@opengeni/db 0.22.1 → 0.23.0

package/drizzle/0158_session_realtime_mode.sql

@@ -0,0 +1,88 @@
+-- deployment-mode: rolling
+-- Rebased after the current main migration ledger.
+-- Durable per-session ownership for the temporary normal -> realtime -> normal mode.
+
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+CREATE TABLE "session_realtime_modes" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL,
+  "workspace_id" uuid NOT NULL,
+  "session_id" uuid NOT NULL,
+  "operation_id" uuid NOT NULL,
+  "owner_subject_id" text NOT NULL,
+  "browser_instance_id" text NOT NULL,
+  "owner_key_hash" text NOT NULL,
+  "model" text NOT NULL,
+  "state" text DEFAULT 'active' NOT NULL,
+  "version" integer DEFAULT 1 NOT NULL,
+  "connection_epoch" integer DEFAULT 1 NOT NULL,
+  "lease_expires_at" timestamptz NOT NULL,
+  "last_heartbeat_at" timestamptz NOT NULL,
+  "started_at" timestamptz DEFAULT now() NOT NULL,
+  "ended_at" timestamptz,
+  "end_reason" text,
+  "created_at" timestamptz DEFAULT now() NOT NULL,
+  "updated_at" timestamptz DEFAULT now() NOT NULL,
+  CONSTRAINT "session_realtime_modes_workspace_account_fk"
+    FOREIGN KEY ("workspace_id", "account_id")
+    REFERENCES "workspaces" ("id", "account_id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_modes_workspace_session_fk"
+    FOREIGN KEY ("workspace_id", "session_id")
+    REFERENCES "sessions" ("workspace_id", "id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_modes_state_check"
+    CHECK ("state" IN ('active', 'ended')),
+  CONSTRAINT "session_realtime_modes_model_check"
+    CHECK ("model" = 'gpt-live-1-boulder-alpha'),
+  CONSTRAINT "session_realtime_modes_end_reason_check"
+    CHECK ("end_reason" IS NULL OR "end_reason" IN ('user_stop', 'browser_unload', 'lease_expired')),
+  CONSTRAINT "session_realtime_modes_version_check" CHECK ("version" >= 1),
+  CONSTRAINT "session_realtime_modes_epoch_check" CHECK ("connection_epoch" >= 1),
+  CONSTRAINT "session_realtime_modes_owner_subject_check"
+    CHECK (octet_length("owner_subject_id") BETWEEN 1 AND 1024),
+  CONSTRAINT "session_realtime_modes_browser_instance_check"
+    CHECK (octet_length("browser_instance_id") BETWEEN 1 AND 256),
+  CONSTRAINT "session_realtime_modes_owner_key_hash_check"
+    CHECK ("owner_key_hash" ~ '^[0-9a-f]{64}$'),
+  CONSTRAINT "session_realtime_modes_lease_check"
+    CHECK ("lease_expires_at" > "last_heartbeat_at"),
+  CONSTRAINT "session_realtime_modes_terminal_check"
+    CHECK (
+      ("state" = 'active' AND "ended_at" IS NULL AND "end_reason" IS NULL)
+      OR
+      ("state" = 'ended' AND "ended_at" IS NOT NULL AND "end_reason" IS NOT NULL)
+    )
+);
+
+CREATE UNIQUE INDEX "session_realtime_modes_operation_uq"
+  ON "session_realtime_modes" ("workspace_id", "session_id", "operation_id");
+
+CREATE UNIQUE INDEX "session_realtime_modes_one_active_uq"
+  ON "session_realtime_modes" ("workspace_id", "session_id")
+  WHERE "state" = 'active';
+
+CREATE INDEX "session_realtime_modes_active_lease_idx"
+  ON "session_realtime_modes" ("lease_expires_at", "workspace_id", "session_id")
+  WHERE "state" = 'active';
+
+ALTER TABLE "session_realtime_modes" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "session_realtime_modes" FORCE ROW LEVEL SECURITY;
+
+CREATE POLICY workspace_isolation ON "session_realtime_modes"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+
+DO $grants$
+DECLARE target_schema text := current_schema();
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON TABLE %I.session_realtime_modes TO opengeni_app',
+      target_schema
+    );
+  END IF;
+END $grants$;
+
+RESET statement_timeout;
+RESET lock_timeout;

