@opengeni/db 0.6.1 → 0.7.1

package/dist/schema.d.ts

@@ -1,3 +1,3 @@
 import 'drizzle-orm';
 import 'drizzle-orm/pg-core';
-export { i as agentRunStates, j as apiKeys, k as auditEvents, l as billingCustomers, m as capabilityCatalogItems, n as capabilityInstallations, o as codexRotationSettings, p as codexSubscriptionCredentials, q as connections, r as creditLedgerEntries, t as deviceEnrollmentRequests, d as deviceEnrollmentStatusValues, u as documentBases, v as documentChunks, w as documents, a as enrollmentExposureValues, e as enrollmentOsValues, b as enrollmentStatusValues, x as enrollments, y as fileUploads, z as files, A as githubInstallations, B as importBatches, C as integrationOauthClients, D as integrationOauthStateNonces, E as knowledgeMemories, F as machineMetricsLatest, G as machineMetricsSeries, H as managedAccounts, I as packInstallations, c as sandboxKindValues, J as sandboxLeaseHolders, K as sandboxLeaseLivenessValues, L as sandboxLeases, M as sandboxPtySessions, N as sandboxSessionEnvelopes, O as sandboxes, P as scheduledTaskRuns, Q as scheduledTasks, R as sessionEvents, S as sessionGoals, T as sessionHistoryItems, U as sessionMcpServers, f as sessionRecordingCodecValues, g as sessionRecordingModeValues, h as sessionRecordingStateValues, V as sessionRecordings, W as sessionTurns, X as sessions, Y as socialConnections, Z as socialPosts, _ as stripeWebhookEvents, $ as usageEvents, a0 as workspaceEnvironmentVariables, a1 as workspaceEnvironments, a2 as workspaceMemberships, a3 as workspacePacks, a4 as workspaces } from './schema-BUbuMteO.js';
+export { m as agentRunStates, n as apiKeys, o as auditEvents, p as billingCustomers, q as capabilityCatalogItems, r as capabilityInstallations, t as codexCapacityWaiters, u as codexCredentialLeases, v as codexRotationSettings, w as codexSubscriptionCredentials, c as composerDrafts, x as connections, y as creditLedgerEntries, z as deviceEnrollmentRequests, g as deviceEnrollmentStatusValues, A as documentBases, B as documentChunks, C as documents, f as enrollmentExposureValues, e as enrollmentOsValues, h as enrollmentStatusValues, D as enrollments, E as fileUploads, F as files, G as githubInstallations, H as importBatches, I as integrationOauthClients, J as integrationOauthStateNonces, K as knowledgeMemories, L as machineMetricsLatest, M as machineMetricsSeries, N as managedAccounts, O as packInstallations, P as rigChanges, Q as rigVersions, R as rigs, i as sandboxKindValues, S as sandboxLeaseHolders, T as sandboxLeaseLivenessValues, U as sandboxLeases, V as sandboxPtySessions, W as sandboxSessionEnvelopes, X as sandboxes, Y as scheduledTaskRuns, Z as scheduledTasks, _ as sessionAttemptInterruptions, s as sessionCommandReceipts, $ as sessionEvents, a0 as sessionGoals, a1 as sessionHistoryItems, a2 as sessionListSnapshots, a3 as sessionMcpServers, a4 as sessionPendingToolCalls, a5 as sessionPins, j as sessionRecordingCodecValues, k as sessionRecordingModeValues, l as sessionRecordingStateValues, a6 as sessionRecordings, a7 as sessionSystemUpdateOutbox, a8 as sessionSystemUpdates, a as sessionTurnAttempts, b as sessionTurns, a9 as sessionWorkflowWakeOutbox, aa as sessions, ab as socialConnections, ac as socialPosts, ad as stripeWebhookEvents, ae as usageEvents, af as workspaceCaptures, ag as workspaceControlEvents, ah as workspaceInferenceControls, ai as workspaceMemberships, aj as workspaceModelPolicies, ak as workspacePacks, al as workspaceVariableSetVariables, am as workspaceVariableSets, an as workspaces } from './schema-BN5mB9xZ.js';

