@nurix/nustack 0.24.0 → 0.25.1

package/dist/machine.sql

@@ -0,0 +1,934 @@
+-- packages/contracts/src/store/machine.generated.sql - GENERATED by scripts/store-schema/compile.mjs; never edit.
+-- The machine database: shared tables cut from packages/studio/seed/init.sql, machine-only tables, outbox triggers.
+
+CREATE TABLE `users` (
+    `id`                text PRIMARY KEY NOT NULL,
+    `label`             text NOT NULL,
+    `primary_email`     text NOT NULL,
+    `normalized_email`  text NOT NULL,
+    `normalized_domain` text NOT NULL,
+    `email_verified_at` text,
+    `password_hash`     text NOT NULL,
+    `auth_user_id`      text,
+    `google_id`         text,
+    `microsoft_id`      text,
+    
+    
+    
+    
+    
+    
+    
+    `oidc_issuer`       text,
+    `oidc_subject`      text,
+    `status`            text NOT NULL DEFAULT 'active' CHECK (`status` IN ('active', 'disabled')),
+    `last_sign_in_at`   text,
+    `created_at`        text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`        text NOT NULL DEFAULT (datetime('now')),
+    `row_version`       integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE TABLE `organizations` (
+    `id`                 text PRIMARY KEY NOT NULL,
+    `label`              text NOT NULL,
+    `slug`               text NOT NULL,
+    `created_by_user_id` text,
+    
+    
+    
+    `status`             text NOT NULL DEFAULT 'active' CHECK (`status` IN ('active', 'archived', 'locked')),
+    
+    `normalized_domain`  text,
+    
+    
+    
+    `claim_source`       text CHECK (`claim_source` IS NULL OR `claim_source` IN ('domain_bootstrap', 'seed')),
+    `domain_verified_at` text,
+    
+    
+    
+    `pinned_slots`       integer NOT NULL DEFAULT 5,
+    
+    
+    
+    
+    
+    
+    
+    `license_tier`       text NOT NULL DEFAULT 'trial'
+                         CHECK (`license_tier` IN ('trial', 'pilot', 'paid', 'internal')),
+    `is_enrollment_open` integer NOT NULL DEFAULT 1,
+    
+    
+    
+    `slack_webhook_url`  text,
+    
+    `monthly_spend_cap_cents`      integer CHECK (`monthly_spend_cap_cents` IS NULL OR `monthly_spend_cap_cents` > 0),
+    `session_budget_default_cents` integer CHECK (`session_budget_default_cents` IS NULL OR `session_budget_default_cents` > 0),
+    `created_at`         text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`         text NOT NULL DEFAULT (datetime('now')),
+    `row_version`        integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE TABLE `organization_user_map` (
+    `id`             text PRIMARY KEY NOT NULL,
+    `organization_id`   text NOT NULL,
+    `user_id`        text NOT NULL,
+    
+    
+    
+    
+    
+    
+    `role`           text NOT NULL CHECK (`role` IN ('owner', 'admin', 'member', 'viewer')),
+    
+    
+    
+    
+    
+    
+    `joined_via`     text CHECK (`joined_via` IN ('domain_bootstrap', 'domain_autojoin', 'organization_creator', 'invited', 'scim')),
+    
+    
+    `status`         text NOT NULL DEFAULT 'active' CHECK (`status` IN ('active', 'removed')),
+    `removed_at`     text,
+    `created_at`     text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`     text NOT NULL DEFAULT (datetime('now')),
+    `row_version`    integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE TABLE `projects` (
+    `id`                   text PRIMARY KEY NOT NULL,
+    `organization_id`         text,
+    `created_by_user_id`   text,
+    `label`                text NOT NULL,
+    
+    
+    
+    
+    
+    
+    `description`          text,
+    `status`               text NOT NULL DEFAULT 'initializing' CHECK (`status` IN ('initializing', 'active', 'initialization_failed', 'archived')),
+    
+    
+    
+    
+    `mode`                 text NOT NULL DEFAULT 'specification' CHECK (`mode` IN ('specification', 'coding')),
+    
+    
+    
+    `model_tier`           text NOT NULL DEFAULT 'regular',
+    `initialized_at`       text,
+    `archived_at`          text,
+    
+    
+    
+    
+    `agent_slug`      text,
+    `agent_version`   text,
+    
+    `init_status`          text NOT NULL DEFAULT 'pending' CHECK (`init_status` IN ('pending', 'copying', 'completed', 'failed')),
+    `init_manifest_json`   text NOT NULL DEFAULT '{}' CHECK (json_valid(`init_manifest_json`)),
+    `init_error_code`      text,
+    `init_idempotency_key` text,
+    `init_completed_at`    text,
+    
+    `publication_state`      text NOT NULL DEFAULT 'private' CHECK (`publication_state` IN ('private', 'public')),
+    `public_slug`            text,
+    `public_label`           text,
+    `public_tagline`         text,
+    `public_description`     text,
+    `public_categories_json` text CHECK (`public_categories_json` IS NULL OR json_valid(`public_categories_json`)),
+    `public_media_json`      text CHECK (`public_media_json` IS NULL OR json_valid(`public_media_json`)),
+    `public_links_json`      text CHECK (`public_links_json` IS NULL OR json_valid(`public_links_json`)),
+    `published_at`           text,
+    `public_updated_at`      text,
+    
+    `github_installation_id`   integer,
+    `github_repo_full_name`    text,
+    `github_branch`            text,
+    `github_known_head`        text,
+    `github_is_active`         integer,
+    
+    
+    
+    `github_last_error`        text,
+    
+    
+    
+    
+    
+    `github_write_access`      integer,
+    
+    
+    `live_version`             integer,
+    
+    
+    `settled_commit`           text,
+    `settled_at`               text,
+    
+    
+    `marker_commit`            text,
+    
+    `is_pinned`                integer NOT NULL DEFAULT 0,
+    
+    
+    
+    
