@sixb/sqlite 0.1.6 → 0.1.7

package/src/migrations/029-model-accounting.sql

@@ -0,0 +1,79 @@
+-- Call-time model configuration and provider identity. Historical identity remains unknown.
+ALTER TABLE ai_model_call_usage
+  ADD COLUMN requested_reasoning TEXT
+  CHECK (
+    requested_reasoning IS NULL OR (
+      json_valid(requested_reasoning) AND
+      json_type(requested_reasoning) IN ('text', 'object')
+    )
+  );
+ALTER TABLE ai_model_call_usage ADD COLUMN provider_ids TEXT
+  CHECK (provider_ids IS NULL OR json_valid(provider_ids));
+
+-- Upgrade the shipped valuation reason while retaining the selected-cost projection.
+CREATE TABLE ai_model_call_valuations_next (
+  project_id TEXT NOT NULL CHECK (length(trim(project_id)) > 0),
+  usage_record_id TEXT NOT NULL CHECK (length(trim(usage_record_id)) > 0),
+  status TEXT NOT NULL CHECK (status IN ('rated', 'unpriceable')),
+  provider_id TEXT CHECK (provider_id IS NULL OR length(trim(provider_id)) > 0),
+  model_id TEXT CHECK (model_id IS NULL OR length(trim(model_id)) > 0),
+  currency TEXT CHECK (
+    currency IS NULL OR (length(currency) = 3 AND currency GLOB '[A-Z][A-Z][A-Z]')
+  ),
+  amount_nanos INTEGER CHECK (
+    amount_nanos IS NULL OR (typeof(amount_nanos) = 'integer' AND amount_nanos >= 0)
+  ),
+  reason TEXT CHECK (
+    reason IS NULL OR reason IN (
+      'missingBillingIdentity',
+      'missingRateCard',
+      'missingUsageMeter',
+      'unsupportedPricingDimension',
+      'invalidUsageForFormula'
+    )
+  ),
+  details TEXT NOT NULL CHECK (json_valid(details) AND json_type(details) = 'object'),
+  rated_at TEXT NOT NULL CHECK (length(trim(rated_at)) > 0),
+  PRIMARY KEY (project_id, usage_record_id),
+  FOREIGN KEY (project_id, usage_record_id)
+    REFERENCES ai_model_call_usage(project_id, id)
+    ON DELETE RESTRICT,
+  CHECK (
+    (
+      status = 'rated'
+      AND provider_id IS NOT NULL
+      AND model_id IS NOT NULL
+      AND currency IS NOT NULL
+      AND amount_nanos IS NOT NULL
+      AND reason IS NULL
+    )
+    OR
+    (
+      status = 'unpriceable'
+      AND currency IS NULL
+      AND amount_nanos IS NULL
+      AND reason IS NOT NULL
+      AND (
+        (reason = 'missingBillingIdentity' AND provider_id IS NULL AND model_id IS NULL)
+        OR
+        (reason <> 'missingBillingIdentity' AND provider_id IS NOT NULL AND model_id IS NOT NULL)
+      )
+    )
+  )
+);
+
+INSERT INTO ai_model_call_valuations_next (
+  project_id, usage_record_id, status, provider_id, model_id,
+  currency, amount_nanos, reason, details, rated_at
+)
+SELECT project_id, usage_record_id, status, provider_id, model_id,
+  currency, amount_nanos,
+  CASE WHEN reason = 'missingCatalogEntry' THEN 'missingRateCard' ELSE reason END,
+  details, rated_at
+FROM ai_model_call_valuations;
+
+DROP TABLE ai_model_call_valuations;
+ALTER TABLE ai_model_call_valuations_next RENAME TO ai_model_call_valuations;
+
+CREATE INDEX idx_ai_model_call_valuations_summary
+  ON ai_model_call_valuations (project_id, status, currency, usage_record_id);

