@opengeni/db 4.2.2 → 4.3.0-canary.0

package/dist/index.d.ts

@@ -4,8 +4,16 @@ export * from "./model-connection-access.js";
 import { type BundledSkillId } from "@opengeni/contracts";
 import { type SkillSourceReleaseReceipt } from "./skill-source-release.js";
 import type { SkillActor, SkillWriteReceipt } from "@opengeni/contracts";
+import { type HostMcpCreateSelection } from "./host-selection-identity.js";
+export * from "./connect-attempts.js";
+export * from "./external-identities.js";
+export * from "./external-identity-links.js";
+export * from "./connection-setup-authority.js";
+export * from "./external-link-work.js";
+export * from "./host-mcp-bindings.js";
+export * from "./host-mcp-task-authority.js";
 import { type ChildLifecycleSystemUpdateKind, type ChildRequiresActionRespondedByKind, SessionGoalSnapshot } from "@opengeni/contracts";
-import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, AttemptToolResult, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, ManagedOrganizationMembershipProjection, WorkspaceMemberCandidate, McpPersonalConnectionDelegation, ModelContextContributionSummary, Permission, PersonalResourceAttachmentIntent, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAction, ScheduledTaskActionKind, KnowledgeSourceSyncAction, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunAcceptedExecution as ScheduledTaskRunAcceptedExecutionType, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, SlackInstallationBinding, Session, SessionAgentAccess, SessionAgentAccessViewer, SessionAuthorizationListScope, SessionEndUser, SessionMemoryScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalChangeKind, SessionGoalCreatedBy, SessionGoalMutationPolicy, SessionGoalRevision, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionBackgroundCommand, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetSecret, VariableSetVariableMetadata, WorkspaceMember, WorkspaceMemoryPromptMode, WorkspaceRegisteredPack, Channel, Rig, RigProviderImage, RigProviderImages, RigVersion, RigVerificationHealth, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding, SandboxProviderContinuityRecovery, WorkClaimSubjectFilter, WorkDiscoveryProjection } from "@opengeni/contracts";
+import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, AttemptToolResult, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, ManagedOrganizationMembershipProjection, WorkspaceMemberCandidate, McpPersonalConnectionDelegation, ModelContextContributionSummary, Permission, PersonalResourceAttachmentIntent, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAction, ScheduledTaskActionKind, KnowledgeSourceSyncAction, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunAcceptedExecution as ScheduledTaskRunAcceptedExecutionType, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, SlackInstallationBinding, Session, SessionAgentAccess, SessionAgentAccessViewer, SessionAuthorizationListScope, SessionScopeSubjectId, SessionMemoryScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalChangeKind, SessionGoalCreatedBy, SessionGoalMutationPolicy, SessionGoalRevision, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionBackgroundCommand, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetSecret, VariableSetVariableMetadata, WorkspaceMember, WorkspaceMemoryPromptMode, WorkspaceRegisteredPack, Channel, Rig, RigProviderImage, RigProviderImages, RigVersion, RigVerificationHealth, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding, SandboxProviderContinuityRecovery, WorkClaimSubjectFilter, WorkDiscoveryProjection } from "@opengeni/contracts";
 import { type WorkspaceArchiveObjectRef, RequestHumanInteractionToolInput, XaiProviderAccountAuthoritySnapshotV1, type TimelineAnnotation } from "@opengeni/contracts";
 import { type LatencyMode, SessionSystemUpdatePayload, TurnExecutionPolicyV1, CodexCredentialPolicySnapshotV1 } from "@opengeni/contracts";
 import { type Settings } from "@opengeni/config";
