@taopao/memoir 0.0.0-stage → 0.1.0

package/assets/migrations-pg/0132_agent_task_changes.sql

@@ -0,0 +1,113 @@
+-- 显式取消/恢复只追加运行历史；恢复更换证明，原计划/业务键和既有结果保持唯一，不执行模型或备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入已停用，请在明确维护中核对后再升级任务恢复结构'; END IF;
+END $$;
+CREATE TABLE agent.task_changes (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),task_id text NOT NULL,
+ sequence integer NOT NULL CHECK(sequence>0),attempt integer NOT NULL CHECK(attempt>=0),
+ action text NOT NULL CHECK(action IN ('cancel','retry')),
+ idempotency_key text NOT NULL CHECK(length(idempotency_key) BETWEEN 1 AND 200),
+ fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),
+ payload_json text NOT NULL CHECK(public.vault_json_valid(payload_json)),created_at text NOT NULL,
+ UNIQUE(actor,id),UNIQUE(actor,task_id,sequence),UNIQUE(actor,idempotency_key),
+ FOREIGN KEY(actor,task_id) REFERENCES agent.tasks(actor,id),
+ CHECK((payload_json::jsonb->>'id') IS NOT DISTINCT FROM task_id),
+ CHECK((payload_json::jsonb->>'action') IS NOT DISTINCT FROM action),
+ CHECK((payload_json::jsonb->>'idempotency_key') IS NOT DISTINCT FROM idempotency_key),
+ CHECK(action<>'retry' OR attempt>0)
+);
+ALTER TABLE agent.task_lease_events ADD COLUMN control_id text;
+ALTER TABLE agent.task_lease_events ADD CONSTRAINT task_lease_events_actor_control_id_key UNIQUE(actor,control_id);
+ALTER TABLE agent.task_lease_events ADD CONSTRAINT task_lease_events_control_fkey FOREIGN KEY(actor,control_id) REFERENCES agent.task_changes(actor,id);
+ALTER TABLE agent.task_lease_events DROP CONSTRAINT task_lease_events_kind_check;
+ALTER TABLE agent.task_lease_events ADD CONSTRAINT task_lease_events_kind_check CHECK(kind IN ('claim','heartbeat','resume'));
+ALTER TABLE agent.task_lease_events DROP CONSTRAINT task_lease_events_check;
+ALTER TABLE agent.task_lease_events ADD CONSTRAINT task_lease_events_check CHECK((kind='claim' AND sequence=1 AND attempt=1) OR (kind='heartbeat' AND sequence>1 AND control_id IS NULL) OR (kind='resume' AND sequence>1 AND attempt>1 AND control_id IS NOT NULL));
+ALTER TABLE agent.task_plans DROP CONSTRAINT task_plans_lease_kind_check;
+ALTER TABLE agent.task_plans ADD CONSTRAINT task_plans_lease_kind_check CHECK(lease_kind IN ('claim','heartbeat','resume'));
+ALTER TABLE agent.task_submissions DROP CONSTRAINT task_submissions_lease_kind_check;
+ALTER TABLE agent.task_submissions ADD CONSTRAINT task_submissions_lease_kind_check CHECK(lease_kind IN ('claim','heartbeat','resume'));
+ALTER TABLE agent.task_completions DROP CONSTRAINT task_completions_lease_kind_check;
+ALTER TABLE agent.task_completions ADD CONSTRAINT task_completions_lease_kind_check CHECK(lease_kind IN ('claim','heartbeat','resume'));
+CREATE FUNCTION public.vault_task_change_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE previous agent.task_changes%ROWTYPE; lease agent.task_lease_events%ROWTYPE; completed text; has_lease boolean; body jsonb:=NEW.payload_json::jsonb;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT * INTO lease FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ has_lease:=FOUND;
+ SELECT * INTO previous FROM agent.task_changes WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NEW.sequence<>coalesce(previous.sequence,0)+1 THEN RAISE EXCEPTION '任务取消恢复序号不连续'; END IF;
+ SELECT outcome INTO completed FROM agent.task_completions WHERE actor=NEW.actor AND task_id=NEW.task_id AND attempt=coalesce(lease.attempt,0);
+ IF completed='succeeded' THEN RAISE EXCEPTION '任务已经成功完成，不能取消或重新执行'; END IF;
+ IF current_setting('vault.reason',true) IS DISTINCT FROM body->>'reason' THEN RAISE EXCEPTION '任务取消恢复与审计原因不一致'; END IF;
+ IF NEW.action='cancel' THEN
+  IF NEW.attempt<>coalesce(lease.attempt,0) OR previous.action='cancel' THEN RAISE EXCEPTION '任务已取消或尝试不一致'; END IF;
+ ELSE
+  IF NEW.attempt<>coalesce(lease.attempt,0)+1 OR NOT (coalesce(previous.action='cancel',false) OR coalesce(completed='failed',false) OR (has_lease AND lease.lease_until::timestamptz<=clock_timestamp())) THEN
+   RAISE EXCEPTION '任务仍有有效尝试或尚未需要恢复'; END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_change_guard() FROM PUBLIC;
+CREATE OR REPLACE FUNCTION public.vault_task_lease_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE previous agent.task_lease_events%ROWTYPE; maximum text; control agent.task_changes%ROWTYPE; has_previous boolean;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT max_sensitivity INTO maximum FROM agent.tasks WHERE actor=NEW.actor AND id=NEW.task_id;
