@taopao/memoir 0.0.0-stage → 0.1.0

package/assets/migrations-pg/0137_agent_personal_identity.sql

@@ -0,0 +1,149 @@
+-- 稳定本人/设备与授权历史；只新增映射，不回写历史 actor、审计、批次或任务键。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入停用时不能扩展身份入口'; END IF;
+END $$;
+CREATE TABLE agent.self_identity (
+ singleton boolean PRIMARY KEY CHECK(singleton), id text NOT NULL UNIQUE CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$')
+);
+CREATE TABLE agent.devices (
+ device_id text PRIMARY KEY CHECK(device_id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ person_id text NOT NULL REFERENCES agent.self_identity(id),name text NOT NULL CHECK(length(name) BETWEEN 1 AND 100)
+);
+CREATE TABLE agent.actor_owners (
+ actor text PRIMARY KEY CHECK(actor ~ '^agent:(local:[0-9]+|person:[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})$'),
+ person_id text NOT NULL REFERENCES agent.self_identity(id),registered_device_id text NOT NULL REFERENCES agent.devices(device_id),reason text NOT NULL CHECK(length(reason) BETWEEN 1 AND 2000)
+);
+CREATE TABLE agent.agreements (
+ id text NOT NULL,version integer NOT NULL CHECK(version>0),person_id text NOT NULL REFERENCES agent.self_identity(id),
+ topic text NOT NULL CHECK(length(topic) BETWEEN 1 AND 200),user_words text NOT NULL CHECK(length(user_words) BETWEEN 1 AND 2000),scope text NOT NULL CHECK(length(scope) BETWEEN 1 AND 2000),
+ state text NOT NULL CHECK(state IN ('active','cancelled')),actor text NOT NULL, idempotency_key text NOT NULL CHECK(length(idempotency_key) BETWEEN 1 AND 200),fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),
+ reason text NOT NULL CHECK(length(reason) BETWEEN 1 AND 2000),created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+ PRIMARY KEY(id,version),UNIQUE(person_id,idempotency_key)
+);
+CREATE INDEX ix_agreements_person_topic ON agent.agreements(person_id,topic,id,version DESC);
+ALTER TABLE public.audit_log ADD COLUMN person_id text;
+ALTER TABLE public.audit_log ADD COLUMN device_id text;
+ALTER TABLE public.audit_log ADD COLUMN agent_name text;
+ALTER TABLE public.audit_log ADD COLUMN agent_id text;
+-- 旧审计保持原值；新审计分别记录逻辑 actor、本人和本次设备，不伪造旧操作来源。
+CREATE OR REPLACE FUNCTION public.vault_audit() RETURNS trigger LANGUAGE plpgsql AS $$
+DECLARE item jsonb; row_key text; key_value jsonb; old_value text; new_value text;
+BEGIN
+ item:=CASE WHEN TG_OP='DELETE' THEN to_jsonb(OLD) ELSE to_jsonb(NEW) END;
+ SELECT string_agg(item ->> key, ':' ORDER BY ord),jsonb_object_agg(key,item -> key)
+ INTO row_key,key_value FROM unnest(TG_ARGV) WITH ORDINALITY AS keys(key,ord);
+ IF TG_OP<>'INSERT' THEN old_value:=to_jsonb(OLD)::text; END IF;
+ IF TG_OP<>'DELETE' THEN new_value:=to_jsonb(NEW)::text; END IF;
+ INSERT INTO public.audit_log(at,actor,reason,table_name,row_key,op,before_json,after_json,change_set,object_schema,primary_key_json,person_id,device_id,agent_name,agent_id)
+ VALUES(to_char(clock_timestamp() AT TIME ZONE 'Asia/Shanghai','YYYY-MM-DD HH24:MI:SS'),
+ current_setting('vault.actor'),nullif(current_setting('vault.reason',true),''),TG_TABLE_NAME,row_key,lower(TG_OP),old_value,new_value,
+ nullif(current_setting('vault.change_set',true),''),TG_TABLE_SCHEMA,key_value::text,
+ nullif(current_setting('vault.person_id',true),''),nullif(current_setting('vault.device_id',true),''),nullif(current_setting('vault.agent_name',true),''),nullif(current_setting('vault.agent_id',true),''));
