@flowdular/sdk 0.1.0

package/.ai/blueprints/security-review/examples/invalid/plan-finding-without-scenario.json

@@ -0,0 +1,14 @@
+{
+	"blueprint": "security-review@1.0.0",
+	"checksRun": ["grep -rn \"new ServerRoute\" modules/inventory/src"],
+	"findings": [
+		{
+			"severity": "blocker",
+			"claim": "Looks unsafe.",
+			"location": "modules/inventory/src/api/endpoints.ts",
+			"rule": "AGENTS.md rule 5",
+			"fix": "Rewrite it."
+		}
+	],
+	"verdict": "changes-required"
+}

package/.ai/blueprints/security-review/examples/valid/input.json

@@ -0,0 +1,4 @@
+{
+	"kind": "module",
+	"target": "inventory.core"
+}

package/.ai/blueprints/security-review/examples/valid/plan.json

@@ -0,0 +1,19 @@
+{
+	"blueprint": "security-review@1.0.0",
+	"checksRun": [
+		"grep -rn \"new ServerRoute\" modules/inventory/src",
+		"grep -rn tenantId modules/inventory/src/api",
+		"pnpm --filter @flowdular/module-inventory test"
+	],
+	"findings": [
+		{
+			"severity": "blocker",
+			"claim": "Tenant id is read from the request body.",
+			"location": "modules/inventory/src/api/endpoints.ts:41",
+			"scenario": "A member of tenant A posts { tenantId: \"B\" } and creates a location in tenant B.",
+			"rule": "AGENTS.md rule 6",
+			"fix": "Use principalFromContext(octane)!.tenantId and remove the body field."
+		}
+	],
+	"verdict": "changes-required"
+}

package/.ai/blueprints/security-review/gates.yaml

@@ -0,0 +1,22 @@
+schemaVersion: 1
+# Read-only checks. Nothing executes this file.
+gates:
+  - id: raw-routes
+    command: grep -rn "new ServerRoute" modules/*/src | grep -v modules/auth
+    expect: no output
+    required: true
+  - id: tenant-from-input
+    command: grep -rn tenantId modules/*/src/api | grep -v principalFromContext
+    expect: no output
+    required: true
+  - id: unbounded-body
+    command: grep -rn "request.json()" modules/*/src
+    expect: no output outside modules/auth and modules/users
+    required: true
+  - id: public-endpoints
+    command: 'grep -rn "kind: ''public''" modules/*/src'
+    expect: each hit has a written reason
+    required: true
+  - id: tests
+    command: pnpm --filter @flowdular/module-{module} test
+    required: true

package/.ai/blueprints/security-review/input.schema.json

@@ -0,0 +1,20 @@
+{
+	"$schema": "https://json-schema.org/draft/2020-12/schema",
+	"type": "object",
+	"additionalProperties": false,
+	"required": ["kind", "target"],
+	"properties": {
+		"kind": {
+			"type": "string",
+			"enum": ["module", "package", "pull-request"]
+		},
+		"target": {
+			"type": "string",
+			"minLength": 1
+		},
+		"diffRef": {
+			"type": "string",
+			"minLength": 1
+		}
+	}
+}

package/.ai/blueprints/security-review/plan.schema.json

@@ -0,0 +1,65 @@
+{
+	"$schema": "https://json-schema.org/draft/2020-12/schema",
+	"type": "object",
+	"additionalProperties": false,
+	"required": ["blueprint", "checksRun", "findings", "verdict"],
+	"properties": {
+		"blueprint": {
+			"const": "security-review@1.0.0"
+		},
+		"checksRun": {
+			"type": "array",
+			"minItems": 1,
+			"items": {
+				"type": "string",
+				"minLength": 1
+			},
+			"uniqueItems": true
+		},
+		"findings": {
+			"type": "array",
+			"items": {
+				"type": "object",
+				"additionalProperties": false,
+				"required": [
+					"severity",
+					"claim",
+					"location",
+					"scenario",
+					"rule",
+					"fix"
+				],
+				"properties": {
+					"severity": {
+						"type": "string",
+						"enum": ["blocker", "should-fix", "taste"]
+					},
+					"claim": {
+						"type": "string",
+						"minLength": 1
+					},
+					"location": {
+						"type": "string",
+						"minLength": 1
+					},
+					"scenario": {
+						"type": "string",
+						"minLength": 1
+					},
+					"rule": {
+						"type": "string",
+						"minLength": 1
+					},
+					"fix": {
+						"type": "string",
+						"minLength": 1
+					}
+				}
+			}
+		},
+		"verdict": {
+			"type": "string",
+			"enum": ["approved", "changes-required"]
+		}
+	}
+}

