@opengeni/db 0.28.1 → 0.28.9

package/dist/{chunk-HT5T62CC.js → chunk-P6CUHXQZ.js}

@@ -65,6 +65,8 @@ __export(schema_exports, {
   knowledgeSyncRuns: () => knowledgeSyncRuns,
   machineMetricsLatest: () => machineMetricsLatest,
   machineMetricsSeries: () => machineMetricsSeries,
+  machineRemovalOperationOutcomeValues: () => machineRemovalOperationOutcomeValues,
+  machineRemovalOperations: () => machineRemovalOperations,
   managedAccounts: () => managedAccounts,
   modelCallFacts: () => modelCallFacts,
   nestedAgentDepthConfiguration: () => nestedAgentDepthConfiguration,
@@ -74,6 +76,7 @@ __export(schema_exports, {
   preferenceRegistryPreferences: () => preferenceRegistryPreferences,
   preferenceRegistryRevisions: () => preferenceRegistryRevisions,
   preferenceRegistrySnapshots: () => preferenceRegistrySnapshots,
+  retainedScreenshotArtifacts: () => retainedScreenshotArtifacts,
   rigChanges: () => rigChanges,
   rigVersions: () => rigVersions,
   rigs: () => rigs,
@@ -150,6 +153,7 @@ __export(schema_exports, {
   workspaceMemberships: () => workspaceMemberships,
   workspaceModelPolicies: () => workspaceModelPolicies,
   workspacePacks: () => workspacePacks,
+  workspaceScreenshotQuotas: () => workspaceScreenshotQuotas,
   workspaceSessionActivityRevisions: () => workspaceSessionActivityRevisions,
   workspaceVariableSetVariables: () => workspaceVariableSetVariables,
   workspaceVariableSets: () => workspaceVariableSets,
@@ -160,26 +164,280 @@ import {
   bigint as bigint4,
   boolean as boolean4,
   check as check5,
+  customType as customType2,
   foreignKey,
   index as index6,
-  integer as integer6,
+  integer as integer7,
   jsonb as jsonb6,
   numeric,
   pgTable as pgTable6,
   text as text6,
   timestamp as timestamp6,
   uniqueIndex as uniqueIndex6,
-  uuid as uuid6,
-  customType
+  uuid as uuid6
 } from "drizzle-orm/pg-core";
 
+// src/lossless-columns.ts
+import { customType, integer } from "drizzle-orm/pg-core";
+
+// src/lossless-json.ts
+var JSON_STRING_PREFIX = "opengeni_lossless_json_string_v2_81f06e15:";
+var JSON_KEY_PREFIX = "opengeni_lossless_json_key_v2_7ca6071d:";
+var TEXT_PREFIX = "opengeni_lossless_text_v2_c4100a62:";
+var MAX_JSON_DEPTH = 512;
+var LOSSLESS_CONTENT_CODEC_VERSION = 1;
+var LOSSLESS_CONTENT_WRITER_APPLICATION_NAME = "opengeni-lossless-v1";
+function withLosslessContentWriteVersion(value, contentKey, versionKey) {
+  const stamp = (entry) => {
+    if (!Object.hasOwn(entry, contentKey)) {
+      throw new Error(`Lossless content write omitted ${contentKey}`);
+    }
+    return { ...entry, [versionKey]: LOSSLESS_CONTENT_CODEC_VERSION };
+  };
+  return Array.isArray(value) ? value.map(stamp) : stamp(value);
+}
+var LOSSLESS_TEXT_PREFIX = TEXT_PREFIX;
+var UnsupportedCanonicalValueError = class extends TypeError {
+  name = "UnsupportedCanonicalValueError";
+};
+function toPostgresLosslessJson(value) {
+  return encodeJsonValue(value, /* @__PURE__ */ new Set(), 0).value;
+}
+function fromPostgresLosslessJson(value, codecVersion) {
+  return codecVersion === LOSSLESS_CONTENT_CODEC_VERSION ? decodeJsonValue(value, 0).value : value;
+}
+function toPostgresLosslessText(value) {
+  if (isPostgresSafeString(value) && !value.includes(TEXT_PREFIX)) return value;
+  let stored = "";
+  for (let index7 = 0; index7 < value.length; index7 += 1) {
+    const code = value.charCodeAt(index7);
+    if (value.startsWith(TEXT_PREFIX, index7)) {
+      stored += encodeTextCodeUnit(code);
+      continue;
+    }
+    if (code === 0 || code >= 56320 && code <= 57343) {
+      stored += encodeTextCodeUnit(code);
+      continue;
+    }
+    if (code >= 55296 && code <= 56319) {
+      const next = index7 + 1 < value.length ? value.charCodeAt(index7 + 1) : 0;
+      if (next < 56320 || next > 57343) {
+        stored += encodeTextCodeUnit(code);
+        continue;
+      }
+      stored += value.slice(index7, index7 + 2);
+      index7 += 1;
+      continue;
+    }
+    stored += value[index7];
+  }
+  return stored;
+}
+function fromPostgresLosslessText(value, codecVersion) {
+  return codecVersion === LOSSLESS_CONTENT_CODEC_VERSION ? value.replaceAll(
+    new RegExp(` ${TEXT_PREFIX}([0-9a-f]{4}); `, "g"),
+    (_match, encoded) => String.fromCharCode(Number.parseInt(encoded, 16))
+  ) : value;
+}
+function encodeTextCodeUnit(code) {
+  return ` ${TEXT_PREFIX}${code.toString(16).padStart(4, "0")}; `;
+}
+function encodeJsonValue(value, ancestors, depth) {
+  if (depth > MAX_JSON_DEPTH) {
+    throw new UnsupportedCanonicalValueError(
+      `Canonical JSON exceeds the maximum supported depth of ${MAX_JSON_DEPTH}`
+    );
+  }
+  if (value === null || typeof value === "boolean") return { value, changed: false };
+  if (typeof value === "string") {
+    if (isPostgresSafeString(value) && !value.startsWith(JSON_STRING_PREFIX)) {
+      return { value, changed: false };
+    }
+    return { value: `${JSON_STRING_PREFIX}${encodeUtf16(value)}`, changed: true };
+  }
+  if (typeof value === "number") {
+    if (!Number.isFinite(value) || Object.is(value, -0)) {
+      throw new UnsupportedCanonicalValueError(
+        "Canonical JSON requires finite non-negative-zero numbers"
+      );
+    }
+    return { value, changed: false };
+  }
+  if (typeof value === "undefined" || typeof value === "bigint" || typeof value === "function" || typeof value === "symbol") {
+    throw new UnsupportedCanonicalValueError(`Canonical JSON cannot contain ${typeof value}`);
+  }
+  if (!isPlainObject(value) && !Array.isArray(value)) {
+    throw new UnsupportedCanonicalValueError("Canonical JSON requires arrays and plain objects");
+  }
+  if (ancestors.has(value)) {
+    throw new UnsupportedCanonicalValueError("Canonical JSON cannot contain cyclic references");
+  }
+  if (Object.getOwnPropertySymbols(value).length > 0) {
+    throw new UnsupportedCanonicalValueError("Canonical JSON cannot contain symbol keys");
+  }
+  ancestors.add(value);
+  try {
+    if (Array.isArray(value)) {
+      const descriptors2 = Object.getOwnPropertyDescriptors(value);
+      const propertyNames = Object.getOwnPropertyNames(descriptors2);
+      const indexNames = propertyNames.filter((name) => name !== "length");
+      if (indexNames.length !== value.length || indexNames.some((name) => {
+        const index7 = Number(name);
+        return !Number.isInteger(index7) || index7 < 0 || index7 >= value.length || String(index7) !== name;
+      })) {
+        throw new UnsupportedCanonicalValueError(
+          "Canonical JSON arrays cannot contain non-index properties or holes"
+        );
+      }
+      const output2 = [];
+      let changed2 = false;
+      for (let index7 = 0; index7 < value.length; index7 += 1) {
+        const descriptor = descriptors2[String(index7)];
+        if (!descriptor || !descriptor.enumerable || !("value" in descriptor)) {
+          throw new UnsupportedCanonicalValueError(
+            "Canonical JSON arrays cannot contain holes, accessors, or hidden elements"
+          );
+        }
+        const encoded = encodeJsonValue(descriptor.value, ancestors, depth + 1);
+        output2.push(encoded.value);
+        changed2 ||= encoded.changed;
+      }
+      return changed2 ? { value: output2, changed: true } : { value, changed: false };
+    }
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    const output = {};
+    let changed = false;
+    for (const [key, descriptor] of Object.entries(descriptors)) {
+      if (!descriptor.enumerable || !("value" in descriptor)) {
+        throw new UnsupportedCanonicalValueError(
+          "Canonical JSON objects cannot contain accessors or hidden properties"
+        );
+      }
+      const encodedKey = isPostgresSafeString(key) && !key.startsWith(JSON_KEY_PREFIX) ? key : `${JSON_KEY_PREFIX}${encodeUtf16(key)}`;
+      if (Object.prototype.hasOwnProperty.call(output, encodedKey)) {
+        throw new UnsupportedCanonicalValueError("Canonical JSON key encoding collided");
+      }
+      const encodedValue = encodeJsonValue(descriptor.value, ancestors, depth + 1);
+      defineJsonDataProperty(output, encodedKey, encodedValue.value);
+      changed ||= encodedKey !== key || encodedValue.changed;
+    }
+    return changed ? { value: output, changed: true } : { value, changed: false };
+  } finally {
+    ancestors.delete(value);
+  }
+}
+function decodeJsonValue(value, depth) {
+  if (depth > MAX_JSON_DEPTH) return { value, changed: false };
+  if (typeof value === "string") {
+    const decoded = decodeTaggedString(value, JSON_STRING_PREFIX);
+    return decoded === null ? { value, changed: false } : { value: decoded, changed: true };
+  }
+  if (!value || typeof value !== "object") return { value, changed: false };
+  if (Array.isArray(value)) {
+    const output2 = [];
+    let changed2 = false;
+    for (const entry of value) {
+      const decoded = decodeJsonValue(entry, depth + 1);
+      output2.push(decoded.value);
+      changed2 ||= decoded.changed;
+    }
+    return changed2 ? { value: output2, changed: true } : { value, changed: false };
+  }
+  if (!isPlainObject(value)) return { value, changed: false };
+  const output = {};
+  let changed = false;
+  for (const [key, entry] of Object.entries(value)) {
+    const decodedKey = decodeTaggedString(key, JSON_KEY_PREFIX) ?? key;
+    if (Object.prototype.hasOwnProperty.call(output, decodedKey)) {
+      return { value, changed: false };
+    }
+    const decodedValue = decodeJsonValue(entry, depth + 1);
+    defineJsonDataProperty(output, decodedKey, decodedValue.value);
+    changed ||= decodedKey !== key || decodedValue.changed;
+  }
+  return changed ? { value: output, changed: true } : { value, changed: false };
+}
+function defineJsonDataProperty(target, key, value) {
+  Object.defineProperty(target, key, {
+    value,
+    enumerable: true,
+    configurable: true,
+    writable: true
+  });
+}
+function encodeUtf16(value) {
+  const bytes = Buffer.allocUnsafe(value.length * 2);
+  for (let index7 = 0; index7 < value.length; index7 += 1) {
+    bytes.writeUInt16LE(value.charCodeAt(index7), index7 * 2);
+  }
+  return bytes.toString("base64");
+}
+function decodeTaggedString(value, prefix) {
+  if (!value.startsWith(prefix)) return null;
+  const encoded = value.slice(prefix.length);
+  if (encoded.length === 0 || !/^[A-Za-z0-9+/]+={0,2}$/.test(encoded)) return null;
+  const bytes = Buffer.from(encoded, "base64");
+  if (bytes.byteLength % 2 !== 0 || bytes.toString("base64") !== encoded) return null;
+  let decoded = "";
+  for (let offset = 0; offset < bytes.byteLength; offset += 2) {
+    decoded += String.fromCharCode(bytes.readUInt16LE(offset));
+  }
+  return decoded;
+}
+function isPostgresSafeString(value) {
+  for (let index7 = 0; index7 < value.length; index7 += 1) {
+    const code = value.charCodeAt(index7);
+    if (code === 0) return false;
+    if (code >= 55296 && code <= 56319) {
+      const next = index7 + 1 < value.length ? value.charCodeAt(index7 + 1) : 0;
+      if (next < 56320 || next > 57343) return false;
+      index7 += 1;
+      continue;
+    }
+    if (code >= 56320 && code <= 57343) return false;
+  }
+  return true;
+}
+function isPlainObject(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+
+// src/lossless-columns.ts
+function losslessCodecVersion(name) {
+  return integer(name);
+}
+var losslessJsonb = customType({
+  dataType() {
+    return "jsonb";
+  },
+  toDriver(value) {
+    return JSON.stringify(toPostgresLosslessJson(value));
+  },
+  fromDriver(value) {
+    return typeof value === "string" ? JSON.parse(value) : value;
+  }
+});
+var losslessText = customType({
+  dataType() {
+    return "text";
+  },
+  toDriver(value) {
+    return toPostgresLosslessText(value);
+  },
+  fromDriver(value) {
+    return value;
+  }
+});
+
 // src/workspace-instruction-policies-schema.ts
 import { sql } from "drizzle-orm";
 import {
   bigint,
   check,
   index,
-  integer,
+  integer as integer2,
   jsonb,
   pgTable,
   text,
@@ -340,7 +598,7 @@ var workspaceInstructionPolicyOnboardingProposals = pgTable(
     roleKey: text("role_key"),
     sourceId: text("source_id").notNull(),
     sourceVersion: text("source_version").notNull(),
-    confidenceBps: integer("confidence_bps").notNull(),
+    confidenceBps: integer2("confidence_bps").notNull(),
     baselineRevisionId: uuid("baseline_revision_id"),
