@xfey/tutti 0.1.0

package/migrations/0001_init.sql

@@ -0,0 +1,674 @@
+CREATE TABLE IF NOT EXISTS schema_migrations (
+  version TEXT PRIMARY KEY,
+  checksum TEXT NOT NULL,
+  applied_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS store_metadata (
+  id TEXT PRIMARY KEY CHECK (id = 'current'),
+  project_id TEXT NOT NULL UNIQUE,
+  schema_version INTEGER NOT NULL DEFAULT 1 CHECK (schema_version >= 1),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS command_idempotency_records (
+  command_id TEXT PRIMARY KEY,
+  command_name TEXT NOT NULL,
+  target_ref TEXT,
+  request_hash TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('in_progress', 'completed', 'failed')),
+  disposition_json TEXT CHECK (
+    disposition_json IS NULL
+    OR (json_valid(disposition_json) AND json_type(disposition_json) = 'object')
+  ),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  completed_at TEXT,
+  CHECK (
+    (status = 'in_progress' AND completed_at IS NULL AND disposition_json IS NULL)
+    OR (status IN ('completed', 'failed') AND completed_at IS NOT NULL AND disposition_json IS NOT NULL)
+  )
+);
+
+CREATE INDEX IF NOT EXISTS idx_command_idempotency_status
+  ON command_idempotency_records (status, updated_at, command_name);
+
+CREATE TABLE IF NOT EXISTS task_modules (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL CHECK (length(name) > 0),
+  summary TEXT,
+  sort_order INTEGER NOT NULL,
+  archived INTEGER NOT NULL DEFAULT 0 CHECK (archived IN (0, 1)),
+  created_at TEXT NOT NULL,
+  updated_at TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_task_modules_order
+  ON task_modules (archived, sort_order, id);
+
+CREATE TABLE IF NOT EXISTS tasks (
+  id TEXT PRIMARY KEY,
+  module_id TEXT NOT NULL REFERENCES task_modules(id) ON UPDATE CASCADE,
+  title TEXT NOT NULL CHECK (length(title) > 0),
+  summary TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('todo', 'running', 'pending', 'done', 'failed')),
+  sort_order INTEGER NOT NULL,
+  current_activity_ref TEXT,
+  active_clarification_thread_id TEXT
+    REFERENCES clarification_threads(id)
+    DEFERRABLE INITIALLY DEFERRED,
+  latest_run_result_id TEXT
+    REFERENCES run_results(id)
+    DEFERRABLE INITIALLY DEFERRED,
+  created_from_workflow_ref TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  CHECK (
+    (status = 'pending' AND active_clarification_thread_id IS NOT NULL)
+    OR (status != 'pending' AND active_clarification_thread_id IS NULL)
+  )
+);
+
+CREATE INDEX IF NOT EXISTS idx_tasks_worklist_order
+  ON tasks (module_id, sort_order, id);
+
+CREATE INDEX IF NOT EXISTS idx_tasks_status_order
+  ON tasks (status, sort_order, id);
+
+CREATE INDEX IF NOT EXISTS idx_tasks_active_activity
+  ON tasks (current_activity_ref)
+  WHERE current_activity_ref IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS task_details (
+  task_id TEXT PRIMARY KEY REFERENCES tasks(id) ON DELETE CASCADE,
+  contract_json TEXT NOT NULL CHECK (
+    json_valid(contract_json) AND json_type(contract_json) = 'object'
+  ),
+  result_json TEXT NOT NULL DEFAULT '{}' CHECK (
+    json_valid(result_json) AND json_type(result_json) = 'object'
+  ),
+  frozen_contract_since_activity_ref TEXT,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS messages (
+  id TEXT PRIMARY KEY,
+  scope_kind TEXT NOT NULL CHECK (scope_kind IN ('main_chat', 'clarification_round')),
+  clarification_round_id TEXT
+    REFERENCES clarification_rounds(id)
+    DEFERRABLE INITIALLY DEFERRED,
+  author_kind TEXT NOT NULL CHECK (author_kind IN ('human', 'system', 'agent')),
+  author_ref TEXT,
+  author_display_name TEXT,
+  message_kind TEXT NOT NULL CHECK (
+    message_kind IN (
+      'user_text',
+      'agent_text',
+      'system_notice',
+      'clarification_request',
+      'clarification_card'
+    )
+  ),
+  body TEXT NOT NULL,
+  refs_json TEXT CHECK (
+    refs_json IS NULL
+    OR (json_valid(refs_json) AND json_type(refs_json) = 'object')
+  ),
+  created_at TEXT NOT NULL,
+  CHECK (
+    (scope_kind = 'main_chat' AND clarification_round_id IS NULL)
+    OR (scope_kind = 'clarification_round' AND clarification_round_id IS NOT NULL)
+  ),
