@opengeni/db 4.3.0-canary.0 → 4.3.2

package/dist/{chunk-IHADTE7C.js → chunk-DVSLOUEI.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-SGJDIF2D.js";
+} from "./chunk-I4ITNMX2.js";
 
 // src/canonical-human-identities.ts
 import { createHash } from "crypto";
@@ -309,4 +309,4 @@ export {
   getCanonicalHumanIdentityProjection,
   applyCanonicalHumanIdentityOperation
 };
-//# sourceMappingURL=chunk-IHADTE7C.js.map
+//# sourceMappingURL=chunk-DVSLOUEI.js.map

package/dist/{chunk-7JPLGBSA.js → chunk-F4BIHJ7J.js}

@@ -1,6 +1,6 @@
 import {
   cancelUnacceptedVideoGenerationsForToolCallsInTransaction
-} from "./chunk-NCSPNCQK.js";
+} from "./chunk-PFBUHOI5.js";
 import {
   nestedPostgresSqlState,
   rawRows,
@@ -10,7 +10,7 @@ import {
   withSessionActivityRlsContext,
   withWorkspaceRls,
   withWorkspaceSubjectRls
-} from "./chunk-SGJDIF2D.js";
+} from "./chunk-I4ITNMX2.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   auditEvents,
@@ -37,7 +37,7 @@ import {
   workspaceControlEvents,
   workspaceInferenceControls,
   workspaces
-} from "./chunk-Y5XFVJJM.js";
+} from "./chunk-AI4NC6XW.js";
 
 // src/session-background-commands.ts
 import { SessionCommandFailure } from "@opengeni/contracts";
@@ -4769,4 +4769,4 @@ export {
   setWorkspacePauseTimerInTransaction,
   fireWorkspacePauseTimerInTransaction
 };
-//# sourceMappingURL=chunk-7JPLGBSA.js.map
+//# sourceMappingURL=chunk-F4BIHJ7J.js.map

package/dist/{chunk-SGJDIF2D.js → chunk-I4ITNMX2.js}

@@ -4,7 +4,7 @@ import {
   sessions,
   workspaceSessionActivityRevisions,
   workspaces
-} from "./chunk-Y5XFVJJM.js";
+} from "./chunk-AI4NC6XW.js";
 
 // src/persistence-errors.ts
 var SQLSTATE_KEYS = ["sqlState", "sqlstate", "code"];
@@ -755,4 +755,4 @@ export {
   withAccountRls,
   dbBindingFor
 };
-//# sourceMappingURL=chunk-SGJDIF2D.js.map
+//# sourceMappingURL=chunk-I4ITNMX2.js.map

package/dist/{chunk-NCSPNCQK.js → chunk-PFBUHOI5.js}

@@ -2,7 +2,7 @@ import {
   rawRows,
   withRlsContext,
   withWorkspaceRls
-} from "./chunk-SGJDIF2D.js";
+} from "./chunk-I4ITNMX2.js";
 import {
   connections,
   creditLedgerEntries,
@@ -14,7 +14,7 @@ import {
   workspaceVideoGenerationPolicies,
   workspaceVideoGenerationQuotas,
   workspaces
-} from "./chunk-Y5XFVJJM.js";
+} from "./chunk-AI4NC6XW.js";
 
 // src/video-generation.ts
 import {
@@ -992,4 +992,4 @@ export {
   mediaGenerationResultForStoredOperation,
   getVideoGenerationOperationSummary
 };
-//# sourceMappingURL=chunk-NCSPNCQK.js.map
+//# sourceMappingURL=chunk-PFBUHOI5.js.map

package/dist/{chunk-YGRT6VZO.js → chunk-UUPY6IGP.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-SGJDIF2D.js";
+} from "./chunk-I4ITNMX2.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-YGRT6VZO.js.map
+//# sourceMappingURL=chunk-UUPY6IGP.js.map

package/dist/{chunk-YGBOVXC7.js → chunk-UVBPOGA7.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-SGJDIF2D.js";
+} from "./chunk-I4ITNMX2.js";
 
 // src/editable-artifacts.ts
 import { createHash } from "crypto";
@@ -3540,4 +3540,4 @@ export {
   PostgresEditableArtifactStore,
   PostgresEditableArtifactLiveReadStore
 };
-//# sourceMappingURL=chunk-YGBOVXC7.js.map
+//# sourceMappingURL=chunk-UVBPOGA7.js.map

package/dist/{chunk-ILKJKDII.js → chunk-XBXANJQS.js}

@@ -5,7 +5,7 @@ import {
   withWorkspaceRls,
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls
-} from "./chunk-SGJDIF2D.js";
+} from "./chunk-I4ITNMX2.js";
 
