@opengeni/db 3.5.2-canary.0 → 3.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (47) hide show
  1. package/dist/canonical-human-identities.js +3 -3
  2. package/dist/{chunk-NRGUX3M5.js → chunk-2NT476HD.js} +2 -2
  3. package/dist/{chunk-PERPE2UY.js → chunk-744DFC65.js} +31 -1
  4. package/dist/chunk-744DFC65.js.map +1 -0
  5. package/dist/{chunk-FJHEWYV5.js → chunk-CDMMSUWJ.js} +3 -3
  6. package/dist/{chunk-TRCYF26N.js → chunk-G3732M3T.js} +2 -2
  7. package/dist/{chunk-ORKVXHL2.js → chunk-IW6O6G7R.js} +2 -2
  8. package/dist/{chunk-Y44FKTYU.js → chunk-Q5YUGQVK.js} +3 -3
  9. package/dist/{chunk-U7NKCX5E.js → chunk-UGDVSQ6U.js} +2 -2
  10. package/dist/{chunk-6NYKC5DD.js → chunk-UJ2EW3QI.js} +4729 -4583
  11. package/dist/chunk-UJ2EW3QI.js.map +1 -0
  12. package/dist/{chunk-X6T2P3L3.js → chunk-WW7AJ5IC.js} +2 -2
  13. package/dist/editable-artifact-durable-export.js +2 -2
  14. package/dist/editable-artifacts.js +3 -3
  15. package/dist/index.d.ts +23 -3
  16. package/dist/index.js +2112 -1436
  17. package/dist/index.js.map +1 -1
  18. package/dist/managed-auth-session-sets.js +3 -3
  19. package/dist/provision-roles.js +1 -1
  20. package/dist/runtime-posture.d.ts +5 -4
  21. package/dist/schema.d.ts +7 -6
  22. package/dist/schema.js +7 -1
  23. package/dist/session-background-commands.js +3 -3
  24. package/dist/session-tenancy.js +3 -3
  25. package/dist/video-generation.js +3 -3
  26. package/dist/work-claims-schema.d.ts +975 -0
  27. package/dist/work-claims.d.ts +83 -0
  28. package/drizzle/0365_permission_scoped_work_claims.sql +1306 -0
  29. package/drizzle/0366_session_discovery_title_search_index.sql +5 -0
  30. package/drizzle/0367_session_discovery_goal_search_index.sql +5 -0
  31. package/drizzle/0368_session_discovery_claim_search_index.sql +6 -0
  32. package/package.json +6 -6
  33. package/src/index.ts +1051 -330
  34. package/src/provision-roles.ts +18 -0
  35. package/src/runtime-posture.ts +12 -0
  36. package/src/schema.ts +1 -0
  37. package/src/work-claims-schema.ts +148 -0
  38. package/src/work-claims.ts +200 -0
  39. package/dist/chunk-6NYKC5DD.js.map +0 -1
  40. package/dist/chunk-PERPE2UY.js.map +0 -1
  41. /package/dist/{chunk-NRGUX3M5.js.map → chunk-2NT476HD.js.map} +0 -0
  42. /package/dist/{chunk-FJHEWYV5.js.map → chunk-CDMMSUWJ.js.map} +0 -0
  43. /package/dist/{chunk-TRCYF26N.js.map → chunk-G3732M3T.js.map} +0 -0
  44. /package/dist/{chunk-ORKVXHL2.js.map → chunk-IW6O6G7R.js.map} +0 -0
  45. /package/dist/{chunk-Y44FKTYU.js.map → chunk-Q5YUGQVK.js.map} +0 -0
  46. /package/dist/{chunk-U7NKCX5E.js.map → chunk-UGDVSQ6U.js.map} +0 -0
  47. /package/dist/{chunk-X6T2P3L3.js.map → chunk-WW7AJ5IC.js.map} +0 -0
@@ -4,7 +4,7 @@ import {
4
4
  sessions,
5
5
  workspaceSessionActivityRevisions,
6
6
  workspaces
7
- } from "./chunk-6NYKC5DD.js";
7
+ } from "./chunk-UJ2EW3QI.js";
8
8
 
9
9
  // src/persistence-errors.ts
10
10
  var SQLSTATE_KEYS = ["sqlState", "sqlstate", "code"];
@@ -757,4 +757,4 @@ export {
757
757
  withAccountRls,
758
758
  dbBindingFor
759
759
  };
760
- //# sourceMappingURL=chunk-X6T2P3L3.js.map
760
+ //# sourceMappingURL=chunk-WW7AJ5IC.js.map
@@ -1,8 +1,8 @@
1
1
  import {
2
2
  rawRows,
3
3
  withRlsContext
4
- } from "./chunk-X6T2P3L3.js";
5
- import "./chunk-6NYKC5DD.js";
4
+ } from "./chunk-WW7AJ5IC.js";
5
+ import "./chunk-UJ2EW3QI.js";
6
6
  import "./chunk-PZ5AY32C.js";
7
7
 
8
8
  // src/editable-artifact-durable-export.ts
@@ -8,9 +8,9 @@ import {
8
8
  PostgresEditableArtifactStore,
9
9
  listEditableArtifactIdsForSession,
10
10
  touchEditableArtifactSessionLink
11
- } from "./chunk-NRGUX3M5.js";
12
- import "./chunk-X6T2P3L3.js";
13
- import "./chunk-6NYKC5DD.js";