+ IF maximum IS NULL OR NEW.max_sensitivity IS DISTINCT FROM maximum THEN RAISE EXCEPTION '任务租约范围与登记不一致'; END IF;
+ IF NEW.lease_until::timestamptz<=clock_timestamp() OR NEW.lease_until::timestamptz>clock_timestamp()+interval '300 seconds' THEN RAISE EXCEPTION '任务租约时限无效'; END IF;
+ SELECT * INTO previous FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ has_previous:=FOUND;
+ SELECT * INTO control FROM agent.task_changes WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NEW.control_id IS NOT NULL AND (control.id IS DISTINCT FROM NEW.control_id OR control.action IS DISTINCT FROM 'retry' OR control.attempt IS DISTINCT FROM NEW.attempt) THEN RAISE EXCEPTION '任务恢复租约缺少显式恢复历史'; END IF;
+ IF NEW.kind='claim' THEN
+  IF has_previous OR NEW.sequence<>1 OR NEW.attempt<>1 OR (control.id IS NOT NULL AND NEW.control_id IS NULL) THEN RAISE EXCEPTION '任务已经领取或取消，不能重新领取'; END IF;
+ ELSIF NEW.kind='resume' THEN
+  IF NOT has_previous OR NEW.sequence<>previous.sequence+1 OR NEW.attempt<>previous.attempt+1 OR NEW.control_id IS NULL OR NEW.token_hash=previous.token_hash THEN RAISE EXCEPTION '任务恢复尝试、证明或序号无效'; END IF;
+ ELSE
+  IF NOT has_previous OR NEW.sequence<>previous.sequence+1 OR NEW.attempt<>previous.attempt OR NEW.control_id IS NOT NULL
+   OR NEW.token_hash IS DISTINCT FROM previous.token_hash OR NEW.executor IS DISTINCT FROM previous.executor OR NEW.max_sensitivity IS DISTINCT FROM previous.max_sensitivity
+   OR previous.lease_until::timestamptz<=clock_timestamp() OR NEW.lease_until<previous.lease_until THEN RAISE EXCEPTION '任务续期租约已失效或历史不连续'; END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_lease_guard() FROM PUBLIC;
+CREATE OR REPLACE FUNCTION public.vault_task_open_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE attempt_no integer; control agent.task_changes%ROWTYPE;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ IF TG_TABLE_NAME='task_lease_events' THEN attempt_no:=NEW.attempt;
+ ELSE SELECT e.attempt INTO attempt_no FROM agent.task_lease_events e WHERE e.actor=NEW.actor AND e.task_id=NEW.task_id ORDER BY e.sequence DESC LIMIT 1; END IF;
+ SELECT * INTO control FROM agent.task_changes WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF control.attempt>attempt_no OR (control.action='cancel' AND control.attempt>=attempt_no) THEN RAISE EXCEPTION '任务已取消或旧尝试已被恢复'; END IF;
+ IF EXISTS(SELECT 1 FROM agent.task_completions WHERE actor=NEW.actor AND task_id=NEW.task_id AND attempt=attempt_no) THEN RAISE EXCEPTION '任务当前尝试已完成，不能继续租约工作'; END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_open_guard() FROM PUBLIC;
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['task_changes'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_identity BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_registration_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(''id'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid=to_regclass('agent.'||name) AND a.grantee<>c.relowner LOOP
+   EXECUTE format('REVOKE ALL ON agent.%I FROM %I',name,g.rolname);
+  END LOOP;
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;
+CREATE TRIGGER trg_task_changes_change BEFORE INSERT ON agent.task_changes FOR EACH ROW EXECUTE FUNCTION public.vault_task_change_guard();
+CREATE TRIGGER trg_task_completions_open BEFORE INSERT ON agent.task_completions FOR EACH ROW EXECUTE FUNCTION public.vault_task_open_guard();

package/assets/migrations-pg/0133_agent_imported_source_snapshots.sql

@@ -0,0 +1,152 @@
+-- 导入来源保留独立快照，不伪造随笔作者/时间；本迁移不运行任务、不创建备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入已停用，请先明确维护原授权'; END IF;
+END $$;
+CREATE TABLE agent.source_snapshots (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),
+ payload_json text NOT NULL CHECK(public.vault_json_valid(payload_json)),created_at text NOT NULL,
+ UNIQUE(actor,id), CHECK(payload_json::jsonb->>'kind' IS NOT DISTINCT FROM 'imported_source')
+);
+-- 默认值明确保留旧随笔引用；生成列和外键保证两类来源真实存在，而非只信任文本类型。
+ALTER TABLE agent.submissions ADD COLUMN source_object text NOT NULL DEFAULT 'public.journal_entries'
+ CHECK(source_object IN ('public.journal_entries','agent.source_snapshots'));
+ALTER TABLE agent.submissions DROP CONSTRAINT submissions_source_id_fkey;
