@opengeni/db 0.4.0 → 0.6.0

package/dist/schema.d.ts

@@ -1,3 +1,3 @@
 import 'drizzle-orm';
 import 'drizzle-orm/pg-core';
-export { i as agentRunStates, j as apiKeys, k as auditEvents, l as billingCustomers, m as capabilityCatalogItems, n as capabilityInstallations, o as codexRotationSettings, p as codexSubscriptionCredentials, q as creditLedgerEntries, r as deviceEnrollmentRequests, d as deviceEnrollmentStatusValues, t as documentBases, u as documentChunks, v as documents, a as enrollmentExposureValues, e as enrollmentOsValues, b as enrollmentStatusValues, w as enrollments, x as fileUploads, y as files, z as githubInstallations, A as machineMetricsLatest, B as machineMetricsSeries, C as managedAccounts, D as packInstallations, c as sandboxKindValues, E as sandboxLeaseHolders, F as sandboxLeaseLivenessValues, G as sandboxLeases, H as sandboxPtySessions, I as sandboxSessionEnvelopes, J as sandboxes, K as scheduledTaskRuns, L as scheduledTasks, M as sessionEvents, N as sessionGoals, O as sessionHistoryItems, P as sessionMcpServers, f as sessionRecordingCodecValues, g as sessionRecordingModeValues, h as sessionRecordingStateValues, Q as sessionRecordings, R as sessionTurns, S as sessions, T as socialConnections, U as socialPosts, V as stripeWebhookEvents, W as usageEvents, X as workspaceEnvironmentVariables, Y as workspaceEnvironments, Z as workspaceMemberships, _ as workspacePacks, $ as workspaces } from './schema-DuRsrmzD.js';
+export { i as agentRunStates, j as apiKeys, k as auditEvents, l as billingCustomers, m as capabilityCatalogItems, n as capabilityInstallations, o as codexRotationSettings, p as codexSubscriptionCredentials, q as connections, r as creditLedgerEntries, t as deviceEnrollmentRequests, d as deviceEnrollmentStatusValues, u as documentBases, v as documentChunks, w as documents, a as enrollmentExposureValues, e as enrollmentOsValues, b as enrollmentStatusValues, x as enrollments, y as fileUploads, z as files, A as githubInstallations, B as importBatches, C as integrationOauthClients, D as integrationOauthStateNonces, E as knowledgeMemories, F as machineMetricsLatest, G as machineMetricsSeries, H as managedAccounts, I as packInstallations, c as sandboxKindValues, J as sandboxLeaseHolders, K as sandboxLeaseLivenessValues, L as sandboxLeases, M as sandboxPtySessions, N as sandboxSessionEnvelopes, O as sandboxes, P as scheduledTaskRuns, Q as scheduledTasks, R as sessionEvents, S as sessionGoals, T as sessionHistoryItems, U as sessionMcpServers, f as sessionRecordingCodecValues, g as sessionRecordingModeValues, h as sessionRecordingStateValues, V as sessionRecordings, W as sessionTurns, X as sessions, Y as socialConnections, Z as socialPosts, _ as stripeWebhookEvents, $ as usageEvents, a0 as workspaceEnvironmentVariables, a1 as workspaceEnvironments, a2 as workspaceMemberships, a3 as workspacePacks, a4 as workspaces } from './schema-Dsz6UHNv.js';

package/dist/schema.js

@@ -7,6 +7,7 @@ import {
   capabilityInstallations,
   codexRotationSettings,
   codexSubscriptionCredentials,
+  connections,
   creditLedgerEntries,
   deviceEnrollmentRequests,
   deviceEnrollmentStatusValues,
@@ -20,6 +21,10 @@ import {
   fileUploads,
   files,
   githubInstallations,
+  importBatches,
+  integrationOauthClients,
+  integrationOauthStateNonces,
+  knowledgeMemories,
   machineMetricsLatest,
   machineMetricsSeries,
   managedAccounts,
@@ -52,7 +57,7 @@ import {
   workspaceMemberships,
   workspacePacks,
   workspaces
-} from "./chunk-T2U4H4Z2.js";
+} from "./chunk-ZIUCA2IO.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
@@ -63,6 +68,7 @@ export {
   capabilityInstallations,
   codexRotationSettings,
   codexSubscriptionCredentials,
+  connections,
   creditLedgerEntries,
   deviceEnrollmentRequests,
   deviceEnrollmentStatusValues,
@@ -76,6 +82,10 @@ export {
   fileUploads,
   files,
   githubInstallations,
+  importBatches,
+  integrationOauthClients,
+  integrationOauthStateNonces,
+  knowledgeMemories,
   machineMetricsLatest,
   machineMetricsSeries,
   managedAccounts,

