@opengeni/db 4.4.0-canary.0 → 4.4.0-canary.2

package/dist/knowledge-entries.d.ts

@@ -0,0 +1,421 @@
+import { FileAsset, AgentLearningOverridePatch, AgentInstructionSaveRequest, AgentInstructionReviewRequest, WorkspaceInstructionPolicyTarget, KnowledgeEntryListRequest, KnowledgeReviewBatchListRequest, KnowledgeEntryBatchReviewRequest, KnowledgeTaskNotePromotionRequest, KnowledgeEntryRecord, KnowledgeEntryReviewRequest, KnowledgeEntryRestoreRequest, KnowledgeEntrySaveRequest, type AgentLearningContext, type KnowledgeEntryScope } from "@opengeni/contracts";
+import { type Database } from "./database.js";
+/** Trusted host claims. Never deserialize this context from tool/request input. */
+export type KnowledgeActor = {
+    kind: "service";
+    principalKind: "service" | "api_key" | "configured_key" | "mcp_gateway";
+    subjectId: string;
+    writeScopes: Array<"workspace" | "organization">;
+    review: false;
+    settingsScopes: [];
+} | {
+    kind: "human";
+    principalKind: "human_session";
+    subjectId: string;
+    writeScopes: KnowledgeEntryScope[];
+    settingsScopes: Array<"workspace" | "personal">;
+    review: boolean;
+} | {
+    kind: "agent";
+    sessionId: string;
+    turnId: string;
+    attemptId: string;
+    executionGeneration: number;
+};
+export type KnowledgeContext = {
+    accountId: string;
+    workspaceId: string;
+    actor: KnowledgeActor;
+};
+/** Freeze before model execution; retries of the logical turn recover the same policy. */
+export declare function freezeAgentLearningPolicy(db: Database, context: KnowledgeContext): Promise<{
+    [x: string]: unknown;
+    defaultScope: "personal" | "workspace";
+    subjectId: string | null;
+    effective: {
+        knowledge: "automatic" | "off" | "review_first";
+        instructions: "automatic" | "off" | "review_first";
+        skills: "automatic" | "off" | "review_first";
+    };
+}>;
+export declare function saveKnowledgeEntry(db: Database, context: KnowledgeContext, input: KnowledgeEntrySaveRequest): Promise<{
+    operationId: string;
+    entryId: string;
+    revisionId: string;
+    version: number;
+    outcome: "archived" | "pending" | "published" | "rejected";
+    reviewBatchId: string | null;
+    replayed: boolean;
+}>;
+export declare function promoteTaskNoteToKnowledge(db: Database, context: KnowledgeContext, input: KnowledgeTaskNotePromotionRequest): Promise<{
+    operationId: string;
+    entryId: string;
+    revisionId: string;
+    version: number;
+    outcome: "archived" | "pending" | "published" | "rejected";
+    reviewBatchId: string | null;
+    replayed: boolean;
+}>;
+export declare function reviewKnowledgeEntry(db: Database, context: KnowledgeContext, input: KnowledgeEntryReviewRequest): Promise<{
+    operationId: string;
+    entryId: string;
+    revisionId: string;
+    version: number;
+    outcome: "archived" | "pending" | "published" | "rejected";
+    reviewBatchId: string | null;
+    replayed: boolean;
+}>;
+/** Atomic review of exact revisions; dependencies publish before their findings. */
+export declare function reviewKnowledgeEntries(db: Database, context: KnowledgeContext, input: KnowledgeEntryBatchReviewRequest): Promise<{
+    receipts: {
+        operationId: string;
+        entryId: string;
+        revisionId: string;
+        version: number;
+        outcome: "archived" | "pending" | "published" | "rejected";
+        reviewBatchId: string | null;
+        replayed: boolean;
+    }[];
+}>;
+export declare function restoreKnowledgeEntry(db: Database, context: KnowledgeContext, input: KnowledgeEntryRestoreRequest): Promise<{
+    operationId: string;
+    entryId: string;
+    revisionId: string;
+    version: number;
+    outcome: "archived" | "pending" | "published" | "rejected";
+    reviewBatchId: string | null;
+    replayed: boolean;
+}>;
+export declare function archiveKnowledgeEntry(db: Database, context: KnowledgeContext, input: {
+    operationId: string;
+    entryId: string;
+    expectedVersion: number;
+}): Promise<{
+    operationId: string;
+    entryId: string;
+    revisionId: string;
+    version: number;
+    outcome: "archived" | "pending" | "published" | "rejected";
+    reviewBatchId: string | null;
+    replayed: boolean;
+}>;
+export declare function getKnowledgeEntry(db: Database, context: KnowledgeContext, entryId: string, options?: {
+    revisionId?: string | undefined;
+    view?: "published" | "needs_review" | "archived" | "rejected" | undefined;
+}): Promise<KnowledgeEntryRecord | null>;
+export declare function listKnowledgeEntries(db: Database, context: KnowledgeContext, input?: KnowledgeEntryListRequest, embedding?: {
+    model: string;
+    values: number[];
+} | undefined): Promise<{
+    entries: {
+        id: string;
+        scope: "organization" | "personal" | "workspace";
+        version: number;
+        publishedRevisionId: string | null;
+        latestRevisionId: string;
+        archived: boolean;
+        createdAt: string;
+        updatedAt: string;
+        score?: number | undefined;
+        excerpts: {
+            field: "content" | "title";
+            start: number;
+            end: number;
+            text: string;
+        }[];
+        revision: {
+            id: string;
+            entryId: string;
+            number: number;
+            change: "archive" | "upsert";
+            previousRevisionId: string | null;