@@ -84,6 +92,7 @@ export * from "./model-catalog.js";
 import { type Database, type SessionActivityDatabase } from "./database.js";
 export { createDb, registerDbBinding, retrySessionActivityRls, rlsContextForWorkspace, rlsStrategyFor, setRlsContext, setSubjectRlsContext, withAccountRls, withDatabaseStatementTimeout, withRlsContext, withSessionActivityRlsContext, withSessionActivitySavepoint, withWorkspaceRls, withWorkspaceSessionActivityRls, withWorkspaceSubjectRls, withWorkspaceSubjectSessionActivityRls, withWorkspaceUsageLock, withSandboxProviderReadLock, SandboxProviderReadLockUnavailableError, type CreateDbOptions, type Database, type DbClient, type SessionActivityDatabase, type RlsContext, type SessionRlsActorContext, type RlsStrategy, type SandboxProviderReadLockIdentity, type ManagedUserProfile, type UserLookup, type UserProfileLookup, } from "./database.js";
 export { withSessionRlsActorContext } from "./database.js";
+export { normalizedHostCredentialHeaders } from "./connection-token-resolver.js";
 import { buildCodexTokenResolver as buildCodexTokenResolverCore, fetchCodexRateLimitResetCreditsForAccount as fetchCodexRateLimitResetCreditsForAccountCore, fetchCodexUsageForAccount as fetchCodexUsageForAccountCore, type CodexAccountUsageSnapshot, type CodexAuthDeps, type CodexCredentialCooldownKind, type CodexCredentialForRun } from "./codex-token-resolver.js";
 import { buildConnectionTokenResolver as buildConnectionTokenResolverCore, type ConnectionBrokerDeps, type ConnectionCredentialForBroker, type ConnectionTokenResolverOptions } from "./connection-token-resolver.js";
 /** Raised when a durable session tool-policy write lost its version fence. */
@@ -348,6 +357,7 @@ export declare class WorkspaceExternalIdentityConflictError extends Error {
     constructor();
 }
 export declare function findWorkspaceByExternalIdentity(db: Database, input: {
+    accountId: string;
     externalSource: string;
     externalId: string;
 }): Promise<Workspace | null>;
@@ -357,7 +367,7 @@ export declare class WorkspaceLimitExceededError extends Error {
 }
 /**
  * Create an organization workspace exactly once for a stable external tenant
- * identity. The global unique index is the concurrency arbiter. A replay never
+ * identity. The organization-scoped unique index is the concurrency arbiter. A replay never
  * mutates presentation fields supplied by the original create.
  */
 export declare function ensureWorkspaceByExternalIdentity(db: Database, input: {
@@ -858,10 +868,7 @@ export type AppendEventInput = {
  */
 export type ScheduledTaskCreatorSessionPolicy = {
     agentAccess: string | null;
-    endUser: {
-        source: string;
-        id: string;
-    } | null;
+    scopeSubjectId: string | null;
     memoryScope: string | null;
 };
 /**
@@ -901,6 +908,8 @@ export type CreateScheduledTaskInput = {
     metadata: Record<string, unknown>;
     /** Trusted database-only admission seam. Throwing rolls the task creation back. */
     beforeCreateCommit?: (tx: Database) => Promise<void>;
+    captureHostAuthority?: (tx: Database, task: ScheduledTask) => Promise<void>;
+    captureLinkAuthority?: (tx: Database, task: ScheduledTask) => Promise<void>;
 };
 export type UpdateScheduledTaskInput = Partial<{
     name: string;
@@ -924,6 +933,8 @@ export type UpdateScheduledTaskInput = Partial<{
     authorityUpdatedByActor: AgentSessionCreationActor | null;
     /** Trusted database-only admission seam. Throwing rolls the task update back. */
     beforeUpdateCommit: (tx: Database) => Promise<void>;
+    captureHostAuthority: (tx: Database, task: ScheduledTask) => Promise<void>;
+    captureLinkAuthority: (tx: Database, task: ScheduledTask) => Promise<void>;
 }>;
 export type CreatePackInstallationInput = {
     accountId: string;
@@ -1000,6 +1011,10 @@ export type CreateSocialConnectionInput = {
     metadata?: Record<string, unknown>;
 };
 export type UpsertSocialOAuthConnectionInput = {
