@opengeni/db 4.4.0-canary.2 → 5.0.0-canary.0

package/dist/managed-auth-session-sets.js

@@ -20,9 +20,9 @@ import {
   reapManagedAuthIsolatedSessions,
   releaseManagedAuthActorMutationLease,
   validateManagedAuthActorMutationLease
-} from "./chunk-UOXWVP3T.js";
-import "./chunk-WFU6PS54.js";
-import "./chunk-5UUWZDAV.js";
+} from "./chunk-MWMXWHJD.js";
+import "./chunk-DPONPYJD.js";
+import "./chunk-F73UKJY6.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/mcp-operations.js

@@ -1,7 +1,7 @@
 import {
   withRlsContext
-} from "./chunk-WFU6PS54.js";
-import "./chunk-5UUWZDAV.js";
+} from "./chunk-DPONPYJD.js";
+import "./chunk-F73UKJY6.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   fromPostgresLosslessJson,

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-XJP7KJ6U.js";
+} from "./chunk-T6YLHJLS.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/retained-provider-commands.js

@@ -1,9 +1,9 @@
 import {
   withRlsContext
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 import {
   sandboxRetainedProcesses
-} from "./chunk-5UUWZDAV.js";
+} from "./chunk-F73UKJY6.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 

package/dist/runtime-posture.d.ts

@@ -1,4 +1,5 @@
 import type { Database, RlsStrategy } from "./database.js";
+export declare const SANDBOX_FILE_PUBLICATION_RUNTIME_ROUTINES: readonly ["record_sandbox_file_publication(uuid, uuid, uuid, uuid)", "list_sandbox_file_publications(uuid, uuid, jsonb)"];
 export declare const WORK_CLAIM_CAPABILITY_ROUTINES: readonly ["upsert_session_work_claim_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, integer, text, text, text, text, text, text, text)", "release_session_work_claim_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, integer, text)"];
 export declare const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES: readonly ["knowledge_index_claim(text, integer, integer)", "knowledge_index_work(uuid, uuid, uuid, jsonb)", "knowledge_entry_apply(uuid, uuid, jsonb, jsonb)", "knowledge_entry_confirm_legacy(uuid, uuid, jsonb, jsonb)", "agent_instruction_apply(uuid, uuid, jsonb, jsonb)", "knowledge_entry_read(uuid, uuid, jsonb, jsonb)", "knowledge_entry_prepare_file(uuid, uuid, jsonb, jsonb)", "knowledge_document_prepare(uuid, uuid, uuid, jsonb)", "agent_learning_manage(uuid, uuid, jsonb, jsonb)", "mcp_operation_command(jsonb, text, jsonb)", "skill_apply_lifecycle(uuid, uuid, jsonb, jsonb)", "company_brain_inspect_context_receipts(uuid, uuid, text, uuid, timestamp with time zone, uuid, integer)", "company_brain_context_get_or_create_selection(uuid, uuid, uuid, uuid, uuid, integer)", "propose_company_profile_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, text)", "propose_company_profile_for_attempt_v2(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, text, text, text)", "confirm_company_profile_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid)", "get_company_profile_agent_policy(uuid, uuid, text)", "update_company_profile_agent_policy(uuid, uuid, text, text, bigint, uuid)", "undo_governed_learning_activation(uuid, uuid, uuid, uuid)", "inspect_governed_learning_decisions(uuid, uuid, text, integer)", "inspect_governed_learning_activations(uuid, uuid, text, integer)", "inspect_governed_learning_activation_undos(uuid, uuid, text, integer)", "fork_session_content(uuid, uuid, uuid, text, uuid, text, boolean, text, text, integer)", "fork_session_content(uuid, uuid, uuid, text, uuid, text, boolean, text, text, integer, uuid)", "fork_session_content(uuid, uuid, uuid, text, uuid, text, text, text, integer)", "replay_applied_session_fork(uuid, uuid, uuid, text, uuid, text, boolean, text, text, integer)", "session_tenancy_product_activated(uuid, integer)", "session_tenancy_any_product_activation()", "xai_subscription_authority_live(uuid, uuid, text, uuid, text, uuid, uuid, bigint)", "create_xai_subscription_credential(uuid, uuid, text, text, text, text, text, text, text, timestamp