@opengeni/db 3.4.0-canary.2 → 3.6.0

package/dist/{chunk-H7MXYG7R.js → chunk-WW7AJ5IC.js}

@@ -4,7 +4,7 @@ import {
   sessions,
   workspaceSessionActivityRevisions,
   workspaces
-} from "./chunk-C2AFP7SB.js";
+} from "./chunk-UJ2EW3QI.js";
 
 // src/persistence-errors.ts
 var SQLSTATE_KEYS = ["sqlState", "sqlstate", "code"];
@@ -757,4 +757,4 @@ export {
   withAccountRls,
   dbBindingFor
 };
-//# sourceMappingURL=chunk-H7MXYG7R.js.map
+//# sourceMappingURL=chunk-WW7AJ5IC.js.map

package/dist/editable-artifact-durable-export.js

@@ -1,8 +1,8 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-H7MXYG7R.js";
-import "./chunk-C2AFP7SB.js";
+} from "./chunk-WW7AJ5IC.js";
+import "./chunk-UJ2EW3QI.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/editable-artifact-durable-export.ts

package/dist/editable-artifacts.js

@@ -8,9 +8,9 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink
-} from "./chunk-ZWRIPCTR.js";
-import "./chunk-H7MXYG7R.js";
-import "./chunk-C2AFP7SB.js";
+} from "./chunk-2NT476HD.js";
+import "./chunk-WW7AJ5IC.js";
+import "./chunk-UJ2EW3QI.js";
 import "./chunk-PZ5AY32C.js";
 export {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { type ChildLifecycleSystemUpdateKind, type ChildRequiresActionRespondedByKind, SessionGoalSnapshot } from "@opengeni/contracts";
-import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, AttemptToolResult, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, ManagedOrganizationMembershipProjection, McpPersonalConnectionDelegation, ModelContextContributionSummary, Permission, PersonalResourceAttachmentIntent, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAction, ScheduledTaskActionKind, KnowledgeSourceSyncAction, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunAcceptedExecution as ScheduledTaskRunAcceptedExecutionType, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, SlackInstallationBinding, Session, SessionAuthorizationListScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalChangeKind, SessionGoalCreatedBy, SessionGoalMutationPolicy, SessionGoalRevision, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetSecret, VariableSetVariableMetadata, WorkspaceMember, WorkspaceMemoryPromptMode, WorkspaceRegisteredPack, Channel, Rig, RigProviderImage, RigProviderImages, RigVersion, RigVerificationHealth, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding, SandboxProviderContinuityRecovery } from "@opengeni/contracts";
+import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, AttemptToolResult, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, ManagedOrganizationMembershipProjection, McpPersonalConnectionDelegation, ModelContextContributionSummary, Permission, PersonalResourceAttachmentIntent, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAction, ScheduledTaskActionKind, KnowledgeSourceSyncAction, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunAcceptedExecution as ScheduledTaskRunAcceptedExecutionType, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, SlackInstallationBinding, Session, SessionAuthorizationListScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalChangeKind, SessionGoalCreatedBy, SessionGoalMutationPolicy, SessionGoalRevision, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetSecret, VariableSetVariableMetadata, WorkspaceMember, WorkspaceMemoryPromptMode, WorkspaceRegisteredPack, Channel, Rig, RigProviderImage, RigProviderImages, RigVersion, RigVerificationHealth, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding, SandboxProviderContinuityRecovery, WorkClaimSubjectFilter, WorkDiscoveryProjection } from "@opengeni/contracts";
 import { type WorkspaceArchiveObjectRef, RequestHumanInteractionToolInput, XaiProviderAccountAuthoritySnapshotV1, type TimelineAnnotation } from "@opengeni/contracts";
 import { type LatencyMode, SessionSystemUpdatePayload, TurnExecutionPolicyV1 } from "@opengeni/contracts";
 import { type Settings } from "@opengeni/config";
@@ -36,6 +36,7 @@ export * from "./company-brain-governed-writes.js";
 export * from "./company-brain-context-selection.js";
 export * from "./knowledge-source-sync.js";
 export * from "./task-notes.js";
+export * from "./work-claims.js";