+            restoredFromRevisionId: string | null;
+            createdAt: string;
+            createdBySessionId: string | null;
+            reviewBatchId: string | null;
+            outcome: "pending" | "published" | "rejected" | "superseded";
+            title: string;
+            kind: "decision" | "fact" | "group" | "incident" | "note" | "requirement" | "source";
+            preview: string;
+            groupIds: string[];
+            sourceKind: "connector" | "conversation" | "file" | "manual" | "repository" | "slack" | "task_note" | "web" | null;
+        };
+    }[];
+    nextCursor: string | null;
+}>;
+export declare function listKnowledgeReviewBatches(db: Database, context: KnowledgeContext, input?: KnowledgeReviewBatchListRequest): Promise<{
+    batches: {
+        id: string;
+        sessionId: string | null;
+        scheduledTaskId: string | null;
+        scheduledTaskRunId: string | null;
+        title: string | null;
+        scope: "organization" | "personal" | "workspace";
+        pendingCount: number;
+        createdAt: string;
+    }[];
+    nextCursor: string | null;
+}>;
+export declare function listKnowledgeEntryHistory(db: Database, context: KnowledgeContext, entryId: string, beforeRevision?: number): Promise<{
+    entries: {
+        id: string;
+        scope: "organization" | "personal" | "workspace";
+        version: number;
+        publishedRevisionId: string | null;
+        latestRevisionId: string;
+        archived: boolean;
+        createdAt: string;
+        updatedAt: string;
+        score?: number | undefined;
+        excerpts: {
+            field: "content" | "title";
+            start: number;
+            end: number;
+            text: string;
+        }[];
+        revision: {
+            id: string;
+            entryId: string;
+            number: number;
+            change: "archive" | "upsert";
+            previousRevisionId: string | null;
+            restoredFromRevisionId: string | null;
+            createdAt: string;
+            createdBySessionId: string | null;
+            reviewBatchId: string | null;
+            outcome: "pending" | "published" | "rejected" | "superseded";
+            title: string;
+            kind: "decision" | "fact" | "group" | "incident" | "note" | "requirement" | "source";
+            preview: string;
+            groupIds: string[];
+            sourceKind: "connector" | "conversation" | "file" | "manual" | "repository" | "slack" | "task_note" | "web" | null;
+        };
+    }[];
+    beforeRevision: number | null;
+}>;
+export declare function getAgentLearningSettings(db: Database, context: KnowledgeContext, scope: "workspace" | "personal" | "context", source?: AgentLearningContext): Promise<{
+    ownerKey: string;
+    contextKey: string;
+    version: number;
+    settings: {
+        knowledge?: "automatic" | "inherit" | "off" | "review_first" | undefined;
+        instructions?: "automatic" | "inherit" | "off" | "review_first" | undefined;
+        skills?: "automatic" | "inherit" | "off" | "review_first" | undefined;
+    };
+}>;
+export declare function saveAgentLearningSettings(db: Database, context: KnowledgeContext, input: {
+    scope: "workspace" | "personal";
+    source?: AgentLearningContext | undefined;
+    operationId: string;
+    expectedVersion: number;
+    settings: AgentLearningOverridePatch;
+}): Promise<{
+    ownerKey: string;
+    contextKey: string;
+    version: number;
+    settings: {
+        knowledge?: "automatic" | "inherit" | "off" | "review_first" | undefined;
+        instructions?: "automatic" | "inherit" | "off" | "review_first" | undefined;
+        skills?: "automatic" | "inherit" | "off" | "review_first" | undefined;
+    };
+}>;
+export declare function listAgentLearningOverrides(db: Database, context: KnowledgeContext, scope: "workspace" | "personal"): Promise<{
+    contextKey: string;
+    version: number;
+    settings: {
+        knowledge?: "automatic" | "inherit" | "off" | "review_first" | undefined;
+        instructions?: "automatic" | "inherit" | "off" | "review_first" | undefined;
+        skills?: "automatic" | "inherit" | "off" | "review_first" | undefined;
+    };
+    updatedAt: string;
+    label: string;
+}[]>;
+export declare function saveAgentInstruction(db: Database, context: KnowledgeContext, input: AgentInstructionSaveRequest): Promise<{
+    operationId: string;
+    revisionId: string;
+    outcome: "pending" | "published" | "rejected";
+    reviewBatchId: string | null;
+    replayed: boolean;
+}>;
+export declare function getAgentInstruction(db: Database, context: KnowledgeContext, target: WorkspaceInstructionPolicyTarget): Promise<{
+    target: {
+        kind: "charter" | "policy";
+        scope: "global" | "role";
+        roleKey: string | null;
+    };
+    expectedCurrentRevisionId: string | null;
+    expectedActivationVersion: number;
+    content: string | null;
+}>;
+export declare function reviewAgentInstruction(db: Database, context: KnowledgeContext, input: AgentInstructionReviewRequest): Promise<{
+    operationId: string;
+    revisionId: string;
+    outcome: "pending" | "published" | "rejected";
+    reviewBatchId: string | null;
+    replayed: boolean;
+}>;
+export declare function listAgentInstructionReviews(db: Database, context: KnowledgeContext, cursor?: string): Promise<{
+    entries: {
+        revisionId: string;
+        content: string;
