@happyvertical/smrt-core 0.57.45 → 0.57.47

package/dist/system/schema.js

@@ -320,7 +320,7 @@ CREATE TABLE IF NOT EXISTS _smrt_changes_pending (
   table_name TEXT NOT NULL,
   row_id TEXT,
   operation TEXT NOT NULL,
-  tenant_id TEXT,
+  tenant_id UUID,
   created_at TIMESTAMPTZ NOT NULL
 );
 
@@ -330,7 +330,7 @@ CREATE INDEX IF NOT EXISTS idx_smrt_changes_pending_table
 /** Name of the PostgreSQL staging table for deferred change-feed appends. */
 var POSTGRES_CHANGE_FEED_PENDING_TABLE = "_smrt_changes_pending";
 /** PostgreSQL materialization of the portable change-feed table DDL. */
-var CREATE_POSTGRES_SMRT_CHANGES_TABLE = CREATE_SMRT_CHANGES_TABLE.replace(/\bTIMESTAMP\b/g, "TIMESTAMPTZ");
+var CREATE_POSTGRES_SMRT_CHANGES_TABLE = CREATE_SMRT_CHANGES_TABLE.replace(/\bTIMESTAMP\b/g, "TIMESTAMPTZ").replace(/\btenant_id TEXT\b/g, "tenant_id UUID");
 /** PostgreSQL helper used to isolate best-effort feed appends (#2026). */
 var POSTGRES_CHANGE_FEED_APPEND_FUNCTION_NAME = "_smrt_append_change";
 /** PostgreSQL one-statement batch wrapper around the isolated append helper. */
@@ -350,11 +350,45 @@ var POSTGRES_CHANGE_FEED_APPEND_BATCH_FUNCTION_IDENTITY = `${POSTGRES_CHANGE_FEE
 * replaced. Bump it whenever either helper's body changes in a way an existing
 * database must pick up.
 */
-var POSTGRES_CHANGE_FEED_HELPER_MARKER = "smrt-change-feed-helpers:v4";
+var POSTGRES_CHANGE_FEED_HELPER_MARKER = "smrt-change-feed-helpers:v5";
+/**
+* The previous body marker, still stamped into every v5 body (#3297).
+*
+* v5 only changes how a tenant id is coerced: it is converted to whatever type
+* the live `tenant_id` column has (TEXT before `db:migrate-uuid`, native uuid
+* after), so a v5 body is a drop-in for v4 callers. Older SMRT processes probe
+* for the v4 marker; carrying it stops them from replacing a v5 body with a
+* v4 one (which inserts text into a converted uuid column) during a
+* mixed-version rollout.
+*/
+var POSTGRES_CHANGE_FEED_HELPER_COMPAT_MARKER = "smrt-change-feed-helpers:v4";
+/**
+* Coerce a text tenant id to the live type of `<table>.tenant_id` (#3297).
+*
+* `jsonb_populate_record` builds the table's row type at execution time, so
+* the same body works before and after the column converts to uuid, and a
+* cached plan is invalidated by the ALTER like any other. Empty strings are
+* NULL, matching the TypeScript writers.
+*/
+function postgresTenantIdAs(table, textExpression) {
+	return `(jsonb_populate_record(NULL::${table}, jsonb_build_object('tenant_id', NULLIF(${textExpression}, '')))).tenant_id`;
+}
 /** PostgreSQL helper that sequences staged change-feed appends (#2649). */
 var POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_NAME = "_smrt_drain_changes";
-/** Exact PostgreSQL identity used for catalog lookup of the drain helper. */
-var POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_IDENTITY = `${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_NAME}(integer)`;
+/**
+* Exact PostgreSQL identity of the drain helper (#2982): the batch limit plus
+* the live set of sensitive tables, which the drain purges from staging and
+* never sequences.