     baselineRevision: bigint("baseline_revision", { mode: "number" }),
     baselineContentHash: text("baseline_content_hash"),
@@ -421,7 +679,7 @@ var workspaceInstructionPolicySnapshots = pgTable(
     sessionId: uuid("session_id").notNull(),
     turnId: uuid("turn_id").notNull(),
     attemptId: uuid("attempt_id").notNull(),
-    executionGeneration: integer("execution_generation").notNull(),
+    executionGeneration: integer2("execution_generation").notNull(),
     policyRole: text("policy_role"),
     roleSource: text("role_source").notNull(),
     entries: jsonb("entries").$type().notNull(),
@@ -457,7 +715,7 @@ import {
   boolean,
   check as check2,
   index as index2,
-  integer as integer2,
+  integer as integer3,
   jsonb as jsonb2,
   pgTable as pgTable2,
   text as text2,
@@ -475,8 +733,8 @@ var preferenceRegistryPreferences = pgTable2(
     scopeWorkspaceId: uuid2("scope_workspace_id"),
     scopeSubjectId: text2("scope_subject_id"),
     status: text2("status").notNull().default("proposed"),
-    scopeVersion: integer2("scope_version").notNull().default(1),
-    activationVersion: integer2("activation_version").notNull().default(0),
+    scopeVersion: integer3("scope_version").notNull().default(1),
+    activationVersion: integer3("activation_version").notNull().default(0),
     activeRevisionId: uuid2("active_revision_id"),
     activeRevision: bigint2("active_revision", { mode: "number" }),
     activeContentHash: text2("active_content_hash"),
@@ -518,7 +776,7 @@ var preferenceRegistryRevisions = pgTable2(
     description: text2("description").notNull(),
     content: text2("content").notNull(),
     contentHash: text2("content_hash").notNull(),
-    precedenceRank: integer2("precedence_rank").notNull().default(0),
+    precedenceRank: integer3("precedence_rank").notNull().default(0),
     conflictStrategy: text2("conflict_strategy").notNull(),
     conflictsWith: jsonb2("conflicts_with").$type().notNull().default([]),
     provenanceSource: text2("provenance_source").notNull(),
@@ -547,7 +805,7 @@ var preferenceRegistryEvents = pgTable2(
     accountId: uuid2("account_id").notNull(),
     preferenceId: uuid2("preference_id").notNull(),
     type: text2("type").notNull(),
-    version: integer2("version").notNull(),
+    version: integer3("version").notNull(),
     oldRevisionId: uuid2("old_revision_id"),
     newRevisionId: uuid2("new_revision_id"),
     oldScope: text2("old_scope"),
@@ -582,7 +840,7 @@ var preferenceRegistrySnapshots = pgTable2(
     sessionId: uuid2("session_id").notNull(),
     turnId: uuid2("turn_id").notNull(),
     attemptId: uuid2("attempt_id").notNull(),
-    executionGeneration: integer2("execution_generation").notNull(),
+    executionGeneration: integer3("execution_generation").notNull(),
     initiatingHumanSubjectId: text2("initiating_human_subject_id").notNull(),
     descriptors: jsonb2("descriptors").$type().notNull(),
     descriptorHash: text2("descriptor_hash").notNull(),
@@ -612,7 +870,7 @@ import { sql as sql3 } from "drizzle-orm";
 import {
   check as check3,
   index as index3,
-  integer as integer3,
+  integer as integer4,
   jsonb as jsonb3,
   pgTable as pgTable3,
   text as text3,
@@ -629,7 +887,7 @@ var knowledgeMemoryRelationships = pgTable3(
     sourceMemoryId: uuid3("source_memory_id").notNull(),
     targetMemoryId: uuid3("target_memory_id").notNull(),
     relationshipType: text3("relationship_type").notNull(),
-    version: integer3("version").notNull().default(1),
+    version: integer4("version").notNull().default(1),
     createdByEventId: uuid3("created_by_event_id").notNull(),
     removedByEventId: uuid3("removed_by_event_id"),
     createdAt: timestamp3("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -694,7 +952,7 @@ var knowledgeMemoryLifecycleEvents = pgTable3(
     actorSessionId: uuid3("actor_session_id"),
     actorTurnId: uuid3("actor_turn_id"),
     actorAttemptId: uuid3("actor_attempt_id"),
-    actorExecutionGeneration: integer3("actor_execution_generation"),
+    actorExecutionGeneration: integer4("actor_execution_generation"),
     planHash: text3("plan_hash").notNull(),
     beforeState: jsonb3("before_state").$type().notNull(),
     afterState: jsonb3("after_state").$type().notNull(),
@@ -766,7 +1024,7 @@ import {
   bigint as bigint3,
   boolean as boolean2,
   index as index4,
-  integer as integer4,
+  integer as integer5,
   jsonb as jsonb4,
   pgTable as pgTable4,
   text as text4,
@@ -1186,7 +1444,7 @@ var knowledgeClaims = pgTable4(
     ...tenantScopeColumns(),
     factId: uuid4("fact_id").notNull(),
     origin: text4("origin").notNull(),
-    confidenceBps: integer4("confidence_bps").notNull(),
+    confidenceBps: integer5("confidence_bps").notNull(),
     effectiveAt: timestamp4("effective_at", { withTimezone: true }).notNull(),
     expiresAt: timestamp4("expires_at", { withTimezone: true }),
     extractionMethod: text4("extraction_method").notNull(),
@@ -1247,7 +1505,7 @@ var knowledgeClaimEvidence = pgTable4(
     documentVersionId: uuid4("document_version_id").notNull(),
     polarity: text4("polarity").notNull(),
     documentChunkId: uuid4("document_chunk_id"),
-    chunkIndex: integer4("chunk_index"),
+    chunkIndex: integer5("chunk_index"),
     locator: text4("locator"),
     quoteHash: text4("quote_hash"),
     contentHash: text4("content_hash").notNull(),
@@ -1340,7 +1598,7 @@ import {
   boolean as boolean3,
   check as check4,
   index as index5,
-  integer as integer5,
+  integer as integer6,
   jsonb as jsonb5,
   pgTable as pgTable5,
   primaryKey,
@@ -1376,18 +1634,19 @@ var transcriptionRecordings = pgTable5(
     subjectId: text5("subject_id").notNull(),
     mimeType: text5("mime_type").notNull(),
     state: text5("state", { enum: transcriptionRecordingStateValues }).notNull().default("uploading"),
-    nextChunkNumber: integer5("next_chunk_number").notNull().default(0),
-    chunkCount: integer5("chunk_count").notNull().default(0),
-    totalBytes: integer5("total_bytes").notNull().default(0),
-    totalDurationMilliseconds: integer5("total_duration_milliseconds").notNull().default(0),
-    segmentCount: integer5("segment_count").notNull().default(0),
-    completedSegmentCount: integer5("completed_segment_count").notNull().default(0),
-    transcriptText: text5("transcript_text"),
+    nextChunkNumber: integer6("next_chunk_number").notNull().default(0),
+    chunkCount: integer6("chunk_count").notNull().default(0),
+    totalBytes: integer6("total_bytes").notNull().default(0),
+    totalDurationMilliseconds: integer6("total_duration_milliseconds").notNull().default(0),
+    segmentCount: integer6("segment_count").notNull().default(0),
+    completedSegmentCount: integer6("completed_segment_count").notNull().default(0),
+    transcriptText: losslessText("transcript_text"),
+    transcriptTextCodecVersion: losslessCodecVersion("transcript_text_codec_version"),
     languages: jsonb5("languages").$type().notNull().default([]),
     errorCode: text5("error_code"),
     retryable: boolean3("retryable").notNull().default(false),
     providerId: text5("provider_id"),
-    processingGeneration: integer5("processing_generation").notNull().default(0),
+    processingGeneration: integer6("processing_generation").notNull().default(0),
     processingOwner: uuid5("processing_owner"),
     processingStartedAt: timestamp5("processing_started_at", { withTimezone: true }),
     objectsCleanedAt: timestamp5("objects_cleaned_at", { withTimezone: true }),
@@ -1475,12 +1734,12 @@ var transcriptionRecordingChunks = pgTable5(
     workspaceId: uuid5("workspace_id").notNull(),
     subjectId: text5("subject_id").notNull(),
     recordingId: uuid5("recording_id").notNull(),
-    chunkNumber: integer5("chunk_number").notNull(),
+    chunkNumber: integer6("chunk_number").notNull(),
     state: text5("state", { enum: transcriptionRecordingChunkStateValues }).notNull().default("uploading"),
-    byteLength: integer5("byte_length").notNull(),
+    byteLength: integer6("byte_length").notNull(),
     sha256: text5("sha256").notNull(),
-    startMilliseconds: integer5("start_milliseconds").notNull(),
-    durationMilliseconds: integer5("duration_milliseconds").notNull(),
+    startMilliseconds: integer6("start_milliseconds").notNull(),
+    durationMilliseconds: integer6("duration_milliseconds").notNull(),
     objectKey: text5("object_key").notNull(),
     createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
     completedAt: timestamp5("completed_at", { withTimezone: true })
@@ -1518,18 +1777,19 @@ var transcriptionRecordingSegments = pgTable5(
     workspaceId: uuid5("workspace_id").notNull(),
     subjectId: text5("subject_id").notNull(),
     recordingId: uuid5("recording_id").notNull(),
-    segmentNumber: integer5("segment_number").notNull(),
-    generation: integer5("generation").notNull(),
+    segmentNumber: integer6("segment_number").notNull(),
+    generation: integer6("generation").notNull(),
     state: text5("state", { enum: transcriptionRecordingSegmentStateValues }).notNull().default("preparing"),
-    byteLength: integer5("byte_length").notNull(),
+    byteLength: integer6("byte_length").notNull(),
     sha256: text5("sha256").notNull(),
-    startMilliseconds: integer5("start_milliseconds").notNull(),
-    durationMilliseconds: integer5("duration_milliseconds").notNull(),
+    startMilliseconds: integer6("start_milliseconds").notNull(),
+    durationMilliseconds: integer6("duration_milliseconds").notNull(),
     objectKey: text5("object_key").notNull(),
     attemptId: uuid5("attempt_id"),
     attemptStartedAt: timestamp5("attempt_started_at", { withTimezone: true }),
     attemptDeadlineAt: timestamp5("attempt_deadline_at", { withTimezone: true }),
-    transcriptText: text5("transcript_text"),
+    transcriptText: losslessText("transcript_text"),
+    transcriptTextCodecVersion: losslessCodecVersion("transcript_text_codec_version"),
     languages: jsonb5("languages").$type().notNull().default([]),
     providerId: text5("provider_id"),
     errorCode: text5("error_code"),
@@ -1570,7 +1830,7 @@ var transcriptionRecordingSegments = pgTable5(
 );
 
 // src/schema.ts
-var vector = customType({
+var vector = customType2({
   dataType() {
     return "vector(3072)";
   },
@@ -1685,16 +1945,16 @@ var workspaceArtifactVersions = pgTable6(
     accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     artifactId: uuid6("artifact_id").notNull(),
-    revision: integer6("revision").notNull(),
+    revision: integer7("revision").notNull(),
     contentKey: text6("content_key").notNull(),
     contentType: text6("content_type").$type().notNull().default("text/html"),
     contentSha256: text6("content_sha256").notNull(),
-    sizeBytes: integer6("size_bytes").notNull(),
+    sizeBytes: integer7("size_bytes").notNull(),
     operationKey: text6("operation_key").notNull(),
     sourceSessionId: uuid6("source_session_id"),
     sourceTurnId: uuid6("source_turn_id"),
     sourceAttemptId: uuid6("source_attempt_id"),
-    sourceExecutionGeneration: integer6("source_execution_generation"),
+    sourceExecutionGeneration: integer7("source_execution_generation"),
     createdBySubjectId: text6("created_by_subject_id").notNull(),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -1752,7 +2012,7 @@ var workspaceArtifactEvents = pgTable6(
     sourceSessionId: uuid6("source_session_id"),
     sourceTurnId: uuid6("source_turn_id"),
     sourceAttemptId: uuid6("source_attempt_id"),
-    sourceExecutionGeneration: integer6("source_execution_generation"),
+    sourceExecutionGeneration: integer7("source_execution_generation"),
     actorSubjectId: text6("actor_subject_id").notNull(),
     reason: text6("reason").notNull(),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow()
@@ -1797,7 +2057,7 @@ var nestedAgentDepthConfiguration = pgTable6(
   "nested_agent_depth_configuration",
   {
     singleton: boolean4("singleton").primaryKey().notNull().default(true),
-    maxNestedAgentDepth: integer6("max_nested_agent_depth").notNull(),
+    maxNestedAgentDepth: integer7("max_nested_agent_depth").notNull(),
     policySource: text6("policy_source").$type().notNull(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -1955,7 +2215,7 @@ var workspaceVariableSetVariables = pgTable6(
     name: text6("name").notNull(),
     // Format: v1:<base64 iv>:<base64 ciphertext||gcm-tag>. Never returned by any API.
