@opengeni/db 0.22.2 → 0.26.0

package/dist/{chunk-CYGFLLMN.js → chunk-7WTDI7Y3.js}

@@ -17,6 +17,7 @@ __export(schema_exports, {
   codexRotationSettings: () => codexRotationSettings,
   codexSubscriptionCredentials: () => codexSubscriptionCredentials,
   composerDrafts: () => composerDrafts,
+  connectionDisconnectOperations: () => connectionDisconnectOperations,
   connections: () => connections,
   connectorActionPolicies: () => connectorActionPolicies,
   connectorActionRequests: () => connectorActionRequests,
@@ -101,6 +102,10 @@ __export(schema_exports, {
   sessionMcpServers: () => sessionMcpServers,
   sessionPendingToolCalls: () => sessionPendingToolCalls,
   sessionPins: () => sessionPins,
+  sessionRealtimeConnections: () => sessionRealtimeConnections,
+  sessionRealtimeContextProjections: () => sessionRealtimeContextProjections,
+  sessionRealtimeEntries: () => sessionRealtimeEntries,
+  sessionRealtimeModes: () => sessionRealtimeModes,
   sessionRecordingCodecValues: () => sessionRecordingCodecValues,
   sessionRecordingModeValues: () => sessionRecordingModeValues,
   sessionRecordingStateValues: () => sessionRecordingStateValues,
@@ -131,6 +136,7 @@ __export(schema_exports, {
   workspaceInstructionPolicyActivationEvents: () => workspaceInstructionPolicyActivationEvents,
   workspaceInstructionPolicyHeads: () => workspaceInstructionPolicyHeads,
   workspaceInstructionPolicyRevisions: () => workspaceInstructionPolicyRevisions,
+  workspaceInstructionPolicySnapshots: () => workspaceInstructionPolicySnapshots,
   workspaceMemberships: () => workspaceMemberships,
   workspaceModelPolicies: () => workspaceModelPolicies,
   workspacePacks: () => workspacePacks,
@@ -146,8 +152,8 @@ import {
   check as check4,
   foreignKey,
   index as index5,
-  integer as integer4,
-  jsonb as jsonb4,
+  integer as integer5,
+  jsonb as jsonb5,
   numeric,
   pgTable as pgTable5,
   text as text5,
@@ -163,6 +169,8 @@ import {
   bigint,
   check,
   index,
+  integer,
+  jsonb,
   pgTable,
   text,
   timestamp,
@@ -173,6 +181,8 @@ var workspaceInstructionPolicyRevisions = pgTable(
   "workspace_instruction_policy_revisions",
   {
     id: uuid("id").primaryKey().defaultRandom(),
+    operationId: uuid("operation_id"),
+    requestFingerprint: text("request_fingerprint"),
     accountId: uuid("account_id").notNull(),
     workspaceId: uuid("workspace_id").notNull(),
     revision: bigint("revision", { mode: "number" }).notNull().default(sql`nextval('workspace_instruction_policy_revision_seq')`),
@@ -188,6 +198,17 @@ var workspaceInstructionPolicyRevisions = pgTable(
     createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
+    workspaceOperation: uniqueIndex("workspace_instruction_policy_revisions_workspace_operation_uq").on(table.workspaceId, table.operationId).where(sql`${table.operationId} is not null`),
+    operationReceipt: check(
+      "workspace_instruction_policy_revisions_operation_receipt_chk",
+      sql`(
+        (${table.operationId} is null and ${table.requestFingerprint} is null)
+        or (
+          ${table.operationId} is not null
+          and ${table.requestFingerprint} ~ '^[0-9a-f]{64}$'
+        )
+      )`
+    ),
     workspaceRevision: uniqueIndex(
       "workspace_instruction_policy_revisions_workspace_revision_uq"
     ).on(table.workspaceId, table.revision),
@@ -241,6 +262,8 @@ var workspaceInstructionPolicyActivationEvents = pgTable(
   "workspace_instruction_policy_activation_events",
   {
     id: uuid("id").primaryKey().defaultRandom(),
+    operationId: uuid("operation_id"),
+    requestFingerprint: text("request_fingerprint"),
     accountId: uuid("account_id").notNull(),
     workspaceId: uuid("workspace_id").notNull(),
     kind: text("kind").notNull(),
@@ -259,6 +282,17 @@ var workspaceInstructionPolicyActivationEvents = pgTable(
     createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
+    workspaceOperation: uniqueIndex("workspace_instruction_policy_events_workspace_operation_uq").on(table.workspaceId, table.operationId).where(sql`${table.operationId} is not null`),
+    operationReceipt: check(
+      "workspace_instruction_policy_events_operation_receipt_chk",
+      sql`(
+        (${table.operationId} is null and ${table.requestFingerprint} is null)
+        or (
+          ${table.operationId} is not null
+          and ${table.requestFingerprint} ~ '^[0-9a-f]{64}$'
+        )
+      )`
+    ),
     workspaceActivationVersion: uniqueIndex(
       "workspace_instruction_policy_events_target_version_uq"
     ).on(
@@ -283,6 +317,43 @@ var workspaceInstructionPolicyActivationEvents = pgTable(
     )
   })
 );
+var workspaceInstructionPolicySnapshots = pgTable(
+  "workspace_instruction_policy_snapshots",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    accountId: uuid("account_id").notNull(),
+    workspaceId: uuid("workspace_id").notNull(),
+    sessionId: uuid("session_id").notNull(),
+    turnId: uuid("turn_id").notNull(),
+    attemptId: uuid("attempt_id").notNull(),
+    executionGeneration: integer("execution_generation").notNull(),
+    policyRole: text("policy_role"),
+    roleSource: text("role_source").notNull(),
+    entries: jsonb("entries").$type().notNull(),
+    entryHash: text("entry_hash").notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    attempt: uniqueIndex("workspace_instruction_policy_snapshots_attempt_uq").on(
+      table.accountId,
+      table.workspaceId,
+      table.attemptId
+    ),
+    workspaceTimeline: index("workspace_instruction_policy_snapshots_workspace_time_idx").on(
+      table.workspaceId,
+      table.createdAt,
+      table.id
+    ),
+    entriesShape: check(
+      "workspace_instruction_policy_snapshots_entries_chk",
+      sql`jsonb_typeof(${table.entries}) = 'array' and jsonb_array_length(${table.entries}) <= 3`
+    ),
+    roleSourceValid: check(
+      "workspace_instruction_policy_snapshots_role_source_chk",
+      sql`${table.roleSource} in ('session_binding', 'metadata_fallback', 'none', 'invalid_metadata_fallback')`
+    )
+  })
+);
 
 // src/preference-registry-schema.ts
 import { sql as sql2 } from "drizzle-orm";
@@ -291,8 +362,8 @@ import {
   boolean,
   check as check2,
   index as index2,
-  integer,
-  jsonb,
+  integer as integer2,
+  jsonb as jsonb2,
   pgTable as pgTable2,
   text as text2,
   timestamp as timestamp2,
@@ -309,8 +380,8 @@ var preferenceRegistryPreferences = pgTable2(
     scopeWorkspaceId: uuid2("scope_workspace_id"),
     scopeSubjectId: text2("scope_subject_id"),
     status: text2("status").notNull().default("proposed"),
-    scopeVersion: integer("scope_version").notNull().default(1),
-    activationVersion: integer("activation_version").notNull().default(0),
+    scopeVersion: integer2("scope_version").notNull().default(1),
+    activationVersion: integer2("activation_version").notNull().default(0),
     activeRevisionId: uuid2("active_revision_id"),
     activeRevision: bigint2("active_revision", { mode: "number" }),
     activeContentHash: text2("active_content_hash"),
@@ -352,9 +423,9 @@ var preferenceRegistryRevisions = pgTable2(
     description: text2("description").notNull(),
     content: text2("content").notNull(),
     contentHash: text2("content_hash").notNull(),
-    precedenceRank: integer("precedence_rank").notNull().default(0),
+    precedenceRank: integer2("precedence_rank").notNull().default(0),
     conflictStrategy: text2("conflict_strategy").notNull(),
-    conflictsWith: jsonb("conflicts_with").$type().notNull().default([]),
+    conflictsWith: jsonb2("conflicts_with").$type().notNull().default([]),
     provenanceSource: text2("provenance_source").notNull(),
     provenanceSourceId: text2("provenance_source_id"),
     trust: text2("trust").notNull(),
@@ -381,7 +452,7 @@ var preferenceRegistryEvents = pgTable2(
     accountId: uuid2("account_id").notNull(),
     preferenceId: uuid2("preference_id").notNull(),
     type: text2("type").notNull(),
-    version: integer("version").notNull(),
+    version: integer2("version").notNull(),
     oldRevisionId: uuid2("old_revision_id"),
     newRevisionId: uuid2("new_revision_id"),
     oldScope: text2("old_scope"),
@@ -416,9 +487,9 @@ var preferenceRegistrySnapshots = pgTable2(
     sessionId: uuid2("session_id").notNull(),
     turnId: uuid2("turn_id").notNull(),
     attemptId: uuid2("attempt_id").notNull(),
-    executionGeneration: integer("execution_generation").notNull(),
+    executionGeneration: integer2("execution_generation").notNull(),
     initiatingHumanSubjectId: text2("initiating_human_subject_id").notNull(),
-    descriptors: jsonb("descriptors").$type().notNull(),
+    descriptors: jsonb2("descriptors").$type().notNull(),
     descriptorHash: text2("descriptor_hash").notNull(),
     truncated: boolean("truncated").notNull().default(false),
     createdAt: timestamp2("created_at", { withTimezone: true }).notNull().defaultNow()
@@ -446,8 +517,8 @@ import { sql as sql3 } from "drizzle-orm";
 import {
   check as check3,
   index as index3,
-  integer as integer2,
-  jsonb as jsonb2,
+  integer as integer3,
+  jsonb as jsonb3,
   pgTable as pgTable3,
   text as text3,
   timestamp as timestamp3,
@@ -463,7 +534,7 @@ var knowledgeMemoryRelationships = pgTable3(
     sourceMemoryId: uuid3("source_memory_id").notNull(),
     targetMemoryId: uuid3("target_memory_id").notNull(),
     relationshipType: text3("relationship_type").notNull(),
-    version: integer2("version").notNull().default(1),
+    version: integer3("version").notNull().default(1),
     createdByEventId: uuid3("created_by_event_id").notNull(),
     removedByEventId: uuid3("removed_by_event_id"),
     createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -528,10 +599,10 @@ var knowledgeMemoryLifecycleEvents = pgTable3(
     actorSessionId: uuid3("actor_session_id"),
     actorTurnId: uuid3("actor_turn_id"),
     actorAttemptId: uuid3("actor_attempt_id"),
-    actorExecutionGeneration: integer2("actor_execution_generation"),
+    actorExecutionGeneration: integer3("actor_execution_generation"),
     planHash: text3("plan_hash").notNull(),
-    beforeState: jsonb2("before_state").$type().notNull(),
-    afterState: jsonb2("after_state").$type().notNull(),
+    beforeState: jsonb3("before_state").$type().notNull(),
+    afterState: jsonb3("after_state").$type().notNull(),
     revertsEventId: uuid3("reverts_event_id"),
     createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -600,8 +671,8 @@ import {
   bigint as bigint3,
   boolean as boolean2,
   index as index4,
-  integer as integer3,
-  jsonb as jsonb3,
+  integer as integer4,
+  jsonb as jsonb4,
   pgTable as pgTable4,
   text as text4,
   timestamp as timestamp4,
@@ -772,7 +843,7 @@ var knowledgeSyncRuns = pgTable4(
     state: text4("state").notNull().default("started"),
     outputCursor: text4("output_cursor"),
     watermark: timestamp4("watermark", { withTimezone: true }),
-    metadata: jsonb3("metadata").$type().notNull().default({}),
+    metadata: jsonb4("metadata").$type().notNull().default({}),
     errorCode: text4("error_code"),
     completionHash: text4("completion_hash"),
     ...actorColumns(),
@@ -848,7 +919,7 @@ var knowledgeDocumentVersions = pgTable4(
     contentSha256: text4("content_sha256").notNull(),
     ingestionKey: text4("ingestion_key").notNull(),
     sourceCursor: text4("source_cursor"),
-    sourceMetadata: jsonb3("source_metadata").$type().notNull().default({}),
+    sourceMetadata: jsonb4("source_metadata").$type().notNull().default({}),
     sourceCreatedAt: timestamp4("source_created_at", { withTimezone: true }),
     sourceUpdatedAt: timestamp4("source_updated_at", { withTimezone: true }),
     observedAt: timestamp4("observed_at", { withTimezone: true }).notNull().defaultNow(),
@@ -856,7 +927,7 @@ var knowledgeDocumentVersions = pgTable4(
     aclGeneration: bigint3("acl_generation", { mode: "number" }).notNull(),
     documentId: uuid4("document_id"),
     fileId: uuid4("file_id"),
-    locationMetadata: jsonb3("location_metadata").$type().notNull().default({}),
+    locationMetadata: jsonb4("location_metadata").$type().notNull().default({}),
     operationId: text4("operation_id").notNull(),
     inputHash: text4("input_hash").notNull(),
     ...actorColumns(),
@@ -990,7 +1061,7 @@ var knowledgeFacts = pgTable4(
     predicateKey: text4("predicate_key").notNull(),
     objectKind: text4("object_kind").notNull(),
     objectEntityId: uuid4("object_entity_id"),
-    objectValue: jsonb3("object_value").$type(),
+    objectValue: jsonb4("object_value").$type(),
     objectHash: text4("object_hash").notNull(),
     operationId: text4("operation_id").notNull(),
     inputHash: text4("input_hash").notNull(),
@@ -1020,11 +1091,11 @@ var knowledgeClaims = pgTable4(
     ...tenantScopeColumns(),
     factId: uuid4("fact_id").notNull(),
     origin: text4("origin").notNull(),
-    confidenceBps: integer3("confidence_bps").notNull(),
+    confidenceBps: integer4("confidence_bps").notNull(),
     effectiveAt: timestamp4("effective_at", { withTimezone: true }).notNull(),
     expiresAt: timestamp4("expires_at", { withTimezone: true }),
     extractionMethod: text4("extraction_method").notNull(),
-    extractionMetadata: jsonb3("extraction_metadata").$type().notNull().default({}),
+    extractionMetadata: jsonb4("extraction_metadata").$type().notNull().default({}),
     modelProvider: text4("model_provider"),
     modelName: text4("model_name"),
     modelVersion: text4("model_version"),
@@ -1081,7 +1152,7 @@ var knowledgeClaimEvidence = pgTable4(
     documentVersionId: uuid4("document_version_id").notNull(),
     polarity: text4("polarity").notNull(),
     documentChunkId: uuid4("document_chunk_id"),
-    chunkIndex: integer3("chunk_index"),
+    chunkIndex: integer4("chunk_index"),
     locator: text4("locator"),
     quoteHash: text4("quote_hash"),
     contentHash: text4("content_hash").notNull(),
@@ -1208,7 +1279,7 @@ var workspaces = pgTable5(
     agentInstructions: text5("agent_instructions"),
     // Growth-ready per-workspace settings bag (migration 0045). Holds memoryEnabled
     // and future workspace-level toggles; validated/merged via WorkspaceSettingsSchema.