package/drizzle/0159_session_realtime_ledger.sql

@@ -0,0 +1,198 @@
+-- deployment-mode: rolling
+-- Rebased after the current main migration ledger.
+-- Durable GPT-Live connection rotation and compact transcript/update/ACK ledger.
+
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+CREATE TABLE "session_realtime_connections" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL,
+  "workspace_id" uuid NOT NULL,
+  "session_id" uuid NOT NULL,
+  "realtime_id" uuid NOT NULL,
+  "operation_id" uuid NOT NULL,
+  "connection_epoch" integer NOT NULL,
+  "startup_fence_sequence" integer DEFAULT 0 NOT NULL,
+  "state" text DEFAULT 'negotiating' NOT NULL,
+  "sdp_answer" text,
+  "failure_code" text,
+  "provider_session_id" text,
+  "startup_event_id" text,
+  "startup_acknowledged_at" timestamptz,
+  "negotiated_at" timestamptz,
+  "closed_at" timestamptz,
+  "created_at" timestamptz DEFAULT now() NOT NULL,
+  "updated_at" timestamptz DEFAULT now() NOT NULL,
+  CONSTRAINT "session_realtime_connections_workspace_account_fk"
+    FOREIGN KEY ("workspace_id", "account_id")
+    REFERENCES "workspaces" ("id", "account_id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_connections_workspace_session_fk"
+    FOREIGN KEY ("workspace_id", "session_id")
+    REFERENCES "sessions" ("workspace_id", "id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_connections_realtime_fk"
+    FOREIGN KEY ("realtime_id")
+    REFERENCES "session_realtime_modes" ("id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_connections_epoch_check"
+    CHECK ("connection_epoch" >= 1),
+  CONSTRAINT "session_realtime_connections_startup_fence_check"
+    CHECK ("startup_fence_sequence" >= 0),
+  CONSTRAINT "session_realtime_connections_state_check"
+    CHECK ("state" IN ('negotiating', 'active', 'failed', 'closed')),
+  CONSTRAINT "session_realtime_connections_sdp_check"
+    CHECK ("sdp_answer" IS NULL OR octet_length("sdp_answer") BETWEEN 1 AND 1048576),
+  CONSTRAINT "session_realtime_connections_failure_check"
+    CHECK ("failure_code" IS NULL OR octet_length("failure_code") BETWEEN 1 AND 128),
+  CONSTRAINT "session_realtime_connections_provider_session_check"
+    CHECK ("provider_session_id" IS NULL OR octet_length("provider_session_id") BETWEEN 1 AND 1024),
+  CONSTRAINT "session_realtime_connections_startup_event_check"
+    CHECK ("startup_event_id" IS NULL OR octet_length("startup_event_id") BETWEEN 1 AND 1024),
+  CONSTRAINT "session_realtime_connections_startup_ack_check"
+    CHECK (
+      ("startup_acknowledged_at" IS NULL AND "provider_session_id" IS NULL AND "startup_event_id" IS NULL)
+      OR
+      ("startup_acknowledged_at" IS NOT NULL AND "provider_session_id" IS NOT NULL)
+    ),
+  CONSTRAINT "session_realtime_connections_terminal_check"
+    CHECK (
+      ("state" = 'negotiating' AND "sdp_answer" IS NULL AND "failure_code" IS NULL AND "negotiated_at" IS NULL AND "closed_at" IS NULL)
+      OR
+      ("state" = 'active' AND "sdp_answer" IS NOT NULL AND "failure_code" IS NULL AND "negotiated_at" IS NOT NULL AND "closed_at" IS NULL)
+      OR
+      ("state" = 'failed' AND "sdp_answer" IS NULL AND "failure_code" IS NOT NULL AND "closed_at" IS NOT NULL)
+      OR
+      ("state" = 'closed' AND "closed_at" IS NOT NULL)
+    )
+);
+
+CREATE UNIQUE INDEX "session_realtime_connections_operation_uq"
+  ON "session_realtime_connections" ("realtime_id", "operation_id");
+CREATE UNIQUE INDEX "session_realtime_connections_epoch_uq"
+  ON "session_realtime_connections" ("realtime_id", "connection_epoch");
+CREATE UNIQUE INDEX "session_realtime_connections_one_open_uq"
+  ON "session_realtime_connections" ("realtime_id")
+  WHERE "state" IN ('negotiating', 'active');
+
+CREATE TABLE "session_realtime_entries" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL,
+  "workspace_id" uuid NOT NULL,
+  "session_id" uuid NOT NULL,
+  "realtime_id" uuid NOT NULL,
+  "operation_id" uuid NOT NULL,
+  "connection_epoch" integer NOT NULL,
+  "sequence" integer NOT NULL,
+  "direction" text NOT NULL,
+  "kind" text NOT NULL,
+  "role" text,
+  "provider_event_id" text,
+  "delegation_item_id" text,
+  "source_update_id" uuid,
+  "history_item_id" uuid,
+  "turn_id" uuid,
+  "text" text,
+  "payload" jsonb DEFAULT '{}'::jsonb NOT NULL,
+  "client_acked_at" timestamptz,
+  "provider_acked_at" timestamptz,
+  "created_at" timestamptz DEFAULT now() NOT NULL,
+  "updated_at" timestamptz DEFAULT now() NOT NULL,
+  CONSTRAINT "session_realtime_entries_workspace_account_fk"
