@tryvira/mcp 0.1.0 → 0.1.2

package/dist/migrations/001_vnext_foundation.sql

@@ -1,628 +0,0 @@
--- Phase 0 foundation. Every mutable record is tenant/project/environment scoped.
-CREATE TABLE semantic_tasks (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, task_key TEXT NOT NULL, description TEXT NOT NULL,
-  version INTEGER NOT NULL, UNIQUE (organization_id, project_id, environment_id, task_key, version)
-);
-CREATE TABLE control_points (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, task_id TEXT NOT NULL REFERENCES semantic_tasks(id),
-  control_key TEXT NOT NULL, constraints_json TEXT NOT NULL
-);
-CREATE TABLE control_point_tasks (
-  control_point_id TEXT NOT NULL REFERENCES control_points(id),
-  task_id TEXT NOT NULL REFERENCES semantic_tasks(id),
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  PRIMARY KEY (control_point_id, task_id)
-);
-CREATE TABLE policies (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, control_point_id TEXT NOT NULL REFERENCES control_points(id),
-  effect TEXT NOT NULL CHECK (effect IN ('allow','deny')), rules_json TEXT NOT NULL,
-  revision INTEGER NOT NULL
-);
-CREATE TABLE behavior_strategies (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, strategy_key TEXT NOT NULL, status TEXT NOT NULL,
-  definition_json TEXT, definition_digest TEXT, control_point_id TEXT
-    CHECK (status IN ('DRAFT','ACTIVE','RETIRED'))
-);
-CREATE TABLE behavior_variants (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, strategy_id TEXT NOT NULL REFERENCES behavior_strategies(id),
-  content TEXT NOT NULL, digest TEXT NOT NULL
-);
-CREATE TABLE behavior_programs (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, semantic_key TEXT NOT NULL, version INTEGER NOT NULL,
-  guard TEXT NOT NULL, judgment TEXT NOT NULL, transform TEXT NOT NULL,
-  verification TEXT NOT NULL, escalation TEXT NOT NULL, rubric_json TEXT NOT NULL,
-  examples_json TEXT NOT NULL, anti_patterns_json TEXT NOT NULL, modules_json TEXT NOT NULL DEFAULT '[]', provenance_json TEXT, temporal_contract_digest TEXT, temporal_contracts_json TEXT, recovery_plans_json TEXT, digest TEXT NOT NULL,
-  immutable INTEGER NOT NULL CHECK (immutable = 1),
-  UNIQUE (organization_id, project_id, environment_id, semantic_key, version)
-);
-CREATE TABLE scope_delegations (
-  id TEXT PRIMARY KEY, issuer_id TEXT NOT NULL, subject_id TEXT NOT NULL,
-  from_level TEXT NOT NULL, to_level TEXT NOT NULL, permissions_json TEXT NOT NULL,
-  expires_at TEXT NOT NULL, created_at TEXT NOT NULL,
-  stable_key TEXT, parent_authority_level TEXT, child_scope_kind TEXT,
-  child_scope_digest TEXT, parent_revision_digest TEXT, when_json TEXT,
-  CHECK (from_level IN ('platform','organization','project','application','workspace','user','session')),
-  CHECK (to_level IN ('platform','organization','project','application','workspace','user','session'))
-);
-CREATE TABLE scope_bindings (
-  id TEXT PRIMARY KEY, level TEXT NOT NULL, parent_id TEXT, organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL, application_id TEXT, workspace_id TEXT, user_id TEXT, session_id TEXT,
-  created_at TEXT NOT NULL
-);
-CREATE TABLE session_states (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  application_id TEXT, environment_id TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('UNVERIFIED','ACTIVE','RESTARTING','HANDED_OFF','EXPIRED')),
-  verified_at TEXT, expires_at TEXT NOT NULL, generation INTEGER NOT NULL,
-  handoff_target TEXT, signals_json TEXT NOT NULL DEFAULT '{}', issued_at TEXT, ended_at TEXT
-);
-CREATE TABLE temporal_monitor_states (
-  monitor_id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, contract_digest TEXT NOT NULL, state_json TEXT NOT NULL,
-  sequence INTEGER NOT NULL CHECK (sequence >= 0), updated_at TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, monitor_id)
-);
-CREATE TABLE accelerator_residency_leases (
-  lease_id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, accelerator_id TEXT NOT NULL, model TEXT NOT NULL,
