create-safest-tools 0.6.1 → 0.7.0

package/template/console/workflows/WorkflowStudio.tsx

@@ -2,9 +2,15 @@ import { useEffect, useMemo, useRef, useState, useSyncExternalStore, type FormEv
 import { readable } from "../lib/format";
 import { ApiRequestError, errorMessage, mutationHeaders, requestJson } from "../lib/http";
 import { getShellSnapshot, subscribeToShell } from "../shell/store";
+import { dispatchNavigation } from "../shell/events";
 import { announceWorkflowChanged, workflowEvents } from "./events";
 import { insertWorkflowNode, removeWorkflowNode, workflowNodeChoices } from "./graph";
 import { WorkflowCanvas } from "./WorkflowCanvas";
+import { compilePlaybook, playbookAuthority, type PlaybookGuide } from "../../shared/playbooks";
+import { PlaybookExamples } from "./PlaybookExamples";
+import { validateGuideInputs } from "./PlaybookFields";
+import { PlaybookRuns, PlaybookVersions } from "./PlaybookHistory";
+import { guideSteps, PlaybookGuideEditor, usePlaybookResources } from "./PlaybookGuideEditor";
 import type {
   JsonObject,
   QueueListItem,
@@ -56,12 +62,13 @@ function WorkflowConsole({ state }: { state: StudioConsoleState }) {
   return <><p><strong>{state.heading}</strong></p><p>{state.detail}</p></>;
 }
 
-function NodeInspector({ node, readOnly, busy, onApply, onRemove }: {
+function NodeInspector({ node, readOnly, busy, onApply, onRemove, onDirty }: {
   node: WorkflowNode | null;
   readOnly: boolean;
   busy: boolean;
   onApply: (node: WorkflowNode) => Promise<void>;
   onRemove: (node: WorkflowNode) => Promise<void>;
+  onDirty: (dirty: boolean) => void;
 }) {
   const [name, setName] = useState("");
   const [description, setDescription] = useState("");
@@ -74,6 +81,8 @@ function NodeInspector({ node, readOnly, busy, onApply, onRemove }: {
     setName(node?.name || ""); setDescription(node?.description || ""); setErrorPort(node?.error_port || "");
     setMapping(JSON.stringify(node?.input_mapping || {}, null, 2)); setConfig(JSON.stringify(node?.config || {}, null, 2)); setError("");
   }, [node?.id, node?.name, node?.description, node?.error_port, node?.input_mapping, node?.config]);
+  const dirty = Boolean(node && !readOnly && (name !== (node.name || "") || description !== (node.description || "") || errorPort !== (node.error_port || "") || mapping !== JSON.stringify(node.input_mapping || {}, null, 2) || config !== JSON.stringify(node.config || {}, null, 2)));
+  useEffect(() => { onDirty(dirty); return () => onDirty(false); }, [dirty, onDirty]);
 
   if (!node) return <div className="node-inspector-empty"><h3>Select a step</h3><p>Review its inputs, retries, and failure path.</p></div>;
   const submit = async (event: FormEvent<HTMLFormElement>): Promise<void> => {
@@ -110,6 +119,18 @@ export function WorkflowStudio() {
   const [openWarning, setOpenWarning] = useState("");
   const [workflow, setWorkflow] = useState<WorkflowDetail | null>(null);
   const [graph, setGraph] = useState<WorkflowGraph | null>(null);
+  const [guideDraft, setGuideDraft] = useState<PlaybookGuide | null>(null);
+  const [studioView, setStudioView] = useState<"guide" | "workflow" | "test" | "runs" | "versions">("workflow");
+  const [guideStep, setGuideStep] = useState(0);
+  const [lifecyclePending, setLifecyclePending] = useState(false);
+  const [exampleDirty, setExampleDirty] = useState(false);
+  const [nodeDirty, setNodeDirty] = useState(false);
+  const [loadEpoch, setLoadEpoch] = useState(0);
+  const [conflict, setConflict] = useState(false);
+  const [showCheckDetails, setShowCheckDetails] = useState<boolean | null>(null);
+  const savingRef = useRef(false);
+  const [lifecycleEpoch, setLifecycleEpoch] = useState(0);
+  const { resources, error: resourceError, reload: reloadResources } = usePlaybookResources(Boolean(workflowId));
   const [selectedNodeId, setSelectedNodeId] = useState<string | null>(null);
   const [queues, setQueues] = useState<QueueListItem[]>([]);
   const [authorityMode, setAuthorityMode] = useState<WorkflowAuthorityMode>("assist");
@@ -126,23 +147,34 @@ export function WorkflowStudio() {
   const canPublish = shell.session?.permissions.publishWorkflows === true;
   const canPin = shell.session?.permissions.manageWorkflowPins === true;
   const readOnly = Boolean(workflow && !workflow.draft);
-  const busy = loading || saving || Boolean(action);
+  const busy = loading || saving || Boolean(action) || lifecyclePending;
+  const guideDirty = JSON.stringify(guideDraft) !== JSON.stringify(graph?.playbook ?? null);
+  const graphReadOnly = readOnly || graph?.playbook?.editing_mode === "guided";
+  const graphJsonDirty = Boolean(advanced && !graphReadOnly && graph && graphJson !== JSON.stringify(graph, null, 2));
+  const unsaved = guideDirty || exampleDirty || nodeDirty || graphJsonDirty;
   const selectedNode = useMemo(() => graph?.nodes.find((node) => node.id === selectedNodeId) ?? null, [graph, selectedNodeId]);
 
