@opengeni/db 5.0.1 → 6.0.0

package/dist/session-goal-reports.d.ts

@@ -0,0 +1,43 @@
+import { type SessionGoalReportRequirement } from "@opengeni/contracts";
+import { type Database } from "./database.js";
+import { type PersistedEditableArtifactActor } from "./editable-artifacts.js";
+/** Versioned, server-owned metadata. Malformed persisted data fails closed. */
+export declare const GOAL_REPORT_REQUIREMENTS_KEY = "reportRequirementsV1";
+export declare function goalReportRequirements(metadata: Record<string, unknown>): SessionGoalReportRequirement[];
+export declare function appendGoalReportRequirements(metadata: Record<string, unknown>, declarations?: readonly SessionGoalReportRequirement[]): Record<string, unknown>;
+export type ReportArtifactActor = Extract<PersistedEditableArtifactActor, {
+    kind: "agent";
+}>;
+/** Trusted application-only recorder, called after native query/decode. There is
+ * no public route/tool accepting this proof body. The runtime SQL role remains
+ * trusted: it can insert receipt-shaped rows, so stored proof is not a native
+ * execution attestation against arbitrary application-role SQL. UPDATE and
+ * direct DELETE are fenced; legitimate session-retention cascades remove proof.
+ */
+export declare function recordNativeDocumentInspection(db: Database, input: {
+    scope: {
+        accountId: string;
+        workspaceId: string;
+    };
+    actor: ReportArtifactActor;
+    sessionId: string;
+    artifact: {
+        id: string;
+        modality: string;
+        headSequence: number;
+        stateHash: string;
+    };
+    queryHash: string;
+    queryKind: string;
+}): Promise<string>;
+/** No provider calls here: receipt, access, locked current head and completion
+ * share one transaction. Receipts from previous attempts may prove inspection,
+ * but the completing attempt must still have live read authority. */
+export declare function verifyGoalReportDeliveries(tx: Database, input: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    metadata: Record<string, unknown>;
+    deliveries: unknown;
+    actor?: ReportArtifactActor;
+}): Promise<void>;

package/dist/session-mcp-approval.d.ts

@@ -0,0 +1,4 @@
+import type { SessionMcpApprovalPolicy } from "@opengeni/contracts";
+import { type Database } from "./database.js";
+/** Read only the immutable active-attempt policy, never a mutable session fallback. */
+export declare function getSessionAttemptMcpApprovalPolicies(db: Database, workspaceId: string, sessionId: string, attemptId: string): Promise<Record<string, SessionMcpApprovalPolicy>>;

package/dist/session-mcp-credential-rotation.js

@@ -1,18 +1,19 @@
 import {
   lockSessionEventWriteRows
-} from "./chunk-6T2GGYWE.js";
-import "./chunk-ERKVSPDX.js";
+} from "./chunk-GABXCG3N.js";
+import "./chunk-LVY33EWL.js";
+import "./chunk-4UJCXBR2.js";
 import {
   rawRows,
   setSubjectRlsContext,
   withRlsContext
-} from "./chunk-DPONPYJD.js";
+} from "./chunk-CJI6G254.js";
 import {
   apiKeys,
   sessionCommandReceipts,
   sessionMcpServers,
   sessions
-} from "./chunk-F73UKJY6.js";
+} from "./chunk-MN5PZMEK.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 

