@opengeni/db 4.4.0-canary.0 → 4.4.0-canary.2

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+export { grantWorkspaceAccess, listWorkspaceMembers } from "./workspace-membership-access.js";
 import { codexSelectionDiagnostics } from "./codex-selection-diagnostics.js";
 export { codexSelectionDiagnostics } from "./codex-selection-diagnostics.js";
 import { type ModelConnectionAccess, type ModelConnectionTarget } from "./model-connection-access.js";
@@ -13,9 +14,10 @@ export * from "./external-identity-links.js";
 export * from "./connection-setup-authority.js";
 export * from "./external-link-work.js";
 export * from "./host-mcp-bindings.js";
+export * from "./host-mcp-resolvers.js";
 export * from "./host-mcp-task-authority.js";
 import { type ChildLifecycleSystemUpdateKind, type ChildRequiresActionRespondedByKind, SessionGoalSnapshot } from "@opengeni/contracts";
-import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, AttemptToolResult, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, ManagedOrganizationMembershipProjection, WorkspaceMemberCandidate, McpPersonalConnectionDelegation, ModelContextContributionSummary, Permission, PersonalResourceAttachmentIntent, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAction, ScheduledTaskActionKind, KnowledgeSourceSyncAction, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunAcceptedExecution as ScheduledTaskRunAcceptedExecutionType, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, SlackInstallationBinding, Session, SessionAgentAccess, SessionAgentAccessViewer, SessionAuthorizationListScope, SessionScopeSubjectId, SessionMemoryScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalChangeKind, SessionGoalCreatedBy, SessionGoalMutationPolicy, SessionGoalRevision, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionBackgroundCommand, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceControlEvent, VariableSet, VariableSetSecret, VariableSetVariableMetadata, WorkspaceMember, WorkspaceMemoryPromptMode, WorkspaceRegisteredPack, Channel, Rig, RigProviderImage, RigProviderImages, RigVersion, RigVerificationHealth, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding, SandboxProviderContinuityRecovery, WorkClaimSubjectFilter, WorkDiscoveryProjection } from "@opengeni/contracts";
+import type { AccessContext, AccessGrant, AccessPrincipalKind, ApiKey, AttemptToolResult, BillingBalance, CapabilityCatalogItem, CapabilityInstallation, CapabilityPack, CapabilitySource, ConnectionKind, ConnectionMetadata, ConnectionStatus, DocumentAuthorityKind, McpServerConnectionRef, FileAsset, FileUploadStatus, FirstPartyMcpToolName, HumanInputQuestion, HumanInputResponse, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemoryStatus, KnowledgeSourceRef, GitHubInstallationAuthorityKind, GitHubRepositoryScope, HostEventExportBatch, HostUsageExportBatch, ManagedAccount, ManagedOrganizationMembershipProjection, WorkspaceMemberCandidate, McpPersonalConnectionDelegation, ModelContextContributionSummary, Permission, PersonalResourceAttachmentIntent, PackInstallation, PackInstallationStatus, ResourceRef, SandboxBackend, SandboxOs, ScheduledTask, ScheduledTaskAction, ScheduledTaskActionKind, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunAcceptedExecution as ScheduledTaskRunAcceptedExecutionType, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, SlackInstallationBinding, Session, SessionAgentAccess, SessionAgentAccessViewer, SessionAuthorizationListScope, SessionScopeSubjectId, SessionMemoryScope, SessionListResponse, SessionEvent, SessionEventPayloadMode, SessionEventReadDirection, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalChangeKind, SessionGoalCreatedBy, SessionGoalMutationPolicy, SessionGoalRevision, SessionGoalStatus, SessionHumanInputRequest, LineageNode, SessionMcpApprovalPolicy, SessionBackgroundCommand, SessionSkill, SessionMcpServerMetadata, SessionStatus, SessionToolPolicy, SessionTurn, SessionQueueSnapshot, SessionSystemUpdate, SessionSystemUpdateKind, SystemUpdateClassification, SessionTurnSource, SessionTurnStatus, TurnInitiator, TurnInitiatorContext, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, ToolRef, ReasoningEffort, UsageEvent, Workspace, WorkspaceMember, WorkspaceControlEvent, VariableSet, VariableSetSecret, VariableSetVariableMetadata, WorkspaceMemoryPromptMode, WorkspaceRegisteredPack, Channel, Rig, RigProviderImage, RigProviderImages, RigVersion, RigVerificationHealth, RigChange, RigChangeKind, RigChangeStatus, RigCheck, NativeSnapshotDescriptor, TarWorkspaceArchiveDescriptor, WorkspaceArchiveDescriptor, ModalCheckpointProviderBinding, SandboxProviderContinuityRecovery, WorkClaimSubjectFilter, WorkDiscoveryProjection } from "@opengeni/contracts";