+        target: {
+            kind: "charter" | "policy";
+            scope: "global" | "role";
+            roleKey: string | null;
+        };
+        reviewBatchId: string | null;
+        sessionId: string | null;
+        reason: string;
+        createdAt: string;
+    }[];
+    nextCursor: string | null;
+}>;
+/** Host-only parser boundary. The file metadata is never returned by agent tools. */
+export declare function inspectKnowledgeFilePreparation(db: Database, context: KnowledgeContext, fileId: string): Promise<{
+    status: "retained";
+    fileId: string;
+    filename: string;
+    receipt: {
+        operationId: string;
+        entryId: string;
+        revisionId: string;
+        version: number;
+        outcome: "archived" | "pending" | "published" | "rejected";
+        reviewBatchId: string | null;
+        replayed: boolean;
+    };
+} | {
+    status: "disabled";
+    fileId: string;
+} | {
+    status: "prepare";
+    file: {
+        scope?: "personal" | "workspace" | undefined;
+        id: string;
+        workspaceId: string;
+        status: "deleted" | "expired" | "failed" | "pending_upload" | "ready";
+        filename: string;
+        safeFilename: string;
+        contentType: string;
+        sizeBytes: number;
+        sha256: string | null;
+        bucket: string;
+        objectKey: string;
+        createdAt: string;
+        updatedAt: string;
+    };
+}>;
+/** Concurrent/recovered preparations converge on the first exact saved source. */
+export declare function completeKnowledgeFilePreparation(db: Database, context: KnowledgeContext, input: {
+    fileId: string;
+    title: string;
+    content: string;
+    sourceVersion?: string;
+}): Promise<{
+    status: "retained";
+    fileId: string;
+    filename: string;
+    receipt: {
+        operationId: string;
+        entryId: string;
+        revisionId: string;
+        version: number;
+        outcome: "archived" | "pending" | "published" | "rejected";
+        reviewBatchId: string | null;
+        replayed: boolean;
+    };
+} | {
+    status: "disabled";
+    fileId: string;
+}>;
+export declare function knowledgeOriginalFileAsset(raw: Record<string, unknown>): FileAsset;
+/** Exact entry visibility first; origin workspace metadata is not an access grant. */
+export declare function getKnowledgeOriginalFile(db: Database, context: KnowledgeContext, entryId: string, revisionId?: string): Promise<{
+    scope?: "personal" | "workspace" | undefined;
+    id: string;
+    workspaceId: string;
+    status: "deleted" | "expired" | "failed" | "pending_upload" | "ready";
+    filename: string;
+    safeFilename: string;
+    contentType: string;
+    sizeBytes: number;
+    sha256: string | null;
+    bucket: string;
+    objectKey: string;
+    createdAt: string;
+    updatedAt: string;
+} | null>;
+/** Finish only a pre-cutover, human-answered remember confirmation. */
+export declare function confirmLegacyKnowledge(db: Database, context: KnowledgeContext, request: {
+    operationId: string;
+    claimId: string;
+    humanInputRequestId: string;
+}): Promise<{
+    operationId: string;
+    entryId: string;
+    revisionId: string;
+    version: number;
+    outcome: "archived" | "pending" | "published" | "rejected";
+    reviewBatchId: string | null;
+    replayed: boolean;
+}>;
+/** Compatibility only: finish an imported native instruction without rebaselining. */
+export declare function confirmLegacyInstruction(db: Database, context: KnowledgeContext, request: {
+    operationId: string;
+    proposalId: string;
+    decisionReceiptId: string;
+    humanInputRequestId: string;
+}): Promise<{
+    operationId: string;
+    revisionId: string;
+    outcome: "pending" | "published" | "rejected";
+    reviewBatchId: string | null;
+    replayed: boolean;
+}>;
+/** Protocol recovery runs before the model, including when the retired tool is no longer selected. */
+export declare function recoverLegacyKnowledgeConfirmations(db: Database, context: KnowledgeContext): Promise<{
+    receipts: {
+        operationId: string;
+        entryId: string;
+        revisionId: string;
+        version: number;
+        outcome: "archived" | "pending" | "published" | "rejected";
+        reviewBatchId: string | null;
+        replayed: boolean;
+    }[];
+    instructionReceipts: {
+        operationId: string;
+        revisionId: string;
+        outcome: "pending" | "published" | "rejected";
+        reviewBatchId: string | null;
+        replayed: boolean;
+    }[];
+    unavailable: number;
+}>;
+/** Explicit content from this agent's bound source, including its own pending batch.
+ * Ambient retrieval continues to return published knowledge only. */
+export declare function readScheduledKnowledgeSource(db: Database, context: KnowledgeContext, input: {
+    entryId?: string;
+    afterId?: string;
+    offset?: number;
+}): Promise<{
+    items: ({
+        entryId: string;
+        revisionId: string;
+        content?: string | undefined;
+        codecVersion: number;
+        pending: boolean;
+        title: string;
+    } | {
+        entryId: string;
+        revisionId: string;
+        codecVersion: number;
+        pending: boolean;
+        title: string;
+        content: string;
+        offset: number;
+        totalCharacters: number;
+        nextOffset: number | null;
+    })[];
+    nextCursor: string | null;
+}>;