package/dist/session-mcp-credential-rotation.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/session-mcp-credential-rotation.ts"],"sourcesContent":["import { and, eq, inArray, sql } from \"drizzle-orm\";\nimport { RotateSessionMcpCredentialsReceipt, SessionTurnStatus } from \"@opengeni/contracts\";\nimport { rawRows, setSubjectRlsContext, withRlsContext, type Database } from \"./database\";\nimport { lockSessionEventWriteRows } from \"./session-control\";\nimport * as schema from \"./schema\";\n\nconst action = \"session.mcp.credentials.rotate\";\nconst liveTurnStatuses = SessionTurnStatus.exclude([\n  \"completed\",\n  \"failed\",\n  \"cancelled\",\n  \"superseded\",\n  \"withdrawn_for_edit\",\n]).options;\n\nexport class SessionMcpCredentialRotationError extends Error {\n  constructor(\n    readonly code:\n      | \"invalid_request\"\n      | \"not_found\"\n      | \"not_quiescent\"\n      | \"version_conflict\"\n      | \"destination_conflict\"\n      | \"brokered_server\"\n      | \"operation_reuse\"\n      | \"receipt_key_unavailable\"\n      | \"authority_revoked\",\n  ) {\n    super(code);\n    this.name = \"SessionMcpCredentialRotationError\";\n  }\n}\n\nexport type AtomicSessionMcpCredentialRotationInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  subjectId: string;\n  actorType: \"human\" | \"service\";\n  operationKey: string;\n  requestDigest: string;\n  digestKeyTag: string;\n  updates: Array<{\n    id: string;\n    expectedCredentialVersion: number;\n    expectedServerUrl: string;\n    headersEncrypted: Record<string, string>;\n  }>;\n  /** Trusted request authorizer, mandatory even for a committed receipt replay.\n   * Revalidate the original authenticated subject and permissions on this tx. */\n  authorize: (tx: Database) => Promise<void>;\n};\n\n/** Existing command receipts own durable idempotency; this is not a new queue\n * command. No session/event/history/attempt/control/wake rows are mutated. */\nexport async function rotateSessionMcpCredentialsAtomically(\n  db: Database,\n  input: AtomicSessionMcpCredentialRotationInput,\n): Promise<RotateSessionMcpCredentialsReceipt> {\n  if (\n    !input.updates.length ||\n    input.updates.length > 64 ||\n    new Set(input.updates.map((update) => update.id)).size !== input.updates.length ||\n    !/^[a-f0-9]{64}$/.test(input.requestDigest) ||\n    !/^[a-f0-9]{64}$/.test(input.digestKeyTag)\n  ) {\n    throw new SessionMcpCredentialRotationError(\"invalid_request\");\n  }\n  return withRlsContext(\n    db,\n    input,\n    async (tx) => {\n      // Membership before tenancy/control/session is the canonical claim/removal\n      // order. External continuation authorization reacquires this exclusive\n      // membership fence, so taking shared first would introduce an upgrade.\n      // Do not upgrade a previously acquired shared tenancy lock.\n      await tx.execute(sql`select pg_advisory_xact_lock(hashtextextended(\n      ${`organization-membership:${input.accountId}`}, 0))`);\n      await tx.execute(sql`select pg_advisory_xact_lock_shared(hashtextextended(\n      ${`session-tenancy:${input.workspaceId}`}, 0))`);\n      await setSubjectRlsContext(tx, input.subjectId);\n      const [target] = await tx\n        .select({ id: schema.sessions.id })\n        .from(schema.sessions)\n        .where(\n          and(\n            eq(schema.sessions.accountId, input.accountId),\n            eq(schema.sessions.workspaceId, input.workspaceId),\n            eq(schema.sessions.id, input.sessionId),\n          ),\n        );\n      if (!target) throw new SessionMcpCredentialRotationError(\"not_found\");\n      const locks = await lockSessionEventWriteRows(tx, {\n        workspaceId: input.workspaceId,\n        controlLock: \"share\",\n        sessionIds: [input.sessionId],\n      });\n      const session = locks.sessions[0];\n      if (!session || session.accountId !== input.accountId) {\n        throw new SessionMcpCredentialRotationError(\"not_found\");\n      }\n      // Hold a current API key through commit. The ordinary access resolver's\n      // last-used write alone does not recheck a revocation racing its first read.\n      // Take UPDATE directly because fresh resolution writes lastUsedAt.\n      if (input.subjectId.startsWith(\"api_key:\")) {\n        const keyId = input.subjectId.slice(\"api_key:\".length);\n        const [key] = await tx\n          .select({ id: schema.apiKeys.id, permissions: schema.apiKeys.permissions })\n          .from(schema.apiKeys)\n          .where(\n            and(\n              eq(schema.apiKeys.id, keyId),\n              eq(schema.apiKeys.accountId, input.accountId),\n              sql`(${schema.apiKeys.workspaceId} is null or ${schema.apiKeys.workspaceId} = ${input.workspaceId}::uuid)`,\n              sql`${schema.apiKeys.revokedAt} is null`,\n              sql`(${schema.apiKeys.expiresAt} is null or ${schema.apiKeys.expiresAt} > clock_timestamp())`,\n            ),\n          )\n          .for(\"update\");\n        if (\n          !key ||\n          (!key.permissions.includes(\"workspace:admin\") &&\n            (!key.permissions.includes(\"sessions:control\") ||\n              !key.permissions.includes(\"mcp_servers:attach\")))\n        )\n          throw new SessionMcpCredentialRotationError(\"authority_revoked\");\n      }\n      await input.authorize(tx);\n      const [prior] = await tx\n        .select()\n        .from(schema.sessionCommandReceipts)\n        .where(\n          and(\n            eq(schema.sessionCommandReceipts.accountId, input.accountId),\n            eq(schema.sessionCommandReceipts.workspaceId, input.workspaceId),\n            eq(schema.sessionCommandReceipts.targetSessionId, input.sessionId),\n            eq(schema.sessionCommandReceipts.actorType, input.actorType),\n            eq(schema.sessionCommandReceipts.actorSubjectId, input.subjectId),\n            eq(schema.sessionCommandReceipts.action, action),\n            eq(schema.sessionCommandReceipts.operationKey, input.operationKey),\n          ),\n        );\n      if (prior) {\n        if (prior.result.digestKeyTag !== input.digestKeyTag)\n          throw new SessionMcpCredentialRotationError(\"receipt_key_unavailable\");\n        if (prior.canonicalRequestHash !== input.requestDigest)\n          throw new SessionMcpCredentialRotationError(\"operation_reuse\");\n        return RotateSessionMcpCredentialsReceipt.parse(prior.result.receipt);\n      }\n      // Session lock serializes admission, claim, realtime start, interruption\n      // settlement, and attempt-owned provider admission. Dormant goals/schedules\n      // and unrelated viewers are deliberately not credential consumers.\n      // Retained run snapshots and tool receipts need a live turn/attempt to\n      // consume credentials; their historical presence alone is not activity.\n      const [busy] = await rawRows<{ present: boolean }>(\n        tx,\n        sql`select (\n      exists(select 1 from session_turns where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and status in (${sql.join(\n          liveTurnStatuses.map((status) => sql`${status}`),\n          sql`, `,\n        )}))\n      or exists(select 1 from session_turn_attempts a where a.workspace_id = ${input.workspaceId}::uuid\n        and a.session_id = ${input.sessionId}::uuid and (a.state <> 'closed' or\n          (a.quiesced_at is null and exists(select 1 from session_attempt_interruptions i\n            where i.workspace_id = a.workspace_id and i.attempt_id = a.id))))\n      or exists(select 1 from session_system_updates where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and state = 'pending')\n      or exists(select 1 from sandbox_workspace_mutation_admissions where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and attempt_id is not null and settled_at is null)\n      or exists(select 1 from session_realtime_modes where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and state = 'active')\n      or exists(select 1 from session_realtime_connections where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and state not in ('failed', 'closed'))\n    ) as present`,\n      );\n      if (!busy || busy.present) throw new SessionMcpCredentialRotationError(\"not_quiescent\");\n      const rows = await tx\n        .select()\n        .from(schema.sessionMcpServers)\n        .where(\n          and(\n            eq(schema.sessionMcpServers.workspaceId, input.workspaceId),\n            eq(schema.sessionMcpServers.sessionId, input.sessionId),\n            inArray(\n              schema.sessionMcpServers.serverId,\n              input.updates.map((update) => update.id),\n            ),\n          ),\n        )\n        .orderBy(schema.sessionMcpServers.serverId)\n        .for(\"update\");\n      for (const update of input.updates) {\n        const row = rows.find((server) => server.serverId === update.id);\n        if (!row || row.accountId !== input.accountId)\n          throw new SessionMcpCredentialRotationError(\"not_found\");\n        if (row.connectionRef) throw new SessionMcpCredentialRotationError(\"brokered_server\");\n        if (row.url !== update.expectedServerUrl)\n          throw new SessionMcpCredentialRotationError(\"destination_conflict\");\n        if (\n          !Number.isInteger(update.expectedCredentialVersion) ||\n          update.expectedCredentialVersion < 1 ||\n          update.expectedCredentialVersion >= 2_147_483_647 ||\n          row.credentialVersion !