package/.ai/blueprints/security-review/required-files.yaml

@@ -0,0 +1,6 @@
+schemaVersion: 1
+required: []
+evidence:
+  - the exact grep commands run and their output
+  - the test commands run and their result
+  - one entry per finding with severity, claim, location, scenario, rule, fix

package/.ai/blueprints/security-review/spec-requirements.yaml

@@ -0,0 +1,9 @@
+schemaVersion: 1
+# A review changes no spec. It checks that the spec and the code agree.
+status:
+  allowed:
+    - approved
+checks:
+  - permissions[].id equal the constants in src/acl/permissions.ts
+  - every endpoint permission appears in the spec
+  - a denial scenario and a tenant isolation scenario exist

package/.ai/blueprints/security-review/steps.yaml

@@ -0,0 +1,38 @@
+schemaVersion: 1
+steps:
+  - id: surface
+    role: reviewer
+    action: List every route in src/api/endpoints.ts and check access, resolveIdentity, sessionMutationDenial order, readJsonObject bounds, tenant source, bound SQL, error envelope.
+    inputs:
+      - 'target'
+    outputs:
+      - 'endpoint table'
+  - id: scopes
+    role: reviewer
+    action: Compare spec permissions, src/acl/permissions.ts, endpoint access and client scope; check whether auth sync-scopes is part of the landing.
+    inputs:
+      - 'spec/module.yaml'
+      - 'src/acl/permissions.ts'
+    outputs:
+      - 'scope findings'
+  - id: greps
+    role: reviewer
+    action: Run the greps in .ai/skills/auth-security-review/SKILL.md section 5 and record the output.
+    inputs:
+      - 'target'
+    outputs:
+      - 'grep evidence'
+  - id: tests
+    role: reviewer
+    action: Confirm the 401, 403, cross-tenant, CSRF and validation tests exist and fail when their guard is removed.
+    inputs:
+      - 'tests/'
+    outputs:
+      - 'test evidence'
+  - id: report
+    role: reviewer
+    action: Findings by severity with a concrete failure scenario each; verdict approved or changes-required; no code changes.
+    inputs:
+      - 'evidence'
+    outputs:
+      - 'review report'