-  artifact_digest TEXT NOT NULL, authority_digest TEXT, expires_at TEXT NOT NULL, updated_at TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, lease_id)
-);
-CREATE TABLE recovery_runtime_states (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, trajectory_key TEXT NOT NULL, recovery_plan_key TEXT NOT NULL,
-  recovery_plan_digest TEXT NOT NULL, attempt INTEGER NOT NULL, next_step_index INTEGER NOT NULL,
-  total_execution_attempts INTEGER NOT NULL, status TEXT NOT NULL, started_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL, step_results_json TEXT NOT NULL, authority_digest TEXT,
-  state_digest TEXT NOT NULL UNIQUE
-);
-CREATE TABLE recovery_runtime_receipts (
-  id TEXT PRIMARY KEY,
-  runtime_state_id TEXT NOT NULL,
-  organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  application_id TEXT,
-  environment_id TEXT NOT NULL,
-  status TEXT NOT NULL,
-  attempt INTEGER NOT NULL,
-  step_results_json TEXT NOT NULL,
-  pending_approval_json TEXT,
-  recovery_plan_digest TEXT NOT NULL,
-  authority_digest TEXT,
-  completed_at TEXT NOT NULL,
-  receipt_digest TEXT NOT NULL UNIQUE
-);
-CREATE TABLE behavior_artifact_blobs (
-  artifact_digest TEXT PRIMARY KEY,
-  organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL,
-  bytes TEXT NOT NULL
-);
-CREATE TABLE decision_evidence (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, request_id TEXT NOT NULL, decision_class TEXT NOT NULL,
-  selected_id TEXT, judge TEXT NOT NULL, shadow_selected_id TEXT,
-  calibration_version TEXT NOT NULL, calibrated INTEGER NOT NULL CHECK (calibrated IN (0,1)),
-  created_at TEXT NOT NULL, authority_digest TEXT, evidence_json TEXT,
-  UNIQUE (organization_id, project_id, environment_id, request_id)
-);
-CREATE TABLE IF NOT EXISTS decision_benchmark_executions (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, provider_id TEXT NOT NULL, execution_digest TEXT NOT NULL,
-  payload_json TEXT NOT NULL, created_at TEXT NOT NULL, record_digest TEXT NOT NULL UNIQUE,
-  UNIQUE (organization_id, project_id, environment_id, id)
-);
-
-CREATE TABLE IF NOT EXISTS runtime_decision_plans (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  plan_json TEXT NOT NULL, decision_right_json TEXT NOT NULL, provider_health TEXT NOT NULL,
-  fallback TEXT NOT NULL, authority_digest TEXT, plan_digest TEXT NOT NULL, created_at TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, id)
-);
-CREATE TABLE IF NOT EXISTS runtime_decisions (
-  request_id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, decision_json TEXT NOT NULL, created_at TEXT NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id, request_id)
-);
-
-CREATE TABLE IF NOT EXISTS decision_promotion_observations (
-  id TEXT PRIMARY KEY,
-  organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL,
-  deployment_id TEXT NOT NULL,
-  observation_json TEXT NOT NULL,
-  created_at TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, deployment_id, id)
-);
-
-CREATE TABLE IF NOT EXISTS decision_authority_pointers (
-  organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL,
-  bundle_id TEXT NOT NULL,
-  bundle_digest TEXT NOT NULL,
-  version INTEGER NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id)
-);
-
-CREATE TABLE IF NOT EXISTS decision_promotion_receipts (
-  id TEXT PRIMARY KEY,
-  organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL,
-  release_id TEXT NOT NULL,
-  receipt_json TEXT NOT NULL,
-  created_at TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, release_id)
-);
-CREATE TABLE mcp_invocation_provenance (
-  invocation_id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, server TEXT NOT NULL, tool TEXT NOT NULL,
-  receipt_id TEXT NOT NULL, idempotency_key TEXT NOT NULL, arguments_digest TEXT NOT NULL,
-  ok INTEGER NOT NULL CHECK (ok IN (0,1)), result_json TEXT,
-  error TEXT, authority_decision_digest TEXT NOT NULL, authority_digest TEXT, provenance_digest TEXT NOT NULL
-);
-CREATE TABLE mcp_invocation_claims (