11
+ } from "./chunk-2NT476HD.js";
12
+ import "./chunk-WW7AJ5IC.js";
13
+ import "./chunk-UJ2EW3QI.js";
14
14
  import "./chunk-PZ5AY32C.js";
15
15
  export {
16
16
  EDITABLE_ARTIFACT_INTENT_MAX_BYTES,
package/dist/index.d.ts CHANGED
@@ -1,5 +1,5 @@
1
1
  import { type ChildLifecycleSystemUpdateKind, type ChildRequiresActionRespondedByKind, SessionGoalSnapshot } from "@opengeni/contracts";
2
- import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, AttemptToolResult, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, ManagedOrganizationMembershipProjection, McpPersonalConnectionDelegation, ModelContextContributionSummary, Permission, PersonalResourceAttachmentIntent, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAction, ScheduledTaskActionKind, KnowledgeSourceSyncAction, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunAcceptedExecution as ScheduledTaskRunAcceptedExecutionType, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, SlackInstallationBinding, Session, SessionAuthorizationListScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalChangeKind, SessionGoalCreatedBy, SessionGoalMutationPolicy, SessionGoalRevision, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetSecret, VariableSetVariableMetadata, WorkspaceMember, WorkspaceMemoryPromptMode, WorkspaceRegisteredPack, Channel, Rig, RigProviderImage, RigProviderImages, RigVersion, RigVerificationHealth, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding, SandboxProviderContinuityRecovery } from "@opengeni/contracts";
2
+ import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, AttemptToolResult, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, ManagedOrganizationMembershipProjection, McpPersonalConnectionDelegation, ModelContextContributionSummary, Permission, PersonalResourceAttachmentIntent, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAction, ScheduledTaskActionKind, KnowledgeSourceSyncAction, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunAcceptedExecution as ScheduledTaskRunAcceptedExecutionType, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, SlackInstallationBinding, Session, SessionAuthorizationListScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalChangeKind, SessionGoalCreatedBy, SessionGoalMutationPolicy, SessionGoalRevision, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetSecret, VariableSetVariableMetadata, WorkspaceMember, WorkspaceMemoryPromptMode, WorkspaceRegisteredPack, Channel, Rig, RigProviderImage, RigProviderImages, RigVersion, RigVerificationHealth, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding, SandboxProviderContinuityRecovery, WorkClaimSubjectFilter, WorkDiscoveryProjection } from "@opengeni/contracts";
3
3
  import { type WorkspaceArchiveObjectRef, RequestHumanInteractionToolInput, XaiProviderAccountAuthoritySnapshotV1, type TimelineAnnotation } from "@opengeni/contracts";
4
4
  import { type LatencyMode, SessionSystemUpdatePayload, TurnExecutionPolicyV1 } from "@opengeni/contracts";
5
5
  import { type Settings } from "@opengeni/config";
@@ -36,6 +36,7 @@ export * from "./company-brain-governed-writes.js";
36
36
  export * from "./company-brain-context-selection.js";
37
37
  export * from "./knowledge-source-sync.js";
38
38
  export * from "./task-notes.js";
39
+ export * from "./work-claims.js";
39
40
  export * from "./managed-human-provisioning.js";
40
41
  export * from "./managed-user-setup.js";
41
42
  export * from "./organization-membership-backfill.js";
@@ -4906,9 +4907,11 @@ export declare function listSessions(db: Database, workspaceId: string, options?
4906
4907
  * result. The workspace filter remains authoritative under FORCE RLS.
