@opengeni/db 0.12.6 → 0.13.1

package/dist/schema.d.ts

@@ -1,3 +1,3 @@
 import 'drizzle-orm';
 import 'drizzle-orm/pg-core';
-export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as socialConnections, at as socialPosts, au as stripeWebhookEvents, av as usageEvents, aw as workspaceCaptures, ax as workspaceControlEvents, ay as workspaceInferenceControls, az as workspaceMemberships, aA as workspaceModelPolicies, aB as workspacePacks, aC as workspaceSessionActivityRevisions, aD as workspaceVariableSetVariables, aE as workspaceVariableSets, w as workspaces } from './schema-CeXWlYcG.js';
+export { o as agentRunStates, p as apiKeys, q as auditEvents, r as billingCustomers, t as capabilityCatalogItems, u as capabilityInstallations, v as codexCapacityWaiters, x as codexCredentialLeases, y as codexResetRedemptionAttempts, z as codexRotationSettings, A as codexSubscriptionCredentials, d as composerDrafts, B as connections, C as creditLedgerEntries, D as deviceEnrollmentRequests, h as deviceEnrollmentStatusValues, E as documentBases, F as documentChunks, G as documents, g as enrollmentExposureValues, f as enrollmentOsValues, i as enrollmentStatusValues, H as enrollments, I as fileUploads, J as files, K as githubInstallationRepositories, L as githubInstallations, M as hostExportConfig, N as hostExportConsumers, O as hostExportCursorState, P as hostExportDeadLetters, Q as hostExportOutbox, R as importBatches, S as integrationOauthClients, T as integrationOauthStateNonces, U as knowledgeMemories, V as machineMetricsLatest, W as machineMetricsSeries, X as managedAccounts, Y as nestedAgentDepthConfiguration, n as newSessionDrafts, Z as packInstallations, _ as rigChanges, $ as rigVersions, a0 as rigs, j as sandboxKindValues, a1 as sandboxLeaseHolders, a2 as sandboxLeaseLivenessValues, a3 as sandboxLeases, a4 as sandboxPtySessions, a5 as sandboxRetainedProcessStateValues, a6 as sandboxRetainedProcesses, a7 as sandboxSessionEnvelopes, a8 as sandboxWorkspaceMutationActorKindValues, a9 as sandboxWorkspaceMutationAdmissions, aa as sandboxWorkspaceMutationHolderKindValues, ab as sandboxes, ac as scheduledTaskRuns, ad as scheduledTasks, ae as sessionAttemptInterruptions, s as sessionCommandReceipts, af as sessionEvents, ag as sessionGoals, ah as sessionHistoryItems, ai as sessionHumanInputRequests, aj as sessionListSnapshots, ak as sessionMcpServers, al as sessionPendingToolCalls, am as sessionPins, k as sessionRecordingCodecValues, l as sessionRecordingModeValues, m as sessionRecordingStateValues, an as sessionRecordings, ao as sessionSpawnDenials, ap as sessionSystemUpdateOutbox, aq as sessionSystemUpdates, c as sessionTurnAttempts, b as sessionTurns, ar as sessionWorkflowWakeOutbox, a as sessions, as as slackBotPostOperations, at as socialConnections, au as socialPosts, av as stripeWebhookEvents, aw as usageEvents, ax as workspaceCaptures, ay as workspaceControlEvents, az as workspaceInferenceControls, aA as workspaceInstructionPolicyActivationEvents, aB as workspaceInstructionPolicyHeads, aC as workspaceInstructionPolicyRevisions, aD as workspaceMemberships, aE as workspaceModelPolicies, aF as workspacePacks, aG as workspaceSessionActivityRevisions, aH as workspaceVariableSetVariables, aI as workspaceVariableSets, w as workspaces } from './schema-D-hyrsFt.js';