package/.ai/policies/capabilities.yaml

@@ -0,0 +1,164 @@
+schemaVersion: 1
+# What the CLI actually exposes and how the runner gates it. Consumed by nobody:
+# packages/cli/src/doctor.ts only checks that this file exists
+# (policy.capabilities). The real policy is code: core descriptors in
+# packages/cli/src/capabilities.ts, module descriptors in each
+# modules/*/src/cli/commands.json, approval logic in packages/cli/src/runner.ts
+# (runExtensionCommand). Keep this file in step with those three places.
+default: deny
+
+# packages/cli/src/capabilities.ts
+core:
+  module.search:
+    command: pnpm flowdular module search [query]
+    risk: read
+    note: host-only official HTTPS catalog lookup; does not grant sandbox network access
+  module.info:
+    command: pnpm flowdular module info <id>
+    risk: read
+  module.install:
+    command: pnpm flowdular module install <id[@version]> [--apply]
+    risk: workspace-write
+    supportsDryRun: true
+    note: host-only source installation; no scripts, activation, permissions or database changes
+  module.update:
+    command: pnpm flowdular module update <id[@version]> [--apply]
+    risk: workspace-write
+    supportsDryRun: true
+    note: rejects local edits, changed historical migrations and downgrades
+  module.recover:
+    command: pnpm flowdular module recover [--apply]
+    risk: workspace-write
+    supportsDryRun: true
+    note: requires the original installation process to have exited
+  workspace.doctor:
+    command: pnpm flowdular doctor
+    risk: read
+  spec.validate:
+    command: pnpm flowdular spec validate --all
+    risk: read
+  blueprint.validate:
+    command: pnpm flowdular blueprint validate --all
+    risk: read
+    note: validates every .ai/blueprints/*/blueprint.json and checks the companion files exist
+  module.validate:
+    command: pnpm flowdular module validate
+    risk: read
+    note: 'schema plus composition entries (PLATFORM_SERVER_ENTRY_MISSING, PLATFORM_EXPORT_MISSING, PLATFORM_CLIENT_ENTRY_MISSING, PLATFORM_CLIENT_EXPORT_MISSING), PACKAGE_NAME_MISMATCH, SPEC_ID_MISMATCH, TRANSLATION_FILE_MISSING, TRANSLATION_KEYS_MISMATCH; warnings SPEC_VERSION_DRIFT, LOCALE_NOT_IN_PROJECT (packages/cli/src/module-validate.ts)'
+  module.create:
+    command: pnpm flowdular module new <id> --spec <path> [--apply]
+    risk: workspace-write
+    requiresApprovedSpec: true
+    supportsDryRun: true
+  migration.status:
+    command: pnpm flowdular migration status [--module <id>] [--json]
+    risk: read
+    note: 'per module database, each migration is applied, adopted (its objects already exist, so the runner will only record it), pending, or mismatch; fails with MIGRATION_CHECKSUM_MISMATCH when an applied migration was edited (packages/cli/src/migration.ts)'
+  migration.verify:
+    command: pnpm flowdular migration verify
+    risk: read
+    note: 'checks every ledger row against the checksum of the migration in the workspace; failure code MIGRATION_LEDGER_INVALID with mismatched and unknown ids per module'
+  migration.apply.local:
+    command: pnpm flowdular migration apply --module <id> [--apply]
+    risk: process
+    localOnly: true
+    supportsDryRun: true
+    effect: applies or adopts the outstanding migrations of one module against the configured PostgreSQL (embedded PGlite outside production) and writes the _coreloom_migrations_v2 ledger; without --apply it reports the plan and writes nothing
+  workspace.state.migrate:
+    command: pnpm flowdular setup migrate-state [--apply --confirm migrate-legacy-state]
+    risk: destructive
+    localOnly: true
+    confirmation: migrate-legacy-state
+    supportsDryRun: true
+    effect: copies recognized pre-Flowdular databases and vault keys into .flowdular/data, verifies their hashes, and preserves every source file; refuses links, collisions, and database sidecar files
+
+# Commands dispatched by packages/cli/src/runner.ts without a capability descriptor.
+commandsWithoutDescriptor:
+  - pnpm flowdular help
+  - pnpm flowdular capability list|describe <id>|run <id>
+  - pnpm flowdular blueprint list
+  - pnpm flowdular module list
+  - pnpm flowdular module sync [--apply]
+  - pnpm flowdular module enable <id> [--apply] (with --apply also runs auth.scopes.sync; result field scopes, failure code MODULE_SCOPES_SYNC_FAILED)
+  - pnpm flowdular module disable <id> [--apply]
+  - pnpm flowdular setup check
+  - pnpm flowdular setup quick (alias of auth.greenfield.reset)
+
+# modules/*/src/cli/commands.json, loaded only for modules enabled in flowdular.json
+modules:
+  auth.core:
+    auth.scopes.list:
+      command: pnpm flowdular auth scopes
+      risk: read
+    auth.scopes.sync:
+      command: pnpm flowdular auth sync-scopes --module <id> [--apply]
+      risk: process
+      supportsDryRun: true
+      effect: grants the module spec permissions to every tenant owner in the auth database
+    auth.greenfield.reset:
+      command: pnpm flowdular auth greenfield --apply --confirm reset-local-auth
+      risk: destructive
+      localOnly: true
+      confirmation: reset-local-auth
+      supportsDryRun: true
+      effect: resets .flowdular/data/auth.db and seeds demo tenants and accounts
+  agents.core:
+    agents.status:
+      command: pnpm flowdular agents status
+      risk: read
+    agents.audit.verify:
+      command: pnpm flowdular agents audit-verify --tenant <id>
+      risk: read
+      localOnly: true
+  sandbox.core:
+    sandbox.access.list:
+      command: pnpm flowdular sandbox access
+      risk: read
+    sandbox.access.grant:
+      command: pnpm flowdular sandbox grant [--apply]
+      risk: process
+      supportsDryRun: true
+    sandbox.access.revoke:
+      command: pnpm flowdular sandbox revoke [--apply]
+      risk: process
+      supportsDryRun: true
+    sandbox.sessions.list:
+      command: pnpm flowdular sandbox sessions
+      risk: read
+    sandbox.sessions.archive:
+      command: pnpm flowdular sandbox session-archive [--apply]
+      risk: process
+      supportsDryRun: true
+    sandbox.sessions.delete:
+      command: pnpm flowdular sandbox session-delete [--apply]
+      risk: process
+      supportsDryRun: true
+    sandbox.audit.verify:
+      command: pnpm flowdular sandbox audit-verify --tenant <id>
+      risk: read
+      localOnly: true
+
+# packages/cli/src/runner.ts, runExtensionCommand, in evaluation order.
+approvals:
+  external: refused with APPROVAL_VERIFIER_REQUIRED (no signed approval verifier exists)
+  destructive-not-local: refused with APPROVAL_VERIFIER_REQUIRED
+  localOnly: refused with LOCAL_ONLY_CAPABILITY unless FD_ENV or NODE_ENV is development or test (unset counts as development)
+  requiresApprovedSpec: needs --spec <path>; APPROVED_SPEC_REQUIRED, SPEC_VALIDATION_FAILED or SPEC_NOT_APPROVED otherwise
+  destructive-apply: --apply needs --confirm <descriptor.confirmation>; CONFIRMATION_REQUIRED otherwise
+  non-read-without-dry-run: EXPLICIT_APPLY_REQUIRED without --apply
+  dry-run: non-read with supportsDryRun and no --apply runs with apply=false and warns "Dry run only. No writes were authorized."
+
+moduleExtensions:
+  discovery: module.json cli.catalog (src/cli/commands.json), schema-validated without executing code
+  loadImplementation: module.json cli.entry imported only when the command runs (packages/cli/src/extensions.ts loadCliCommand)
+  namespace: first segment of the module id; reserved groups help, doctor, capability, spec, blueprint, module, migration, setup
+  metadataIdentical: path and capability object must equal the catalog entry
+  requireEnabledModule: true
+
+# Planned, no code today. Listed so nobody documents them as available.
+planned:
+  - migration.plan (served by "migration apply" without --apply, which is a read-only dry run)
+  - migration.apply.remote
+  - destructive.execute (signed approval receipts)
+  - redaction of *_TOKEN, *_SECRET, *_PASSWORD, DATABASE_URL in a shared logger (only packages/ai-provider/src/errors.ts redactSecrets exists)
+  - persisted CLI audit (CommandEnvelope carries a random auditId and evidence per invocation; nothing stores it)