     valueEncrypted: text6("value_encrypted").notNull(),
-    version: integer6("version").notNull().default(1),
+    version: integer7("version").notNull().default(1),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -1991,7 +2251,7 @@ var codexSubscriptionCredentials = pgTable6(
     status: text6("status").notNull().default("active"),
     // active | needs_relogin | error
     lastError: text6("last_error"),
-    version: integer6("version").notNull().default(1),
+    version: integer7("version").notNull().default(1),
     label: text6("label"),
     // user-chosen nickname; null ⇒ derive from email/plan/account
     accountEmail: text6("account_email"),
@@ -1999,9 +2259,9 @@ var codexSubscriptionCredentials = pgTable6(
     // P2 usage cache (plaintext metadata; NEVER a token). Snapshotted from
     // GET /wham/usage; drives the quota bars + the cache TTL. primary = 5h window
     // (limit_window_seconds 18000), secondary = weekly (604800).
-    primaryUsedPercent: integer6("primary_used_percent"),
+    primaryUsedPercent: integer7("primary_used_percent"),
     primaryResetAt: timestamp6("primary_reset_at", { withTimezone: true }),
-    secondaryUsedPercent: integer6("secondary_used_percent"),
+    secondaryUsedPercent: integer7("secondary_used_percent"),
     secondaryResetAt: timestamp6("secondary_reset_at", { withTimezone: true }),
     usageCheckedAt: timestamp6("usage_checked_at", { withTimezone: true }),
     // snapshot freshness → cache TTL clock
@@ -2018,18 +2278,18 @@ var codexSubscriptionCredentials = pgTable6(
     allocatorEnabled: boolean4("allocator_enabled").notNull().default(true),
     // Independent OCC/audit sequence for the allocator toggle. Token refresh
     // continues to own `version`; quota/cache writes own neither counter.
-    allocatorVersion: integer6("allocator_version").notNull().default(1),
+    allocatorVersion: integer7("allocator_version").notNull().default(1),
     allocatorUpdatedBySubjectId: text6("allocator_updated_by_subject_id"),
     allocatorUpdatedAt: timestamp6("allocator_updated_at", { withTimezone: true }),
     // Authoritative count-only summary cached from /wham/usage. Detailed rows
     // are never persisted as redemption authority; every first POST preflights
     // the provider's fresh detail endpoint.
-    resetCreditAvailableCount: integer6("reset_credit_available_count"),
+    resetCreditAvailableCount: integer7("reset_credit_available_count"),
     resetCreditsCheckedAt: timestamp6("reset_credits_checked_at", { withTimezone: true }),
     // Set only by a direct Better Auth cookie connection/reconnection. Legacy,
     // configured, delegated, API-key, and agent-created rows remain view-only.
     connectedBySubjectId: text6("connected_by_subject_id"),
-    selectionCount: integer6("selection_count").notNull().default(0),
+    selectionCount: integer7("selection_count").notNull().default(0),
     lastSelectedAt: timestamp6("last_selected_at", { withTimezone: true }),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -2059,7 +2319,7 @@ var codexAppsSettings = pgTable6(
     accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     credentialId: uuid6("credential_id"),
-    version: integer6("version").notNull().default(1),
+    version: integer7("version").notNull().default(1),
     designatedAt: timestamp6("designated_at", { withTimezone: true }),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -2108,7 +2368,7 @@ var codexResetRedemptionAttempts = pgTable6(
     providerStartedAt: timestamp6("provider_started_at", { withTimezone: true }),
     completedAt: timestamp6("completed_at", { withTimezone: true }),
     lastFailureKind: text6("last_failure_kind"),
-    retryCount: integer6("retry_count").notNull().default(0),
+    retryCount: integer7("retry_count").notNull().default(0),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -2168,13 +2428,13 @@ var connections = pgTable6(
     lastRefreshAt: timestamp6("last_refresh_at", { withTimezone: true }),
     lastUsedAt: timestamp6("last_used_at", { withTimezone: true }),
     lastError: text6("last_error"),
-    version: integer6("version").notNull().default(1),
+    version: integer7("version").notNull().default(1),
     // Server-owned proof that the dedicated install route verified the exact
     // credential at this connection version. Generic/legacy writers cannot set
     // these columns, and migration 0131 clears them when protected fields change
     // without a fresh verification in the same statement.
     verifiedInstallAt: timestamp6("verified_install_at", { withTimezone: true }),
-    verifiedInstallVersion: integer6("verified_install_version"),
+    verifiedInstallVersion: integer7("verified_install_version"),
     metadata: jsonb6("metadata").$type().notNull().default({}),
     createdBySubjectId: text6("created_by_subject_id"),
     updatedBySubjectId: text6("updated_by_subject_id"),
@@ -2208,8 +2468,8 @@ var connectionDisconnectOperations = pgTable6(
     connectionId: uuid6("connection_id").notNull().references(() => connections.id, { onDelete: "cascade" }),
     subjectId: text6("subject_id").notNull(),
     idempotencyKey: text6("idempotency_key").notNull(),
-    expectedVersion: integer6("expected_version").notNull(),
-    resultVersion: integer6("result_version").notNull(),
+    expectedVersion: integer7("expected_version").notNull(),
+    resultVersion: integer7("result_version").notNull(),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -2242,7 +2502,7 @@ var connectorActionPolicies = pgTable6(
     toolName: text6("tool_name").notNull(),
     actionName: text6("action_name").notNull(),
     policy: text6("policy").$type().notNull(),
-    version: integer6("version").notNull().default(1),
+    version: integer7("version").notNull().default(1),
     createdBySubjectId: text6("created_by_subject_id").notNull(),
     updatedBySubjectId: text6("updated_by_subject_id").notNull(),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -2317,7 +2577,7 @@ var slackInteractionInbox = pgTable6(
     status: text6("status").$type().notNull().default("pending"),
     claimHolderId: uuid6("claim_holder_id"),
     claimExpiresAt: timestamp6("claim_expires_at", { withTimezone: true }),
-    attemptCount: integer6("attempt_count").notNull().default(0),
+    attemptCount: integer7("attempt_count").notNull().default(0),
     retryAt: timestamp6("retry_at", { withTimezone: true }),
     lastErrorCode: text6("last_error_code"),
     reactionContextCheckpoint: jsonb6("reaction_context_checkpoint").$type(),
@@ -2360,16 +2620,16 @@ var slackInteractions = pgTable6(
     sessionId: uuid6("session_id").references(() => sessions.id, {
       onDelete: "cascade"
     }),
-    lastDeliveredSessionEventSequence: integer6("last_delivered_session_event_sequence").notNull().default(0),
+    lastDeliveredSessionEventSequence: integer7("last_delivered_session_event_sequence").notNull().default(0),
     deliveryClaimHolderId: uuid6("delivery_claim_holder_id"),
     deliveryClaimExpiresAt: timestamp6("delivery_claim_expires_at", {
       withTimezone: true
     }),
-    deliveryAttemptCount: integer6("delivery_attempt_count").notNull().default(0),
+    deliveryAttemptCount: integer7("delivery_attempt_count").notNull().default(0),
     deliveryRetryAt: timestamp6("delivery_retry_at", { withTimezone: true }),
     deliveryLastErrorCode: text6("delivery_last_error_code"),
     ackSlackMessageTs: text6("ack_slack_message_ts"),
-    progressCount: integer6("progress_count").notNull().default(0),
+    progressCount: integer7("progress_count").notNull().default(0),
     terminalDeliveryState: text6("terminal_delivery_state").$type().notNull().default("open"),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -2401,8 +2661,8 @@ var slackInteractionProgressDeliveries = pgTable6(
     accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     interactionId: uuid6("interaction_id").notNull(),
-    sessionEventSequence: integer6("session_event_sequence").notNull(),
-    slot: integer6("slot").notNull(),
+    sessionEventSequence: integer7("session_event_sequence").notNull(),
+    slot: integer7("slot").notNull(),
     operationId: uuid6("operation_id").notNull(),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -2445,7 +2705,7 @@ var slackBotPostOperations = pgTable6(
     status: text6("status").$type().notNull(),
     claimHolderId: uuid6("claim_holder_id"),
     claimExpiresAt: timestamp6("claim_expires_at", { withTimezone: true }),
-    attemptCount: integer6("attempt_count").notNull().default(0),
+    attemptCount: integer7("attempt_count").notNull().default(0),
     lastFailureCode: text6("last_failure_code"),
     slackChannelId: text6("slack_channel_id"),
     slackMessageTimestamp: text6("slack_message_timestamp"),
@@ -2515,7 +2775,7 @@ var slackBotDeleteOperations = pgTable6(
     status: text6("status").$type().notNull(),
     claimHolderId: uuid6("claim_holder_id"),
     claimExpiresAt: timestamp6("claim_expires_at", { withTimezone: true }),
-    attemptCount: integer6("attempt_count").notNull().default(0),
+    attemptCount: integer7("attempt_count").notNull().default(0),
     lastFailureCode: text6("last_failure_code"),
     slackChannelId: text6("slack_channel_id"),
     slackMessageTimestamp: text6("slack_message_timestamp"),
@@ -2654,7 +2914,7 @@ var codexCredentialLeases = pgTable6(
     // durable turn replaces holderId and increments generation atomically;
     // stale/zombie heartbeats and releases must match both values.
     holderId: text6("holder_id").notNull(),
-    generation: integer6("generation").notNull().default(1),
+    generation: integer7("generation").notNull().default(1),
     leasedUntil: timestamp6("leased_until", { withTimezone: true }).notNull(),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -2679,7 +2939,8 @@ var sessions = pgTable6(
     accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     status: text6("status").notNull().default("queued"),
-    initialMessage: text6("initial_message").notNull(),
+    initialMessage: losslessText("initial_message").notNull(),
+    initialMessageCodecVersion: losslessCodecVersion("initial_message_codec_version"),
     // Invisible host context frozen with the winning session create. The
     // initial turn copies this value so an idempotent repair can never adopt a
     // retrying caller's different instructions.
