@opengeni/db 3.2.2 → 3.3.0

package/dist/index.d.ts

@@ -132,6 +132,7 @@ export * from "./site-data.js";
 export * from "./site-publishing.js";
 export { withSiteRuntimeAdmission } from "./site-runtime-admission.js";
 export * from "./site-platform.js";
+export * from "./insights-site-usage.js";
 export * from "./scheduled-slack-bot-messages.js";
 export * from "./organization-signup-use-cases.js";
 export * from "./site-sql.js";
@@ -395,7 +396,7 @@ export * from "./memory-domain.js";
 export * from "./model-catalog.js";
 import { type Database, type SessionActivityDatabase } from "./database.js";
 export { createDb, databaseReconnectBackoffSeconds, registerDbBinding, retrySessionActivityRls, rlsContextForWorkspace, rlsStrategyFor, setRlsContext, setSubjectRlsContext, withAccountRls, withDatabaseStatementTimeout, withRlsContext, withSessionActivityRlsContext, withSessionActivitySavepoint, withWorkspaceRls, withWorkspaceSessionActivityRls, withWorkspaceSubjectRls, withWorkspaceSubjectSessionActivityRls, withWorkspaceUsageLock, withSandboxProviderReadLock, SandboxProviderReadLockUnavailableError, type CreateDbOptions, type Database, type DbClient, type SessionActivityDatabase, type RlsContext, type SessionRlsActorContext, type RlsStrategy, type SandboxProviderReadLockIdentity, type ManagedUserProfile, type UserLookup, type UserProfileLookup, } from "./database.js";
-export { currentSessionRlsActorIdentityKey, currentSessionRlsActorInitiatingHumanSubjectId, withSessionRlsActorContext, } from "./database.js";
+export { currentSessionRlsActorIdentityKey, currentSessionRlsActorContext, currentSiteViewerRlsContext, withSiteViewerRlsContext, currentSessionRlsActorInitiatingHumanSubjectId, withSessionRlsActorContext, } from "./database.js";
 export { withDatabaseTimingObserver, type DatabaseTimingObservation } from "./database-timing.js";
 export { BROKERED_CREDENTIAL_SHAPE_HINT, brokeredCredentialBundleProblem, normalizedCredentialHeaders, } from "./connection-token-resolver.js";
 import { type CodexAuthDeps, type CodexCredentialCooldownKind } from "./codex-token-resolver.js";
@@ -5700,6 +5701,10 @@ export type SessionAuthorityProjection = SessionAccessProjection & {
     authorityEpoch: number;
     visibility: "user_private" | "workspace_shared";
     ownerSubjectId: string | null;
+    siteId: string | null;
+    siteAccessRootId: string | null;
+    siteViewerPrincipal: string | null;
+    siteOwnerSubjectId: string | null;
 };
 export declare function getSessionAuthorityProjection(db: Database, workspaceId: string, sessionId: string): Promise<SessionAuthorityProjection | null>;
 /** Workspace-RLS read of one session's frozen agent-access and memory scope. */
@@ -6314,6 +6319,72 @@ export declare function listSessionEvents(db: Database, workspaceId: string, ses
 export declare function listSessionEvents(db: Database, workspaceId: string, sessionId: string, after: number, limit?: number): Promise<SessionEvent[]>;
 export declare function listSessionEvents(db: Database, workspaceId: string, sessionId: string, options: ListSessionEventsOptions): Promise<SessionEvent[]>;
 export declare function getSessionEvent(db: Database, workspaceId: string, eventId: string): Promise<SessionEvent | null>;
+/**
+ * Trusted Site lifecycle only: cancel an exact published root using native
+ * controls. No request/agent endpoint exposes this adapter or its transaction.
+ * The host has authorized the Site mutation; its actor stays unchanged.
+ * Only the receipt and events written by this command leave the capability.
+ */
+export declare function cancelSiteRuntimeConversation(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    siteId: string;
+    sessionId: string;
+    operationKey: string;
+    reason: string;
+}): Promise<{
+    receiptId: string;
+    replay: boolean;
+    cancelledSessionCount: number;
+    cancelledTurnCount: number;
+    wakeCount: number;
+    events: {
+        id: string;
+        workspaceId: string;
