@opengeni/db 4.4.1 → 4.5.0

package/dist/{chunk-72JNABPO.js → chunk-TIF52FMJ.js}

@@ -7,7 +7,7 @@ import {
   withAccountRls,
   withRlsContext,
   withWorkspaceRls
-} from "./chunk-GYHXV2LR.js";
+} from "./chunk-K2YN562I.js";
 import {
   connections,
   creditDebitAllocations,
@@ -20,7 +20,7 @@ import {
   workspaceVideoGenerationPolicies,
   workspaceVideoGenerationQuotas,
   workspaces
-} from "./chunk-6UJX2OXO.js";
+} from "./chunk-KMBU4KDY.js";
 
 // src/video-generation.ts
 import {
@@ -1532,4 +1532,4 @@ export {
   mediaGenerationResultForStoredOperation,
   getVideoGenerationOperationSummary
 };
-//# sourceMappingURL=chunk-72JNABPO.js.map
+//# sourceMappingURL=chunk-TIF52FMJ.js.map

package/dist/{chunk-67VNEM5N.js → chunk-TLCTS7CZ.js}

@@ -1,14 +1,14 @@
 import {
   appendSessionCommandOutput,
   lockSessionEventWriteRows
-} from "./chunk-JC43DLHB.js";
+} from "./chunk-7P67EF5K.js";
 import {
   withRlsContext,
   withSessionActivityRlsContext
-} from "./chunk-GYHXV2LR.js";
+} from "./chunk-K2YN562I.js";
 import {
   sandboxRetainedProcesses
-} from "./chunk-6UJX2OXO.js";
+} from "./chunk-KMBU4KDY.js";
 
 // src/retained-provider-commands.ts
 import { and, eq, sql } from "drizzle-orm";
@@ -297,4 +297,4 @@ export {
   retainedProcessCancellationRequested,
   requestRetainedProcessDeadlineCancellation
 };
-//# sourceMappingURL=chunk-67VNEM5N.js.map
+//# sourceMappingURL=chunk-TLCTS7CZ.js.map

package/dist/{chunk-VFQI3CDL.js → chunk-VXCIFQX7.js}

@@ -1,6 +1,6 @@
 import {
   rawRows
-} from "./chunk-GYHXV2LR.js";
+} from "./chunk-K2YN562I.js";
 
 // src/subscription-core-claude-oauth.ts
 import {
@@ -2072,4 +2072,4 @@ export {
   subscriptionCoreProviderIds,
   subscriptionCoreProvider
 };
-//# sourceMappingURL=chunk-VFQI3CDL.js.map
+//# sourceMappingURL=chunk-VXCIFQX7.js.map

package/dist/{chunk-5H6FHFHD.js → chunk-XX5M3TJJ.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-GYHXV2LR.js";
+} from "./chunk-K2YN562I.js";
 
 // src/canonical-human-identities.ts
 import { createHash } from "crypto";
@@ -318,4 +318,4 @@ export {
   getCanonicalHumanIdentityProjection,
   applyCanonicalHumanIdentityOperation
 };
-//# sourceMappingURL=chunk-5H6FHFHD.js.map
+//# sourceMappingURL=chunk-XX5M3TJJ.js.map

package/dist/{chunk-LUO43IZE.js → chunk-YOFYG5ZI.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withWorkspaceSubjectRls
-} from "./chunk-GYHXV2LR.js";
+} from "./chunk-K2YN562I.js";
 
 // src/connect-attempts.ts
 import { createHash } from "crypto";
@@ -250,4 +250,4 @@ export {
   claimConnectOperation,
   finishConnectOperation
 };
-//# sourceMappingURL=chunk-LUO43IZE.js.map
+//# sourceMappingURL=chunk-YOFYG5ZI.js.map

package/dist/connect-attempts.js

@@ -8,10 +8,10 @@ import {
   getConnectBeginReplay,
   listPendingConnectAttempts,
   setConnectAttemptTransitionObserver
-} from "./chunk-LUO43IZE.js";
-import "./chunk-GYHXV2LR.js";
+} from "./chunk-YOFYG5ZI.js";
+import "./chunk-K2YN562I.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-6UJX2OXO.js";
+import "./chunk-KMBU4KDY.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ConnectAttemptConflictError,

package/dist/editable-artifact-durable-export.js

@@ -1,9 +1,9 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-GYHXV2LR.js";
+} from "./chunk-K2YN562I.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-6UJX2OXO.js";
+import "./chunk-KMBU4KDY.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/editable-artifact-durable-export.ts

package/dist/editable-artifacts.js

@@ -10,10 +10,10 @@ import {
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink,
   transactionallyAuthorizeEditableArtifactActor
-} from "./chunk-LLQLCFCT.js";
-import "./chunk-GYHXV2LR.js";
+} from "./chunk-GSZZDYPV.js";
+import "./chunk-K2YN562I.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-6UJX2OXO.js";
+import "./chunk-KMBU4KDY.js";
 import "./chunk-PZ5AY32C.js";
 export {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,

package/dist/index.d.ts

@@ -5925,6 +5925,13 @@ export type SessionListFilterOptions = {
     siteAccessId?: string;
     /** Sessions created through this published Site, independent of project. */
     originSiteId?: string;
+    /**
+     * Ordinary discovery omits conversations that run inside a Site. `include`
+     * lists them as ordinary rows (search, pins, branches); `group` keeps them
+     * out of root rows but counts them in totals and returns `siteGroups`.
+     * Presentation only: native ownership and Site RLS still decide access.
+     */
+    siteConversations?: "include" | "group";
     /** Exact workspace project; null selects unfiled sessions. */
     channelId?: string | null;
     /** Exact frozen creator identity. */
@@ -6133,6 +6140,11 @@ export declare function sessionTreeStatsForSessions(db: Database, workspaceId: s
  * for sessions with no such turn.
  */
 export declare function sessionRequiresActionSinceForSessions(db: Database, workspaceId: string, sessionIds: readonly string[]): Promise<Map<string, string>>;
+/**
+ * Bound on Site rows per read. Rows sort by activity, so Sites nobody touched
+ * for a long time fall past it; the Artifacts page lists every Site.
+ */
+export declare const SITE_CONVERSATION_GROUP_LIMIT = 200;
 /**
  * The agent-access predicate for one calling attempt (migration 0427). It
  * mirrors outgoing reach in the core seam: own tree, same canonical user, or
@@ -6189,6 +6201,15 @@ export declare function listSessionEntriesForSubject(db: Database, workspaceId:
 type SessionListReadAuthority = Pick<ListSessionsForSubjectOptions, "subjectId" | "authorizationScope" | "personalWorkspaceOwnerException">;
 /** No configuration, parent IDs or inaccessible IDs cross the hint boundary. */
 export declare function listVisibleSessionInvalidationIds(db: Database, workspaceId: string, sessionIds: string[], authority: SessionListReadAuthority): Promise<string[]>;
+/**
+ * Ordinary IDs plus, separately, the viewer's own visible Site conversations.
+ * A rail with Site rows refreshes their summaries for the latter without
+ * treating every unknown Site conversation as a full list invalidation.
+ */
+export declare function listVisibleSessionInvalidationHints(db: Database, workspaceId: string, sessionIds: string[], authority: SessionListReadAuthority): Promise<{
+    sessionIds: string[];
+    siteSessionIds: string[];
+}>;
 export declare function getSessionForSubject(db: Database, workspaceId: string, sessionId: string, subjectId: string, relatedSessionAccess?: "target" | "root"): Promise<Session | null>;
 /**
  * Idempotently set a member's pin without mutating the session's lifecycle or