+  CHECK (message_kind != 'clarification_card' OR scope_kind = 'main_chat'),
+  CHECK (message_kind != 'clarification_request' OR scope_kind = 'clarification_round')
+);
+
+CREATE INDEX IF NOT EXISTS idx_messages_main_chat_order
+  ON messages (created_at, id)
+  WHERE scope_kind = 'main_chat';
+
+CREATE INDEX IF NOT EXISTS idx_messages_clarification_round_order
+  ON messages (clarification_round_id, created_at, id)
+  WHERE scope_kind = 'clarification_round';
+
+CREATE TABLE IF NOT EXISTS scratchpad (
+  id TEXT PRIMARY KEY CHECK (id = 'current'),
+  topic TEXT NOT NULL,
+  background_summary TEXT NOT NULL,
+  current_consensus_json TEXT NOT NULL CHECK (
+    json_valid(current_consensus_json) AND json_type(current_consensus_json) = 'array'
+  ),
+  open_questions_json TEXT NOT NULL CHECK (
+    json_valid(open_questions_json) AND json_type(open_questions_json) = 'array'
+  ),
+  task_changes_json TEXT NOT NULL CHECK (
+    json_valid(task_changes_json) AND json_type(task_changes_json) = 'array'
+  ),
+  source_message_refs_json TEXT NOT NULL CHECK (
+    json_valid(source_message_refs_json) AND json_type(source_message_refs_json) = 'array'
+  ),
+  updated_by_activity_ref TEXT,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS clarification_threads (
+  id TEXT PRIMARY KEY,
+  owner_kind TEXT NOT NULL CHECK (owner_kind IN ('task_compile', 'task')),
+  owner_workflow_ref TEXT,
+  owner_task_id TEXT REFERENCES tasks(id) DEFERRABLE INITIALLY DEFERRED,
+  status TEXT NOT NULL CHECK (status IN ('active', 'closed')),
+  current_round_id TEXT
+    REFERENCES clarification_rounds(id)
+    DEFERRABLE INITIALLY DEFERRED,
+  created_from_activity_ref TEXT,
+  closed_reason TEXT CHECK (
+    closed_reason IS NULL OR closed_reason IN ('resolved', 'contract_changed', 'cancelled')
+  ),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  CHECK (
+    (owner_kind = 'task_compile' AND owner_workflow_ref IS NOT NULL AND owner_task_id IS NULL)
+    OR (owner_kind = 'task' AND owner_task_id IS NOT NULL AND owner_workflow_ref IS NULL)
+  ),
+  CHECK (
+    (status = 'active' AND closed_reason IS NULL)
+    OR (status = 'closed' AND closed_reason IS NOT NULL)
+  )
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_clarification_threads_active_task_unique
+  ON clarification_threads (owner_task_id)
+  WHERE owner_kind = 'task' AND status = 'active';
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_clarification_threads_active_task_compile_unique
+  ON clarification_threads (owner_workflow_ref)
+  WHERE owner_kind = 'task_compile' AND status = 'active';
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_clarification_threads_one_active_global
+  ON clarification_threads (status)
+  WHERE status = 'active';
+
+CREATE INDEX IF NOT EXISTS idx_clarification_threads_current_round
+  ON clarification_threads (current_round_id)
+  WHERE current_round_id IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS clarification_rounds (
+  id TEXT PRIMARY KEY,
+  clarification_thread_id TEXT NOT NULL
+    REFERENCES clarification_threads(id)
+    DEFERRABLE INITIALLY DEFERRED,
+  round_index INTEGER NOT NULL CHECK (round_index >= 1),
+  status TEXT NOT NULL CHECK (status IN ('writable', 'sealed')),
+  request_payload_json TEXT NOT NULL CHECK (
+    json_valid(request_payload_json) AND json_type(request_payload_json) = 'object'
+  ),
+  card_message_id TEXT NOT NULL
+    REFERENCES messages(id)
+    DEFERRABLE INITIALLY DEFERRED,
+  opening_message_id TEXT NOT NULL
+    REFERENCES messages(id)
+    DEFERRABLE INITIALLY DEFERRED,
+  submitted_at TEXT,
+  submitted_message_refs_json TEXT CHECK (
+    submitted_message_refs_json IS NULL
+    OR (
+      json_valid(submitted_message_refs_json)
+      AND json_type(submitted_message_refs_json) = 'array'
+    )
+  ),
+  submitted_interaction_response_id TEXT
+    REFERENCES clarification_interaction_responses(id)
+    DEFERRABLE INITIALLY DEFERRED,
+  successor_status TEXT NOT NULL DEFAULT 'not_materialized'
+    CHECK (successor_status IN ('not_materialized', 'materialized')),
+  successor_ref_json TEXT CHECK (
+    successor_ref_json IS NULL
+    OR (json_valid(successor_ref_json) AND json_type(successor_ref_json) = 'object')
