@amalgm/automations 0.3.0 → 0.3.1

package/AXIOMS.md

@@ -41,7 +41,9 @@
     state; it never owns a second automation-definition API.
 15. Admitting a run atomically verifies the current enabled configuration,
     stores a secret-free snapshot, and, for a schedule, advances exactly the
-    firing instant that was claimed.
+    firing instant that was claimed. Manual, schedule, and webhook admission
+    derive executability from the same declared set of supported workflow
+    versions.
 16. Legacy local automation storage is not a compatibility authority. Engine
     is deprecated read-only evidence; active callers use this SDK and its
     standalone service, and no old store may run beside them.
@@ -123,3 +125,7 @@
     credential, tunnel credential, or a standalone Automations authorization
     value. Native tool authentication comes from that tool's own user-level
     setup, not from Amalgm's private transport authority.
+43. The durable step journal has one SDK-owned serialized size bound. Oversized
+    action or process results become an explicit byte count plus bounded JSON
+    preview before transport, so output can never strand a run outside the
+    ledger it is meant to update.

package/PURPOSE.md

@@ -58,7 +58,9 @@ the selected machine host supplies every effectful capability.
 
 The machine records a step as running before invoking it and records its output
 before advancing. Reconnect resumes at the first step that is not already
-complete. A transient network failure releases the same run back to the queue
+complete. One serialized journal bound applies to action and process output;
+oversized results retain their byte count and a bounded preview, so evidence
+cannot make its own durable update impossible. A transient network failure releases the same run back to the queue
 with a bounded future retry time; a configuration, authorization, or execution
 error fails it. Every execution capability receives a stable per-step
 idempotency key. Amalgm actions can use it to make an uncertain acknowledgement

package/README.md

@@ -169,7 +169,10 @@ newline. Either action `input` or process `stdin` may contain the exact template
 Shell injects action and process capabilities into the shared executor. Process
 results record exit code, signal, stdout, stderr, and truncation in run history;
 timeouts, cancellation, and output limits are enforced on the selected
-machine. Children inherit the user's ordinary machine environment so installed
+machine. The durable journal begins compacting after 1 MiB and stores oversized
+results as an explicit original byte count plus a bounded JSON preview, keeping
+every run update within the service transport bound. Children inherit the
+user's ordinary machine environment so installed
 CLI auth continues to work, but never inherit Shell's private runtime, tunnel,
 or machine credentials. Values in workflow `env` are persisted non-secret
 configuration.

package/dist/src/cli/shell-runtime.js

@@ -1,4 +1,5 @@
 import { automationCommandDefinition, } from '../command-surface.js';
+import { MAX_CLI_RUNTIME_RESPONSE_BYTES } from '../execution-limits.js';
 import { AutomationError, ValidationError } from '../errors.js';
 export function createShellAutomationCommands(options) {
     const endpoint = shellAutomationEndpoint(options.runtimeUrl);
@@ -68,21 +69,49 @@ export function shellAutomationEndpoint(runtimeUrl) {
 async function jsonResponse(response) {
     let bytes;
     try {
-        bytes = new Uint8Array(await response.arrayBuffer());
+        bytes = await boundedResponse(response, MAX_CLI_RUNTIME_RESPONSE_BYTES);
     }
     catch (error) {
+        if (error instanceof AutomationError)
+            throw error;
         throw new AutomationError('runtime_transport', `Cannot read Amalgm Shell runtime response: ${message(error)}`);
     }
-    if (bytes.byteLength > 2 * 1024 * 1024) {
-        throw new AutomationError('runtime_protocol', 'Amalgm Shell runtime response is too large');
-    }
     try {
-        return JSON.parse(Buffer.from(bytes).toString('utf8'));
+        return JSON.parse(bytes.toString('utf8'));
     }
     catch {
         return null;
     }
 }
+async function boundedResponse(response, maximumBytes) {
+    const declared = Number(response.headers.get('content-length'));
+    if (Number.isFinite(declared) && declared > maximumBytes) {
+        throw new AutomationError('runtime_protocol', 'Amalgm Shell runtime response is too large');
+    }
+    if (!response.body)
+        return Buffer.alloc(0);
+    const chunks = [];
+    let size = 0;
+    const reader = response.body.getReader();
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            const chunk = Buffer.from(value);
+            size += chunk.byteLength;
+            if (size > maximumBytes) {
+                await reader.cancel();
+                throw new AutomationError('runtime_protocol', 'Amalgm Shell runtime response is too large');
+            }
+            chunks.push(chunk);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return Buffer.concat(chunks, size);
+}
 function toolResult(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value)) {
         throw new AutomationError('runtime_protocol', 'Automations MCP returned an invalid tool result');

