@opengeni/db 3.6.0 → 3.7.3-canary.0

package/dist/{chunk-CDMMSUWJ.js → chunk-S3TDDCS2.js}

@@ -1,11 +1,11 @@
 import {
   withRlsContext
-} from "./chunk-WW7AJ5IC.js";
+} from "./chunk-F6PBS6WE.js";
 import {
   sandboxRetainedProcesses,
   sessionBackgroundCommands,
   sessions
-} from "./chunk-UJ2EW3QI.js";
+} from "./chunk-O56DM5GZ.js";
 
 // src/session-background-commands.ts
 import { and, desc, eq, inArray, sql } from "drizzle-orm";
@@ -513,4 +513,4 @@ export {
   settleSessionBackgroundCommandForRetainedProcess,
   settleConnectedMachineSessionBackgroundCommand
 };
-//# sourceMappingURL=chunk-CDMMSUWJ.js.map
+//# sourceMappingURL=chunk-S3TDDCS2.js.map

package/dist/{chunk-Q5YUGQVK.js → chunk-SZAWDXQC.js}

@@ -2,7 +2,7 @@ import {
   rawRows,
   withRlsContext,
   withWorkspaceRls
-} from "./chunk-WW7AJ5IC.js";
+} from "./chunk-F6PBS6WE.js";
 import {
   connections,
   creditLedgerEntries,
@@ -14,7 +14,7 @@ import {
   workspaceVideoGenerationPolicies,
   workspaceVideoGenerationQuotas,
   workspaces
-} from "./chunk-UJ2EW3QI.js";
+} from "./chunk-O56DM5GZ.js";
 
 // src/video-generation.ts
 import {
@@ -992,4 +992,4 @@ export {
   mediaGenerationResultForStoredOperation,
   getVideoGenerationOperationSummary
 };
-//# sourceMappingURL=chunk-Q5YUGQVK.js.map
+//# sourceMappingURL=chunk-SZAWDXQC.js.map

package/dist/{chunk-UGDVSQ6U.js → chunk-U4WPPEBH.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-WW7AJ5IC.js";
+} from "./chunk-F6PBS6WE.js";
 
 // src/canonical-human-identities.ts
 import { createHash } from "crypto";
@@ -309,4 +309,4 @@ export {
   getCanonicalHumanIdentityProjection,
   applyCanonicalHumanIdentityOperation
 };
-//# sourceMappingURL=chunk-UGDVSQ6U.js.map
+//# sourceMappingURL=chunk-U4WPPEBH.js.map

package/dist/{chunk-2NT476HD.js → chunk-US4IS6IV.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-WW7AJ5IC.js";
+} from "./chunk-F6PBS6WE.js";
 
 // src/editable-artifacts.ts
 import { createHash } from "crypto";
@@ -3540,4 +3540,4 @@ export {
   PostgresEditableArtifactStore,
   PostgresEditableArtifactLiveReadStore
 };
-//# sourceMappingURL=chunk-2NT476HD.js.map
+//# sourceMappingURL=chunk-US4IS6IV.js.map

