@opengeni/db 0.31.1 → 0.36.0

package/src/runtime-posture.ts

@@ -48,11 +48,88 @@ const KNOWLEDGE_SOURCE_SYNC_LOCK_AUTHORITY_TABLES = [
   "knowledge_sources",
   "knowledge_source_objects",
 ] as const;
+const MANAGED_HUMAN_PERSONAL_WORKSPACE_ROUTINE =
+  "ensure_managed_human_personal_workspace(uuid, text, uuid)";
+const MANAGED_HUMAN_PERSONAL_WORKSPACE_AUTHORITY_TABLES = [
+  "organization_memberships",
+  "organization_user_retention_policies",
+  "organization_user_resource_authorities",
+  "organization_user_resource_grants",
+] as const;
+const CANONICAL_HUMAN_IDENTITY_ROUTINES = [
+  "ensure_canonical_human_identity(text, text)",
+  "validate_canonical_human_session(text, text, boolean)",
+  "get_canonical_human_identity_projection(text)",
+  "apply_canonical_human_identity_operation(uuid, text, bigint, text, uuid, text, text, text)",
+] as const;
+const CANONICAL_HUMAN_IDENTITY_AUTHORITY_TABLES = [
+  "canonical_human_identities",
+  "canonical_human_identity_subjects",
+  "canonical_human_login_bindings",
+  "canonical_human_identity_operations",
+] as const;
+const SESSION_PRIVATE_ACTOR_VISIBLE_ROUTINE =
+  "session_private_actor_visible(uuid, uuid, uuid, text)";
+const SESSION_REFERENCE_VISIBLE_ROUTINE = "session_reference_visible(uuid, uuid, uuid)";
+const TASK_NOTE_CAPABILITY_ROUTINES = [
+  "create_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, text, text, integer)",
+  "archive_task_note_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, uuid, uuid, integer, text)",
+  "list_task_notes_for_attempt(uuid, uuid, uuid, uuid, uuid, integer, boolean, integer)",
+] as const;
+const TRANSITION_SESSION_VISIBILITY_ROUTINE =
+  "transition_session_visibility(uuid, uuid, uuid, text, text, integer, text, text)";
+const FORK_SESSION_CONTENT_ROUTINE =
+  "fork_session_content(uuid, uuid, uuid, text, uuid, text, text, text)";
+const SESSION_AUTHORITY_ROUTINES = new Set<string>([
+  FORK_SESSION_CONTENT_ROUTINE,
+  SESSION_PRIVATE_ACTOR_VISIBLE_ROUTINE,
+  SESSION_REFERENCE_VISIBLE_ROUTINE,
+  TRANSITION_SESSION_VISIBILITY_ROUTINE,
+  ...TASK_NOTE_CAPABILITY_ROUTINES,
+]);
+const XAI_CREATE_CREDENTIAL_ROUTINE =
+  "create_xai_subscription_credential(uuid, uuid, text, text, text, text, text, text, text, timestamp with time zone)";
+const XAI_DISCONNECT_CREDENTIAL_ROUTINE =
+  "disconnect_xai_subscription_credential(uuid, uuid, text, uuid, jsonb)";
+const XAI_SNAPSHOT_VALIDATOR_ROUTINE = "xai_provider_account_authority_snapshot_v1_valid(jsonb)";
+const XAI_AUTHORITY_LIVE_ROUTINE =
+  "xai_subscription_authority_live(uuid, uuid, text, uuid, text, uuid, uuid, bigint)";
+const XAI_POOL_VISIBLE_ROUTINE = "xai_subscription_pool_visible(uuid, uuid, text, text, uuid)";
+const XAI_RESOLVE_POOL_ROUTINE = "resolve_xai_authority_pool(uuid, uuid, text, jsonb)";
+const XAI_REVALIDATE_CREDENTIAL_ROUTINE =
+  "revalidate_xai_subscription_authority(uuid, text, uuid, jsonb)";
+const XAI_AUTHORITY_TABLES = [
+  "organization_memberships",
+  "organization_user_resource_authorities",
+  "workspace_memberships",
+  "xai_subscription_credentials",
+] as const;
 
 export const RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES = [
+  FORK_SESSION_CONTENT_ROUTINE,
+  XAI_AUTHORITY_LIVE_ROUTINE,
+  XAI_CREATE_CREDENTIAL_ROUTINE,
+  XAI_DISCONNECT_CREDENTIAL_ROUTINE,
   KNOWLEDGE_SOURCE_SYNC_LOCK_AUTHORITY_ROUTINE,
+  MANAGED_HUMAN_PERSONAL_WORKSPACE_ROUTINE,
