create-safest-tools 0.2.0

package/template/migrations/0006_ai_governance.sql

@@ -0,0 +1,198 @@
+PRAGMA foreign_keys = ON;
+
+ALTER TABLE dead_letter_items RENAME TO dead_letter_items_v1;
+
+CREATE TABLE dead_letter_items (
+  id TEXT PRIMARY KEY,
+  fingerprint TEXT NOT NULL UNIQUE,
+  source_queue TEXT NOT NULL,
+  source_message_id TEXT NOT NULL,
+  job_type TEXT NOT NULL CHECK (job_type IN ('route_report', 'process_ai_report', 'deliver_action', 'deliver_notification', 'invalid')),
+  job_id TEXT,
+  report_id TEXT REFERENCES reports(id),
+  outbox_id TEXT,
+  state TEXT NOT NULL DEFAULT 'open' CHECK (state IN ('open', 'acknowledged', 'resolved')),
+  error_code TEXT NOT NULL,
+  occurrence_count INTEGER NOT NULL DEFAULT 1 CHECK (occurrence_count > 0),
+  details_json TEXT NOT NULL DEFAULT '{}',
+  first_seen_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL,
+  resolved_at TEXT
+);
+
+INSERT INTO dead_letter_items (
+  id, fingerprint, source_queue, source_message_id, job_type, job_id, report_id, outbox_id,
+  state, error_code, occurrence_count, details_json, first_seen_at, last_seen_at, resolved_at
+)
+SELECT id, fingerprint, source_queue, source_message_id, job_type, job_id, report_id, outbox_id,
+  state, error_code, occurrence_count, details_json, first_seen_at, last_seen_at, resolved_at
+FROM dead_letter_items_v1;
+
+DROP TABLE dead_letter_items_v1;
+
+CREATE INDEX dead_letter_items_state_idx
+  ON dead_letter_items(state, last_seen_at DESC, id DESC);
+CREATE INDEX dead_letter_items_report_idx
+  ON dead_letter_items(report_id, last_seen_at DESC, id DESC);
+
+ALTER TABLE message_template_versions ADD COLUMN automation_allowed INTEGER NOT NULL DEFAULT 0 CHECK (automation_allowed IN (0, 1));
+ALTER TABLE message_template_versions ADD COLUMN variables_schema_json TEXT NOT NULL DEFAULT '{}';
+
+CREATE TABLE ai_queue_config_versions (
+  id TEXT PRIMARY KEY,
+  queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  version INTEGER NOT NULL CHECK (version > 0),
+  mode TEXT NOT NULL CHECK (mode IN ('off', 'shadow', 'assist', 'autonomous_low_priority')),
+  enabled INTEGER NOT NULL DEFAULT 0 CHECK (enabled IN (0, 1)),
+  provider TEXT NOT NULL CHECK (provider IN ('workers_ai')),
+  model TEXT NOT NULL,
+  input_cost_microusd_per_million INTEGER NOT NULL DEFAULT 0 CHECK (input_cost_microusd_per_million >= 0),
+  output_cost_microusd_per_million INTEGER NOT NULL DEFAULT 0 CHECK (output_cost_microusd_per_million >= 0),
+  prompt_version TEXT NOT NULL,
+  policy_version_id TEXT NOT NULL REFERENCES policy_versions(id),
+  eligible_form_versions_json TEXT NOT NULL,
+  eligible_sources_json TEXT NOT NULL,
+  eligible_reason_codes_json TEXT NOT NULL,
+  eligible_target_types_json TEXT NOT NULL,
+  allowed_fields_json TEXT NOT NULL,
+  allowed_outcomes_json TEXT NOT NULL,
+  allowed_action_codes_json TEXT NOT NULL DEFAULT '[]',
+  allowed_template_ids_json TEXT NOT NULL,
+  confidence_threshold REAL NOT NULL CHECK (confidence_threshold >= 0 AND confidence_threshold <= 1),
+  max_follow_up_turns INTEGER NOT NULL CHECK (max_follow_up_turns >= 0 AND max_follow_up_turns <= 5),
+  max_wait_hours INTEGER NOT NULL CHECK (max_wait_hours >= 1 AND max_wait_hours <= 720),
+  daily_report_budget INTEGER NOT NULL CHECK (daily_report_budget >= 0),
+  daily_cost_budget_microusd INTEGER NOT NULL CHECK (daily_cost_budget_microusd >= 0),
+  quality_sample_rate REAL NOT NULL CHECK (quality_sample_rate >= 0 AND quality_sample_rate <= 1),
+  fallback_queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  pause_state TEXT NOT NULL DEFAULT 'ready' CHECK (pause_state IN ('ready', 'paused', 'budget_exhausted', 'quality_paused')),
+  published_at TEXT,
+  retired_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL UNIQUE,
+  UNIQUE (queue_id, version)
+);
+
+CREATE INDEX ai_queue_config_active_idx
+  ON ai_queue_config_versions(queue_id, enabled, pause_state, published_at, retired_at, version DESC);
+
+ALTER TABLE background_jobs ADD COLUMN ai_config_version_id TEXT REFERENCES ai_queue_config_versions(id);
+
+CREATE TABLE ai_runs (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id),
+  background_job_id TEXT NOT NULL UNIQUE REFERENCES background_jobs(id),
+  config_version_id TEXT NOT NULL REFERENCES ai_queue_config_versions(id),
+  mode TEXT NOT NULL CHECK (mode IN ('shadow', 'assist', 'autonomous_low_priority')),
+  provider TEXT NOT NULL,
+  model TEXT NOT NULL,
+  prompt_version TEXT NOT NULL,
+  policy_version_id TEXT NOT NULL REFERENCES policy_versions(id),
+  status TEXT NOT NULL CHECK (status IN ('running', 'succeeded', 'invalid', 'failed', 'escalated')),
+  input_references_json TEXT NOT NULL,
+  output_json TEXT,
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT,
+  input_units INTEGER,
+  output_units INTEGER,
+  estimated_cost_microusd INTEGER NOT NULL DEFAULT 0 CHECK (estimated_cost_microusd >= 0)
+);
+
+CREATE INDEX ai_runs_report_idx ON ai_runs(report_id, started_at DESC, id DESC);
