@asm-agent/postgres 0.8.2

package/dist/types.d.ts

@@ -0,0 +1,87 @@
+export interface OwnerRecord {
+    id: string;
+    handle: string;
+}
+export interface ProjectRecord {
+    id: string;
+    ownerId: string;
+    key: string;
+    rootPath: string;
+}
+export type SessionStatus = "active" | "archived" | "crash";
+export interface SessionRecord {
+    id: string;
+    projectId: string;
+    parentSessionId?: string;
+    status: SessionStatus;
+    cwd: string;
+    name?: string;
+    rlmDepth: number;
+    transcriptRevision: number;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface SessionMessageInput {
+    entryId: string;
+    parentEntryId?: string;
+    entryType: string;
+    payload: unknown;
+    createdAt: Date;
+}
+export interface SessionMessageRecord extends SessionMessageInput {
+    sequence: number;
+}
+export type GoalStatus = "active" | "paused" | "budget_limited" | "complete" | "error";
+export interface GoalRecord {
+    id: string;
+    sessionId: string;
+    status: GoalStatus;
+    objective: string;
+    tokenBudget?: number;
+    tokensUsed: number;
+    timeUsedSeconds: number;
+    continuationsUsed: number;
+    lastReason?: string;
+    lastError?: string;
+}
+export type ScheduleStatus = "active" | "paused" | "completed" | "cancelled";
+export type ScheduleKind = "once" | "cron" | "interval";
+export interface ScheduleRecord {
+    id: string;
+    sessionId: string;
+    status: ScheduleStatus;
+    source: string;
+    scheduleKind: ScheduleKind;
+    expression: string;
+    intervalMs?: number;
+    prompt: string;
+    metadata: unknown;
+    nextRunAt?: Date;
+    lastRunAt?: Date;
+    runCount: number;
+}
+export interface LeaseRecord {
+    resourceType: string;
+    resourceId: string;
+    ownerId: string;
+    fencingToken: number;
+    expiresAt: Date;
+}
+export interface OutboxEvent {
+    id: string;
+    topic: string;
+    aggregateType: string;
+    aggregateId: string;
+    payload: unknown;
+    headers: unknown;
+    attempts: number;
+}
+export type IdempotencyStartResult = {
+    status: "started";
+} | {
+    status: "in_progress";
+} | {
+    status: "replayed";
+    response: unknown;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAChE,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,gBAAgB,GAAG,UAAU,GAAG,OAAO,CAAC;AAEvF,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAC7E,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAExD,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,sBAAsB,GAC/B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,GACzB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC","sourcesContent":["export interface OwnerRecord {\n\tid: string;\n\thandle: string;\n}\n\nexport interface ProjectRecord {\n\tid: string;\n\townerId: string;\n\tkey: string;\n\trootPath: string;\n}\n\nexport type SessionStatus = \"active\" | \"archived\" | \"crash\";\n\nexport interface SessionRecord {\n\tid: string;\n\tprojectId: string;\n\tparentSessionId?: string;\n\tstatus: SessionStatus;\n\tcwd: string;\n\tname?: string;\n\trlmDepth: number;\n\ttranscriptRevision: number;\n\tcreatedAt: Date;\n\tupdatedAt: Date;\n}\n\nexport interface SessionMessageInput {\n\tentryId: string;\n\tparentEntryId?: string;\n\tentryType: string;\n\tpayload: unknown;\n\tcreatedAt: Date;\n}\n\nexport interface SessionMessageRecord extends SessionMessageInput {\n\tsequence: number;\n}\n\nexport type GoalStatus = \"active\" | \"paused\" | \"budget_limited\" | \"complete\" | \"error\";\n\nexport interface GoalRecord {\n\tid: string;\n\tsessionId: string;\n\tstatus: GoalStatus;\n\tobjective: string;\n\ttokenBudget?: number;\n\ttokensUsed: number;\n\ttimeUsedSeconds: number;\n\tcontinuationsUsed: number;\n\tlastReason?: string;\n\tlastError?: string;\n}\n\nexport type ScheduleStatus = \"active\" | \"paused\" | \"completed\" | \"cancelled\";\nexport type ScheduleKind = \"once\" | \"cron\" | \"interval\";\n\nexport interface ScheduleRecord {\n\tid: string;\n\tsessionId: string;\n\tstatus: ScheduleStatus;\n\tsource: string;\n\tscheduleKind: ScheduleKind;\n\texpression: string;\n\tintervalMs?: number;\n\tprompt: string;\n\tmetadata: unknown;\n\tnextRunAt?: Date;\n\tlastRunAt?: Date;\n\trunCount: number;\n}\n\nexport interface LeaseRecord {\n\tresourceType: string;\n\tresourceId: string;\n\townerId: string;\n\tfencingToken: number;\n\texpiresAt: Date;\n}\n\nexport interface OutboxEvent {\n\tid: string;\n\ttopic: string;\n\taggregateType: string;\n\taggregateId: string;\n\tpayload: unknown;\n\theaders: unknown;\n\tattempts: number;\n}\n\nexport type IdempotencyStartResult =\n\t| { status: \"started\" }\n\t| { status: \"in_progress\" }\n\t| { status: \"replayed\"; response: unknown };\n"]}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"","sourcesContent":["export interface OwnerRecord {\n\tid: string;\n\thandle: string;\n}\n\nexport interface ProjectRecord {\n\tid: string;\n\townerId: string;\n\tkey: string;\n\trootPath: string;\n}\n\nexport type SessionStatus = \"active\" | \"archived\" | \"crash\";\n\nexport interface SessionRecord {\n\tid: string;\n\tprojectId: string;\n\tparentSessionId?: string;\n\tstatus: SessionStatus;\n\tcwd: string;\n\tname?: string;\n\trlmDepth: number;\n\ttranscriptRevision: number;\n\tcreatedAt: Date;\n\tupdatedAt: Date;\n}\n\nexport interface SessionMessageInput {\n\tentryId: string;\n\tparentEntryId?: string;\n\tentryType: string;\n\tpayload: unknown;\n\tcreatedAt: Date;\n}\n\nexport interface SessionMessageRecord extends SessionMessageInput {\n\tsequence: number;\n}\n\nexport type GoalStatus = \"active\" | \"paused\" | \"budget_limited\" | \"complete\" | \"error\";\n\nexport interface GoalRecord {\n\tid: string;\n\tsessionId: string;\n\tstatus: GoalStatus;\n\tobjective: string;\n\ttokenBudget?: number;\n\ttokensUsed: number;\n\ttimeUsedSeconds: number;\n\tcontinuationsUsed: number;\n\tlastReason?: string;\n\tlastError?: string;\n}\n\nexport type ScheduleStatus = \"active\" | \"paused\" | \"completed\" | \"cancelled\";\nexport type ScheduleKind = \"once\" | \"cron\" | \"interval\";\n\nexport interface ScheduleRecord {\n\tid: string;\n\tsessionId: string;\n\tstatus: ScheduleStatus;\n\tsource: string;\n\tscheduleKind: ScheduleKind;\n\texpression: string;\n\tintervalMs?: number;\n\tprompt: string;\n\tmetadata: unknown;\n\tnextRunAt?: Date;\n\tlastRunAt?: Date;\n\trunCount: number;\n}\n\nexport interface LeaseRecord {\n\tresourceType: string;\n\tresourceId: string;\n\townerId: string;\n\tfencingToken: number;\n\texpiresAt: Date;\n}\n\nexport interface OutboxEvent {\n\tid: string;\n\ttopic: string;\n\taggregateType: string;\n\taggregateId: string;\n\tpayload: unknown;\n\theaders: unknown;\n\tattempts: number;\n}\n\nexport type IdempotencyStartResult =\n\t| { status: \"started\" }\n\t| { status: \"in_progress\" }\n\t| { status: \"replayed\"; response: unknown };\n"]}