package/dist/schema.js

@@ -5,8 +5,11 @@ import {
   billingCustomers,
   capabilityCatalogItems,
   capabilityInstallations,
+  codexCapacityWaiters,
+  codexCredentialLeases,
   codexRotationSettings,
   codexSubscriptionCredentials,
+  composerDrafts,
   connections,
   creditLedgerEntries,
   deviceEnrollmentRequests,
@@ -29,6 +32,9 @@ import {
   machineMetricsSeries,
   managedAccounts,
   packInstallations,
+  rigChanges,
+  rigVersions,
+  rigs,
   sandboxKindValues,
   sandboxLeaseHolders,
   sandboxLeaseLivenessValues,
@@ -38,26 +44,39 @@ import {
   sandboxes,
   scheduledTaskRuns,
   scheduledTasks,
+  sessionAttemptInterruptions,
+  sessionCommandReceipts,
   sessionEvents,
   sessionGoals,
   sessionHistoryItems,
+  sessionListSnapshots,
   sessionMcpServers,
+  sessionPendingToolCalls,
+  sessionPins,
   sessionRecordingCodecValues,
   sessionRecordingModeValues,
   sessionRecordingStateValues,
   sessionRecordings,
+  sessionSystemUpdateOutbox,
+  sessionSystemUpdates,
+  sessionTurnAttempts,
   sessionTurns,
+  sessionWorkflowWakeOutbox,
   sessions,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
   usageEvents,
-  workspaceEnvironmentVariables,
-  workspaceEnvironments,
+  workspaceCaptures,
+  workspaceControlEvents,
+  workspaceInferenceControls,
   workspaceMemberships,
+  workspaceModelPolicies,
   workspacePacks,
+  workspaceVariableSetVariables,
+  workspaceVariableSets,
   workspaces
-} from "./chunk-ZIUCA2IO.js";
+} from "./chunk-B22X3IEZ.js";
 import "./chunk-PZ5AY32C.js";
 export {
   agentRunStates,
@@ -66,8 +85,11 @@ export {
   billingCustomers,
   capabilityCatalogItems,
   capabilityInstallations,
+  codexCapacityWaiters,
+  codexCredentialLeases,
   codexRotationSettings,
   codexSubscriptionCredentials,
+  composerDrafts,
   connections,
   creditLedgerEntries,
   deviceEnrollmentRequests,
@@ -90,6 +112,9 @@ export {
   machineMetricsSeries,
   managedAccounts,
   packInstallations,
+  rigChanges,
+  rigVersions,
+  rigs,
   sandboxKindValues,
   sandboxLeaseHolders,
   sandboxLeaseLivenessValues,
@@ -99,24 +124,37 @@ export {
   sandboxes,
   scheduledTaskRuns,
   scheduledTasks,
+  sessionAttemptInterruptions,
+  sessionCommandReceipts,
   sessionEvents,
   sessionGoals,
   sessionHistoryItems,
+  sessionListSnapshots,
   sessionMcpServers,
+  sessionPendingToolCalls,
+  sessionPins,
   sessionRecordingCodecValues,
   sessionRecordingModeValues,
   sessionRecordingStateValues,
   sessionRecordings,
+  sessionSystemUpdateOutbox,
+  sessionSystemUpdates,
+  sessionTurnAttempts,
   sessionTurns,
+  sessionWorkflowWakeOutbox,
   sessions,
   socialConnections,
   socialPosts,
   stripeWebhookEvents,
   usageEvents,
-  workspaceEnvironmentVariables,
-  workspaceEnvironments,
+  workspaceCaptures,
+  workspaceControlEvents,
+  workspaceInferenceControls,
   workspaceMemberships,
+  workspaceModelPolicies,
   workspacePacks,
+  workspaceVariableSetVariables,
+  workspaceVariableSets,
   workspaces
 };
 //# sourceMappingURL=schema.js.map

