@opengeni/db 5.0.1 → 6.0.0

package/dist/host-mcp-binding-match.d.ts

@@ -1,5 +0,0 @@
-import { type McpCredentialsRequest } from "@opengeni/contracts";
-/** Metadata comparison only. A caller must independently establish accepted
- * execution delegation and live owner/workspace authority. A matching registry
- * row never authorizes a turn, a scheduler, or a nested session by itself. */
-export declare function hostMcpBindingMatchesRequest(rawBinding: unknown, request: McpCredentialsRequest): boolean;

package/dist/host-mcp-bindings.d.ts

@@ -1,79 +0,0 @@
-import { type McpCredentialsRequest } from "@opengeni/contracts";
-import { HostMcpBinding, HostMcpDelegation, HostMcpAcceptedAuthority } from "@opengeni/contracts/host-mcp-bindings";
-import { type Database } from "./database.js";
-export type HostMcpBindingOwner = {
-    accountId: string;
-    workspaceId: string;
-    subjectId: string;
-    authorizationRevision: number;
-};
-/** Resolve the effective member's revision, not the authenticating external
- * identity revision. Caller must separately prove its authority to act as them. */
-export declare function resolveHostMcpBindingOwner(db: Database, input: Omit<HostMcpBindingOwner, "authorizationRevision">): Promise<HostMcpBindingOwner>;
-export declare class HostMcpBindingConflictError extends Error {
-    constructor();
-}
-export declare class HostMcpDelegationAuthorityError extends Error {
-}
-/** Low-level persistence, not HTTP authentication. Callers must establish the
- * exact external owner and workspace grant before entering this scoped seam. */
-export declare function createHostMcpBinding(db: Database, owner: HostMcpBindingOwner, raw: unknown): Promise<HostMcpBinding>;
-export declare function getHostMcpBinding(db: Database, owner: HostMcpBindingOwner, id: string): Promise<HostMcpBinding | null>;
-export declare function revokeHostMcpBinding(db: Database, owner: HostMcpBindingOwner, id: string, expectedGeneration: number): Promise<HostMcpBinding>;
-/** Internal persistence only. Caller must first verify owner identity and grant
- * issuance permission. No worker consumes these rows without accepted-work capture. */
-export declare function issueHostMcpDelegation(db: Database, owner: HostMcpBindingOwner, raw: unknown): Promise<HostMcpDelegation>;
-export declare function getHostMcpDelegation(db: Database, owner: HostMcpBindingOwner, id: string): Promise<HostMcpDelegation | null>;
-export declare function revokeHostMcpDelegation(db: Database, owner: HostMcpBindingOwner, id: string, expectedGeneration: number): Promise<HostMcpDelegation>;
-/** Internal direct-admission boundary, NOT authentication and NOT persistence.
- * The caller must establish a verified external owner and explicit selection,
- * and capture the returned authority with accepted work INSIDE `capture`.
- * Locks remain held through that callback. Historical initiator metadata only
- * narrows the verified caller's selection; it never establishes who called.
- * Schedules, continuations and inherited turns need their own frozen causal
- * authority path and deliberately cannot use this direct-only boundary.
- */
-export declare function withDirectHostMcpAdmission<T>(db: Database, owner: HostMcpBindingOwner, input: {
-    sessionId: string;
-    turnId: string;
-    delegationId: string;
-    expectedDelegationGeneration: number;
-}, capture: (tx: Database, authority: HostMcpAcceptedAuthority) => Promise<T>): Promise<T>;
-/** Internal direct-turn persistence. The authenticated acceptance transaction
- * must call this before claim; this does not authenticate the supplied owner.
- * Exact replay is allowed, but a turn/server selection cannot be replaced. */
-export declare function captureDirectHostMcpAuthority(db: Database, owner: HostMcpBindingOwner, input: Parameters<typeof withDirectHostMcpAdmission>[2]): Promise<HostMcpAcceptedAuthority>;
-/** Copy only the authority of an exact causal turn after its canonical machine
- * update has been delivered. The insert trigger independently proves delivery,
- * live generations and byte-equivalent authority; no creator fallback exists.
- * Revoked selections are omitted, allowing a continuation to explain loss of
- * access without making its whole session permanently unclaimable. */
-export declare function inheritCausalHostMcpTurnAuthorities(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    sessionId: string;
-    subjectId: string;
-    sourceTurnId: string;
-    targetTurnId: string;
-}): Promise<void>;
-/** Initial child turn only. The stored parent-turn pointer was admitted by the
- * native signed-attempt creation boundary; caller metadata never chooses it. */
-export declare function inheritChildHostMcpTurnAuthorities(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    sessionId: string;
-    turnId: string;
-    subjectId: string;
-}): Promise<void>;
-/** Live consumption of captured direct or same-session causal turn authority.
- * Request context must come from the accepted attempt, never caller JSON.
- * Missing/revoked authority denies; infrastructure failures propagate so the
- * broker reports refresh_failed rather than misclassifying an outage.
- * The historical function name is retained for existing internal consumers. */
-export declare function authorizeDirectHostMcpUse(db: Database, request: McpCredentialsRequest, 
-/** Internal metadata observer; called only after every live authorization fence succeeds. */
-onAuthorized?: (snapshot: HostMcpAcceptedAuthority) => void): Promise<boolean>;
-/** Resolve a configuration selector from the exact live accepted turn, never
- * registry inventory or session creator metadata. The broker still revalidates
- * the resulting concrete reference around resolution and every physical use. */
-export declare function resolveAcceptedHostMcpBinding(db: Database, request: McpCredentialsRequest): Promise<McpCredentialsRequest["connectionRef"] | null>;