-    settings: jsonb4("settings").$type().notNull().default({}),
+    settings: jsonb5("settings").$type().notNull().default({}),
     // The workspace's default rig (migration 0047). NULL ⇒ no default; sessions
     // created without an explicit rig ride no rig (today's behavior exactly). FK
     // (-> rigs(id) ON DELETE SET NULL) lives in migration 0047, not a Drizzle
@@ -1284,16 +1355,16 @@ var workspaceArtifactVersions = pgTable5(
     accountId: uuid5("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     artifactId: uuid5("artifact_id").notNull(),
-    revision: integer4("revision").notNull(),
+    revision: integer5("revision").notNull(),
     contentKey: text5("content_key").notNull(),
     contentType: text5("content_type").$type().notNull().default("text/html"),
     contentSha256: text5("content_sha256").notNull(),
-    sizeBytes: integer4("size_bytes").notNull(),
+    sizeBytes: integer5("size_bytes").notNull(),
     operationKey: text5("operation_key").notNull(),
     sourceSessionId: uuid5("source_session_id"),
     sourceTurnId: uuid5("source_turn_id"),
     sourceAttemptId: uuid5("source_attempt_id"),
-    sourceExecutionGeneration: integer4("source_execution_generation"),
+    sourceExecutionGeneration: integer5("source_execution_generation"),
     createdBySubjectId: text5("created_by_subject_id").notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -1351,7 +1422,7 @@ var workspaceArtifactEvents = pgTable5(
     sourceSessionId: uuid5("source_session_id"),
     sourceTurnId: uuid5("source_turn_id"),
     sourceAttemptId: uuid5("source_attempt_id"),
-    sourceExecutionGeneration: integer4("source_execution_generation"),
+    sourceExecutionGeneration: integer5("source_execution_generation"),
     actorSubjectId: text5("actor_subject_id").notNull(),
     reason: text5("reason").notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
@@ -1396,7 +1467,7 @@ var nestedAgentDepthConfiguration = pgTable5(
   "nested_agent_depth_configuration",
   {
     singleton: boolean3("singleton").primaryKey().notNull().default(true),
-    maxNestedAgentDepth: integer4("max_nested_agent_depth").notNull(),
+    maxNestedAgentDepth: integer5("max_nested_agent_depth").notNull(),
     policySource: text5("policy_source").$type().notNull(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -1484,7 +1555,7 @@ var workspaceMemberships = pgTable5(
     subjectId: text5("subject_id").notNull(),
     subjectLabel: text5("subject_label"),
     role: text5("role").notNull().default("member"),
-    permissions: jsonb4("permissions").$type().notNull().default([]),
+    permissions: jsonb5("permissions").$type().notNull().default([]),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -1508,7 +1579,7 @@ var apiKeys = pgTable5(
     name: text5("name").notNull(),
     prefix: text5("prefix").notNull(),
     keyHash: text5("key_hash").notNull(),
-    permissions: jsonb4("permissions").$type().notNull().default([]),
+    permissions: jsonb5("permissions").$type().notNull().default([]),
     expiresAt: timestamp5("expires_at", { withTimezone: true }),
     revokedAt: timestamp5("revoked_at", { withTimezone: true }),
     lastUsedAt: timestamp5("last_used_at", { withTimezone: true }),
@@ -1554,7 +1625,7 @@ var workspaceVariableSetVariables = pgTable5(
     name: text5("name").notNull(),
     // Format: v1:<base64 iv>:<base64 ciphertext||gcm-tag>. Never returned by any API.
     valueEncrypted: text5("value_encrypted").notNull(),
-    version: integer4("version").notNull().default(1),
+    version: integer5("version").notNull().default(1),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -1590,7 +1661,7 @@ var codexSubscriptionCredentials = pgTable5(
     status: text5("status").notNull().default("active"),
     // active | needs_relogin | error
     lastError: text5("last_error"),
-    version: integer4("version").notNull().default(1),
+    version: integer5("version").notNull().default(1),
     label: text5("label"),
     // user-chosen nickname; null ⇒ derive from email/plan/account
     accountEmail: text5("account_email"),
@@ -1598,9 +1669,9 @@ var codexSubscriptionCredentials = pgTable5(
     // P2 usage cache (plaintext metadata; NEVER a token). Snapshotted from
     // GET /wham/usage; drives the quota bars + the cache TTL. primary = 5h window
     // (limit_window_seconds 18000), secondary = weekly (604800).
-    primaryUsedPercent: integer4("primary_used_percent"),
+    primaryUsedPercent: integer5("primary_used_percent"),
     primaryResetAt: timestamp5("primary_reset_at", { withTimezone: true }),
-    secondaryUsedPercent: integer4("secondary_used_percent"),
+    secondaryUsedPercent: integer5("secondary_used_percent"),
     secondaryResetAt: timestamp5("secondary_reset_at", { withTimezone: true }),
     usageCheckedAt: timestamp5("usage_checked_at", { withTimezone: true }),
     // snapshot freshness → cache TTL clock
@@ -1627,22 +1698,18 @@ var codexSubscriptionCredentials = pgTable5(
     allocatorEnabled: boolean3("allocator_enabled").notNull().default(true),
     // Independent OCC/audit sequence for the allocator toggle. Token refresh
     // continues to own `version`; quota/cache writes own neither counter.
-    allocatorVersion: integer4("allocator_version").notNull().default(1),
+    allocatorVersion: integer5("allocator_version").notNull().default(1),
     allocatorUpdatedBySubjectId: text5("allocator_updated_by_subject_id"),
-    allocatorUpdatedAt: timestamp5("allocator_updated_at", {
-      withTimezone: true
-    }),
+    allocatorUpdatedAt: timestamp5("allocator_updated_at", { withTimezone: true }),
     // Authoritative count-only summary cached from /wham/usage. Detailed rows
     // are never persisted as redemption authority; every first POST preflights
     // the provider's fresh detail endpoint.
-    resetCreditAvailableCount: integer4("reset_credit_available_count"),
-    resetCreditsCheckedAt: timestamp5("reset_credits_checked_at", {
-      withTimezone: true
-    }),
+    resetCreditAvailableCount: integer5("reset_credit_available_count"),
+    resetCreditsCheckedAt: timestamp5("reset_credits_checked_at", { withTimezone: true }),
     // Set only by a direct Better Auth cookie connection/reconnection. Legacy,
     // configured, delegated, API-key, and agent-created rows remain view-only.
     connectedBySubjectId: text5("connected_by_subject_id"),
-    selectionCount: integer4("selection_count").notNull().default(0),
+    selectionCount: integer5("selection_count").notNull().default(0),
     lastSelectedAt: timestamp5("last_selected_at", { withTimezone: true }),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -1677,13 +1744,11 @@ var codexResetRedemptionAttempts = pgTable5(
     outcome: text5("outcome"),
     claimHolderId: uuid5("claim_holder_id"),
     claimExpiresAt: timestamp5("claim_expires_at", { withTimezone: true }),
-    confirmationExpiresAt: timestamp5("confirmation_expires_at", {
-      withTimezone: true
-    }).notNull(),
+    confirmationExpiresAt: timestamp5("confirmation_expires_at", { withTimezone: true }).notNull(),
     providerStartedAt: timestamp5("provider_started_at", { withTimezone: true }),
     completedAt: timestamp5("completed_at", { withTimezone: true }),
     lastFailureKind: text5("last_failure_kind"),
-    retryCount: integer4("retry_count").notNull().default(0),
+    retryCount: integer5("retry_count").notNull().default(0),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -1738,19 +1803,19 @@ var connections = pgTable5(
     kind: text5("kind").notNull(),
     status: text5("status").notNull().default("active"),
     credentialEncrypted: text5("credential_encrypted").notNull(),
-    grantedScopes: jsonb4("granted_scopes").$type().notNull().default([]),
+    grantedScopes: jsonb5("granted_scopes").$type().notNull().default([]),
     expiresAt: timestamp5("expires_at", { withTimezone: true }),
     lastRefreshAt: timestamp5("last_refresh_at", { withTimezone: true }),
     lastUsedAt: timestamp5("last_used_at", { withTimezone: true }),
     lastError: text5("last_error"),
-    version: integer4("version").notNull().default(1),
+    version: integer5("version").notNull().default(1),
     // Server-owned proof that the dedicated install route verified the exact
     // credential at this connection version. Generic/legacy writers cannot set
     // these columns, and migration 0131 clears them when protected fields change
     // without a fresh verification in the same statement.
     verifiedInstallAt: timestamp5("verified_install_at", { withTimezone: true }),
-    verifiedInstallVersion: integer4("verified_install_version"),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    verifiedInstallVersion: integer5("verified_install_version"),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     createdBySubjectId: text5("created_by_subject_id"),
     updatedBySubjectId: text5("updated_by_subject_id"),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -1774,6 +1839,38 @@ var connections = pgTable5(
     )
   })
 );
+var connectionDisconnectOperations = pgTable5(
+  "connection_disconnect_operations",
+  {
+    id: uuid5("id").primaryKey().defaultRandom(),
+    accountId: uuid5("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    connectionId: uuid5("connection_id").notNull().references(() => connections.id, { onDelete: "cascade" }),
+    subjectId: text5("subject_id").notNull(),
+    idempotencyKey: text5("idempotency_key").notNull(),
+    expectedVersion: integer5("expected_version").notNull(),
+    resultVersion: integer5("result_version").notNull(),
+    createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceSubjectKey: uniqueIndex5("connection_disconnect_operations_subject_key_uq").on(
+      table.workspaceId,
+      table.subjectId,
+      table.idempotencyKey
+    ),
+    connectionGeneration: uniqueIndex5(
+      "connection_disconnect_operations_connection_generation_uq"
+    ).on(table.workspaceId, table.connectionId, table.expectedVersion),
+    identityValid: check4(
+      "connection_disconnect_operations_identity_check",
+      sql5`length(${table.subjectId}) between 1 and 512
+        and length(${table.idempotencyKey}) between 1 and 200
+        and ${table.idempotencyKey} = btrim(${table.idempotencyKey})
+        and ${table.expectedVersion} > 0
+        and ${table.resultVersion} = ${table.expectedVersion} + 1`
+    )
+  })
+);
 var connectorActionPolicies = pgTable5(
   "connector_action_policies",
   {
@@ -1785,7 +1882,7 @@ var connectorActionPolicies = pgTable5(
     toolName: text5("tool_name").notNull(),
     actionName: text5("action_name").notNull(),
     policy: text5("policy").$type().notNull(),
-    version: integer4("version").notNull().default(1),
+    version: integer5("version").notNull().default(1),
     createdBySubjectId: text5("created_by_subject_id").notNull(),
     updatedBySubjectId: text5("updated_by_subject_id").notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -1860,9 +1957,10 @@ var slackInteractionInbox = pgTable5(
     status: text5("status").$type().notNull().default("pending"),
     claimHolderId: uuid5("claim_holder_id"),
     claimExpiresAt: timestamp5("claim_expires_at", { withTimezone: true }),
-    attemptCount: integer4("attempt_count").notNull().default(0),
+    attemptCount: integer5("attempt_count").notNull().default(0),
     retryAt: timestamp5("retry_at", { withTimezone: true }),
     lastErrorCode: text5("last_error_code"),
+    reactionContextCheckpoint: jsonb5("reaction_context_checkpoint").$type(),
     processedAt: timestamp5("processed_at", { withTimezone: true }),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -1902,16 +2000,16 @@ var slackInteractions = pgTable5(
     sessionId: uuid5("session_id").references(() => sessions.id, {
       onDelete: "cascade"
     }),
-    lastDeliveredSessionEventSequence: integer4("last_delivered_session_event_sequence").notNull().default(0),
+    lastDeliveredSessionEventSequence: integer5("last_delivered_session_event_sequence").notNull().default(0),
     deliveryClaimHolderId: uuid5("delivery_claim_holder_id"),
     deliveryClaimExpiresAt: timestamp5("delivery_claim_expires_at", {
       withTimezone: true
     }),
-    deliveryAttemptCount: integer4("delivery_attempt_count").notNull().default(0),
+    deliveryAttemptCount: integer5("delivery_attempt_count").notNull().default(0),
     deliveryRetryAt: timestamp5("delivery_retry_at", { withTimezone: true }),
     deliveryLastErrorCode: text5("delivery_last_error_code"),
     ackSlackMessageTs: text5("ack_slack_message_ts"),
-    progressCount: integer4("progress_count").notNull().default(0),
+    progressCount: integer5("progress_count").notNull().default(0),
     terminalDeliveryState: text5("terminal_delivery_state").$type().notNull().default("open"),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -1943,8 +2041,8 @@ var slackInteractionProgressDeliveries = pgTable5(
     accountId: uuid5("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     interactionId: uuid5("interaction_id").notNull(),
-    sessionEventSequence: integer4("session_event_sequence").notNull(),
-    slot: integer4("slot").notNull(),
+    sessionEventSequence: integer5("session_event_sequence").notNull(),
+    slot: integer5("slot").notNull(),
     operationId: uuid5("operation_id").notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -1987,7 +2085,7 @@ var slackBotPostOperations = pgTable5(
     status: text5("status").$type().notNull(),
     claimHolderId: uuid5("claim_holder_id"),
     claimExpiresAt: timestamp5("claim_expires_at", { withTimezone: true }),
-    attemptCount: integer4("attempt_count").notNull().default(0),
+    attemptCount: integer5("attempt_count").notNull().default(0),
     lastFailureCode: text5("last_failure_code"),
     slackChannelId: text5("slack_channel_id"),
     slackMessageTimestamp: text5("slack_message_timestamp"),
@@ -2057,7 +2155,7 @@ var slackBotDeleteOperations = pgTable5(
     status: text5("status").$type().notNull(),
     claimHolderId: uuid5("claim_holder_id"),
     claimExpiresAt: timestamp5("claim_expires_at", { withTimezone: true }),
-    attemptCount: integer4("attempt_count").notNull().default(0),
+    attemptCount: integer5("attempt_count").notNull().default(0),
     lastFailureCode: text5("last_failure_code"),
     slackChannelId: text5("slack_channel_id"),
     slackMessageTimestamp: text5("slack_message_timestamp"),
@@ -2120,7 +2218,7 @@ var integrationOauthClients = pgTable5(
     clientId: text5("client_id").notNull(),
     clientSecretEncrypted: text5("client_secret_encrypted"),
     tokenEndpointAuthMethod: text5("token_endpoint_auth_method").notNull().default("none"),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -2196,7 +2294,7 @@ var codexCredentialLeases = pgTable5(
     // durable turn replaces holderId and increments generation atomically;
     // stale/zombie heartbeats and releases must match both values.
     holderId: text5("holder_id").notNull(),
-    generation: integer4("generation").notNull().default(1),
+    generation: integer5("generation").notNull().default(1),
     leasedUntil: timestamp5("leased_until", { withTimezone: true }).notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -2235,15 +2333,20 @@ var sessions = pgTable5(
     // Composed system-level AFTER the workspace agentInstructions; never emitted
     // as a timeline event.
     instructions: text5("instructions"),
-    resources: jsonb4("resources").$type().notNull().default([]),
-    skills: jsonb4("skills").$type().notNull().default([]),
-    tools: jsonb4("tools").$type().notNull().default([]),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    // Immutable normalized prompt-policy role. This is deliberately separate
+    // from workspace membership roles and memory selectors. Existing rows keep
+    // NULL and use the bounded metadata.role compatibility fallback at the
+    // attempt-snapshot boundary.
