@opengeni/db 5.0.1-canary.2 → 5.0.1-canary.4

package/dist/canonical-human-identities.d.ts

@@ -59,6 +59,10 @@ export type ApplyCanonicalHumanIdentityOperationInput = {
     providerId?: string | null;
     providerAccountId?: string | null;
     reason: string;
+    verifiedRecovery?: {
+        authSessionId: string;
+        requestDigest: string;
+    };
     actorFence?: {
         authorityHash: string;
         actorEpoch: string;

package/dist/canonical-human-identities.js

@@ -11,7 +11,7 @@ import {
   getCanonicalHumanIdentityProjection,
   synchronizeCanonicalHumanLoginBindings,
   validateCanonicalHumanSession
-} from "./chunk-E4X5HQ5P.js";
+} from "./chunk-VTQOLZ6H.js";
 import "./chunk-TDXX22IZ.js";
 import "./chunk-BGMK3XV6.js";
 import "./chunk-S2TZ3F4L.js";

package/dist/capability-components.d.ts

@@ -36,4 +36,4 @@ export declare function assertCapabilityComponentVersionCanChange(db: Database,
  * have claimed a component while its installation is pending or repairing,
  * even though that owner is intentionally hidden from runtime reads.
  */
-export declare function cleanupOrphanedCapabilityComponents(db: Database, workspaceId: string, facetInstallationIds: string[], skillActor?: SkillActor): Promise<SkillSourceReleaseReceipt[]>;
+export declare function cleanupOrphanedCapabilityComponents(db: Database, workspaceId: string, facetInstallationIds: string[], skillActor?: SkillActor, lockedSkillHeadIds?: readonly string[]): Promise<SkillSourceReleaseReceipt[]>;

package/dist/{chunk-VRS7M7FP.js → chunk-FBQIJZRB.js}

@@ -413,6 +413,11 @@ var SCOPED_COMPUTE_AUTHORITY_ROUTINES = [
   "detach_scoped_machine_dependent_sessions(uuid, uuid, uuid)"
 ];
 var CANONICAL_HUMAN_IDENTITY_ROUTINES = [
+  "mutate_managed_sign_in_method(text, text, jsonb)",
+  "assert_managed_sign_in_recovery(text, text, uuid, jsonb)",
+  "replay_managed_sign_in_method(text, text, jsonb)",
+  "claim_managed_sign_in_notification(uuid, text, text, integer)",
+  "settle_managed_sign_in_notification(uuid, uuid, text)",
   "ensure_canonical_human_identity(text, text)",
   "validate_canonical_human_session(text, text, boolean)",
   "get_canonical_human_identity_projection(text)",
@@ -899,6 +904,7 @@ var FORCE_RLS_TABLES = [
   "managed_auth_login_transactions",
   "managed_auth_session_set_operations",
   "managed_auth_session_sets",
+  "managed_sign_in_method_operations",
   "mcp_operations",
   "memory_slack_publication_configurations",
   "memory_slack_publication_receipts",
@@ -1467,6 +1473,7 @@ var PROTECTED_NO_DIRECT_DML_TABLES = [
   "managed_auth_login_transactions",
   "managed_auth_session_set_operations",
   "managed_auth_session_sets",
+  "managed_sign_in_method_operations",
   "mcp_operations",
   "organization_company_profile_agent_policies",
   "organization_company_profile_agent_policy_events",
@@ -3735,6 +3742,10 @@ async function grantAppRoleIfSchemaExists(sql2, role, schema) {
     "complete_organization_retention_deletion(uuid,uuid,uuid,text)"
   ].map(literal).join(", ")}]`;
   const managedAuthSessionSetRoutines = `ARRAY[${[
+    "assert_managed_sign_in_recovery(text,text,uuid,jsonb)",
+    "replay_managed_sign_in_method(text,text,jsonb)",
+    "claim_managed_sign_in_notification(uuid,text,text,integer)",
+    "settle_managed_sign_in_notification(uuid,uuid,text)",
     "get_canonical_human_exact_login_binding(text,text)",
     "managed_auth_session_set_authority_state(text)",
     "managed_auth_session_set_snapshot(text,text,boolean,boolean,boolean)",
@@ -4468,6 +4479,9 @@ BEGIN
         ${literal(role)}
       );
     END IF;
+    IF to_regprocedure(format('%I.mutate_managed_sign_in_method(text,text,jsonb)', ${literal(schema)})) IS NOT NULL THEN
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %I.mutate_managed_sign_in_method(text,text,jsonb) TO %I', ${literal(schema)}, ${literal(role)});
+    END IF;
     FOREACH routine_signature IN ARRAY ${managedAuthSessionSetRoutines} LOOP
       IF to_regprocedure(format('%I.%s', ${literal(schema)}, routine_signature)) IS NOT NULL THEN
         EXECUTE format(
@@ -5482,4 +5496,4 @@ export {
   runtimeDatabaseReadyCheck,
   provisionRoles
 };
-//# sourceMappingURL=chunk-VRS7M7FP.js.map
+//# sourceMappingURL=chunk-FBQIJZRB.js.map