@opengeni/db 4.6.1 → 4.6.2-canary.39854174564001

package/dist/canonical-human-identities.js

@@ -11,10 +11,10 @@ import {
   getCanonicalHumanIdentityProjection,
   synchronizeCanonicalHumanLoginBindings,
   validateCanonicalHumanSession
-} from "./chunk-XX5M3TJJ.js";
-import "./chunk-K2YN562I.js";
+} from "./chunk-LLMVN6ZL.js";
+import "./chunk-RXKWURPN.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-KMBU4KDY.js";
+import "./chunk-PKY6KWEP.js";
 import "./chunk-PZ5AY32C.js";
 export {
   CanonicalHumanIdentityAuthorityError,

package/dist/capability-reconciliation.js

@@ -1,8 +1,8 @@
 import {
   withWorkspaceRls
-} from "./chunk-K2YN562I.js";
+} from "./chunk-RXKWURPN.js";
 import "./chunk-SMCA7PNJ.js";
-import "./chunk-KMBU4KDY.js";
+import "./chunk-PKY6KWEP.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/capability-reconciliation.ts

package/dist/{chunk-575FUJE2.js → chunk-2AYATAKX.js}

@@ -1,14 +1,14 @@
 import {
   rawRows,
   withWorkspaceRls
-} from "./chunk-K2YN562I.js";
+} from "./chunk-RXKWURPN.js";
 import {
   LOSSLESS_JSON_STRING_PREFIX,
   fromPostgresLosslessJson,
   sessionEvents,
   sessionTurns,
   toPostgresLosslessJson
-} from "./chunk-KMBU4KDY.js";
+} from "./chunk-PKY6KWEP.js";
 
 // src/session-event-slices.ts
 import { and, asc, desc, eq, gt, inArray, lt, notInArray, sql as sql2 } from "drizzle-orm";
@@ -275,4 +275,4 @@ export {
   readSessionMessageSliceInScope,
   listSessionEventSlices
 };
-//# sourceMappingURL=chunk-575FUJE2.js.map
+//# sourceMappingURL=chunk-2AYATAKX.js.map

package/dist/{chunk-MSAWMGWJ.js → chunk-3SPJSY7W.js}

@@ -1,10 +1,10 @@
 import {
   subscriptionCoreConnectionKind,
   subscriptionCoreProviderId
-} from "./chunk-GYAQYECK.js";
+} from "./chunk-EWOI5BFP.js";
 import {
   lockSessionEventWriteRows
-} from "./chunk-7P67EF5K.js";
+} from "./chunk-SLTEPCXD.js";
 import {
   SUBSCRIPTION_CORE_CODEX,
   SubscriptionCoreError,
@@ -18,7 +18,7 @@ import {
   subscriptionCoreProvider,
   subscriptionCoreProviderIds,
   writeSubscriptionSessionBinding
-} from "./chunk-VXCIFQX7.js";
+} from "./chunk-PB7JKMHJ.js";
 import {
   nestedPostgresSqlState,
   rawRows,
@@ -26,14 +26,14 @@ import {
   withRlsContext,
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls
-} from "./chunk-K2YN562I.js";
+} from "./chunk-RXKWURPN.js";
 import {
   auditEvents,
   fromPostgresLosslessJson,
   sessionEvents,
   sessions,
   withLosslessContentWriteVersion
-} from "./chunk-KMBU4KDY.js";
+} from "./chunk-PKY6KWEP.js";
 
 // src/subscription-core-codex-compat.ts
 import { codexPlanKey as codexPlanKey2 } from "@opengeni/codex";
@@ -2161,4 +2161,4 @@ export {
   setSubscriptionCoreCodexRotation,
   setSubscriptionCoreWorkspaceCodexSource
 };
-//# sourceMappingURL=chunk-MSAWMGWJ.js.map
+//# sourceMappingURL=chunk-3SPJSY7W.js.map

package/dist/{chunk-M6TNKUGE.js → chunk-4FIFLPZC.js}

@@ -1643,6 +1643,10 @@ var OWNER_INTERNAL_PRIVATE_ROUTINES = /* @__PURE__ */ new Set([
   // Migration 0907: the invoker-rights trigger that keeps a workspace's own
   // subscription connection serving only that workspace.
   "guard_subscription_workspace_owner_reach()",
+  // Migration 0909: the invoker-rights trigger that mirrors a message event's
+  // text into session_message_search_texts (triggers fire without the
+  // writing role holding EXECUTE).
+  "index_session_message_search_text()",
   // Migration 0716: the authority marker and compatibility guards, the
   // per-path source resolvers and the deferred compatibility check. The
   // triggers fire without the writing role holding EXECUTE.
@@ -3061,6 +3065,7 @@ var FORCE_RLS_TABLES = [
   "session_human_input_requests",
   "session_list_snapshots",
   "session_mcp_servers",
+  "session_message_search_texts",
   "session_pending_tool_calls",
   "session_pins",
   "session_realtime_connections",
@@ -3565,6 +3570,9 @@ var RUNTIME_READ_INSERT_TABLES = [
   "session_attempt_tool_catalogs",
   "session_content_blobs",
   "session_goal_revisions",
+  // Written by the invoker-rights 0909 trigger, admitted only as an exact
+  // mirror of a visible message event.
+  "session_message_search_texts",
   "session_spawn_denials",
   "slack_shared_task_origins",
   "slack_user_link_access_request_operations",
@@ -9211,4 +9219,4 @@ export {
   provisionRoles,
   runProvisionRolesCli
 };
-//# sourceMappingURL=chunk-M6TNKUGE.js.map
+//# sourceMappingURL=chunk-4FIFLPZC.js.map