package/dist/schema.js

@@ -79,6 +79,7 @@ import {
   sessionTurns,
   sessionWorkflowWakeOutbox,
   sessions,
+  slackBotPostOperations,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
@@ -86,6 +87,9 @@ import {
   workspaceCaptures,
   workspaceControlEvents,
   workspaceInferenceControls,
+  workspaceInstructionPolicyActivationEvents,
+  workspaceInstructionPolicyHeads,
+  workspaceInstructionPolicyRevisions,
   workspaceMemberships,
   workspaceModelPolicies,
   workspacePacks,
@@ -93,7 +97,7 @@ import {
   workspaceVariableSetVariables,
   workspaceVariableSets,
   workspaces
-} from "./chunk-CYA6BHV6.js";
+} from "./chunk-N4WTE6SB.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
@@ -176,6 +180,7 @@ export {
   sessionTurns,
   sessionWorkflowWakeOutbox,
   sessions,
+  slackBotPostOperations,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
@@ -183,6 +188,9 @@ export {
   workspaceCaptures,
   workspaceControlEvents,
   workspaceInferenceControls,
+  workspaceInstructionPolicyActivationEvents,
+  workspaceInstructionPolicyHeads,
+  workspaceInstructionPolicyRevisions,
   workspaceMemberships,
   workspaceModelPolicies,
   workspacePacks,

package/drizzle/0130_workspace_instruction_policies.sql

@@ -0,0 +1,330 @@
+-- deployment-mode: rolling
+-- Backend-only workspace instruction-policy foundation. This migration performs no
+-- backfill: workspaces without an activation head retain legacy behavior.
+
+CREATE SEQUENCE IF NOT EXISTS "workspace_instruction_policy_revision_seq" AS bigint;
+
+CREATE TABLE IF NOT EXISTS "workspace_instruction_policy_revisions" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "revision" bigint NOT NULL DEFAULT nextval('workspace_instruction_policy_revision_seq'),
+  "kind" text NOT NULL,
+  "scope" text NOT NULL,
+  "role_key" text,
+  "content" text NOT NULL,
+  "content_hash" text NOT NULL,
+  "provenance_source" text NOT NULL,
+  "provenance_source_id" text,
+  "supersedes_revision_id" uuid REFERENCES "workspace_instruction_policy_revisions"("id") ON DELETE RESTRICT,
+  "created_by_subject_id" text NOT NULL,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "workspace_instruction_policy_revisions_revision_chk" CHECK ("revision" > 0),
+  CONSTRAINT "workspace_instruction_policy_revisions_target_chk" CHECK (
+    ("kind" = 'charter' AND "scope" = 'global' AND "role_key" IS NULL)
+    OR ("kind" = 'policy' AND "scope" = 'global' AND "role_key" IS NULL)
+    OR ("kind" = 'policy' AND "scope" = 'role' AND "role_key" IS NOT NULL)
+  ),
+  CONSTRAINT "workspace_instruction_policy_revisions_role_key_chk" CHECK (
+    "role_key" IS NULL
+    OR (
+      "role_key" = lower(btrim("role_key"))
+      AND length("role_key") BETWEEN 1 AND 64
+      AND "role_key" ~ '^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$'
+      AND "role_key" !~ '--'
+    )
+  ),
+  CONSTRAINT "workspace_instruction_policy_revisions_content_chk" CHECK (
+    length(btrim("content")) > 0 AND octet_length("content") <= 1048576
+  ),
+  CONSTRAINT "workspace_instruction_policy_revisions_hash_chk" CHECK (
+    "content_hash" ~ '^[0-9a-f]{64}$'
+    AND "content_hash" = encode(sha256(convert_to("content", 'UTF8')), 'hex')
+  ),
+  CONSTRAINT "workspace_instruction_policy_revisions_provenance_chk" CHECK (