+    policyRole: text5("policy_role"),
+    resources: jsonb5("resources").$type().notNull().default([]),
+    skills: jsonb5("skills").$type().notNull().default([]),
+    tools: jsonb5("tools").$type().notNull().default([]),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     // Frozen creator fact. This is used for creation attribution and for the
     // idempotent first-turn repair only; later turns capture their own actor.
     createdByKind: text5("created_by_kind").notNull().default("service"),
     createdBySubjectId: text5("created_by_subject_id").notNull().default("unattributed-legacy"),
-    createdByContext: jsonb4("created_by_context").$type().notNull().default({ backfill: true }),
+    createdByContext: jsonb5("created_by_context").$type().notNull().default({ backfill: true }),
     model: text5("model").notNull(),
     sandboxBackend: text5("sandbox_backend").notNull(),
     // The OS this session's box runs. Defaults to 'linux' (today's only OS, so
@@ -2273,7 +2376,7 @@ var sessions = pgTable5(
     // in-flight op fenced by a stale active_epoch retries against the new active
     // sandbox. integer (NOT bigint) — the lease-epoch spike: int8 reads back as a
     // JS string and breaks the strict fence; int4 returns a number.
-    activeEpoch: integer4("active_epoch").notNull().default(0),
+    activeEpoch: integer5("active_epoch").notNull().default(0),
     // The session's WORKING DIRECTORY — the path/cwd base the (selfhosted) box's
     // agent/terminal/file-dock operate under. A launch-workspace_root-relative
     // subdir or an absolute machine path; surfaced alongside the active-sandbox
@@ -2294,20 +2397,20 @@ var sessions = pgTable5(
     rigVersionId: uuid5("rig_version_id"),
     // Non-default first-party MCP token permissions (manager-style sessions);
     // null means the fixed worker default set in @opengeni/runtime.
-    firstPartyMcpPermissions: jsonb4("first_party_mcp_permissions").$type(),
+    firstPartyMcpPermissions: jsonb5("first_party_mcp_permissions").$type(),
     // Exact model-visible first-party tool selection. All catalogued tools are
     // selected by default; [] intentionally selects no broad-server tools.
-    firstPartyMcpTools: jsonb4("first_party_mcp_tools").$type().notNull(),
+    firstPartyMcpTools: jsonb5("first_party_mcp_tools").$type().notNull(),
     // Initial-command staging only. initializeSessionStartAtomically copies
     // this immutable snapshot onto the first turn so create repair survives a
     // crash between the session insert and first-turn transaction. Runtime
     // credential authority must never read this session field.
-    initialPersonalConnectionDelegations: jsonb4("initial_personal_connection_delegations").$type().notNull().default([]),
+    initialPersonalConnectionDelegations: jsonb5("initial_personal_connection_delegations").$type().notNull().default([]),
     // Durable tool-policy origin. Migration 0136 removes the old null/legacy
     // representation so every session has one explicit policy mode.
-    toolPolicy: jsonb4("tool_policy").$type().notNull(),
+    toolPolicy: jsonb5("tool_policy").$type().notNull(),
     // Optimistic-concurrency fence for durable session tool-policy writes.
-    toolPolicyVersion: integer4("tool_policy_version").notNull().default(1),
+    toolPolicyVersion: integer5("tool_policy_version").notNull().default(1),
     // The manager session that spawned this one via session_create. Set only
     // when the creating grant carried a worker-signed sessionId claim (a session
     // spawning a worker); null for direct API creates and scheduled-task runs.
@@ -2331,9 +2434,9 @@ var sessions = pgTable5(
     // populated by the database admission boundary and never re-derived from
     // a live workspace setting for an existing session.
     rootSessionId: uuid5("root_session_id").notNull(),
-    nestedAgentDepth: integer4("nested_agent_depth").notNull(),
-    maxNestedAgentDepthOverride: integer4("max_nested_agent_depth_override"),
-    effectiveMaxNestedAgentDepth: integer4("effective_max_nested_agent_depth").notNull(),
+    nestedAgentDepth: integer5("nested_agent_depth").notNull(),
+    maxNestedAgentDepthOverride: integer5("max_nested_agent_depth_override"),
+    effectiveMaxNestedAgentDepth: integer5("effective_max_nested_agent_depth").notNull(),
     nestedAgentDepthPolicySource: text5("nested_agent_depth_policy_source").notNull(),
     nestedAgentDepthPolicySessionId: uuid5("nested_agent_depth_policy_session_id"),
     temporalWorkflowId: text5("temporal_workflow_id"),
@@ -2342,13 +2445,13 @@ var sessions = pgTable5(
     // turn. The pre-turn portable compaction trigger reads this as its budget
     // signal (char/4 estimate is the same-turn fallback). Null until a turn with
     // usage has completed.
-    lastInputTokens: integer4("last_input_tokens"),
+    lastInputTokens: integer5("last_input_tokens"),
     // Operator /compact request flag. The API sets
     // it true; the worker honors it BEFORE the next turn's model call by forcing
     // a compaction, then clears it. A durable flag (not a transient signal) so
     // the trigger survives a worker restart and converges before the next turn.
     compactRequested: boolean3("compact_requested").notNull().default(false),
-    queueVersion: integer4("queue_version").notNull().default(0),
+    queueVersion: integer5("queue_version").notNull().default(0),
     queueHeadPosition: bigint4("queue_head_position", { mode: "number" }).notNull().default(0),
     queueTailPosition: bigint4("queue_tail_position", { mode: "number" }).notNull().default(0),
     directControlState: text5("direct_control_state").notNull().default("active"),
@@ -2362,7 +2465,7 @@ var sessions = pgTable5(
     directControlChangedAt: timestamp5("direct_control_changed_at", {
       withTimezone: true
     }),
-    lastSequence: integer4("last_sequence").notNull().default(0),
+    lastSequence: integer5("last_sequence").notNull().default(0),
     // The session's PINNED Codex account (manual override from the in-session
     // switcher). NULL ⇒ follow the workspace active pointer. FK declared in the
     // migration with ON DELETE SET NULL (a disconnected pin degrades to "follow
@@ -2433,6 +2536,296 @@ var sessions = pgTable5(
     )
   })
 );
+var sessionRealtimeModes = pgTable5(
+  "session_realtime_modes",
+  {
+    id: uuid5("id").primaryKey().defaultRandom(),
+    accountId: uuid5("account_id").notNull(),
+    workspaceId: uuid5("workspace_id").notNull(),
+    sessionId: uuid5("session_id").notNull(),
+    operationId: uuid5("operation_id").notNull(),
+    ownerSubjectId: text5("owner_subject_id").notNull(),
+    browserInstanceId: text5("browser_instance_id").notNull(),
+    ownerKeyHash: text5("owner_key_hash").notNull(),
+    model: text5("model").notNull(),
+    state: text5("state").notNull().default("active"),
+    version: integer5("version").notNull().default(1),
+    connectionEpoch: integer5("connection_epoch").notNull().default(1),
+    leaseExpiresAt: timestamp5("lease_expires_at", { withTimezone: true }).notNull(),
+    lastHeartbeatAt: timestamp5("last_heartbeat_at", { withTimezone: true }).notNull(),
+    startedAt: timestamp5("started_at", { withTimezone: true }).notNull().defaultNow(),
+    endedAt: timestamp5("ended_at", { withTimezone: true }),
+    endReason: text5("end_reason"),
+    // The rolling migration owns this forward reference. End commits at most
+    // one canonical transcript-tail Steer and binds its audit projection here.
+    contextProjectionId: uuid5("context_projection_id"),
+    contextProjectedAt: timestamp5("context_projected_at", { withTimezone: true }),
+    createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "session_realtime_modes_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("cascade"),
+    workspaceSession: foreignKey({
+      name: "session_realtime_modes_workspace_session_fk",
+      columns: [table.workspaceId, table.sessionId],
+      foreignColumns: [sessions.workspaceId, sessions.id]
+    }).onDelete("cascade"),
+    operation: uniqueIndex5("session_realtime_modes_operation_uq").on(
+      table.workspaceId,
+      table.sessionId,
+      table.operationId
+    ),
+    oneActive: uniqueIndex5("session_realtime_modes_one_active_uq").on(table.workspaceId, table.sessionId).where(sql5`${table.state} = 'active'`),
+    activeLease: index5("session_realtime_modes_active_lease_idx").on(table.leaseExpiresAt, table.workspaceId, table.sessionId).where(sql5`${table.state} = 'active'`),
+    stateValid: check4(
+      "session_realtime_modes_state_check",
+      sql5`${table.state} in ('active', 'ended')`
+    ),
+    modelValid: check4(
+      "session_realtime_modes_model_check",
+      sql5`${table.model} in (
+        'gpt-live-1-boulder-alpha',
+        'opengeni-gateway/openai/gpt-realtime-2.1',
+        'opengeni-gateway/openai/gpt-realtime-mini',
+        'opengeni-gateway/xai/grok-voice-think-fast-2.0',
+        'workspace-gateway/openai/gpt-realtime-2.1',
+        'workspace-gateway/openai/gpt-realtime-mini',
+        'workspace-gateway/xai/grok-voice-think-fast-2.0'
+      )`
+    ),
+    endReasonValid: check4(
+      "session_realtime_modes_end_reason_check",
+      sql5`${table.endReason} is null or ${table.endReason} in ('user_stop', 'browser_unload', 'lease_expired')`
+    ),
+    versionValid: check4("session_realtime_modes_version_check", sql5`${table.version} >= 1`),
+    epochValid: check4("session_realtime_modes_epoch_check", sql5`${table.connectionEpoch} >= 1`),
+    ownerSubjectValid: check4(
+      "session_realtime_modes_owner_subject_check",
+      sql5`octet_length(${table.ownerSubjectId}) between 1 and 1024`
+    ),
+    browserInstanceValid: check4(
+      "session_realtime_modes_browser_instance_check",
+      sql5`octet_length(${table.browserInstanceId}) between 1 and 256`
+    ),
+    ownerKeyHashValid: check4(
+      "session_realtime_modes_owner_key_hash_check",
+      sql5`${table.ownerKeyHash} ~ '^[0-9a-f]{64}$'`
+    ),
+    leaseValid: check4(
+      "session_realtime_modes_lease_check",
+      sql5`${table.leaseExpiresAt} > ${table.lastHeartbeatAt}`
+    ),
+    terminalValid: check4(
+      "session_realtime_modes_terminal_check",
+      sql5`(${table.state} = 'active' and ${table.endedAt} is null and ${table.endReason} is null)
+        or (${table.state} = 'ended' and ${table.endedAt} is not null and ${table.endReason} is not null)`
+    )
+  })
+);
+var sessionRealtimeConnections = pgTable5(
+  "session_realtime_connections",
+  {
+    id: uuid5("id").primaryKey().defaultRandom(),
+    accountId: uuid5("account_id").notNull(),
+    workspaceId: uuid5("workspace_id").notNull(),
+    sessionId: uuid5("session_id").notNull(),
+    realtimeId: uuid5("realtime_id").notNull().references(() => sessionRealtimeModes.id, { onDelete: "cascade" }),
+    operationId: uuid5("operation_id").notNull(),
+    connectionEpoch: integer5("connection_epoch").notNull(),
+    startupFenceSequence: integer5("startup_fence_sequence").notNull().default(0),
+    promotionMode: text5("promotion_mode").notNull().default("legacy"),
+    state: text5("state").notNull().default("negotiating"),
+    sdpAnswer: text5("sdp_answer"),
+    failureCode: text5("failure_code"),
+    providerSessionId: text5("provider_session_id"),
+    startupEventId: text5("startup_event_id"),
+    startupAcknowledgedAt: timestamp5("startup_acknowledged_at", { withTimezone: true }),
+    negotiatedAt: timestamp5("negotiated_at", { withTimezone: true }),
+    closedAt: timestamp5("closed_at", { withTimezone: true }),
+    createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "session_realtime_connections_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("cascade"),
+    workspaceSession: foreignKey({
+      name: "session_realtime_connections_workspace_session_fk",
+      columns: [table.workspaceId, table.sessionId],
+      foreignColumns: [sessions.workspaceId, sessions.id]
+    }).onDelete("cascade"),
+    operation: uniqueIndex5("session_realtime_connections_operation_uq").on(
+      table.realtimeId,
+      table.operationId
+    ),
+    epoch: uniqueIndex5("session_realtime_connections_epoch_uq").on(
+      table.realtimeId,
+      table.connectionEpoch
+    ),
+    oneActive: uniqueIndex5("session_realtime_connections_one_active_uq").on(table.realtimeId).where(
+      sql5`(${table.promotionMode} = 'legacy' and ${table.state} in ('negotiating', 'ready', 'active'))
+          or (${table.promotionMode} = 'staged' and ${table.state} = 'active')`
+    ),
+    onePreparing: uniqueIndex5("session_realtime_connections_one_preparing_uq").on(table.realtimeId).where(
+      sql5`(${table.promotionMode} = 'legacy' and ${table.state} in ('negotiating', 'ready', 'active'))
+          or (${table.promotionMode} = 'staged' and ${table.state} in ('negotiating', 'ready'))`
+    ),
+    epochValid: check4(
+      "session_realtime_connections_epoch_check",
+      sql5`${table.connectionEpoch} >= 1`
+    ),
+    startupFenceValid: check4(
+      "session_realtime_connections_startup_fence_check",
+      sql5`${table.startupFenceSequence} >= 0`
+    ),
+    promotionModeValid: check4(
+      "session_realtime_connections_promotion_mode_check",
+      sql5`${table.promotionMode} in ('legacy', 'staged')`
+    ),
+    stateValid: check4(
+      "session_realtime_connections_state_check",
+      sql5`${table.state} in ('negotiating', 'ready', 'active', 'failed', 'closed')`
+    ),
+    sdpValid: check4(
+      "session_realtime_connections_sdp_check",
+      sql5`${table.sdpAnswer} is null or octet_length(${table.sdpAnswer}) between 1 and 1048576`
+    ),
+    failureValid: check4(
+      "session_realtime_connections_failure_check",
+      sql5`${table.failureCode} is null or octet_length(${table.failureCode}) between 1 and 128`
+    ),
+    providerSessionValid: check4(
+      "session_realtime_connections_provider_session_check",
+      sql5`${table.providerSessionId} is null or octet_length(${table.providerSessionId}) between 1 and 1024`
+    ),
+    startupEventValid: check4(
+      "session_realtime_connections_startup_event_check",
+      sql5`${table.startupEventId} is null or octet_length(${table.startupEventId}) between 1 and 1024`
+    ),
+    startupAckValid: check4(
+      "session_realtime_connections_startup_ack_check",
+      sql5`(${table.startupAcknowledgedAt} is null and ${table.providerSessionId} is null and ${table.startupEventId} is null)
+        or (${table.startupAcknowledgedAt} is not null and ${table.providerSessionId} is not null)`
+    ),
+    terminalValid: check4(
+      "session_realtime_connections_terminal_check",
+      sql5`(${table.state} = 'negotiating' and ${table.sdpAnswer} is null and ${table.failureCode} is null and ${table.negotiatedAt} is null and ${table.closedAt} is null)
+        or (${table.state} = 'ready' and ${table.sdpAnswer} is not null and ${table.failureCode} is null and ${table.negotiatedAt} is not null and ${table.closedAt} is null)
+        or (${table.state} = 'active' and ${table.sdpAnswer} is not null and ${table.failureCode} is null and ${table.negotiatedAt} is not null and ${table.closedAt} is null)
+        or (${table.state} = 'failed' and ${table.sdpAnswer} is null and ${table.failureCode} is not null and ${table.closedAt} is not null)
+        or (${table.state} = 'closed' and ${table.closedAt} is not null)`
+    )
+  })
+);
+var sessionRealtimeEntries = pgTable5(
+  "session_realtime_entries",
+  {
+    id: uuid5("id").primaryKey().defaultRandom(),
+    accountId: uuid5("account_id").notNull(),
+    workspaceId: uuid5("workspace_id").notNull(),
+    sessionId: uuid5("session_id").notNull(),
+    realtimeId: uuid5("realtime_id").notNull().references(() => sessionRealtimeModes.id, { onDelete: "cascade" }),
+    operationId: uuid5("operation_id").notNull(),
+    connectionEpoch: integer5("connection_epoch").notNull(),
+    sequence: integer5("sequence").notNull(),
+    direction: text5("direction").notNull(),
+    kind: text5("kind").notNull(),
+    role: text5("role"),
+    providerEventId: text5("provider_event_id"),
+    delegationItemId: text5("delegation_item_id"),
+    // The referenced tables are declared later in this schema module; the
+    // rolling migration owns all three ON DELETE SET NULL foreign keys.