+ALTER TABLE agent.submissions ADD COLUMN journal_source_id text GENERATED ALWAYS AS (CASE WHEN source_object='public.journal_entries' THEN source_id END) STORED;
+ALTER TABLE agent.submissions ADD COLUMN snapshot_source_id text GENERATED ALWAYS AS (CASE WHEN source_object='agent.source_snapshots' THEN source_id END) STORED;
+ALTER TABLE agent.submissions ADD CONSTRAINT submissions_journal_source_fkey FOREIGN KEY(journal_source_id) REFERENCES public.journal_entries(id);
+ALTER TABLE agent.submissions ADD CONSTRAINT submissions_snapshot_source_fkey FOREIGN KEY(actor,snapshot_source_id) REFERENCES agent.source_snapshots(actor,id);
+ALTER TABLE agent.submissions ADD CONSTRAINT submissions_source_key UNIQUE(id,source_object,source_id);
+ALTER TABLE agent.candidates ADD COLUMN source_object text NOT NULL DEFAULT 'public.journal_entries'
+ CHECK(source_object IN ('public.journal_entries','agent.source_snapshots'));
+ALTER TABLE agent.candidates DROP CONSTRAINT candidates_source_id_fkey;
+ALTER TABLE agent.candidates ADD CONSTRAINT candidates_submission_source_fkey FOREIGN KEY(submission_id,source_object,source_id) REFERENCES agent.submissions(id,source_object,source_id);
+CREATE FUNCTION public.vault_task_source_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ -- 更新结果 JSON/候选流程不能悄悄改换原文定位；旧证据和原提交的归属必须保持不变。
+ IF TG_OP='UPDATE' AND (NEW.source_id IS DISTINCT FROM OLD.source_id OR NEW.source_object IS DISTINCT FROM OLD.source_object) THEN
+  RAISE EXCEPTION 'Agent 原文定位不可覆盖';
+ END IF;
+ RETURN NEW;
+END $$;
+CREATE TRIGGER trg_submissions_source BEFORE UPDATE ON agent.submissions FOR EACH ROW EXECUTE FUNCTION public.vault_task_source_guard();
+CREATE TRIGGER trg_candidates_source BEFORE UPDATE ON agent.candidates FOR EACH ROW EXECUTE FUNCTION public.vault_task_source_guard();
+CREATE FUNCTION public.vault_task_snapshot_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE request jsonb; descriptor jsonb; object text; actual jsonb; keys jsonb; supplied jsonb; source_task_id text; lease agent.task_lease_events%ROWTYPE;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ SELECT p.payload_json::jsonb->'request'->'source',t.descriptor_json::jsonb,p.task_id INTO request,descriptor,source_task_id
+ FROM agent.task_plans p JOIN agent.tasks t ON t.actor=p.actor AND t.id=p.task_id
+ WHERE p.actor=NEW.actor AND p.id=current_setting('vault.change_set',true);
+ IF NOT FOUND OR request->>'kind' IS DISTINCT FROM 'imported_source' OR request IS DISTINCT FROM NEW.payload_json::jsonb
+  OR request->'source' IS DISTINCT FROM descriptor->'source' OR request->>'sensitivity' IS DISTINCT FROM descriptor->>'max_sensitivity' THEN
+  RAISE EXCEPTION '来源快照必须对应冻结任务的真实原文与处理范围';
+ END IF;
+ SELECT * INTO lease FROM agent.task_lease_events l WHERE l.actor=NEW.actor AND l.task_id=source_task_id ORDER BY sequence DESC LIMIT 1;
+ IF NOT FOUND OR lease.lease_until::timestamptz<=clock_timestamp()
+  OR EXISTS(SELECT 1 FROM agent.task_completions c WHERE c.actor=NEW.actor AND c.task_id=source_task_id AND c.attempt=lease.attempt)
+  OR (SELECT ch.action FROM agent.task_changes ch WHERE ch.actor=NEW.actor AND ch.task_id=source_task_id ORDER BY sequence DESC LIMIT 1)='cancel' THEN
+  RAISE EXCEPTION '来源快照需要当前尚未关闭的有效租约';
+ END IF;
+ object:=request->'source'->>'object';
+ IF object NOT IN ('public.wechat_messages','public.audio_records','public.audio_sentences','public.audio_summaries','public.orders','public.order_items','public.payments','public.train_tickets','public.bank_card_statements','public.bank_card_transactions','public.credit_card_statements','public.credit_card_transactions','public.bank_document_records') THEN
+  RAISE EXCEPTION '任务来源对象不支持';
+ END IF;
+ SELECT jsonb_agg(a.attname ORDER BY a.attname) INTO keys FROM pg_index i JOIN pg_attribute a ON a.attrelid=i.indrelid AND a.attnum=ANY(i.indkey) WHERE i.indrelid=to_regclass(object) AND i.indisprimary;
+ SELECT jsonb_agg(k ORDER BY k) INTO supplied FROM jsonb_object_keys(request->'source'->'primary_key') k;
+ IF keys IS NULL OR keys IS DISTINCT FROM supplied THEN RAISE EXCEPTION '任务来源主键不完整'; END IF;
+ -- object 已经封闭白名单，主键值使用 USING 绑定；保留原始表全部字段，不套用虚构作者/日期。
+ EXECUTE format('SELECT to_jsonb(s) FROM %s s WHERE to_jsonb(s) @> $1',object) INTO actual USING request->'source'->'primary_key';
+ IF actual IS NULL OR actual IS DISTINCT FROM request->'row' OR actual->>'deleted_at' IS NOT NULL THEN
+  RAISE EXCEPTION '任务来源原始行在提交前变化';
+ END IF;
