@opengeni/db 0.19.0 → 0.22.1

package/src/provision-roles.ts

@@ -469,6 +469,54 @@ BEGIN
         ${literal(role)}
       );
     END IF;
+    IF to_regprocedure(
+      format(
+        '%I.scoped_knowledge_apply_lifecycle(uuid,text,uuid,text,bigint,text,text,text,text,text,text)',
+        ${literal(schema)}
+      )
+    ) IS NOT NULL THEN
+      EXECUTE format(
+        'GRANT EXECUTE ON FUNCTION %I.scoped_knowledge_apply_lifecycle(uuid, text, uuid, text, bigint, text, text, text, text, text, text) TO %I',
+        ${literal(schema)},
+        ${literal(role)}
+      );
+    END IF;
+    IF to_regprocedure(
+      format(
+        '%I.scoped_knowledge_advance_source_acl(uuid,uuid,bigint,bigint,uuid,text,text,text,text,text,text)',
+        ${literal(schema)}
+      )
+    ) IS NOT NULL THEN
+      EXECUTE format(
+        'GRANT EXECUTE ON FUNCTION %I.scoped_knowledge_advance_source_acl(uuid, uuid, bigint, bigint, uuid, text, text, text, text, text, text) TO %I',
+        ${literal(schema)},
+        ${literal(role)}
+      );
+    END IF;
+    IF to_regprocedure(
+      format(
+        '%I.scoped_knowledge_complete_sync(uuid,uuid,text,text,timestamptz,jsonb,text,text,text)',
+        ${literal(schema)}
+      )
+    ) IS NOT NULL THEN
+      EXECUTE format(
+        'GRANT EXECUTE ON FUNCTION %I.scoped_knowledge_complete_sync(uuid, uuid, text, text, timestamptz, jsonb, text, text, text) TO %I',
+        ${literal(schema)},
+        ${literal(role)}
+      );
+    END IF;
+    IF to_regprocedure(
+      format(
+        '%I.scoped_knowledge_advance_object_version(uuid,uuid,bigint,bigint,uuid,text,text,text,text,text,text)',
+        ${literal(schema)}
+      )
+    ) IS NOT NULL THEN
+      EXECUTE format(
+        'GRANT EXECUTE ON FUNCTION %I.scoped_knowledge_advance_object_version(uuid, uuid, bigint, bigint, uuid, text, text, text, text, text, text) TO %I',
+        ${literal(schema)},
+        ${literal(role)}
+      );
+    END IF;
     EXECUTE format('GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA %I TO %I', ${literal(schema)}, ${literal(role)});
     EXECUTE format(
       'ALTER DEFAULT PRIVILEGES FOR ROLE %I IN SCHEMA %I REVOKE ALL PRIVILEGES ON TABLES FROM %I',

package/src/runtime-posture.ts

@@ -25,6 +25,8 @@ export const FORCE_RLS_TABLES = [
   "codex_subscription_credentials",
   "composer_drafts",
   "connections",
+  "connector_action_policies",
+  "connector_action_requests",
   "credit_ledger_entries",
   "device_enrollment_requests",
   "document_bases",
@@ -42,9 +44,25 @@ export const FORCE_RLS_TABLES = [
   "host_export_outbox",
   "import_batches",
   "integration_oauth_state_nonces",
+  "knowledge_change_proposals",
+  "knowledge_claim_evidence",
+  "knowledge_claim_relations",
+  "knowledge_claim_reviews",
+  "knowledge_claims",
+  "knowledge_document_versions",
+  "knowledge_entities",
+  "knowledge_entity_aliases",
+  "knowledge_facts",
+  "knowledge_lifecycle_events",
   "knowledge_memories",
   "knowledge_memory_lifecycle_events",
   "knowledge_memory_relationships",
+  "knowledge_operation_receipts",
+  "knowledge_providers",
+  "knowledge_source_acl_versions",
+  "knowledge_source_objects",
+  "knowledge_sources",
+  "knowledge_sync_runs",
   "machine_metrics_latest",
   "machine_metrics_series",
   "model_call_facts",
@@ -154,6 +172,8 @@ export const RUNTIME_FULL_DML_TABLES = [
   "codex_subscription_credentials",
   "composer_drafts",
   "connections",
+  "connector_action_policies",
+  "connector_action_requests",
   "credit_ledger_entries",
   "device_enrollment_requests",
   "document_bases",
@@ -231,6 +251,7 @@ export const RUNTIME_FULL_DML_TABLES = [
 
 /** Configuration and lifecycle-owned audit rows are read-only at runtime. */
 export const RUNTIME_READ_ONLY_TABLES = [
+  "knowledge_lifecycle_events",
   "knowledge_memory_lifecycle_events",
   "knowledge_memory_relationships",
   "nested_agent_depth_configuration",
@@ -240,6 +261,21 @@ export const RUNTIME_READ_ONLY_TABLES = [
 
