@opengeni/db 0.21.0 → 0.22.1

package/src/runtime-posture.ts

@@ -25,6 +25,8 @@ export const FORCE_RLS_TABLES = [
   "codex_subscription_credentials",
   "composer_drafts",
   "connections",
+  "connector_action_policies",
+  "connector_action_requests",
   "credit_ledger_entries",
   "device_enrollment_requests",
   "document_bases",
@@ -170,6 +172,8 @@ export const RUNTIME_FULL_DML_TABLES = [
   "codex_subscription_credentials",
   "composer_drafts",
   "connections",
+  "connector_action_policies",
+  "connector_action_requests",
   "credit_ledger_entries",
   "device_enrollment_requests",
   "document_bases",

package/src/schema.ts

@@ -33,6 +33,18 @@ const vector = customType<{ data: number[]; driverData: string }>({
   },
 });
 
+export type ConnectorActionPolicyDecision = "allow" | "ask" | "block";
+
+export type ConnectorActionPolicySnapshotEntry = {
+  id: string;
+  connectionId: string;
+  serverId: string;
+  toolName: string;
+  actionName: string;
+  policy: ConnectorActionPolicyDecision;
+  version: number;
+};
+
 export const managedAccounts = pgTable(
   "managed_accounts",
   {
@@ -714,6 +726,53 @@ export const connections = pgTable(
   }),
 );
 
+export const connectorActionPolicies = pgTable(
+  "connector_action_policies",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    accountId: uuid("account_id")
+      .notNull()
+      .references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid("workspace_id")
+      .notNull()
+      .references(() => workspaces.id, { onDelete: "cascade" }),
+    connectionId: text("connection_id").notNull(),
+    serverId: text("server_id").notNull(),
+    toolName: text("tool_name").notNull(),
+    actionName: text("action_name").notNull(),
+    policy: text("policy").$type<ConnectorActionPolicyDecision>().notNull(),
+    version: integer("version").notNull().default(1),
+    createdBySubjectId: text("created_by_subject_id").notNull(),
+    updatedBySubjectId: text("updated_by_subject_id").notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "connector_action_policies_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId],
+    }).onDelete("cascade"),
+    scope: uniqueIndex("connector_action_policies_scope_uq").on(
+      table.workspaceId,
+      table.connectionId,
+      table.serverId,
+      table.toolName,
+      table.actionName,
+    ),
+    workspaceConnection: index("connector_action_policies_workspace_connection_idx").on(
+      table.workspaceId,
+      table.connectionId,
+      table.serverId,
+    ),
+    policyValid: check(
+      "connector_action_policies_policy_chk",
+      sql`${table.policy} in ('allow', 'ask', 'block')`,
+    ),
+    versionValid: check("connector_action_policies_version_chk", sql`${table.version} > 0`),
+  }),
+);
+
 export const slackBotUserLinks = pgTable(
   "slack_bot_user_links",
   {
@@ -2089,6 +2148,10 @@ export const sessionTurnAttempts = pgTable(
     mcpApprovalPolicies: jsonb("mcp_approval_policies")
       .$type<Record<string, SessionMcpApprovalPolicy>>()
       .notNull(),
+    connectorActionPolicies: jsonb("connector_action_policies")
+      .$type<ConnectorActionPolicySnapshotEntry[]>()
+      .notNull()
+      .default([]),
     startedAt: timestamp("started_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
     closedAt: timestamp("closed_at", { withTimezone: true }),
@@ -2166,6 +2229,124 @@ export const sessionTurnAttempts = pgTable(
   }),
 );
 
