@opengeni/db 0.27.9 → 0.28.1

package/drizzle/0172_retire_model_visible_github_token.sql

@@ -0,0 +1,86 @@
+-- deployment-mode: maintenance
+-- GitHub App installation credentials are host-owned run material. Retire the
+-- model-visible github_token MCP tool from every durable session selection and
+-- prevent an old writer from reintroducing it after the coordinated cutover.
+
+UPDATE "sessions"
+SET "first_party_mcp_tools" = "first_party_mcp_tools" - 'github_token'
+WHERE "first_party_mcp_tools" ? 'github_token';
+
+ALTER TABLE "sessions"
+  ALTER COLUMN "first_party_mcp_tools"
+  SET DEFAULT '[
+    "set_session_title",
+    "goal_set",
+    "goal_update",
+    "goal_complete",
+    "goal_pause",
+    "memory_search",
+    "memory_save",
+    "memory_correct",
+    "preference_registry_summary",
+    "preference_registry_get",
+    "sandboxes_list",
+    "sandbox_attach",
+    "sandbox_swap",
+    "run_on",
+    "sandbox_provision",
+    "rig_list",
+    "rig_get",
+    "rig_propose_change",
+    "rig_verify",
+    "rig_promote",
+    "sessions_list",
+    "session_get",
+    "session_events",
+    "session_create",
+    "session_send_message",
+    "session_pause",
+    "session_resume",
+    "session_steer",
+    "set_other_session_title",
+    "variable_set_list",
+    "environment_list",
+    "variable_set_set_variable",
+    "environment_set_variable",
+    "github_connect_link",
+    "github_repositories_list",
+    "social_connections_list",
+    "social_posts_recent",
+    "social_daily_analysis_context",
+    "social_search_live",
+    "social_mentions_live",
+    "social_thread_fetch",
+    "social_posts_sync",
+    "social_post_reply",
+    "scheduled_tasks_list",
+    "scheduled_tasks_get",
+    "scheduled_tasks_create",
+    "scheduled_tasks_update",
+    "scheduled_tasks_pause",
+    "scheduled_tasks_resume",
+    "scheduled_tasks_trigger",
+    "scheduled_tasks_delete",
+    "scheduled_task_runs_list",
+    "slack_bot_list_channels",
+    "slack_bot_channel_history",
+    "slack_bot_thread_replies",
+    "slack_bot_list_users",
+    "slack_bot_list_files",
+    "slack_bot_file_info",
+    "slack_bot_file_content",
+    "slack_bot_post_message",
+    "slack_bot_delete_message",
+    "artifacts_list",
+    "artifacts_get_source",
+    "artifacts_create",
+    "artifacts_publish",
+    "artifacts_rollback"
+  ]'::jsonb;
+
+ALTER TABLE "sessions"
+  DROP CONSTRAINT IF EXISTS "sessions_first_party_mcp_tools_no_model_credentials_chk";
+
+ALTER TABLE "sessions"
+  ADD CONSTRAINT "sessions_first_party_mcp_tools_no_model_credentials_chk"
+  CHECK (NOT ("first_party_mcp_tools" @> '["github_token"]'::jsonb));

