@taopao/memoir 0.0.0-stage → 0.1.0

package/assets/migrations-pg/0124_agent_extension_retirement_groups.sql

@@ -0,0 +1,26 @@
+-- 图退役的整组回执只增保存；逐表搬迁和归档依赖更新仍追加到已有生命周期历史。
+-- 不搬迁业务资料、不创建备份，不修改已发布迁移。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+CREATE TABLE agent.extension_retirement_groups (
+ id text PRIMARY KEY,actor text NOT NULL,idempotency_key text NOT NULL,
+ fingerprint text NOT NULL,request_json text NOT NULL CHECK(public.vault_json_valid(request_json)),
+ anchor_event_id text NOT NULL UNIQUE REFERENCES agent.extension_lifecycle_events(id),
+ result_json text NOT NULL CHECK(public.vault_json_valid(result_json)),created_at text NOT NULL,
+ UNIQUE(actor,idempotency_key)
+);
+-- 健康检查和幂等重放按组核对全部逐表事件，索引避免反复扫描无关生命周期历史。
+CREATE INDEX idx_extension_lifecycle_retirement_group ON agent.extension_lifecycle_events ((result_json::jsonb->>'retirement_group_id'));
+CREATE TRIGGER trg_extension_retirement_groups_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.extension_retirement_groups FOR EACH ROW EXECUTE FUNCTION public.vault_guard('append');
+CREATE TRIGGER trg_extension_retirement_groups_truncate BEFORE TRUNCATE ON agent.extension_retirement_groups FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard('append');
+CREATE TRIGGER trg_extension_retirement_groups_audit AFTER INSERT OR UPDATE OR DELETE ON agent.extension_retirement_groups FOR EACH ROW EXECUTE FUNCTION public.vault_audit('id');
+CREATE TRIGGER trg_extension_retirement_groups_version AFTER INSERT OR UPDATE OR DELETE ON agent.extension_retirement_groups FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch();
+DO $$ DECLARE g record; BEGIN
+ REVOKE ALL ON agent.extension_retirement_groups FROM PUBLIC;
+ FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='agent.extension_retirement_groups'::regclass AND a.grantee<>c.relowner LOOP
+  EXECUTE format('REVOKE ALL ON agent.extension_retirement_groups FROM %I',g.rolname);
+ END LOOP;
+ -- app/readonly 仅按现有 persons 读取角色映射 SELECT，不能改写回执或扩大结构权限。
+ FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type='SELECT' LOOP
+  EXECUTE format('GRANT SELECT ON agent.extension_retirement_groups TO %I',g.rolname);
+ END LOOP;
+END $$;

package/assets/migrations-pg/0125_agent_candidate_reviews.sql

@@ -0,0 +1,30 @@
+-- 候选处理与纠正结果分开：不自动写事实、不改原文；仅新增可追溯处理记录，不创建备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+CREATE TABLE agent.candidate_reviews (
+ id text PRIMARY KEY,candidate_id text NOT NULL UNIQUE REFERENCES agent.candidates(id),
+ actor text NOT NULL,idempotency_key text NOT NULL,fingerprint text NOT NULL,
+ outcome text NOT NULL CHECK(outcome IN ('resolved','dismissed')),reason text NOT NULL,
+ sensitivity text NOT NULL CHECK(sensitivity IN ('normal','private','intimate')),
+ resolution_submission_id text REFERENCES agent.submissions(id),resolution_operation_key text,
+ resolution_json text CHECK(resolution_json IS NULL OR public.vault_json_valid(resolution_json)),
+ request_json text NOT NULL CHECK(public.vault_json_valid(request_json)),plan_revision text NOT NULL,
+ result_json text NOT NULL CHECK(public.vault_json_valid(result_json)),change_set text NOT NULL,created_at text NOT NULL,
+ UNIQUE(actor,idempotency_key),
+ CHECK((outcome='resolved' AND resolution_submission_id IS NOT NULL AND resolution_operation_key IS NOT NULL AND resolution_json IS NOT NULL)
+    OR (outcome='dismissed' AND resolution_submission_id IS NULL AND resolution_operation_key IS NULL AND resolution_json IS NULL))
+);
+CREATE INDEX ix_candidate_review_resolution ON agent.candidate_reviews(resolution_submission_id) WHERE resolution_submission_id IS NOT NULL;
+CREATE TRIGGER trg_candidate_reviews_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.candidate_reviews FOR EACH ROW EXECUTE FUNCTION public.vault_guard('append');
+CREATE TRIGGER trg_candidate_reviews_truncate BEFORE TRUNCATE ON agent.candidate_reviews FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard('append');
+CREATE TRIGGER trg_candidate_reviews_audit AFTER INSERT OR UPDATE OR DELETE ON agent.candidate_reviews FOR EACH ROW EXECUTE FUNCTION public.vault_audit('id');
+CREATE TRIGGER trg_candidate_reviews_version AFTER INSERT OR UPDATE OR DELETE ON agent.candidate_reviews FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch();
+DO $$ DECLARE g record; BEGIN
+ REVOKE ALL ON agent.candidate_reviews FROM PUBLIC;
+ FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='agent.candidate_reviews'::regclass AND a.grantee<>c.relowner LOOP
+  EXECUTE format('REVOKE ALL ON agent.candidate_reviews FROM %I',g.rolname);
+ END LOOP;
+ -- 仅映射既有读取/业务插入角色；不给 UPDATE、DELETE、TRUNCATE 或结构权限。
+ FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+  EXECUTE format('GRANT %s ON agent.candidate_reviews TO %I',g.privilege_type,g.rolname);
+ END LOOP;
+END $$;