   const clear = (): void => {
-    setWorkflowId(null); setOpenWarning(""); setWorkflow(null); setGraph(null); setSelectedNodeId(null); setQueues([]); setLoading(false); setSaving(false); setAction(""); setError(""); setAdvanced(false); setGraphJson(""); setPinOpen(false);
+    setNodeDirty(false); setConflict(false); setExampleDirty(false); setLifecyclePending(false); setWorkflowId(null); setOpenWarning(""); setWorkflow(null); setGraph(null); setSelectedNodeId(null); setQueues([]); setLoading(false); setSaving(false); setAction(""); setError(""); setAdvanced(false); setGraphJson(""); setPinOpen(false);
   };
-  const close = (): void => { if (!busy) clear(); };
+  const close = (): void => { if (!busy && (!unsaved || window.confirm("Discard the unsaved changes?"))) clear(); };
+  useEffect(() => setGuideDraft(graph?.playbook ?? null), [graph]);
+  useEffect(() => {
+    const unload = (event: BeforeUnloadEvent) => { if (workflowId && (unsaved || busy)) event.preventDefault(); };
+    window.addEventListener("beforeunload", unload);
+    return () => window.removeEventListener("beforeunload", unload);
+  }, [workflowId, unsaved, busy]);
 
   useEffect(() => {
     const openStudio = (event: Event): void => {
       if (!(event instanceof CustomEvent) || typeof event.detail?.workflowId !== "string") return;
+      if (busy || (unsaved && !window.confirm("Discard the unsaved changes before opening another playbook?"))) return;
       setOpenWarning(typeof event.detail.warning === "string" ? event.detail.warning : "");
       setWorkflowId(event.detail.workflowId);
     };
     window.addEventListener(workflowEvents.openStudio, openStudio);
     return () => window.removeEventListener(workflowEvents.openStudio, openStudio);
-  }, []);
+  }, [busy, unsaved]);
   useEffect(() => {
     const dialog = dialogRef.current;
     if (!dialog) return;
@@ -150,13 +182,16 @@ export function WorkflowStudio() {
     if (!workflowId && dialog.open) dialog.close();
   }, [workflowId]);
   useEffect(() => {
-    if (workflowId && shell.currentView !== "workflows" && !busy) clear();
-  }, [shell.currentView, workflowId, busy]);
+    if (workflowId && shell.currentView !== "workflows" && !busy) {
+      if (unsaved && !window.confirm("Discard the unsaved playbook changes before leaving?")) dispatchNavigation("workflows");
+      else clear();
+    }
+  }, [shell.currentView, workflowId, busy, unsaved]);
   useEffect(() => {
     if (!workflowId) return;
     let active = true;
     const load = async (): Promise<void> => {
-      setLoading(true); setError(""); setWorkflow(null); setGraph(null); setAdvanced(false); setPinOpen(false);
+      setLoading(true); setError(""); setConflict(false); setNodeDirty(false); setExampleDirty(false); setWorkflow(null); setGraph(null); setAdvanced(false); setPinOpen(false);
       try {
         const [response, queueResponse] = await Promise.all([
           requestJson<WorkflowResponse>(`/v1/admin/workflows/${encodeURIComponent(workflowId)}`),
@@ -173,18 +208,21 @@ export function WorkflowStudio() {
         if (!nextGraph) throw new Error("This workflow has no draft or published graph to open.");
         const availableQueues = (queueResponse.queues || []).filter((queue) => queue.status === "active");
         setWorkflow(detail); setGraph(structuredClone(nextGraph)); setGraphJson(JSON.stringify(nextGraph, null, 2));
+        setStudioView(nextGraph.playbook ? "guide" : "workflow"); setGuideStep(0);
         setSelectedNodeId(nextGraph.entry_node_id || nextGraph.nodes[0]?.id || null); setQueues(availableQueues);
-        setPinQueueId(availableQueues[0]?.id || ""); setAuthorityMode(detail.activeVersion?.authorityMode || "assist");
+        setPinQueueId(nextGraph.playbook?.review.queue_id || availableQueues[0]?.id || ""); setAuthorityMode(nextGraph.playbook ? playbookAuthority(nextGraph.playbook) : detail.activeVersion?.authorityMode || "assist");
+        setPinMode(nextGraph.playbook?.rollout === "observe" ? "shadow" : "primary");
         setConsoleState(openWarning ? { kind: "message", heading: "Workflow created with a warning", detail: openWarning } : validationState(detail, "Stored validation"));
       } catch (cause) { if (active) setError(errorMessage(cause, "The workflow could not be opened.")); }
       finally { if (active) setLoading(false); }
     };
     void load();
     return () => { active = false; };
-  }, [workflowId, openWarning]);
+  }, [workflowId, openWarning, loadEpoch]);
 