package/dist/knowledge-indexing.d.ts

@@ -0,0 +1,99 @@
+import { z } from "zod";
+import { type Database } from "./database.js";
+declare const Claim: z.ZodObject<{
+    accountId: z.ZodUUID;
+    entryId: z.ZodUUID;
+    revisionId: z.ZodUUID;
+    leaseId: z.ZodUUID;
+    model: z.ZodString;
+    dimensions: z.ZodNumber;
+    generation: z.ZodNumber;
+    nextIndex: z.ZodNumber;
+}, z.core.$strip>;
+export type KnowledgeIndexClaim = z.infer<typeof Claim>;
+/** Internal projection dispatcher. No HTTP, MCP or agent tool exposes this capability. */
+export declare function claimKnowledgeIndexJobs(db: Database, input: {
+    model: string;
+    dimensions: number;
+    limit?: number;
+}): Promise<{
+    accountId: string;
+    entryId: string;
+    revisionId: string;
+    leaseId: string;
+    model: string;
+    dimensions: number;
+    generation: number;
+    nextIndex: number;
+}[]>;
+export declare function readKnowledgeIndexSource(db: Database, claim: KnowledgeIndexClaim): Promise<{
+    billingWorkspaceId: string;
+    entry: {
+        title: string;
+        kind: "decision" | "fact" | "group" | "incident" | "note" | "requirement" | "source";
+        content: string;
+        source?: {
+            kind: "connector" | "conversation" | "file" | "manual" | "repository" | "slack" | "task_note" | "web";
+            noteId?: string | undefined;
+            fileId?: string | undefined;
+            documentId?: string | undefined;
+            sessionId?: string | undefined;
+            uri?: string | undefined;
+            externalId?: string | undefined;
+            version?: string | undefined;
+            capturedAt?: string | undefined;
+            retention?: "full_text" | "passages" | "reference" | undefined;
+        } | undefined;
+        evidence: {
+            entryId: string;
+            revisionId: string;
+            location: {
+                page?: number | undefined;
+                passage?: string | undefined;
+                messageIds?: string[] | undefined;
+                path?: string | undefined;
+                commit?: string | undefined;
+                lineStart?: number | undefined;
+                lineEnd?: number | undefined;
+            };
+            quote?: string | undefined;
+        }[];
+        groupIds: string[];
+        relationships: {
+            entryId: string;
+            relation: "applies_to" | "conflicts_with" | "depends_on" | "related_to" | "supersedes";
+        }[];
+    };
+    nextIndex: number;
+    originWorkspaceId: string;
+    scope: "organization" | "personal" | "workspace";
+} | null>;
+export type KnowledgeIndexProjectionChunk = {
+    index: number;
+    field: "content" | "title";
+    start: number;
+    end: number;
+    text: string;
+    embedding: number[];
+};
+export declare function appendKnowledgeIndexChunks(db: Database, claim: KnowledgeIndexClaim, expectedNextIndex: number, chunks: KnowledgeIndexProjectionChunk[]): Promise<{
+    [x: string]: unknown;
+    status: "obsolete" | "pending" | "ready" | "running";
+    nextIndex?: number | undefined;
+}>;
+export declare function completeKnowledgeIndexJob(db: Database, claim: KnowledgeIndexClaim, expectedNextIndex: number): Promise<{
+    [x: string]: unknown;
+    status: "obsolete" | "pending" | "ready" | "running";
+    nextIndex?: number | undefined;
+}>;
+export declare function deferKnowledgeIndexJob(db: Database, claim: KnowledgeIndexClaim): Promise<{
+    [x: string]: unknown;
+    status: "obsolete" | "pending" | "ready" | "running";
+    nextIndex?: number | undefined;
+}>;
+export declare function continueKnowledgeIndexJob(db: Database, claim: KnowledgeIndexClaim): Promise<{
+    [x: string]: unknown;
+    status: "obsolete" | "pending" | "ready" | "running";
+    nextIndex?: number | undefined;
+}>;
+export {};

package/dist/knowledge-migration.d.ts

@@ -0,0 +1,6 @@
+import type postgres from "postgres";
+/** Maintenance-only conversion. It is not a runtime fallback or a second writer. */
+export declare const KNOWLEDGE_MIGRATION_MARKER = "-- opengeni:unified-knowledge-copy-v1";
+export declare function knowledgeMigrationId(kind: string, id: string): string;
+/** All source and destination FORCE-RLS windows are explicit in the SQL file. */
+export declare function migrateRetainedKnowledge(tx: postgres.TransactionSql): Promise<void>;

package/dist/managed-auth-session-sets.js

@@ -20,9 +20,10 @@ import {
   reapManagedAuthIsolatedSessions,
   releaseManagedAuthActorMutationLease,
   validateManagedAuthActorMutationLease
-} from "./chunk-UK57QA2H.js";
-import "./chunk-GVZJ7XSR.js";
-import "./chunk-6TKL3GQO.js";
+} from "./chunk-UOXWVP3T.js";
+import "./chunk-WFU6PS54.js";
+import "./chunk-5UUWZDAV.js";
+import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ManagedAuthActorMutationInFlightError,

package/dist/mcp-operations.js

@@ -1,11 +1,12 @@
 import {
   withRlsContext
-} from "./chunk-GVZJ7XSR.js";
+} from "./chunk-WFU6PS54.js";
+import "./chunk-5UUWZDAV.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   fromPostgresLosslessJson,
   toPostgresLosslessJson
-} from "./chunk-6TKL3GQO.js";
+} from "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/mcp-operations.ts

