@opengeni/db 0.12.1 → 0.13.0

package/dist/schema.d.ts

@@ -1,3 +1,3 @@
 import 'drizzle-orm';
 import 'drizzle-orm/pg-core';
-export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as socialConnections, at as socialPosts, au as stripeWebhookEvents, av as usageEvents, aw as workspaceCaptures, ax as workspaceControlEvents, ay as workspaceInferenceControls, az as workspaceMemberships, aA as workspaceModelPolicies, aB as workspacePacks, aC as workspaceSessionActivityRevisions, aD as workspaceVariableSetVariables, aE as workspaceVariableSets, w as workspaces } from './schema-BejThLcd.js';
+export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as slackBotPostOperations, at as socialConnections, au as socialPosts, av as stripeWebhookEvents, aw as usageEvents, ax as workspaceCaptures, ay as workspaceControlEvents, az as workspaceInferenceControls, aA as workspaceInstructionPolicyActivationEvents, aB as workspaceInstructionPolicyHeads, aC as workspaceInstructionPolicyRevisions, aD as workspaceMemberships, aE as workspaceModelPolicies, aF as workspacePacks, aG as workspaceSessionActivityRevisions, aH as workspaceVariableSetVariables, aI as workspaceVariableSets, w as workspaces } from './schema-Bh1Hr7xY.js';

package/dist/schema.js

@@ -79,6 +79,7 @@ import {
   sessionTurns,
   sessionWorkflowWakeOutbox,
   sessions,
+  slackBotPostOperations,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
@@ -86,6 +87,9 @@ import {
   workspaceCaptures,
   workspaceControlEvents,
   workspaceInferenceControls,
+  workspaceInstructionPolicyActivationEvents,
+  workspaceInstructionPolicyHeads,
+  workspaceInstructionPolicyRevisions,
   workspaceMemberships,
   workspaceModelPolicies,
   workspacePacks,
@@ -93,7 +97,7 @@ import {
   workspaceVariableSetVariables,
   workspaceVariableSets,
   workspaces
-} from "./chunk-VUKRIBO5.js";
+} from "./chunk-N4WTE6SB.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
@@ -176,6 +180,7 @@ export {
   sessionTurns,
   sessionWorkflowWakeOutbox,
   sessions,
+  slackBotPostOperations,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
@@ -183,6 +188,9 @@ export {
   workspaceCaptures,
   workspaceControlEvents,
   workspaceInferenceControls,
+  workspaceInstructionPolicyActivationEvents,
+  workspaceInstructionPolicyHeads,
+  workspaceInstructionPolicyRevisions,
   workspaceMemberships,
   workspaceModelPolicies,
   workspacePacks,

package/drizzle/0122_codex_capacity_same_turn.sql

@@ -0,0 +1,59 @@
+-- deployment-mode: maintenance
+-- This changes the waiter/worker contract in one no-overlap cutover: old
+-- workers terminally settled capacity waits, while new workers preserve the
+-- same logical turn. Do not run old and new workers concurrently.
+
+ALTER TABLE "session_turn_attempts"
+  DROP CONSTRAINT "session_turn_attempts_outcome_check";
+ALTER TABLE "session_turn_attempts"
+  ADD CONSTRAINT "session_turn_attempts_outcome_check"
+  CHECK (
+    "outcome" IS NULL OR "outcome" IN (
+      'completed', 'failed', 'cancelled', 'superseded', 'requires_action',
+      'waiting_capacity', 'interrupted_recoverable',
+      'lease_lost_recoverable', 'pre_cutover_closed'
+    )
+  );
+
+-- A waiter is turn-owned. Goal identity is only an optional generation fence,
+-- so goal-less prompts can wait and goal deletion cannot cascade away the
+-- durable ledger before reconciliation supersedes the blocked turn.
+ALTER TABLE "codex_capacity_waiters"
+  DROP CONSTRAINT "codex_capacity_waiters_workspace_goal_fk";
+ALTER TABLE "codex_capacity_waiters"
+  ALTER COLUMN "goal_id" DROP NOT NULL,
+  ALTER COLUMN "goal_version" DROP NOT NULL,
+  ADD COLUMN "blocked_turn_generation" integer;
+
+UPDATE "codex_capacity_waiters" waiter
+SET "blocked_turn_generation" = turn."execution_generation"
+FROM "session_turns" turn
+WHERE turn."workspace_id" = waiter."workspace_id"
+  AND turn."id" = waiter."blocked_turn_id";
+
+DO $audit$
+BEGIN
+  IF EXISTS (
+    SELECT 1
+    FROM "codex_capacity_waiters"
+    WHERE "blocked_turn_generation" IS NULL
+       OR "blocked_turn_generation" < 1
+       OR (("goal_id" IS NULL) <> ("goal_version" IS NULL))
+       OR ("goal_version" IS NOT NULL AND "goal_version" < 1)
+  ) THEN
+    RAISE EXCEPTION 'codex capacity same-turn backfill found an invalid waiter';
+  END IF;
+END $audit$;
+
+ALTER TABLE "codex_capacity_waiters"
+  ALTER COLUMN "blocked_turn_generation" SET NOT NULL,
+  DROP CONSTRAINT IF EXISTS "codex_capacity_waiters_generation_check",
+  ADD CONSTRAINT "codex_capacity_waiters_generation_check"
+  CHECK (
+    "generation" > 0
+    AND "blocked_turn_generation" > 0
+    AND (
+      ("goal_id" IS NULL AND "goal_version" IS NULL)
+      OR ("goal_id" IS NOT NULL AND "goal_version" > 0)
+    )
+  );