+    FOREIGN KEY ("workspace_id", "account_id")
+    REFERENCES "workspaces" ("id", "account_id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_entries_workspace_session_fk"
+    FOREIGN KEY ("workspace_id", "session_id")
+    REFERENCES "sessions" ("workspace_id", "id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_entries_realtime_fk"
+    FOREIGN KEY ("realtime_id")
+    REFERENCES "session_realtime_modes" ("id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_entries_source_update_fk"
+    FOREIGN KEY ("source_update_id")
+    REFERENCES "session_system_updates" ("id") ON DELETE SET NULL,
+  CONSTRAINT "session_realtime_entries_history_item_fk"
+    FOREIGN KEY ("history_item_id")
+    REFERENCES "session_history_items" ("id") ON DELETE SET NULL,
+  CONSTRAINT "session_realtime_entries_turn_fk"
+    FOREIGN KEY ("turn_id")
+    REFERENCES "session_turns" ("id") ON DELETE SET NULL,
+  CONSTRAINT "session_realtime_entries_epoch_check"
+    CHECK ("connection_epoch" >= 1),
+  CONSTRAINT "session_realtime_entries_sequence_check"
+    CHECK ("sequence" >= 1),
+  CONSTRAINT "session_realtime_entries_direction_check"
+    CHECK ("direction" IN ('provider_in', 'provider_out')),
+  CONSTRAINT "session_realtime_entries_kind_check"
+    CHECK ("kind" IN (
+      'user_transcript',
+      'assistant_transcript',
+      'delegation_call',
+      'delegation_result',
+      'interruption',
+      'session_update',
+      'error'
+    )),
+  CONSTRAINT "session_realtime_entries_role_check"
+    CHECK ("role" IS NULL OR "role" IN ('user', 'assistant')),
+  CONSTRAINT "session_realtime_entries_provider_event_check"
+    CHECK ("provider_event_id" IS NULL OR octet_length("provider_event_id") BETWEEN 1 AND 1024),
+  CONSTRAINT "session_realtime_entries_delegation_item_check"
+    CHECK ("delegation_item_id" IS NULL OR octet_length("delegation_item_id") BETWEEN 1 AND 1024),
+  CONSTRAINT "session_realtime_entries_text_check"
+    CHECK ("text" IS NULL OR octet_length("text") <= 131072),
+  CONSTRAINT "session_realtime_entries_payload_check"
+    CHECK (octet_length("payload"::text) <= 131072),
+  CONSTRAINT "session_realtime_entries_turn_check"
+    CHECK ("turn_id" IS NULL OR "kind" = 'delegation_call'),
+  CONSTRAINT "session_realtime_entries_transcript_check"
+    CHECK (
+      ("kind" = 'user_transcript' AND "role" = 'user' AND "text" IS NOT NULL)
+      OR
+      ("kind" = 'assistant_transcript' AND "role" = 'assistant' AND "text" IS NOT NULL)
+      OR
+      ("kind" NOT IN ('user_transcript', 'assistant_transcript') AND "role" IS NULL)
+    )
+);
+
+CREATE UNIQUE INDEX "session_realtime_entries_operation_uq"
+  ON "session_realtime_entries" ("realtime_id", "operation_id");
+CREATE UNIQUE INDEX "session_realtime_entries_sequence_uq"
+  ON "session_realtime_entries" ("realtime_id", "sequence");
+CREATE UNIQUE INDEX "session_realtime_entries_source_update_uq"
+  ON "session_realtime_entries" ("realtime_id", "source_update_id")
+  WHERE "source_update_id" IS NOT NULL;
+CREATE UNIQUE INDEX "session_realtime_entries_delegation_turn_uq"
+  ON "session_realtime_entries" ("turn_id")
+  WHERE "turn_id" IS NOT NULL;
+CREATE UNIQUE INDEX "session_realtime_entries_delegation_call_uq"
+  ON "session_realtime_entries" ("realtime_id", "delegation_item_id")
+  WHERE "kind" = 'delegation_call' AND "delegation_item_id" IS NOT NULL;
+CREATE INDEX "session_realtime_entries_outbound_pending_idx"
+  ON "session_realtime_entries" ("realtime_id", "sequence")
+  WHERE "direction" = 'provider_out'
+    AND ("client_acked_at" IS NULL OR "provider_acked_at" IS NULL);
+
+ALTER TABLE "session_realtime_connections" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "session_realtime_connections" FORCE ROW LEVEL SECURITY;
+ALTER TABLE "session_realtime_entries" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "session_realtime_entries" FORCE ROW LEVEL SECURITY;
+
+CREATE POLICY workspace_isolation ON "session_realtime_connections"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+CREATE POLICY workspace_isolation ON "session_realtime_entries"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+
+DO $grants$
+DECLARE target_schema text := current_schema();
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON TABLE %I.session_realtime_connections, %I.session_realtime_entries TO opengeni_app',
+      target_schema,
+      target_schema
+    );
+  END IF;
+END $grants$;
+
+RESET statement_timeout;
+RESET lock_timeout;