package/drizzle/0044_reap_dead_turn_holders.sql

@@ -0,0 +1,104 @@
+-- 0044_reap_dead_turn_holders.sql
+-- Dead-worker turn holders were TTL-exempt forever: a live turn refreshes its
+-- holder every 10s (even a legit multi-day turn), but a worker killed without
+-- cleanup (SIGKILL/OOM/deploy churn) leaves a holder whose heartbeat is frozen.
+-- Left in place it pins refcount >= 1 FOREVER, so the lease never drains, the
+-- reaper never persists /workspace, and the box rides the provider hard-timeout
+-- to an UNPERSISTED death (2026-07-06 staging deploy churn left turn holders
+-- frozen for hours). Reap turn holders whose heartbeat is older than the
+-- caller-supplied horizon. A live holder is touched every 10s from the moment
+-- it is registered (the worker's holder-liveness loop covers the warmup;
+-- the turn heartbeat covers the run), so the horizon the worker passes
+-- (warming-budget + lease-TTL) is generous defense-in-depth, never a bound a
+-- live path can reach; a redispatched turn re-acquires under a NEW holder id,
+-- so a live execution is never touched.
+
+CREATE OR REPLACE FUNCTION opengeni_private.reap_sandbox_leases(
+  p_viewer_holder_ttl_ms bigint,
+  p_turn_holder_ttl_ms   bigint,
+  p_idle_grace_ms        bigint
+)
+RETURNS TABLE (workspace_id uuid, sandbox_group_id uuid, instance_id text, lease_epoch integer)
+LANGUAGE plpgsql
+SECURITY DEFINER
+AS $$
+BEGIN
+  DELETE FROM sandbox_lease_holders h
+  WHERE h.kind = 'viewer'
+    AND h.last_heartbeat_at < now() - make_interval(secs => p_viewer_holder_ttl_ms / 1000.0);
+
+  -- Dead-worker turn holders (see header). p_turn_holder_ttl_ms <= 0 preserves
+  -- the legacy never-reap behaviour.
+  IF p_turn_holder_ttl_ms > 0 THEN
+    DELETE FROM sandbox_lease_holders h
+    WHERE h.kind = 'turn'
+      AND h.last_heartbeat_at < now() - make_interval(secs => p_turn_holder_ttl_ms / 1000.0);
+  END IF;
+
+  UPDATE sandbox_leases L SET
+    refcount       = c.total,
+    turn_holders   = c.turns,
+    viewer_holders = c.viewers,
+    liveness = CASE WHEN L.liveness = 'warm' AND c.total = 0 AND c.turns = 0
+                    THEN 'draining' ELSE L.liveness END,
+    expires_at = CASE WHEN L.liveness = 'warm' AND c.total = 0 AND c.turns = 0
+                    THEN now() + make_interval(secs => p_idle_grace_ms / 1000.0)
+                    ELSE L.expires_at END,
+    updated_at = now()
+  FROM (
+    SELECT L2.id,
+           (SELECT count(*) FROM sandbox_lease_holders h WHERE h.lease_id = L2.id)::int                       AS total,
+           (SELECT count(*) FROM sandbox_lease_holders h WHERE h.lease_id = L2.id AND h.kind = 'turn')::int   AS turns,
+           (SELECT count(*) FROM sandbox_lease_holders h WHERE h.lease_id = L2.id AND h.kind = 'viewer')::int AS viewers
+    FROM sandbox_leases L2
+  ) c
+  WHERE L.id = c.id;
+
+  -- Warming died before provider create returned: no instance was ever tracked.
+  UPDATE sandbox_leases AS L SET
+    liveness = 'cold', instance_id = NULL,
+    resume_backend_id = NULL, resume_state = NULL,
+    data_plane_url = NULL, terminal_data_plane_url = NULL, updated_at = now()
+  WHERE L.liveness = 'warming' AND L.expires_at < now() AND L.instance_id IS NULL;
+
+  -- Warming died after provider create returned: keep the instance_id and hand it
+  -- to the normal provider termination path in this same sweep.
+  UPDATE sandbox_leases AS L SET
+    liveness = 'draining',
+    refcount = 0,
+    turn_holders = 0,
+    viewer_holders = 0,
+    data_plane_url = NULL,
+    terminal_data_plane_url = NULL,
+    expires_at = now() - interval '1 millisecond',
+    updated_at = now()
+  WHERE L.liveness = 'warming' AND L.expires_at < now() AND L.instance_id IS NOT NULL;
+
+  RETURN QUERY
+    SELECT L.workspace_id, L.sandbox_group_id, L.instance_id, L.lease_epoch
+    FROM sandbox_leases L
+    WHERE L.liveness = 'draining' AND L.expires_at < now() AND L.refcount = 0;
+END;
+$$;
+
+-- Rolling-deploy compat: workers built before this migration call the 2-arg
+-- form. Delegate with turn-holder reaping OFF (legacy behaviour) until every
+-- worker passes the explicit TTL.
+CREATE OR REPLACE FUNCTION opengeni_private.reap_sandbox_leases(
+  p_viewer_holder_ttl_ms bigint,
+  p_idle_grace_ms        bigint
+)
+RETURNS TABLE (workspace_id uuid, sandbox_group_id uuid, instance_id text, lease_epoch integer)
+LANGUAGE sql
+SECURITY DEFINER
+AS $$
+  SELECT * FROM opengeni_private.reap_sandbox_leases(p_viewer_holder_ttl_ms, 0::bigint, p_idle_grace_ms);
+$$;
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT EXECUTE ON FUNCTION opengeni_private.reap_sandbox_leases(bigint, bigint, bigint) TO opengeni_app;
+    GRANT EXECUTE ON FUNCTION opengeni_private.reap_sandbox_leases(bigint, bigint) TO opengeni_app;
+  END IF;
+END $$;