package/migrations/0001_foundation.sql

@@ -0,0 +1,143 @@
+CREATE SCHEMA IF NOT EXISTS asm_agent;
+
+CREATE TABLE asm_agent.schema_migrations (
+  version integer PRIMARY KEY,
+  name text NOT NULL UNIQUE,
+  checksum text NOT NULL,
+  applied_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE TABLE asm_agent.owners (
+  id uuid PRIMARY KEY,
+  handle text NOT NULL UNIQUE,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  updated_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE TABLE asm_agent.projects (
+  id uuid PRIMARY KEY,
+  owner_id uuid NOT NULL REFERENCES asm_agent.owners(id) ON DELETE CASCADE,
+  key text NOT NULL,
+  root_path text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  updated_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  UNIQUE (owner_id, key),
+  UNIQUE (owner_id, root_path)
+);
+
+CREATE TABLE asm_agent.sessions (
+  id uuid PRIMARY KEY,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  parent_session_id uuid REFERENCES asm_agent.sessions(id) ON DELETE SET NULL,
+  status text NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'archived', 'crash')),
+  cwd text NOT NULL,
+  name text,
+  rlm_depth integer NOT NULL DEFAULT 0 CHECK (rlm_depth >= 0),
+  transcript_revision bigint NOT NULL DEFAULT 0 CHECK (transcript_revision >= 0),
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  updated_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE INDEX sessions_project_updated_idx ON asm_agent.sessions(project_id, updated_at DESC);
+CREATE INDEX sessions_parent_idx ON asm_agent.sessions(parent_session_id) WHERE parent_session_id IS NOT NULL;
+
+CREATE TABLE asm_agent.agent_messages (
+  session_id uuid NOT NULL REFERENCES asm_agent.sessions(id) ON DELETE CASCADE,
+  sequence bigint NOT NULL CHECK (sequence > 0),
+  entry_id uuid NOT NULL,
+  parent_entry_id uuid,
+  entry_type text NOT NULL,
+  payload jsonb NOT NULL,
+  created_at timestamptz NOT NULL,
+  PRIMARY KEY (session_id, sequence),
+  UNIQUE (session_id, entry_id)
+);
+
+CREATE INDEX agent_messages_session_created_idx ON asm_agent.agent_messages(session_id, created_at);
+
+CREATE TABLE asm_agent.goals (
+  id uuid PRIMARY KEY,
+  session_id uuid NOT NULL REFERENCES asm_agent.sessions(id) ON DELETE CASCADE,
+  status text NOT NULL CHECK (status IN ('active', 'paused', 'budget_limited', 'complete', 'error')),
+  objective text NOT NULL CHECK (length(btrim(objective)) > 0),
+  token_budget bigint CHECK (token_budget > 0),
+  tokens_used bigint NOT NULL DEFAULT 0 CHECK (tokens_used >= 0),
+  time_used_seconds bigint NOT NULL DEFAULT 0 CHECK (time_used_seconds >= 0),
+  continuations_used integer NOT NULL DEFAULT 0 CHECK (continuations_used >= 0),
+  last_reason text,
+  last_error text,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  updated_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE UNIQUE INDEX goals_one_live_per_session_idx ON asm_agent.goals(session_id)
+  WHERE status IN ('active', 'paused', 'budget_limited');
+
+CREATE TABLE asm_agent.schedules (
+  id uuid PRIMARY KEY,
+  session_id uuid NOT NULL REFERENCES asm_agent.sessions(id) ON DELETE CASCADE,
+  status text NOT NULL CHECK (status IN ('active', 'paused', 'completed', 'cancelled')),
+  source text NOT NULL,
+  schedule_kind text NOT NULL CHECK (schedule_kind IN ('once', 'cron', 'interval')),
+  expression text NOT NULL,
+  interval_ms bigint CHECK (interval_ms > 0),
+  prompt text NOT NULL,
+  metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+  next_run_at timestamptz,
+  last_run_at timestamptz,
+  run_count bigint NOT NULL DEFAULT 0 CHECK (run_count >= 0),
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  updated_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE INDEX schedules_due_idx ON asm_agent.schedules(next_run_at, id) WHERE status = 'active';
+
+CREATE SEQUENCE asm_agent.lease_fencing_token_seq AS bigint;
+
+CREATE TABLE asm_agent.leases (
+  resource_type text NOT NULL,
+  resource_id text NOT NULL,
+  owner_id text NOT NULL,
+  fencing_token bigint NOT NULL DEFAULT nextval('asm_agent.lease_fencing_token_seq'),
+  acquired_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  expires_at timestamptz NOT NULL,
+  PRIMARY KEY (resource_type, resource_id),
+  CHECK (expires_at > acquired_at)
+);
+
+CREATE INDEX leases_expiry_idx ON asm_agent.leases(expires_at);
+
+CREATE TABLE asm_agent.idempotency_records (
+  scope text NOT NULL,
+  key text NOT NULL,
+  request_hash text NOT NULL,
+  status text NOT NULL CHECK (status IN ('started', 'completed', 'failed')),
+  response jsonb,
+  error jsonb,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  updated_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  expires_at timestamptz,
+  PRIMARY KEY (scope, key)
+);
+
+CREATE INDEX idempotency_expiry_idx ON asm_agent.idempotency_records(expires_at)
+  WHERE expires_at IS NOT NULL;
+
+CREATE TABLE asm_agent.outbox_events (
+  id uuid PRIMARY KEY,
+  topic text NOT NULL,
+  aggregate_type text NOT NULL,
+  aggregate_id text NOT NULL,
+  payload jsonb NOT NULL,
+  headers jsonb NOT NULL DEFAULT '{}'::jsonb,
+  available_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  attempts integer NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+  locked_by text,
+  locked_until timestamptz,
+  published_at timestamptz,
+  last_error text,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE INDEX outbox_available_idx ON asm_agent.outbox_events(available_at, id)
+  WHERE published_at IS NULL;