+CREATE INDEX ai_runs_config_status_idx ON ai_runs(config_version_id, status, started_at DESC, id DESC);
+
+CREATE TABLE ai_results (
+  id TEXT PRIMARY KEY,
+  ai_run_id TEXT NOT NULL UNIQUE REFERENCES ai_runs(id) ON DELETE CASCADE,
+  outcome TEXT NOT NULL,
+  policy_code TEXT,
+  evidence_references_json TEXT NOT NULL,
+  summary TEXT NOT NULL,
+  confidence REAL,
+  uncertain INTEGER NOT NULL CHECK (uncertain IN (0, 1)),
+  message_template_id TEXT REFERENCES message_template_versions(id),
+  message_variables_json TEXT,
+  action_code TEXT,
+  escalation_code TEXT,
+  validation_state TEXT NOT NULL CHECK (validation_state IN ('valid', 'invalid')),
+  validation_errors_json TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE ai_tool_calls (
+  id TEXT PRIMARY KEY,
+  ai_run_id TEXT NOT NULL REFERENCES ai_runs(id) ON DELETE CASCADE,
+  tool_name TEXT NOT NULL,
+  input_references_json TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('allowed', 'denied', 'succeeded', 'failed')),
+  error_code TEXT,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE ai_quality_samples (
+  id TEXT PRIMARY KEY,
+  ai_run_id TEXT NOT NULL UNIQUE REFERENCES ai_runs(id),
+  report_id TEXT NOT NULL REFERENCES reports(id),
+  sample_reason TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('pending', 'claimed', 'complete')),
+  selected_at TEXT NOT NULL
+);
+
+CREATE TABLE quality_reviews (
+  id TEXT PRIMARY KEY,
+  sample_id TEXT NOT NULL UNIQUE REFERENCES ai_quality_samples(id),
+  reviewer_id TEXT NOT NULL,
+  agrees INTEGER NOT NULL CHECK (agrees IN (0, 1)),
+  notes TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE ai_usage_daily (
+  usage_date TEXT NOT NULL,
+  config_version_id TEXT NOT NULL REFERENCES ai_queue_config_versions(id),
+  reports_started INTEGER NOT NULL DEFAULT 0 CHECK (reports_started >= 0),
+  reports_resolved INTEGER NOT NULL DEFAULT 0 CHECK (reports_resolved >= 0),
+  reports_escalated INTEGER NOT NULL DEFAULT 0 CHECK (reports_escalated >= 0),
+  failures INTEGER NOT NULL DEFAULT 0 CHECK (failures >= 0),
+  estimated_cost_microusd INTEGER NOT NULL DEFAULT 0 CHECK (estimated_cost_microusd >= 0),
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (usage_date, config_version_id)
+);
+
+INSERT INTO message_template_versions (
+  id, installation_id, template_key, version, audience, purpose, locale,
+  body_template, published_at, created_by, created_at, automation_allowed, variables_schema_json
+) VALUES
+  ('ai-more-context-v1', 'default', 'ai-more-context', 1, 'reporter', 'follow_up', 'en',
+   'Automated review needs one more detail: {{missing_item}}. Reply here, or request review by a person.',
+   strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), 'system', strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), 1,
+   '{"missing_item":{"type":"string","minLength":3,"maxLength":160}}'),
+  ('ai-no-violation-v1', 'default', 'ai-no-violation', 1, 'reporter', 'outcome', 'en',
+   'Automated review did not find a violation under {{policy_code}}. You may request review by a person.',
+   strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), 'system', strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), 1,
+   '{"policy_code":{"type":"string","minLength":1,"maxLength":100}}'),
+  ('ai-out-of-scope-v1', 'default', 'ai-out-of-scope', 1, 'reporter', 'outcome', 'en',
+   'This report is outside the scope of {{policy_code}}. You may request review by a person.',
+   strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), 'system', strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), 1,
+   '{"policy_code":{"type":"string","minLength":1,"maxLength":100}}');
+
+INSERT INTO ai_queue_config_versions (
+  id, queue_id, version, mode, enabled, provider, model, prompt_version, policy_version_id,
+  input_cost_microusd_per_million, output_cost_microusd_per_million,
+  eligible_form_versions_json, eligible_sources_json, eligible_reason_codes_json, eligible_target_types_json,
+  allowed_fields_json, allowed_outcomes_json, allowed_action_codes_json, allowed_template_ids_json,
+  confidence_threshold, max_follow_up_turns, max_wait_hours, daily_report_budget,
+  daily_cost_budget_microusd, quality_sample_rate, fallback_queue_id, pause_state,
+  published_at, created_by, created_at, idempotency_key
+) VALUES (
+  'low-priority-ai-v1', 'low-priority-ai', 1, 'shadow', 0, 'workers_ai',
+  '@cf/meta/llama-3.1-8b-instruct-fast', 'safest-low-priority-v1', 'general-policy-v1', 0, 0,
+  '["general-v1"]', '["widget","public_page","server_api"]', '["spam"]',
+  '["message","profile","listing","account"]', '["answers.details","target.type","evidence.references"]',
+  '["out_of_scope","insufficient_information","no_violation_found","escalate_to_human"]', '[]',
+  '["ai-more-context-v1","ai-no-violation-v1","ai-out-of-scope-v1"]',
+  0.85, 1, 72, 100, 1000000, 0.10, 'standard-human', 'ready',
+  strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), 'system', strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), 'seed:low-priority-ai-v1'
+);

