@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/migrations/0000_init.sql

@@ -0,0 +1,108 @@
+CREATE TABLE `claim_attachment_cids` (
+	`collection_id` text NOT NULL,
+	`cid` text NOT NULL,
+	`claim_id` text NOT NULL,
+	`agent_address` text,
+	`phash` text,
+	`media_type` text,
+	`created_at` integer NOT NULL,
+	PRIMARY KEY(`collection_id`, `cid`, `claim_id`)
+);
+--> statement-breakpoint
+CREATE INDEX `cac_recent` ON `claim_attachment_cids` (`collection_id`,`created_at`);--> statement-breakpoint
+CREATE TABLE `claim_body_digests` (
+	`collection_id` text NOT NULL,
+	`digest` text NOT NULL,
+	`claim_id` text NOT NULL,
+	`agent_address` text,
+	`normalized_text` text,
+	`final_verdict` text,
+	`created_at` integer NOT NULL,
+	PRIMARY KEY(`collection_id`, `digest`, `claim_id`)
+);
+--> statement-breakpoint
+CREATE INDEX `cbd_recent` ON `claim_body_digests` (`collection_id`,`created_at`);--> statement-breakpoint
+CREATE TABLE `claim_ingests` (
+	`claim_id` text PRIMARY KEY NOT NULL,
+	`collection_id` text NOT NULL,
+	`status` text DEFAULT 'queued' NOT NULL,
+	`instance_id` text,
+	`error` text,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `claim_ingests_collection_created_claim_idx` ON `claim_ingests` (`collection_id`,`created_at`,`claim_id`);--> statement-breakpoint
+CREATE TABLE `claim_reviews` (
+	`claim_id` text PRIMARY KEY NOT NULL,
+	`answers` text NOT NULL,
+	`reviewer_did` text NOT NULL,
+	`answered_at` integer NOT NULL,
+	`folded_at` integer,
+	`fold_error` text
+);
+--> statement-breakpoint
+CREATE TABLE `decisions` (
+	`claim_id` text PRIMARY KEY NOT NULL,
+	`collection_id` text NOT NULL,
+	`rubric_id` text,
+	`facts_digest` text,
+	`verdict` text,
+	`status` text NOT NULL,
+	`result_digest` text,
+	`receipt_cid` text,
+	`receipt_jws` text,
+	`decision` text,
+	`explanation` text,
+	`chain_status` text DEFAULT 'pending' NOT NULL,
+	`tx_hash` text,
+	`chain_error` text,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `fact_cache` (
+	`claim_id` text NOT NULL,
+	`kind` text NOT NULL,
+	`name` text NOT NULL,
+	`fact` text NOT NULL,
+	`created_at` integer NOT NULL,
+	PRIMARY KEY(`claim_id`, `kind`, `name`)
+);
+--> statement-breakpoint
+CREATE TABLE `matrix_deliveries` (
+	`dedupe_key` text PRIMARY KEY NOT NULL,
+	`kind` text NOT NULL,
+	`claim_id` text,
+	`collection_id` text,
+	`room_id` text,
+	`event_id` text,
+	`result_digest` text,
+	`status` text DEFAULT 'failed' NOT NULL,
+	`attempts` integer DEFAULT 0 NOT NULL,
+	`last_error` text,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `matrix_deliveries_claim_idx` ON `matrix_deliveries` (`claim_id`);--> statement-breakpoint
+CREATE TABLE `watched_collections` (
+	`collection_id` text PRIMARY KEY NOT NULL,
+	`owner_did` text NOT NULL,
+	`enrolled_by_did` text NOT NULL,
+	`evaluation_denom` text,
+	`evaluation_amount` text,
+	`protocol_did` text,
+	`rubric_id` text,
+	`delegation_car` text,
+	`delegation_expires_at` integer,
+	`contact_email` text,
+	`status` text DEFAULT 'active' NOT NULL,
+	`paused_reason` text,
+	`cursor` text,
+	`last_scanned_at` integer,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `watched_collections_status_last_scanned_idx` ON `watched_collections` (`status`,`last_scanned_at`);

package/migrations/0001_review_attestation.sql

@@ -0,0 +1 @@
+ALTER TABLE `claim_reviews` ADD `attestation_jws` text;