+ RETURN NULL;
+END $$;
+-- 只替换 actor 格式 CHECK；既有外键和内容/尝试/幂等约束原样保留。
+DO $$ DECLARE constraint_row record; BEGIN
+ FOR constraint_row IN SELECT n.nspname,c.relname,k.conname,pg_get_constraintdef(k.oid) AS definition
+ FROM pg_constraint k JOIN pg_class c ON c.oid=k.conrelid JOIN pg_namespace n ON n.oid=c.relnamespace
+ WHERE n.nspname='agent' AND k.contype='c' AND pg_get_constraintdef(k.oid) LIKE '%^agent:local:[0-9]+$%' LOOP
+  EXECUTE format('ALTER TABLE %I.%I DROP CONSTRAINT %I',constraint_row.nspname,constraint_row.relname,constraint_row.conname);
+  EXECUTE format('ALTER TABLE %I.%I ADD CONSTRAINT %I %s',constraint_row.nspname,constraint_row.relname,constraint_row.conname,
+   replace(constraint_row.definition,'^agent:local:[0-9]+$','^agent:(local:[0-9]+|person:[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})$'));
+ END LOOP;
+END $$;
+CREATE OR REPLACE FUNCTION public.vault_task_registration_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE session_actor text:=nullif(current_setting('vault.actor',true),'');
+BEGIN
+ IF session_actor='migration' THEN RETURN NEW; END IF;
+ -- 历史任务接续仍使用原 actor，但当前设备须属于已登记本人；不改写原计划和稳定业务键。
+ IF session_actor IS NULL OR NEW.actor IS DISTINCT FROM session_actor OR NOT EXISTS(
+  SELECT 1 FROM agent.actor_owners a JOIN agent.devices d ON d.person_id=a.person_id
+  WHERE a.actor=session_actor AND a.person_id=current_setting('vault.person_id',true) AND d.device_id=current_setting('vault.device_id',true)
+ ) THEN RAISE EXCEPTION '任务登记身份与可信本人/设备写会话不一致'; END IF;
+ NEW.created_at:=to_char(clock_timestamp() AT TIME ZONE 'UTC','YYYY-MM-DD"T"HH24:MI:SS.US"Z"');
+ RETURN NEW;
+END $$;
+DO $$ DECLARE name text; key text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['self_identity','devices','actor_owners','agreements'] LOOP
+  key:=CASE name WHEN 'self_identity' THEN 'id' WHEN 'devices' THEN 'device_id' WHEN 'actor_owners' THEN 'actor' ELSE 'id' END;
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(%2$L)',name,key);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;
+
+-- 保留原审计链验证，授权比较扩展为显式归属映射。
+CREATE OR REPLACE FUNCTION public.vault_lock_extension_revert(p_extension_id text,p_submission_id text) RETURNS void
+LANGUAGE plpgsql SECURITY DEFINER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE e record; role_oid oid; v_actor text:=nullif(current_setting('vault.actor',true),''); v_change_set text:=nullif(current_setting('vault.change_set',true),'');
+BEGIN
+ IF v_actor IS NULL OR v_change_set IS NULL OR v_change_set=p_submission_id OR nullif(current_setting('vault.reason',true),'') IS NULL THEN RAISE EXCEPTION 'Agent 撤销会话无效'; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ IF NOT EXISTS(SELECT 1 FROM agent.submissions s WHERE s.id=p_submission_id AND (s.actor=v_actor OR EXISTS(SELECT 1 FROM agent.actor_owners a JOIN agent.actor_owners b ON b.person_id=a.person_id WHERE a.actor=v_actor AND b.actor=s.actor))) OR EXISTS(SELECT 1 FROM agent.reversions r WHERE r.submission_id=p_submission_id) THEN RAISE EXCEPTION 'Agent 原提交不存在、身份不匹配或已撤销'; END IF;
+ SELECT * INTO e FROM agent.extensions WHERE id=p_extension_id FOR SHARE;
+ IF NOT FOUND OR e.schema_name NOT IN ('agent_ext','agent_archive') OR e.state NOT IN ('active','deprecated','retired') THEN RAISE EXCEPTION 'Agent 撤销扩展未登记'; END IF;