+*/
+var POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_IDENTITY = `${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_NAME}(integer,text[])`;
+/**
+* Identity of the pre-#2982 single-argument drain, kept as a compatibility
+* entry point so replicas of an older SMRT that still call
+* `_smrt_drain_changes()` keep working during a mixed-version rollout. It
+* delegates to the two-argument drain with no exclusions — exactly the old
+* behavior — because it has no way to know the live sensitive set.
+*/
+var POSTGRES_CHANGE_FEED_COMPAT_DRAIN_FUNCTION_IDENTITY = `${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_NAME}(integer)`;
 /** How many staged entries one drain call sequences. */
 var POSTGRES_CHANGE_FEED_DRAIN_BATCH = 1e3;
 /**
@@ -380,10 +414,18 @@ var POSTGRES_CHANGE_FEED_DRAIN_BATCH = 1e3;
 * Failures are returned as data, like the append helper, so a drain problem
 * never aborts the caller's transaction. A failed drain leaves the staged rows
 * in place for the next attempt.
+*
+* Sensitive tables (#2982): `p_excluded_tables` is the caller's live
+* sensitive set. Under the drain lock, staged rows for those tables are
+* deleted before any sequence is allocated, and the sequencing batch skips
+* them too, so an entry staged by an older replica (or left over from before
+* an upgrade) never reaches `_smrt_changes`. Neither parameter has a default:
+* a call with no arguments resolves only to the compatibility overload.
 */
 var CREATE_POSTGRES_CHANGE_FEED_DRAIN_FUNCTION = `
 CREATE OR REPLACE FUNCTION ${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_NAME}(
-  p_limit INTEGER DEFAULT ${POSTGRES_CHANGE_FEED_DRAIN_BATCH}
+  p_limit INTEGER,
+  p_excluded_tables TEXT[]
 )
 RETURNS TABLE(
   drained_seq BIGINT,
@@ -398,6 +440,7 @@ LANGUAGE plpgsql
 SECURITY INVOKER
 AS $smrt_change_feed_drain$
 -- ${POSTGRES_CHANGE_FEED_HELPER_MARKER}
+-- ${POSTGRES_CHANGE_FEED_HELPER_COMPAT_MARKER}
 DECLARE
   v_base BIGINT;
   v_error_code TEXT;
@@ -436,6 +479,23 @@ BEGIN
       RETURN;
     END IF;
 
+    -- The feed never records a sensitive table (#2982). Staged entries for
+    -- one — from an older replica, or staged before the table was declared
+    -- sensitive — are dropped here, before a sequence is allocated.
+    -- Bounded like the sequencing batch, so a large legacy backlog cannot make
+    -- one pass outlive statement_timeout and stall the feed; the remainder is
+    -- purged by later passes, and the batch below skips it meanwhile.
+    IF COALESCE(cardinality(p_excluded_tables), 0) > 0 THEN
+      DELETE FROM _smrt_changes_pending AS sensitive
+      WHERE sensitive.pending_id IN (
+        SELECT staged.pending_id
+        FROM _smrt_changes_pending AS staged
+        WHERE staged.table_name = ANY(p_excluded_tables)
+        ORDER BY staged.pending_id
+        LIMIT GREATEST(COALESCE(p_limit, ${POSTGRES_CHANGE_FEED_DRAIN_BATCH}), 1)
+      );
+    END IF;
+
     SELECT COALESCE(MAX(changes.seq), 0) INTO v_base FROM _smrt_changes AS changes;
 
     RETURN QUERY
@@ -444,6 +504,11 @@ BEGIN
       WHERE pending.pending_id IN (
         SELECT candidate.pending_id
         FROM _smrt_changes_pending AS candidate
+        -- A sensitive row committed after the purge above is skipped, not
+        -- sequenced; the next drain purges it.