package/dist/mcp-operations.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/mcp-operations.ts"],"sourcesContent":["import { AttemptToolResult } from \"@opengeni/contracts\";\nimport { sql } from \"drizzle-orm\";\nimport { type Database, withRlsContext } from \"./database\";\nimport {\n  fromPostgresLosslessJson,\n  toPostgresLosslessJson,\n  LOSSLESS_CONTENT_CODEC_VERSION,\n} from \"./lossless-json\";\n\n/** Worker-authenticated invocation identity, never model/HTTP/request JSON.\n * Possessing a DB handle or matching GUCs does NOT authenticate a caller.\n * Bind this tuple only after verifying the worker invocation credential. SQL\n * then derives the principal and rechecks canonical live disclosure authority. */\nexport type McpOperationAttempt = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  turnId: string;\n  attemptId: string;\n  executionGeneration: number;\n};\n\n/** Structurally aligned with runtime CapturedMcpOperation, without a runtime dependency. */\nexport type CaptureMcpOperationInput = {\n  operationId: string;\n  sourceCallId?: string;\n  serverId: string;\n  originalTool: string;\n  observerTool: string;\n  destinationDigest: string;\n  argumentDigest: string;\n  authorityDigest: string;\n};\nexport type McpOperationSelector =\n  | { operationId: string }\n  | { sourceTurnId: string; sourceCallId: string };\nexport type McpOperationRecord = Omit<CaptureMcpOperationInput, \"sourceCallId\"> & {\n  sourceCallId: string | null;\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  sourceTurnId: string;\n  sourceAttemptId: string;\n  sourceExecutionGeneration: number;\n  principalKind: \"subject\" | \"service\";\n  principalId: string;\n  /** captured means possibly dispatched, NEVER permission to replay a mutation. */\n  originalOutcome: \"captured\" | \"completed\" | \"outcome_unknown\";\n  originalResult: AttemptToolResult | null;\n  observationResult: AttemptToolResult | null;\n  receiptRevision: string | null;\n  receiptDigest: string | null;\n};\nexport type McpOperationLookup =\n  | { status: \"found\"; operation: McpOperationRecord }\n  | { status: \"not_found\" | \"ambiguous\" };\n\nasync function command<T>(\n  db: Database,\n  attempt: McpOperationAttempt,\n  action: string,\n  payload: object,\n): Promise<T> {\n  return withRlsContext(\n    db,\n    { accountId: attempt.accountId, workspaceId: attempt.workspaceId },\n    async (tx) => {\n      const result =\n        await tx.execute(sql`select mcp_operation_command(${JSON.stringify(attempt)}::jsonb,\n      ${action}::text, ${JSON.stringify(payload)}::jsonb) as value`);\n      const rows = Array.isArray(result) ? result : result.rows;\n      if (!rows?.[0]) throw new Error(\"MCP operation command returned no receipt\");\n      return rows[0].value as T;\n    },\n    undefined,\n    \"none\", // SQL owns membership -> tenancy -> control -> session lock order.\n  );\n}\n\nexport function captureMcpOperation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  operation: CaptureMcpOperationInput,\n) {\n  return command<\"created\" | \"existing\">(db, attempt, \"capture\", operation);\n}\nexport async function settleOriginalMcpOperation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  input:\n    | { operationId: string; outcome: \"completed\"; result: AttemptToolResult }\n    | { operationId: string; outcome: \"outcome_unknown\" },\n): Promise<void> {\n  const payload =\n    input.outcome === \"completed\"\n      ? {\n          ...input,\n          result: toPostgresLosslessJson(AttemptToolResult.parse(input.result)),\n          resultCodecVersion: LOSSLESS_CONTENT_CODEC_VERSION,\n        }\n      : input;\n  const result = await command<{ status: string }>(db, attempt, \"settle_original\", payload);\n  if (result.status !== \"settled\") throw new Error(\"Original MCP operation not found\");\n}\nexport async function readMcpOperation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  selector: McpOperationSelector,\n): Promise<McpOperationLookup> {\n  const result = await command<McpOperationLookup>(db, attempt, \"read\", selector);\n  if (result.status !