+ SELECT oid INTO role_oid FROM pg_roles WHERE rolname=current_user;
+ IF NOT EXISTS(SELECT 1 FROM pg_class c JOIN pg_namespace n ON n.oid=c.relnamespace WHERE n.nspname=e.schema_name AND c.relname=e.table_name AND c.relkind='r' AND c.relowner=role_oid) THEN RAISE EXCEPTION 'Agent 撤销函数与扩展属主不一致'; END IF;
+ EXECUTE format('LOCK TABLE %I.%I IN SHARE ROW EXCLUSIVE MODE',e.schema_name,e.table_name);
+END $$;
+
+-- 参数只能定位原审计行，不接受调用者提供待恢复字段、SQL 或操作者。
+-- 核心依赖/隐私校验仍由同一事务中的业务撤销入口编排，不能单独调用此内部函数绕过协议。
+CREATE OR REPLACE FUNCTION public.vault_restore_extension_revert(p_extension_id text,p_submission_id text,p_key_json text,p_last_audit bigint) RETURNS void
+LANGUAGE plpgsql SECURITY DEFINER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE e record; audit_row record; first_before jsonb; final_after jsonb; previous_after jsonb; key_value jsonb:=p_key_json::jsonb;
+ original_object text; current_object text; columns_now text[]; columns_audit text[]; pk_now text[]; pk_input text[];
+ chain_count integer:=0; last_id bigint; current_row jsonb; statement text; updates text; changed bigint; stamp text;
+ previous_marker text:=current_setting('vault.extension_revert',true); v_actor text:=nullif(current_setting('vault.actor',true),'');
+BEGIN
+ PERFORM public.vault_lock_extension_revert(p_extension_id,p_submission_id);
+ SELECT * INTO e FROM agent.extensions WHERE id=p_extension_id;
+ IF e.state NOT IN ('deprecated','retired') OR e.version<>1 THEN RAISE EXCEPTION 'Agent 限定恢复仅用于结构兼容的已废弃或归档扩展'; END IF;
+ original_object:='agent_ext.'||(e.descriptor_json::jsonb->'domain'->>'key')||'_'||(e.descriptor_json::jsonb->>'entity');
+ current_object:=e.schema_name||'.'||e.table_name;
+ IF (e.state='deprecated' AND current_object IS DISTINCT FROM original_object)
+   OR (e.state='retired' AND current_object IS DISTINCT FROM 'agent_archive.ext_'||replace(e.id,'-',''))
+   OR NOT EXISTS(SELECT 1 FROM agent.extension_migrations m WHERE m.extension_id=e.id AND m.version=e.version AND m.checksum=e.checksum AND m.descriptor_json::jsonb=e.descriptor_json::jsonb)
+ THEN RAISE EXCEPTION 'Agent 扩展结构或位置历史不一致'; END IF;
+ IF jsonb_typeof(key_value)<>'object' OR key_value='{}'::jsonb OR EXISTS(SELECT 1 FROM jsonb_each(key_value) kv WHERE jsonb_typeof(kv.value) NOT IN ('string','number')) THEN RAISE EXCEPTION 'Agent 撤销主键无效'; END IF;
+ -- 字段名使用固定字符序比较，不能让数据库地区排序规则影响结构兼容判断。
+ SELECT array_agg(x ORDER BY x COLLATE "C") INTO pk_input FROM jsonb_object_keys(key_value) x;
+ SELECT array_agg(a.attname::text ORDER BY k.ord) INTO pk_now FROM pg_index i CROSS JOIN LATERAL unnest(i.indkey) WITH ORDINALITY k(attnum,ord) JOIN pg_attribute a ON a.attrelid=i.indrelid AND a.attnum=k.attnum WHERE i.indrelid=to_regclass(format('%I.%I',e.schema_name,e.table_name)) AND i.indisprimary;
+ IF pk_now IS NULL OR to_jsonb(pk_now) IS DISTINCT FROM e.descriptor_json::jsonb->'primary_key'
+   OR (SELECT array_agg(x ORDER BY x COLLATE "C") FROM unnest(pk_now) x) IS DISTINCT FROM pk_input THEN RAISE EXCEPTION 'Agent 撤销主键结构已变化'; END IF;
+ -- 新旧物理位置共同定位同一稳定对象，保持原审计文本，不按冒号拆分复合键。
+ FOR audit_row IN SELECT l.* FROM public.audit_log l WHERE l.change_set=p_submission_id AND l.primary_key_json::jsonb=key_value AND coalesce(l.object_schema,'public')||'.'||l.table_name IN (original_object,current_object) ORDER BY l.id LIMIT 4001 LOOP