package/template/migrations/0007_ai_release_gates.sql

@@ -0,0 +1,6 @@
+PRAGMA foreign_keys = ON;
+
+ALTER TABLE ai_queue_config_versions ADD COLUMN minimum_shadow_runs INTEGER NOT NULL DEFAULT 25 CHECK (minimum_shadow_runs >= 1 AND minimum_shadow_runs <= 100000);
+ALTER TABLE ai_queue_config_versions ADD COLUMN minimum_quality_reviews INTEGER NOT NULL DEFAULT 5 CHECK (minimum_quality_reviews >= 0 AND minimum_quality_reviews <= 100000);
+ALTER TABLE ai_queue_config_versions ADD COLUMN maximum_failure_rate REAL NOT NULL DEFAULT 0.05 CHECK (maximum_failure_rate >= 0 AND maximum_failure_rate <= 1);
+ALTER TABLE ai_queue_config_versions ADD COLUMN maximum_disagreement_rate REAL NOT NULL DEFAULT 0.10 CHECK (maximum_disagreement_rate >= 0 AND maximum_disagreement_rate <= 1);

package/template/migrations/0008_retention_analytics_exports.sql

@@ -0,0 +1,52 @@
+PRAGMA foreign_keys = ON;
+
+ALTER TABLE case_messages ADD COLUMN redacted_at TEXT;
+ALTER TABLE report_answers ADD COLUMN redacted_at TEXT;
+ALTER TABLE report_participants ADD COLUMN reference_redacted_at TEXT;
+ALTER TABLE report_targets ADD COLUMN sensitive_redacted_at TEXT;
+
+CREATE TABLE legal_holds (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  reason TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('active', 'released')),
+  placed_by TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL UNIQUE,
+  created_at TEXT NOT NULL,
+  released_by TEXT,
+  release_idempotency_key TEXT UNIQUE,
+  released_at TEXT
+);
+
+CREATE UNIQUE INDEX legal_holds_one_active_idx ON legal_holds(report_id) WHERE state = 'active';
+CREATE INDEX legal_holds_state_idx ON legal_holds(state, created_at, id);
+
+CREATE TABLE deletion_requests (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  scope TEXT NOT NULL CHECK (scope IN ('participant_data', 'all_permitted_data')),
+  reason TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('pending', 'blocked_by_hold', 'complete', 'failed')),
+  requested_by TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL UNIQUE,
+  requested_at TEXT NOT NULL,
+  completed_at TEXT,
+  last_error_code TEXT
+);
+
+CREATE INDEX deletion_requests_state_idx ON deletion_requests(state, requested_at, id);
+
+CREATE TABLE retention_jobs (
+  id TEXT PRIMARY KEY,
+  job_kind TEXT NOT NULL CHECK (job_kind IN ('scheduled_retention', 'deletion_request')),
+  state TEXT NOT NULL CHECK (state IN ('running', 'complete', 'failed')),
+  cutoff_at TEXT NOT NULL,
+  messages_redacted INTEGER NOT NULL DEFAULT 0 CHECK (messages_redacted >= 0),
+  reports_anonymized INTEGER NOT NULL DEFAULT 0 CHECK (reports_anonymized >= 0),
+  portal_sessions_revoked INTEGER NOT NULL DEFAULT 0 CHECK (portal_sessions_revoked >= 0),
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT
+);
+
+CREATE INDEX retention_jobs_state_idx ON retention_jobs(state, started_at DESC, id DESC);