== update.expectedCredentialVersion\n        )\n          throw new SessionMcpCredentialRotationError(\"version_conflict\");\n      }\n      const receipt: RotateSessionMcpCredentialsReceipt = {\n        operationKey: input.operationKey,\n        sessionId: input.sessionId,\n        appliedAt: new Date().toISOString(),\n        servers: input.updates.map((update) => ({\n          id: update.id,\n          credentialVersion: update.expectedCredentialVersion + 1,\n        })),\n      };\n      for (const update of input.updates) {\n        await tx\n          .update(schema.sessionMcpServers)\n          .set({\n            headersEncrypted: update.headersEncrypted,\n            credentialVersion: update.expectedCredentialVersion + 1,\n            updatedAt: new Date(receipt.appliedAt),\n          })\n          .where(\n            and(\n              eq(schema.sessionMcpServers.workspaceId, input.workspaceId),\n              eq(schema.sessionMcpServers.sessionId, input.sessionId),\n              eq(schema.sessionMcpServers.serverId, update.id),\n            ),\n          );\n      }\n      await tx.insert(schema.sessionCommandReceipts).values({\n        accountId: input.accountId,\n        workspaceId: input.workspaceId,\n        actorType: input.actorType,\n        actorSubjectId: input.subjectId,\n        action,\n        targetSessionId: input.sessionId,\n        operationKey: input.operationKey,\n        canonicalRequestHash: input.requestDigest,\n        result: { digestKeyTag: input.digestKeyTag, receipt },\n      });\n      return receipt;\n    },\n    undefined,\n    \"none\",\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,SAAS,KAAK,IAAI,SAAS,WAAW;AACtC,SAAS,oCAAoC,yBAAyB;AAKtE,IAAM,SAAS;AACf,IAAM,mBAAmB,kBAAkB,QAAQ;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC,EAAE;AAEI,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAC3D,YACW,MAUT;AACA,UAAM,IAAI;AAXD;AAYT,SAAK,OAAO;AAAA,EACd;AACF;AAwBA,eAAsB,sCACpB,IACA,OAC6C;AAC7C,MACE,CAAC,MAAM,QAAQ,UACf,MAAM,QAAQ,SAAS,MACvB,IAAI,IAAI,MAAM,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,SAAS,MAAM,QAAQ,UACzE,CAAC,iBAAiB,KAAK,MAAM,aAAa,KAC1C,CAAC,iBAAiB,KAAK,MAAM,YAAY,GACzC;AACA,UAAM,IAAI,kCAAkC,iBAAiB;AAAA,EAC/D;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAKZ,YAAM,GAAG,QAAQ;AAAA,QACf,2BAA2B,MAAM,SAAS,EAAE,OAAO;AACrD,YAAM,GAAG,QAAQ;AAAA,QACf,mBAAmB,MAAM,WAAW,EAAE,OAAO;AAC/C,YAAM,qBAAqB,IAAI,MAAM,SAAS;AAC9C,YAAM,CAAC,MAAM,IAAI,MAAM,GACpB,OAAO,EAAE,IAAW,SAAS,GAAG,CAAC,EACjC,KAAY,QAAQ,EACpB;AAAA,QACC;AAAA,UACE,GAAU,SAAS,WAAW,MAAM,SAAS;AAAA,UAC7C,GAAU,SAAS,aAAa,MAAM,WAAW;AAAA,UACjD,GAAU,SAAS,IAAI,MAAM,SAAS;AAAA,QACxC;AAAA,MACF;AACF,UAAI,CAAC,OAAQ,OAAM,IAAI,kCAAkC,WAAW;AACpE,YAAM,QAAQ,MAAM,0BAA0B,IAAI;AAAA,QAChD,aAAa,MAAM;AAAA,QACnB,aAAa;AAAA,QACb,YAAY,CAAC,MAAM,SAAS;AAAA,MAC9B,CAAC;AACD,YAAM,UAAU,MAAM,SAAS,CAAC;AAChC,UAAI,CAAC,WAAW,QAAQ,cAAc,MAAM,WAAW;AACrD,cAAM,IAAI,kCAAkC,WAAW;AAAA,MACzD;AAIA,UAAI,MAAM,UAAU,WAAW,UAAU,GAAG;AAC1C,cAAM,QAAQ,MAAM,UAAU,MAAM,WAAW,MAAM;AACrD,cAAM,CAAC,GAAG,IAAI,MAAM,GACjB,OAAO,EAAE,IAAW,QAAQ,IAAI,aAAoB,QAAQ,YAAY,CAAC,EACzE,KAAY,OAAO,EACnB;AAAA,UACC;AAAA,YACE,GAAU,QAAQ,IAAI,KAAK;AAAA,YAC3B,GAAU,QAAQ,WAAW,MAAM,SAAS;AAAA,YAC5C,OAAc,QAAQ,WAAW,eAAsB,QAAQ,WAAW,MAAM,MAAM,WAAW;AAAA,YACjG,MAAa,QAAQ,SAAS;AAAA,YAC9B,OAAc,QAAQ,SAAS,eAAsB,QAAQ,SAAS;AAAA,UACxE;AAAA,QACF,EACC,IAAI,QAAQ;AACf,YACE,CAAC,OACA,CAAC,IAAI,YAAY,SAAS,iBAAiB,MACzC,CAAC,IAAI,YAAY,SAAS,kBAAkB,KAC3C,CAAC,IAAI,YAAY,SAAS,oBAAoB;AAElD,gBAAM,IAAI,kCAAkC,mBAAmB;AAAA,MACnE;AACA,YAAM,MAAM,UAAU,EAAE;AACxB,YAAM,CAAC,KAAK,IAAI,MAAM,GACnB,OAAO,EACP,KAAY,sBAAsB,EAClC;AAAA,QACC;AAAA,UACE,GAAU,uBAAuB,WAAW,MAAM,SAAS;AAAA,UAC3D,GAAU,uBAAuB,aAAa,MAAM,WAAW;AAAA,UAC/D,GAAU,uBAAuB,iBAAiB,MAAM,SAAS;AAAA,UACjE,GAAU,uBAAuB,WAAW,MAAM,SAAS;AAAA,UAC3D,GAAU,uBAAuB,gBAAgB,MAAM,SAAS;AAAA,UAChE,GAAU,uBAAuB,QAAQ,MAAM;AAAA,UAC/C,GAAU,uBAAuB,cAAc,MAAM,YAAY;AAAA,QACnE;AAAA,MACF;AACF,UAAI,OAAO;AACT,YAAI,MAAM,OAAO,iBAAiB,MAAM;AACtC,gBAAM,IAAI,kCAAkC,yBAAyB;AACvE,YAAI,MAAM,yBAAyB,MAAM;AACvC,gBAAM,IAAI,kCAAkC,iBAAiB;AAC/D,eAAO,mCAAmC,MAAM,MAAM,OAAO,OAAO;AAAA,MACtE;AAMA,YAAM,CAAC,IAAI,IAAI,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,gEACwD,MAAM,WAAW;AAAA,2BACtD,MAAM,SAAS,yBAAyB,IAAI;AAAA,UAC7D,iBAAiB,IAAI,CAAC,WAAW,MAAM,MAAM,EAAE;AAAA,UAC/C;AAAA,QACF,CAAC;AAAA,+EACsE,MAAM,WAAW;AAAA,6BACnE,MAAM,SAAS;AAAA;AAAA;AAAA,4EAGgC,MAAM,WAAW;AAAA,2BAClE,MAAM,SAAS;AAAA,2FACiD,MAAM,WAAW;AAAA,2BACjF,MAAM,SAAS;AAAA,4EACkC,MAAM,WAAW;AAAA,2BAClE,MAAM,SAAS;AAAA,kFACwC,MAAM,WAAW;AAAA,2BACxE,MAAM,SAAS;AAAA;AAAA,MAEpC;AACA,UAAI,CAAC,QAAQ,KAAK,QAAS,OAAM,IAAI,kCAAkC,eAAe;AACtF,YAAM,OAAO,MAAM,GAChB,OAAO,EACP,KAAY,iBAAiB,EAC7B;AAAA,QACC;AAAA,UACE,GAAU,kBAAkB,aAAa,MAAM,WAAW;AAAA,UAC1D,GAAU,kBAAkB,WAAW,MAAM,SAAS;AAAA,UACtD;AAAA,YACS,kBAAkB;AAAA,YACzB,MAAM,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE;AAAA,UACzC;AAAA,QACF;AAAA,MACF,EACC,QAAe,kBAAkB,QAAQ,EACzC,IAAI,QAAQ;AACf,iBAAW,UAAU,MAAM,SAAS;AAClC,cAAM,MAAM,KAAK,KAAK,CAAC,WAAW,OAAO,aAAa,OAAO,EAAE;AAC/D,YAAI,CAAC,OAAO,IAAI,cAAc,MAAM;AAClC,gBAAM,IAAI,kCAAkC,WAAW;AACzD,YAAI,IAAI,cAAe,OAAM,IAAI,kCAAkC,iBAAiB;AACpF,YAAI,IAAI,QAAQ,OAAO;AACrB,gBAAM,IAAI,kCAAkC,sBAAsB;AACpE,YACE,CAAC,OAAO,UAAU,OAAO,yBAAyB,KAClD,OAAO,4BAA4B,KACnC,OAAO,6BAA6B,cACpC,IAAI,sBAAsB,OAAO;AAEjC,gBAAM,IAAI,kCAAkC,kBAAkB;AAAA,MAClE;AACA,YAAM,UAA8C;AAAA,QAClD,cAAc,MAAM;AAAA,QACpB,WAAW,MAAM;AAAA,QACjB,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,SAAS,MAAM,QAAQ,IAAI,CAAC,YAAY;AAAA,UACtC,IAAI,OAAO;AAAA,UACX,mBAAmB,OAAO,4BAA4B;AAAA,QACxD,EAAE;AAAA,MACJ;AACA,iBAAW,UAAU,MAAM,SAAS;AAClC,cAAM,GACH,OAAc,iBAAiB,EAC/B,IAAI;AAAA,UACH,kBAAkB,OAAO;AAAA,UACzB,mBAAmB,OAAO,4BAA4B;AAAA,UACtD,WAAW,IAAI,KAAK,QAAQ,SAAS;AAAA,QACvC,CAAC,EACA;AAAA,UACC;AAAA,YACE,GAAU,kBAAkB,aAAa,MAAM,WAAW;AAAA,YAC1D,GAAU,kBAAkB,WAAW,MAAM,SAAS;AAAA,YACtD,GAAU,kBAAkB,UAAU,OAAO,EAAE;AAAA,UACjD;AAAA,QACF;AAAA,MACJ;AACA,YAAM,GAAG,OAAc,sBAAsB,EAAE,OAAO;AAAA,QACpD,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,WAAW,MAAM;AAAA,QACjB,gBAAgB,MAAM;AAAA,QACtB;AAAA,QACA,iBAAiB,MAAM;AAAA,QACvB,cAAc,MAAM;AAAA,QACpB,sBAAsB,MAAM;AAAA,QAC5B,QAAQ,EAAE,cAAc,MAAM,cAAc,QAAQ;AAAA,MACtD,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/session-mcp-credential-rotation.ts"],"sourcesContent":["import { and, eq, inArray, sql } from \"drizzle-orm\";\nimport { RotateSessionMcpCredentialsReceipt, SessionTurnStatus } from \"@opengeni/contracts\";\nimport { rawRows, setSubjectRlsContext, withRlsContext, type Database } from \"./database\";\nimport { lockSessionEventWriteRows } from \"./session-control\";\nimport * as schema from \"./schema\";\n\nconst action = \"session.mcp.credentials.rotate\";\nconst liveTurnStatuses = SessionTurnStatus.exclude([\n  \"completed\",\n  \"failed\",\n  \"cancelled\",\n  \"superseded\",\n  \"withdrawn_for_edit\",\n]).options;\n\nexport class SessionMcpCredentialRotationError extends Error {\n  constructor(\n    readonly code:\n      | \"invalid_request\"\n      | \"not_found\"\n      | \"not_quiescent\"\n      | \"version_conflict\"\n      | \"destination_conflict\"\n      | \"brokered_server\"\n      | \"operation_reuse\"\n      | \"receipt_key_unavailable\"\n      | \"authority_revoked\",\n  ) {\n    super(code);\n    this.name = \"SessionMcpCredentialRotationError\";\n  }\n}\n\nexport type AtomicSessionMcpCredentialRotationInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  subjectId: string;\n  actorType: \"human\" | \"service\";\n  operationKey: string;\n  requestDigest: string;\n  digestKeyTag: string;\n  updates: Array<{\n    id: string;\n    expectedCredentialVersion: number;\n    expectedServerUrl: string;\n    headersEncrypted: Record<string, string>;\n  }>;\n  /** Trusted request authorizer, mandatory even for a committed receipt replay.\n   * Revalidate the original authenticated subject and permissions on this tx. */\n  authorize: (tx: Database) => Promise<void>;\n};\n\n/** Existing command receipts own durable idempotency; this is not a new queue\n * command. No session/event/history/attempt/control/wake rows are mutated. */\nexport async function rotateSessionMcpCredentialsAtomically(\n  db: Database,\n  input: AtomicSessionMcpCredentialRotationInput,\n): Promise<RotateSessionMcpCredentialsReceipt> {\n  if (\n    !input.updates.length ||\n    input.updates.length > 64 ||\n    new Set(input.updates.map((update) => update.id)).size !== input.updates.length ||\n    !/^[a-f0-9]{64}$/.test(input.requestDigest) ||\n    !/^[a-f0-9]{64}$/.test(input.digestKeyTag)\n  ) {\n    throw new SessionMcpCredentialRotationError(\"invalid_request\");\n  }\n  return withRlsContext(\n    db,\n    input,\n    async (tx) => {\n      // Membership before tenancy/control/session is the canonical claim/removal\n      // order. External continuation authorization reacquires this exclusive\n      // membership fence, so taking shared first would introduce an upgrade.\n      // Do not upgrade a previously acquired shared tenancy lock.\n      await tx.execute(sql`select pg_advisory_xact_lock(hashtextextended(\n      ${`organization-membership:${input.accountId}`}, 0))`);\n      await tx.execute(sql`select pg_advisory_xact_lock_shared(hashtextextended(\n      ${`session-tenancy:${input.workspaceId}`}, 0))`);\n      await setSubjectRlsContext(tx, input.subjectId);\n      const [target] = await tx\n        .select({ id: schema.sessions.id })\n        .from(schema.sessions)\n        .where(\n          and(\n            eq(schema.sessions.accountId, input.accountId),\n            eq(schema.sessions.workspaceId, input.workspaceId),\n            eq(schema.sessions.id, input.sessionId),\n          ),\n        );\n      if (!target) throw new SessionMcpCredentialRotationError(\"not_found\");\n      const locks = await lockSessionEventWriteRows(tx, {\n        workspaceId: input.workspaceId,\n        controlLock: \"share\",\n        sessionIds: [input.sessionId],\n      });\n      const session = locks.sessions[0];\n      if (!session || session.accountId !== input.accountId) {\n        throw new SessionMcpCredentialRotationError(\"not_found\");\n      }\n      // Hold a current API key through commit. The ordinary access resolver's\n      // last-used write alone does not recheck a revocation racing its first read.\n      // Take UPDATE directly because fresh resolution writes lastUsedAt.\n      if (input.subjectId.startsWith(\"api_key:\")) {\n        const keyId = input.subjectId.slice(\"api_key:\".length);\n        const [key] = await tx\n          .select({ id: schema.apiKeys.id, permissions: schema.apiKeys.permissions })\n          .from(schema.apiKeys)\n          .where(\n            and(\n              eq(schema.apiKeys.id, keyId),\n              eq(schema.apiKeys.accountId, input.accountId),\n              sql`(${schema.apiKeys.workspaceId} is null or ${schema.apiKeys.workspaceId} = ${input.workspaceId}::uuid)`,\n              sql`${schema.apiKeys.revokedAt} is null`,\n              sql`(${schema.apiKeys.expiresAt} is null or ${schema.apiKeys.expiresAt} > clock_timestamp())`,\n            ),\n          )\n          .for(\"update\");\n        if (\n          !key ||\n          (!key.permissions.includes(\"workspace:admin\") &&\n            (!key.permissions.includes(\"sessions:control\") ||\n              !key.permissions.includes(\"mcp_servers:attach\")))\n        )\n          throw new SessionMcpCredentialRotationError(\"authority_revoked\");\n      }\n      await input.authorize(tx);\n      const [prior] = await tx\n        .select()\n        .from(schema.sessionCommandReceipts)\n        .where(\n          and(\n            eq(schema.sessionCommandReceipts.accountId, input.accountId),\n            eq(schema.sessionCommandReceipts.workspaceId, input.workspaceId),\n            eq(schema.sessionCommandReceipts.targetSessionId, input.sessionId),\n            eq(schema.sessionCommandReceipts.actorType, input.actorType),\n            eq(schema.sessionCommandReceipts.actorSubjectId, input.subjectId),\n            eq(schema.sessionCommandReceipts.action, action),\n            eq(schema.sessionCommandReceipts.operationKey, input.operationKey),\n          ),\n        );\n      if (prior) {\n        if (prior.result.digestKeyTag !