@opengeni/db 3.7.4 → 3.8.2-canary.0

package/dist/{chunk-F6PBS6WE.js → chunk-HZV7O6JR.js}

@@ -4,7 +4,7 @@ import {
   sessions,
   workspaceSessionActivityRevisions,
   workspaces
-} from "./chunk-O56DM5GZ.js";
+} from "./chunk-53A2PEHT.js";
 
 // src/persistence-errors.ts
 var SQLSTATE_KEYS = ["sqlState", "sqlstate", "code"];
@@ -755,4 +755,4 @@ export {
   withAccountRls,
   dbBindingFor
 };
-//# sourceMappingURL=chunk-F6PBS6WE.js.map
+//# sourceMappingURL=chunk-HZV7O6JR.js.map

package/dist/{chunk-5NNCGFQY.js → chunk-RLQVPOVR.js}

@@ -5,7 +5,7 @@ import {
   withWorkspaceRls,
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls
-} from "./chunk-F6PBS6WE.js";
+} from "./chunk-HZV7O6JR.js";
 
 // src/session-tenancy.ts
 import { createHash } from "crypto";
@@ -481,4 +481,4 @@ export {
   forkSessionContent,
   replayAppliedSessionFork
 };
-//# sourceMappingURL=chunk-5NNCGFQY.js.map
+//# sourceMappingURL=chunk-RLQVPOVR.js.map

package/dist/{chunk-DZCYW2WT.js → chunk-UKOGHUGC.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-F6PBS6WE.js";
+} from "./chunk-HZV7O6JR.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-DZCYW2WT.js.map
+//# sourceMappingURL=chunk-UKOGHUGC.js.map

package/dist/{chunk-US4IS6IV.js → chunk-X6TO5HII.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-F6PBS6WE.js";
+} from "./chunk-HZV7O6JR.js";
 
 // src/editable-artifacts.ts
 import { createHash } from "crypto";
@@ -3540,4 +3540,4 @@ export {
   PostgresEditableArtifactStore,
   PostgresEditableArtifactLiveReadStore
 };
-//# sourceMappingURL=chunk-US4IS6IV.js.map
+//# sourceMappingURL=chunk-X6TO5HII.js.map

package/dist/{chunk-U4WPPEBH.js → chunk-Y53WEFYB.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-F6PBS6WE.js";
+} from "./chunk-HZV7O6JR.js";
 
 // src/canonical-human-identities.ts
 import { createHash } from "crypto";
@@ -309,4 +309,4 @@ export {
   getCanonicalHumanIdentityProjection,
   applyCanonicalHumanIdentityOperation
 };
-//# sourceMappingURL=chunk-U4WPPEBH.js.map
+//# sourceMappingURL=chunk-Y53WEFYB.js.map

package/dist/connection-token-resolver.d.ts

@@ -51,6 +51,8 @@ export type ConnectionStatusGuard = {
 export type ResolveConnectionCredentialResult = {
     status: "ok";
     headers: Record<string, string>;
+    /** Credential authority is owned by the embedding host, not the native connection store. */
+    authoritySource?: "host";
     /** Present when the credential bundle or embedding host supplied explicit placements. */
     placements?: ConnectionCredentialPlacement[];
     connectionId: string;
@@ -69,6 +71,8 @@ export type ResolveConnectionCredentialResult = {
     status: "auth_needed";
     reason: McpCredentialAuthNeededReason;
     providerDomain: string;
+    /** Credential authority is owned by the embedding host, not the native connection store. */
+    authoritySource?: "host";
     provider?: string;
     connectionId?: string;
     scopes?: string[];

package/dist/editable-artifact-durable-export.js

@@ -1,8 +1,8 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-F6PBS6WE.js";
-import "./chunk-O56DM5GZ.js";
+} from "./chunk-HZV7O6JR.js";
+import "./chunk-53A2PEHT.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/editable-artifact-durable-export.ts