package/drizzle/0123_session_tool_policy_version.sql

@@ -0,0 +1,14 @@
+-- deployment-mode: rolling
+
+-- A durable policy mutation is fenced independently from the global event
+-- sequence. The default keeps old writers safe during the rolling upgrade;
+-- the policy update command advances this value with a locked SQL CAS.
+ALTER TABLE "sessions"
+  ADD COLUMN IF NOT EXISTS "tool_policy_version" integer NOT NULL DEFAULT 1;
+
+ALTER TABLE "sessions"
+  DROP CONSTRAINT IF EXISTS "sessions_tool_policy_version_check";
+
+ALTER TABLE "sessions"
+  ADD CONSTRAINT "sessions_tool_policy_version_check"
+  CHECK ("tool_policy_version" >= 1) NOT VALID;

package/drizzle/0124_session_event_duplicate_lookup.sql

@@ -0,0 +1,4 @@
+-- deployment-mode: rolling
+-- opengeni:concurrent-index lock-timeout=5s
+CREATE INDEX CONCURRENTLY IF NOT EXISTS "session_events_duplicate_of_event_idx"
+  ON "session_events" ("duplicate_of_event_id");

package/drizzle/0125_document_drops_visibility.sql

@@ -0,0 +1,29 @@
+-- deployment-mode: rolling
+-- Knowledge drops: auto-curation + per-document visibility.
+-- Follows 0041_knowledge_layer.sql conventions: IF NOT EXISTS column adds only.
+-- NO policy changes (documents already has FORCE RLS + workspace_isolation from 0041).
+--
+-- visibility: 'workspace' (anyone in the workspace) | 'private' (creator only).
+-- created_by: the access-grant subject id that created the document (text — subject
+--   ids are labels like 'dev' or 'api_key:<uuid>', not uuids). NULL for pre-existing
+--   rows, which stay workspace-visible.
+-- agent_access: whether agent retrieval surfaces (docs MCP tools) may return the
+--   document. Humans keep REST access regardless.
+-- curation_status: 'none' (ordinary add, caller supplied metadata) | 'pending'
+--   (dropped, awaiting auto-curation) | 'suggested' (curated; base move NOT applied)
+--   | 'auto_filed' (curated and moved to the suggested base) | 'failed' (curation
+--   errored; document still indexes).
+-- curation: the curator output audit blob {suggestedBaseId, suggestedBaseName,
+--   confidence, reason, originalTitle, model}.
+
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "visibility" text NOT NULL DEFAULT 'workspace';
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "created_by" text;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "agent_access" boolean NOT NULL DEFAULT true;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "summary" text;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "topics" jsonb NOT NULL DEFAULT '[]'::jsonb;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "curation_status" text NOT NULL DEFAULT 'none';
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "curation" jsonb;
+
+-- Drop review surface: list pending/suggested drops per workspace cheaply.
+CREATE INDEX IF NOT EXISTS "documents_workspace_curation_status_idx"
+  ON "documents" ("workspace_id", "curation_status");