+ RETURN NEW;
+END $$;
+
+CREATE OR REPLACE FUNCTION public.vault_task_plan_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE lease agent.task_lease_events%ROWTYPE; task agent.tasks%ROWTYPE;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ -- 同一任务不能换租约另存计划；只追加约束和唯一键共同保留首个明确请求。
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT * INTO lease FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NOT FOUND OR lease.id IS DISTINCT FROM NEW.lease_event_id OR lease.kind IS DISTINCT FROM NEW.lease_kind
+  OR lease.lease_until::timestamptz<=clock_timestamp() THEN
+  RAISE EXCEPTION '任务计划需要当前有效租约';
+ END IF;
+ SELECT * INTO task FROM agent.tasks WHERE actor=NEW.actor AND id=NEW.task_id;
+ IF NOT FOUND
+  OR task.descriptor_json::jsonb->'source'->>'revision' IS DISTINCT FROM NEW.source_revision
+  OR task.max_sensitivity IS DISTINCT FROM NEW.max_sensitivity OR lease.max_sensitivity IS DISTINCT FROM NEW.max_sensitivity
+  OR current_setting('vault.reason',true) IS DISTINCT FROM NEW.payload_json::jsonb->'request'->>'reason' THEN
+  RAISE EXCEPTION '任务计划与来源快照、处理范围或审计原因不一致';
+ END IF;
+ IF task.descriptor_json::jsonb->'source'->>'object' IS DISTINCT FROM 'public.journal_entries' AND
+  (NEW.payload_json::jsonb->'request'->'source'->>'kind' IS DISTINCT FROM 'imported_source'
+   OR NEW.payload_json::jsonb->'request'->'source'->'source' IS DISTINCT FROM task.descriptor_json::jsonb->'source') THEN
+  RAISE EXCEPTION '导入任务计划必须保存真实来源定位';
+ END IF;
+ RETURN NEW;
+END $$;
+CREATE OR REPLACE FUNCTION public.vault_task_submission_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE lease agent.task_lease_events%ROWTYPE; plan agent.task_plans%ROWTYPE; submission agent.submissions%ROWTYPE; source public.journal_entries%ROWTYPE; request jsonb;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT * INTO lease FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NOT FOUND OR lease.id IS DISTINCT FROM NEW.lease_event_id OR lease.kind IS DISTINCT FROM NEW.lease_kind
+  OR lease.lease_until::timestamptz<=clock_timestamp() THEN RAISE EXCEPTION '任务提交需要当前有效租约'; END IF;
+ SELECT * INTO plan FROM agent.task_plans WHERE actor=NEW.actor AND id=NEW.id;
+ IF NOT FOUND OR plan.task_id IS DISTINCT FROM NEW.task_id OR plan.fingerprint IS DISTINCT FROM NEW.plan_revision
+  OR current_setting('vault.change_set',true) IS DISTINCT FROM NEW.id THEN RAISE EXCEPTION '任务提交必须绑定原计划与审计批次'; END IF;
+ request:=plan.payload_json::jsonb->'request';
+ SELECT * INTO submission FROM agent.submissions WHERE actor=NEW.actor AND id=NEW.id;
+ IF NOT FOUND OR submission.idempotency_key IS DISTINCT FROM plan.submission_key
+  OR submission.result_json::jsonb->>'change_set' IS DISTINCT FROM NEW.id
+  OR submission.result_json::jsonb->>'source_id' IS DISTINCT FROM submission.source_id
+  OR submission.result_json::jsonb->>'state' IS DISTINCT FROM 'committed'
+  OR current_setting('vault.reason',true) IS DISTINCT FROM request->>'reason'
+  OR EXISTS(SELECT 1 FROM agent.reversions WHERE submission_id=NEW.id) THEN
+  RAISE EXCEPTION '任务提交缺少一致且未撤销的真实业务结果';
+ END IF;
+ IF submission.source_object='agent.source_snapshots' THEN
+  IF request->'source'->>'kind' IS DISTINCT FROM 'imported_source'
+   OR NOT EXISTS(SELECT 1 FROM agent.source_snapshots s WHERE s.id=submission.source_id AND s.actor=NEW.actor AND s.payload_json::jsonb=request->'source')
+   OR submission.result_json::jsonb->>'source_object' IS DISTINCT FROM 'agent.source_snapshots'
+   OR lease.max_sensitivity IS DISTINCT FROM plan.max_sensitivity THEN RAISE EXCEPTION '任务缺少真实导入来源快照'; END IF;
+ ELSE
+ -- 本版仍复用普通 submit 的原文快照；核对实际快照，不能只凭回调返回的 ID 记作成功。
+ SELECT * INTO source FROM public.journal_entries WHERE id=submission.source_id;
+ IF NOT FOUND OR source.deleted_at IS NOT NULL OR source.author_id IS DISTINCT FROM request->'source'->>'author_id'
+  OR source.about_person_id IS DISTINCT FROM request->'source'->>'about_person_id'
+  OR source.written_at IS DISTINCT FROM request->'source'->>'written_at'
+  OR source.title IS DISTINCT FROM request->'source'->>'title' OR source.content IS DISTINCT FROM request->'source'->>'content'
+  OR source.sensitivity IS DISTINCT FROM plan.max_sensitivity OR lease.max_sensitivity IS DISTINCT FROM plan.max_sensitivity THEN
+  RAISE EXCEPTION '任务提交的真实原文快照或处理范围不一致';
+ END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+
+REVOKE ALL ON FUNCTION public.vault_task_source_guard() FROM PUBLIC;