package/drizzle/0160_session_realtime_delegation_terminal.sql

@@ -0,0 +1,38 @@
+-- deployment-mode: rolling
+-- Rebased after the current main migration ledger.
+-- Link one terminal delegation result/error to the accepted ordinary turn.
+
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+ALTER TABLE "session_realtime_entries"
+  DROP CONSTRAINT "session_realtime_entries_turn_check";
+
+ALTER TABLE "session_realtime_entries"
+  ADD CONSTRAINT "session_realtime_entries_turn_check"
+  CHECK (
+    "turn_id" IS NULL
+    OR ("kind" = 'delegation_call' AND "direction" = 'provider_in')
+    OR ("kind" IN ('delegation_result', 'error') AND "direction" = 'provider_out')
+  );
+
+DROP INDEX "session_realtime_entries_delegation_turn_uq";
+
+CREATE UNIQUE INDEX "session_realtime_entries_delegation_turn_uq"
+  ON "session_realtime_entries" ("turn_id")
+  WHERE "kind" = 'delegation_call' AND "turn_id" IS NOT NULL;
+
+CREATE UNIQUE INDEX "session_realtime_entries_delegation_terminal_uq"
+  ON "session_realtime_entries" ("turn_id")
+  WHERE "direction" = 'provider_out'
+    AND "kind" IN ('delegation_result', 'error')
+    AND "turn_id" IS NOT NULL;
+
+DROP INDEX "session_realtime_entries_outbound_pending_idx";
+
+CREATE INDEX "session_realtime_entries_outbound_pending_idx"
+  ON "session_realtime_entries" ("realtime_id", "sequence")
+  WHERE "direction" = 'provider_out' AND "provider_acked_at" IS NULL;
+
+RESET statement_timeout;
+RESET lock_timeout;