package/dist/src/execution-limits.d.ts

@@ -0,0 +1,6 @@
+/** Start compacting step output before metadata can approach the service body bound. */
+export declare const RUN_JOURNAL_OUTPUT_BUDGET_BYTES: number;
+/** One persisted journal, including step metadata, must remain below 1.5 MiB. */
+export declare const MAX_RUN_JOURNAL_BYTES: number;
+/** A get response can contain the default page of twenty maximum-sized journals. */
+export declare const MAX_CLI_RUNTIME_RESPONSE_BYTES: number;

package/dist/src/execution-limits.js

@@ -0,0 +1,6 @@
+/** Start compacting step output before metadata can approach the service body bound. */
+export const RUN_JOURNAL_OUTPUT_BUDGET_BYTES = 1024 * 1024;
+/** One persisted journal, including step metadata, must remain below 1.5 MiB. */
+export const MAX_RUN_JOURNAL_BYTES = 1536 * 1024;
+/** A get response can contain the default page of twenty maximum-sized journals. */
+export const MAX_CLI_RUNTIME_RESPONSE_BYTES = 32 * 1024 * 1024;

package/dist/src/index.d.ts

@@ -5,6 +5,7 @@ export { createAutomationApi, type AuthenticateAutomationRequest, type Automatio
 export { automationCliHelp, createShellAutomationCommands, runAutomationCli, runAutomationCliMain, shellAutomationEndpoint, type AutomationCliIo, type AutomationCliMainOptions, type ShellAutomationCommandOptions, } from './cli.js';
 export { automationCommandDefinition, automationCommandDefinitions, createAutomationCommands, type AutomationCommandAnnotations, type AutomationCommandDefinition, type AutomationCommandName, type AutomationCommands, } from './command-surface.js';
 export { automationFailure, type AutomationFailureEnvelope } from './command-result.js';
+export { MAX_CLI_RUNTIME_RESPONSE_BYTES, MAX_RUN_JOURNAL_BYTES, RUN_JOURNAL_OUTPUT_BUDGET_BYTES, } from './execution-limits.js';
 export { createAutomationMcpServer } from './mcp.js';
 export { createAutomationToolSurface, type AutomationToolSurface, type AutomationView, type CreateAutomationDefinition, type UpdateAutomationDefinition, type WorkflowChange, } from './tool-surface.js';
 export { SupabaseAutomationCrudRepository, type SupabaseRpcClient } from './supabase-crud.js';

package/dist/src/index.js

@@ -12,6 +12,7 @@ export { createAutomationApi } from './http.js';
 export { automationCliHelp, createShellAutomationCommands, runAutomationCli, runAutomationCliMain, shellAutomationEndpoint, } from './cli.js';
 export { automationCommandDefinition, automationCommandDefinitions, createAutomationCommands, } from './command-surface.js';
 export { automationFailure } from './command-result.js';
+export { MAX_CLI_RUNTIME_RESPONSE_BYTES, MAX_RUN_JOURNAL_BYTES, RUN_JOURNAL_OUTPUT_BUDGET_BYTES, } from './execution-limits.js';
 export { createAutomationMcpServer } from './mcp.js';
 export { createAutomationToolSurface, } from './tool-surface.js';
 export { SupabaseAutomationCrudRepository } from './supabase-crud.js';