package/src/migrations/030-ai-usage-limits.sql

@@ -0,0 +1,100 @@
+CREATE TABLE ai_usage_limits (
+  project_id TEXT NOT NULL CHECK (length(trim(project_id)) > 0),
+  id TEXT NOT NULL CHECK (length(trim(id)) > 0),
+  subject_type TEXT NOT NULL CHECK (
+    subject_type IN ('project', 'group', 'user', 'serviceAccount')
+  ),
+  subject_id TEXT NOT NULL CHECK (
+    (subject_type = 'project' AND subject_id = '')
+    OR (subject_type <> 'project' AND length(trim(subject_id)) > 0)
+  ),
+  meter TEXT NOT NULL CHECK (meter IN ('tokens.total', 'cost.catalogEstimated')),
+  currency TEXT NOT NULL CHECK (
+    (meter = 'tokens.total' AND currency = '')
+    OR (meter = 'cost.catalogEstimated' AND currency = 'USD')
+  ),
+  limit_amount TEXT NOT NULL CHECK (
+    limit_amount = '0'
+    OR (
+      limit_amount NOT GLOB '*[^0-9]*'
+      AND substr(limit_amount, 1, 1) BETWEEN '1' AND '9'
+    )
+  ),
+  period_kind TEXT NOT NULL CHECK (period_kind = 'calendarMonth'),
+  enabled INTEGER NOT NULL CHECK (enabled IN (0, 1)),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (project_id, id),
+  UNIQUE (project_id, subject_type, subject_id, meter, currency)
+);
+
+CREATE INDEX idx_ai_usage_limits_project_enabled
+  ON ai_usage_limits (project_id, enabled, subject_type, subject_id, meter, currency);
+
+CREATE TABLE ai_usage_limit_periods (
+  project_id TEXT NOT NULL CHECK (length(trim(project_id)) > 0),
+  subject_type TEXT NOT NULL CHECK (
+    subject_type IN ('project', 'group', 'user', 'serviceAccount')
+  ),
+  subject_id TEXT NOT NULL CHECK (
+    (subject_type = 'project' AND subject_id = '')
+    OR (subject_type <> 'project' AND length(trim(subject_id)) > 0)
+  ),
+  meter TEXT NOT NULL CHECK (meter IN ('tokens.total', 'cost.catalogEstimated')),
+  currency TEXT NOT NULL CHECK (
+    (meter = 'tokens.total' AND currency = '')
+    OR (meter = 'cost.catalogEstimated' AND currency = 'USD')
+  ),
+  period_start TEXT NOT NULL,
+  period_end TEXT NOT NULL,
+  actual_amount TEXT NOT NULL DEFAULT '0',
+  reserved_amount TEXT NOT NULL DEFAULT '0',
+  unknown_amount TEXT NOT NULL DEFAULT '0',
+  accounting_status TEXT NOT NULL DEFAULT 'complete' CHECK (
+    accounting_status IN ('complete', 'unavailable')
+  ),
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (
+    project_id, subject_type, subject_id, meter, currency, period_start
+  )
+);
+
+CREATE INDEX idx_ai_usage_limit_periods_subject_period
+  ON ai_usage_limit_periods (
+    project_id, subject_type, subject_id, period_start, period_end, meter, currency
+  );
+
+CREATE TABLE ai_model_call_reservations (
+  project_id TEXT NOT NULL CHECK (length(trim(project_id)) > 0),
+  execution_id TEXT NOT NULL CHECK (length(trim(execution_id)) > 0),
+  attempt INTEGER NOT NULL CHECK (attempt >= 1),
+  call_id TEXT NOT NULL CHECK (length(trim(call_id)) > 0),
+  buckets TEXT NOT NULL CHECK (json_valid(buckets) AND json_type(buckets) = 'array'),
+  request_key TEXT NOT NULL,
+  period_start TEXT NOT NULL,
+  period_end TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('active', 'reconciled', 'unknown')),
+  usage_record_id TEXT,
+  reserved_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (project_id, execution_id, attempt, call_id),
+  FOREIGN KEY (project_id, execution_id)
+    REFERENCES executions(project_id, id)
+    ON DELETE RESTRICT,
+  FOREIGN KEY (project_id, usage_record_id)
+    REFERENCES ai_model_call_usage(project_id, id)
+    ON DELETE RESTRICT,
+  CHECK (
+    (
+      state = 'reconciled'
+      AND usage_record_id IS NOT NULL
+    )
+    OR (
+      state <> 'reconciled'
+      AND usage_record_id IS NULL
+    )
+  )
+);
+
+CREATE INDEX idx_ai_model_call_reservations_active
+  ON ai_model_call_reservations (project_id, state, period_end, execution_id, attempt, call_id);