package/dist/editable-artifacts.js

@@ -8,9 +8,9 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink
-} from "./chunk-US4IS6IV.js";
-import "./chunk-F6PBS6WE.js";
-import "./chunk-O56DM5GZ.js";
+} from "./chunk-X6TO5HII.js";
+import "./chunk-HZV7O6JR.js";
+import "./chunk-53A2PEHT.js";
 import "./chunk-PZ5AY32C.js";
 export {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,

package/dist/index.d.ts

@@ -68,6 +68,7 @@ export { memoryTextForStorage } from "./memory-domain.js";
 export { migrate, runMigrations } from "./migrate.js";
 export { provisionRoles, type ProvisionResult, type ProvisionRolesOptions, } from "./provision-roles.js";
 export * from "./memory-domain.js";
+export * from "./model-catalog.js";
 import { type Database, type SessionActivityDatabase } from "./database.js";
 export { createDb, registerDbBinding, retrySessionActivityRls, rlsContextForWorkspace, rlsStrategyFor, setRlsContext, setSubjectRlsContext, withAccountRls, withDatabaseStatementTimeout, withRlsContext, withSessionActivityRlsContext, withSessionActivitySavepoint, withWorkspaceRls, withWorkspaceSessionActivityRls, withWorkspaceSubjectRls, withWorkspaceSubjectSessionActivityRls, withWorkspaceUsageLock, withSandboxProviderReadLock, SandboxProviderReadLockUnavailableError, type CreateDbOptions, type Database, type DbClient, type SessionActivityDatabase, type RlsContext, type SessionRlsActorContext, type RlsStrategy, type SandboxProviderReadLockIdentity, type ManagedUserProfile, type UserLookup, type UserProfileLookup, } from "./database.js";
 export { withSessionRlsActorContext } from "./database.js";
@@ -536,6 +537,7 @@ export declare function deleteWorkspaceIfQuiescent(db: Database, input: {
     accountId: string;
     workspaceId: string;
     observer?: WorkspaceDeleteObserver;
+    organizationAdministratorSubjectId?: string;
 }): Promise<DeleteWorkspaceIfQuiescentResult>;
 /** Claim a bounded cross-workspace batch after abandoned claims expire. */
 export declare function claimTemporalScheduleCleanups(db: Database, input: {
@@ -718,6 +720,7 @@ export type ModelCallFact = {
     totalTokens: number | null;
     pricedCostMicros: number;
     estimatedProviderCostMicros: number | null;
+    equivalentCreditCostMicros: number | null;
     pricingSource: "configured_list_price" | "gateway_reported" | null;
     contextContributions: readonly ModelContextContributionSummary[] | null;
     occurredAt: Date;
@@ -740,6 +743,7 @@ export declare function recordModelCallFact(db: Database, input: {
     billingPath: ModelCallBillingPath;
     pricedCostMicros: number;
     estimatedProviderCostMicros?: number | null;
+    equivalentCreditCostMicros?: number | null;
     pricingSource?: "configured_list_price" | "gateway_reported" | null;
     contextContributions?: readonly ModelContextContributionSummary[] | null;
     inputTokens?: number | null;
@@ -849,6 +853,8 @@ export type CreateScheduledTaskInput = {
     variableSetId?: string | null;
     rigId?: string | null;
     metadata: Record<string, unknown>;
+    /** Trusted database-only admission seam. Throwing rolls the task creation back. */
+    beforeCreateCommit?: (tx: Database) => Promise<void>;
 };
 export type UpdateScheduledTaskInput = Partial<{
     name: string;
@@ -870,6 +876,8 @@ export type UpdateScheduledTaskInput = Partial<{
     authorityUpdatedBy: TurnInitiator;
     authorityUpdatedByContext: TurnInitiatorContext;
     authorityUpdatedByActor: AgentSessionCreationActor | null;
+    /** Trusted database-only admission seam. Throwing rolls the task update back. */
+    beforeUpdateCommit: (tx: Database) => Promise<void>;
 }>;
 export type CreatePackInstallationInput = {
     accountId: string;
@@ -992,6 +1000,43 @@ export type CreateConnectionInput = {
     createdBySubjectId?: string | null;
     updatedBySubjectId?: string | null;
 };
+type UpsertWorkspaceProviderApiKeyConnectionInput = {