with time zone)", "disconnect_xai_subscription_credential(uuid, uuid, text, uuid, jsonb)", "google_drive_document_citation(uuid, uuid, text, uuid, uuid)", "google_drive_file_authorized(uuid, uuid, text, uuid)", "knowledge_source_sync_lock_authority(uuid, uuid, uuid)", "ensure_managed_human_personal_workspace(uuid, text, uuid)", "get_external_identity_link_reference(uuid, uuid, text)", "get_external_identity_link_inventory_references(uuid, uuid[])", "ensure_external_identity(uuid, text, text)", "lookup_external_identity(uuid, text, text, text)", "prepare_external_workspace_membership_operation(jsonb)", "record_external_workspace_membership_operation(jsonb, jsonb)", "list_self_organization_memberships(text)", "list_self_organization_invitations(text)", "list_self_organization_invitations(text, uuid, integer)", "get_self_organization_invitation(text, uuid)", "list_organization_invitations(uuid, text, uuid, integer)", "list_organization_members(uuid, text)", "list_organization_administration_members(uuid, text)", "get_organization_administration_overview(uuid, text)", "get_workspace_kind(uuid, uuid)", "resolve_workspace_codex_subscription_source(uuid, uuid)", "list_organization_workspace_ids(uuid)", "list_organization_codex_workspace_ids(uuid)", "organization_workspace_command(jsonb)", "authorize_organization_shared_workspace_administration(uuid, uuid, text)", "resolve_organization_workspace_removal_subject(uuid, text, uuid)", "prepare_organization_workspace_member_removal(jsonb)", "record_organization_workspace_member_removal(jsonb, uuid, uuid)", "create_additional_managed_organization(text, text, text, text, uuid)", "create_managed_organization(text, text, text, uuid)", "assert_organization_shared_workspace_administrator(uuid, uuid, text)", "open_organization_shared_workspace_administration_capability(uuid, uuid, text)", "close_organization_shared_workspace_administration_capability(uuid)", "create_organization_shared_workspace(uuid, text, text, text, text, uuid)", "upsert_organization_shared_workspace_member(uuid, uuid, text, uuid, text, text, jsonb, boolean)", "update_organization_name(uuid, text, text, timestamp with time zone, uuid)", "create_organization_invitation_v2(jsonb)", "bind_pending_organization_invitations_for_verified_email(text, text)", "has_pending_organization_invitation_for_subject(text)", "accept_organization_invitation_v2(jsonb)", "complete_self_service_organization_setup(jsonb)", "ensure_organization_user_setup_intent(jsonb)", "claim_organization_user_setup_delivery(jsonb)", "claim_organization_user_setup_delivery_v2(jsonb)", "prepare_organization_user_setup_delivery(jsonb)", "prepare_organization_user_setup_delivery_v2(jsonb)", "settle_organization_user_setup_delivery(jsonb)", "preview_organization_user_setup(text)", "get_organization_invitation_for_administration(uuid, text, uuid)", "preflight_organization_user_setup(text)", "complete_organization_user_setup(jsonb)", "organization_membership_command(jsonb)", "prepare_organization_membership_protocol_settlements(jsonb)", "assert_active_managed_human_organization_membership(uuid, text)", "resolve_workspace_writer_grant_identity(uuid, text)", "prepare_workspace_membership_removal_settlements(jsonb)", "workspace_membership_removal_command(jsonb)", "get_organization_retention_policy(uuid, text)", "preview_organization_retention_deletions(uuid, integer)", "claim_organization_retention_deletion(uuid, uuid, uuid[])", "list_organization_retention_deletion_objects(uuid, uuid, uuid, text, integer)", "record_organization_retention_object_deleted(uuid, uuid, uuid, text, text, text, text)", "fail_organization_retention_deletion(uuid, uuid, uuid, text)", "finalize_organization_retention_deletion(uuid, uuid, uuid, text)", "complete_organization_retention_deletion(uuid, uuid, uuid, text)", ...string[], "open_private_session_create_capability(uuid, uuid