+  chain_count:=chain_count+1;
+  IF audit_row.after_json IS NULL OR audit_row.actor IS DISTINCT FROM (SELECT s.actor FROM agent.submissions s WHERE s.id=p_submission_id) OR (chain_count>1 AND previous_after IS DISTINCT FROM audit_row.before_json::jsonb) THEN RAISE EXCEPTION 'Agent 扩展审计链不完整'; END IF;
+  IF chain_count=1 THEN first_before:=audit_row.before_json::jsonb; END IF;
+  final_after:=audit_row.after_json::jsonb; previous_after:=final_after; last_id:=audit_row.id;
+  IF NOT (key_value<@final_after) OR (audit_row.before_json IS NOT NULL AND NOT (key_value<@audit_row.before_json::jsonb)) THEN RAISE EXCEPTION 'Agent 扩展审计主键不一致'; END IF;
+ END LOOP;
+ IF chain_count=0 OR chain_count>4000 OR last_id IS DISTINCT FROM p_last_audit THEN RAISE EXCEPTION 'Agent 扩展审计末端已变化'; END IF;
+ SELECT array_agg(attname::text ORDER BY attname::text COLLATE "C") INTO columns_now FROM pg_attribute WHERE attrelid=to_regclass(format('%I.%I',e.schema_name,e.table_name)) AND attnum>0 AND NOT attisdropped;
+ SELECT array_agg(x ORDER BY x COLLATE "C") INTO columns_audit FROM jsonb_object_keys(final_after) x;
+ IF columns_now IS DISTINCT FROM columns_audit OR NOT ('deleted_at'=ANY(columns_now)) OR (first_before IS NOT NULL AND (SELECT array_agg(x ORDER BY x COLLATE "C") FROM jsonb_object_keys(first_before) x) IS DISTINCT FROM columns_now) THEN RAISE EXCEPTION 'Agent 扩展审计字段与当前结构不兼容'; END IF;
+ EXECUTE format('SELECT to_jsonb(t) FROM %I.%I t WHERE $1 <@ to_jsonb(t) FOR UPDATE',e.schema_name,e.table_name) INTO current_row USING key_value;
+ IF current_row IS DISTINCT FROM final_after OR EXISTS(SELECT 1 FROM public.audit_log l WHERE l.id>last_id AND l.primary_key_json::jsonb=key_value AND coalesce(l.object_schema,'public')||'.'||l.table_name IN (original_object,current_object)) THEN RAISE EXCEPTION 'Agent 扩展行或后续审计已变化'; END IF;
+ stamp:=to_char(clock_timestamp() AT TIME ZONE 'Asia/Shanghai','YYYY-MM-DD HH24:MI:SS');
+ IF first_before IS NULL THEN updates:='deleted_at=$2';
+ ELSE
+  SELECT string_agg(format('%1$I=(jsonb_populate_record(NULL::%2$I.%3$I,$1)).%1$I',c,e.schema_name,e.table_name),',' ORDER BY c) INTO updates
+   FROM unnest(columns_now) c WHERE NOT (c=ANY(pk_now)) AND c NOT IN ('created_at','created_by','updated_at','updated_by');
+ END IF;
+ statement:=format('UPDATE %I.%I t SET %s,updated_at=$2,updated_by=$3 WHERE $4 <@ to_jsonb(t)',e.schema_name,e.table_name,updates);
+ PERFORM set_config('vault.extension_revert',e.id,true);
+ EXECUTE statement USING first_before,stamp,v_actor,key_value;
+ GET DIAGNOSTICS changed=ROW_COUNT;
+ PERFORM set_config('vault.extension_revert',coalesce(previous_marker,''),true);
+ IF changed<>1 THEN RAISE EXCEPTION 'Agent 扩展限定恢复未命中唯一记录'; END IF;
+END $$;
+

package/assets/migrations-pg/0138_agent_work_records.sql

@@ -0,0 +1,24 @@
+-- 用户工作的持久业务进度；没有执行器、模型启动配置或租约令牌。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN IF NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入停用时不能扩展工作入口'; END IF; END $$;
+CREATE TABLE agent.work_records (
+ id text NOT NULL,version integer NOT NULL CHECK(version>0),person_id text NOT NULL REFERENCES agent.self_identity(id),
+ state text NOT NULL CHECK(state IN ('open','finished')),payload_json text NOT NULL CHECK(public.vault_json_valid(payload_json)),