+    
+    
+    
+    `deploy_token_hash`        text,
+    
+    
+    
+    
+    
+    `hosting_hostname`         text,
+    
+    
+    `previous_version`         integer,
+    
+    
+    
+    
+    `deploy_claimed_at`        text,
+    `deploy_state`             text CHECK (`deploy_state` IS NULL OR `deploy_state` IN ('building', 'publishing')),
+    
+    
+    `deploy_version`           integer,
+    
+    `last_outcome_json`        text CHECK (`last_outcome_json` IS NULL OR json_valid(`last_outcome_json`)),
+    
+    
+    
+    
+    
+    `branch_policy`            text CHECK (`branch_policy` IS NULL OR `branch_policy` IN ('trunk', 'branch')),
+    
+    
+    `installed_harness_version` text,
+    `harness_version_id`       text,
+    `harness_id`               text,
+    `harness_linked_at`        text,
+    `harness_pin_held`         integer NOT NULL DEFAULT 0 CHECK (`harness_pin_held` IN (0, 1)),
+    
+    
+    
+    
+    
+    `harness_track`              text,
+    `harness_pinned_semver`      text,
+    `harness_is_canary`          integer,
+    `harness_current_version_id` text,
+    `harness_compiled_through`   text,
+    `created_at`           text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`           text NOT NULL DEFAULT (datetime('now')),
+    `row_version`          integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE TABLE `harness_project_versions` (
+    `id`                       text PRIMARY KEY NOT NULL,
+    `project_id`               text NOT NULL,
+    `semver`                   text NOT NULL,
+    `digest`                   text NOT NULL,
+    `catalog_version`          text NOT NULL,
+    `definition_snapshot_json` text NOT NULL CHECK (json_valid(`definition_snapshot_json`)),
+    `diff_json`                text NOT NULL CHECK (json_valid(`diff_json`)),
+    `author_user_id`           text,
+    `compile_mode`             text NOT NULL CHECK (`compile_mode` IN ('model', 'mechanical')),
+    `runtimes_json`            text NOT NULL CHECK (json_valid(`runtimes_json`)),
+    `r2_prefix`                text NOT NULL,
+    `is_canary`                integer NOT NULL DEFAULT 0 CHECK (`is_canary` IN (0, 1)),
+    `created_at`               text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`               text NOT NULL DEFAULT (datetime('now')),
+    `uploaded_at`              text,
+    `row_version`   integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE TABLE `project_files` (
+    `id`            text PRIMARY KEY NOT NULL,
+    `project_id`        text NOT NULL,
+    `path`          text NOT NULL,
+    
+    
+    `ref`           text NOT NULL DEFAULT 'main',
+    `type`          text NOT NULL,
+    `status`        text NOT NULL,
+    `body_sha256`   text NOT NULL,
+    `git_blob_sha`  text NOT NULL,
+    
+    `body_bytes`    integer NOT NULL DEFAULT 0,
+    
+    `git_mode`      text NOT NULL DEFAULT '100644' CHECK (`git_mode` IN ('100644', '100755', '120000', '160000')),
+    
+    `is_opaque`     integer NOT NULL DEFAULT 0 CHECK (`is_opaque` IN (0, 1)),
+    `settlement_id` text NOT NULL,
+    `record_genre`  text,
+    `fields_json`   text CHECK (`fields_json` IS NULL OR json_valid(`fields_json`)),
+    `record_date`   text,
+    `parse_version` integer,
+    `commit_sha`    text,
+    `created_at`    text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`    text NOT NULL DEFAULT (datetime('now')),
+    `row_version`   integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer,
+    CHECK (CASE WHEN `record_genre` IS NULL THEN `fields_json` IS NULL AND `parse_version` IS NULL ELSE `fields_json` IS NOT NULL AND `parse_version` IS NOT NULL END)
+);
+
+CREATE TABLE `project_local_bindings` (
+    `id`                      text PRIMARY KEY NOT NULL,
+    `project_id`                  text NOT NULL,
+    `device_id`               text,
+    `user_id`                 text,
+    `repository_fingerprint`  text NOT NULL,
+    `bound_branch`            text NOT NULL,
+    `display_label`           text,
+    `protocol_version`        text NOT NULL,
+    `last_reported_commit_id` text,
+    `state`                   text NOT NULL DEFAULT 'healthy'
+                              CHECK (`state` IN ('healthy', 'degraded', 'removed')),
+    `health_json`             text DEFAULT '{}' CHECK (`health_json` IS NULL OR json_valid(`health_json`)),
+    `idempotency_key`         text,
+    `created_at`              text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`              text NOT NULL DEFAULT (datetime('now')),
+    `row_version`             integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE TABLE `project_commits` (
+    `id`               text PRIMARY KEY NOT NULL,
+    `project_id`       text NOT NULL,
+    `ref`              text NOT NULL,
+    `sha`              text NOT NULL,
+    `parent_shas_json` text NOT NULL DEFAULT '[]' CHECK (json_valid(`parent_shas_json`)),
+    `author_name`      text,
+    `author_email`     text,
+    `subject`          text NOT NULL,
+    `committed_at`     text NOT NULL,
+    `created_at`       text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`       text NOT NULL DEFAULT (datetime('now')),
+    `row_version`      integer NOT NULL DEFAULT 1,
+    `sync_seq`         integer
+);
+
+CREATE TABLE `harness_records` (
+    `id`                  text PRIMARY KEY,
+    `project_id`          text NOT NULL,
+    `kind`                text NOT NULL CHECK (`kind` IN ('obligation', 'gate_event', 'changelog', 'memory', 'backlog', 'proposal', 'triage')),
+    `schema_version`      integer NOT NULL,
+    `natural_key`         text NOT NULL,
+    `idempotency_key`     text NOT NULL,
+    `session_id`          text,