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  idempotency_key TEXT NOT NULL, invocation_id TEXT NOT NULL, claimed_at TEXT NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id, idempotency_key)
-);
-CREATE TABLE conflict_inspections (
-  id TEXT PRIMARY KEY, conflicts_json TEXT NOT NULL, impact_json TEXT NOT NULL,
-  controls_json TEXT NOT NULL, review_required INTEGER NOT NULL CHECK (review_required = 1),
-  digest TEXT NOT NULL, created_at TEXT NOT NULL
-);
-CREATE TABLE teach_runs (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, source_evidence_ids_json TEXT NOT NULL, selection_digest TEXT, expansion_digest TEXT,
-  synthesis TEXT NOT NULL, proposal_id TEXT NOT NULL, model_version TEXT NOT NULL,
-  provider_id TEXT, provider_request_id TEXT, provider_usage_json TEXT, semantic_stages_json TEXT, execution_snapshots_json TEXT,
-  status TEXT NOT NULL CHECK (status IN ('PROPOSED','EVALUATED','PROMOTED')), evaluation_id TEXT,
-  score REAL, reviewed_by TEXT, reviewed_at TEXT, digest TEXT NOT NULL,
-  created_at TEXT NOT NULL
-);
-CREATE TABLE canonical_behavior_revisions (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, control_point_id TEXT NOT NULL REFERENCES control_points(id),
-  variant_id TEXT NOT NULL, policy_revision INTEGER NOT NULL, created_at TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, control_point_id, policy_revision)
-);
-CREATE TABLE execution_receipts (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, revision_id TEXT NOT NULL REFERENCES canonical_behavior_revisions(id),
-  actor_id TEXT NOT NULL, idempotency_key TEXT NOT NULL, decision TEXT NOT NULL,
-  reason TEXT NOT NULL, created_at TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, idempotency_key)
-);
-CREATE TABLE execution_receipt_authority (
-  receipt_id TEXT PRIMARY KEY REFERENCES execution_receipts(id),
-  authority_digest TEXT NOT NULL
-);
-CREATE TABLE governed_mutations (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, kind TEXT NOT NULL, actor_id TEXT NOT NULL,
-  state TEXT NOT NULL CHECK (state IN ('RECOMMENDATION','PROPOSAL','APPROVED','EXECUTED')),
-  approved_by TEXT, postcondition_json TEXT
-);
-CREATE TABLE audit_events (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, actor_id TEXT NOT NULL, action TEXT NOT NULL,
-  target_id TEXT NOT NULL, outcome TEXT NOT NULL, metadata_json TEXT NOT NULL,
-  previous_hash TEXT NOT NULL, event_hash TEXT NOT NULL, created_at TEXT NOT NULL
-);
-CREATE TABLE trace_events (
-  id TEXT PRIMARY KEY, receipt_id TEXT NOT NULL REFERENCES execution_receipts(id),
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  event TEXT NOT NULL, attributes_json TEXT NOT NULL, authority_digest TEXT, created_at TEXT NOT NULL
-);
-
-CREATE TABLE docs_documents (
-  id TEXT NOT NULL, version TEXT NOT NULL, title TEXT NOT NULL, body TEXT NOT NULL,
-  source_path TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('canonical','draft')),
-  PRIMARY KEY (id, version)
-);
-CREATE TABLE release_manifests (
-  id TEXT PRIMARY KEY, surfaces_json TEXT NOT NULL, content_digest TEXT NOT NULL,
-  approved_by TEXT NOT NULL, approved_at TEXT NOT NULL,
-  status TEXT NOT NULL CHECK (status IN ('APPROVED','REVOKED')),
-  organization_id TEXT, project_id TEXT, environment_id TEXT, authority_digest TEXT,
-  artifact_id TEXT, promotion_version INTEGER,
-  strategy_id TEXT, strategy_variant_id TEXT, strategy_digest TEXT,
-  strategy_artifact_digest TEXT, program_digest TEXT, evaluation_digest TEXT
-);
-CREATE TABLE evaluation_artifacts (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, target_artifact TEXT NOT NULL, dataset_digest TEXT NOT NULL,
-  holdout_commitment_digest TEXT, grader_json TEXT, suite_id TEXT, suite_version TEXT, suite_digest TEXT, evaluator_version TEXT NOT NULL, score REAL NOT NULL, threshold REAL NOT NULL,
-  status TEXT NOT NULL CHECK (status IN ('PASSED','FAILED')), failed_assertions_json TEXT NOT NULL,
-  created_at TEXT NOT NULL
-);
-CREATE TABLE status_monitors (