 export * from "./managed-human-provisioning.js";
 export * from "./managed-user-setup.js";
 export * from "./organization-membership-backfill.js";
@@ -281,6 +282,7 @@ export declare function ensureManagedAccessForUser(db: Database, input: {
     name: string;
     emailVerified?: boolean;
     provisionFallbackOrganization?: boolean;
+    bindPendingInvitations?: boolean;
 }): Promise<AccessContext>;
 export type ManagedAccessProvisioningResult = {
     accessContext: AccessContext;
@@ -292,6 +294,7 @@ export declare function ensureManagedAccessForUserWithOrganizationMemberships(db
     name: string;
     emailVerified?: boolean;
     provisionFallbackOrganization?: boolean;
+    bindPendingInvitations?: boolean;
 }): Promise<ManagedAccessProvisioningResult>;
 export declare function getWorkspace(db: Database, workspaceId: string): Promise<Workspace | null>;
 export declare function getManagedAccount(db: Database, accountId: string): Promise<ManagedAccount | null>;
@@ -2750,6 +2753,7 @@ export type VariableSetAccessContext = {
     subjectId: string;
 };
 export declare function listVariableSets(db: Database, context: VariableSetAccessContext): Promise<VariableSet[]>;
+export declare function resolveVariableSetAttachments(db: Database, context: VariableSetAccessContext, variableSetIds: readonly string[]): Promise<Array<Pick<VariableSet, "id" | "scope">>>;
 export declare function getVariableSet(db: Database, context: VariableSetAccessContext, variableSetId: string): Promise<VariableSet | null>;
 export declare function getVariableSetByName(db: Database, context: VariableSetAccessContext, name: string, scope?: VariableSet["scope"]): Promise<VariableSet | null>;
 export type VariableSetSecretAuditActor = {
@@ -4875,6 +4879,8 @@ export declare function setSessionAttention(db: Database, input: {
     acknowledgedThroughSequence?: number | undefined;
     activelyWorking?: boolean | undefined;
     expectedVersion?: number | undefined;
+    /** See {@link PersonalWorkspaceOwnerException}. Absent means "no exception". */
+    personalWorkspaceOwnerException?: PersonalWorkspaceOwnerException | undefined;
 }): Promise<Session | null>;
 /**
  * Archive or restore one root chat for a single member. Archiving also removes
@@ -4887,6 +4893,8 @@ export declare function setSessionArchive(db: Database, input: {
     sessionId: string;
     archived: boolean;
     expectedVersion?: number | undefined;
+    /** See {@link PersonalWorkspaceOwnerException}. Absent means "no exception". */
+    personalWorkspaceOwnerException?: PersonalWorkspaceOwnerException | undefined;
 }): Promise<Session | null>;
 export declare function listSessions(db: Database, workspaceId: string, limit?: number): Promise<Session[]>;
 export declare function listSessions(db: Database, workspaceId: string, options?: ListSessionsOptions): Promise<Session[]>;
@@ -4899,9 +4907,11 @@ export declare function listSessions(db: Database, workspaceId: string, options?
  * result. The workspace filter remains authoritative under FORCE RLS.
  */
 export declare function getLatestSessionModelForSubject(db: Database, workspaceId: string, subjectId: string): Promise<string | null>;
-export type SessionDiscoveryOrderBy = "createdAt" | "updatedAt";
+export type SessionDiscoveryOrderBy = "createdAt" | "updatedAt" | "relevance";
 export type SessionDiscoveryCursor = {
     orderBy: SessionDiscoveryOrderBy;
+    /** Stable rank class for relevance order; null for chronological order. */
+    sortRank: number | null;
     /** Decimal database activity revision; zero is the legacy/created-order bucket. */
     sortRevision: string;
     /** Exact PostgreSQL timestamp text (including microseconds), not a JS Date. */
@@ -4913,6 +4923,8 @@ export type SessionDiscoveryCursor = {
     snapshotRevision: string;
     /** Incremental revision scope is cursor-bound and cannot change on continuation. */
     updatedAfter: string | null;
+    /** SHA-256 of normalized relevance filters; null for chronological order. */
+    filterHash: string | null;
 };
 export declare const SESSION_DISCOVERY_GOAL_MAX_CHARS = 600;
 export declare const SESSION_DISCOVERY_MESSAGE_MAX_CHARS = 600;
@@ -4937,12 +4949,15 @@ export type SessionDiscoverySummary = {