+        sessionId: string;
+        sequence: number;
+        coveredThrough?: number | undefined;
+        type: "agent.message.completed" | "agent.message.delta" | "agent.model.request" | "agent.model.usage" | "agent.reasoning.delta" | "agent.toolCall.created" | "agent.toolCall.output" | "agent.updated" | "artifact.created" | "codex.account.selection.changed" | "codex.account.switched" | "codex.capacity.resumed" | "codex.capacity.superseded" | "codex.capacity.waiting" | "codex.credential.selected" | "codex.fleet.decision" | "credential.auth_needed" | "fs.changed" | "git.changed" | "goal.cleared" | "goal.completed" | "goal.continuation" | "goal.held" | "goal.paused" | "goal.progress" | "goal.resumed" | "goal.rewrite.proposed" | "goal.rewrite.rejected" | "goal.set" | "goal.updated" | "instruction.confirmation.recovered" | "knowledge.confirmation.recovered" | "knowledge.source.failed" | "knowledge.source.prepared" | "machine.link.lost" | "machine.link.restored" | "machine.op.failed" | "machine.op.recovered" | "machine.runner.restarted" | "memory.corrected" | "memory.saved" | "model_account.selection.changed" | "recording.available" | "recording.failed" | "recording.started" | "rig.setup.completed" | "rig.setup.failed" | "rig.setup.skipped" | "rig.setup.started" | "sandbox.box.created" | "sandbox.box.lost" | "sandbox.box.snapshot" | "sandbox.box.terminated" | "sandbox.command.output.delta" | "sandbox.env.drift" | "sandbox.operation.completed" | "sandbox.operation.failed" | "sandbox.operation.started" | "session.agent.updated" | "session.command.backgrounded" | "session.command.finished" | "session.context.cleared" | "session.context.compacted" | "session.context.compaction.requested" | "session.context.compaction.skipped" | "session.context.compaction.started" | "session.control.paused" | "session.control.resumed" | "session.control.steer_requested" | "session.created" | "session.event.envelope_omitted" | "session.humanInput.requested" | "session.mcp.approval_policy.updated" | "session.model_settings.updated" | "session.notification.posted" | "session.notification.withdrawn" | "session.personal_resources.attached" | "session.queue.changed" | "session.queue.history" | "session.queue.prompt.cancelled" | "session.realtime.ended" | "session.realtime.started" | "session.requiresAction" | "session.route.reconciled" | "session.runtime.configured" | "session.skills.updated" | "session.status.changed" | "session.title_set" | "session.tool_policy.updated" | "session.usage_limit.updated" | "session.variable_sets.updated" | "session.visibility.changed" | "session.wait.finished" | "session.wait.started" | "stream.closed" | "stream.opened" | "stream.revoked" | "stream.url.rotated" | "subscription.account.selected" | "subscription.account.switched" | "system.update.cancelled" | "system.update.delivered" | "system.update.pending" | "system.update.settled" | "system.update.superseded" | "terminal.pty.exited" | "terminal.pty.output.delta" | "terminal.pty.started" | "tool.auth_needed" | "turn.cancelled" | "turn.capacity_waiting" | "turn.completed" | "turn.dispatch.expired" | "turn.event.rejected_late" | "turn.failed" | "turn.queued" | "turn.recovery.requested" | "turn.started" | "turn.startup.phase.completed" | "turn.startup.phase.failed" | "turn.startup.phase.started" | "turn.superseded" | "usage.exhausted" | "usage.period_reset" | "usage.threshold_reached" | "user.approvalDecision" | "user.humanInputResponse" | "user.message" | "user.pause" | "workspace.inference.paused" | "workspace.inference.resumed" | "workspace.revision.captured" | "workspace.revision.degraded";
+        payload: unknown;
+        occurredAt: string;
+        clientEventId?: string | null | undefined;
+        turnId?: string | null | undefined;
+        turnGeneration?: number | null | undefined;
+        turnAttemptId?: string | null | undefined;
+        turnAssociation?: "current" | "duplicate" | "late_rejected" | null | undefined;
+        duplicateOfEventId?: string | null | undefined;