package/assets/migrations-pg/0126_agent_module_lifecycle.sql

@@ -0,0 +1,93 @@
+-- 执行停用保留资料：核心元数据存全局开关，不改写扩展生命周期，不创建备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ALTER TABLE public.vault_meta ADD COLUMN agent_writes_enabled boolean NOT NULL DEFAULT true;
+ALTER TABLE public.vault_meta ADD COLUMN agent_runtime_revision integer NOT NULL DEFAULT 1 CHECK(agent_runtime_revision>0);
+CREATE FUNCTION public.vault_agent_writes_enabled() RETURNS boolean LANGUAGE sql STABLE SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+ SELECT coalesce((SELECT agent_writes_enabled FROM public.vault_meta WHERE id=1),false)
+$$;
+-- 该函数仅返回开关，可供 app/readonly/触发器读取；不包含凭据、不提升身份。
+GRANT EXECUTE ON FUNCTION public.vault_agent_writes_enabled() TO PUBLIC;
+CREATE FUNCTION public.vault_agent_state_guard() RETURNS trigger LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE owner_call boolean; actor text:=nullif(current_setting('vault.actor',true),'');
+BEGIN
+ IF TG_OP IN ('DELETE','TRUNCATE') THEN RAISE EXCEPTION '核心元数据不能删除或清空'; END IF;
+ IF NEW.id IS DISTINCT FROM OLD.id THEN RAISE EXCEPTION '核心元数据身份不能修改'; END IF;
+ IF NEW.agent_writes_enabled IS DISTINCT FROM OLD.agent_writes_enabled OR NEW.agent_runtime_revision IS DISTINCT FROM OLD.agent_runtime_revision THEN
+  SELECT c.relowner=r.oid INTO owner_call FROM pg_class c JOIN pg_roles r ON r.rolname=current_user WHERE c.oid=TG_RELID;
+  IF NOT coalesce(owner_call,false) OR actor IS NULL OR (actor NOT LIKE 'maintenance:%' AND actor<>'migration') THEN RAISE EXCEPTION 'Agent 开关仅由属主维护入口修改'; END IF;
+  IF NEW.agent_runtime_revision<>OLD.agent_runtime_revision+1 OR NEW.agent_writes_enabled=OLD.agent_writes_enabled THEN RAISE EXCEPTION 'Agent 开关修订必须连续切换'; END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+CREATE TRIGGER trg_vault_meta_agent_state BEFORE UPDATE OR DELETE ON public.vault_meta FOR EACH ROW EXECUTE FUNCTION public.vault_agent_state_guard();
+CREATE TRIGGER trg_vault_meta_agent_truncate BEFORE TRUNCATE ON public.vault_meta FOR EACH STATEMENT EXECUTE FUNCTION public.vault_agent_state_guard();
+CREATE TABLE agent.module_events (
+ id text PRIMARY KEY,actor text NOT NULL,idempotency_key text NOT NULL,fingerprint text NOT NULL,
+ previous_enabled boolean NOT NULL,enabled boolean NOT NULL,revision integer NOT NULL UNIQUE CHECK(revision>1),
+ reason text NOT NULL,plan_revision text NOT NULL,request_json text NOT NULL CHECK(public.vault_json_valid(request_json)),
+ grants_json text NOT NULL CHECK(public.vault_json_valid(grants_json)),catalog_json text NOT NULL CHECK(public.vault_json_valid(catalog_json)),
+ result_json text NOT NULL CHECK(public.vault_json_valid(result_json)),created_at text NOT NULL,
+ UNIQUE(actor,idempotency_key),CHECK(previous_enabled<>enabled)
+);
+CREATE TRIGGER trg_module_events_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.module_events FOR EACH ROW EXECUTE FUNCTION public.vault_guard('append');
+CREATE TRIGGER trg_module_events_truncate BEFORE TRUNCATE ON agent.module_events FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard('append');
+CREATE TRIGGER trg_module_events_audit AFTER INSERT OR UPDATE OR DELETE ON agent.module_events FOR EACH ROW EXECUTE FUNCTION public.vault_audit('id');
+CREATE TRIGGER trg_module_events_version AFTER INSERT OR UPDATE OR DELETE ON agent.module_events FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch();
+DO $$ DECLARE g record; BEGIN
+ REVOKE ALL ON agent.module_events FROM PUBLIC;
+ FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='agent.module_events'::regclass AND a.grantee<>c.relowner LOOP
+  EXECUTE format('REVOKE ALL ON agent.module_events FROM %I',g.rolname);
+ END LOOP;
+ FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type='SELECT' LOOP
+  EXECUTE format('GRANT SELECT ON agent.module_events TO %I',g.rolname);
+ END LOOP;
+END $$;
+-- 保护规则由共享表清单安装触发器，此文件定义稳定的数据库函数。
+CREATE OR REPLACE FUNCTION public.vault_guard() RETURNS trigger LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE actor text := nullif(current_setting('vault.actor',true),'');
+BEGIN
+ IF TG_OP='TRUNCATE' THEN RAISE EXCEPTION '禁止 TRUNCATE'; END IF;
+ IF actor IS NULL THEN RAISE EXCEPTION '未设置写入会话'; END IF;
+ -- 正常人工/导入写入 public 不读 Agent 管理表；仅 Agent 身份或管理表写入核对稳定的 vault_meta 开关。
+ IF actor LIKE 'agent:%' OR TG_TABLE_SCHEMA='agent' THEN
+  IF actor<>'migration' AND NOT public.vault_agent_writes_enabled() THEN
+   IF NOT (TG_TABLE_SCHEMA='agent' AND TG_TABLE_NAME='module_events' AND actor LIKE 'maintenance:%'
+     AND EXISTS(SELECT 1 FROM pg_class c JOIN pg_roles r ON r.rolname=current_user WHERE c.oid=TG_RELID AND c.relowner=r.oid))
+   THEN RAISE EXCEPTION 'Agent 写入已停用，资料保留只读'; END IF;
+  END IF;
+ END IF;
+
+ IF TG_ARGV[0]='append' AND TG_OP IN('UPDATE','DELETE') THEN RAISE EXCEPTION '只增表禁止修改或删除'; END IF;
+ IF TG_ARGV[0]='fact' AND actor NOT IN('importer','migration') THEN RAISE EXCEPTION '事实表只允许导入程序修改'; END IF;
+ IF TG_TABLE_NAME='backup_log' AND TG_OP='DELETE' THEN RAISE EXCEPTION '备份记录不能删除'; END IF;
+ IF TG_TABLE_NAME='import_batches' THEN
+   IF TG_OP='DELETE' THEN RAISE EXCEPTION '导入批次不能删除'; END IF;
+   IF TG_OP='UPDATE' AND OLD.status<>'running' AND actor<>'migration' THEN RAISE EXCEPTION '已完成的导入批次不能修改'; END IF;
+ END IF;
+ IF TG_OP='DELETE' THEN RETURN OLD; END IF; RETURN NEW;
+END $$;
+CREATE OR REPLACE FUNCTION public.vault_extension_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE actor text:=nullif(current_setting('vault.actor',true),''); item record; col text; controlled boolean;
+BEGIN
+ IF TG_OP IN ('DELETE','TRUNCATE') THEN RAISE EXCEPTION '扩展只允许软删除'; END IF;
+ IF actor IS NULL THEN RAISE EXCEPTION '未设置写入会话'; END IF;
+ IF actor<>'migration' AND NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入已停用，资料保留只读'; END IF;
+
+ SELECT schema_name,table_name,state INTO item FROM agent.extensions WHERE id=TG_ARGV[0];
+ IF NOT FOUND OR item.schema_name<>TG_TABLE_SCHEMA OR item.table_name<>TG_TABLE_NAME THEN RAISE EXCEPTION '扩展注册与物理对象不一致'; END IF;
+ IF actor='migration' THEN RETURN NEW; END IF;
+ -- 标志本身不是权限：必须处于限定恢复函数的 owner 执行身份，app 即使自行 SET 也不能写。
+ SELECT TG_OP='UPDATE' AND nullif(current_setting('vault.extension_revert',true),'')=TG_ARGV[0]
+   AND c.relowner=r.oid INTO controlled FROM pg_class c JOIN pg_roles r ON r.rolname=current_user WHERE c.oid=TG_RELID;
+ IF item.state<>'active' AND NOT coalesce(controlled,false) THEN RAISE EXCEPTION '扩展已停止写入'; END IF;
+ IF nullif(current_setting('vault.change_set',true),'') IS NULL THEN RAISE EXCEPTION '扩展写入需要批次'; END IF;
+ IF NEW.updated_by<>actor OR (TG_OP='INSERT' AND NEW.created_by<>actor) THEN RAISE EXCEPTION '扩展审计身份不一致'; END IF;
+ IF TG_OP='UPDATE' THEN
+  IF NEW.created_at IS DISTINCT FROM OLD.created_at OR NEW.created_by IS DISTINCT FROM OLD.created_by THEN RAISE EXCEPTION '扩展创建信息不可修改'; END IF;
+  FOREACH col IN ARRAY TG_ARGV[1:array_length(TG_ARGV,1)] LOOP
+   IF (to_jsonb(NEW)->col) IS DISTINCT FROM (to_jsonb(OLD)->col) THEN RAISE EXCEPTION '扩展主键不可修改'; END IF;
+  END LOOP;
+ END IF;
+ RETURN NEW;
+END $$;

