@opengeni/db 0.28.9 → 0.36.0

package/drizzle/0226_personal_codex_authority_foundation.sql

@@ -0,0 +1,365 @@
+-- deployment-mode: rolling
+-- Add the inert, expand-only personal Codex provider-account authority
+-- foundation. Existing credentials and accepted work are explicitly
+-- workspace-scoped. No runtime path discovers, creates, selects, leases,
+-- materializes, consumes, or reports a user-scoped credential in this slice.
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '10min';
+
+-- Stable tuple lookup for the credential-side validation trigger. This adds no
+-- privilege and does not change the FORCE-RLS lifecycle of the authority table.
+CREATE UNIQUE INDEX IF NOT EXISTS "organization_user_resource_authorities_codex_tuple_idx"
+  ON "organization_user_resource_authorities" (
+    "id",
+    "account_id",
+    "organization_membership_id",
+    "resource_kind",
+    "resource_id",
+    "generation"
+  );
+
+ALTER TABLE "codex_subscription_credentials"
+  ADD COLUMN "authority_scope" text,
+  ADD COLUMN "owner_organization_membership_id" uuid,
+  ADD COLUMN "organization_user_resource_authority_id" uuid,
+  ADD COLUMN "organization_user_resource_kind" text,
+  ADD COLUMN "organization_user_resource_authority_generation" bigint;
+
+-- This UPDATE is intentionally explicit rather than relying on an ADD COLUMN
+-- default: every pre-foundation provider account is classified workspace-only.
+UPDATE "codex_subscription_credentials"
+SET "authority_scope" = 'workspace'
+WHERE "authority_scope" IS NULL;
+
+ALTER TABLE "codex_subscription_credentials"
+  ALTER COLUMN "authority_scope" SET DEFAULT 'workspace',
+  ALTER COLUMN "authority_scope" SET NOT NULL,
+  ADD CONSTRAINT "codex_credentials_authority_scope_chk" CHECK (
+    "authority_scope" IN ('workspace', 'user')
+  ) NOT VALID,
+  ADD CONSTRAINT "codex_credentials_authority_shape_chk" CHECK (
+    (
+      "authority_scope" = 'workspace'
+      AND "owner_organization_membership_id" IS NULL
+      AND "organization_user_resource_authority_id" IS NULL
+      AND "organization_user_resource_kind" IS NULL
+      AND "organization_user_resource_authority_generation" IS NULL
+    ) OR (
+      "authority_scope" = 'user'
+      AND "owner_organization_membership_id" IS NOT NULL
+      AND "organization_user_resource_authority_id" IS NOT NULL
+      AND "organization_user_resource_kind" = 'codex_subscription'
+      AND "organization_user_resource_authority_generation" IS NOT NULL
+      AND "organization_user_resource_authority_generation" > 0
+    )
+  ) NOT VALID,
+  ADD CONSTRAINT "codex_credentials_owner_membership_fk"
+    FOREIGN KEY ("owner_organization_membership_id", "account_id")
+    REFERENCES "organization_memberships"("id", "account_id")
+    ON DELETE RESTRICT NOT VALID,
+  ADD CONSTRAINT "codex_credentials_user_authority_fk"
+    FOREIGN KEY (
+      "organization_user_resource_authority_id",
+      "account_id",
+      "owner_organization_membership_id",
+      "organization_user_resource_kind",
+      "id",
+      "organization_user_resource_authority_generation"
+    )
+    REFERENCES "organization_user_resource_authorities"(
+      "id",
+      "account_id",
+      "organization_membership_id",
+      "resource_kind",
+      "resource_id",
+      "generation"
+    )
+    ON DELETE RESTRICT NOT VALID;
+
+ALTER TABLE "codex_subscription_credentials"
+  VALIDATE CONSTRAINT "codex_credentials_authority_scope_chk",
+  VALIDATE CONSTRAINT "codex_credentials_authority_shape_chk",
+  VALIDATE CONSTRAINT "codex_credentials_owner_membership_fk",
+  VALIDATE CONSTRAINT "codex_credentials_user_authority_fk";
+
+DO $personal_codex_authority_validation$
+DECLARE
+  data_schema text := current_schema();
+BEGIN
+  EXECUTE format($ddl$
+    CREATE OR REPLACE FUNCTION %1$I.validate_personal_codex_credential_authority()
+    RETURNS trigger
+    LANGUAGE plpgsql
+    AS $body$
+    DECLARE
+      exact_authority boolean;
+    BEGIN
+      IF NEW.authority_scope = 'workspace' THEN
+        RETURN NEW;
+      END IF;
+
+      -- Invoker rights are deliberate in this inert slice. The ordinary app
+      -- role has no direct visibility into either organization authority table,
+      -- so it cannot manufacture a user-scoped credential. A later activation
+      -- slice must introduce a separately reviewed narrow lifecycle capability.