package/drizzle/0161_session_realtime_context_projection.sql

@@ -0,0 +1,82 @@
+-- deployment-mode: rolling
+-- Rebased after the current main migration ledger.
+-- Exactly-once audit/idempotency projection for the canonical transcript-tail Steer turn.
+
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+CREATE TABLE "session_realtime_context_projections" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL,
+  "workspace_id" uuid NOT NULL,
+  "session_id" uuid NOT NULL,
+  "turn_id" uuid NOT NULL,
+  "context" text,
+  "source_mode_count" integer NOT NULL,
+  "source_entry_count" integer NOT NULL,
+  "included_entry_count" integer NOT NULL,
+  "omitted_entry_count" integer NOT NULL,
+  "created_at" timestamptz DEFAULT now() NOT NULL,
+  CONSTRAINT "session_realtime_context_projections_workspace_account_fk"
+    FOREIGN KEY ("workspace_id", "account_id")
+    REFERENCES "workspaces" ("id", "account_id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_context_projections_workspace_session_fk"
+    FOREIGN KEY ("workspace_id", "session_id")
+    REFERENCES "sessions" ("workspace_id", "id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_context_projections_workspace_turn_fk"
+    FOREIGN KEY ("workspace_id", "turn_id")
+    REFERENCES "session_turns" ("workspace_id", "id") ON DELETE CASCADE,
+  CONSTRAINT "session_realtime_context_projections_context_check"
+    CHECK ("context" IS NULL OR octet_length("context") BETWEEN 1 AND 65536),
+  CONSTRAINT "session_realtime_context_projections_counts_check"
+    CHECK (
+      "source_mode_count" >= 1
+      AND "source_entry_count" >= 0
+      AND "included_entry_count" >= 0
+      AND "omitted_entry_count" >= 0
+      AND "included_entry_count" + "omitted_entry_count" = "source_entry_count"
+      AND (("source_entry_count" = 0 AND "context" IS NULL)
+        OR ("source_entry_count" > 0 AND "context" IS NOT NULL))
+    )
+);
+
+CREATE UNIQUE INDEX "session_realtime_context_projections_turn_uq"
+  ON "session_realtime_context_projections" ("workspace_id", "session_id", "turn_id");
+
+ALTER TABLE "session_realtime_context_projections" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "session_realtime_context_projections" FORCE ROW LEVEL SECURITY;
+
+CREATE POLICY workspace_isolation ON "session_realtime_context_projections"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+
+ALTER TABLE "session_realtime_modes"
+  ADD COLUMN "context_projection_id" uuid,
+  ADD COLUMN "context_projected_at" timestamptz,
+  ADD CONSTRAINT "session_realtime_modes_context_projection_fk"
+    FOREIGN KEY ("context_projection_id")
+    REFERENCES "session_realtime_context_projections" ("id") ON DELETE RESTRICT,
+  ADD CONSTRAINT "session_realtime_modes_context_projection_check"
+    CHECK (
+      ("context_projection_id" IS NULL AND "context_projected_at" IS NULL)
+      OR
+      ("context_projection_id" IS NOT NULL AND "context_projected_at" IS NOT NULL AND "state" = 'ended')
+    );
+
+CREATE INDEX "session_realtime_modes_pending_context_idx"
+  ON "session_realtime_modes" ("workspace_id", "session_id", "ended_at", "id")
+  WHERE "state" = 'ended' AND "context_projection_id" IS NULL;
+
+DO $grants$
+DECLARE target_schema text := current_schema();
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON TABLE %I.session_realtime_context_projections TO opengeni_app',
+      target_schema
+    );
+  END IF;
+END $grants$;
+
+RESET statement_timeout;
+RESET lock_timeout;

package/drizzle/0162_session_realtime_connection_promotion.sql

@@ -0,0 +1,53 @@
+-- deployment-mode: rolling
+-- Rebased after the current main migration ledger.
+-- Stage one replacement beside the active GPT-Live connection until the browser
+-- proves its data channel is ready, then promote it transactionally.
+
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+ALTER TABLE "session_realtime_connections"
+  ADD COLUMN "promotion_mode" text DEFAULT 'legacy' NOT NULL,
+  ADD CONSTRAINT "session_realtime_connections_promotion_mode_check"
+    CHECK ("promotion_mode" IN ('legacy', 'staged'));
+
+CREATE UNIQUE INDEX "session_realtime_connections_one_active_uq"
+  ON "session_realtime_connections" ("realtime_id")
+  WHERE (
+    ("promotion_mode" = 'legacy' AND "state" IN ('negotiating', 'ready', 'active'))
+    OR
+    ("promotion_mode" = 'staged' AND "state" = 'active')
+  );
+
+CREATE UNIQUE INDEX "session_realtime_connections_one_preparing_uq"
+  ON "session_realtime_connections" ("realtime_id")
+  WHERE (
+    ("promotion_mode" = 'legacy' AND "state" IN ('negotiating', 'ready', 'active'))
+    OR
+    ("promotion_mode" = 'staged' AND "state" IN ('negotiating', 'ready'))
+  );
+
+ALTER TABLE "session_realtime_connections"
+  DROP CONSTRAINT "session_realtime_connections_state_check",
+  ADD CONSTRAINT "session_realtime_connections_state_check"
+    CHECK ("state" IN ('negotiating', 'ready', 'active', 'failed', 'closed'));
+
+ALTER TABLE "session_realtime_connections"
+  DROP CONSTRAINT "session_realtime_connections_terminal_check",
+  ADD CONSTRAINT "session_realtime_connections_terminal_check"
+    CHECK (
+      ("state" = 'negotiating' AND "sdp_answer" IS NULL AND "failure_code" IS NULL AND "negotiated_at" IS NULL AND "closed_at" IS NULL)
+      OR
+      ("state" = 'ready' AND "sdp_answer" IS NOT NULL AND "failure_code" IS NULL AND "negotiated_at" IS NOT NULL AND "closed_at" IS NULL)
+      OR
+      ("state" = 'active' AND "sdp_answer" IS NOT NULL AND "failure_code" IS NULL AND "negotiated_at" IS NOT NULL AND "closed_at" IS NULL)
+      OR
+      ("state" = 'failed' AND "sdp_answer" IS NULL AND "failure_code" IS NOT NULL AND "closed_at" IS NOT NULL)
+      OR
+      ("state" = 'closed' AND "closed_at" IS NOT NULL)
+    );
+
+DROP INDEX "session_realtime_connections_one_open_uq";
+
+RESET statement_timeout;
+RESET lock_timeout;