package/drizzle/0173_codex_auth_boundaries.sql

@@ -0,0 +1,107 @@
+-- deployment-mode: maintenance
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '10min';
+
+-- Reject mixed-version writers before locking, then repeat after the locks to
+-- close the connect-before-lock race. The deployment must keep API and workers
+-- stopped until the new application version is active.
+DO $codex_boundaries_writer_drain_before_lock$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app')
+    AND EXISTS (
+      SELECT 1
+      FROM pg_stat_activity
+      WHERE datname = current_database()
+        AND usename = 'opengeni_app'
+        AND pid <> pg_backend_pid()
+    )
+  THEN
+    RAISE EXCEPTION
+      'Codex authentication boundaries activation requires all opengeni_app sessions to be stopped'
+      USING ERRCODE = '55000';
+  END IF;
+END
+$codex_boundaries_writer_drain_before_lock$;
+
+LOCK TABLE "codex_subscription_credentials" IN ACCESS EXCLUSIVE MODE;
+LOCK TABLE "session_history_items" IN ACCESS EXCLUSIVE MODE;
+LOCK TABLE "agent_run_states" IN ACCESS EXCLUSIVE MODE;
+
+DO $codex_boundaries_writer_drain_after_lock$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app')
+    AND EXISTS (
+      SELECT 1
+      FROM pg_stat_activity
+      WHERE datname = current_database()
+        AND usename = 'opengeni_app'
+        AND pid <> pg_backend_pid()
+    )
+  THEN
+    RAISE EXCEPTION
+      'Codex authentication boundaries activation requires all opengeni_app sessions to be stopped'
+      USING ERRCODE = '55000';
+  END IF;
+END
+$codex_boundaries_writer_drain_after_lock$;
+
+-- One optional workspace credential for ChatGPT connected Apps. This pointer is
+-- intentionally separate from inference rotation and starts unset.
+CREATE UNIQUE INDEX "codex_subscription_credentials_workspace_account_id_idx"
+  ON "codex_subscription_credentials" ("workspace_id", "account_id", "id");
+
+CREATE TABLE "codex_apps_settings" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "credential_id" uuid,
+  "version" integer NOT NULL DEFAULT 1,
+  "designated_at" timestamptz,
+  "updated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "codex_apps_settings_workspace_account_fk"
+    FOREIGN KEY ("workspace_id", "account_id")
+    REFERENCES "workspaces"("id", "account_id") ON DELETE CASCADE,
+  CONSTRAINT "codex_apps_settings_credential_scope_fk"
+    FOREIGN KEY ("workspace_id", "account_id", "credential_id")
+    REFERENCES "codex_subscription_credentials"("workspace_id", "account_id", "id")
+    ON DELETE CASCADE,
+  CONSTRAINT "codex_apps_settings_designation_shape_chk" CHECK (
+    "version" > 0 AND (
+      ("credential_id" IS NULL AND "designated_at" IS NULL)
+      OR
+      ("credential_id" IS NOT NULL AND "designated_at" IS NOT NULL)
+    )
+  )
+);
+
+CREATE UNIQUE INDEX "codex_apps_settings_workspace_idx"
+  ON "codex_apps_settings" ("workspace_id");
+
+ALTER TABLE "codex_apps_settings" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "codex_apps_settings" FORCE ROW LEVEL SECURITY;
+CREATE POLICY workspace_isolation ON "codex_apps_settings"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+-- Remove the false credential/history relation and the obsolete
+-- connector-aware inference cache. Provider rejection receipts remain.
+ALTER TABLE "session_history_items"
+  DROP COLUMN "producer_codex_credential_id";
+ALTER TABLE "agent_run_states"
+  DROP COLUMN "frozen_codex_credential_id";
+ALTER TABLE "codex_subscription_credentials"
+  DROP COLUMN "connector_namespaces",
+  DROP COLUMN "connectors_checked_at";
+
+DO $$
+DECLARE
+  target_schema text := current_schema();
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON TABLE %I.codex_apps_settings TO opengeni_app',
+      target_schema
+    );
+  END IF;
+END $$;