 /** Append-only evidence/revision tables are insertable and queryable, never mutable. */
 export const RUNTIME_READ_INSERT_TABLES = [
+  "knowledge_change_proposals",
+  "knowledge_claim_evidence",
+  "knowledge_claim_relations",
+  "knowledge_claim_reviews",
+  "knowledge_claims",
+  "knowledge_document_versions",
+  "knowledge_entities",
+  "knowledge_entity_aliases",
+  "knowledge_facts",
+  "knowledge_operation_receipts",
+  "knowledge_providers",
+  "knowledge_source_acl_versions",
+  "knowledge_source_objects",
+  "knowledge_sources",
+  "knowledge_sync_runs",
   "preference_registry_preferences",
   "preference_registry_revisions",
   "session_spawn_denials",

package/src/schema.ts

@@ -1,5 +1,6 @@
 import type {
   FirstPartyMcpToolName,
+  McpPersonalConnectionDelegation,
   McpServerConnectionRef,
   SessionMcpApprovalPolicy,
 } from "@opengeni/contracts";
@@ -32,6 +33,18 @@ const vector = customType<{ data: number[]; driverData: string }>({
   },
 });
 
+export type ConnectorActionPolicyDecision = "allow" | "ask" | "block";
+
+export type ConnectorActionPolicySnapshotEntry = {
+  id: string;
+  connectionId: string;
+  serverId: string;
+  toolName: string;
+  actionName: string;
+  policy: ConnectorActionPolicyDecision;
+  version: number;
+};
+
 export const managedAccounts = pgTable(
   "managed_accounts",
   {
@@ -713,6 +726,53 @@ export const connections = pgTable(
   }),
 );
 
+export const connectorActionPolicies = pgTable(
+  "connector_action_policies",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    accountId: uuid("account_id")
+      .notNull()
+      .references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid("workspace_id")
+      .notNull()
+      .references(() => workspaces.id, { onDelete: "cascade" }),
+    connectionId: text("connection_id").notNull(),
+    serverId: text("server_id").notNull(),
+    toolName: text("tool_name").notNull(),
+    actionName: text("action_name").notNull(),
+    policy: text("policy").$type<ConnectorActionPolicyDecision>().notNull(),
+    version: integer("version").notNull().default(1),
+    createdBySubjectId: text("created_by_subject_id").notNull(),
+    updatedBySubjectId: text("updated_by_subject_id").notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "connector_action_policies_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId],
+    }).onDelete("cascade"),
+    scope: uniqueIndex("connector_action_policies_scope_uq").on(
+      table.workspaceId,
+      table.connectionId,
+      table.serverId,
+      table.toolName,
+      table.actionName,
+    ),
+    workspaceConnection: index("connector_action_policies_workspace_connection_idx").on(
+      table.workspaceId,
+      table.connectionId,
+      table.serverId,
+    ),
+    policyValid: check(
+      "connector_action_policies_policy_chk",
+      sql`${table.policy} in ('allow', 'ask', 'block')`,
+    ),
+    versionValid: check("connector_action_policies_version_chk", sql`${table.version} > 0`),
+  }),
+);
+
 export const slackBotUserLinks = pgTable(
   "slack_bot_user_links",
   {
@@ -1316,6 +1376,14 @@ export const sessions = pgTable(
     // Exact model-visible first-party tool selection. All catalogued tools are
     // selected by default; [] intentionally selects no broad-server tools.
     firstPartyMcpTools: jsonb("first_party_mcp_tools").$type<FirstPartyMcpToolName[]>().notNull(),
+    // Initial-command staging only. initializeSessionStartAtomically copies
+    // this immutable snapshot onto the first turn so create repair survives a
+    // crash between the session insert and first-turn transaction. Runtime
+    // credential authority must never read this session field.
+    initialPersonalConnectionDelegations: jsonb("initial_personal_connection_delegations")
+      .$type<McpPersonalConnectionDelegation[]>()
+      .notNull()
+      .default([]),
     // Durable tool-policy origin. Migration 0136 removes the old null/legacy
     // representation so every session has one explicit policy mode.
     toolPolicy: jsonb("tool_policy").$type<SessionToolPolicy>().notNull(),
@@ -1325,9 +1393,15 @@ export const sessions = pgTable(
     // when the creating grant carried a worker-signed sessionId claim (a session
     // spawning a worker); null for direct API creates and scheduled-task runs.
     // When set, this worker's terminal-for-now transitions wake the parent so a
-    // manager can orchestrate workers without busy-polling. Self-referencing FK,
-    // ON DELETE SET NULL so deleting a manager never cascades into its workers.
+    // manager can orchestrate workers without busy-polling. The migration-owned
+    // self-reference uses ON DELETE RESTRICT so immutable hierarchy and
+    // authority lineage cannot be silently orphaned by a parent hard delete.
     parentSessionId: uuid("parent_session_id"),
+    // Exact parent turn whose worker-signed attempt created this child. This is
+    // private immutable authority lineage: child completion copies personal MCP
+    // authority from that turn, never from whichever parent turn ran most
+    // recently. Null for top-level and legacy child sessions.
+    parentTurnId: uuid("parent_turn_id"),
     // Workspace-scoped CREATE idempotency key. NULL means the create carried no
     // key (each such create is independent). When set, the partial unique index
     // below collapses concurrent/retried creates with the same key in the same
@@ -2008,6 +2082,13 @@ export const sessionTurns = pgTable(
       .$type<Record<string, unknown>>()
       .notNull()
       .default({ backfill: true }),
+    // Immutable exact personal MCP authority for this logical turn. Recovery,
+    // approval, retries, and Toolspace reuse this row; no runtime may infer
+    // broader authority from the session creator or mutable session state.
+    personalConnectionDelegations: jsonb("personal_connection_delegations")
+      .$type<McpPersonalConnectionDelegation[]>()
+      .notNull()
+      .default([]),
     cancelledBy: text("cancelled_by"),
     cancelReason: text("cancel_reason"),
     // Atomic per-turn toolspace call budget counter (migration 0043). Incremented
@@ -2067,6 +2148,10 @@ export const sessionTurnAttempts = pgTable(
     mcpApprovalPolicies: jsonb("mcp_approval_policies")
       .$type<Record<string, SessionMcpApprovalPolicy>>()
       .notNull(),
+    connectorActionPolicies: jsonb("connector_action_policies")
+      .$type<ConnectorActionPolicySnapshotEntry[]>()
+      .notNull()
+      .default([]),
     startedAt: timestamp("started_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
     closedAt: timestamp("closed_at", { withTimezone: true }),
@@ -2144,6 +2229,124 @@ export const sessionTurnAttempts = pgTable(
   }),
 );
 