+        duplicateReason?: string | null | undefined;
+    }[];
+    workspaceEvent: {
+        id: string;
+        workspaceId: string;
+        sequence: number;
+        revision: number;
+        type: "workspace.control.changed";
+        scope: "session" | "workspace";
+        rootSessionId: string | null;
+        action: "pause" | "resume" | "timer_cancelled" | "timer_set";
+        automatic: boolean;
+        reason: string | null;
+        actor: string;
+        occurredAt: string;
+        truncation?: {
+            truncated: true;
+            surface: "database_guard" | "durable_control" | "http_projection" | "nats_legacy_guard" | "sse_legacy_guard";
+            deliveredBytes: number;
+            fields: {
+                field: "actor" | "reason";
+                originalBytes: number;
+                deliveredBytes: number;
+                omittedBytes: number;
+            }[];
+            fullEvidence: {
+                available: false;
+                reason: "not_retained";
+            };
+        } | null | undefined;
+    } | null;
+} | null>;
 /** Read one durable event under the exact human subject visibility projection. */
 export declare function getSessionEventForSubject(db: Database, workspaceId: string, subjectId: string, eventId: string): Promise<SessionEvent | null>;
 export declare function listWorkspaceControlEvents(db: Database, workspaceId: string, after?: number, limit?: number): Promise<WorkspaceControlEvent[]>;
@@ -9014,6 +9085,24 @@ export declare function retainedProviderCommandPersistence(...[db, scope, publis
     requestCancellation: (reason: "provider_deadline" | "explicit_stop") => Promise<void>;
     cancellationRequested: () => Promise<boolean>;
     load: () => Promise<{
+        kind: "modal-control-v1";
+        sandboxId: string;
+        taskId: string;
+        execId: string;
+        pty?: boolean | undefined;
+        streams: {
+            stdout: {
+                batchIndex: number;
+                utf8Remainder: string;
+                exitCode: number | null;
+            };
+            stderr: {
+                batchIndex: number;
+                utf8Remainder: string;
+                exitCode: number | null;
+            };
+        };
+    } | {
         kind: "modal-router-v1";
         sandboxId: string;
         taskId: string;
@@ -9039,7 +9128,8 @@ export declare function retainedProviderCommandPersistence(...[db, scope, publis
                 exitCode: number | null;
             };
         };
-    } | {
+    } | null>;
+    acknowledge: (command: import("@opengeni/contracts").SandboxProviderCommand) => Promise<{
         kind: "modal-control-v1";
         sandboxId: string;
         taskId: string;
@@ -9057,8 +9147,7 @@ export declare function retainedProviderCommandPersistence(...[db, scope, publis
                 exitCode: number | null;
             };
         };
-    } | null>;
-    acknowledge: (command: import("@opengeni/contracts").SandboxProviderCommand) => Promise<{
+    } | {
         kind: "modal-router-v1";
         sandboxId: string;
         taskId: string;
@@ -9084,24 +9173,6 @@ export declare function retainedProviderCommandPersistence(...[db, scope, publis
                 exitCode: number | null;
             };
         };
-    } | {
-        kind: "modal-control-v1";
-        sandboxId: string;
-        taskId: string;
-        execId: string;
-        pty?: boolean | undefined;
-        streams: {
-            stdout: {
-                batchIndex: number;
-                utf8Remainder: string;
-                exitCode: number | null;
-            };
-            stderr: {
-                batchIndex: number;
-                utf8Remainder: string;
-                exitCode: number | null;
-            };
-        };
     }>;
     reserveInput: (byteLength?: number) => Promise<number>;
     captureRouterPage: (page: import("./retained-provider-commands.js").RetainedRouterOutputPage) => Promise<{