   const saveGraph = async (nextGraph: WorkflowGraph): Promise<boolean> => {
-    if (!workflowId || !workflow?.draft || readOnly) return false;
+    if (!workflowId || !workflow?.draft || readOnly || savingRef.current) return false;
+    savingRef.current = true;
     setSaving(true); setError("");
     try {
       const result = await requestJson<WorkflowSaveResponse>(`/v1/admin/workflows/${encodeURIComponent(workflowId)}/draft`, {
@@ -195,8 +233,8 @@ export function WorkflowStudio() {
       setConsoleState({ kind: "validation", heading: "Draft saved and checked", validation: result.validation });
       announceWorkflowChanged();
       return true;
-    } catch (cause) { setError(errorMessage(cause, "The workflow draft could not be saved.")); return false; }
-    finally { setSaving(false); }
+    } catch (cause) { setConflict(Boolean(errorResponse(cause, 409))); setError(errorMessage(cause, "The workflow draft could not be saved. Your changes are still here.")); return false; }
+    finally { savingRef.current = false; setSaving(false); }
   };
 
   const fetchValidation = async (): Promise<WorkflowValidationResponse | null> => {
@@ -211,16 +249,24 @@ export function WorkflowStudio() {
   };
   const fetchTest = async (): Promise<{ fixtureName: string; result: WorkflowTestResponse } | null> => {
     if (!workflowId) return null;
-    const fixture = workflow?.fixtures?.[0];
-    if (!fixture) throw new Error("Add a server-recorded fixture before publishing this workflow.");
-    try {
-      const result = await requestJson<WorkflowTestResponse>(`/v1/admin/workflows/${encodeURIComponent(workflowId)}/test`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ fixture_id: fixture.id }) });
-      return { fixtureName: fixture.name, result };
-    } catch (cause) {
-      const failed = errorResponse<WorkflowTestResponse>(cause, 422);
-      if (failed?.status) return { fixtureName: fixture.name, result: failed };
-      throw cause;
+    const saved = await requestJson<{ fixtures: { id: string; name: string }[] }>(`/v1/admin/workflows/${encodeURIComponent(workflowId)}/fixtures`);
+    const fixtures = graph?.playbook ? saved.fixtures : saved.fixtures.slice(0, 1);
+    if (!fixtures?.length) throw new Error("Add a server-recorded example before publishing this playbook.");
+    let last: { fixtureName: string; result: WorkflowTestResponse } | null = null;
+    let firstFailure: { fixtureName: string; result: WorkflowTestResponse } | null = null;
+    for (const fixture of fixtures) {
+      try {
+        const result = await requestJson<WorkflowTestResponse>(`/v1/admin/workflows/${encodeURIComponent(workflowId)}/test`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ fixture_id: fixture.id }) });
+        last = { fixtureName: fixture.name, result };
+      } catch (cause) {
+        const failed = errorResponse<WorkflowTestResponse>(cause, 422);
+        if (failed?.status) { firstFailure ??= { fixtureName: fixture.name, result: failed }; last = { fixtureName: fixture.name, result: failed }; }
+        else throw cause;
+      }
     }
+    setLifecycleEpoch(value => value + 1);
+    if (firstFailure) return firstFailure;
+    return last ? { ...last, fixtureName: graph?.playbook ? `${fixtures.length} examples (last: ${last.fixtureName})` : last.fixtureName } : null;
   };
   const validate = async (): Promise<void> => {
     setAction("validate"); setError("");
@@ -241,7 +287,7 @@ export function WorkflowStudio() {
     finally { setAction(""); }
   };
   const publish = async (): Promise<void> => {
-    if (!workflowId || !workflow?.draft || !canPublish) return;
+    if (!workflowId || !workflow?.draft || !canPublish || unsaved) return;
     setAction("publish"); setError("");
     try {
       const validation = await fetchValidation();
@@ -257,8 +303,8 @@ export function WorkflowStudio() {
         method: "POST", headers: mutationHeaders(), body: JSON.stringify({ expected_revision: workflow.draft.revision, authority_mode: authorityMode, test_evidence: { test_run_id: tested.result.testRunId } }),
       });
       setWorkflow((current) => current ? { ...current, activeVersionId: result.versionId, activeVersion: { id: result.versionId, version: result.version, authorityMode, publishedAt: new Date().toISOString(), bundleDigest: result.bundleDigest } } : current);
-      setConsoleState({ kind: "message", heading: `Published version ${result.version}`, detail: `Bundle ${result.bundleDigest}. Pin this version to a queue when you are ready to use it.` });
-      setPinOpen(true); announceWorkflowChanged();
+      setConsoleState({ kind: "message", heading: `Published version ${result.version}`, detail: graph?.playbook ? "The tested version is preserved. Choose a queue below to activate it for new cases." : `Bundle ${result.bundleDigest}. Pin this version to a queue when you are ready to use it.` });
+      setLifecycleEpoch(value => value + 1); if (graph?.playbook) { setPinOpen(false); setStudioView("versions"); } else setPinOpen(true); announceWorkflowChanged();
     } catch (cause) { setError(errorMessage(cause, "The workflow could not be published.")); }
     finally { setAction(""); }
   };
@@ -278,7 +324,7 @@ export function WorkflowStudio() {
     if (!graph) return;
     const next = structuredClone(graph);
     next.nodes = next.nodes.map((candidate) => candidate.id === node.id ? node : candidate);
-    await saveGraph(next);
+    if (!await saveGraph(next)) throw new Error("The step could not be saved. Your edits are still here. Check the message below before retrying.");
   };
   const removeNode = async (node: WorkflowNode): Promise<void> => {
     if (!graph || !window.confirm(`Remove “${node.name}” and reconnect its surrounding steps?`)) return;
@@ -286,7 +332,7 @@ export function WorkflowStudio() {
     if (await saveGraph(next)) setSelectedNodeId(next.entry_node_id || next.nodes[0]?.id || null);
   };
   const addNode = async (kind: WorkflowNode["kind"], name: string): Promise<void> => {
-    if (!graph) return;
+    if (!graph || graphReadOnly) return;
     const inserted = insertWorkflowNode(graph, kind, name, queues[0]?.id);
     if (await saveGraph(inserted.graph)) setSelectedNodeId(inserted.nodeId);
   };
@@ -300,32 +346,55 @@ export function WorkflowStudio() {
     } catch (cause) { setError(errorMessage(cause, "The graph JSON is invalid.")); }
   };
 