package/migrations/0002_decisions_facts.sql

@@ -0,0 +1 @@
+ALTER TABLE `decisions` ADD `facts` text;

package/migrations/0003_api_lane.sql

@@ -0,0 +1,171 @@
+CREATE TABLE `api_audit` (
+	`audit_id` text PRIMARY KEY NOT NULL,
+	`source_id` text,
+	`actor` text NOT NULL,
+	`actor_kind` text NOT NULL,
+	`action` text NOT NULL,
+	`target` text,
+	`details` text,
+	`request_id` text,
+	`created_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `api_audit_source_created_idx` ON `api_audit` (`source_id`,`created_at`);--> statement-breakpoint
+CREATE INDEX `api_audit_created_idx` ON `api_audit` (`created_at`);--> statement-breakpoint
+CREATE TABLE `api_charges` (
+	`claim_id` text PRIMARY KEY NOT NULL,
+	`source_id` text NOT NULL,
+	`charge_id` text,
+	`amount` text NOT NULL,
+	`asset` text DEFAULT 'upay' NOT NULL,
+	`offer_id` text,
+	`payer_did` text,
+	`key_prefix` text,
+	`amount_cents` integer NOT NULL,
+	`status` text DEFAULT 'pending' NOT NULL,
+	`error` text,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `api_charges_charge_idx` ON `api_charges` (`charge_id`);--> statement-breakpoint
+CREATE INDEX `api_charges_source_created_idx` ON `api_charges` (`source_id`,`created_at`);--> statement-breakpoint
+CREATE INDEX `api_charges_key_created_idx` ON `api_charges` (`key_prefix`,`created_at`);--> statement-breakpoint
+CREATE INDEX `api_charges_created_idx` ON `api_charges` (`created_at`);--> statement-breakpoint
+CREATE TABLE `api_claims` (
+	`claim_id` text PRIMARY KEY NOT NULL,
+	`source_id` text NOT NULL,
+	`protocol_did` text NOT NULL,
+	`body` text,
+	`body_digest` text NOT NULL,
+	`attachments` text,
+	`submitter` text,
+	`submitter_digest` text,
+	`metadata` text,
+	`idempotency_key` text,
+	`request_digest` text,
+	`webhook_url` text,
+	`payment` text,
+	`received_at` integer NOT NULL,
+	`erase_body_at` integer,
+	`body_erased_at` integer
+);
+--> statement-breakpoint
+CREATE INDEX `api_claims_source_received_idx` ON `api_claims` (`source_id`,`received_at`,`claim_id`);--> statement-breakpoint
+CREATE INDEX `api_claims_frequency_idx` ON `api_claims` (`source_id`,`protocol_did`,`submitter_digest`,`received_at`);--> statement-breakpoint
+CREATE INDEX `api_claims_erase_idx` ON `api_claims` (`erase_body_at`);--> statement-breakpoint
+CREATE TABLE `api_events` (
+	`event_id` text PRIMARY KEY NOT NULL,
+	`source_id` text NOT NULL,
+	`claim_id` text,
+	`type` text NOT NULL,
+	`data` text,
+	`created_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `api_events_claim_idx` ON `api_events` (`claim_id`,`event_id`);--> statement-breakpoint
+CREATE INDEX `api_events_source_created_idx` ON `api_events` (`source_id`,`created_at`);--> statement-breakpoint
+CREATE INDEX `api_events_created_idx` ON `api_events` (`created_at`);--> statement-breakpoint
+CREATE TABLE `api_idempotency` (
+	`source_id` text NOT NULL,
+	`idempotency_key` text NOT NULL,
+	`request_digest` text NOT NULL,
+	`status` text DEFAULT 'in_flight' NOT NULL,
+	`response_status` integer,
+	`response_body` text,
+	`created_at` integer NOT NULL,
+	`expires_at` integer NOT NULL,
+	PRIMARY KEY(`source_id`, `idempotency_key`)
+);
+--> statement-breakpoint
+CREATE INDEX `api_idempotency_expires_idx` ON `api_idempotency` (`expires_at`);--> statement-breakpoint
+CREATE TABLE `api_keys` (
+	`prefix` text PRIMARY KEY NOT NULL,
+	`key_hash` text NOT NULL,
+	`source_id` text NOT NULL,
+	`name` text,
+	`environment` text NOT NULL,
+	`scopes` text NOT NULL,
+	`max_spend_cents_per_day` integer,