== input.digestKeyTag)\n          throw new SessionMcpCredentialRotationError(\"receipt_key_unavailable\");\n        if (prior.canonicalRequestHash !== input.requestDigest)\n          throw new SessionMcpCredentialRotationError(\"operation_reuse\");\n        return RotateSessionMcpCredentialsReceipt.parse(prior.result.receipt);\n      }\n      // Session lock serializes admission, claim, realtime start, interruption\n      // settlement, and attempt-owned provider admission. Dormant goals/schedules\n      // and unrelated viewers are deliberately not credential consumers.\n      // Retained run snapshots and tool receipts need a live turn/attempt to\n      // consume credentials; their historical presence alone is not activity.\n      const [busy] = await rawRows<{ present: boolean }>(\n        tx,\n        sql`select (\n      exists(select 1 from session_turns where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and status in (${sql.join(\n          liveTurnStatuses.map((status) => sql`${status}`),\n          sql`, `,\n        )}))\n      or exists(select 1 from session_turn_attempts a where a.workspace_id = ${input.workspaceId}::uuid\n        and a.session_id = ${input.sessionId}::uuid and (a.state <> 'closed' or\n          (a.quiesced_at is null and exists(select 1 from session_attempt_interruptions i\n            where i.workspace_id = a.workspace_id and i.attempt_id = a.id))))\n      or exists(select 1 from session_system_updates where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and state = 'pending')\n      or exists(select 1 from sandbox_workspace_mutation_admissions where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and attempt_id is not null and settled_at is null)\n      or exists(select 1 from session_realtime_modes where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and state = 'active')\n      or exists(select 1 from session_realtime_connections where workspace_id = ${input.workspaceId}::uuid\n        and session_id = ${input.sessionId}::uuid and state not in ('failed', 'closed'))\n    ) as present`,\n      );\n      if (!busy || busy.present) throw new SessionMcpCredentialRotationError(\"not_quiescent\");\n      const rows = await tx\n        .select()\n        .from(schema.sessionMcpServers)\n        .where(\n          and(\n            eq(schema.sessionMcpServers.workspaceId, input.workspaceId),\n            eq(schema.sessionMcpServers.sessionId, input.sessionId),\n            inArray(\n              schema.sessionMcpServers.serverId,\n              input.updates.map((update) => update.id),\n            ),\n          ),\n        )\n        .orderBy(schema.sessionMcpServers.serverId)\n        .for(\"update\");\n      for (const update of input.updates) {\n        const row = rows.find((server) => server.serverId === update.id);\n        if (!row || row.accountId !== input.accountId)\n          throw new SessionMcpCredentialRotationError(\"not_found\");\n        if (row.connectionRef) throw new SessionMcpCredentialRotationError(\"brokered_server\");\n        if (row.url !== update.expectedServerUrl)\n          throw new SessionMcpCredentialRotationError(\"destination_conflict\");\n        if (\n          !Number.isInteger(update.expectedCredentialVersion) ||\n          update.expectedCredentialVersion < 1 ||\n          update.expectedCredentialVersion >= 2_147_483_647 ||\n          row.credentialVersion !== update.expectedCredentialVersion\n        )\n          throw new SessionMcpCredentialRotationError(\"version_conflict\");\n      }\n      const receipt: RotateSessionMcpCredentialsReceipt = {\n        operationKey: input.operationKey,\n        sessionId: input.sessionId,\n        appliedAt: new Date().toISOString(),\n        servers: input.updates.map((update) => ({\n          id: update.id,\n          credentialVersion: update.expectedCredentialVersion + 1,\n        })),\n      };\n      for (const update of input.updates) {\n        await tx\n          .update(schema.sessionMcpServers)\n          .set({\n            headersEncrypted: update.headersEncrypted,\n            credentialVersion: update.expectedCredentialVersion + 1,\n            updatedAt: new Date(receipt.appliedAt),\n          })\n          .where(\n            and(\n              eq(schema.sessionMcpServers.workspaceId, input.workspaceId),\n              eq(schema.sessionMcpServers.sessionId, input.sessionId),\n              eq(schema.sessionMcpServers.serverId, update.id),\n            ),\n          );\n      }\n      await tx.insert(schema.sessionCommandReceipts).values({\n        accountId: input.accountId,\n        workspaceId: input.workspaceId,\n        actorType: input.actorType,\n        actorSubjectId: input.subjectId,\n        action,\n        targetSessionId: input.sessionId,\n        operationKey: input.operationKey,\n        canonicalRequestHash: input.requestDigest,\n        result: { digestKeyTag: input.digestKeyTag, receipt },\n      });\n      return receipt;\n    },\n    undefined,\n    \"none\",\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,SAAS,KAAK,IAAI,SAAS,WAAW;AACtC,SAAS,oCAAoC,yBAAyB;AAKtE,IAAM,SAAS;AACf,IAAM,mBAAmB,kBAAkB,QAAQ;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC,EAAE;AAEI,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAC3D,YACW,MAUT;AACA,UAAM,IAAI;AAXD;AAYT,SAAK,OAAO;AAAA,EACd;AACF;AAwBA,eAAsB,sCACpB,IACA,OAC6C;AAC7C,MACE,CAAC,MAAM,QAAQ,UACf,MAAM,QAAQ,SAAS,MACvB,IAAI,IAAI,MAAM,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,SAAS,MAAM,QAAQ,UACzE,CAAC,iBAAiB,KAAK,MAAM,aAAa,KAC1C,CAAC,iBAAiB,KAAK,MAAM,YAAY,GACzC;AACA,UAAM,IAAI,kCAAkC,iBAAiB;AAAA,EAC/D;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAKZ,YAAM,GAAG,QAAQ;AAAA,QACf,2BAA2B,MAAM,SAAS,EAAE,OAAO;AACrD,YAAM,GAAG,QAAQ;AAAA,QACf,mBAAmB,MAAM,WAAW,EAAE,OAAO;AAC/C,YAAM,qBAAqB,IAAI,MAAM,SAAS;AAC9C,YAAM,CAAC,MAAM,IAAI,MAAM,GACpB,OAAO,EAAE,IAAW,SAAS,GAAG,CAAC,EACjC,KAAY,QAAQ,EACpB;AAAA,QACC;AAAA,UACE,GAAU,SAAS,WAAW,MAAM,SAAS;AAAA,UAC7C,GAAU,SAAS,aAAa,MAAM,WAAW;AAAA,UACjD,GAAU,SAAS,IAAI,MAAM,SAAS;AAAA,QACxC;AAAA,MACF;AACF,UAAI,CAAC,OAAQ,OAAM,IAAI,kCAAkC,WAAW;AACpE,YAAM,QAAQ,MAAM,0BAA0B,IAAI;AAAA,QAChD,aAAa,MAAM;AAAA,QACnB,aAAa;AAAA,QACb,YAAY,CAAC,MAAM,SAAS;AAAA,MAC9B,CAAC;AACD,YAAM,UAAU,MAAM,SAAS,CAAC;AAChC,UAAI,CAAC,WAAW,QAAQ,cAAc,MAAM,WAAW;AACrD,cAAM,IAAI,kCAAkC,WAAW;AAAA,MACzD;AAIA,UAAI,MAAM,UAAU,WAAW,UAAU,GAAG;AAC1C,cAAM,QAAQ,MAAM,UAAU,MAAM,WAAW,MAAM;AACrD,cAAM,CAAC,GAAG,IAAI,MAAM,GACjB,OAAO,EAAE,IAAW,QAAQ,IAAI,aAAoB,QAAQ,YAAY,CAAC,EACzE,KAAY,OAAO,EACnB;AAAA,UACC;AAAA,YACE,GAAU,QAAQ,IAAI,KAAK;AAAA,YAC3B,GAAU,QAAQ,WAAW,MAAM,SAAS;AAAA,YAC5C,OAAc,QAAQ,WAAW,eAAsB,QAAQ,WAAW,MAAM,MAAM,WAAW;AAAA,YACjG,MAAa,QAAQ,SAAS;AAAA,YAC9B,OAAc,QAAQ,SAAS,eAAsB,QAAQ,SAAS;AAAA,UACxE;AAAA,QACF,EACC,IAAI,QAAQ;AACf,YACE,CAAC,OACA,CAAC,IAAI,YAAY,SAAS,iBAAiB,MACzC,CAAC,IAAI,YAAY,SAAS,kBAAkB,KAC3C,CAAC,IAAI,YAAY,SAAS,oBAAoB;AAElD,gBAAM,IAAI,kCAAkC,mBAAmB;AAAA,MACnE;AACA,YAAM,MAAM,UAAU,EAAE;AACxB,YAAM,CAAC,KAAK,IAAI,MAAM,GACnB,OAAO,EACP,KAAY,sBAAsB,EAClC;AAAA,QACC;AAAA,UACE,GAAU,uBAAuB,WAAW,MAAM,SAAS;AAAA,UAC3D,GAAU,uBAAuB,aAAa,MAAM,WAAW;AAAA,UAC/D,GAAU,uBAAuB,iBAAiB,MAAM,SAAS;AAAA,UACjE,GAAU,uBAAuB,WAAW,MAAM,SAAS;AAAA,UAC3D,GAAU,uBAAuB,gBAAgB,MAAM,SAAS;AAAA,UAChE,GAAU,uBAAuB,QAAQ,MAAM;AAAA,UAC/C,GAAU,uBAAuB,cAAc,MAAM,YAAY;AAAA,QACnE;AAAA,MACF;AACF,UAAI,OAAO;AACT,YAAI,MAAM,OAAO,iBAAiB,MAAM;AACtC,gBAAM,IAAI,kCAAkC,yBAAyB;AACvE,YAAI,MAAM,yBAAyB,MAAM;AACvC,gBAAM,IAAI,kCAAkC,iBAAiB;AAC/D,eAAO,mCAAmC,MAAM,MAAM,OAAO,OAAO;AAAA,MACtE;AAMA,YAAM,CAAC,IAAI,IAAI,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,gEACwD,MAAM,WAAW;AAAA,2BACtD,MAAM,SAAS,yBAAyB,IAAI;AAAA,UAC7D,iBAAiB,IAAI,CAAC,WAAW,MAAM,MAAM,EAAE;AAAA,UAC/C;AAAA,QACF,CAAC;AAAA,+EACsE,MAAM,WAAW;AAAA,6BACnE,MAAM,SAAS;AAAA;AAAA;AAAA,4EAGgC,MAAM,WAAW;AAAA,2BAClE,MAAM,SAAS;AAAA,2FACiD,MAAM,WAAW;AAAA,2BACjF,MAAM,SAAS;AAAA,4EACkC,MAAM,WAAW;AAAA,2BAClE,MAAM,SAAS;AAAA,kFACwC,MAAM,WAAW;AAAA,2BACxE,MAAM,SAAS;AAAA;AAAA,MAEpC;AACA,UAAI,CAAC,QAAQ,KAAK,QAAS,OAAM,IAAI,kCAAkC,eAAe;AACtF,YAAM,OAAO,MAAM,GAChB,OAAO,EACP,KAAY,iBAAiB,EAC7B;AAAA,QACC;AAAA,UACE,GAAU,kBAAkB,aAAa,MAAM,WAAW;AAAA,UAC1D,GAAU,kBAAkB,WAAW,MAAM,SAAS;AAAA,UACtD;AAAA,YACS,kBAAkB;AAAA,YACzB,MAAM,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE;AAAA,UACzC;AAAA,QACF;AAAA,MACF,EACC,QAAe,kBAAkB,QAAQ,EACzC,IAAI,QAAQ;AACf,iBAAW,UAAU,MAAM,SAAS;AAClC,cAAM,MAAM,KAAK,KAAK,CAAC,WAAW,OAAO,aAAa,OAAO,EAAE;AAC/D,YAAI,CAAC,OAAO,IAAI,cAAc,MAAM;AAClC,gBAAM,IAAI,kCAAkC,WAAW;AACzD,YAAI,IAAI,cAAe,OAAM,IAAI,kCAAkC,iBAAiB;AACpF,YAAI,IAAI,QAAQ,OAAO;AACrB,gBAAM,IAAI,kCAAkC,sBAAsB;AACpE,YACE,CAAC,OAAO,UAAU,OAAO,yBAAyB,KAClD,OAAO,4BAA4B,KACnC,OAAO,6BAA6B,cACpC,IAAI,sBAAsB,OAAO;AAEjC,gBAAM,IAAI,kCAAkC,kBAAkB;AAAA,MAClE;AACA,YAAM,UAA8C;AAAA,QAClD,cAAc,MAAM;AAAA,QACpB,WAAW,MAAM;AAAA,QACjB,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,SAAS,MAAM,QAAQ,IAAI,CAAC,YAAY;AAAA,UACtC,IAAI,OAAO;AAAA,UACX,mBAAmB,OAAO,4BAA4B;AAAA,QACxD,EAAE;AAAA,MACJ;AACA,iBAAW,UAAU,MAAM,SAAS;AAClC,cAAM,GACH,OAAc,iBAAiB,EAC/B,IAAI;AAAA,UACH,kBAAkB,OAAO;AAAA,UACzB,mBAAmB,OAAO,4BAA4B;AAAA,UACtD,WAAW,IAAI,KAAK,QAAQ,SAAS;AAAA,QACvC,CAAC,EACA;AAAA,UACC;AAAA,YACE,GAAU,kBAAkB,aAAa,MAAM,WAAW;AAAA,YAC1D,GAAU,kBAAkB,WAAW,MAAM,SAAS;AAAA,YACtD,GAAU,kBAAkB,UAAU,OAAO,EAAE;AAAA,UACjD;AAAA,QACF;AAAA,MACJ;AACA,YAAM,GAAG,OAAc,sBAAsB,EAAE,OAAO;AAAA,QACpD,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,WAAW,MAAM;AAAA,QACjB,gBAAgB,MAAM;AAAA,QACtB;AAAA,QACA,iBAAiB,MAAM;AAAA,QACvB,cAAc,MAAM;AAAA,QACpB,sBAAsB,MAAM;AAAA,QAC5B,QAAQ,EAAE,cAAc,MAAM,cAAc,QAAQ;AAAA,MACtD,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/session-message-search.d.ts