+REVOKE ALL ON FUNCTION public.vault_task_snapshot_guard() FROM PUBLIC;
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['source_snapshots'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_identity BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_registration_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(''id'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;
+CREATE TRIGGER trg_source_snapshots_snapshot BEFORE INSERT ON agent.source_snapshots FOR EACH ROW EXECUTE FUNCTION public.vault_task_snapshot_guard();

package/assets/migrations-pg/0134_agent_analysis_datasets.sql

@@ -0,0 +1,6 @@
+-- 分析依赖证明单独保存；旧报告继续只声明引用记录范围，不伪造完整周期覆盖。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入已停用，请明确维护后升级分析依赖'; END IF;
+END $$;
+ALTER TABLE agent.analysis_reports ADD COLUMN dataset_json text CHECK(dataset_json IS NULL OR public.vault_json_valid(dataset_json));

package/assets/migrations-pg/0135_agent_maintenance_tasks.sql

@@ -0,0 +1,139 @@
+-- 维护任务保存独立只增计划/真实结果，复用已发布租约、取消与审计；不执行模型或备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ DECLARE c record; BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入已停用，请明确维护后升级维护任务'; END IF;
+ -- 旧迁移为匿名 kind CHECK，通过目录确定唯一目标，不假定 PostgreSQL 自动命名编号。
+ FOR c IN SELECT conname FROM pg_constraint WHERE conrelid='agent.tasks'::regclass AND contype='c' AND pg_get_constraintdef(oid) LIKE '%extract_source%' LOOP
+  EXECUTE format('ALTER TABLE agent.tasks DROP CONSTRAINT %I',c.conname);
+ END LOOP;
+END $$;
+ALTER TABLE agent.tasks ADD CONSTRAINT tasks_kind_check CHECK((descriptor_json::jsonb->>'kind' IN ('extract_source','refresh_analysis','refresh_wiki')) IS TRUE);
+ALTER TABLE agent.tasks ADD CONSTRAINT tasks_maintenance_source_check CHECK((
+ (descriptor_json::jsonb->>'kind'='extract_source' AND descriptor_json::jsonb->'source'->>'object'<>'agent.analysis_reports' AND NOT descriptor_json::jsonb ? 'target') OR
+ (descriptor_json::jsonb->>'kind' IN ('refresh_analysis','refresh_wiki') AND descriptor_json::jsonb->'source'->>'object'='agent.analysis_reports' AND ((descriptor_json::jsonb->>'kind'='refresh_wiki')=(descriptor_json::jsonb ? 'target')))
+) IS TRUE);
+CREATE TABLE agent.task_maintenance_plans (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'), actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'), task_id text NOT NULL,
+ lease_event_id text NOT NULL, lease_kind text NOT NULL CHECK(lease_kind IN ('claim','heartbeat','resume')),
+ source_revision text NOT NULL CHECK(source_revision ~ '^[a-f0-9]{64}$'), fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),
+ payload_json text NOT NULL CHECK(public.vault_json_valid(payload_json)), created_at text NOT NULL,
+ UNIQUE(actor,id), UNIQUE(actor,task_id),
+ FOREIGN KEY(actor,task_id) REFERENCES agent.tasks(actor,id),
+ FOREIGN KEY(actor,lease_event_id,lease_kind) REFERENCES agent.task_lease_events(actor,id,kind)
+);
+CREATE TABLE agent.task_maintenance_results (
+ id text PRIMARY KEY CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),task_id text NOT NULL,
+ plan_id text NOT NULL,plan_revision text NOT NULL CHECK(plan_revision ~ '^[a-f0-9]{64}$'),
+ lease_event_id text NOT NULL,lease_kind text NOT NULL CHECK(lease_kind IN ('claim','heartbeat','resume')),
+ source_report_id text NOT NULL REFERENCES agent.analysis_reports(id),analysis_id text REFERENCES agent.analysis_reports(id),
+ wiki_slug text,wiki_rev integer,block_key text,created_at text NOT NULL,
+ UNIQUE(actor,id),UNIQUE(actor,task_id),UNIQUE(actor,plan_id),
+ FOREIGN KEY(actor,task_id) REFERENCES agent.tasks(actor,id),
+ FOREIGN KEY(actor,plan_id) REFERENCES agent.task_maintenance_plans(actor,id),
+ FOREIGN KEY(actor,lease_event_id,lease_kind) REFERENCES agent.task_lease_events(actor,id,kind),
+ FOREIGN KEY(wiki_slug,wiki_rev) REFERENCES public.wiki_revisions(slug,rev),
+ CHECK((analysis_id IS NOT NULL AND wiki_slug IS NULL AND wiki_rev IS NULL AND block_key IS NULL AND analysis_id<>source_report_id) OR (analysis_id IS NULL AND wiki_slug IS NOT NULL AND wiki_rev>0 AND block_key ~ '^[a-z][a-z0-9_-]{0,99}$'))
+);
+-- 一份旧报告至多一个后继版本；并发处理器不得各自替换同一旧分析造成分叉。
+CREATE UNIQUE INDEX ix_task_analysis_successor ON agent.task_maintenance_results(source_report_id) WHERE analysis_id IS NOT NULL;
+CREATE INDEX ix_task_wiki_bindings ON agent.task_maintenance_results(wiki_slug,block_key,created_at DESC,id DESC);
+CREATE FUNCTION public.vault_task_maintenance_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE task agent.tasks%ROWTYPE; lease agent.task_lease_events%ROWTYPE; plan agent.task_maintenance_plans%ROWTYPE; kind text;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT * INTO task FROM agent.tasks WHERE actor=NEW.actor AND id=NEW.task_id;
+ kind:=task.descriptor_json::jsonb->>'kind';
+ IF kind IS NULL OR kind NOT IN ('refresh_analysis','refresh_wiki') THEN RAISE EXCEPTION '维护记录需要分析或 Wiki 任务'; END IF;
+ SELECT * INTO lease FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NOT FOUND OR lease.id IS DISTINCT FROM NEW.lease_event_id OR lease.kind IS DISTINCT FROM NEW.lease_kind OR lease.lease_until::timestamptz<=clock_timestamp() THEN RAISE EXCEPTION '维护记录需要当前有效租约'; END IF;
+ IF TG_TABLE_NAME='task_maintenance_plans' THEN
+  IF NEW.source_revision IS DISTINCT FROM task.descriptor_json::jsonb->'source'->>'revision' OR NEW.payload_json::jsonb->>'action' IS DISTINCT FROM (CASE kind WHEN 'refresh_analysis' THEN 'analysis' ELSE 'wiki' END) THEN RAISE EXCEPTION '维护计划与来源或种类不符'; END IF;
+ ELSE
+  SELECT * INTO plan FROM agent.task_maintenance_plans WHERE actor=NEW.actor AND id=NEW.plan_id;
+  IF NOT FOUND OR plan.task_id IS DISTINCT FROM NEW.task_id OR plan.fingerprint IS DISTINCT FROM NEW.plan_revision OR NEW.source_report_id IS DISTINCT FROM task.descriptor_json::jsonb->'source'->'primary_key'->>'id' THEN RAISE EXCEPTION '维护结果缺少真实来源计划'; END IF;
+  IF kind='refresh_analysis' THEN
+   IF NEW.analysis_id IS NULL OR NOT EXISTS(SELECT 1 FROM agent.analysis_reports r WHERE r.id=NEW.analysis_id AND r.actor=NEW.actor AND r.idempotency_key='task:'||NEW.task_id||':analysis:v1') THEN RAISE EXCEPTION '维护结果缺少真实分析'; END IF;
+  ELSE
+   IF NEW.analysis_id IS NOT NULL OR NEW.wiki_slug IS DISTINCT FROM task.descriptor_json::jsonb->'target'->>'slug' OR NEW.block_key IS DISTINCT FROM task.descriptor_json::jsonb->'target'->>'block_key'
+    OR NOT EXISTS(SELECT 1 FROM public.wiki_revisions w WHERE w.slug=NEW.wiki_slug AND w.rev=NEW.wiki_rev AND w.actor=NEW.actor AND position('<!-- agent:analysis:'||NEW.block_key||' -->' IN w.body_md)>0 AND position(NEW.source_report_id IN w.body_md)>0) THEN RAISE EXCEPTION '维护结果缺少真实 Wiki 版本'; END IF;
+  END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_maintenance_guard() FROM PUBLIC;
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['task_maintenance_plans','task_maintenance_results'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_identity BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_registration_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(''id'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  FOR g IN SELECT DISTINCT r.rolname FROM pg_class c CROSS JOIN LATERAL aclexplode(c.relacl) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid=to_regclass('agent.'||name) AND a.grantee<>c.relowner LOOP
+   EXECUTE format('REVOKE ALL ON agent.%I FROM %I',name,g.rolname);
+  END LOOP;
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND a.privilege_type IN ('SELECT','INSERT') LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;
+DO $$ DECLARE name text; BEGIN
+ FOREACH name IN ARRAY ARRAY['task_maintenance_plans','task_maintenance_results'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_maintenance BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_maintenance_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_open BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_open_guard()',name);
+ END LOOP;
+END $$;
+CREATE OR REPLACE FUNCTION public.vault_task_completion_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE lease agent.task_lease_events%ROWTYPE; task agent.tasks%ROWTYPE; bound agent.task_submissions%ROWTYPE; body jsonb:=NEW.payload_json::jsonb;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT * INTO lease FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NOT FOUND OR lease.id IS DISTINCT FROM NEW.lease_event_id OR lease.kind IS DISTINCT FROM NEW.lease_kind OR lease.attempt IS DISTINCT FROM NEW.attempt
+  OR lease.lease_until::timestamptz<=clock_timestamp() THEN RAISE EXCEPTION '任务完成需要当前有效租约'; END IF;
+ SELECT * INTO task FROM agent.tasks WHERE actor=NEW.actor AND id=NEW.task_id;
+ IF NOT FOUND OR task.max_sensitivity IS DISTINCT FROM lease.max_sensitivity THEN RAISE EXCEPTION '任务完成范围与登记不一致'; END IF;