+	`created_by` text,
+	`last_used_at` integer,
+	`revoked_at` integer,
+	`created_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `api_keys_source_idx` ON `api_keys` (`source_id`);--> statement-breakpoint
+CREATE TABLE `api_members` (
+	`member_id` text PRIMARY KEY NOT NULL,
+	`source_id` text NOT NULL,
+	`did` text,
+	`email` text,
+	`role` text NOT NULL,
+	`reviewer_did` text,
+	`invited_by` text,
+	`invited_at` integer NOT NULL,
+	`accepted_at` integer
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `api_members_source_did_idx` ON `api_members` (`source_id`,`did`);--> statement-breakpoint
+CREATE INDEX `api_members_did_idx` ON `api_members` (`did`);--> statement-breakpoint
+CREATE UNIQUE INDEX `api_members_source_reviewer_idx` ON `api_members` (`source_id`,`reviewer_did`);--> statement-breakpoint
+CREATE TABLE `api_sources` (
+	`source_id` text PRIMARY KEY NOT NULL,
+	`name` text NOT NULL,
+	`owner_did` text NOT NULL,
+	`allowed_protocols` text DEFAULT '[]' NOT NULL,
+	`price_overrides` text,
+	`refill_floor_cents` integer,
+	`balance_low_at` integer,
+	`webhook_url` text,
+	`retention_days` integer DEFAULT 30 NOT NULL,
+	`status` text DEFAULT 'active' NOT NULL,
+	`paused_reason` text,
+	`contact_email` text,
+	`notes` text,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `api_uploads` (
+	`upload_id` text PRIMARY KEY NOT NULL,
+	`source_id` text NOT NULL,
+	`r2_key` text NOT NULL,
+	`cid` text NOT NULL,
+	`media_type` text NOT NULL,
+	`size` integer NOT NULL,
+	`claim_id` text,
+	`delete_at` integer NOT NULL,
+	`created_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `api_uploads_delete_idx` ON `api_uploads` (`delete_at`);--> statement-breakpoint
+CREATE INDEX `api_uploads_claim_idx` ON `api_uploads` (`claim_id`);--> statement-breakpoint
+CREATE TABLE `webhook_endpoints` (
+	`endpoint_id` text PRIMARY KEY NOT NULL,
+	`source_id` text NOT NULL,
+	`url` text NOT NULL,
+	`secret_ciphertext` text NOT NULL,
+	`previous_secret_ciphertext` text,
+	`previous_secret_expires_at` integer,
+	`events` text DEFAULT '[]' NOT NULL,
+	`status` text DEFAULT 'active' NOT NULL,
+	`description` text,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `webhook_endpoints_source_idx` ON `webhook_endpoints` (`source_id`);--> statement-breakpoint
+ALTER TABLE `claim_ingests` ADD `lane` text DEFAULT 'chain' NOT NULL;--> statement-breakpoint
+ALTER TABLE `decisions` ADD `decision_to_pay` text;--> statement-breakpoint
+CREATE INDEX `decisions_status_created_idx` ON `decisions` (`status`,`created_at`);--> statement-breakpoint
+ALTER TABLE `matrix_deliveries` ADD `source_id` text;--> statement-breakpoint
+ALTER TABLE `matrix_deliveries` ADD `endpoint_id` text;--> statement-breakpoint
+ALTER TABLE `matrix_deliveries` ADD `target_url` text;--> statement-breakpoint
+ALTER TABLE `matrix_deliveries` ADD `event_type` text;--> statement-breakpoint
+ALTER TABLE `matrix_deliveries` ADD `payload` text;--> statement-breakpoint
+ALTER TABLE `matrix_deliveries` ADD `next_attempt_at` integer;--> statement-breakpoint
+ALTER TABLE `matrix_deliveries` ADD `last_status_code` integer;--> statement-breakpoint
+CREATE INDEX `matrix_deliveries_due_idx` ON `matrix_deliveries` (`kind`,`status`,`next_attempt_at`);--> statement-breakpoint
+CREATE INDEX `matrix_deliveries_source_created_idx` ON `matrix_deliveries` (`source_id`,`created_at`);--> statement-breakpoint
+CREATE INDEX `matrix_deliveries_kind_created_idx` ON `matrix_deliveries` (`kind`,`created_at`);