+  ),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (clarification_thread_id, round_index),
+  CHECK (
+    (status = 'writable' AND submitted_at IS NULL AND submitted_message_refs_json IS NULL)
+    OR (status = 'sealed' AND submitted_at IS NOT NULL AND submitted_message_refs_json IS NOT NULL)
+  ),
+  CHECK (successor_status = 'not_materialized' OR status = 'sealed'),
+  CHECK (
+    (successor_status = 'not_materialized' AND successor_ref_json IS NULL)
+    OR (successor_status = 'materialized' AND successor_ref_json IS NOT NULL)
+  )
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_clarification_rounds_one_writable_per_thread
+  ON clarification_rounds (clarification_thread_id)
+  WHERE status = 'writable';
+
+CREATE INDEX IF NOT EXISTS idx_clarification_rounds_order
+  ON clarification_rounds (clarification_thread_id, round_index);
+
+CREATE INDEX IF NOT EXISTS idx_clarification_rounds_successor_replay
+  ON clarification_rounds (successor_status, submitted_at, id)
+  WHERE status = 'sealed' AND successor_status = 'not_materialized';
+
+CREATE TABLE IF NOT EXISTS clarification_interaction_responses (
+  id TEXT PRIMARY KEY,
+  clarification_round_id TEXT NOT NULL REFERENCES clarification_rounds(id) ON DELETE CASCADE,
+  response_kind TEXT NOT NULL CHECK (response_kind IN ('choice')),
+  responder_client_session_id TEXT,
+  responder_account_ref TEXT,
+  responder_display_name TEXT,
+  response_json TEXT NOT NULL CHECK (
+    json_valid(response_json) AND json_type(response_json) = 'object'
+  ),
+  created_at TEXT NOT NULL,
+  updated_at TEXT,
+  UNIQUE (clarification_round_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_clarification_interaction_responses_round
+  ON clarification_interaction_responses (clarification_round_id);
+
+CREATE TABLE IF NOT EXISTS run_results (
+  id TEXT PRIMARY KEY,
+  activity_ref TEXT NOT NULL UNIQUE,
+  task_id TEXT NOT NULL REFERENCES tasks(id) DEFERRABLE INITIALLY DEFERRED,
+  source_event_ref TEXT NOT NULL,
+  run_lineage_json TEXT NOT NULL CHECK (
+    json_valid(run_lineage_json) AND json_type(run_lineage_json) = 'object'
+  ),
+  result_kind TEXT NOT NULL CHECK (result_kind IN ('needs_human', 'finished', 'failed')),
+  result_json TEXT NOT NULL CHECK (
+    json_valid(result_json) AND json_type(result_json) = 'object'
+  ),
+  created_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_run_results_task_order
+  ON run_results (task_id, created_at, id);
+
+CREATE TABLE IF NOT EXISTS recovery_summaries (
+  id TEXT PRIMARY KEY,
+  affected_activities_json TEXT NOT NULL CHECK (
+    json_valid(affected_activities_json) AND json_type(affected_activities_json) = 'array'
+  ),
+  summary TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS clarification_submit_replay_hints (
+  clarification_round_id TEXT PRIMARY KEY REFERENCES clarification_rounds(id) ON DELETE CASCADE,
+  clarification_thread_id TEXT NOT NULL REFERENCES clarification_threads(id),
+  accepted_command_id TEXT,
+  replay_attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (replay_attempt_count >= 0),
+  last_replayed_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_clarification_submit_replay_hints_thread
+  ON clarification_submit_replay_hints (clarification_thread_id);
+
+CREATE TRIGGER IF NOT EXISTS trg_messages_no_insert_into_sealed_round
+BEFORE INSERT ON messages
+WHEN NEW.scope_kind = 'clarification_round'
+  AND EXISTS (
+    SELECT 1
+    FROM clarification_rounds
+    WHERE id = NEW.clarification_round_id AND status = 'sealed'
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'cannot insert message into sealed clarification round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_messages_no_update_in_sealed_round
+BEFORE UPDATE ON messages
+WHEN OLD.scope_kind = 'clarification_round'
+  AND EXISTS (
+    SELECT 1
+    FROM clarification_rounds
+    WHERE id = OLD.clarification_round_id AND status = 'sealed'
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'cannot update message in sealed clarification round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_messages_no_delete_from_sealed_round
+BEFORE DELETE ON messages
+WHEN OLD.scope_kind = 'clarification_round'
