@opengeni/db 4.0.0-canary.0 → 4.0.0-canary.2

package/dist/{chunk-MX6V5F65.js → chunk-VU2IK37Y.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-UFAMOUWL.js";
+} from "./chunk-XIYAXH47.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-MX6V5F65.js.map
+//# sourceMappingURL=chunk-VU2IK37Y.js.map

package/dist/{chunk-UFAMOUWL.js → chunk-XIYAXH47.js}

@@ -4,7 +4,7 @@ import {
   sessions,
   workspaceSessionActivityRevisions,
   workspaces
-} from "./chunk-QM6YOWHZ.js";
+} from "./chunk-PWJJKCTF.js";
 
 // src/persistence-errors.ts
 var SQLSTATE_KEYS = ["sqlState", "sqlstate", "code"];
@@ -755,4 +755,4 @@ export {
   withAccountRls,
   dbBindingFor
 };
-//# sourceMappingURL=chunk-UFAMOUWL.js.map
+//# sourceMappingURL=chunk-XIYAXH47.js.map

package/dist/editable-artifact-durable-export.js

@@ -1,8 +1,8 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-UFAMOUWL.js";
-import "./chunk-QM6YOWHZ.js";
+} from "./chunk-XIYAXH47.js";
+import "./chunk-PWJJKCTF.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/editable-artifact-durable-export.ts

package/dist/editable-artifacts.js

@@ -8,9 +8,9 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink
-} from "./chunk-RZNOSEMC.js";
-import "./chunk-UFAMOUWL.js";
-import "./chunk-QM6YOWHZ.js";
+} from "./chunk-L2QFSPFP.js";
+import "./chunk-XIYAXH47.js";
+import "./chunk-PWJJKCTF.js";
 import "./chunk-PZ5AY32C.js";
 export {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,