package/src/migrations/031-subagent-runs.sql

@@ -0,0 +1,231 @@
+-- SQLite cannot alter a CHECK constraint in place. Rebuild the execution table to align SQL with
+-- the durable Agent authority model: managed service account or exact inherited user/disabled.
+CREATE TABLE executions_v3 (
+  project_id TEXT NOT NULL CHECK (length(trim(project_id)) > 0),
+  id TEXT NOT NULL CHECK (length(trim(id)) > 0),
+  executor_kind TEXT NOT NULL CHECK (
+    executor_kind IN (
+      'request', 'action', 'pipeline', 'projection', 'rule', 'sync', 'webhook', 'workflow',
+      'agent', 'kernel'
+    )
+  ),
+  executor_id TEXT NOT NULL CHECK (length(trim(executor_id)) > 0),
+  source_kind TEXT NOT NULL CHECK (
+    source_kind IN ('http', 'webhook', 'schedule', 'event', 'datasetVersion', 'execution')
+  ),
+  source_id TEXT NOT NULL CHECK (length(trim(source_id)) > 0),
+  requested_by_user_id TEXT,
+  requested_by_service_account_id TEXT,
+  correlation_id TEXT NOT NULL CHECK (length(trim(correlation_id)) > 0),
+  parent_execution_id TEXT,
+  authority_kind TEXT NOT NULL CHECK (
+    authority_kind IN ('principal', 'trustedPrimitive', 'kernel', 'disabled')
+  ),
+  authority_user_id TEXT,
+  authority_service_account_id TEXT,
+  authority_session_id TEXT,
+  authority_access_token_id TEXT,
+  authority_primitive_kind TEXT CHECK (
+    authority_primitive_kind IS NULL
+      OR authority_primitive_kind IN (
+        'action', 'pipeline', 'projection', 'rule', 'sync', 'webhook', 'workflow'
+      )
+  ),
+  authority_primitive_id TEXT,
+  authority_kernel_operation TEXT CHECK (
+    authority_kernel_operation IS NULL OR authority_kernel_operation = 'ontology.recover'
+  ),
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (project_id, id),
+  FOREIGN KEY (project_id, parent_execution_id) REFERENCES executions (project_id, id),
+  FOREIGN KEY (project_id, requested_by_user_id) REFERENCES auth_users (project_id, id),
+  FOREIGN KEY (project_id, requested_by_service_account_id)
+    REFERENCES auth_service_accounts (project_id, id),
+  FOREIGN KEY (project_id, authority_user_id) REFERENCES auth_users (project_id, id),
+  FOREIGN KEY (project_id, authority_service_account_id)
+    REFERENCES auth_service_accounts (project_id, id),
+  FOREIGN KEY (project_id, authority_session_id) REFERENCES auth_sessions (project_id, id),
+  FOREIGN KEY (project_id, authority_access_token_id)
+    REFERENCES auth_access_tokens (project_id, id),
+  CHECK ((requested_by_user_id IS NOT NULL) + (requested_by_service_account_id IS NOT NULL) <= 1),
+  CHECK (
+    (source_kind = 'execution' AND parent_execution_id = source_id)
+      OR (source_kind <> 'execution' AND parent_execution_id IS NULL)
+  ),
+  CHECK (
+    (
+      authority_kind = 'principal'
+      AND (authority_user_id IS NOT NULL) + (authority_service_account_id IS NOT NULL) = 1
+      AND (authority_session_id IS NOT NULL) + (authority_access_token_id IS NOT NULL) <= 1
+      AND (authority_session_id IS NULL OR authority_user_id IS NOT NULL)