+export const connectorActionRequests = pgTable(
+  "connector_action_requests",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    accountId: uuid("account_id")
+      .notNull()
+      .references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid("workspace_id")
+      .notNull()
+      .references(() => workspaces.id, { onDelete: "cascade" }),
+    sessionId: uuid("session_id").notNull(),
+    turnId: uuid("turn_id").notNull(),
+    creationAttemptId: uuid("creation_attempt_id").notNull(),
+    creationExecutionGeneration: integer("creation_execution_generation").notNull(),
+    executionAttemptId: uuid("execution_attempt_id"),
+    executionAttemptGeneration: integer("execution_attempt_generation"),
+    approvalId: text("approval_id").notNull(),
+    initiatorKind: text("initiator_kind").$type<"subject" | "service">().notNull(),
+    initiatorSubjectId: text("initiator_subject_id").notNull(),
+    connectionId: text("connection_id").notNull(),
+    connectionVersion: integer("connection_version"),
+    serverId: text("server_id").notNull(),
+    toolName: text("tool_name").notNull(),
+    actionName: text("action_name").notNull(),
+    // Attempt-frozen provenance intentionally survives policy deletion.
+    policyId: uuid("policy_id"),
+    policyVersion: integer("policy_version"),
+    policySource: text("policy_source").$type<"explicit" | "ambiguous">().notNull(),
+    policyDecision: text("policy_decision").$type<ConnectorActionPolicyDecision>().notNull(),
+    actionFingerprint: text("action_fingerprint").notNull(),
+    status: text("status")
+      .$type<
+        | "pending"
+        | "approved"
+        | "rejected"
+        | "blocked"
+        | "executing"
+        | "completed"
+        | "failed"
+        | "uncertain"
+      >()
+      .notNull(),
+    decision: text("decision").$type<"approve" | "reject">(),
+    decisionBySubjectId: text("decision_by_subject_id"),
+    decisionEventId: uuid("decision_event_id"),
+    decidedAt: timestamp("decided_at", { withTimezone: true }),
+    executionStartedAt: timestamp("execution_started_at", { withTimezone: true }),
+    executionFinishedAt: timestamp("execution_finished_at", { withTimezone: true }),
+    outcome: text("outcome"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
+  },
+  (table) => ({
+    creationAttempt: foreignKey({
+      name: "connector_action_requests_creation_attempt_fk",
+      columns: [
+        table.accountId,
+        table.workspaceId,
+        table.sessionId,
+        table.turnId,
+        table.creationAttemptId,
+      ],
+      foreignColumns: [
+        sessionTurnAttempts.accountId,
+        sessionTurnAttempts.workspaceId,
+        sessionTurnAttempts.sessionId,
+        sessionTurnAttempts.turnId,
+        sessionTurnAttempts.id,
+      ],
+    }).onDelete("cascade"),
+    executionAttempt: foreignKey({
+      name: "connector_action_requests_execution_attempt_fk",
+      columns: [
+        table.accountId,
+        table.workspaceId,
+        table.sessionId,
+        table.turnId,
+        table.executionAttemptId,
+      ],
+      foreignColumns: [
+        sessionTurnAttempts.accountId,
+        sessionTurnAttempts.workspaceId,
+        sessionTurnAttempts.sessionId,
+        sessionTurnAttempts.turnId,
+        sessionTurnAttempts.id,
+      ],
+    }).onDelete("cascade"),
+    identity: uniqueIndex("connector_action_requests_identity_uq").on(
+      table.workspaceId,
+      table.sessionId,
+      table.turnId,
+      table.approvalId,
+    ),
+    attemptStatus: index("connector_action_requests_attempt_status_idx").on(
+      table.workspaceId,
