@opengeni/db 4.4.0-canary.0 → 4.4.0-canary.2

package/dist/{chunk-THJGMEK5.js → chunk-XJP7KJ6U.js}

@@ -172,6 +172,9 @@ var ORGANIZATION_MEMBERSHIP_LIFECYCLE_ROUTINES = [
   "get_external_identity_link_reference(uuid, uuid, text)",
   "get_external_identity_link_inventory_references(uuid, uuid[])",
   "ensure_external_identity(uuid, text, text)",
+  "lookup_external_identity(uuid, text, text, text)",
+  "prepare_external_workspace_membership_operation(jsonb)",
+  "record_external_workspace_membership_operation(jsonb, jsonb)",
   "list_self_organization_memberships(text)",
   "list_self_organization_invitations(text)",
   "list_self_organization_invitations(text, uuid, integer)",
@@ -476,10 +479,6 @@ var COMPANY_BRAIN_CONTEXT_SELECTION_ROUTINE = "company_brain_context_get_or_crea
 var COMPANY_BRAIN_CONTEXT_INSPECTION_ROUTINE = "company_brain_inspect_context_receipts(uuid, uuid, text, uuid, timestamp with time zone, uuid, integer)";
 var GOVERNED_LEARNING_EVALUATION_ROUTINE = "evaluate_governed_learning_proposal(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid, uuid, uuid)";
 var GOVERNED_LEARNING_ACTIVATION_ROUTINES = [
-  "activate_governed_learning_decision(uuid, uuid, uuid, uuid)",
-  "activate_human_confirmed_learning_decision(uuid, uuid, uuid, uuid, uuid)",
-  "confirm_remember_knowledge_claim(uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid)",
-  "materialize_remember_knowledge_memory(uuid, uuid, uuid)",
   "undo_governed_learning_activation(uuid, uuid, uuid, uuid)"
 ];
 var GOVERNED_LEARNING_INSPECTION_ROUTINES = [
@@ -610,13 +609,48 @@ var XAI_AUTHORITY_TABLES = [
   "workspace_memberships",
   "xai_subscription_credentials"
 ];
+var UNIFIED_KNOWLEDGE_ROUTINES = [
+  "knowledge_index_claim(text, integer, integer)",
+  "knowledge_index_work(uuid, uuid, uuid, jsonb)",
+  "knowledge_entry_apply(uuid, uuid, jsonb, jsonb)",
+  "knowledge_entry_confirm_legacy(uuid, uuid, jsonb, jsonb)",
+  "agent_instruction_apply(uuid, uuid, jsonb, jsonb)",
+  "knowledge_entry_read(uuid, uuid, jsonb, jsonb)",
+  "knowledge_entry_prepare_file(uuid, uuid, jsonb, jsonb)",
+  "knowledge_document_prepare(uuid, uuid, uuid, jsonb)",
+  "agent_learning_manage(uuid, uuid, jsonb, jsonb)"
+];
+var UNIFIED_KNOWLEDGE_ROUTINE_SET = new Set(UNIFIED_KNOWLEDGE_ROUTINES);
+var UNIFIED_KNOWLEDGE_AUTHORITY_TABLES = [
+  "knowledge_entries",
+  "knowledge_entry_revisions",
+  "knowledge_entry_decisions",
+  "knowledge_entry_links",
+  "knowledge_entry_operations",
+  "knowledge_entry_search",
+  "knowledge_index_jobs",
+  "knowledge_entry_vectors",
+  "knowledge_review_batches",
+  "agent_learning_revisions",
+  "agent_learning_snapshots",
+  "agent_instruction_operations",
+  "workspace_instruction_policy_revisions",
+  "workspace_instruction_policy_heads",
+  "workspace_instruction_policy_activation_events",
+  "workspaces",
+  "sessions",
+  "session_turns",
+  "session_turn_attempts",
+  "files",
+  "documents"
+];
 var RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES = [
+  ...UNIFIED_KNOWLEDGE_ROUTINES,
   MCP_OPERATION_CAPABILITY_ROUTINE,
   "skill_apply_lifecycle(uuid, uuid, jsonb, jsonb)",
   COMPANY_BRAIN_CONTEXT_INSPECTION_ROUTINE,
   COMPANY_BRAIN_CONTEXT_SELECTION_ROUTINE,
   ...COMPANY_PROFILE_AGENT_ADMIN_ROUTINES,
-  GOVERNED_LEARNING_EVALUATION_ROUTINE,
   ...GOVERNED_LEARNING_ACTIVATION_ROUTINES,
   ...GOVERNED_LEARNING_INSPECTION_ROUTINES,
   FORK_SESSION_CONTENT_ROUTINE,
@@ -684,6 +718,9 @@ var RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINE_SET = new Set(
 );
 var FORCE_RLS_TABLES = [
   "additional_organization_creation_receipts",
+  "agent_instruction_operations",
+  "agent_learning_revisions",
+  "agent_learning_snapshots",
   "agent_run_states",
   "api_keys",
   "attached_browser_devices",