+    sourceUpdateId: uuid5("source_update_id"),
+    historyItemId: uuid5("history_item_id"),
+    // The rolling migration owns this ON DELETE SET NULL foreign key because
+    // sessionTurns is declared later in this schema module. A non-null value
+    // links the accepted provider call and its one terminal outbound
+    // result/error to the same ordinary turn. It never denotes a child/fork
+    // session.
+    turnId: uuid5("turn_id"),
+    text: text5("text"),
+    payload: jsonb5("payload").$type().notNull().default({}),
+    clientAckedAt: timestamp5("client_acked_at", { withTimezone: true }),
+    providerAckedAt: timestamp5("provider_acked_at", { withTimezone: true }),
+    createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "session_realtime_entries_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("cascade"),
+    workspaceSession: foreignKey({
+      name: "session_realtime_entries_workspace_session_fk",
+      columns: [table.workspaceId, table.sessionId],
+      foreignColumns: [sessions.workspaceId, sessions.id]
+    }).onDelete("cascade"),
+    operation: uniqueIndex5("session_realtime_entries_operation_uq").on(
+      table.realtimeId,
+      table.operationId
+    ),
+    sequence: uniqueIndex5("session_realtime_entries_sequence_uq").on(
+      table.realtimeId,
+      table.sequence
+    ),
+    sourceUpdate: uniqueIndex5("session_realtime_entries_source_update_uq").on(table.realtimeId, table.sourceUpdateId).where(sql5`${table.sourceUpdateId} is not null`),
+    delegationTurn: uniqueIndex5("session_realtime_entries_delegation_turn_uq").on(table.turnId).where(sql5`${table.kind} = 'delegation_call' and ${table.turnId} is not null`),
+    delegationTerminal: uniqueIndex5("session_realtime_entries_delegation_terminal_uq").on(table.turnId).where(
+      sql5`${table.direction} = 'provider_out' and ${table.kind} in ('delegation_result', 'error') and ${table.turnId} is not null`
+    ),
+    delegationCall: uniqueIndex5("session_realtime_entries_delegation_call_uq").on(table.realtimeId, table.delegationItemId).where(sql5`${table.kind} = 'delegation_call' and ${table.delegationItemId} is not null`),
+    outboundPending: index5("session_realtime_entries_outbound_pending_idx").on(table.realtimeId, table.sequence).where(sql5`${table.direction} = 'provider_out' and ${table.providerAckedAt} is null`),
+    epochValid: check4("session_realtime_entries_epoch_check", sql5`${table.connectionEpoch} >= 1`),
+    sequenceValid: check4("session_realtime_entries_sequence_check", sql5`${table.sequence} >= 1`),
+    directionValid: check4(
+      "session_realtime_entries_direction_check",
+      sql5`${table.direction} in ('provider_in', 'provider_out')`
+    ),
+    kindValid: check4(
+      "session_realtime_entries_kind_check",
+      sql5`${table.kind} in ('user_transcript', 'assistant_transcript', 'delegation_call', 'delegation_progress', 'delegation_result', 'interruption', 'session_update', 'error')`
+    ),
+    roleValid: check4(
+      "session_realtime_entries_role_check",
+      sql5`${table.role} is null or ${table.role} in ('user', 'assistant')`
+    ),
+    providerEventValid: check4(
+      "session_realtime_entries_provider_event_check",
+      sql5`${table.providerEventId} is null or octet_length(${table.providerEventId}) between 1 and 1024`
+    ),
+    delegationItemValid: check4(
+      "session_realtime_entries_delegation_item_check",
+      sql5`${table.delegationItemId} is null or octet_length(${table.delegationItemId}) between 1 and 1024`
+    ),
+    textValid: check4(
+      "session_realtime_entries_text_check",
+      sql5`${table.text} is null or octet_length(${table.text}) <= 131072`
+    ),
+    payloadValid: check4(
+      "session_realtime_entries_payload_check",
+      sql5`octet_length(${table.payload}::text) <= 131072`
+    ),
+    turnValid: check4(
+      "session_realtime_entries_turn_check",
+      sql5`${table.turnId} is null
+        or (${table.kind} = 'delegation_call' and ${table.direction} = 'provider_in')
+        or (${table.kind} in ('delegation_progress', 'delegation_result', 'error') and ${table.direction} = 'provider_out')`
+    ),
+    transcriptValid: check4(
+      "session_realtime_entries_transcript_check",
+      sql5`(${table.kind} = 'user_transcript' and ${table.role} = 'user' and ${table.text} is not null)
+        or (${table.kind} = 'assistant_transcript' and ${table.role} = 'assistant' and ${table.text} is not null)
+        or (${table.kind} not in ('user_transcript', 'assistant_transcript') and ${table.role} is null)`
+    )
+  })
+);
 var sessionSpawnDenials = pgTable5(
   "session_spawn_denials",
   {
@@ -2441,10 +2834,10 @@ var sessionSpawnDenials = pgTable5(
     workspaceId: uuid5("workspace_id").notNull(),
     parentSessionId: uuid5("parent_session_id"),
     rootSessionId: uuid5("root_session_id"),
-    currentDepth: integer4("current_depth").notNull(),
+    currentDepth: integer5("current_depth").notNull(),
     attemptedDepth: bigint4("attempted_depth", { mode: "number" }).notNull(),
-    effectiveMaxNestedAgentDepth: integer4("effective_max_nested_agent_depth").notNull(),
-    requestedMaxNestedAgentDepthOverride: integer4("requested_max_nested_agent_depth_override"),
+    effectiveMaxNestedAgentDepth: integer5("effective_max_nested_agent_depth").notNull(),
+    requestedMaxNestedAgentDepthOverride: integer5("requested_max_nested_agent_depth_override"),
     policySource: text5("policy_source").notNull(),
     policySessionId: uuid5("policy_session_id"),
     subjectId: text5("subject_id"),
@@ -2488,7 +2881,7 @@ var sessionPins = pgTable5(
     // unpin+re-pin that would otherwise recreate version 1.
     pinned: boolean3("pinned").notNull().default(true),
     pinnedAt: timestamp5("pinned_at", { withTimezone: true }).defaultNow(),
-    version: integer4("version").notNull().default(1)
+    version: integer5("version").notNull().default(1)
   },
   (table) => ({
     subjectNonempty: check4(
@@ -2573,19 +2966,19 @@ var sessionMcpServers = pgTable5(
     serverId: text5("server_id").notNull(),
     name: text5("name"),
     url: text5("url").notNull(),
-    allowedTools: jsonb4("allowed_tools").$type(),
-    timeoutMs: integer4("timeout_ms"),
+    allowedTools: jsonb5("allowed_tools").$type(),
+    timeoutMs: integer5("timeout_ms"),
     cacheToolsList: boolean3("cache_tools_list").notNull().default(false),
     // Human-approval policy: `true` = every tool requires approval, a string[] of
     // UNPREFIXED tool names = only those require it, null/absent = auto-run.
-    requireApproval: jsonb4("require_approval").$type(),
+    requireApproval: jsonb5("require_approval").$type(),
     // Non-secret pointer resolved at request time by the standalone broker or
     // an embedding host. Unlike headersEncrypted, this is safe to project.
-    connectionRef: jsonb4("connection_ref").$type(),
+    connectionRef: jsonb5("connection_ref").$type(),
     // Map of header name -> AES-GCM ciphertext. Values are decrypted only by the
     // worker's run-preparation path and never returned by API helpers.
-    headersEncrypted: jsonb4("headers_encrypted").$type().notNull().default({}),
-    credentialVersion: integer4("credential_version").notNull().default(1),
+    headersEncrypted: jsonb5("headers_encrypted").$type().notNull().default({}),
+    credentialVersion: integer5("credential_version").notNull().default(1),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -2670,7 +3063,7 @@ var documents = pgTable5(
     status: text5("status").notNull().default("queued"),
     title: text5("title").notNull(),
     parser: text5("parser").notNull().default("liteparse"),
-    chunkCount: integer4("chunk_count").notNull().default(0),
+    chunkCount: integer5("chunk_count").notNull().default(0),
     error: text5("error"),
     sourceKind: text5("source_kind").notNull().default("manual_upload"),
     sourceUri: text5("source_uri"),
@@ -2680,7 +3073,12 @@ var documents = pgTable5(
     sourceCreatedAt: timestamp5("source_created_at", { withTimezone: true }),
     sourceUpdatedAt: timestamp5("source_updated_at", { withTimezone: true }),
     sourceVersion: text5("source_version"),
-    aclTags: jsonb4("acl_tags").$type().notNull().default([]),
+    aclTags: jsonb5("acl_tags").$type().notNull().default([]),
+    // Durable authorization tuple. The workspace_id above remains ingestion
+    // provenance; organization authority deliberately has no workspace owner.
+    authorityKind: text5("authority_kind").notNull().default("workspace"),
+    authorityWorkspaceId: uuid5("authority_workspace_id"),
+    authoritySubjectId: text5("authority_subject_id"),
     // Per-document access controls. visibility 'private' restricts human reads to
     // created_by (a grant subject id, not a uuid); agent_access=false hides the
     // document from agent retrieval surfaces (docs MCP) while humans keep REST.