package/dist/index.d.ts

@@ -601,6 +601,13 @@ export declare function revokeOrganizationApiKey(db: Database, accountId: string
 export declare function findActiveApiKeyByHash(db: Database, keyHash: string): Promise<(ApiKey & {
     credentialKind: schema.ApiKeyCredentialKind;
 }) | null>;
+export declare function findActiveWorkspaceApiKeyById(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    apiKeyId: string;
+}): Promise<(ApiKey & {
+    credentialKind: schema.ApiKeyCredentialKind;
+}) | null>;
 export type GitHubInstallation = {
     id: string;
     accountId: string;
@@ -2791,7 +2798,9 @@ export declare function requireScheduledTaskTargetInTransaction(tx: Database, in
     taskId: string;
     targetSessionId: string;
 }): Promise<void>;
-export declare function listScheduledTasks(db: Database, workspaceId: string, limit?: number, offset?: number): Promise<ScheduledTask[]>;
+/** Authoritative current targets, batched after session visibility has been resolved. */
+export declare function scheduledSessionIds(db: Database, workspaceId: string, sessionIds: string[]): Promise<Set<string>>;
+export declare function listScheduledTasks(db: Database, workspaceId: string, limit?: number, offset?: number, sessionId?: string): Promise<ScheduledTask[]>;
 /**
  * Internal connector-control traversal. Keep the whole keyset walk on one
  * repeatable-read snapshot so task creation/update performed after discovery
@@ -4374,6 +4383,11 @@ export type ReconcileXaiCapacityWaitResult = {
     waiter: XaiCapacityWait | null;
     events: SessionEvent[];
 };
+export declare function resolveXaiWaiterSubject(db: Database, workspaceId: string, sessionId: string): Promise<{
+    subjectId: string;
+    snapshot: XaiProviderAccountAuthoritySnapshotV1;
+    turnId: string;
+} | null>;
 /**
  * Atomically close one exact xAI attempt and preserve its logical turn behind a
  * durable provider-capacity waiter. The immutable authority snapshot and, for
@@ -4837,7 +4851,7 @@ export type ConnectorActionInvocation = {
     serverId: string;
     toolName: string;
     arguments: unknown;
-    /** Explicit per-session MCP approval, rather than a connector-policy decision. */
+    /** Explicit per-session approval or capability-authorized mutation ledger mode. */
     approvalMode?: "session_mcp" | "connector_write";
 };
 export type PrepareConnectorActionApprovalResult = {
@@ -4874,7 +4888,7 @@ type ResolvedConnectorActionPolicy = {
     managed: true;
     source: "explicit";
     entry: null;
-    decision: "ask";
+    decision: "allow" | "ask";
     actionName: string;
 } | {
     managed: true;
@@ -4889,7 +4903,7 @@ export declare function resolveConnectorActionPolicy(snapshot: readonly Connecto
     toolName: string;
     actionName: string;
 }): ResolvedConnectorActionPolicy;
-export declare function upsertConnectorActionPolicy(db: Database, input: {
+export type ConnectorActionPolicyWrite = {
     accountId: string;
     workspaceId: string;
     subjectId: string;
@@ -4898,10 +4912,20 @@ export declare function upsertConnectorActionPolicy(db: Database, input: {
     toolName: string;
     actionName: string;
     policy: ConnectorActionPolicyDecision;
-}): Promise<{
+};
+export declare function upsertConnectorActionPolicies(db: Database, inputs: readonly ConnectorActionPolicyWrite[]): Promise<Array<{
+    policy: typeof schema.connectorActionPolicies.$inferSelect;
+    changed: boolean;
+}>>;
+export declare function upsertConnectorActionPolicy(db: Database, input: ConnectorActionPolicyWrite): Promise<{
     policy: typeof schema.connectorActionPolicies.$inferSelect;
     changed: boolean;
 }>;
+export declare function listConnectorActionPolicies(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    connectionIds: readonly string[];
+}): Promise<ConnectorActionPolicySnapshotEntry[]>;
 /**
  * Install a risk-appropriate connector default without overwriting an explicit
  * user choice that already exists for the same immutable connector action.
@@ -5139,6 +5163,8 @@ export type SessionListSnapshotCursor = {
     parentSessionFilter: string;
     search: string | null;
     archiveMode: "active" | "archived";
+    /** Additive filter identity; absent on legacy snapshot cursors. */
+    filter?: string;
 };
 export type SessionListKeysetCursor = {
     kind: "keyset";
@@ -5150,9 +5176,28 @@ export type SessionListKeysetCursor = {
     parentSessionFilter: string;
     search: string | null;
     archiveMode: "active" | "archived";
+    /** Canonical identity for channel, creator, and time-bound filters. */
+    filter?: string;
 };
 export type SessionListCursor = SessionListSnapshotCursor | SessionListKeysetCursor;
-export type ListSessionsForSubjectOptions = ListSessionsOptions & {
+export type SessionListFilterOptions = {
+    /** Exact workspace project; null selects unfiled sessions. */
+    channelId?: string | null;
+    /** Exact frozen creator identity. */
+    createdBy?: {
+        kind: "subject" | "service";
+        subjectId: string;
+    };
+    /** Inclusive activity lower bound. */
+    updatedFrom?: Date;
+    /** Exclusive activity upper bound. */
+    updatedBefore?: Date;
+    /** Inclusive creation lower bound. */
+    createdFrom?: Date;
+    /** Exclusive creation upper bound. */
+    createdBefore?: Date;
+};
+export type ListSessionsForSubjectOptions = ListSessionsOptions & SessionListFilterOptions & {
     subjectId: string;
     cursor?: SessionListCursor | undefined;
     search?: string | undefined;
@@ -5675,8 +5720,14 @@ export declare function adoptConnectedMachineSessionBackgroundCommand(db: Databa
     cancelRequestedAt: string | null;
     exitCode: number | null;
     settlementReason: string | null;
+    failure?: {
+        code: string;
+        detail?: Record<string, string> | undefined;
+        retryable: false;