@@ -2736,7 +2997,7 @@ var sessions = pgTable6(
     // in-flight op fenced by a stale active_epoch retries against the new active
     // sandbox. integer (NOT bigint) — the lease-epoch spike: int8 reads back as a
     // JS string and breaks the strict fence; int4 returns a number.
-    activeEpoch: integer6("active_epoch").notNull().default(0),
+    activeEpoch: integer7("active_epoch").notNull().default(0),
     // The session's WORKING DIRECTORY — the path/cwd base the (selfhosted) box's
     // agent/terminal/file-dock operate under. A launch-workspace_root-relative
     // subdir or an absolute machine path; surfaced alongside the active-sandbox
@@ -2770,7 +3031,7 @@ var sessions = pgTable6(
     // representation so every session has one explicit policy mode.
     toolPolicy: jsonb6("tool_policy").$type().notNull(),
     // Optimistic-concurrency fence for durable session tool-policy writes.
-    toolPolicyVersion: integer6("tool_policy_version").notNull().default(1),
+    toolPolicyVersion: integer7("tool_policy_version").notNull().default(1),
     // The manager session that spawned this one via session_create. Set only
     // when the creating grant carried a worker-signed sessionId claim (a session
     // spawning a worker); null for direct API creates and scheduled-task runs.
@@ -2794,9 +3055,9 @@ var sessions = pgTable6(
     // populated by the database admission boundary and never re-derived from
     // a live workspace setting for an existing session.
     rootSessionId: uuid6("root_session_id").notNull(),
-    nestedAgentDepth: integer6("nested_agent_depth").notNull(),
-    maxNestedAgentDepthOverride: integer6("max_nested_agent_depth_override"),
-    effectiveMaxNestedAgentDepth: integer6("effective_max_nested_agent_depth").notNull(),
+    nestedAgentDepth: integer7("nested_agent_depth").notNull(),
+    maxNestedAgentDepthOverride: integer7("max_nested_agent_depth_override"),
+    effectiveMaxNestedAgentDepth: integer7("effective_max_nested_agent_depth").notNull(),
     nestedAgentDepthPolicySource: text6("nested_agent_depth_policy_source").notNull(),
     nestedAgentDepthPolicySessionId: uuid6("nested_agent_depth_policy_session_id"),
     temporalWorkflowId: text6("temporal_workflow_id"),
@@ -2804,13 +3065,13 @@ var sessions = pgTable6(
     // Actual input tokens reported for the latest authoritative ordinary model
     // call. Compaction/context clearing invalidates it to null; local history
     // estimates must never be stored here.
-    lastInputTokens: integer6("last_input_tokens"),
+    lastInputTokens: integer7("last_input_tokens"),
     // Operator /compact request flag. The API sets
     // it true; the worker honors it BEFORE the next turn's model call by forcing
     // a compaction, then clears it. A durable flag (not a transient signal) so
     // the trigger survives a worker restart and converges before the next turn.
     compactRequested: boolean4("compact_requested").notNull().default(false),
-    queueVersion: integer6("queue_version").notNull().default(0),
+    queueVersion: integer7("queue_version").notNull().default(0),
     queueHeadPosition: bigint4("queue_head_position", { mode: "number" }).notNull().default(0),
     queueTailPosition: bigint4("queue_tail_position", { mode: "number" }).notNull().default(0),
     directControlState: text6("direct_control_state").notNull().default("active"),
@@ -2824,7 +3085,7 @@ var sessions = pgTable6(
     directControlChangedAt: timestamp6("direct_control_changed_at", {
       withTimezone: true
     }),
-    lastSequence: integer6("last_sequence").notNull().default(0),
+    lastSequence: integer7("last_sequence").notNull().default(0),
     // The session's PINNED Codex account (manual override from the in-session
     // switcher). NULL ⇒ follow the workspace active pointer. FK declared in the
     // migration with ON DELETE SET NULL (a disconnected pin degrades to "follow
@@ -2908,8 +3169,8 @@ var sessionRealtimeModes = pgTable6(
     ownerKeyHash: text6("owner_key_hash").notNull(),
     model: text6("model").notNull(),
     state: text6("state").notNull().default("active"),
-    version: integer6("version").notNull().default(1),
-    connectionEpoch: integer6("connection_epoch").notNull().default(1),
+    version: integer7("version").notNull().default(1),
+    connectionEpoch: integer7("connection_epoch").notNull().default(1),
     leaseExpiresAt: timestamp6("lease_expires_at", { withTimezone: true }).notNull(),
     lastHeartbeatAt: timestamp6("last_heartbeat_at", { withTimezone: true }).notNull(),
     startedAt: timestamp6("started_at", { withTimezone: true }).notNull().defaultNow(),
@@ -2994,8 +3255,8 @@ var sessionRealtimeConnections = pgTable6(
     sessionId: uuid6("session_id").notNull(),
     realtimeId: uuid6("realtime_id").notNull().references(() => sessionRealtimeModes.id, { onDelete: "cascade" }),
     operationId: uuid6("operation_id").notNull(),
-    connectionEpoch: integer6("connection_epoch").notNull(),
-    startupFenceSequence: integer6("startup_fence_sequence").notNull().default(0),
+    connectionEpoch: integer7("connection_epoch").notNull(),
+    startupFenceSequence: integer7("startup_fence_sequence").notNull().default(0),
     promotionMode: text6("promotion_mode").notNull().default("legacy"),
     state: text6("state").notNull().default("negotiating"),
     sdpAnswer: text6("sdp_answer"),
@@ -3091,8 +3352,8 @@ var sessionRealtimeEntries = pgTable6(
     sessionId: uuid6("session_id").notNull(),
     realtimeId: uuid6("realtime_id").notNull().references(() => sessionRealtimeModes.id, { onDelete: "cascade" }),
     operationId: uuid6("operation_id").notNull(),
-    connectionEpoch: integer6("connection_epoch").notNull(),
-    sequence: integer6("sequence").notNull(),
+    connectionEpoch: integer7("connection_epoch").notNull(),
+    sequence: integer7("sequence").notNull(),
     direction: text6("direction").notNull(),
     kind: text6("kind").notNull(),
     role: text6("role"),
@@ -3108,8 +3369,10 @@ var sessionRealtimeEntries = pgTable6(
     // result/error to the same ordinary turn. It never denotes a child/fork
     // session.
     turnId: uuid6("turn_id"),
-    text: text6("text"),
-    payload: jsonb6("payload").$type().notNull().default({}),
+    text: losslessText("text"),
+    textCodecVersion: losslessCodecVersion("text_codec_version"),
+    payload: losslessJsonb("payload").$type().notNull().default({}),
+    payloadCodecVersion: losslessCodecVersion("payload_codec_version"),
     clientAckedAt: timestamp6("client_acked_at", { withTimezone: true }),
     providerAckedAt: timestamp6("provider_acked_at", { withTimezone: true }),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -3163,14 +3426,6 @@ var sessionRealtimeEntries = pgTable6(
       "session_realtime_entries_delegation_item_check",
       sql6`${table.delegationItemId} is null or octet_length(${table.delegationItemId}) between 1 and 1024`
     ),
-    textValid: check5(
-      "session_realtime_entries_text_check",
-      sql6`${table.text} is null or octet_length(${table.text}) <= 131072`
-    ),
-    payloadValid: check5(
-      "session_realtime_entries_payload_check",
-      sql6`octet_length(${table.payload}::text) <= 131072`
-    ),
     turnValid: check5(
       "session_realtime_entries_turn_check",
       sql6`${table.turnId} is null
@@ -3193,10 +3448,10 @@ var sessionSpawnDenials = pgTable6(
     workspaceId: uuid6("workspace_id").notNull(),
     parentSessionId: uuid6("parent_session_id"),
     rootSessionId: uuid6("root_session_id"),
-    currentDepth: integer6("current_depth").notNull(),
+    currentDepth: integer7("current_depth").notNull(),
     attemptedDepth: bigint4("attempted_depth", { mode: "number" }).notNull(),
-    effectiveMaxNestedAgentDepth: integer6("effective_max_nested_agent_depth").notNull(),
-    requestedMaxNestedAgentDepthOverride: integer6("requested_max_nested_agent_depth_override"),
+    effectiveMaxNestedAgentDepth: integer7("effective_max_nested_agent_depth").notNull(),
+    requestedMaxNestedAgentDepthOverride: integer7("requested_max_nested_agent_depth_override"),
     policySource: text6("policy_source").notNull(),
     policySessionId: uuid6("policy_session_id"),
     subjectId: text6("subject_id"),
@@ -3240,7 +3495,7 @@ var sessionPins = pgTable6(
     // unpin+re-pin that would otherwise recreate version 1.
     pinned: boolean4("pinned").notNull().default(true),
     pinnedAt: timestamp6("pinned_at", { withTimezone: true }).defaultNow(),
-    version: integer6("version").notNull().default(1)
+    version: integer7("version").notNull().default(1)
   },
   (table) => ({
     subjectNonempty: check5(
@@ -3326,7 +3581,7 @@ var sessionMcpServers = pgTable6(
     name: text6("name"),
     url: text6("url").notNull(),
     allowedTools: jsonb6("allowed_tools").$type(),
-    timeoutMs: integer6("timeout_ms"),
+    timeoutMs: integer7("timeout_ms"),
     cacheToolsList: boolean4("cache_tools_list").notNull().default(false),
     // Human-approval policy: `true` = every tool requires approval, a string[] of
     // UNPREFIXED tool names = only those require it, null/absent = auto-run.
@@ -3337,7 +3592,7 @@ var sessionMcpServers = pgTable6(
     // Map of header name -> AES-GCM ciphertext. Values are decrypted only by the
     // worker's run-preparation path and never returned by API helpers.
     headersEncrypted: jsonb6("headers_encrypted").$type().notNull().default({}),
-    credentialVersion: integer6("credential_version").notNull().default(1),
+    credentialVersion: integer7("credential_version").notNull().default(1),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -3392,6 +3647,114 @@ var fileUploads = pgTable6(
     status: index6("file_uploads_status_idx").on(table.status)
   })
 );
+var workspaceScreenshotQuotas = pgTable6(
+  "workspace_screenshot_quotas",
+  {
+    workspaceId: uuid6("workspace_id").primaryKey().references(() => workspaces.id, { onDelete: "cascade" }),
+    accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    reservedBytes: bigint4("reserved_bytes", { mode: "number" }).notNull().default(0),
+    readyBytes: bigint4("ready_bytes", { mode: "number" }).notNull().default(0),
+    updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId],
+      name: "workspace_screenshot_quotas_workspace_account_fk"
+    }).onDelete("cascade"),
+    nonnegative: check5(
+      "workspace_screenshot_quotas_nonnegative_chk",
+      sql6`${table.reservedBytes} >= 0 and ${table.readyBytes} >= 0`
+    )
+  })
+);
+var retainedScreenshotArtifacts = pgTable6(
+  "retained_screenshot_artifacts",
+  {
+    // The composite file FK is RESTRICT in migration 0176: only the retained
+    // screenshot lifecycle may remove its backing file after provider cleanup.
+    artifactId: uuid6("artifact_id").primaryKey(),
+    accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    sessionId: uuid6("session_id").references(() => sessions.id, { onDelete: "set null" }),
+    // Turn/attempt foreign keys are installed by migrations 0140/0176.