-  id TEXT PRIMARY KEY, monitor_key TEXT NOT NULL, state TEXT NOT NULL
-    CHECK (state IN ('UP','DEGRADED','DOWN','UNKNOWN')), checked_at TEXT NOT NULL
-);
-CREATE TABLE status_incidents (
-  id TEXT PRIMARY KEY, title TEXT NOT NULL, severity TEXT NOT NULL
-    CHECK (severity IN ('minor','major','critical')), status TEXT NOT NULL
-    CHECK (status IN ('OPEN','MITIGATED','RESOLVED')), created_at TEXT NOT NULL, updated_at TEXT
-);
-
-CREATE TABLE status_maintenance_windows (
-  id TEXT PRIMARY KEY,
-  title TEXT NOT NULL,
-  starts_at TEXT NOT NULL,
-  ends_at TEXT NOT NULL,
-  status TEXT NOT NULL DEFAULT 'SCHEDULED'
-);
-CREATE TABLE worker_jobs (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, job_type TEXT NOT NULL, idempotency_key TEXT NOT NULL,
-  state TEXT NOT NULL CHECK (state IN ('QUEUED','RUNNING','SUCCEEDED','FAILED')),
-  attempts INTEGER NOT NULL DEFAULT 0, available_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP, deadline_at TEXT, payload_json TEXT NOT NULL DEFAULT '{}', result_json TEXT, authority_digest TEXT, trace_id TEXT, lease_owner TEXT, lease_expires_at TEXT,
-  UNIQUE (organization_id, project_id, environment_id, idempotency_key)
-);
-CREATE TRIGGER worker_jobs_assign_default_lease
-AFTER UPDATE OF state ON worker_jobs
-WHEN NEW.state = 'RUNNING' AND NEW.lease_owner IS NULL
-BEGIN
-  UPDATE worker_jobs SET lease_owner = 'worker-default', lease_expires_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now', '+60 seconds') WHERE id = NEW.id;
-END;
-CREATE TRIGGER worker_jobs_clear_lease
-AFTER UPDATE OF state ON worker_jobs
-WHEN NEW.state <> 'RUNNING'
-BEGIN
-  UPDATE worker_jobs SET lease_owner = NULL, lease_expires_at = NULL WHERE id = NEW.id;
-END;
-CREATE TABLE learning_evidence (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, source TEXT NOT NULL, content TEXT NOT NULL,
-  privacy TEXT NOT NULL CHECK (privacy IN ('PUBLIC','CONSENTED_TENANT')),
-  status TEXT NOT NULL CHECK (status IN ('ADMITTED')), outcome TEXT, provenance_json TEXT, created_at TEXT NOT NULL
-);
-CREATE TABLE conversation_episodes (
-  episode_id TEXT NOT NULL, episode_version INTEGER NOT NULL,
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  conversation_ref TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('active','deleted')),
-  source_event_refs_json TEXT NOT NULL, content_digest TEXT NOT NULL,
-  created_at TEXT NOT NULL, observed_at TEXT NOT NULL, supersedes_version INTEGER,
-  payload_json TEXT NOT NULL,
-  PRIMARY KEY (episode_id, episode_version),
-  UNIQUE (organization_id, project_id, environment_id, episode_id, episode_version)
-);
-CREATE TABLE learning_admissions (
-  admission_id TEXT PRIMARY KEY, candidate_id TEXT NOT NULL, observation_id TEXT NOT NULL,
-  episode_id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, authority TEXT NOT NULL CHECK (authority = 'experience'),
-  scope_ref TEXT NOT NULL, source_digest TEXT NOT NULL, grounded INTEGER NOT NULL CHECK (grounded = 1),
-  target TEXT NOT NULL CHECK (target IN ('learning_ingress','review_queue')),
-  direct_lesson_activation INTEGER NOT NULL CHECK (direct_lesson_activation = 0),
-  direct_behavior_activation INTEGER NOT NULL CHECK (direct_behavior_activation = 0),
-  idempotency_key TEXT NOT NULL UNIQUE, created_at TEXT NOT NULL
-);
-CREATE TABLE learning_projection_aggregates (
-  aggregate_digest TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, cluster_key TEXT NOT NULL, signal_kind TEXT NOT NULL,
-  source_event_ids_json TEXT NOT NULL, aggregate_count INTEGER NOT NULL,
-  min_confidence_bps INTEGER NOT NULL, direct_behavior_authority INTEGER NOT NULL CHECK (direct_behavior_authority = 0),
-  payload_json TEXT NOT NULL
-);
-CREATE TABLE learning_route_decisions (
-  route_digest TEXT PRIMARY KEY, decision_id TEXT NOT NULL, lesson_id TEXT NOT NULL,
-  lesson_version_id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, route TEXT NOT NULL, reasons_json TEXT NOT NULL,
-  deterministic_spec_json TEXT, direct_behavior_authority INTEGER NOT NULL CHECK (direct_behavior_authority = 0),