@@ -2689,9 +3087,9 @@ var documents = pgTable5(
     agentAccess: boolean3("agent_access").notNull().default(true),
     // Auto-curation output (knowledge drops).
     summary: text5("summary"),
-    topics: jsonb4("topics").$type().notNull().default([]),
+    topics: jsonb5("topics").$type().notNull().default([]),
     curationStatus: text5("curation_status").notNull().default("none"),
-    curation: jsonb4("curation").$type(),
+    curation: jsonb5("curation").$type(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -2718,6 +3116,28 @@ var documents = pgTable5(
       table.workspaceId,
       table.curationStatus
     ),
+    authority: index5("documents_authority_idx").on(
+      table.accountId,
+      table.authorityKind,
+      table.authorityWorkspaceId,
+      table.authoritySubjectId,
+      table.status
+    ),
+    authorityWorkspaceAccount: foreignKey({
+      name: "documents_authority_workspace_fk",
+      columns: [table.authorityWorkspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("restrict"),
+    authorityState: check4(
+      "documents_authority_chk",
+      sql5`(${table.authorityKind} = 'organization' and ${table.authorityWorkspaceId} is null and ${table.authoritySubjectId} is null)
+        or (${table.authorityKind} = 'workspace' and ${table.authorityWorkspaceId} = ${table.workspaceId} and ${table.authoritySubjectId} is null)
+        or (${table.authorityKind} = 'personal' and ${table.authorityWorkspaceId} = ${table.workspaceId} and nullif(btrim(${table.authoritySubjectId}), '') is not null and octet_length(convert_to(${table.authoritySubjectId}, 'UTF8')) <= 1024 and ${table.authoritySubjectId} = ${table.createdBy})`
+    ),
+    authorityVisibility: check4(
+      "documents_authority_visibility_chk",
+      sql5`(${table.authorityKind} = 'personal') = (${table.visibility} = 'private')`
+    ),
     visibilityState: check4(
       "documents_visibility_chk",
       sql5`${table.visibility} in ('workspace', 'private')`
@@ -2746,9 +3166,12 @@ var documentChunks = pgTable5(
     documentId: uuid5("document_id").notNull().references(() => documents.id, { onDelete: "cascade" }),
     baseId: uuid5("base_id").notNull().references(() => documentBases.id, { onDelete: "cascade" }),
     fileId: uuid5("file_id").notNull().references(() => files.id, { onDelete: "restrict" }),
-    chunkIndex: integer4("chunk_index").notNull(),
+    chunkIndex: integer5("chunk_index").notNull(),
     text: text5("text").notNull(),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
+    authorityKind: text5("authority_kind").notNull().default("workspace"),
+    authorityWorkspaceId: uuid5("authority_workspace_id"),
+    authoritySubjectId: text5("authority_subject_id"),
     embedding: vector("embedding").notNull(),
     embeddingModel: text5("embedding_model").notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
@@ -2759,7 +3182,24 @@ var documentChunks = pgTable5(
       table.documentId,
       table.chunkIndex
     ),
-    base: index5("document_chunks_workspace_base_idx").on(table.workspaceId, table.baseId)
+    base: index5("document_chunks_workspace_base_idx").on(table.workspaceId, table.baseId),
+    authority: index5("document_chunks_authority_idx").on(
+      table.accountId,
+      table.authorityKind,
+      table.authorityWorkspaceId,
+      table.authoritySubjectId
+    ),
+    authorityWorkspaceAccount: foreignKey({
+      name: "document_chunks_authority_workspace_fk",
+      columns: [table.authorityWorkspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("restrict"),
+    authorityState: check4(
+      "document_chunks_authority_chk",
+      sql5`(${table.authorityKind} = 'organization' and ${table.authorityWorkspaceId} is null and ${table.authoritySubjectId} is null)
+        or (${table.authorityKind} = 'workspace' and ${table.authorityWorkspaceId} = ${table.workspaceId} and ${table.authoritySubjectId} is null)
+        or (${table.authorityKind} = 'personal' and ${table.authorityWorkspaceId} = ${table.workspaceId} and nullif(btrim(${table.authoritySubjectId}), '') is not null and octet_length(convert_to(${table.authoritySubjectId}, 'UTF8')) <= 1024)`
+    )
   })
 );
 var knowledgeMemories = pgTable5(
@@ -2772,9 +3212,9 @@ var knowledgeMemories = pgTable5(
     kind: text5("kind").notNull().default("semantic"),
     scope: text5("scope").notNull().default("workspace"),
     text: text5("text").notNull(),
-    sourceRefs: jsonb4("source_refs").$type().notNull().default([]),
-    confidence: integer4("confidence").notNull().default(50),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    sourceRefs: jsonb5("source_refs").$type().notNull().default([]),
+    confidence: integer5("confidence").notNull().default(50),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     createdBySessionId: uuid5("created_by_session_id").references(() => sessions.id, {
       onDelete: "set null"
     }),
@@ -2785,7 +3225,7 @@ var knowledgeMemories = pgTable5(
     embedding: vector("embedding"),
     embeddingModel: text5("embedding_model"),
     pinned: boolean3("pinned").notNull().default(false),
-    usageCount: integer4("usage_count").notNull().default(0),
+    usageCount: integer5("usage_count").notNull().default(0),
     lastUsedAt: timestamp5("last_used_at", { withTimezone: true }),
     // Self-referential supersession chain. FKs live in migration 0045 (ON DELETE SET
     // NULL); declared here as plain columns like the migration-only composite FK.
@@ -2801,10 +3241,10 @@ var knowledgeMemories = pgTable5(
     scopeSessionId: uuid5("scope_session_id"),
     namespace: text5("namespace_key").notNull().default("general"),
     labels: text5("labels").array().notNull().default([]),
-    memoryVersion: integer4("memory_version").notNull().default(1),
+    memoryVersion: integer5("memory_version").notNull().default(1),
     createdByKind: text5("created_by_kind").notNull().default("service"),
     createdBySubjectId: text5("created_by_subject_id").notNull().default("unattributed-legacy"),
-    createdByContext: jsonb4("created_by_context").$type().notNull().default({ backfill: true }),
+    createdByContext: jsonb5("created_by_context").$type().notNull().default({ backfill: true }),
     // sha256(normalizeMemoryText(text)) — exact-dedup key; see memory-domain.
     textHash: text5("text_hash"),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -2872,8 +3312,8 @@ var sessionTurns = pgTable5(
     // Host context for this exact turn. System-level at runtime and deliberately
     // separate from the visible prompt/event payload.
     turnInstructions: text5("turn_instructions"),
-    resources: jsonb4("resources").$type().notNull().default([]),
-    tools: jsonb4("tools").$type().notNull().default([]),
+    resources: jsonb5("resources").$type().notNull().default([]),
+    tools: jsonb5("tools").$type().notNull().default([]),
     // false = inherit the durable session policy; true = this turn explicitly
     // replaces it with `tools` after the core subset fence.
     toolsProvided: boolean3("tools_provided").notNull().default(false),
@@ -2885,30 +3325,35 @@ var sessionTurns = pgTable5(
     // Per-turn OS override. NULL = inherit the session's sandbox_os. CHECK-
     // constrained to the SandboxOs enum (or NULL) in migration 0018.
     sandboxOs: text5("sandbox_os"),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
-    version: integer4("version").notNull().default(1),
-    executionGeneration: integer4("execution_generation").notNull().default(0),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
+    version: integer5("version").notNull().default(1),
+    executionGeneration: integer5("execution_generation").notNull().default(0),
     // Composite FK to session_turn_attempts is installed by migration 0063.
     // It lives in SQL because attempts carry the reciprocal turn FK and because
     // the claim transaction preallocates this ID before inserting the attempt;
     // the SQL constraint is therefore DEFERRABLE INITIALLY DEFERRED.
     activeAttemptId: uuid5("active_attempt_id"),
-    lineage: jsonb4("lineage").$type().notNull().default({}),
+    lineage: jsonb5("lineage").$type().notNull().default({}),
     // Required immutable authority captured when the turn is accepted. These
     // columns are deliberately outside mutable metadata/lineage.
     initiatorKind: text5("initiator_kind").notNull().default("service"),
     initiatorSubjectId: text5("initiator_subject_id").notNull().default("unattributed-legacy"),
-    initiatorContext: jsonb4("initiator_context").$type().notNull().default({ backfill: true }),
+    initiatorContext: jsonb5("initiator_context").$type().notNull().default({ backfill: true }),
+    // Immutable human authority for exact-attempt governance. Human turns bind
+    // their own subject; trusted continuations/compactions may inherit the
+    // causal turn's value while retaining a service initiator. Null means the
+    // turn has no human preference authority.
+    initiatingHumanSubjectId: text5("initiating_human_subject_id"),
     // Immutable exact personal MCP authority for this logical turn. Recovery,
     // approval, retries, and Toolspace reuse this row; no runtime may infer
     // broader authority from the session creator or mutable session state.
-    personalConnectionDelegations: jsonb4("personal_connection_delegations").$type().notNull().default([]),
+    personalConnectionDelegations: jsonb5("personal_connection_delegations").$type().notNull().default([]),
     cancelledBy: text5("cancelled_by"),
     cancelReason: text5("cancel_reason"),
     // Atomic per-turn toolspace call budget counter (migration 0043). Incremented
     // by a single conditional UPDATE at tools/call time; the row lock serializes
     // concurrent reservations so exactly `toolspaceMaxCallsPerTurn` succeed.
-    toolspaceCallCount: integer4("toolspace_call_count").notNull().default(0),
+    toolspaceCallCount: integer5("toolspace_call_count").notNull().default(0),
     startedAt: timestamp5("started_at", { withTimezone: true }),
     finishedAt: timestamp5("finished_at", { withTimezone: true }),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -2932,6 +3377,58 @@ var sessionTurns = pgTable5(
     )
   })
 );
+var sessionRealtimeContextProjections = pgTable5(
+  "session_realtime_context_projections",
+  {
+    id: uuid5("id").primaryKey().defaultRandom(),
+    accountId: uuid5("account_id").notNull(),
+    workspaceId: uuid5("workspace_id").notNull(),
+    sessionId: uuid5("session_id").notNull(),
+    turnId: uuid5("turn_id").notNull(),
+    context: text5("context"),
+    sourceModeCount: integer5("source_mode_count").notNull(),
+    sourceEntryCount: integer5("source_entry_count").notNull(),
+    includedEntryCount: integer5("included_entry_count").notNull(),
+    omittedEntryCount: integer5("omitted_entry_count").notNull(),
+    createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "session_realtime_context_projections_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("cascade"),
+    workspaceSession: foreignKey({
+      name: "session_realtime_context_projections_workspace_session_fk",
+      columns: [table.workspaceId, table.sessionId],
+      foreignColumns: [sessions.workspaceId, sessions.id]
+    }).onDelete("cascade"),
+    workspaceTurn: foreignKey({
+      name: "session_realtime_context_projections_workspace_turn_fk",
+      columns: [table.workspaceId, table.turnId],
+      foreignColumns: [sessionTurns.workspaceId, sessionTurns.id]
+    }).onDelete("cascade"),
+    turn: uniqueIndex5("session_realtime_context_projections_turn_uq").on(
+      table.workspaceId,
+      table.sessionId,
+      table.turnId
+    ),
+    contextValid: check4(
+      "session_realtime_context_projections_context_check",
+      sql5`${table.context} is null or octet_length(${table.context}) between 1 and 65536`
+    ),
+    countsValid: check4(
+      "session_realtime_context_projections_counts_check",
+      sql5`${table.sourceModeCount} >= 1
+        and ${table.sourceEntryCount} >= 0
+        and ${table.includedEntryCount} >= 0
+        and ${table.omittedEntryCount} >= 0
+        and ${table.includedEntryCount} + ${table.omittedEntryCount} = ${table.sourceEntryCount}
+        and ((${table.sourceEntryCount} = 0 and ${table.context} is null)
+          or (${table.sourceEntryCount} > 0 and ${table.context} is not null))`
+    )
+  })
+);
 var sessionTurnAttempts = pgTable5(
   "session_turn_attempts",
   {
@@ -2940,7 +3437,7 @@ var sessionTurnAttempts = pgTable5(
     workspaceId: uuid5("workspace_id").notNull(),
     sessionId: uuid5("session_id").notNull(),
     turnId: uuid5("turn_id").notNull(),
-    executionGeneration: integer4("execution_generation").notNull(),
+    executionGeneration: integer5("execution_generation").notNull(),
     state: text5("state").notNull().default("claimed"),
     outcome: text5("outcome"),
     temporalWorkflowId: text5("temporal_workflow_id").notNull(),
@@ -2953,8 +3450,8 @@ var sessionTurnAttempts = pgTable5(
       mode: "number"
     }).notNull(),
     // Immutable policy snapshot captured under the session lock at claim.
-    mcpApprovalPolicies: jsonb4("mcp_approval_policies").$type().notNull(),
-    connectorActionPolicies: jsonb4("connector_action_policies").$type().notNull().default([]),
+    mcpApprovalPolicies: jsonb5("mcp_approval_policies").$type().notNull(),
+    connectorActionPolicies: jsonb5("connector_action_policies").$type().notNull().default([]),
     startedAt: timestamp5("started_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow(),
     closedAt: timestamp5("closed_at", { withTimezone: true }),
@@ -3034,20 +3531,20 @@ var connectorActionRequests = pgTable5(
     sessionId: uuid5("session_id").notNull(),
     turnId: uuid5("turn_id").notNull(),
     creationAttemptId: uuid5("creation_attempt_id").notNull(),
-    creationExecutionGeneration: integer4("creation_execution_generation").notNull(),
+    creationExecutionGeneration: integer5("creation_execution_generation").notNull(),
     executionAttemptId: uuid5("execution_attempt_id"),
-    executionAttemptGeneration: integer4("execution_attempt_generation"),
+    executionAttemptGeneration: integer5("execution_attempt_generation"),
     approvalId: text5("approval_id").notNull(),
     initiatorKind: text5("initiator_kind").$type().notNull(),
     initiatorSubjectId: text5("initiator_subject_id").notNull(),
     connectionId: text5("connection_id").notNull(),
-    connectionVersion: integer4("connection_version"),
+    connectionVersion: integer5("connection_version"),
     serverId: text5("server_id").notNull(),
     toolName: text5("tool_name").notNull(),
     actionName: text5("action_name").notNull(),
     // Attempt-frozen provenance intentionally survives policy deletion.
     policyId: uuid5("policy_id"),
-    policyVersion: integer4("policy_version"),
+    policyVersion: integer5("policy_version"),
     policySource: text5("policy_source").$type().notNull(),
     policyDecision: text5("policy_decision").$type().notNull(),
     actionFingerprint: text5("action_fingerprint").notNull(),
@@ -3144,10 +3641,10 @@ var sessionCommandReceipts = pgTable5(
     appliedControlRevision: bigint4("applied_control_revision", {
       mode: "number"
     }),
-    appliedQueueVersion: integer4("applied_queue_version"),
-    appliedTurnVersion: integer4("applied_turn_version"),
+    appliedQueueVersion: integer5("applied_queue_version"),
+    appliedTurnVersion: integer5("applied_turn_version"),
     appliedDraftRevision: bigint4("applied_draft_revision", { mode: "number" }),
-    result: jsonb4("result").$type().notNull().default({}),
+    result: jsonb5("result").$type().notNull().default({}),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -3208,11 +3705,11 @@ var workspaceControlEvents = pgTable5(
     action: text5("action").notNull(),
     automatic: boolean3("automatic").notNull().default(false),
     reason: text5("reason"),
-    reasonOriginalBytes: integer4("reason_original_bytes"),
+    reasonOriginalBytes: integer5("reason_original_bytes"),
     actor: text5("actor").notNull(),
     // Null is the rolling-upgrade shape for untouched, already-bounded legacy
     // rows. New writes and rewritten poison rows carry exact source byte facts.