package/template/migrations/0009_retention_derived_copies.sql

@@ -0,0 +1,14 @@
+PRAGMA foreign_keys = ON;
+
+ALTER TABLE decisions ADD COLUMN sensitive_redacted_at TEXT;
+ALTER TABLE notices ADD COLUMN redacted_at TEXT;
+ALTER TABLE appeals ADD COLUMN reason_redacted_at TEXT;
+ALTER TABLE appeal_decisions ADD COLUMN rationale_redacted_at TEXT;
+ALTER TABLE action_outbox ADD COLUMN payload_redacted_at TEXT;
+ALTER TABLE notification_outbox ADD COLUMN payload_redacted_at TEXT;
+ALTER TABLE ai_runs ADD COLUMN output_redacted_at TEXT;
+ALTER TABLE ai_results ADD COLUMN redacted_at TEXT;
+ALTER TABLE quality_reviews ADD COLUMN notes_redacted_at TEXT;
+
+CREATE INDEX deletion_requests_report_state_idx
+  ON deletion_requests(report_id, state, requested_at, id);

package/template/migrations/0010_ai_quality_controls.sql

@@ -0,0 +1,26 @@
+PRAGMA foreign_keys = ON;
+
+ALTER TABLE ai_quality_samples ADD COLUMN claimed_by TEXT;
+ALTER TABLE ai_quality_samples ADD COLUMN claimed_at TEXT;
+ALTER TABLE ai_quality_samples ADD COLUMN claim_expires_at TEXT;
+
+ALTER TABLE quality_reviews ADD COLUMN issue_codes_json TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE quality_reviews ADD COLUMN corrected_outcome_code TEXT;
+ALTER TABLE quality_reviews ADD COLUMN corrected_policy_code TEXT;
+ALTER TABLE quality_reviews ADD COLUMN idempotency_key TEXT;
+
+CREATE UNIQUE INDEX quality_reviews_idempotency_idx ON quality_reviews(idempotency_key);
+CREATE INDEX ai_quality_samples_work_idx
+  ON ai_quality_samples(state, claim_expires_at, selected_at, id);
+
+ALTER TABLE ai_queue_config_versions ADD COLUMN pause_reason TEXT;
+ALTER TABLE ai_queue_config_versions ADD COLUMN paused_at TEXT;
+
+ALTER TABLE ai_usage_daily ADD COLUMN eligible_reports INTEGER NOT NULL DEFAULT 0 CHECK (eligible_reports >= 0);
+ALTER TABLE ai_usage_daily ADD COLUMN waiting_for_reporter INTEGER NOT NULL DEFAULT 0 CHECK (waiting_for_reporter >= 0);
+ALTER TABLE ai_usage_daily ADD COLUMN human_review_requests INTEGER NOT NULL DEFAULT 0 CHECK (human_review_requests >= 0);
+ALTER TABLE ai_usage_daily ADD COLUMN appeals_filed INTEGER NOT NULL DEFAULT 0 CHECK (appeals_filed >= 0);
+ALTER TABLE ai_usage_daily ADD COLUMN appeal_reversals INTEGER NOT NULL DEFAULT 0 CHECK (appeal_reversals >= 0);
+ALTER TABLE ai_usage_daily ADD COLUMN invalid_outputs INTEGER NOT NULL DEFAULT 0 CHECK (invalid_outputs >= 0);
+ALTER TABLE ai_usage_daily ADD COLUMN provider_errors INTEGER NOT NULL DEFAULT 0 CHECK (provider_errors >= 0);
+ALTER TABLE ai_usage_daily ADD COLUMN timeouts INTEGER NOT NULL DEFAULT 0 CHECK (timeouts >= 0);