package/.ai/policies/model-routing.yaml

@@ -0,0 +1,72 @@
+schemaVersion: 1
+# Consumed by nobody: packages/cli/src/doctor.ts checks that the file exists
+# (policy.model-routing). The sandbox decides drivers, models and roles in code:
+# - driver per session, changeable per turn (packages/sandbox/src/server/routes.ts)
+# - model from the session (session.model) or the driver default
+#   (packages/sandbox/src/server/turns.ts, packages/coding-agent/src/drivers/*)
+# - role per turn by deterministic rules (packages/sandbox/src/server/planning.ts
+#   routeRole, planHandoff), overridable for one turn in the composer
+# This file documents that behaviour so nobody expects a policy engine.
+
+drivers:
+  claude-code:
+    binary: claude
+    modes: [loopback]
+    tools: [Read, Write, Edit, Glob, Grep]
+    commands: never (no Bash tool; gates run by the sandbox)
+    source: packages/coding-agent/src/drivers/claude-code.ts
+  codex:
+    binary: codex
+    modes: [loopback]
+    sandbox: workspace-write
+    commands: possible inside the workspace; the role contract forbids it but only the sandbox filesystem boundary enforces it
+    source: packages/coding-agent/src/drivers/codex.ts
+  byok:
+    modes: [loopback, self-hosted]
+    kinds: [anthropic, openai, azure, openai-compatible, vercel]
+    tools: sandbox-owned file tools (list 400 files, read 128 KB per file)
+    commands: never
+    source: packages/coding-agent/src/drivers/byok.ts, packages/ai-provider/src/catalog.ts
+
+# Profiles referenced by .ai/blueprints/*/blueprint.json executorProfiles.
+profiles:
+  sandbox-specialist:
+    runs: one of the five roles in .ai/agents/sandbox on the session driver
+    mayApproveSpecs: false
+    mayChangeArchitecture: false
+    mayRunCommands: false
+    landing: eject
+  repo-agent:
+    runs: .ai/agents/module-executor.md or spec-author.md in a checkout with a shell (RuleSync generates each driver's root instructions from .ai/rules)
+    mayApproveSpecs: false
+    mayChangeArchitecture: only through core-extend with an ADR
+    mayRunCommands: true
+    landing: pnpm verify, pull request
+  reviewer:
+    runs: .ai/agents/reviewer.md
+    mayImplement: false
+    output: findings by severity, verdict
+
+# Who takes the first sandbox turn (planning.ts classifyByRules) and how the
+# next role is chosen (planHandoff): the HANDOFF line when it names a
+# registered role, otherwise routeRole by module state, and a failed gate
+# always returns to the same role.
+routing:
+  new-module: business-manager
+  edit-module: business-manager
+  spec-words: business-manager
+  agent-words: agentic-engineer
+  ui-words: frontend-engineer when src/client/contribution.tsrx exists, else ux-designer
+  no-server: backend-engineer
+  no-client: frontend-engineer
+  default: backend-engineer
+
+enforced:
+  - gates listed in a role's front matter plus dependencies, per draft module (turns.ts runSessionGates)
+  - HANDOFF line parsing (packages/coding-agent/src/roles/handoff.ts) and the role's handoff list (planning.ts; self-handoff and roles outside the list fall back to state routing)
+  - approval stop for every new or edited module until the current specification matches the operator-approved SHA-256 hash
+  - writes outside the active role allowedPaths are quarantined and restored before gates, checkpoints, preview or delivery
+  - message length 1 to 20000 characters, brief at least 8 characters
+  - at most four chained automatic turns per operator message (session chainDepth)
+notEnforced:
+  - model choice per role (one model per session)