package/drizzle/0038_enrollment_desktop_unavailable_reason.sql

@@ -0,0 +1,18 @@
+-- Server-visible "display present but capture not granted" state.
+--
+-- A machine can have a display it cannot CAPTURE (macOS Screen Recording / TCC not
+-- granted). The agent's connect Hello now reports has_display=false AND a human,
+-- actionable reason for that case; persist the reason alongside has_display so the
+-- Machines dashboard / VM picker can surface "display: capture not granted" instead
+-- of a bare display_unavailable — the state must be VISIBLE server-side, not just in
+-- a local agent log. NULL means capture is permitted OR the machine is genuinely
+-- headless, so every existing row keeps its historical semantics with no backfill.
+ALTER TABLE "enrollments"
+  ADD COLUMN IF NOT EXISTS "desktop_unavailable_reason" text;
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO opengeni_app;
+  END IF;
+END $$;

package/drizzle/0038_observability_counts.sql

@@ -0,0 +1,32 @@
+-- 0038_observability_counts.sql
+-- Cross-workspace aggregate reads for Prometheus gauges. These mirror the
+-- sandbox reaper's SECURITY DEFINER pattern so workers can refresh global
+-- process metrics without disabling FORCE RLS on workspace-scoped tables.
+
+CREATE OR REPLACE FUNCTION opengeni_private.count_queued_turns()
+RETURNS bigint
+LANGUAGE sql
+SECURITY DEFINER
+AS $$
+  SELECT count(*)::bigint
+  FROM session_turns
+  WHERE status = 'queued';
+$$;
+
+CREATE OR REPLACE FUNCTION opengeni_private.count_sandbox_leases_by_liveness()
+RETURNS TABLE (liveness text, count bigint)
+LANGUAGE sql
+SECURITY DEFINER
+AS $$
+  SELECT L.liveness, count(*)::bigint
+  FROM sandbox_leases L
+  GROUP BY L.liveness;
+$$;
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT EXECUTE ON FUNCTION opengeni_private.count_queued_turns() TO opengeni_app;
+    GRANT EXECUTE ON FUNCTION opengeni_private.count_sandbox_leases_by_liveness() TO opengeni_app;
+  END IF;
+END $$;

package/drizzle/0039_connections.sql

@@ -0,0 +1,62 @@
+CREATE TABLE IF NOT EXISTS "connections" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "subject_id" text,
+  "provider_domain" text NOT NULL,
+  "kind" text NOT NULL,
+  "status" text NOT NULL DEFAULT 'active',
+  "credential_encrypted" text NOT NULL,
+  "granted_scopes" jsonb NOT NULL DEFAULT '[]'::jsonb,
+  "expires_at" timestamptz,
+  "last_refresh_at" timestamptz,
+  "last_used_at" timestamptz,
+  "last_error" text,
+  "version" integer NOT NULL DEFAULT 1,
+  "metadata" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "created_by_subject_id" text,
+  "updated_by_subject_id" text,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "connections_kind_chk"
+    CHECK ("kind" IN ('oauth2', 'api_key', 'app_install', 'delegated')),
+  CONSTRAINT "connections_status_chk"
+    CHECK ("status" IN ('active', 'needs_reauth', 'revoked', 'error')),
+  CONSTRAINT "connections_granted_scopes_array_chk"
+    CHECK (jsonb_typeof("granted_scopes") = 'array'),
+  CONSTRAINT "connections_metadata_object_chk"
+    CHECK (jsonb_typeof("metadata") = 'object'),
+  CONSTRAINT "connections_version_positive_chk"
+    CHECK ("version" > 0)
+);
+
+CREATE INDEX IF NOT EXISTS "connections_workspace_provider_status_idx"
+  ON "connections" ("workspace_id", "provider_domain", "status");
+CREATE INDEX IF NOT EXISTS "connections_workspace_subject_provider_idx"
+  ON "connections" ("workspace_id", "subject_id", "provider_domain");
+CREATE INDEX IF NOT EXISTS "connections_workspace_kind_idx"
+  ON "connections" ("workspace_id", "kind");
+CREATE INDEX IF NOT EXISTS "connections_workspace_expires_idx"
+  ON "connections" ("workspace_id", "expires_at");
+
+ALTER TABLE "connections" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "connections" FORCE ROW LEVEL SECURITY;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'connections' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "connections";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "connections"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT SELECT, INSERT, UPDATE, DELETE ON "connections" TO opengeni_app;
+  END IF;
+END $$;