+  const compactChecks = !pinOpen && (showCheckDetails === false || (showCheckDetails === null && (unsaved || (consoleState.kind === "validation" && consoleState.validation.valid && !consoleState.validation.warnings?.length))));
+  useEffect(() => setShowCheckDetails(null), [consoleState]);
+
   const subtitle = workflow?.draft
     ? `${workflow.activeVersion ? `Published v${workflow.activeVersion.version} · ` : ""}Draft revision ${workflow.draft.revision}`
     : workflow?.activeVersion ? `Published v${workflow.activeVersion.version} · read-only contract` : "Loading workflow…";
   return (
-    <dialog ref={dialogRef} className="studio-dialog workflow-studio-dialog" aria-labelledby="workflow-studio-title" onCancel={(event) => { event.preventDefault(); close(); }} data-react-slice="workflow-studio">
+    <dialog ref={dialogRef} className={`studio-dialog workflow-studio-dialog${graph?.playbook ? " has-playbook" : ""}`} aria-labelledby="workflow-studio-title" onCancel={(event) => { event.preventDefault(); close(); }} data-react-slice="workflow-studio">
       <div className="studio-toolbar">
         <div><button ref={closeRef} className="icon-button" type="button" aria-label="Close workflow studio" disabled={busy} onClick={close}>←</button><div><h2 id="workflow-studio-title">{workflow?.name || (loading ? "Loading workflow…" : "Workflow studio")}</h2><small>{subtitle}</small></div></div>
         <div className="studio-actions">
-          <label className="studio-authority">Authority<select value={authorityMode} disabled={busy || readOnly} onChange={(event) => setAuthorityMode(event.currentTarget.value as WorkflowAuthorityMode)}><option value="off">Off</option><option value="shadow">Shadow</option><option value="assist">Assist</option><option value="bounded_auto">Bounded auto</option></select></label>
-          <span className="save-state">{saving ? "Saving…" : workflow?.draft ? "All changes saved" : "Read-only"}</span>
-          <button className="secondary" type="button" disabled={busy || readOnly || !workflow} onClick={() => void validate()}>{action === "validate" ? "Checking…" : "Check"}</button>
-          <button className="secondary" type="button" disabled={busy || readOnly || !workflow} onClick={() => void test()}>{action === "test" ? "Testing…" : "Test"}</button>
-          {canPublish ? <button className="primary" type="button" disabled={busy || readOnly || !workflow} onClick={() => void publish()}>{action === "publish" ? "Publishing…" : "Publish"}</button> : null}
-          {canPin ? <button className="secondary" type="button" disabled={busy || !workflow?.activeVersionId} onClick={() => setPinOpen((value) => !value)}>Pin to queue</button> : null}
+          <label className="studio-authority">{graph?.playbook ? "Rollout" : "Authority"}<select value={authorityMode} disabled={busy || readOnly || Boolean(graph?.playbook)} onChange={(event) => setAuthorityMode(event.currentTarget.value as WorkflowAuthorityMode)}><option value="off">Off</option><option value="shadow">Observe</option><option value="assist">Assist</option><option value="bounded_auto">Automate selected decisions</option></select></label>
+          <span className="save-state">{saving ? "Saving…" : nodeDirty ? "Unsaved step changes" : graphJsonDirty ? "Unsaved graph changes" : exampleDirty ? "Unsaved example changes" : guideDirty ? "Unsaved guide changes" : workflow?.draft ? "All changes saved" : "Read-only"}</span>
+          <button className="secondary" type="button" disabled={busy || readOnly || !workflow || unsaved} onClick={() => void validate()}>{action === "validate" ? "Checking…" : "Check"}</button>
+          <button className="secondary" type="button" disabled={busy || readOnly || !workflow || unsaved} onClick={() => void test()}>{action === "test" ? "Testing…" : graph?.playbook ? "Run examples" : "Run test"}</button>
+          {canPublish ? <button className="primary" type="button" disabled={busy || readOnly || !workflow || unsaved} onClick={() => void publish()}>{action === "publish" ? "Publishing…" : "Publish"}</button> : null}
+          {canPin ? <button className="secondary" type="button" disabled={busy || !workflow?.activeVersionId} onClick={() => graph?.playbook ? setStudioView("versions") : setPinOpen((value) => !value)}>{graph?.playbook ? "Activation" : "Pin to queue"}</button> : null}
         </div>
       </div>
       {loading ? <div className="workflow-studio-loading"><div className="skeleton-block" role="status" aria-label="Loading workflow studio" /></div> : graph && workflow ? <>
+        <div className="playbook-view-switch" aria-label="Playbook views">{([...(graph.playbook ? ["guide" as const] : []), "workflow", "test", ...(shell.session?.permissions.readRuns ? ["runs" as const] : []), "versions"] as const).map(view => <button type="button" key={view} aria-pressed={studioView === view} disabled={busy || (unsaved && studioView !== view)} onClick={() => setStudioView(view)}>{readable(view)}</button>)}<span>One plan, from draft to outcome</span></div>
+        {studioView === "test" ? <PlaybookExamples workflowId={workflowId!} graph={graph} graphDigest={workflow.draft?.graphDigest} epoch={lifecycleEpoch} disabled={busy || guideDirty} readOnly={readOnly} onPending={setLifecyclePending} onDirty={setExampleDirty} onChanged={() => { announceWorkflowChanged(); }} onRun={() => void test()} /> : null}