package/drizzle/0045_workspace_captures.sql

@@ -0,0 +1,83 @@
+-- Workbench v2 turn-end workspace capture (dossier §10.2; model: 0020 session_recordings).
+--
+-- One row per capture revision — a point-in-time snapshot of a session's changed
+-- files, probed off the live box at TURN END (agent-turn.ts finally, between the
+-- warm snapshot and release). The manifest (tree index + per-repo status/diff +
+-- file index) and each after-image blob live in @opengeni/storage; this row is
+-- the durable index the read routes serve from. `revision` is monotonic per
+-- session (unique (session_id, revision)); `blob_keys` records the content-
+-- addressed after-image keys this revision references so the keep-latest-10 GC
+-- deletes only blobs no surviving revision shares. `lease_epoch` fences a write:
+-- insertWorkspaceCapture only writes when a warm lease at that epoch still exists.
+--
+-- Behind OPENGENI_WORKSPACE_CAPTURE (default on). DDL is inert until the worker
+-- writes rows; forward-only, no existing row references it. RLS + grants mirror
+-- the current schema-aware boilerplate (0043).
+
+CREATE TABLE IF NOT EXISTS "workspace_captures" (
+  "id"              uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id"      uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id"    uuid NOT NULL REFERENCES "workspaces"("id")       ON DELETE CASCADE,
+  "session_id"      uuid NOT NULL REFERENCES "sessions"("id")         ON DELETE CASCADE,
+  -- The turn that produced this capture. ON DELETE SET NULL: a deleted turn must
+  -- not cascade-kill the capture index row.
+  "turn_id"         uuid REFERENCES "session_turns"("id") ON DELETE SET NULL,
+
+  -- Monotonic per session (unique on (session_id, revision)).
+  "revision"        bigint NOT NULL,
+  -- The lease epoch the capture was fenced under (paired with revision for cache
+  -- invalidation client-side).
+  "lease_epoch"     integer NOT NULL,
+  -- 'available' on a committed capture. 'failed' reserved for a future two-phase
+  -- write; the current synchronous capture only ever inserts 'available'.
+  "state"           text NOT NULL DEFAULT 'available',
+
+  -- @opengeni/storage keys. manifest = the single JSON blob (tree + repos + file
+  -- refs); tree_index = the fs tree blob (kept separate so the API can inline or
+  -- sign it independently). blob_keys = the content-addressed after-image keys
+  -- this revision references (GC set-difference input).
+  "manifest_key"    text,
+  "tree_index_key"  text,
+  "blob_keys"       jsonb NOT NULL DEFAULT '[]'::jsonb,
+
+  "size_bytes"      bigint,
+  "stats"           jsonb NOT NULL DEFAULT '{}'::jsonb,
+
+  "captured_at"     timestamptz NOT NULL DEFAULT now(),
+
+  CONSTRAINT "workspace_captures_state_chk" CHECK ("state" IN ('available','failed'))
+);
+
+-- Monotonic revision per session (the assign-revision + read-latest key).
+CREATE UNIQUE INDEX IF NOT EXISTS "workspace_captures_session_revision_idx"
+  ON "workspace_captures" ("session_id", "revision");
+-- Latest-capture lookup and GC scan without touching the event spine.
+CREATE INDEX IF NOT EXISTS "workspace_captures_latest_idx"
+  ON "workspace_captures" ("workspace_id", "session_id", "revision" DESC);
+
+-- ============== RLS + grants (schema-aware boilerplate, per 0043) =============
+ALTER TABLE "workspace_captures" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "workspace_captures" FORCE  ROW LEVEL SECURITY;
+
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'workspace_captures' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "workspace_captures";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "workspace_captures"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA %I TO opengeni_app',
+      current_schema()
+    );
+  END IF;
+END $$;