package/migrations/0002_grounded_memory.sql

@@ -0,0 +1,160 @@
+CREATE TABLE asm_agent.evidence_snapshots (
+  id uuid PRIMARY KEY,
+  owner_id uuid NOT NULL REFERENCES asm_agent.owners(id) ON DELETE CASCADE,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  source_type text NOT NULL CHECK (source_type IN ('user', 'tool', 'document', 'system')),
+  source_uri text,
+  content_type text NOT NULL,
+  content_text text,
+  content_json jsonb,
+  digest text NOT NULL CHECK (digest ~ '^[a-f0-9]{64}$'),
+  captured_at timestamptz NOT NULL,
+  revoked_at timestamptz,
+  metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+  CHECK ((content_text IS NOT NULL)::integer + (content_json IS NOT NULL)::integer = 1),
+  UNIQUE (owner_id, project_id, digest)
+);
+
+CREATE INDEX evidence_project_captured_idx
+  ON asm_agent.evidence_snapshots(project_id, captured_at DESC);
+
+CREATE TABLE asm_agent.evidence_claims (
+  id uuid PRIMARY KEY,
+  evidence_id uuid NOT NULL REFERENCES asm_agent.evidence_snapshots(id) ON DELETE CASCADE,
+  claim text NOT NULL CHECK (length(btrim(claim)) > 0),
+  locator jsonb NOT NULL DEFAULT '{}'::jsonb,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE TABLE asm_agent.memory_records (
+  id uuid PRIMARY KEY,
+  owner_id uuid NOT NULL REFERENCES asm_agent.owners(id) ON DELETE CASCADE,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  session_id uuid REFERENCES asm_agent.sessions(id) ON DELETE SET NULL,
+  kind text NOT NULL CHECK (kind IN ('observation', 'fact', 'instruction')),
+  current_revision integer NOT NULL DEFAULT 1 CHECK (current_revision > 0),
+  expires_at timestamptz,
+  tombstoned_at timestamptz,
+  revocation_reason text,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  updated_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE INDEX memory_records_scope_idx
+  ON asm_agent.memory_records(owner_id, project_id, session_id, updated_at DESC)
+  WHERE tombstoned_at IS NULL;
+CREATE INDEX memory_records_expiry_idx
+  ON asm_agent.memory_records(expires_at) WHERE expires_at IS NOT NULL AND tombstoned_at IS NULL;
+
+CREATE TABLE asm_agent.memory_revisions (
+  memory_id uuid NOT NULL REFERENCES asm_agent.memory_records(id) ON DELETE CASCADE,
+  revision integer NOT NULL CHECK (revision > 0),
+  content text NOT NULL CHECK (length(btrim(content)) > 0),
+  metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+  correction_reason text,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  PRIMARY KEY (memory_id, revision)
+);
+
+CREATE TABLE asm_agent.memory_revision_evidence (
+  memory_id uuid NOT NULL,
+  revision integer NOT NULL,
+  evidence_id uuid NOT NULL REFERENCES asm_agent.evidence_snapshots(id) ON DELETE RESTRICT,
+  PRIMARY KEY (memory_id, revision, evidence_id),
+  FOREIGN KEY (memory_id, revision)
+    REFERENCES asm_agent.memory_revisions(memory_id, revision) ON DELETE CASCADE
+);
+
+CREATE TABLE asm_agent.memory_reader_scopes (
+  memory_id uuid NOT NULL REFERENCES asm_agent.memory_records(id) ON DELETE CASCADE,
+  reader_type text NOT NULL CHECK (reader_type IN ('owner', 'project', 'session', 'agent')),
+  reader_id text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  PRIMARY KEY (memory_id, reader_type, reader_id)
+);
+
+CREATE TABLE asm_agent.memory_links (
+  source_memory_id uuid NOT NULL REFERENCES asm_agent.memory_records(id) ON DELETE CASCADE,
+  target_memory_id uuid NOT NULL REFERENCES asm_agent.memory_records(id) ON DELETE CASCADE,