+      table.creationAttemptId,
+      table.status,
+    ),
+    sessionCreated: index("connector_action_requests_session_created_idx").on(
+      table.workspaceId,
+      table.sessionId,
+      table.createdAt.desc(),
+      table.id.desc(),
+    ),
+    policyDecisionValid: check(
+      "connector_action_requests_policy_decision_chk",
+      sql`${table.policyDecision} in ('allow', 'ask', 'block')`,
+    ),
+    statusValid: check(
+      "connector_action_requests_status_chk",
+      sql`${table.status} in (
+        'pending', 'approved', 'rejected', 'blocked', 'executing',
+        'completed', 'failed', 'uncertain'
+      )`,
+    ),
+  }),
+);
+
 // One durable idempotency/operation record for every queue, control,
 // foreground Send/Steer, and Agent MCP mutation. The database migration owns
 // the NULLS NOT DISTINCT uniqueness form because Drizzle does not model it.
@@ -2447,6 +2650,12 @@ export const sessionSystemUpdates = pgTable(
     summary: text("summary").notNull(),
     payload: jsonb("payload").$type<Record<string, unknown>>().notNull().default({}),
     lineage: jsonb("lineage").$type<Record<string, unknown>>().notNull().default({}),
+    // Private immutable authority frozen when this machine input is accepted.
+    // Public projections intentionally omit connection ids and owner subjects.
+    personalConnectionDelegations: jsonb("personal_connection_delegations")
+      .$type<McpPersonalConnectionDelegation[]>()
+      .notNull()
+      .default([]),
     // pending is visible queue truth; delivered means its exact model-memory
     // batch was durably claimed. Terminal cancellation/supersession is explicit.
     state: text("state").notNull().default("pending"),
@@ -2526,6 +2735,12 @@ export const sessionSystemUpdateOutbox = pgTable(
     summary: text("summary").notNull(),
     payload: jsonb("payload").$type<Record<string, unknown>>().notNull().default({}),
     lineage: jsonb("lineage").$type<Record<string, unknown>>().notNull().default({}),
+    // Exact private authority copied from the causal parent turn in the source
+    // terminal transaction. Delivery retries cannot replace this snapshot.
+    personalConnectionDelegations: jsonb("personal_connection_delegations")
+      .$type<McpPersonalConnectionDelegation[]>()
+      .notNull()
+      .default([]),
     status: text("status").notNull().default("pending"),
     attempts: integer("attempts").notNull().default(0),
     updateId: uuid("update_id"),
@@ -4325,6 +4540,16 @@ export const scheduledTasks = pgTable(
     runMode: text("run_mode").notNull().default("new_session_per_run"),
     overlapPolicy: text("overlap_policy").notNull().default("allow_concurrent"),
     agentConfig: jsonb("agent_config").$type<unknown>().notNull(),
+    createdByKind: text("created_by_kind").notNull().default("service"),
+    createdBySubjectId: text("created_by_subject_id").notNull().default("unattributed-legacy"),
+    createdByContext: jsonb("created_by_context")
+      .$type<Record<string, unknown>>()
+      .notNull()
+      .default({ backfill: true }),
+    personalConnectionDelegations: jsonb("personal_connection_delegations")
+      .$type<McpPersonalConnectionDelegation[]>()
+      .notNull()
+      .default([]),
     reusableSessionId: uuid("reusable_session_id").references(() => sessions.id, {
       onDelete: "set null",
     }),
@@ -5343,3 +5568,4 @@ export const rigChanges = pgTable(
 export * from "./workspace-instruction-policies-schema";
 export * from "./preference-registry-schema";
 export * from "./memory-governance-schema";
+export * from "./scoped-knowledge-schema";