+      AND authority_primitive_kind IS NULL
+      AND authority_primitive_id IS NULL
+      AND authority_kernel_operation IS NULL
+    )
+    OR (
+      authority_kind = 'trustedPrimitive'
+      AND authority_user_id IS NULL
+      AND authority_service_account_id IS NULL
+      AND authority_session_id IS NULL
+      AND authority_access_token_id IS NULL
+      AND authority_primitive_kind IS NOT NULL
+      AND authority_primitive_id IS NOT NULL
+      AND length(trim(authority_primitive_id)) > 0
+      AND authority_kernel_operation IS NULL
+    )
+    OR (
+      authority_kind = 'kernel'
+      AND authority_user_id IS NULL
+      AND authority_service_account_id IS NULL
+      AND authority_session_id IS NULL
+      AND authority_access_token_id IS NULL
+      AND authority_primitive_kind IS NULL
+      AND authority_primitive_id IS NULL
+      AND authority_kernel_operation IS NOT NULL
+    )
+    OR (
+      authority_kind = 'disabled'
+      AND authority_user_id IS NULL
+      AND authority_service_account_id IS NULL
+      AND authority_session_id IS NULL
+      AND authority_access_token_id IS NULL
+      AND authority_primitive_kind IS NULL
+      AND authority_primitive_id IS NULL
+      AND authority_kernel_operation IS NULL
+    )
+  ),
+  CHECK (
+    (
+      executor_kind = 'request'
+      AND source_kind = 'http'
+      AND executor_id = source_id
+      AND (
+        (
+          authority_kind = 'principal'
+          AND requested_by_user_id IS authority_user_id
+          AND requested_by_service_account_id IS authority_service_account_id
+        )
+        OR (
+          authority_kind = 'disabled'
+          AND requested_by_user_id IS NULL
+          AND requested_by_service_account_id IS NULL
+        )
+      )
+    )
+    OR (
+      executor_kind IN ('action', 'pipeline', 'projection', 'rule', 'sync', 'webhook', 'workflow')
+      AND authority_kind = 'trustedPrimitive'
+      AND executor_kind = authority_primitive_kind
+    )
+    OR (
+      executor_kind = 'agent'
+      AND source_kind = 'execution'
+      AND (
+        (
+          authority_kind = 'principal'
+          AND authority_service_account_id IS NOT NULL
+          AND authority_session_id IS NULL
+          AND authority_access_token_id IS NULL
+        )
+        OR (
+          authority_kind = 'principal'
+          AND authority_user_id IS NOT NULL
+          AND (authority_session_id IS NOT NULL) + (authority_access_token_id IS NOT NULL) = 1
+        )
+        OR authority_kind = 'disabled'
+      )
+    )
+    OR (executor_kind = 'kernel' AND authority_kind = 'kernel')
+  )
+);
+
+INSERT INTO executions_v3 SELECT * FROM executions;
+DROP TABLE executions;
+ALTER TABLE executions_v3 RENAME TO executions;
+
+CREATE TABLE agent_runs_v3 (
+  project_id TEXT NOT NULL,
+  id TEXT NOT NULL,
+  execution_id TEXT NOT NULL,
+  kind TEXT NOT NULL DEFAULT 'conversation' CHECK (kind IN ('conversation', 'subagent')),
+  thread_id TEXT,
+  agent_id TEXT,
+  trigger_message_id TEXT,
+  parent_run_id TEXT,
