@intx/db 0.1.2 → 0.3.0

package/dist/schema/workflow-run-launch-spec.d.ts

@@ -0,0 +1,200 @@
+/**
+ * Immutable inputs required to recreate an exclusively placed workflow on a
+ * replacement sidecar. Secrets are deliberately excluded: source offering
+ * ids are resolved against the current catalog and principal authority when a
+ * generation is launched.
+ */
+export declare const workflowRunLaunchSpec: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "workflow_run_launch_spec";
+    schema: undefined;
+    columns: {
+        anchorRunId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "anchor_run_id";
+            tableName: "workflow_run_launch_spec";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        schemaVersion: import("drizzle-orm/pg-core").PgColumn<{
+            name: "schema_version";
+            tableName: "workflow_run_launch_spec";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        sessionId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "session_id";
+            tableName: "workflow_run_launch_spec";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        deploymentDomain: import("drizzle-orm/pg-core").PgColumn<{
+            name: "deployment_domain";
+            tableName: "workflow_run_launch_spec";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        sourceAuthorityPrincipalId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "source_authority_principal_id";
+            tableName: "workflow_run_launch_spec";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        frozenApprovalBundle: import("drizzle-orm/pg-core").PgColumn<{
+            name: "frozen_approval_bundle";
+            tableName: "workflow_run_launch_spec";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown;
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        sourceOfferingIds: import("drizzle-orm/pg-core").PgColumn<{
+            name: "source_offering_ids";
+            tableName: "workflow_run_launch_spec";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown;
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        defaultSourceOfferingId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "default_source_offering_id";
+            tableName: "workflow_run_launch_spec";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        deployContent: import("drizzle-orm/pg-core").PgColumn<{
+            name: "deploy_content";
+            tableName: "workflow_run_launch_spec";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown;
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        toolPackagePins: import("drizzle-orm/pg-core").PgColumn<{
+            name: "tool_package_pins";
+            tableName: "workflow_run_launch_spec";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "workflow_run_launch_spec";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;

package/dist/schema/workflow-run-launch-spec.js

@@ -0,0 +1,26 @@
+import { integer, jsonb, pgTable, text, timestamp } from "drizzle-orm/pg-core";
+import { principal } from "./principals.js";
+import { workflowRun } from "./workflow-run.js";
+/**
+ * Immutable inputs required to recreate an exclusively placed workflow on a
+ * replacement sidecar. Secrets are deliberately excluded: source offering
+ * ids are resolved against the current catalog and principal authority when a
+ * generation is launched.
+ */
+export const workflowRunLaunchSpec = pgTable("workflow_run_launch_spec", {
+    anchorRunId: text("anchor_run_id")
+        .primaryKey()
+        .references(() => workflowRun.id, { onDelete: "cascade" }),
+    schemaVersion: integer("schema_version").notNull().default(1),
+    sessionId: text("session_id").notNull(),
+    deploymentDomain: text("deployment_domain").notNull(),
+    sourceAuthorityPrincipalId: text("source_authority_principal_id")
+        .notNull()
+        .references(() => principal.id, { onDelete: "restrict" }),
+    frozenApprovalBundle: jsonb("frozen_approval_bundle").notNull(),
+    sourceOfferingIds: jsonb("source_offering_ids").notNull(),
+    defaultSourceOfferingId: text("default_source_offering_id").notNull(),
+    deployContent: jsonb("deploy_content").notNull(),
+    toolPackagePins: jsonb("tool_package_pins"),
+    createdAt: timestamp("created_at").notNull().defaultNow(),
+});

package/dist/schema/workflow-run.d.ts

@@ -0,0 +1,230 @@
+export declare const workflowRun: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "workflow_run";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        definitionId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "definition_id";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        anchorRunId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "anchor_run_id";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        tenantId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "tenant_id";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        principalId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "principal_id";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        status: import("drizzle-orm/pg-core").PgColumn<{
+            name: "status";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: "deployed" | "failed" | "running" | "completed" | "cancelled";
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["deployed", "running", "completed", "failed", "cancelled"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        address: import("drizzle-orm/pg-core").PgColumn<{
+            name: "address";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        publicKey: import("drizzle-orm/pg-core").PgColumn<{
+            name: "public_key";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        sidecarId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "sidecar_id";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        kernelId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "kernel_id";
+            tableName: "workflow_run";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        modelPreferences: import("drizzle-orm/pg-core").PgColumn<{
+            name: "model_preferences";
+            tableName: "workflow_run";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "workflow_run";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        endedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "ended_at";
+            tableName: "workflow_run";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export declare const liveWorkflowRunStatuses: readonly ["deployed", "running"];
+export declare function isLiveWorkflowRunStatus(status: string): boolean;