+    expectedConnection?: {
+        id: string;
+        version: number;
+    };
     accountId: string;
     workspaceId: string;
     subjectId?: string | null;
@@ -1103,6 +1118,8 @@ export type UpdateConnectionInput = {
     updatedBySubjectId?: string | null;
 };
 export type PersistProviderOAuthConnectionInput = CreateConnectionInput & {
+    /** Server continuation reauthorization; runs inside the credential transaction. */
+    authorize?: (tx: Database) => Promise<void>;
     visibleToSubjectId: string;
     credentialRole: string;
     providerFamily: string;
@@ -2977,16 +2994,7 @@ export declare function getScheduledTaskRevisionAuthoritySubject(db: Database, i
     taskId: string;
     taskAuthorityRevision: number;
 }): Promise<string | null>;
-export declare function getScheduledTaskRevisionAuthority(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    taskId: string;
-    taskAuthorityRevision: number;
-}): Promise<{
-    subjectId: string;
-    organizationMembershipId: string;
-    membershipAuthorizationRevision: number;
-} | null>;
+export { getScheduledTaskRevisionAuthority } from "./scheduled-task-revision-authority.js";
 /** Failure settlement must not rewrite a source already committed as dispatched. */
 export declare function markScheduledTaskRunFailedIfQueued(db: Database, workspaceId: string, runId: string, error: string): Promise<void>;
 export type FailScheduledGeneratedSessionRouteResult = {
@@ -5097,13 +5105,15 @@ export type SessionCreateInput = {
     /** Agent-to-agent reach (migration 0427); omitted means the workspace default. */
     agentAccess?: SessionAgentAccess;
     /** Opaque end-user label; omitted or null means none. */
-    endUser?: SessionEndUser | null;
+    scopeSubjectId?: SessionScopeSubjectId | null;
     /** Typed Memory selector (migration 0427); omitted means the workspace layer. */
     memoryScope?: SessionMemoryScope;
     parentSessionId?: string | null;
     createIdempotencyKey?: string | null;
     /** Exact explicit installed-Skill selection used for keyed-create replay. */
     selectedInstalledSkillIds?: string[];
+    /** Backend-only replay identity; does not admit host credential authority. */
+    selectedHostMcpDelegations?: HostMcpCreateSelection[];
     sandboxGroupId?: string | null;
     sandboxOs?: SandboxOs;
     /** Exact accepted generated-session compaction policy; internal lifecycle callers only. */
@@ -5185,6 +5195,7 @@ export declare function getInitializedSessionCreateReplay(db: Database, input: {
     visibility?: "user_private" | "workspace_shared";
     variableSetIds: string[];
     selectedInstalledSkillIds: string[];
+    selectedHostMcpDelegations?: HostMcpCreateSelection[];
     initialPersonalResourceAttachmentIntent?: PersonalResourceAttachmentIntent | null;
     deferInitialTurn?: boolean;
 }): Promise<InitializedSessionCreateReplay | null>;
@@ -5225,7 +5236,7 @@ export type SessionAccessProjection = {
     sessionId: string;
     rootSessionId: string;
     agentAccess: SessionAgentAccess;
-    endUser: SessionEndUser | null;
+    scopeSubjectId: SessionScopeSubjectId | null;
     memoryScope: SessionMemoryScope;
 };
 export type SessionAuthorityProjection = SessionAccessProjection & {
@@ -5237,12 +5248,16 @@ export declare function getSessionAuthorityProjection(db: Database, workspaceId:
 export declare function getSessionAccessProjection(db: Database, workspaceId: string, sessionId: string): Promise<SessionAccessProjection | null>;
 /**
  * The typed Memory selector an agent on this session reads and writes. The
- * end-user subject is the opaque `end_user:v1:<tuple hash>` label and the
- * session selector is the lineage root, so one tree shares one private layer.
+ * user subject comes from the verified active execution, not a conversation
+ * label or its original creator. Task notes own temporary tree-local data.
  * Null when the session does not exist in the workspace.
