@opengeni/db 4.0.0-canary.2 → 4.0.0-canary.4

package/dist/editable-artifact-durable-export.js

@@ -1,8 +1,8 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-XIYAXH47.js";
-import "./chunk-PWJJKCTF.js";
+} from "./chunk-GPKHEPVX.js";
+import "./chunk-WU3MSPZS.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/editable-artifact-durable-export.ts

package/dist/editable-artifacts.js

@@ -8,9 +8,9 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink
-} from "./chunk-L2QFSPFP.js";
-import "./chunk-XIYAXH47.js";
-import "./chunk-PWJJKCTF.js";
+} from "./chunk-DIFDLF2C.js";
+import "./chunk-GPKHEPVX.js";
+import "./chunk-WU3MSPZS.js";
 import "./chunk-PZ5AY32C.js";
 export {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,

package/dist/index.d.ts

@@ -10307,3 +10307,8 @@ export * from "./session-tenancy.js";
 export * from "./governed-learning-activation.js";
 export * from "./automations.js";
 export * from "./organization-model-providers.js";
+export { setWorkspacePauseTimerInTransaction, fireWorkspacePauseTimerInTransaction, } from "./session-control.js";
+export declare function listDueWorkspacePauseTimers(db: Database, limit?: number): Promise<{
+    workspace_id: string;
+    timer_id: string;
+}[]>;