+  spawn_key TEXT,
+  spec TEXT CHECK (spec IS NULL OR json_valid(spec)),
+  result TEXT CHECK (result IS NULL OR json_valid(result)),
+  requester_group_ids TEXT NOT NULL DEFAULT '[]'
+    CHECK (json_valid(requester_group_ids) AND json_type(requester_group_ids) = 'array'),
+  status TEXT NOT NULL CHECK (
+    status IN ('queued', 'running', 'succeeded', 'failed', 'cancelled')
+  ),
+  model_id TEXT,
+  finish_reason TEXT,
+  error TEXT CHECK (error IS NULL OR json_valid(error)),
+  diagnostics TEXT,
+  attempt INTEGER NOT NULL DEFAULT 0 CHECK (attempt >= 0),
+  execution_token TEXT,
+  execution_queue_lease_expires_at TEXT,
+  created_at TEXT NOT NULL,
+  started_at TEXT,
+  completed_at TEXT,
+  PRIMARY KEY (project_id, id),
+  UNIQUE (project_id, execution_id),
+  UNIQUE (project_id, parent_run_id, spawn_key),
+  FOREIGN KEY (project_id, execution_id)
+    REFERENCES executions (project_id, id)
+    ON DELETE RESTRICT,
+  FOREIGN KEY (project_id, parent_run_id)
+    REFERENCES agent_runs_v3 (project_id, id)
+    ON DELETE RESTRICT,
+  CHECK ((execution_token IS NULL) = (execution_queue_lease_expires_at IS NULL)),
+  CHECK (
+    (
+      kind = 'conversation'
+      AND thread_id IS NOT NULL
+      AND agent_id IS NOT NULL
+      AND trigger_message_id IS NOT NULL
+      AND parent_run_id IS NULL
+      AND spawn_key IS NULL
+      AND spec IS NULL
+      AND result IS NULL
+    )
+    OR
+    (
+      kind = 'subagent'
+      AND thread_id IS NULL
+      AND agent_id IS NULL
+      AND trigger_message_id IS NULL
+      AND parent_run_id IS NOT NULL
+      AND spawn_key IS NOT NULL
+      AND spec IS NOT NULL
+    )
+  ),
+  CHECK (kind <> 'subagent' OR status <> 'succeeded' OR result IS NOT NULL)
+);
+
+INSERT INTO agent_runs_v3 (
+  project_id, id, execution_id, kind, thread_id, agent_id, trigger_message_id,
+  requester_group_ids, status, model_id, finish_reason, error, diagnostics, attempt,
+  execution_token, execution_queue_lease_expires_at, created_at, started_at, completed_at
+)
+SELECT
+  project_id, id, execution_id, 'conversation', thread_id, agent_id, trigger_message_id,
+  requester_group_ids, status, model_id, finish_reason, error, diagnostics, attempt,
+  execution_token, execution_queue_lease_expires_at, created_at, started_at, completed_at
+FROM agent_runs;
+
+DROP TABLE agent_runs;
+ALTER TABLE agent_runs_v3 RENAME TO agent_runs;
+
+CREATE INDEX idx_agent_runs_project_started
+  ON agent_runs(project_id, COALESCE(started_at, created_at) DESC);
+CREATE INDEX idx_agent_runs_project_thread_started
+  ON agent_runs(project_id, thread_id, COALESCE(started_at, created_at) DESC);
+CREATE INDEX idx_agent_runs_project_agent_started
+  ON agent_runs(project_id, agent_id, COALESCE(started_at, created_at) DESC);
+CREATE INDEX idx_agent_runs_project_status_started
+  ON agent_runs(project_id, status, COALESCE(started_at, created_at) DESC);
+CREATE INDEX idx_agent_runs_project_parent_started
+  ON agent_runs(project_id, parent_run_id, status, COALESCE(started_at, created_at) DESC);