package/dist/src/mcp.js

@@ -4,7 +4,14 @@ import { automationCommandDefinitions, createAutomationCommands, } from './comma
 import { automationFailure } from './command-result.js';
 import { createAutomationToolSurface } from './tool-surface.js';
 export { createAutomationToolSurface };
-const resultSchema = { result: z.unknown() };
+const resultSchema = {
+    result: z.unknown().optional(),
+    error: z.object({
+        code: z.string(),
+        message: z.string(),
+        status: z.number().optional(),
+    }).strict().optional(),
+};
 export function createAutomationMcpServer(sdk) {
     const server = new McpServer({ name: 'amalgm-automations-mcp-server', version: '0.1.0' });
     const commands = createAutomationCommands(sdk);

package/dist/src/run-journal.js

@@ -1,9 +1,13 @@
+import { MAX_RUN_JOURNAL_BYTES, RUN_JOURNAL_OUTPUT_BUDGET_BYTES, } from './execution-limits.js';
+const MAX_OUTPUT_PREVIEW_CHARACTERS = 64 * 1024;
 export function emptyJournal() {
     return { version: 1, steps: [] };
 }
 export function runJournal(value, plan) {
     if (value === undefined)
         return emptyJournal();
+    if (jsonBytes(value) > MAX_RUN_JOURNAL_BYTES)
+        throw new Error('Run step journal exceeds its persistence bound');
     if (!value || typeof value !== 'object' || Array.isArray(value))
         throw new Error('Run step journal is invalid');
     const source = value;
@@ -34,12 +38,63 @@ export function putStep(journal, step) {
         steps.push(step);
     else
         steps[index] = step;
-    return { version: 1, steps };
+    let candidate = { version: 1, steps };
+    if (jsonBytes(candidate) > RUN_JOURNAL_OUTPUT_BUDGET_BYTES && step.output !== undefined) {
+        const compacted = { ...step, output: compactOutput(step.output) };
+        if (index === -1)
+            steps[steps.length - 1] = compacted;
+        else
+            steps[index] = compacted;
+        candidate = { version: 1, steps };
+    }
+    if (jsonBytes(candidate) > MAX_RUN_JOURNAL_BYTES) {
+        candidate = removeStoredPreviews(candidate);
+    }
+    if (jsonBytes(candidate) > MAX_RUN_JOURNAL_BYTES) {
+        throw new Error('Run step journal exceeds its persistence bound');
+    }
+    return candidate;
 }
 /** Journals are constructed from JSON fields only; this is the persistence boundary. */
 export function journalJson(journal) {
+    if (jsonBytes(journal) > MAX_RUN_JOURNAL_BYTES)
+        throw new Error('Run step journal exceeds its persistence bound');
     return journal;
 }
+function compactOutput(output) {
+    const serialized = json(output);
+    return {
+        $amalgmTruncated: true,
+        originalBytes: Buffer.byteLength(serialized),
+        jsonPreview: serialized.slice(0, MAX_OUTPUT_PREVIEW_CHARACTERS),
+    };
+}
+function removeStoredPreviews(journal) {
+    return {
+        version: 1,
+        steps: journal.steps.map((step) => {
+            if (!isCompactedOutput(step.output))
+                return step;
+            const { jsonPreview: _preview, ...output } = step.output;
+            return { ...step, output };
+        }),
+    };
+}
+function isCompactedOutput(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const item = value;
+    return item.$amalgmTruncated === true && typeof item.jsonPreview === 'string';
+}
+function jsonBytes(value) {
+    return Buffer.byteLength(json(value));
+}
+function json(value) {
+    const serialized = JSON.stringify(value);
+    if (typeof serialized !== 'string')
+        throw new Error('Run step output must be JSON');
+    return serialized;
+}
 function runStep(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value))
         throw new Error('Run step is invalid');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amalgm/automations",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Amalgm's automation SDK: durable trigger admission and target-machine execution.",
   "license": "UNLICENSED",
   "repository": {