+  relation text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  PRIMARY KEY (source_memory_id, target_memory_id, relation),
+  CHECK (source_memory_id <> target_memory_id)
+);
+
+CREATE TABLE asm_agent.memory_lexical_projections (
+  memory_id uuid PRIMARY KEY REFERENCES asm_agent.memory_records(id) ON DELETE CASCADE,
+  revision integer NOT NULL,
+  document tsvector NOT NULL,
+  projected_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  FOREIGN KEY (memory_id, revision)
+    REFERENCES asm_agent.memory_revisions(memory_id, revision) ON DELETE CASCADE
+);
+
+CREATE INDEX memory_lexical_document_idx
+  ON asm_agent.memory_lexical_projections USING gin(document);
+
+CREATE TABLE asm_agent.memory_vector_projections (
+  memory_id uuid PRIMARY KEY REFERENCES asm_agent.memory_records(id) ON DELETE CASCADE,
+  revision integer NOT NULL,
+  model text NOT NULL,
+  dimensions integer NOT NULL CHECK (dimensions > 0),
+  embedding real[] NOT NULL,
+  projected_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  CHECK (cardinality(embedding) = dimensions),
+  FOREIGN KEY (memory_id, revision)
+    REFERENCES asm_agent.memory_revisions(memory_id, revision) ON DELETE CASCADE
+);
+
+CREATE TABLE asm_agent.retrieval_decisions (
+  id uuid PRIMARY KEY,
+  owner_id uuid NOT NULL REFERENCES asm_agent.owners(id) ON DELETE CASCADE,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  session_id uuid REFERENCES asm_agent.sessions(id) ON DELETE SET NULL,
+  reader_type text NOT NULL CHECK (reader_type IN ('owner', 'project', 'session', 'agent')),
+  reader_id text NOT NULL,
+  query text NOT NULL,
+  algorithm text NOT NULL,
+  algorithm_version text NOT NULL,
+  query_embedding real[],
+  latency_ms integer NOT NULL CHECK (latency_ms >= 0),
+  reason_codes text[] NOT NULL DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE TABLE asm_agent.retrieval_candidates (
+  decision_id uuid NOT NULL REFERENCES asm_agent.retrieval_decisions(id) ON DELETE CASCADE,
+  memory_id uuid NOT NULL REFERENCES asm_agent.memory_records(id) ON DELETE CASCADE,
+  revision integer NOT NULL,
+  rank integer NOT NULL CHECK (rank > 0),
+  score double precision NOT NULL CHECK (score >= 0 AND score <= 1),
+  selected boolean NOT NULL,
+  eligible boolean NOT NULL DEFAULT true,
+  reason_codes text[] NOT NULL DEFAULT '{}',
+  PRIMARY KEY (decision_id, memory_id),
+  UNIQUE (decision_id, rank),
+  FOREIGN KEY (memory_id, revision)
+    REFERENCES asm_agent.memory_revisions(memory_id, revision) ON DELETE CASCADE
+);
+
+CREATE TABLE asm_agent.retrieval_feedback (
+  id uuid PRIMARY KEY,
+  decision_id uuid NOT NULL REFERENCES asm_agent.retrieval_decisions(id) ON DELETE CASCADE,
+  target_memory_id uuid REFERENCES asm_agent.memory_records(id) ON DELETE SET NULL,
+  rating text NOT NULL CHECK (rating IN ('positive', 'negative', 'correction')),
+  comment text,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE TABLE asm_agent.memory_erasure_jobs (
+  id uuid PRIMARY KEY,
+  memory_id uuid NOT NULL,
+  status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'running', 'completed', 'failed')),
+  attempts integer NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+  requested_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  completed_at timestamptz,
+  last_error text
+);
+
+CREATE UNIQUE INDEX memory_erasure_one_open_idx ON asm_agent.memory_erasure_jobs(memory_id)
+  WHERE status IN ('pending', 'running');