+    "provenance_source" IN ('human', 'onboarding', 'knowledge_proposal', 'legacy_import')
+    AND ("provenance_source_id" IS NULL OR length("provenance_source_id") BETWEEN 1 AND 512)
+  ),
+  CONSTRAINT "workspace_instruction_policy_revisions_actor_chk" CHECK (
+    length(btrim("created_by_subject_id")) BETWEEN 1 AND 1024
+  ),
+  CONSTRAINT "workspace_instruction_policy_revisions_workspace_revision_uq"
+    UNIQUE ("workspace_id", "revision")
+);
+
+CREATE INDEX IF NOT EXISTS "workspace_instruction_policy_revisions_workspace_history_idx"
+  ON "workspace_instruction_policy_revisions"
+  ("workspace_id", "kind", "scope", "role_key", "revision" DESC);
+
+CREATE TABLE IF NOT EXISTS "workspace_instruction_policy_heads" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "kind" text NOT NULL,
+  "scope" text NOT NULL,
+  "role_key" text,
+  "revision_id" uuid NOT NULL REFERENCES "workspace_instruction_policy_revisions"("id") ON DELETE RESTRICT,
+  "revision" bigint NOT NULL,
+  "content_hash" text NOT NULL,
+  "activation_version" bigint NOT NULL,
+  "activated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "workspace_instruction_policy_heads_target_chk" CHECK (
+    ("kind" = 'charter' AND "scope" = 'global' AND "role_key" IS NULL)
+    OR ("kind" = 'policy' AND "scope" = 'global' AND "role_key" IS NULL)
+    OR ("kind" = 'policy' AND "scope" = 'role' AND "role_key" IS NOT NULL)
+  ),
+  CONSTRAINT "workspace_instruction_policy_heads_role_key_chk" CHECK (
+    "role_key" IS NULL
+    OR (
+      "role_key" = lower(btrim("role_key"))
+      AND length("role_key") BETWEEN 1 AND 64
+      AND "role_key" ~ '^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$'
+      AND "role_key" !~ '--'
+    )
+  ),
+  CONSTRAINT "workspace_instruction_policy_heads_revision_chk" CHECK (
+    "revision" > 0 AND "activation_version" > 0 AND "content_hash" ~ '^[0-9a-f]{64}$'
+  )
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "workspace_instruction_policy_heads_charter_uq"
+  ON "workspace_instruction_policy_heads" ("workspace_id")
+  WHERE "kind" = 'charter';
+
+CREATE UNIQUE INDEX IF NOT EXISTS "workspace_instruction_policy_heads_global_policy_uq"
+  ON "workspace_instruction_policy_heads" ("workspace_id")
+  WHERE "kind" = 'policy' AND "scope" = 'global';
+
+CREATE UNIQUE INDEX IF NOT EXISTS "workspace_instruction_policy_heads_role_policy_uq"
+  ON "workspace_instruction_policy_heads" ("workspace_id", "role_key")
+  WHERE "kind" = 'policy' AND "scope" = 'role';
+
+CREATE TABLE IF NOT EXISTS "workspace_instruction_policy_activation_events" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "kind" text NOT NULL,
+  "scope" text NOT NULL,
+  "role_key" text,
+  "type" text NOT NULL,
+  "activation_version" bigint NOT NULL,
+  "old_revision_id" uuid REFERENCES "workspace_instruction_policy_revisions"("id") ON DELETE RESTRICT,
+  "old_revision" bigint,
+  "old_content_hash" text,
+  "new_revision_id" uuid NOT NULL REFERENCES "workspace_instruction_policy_revisions"("id") ON DELETE RESTRICT,
+  "new_revision" bigint NOT NULL,
+  "new_content_hash" text NOT NULL,
+  "actor_subject_id" text NOT NULL,
+  "reason" text NOT NULL,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "workspace_instruction_policy_activation_events_type_chk" CHECK (