 import { type WorkspaceArchiveObjectRef, RequestHumanInteractionToolInput, XaiProviderAccountAuthoritySnapshotV1, type TimelineAnnotation } from "@opengeni/contracts";
 import { type LatencyMode, SessionSystemUpdatePayload, TurnExecutionPolicyV1, CodexCredentialPolicySnapshotV1 } from "@opengeni/contracts";
 import { type Settings } from "@opengeni/config";
@@ -398,14 +400,6 @@ export declare function createOrganizationSharedWorkspace(db: Database, input: {
     agentInstructions?: string | null;
     operationId: string;
 }): Promise<Workspace>;
-export declare function grantWorkspaceAccess(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    subjectId: string;
-    subjectLabel?: string;
-    role?: string;
-    permissions: Permission[];
-}): Promise<void>;
 export declare class WorkspaceMemberManagementError extends Error {
     readonly code: "WORKSPACE_MEMBER_ALREADY_EXISTS" | "WORKSPACE_MEMBER_NOT_FOUND" | "WORKSPACE_MEMBER_SELF_UPDATE" | "WORKSPACE_MEMBER_LAST_ADMIN";
     constructor(code: "WORKSPACE_MEMBER_ALREADY_EXISTS" | "WORKSPACE_MEMBER_NOT_FOUND" | "WORKSPACE_MEMBER_SELF_UPDATE" | "WORKSPACE_MEMBER_LAST_ADMIN");
@@ -488,7 +482,6 @@ export declare function setWorkspaceDefaultRig(db: Database, workspaceId: string
 export declare function getWorkspaceGrant(db: Database, subjectId: string, workspaceId: string, provenance?: {
     principalKind?: AccessPrincipalKind;
 }): Promise<AccessGrant | null>;
-export declare function listWorkspaceMembers(db: Database, workspaceId: string): Promise<WorkspaceMember[]>;
 /**
  * Resolve a managed user email to its user id.
  *
@@ -986,17 +979,6 @@ export type ListKnowledgeMemoryOptions = {
     /** Agent-only typed read layers; see WorkspaceMemorySearchInput.agentScope. */
     agentScope?: MemoryAgentScope | undefined;
 };
-/**
- * Sanitized row shape used only by Workspace State's bounded read-only
- * inventory. The stable id is retained solely for deterministic ordering; no
- * memory body, provenance, metadata, or vector field crosses this query seam.
- */
-export type WorkspaceStateMemoryRecord = {
-    id: string;
-    status: KnowledgeMemoryStatus;
-    kind: KnowledgeMemoryKind;
-    updatedAt: string;
-};
 export type CreateSocialConnectionInput = {
     accountId: string;
     workspaceId: string;
@@ -1644,6 +1626,7 @@ export declare function createFileUpload(db: Database, input: {
     accountId: string;
     workspaceId: string;
     fileId: string;
+    privateOwnerSubjectId?: string | null;
     filename: string;
     safeFilename: string;
     contentType: string;
@@ -1708,6 +1691,18 @@ export declare function resolveDocumentOriginalFileForSubject(db: Database, inpu
     documentId: string;
 }): Promise<FileAsset | null>;
 /** Batch form of requireFileForSubject; unauthorized or missing ids are omitted. */
+/** Ready originals, filtered by owner RLS and provider ACL before pagination. */
+export declare function listFilesForSubject(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    subjectId: string | null;
+    scope?: "all" | "workspace" | "personal";
+    limit?: number;
+    cursor?: string | undefined;
+}): Promise<{
+    files: FileAsset[];
+    nextCursor: string | null;
+}>;
 export declare function getFilesForSubject(db: Database, input: {
     accountId: string;
     workspaceId: string;
@@ -1850,7 +1845,8 @@ export declare function promoteRetainedScreenshotMaintenanceCleanup(db: Database
  * Complete a claimed reconcile/delete operation and release exactly one quota
  * bucket. A lost response is idempotent on the requested terminal state.