package/dist/index.js

@@ -510,6 +510,7 @@ import {
   canReclaimTranscriptionRecordingAttempt,
   cancelOrganizationRecoveryOperation,
   cancelQueuedCodemodeOperationsForAttempt,
+  cancelSiteRuntimeConversation,
   cancelSlackUserLinkAccessRequest,
   canonicalJsonForContentDigest,
   canonicalMemoryRelationship,
@@ -1385,6 +1386,7 @@ import {
   listSharedWorkspacesForAccount,
   listSiteAbuseReports,
   listSiteModerationQueue,
+  listSiteRuntimeCancellationCandidates,
   listSiteSqlMigrations,
   listSiteSqlQueries,
   listSiteSqlSiteIds,
@@ -1594,6 +1596,7 @@ import {
   readCreditPromotionPolicy,
   readInsightsCalls,
   readInsightsResponseCacheFence,
+  readInsightsSiteUsage,
   readInsightsUsage,
   readKnowledgeIndexSource,
   readLease,
@@ -2208,7 +2211,7 @@ import {
   writeCompanyProfileLearning,
   writeSessionContentBlobs,
   writeSiteDataPath
-} from "./chunk-V2X2NK7T.js";
+} from "./chunk-5MPQZI43.js";
 import {
   BROKERED_CREDENTIAL_SHAPE_HINT,
   ConnectionRefreshHttpError,
@@ -2217,9 +2220,9 @@ import {
   normalizeBearerScheme,
   normalizedCredentialHeaders,
   refreshOAuthConnectionCredential
-} from "./chunk-VCJAYIPH.js";
-import "./chunk-XQHABE23.js";
-import "./chunk-4BAKPTPG.js";
+} from "./chunk-FX2PSMGH.js";
+import "./chunk-OWM6XG55.js";
+import "./chunk-S74WULCK.js";
 import {
   CODEX_PLAN_ENTITLEMENT_EXCLUSION_TTL_MS,
   CODEX_PLAN_ENTITLEMENT_MAX_MODELS,
@@ -2259,7 +2262,7 @@ import {
   setSubscriptionCoreWorkspaceCodexSource,
   subscriptionSettingLockRefusal,
   writeSubscriptionPersonPreferences
-} from "./chunk-YWHG45TK.js";
+} from "./chunk-PNEJVKKV.js";
 import {
   applySubscriptionCoreCodexQuotaObservation,
   assertSubscriptionCoreAcceptedTurn,
@@ -2286,8 +2289,8 @@ import {
   subscriptionCoreTurns,
   touchSubscriptionCoreCodexBinding,
   withSubscriptionCoreAcceptedTurn
-} from "./chunk-JYPBOJ2Y.js";
-import "./chunk-VBG4TW5C.js";
+} from "./chunk-AAOKWNHE.js";
+import "./chunk-ZZOEKHGU.js";
 import {
   ARTIFACT_PIN_RUNTIME_ROUTINES,
   FORCE_RLS_TABLES,
@@ -2351,7 +2354,7 @@ import {
   retiredSubscriptionObjectDescriptions,
   retiredSubscriptionObjectViolation,
   runtimeDatabaseReadyCheck
-} from "./chunk-HMKUJ6NI.js";
+} from "./chunk-HQWXEF77.js";
 import {
   CanonicalHumanIdentityAuthorityError,
   CanonicalHumanIdentityConflictError,
@@ -2365,7 +2368,7 @@ import {
   getCanonicalHumanIdentityProjection,
   synchronizeCanonicalHumanLoginBindings,
   validateCanonicalHumanSession
-} from "./chunk-D7LTIG33.js";
+} from "./chunk-B4RMLA2X.js";
 import {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,
   EDITABLE_ARTIFACT_KERNEL_TAIL_MAX_BYTES,
@@ -2379,7 +2382,7 @@ import {
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink,
   transactionallyAuthorizeEditableArtifactActor
-} from "./chunk-YH4GWEDM.js";
+} from "./chunk-KPC7I5WG.js";
 import {
   ArchivedSessionImportError,
   EMPTY_SESSION_VISIBILITY_WORK,
@@ -2490,7 +2493,7 @@ import {
   updateNetworkRoute,
   updateSiteAuthConnection,
   verifyAuthRun
-} from "./chunk-K6NT66NP.js";
+} from "./chunk-SDKFRIAN.js";
 import {
   ConnectAttemptConflictError,
   ConnectAttemptNotFoundError,
@@ -2501,8 +2504,8 @@ import {
   getConnectBeginReplay,
   listPendingConnectAttempts,
   setConnectAttemptTransitionObserver
-} from "./chunk-AYZC65QU.js";
-import "./chunk-LRRGVHAQ.js";
+} from "./chunk-CGSINPLW.js";
+import "./chunk-VUR5U5B3.js";
 import {
   AgentCommandAuthorityError,
   CHILD_LIFECYCLE_DEDUPE_PREFIX,
@@ -2644,7 +2647,7 @@ import {
   withSiteRuntimeAdmission,