-    actorOriginalBytes: integer4("actor_original_bytes"),
+    actorOriginalBytes: integer5("actor_original_bytes"),
     occurredAt: timestamp5("occurred_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -3305,14 +3802,14 @@ var composerDrafts = pgTable5(
     subjectId: text5("subject_id").notNull(),
     revision: bigint4("revision", { mode: "number" }).notNull().default(1),
     text: text5("text").notNull().default(""),
-    resources: jsonb4("resources").$type().notNull().default([]),
-    tools: jsonb4("tools").$type().notNull().default([]),
+    resources: jsonb5("resources").$type().notNull().default([]),
+    tools: jsonb5("tools").$type().notNull().default([]),
     toolsProvided: boolean3("tools_provided").notNull().default(false),
     model: text5("model").notNull(),
     reasoningEffort: text5("reasoning_effort").notNull(),
     latencyMode: text5("latency_mode").notNull().default("standard"),
     sourceTurnId: uuid5("source_turn_id"),
-    sourceTurnVersion: integer4("source_turn_version"),
+    sourceTurnVersion: integer5("source_turn_version"),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -3357,12 +3854,12 @@ var newSessionDrafts = pgTable5(
     subjectId: text5("subject_id").notNull(),
     revision: bigint4("revision", { mode: "number" }).notNull().default(1),
     text: text5("text").notNull().default(""),
-    resources: jsonb4("resources").$type().notNull().default([]),
-    tools: jsonb4("tools").$type().notNull().default([]),
+    resources: jsonb5("resources").$type().notNull().default([]),
+    tools: jsonb5("tools").$type().notNull().default([]),
     model: text5("model").notNull(),
     reasoningEffort: text5("reasoning_effort").notNull(),
     latencyMode: text5("latency_mode").notNull().default("standard"),
-    sessionOptions: jsonb4("session_options").$type().notNull().default({}),
+    sessionOptions: jsonb5("session_options").$type().notNull().default({}),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -3399,11 +3896,11 @@ var sessionSystemUpdates = pgTable5(
     sourceId: text5("source_id").notNull(),
     dedupeKey: text5("dedupe_key").notNull(),
     summary: text5("summary").notNull(),
-    payload: jsonb4("payload").$type().notNull().default({}),
-    lineage: jsonb4("lineage").$type().notNull().default({}),
+    payload: jsonb5("payload").$type().notNull().default({}),
+    lineage: jsonb5("lineage").$type().notNull().default({}),
     // Private immutable authority frozen when this machine input is accepted.
     // Public projections intentionally omit connection ids and owner subjects.
-    personalConnectionDelegations: jsonb4("personal_connection_delegations").$type().notNull().default([]),
+    personalConnectionDelegations: jsonb5("personal_connection_delegations").$type().notNull().default([]),
     // pending is visible queue truth; delivered means its exact model-memory
     // batch was durably claimed. Terminal cancellation/supersession is explicit.
     state: text5("state").notNull().default("pending"),
@@ -3464,13 +3961,13 @@ var sessionSystemUpdateOutbox = pgTable5(
     classification: text5("classification").notNull(),
     sourceId: text5("source_id").notNull(),
     summary: text5("summary").notNull(),
-    payload: jsonb4("payload").$type().notNull().default({}),
-    lineage: jsonb4("lineage").$type().notNull().default({}),
+    payload: jsonb5("payload").$type().notNull().default({}),
+    lineage: jsonb5("lineage").$type().notNull().default({}),
     // Exact private authority copied from the causal parent turn in the source
     // terminal transaction. Delivery retries cannot replace this snapshot.
-    personalConnectionDelegations: jsonb4("personal_connection_delegations").$type().notNull().default([]),
+    personalConnectionDelegations: jsonb5("personal_connection_delegations").$type().notNull().default([]),
     status: text5("status").notNull().default("pending"),
-    attempts: integer4("attempts").notNull().default(0),
+    attempts: integer5("attempts").notNull().default(0),
     updateId: uuid5("update_id"),
     lastError: text5("last_error"),
     deliveredAt: timestamp5("delivered_at", { withTimezone: true }),
@@ -3503,7 +4000,7 @@ var sessionWorkflowWakeOutbox = pgTable5(
     wakeRevision: bigint4("wake_revision", { mode: "number" }).notNull().default(1),
     deliveredRevision: bigint4("delivered_revision", { mode: "number" }).notNull().default(0),
     reason: text5("reason").notNull(),
-    attempts: integer4("attempts").notNull().default(0),
+    attempts: integer5("attempts").notNull().default(0),
     nextAttemptAt: timestamp5("next_attempt_at", { withTimezone: true }).notNull().defaultNow(),
     lastError: text5("last_error"),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -3554,27 +4051,23 @@ var sessionGoals = pgTable5(
     // agent | user_pause | api | no_progress | max_auto_continuations | limits
     createdBy: text5("created_by").notNull().default("api"),
     // api | agent | scheduled_task
-    version: integer4("version").notNull().default(1),
+    version: integer5("version").notNull().default(1),
     // bumped on every set/update; progress signal
-    autoContinuations: integer4("auto_continuations").notNull().default(0),
-    noProgressStreak: integer4("no_progress_streak").notNull().default(0),
-    maxAutoContinuations: integer4("max_auto_continuations"),
+    autoContinuations: integer5("auto_continuations").notNull().default(0),
+    noProgressStreak: integer5("no_progress_streak").notNull().default(0),
+    maxAutoContinuations: integer5("max_auto_continuations"),
     // per-goal override; a configured settings cap (if any) remains the hard ceiling
     lastContinuationTurnId: uuid5("last_continuation_turn_id"),
-    versionAtLastContinuation: integer4("version_at_last_continuation"),
+    versionAtLastContinuation: integer5("version_at_last_continuation"),
     // Postgres owns the continuation obligation. Terminal settlement advances
     // wakeRevision in the same transaction that makes the session idle;
     // materialization advances observedRevision only alongside the one typed
     // update, timeline events, usage row, and workflow-wake outbox row.
     // Temporal signals and workflow history are replaceable nudges over these
     // monotonic revisions.
-    continuationWakeRevision: bigint4("continuation_wake_revision", {
-      mode: "number"
-    }).notNull().default(0),
-    continuationObservedRevision: bigint4("continuation_observed_revision", {
-      mode: "number"
-    }).notNull().default(0),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    continuationWakeRevision: bigint4("continuation_wake_revision", { mode: "number" }).notNull().default(0),
+    continuationObservedRevision: bigint4("continuation_observed_revision", { mode: "number" }).notNull().default(0),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -3603,23 +4096,23 @@ var codexCapacityWaiters = pgTable5(
     sessionId: uuid5("session_id").notNull(),
     goalId: uuid5("goal_id"),
     blockedTurnId: uuid5("blocked_turn_id").notNull(),
-    blockedTurnGeneration: integer4("blocked_turn_generation").notNull(),
+    blockedTurnGeneration: integer5("blocked_turn_generation").notNull(),
     workflowId: text5("workflow_id").notNull(),
-    generation: integer4("generation").notNull().default(1),
+    generation: integer5("generation").notNull().default(1),
     status: text5("status").notNull().default("waiting"),
     // waiting | resumed | superseded
-    goalVersion: integer4("goal_version"),
+    goalVersion: integer5("goal_version"),
     policyHash: text5("policy_hash"),
     earliestResetAt: timestamp5("earliest_reset_at", { withTimezone: true }),
     nextCheckAt: timestamp5("next_check_at", { withTimezone: true }).notNull(),
     resetKind: text5("reset_kind").notNull(),
     // authoritative | bounded_refresh
-    refreshAttempt: integer4("refresh_attempt").notNull().default(0),
+    refreshAttempt: integer5("refresh_attempt").notNull().default(0),
     // Coalescing outbox generation. Every eligibility-affecting mutation bumps
     // wakeRevision. Duplicate/lost Temporal signals are harmless because only
     // the row-locked evaluator moves observedWakeRevision and may enqueue work.
-    wakeRevision: integer4("wake_revision").notNull().default(1),
-    observedWakeRevision: integer4("observed_wake_revision").notNull().default(0),
+    wakeRevision: integer5("wake_revision").notNull().default(1),
+    observedWakeRevision: integer5("observed_wake_revision").notNull().default(0),
     lastWakeReason: text5("last_wake_reason").notNull().default("capacity_wait_armed"),
     resumedUpdateId: uuid5("resumed_update_id"),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -3654,17 +4147,17 @@ var sessionEvents = pgTable5(
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     sessionId: uuid5("session_id").notNull().references(() => sessions.id, { onDelete: "cascade" }),
     turnId: uuid5("turn_id"),
-    turnGeneration: integer4("turn_generation"),
+    turnGeneration: integer5("turn_generation"),
     turnAttemptId: uuid5("turn_attempt_id"),
     turnAssociation: text5("turn_association"),
     duplicateOfEventId: uuid5("duplicate_of_event_id"),
     duplicateReason: text5("duplicate_reason"),
-    sequence: integer4("sequence").notNull(),
+    sequence: integer5("sequence").notNull(),
     type: text5("type").notNull(),
-    payload: jsonb4("payload").$type().notNull().default({}),
+    payload: jsonb5("payload").$type().notNull().default({}),
     clientEventId: text5("client_event_id"),
     producerId: text5("producer_id"),
-    producerSeq: integer4("producer_seq"),
+    producerSeq: integer5("producer_seq"),
     occurredAt: timestamp5("occurred_at", { withTimezone: true }).notNull().defaultNow(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -3730,9 +4223,9 @@ var agentRunStates = pgTable5("agent_run_states", {
   turnId: uuid5("turn_id").references(() => sessionTurns.id, {
     onDelete: "set null"
   }),
-  stateVersion: integer4("state_version").notNull(),
+  stateVersion: integer5("state_version").notNull(),
   serializedRunState: text5("serialized_run_state").notNull(),
-  pendingApprovals: jsonb4("pending_approvals").$type().notNull().default([]),
+  pendingApprovals: jsonb5("pending_approvals").$type().notNull().default([]),
   // The Codex account that FROZE this run state: the turn's resolved codex
   // credential id (pin > workspace-active), or NULL when frozen on the
   // non-codex / Azure path (or before this column existed). The serialized
@@ -3767,13 +4260,13 @@ var sessionHumanInputRequests = pgTable5(
     workspaceId: uuid5("workspace_id").notNull(),
     sessionId: uuid5("session_id").notNull(),
     turnId: uuid5("turn_id").notNull(),
-    turnGeneration: integer4("turn_generation").notNull(),
+    turnGeneration: integer5("turn_generation").notNull(),
     creationAttemptId: uuid5("creation_attempt_id").notNull(),
     toolCallId: text5("tool_call_id").notNull(),
     status: text5("status").notNull().default("pending"),
-    questions: jsonb4("questions").$type().notNull(),
+    questions: jsonb5("questions").$type().notNull(),
     allowSkip: boolean3("allow_skip").notNull().default(false),
-    response: jsonb4("response").$type(),
+    response: jsonb5("response").$type(),
     respondedBy: text5("responded_by"),
     respondedAt: timestamp5("responded_at", { withTimezone: true }),
     expiresAt: timestamp5("expires_at", { withTimezone: true }),
@@ -3849,7 +4342,7 @@ var sessionHistoryItems = pgTable5(
     // positions; only the summary uses the half-step. `mode: "number"` maps the
     // postgres.js string back to a JS number so every reader stays numeric.
     position: numeric("position", { mode: "number" }).notNull(),
-    item: jsonb4("item").$type().notNull(),
+    item: jsonb5("item").$type().notNull(),
     // Live-row flag for client-side context compaction. The read path selects
     // only active rows; a compaction supersedes the summarized prefix (sets this
     // false — never deletes, so the full transcript stays as an audit trail) and
@@ -3895,13 +4388,13 @@ var sessionPendingToolCalls = pgTable5(
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     sessionId: uuid5("session_id").notNull().references(() => sessions.id, { onDelete: "cascade" }),
     turnId: uuid5("turn_id").notNull().references(() => sessionTurns.id, { onDelete: "cascade" }),
-    executionGeneration: integer4("execution_generation").notNull(),
+    executionGeneration: integer5("execution_generation").notNull(),
     attemptId: uuid5("attempt_id").notNull(),
     callId: text5("call_id").notNull(),
     callType: text5("call_type").notNull(),
-    callItem: jsonb4("call_item").$type().notNull(),
-    modelToolOutputTruncationTokens: integer4("model_tool_output_truncation_tokens"),
-    resultItem: jsonb4("result_item").$type(),
+    callItem: jsonb5("call_item").$type().notNull(),
+    modelToolOutputTruncationTokens: integer5("model_tool_output_truncation_tokens"),
+    resultItem: jsonb5("result_item").$type(),
     resultRecordedAt: timestamp5("result_recorded_at", { withTimezone: true }),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -3930,7 +4423,7 @@ var sandboxSessionEnvelopes = pgTable5(
     accountId: uuid5("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     sessionId: uuid5("session_id").notNull().references(() => sessions.id, { onDelete: "cascade" }),
-    envelope: jsonb4("envelope").$type().notNull(),
+    envelope: jsonb5("envelope").$type().notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -3958,27 +4451,27 @@ var sandboxCheckpointArtifacts = pgTable5(
     workspaceId: uuid5("workspace_id").notNull(),
     sandboxGroupId: uuid5("sandbox_group_id").notNull(),
     sourceLeaseId: uuid5("source_lease_id").notNull(),
-    sourceLeaseEpoch: integer4("source_lease_epoch").notNull(),
+    sourceLeaseEpoch: integer5("source_lease_epoch").notNull(),
     sourceInstanceId: text5("source_instance_id"),
-    sourceWorkspaceGeneration: integer4("source_workspace_generation"),
+    sourceWorkspaceGeneration: integer5("source_workspace_generation"),
     provenance: text5("provenance", {
       enum: ["native_capture", "legacy_provider_adopted"]
     }).notNull(),
     providerBackend: text5("provider_backend").notNull(),
     providerBindingKey: text5("provider_binding_key").notNull(),
-    providerBinding: jsonb4("provider_binding").$type().notNull(),
+    providerBinding: jsonb5("provider_binding").$type().notNull(),
     objectKind: text5("object_kind", {
       enum: ["modal_filesystem_snapshot", "modal_directory_snapshot"]
     }).notNull(),
     objectId: text5("object_id").notNull(),
     archiveBase64: text5("archive_base64").notNull(),
     archiveSha256: text5("archive_sha256").notNull(),
-    archiveBytes: integer4("archive_bytes").notNull(),
-    descriptor: jsonb4("descriptor").$type().notNull(),
+    archiveBytes: integer5("archive_bytes").notNull(),
+    descriptor: jsonb5("descriptor").$type().notNull(),
     descriptorRevision: text5("descriptor_revision").notNull(),
     state: text5("state", { enum: sandboxCheckpointArtifactStateValues }).notNull().default("candidate"),
     deleteAfter: timestamp5("delete_after", { withTimezone: true }),
-    deleteAttempts: integer4("delete_attempts").notNull().default(0),
+    deleteAttempts: integer5("delete_attempts").notNull().default(0),
     deleteClaimId: uuid5("delete_claim_id"),
     deleteClaimedAt: timestamp5("delete_claimed_at", { withTimezone: true }),
     lastDeleteError: text5("last_delete_error"),
@@ -4066,9 +4559,9 @@ var sandboxLeases = pgTable5(
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     sandboxGroupId: uuid5("sandbox_group_id").notNull(),
     liveness: text5("liveness", { enum: sandboxLeaseLivenessValues }).notNull().default("cold"),
-    refcount: integer4("refcount").notNull().default(0),
-    turnHolders: integer4("turn_holders").notNull().default(0),
-    viewerHolders: integer4("viewer_holders").notNull().default(0),
+    refcount: integer5("refcount").notNull().default(0),
+    turnHolders: integer5("turn_holders").notNull().default(0),
+    viewerHolders: integer5("viewer_holders").notNull().default(0),
     instanceId: text5("instance_id"),
     backend: text5("backend").notNull(),
     os: text5("os").notNull().default("linux"),
@@ -4098,21 +4591,21 @@ var sandboxLeases = pgTable5(
     // JS STRING from postgres-js, breaking the strict epoch-fence comparison (it
     // was always-true → every turn fenced); int4 returns a JS number, the fix.