+    // Those tables are declared later in this monolithic schema module, so
+    // referencing them here would create an eager initialization cycle.
+    turnId: uuid6("turn_id"),
+    attemptId: uuid6("attempt_id"),
+    settlementKey: text6("settlement_key").notNull(),
+    toolCallId: text6("tool_call_id").notNull(),
+    toolOutputId: text6("tool_output_id").notNull(),
+    status: text6("status").$type().notNull().default("pending"),
+    quotaState: text6("quota_state").$type().notNull().default("reserved"),
+    mediaType: text6("media_type").notNull(),
+    sizeBytes: bigint4("size_bytes", { mode: "number" }).notNull(),
+    sha256: text6("sha256").notNull(),
+    width: integer7("width").notNull(),
+    height: integer7("height").notNull(),
+    retentionExpiresAt: timestamp6("retention_expires_at", { withTimezone: true }).notNull(),
+    readyAt: timestamp6("ready_at", { withTimezone: true }),
+    cleanupReason: text6("cleanup_reason"),
+    lastError: text6("last_error"),
+    maintenanceClaimId: uuid6("maintenance_claim_id"),
+    maintenanceClaimedAt: timestamp6("maintenance_claimed_at", { withTimezone: true }),
+    createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    settlementKey: uniqueIndex6("retained_screenshot_artifacts_settlement_key_uq").on(
+      table.settlementKey
+    ),
+    sessionCreated: index6("retained_screenshot_artifacts_session_created_idx").on(
+      table.workspaceId,
+      table.sessionId,
+      table.createdAt,
+      table.artifactId
+    ),
+    readyExpiry: index6("retained_screenshot_artifacts_ready_expiry_idx").on(table.retentionExpiresAt, table.artifactId).where(sql6`${table.status} = 'ready'`),
+    pendingReconcile: index6("retained_screenshot_artifacts_pending_reconcile_idx").on(table.updatedAt, table.artifactId).where(
+      sql6`${table.status} in ('pending', 'reconciling', 'cleanup_queued', 'cleanup_pending')`
+    ),
+    workspaceAccount: foreignKey({
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId],
+      name: "retained_screenshot_artifacts_workspace_account_fk"
+    }).onDelete("cascade"),
+    workspaceFile: foreignKey({
+      columns: [table.workspaceId, table.artifactId],
+      foreignColumns: [files.workspaceId, files.id],
+      name: "retained_screenshot_artifacts_workspace_file_fk"
+    }).onDelete("restrict"),
+    statusValid: check5(
+      "retained_screenshot_artifacts_status_chk",
+      sql6`${table.status} in ('pending', 'reconciling', 'ready', 'cleanup_queued', 'cleanup_pending', 'failed', 'expired', 'deleted')`
+    ),
+    quotaStateValid: check5(
+      "retained_screenshot_artifacts_quota_state_chk",
+      sql6`${table.quotaState} in ('reserved', 'ready', 'released')`
+    ),
+    statusQuotaValid: check5(
+      "retained_screenshot_artifacts_status_quota_chk",
+      sql6`(${table.status} in ('pending', 'reconciling') and ${table.quotaState} = 'reserved')
+        or (${table.status} = 'ready' and ${table.quotaState} = 'ready')
+        or (${table.status} in ('cleanup_queued', 'cleanup_pending') and ${table.quotaState} in ('reserved', 'ready'))
+        or (${table.status} in ('failed', 'expired', 'deleted') and ${table.quotaState} = 'released')`
+    ),
+    claimShapeValid: check5(
+      "retained_screenshot_artifacts_claim_shape_chk",
+      sql6`(${table.status} in ('reconciling', 'cleanup_pending')
+          and ${table.maintenanceClaimId} is not null
+          and ${table.maintenanceClaimedAt} is not null)
+        or (${table.status} not in ('reconciling', 'cleanup_pending')
+          and ${table.maintenanceClaimId} is null
+          and ${table.maintenanceClaimedAt} is null)`
+    ),
+    dimensionsValid: check5(
+      "retained_screenshot_artifacts_dimensions_chk",
+      sql6`${table.width} between 1 and 16384 and ${table.height} between 1 and 16384 and (${table.width}::bigint * ${table.height}::bigint) <= 67108864`
+    )
+  })
+);
 var documentBases = pgTable6(
   "document_bases",
   {
@@ -3422,7 +3785,7 @@ var documents = pgTable6(
     status: text6("status").notNull().default("queued"),
     title: text6("title").notNull(),
     parser: text6("parser").notNull().default("liteparse"),
-    chunkCount: integer6("chunk_count").notNull().default(0),
+    chunkCount: integer7("chunk_count").notNull().default(0),
     error: text6("error"),
     sourceKind: text6("source_kind").notNull().default("manual_upload"),
     sourceUri: text6("source_uri"),
@@ -3525,7 +3888,7 @@ var documentChunks = pgTable6(
     documentId: uuid6("document_id").notNull().references(() => documents.id, { onDelete: "cascade" }),
     baseId: uuid6("base_id").notNull().references(() => documentBases.id, { onDelete: "cascade" }),
     fileId: uuid6("file_id").notNull().references(() => files.id, { onDelete: "restrict" }),
-    chunkIndex: integer6("chunk_index").notNull(),
+    chunkIndex: integer7("chunk_index").notNull(),
     text: text6("text").notNull(),
     metadata: jsonb6("metadata").$type().notNull().default({}),
     authorityKind: text6("authority_kind").notNull().default("workspace"),
@@ -3570,9 +3933,10 @@ var knowledgeMemories = pgTable6(
     status: text6("status").notNull().default("proposed"),
     kind: text6("kind").notNull().default("semantic"),
     scope: text6("scope").notNull().default("workspace"),
-    text: text6("text").notNull(),
+    text: losslessText("text").notNull(),
+    textCodecVersion: losslessCodecVersion("text_codec_version"),
     sourceRefs: jsonb6("source_refs").$type().notNull().default([]),
-    confidence: integer6("confidence").notNull().default(50),
+    confidence: integer7("confidence").notNull().default(50),
     metadata: jsonb6("metadata").$type().notNull().default({}),
     createdBySessionId: uuid6("created_by_session_id").references(() => sessions.id, {
       onDelete: "set null"
@@ -3584,7 +3948,7 @@ var knowledgeMemories = pgTable6(
     embedding: vector("embedding"),
     embeddingModel: text6("embedding_model"),
     pinned: boolean4("pinned").notNull().default(false),
-    usageCount: integer6("usage_count").notNull().default(0),
+    usageCount: integer7("usage_count").notNull().default(0),
     lastUsedAt: timestamp6("last_used_at", { withTimezone: true }),
     // Self-referential supersession chain. FKs live in migration 0045 (ON DELETE SET
     // NULL); declared here as plain columns like the migration-only composite FK.
@@ -3600,7 +3964,7 @@ var knowledgeMemories = pgTable6(
     scopeSessionId: uuid6("scope_session_id"),
     namespace: text6("namespace_key").notNull().default("general"),
     labels: text6("labels").array().notNull().default([]),
-    memoryVersion: integer6("memory_version").notNull().default(1),
+    memoryVersion: integer7("memory_version").notNull().default(1),
     createdByKind: text6("created_by_kind").notNull().default("service"),
     createdBySubjectId: text6("created_by_subject_id").notNull().default("unattributed-legacy"),
     createdByContext: jsonb6("created_by_context").$type().notNull().default({ backfill: true }),
@@ -3667,7 +4031,8 @@ var sessionTurns = pgTable6(
     status: text6("status").notNull(),
     source: text6("source").notNull().default("user"),
     position: bigint4("position", { mode: "number" }).notNull(),
-    prompt: text6("prompt").notNull(),
+    prompt: losslessText("prompt").notNull(),
+    promptCodecVersion: losslessCodecVersion("prompt_codec_version"),
     // Host context for this exact turn. System-level at runtime and deliberately
     // separate from the visible prompt/event payload.
     turnInstructions: text6("turn_instructions"),
@@ -3685,8 +4050,8 @@ var sessionTurns = pgTable6(
     // constrained to the SandboxOs enum (or NULL) in migration 0018.
     sandboxOs: text6("sandbox_os"),
     metadata: jsonb6("metadata").$type().notNull().default({}),
-    version: integer6("version").notNull().default(1),
-    executionGeneration: integer6("execution_generation").notNull().default(0),
+    version: integer7("version").notNull().default(1),
+    executionGeneration: integer7("execution_generation").notNull().default(0),
     // Composite FK to session_turn_attempts is installed by migration 0063.
     // It lives in SQL because attempts carry the reciprocal turn FK and because
     // the claim transaction preallocates this ID before inserting the attempt;
@@ -3712,7 +4077,7 @@ var sessionTurns = pgTable6(
     // Atomic per-turn toolspace call budget counter (migration 0043). Incremented
     // by a single conditional UPDATE at tools/call time; the row lock serializes
     // concurrent reservations so exactly `toolspaceMaxCallsPerTurn` succeed.
-    toolspaceCallCount: integer6("toolspace_call_count").notNull().default(0),
+    toolspaceCallCount: integer7("toolspace_call_count").notNull().default(0),
     startedAt: timestamp6("started_at", { withTimezone: true }),
     finishedAt: timestamp6("finished_at", { withTimezone: true }),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -3745,10 +4110,10 @@ var sessionRealtimeContextProjections = pgTable6(
     sessionId: uuid6("session_id").notNull(),
     turnId: uuid6("turn_id").notNull(),
     context: text6("context"),
-    sourceModeCount: integer6("source_mode_count").notNull(),
-    sourceEntryCount: integer6("source_entry_count").notNull(),
-    includedEntryCount: integer6("included_entry_count").notNull(),
-    omittedEntryCount: integer6("omitted_entry_count").notNull(),
+    sourceModeCount: integer7("source_mode_count").notNull(),
+    sourceEntryCount: integer7("source_entry_count").notNull(),
+    includedEntryCount: integer7("included_entry_count").notNull(),
+    omittedEntryCount: integer7("omitted_entry_count").notNull(),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -3796,7 +4161,7 @@ var sessionTurnAttempts = pgTable6(
     workspaceId: uuid6("workspace_id").notNull(),
     sessionId: uuid6("session_id").notNull(),
     turnId: uuid6("turn_id").notNull(),
-    executionGeneration: integer6("execution_generation").notNull(),
+    executionGeneration: integer7("execution_generation").notNull(),
     state: text6("state").notNull().default("claimed"),
     outcome: text6("outcome"),
     temporalWorkflowId: text6("temporal_workflow_id").notNull(),
@@ -3890,20 +4255,20 @@ var connectorActionRequests = pgTable6(
     sessionId: uuid6("session_id").notNull(),
     turnId: uuid6("turn_id").notNull(),
     creationAttemptId: uuid6("creation_attempt_id").notNull(),
-    creationExecutionGeneration: integer6("creation_execution_generation").notNull(),
+    creationExecutionGeneration: integer7("creation_execution_generation").notNull(),
     executionAttemptId: uuid6("execution_attempt_id"),
-    executionAttemptGeneration: integer6("execution_attempt_generation"),
+    executionAttemptGeneration: integer7("execution_attempt_generation"),
     approvalId: text6("approval_id").notNull(),
     initiatorKind: text6("initiator_kind").$type().notNull(),
     initiatorSubjectId: text6("initiator_subject_id").notNull(),
     connectionId: text6("connection_id").notNull(),
-    connectionVersion: integer6("connection_version"),
+    connectionVersion: integer7("connection_version"),
     serverId: text6("server_id").notNull(),
     toolName: text6("tool_name").notNull(),
     actionName: text6("action_name").notNull(),
     // Attempt-frozen provenance intentionally survives policy deletion.
     policyId: uuid6("policy_id"),
-    policyVersion: integer6("policy_version"),
+    policyVersion: integer7("policy_version"),
     policySource: text6("policy_source").$type().notNull(),
     policyDecision: text6("policy_decision").$type().notNull(),
     actionFingerprint: text6("action_fingerprint").notNull(),
@@ -4000,8 +4365,8 @@ var sessionCommandReceipts = pgTable6(
     appliedControlRevision: bigint4("applied_control_revision", {
       mode: "number"
     }),
-    appliedQueueVersion: integer6("applied_queue_version"),
-    appliedTurnVersion: integer6("applied_turn_version"),
+    appliedQueueVersion: integer7("applied_queue_version"),
+    appliedTurnVersion: integer7("applied_turn_version"),
     appliedDraftRevision: bigint4("applied_draft_revision", { mode: "number" }),
     result: jsonb6("result").$type().notNull().default({}),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -4064,11 +4429,11 @@ var workspaceControlEvents = pgTable6(
     action: text6("action").notNull(),
     automatic: boolean4("automatic").notNull().default(false),
     reason: text6("reason"),
-    reasonOriginalBytes: integer6("reason_original_bytes"),
+    reasonOriginalBytes: integer7("reason_original_bytes"),
     actor: text6("actor").notNull(),
     // Null is the rolling-upgrade shape for untouched, already-bounded legacy
     // rows. New writes and rewritten poison rows carry exact source byte facts.