package/dist/host-mcp-resolvers.d.ts

@@ -1,47 +0,0 @@
-import { HostMcpResolver, PutHostMcpResolverRequest, RevokeHostMcpResolverRequest } from "@opengeni/contracts/host-mcp-resolvers";
-import { type Database } from "./database.js";
-export declare class HostMcpResolverError extends Error {
-    readonly status: 403 | 404 | 409;
-    constructor(status: 403 | 404 | 409, message: string);
-}
-type Actor = {
-    accountId: string;
-    subjectId: string;
-};
-export declare function getHostMcpResolver(db: Database, actor: Actor, source: string): Promise<HostMcpResolver>;
-export declare function mutateHostMcpResolver(db: Database, actor: Actor, input: {
-    externalSource: string;
-    encryptionKey: Uint8Array;
-    legacyConfigured: boolean;
-} & ({
-    kind: "put";
-    request: PutHostMcpResolverRequest;
-} | {
-    kind: "revoke";
-    request: RevokeHostMcpResolverRequest;
-})): Promise<HostMcpResolver>;
-export type HostMcpResolverRoute = {
-    mode: "legacy";
-} | {
-    mode: "denied";
-} | {
-    mode: "namespace";
-    id: string;
-    generation: number;
-    accountId: string;
-    workspaceId: string;
-    externalSource: string;
-    url: string;
-    bearerToken: string;
-    timeoutMs: number;
-};
-/** Runtime lookup, not tool authority. Failure must never be interpreted as legacy. */
-export declare function resolveHostMcpResolverRoute(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-}, encryptionKey: Uint8Array | null): Promise<HostMcpResolverRoute>;
-export declare function hostMcpResolverRouteIsCurrent(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-}, route: HostMcpResolverRoute): Promise<boolean>;
-export {};

package/dist/host-mcp-task-authority.d.ts

@@ -1,43 +0,0 @@
-import { type ScheduledTask } from "@opengeni/contracts";
-import { HostMcpTaskAuthority, HostMcpBindingDefinition, type HostMcpBindingSelection } from "@opengeni/contracts/host-mcp-bindings";
-import { type Database } from "./database.js";
-import { type HostMcpBindingOwner } from "./host-mcp-bindings.js";
-export type SelectedHostMcpTaskGrant = {
-    delegationId: string;
-    generation: number;
-    bindingId: string;
-    bindingGeneration: number;
-    definition: HostMcpBindingDefinition;
-};
-/** Internal capture only. The API/core authenticates the external owner and
- * rechecks that proof in this same task-write transaction before calling. */
-export declare function captureHostMcpTaskAuthorities(db: Database, owner: HostMcpBindingOwner, task: ScheduledTask, selections: SelectedHostMcpTaskGrant[]): Promise<void>;
-/** Backend-only read; native immutable task-revision proof chooses the owner.
- * No caller-supplied subject and no ambient workspace account enumeration. */
-export declare function getHostMcpTaskAuthorities(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    taskId: string;
-    taskAuthorityRevision: number;
-}): Promise<HostMcpTaskAuthority[]>;
-/** Native task revisions are the authority/version boundary, including ordinary
- * lifecycle edits. Never silently drop or reassign retained host selections. */
-export declare function cloneHostMcpTaskAuthorities(db: Database, task: ScheduledTask, sourceRevision: number): Promise<void>;
-/** Claim-time attachment to the exact accepted run. No host callback or key is
- * used here; credentials are requested only when the accepted attempt uses MCP. */
-export declare function captureScheduledHostMcpTurnAuthorities(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    sessionId: string;
-    turnId: string;
-    runId: string;
-}): Promise<void>;
-/** Agent-created task: derive selections exclusively from its live accepted
- * attempt, then re-admit only native successor-eligible grants. No user lookup
- * or connection inventory is a fallback for a turn with no captured authority. */
-export declare function inheritHostMcpTaskAuthoritiesFromAttempt(db: Database, task: ScheduledTask, source: {
-    sessionId: string;
-    turnId: string;
-    attemptId: string;
-    executionGeneration: number;
-}, configured: HostMcpBindingSelection[]): Promise<void>;

