@rulemetric/local 0.15.0 → 0.15.1

package/dist/supabase/migrations/00231_scoped_live_confirmations.sql

@@ -0,0 +1,47 @@
+-- P4/P5: pre-treatment organic task eligibility and the auditable link from a
+-- supported frozen study to a later application.  Legacy instruction arms are
+-- intentionally not backfilled: they lack the task/configuration contract.
+create table public.scoped_live_confirmations (
+  id uuid primary key default gen_random_uuid(),
+  user_id uuid not null references public.profiles(id) on delete cascade,
+  experiment_id uuid not null references public.instruction_experiments(id) on delete cascade,
+  source_study_id uuid not null references public.performance_studies(id) on delete restrict,
+  protocol jsonb not null,
+  protocol_hash text not null,
+  salt text not null,
+  status text not null default 'running' check (status in ('running','stopped')),
+  decision text check (decision is null or decision in ('improved','harmful','inconclusive')),
+  decision_detail jsonb,
+  started_at timestamptz not null default now(),
+  ended_at timestamptz,
+  unique (experiment_id)
+);
+create index scoped_live_confirmations_user_status on public.scoped_live_confirmations(user_id,status);
+
+create table public.scoped_live_confirmation_assignments (
+  id uuid primary key default gen_random_uuid(),
+  confirmation_id uuid not null references public.scoped_live_confirmations(id) on delete cascade,
+  user_id uuid not null references public.profiles(id) on delete cascade,
+  task_id text not null,
+  external_session_id text not null,
+  arm text not null check (arm in ('treated','control')),
+  model text not null,
+  configuration_hash text not null,
+  assigned_at timestamptz not null default now(),
+  delivery_hash text,
+  delivered_at timestamptz,
+  outcome text check (outcome is null or outcome in ('completed','failed','unknown')),
+  outcome_detail jsonb,
+  outcome_at timestamptz,
+  unique (confirmation_id,task_id),
+  unique (confirmation_id,external_session_id)
+);
+create index scoped_live_confirmation_assignments_confirmation_arm
+  on public.scoped_live_confirmation_assignments(confirmation_id,arm);
+
+alter table public.recommendation_applications
+  add column source_study_id uuid references public.performance_studies(id) on delete restrict,
+  add column scoped_confirmation_id uuid references public.scoped_live_confirmations(id) on delete restrict,
+  add column scoped_confirmation_assignment_id uuid references public.scoped_live_confirmation_assignments(id) on delete restrict;
+create index idx_recommendation_applications_scoped_confirmation
+  on public.recommendation_applications(scoped_confirmation_id, scoped_confirmation_assignment_id);

package/dist/supabase/migrations/00232_scoped_live_confirmation_disposition.sql

@@ -0,0 +1,13 @@
+-- A legacy project-wide experiment is closed when a task-level P4 protocol
+-- takes over. Its old arms remain historical evidence; this reason prevents
+-- the ordinary renderer from continuing to inject alongside scoped assignment.
+alter table public.instruction_experiments
+  drop constraint instruction_experiments_stopped_reason_check;
+
+alter table public.instruction_experiments
+  add constraint instruction_experiments_stopped_reason_check
+  check (stopped_reason in (
+    'graduated', 'trial_neutral', 'trial_inconclusive', 'content_changed',
+    'inactive_project', 'invalid_template', 'delivery_refused',
+    'scoped_live_confirmation'
+  ));

package/dist/supabase/migrations/00233_performance_study_integrity.sql

@@ -0,0 +1,33 @@
+-- Close insert-time gaps left by 00230. A CHECK whose expression evaluates to
+-- NULL accepts the row, so the version key must be required explicitly.
+alter table public.performance_studies
+  drop constraint performance_study_version;
+alter table public.performance_studies
+  add constraint performance_study_version
+  check (protocol ? 'version' and protocol->>'version' = '1');
+alter table public.performance_studies
+  add constraint performance_study_finalization_pair
+  check ((result is null) = (finalized_at is null));
+
+create or replace function public.preserve_study_protocol() returns trigger
+language plpgsql security definer set search_path = public, pg_temp as $$
+begin
+  if tg_op = 'INSERT' then
+    if new.result is not null or new.finalized_at is not null then
+      raise exception 'Studies must be frozen before a result can be finalized';
+    end if;
+    return new;
+  end if;
+  if (to_jsonb(new)-'result'-'finalized_at') is distinct from (to_jsonb(old)-'result'-'finalized_at') or old.result is not null then
+    raise exception 'Frozen study protocols and final results are immutable; create a new revision';
+  end if;
+  if new.result is null or new.finalized_at is null then
+    raise exception 'Final result and timestamp are required together';
+  end if;
+  return new;
+end $$;
+
+drop trigger performance_study_immutable on public.performance_studies;
+create trigger performance_study_immutable
+before insert or update on public.performance_studies
+for each row execute function public.preserve_study_protocol();