package/supabase/migrations/20260904010000_typed_workflow_admission.sql

@@ -0,0 +1,272 @@
+-- Every delivery path admits the same declared workflow versions. The SDK owns
+-- shape validation; this transaction-bound predicate prevents incomplete or
+-- unsupported definitions from entering the durable execution ledger.
+
+CREATE OR REPLACE FUNCTION public.amalgm_workflow_is_executable(p_compiled jsonb)
+RETURNS boolean
+LANGUAGE sql
+IMMUTABLE
+SET search_path = public
+AS $$
+  SELECT jsonb_typeof(p_compiled) = 'object'
+    AND p_compiled->>'version' IN ('1', '2')
+    AND jsonb_typeof(p_compiled->'steps') = 'array'
+    AND jsonb_array_length(
+      CASE WHEN jsonb_typeof(p_compiled->'steps') = 'array'
+        THEN p_compiled->'steps' ELSE '[]'::jsonb END
+    ) BETWEEN 1 AND 100;
+$$;
+
+CREATE OR REPLACE FUNCTION public.list_amalgm_event_triggers(p_user_id uuid, p_target_id text)
+RETURNS TABLE (
+  user_id uuid,
+  automation_id text,
+  trigger_id text,
+  target_id text,
+  source text,
+  event text,
+  secret text
+)
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  SELECT t.user_id, t.automation_id, t.id, a.target_id, t.source, t.event, t.secret
+  FROM public.amalgm_automation_triggers t
+  JOIN public.amalgm_automations a
+    ON a.user_id = t.user_id AND a.id = t.automation_id
+  JOIN public.amalgm_automation_workflows w
+    ON w.user_id = a.user_id AND w.automation_id = a.id
+  WHERE t.kind = 'webhook' AND t.user_id = p_user_id
+    AND a.target_id = p_target_id AND t.enabled AND a.enabled
+    AND public.amalgm_workflow_is_executable(w.compiled);
+$$;
+
+CREATE OR REPLACE FUNCTION public.list_due_amalgm_crons(p_now timestamptz)
+RETURNS TABLE (
+  user_id uuid,
+  automation_id text,
+  trigger_id text,
+  target_id text,
+  cron text,
+  timezone text,
+  next_run_at timestamptz,
+  remaining_occurrences integer
+)
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  SELECT t.user_id, t.automation_id, t.id, a.target_id,
+    t.cron, t.timezone, t.next_run_at, t.remaining_occurrences
+  FROM public.amalgm_automation_triggers t
+  JOIN public.amalgm_automations a
+    ON a.user_id = t.user_id AND a.id = t.automation_id
+  JOIN public.amalgm_automation_workflows w
+    ON w.user_id = a.user_id AND w.automation_id = a.id
+  WHERE t.kind = 'schedule' AND t.next_run_at <= p_now
+    AND (t.remaining_occurrences IS NULL OR t.remaining_occurrences > 0)
+    AND t.enabled AND a.enabled
+    AND public.amalgm_workflow_is_executable(w.compiled)
+  ORDER BY t.next_run_at, t.user_id, t.automation_id, t.id;
+$$;
+
+CREATE OR REPLACE FUNCTION public.resolve_amalgm_webhook(p_endpoint_id text)
+RETURNS TABLE (
+  user_id uuid,
+  automation_id text,
+  trigger_id text,
+  target_id text,
+  endpoint_id text,
+  source text,
+  event text,
+  secret text
+)
+LANGUAGE sql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+  SELECT t.user_id, t.automation_id, t.id, a.target_id,
+    t.endpoint_id, t.source, t.event, t.secret
+  FROM public.amalgm_automation_triggers t
+  JOIN public.amalgm_automations a
+    ON a.user_id = t.user_id AND a.id = t.automation_id
+  JOIN public.amalgm_automation_workflows w
+    ON w.user_id = a.user_id AND w.automation_id = a.id
+  WHERE t.kind = 'webhook' AND t.endpoint_id = p_endpoint_id
+    AND t.enabled AND a.enabled
+    AND public.amalgm_workflow_is_executable(w.compiled);
+$$;
+
+CREATE OR REPLACE FUNCTION public.enqueue_amalgm_run(
+  p_kind text,
+  p_user_id uuid,