   workspaceControlLockBudget,
   workspaceControlRequestLockTimeoutMs
-} from "./chunk-V22DUH4C.js";
+} from "./chunk-HWEHZKHA.js";
 import {
   ClaudeSubscriptionReconnectRequired,
   ClaudeSubscriptionRefreshUnavailable,
@@ -2739,7 +2742,7 @@ import {
   wakeSubscriptionCapacityWaiter,
   withCodexTokenDeadline,
   writeSubscriptionSessionBinding
-} from "./chunk-IF63BST7.js";
+} from "./chunk-Y4ERASEM.js";
 import {
   ACTIVE_VIDEO_GENERATION_STATUSES,
   CreditDebitAttribution,
@@ -2792,7 +2795,7 @@ import {
   validateMemberAllowanceRule,
   validateWorkspaceAllowanceConfig,
   withCreditDebitAttribution
-} from "./chunk-L3NT43Z5.js";
+} from "./chunk-7K5AVQUZ.js";
 import "./chunk-4UJCXBR2.js";
 import {
   ManagedAuthActorMutationInFlightError,
@@ -2816,15 +2819,17 @@ import {
   reapManagedAuthIsolatedSessions,
   releaseManagedAuthActorMutationLease,
   validateManagedAuthActorMutationLease
-} from "./chunk-RCDMYTLP.js";
+} from "./chunk-UWS5DJQ6.js";
 import {
   DatabaseTransactionError,
   DatabaseUnavailableError,
   SandboxProviderReadLockUnavailableError,
   SessionEventPersistenceError,
   createDb,
+  currentSessionRlsActorContext,
   currentSessionRlsActorIdentityKey,
   currentSessionRlsActorInitiatingHumanSubjectId,
+  currentSiteViewerRlsContext,
   databaseFailureCode,
   databaseReconnectBackoffSeconds,
   isDatabaseConnectionLoss,
@@ -2849,12 +2854,13 @@ import {
   withSessionActivityRlsContext,
   withSessionActivitySavepoint,
   withSessionRlsActorContext,
+  withSiteViewerRlsContext,
   withWorkspaceRls,
   withWorkspaceSessionActivityRls,
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls,
   withWorkspaceUsageLock
-} from "./chunk-6UU7OVUN.js";
+} from "./chunk-JTBJGSUZ.js";
 import {
   DATABASE_BOOT_CONNECT_GRACE_MS,
   connectDatabaseSocket,
@@ -2868,7 +2874,7 @@ import {
   LOSSLESS_TEXT_PREFIX,
   isStoredVerbatimAsLosslessJsonString,
   toPostgresLosslessJson
-} from "./chunk-OXO32LTK.js";
+} from "./chunk-CEJ3NQ3B.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ACTIVE_SESSION_HISTORY_MAX_JSON_BYTES,
@@ -3601,6 +3607,7 @@ export {
   cancelOpenInteractionInterventions,
   cancelOrganizationRecoveryOperation,
   cancelQueuedCodemodeOperationsForAttempt,
+  cancelSiteRuntimeConversation,
   cancelSlackUserLinkAccessRequest,
   cancelTurnInteractionInterventionsInTransaction,
   cancelUnacceptedVideoGenerationsForToolCallsInTransaction,
@@ -3905,8 +3912,10 @@ export {
   currentCreditDebitAttribution,
   currentMemorySlackConfigurationMatches,
   currentSessionInputWaitTurnsQuery,
+  currentSessionRlsActorContext,
   currentSessionRlsActorIdentityKey,
   currentSessionRlsActorInitiatingHumanSubjectId,
+  currentSiteViewerRlsContext,
   databaseBootConnectOptions,
   databaseBootConnectRetryDelayMs,
   databaseFailureCode,
@@ -4665,6 +4674,7 @@ export {
   listSiteAbuseReports,
   listSiteAuthConnections,
   listSiteModerationQueue,
+  listSiteRuntimeCancellationCandidates,
   listSiteSqlMigrations,
   listSiteSqlQueries,
   listSiteSqlSiteIds,
@@ -4932,6 +4942,7 @@ export {
   readCreditPromotionPolicy,
   readInsightsCalls,
   readInsightsResponseCacheFence,
+  readInsightsSiteUsage,
   readInsightsUsage,
   readKnowledgeIndexSource,
   readLease,
@@ -5678,6 +5689,7 @@ export {
   withSessionRlsActorContext,
   withSiteRuntimeAdmission,
   withSiteSqlDatabaseLock,
+  withSiteViewerRlsContext,
   withSubscriptionCapacityWakeOutboxScope,
   withSubscriptionCoreAcceptedTurn,
   withSubscriptionCoreCodexRefreshLock,