  */
-export declare function completeRetainedScreenshotMaintenance(db: Database, input: {
+export declare function completeRetainedScreenshotMaintenance(db: Database, input: Parameters<typeof completeRetainedScreenshotMaintenanceInOwnerScope>[1]): Promise<boolean>;
+declare function completeRetainedScreenshotMaintenanceInOwnerScope(db: Database, input: {
     accountId: string;
     workspaceId: string;
     artifactId: string;
@@ -2717,12 +2713,6 @@ export declare function createKnowledgeMemory(db: Database, input: CreateKnowled
 export declare function updateKnowledgeMemory(db: Database, workspaceId: string, memoryId: string, input: UpdateKnowledgeMemoryInput, embedder?: MemoryEmbedder): Promise<KnowledgeMemory>;
 export declare function getKnowledgeMemory(db: Database, workspaceId: string, memoryId: string): Promise<KnowledgeMemory | null>;
 export declare function listKnowledgeMemories(db: Database, workspaceId: string, options?: ListKnowledgeMemoryOptions): Promise<KnowledgeMemory[]>;
-/**
- * Return Workspace State's fixed-limit Memory projection without materializing
- * general Memory rows. Equal timestamps use the stable UUID as a deterministic
- * tie-breaker so repeated read-time projections are reproducible.
- */
-export declare function listWorkspaceStateMemoryRecords(db: Database, workspaceId: string): Promise<WorkspaceStateMemoryRecord[]>;
 export type MemoryEmbedder = {
     model: string;
     embedMany: (texts: string[]) => Promise<number[][]>;
@@ -2905,9 +2895,7 @@ export declare function listScheduledTasks(db: Database, workspaceId: string, li
  * repeatable-read snapshot so task creation/update performed after discovery
  * cannot make an older row move between offset pages or hide a matching task.
  */
-export declare function listKnowledgeSourceSyncTasksForConnection(db: Database, workspaceId: string, connectionId: string, pageSize?: number): Promise<Array<ScheduledTask & {
-    action: KnowledgeSourceSyncAction;
-}>>;
+export declare function listKnowledgeSourceSyncTasksForConnection(db: Database, workspaceId: string, connectionId: string, pageSize?: number): Promise<Array<ScheduledTask>>;
 export declare function deleteScheduledTask(db: Database, workspaceId: string, taskId: string, options?: {
     connectorCleanupSubjectId?: string;
     connectorCleanupCompleted?: boolean;
@@ -5097,8 +5085,11 @@ export declare class SessionCreateIdempotencyConflictError extends Error {
     constructor();
 }
 export type SessionCreateInput = {
+    initialAgentLearning?: import("@opengeni/contracts").AgentLearningOverrides | undefined;
     bundledSkillIds?: BundledSkillId[] | undefined;
     requestedSessionId?: string;
+    /** Internal ordinary source-run proof; never accepted from session HTTP input. */
+    scheduledSourceRunId?: string;
     accountId: string;
     workspaceId: string;
     visibility?: "user_private" | "workspace_shared";
@@ -5208,6 +5199,10 @@ export type InitializedSessionCreateReplay = {
     denial: SessionSpawnDenial;
 };
 export declare function getInitializedSessionCreateReplay(db: Database, input: {
+    initialAgentLearning?: import("@opengeni/contracts").AgentLearningOverrides | undefined;
+    agentAccess?: SessionAgentAccess;
+    scopeSubjectId?: SessionScopeSubjectId | null;
+    memoryScope?: SessionMemoryScope;
     bundledSkillIds?: BundledSkillId[] | undefined;
     accountId: string;
     workspaceId: string;
@@ -10544,3 +10539,6 @@ export declare function listDueWorkspacePauseTimers(db: Database, limit?: number
     timer_id: string;
 }[]>;
 export * from "./feedback.js";
+export * from "./knowledge-entries.js";
+export * from "./knowledge-indexing.js";
+export * from "./knowledge-document-preparation.js";