+        {studioView === "runs" ? <PlaybookRuns workflowId={workflowId!} onOpenCase={clear} /> : null}
+        {studioView === "versions" ? <PlaybookVersions workflowId={workflowId!} epoch={lifecycleEpoch} queues={queues} defaultQueueId={pinQueueId} canActivate={canPin} disabled={busy} onPending={setLifecyclePending} onActivated={message => { setPinOpen(false); setConsoleState({ kind: "pin", heading: "Activation updated", detail: message }); }} /> : null}
+        {studioView === "guide" && guideDraft ? <section className="playbook-guide-panel">
+          <nav className="playbook-section-nav" aria-label="Guide sections">{guideSteps.map((label, index) => <button type="button" key={label} aria-current={guideStep === index ? "step" : undefined} onClick={() => setGuideStep(index)}><span>{String(index + 1).padStart(2, "0")}</span>{label}</button>)}</nav>
+          <div className="playbook-guide-content">
+            {guideDraft.editing_mode === "advanced" ? <div className="playbook-callout"><strong>This playbook has an advanced workflow.</strong><p>The guide is preserved for reference. Open Workflow to inspect or edit the actual steps.</p></div> : null}
+            <PlaybookGuideEditor value={guideDraft} onChange={setGuideDraft} step={guideStep} resources={resources} disabled={busy || readOnly || guideDraft.editing_mode === "advanced"} />
+            {resourceError ? <p role="alert">{resourceError} <button type="button" className="text-button" onClick={reloadResources}>Retry</button></p> : null}
+            {guideDraft.editing_mode === "guided" && !readOnly ? <div className="playbook-guide-save"><span>{guideDirty ? "Save before testing or switching to the workflow." : "Guide and workflow are in sync."}</span><button className="secondary" type="button" disabled={busy || !guideDirty} onClick={() => setGuideDraft(graph.playbook ?? null)}>Discard changes</button><button className="primary" type="button" disabled={busy || !guideDirty} onClick={() => {
+              try { validateGuideInputs(guideDraft, resources); const next = compilePlaybook(guideDraft); void saveGraph(next).then(saved => { if (saved) { setAuthorityMode(playbookAuthority(next.playbook)); setPinMode(next.playbook.rollout === "observe" ? "shadow" : "primary"); setPinQueueId(next.playbook.review.queue_id); } }); }
+              catch (cause) { setError(errorMessage(cause, "Check the playbook fields before saving.")); }
+            }}>Save guide</button></div> : null}
+          </div>
+        </section> : null}
+        <div className="studio-workflow-view" hidden={studioView !== "workflow"}>
+        {graph.playbook?.editing_mode === "guided" ? <div className="playbook-callout"><strong>This workflow is generated from the guide.</strong><p>Inspect any step below. Enabling advanced editing preserves this graph and makes the guide read-only.</p><button className="secondary" type="button" disabled={busy || readOnly} onClick={() => { const next = structuredClone(graph); if (next.playbook) next.playbook.editing_mode = "advanced"; void saveGraph(next); }}>Enable advanced editing</button></div> : null}
         <div className="studio-body">
-          <aside className="node-palette"><h3>Add a step</h3><p>Choose a step. Use Advanced graph for branches or parallel paths.</p><div className="node-palette-list">{workflowNodeChoices.map((choice) => <button className="palette-button" type="button" disabled={busy || readOnly} onClick={() => void addNode(choice.kind, choice.name)} key={choice.kind}><i className={choice.tone} /><span><strong>{choice.name}</strong><small>{choice.detail}</small></span></button>)}</div><button className="text-button" type="button" disabled={busy} onClick={() => { setAdvanced((value) => !value); setGraphJson(JSON.stringify(graph, null, 2)); }}>{advanced ? "Hide advanced graph" : "Advanced graph JSON"}</button></aside>
-          <main className="workflow-canvas-shell"><div className="canvas-legend"><span><i />Read-only</span><span><i className="human" />Human</span><span><i className="action" />Action</span></div><WorkflowCanvas graph={graph} selectedNodeId={selectedNodeId} onSelect={setSelectedNodeId} /></main>
-          <aside className="node-inspector"><NodeInspector node={selectedNode} readOnly={readOnly} busy={busy} onApply={applyNode} onRemove={removeNode} /></aside>
+          <aside className="node-palette"><h3>Add a step</h3><p>Choose a step. Use Advanced graph for branches or parallel paths.</p><div className="node-palette-list">{workflowNodeChoices.map((choice) => <button className="palette-button" type="button" disabled={busy || graphReadOnly || unsaved} onClick={() => void addNode(choice.kind, choice.name)} key={choice.kind}><i className={choice.tone} /><span><strong>{choice.name}</strong><small>{choice.detail}</small></span></button>)}</div><button className="text-button" type="button" disabled={busy || nodeDirty} onClick={() => { if (graphJsonDirty && !window.confirm("Discard the unsaved graph JSON?")) return; setAdvanced((value) => !value); setGraphJson(JSON.stringify(graph, null, 2)); }}>{advanced ? "Hide advanced graph" : "Advanced graph JSON"}</button></aside>