@@ -0,0 +1,22 @@
+import { type SQL } from "drizzle-orm";
+import type { SessionMessageSearchRequest, SessionMessageSearchResponse } from "@opengeni/contracts";
+import type { Database } from "./database.js";
+export declare class SessionMessageSearchCursorError extends Error {
+    constructor();
+}
+/** ECMAScript Unicode simple case folding, not locale-sensitive lowercasing.
+ * Escaping every regexp metacharacter makes %, _, backslash, etc. literal too.
+ * RegExp indices refer to original UTF-16 text (no lowercased-offset drift).
+ */
+export declare function sessionMessageLiteralPattern(query: string): RegExp;
+export declare function sessionMessageSearchSnippet(text: string, start: number, length: number): {
+    text: string;
+    matchStart: number;
+    matchEnd: number;
+};
+/** Internal executor: caller holds subject RLS, session-tenancy and membership
+ * fences and supplies the ordinary session list filters. Never call as auth.
+ * Work/transfer is bounded by 32 scalar windows per request. No history cutoff:
+ * an unfinished scan ALWAYS returns an advancing cursor, even with zero hits.
+ */
+export declare function scanSessionMessages(db: Database, workspaceId: string, request: SessionMessageSearchRequest, filters: SQL[], authorityIdentity: unknown, signal?: AbortSignal): Promise<SessionMessageSearchResponse>;

