@opengeni/db 3.7.4-canary.0 → 3.8.2-canary.0

package/dist/{chunk-ZTSJPFDH.js → chunk-HZV7O6JR.js}

@@ -4,7 +4,7 @@ import {
   sessions,
   workspaceSessionActivityRevisions,
   workspaces
-} from "./chunk-DXJ2WY6W.js";
+} from "./chunk-53A2PEHT.js";
 
 // src/persistence-errors.ts
 var SQLSTATE_KEYS = ["sqlState", "sqlstate", "code"];
@@ -755,4 +755,4 @@ export {
   withAccountRls,
   dbBindingFor
 };
-//# sourceMappingURL=chunk-ZTSJPFDH.js.map
+//# sourceMappingURL=chunk-HZV7O6JR.js.map

package/dist/{chunk-VDXHLVDE.js → chunk-RLQVPOVR.js}

@@ -5,7 +5,7 @@ import {
   withWorkspaceRls,
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls
-} from "./chunk-ZTSJPFDH.js";
+} from "./chunk-HZV7O6JR.js";
 
 // src/session-tenancy.ts
 import { createHash } from "crypto";
@@ -481,4 +481,4 @@ export {
   forkSessionContent,
   replayAppliedSessionFork
 };
-//# sourceMappingURL=chunk-VDXHLVDE.js.map
+//# sourceMappingURL=chunk-RLQVPOVR.js.map

package/dist/{chunk-LHKB62GC.js → chunk-UKOGHUGC.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-ZTSJPFDH.js";
+} from "./chunk-HZV7O6JR.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-LHKB62GC.js.map
+//# sourceMappingURL=chunk-UKOGHUGC.js.map

package/dist/{chunk-QL4AHBYD.js → chunk-X6TO5HII.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-ZTSJPFDH.js";
+} from "./chunk-HZV7O6JR.js";
 
 // src/editable-artifacts.ts
 import { createHash } from "crypto";
@@ -3540,4 +3540,4 @@ export {
   PostgresEditableArtifactStore,
   PostgresEditableArtifactLiveReadStore
 };
-//# sourceMappingURL=chunk-QL4AHBYD.js.map
+//# sourceMappingURL=chunk-X6TO5HII.js.map

package/dist/{chunk-3ZMN4EXC.js → chunk-Y53WEFYB.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-ZTSJPFDH.js";
+} from "./chunk-HZV7O6JR.js";
 
 // src/canonical-human-identities.ts
 import { createHash } from "crypto";
@@ -309,4 +309,4 @@ export {
   getCanonicalHumanIdentityProjection,
   applyCanonicalHumanIdentityOperation
 };
-//# sourceMappingURL=chunk-3ZMN4EXC.js.map
+//# sourceMappingURL=chunk-Y53WEFYB.js.map

package/dist/connection-token-resolver.d.ts

@@ -51,6 +51,8 @@ export type ConnectionStatusGuard = {
 export type ResolveConnectionCredentialResult = {
     status: "ok";
     headers: Record<string, string>;
+    /** Credential authority is owned by the embedding host, not the native connection store. */
+    authoritySource?: "host";
     /** Present when the credential bundle or embedding host supplied explicit placements. */
     placements?: ConnectionCredentialPlacement[];
     connectionId: string;
@@ -69,6 +71,8 @@ export type ResolveConnectionCredentialResult = {
     status: "auth_needed";
     reason: McpCredentialAuthNeededReason;
     providerDomain: string;
+    /** Credential authority is owned by the embedding host, not the native connection store. */
+    authoritySource?: "host";
     provider?: string;
     connectionId?: string;
     scopes?: string[];

package/dist/editable-artifact-durable-export.js

@@ -1,8 +1,8 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-ZTSJPFDH.js";
-import "./chunk-DXJ2WY6W.js";
+} from "./chunk-HZV7O6JR.js";
+import "./chunk-53A2PEHT.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/editable-artifact-durable-export.ts

package/dist/editable-artifacts.js

@@ -8,9 +8,9 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink
-} from "./chunk-QL4AHBYD.js";
-import "./chunk-ZTSJPFDH.js";
-import "./chunk-DXJ2WY6W.js";
+} from "./chunk-X6TO5HII.js";
+import "./chunk-HZV7O6JR.js";
+import "./chunk-53A2PEHT.js";
 import "./chunk-PZ5AY32C.js";
 export {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,

