@opengeni/db 4.4.0-canary.2 → 5.0.0-canary.1

package/dist/artifact-catalog.d.ts

@@ -0,0 +1,41 @@
+import type { ArtifactCatalogKind, ArtifactCatalogListQuery } from "@opengeni/contracts";
+import { type Database } from "./database.js";
+export type ArtifactCatalogPosition = {
+    key: string;
+    kind: ArtifactCatalogKind;
+    id: string;
+};
+/** Internal candidates are NOT an authorized public projection. */
+export type ArtifactCatalogCandidate = {
+    id: string;
+    kind: ArtifactCatalogKind;
+    /** Internal adapter identity; never exposed as public provenance. */
+    origin: "site" | "editable_artifact" | "generated_image" | "sandbox_file";
+    title: string;
+    status: "active" | "archived";
+    created_at: Date | string;
+    updated_at: Date | string;
+    source_session_id: string | null;
+    version_id: string | null;
+    sort_key: string;
+};
+/** Called only after immutable bytes have been retained by explicit publication. */
+export declare function recordSandboxFilePublication(db: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    fileId: string;
+    sourceSessionId: string;
+}): Promise<void>;
+/** Bounded keyset projection over existing domains; no universal content store.
+ * The caller must still perform editable application and file access checks.
+ */
+export declare function listArtifactCatalogCandidates(db: Database, scope: {
+    accountId: string;
+    workspaceId: string;
+}, input: {
+    query: ArtifactCatalogListQuery;
+    kinds: readonly ArtifactCatalogKind[];
+    snapshotAt: string;
+    after?: ArtifactCatalogPosition;
+    limit: number;
+}): Promise<ArtifactCatalogCandidate[]>;

package/dist/canonical-human-identities.js

@@ -11,9 +11,9 @@ import {
   getCanonicalHumanIdentityProjection,
   synchronizeCanonicalHumanLoginBindings,
   validateCanonicalHumanSession
-} from "./chunk-2KOLL33E.js";
-import "./chunk-WFU6PS54.js";
-import "./chunk-5UUWZDAV.js";
+} from "./chunk-7HMK3B45.js";
+import "./chunk-DPONPYJD.js";
+import "./chunk-F73UKJY6.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/{chunk-M4PKBJRS.js → chunk-6T2GGYWE.js}

@@ -1,6 +1,6 @@
 import {
   cancelUnacceptedVideoGenerationsForToolCallsInTransaction
-} from "./chunk-6IJD3XXF.js";
+} from "./chunk-ERKVSPDX.js";
 import {
   nestedPostgresSqlState,
   rawRows,
@@ -11,7 +11,7 @@ import {
   withSessionActivityRlsContext,
   withWorkspaceRls,
   withWorkspaceSubjectRls
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 import {
   auditEvents,
   codexCapacityWaiters,
@@ -36,7 +36,7 @@ import {
   workspaceInferenceControls,
   workspaceMemberships,
   workspaces
-} from "./chunk-5UUWZDAV.js";
+} from "./chunk-F73UKJY6.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   fromPostgresLosslessJson,
@@ -20315,4 +20315,4 @@ export {
   setWorkspacePauseTimerInTransaction,
   fireWorkspacePauseTimerInTransaction
 };
-//# sourceMappingURL=chunk-M4PKBJRS.js.map
+//# sourceMappingURL=chunk-6T2GGYWE.js.map

package/dist/{chunk-2KOLL33E.js → chunk-7HMK3B45.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 
 // src/canonical-human-identities.ts
 import { createHash } from "crypto";
@@ -309,4 +309,4 @@ export {
   getCanonicalHumanIdentityProjection,
   applyCanonicalHumanIdentityOperation
 };
-//# sourceMappingURL=chunk-2KOLL33E.js.map
+//# sourceMappingURL=chunk-7HMK3B45.js.map