+    } | undefined;
     startedAt: string;
     settledAt: string | null;
+    completionObservedAt?: string | null | undefined;
     updatedAt: string;
 }>;
 /** Transfer one exact managed retained process from a live turn attempt to its
@@ -5703,8 +5754,14 @@ export declare function adoptManagedSessionBackgroundCommand(db: Database, input
     cancelRequestedAt: string | null;
     exitCode: number | null;
     settlementReason: string | null;
+    failure?: {
+        code: string;
+        detail?: Record<string, string> | undefined;
+        retryable: false;
+    } | undefined;
     startedAt: string;
     settledAt: string | null;
+    completionObservedAt?: string | null | undefined;
     updatedAt: string;
 }>;
 export type InstallOrReadTurnExecutionPolicyForAttemptResult = {
@@ -9080,7 +9137,7 @@ export type SetSessionGoalStatusEvent = {
     rationale?: string;
 } | {
     type: "goal.resumed";
-    actor: "api";
+    actor: "api" | "agent";
 };
 /** Status mutation and its timeline fact share the same session-first commit. */
 export declare function setSessionGoalStatusWithEvent(db: Database, workspaceId: string, sessionId: string, input: {
@@ -9397,6 +9454,9 @@ export declare function reconcileSessionAttemptQuiescence(db: Database, input: {
 export declare function settleSessionAttemptInterruptions(db: Database, workspaceId: string, sessionId: string, attemptId: string): Promise<SessionAttemptInterruptionSettlement>;
 export type SessionWorkPeek = {
     kind: "runnable";
+} | {
+    kind: "sandbox-lifecycle-wait";
+    ref: SandboxLifecycleWait;
 } | {
     kind: "approval-pending";
     triggerEventId: string;
@@ -9456,6 +9516,11 @@ export type FailSessionWorkBeforeAttemptClaimInput = {
     workflowId: string;
     trigger: SessionWorkTrigger;
     error: string;
+    /** Already-classified admission facts from the failed worker activity. */
+    admissionFailure?: {
+        disposition: "retryable" | "permanent";
+        code: "db_deadlock" | "db_serialization_failure" | "db_failure" | "claim_invariant";
+    };
 };
 export type FailSessionWorkBeforeAttemptClaimResult = {
     action: "failed";
@@ -9470,6 +9535,27 @@ export type FailSessionWorkBeforeAttemptClaimResult = {
     turnId: null;
     events: [];
 };
+export type RecoverSessionWorkFailedBeforeAttemptClaimInput = {
+    accountId: string;
+    sessionId: string;
+    workflowId: string;
+    operationId: string;
+    expectedFailureEventSequence: number;
+    expectedLastSequence: number;
+    failedUpdateIds: string[];
+};
+export type RecoverSessionWorkFailedBeforeAttemptClaimResult = {
+    action: "recovered";
+    event: SessionEvent;
+    workflowWakeRevision: number;
+    restoredUpdateIds: string[];
+} | {
+    action: "already_recovered";
+    event: SessionEvent;
+} | {
+    action: "stale";
+    event: null;
+};
 /**
  * Terminally settle a permanent admission failure that happened before an
  * attempt row existed. The workflow supplies the exact trigger recorded in
@@ -9479,6 +9565,17 @@ export type FailSessionWorkBeforeAttemptClaimResult = {
  * fabricated because provider/tool execution never started.
  */
 export declare function failSessionWorkBeforeAttemptClaim(db: Database, workspaceId: string, input: FailSessionWorkBeforeAttemptClaimInput): Promise<FailSessionWorkBeforeAttemptClaimResult>;
+/**
+ * Repair the exact terminal shape written by an older worker after a
+ * session-level pre-claim database failure. This is deliberately narrower than
+ * Resume: it accepts only a failed session with no live turn/attempt, an exact
+ * root-session `pre_claim_failure` status event with no turn association, and
+ * the caller-named complete set of undelivered failed child updates durably
+ * tied to that failure epoch whose frozen parent turns still carry human
+ * authority. The restored updates, audit event, runnable session state, and
+ * signal-with-start wake commit atomically.
+ */
+export declare function recoverSessionWorkFailedBeforeAttemptClaim(db: Database, workspaceId: string, input: RecoverSessionWorkFailedBeforeAttemptClaimInput): Promise<RecoverSessionWorkFailedBeforeAttemptClaimResult>;
 /**
  * Commit the workflow's terminal-for-now idle decision and its parent delivery
  * source in one transaction. A crash after commit leaves a pending outbox row for
@@ -9489,6 +9586,7 @@ export declare function settleSessionIdleWithParentOutbox(db: Database, workspac
     action: "settled";
     changed: boolean;
     episodeKey: string;
+    notifyParent: boolean;
     events: SessionEvent[];
 } | {
     action: "stale";
@@ -9497,6 +9595,12 @@ export declare function settleSessionIdleWithParentOutbox(db: Database, workspac
 }>;
 export declare function buildChildCompletionDigest(summaries: string[], trailing: string): string;
 export declare function setTemporalWorkflowId(db: Database, workspaceId: string, sessionId: string, workflowId: string): Promise<void>;
+export type SandboxLifecycleWait = {
+    version: 1;
+    sandboxGroupId: string;
+    leaseEpoch: number;
+    reason: "rotation_in_progress";
+};
 type SessionTurnRecordingSettlementBase = {
     recordingId: string;
     producerId?: string | null;
@@ -9680,6 +9784,7 @@ export type RequestSessionTurnRecoveryInput = {
     attemptId: string;
     reason: string;
     detail?: Record<string, unknown>;
+    sandboxLifecycleWait?: SandboxLifecycleWait;
     providerRecoveryCount?: number;
     fromStatuses?: SessionTurnStatus[];
     providerArtifactInvalidation?: {
@@ -9960,6 +10065,7 @@ export type SessionBackgroundCommandTerminalSettlement = {
     events: SessionEvent[];
 };
 export declare function settleConnectedMachineSessionBackgroundCommand(db: Database, input: {
+    failure?: SessionBackgroundCommand["failure"];
     accountId: string;
     workspaceId: string;
     sessionId: string;