@opengeni/db 3.7.4 → 4.0.0-canary.0

package/dist/{chunk-US4IS6IV.js → chunk-RZNOSEMC.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-F6PBS6WE.js";
+} from "./chunk-UFAMOUWL.js";
 
 // src/editable-artifacts.ts
 import { createHash } from "crypto";
@@ -3540,4 +3540,4 @@ export {
   PostgresEditableArtifactStore,
   PostgresEditableArtifactLiveReadStore
 };
-//# sourceMappingURL=chunk-US4IS6IV.js.map
+//# sourceMappingURL=chunk-RZNOSEMC.js.map

package/dist/{chunk-F6PBS6WE.js → chunk-UFAMOUWL.js}

@@ -4,7 +4,7 @@ import {
   sessions,
   workspaceSessionActivityRevisions,
   workspaces
-} from "./chunk-O56DM5GZ.js";
+} from "./chunk-QM6YOWHZ.js";
 
 // src/persistence-errors.ts
 var SQLSTATE_KEYS = ["sqlState", "sqlstate", "code"];
@@ -755,4 +755,4 @@ export {
   withAccountRls,
   dbBindingFor
 };
-//# sourceMappingURL=chunk-F6PBS6WE.js.map
+//# sourceMappingURL=chunk-UFAMOUWL.js.map

package/dist/codemode-operations.d.ts

@@ -48,6 +48,11 @@ export type ClaimCodemodeOperationResult = {
     status: "claimed";
     operation: CodemodeOperationValue;
     claimId: string;
+    reclaimed: boolean;
+} | {
+    status: "execution_owner_lost";
+    operation: CodemodeOperationValue;
+    claimId: string;
 } | {
     status: "already_running" | "terminal";
     operation: CodemodeOperationValue;

package/dist/codex-token-resolver.d.ts

@@ -52,6 +52,10 @@ type CodexCredentialStatusTarget = {
     id: string;
     version: number;
 };
+export type CodexCredentialTokenSnapshot = CodexTokenSnapshot & {
+    /** Exact credential-row version whose bearer is about to reach the provider. */
+    credentialVersion: number;
+};
 export type CodexTokenDeadlineClock = {
     setTimeout: (callback: () => void, delayMs: number) => ReturnType<typeof globalThis.setTimeout>;
     clearTimeout: (handle: ReturnType<typeof globalThis.setTimeout>) => void;
@@ -79,8 +83,8 @@ export type CodexAuthDeps = {
     recordUsage?: (db: Database, workspaceId: string, credentialId: string, snapshot: CodexAccountUsageSnapshot) => Promise<boolean>;
 };
 export declare function buildCodexTokenResolver(db: Database, settings: Settings, workspaceId: string, credentialId: string, deps: CodexAuthDeps): {
-    getToken: () => Promise<CodexTokenSnapshot>;
-    refresh: () => Promise<CodexTokenSnapshot>;
+    getToken: () => Promise<CodexCredentialTokenSnapshot>;
+    refresh: () => Promise<CodexCredentialTokenSnapshot>;
 };
 /**
  * THE single per-account usage path both the api route and an (optional) worker

package/dist/connection-token-resolver.d.ts

@@ -51,6 +51,8 @@ export type ConnectionStatusGuard = {
 export type ResolveConnectionCredentialResult = {
     status: "ok";
     headers: Record<string, string>;
+    /** Credential authority is owned by the embedding host, not the native connection store. */
+    authoritySource?: "host";
     /** Present when the credential bundle or embedding host supplied explicit placements. */
     placements?: ConnectionCredentialPlacement[];
     connectionId: string;
@@ -69,6 +71,8 @@ export type ResolveConnectionCredentialResult = {
     status: "auth_needed";
     reason: McpCredentialAuthNeededReason;
     providerDomain: string;
+    /** Credential authority is owned by the embedding host, not the native connection store. */
+    authoritySource?: "host";
     provider?: string;
     connectionId?: string;
     scopes?: string[];
@@ -89,6 +93,10 @@ export type ResolveConnectionCredentialInput = {
     /** Defaults to header-only MCP transport. */
     credentialTarget?: "mcp" | "http_api";
     forceRefresh?: boolean;
+    /** Internal lookup mode. Preflight must not refresh credentials or record provider usage. */
+    credentialResolutionMode?: "execution" | "preflight";
+    /** Frozen provider authority generation captured by the calling integration/catalog. */
+    expectedAuthorityGeneration?: number;
     /** Exact immutable accepted-work authority; never credential-bearing. */
     connectionUseAuthority?: unknown;
     /** Exact accepted attempt plus one stable physical-provider request id. */

package/dist/editable-artifact-durable-export.js

@@ -1,8 +1,8 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-F6PBS6WE.js";
-import "./chunk-O56DM5GZ.js";
+} from "./chunk-UFAMOUWL.js";
+import "./chunk-QM6YOWHZ.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/editable-artifact-durable-export.ts

package/dist/editable-artifacts.js

@@ -8,9 +8,9 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink
-} from "./chunk-US4IS6IV.js";
-import "./chunk-F6PBS6WE.js";
-import "./chunk-O56DM5GZ.js";
+} from "./chunk-RZNOSEMC.js";
+import "./chunk-UFAMOUWL.js";
+import "./chunk-QM6YOWHZ.js";
 import "./chunk-PZ5AY32C.js";
 export {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,

package/dist/generated-images.d.ts

@@ -89,10 +89,25 @@ export declare function beginImageGenerationOperation(db: Database, input: {
     workspaceId: string;
     operationId: string;
     operationKey: string;
+    providerBindingHash: string;
+    expectedArtifactId: string;
 }): Promise<{
     operation: ImageGenerationOperation;
     started: boolean;
 }>;
+/**
+ * Return a paid-operation row to its retryable prepared state when a durable
+ * provider-dispatch fence rejected before any provider request was admitted.
+ * This is intentionally narrower than outcome reconciliation: a caller must
+ * prove the provider boundary was never crossed before using this transition.
+ */
+export declare function resetImageGenerationOperationBeforeProviderDispatch(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    operationId: string;
+    operationKey: string;
+    error: string;
+}): Promise<ImageGenerationOperation>;
 export declare function markImageGenerationOperationOutcomeUnknown(db: Database, input: {
     accountId: string;
     workspaceId: string;