package/dist/index.d.ts

@@ -537,6 +537,7 @@ export declare function deleteWorkspaceIfQuiescent(db: Database, input: {
     accountId: string;
     workspaceId: string;
     observer?: WorkspaceDeleteObserver;
+    organizationAdministratorSubjectId?: string;
 }): Promise<DeleteWorkspaceIfQuiescentResult>;
 /** Claim a bounded cross-workspace batch after abandoned claims expire. */
 export declare function claimTemporalScheduleCleanups(db: Database, input: {
@@ -719,6 +720,7 @@ export type ModelCallFact = {
     totalTokens: number | null;
     pricedCostMicros: number;
     estimatedProviderCostMicros: number | null;
+    equivalentCreditCostMicros: number | null;
     pricingSource: "configured_list_price" | "gateway_reported" | null;
     contextContributions: readonly ModelContextContributionSummary[] | null;
     occurredAt: Date;
@@ -741,6 +743,7 @@ export declare function recordModelCallFact(db: Database, input: {
     billingPath: ModelCallBillingPath;
     pricedCostMicros: number;
     estimatedProviderCostMicros?: number | null;
+    equivalentCreditCostMicros?: number | null;
     pricingSource?: "configured_list_price" | "gateway_reported" | null;
     contextContributions?: readonly ModelContextContributionSummary[] | null;
     inputTokens?: number | null;
@@ -1377,6 +1380,7 @@ export type InstallPortableSkillInput = {
     sourcePath: string;
     name: string;
     description: string;
+    activationMode?: "workspace_managed" | "session_selected";
     category?: string;
     tags?: string[];
     provenance?: "platform" | "deployment" | "registry" | "workspace";
@@ -1415,6 +1419,7 @@ export type PortableSkillRuntime = {
     version: string;
     name: string;
     description: string;
+    activationMode: "workspace_managed" | "session_selected";
     sourceUrl: string;
     sourceCommit: string;
     sourcePath: string;
@@ -1890,8 +1895,14 @@ export declare function getCapabilityCatalogItem(db: Database, workspaceId: stri
  * immutable history.
  */
 export declare function installPortableSkill(db: Database, input: InstallPortableSkillInput): Promise<InstalledPortableSkill>;
-/** Return exact text artifacts for active authoritative Skill installations. */
-export declare function listInstalledPortableSkills(db: Database, workspaceId: string): Promise<PortableSkillRuntime[]>;
+/**
+ * Return exact text artifacts for active authoritative Skill installations.
+ * Session-selected Skills are excluded from ambient runtime resolution unless
+ * the caller is explicitly materializing one during session admission.
+ */
+export declare function listInstalledPortableSkills(db: Database, workspaceId: string, options?: {
+    includeSessionSelected?: boolean;
+}): Promise<PortableSkillRuntime[]>;
 /** Return secret-free lifecycle summaries from the authoritative Skill ledger. */
 export declare function listInstalledSkills(db: Database, workspaceId: string): Promise<InstalledSkillSummary[]>;
 export declare function getPortableSkillUninstallPreview(db: Database, workspaceId: string, capabilityId: string): Promise<PortableSkillUninstallPreview>;
@@ -3677,6 +3688,8 @@ export declare function setWorkspaceCodexSubscriptionModeInTransaction(scopedDb:
     workspaceId: string;
     subjectId: string | null;
     mode: WorkspaceCodexSubscriptionMode;
+    /** Effective source captured under the source lock before caller-owned credential writes. */
+    effectiveSourceBeforeMutation?: EffectiveCodexSubscriptionSource;
 }): Promise<WorkspaceCodexSubscriptionSource>;
 export declare function setWorkspaceCodexSubscriptionMode(db: Database, input: {
     accountId: string;
@@ -4902,6 +4915,8 @@ export type SessionCreateInput = {
     policyRole?: string | null;
     parentSessionId?: string | null;
     createIdempotencyKey?: string | null;
+    /** Exact explicit installed-Skill selection used for keyed-create replay. */
+    selectedInstalledSkillIds?: string[];
     sandboxGroupId?: string | null;
     sandboxOs?: SandboxOs;
     /** Exact accepted generated-session compaction policy; internal lifecycle callers only. */