package/migrations/0003_evidence_cleanup.sql

@@ -0,0 +1,6 @@
+ALTER TABLE asm_agent.memory_revision_evidence
+  DROP CONSTRAINT memory_revision_evidence_evidence_id_fkey;
+
+ALTER TABLE asm_agent.memory_revision_evidence
+  ADD CONSTRAINT memory_revision_evidence_evidence_id_fkey
+  FOREIGN KEY (evidence_id) REFERENCES asm_agent.evidence_snapshots(id) ON DELETE CASCADE;

package/migrations/0004_governance.sql

@@ -0,0 +1,61 @@
+CREATE TABLE asm_agent.parsed_intents (
+  id uuid PRIMARY KEY,
+  owner_id uuid NOT NULL REFERENCES asm_agent.owners(id) ON DELETE CASCADE,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  session_id uuid REFERENCES asm_agent.sessions(id) ON DELETE SET NULL,
+  contract_major integer NOT NULL,
+  contract_minor integer NOT NULL,
+  operation text NOT NULL CHECK (operation IN ('diagnose','read','write','execute','communicate','deploy','purchase','delete')),
+  resources text[] NOT NULL,
+  external_effect boolean NOT NULL,
+  idempotency_key text,
+  arguments jsonb NOT NULL,
+  parser_id text NOT NULL,
+  parser_version text NOT NULL,
+  model_provider text,
+  model_id text,
+  requested_at timestamptz NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  CHECK (NOT external_effect OR idempotency_key IS NOT NULL)
+);
+
+CREATE TABLE asm_agent.policy_decisions (
+  id uuid PRIMARY KEY,
+  intent_id uuid NOT NULL REFERENCES asm_agent.parsed_intents(id) ON DELETE CASCADE,
+  outcome text NOT NULL CHECK (outcome IN ('allow','deny','require_approval')),
+  reason_codes text[] NOT NULL,
+  required_approvals text[] NOT NULL DEFAULT '{}',
+  policy_version text NOT NULL,
+  decided_at timestamptz NOT NULL,
+  CHECK (cardinality(reason_codes) > 0)
+);
+
+CREATE TABLE asm_agent.approval_grants (
+  id uuid PRIMARY KEY,
+  decision_id uuid NOT NULL REFERENCES asm_agent.policy_decisions(id) ON DELETE CASCADE,
+  approval_type text NOT NULL,
+  granted_by text NOT NULL,
+  scope_hash text NOT NULL CHECK (scope_hash ~ '^[a-f0-9]{64}$'),
+  granted_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  expires_at timestamptz,
+  consumed_at timestamptz,
+  UNIQUE (decision_id, approval_type)
+);
+
+CREATE TABLE asm_agent.governed_executions (
+  id uuid PRIMARY KEY,
+  intent_id uuid NOT NULL REFERENCES asm_agent.parsed_intents(id) ON DELETE CASCADE,
+  decision_id uuid NOT NULL REFERENCES asm_agent.policy_decisions(id) ON DELETE RESTRICT,
+  idempotency_scope text NOT NULL,
+  idempotency_key text NOT NULL,
+  request_hash text NOT NULL CHECK (request_hash ~ '^[a-f0-9]{64}$'),
+  status text NOT NULL CHECK (status IN ('started','completed','failed','unknown_external_outcome')),
+  result jsonb,
+  error jsonb,
+  started_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  completed_at timestamptz,
+  UNIQUE (idempotency_scope, idempotency_key)
+);
+
+CREATE INDEX parsed_intents_project_created_idx ON asm_agent.parsed_intents(project_id, created_at DESC);
+CREATE INDEX policy_decisions_intent_idx ON asm_agent.policy_decisions(intent_id, decided_at DESC);