+      SELECT true
+      INTO exact_authority
+      FROM %1$I.organization_memberships membership
+      INNER JOIN %1$I.organization_user_resource_authorities authority
+        ON authority.id = NEW.organization_user_resource_authority_id
+       AND authority.account_id = membership.account_id
+       AND authority.organization_membership_id = membership.id
+      WHERE membership.id = NEW.owner_organization_membership_id
+        AND membership.account_id = NEW.account_id
+        AND membership.status = 'active'
+        AND membership.revoked_at IS NULL
+        AND authority.resource_kind = 'codex_subscription'
+        AND authority.resource_id = NEW.id
+        AND authority.generation = NEW.organization_user_resource_authority_generation
+        AND authority.status = 'active'
+        AND authority.revoked_at IS NULL
+      FOR KEY SHARE OF membership, authority;
+
+      IF exact_authority IS DISTINCT FROM true THEN
+        RAISE EXCEPTION 'personal Codex credential authority tuple is invalid'
+          USING ERRCODE = '23514';
+      END IF;
+      RETURN NEW;
+    END;
+    $body$;
+  $ddl$, data_schema);
+
+  EXECUTE format(
+    'DROP TRIGGER IF EXISTS codex_credentials_validate_user_authority_trg ON %I.codex_subscription_credentials',
+    data_schema
+  );
+  EXECUTE format($ddl$
+    CREATE TRIGGER codex_credentials_validate_user_authority_trg
+    BEFORE INSERT OR UPDATE OF
+      id,
+      account_id,
+      authority_scope,
+      owner_organization_membership_id,
+      organization_user_resource_authority_id,
+      organization_user_resource_kind,
+      organization_user_resource_authority_generation
+    ON %1$I.codex_subscription_credentials
+    FOR EACH ROW
+    EXECUTE FUNCTION %1$I.validate_personal_codex_credential_authority()
+  $ddl$, data_schema);
+END
+$personal_codex_authority_validation$;
+
+-- One strict identifier-free snapshot shape is shared by the accepted turn,
+-- scheduled task, and internal-update boundaries. The user variant stores only
+-- the positive authority generation; it is not executable authority by itself.
+DO $codex_provider_account_snapshot_validator$
+DECLARE
+  data_schema text := current_schema();
+BEGIN
+  EXECUTE format($ddl$
+    CREATE OR REPLACE FUNCTION %1$I.codex_provider_account_authority_snapshot_v1_valid(
+      snapshot jsonb
+    )
+    RETURNS boolean
+    LANGUAGE sql
+    IMMUTABLE
+    STRICT
+    AS $body$
+      SELECT
+        snapshot = '{"version":1,"scope":"workspace"}'::jsonb
+        OR (
+          jsonb_typeof(snapshot) = 'object'
+          AND (SELECT count(*) FROM jsonb_object_keys(snapshot)) = 3
+          AND snapshot ?& ARRAY['version', 'scope', 'authorityGeneration']
+          AND snapshot -> 'version' = '1'::jsonb
+          AND snapshot ->> 'scope' = 'user'
+          AND jsonb_typeof(snapshot -> 'authorityGeneration') = 'number'
+          AND snapshot ->> 'authorityGeneration' ~ '^[1-9][0-9]*$'
+          AND (snapshot ->> 'authorityGeneration')::numeric <= 9007199254740991
+        )
+    $body$;
+  $ddl$, data_schema);
+END
+$codex_provider_account_snapshot_validator$;
+
+ALTER TABLE "session_turns"
+  ADD COLUMN "codex_provider_account_authority_snapshot" jsonb;
+ALTER TABLE "scheduled_tasks"
+  ADD COLUMN "codex_provider_account_authority_snapshot" jsonb;
+ALTER TABLE "session_system_updates"
+  ADD COLUMN "codex_provider_account_authority_snapshot" jsonb;
+ALTER TABLE "session_system_update_outbox"
+  ADD COLUMN "codex_provider_account_authority_snapshot" jsonb;