package/migrations/0004_api_v1_1.sql

@@ -0,0 +1,19 @@
+CREATE TABLE `api_revocations` (
+	`source_id` text NOT NULL,
+	`cid` text NOT NULL,
+	`revoked_by` text,
+	`revoked_at` integer NOT NULL,
+	PRIMARY KEY(`source_id`, `cid`)
+);
+--> statement-breakpoint
+ALTER TABLE `api_members` ADD `delegation` text;--> statement-breakpoint
+ALTER TABLE `api_members` ADD `delegation_cid` text;--> statement-breakpoint
+ALTER TABLE `api_members` ADD `nb_protocols` text;--> statement-breakpoint
+ALTER TABLE `api_members` ADD `expires_at` integer;--> statement-breakpoint
+ALTER TABLE `api_members` ADD `revoked_at` integer;--> statement-breakpoint
+ALTER TABLE `api_members` ADD `invite_token_hash` text;--> statement-breakpoint
+CREATE UNIQUE INDEX `api_members_invite_token_idx` ON `api_members` (`invite_token_hash`);--> statement-breakpoint
+ALTER TABLE `api_sources` ADD `billing_mode` text DEFAULT 'x402' NOT NULL;--> statement-breakpoint
+ALTER TABLE `api_sources` ADD `webhook_secret_ciphertext` text;--> statement-breakpoint
+ALTER TABLE `api_sources` ADD `previous_webhook_secret_ciphertext` text;--> statement-breakpoint
+ALTER TABLE `api_sources` ADD `previous_webhook_secret_expires_at` integer;

package/migrations/0005_member_notify.sql

@@ -0,0 +1,3 @@
+ALTER TABLE `api_members` ADD `invite_expires_at` integer;--> statement-breakpoint
+ALTER TABLE `api_members` ADD `notify_reviews` integer DEFAULT true NOT NULL;--> statement-breakpoint
+ALTER TABLE `api_members` ADD `review_email_at` integer;

package/migrations/0006_source_collections.sql

@@ -0,0 +1,16 @@
+CREATE TABLE `api_source_collections` (
+	`source_id` text NOT NULL,
+	`collection_id` text NOT NULL,
+	`protocol_did` text NOT NULL,
+	`relation` text NOT NULL,
+	`linked_by` text NOT NULL,
+	`linked_at` integer NOT NULL,
+	`checked_at` integer NOT NULL,
+	`verified_at` integer NOT NULL,
+	`miss_count` integer DEFAULT 0 NOT NULL,
+	PRIMARY KEY(`source_id`, `collection_id`)
+);
+--> statement-breakpoint
+CREATE INDEX `api_source_collections_collection_idx` ON `api_source_collections` (`collection_id`);--> statement-breakpoint
+CREATE INDEX `api_source_collections_checked_idx` ON `api_source_collections` (`checked_at`);--> statement-breakpoint
+CREATE INDEX `claim_ingests_lane_created_claim_idx` ON `claim_ingests` (`lane`,`created_at`,`claim_id`);