-  payload_json TEXT NOT NULL
-);
-CREATE TABLE lesson_proposals (
-  id TEXT PRIMARY KEY, evidence_id TEXT NOT NULL REFERENCES learning_evidence(id),
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  control_point_id TEXT NOT NULL, summary TEXT NOT NULL,
-  status TEXT NOT NULL CHECK (status IN ('PROPOSED','REVIEWED','REJECTED','EVALUATED','PROMOTED')),
-  payload_json TEXT NOT NULL DEFAULT '{}', UNIQUE (organization_id, project_id, environment_id, evidence_id)
-);
-CREATE TABLE lesson_proposal_history (
-  proposal_id TEXT NOT NULL REFERENCES lesson_proposals(id),
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  status TEXT NOT NULL CHECK (status IN ('PROPOSED','REVIEWED','REJECTED','EVALUATED','PROMOTED')),
-  payload_json TEXT NOT NULL, recorded_at TEXT NOT NULL,
-  PRIMARY KEY (proposal_id, status)
-);
-CREATE TABLE optimization_artifacts (
-  id TEXT PRIMARY KEY, idempotency_key TEXT UNIQUE, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, canonical_digest TEXT NOT NULL, policy_digest TEXT NOT NULL,
-  target_model TEXT NOT NULL, dataset_digest TEXT NOT NULL, metric TEXT NOT NULL,
-  baseline REAL NOT NULL, optimized_result REAL NOT NULL, provenance TEXT NOT NULL,
-  status TEXT NOT NULL CHECK (status IN ('PROPOSED','APPROVED','ROLLED_BACK')),
-  payload_json TEXT NOT NULL DEFAULT '{}', authority_digest TEXT
-);
-CREATE TABLE actors (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, display_name TEXT NOT NULL, status TEXT NOT NULL
-    CHECK (status IN ('ACTIVE','DISABLED')), created_at TEXT NOT NULL
-);
-CREATE TABLE actor_identities (
-  actor_id TEXT PRIMARY KEY REFERENCES actors(id), organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL, environment_id TEXT NOT NULL, email TEXT NOT NULL,
-  email_verified INTEGER NOT NULL DEFAULT 0 CHECK (email_verified IN (0,1)),
-  password_hash TEXT NOT NULL, created_at TEXT NOT NULL,
-  UNIQUE (organization_id, email)
-);
-CREATE TABLE password_reset_tokens (
-  id TEXT PRIMARY KEY, actor_id TEXT NOT NULL REFERENCES actors(id),
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  token_hash TEXT NOT NULL UNIQUE, created_at TEXT NOT NULL, expires_at TEXT NOT NULL,
-  consumed_at TEXT
-);
-CREATE TABLE email_verification_tokens (
-  id TEXT PRIMARY KEY, actor_id TEXT NOT NULL REFERENCES actors(id),
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  token_hash TEXT NOT NULL UNIQUE, created_at TEXT NOT NULL, expires_at TEXT NOT NULL,
-  consumed_at TEXT
-);
-CREATE TABLE actor_roles (
-  actor_id TEXT NOT NULL REFERENCES actors(id), role TEXT NOT NULL,
-  granted_at TEXT NOT NULL, revoked_at TEXT, PRIMARY KEY (actor_id, role)
-);
-CREATE TABLE credential_records (
-  id TEXT PRIMARY KEY, actor_id TEXT NOT NULL REFERENCES actors(id),
-  credential_hash TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('ACTIVE','REVOKED')),
-  created_at TEXT NOT NULL, revoked_at TEXT
-);
-CREATE TABLE user_sessions (
-  id TEXT PRIMARY KEY, actor_id TEXT NOT NULL REFERENCES actors(id),
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  token_hash TEXT NOT NULL UNIQUE, csrf_hash TEXT NOT NULL, status TEXT NOT NULL
-    CHECK (status IN ('ACTIVE','REVOKED')), created_at TEXT NOT NULL,
-  expires_at TEXT NOT NULL, revoked_at TEXT
-);
-CREATE TABLE public_submissions (
-  id TEXT PRIMARY KEY, kind TEXT NOT NULL CHECK (kind IN ('contact','newsletter')),
-  idempotency_key TEXT NOT NULL UNIQUE, payload_json TEXT NOT NULL,
-  created_at TEXT NOT NULL
-);
-CREATE TABLE status_subscribers (
-  id TEXT PRIMARY KEY, email TEXT NOT NULL, token_hash TEXT NOT NULL UNIQUE,
-  verification_hash TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('PENDING','ACTIVE','UNSUBSCRIBED')),
-  created_at TEXT NOT NULL
-);
-
-CREATE TABLE ai_systems (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, name TEXT NOT NULL, description TEXT NOT NULL DEFAULT '',
-  system_type TEXT NOT NULL, status TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL
-);
-CREATE TABLE ai_system_connections (
-  id TEXT PRIMARY KEY, ai_system_id TEXT NOT NULL REFERENCES ai_systems(id),
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  adapter_type TEXT NOT NULL, adapter_version TEXT NOT NULL, status TEXT NOT NULL,
-  capabilities_json TEXT NOT NULL, capabilities_digest TEXT NOT NULL, config_json TEXT NOT NULL DEFAULT '{}', privacy_policy_json TEXT NOT NULL,
-  sampling_policy_json TEXT NOT NULL DEFAULT '{}', last_observed_at TEXT, health_state TEXT NOT NULL,
-  created_at TEXT NOT NULL, updated_at TEXT NOT NULL
-);
-CREATE TABLE observation_events (
-  event_id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, ai_system_id TEXT NOT NULL, connection_id TEXT NOT NULL,
-  trace_id TEXT NOT NULL, span_id TEXT NOT NULL, parent_span_id TEXT, event_type TEXT NOT NULL,
-  occurred_at TEXT NOT NULL, observed_at TEXT NOT NULL, component_hint TEXT, task_hint TEXT,
-  operation_hint TEXT, payload_json TEXT NOT NULL, attributes_json TEXT NOT NULL,
-  privacy_class TEXT NOT NULL, source_adapter TEXT NOT NULL, source_version TEXT NOT NULL,
-  source_event_version TEXT, payload_digest TEXT, provenance_digest TEXT,
-  trajectory_key TEXT, trajectory_sequence INTEGER, trajectory_grouping_kind TEXT,
-  trajectory_stage TEXT, provider_sequence TEXT, provider_sequence_order INTEGER,
-  late_arrival INTEGER NOT NULL DEFAULT 0, received_sequence INTEGER, event_digest TEXT NOT NULL,
-  processing_status TEXT NOT NULL DEFAULT 'RECEIVED', claim_token TEXT,
-  claim_lease_expires_at TEXT, processing_attempts INTEGER NOT NULL DEFAULT 0,
-  PRIMARY KEY (organization_id, project_id, environment_id, event_id)
-);
-CREATE TABLE observation_delivery_state (
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  policy_digest TEXT NOT NULL, manifest_version INTEGER NOT NULL DEFAULT 1,
-  manifest_digest TEXT NOT NULL, cursor TEXT, watermark_at TEXT,
-  highest_provider_sequence_order INTEGER, checkpoint_provider_sequence_order INTEGER,
-  last_received_sequence INTEGER NOT NULL DEFAULT 0,
-  PRIMARY KEY (organization_id, project_id, environment_id)
-);
-CREATE TABLE observation_supersession (
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  tombstone_event_id TEXT NOT NULL, target_event_id TEXT NOT NULL,
-  target_event_version TEXT NOT NULL, created_at TEXT NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id, tombstone_event_id)
-);
-CREATE TABLE observation_backfill_runs (
-  id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, window_start TEXT NOT NULL, window_end TEXT NOT NULL,
-  status TEXT NOT NULL, received_count INTEGER NOT NULL DEFAULT 0,
-  processed_count INTEGER NOT NULL DEFAULT 0, created_at TEXT NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id, id)
-);
-CREATE TABLE trajectory_runtime_evidence (
-  id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, trajectory_key TEXT NOT NULL,
-  receipt_digest TEXT NOT NULL, artifact_digest TEXT, mode TEXT NOT NULL,
-  module_keys_json TEXT NOT NULL, host_capability_digest TEXT,
-  created_at TEXT NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id, id)
-);
-CREATE TABLE discovered_inventory (
-  id TEXT NOT NULL, kind TEXT NOT NULL, item_key TEXT NOT NULL,
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  evidence_event_id TEXT NOT NULL, status TEXT NOT NULL, review_state TEXT NOT NULL,
-  created_at TEXT NOT NULL, PRIMARY KEY (organization_id, project_id, environment_id, kind, id)
-);
-CREATE TABLE discovery_candidates (
-  id TEXT NOT NULL, kind TEXT NOT NULL, candidate_key TEXT NOT NULL,
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  evidence_ids_json TEXT NOT NULL, evidence_count INTEGER NOT NULL, confidence REAL NOT NULL,
-  source TEXT NOT NULL, status TEXT NOT NULL, review_state TEXT NOT NULL,
-  payload_json TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id, kind, candidate_key)
-);
-CREATE TABLE discovery_drift (
-  id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, kind TEXT NOT NULL, reason TEXT NOT NULL,