package/template/migrations/0011_analyst_presence.sql

@@ -0,0 +1,28 @@
+PRAGMA foreign_keys = ON;
+
+CREATE TABLE analyst_profiles (
+  actor_id TEXT PRIMARY KEY,
+  display_name TEXT NOT NULL,
+  email TEXT,
+  avatar_url TEXT,
+  avatar_color TEXT NOT NULL,
+  roles_json TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  last_authenticated_at TEXT NOT NULL
+);
+
+CREATE TABLE analyst_sessions (
+  id TEXT PRIMARY KEY,
+  actor_id TEXT NOT NULL REFERENCES analyst_profiles(actor_id) ON DELETE CASCADE,
+  activity_state TEXT NOT NULL DEFAULT 'online'
+    CHECK (activity_state IN ('online', 'viewing', 'editing', 'away')),
+  active_report_id TEXT REFERENCES reports(id) ON DELETE SET NULL,
+  connected_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL
+);
+
+CREATE INDEX analyst_sessions_presence_idx
+  ON analyst_sessions(last_seen_at DESC, actor_id, id);
+CREATE INDEX analyst_sessions_report_idx
+  ON analyst_sessions(active_report_id, last_seen_at DESC, id);

package/template/migrations/0012_queue_policies.sql

@@ -0,0 +1,87 @@
+PRAGMA foreign_keys = ON;
+
+ALTER TABLE queue_definitions ADD COLUMN description TEXT NOT NULL DEFAULT '';
+ALTER TABLE queue_definitions ADD COLUMN purpose TEXT NOT NULL DEFAULT 'reports'
+  CHECK (purpose IN ('reports', 'appeals', 'quality', 'operations'));
+ALTER TABLE queue_definitions ADD COLUMN status TEXT NOT NULL DEFAULT 'active'
+  CHECK (status IN ('active', 'paused', 'archived'));
+ALTER TABLE queue_definitions ADD COLUMN position INTEGER NOT NULL DEFAULT 100;
+ALTER TABLE queue_definitions ADD COLUMN active_version_id TEXT;
+ALTER TABLE queue_definitions ADD COLUMN created_by TEXT NOT NULL DEFAULT 'system';
+
+ALTER TABLE queue_versions ADD COLUMN management_mode TEXT NOT NULL DEFAULT 'human'
+  CHECK (management_mode IN ('human', 'ai', 'hybrid'));
+ALTER TABLE queue_versions ADD COLUMN routing_criteria_json TEXT NOT NULL DEFAULT '{"match":"all","conditions":[]}';
+ALTER TABLE queue_versions ADD COLUMN reviewer_instructions TEXT NOT NULL DEFAULT 'Review the report against the published customer policy.';
+ALTER TABLE queue_versions ADD COLUMN ai_instructions TEXT;
+ALTER TABLE queue_versions ADD COLUMN enrichment_requirements_json TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE queue_versions ADD COLUMN ai_bounds_json TEXT NOT NULL DEFAULT '{}';
+ALTER TABLE queue_versions ADD COLUMN retired_at TEXT;
+
+UPDATE queue_definitions
+SET purpose = CASE queue_kind
+  WHEN 'appeal' THEN 'appeals'
+  WHEN 'operations' THEN 'operations'
+  ELSE 'reports'
+END,
+position = CASE id
+  WHEN 'urgent-human' THEN 10
+  WHEN 'standard-human' THEN 20
+  WHEN 'low-priority-ai' THEN 30
+  WHEN 'appeals' THEN 40
+  ELSE 50
+END,
+description = CASE id
+  WHEN 'urgent-human' THEN 'Protected, uncertain, urgent, or high-impact reports requiring human review.'
+  WHEN 'standard-human' THEN 'General reports requiring a human decision.'
+  WHEN 'low-priority-ai' THEN 'Bounded low-priority automation with mandatory human fallback.'
+  WHEN 'appeals' THEN 'Human-only review of contested decisions.'
+  ELSE 'Delivery failures and operational recovery work.'
+END;
+
+UPDATE queue_versions
+SET management_mode = CASE
+  WHEN queue_id = 'low-priority-ai' THEN 'ai'
+  ELSE 'human'
+END,
+routing_criteria_json = CASE queue_id
+  WHEN 'urgent-human' THEN '{"match":"any","conditions":[{"field":"safeguard.requires_human","operator":"eq","value":true}]}'
+  WHEN 'low-priority-ai' THEN '{"match":"all","conditions":[{"field":"safeguard.requires_human","operator":"eq","value":false},{"field":"priority","operator":"lte","value":30}]}'
+  ELSE '{"match":"all","conditions":[]}'
+END,
+reviewer_instructions = CASE queue_id
+  WHEN 'urgent-human' THEN 'Review promptly. Treat the submission as an allegation, preserve uncertainty, and do not delegate the final decision to AI.'
+  WHEN 'standard-human' THEN 'Review the allegation and referenced evidence against the published customer policy. Record the evidence considered and rationale.'
+  WHEN 'appeals' THEN 'A human appeal reviewer must independently assess the contested decision and record a reasoned outcome.'
+  WHEN 'operations' THEN 'Investigate the failed job, preserve accepted reports, and record any recovery action.'
+  ELSE 'Review AI output and all referenced evidence before accepting or changing the recommendation.'
+END,
+ai_instructions = CASE queue_id
+  WHEN 'low-priority-ai' THEN 'Assess only eligible low-priority reports against the published policy. Escalate uncertainty, missing evidence, protected cases, failures, and out-of-bound outcomes to a human.'
+  ELSE NULL
+END,
+ai_bounds_json = CASE queue_id
+  WHEN 'low-priority-ai' THEN '{"allowed_outcomes":[],"confidence_threshold":0.85,"max_follow_up_turns":1,"autonomous_actions":false}'
+  ELSE '{}'
+END;
+
+UPDATE queue_definitions
+SET active_version_id = (
+  SELECT qv.id FROM queue_versions qv
+  WHERE qv.queue_id = queue_definitions.id AND qv.published_at IS NOT NULL
+  ORDER BY qv.version DESC LIMIT 1
+);
+
+CREATE INDEX queue_definitions_admin_idx
+  ON queue_definitions(purpose, status, position, name, id);
+CREATE INDEX queue_versions_policy_idx
+  ON queue_versions(queue_id, published_at DESC, version DESC, id);
+
+CREATE TABLE configuration_mutations (
+  idempotency_key TEXT PRIMARY KEY,
+  action TEXT NOT NULL,
+  actor_id TEXT NOT NULL,
+  target_id TEXT NOT NULL,
+  response_json TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);