+        WHERE NOT (
+          candidate.table_name = ANY(COALESCE(p_excluded_tables, ARRAY[]::TEXT[]))
+        )
         ORDER BY candidate.pending_id
         LIMIT GREATEST(COALESCE(p_limit, ${POSTGRES_CHANGE_FEED_DRAIN_BATCH}), 1)
       )
@@ -475,7 +540,7 @@ BEGIN
         numbered.table_name,
         numbered.row_id,
         numbered.operation,
-        numbered.tenant_id,
+        ${postgresTenantIdAs("_smrt_changes", "numbered.tenant_id::TEXT")},
         numbered.created_at
       FROM numbered
       RETURNING
@@ -490,7 +555,7 @@ BEGIN
       inserted.table_name,
       inserted.row_id,
       inserted.operation,
-      inserted.tenant_id,
+      inserted.tenant_id::TEXT,
       NULL::TEXT,
       NULL::TEXT
     FROM inserted
@@ -512,6 +577,54 @@ END;
 $smrt_change_feed_drain$;
 `;
 /**
+* Compatibility single-argument drain (#2982): see
+* {@link POSTGRES_CHANGE_FEED_COMPAT_DRAIN_FUNCTION_IDENTITY}. Current SMRT
+* never calls it.
+*/
+var CREATE_POSTGRES_CHANGE_FEED_COMPAT_DRAIN_FUNCTION = `
+CREATE OR REPLACE FUNCTION ${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_NAME}(
+  p_limit INTEGER DEFAULT ${POSTGRES_CHANGE_FEED_DRAIN_BATCH}
+)
+RETURNS TABLE(
+  drained_seq BIGINT,
+  drained_table TEXT,
+  drained_row_id TEXT,
+  drained_operation TEXT,
+  drained_tenant_id TEXT,
+  error_code TEXT,
+  error_message TEXT
+)
+LANGUAGE plpgsql
+SECURITY INVOKER
+AS $smrt_change_feed_drain_compat$
+-- ${POSTGRES_CHANGE_FEED_HELPER_MARKER}
+DECLARE
+  v_error_code TEXT;
+  v_error_message TEXT;
+BEGIN
+  -- Its own boundary, like the drain it delegates to: a resolution or
+  -- privilege error on the inner call must come back as data, never abort an
+  -- older replica's caller transaction (#2026).
+  BEGIN
+    RETURN QUERY
+    SELECT * FROM ${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_NAME}(p_limit, ARRAY[]::TEXT[]);
+  EXCEPTION WHEN query_canceled OR assert_failure OR OTHERS THEN
+    GET STACKED DIAGNOSTICS
+      v_error_code = RETURNED_SQLSTATE,
+      v_error_message = MESSAGE_TEXT;
+    RETURN QUERY SELECT
+      NULL::BIGINT,
+      NULL::TEXT,
+      NULL::TEXT,
+      NULL::TEXT,
+      NULL::TEXT,
+      v_error_code,
+      v_error_message;
+  END;
+END;
+$smrt_change_feed_drain_compat$;
+`;
+/**
 * PostgreSQL-only change-feed append function.
 *
 * A PL/pgSQL block with an EXCEPTION handler runs its body in an internal
@@ -538,6 +651,7 @@ LANGUAGE plpgsql
 SECURITY INVOKER
 AS $smrt_change_feed$
 -- ${POSTGRES_CHANGE_FEED_HELPER_MARKER}
+-- ${POSTGRES_CHANGE_FEED_HELPER_COMPAT_MARKER}
 DECLARE
   v_seq BIGINT;
   v_error_code TEXT;
@@ -590,7 +704,7 @@ BEGIN
         p_table_name,
         p_row_id,
         p_operation,
-        p_tenant_id,
+        ${postgresTenantIdAs("_smrt_changes_pending", "p_tenant_id")},
         p_created_at
       );
 
@@ -631,7 +745,7 @@ BEGIN
       p_table_name,
       p_row_id,
       p_operation,
-      p_tenant_id,
+      ${postgresTenantIdAs("_smrt_changes", "p_tenant_id")},
       p_created_at
     FROM _smrt_changes AS changes
     RETURNING _smrt_changes.seq INTO v_seq;
@@ -666,6 +780,7 @@ LANGUAGE plpgsql
 SECURITY INVOKER
 AS $smrt_change_feed_batch$
 -- ${POSTGRES_CHANGE_FEED_HELPER_MARKER}
+-- ${POSTGRES_CHANGE_FEED_HELPER_COMPAT_MARKER}