@@ -4981,6 +4996,7 @@ export declare function getInitializedSessionCreateReplay(db: Database, input: {
     requestedSessionId?: string;
     visibility?: "user_private" | "workspace_shared";
     variableSetIds: string[];
+    selectedInstalledSkillIds: string[];
     initialPersonalResourceAttachmentIntent?: PersonalResourceAttachmentIntent | null;
     deferInitialTurn?: boolean;
 }): Promise<InitializedSessionCreateReplay | null>;
@@ -5425,6 +5441,8 @@ export type SessionEventPage = {
     events: SessionEvent[];
     hasMore: boolean;
     bytes: number;
+    /** True only when every full-mode event is the exact retained database row. */
+    fullPayloadsExact: boolean;
     direction: SessionEventReadDirection;
     coveredSequence: {
         first: number;
@@ -5437,10 +5455,12 @@ export type SessionEventPage = {
 export declare const SESSION_EVENT_DB_PAGE_MAX_BYTES: number;
 /**
  * Read one direction-aware session-event page. Full mode selects the canonical
- * row exactly; summary/none modes derive bounded monitoring projections in SQL
- * without rewriting the retained source. `bytes` is the exact UTF-8 size of
- * `JSON.stringify(events)`; `hasMore` is true whenever count or byte selection
- * stopped before the durable range ended.
+ * row exactly when it fits the page; an oversized historical row that predates
+ * the durable write guard is projected at the bounded database-read boundary
+ * when it would otherwise strand its cursor forever. Summary/none modes derive
+ * bounded monitoring projections in SQL without rewriting the retained source.
+ * `bytes` is the exact UTF-8 size of `JSON.stringify(events)`; `hasMore` is true
+ * whenever count or byte selection stopped before the durable range ended.
  */
 export declare function listSessionEventPage(db: Database, workspaceId: string, sessionId: string, options?: ListSessionEventPageOptions): Promise<SessionEventPage>;
 export declare function listSessionEvents(db: Database, workspaceId: string, sessionId: string): Promise<SessionEvent[]>;
@@ -6309,6 +6329,9 @@ export type AcquireLeaseResult = {
     role: "fenced";
     reason: "superseded" | "capture_in_progress" | "rotation_in_progress" | "provider_recovery_in_progress";
     lease: LeaseSnapshot;
+    /** Remaining durable capture budget from PostgreSQL's clock. Present only
+     * for an exact active capture; callers cap it at the lifecycle ceiling. */
+    captureRemainingMs?: number;
 };
 export type SandboxSharedPreparationSnapshot = {
     status: "running" | "completed" | "failed";
@@ -7066,6 +7089,16 @@ export declare function listSandboxViewerForceDrainWorkspaceIds(db: Database): P
 export declare function countQueuedTurns(db: Database): Promise<number>;
 export type SessionRecoveryBacklogState = "quiescence_missing" | "projection_stale";
 export declare function countSessionRecoveryBacklog(db: Database): Promise<Record<SessionRecoveryBacklogState, number>>;
+export type ContextCompactionPendingSummary = {
+    pendingCount: number;
+    oldestStartedAt: Date | null;
+};
+/**
+ * Content-free cross-workspace projection of exact active attempts whose latest
+ * automatic compaction landmark is still `started`. The trigger-maintained
+ * private ledger survives turn-worker loss without exposing tenant identities.
+ */
+export declare function getContextCompactionPendingSummary(db: Database): Promise<ContextCompactionPendingSummary>;
 export declare function countSandboxLeasesByLiveness(db: Database): Promise<Record<SandboxLeaseLiveness, number>>;
 export type CreditBalanceByAccount = {
     accountId: string;
@@ -7098,8 +7131,14 @@ export declare function confirmDrainCold(db: Database, input: {
 }>;
 export declare class SandboxWorkspaceMutationFencedError extends Error {
     readonly code: "attempt_fenced" | "holder_fenced" | "lease_fenced" | "rotation_in_progress" | "route_fenced" | "process_fenced" | "capture_in_progress" | "admission_fenced" | "operation_invalid" | "generation_exhausted" | "authority_unattributed" | "authority_revoked";