package/dist/host-selection-identity.d.ts

@@ -1,6 +0,0 @@
-import { type HostMcpCreateSelection } from "@opengeni/contracts/host-mcp-bindings";
-export type { HostMcpCreateSelection } from "@opengeni/contracts/host-mcp-bindings";
-/** Replay identity only: neither grant admission nor credential authority. */
-export declare function normalizeHostCreateSelection(value: unknown): HostMcpCreateSelection[];
-export declare function metadataWithHostCreateSelection(metadata: Record<string, unknown>, value: unknown): Record<string, unknown>;
-export declare function hostCreateSelectionFromMetadata(metadata: Record<string, unknown>): HostMcpCreateSelection[];

package/dist/pack-components.d.ts

@@ -1,83 +0,0 @@
-import { type CapabilityPackComponentReference, type PackComponentResolution, type SkillActor } from "@opengeni/contracts";
-import { type Database } from "./database.js";
-import type { SkillSourceReleaseReceipt } from "./skill-source-release.js";
-type PackComponentKind = PackComponentResolution["kind"];
-export type PackInlineSkillRequirement = {
-    key: string;
-    capabilityId: string;
-    name: string;
-    activationMode: "workspace_managed" | "session_selected";
-    contentSha256: string;
-};
-export type StoredPackInstallationComponent = {
-    id: string;
-    packInstallationId: string;
-    key: string;
-    kind: PackComponentKind;
-    capabilityId: string;
-    resolvedId: string;
-    digest: string;
-    metadata: Record<string, unknown>;
-};
-export declare class PackComponentResolutionError extends Error {
-    readonly componentKey: string;
-    readonly status: "missing" | "mismatch";
-    readonly name = "PackComponentResolutionError";
-    constructor(componentKey: string, status: "missing" | "mismatch");
-}
-export declare function resolvePackComponentReferences(db: Database, workspaceId: string, references: readonly CapabilityPackComponentReference[]): Promise<PackComponentResolution[]>;
-/**
- * Resolve inline Pack Skills against effective owners by case-insensitive
- * runtime name. Exact content is shareable; different content under the same
- * active name is a conflict. The current Pack owner may be excluded so an
- * update can replace its own previous inline Skill safely.
- */
-export declare function resolvePackInlineSkillReferences(db: Database, workspaceId: string, requirements: readonly PackInlineSkillRequirement[], excludePackInstallationId?: string): Promise<PackComponentResolution[]>;
-export declare function adoptPackComponentReferences(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    packInstallationId: string;
-    references: readonly CapabilityPackComponentReference[];
-}): Promise<{
-    components: StoredPackInstallationComponent[];
-    retainedFacetInstallationIds: string[];
-    retainedBindingIds: string[];
-}>;
-export declare function listPackInstallationComponents(db: Database, workspaceId: string, packInstallationId: string): Promise<StoredPackInstallationComponent[]>;
-export declare function recordPackInlineSkillComponent(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    packInstallationId: string;
-    componentKey: string;
-    capabilityId: string;
-    facetInstallationId: string;
-    contentSha256: string;
-    name: string;
-}): Promise<StoredPackInstallationComponent>;
-export declare function finalizePackComponentOwnership(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    packInstallationId: string;
-    retainedComponentKeys: string[];
-    retainedFacetInstallationIds: string[];
-    retainedBindingIds: string[];
-    skillActor?: SkillActor;
-}): Promise<{
-    skillReleases: SkillSourceReleaseReceipt[];
-}>;
-export declare function previewPackComponentRelease(db: Database, workspaceId: string, packInstallationId: string): Promise<Array<{
-    key: string;
-    kind: PackComponentKind;
-    capabilityId: string;
-    retainedByOtherOwners: boolean;
-}>>;
-export declare function releasePackComponents(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    packInstallationId: string;
-    skillActor?: SkillActor;
-}): Promise<{
-    retainedComponents: string[];
-    skillReleases?: SkillSourceReleaseReceipt[];
-}>;
-export {};