package/assets/migrations-pg/0127_agent_tasks.sql

@@ -0,0 +1,64 @@
+-- 单来源任务定义与登记回执只追加；此版本不领取任务、不执行模型、不自动备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+-- 停用时的 ACL/目录快照必须保持可恢复，不能在未知旧快照上创建新写入口或隐式重新启用。
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN
+  RAISE EXCEPTION 'Agent 写入已停用，请在明确的模块维护中核对后再升级任务结构';
+ END IF;
+END $$;
+CREATE TABLE agent.tasks (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),
+ content_key text NOT NULL CHECK(content_key ~ '^[a-f0-9]{64}$'),
+ descriptor_json text NOT NULL CHECK(public.vault_json_valid(descriptor_json)),
+ max_sensitivity text NOT NULL CHECK(max_sensitivity IN ('normal','private','intimate')),
+ created_at text NOT NULL,
+ UNIQUE(actor,content_key),UNIQUE(actor,id),
+ CHECK(jsonb_typeof(descriptor_json::jsonb) IS NOT DISTINCT FROM 'object'),
+ CHECK((descriptor_json::jsonb->>'format_version') IS NOT DISTINCT FROM '1'),
+ CHECK((descriptor_json::jsonb->>'kind') IS NOT DISTINCT FROM 'extract_source'),
+ CHECK((descriptor_json::jsonb->>'max_sensitivity') IS NOT DISTINCT FROM max_sensitivity)
+);
+CREATE INDEX ix_tasks_actor_created ON agent.tasks(actor,created_at DESC,id DESC);
+CREATE TABLE agent.task_enqueues (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),
+ idempotency_key text NOT NULL CHECK(length(idempotency_key) BETWEEN 1 AND 200),
+ fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),
+ task_id text NOT NULL,task_reused boolean NOT NULL,
+ reason text NOT NULL CHECK(length(reason) BETWEEN 1 AND 2000),created_at text NOT NULL,
+ UNIQUE(actor,idempotency_key),
+ FOREIGN KEY(actor,task_id) REFERENCES agent.tasks(actor,id)
+);
+CREATE INDEX ix_task_enqueues_task ON agent.task_enqueues(task_id);
+CREATE FUNCTION public.vault_task_registration_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE actor text:=nullif(current_setting('vault.actor',true),'');
+BEGIN
+ -- 恢复/迁移保留原始身份和时间；普通登记身份与写会话一致，时间统一由服务器生成。
+ IF actor='migration' THEN RETURN NEW; END IF;
+ IF actor IS NULL OR actor !~ '^agent:local:[0-9]+$' OR NEW.actor IS DISTINCT FROM actor THEN
+  RAISE EXCEPTION '任务登记身份与可信写会话不一致';
+ END IF;
+ NEW.created_at:=to_char(clock_timestamp() AT TIME ZONE 'UTC','YYYY-MM-DD"T"HH24:MI:SS.US"Z"');
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_registration_guard() FROM PUBLIC;
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['tasks','task_enqueues'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_identity BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_registration_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(''id'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid=to_regclass('agent.'||name) AND a.grantee<>c.relowner LOOP
+   EXECUTE format('REVOKE ALL ON agent.%I FROM %I',name,g.rolname);
+  END LOOP;
+  -- 沿用现有部署角色映射；不授 UPDATE/DELETE/TRUNCATE、结构权限或转授权限。
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;