+    "type" IN ('activate', 'rollback')
+  ),
+  CONSTRAINT "workspace_instruction_policy_activation_events_target_chk" CHECK (
+    ("kind" = 'charter' AND "scope" = 'global' AND "role_key" IS NULL)
+    OR ("kind" = 'policy' AND "scope" = 'global' AND "role_key" IS NULL)
+    OR ("kind" = 'policy' AND "scope" = 'role' AND "role_key" IS NOT NULL)
+  ),
+  CONSTRAINT "workspace_instruction_policy_activation_events_role_key_chk" CHECK (
+    "role_key" IS NULL
+    OR (
+      "role_key" = lower(btrim("role_key"))
+      AND length("role_key") BETWEEN 1 AND 64
+      AND "role_key" ~ '^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$'
+      AND "role_key" !~ '--'
+    )
+  ),
+  CONSTRAINT "workspace_instruction_policy_activation_events_old_revision_chk" CHECK (
+    ("old_revision_id" IS NULL AND "old_revision" IS NULL AND "old_content_hash" IS NULL)
+    OR (
+      "old_revision_id" IS NOT NULL
+      AND "old_revision" > 0
+      AND "old_content_hash" ~ '^[0-9a-f]{64}$'
+    )
+  ),
+  CONSTRAINT "workspace_instruction_policy_activation_events_new_revision_chk" CHECK (
+    "new_revision" > 0
+    AND "new_content_hash" ~ '^[0-9a-f]{64}$'
+    AND "activation_version" > 0
+  ),
+  CONSTRAINT "workspace_instruction_policy_activation_events_audit_chk" CHECK (
+    length(btrim("actor_subject_id")) BETWEEN 1 AND 1024
+    AND length(btrim("reason")) BETWEEN 1 AND 4096
+  )
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "workspace_instruction_policy_events_target_version_uq"
+  ON "workspace_instruction_policy_activation_events"
+  ("workspace_id", "kind", "scope", coalesce("role_key", ''), "activation_version");
+
+CREATE INDEX IF NOT EXISTS "workspace_instruction_policy_events_workspace_time_idx"
+  ON "workspace_instruction_policy_activation_events" ("workspace_id", "created_at" DESC, "id");
+
+CREATE OR REPLACE FUNCTION workspace_instruction_policy_validate_revision_link()
+RETURNS trigger
+LANGUAGE plpgsql
+AS $$
+DECLARE
+  target_workspace_id uuid;
+  target_kind text;
+  target_scope text;
+  target_role_key text;
+BEGIN
+  IF NEW."supersedes_revision_id" IS NULL THEN
+    RETURN NEW;
+  END IF;
+  SELECT "workspace_id", "kind", "scope", "role_key"
+    INTO target_workspace_id, target_kind, target_scope, target_role_key
+    FROM "workspace_instruction_policy_revisions"
+    WHERE "id" = NEW."supersedes_revision_id";
+  IF NOT FOUND
+    OR target_workspace_id IS DISTINCT FROM NEW."workspace_id"
+    OR target_kind IS DISTINCT FROM NEW."kind"
+    OR target_scope IS DISTINCT FROM NEW."scope"
+    OR target_role_key IS DISTINCT FROM NEW."role_key"
+  THEN
+    RAISE EXCEPTION 'superseded instruction-policy revision must use the same workspace and target'
+      USING ERRCODE = '23514';
+  END IF;
+  RETURN NEW;
+END;
+$$;
+
+DROP TRIGGER IF EXISTS workspace_instruction_policy_revisions_validate_link
+  ON "workspace_instruction_policy_revisions";
+CREATE TRIGGER workspace_instruction_policy_revisions_validate_link
+  BEFORE INSERT OR UPDATE ON "workspace_instruction_policy_revisions"
+  FOR EACH ROW EXECUTE FUNCTION workspace_instruction_policy_validate_revision_link();
+
+CREATE OR REPLACE FUNCTION workspace_instruction_policy_validate_head()
+RETURNS trigger
+LANGUAGE plpgsql