+    accountId: string;
+    workspaceId: string;
+    operationId: string;
+    requestDigest: string;
+    credentialEncrypted: string;
+    grantedScopes?: string[];
+    expiresAt?: Date | null;
+    metadata?: Record<string, unknown>;
+    updatedBySubjectId: string;
+};
+type RotateWorkspaceProviderApiKeyConnectionInput = {
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    expectedVersion: number;
+    operationId: string;
+    requestDigest: string;
+    credentialEncrypted: string;
+    grantedScopes?: string[];
+    expiresAt?: Date | null;
+    metadata?: Record<string, unknown>;
+    updatedBySubjectId: string;
+};
+type RevokeWorkspaceProviderApiKeyConnectionsInput = {
+    accountId: string;
+    workspaceId: string;
+    connectionId: string;
+    expectedVersion: number;
+    updatedBySubjectId: string;
+};
+export type UpsertWorkspaceVercelAiGatewayConnectionInput = UpsertWorkspaceProviderApiKeyConnectionInput;
+export type RotateWorkspaceVercelAiGatewayConnectionInput = RotateWorkspaceProviderApiKeyConnectionInput;
+export type RevokeWorkspaceVercelAiGatewayConnectionsInput = RevokeWorkspaceProviderApiKeyConnectionsInput;
+export type UpsertWorkspaceOpenRouterConnectionInput = UpsertWorkspaceProviderApiKeyConnectionInput;
+export type RotateWorkspaceOpenRouterConnectionInput = RotateWorkspaceProviderApiKeyConnectionInput;
+export type RevokeWorkspaceOpenRouterConnectionsInput = RevokeWorkspaceProviderApiKeyConnectionsInput;
 export type UpdateConnectionInput = {
     workspaceId: string;
     connectionId: string;
@@ -1335,6 +1380,7 @@ export type InstallPortableSkillInput = {
     sourcePath: string;
     name: string;
     description: string;
+    activationMode?: "workspace_managed" | "session_selected";
     category?: string;
     tags?: string[];
     provenance?: "platform" | "deployment" | "registry" | "workspace";
@@ -1373,6 +1419,7 @@ export type PortableSkillRuntime = {
     version: string;
     name: string;
     description: string;
+    activationMode: "workspace_managed" | "session_selected";
     sourceUrl: string;
     sourceCommit: string;
     sourcePath: string;
@@ -1848,8 +1895,14 @@ export declare function getCapabilityCatalogItem(db: Database, workspaceId: stri
  * immutable history.
  */
 export declare function installPortableSkill(db: Database, input: InstallPortableSkillInput): Promise<InstalledPortableSkill>;
-/** Return exact text artifacts for active authoritative Skill installations. */
-export declare function listInstalledPortableSkills(db: Database, workspaceId: string): Promise<PortableSkillRuntime[]>;
+/**
+ * Return exact text artifacts for active authoritative Skill installations.
+ * Session-selected Skills are excluded from ambient runtime resolution unless
+ * the caller is explicitly materializing one during session admission.
+ */
+export declare function listInstalledPortableSkills(db: Database, workspaceId: string, options?: {
+    includeSessionSelected?: boolean;
+}): Promise<PortableSkillRuntime[]>;
 /** Return secret-free lifecycle summaries from the authoritative Skill ledger. */
 export declare function listInstalledSkills(db: Database, workspaceId: string): Promise<InstalledSkillSummary[]>;
 export declare function getPortableSkillUninstallPreview(db: Database, workspaceId: string, capabilityId: string): Promise<PortableSkillUninstallPreview>;
@@ -1886,6 +1939,15 @@ export declare function decryptedCapabilityHeaders(server: EnabledMcpCapabilityS
 export declare function getStoredCapabilityHeaderCiphertext(db: Database, workspaceId: string, capabilityId: string): Promise<Record<string, string> | null>;
 export declare function mcpServerIdForCapability(capabilityId: string, metadata?: Record<string, unknown>): string;
 export declare function createConnection(db: Database, input: CreateConnectionInput): Promise<ConnectionMetadataWithVerification>;