package/dist/index.js

@@ -14,7 +14,7 @@ import {
   replayAppliedSessionFork,
   sessionTenancyProductActivated,
   transitionSessionVisibility
-} from "./chunk-B5Y3TCSP.js";
+} from "./chunk-3JGOYOWD.js";
 import {
   AgentCommandAuthorityError,
   CHILD_LIFECYCLE_DEDUPE_PREFIX,
@@ -27,6 +27,7 @@ import {
   TOOL_RESULT_TYPE_BY_CALL_TYPE,
   WORKSPACE_CONTROL_REQUEST_LOCK_TIMEOUT_MS,
   WorkspaceControlBusyError,
+  WorkspacePauseTimerInputError,
   assertAgentCommandAuthorityInTransaction,
   assertSessionAuthoritySnapshot,
   autoResumeSessionBranchInTransaction,
@@ -55,6 +56,7 @@ import {
   evaluateSessionControls,
   evaluateSessionDiscoveryControls,
   evaluateSessionWriteAdmissionControl,
+  fireWorkspacePauseTimerInTransaction,
   getCompletedSessionPromptCommandReceipt,
   historyCallId,
   historyItemType,
@@ -79,13 +81,14 @@ import {
   serializeEffectiveSessionControl,
   sessionAuthoritySnapshotMatchesSession,
   sessionAuthoritySnapshotsEqual,
+  setWorkspacePauseTimerInTransaction,
   settleClaimedConnectedMachineBackgroundCommandWithMutation,
   settleConnectedMachineSessionBackgroundCommandWithMutation,
   settleSessionBackgroundCommandForRetainedProcessInTransaction,
   updateSessionCommandReceiptResult,
   workspaceControlLockBudget,
   workspaceControlRequestLockTimeoutMs
-} from "./chunk-DUB3LUVM.js";
+} from "./chunk-R6LIJYG6.js";
 import {
   ACTIVE_VIDEO_GENERATION_STATUSES,
   VideoGenerationCapacityError,
@@ -117,7 +120,7 @@ import {
   settleVideoGenerationFailure,
   settleVideoGenerationReady,
   updateWorkspaceVideoGenerationPolicy
-} from "./chunk-CQF6G4IF.js";
+} from "./chunk-HUCU5BDD.js";
 import {
   ManagedAuthActorMutationInFlightError,
   ManagedAuthLoginSlotAlreadyExistsError,
@@ -140,7 +143,7 @@ import {
   reapManagedAuthIsolatedSessions,
   releaseManagedAuthActorMutationLease,
   validateManagedAuthActorMutationLease
-} from "./chunk-VU2IK37Y.js";
+} from "./chunk-OWZ36ST7.js";
 import {
   migrate,
   runMigrations
@@ -167,7 +170,7 @@ import {
   inspectRuntimeDatabasePosture,
   provisionRoles,
   runtimeDatabaseReadyCheck
-} from "./chunk-FRIYCNK2.js";
+} from "./chunk-SOLRMQCL.js";
 import {
   CanonicalHumanIdentityAuthorityError,
   CanonicalHumanIdentityConflictError,
@@ -181,7 +184,7 @@ import {
   getCanonicalHumanIdentityProjection,
   synchronizeCanonicalHumanLoginBindings,
   validateCanonicalHumanSession
-} from "./chunk-NPKBYGAK.js";
+} from "./chunk-CZXYNVEU.js";
 import {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,
   EDITABLE_ARTIFACT_KERNEL_TAIL_MAX_BYTES,
@@ -192,7 +195,7 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink
-} from "./chunk-L2QFSPFP.js";
+} from "./chunk-DIFDLF2C.js";
 import {
   SandboxProviderReadLockUnavailableError,
   SessionEventPersistenceError,
@@ -228,7 +231,7 @@ import {
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls,
   withWorkspaceUsageLock
-} from "./chunk-XIYAXH47.js";
+} from "./chunk-GPKHEPVX.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   LOSSLESS_JSON_STRING_PREFIX,
@@ -466,7 +469,7 @@ import {
   xaiRotationSettings,
   xaiSessionAccountPins,
   xaiSubscriptionCredentials
-} from "./chunk-PWJJKCTF.js";
+} from "./chunk-WU3MSPZS.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/index.ts
@@ -32894,6 +32897,12 @@ async function listWorkspaceArtifacts(db, workspaceId, options = {}) {
     const cursor = options.cursor ? decodeListCursor(options.cursor) : null;
     const visibility = and38(
       eq39(workspaceArtifacts.workspaceId, workspaceId),
+      ...options.sourceSessionId ? [
+        sql51`exists (select 1 from ${workspaceArtifactVersions} as published_version
+              where published_version.artifact_id = ${workspaceArtifacts.id}
+                and published_version.workspace_id = ${workspaceArtifacts.workspaceId}
+                and published_version.source_session_id = ${options.sourceSessionId}::uuid)`
+      ] : [],
       ...options.status ? [eq39(workspaceArtifacts.status, options.status)] : [],
       ...cursor ? [
         or9(
@@ -54685,7 +54694,7 @@ async function effectiveCodexCredentialPoolCondition(scopedDb, workspaceId) {
 async function lockOrganizationCodexSubscriptionSources(scopedDb, accountId) {
   const rows = await scopedDb.execute(sql68`
     select workspace_id
-    from list_organization_workspace_ids(${accountId}::uuid)
+    from list_organization_codex_workspace_ids(${accountId}::uuid)
     order by workspace_id
   `);
   const workspaceIds = rows.map((row) => row.workspace_id);
@@ -54720,9 +54729,6 @@ async function setWorkspaceCodexSubscriptionModeInTransaction(scopedDb, input) {
   if (current.accountId !== input.accountId) {
     throw new Error("Codex source account does not match the workspace account");
   }
-  if (current.workspaceKind === "personal" && input.mode !== "automatic") {
-    throw new Error("personal workspaces always use workspace Codex subscriptions");
-  }
   const effectiveSourceBeforeMutation = input.effectiveSourceBeforeMutation ?? current.effectiveSource;
   let next = current;
   if (current.mode !== input.mode) {
@@ -56367,7 +56373,7 @@ async function wakeOrganizationCodexCapacityWaitersInTransaction(tx, input) {
   const wakeTargets = [];
   await setRlsContext(tx, { accountId: input.accountId, workspaceId: null });
   const workspaceRows = await tx.execute(sql68`
-    select workspace_id from list_organization_workspace_ids(${input.accountId}::uuid)
+    select workspace_id from list_organization_codex_workspace_ids(${input.accountId}::uuid)
     order by workspace_id
   `);
   for (const { workspace_id: workspaceId } of workspaceRows) {
@@ -88827,6 +88833,13 @@ async function workspaceControlProjection(db, workspaceId) {
     const [control] = await scopedDb.select().from(workspaceInferenceControls).where(eq53(workspaceInferenceControls.workspaceId, workspaceId)).limit(1);
     if (!control) throw new Error(`Workspace ${workspaceId} has no inference control`);
     return {
+      timer: control.timerId ? {
+        id: control.timerId,
+        action: control.timerAction,
+        dueAt: control.timerDueAt.toISOString(),
+        pauseForSeconds: control.timerPauseForSeconds
+      } : null,
+      serverTime: (/* @__PURE__ */ new Date()).toISOString(),
       state: control.workspaceState,
       revision: Number(control.revision),
       reason: control.reason,
@@ -89301,6 +89314,12 @@ async function fetchCodexRateLimitResetCreditsForAccount2(db, settings, workspac
 function buildConnectionTokenResolver2(db, settings, deps = connectionBrokerDeps(), options = {}) {
   return buildConnectionTokenResolver(db, settings, deps, options);
 }
+async function listDueWorkspacePauseTimers(db, limit = 100) {
+  return await rawRows(
+    db,
+    sql68`select * from opengeni_private.list_due_workspace_pause_timers(${limit})`
+  );
+}
 export {
   ACTIVE_SESSION_HISTORY_MAX_JSON_BYTES,
   ACTIVE_SESSION_HISTORY_MAX_JSON_NODES,
@@ -89620,6 +89639,7 @@ export {
   WorkspaceMemberManagementError,
   WorkspaceOpenRouterCustomModelHistoryLimitError,
   WorkspaceOpenRouterCustomModelLimitError,
+  WorkspacePauseTimerInputError,
   XAI_CREDENTIAL_LEASE_TTL_MS,
   abandonCodexResetRedemptionBeforeProvider,
   abandonRecordingForTurnAttempt,
@@ -90114,6 +90134,7 @@ export {
   findCompletedImportBatch,
   findComputerSessionControlRecordByOperation,
   findWorkspaceByExternalIdentity,
+  fireWorkspacePauseTimerInTransaction,
   flushSessionRealtimeTranscriptTailInTransaction,
   forceDrainOverLimitViewerOnlyBoxes,
   forkSessionContent,
@@ -90428,6 +90449,7 @@ export {
   listDistinctRigVersionIdsInGroup,
   listDistinctVariableSetIdsInGroup,
   listDistinctVariableSetSelectionsInGroup,
+  listDueWorkspacePauseTimers,
   listEditableArtifactIdsForSession,
   listEligibleKnowledgeClaims,
   listEnabledMcpCapabilityServerIds,
@@ -90979,6 +91001,7 @@ export {
   setWorkspaceCodexSubscriptionModeInTransaction,
   setWorkspaceDefaultRig,
   setWorkspaceEnvironmentVariable,
+  setWorkspacePauseTimerInTransaction,
   setXaiSessionAccountPin,
   settleAutomationRun,
   settleBrowserDownloadSaveFailure,