-  known_id TEXT NOT NULL, evidence_ids_json TEXT NOT NULL, risk TEXT NOT NULL,
-  status TEXT NOT NULL, review_state TEXT NOT NULL, created_at TEXT NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id, id)
-);
-CREATE TABLE legacy_imports (
-  id TEXT PRIMARY KEY, source_repo TEXT NOT NULL, source_version TEXT NOT NULL,
-  legacy_id TEXT NOT NULL, source_digest TEXT NOT NULL, migration_version TEXT NOT NULL,
-  mapper_version TEXT NOT NULL, imported_by TEXT NOT NULL, imported_at TEXT NOT NULL,
-  review TEXT NOT NULL CHECK (review IN ('NOT_REQUIRED','REQUIRED','APPROVED','REJECTED')),
-  status TEXT NOT NULL CHECK (status IN ('MAPPED','REVIEW_REQUIRED','ORPHAN','DUPLICATE')),
-  scope_organization_id TEXT, scope_project_id TEXT, scope_environment_id TEXT,
-  UNIQUE (source_repo, source_version, legacy_id, source_digest, mapper_version)
-);
-CREATE TABLE legacy_mappings (
-  id TEXT PRIMARY KEY, legacy_import_id TEXT NOT NULL REFERENCES legacy_imports(id),
-  legacy_kind TEXT NOT NULL, decision TEXT NOT NULL,
-  target_type TEXT NOT NULL, target_ref TEXT, reason TEXT NOT NULL,
-  created_at TEXT NOT NULL, UNIQUE (legacy_import_id)
-);
-CREATE TABLE legacy_replay_cases (
-  id TEXT PRIMARY KEY, request_id TEXT NOT NULL, source_digest TEXT NOT NULL,
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  input_json TEXT NOT NULL, captured_at TEXT NOT NULL,
-  UNIQUE (request_id, source_digest)
-);
-CREATE TABLE legacy_replay_evidence (
-  id TEXT PRIMARY KEY, replay_case_id TEXT NOT NULL REFERENCES legacy_replay_cases(id),
-  legacy_result_json TEXT NOT NULL, vnext_result_json TEXT NOT NULL,
-  comparison_json TEXT NOT NULL, created_at TEXT NOT NULL,
-  UNIQUE (replay_case_id)
-);
-
-CREATE TABLE IF NOT EXISTS behavior_artifacts (
-  id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, program_id TEXT NOT NULL, program_digest TEXT NOT NULL,
-  artifact_json TEXT NOT NULL, authority_digest TEXT, created_at TEXT NOT NULL, status TEXT NOT NULL DEFAULT 'BUILDING',
-  PRIMARY KEY (organization_id, project_id, environment_id, id)
-);
-CREATE TABLE IF NOT EXISTS decision_calibration_snapshots (
-  id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, snapshot_json TEXT NOT NULL,
-  authority_digest TEXT,
-  PRIMARY KEY (organization_id, project_id, environment_id, id)
-);
-CREATE TABLE IF NOT EXISTS impact_attributions (
-  id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, digest TEXT NOT NULL, payload_json TEXT NOT NULL, authority_digest TEXT,
-  PRIMARY KEY (organization_id, project_id, environment_id, id)
-);
-CREATE TABLE IF NOT EXISTS activation_decisions (
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, activation_digest TEXT NOT NULL,
-  payload_json TEXT NOT NULL, authority_digest TEXT,
-  PRIMARY KEY (organization_id, project_id, environment_id, activation_digest)
-);
-CREATE TABLE IF NOT EXISTS attribution_graphs (
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, graph_digest TEXT NOT NULL,
-  payload_json TEXT NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id, graph_digest)
-);
-CREATE TABLE IF NOT EXISTS federated_values (
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, id TEXT NOT NULL,
-  authority_digest TEXT NOT NULL, state TEXT NOT NULL,
-  payload_json TEXT NOT NULL,
-  PRIMARY KEY (organization_id, project_id, environment_id, id)
-);
-CREATE TABLE IF NOT EXISTS optimization_runs (
-  id TEXT PRIMARY KEY, idempotency_key TEXT NOT NULL UNIQUE,
-  organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL,
-  canonical_digest TEXT NOT NULL, policy_digest TEXT NOT NULL, dataset_digest TEXT NOT NULL,
-  engine TEXT NOT NULL, status TEXT NOT NULL, attempts INTEGER NOT NULL DEFAULT 0,
-  cancel_requested INTEGER NOT NULL DEFAULT 0, lease_owner TEXT, lease_expires_at TEXT,
-  search_result_digest TEXT, error_code TEXT, created_at TEXT NOT NULL, updated_at TEXT NOT NULL, authority_digest TEXT
-);
-CREATE TABLE IF NOT EXISTS optimization_run_attempts (