-    actorOriginalBytes: integer6("actor_original_bytes"),
+    actorOriginalBytes: integer7("actor_original_bytes"),
     occurredAt: timestamp6("occurred_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -4168,7 +4533,7 @@ var composerDrafts = pgTable6(
     reasoningEffort: text6("reasoning_effort").notNull(),
     latencyMode: text6("latency_mode").notNull().default("standard"),
     sourceTurnId: uuid6("source_turn_id"),
-    sourceTurnVersion: integer6("source_turn_version"),
+    sourceTurnVersion: integer7("source_turn_version"),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -4254,8 +4619,10 @@ var sessionSystemUpdates = pgTable6(
     classification: text6("classification").notNull().default("info"),
     sourceId: text6("source_id").notNull(),
     dedupeKey: text6("dedupe_key").notNull(),
-    summary: text6("summary").notNull(),
-    payload: jsonb6("payload").$type().notNull().default({}),
+    summary: losslessText("summary").notNull(),
+    summaryCodecVersion: losslessCodecVersion("summary_codec_version"),
+    payload: losslessJsonb("payload").$type().notNull().default({}),
+    payloadCodecVersion: losslessCodecVersion("payload_codec_version"),
     lineage: jsonb6("lineage").$type().notNull().default({}),
     // Private immutable authority frozen when this machine input is accepted.
     // Public projections intentionally omit connection ids and owner subjects.
@@ -4319,14 +4686,16 @@ var sessionSystemUpdateOutbox = pgTable6(
     kind: text6("kind").notNull(),
     classification: text6("classification").notNull(),
     sourceId: text6("source_id").notNull(),
-    summary: text6("summary").notNull(),
-    payload: jsonb6("payload").$type().notNull().default({}),
+    summary: losslessText("summary").notNull(),
+    summaryCodecVersion: losslessCodecVersion("summary_codec_version"),
+    payload: losslessJsonb("payload").$type().notNull().default({}),
+    payloadCodecVersion: losslessCodecVersion("payload_codec_version"),
     lineage: jsonb6("lineage").$type().notNull().default({}),
     // Exact private authority copied from the causal parent turn in the source
     // terminal transaction. Delivery retries cannot replace this snapshot.
     personalConnectionDelegations: jsonb6("personal_connection_delegations").$type().notNull().default([]),
     status: text6("status").notNull().default("pending"),
-    attempts: integer6("attempts").notNull().default(0),
+    attempts: integer7("attempts").notNull().default(0),
     updateId: uuid6("update_id"),
     lastError: text6("last_error"),
     deliveredAt: timestamp6("delivered_at", { withTimezone: true }),
@@ -4360,7 +4729,7 @@ var sessionWorkflowWakeOutbox = pgTable6(
     deliveredRevision: bigint4("delivered_revision", { mode: "number" }).notNull().default(0),
     controlRevision: bigint4("control_revision", { mode: "number" }).notNull().default(0),
     reason: text6("reason").notNull(),
-    attempts: integer6("attempts").notNull().default(0),
+    attempts: integer7("attempts").notNull().default(0),
     nextAttemptAt: timestamp6("next_attempt_at", { withTimezone: true }).notNull().defaultNow(),
     lastError: text6("last_error"),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -4415,14 +4784,14 @@ var sessionGoals = pgTable6(
     // agent | user_pause | api | no_progress | max_auto_continuations | limits
     createdBy: text6("created_by").notNull().default("api"),
     // api | agent | scheduled_task
-    version: integer6("version").notNull().default(1),
+    version: integer7("version").notNull().default(1),
     // bumped on every set/update; progress signal
-    autoContinuations: integer6("auto_continuations").notNull().default(0),
-    noProgressStreak: integer6("no_progress_streak").notNull().default(0),
-    maxAutoContinuations: integer6("max_auto_continuations"),
+    autoContinuations: integer7("auto_continuations").notNull().default(0),
+    noProgressStreak: integer7("no_progress_streak").notNull().default(0),
+    maxAutoContinuations: integer7("max_auto_continuations"),
     // per-goal override; a configured settings cap (if any) remains the hard ceiling
     lastContinuationTurnId: uuid6("last_continuation_turn_id"),
-    versionAtLastContinuation: integer6("version_at_last_continuation"),
+    versionAtLastContinuation: integer7("version_at_last_continuation"),
     // Postgres owns the continuation obligation. Terminal settlement advances
     // wakeRevision in the same transaction that makes the session idle;
     // materialization advances observedRevision only alongside the one typed
@@ -4460,23 +4829,23 @@ var codexCapacityWaiters = pgTable6(
     sessionId: uuid6("session_id").notNull(),
     goalId: uuid6("goal_id"),
     blockedTurnId: uuid6("blocked_turn_id").notNull(),
-    blockedTurnGeneration: integer6("blocked_turn_generation").notNull(),
+    blockedTurnGeneration: integer7("blocked_turn_generation").notNull(),
     workflowId: text6("workflow_id").notNull(),
-    generation: integer6("generation").notNull().default(1),
+    generation: integer7("generation").notNull().default(1),
     status: text6("status").notNull().default("waiting"),
     // waiting | resumed | superseded
-    goalVersion: integer6("goal_version"),
+    goalVersion: integer7("goal_version"),
     policyHash: text6("policy_hash"),
     earliestResetAt: timestamp6("earliest_reset_at", { withTimezone: true }),
     nextCheckAt: timestamp6("next_check_at", { withTimezone: true }).notNull(),
     resetKind: text6("reset_kind").notNull(),
     // authoritative | bounded_refresh
-    refreshAttempt: integer6("refresh_attempt").notNull().default(0),
+    refreshAttempt: integer7("refresh_attempt").notNull().default(0),
     // Coalescing outbox generation. Every eligibility-affecting mutation bumps
     // wakeRevision. Duplicate/lost Temporal signals are harmless because only
     // the row-locked evaluator moves observedWakeRevision and may enqueue work.
-    wakeRevision: integer6("wake_revision").notNull().default(1),
-    observedWakeRevision: integer6("observed_wake_revision").notNull().default(0),
+    wakeRevision: integer7("wake_revision").notNull().default(1),
+    observedWakeRevision: integer7("observed_wake_revision").notNull().default(0),
     lastWakeReason: text6("last_wake_reason").notNull().default("capacity_wait_armed"),
     resumedUpdateId: uuid6("resumed_update_id"),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -4511,17 +4880,18 @@ var sessionEvents = pgTable6(
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     sessionId: uuid6("session_id").notNull().references(() => sessions.id, { onDelete: "cascade" }),
     turnId: uuid6("turn_id"),
-    turnGeneration: integer6("turn_generation"),
+    turnGeneration: integer7("turn_generation"),
     turnAttemptId: uuid6("turn_attempt_id"),
     turnAssociation: text6("turn_association"),
     duplicateOfEventId: uuid6("duplicate_of_event_id"),
     duplicateReason: text6("duplicate_reason"),
-    sequence: integer6("sequence").notNull(),
+    sequence: integer7("sequence").notNull(),
     type: text6("type").notNull(),
-    payload: jsonb6("payload").$type().notNull().default({}),
+    payload: losslessJsonb("payload").$type().notNull().default({}),
+    payloadCodecVersion: losslessCodecVersion("payload_codec_version"),
     clientEventId: text6("client_event_id"),
     producerId: text6("producer_id"),
-    producerSeq: integer6("producer_seq"),
+    producerSeq: integer7("producer_seq"),
     occurredAt: timestamp6("occurred_at", { withTimezone: true }).notNull().defaultNow(),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -4549,14 +4919,11 @@ var sessionEvents = pgTable6(
       table.type,
       table.sequence
     ),
+    workspaceTurnType: index6("session_events_workspace_turn_type_idx").on(table.workspaceId, table.turnId, table.type).where(sql6`${table.turnId} is not null`),
     monitoringTail: index6("session_events_workspace_session_monitoring_tail_idx").on(table.workspaceId, table.sessionId, table.sequence).where(
       sql6`${table.type} not in ('agent.message.delta', 'agent.reasoning.delta', 'sandbox.command.output.delta', 'terminal.pty.output.delta')`
     ),
     duplicateOfEvent: index6("session_events_duplicate_of_event_idx").on(table.duplicateOfEventId),
-    payloadBytes: check5(
-      "session_events_payload_bytes_check",
-      sql6`octet_length(${table.payload}::text) <= 65536`
-    ),
     typeBytes: check5(
       "session_events_type_bytes_check",
       sql6`octet_length(${table.type}) <= 256 and position(E'\n' in ${table.type}) = 0 and position(E'\r' in ${table.type}) = 0`
@@ -4587,9 +4954,11 @@ var agentRunStates = pgTable6("agent_run_states", {
   turnId: uuid6("turn_id").references(() => sessionTurns.id, {
     onDelete: "set null"
   }),
-  stateVersion: integer6("state_version").notNull(),
-  serializedRunState: text6("serialized_run_state").notNull(),
-  pendingApprovals: jsonb6("pending_approvals").$type().notNull().default([]),
+  stateVersion: integer7("state_version").notNull(),
+  serializedRunState: losslessText("serialized_run_state").notNull(),
+  serializedRunStateCodecVersion: losslessCodecVersion("serialized_run_state_codec_version"),
+  pendingApprovals: losslessJsonb("pending_approvals").$type().notNull().default([]),
+  pendingApprovalsCodecVersion: losslessCodecVersion("pending_approvals_codec_version"),
   // Exact provider rejection marks the latest current-turn receipt only when it
   // was part of the rejected request. The serialized receipt remains durable;
   // recovery builds a temporary view without unusable opaque artifacts.