+/** Compatibility wrapper for the existing Vercel AI Gateway create/replay contract. */
+export declare function upsertWorkspaceVercelAiGatewayConnection(db: Database, input: UpsertWorkspaceVercelAiGatewayConnectionInput): Promise<ConnectionMetadataWithVerification | null>;
+export declare function upsertWorkspaceOpenRouterConnection(db: Database, input: UpsertWorkspaceOpenRouterConnectionInput): Promise<ConnectionMetadataWithVerification | null>;
+/** Compatibility wrapper for the existing Vercel AI Gateway rotation contract. */
+export declare function rotateWorkspaceVercelAiGatewayConnection(db: Database, input: RotateWorkspaceVercelAiGatewayConnectionInput): Promise<ConnectionMetadataWithVerification | null>;
+export declare function rotateWorkspaceOpenRouterConnection(db: Database, input: RotateWorkspaceOpenRouterConnectionInput): Promise<ConnectionMetadataWithVerification | null>;
+/** Compatibility wrapper for the existing Vercel AI Gateway revoke contract. */
+export declare function revokeWorkspaceVercelAiGatewayConnections(db: Database, input: RevokeWorkspaceVercelAiGatewayConnectionsInput): Promise<ConnectionMetadataWithVerification | null>;
+export declare function revokeWorkspaceOpenRouterConnections(db: Database, input: RevokeWorkspaceOpenRouterConnectionsInput): Promise<ConnectionMetadataWithVerification | null>;
 /**
  * Serialize one provider-principal/owner connection generation. Distinct OAuth
  * starts for the same principal converge on one row, while an explicit
@@ -2517,14 +2579,21 @@ export declare function loadConnectionCredentialForBroker(db: Database, settings
     allowSubjectOwned?: boolean;
     expectedAuthorityGeneration?: number;
 }): Promise<ConnectionCredentialForBroker | null>;
-export declare function workspaceVercelAiGatewayConnectionActive(db: Database, workspaceId: string): Promise<boolean>;
 /** Metadata-only capability revision input; never selects/decrypts the API key. */
 export declare function getWorkspaceVercelAiGatewayConnectionMetadata(db: Database, workspaceId: string): Promise<{
     connectionId: string;
     version: number;
 } | null>;
+export declare function getWorkspaceOpenRouterConnectionMetadata(db: Database, workspaceId: string): Promise<{
+    connectionId: string;
+    version: number;
+} | null>;
+export declare function workspaceVercelAiGatewayConnectionActive(db: Database, workspaceId: string): Promise<boolean>;
+export declare function workspaceOpenRouterConnectionActive(db: Database, workspaceId: string): Promise<boolean>;
 /** Resolve only the reviewed workspace-shared AI Gateway credential shape. */
 export declare function loadWorkspaceVercelAiGatewayApiKey(db: Database, settings: Settings, workspaceId: string): Promise<string | null>;
+/** Resolve only the reviewed workspace-shared OpenRouter credential shape. */
+export declare function loadWorkspaceOpenRouterApiKey(db: Database, settings: Settings, workspaceId: string): Promise<string | null>;
 /**
  * Worker-only immutable credential lease for an asynchronous video operation.
  * The operation copies the already-encrypted credential envelope before its
@@ -2753,6 +2822,11 @@ export declare function createScheduledTaskRun(db: Database, input: {
     scheduledAt?: Date | null;
     firedAt?: Date;
     acceptedExecutionSnapshot?: ScheduledTaskRunAcceptedExecutionType | null;
+    /**
+     * Trusted database-only admission seam for a fresh agent occurrence.
+     * Throwing rolls back the run insert; exact producer replay skips it.
+     */
+    beforeFreshAgentRunCommit?: (tx: Database) => Promise<void>;
 }): Promise<ScheduledTaskRun>;
 export declare function getScheduledTaskRunAcceptedExecution(db: Database, input: {
     workspaceId: string;
@@ -3614,6 +3688,8 @@ export declare function setWorkspaceCodexSubscriptionModeInTransaction(scopedDb:
     workspaceId: string;
     subjectId: string | null;