package/drizzle/0126_document_access_constraints.sql

@@ -0,0 +1,138 @@
+-- deployment-mode: rolling
+-- Document access and knowledge-drop state hardening.
+--
+-- Existing raced Default rows are consolidated before the unique index is
+-- installed by the following concurrent migration. This migration also
+-- repairs legacy document state before adding validated checks, so an upgrade
+-- cannot strand an otherwise readable database behind an invalid old value.
+
+DO $$
+DECLARE
+  duplicate RECORD;
+BEGIN
+  FOR duplicate IN
+    SELECT workspace_id, min(id::text)::uuid AS keep_id
+    FROM document_bases
+    WHERE lower(btrim(name)) = 'default'
+    GROUP BY workspace_id
+    HAVING count(*) > 1
+  LOOP
+    -- A file can only occur once in a base. Keep the lexicographically first
+    -- Default row's document when an old race created the same file twice.
+    DELETE FROM documents duplicate_document
+    WHERE duplicate_document.workspace_id = duplicate.workspace_id
+      AND duplicate_document.base_id <> duplicate.keep_id
+      AND lower(btrim((SELECT name FROM document_bases WHERE id = duplicate_document.base_id))) = 'default'
+      AND EXISTS (
+        SELECT 1
+        FROM documents retained_document
+        WHERE retained_document.workspace_id = duplicate.workspace_id
+          AND retained_document.base_id = duplicate.keep_id
+          AND retained_document.file_id = duplicate_document.file_id
+      );
+
+    UPDATE documents
+    SET base_id = duplicate.keep_id,
+        updated_at = now()
+    WHERE workspace_id = duplicate.workspace_id
+      AND base_id <> duplicate.keep_id
+      AND lower(btrim((SELECT name FROM document_bases WHERE id = base_id))) = 'default';
+
+    UPDATE document_chunks chunk
+    SET base_id = duplicate.keep_id
+    WHERE chunk.workspace_id = duplicate.workspace_id
+      AND chunk.base_id <> duplicate.keep_id
+      AND EXISTS (
+        SELECT 1
+        FROM documents document
+        WHERE document.id = chunk.document_id
+          AND document.base_id = duplicate.keep_id
+      );
+
+    DELETE FROM document_bases base
+    WHERE base.workspace_id = duplicate.workspace_id
+      AND base.id <> duplicate.keep_id
+      AND lower(btrim(base.name)) = 'default';
+  END LOOP;
+END
+$$;
+
+-- Rows written before these fields were governed may contain values outside
+-- the new state machine. Preserve the document and its retrieval posture while
+-- normalizing only states that have no safe interpretation.
+UPDATE "documents"
+SET "visibility" = 'workspace'
+WHERE "visibility" IS NULL OR "visibility" NOT IN ('workspace', 'private');
+
+UPDATE "documents"
+SET "visibility" = 'workspace', "created_by" = NULL
+WHERE "visibility" = 'private' AND NULLIF(btrim("created_by"), '') IS NULL;
+
+UPDATE "documents"
+SET "curation_status" = 'none'
+WHERE "curation_status" IS NULL
+   OR "curation_status" NOT IN ('none', 'pending', 'suggested', 'auto_filed', 'failed');
+
+UPDATE "documents"
+SET "topics" = '[]'::jsonb
+WHERE "topics" IS NULL OR jsonb_typeof("topics") <> 'array';
+
+UPDATE "documents"
+SET "curation" = NULL
+WHERE "curation" IS NOT NULL AND jsonb_typeof("curation") <> 'object';
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'documents_visibility_chk'
+      AND conrelid = 'documents'::regclass
+  ) THEN
+    ALTER TABLE "documents"
+      ADD CONSTRAINT "documents_visibility_chk"
+      CHECK ("visibility" IN ('workspace', 'private')) NOT VALID;
+  END IF;
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'documents_curation_status_chk'
+      AND conrelid = 'documents'::regclass
+  ) THEN
+    ALTER TABLE "documents"
+      ADD CONSTRAINT "documents_curation_status_chk"
+      CHECK ("curation_status" IN ('none', 'pending', 'suggested', 'auto_filed', 'failed')) NOT VALID;
+  END IF;
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'documents_private_creator_chk'
+      AND conrelid = 'documents'::regclass
+  ) THEN
+    ALTER TABLE "documents"
+      ADD CONSTRAINT "documents_private_creator_chk"
+      CHECK ("visibility" <> 'private' OR NULLIF(btrim("created_by"), '') IS NOT NULL) NOT VALID;
+  END IF;
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'documents_topics_array_chk'
+      AND conrelid = 'documents'::regclass
+  ) THEN
+    ALTER TABLE "documents"
+      ADD CONSTRAINT "documents_topics_array_chk"
+      CHECK (jsonb_typeof("topics") = 'array') NOT VALID;
+  END IF;
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'documents_curation_object_chk'
+      AND conrelid = 'documents'::regclass
+  ) THEN
+    ALTER TABLE "documents"
+      ADD CONSTRAINT "documents_curation_object_chk"
+      CHECK ("curation" IS NULL OR jsonb_typeof("curation") = 'object') NOT VALID;
+  END IF;
+END
+$$;
+
+ALTER TABLE "documents" VALIDATE CONSTRAINT "documents_visibility_chk";
+ALTER TABLE "documents" VALIDATE CONSTRAINT "documents_curation_status_chk";
+ALTER TABLE "documents" VALIDATE CONSTRAINT "documents_private_creator_chk";
+ALTER TABLE "documents" VALIDATE CONSTRAINT "documents_topics_array_chk";
+ALTER TABLE "documents" VALIDATE CONSTRAINT "documents_curation_object_chk";