package/assets/migrations-pg/0128_agent_task_leases.sql

@@ -0,0 +1,80 @@
+-- 首批租约只支持首次领取/续期，不自动抢占过期任务，不运行模型或创建备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN
+  RAISE EXCEPTION 'Agent 写入已停用，请在明确的模块维护中核对后再升级租约结构';
+ END IF;
+END $$;
+CREATE TABLE agent.task_lease_events (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),task_id text NOT NULL,
+ sequence integer NOT NULL CHECK(sequence>0),attempt integer NOT NULL CHECK(attempt>0),
+ kind text NOT NULL CHECK(kind IN ('claim','heartbeat')),
+ executor text NOT NULL CHECK(executor ~ '^[a-z][a-z0-9_-]{0,99}$'),
+ token_hash text NOT NULL CHECK(token_hash ~ '^[a-f0-9]{64}$'),
+ max_sensitivity text NOT NULL CHECK(max_sensitivity IN ('normal','private','intimate')),
+ lease_until text NOT NULL CHECK(lease_until ~ '^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\.[0-9]{6}Z$'),
+ created_at text NOT NULL,
+ UNIQUE(actor,task_id,sequence),UNIQUE(actor,id,kind),
+ FOREIGN KEY(actor,task_id) REFERENCES agent.tasks(actor,id),
+ CHECK((kind='claim' AND sequence=1 AND attempt=1) OR (kind='heartbeat' AND sequence>1))
+);
+CREATE TABLE agent.task_claims (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),
+ idempotency_key text NOT NULL CHECK(length(idempotency_key) BETWEEN 1 AND 200),
+ fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),
+ event_id text,event_kind text NOT NULL DEFAULT 'claim' CHECK(event_kind='claim'),
+ scanned integer NOT NULL CHECK(scanned BETWEEN 0 AND 100),scan_truncated boolean NOT NULL,
+ cursor_json text CHECK(cursor_json IS NULL OR public.vault_json_valid(cursor_json)),created_at text NOT NULL,
+ UNIQUE(actor,idempotency_key),
+ FOREIGN KEY(actor,event_id,event_kind) REFERENCES agent.task_lease_events(actor,id,kind),
+ CHECK(event_id IS NULL OR (scanned>0 AND cursor_json IS NULL)),
+ CHECK(event_id IS NOT NULL OR scan_truncated=(cursor_json IS NOT NULL)),
+ CHECK(cursor_json IS NULL OR scanned=100)
+);
+CREATE FUNCTION public.vault_task_lease_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE previous agent.task_lease_events%ROWTYPE; maximum text;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ -- 原始令牌永不入库；即使不经 SDK 的合作入口写入，也必须保持租约历史连续且不换归属。
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT max_sensitivity INTO maximum FROM agent.tasks WHERE actor=NEW.actor AND id=NEW.task_id;
+ IF maximum IS NULL OR array_position(ARRAY['normal','private','intimate'],NEW.max_sensitivity)>array_position(ARRAY['normal','private','intimate'],maximum) THEN
+  RAISE EXCEPTION '任务租约不能提高登记的读取范围';
+ END IF;
+ IF NEW.lease_until::timestamptz<=clock_timestamp() OR NEW.lease_until::timestamptz>clock_timestamp()+interval '300 seconds' THEN
+  RAISE EXCEPTION '任务租约时限无效';
+ END IF;
+ SELECT * INTO previous FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NEW.kind='claim' THEN
+  IF FOUND OR NEW.sequence<>1 OR NEW.attempt<>1 THEN RAISE EXCEPTION '任务已经领取，不能自动重新领取'; END IF;
+ ELSE
+  IF NOT FOUND OR NEW.sequence<>previous.sequence+1 OR NEW.attempt<>previous.attempt
+   OR NEW.token_hash IS DISTINCT FROM previous.token_hash OR NEW.executor IS DISTINCT FROM previous.executor
+   OR NEW.max_sensitivity IS DISTINCT FROM previous.max_sensitivity OR previous.lease_until::timestamptz<=clock_timestamp()
+   OR NEW.lease_until<previous.lease_until THEN
+   RAISE EXCEPTION '任务续期租约已失效或历史不连续';
+  END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_lease_guard() FROM PUBLIC;
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['task_lease_events','task_claims'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_identity BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_registration_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(''id'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid=to_regclass('agent.'||name) AND a.grantee<>c.relowner LOOP
+   EXECUTE format('REVOKE ALL ON agent.%I FROM %I',name,g.rolname);
+  END LOOP;
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;
+CREATE TRIGGER trg_task_lease_events_lease BEFORE INSERT ON agent.task_lease_events FOR EACH ROW EXECUTE FUNCTION public.vault_task_lease_guard();

