@opengeni/db 1.0.1 → 3.2.0-canary.0

package/drizzle/0317_session_goal_continuation_hold.sql

@@ -0,0 +1,64 @@
+-- deployment-mode: rolling
+SET lock_timeout = '5s';
+SET statement_timeout = '10min';
+
+-- Agent-declared goal continuation hold.
+--
+-- An orchestrator whose active goal depends on child sessions or an external
+-- event can call the first-party `goal_wait` tool instead of busy-polling. The
+-- hold is additive state on the goal row: the exact turn that declared it, the
+-- mandatory deadline, a bounded reason, and when it was recorded. The
+-- continuation materializer honors the hold only while the declaring turn is
+-- still the latest finished turn and the deadline has not passed; it never
+-- consumes the wake/observed revision ledger, so a crash cannot lose the
+-- obligation. Any newer finished turn, a passed deadline, or a human/API/agent
+-- goal mutation clears all four columns together.
+--
+-- An old worker that ignores these columns keeps the prior behaviour
+-- (immediate continuation), so this is a rolling, additive change with no
+-- backfill.
+
+ALTER TABLE "session_goals"
+  ADD COLUMN IF NOT EXISTS "continuation_hold_turn_id" uuid,
+  ADD COLUMN IF NOT EXISTS "continuation_hold_until" timestamptz,
+  ADD COLUMN IF NOT EXISTS "continuation_hold_reason" text,
+  ADD COLUMN IF NOT EXISTS "continuation_hold_set_at" timestamptz;
+
+DO $constraints$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'session_goals_continuation_hold_check'
+      AND conrelid = 'session_goals'::regclass
+  ) THEN
+    ALTER TABLE "session_goals"
+      ADD CONSTRAINT "session_goals_continuation_hold_check"
+      CHECK (
+        (
+          "continuation_hold_turn_id" IS NULL
+          AND "continuation_hold_until" IS NULL
+          AND "continuation_hold_reason" IS NULL
+          AND "continuation_hold_set_at" IS NULL
+        )
+        OR (
+          "continuation_hold_turn_id" IS NOT NULL
+          AND "continuation_hold_until" IS NOT NULL
+          AND "continuation_hold_set_at" IS NOT NULL
+          AND (
+            "continuation_hold_reason" IS NULL
+            OR octet_length("continuation_hold_reason") <= 2048
+          )
+        )
+      );
+  END IF;
+END
+$constraints$;
+
+COMMENT ON COLUMN "session_goals"."continuation_hold_turn_id" IS
+  'Exact turn that declared the goal_wait hold; the hold applies only while this is the latest finished turn.';
+COMMENT ON COLUMN "session_goals"."continuation_hold_until" IS
+  'Mandatory hold deadline; the materializer re-arms a delayed workflow wake at this time and clears the hold once it passes.';
+COMMENT ON COLUMN "session_goals"."continuation_hold_reason" IS
+  'Bounded (2 KiB) agent-declared reason for the hold.';
+COMMENT ON COLUMN "session_goals"."continuation_hold_set_at" IS
+  'When the hold was recorded.';

package/drizzle/0318_session_turn_startup_milestones.sql

@@ -0,0 +1,115 @@
+-- deployment-mode: rolling
+-- Per-turn startup-milestone ledger.
+--
+-- The turn-startup SLO receipts (queue, provider_dispatch, first_byte) used to
+-- be decided by re-reading the turn's `session_events` rows on every inserted
+-- `turn.started`, `agent.model.request started|first_byte|first_event`, and
+-- `turn.failed` event: "is the event this transaction just inserted the
+-- lowest-sequence canonical checkpoint of its kind in the turn?". That lookup
+-- is O(events in the turn) per model request, each examined row pays the
+-- session-events RLS predicate, and it runs inside the event-append
+-- transaction that holds the workspace inference-control row FOR SHARE. On a
+-- long orchestrator turn it held that row for tens of seconds per model
+-- request and starved every FOR UPDATE taker (Send/Steer/Pause).