package/migrations/0005_asm_models.sql

@@ -0,0 +1,64 @@
+CREATE TABLE asm_agent.inference_manifests (
+  id uuid PRIMARY KEY,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  backend text NOT NULL CHECK (backend IN ('deterministic','vector','causal_head','dual_asm')),
+  model_id text NOT NULL,
+  model_version text NOT NULL,
+  artifact_digest text CHECK (artifact_digest ~ '^[a-f0-9]{64}$'),
+  contract_majors jsonb NOT NULL,
+  parameters jsonb NOT NULL,
+  created_at timestamptz NOT NULL,
+  UNIQUE (project_id, model_id, model_version)
+);
+
+CREATE TABLE asm_agent.model_state_snapshots (
+  id uuid PRIMARY KEY,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  session_id uuid NOT NULL REFERENCES asm_agent.sessions(id) ON DELETE CASCADE,
+  manifest_id uuid REFERENCES asm_agent.inference_manifests(id) ON DELETE RESTRICT,
+  backend text NOT NULL CHECK (backend IN ('causal_head','dual_asm')),
+  sequence bigint NOT NULL CHECK (sequence >= 0),
+  state jsonb NOT NULL,
+  digest text NOT NULL CHECK (digest ~ '^[a-f0-9]{64}$'),
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  UNIQUE (session_id, backend, sequence),
+  UNIQUE (session_id, backend, digest)
+);
+
+CREATE TABLE asm_agent.retrieval_experiments (
+  id uuid PRIMARY KEY,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  manifest_id uuid NOT NULL REFERENCES asm_agent.inference_manifests(id) ON DELETE RESTRICT,
+  baseline_backend text NOT NULL CHECK (baseline_backend IN ('lexical-v1','vector-l2-v1')),
+  candidate_backend text NOT NULL CHECK (candidate_backend IN ('causal-head-v1','dual-asm-v1')),
+  mode text NOT NULL DEFAULT 'shadow' CHECK (mode IN ('shadow','candidate','promoted','rejected')),
+  fixture_digest text NOT NULL CHECK (fixture_digest ~ '^[a-f0-9]{64}$'),
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  updated_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE TABLE asm_agent.retrieval_evaluations (
+  id uuid PRIMARY KEY,
+  experiment_id uuid NOT NULL REFERENCES asm_agent.retrieval_experiments(id) ON DELETE CASCADE,
+  metrics jsonb NOT NULL,
+  thresholds jsonb NOT NULL,
+  passed boolean NOT NULL,
+  evaluated_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE TABLE asm_agent.retrieval_configurations (
+  project_id uuid PRIMARY KEY REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  primary_backend text NOT NULL DEFAULT 'lexical-v1',
+  primary_manifest_id uuid REFERENCES asm_agent.inference_manifests(id) ON DELETE RESTRICT,
+  shadow_backend text,
+  shadow_manifest_id uuid REFERENCES asm_agent.inference_manifests(id) ON DELETE RESTRICT,
+  previous_backend text,
+  previous_manifest_id uuid REFERENCES asm_agent.inference_manifests(id) ON DELETE RESTRICT,
+  revision bigint NOT NULL DEFAULT 1 CHECK (revision > 0),
+  updated_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE INDEX model_state_session_latest_idx
+  ON asm_agent.model_state_snapshots(session_id, backend, sequence DESC);
+CREATE INDEX retrieval_experiments_project_idx
+  ON asm_agent.retrieval_experiments(project_id, created_at DESC);

package/migrations/0006_knowledge_workflows.sql

@@ -0,0 +1,82 @@
+CREATE TABLE asm_agent.knowledge_sources (
+  id uuid PRIMARY KEY,
+  owner_id uuid NOT NULL REFERENCES asm_agent.owners(id) ON DELETE CASCADE,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  kind text NOT NULL CHECK (kind IN ('document','website','api')),
+  uri text NOT NULL,
+  host text,
+  status text NOT NULL CHECK (status IN ('pending_approval','approved','paused','revoked')),
+  crawl_policy jsonb NOT NULL DEFAULT '{}',
+  approved_by text,
+  approved_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  UNIQUE (project_id, uri)
+);
+
+CREATE TABLE asm_agent.ingestion_items (
+  id uuid PRIMARY KEY,
+  source_id uuid NOT NULL REFERENCES asm_agent.knowledge_sources(id) ON DELETE CASCADE,
+  evidence_id uuid REFERENCES asm_agent.evidence_snapshots(id) ON DELETE SET NULL,
+  memory_id uuid REFERENCES asm_agent.memory_records(id) ON DELETE SET NULL,
+  source_uri text NOT NULL,
+  content_digest text NOT NULL CHECK (content_digest ~ '^[a-f0-9]{64}$'),
+  status text NOT NULL CHECK (status IN ('pending_moderation','accepted','rejected','revoked')),
+  moderation_reason text,
+  metadata jsonb NOT NULL DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  moderated_at timestamptz,
+  UNIQUE (source_id, content_digest)
+);
+
+CREATE TABLE asm_agent.durable_workflows (
+  id uuid PRIMARY KEY,
+  owner_id uuid NOT NULL REFERENCES asm_agent.owners(id) ON DELETE CASCADE,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  session_id uuid REFERENCES asm_agent.sessions(id) ON DELETE SET NULL,
+  kind text NOT NULL CHECK (kind IN ('ingestion','research','evaluation','learning')),
+  status text NOT NULL CHECK (status IN ('pending','waiting_approval','running','completed','failed','cancelled')),
+  input jsonb NOT NULL,
+  result jsonb,
+  approval_scope_hash text CHECK (approval_scope_hash IS NULL OR approval_scope_hash ~ '^[a-f0-9]{64}$'),
+  approved_by text,
+  approved_at timestamptz,
+  available_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  locked_by text,
+  locked_until timestamptz,
+  fencing_token bigint NOT NULL DEFAULT 0,
+  attempts integer NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  completed_at timestamptz
+);
+
+CREATE TABLE asm_agent.workflow_events (
+  workflow_id uuid NOT NULL REFERENCES asm_agent.durable_workflows(id) ON DELETE CASCADE,
+  sequence bigint GENERATED ALWAYS AS IDENTITY,
+  event_type text NOT NULL,
+  payload jsonb NOT NULL DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  PRIMARY KEY (workflow_id, sequence)
+);
+
+CREATE TABLE asm_agent.local_agent_handoffs (
+  id uuid PRIMARY KEY,
+  owner_id uuid NOT NULL REFERENCES asm_agent.owners(id) ON DELETE CASCADE,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  from_session_id uuid NOT NULL REFERENCES asm_agent.sessions(id) ON DELETE CASCADE,
+  to_session_id uuid NOT NULL REFERENCES asm_agent.sessions(id) ON DELETE CASCADE,
+  from_agent_id text NOT NULL,
+  to_agent_id text NOT NULL,
+  status text NOT NULL CHECK (status IN ('offered','accepted','rejected','completed','cancelled')),
+  objective text NOT NULL,
+  payload jsonb NOT NULL DEFAULT '{}',
+  evidence_ids uuid[] NOT NULL DEFAULT '{}',
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+  accepted_at timestamptz,
+  completed_at timestamptz,
+  CHECK (from_session_id <> to_session_id)
+);
+
+CREATE INDEX knowledge_sources_scope_idx ON asm_agent.knowledge_sources(owner_id, project_id, status);
+CREATE INDEX ingestion_items_source_status_idx ON asm_agent.ingestion_items(source_id, status, created_at);
+CREATE INDEX durable_workflows_claim_idx ON asm_agent.durable_workflows(status, available_at, locked_until);
+CREATE INDEX local_agent_handoffs_target_idx ON asm_agent.local_agent_handoffs(project_id, to_agent_id, status);