+ actor text NOT NULL,idempotency_key text NOT NULL CHECK(length(idempotency_key) BETWEEN 1 AND 200),fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),
+ created_at timestamptz NOT NULL DEFAULT clock_timestamp(),PRIMARY KEY(id,version),UNIQUE(person_id,idempotency_key)
+);
+CREATE INDEX ix_work_records_person ON agent.work_records(person_id,id,version DESC);
+DO $$ DECLARE name text; key text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['work_records'] LOOP
+  key:=CASE name WHEN 'self_identity' THEN 'id' WHEN 'devices' THEN 'device_id' WHEN 'actor_owners' THEN 'actor' ELSE 'id' END;
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(%2$L)',name,key);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;

package/assets/migrations-pg/0139_shared_files.sql

@@ -0,0 +1,43 @@
+-- 原件字节属于稳定存储层；不依赖 Agent 包或可拔除 schema，不移动/删除本地原件。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+CREATE TABLE public.vault_file_blobs (
+ sha256 text PRIMARY KEY CHECK(sha256 ~ '^[a-f0-9]{64}$'),size_bytes integer NOT NULL CHECK(size_bytes BETWEEN 0 AND 52428800),content bytea NOT NULL,
+ CHECK(octet_length(content)=size_bytes),CHECK(encode(sha256(content),'hex')=sha256)
+);
+CREATE TABLE public.vault_files (
+ id text NOT NULL,version integer NOT NULL CHECK(version>0),kind text NOT NULL CHECK(kind IN ('original','script','artifact')),
+ name text NOT NULL CHECK(length(name) BETWEEN 1 AND 255),media_type text NOT NULL CHECK(length(media_type) BETWEEN 1 AND 200),
+ sha256 text NOT NULL REFERENCES public.vault_file_blobs(sha256),person_id text,actor text NOT NULL,
+ idempotency_key text NOT NULL CHECK(length(idempotency_key) BETWEEN 1 AND 200),fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),reason text NOT NULL,
+ created_at timestamptz NOT NULL DEFAULT clock_timestamp(),PRIMARY KEY(id,version),UNIQUE(actor,idempotency_key)
+);
+CREATE TABLE public.vault_file_imports (
+ batch_id text NOT NULL,file_sha256 text NOT NULL REFERENCES public.vault_file_blobs(sha256),
+ PRIMARY KEY(batch_id,file_sha256),FOREIGN KEY(batch_id,file_sha256) REFERENCES public.import_files(batch_id,file_sha256)
+);
+CREATE TABLE public.vault_file_migrations (
+ id text PRIMARY KEY,actor text NOT NULL,person_id text NOT NULL,idempotency_key text NOT NULL,fingerprint text NOT NULL,
+ manifest_json text NOT NULL CHECK(public.vault_json_valid(manifest_json)),created_at timestamptz NOT NULL DEFAULT clock_timestamp(),UNIQUE(person_id,idempotency_key)
+);
+CREATE TABLE public.vault_file_migration_items (
+ id text PRIMARY KEY,migration_id text NOT NULL REFERENCES public.vault_file_migrations(id),ordinal integer NOT NULL CHECK(ordinal>0),sequence integer NOT NULL CHECK(sequence>0),UNIQUE(migration_id,ordinal,sequence),
+ state text NOT NULL CHECK(state IN ('shared','missing','oversize','conflict','failed')),file_id text,file_version integer,
+ detail_json text NOT NULL CHECK(public.vault_json_valid(detail_json)),created_at timestamptz NOT NULL DEFAULT clock_timestamp(),
+ FOREIGN KEY(file_id,file_version) REFERENCES public.vault_files(id,version)
+);
+CREATE INDEX ix_file_migration_items ON public.vault_file_migration_items(migration_id,ordinal,sequence DESC);
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['vault_file_blobs','vault_files','vault_file_imports','vault_file_migrations','vault_file_migration_items'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON public.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON public.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  -- blob 的字节不复制进审计 JSON（避免倍增和泄漏）；元数据仍有独立逐行审计。