+          <main className="workflow-canvas-shell"><div className="canvas-legend"><span><i />Read-only</span><span><i className="human" />Human</span><span><i className="action" />Action</span></div><WorkflowCanvas graph={graph} selectedNodeId={selectedNodeId} onSelect={id => { if (id !== selectedNodeId && nodeDirty && !window.confirm("Discard the unsaved step changes?")) return; setSelectedNodeId(id); }} /></main>
+          <aside className="node-inspector"><NodeInspector node={selectedNode} readOnly={graphReadOnly} busy={busy || graphJsonDirty} onApply={applyNode} onRemove={removeNode} onDirty={setNodeDirty} /></aside>
+        </div>
+        {advanced ? <section className="graph-json-editor"><div><h3>Advanced graph JSON</h3><p>Edit branches, parallel groups, and typed mappings.</p></div><textarea aria-label="Workflow graph JSON" spellCheck={false} readOnly={graphReadOnly || busy || nodeDirty} value={graphJson} onChange={(event) => setGraphJson(event.currentTarget.value)} />{!graphReadOnly ? <button className="secondary" type="button" disabled={busy || nodeDirty || !graphJsonDirty} onClick={() => void applyGraphJson()}>Apply JSON</button> : null}</section> : null}
         </div>
-        {advanced ? <section className="graph-json-editor"><div><h3>Advanced graph JSON</h3><p>Edit branches, parallel groups, and typed mappings.</p></div><textarea aria-label="Workflow graph JSON" spellCheck={false} readOnly={readOnly || busy} value={graphJson} onChange={(event) => setGraphJson(event.currentTarget.value)} />{!readOnly ? <button className="secondary" type="button" disabled={busy} onClick={() => void applyGraphJson()}>Apply JSON</button> : null}</section> : null}
       </> : null}
-      <section className="studio-console" aria-label="Checks and test results"><div className="console-head"><strong>Checks and test results</strong><span>{workflow?.draft?.validationStatus ? readable(workflow.draft.validationStatus) : readOnly ? "Published" : "Not checked"}</span></div><div className="console-output"><WorkflowConsole state={consoleState} />{pinOpen ? <form className="pin-control" onSubmit={(event) => void pin(event)}><label>Queue<select required disabled={busy} value={pinQueueId} onChange={(event) => setPinQueueId(event.currentTarget.value)}><option value="">Select a queue</option>{queues.map((queue) => <option value={queue.id} key={queue.id}>{queue.name}</option>)}</select></label><label>Mode<select disabled={busy} value={pinMode} onChange={(event) => setPinMode(event.currentTarget.value as "primary" | "shadow")}><option value="primary">Primary</option><option value="shadow">Shadow</option></select></label><button className="primary" type="submit" disabled={busy || !pinQueueId}>{action === "pin" ? "Pinning…" : "Pin published version"}</button></form> : null}</div></section>
+      <section className={`studio-console${compactChecks ? " compact-checks" : ""}`} hidden={Boolean(conflict || (graph?.playbook && studioView === "test" && !pinOpen && (consoleState.kind === "test" || (consoleState.kind === "validation" && consoleState.validation.valid))))} aria-label="Checks and test results"><div className="console-head"><strong>Checks and test results</strong><button type="button" className="text-button mobile-check-toggle" aria-expanded={!compactChecks} onClick={() => setShowCheckDetails(compactChecks)}>{compactChecks ? "Show details" : "Hide details"}</button><span>{unsaved ? "Unsaved draft" : workflow?.draft?.validationStatus ? readable(workflow.draft.validationStatus) : readOnly ? "Published" : "Not checked"}</span></div><div className="console-output" tabIndex={0} role="region" aria-label="Detailed test results">{unsaved ? <p>Save your edits before checking or publishing this draft. Previous results describe the saved revision.</p> : <WorkflowConsole state={consoleState} />}{pinOpen ? <form className="pin-control" onSubmit={(event) => void pin(event)}><label>Queue<select required disabled={busy} value={pinQueueId} onChange={(event) => setPinQueueId(event.currentTarget.value)}><option value="">Select a queue</option>{queues.map((queue) => <option value={queue.id} key={queue.id}>{queue.name}</option>)}</select></label><label>Mode<select disabled={busy} value={pinMode} onChange={(event) => setPinMode(event.currentTarget.value as "primary" | "shadow")}><option value="primary">Primary</option><option value="shadow">Shadow</option></select></label><button className="primary" type="submit" disabled={busy || !pinQueueId}>{action === "pin" ? "Pinning…" : "Pin published version"}</button></form> : null}</div></section>
       <p className="error studio-error" role="alert">{error}</p>
+      {conflict ? <div className="playbook-callout studio-conflict"><strong>Another saved revision is available.</strong><p>Your local edits are still in the editor. Keep or copy them before replacing them with the saved revision.</p><button type="button" className="secondary" disabled={busy} onClick={() => { if (!unsaved || window.confirm("Discard your local edits and load the latest saved revision?")) setLoadEpoch(value => value + 1); }}>Reload saved revision</button></div> : null}
     </dialog>
   );
 }