+  ...CANONICAL_HUMAN_IDENTITY_ROUTINES,
+  SESSION_PRIVATE_ACTOR_VISIBLE_ROUTINE,
+  SESSION_REFERENCE_VISIBLE_ROUTINE,
+  TRANSITION_SESSION_VISIBILITY_ROUTINE,
+  XAI_POOL_VISIBLE_ROUTINE,
+  XAI_RESOLVE_POOL_ROUTINE,
+  XAI_REVALIDATE_CREDENTIAL_ROUTINE,
+  XAI_SNAPSHOT_VALIDATOR_ROUTINE,
 ] as const;
 
+export const RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINES = [
+  SESSION_REFERENCE_VISIBLE_ROUTINE,
+  XAI_SNAPSHOT_VALIDATOR_ROUTINE,
+] as const;
+const RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINE_SET = new Set<string>(
+  RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINES,
+);
+
 /**
  * The complete standalone tenant-table contract. Adding or removing a
  * FORCE-RLS table is an architectural change: update this list in the same
@@ -72,6 +149,11 @@ export const FORCE_RLS_TABLES = [
   "browser_session_associations",
   "browser_sessions",
   "browser_state_artifacts",
+  "browser_state_uploads",
+  "canonical_human_identities",
+  "canonical_human_identity_operations",
+  "canonical_human_identity_subjects",
+  "canonical_human_login_bindings",
   "capability_api_facets",
   "capability_catalog_items",
   "capability_component_owners",
@@ -86,6 +168,7 @@ export const FORCE_RLS_TABLES = [
   "capability_plugins",
   "capability_skill_facets",
   "capability_skill_files",
+  "channels",
   "codex_apps_settings",
   "codex_capacity_waiters",
   "codex_credential_leases",
@@ -138,9 +221,9 @@ export const FORCE_RLS_TABLES = [
   "host_export_outbox",
   "image_generation_operations",
   "import_batches",
-  "integration_feature_binding_owners",
-  "integration_feature_bindings",
-  "integration_feature_facets",
+  "integration_facet_binding_owners",
+  "integration_facet_bindings",
+  "integration_facet_definitions",
   "integration_oauth_state_nonces",
   "integration_spec_revisions",
   "integration_tools",
@@ -180,6 +263,10 @@ export const FORCE_RLS_TABLES = [
   "model_call_facts",
   "network_routes",
   "new_session_drafts",
+  "organization_memberships",
+  "organization_user_resource_authorities",
+  "organization_user_resource_grants",
+  "organization_user_retention_policies",
   "pack_installation_components",
   "pack_installations",
   "preference_registry_events",
@@ -205,6 +292,7 @@ export const FORCE_RLS_TABLES = [
   "session_attempt_tool_catalogs",
   "session_command_receipts",
   "session_events",
+  "session_goal_revisions",
   "session_goals",
   "session_history_items",
   "session_human_input_requests",
@@ -223,20 +311,30 @@ export const FORCE_RLS_TABLES = [
   "session_system_updates",
   "session_turn_attempts",
   "session_turns",
+  "session_visibility_write_capabilities",
   "session_workflow_wake_outbox",
   "sessions",
   "site_auth_connections",
   "slack_bot_delete_operations",
   "slack_bot_post_operations",
+  "slack_bot_update_operations",
   "slack_bot_user_links",
   "slack_installation_bindings",
+  "slack_interaction_action_handles",
   "slack_interaction_inbox",
   "slack_interaction_progress_deliveries",
   "slack_interactions",
+  "slack_shared_task_origins",
+  "slack_task_policy_activation_events",
+  "slack_task_policy_heads",
+  "slack_task_policy_revisions",
   "slack_user_link_access_request_operations",
   "slack_user_link_access_requests",
   "social_connections",
   "social_posts",
+  "task_note_events",