+  IF name<>'vault_file_blobs' THEN
+   EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON public.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(%2$L)',name,CASE WHEN name='vault_file_imports' THEN 'batch_id' ELSE 'id' END);
+  END IF;
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON public.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON public.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT %s ON public.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;

package/assets/migrations-pg/0140_shared_script_runs.sql

@@ -0,0 +1,36 @@
+-- 受信任脚本的运行预约/回执共享；没有模型启动器或自动执行入口。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN IF NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入停用时不能扩展脚本入口'; END IF; END $$;
+CREATE TABLE agent.script_runs (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{64}$'),actor text NOT NULL,fingerprint text NOT NULL,
+ payload_json text NOT NULL CHECK(public.vault_json_valid(payload_json)),created_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+CREATE TABLE agent.script_run_results (
+ id text PRIMARY KEY REFERENCES agent.script_runs(id),actor text NOT NULL,
+ payload_json text NOT NULL CHECK(public.vault_json_valid(payload_json)),created_at timestamptz NOT NULL DEFAULT clock_timestamp()
+);
+DO $$ DECLARE name text; key text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['script_runs','script_run_results'] LOOP
+  key:=CASE name WHEN 'self_identity' THEN 'id' WHEN 'devices' THEN 'device_id' WHEN 'actor_owners' THEN 'actor' ELSE 'id' END;
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(%2$L)',name,key);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;
+
+CREATE TABLE agent.scan_keys (id text PRIMARY KEY CHECK(id='source-scan-v1'),content bytea NOT NULL CHECK(octet_length(content)=32));
+INSERT INTO agent.scan_keys(id,content) VALUES('source-scan-v1',decode(replace(gen_random_uuid()::text||gen_random_uuid()::text,'-',''),'hex'));
+CREATE TRIGGER trg_scan_keys_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.scan_keys FOR EACH ROW EXECUTE FUNCTION public.vault_guard('append');
+CREATE TRIGGER trg_scan_keys_truncate BEFORE TRUNCATE ON agent.scan_keys FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard('append');
+REVOKE ALL ON agent.scan_keys FROM PUBLIC;
+DO $$ DECLARE g record; BEGIN
+ FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type='SELECT' LOOP
+ EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);EXECUTE format('GRANT SELECT ON agent.scan_keys TO %I',g.rolname);
+ END LOOP;
+END $$;

package/assets/migrations-pg/0141_payment_bank_links.sql

@@ -0,0 +1,96 @@
+-- 仅 PostgreSQL：复用 0116 的银行统一事实，不复制、改写原始账单，也不自动关联历史记录。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+
+-- 关联审核使用单调版本而非秒级时间戳，避免同一秒内先确认后撤回仍通过旧页面校验。
+ALTER TABLE payment_order_links ADD COLUMN revision integer NOT NULL DEFAULT 1 CHECK(revision>0);
+ALTER TABLE payment_order_links ADD COLUMN source_fingerprint text;
+-- 只冻结关联身份/金额/时间/渠道；退款和隐藏继续走原净额/标签视图，不把退款变成一笔新消费。
+CREATE FUNCTION vault_order_payment_fingerprint(pp text,pt text,op text,onum text)
+RETURNS text LANGUAGE sql STABLE AS $$
