@opengeni/db 3.6.0 → 3.7.4-canary.0

package/dist/schema.js

@@ -46,6 +46,7 @@ import {
   companyBrainContextSelectionReceipts,
   companyBrainTurnContextSnapshots,
   companyProfileActivationEvents,
+  companyProfileAgentAutomaticActivationReceipts,
   companyProfileAgentConfirmationReceipts,
   companyProfileAgentProposalReceipts,
   companyProfileHeads,
@@ -61,6 +62,7 @@ import {
   connectorActionPolicies,
   connectorActionRequests,
   creditLedgerEntries,
+  deploymentModelCatalog,
   deviceEnrollmentRequests,
   deviceEnrollmentStatusValues,
   documentBases,
@@ -160,6 +162,9 @@ import {
   nestedAgentDepthConfiguration,
   networkRoutes,
   newSessionDrafts,
+  organizationCodexRotationSettings,
+  organizationCompanyProfileAgentPolicies,
+  organizationCompanyProfileAgentPolicyEvents,
   organizationInvitationBindingEvents,
   organizationMembershipInvitations,
   organizationMembershipLifecycleEvents,
@@ -224,6 +229,7 @@ import {
   sessionAttemptToolCatalogs,
   sessionBackgroundCommands,
   sessionCommandReceipts,
+  sessionEventCursors,
   sessionEvents,
   sessionGoalRevisions,
   sessionGoals,
@@ -303,7 +309,9 @@ import {
   workspaceArtifactVersions,
   workspaceArtifacts,
   workspaceCaptures,
+  workspaceCodexSubscriptionPreferences,
   workspaceControlEvents,
+  workspaceGatewayCustomModels,
   workspaceInferenceControls,
   workspaceInstructionPolicyActivationEvents,
   workspaceInstructionPolicyDeactivationEvents,
@@ -331,7 +339,7 @@ import {
   xaiRotationSettings,
   xaiSessionAccountPins,
   xaiSubscriptionCredentials
-} from "./chunk-UJ2EW3QI.js";
+} from "./chunk-DXJ2WY6W.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
@@ -381,6 +389,7 @@ export {
   companyBrainContextSelectionReceipts,
   companyBrainTurnContextSnapshots,
   companyProfileActivationEvents,
+  companyProfileAgentAutomaticActivationReceipts,
   companyProfileAgentConfirmationReceipts,
   companyProfileAgentProposalReceipts,
   companyProfileHeads,
@@ -396,6 +405,7 @@ export {
   connectorActionPolicies,
   connectorActionRequests,
   creditLedgerEntries,
+  deploymentModelCatalog,
   deviceEnrollmentRequests,
   deviceEnrollmentStatusValues,
   documentBases,
@@ -495,6 +505,9 @@ export {
   nestedAgentDepthConfiguration,
   networkRoutes,
   newSessionDrafts,
+  organizationCodexRotationSettings,
+  organizationCompanyProfileAgentPolicies,
+  organizationCompanyProfileAgentPolicyEvents,
   organizationInvitationBindingEvents,
   organizationMembershipInvitations,
   organizationMembershipLifecycleEvents,
@@ -559,6 +572,7 @@ export {
   sessionAttemptToolCatalogs,
   sessionBackgroundCommands,
   sessionCommandReceipts,
+  sessionEventCursors,
   sessionEvents,
   sessionGoalRevisions,
   sessionGoals,
@@ -638,7 +652,9 @@ export {
   workspaceArtifactVersions,
   workspaceArtifacts,
   workspaceCaptures,
+  workspaceCodexSubscriptionPreferences,
   workspaceControlEvents,
+  workspaceGatewayCustomModels,
   workspaceInferenceControls,
   workspaceInstructionPolicyActivationEvents,
   workspaceInstructionPolicyDeactivationEvents,

package/dist/session-background-commands.js

@@ -12,9 +12,9 @@ import {
   settleClaimedConnectedMachineBackgroundCommand,
   settleConnectedMachineSessionBackgroundCommand,
   settleSessionBackgroundCommandForRetainedProcess
-} from "./chunk-CDMMSUWJ.js";
-import "./chunk-WW7AJ5IC.js";
-import "./chunk-UJ2EW3QI.js";
+} from "./chunk-JP6IYGYI.js";
+import "./chunk-ZTSJPFDH.js";
+import "./chunk-DXJ2WY6W.js";
 import "./chunk-PZ5AY32C.js";
 export {
   backgroundCommandActivityForSessions,