package/migrations/0007_api_settlement.sql

@@ -0,0 +1,27 @@
+CREATE TABLE `__new_api_charges` (
+	`claim_id` text PRIMARY KEY NOT NULL,
+	`source_id` text NOT NULL,
+	`settlement_id` text,
+	`amount` text NOT NULL,
+	`asset` text DEFAULT 'upay' NOT NULL,
+	`offer_id` text,
+	`payer_did` text,
+	`key_prefix` text,
+	`amount_cents` integer NOT NULL,
+	`status` text DEFAULT 'reserved' NOT NULL,
+	`tx_hash` text,
+	`settle_result` text,
+	`payment_header` text,
+	`error` text,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+INSERT INTO `__new_api_charges`("claim_id", "source_id", "settlement_id", "amount", "asset", "offer_id", "payer_did", "key_prefix", "amount_cents", "status", "tx_hash", "settle_result", "payment_header", "error", "created_at", "updated_at") SELECT "claim_id", "source_id", NULL, "amount", "asset", "offer_id", "payer_did", "key_prefix", "amount_cents", CASE "status" WHEN 'settled' THEN 'paid' WHEN 'pending' THEN 'failed' ELSE "status" END, NULL, CASE WHEN "charge_id" IS NOT NULL THEN json_object('legacyChargeId', "charge_id") END, NULL, CASE "status" WHEN 'settled' THEN 'legacy_hold' WHEN 'pending' THEN coalesce("error", 'settlement_lost') ELSE "error" END, "created_at", "updated_at" FROM `api_charges`;--> statement-breakpoint
+DROP TABLE `api_charges`;--> statement-breakpoint
+ALTER TABLE `__new_api_charges` RENAME TO `api_charges`;--> statement-breakpoint
+CREATE INDEX `api_charges_settlement_idx` ON `api_charges` (`settlement_id`);--> statement-breakpoint
+CREATE INDEX `api_charges_status_updated_idx` ON `api_charges` (`status`,`updated_at`);--> statement-breakpoint
+CREATE INDEX `api_charges_source_created_idx` ON `api_charges` (`source_id`,`created_at`);--> statement-breakpoint
+CREATE INDEX `api_charges_key_created_idx` ON `api_charges` (`key_prefix`,`created_at`);--> statement-breakpoint
+CREATE INDEX `api_charges_created_idx` ON `api_charges` (`created_at`);

package/migrations/0008_review_extend.sql

@@ -0,0 +1 @@
+ALTER TABLE `api_charges` ADD `reservation_expires_at` integer;

package/migrations/0009_card_refunds.sql

@@ -0,0 +1,4 @@
+ALTER TABLE `api_charges` ADD `refunded_at` integer;--> statement-breakpoint
+ALTER TABLE `api_charges` ADD `refund_id` text;--> statement-breakpoint
+ALTER TABLE `api_charges` ADD `refunded_amount_cents` integer;--> statement-breakpoint
+ALTER TABLE `api_charges` ADD `refund_checked_at` integer;

package/migrations/0010_even_scorpion.sql

@@ -0,0 +1,16 @@
+CREATE TABLE `ai_calls` (
+	`call_id` text PRIMARY KEY NOT NULL,
+	`claim_id` text NOT NULL,
+	`fact` text NOT NULL,
+	`model` text NOT NULL,
+	`prompt_tokens` integer,
+	`completion_tokens` integer,
+	`cached_tokens` integer,
+	`cost_micro_usd` integer,
+	`cost_status` text DEFAULT 'pending' NOT NULL,
+	`created_at` integer NOT NULL,
+	`cost_at` integer
+);
+--> statement-breakpoint
+CREATE INDEX `ai_calls_pending_idx` ON `ai_calls` (`cost_status`,`created_at`);--> statement-breakpoint
+CREATE INDEX `ai_calls_claim_idx` ON `ai_calls` (`claim_id`);

package/migrations/0011_mcp_oauth.sql

@@ -0,0 +1,27 @@
+CREATE TABLE `mcp_approvals` (
+	`id` text PRIMARY KEY NOT NULL,
+	`grant_id` text NOT NULL,
+	`did` text NOT NULL,
+	`source_id` text NOT NULL,
+	`protocol_did` text NOT NULL,
+	`client_id` text NOT NULL,
+	`client_name` text NOT NULL,
+	`request_digest` text NOT NULL,
+	`price` text NOT NULL,
+	`max_amount_upay` text NOT NULL,
+	`billing_mode` text NOT NULL,
+	`status` text DEFAULT 'pending' NOT NULL,
+	`delegation` text,
+	`offer_id` text,
+	`payment_intent_id` text,
+	`expires_at` integer NOT NULL,
+	`created_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `mcp_approvals_live_idx` ON `mcp_approvals` (`grant_id`,`request_digest`) WHERE status in ('pending', 'approved', 'awaiting_3ds');--> statement-breakpoint
+CREATE INDEX `mcp_approvals_expires_idx` ON `mcp_approvals` (`expires_at`);--> statement-breakpoint
+ALTER TABLE `api_audit` ADD `client_id` text;--> statement-breakpoint
+ALTER TABLE `api_audit` ADD `client_name` text;--> statement-breakpoint
+ALTER TABLE `api_charges` ADD `via` text;--> statement-breakpoint
+CREATE INDEX `api_charges_via_created_idx` ON `api_charges` (`via`,`created_at`);--> statement-breakpoint
+ALTER TABLE `api_claims` ADD `via` text;