, uuid, text)", "open_private_child_session_create_capability(uuid, uuid, uuid, uuid, uuid, uuid, integer)", "close_private_session_create_capability(uuid)", "resolve_session_attempt_personal_resources(uuid, uuid, uuid)", "accept_turn_personal_resource_attachment(uuid, uuid, uuid, uuid, text, integer, boolean, integer)", "list_self_user_resource_authorities(uuid, uuid, text, uuid, integer)", "issue_self_user_resource_grant(uuid, uuid, uuid, text, text, text, uuid, integer, boolean)", "issue_self_local_connection_use_grant(uuid, uuid, uuid, text, boolean)", "revoke_self_user_resource_grant(uuid, uuid, uuid)", "authorize_session_attempt_personal_resource_reads(uuid, uuid, uuid)", "preference_registry_create_knowledge_proposal_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, uuid, text, text, text, text, integer, text, jsonb, timestamp with time zone, text)", "create_scoped_variable_set(uuid, uuid, text, text, text, jsonb, boolean)", "list_scoped_variable_sets(uuid, uuid, uuid, text, text)", "count_scoped_variable_sets(uuid, uuid, text)", "mutate_scoped_variable_set(uuid, uuid, uuid, text, text, boolean, text, boolean, text, text, boolean)", "read_scoped_variable_set_secret(uuid, uuid, uuid, text, text, text, uuid, uuid, uuid, integer)", "materialize_scoped_variable_set_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid)", "materialize_scoped_variable_set_for_session(uuid, uuid, uuid, uuid)", "connection_authority_convergence_audit_capability_active(uuid)", "resolve_personal_connection_authority_selection(uuid, uuid, text, uuid, jsonb)", "resolve_accepted_connection_use(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, uuid, text, text, text, text)", "resolve_connection_use_authority(uuid, uuid, uuid, jsonb)", "inspect_organization_connection_authority_convergence(uuid, integer, uuid)", "get_self_personal_github_repository_selection(uuid, uuid, text, uuid)", "mutate_self_personal_github_repository_selection(uuid, uuid, text, uuid, bigint, bigint, text, jsonb, boolean)", "create_personal_document_authority(uuid, uuid, uuid)", "resolve_document_original_file(uuid, uuid, text, uuid)", "resolve_session_attempt_personal_document_reads(uuid, uuid, uuid, uuid)", "list_document_authority_reclassifications(uuid, uuid, text, uuid, integer, timestamp with time zone, uuid)", "reclassify_document_authority(jsonb)", "run_document_default_collection_backfill(jsonb)", "list_document_default_collection_backfill_runs(jsonb)", "get_document_default_collection_backfill_audit(jsonb)", "list_organization_document_authority_reclassifications(jsonb)", "create_scoped_rig(uuid, uuid, text, text, text, text, jsonb, boolean)", "list_scoped_rigs(uuid, uuid, uuid, text, text)", "count_scoped_rigs(uuid, uuid, text)", "mutate_scoped_rig(uuid, uuid, uuid, text, text, boolean, text, boolean, boolean)", "finalize_scoped_enrollment(uuid, uuid, text, text, boolean, boolean, text, text, text, boolean)", "list_scoped_enrollments(uuid, uuid, uuid, text)", "get_scoped_sandbox(uuid, uuid, uuid)", "authorize_scoped_sandbox_attach(uuid, uuid, uuid)", "materialize_scoped_rig_version_for_attempt(uuid, uuid, uuid, uuid, uuid, integer)", "authorize_session_attempt_personal_machine(uuid, uuid, uuid, uuid, uuid, integer, uuid)", "assert_session_attempt_personal_machine(uuid, uuid, uuid, uuid, uuid, integer, uuid, boolean)", "list_scoped_machine_dependent_sessions(uuid, uuid, uuid)", "detach_scoped_machine_dependent_sessions(uuid, uuid, uuid)", "freeze_scheduled_task_personal_resources(uuid, uuid, uuid, bigint)", "clone_scheduled_task_personal_resource_authority(uuid, uuid, uuid, bigint, bigint)", "refresh_scheduled_task_personal_resources_clone_connections(uuid, uuid, uuid, bigint, bigint)", "create_scheduled_agent_run_with_admission(uuid, uuid, uuid, uuid, bigint, text, text, text, timestamp with time zone, timestamp with time