package/template/migrations/0013_routing_agents.sql

@@ -0,0 +1,63 @@
+PRAGMA foreign_keys = ON;
+
+ALTER TABLE reports ADD COLUMN queue_version_id TEXT REFERENCES queue_versions(id);
+ALTER TABLE reports ADD COLUMN routing_agent_version_id TEXT;
+ALTER TABLE reports ADD COLUMN routing_reason_json TEXT;
+
+CREATE TABLE routing_agent_versions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  version INTEGER NOT NULL CHECK (version > 0),
+  enabled INTEGER NOT NULL DEFAULT 0 CHECK (enabled IN (0, 1)),
+  rollout_mode TEXT NOT NULL CHECK (rollout_mode IN ('off', 'shadow', 'active')),
+  provider TEXT NOT NULL DEFAULT 'workers_ai' CHECK (provider = 'workers_ai'),
+  model TEXT NOT NULL,
+  instructions TEXT NOT NULL,
+  candidate_queue_ids_json TEXT NOT NULL,
+  safeguard_queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  default_queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  confidence_threshold REAL NOT NULL CHECK (confidence_threshold BETWEEN 0 AND 1),
+  allowed_fields_json TEXT NOT NULL,
+  published_at TEXT NOT NULL,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL UNIQUE,
+  UNIQUE (installation_id, version)
+);
+
+CREATE INDEX routing_agent_versions_active_idx
+  ON routing_agent_versions(installation_id, published_at DESC, version DESC, id);
+
+CREATE TABLE routing_agent_runs (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  routing_agent_version_id TEXT NOT NULL REFERENCES routing_agent_versions(id),
+  background_job_id TEXT NOT NULL UNIQUE REFERENCES background_jobs(id),
+  status TEXT NOT NULL CHECK (status IN ('running', 'succeeded', 'failed', 'rejected', 'shadowed')),
+  candidate_queue_ids_json TEXT NOT NULL,
+  selected_queue_id TEXT REFERENCES queue_definitions(id),
+  confidence REAL,
+  needs_human INTEGER CHECK (needs_human IN (0, 1)),
+  rationale TEXT,
+  validation_errors_json TEXT NOT NULL DEFAULT '[]',
+  started_at TEXT NOT NULL,
+  finished_at TEXT
+);
+
+CREATE INDEX routing_agent_runs_report_idx
+  ON routing_agent_runs(report_id, started_at DESC, id DESC);
+
+INSERT INTO routing_agent_versions (
+  id, installation_id, version, enabled, rollout_mode, provider, model, instructions,
+  candidate_queue_ids_json, safeguard_queue_id, default_queue_id, confidence_threshold,
+  allowed_fields_json, published_at, created_by, created_at, idempotency_key
+) VALUES (
+  'report-router-v1', 'default', 1, 0, 'off', 'workers_ai',
+  '@cf/meta/llama-3.1-8b-instruct-fast',
+  'Choose only among the supplied eligible queue identifiers. Route uncertainty or protected cases to a human. Do not decide the report.',
+  '["urgent-human","standard-human","low-priority-ai"]',
+  'urgent-human', 'standard-human', 0.85,
+  '["reason_code","source","target_type","answers.details","trusted_facts"]',
+  strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), 'system', strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
+  'seed:report-router-v1'
+);