+    /** Remaining exact archive-capture budget projected by PostgreSQL. This is
+     * observational wait input only; it never licenses capture takeover. */
+    readonly captureRemainingMs: number | null;
     readonly name: string;
-    constructor(code: "attempt_fenced" | "holder_fenced" | "lease_fenced" | "rotation_in_progress" | "route_fenced" | "process_fenced" | "capture_in_progress" | "admission_fenced" | "operation_invalid" | "generation_exhausted" | "authority_unattributed" | "authority_revoked", message: string);
+    constructor(code: "attempt_fenced" | "holder_fenced" | "lease_fenced" | "rotation_in_progress" | "route_fenced" | "process_fenced" | "capture_in_progress" | "admission_fenced" | "operation_invalid" | "generation_exhausted" | "authority_unattributed" | "authority_revoked", message: string, 
+    /** Remaining exact archive-capture budget projected by PostgreSQL. This is
+     * observational wait input only; it never licenses capture takeover. */
+    captureRemainingMs?: number | null);
 }
 /** An operation named a durable retained process that has already reached a
  * terminal state. This remains a fence—the provider must not be called again
@@ -9757,10 +9796,13 @@ export type AddSessionSystemUpdateInput = {
     xaiProviderAccountAuthoritySnapshot?: XaiProviderAccountAuthoritySnapshotV1;
     scheduledTaskRunId?: string | null;
 } & SessionSystemUpdateInputVariant;
-export type AddSessionSystemUpdateResult = {
+export type AddSessionSystemUpdateResult<RequireIdleSession extends boolean = boolean> = {
     added: false;
     reason: "session_cancelled";
-} | {
+} | (RequireIdleSession extends true ? {
+    added: false;
+    reason: "session_not_idle";
+} : never) | {
     added: boolean;
     reason: "added" | "duplicate";
     update: SessionSystemUpdate;
@@ -9773,16 +9815,20 @@ export type AddSessionSystemUpdateResult = {
 export type PrepareSessionSystemUpdateSourceResult = {
     /** Private, bounded, content-free source authority appended before insert. */
     lineage?: Record<string, unknown>;
+    /** Source-owned events appended before the pending-update event. */
+    events?: SessionEvent[];
 };
-export declare function addSessionSystemUpdate(db: Database, input: AddSessionSystemUpdateInput): Promise<AddSessionSystemUpdateResult>;
+export declare function addSessionSystemUpdate(db: Database, input: AddSessionSystemUpdateInput): Promise<AddSessionSystemUpdateResult<false>>;
 /**
  * Persist one internal update without fabricating a user prompt or queue row.
  * Dedupe and any producer/outbox mutation commit in the same transaction.
  */
-export declare function addSessionSystemUpdateWithSourceMutation(db: Database, input: AddSessionSystemUpdateInput, mutateSource: (tx: Database, wakeEventId: string | null, updateId: string | null) => Promise<void>, options?: {
+export declare function addSessionSystemUpdateWithSourceMutation<RequireIdleSession extends boolean = false>(db: Database, input: AddSessionSystemUpdateInput, mutateSource: (tx: Database, wakeEventId: string | null, updateId: string | null, rejectionReason: "session_cancelled" | "session_not_idle" | null) => Promise<void>, options?: {
+    /** Admit only when the already-locked session is at its idle boundary. */
+    requireIdleSession?: RequireIdleSession;
     /** Runs under the locked session/source transaction before any update/event insert. */
     prepareSource?: (tx: Database, sessionId: string) => Promise<PrepareSessionSystemUpdateSourceResult | void>;
-}): Promise<AddSessionSystemUpdateResult>;
+}): Promise<AddSessionSystemUpdateResult<RequireIdleSession>>;
 /**
  * One durable machine input by id, under the ordinary workspace RLS scope.
  * The row outlives delivery, so a late bounded projection of an already
@@ -10002,3 +10048,4 @@ export * from "./organization-recovery.js";
 export * from "./session-tenancy.js";
 export * from "./governed-learning-activation.js";
 export * from "./automations.js";
+export * from "./organization-model-providers.js";