+
+UPDATE "session_turns"
+SET "codex_provider_account_authority_snapshot" = '{"version":1,"scope":"workspace"}'::jsonb
+WHERE "codex_provider_account_authority_snapshot" IS NULL;
+UPDATE "scheduled_tasks"
+SET "codex_provider_account_authority_snapshot" = '{"version":1,"scope":"workspace"}'::jsonb
+WHERE "codex_provider_account_authority_snapshot" IS NULL;
+UPDATE "session_system_updates"
+SET "codex_provider_account_authority_snapshot" = '{"version":1,"scope":"workspace"}'::jsonb
+WHERE "codex_provider_account_authority_snapshot" IS NULL;
+UPDATE "session_system_update_outbox"
+SET "codex_provider_account_authority_snapshot" = '{"version":1,"scope":"workspace"}'::jsonb
+WHERE "codex_provider_account_authority_snapshot" IS NULL;
+
+ALTER TABLE "session_turns"
+  ALTER COLUMN "codex_provider_account_authority_snapshot"
+    SET DEFAULT '{"version":1,"scope":"workspace"}'::jsonb,
+  ALTER COLUMN "codex_provider_account_authority_snapshot" SET NOT NULL,
+  ADD CONSTRAINT "session_turns_codex_authority_snapshot_chk" CHECK (
+    codex_provider_account_authority_snapshot_v1_valid(
+      "codex_provider_account_authority_snapshot"
+    )
+  ) NOT VALID;
+ALTER TABLE "scheduled_tasks"
+  ALTER COLUMN "codex_provider_account_authority_snapshot"
+    SET DEFAULT '{"version":1,"scope":"workspace"}'::jsonb,
+  ALTER COLUMN "codex_provider_account_authority_snapshot" SET NOT NULL,
+  ADD CONSTRAINT "scheduled_tasks_codex_authority_snapshot_chk" CHECK (
+    codex_provider_account_authority_snapshot_v1_valid(
+      "codex_provider_account_authority_snapshot"
+    )
+  ) NOT VALID;
+ALTER TABLE "session_system_updates"
+  ALTER COLUMN "codex_provider_account_authority_snapshot"
+    SET DEFAULT '{"version":1,"scope":"workspace"}'::jsonb,
+  ALTER COLUMN "codex_provider_account_authority_snapshot" SET NOT NULL,
+  ADD CONSTRAINT "session_updates_codex_authority_snapshot_chk" CHECK (
+    codex_provider_account_authority_snapshot_v1_valid(
+      "codex_provider_account_authority_snapshot"
+    )
+  ) NOT VALID;
+ALTER TABLE "session_system_update_outbox"
+  ALTER COLUMN "codex_provider_account_authority_snapshot"
+    SET DEFAULT '{"version":1,"scope":"workspace"}'::jsonb,
+  ALTER COLUMN "codex_provider_account_authority_snapshot" SET NOT NULL,
+  ADD CONSTRAINT "system_update_outbox_codex_authority_snapshot_chk" CHECK (
+    codex_provider_account_authority_snapshot_v1_valid(
+      "codex_provider_account_authority_snapshot"
+    )
+  ) NOT VALID;
+
+ALTER TABLE "session_turns"
+  VALIDATE CONSTRAINT "session_turns_codex_authority_snapshot_chk";
+ALTER TABLE "scheduled_tasks"
+  VALIDATE CONSTRAINT "scheduled_tasks_codex_authority_snapshot_chk";
+ALTER TABLE "session_system_updates"
+  VALIDATE CONSTRAINT "session_updates_codex_authority_snapshot_chk";
+ALTER TABLE "session_system_update_outbox"
+  VALIDATE CONSTRAINT "system_update_outbox_codex_authority_snapshot_chk";
+
+DO $codex_provider_account_snapshot_immutability$
+DECLARE
+  data_schema text := current_schema();
+BEGIN
+  EXECUTE format($ddl$
+    CREATE OR REPLACE FUNCTION %1$I.prevent_codex_provider_account_authority_snapshot_mutation()
+    RETURNS trigger
+    LANGUAGE plpgsql
+    AS $body$
+    BEGIN
+      IF NEW.codex_provider_account_authority_snapshot
+        IS DISTINCT FROM OLD.codex_provider_account_authority_snapshot
+      THEN
+        RAISE EXCEPTION '%% Codex provider-account authority snapshot is immutable', TG_TABLE_NAME
+          USING ERRCODE = '23514';
+      END IF;
+      RETURN NEW;