+AS $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM "workspace_instruction_policy_revisions" revision
+    WHERE revision."id" = NEW."revision_id"
+      AND revision."account_id" = NEW."account_id"
+      AND revision."workspace_id" = NEW."workspace_id"
+      AND revision."kind" = NEW."kind"
+      AND revision."scope" = NEW."scope"
+      AND revision."role_key" IS NOT DISTINCT FROM NEW."role_key"
+      AND revision."revision" = NEW."revision"
+      AND revision."content_hash" = NEW."content_hash"
+  ) THEN
+    RAISE EXCEPTION 'instruction-policy head must identify an exact target revision'
+      USING ERRCODE = '23514';
+  END IF;
+  RETURN NEW;
+END;
+$$;
+
+DROP TRIGGER IF EXISTS workspace_instruction_policy_heads_validate_revision
+  ON "workspace_instruction_policy_heads";
+CREATE TRIGGER workspace_instruction_policy_heads_validate_revision
+  BEFORE INSERT OR UPDATE ON "workspace_instruction_policy_heads"
+  FOR EACH ROW EXECUTE FUNCTION workspace_instruction_policy_validate_head();
+
+CREATE OR REPLACE FUNCTION workspace_instruction_policy_validate_event()
+RETURNS trigger
+LANGUAGE plpgsql
+AS $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM "workspace_instruction_policy_revisions" revision
+    WHERE revision."id" = NEW."new_revision_id"
+      AND revision."account_id" = NEW."account_id"
+      AND revision."workspace_id" = NEW."workspace_id"
+      AND revision."kind" = NEW."kind"
+      AND revision."scope" = NEW."scope"
+      AND revision."role_key" IS NOT DISTINCT FROM NEW."role_key"
+      AND revision."revision" = NEW."new_revision"
+      AND revision."content_hash" = NEW."new_content_hash"
+  ) THEN
+    RAISE EXCEPTION 'instruction-policy activation event has an invalid new revision'
+      USING ERRCODE = '23514';
+  END IF;
+  IF NEW."old_revision_id" IS NOT NULL AND NOT EXISTS (
+    SELECT 1
+    FROM "workspace_instruction_policy_revisions" revision
+    WHERE revision."id" = NEW."old_revision_id"
+      AND revision."account_id" = NEW."account_id"
+      AND revision."workspace_id" = NEW."workspace_id"
+      AND revision."kind" = NEW."kind"
+      AND revision."scope" = NEW."scope"
+      AND revision."role_key" IS NOT DISTINCT FROM NEW."role_key"
+      AND revision."revision" = NEW."old_revision"
+      AND revision."content_hash" = NEW."old_content_hash"
+  ) THEN
+    RAISE EXCEPTION 'instruction-policy activation event has an invalid old revision'
+      USING ERRCODE = '23514';
+  END IF;
+  RETURN NEW;
+END;
+$$;
+
+DROP TRIGGER IF EXISTS workspace_instruction_policy_events_validate_revisions
+  ON "workspace_instruction_policy_activation_events";
+CREATE TRIGGER workspace_instruction_policy_events_validate_revisions
+  BEFORE INSERT OR UPDATE ON "workspace_instruction_policy_activation_events"
+  FOR EACH ROW EXECUTE FUNCTION workspace_instruction_policy_validate_event();
+
+CREATE OR REPLACE FUNCTION workspace_instruction_policy_reject_mutation()
+RETURNS trigger
+LANGUAGE plpgsql
+AS $$
+BEGIN
+  -- PostgreSQL implements ON DELETE CASCADE with a parent constraint trigger.
+  -- By the time that trigger deletes child rows, the workspace is absent and
+  -- this child trigger is nested. Require both facts so direct history deletes
+  -- and deletes issued by unrelated triggers remain fail-closed.
+  IF TG_OP = 'DELETE'
+    AND pg_trigger_depth() > 1
+    AND NOT EXISTS (
+      SELECT 1
+      FROM "workspaces" workspace
+      WHERE workspace."id" = OLD."workspace_id"
+    )
+  THEN
+    RETURN OLD;
+  END IF;
+  RAISE EXCEPTION 'workspace instruction-policy history is immutable'
+    USING ERRCODE = '55000';
+END;
+$$;
+
+DROP TRIGGER IF EXISTS workspace_instruction_policy_revisions_immutable
+  ON "workspace_instruction_policy_revisions";
+CREATE TRIGGER workspace_instruction_policy_revisions_immutable
+  BEFORE UPDATE OR DELETE ON "workspace_instruction_policy_revisions"
+  FOR EACH ROW EXECUTE FUNCTION workspace_instruction_policy_reject_mutation();
+
+DROP TRIGGER IF EXISTS workspace_instruction_policy_events_immutable
+  ON "workspace_instruction_policy_activation_events";
+CREATE TRIGGER workspace_instruction_policy_events_immutable
+  BEFORE UPDATE OR DELETE ON "workspace_instruction_policy_activation_events"
+  FOR EACH ROW EXECUTE FUNCTION workspace_instruction_policy_reject_mutation();
+
+ALTER TABLE "workspace_instruction_policy_revisions" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "workspace_instruction_policy_revisions" FORCE ROW LEVEL SECURITY;
+ALTER TABLE "workspace_instruction_policy_heads" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "workspace_instruction_policy_heads" FORCE ROW LEVEL SECURITY;
+ALTER TABLE "workspace_instruction_policy_activation_events" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "workspace_instruction_policy_activation_events" FORCE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS workspace_isolation ON "workspace_instruction_policy_revisions";
+CREATE POLICY workspace_isolation ON "workspace_instruction_policy_revisions"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+
+DROP POLICY IF EXISTS workspace_isolation ON "workspace_instruction_policy_heads";
+CREATE POLICY workspace_isolation ON "workspace_instruction_policy_heads"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+
+DROP POLICY IF EXISTS workspace_isolation ON "workspace_instruction_policy_activation_events";
+CREATE POLICY workspace_isolation ON "workspace_instruction_policy_activation_events"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));

package/drizzle/0131_slack_bot_install_and_post_idempotency.sql

@@ -0,0 +1,133 @@
+-- deployment-mode: rolling
+-- New readers trust only dedicated-route Slack installs whose server marker
+-- matches the exact credential version. Existing rows and rows created by old
+-- generic API pods remain markerless and fail closed. The trigger also clears a
+-- marker if a rolling old writer mutates credential/identity fields without a
+-- fresh verification in that same statement.
+
+ALTER TABLE "connections"
+  ADD COLUMN IF NOT EXISTS "verified_install_at" timestamptz,
+  ADD COLUMN IF NOT EXISTS "verified_install_version" integer;
+
+DO $constraint$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'connections_verified_install_check'
+      AND conrelid = 'connections'::regclass
+  ) THEN
+    ALTER TABLE "connections"
+      ADD CONSTRAINT "connections_verified_install_check"
+      CHECK (
+        (
+          "verified_install_at" IS NULL
+          AND "verified_install_version" IS NULL
+        )
+        OR (
+          "verified_install_at" IS NOT NULL
+          AND "verified_install_version" = "version"
+          AND "verified_install_version" > 0
+          AND "subject_id" IS NULL
+          AND "provider_domain" = 'slack.com'
+          AND "kind" = 'app_install'
+        )
+      );
+  END IF;
+END $constraint$;
+
+CREATE OR REPLACE FUNCTION opengeni_private.invalidate_stale_verified_install()
+RETURNS trigger
+LANGUAGE plpgsql
+AS $function$
+BEGIN
+  IF (
+    NEW."subject_id" IS DISTINCT FROM OLD."subject_id"
+    OR NEW."provider_domain" IS DISTINCT FROM OLD."provider_domain"