package/dist/schema/workflow-run.js

@@ -0,0 +1,102 @@
+import { sql } from "drizzle-orm";
+import { index, jsonb, pgTable, text, timestamp, uniqueIndex, } from "drizzle-orm/pg-core";
+import { principal } from "./principals.js";
+import { sidecar } from "./sidecar.js";
+import { tenant } from "./tenants.js";
+import { workflowDefinition } from "./workflow-definitions.js";
+// workflow_run is the per-run authorization subject: one row per run of a
+// workflow deployment. It gives "this approval belongs to a real run of this
+// deployment" a database referent, so approvals and signal correlations anchor
+// to a run row rather than a bare run id string.
+//
+// The id is opaque and heterogeneous: a deployment's addressable top-level
+// run uses its stable mail address, while internal body-child runs use freshly
+// minted synthetic ids. Both are run identifiers, so no format is enforced on
+// the column.
+export const workflowRun = pgTable("workflow_run", {
+    id: text("id").primaryKey(),
+    // The definition a run belongs to, carried by every run: a folded
+    // agent-origin run sets it at launch, and a deployment's anchor run and its
+    // child runs carry the deployment's definition. It is the run's anchor to a
+    // first-class definition. `cascade` matches `anchorRunId`'s onDelete, so
+    // deleting the definition removes its runs.
+    definitionId: text("definition_id")
+        .notNull()
+        .references(() => workflowDefinition.id, { onDelete: "cascade" }),
+    // Nullable as of the fold: a folded agent-origin run carries a
+    // `definitionId` and no deployment, while a deployment's anchor run sets
+    // this to its own id and a child run sets it to its anchor's id. It
+    // references the anchor `workflow_run` -- the run whose id equals the
+    // deployment id -- so an anchor row is self-referential. The only runtime
+    // read of the column (`resolveWorkflowPrincipalNames`) degrades gracefully
+    // when it is null.
+    anchorRunId: text("anchor_run_id").references(() => workflowRun.id, { onDelete: "cascade" }),
+    tenantId: text("tenant_id")
+        .notNull()
+        .references(() => tenant.id, { onDelete: "cascade" }),
+    // Nullable by design: an internal, workflow-spawned run has no principal of
+    // its own -- it inherits the deployment's grants at read time -- so null is
+    // the honest signal for "this run has no own principal." `onDelete: "set
+    // null"` is deliberate (unlike agent_instance's principal, which uses the
+    // implicit default): deleting a run's principal nulls the column rather than
+    // wedging the run row.
+    principalId: text("principal_id").references(() => principal.id, {
+        onDelete: "set null",
+    }),
+    // A deployment's anchor run is born "deployed": the deploy->first-trigger
+    // window is live but not yet running. The first trigger reconciles the
+    // anchor and flips this column "deployed" -> "running" (see
+    // `anchorWithPrincipal`). A child run has no such window -- it exists only
+    // once execution spawns it -- so it is born "running". A run settles into a
+    // terminal status when its terminal event lands on the workflow-run ref:
+    // the hub's pack-receive path flips this column under a live-status guard so
+    // a redelivered terminal event does not re-terminate the run.
+    status: text("status", {
+        enum: ["deployed", "running", "completed", "failed", "cancelled"],
+    })
+        .notNull()
+        .default("running"),
+    // Runtime bindings a folded run carries, mirroring `agent_instance`: a
+    // folded run IS the launched instance, so it owns its routing endpoint.
+    // `address` is that endpoint -- nullable because an address-less child run
+    // routes via its deployment (a deployment's anchor run instead carries a
+    // workflow-derived address), but unique among the runs that set it (the
+    // partial unique index below). The folded launch writes `address` and
+    // `modelPreferences`; `publicKey` is persisted when the sidecar acks the
+    // deploy; no code populates `sidecarId`/`kernelId`.
+    address: text("address"),
+    publicKey: text("public_key"),
+    sidecarId: text("sidecar_id").references(() => sidecar.id, {
+        onDelete: "set null",
+    }),
+    kernelId: text("kernel_id"),
+    modelPreferences: jsonb("model_preferences"),
+    createdAt: timestamp("created_at").notNull().defaultNow(),
+    // Nullable: a run has no end time until it reaches a terminal state.
+    endedAt: timestamp("ended_at"),
+}, (t) => [
+    // Supports lookups of a definition's runs, the read path folded runs use
+    // once `definitionId` is the anchor.
+    index("workflow_run_definition_idx").on(t.definitionId),
+    // A folded run owns a unique routing address, exactly like the agent
+    // instance it stands in for; a run that anchors on a deployment instead
+    // leaves `address` null and is not indexed. Partial so the many null-address
+    // rows never collide and are kept out of the index.
+    uniqueIndex("workflow_run_address_idx")
+        .on(t.address)
+        .where(sql `${t.address} is not null`),
+]);
+// The statuses a run holds while live -- not yet settled into a terminal state.
+// A deployment anchor is born "deployed" and flips to "running" on its first
+// trigger; a child run is born "running". Every status gate that must treat a
+// live run as live tests membership here, so "which statuses count as live" has
+// a single definition rather than a `status !== "running"` scattered across the
+// workflow-run domain. The `satisfies` bound makes a drift from the column enum
+// a compile error.
+export const liveWorkflowRunStatuses = [
+    "deployed",
+    "running",
+];
+export function isLiveWorkflowRunStatus(status) {
+    return liveWorkflowRunStatuses.some((live) => live === status);
+}