+    END;
+    $body$;
+  $ddl$, data_schema);
+
+  EXECUTE format($ddl$
+    CREATE TRIGGER session_turns_codex_authority_snapshot_immutable_trg
+    BEFORE UPDATE OF codex_provider_account_authority_snapshot
+    ON %1$I.session_turns
+    FOR EACH ROW
+    EXECUTE FUNCTION %1$I.prevent_codex_provider_account_authority_snapshot_mutation()
+  $ddl$, data_schema);
+  EXECUTE format($ddl$
+    CREATE TRIGGER scheduled_tasks_codex_authority_snapshot_immutable_trg
+    BEFORE UPDATE OF codex_provider_account_authority_snapshot
+    ON %1$I.scheduled_tasks
+    FOR EACH ROW
+    EXECUTE FUNCTION %1$I.prevent_codex_provider_account_authority_snapshot_mutation()
+  $ddl$, data_schema);
+  EXECUTE format($ddl$
+    CREATE TRIGGER session_updates_codex_authority_snapshot_immutable_trg
+    BEFORE UPDATE OF codex_provider_account_authority_snapshot
+    ON %1$I.session_system_updates
+    FOR EACH ROW
+    EXECUTE FUNCTION %1$I.prevent_codex_provider_account_authority_snapshot_mutation()
+  $ddl$, data_schema);
+  EXECUTE format($ddl$
+    CREATE TRIGGER system_update_outbox_codex_authority_snapshot_immutable_trg
+    BEFORE UPDATE OF codex_provider_account_authority_snapshot
+    ON %1$I.session_system_update_outbox
+    FOR EACH ROW
+    EXECUTE FUNCTION %1$I.prevent_codex_provider_account_authority_snapshot_mutation()
+  $ddl$, data_schema);
+END
+$codex_provider_account_snapshot_immutability$;
+
+-- Preserve the snapshot across the existing global child-result outbox claim.
+-- Returning one additive column is rolling-safe for old consumers and gives a
+-- future activation slice the exact stored boundary rather than a re-derived
+-- ambient value.
+DROP FUNCTION opengeni_private.claim_session_system_update_outbox(integer);
+CREATE FUNCTION opengeni_private.claim_session_system_update_outbox(p_limit integer)
+RETURNS TABLE (
+  id uuid, account_id uuid, workspace_id uuid, source_session_id uuid,
+  target_session_id uuid, dedupe_key text, kind text, classification text,
+  source_id text, summary text, summary_codec_version integer,
+  payload jsonb, payload_codec_version integer, lineage jsonb,
+  personal_connection_delegations jsonb,
+  codex_provider_account_authority_snapshot jsonb
+)
+LANGUAGE plpgsql
+SECURITY DEFINER
+AS $function$
+BEGIN
+  RETURN QUERY
+    WITH claimed AS (
+      SELECT o.id FROM session_system_update_outbox o
+      WHERE o.status = 'pending'
+      ORDER BY o.created_at, o.id
+      FOR UPDATE SKIP LOCKED
+      LIMIT greatest(1, least(coalesce(p_limit, 100), 100))
+    )
+    UPDATE session_system_update_outbox o
+    SET attempts = o.attempts + 1, updated_at = now()
+    FROM claimed c WHERE o.id = c.id
+    RETURNING o.id, o.account_id, o.workspace_id, o.source_session_id,
+      o.target_session_id, o.dedupe_key, o.kind, o.classification,
+      o.source_id, o.summary, o.summary_codec_version,
+      o.payload, o.payload_codec_version, o.lineage,
+      o.personal_connection_delegations,
+      o.codex_provider_account_authority_snapshot;
+END
+$function$;
+REVOKE ALL ON FUNCTION opengeni_private.claim_session_system_update_outbox(integer) FROM PUBLIC;
+DO $system_update_outbox_role_grant$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT EXECUTE ON FUNCTION opengeni_private.claim_session_system_update_outbox(integer)
+      TO opengeni_app;
+  END IF;
+END
+$system_update_outbox_role_grant$;
+
+COMMENT ON COLUMN "codex_subscription_credentials"."authority_scope" IS
+  'Explicit workspace/user ownership fact. Existing and ordinary runtime-created rows remain workspace.';