+ SELECT encode(sha256(convert_to(jsonb_build_array(p.platform,p.txn_id,p.occurred_at,p.amount_cents,p.direction,
+  p.merchant_order_no,p.pay_method,o.platform,o.order_no,o.ordered_at,o.paid_at,o.total_paid_cents,o.pay_method,o.pay_channel,o.raw_json::jsonb->>'tradeNo')::text,'UTF8')),'hex')
+ FROM payments p CROSS JOIN orders o WHERE p.platform=pp AND p.txn_id=pt AND o.platform=op AND o.order_no=onum
+$$;
+-- 既有人工/规则关联保持原结论，只冻结迁移时的来源版本；后续来源变化退出可信集合等待重新核对。
+UPDATE payment_order_links SET source_fingerprint=vault_order_payment_fingerprint(payment_platform,payment_txn_id,order_platform,order_no);
+CREATE FUNCTION vault_payment_order_revision() RETURNS trigger LANGUAGE plpgsql AS $$
+BEGIN
+ IF TG_OP='UPDATE' THEN NEW.revision:=OLD.revision+1; END IF;
+ NEW.source_fingerprint:=vault_order_payment_fingerprint(NEW.payment_platform,NEW.payment_txn_id,NEW.order_platform,NEW.order_no);
+ RETURN NEW;
+END $$;
+CREATE TRIGGER trg_payment_order_links_revision BEFORE INSERT OR UPDATE ON payment_order_links FOR EACH ROW EXECUTE FUNCTION vault_payment_order_revision();
+-- 保持原视图列名及顺序，不因新增审核列破坏已有分摊/净额视图的依赖。
+CREATE OR REPLACE VIEW _v_trusted_payment_orders AS
+ SELECT payment_platform,payment_txn_id,order_platform,order_no,match_method,confidence,created_at,created_by,updated_at,updated_by,deleted_at
+ FROM payment_order_links
+ WHERE deleted_at IS NULL AND (confidence='high' OR match_method='manual')
+ AND source_fingerprint=vault_order_payment_fingerprint(payment_platform,payment_txn_id,order_platform,order_no);
+
+CREATE TABLE payment_bank_links (
+ id text PRIMARY KEY,
+ payment_platform text NOT NULL,payment_txn_id text NOT NULL,
+ debit_transaction_key text REFERENCES bank_card_transactions(transaction_key),
+ credit_transaction_key text REFERENCES credit_card_transactions(transaction_key),
+ method text NOT NULL CHECK(method IN ('bank_reference','card_time')),
+ state text NOT NULL CHECK(state IN ('suggested','confirmed','rejected')),
+ payment_fingerprint text NOT NULL CHECK(payment_fingerprint ~ '^[a-f0-9]{64}$'),bank_fingerprint text NOT NULL CHECK(bank_fingerprint ~ '^[a-f0-9]{64}$'),
+ reason text NOT NULL,revision integer NOT NULL DEFAULT 1 CHECK(revision>0),
+ created_at text NOT NULL,created_by text NOT NULL,updated_at text NOT NULL,updated_by text NOT NULL,
+ FOREIGN KEY(payment_platform,payment_txn_id) REFERENCES payments(platform,txn_id),
+ CHECK(num_nonnulls(debit_transaction_key,credit_transaction_key)=1)
+);
+-- 首版只确认逐笔全额的一对一资金来源；合并支付和混合付款保留待确认，禁止抢占已确认端点。
+CREATE UNIQUE INDEX ix_payment_bank_pair_debit ON payment_bank_links(payment_platform,payment_txn_id,debit_transaction_key) WHERE debit_transaction_key IS NOT NULL;
+CREATE UNIQUE INDEX ix_payment_bank_pair_credit ON payment_bank_links(payment_platform,payment_txn_id,credit_transaction_key) WHERE credit_transaction_key IS NOT NULL;
+CREATE UNIQUE INDEX ix_payment_bank_confirmed_payment ON payment_bank_links(payment_platform,payment_txn_id) WHERE state='confirmed';
+CREATE UNIQUE INDEX ix_payment_bank_confirmed_debit ON payment_bank_links(debit_transaction_key) WHERE state='confirmed';
+CREATE UNIQUE INDEX ix_payment_bank_confirmed_credit ON payment_bank_links(credit_transaction_key) WHERE state='confirmed';
+
+CREATE TABLE finance_bank_reviews (
+ id text PRIMARY KEY,
+ debit_transaction_key text REFERENCES bank_card_transactions(transaction_key),