package/dist/index.js

@@ -225,6 +225,7 @@ import {
   SESSION_REALTIME_STARTUP_MAX_ENTRIES,
   SESSION_TURN_RECOVERY_RETRY_MAX_MS,
   SITE_ABUSE_REPORT_RETENTION_DAYS,
+  SITE_CONVERSATION_GROUP_LIMIT,
   SITE_DATA_ACCESS_MODES,
   SITE_DATA_COLLECTION_NAME,
   SITE_DATA_DEFAULT_PAGE,
@@ -1469,6 +1470,7 @@ import {
   listVaultFieldVersions,
   listVaultItems,
   listVaultsForSubject,
+  listVisibleSessionInvalidationHints,
   listVisibleSessionInvalidationIds,
   listWorkspaceArtifacts,
   listWorkspaceBackgroundCommandsForSubject,
@@ -1779,6 +1781,7 @@ import {
   recordScheduledTaskAdmissionRefusal,
   recordSessionGoalProgressWithEvent,
   recordSessionTitleResponse,
+  recordSiteOpened,
   recordSitePlatformRequests,
   recordSitePlatformUsage,
   recordSitePlatformUsageInTransaction,
@@ -2312,7 +2315,7 @@ import {
   writeCompanyProfileLearning,
   writeSessionContentBlobs,
   writeSiteDataPath
-} from "./chunk-7UA4WUGK.js";
+} from "./chunk-RRZO5XRA.js";
 import {
   BROKERED_CREDENTIAL_SHAPE_HINT,
   ConnectionRefreshHttpError,
@@ -2321,9 +2324,9 @@ import {
   normalizeBearerScheme,
   normalizedCredentialHeaders,
   refreshOAuthConnectionCredential
-} from "./chunk-PB73JQOI.js";
-import "./chunk-67VNEM5N.js";
-import "./chunk-NQWVBQFK.js";
+} from "./chunk-C3FI3DJ5.js";
+import "./chunk-TLCTS7CZ.js";
+import "./chunk-575FUJE2.js";
 import "./chunk-MORKJ5JN.js";
 import {
   CODEX_PLAN_ENTITLEMENT_EXCLUSION_TTL_MS,
@@ -2364,7 +2367,7 @@ import {
   setSubscriptionCoreWorkspaceCodexSource,
   subscriptionSettingLockRefusal,
   writeSubscriptionPersonPreferences
-} from "./chunk-SSCUP23X.js";
+} from "./chunk-MSAWMGWJ.js";
 import {
   applySubscriptionCoreCodexQuotaObservation,
   assertSubscriptionCoreAcceptedTurn,
@@ -2392,8 +2395,8 @@ import {
   subscriptionCoreTurns,
   touchSubscriptionCoreCodexBinding,
   withSubscriptionCoreAcceptedTurn
-} from "./chunk-XWANFAN4.js";
-import "./chunk-B4DWUU4Y.js";
+} from "./chunk-BH2HBICR.js";
+import "./chunk-GYAQYECK.js";
 import {
   ARTIFACT_PIN_RUNTIME_ROUTINES,
   BILLING_SUBSCRIPTION_OPERATION_ROUTINES,
@@ -2465,7 +2468,7 @@ import {
   retiredSubscriptionObjectDescriptions,
   retiredSubscriptionObjectViolation,
   runtimeDatabaseReadyCheck
-} from "./chunk-JN2DIKGW.js";
+} from "./chunk-M6TNKUGE.js";
 import {
   CanonicalHumanIdentityAuthorityError,
   CanonicalHumanIdentityConflictError,
@@ -2479,7 +2482,7 @@ import {
   getCanonicalHumanIdentityProjection,
   synchronizeCanonicalHumanLoginBindings,
   validateCanonicalHumanSession
-} from "./chunk-5H6FHFHD.js";
+} from "./chunk-XX5M3TJJ.js";
 import {
   EDITABLE_ARTIFACT_INTENT_MAX_BYTES,
   EDITABLE_ARTIFACT_KERNEL_TAIL_MAX_BYTES,
@@ -2492,7 +2495,7 @@ import {
   listEditableArtifactIdsForSession,
   touchEditableArtifactSessionLink,
   transactionallyAuthorizeEditableArtifactActor
-} from "./chunk-LLQLCFCT.js";
+} from "./chunk-GSZZDYPV.js";
 import {
   ArchivedSessionImportError,
   EMPTY_SESSION_VISIBILITY_WORK,
@@ -2607,7 +2610,7 @@ import {
   updateNetworkRoute,
   updateSiteAuthConnection,
   verifyAuthRun
-} from "./chunk-T5RZ3HWS.js";
+} from "./chunk-OFQDECMZ.js";
 import {
   ConnectAttemptConflictError,
   ConnectAttemptNotFoundError,
@@ -2618,8 +2621,8 @@ import {
   getConnectBeginReplay,
   listPendingConnectAttempts,
   setConnectAttemptTransitionObserver
-} from "./chunk-LUO43IZE.js";
-import "./chunk-T7GDRZOH.js";
+} from "./chunk-YOFYG5ZI.js";
+import "./chunk-4LVV4R4F.js";
 import {
   AgentCommandAuthorityError,
   CHILD_LIFECYCLE_DEDUPE_PREFIX,
@@ -2762,7 +2765,7 @@ import {
   withSiteRuntimeAdmission,
   workspaceControlLockBudget,
   workspaceControlRequestLockTimeoutMs
-} from "./chunk-JC43DLHB.js";
+} from "./chunk-7P67EF5K.js";
 import {
   ClaudeSubscriptionReconnectRequired,
   ClaudeSubscriptionRefreshUnavailable,
@@ -2856,7 +2859,7 @@ import {
   wakeSubscriptionCapacityWaiter,
   withCodexTokenDeadline,
   writeSubscriptionSessionBinding
-} from "./chunk-VFQI3CDL.js";
+} from "./chunk-VXCIFQX7.js";
 import {
   ACTIVE_VIDEO_GENERATION_STATUSES,
   CreditDebitAttribution,
@@ -2918,7 +2921,7 @@ import {
   validateMemberAllowanceRule,
   validateWorkspaceAllowanceConfig,
   withCreditDebitAttribution
-} from "./chunk-72JNABPO.js";
+} from "./chunk-TIF52FMJ.js";
 import "./chunk-4UJCXBR2.js";
 import {
   ManagedAuthActorMutationInFlightError,
@@ -2942,7 +2945,7 @@ import {
   reapManagedAuthIsolatedSessions,
   releaseManagedAuthActorMutationLease,
   validateManagedAuthActorMutationLease
-} from "./chunk-K2XOMTAG.js";
+} from "./chunk-7LFHUC35.js";
 import {
   DatabaseTransactionError,
   DatabaseUnavailableError,
@@ -2988,7 +2991,7 @@ import {
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls,
   withWorkspaceUsageLock
-} from "./chunk-GYHXV2LR.js";
+} from "./chunk-K2YN562I.js";
 import {
   DATABASE_BOOT_CONNECT_GRACE_MS,
   connectDatabaseSocket,
@@ -3002,7 +3005,7 @@ import {
   LOSSLESS_TEXT_PREFIX,
   isStoredVerbatimAsLosslessJsonString,
   toPostgresLosslessJson
-} from "./chunk-6UJX2OXO.js";
+} from "./chunk-KMBU4KDY.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ACTIVE_SESSION_HISTORY_MAX_JSON_BYTES,
@@ -3320,6 +3323,7 @@ export {
   SESSION_USAGE_LIMIT_RUNTIME_ROUTINES,
   SESSION_USAGE_LIMIT_STATE_ROUTINE,
   SITE_ABUSE_REPORT_RETENTION_DAYS,
+  SITE_CONVERSATION_GROUP_LIMIT,
   SITE_DATA_ACCESS_MODES,
   SITE_DATA_COLLECTION_NAME,
   SITE_DATA_DEFAULT_PAGE,
@@ -4904,6 +4908,7 @@ export {
   listVaultFieldVersions,
   listVaultItems,
   listVaultsForSubject,
+  listVisibleSessionInvalidationHints,
   listVisibleSessionInvalidationIds,
   listWorkspaceArtifacts,
   listWorkspaceBackgroundCommandsForSubject,
@@ -5287,6 +5292,7 @@ export {
   recordScheduledTaskAdmissionRefusal,
   recordSessionGoalProgressWithEvent,
   recordSessionTitleResponse,
+  recordSiteOpened,
   recordSitePlatformRequests,
   recordSitePlatformUsage,
   recordSitePlatformUsageInTransaction,