package/dist/session-control.d.ts

@@ -60,6 +60,17 @@ export type EffectiveSessionControl = {
         commandCount: number;
     } | null;
 };
+/**
+ * The bounded control projection required by a locked activity-write fence.
+ * Settlement and background-command summaries are read-model concerns and must
+ * not extend the session-event critical section when admission only needs the
+ * effective run state and blocker scope.
+ */
+export type SessionWriteAdmissionControl = {
+    state: EffectiveControlState;
+    controlVersion: number;
+    primaryBlockerKind: EffectiveControlBlocker["kind"] | null;
+};
 export declare const SESSION_DISCOVERY_CONTROL_TITLE_MAX_CHARS = 200;
 export declare const SESSION_DISCOVERY_CONTROL_TARGET_LIMIT = 100;
 /**
@@ -272,6 +283,13 @@ export type SessionEventWriteLockInput = {
     controlLock: WorkspaceControlLockMode | "already_locked" | "none";
     /** Used only when a staged caller already established the workspace prefix. */
     workspaceLock?: "key_share" | "already_locked";
+    /**
+     * Semantic writers retain FOR NO KEY UPDATE. Cursor-authoritative raw-only
+     * appends need only the FK-compatible identity hold; KEY SHARE is compatible
+     * with semantic NO KEY UPDATE and therefore removes the wide session row as
+     * their serialization mutex without inverting the rolling lock order.
+     */
+    sessionLock?: "no_key_update" | "key_share";
     sessionIds?: string[];
     turnIds?: string[];
     attemptIds?: string[];
@@ -280,6 +298,7 @@ export type SessionEventWriteLocks = {
     control: WorkspaceControlRow | null;
     workspace: typeof schema.workspaces.$inferSelect | null;
     sessions: Array<typeof schema.sessions.$inferSelect>;
+    cursors: Array<typeof schema.sessionEventCursors.$inferSelect>;
     turns: Array<typeof schema.sessionTurns.$inferSelect>;
     attempts: Array<typeof schema.sessionTurnAttempts.$inferSelect>;
 };
@@ -289,7 +308,8 @@ export type SessionEventWriteLocks = {
  *   workspace-control advisory lock + workspace_inference_controls row
  *     (when control-aware; see `lockWorkspaceInferenceControl`)
  *     -> actual workspaces row FOR KEY SHARE
- *     -> session rows FOR NO KEY UPDATE, UUID ordered
+ *     -> session rows FOR NO KEY UPDATE (semantic) or KEY SHARE (raw), UUID ordered
+ *     -> session event cursor rows FOR UPDATE, UUID ordered
  *     -> exact turn rows FOR UPDATE, UUID ordered
  *     -> exact attempt rows FOR UPDATE, UUID ordered
  *
@@ -304,10 +324,12 @@ export type SessionEventWriteLocks = {
  * `FOR UPDATE` lock serialized unrelated sessions and inverted the activity
  * path's session -> implicit workspace-FK edge.
  *
- * `FOR NO KEY UPDATE` is equally deliberate for sessions. Session primary and
- * composite identity keys are immutable, so writers need to exclude only concurrent
- * non-key mutation. Keeping FK `FOR KEY SHARE` checks compatible prevents the
- * activity finalizer's workspace counter from participating in a lock cycle.
+ * `FOR NO KEY UPDATE` is equally deliberate for semantic session writers.
+ * Cursor-authoritative raw-only writers use `FOR KEY SHARE`: it preserves the
+ * session identity against deletion while remaining compatible with semantic
+ * `FOR NO KEY UPDATE`. Keeping this rolling session-before-cursor order avoids
+ * an inversion with old binaries and quiescent cascade deletion; the compact