package/dist/session-queue-commands.d.ts

@@ -1,4 +1,4 @@
-import { ResourceRef, type McpPersonalConnectionDelegation, type DraftTimelineAnnotation, type LatencyMode, type ReasoningEffort, type SessionEvent, type SessionPromptRouting, type SessionTurn, type TurnExecutionPolicyV1, type TimelineAnnotation, type PersonalResourceAttachmentIntent } from "@opengeni/contracts";
+import { ResourceRef, type McpPersonalConnectionDelegation, type McpConnectionAccountBinding, type DraftTimelineAnnotation, type LatencyMode, type ReasoningEffort, type SessionEvent, type SessionPromptRouting, type SessionTurn, type TurnExecutionPolicyV1, type TimelineAnnotation, type PersonalResourceAttachmentIntent } from "@opengeni/contracts";
 import { type Database, type SessionActivityDatabase } from "./database.js";
 import { type SessionCommandActor, type SessionCommandReceiptRow } from "./session-control.js";
 import * as schema from "./schema.js";
@@ -222,6 +222,7 @@ export declare function submitHumanPromptInTransaction(db: SessionActivityDataba
     /** Record the admitted run's durable usage fact in this transaction. */
     recordAgentRunUsage?: boolean;
     personalConnectionDelegations?: McpPersonalConnectionDelegation[];
+    mcpAccountBindings?: McpConnectionAccountBinding[] | null;
     personalResourceAttachment?: PersonalResourceAttachmentIntent;
     mcpCredentialUpdates?: Array<{
         id: string;
@@ -232,11 +233,6 @@ export declare function submitHumanPromptInTransaction(db: SessionActivityDataba
     beforeFreshPromptCommit?: (tx: Database) => Promise<void>;
     /** Backend-only authority capture, atomic with the newly accepted turn. */
     captureTurnAuthority?: (tx: Database, turnId: string) => Promise<void>;
-    selectedHostMcpDelegations?: Array<{
-        serverId: string;
-        delegationId: string;
-        generation: number;
-    }>;
     /** Request-scoped callers bound the control prefix wait; lifecycle callers omit it. */
     controlLockTimeoutMs?: number;
 }): Promise<SubmitHumanPromptResult>;

package/dist/session-retry.d.ts

@@ -0,0 +1,36 @@
+import { type SessionRetryRequest, type SessionRetryResponse, type TurnExecutionPolicyV1 } from "@opengeni/contracts";
+import { type Database, type SessionActivityDatabase } from "./database.js";
+import * as schema from "./schema.js";
+export declare class SessionRetryConflictError extends Error {
+    readonly code: "RETRY_STALE_FAILURE" | "RETRY_EXECUTION_UNRESOLVED" | "RETRY_PAUSED" | "RETRY_SANDBOX_RECOVERY_REQUIRED" | "RETRY_UNSUPPORTED_FAILURE";
+    constructor(code: "RETRY_STALE_FAILURE" | "RETRY_EXECUTION_UNRESOLVED" | "RETRY_PAUSED" | "RETRY_SANDBOX_RECOVERY_REQUIRED" | "RETRY_UNSUPPORTED_FAILURE", message: string);
+}
+/** Authorized receipt reads precede mutable model/billing admission checks. */
+export declare function getSessionRetryReceiptInTransaction(db: Database, input: {
+    workspaceId: string;
+    sessionId: string;
+    subjectId: string;
+    request: SessionRetryRequest;
+}): Promise<SessionRetryResponse | null>;
+type EffectiveSandboxRecoveryBlocked = (db: Database, session: typeof schema.sessions.$inferSelect) => Promise<boolean>;
+/** The root composition binds the canonical effective-route guard. Keep this
+ * leaf independent of the root barrel; there is no permissive default. */
+export declare function createRetryFailedSessionInTransaction(sessionEffectiveSandboxRecoveryBlocked: EffectiveSandboxRecoveryBlocked): (db: SessionActivityDatabase, input: Parameters<typeof retryFailedSessionInTransaction>[1]) => Promise<{
+    outcome: "accepted" | "replayed";
+    turnId: string;
+    failureEventId: string;
+} & {
+    eventIds: string[];
+}>;
+/** Caller owns the tenant/activity transaction and authorization. No provider I/O. */
+declare function retryFailedSessionInTransaction(db: SessionActivityDatabase, input: {
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    subjectId: string;
+    request: SessionRetryRequest;
+    executionPolicy: TurnExecutionPolicyV1;
+}, sessionEffectiveSandboxRecoveryBlocked: EffectiveSandboxRecoveryBlocked): Promise<SessionRetryResponse & {
+    eventIds: string[];
+}>;
+export {};

package/dist/session-tenancy.js

@@ -14,9 +14,9 @@ import {
   replayAppliedSessionFork,
   sessionTenancyProductActivated,
   transitionSessionVisibility
-} from "./chunk-T6BWIGWJ.js";
-import "./chunk-DPONPYJD.js";
-import "./chunk-F73UKJY6.js";
+} from "./chunk-RIYHP2WU.js";
+import "./chunk-CJI6G254.js";
+import "./chunk-MN5PZMEK.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/skill-source-release-impact.d.ts

@@ -0,0 +1,18 @@
+export type SkillSourceReleaseHead = {
+    id: string;
+    account_id: string;
+    scope: string;
+    scope_workspace_id: string | null;
+    scope_version: number;
+    status: string;
+    active_revision_id: string | null;
+    provenance_source: string | null;
+    title: string | null;
+};
+type SkillRetentionReason = "customized" | "re_scoped";
+/** One decision for both the user-visible impact and committed source release. */
+export declare function classifySkillSourceRelease(head: SkillSourceReleaseHead, workspaceId: string): {
+    disposition: "inactive" | "retained" | "removed";
+    retentionReasons: SkillRetentionReason[];
+};
+export {};

package/dist/skill-source-release.d.ts

@@ -1,5 +1,6 @@
 import type { SkillActor } from "@opengeni/contracts";
 import { type Database } from "./database.js";
+import { type SkillSourceReleaseHead } from "./skill-source-release-impact.js";
 export type SkillSourceReleaseReceipt = {
     skillId: string;
     revisionId: string | null;
@@ -7,10 +8,16 @@ export type SkillSourceReleaseReceipt = {
     eventId: string | null;
     warning: string | null;
 };
+/** Caller supplies workspace/subject RLS; never bypass registry visibility for a preview. */
+export declare function readSkillSourceReleaseHeads(db: Database, workspaceId: string, facetInstallationIds: readonly string[]): Promise<SkillSourceReleaseHead[]>;
 export declare class SkillSourceRemovalAuthorityError extends Error {
     readonly code = "skill_source_removal_requires_human";
     constructor();
 }
+/** Never disclose the identity of a head absent from the caller's locked snapshot. */
+export declare class SkillSourceReleaseSnapshotChangedError extends Error {
+    constructor();
+}
 /**
  * Called inside the source-owner removal transaction, with source installations
  * locked. Distribution identity/history stays bound after uninstall, so reinstall
@@ -20,4 +27,6 @@ export declare function releaseOrphanedSkillHeads(db: Database, input: {
     workspaceId: string;
     facetInstallationIds: readonly string[];
     skillActor?: SkillActor;
+    /** Exact heads already locked before the caller compared removal impact. */
+    lockedHeadIds?: readonly string[];
 }): Promise<SkillSourceReleaseReceipt[]>;

package/dist/skills.d.ts

@@ -10,6 +10,12 @@ export type SkillReadContext = {
     /** Trusted subject enables the existing user-tier visibility; agents share workspace reads. */
     subjectId?: string;
 };
+/** Scope only, for authorizing an exact human deletion retry after the head is gone.
+ * The lifecycle still verifies the complete request fingerprint before replay.
+ */
+export declare function readSkillRemovalScope(db: Database, context: SkillReadContext & {
+    subjectId: string;
+}, skillId: string, operationId: string): Promise<"workspace" | "user" | null>;
 /** Recheck the host-bound attempt before any agent-facing Skill read/search. */
 export declare function assertSkillReadAttempt(db: Database, context: SkillReadContext & {
     actor: Extract<SkillActor, {
@@ -52,4 +58,4 @@ export declare function confirmSkillHumanResponse(db: Database, input: {
     requestId: string;
 }): Promise<SkillWriteReceipt | null>;
 /** Current projection is separate from the immutable original write receipt. */
-export declare function skillReviewResolution(db: Database, context: SkillReadContext, review: SkillReviewReference): Promise<"pending" | "activated" | "declined" | "superseded" | "unavailable">;
+export declare function skillReviewResolution(db: Database, context: SkillReadContext, review: SkillReviewReference): Promise<"pending" | "activated" | "removed" | "declined" | "superseded" | "unavailable">;

package/dist/user-resource-authority.d.ts

@@ -71,14 +71,6 @@ export declare function issueSelfUserResourceGrant(db: Database, input: {
     expectedAuthorityEpoch?: number | null;
     workspaceSharedAcknowledged: boolean;
 }): Promise<UserResourceAuthorityGrant>;
-export declare function issueSelfLocalConnectionUseGrant(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    subjectId: string;
-    authorityId: string;
-    context: "user_private" | "workspace_shared";
-    workspaceSharedAcknowledged: boolean;
-}): Promise<UserResourceAuthorityGrant>;
 export declare function revokeSelfUserResourceGrant(db: Database, input: {
     accountId: string;
     workspaceId: string;

package/dist/video-generation.js

@@ -29,9 +29,9 @@ import {
   settleVideoGenerationFailure,
   settleVideoGenerationReady,
   updateWorkspaceVideoGenerationPolicy
-} from "./chunk-ERKVSPDX.js";
-import "./chunk-DPONPYJD.js";
-import "./chunk-F73UKJY6.js";
+} from "./chunk-LVY33EWL.js";
+import "./chunk-CJI6G254.js";
+import "./chunk-MN5PZMEK.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/workspace-tool-defaults.js