+    `plan_anchor`         text,
+    `payload_json`        text NOT NULL CHECK (json_valid(`payload_json`)),
+    `written_by_kind`     text NOT NULL CHECK (`written_by_kind` IN ('person', 'session', 'agent')),
+    `agent_definition_id` text,
+    `occurred_at`         text NOT NULL,
+    `created_at`          text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`          text NOT NULL DEFAULT (datetime('now')),
+    `row_version`   integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE TABLE `github_repositories` (
+    `repository_id`   integer PRIMARY KEY,
+    `installation_id` integer NOT NULL,
+    `full_name`       text NOT NULL,
+    `default_branch`  text NOT NULL,
+    `is_private`      integer NOT NULL DEFAULT 0,
+    `refreshed_at`    text NOT NULL DEFAULT (datetime('now')),
+    `row_version`   integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE TABLE `sessions` (
+    
+    `id`                       text PRIMARY KEY NOT NULL,
+    `kind`                     text NOT NULL DEFAULT 'work' CHECK (`kind` IN ('work', 'harness_generation')),
+    `project_id`               text,
+    `organization_id`          text NOT NULL,
+    
+    `started_by`               text NOT NULL CHECK (`started_by` IN ('person', 'parent_session', 'schedule', 'automation', 'finding')),
+    
+    `parent_session_id`        text,
+    
+    
+    
+    `agent_slug`               text,
+    `agent_version`            integer,
+    
+    `substrate`                text NOT NULL CHECK (`substrate` IN ('device', 'cloud', 'vendor')),
+    
+    `mode`                     text NOT NULL CHECK (`mode` IN ('synchronous', 'asynchronous')),
+    
+    
+    
+    
+    `nustack`                  integer NOT NULL CHECK (`nustack` IN (0, 1)),
+    `vendor`                   text NOT NULL CHECK (`vendor` IN ('claude_code', 'codex', 'opencode', 'nustack')),
+    
+    `vendor_session_id`        text,
+    `renderer`                 text NOT NULL CHECK (`renderer` IN ('claude_transcript', 'codex_transcript', 'opencode_log', 'chat')),
+    `status`                   text NOT NULL CHECK (`status` IN ('created', 'running', 'waiting_on_person', 'done', 'failed', 'cancelled', 'dropped')),
+    
+    `conversation_id`          text,
+    `inputs_json`              text CHECK (`inputs_json` IS NULL OR json_valid(`inputs_json`)),
+    `automation_id`            text,
+    `dispatched_at`            text,
+    `drop_reason`              text,
+    
+    `target_id`                text,
+    `state_json`               text CHECK (`state_json` IS NULL OR json_valid(`state_json`)),
+    
+    
+    `task`                     text,
+    `harness_version_id`       text,
+    
+    
+    
+    
+    
+    `started_by_principal_type` text,
+    `started_by_principal_id`   text,
+    `start_commit`             text,
+    
+    
+    
+    
+    
+    
+    
+    
+    `model_provider`           text,
+    `model`                    text,
+    
+    
+    
+    
+    
+    `runtime`                  text,
+    `config_digest`            text,
+    `handover`                 text,
+    `harness_semver`           text,
+    `harness_digest`           text,
+    
+    `result_json`              text CHECK (`result_json` IS NULL OR json_valid(`result_json`)),
+    `budget_cents`             integer,
+    `tags_json`                text NOT NULL DEFAULT '[]' CHECK (json_valid(`tags_json`)),
+    `cost_cents`               integer,
+    `cost_with_children_cents` integer,
+    `device_id`                text,
+    `created_at`               text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`               text NOT NULL DEFAULT (datetime('now')),
+    `row_version`   integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer,
+    
+    CHECK (CASE WHEN `kind` = 'harness_generation' THEN `target_id` IS NOT NULL ELSE `project_id` IS NOT NULL END),
+    CHECK (CASE WHEN `status` = 'dropped' THEN `dispatched_at` IS NULL ELSE `drop_reason` IS NULL END)
+);
+
+CREATE TABLE `session_label_rows` (
+    `id`               text PRIMARY KEY NOT NULL,
+    `session_id`       text NOT NULL,
+    `project_id`       text NOT NULL,
+    `agent_type`       text NOT NULL,
+    
+    `path`             text,
+    `estimated_tokens` integer NOT NULL,
+    `returned_tokens`  integer NOT NULL,
+    `handler`          text NOT NULL,
+    
+    `check_result`     text,
+    `is_bypass_used`   integer NOT NULL CHECK (`is_bypass_used` IN (0, 1)),
+    `latency_ms`       integer,
+    
+    `tokens_kept_out`  integer,
+    `created_at`       text NOT NULL,
+    `landed_at`        text NOT NULL DEFAULT (datetime('now')),
+    `row_version`   integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE TABLE `github_items` (
+    `id`                text PRIMARY KEY NOT NULL,
+    
+    `repository_id`     integer NOT NULL,
+    `kind`              text NOT NULL CHECK (`kind` IN ('issue', 'pull_request')),
+    `number`            integer NOT NULL,
+    `title`             text NOT NULL,
+    
+    `state`             text NOT NULL CHECK (`state` IN ('open', 'closed', 'merged')),
+    
+    `author`            text,
+    `labels_json`       text NOT NULL DEFAULT '[]' CHECK (json_valid(`labels_json`)),
+    
+    `head_ref`          text,
+    `base_ref`          text,
+    `html_url`          text NOT NULL,
+    
+    `updated_at_github` text NOT NULL,
+    
+    
+    
+    
+    `created_at_github` text,
+    
+    
+    
+    `merged_at`         text,
+    
+    `is_draft`          integer NOT NULL DEFAULT 0 CHECK (`is_draft` IN (0, 1)),
+    `created_at`        text NOT NULL DEFAULT (datetime('now')),
+    `updated_at`        text NOT NULL DEFAULT (datetime('now')),