+export const connectorActionRequests = pgTable(
+  "connector_action_requests",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    accountId: uuid("account_id")
+      .notNull()
+      .references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid("workspace_id")
+      .notNull()
+      .references(() => workspaces.id, { onDelete: "cascade" }),
+    sessionId: uuid("session_id").notNull(),
+    turnId: uuid("turn_id").notNull(),
+    creationAttemptId: uuid("creation_attempt_id").notNull(),
+    creationExecutionGeneration: integer("creation_execution_generation").notNull(),
+    executionAttemptId: uuid("execution_attempt_id"),
+    executionAttemptGeneration: integer("execution_attempt_generation"),
+    approvalId: text("approval_id").notNull(),
+    initiatorKind: text("initiator_kind").$type<"subject" | "service">().notNull(),
+    initiatorSubjectId: text("initiator_subject_id").notNull(),
+    connectionId: text("connection_id").notNull(),
+    connectionVersion: integer("connection_version"),
+    serverId: text("server_id").notNull(),
+    toolName: text("tool_name").notNull(),
+    actionName: text("action_name").notNull(),
+    // Attempt-frozen provenance intentionally survives policy deletion.
+    policyId: uuid("policy_id"),
+    policyVersion: integer("policy_version"),
+    policySource: text("policy_source").$type<"explicit" | "ambiguous">().notNull(),
+    policyDecision: text("policy_decision").$type<ConnectorActionPolicyDecision>().notNull(),
+    actionFingerprint: text("action_fingerprint").notNull(),
+    status: text("status")
+      .$type<
+        | "pending"
+        | "approved"
+        | "rejected"
+        | "blocked"
+        | "executing"
+        | "completed"
+        | "failed"
+        | "uncertain"
+      >()
+      .notNull(),
+    decision: text("decision").$type<"approve" | "reject">(),
+    decisionBySubjectId: text("decision_by_subject_id"),
+    decisionEventId: uuid("decision_event_id"),
+    decidedAt: timestamp("decided_at", { withTimezone: true }),
+    executionStartedAt: timestamp("execution_started_at", { withTimezone: true }),
+    executionFinishedAt: timestamp("execution_finished_at", { withTimezone: true }),
+    outcome: text("outcome"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
+  },
+  (table) => ({
+    creationAttempt: foreignKey({
+      name: "connector_action_requests_creation_attempt_fk",
+      columns: [
+        table.accountId,
+        table.workspaceId,
+        table.sessionId,
+        table.turnId,
+        table.creationAttemptId,
+      ],
+      foreignColumns: [
+        sessionTurnAttempts.accountId,
+        sessionTurnAttempts.workspaceId,
+        sessionTurnAttempts.sessionId,
+        sessionTurnAttempts.turnId,
+        sessionTurnAttempts.id,
+      ],
+    }).onDelete("cascade"),
+    executionAttempt: foreignKey({
+      name: "connector_action_requests_execution_attempt_fk",
+      columns: [
+        table.accountId,
+        table.workspaceId,
+        table.sessionId,
+        table.turnId,
+        table.executionAttemptId,
+      ],
+      foreignColumns: [
+        sessionTurnAttempts.accountId,
+        sessionTurnAttempts.workspaceId,
+        sessionTurnAttempts.sessionId,
+        sessionTurnAttempts.turnId,
+        sessionTurnAttempts.id,
+      ],
+    }).onDelete("cascade"),
+    identity: uniqueIndex("connector_action_requests_identity_uq").on(
+      table.workspaceId,
+      table.sessionId,
+      table.turnId,
+      table.approvalId,
+    ),
+    attemptStatus: index("connector_action_requests_attempt_status_idx").on(
+      table.workspaceId,
+      table.creationAttemptId,
+      table.status,
+    ),
+    sessionCreated: index("connector_action_requests_session_created_idx").on(
+      table.workspaceId,
+      table.sessionId,
+      table.createdAt.desc(),
+      table.id.desc(),
+    ),
+    policyDecisionValid: check(
+      "connector_action_requests_policy_decision_chk",
+      sql`${table.policyDecision} in ('allow', 'ask', 'block')`,
+    ),
+    statusValid: check(
+      "connector_action_requests_status_chk",
+      sql`${table.status} in (
+        'pending', 'approved', 'rejected', 'blocked', 'executing',
+        'completed', 'failed', 'uncertain'
+      )`,
+    ),
+  }),
+);
+
 // One durable idempotency/operation record for every queue, control,
 // foreground Send/Steer, and Agent MCP mutation. The database migration owns
 // the NULLS NOT DISTINCT uniqueness form because Drizzle does not model it.

package/src/session-control.ts

@@ -519,6 +519,7 @@ export async function registerSessionTurnAttemptClaim(
     temporalActivityId: string;
     verifiedControlRevision: number;
     mcpApprovalPolicies: Record<string, SessionMcpApprovalPolicy>;
+    connectorActionPolicies: schema.ConnectorActionPolicySnapshotEntry[];
   },
 ): Promise<typeof schema.sessionTurnAttempts.$inferSelect> {
   const [inserted] = await db
@@ -554,6 +555,8 @@ export async function registerSessionTurnAttemptClaim(
     existing.temporalWorkflowId !== input.temporalWorkflowId ||
     existing.temporalWorkflowRunId !== input.temporalWorkflowRunId ||
     existing.temporalActivityId !== input.temporalActivityId ||
+    JSON.stringify(existing.connectorActionPolicies) !==
+      JSON.stringify(input.connectorActionPolicies) ||
     existing.state === "closed"
   ) {
     throw new SessionControlInvariantError(