+ * cursor row, not the wide session row, is the raw ordering mutex.
  *
  * Complex lifecycle transactions may acquire allocator/control locks before
  * this helper and may discover exact turn IDs only after locking the session.
@@ -379,6 +401,19 @@ export declare function evaluateSessionControls(db: Database, workspaceId: strin
     /** Reuse a control row already locked before workspace/session/turn rows. */
     workspaceControl?: WorkspaceControlRow | undefined;
 }): Promise<Map<string, EffectiveSessionControl>>;
+/**
+ * Evaluate only the control facts needed to admit an already locked session
+ * write. The workspace-control row must be reused when the caller established
+ * the canonical prefix before session/turn/attempt locks.
+ *
+ * Deliberately omit settlementAttemptCounts and
+ * stoppingBackgroundCommandCounts: those recursive summaries do not affect
+ * effective pause state and their results are discarded by the write fence.
+ */
+export declare function evaluateSessionWriteAdmissionControl(db: Database, workspaceId: string, sessionId: string, options?: {
+    lock?: WorkspaceControlLockMode;
+    workspaceControl?: WorkspaceControlRow | undefined;
+}): Promise<SessionWriteAdmissionControl>;
 /**
  * Return one compact aggregate row per target for `sessions_list`.
  *
@@ -394,6 +429,40 @@ export declare function evaluateSessionControl(db: Database, workspaceId: string
     lock?: WorkspaceControlLockMode;
     workspaceControl?: WorkspaceControlRow | undefined;
 }): Promise<EffectiveSessionControl>;
+export type SessionPromptCommandAction = "prompt.send" | "prompt.steer";
+/**
+ * Prompt operation keys are actor-scoped across target sessions and across the
+ * Send/Steer action pair. The advisory lock closes the gap left by the legacy
+ * action/target-specific unique index without changing old receipt identities.
+ */
+export declare function reserveSessionPromptCommandReceipt(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    actor: SessionCommandActor;
+    action: SessionPromptCommandAction;
+    targetSessionId: string;
+    operationKey: string;
+    canonicalRequestHash: string;
+    boundaryRequestHash: string;
+}): Promise<{
+    receipt: SessionCommandReceiptRow;
+    replay: boolean;
+}>;
+/** Serialize one actor-scoped prompt operation before replay or reservation. */
+export declare function lockSessionPromptCommandOperation(db: Database, input: {
+    workspaceId: string;
+    actor: SessionCommandActor;
+    operationKey: string;
+}): Promise<void>;
+/** Return only a fully committed exact prompt receipt with the new boundary fingerprint. */
+export declare function getCompletedSessionPromptCommandReceipt(db: Database, input: {
+    workspaceId: string;
+    actor: SessionCommandActor;
+    action: SessionPromptCommandAction;
+    targetSessionId: string;
+    operationKey: string;
+    boundaryRequestHash: string;
+}): Promise<SessionCommandReceiptRow | null>;
 export declare function reserveSessionCommandReceipt(db: Database, input: {
     accountId: string;
     workspaceId: string;
@@ -404,6 +473,7 @@ export declare function reserveSessionCommandReceipt(db: Database, input: {
     operationKey: string;
     canonicalRequestHash: string;
     identityScope?: "actor" | "goal_operation";
+    initialResult?: Record<string, unknown>;
 }): Promise<{
     receipt: SessionCommandReceiptRow;
     replay: boolean;