package/dist/insights-site-usage.d.ts

@@ -0,0 +1,10 @@
+import { InsightsSiteUsageResponse, type InsightsSiteUsageQuery } from "@opengeni/contracts/insights-usage";
+import { type Database } from "./database.js";
+/** Uses the native accounting ledger and frozen model-call price snapshots. */
+export declare function readInsightsSiteUsage(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    query: InsightsSiteUsageQuery;
+    viewerSubjectId: string | null;
+    now: Date;
+}): Promise<InsightsSiteUsageResponse>;

package/dist/managed-auth-session-sets.js

@@ -20,10 +20,10 @@ import {
   reapManagedAuthIsolatedSessions,
   releaseManagedAuthActorMutationLease,
   validateManagedAuthActorMutationLease
-} from "./chunk-RCDMYTLP.js";
-import "./chunk-6UU7OVUN.js";
+} from "./chunk-UWS5DJQ6.js";
+import "./chunk-JTBJGSUZ.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-OXO32LTK.js";
+import "./chunk-CEJ3NQ3B.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ManagedAuthActorMutationInFlightError,

package/dist/mcp-operations.js

@@ -1,12 +1,12 @@
 import {
   withRlsContext
-} from "./chunk-6UU7OVUN.js";
+} from "./chunk-JTBJGSUZ.js";
 import "./chunk-SMCA7PNJ.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   fromPostgresLosslessJson,
   toPostgresLosslessJson
-} from "./chunk-OXO32LTK.js";
+} from "./chunk-CEJ3NQ3B.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/mcp-operations.ts

package/dist/migrate.js

@@ -9,27 +9,27 @@ import {
   planMigrations,
   runMigrateCli,
   runMigrations
-} from "./chunk-V2X2NK7T.js";
-import "./chunk-VCJAYIPH.js";
-import "./chunk-XQHABE23.js";
-import "./chunk-4BAKPTPG.js";
-import "./chunk-YWHG45TK.js";
-import "./chunk-JYPBOJ2Y.js";
-import "./chunk-VBG4TW5C.js";
-import "./chunk-HMKUJ6NI.js";
-import "./chunk-D7LTIG33.js";
-import "./chunk-YH4GWEDM.js";
-import "./chunk-K6NT66NP.js";
-import "./chunk-AYZC65QU.js";
-import "./chunk-LRRGVHAQ.js";
-import "./chunk-V22DUH4C.js";
-import "./chunk-IF63BST7.js";
-import "./chunk-L3NT43Z5.js";
+} from "./chunk-5MPQZI43.js";
+import "./chunk-FX2PSMGH.js";
+import "./chunk-OWM6XG55.js";
+import "./chunk-S74WULCK.js";
+import "./chunk-PNEJVKKV.js";
+import "./chunk-AAOKWNHE.js";
+import "./chunk-ZZOEKHGU.js";
+import "./chunk-HQWXEF77.js";
+import "./chunk-B4RMLA2X.js";
+import "./chunk-KPC7I5WG.js";
+import "./chunk-SDKFRIAN.js";
+import "./chunk-CGSINPLW.js";
+import "./chunk-VUR5U5B3.js";
+import "./chunk-HWEHZKHA.js";
+import "./chunk-Y4ERASEM.js";
+import "./chunk-7K5AVQUZ.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-RCDMYTLP.js";
-import "./chunk-6UU7OVUN.js";
+import "./chunk-UWS5DJQ6.js";
+import "./chunk-JTBJGSUZ.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-OXO32LTK.js";
+import "./chunk-CEJ3NQ3B.js";
 import "./chunk-PZ5AY32C.js";
 export {
   executeMigrationFile,