package/drizzle/0039_session_mcp_require_approval.sql

@@ -0,0 +1,7 @@
+-- 0039_session_mcp_require_approval.sql
+-- Per-session-MCP-server human-approval policy. jsonb holds either `true`
+-- (every tool of the server requires approval) or a JSON array of UNPREFIXED
+-- tool names (only those require it). NULL / absent = auto-run (the historical
+-- default), so this is additive and backfill-free.
+
+ALTER TABLE "session_mcp_servers" ADD COLUMN IF NOT EXISTS "require_approval" jsonb;

package/drizzle/0040_schema_agnostic_opengeni_app_grants.sql

@@ -0,0 +1,36 @@
+-- Correct historical opengeni_app grant blocks that hardcoded `public`.
+-- Embedded hosts run migrations with search_path pointed at their dedicated
+-- data schema, so grants must target current_schema().
+
+DO $$
+DECLARE
+  target_schema text := current_schema();
+  owner_role text := current_user;
+  app_role text := 'opengeni_app';
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = app_role) THEN
+    EXECUTE format('GRANT USAGE ON SCHEMA %I TO %I', target_schema, app_role);
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA %I TO %I',
+      target_schema,
+      app_role
+    );
+    EXECUTE format(
+      'GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA %I TO %I',
+      target_schema,
+      app_role
+    );
+    EXECUTE format(
+      'ALTER DEFAULT PRIVILEGES FOR ROLE %I IN SCHEMA %I GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO %I',
+      owner_role,
+      target_schema,
+      app_role
+    );
+    EXECUTE format(
+      'ALTER DEFAULT PRIVILEGES FOR ROLE %I IN SCHEMA %I GRANT USAGE, SELECT ON SEQUENCES TO %I',
+      owner_role,
+      target_schema,
+      app_role
+    );
+  END IF;
+END $$;

package/drizzle/0041_knowledge_layer.sql

@@ -0,0 +1,73 @@
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "source_kind" text NOT NULL DEFAULT 'manual_upload';
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "source_uri" text;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "source_external_id" text;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "source_title" text;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "source_author" text;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "source_created_at" timestamptz;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "source_updated_at" timestamptz;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "source_version" text;
+ALTER TABLE "documents" ADD COLUMN IF NOT EXISTS "acl_tags" jsonb NOT NULL DEFAULT '[]'::jsonb;
+
+CREATE INDEX IF NOT EXISTS "documents_workspace_source_kind_idx" ON "documents" ("workspace_id", "source_kind");
+CREATE INDEX IF NOT EXISTS "documents_workspace_source_external_id_idx" ON "documents" ("workspace_id", "source_external_id");
+CREATE INDEX IF NOT EXISTS "documents_acl_tags_idx" ON "documents" USING gin ("acl_tags");
+CREATE INDEX IF NOT EXISTS "document_chunks_text_fts_idx" ON "document_chunks" USING gin (to_tsvector('simple', "text"));
+
+CREATE TABLE IF NOT EXISTS "knowledge_memories" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "status" text NOT NULL DEFAULT 'proposed',
+  "kind" text NOT NULL DEFAULT 'semantic',
+  "scope" text NOT NULL DEFAULT 'workspace',
+  "text" text NOT NULL,
+  "source_refs" jsonb NOT NULL DEFAULT '[]'::jsonb,
+  "confidence" integer NOT NULL DEFAULT 50,
+  "metadata" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "created_by_session_id" uuid REFERENCES "sessions"("id") ON DELETE SET NULL,
+  "reviewed_by" text,
+  "reviewed_at" timestamptz,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now()
+);
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'knowledge_memories_workspace_account_fk'
+  ) THEN
+    ALTER TABLE "knowledge_memories" ADD CONSTRAINT "knowledge_memories_workspace_account_fk"
+      FOREIGN KEY ("workspace_id", "account_id") REFERENCES "workspaces"("id", "account_id") ON DELETE CASCADE;
+  END IF;
+END $$;
+
+CREATE INDEX IF NOT EXISTS "knowledge_memories_workspace_status_idx" ON "knowledge_memories" ("workspace_id", "status", "updated_at");
+CREATE INDEX IF NOT EXISTS "knowledge_memories_workspace_kind_idx" ON "knowledge_memories" ("workspace_id", "kind");
+CREATE INDEX IF NOT EXISTS "knowledge_memories_workspace_scope_idx" ON "knowledge_memories" ("workspace_id", "scope");
+CREATE INDEX IF NOT EXISTS "knowledge_memories_workspace_created_by_session_idx" ON "knowledge_memories" ("workspace_id", "created_by_session_id");
+CREATE INDEX IF NOT EXISTS "knowledge_memories_text_fts_idx" ON "knowledge_memories" USING gin (to_tsvector('simple', "text"));
+
+ALTER TABLE "knowledge_memories" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "knowledge_memories" FORCE ROW LEVEL SECURITY;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'knowledge_memories' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "knowledge_memories";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "knowledge_memories"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA %I TO opengeni_app',
+      current_schema()
+    );
+  END IF;
+END $$;