package/migrations/0012_mcp_standing.sql

@@ -0,0 +1,21 @@
+CREATE TABLE `mcp_standing` (
+	`grant_id` text PRIMARY KEY NOT NULL,
+	`did` text NOT NULL,
+	`per_claim_upay` integer NOT NULL,
+	`total_upay` integer NOT NULL,
+	`spent_upay` integer DEFAULT 0 NOT NULL,
+	`until` integer NOT NULL,
+	`delegation` text,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `mcp_standing_spends` (
+	`grant_id` text NOT NULL,
+	`request_digest` text NOT NULL,
+	`spend_id` text NOT NULL,
+	`upay` integer NOT NULL,
+	`created_at` integer NOT NULL,
+	PRIMARY KEY(`grant_id`, `request_digest`)
+);
+--> statement-breakpoint
+CREATE INDEX `mcp_standing_spends_grant_created_idx` ON `mcp_standing_spends` (`grant_id`,`created_at`);

package/migrations/0013_unknown_krista_starr.sql

@@ -0,0 +1,2 @@
+CREATE INDEX `cbd_claim` ON `claim_body_digests` (`claim_id`,`collection_id`);--> statement-breakpoint
+CREATE INDEX `dec_collection_chain` ON `decisions` (`collection_id`,`chain_status`,`created_at`);

package/migrations/0014_last_carnage.sql

@@ -0,0 +1,14 @@
+-- fact_cache gains `rubric_id` in its primary key (an answer belongs to ONE work order). Hand-edited:
+-- drizzle-kit's table rebuild copied the old rows with an INSERT … SELECT that reads `rubric_id`
+-- from the OLD table, which has no such column. The rows are a transient retry cache (fail-soft by
+-- contract), so they are dropped, not copied: an in-flight step just re-runs its connectors once.
+DROP TABLE `fact_cache`;--> statement-breakpoint
+CREATE TABLE `fact_cache` (
+	`claim_id` text NOT NULL,
+	`rubric_id` text NOT NULL,
+	`kind` text NOT NULL,
+	`name` text NOT NULL,
+	`fact` text NOT NULL,
+	`created_at` integer NOT NULL,
+	PRIMARY KEY(`claim_id`, `rubric_id`, `kind`, `name`)
+);

package/migrations/0015_company_authority.sql

@@ -0,0 +1,26 @@
+CREATE TABLE `collection_reviewers` (
+	`collection_id` text NOT NULL,
+	`member_did` text NOT NULL,
+	`root_did` text NOT NULL,
+	`delegation` text NOT NULL,
+	`delegation_cid` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`revoked_at` integer,
+	`created_at` integer NOT NULL,
+	PRIMARY KEY(`collection_id`, `delegation_cid`)
+);
+--> statement-breakpoint
+CREATE INDEX `collection_reviewers_member_idx` ON `collection_reviewers` (`collection_id`,`member_did`);--> statement-breakpoint
+ALTER TABLE `api_claims` ADD `content_digest` text;--> statement-breakpoint
+ALTER TABLE `api_claims` ADD `content` text;--> statement-breakpoint
+ALTER TABLE `api_claims` ADD `submission` text;--> statement-breakpoint
+ALTER TABLE `api_members` ADD `reviewer_delegation` text;--> statement-breakpoint
+ALTER TABLE `api_members` ADD `reviewer_delegation_expires_at` integer;--> statement-breakpoint
+ALTER TABLE `api_sources` ADD `company_entity_did` text;--> statement-breakpoint
+ALTER TABLE `api_sources` ADD `company_link` text;--> statement-breakpoint
+ALTER TABLE `api_sources` ADD `company_link_issued_at` integer;--> statement-breakpoint
+ALTER TABLE `api_sources` ADD `payee_field` text;--> statement-breakpoint
+ALTER TABLE `api_sources` ADD `app_keys` text;--> statement-breakpoint
+ALTER TABLE `claim_reviews` ADD `reviewer_grant` text;--> statement-breakpoint
+ALTER TABLE `watched_collections` ADD `operator_amounts` text DEFAULT 'off' NOT NULL;--> statement-breakpoint
+ALTER TABLE `watched_collections` ADD `retention_days` integer DEFAULT 90 NOT NULL;