package/dist/session-queue-commands.d.ts

@@ -53,6 +53,18 @@ export type SubmitHumanPromptResult = {
     workspaceControlEventId: string | null;
     replay: boolean;
 };
+export declare function replaySubmittedHumanPromptFromBoundaryReceipt(db: Database, input: {
+    workspaceId: string;
+    sessionId: string;
+    subjectId: string;
+    actor: SessionCommandActor;
+    operationKey: string;
+    delivery: "send" | "steer";
+    boundaryRequestHash: string;
+    expectedDraftRevision?: number | null;
+    /** Wait for an overlapping same-key transaction before checking committed replay truth. */
+    serializeOperation?: boolean;
+}): Promise<SubmitHumanPromptResult | null>;
 export type AgentInternalUpdateCommandResult = {
     receipt: SessionCommandReceiptRow;
     updateId: string;
@@ -67,8 +79,10 @@ export type AgentInternalUpdateCommandResult = {
 };
 type SteerSupersessionResult = {
     interruptionCount: number;
+    steerTargetTurn: typeof schema.sessionTurns.$inferSelect | null;
     replacedTurn: typeof schema.sessionTurns.$inferSelect | null;
     liveCurrentTurnId: string | null;
+    deferredUntilCompaction: boolean;
     lastSequence: number;
 };
 /**
@@ -177,6 +191,8 @@ export declare function submitHumanPromptInTransaction(db: SessionActivityDataba
     subjectLabel?: string;
     actor: SessionCommandActor;
     operationKey: string;
+    /** Stable parsed boundary-request identity used before mutable enrichment. */
+    boundaryRequestHash?: string;
     delivery: "send" | "steer";
     controlEtag?: string | null;
     expectedDraftRevision?: number | null;
@@ -211,6 +227,9 @@ export declare function submitHumanPromptInTransaction(db: SessionActivityDataba
         id: string;
         headersEncrypted: Record<string, string>;
     }>;
+    /** Trusted database-only admission seam. It runs only after a completed
+     * operation replay has been ruled out; throwing rolls the prompt back. */
+    beforeFreshPromptCommit?: (tx: Database) => Promise<void>;
     /** Request-scoped callers bound the control prefix wait; lifecycle callers omit it. */
     controlLockTimeoutMs?: number;
 }): Promise<SubmitHumanPromptResult>;

package/dist/session-tenancy.js

@@ -14,9 +14,9 @@ import {
   replayAppliedSessionFork,
   sessionTenancyProductActivated,
   transitionSessionVisibility
-} from "./chunk-IW6O6G7R.js";
-import "./chunk-WW7AJ5IC.js";
-import "./chunk-UJ2EW3QI.js";
+} from "./chunk-VDXHLVDE.js";
+import "./chunk-ZTSJPFDH.js";
+import "./chunk-DXJ2WY6W.js";
 import "./chunk-PZ5AY32C.js";
 export {
   SessionTenancyAccessError,

package/dist/user-resource-authority.d.ts

@@ -71,6 +71,14 @@ export declare function issueSelfUserResourceGrant(db: Database, input: {
     expectedAuthorityEpoch?: number | null;
     workspaceSharedAcknowledged: boolean;
 }): Promise<UserResourceAuthorityGrant>;
+export declare function issueSelfLocalConnectionUseGrant(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    authorityId: string;
+    context: "user_private" | "workspace_shared";
+    workspaceSharedAcknowledged: boolean;
+}): Promise<UserResourceAuthorityGrant>;
 export declare function revokeSelfUserResourceGrant(db: Database, input: {
     accountId: string;
     workspaceId: string;

package/dist/video-generation.js

@@ -29,9 +29,9 @@ import {
   settleVideoGenerationFailure,
   settleVideoGenerationReady,
   updateWorkspaceVideoGenerationPolicy
-} from "./chunk-Q5YUGQVK.js";
-import "./chunk-WW7AJ5IC.js";
-import "./chunk-UJ2EW3QI.js";
+} from "./chunk-JS3AWDKZ.js";
+import "./chunk-ZTSJPFDH.js";
+import "./chunk-DXJ2WY6W.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ACTIVE_VIDEO_GENERATION_STATUSES,

package/dist/xai-subscription.d.ts

@@ -97,6 +97,14 @@ export declare function listXaiSubscriptionAccountsMetadata(db: Database, input:
 export declare function workspaceXaiSubscriptionActive(db: Database, settings: {
     readonly supergrokSubscriptionEnabled: boolean;
 }, workspaceId: string, subjectId: string): Promise<boolean>;
+/** Metadata-only readiness for the exact provider-account authority frozen on a turn. */
+export declare function workspaceXaiSubscriptionActiveForAuthority(db: Database, settings: {
+    readonly supergrokSubscriptionEnabled: boolean;
+}, input: {
+    workspaceId: string;
+    subjectId: string;
+    authoritySnapshot: XaiAuthoritySnapshot;
+}): Promise<boolean>;
 export declare function getXaiSubscriptionAccountMetadata(db: Database, input: {
     workspaceId: string;
     subjectId: string;