package/drizzle/0163_session_realtime_delegation_progress.sql

@@ -0,0 +1,35 @@
+-- deployment-mode: rolling
+-- Stream durable ordinary-turn assistant deltas back to their active V3 delegation.
+
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+ALTER TABLE "session_realtime_entries"
+  DROP CONSTRAINT "session_realtime_entries_kind_check";
+
+ALTER TABLE "session_realtime_entries"
+  ADD CONSTRAINT "session_realtime_entries_kind_check"
+  CHECK ("kind" IN (
+    'user_transcript',
+    'assistant_transcript',
+    'delegation_call',
+    'delegation_progress',
+    'delegation_result',
+    'interruption',
+    'session_update',
+    'error'
+  ));
+
+ALTER TABLE "session_realtime_entries"
+  DROP CONSTRAINT "session_realtime_entries_turn_check";
+
+ALTER TABLE "session_realtime_entries"
+  ADD CONSTRAINT "session_realtime_entries_turn_check"
+  CHECK (
+    "turn_id" IS NULL
+    OR ("kind" = 'delegation_call' AND "direction" = 'provider_in')
+    OR ("kind" IN ('delegation_progress', 'delegation_result', 'error') AND "direction" = 'provider_out')
+  );
+
+RESET statement_timeout;
+RESET lock_timeout;

package/drizzle/0164_session_realtime_models.sql

@@ -0,0 +1,28 @@
+-- deployment-mode: rolling
+-- Add provider-qualified AI Gateway voice models without changing lifecycle semantics.
+
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+ALTER TABLE "session_realtime_modes"
+  DROP CONSTRAINT "session_realtime_modes_model_check";
+
+ALTER TABLE "session_realtime_modes"
+  ADD CONSTRAINT "session_realtime_modes_model_check"
+  CHECK (
+    "model" IN (
+      'gpt-live-1-boulder-alpha',
+      'opengeni-gateway/openai/gpt-realtime-2.1',
+      'opengeni-gateway/openai/gpt-realtime-mini',
+      'opengeni-gateway/xai/grok-voice-think-fast-2.0',
+      'workspace-gateway/openai/gpt-realtime-2.1',
+      'workspace-gateway/openai/gpt-realtime-mini',
+      'workspace-gateway/xai/grok-voice-think-fast-2.0'
+    )
+  ) NOT VALID;
+
+ALTER TABLE "session_realtime_modes"
+  VALIDATE CONSTRAINT "session_realtime_modes_model_check";
+
+RESET statement_timeout;
+RESET lock_timeout;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/db",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "description": "OpenGeni persistence: Drizzle schema, RLS-scoped query layer, the SQL migration runner, and role provisioning.",
   "license": "Apache-2.0",
   "repository": {
@@ -50,9 +50,9 @@
     "prepublishOnly": "bash ../../scripts/prepublish-guard"
   },
   "dependencies": {
-    "@opengeni/codex": "^0.2.9",
-    "@opengeni/config": "^0.10.0",
-    "@opengeni/contracts": "^0.31.0",
+    "@opengeni/codex": "^0.2.10",
+    "@opengeni/config": "^0.10.3",
+    "@opengeni/contracts": "^0.32.0",
     "@opengeni/network": "^0.1.1",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.7"