+    OR NEW."kind" IS DISTINCT FROM OLD."kind"
+    OR NEW."credential_encrypted" IS DISTINCT FROM OLD."credential_encrypted"
+    OR NEW."granted_scopes" IS DISTINCT FROM OLD."granted_scopes"
+    OR NEW."metadata" IS DISTINCT FROM OLD."metadata"
+    OR NEW."version" IS DISTINCT FROM OLD."version"
+  )
+  AND NEW."verified_install_at" IS NOT DISTINCT FROM OLD."verified_install_at"
+  AND NEW."verified_install_version" IS NOT DISTINCT FROM OLD."verified_install_version"
+  THEN
+    NEW."verified_install_at" := NULL;
+    NEW."verified_install_version" := NULL;
+  END IF;
+  RETURN NEW;
+END;
+$function$;
+
+DROP TRIGGER IF EXISTS connections_invalidate_stale_verified_install ON "connections";
+CREATE TRIGGER connections_invalidate_stale_verified_install
+  BEFORE UPDATE OF
+    "subject_id", "provider_domain", "kind", "credential_encrypted",
+    "granted_scopes", "metadata", "version",
+    "verified_install_at", "verified_install_version"
+  ON "connections"
+  FOR EACH ROW
+  EXECUTE FUNCTION opengeni_private.invalidate_stale_verified_install();
+
+CREATE TABLE "slack_bot_post_operations" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "connection_id" uuid NOT NULL REFERENCES "connections"("id") ON DELETE CASCADE,
+  "operation_id" uuid NOT NULL,
+  "client_message_id" uuid NOT NULL,
+  "target_kind" text NOT NULL,
+  "target_id" text NOT NULL,
+  "request_digest" text NOT NULL,
+  "status" text NOT NULL,
+  "claim_holder_id" uuid,
+  "claim_expires_at" timestamptz,
+  "attempt_count" integer NOT NULL DEFAULT 0,
+  "last_failure_code" text,
+  "slack_channel_id" text,
+  "slack_message_timestamp" text,
+  "completed_at" timestamptz,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "slack_bot_post_operations_workspace_operation_uq"
+    UNIQUE ("workspace_id", "connection_id", "operation_id"),
+  CONSTRAINT "slack_bot_post_operations_target_kind_check"
+    CHECK ("target_kind" IN ('channel', 'user')),
+  CONSTRAINT "slack_bot_post_operations_status_check"
+    CHECK ("status" IN ('provider_started', 'completed')),
+  CONSTRAINT "slack_bot_post_operations_identity_check"
+    CHECK (
+      "client_message_id" = "operation_id"
+      AND length("target_id") BETWEEN 1 AND 64
+      AND "request_digest" ~ '^[0-9a-f]{64}$'
+      AND "attempt_count" > 0
+      AND (("claim_holder_id" IS NULL) = ("claim_expires_at" IS NULL))
+    ),
+  CONSTRAINT "slack_bot_post_operations_completion_check"
+    CHECK (
+      (
+        "status" = 'provider_started'
+        AND "slack_channel_id" IS NULL
+        AND "slack_message_timestamp" IS NULL
+        AND "completed_at" IS NULL
+      )
+      OR (
+        "status" = 'completed'
+        AND "claim_holder_id" IS NULL
+        AND "claim_expires_at" IS NULL
+        AND "slack_channel_id" IS NOT NULL
+        AND "slack_message_timestamp" IS NOT NULL
+        AND "completed_at" IS NOT NULL
+      )
+    )
+);
+
+CREATE INDEX "slack_bot_post_operations_workspace_status_idx"
+  ON "slack_bot_post_operations" ("workspace_id", "status", "updated_at");
+
+ALTER TABLE "slack_bot_post_operations" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "slack_bot_post_operations" FORCE ROW LEVEL SECURITY;
+CREATE POLICY workspace_isolation ON "slack_bot_post_operations"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/db",
-  "version": "0.12.6",
+  "version": "0.13.1",
   "description": "OpenGeni persistence: Drizzle schema, RLS-scoped query layer, the SQL migration runner, and role provisioning.",
   "license": "Apache-2.0",
   "repository": {
@@ -51,8 +51,8 @@
   },
   "dependencies": {
     "@opengeni/codex": "^0.2.7",
-    "@opengeni/config": "^0.7.6",
-    "@opengeni/contracts": "^0.19.4",
+    "@opengeni/config": "^0.7.8",
+    "@opengeni/contracts": "^0.20.1",
     "@opengeni/network": "^0.1.1",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.7"