 // src/session-tenancy.ts
 import { createHash } from "crypto";
@@ -502,4 +502,4 @@ export {
   forkSessionContent,
   replayAppliedSessionFork
 };
-//# sourceMappingURL=chunk-ILKJKDII.js.map
+//# sourceMappingURL=chunk-XBXANJQS.js.map

package/dist/editable-artifact-durable-export.js

@@ -1,8 +1,8 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-SGJDIF2D.js";
-import "./chunk-Y5XFVJJM.js";
+} from "./chunk-I4ITNMX2.js";
+import "./chunk-AI4NC6XW.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/editable-artifact-durable-export.ts

package/dist/editable-artifacts.js

@@ -8,9 +8,9 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink
-} from "./chunk-YGBOVXC7.js";
-import "./chunk-SGJDIF2D.js";
-import "./chunk-Y5XFVJJM.js";
+} from "./chunk-UVBPOGA7.js";
+import "./chunk-I4ITNMX2.js";
+import "./chunk-AI4NC6XW.js";
 import "./chunk-PZ5AY32C.js";
 export {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,

package/dist/index.js

@@ -14,7 +14,7 @@ import {
   replayAppliedSessionFork,
   sessionTenancyProductActivated,
   transitionSessionVisibility
-} from "./chunk-ILKJKDII.js";
+} from "./chunk-XBXANJQS.js";
 import {
   AgentCommandAuthorityError,
   CHILD_LIFECYCLE_DEDUPE_PREFIX,
@@ -108,7 +108,7 @@ import {
   updateSessionCommandReceiptResult,
   workspaceControlLockBudget,
   workspaceControlRequestLockTimeoutMs
-} from "./chunk-7JPLGBSA.js";
+} from "./chunk-F4BIHJ7J.js";
 import {
   ACTIVE_VIDEO_GENERATION_STATUSES,
   VideoGenerationCapacityError,
@@ -140,7 +140,7 @@ import {
   settleVideoGenerationFailure,
   settleVideoGenerationReady,
   updateWorkspaceVideoGenerationPolicy
-} from "./chunk-NCSPNCQK.js";
+} from "./chunk-PFBUHOI5.js";
 import {
   ManagedAuthActorMutationInFlightError,
   ManagedAuthLoginSlotAlreadyExistsError,
@@ -163,7 +163,7 @@ import {
   reapManagedAuthIsolatedSessions,
   releaseManagedAuthActorMutationLease,
   validateManagedAuthActorMutationLease
-} from "./chunk-YGRT6VZO.js";
+} from "./chunk-UUPY6IGP.js";
 import {
   migrate,
   runMigrations
@@ -204,7 +204,7 @@ import {
   getCanonicalHumanIdentityProjection,
   synchronizeCanonicalHumanLoginBindings,
   validateCanonicalHumanSession
-} from "./chunk-IHADTE7C.js";
+} from "./chunk-DVSLOUEI.js";
 import {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,
   EDITABLE_ARTIFACT_KERNEL_TAIL_MAX_BYTES,
@@ -215,7 +215,7 @@ import {
   PostgresEditableArtifactStore,
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink
-} from "./chunk-YGBOVXC7.js";
+} from "./chunk-UVBPOGA7.js";
 import {
   SandboxProviderReadLockUnavailableError,
   SessionEventPersistenceError,
@@ -251,7 +251,7 @@ import {
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls,
   withWorkspaceUsageLock
-} from "./chunk-SGJDIF2D.js";
+} from "./chunk-I4ITNMX2.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   LOSSLESS_JSON_STRING_PREFIX,
@@ -491,7 +491,7 @@ import {
   xaiRotationSettings,
   xaiSessionAccountPins,
   xaiSubscriptionCredentials
-} from "./chunk-Y5XFVJJM.js";
+} from "./chunk-AI4NC6XW.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/session-execution-policy.ts
@@ -35290,7 +35290,11 @@ async function assertAttemptAuthority(scopedDb, input) {
       FOR NO KEY UPDATE OF session
     ), locked_turn AS MATERIALIZED (
       SELECT turn.id, turn.account_id, turn.workspace_id, turn.session_id,
-        turn.active_attempt_id, turn.execution_generation, turn.initiator_subject_id
+        turn.active_attempt_id, turn.execution_generation,
+        coalesce(
+          turn.initiating_human_subject_id,
+          case when turn.initiator_kind = 'subject' then turn.initiator_subject_id end
+        ) as initiating_human_subject_id
       FROM session_turns turn
       JOIN locked_session session
         ON session.id = turn.session_id
@@ -35300,8 +35304,10 @@ async function assertAttemptAuthority(scopedDb, input) {
         AND turn.active_attempt_id = ${input.sourceAttemptId}::uuid
         AND turn.execution_generation = ${input.sourceExecutionGeneration}
         AND turn.status IN ('running', 'requires_action', 'recovering', 'waiting_capacity')
-        AND turn.initiator_kind = 'subject'
-        AND length(btrim(turn.initiator_subject_id)) BETWEEN 1 AND 1024
+        AND length(btrim(coalesce(
+          turn.initiating_human_subject_id,
+          case when turn.initiator_kind = 'subject' then turn.initiator_subject_id end
+        ))) BETWEEN 1 AND 1024
       FOR UPDATE OF turn
     ), locked_attempt AS MATERIALIZED (
       SELECT attempt.id, attempt.account_id, attempt.workspace_id,
@@ -35330,7 +35336,7 @@ async function assertAttemptAuthority(scopedDb, input) {
   `);
   if (!rows[0]) {
     throw new WorkspaceArtifactOperationError(
-      "Artifact mutation requires the exact active attempt and execution generation"
+      "Artifact mutation requires the exact active attempt, execution generation, and immutable human authority"
     );
   }
 }