zone, jsonb)", "materialize_scheduled_task_reusable_session_from_run(uuid, uuid, uuid, uuid, uuid, bigint, text)", "scheduled_task_run_personal_resource_authority(uuid, uuid, uuid)", "scheduled_task_run_connection_authority_subject(uuid, uuid, uuid)", "scheduled_task_personal_resource_authority_subject(uuid, uuid, uuid, bigint)", "record_scheduled_task_revision_authority(uuid, uuid, uuid, bigint)", "clone_scheduled_task_revision_authority(uuid, uuid, uuid, bigint, bigint)", "scheduled_task_revision_authority_subject(uuid, uuid, uuid, bigint)", "scheduled_task_revision_authority_snapshot(uuid, uuid, uuid, bigint)", "validate_scheduled_agent_run_live_authority(uuid, uuid, uuid)", "scheduled_scoped_rig_version_metadata(uuid, uuid, text, uuid, uuid)", "scheduled_variable_set_expected_generation_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid)", "bind_scheduled_task_run_session(uuid, uuid, uuid, uuid)", "transition_scheduled_agent_run(uuid, uuid, uuid, uuid, uuid, text, text)", "ensure_canonical_human_identity(text, text)", "validate_canonical_human_session(text, text, boolean)", "get_canonical_human_identity_projection(text)", "apply_canonical_human_identity_operation(uuid, text, bigint, text, uuid, text, text, text)", "get_canonical_human_exact_login_binding(text, text)", "managed_auth_session_set_authority_state(text)", "managed_auth_session_set_snapshot(text, text, boolean, boolean, boolean)", "managed_auth_session_set_bootstrap(text, text, text, text, uuid, text, bigint, bigint)", "managed_auth_session_set_begin_transaction(text, text, text, uuid, text, bigint, uuid, bigint, text, text, uuid, uuid, text, timestamp with time zone)", "managed_auth_session_set_complete_transaction(text, text, uuid, text, bigint, bigint, uuid, text, text, text)", "managed_auth_session_set_mutate(text, text, uuid, text, bigint, bigint, text, uuid, uuid, uuid, text, text)", "managed_auth_actor_mutation_fence(text, bigint, uuid)", "managed_auth_actor_mutation_lease_acquire(text, bigint, uuid, integer)", "managed_auth_actor_mutation_lease_release(text, uuid)", "managed_auth_actor_mutation_lease_validate(text, bigint, uuid)", "managed_auth_adopted_session_snapshot(text)", "managed_auth_isolated_session_reap(integer)", "managed_auth_expired_session_set_reap(integer)", "managed_auth_session_set_operation_receipt(text, uuid, text, text)", "get_organization_recovery_overview(uuid, text, jsonb, text, text)", "organization_recovery_command(jsonb)", "create_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, integer)", "archive_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, integer, text)", "list_task_notes_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, boolean, integer)", "replace_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid, uuid, integer, text, text, integer, text)", "resolve_task_note_knowledge_promotion_source(uuid, uuid, uuid, uuid, uuid, integer, uuid, integer, text, text, text)", "upsert_session_work_claim_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, integer, text, text, text, text, text, text, text)", "release_session_work_claim_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, integer, text)", "session_private_actor_visible(uuid, uuid, uuid, text)", "session_reference_visible(uuid, uuid, uuid)", "session_visibility_lifecycle_capability_held()", "transition_session_visibility(uuid, uuid, uuid, text, text, integer, text, text, integer)", "xai_subscription_pool_visible(uuid, uuid, text, text, uuid)", "resolve_xai_authority_pool(uuid, uuid, text, jsonb)", "revalidate_xai_subscription_authority(uuid, text, uuid, jsonb)", "xai_provider_account_authority_snapshot_v1_valid(jsonb)"];
 /**
@@ -103,6 +104,7 @@ export type RuntimeRoutinePosture = {
     execute: boolean;
     publicExecute?: boolean;
     securityDefiner: boolean;
+    configuration?: string[] | null;
 };
 export type RuntimeTargetRoutinePosture = RuntimeRoutinePosture & {
     publicExecute: boolean;

