@opengeni/db 4.2.2 → 4.3.0-canary.0

package/dist/{chunk-FPTI4NP4.js → chunk-YGBOVXC7.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-B2KR3TEM.js";
+} from "./chunk-SGJDIF2D.js";
 
 // src/editable-artifacts.ts
 import { createHash } from "crypto";
@@ -3540,4 +3540,4 @@ export {
   PostgresEditableArtifactStore,
   PostgresEditableArtifactLiveReadStore
 };
-//# sourceMappingURL=chunk-FPTI4NP4.js.map
+//# sourceMappingURL=chunk-YGBOVXC7.js.map

package/dist/{chunk-6Y7ZDVJ5.js → chunk-YGRT6VZO.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-B2KR3TEM.js";
+} from "./chunk-SGJDIF2D.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-6Y7ZDVJ5.js.map
+//# sourceMappingURL=chunk-YGRT6VZO.js.map

package/dist/{chunk-6IQ4X35Y.js → chunk-YVYBAWBU.js}

@@ -152,6 +152,9 @@ var KNOWLEDGE_SOURCE_SYNC_LOCK_AUTHORITY_TABLES = [
 var MANAGED_HUMAN_PERSONAL_WORKSPACE_ROUTINE = "ensure_managed_human_personal_workspace(uuid, text, uuid)";
 var ADDITIONAL_ORGANIZATION_CREATION_ROUTINE = "create_additional_managed_organization(text, text, text, text, uuid)";
 var ORGANIZATION_MEMBERSHIP_LIFECYCLE_ROUTINES = [
+  "get_external_identity_link_reference(uuid, uuid, text)",
+  "get_external_identity_link_inventory_references(uuid, uuid[])",
+  "ensure_external_identity(uuid, text, text)",
   "list_self_organization_memberships(text)",
   "list_self_organization_invitations(text)",
   "list_self_organization_invitations(text, uuid, integer)",
@@ -721,6 +724,7 @@ var FORCE_RLS_TABLES = [
   "composer_drafts",
   "computer_session_associations",
   "computer_sessions",
+  "connect_attempts",
   "connection_disconnect_operations",
   "connection_use_audit_facts",
   "connection_use_once_consumption_receipts",
@@ -753,6 +757,10 @@ var FORCE_RLS_TABLES = [
   "editable_artifact_versions",
   "editable_artifacts",
   "enrollments",
+  "external_identities",
+  "external_identity_links",
+  "external_link_task_authorities",
+  "external_link_turn_authorities",
   "feedback_submissions",
   "file_uploads",
   "files",
@@ -770,6 +778,10 @@ var FORCE_RLS_TABLES = [
   "host_export_cursor_state",
   "host_export_dead_letters",
   "host_export_outbox",
+  "host_mcp_bindings",
+  "host_mcp_delegations",
+  "host_mcp_task_authorities",
+  "host_mcp_turn_authorities",
   "image_generation_operations",
   "import_batches",
   "integration_facet_binding_owners",
@@ -1077,6 +1089,7 @@ var RUNTIME_FULL_DML_TABLES = [
   "codex_subscription_credentials",
   "composer_drafts",
   "computer_session_associations",
+  "connect_attempts",
   "connection_disconnect_operations",
   "connections",
   "connector_action_policies",
@@ -1094,6 +1107,8 @@ var RUNTIME_FULL_DML_TABLES = [
   "generated_video_artifacts",
   "github_installation_repositories",
   "github_installations",
+  "host_mcp_bindings",
+  "host_mcp_delegations",
   "image_generation_operations",
   "import_batches",
   "integration_facet_binding_owners",
@@ -1252,9 +1267,13 @@ var RUNTIME_READ_INSERT_TABLES = [
   "editable_artifact_transactions",
   "editable_artifact_undo_claims",
   "editable_artifact_versions",
+  "external_link_task_authorities",
+  "external_link_turn_authorities",
   "feedback_submissions",
   "google_drive_object_acl_evidence",
   "google_drive_object_acl_principals",
+  "host_mcp_task_authorities",
+  "host_mcp_turn_authorities",
   "knowledge_change_proposals",
   "knowledge_claim_evidence",
   "knowledge_claim_relations",
@@ -1305,6 +1324,7 @@ var RUNTIME_READ_INSERT_UPDATE_TABLES = [
   "computer_sessions",
   "editable_artifact_session_links",
   "editable_artifacts",
+  "external_identity_links",
   "integration_facet_definitions",
   "integration_spec_revisions",
   "integration_tools",
@@ -1340,6 +1360,7 @@ var PROTECTED_NO_DIRECT_DML_TABLES = [
   "document_default_collection_backfill_runs",
   "editable_artifact_live_tickets",
   "editable_artifact_scope_authorization_heads",
+  "external_identities",
   "governed_learning_activation_receipts",
   "governed_learning_activation_undo_receipts",
   "governed_learning_decision_receipts",
@@ -2002,6 +2023,27 @@ function evaluateRuntimeDatabasePosture(posture, options) {
           );
         }
       }
+    } else if ([
+      "ensure_external_identity(uuid, text, text)",
+      "get_external_identity_link_reference(uuid, uuid, text)",
+      "get_external_identity_link_inventory_references(uuid, uuid[])"
+    ].includes(routine.name)) {
+      const names = routine.name !== "ensure_external_identity(uuid, text, text)" ? ["external_identity_links", "external_identities", "organization_memberships"] : [
+        "external_identities",
+        "organization_memberships",
+        "workspaces",
+        "workspace_inference_controls"
+      ];
+      const missing = names.filter((name) => !tableByName.has(name));
+      if (missing.length > 0) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} authority tables are missing: ${missing.join(", ")}`
+        );
+      } else if (names.some((name) => tableByName.get(name).owner !== routine.owner)) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} authority table owners do not match`
+        );
+      }
     } else if (routine.name === MANAGED_HUMAN_PERSONAL_WORKSPACE_ROUTINE) {
       const authorityTables = MANAGED_HUMAN_PERSONAL_WORKSPACE_AUTHORITY_TABLES.filter(
         (tableName) => tableByName.has(tableName)
@@ -3415,6 +3457,9 @@ async function grantAppRoleIfSchemaExists(sql2, role, schema) {
   const runtimeReadInsertUpdateTables = `ARRAY[${RUNTIME_READ_INSERT_UPDATE_TABLES.map(literal).join(", ")}]`;
   const workClaimCapabilityRoutines = `ARRAY[${WORK_CLAIM_CAPABILITY_ROUTINES.map(literal).join(", ")}]`;
   const organizationMembershipLifecycleRoutines = `ARRAY[${[
+    "ensure_external_identity(uuid,text,text)",
+    "get_external_identity_link_reference(uuid,uuid,text)",
+    "get_external_identity_link_inventory_references(uuid,uuid[])",
     "list_self_organization_memberships(text)",
     "list_self_organization_invitations(text)",
     "list_self_organization_invitations(text,uuid,integer)",
@@ -5237,4 +5282,4 @@ export {
   runtimeDatabaseReadyCheck,
   provisionRoles
 };
-//# sourceMappingURL=chunk-6IQ4X35Y.js.map
+//# sourceMappingURL=chunk-YVYBAWBU.js.map