+  "task_note_write_capabilities",
+  "task_notes",
   "temporal_schedule_cleanup_outbox",
   "transcription_recording_chunks",
   "transcription_recording_objects",
@@ -269,6 +367,11 @@ export const FORCE_RLS_TABLES = [
   "workspace_variable_sets",
   "workspace_video_generation_policies",
   "workspace_video_generation_quotas",
+  "xai_capacity_waiters",
+  "xai_credential_leases",
+  "xai_rotation_settings",
+  "xai_session_account_pins",
+  "xai_subscription_credentials",
 ] as const;
 
 /**
@@ -312,6 +415,7 @@ export const RUNTIME_FULL_DML_TABLES = [
   "capability_installations",
   "capability_operations",
   "capability_plugin_installations",
+  "channels",
   "codex_apps_settings",
   "codex_capacity_waiters",
   "codex_credential_leases",
@@ -339,8 +443,8 @@ export const RUNTIME_FULL_DML_TABLES = [
   "github_installations",
   "image_generation_operations",
   "import_batches",
-  "integration_feature_binding_owners",
-  "integration_feature_bindings",
+  "integration_facet_binding_owners",
+  "integration_facet_bindings",
   "integration_oauth_clients",
   "integration_oauth_state_nonces",
   "knowledge_memories",
@@ -398,7 +502,9 @@ export const RUNTIME_FULL_DML_TABLES = [
   "sessions",
   "slack_bot_delete_operations",
   "slack_bot_post_operations",
+  "slack_bot_update_operations",
   "slack_bot_user_links",
+  "slack_interaction_action_handles",
   "slack_interaction_inbox",
   "slack_interaction_progress_deliveries",
   "slack_interactions",
@@ -426,6 +532,11 @@ export const RUNTIME_FULL_DML_TABLES = [
   "workspace_video_generation_policies",
   "workspace_video_generation_quotas",
   "workspaces",
+  "xai_capacity_waiters",
+  "xai_credential_leases",
+  "xai_rotation_settings",
+  "xai_session_account_pins",
+  "xai_subscription_credentials",
 ] as const;
 
 /** Configuration and lifecycle-owned audit rows are read-only at runtime. */
@@ -440,6 +551,9 @@ export const RUNTIME_READ_ONLY_TABLES = [
   "preference_registry_events",
   "preference_registry_snapshots",
   "slack_installation_bindings",
+  "slack_task_policy_activation_events",
+  "slack_task_policy_heads",
+  "slack_task_policy_revisions",
   "workspace_instruction_policy_snapshots",
   "workspace_learning_policy_activation_events",
   "workspace_learning_policy_heads",
@@ -483,7 +597,9 @@ export const RUNTIME_READ_INSERT_TABLES = [
   "preference_registry_preferences",
   "preference_registry_revisions",
   "session_attempt_tool_catalogs",
+  "session_goal_revisions",
   "session_spawn_denials",
+  "slack_shared_task_origins",
   "slack_user_link_access_request_operations",
   "temporal_schedule_cleanup_outbox",
   "workspace_artifact_events",
@@ -502,6 +618,7 @@ export const RUNTIME_READ_INSERT_UPDATE_TABLES = [
   "browser_identities",
   "browser_sessions",
   "browser_state_artifacts",
+  "browser_state_uploads",
   "capability_api_facets",
   "capability_facets",
   "capability_integration_facets",
@@ -513,7 +630,7 @@ export const RUNTIME_READ_INSERT_UPDATE_TABLES = [
   "computer_sessions",
   "editable_artifact_session_links",
   "editable_artifacts",
-  "integration_feature_facets",
+  "integration_facet_definitions",
   "integration_spec_revisions",
   "integration_tools",
   "interaction_interventions",
@@ -531,6 +648,10 @@ export const RUNTIME_READ_INSERT_UPDATE_TABLES = [
  * The ordinary application role must have no direct table privileges on them.