  */
-export declare function resolveSessionMemoryAgentScope(db: Database, workspaceId: string, sessionId: string): Promise<MemoryAgentScope | null>;
-export declare function memoryAgentScopeForSessionAccess(access: Pick<SessionAccessProjection, "rootSessionId" | "endUser" | "memoryScope">): MemoryAgentScope;
+export declare function resolveSessionMemoryAgentScope(db: Database, workspaceId: string, sessionId: string, caller?: {
+    turnId?: unknown;
+    attemptId?: unknown;
+    executionGeneration?: unknown;
+}): Promise<MemoryAgentScope | null>;
+export declare function memoryAgentScopeForSessionAccess(access: Pick<SessionAccessProjection, "rootSessionId" | "scopeSubjectId" | "memoryScope">): MemoryAgentScope;
 export declare function getSessionTurnXaiProviderAccountAuthoritySnapshot(db: Database, workspaceId: string, sessionId: string, turnId: string): Promise<XaiProviderAccountAuthoritySnapshotV1>;
 export declare function getSessionTurnPersonalConnectionDelegations(db: Database, workspaceId: string, sessionId: string, turnId: string): Promise<McpPersonalConnectionDelegation[]>;
 export declare function getSessionParentPersonalConnectionDelegations(db: Database, workspaceId: string, childSessionId: string): Promise<McpPersonalConnectionDelegation[]>;
@@ -5327,7 +5342,7 @@ export type SessionListFilterOptions = {
     /** Exclusive creation upper bound. */
     createdBefore?: Date;
     /** Exact opaque end-user label pair (both parts). */
-    endUser?: SessionEndUser;
+    scopeSubjectId?: SessionScopeSubjectId;
 };
 export type ListSessionsForSubjectOptions = ListSessionsOptions & SessionListFilterOptions & {
     subjectId: string;
@@ -5355,13 +5370,13 @@ export type ListSessionsForSubjectOptions = ListSessionsOptions & SessionListFil
  *
  * **This flag is the authorization.** The resolver it gates is not: it answers
  * "does subject X hold authority here" and establishes nothing about who the
- * caller is. The exception is for "the canonical managed-cookie (Better Auth)
- * session" only — "Bearer/delegated principals, API keys, and account or
- * organization administrators receive no personal-workspace access through that
- * exception" — and a host-signed delegated bearer chooses its own `subjectId`,
+ * caller is. The exception requires verified native-cookie or dedicated
+ * external owning-user provenance. Unscoped service keys and account or
+ * organization administrators receive no Personal access through it.
+ * A host-signed delegated bearer chooses its own `subjectId`,
  * `principalKind`, `metadata.delegated`, and `serviceInitiator` claims, so no
  * inspection of the grant can carry that distinction. Set this ONLY from
- * `AccessGrantAuthorization.canonicalManagedHumanSession` (`@opengeni/core`),
+ * `hasVerifiedOwningUserAuthorization` (`@opengeni/core`),
  * which reflects HOW the request authenticated. Omitted/false keeps the
  * historical bare-membership fence exactly.
  */
@@ -5419,12 +5434,9 @@ export declare function sessionTreeStatsForSessions(db: Database, workspaceId: s
 export declare function sessionRequiresActionSinceForSessions(db: Database, workspaceId: string, sessionIds: readonly string[]): Promise<Map<string, string>>;
 /**
  * The agent-access predicate for one calling attempt (migration 0427). It
- * mirrors the pairwise rule in the core seam exactly: a caller always keeps
- * its own root tree; a `session` caller sees nothing else; a `user` caller
- * additionally sees non-`session` sessions carrying its own end-user label; a
- * `workspace` caller additionally sees every `workspace` session and the
- * `user` sessions carrying its own label. A caller without a label can never
- * match a labelled `user` session.
+ * mirrors outgoing reach in the core seam: own tree, same canonical user, or
+ * workspace. Target task scope never hides the conversation. This predicate
+ * remains intersected with host scope and ordinary private-session visibility.
  */
 export declare function sessionAgentAccessViewerFilter(viewer: SessionAgentAccessViewer): SQL;
 /**
@@ -9429,6 +9441,10 @@ export type InitializeSessionStartInput = {
     /** Trusted create-session policy. Omitted only by legacy low-level callers. */
     turnExecutionPolicy?: TurnExecutionPolicyV1;
     createdEventPayload: Record<string, unknown>;
+    /** Trusted backend-only capture for a newly inserted initial turn. Runs under
+     * the canonical activity transaction; failure rolls back events and turn.