package/template/console/workflows/WorkflowWorkspace.tsx

@@ -5,6 +5,7 @@ import { errorMessage, requestJson } from "../lib/http";
 import { getShellSnapshot, subscribeToShell } from "../shell/store";
 import { openWorkflowCreate, openWorkflowStudio, workflowEvents } from "./events";
 import type { WorkflowListResponse, WorkflowSummary } from "./types";
+import { openPlaybookCreate } from "./CreatePlaybookDialog";
 
 function WorkflowCard({ workflow }: { workflow: WorkflowSummary }) {
   const version = workflow.activeVersion?.version;
@@ -16,15 +17,15 @@ function WorkflowCard({ workflow }: { workflow: WorkflowSummary }) {
         <span className={`badge${workflow.status !== "active" ? " urgent" : ""}`}>{version ? `v${version}` : "Draft"}</span>
       </div>
       <h3>{workflow.name}</h3>
-      <p>{workflow.description || "No description yet."}</p>
+      <p>{workflow.playbook?.summary || workflow.description || "No description yet."}</p>
       <div className="object-card-meta">
-        <div><span>Purpose</span><strong>{readable(workflow.purpose)}</strong></div>
+        <div><span>Design</span><strong>{workflow.playbook?.editing_mode === "guided" ? "Guided playbook" : "Advanced workflow"}</strong></div>
         <div><span>Authority</span><strong>{readable(authority || "Not published")}</strong></div>
         <div><span>Queue pins</span><strong>{workflow.activePinCount || 0}</strong></div>
       </div>
       <div className="object-card-footer">
         <small>{workflow.draft ? `Draft revision ${workflow.draft.revision}` : "Published contract"}</small>
-        <button className="secondary" type="button" onClick={() => openWorkflowStudio(workflow.id)}>Open studio</button>
+        <button className="secondary" type="button" onClick={() => openWorkflowStudio(workflow.id)}>{workflow.playbook ? "Open playbook" : "Open studio"}</button>
       </div>
     </article>
   );
@@ -64,16 +65,17 @@ export function WorkflowWorkspace() {
 
   return (
     <div className="page-stack" data-react-slice="workflow-workspace">
-      <PageHeader titleId="workflows-title" title="Workflows" description="Build and publish the path each report follows.">
+      <PageHeader titleId="workflows-title" title="Playbooks" description="Teach Safest how your team resolves a situation, from evidence to a confirmed outcome.">
         <div className="surface-buttons">
           <button className="secondary" type="button" disabled={loading || refreshing || !canManage} onClick={() => void load(true)}>{refreshing ? "Refreshing…" : "Refresh"}</button>
-          <button className="primary" type="button" disabled={!canManage} onClick={openWorkflowCreate}>New workflow</button>
+          <button className="secondary" type="button" disabled={!canManage} onClick={openWorkflowCreate}>New workflow</button>
+          <button className="primary" type="button" disabled={!canManage} onClick={openPlaybookCreate}>New playbook</button>
         </div>
       </PageHeader>
-      <div className="safety-boundary"><strong>Read-only steps inspect data. Actions change it.</strong><span>Publishing checks every failure path.</span></div>
+      <div className="playbook-library-intro"><div><span className="eyebrow">Your team's judgement, made repeatable</span><h2>A clear plan for every kind of case.</h2><p>Start with a situation and your policy. Choose the evidence Safest can gather, who reviews the decision, and what your product should do next.</p></div><div className="playbook-library-steps"><span>01 &nbsp; Describe the situation</span><span>02 &nbsp; Set the boundaries</span><span>03 &nbsp; Test with examples</span></div></div>
       <div className="object-grid workflow-list" aria-busy={loading || refreshing}>
         {loading ? <><div className="skeleton-card" /><div className="skeleton-card" /></> : workflows.length ? workflows.map((workflow) => <WorkflowCard workflow={workflow} key={workflow.id} />) : error ? null : (
-          <div className="empty-product"><span aria-hidden="true">⌘</span><h2>No workflows yet</h2><p>Start with human review and add automation when you need it.</p>{canManage ? <button className="primary" type="button" onClick={openWorkflowCreate}>New workflow</button> : null}</div>
+          <div className="empty-product"><span aria-hidden="true">⌘</span><h2>Your first playbook starts here</h2><p>Choose a starter and adapt it to the way your team works.</p>{canManage ? <button className="primary" type="button" onClick={openPlaybookCreate}>New playbook</button> : null}</div>
         )}
       </div>
       <p className="error surface-error" role="alert">{error}</p>