package/src/migrations/032-conversation-run-spec.sql

@@ -0,0 +1,78 @@
+CREATE TABLE agent_runs_v4 (
+  project_id TEXT NOT NULL,
+  id TEXT NOT NULL,
+  execution_id TEXT NOT NULL,
+  kind TEXT NOT NULL DEFAULT 'conversation' CHECK (kind IN ('conversation', 'subagent')),
+  thread_id TEXT,
+  agent_id TEXT,
+  trigger_message_id TEXT,
+  parent_run_id TEXT,
+  spawn_key TEXT,
+  spec TEXT CHECK (spec IS NULL OR json_valid(spec)),
+  result TEXT CHECK (result IS NULL OR json_valid(result)),
+  requester_group_ids TEXT NOT NULL DEFAULT '[]'
+    CHECK (json_valid(requester_group_ids) AND json_type(requester_group_ids) = 'array'),
+  status TEXT NOT NULL CHECK (
+    status IN ('queued', 'running', 'succeeded', 'failed', 'cancelled')
+  ),
+  model_id TEXT,
+  finish_reason TEXT,
+  error TEXT CHECK (error IS NULL OR json_valid(error)),
+  diagnostics TEXT,
+  attempt INTEGER NOT NULL DEFAULT 0 CHECK (attempt >= 0),
+  execution_token TEXT,
+  execution_queue_lease_expires_at TEXT,
+  created_at TEXT NOT NULL,
+  started_at TEXT,
+  completed_at TEXT,
+  PRIMARY KEY (project_id, id),
+  UNIQUE (project_id, execution_id),
+  UNIQUE (project_id, parent_run_id, spawn_key),
+  FOREIGN KEY (project_id, execution_id)
+    REFERENCES executions (project_id, id)
+    ON DELETE RESTRICT,
+  FOREIGN KEY (project_id, parent_run_id)
+    -- Use the final name: Bun's legacy ALTER mode preserves references when foreign keys are off.
+    REFERENCES agent_runs (project_id, id)
+    ON DELETE RESTRICT,
+  CHECK ((execution_token IS NULL) = (execution_queue_lease_expires_at IS NULL)),
+  CHECK (
+    (
+      kind = 'conversation'
+      AND thread_id IS NOT NULL
+      AND agent_id IS NOT NULL
+      AND trigger_message_id IS NOT NULL
+      AND parent_run_id IS NULL
+      AND spawn_key IS NULL
+      AND result IS NULL
+    )
+    OR
+    (
+      kind = 'subagent'
+      AND thread_id IS NULL
+      AND agent_id IS NULL
+      AND trigger_message_id IS NULL
+      AND parent_run_id IS NOT NULL
+      AND spawn_key IS NOT NULL
+      AND spec IS NOT NULL
+    )
+  ),
+  CHECK (kind <> 'subagent' OR status <> 'succeeded' OR result IS NOT NULL)
+);
+
+INSERT INTO agent_runs_v4 SELECT * FROM agent_runs;
+DROP TABLE agent_runs;
+ALTER TABLE agent_runs_v4 RENAME TO agent_runs;
+
+CREATE INDEX idx_agent_runs_project_thread_started
+  ON agent_runs (project_id, thread_id, COALESCE(started_at, created_at) DESC, id DESC);
+CREATE INDEX idx_agent_runs_project_status_created
+  ON agent_runs (project_id, status, created_at, id);
+CREATE INDEX idx_agent_runs_project_parent_started
+  ON agent_runs (
+    project_id,
+    parent_run_id,
+    status,
+    COALESCE(started_at, created_at) DESC,
+    id DESC
+  );