@@ -798,6 +835,8 @@ var FORCE_RLS_TABLES = [
   "host_export_outbox",
   "host_mcp_bindings",
   "host_mcp_delegations",
+  "host_mcp_resolver_operations",
+  "host_mcp_resolvers",
   "host_mcp_task_authorities",
   "host_mcp_turn_authorities",
   "image_generation_operations",
@@ -819,13 +858,22 @@ var FORCE_RLS_TABLES = [
   "knowledge_document_versions",
   "knowledge_entities",
   "knowledge_entity_aliases",
+  "knowledge_entries",
+  "knowledge_entry_decisions",
+  "knowledge_entry_links",
+  "knowledge_entry_operations",
+  "knowledge_entry_revisions",
+  "knowledge_entry_search",
+  "knowledge_entry_vectors",
   "knowledge_facts",
+  "knowledge_index_jobs",
   "knowledge_lifecycle_events",
   "knowledge_memories",
   "knowledge_memory_lifecycle_events",
   "knowledge_memory_relationships",
   "knowledge_operation_receipts",
   "knowledge_providers",
+  "knowledge_review_batches",
   "knowledge_source_acl_versions",
   "knowledge_source_objects",
   "knowledge_source_sync_index_obligations",
@@ -1134,7 +1182,6 @@ var RUNTIME_FULL_DML_TABLES = [
   "integration_facet_bindings",
   "integration_oauth_clients",
   "integration_oauth_state_nonces",
-  "knowledge_memories",
   "knowledge_source_sync_index_obligations",
   "knowledge_source_sync_item_outcomes",
   "knowledge_source_sync_object_observations",
@@ -1251,6 +1298,7 @@ var RUNTIME_READ_ONLY_TABLES = [
   "deployment_model_catalog",
   "document_authority_reclassifications",
   "knowledge_lifecycle_events",
+  "knowledge_memories",
   "knowledge_memory_lifecycle_events",
   "knowledge_memory_relationships",
   "nested_agent_depth_configuration",
@@ -1268,6 +1316,7 @@ var RUNTIME_READ_ONLY_TABLES = [
   "workspace_instruction_policy_snapshots",
   "workspace_learning_policy_activation_events",
   "workspace_learning_policy_heads",
+  "workspace_learning_policy_revisions",
   "workspace_learning_policy_snapshots"
 ];
 var RUNTIME_READ_UPDATE_TABLES = ["workspace_session_activity_revisions"];
@@ -1291,6 +1340,7 @@ var RUNTIME_READ_INSERT_TABLES = [
   "feedback_submissions",
   "google_drive_object_acl_evidence",
   "google_drive_object_acl_principals",
+  "host_mcp_resolver_operations",
   "host_mcp_task_authorities",
   "host_mcp_turn_authorities",
   "knowledge_change_proposals",
@@ -1321,8 +1371,7 @@ var RUNTIME_READ_INSERT_TABLES = [
   "workspace_artifact_versions",
   "workspace_instruction_policy_activation_events",
   "workspace_instruction_policy_onboarding_proposals",
-  "workspace_instruction_policy_revisions",
-  "workspace_learning_policy_revisions"
+  "workspace_instruction_policy_revisions"
 ];
 var RUNTIME_READ_INSERT_UPDATE_TABLES = [
   "attached_browser_devices",
@@ -1344,6 +1393,7 @@ var RUNTIME_READ_INSERT_UPDATE_TABLES = [
   "editable_artifact_session_links",
   "editable_artifacts",
   "external_identity_links",
+  "host_mcp_resolvers",
   "integration_facet_definitions",
   "integration_spec_revisions",
   "integration_tools",
@@ -1362,6 +1412,9 @@ var RUNTIME_READ_INSERT_UPDATE_TABLES = [
 ];
 var PROTECTED_NO_DIRECT_DML_TABLES = [
   "additional_organization_creation_receipts",
+  "agent_instruction_operations",
+  "agent_learning_revisions",
+  "agent_learning_snapshots",
   "canonical_human_identities",
   "canonical_human_identity_operations",
   "canonical_human_identity_subjects",
@@ -1388,6 +1441,15 @@ var PROTECTED_NO_DIRECT_DML_TABLES = [
   "host_export_cursor_state",
   "host_export_dead_letters",
   "host_export_outbox",
+  "knowledge_entries",
+  "knowledge_entry_decisions",
+  "knowledge_entry_links",
+  "knowledge_entry_operations",
+  "knowledge_entry_revisions",
+  "knowledge_entry_search",
+  "knowledge_entry_vectors",
+  "knowledge_index_jobs",
+  "knowledge_review_batches",