+ credit_transaction_key text REFERENCES credit_card_transactions(transaction_key),
+ decision text NOT NULL CHECK(decision IN ('expense','excluded','unreviewed')),
+ bank_fingerprint text NOT NULL CHECK(bank_fingerprint ~ '^[a-f0-9]{64}$'),revision integer NOT NULL DEFAULT 1 CHECK(revision>0),
+ created_at text NOT NULL,created_by text NOT NULL,updated_at text NOT NULL,updated_by text NOT NULL,
+ CHECK(num_nonnulls(debit_transaction_key,credit_transaction_key)=1),
+ UNIQUE(debit_transaction_key),UNIQUE(credit_transaction_key)
+);
+
+-- 借记卡扣款、信用卡消费使用同一只读投影；还款、退款、其他入账保留原交易类型，不反推消费。
+CREATE VIEW _v_finance_bank_entries AS
+ SELECT 'debit'::text AS kind,t.transaction_key,t.source_kind,t.bank_card_id,
+  t.occurred_at,t.date_precision,t.currency,t.amount_cents,t.direction,
+  CASE WHEN t.direction='out' THEN 'outflow' ELSE 'inflow' END AS transaction_kind,
+  t.card_last_four,coalesce(c.bank_name,'') AS bank_name,
+  concat_ws(' ',t.counterparty,t.description,t.institution,t.bank_txn_id,t.transaction_card) AS description,
+  t.bank_txn_id AS reference,t.last_batch_id
+ FROM bank_card_transactions t LEFT JOIN bank_cards c ON c.id=t.bank_card_id AND c.deleted_at IS NULL
+ UNION ALL
+ SELECT 'credit',t.transaction_key,t.source_kind,t.bank_card_id,
+  coalesce(nullif(t.occurred_at,''),nullif(t.transaction_date,''),t.posting_date),
+  coalesce(t.date_precision,'day'),t.settlement_currency,abs(t.settlement_amount_cents),
+  CASE WHEN t.settlement_amount_cents>0 THEN 'out' ELSE 'in' END,t.transaction_kind,
+  t.card_last_four,coalesce(c.bank_name,''),
+  concat_ws(' ',t.description,t.counterparty,t.payment_channel,t.remark),'' AS reference,t.last_batch_id
+ FROM credit_card_transactions t LEFT JOIN bank_cards c ON c.id=t.bank_card_id AND c.deleted_at IS NULL;
+
+CREATE INDEX ix_finance_payment_amount_date ON payments(amount_cents,occurred_at);
+
+-- 新知识表与既有人工关联表一样，要求写会话、逐行审计、版本失效与最小角色权限。
+DO $$ DECLARE tbl text; g record; BEGIN
+ FOREACH tbl IN ARRAY ARRAY['payment_bank_links','finance_bank_reviews'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON %1$I FOR EACH ROW EXECUTE FUNCTION vault_guard(''session'')',tbl);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON %1$I FOR EACH STATEMENT EXECUTE FUNCTION vault_guard(''session'')',tbl);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON %1$I FOR EACH ROW EXECUTE FUNCTION vault_audit(''id'')',tbl);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON %1$I FOR EACH STATEMENT EXECUTE FUNCTION vault_touch()',tbl);
+  REVOKE ALL ON payment_bank_links,finance_bank_reviews FROM PUBLIC;
+  FOR g IN SELECT DISTINCT grantee,privilege_type FROM information_schema.role_table_grants WHERE table_schema='public' AND table_name='payment_order_links' AND grantee<>current_user AND privilege_type IN ('SELECT','INSERT','UPDATE') LOOP
+   EXECUTE format('GRANT %s ON %I TO %s',g.privilege_type,tbl,CASE WHEN g.grantee='PUBLIC' THEN 'PUBLIC' ELSE quote_ident(g.grantee) END);
+  END LOOP;
+ END LOOP;
+ FOR g IN SELECT DISTINCT grantee FROM information_schema.role_table_grants WHERE table_schema='public' AND table_name='bank_card_transactions' AND privilege_type='SELECT' AND grantee<>current_user LOOP
+  EXECUTE format('GRANT SELECT ON _v_finance_bank_entries TO %s',CASE WHEN g.grantee='PUBLIC' THEN 'PUBLIC' ELSE quote_ident(g.grantee) END);
+ END LOOP;
+END $$;