+  p_automation_id text,
+  p_trigger_id text,
+  p_target_id text,
+  p_endpoint_id text,
+  p_delivery_key text,
+  p_expected_next_run_at timestamptz,
+  p_next_run_at timestamptz,
+  p_input jsonb,
+  p_now timestamptz
+) RETURNS SETOF public.amalgm_automation_runs
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_inserted integer := 0;
+BEGIN
+  IF p_kind = 'cron' THEN
+    IF p_endpoint_id IS NOT NULL OR p_delivery_key IS NOT NULL THEN
+      RAISE EXCEPTION 'Schedule admission cannot carry webhook identity';
+    END IF;
+    PERFORM 1
+    FROM public.amalgm_automation_triggers t
+    JOIN public.amalgm_automations a
+      ON a.user_id = t.user_id AND a.id = t.automation_id
+    WHERE t.user_id = p_user_id AND t.automation_id = p_automation_id
+      AND t.id = p_trigger_id AND a.target_id = p_target_id
+      AND t.kind = 'schedule' AND t.next_run_at = p_expected_next_run_at
+      AND (t.remaining_occurrences IS NULL OR t.remaining_occurrences > 0)
+      AND t.enabled AND a.enabled
+    FOR UPDATE OF t;
+  ELSIF p_kind = 'event' THEN
+    IF p_endpoint_id IS NULL THEN RAISE EXCEPTION 'Webhook endpoint is required'; END IF;
+    PERFORM 1
+    FROM public.amalgm_automation_triggers t
+    JOIN public.amalgm_automations a
+      ON a.user_id = t.user_id AND a.id = t.automation_id
+    WHERE t.user_id = p_user_id AND t.automation_id = p_automation_id
+      AND t.id = p_trigger_id AND a.target_id = p_target_id
+      AND t.kind = 'webhook' AND t.endpoint_id = p_endpoint_id
+      AND t.enabled AND a.enabled;
+  ELSE
+    RAISE EXCEPTION 'Invalid automation trigger kind';
+  END IF;
+  IF NOT FOUND THEN RETURN; END IF;
+
+  RETURN QUERY
+  INSERT INTO public.amalgm_automation_runs (
+    user_id, target_id, automation_id, trigger_id, workflow_id,
+    automation_payload, input, status, delivery_key, created_at
+  )
+  SELECT a.user_id, a.target_id, a.id, t.id, w.id,
+    jsonb_strip_nulls(jsonb_build_object(
+      'id', a.id, 'targetId', a.target_id, 'name', a.name,
+      'description', a.description, 'enabled', a.enabled,
+      'trigger', jsonb_strip_nulls(jsonb_build_object(
+        'id', t.id,
+        'kind', CASE WHEN t.kind = 'schedule' THEN 'cron' ELSE 'event' END,
+        'enabled', t.enabled, 'cron', t.cron, 'timezone', t.timezone,
+        'source', t.source, 'event', t.event
+      )),
+      'workflow', jsonb_strip_nulls(jsonb_build_object(
+        'id', w.id, 'name', w.name, 'script', w.script,
+        'compiled', w.compiled, 'allowlist', w.allowlist, 'limits', w.limits
+      ))
+    )),
+    p_input, 'pending', p_delivery_key, p_now
+  FROM public.amalgm_automations a
+  JOIN public.amalgm_automation_triggers t
+    ON t.user_id = a.user_id AND t.automation_id = a.id
+  JOIN public.amalgm_automation_workflows w
+    ON w.user_id = a.user_id AND w.automation_id = a.id
+  WHERE a.user_id = p_user_id AND a.id = p_automation_id AND t.id = p_trigger_id
+    AND a.target_id = p_target_id AND t.enabled AND a.enabled
+    AND (p_kind = 'cron' OR (t.kind = 'webhook' AND t.endpoint_id = p_endpoint_id))
+    AND public.amalgm_workflow_is_executable(w.compiled)
+  ON CONFLICT (user_id, automation_id, trigger_id, delivery_key)
+    WHERE delivery_key IS NOT NULL
+  DO UPDATE SET delivery_key = EXCLUDED.delivery_key
+  RETURNING *;
+  GET DIAGNOSTICS v_inserted = ROW_COUNT;
+
+  IF p_kind = 'cron' AND v_inserted = 1 THEN
+    UPDATE public.amalgm_automation_triggers SET