     mode: WorkspaceCodexSubscriptionMode;
+    /** Effective source captured under the source lock before caller-owned credential writes. */
+    effectiveSourceBeforeMutation?: EffectiveCodexSubscriptionSource;
 }): Promise<WorkspaceCodexSubscriptionSource>;
 export declare function setWorkspaceCodexSubscriptionMode(db: Database, input: {
     accountId: string;
@@ -4839,6 +4915,8 @@ export type SessionCreateInput = {
     policyRole?: string | null;
     parentSessionId?: string | null;
     createIdempotencyKey?: string | null;
+    /** Exact explicit installed-Skill selection used for keyed-create replay. */
+    selectedInstalledSkillIds?: string[];
     sandboxGroupId?: string | null;
     sandboxOs?: SandboxOs;
     /** Exact accepted generated-session compaction policy; internal lifecycle callers only. */
@@ -4858,7 +4936,9 @@ export type SessionCreateInput = {
     /** Trusted, transaction-local linkage run after the exact session row and
      * MCP metadata exist but before either can commit. It must perform database
      * work only; throwing rolls the complete create/replay transaction back. */
-    beforeCreateCommit?: (tx: Database, sessionId: string) => Promise<void>;
+    beforeCreateCommit?: (tx: Database, sessionId: string, context?: {
+        created: boolean;
+    }) => Promise<void>;
 };
 export declare function createSession(db: Database, input: SessionCreateInput): Promise<DbSession>;
 /**
@@ -4883,6 +4963,43 @@ export declare function createSessionWithIdempotencyKey(db: Database, input: Ses
     createIdempotencyKey: string;
 }): Promise<SessionCreateSuccessResult>;
 export declare function getSessionByCreateIdempotencyKey(db: Database, workspaceId: string, createIdempotencyKey: string): Promise<Session | null>;
+/**
+ * Recover a keyed create before mutable create dependencies (notably the
+ * current model catalog) are consulted. A fully initialized queued turn gets a
+ * fresh durable wake revision from persisted state only; an uninitialized shell
+ * returns its persisted model so the caller can reopen it strictly as retained
+ * while the canonical keyed transaction repairs initialization. The same
+ * request-identity checks as transactional create replay run before any session
+ * or committed denial is returned.
+ */
+export type InitializedSessionCreateReplay = {
+    outcome: "session";
+    session: Session & {
+        initialTurnId: string | null;
+    };
+    temporalWorkflowId: string;
+    workflowWakeRevision: number | null;
+    changed: boolean;
+} | {
+    outcome: "pending";
+    session: Session;
+} | {
+    outcome: "denied";
+    denial: SessionSpawnDenial;
+};
+export declare function getInitializedSessionCreateReplay(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string;
+    activeManagedHumanSubjectId?: string;
+    createIdempotencyKey: string;
+    requestedSessionId?: string;
+    visibility?: "user_private" | "workspace_shared";
+    variableSetIds: string[];
+    selectedInstalledSkillIds: string[];
+    initialPersonalResourceAttachmentIntent?: PersonalResourceAttachmentIntent | null;
+    deferInitialTurn?: boolean;
+}): Promise<InitializedSessionCreateReplay | null>;
 export declare function getSession(db: Database, workspaceId: string, sessionId: string): Promise<Session | null>;
 export type DeleteSessionTreeIfQuiescentResult = {
     status: "deleted";
@@ -5324,6 +5441,8 @@ export type SessionEventPage = {
     events: SessionEvent[];
     hasMore: boolean;
     bytes: number;
+    /** True only when every full-mode event is the exact retained database row. */
+    fullPayloadsExact: boolean;
     direction: SessionEventReadDirection;
     coveredSequence: {
         first: number;
@@ -5336,10 +5455,12 @@ export type SessionEventPage = {
 export declare const SESSION_EVENT_DB_PAGE_MAX_BYTES: number;
 /**