package/drizzle/0174_session_wake_live_interruption.sql

@@ -0,0 +1,80 @@
+-- deployment-mode: rolling
+-- Historical, fully quiesced interruptions are audit evidence, not live control work.
+
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+DROP FUNCTION opengeni_private.claim_session_workflow_wakes(integer);
+
+DO $migration$
+DECLARE target_schema text := current_schema();
+BEGIN
+  EXECUTE format($create$
+    CREATE FUNCTION opengeni_private.claim_session_workflow_wakes(p_limit integer)
+    RETURNS TABLE (
+      account_id uuid,
+      workspace_id uuid,
+      session_id uuid,
+      temporal_workflow_id text,
+      wake_revision bigint,
+      interruption_requested boolean
+    )
+    LANGUAGE plpgsql
+    SECURITY DEFINER
+    SET search_path = pg_catalog
+    AS $function$
+    BEGIN
+      RETURN QUERY
+        WITH due AS (
+          SELECT o.session_id
+          FROM %1$I.session_workflow_wake_outbox o
+          WHERE o.wake_revision > o.delivered_revision
+            AND o.next_attempt_at <= now()
+          ORDER BY o.next_attempt_at, o.updated_at, o.session_id
+          FOR UPDATE SKIP LOCKED
+          LIMIT greatest(1, least(coalesce(p_limit, 100), 1000))
+        )
+        UPDATE %1$I.session_workflow_wake_outbox o
+        SET attempts = o.attempts + 1,
+            next_attempt_at = now() + make_interval(
+              secs => least(300, greatest(1, power(2, least(o.attempts, 8))::integer))
+            ),
+            updated_at = now()
+        FROM due
+        WHERE o.session_id = due.session_id
+        RETURNING o.account_id, o.workspace_id, o.session_id,
+          o.temporal_workflow_id, o.wake_revision,
+          o.control_revision > o.delivered_revision
+          OR EXISTS (
+            SELECT 1
+            FROM %1$I.session_attempt_interruptions interruption
+            JOIN %1$I.session_turn_attempts attempt
+              ON attempt.workspace_id = interruption.workspace_id
+             AND attempt.session_id = interruption.session_id
+             AND attempt.id = interruption.attempt_id
+            WHERE interruption.workspace_id = o.workspace_id
+              AND interruption.session_id = o.session_id
+              AND (
+                interruption.state IN ('pending', 'delivered', 'acknowledged')
+                OR (
+                  interruption.state IN ('settled', 'rejected_stale')
+                  AND attempt.quiesced_at IS NULL
+                )
+              )
+          ) AS interruption_requested;
+    END $function$;
+  $create$, target_schema);
+END $migration$;
+
+REVOKE ALL ON FUNCTION opengeni_private.claim_session_workflow_wakes(integer) FROM PUBLIC;
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT EXECUTE ON FUNCTION opengeni_private.claim_session_workflow_wakes(integer)
+      TO opengeni_app;
+  END IF;
+END $$;
+
+RESET statement_timeout;
+RESET lock_timeout;

package/drizzle/0175_resumable_transcription_provider_deadline.sql

@@ -0,0 +1,24 @@
+-- deployment-mode: rolling
+
+ALTER TABLE "transcription_recording_segments"
+  ADD COLUMN "attempt_deadline_at" timestamptz;
+
+-- Rows already in flight when this migration rolls out retain the original
+-- fifteen-minute reclaim fence. New attempts receive the shorter provider
+-- deadline from the API claim path.
+UPDATE "transcription_recording_segments"
+SET "attempt_deadline_at" = "attempt_started_at" + interval '10 minutes'
+WHERE "attempt_id" IS NOT NULL
+  AND "attempt_started_at" IS NOT NULL
+  AND "attempt_deadline_at" IS NULL;
+
+ALTER TABLE "transcription_recording_segments"
+  ADD CONSTRAINT "transcription_recording_segments_attempt_deadline_check"
+  CHECK (
+    ("attempt_id" IS NULL AND "attempt_started_at" IS NULL AND "attempt_deadline_at" IS NULL)
+    OR (
+      "attempt_id" IS NOT NULL
+      AND "attempt_started_at" IS NOT NULL
+      AND "attempt_deadline_at" IS NOT NULL
+    )
+  );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/db",
-  "version": "0.27.9",
+  "version": "0.28.1",
   "description": "OpenGeni persistence: Drizzle schema, RLS-scoped query layer, the SQL migration runner, and role provisioning.",
   "license": "Apache-2.0",
   "repository": {
@@ -50,9 +50,9 @@
     "prepublishOnly": "bash ../../scripts/prepublish-guard"
   },
   "dependencies": {
-    "@opengeni/codex": "^0.2.10",
-    "@opengeni/config": "^0.10.12",
-    "@opengeni/contracts": "^0.38.2",
+    "@opengeni/codex": "^0.2.11",
+    "@opengeni/config": "^0.11.0",
+    "@opengeni/contracts": "^0.39.0",
     "@opengeni/network": "^0.2.0",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.7"