package/dist/supabase/migrations/00234_scoped_live_confirmation_rls.sql

@@ -0,0 +1,20 @@
+-- Scoped study rows contain experiment arms and outcomes. Browser clients may
+-- read their own evidence; all writes remain behind the authenticated API.
+alter table public.scoped_live_confirmations enable row level security;
+alter table public.scoped_live_confirmation_assignments enable row level security;
+
+create policy scoped_live_confirmations_select_own
+  on public.scoped_live_confirmations for select
+  using (auth.uid() = user_id);
+
+create policy scoped_live_confirmation_assignments_select_own
+  on public.scoped_live_confirmation_assignments for select
+  using (auth.uid() = user_id);
+
+alter table public.scoped_live_confirmation_assignments
+  add constraint scoped_live_delivery_pair
+    check ((delivery_hash is null) = (delivered_at is null)),
+  add constraint scoped_live_outcome_pair
+    check ((outcome is null) = (outcome_at is null)),
+  add constraint scoped_live_outcome_requires_delivery
+    check (outcome_at is null or delivered_at is not null);

package/dist/supabase/migrations/00235_scoped_live_observed_environment.sql

@@ -0,0 +1,4 @@
+-- Retain the actual pre-treatment environment separately from the requested
+-- fingerprint; legacy assignments without this evidence cannot certify effect.
+alter table public.scoped_live_confirmation_assignments
+  add column enrollment_evidence jsonb;

package/dist/supabase/migrations/00236_scoped_live_followup_receipts.sql

@@ -0,0 +1,3 @@
+-- Follow-up delivery is auditable but never another randomized observation.
+alter table public.scoped_live_confirmation_assignments
+  add column phase text not null default 'trial' check (phase in ('trial', 'followup'));

package/dist/supabase/migrations/00237_scoped_live_frozen_evidence.sql

@@ -0,0 +1,27 @@
+-- API-only writers still need immutable protocol and once-only evidence guards.
+create or replace function public.guard_scoped_live_confirmation() returns trigger
+language plpgsql set search_path = public as $$
+begin
+  if row(new.id,new.user_id,new.experiment_id,new.source_study_id,new.protocol,new.protocol_hash,new.salt,new.started_at)
+     is distinct from row(old.id,old.user_id,old.experiment_id,old.source_study_id,old.protocol,old.protocol_hash,old.salt,old.started_at)
+     or old.status = 'stopped' then
+    raise exception 'Scoped confirmation protocol and final decision are immutable';
+  end if;
+  return new;
+end $$;
+create trigger scoped_live_confirmation_frozen before update on public.scoped_live_confirmations
+for each row execute function public.guard_scoped_live_confirmation();
+
+create or replace function public.guard_scoped_live_assignment() returns trigger
+language plpgsql set search_path = public as $$
+begin
+  if row(new.id,new.confirmation_id,new.user_id,new.task_id,new.external_session_id,new.arm,new.phase,new.model,new.configuration_hash,new.enrollment_evidence,new.assigned_at)
+     is distinct from row(old.id,old.confirmation_id,old.user_id,old.task_id,old.external_session_id,old.arm,old.phase,old.model,old.configuration_hash,old.enrollment_evidence,old.assigned_at)
+     or (old.delivered_at is not null and row(new.delivered_at,new.delivery_hash) is distinct from row(old.delivered_at,old.delivery_hash))
+     or (old.outcome_at is not null and row(new.outcome_at,new.outcome,new.outcome_detail) is distinct from row(old.outcome_at,old.outcome,old.outcome_detail)) then
+    raise exception 'Scoped assignment identity, delivery and outcome evidence are immutable';
+  end if;
+  return new;
+end $$;
+create trigger scoped_live_assignment_frozen before update on public.scoped_live_confirmation_assignments
+for each row execute function public.guard_scoped_live_assignment();