package/dist/schema.d.ts

@@ -23527,6 +23527,99 @@ export declare const files: import("drizzle-orm/pg-core").PgTableWithColumns<{
     };
     dialect: 'pg';
 }>;
+/** Immutable publication receipt; content and ownership remain in files. */
+export declare const sandboxFilePublications: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "sandbox_file_publications";
+    schema: "opengeni_private";
+    columns: {
+        accountId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "account_id";
+            tableName: "sandbox_file_publications";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        workspaceId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "workspace_id";
+            tableName: "sandbox_file_publications";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        fileId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "file_id";
+            tableName: "sandbox_file_publications";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        sourceSessionId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "source_session_id";
+            tableName: "sandbox_file_publications";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        publishedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "published_at";
+            tableName: "sandbox_file_publications";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: 'pg';
+}>;
 export declare const fileUploads: import("drizzle-orm/pg-core").PgTableWithColumns<{
     name: "file_uploads";
     schema: undefined;

package/dist/schema.js

@@ -236,6 +236,7 @@ import {
   rigs,
   sandboxCheckpointArtifactStateValues,
   sandboxCheckpointArtifacts,
+  sandboxFilePublications,
   sandboxKindValues,
   sandboxLeaseHolders,
   sandboxLeaseLivenessValues,
@@ -372,7 +373,7 @@ import {
   xaiRotationSettings,
   xaiSessionAccountPins,
   xaiSubscriptionCredentials
-} from "./chunk-5UUWZDAV.js";
+} from "./chunk-F73UKJY6.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {
@@ -613,6 +614,7 @@ export {
   rigs,
   sandboxCheckpointArtifactStateValues,
   sandboxCheckpointArtifacts,
+  sandboxFilePublications,
   sandboxKindValues,
   sandboxLeaseHolders,
   sandboxLeaseLivenessValues,

package/dist/session-background-commands.js

@@ -22,10 +22,10 @@ import {
   settleClaimedConnectedMachineBackgroundCommandWithMutation,
   settleConnectedMachineSessionBackgroundCommandWithMutation,
   settleSessionBackgroundCommandForRetainedProcessInTransaction
-} from "./chunk-M4PKBJRS.js";
-import "./chunk-6IJD3XXF.js";
-import "./chunk-WFU6PS54.js";
-import "./chunk-5UUWZDAV.js";
+} from "./chunk-6T2GGYWE.js";
+import "./chunk-ERKVSPDX.js";
+import "./chunk-DPONPYJD.js";
+import "./chunk-F73UKJY6.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/session-command-output.js

@@ -1,16 +1,16 @@
 import {
   lockSessionEventWriteRows
-} from "./chunk-M4PKBJRS.js";
-import "./chunk-6IJD3XXF.js";
+} from "./chunk-6T2GGYWE.js";
+import "./chunk-ERKVSPDX.js";
 import {
   withSessionActivityRlsContext
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 import {
   sandboxRetainedProcesses,
   sessionBackgroundCommands,
   sessionEvents,
   sessions
-} from "./chunk-5UUWZDAV.js";
+} from "./chunk-F73UKJY6.js";
 import {
   fromPostgresLosslessJson,
   withLosslessContentWriteVersion

package/dist/session-event-slices.js

@@ -1,11 +1,11 @@
 import {
   rawRows,
   withWorkspaceRls
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 import {
   sessionEvents,
   sessionTurns
-} from "./chunk-5UUWZDAV.js";
+} from "./chunk-F73UKJY6.js";
 import {
   LOSSLESS_JSON_STRING_PREFIX,
   fromPostgresLosslessJson

package/dist/session-mcp-credential-rotation.js

@@ -1,18 +1,18 @@
 import {
   lockSessionEventWriteRows
-} from "./chunk-M4PKBJRS.js";
-import "./chunk-6IJD3XXF.js";
+} from "./chunk-6T2GGYWE.js";
+import "./chunk-ERKVSPDX.js";
 import {
   rawRows,
   setSubjectRlsContext,
   withRlsContext
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 import {
   apiKeys,
   sessionCommandReceipts,
   sessionMcpServers,
   sessions
-} from "./chunk-5UUWZDAV.js";
+} from "./chunk-F73UKJY6.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 

package/dist/session-tenancy.js

@@ -14,9 +14,9 @@ import {
   replayAppliedSessionFork,
   sessionTenancyProductActivated,
   transitionSessionVisibility
-} from "./chunk-CHBLBEU6.js";
-import "./chunk-WFU6PS54.js";
-import "./chunk-5UUWZDAV.js";
+} from "./chunk-T6BWIGWJ.js";
+import "./chunk-DPONPYJD.js";
+import "./chunk-F73UKJY6.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/video-generation.js