== \"found\") return result;\n  const { originalResultCodecVersion, observationResultCodecVersion, ...operation } =\n    result.operation as McpOperationRecord & {\n      originalResultCodecVersion: number | null;\n      observationResultCodecVersion: number | null;\n    };\n  return {\n    status: \"found\",\n    operation: {\n      ...operation,\n      originalResult: fromPostgresLosslessJson(\n        operation.originalResult,\n        originalResultCodecVersion,\n      ),\n      observationResult: fromPostgresLosslessJson(\n        operation.observationResult,\n        observationResultCodecVersion,\n      ),\n    },\n  };\n}\n/** Claims authorize only the read observer; expiry never authorizes a mutation. */\nexport function claimMcpOperationObservation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  operationId: string,\n) {\n  return command<\n    { status: \"claimed\"; claimId: string } | { status: \"busy\" | \"terminal\" | \"not_found\" }\n  >(db, attempt, \"claim_read\", { operationId });\n}\nexport function settleMcpOperationObservation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  input: {\n    operationId: string;\n    claimId: string;\n    receiptRevision: string;\n    result: AttemptToolResult;\n  },\n) {\n  // This atomically stores one receipt, not an autonomous session notification.\n  // Explicit operation_read is a new ordinary tool call: its existing result\n  // lifecycle delivers the evidence. Repeated explicit reads legitimately have\n  // distinct call outputs while the original timeout and receipt stay immutable.\n  return command<\n    | { status: \"settled\" | \"existing\" | \"conflict\"; receiptDigest: string }\n    | { status: \"stale_claim\" | \"not_found\" | \"original_completed\" }\n  >(db, attempt, \"settle_observation\", {\n    ...input,\n    result: toPostgresLosslessJson(AttemptToolResult.parse(input.result)),\n    resultCodecVersion: LOSSLESS_CONTENT_CODEC_VERSION,\n  });\n}\n\n/** Unknown/pending/error cleanup only; never releases or replaces a receipt. */\nexport function releaseMcpOperationObservation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  input: { operationId: string; claimId: string },\n) {\n  return command<{ status: \"released\" | \"stale_claim\" | \"terminal\" | \"not_found\" }>(\n    db,\n    attempt,\n    \"release_read\",\n    input,\n  );\n}\n\n/** Bind only inside the trusted worker, after exact invocation authentication.\n * Provider authorization and immutable binding fences remain the broker's job. */\nexport function createMcpOperationPersistence(db: Database, attempt: McpOperationAttempt) {\n  const frozen = { ...attempt };\n  return {\n    capture: (operation: CaptureMcpOperationInput) => captureMcpOperation(db, frozen, operation),\n    settleOriginal: (input: Parameters<typeof settleOriginalMcpOperation>[2]) =>\n      settleOriginalMcpOperation(db, frozen, input),\n  };\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,yBAAyB;AAClC,SAAS,WAAW;AAwDpB,eAAe,QACb,IACA,SACA,QACA,SACY;AACZ,SAAO;AAAA,IACL;AAAA,IACA,EAAE,WAAW,QAAQ,WAAW,aAAa,QAAQ,YAAY;AAAA,IACjE,OAAO,OAAO;AACZ,YAAM,SACJ,MAAM,GAAG,QAAQ,mCAAmC,KAAK,UAAU,OAAO,CAAC;AAAA,QAC3E,MAAM,WAAW,KAAK,UAAU,OAAO,CAAC,mBAAmB;AAC7D,YAAM,OAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,OAAO;AACrD,UAAI,CAAC,OAAO,CAAC,EAAG,OAAM,IAAI,MAAM,2CAA2C;AAC3E,aAAO,KAAK,CAAC,EAAE;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA;AAAA,EACF;AACF;AAEO,SAAS,oBACd,IACA,SACA,WACA;AACA,SAAO,QAAgC,IAAI,SAAS,WAAW,SAAS;AAC1E;AACA,eAAsB,2BACpB,IACA,SACA,OAGe;AACf,QAAM,UACJ,MAAM,YAAY,cACd;AAAA,IACE,GAAG;AAAA,IACH,QAAQ,uBAAuB,kBAAkB,MAAM,MAAM,MAAM,CAAC;AAAA,IACpE,oBAAoB;AAAA,EACtB,IACA;AACN,QAAM,SAAS,MAAM,QAA4B,IAAI,SAAS,mBAAmB,OAAO;AACxF,MAAI,OAAO,WAAW,UAAW,OAAM,IAAI,MAAM,kCAAkC;AACrF;AACA,eAAsB,iBACpB,IACA,SACA,UAC6B;AAC7B,QAAM,SAAS,MAAM,QAA4B,IAAI,SAAS,QAAQ,QAAQ;AAC9E,MAAI,OAAO,WAAW,QAAS,QAAO;AACtC,QAAM,EAAE,4BAA4B,+BAA+B,GAAG,UAAU,IAC9E,OAAO;AAIT,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,WAAW;AAAA,MACT,GAAG;AAAA,MACH,gBAAgB;AAAA,QACd,UAAU;AAAA,QACV;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,QACjB,UAAU;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,6BACd,IACA,SACA,aACA;AACA,SAAO,QAEL,IAAI,SAAS,cAAc,EAAE,YAAY,CAAC;AAC9C;AACO,SAAS,8BACd,IACA,SACA,OAMA;AAKA,SAAO,QAGL,IAAI,SAAS,sBAAsB;AAAA,IACnC,GAAG;AAAA,IACH,QAAQ,uBAAuB,kBAAkB,MAAM,MAAM,MAAM,CAAC;AAAA,IACpE,oBAAoB;AAAA,EACtB,CAAC;AACH;AAGO,SAAS,+BACd,IACA,SACA,OACA;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAIO,SAAS,8BAA8B,IAAc,SAA8B;AACxF,QAAM,SAAS,EAAE,GAAG,QAAQ;AAC5B,SAAO;AAAA,IACL,SAAS,CAAC,cAAwC,oBAAoB,IAAI,QAAQ,SAAS;AAAA,IAC3F,gBAAgB,CAAC,UACf,2BAA2B,IAAI,QAAQ,KAAK;AAAA,EAChD;AACF;","names":[]}