+ IF NEW.outcome='succeeded' AND task.descriptor_json::jsonb->>'kind'<>'extract_source' THEN
+  IF body->>'source_revision' IS DISTINCT FROM task.descriptor_json::jsonb->'source'->>'revision'
+   OR jsonb_typeof(body->'submission_ids') IS DISTINCT FROM 'array' OR jsonb_array_length(body->'submission_ids')<>0
+   OR jsonb_typeof(body->'analysis_ids') IS DISTINCT FROM 'array' THEN RAISE EXCEPTION '维护完成来源或业务结果类型不符'; END IF;
+  IF EXISTS(SELECT 1 FROM agent.task_maintenance_results b WHERE b.actor=NEW.actor AND b.task_id=NEW.task_id) THEN
+   IF body ? 'no_change_reason' OR NOT EXISTS(
+    SELECT 1 FROM agent.task_maintenance_results b WHERE b.actor=NEW.actor AND b.task_id=NEW.task_id
+     AND body->'maintenance_ids'=jsonb_build_array(b.id)
+     AND body->'analysis_ids'=CASE WHEN b.analysis_id IS NULL THEN '[]'::jsonb ELSE jsonb_build_array(b.analysis_id) END
+   ) THEN RAISE EXCEPTION '维护完成必须精确关联真实结果'; END IF;
+  ELSE
+   IF coalesce(body->'maintenance_ids','[]'::jsonb)<>'[]'::jsonb OR body->'analysis_ids'<>'[]'::jsonb
+    OR length(btrim(coalesce(body->>'no_change_reason',''))) NOT BETWEEN 1 AND 2000
+    OR EXISTS(SELECT 1 FROM agent.task_maintenance_plans WHERE actor=NEW.actor AND task_id=NEW.task_id)
+    OR EXISTS(SELECT 1 FROM agent.analysis_reports WHERE actor=NEW.actor AND idempotency_key='task:'||NEW.task_id||':analysis:v1')
+    THEN RAISE EXCEPTION '维护完成不能跳过原计划或未知业务结果'; END IF;
+  END IF;
+ ELSIF NEW.outcome='succeeded' THEN
+  IF body->>'source_revision' IS DISTINCT FROM task.descriptor_json::jsonb->'source'->>'revision'
+   OR jsonb_typeof(body->'submission_ids') IS DISTINCT FROM 'array' OR jsonb_typeof(body->'analysis_ids') IS DISTINCT FROM 'array'
+   OR jsonb_array_length(body->'analysis_ids')<>0 OR coalesce(body->'maintenance_ids','[]'::jsonb)<>'[]'::jsonb THEN RAISE EXCEPTION '任务成功缺少明确来源版本或包含未支持分析结果'; END IF;
+  SELECT * INTO bound FROM agent.task_submissions WHERE actor=NEW.actor AND task_id=NEW.task_id;
+  IF FOUND THEN
+   IF jsonb_array_length(body->'submission_ids')<>1 OR body->'submission_ids'->>0 IS DISTINCT FROM bound.id
+    OR body ? 'no_change_reason' OR EXISTS(SELECT 1 FROM agent.reversions WHERE submission_id=bound.id) THEN
+    RAISE EXCEPTION '任务成功结果与真实绑定不一致或已经撤销'; END IF;
+  ELSE
+   IF jsonb_array_length(body->'submission_ids')<>0 OR length(btrim(coalesce(body->>'no_change_reason',''))) NOT BETWEEN 1 AND 2000
+    OR EXISTS(SELECT 1 FROM agent.task_plans WHERE actor=NEW.actor AND task_id=NEW.task_id)
+    OR EXISTS(SELECT 1 FROM agent.submissions WHERE actor=NEW.actor AND idempotency_key='task:'||NEW.task_id||':submit:v1') THEN
+    RAISE EXCEPTION '任务成功不能跳过原计划或未知业务结果'; END IF;
+  END IF;
+ ELSE
+  -- 固定分类是执行器报告，不作为来源变化已核实或业务撤销的证明。
+  IF body->>'error_code' IS NULL OR body->>'error_code' NOT IN ('EXECUTOR_UNAVAILABLE','SOURCE_CHANGED','BUSINESS_CONFLICT','EXECUTION_FAILED') THEN
+   RAISE EXCEPTION '任务失败分类无效'; END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_completion_guard() FROM PUBLIC;

package/assets/migrations-pg/0136_agent_task_structures.sql

@@ -0,0 +1,66 @@
+-- 任务结构操作先冻结、后执行；结构与真实回执共用 owner 事务，不复制原始业务数据或创建备份。
+SELECT pg_advisory_xact_lock(hashtext('relation-vault:write'));
+DO $$ BEGIN
+ IF NOT public.vault_agent_writes_enabled() THEN RAISE EXCEPTION 'Agent 写入已停用，请明确维护后升级任务结构操作'; END IF;
+END $$;
+CREATE TABLE agent.task_structure_plans (
+ id text PRIMARY KEY,actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),task_id text NOT NULL,
+ operation_key text NOT NULL CHECK(operation_key ~ '^[a-z][a-z0-9_-]{0,79}$'),
+ lease_event_id text NOT NULL,lease_kind text NOT NULL CHECK(lease_kind IN ('claim','heartbeat','resume')),
+ fingerprint text NOT NULL CHECK(fingerprint ~ '^[a-f0-9]{64}$'),source_revision text NOT NULL CHECK(source_revision ~ '^[a-f0-9]{64}$'),
+ payload_json text NOT NULL CHECK(public.vault_json_valid(payload_json)),created_at text NOT NULL,
+ UNIQUE(actor,id),UNIQUE(actor,task_id,operation_key),UNIQUE(actor,task_id,id),
+ FOREIGN KEY(actor,task_id) REFERENCES agent.tasks(actor,id),
+ FOREIGN KEY(actor,lease_event_id,lease_kind) REFERENCES agent.task_lease_events(actor,id,kind),
+ CHECK(id ~ '^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$'),
+ CHECK((payload_json::jsonb->>'action' IN ('create','upgrade')) IS TRUE)
+);
+CREATE TABLE agent.task_structure_results (