@@ -29,9 +29,9 @@ import {
   settleVideoGenerationFailure,
   settleVideoGenerationReady,
   updateWorkspaceVideoGenerationPolicy
-} from "./chunk-6IJD3XXF.js";
-import "./chunk-WFU6PS54.js";
-import "./chunk-5UUWZDAV.js";
+} from "./chunk-ERKVSPDX.js";
+import "./chunk-DPONPYJD.js";
+import "./chunk-F73UKJY6.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/workspace-tool-defaults.js

@@ -1,11 +1,11 @@
 import {
   lockWorkspaceInferenceControl
-} from "./chunk-M4PKBJRS.js";
-import "./chunk-6IJD3XXF.js";
+} from "./chunk-6T2GGYWE.js";
+import "./chunk-ERKVSPDX.js";
 import {
   withWorkspaceRls
-} from "./chunk-WFU6PS54.js";
-import "./chunk-5UUWZDAV.js";
+} from "./chunk-DPONPYJD.js";
+import "./chunk-F73UKJY6.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 

package/drizzle/0465_sandbox_file_publications.sql

@@ -0,0 +1,142 @@
+-- deployment-mode: rolling
+-- Explicit output publication metadata only. Never infer publications from
+-- uploaded inputs, object-key conventions, temporary evidence or old history.
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '5min';
+
+CREATE TABLE opengeni_private.sandbox_file_publications (
+  account_id uuid NOT NULL,
+  workspace_id uuid NOT NULL,
+  file_id uuid NOT NULL,
+  source_session_id uuid,
+  published_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT sandbox_file_publications_pk PRIMARY KEY (account_id, workspace_id, file_id),
+  CONSTRAINT sandbox_file_publications_file_fk FOREIGN KEY (account_id, workspace_id, file_id)
+    REFERENCES files(account_id, workspace_id, id) ON DELETE CASCADE,
+  CONSTRAINT sandbox_file_publications_session_fk FOREIGN KEY (workspace_id, source_session_id)
+    REFERENCES sessions(workspace_id, id) ON DELETE SET NULL (source_session_id)
+);
+CREATE INDEX sandbox_file_publications_session_idx
+  ON opengeni_private.sandbox_file_publications(workspace_id, source_session_id, published_at, file_id);
+ALTER TABLE opengeni_private.sandbox_file_publications ENABLE ROW LEVEL SECURITY;
+ALTER TABLE opengeni_private.sandbox_file_publications FORCE ROW LEVEL SECURITY;
+CREATE POLICY workspace_isolation ON opengeni_private.sandbox_file_publications
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+-- A publication never grants access to its file or bypasses personal-file RLS.
+CREATE POLICY visible_file ON opengeni_private.sandbox_file_publications AS RESTRICTIVE
+  USING (EXISTS (SELECT 1 FROM files f WHERE f.account_id = sandbox_file_publications.account_id
+    AND f.workspace_id = sandbox_file_publications.workspace_id AND f.id = file_id AND f.status = 'ready'))
+  WITH CHECK (EXISTS (SELECT 1 FROM files f WHERE f.account_id = sandbox_file_publications.account_id
+    AND f.workspace_id = sandbox_file_publications.workspace_id AND f.id = file_id AND f.status = 'ready'));
+
+-- Keep new storage out of the public-schema exact table inventory so older
+-- binaries remain ready. Runtime has EXECUTE only, never table DML. Both
+-- capabilities bind caller tenant GUCs and retain explicit file-owner checks
+-- even when a deployment migrated with a superuser owner.
+CREATE FUNCTION opengeni_private.record_sandbox_file_publication(
+  p_account uuid, p_workspace uuid, p_file uuid, p_session uuid
+) RETURNS void LANGUAGE plpgsql SECURITY DEFINER SET search_path = pg_catalog, pg_temp AS $body$
+BEGIN
+  IF p_account IS NULL OR p_workspace IS NULL OR p_file IS NULL OR p_session IS NULL