+     * Never invoked on replay or deferred starts; not caller JSON authority. */
+    captureInitialTurnAuthority?: (tx: Database, turnId: string) => Promise<void>;
     /** Sensitive-safe semantic title supplied by the trusted agent-child create
      * path. It is committed with the initial timeline, never as a bare row edit. */
     initialAutomaticTitle?: string | null;
@@ -10461,7 +10477,7 @@ export declare function fetchCodexUsageForAccount(db: Database, settings: Settin
 export declare function fetchCodexRateLimitResetCreditsForAccount(db: Database, settings: Settings, workspaceId: string, credentialId: string, fetchImpl?: CodexFetch): ReturnType<typeof fetchCodexRateLimitResetCreditsForAccountCore>;
 export declare function buildConnectionTokenResolver(db: Database, settings: Settings, deps?: ConnectionBrokerDeps, options?: ConnectionTokenResolverOptions): ReturnType<typeof buildConnectionTokenResolverCore>;
 export { withCodexTokenDeadline, type CodexAccountUsageSnapshot, type CodexAuthDeps, type CodexCredentialCooldownKind, type CodexCredentialForRun, type CodexCredentialTokens, type CodexRateLimitResetCreditsAccountResult, type CodexTokenDeadlineClock, type CodexTokenDeadlineOptions, } from "./codex-token-resolver.js";
-export { buildHostConnectionTokenResolver, ConnectionRefreshHttpError, HostMcpCredentialBindingError, HostMcpCredentialScopeError, isPrivateAddress, normalizeBearerScheme, refreshOAuthConnectionCredential, type ConnectionBrokerDeps, type ConnectionCredentialForBroker, type ConnectionCredentialLookupInput, type ConnectionStatusGuard, type ConnectionTokenRefreshInput, type ConnectionTokenResolverOptions, type HostMcpCredentialResolverContext, type PermanentConnectionRefreshFailure, type RefreshTransportOptions, type ResolveConnectionCredentialInput, type ResolveConnectionCredentialResult, } from "./connection-token-resolver.js";
+export { buildHostConnectionTokenResolver, buildHostGatewayConnectionTokenResolver, ConnectionRefreshHttpError, HostMcpCredentialBindingError, HostMcpCredentialScopeError, isPrivateAddress, normalizeBearerScheme, refreshOAuthConnectionCredential, type ConnectionBrokerDeps, type ConnectionCredentialForBroker, type ConnectionCredentialLookupInput, type ConnectionStatusGuard, type ConnectionTokenRefreshInput, type ConnectionTokenResolverOptions, type HostMcpCredentialResolverContext, type PermanentConnectionRefreshFailure, type RefreshTransportOptions, type ResolveConnectionCredentialInput, type ResolveConnectionCredentialResult, } from "./connection-token-resolver.js";
 export { CapabilityComponentVersionConflictError, cleanupOrphanedCapabilityComponents, effectiveCapabilityOwnerSql, type CapabilityComponentOwnerIdentity, } from "./capability-components.js";
 export { adoptPackComponentReferences, finalizePackComponentOwnership, listPackInstallationComponents, PackComponentResolutionError, previewPackComponentRelease, recordPackInlineSkillComponent, releasePackComponents, resolvePackComponentReferences, resolvePackInlineSkillReferences, type PackInlineSkillRequirement, type StoredPackInstallationComponent, } from "./pack-components.js";
 export { deferPackInstallationOperation, finalizePackInstallationOperation, finalizePackUninstallOperation, PackManifestChangedError, PackOperationClaimLostError, PackOperationInProgressError, PackInstallationVersionConflictError, PackInstallationVersionRequiredError, PackOperationIdempotencyError, preparePackInstallationOperation, preparePackUninstallOperation, touchPackInstallationOperation, type PreparedPackInstallation, } from "./pack-installations.js";