         preview: string | null;
         previewOriginalChars: number | null;
     } | null;
+    workDiscovery: WorkDiscoveryProjection;
     createdAt: string;
     updatedAt: string;
     /** Internal exact revision key; omitted from the MCP row projection. */
     sortRevision: string;
     /** Internal exact keyset timestamp; omitted from the MCP row projection. */
     sortAt: string;
+    /** Internal stable relevance class; omitted from public row projections. */
+    sortRank: number | null;
 };
 /**
  * Compact-by-construction discovery projection for the first-party
@@ -4956,7 +4971,17 @@ export declare function listSessionDiscoverySummaries(db: Database, workspaceId:
     orderBy?: SessionDiscoveryOrderBy;
     updatedAfter?: string;
     parentSessionId?: string | null;
+    rootSessionId?: string;
+    query?: string;
+    /** @deprecated use query; retained for the existing topology route. */
     search?: string;
+    statuses?: SessionStatus[];
+    activeOnly?: boolean;
+    recentHours?: number;
+    subject?: WorkClaimSubjectFilter;
+    claimLimit?: number;
+    /** Skip advisory claim reads for an operator-disabled discovery rollout. */
+    includeWorkDiscovery?: boolean;
     subjectId?: string;
     authorizationScope?: SessionAuthorizationListScope;
 }): Promise<{
@@ -4969,6 +4994,8 @@ export declare function listSessionDiscoverySummaries(db: Database, workspaceId:
     snapshotRevision: string;
     updatedThrough: string | null;
     updatedAfter: string | null;
+    /** Internal relevance cursor binding; omitted from row projections. */
+    filterHash: string | null;
 }>;
 export type SessionDiscoveryAncestor = {
     id: string;
@@ -4980,7 +5007,7 @@ export type SessionDiscoveryAncestor = {
  * Authorization is re-applied to every ancestor so exact-session grants never
  * acquire parent metadata merely by searching for their target.
  */
-export declare function listSessionDiscoveryAncestorPaths(db: Database, workspaceId: string, sessionIds: string[], authorizationScope?: SessionAuthorizationListScope): Promise<Map<string, SessionDiscoveryAncestor[]>>;
+export declare function listSessionDiscoveryAncestorPaths(db: Database, workspaceId: string, sessionIds: string[], authorizationScope?: SessionAuthorizationListScope, subjectId?: string): Promise<Map<string, SessionDiscoveryAncestor[]>>;
 export type SessionLineage = {
     ancestors: Session[];
     children: LineageNode[];
@@ -5129,6 +5156,12 @@ export type AcceptSessionHumanInputResponseResult = {
     event: SessionEvent;
     events: SessionEvent[];
     workflowWakeRevision: number;
+} | {
+    action: "completed";
+    request: SessionHumanInputRequest;
+    event: SessionEvent;
+    events: SessionEvent[];
+    workflowWakeRevision: number | null;
 } | {
     action: "conflict";
     request: SessionHumanInputRequest;
@@ -5138,9 +5171,12 @@ export type AcceptSessionHumanInputResponseResult = {
     action: "not_found";
 };
 /**
- * First-writer-wins settlement for one pending structured input boundary.
- * Session + logical turn + current freeze generation are locked with the row;
- * the creation attempt is provenance and is intentionally not the resume owner.
+ * First-writer-wins settlement for one structured input boundary. Session +
+ * logical turn + current freeze generation are locked with the row; the
+ * creation attempt is provenance and is intentionally not the resume owner.
+ * A committed response replays its original event without another event or
+ * workflow wake. Historical cancelled rows missing that canonical event are
+ * repaired exactly once under the same locks, but never wake terminal work.
  */
 export declare function acceptSessionHumanInputResponse(db: Database, input: {
     accountId: string;
@@ -9494,6 +9530,8 @@ export * from "./attached-browser-devices.js";
 export * from "./interaction-revisions.js";
 export * from "./interaction-placement-loss.js";
 export * from "./canonical-human-identities.js";
+export * from "./managed-auth-session-sets.js";
+export * from "./organization-recovery.js";
 export * from "./session-tenancy.js";
 export * from "./governed-learning-activation.js";
 export * from "./automations.js";