package/assets/migrations-pg/0129_agent_task_plans.sql

@@ -0,0 +1,66 @@
+-- 稳定提交计划先于业务执行持久化；本迁移不执行计划，不调用模型或创建备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN
+  RAISE EXCEPTION 'Agent 写入已停用，请在明确的模块维护中核对后再升级任务计划结构';
+ END IF;
+END $$;
+CREATE TABLE agent.task_plans (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),task_id text NOT NULL,
+ lease_event_id text NOT NULL,lease_kind text NOT NULL CHECK(lease_kind IN ('claim','heartbeat')),
+ fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),
+ source_revision text NOT NULL CHECK(source_revision ~ '^[a-f0-9]{64}$'),
+ max_sensitivity text NOT NULL CHECK(max_sensitivity IN ('normal','private','intimate')),
+ submission_key text NOT NULL CHECK(submission_key='task:'||task_id||':submit:v1'),
+ payload_json text NOT NULL CHECK(public.vault_json_valid(payload_json)),created_at text NOT NULL,
+ UNIQUE(actor,task_id),UNIQUE(actor,id),UNIQUE(actor,submission_key),
+ FOREIGN KEY(actor,task_id) REFERENCES agent.tasks(actor,id),
+ FOREIGN KEY(actor,lease_event_id,lease_kind) REFERENCES agent.task_lease_events(actor,id,kind),
+ CHECK((payload_json::jsonb->>'format_version') IS NOT DISTINCT FROM '1'),
+ CHECK((payload_json::jsonb->>'kind') IS NOT DISTINCT FROM 'submit'),
+ CHECK((payload_json::jsonb->>'task_id') IS NOT DISTINCT FROM task_id),
+ CHECK((payload_json::jsonb->>'source_revision') IS NOT DISTINCT FROM source_revision),
+ CHECK((payload_json::jsonb->'request'->>'idempotency_key') IS NOT DISTINCT FROM submission_key),
+ CHECK((payload_json::jsonb->'request'->'source'->>'sensitivity') IS NOT DISTINCT FROM max_sensitivity)
+);
+CREATE FUNCTION public.vault_task_plan_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE lease agent.task_lease_events%ROWTYPE; task agent.tasks%ROWTYPE;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ -- 同一任务不能换租约另存计划；只追加约束和唯一键共同保留首个明确请求。
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT * INTO lease FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NOT FOUND OR lease.id IS DISTINCT FROM NEW.lease_event_id OR lease.kind IS DISTINCT FROM NEW.lease_kind
+  OR lease.lease_until::timestamptz<=clock_timestamp() THEN
+  RAISE EXCEPTION '任务计划需要当前有效租约';
+ END IF;
+ SELECT * INTO task FROM agent.tasks WHERE actor=NEW.actor AND id=NEW.task_id;
+ IF NOT FOUND OR task.descriptor_json::jsonb->'source'->>'object' IS DISTINCT FROM 'public.journal_entries'
+  OR task.descriptor_json::jsonb->'source'->>'revision' IS DISTINCT FROM NEW.source_revision
+  OR task.max_sensitivity IS DISTINCT FROM NEW.max_sensitivity OR lease.max_sensitivity IS DISTINCT FROM NEW.max_sensitivity
+  OR current_setting('vault.reason',true) IS DISTINCT FROM NEW.payload_json::jsonb->'request'->>'reason' THEN
+  RAISE EXCEPTION '任务计划与来源快照、处理范围或审计原因不一致';
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_plan_guard() FROM PUBLIC;
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['task_plans'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_identity BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_registration_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(''id'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid=to_regclass('agent.'||name) AND a.grantee<>c.relowner LOOP
+   EXECUTE format('REVOKE ALL ON agent.%I FROM %I',name,g.rolname);
+  END LOOP;
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;
+CREATE TRIGGER trg_task_plans_plan BEFORE INSERT ON agent.task_plans FOR EACH ROW EXECUTE FUNCTION public.vault_task_plan_guard();