package/dist/codex-token-resolver.d.ts

@@ -7,6 +7,7 @@ export type CodexCredentialTokens = {
     refreshToken: string;
     idToken: string;
 };
+export type CodexCredentialCooldownKind = "quota" | "rate_limit";
 export type CodexCredentialForRun = {
     id: string;
     version: number;
@@ -20,6 +21,9 @@ export type CodexCredentialForRun = {
     lastRefreshAt: Date | null;
     status: string;
     lastError: string | null;
+    exhaustedUntil: Date | null;
+    exhaustedKind: CodexCredentialCooldownKind | null;
+    exhaustedRevision: number;
 };
 export type CodexAccountUsageSnapshot = {
     primaryUsedPercent?: number | null;
@@ -29,6 +33,12 @@ export type CodexAccountUsageSnapshot = {
     checkedAt?: Date;
     resetCreditAvailableCount?: number | null;
     resetCreditsCheckedAt?: Date | null;
+    /**
+     * Clear only a quota cooldown with this exact revision. Set solely after a
+     * live provider response proves allowance is open; a concurrent refusal
+     * advances the revision and makes this observation stale.
+     */
+    clearQuotaCooldownRevision?: number;
 };
 type CodexCredentialRefreshInput = {
     id: string;
@@ -81,7 +91,8 @@ export declare function buildCodexTokenResolver(db: Database, settings: Settings
  *      account's expired JWT from 401-ing the usage read.
  *   2. fetch GET /wham/usage with that bearer.
  *   3. normalize (§3) into the P2/P3 contract.
- *   4. on any windows present, write the five usage-cache columns (the TTL clock).
+ *   4. on any windows present, write the usage cache and conditionally reconcile
+ *      the exact older typed quota cooldown observed before provider I/O.
  *
  * A refresh that stamps needs_relogin returns { status:"error", reason } and never
  * hits the provider; a transient refresh error returns a plain error payload.

package/dist/company-profile-agent-admin.d.ts

@@ -1,10 +1,12 @@
 import { type CompanyProfileAgentAttempt as CompanyProfileAgentAttemptType, type CompanyProfileAgentConfirmRequest as CompanyProfileAgentConfirmRequestType, type CompanyProfileAgentConfirmationReceipt as CompanyProfileAgentConfirmationReceiptType, type CompanyProfileAgentProposalReceipt as CompanyProfileAgentProposalReceiptType, type CompanyProfileAgentProposalRequest as CompanyProfileAgentProposalRequestType } from "@opengeni/contracts";
 import { type Database } from "./database.js";
 export declare class CompanyProfileAgentAdminError extends Error {
-    readonly code: "authority_unavailable" | "confirmation_unavailable" | "profile_conflict" | "operation_reused" | "invalid_operation";
+    readonly code: "authority_unavailable" | "policy_disabled" | "confirmation_unavailable" | "profile_conflict" | "operation_reused" | "invalid_operation";
     readonly name = "CompanyProfileAgentAdminError";
-    constructor(code: "authority_unavailable" | "confirmation_unavailable" | "profile_conflict" | "operation_reused" | "invalid_operation", message: string, options?: ErrorOptions);
+    constructor(code: "authority_unavailable" | "policy_disabled" | "confirmation_unavailable" | "profile_conflict" | "operation_reused" | "invalid_operation", message: string, options?: ErrorOptions);
 }
+/** Deterministic UUID-shaped id for the activation stage of one proposal operation. */
+export declare function derivedCompanyProfileAutomaticActivationOperationId(operationId: string): string;
 export declare function proposeCompanyProfileForAgent(db: Database, raw: {
     attempt: CompanyProfileAgentAttemptType;
     request: CompanyProfileAgentProposalRequestType;

package/dist/company-profile-agent-policy.d.ts

@@ -0,0 +1,20 @@
+import { type CompanyProfileAgentPolicy as CompanyProfileAgentPolicyType, type CompanyProfileAgentPolicyMode as CompanyProfileAgentPolicyModeType } from "@opengeni/contracts";
+import { type Database } from "./database.js";
+export declare class CompanyProfileAgentPolicyError extends Error {
+    readonly code: "authority_unavailable" | "policy_conflict" | "operation_reused" | "invalid";
+    readonly name = "CompanyProfileAgentPolicyError";
+    constructor(code: "authority_unavailable" | "policy_conflict" | "operation_reused" | "invalid", message: string, options?: ErrorOptions);
+}
+export declare function getCompanyProfileAgentPolicy(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    actorSubjectId: string;
+}): Promise<CompanyProfileAgentPolicyType>;
+export declare function updateCompanyProfileAgentPolicy(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    actorSubjectId: string;
+    mode: CompanyProfileAgentPolicyModeType;
+    expectedVersion: number;
+    operationId: string;
+}): Promise<CompanyProfileAgentPolicyType>;