+COMMENT ON COLUMN "codex_subscription_credentials"."connected_by_subject_id" IS
+  'Connection audit/redemption attribution only; never Codex credential ownership authority.';
+COMMENT ON COLUMN "session_turns"."codex_provider_account_authority_snapshot" IS
+  'Opaque identifier-free Codex provider-account authority snapshot; inert until a later activation slice.';
+COMMENT ON COLUMN "scheduled_tasks"."codex_provider_account_authority_snapshot" IS
+  'Opaque identifier-free Codex provider-account authority snapshot; legacy and current writers default workspace.';
+COMMENT ON COLUMN "session_system_updates"."codex_provider_account_authority_snapshot" IS
+  'Opaque identifier-free Codex provider-account authority snapshot for an accepted internal update.';
+COMMENT ON COLUMN "session_system_update_outbox"."codex_provider_account_authority_snapshot" IS
+  'Opaque identifier-free Codex provider-account authority snapshot for child-result delivery provenance.';

package/drizzle/0227_slack_native_actions.sql

@@ -0,0 +1,145 @@
+-- deployment-mode: rolling
+
+ALTER TABLE "slack_interactions"
+  ADD COLUMN "initiating_slack_user_id" text;
+
+ALTER TABLE "slack_interaction_inbox"
+  DROP CONSTRAINT "slack_interaction_inbox_trigger_check";
+
+ALTER TABLE "slack_interaction_inbox"
+  ADD CONSTRAINT "slack_interaction_inbox_trigger_check"
+  CHECK (
+    "trigger_kind" IN (
+      'app_mention', 'dm', 'reaction', 'slash_command',
+      'message_shortcut', 'thread_reply', 'block_action'
+    )
+  ) NOT VALID;
+
+ALTER TABLE "slack_interaction_inbox"
+  VALIDATE CONSTRAINT "slack_interaction_inbox_trigger_check";
+
+ALTER TABLE "slack_interactions"
+  ADD CONSTRAINT "slack_interactions_initiating_user_check"
+  CHECK (
+    "initiating_slack_user_id" IS NULL
+    OR octet_length("initiating_slack_user_id") BETWEEN 1 AND 64
+  ) NOT VALID;
+
+ALTER TABLE "slack_interactions"
+  VALIDATE CONSTRAINT "slack_interactions_initiating_user_check";
+
+CREATE TABLE "slack_interaction_action_handles" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "connection_id" uuid NOT NULL REFERENCES "connections"("id") ON DELETE CASCADE,
+  "interaction_id" uuid NOT NULL,
+  "session_id" uuid NOT NULL REFERENCES "sessions"("id") ON DELETE CASCADE,
+  "session_event_sequence" integer NOT NULL,
+  "action_kind" text NOT NULL,
+  "action_key" text NOT NULL,
+  "target_id" text,
+  "target_value" text,
+  "authorized_subject_id" text NOT NULL,
+  "authorized_slack_user_id" text NOT NULL,
+  "message_operation_id" uuid NOT NULL,
+  "status" text NOT NULL DEFAULT 'pending',
+  "result" text,
+  "expires_at" timestamptz NOT NULL,
+  "completed_at" timestamptz,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "slack_interaction_action_handles_interaction_fk"
+    FOREIGN KEY ("account_id", "workspace_id", "interaction_id")
+    REFERENCES "slack_interactions"("account_id", "workspace_id", "id")
+    ON DELETE CASCADE,
+  CONSTRAINT "slack_interaction_action_handles_identity_uq"
+    UNIQUE ("interaction_id", "session_event_sequence", "action_key"),
+  CONSTRAINT "slack_interaction_action_handles_bounds_check" CHECK (
+    "session_event_sequence" >= 0
+    AND octet_length("action_kind") BETWEEN 1 AND 64
+    AND octet_length("action_key") BETWEEN 1 AND 512
+    AND ("target_id" IS NULL OR octet_length("target_id") BETWEEN 1 AND 512)
+    AND ("target_value" IS NULL OR octet_length("target_value") BETWEEN 1 AND 1024)
+    AND octet_length("authorized_subject_id") BETWEEN 1 AND 512