+{"version":3,"sources":["../src/mcp-operations.ts"],"sourcesContent":["import { AttemptToolResult } from \"@opengeni/contracts\";\nimport { sql } from \"drizzle-orm\";\nimport { type Database, withRlsContext } from \"./database\";\nimport {\n  fromPostgresLosslessJson,\n  toPostgresLosslessJson,\n  LOSSLESS_CONTENT_CODEC_VERSION,\n} from \"./lossless-json\";\n\n/** Worker-authenticated invocation identity, never model/HTTP/request JSON.\n * Possessing a DB handle or matching GUCs does NOT authenticate a caller.\n * Bind this tuple only after verifying the worker invocation credential. SQL\n * then derives the principal and rechecks canonical live disclosure authority. */\nexport type McpOperationAttempt = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  turnId: string;\n  attemptId: string;\n  executionGeneration: number;\n};\n\n/** Structurally aligned with runtime CapturedMcpOperation, without a runtime dependency. */\nexport type CaptureMcpOperationInput = {\n  operationId: string;\n  sourceCallId?: string;\n  serverId: string;\n  originalTool: string;\n  observerTool: string;\n  destinationDigest: string;\n  argumentDigest: string;\n  authorityDigest: string;\n};\nexport type McpOperationSelector =\n  | { operationId: string }\n  | { sourceTurnId: string; sourceCallId: string };\nexport type McpOperationRecord = Omit<CaptureMcpOperationInput, \"sourceCallId\"> & {\n  sourceCallId: string | null;\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  sourceTurnId: string;\n  sourceAttemptId: string;\n  sourceExecutionGeneration: number;\n  principalKind: \"subject\" | \"service\";\n  principalId: string;\n  /** captured means possibly dispatched, NEVER permission to replay a mutation. */\n  originalOutcome: \"captured\" | \"completed\" | \"outcome_unknown\";\n  originalResult: AttemptToolResult | null;\n  observationResult: AttemptToolResult | null;\n  receiptRevision: string | null;\n  receiptDigest: string | null;\n};\nexport type McpOperationLookup =\n  | { status: \"found\"; operation: McpOperationRecord }\n  | { status: \"not_found\" | \"ambiguous\" };\n\nasync function command<T>(\n  db: Database,\n  attempt: McpOperationAttempt,\n  action: string,\n  payload: object,\n): Promise<T> {\n  return withRlsContext(\n    db,\n    { accountId: attempt.accountId, workspaceId: attempt.workspaceId },\n    async (tx) => {\n      const result =\n        await tx.execute(sql`select mcp_operation_command(${JSON.stringify(attempt)}::jsonb,\n      ${action}::text, ${JSON.stringify(payload)}::jsonb) as value`);\n      const rows = Array.isArray(result) ? result : result.rows;\n      if (!rows?.[0]) throw new Error(\"MCP operation command returned no receipt\");\n      return rows[0].value as T;\n    },\n    undefined,\n    \"none\", // SQL owns membership -> tenancy -> control -> session lock order.\n  );\n}\n\nexport function captureMcpOperation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  operation: CaptureMcpOperationInput,\n) {\n  return command<\"created\" | \"existing\">(db, attempt, \"capture\", operation);\n}\nexport async function settleOriginalMcpOperation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  input:\n    | { operationId: string; outcome: \"completed\"; result: AttemptToolResult }\n    | { operationId: string; outcome: \"outcome_unknown\" },\n): Promise<void> {\n  const payload =\n    input.outcome === \"completed\"\n      ? {\n          ...input,\n          result: toPostgresLosslessJson(AttemptToolResult.parse(input.result)),\n          resultCodecVersion: LOSSLESS_CONTENT_CODEC_VERSION,\n        }\n      : input;\n  const result = await command<{ status: string }>(db, attempt, \"settle_original\", payload);\n  if (result.status !== \"settled\") throw new Error(\"Original MCP operation not found\");\n}\nexport async function readMcpOperation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  selector: McpOperationSelector,\n): Promise<McpOperationLookup> {\n  const result = await command<McpOperationLookup>(db, attempt, \"read\", selector);\n  if (result.status !== \"found\") return result;\n  const { originalResultCodecVersion, observationResultCodecVersion, ...operation } =\n    result.operation as McpOperationRecord & {\n      originalResultCodecVersion: number | null;\n      observationResultCodecVersion: number | null;\n    };\n  return {\n    status: \"found\",\n    operation: {\n      ...operation,\n      originalResult: fromPostgresLosslessJson(\n        operation.originalResult,\n        originalResultCodecVersion,\n      ),\n      observationResult: fromPostgresLosslessJson(\n        operation.observationResult,\n        observationResultCodecVersion,\n      ),\n    },\n  };\n}\n/** Claims authorize only the read observer; expiry never authorizes a mutation. */\nexport function claimMcpOperationObservation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  operationId: string,\n) {\n  return command<\n    { status: \"claimed\"; claimId: string } | { status: \"busy\" | \"terminal\" | \"not_found\" }\n  >(db, attempt, \"claim_read\", { operationId });\n}\nexport function settleMcpOperationObservation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  input: {\n    operationId: string;\n    claimId: string;\n    receiptRevision: string;\n    result: AttemptToolResult;\n  },\n) {\n  // This atomically stores one receipt, not an autonomous session notification.