 DECLARE
   v_deferred BOOLEAN;
   v_error_code TEXT;
@@ -689,7 +804,7 @@ BEGIN
           input.value->>'table',
           input.value->>'rowId',
           input.value->>'operation',
-          input.value->>'tenantId',
+          ${postgresTenantIdAs("_smrt_changes_pending", "input.value->>'tenantId'")},
           (input.value->>'timestamp')::TIMESTAMPTZ
         FROM input
         ORDER BY input.entry_index
@@ -721,7 +836,7 @@ BEGIN
         numbered.value->>'table',
         numbered.value->>'rowId',
         numbered.value->>'operation',
-        numbered.value->>'tenantId',
+        ${postgresTenantIdAs("_smrt_changes", "numbered.value->>'tenantId'")},
         (numbered.value->>'timestamp')::TIMESTAMPTZ
       FROM numbered
       ORDER BY numbered.entry_index
@@ -747,6 +862,54 @@ var POSTGRES_CHANGE_FEED_PENDING_DDL = CREATE_POSTGRES_SMRT_CHANGES_PENDING_TABL
 ${statement}
 $smrt_change_feed_pending_ddl$;`).join("\n");
 /**
+* Install both drain overloads inside a helper DO block (#2982).
+*
+* The two-argument drain is the first framework routine identity added to
+* databases that already exist, and a new function gets PostgreSQL's default
+* ACL — which a hardened deployment (PUBLIC EXECUTE revoked, the runtime role
+* granted explicitly by the permissions planner) would leave the runtime
+* unable to call. When this block creates it, it therefore inherits the
+* compatibility drain's reconciled EXECUTE grants. A role that may not grant
+* keeps the default ACL; the permissions planner reports and repairs it.
+*/
+var POSTGRES_CHANGE_FEED_DRAIN_INSTALL = `  DECLARE
+    v_drain_created BOOLEAN :=
+      to_regprocedure('${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_IDENTITY}') IS NULL;
+    v_grant RECORD;
+  BEGIN
+    EXECUTE $smrt_change_feed_drain_ddl$
+${CREATE_POSTGRES_CHANGE_FEED_DRAIN_FUNCTION.trim()}
+$smrt_change_feed_drain_ddl$;
+    EXECUTE $smrt_change_feed_drain_compat_ddl$
+${CREATE_POSTGRES_CHANGE_FEED_COMPAT_DRAIN_FUNCTION.trim()}
+$smrt_change_feed_drain_compat_ddl$;
+    IF v_drain_created AND (
+      SELECT p.proacl FROM pg_proc AS p
+      WHERE p.oid = to_regprocedure('${POSTGRES_CHANGE_FEED_COMPAT_DRAIN_FUNCTION_IDENTITY}')
+    ) IS NOT NULL THEN
+      BEGIN
+        EXECUTE 'REVOKE ALL ON FUNCTION ${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_IDENTITY} FROM PUBLIC';
+        FOR v_grant IN
+          SELECT acl.grantee
+          FROM pg_proc AS p, aclexplode(p.proacl) AS acl
+          WHERE p.oid = to_regprocedure('${POSTGRES_CHANGE_FEED_COMPAT_DRAIN_FUNCTION_IDENTITY}')
+            AND acl.privilege_type = 'EXECUTE'
+        LOOP
+          IF v_grant.grantee = 0 THEN
+            EXECUTE 'GRANT EXECUTE ON FUNCTION ${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_IDENTITY} TO PUBLIC';
+          ELSE
+            EXECUTE format(
+              'GRANT EXECUTE ON FUNCTION ${POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_IDENTITY} TO %I',
+              pg_get_userbyid(v_grant.grantee)
+            );
+          END IF;
+        END LOOP;
+      EXCEPTION WHEN insufficient_privilege THEN
+        NULL;
+      END;
+    END IF;
+  END;`;
+/**
 * Serialize PostgreSQL helper replacement inside one server-side statement.
