fix(knowledge): restart listings for Full resync and reset renewal on identity change

A Full resync now starts a new full-sync listing even when the connector
does not rehydrate, so Slack rereads every thread instead of resuming an
ordinary cursor. A member whose identity changes or whose token is
rejected also loses its scope-renewal watermark, so renewal runs for the
new identity right away.

Author: waleedlatif1

apps/sim/lib/knowledge/connectors/member-sync-engine.integration.test.ts

@@ -357,6 +357,7 @@ describe('member engine with a dedicated content credential', () => {
         subjectToken: 's:google-drive:-:different-person',
         memberSyncedThrough: null,
         lastCompleteListingAt: null,
+        scopeRenewedAt: null,
         listingCheckpoint: { kind: 'membership', cursor: null, removeMember: false },
         changeCursor: null,
         nextAttemptAt: expect.any(Date),
@@ -704,6 +705,7 @@ describe('member engine with a dedicated content credential', () => {
         status: 'suspended',
         memberSyncedThrough: null,
         lastCompleteListingAt: null,
+        scopeRenewedAt: null,
         listingCheckpoint: { kind: 'membership', cursor: null, removeMember: false },
       })
     )

apps/sim/lib/knowledge/connectors/member-sync-engine.ts

@@ -778,6 +778,7 @@ async function reconcileMembership(
                     memberSyncedThrough: null,
                     lastCompleteListingAt: null,
                     lastListedCount: null,
+                    scopeRenewedAt: null,
                   }
                 : {}),
               updatedAt: now,
@@ -985,6 +986,7 @@ async function recordMemberFailure(
               changeCursor: null,
               memberSyncedThrough: null,
               lastCompleteListingAt: null,
+              scopeRenewedAt: null,
             }
           : {}),
         consecutiveFailures: failures,

apps/sim/lib/knowledge/connectors/sync-content-pass.test.ts

@@ -286,6 +286,7 @@ async function runPass(
     access?: ConnectorAccessMode
     readCurrent?: boolean
     forceRehydrate?: boolean
+    fullSync?: boolean
     checkpoint?: ListingCheckpoint
     databaseTime?: Date
     getDocument?: () => Promise<ExternalDocument | null>
@@ -387,6 +388,7 @@ async function runPass(
     getAccessToken: async () => 'token',
     hydration: { getDocument: hydrate },
     forceRehydrate: options.forceRehydrate ?? false,
+    fullSync: options.fullSync,
     deadlineAt: Date.now() + 60_000,
     onPage: mocks.onPage,
   })
@@ -601,6 +603,36 @@ describe('content pass checkpoint intent', () => {
     }
   )
 
+  it('restarts an ordinary checkpoint as a full sync when Full resync is requested without rehydration', async () => {
+    const checkpoint = {
+      ...beginListingCheckpoint({
+        fingerprint: 'a'.repeat(64),
+        generationId: 'previous-run',
+        startedAt: new Date('2026-09-08T11:00:00Z'),
+      }),
+      cursor: 'saved-cursor',
+      listedCount: 1,
+    }
+    const { pass, listDocuments } = await runPass({
+      existing: {
+        ...EXISTING,
+        contentHash: 'confluence:view-text-v2:page:3',
+        storageKey: 'kb/old.txt',
+        sourceSeenAt: new Date(checkpoint.startedAt),
+      },
+      checkpoint,
+      fullSync: true,
+    })
+
+    expect(listDocuments.mock.calls[0]?.[2]).toBeUndefined()
+    expect(listDocuments.mock.calls[0]?.[3]).toMatchObject({ fullSync: true })
+    expect(pass.checkpoint).toMatchObject({
+      generationId: 'run',
+      forceRehydrate: false,
+      fullSync: true,
+    })
+  })
+
   it.each([
     { name: 'ordinary automatic retry', savedRehydrate: false, requestedRehydrate: false },
     { name: 'Full resync automatic retry', savedRehydrate: true, requestedRehydrate: false },

apps/sim/lib/knowledge/connectors/sync-content-pass.ts

@@ -101,7 +101,11 @@ export async function runConnectorContentPass(input: ContentPassInput) {
   }
   let checkpoint = readListingCheckpoint(input.connector.listingCheckpoint, input.fingerprint)
   /** A Full resync must revisit documents before an ordinary listing's saved cursor. */
-  if (!checkpoint || (input.forceRehydrate && !checkpoint.forceRehydrate)) {
+  if (
+    !checkpoint ||
+    (input.forceRehydrate && !checkpoint.forceRehydrate) ||
+    (input.fullSync && !checkpoint.fullSync)
+  ) {
     checkpoint = await withLease(async (tx) => {
       const next = beginListingCheckpoint({
         fingerprint: input.fingerprint,