package/.ai/policies/path-ownership.yaml

@@ -0,0 +1,65 @@
+schemaVersion: 1
+# Consumed by nobody (zero references under packages/). Review guidance: who
+# answers for a path and which role may write it.
+owners:
+  packages/contracts/**: platform-architecture
+  packages/kernel/**: platform-architecture
+  packages/server/**: platform-runtime
+  packages/client/**: platform-ui
+  packages/ui/**: platform-ui
+  packages/dev-console/**: platform-ui
+  packages/cli/**: platform-tooling
+  packages/cli-protocol/**: platform-tooling
+  packages/sandbox/**: sandbox-runtime
+  packages/coding-agent/**: sandbox-runtime
+  packages/ai-provider/**: agent-runtime
+  packages/harness/**: agent-runtime
+  modules/auth/**: platform-runtime
+  modules/system/**: platform-architecture
+  modules/users/**: platform-runtime
+  modules/agents/**: agent-runtime
+  modules/sandbox/**: sandbox-runtime
+  modules/{module}/**: module:{module}
+  platform/**: platform-composition
+  infra/**: platform-operations
+  .github/**: platform-operations
+  docs/**: platform-architecture
+  specs/**: platform-architecture
+  .ai/**: platform-architecture
+  rulesync.jsonc: platform-architecture
+  AGENTS.md: generated
+  CLAUDE.md: generated
+  .agents/skills/**: generated
+  .claude/skills/**: generated
+# Inside a module built or changed in the sandbox, the role front matter in
+# .ai/agents/sandbox/*.md says who writes what. Advisory at run time.
+moduleRoles:
+  modules/{module}/spec/**: [business-manager, agentic-engineer]
+  modules/{module}/translations/**: [business-manager]
+  modules/{module}/src/acl/**: [backend-engineer]
+  modules/{module}/src/api/**: [backend-engineer]
+  modules/{module}/src/server/**: [backend-engineer]
+  modules/{module}/src/services/**: [backend-engineer]
+  modules/{module}/src/domain/**: [backend-engineer]
+  modules/{module}/src/platform.ts: [backend-engineer, agentic-engineer]
+  modules/{module}/src/index.ts: [backend-engineer]
+  modules/{module}/migrations/**: [backend-engineer]
+  modules/{module}/src/client/**: [ux-designer, frontend-engineer]
+  modules/{module}/src/agent/**: [agentic-engineer]
+  modules/{module}/tests/**:
+    [backend-engineer, frontend-engineer, agentic-engineer]
+  modules/{module}/module.json: [backend-engineer, agentic-engineer]
+  modules/{module}/package.json:
+    [backend-engineer, frontend-engineer, agentic-engineer]
+cliOwned:
+  flowdular.json: pnpm flowdular module enable|disable --apply
+  platform/package.json: pnpm flowdular module enable --apply
+  platform/src/generated/**: pnpm flowdular module sync --apply
+  packages/coding-agent/src/roles/defaults.ts: role defaults sync script (.ai/README.md)
+  packages/ui/src/brand/mark.ts: node packages/ui/scripts/gen-mark.mjs
+  AGENTS.md: pnpm rules:generate
+  CLAUDE.md: pnpm rules:generate
+  .agents/skills/**: pnpm rules:generate
+  .claude/skills/**: pnpm rules:generate
+crossOwnerChanges:
+  requireReviewer: true