package/assets/migrations-pg/0130_agent_task_submissions.sql

@@ -0,0 +1,72 @@
+-- 受控任务业务提交与真实结果绑定；只新增结构，不执行计划或创建备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN
+  RAISE EXCEPTION 'Agent 写入已停用，请在明确的模块维护中核对后再升级任务提交结构';
+ END IF;
+END $$;
+-- 全局主键已唯一，补身份复合键供绑定外键核对，不改写任何既有提交。
+ALTER TABLE agent.submissions ADD CONSTRAINT submissions_actor_id_key UNIQUE(actor,id);
+CREATE TABLE agent.task_submissions (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),task_id text NOT NULL,
+ plan_revision text NOT NULL CHECK(plan_revision ~ '^[a-f0-9]{64}$'),
+ lease_event_id text NOT NULL,lease_kind text NOT NULL CHECK(lease_kind IN ('claim','heartbeat')),created_at text NOT NULL,
+ UNIQUE(actor,task_id),UNIQUE(actor,id),
+ FOREIGN KEY(actor,task_id) REFERENCES agent.tasks(actor,id),
+ CONSTRAINT task_submissions_plan_fkey FOREIGN KEY(actor,id) REFERENCES agent.task_plans(actor,id),
+ CONSTRAINT task_submissions_submission_fkey FOREIGN KEY(actor,id) REFERENCES agent.submissions(actor,id),
+ FOREIGN KEY(actor,lease_event_id,lease_kind) REFERENCES agent.task_lease_events(actor,id,kind)
+);
+CREATE FUNCTION public.vault_task_submission_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE lease agent.task_lease_events%ROWTYPE; plan agent.task_plans%ROWTYPE; submission agent.submissions%ROWTYPE; source public.journal_entries%ROWTYPE; request jsonb;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT * INTO lease FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NOT FOUND OR lease.id IS DISTINCT FROM NEW.lease_event_id OR lease.kind IS DISTINCT FROM NEW.lease_kind
+  OR lease.lease_until::timestamptz<=clock_timestamp() THEN RAISE EXCEPTION '任务提交需要当前有效租约'; END IF;
+ SELECT * INTO plan FROM agent.task_plans WHERE actor=NEW.actor AND id=NEW.id;
+ IF NOT FOUND OR plan.task_id IS DISTINCT FROM NEW.task_id OR plan.fingerprint IS DISTINCT FROM NEW.plan_revision
+  OR current_setting('vault.change_set',true) IS DISTINCT FROM NEW.id THEN RAISE EXCEPTION '任务提交必须绑定原计划与审计批次'; END IF;
+ request:=plan.payload_json::jsonb->'request';
+ SELECT * INTO submission FROM agent.submissions WHERE actor=NEW.actor AND id=NEW.id;
+ IF NOT FOUND OR submission.idempotency_key IS DISTINCT FROM plan.submission_key
+  OR submission.result_json::jsonb->>'change_set' IS DISTINCT FROM NEW.id
+  OR submission.result_json::jsonb->>'source_id' IS DISTINCT FROM submission.source_id
+  OR submission.result_json::jsonb->>'state' IS DISTINCT FROM 'committed'
+  OR current_setting('vault.reason',true) IS DISTINCT FROM request->>'reason'
+  OR EXISTS(SELECT 1 FROM agent.reversions WHERE submission_id=NEW.id) THEN
+  RAISE EXCEPTION '任务提交缺少一致且未撤销的真实业务结果';
+ END IF;
+ -- 本版仍复用普通 submit 的原文快照；核对实际快照，不能只凭回调返回的 ID 记作成功。
+ SELECT * INTO source FROM public.journal_entries WHERE id=submission.source_id;
+ IF NOT FOUND OR source.deleted_at IS NOT NULL OR source.author_id IS DISTINCT FROM request->'source'->>'author_id'
+  OR source.about_person_id IS DISTINCT FROM request->'source'->>'about_person_id'
+  OR source.written_at IS DISTINCT FROM request->'source'->>'written_at'
+  OR source.title IS DISTINCT FROM request->'source'->>'title' OR source.content IS DISTINCT FROM request->'source'->>'content'
+  OR source.sensitivity IS DISTINCT FROM plan.max_sensitivity OR lease.max_sensitivity IS DISTINCT FROM plan.max_sensitivity THEN
+  RAISE EXCEPTION '任务提交的真实原文快照或处理范围不一致';
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_submission_guard() FROM PUBLIC;
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['task_submissions'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_identity BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_registration_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(''id'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid=to_regclass('agent.'||name) AND a.grantee<>c.relowner LOOP
+   EXECUTE format('REVOKE ALL ON agent.%I FROM %I',name,g.rolname);
+  END LOOP;
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;
+CREATE TRIGGER trg_task_submissions_submission BEFORE INSERT ON agent.task_submissions FOR EACH ROW EXECUTE FUNCTION public.vault_task_submission_guard();