package/migrations/0007_asm_cm_runtime.sql

@@ -0,0 +1,28 @@
+ALTER TABLE asm_agent.inference_manifests
+  DROP CONSTRAINT inference_manifests_backend_check,
+  ADD CONSTRAINT inference_manifests_backend_check
+    CHECK (backend IN ('deterministic','vector','causal_head','dual_asm','asm_cm'));
+
+ALTER TABLE asm_agent.retrieval_experiments
+  DROP CONSTRAINT retrieval_experiments_candidate_backend_check,
+  ADD CONSTRAINT retrieval_experiments_candidate_backend_check
+    CHECK (candidate_backend IN ('causal-head-v1','dual-asm-v1','asm-cm-v1'));
+
+CREATE TABLE asm_agent.asm_runtime_observations (
+  id uuid PRIMARY KEY,
+  owner_id uuid NOT NULL REFERENCES asm_agent.owners(id) ON DELETE CASCADE,
+  project_id uuid NOT NULL REFERENCES asm_agent.projects(id) ON DELETE CASCADE,
+  session_id uuid NOT NULL REFERENCES asm_agent.sessions(id) ON DELETE CASCADE,
+  manifest_id uuid NOT NULL REFERENCES asm_agent.inference_manifests(id) ON DELETE RESTRICT,
+  mode text NOT NULL DEFAULT 'shadow' CHECK (mode = 'shadow'),
+  input_digest text NOT NULL CHECK (input_digest ~ '^[a-f0-9]{64}$'),
+  vector_count integer NOT NULL CHECK (vector_count > 0),
+  dimensions integer NOT NULL CHECK (dimensions > 0),
+  latency_ms integer NOT NULL CHECK (latency_ms >= 0),
+  succeeded boolean NOT NULL,
+  error_code text,
+  created_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+
+CREATE INDEX asm_runtime_observations_session_idx
+  ON asm_agent.asm_runtime_observations(session_id, created_at DESC);

package/migrations/0008_promotion_security.sql

@@ -0,0 +1,8 @@
+ALTER TABLE asm_agent.retrieval_evaluations
+  ADD COLUMN seed integer,
+  ADD COLUMN workload_digest text
+    CHECK (workload_digest IS NULL OR workload_digest ~ '^[a-f0-9]{64}$');
+
+CREATE INDEX retrieval_evaluations_confirmation_idx
+  ON asm_agent.retrieval_evaluations(experiment_id, passed, workload_digest)
+  WHERE seed IS NOT NULL AND workload_digest IS NOT NULL;