package/drizzle/0127_document_default_base_index.sql

@@ -0,0 +1,5 @@
+-- deployment-mode: rolling
+-- opengeni:concurrent-index lock-timeout=5s
+CREATE UNIQUE INDEX CONCURRENTLY IF NOT EXISTS "document_bases_workspace_default_name_uq"
+  ON "document_bases" ("workspace_id")
+  WHERE lower(btrim("name")) = 'default';

package/drizzle/0128_github_installation_authority.sql

@@ -0,0 +1,69 @@
+-- deployment-mode: rolling
+
+ALTER TABLE "github_installations"
+  ADD COLUMN IF NOT EXISTS "github_account_id" bigint,
+  ADD COLUMN IF NOT EXISTS "github_actor_id" bigint,
+  ADD COLUMN IF NOT EXISTS "github_actor_login" text,
+  ADD COLUMN IF NOT EXISTS "authority_kind" text,
+  ADD COLUMN IF NOT EXISTS "authority_checked_at" timestamptz,
+  ADD COLUMN IF NOT EXISTS "authority_expires_at" timestamptz,
+  ADD COLUMN IF NOT EXISTS "authority_nonce" text;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'github_installations_authority_kind_check'
+      AND conrelid = 'github_installations'::regclass
+  ) THEN
+    ALTER TABLE "github_installations"
+      ADD CONSTRAINT "github_installations_authority_kind_check"
+      CHECK (
+        (
+          "github_account_id" IS NULL
+          AND "github_actor_id" IS NULL
+          AND "github_actor_login" IS NULL
+          AND "authority_kind" IS NULL
+          AND "authority_checked_at" IS NULL
+          AND "authority_expires_at" IS NULL
+          AND "authority_nonce" IS NULL
+        )
+        OR (
+          "github_account_id" IS NOT NULL
+          AND "github_account_id" > 0
+          AND "github_actor_id" IS NOT NULL
+          AND "github_actor_id" > 0
+          AND "github_actor_login" IS NOT NULL
+          AND length("github_actor_login") > 0
+          AND "account_login" IS NOT NULL
+          AND length("account_login") > 0
+          AND "account_type" IS NOT NULL
+          AND "linked_by_subject_id" IS NOT NULL
+          AND length("linked_by_subject_id") > 0
+          AND "authority_kind" IS NOT NULL
+          AND "authority_checked_at" IS NOT NULL
+          AND "authority_expires_at" IS NOT NULL
+          AND "authority_checked_at" < "authority_expires_at"
+          AND "authority_expires_at" <= "authority_checked_at" + interval '10 minutes'
+          AND "authority_nonce" IS NOT NULL
+          AND length("authority_nonce") > 0
+          AND "repository_scope" = 'selected'
+          AND (
+            (
+              "authority_kind" = 'personal_owner'
+              AND "account_type" = 'User'
+              AND "github_actor_id" = "github_account_id"
+            )
+            OR (
+              "authority_kind" = 'organization_owner'
+              AND "account_type" = 'Organization'
+            )
+          )
+        )
+      );
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "github_installations_authority_nonce_uq"
+  ON "github_installations" ("authority_nonce")
+  WHERE "authority_nonce" IS NOT NULL;