@@ -4608,7 +4977,7 @@ var sessionHumanInputRequests = pgTable6(
     workspaceId: uuid6("workspace_id").notNull(),
     sessionId: uuid6("session_id").notNull(),
     turnId: uuid6("turn_id").notNull(),
-    turnGeneration: integer6("turn_generation").notNull(),
+    turnGeneration: integer7("turn_generation").notNull(),
     creationAttemptId: uuid6("creation_attempt_id").notNull(),
     toolCallId: text6("tool_call_id").notNull(),
     status: text6("status").notNull().default("pending"),
@@ -4690,7 +5059,8 @@ var sessionHistoryItems = pgTable6(
     // positions; only the summary uses the half-step. `mode: "number"` maps the
     // postgres.js string back to a JS number so every reader stays numeric.
     position: numeric("position", { mode: "number" }).notNull(),
-    item: jsonb6("item").$type().notNull(),
+    item: losslessJsonb("item").$type().notNull(),
+    itemCodecVersion: losslessCodecVersion("item_codec_version"),
     // Live-row flag for client-side context compaction. The read path selects
     // only active rows; a compaction supersedes the summarized prefix (sets this
     // false — never deletes, so the full transcript stays as an audit trail) and
@@ -4725,13 +5095,15 @@ var sessionPendingToolCalls = pgTable6(
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     sessionId: uuid6("session_id").notNull().references(() => sessions.id, { onDelete: "cascade" }),
     turnId: uuid6("turn_id").notNull().references(() => sessionTurns.id, { onDelete: "cascade" }),
-    executionGeneration: integer6("execution_generation").notNull(),
+    executionGeneration: integer7("execution_generation").notNull(),
     attemptId: uuid6("attempt_id").notNull(),
     callId: text6("call_id").notNull(),
     callType: text6("call_type").notNull(),
-    callItem: jsonb6("call_item").$type().notNull(),
-    modelToolOutputTruncationTokens: integer6("model_tool_output_truncation_tokens"),
-    resultItem: jsonb6("result_item").$type(),
+    callItem: losslessJsonb("call_item").$type().notNull(),
+    callItemCodecVersion: losslessCodecVersion("call_item_codec_version"),
+    modelToolOutputTruncationTokens: integer7("model_tool_output_truncation_tokens"),
+    resultItem: losslessJsonb("result_item").$type(),
+    resultItemCodecVersion: losslessCodecVersion("result_item_codec_version"),
     resultRecordedAt: timestamp6("result_recorded_at", { withTimezone: true }),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -4760,7 +5132,8 @@ var sandboxSessionEnvelopes = pgTable6(
     accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     sessionId: uuid6("session_id").notNull().references(() => sessions.id, { onDelete: "cascade" }),
-    envelope: jsonb6("envelope").$type().notNull(),
+    envelope: losslessJsonb("envelope").$type().notNull(),
+    envelopeCodecVersion: losslessCodecVersion("envelope_codec_version"),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -4788,9 +5161,9 @@ var sandboxCheckpointArtifacts = pgTable6(
     workspaceId: uuid6("workspace_id").notNull(),
     sandboxGroupId: uuid6("sandbox_group_id").notNull(),
     sourceLeaseId: uuid6("source_lease_id").notNull(),
-    sourceLeaseEpoch: integer6("source_lease_epoch").notNull(),
+    sourceLeaseEpoch: integer7("source_lease_epoch").notNull(),
     sourceInstanceId: text6("source_instance_id"),
-    sourceWorkspaceGeneration: integer6("source_workspace_generation"),
+    sourceWorkspaceGeneration: integer7("source_workspace_generation"),
     provenance: text6("provenance", {
       enum: ["native_capture", "legacy_provider_adopted"]
     }).notNull(),
@@ -4803,12 +5176,12 @@ var sandboxCheckpointArtifacts = pgTable6(
     objectId: text6("object_id").notNull(),
     archiveBase64: text6("archive_base64").notNull(),
     archiveSha256: text6("archive_sha256").notNull(),
-    archiveBytes: integer6("archive_bytes").notNull(),
+    archiveBytes: integer7("archive_bytes").notNull(),
     descriptor: jsonb6("descriptor").$type().notNull(),
     descriptorRevision: text6("descriptor_revision").notNull(),
     state: text6("state", { enum: sandboxCheckpointArtifactStateValues }).notNull().default("candidate"),
     deleteAfter: timestamp6("delete_after", { withTimezone: true }),
-    deleteAttempts: integer6("delete_attempts").notNull().default(0),
+    deleteAttempts: integer7("delete_attempts").notNull().default(0),
     deleteClaimId: uuid6("delete_claim_id"),
     deleteClaimedAt: timestamp6("delete_claimed_at", { withTimezone: true }),
     lastDeleteError: text6("last_delete_error"),
@@ -4896,9 +5269,9 @@ var sandboxLeases = pgTable6(
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     sandboxGroupId: uuid6("sandbox_group_id").notNull(),
     liveness: text6("liveness", { enum: sandboxLeaseLivenessValues }).notNull().default("cold"),
-    refcount: integer6("refcount").notNull().default(0),
-    turnHolders: integer6("turn_holders").notNull().default(0),
-    viewerHolders: integer6("viewer_holders").notNull().default(0),
+    refcount: integer7("refcount").notNull().default(0),
+    turnHolders: integer7("turn_holders").notNull().default(0),
+    viewerHolders: integer7("viewer_holders").notNull().default(0),
     instanceId: text6("instance_id"),
     backend: text6("backend").notNull(),
     os: text6("os").notNull().default("linux"),
@@ -4928,21 +5301,21 @@ var sandboxLeases = pgTable6(
     // JS STRING from postgres-js, breaking the strict epoch-fence comparison (it
     // was always-true → every turn fenced); int4 returns a JS number, the fix.
     // Epochs never approach 2^31, so the narrower type loses nothing.
-    leaseEpoch: integer6("lease_epoch").notNull().default(0),
+    leaseEpoch: integer7("lease_epoch").notNull().default(0),
     // Monotonic mutation intent for the live workspace. Every acknowledged
     // filesystem-writing operation advances this under the exact lease epoch +
     // provider-instance fence BEFORE it reaches the provider. A verified
     // archive fold copies the exact captured value into archive_generation in
     // the same row update; equality is the only durable completeness proof.
-    workspaceGeneration: integer6("workspace_generation").notNull().default(0),
-    archiveGeneration: integer6("archive_generation"),
+    workspaceGeneration: integer7("workspace_generation").notNull().default(0),
+    archiveGeneration: integer7("archive_generation"),
     // Provider-native capture may pause the live box. The exact claim is
     // acquired before provider I/O and cleared only after that capture settles;
     // new holders and workspace mutations fence on it. The SQL constraint also
     // requires the claimed generation to remain current, so an unaware writer
     // cannot advance generation through an active capture.
     archiveCaptureId: uuid6("archive_capture_id"),
-    archiveCaptureGeneration: integer6("archive_capture_generation"),
+    archiveCaptureGeneration: integer7("archive_capture_generation"),
     archiveCaptureStartedAt: timestamp6("archive_capture_started_at", {
       withTimezone: true
     }),
@@ -4957,7 +5330,7 @@ var sandboxLeases = pgTable6(
     // idempotency tick (warm_seconds accrued idempotent on
     // (sandbox_group_id, lease_epoch, last_meter_tick) in P2.1).
     lastMeterAt: timestamp6("last_meter_at", { withTimezone: true }),
-    lastMeterTick: integer6("last_meter_tick").notNull().default(0),
+    lastMeterTick: integer7("last_meter_tick").notNull().default(0),
     providerCreatedAt: timestamp6("provider_created_at", { withTimezone: true }),
     providerDeadlineAt: timestamp6("provider_deadline_at", {
       withTimezone: true
@@ -5090,12 +5463,12 @@ var sandboxWorkspaceMutationAdmissions = pgTable6(
     // requests and retained processes never invent a turn or quiescence owner.
     turnId: uuid6("turn_id"),
     attemptId: uuid6("attempt_id"),
-    executionGeneration: integer6("execution_generation"),
+    executionGeneration: integer7("execution_generation"),
     holderKind: text6("holder_kind", {
       enum: sandboxWorkspaceMutationHolderKindValues
     }).notNull(),
     holderId: text6("holder_id").notNull(),
-    leaseEpoch: integer6("lease_epoch").notNull(),
+    leaseEpoch: integer7("lease_epoch").notNull(),
     providerBackend: text6("provider_backend").notNull(),
     providerInstanceId: text6("provider_instance_id").notNull(),
     routeKind: text6("route_kind", { enum: ["home", "active"] }).notNull(),
@@ -5103,8 +5476,8 @@ var sandboxWorkspaceMutationAdmissions = pgTable6(
     // target is pinned together with the active pointer epoch observed when the
     // operation was admitted.
     routeTargetId: uuid6("route_target_id"),
-    routeEpoch: integer6("route_epoch").notNull(),
-    workspaceGeneration: integer6("workspace_generation").notNull(),
+    routeEpoch: integer7("route_epoch").notNull(),
+    workspaceGeneration: integer7("workspace_generation").notNull(),
     operation: text6("operation").notNull(),
     providerOutcome: text6("provider_outcome", {
       enum: ["resolved", "rejected", "retained"]
@@ -5226,8 +5599,8 @@ var sandboxRetainedProcesses = pgTable6(
     ownerActorId: uuid6("owner_actor_id").notNull(),
     ownerTurnId: uuid6("owner_turn_id"),
     ownerAttemptId: uuid6("owner_attempt_id"),
-    ownerExecutionGeneration: integer6("owner_execution_generation"),
-    leaseEpoch: integer6("lease_epoch").notNull(),
+    ownerExecutionGeneration: integer7("owner_execution_generation"),
+    leaseEpoch: integer7("lease_epoch").notNull(),
     providerBackend: text6("provider_backend").notNull(),
     providerInstanceId: text6("provider_instance_id").notNull(),
     // Provider object ids are namespace-scoped. New Modal processes bind the
@@ -5237,10 +5610,10 @@ var sandboxRetainedProcesses = pgTable6(
     providerBinding: jsonb6("provider_binding").$type(),
     routeKind: text6("route_kind", { enum: ["home", "active"] }).notNull(),
     routeTargetId: uuid6("route_target_id"),
-    routeEpoch: integer6("route_epoch").notNull(),
-    providerSessionId: integer6("provider_session_id").notNull(),
+    routeEpoch: integer7("route_epoch").notNull(),
+    providerSessionId: integer7("provider_session_id").notNull(),
     state: text6("state", { enum: sandboxRetainedProcessStateValues }).notNull().default("active"),
-    exitCode: integer6("exit_code"),
+    exitCode: integer7("exit_code"),
     settlementReason: text6("settlement_reason"),
     startedAt: timestamp6("started_at", { withTimezone: true }).notNull().defaultNow(),
     settledAt: timestamp6("settled_at", { withTimezone: true }),
@@ -5251,10 +5624,10 @@ var sandboxRetainedProcesses = pgTable6(
     reconcileAfter: timestamp6("reconcile_after", { withTimezone: true }).notNull().defaultNow(),
     reconcileClaimId: uuid6("reconcile_claim_id"),
     reconcileClaimedAt: timestamp6("reconcile_claimed_at", { withTimezone: true }),
-    reconcileAttempts: integer6("reconcile_attempts").notNull().default(0),
+    reconcileAttempts: integer7("reconcile_attempts").notNull().default(0),
     lastReconcileOutcome: text6("last_reconcile_outcome"),
     reconcileProofOutcome: text6("reconcile_proof_outcome", { enum: ["exited", "lost"] }),
-    reconcileProofExitCode: integer6("reconcile_proof_exit_code"),
+    reconcileProofExitCode: integer7("reconcile_proof_exit_code"),
     reconcileProofReason: text6("reconcile_proof_reason"),
     reconcileProofObservedAt: timestamp6("reconcile_proof_observed_at", { withTimezone: true })
   },
@@ -5432,9 +5805,10 @@ var sessionRecordings = pgTable6(
     storageKey: text6("storage_key"),
     sizeBytes: bigint4("size_bytes", { mode: "number" }),
     durationSeconds: numeric("duration_seconds").$type(),
-    width: integer6("width").notNull(),
-    height: integer6("height").notNull(),
-    reason: text6("reason"),
+    width: integer7("width").notNull(),
+    height: integer7("height").notNull(),
+    reason: losslessText("reason"),
+    reasonCodecVersion: losslessCodecVersion("reason_codec_version"),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     finalizedAt: timestamp6("finalized_at", { withTimezone: true })
   },
@@ -5457,7 +5831,7 @@ var workspaceCaptures = pgTable6(
       onDelete: "set null"
     }),
     revision: bigint4("revision", { mode: "number" }).notNull(),
-    leaseEpoch: integer6("lease_epoch").notNull(),
+    leaseEpoch: integer7("lease_epoch").notNull(),
     // 'available' on a committed capture. 'failed' reserved for a future two-phase
     // write; the current synchronous capture only ever inserts 'available'.
     state: text6("state", { enum: ["available", "failed"] }).notNull().default("available"),
@@ -5497,15 +5871,15 @@ var sandboxPtySessions = pgTable6(
     retainedProcessId: uuid6("retained_process_id"),
     openAdmissionId: uuid6("open_admission_id"),
     // Copied provider locator for the adopted retained process.