+    `row_version`   integer NOT NULL DEFAULT 1,
+    `sync_seq`      integer
+);
+
+CREATE INDEX `users_sync_seq_idx` ON `users` (`sync_seq`);
+
+CREATE UNIQUE INDEX `users_normalized_email_unique` ON `users` (`normalized_email`);
+
+CREATE UNIQUE INDEX `users_auth_user_id_unique` ON `users` (`auth_user_id`) WHERE `auth_user_id` IS NOT NULL;
+
+CREATE UNIQUE INDEX `users_google_id_unique` ON `users` (`google_id`) WHERE `google_id` IS NOT NULL;
+
+CREATE UNIQUE INDEX `users_microsoft_id_unique` ON `users` (`microsoft_id`) WHERE `microsoft_id` IS NOT NULL;
+
+CREATE UNIQUE INDEX `users_oidc_subject_unique` ON `users` (`oidc_issuer`, `oidc_subject`)
+    WHERE `oidc_subject` IS NOT NULL;
+
+CREATE INDEX `users_normalized_domain_idx` ON `users` (`normalized_domain`);
+
+CREATE INDEX `organizations_sync_seq_idx` ON `organizations` (`sync_seq`);
+
+CREATE UNIQUE INDEX `organizations_slug_unique` ON `organizations` (`slug`);
+
+CREATE UNIQUE INDEX `organizations_normalized_domain_unique` ON `organizations` (`normalized_domain`)
+    WHERE `normalized_domain` IS NOT NULL;
+
+CREATE INDEX `organization_user_map_sync_seq_idx` ON `organization_user_map` (`sync_seq`);
+
+CREATE UNIQUE INDEX `organization_user_map_organization_user_unique` ON `organization_user_map` (`organization_id`, `user_id`);
+
+CREATE INDEX `organization_user_map_user_status_idx` ON `organization_user_map` (`user_id`, `status`);
+
+CREATE INDEX `projects_sync_seq_idx` ON `projects` (`sync_seq`);
+
+CREATE INDEX `projects_organization_status_updated_idx` ON `projects` (`organization_id`, `status`, `updated_at` DESC);
+
+CREATE INDEX `projects_publication_updated_idx` ON `projects` (`publication_state`, `updated_at` DESC);
+
+CREATE UNIQUE INDEX `projects_init_idempotency_key_unique` ON `projects` (`init_idempotency_key`) WHERE `init_idempotency_key` IS NOT NULL;
+
+CREATE UNIQUE INDEX `projects_public_slug_unique` ON `projects` (`public_slug`) WHERE `public_slug` IS NOT NULL;
+
+CREATE INDEX `projects_github_installation_repo_idx` ON `projects` (`github_installation_id`, `github_repo_full_name`);
+
+CREATE INDEX `projects_harness_idx` ON `projects` (`harness_id`);
+
+CREATE UNIQUE INDEX `projects_deploy_token_hash_unique` ON `projects` (`deploy_token_hash`) WHERE `deploy_token_hash` IS NOT NULL;
+
+CREATE UNIQUE INDEX `projects_hosting_hostname_unique` ON `projects` (`hosting_hostname`) WHERE `hosting_hostname` IS NOT NULL;
+
+CREATE INDEX `harness_project_versions_sync_seq_idx` ON `harness_project_versions` (`sync_seq`);
+
+CREATE UNIQUE INDEX `harness_project_versions_project_semver_unique` ON `harness_project_versions` (`project_id`, `semver`);
+
+CREATE UNIQUE INDEX `harness_project_versions_project_digest_unique` ON `harness_project_versions` (`project_id`, `digest`);
+
+CREATE INDEX `harness_project_versions_project_created_idx` ON `harness_project_versions` (`project_id`, `created_at`);
+
+CREATE INDEX `project_files_sync_seq_idx` ON `project_files` (`sync_seq`);
+
+CREATE UNIQUE INDEX `project_files_project_ref_path_unique` ON `project_files` (`project_id`, `ref`, `path`);
+
+CREATE INDEX `project_files_project_type_idx` ON `project_files` (`project_id`, `type`);
+
+CREATE INDEX `project_files_project_genre_idx` ON `project_files` (`project_id`, `record_genre`) WHERE `record_genre` IS NOT NULL;
+
+CREATE INDEX `project_local_bindings_sync_seq_idx` ON `project_local_bindings` (`sync_seq`);
+
+CREATE UNIQUE INDEX `project_local_bindings_project_fingerprint_unique`
+    ON `project_local_bindings` (`project_id`, `repository_fingerprint`)
+    WHERE `state` != 'removed';
+
+CREATE UNIQUE INDEX `project_local_bindings_idempotency_key_unique`
+    ON `project_local_bindings` (`idempotency_key`)
+    WHERE `idempotency_key` IS NOT NULL;
+
+CREATE INDEX `project_local_bindings_project_state_idx` ON `project_local_bindings` (`project_id`, `state`);
+
+CREATE INDEX `project_local_bindings_device_id_idx` ON `project_local_bindings` (`device_id`);
+
+CREATE INDEX `project_commits_sync_seq_idx` ON `project_commits` (`sync_seq`);
+
+CREATE UNIQUE INDEX `project_commits_project_ref_sha_unique` ON `project_commits` (`project_id`, `ref`, `sha`);
+
+CREATE INDEX `project_commits_project_ref_committed_idx` ON `project_commits` (`project_id`, `ref`, `committed_at` DESC);
+
+CREATE INDEX `harness_records_sync_seq_idx` ON `harness_records` (`sync_seq`);
+
+CREATE UNIQUE INDEX `harness_records_project_idempotency_unique` ON `harness_records` (`project_id`, `idempotency_key`);
+
+CREATE INDEX `harness_records_project_kind_plan_idx` ON `harness_records` (`project_id`, `kind`, `plan_anchor`);
+
+CREATE INDEX `harness_records_project_created_idx` ON `harness_records` (`project_id`, `created_at`, `id`);
+
+CREATE INDEX `github_repositories_sync_seq_idx` ON `github_repositories` (`sync_seq`);
+
+CREATE INDEX `github_repositories_installation_idx` ON `github_repositories` (`installation_id`, `full_name`);
+
+CREATE INDEX `sessions_sync_seq_idx` ON `sessions` (`sync_seq`);
+
+CREATE INDEX `sessions_automation_status_created_idx` ON `sessions` (`automation_id`, `status`, `created_at`)
+    WHERE `automation_id` IS NOT NULL;
+
+CREATE UNIQUE INDEX `sessions_target_live_unique` ON `sessions` (`target_id`)
+    WHERE `kind` = 'harness_generation' AND `status` IN ('created', 'running');
+
+CREATE INDEX `sessions_project_created_idx` ON `sessions` (`project_id`, `created_at` DESC);
+
+CREATE INDEX `sessions_parent_idx` ON `sessions` (`parent_session_id`);
+
+CREATE INDEX `sessions_vendor_idx` ON `sessions` (`vendor`, `vendor_session_id`);
+
+CREATE INDEX `sessions_organization_created_idx` ON `sessions` (`organization_id`, `created_at` DESC);
+