package/dist/{chunk-WFU6PS54.js → chunk-DPONPYJD.js}

@@ -3,7 +3,7 @@ import {
   sessions,
   workspaceSessionActivityRevisions,
   workspaces
-} from "./chunk-5UUWZDAV.js";
+} from "./chunk-F73UKJY6.js";
 import {
   LOSSLESS_CONTENT_WRITER_APPLICATION_NAME
 } from "./chunk-S2TZ3F4L.js";
@@ -774,4 +774,4 @@ export {
   withAccountRls,
   dbBindingFor
 };
-//# sourceMappingURL=chunk-WFU6PS54.js.map
+//# sourceMappingURL=chunk-DPONPYJD.js.map

package/dist/{chunk-6IJD3XXF.js → chunk-ERKVSPDX.js}

@@ -2,7 +2,7 @@ import {
   rawRows,
   withRlsContext,
   withWorkspaceRls
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 import {
   connections,
   creditLedgerEntries,
@@ -14,7 +14,7 @@ import {
   workspaceVideoGenerationPolicies,
   workspaceVideoGenerationQuotas,
   workspaces
-} from "./chunk-5UUWZDAV.js";
+} from "./chunk-F73UKJY6.js";
 
 // src/video-generation.ts
 import {
@@ -1006,4 +1006,4 @@ export {
   mediaGenerationResultForStoredOperation,
   getVideoGenerationOperationSummary
 };
-//# sourceMappingURL=chunk-6IJD3XXF.js.map
+//# sourceMappingURL=chunk-ERKVSPDX.js.map

package/dist/{chunk-5UUWZDAV.js → chunk-F73UKJY6.js}

@@ -246,6 +246,7 @@ __export(schema_exports, {
   rigs: () => rigs,
   sandboxCheckpointArtifactStateValues: () => sandboxCheckpointArtifactStateValues,
   sandboxCheckpointArtifacts: () => sandboxCheckpointArtifacts,
+  sandboxFilePublications: () => sandboxFilePublications,
   sandboxKindValues: () => sandboxKindValues,
   sandboxLeaseHolders: () => sandboxLeaseHolders,
   sandboxLeaseLivenessValues: () => sandboxLeaseLivenessValues,
@@ -11152,6 +11153,34 @@ var files = pgTable21(
     status: index20("files_status_idx").on(table.status)
   })
 );
+var sandboxFilePublications = opengeniPrivateSchema.table(
+  "sandbox_file_publications",
+  {
+    accountId: uuid21("account_id").notNull(),
+    workspaceId: uuid21("workspace_id").notNull(),
+    fileId: uuid21("file_id").notNull(),
+    sourceSessionId: uuid21("source_session_id"),
+    publishedAt: timestamp21("published_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    pk: primaryKey10({
+      name: "sandbox_file_publications_pk",
+      columns: [table.accountId, table.workspaceId, table.fileId]
+    }),
+    file: foreignKey({
+      name: "sandbox_file_publications_file_fk",
+      columns: [table.accountId, table.workspaceId, table.fileId],
+      foreignColumns: [files.accountId, files.workspaceId, files.id]
+    }).onDelete("cascade"),
+    // SQL owns the composite session FK with column-specific SET NULL.
+    session: index20("sandbox_file_publications_session_idx").on(
+      table.workspaceId,
+      table.sourceSessionId,
+      table.publishedAt,
+      table.fileId
+    )
+  })
+);
 var fileUploads = pgTable21(
   "file_uploads",
   {
@@ -18558,6 +18587,7 @@ export {
   sessionListSnapshots,
   sessionMcpServers,
   files,
+  sandboxFilePublications,
   fileUploads,
   generatedImageArtifacts,
   imageGenerationOperations,
@@ -18701,4 +18731,4 @@ export {
   feedbackSubmissions,
   schema_exports
 };
-//# sourceMappingURL=chunk-5UUWZDAV.js.map
+//# sourceMappingURL=chunk-F73UKJY6.js.map