package/assets/migrations-pg/0131_agent_task_completions.sql

@@ -0,0 +1,93 @@
+-- 任务尝试完成历史只追加；成功必须关联真实结果，失败不改写已提交业务，也不创建备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入已停用，请在明确的模块维护中核对后再升级任务完成结构'; END IF;
+END $$;
+CREATE TABLE agent.task_completions (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),task_id text NOT NULL,
+ attempt integer NOT NULL CHECK(attempt>0),lease_event_id text NOT NULL,
+ lease_kind text NOT NULL CHECK(lease_kind IN ('claim','heartbeat')),
+ outcome text NOT NULL CHECK(outcome IN ('succeeded','failed')),
+ fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),
+ payload_json text NOT NULL CHECK(public.vault_json_valid(payload_json)),created_at text NOT NULL,
+ UNIQUE(actor,task_id,attempt),UNIQUE(actor,id),
+ FOREIGN KEY(actor,task_id) REFERENCES agent.tasks(actor,id),
+ FOREIGN KEY(actor,lease_event_id,lease_kind) REFERENCES agent.task_lease_events(actor,id,kind),
+ CHECK((payload_json::jsonb->>'format_version') IS NOT DISTINCT FROM '1'),
+ CHECK((payload_json::jsonb->>'task_id') IS NOT DISTINCT FROM task_id),
+ CHECK((payload_json::jsonb->>'attempt') IS NOT DISTINCT FROM attempt::text),
+ CHECK((payload_json::jsonb->>'outcome') IS NOT DISTINCT FROM outcome),
+ CHECK(NOT (payload_json::jsonb ? 'lease_token') AND NOT (payload_json::jsonb ? 'id'))
+);
+CREATE FUNCTION public.vault_task_completion_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE lease agent.task_lease_events%ROWTYPE; task agent.tasks%ROWTYPE; bound agent.task_submissions%ROWTYPE; body jsonb:=NEW.payload_json::jsonb;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT * INTO lease FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NOT FOUND OR lease.id IS DISTINCT FROM NEW.lease_event_id OR lease.kind IS DISTINCT FROM NEW.lease_kind OR lease.attempt IS DISTINCT FROM NEW.attempt
+  OR lease.lease_until::timestamptz<=clock_timestamp() THEN RAISE EXCEPTION '任务完成需要当前有效租约'; END IF;
+ SELECT * INTO task FROM agent.tasks WHERE actor=NEW.actor AND id=NEW.task_id;
+ IF NOT FOUND OR task.max_sensitivity IS DISTINCT FROM lease.max_sensitivity THEN RAISE EXCEPTION '任务完成范围与登记不一致'; END IF;
+ IF NEW.outcome='succeeded' THEN
+  IF body->>'source_revision' IS DISTINCT FROM task.descriptor_json::jsonb->'source'->>'revision'
+   OR jsonb_typeof(body->'submission_ids') IS DISTINCT FROM 'array' OR jsonb_typeof(body->'analysis_ids') IS DISTINCT FROM 'array'
+   OR jsonb_array_length(body->'analysis_ids')<>0 THEN RAISE EXCEPTION '任务成功缺少明确来源版本或包含未支持分析结果'; END IF;
+  SELECT * INTO bound FROM agent.task_submissions WHERE actor=NEW.actor AND task_id=NEW.task_id;
+  IF FOUND THEN
+   IF jsonb_array_length(body->'submission_ids')<>1 OR body->'submission_ids'->>0 IS DISTINCT FROM bound.id
+    OR body ? 'no_change_reason' OR EXISTS(SELECT 1 FROM agent.reversions WHERE submission_id=bound.id) THEN
+    RAISE EXCEPTION '任务成功结果与真实绑定不一致或已经撤销'; END IF;
+  ELSE
+   IF jsonb_array_length(body->'submission_ids')<>0 OR length(btrim(coalesce(body->>'no_change_reason',''))) NOT BETWEEN 1 AND 2000
+    OR EXISTS(SELECT 1 FROM agent.task_plans WHERE actor=NEW.actor AND task_id=NEW.task_id)
+    OR EXISTS(SELECT 1 FROM agent.submissions WHERE actor=NEW.actor AND idempotency_key='task:'||NEW.task_id||':submit:v1') THEN
+    RAISE EXCEPTION '任务成功不能跳过原计划或未知业务结果'; END IF;
+  END IF;
+ ELSE
+  -- 固定分类是执行器报告，不作为来源变化已核实或业务撤销的证明。
+  IF body->>'error_code' IS NULL OR body->>'error_code' NOT IN ('EXECUTOR_UNAVAILABLE','SOURCE_CHANGED','BUSINESS_CONFLICT','EXECUTION_FAILED') THEN
+   RAISE EXCEPTION '任务失败分类无效'; END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_completion_guard() FROM PUBLIC;
+CREATE FUNCTION public.vault_task_open_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE attempt_no integer;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ IF TG_TABLE_NAME='task_lease_events' THEN attempt_no:=NEW.attempt;
+ ELSE SELECT e.attempt INTO attempt_no FROM agent.task_lease_events e WHERE e.actor=NEW.actor AND e.task_id=NEW.task_id ORDER BY e.sequence DESC LIMIT 1; END IF;
+ IF EXISTS(SELECT 1 FROM agent.task_completions WHERE actor=NEW.actor AND task_id=NEW.task_id AND attempt=attempt_no) THEN
+  RAISE EXCEPTION '任务当前尝试已完成，不能继续租约工作';
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_open_guard() FROM PUBLIC;
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['task_completions'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_identity BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_registration_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(''id'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid=to_regclass('agent.'||name) AND a.grantee<>c.relowner LOOP
+   EXECUTE format('REVOKE ALL ON agent.%I FROM %I',name,g.rolname);
+  END LOOP;
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;
+CREATE TRIGGER trg_task_completions_completion BEFORE INSERT ON agent.task_completions FOR EACH ROW EXECUTE FUNCTION public.vault_task_completion_guard();
+DO $$ DECLARE name text; BEGIN
+ FOREACH name IN ARRAY ARRAY['task_lease_events','task_plans','task_submissions'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_open BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_open_guard()',name);
+ END LOOP;
+END $$;