+    OR p_account IS DISTINCT FROM opengeni_private.current_account_id()
+    OR p_workspace IS DISTINCT FROM opengeni_private.current_workspace_id()
+  THEN RAISE EXCEPTION 'publication scope mismatch' USING ERRCODE = '42501'; END IF;
+  PERFORM 1 FROM files f WHERE f.account_id=p_account AND f.workspace_id=p_workspace AND f.id=p_file AND f.status='ready'
+    AND (f.private_owner_subject_ids IS NULL OR nullif(current_setting('opengeni.private_file_owner',true),'')=ANY(f.private_owner_subject_ids));
+  IF NOT FOUND THEN RAISE EXCEPTION 'publication file unavailable' USING ERRCODE = '42501'; END IF;
+  PERFORM 1 FROM sessions s WHERE s.account_id=p_account AND s.workspace_id=p_workspace AND s.id=p_session;
+  IF NOT FOUND THEN RAISE EXCEPTION 'publication session unavailable' USING ERRCODE = '42501'; END IF;
+  INSERT INTO opengeni_private.sandbox_file_publications(account_id,workspace_id,file_id,source_session_id)
+    VALUES(p_account,p_workspace,p_file,p_session) ON CONFLICT DO NOTHING;
+  IF EXISTS(SELECT 1 FROM opengeni_private.sandbox_file_publications p
+    WHERE p.account_id=p_account AND p.workspace_id=p_workspace AND p.file_id=p_file
+      AND p.source_session_id IS DISTINCT FROM p_session)
+  THEN RAISE EXCEPTION 'publication identity conflict' USING ERRCODE = '23505'; END IF;
+END $body$;
+
+CREATE FUNCTION opengeni_private.list_sandbox_file_publications(
+  p_account uuid, p_workspace uuid, p_query jsonb
+) RETURNS TABLE(file_id uuid, title text, kind text, source_session_id uuid, published_at timestamptz)
+LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path = pg_catalog, pg_temp AS $body$
+DECLARE
+  v_limit integer := (p_query->>'limit')::integer;
+  v_sort text := p_query->>'sort';
+  v_after text := p_query#>>'{after,key}';
+BEGIN
+  IF p_account IS NULL OR p_workspace IS NULL
+    OR p_account IS DISTINCT FROM opengeni_private.current_account_id()
+    OR p_workspace IS DISTINCT FROM opengeni_private.current_workspace_id()
+    OR v_limit IS NULL OR v_limit NOT BETWEEN 1 AND 201
+    OR v_sort IS NULL OR v_sort NOT IN ('updated','newest','title')
+    OR jsonb_typeof(p_query) IS DISTINCT FROM 'object'
+    OR jsonb_typeof(p_query->'kinds') IS DISTINCT FROM 'array'
+    OR jsonb_array_length(p_query->'kinds') NOT BETWEEN 1 AND 2
+    OR length(coalesce(p_query->>'q',''))>200
+  THEN RAISE EXCEPTION 'publication list scope mismatch' USING ERRCODE = '42501'; END IF;
+  RETURN QUERY WITH candidates AS (
+    SELECT p.file_id, f.filename AS title,
+      CASE WHEN f.content_type IN ('image/png','image/jpeg','image/gif','image/webp','image/avif','image/svg+xml')
+        THEN 'image' ELSE 'file' END AS kind,
+      p.source_session_id, p.published_at,
+      CASE WHEN v_sort='title' THEN lower(f.filename)
+        ELSE to_char(p.published_at AT TIME ZONE 'UTC','YYYY-MM-DD"T"HH24:MI:SS.US') END AS sort_key
+    FROM opengeni_private.sandbox_file_publications p JOIN files f
+      ON f.account_id=p.account_id AND f.workspace_id=p.workspace_id AND f.id=p.file_id
+    WHERE p.account_id=p_account AND p.workspace_id=p_workspace AND f.status='ready'
+      AND (f.private_owner_subject_ids IS NULL OR nullif(current_setting('opengeni.private_file_owner',true),'')=ANY(f.private_owner_subject_ids))
+      AND (p_query->>'sourceSessionId' IS NULL OR p.source_session_id=(p_query->>'sourceSessionId')::uuid)
+      AND p.published_at<=(p_query->>'snapshotAt')::timestamptz