  * Read one direction-aware session-event page. Full mode selects the canonical
- * row exactly; summary/none modes derive bounded monitoring projections in SQL
- * without rewriting the retained source. `bytes` is the exact UTF-8 size of
- * `JSON.stringify(events)`; `hasMore` is true whenever count or byte selection
- * stopped before the durable range ended.
+ * row exactly when it fits the page; an oversized historical row that predates
+ * the durable write guard is projected at the bounded database-read boundary
+ * when it would otherwise strand its cursor forever. Summary/none modes derive
+ * bounded monitoring projections in SQL without rewriting the retained source.
+ * `bytes` is the exact UTF-8 size of `JSON.stringify(events)`; `hasMore` is true
+ * whenever count or byte selection stopped before the durable range ended.
  */
 export declare function listSessionEventPage(db: Database, workspaceId: string, sessionId: string, options?: ListSessionEventPageOptions): Promise<SessionEventPage>;
 export declare function listSessionEvents(db: Database, workspaceId: string, sessionId: string): Promise<SessionEvent[]>;
@@ -6208,6 +6329,9 @@ export type AcquireLeaseResult = {
     role: "fenced";
     reason: "superseded" | "capture_in_progress" | "rotation_in_progress" | "provider_recovery_in_progress";
     lease: LeaseSnapshot;
+    /** Remaining durable capture budget from PostgreSQL's clock. Present only
+     * for an exact active capture; callers cap it at the lifecycle ceiling. */
+    captureRemainingMs?: number;
 };
 export type SandboxSharedPreparationSnapshot = {
     status: "running" | "completed" | "failed";
@@ -6965,6 +7089,16 @@ export declare function listSandboxViewerForceDrainWorkspaceIds(db: Database): P
 export declare function countQueuedTurns(db: Database): Promise<number>;
 export type SessionRecoveryBacklogState = "quiescence_missing" | "projection_stale";
 export declare function countSessionRecoveryBacklog(db: Database): Promise<Record<SessionRecoveryBacklogState, number>>;
+export type ContextCompactionPendingSummary = {
+    pendingCount: number;
+    oldestStartedAt: Date | null;
+};
+/**
+ * Content-free cross-workspace projection of exact active attempts whose latest
+ * automatic compaction landmark is still `started`. The trigger-maintained
+ * private ledger survives turn-worker loss without exposing tenant identities.
+ */
+export declare function getContextCompactionPendingSummary(db: Database): Promise<ContextCompactionPendingSummary>;
 export declare function countSandboxLeasesByLiveness(db: Database): Promise<Record<SandboxLeaseLiveness, number>>;
 export type CreditBalanceByAccount = {
     accountId: string;
@@ -6997,8 +7131,14 @@ export declare function confirmDrainCold(db: Database, input: {
 }>;
 export declare class SandboxWorkspaceMutationFencedError extends Error {
     readonly code: "attempt_fenced" | "holder_fenced" | "lease_fenced" | "rotation_in_progress" | "route_fenced" | "process_fenced" | "capture_in_progress" | "admission_fenced" | "operation_invalid" | "generation_exhausted" | "authority_unattributed" | "authority_revoked";
+    /** Remaining exact archive-capture budget projected by PostgreSQL. This is
+     * observational wait input only; it never licenses capture takeover. */
+    readonly captureRemainingMs: number | null;
     readonly name: string;
-    constructor(code: "attempt_fenced" | "holder_fenced" | "lease_fenced" | "rotation_in_progress" | "route_fenced" | "process_fenced" | "capture_in_progress" | "admission_fenced" | "operation_invalid" | "generation_exhausted" | "authority_unattributed" | "authority_revoked", message: string);
+    constructor(code: "attempt_fenced" | "holder_fenced" | "lease_fenced" | "rotation_in_progress" | "route_fenced" | "process_fenced" | "capture_in_progress" | "admission_fenced" | "operation_invalid" | "generation_exhausted" | "authority_unattributed" | "authority_revoked", message: string, 