package/dist/managed-auth-session-sets.js

@@ -20,10 +20,10 @@ import {
   reapManagedAuthIsolatedSessions,
   releaseManagedAuthActorMutationLease,
   validateManagedAuthActorMutationLease
-} from "./chunk-K2XOMTAG.js";
-import "./chunk-GYHXV2LR.js";
+} from "./chunk-7LFHUC35.js";
+import "./chunk-K2YN562I.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-6UJX2OXO.js";
+import "./chunk-KMBU4KDY.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ManagedAuthActorMutationInFlightError,

package/dist/mcp-operations.js

@@ -1,12 +1,12 @@
 import {
   withRlsContext
-} from "./chunk-GYHXV2LR.js";
+} from "./chunk-K2YN562I.js";
 import "./chunk-SMCA7PNJ.js";
 import {
   LOSSLESS_CONTENT_CODEC_VERSION,
   fromPostgresLosslessJson,
   toPostgresLosslessJson
-} from "./chunk-6UJX2OXO.js";
+} from "./chunk-KMBU4KDY.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/mcp-operations.ts

package/dist/migrate.js

@@ -11,28 +11,28 @@ import {
   planMigrations,
   runMigrateCli,
   runMigrations
-} from "./chunk-7UA4WUGK.js";
-import "./chunk-PB73JQOI.js";
-import "./chunk-67VNEM5N.js";
-import "./chunk-NQWVBQFK.js";
+} from "./chunk-RRZO5XRA.js";
+import "./chunk-C3FI3DJ5.js";
+import "./chunk-TLCTS7CZ.js";
+import "./chunk-575FUJE2.js";
 import "./chunk-MORKJ5JN.js";
-import "./chunk-SSCUP23X.js";
-import "./chunk-XWANFAN4.js";
-import "./chunk-B4DWUU4Y.js";
-import "./chunk-JN2DIKGW.js";
-import "./chunk-5H6FHFHD.js";
-import "./chunk-LLQLCFCT.js";
-import "./chunk-T5RZ3HWS.js";
-import "./chunk-LUO43IZE.js";
-import "./chunk-T7GDRZOH.js";
-import "./chunk-JC43DLHB.js";
-import "./chunk-VFQI3CDL.js";
-import "./chunk-72JNABPO.js";
+import "./chunk-MSAWMGWJ.js";
+import "./chunk-BH2HBICR.js";
+import "./chunk-GYAQYECK.js";
+import "./chunk-M6TNKUGE.js";
+import "./chunk-XX5M3TJJ.js";
+import "./chunk-GSZZDYPV.js";
+import "./chunk-OFQDECMZ.js";
+import "./chunk-YOFYG5ZI.js";
+import "./chunk-4LVV4R4F.js";
+import "./chunk-7P67EF5K.js";
+import "./chunk-VXCIFQX7.js";
+import "./chunk-TIF52FMJ.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-K2XOMTAG.js";
-import "./chunk-GYHXV2LR.js";
+import "./chunk-7LFHUC35.js";
+import "./chunk-K2YN562I.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-6UJX2OXO.js";
+import "./chunk-KMBU4KDY.js";
 import "./chunk-PZ5AY32C.js";
 export {
   executeMigrationFile,