+    AND octet_length("authorized_slack_user_id") BETWEEN 1 AND 64
+    AND "action_kind" IN (
+      'approval_approve', 'approval_reject', 'human_input_select',
+      'human_input_skip', 'session_status', 'session_pause', 'session_resume'
+    )
+    AND "status" IN ('pending', 'completed', 'stale')
+    AND ("result" IS NULL OR octet_length("result") BETWEEN 1 AND 64)
+    AND (
+      ("status" = 'pending' AND "result" IS NULL AND "completed_at" IS NULL)
+      OR ("status" IN ('completed', 'stale') AND "result" IS NOT NULL AND "completed_at" IS NOT NULL)
+    )
+  )
+);
+
+CREATE INDEX "slack_interaction_action_handles_pending_idx"
+  ON "slack_interaction_action_handles" ("workspace_id", "status", "expires_at", "id");
+
+CREATE TABLE "slack_bot_update_operations" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "connection_id" uuid NOT NULL REFERENCES "connections"("id") ON DELETE CASCADE,
+  "operation_id" uuid NOT NULL,
+  "slack_channel_id" text NOT NULL,
+  "slack_message_timestamp" text NOT NULL,
+  "request_digest" text NOT NULL,
+  "status" text NOT NULL,
+  "claim_holder_id" uuid,
+  "claim_expires_at" timestamptz,
+  "attempt_count" integer NOT NULL DEFAULT 0,
+  "last_failure_code" text,
+  "completed_at" timestamptz,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "slack_bot_update_operations_workspace_operation_uq"
+    UNIQUE ("workspace_id", "connection_id", "operation_id"),
+  CONSTRAINT "slack_bot_update_operations_bounds_check" CHECK (
+    octet_length("slack_channel_id") BETWEEN 1 AND 64
+    AND octet_length("slack_message_timestamp") BETWEEN 1 AND 64
+    AND "request_digest" ~ '^[0-9a-f]{64}$'
+    AND "status" IN ('provider_started', 'completed')
+    AND "attempt_count" > 0
+    AND (("claim_holder_id" IS NULL) = ("claim_expires_at" IS NULL))
+    AND (
+      ("status" = 'provider_started' AND "completed_at" IS NULL)
+      OR (
+        "status" = 'completed'
+        AND "claim_holder_id" IS NULL
+        AND "claim_expires_at" IS NULL
+        AND "completed_at" IS NOT NULL
+      )
+    )
+  )
+);
+
+CREATE INDEX "slack_bot_update_operations_workspace_status_idx"
+  ON "slack_bot_update_operations" ("workspace_id", "status", "updated_at");
+
+ALTER TABLE "slack_interaction_action_handles" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "slack_interaction_action_handles" FORCE ROW LEVEL SECURITY;
+ALTER TABLE "slack_bot_update_operations" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "slack_bot_update_operations" FORCE ROW LEVEL SECURITY;
+
+CREATE POLICY workspace_isolation ON "slack_interaction_action_handles"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+
+CREATE POLICY workspace_isolation ON "slack_bot_update_operations"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT SELECT, INSERT, UPDATE, DELETE ON TABLE
+      "slack_interaction_action_handles",
+      "slack_bot_update_operations"
+    TO opengeni_app;
+  END IF;
+END
+$$;

package/drizzle/0228_interaction_controller_data_plane.sql

@@ -0,0 +1,14 @@
+-- deployment-mode: rolling
+-- Cache browserd's provider tunnel separately from desktop and terminal. The
+-- cache is nullable for rolling compatibility and is always fenced by the
+-- lease's epoch + provider instance before publication/use.
+
+ALTER TABLE "sandbox_leases"
+  ADD COLUMN IF NOT EXISTS "controller_data_plane_url" text;
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT SELECT, INSERT, UPDATE, DELETE ON TABLE sandbox_leases TO opengeni_app;
+  END IF;
+END $$;