package/template/migrations/0014_webhook_enrichments.sql

@@ -0,0 +1,122 @@
+PRAGMA foreign_keys = ON;
+
+ALTER TABLE dead_letter_items RENAME TO dead_letter_items_v2;
+
+CREATE TABLE dead_letter_items (
+  id TEXT PRIMARY KEY,
+  fingerprint TEXT NOT NULL UNIQUE,
+  source_queue TEXT NOT NULL,
+  source_message_id TEXT NOT NULL,
+  job_type TEXT NOT NULL CHECK (job_type IN ('route_report', 'process_ai_report', 'run_enrichment', 'deliver_action', 'deliver_notification', 'invalid')),
+  job_id TEXT,
+  report_id TEXT REFERENCES reports(id),
+  outbox_id TEXT,
+  state TEXT NOT NULL DEFAULT 'open' CHECK (state IN ('open', 'acknowledged', 'resolved')),
+  error_code TEXT NOT NULL,
+  occurrence_count INTEGER NOT NULL DEFAULT 1 CHECK (occurrence_count > 0),
+  details_json TEXT NOT NULL DEFAULT '{}',
+  first_seen_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL,
+  resolved_at TEXT
+);
+
+INSERT INTO dead_letter_items (
+  id, fingerprint, source_queue, source_message_id, job_type, job_id, report_id, outbox_id,
+  state, error_code, occurrence_count, details_json, first_seen_at, last_seen_at, resolved_at
+)
+SELECT id, fingerprint, source_queue, source_message_id, job_type, job_id, report_id, outbox_id,
+  state, error_code, occurrence_count, details_json, first_seen_at, last_seen_at, resolved_at
+FROM dead_letter_items_v2;
+
+DROP TABLE dead_letter_items_v2;
+
+CREATE INDEX dead_letter_items_state_idx
+  ON dead_letter_items(state, last_seen_at DESC, id DESC);
+CREATE INDEX dead_letter_items_report_idx
+  ON dead_letter_items(report_id, last_seen_at DESC, id DESC);
+
+CREATE TABLE enrichment_definitions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  enrichment_key TEXT NOT NULL,
+  name TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'paused', 'archived')),
+  active_version_id TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (installation_id, enrichment_key)
+);
+
+CREATE TABLE enrichment_definition_versions (
+  id TEXT PRIMARY KEY,
+  definition_id TEXT NOT NULL REFERENCES enrichment_definitions(id) ON DELETE CASCADE,
+  version INTEGER NOT NULL CHECK (version > 0),
+  webhook_url TEXT NOT NULL,
+  secret_binding TEXT NOT NULL,
+  timeout_ms INTEGER NOT NULL CHECK (timeout_ms BETWEEN 250 AND 30000),
+  max_attempts INTEGER NOT NULL CHECK (max_attempts BETWEEN 1 AND 10),
+  ttl_seconds INTEGER NOT NULL CHECK (ttl_seconds BETWEEN 60 AND 2592000),
+  input_fields_json TEXT NOT NULL,
+  output_schema_json TEXT NOT NULL,
+  published_at TEXT NOT NULL,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (definition_id, version)
+);
+
+CREATE INDEX enrichment_definitions_admin_idx
+  ON enrichment_definitions(status, name, id);
+CREATE INDEX enrichment_definition_versions_idx
+  ON enrichment_definition_versions(definition_id, version DESC, id);
+
+CREATE TABLE enrichment_requests (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  queue_version_id TEXT NOT NULL REFERENCES queue_versions(id),
+  definition_version_id TEXT NOT NULL REFERENCES enrichment_definition_versions(id),
+  enrichment_key TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'processing', 'retrying', 'complete', 'failed')),
+  attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  next_attempt_at TEXT NOT NULL,
+  last_error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  completed_at TEXT,
+  UNIQUE (report_id, queue_version_id, enrichment_key)
+);
+
+CREATE INDEX enrichment_requests_due_idx
+  ON enrichment_requests(status, next_attempt_at, id);
+CREATE INDEX enrichment_requests_report_idx
+  ON enrichment_requests(report_id, status, id);
+
+CREATE TABLE enrichment_attempts (
+  id TEXT PRIMARY KEY,
+  enrichment_request_id TEXT NOT NULL REFERENCES enrichment_requests(id) ON DELETE CASCADE,
+  attempt_number INTEGER NOT NULL CHECK (attempt_number > 0),
+  request_nonce TEXT NOT NULL,
+  response_status INTEGER,
+  response_class TEXT NOT NULL,
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT NOT NULL,
+  UNIQUE (enrichment_request_id, attempt_number)
+);
+
+CREATE TABLE enrichment_results (
+  id TEXT PRIMARY KEY,
+  enrichment_request_id TEXT NOT NULL UNIQUE REFERENCES enrichment_requests(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  enrichment_key TEXT NOT NULL,
+  subject_reference TEXT NOT NULL,
+  data_json TEXT NOT NULL,
+  response_sha256 TEXT NOT NULL,
+  definition_version_id TEXT NOT NULL REFERENCES enrichment_definition_versions(id),
+  fetched_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL
+);
+
+CREATE INDEX enrichment_results_report_idx
+  ON enrichment_results(report_id, enrichment_key, expires_at DESC, id);