  */
 export const PROTECTED_NO_DIRECT_DML_TABLES = [
+  "canonical_human_identities",
+  "canonical_human_identity_operations",
+  "canonical_human_identity_subjects",
+  "canonical_human_login_bindings",
   "editable_artifact_live_tickets",
   "editable_artifact_scope_authorization_heads",
   "host_export_config",
@@ -538,6 +659,14 @@ export const PROTECTED_NO_DIRECT_DML_TABLES = [
   "host_export_cursor_state",
   "host_export_dead_letters",
   "host_export_outbox",
+  "organization_memberships",
+  "organization_user_resource_authorities",
+  "organization_user_resource_grants",
+  "organization_user_retention_policies",
+  "session_visibility_write_capabilities",
+  "task_note_events",
+  "task_note_write_capabilities",
+  "task_notes",
 ] as const;
 
 export type RuntimeTableDmlPrivilege = "SELECT" | "INSERT" | "UPDATE" | "DELETE";
@@ -890,14 +1019,16 @@ export async function inspectRuntimeDatabasePosture(
             p.prosecdef as security_definer
           from pg_proc p
           join pg_namespace n on n.oid = p.pronamespace
-          where p.oid = to_regprocedure(
-            format(
-              '%I.knowledge_source_sync_lock_authority(uuid,uuid,uuid)',
-              ${targetSchema}::text
-            )
-          )
-            and n.nspname = ${targetSchema}
+          where n.nspname = ${targetSchema}
             and p.prokind in ('f', 'p')
+            and (p.proname || '(' || pg_catalog.oidvectortypes(p.proargtypes) || ')') = any(
+              array[
+                ${sql.join(
+                  RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES.map((name) => sql`${name}`),
+                  sql`, `,
+                )}
+              ]::text[]
+            )
           order by p.proname, pg_catalog.oidvectortypes(p.proargtypes)
         `),
       ).map((row) => ({
@@ -1120,7 +1251,13 @@ export function evaluateRuntimeDatabasePosture(
       continue;
     }
     const routine = matches[0]!;
-    if (!routine.securityDefiner) {
+    if (RUNTIME_TARGET_SCHEMA_INVOKER_ROUTINE_SET.has(routine.name)) {
+      if (routine.securityDefiner) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} must be SECURITY INVOKER`,
+        );
+      }
+    } else if (!routine.securityDefiner) {
       violations.push(`target-schema runtime capability ${routine.name} is not SECURITY DEFINER`);
     }
     if (routine.name === KNOWLEDGE_SOURCE_SYNC_LOCK_AUTHORITY_ROUTINE) {
@@ -1146,6 +1283,82 @@ export function evaluateRuntimeDatabasePosture(
           );
         }
       }
+    } else if (routine.name === MANAGED_HUMAN_PERSONAL_WORKSPACE_ROUTINE) {
+      const authorityTables = MANAGED_HUMAN_PERSONAL_WORKSPACE_AUTHORITY_TABLES.filter(
+        (tableName) => tableByName.has(tableName),
+      ).map((tableName) => tableByName.get(tableName)!);
+      const authorityOwners = new Set(authorityTables.map((table) => table.owner));
+      if (authorityOwners.size > 1) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} authority table owners do not match: ${authorityTables.map((table) => `${table.name}=${table.owner}`).join(", ")}`,
+        );
+      } else if (authorityTables[0] && routine.owner !== authorityTables[0].owner) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} owner ${routine.owner} does not match authority table owner ${authorityTables[0].owner}`,
+        );
+      }
+    } else if ((CANONICAL_HUMAN_IDENTITY_ROUTINES as readonly string[]).includes(routine.name)) {