package/src/migrations/033-retire-agent-definitions.sql

@@ -0,0 +1,89 @@
+DROP INDEX idx_agent_threads_project_agent_activity;
+ALTER TABLE workflow_agent_node_runs RENAME COLUMN agent_id TO actor_id;
+ALTER TABLE agent_threads DROP COLUMN agent_id;
+
+CREATE TABLE agent_runs_v5 (
+  project_id TEXT NOT NULL,
+  id TEXT NOT NULL,
+  execution_id TEXT NOT NULL,
+  kind TEXT NOT NULL DEFAULT 'conversation' CHECK (kind IN ('conversation', 'subagent')),
+  thread_id TEXT,
+  trigger_message_id TEXT,
+  parent_run_id TEXT,
+  spawn_key TEXT,
+  spec TEXT CHECK (spec IS NULL OR json_valid(spec)),
+  result TEXT CHECK (result IS NULL OR json_valid(result)),
+  requester_group_ids TEXT NOT NULL DEFAULT '[]'
+    CHECK (json_valid(requester_group_ids) AND json_type(requester_group_ids) = 'array'),
+  status TEXT NOT NULL CHECK (
+    status IN ('queued', 'running', 'succeeded', 'failed', 'cancelled')
+  ),
+  model_id TEXT,
+  finish_reason TEXT,
+  error TEXT CHECK (error IS NULL OR json_valid(error)),
+  diagnostics TEXT,
+  attempt INTEGER NOT NULL DEFAULT 0 CHECK (attempt >= 0),
+  execution_token TEXT,
+  execution_queue_lease_expires_at TEXT,
+  created_at TEXT NOT NULL,
+  started_at TEXT,
+  completed_at TEXT,
+  PRIMARY KEY (project_id, id),
+  UNIQUE (project_id, execution_id),
+  UNIQUE (project_id, parent_run_id, spawn_key),
+  FOREIGN KEY (project_id, execution_id)
+    REFERENCES executions (project_id, id)
+    ON DELETE RESTRICT,
+  FOREIGN KEY (project_id, parent_run_id)
+    -- Use the final name: Bun's legacy ALTER mode preserves references when foreign keys are off.
+    REFERENCES agent_runs (project_id, id)
+    ON DELETE RESTRICT,
+  CHECK ((execution_token IS NULL) = (execution_queue_lease_expires_at IS NULL)),
+  CHECK (
+    (
+      kind = 'conversation'
+      AND thread_id IS NOT NULL
+      AND trigger_message_id IS NOT NULL
+      AND parent_run_id IS NULL
+      AND spawn_key IS NULL
+      AND result IS NULL
+    )
+    OR
+    (
+      kind = 'subagent'
+      AND thread_id IS NULL
+      AND trigger_message_id IS NULL
+      AND parent_run_id IS NOT NULL
+      AND spawn_key IS NOT NULL
+      AND spec IS NOT NULL
+    )
+  ),
+  CHECK (kind <> 'subagent' OR status <> 'succeeded' OR result IS NOT NULL)
+);
+
+INSERT INTO agent_runs_v5 (
+  project_id, id, execution_id, kind, thread_id, trigger_message_id, parent_run_id, spawn_key,
+  spec, result, requester_group_ids, status, model_id, finish_reason, error, diagnostics, attempt,
+  execution_token, execution_queue_lease_expires_at, created_at, started_at, completed_at
+)
+SELECT
+  project_id, id, execution_id, kind, thread_id, trigger_message_id, parent_run_id, spawn_key,
+  spec, result, requester_group_ids, status, model_id, finish_reason, error, diagnostics, attempt,
+  execution_token, execution_queue_lease_expires_at, created_at, started_at, completed_at
+FROM agent_runs;
+
+DROP TABLE agent_runs;
+ALTER TABLE agent_runs_v5 RENAME TO agent_runs;
+
+CREATE INDEX idx_agent_runs_project_thread_started
+  ON agent_runs (project_id, thread_id, COALESCE(started_at, created_at) DESC, id DESC);
+CREATE INDEX idx_agent_runs_project_status_created
+  ON agent_runs (project_id, status, created_at, id);
+CREATE INDEX idx_agent_runs_project_parent_started
+  ON agent_runs (
+    project_id,
+    parent_run_id,
+    status,
+    COALESCE(started_at, created_at) DESC,
+    id DESC
+  );

package/src/migrations/034-device-authorizations.sql

@@ -0,0 +1,22 @@
+CREATE TABLE auth_device_authorizations (
+  project_id TEXT NOT NULL,
+  id TEXT NOT NULL,
+  device_code_hash TEXT NOT NULL,
+  user_code TEXT NOT NULL,
+  client_name TEXT NOT NULL,
+  token_name TEXT NOT NULL,
+  token_expires_at TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'approved', 'denied', 'consumed')),
+  approved_user_id TEXT,
+  approved_session_id TEXT,
+  created_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  approved_at TEXT,
+  denied_at TEXT,
+  consumed_at TEXT,
+  PRIMARY KEY (project_id, id),
+  UNIQUE (project_id, user_code)
+);
+
+CREATE INDEX idx_auth_device_authorizations_pending
+  ON auth_device_authorizations(project_id, status, expires_at);