package/dist/organization-integration-policy.js

@@ -3,11 +3,11 @@ import {
   updateOrganizationIntegrationPolicy,
   withOrganizationIntegrationAcquisition,
   withOrganizationIntegrationPolicyFence
-} from "./chunk-LRRGVHAQ.js";
+} from "./chunk-VUR5U5B3.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-6UU7OVUN.js";
+import "./chunk-JTBJGSUZ.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-OXO32LTK.js";
+import "./chunk-CEJ3NQ3B.js";
 import "./chunk-PZ5AY32C.js";
 export {
   getOrganizationIntegrationPolicy,

package/dist/provision-roles.js

@@ -1,7 +1,7 @@
 import {
   provisionRoles,
   runProvisionRolesCli
-} from "./chunk-HMKUJ6NI.js";
+} from "./chunk-HQWXEF77.js";
 import "./chunk-SMCA7PNJ.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/retained-provider-commands.js

@@ -14,14 +14,14 @@ import {
   retainedProviderCommandPersistence,
   supervisedCommandProtocolReady,
   validateRouterOutputAdvance
-} from "./chunk-XQHABE23.js";
-import "./chunk-V22DUH4C.js";
-import "./chunk-IF63BST7.js";
-import "./chunk-L3NT43Z5.js";
+} from "./chunk-OWM6XG55.js";
+import "./chunk-HWEHZKHA.js";
+import "./chunk-Y4ERASEM.js";
+import "./chunk-7K5AVQUZ.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-6UU7OVUN.js";
+import "./chunk-JTBJGSUZ.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-OXO32LTK.js";
+import "./chunk-CEJ3NQ3B.js";
 import "./chunk-PZ5AY32C.js";
 export {
   RECORDED_COMMAND_OUTPUT_LIMIT_BYTES,

package/dist/schema.d.ts

@@ -26486,6 +26486,74 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        siteId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "site_id";
+            tableName: "sessions";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        siteAccessRootId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "site_access_root_id";
+            tableName: "sessions";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        siteViewerPrincipal: import("drizzle-orm/pg-core").PgColumn<{
+            name: "site_viewer_principal";
+            tableName: "sessions";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        siteOwnerSubjectId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "site_owner_subject_id";
+            tableName: "sessions";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         createRequestedVisibility: import("drizzle-orm/pg-core").PgColumn<{
             name: "create_requested_visibility";
             tableName: "sessions";
@@ -60631,6 +60699,23 @@ export declare const modelCallFacts: import("drizzle-orm/pg-core").PgTableWithCo
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        siteId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "site_id";
+            tableName: "model_call_facts";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         inputTokens: import("drizzle-orm/pg-core").PgColumn<{
             name: "input_tokens";
             tableName: "model_call_facts";
@@ -62328,6 +62413,23 @@ export declare const creditLedgerEntries: import("drizzle-orm/pg-core").PgTableW
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        siteId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "site_id";
+            tableName: "credit_ledger_entries";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         idempotencyKey: import("drizzle-orm/pg-core").PgColumn<{
             name: "idempotency_key";
             tableName: "credit_ledger_entries";

package/dist/schema.js

@@ -439,7 +439,7 @@ import {
   xaiRotationSettings,
   xaiSessionAccountPins,
   xaiSubscriptionCredentials
-} from "./chunk-OXO32LTK.js";
+} from "./chunk-CEJ3NQ3B.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentInstructionOperations,