@opengeni/db 3.2.0-canary.0 → 3.4.0-canary.0

package/src/runtime-posture.ts

@@ -36,7 +36,22 @@ const ARTIFACT_AUTHORIZATION_CAPABILITY_ROUTINES = [
   "authorize_editable_artifact_actor(uuid, uuid, text, text, text, text, text, text, integer, text, text, name)",
 ] as const;
 
-const DEDICATED_ARTIFACT_CAPABILITY_ROUTINES = new Set<string>([
+const AUTOMATIC_SESSION_TITLE_FANOUT_RUNTIME_ROUTINES = [
+  "claim_automatic_session_title_fanout_v1(integer)",
+  "mark_automatic_session_title_fanout_delivered_v1(uuid, uuid)",
+  "mark_automatic_session_title_fanout_failed_v1(uuid, uuid, text)",
+] as const;
+
+const AUTOMATIC_SESSION_TITLE_FANOUT_MIGRATION_ROUTINE =
+  "enqueue_automatic_session_title_fanout_v1(uuid, uuid, uuid, uuid)";
+
+const AUTOMATIC_SESSION_TITLE_POLICY_TRIGGER_ROUTINE =
+  "enforce_automatic_session_title_policy_v1()";
+const AUTOMATIC_SESSION_TITLE_FANOUT_OUTBOX_TABLE = "automatic_session_title_fanout_outbox_v1";
+const AUTOMATIC_SESSION_TITLE_QUARANTINE_FENCE_ROUTINE =
+  "acquire_automatic_session_title_quarantine_fences_v1(integer)";
+
+const OWNER_INTERNAL_PRIVATE_ROUTINES = new Set<string>([
   ...ARTIFACT_OUTBOX_CAPABILITY_ROUTINES,
   ...ARTIFACT_MATERIALIZER_CAPABILITY_ROUTINES,
   ...ARTIFACT_LIVE_TICKET_INTERNAL_ROUTINES,
@@ -73,7 +88,13 @@ const ORGANIZATION_MEMBERSHIP_LIFECYCLE_ROUTINES = [
   "get_self_organization_invitation(text, uuid)",
   "list_organization_invitations(uuid, text, uuid, integer)",
   "list_organization_members(uuid, text)",
+  "list_organization_administration_members(uuid, text)",
   "get_organization_administration_overview(uuid, text)",
+  "get_workspace_kind(uuid, uuid)",
+  "organization_workspace_command(jsonb)",
+  "resolve_organization_workspace_removal_subject(uuid, text, uuid)",
+  "prepare_organization_workspace_member_removal(jsonb)",
+  "record_organization_workspace_member_removal(jsonb, uuid, uuid)",
   "create_managed_organization(text, text, text, uuid)",
   "assert_organization_shared_workspace_administrator(uuid, uuid, text)",
   "open_organization_shared_workspace_administration_capability(uuid, uuid, text)",
@@ -85,6 +106,15 @@ const ORGANIZATION_MEMBERSHIP_LIFECYCLE_ROUTINES = [
   "bind_pending_organization_invitations_for_verified_email(text, text)",
   "has_pending_organization_invitation_for_subject(text)",
   "accept_organization_invitation_v2(jsonb)",
+  "complete_self_service_organization_setup(jsonb)",
+  "ensure_organization_user_setup_intent(jsonb)",
+  "claim_organization_user_setup_delivery(jsonb)",
+  "prepare_organization_user_setup_delivery(jsonb)",
+  "settle_organization_user_setup_delivery(jsonb)",
+  "preview_organization_user_setup(text)",
+  "get_organization_invitation_for_administration(uuid, text, uuid)",
+  "preflight_organization_user_setup(text)",
+  "complete_organization_user_setup(jsonb)",
   "organization_membership_command(jsonb)",
   "prepare_organization_membership_protocol_settlements(jsonb)",
   "assert_active_managed_human_organization_membership(uuid, text)",
@@ -108,6 +138,9 @@ const ORGANIZATION_MEMBERSHIP_LIFECYCLE_AUTHORITY_TABLES = [
   "organization_memberships",
   "organization_profile_events",
   "organization_shared_workspace_administration_capabilities",
+  "organization_user_setup_deliveries",
+  "organization_user_setup_delivery_attempts",
+  "organization_user_setup_intents",
   "organization_user_resource_authorities",
   "organization_user_resource_grants",
   "organization_user_retention_deletion_events",
@@ -115,6 +148,9 @@ const ORGANIZATION_MEMBERSHIP_LIFECYCLE_AUTHORITY_TABLES = [
   "organization_user_retention_object_deletion_receipts",
   "organization_user_retention_object_obligations",
   "organization_user_retention_policies",
+  "organization_workspace_lifecycle_events",
+  "organization_workspace_operation_receipts",
+  "self_service_organization_setup_receipts",
 ] as const;
 const PRIVATE_SESSION_CREATE_POLICY_ROUTINE = "get_private_session_create_policy(uuid, uuid, text)";
 const ORGANIZATION_PRIVATE_SESSION_SETTINGS_READ_ROUTINE =
@@ -308,6 +344,7 @@ const GOVERNED_LEARNING_ACTIVATION_ROUTINES = [
   "activate_governed_learning_decision(uuid, uuid, uuid, uuid)",
   "activate_human_confirmed_learning_decision(uuid, uuid, uuid, uuid, uuid)",
   "confirm_remember_knowledge_claim(uuid, uuid, uuid, uuid, integer, uuid, uuid, uuid)",
+  "materialize_remember_knowledge_memory(uuid, uuid, uuid)",
   "undo_governed_learning_activation(uuid, uuid, uuid, uuid)",
 ] as const;
 const GOVERNED_LEARNING_INSPECTION_ROUTINES = [
@@ -370,6 +407,7 @@ const GOVERNED_LEARNING_ACTIVATION_AUTHORITY_TABLES = [
   "preference_registry_preferences",
   "preference_registry_revisions",
   "remember_knowledge_confirmation_receipts",
+  "remember_knowledge_memory_materializations",
   "session_human_input_requests",
   "workspace_instruction_policy_activation_events",
   "workspace_instruction_policy_deactivation_events",
@@ -393,6 +431,8 @@ const SESSION_TENANCY_QUIESCENCE_ROUTINE =
   "assert_session_tenancy_quiescent(uuid, uuid, uuid, boolean)";
 const TENANCY_BACKFILL_ACTIVATION_EVIDENCE_ROUTINE =
   "check_tenancy_backfill_activation_evidence(uuid)";
+const GREENFIELD_SESSION_TENANCY_ACTIVATION_ROUTINE =
+  "activate_greenfield_session_tenancy_from_setup(text)";
 const SESSION_VISIBILITY_LIFECYCLE_CAPABILITY_ROUTINE =
   "session_visibility_lifecycle_capability_held()";
 const PRIVATE_SESSION_CREATE_CAPABILITY_ROUTINES = [
@@ -497,7 +537,9 @@ const RUNTIME_TARGET_SCHEMA_PUBLIC_POLICY_PREDICATE_ROUTINE_SET = new Set<string
 
 /** Owner-internal helpers that must exist but must never be callable by the runtime role. */
 export const RUNTIME_TARGET_SCHEMA_FORBIDDEN_ROUTINES = [
+  AUTOMATIC_SESSION_TITLE_QUARANTINE_FENCE_ROUTINE,
   ORGANIZATION_PRIVATE_SESSIONS_ENABLED_ROUTINE,
+  GREENFIELD_SESSION_TENANCY_ACTIVATION_ROUTINE,
   SESSION_TENANCY_QUIESCENCE_ROUTINE,
   TENANCY_BACKFILL_ACTIVATION_EVIDENCE_ROUTINE,
   ...DOCUMENT_MIGRATION_AUDIT_INTERNAL_ROUTINES,
@@ -682,6 +724,11 @@ export const FORCE_RLS_TABLES = [
   "organization_user_retention_object_deletion_receipts",
   "organization_user_retention_object_obligations",
   "organization_user_retention_policies",
+  "organization_user_setup_deliveries",
+  "organization_user_setup_delivery_attempts",
+  "organization_user_setup_intents",
+  "organization_workspace_lifecycle_events",
+  "organization_workspace_operation_receipts",
   "pack_installation_components",
   "pack_installations",
   "personal_document_once_consumption_receipts",
@@ -690,6 +737,7 @@ export const FORCE_RLS_TABLES = [
   "personal_github_repository_selections",
   "personal_resource_once_consumption_receipts",
   "pr_review_app_registrations",
+  "pr_review_managed_github_authority_nonces",
   "pr_review_repository_bindings",
   "preference_registry_events",
   "preference_registry_preferences",
@@ -697,6 +745,7 @@ export const FORCE_RLS_TABLES = [
   "preference_registry_snapshots",
   "private_session_create_capabilities",
   "remember_knowledge_confirmation_receipts",
+  "remember_knowledge_memory_materializations",
   "retained_screenshot_artifacts",
   "rig_changes",
   "rig_versions",
@@ -720,6 +769,7 @@ export const FORCE_RLS_TABLES = [
   "scheduled_task_run_personal_resource_snapshots",
   "scheduled_task_runs",
   "scheduled_tasks",
+  "self_service_organization_setup_receipts",
   "session_attempt_codemode_calls",
   "session_attempt_connected_machine_authorizations",
   "session_attempt_interruptions",
@@ -749,9 +799,11 @@ export const FORCE_RLS_TABLES = [
   "session_system_update_outbox",
   "session_system_updates",
   "session_tenancy_activations",
+  "session_tenancy_greenfield_activation_evidence",
   "session_turn_attempts",
   "session_turn_startup_milestones",
   "session_turns",
+  "session_variable_set_attachments",
   "session_visibility_write_capabilities",
   "session_workflow_wake_outbox",
   "sessions",
@@ -844,6 +896,7 @@ export const NON_RLS_RUNTIME_TABLES = [
   "integration_oauth_clients",
   "managed_accounts",
   "nested_agent_depth_configuration",
+  "pr_review_managed_github_routes",
   "stripe_webhook_events",
   "workspace_memberships",
   "workspaces",
@@ -928,6 +981,7 @@ export const RUNTIME_FULL_DML_TABLES = [
   "pack_installation_components",
   "pack_installations",
   "pr_review_app_registrations",
+  "pr_review_managed_github_routes",
   "pr_review_repository_bindings",
   "retained_screenshot_artifacts",
   "rig_changes",
@@ -1066,6 +1120,7 @@ export const RUNTIME_READ_INSERT_TABLES = [
   "knowledge_source_objects",
   "knowledge_sources",
   "knowledge_sync_runs",
+  "pr_review_managed_github_authority_nonces",
   "preference_registry_preferences",
   "preference_registry_revisions",
   "session_attempt_tool_catalogs",
@@ -1163,6 +1218,11 @@ export const PROTECTED_NO_DIRECT_DML_TABLES = [
   "organization_user_retention_object_deletion_receipts",
   "organization_user_retention_object_obligations",
   "organization_user_retention_policies",
+  "organization_user_setup_deliveries",
+  "organization_user_setup_delivery_attempts",
+  "organization_user_setup_intents",
+  "organization_workspace_lifecycle_events",
+  "organization_workspace_operation_receipts",
   "personal_document_once_consumption_receipts",
   "personal_github_repository_selection_heads",
   "personal_github_repository_selection_operations",
@@ -1170,6 +1230,7 @@ export const PROTECTED_NO_DIRECT_DML_TABLES = [
   "personal_resource_once_consumption_receipts",
   "private_session_create_capabilities",
   "remember_knowledge_confirmation_receipts",
+  "remember_knowledge_memory_materializations",
   "scheduled_task_connection_authority_snapshots",
   "scheduled_task_personal_resource_authorities",
   "scheduled_task_personal_resource_snapshots",
@@ -1179,11 +1240,14 @@ export const PROTECTED_NO_DIRECT_DML_TABLES = [
   "scheduled_task_run_personal_resource_admissions",
   "scheduled_task_run_personal_resource_once_receipts",
   "scheduled_task_run_personal_resource_snapshots",
+  "self_service_organization_setup_receipts",
   "session_attempt_connected_machine_authorizations",
   "session_attempt_personal_document_admissions",
   "session_attempt_personal_document_snapshots",
   "session_attempt_personal_resource_admissions",
   "session_attempt_personal_resource_snapshots",
+  "session_tenancy_greenfield_activation_evidence",
+  "session_variable_set_attachments",
   "session_visibility_write_capabilities",
   "task_note_events",
   "task_note_knowledge_promotion_capabilities",
@@ -1296,6 +1360,10 @@ export type RuntimeTargetRoutinePosture = RuntimeRoutinePosture & {
 export type RuntimePrivateTablePosture = {
   name: string;
   owner: string;
+  rlsEnabled?: boolean;
+  rlsForced?: boolean;
+  rlsActive?: boolean;
+  policyCount?: number;
   select: boolean;
   insert: boolean;
   update: boolean;
@@ -1314,6 +1382,7 @@ export type RuntimeDatabasePosture = {
   targetRoutines: RuntimeTargetRoutinePosture[];
   privateRoutines: RuntimeRoutinePosture[];
   sessionTenancyProductActivationPresent: boolean;
+  sessionVariableSetAttachmentsCutoverPresent: boolean;
 };
 
 export class RuntimeDatabasePostureError extends Error {
@@ -1420,6 +1489,15 @@ export async function inspectRuntimeDatabasePosture(
         await tx.execute(sql`select session_tenancy_any_product_activation() as activated`),
       );
       const sessionTenancyProductActivationPresent = activationRows[0]?.activated === true;
+      const variableSetCutoverRows = resultRows<{ present: boolean }>(
+        await tx.execute(sql`
+          select to_regprocedure(
+            'opengeni_private.session_variable_set_attachments_protocol_v1_active()'
+          ) is not null as present
+        `),
+      );
+      const sessionVariableSetAttachmentsCutoverPresent =
+        variableSetCutoverRows[0]?.present === true;
 
       // Scoped/embedded topology deliberately leaves ownership and isolation to
       // the host. Prove the connection identity is coherent, but do not impose
@@ -1436,6 +1514,7 @@ export async function inspectRuntimeDatabasePosture(
           targetRoutines: [],
           privateRoutines: [],
           sessionTenancyProductActivationPresent,
+          sessionVariableSetAttachmentsCutoverPresent,
         };
       }
 
@@ -1557,6 +1636,10 @@ export async function inspectRuntimeDatabasePosture(
       const privateTables = resultRows<{
         name: string;
         owner: string;
+        rls_enabled: boolean;
+        rls_forced: boolean;
+        rls_active: boolean;
+        policy_count: number;
         can_select: boolean;
         can_insert: boolean;
         can_update: boolean;
@@ -1566,6 +1649,10 @@ export async function inspectRuntimeDatabasePosture(
           select
             c.relname::text as name,
             pg_get_userbyid(c.relowner)::text as owner,
+            c.relrowsecurity as rls_enabled,
+            c.relforcerowsecurity as rls_forced,
+            row_security_active(c.oid) as rls_active,
+            (select count(*)::int from pg_policy policy where policy.polrelid = c.oid) as policy_count,
             has_table_privilege(current_user, c.oid, 'SELECT') as can_select,
             has_table_privilege(current_user, c.oid, 'INSERT') as can_insert,
             has_table_privilege(current_user, c.oid, 'UPDATE') as can_update,
@@ -1581,12 +1668,17 @@ export async function inspectRuntimeDatabasePosture(
               ${PERSONAL_DOCUMENT_CAPABILITY_TABLE},
               ${DOCUMENT_MIGRATION_CAPABILITY_TABLE},
               ${SCOPED_COMPUTE_CAPABILITY_TABLE},
-              ${CONNECTION_TENANCY_BACKFILL_CAPABILITY_TABLE}
+              ${CONNECTION_TENANCY_BACKFILL_CAPABILITY_TABLE},
+              ${AUTOMATIC_SESSION_TITLE_FANOUT_OUTBOX_TABLE}
             )
         `),
       ).map((row) => ({
         name: row.name,
         owner: row.owner,
+        rlsEnabled: row.rls_enabled,
+        rlsForced: row.rls_forced,
+        rlsActive: row.rls_active,
+        policyCount: row.policy_count,
         select: row.can_select,
         insert: row.can_insert,
         update: row.can_update,
@@ -1681,6 +1773,7 @@ export async function inspectRuntimeDatabasePosture(
         targetRoutines,
         privateRoutines,
         sessionTenancyProductActivationPresent,
+        sessionVariableSetAttachmentsCutoverPresent,
       };
     },
     { isolationLevel: "repeatable read", accessMode: "read only" },
@@ -1695,6 +1788,10 @@ export function evaluateRuntimeDatabasePosture(
   const violations: string[] = [];
   const identity = posture.identity;
 
+  if (!posture.sessionVariableSetAttachmentsCutoverPresent) {
+    violations.push("database is missing the 0352 session Variable Set attachment runtime receipt");
+  }
+
   if (
     posture.sessionTenancyProductActivationPresent &&
     options.organizationTenancyCanonicalActivationEnabled !== true
@@ -2326,6 +2423,152 @@ export function evaluateRuntimeDatabasePosture(
     }
   }
 
+  const automaticTitleFanoutOutboxes = posture.privateTables.filter(
+    (table) => table.name === AUTOMATIC_SESSION_TITLE_FANOUT_OUTBOX_TABLE,
+  );
+  const automaticTitleFanoutRoutineNames = new Set<string>([
+    ...AUTOMATIC_SESSION_TITLE_FANOUT_RUNTIME_ROUTINES,
+    AUTOMATIC_SESSION_TITLE_FANOUT_MIGRATION_ROUTINE,
+    AUTOMATIC_SESSION_TITLE_POLICY_TRIGGER_ROUTINE,
+  ]);
+  const automaticTitleFanoutCatalogPresent = posture.privateRoutines.some((routine) =>
+    automaticTitleFanoutRoutineNames.has(routine.name),
+  );
+  if (automaticTitleFanoutCatalogPresent && automaticTitleFanoutOutboxes.length !== 1) {
+    violations.push(
+      `automatic session title fanout private outbox ${AUTOMATIC_SESSION_TITLE_FANOUT_OUTBOX_TABLE} is missing or ambiguous`,
+    );
+  }
+  const automaticTitleFanoutOutbox = automaticTitleFanoutOutboxes[0];
+  if (automaticTitleFanoutOutbox) {
+    if (automaticTitleFanoutOutbox.owner === expectedRole) {
+      violations.push(
+        `runtime role owns private automatic session title fanout outbox ${automaticTitleFanoutOutbox.name}`,
+      );
+    }
+    if (!automaticTitleFanoutOutbox.rlsEnabled) {
+      violations.push(
+        `private automatic session title fanout outbox ${automaticTitleFanoutOutbox.name} does not ENABLE RLS`,
+      );
+    }
+    if (!automaticTitleFanoutOutbox.rlsForced) {
+      violations.push(
+        `private automatic session title fanout outbox ${automaticTitleFanoutOutbox.name} does not FORCE RLS`,
+      );
+    }
+    if (!automaticTitleFanoutOutbox.rlsActive) {
+      violations.push(
+        `private automatic session title fanout outbox ${automaticTitleFanoutOutbox.name} has inactive RLS for runtime role`,
+      );
+    }
+    if ((automaticTitleFanoutOutbox.policyCount ?? 0) < 1) {
+      violations.push(
+        `private automatic session title fanout outbox ${automaticTitleFanoutOutbox.name} has no RLS policy`,
+      );
+    }
+    const directPrivileges = [
+      ["SELECT", automaticTitleFanoutOutbox.select],
+      ["INSERT", automaticTitleFanoutOutbox.insert],
+      ["UPDATE", automaticTitleFanoutOutbox.update],
+      ["DELETE", automaticTitleFanoutOutbox.delete],
+    ].filter(([, granted]) => granted);
+    if (directPrivileges.length > 0) {
+      violations.push(
+        `runtime role has forbidden direct privileges on private table ${automaticTitleFanoutOutbox.name}: ${directPrivileges.map(([privilege]) => privilege).join(", ")}`,
+      );
+    }
+    for (const expectedRoutine of AUTOMATIC_SESSION_TITLE_FANOUT_RUNTIME_ROUTINES) {
+      const matches = posture.privateRoutines.filter((routine) => routine.name === expectedRoutine);
+      if (matches.length !== 1) {
+        violations.push(
+          `automatic session title fanout capability ${expectedRoutine} is missing or ambiguous`,
+        );
+        continue;
+      }
+      const routine = matches[0]!;
+      if (!routine.securityDefiner) {
+        violations.push(
+          `automatic session title fanout capability ${routine.name} is not SECURITY DEFINER`,
+        );
+      }
+      if (routine.owner !== automaticTitleFanoutOutbox.owner) {
+        violations.push(
+          `automatic session title fanout capability ${routine.name} owner ${routine.owner} does not match table owner ${automaticTitleFanoutOutbox.owner}`,
+        );
+      }
+      if (!routine.execute) {
+        violations.push(
+          `runtime role lacks automatic session title fanout capability ${routine.name}`,
+        );
+      }
+      if (routine.publicExecute) {
+        violations.push(
+          `PUBLIC has forbidden automatic session title fanout capability ${routine.name}`,
+        );
+      }
+    }
+    const enqueueMatches = posture.privateRoutines.filter(
+      (routine) => routine.name === AUTOMATIC_SESSION_TITLE_FANOUT_MIGRATION_ROUTINE,
+    );
+    if (enqueueMatches.length !== 1) {
+      violations.push(
+        `automatic session title fanout migration helper ${AUTOMATIC_SESSION_TITLE_FANOUT_MIGRATION_ROUTINE} is missing or ambiguous`,
+      );
+    } else {
+      const routine = enqueueMatches[0]!;
+      if (routine.securityDefiner) {
+        violations.push(
+          `automatic session title fanout migration helper ${routine.name} must be SECURITY INVOKER`,
+        );
+      }
+      if (routine.owner !== automaticTitleFanoutOutbox.owner) {
+        violations.push(
+          `automatic session title fanout migration helper ${routine.name} owner ${routine.owner} does not match table owner ${automaticTitleFanoutOutbox.owner}`,
+        );
+      }
+      if (!routine.execute) {
+        violations.push(
+          `runtime role lacks rolling-compatible automatic session title fanout migration helper ${routine.name}`,
+        );
+      }
+      if (routine.publicExecute) {
+        violations.push(
+          `PUBLIC has forbidden automatic session title fanout migration helper ${routine.name}`,
+        );
+      }
+    }
+    const policyTriggerMatches = posture.privateRoutines.filter(
+      (routine) => routine.name === AUTOMATIC_SESSION_TITLE_POLICY_TRIGGER_ROUTINE,
+    );
+    if (policyTriggerMatches.length !== 1) {
+      violations.push(
+        `automatic session title policy trigger ${AUTOMATIC_SESSION_TITLE_POLICY_TRIGGER_ROUTINE} is missing or ambiguous`,
+      );
+    } else {
+      const routine = policyTriggerMatches[0]!;
+      if (routine.securityDefiner) {
+        violations.push(
+          `automatic session title policy trigger ${routine.name} must be SECURITY INVOKER`,
+        );
+      }
+      if (routine.owner !== automaticTitleFanoutOutbox.owner) {
+        violations.push(
+          `automatic session title policy trigger ${routine.name} owner ${routine.owner} does not match table owner ${automaticTitleFanoutOutbox.owner}`,
+        );
+      }
+      if (!routine.execute) {
+        violations.push(
+          `runtime role lacks rolling-compatible automatic session title policy trigger ${routine.name}`,
+        );
+      }
+      if (routine.publicExecute) {
+        violations.push(
+          `PUBLIC has forbidden automatic session title policy trigger ${routine.name}`,
+        );
+      }
+    }
+  }
+
   const artifactMaterializationJobs = tableByName.get("editable_artifact_materialization_jobs");
   if (artifactMaterializationJobs) {
     for (const tableName of [
@@ -2838,8 +3081,8 @@ export function evaluateRuntimeDatabasePosture(
     if (routine.owner === expectedRole) {
       violations.push(`runtime role owns private routine ${routine.name}`);
     }
-    const dedicatedArtifactCapability = DEDICATED_ARTIFACT_CAPABILITY_ROUTINES.has(routine.name);
-    if (!routine.execute && !dedicatedArtifactCapability) {
+    const ownerInternalRoutine = OWNER_INTERNAL_PRIVATE_ROUTINES.has(routine.name);
+    if (!routine.execute && !ownerInternalRoutine) {
       violations.push(`runtime role lacks EXECUTE on private routine ${routine.name}`);
     }
   }