+CREATE INDEX `sessions_project_harness_digest_idx` ON `sessions` (`project_id`, `harness_digest`)
+    WHERE `harness_digest` IS NOT NULL;
+
+CREATE INDEX `session_label_rows_sync_seq_idx` ON `session_label_rows` (`sync_seq`);
+
+CREATE INDEX `session_label_rows_session_idx` ON `session_label_rows` (`session_id`);
+
+CREATE INDEX `session_label_rows_project_created_idx` ON `session_label_rows` (`project_id`, `created_at`, `id`);
+
+CREATE INDEX `github_items_sync_seq_idx` ON `github_items` (`sync_seq`);
+
+CREATE UNIQUE INDEX `github_items_repository_kind_number_unique` ON `github_items` (`repository_id`, `kind`, `number`);
+
+CREATE INDEX `github_items_repository_state_updated_idx` ON `github_items` (`repository_id`, `state`, `updated_at_github` DESC);
+
+CREATE INDEX `github_items_repository_head_ref_idx` ON `github_items` (`repository_id`, `head_ref`)
+    WHERE `head_ref` IS NOT NULL;
+
+CREATE TABLE `sync_outbox` (
+    `table_name`      text NOT NULL,
+    `row_key`         text NOT NULL,
+    `op`              text NOT NULL CHECK (`op` IN ('upsert', 'delete')),
+    `base_version`    integer NOT NULL,
+    `changed_json`    text NOT NULL DEFAULT '[]' CHECK (json_valid(`changed_json`)),
+    `enqueued_at`     integer NOT NULL,
+    `attempts`        integer NOT NULL DEFAULT 0,
+    `next_attempt_at` integer,
+    `last_error`      text,
+    PRIMARY KEY (`table_name`, `row_key`)
+);
+
+CREATE INDEX `sync_outbox_next_attempt_idx` ON `sync_outbox` (`next_attempt_at`);
+
+CREATE TABLE `sync_state` (
+    `name`  text PRIMARY KEY NOT NULL,
+    `value` text NOT NULL
+);
+
+CREATE TABLE `folder_roster` (
+    `path`       text PRIMARY KEY NOT NULL,
+    `label`      text NOT NULL,
+    `project_id` text NOT NULL,
+    `added_at`   integer NOT NULL
+);
+
+CREATE INDEX `folder_roster_project_idx` ON `folder_roster` (`project_id`);
+
+CREATE TABLE `parse_cache` (
+    `project_id`    text NOT NULL,
+    `path`          text NOT NULL,
+    `sha256`        text NOT NULL,
+    `genre`         text,
+    `fields_json`   text CHECK (`fields_json` IS NULL OR json_valid(`fields_json`)),
+    `parse_version` integer NOT NULL,
+    `parsed_at`     integer NOT NULL,
+    PRIMARY KEY (`project_id`, `path`)
+);
+
+CREATE TABLE `routing_latch` (
+    `session_id`    text,
+    `job_kind`      text,
+    `failures`      integer NOT NULL DEFAULT 0,
+    `budget_misses` integer NOT NULL DEFAULT 0,
+    `latched_at`    integer,
+    PRIMARY KEY (`session_id`, `job_kind`)
+);
+
+CREATE TABLE `gated_paths` (
+    `session_id` text,
+    `path`       text,
+    `gated_at`   integer,
+    PRIMARY KEY (`session_id`, `path`)
+);
+
+CREATE TABLE local_device_state (
+            id INTEGER PRIMARY KEY CHECK (id = 1),
+            device_ref TEXT,
+            api_base_url TEXT,
+            active_user_id TEXT,
+            active_user_email TEXT,
+            keychain_service TEXT,
+            keychain_account TEXT,
+            schema_version INTEGER NOT NULL DEFAULT 1,
+            last_auth_refresh_at_ms INTEGER,
+            created_at_ms INTEGER NOT NULL,
+            updated_at_ms INTEGER NOT NULL
+        , active_organization_id TEXT);
+
+CREATE TABLE local_bindings (
+            id TEXT PRIMARY KEY,
+            project_id TEXT NOT NULL,
+            organization_id TEXT NOT NULL,
+            repository_root TEXT NOT NULL,
+            git_dir TEXT NOT NULL,
+            git_common_dir TEXT NOT NULL,
+            repository_fingerprint TEXT NOT NULL,
+            bound_branch TEXT NOT NULL,
+            last_processed_commit_id TEXT,
+            last_applied_project_sequence INTEGER NOT NULL DEFAULT 0,
+            whitelist_manifest_id TEXT,
+            whitelist_manifest_sha256 TEXT,
+            whitelist_cache_path TEXT,
+            etna_profile_json TEXT CHECK (etna_profile_json IS NULL OR json_valid(etna_profile_json)),
+            status TEXT NOT NULL CHECK (status IN ('creating','active','paused','failed','removed')),
+            last_error_code TEXT,
+            last_error_detail TEXT,
+            created_at_ms INTEGER NOT NULL,
+            updated_at_ms INTEGER NOT NULL
+        , telemetry_enabled INTEGER NOT NULL DEFAULT 1);
+
+CREATE UNIQUE INDEX local_bindings_repository_root_live_unique
+            ON local_bindings (repository_root)
+            WHERE status IN ('creating','active','paused');
+
+CREATE TABLE local_commit_origins (
+            binding_id TEXT NOT NULL REFERENCES local_bindings(id),
+            commit_id TEXT NOT NULL,
+            handoff_id TEXT NOT NULL,
+            origin TEXT NOT NULL CHECK (origin = 'cloud_handoff'),
+            created_at_ms INTEGER NOT NULL,
+            PRIMARY KEY (binding_id, commit_id)
+        );
+
+CREATE TABLE inbound_handoff_applications (
+            handoff_id TEXT NOT NULL,
+            binding_id TEXT NOT NULL REFERENCES local_bindings(id),
+            state TEXT NOT NULL CHECK (state IN (
+                'received','evaluating','no_op','technical_wait','decision_required',
+                'approved','applying','committed','undo_requested','reverted',
+                'revert_conflict','superseded'
+            )),
+            manifest_sha256 TEXT,
+            base_manifest_json TEXT CHECK (base_manifest_json IS NULL OR json_valid(base_manifest_json)),
+            target_manifest_json TEXT CHECK (target_manifest_json IS NULL OR json_valid(target_manifest_json)),
+            local_state_fingerprint TEXT,
+            technical_wait_reason TEXT,
+            decision_state TEXT,
+            approved_by_user_id TEXT,
+            generated_commit_id TEXT,
+            notification_state TEXT,
+            recovery_bundle_id TEXT,
+            revert_commit_id TEXT,