package/dist/organization-integration-policy.js

@@ -3,11 +3,11 @@ import {
   updateOrganizationIntegrationPolicy,
   withOrganizationIntegrationAcquisition,
   withOrganizationIntegrationPolicyFence
-} from "./chunk-T7GDRZOH.js";
+} from "./chunk-4LVV4R4F.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-GYHXV2LR.js";
+import "./chunk-K2YN562I.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-6UJX2OXO.js";
+import "./chunk-KMBU4KDY.js";
 import "./chunk-PZ5AY32C.js";
 export {
   getOrganizationIntegrationPolicy,

package/dist/provision-roles.js

@@ -1,7 +1,7 @@
 import {
   provisionRoles,
   runProvisionRolesCli
-} from "./chunk-JN2DIKGW.js";
+} from "./chunk-M6TNKUGE.js";
 import "./chunk-SMCA7PNJ.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/retained-provider-commands.js

@@ -14,14 +14,14 @@ import {
   retainedProviderCommandPersistence,
   supervisedCommandProtocolReady,
   validateRouterOutputAdvance
-} from "./chunk-67VNEM5N.js";
-import "./chunk-JC43DLHB.js";
-import "./chunk-VFQI3CDL.js";
-import "./chunk-72JNABPO.js";
+} from "./chunk-TLCTS7CZ.js";
+import "./chunk-7P67EF5K.js";
+import "./chunk-VXCIFQX7.js";
+import "./chunk-TIF52FMJ.js";
 import "./chunk-4UJCXBR2.js";
-import "./chunk-GYHXV2LR.js";
+import "./chunk-K2YN562I.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-6UJX2OXO.js";
+import "./chunk-KMBU4KDY.js";
 import "./chunk-PZ5AY32C.js";
 export {
   RECORDED_COMMAND_OUTPUT_LIMIT_BYTES,

