require UPDATE-applicable
+  -- policies, while this admission capability is intentionally read-only.
+  -- Snapshot foreign keys take the durable referential pins at insertion.
+  definition := repaired;
+  old_fragment := $old$
+        ORDER BY document_value.id
+        FOR SHARE OF document_value, authority
+$old$;
+  new_fragment := $new$
+        ORDER BY document_value.id
+$new$;
+  repaired := pg_catalog.replace(definition, old_fragment, new_fragment);
+  IF repaired = definition THEN
+    RAISE EXCEPTION 'prepare_session_attempt_personal_document_reads document scan repair shape changed'
+      USING ERRCODE = '55000';
+  END IF;
+  EXECUTE repaired;
+END
+$repair_personal_document_membership_reads$;
+
+ALTER TABLE organization_memberships FORCE ROW LEVEL SECURITY;
+
+COMMENT ON FUNCTION create_personal_document_authority(uuid, uuid, uuid) IS
+  'Creates portable personal Document authority for an exact active organization membership; 0343 removes an RLS-blind row lock and fails loudly on visibility drift.';
+COMMENT ON FUNCTION prepare_session_attempt_personal_document_reads(uuid, uuid, uuid, uuid) IS
+  'Freezes exact-attempt personal Document reads; 0343 removes RLS-blind membership and portable-document row locks and fails loudly on definition or visibility drift.';

package/drizzle/0344_private_session_visibility_transition_gate.sql

@@ -0,0 +1,85 @@
+-- deployment-mode: rolling
+-- A committed visibility transition replays from its applied command receipt
+-- without issuing another sessions UPDATE. Gate the actual state change so
+-- replay remains recoverable after an owner disables private sessions, while a
+-- fresh shared-workspace transition fails closed. Personal workspaces retain
+-- the same exemption as private create and private fork destinations.
+
+-- Migration 0323's settings routines install this marker before reading the
+-- actor membership, but the shared lifecycle policy never admitted it. Keep
+-- this authority narrow and separate from that shared marker list. The UPDATE
+-- policy is required because the mutating seam locks the actor with FOR SHARE.
+DO $organization_private_session_settings_membership_policies$
+DECLARE
+  data_schema text := pg_catalog.current_schema();
+  migration_owner text := current_user;
+  marker constant text :=
+    'current_setting(''opengeni.organization_tenancy_lifecycle'', true) '
+      || '= ''organization_private_session_settings'' AND account_id = nullif('
+      || 'current_setting(''opengeni.account_id'', true), '''')::uuid';
+BEGIN
+  EXECUTE pg_catalog.format(
+    'CREATE POLICY organization_private_session_settings_membership_read '
+      || 'ON %I.organization_memberships FOR SELECT '
+      || 'USING (current_user = %L AND %s)',
+    data_schema, migration_owner, marker
+  );
+  EXECUTE pg_catalog.format(
+    'CREATE POLICY organization_private_session_settings_membership_lock '
+      || 'ON %I.organization_memberships FOR UPDATE '
+      || 'USING (current_user = %L AND %s)',
+    data_schema, migration_owner, marker
+  );
+END
+$organization_private_session_settings_membership_policies$;
+
+CREATE FUNCTION guard_private_session_visibility_transition()
+RETURNS trigger
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path FROM CURRENT
+AS $$
+BEGIN
+  IF OLD.visibility IS DISTINCT FROM NEW.visibility
+    AND NEW.visibility = 'user_private'
+    AND NOT EXISTS (
+      SELECT 1
+      FROM organization_memberships membership
+      WHERE membership.account_id = NEW.account_id
+        AND membership.personal_workspace_id = NEW.workspace_id
+        AND membership.status = 'active'
+    )
+    AND NOT organization_private_sessions_enabled(NEW.account_id)
+  THEN
+    RAISE EXCEPTION
+      'private sessions are not enabled for this organization''s shared workspaces'
+      USING ERRCODE = '55000';
+  END IF;
+  RETURN NEW;
+END
+$$;
+
+REVOKE ALL ON FUNCTION guard_private_session_visibility_transition() FROM PUBLIC;
+
+DROP TRIGGER IF EXISTS session_01_private_visibility_setting_fence ON sessions;
+CREATE TRIGGER session_01_private_visibility_setting_fence
+BEFORE UPDATE OF visibility ON sessions
+FOR EACH ROW
+WHEN (OLD.visibility IS DISTINCT FROM NEW.visibility AND NEW.visibility = 'user_private')
+EXECUTE FUNCTION guard_private_session_visibility_transition();
+
+DO $$
+DECLARE
+  data_schema text := current_schema();
+BEGIN
+  EXECUTE format(
+    'ALTER FUNCTION %I.guard_private_session_visibility_transition() '
+      || 'SET search_path = pg_catalog, %I, pg_temp',
+    data_schema,
+    data_schema
+  );
+END
+$$;
+
+COMMENT ON FUNCTION guard_private_session_visibility_transition() IS
+  'Refuses a fresh transition to user_private in a shared workspace while the organization private-session setting is disabled; applied receipt replay performs no UPDATE and remains valid.';