package/.ai/policies/task-budgets.yaml

@@ -0,0 +1,37 @@
+schemaVersion: 1
+# Consumed by nobody (zero references under packages/). The values are the
+# review expectation for a change; the sandbox enforces only the limits marked
+# as code.
+defaults:
+  maxChangedFiles: 18
+  maxRepairLoops: 2
+  maxNewDependencies: 0
+  requireTests: true
+  requireTypecheck: true
+overrides:
+  new-module:
+    maxChangedFiles: 30
+    maxNewDependencies: 0
+    note: a full module is about 25 files (.ai/references/catalog has 28 including migrations and translations)
+  edit-module:
+    maxChangedFiles: 12
+  add-migration:
+    maxChangedFiles: 8
+  bug-fix:
+    maxChangedFiles: 4
+    requireTests: true
+  author-spec:
+    maxChangedFiles: 1
+    requireTests: false
+  core-extend:
+    maxChangedFiles: 40
+    note: consumers migrate in the same change; count them
+sandbox:
+  code:
+    messageLength: 1 to 20000 characters (packages/sandbox/src/server/turns.ts)
+    briefLength: at least 8 characters (planning.ts assertBrief)
+    gateTimeout: 5 minutes per gate, output capped at 12000 characters (gates.ts)
+    gateFailure: the same role repairs; no automatic limit on repair turns
+    byokReads: 400 listed files, 128 KB per read (packages/coding-agent/src/drivers/byok.ts)
+  review:
+    chainedTurns: stop and read the transcript after four automatic handoffs on one brief

package/.ai/references/catalog/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Flowdular contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/.ai/references/catalog/migrations/0001_catalog_core.down.sql

@@ -0,0 +1,2 @@
+DROP POLICY IF EXISTS catalog_items_tenant_policy ON catalog_items;
+DROP TABLE IF EXISTS catalog_items;

package/.ai/references/catalog/migrations/0001_catalog_core.up.sql

@@ -0,0 +1,21 @@
+CREATE TABLE IF NOT EXISTS catalog_items (
+  id TEXT PRIMARY KEY,
+  tenant_id TEXT NOT NULL,
+  sku TEXT NOT NULL,
+  sku_normalized TEXT NOT NULL,
+  name TEXT NOT NULL,
+  kind TEXT NOT NULL CHECK (kind IN ('product', 'service')),
+  unit TEXT NOT NULL,
+  base_price_minor BIGINT NOT NULL CHECK (base_price_minor >= 0),
+  currency TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('active', 'archived')),
+  created_at BIGINT NOT NULL,
+  UNIQUE (tenant_id, sku_normalized)
+);
+CREATE INDEX IF NOT EXISTS catalog_items_tenant_sku_idx
+  ON catalog_items (tenant_id, sku_normalized, id);
+ALTER TABLE catalog_items ENABLE ROW LEVEL SECURITY;
+ALTER TABLE catalog_items FORCE ROW LEVEL SECURITY;
+CREATE POLICY catalog_items_tenant_policy ON catalog_items
+  USING (tenant_id = current_setting('coreloom.tenant_id', true))
+  WITH CHECK (tenant_id = current_setting('coreloom.tenant_id', true));

package/.ai/references/catalog/migrations/0002_catalog_history.down.sql

@@ -0,0 +1,3 @@
+DROP POLICY IF EXISTS catalog_items_history_tenant_policy ON catalog_items_history;
+DROP INDEX IF EXISTS catalog_items_history_tenant_record_version_idx;
+DROP TABLE IF EXISTS catalog_items_history;