@@ -1,11 +1,12 @@
 import {
   lockWorkspaceInferenceControl
-} from "./chunk-6T2GGYWE.js";
-import "./chunk-ERKVSPDX.js";
+} from "./chunk-GABXCG3N.js";
+import "./chunk-LVY33EWL.js";
+import "./chunk-4UJCXBR2.js";
 import {
   withWorkspaceRls
-} from "./chunk-DPONPYJD.js";
-import "./chunk-F73UKJY6.js";
+} from "./chunk-CJI6G254.js";
+import "./chunk-MN5PZMEK.js";
 import "./chunk-S2TZ3F4L.js";
 import "./chunk-PZ5AY32C.js";
 

package/dist/workspace-tool-defaults.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/workspace-tool-defaults.ts"],"sourcesContent":["import { WorkspaceSessionToolDefaultsPatch, type Workspace } from \"@opengeni/contracts\";\nimport { sql } from \"drizzle-orm\";\nimport { type Database, withWorkspaceRls } from \"./database\";\nimport { lockWorkspaceInferenceControl } from \"./session-control\";\n\ntype SettingsStore = {\n  requireWorkspace(db: Database, workspaceId: string): Promise<Workspace>;\n  updateWorkspaceSettings(\n    db: Database,\n    workspaceId: string,\n    patch: Record<string, unknown>,\n    options: { controlLockTimeoutMs?: number },\n  ): Promise<Workspace>;\n};\n\n/** Independent nested patches; omission preserves and null restores inheritance. */\nexport async function updateWorkspaceSettingsWithToolDefaults(\n  db: Database,\n  workspaceId: string,\n  patch: Record<string, unknown>,\n  store: SettingsStore,\n  options: { controlLockTimeoutMs?: number } = {},\n): Promise<Workspace> {\n  if (patch.sessionToolDefaults === undefined)\n    return store.updateWorkspaceSettings(db, workspaceId, patch, options);\n  const tools = WorkspaceSessionToolDefaultsPatch.parse(patch.sessionToolDefaults);\n  const { sessionToolDefaults: _tools, ...other } = patch;\n  return withWorkspaceRls(db, workspaceId, async (scoped) =>\n    scoped.transaction(async (tx) => {\n      const transaction = tx as unknown as Database;\n      await lockWorkspaceInferenceControl(transaction, workspaceId, \"update\", {\n        ...(options.controlLockTimeoutMs !== undefined\n          ? { lockTimeoutMs: options.controlLockTimeoutMs }\n          : {}),\n      });\n      if (Object.keys(other).length)\n        await store.updateWorkspaceSettings(transaction, workspaceId, other, options);\n      await transaction.execute(sql`\n      update workspaces set settings = jsonb_set(settings, '{sessionToolDefaults}',\n        jsonb_strip_nulls(coalesce(settings->'sessionToolDefaults', '{}'::jsonb) || ${JSON.stringify(tools)}::jsonb)),\n        updated_at = now()\n      where id = ${workspaceId}::uuid\n    `);\n      return store.requireWorkspace(transaction, workspaceId);\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAAA,SAAS,yCAAyD;AAClE,SAAS,WAAW;AAepB,eAAsB,wCACpB,IACA,aACA,OACA,OACA,UAA6C,CAAC,GAC1B;AACpB,MAAI,MAAM,wBAAwB;AAChC,WAAO,MAAM,wBAAwB,IAAI,aAAa,OAAO,OAAO;AACtE,QAAM,QAAQ,kCAAkC,MAAM,MAAM,mBAAmB;AAC/E,QAAM,EAAE,qBAAqB,QAAQ,GAAG,MAAM,IAAI;AAClD,SAAO;AAAA,IAAiB;AAAA,IAAI;AAAA,IAAa,OAAO,WAC9C,OAAO,YAAY,OAAO,OAAO;AAC/B,YAAM,cAAc;AACpB,YAAM,8BAA8B,aAAa,aAAa,UAAU;AAAA,QACtE,GAAI,QAAQ,yBAAyB,SACjC,EAAE,eAAe,QAAQ,qBAAqB,IAC9C,CAAC;AAAA,MACP,CAAC;AACD,UAAI,OAAO,KAAK,KAAK,EAAE;AACrB,cAAM,MAAM,wBAAwB,aAAa,aAAa,OAAO,OAAO;AAC9E,YAAM,YAAY,QAAQ;AAAA;AAAA,sFAEsD,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA,mBAExF,WAAW;AAAA,KACzB;AACC,aAAO,MAAM,iBAAiB,aAAa,WAAW;AAAA,IACxD,CAAC;AAAA,EACH;AACF;","names":[]}
+{"version":3,"sources":["../src/workspace-tool-defaults.ts"],"sourcesContent":["import { WorkspaceSessionToolDefaultsPatch, type Workspace } from \"@opengeni/contracts\";\nimport { sql } from \"drizzle-orm\";\nimport { type Database, withWorkspaceRls } from \"./database\";\nimport { lockWorkspaceInferenceControl } from \"./session-control\";\n\ntype SettingsStore = {\n  requireWorkspace(db: Database, workspaceId: string): Promise<Workspace>;\n  updateWorkspaceSettings(\n    db: Database,\n    workspaceId: string,\n    patch: Record<string, unknown>,\n    options: { controlLockTimeoutMs?: number },\n  ): Promise<Workspace>;\n};\n\n/** Independent nested patches; omission preserves and null restores inheritance. */\nexport async function updateWorkspaceSettingsWithToolDefaults(\n  db: Database,\n  workspaceId: string,\n  patch: Record<string, unknown>,\n  store: SettingsStore,\n  options: { controlLockTimeoutMs?: number } = {},\n): Promise<Workspace> {\n  if (patch.sessionToolDefaults === undefined)\n    return store.updateWorkspaceSettings(db, workspaceId, patch, options);\n  const tools = WorkspaceSessionToolDefaultsPatch.parse(patch.sessionToolDefaults);\n  const { sessionToolDefaults: _tools, ...other } = patch;\n  return withWorkspaceRls(db, workspaceId, async (scoped) =>\n    scoped.transaction(async (tx) => {\n      const transaction = tx as unknown as Database;\n      await lockWorkspaceInferenceControl(transaction, workspaceId, \"update\", {\n        ...(options.controlLockTimeoutMs !== undefined\n          ? { lockTimeoutMs: options.controlLockTimeoutMs }\n          : {}),\n      });\n      if (Object.keys(other).length)\n        await store.updateWorkspaceSettings(transaction, workspaceId, other, options);\n      await transaction.execute(sql`\n      update workspaces set settings = jsonb_set(settings, '{sessionToolDefaults}',\n        jsonb_strip_nulls(coalesce(settings->'sessionToolDefaults', '{}'::jsonb) || ${JSON.stringify(tools)}::jsonb)),\n        updated_at = now()\n      where id = ${workspaceId}::uuid\n    `);\n      return store.requireWorkspace(transaction, workspaceId);\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;AAAA,SAAS,yCAAyD;AAClE,SAAS,WAAW;AAepB,eAAsB,wCACpB,IACA,aACA,OACA,OACA,UAA6C,CAAC,GAC1B;AACpB,MAAI,MAAM,wBAAwB;AAChC,WAAO,MAAM,wBAAwB,IAAI,aAAa,OAAO,OAAO;AACtE,QAAM,QAAQ,kCAAkC,MAAM,MAAM,mBAAmB;AAC/E,QAAM,EAAE,qBAAqB,QAAQ,GAAG,MAAM,IAAI;AAClD,SAAO;AAAA,IAAiB;AAAA,IAAI;AAAA,IAAa,OAAO,WAC9C,OAAO,YAAY,OAAO,OAAO;AAC/B,YAAM,cAAc;AACpB,YAAM,8BAA8B,aAAa,aAAa,UAAU;AAAA,QACtE,GAAI,QAAQ,yBAAyB,SACjC,EAAE,eAAe,QAAQ,qBAAqB,IAC9C,CAAC;AAAA,MACP,CAAC;AACD,UAAI,OAAO,KAAK,KAAK,EAAE;AACrB,cAAM,MAAM,wBAAwB,aAAa,aAAa,OAAO,OAAO;AAC9E,YAAM,YAAY,QAAQ;AAAA;AAAA,sFAEsD,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA,mBAExF,WAAW;AAAA,KACzB;AACC,aAAO,MAAM,iBAAiB,aAAa,WAAW;AAAA,IACxD,CAAC;AAAA,EACH;AACF;","names":[]}