+      next_run_at = p_next_run_at,
+      remaining_occurrences = CASE WHEN remaining_occurrences IS NULL
+        THEN NULL ELSE remaining_occurrences - 1 END,
+      enabled = CASE WHEN remaining_occurrences = 1 THEN false ELSE enabled END,
+      updated_at = p_now
+    WHERE user_id = p_user_id AND automation_id = p_automation_id
+      AND id = p_trigger_id AND kind = 'schedule'
+      AND next_run_at = p_expected_next_run_at;
+  END IF;
+END;
+$$;
+
+CREATE OR REPLACE FUNCTION public.enqueue_amalgm_manual_run(
+  p_user_id uuid,
+  p_automation_id text,
+  p_input jsonb,
+  p_idempotency_key text,
+  p_now timestamptz
+) RETURNS SETOF public.amalgm_automation_runs
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+BEGIN
+  IF p_idempotency_key IS NOT NULL THEN
+    RETURN QUERY
+    SELECT r.*
+    FROM public.amalgm_automation_runs r
+    WHERE r.user_id = p_user_id
+      AND r.automation_id = p_automation_id
+      AND r.trigger_id = '@manual'
+      AND r.delivery_key = p_idempotency_key;
+    IF FOUND THEN RETURN; END IF;
+  END IF;
+
+  RETURN QUERY
+  INSERT INTO public.amalgm_automation_runs (
+    user_id, target_id, automation_id, trigger_id, workflow_id,
+    automation_payload, input, status, delivery_key, created_at
+  )
+  SELECT a.user_id, a.target_id, a.id, '@manual', w.id,
+    jsonb_strip_nulls(jsonb_build_object(
+      'id', a.id, 'targetId', a.target_id, 'name', a.name,
+      'description', a.description, 'enabled', a.enabled,
+      'trigger', jsonb_build_object(
+        'id', '@manual', 'kind', 'manual', 'enabled', true
+      ),
+      'workflow', jsonb_strip_nulls(jsonb_build_object(
+        'id', w.id, 'name', w.name, 'script', w.script,
+        'compiled', w.compiled, 'allowlist', w.allowlist, 'limits', w.limits
+      ))
+    )),
+    p_input, 'pending', p_idempotency_key, p_now
+  FROM public.amalgm_automations a
+  JOIN public.amalgm_automation_workflows w
+    ON w.user_id = a.user_id AND w.automation_id = a.id
+  WHERE a.user_id = p_user_id AND a.id = p_automation_id AND a.enabled
+    AND public.amalgm_workflow_is_executable(w.compiled)
+  ON CONFLICT (user_id, automation_id, trigger_id, delivery_key)
+    WHERE delivery_key IS NOT NULL
+  DO UPDATE SET delivery_key = EXCLUDED.delivery_key
+  RETURNING *;
+END;
+$$;
+
+REVOKE ALL ON FUNCTION public.amalgm_workflow_is_executable(jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION public.list_amalgm_event_triggers(uuid, text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION public.list_due_amalgm_crons(timestamptz) FROM PUBLIC;
+REVOKE ALL ON FUNCTION public.resolve_amalgm_webhook(text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION public.enqueue_amalgm_run(
+  text, uuid, text, text, text, text, text, timestamptz, timestamptz, jsonb, timestamptz
+) FROM PUBLIC;
+REVOKE ALL ON FUNCTION public.enqueue_amalgm_manual_run(
+  uuid, text, jsonb, text, timestamptz
+) FROM PUBLIC;
+
+GRANT EXECUTE ON FUNCTION public.list_amalgm_event_triggers(uuid, text) TO service_role;
+GRANT EXECUTE ON FUNCTION public.list_due_amalgm_crons(timestamptz) TO service_role;
+GRANT EXECUTE ON FUNCTION public.resolve_amalgm_webhook(text) TO service_role;
+GRANT EXECUTE ON FUNCTION public.enqueue_amalgm_run(
+  text, uuid, text, text, text, text, text, timestamptz, timestamptz, jsonb, timestamptz
+) TO service_role;
+GRANT EXECUTE ON FUNCTION public.enqueue_amalgm_manual_run(
+  uuid, text, jsonb, text, timestamptz
+) TO service_role;