package/drizzle/0042_integration_oauth_state.sql

@@ -0,0 +1,56 @@
+CREATE TABLE IF NOT EXISTS "integration_oauth_clients" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "issuer" text NOT NULL,
+  "authorization_server" text NOT NULL,
+  "client_id" text NOT NULL,
+  "client_secret_encrypted" text,
+  "token_endpoint_auth_method" text NOT NULL DEFAULT 'none',
+  "metadata" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "integration_oauth_clients_metadata_object_chk"
+    CHECK (jsonb_typeof("metadata") = 'object')
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "integration_oauth_clients_issuer_idx"
+  ON "integration_oauth_clients" ("issuer");
+CREATE INDEX IF NOT EXISTS "integration_oauth_clients_as_idx"
+  ON "integration_oauth_clients" ("authorization_server");
+
+CREATE TABLE IF NOT EXISTS "integration_oauth_state_nonces" (
+  "nonce" text PRIMARY KEY NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "subject_id" text NOT NULL,
+  "expires_at" timestamptz NOT NULL,
+  "used_at" timestamptz NOT NULL DEFAULT now(),
+  "created_at" timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS "integration_oauth_state_nonces_workspace_idx"
+  ON "integration_oauth_state_nonces" ("workspace_id");
+CREATE INDEX IF NOT EXISTS "integration_oauth_state_nonces_expires_idx"
+  ON "integration_oauth_state_nonces" ("expires_at");
+
+ALTER TABLE "integration_oauth_state_nonces" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "integration_oauth_state_nonces" FORCE ROW LEVEL SECURITY;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'integration_oauth_state_nonces' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "integration_oauth_state_nonces";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "integration_oauth_state_nonces"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT SELECT, INSERT, UPDATE, DELETE ON "integration_oauth_clients" TO opengeni_app;
+    GRANT SELECT, INSERT, UPDATE, DELETE ON "integration_oauth_state_nonces" TO opengeni_app;
+  END IF;
+END $$;