+    /** Remaining exact archive-capture budget projected by PostgreSQL. This is
+     * observational wait input only; it never licenses capture takeover. */
+    captureRemainingMs?: number | null);
 }
 /** An operation named a durable retained process that has already reached a
  * terminal state. This remains a fence—the provider must not be called again
@@ -7586,6 +7726,7 @@ export type SandboxRotationBacklog = {
     turnBlocked: number;
     directBlocked: number;
     processBlocked: number;
+    interactionBlocked: number;
 };
 export declare function readSandboxRotationBacklog(db: Database): Promise<SandboxRotationBacklog>;
 export type LegacyModalCheckpointSlot = {
@@ -8944,6 +9085,7 @@ export declare function materializeGoalContinuation(db: Database, input: {
         model: string;
         reasoningEffort: ReasoningEffort;
         latencyMode: LatencyMode;
+        turnExecutionPolicy?: TurnExecutionPolicyV1;
         tools: ToolRef[];
         sandboxBackend: SandboxBackend;
     };
@@ -9654,10 +9796,13 @@ export type AddSessionSystemUpdateInput = {
     xaiProviderAccountAuthoritySnapshot?: XaiProviderAccountAuthoritySnapshotV1;
     scheduledTaskRunId?: string | null;
 } & SessionSystemUpdateInputVariant;
-export type AddSessionSystemUpdateResult = {
+export type AddSessionSystemUpdateResult<RequireIdleSession extends boolean = boolean> = {
     added: false;
     reason: "session_cancelled";
-} | {
+} | (RequireIdleSession extends true ? {
+    added: false;
+    reason: "session_not_idle";
+} : never) | {
     added: boolean;
     reason: "added" | "duplicate";
     update: SessionSystemUpdate;
@@ -9670,16 +9815,20 @@ export type AddSessionSystemUpdateResult = {
 export type PrepareSessionSystemUpdateSourceResult = {
     /** Private, bounded, content-free source authority appended before insert. */
     lineage?: Record<string, unknown>;
+    /** Source-owned events appended before the pending-update event. */
+    events?: SessionEvent[];
 };
-export declare function addSessionSystemUpdate(db: Database, input: AddSessionSystemUpdateInput): Promise<AddSessionSystemUpdateResult>;
+export declare function addSessionSystemUpdate(db: Database, input: AddSessionSystemUpdateInput): Promise<AddSessionSystemUpdateResult<false>>;
 /**
  * Persist one internal update without fabricating a user prompt or queue row.
  * Dedupe and any producer/outbox mutation commit in the same transaction.
  */
-export declare function addSessionSystemUpdateWithSourceMutation(db: Database, input: AddSessionSystemUpdateInput, mutateSource: (tx: Database, wakeEventId: string | null, updateId: string | null) => Promise<void>, options?: {
+export declare function addSessionSystemUpdateWithSourceMutation<RequireIdleSession extends boolean = false>(db: Database, input: AddSessionSystemUpdateInput, mutateSource: (tx: Database, wakeEventId: string | null, updateId: string | null, rejectionReason: "session_cancelled" | "session_not_idle" | null) => Promise<void>, options?: {
+    /** Admit only when the already-locked session is at its idle boundary. */
+    requireIdleSession?: RequireIdleSession;
     /** Runs under the locked session/source transaction before any update/event insert. */
     prepareSource?: (tx: Database, sessionId: string) => Promise<PrepareSessionSystemUpdateSourceResult | void>;
-}): Promise<AddSessionSystemUpdateResult>;
+}): Promise<AddSessionSystemUpdateResult<RequireIdleSession>>;
 /**
  * One durable machine input by id, under the ordinary workspace RLS scope.
  * The row outlives delivery, so a late bounded projection of an already
@@ -9899,3 +10048,4 @@ export * from "./organization-recovery.js";
 export * from "./session-tenancy.js";
 export * from "./governed-learning-activation.js";
 export * from "./automations.js";
+export * from "./organization-model-providers.js";