package/migrations/0016_owner_only_links.sql

@@ -0,0 +1,6 @@
+-- D9/F15: only the collection's chain owner links it. An evaluator's link is not one, so it goes
+-- with the column rather than surviving as an owner link until the hourly re-check.
+DELETE FROM `api_source_collections` WHERE `relation` = 'evaluator';--> statement-breakpoint
+ALTER TABLE `api_source_collections` DROP COLUMN `relation`;--> statement-breakpoint
+-- D7: who said yes to the act seam's amount, so a yes never outlives an ownership transfer.
+ALTER TABLE `watched_collections` ADD `operator_amounts_by` text;

package/migrations/0017_organisations.sql

@@ -0,0 +1,35 @@
+-- Who SENT an API claim (the OAuth user; null for a key or the console), set server-side — never
+-- from the content. Nullable, no default: every existing row reads null.
+ALTER TABLE `api_claims` ADD `submitted_by` text;--> statement-breakpoint
+-- When a source first went `active` (set once, never cleared); null ⇒ its id never left the oracle.
+ALTER TABLE `api_sources` ADD `activated_at` integer;--> statement-breakpoint
+-- A source live today was activated by an earlier sync; the moment is unknown, so its creation.
+UPDATE `api_sources` SET `activated_at` = `created_at` WHERE `status` IN ('active', 'paused');--> statement-breakpoint
+-- D10 (owner, 2026-10-10): a source never exists without an organisation (its on-chain entity).
+-- Devnet sources made before D10 have none, so they are DELETED, not migrated — with every row
+-- that hangs off them. D1 has no foreign keys to cascade: children first, the source's claims'
+-- rows while `api_claims` still lists them. The same list as `lib/api-lane/source-delete.ts`.
+-- SQL cannot reach R2: the uploads (and exports) are not deleted but made due now, so the hourly
+-- retention sweep — which finds objects only through these rows — deletes each object, then its row.
+DELETE FROM `claim_reviews` WHERE `claim_id` IN (SELECT `claim_id` FROM `api_claims` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL));--> statement-breakpoint
+DELETE FROM `decisions` WHERE `claim_id` IN (SELECT `claim_id` FROM `api_claims` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL));--> statement-breakpoint
+DELETE FROM `claim_ingests` WHERE `claim_id` IN (SELECT `claim_id` FROM `api_claims` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL));--> statement-breakpoint
+DELETE FROM `fact_cache` WHERE `claim_id` IN (SELECT `claim_id` FROM `api_claims` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL));--> statement-breakpoint
+DELETE FROM `ai_calls` WHERE `claim_id` IN (SELECT `claim_id` FROM `api_claims` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL));--> statement-breakpoint
+DELETE FROM `claim_body_digests` WHERE `claim_id` IN (SELECT `claim_id` FROM `api_claims` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL));--> statement-breakpoint
+DELETE FROM `claim_attachment_cids` WHERE `claim_id` IN (SELECT `claim_id` FROM `api_claims` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL));--> statement-breakpoint
+DELETE FROM `matrix_deliveries` WHERE `claim_id` IN (SELECT `claim_id` FROM `api_claims` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL));--> statement-breakpoint
+DELETE FROM `matrix_deliveries` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_events` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_charges` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+UPDATE `api_uploads` SET `delete_at` = 0 WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_idempotency` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `webhook_endpoints` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_source_collections` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_revocations` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_members` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_keys` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `mcp_approvals` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_audit` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_claims` WHERE `source_id` IN (SELECT `source_id` FROM `api_sources` WHERE `company_entity_did` IS NULL);--> statement-breakpoint
+DELETE FROM `api_sources` WHERE `company_entity_did` IS NULL;

package/migrations/0018_remove_app_signed.sql

@@ -0,0 +1,4 @@
+-- Owner 2026-10-10: app-signed submissions are gone. The app's `submission` JWS and the company
+-- link's `appKeys` copy go with them; neither column is indexed, so SQLite drops them in place.
+ALTER TABLE `api_claims` DROP COLUMN `submission`;--> statement-breakpoint
+ALTER TABLE `api_sources` DROP COLUMN `app_keys`;