+  AND EXISTS (
+    SELECT 1
+    FROM clarification_rounds
+    WHERE id = OLD.clarification_round_id AND status = 'sealed'
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'cannot delete message from sealed clarification round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_tasks_active_thread_matches_task_insert
+BEFORE INSERT ON tasks
+WHEN NEW.active_clarification_thread_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1
+    FROM clarification_threads
+    WHERE id = NEW.active_clarification_thread_id
+      AND owner_kind = 'task'
+      AND owner_task_id = NEW.id
+      AND status = 'active'
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'active clarification thread must be active and owned by the task');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_tasks_active_thread_matches_task_update
+BEFORE UPDATE OF active_clarification_thread_id ON tasks
+WHEN NEW.active_clarification_thread_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1
+    FROM clarification_threads
+    WHERE id = NEW.active_clarification_thread_id
+      AND owner_kind = 'task'
+      AND owner_task_id = NEW.id
+      AND status = 'active'
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'active clarification thread must be active and owned by the task');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_threads_no_break_active_task_update
+BEFORE UPDATE OF owner_kind, owner_task_id, status ON clarification_threads
+WHEN EXISTS (
+  SELECT 1
+  FROM tasks
+  WHERE active_clarification_thread_id = OLD.id
+)
+  AND NOT EXISTS (
+    SELECT 1
+    FROM tasks
+    WHERE active_clarification_thread_id = OLD.id
+      AND id = NEW.owner_task_id
+      AND status = 'pending'
+      AND NEW.owner_kind = 'task'
+      AND NEW.status = 'active'
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'cannot update clarification thread in a way that breaks an active pending task');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_tasks_latest_run_result_matches_task_insert
+BEFORE INSERT ON tasks
+WHEN NEW.latest_run_result_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1
+    FROM run_results
+    WHERE id = NEW.latest_run_result_id AND task_id = NEW.id
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'latest run result must belong to the same task');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_tasks_latest_run_result_matches_task_update
+BEFORE UPDATE OF latest_run_result_id ON tasks
+WHEN NEW.latest_run_result_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1
+    FROM run_results
+    WHERE id = NEW.latest_run_result_id AND task_id = NEW.id
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'latest run result must belong to the same task');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_run_results_no_break_latest_task_update
+BEFORE UPDATE OF task_id ON run_results
+WHEN EXISTS (
+  SELECT 1
+  FROM tasks
+  WHERE latest_run_result_id = OLD.id
+    AND id != NEW.task_id
+)
+BEGIN
+  SELECT RAISE(ABORT, 'cannot move latest run result away from the task that references it');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_threads_current_round_matches_thread_insert
+BEFORE INSERT ON clarification_threads
+WHEN NEW.current_round_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1
+    FROM clarification_rounds
+    WHERE id = NEW.current_round_id AND clarification_thread_id = NEW.id
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'current round must belong to the same clarification thread');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_threads_current_round_matches_thread_update
+BEFORE UPDATE OF current_round_id ON clarification_threads
+WHEN NEW.current_round_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1
+    FROM clarification_rounds
+    WHERE id = NEW.current_round_id AND clarification_thread_id = NEW.id
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'current round must belong to the same clarification thread');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_rounds_no_break_current_thread_update
+BEFORE UPDATE OF clarification_thread_id ON clarification_rounds
+WHEN EXISTS (
+  SELECT 1
+  FROM clarification_threads