package/drizzle/0045_workspace_memory_v1.sql

@@ -0,0 +1,71 @@
+-- Workspace Memory V1.
+-- Evolves the knowledge_memories table into an agent-writable, hybrid-searchable
+-- memory store, and gives workspaces a growth-ready settings jsonb column.
+-- Follows 0041_knowledge_layer.sql: IF NOT EXISTS column adds, current_schema()
+-- guards, DO blocks for constraints. NO ANN index (3072 dims exceed pgvector's
+-- HNSW cap; reads do a sequential cosine scan like document search). NO policy
+-- changes (the table already has FORCE RLS + workspace_isolation from 0041).
+
+-- Growth-ready per-workspace settings bag (holds memoryEnabled and future keys).
+ALTER TABLE "workspaces" ADD COLUMN IF NOT EXISTS "settings" jsonb NOT NULL DEFAULT '{}'::jsonb;
+
+-- Memory columns on the existing row (single short texts; no chunk table).
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "embedding" vector(3072);
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "embedding_model" text;
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "pinned" boolean NOT NULL DEFAULT false;
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "usage_count" integer NOT NULL DEFAULT 0;
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "last_used_at" timestamptz;
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "supersedes_id" uuid;
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "superseded_by_id" uuid;
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "valid_from" timestamptz NOT NULL DEFAULT now();
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "valid_until" timestamptz;
+-- Exact-dedup key. Hash of the NORMALIZED text, where normalization is
+-- lower(collapse-internal-whitespace(trim(text))). The application computes the
+-- IDENTICAL value in packages/core/src/domain/memory.ts (normalizeMemoryText +
+-- hashMemoryText) so exact-dup detection matches across the migration backfill
+-- and every runtime write. Keep the two in lockstep.
+ALTER TABLE "knowledge_memories" ADD COLUMN IF NOT EXISTS "text_hash" text;
+
+-- Supersession links (same table). ON DELETE SET NULL: dropping a record must not
+-- cascade-delete its chain neighbours.
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'knowledge_memories_supersedes_fk'
+  ) THEN
+    ALTER TABLE "knowledge_memories" ADD CONSTRAINT "knowledge_memories_supersedes_fk"
+      FOREIGN KEY ("supersedes_id") REFERENCES "knowledge_memories"("id") ON DELETE SET NULL;
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'knowledge_memories_superseded_by_fk'
+  ) THEN
+    ALTER TABLE "knowledge_memories" ADD CONSTRAINT "knowledge_memories_superseded_by_fk"
+      FOREIGN KEY ("superseded_by_id") REFERENCES "knowledge_memories"("id") ON DELETE SET NULL;
+  END IF;
+END $$;
+
+-- Working-set + dedup access paths.
+CREATE INDEX IF NOT EXISTS "knowledge_memories_workspace_visible_idx"
+  ON "knowledge_memories" ("workspace_id", "pinned" DESC, "updated_at" DESC)
+  WHERE "status" IN ('active', 'approved');
+CREATE INDEX IF NOT EXISTS "knowledge_memories_workspace_text_hash_idx"
+  ON "knowledge_memories" ("workspace_id", "text_hash");
+-- Enforce the exact-dedup invariant for the agent-visible set. Proposed and
+-- terminal rows remain outside the constraint because agents cannot act on them.
+CREATE UNIQUE INDEX IF NOT EXISTS "knowledge_memories_workspace_visible_text_hash_uq"
+  ON "knowledge_memories" ("workspace_id", "text_hash")
+  WHERE "status" IN ('active', 'approved') AND "text_hash" IS NOT NULL;
+
+-- Backfill text_hash for pre-existing rows using the same normalization the app
+-- applies at write time: lower(collapse-ws(trim(text))), sha256, hex-encoded.
+-- Normalization MUST equal normalizeMemoryText in memory-domain.ts:
+-- collapse every whitespace run to a single space, then trim, then lowercase.
+--   JS:  text.replace(/\s+/g, " ").trim().toLowerCase()
+--   SQL: lower(btrim(regexp_replace(text, '\s+', ' ', 'g')))
+UPDATE "knowledge_memories"
+  SET "text_hash" = encode(sha256(convert_to(lower(btrim(regexp_replace("text", '\s+', ' ', 'g'))), 'UTF8')), 'hex')
+  WHERE "text_hash" IS NULL;

package/drizzle/0046_variable_sets_rename.sql

@@ -0,0 +1,56 @@
+-- Rename workspace secret Environments to Variable Sets.
+-- Keeps data in place; public compatibility aliases live in API/contracts/SDK.
+
+ALTER TABLE IF EXISTS "workspace_environments" RENAME TO "workspace_variable_sets";
+ALTER TABLE IF EXISTS "workspace_environment_variables" RENAME TO "workspace_variable_set_variables";
+
+ALTER TABLE IF EXISTS "workspace_variable_set_variables" RENAME COLUMN "environment_id" TO "variable_set_id";
+ALTER TABLE IF EXISTS "sessions" RENAME COLUMN "environment_id" TO "variable_set_id";
+ALTER TABLE IF EXISTS "scheduled_tasks" RENAME COLUMN "environment_id" TO "variable_set_id";
+
+ALTER INDEX IF EXISTS "workspace_environments_workspace_name_idx" RENAME TO "workspace_variable_sets_workspace_name_idx";
+ALTER INDEX IF EXISTS "workspace_environments_workspace_created_idx" RENAME TO "workspace_variable_sets_workspace_created_idx";
+ALTER INDEX IF EXISTS "workspace_environment_variables_env_name_idx" RENAME TO "workspace_variable_set_variables_env_name_idx";
+ALTER INDEX IF EXISTS "workspace_environment_variables_workspace_env_idx" RENAME TO "workspace_variable_set_variables_workspace_env_idx";
+ALTER INDEX IF EXISTS "sessions_environment_idx" RENAME TO "sessions_variable_set_idx";
+ALTER INDEX IF EXISTS "scheduled_tasks_environment_idx" RENAME TO "scheduled_tasks_variable_set_idx";
+
+ALTER TABLE "workspace_variable_sets" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "workspace_variable_sets" FORCE ROW LEVEL SECURITY;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'workspace_variable_sets' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "workspace_variable_sets";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "workspace_variable_sets"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+ALTER TABLE "workspace_variable_set_variables" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "workspace_variable_set_variables" FORCE ROW LEVEL SECURITY;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'workspace_variable_set_variables' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "workspace_variable_set_variables";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "workspace_variable_set_variables"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA %I TO opengeni_app',
+      current_schema()
+    );
+  END IF;
+END $$;

package/drizzle/0047_rigs.sql

@@ -0,0 +1,151 @@
+-- Rigs: workspace-scoped, versioned sandbox machine definitions.
+--   rigs           — the named definition (one row per rig).
+--   rig_versions   — append-only, content-immutable versions; exactly one active
+--                    per rig (partial unique index). Only the `active` flag flips.
+--   rig_changes    — proposed/verified change records (M4 substrate only here).
+-- Plus M3 wiring columns (sessions/scheduled_tasks/workspaces) added now so the
+-- runtime-binding milestone needs no further migration. RLS/GRANT idiom mirrors
+-- 0041_knowledge_layer.sql.
+
+CREATE TABLE IF NOT EXISTS "rigs" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "name" text NOT NULL,
+  "description" text,
+  "created_by" text,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "rigs_workspace_name_idx" ON "rigs" ("workspace_id", "name");
+CREATE INDEX IF NOT EXISTS "rigs_workspace_created_idx" ON "rigs" ("workspace_id", "created_at");
+
+CREATE TABLE IF NOT EXISTS "rig_versions" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "rig_id" uuid NOT NULL REFERENCES "rigs"("id") ON DELETE CASCADE,
+  "version" integer NOT NULL,
+  "image" text,
+  "setup_script" text,
+  "checks" jsonb NOT NULL DEFAULT '[]'::jsonb,
+  "credential_hooks" jsonb NOT NULL DEFAULT '[]'::jsonb,
+  "default_variable_set_ids" jsonb NOT NULL DEFAULT '[]'::jsonb,
+  "changelog" text,
+  "created_by" text,
+  "active" boolean NOT NULL DEFAULT false,
+  "created_at" timestamptz NOT NULL DEFAULT now()
+);
+
+-- Monotonic version number per rig.
+CREATE UNIQUE INDEX IF NOT EXISTS "rig_versions_rig_version_idx" ON "rig_versions" ("rig_id", "version");
+-- At most one active version per rig (single-active invariant enforced in DB).
+CREATE UNIQUE INDEX IF NOT EXISTS "rig_versions_rig_active_idx" ON "rig_versions" ("rig_id") WHERE "active";
+CREATE INDEX IF NOT EXISTS "rig_versions_workspace_rig_idx" ON "rig_versions" ("workspace_id", "rig_id", "version");
+
+CREATE TABLE IF NOT EXISTS "rig_changes" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "rig_id" uuid NOT NULL REFERENCES "rigs"("id") ON DELETE CASCADE,
+  "base_version_id" uuid REFERENCES "rig_versions"("id") ON DELETE SET NULL,
+  "kind" text NOT NULL,
+  "payload" jsonb NOT NULL,
+  "status" text NOT NULL DEFAULT 'proposed',
+  "proposed_by" text,
+  "verification" jsonb,
+  "result_version_id" uuid REFERENCES "rig_versions"("id") ON DELETE SET NULL,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "rig_changes_kind_check" CHECK ("kind" IN ('setup_append', 'definition_edit')),
+  CONSTRAINT "rig_changes_status_check" CHECK ("status" IN ('proposed', 'verifying', 'merged', 'rejected', 'failed'))
+);
+
+CREATE INDEX IF NOT EXISTS "rig_changes_workspace_rig_idx" ON "rig_changes" ("workspace_id", "rig_id", "created_at");
+CREATE INDEX IF NOT EXISTS "rig_changes_workspace_status_idx" ON "rig_changes" ("workspace_id", "status");
+
+-- M3 wiring columns (inert until the runtime-binding milestone consumes them).
+ALTER TABLE "sessions" ADD COLUMN IF NOT EXISTS "rig_id" uuid;
+ALTER TABLE "sessions" ADD COLUMN IF NOT EXISTS "rig_version_id" uuid;
+ALTER TABLE "scheduled_tasks" ADD COLUMN IF NOT EXISTS "rig_id" uuid;
+ALTER TABLE "workspaces" ADD COLUMN IF NOT EXISTS "default_rig_id" uuid;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'sessions_rig_id_fk') THEN
+    ALTER TABLE "sessions" ADD CONSTRAINT "sessions_rig_id_fk"
+      FOREIGN KEY ("rig_id") REFERENCES "rigs"("id") ON DELETE SET NULL;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'sessions_rig_version_id_fk') THEN
+    ALTER TABLE "sessions" ADD CONSTRAINT "sessions_rig_version_id_fk"
+      FOREIGN KEY ("rig_version_id") REFERENCES "rig_versions"("id") ON DELETE SET NULL;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'scheduled_tasks_rig_id_fk') THEN
+    ALTER TABLE "scheduled_tasks" ADD CONSTRAINT "scheduled_tasks_rig_id_fk"
+      FOREIGN KEY ("rig_id") REFERENCES "rigs"("id") ON DELETE SET NULL;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'workspaces_default_rig_id_fk') THEN
+    ALTER TABLE "workspaces" ADD CONSTRAINT "workspaces_default_rig_id_fk"
+      FOREIGN KEY ("default_rig_id") REFERENCES "rigs"("id") ON DELETE SET NULL;
+  END IF;
+END $$;
+
+CREATE INDEX IF NOT EXISTS "sessions_rig_idx" ON "sessions" ("workspace_id", "rig_id");
+CREATE INDEX IF NOT EXISTS "scheduled_tasks_rig_idx" ON "scheduled_tasks" ("workspace_id", "rig_id");
+
+-- Row-level security: workspace isolation on every rig table.
+ALTER TABLE "rigs" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "rigs" FORCE ROW LEVEL SECURITY;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'rigs' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "rigs";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "rigs"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+ALTER TABLE "rig_versions" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "rig_versions" FORCE ROW LEVEL SECURITY;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'rig_versions' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "rig_versions";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "rig_versions"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+ALTER TABLE "rig_changes" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "rig_changes" FORCE ROW LEVEL SECURITY;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_policies
+    WHERE schemaname = current_schema() AND tablename = 'rig_changes' AND policyname = 'workspace_isolation'
+  ) THEN
+    DROP POLICY workspace_isolation ON "rig_changes";
+  END IF;
+END $$;
+CREATE POLICY workspace_isolation ON "rig_changes"
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA %I TO opengeni_app',
+      current_schema()
+    );
+  END IF;
+END $$;

package/drizzle/0048_rig_runtime.sql

@@ -0,0 +1,9 @@
+-- M3 runtime binding: stamp the frozen rig version onto the group lease so a
+-- live shared box conflicts on a rig-version mismatch exactly as it does on an
+-- image mismatch (a shared box is one filesystem; a different rig = different
+-- setup/tooling baked in). Nullable: a legacy/cold row or a rig-less session
+-- reads NULL = "rig unknown", which never conflicts (rig-less sessions share as
+-- today). sandbox_leases carries NO row-level security (it is keyed by a bare
+-- sandbox_group_id, not an FK — see schema.ts), so this is a bare ADD COLUMN
+-- with no policy/grant changes, mirroring the existing `image` column.
+ALTER TABLE "sandbox_leases" ADD COLUMN IF NOT EXISTS "rig_version_id" uuid;

package/drizzle/0049_enrollment_went_offline.sql

@@ -0,0 +1,28 @@
+-- Immediate-offline on a CLEAN going-offline signal.
+--
+-- A machine that explicitly announced "I'm stopping" (a typed GoingOffline:
+-- user-stop / self-update / host-shutdown) must read OFFLINE immediately — for the
+-- Machines dashboard AND for anything deciding whether to route work at it —
+-- instead of waiting out the last_seen dead-detect window. Persist that goodbye as
+-- a nullable marker on the enrollment: went_offline_at (WHEN it said goodbye) +
+-- went_offline_reason (the typed reason string). The liveness derivation gives an
+-- un-cleared marker precedence over last_seen aging; ANY newer liveness signal (a
+-- reconnect Hello or a fresher heartbeat) clears it back to NULL. Both NULL (the
+-- default) ⇒ today's behavior exactly — every existing + new row is a
+-- behavior-preserving no-op, no backfill.
+ALTER TABLE "enrollments"
+  ADD COLUMN IF NOT EXISTS "went_offline_at" timestamptz,
+  ADD COLUMN IF NOT EXISTS "went_offline_reason" text;
+
+-- Re-grant on the new columns (idempotent; schema-agnostic per the Migration
+-- Authoring rules — grants target current_schema() via dynamic SQL so an embedded
+-- host running under a dedicated data schema is covered, not just `public`).
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    EXECUTE format(
+      'GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA %I TO opengeni_app',
+      current_schema()
+    );
+  END IF;
+END $$;

package/drizzle/0050_enrollment_op_stream.sql

@@ -0,0 +1 @@
+ALTER TABLE "enrollments" ADD COLUMN "op_stream" boolean DEFAULT false NOT NULL;