     // Epochs never approach 2^31, so the narrower type loses nothing.
-    leaseEpoch: integer4("lease_epoch").notNull().default(0),
+    leaseEpoch: integer5("lease_epoch").notNull().default(0),
     // Monotonic mutation intent for the live workspace. Every acknowledged
     // filesystem-writing operation advances this under the exact lease epoch +
     // provider-instance fence BEFORE it reaches the provider. A verified
     // archive fold copies the exact captured value into archive_generation in
     // the same row update; equality is the only durable completeness proof.
-    workspaceGeneration: integer4("workspace_generation").notNull().default(0),
-    archiveGeneration: integer4("archive_generation"),
+    workspaceGeneration: integer5("workspace_generation").notNull().default(0),
+    archiveGeneration: integer5("archive_generation"),
     // Provider-native capture may pause the live box. The exact claim is
     // acquired before provider I/O and cleared only after that capture settles;
     // new holders and workspace mutations fence on it. The SQL constraint also
     // requires the claimed generation to remain current, so an unaware writer
     // cannot advance generation through an active capture.
     archiveCaptureId: uuid5("archive_capture_id"),
-    archiveCaptureGeneration: integer4("archive_capture_generation"),
+    archiveCaptureGeneration: integer5("archive_capture_generation"),
     archiveCaptureStartedAt: timestamp5("archive_capture_started_at", {
       withTimezone: true
     }),
@@ -4122,12 +4615,12 @@ var sandboxLeases = pgTable5(
     // The group box-envelope (the "envelope split" Critical): the small recovery
     // descriptor to resume()-by-id the group's box without a per-session join.
     resumeBackendId: text5("resume_backend_id"),
-    resumeState: jsonb4("resume_state").$type(),
+    resumeState: jsonb5("resume_state").$type(),
     // Warm-time billing cursor: last_meter_at = accrual cursor; last_meter_tick =
     // idempotency tick (warm_seconds accrued idempotent on
     // (sandbox_group_id, lease_epoch, last_meter_tick) in P2.1).
     lastMeterAt: timestamp5("last_meter_at", { withTimezone: true }),
-    lastMeterTick: integer4("last_meter_tick").notNull().default(0),
+    lastMeterTick: integer5("last_meter_tick").notNull().default(0),
     providerCreatedAt: timestamp5("provider_created_at", { withTimezone: true }),
     providerDeadlineAt: timestamp5("provider_deadline_at", {
       withTimezone: true
@@ -4221,9 +4714,7 @@ var sandboxLeaseHolders = pgTable5(
     accountId: uuid5("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     leaseId: uuid5("lease_id").notNull().references(() => sandboxLeases.id, { onDelete: "cascade" }),
-    kind: text5("kind", {
-      enum: ["turn", "viewer", "direct", "process"]
-    }).notNull(),
+    kind: text5("kind", { enum: ["turn", "viewer", "direct", "process"] }).notNull(),
     holderId: text5("holder_id").notNull(),
     // The attributing session within the (possibly shared) group.
     subjectId: uuid5("subject_id"),
@@ -4256,20 +4747,18 @@ var sandboxWorkspaceMutationAdmissions = pgTable5(
     leaseId: uuid5("lease_id").notNull().references(() => sandboxLeases.id, { onDelete: "cascade" }),
     sandboxGroupId: uuid5("sandbox_group_id").notNull(),
     sessionId: uuid5("session_id").notNull(),
-    actorKind: text5("actor_kind", {
-      enum: sandboxWorkspaceMutationActorKindValues
-    }).notNull(),
+    actorKind: text5("actor_kind", { enum: sandboxWorkspaceMutationActorKindValues }).notNull(),
     actorId: uuid5("actor_id").notNull(),
     // Exact turn authority is present only for actor_kind='turn'. Direct HTTP
     // requests and retained processes never invent a turn or quiescence owner.
     turnId: uuid5("turn_id"),
     attemptId: uuid5("attempt_id"),
-    executionGeneration: integer4("execution_generation"),
+    executionGeneration: integer5("execution_generation"),
     holderKind: text5("holder_kind", {
       enum: sandboxWorkspaceMutationHolderKindValues
     }).notNull(),
     holderId: text5("holder_id").notNull(),
-    leaseEpoch: integer4("lease_epoch").notNull(),
+    leaseEpoch: integer5("lease_epoch").notNull(),
     providerBackend: text5("provider_backend").notNull(),
     providerInstanceId: text5("provider_instance_id").notNull(),
     routeKind: text5("route_kind", { enum: ["home", "active"] }).notNull(),
@@ -4277,8 +4766,8 @@ var sandboxWorkspaceMutationAdmissions = pgTable5(
     // target is pinned together with the active pointer epoch observed when the
     // operation was admitted.
     routeTargetId: uuid5("route_target_id"),
-    routeEpoch: integer4("route_epoch").notNull(),
-    workspaceGeneration: integer4("workspace_generation").notNull(),
+    routeEpoch: integer5("route_epoch").notNull(),
+    workspaceGeneration: integer5("workspace_generation").notNull(),
     operation: text5("operation").notNull(),
     providerOutcome: text5("provider_outcome", {
       enum: ["resolved", "rejected", "retained"]
@@ -4396,27 +4885,25 @@ var sandboxRetainedProcesses = pgTable5(
     sandboxGroupId: uuid5("sandbox_group_id").notNull(),
     parentAdmissionId: uuid5("parent_admission_id").notNull(),
     holderId: text5("holder_id").notNull(),
-    ownerActorKind: text5("owner_actor_kind", {
-      enum: ["turn", "direct"]
-    }).notNull(),
+    ownerActorKind: text5("owner_actor_kind", { enum: ["turn", "direct"] }).notNull(),
     ownerActorId: uuid5("owner_actor_id").notNull(),
     ownerTurnId: uuid5("owner_turn_id"),
     ownerAttemptId: uuid5("owner_attempt_id"),
-    ownerExecutionGeneration: integer4("owner_execution_generation"),
-    leaseEpoch: integer4("lease_epoch").notNull(),
+    ownerExecutionGeneration: integer5("owner_execution_generation"),
+    leaseEpoch: integer5("lease_epoch").notNull(),
     providerBackend: text5("provider_backend").notNull(),
     providerInstanceId: text5("provider_instance_id").notNull(),
     // Provider object ids are namespace-scoped. New Modal processes bind the
     // exact authenticated workspace before execution; legacy rows remain null
     // until a positive lookup proves which namespace owns the historical box.
     providerBindingKey: text5("provider_binding_key"),
-    providerBinding: jsonb4("provider_binding").$type(),
+    providerBinding: jsonb5("provider_binding").$type(),
     routeKind: text5("route_kind", { enum: ["home", "active"] }).notNull(),
     routeTargetId: uuid5("route_target_id"),
-    routeEpoch: integer4("route_epoch").notNull(),
-    providerSessionId: integer4("provider_session_id").notNull(),
+    routeEpoch: integer5("route_epoch").notNull(),
+    providerSessionId: integer5("provider_session_id").notNull(),
     state: text5("state", { enum: sandboxRetainedProcessStateValues }).notNull().default("active"),
-    exitCode: integer4("exit_code"),
+    exitCode: integer5("exit_code"),
     settlementReason: text5("settlement_reason"),
     startedAt: timestamp5("started_at", { withTimezone: true }).notNull().defaultNow(),
     settledAt: timestamp5("settled_at", { withTimezone: true }),
@@ -4426,19 +4913,13 @@ var sandboxRetainedProcesses = pgTable5(
     // never exit/loss proof.
     reconcileAfter: timestamp5("reconcile_after", { withTimezone: true }).notNull().defaultNow(),
     reconcileClaimId: uuid5("reconcile_claim_id"),
-    reconcileClaimedAt: timestamp5("reconcile_claimed_at", {
-      withTimezone: true
-    }),
-    reconcileAttempts: integer4("reconcile_attempts").notNull().default(0),
+    reconcileClaimedAt: timestamp5("reconcile_claimed_at", { withTimezone: true }),
+    reconcileAttempts: integer5("reconcile_attempts").notNull().default(0),
     lastReconcileOutcome: text5("last_reconcile_outcome"),
-    reconcileProofOutcome: text5("reconcile_proof_outcome", {
-      enum: ["exited", "lost"]
-    }),
-    reconcileProofExitCode: integer4("reconcile_proof_exit_code"),
+    reconcileProofOutcome: text5("reconcile_proof_outcome", { enum: ["exited", "lost"] }),
+    reconcileProofExitCode: integer5("reconcile_proof_exit_code"),
     reconcileProofReason: text5("reconcile_proof_reason"),
-    reconcileProofObservedAt: timestamp5("reconcile_proof_observed_at", {
-      withTimezone: true
-    })
+    reconcileProofObservedAt: timestamp5("reconcile_proof_observed_at", { withTimezone: true })
   },
   (table) => ({
     workspaceAccount: foreignKey({
@@ -4614,8 +5095,8 @@ var sessionRecordings = pgTable5(
     storageKey: text5("storage_key"),
     sizeBytes: bigint4("size_bytes", { mode: "number" }),
     durationSeconds: numeric("duration_seconds").$type(),
-    width: integer4("width").notNull(),
-    height: integer4("height").notNull(),
+    width: integer5("width").notNull(),
+    height: integer5("height").notNull(),
     reason: text5("reason"),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     finalizedAt: timestamp5("finalized_at", { withTimezone: true })
@@ -4639,7 +5120,7 @@ var workspaceCaptures = pgTable5(
       onDelete: "set null"
     }),
     revision: bigint4("revision", { mode: "number" }).notNull(),
-    leaseEpoch: integer4("lease_epoch").notNull(),
+    leaseEpoch: integer5("lease_epoch").notNull(),
     // 'available' on a committed capture. 'failed' reserved for a future two-phase
     // write; the current synchronous capture only ever inserts 'available'.
     state: text5("state", { enum: ["available", "failed"] }).notNull().default("available"),
@@ -4649,9 +5130,9 @@ var workspaceCaptures = pgTable5(
     // or sign it independently of the (usually small) manifest metadata.
     treeIndexKey: text5("tree_index_key"),
     // Content-addressed after-image blob keys this revision references (GC input).
-    blobKeys: jsonb4("blob_keys").$type().notNull().default([]),
+    blobKeys: jsonb5("blob_keys").$type().notNull().default([]),
     sizeBytes: bigint4("size_bytes", { mode: "number" }),
-    stats: jsonb4("stats").$type().notNull().default({}),
+    stats: jsonb5("stats").$type().notNull().default({}),
     capturedAt: timestamp5("captured_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -4679,15 +5160,15 @@ var sandboxPtySessions = pgTable5(
     retainedProcessId: uuid5("retained_process_id"),
     openAdmissionId: uuid5("open_admission_id"),
     // Copied provider locator for the adopted retained process.