 *
 * The transaction-scoped advisory lock prevents concurrent bootstraps from
@@ -762,9 +925,7 @@ BEGIN
   );
 ${POSTGRES_CHANGE_FEED_PENDING_DDL}
   DROP FUNCTION IF EXISTS ${LEGACY_POSTGRES_CHANGE_FEED_APPEND_FUNCTION_IDENTITY};
-  EXECUTE $smrt_change_feed_drain_ddl$
-${CREATE_POSTGRES_CHANGE_FEED_DRAIN_FUNCTION.trim()}
-$smrt_change_feed_drain_ddl$;
+${POSTGRES_CHANGE_FEED_DRAIN_INSTALL}
   EXECUTE $smrt_change_feed_ddl$
 ${CREATE_POSTGRES_CHANGE_FEED_APPEND_FUNCTION.trim()}
 $smrt_change_feed_ddl$;
@@ -809,9 +970,7 @@ BEGIN
     );
 ${POSTGRES_CHANGE_FEED_PENDING_DDL}
   DROP FUNCTION IF EXISTS ${LEGACY_POSTGRES_CHANGE_FEED_APPEND_FUNCTION_IDENTITY};
-  EXECUTE $smrt_change_feed_drain_ddl$
-${CREATE_POSTGRES_CHANGE_FEED_DRAIN_FUNCTION.trim()}
-$smrt_change_feed_drain_ddl$;
+${POSTGRES_CHANGE_FEED_DRAIN_INSTALL}
   IF v_append_stale THEN
     EXECUTE $smrt_change_feed_ddl$
 ${CREATE_POSTGRES_CHANGE_FEED_APPEND_FUNCTION.trim()}
@@ -855,9 +1014,7 @@ ${statement}
 $smrt_change_feed_schema_ddl$;`).join("\n")}
 ${POSTGRES_CHANGE_FEED_PENDING_DDL}
   DROP FUNCTION IF EXISTS ${LEGACY_POSTGRES_CHANGE_FEED_APPEND_FUNCTION_IDENTITY};
-  EXECUTE $smrt_change_feed_drain_ddl$
-${CREATE_POSTGRES_CHANGE_FEED_DRAIN_FUNCTION.trim()}
-$smrt_change_feed_drain_ddl$;
+${POSTGRES_CHANGE_FEED_DRAIN_INSTALL}
   IF v_append_stale THEN
     EXECUTE $smrt_change_feed_ddl$
 ${CREATE_POSTGRES_CHANGE_FEED_APPEND_FUNCTION.trim()}
@@ -986,9 +1143,49 @@ var FRAMEWORK_OPERATIONAL_TABLES = [
 */
 var RETIRED_SYSTEM_TABLES = ["_smrt_registry", "_smrt_signals"];
 /**
+* System-table columns that hold a real tenant id (#3297): a tenant UUID from
+* the tenant context, or NULL for global rows. On PostgreSQL they materialize
+* as native `uuid`, like every application `tenant_id`; other engines keep
+* TEXT, where `UUID` renders as TEXT anyway. Existing PostgreSQL TEXT columns
+* convert through `smrt db:migrate-uuid` in a maintenance window.
+*
+* Deliberately NOT here (they stay TEXT):
+* - text identity encodings that are not tenant ids: `_smrt_contexts.owner_id`
+*   (`__collection__` / `__collection__:<tenantId>` scope keys, object/agent
+*   row ids), `_smrt_run_once_claims.actor` (an arbitration namespace),
+*   `_smrt_dispatch.processed_by` (a subscriber name) and
+*   `_smrt_schema_migrations.applied_by` (a hostname);
+* - `_smrt_run_once_claims.tenant_id`: a NOT NULL claim scope folded into the
+*   claim key; a caller without a tenant must pass a scope string, so it is a
+*   scope key, not a tenant FK;
+* - `_smrt_ai_usage.tenant_id`: model usage writes tenant UUIDs, but the
+*   published external-agent usage API accepts any non-empty text tenant id,
+*   so converting it is a contract change tracked separately.