package/migrations/0019_submitted_via.sql

@@ -0,0 +1,2 @@
+ALTER TABLE `api_claims` ADD `submitted_via` text;--> statement-breakpoint
+ALTER TABLE `api_claims` ADD `submitted_via_verified` integer;

package/migrations/0020_drop_decision_to_pay.sql

@@ -0,0 +1,4 @@
+-- Owner 2026-10-11: one credential per decision (UDID). The engine's receipt itself carries the
+-- DecisionToPayCredential type and the payment binding, so the separate DTP is gone. The column is
+-- not indexed, so SQLite drops it in place.
+ALTER TABLE `decisions` DROP COLUMN `decision_to_pay`;

package/migrations/0021_manual_erase.sql

@@ -0,0 +1,25 @@
+DROP INDEX `api_claims_erase_idx`;--> statement-breakpoint
+ALTER TABLE `api_claims` DROP COLUMN `erase_body_at`;--> statement-breakpoint
+CREATE TABLE `__new_api_uploads` (
+	`upload_id` text PRIMARY KEY NOT NULL,
+	`source_id` text NOT NULL,
+	`r2_key` text NOT NULL,
+	`cid` text NOT NULL,
+	`media_type` text NOT NULL,
+	`size` integer NOT NULL,
+	`claim_id` text,
+	`delete_at` integer,
+	`created_at` integer NOT NULL
+);
+--> statement-breakpoint
+INSERT INTO `__new_api_uploads`("upload_id", "source_id", "r2_key", "cid", "media_type", "size", "claim_id", "delete_at", "created_at") SELECT "upload_id", "source_id", "r2_key", "cid", "media_type", "size", "claim_id", "delete_at", "created_at" FROM `api_uploads`;--> statement-breakpoint
+DROP TABLE `api_uploads`;--> statement-breakpoint
+ALTER TABLE `__new_api_uploads` RENAME TO `api_uploads`;--> statement-breakpoint
+CREATE INDEX `api_uploads_delete_idx` ON `api_uploads` (`delete_at`);--> statement-breakpoint
+CREATE INDEX `api_uploads_claim_idx` ON `api_uploads` (`claim_id`);--> statement-breakpoint
+-- Owner 2026-10-11: no automatic deletion. A live source's uploads lose their retention clock (an export
+-- bundle keeps its day; a deleted source's files stay due, or their R2 objects would have no row).
+UPDATE `api_uploads` SET `delete_at` = NULL WHERE `r2_key` LIKE 'uploads/%' AND `source_id` IN (SELECT `source_id` FROM `api_sources`);--> statement-breakpoint
+ALTER TABLE `claim_ingests` ADD `erased_at` integer;--> statement-breakpoint
+ALTER TABLE `api_sources` DROP COLUMN `retention_days`;--> statement-breakpoint
+ALTER TABLE `watched_collections` DROP COLUMN `retention_days`;

package/migrations/0022_errored_facts.sql

@@ -0,0 +1 @@
+ALTER TABLE `decisions` ADD `errored_facts` text;

package/migrations/0023_review_billing.sql

@@ -0,0 +1,20 @@
+CREATE TABLE `review_billing_delegations` (
+	`source_id` text PRIMARY KEY NOT NULL,
+	`payer_did` text NOT NULL,
+	`delegation_cid` text NOT NULL,
+	`max_amount` text NOT NULL,
+	`cap_upay` integer NOT NULL,
+	`spent_upay` integer DEFAULT 0 NOT NULL,
+	`expires_at` integer NOT NULL,
+	`not_before` integer,
+	`delegation_ciphertext` text NOT NULL,
+	`created_by` text NOT NULL,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `review_billing_delegations_expires_idx` ON `review_billing_delegations` (`expires_at`);--> statement-breakpoint
+ALTER TABLE `api_charges` ADD `scheme` text;--> statement-breakpoint
+ALTER TABLE `api_charges` ADD `lane` text;--> statement-breakpoint
+ALTER TABLE `api_charges` ADD `collection_id` text;--> statement-breakpoint
+ALTER TABLE `watched_collections` ADD `billing_source_id` text;

package/migrations/0024_pending_task_details.sql

@@ -0,0 +1 @@
+ALTER TABLE `decisions` ADD `pending_task_details` text;