+  WHERE current_round_id = OLD.id
+    AND id != NEW.clarification_thread_id
+)
+BEGIN
+  SELECT RAISE(ABORT, 'cannot move a current clarification round to another thread');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_round_card_message_matches_insert
+BEFORE INSERT ON clarification_rounds
+WHEN NOT EXISTS (
+  SELECT 1
+  FROM messages
+  WHERE id = NEW.card_message_id
+    AND scope_kind = 'main_chat'
+    AND message_kind = 'clarification_card'
+)
+BEGIN
+  SELECT RAISE(ABORT, 'card message must be a main chat clarification card');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_round_card_message_matches_update
+BEFORE UPDATE OF card_message_id ON clarification_rounds
+WHEN NOT EXISTS (
+  SELECT 1
+  FROM messages
+  WHERE id = NEW.card_message_id
+    AND scope_kind = 'main_chat'
+    AND message_kind = 'clarification_card'
+)
+BEGIN
+  SELECT RAISE(ABORT, 'card message must be a main chat clarification card');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_messages_no_break_card_message_update
+BEFORE UPDATE OF scope_kind, message_kind ON messages
+WHEN EXISTS (
+  SELECT 1
+  FROM clarification_rounds
+  WHERE card_message_id = OLD.id
+)
+  AND NOT (
+    NEW.scope_kind = 'main_chat'
+    AND NEW.message_kind = 'clarification_card'
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'cannot update card message so it is no longer a main chat clarification card');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_round_opening_message_matches_insert
+BEFORE INSERT ON clarification_rounds
+WHEN NOT EXISTS (
+  SELECT 1
+  FROM messages
+  WHERE id = NEW.opening_message_id
+    AND scope_kind = 'clarification_round'
+    AND clarification_round_id = NEW.id
+    AND message_kind = 'clarification_request'
+)
+BEGIN
+  SELECT RAISE(ABORT, 'opening message must be a clarification request in the same round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_round_opening_message_matches_update
+BEFORE UPDATE OF opening_message_id ON clarification_rounds
+WHEN NOT EXISTS (
+  SELECT 1
+  FROM messages
+  WHERE id = NEW.opening_message_id
+    AND scope_kind = 'clarification_round'
+    AND clarification_round_id = NEW.id
+    AND message_kind = 'clarification_request'
+)
+BEGIN
+  SELECT RAISE(ABORT, 'opening message must be a clarification request in the same round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_messages_no_break_opening_message_update
+BEFORE UPDATE OF scope_kind, clarification_round_id, message_kind ON messages
+WHEN EXISTS (
+  SELECT 1
+  FROM clarification_rounds
+  WHERE opening_message_id = OLD.id
+    AND (
+      NEW.scope_kind != 'clarification_round'
+      OR NEW.clarification_round_id != clarification_rounds.id
+      OR NEW.message_kind != 'clarification_request'
+    )
+)
+BEGIN
+  SELECT RAISE(ABORT, 'cannot update opening message so it is no longer a clarification request in the same round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_round_no_mutate_sealed_fields
+BEFORE UPDATE ON clarification_rounds
+WHEN OLD.status = 'sealed'
+  AND (
+    NEW.clarification_thread_id IS NOT OLD.clarification_thread_id
+    OR NEW.round_index IS NOT OLD.round_index
+    OR NEW.status IS NOT OLD.status
+    OR NEW.request_payload_json IS NOT OLD.request_payload_json
+    OR NEW.card_message_id IS NOT OLD.card_message_id
+    OR NEW.opening_message_id IS NOT OLD.opening_message_id
+    OR NEW.submitted_at IS NOT OLD.submitted_at
+    OR NEW.submitted_message_refs_json IS NOT OLD.submitted_message_refs_json
+    OR NEW.submitted_interaction_response_id IS NOT OLD.submitted_interaction_response_id
+    OR NEW.created_at IS NOT OLD.created_at
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'cannot mutate sealed clarification round fields');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_round_successor_materialized_once
+BEFORE UPDATE OF successor_status, successor_ref_json ON clarification_rounds
+WHEN OLD.successor_status = 'materialized'
+  AND (
+    NEW.successor_status IS NOT OLD.successor_status
+    OR NEW.successor_ref_json IS NOT OLD.successor_ref_json
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'clarification successor is already materialized');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_response_requires_writable_round_insert