package/dist/runtime-posture.d.ts

@@ -198,7 +198,7 @@ export declare const RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINES: readonly ["guard_se
  * FORCE-RLS table is an architectural change: update this list in the same
  * commit as the migration so startup cannot silently accept an unreviewed gap.
  */
-export declare const FORCE_RLS_TABLES: readonly ["additional_organization_creation_receipts", "agent_instruction_operations", "agent_learning_revisions", "agent_learning_snapshots", "agent_run_states", "api_keys", "attached_browser_devices", "attached_browser_inventories", "audit_events", "auth_runs", "automation_run_event_links", "automation_runs", "automation_sources", "automation_trigger_events", "automation_trigger_revisions", "automation_triggers", "billing_customers", "billing_subscription_operations", "browser_identities", "browser_revision_components", "browser_revisions", "browser_session_associations", "browser_session_retained_downloads", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "canonical_human_identities", "canonical_human_identity_operations", "canonical_human_identity_subjects", "canonical_human_login_bindings", "capability_api_facets", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_facets", "capability_installations", "capability_integration_facets", "capability_mcp_facets", "capability_operations", "capability_plugin_installations", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "channels", "claude_capacity_waiters", "claude_credential_leases", "claude_rotation_settings", "claude_session_account_pins", "claude_subscription_account_usage", "claude_subscription_credentials", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "codex_turn_source_bindings", "company_brain_context_selection_receipts", "company_brain_preference_proposal_receipts", "company_brain_turn_context_snapshots", "company_profile_activation_events", "company_profile_agent_automatic_activation_receipts", "company_profile_agent_confirmation_receipts", "company_profile_agent_proposal_receipts", "company_profile_heads", "company_profile_revisions", "company_profile_snapshots", "composer_drafts", "computer_session_associations", "computer_sessions", "connect_attempts", "connection_disconnect_operations", "connection_use_audit_facts", "connection_use_once_consumption_receipts", "connections", "connector_action_policies", "connector_action_requests", "credit_debit_allocations", "credit_ledger_entries", "device_enrollment_requests", "document_authority_reclassifications", "document_bases", "document_chunks", "document_default_collection_backfill_operations", "document_default_collection_backfill_receipts", "document_default_collection_backfill_runs", "documents", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_live_tickets", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_replica_leases", "editable_artifact_scope_authorization_heads", "editable_artifact_sequence_checkpoints", "editable_artifact_session_links", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "editable_artifacts", "enrollment_token_redemptions", "enrollments", "external_identities", "external_identity_links", "external_link_task_authorities", "external_link_turn_authorities", "feedback_submissions", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "governed_learning_activation_receipts", "governed_learning_activation_undo_receipts", "governed_learning_decision_receipts", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "host_mcp_bindings", "host_mcp_delegations", "host_mcp_resolver_operations", "host_mcp_resolvers", "host_mcp_task_authorities", "host_mcp_turn_authorities", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_facet_definitions", "integration_oauth_pending_states", "integration_oauth_state_nonces", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_entries", "knowledge_entry_decisions", "knowledge_entry_links", "knowledge_entry_operations", "knowledge_entry_revisions", "knowledge_entry_search", "knowledge_entry_vectors", "knowledge_facts", "knowledge_index_jobs", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_review_batches", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "managed_auth_actor_mutation_leases", "managed_auth_browser_installations", "managed_auth_login_return_intents", "managed_auth_login_slots", "managed_auth_login_transaction_rate_limits", "managed_auth_login_transactions", "managed_auth_session_set_operations", "managed_auth_session_sets", "managed_sign_in_method_operations", "mcp_operations", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_fact_reconciliation_candidates", "model_call_fact_reconciliation_progress", "model_call_facts", "network_routes", "new_session_drafts", "organization_agent_admin_access", "organization_api_key_workspaces", "organization_codex_rotation_settings", "organization_company_profile_agent_policies", "organization_company_profile_agent_policy_events", "organization_credential_providers", "organization_integration_policies", "organization_integration_policy_operations", "organization_invitation_binding_events", "organization_membership_invitations", "organization_membership_lifecycle_events", "organization_membership_operation_receipts", "organization_memberships", "organization_model_defaults", "organization_model_provider_connection_operations", "organization_model_provider_connections", "organization_model_provider_custom_models", "organization_plans", "organization_privacy_preferences", "organization_private_session_setting_events", "organization_private_session_settings", "organization_profile_events", "organization_recovery_approvals", "organization_recovery_command_receipts", "organization_recovery_custodian_acceptances", "organization_recovery_custodians", "organization_recovery_events", "organization_recovery_notification_attempts", "organization_recovery_notification_outbox", "organization_recovery_operations", "organization_recovery_policies", "organization_recovery_policy_heads", "organization_service_accounts", "organization_shared_workspace_administration_capabilities", "organization_user_resource_authorities", "organization_user_resource_grants", "organization_user_retention_deletion_events", "organization_user_retention_deletions", "organization_user_retention_object_deletion_receipts", "organization_user_retention_object_obligations", "organization_user_retention_policies", "organization_user_setup_deliveries", "organization_user_setup_delivery_attempts", "organization_user_setup_intents", "organization_webhook_deliveries", "organization_webhooks", "organization_workspace_lifecycle_events", "organization_workspace_operation_receipts", "personal_document_once_consumption_receipts", "personal_github_repository_selection_heads", "personal_github_repository_selection_operations", "personal_github_repository_selections", "personal_resource_once_consumption_receipts", "plan_credit_periods", "pr_review_app_registrations", "pr_review_managed_github_authority_nonces", "pr_review_repository_bindings", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "private_session_create_capabilities", "remember_knowledge_confirmation_receipts", "remember_knowledge_memory_materializations", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_blocker_reviews", "scheduled_task_connection_authority_snapshots", "scheduled_task_personal_resource_authorities", "scheduled_task_personal_resource_snapshots", "scheduled_task_reusable_connection_materializations", "scheduled_task_revision_authorities", "scheduled_task_run_connection_authority_snapshots", "scheduled_task_run_personal_resource_admissions", "scheduled_task_run_personal_resource_once_receipts", "scheduled_task_run_personal_resource_snapshots", "scheduled_task_runs", "scheduled_task_schedule_outbox", "scheduled_tasks", "self_service_organization_setup_receipts", "session_admin_access", "session_attempt_codemode_calls", "session_attempt_connected_machine_authorizations", "session_attempt_interruptions", "session_attempt_machine_consents", "session_attempt_model_context_snapshots", "session_attempt_personal_document_admissions", "session_attempt_personal_document_snapshots", "session_attempt_personal_resource_admissions", "session_attempt_personal_resource_snapshots", "session_attempt_tool_catalogs", "session_background_commands", "session_command_receipts", "session_content_blobs", "session_event_cursors", "session_events", "session_goal_revisions", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_tenancy_activations", "session_tenancy_additional_organization_activation_evidence", "session_tenancy_greenfield_activation_evidence", "session_title_operations", "session_turn_attempts", "session_turn_machine_consents", "session_turn_startup_milestones", "session_turns", "session_variable_set_attachments", "session_visibility_write_capabilities", "session_work_claim_revisions", "session_work_claim_write_capabilities", "session_work_claims", "session_workflow_wake_outbox", "sessions", "site_abuse_reports", "site_auth_codes", "site_auth_connections", "site_data_collections", "site_data_files", "site_data_rate_windows", "site_data_record_values", "site_data_records", "site_data_usage", "site_data_validation_windows", "site_data_workspace_validation_windows", "site_hostname_holds", "site_hostnames", "site_limit_profiles", "site_platform_brake", "site_platform_storage", "site_platform_totals", "site_platform_usage", "site_publications", "site_runtime_conversations", "site_runtime_rate_windows", "site_runtime_usage", "site_session_access", "site_sql_databases", "site_sql_migrations", "site_sql_queries", "site_sql_rate_windows", "site_sql_usage", "site_viewer_sessions", "skill_config_conversion_receipts", "skill_source_bindings", "skill_write_receipts", "slack_app_home_refreshes", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_channel_routes", "slack_installation_bindings", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_route_prompt_options", "slack_route_prompts", "slack_shared_task_origins", "slack_task_policy_activation_events", "slack_task_policy_heads", "slack_task_policy_revisions", "slack_user_dm_routes", "slack_user_link_access_request_operations", "slack_user_link_access_requests", "social_connections", "social_posts", "subscription_apps_designations", "subscription_capacity_waiters", "subscription_capacity_wake_outbox", "subscription_connection_aliases", "subscription_connection_assignment_policies", "subscription_connection_people", "subscription_connection_quota", "subscription_connection_workspaces", "subscription_connections", "subscription_leases", "subscription_operation_leases", "subscription_person_preferences", "subscription_provider_cutovers", "subscription_session_bindings", "subscription_settings", "subscription_turn_failures", "task_note_events", "task_note_knowledge_promotion_capabilities", "task_note_replacement_receipts", "task_note_write_capabilities", "task_notes", "temporal_schedule_cleanup_outbox", "tenancy_backfill_receipts", "tenancy_backfill_unresolved_rows", "tool_gateway_approval_capabilities", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "turn_connection_authority_snapshots", "turn_personal_resource_attachment_receipts", "turn_personal_resource_once_receipts", "turn_personal_resource_snapshots", "usage_events", "vault_field_versions", "vault_item_fields", "vault_item_name_aliases", "vault_items", "vault_name_aliases", "vault_passkey_leases", "vaults", "video_generation_operations", "video_generation_references", "workspace_artifact_events", "workspace_artifact_uploads", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_codex_subscription_preferences", "workspace_control_events", "workspace_credential_providers", "workspace_gateway_custom_models", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_deactivation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_interaction_revisions", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_revisions", "workspace_learning_policy_snapshots", "workspace_model_policies", "workspace_screenshot_quotas", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas", "workspace_webhook_deliveries", "workspace_webhooks", "xai_capacity_waiters", "xai_credential_leases", "xai_rotation_settings", "xai_session_account_pins", "xai_subscription_credentials"];
+export declare const FORCE_RLS_TABLES: readonly ["additional_organization_creation_receipts", "agent_instruction_operations", "agent_learning_revisions", "agent_learning_snapshots", "agent_run_states", "api_keys", "attached_browser_devices", "attached_browser_inventories", "audit_events", "auth_runs", "automation_run_event_links", "automation_runs", "automation_sources", "automation_trigger_events", "automation_trigger_revisions", "automation_triggers", "billing_customers", "billing_subscription_operations", "browser_identities", "browser_revision_components", "browser_revisions", "browser_session_associations", "browser_session_retained_downloads", "browser_sessions", "browser_state_artifacts", "browser_state_uploads", "canonical_human_identities", "canonical_human_identity_operations", "canonical_human_identity_subjects", "canonical_human_login_bindings", "capability_api_facets", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_facets", "capability_installations", "capability_integration_facets", "capability_mcp_facets", "capability_operations", "capability_plugin_installations", "capability_plugin_versions", "capability_plugins", "capability_skill_facets", "capability_skill_files", "channels", "claude_capacity_waiters", "claude_credential_leases", "claude_rotation_settings", "claude_session_account_pins", "claude_subscription_account_usage", "claude_subscription_credentials", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "codex_turn_source_bindings", "company_brain_context_selection_receipts", "company_brain_preference_proposal_receipts", "company_brain_turn_context_snapshots", "company_profile_activation_events", "company_profile_agent_automatic_activation_receipts", "company_profile_agent_confirmation_receipts", "company_profile_agent_proposal_receipts", "company_profile_heads", "company_profile_revisions", "company_profile_snapshots", "composer_drafts", "computer_session_associations", "computer_sessions", "connect_attempts", "connection_disconnect_operations", "connection_use_audit_facts", "connection_use_once_consumption_receipts", "connections", "connector_action_policies", "connector_action_requests", "credit_debit_allocations", "credit_ledger_entries", "device_enrollment_requests", "document_authority_reclassifications", "document_bases", "document_chunks", "document_default_collection_backfill_operations", "document_default_collection_backfill_receipts", "document_default_collection_backfill_runs", "documents", "editable_artifact_blob_refs", "editable_artifact_idempotency_receipts", "editable_artifact_live_outbox", "editable_artifact_live_tickets", "editable_artifact_materialization_jobs", "editable_artifact_materialization_results", "editable_artifact_operations", "editable_artifact_replica_leases", "editable_artifact_scope_authorization_heads", "editable_artifact_sequence_checkpoints", "editable_artifact_session_links", "editable_artifact_snapshots", "editable_artifact_transactions", "editable_artifact_undo_claims", "editable_artifact_versions", "editable_artifacts", "enrollment_token_redemptions", "enrollments", "external_identities", "external_identity_links", "external_link_task_authorities", "external_link_turn_authorities", "feedback_submissions", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "google_drive_object_acl_evidence", "google_drive_object_acl_principals", "governed_learning_activation_receipts", "governed_learning_activation_undo_receipts", "governed_learning_decision_receipts", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "host_mcp_bindings", "host_mcp_delegations", "host_mcp_resolver_operations", "host_mcp_resolvers", "host_mcp_task_authorities", "host_mcp_turn_authorities", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_facet_definitions", "integration_oauth_pending_states", "integration_oauth_state_nonces", "integration_spec_revisions", "integration_tools", "interaction_interventions", "interaction_operations", "interaction_resource_operations", "knowledge_change_proposals", "knowledge_claim_evidence", "knowledge_claim_relations", "knowledge_claim_reviews", "knowledge_claims", "knowledge_document_versions", "knowledge_entities", "knowledge_entity_aliases", "knowledge_entries", "knowledge_entry_decisions", "knowledge_entry_links", "knowledge_entry_operations", "knowledge_entry_revisions", "knowledge_entry_search", "knowledge_entry_vectors", "knowledge_facts", "knowledge_index_jobs", "knowledge_lifecycle_events", "knowledge_memories", "knowledge_memory_lifecycle_events", "knowledge_memory_relationships", "knowledge_operation_receipts", "knowledge_providers", "knowledge_review_batches", "knowledge_source_acl_versions", "knowledge_source_objects", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "knowledge_sources", "knowledge_sync_runs", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "managed_auth_actor_mutation_leases", "managed_auth_browser_installations", "managed_auth_login_return_intents", "managed_auth_login_slots", "managed_auth_login_transaction_rate_limits", "managed_auth_login_transactions", "managed_auth_session_set_operations", "managed_auth_session_sets", "managed_sign_in_method_operations", "mcp_operations", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_fact_reconciliation_candidates", "model_call_fact_reconciliation_progress", "model_call_facts", "network_routes", "new_session_drafts", "organization_agent_admin_access", "organization_api_key_workspaces", "organization_codex_rotation_settings", "organization_company_profile_agent_policies", "organization_company_profile_agent_policy_events", "organization_credential_providers", "organization_integration_policies", "organization_integration_policy_operations", "organization_invitation_binding_events", "organization_membership_invitations", "organization_membership_lifecycle_events", "organization_membership_operation_receipts", "organization_memberships", "organization_model_defaults", "organization_model_provider_connection_operations", "organization_model_provider_connections", "organization_model_provider_custom_models", "organization_plans", "organization_privacy_preferences", "organization_private_session_setting_events", "organization_private_session_settings", "organization_profile_events", "organization_recovery_approvals", "organization_recovery_command_receipts", "organization_recovery_custodian_acceptances", "organization_recovery_custodians", "organization_recovery_events", "organization_recovery_notification_attempts", "organization_recovery_notification_outbox", "organization_recovery_operations", "organization_recovery_policies", "organization_recovery_policy_heads", "organization_service_accounts", "organization_shared_workspace_administration_capabilities", "organization_user_resource_authorities", "organization_user_resource_grants", "organization_user_retention_deletion_events", "organization_user_retention_deletions", "organization_user_retention_object_deletion_receipts", "organization_user_retention_object_obligations", "organization_user_retention_policies", "organization_user_setup_deliveries", "organization_user_setup_delivery_attempts", "organization_user_setup_intents", "organization_webhook_deliveries", "organization_webhooks", "organization_workspace_lifecycle_events", "organization_workspace_operation_receipts", "personal_document_once_consumption_receipts", "personal_github_repository_selection_heads", "personal_github_repository_selection_operations", "personal_github_repository_selections", "personal_resource_once_consumption_receipts", "plan_credit_periods", "pr_review_app_registrations", "pr_review_managed_github_authority_nonces", "pr_review_repository_bindings", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "private_session_create_capabilities", "remember_knowledge_confirmation_receipts", "remember_knowledge_memory_materializations", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_blocker_reviews", "scheduled_task_connection_authority_snapshots", "scheduled_task_personal_resource_authorities", "scheduled_task_personal_resource_snapshots", "scheduled_task_reusable_connection_materializations", "scheduled_task_revision_authorities", "scheduled_task_run_connection_authority_snapshots", "scheduled_task_run_personal_resource_admissions", "scheduled_task_run_personal_resource_once_receipts", "scheduled_task_run_personal_resource_snapshots", "scheduled_task_runs", "scheduled_task_schedule_outbox", "scheduled_tasks", "self_service_organization_setup_receipts", "session_admin_access", "session_attempt_codemode_calls", "session_attempt_connected_machine_authorizations", "session_attempt_interruptions", "session_attempt_machine_consents", "session_attempt_model_context_snapshots", "session_attempt_personal_document_admissions", "session_attempt_personal_document_snapshots", "session_attempt_personal_resource_admissions", "session_attempt_personal_resource_snapshots", "session_attempt_tool_catalogs", "session_background_commands", "session_command_receipts", "session_content_blobs", "session_event_cursors", "session_events", "session_goal_revisions", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_tenancy_activations", "session_tenancy_additional_organization_activation_evidence", "session_tenancy_greenfield_activation_evidence", "session_title_operations", "session_turn_attempts", "session_turn_machine_consents", "session_turn_startup_milestones", "session_turns", "session_variable_set_attachments", "session_visibility_write_capabilities", "session_work_claim_revisions", "session_work_claim_write_capabilities", "session_work_claims", "session_workflow_wake_outbox", "sessions", "site_abuse_reports", "site_auth_codes", "site_auth_connections", "site_data_collections", "site_data_files", "site_data_rate_windows", "site_data_record_values", "site_data_records", "site_data_usage", "site_data_validation_windows", "site_data_workspace_validation_windows", "site_hostname_holds", "site_hostnames", "site_limit_profiles", "site_opens", "site_platform_brake", "site_platform_storage", "site_platform_totals", "site_platform_usage", "site_publications", "site_runtime_conversations", "site_runtime_rate_windows", "site_runtime_usage", "site_session_access", "site_sql_databases", "site_sql_migrations", "site_sql_queries", "site_sql_rate_windows", "site_sql_usage", "site_viewer_sessions", "skill_config_conversion_receipts", "skill_source_bindings", "skill_write_receipts", "slack_app_home_refreshes", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_channel_routes", "slack_installation_bindings", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_route_prompt_options", "slack_route_prompts", "slack_shared_task_origins", "slack_task_policy_activation_events", "slack_task_policy_heads", "slack_task_policy_revisions", "slack_user_dm_routes", "slack_user_link_access_request_operations", "slack_user_link_access_requests", "social_connections", "social_posts", "subscription_apps_designations", "subscription_capacity_waiters", "subscription_capacity_wake_outbox", "subscription_connection_aliases", "subscription_connection_assignment_policies", "subscription_connection_people", "subscription_connection_quota", "subscription_connection_workspaces", "subscription_connections", "subscription_leases", "subscription_operation_leases", "subscription_person_preferences", "subscription_provider_cutovers", "subscription_session_bindings", "subscription_settings", "subscription_turn_failures", "task_note_events", "task_note_knowledge_promotion_capabilities", "task_note_replacement_receipts", "task_note_write_capabilities", "task_notes", "temporal_schedule_cleanup_outbox", "tenancy_backfill_receipts", "tenancy_backfill_unresolved_rows", "tool_gateway_approval_capabilities", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "turn_connection_authority_snapshots", "turn_personal_resource_attachment_receipts", "turn_personal_resource_once_receipts", "turn_personal_resource_snapshots", "usage_events", "vault_field_versions", "vault_item_fields", "vault_item_name_aliases", "vault_items", "vault_name_aliases", "vault_passkey_leases", "vaults", "video_generation_operations", "video_generation_references", "workspace_artifact_events", "workspace_artifact_uploads", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_codex_subscription_preferences", "workspace_control_events", "workspace_credential_providers", "workspace_gateway_custom_models", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_deactivation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_onboarding_proposals", "workspace_instruction_policy_revisions", "workspace_instruction_policy_snapshots", "workspace_interaction_revisions", "workspace_learning_policy_activation_events", "workspace_learning_policy_heads", "workspace_learning_policy_revisions", "workspace_learning_policy_snapshots", "workspace_model_policies", "workspace_screenshot_quotas", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspace_video_generation_policies", "workspace_video_generation_quotas", "workspace_webhook_deliveries", "workspace_webhooks", "xai_capacity_waiters", "xai_credential_leases", "xai_rotation_settings", "xai_session_account_pins", "xai_subscription_credentials"];
 /**
  * Deployment-global and authentication tables used by ordinary API/worker
  * traffic. They intentionally do not carry workspace RLS: their access model
@@ -210,7 +210,7 @@ export declare const NON_RLS_RUNTIME_TABLES: readonly ["auth_identities", "auth_
  * explicit instead of being derived from FORCE_RLS_TABLES: adding a protected
  * table must not silently grant it broader DML than its migration intended.
  */