+      AND strpos(lower(f.filename),lower(coalesce(p_query->>'q','')))>0
+  ) SELECT c.file_id,c.title,c.kind,c.source_session_id,c.published_at FROM candidates c
+    WHERE (p_query->'kinds') ? c.kind AND (v_after IS NULL OR
+      (v_sort='title' AND c.sort_key COLLATE "C">v_after COLLATE "C") OR
+      (v_sort<>'title' AND c.sort_key COLLATE "C"<v_after COLLATE "C") OR
+      (c.sort_key=v_after AND (c.kind COLLATE "C",c.file_id::text COLLATE "C")>
+        ((p_query#>>'{after,kind}') COLLATE "C",(p_query#>>'{after,id}') COLLATE "C")))
+    ORDER BY CASE WHEN v_sort='title' THEN c.sort_key END COLLATE "C" ASC,
+      CASE WHEN v_sort<>'title' THEN c.sort_key END COLLATE "C" DESC,c.kind COLLATE "C",c.file_id::text COLLATE "C"
+    LIMIT v_limit;
+END $body$;
+REVOKE ALL ON FUNCTION opengeni_private.record_sandbox_file_publication(uuid,uuid,uuid,uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION opengeni_private.list_sandbox_file_publications(uuid,uuid,jsonb) FROM PUBLIC;
+
+-- Preserve existing runtime role recipients; provisionRoles owns future roles.
+DO $grants$
+DECLARE target_schema text := current_schema(); recipient record;
+BEGIN
+  -- Explicit pg_temp LAST is load-bearing: omitting it lets PostgreSQL search
+  -- caller-controlled temporary relations ahead of the captured data schema.
+  -- Pin builtins first and the exact migration target before granting EXECUTE.
+  EXECUTE format('ALTER FUNCTION opengeni_private.record_sandbox_file_publication(uuid,uuid,uuid,uuid) SET search_path = pg_catalog, %I, pg_temp', target_schema);
+  EXECUTE format('ALTER FUNCTION opengeni_private.list_sandbox_file_publications(uuid,uuid,jsonb) SET search_path = pg_catalog, %I, pg_temp', target_schema);
+  FOR recipient IN
+    SELECT DISTINCT acl.grantee, r.rolname FROM pg_class c
+      JOIN pg_namespace n ON n.oid = c.relnamespace
+      CROSS JOIN LATERAL aclexplode(c.relacl) acl
+      LEFT JOIN pg_roles r ON r.oid = acl.grantee
+    WHERE n.nspname = 'opengeni_private' AND c.relname = 'sandbox_file_publications' AND acl.grantee <> c.relowner
+  LOOP
+    EXECUTE format('REVOKE ALL ON TABLE opengeni_private.sandbox_file_publications FROM %s',
+      CASE WHEN recipient.grantee = 0 THEN 'PUBLIC' ELSE quote_ident(recipient.rolname) END);
+  END LOOP;
+  FOR recipient IN
+    SELECT DISTINCT acl.grantee, r.rolname, p.oid::regprocedure AS signature
+    FROM pg_proc p JOIN pg_namespace n ON n.oid=p.pronamespace
+      CROSS JOIN LATERAL aclexplode(p.proacl) acl LEFT JOIN pg_roles r ON r.oid=acl.grantee
+    WHERE n.nspname='opengeni_private'
+      AND p.proname IN ('record_sandbox_file_publication','list_sandbox_file_publications')
+      AND acl.grantee<>p.proowner
+  LOOP
+    EXECUTE format('REVOKE ALL ON FUNCTION %s FROM %s', recipient.signature,
+      CASE WHEN recipient.grantee=0 THEN 'PUBLIC' ELSE quote_ident(recipient.rolname) END);
+  END LOOP;
+  FOR recipient IN
+    SELECT DISTINCT r.rolname FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+      CROSS JOIN LATERAL aclexplode(c.relacl) acl JOIN pg_roles r ON r.oid = acl.grantee
+    WHERE n.nspname = target_schema AND c.relname = 'files' AND acl.privilege_type = 'INSERT'
+      AND acl.grantee <> c.relowner
+  LOOP
+    EXECUTE format('GRANT EXECUTE ON FUNCTION opengeni_private.record_sandbox_file_publication(uuid,uuid,uuid,uuid), opengeni_private.list_sandbox_file_publications(uuid,uuid,jsonb) TO %I', recipient.rolname);
+  END LOOP;
+END $grants$;