package/.ai/references/catalog/migrations/0002_catalog_history.up.sql

@@ -0,0 +1,20 @@
+CREATE TABLE IF NOT EXISTS catalog_items_history (
+  id TEXT PRIMARY KEY,
+  tenant_id TEXT NOT NULL,
+  record_id TEXT NOT NULL,
+  version BIGINT NOT NULL CHECK (version >= 1),
+  action TEXT NOT NULL CHECK (length(action) BETWEEN 1 AND 32),
+  actor_kind TEXT NOT NULL CHECK (actor_kind IN ('user', 'agent')),
+  actor_id TEXT NOT NULL CHECK (length(actor_id) BETWEEN 1 AND 128),
+  actor_label TEXT NOT NULL CHECK (length(actor_label) BETWEEN 1 AND 160),
+  run_id TEXT CHECK (run_id IS NULL OR length(run_id) BETWEEN 1 AND 128),
+  changes_json TEXT NOT NULL,
+  occurred_at BIGINT NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS catalog_items_history_tenant_record_version_idx
+  ON catalog_items_history (tenant_id, record_id, version DESC);
+ALTER TABLE catalog_items_history ENABLE ROW LEVEL SECURITY;
+ALTER TABLE catalog_items_history FORCE ROW LEVEL SECURITY;
+CREATE POLICY catalog_items_history_tenant_policy ON catalog_items_history
+  USING (tenant_id = current_setting('coreloom.tenant_id', true))
+  WITH CHECK (tenant_id = current_setting('coreloom.tenant_id', true));

package/.ai/references/catalog/migrations/0003_catalog_history_service_actors.down.sql

@@ -0,0 +1,3 @@
+DROP POLICY IF EXISTS catalog_items_history_v2_tenant_policy ON catalog_items_history_v2;
+DROP INDEX IF EXISTS catalog_items_history_v2_tenant_record_version_idx;
+DROP TABLE IF EXISTS catalog_items_history_v2;

package/.ai/references/catalog/migrations/0003_catalog_history_service_actors.up.sql

@@ -0,0 +1,36 @@
+CREATE TABLE IF NOT EXISTS catalog_items_history_v2 (
+  id TEXT PRIMARY KEY,
+  tenant_id TEXT NOT NULL,
+  record_id TEXT NOT NULL,
+  version BIGINT NOT NULL CHECK (version >= 1),
+  action TEXT NOT NULL CHECK (length(action) BETWEEN 1 AND 32),
+  actor_kind TEXT NOT NULL CHECK (actor_kind IN ('user', 'agent', 'service')),
+  actor_id TEXT NOT NULL CHECK (length(actor_id) BETWEEN 1 AND 128),
+  actor_label TEXT NOT NULL CHECK (length(actor_label) BETWEEN 1 AND 160),
+  run_id TEXT CHECK (run_id IS NULL OR length(run_id) BETWEEN 1 AND 128),
+  configured_by_json TEXT CHECK (configured_by_json IS NULL OR configured_by_json::jsonb IS NOT NULL),
+  changes_json TEXT NOT NULL,
+  occurred_at BIGINT NOT NULL,
+  CHECK (
+    (actor_kind = 'agent' AND run_id IS NOT NULL)
+    OR (actor_kind IN ('user', 'service') AND run_id IS NULL)
+  ),
+  CHECK (
+    (actor_kind = 'service' AND configured_by_json IS NOT NULL)
+    OR (actor_kind IN ('user', 'agent') AND configured_by_json IS NULL)
+  )
+);
+CREATE UNIQUE INDEX IF NOT EXISTS catalog_items_history_v2_tenant_record_version_idx
+  ON catalog_items_history_v2 (tenant_id, record_id, version DESC);
+INSERT INTO catalog_items_history_v2
+  (id, tenant_id, record_id, version, action, actor_kind, actor_id,
+   actor_label, run_id, configured_by_json, changes_json, occurred_at)
+SELECT id, tenant_id, record_id, version, action, actor_kind, actor_id,
+       actor_label, run_id, NULL, changes_json, occurred_at
+FROM catalog_items_history
+ON CONFLICT DO NOTHING;
+ALTER TABLE catalog_items_history_v2 ENABLE ROW LEVEL SECURITY;
+ALTER TABLE catalog_items_history_v2 FORCE ROW LEVEL SECURITY;
+CREATE POLICY catalog_items_history_v2_tenant_policy ON catalog_items_history_v2
+  USING (tenant_id = current_setting('coreloom.tenant_id', true))
+  WITH CHECK (tenant_id = current_setting('coreloom.tenant_id', true));