-  id TEXT PRIMARY KEY, run_id TEXT NOT NULL, organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL, environment_id TEXT NOT NULL, attempt INTEGER NOT NULL,
-  worker_id TEXT NOT NULL, status TEXT NOT NULL, request_digest TEXT,
-  response_digest TEXT, error_code TEXT, claimed_at TEXT NOT NULL, finished_at TEXT, authority_digest TEXT
-);
-CREATE TABLE IF NOT EXISTS optimization_cost_reservations (
-  run_id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, reserved_micros INTEGER NOT NULL, actual_micros INTEGER,
-  state TEXT NOT NULL, created_at TEXT NOT NULL, settled_at TEXT, authority_digest TEXT
-);
-CREATE TABLE IF NOT EXISTS break_glass_grants (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, payload_json TEXT NOT NULL, grant_digest TEXT NOT NULL UNIQUE
-);
-CREATE TABLE IF NOT EXISTS support_cases (
-  id TEXT PRIMARY KEY, project_id TEXT NOT NULL, user_id TEXT, payload_json TEXT NOT NULL
-);
-CREATE TABLE IF NOT EXISTS support_access_sessions (
-  id TEXT PRIMARY KEY, case_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  payload_json TEXT NOT NULL, session_digest TEXT NOT NULL UNIQUE
-);
-CREATE TABLE IF NOT EXISTS session_event_journal (
-  session_id TEXT NOT NULL, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  application_id TEXT, environment_id TEXT NOT NULL, sequence INTEGER NOT NULL,
-  event_id TEXT NOT NULL, event_digest TEXT NOT NULL, payload_json TEXT NOT NULL,
-  created_at TEXT NOT NULL, PRIMARY KEY (organization_id, project_id, application_id, environment_id, session_id, sequence),
-  UNIQUE (organization_id, project_id, application_id, environment_id, session_id, event_id)
-);
-CREATE TABLE IF NOT EXISTS artifact_shadow_evidence (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, artifact_digest TEXT NOT NULL,
-  legacy_receipt_digest TEXT NOT NULL, artifact_receipt_digest TEXT NOT NULL,
-  equivalent INTEGER NOT NULL, release_id TEXT, authority_digest TEXT, evidence_digest TEXT NOT NULL,
-  idempotency_key TEXT NOT NULL, created_at TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, idempotency_key)
-);
-CREATE TABLE IF NOT EXISTS independent_optimization_evaluations (
-  id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL, status TEXT NOT NULL, record_digest TEXT NOT NULL,
-  attempts INTEGER NOT NULL, lease_owner TEXT, lease_expires_at TEXT,
-  payload_json TEXT NOT NULL, created_at TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, record_digest)
-);
-CREATE TABLE IF NOT EXISTS signal_producer_mappings (
-  id TEXT PRIMARY KEY,
-  organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL,
-  mapping_digest TEXT NOT NULL,
-  payload_json TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, id)
-);
-
-CREATE TABLE IF NOT EXISTS signal_runtime_attestations (
-  id TEXT PRIMARY KEY,
-  mapping_id TEXT NOT NULL,
-  event_id TEXT NOT NULL,
-  stable_key TEXT NOT NULL,
-  organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL,
-  attestation_digest TEXT NOT NULL,
-  payload_json TEXT NOT NULL,
-  UNIQUE (organization_id, project_id, environment_id, mapping_id, event_id)
-);
-CREATE TABLE IF NOT EXISTS gpu_runtime_controls (organization_id TEXT NOT NULL, project_id TEXT NOT NULL, environment_id TEXT NOT NULL, runtime_id TEXT NOT NULL, operation TEXT NOT NULL, idempotency_key TEXT NOT NULL, payload TEXT NOT NULL, receipt_digest TEXT NOT NULL, created_at TEXT NOT NULL, PRIMARY KEY (organization_id, project_id, environment_id, runtime_id, idempotency_key));
-CREATE TABLE IF NOT EXISTS consent_records (
-  id TEXT PRIMARY KEY,
-  organization_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  environment_id TEXT NOT NULL,
-  subject_id TEXT NOT NULL,
-  purpose TEXT NOT NULL,
-  version INTEGER NOT NULL,
-  status TEXT NOT NULL,
-  granted_at TEXT NOT NULL,
-  expires_at TEXT,
-  withdrawn_at TEXT,
-  digest TEXT NOT NULL UNIQUE
-);
-CREATE INDEX IF NOT EXISTS idx_consent_records_scope_subject_purpose
-  ON consent_records (organization_id, project_id, environment_id, subject_id, purpose, version);