-    execSessionId: integer4("exec_session_id"),
-    leaseEpoch: integer4("lease_epoch").notNull(),
+    execSessionId: integer5("exec_session_id"),
+    leaseEpoch: integer5("lease_epoch").notNull(),
     providerBackend: text5("provider_backend"),
     providerInstanceId: text5("provider_instance_id"),
     routeKind: text5("route_kind", { enum: ["home", "active"] }),
     routeTargetId: uuid5("route_target_id"),
-    routeEpoch: integer4("route_epoch"),
-    cols: integer4("cols").notNull(),
-    rows: integer4("rows").notNull(),
+    routeEpoch: integer5("route_epoch"),
+    cols: integer5("cols").notNull(),
+    rows: integer5("rows").notNull(),
     shell: text5("shell").notNull(),
     cwd: text5("cwd").notNull(),
     status: text5("status").notNull().default("open"),
@@ -4943,15 +5424,15 @@ var scheduledTasks = pgTable5(
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     name: text5("name").notNull(),
     status: text5("status").notNull().default("active"),
-    schedule: jsonb4("schedule").$type().notNull(),
+    schedule: jsonb5("schedule").$type().notNull(),
     temporalScheduleId: text5("temporal_schedule_id").notNull(),
     runMode: text5("run_mode").notNull().default("new_session_per_run"),
     overlapPolicy: text5("overlap_policy").notNull().default("allow_concurrent"),
-    agentConfig: jsonb4("agent_config").$type().notNull(),
+    agentConfig: jsonb5("agent_config").$type().notNull(),
     createdByKind: text5("created_by_kind").notNull().default("service"),
     createdBySubjectId: text5("created_by_subject_id").notNull().default("unattributed-legacy"),
-    createdByContext: jsonb4("created_by_context").$type().notNull().default({ backfill: true }),
-    personalConnectionDelegations: jsonb4("personal_connection_delegations").$type().notNull().default([]),
+    createdByContext: jsonb5("created_by_context").$type().notNull().default({ backfill: true }),
+    personalConnectionDelegations: jsonb5("personal_connection_delegations").$type().notNull().default([]),
     reusableSessionId: uuid5("reusable_session_id").references(() => sessions.id, {
       onDelete: "set null"
     }),
@@ -4962,7 +5443,7 @@ var scheduledTasks = pgTable5(
     // (migration 0047). NULL ⇒ no rig. FK (-> rigs(id) ON DELETE SET NULL) lives
     // in migration 0047 (forward-reference pattern). Consumed in M3.
     rigId: uuid5("rig_id"),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -5019,7 +5500,7 @@ var githubInstallations = pgTable5(
     id: uuid5("id").primaryKey().defaultRandom(),
     accountId: uuid5("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    installationId: integer4("installation_id").notNull(),
+    installationId: integer5("installation_id").notNull(),
     githubAccountId: bigint4("github_account_id", { mode: "number" }),
     accountLogin: text5("account_login"),
     accountType: text5("account_type"),
@@ -5028,12 +5509,8 @@ var githubInstallations = pgTable5(
     githubActorId: bigint4("github_actor_id", { mode: "number" }),
     githubActorLogin: text5("github_actor_login"),
     authorityKind: text5("authority_kind"),
-    authorityCheckedAt: timestamp5("authority_checked_at", {
-      withTimezone: true
-    }),
-    authorityExpiresAt: timestamp5("authority_expires_at", {
-      withTimezone: true
-    }),
+    authorityCheckedAt: timestamp5("authority_checked_at", { withTimezone: true }),
+    authorityExpiresAt: timestamp5("authority_expires_at", { withTimezone: true }),
     authorityNonce: text5("authority_nonce"),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -5104,7 +5581,7 @@ var githubInstallationRepositories = pgTable5(
     id: uuid5("id").primaryKey().defaultRandom(),
     accountId: uuid5("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    installationId: integer4("installation_id").notNull(),
+    installationId: integer5("installation_id").notNull(),
     repositoryId: bigint4("repository_id", { mode: "number" }).notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -5151,7 +5628,7 @@ var usageEvents = pgTable5(
     turnAttemptId: uuid5("turn_attempt_id"),
     initiatorKind: text5("initiator_kind"),
     initiatorSubjectId: text5("initiator_subject_id"),
-    initiatorContext: jsonb4("initiator_context").$type().notNull().default({}),
+    initiatorContext: jsonb5("initiator_context").$type().notNull().default({}),
     origin: text5("origin"),
     idempotencyKey: text5("idempotency_key").notNull(),
     occurredAt: timestamp5("occurred_at", { withTimezone: true }).notNull(),
@@ -5290,7 +5767,7 @@ var modelCallFacts = pgTable5(
 var hostExportConfig = pgTable5(
   "host_export_config",
   {
-    id: integer4("id").primaryKey().default(1),
+    id: integer5("id").primaryKey().default(1),
     sessionEventsEnabled: boolean3("session_events_enabled").notNull().default(false),
     usageEventsEnabled: boolean3("usage_events_enabled").notNull().default(false),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -5311,24 +5788,22 @@ var hostExportOutbox = pgTable5(
     sessionId: uuid5("session_id"),
     rootSessionId: uuid5("root_session_id"),
     turnId: uuid5("turn_id"),
-    turnGeneration: integer4("turn_generation"),
+    turnGeneration: integer5("turn_generation"),
     turnAttemptId: uuid5("turn_attempt_id"),
-    sessionSequence: integer4("session_sequence"),
+    sessionSequence: integer5("session_sequence"),
     clientEventId: text5("client_event_id"),
     turnAssociation: text5("turn_association"),
     duplicateOfEventId: uuid5("duplicate_of_event_id"),
     duplicateReason: text5("duplicate_reason"),
     eventType: text5("event_type").notNull(),
     idempotencyKey: text5("idempotency_key").notNull(),
-    initiator: jsonb4("initiator").$type(),
-    initiatorContext: jsonb4("initiator_context").$type().notNull().default({}),
+    initiator: jsonb5("initiator").$type(),
+    initiatorContext: jsonb5("initiator_context").$type().notNull().default({}),
     origin: text5("origin"),
-    payload: jsonb4("payload").$type().notNull(),
-    envelopeBytes: integer4("envelope_bytes").notNull(),
+    payload: jsonb5("payload").$type().notNull(),
+    envelopeBytes: integer5("envelope_bytes").notNull(),
     occurredAt: timestamp5("occurred_at", { withTimezone: true }).notNull(),
-    sourceRecordedAt: timestamp5("source_recorded_at", {
-      withTimezone: true
-    }).notNull(),
+    sourceRecordedAt: timestamp5("source_recorded_at", { withTimezone: true }).notNull(),
     enqueuedAt: timestamp5("enqueued_at", { withTimezone: true }).notNull()
   },
   (table) => ({
@@ -5389,7 +5864,7 @@ var hostExportConsumers = pgTable5(
     leaseExpiresAt: timestamp5("lease_expires_at", { withTimezone: true }),
     leaseFrom: bigint4("lease_from", { mode: "bigint" }),
     leaseThrough: bigint4("lease_through", { mode: "bigint" }),
-    consecutiveFailures: integer4("consecutive_failures").notNull().default(0),
+    consecutiveFailures: integer5("consecutive_failures").notNull().default(0),
     nextAttemptAt: timestamp5("next_attempt_at", { withTimezone: true }).notNull().defaultNow(),
     lastError: text5("last_error"),
     lastErrorAt: timestamp5("last_error_at", { withTimezone: true }),
@@ -5423,7 +5898,7 @@ var hostExportDeadLetters = pgTable5(
     exportCursor: bigint4("export_cursor", { mode: "bigint" }).notNull(),
     sourceId: uuid5("source_id").notNull(),
     reason: text5("reason").notNull(),
-    envelope: jsonb4("envelope").$type().notNull(),
+    envelope: jsonb5("envelope").$type().notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -5460,7 +5935,7 @@ var creditLedgerEntries = pgTable5(
     sourceType: text5("source_type"),
     sourceId: text5("source_id"),
     idempotencyKey: text5("idempotency_key").notNull(),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     occurredAt: timestamp5("occurred_at", { withTimezone: true }).notNull().defaultNow(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -5498,7 +5973,7 @@ var stripeWebhookEvents = pgTable5("stripe_webhook_events", {
   id: text5("id").primaryKey(),
   type: text5("type").notNull(),
   livemode: text5("livemode").notNull().default("false"),
-  payload: jsonb4("payload").$type().notNull(),
+  payload: jsonb5("payload").$type().notNull(),
   processedAt: timestamp5("processed_at", { withTimezone: true }),
   createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
 });
@@ -5516,7 +5991,7 @@ var auditEvents = pgTable5(
     action: text5("action").notNull(),
     targetType: text5("target_type"),
     targetId: text5("target_id"),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     occurredAt: timestamp5("occurred_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -5535,7 +6010,7 @@ var packInstallations = pgTable5(
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     packId: text5("pack_id").notNull(),
     status: text5("status").notNull().default("active"),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     enabledAt: timestamp5("enabled_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -5554,7 +6029,7 @@ var workspacePacks = pgTable5(
     accountId: uuid5("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     packId: text5("pack_id").notNull(),
-    manifest: jsonb4("manifest").$type().notNull(),
+    manifest: jsonb5("manifest").$type().notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -5573,12 +6048,12 @@ var importBatches = pgTable5(
     snapshotDate: timestamp5("snapshot_date", { withTimezone: true }).notNull(),
     snapshotRef: text5("snapshot_ref"),
     attributionNote: text5("attribution_note").notNull(),
-    importedCount: integer4("imported_count").notNull().default(0),
-    skippedCount: integer4("skipped_count").notNull().default(0),
-    quarantinedCount: integer4("quarantined_count").notNull().default(0),
-    logoFailureCount: integer4("logo_failure_count").notNull().default(0),
-    staleCount: integer4("stale_count").notNull().default(0),
-    details: jsonb4("details").$type().notNull().default({}),
+    importedCount: integer5("imported_count").notNull().default(0),
+    skippedCount: integer5("skipped_count").notNull().default(0),
+    quarantinedCount: integer5("quarantined_count").notNull().default(0),
+    logoFailureCount: integer5("logo_failure_count").notNull().default(0),
+    staleCount: integer5("stale_count").notNull().default(0),
+    details: jsonb5("details").$type().notNull().default({}),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -5605,7 +6080,7 @@ var capabilityCatalogItems = pgTable5(
     name: text5("name").notNull(),
     description: text5("description"),
     category: text5("category").notNull().default("custom"),
-    tags: jsonb4("tags").$type().notNull().default([]),
+    tags: jsonb5("tags").$type().notNull().default([]),
     homepageUrl: text5("homepage_url"),
     endpointUrl: text5("endpoint_url"),
     installUrl: text5("install_url"),
@@ -5615,7 +6090,7 @@ var capabilityCatalogItems = pgTable5(
     transport: text5("transport"),
     mcpUrl: text5("mcp_url"),
     authKind: text5("auth_kind"),
-    credentialFacts: jsonb4("credential_facts").$type().notNull().default([]),
+    credentialFacts: jsonb5("credential_facts").$type().notNull().default([]),
     tier: text5("tier"),
     provenance: text5("provenance"),
     logoAssetPath: text5("logo_asset_path"),
@@ -5624,7 +6099,7 @@ var capabilityCatalogItems = pgTable5(
     }),
     stale: boolean3("stale").notNull().default(false),
     staleAt: timestamp5("stale_at", { withTimezone: true }),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -5662,8 +6137,8 @@ var capabilityInstallations = pgTable5(
     capabilityId: text5("capability_id").notNull(),
     kind: text5("kind").notNull(),
     status: text5("status").notNull().default("active"),
-    config: jsonb4("config").$type().notNull().default({}),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    config: jsonb5("config").$type().notNull().default({}),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     enabledAt: timestamp5("enabled_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -5690,14 +6165,14 @@ var socialConnections = pgTable5(
     accountName: text5("account_name"),
     externalAccountId: text5("external_account_id"),
     status: text5("status").notNull().default("connected"),
-    scopes: jsonb4("scopes").$type().notNull().default([]),
+    scopes: jsonb5("scopes").$type().notNull().default([]),
     credentialRef: text5("credential_ref"),
     // AES-256-GCM envelope (environment-crypto v1 format) holding the OAuth
     // token bundle. Never exposed through contracts or MCP tools; only the
     // host-side social API client decrypts it.
     credentialEncrypted: text5("credential_encrypted"),
-    tokenMetadata: jsonb4("token_metadata").$type().notNull().default({}),
-    metadata: jsonb4("metadata").$type().notNull().default({}),
+    tokenMetadata: jsonb5("token_metadata").$type().notNull().default({}),
+    metadata: jsonb5("metadata").$type().notNull().default({}),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -5727,8 +6202,8 @@ var socialPosts = pgTable5(
     authorHandle: text5("author_handle"),
     text: text5("text").notNull(),
     publishedAt: timestamp5("published_at", { withTimezone: true }).notNull(),
-    metrics: jsonb4("metrics").$type().notNull().default({}),
-    raw: jsonb4("raw").$type().notNull().default({}),
+    metrics: jsonb5("metrics").$type().notNull().default({}),
+    raw: jsonb5("raw").$type().notNull().default({}),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -5774,15 +6249,15 @@ var rigVersions = pgTable5(
     accountId: uuid5("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid5("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     rigId: uuid5("rig_id").notNull().references(() => rigs.id, { onDelete: "cascade" }),
-    version: integer4("version").notNull(),
+    version: integer5("version").notNull(),
     image: text5("image"),
     setupScript: text5("setup_script"),
     // Self-declared health checks: [{ name, command }].
-    checks: jsonb4("checks").$type().notNull().default([]),
+    checks: jsonb5("checks").$type().notNull().default([]),
     // Registered credential-hook names (resolved to hook implementations in M3).
-    credentialHooks: jsonb4("credential_hooks").$type().notNull().default([]),
+    credentialHooks: jsonb5("credential_hooks").$type().notNull().default([]),
     // Variable-set ids layered below the session's variable set at run time (M3).
-    defaultVariableSetIds: jsonb4("default_variable_set_ids").$type().notNull().default([]),
+    defaultVariableSetIds: jsonb5("default_variable_set_ids").$type().notNull().default([]),
     changelog: text5("changelog"),
     createdBy: text5("created_by"),
     active: boolean3("active").notNull().default(false),
@@ -5811,11 +6286,11 @@ var rigChanges = pgTable5(
     }),
     // 'setup_append' | 'definition_edit' (CHECK in migration 0047).
     kind: text5("kind").notNull(),
-    payload: jsonb4("payload").$type().notNull(),
+    payload: jsonb5("payload").$type().notNull(),
     // 'proposed' | 'verifying' | 'merged' | 'rejected' | 'failed' (CHECK in 0047).
     status: text5("status").notNull().default("proposed"),
     proposedBy: text5("proposed_by"),
-    verification: jsonb4("verification").$type(),
+    verification: jsonb5("verification").$type(),
     resultVersionId: uuid5("result_version_id").references(() => rigVersions.id, {
       onDelete: "set null"
     }),
@@ -5836,6 +6311,7 @@ export {
   workspaceInstructionPolicyRevisions,
   workspaceInstructionPolicyHeads,
   workspaceInstructionPolicyActivationEvents,
+  workspaceInstructionPolicySnapshots,
   preferenceRegistryPreferences,
   preferenceRegistryRevisions,
   preferenceRegistryEvents,
@@ -5873,6 +6349,7 @@ export {
   codexSubscriptionCredentials,
   codexResetRedemptionAttempts,
   connections,
+  connectionDisconnectOperations,
   connectorActionPolicies,
   slackBotUserLinks,
   slackInteractionInbox,
@@ -5886,6 +6363,9 @@ export {
   workspaceModelPolicies,
   codexCredentialLeases,
   sessions,
+  sessionRealtimeModes,
+  sessionRealtimeConnections,
+  sessionRealtimeEntries,
   sessionSpawnDenials,
   sessionPins,
   sessionListSnapshots,
@@ -5897,6 +6377,7 @@ export {
   documentChunks,
   knowledgeMemories,
   sessionTurns,
+  sessionRealtimeContextProjections,
   sessionTurnAttempts,
   connectorActionRequests,
   sessionCommandReceipts,
@@ -5968,4 +6449,4 @@ export {
   rigChanges,
   schema_exports
 };
-//# sourceMappingURL=chunk-CYGFLLMN.js.map
+//# sourceMappingURL=chunk-7WTDI7Y3.js.map