\n  // Explicit operation_read is a new ordinary tool call: its existing result\n  // lifecycle delivers the evidence. Repeated explicit reads legitimately have\n  // distinct call outputs while the original timeout and receipt stay immutable.\n  return command<\n    | { status: \"settled\" | \"existing\" | \"conflict\"; receiptDigest: string }\n    | { status: \"stale_claim\" | \"not_found\" | \"original_completed\" }\n  >(db, attempt, \"settle_observation\", {\n    ...input,\n    result: toPostgresLosslessJson(AttemptToolResult.parse(input.result)),\n    resultCodecVersion: LOSSLESS_CONTENT_CODEC_VERSION,\n  });\n}\n\n/** Unknown/pending/error cleanup only; never releases or replaces a receipt. */\nexport function releaseMcpOperationObservation(\n  db: Database,\n  attempt: McpOperationAttempt,\n  input: { operationId: string; claimId: string },\n) {\n  return command<{ status: \"released\" | \"stale_claim\" | \"terminal\" | \"not_found\" }>(\n    db,\n    attempt,\n    \"release_read\",\n    input,\n  );\n}\n\n/** Bind only inside the trusted worker, after exact invocation authentication.\n * Provider authorization and immutable binding fences remain the broker's job. */\nexport function createMcpOperationPersistence(db: Database, attempt: McpOperationAttempt) {\n  const frozen = { ...attempt };\n  return {\n    capture: (operation: CaptureMcpOperationInput) => captureMcpOperation(db, frozen, operation),\n    settleOriginal: (input: Parameters<typeof settleOriginalMcpOperation>[2]) =>\n      settleOriginalMcpOperation(db, frozen, input),\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAAA,SAAS,yBAAyB;AAClC,SAAS,WAAW;AAwDpB,eAAe,QACb,IACA,SACA,QACA,SACY;AACZ,SAAO;AAAA,IACL;AAAA,IACA,EAAE,WAAW,QAAQ,WAAW,aAAa,QAAQ,YAAY;AAAA,IACjE,OAAO,OAAO;AACZ,YAAM,SACJ,MAAM,GAAG,QAAQ,mCAAmC,KAAK,UAAU,OAAO,CAAC;AAAA,QAC3E,MAAM,WAAW,KAAK,UAAU,OAAO,CAAC,mBAAmB;AAC7D,YAAM,OAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,OAAO;AACrD,UAAI,CAAC,OAAO,CAAC,EAAG,OAAM,IAAI,MAAM,2CAA2C;AAC3E,aAAO,KAAK,CAAC,EAAE;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA;AAAA,EACF;AACF;AAEO,SAAS,oBACd,IACA,SACA,WACA;AACA,SAAO,QAAgC,IAAI,SAAS,WAAW,SAAS;AAC1E;AACA,eAAsB,2BACpB,IACA,SACA,OAGe;AACf,QAAM,UACJ,MAAM,YAAY,cACd;AAAA,IACE,GAAG;AAAA,IACH,QAAQ,uBAAuB,kBAAkB,MAAM,MAAM,MAAM,CAAC;AAAA,IACpE,oBAAoB;AAAA,EACtB,IACA;AACN,QAAM,SAAS,MAAM,QAA4B,IAAI,SAAS,mBAAmB,OAAO;AACxF,MAAI,OAAO,WAAW,UAAW,OAAM,IAAI,MAAM,kCAAkC;AACrF;AACA,eAAsB,iBACpB,IACA,SACA,UAC6B;AAC7B,QAAM,SAAS,MAAM,QAA4B,IAAI,SAAS,QAAQ,QAAQ;AAC9E,MAAI,OAAO,WAAW,QAAS,QAAO;AACtC,QAAM,EAAE,4BAA4B,+BAA+B,GAAG,UAAU,IAC9E,OAAO;AAIT,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,WAAW;AAAA,MACT,GAAG;AAAA,MACH,gBAAgB;AAAA,QACd,UAAU;AAAA,QACV;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,QACjB,UAAU;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,6BACd,IACA,SACA,aACA;AACA,SAAO,QAEL,IAAI,SAAS,cAAc,EAAE,YAAY,CAAC;AAC9C;AACO,SAAS,8BACd,IACA,SACA,OAMA;AAKA,SAAO,QAGL,IAAI,SAAS,sBAAsB;AAAA,IACnC,GAAG;AAAA,IACH,QAAQ,uBAAuB,kBAAkB,MAAM,MAAM,MAAM,CAAC;AAAA,IACpE,oBAAoB;AAAA,EACtB,CAAC;AACH;AAGO,SAAS,+BACd,IACA,SACA,OACA;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAIO,SAAS,8BAA8B,IAAc,SAA8B;AACxF,QAAM,SAAS,EAAE,GAAG,QAAQ;AAC5B,SAAO;AAAA,IACL,SAAS,CAAC,cAAwC,oBAAoB,IAAI,QAAQ,SAAS;AAAA,IAC3F,gBAAgB,CAAC,UACf,2BAA2B,IAAI,QAAQ,KAAK;AAAA,EAChD;AACF;","names":[]}

package/dist/migrate.js

@@ -5,7 +5,8 @@ import {
   parseBatchedBackfillMigration,
   parseConcurrentIndexMigration,
   runMigrations
-} from "./chunk-GSBONN55.js";
+} from "./chunk-45CP2YKY.js";
+import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {
   executeMigrationFile,

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-THJGMEK5.js";
+} from "./chunk-XJP7KJ6U.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/retained-provider-commands.js

@@ -1,9 +1,10 @@
 import {
   withRlsContext
-} from "./chunk-GVZJ7XSR.js";
+} from "./chunk-WFU6PS54.js";
 import {
   sandboxRetainedProcesses
-} from "./chunk-6TKL3GQO.js";
+} from "./chunk-5UUWZDAV.js";
+import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/retained-provider-commands.ts