package/drizzle/0043_integrations_catalog_imports.sql

@@ -0,0 +1,104 @@
+CREATE TABLE IF NOT EXISTS "import_batches" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "source" text NOT NULL,
+  "snapshot_date" timestamptz NOT NULL,
+  "snapshot_ref" text,
+  "attribution_note" text NOT NULL,
+  "imported_count" integer NOT NULL DEFAULT 0,
+  "skipped_count" integer NOT NULL DEFAULT 0,
+  "quarantined_count" integer NOT NULL DEFAULT 0,
+  "logo_failure_count" integer NOT NULL DEFAULT 0,
+  "stale_count" integer NOT NULL DEFAULT 0,
+  "details" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS "import_batches_source_snapshot_idx" ON "import_batches" ("source", "snapshot_date");
+CREATE INDEX IF NOT EXISTS "import_batches_created_at_idx" ON "import_batches" ("created_at");
+
+ALTER TABLE "import_batches" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "import_batches" FORCE ROW LEVEL SECURITY;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'import_batches' AND policyname = 'global_catalog_import_batches'
+  ) THEN
+    DROP POLICY global_catalog_import_batches ON "import_batches";
+  END IF;
+END $$;
+CREATE POLICY global_catalog_import_batches ON "import_batches"
+  USING (true)
+  WITH CHECK (true);
+
+ALTER TABLE "capability_catalog_items" ALTER COLUMN "account_id" DROP NOT NULL;
+ALTER TABLE "capability_catalog_items" ALTER COLUMN "workspace_id" DROP NOT NULL;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "provider_domain" text;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "surface_type" text;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "transport" text;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "mcp_url" text;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "auth_kind" text;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "credential_facts" jsonb NOT NULL DEFAULT '[]'::jsonb;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "tier" text;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "provenance" text;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "logo_asset_path" text;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "import_batch_id" uuid REFERENCES "import_batches"("id") ON DELETE SET NULL;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "stale" boolean NOT NULL DEFAULT false;
+ALTER TABLE "capability_catalog_items" ADD COLUMN IF NOT EXISTS "stale_at" timestamptz;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'capability_catalog_items_registry_global_ck'
+  ) THEN
+    ALTER TABLE "capability_catalog_items" ADD CONSTRAINT "capability_catalog_items_registry_global_ck"
+      CHECK (
+        "source" <> 'registry'
+        OR (
+          "account_id" IS NULL
+          AND "workspace_id" IS NULL
+          AND "kind" = 'mcp'
+          AND "provider_domain" IS NOT NULL
+          AND "mcp_url" IS NOT NULL
+        )
+      );
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "capability_catalog_items_registry_surface_idx"
+  ON "capability_catalog_items" ("source", "provider_domain", "mcp_url");
+CREATE UNIQUE INDEX IF NOT EXISTS "capability_catalog_items_global_capability_idx"
+  ON "capability_catalog_items" ("id") WHERE "workspace_id" IS NULL;
+CREATE INDEX IF NOT EXISTS "capability_catalog_items_provider_domain_idx" ON "capability_catalog_items" ("provider_domain");
+CREATE INDEX IF NOT EXISTS "capability_catalog_items_import_batch_idx" ON "capability_catalog_items" ("import_batch_id");
+CREATE INDEX IF NOT EXISTS "capability_catalog_items_source_stale_idx" ON "capability_catalog_items" ("source", "stale");
+
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'capability_catalog_items' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "capability_catalog_items";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "capability_catalog_items"
+  USING (
+    ("account_id" IS NULL AND "workspace_id" IS NULL)
+    OR opengeni_private.workspace_rls_visible(account_id, workspace_id)
+  )
+  WITH CHECK (
+    ("account_id" IS NULL AND "workspace_id" IS NULL)
+    OR opengeni_private.workspace_rls_visible(account_id, workspace_id)
+  );
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA %I TO opengeni_app',
+      current_schema()
+    );
+  END IF;
+END $$;

package/drizzle/0043_toolspace_call_budget.sql

@@ -0,0 +1,14 @@
+-- Per-turn toolspace call budget counter. The previous enforcement read the
+-- count of `agent.toolCall.created` toolspace events then compared against the
+-- limit before appending the next event (read-then-append TOCTOU): concurrent
+-- tools/call requests all observed a stale count and all passed. This column
+-- makes the budget a single atomic reservation:
+--   UPDATE session_turns SET toolspace_call_count = toolspace_call_count + 1
+--   WHERE id = $turn AND toolspace_call_count < $limit RETURNING toolspace_call_count
+-- Concurrent reservations serialize on the row lock, so exactly `limit` succeed.
+--
+-- opengeni_app already holds table-level DML on session_turns (migration 0040
+-- grants ON ALL TABLES + default privileges); a new column inherits those
+-- grants, so no additional GRANT block is required.
+ALTER TABLE "session_turns"
+  ADD COLUMN IF NOT EXISTS "toolspace_call_count" integer NOT NULL DEFAULT 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/db",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "OpenGeni persistence: Drizzle schema, RLS-scoped query layer, the SQL migration runner, and role provisioning.",
   "license": "Apache-2.0",
   "repository": {
@@ -48,19 +48,14 @@
     "migrate": "bun src/migrate.ts",
     "provision-roles": "bun src/provision-roles.ts",
     "typecheck": "tsc --noEmit",
-    "build": "tsup"
+    "build": "tsup",
+    "prepublishOnly": "bash ../../scripts/prepublish-guard"
   },
   "dependencies": {
     "@opengeni/codex": "^0.2.1",
-    "@opengeni/config": "^0.2.4",
-    "@opengeni/contracts": "^0.6.0",
+    "@opengeni/config": "^0.3.0",
+    "@opengeni/contracts": "^0.9.0",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.7"
-  },
-  "devDependencies": {
-    "@opengeni/testing": "workspace:*",
-    "drizzle-kit": "^0.31.8",
-    "tsup": "^8.5.0",
-    "typescript": "^6.0.3"
   }
 }