+      const authorityTables = CANONICAL_HUMAN_IDENTITY_AUTHORITY_TABLES.filter((tableName) =>
+        tableByName.has(tableName),
+      ).map((tableName) => tableByName.get(tableName)!);
+      const authorityOwners = new Set(authorityTables.map((table) => table.owner));
+      if (authorityTables.length !== CANONICAL_HUMAN_IDENTITY_AUTHORITY_TABLES.length) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} canonical identity authority tables are missing`,
+        );
+      } else if (authorityOwners.size !== 1) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} authority table owners do not match: ${authorityTables.map((table) => `${table.name}=${table.owner}`).join(", ")}`,
+        );
+      } else if (routine.owner !== authorityTables[0]!.owner) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} owner ${routine.owner} does not match authority table owner ${authorityTables[0]!.owner}`,
+        );
+      }
+    } else if (SESSION_AUTHORITY_ROUTINES.has(routine.name)) {
+      const authorityOwner = tableByName.get("sessions")?.owner ?? targetSchemaOwner;
+      if (authorityOwner && routine.owner !== authorityOwner) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} owner ${routine.owner} does not match session authority owner ${authorityOwner}`,
+        );
+      }
+    } else if (routine.name === XAI_SNAPSHOT_VALIDATOR_ROUTINE) {
+      // The immutable SQL validator is invoker-rights and reads no table. Its
+      // exact ACL is posture-checked above; it does not participate in the
+      // SECURITY DEFINER same-owner authority graph.
+    } else if (
+      routine.name === XAI_CREATE_CREDENTIAL_ROUTINE ||
+      routine.name === XAI_DISCONNECT_CREDENTIAL_ROUTINE ||
+      routine.name === XAI_AUTHORITY_LIVE_ROUTINE ||
+      routine.name === XAI_POOL_VISIBLE_ROUTINE ||
+      routine.name === XAI_RESOLVE_POOL_ROUTINE ||
+      routine.name === XAI_REVALIDATE_CREDENTIAL_ROUTINE
+    ) {
+      if (!tableByName.has("xai_subscription_credentials")) {
+        continue;
+      }
+      const missingAuthorityTables = XAI_AUTHORITY_TABLES.filter(
+        (tableName) => !tableByName.has(tableName),
+      );
+      if (missingAuthorityTables.length > 0) {
+        violations.push(
+          `target-schema runtime capability ${routine.name} authority tables are missing: ${missingAuthorityTables.join(", ")}`,
+        );
+      } else {
+        const authorityTables = XAI_AUTHORITY_TABLES.map(
+          (tableName) => tableByName.get(tableName)!,
+        );
+        const authorityOwners = new Set(authorityTables.map((table) => table.owner));
+        if (authorityOwners.size !== 1) {
+          violations.push(
+            `target-schema runtime capability ${routine.name} authority table owners do not match: ${authorityTables.map((table) => `${table.name}=${table.owner}`).join(", ")}`,
+          );
+        } else if (routine.owner !== authorityTables[0]!.owner) {
+          violations.push(
+            `target-schema runtime capability ${routine.name} owner ${routine.owner} does not match authority table owner ${authorityTables[0]!.owner}`,
+          );
+        }
+      }
     } else if (targetSchemaOwner && routine.owner !== targetSchemaOwner) {
       violations.push(
         `target-schema runtime capability ${routine.name} owner ${routine.owner} does not match schema owner ${targetSchemaOwner}`,