-export declare const RUNTIME_FULL_DML_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "automation_run_event_links", "automation_runs", "automation_sources", "automation_trigger_events", "automation_trigger_revisions", "automation_triggers", "automation_webhook_endpoints", "billing_customers", "browser_session_associations", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_installations", "capability_operations", "capability_plugin_installations", "channels", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "computer_session_associations", "connect_attempts", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "editable_artifact_replica_leases", "enrollment_token_redemptions", "enrollments", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "host_mcp_bindings", "host_mcp_delegations", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_oauth_clients", "integration_oauth_pending_states", "integration_oauth_state_nonces", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "managed_accounts", "mcp_oauth_access_tokens", "mcp_oauth_authorization_codes", "mcp_oauth_authorization_requests", "mcp_oauth_clients", "mcp_oauth_refresh_tokens", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_fact_reconciliation_candidates", "model_call_fact_reconciliation_progress", "model_call_facts", "new_session_drafts", "organization_agent_admin_access", "organization_api_key_workspaces", "organization_codex_rotation_settings", "organization_credential_providers", "organization_model_defaults", "organization_model_provider_connection_operations", "organization_model_provider_connections", "organization_model_provider_custom_models", "organization_privacy_preferences", "organization_service_accounts", "organization_webhook_deliveries", "organization_webhooks", "pr_review_app_registrations", "pr_review_managed_github_routes", "pr_review_repository_bindings", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_blocker_reviews", "scheduled_task_schedule_outbox", "session_admin_access", "session_attempt_interruptions", "session_background_commands", "session_command_receipts", "session_event_cursors", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_title_operations", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "site_abuse_reports", "site_auth_codes", "site_data_collections", "site_data_files", "site_data_rate_windows", "site_data_record_values", "site_data_records", "site_data_usage", "site_data_validation_windows", "site_data_workspace_validation_windows", "site_hostnames", "site_limit_profiles", "site_platform_brake", "site_platform_storage", "site_platform_totals", "site_platform_usage", "site_publications", "site_runtime_conversations", "site_runtime_rate_windows", "site_runtime_usage", "site_session_access", "site_sql_databases", "site_sql_migrations", "site_sql_queries", "site_sql_rate_windows", "site_sql_usage", "site_viewer_sessions", "slack_api_rate_limits", "slack_app_home_refreshes", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_channel_routes", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_route_prompt_options", "slack_route_prompts", "slack_user_dm_routes", "social_connections", "social_posts", "stripe_webhook_events", "subscription_apps_designations", "subscription_capacity_waiters", "subscription_capacity_wake_outbox", "subscription_connection_aliases", "subscription_connection_assignment_policies", "subscription_connection_people", "subscription_connection_quota", "subscription_connection_workspaces", "subscription_connections", "subscription_leases", "subscription_operation_leases", "subscription_person_preferences", "subscription_provider_cutovers", "subscription_session_bindings", "subscription_settings", "subscription_turn_failures", "tool_gateway_approval_capabilities", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifact_uploads", "workspace_artifacts", "workspace_captures", "workspace_codex_subscription_preferences", "workspace_control_events", "workspace_credential_providers", "workspace_gateway_custom_models", "workspace_inference_controls", "workspace_instruction_policy_heads", "workspace_memberships", "workspace_model_policies", "workspace_screenshot_quotas", "workspace_video_generation_policies", "workspace_video_generation_quotas", "workspace_webhook_deliveries", "workspace_webhooks", "workspaces"];
+export declare const RUNTIME_FULL_DML_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "automation_run_event_links", "automation_runs", "automation_sources", "automation_trigger_events", "automation_trigger_revisions", "automation_triggers", "automation_webhook_endpoints", "billing_customers", "browser_session_associations", "capability_catalog_items", "capability_component_owners", "capability_facet_installations", "capability_installations", "capability_operations", "capability_plugin_installations", "channels", "codex_apps_settings", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "computer_session_associations", "connect_attempts", "connection_disconnect_operations", "connections", "connector_action_policies", "connector_action_requests", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "editable_artifact_replica_leases", "enrollment_token_redemptions", "enrollments", "file_uploads", "files", "generated_image_artifacts", "generated_video_artifacts", "github_installation_repositories", "github_installations", "host_mcp_bindings", "host_mcp_delegations", "image_generation_operations", "import_batches", "integration_facet_binding_owners", "integration_facet_bindings", "integration_oauth_clients", "integration_oauth_pending_states", "integration_oauth_state_nonces", "knowledge_source_sync_index_obligations", "knowledge_source_sync_item_outcomes", "knowledge_source_sync_object_observations", "knowledge_source_sync_states", "knowledge_source_sync_wakes", "machine_metrics_latest", "machine_metrics_series", "machine_removal_operations", "managed_accounts", "mcp_oauth_access_tokens", "mcp_oauth_authorization_codes", "mcp_oauth_authorization_requests", "mcp_oauth_clients", "mcp_oauth_refresh_tokens", "memory_slack_publication_configurations", "memory_slack_publication_receipts", "memory_slack_publications", "model_call_fact_reconciliation_candidates", "model_call_fact_reconciliation_progress", "model_call_facts", "new_session_drafts", "organization_agent_admin_access", "organization_api_key_workspaces", "organization_codex_rotation_settings", "organization_credential_providers", "organization_model_defaults", "organization_model_provider_connection_operations", "organization_model_provider_connections", "organization_model_provider_custom_models", "organization_privacy_preferences", "organization_service_accounts", "organization_webhook_deliveries", "organization_webhooks", "pr_review_app_registrations", "pr_review_managed_github_routes", "pr_review_repository_bindings", "retained_screenshot_artifacts", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_blocker_reviews", "scheduled_task_schedule_outbox", "session_admin_access", "session_attempt_interruptions", "session_background_commands", "session_command_receipts", "session_event_cursors", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_realtime_connections", "session_realtime_context_projections", "session_realtime_entries", "session_realtime_modes", "session_recordings", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_title_operations", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "site_abuse_reports", "site_auth_codes", "site_data_collections", "site_data_files", "site_data_rate_windows", "site_data_record_values", "site_data_records", "site_data_usage", "site_data_validation_windows", "site_data_workspace_validation_windows", "site_hostnames", "site_limit_profiles", "site_opens", "site_platform_brake", "site_platform_storage", "site_platform_totals", "site_platform_usage", "site_publications", "site_runtime_conversations", "site_runtime_rate_windows", "site_runtime_usage", "site_session_access", "site_sql_databases", "site_sql_migrations", "site_sql_queries", "site_sql_rate_windows", "site_sql_usage", "site_viewer_sessions", "slack_api_rate_limits", "slack_app_home_refreshes", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_update_operations", "slack_bot_user_links", "slack_channel_routes", "slack_interaction_action_handles", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "slack_route_prompt_options", "slack_route_prompts", "slack_user_dm_routes", "social_connections", "social_posts", "stripe_webhook_events", "subscription_apps_designations", "subscription_capacity_waiters", "subscription_capacity_wake_outbox", "subscription_connection_aliases", "subscription_connection_assignment_policies", "subscription_connection_people", "subscription_connection_quota", "subscription_connection_workspaces", "subscription_connections", "subscription_leases", "subscription_operation_leases", "subscription_person_preferences", "subscription_provider_cutovers", "subscription_session_bindings", "subscription_settings", "subscription_turn_failures", "tool_gateway_approval_capabilities", "transcription_recording_chunks", "transcription_recording_objects", "transcription_recording_segments", "transcription_recordings", "usage_events", "video_generation_operations", "video_generation_references", "workspace_artifact_uploads", "workspace_artifacts", "workspace_captures", "workspace_codex_subscription_preferences", "workspace_control_events", "workspace_credential_providers", "workspace_gateway_custom_models", "workspace_inference_controls", "workspace_instruction_policy_heads", "workspace_memberships", "workspace_model_policies", "workspace_screenshot_quotas", "workspace_video_generation_policies", "workspace_video_generation_quotas", "workspace_webhook_deliveries", "workspace_webhooks", "workspaces"];
 /**
  * A provider's legacy subscription tables once its drained cutover receipt
  * exists: kept for forensics, read-only for the runtime role. Role