+            superseded_by_handoff_id TEXT,
+            error_code TEXT,
+            error_detail TEXT,
+            created_at_ms INTEGER NOT NULL,
+            updated_at_ms INTEGER NOT NULL,
+            PRIMARY KEY (handoff_id, binding_id)
+        );
+
+CREATE TABLE local_recovery_bundles (
+            id TEXT PRIMARY KEY,
+            binding_id TEXT NOT NULL,
+            handoff_id TEXT NOT NULL,
+            bundle_path TEXT NOT NULL,
+            manifest_sha256 TEXT NOT NULL,
+            state TEXT NOT NULL CHECK (state IN ('active','restored','expired','deleted')),
+            created_at_ms INTEGER NOT NULL,
+            expires_at_ms INTEGER NOT NULL
+        );
+
+CREATE INDEX local_recovery_bundles_binding_idx ON local_recovery_bundles (binding_id);
+
+CREATE TABLE pending_uploads (
+            binding_id TEXT NOT NULL,
+            commit_id TEXT NOT NULL,
+            manifest_sha256 TEXT,
+            whitelist_manifest_sha256 TEXT,
+            idempotency_key TEXT NOT NULL,
+            attempts INTEGER NOT NULL DEFAULT 0,
+            next_retry_at_ms INTEGER,
+            last_error_code TEXT,
+            last_error_detail TEXT,
+            created_at_ms INTEGER NOT NULL,
+            updated_at_ms INTEGER NOT NULL,
+            PRIMARY KEY (binding_id, commit_id)
+        );
+
+CREATE UNIQUE INDEX pending_uploads_idempotency_key_unique
+            ON pending_uploads (idempotency_key);
+
+CREATE TABLE "cached_project_events" (
+            binding_id TEXT NOT NULL,
+            project_sequence INTEGER NOT NULL,
+            event_type TEXT NOT NULL,
+            payload_json TEXT CHECK (payload_json IS NULL OR json_valid(payload_json)),
+            applied_at_ms INTEGER,
+            created_at_ms INTEGER NOT NULL,
+            PRIMARY KEY (binding_id, project_sequence)
+        );
+
+CREATE TABLE local_filebeat_state (
+            id INTEGER PRIMARY KEY CHECK (id = 1),
+            binary_path TEXT,
+            config_dir TEXT,
+            desired_version TEXT,
+            observed_version TEXT,
+            desired_config_hash TEXT,
+            observed_config_hash TEXT,
+            process_state TEXT,
+            last_health_at_ms INTEGER,
+            created_at_ms INTEGER NOT NULL,
+            updated_at_ms INTEGER NOT NULL
+        , telemetry_enabled INTEGER NOT NULL DEFAULT 1, last_error_code TEXT);
+
+CREATE TABLE local_activity_bindings (
+            id TEXT PRIMARY KEY,
+            binding_id TEXT NOT NULL,
+            provider TEXT NOT NULL CHECK (provider IN ('claude_code','codex')),
+            provider_project_path TEXT NOT NULL,
+            path_fingerprint TEXT NOT NULL,
+            state TEXT NOT NULL CHECK (state IN ('active','missing','disabled')),
+            last_observed_at_ms INTEGER,
+            created_at_ms INTEGER NOT NULL,
+            updated_at_ms INTEGER NOT NULL
+        );
+
+CREATE UNIQUE INDEX local_activity_bindings_binding_provider_path_unique
+            ON local_activity_bindings (binding_id, provider, path_fingerprint);
+
+CREATE TABLE local_history_decisions (
+            id TEXT PRIMARY KEY,
+            binding_id TEXT NOT NULL REFERENCES local_bindings(id),
+            decision TEXT NOT NULL CHECK (decision IN ('publish_current_state','adopt_without_publishing')),
+            old_baseline_commit_id TEXT,
+            new_baseline_commit_id TEXT NOT NULL,
+            handoff_id TEXT,
+            created_at_ms INTEGER NOT NULL
+        );
+
+CREATE INDEX local_history_decisions_binding_idx
+            ON local_history_decisions (binding_id, created_at_ms);
+
+CREATE TABLE local_accepted_uploads (
+            binding_id TEXT NOT NULL REFERENCES local_bindings(id),
+            commit_id TEXT NOT NULL,
+            handoff_id TEXT NOT NULL,
+            project_sequence INTEGER NOT NULL,
+            manifest_sha256 TEXT NOT NULL,
+            created_at_ms INTEGER NOT NULL,
+            PRIMARY KEY (binding_id, commit_id)
+        );
+
+CREATE INDEX local_accepted_uploads_handoff_idx
+            ON local_accepted_uploads (handoff_id);
+
+CREATE INDEX local_bindings_project_idx ON local_bindings (project_id);
+
+CREATE TRIGGER `harness_records_outbox_insert` AFTER INSERT ON `harness_records` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying')
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('harness_records', NEW.`id`, 'upsert', 0, json_array('id', 'project_id', 'kind', 'schema_version', 'natural_key', 'idempotency_key', 'session_id', 'plan_anchor', 'payload_json', 'occurred_at'), CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'upsert', `changed_json` = (SELECT json_group_array(`value`) FROM (SELECT `value` FROM json_each(`sync_outbox`.`changed_json`) UNION SELECT `value` FROM json_each(excluded.`changed_json`))), `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `harness_records_outbox_update` AFTER UPDATE ON `harness_records` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying') AND (OLD.`id` IS NOT NEW.`id` OR OLD.`project_id` IS NOT NEW.`project_id` OR OLD.`kind` IS NOT NEW.`kind` OR OLD.`schema_version` IS NOT NEW.`schema_version` OR OLD.`natural_key` IS NOT NEW.`natural_key` OR OLD.`idempotency_key` IS NOT NEW.`idempotency_key` OR OLD.`session_id` IS NOT NEW.`session_id` OR OLD.`plan_anchor` IS NOT NEW.`plan_anchor` OR OLD.`payload_json` IS NOT NEW.`payload_json` OR OLD.`occurred_at` IS NOT NEW.`occurred_at`)
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('harness_records', NEW.`id`, 'upsert', OLD.`row_version`, (SELECT json_group_array(`c`) FROM (SELECT 'id' AS `c` WHERE OLD.`id` IS NOT NEW.`id` UNION ALL SELECT 'project_id' AS `c` WHERE OLD.`project_id` IS NOT NEW.`project_id` UNION ALL SELECT 'kind' AS `c` WHERE OLD.`kind` IS NOT NEW.`kind` UNION ALL SELECT 'schema_version' AS `c` WHERE OLD.`schema_version` IS NOT NEW.`schema_version` UNION ALL SELECT 'natural_key' AS `c` WHERE OLD.`natural_key` IS NOT NEW.`natural_key` UNION ALL SELECT 'idempotency_key' AS `c` WHERE OLD.`idempotency_key` IS NOT NEW.`idempotency_key` UNION ALL SELECT 'session_id' AS `c` WHERE OLD.`session_id` IS NOT NEW.`session_id` UNION ALL SELECT 'plan_anchor' AS `c` WHERE OLD.`plan_anchor` IS NOT NEW.`plan_anchor` UNION ALL SELECT 'payload_json' AS `c` WHERE OLD.`payload_json` IS NOT NEW.`payload_json` UNION ALL SELECT 'occurred_at' AS `c` WHERE OLD.`occurred_at` IS NOT NEW.`occurred_at`)), CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'upsert', `changed_json` = (SELECT json_group_array(`value`) FROM (SELECT `value` FROM json_each(`sync_outbox`.`changed_json`) UNION SELECT `value` FROM json_each(excluded.`changed_json`))), `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `harness_records_outbox_delete` AFTER DELETE ON `harness_records` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying')
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('harness_records', OLD.`id`, 'delete', OLD.`row_version`, '[]', CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'delete', `changed_json` = '[]', `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `project_files_outbox_insert` AFTER INSERT ON `project_files` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying')
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('project_files', NEW.`id`, 'upsert', 0, json_array('id', 'project_id', 'ref', 'path', 'type', 'status', 'body_sha256', 'git_blob_sha', 'body_bytes', 'git_mode', 'is_opaque', 'settlement_id', 'record_genre', 'fields_json', 'record_date', 'parse_version', 'commit_sha'), CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'upsert', `changed_json` = (SELECT json_group_array(`value`) FROM (SELECT `value` FROM json_each(`sync_outbox`.`changed_json`) UNION SELECT `value` FROM json_each(excluded.`changed_json`))), `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `project_files_outbox_update` AFTER UPDATE ON `project_files` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying') AND (OLD.`id` IS NOT NEW.`id` OR OLD.`project_id` IS NOT NEW.`project_id` OR OLD.`ref` IS NOT NEW.`ref` OR OLD.`path` IS NOT NEW.`path` OR OLD.`type` IS NOT NEW.`type` OR OLD.`status` IS NOT NEW.`status` OR OLD.`body_sha256` IS NOT NEW.`body_sha256` OR OLD.`git_blob_sha` IS NOT NEW.`git_blob_sha` OR OLD.`body_bytes` IS NOT NEW.`body_bytes` OR OLD.`git_mode` IS NOT NEW.`git_mode` OR OLD.`is_opaque` IS NOT NEW.`is_opaque` OR OLD.`settlement_id` IS NOT NEW.`settlement_id` OR OLD.`record_genre` IS NOT NEW.`record_genre` OR OLD.`fields_json` IS NOT NEW.`fields_json` OR OLD.`record_date` IS NOT NEW.`record_date` OR OLD.`parse_version` IS NOT NEW.`parse_version` OR OLD.`commit_sha` IS NOT NEW.`commit_sha`)
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('project_files', NEW.`id`, 'upsert', OLD.`row_version`, (SELECT json_group_array(`c`) FROM (SELECT 'id' AS `c` WHERE OLD.`id` IS NOT NEW.`id` UNION ALL SELECT 'project_id' AS `c` WHERE OLD.`project_id` IS NOT NEW.`project_id` UNION ALL SELECT 'ref' AS `c` WHERE OLD.`ref` IS NOT NEW.`ref` UNION ALL SELECT 'path' AS `c` WHERE OLD.`path` IS NOT NEW.`path` UNION ALL SELECT 'type' AS `c` WHERE OLD.`type` IS NOT NEW.`type` UNION ALL SELECT 'status' AS `c` WHERE OLD.`status` IS NOT NEW.`status` UNION ALL SELECT 'body_sha256' AS `c` WHERE OLD.`body_sha256` IS NOT NEW.`body_sha256` UNION ALL SELECT 'git_blob_sha' AS `c` WHERE OLD.`git_blob_sha` IS NOT NEW.`git_blob_sha` UNION ALL SELECT 'body_bytes' AS `c` WHERE OLD.`body_bytes` IS NOT NEW.`body_bytes` UNION ALL SELECT 'git_mode' AS `c` WHERE OLD.`git_mode` IS NOT NEW.`git_mode` UNION ALL SELECT 'is_opaque' AS `c` WHERE OLD.`is_opaque` IS NOT NEW.`is_opaque` UNION ALL SELECT 'settlement_id' AS `c` WHERE OLD.`settlement_id` IS NOT NEW.`settlement_id` UNION ALL SELECT 'record_genre' AS `c` WHERE OLD.`record_genre` IS NOT NEW.`record_genre` UNION ALL SELECT 'fields_json' AS `c` WHERE OLD.`fields_json` IS NOT NEW.`fields_json` UNION ALL SELECT 'record_date' AS `c` WHERE OLD.`record_date` IS NOT NEW.`record_date` UNION ALL SELECT 'parse_version' AS `c` WHERE OLD.`parse_version` IS NOT NEW.`parse_version` UNION ALL SELECT 'commit_sha' AS `c` WHERE OLD.`commit_sha` IS NOT NEW.`commit_sha`)), CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'upsert', `changed_json` = (SELECT json_group_array(`value`) FROM (SELECT `value` FROM json_each(`sync_outbox`.`changed_json`) UNION SELECT `value` FROM json_each(excluded.`changed_json`))), `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `project_files_outbox_delete` AFTER DELETE ON `project_files` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying')
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('project_files', OLD.`id`, 'delete', OLD.`row_version`, '[]', CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'delete', `changed_json` = '[]', `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `project_commits_outbox_insert` AFTER INSERT ON `project_commits` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying')
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('project_commits', NEW.`id`, 'upsert', 0, json_array('id', 'project_id', 'ref', 'sha', 'parent_shas_json', 'author_name', 'author_email', 'subject', 'committed_at'), CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'upsert', `changed_json` = (SELECT json_group_array(`value`) FROM (SELECT `value` FROM json_each(`sync_outbox`.`changed_json`) UNION SELECT `value` FROM json_each(excluded.`changed_json`))), `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `project_commits_outbox_update` AFTER UPDATE ON `project_commits` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying') AND (OLD.`id` IS NOT NEW.`id` OR OLD.`project_id` IS NOT NEW.`project_id` OR OLD.`ref` IS NOT NEW.`ref` OR OLD.`sha` IS NOT NEW.`sha` OR OLD.`parent_shas_json` IS NOT NEW.`parent_shas_json` OR OLD.`author_name` IS NOT NEW.`author_name` OR OLD.`author_email` IS NOT NEW.`author_email` OR OLD.`subject` IS NOT NEW.`subject` OR OLD.`committed_at` IS NOT NEW.`committed_at`)
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('project_commits', NEW.`id`, 'upsert', OLD.`row_version`, (SELECT json_group_array(`c`) FROM (SELECT 'id' AS `c` WHERE OLD.`id` IS NOT NEW.`id` UNION ALL SELECT 'project_id' AS `c` WHERE OLD.`project_id` IS NOT NEW.`project_id` UNION ALL SELECT 'ref' AS `c` WHERE OLD.`ref` IS NOT NEW.`ref` UNION ALL SELECT 'sha' AS `c` WHERE OLD.`sha` IS NOT NEW.`sha` UNION ALL SELECT 'parent_shas_json' AS `c` WHERE OLD.`parent_shas_json` IS NOT NEW.`parent_shas_json` UNION ALL SELECT 'author_name' AS `c` WHERE OLD.`author_name` IS NOT NEW.`author_name` UNION ALL SELECT 'author_email' AS `c` WHERE OLD.`author_email` IS NOT NEW.`author_email` UNION ALL SELECT 'subject' AS `c` WHERE OLD.`subject` IS NOT NEW.`subject` UNION ALL SELECT 'committed_at' AS `c` WHERE OLD.`committed_at` IS NOT NEW.`committed_at`)), CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'upsert', `changed_json` = (SELECT json_group_array(`value`) FROM (SELECT `value` FROM json_each(`sync_outbox`.`changed_json`) UNION SELECT `value` FROM json_each(excluded.`changed_json`))), `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `project_commits_outbox_delete` AFTER DELETE ON `project_commits` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying')
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('project_commits', OLD.`id`, 'delete', OLD.`row_version`, '[]', CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'delete', `changed_json` = '[]', `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `session_label_rows_outbox_insert` AFTER INSERT ON `session_label_rows` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying')
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('session_label_rows', NEW.`id`, 'upsert', 0, json_array('id', 'session_id', 'project_id', 'agent_type', 'path', 'estimated_tokens', 'returned_tokens', 'handler', 'check_result', 'is_bypass_used', 'latency_ms', 'tokens_kept_out', 'created_at'), CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'upsert', `changed_json` = (SELECT json_group_array(`value`) FROM (SELECT `value` FROM json_each(`sync_outbox`.`changed_json`) UNION SELECT `value` FROM json_each(excluded.`changed_json`))), `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `session_label_rows_outbox_update` AFTER UPDATE ON `session_label_rows` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying') AND (OLD.`id` IS NOT NEW.`id` OR OLD.`session_id` IS NOT NEW.`session_id` OR OLD.`project_id` IS NOT NEW.`project_id` OR OLD.`agent_type` IS NOT NEW.`agent_type` OR OLD.`path` IS NOT NEW.`path` OR OLD.`estimated_tokens` IS NOT NEW.`estimated_tokens` OR OLD.`returned_tokens` IS NOT NEW.`returned_tokens` OR OLD.`handler` IS NOT NEW.`handler` OR OLD.`check_result` IS NOT NEW.`check_result` OR OLD.`is_bypass_used` IS NOT NEW.`is_bypass_used` OR OLD.`latency_ms` IS NOT NEW.`latency_ms` OR OLD.`tokens_kept_out` IS NOT NEW.`tokens_kept_out` OR OLD.`created_at` IS NOT NEW.`created_at`)
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('session_label_rows', NEW.`id`, 'upsert', OLD.`row_version`, (SELECT json_group_array(`c`) FROM (SELECT 'id' AS `c` WHERE OLD.`id` IS NOT NEW.`id` UNION ALL SELECT 'session_id' AS `c` WHERE OLD.`session_id` IS NOT NEW.`session_id` UNION ALL SELECT 'project_id' AS `c` WHERE OLD.`project_id` IS NOT NEW.`project_id` UNION ALL SELECT 'agent_type' AS `c` WHERE OLD.`agent_type` IS NOT NEW.`agent_type` UNION ALL SELECT 'path' AS `c` WHERE OLD.`path` IS NOT NEW.`path` UNION ALL SELECT 'estimated_tokens' AS `c` WHERE OLD.`estimated_tokens` IS NOT NEW.`estimated_tokens` UNION ALL SELECT 'returned_tokens' AS `c` WHERE OLD.`returned_tokens` IS NOT NEW.`returned_tokens` UNION ALL SELECT 'handler' AS `c` WHERE OLD.`handler` IS NOT NEW.`handler` UNION ALL SELECT 'check_result' AS `c` WHERE OLD.`check_result` IS NOT NEW.`check_result` UNION ALL SELECT 'is_bypass_used' AS `c` WHERE OLD.`is_bypass_used` IS NOT NEW.`is_bypass_used` UNION ALL SELECT 'latency_ms' AS `c` WHERE OLD.`latency_ms` IS NOT NEW.`latency_ms` UNION ALL SELECT 'tokens_kept_out' AS `c` WHERE OLD.`tokens_kept_out` IS NOT NEW.`tokens_kept_out` UNION ALL SELECT 'created_at' AS `c` WHERE OLD.`created_at` IS NOT NEW.`created_at`)), CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'upsert', `changed_json` = (SELECT json_group_array(`value`) FROM (SELECT `value` FROM json_each(`sync_outbox`.`changed_json`) UNION SELECT `value` FROM json_each(excluded.`changed_json`))), `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;
+
+CREATE TRIGGER `session_label_rows_outbox_delete` AFTER DELETE ON `session_label_rows` WHEN NOT EXISTS (SELECT 1 FROM `sync_state` WHERE `name` = 'applying')
+BEGIN
+    INSERT INTO `sync_outbox` (`table_name`, `row_key`, `op`, `base_version`, `changed_json`, `enqueued_at`)
+    VALUES ('session_label_rows', OLD.`id`, 'delete', OLD.`row_version`, '[]', CAST(unixepoch('subsec') * 1000 AS integer))
+    ON CONFLICT (`table_name`, `row_key`) DO UPDATE SET `op` = 'delete', `changed_json` = '[]', `enqueued_at` = excluded.`enqueued_at`, `attempts` = 0, `next_attempt_at` = NULL, `last_error` = NULL;
+END;