package/dist/pack-installations.d.ts

@@ -1,86 +0,0 @@
-import { type CapabilityPack, type PackInstallation } from "@opengeni/contracts";
-import { type Database } from "./database.js";
-export declare class PackOperationIdempotencyError extends Error {
-    readonly name = "PackOperationIdempotencyError";
-}
-export declare class PackOperationInProgressError extends Error {
-    readonly name = "PackOperationInProgressError";
-}
-export declare class PackOperationClaimLostError extends Error {
-    readonly name = "PackOperationClaimLostError";
-}
-export declare class PackManifestChangedError extends Error {
-    readonly name = "PackManifestChangedError";
-}
-export declare class PackInstallationVersionConflictError extends Error {
-    readonly expectedVersion: number;
-    readonly actualVersion: number;
-    readonly name = "PackInstallationVersionConflictError";
-    constructor(expectedVersion: number, actualVersion: number);
-}
-export declare class PackInstallationVersionRequiredError extends Error {
-    readonly name = "PackInstallationVersionRequiredError";
-}
-export type PreparedPackInstallation = {
-    installation: PackInstallation;
-    operationId: string;
-    operationVersion: number;
-    replayResult: Record<string, unknown> | null;
-};
-export declare function preparePackInstallationOperation(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    subjectId: string;
-    pack: CapabilityPack;
-    manifestDigest: string;
-    selectedRigId: string | null;
-    metadata: Record<string, unknown>;
-    idempotencyKey: string;
-    requestDigest: string;
-    registeredManifestDigest?: string;
-    expectedInstallationVersion?: number;
-}): Promise<PreparedPackInstallation>;
-export declare function finalizePackInstallationOperation(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    operationId: string;
-    operationVersion: number;
-    packInstallationId: string;
-    packId: string;
-    result: Record<string, unknown>;
-}): Promise<PackInstallation>;
-export declare function deferPackInstallationOperation(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    operationId: string;
-    operationVersion: number;
-    packInstallationId: string;
-    phase: string;
-    errorCode: string;
-}): Promise<void>;
-export declare function touchPackInstallationOperation(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    operationId: string;
-    operationVersion: number;
-}): Promise<void>;
-export declare function preparePackUninstallOperation(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    subjectId: string;
-    packId: string;
-    expectedInstallationVersion: number;
-    idempotencyKey: string;
-    requestDigest: string;
-}): Promise<PreparedPackInstallation | {
-    replayResult: Record<string, unknown>;
-}>;
-export declare function finalizePackUninstallOperation(db: Database, input: {
-    accountId: string;
-    workspaceId: string;
-    operationId: string;
-    operationVersion: number;
-    packInstallationId: string;
-    packId: string;
-    result: Record<string, unknown>;
-}): Promise<void>;

package/src/host-mcp-binding-match.ts

@@ -1,34 +0,0 @@
-import { stableJson, type McpCredentialsRequest } from "@opengeni/contracts";
-import { HostMcpBinding, HostMcpBindingDefinition } from "@opengeni/contracts/host-mcp-bindings";
-
-/** Metadata comparison only. A caller must independently establish accepted
- * execution delegation and live owner/workspace authority. A matching registry
- * row never authorizes a turn, a scheduler, or a nested session by itself. */
-export function hostMcpBindingMatchesRequest(
-  rawBinding: unknown,
-  request: McpCredentialsRequest,
-): boolean {
-  const parsed = HostMcpBinding.safeParse(rawBinding);
-  if (!parsed.success) return false;
-  const binding = parsed.data;
-  const { hostBinding, ...connectionRef } = request.connectionRef;
-  if (
-    !hostBinding ||
-    "selection" in hostBinding ||
-    binding.status !== "active" ||
-    binding.revokedAt !== null ||
-    binding.id !== hostBinding.bindingId ||
-    binding.generation !== hostBinding.generation ||
-    binding.accountId !== request.accountId ||
-    binding.workspaceId !== request.workspaceId ||
-    // The registry currently describes an MCP endpoint, not a REST API grant.
-    request.credentialTarget !== "mcp"
-  )
-    return false;
-  const candidate = HostMcpBindingDefinition.safeParse({
-    serverId: request.serverId,
-    destinationUrl: request.destinationUrl,
-    connectionRef,
-  });
-  return candidate.success && stableJson(candidate.data) === stableJson(binding.definition);
-}