package/template/migrations/0015_queue_owned_ai.sql

@@ -0,0 +1,55 @@
+PRAGMA foreign_keys = ON;
+
+ALTER TABLE ai_queue_config_versions
+  ADD COLUMN queue_version_id TEXT REFERENCES queue_versions(id);
+
+CREATE UNIQUE INDEX ai_queue_config_queue_version_idx
+  ON ai_queue_config_versions(queue_version_id)
+  WHERE queue_version_id IS NOT NULL;
+
+UPDATE ai_queue_config_versions
+SET queue_version_id = (
+  SELECT q.active_version_id FROM queue_definitions q
+  WHERE q.id = ai_queue_config_versions.queue_id
+)
+WHERE id IN (
+  SELECT c.id FROM ai_queue_config_versions c
+  WHERE c.id = (
+    SELECT latest.id FROM ai_queue_config_versions latest
+    WHERE latest.queue_id = c.queue_id
+    ORDER BY latest.version DESC, latest.created_at DESC, latest.id DESC LIMIT 1
+  )
+);
+
+INSERT INTO ai_queue_config_versions (
+  id, queue_id, queue_version_id, version, mode, enabled, provider, model,
+  input_cost_microusd_per_million, output_cost_microusd_per_million,
+  prompt_version, policy_version_id, eligible_form_versions_json, eligible_sources_json,
+  eligible_reason_codes_json, eligible_target_types_json, allowed_fields_json, allowed_outcomes_json,
+  allowed_action_codes_json, allowed_template_ids_json, confidence_threshold, max_follow_up_turns,
+  max_wait_hours, daily_report_budget, daily_cost_budget_microusd, quality_sample_rate,
+  minimum_shadow_runs, minimum_quality_reviews, maximum_failure_rate, maximum_disagreement_rate,
+  fallback_queue_id, pause_state, published_at, created_by, created_at, idempotency_key
+)
+SELECT
+  qv.id || '-ai-runtime', qv.queue_id, qv.id, qv.version, qv.mode, 1, 'workers_ai',
+  '@cf/meta/llama-3.1-8b-instruct-fast', 0, 0, 'queue-policy-' || qv.id, 'general-policy-v1',
+  '["general-v1"]', '["signed_widget","public_page","server_api"]',
+  '["harassment","spam","other"]', '["message","profile","listing","account","file","transaction","service"]',
+  '["target.type","answers.details","evidence.references","enrichments"]',
+  CASE
+    WHEN json_array_length(COALESCE(json_extract(qv.ai_bounds_json, '$.allowedOutcomes'), json_extract(qv.ai_bounds_json, '$.allowed_outcomes'), '[]')) > 0
+      THEN COALESCE(json_extract(qv.ai_bounds_json, '$.allowedOutcomes'), json_extract(qv.ai_bounds_json, '$.allowed_outcomes'))
+    ELSE '["no_violation_found","out_of_scope","insufficient_information","escalate_to_human"]'
+  END,
+  '[]', '["ai-more-context-v1","ai-no-violation-v1","ai-out-of-scope-v1"]',
+  COALESCE(json_extract(qv.ai_bounds_json, '$.confidenceThreshold'), json_extract(qv.ai_bounds_json, '$.confidence_threshold'), 0.85),
+  COALESCE(json_extract(qv.ai_bounds_json, '$.maxFollowUpTurns'), json_extract(qv.ai_bounds_json, '$.max_follow_up_turns'), 0),
+  168, 100, 1000000, 0.1, 25, 10, 0.1, 0.1, qv.fallback_queue_id,
+  'ready', qv.published_at, qv.created_by, qv.created_at, 'queue-policy-runtime:' || qv.id
+FROM queue_versions qv
+WHERE qv.management_mode IN ('ai', 'hybrid') AND qv.mode != 'off'
+  AND qv.fallback_queue_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1 FROM ai_queue_config_versions c WHERE c.queue_version_id = qv.id
+  );