package/drizzle/0468_knowledge_relationship_projection.sql

@@ -0,0 +1,30 @@
+-- deployment-mode: rolling
+-- Preserve the read capability, ACL/evidence checks and pagination contract.
+-- A join from jsonb_array_elements (estimated at 100 rows) can hash against the
+-- whole account and evaluate the VOLATILE recursive visibility predicate before
+-- matching an endpoint. A scalar subquery pins each check to its exact identity:
+-- absent endpoints remain hidden, duplicates and original array order survive.
+CREATE OR REPLACE FUNCTION knowledge_entry_visible_body(p_account uuid,p_body jsonb,p_pending boolean)
+RETURNS jsonb LANGUAGE sql VOLATILE SET search_path FROM CURRENT AS $$
+  SELECT p_body || jsonb_build_object(
+    'groupIds',coalesce((SELECT jsonb_agg(g.value ORDER BY g.ordinality)
+      FROM jsonb_array_elements(p_body->'groupIds') WITH ORDINALITY g(value,ordinality)
+      WHERE (SELECT NOT e.archived AND knowledge_revision_visible(p_account,e.id,
+          coalesce(e.published_revision_id,CASE WHEN p_pending THEN e.latest_revision_id END),p_pending)
+        FROM knowledge_entries e
+        WHERE e.account_id=p_account AND e.id=(g.value#>>'{}')::uuid)), '[]'::jsonb),
+    'relationships',coalesce((SELECT jsonb_agg(l.value ORDER BY l.ordinality)
+      FROM jsonb_array_elements(p_body->'relationships') WITH ORDINALITY l(value,ordinality)
+      WHERE (SELECT NOT e.archived AND knowledge_revision_visible(p_account,e.id,
+          coalesce(e.published_revision_id,CASE WHEN p_pending THEN e.latest_revision_id END),p_pending)
+        FROM knowledge_entries e
+        WHERE e.account_id=p_account AND e.id=(l.value->>'entryId')::uuid)), '[]'::jsonb))
+$$;
+
+-- CREATE OR REPLACE replaces proconfig too. Preserve 0461's final hardening,
+-- including the actual embedded target schema and pg_temp explicitly last.
+DO $secure$
+BEGIN
+  EXECUTE format('ALTER FUNCTION %I.knowledge_entry_visible_body(uuid,jsonb,boolean) SET search_path = %I, pg_catalog, pg_temp',
+    current_schema(),current_schema());
+END $secure$;

package/drizzle/0469_knowledge_source_discovery.sql

@@ -0,0 +1,85 @@
+-- deployment-mode: maintenance
+-- Source retention and discovery are separate. Preserve exact historical bodies,
+-- decisions, evidence links and originals. Classify historical incidental sources
+-- only by typed preparation identity / conversation provenance, never their text.
+-- Explicit purpose on a new revision overrides this compatibility classification.
+-- New source purpose metadata is rejected by pre-0469 strict readers. Drain
+-- every API/control/turn runtime login before activation; never restart an old
+-- binary after the first purpose-bearing revision is written.
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '5min';
+DO $drain$
+DECLARE roles jsonb := nullif(current_setting('opengeni.migration_application_roles', true), '')::jsonb;
+BEGIN
+  IF roles IS NULL OR jsonb_typeof(roles) <> 'array' THEN
+    RAISE EXCEPTION '0469 requires explicit application database roles' USING ERRCODE='55000';
+  END IF;
+  IF jsonb_array_length(roles) NOT BETWEEN 1 AND 16 OR EXISTS (
+    SELECT 1 FROM jsonb_array_elements(roles) item WHERE jsonb_typeof(item) <> 'string'
+      OR octet_length(item #>> '{}') NOT BETWEEN 1 AND 63
+      OR item #>> '{}' <> btrim(item #>> '{}')
+  ) THEN RAISE EXCEPTION '0469 received invalid application roles' USING ERRCODE='55000'; END IF;
+  IF EXISTS (SELECT 1 FROM pg_stat_activity a
+    JOIN jsonb_array_elements_text(roles) r ON r.value=a.usename
+    WHERE a.datname=current_database() AND a.pid<>pg_backend_pid()) THEN
+    RAISE EXCEPTION '0469 requires drained application sessions' USING ERRCODE='55000';
+  END IF;
+END $drain$;
+
+DO $migration$
+DECLARE definition text; anchor text; replacement text;
+BEGIN
+  definition := pg_get_functiondef('knowledge_entry_read(uuid,uuid,jsonb,jsonb)'::regprocedure);
+  anchor := $old$      AND (NOT(p_request ? 'kind') OR r.body->>'kind'=p_request->>'kind')$old$;
+  replacement := anchor || $new$
+      -- Apply before scoring and pagination. Evidence access and review remain
+      -- governed by the unchanged recursive revision/source visibility checks.
+      AND (operation<>'list' OR coalesce(p_request->>'view','published')<>'published'
+        OR coalesce((p_request->>'includeEvidence')::boolean,false)
+        OR r.body->>'kind'<>'source'
+        OR coalesce(r.body#>>'{source,purpose}',CASE
+          WHEN e.prepared_file_id IS NOT NULL THEN 'evidence'
+          WHEN r.body#>>'{source,kind}'='conversation'
+            AND e.legacy_memory_id IS NULL AND e.legacy_document_id IS NULL
+            AND e.legacy_claim_id IS NULL AND e.legacy_document_version_id IS NULL THEN 'evidence'
+          ELSE 'reference' END)<>'evidence')$new$;
+  IF (length(definition)-length(replace(definition,anchor,'')))/length(anchor) <> 1 THEN
+    RAISE EXCEPTION 'Knowledge discovery candidate anchor changed';
+  END IF;
+  EXECUTE replace(definition,anchor,replacement);
+
+  definition := pg_get_functiondef('knowledge_validate_source(uuid,uuid,jsonb)'::regprocedure);
+  anchor := $old$  IF NOT knowledge_source_visible(p_account,p_body) THEN$old$;
+  replacement := $new$  IF (p_body->'source') ? 'purpose' AND (
+    jsonb_typeof(p_body#>'{source,purpose}') IS DISTINCT FROM 'string'
+    OR p_body#>>'{source,purpose}' NOT IN ('evidence','reference')) THEN
+    RAISE EXCEPTION 'Invalid source purpose' USING ERRCODE='22023'; END IF;
+$new$ || anchor;
+  IF (length(definition)-length(replace(definition,anchor,'')))/length(anchor) <> 1 THEN
+    RAISE EXCEPTION 'Knowledge source validation anchor changed';
+  END IF;
+  EXECUTE replace(definition,anchor,replacement);
+
+  definition := pg_get_functiondef('knowledge_entry_prepare_file(uuid,uuid,jsonb,jsonb)'::regprocedure);
+  anchor := $old$  body:=jsonb_build_object('title',p_request->'title','kind','source','content',p_request->'content',$old$;
+  replacement := $new$  IF p_request ? 'purpose' AND (
+    jsonb_typeof(p_request->'purpose') IS DISTINCT FROM 'string'
+    OR p_request->>'purpose' NOT IN ('evidence','reference')) THEN
+    RAISE EXCEPTION 'Invalid source purpose' USING ERRCODE='22023'; END IF;
+$new$ || anchor;
+  IF (length(definition)-length(replace(definition,anchor,'')))/length(anchor) <> 1 THEN
+    RAISE EXCEPTION 'Knowledge preparation validation anchor changed';
+  END IF;
+  definition := replace(definition,anchor,replacement);
+  anchor := $old$'retention','full_text','capturedAt',clock_timestamp())$old$;
+  replacement := $new$'retention',CASE WHEN p_request->>'content'='' THEN 'reference' ELSE 'full_text' END,
+      'purpose',coalesce(p_request->>'purpose','evidence'),'capturedAt',clock_timestamp())$new$;
+  IF (length(definition)-length(replace(definition,anchor,'')))/length(anchor) <> 1 THEN
+    RAISE EXCEPTION 'Knowledge preparation source anchor changed';
+  END IF;
+  EXECUTE replace(definition,anchor,replacement);
+END $migration$;
+
+-- pg_get_functiondef retains each existing owner, security mode and hardened
+-- search_path. CREATE OR REPLACE retains existing ACLs. No new read capability,
+-- runtime table grant or alternate lifecycle is introduced by this migration.