+ id text PRIMARY KEY,actor text NOT NULL CHECK(actor ~ '^agent:local:[0-9]+$'),task_id text NOT NULL,
+ lease_event_id text NOT NULL,lease_kind text NOT NULL CHECK(lease_kind IN ('claim','heartbeat','resume')),
+ plan_revision text NOT NULL CHECK(plan_revision ~ '^[a-f0-9]{64}$'),
+ extension_id text NOT NULL,version bigint NOT NULL,checksum text NOT NULL CHECK(checksum ~ '^[a-f0-9]{64}$'),
+ result_json text NOT NULL CHECK(public.vault_json_valid(result_json)),created_at text NOT NULL,
+ FOREIGN KEY(actor,task_id,id) REFERENCES agent.task_structure_plans(actor,task_id,id),
+ FOREIGN KEY(actor,lease_event_id,lease_kind) REFERENCES agent.task_lease_events(actor,id,kind),
+ FOREIGN KEY(extension_id,version) REFERENCES agent.extension_migrations(extension_id,version)
+);
+CREATE FUNCTION public.vault_task_structure_guard() RETURNS trigger
+LANGUAGE plpgsql SECURITY INVOKER SET search_path=pg_catalog,pg_temp AS $$
+DECLARE lease agent.task_lease_events%ROWTYPE; task agent.tasks%ROWTYPE; plan agent.task_structure_plans%ROWTYPE;
+BEGIN
+ IF current_setting('vault.actor',true)='migration' THEN RETURN NEW; END IF;
+ PERFORM pg_advisory_xact_lock(hashtext('relation-vault:write'));
+ SELECT * INTO task FROM agent.tasks WHERE actor=NEW.actor AND id=NEW.task_id;
+ IF NOT FOUND OR task.descriptor_json::jsonb->>'kind'<>'extract_source' THEN RAISE EXCEPTION '结构操作需要原始来源任务'; END IF;
+ SELECT * INTO lease FROM agent.task_lease_events WHERE actor=NEW.actor AND task_id=NEW.task_id ORDER BY sequence DESC LIMIT 1;
+ IF NOT FOUND OR lease.id IS DISTINCT FROM NEW.lease_event_id OR lease.kind IS DISTINCT FROM NEW.lease_kind OR lease.lease_until::timestamptz<=clock_timestamp() THEN RAISE EXCEPTION '结构操作需要当前有效租约'; END IF;
+ IF TG_TABLE_NAME='task_structure_plans' THEN
+  IF NEW.source_revision IS DISTINCT FROM task.descriptor_json::jsonb->'source'->>'revision' THEN RAISE EXCEPTION '结构计划来源版本不符'; END IF;
+ ELSE
+  SELECT * INTO plan FROM agent.task_structure_plans WHERE actor=NEW.actor AND task_id=NEW.task_id AND id=NEW.id;
+  IF NOT FOUND OR plan.fingerprint IS DISTINCT FROM NEW.plan_revision OR plan.source_revision IS DISTINCT FROM task.descriptor_json::jsonb->'source'->>'revision'
+   OR NOT EXISTS(SELECT 1 FROM agent.extension_migrations m WHERE m.extension_id=NEW.extension_id AND m.version=NEW.version AND m.checksum=NEW.checksum)
+   OR NEW.result_json::jsonb->>'extension_id' IS DISTINCT FROM NEW.extension_id OR NEW.result_json::jsonb->>'version' IS DISTINCT FROM NEW.version::text
+   OR NEW.result_json::jsonb->>'checksum' IS DISTINCT FROM NEW.checksum THEN RAISE EXCEPTION '结构结果与计划或真实版本历史不符'; END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+REVOKE ALL ON FUNCTION public.vault_task_structure_guard() FROM PUBLIC;
+DO $$ DECLARE name text; g record; BEGIN
+ FOREACH name IN ARRAY ARRAY['task_structure_plans','task_structure_results'] LOOP
+  EXECUTE format('CREATE TRIGGER trg_%1$s_guard BEFORE INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_truncate BEFORE TRUNCATE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_guard(''append'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_identity BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_registration_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_audit AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_audit(''id'')',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_version AFTER INSERT OR UPDATE OR DELETE ON agent.%1$I FOR EACH STATEMENT EXECUTE FUNCTION public.vault_touch()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_open BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_open_guard()',name);
+  EXECUTE format('CREATE TRIGGER trg_%1$s_structure BEFORE INSERT ON agent.%1$I FOR EACH ROW EXECUTE FUNCTION public.vault_task_structure_guard()',name);
+  EXECUTE format('REVOKE ALL ON agent.%I FROM PUBLIC',name);
+  -- 结果只能由结构服务的 owner 事务追加；app 只可保存计划，资料读取在停用后继续保留。
+  FOR g IN SELECT DISTINCT r.rolname,a.privilege_type FROM pg_class c CROSS JOIN LATERAL aclexplode(coalesce(c.relacl,acldefault('r',c.relowner))) a JOIN pg_roles r ON r.oid=a.grantee WHERE c.oid='public.persons'::regclass AND (a.privilege_type='SELECT' OR (name='task_structure_plans' AND a.privilege_type='INSERT')) LOOP
+   EXECUTE format('GRANT USAGE ON SCHEMA agent TO %I',g.rolname);
+   EXECUTE format('GRANT %s ON agent.%I TO %I',g.privilege_type,name,g.rolname);
+  END LOOP;
+ END LOOP;
+END $$;