4907
4908
  */
4908
4909
  export declare function getLatestSessionModelForSubject(db: Database, workspaceId: string, subjectId: string): Promise<string | null>;
4909
- export type SessionDiscoveryOrderBy = "createdAt" | "updatedAt";
4910
+ export type SessionDiscoveryOrderBy = "createdAt" | "updatedAt" | "relevance";
4910
4911
  export type SessionDiscoveryCursor = {
4911
4912
  orderBy: SessionDiscoveryOrderBy;
4913
+ /** Stable rank class for relevance order; null for chronological order. */
4914
+ sortRank: number | null;
4912
4915
  /** Decimal database activity revision; zero is the legacy/created-order bucket. */
4913
4916
  sortRevision: string;
4914
4917
  /** Exact PostgreSQL timestamp text (including microseconds), not a JS Date. */
@@ -4920,6 +4923,8 @@ export type SessionDiscoveryCursor = {
4920
4923
  snapshotRevision: string;
4921
4924
  /** Incremental revision scope is cursor-bound and cannot change on continuation. */
4922
4925
  updatedAfter: string | null;
4926
+ /** SHA-256 of normalized relevance filters; null for chronological order. */
4927
+ filterHash: string | null;
4923
4928
  };
4924
4929
  export declare const SESSION_DISCOVERY_GOAL_MAX_CHARS = 600;
4925
4930
  export declare const SESSION_DISCOVERY_MESSAGE_MAX_CHARS = 600;
@@ -4944,12 +4949,15 @@ export type SessionDiscoverySummary = {
4944
4949
  preview: string | null;
4945
4950
  previewOriginalChars: number | null;
4946
4951
  } | null;
4952
+ workDiscovery: WorkDiscoveryProjection;
4947
4953
  createdAt: string;
4948
4954
  updatedAt: string;
4949
4955
  /** Internal exact revision key; omitted from the MCP row projection. */
4950
4956
  sortRevision: string;
4951
4957
  /** Internal exact keyset timestamp; omitted from the MCP row projection. */
4952
4958
  sortAt: string;
4959
+ /** Internal stable relevance class; omitted from public row projections. */
4960
+ sortRank: number | null;
4953
4961
  };
4954
4962
  /**
4955
4963
  * Compact-by-construction discovery projection for the first-party
@@ -4963,7 +4971,17 @@ export declare function listSessionDiscoverySummaries(db: Database, workspaceId:
4963
4971
  orderBy?: SessionDiscoveryOrderBy;
4964
4972
  updatedAfter?: string;
4965
4973
  parentSessionId?: string | null;
4974
+ rootSessionId?: string;
4975
+ query?: string;
4976
+ /** @deprecated use query; retained for the existing topology route. */
4966
4977
  search?: string;
4978
+ statuses?: SessionStatus[];
4979
+ activeOnly?: boolean;
4980
+ recentHours?: number;
4981
+ subject?: WorkClaimSubjectFilter;
4982
+ claimLimit?: number;
4983
+ /** Skip advisory claim reads for an operator-disabled discovery rollout. */
4984
+ includeWorkDiscovery?: boolean;
4967
4985
  subjectId?: string;
4968
4986
  authorizationScope?: SessionAuthorizationListScope;
4969
4987
  }): Promise<{
@@ -4976,6 +4994,8 @@ export declare function listSessionDiscoverySummaries(db: Database, workspaceId:
4976
4994
  snapshotRevision: string;
4977
4995
  updatedThrough: string | null;
4978
4996
  updatedAfter: string | null;
4997
+ /** Internal relevance cursor binding; omitted from row projections. */
4998
+ filterHash: string | null;
4979
4999
  }>;
4980
5000
  export type SessionDiscoveryAncestor = {
4981
5001
  id: string;
@@ -4987,7 +5007,7 @@ export type SessionDiscoveryAncestor = {
4987
5007
  * Authorization is re-applied to every ancestor so exact-session grants never
4988
5008
  * acquire parent metadata merely by searching for their target.
4989
5009
  */
4990
- export declare function listSessionDiscoveryAncestorPaths(db: Database, workspaceId: string, sessionIds: string[], authorizationScope?: SessionAuthorizationListScope): Promise<Map<string, SessionDiscoveryAncestor[]>>;
5010
+ export declare function listSessionDiscoveryAncestorPaths(db: Database, workspaceId: string, sessionIds: string[], authorizationScope?: SessionAuthorizationListScope, subjectId?: string): Promise<Map<string, SessionDiscoveryAncestor[]>>;
4991
5011
  export type SessionLineage = {
4992
5012
  ancestors: Session[];
4993
5013
  children: LineageNode[];