   "managed_auth_actor_mutation_leases",
   "managed_auth_browser_installations",
   "managed_auth_login_return_intents",
@@ -2054,6 +2116,24 @@ function evaluateRuntimeDatabasePosture(posture, options) {
           );
         }
       }
+    } else if ([
+      "lookup_external_identity(uuid, text, text, text)",
+      "prepare_external_workspace_membership_operation(jsonb)",
+      "record_external_workspace_membership_operation(jsonb, jsonb)"
+    ].includes(routine.name)) {
+      const names = [
+        "external_identities",
+        "organization_memberships",
+        "organization_workspace_operation_receipts",
+        "api_keys"
+      ];
+      if (names.some(
+        (name) => !tableByName.has(name) || tableByName.get(name).owner !== routine.owner
+      )) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} authority table owners do not match`
+        );
+      }
     } else if ([
       "ensure_external_identity(uuid, text, text)",
       "get_external_identity_link_reference(uuid, uuid, text)",
@@ -2261,6 +2341,15 @@ function evaluateRuntimeDatabasePosture(posture, options) {
           );
         }
       }
+    } else if (UNIFIED_KNOWLEDGE_ROUTINE_SET.has(routine.name)) {
+      for (const name of UNIFIED_KNOWLEDGE_AUTHORITY_TABLES) {
+        const table = tableByName.get(name);
+        if (!table) violations.push(`Knowledge authority table ${name} is missing`);
+        else if (routine.owner !== table.owner)
+          violations.push(
+            `Knowledge capability ${routine.name} owner ${routine.owner} does not match ${name} owner ${table.owner}`
+          );
+      }
     } else if (routine.name === "skill_apply_lifecycle(uuid, uuid, jsonb, jsonb)") {
       const authorityTables = [
         "preference_registry_preferences",
@@ -3504,6 +3593,9 @@ async function grantAppRoleIfSchemaExists(sql2, role, schema) {
   const workClaimCapabilityRoutines = `ARRAY[${WORK_CLAIM_CAPABILITY_ROUTINES.map(literal).join(", ")}]`;
   const organizationMembershipLifecycleRoutines = `ARRAY[${[
     "ensure_external_identity(uuid,text,text)",
+    "lookup_external_identity(uuid,text,text,text)",
+    "prepare_external_workspace_membership_operation(jsonb)",
+    "record_external_workspace_membership_operation(jsonb,jsonb)",
     "get_external_identity_link_reference(uuid,uuid,text)",
     "get_external_identity_link_inventory_references(uuid,uuid[])",
     "list_self_organization_memberships(text)",
@@ -3799,6 +3891,17 @@ BEGIN
       EXECUTE format('GRANT EXECUTE ON FUNCTION %I.skill_apply_lifecycle(uuid,uuid,jsonb,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
       EXECUTE format('GRANT EXECUTE ON FUNCTION %I.skill_files_valid(jsonb) TO %I', ${literal(schema)}, ${literal(role)});
     END IF;
+    IF to_regprocedure(format('%I.knowledge_entry_apply(uuid,uuid,jsonb,jsonb)', ${literal(schema)})) IS NOT NULL THEN
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.knowledge_index_claim(text,integer,integer) TO %I', ${literal(schema)}, ${literal(role)});
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.knowledge_index_work(uuid,uuid,uuid,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.agent_instruction_apply(uuid,uuid,jsonb,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.knowledge_entry_apply(uuid,uuid,jsonb,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.knowledge_entry_confirm_legacy(uuid,uuid,jsonb,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.knowledge_entry_read(uuid,uuid,jsonb,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.knowledge_entry_prepare_file(uuid,uuid,jsonb,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.knowledge_document_prepare(uuid,uuid,uuid,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.agent_learning_manage(uuid,uuid,jsonb,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