+--
+-- This table makes "the first inserter of each checkpoint wins" a single
+-- primary-key probe: the transaction that appends a checkpoint event performs
+-- `INSERT ... ON CONFLICT DO NOTHING RETURNING`, and only a returned row is a
+-- metric receipt. Ordinary attempt recovery and callback replay conflict and
+-- stay no-ops, exactly as before. Writers already hold the turn row FOR UPDATE
+-- (the canonical event-write lock order), so the conflict clause is
+-- idempotency, not a race resolver.
+--
+-- Rollout: turns whose `turn.started` was already durable before a
+-- ledger-aware writer touched them (in flight across the deploy, or claimed by
+-- a pre-ledger worker during the rolling window) are recognised at their next
+-- `turn.started` claim through one bounded index probe for an earlier current
+-- `turn.started` row, and sealed with `pre_ledger_history` sentinel rows for
+-- every completed checkpoint. Such a turn emits no further startup receipts
+-- (it already observed them, or may have) instead of re-observing a checkpoint
+-- with a duration equal to its age. No migration-time backfill over
+-- FORCE-RLS tables is required.
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '10min';
+
+CREATE TABLE "session_turn_startup_milestones" (
+  "account_id" uuid NOT NULL,
+  "workspace_id" uuid NOT NULL,
+  "session_id" uuid NOT NULL,
+  "turn_id" uuid NOT NULL,
+  "milestone" text NOT NULL,
+  "outcome" text NOT NULL,
+  "canonical_source" text NOT NULL,
+  "event_id" uuid,
+  "occurred_at" timestamptz,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "session_turn_startup_milestones_pkey"
+    PRIMARY KEY ("workspace_id", "turn_id", "milestone", "outcome"),
+  CONSTRAINT "session_turn_startup_milestones_workspace_account_fk"
+    FOREIGN KEY ("workspace_id", "account_id")
+    REFERENCES "workspaces"("id", "account_id") ON DELETE CASCADE,
+  CONSTRAINT "session_turn_startup_milestones_workspace_session_fk"
+    FOREIGN KEY ("workspace_id", "session_id")
+    REFERENCES "sessions"("workspace_id", "id") ON DELETE CASCADE,
+  CONSTRAINT "session_turn_startup_milestones_workspace_turn_fk"
+    FOREIGN KEY ("workspace_id", "turn_id")
+    REFERENCES "session_turns"("workspace_id", "id") ON DELETE CASCADE,
+  CONSTRAINT "session_turn_startup_milestones_milestone_chk"
+    CHECK ("milestone" IN ('queue', 'provider_dispatch', 'first_byte')),
+  CONSTRAINT "session_turn_startup_milestones_outcome_chk"
+    CHECK ("outcome" IN ('completed', 'failed')),
+  CONSTRAINT "session_turn_startup_milestones_checkpoint_chk"
+    CHECK ("outcome" = 'completed' OR "milestone" = 'first_byte'),
+  CONSTRAINT "session_turn_startup_milestones_canonical_source_chk" CHECK (
+    (
+      "canonical_source" = 'inserted_event'
+      AND "event_id" IS NOT NULL
+      AND "occurred_at" IS NOT NULL
+    )
+    OR (
+      "canonical_source" = 'pre_ledger_history'
+      AND "outcome" = 'completed'
+      AND "event_id" IS NULL
+      AND "occurred_at" IS NULL
+    )
+  )
+);
+
+-- The session FK cascade must not sequentially scan the ledger per deleted
+-- session; the turn and workspace FKs are covered by the primary-key prefix.
+CREATE INDEX "session_turn_startup_milestones_workspace_session_idx"
+  ON "session_turn_startup_milestones" ("workspace_id", "session_id");
+
+ALTER TABLE "session_turn_startup_milestones" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "session_turn_startup_milestones" FORCE ROW LEVEL SECURITY;
+CREATE POLICY workspace_isolation ON "session_turn_startup_milestones"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+CREATE POLICY session_visibility_isolation ON "session_turn_startup_milestones"
+  AS RESTRICTIVE
+  USING (session_reference_visible(
+    "account_id", "workspace_id", "session_id"
+  ))
+  WITH CHECK (session_reference_visible(
+    "account_id", "workspace_id", "session_id"
+  ));
+
+-- The runtime role claims (INSERT), fences (SELECT), and seals pre-ledger turns
+-- (UPDATE of the turn's own queue row); rows leave only through the turn
+-- cascade. `db:provision-roles` re-converges the same posture.
+DO $grants$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'opengeni_app') THEN
+    GRANT SELECT, INSERT, UPDATE ON "session_turn_startup_milestones" TO opengeni_app;
+    REVOKE DELETE ON "session_turn_startup_milestones" FROM opengeni_app;
+  END IF;
+END
+$grants$;
+
+COMMENT ON TABLE "session_turn_startup_milestones" IS
+  'Per-turn startup SLO checkpoint ledger: one row per (turn, milestone, outcome). The transaction whose INSERT ... ON CONFLICT DO NOTHING returns the row is the canonical inserter and the sole metric receipt; recovery and replay conflict. pre_ledger_history rows seal a turn whose startup predates the ledger so it never re-observes a checkpoint.';
+COMMENT ON COLUMN "session_turn_startup_milestones"."canonical_source" IS
+  'inserted_event: event_id/occurred_at name the canonical checkpoint event inserted by the claiming transaction. pre_ledger_history: the checkpoint was (or may have been) durable before any ledger-aware writer touched the turn; identity is deliberately not recovered from session_events.';
+COMMENT ON COLUMN "session_turn_startup_milestones"."occurred_at" IS
+  'The canonical event''s own occurred_at; the receipt duration is measured from session_turns.created_at to this instant.';

package/drizzle/0319_event_triggered_automations.sql

@@ -0,0 +1,254 @@
+-- deployment-mode: rolling
+-- Generic event-triggered automations. Sources authenticate ingress, immutable
+-- trigger revisions own matching/session templates, events retain normalized
+-- occurrence truth, and runs freeze the exact session execution admitted for
+-- one logical occurrence. Agent execution remains an ordinary session.
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '10min';
+
+CREATE UNIQUE INDEX IF NOT EXISTS pack_installations_workspace_id_uq
+  ON pack_installations(workspace_id, id);
+
+CREATE TABLE automation_sources (
+  id uuid PRIMARY KEY DEFAULT pg_catalog.gen_random_uuid(),
+  endpoint_id uuid NOT NULL DEFAULT pg_catalog.gen_random_uuid(),
+  account_id uuid NOT NULL REFERENCES managed_accounts(id) ON DELETE CASCADE,
+  workspace_id uuid NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  name text NOT NULL,
+  adapter_id text NOT NULL,
+  configuration jsonb NOT NULL DEFAULT '{}'::jsonb,
+  webhook_secret_encrypted text NOT NULL,
+  status text NOT NULL DEFAULT 'active',
+  version integer NOT NULL DEFAULT 1,
+  pack_installation_id uuid,
+  pack_connector_id text,
+  created_by_subject_id text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT automation_sources_workspace_account_fk FOREIGN KEY (workspace_id, account_id)
+    REFERENCES workspaces(id, account_id) ON DELETE CASCADE,
+  CONSTRAINT automation_sources_pack_installation_fk
+    FOREIGN KEY (workspace_id, pack_installation_id)
+    REFERENCES pack_installations(workspace_id, id) ON DELETE CASCADE,
+  CONSTRAINT automation_sources_shape_chk CHECK (
+    status IN ('active', 'disabled') AND version > 0
+    AND octet_length(name) BETWEEN 1 AND 512
+    AND octet_length(adapter_id) BETWEEN 1 AND 128
+    AND octet_length(created_by_subject_id) BETWEEN 1 AND 4096
+    AND jsonb_typeof(configuration) = 'object'
+    AND ((pack_installation_id IS NULL AND pack_connector_id IS NULL)
+      OR (pack_installation_id IS NOT NULL
+        AND octet_length(pack_connector_id) BETWEEN 1 AND 128))
+  )
+);
+CREATE UNIQUE INDEX automation_sources_endpoint_uq ON automation_sources(endpoint_id);
+CREATE UNIQUE INDEX automation_sources_workspace_id_uq ON automation_sources(workspace_id, id);
+CREATE INDEX automation_sources_workspace_status_idx ON automation_sources(workspace_id, status);
+
+-- Credential-free routing only. The endpoint UUID discovers the tenant/source;
+-- the FORCE-RLS source row and its encrypted secret still authenticate ingress.
+CREATE TABLE automation_webhook_endpoints (
+  endpoint_id uuid PRIMARY KEY,
+  account_id uuid NOT NULL REFERENCES managed_accounts(id) ON DELETE CASCADE,
+  workspace_id uuid NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  source_id uuid NOT NULL UNIQUE REFERENCES automation_sources(id) ON DELETE CASCADE,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT automation_webhook_endpoints_workspace_account_fk FOREIGN KEY (workspace_id, account_id)
+    REFERENCES workspaces(id, account_id) ON DELETE CASCADE
+);
+
+CREATE TABLE automation_triggers (
+  id uuid PRIMARY KEY DEFAULT pg_catalog.gen_random_uuid(),
+  account_id uuid NOT NULL REFERENCES managed_accounts(id) ON DELETE CASCADE,
+  workspace_id uuid NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  source_id uuid NOT NULL,
+  name text NOT NULL,
+  status text NOT NULL DEFAULT 'active',
+  current_revision integer NOT NULL DEFAULT 1,
+  pack_installation_id uuid,
+  pack_template_id text,
+  created_by_subject_id text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT automation_triggers_workspace_account_fk FOREIGN KEY (workspace_id, account_id)
+    REFERENCES workspaces(id, account_id) ON DELETE CASCADE,
+  CONSTRAINT automation_triggers_source_fk FOREIGN KEY (workspace_id, source_id)
+    REFERENCES automation_sources(workspace_id, id) ON DELETE CASCADE,
+  CONSTRAINT automation_triggers_pack_installation_fk
+    FOREIGN KEY (workspace_id, pack_installation_id)
+    REFERENCES pack_installations(workspace_id, id) ON DELETE CASCADE,
+  CONSTRAINT automation_triggers_shape_chk CHECK (
+    status IN ('active', 'paused', 'disabled') AND current_revision > 0
+    AND octet_length(name) BETWEEN 1 AND 512
+    AND octet_length(created_by_subject_id) BETWEEN 1 AND 4096
+    AND ((pack_installation_id IS NULL AND pack_template_id IS NULL)
+      OR (pack_installation_id IS NOT NULL AND octet_length(pack_template_id) BETWEEN 1 AND 128))
+  )
+);
+CREATE UNIQUE INDEX automation_triggers_workspace_id_uq ON automation_triggers(workspace_id, id);
+CREATE UNIQUE INDEX automation_triggers_workspace_source_id_uq
+  ON automation_triggers(workspace_id, id, source_id);
+CREATE INDEX automation_triggers_workspace_status_idx ON automation_triggers(workspace_id, status);
+
+CREATE TABLE automation_trigger_revisions (
+  trigger_id uuid NOT NULL,
+  revision integer NOT NULL,
+  account_id uuid NOT NULL,
+  workspace_id uuid NOT NULL,
+  adapter_id text NOT NULL,
+  event_types jsonb NOT NULL,
+  configuration jsonb NOT NULL DEFAULT '{}'::jsonb,
+  parameters jsonb NOT NULL DEFAULT '{}'::jsonb,
+  session_template jsonb NOT NULL,
+  created_by_subject_id text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (trigger_id, revision),
+  CONSTRAINT automation_trigger_revisions_trigger_fk FOREIGN KEY (workspace_id, trigger_id)
+    REFERENCES automation_triggers(workspace_id, id) ON DELETE CASCADE,
+  CONSTRAINT automation_trigger_revisions_workspace_account_fk FOREIGN KEY (workspace_id, account_id)
+    REFERENCES workspaces(id, account_id) ON DELETE CASCADE,
+  CONSTRAINT automation_trigger_revisions_shape_chk CHECK (
+    revision > 0 AND octet_length(adapter_id) BETWEEN 1 AND 128
+    AND jsonb_typeof(event_types) = 'array' AND jsonb_array_length(event_types) BETWEEN 1 AND 64
+    AND jsonb_typeof(configuration) = 'object'
+    AND jsonb_typeof(parameters) = 'object'
+    AND jsonb_typeof(session_template) = 'object'
+  )
+);
+
+CREATE TABLE automation_trigger_events (
+  id uuid PRIMARY KEY DEFAULT pg_catalog.gen_random_uuid(),
+  account_id uuid NOT NULL,
+  workspace_id uuid NOT NULL,
+  source_id uuid NOT NULL,
+  source_version integer NOT NULL,
+  source_configuration jsonb NOT NULL,
+  matched_trigger_revisions jsonb NOT NULL,
+  delivery_key text NOT NULL,
+  request_digest text NOT NULL,
+  adapter_id text NOT NULL,
+  event_type text NOT NULL,
+  occurrence_key text NOT NULL,
+  normalized_event jsonb NOT NULL,
+  status text NOT NULL DEFAULT 'accepted',
+  ignored_reason text,
+  error_code text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT automation_trigger_events_source_fk FOREIGN KEY (workspace_id, source_id)
+    REFERENCES automation_sources(workspace_id, id) ON DELETE CASCADE,
+  CONSTRAINT automation_trigger_events_workspace_account_fk FOREIGN KEY (workspace_id, account_id)
+    REFERENCES workspaces(id, account_id) ON DELETE CASCADE,
+  CONSTRAINT automation_trigger_events_shape_chk CHECK (
+    status IN ('accepted', 'ignored', 'failed')
+    AND source_version > 0
+    AND jsonb_typeof(source_configuration) = 'object'
+    AND jsonb_typeof(matched_trigger_revisions) = 'array'
+    AND jsonb_array_length(matched_trigger_revisions) <= 32
+    AND request_digest ~ '^[0-9a-f]{64}$'
+    AND octet_length(delivery_key) BETWEEN 1 AND 1024
+    AND octet_length(event_type) BETWEEN 1 AND 256
+    AND octet_length(occurrence_key) BETWEEN 1 AND 1024
+    AND jsonb_typeof(normalized_event) = 'object'
+  )
+);
+CREATE UNIQUE INDEX automation_trigger_events_source_delivery_uq
+  ON automation_trigger_events(source_id, delivery_key);
+CREATE INDEX automation_trigger_events_workspace_created_idx
+  ON automation_trigger_events(workspace_id, created_at);
+CREATE UNIQUE INDEX automation_trigger_events_workspace_source_id_uq
+  ON automation_trigger_events(workspace_id, source_id, id);
+
+CREATE TABLE automation_runs (
+  id uuid PRIMARY KEY DEFAULT pg_catalog.gen_random_uuid(),
+  account_id uuid NOT NULL,
+  workspace_id uuid NOT NULL,
+  source_id uuid NOT NULL,
+  trigger_id uuid NOT NULL,
+  trigger_revision integer NOT NULL,
+  event_id uuid NOT NULL,
+  occurrence_key text NOT NULL,
+  accepted_execution jsonb NOT NULL,
+  status text NOT NULL DEFAULT 'queued',
+  session_id uuid REFERENCES sessions(id) ON DELETE SET NULL,
+  error_code text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT automation_runs_trigger_revision_fk FOREIGN KEY (trigger_id, trigger_revision)
+    REFERENCES automation_trigger_revisions(trigger_id, revision) ON DELETE RESTRICT,
+  CONSTRAINT automation_runs_source_fk FOREIGN KEY (workspace_id, source_id)
+    REFERENCES automation_sources(workspace_id, id) ON DELETE RESTRICT,
+  CONSTRAINT automation_runs_trigger_source_fk FOREIGN KEY (workspace_id, trigger_id, source_id)
+    REFERENCES automation_triggers(workspace_id, id, source_id) ON DELETE RESTRICT,
+  CONSTRAINT automation_runs_event_fk FOREIGN KEY (workspace_id, source_id, event_id)
+    REFERENCES automation_trigger_events(workspace_id, source_id, id) ON DELETE RESTRICT,
+  CONSTRAINT automation_runs_workspace_account_fk FOREIGN KEY (workspace_id, account_id)
+    REFERENCES workspaces(id, account_id) ON DELETE CASCADE,
+  CONSTRAINT automation_runs_shape_chk CHECK (
+    trigger_revision > 0
+    AND status IN ('queued', 'dispatching', 'dispatched', 'skipped', 'failed')
+    AND octet_length(occurrence_key) BETWEEN 1 AND 1024
+    AND jsonb_typeof(accepted_execution) = 'object'
+  )
+);
+CREATE UNIQUE INDEX automation_runs_trigger_occurrence_uq
+  ON automation_runs(trigger_id, occurrence_key);
+CREATE INDEX automation_runs_workspace_status_idx
+  ON automation_runs(workspace_id, status, created_at);
+CREATE UNIQUE INDEX automation_runs_workspace_trigger_id_uq
+  ON automation_runs(workspace_id, trigger_id, id);
+
+CREATE TABLE automation_run_event_links (
+  run_id uuid NOT NULL REFERENCES automation_runs(id) ON DELETE CASCADE,
+  event_id uuid NOT NULL REFERENCES automation_trigger_events(id) ON DELETE CASCADE,
+  account_id uuid NOT NULL,
+  workspace_id uuid NOT NULL,
+  source_id uuid NOT NULL,
+  trigger_id uuid NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (run_id, event_id),
+  CONSTRAINT automation_run_event_links_workspace_account_fk FOREIGN KEY (workspace_id, account_id)
+    REFERENCES workspaces(id, account_id) ON DELETE CASCADE,
+  CONSTRAINT automation_run_event_links_run_fk FOREIGN KEY (workspace_id, trigger_id, run_id)
+    REFERENCES automation_runs(workspace_id, trigger_id, id) ON DELETE CASCADE,
+  CONSTRAINT automation_run_event_links_event_fk FOREIGN KEY (workspace_id, source_id, event_id)
+    REFERENCES automation_trigger_events(workspace_id, source_id, id) ON DELETE CASCADE
+);
+CREATE UNIQUE INDEX automation_run_event_links_event_trigger_uq
+  ON automation_run_event_links(event_id, trigger_id);
+
+ALTER TABLE automation_sources ENABLE ROW LEVEL SECURITY;
+ALTER TABLE automation_sources FORCE ROW LEVEL SECURITY;
+ALTER TABLE automation_triggers ENABLE ROW LEVEL SECURITY;
+ALTER TABLE automation_triggers FORCE ROW LEVEL SECURITY;
+ALTER TABLE automation_trigger_revisions ENABLE ROW LEVEL SECURITY;
+ALTER TABLE automation_trigger_revisions FORCE ROW LEVEL SECURITY;
+ALTER TABLE automation_trigger_events ENABLE ROW LEVEL SECURITY;
+ALTER TABLE automation_trigger_events FORCE ROW LEVEL SECURITY;
+ALTER TABLE automation_runs ENABLE ROW LEVEL SECURITY;
+ALTER TABLE automation_runs FORCE ROW LEVEL SECURITY;
+ALTER TABLE automation_run_event_links ENABLE ROW LEVEL SECURITY;
+ALTER TABLE automation_run_event_links FORCE ROW LEVEL SECURITY;
+
+CREATE POLICY automation_sources_tenant ON automation_sources
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+CREATE POLICY automation_triggers_tenant ON automation_triggers
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+CREATE POLICY automation_trigger_revisions_tenant ON automation_trigger_revisions
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+CREATE POLICY automation_trigger_events_tenant ON automation_trigger_events
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+CREATE POLICY automation_runs_tenant ON automation_runs
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+CREATE POLICY automation_run_event_links_tenant ON automation_run_event_links
+  USING (opengeni_private.workspace_rls_visible(account_id, workspace_id))
+  WITH CHECK (opengeni_private.workspace_rls_visible(account_id, workspace_id));
+CREATE POLICY session_visibility_isolation ON automation_runs AS RESTRICTIVE
+  USING (session_reference_visible(account_id, workspace_id, session_id))
+  WITH CHECK (session_reference_visible(account_id, workspace_id, session_id));

package/drizzle/0320_pr_review_pack.sql

@@ -0,0 +1,113 @@
+-- deployment-mode: rolling
+SET lock_timeout = '5s';
+SET statement_timeout = '60s';
+
+-- The PR Review Pack is a provider-neutral adapter over the generic automation
+-- substrate. App registrations own only provider action credentials; generic
+-- automation sources own webhook authentication and generic triggers/runs own
+-- event matching, idempotency, and ordinary-session dispatch.
+
+CREATE TABLE "pr_review_app_registrations" (
+  "id" uuid PRIMARY KEY DEFAULT pg_catalog.gen_random_uuid(),
+  "source_id" uuid NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "name" text NOT NULL,
+  "provider" text NOT NULL,
+  "provider_base_url" text NOT NULL,
+  "app_id" text,
+  "credential_kind" text NOT NULL,
+  "credential_encrypted" text,
+  "access_token_expires_at" timestamptz,
+  "webhook_auth_kind" text NOT NULL,
+  "webhook_username" text,
+  "status" text NOT NULL DEFAULT 'active',
+  "created_by_subject_id" text NOT NULL,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "pr_review_app_registrations_workspace_account_fk"
+    FOREIGN KEY ("workspace_id", "account_id")
+    REFERENCES "workspaces"("id", "account_id") ON DELETE CASCADE,
+  CONSTRAINT "pr_review_app_registrations_source_fk"
+    FOREIGN KEY ("workspace_id", "source_id")
+    REFERENCES "automation_sources"("workspace_id", "id") ON DELETE CASCADE,
+  CONSTRAINT "pr_review_app_registrations_provider_chk"
+    CHECK ("provider" IN ('github', 'gitlab', 'azure_devops')),
+  CONSTRAINT "pr_review_app_registrations_credential_chk" CHECK (
+    ("provider" = 'github' AND "credential_kind" = 'github_app' AND "credential_encrypted" IS NOT NULL AND "app_id" IS NOT NULL)
+    OR
+    ("provider" IN ('gitlab', 'azure_devops') AND "credential_kind" = 'provider_token' AND "credential_encrypted" IS NOT NULL)
+  ),
+  CONSTRAINT "pr_review_app_registrations_webhook_auth_chk" CHECK (
+    ("provider" = 'github' AND "webhook_auth_kind" = 'hmac_sha256')
+    OR ("provider" = 'gitlab' AND "webhook_auth_kind" = 'shared_token')
+    OR ("provider" = 'azure_devops' AND "webhook_auth_kind" = 'basic' AND "webhook_username" IS NOT NULL)
+  ),
+  CONSTRAINT "pr_review_app_registrations_status_chk"
+    CHECK ("status" IN ('active', 'disabled'))
+);
+CREATE UNIQUE INDEX "pr_review_app_registrations_workspace_id_uq"
+  ON "pr_review_app_registrations" ("workspace_id", "id");
+CREATE UNIQUE INDEX "pr_review_app_registrations_workspace_id_provider_uq"
+  ON "pr_review_app_registrations" ("workspace_id", "id", "provider");
+CREATE UNIQUE INDEX "pr_review_app_registrations_workspace_provider_name_uq"
+  ON "pr_review_app_registrations" ("workspace_id", "provider", "name");
+CREATE INDEX "pr_review_app_registrations_workspace_status_idx"
+  ON "pr_review_app_registrations" ("workspace_id", "status");
+CREATE UNIQUE INDEX "pr_review_app_registrations_source_uq"
+  ON "pr_review_app_registrations" ("source_id");
+
+CREATE TABLE "pr_review_repository_bindings" (
+  "id" uuid PRIMARY KEY DEFAULT pg_catalog.gen_random_uuid(),
+  "trigger_id" uuid NOT NULL,
+  "account_id" uuid NOT NULL REFERENCES "managed_accounts"("id") ON DELETE CASCADE,
+  "workspace_id" uuid NOT NULL REFERENCES "workspaces"("id") ON DELETE CASCADE,
+  "registration_id" uuid NOT NULL,
+  "provider" text NOT NULL,
+  "repository_uri" text NOT NULL,
+  "repository_full_name" text NOT NULL,
+  "provider_repository_id" text NOT NULL,
+  "installation_id" text,
+  "project_id" text,
+  "model" text,
+  "additional_instructions" text,
+  "status" text NOT NULL DEFAULT 'active',
+  "created_by_subject_id" text NOT NULL,
+  "created_at" timestamptz NOT NULL DEFAULT now(),
+  "updated_at" timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT "pr_review_repository_bindings_workspace_account_fk"
+    FOREIGN KEY ("workspace_id", "account_id")
+    REFERENCES "workspaces"("id", "account_id") ON DELETE CASCADE,
+  CONSTRAINT "pr_review_repository_bindings_trigger_fk"
+    FOREIGN KEY ("workspace_id", "trigger_id")
+    REFERENCES "automation_triggers"("workspace_id", "id") ON DELETE CASCADE,
+  CONSTRAINT "pr_review_repository_bindings_registration_fk"
+    FOREIGN KEY ("workspace_id", "registration_id", "provider")
+    REFERENCES "pr_review_app_registrations"("workspace_id", "id", "provider") ON DELETE CASCADE,
+  CONSTRAINT "pr_review_repository_bindings_provider_chk"
+    CHECK ("provider" IN ('github', 'gitlab', 'azure_devops')),
+  CONSTRAINT "pr_review_repository_bindings_status_chk"
+    CHECK ("status" IN ('active', 'disabled'))
+);
+CREATE UNIQUE INDEX "pr_review_repository_bindings_workspace_id_uq"
+  ON "pr_review_repository_bindings" ("workspace_id", "id");
+CREATE UNIQUE INDEX "pr_review_repo_workspace_registration_provider_uq"
+  ON "pr_review_repository_bindings" ("workspace_id", "id", "registration_id", "provider");
+CREATE UNIQUE INDEX "pr_review_repository_bindings_registration_repo_uq"
+  ON "pr_review_repository_bindings" ("registration_id", "provider_repository_id");
+CREATE INDEX "pr_review_repository_bindings_workspace_status_idx"
+  ON "pr_review_repository_bindings" ("workspace_id", "status");
+CREATE UNIQUE INDEX "pr_review_repository_bindings_trigger_uq"
+  ON "pr_review_repository_bindings" ("trigger_id");
+
+ALTER TABLE "pr_review_app_registrations" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "pr_review_app_registrations" FORCE ROW LEVEL SECURITY;
+CREATE POLICY pr_review_app_registrations_tenant ON "pr_review_app_registrations"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));
+
+ALTER TABLE "pr_review_repository_bindings" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "pr_review_repository_bindings" FORCE ROW LEVEL SECURITY;
+CREATE POLICY pr_review_repository_bindings_tenant ON "pr_review_repository_bindings"
+  USING (opengeni_private.workspace_rls_visible("account_id", "workspace_id"))
+  WITH CHECK (opengeni_private.workspace_rls_visible("account_id", "workspace_id"));

package/drizzle/0321_slack_bot_environment_display_name.sql

@@ -0,0 +1,15 @@
+-- deployment-mode: rolling
+-- Slack app and bot names are environment-scoped human-facing identity. Keep
+-- the accepted set closed while allowing the managed staging principal to be
+-- visibly distinct from production in a shared Slack workspace.
+ALTER TABLE slack_installation_bindings
+  DROP CONSTRAINT slack_installation_bindings_identity_check;
+
+ALTER TABLE slack_installation_bindings
+  ADD CONSTRAINT slack_installation_bindings_identity_check CHECK (
+    octet_length(slack_team_id) BETWEEN 1 AND 64
+    AND octet_length(slack_team_name) BETWEEN 1 AND 256
+    AND octet_length(bot_id) BETWEEN 1 AND 64
+    AND octet_length(bot_user_id) BETWEEN 1 AND 64
+    AND bot_display_name IN ('OpenGeni', 'OpenGeni Staging')
+  );

package/drizzle/0322_session_turns_unclaimed_prompt_trigger_index.sql

@@ -0,0 +1,5 @@
+-- deployment-mode: rolling
+-- opengeni:concurrent-index lock-timeout=5s
+CREATE INDEX CONCURRENTLY IF NOT EXISTS "session_turns_unclaimed_prompt_trigger_idx"
+  ON "session_turns" ("workspace_id", "session_id", "trigger_event_id")
+  WHERE "started_at" IS NULL;