+*/
+var SYSTEM_TABLE_TENANT_UUID_COLUMNS = Object.freeze([
+	{
+		table: "_smrt_dispatch",
+		column: "tenant_id"
+	},
+	{
+		table: "_smrt_dispatch_subscriptions",
+		column: "tenant_id"
+	},
+	{
+		table: "_smrt_changes",
+		column: "tenant_id"
+	},
+	{
+		table: "_smrt_changes_pending",
+		column: "tenant_id"
+	}
+]);
+/**
 * Materialize the portable system-table schema for a target engine.
 *
-* PostgreSQL must use TIMESTAMPTZ because every system Date is an instant.
+* PostgreSQL must use TIMESTAMPTZ because every system Date is an instant,
+* and native UUID for the tenant columns in
+* {@link SYSTEM_TABLE_TENANT_UUID_COLUMNS} (#3297).
 * PostgreSQL and DuckDB also materialize integer storage as BIGINT, matching
 * application-table DDL; SQLite keeps its variable-width INTEGER.
 */
@@ -998,7 +1195,17 @@ function getSystemTableDDL(engine) {
 /** Materialize one portable system-table statement for a target engine. */
 function getSystemTableDDLForEngine(ddl, engine) {
 	const integerDdl = engine === "postgres" || engine === "duckdb" || engine === "json" ? ddl.replace(/\bINTEGER\b/g, "BIGINT") : ddl;
-	return engine === "postgres" ? integerDdl.replace(/\bTIMESTAMP\b/g, "TIMESTAMPTZ") : integerDdl;
+	return engine === "postgres" ? toPostgresTenantUuid(integerDdl.replace(/\bTIMESTAMP\b/g, "TIMESTAMPTZ")) : integerDdl;
+}
+var POSTGRES_UUID_TENANT_TABLES = new Set(SYSTEM_TABLE_TENANT_UUID_COLUMNS.map(({ table }) => table));
+/**
+* Render `tenant_id TEXT` as native uuid on PostgreSQL in the DDL of a table
+* listed in {@link SYSTEM_TABLE_TENANT_UUID_COLUMNS} (each system DDL
+* constant creates one table).
+*/
+function toPostgresTenantUuid(ddl) {
+	const table = ddl.match(/CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?([A-Za-z_][\w$]*)/i)?.[1];
+	return table && POSTGRES_UUID_TENANT_TABLES.has(table) ? ddl.replace(/\btenant_id TEXT\b/g, "tenant_id UUID") : ddl;
 }
 /**
 * Current SMRT system schema version.
@@ -1034,6 +1241,6 @@ Object.freeze({
 	"1.11.1": "98112937a3bbb3883c3db1fd5e836751f91a479c1c5da64d4410263a6581ef1f"
 });
 //#endregion
-export { ALL_SYSTEM_TABLES, CREATE_POSTGRES_CHANGE_FEED_APPEND_BATCH_FUNCTION, CREATE_POSTGRES_CHANGE_FEED_APPEND_FUNCTION, CREATE_POSTGRES_CHANGE_FEED_DRAIN_FUNCTION, CREATE_POSTGRES_SMRT_CHANGES_PENDING_TABLE, CREATE_POSTGRES_SMRT_CHANGES_TABLE, CREATE_SMRT_AI_USAGE_TABLE, CREATE_SMRT_BACKFILLS_TABLE, CREATE_SMRT_CHANGES_TABLE, CREATE_SMRT_CONTEXTS_TABLE, CREATE_SMRT_DISPATCH_SUBSCRIPTIONS_TABLE, CREATE_SMRT_DISPATCH_TABLE, CREATE_SMRT_EMBEDDINGS_TABLE, CREATE_SMRT_MIGRATIONS_TABLE, CREATE_SMRT_RUN_ONCE_CLAIMS_TABLE, CREATE_SMRT_SCHEMA_MIGRATIONS_TABLE, ENSURE_POSTGRES_CHANGE_FEED_APPEND_FUNCTION, ENSURE_POSTGRES_CHANGE_FEED_SCHEMA, FRAMEWORK_OPERATIONAL_TABLES, LEGACY_POSTGRES_CHANGE_FEED_APPEND_FUNCTION_IDENTITY, POSTGRES_CHANGE_FEED_APPEND_BATCH_FUNCTION_IDENTITY, POSTGRES_CHANGE_FEED_APPEND_BATCH_FUNCTION_NAME, POSTGRES_CHANGE_FEED_APPEND_FUNCTION_IDENTITY, POSTGRES_CHANGE_FEED_APPEND_FUNCTION_NAME, POSTGRES_CHANGE_FEED_DRAIN_BATCH, POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_IDENTITY, POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_NAME, POSTGRES_CHANGE_FEED_HELPER_MARKER, POSTGRES_CHANGE_FEED_PENDING_TABLE, REPLACE_POSTGRES_CHANGE_FEED_APPEND_FUNCTION, RETIRED_SYSTEM_TABLES, RUN_ONCE_CLAIMS_TABLE, SMRT_SCHEMA_VERSION, getSystemTableDDL, getSystemTableDDLForEngine };
+export { ALL_SYSTEM_TABLES, CREATE_POSTGRES_CHANGE_FEED_APPEND_BATCH_FUNCTION, CREATE_POSTGRES_CHANGE_FEED_APPEND_FUNCTION, CREATE_POSTGRES_CHANGE_FEED_COMPAT_DRAIN_FUNCTION, CREATE_POSTGRES_CHANGE_FEED_DRAIN_FUNCTION, CREATE_POSTGRES_SMRT_CHANGES_PENDING_TABLE, CREATE_POSTGRES_SMRT_CHANGES_TABLE, CREATE_SMRT_AI_USAGE_TABLE, CREATE_SMRT_BACKFILLS_TABLE, CREATE_SMRT_CHANGES_TABLE, CREATE_SMRT_CONTEXTS_TABLE, CREATE_SMRT_DISPATCH_SUBSCRIPTIONS_TABLE, CREATE_SMRT_DISPATCH_TABLE, CREATE_SMRT_EMBEDDINGS_TABLE, CREATE_SMRT_MIGRATIONS_TABLE, CREATE_SMRT_RUN_ONCE_CLAIMS_TABLE, CREATE_SMRT_SCHEMA_MIGRATIONS_TABLE, ENSURE_POSTGRES_CHANGE_FEED_APPEND_FUNCTION, ENSURE_POSTGRES_CHANGE_FEED_SCHEMA, FRAMEWORK_OPERATIONAL_TABLES, LEGACY_POSTGRES_CHANGE_FEED_APPEND_FUNCTION_IDENTITY, POSTGRES_CHANGE_FEED_APPEND_BATCH_FUNCTION_IDENTITY, POSTGRES_CHANGE_FEED_APPEND_BATCH_FUNCTION_NAME, POSTGRES_CHANGE_FEED_APPEND_FUNCTION_IDENTITY, POSTGRES_CHANGE_FEED_APPEND_FUNCTION_NAME, POSTGRES_CHANGE_FEED_COMPAT_DRAIN_FUNCTION_IDENTITY, POSTGRES_CHANGE_FEED_DRAIN_BATCH, POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_IDENTITY, POSTGRES_CHANGE_FEED_DRAIN_FUNCTION_NAME, POSTGRES_CHANGE_FEED_HELPER_COMPAT_MARKER, POSTGRES_CHANGE_FEED_HELPER_MARKER, POSTGRES_CHANGE_FEED_PENDING_TABLE, REPLACE_POSTGRES_CHANGE_FEED_APPEND_FUNCTION, RETIRED_SYSTEM_TABLES, RUN_ONCE_CLAIMS_TABLE, SMRT_SCHEMA_VERSION, SYSTEM_TABLE_TENANT_UUID_COLUMNS, getSystemTableDDL, getSystemTableDDLForEngine };
 
 //# sourceMappingURL=schema.js.map