+BEFORE INSERT ON clarification_interaction_responses
+WHEN COALESCE(
+  (SELECT status FROM clarification_rounds WHERE id = NEW.clarification_round_id),
+  ''
+) != 'writable'
+BEGIN
+  SELECT RAISE(ABORT, 'cannot record interaction response for non-writable round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_response_round_id_immutable
+BEFORE UPDATE OF clarification_round_id ON clarification_interaction_responses
+WHEN NEW.clarification_round_id IS NOT OLD.clarification_round_id
+BEGIN
+  SELECT RAISE(ABORT, 'cannot move interaction response to another round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_response_requires_writable_round_update
+BEFORE UPDATE ON clarification_interaction_responses
+WHEN COALESCE(
+  (SELECT status FROM clarification_rounds WHERE id = NEW.clarification_round_id),
+  ''
+) != 'writable'
+BEGIN
+  SELECT RAISE(ABORT, 'cannot update interaction response for non-writable round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_response_requires_writable_round_delete
+BEFORE DELETE ON clarification_interaction_responses
+WHEN COALESCE(
+  (SELECT status FROM clarification_rounds WHERE id = OLD.clarification_round_id),
+  ''
+) != 'writable'
+BEGIN
+  SELECT RAISE(ABORT, 'cannot delete interaction response for non-writable round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_round_submitted_response_matches_round_insert
+BEFORE INSERT ON clarification_rounds
+WHEN NEW.submitted_interaction_response_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1
+    FROM clarification_interaction_responses
+    WHERE id = NEW.submitted_interaction_response_id
+      AND clarification_round_id = NEW.id
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'submitted interaction response must belong to the same round');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_submit_replay_hint_matches_round_insert
+BEFORE INSERT ON clarification_submit_replay_hints
+WHEN NOT EXISTS (
+  SELECT 1
+  FROM clarification_rounds
+  WHERE id = NEW.clarification_round_id
+    AND clarification_thread_id = NEW.clarification_thread_id
+    AND status = 'sealed'
+    AND successor_status = 'not_materialized'
+)
+BEGIN
+  SELECT RAISE(ABORT, 'replay hint must point to a sealed round without materialized successor');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_submit_replay_hint_matches_round_update
+BEFORE UPDATE OF clarification_round_id, clarification_thread_id ON clarification_submit_replay_hints
+WHEN NOT EXISTS (
+  SELECT 1
+  FROM clarification_rounds
+  WHERE id = NEW.clarification_round_id
+    AND clarification_thread_id = NEW.clarification_thread_id
+    AND status = 'sealed'
+    AND successor_status = 'not_materialized'
+)
+BEGIN
+  SELECT RAISE(ABORT, 'replay hint must point to a sealed round without materialized successor');
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_clarification_round_submitted_response_matches_round_update
+BEFORE UPDATE OF submitted_interaction_response_id ON clarification_rounds
+WHEN NEW.submitted_interaction_response_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1
+    FROM clarification_interaction_responses
+    WHERE id = NEW.submitted_interaction_response_id
+      AND clarification_round_id = NEW.id
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'submitted interaction response must belong to the same round');
+END;

package/migrations/0002_allow_sealed_round_successor_note.sql

@@ -0,0 +1,14 @@
+DROP TRIGGER IF EXISTS trg_messages_no_insert_into_sealed_round;
+
+CREATE TRIGGER IF NOT EXISTS trg_messages_no_insert_into_sealed_round
+BEFORE INSERT ON messages
+WHEN NEW.scope_kind = 'clarification_round'
+  AND NEW.message_kind != 'agent_text'
+  AND EXISTS (
+    SELECT 1
+    FROM clarification_rounds
+    WHERE id = NEW.clarification_round_id AND status = 'sealed'
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'cannot insert non-agent message into sealed clarification round');
+END;

package/migrations/0003_drop_scratchpad_source_message_refs.sql

@@ -0,0 +1 @@
+ALTER TABLE scratchpad DROP COLUMN source_message_refs_json;