+    END IF;
     IF to_regprocedure(
       format('%I.preference_registry_lock_heads(uuid[])', ${literal(schema)})
     ) IS NOT NULL THEN
@@ -3808,30 +3911,8 @@ BEGIN
         ${literal(role)}
       );
     END IF;
-    IF to_regprocedure(
-      format(
-        '%I.knowledge_memory_apply_operation(jsonb,text,text,text,uuid,uuid,uuid,integer)',
-        ${literal(schema)}
-      )
-    ) IS NOT NULL THEN
-      EXECUTE format(
-        'GRANT EXECUTE ON FUNCTION %I.knowledge_memory_apply_operation(jsonb, text, text, text, uuid, uuid, uuid, integer) TO %I',
-        ${literal(schema)},
-        ${literal(role)}
-      );
-    END IF;
-    IF to_regprocedure(
-      format(
-        '%I.knowledge_memory_revert_operation(uuid,uuid,text,text,text,uuid,uuid,uuid,integer)',
-        ${literal(schema)}
-      )
-    ) IS NOT NULL THEN
-      EXECUTE format(
-        'GRANT EXECUTE ON FUNCTION %I.knowledge_memory_revert_operation(uuid, uuid, text, text, text, uuid, uuid, uuid, integer) TO %I',
-        ${literal(schema)},
-        ${literal(role)}
-      );
-    END IF;
+
+
     IF to_regprocedure(
       format(
         '%I.preference_registry_get_or_create_snapshot(uuid,uuid,uuid,uuid,uuid,integer)',
@@ -3917,6 +3998,9 @@ BEGIN
         ${literal(role)}
       );
     END IF;
+    -- Older-schema fixtures and the maintenance conversion can still prepare
+    -- historical evidence; current runtimes receive only the undo/read seam.
+    IF to_regclass(format('%I.knowledge_entries', ${literal(schema)})) IS NULL THEN
     IF to_regprocedure(
       format(
         '%I.evaluate_governed_learning_proposal(uuid,uuid,uuid,uuid,uuid,integer,uuid,uuid,uuid,uuid,uuid)',
@@ -3947,28 +4031,10 @@ BEGIN
         ${literal(role)}
       );
     END IF;
-    IF to_regprocedure(
-      format('%I.confirm_remember_knowledge_claim(uuid,uuid,uuid,uuid,integer,uuid,uuid,uuid)', ${literal(schema)})
-    ) IS NOT NULL THEN
-      EXECUTE format(
-        'GRANT EXECUTE ON FUNCTION %I.confirm_remember_knowledge_claim(uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid) TO %I',
-        ${literal(schema)},
-        ${literal(role)}
-      );
-    END IF;
-    IF to_regprocedure(
-      format('%I.materialize_remember_knowledge_memory(uuid,uuid,uuid)', ${literal(schema)})
-    ) IS NOT NULL THEN
-      EXECUTE format(
-        'REVOKE ALL ON FUNCTION %I.materialize_remember_knowledge_memory(uuid, uuid, uuid) FROM PUBLIC',
-        ${literal(schema)}
-      );
-      EXECUTE format(
-        'GRANT EXECUTE ON FUNCTION %I.materialize_remember_knowledge_memory(uuid, uuid, uuid) TO %I',
-        ${literal(schema)},
-        ${literal(role)}
-      );
+
+
     END IF;
+
     IF to_regprocedure(
       format('%I.undo_governed_learning_activation(uuid,uuid,uuid,uuid)', ${literal(schema)})
     ) IS NOT NULL THEN
@@ -4138,18 +4204,7 @@ BEGIN
         ${literal(role)}
       );
     END IF;
-    IF to_regprocedure(
-      format(
-        '%I.workspace_learning_policy_apply_activation(uuid,text,uuid,uuid,uuid,uuid,bigint,text,text,text)',
-        ${literal(schema)}
-      )
-    ) IS NOT NULL THEN
-      EXECUTE format(
-        'GRANT EXECUTE ON FUNCTION %I.workspace_learning_policy_apply_activation(uuid, text, uuid, uuid, uuid, uuid, bigint, text, text, text) TO %I',
-        ${literal(schema)},
-        ${literal(role)}
-      );
-    END IF;
+
     IF to_regprocedure(
       format('%I.workspace_learning_policy_source_overrides_valid(jsonb)', ${literal(schema)})
     ) IS NOT NULL THEN
@@ -5334,4 +5389,4 @@ export {
   runtimeDatabaseReadyCheck,
   provisionRoles
 };
-//# sourceMappingURL=chunk-THJGMEK5.js.map
+//# sourceMappingURL=chunk-XJP7KJ6U.js.map