package/src/migrations.ts

@@ -76,6 +76,18 @@ import agentContextCheckpointsSql from "./migrations/027-agent-context-checkpoin
 import objectOverrideEditTimesSql from "./migrations/028-object-override-edit-times.sql" with {
   type: "text",
 }
+import modelAccountingSql from "./migrations/029-model-accounting.sql" with { type: "text" }
+import aiUsageLimitsSql from "./migrations/030-ai-usage-limits.sql" with { type: "text" }
+import subagentRunsSql from "./migrations/031-subagent-runs.sql" with { type: "text" }
+import conversationRunSpecSql from "./migrations/032-conversation-run-spec.sql" with {
+  type: "text",
+}
+import retireAgentDefinitionsSql from "./migrations/033-retire-agent-definitions.sql" with {
+  type: "text",
+}
+import deviceAuthorizationsSql from "./migrations/034-device-authorizations.sql" with {
+  type: "text",
+}
 
 const MIGRATIONS_TABLE_SQL = `
   CREATE TABLE IF NOT EXISTS sixb_migrations (
@@ -159,6 +171,12 @@ export const sqliteStorageMigrations = defineMigrations({
     sqliteSql("026-ai-cost-accounting", aiCostAccountingSql),
     sqliteSql("027-agent-context-checkpoints", agentContextCheckpointsSql),
     sqliteSql("028-object-override-edit-times", objectOverrideEditTimesSql),
+    sqliteSql("029-model-accounting", modelAccountingSql),
+    sqliteSql("030-ai-usage-limits", aiUsageLimitsSql),
+    sqliteSql("031-subagent-runs", subagentRunsSql),
+    sqliteSql("032-conversation-run-spec", conversationRunSpecSql),
+    sqliteSql("033-retire-agent-definitions", retireAgentDefinitionsSql),
+    sqliteSql("034-device-authorizations", deviceAuthorizationsSql),
   ],
 })
 

package/src/workflow-run-storage.ts

@@ -491,7 +491,7 @@ export class SqliteWorkflowAgentNodeRunStorage implements WorkflowAgentNodeRunSt
       projectId: input.projectId,
       executionId: input.executionId,
       nodeRunId: input.nodeRunId,
-      agentId: input.agentId,
+      actorId: input.actorId,
       workflowExecutionId: parent.execution_id,
     })
 
@@ -499,14 +499,14 @@ export class SqliteWorkflowAgentNodeRunStorage implements WorkflowAgentNodeRunSt
       this.db
         .query(`
           INSERT INTO workflow_agent_node_runs (
-            project_id, node_run_id, execution_id, agent_id, status, prompt, attempt, created_at
+            project_id, node_run_id, execution_id, actor_id, status, prompt, attempt, created_at
           ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
         `)
         .run(
           input.projectId,
           input.nodeRunId,
           input.executionId,
-          input.agentId,
+          input.actorId,
           "queued",
           input.prompt,
           0,
@@ -659,9 +659,9 @@ export class SqliteWorkflowAgentNodeRunStorage implements WorkflowAgentNodeRunSt
     if (hasEmptyStatuses(input)) return { runs: [], total: 0, hasMore: false }
     const whereClauses = ["project_id = ?"]
     const args: SqliteValue[] = [input.projectId]
-    if (input.agentId) {
-      whereClauses.push("agent_id = ?")
-      args.push(input.agentId)
+    if (input.actorId) {
+      whereClauses.push("actor_id = ?")
+      args.push(input.actorId)
     }
     appendRunListFilters(whereClauses, args, input)
     const result = queryRunList<WorkflowAgentNodeRunDatabaseRow>({
@@ -1073,7 +1073,7 @@ interface WorkflowAgentNodeRunDatabaseRow {
   project_id: string
   node_run_id: string
   execution_id: string
-  agent_id: string
+  actor_id: string
   status: WorkflowAgentNodeRunRecord["status"]
   prompt: string
   model_id: string | null
@@ -1107,7 +1107,7 @@ function rowToWorkflowAgentNodeRunRecord(
     projectId: row.project_id,
     nodeRunId: row.node_run_id,
     executionId: row.execution_id,
-    agentId: row.agent_id,
+    actorId: row.actor_id,
     status: row.status,
     prompt: row.prompt,
     ...(row.model_id ? { modelId: row.model_id } : {}),