-    execSessionId: integer6("exec_session_id"),
-    leaseEpoch: integer6("lease_epoch").notNull(),
+    execSessionId: integer7("exec_session_id"),
+    leaseEpoch: integer7("lease_epoch").notNull(),
     providerBackend: text6("provider_backend"),
     providerInstanceId: text6("provider_instance_id"),
     routeKind: text6("route_kind", { enum: ["home", "active"] }),
     routeTargetId: uuid6("route_target_id"),
-    routeEpoch: integer6("route_epoch"),
-    cols: integer6("cols").notNull(),
-    rows: integer6("rows").notNull(),
+    routeEpoch: integer7("route_epoch"),
+    cols: integer7("cols").notNull(),
+    rows: integer7("rows").notNull(),
     shell: text6("shell").notNull(),
     cwd: text6("cwd").notNull(),
     status: text6("status").notNull().default("open"),
@@ -5583,6 +5957,10 @@ var enrollments = pgTable6(
     desktopUnavailableReason: text6("desktop_unavailable_reason"),
     allowScreenControl: boolean4("allow_screen_control").notNull().default(false),
     status: text6("status", { enum: enrollmentStatusValues }).notNull().default("active"),
+    // Credential-family fence. Existing rows/migration-era bearers are generation
+    // 1; every successful re-enrollment increments this atomically before a new
+    // bearer is signed. Auth and self-revoke require an exact row/claim match.
+    credentialGeneration: integer7("credential_generation").notNull().default(1),
     os: text6("os", { enum: enrollmentOsValues }).notNull().default("linux"),
     arch: text6("arch").notNull().default("x86_64"),
     // Heartbeat liveness cursor. Null until the first connect.
@@ -5609,6 +5987,55 @@ var enrollments = pgTable6(
     workspaceStatus: index6("enrollments_workspace_status_idx").on(table.workspaceId, table.status)
   })
 );
+var machineRemovalOperationOutcomeValues = [
+  "removed",
+  "already_removed",
+  "blocked"
+];
+var machineRemovalOperations = pgTable6(
+  "machine_removal_operations",
+  {
+    id: uuid6("id").primaryKey().defaultRandom(),
+    accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
+    workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    enrollmentId: uuid6("enrollment_id").notNull().references(() => enrollments.id, { onDelete: "restrict" }),
+    operationKey: text6("operation_key").notNull(),
+    requestFingerprint: text6("request_fingerprint").notNull(),
+    outcome: text6("outcome", { enum: machineRemovalOperationOutcomeValues }).notNull(),
+    result: jsonb6("result").$type().notNull().default({}),
+    createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    workspaceAccount: foreignKey({
+      name: "machine_removal_operations_workspace_account_fk",
+      columns: [table.workspaceId, table.accountId],
+      foreignColumns: [workspaces.id, workspaces.accountId]
+    }).onDelete("cascade"),
+    workspaceOperation: uniqueIndex6("machine_removal_operations_workspace_operation_uq").on(
+      table.workspaceId,
+      table.operationKey
+    ),
+    workspaceIdentity: uniqueIndex6("machine_removal_operations_workspace_id_uq").on(
+      table.workspaceId,
+      table.id
+    ),
+    enrollmentTimeline: index6("machine_removal_operations_enrollment_created_idx").on(
+      table.workspaceId,
+      table.enrollmentId,
+      table.createdAt
+    ),
+    requestFingerprintValid: check5(
+      "machine_removal_operations_request_fingerprint_chk",
+      sql6`${table.requestFingerprint} ~ '^[0-9a-f]{64}$'`
+    ),
+    operationKeyValid: check5(
+      "machine_removal_operations_operation_key_chk",
+      sql6`length(btrim(${table.operationKey})) between 1 and 200
+        and ${table.operationKey} = btrim(${table.operationKey})`
+    )
+  })
+);
 var deviceEnrollmentStatusValues = ["pending", "approved", "denied", "consumed"];
 var deviceEnrollmentRequests = pgTable6(
   "device_enrollment_requests",
@@ -5837,7 +6264,7 @@ var githubInstallations = pgTable6(
     id: uuid6("id").primaryKey().defaultRandom(),
     accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    installationId: integer6("installation_id").notNull(),
+    installationId: integer7("installation_id").notNull(),
     githubAccountId: bigint4("github_account_id", { mode: "number" }),
     accountLogin: text6("account_login"),
     accountType: text6("account_type"),
@@ -5918,7 +6345,7 @@ var githubInstallationRepositories = pgTable6(
     id: uuid6("id").primaryKey().defaultRandom(),
     accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    installationId: integer6("installation_id").notNull(),
+    installationId: integer7("installation_id").notNull(),
     repositoryId: bigint4("repository_id", { mode: "number" }).notNull(),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -6104,7 +6531,7 @@ var modelCallFacts = pgTable6(
 var hostExportConfig = pgTable6(
   "host_export_config",
   {
-    id: integer6("id").primaryKey().default(1),
+    id: integer7("id").primaryKey().default(1),
     sessionEventsEnabled: boolean4("session_events_enabled").notNull().default(false),
     usageEventsEnabled: boolean4("usage_events_enabled").notNull().default(false),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -6125,9 +6552,9 @@ var hostExportOutbox = pgTable6(
     sessionId: uuid6("session_id"),
     rootSessionId: uuid6("root_session_id"),
     turnId: uuid6("turn_id"),
-    turnGeneration: integer6("turn_generation"),
+    turnGeneration: integer7("turn_generation"),
     turnAttemptId: uuid6("turn_attempt_id"),
-    sessionSequence: integer6("session_sequence"),
+    sessionSequence: integer7("session_sequence"),
     clientEventId: text6("client_event_id"),
     turnAssociation: text6("turn_association"),
     duplicateOfEventId: uuid6("duplicate_of_event_id"),
@@ -6138,7 +6565,8 @@ var hostExportOutbox = pgTable6(
     initiatorContext: jsonb6("initiator_context").$type().notNull().default({}),
     origin: text6("origin"),
     payload: jsonb6("payload").$type().notNull(),
-    envelopeBytes: integer6("envelope_bytes").notNull(),
+    payloadCodecVersion: losslessCodecVersion("payload_codec_version"),
+    envelopeBytes: integer7("envelope_bytes").notNull(),
     occurredAt: timestamp6("occurred_at", { withTimezone: true }).notNull(),
     sourceRecordedAt: timestamp6("source_recorded_at", { withTimezone: true }).notNull(),
     enqueuedAt: timestamp6("enqueued_at", { withTimezone: true }).notNull()
@@ -6201,9 +6629,10 @@ var hostExportConsumers = pgTable6(
     leaseExpiresAt: timestamp6("lease_expires_at", { withTimezone: true }),
     leaseFrom: bigint4("lease_from", { mode: "bigint" }),
     leaseThrough: bigint4("lease_through", { mode: "bigint" }),
-    consecutiveFailures: integer6("consecutive_failures").notNull().default(0),
+    consecutiveFailures: integer7("consecutive_failures").notNull().default(0),
     nextAttemptAt: timestamp6("next_attempt_at", { withTimezone: true }).notNull().defaultNow(),
     lastError: text6("last_error"),
+    lastErrorCodecVersion: losslessCodecVersion("last_error_codec_version"),
     lastErrorAt: timestamp6("last_error_at", { withTimezone: true }),
     blockedAt: timestamp6("blocked_at", { withTimezone: true }),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -6235,7 +6664,9 @@ var hostExportDeadLetters = pgTable6(
     exportCursor: bigint4("export_cursor", { mode: "bigint" }).notNull(),
     sourceId: uuid6("source_id").notNull(),
     reason: text6("reason").notNull(),
-    envelope: jsonb6("envelope").$type().notNull(),
+    envelope: losslessJsonb("envelope").$type().notNull(),
+    envelopeCodecVersion: losslessCodecVersion("envelope_codec_version"),
+    eventPayloadCodecVersion: losslessCodecVersion("event_payload_codec_version"),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -6328,7 +6759,8 @@ var auditEvents = pgTable6(
     action: text6("action").notNull(),
     targetType: text6("target_type"),
     targetId: text6("target_id"),
-    metadata: jsonb6("metadata").$type().notNull().default({}),
+    metadata: losslessJsonb("metadata").$type().notNull().default({}),
+    metadataCodecVersion: losslessCodecVersion("metadata_codec_version"),
     occurredAt: timestamp6("occurred_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => ({
@@ -6385,11 +6817,11 @@ var importBatches = pgTable6(
     snapshotDate: timestamp6("snapshot_date", { withTimezone: true }).notNull(),
     snapshotRef: text6("snapshot_ref"),
     attributionNote: text6("attribution_note").notNull(),
-    importedCount: integer6("imported_count").notNull().default(0),
-    skippedCount: integer6("skipped_count").notNull().default(0),
-    quarantinedCount: integer6("quarantined_count").notNull().default(0),
-    logoFailureCount: integer6("logo_failure_count").notNull().default(0),
-    staleCount: integer6("stale_count").notNull().default(0),
+    importedCount: integer7("imported_count").notNull().default(0),
+    skippedCount: integer7("skipped_count").notNull().default(0),
+    quarantinedCount: integer7("quarantined_count").notNull().default(0),
+    logoFailureCount: integer7("logo_failure_count").notNull().default(0),
+    staleCount: integer7("stale_count").notNull().default(0),
     details: jsonb6("details").$type().notNull().default({}),
     createdAt: timestamp6("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp6("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -6590,7 +7022,7 @@ var rigVersions = pgTable6(
     accountId: uuid6("account_id").notNull().references(() => managedAccounts.id, { onDelete: "cascade" }),
     workspaceId: uuid6("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     rigId: uuid6("rig_id").notNull().references(() => rigs.id, { onDelete: "cascade" }),
-    version: integer6("version").notNull(),
+    version: integer7("version").notNull(),
     image: text6("image"),
     setupScript: text6("setup_script"),
     // Self-declared health checks: [{ name, command }].
@@ -6627,11 +7059,13 @@ var rigChanges = pgTable6(
     }),
     // 'setup_append' | 'definition_edit' (CHECK in migration 0047).
     kind: text6("kind").notNull(),
-    payload: jsonb6("payload").$type().notNull(),
+    payload: losslessJsonb("payload").$type().notNull(),
+    payloadCodecVersion: losslessCodecVersion("payload_codec_version"),
     // 'proposed' | 'verifying' | 'merged' | 'rejected' | 'failed' (CHECK in 0047).
     status: text6("status").notNull().default("proposed"),
     proposedBy: text6("proposed_by"),
-    verification: jsonb6("verification").$type(),
+    verification: losslessJsonb("verification").$type(),
+    verificationCodecVersion: losslessCodecVersion("verification_codec_version"),
     resultVersionId: uuid6("result_version_id").references(() => rigVersions.id, {
       onDelete: "set null"
     }),
@@ -6649,6 +7083,13 @@ var rigChanges = pgTable6(
 );
 
 export {
+  LOSSLESS_CONTENT_CODEC_VERSION,
+  LOSSLESS_CONTENT_WRITER_APPLICATION_NAME,
+  withLosslessContentWriteVersion,
+  LOSSLESS_TEXT_PREFIX,
+  fromPostgresLosslessJson,
+  toPostgresLosslessText,
+  fromPostgresLosslessText,
   workspaceInstructionPolicyRevisions,
   workspaceInstructionPolicyHeads,
   workspaceInstructionPolicyActivationEvents,
@@ -6723,6 +7164,8 @@ export {
   sessionMcpServers,
   files,
   fileUploads,
+  workspaceScreenshotQuotas,
+  retainedScreenshotArtifacts,
   documentBases,
   documents,
   documentChunks,
@@ -6768,6 +7211,8 @@ export {
   enrollmentOsValues,
   sandboxKindValues,
   enrollments,
+  machineRemovalOperationOutcomeValues,
+  machineRemovalOperations,
   deviceEnrollmentStatusValues,
   deviceEnrollmentRequests,
   sandboxes,
@@ -6800,4 +7245,4 @@ export {
   rigChanges,
   schema_exports
 };
-//# sourceMappingURL=chunk-HT5T62CC.js.map
+//# sourceMappingURL=chunk-P6CUHXQZ.js.map