package/template/console/workflows/templates.ts

@@ -39,7 +39,7 @@ export function workflowTemplate(template: WorkflowTemplate, purpose: WorkflowPu
       node("related-check", "enrichment", "Related reports", 270, 480, { component_version_id: "select-a-published-component-version" }, { target: "report.target.reference" }),
       node("join", "join", "Evidence ready", 520, 260, { required_ports: ["url", "account"], optional_ports: ["related"] }),
       node("review", "human_task", "Human review", 760, 90, { queue_id: "select-a-queue", response_schema: { type: "object" } }),
-      node("decision", "decision", "Record decision", 760, 260, { policy_version_id: "select-a-policy-version" }, { decision_code: "reviewed", policy_code: "manual-review", rationale: "Recorded after review.", evidence_references: [], finding_ids: [] }),
+      node("decision", "decision", "Record decision", 760, 260, { policy_version_id: "select-a-policy-version" }, { decision_code: "no_violation_found", policy_code: "GENERAL-1", rationale: "Recorded after review.", evidence_references: [], finding_ids: [] }),
       node("end", "end", "Resolved", 1000, 260, { terminal_code: "resolved" }),
     ],
     edges: [
@@ -52,8 +52,8 @@ export function workflowTemplate(template: WorkflowTemplate, purpose: WorkflowPu
     ...base,
     nodes: [
       node("start", "start", "Report accepted", 40, 220),
-      node("review", "human_task", "Human review", 280, 220, { queue_id: "general-review", response_schema: { type: "object" } }),
-      node("decision", "decision", "Record decision", 520, 220, { policy_version_id: "policy-v1" }, { decision_code: "reviewed", policy_code: "manual-review", rationale: "Recorded after the required human review step.", evidence_references: [], finding_ids: [] }),
+      node("review", "human_task", "Human review", 280, 220, { queue_id: "standard-human", response_schema: { type: "object" } }),
+      node("decision", "decision", "Record decision", 520, 220, { policy_version_id: "general-policy-v1" }, { decision_code: "no_violation_found", policy_code: "GENERAL-1", rationale: "Recorded after the required human review step.", evidence_references: [], finding_ids: [] }),
       node("end", "end", "Resolved", 760, 220, { terminal_code: "resolved" }),
     ],
     edges: [edge("e1", "start", "success", "review"), edge("e2", "review", "completed", "decision"), edge("e3", "review", "timeout", "decision"), edge("e4", "decision", "recorded", "end"), edge("e5", "decision", "error", "end")],

package/template/console/workflows/types.ts

@@ -1,3 +1,5 @@
+import type { PlaybookGuide } from "../../shared/playbooks";
+
 export type JsonPrimitive = string | number | boolean | null;
 export type JsonValue = JsonPrimitive | JsonValue[] | JsonObject;
 export interface JsonObject { [key: string]: JsonValue }
@@ -43,6 +45,7 @@ export interface WorkflowEdge {
 }
 
 export interface WorkflowGraph {
+  playbook?: PlaybookGuide;
   schema_version: "1";
   purpose: WorkflowPurpose;
   entry_node_id: string;
@@ -93,6 +96,9 @@ export interface WorkflowVersionSummary {
 
 export interface WorkflowFixture {
   id: string;
+  revision: number;
+  componentResults?: JsonObject;
+  humanResponses?: JsonObject;
   name: string;
   input: JsonObject;
   expected: JsonObject;
@@ -101,6 +107,7 @@ export interface WorkflowFixture {
 }
 
 export interface WorkflowSummary {
+  playbook?: PlaybookGuide | null;
   id: string;
   key: string;
   name: string;
@@ -157,6 +164,7 @@ export interface WorkflowTestStep {
   nodeId?: string;
   node_id?: string;
   state?: string;
+  port?: string;
 }
 
 export interface WorkflowTestResponse {
@@ -167,6 +175,9 @@ export interface WorkflowTestResponse {
     terminalCode?: string;
     terminal_code?: string;
     steps?: WorkflowTestStep[];
+    expected?: JsonObject;
+    expectedMatched?: boolean;
+    error?: { code: string; nodeId?: string } | null;
   };
 }
 

package/template/migrations/0002_playbook_publication_evidence.sql

@@ -0,0 +1,36 @@
+-- Additive: earlier published versions remain readable and runnable.
+ALTER TABLE workflow_fixtures ADD COLUMN revision INTEGER NOT NULL DEFAULT 1;
+ALTER TABLE workflow_test_runs ADD COLUMN fixture_revision INTEGER;
+ALTER TABLE workflow_versions ADD COLUMN source_draft_revision INTEGER;
+
+CREATE INDEX workflow_test_runs_fixture_revision_idx
+  ON workflow_test_runs(workflow_id, fixture_id, fixture_revision, graph_digest, finished_at DESC);
+
+-- Runs retain exactly the fixture that was read before simulation, even if an
+-- editor saves while the simulation is in flight. Old tests require a rerun.
+CREATE TRIGGER workflow_publish_exact_draft
+BEFORE INSERT ON workflow_versions
+WHEN NEW.source_draft_revision IS NOT NULL
+BEGIN
+  SELECT RAISE(ABORT, 'workflow_publication_conflict') WHERE NOT EXISTS (
+    SELECT 1 FROM workflow_drafts d JOIN workflow_definitions w ON w.id = d.workflow_id
+    WHERE d.workflow_id = NEW.workflow_id AND d.revision = NEW.source_draft_revision
+      AND d.graph_digest = NEW.graph_digest AND w.status = 'active'
+  );
+  SELECT RAISE(ABORT, 'playbook_publication_evidence_changed')
+  WHERE json_type(NEW.graph_json, '$.playbook') = 'object' AND (
+    NOT EXISTS (SELECT 1 FROM workflow_fixtures f WHERE f.workflow_id = NEW.workflow_id)
+    OR EXISTS (
+      SELECT 1 FROM workflow_fixtures f WHERE f.workflow_id = NEW.workflow_id AND NOT EXISTS (
+        SELECT 1 FROM workflow_test_runs t
+        WHERE t.id = (
+          SELECT latest.id FROM workflow_test_runs latest
+          WHERE latest.workflow_id = NEW.workflow_id AND latest.fixture_id = f.id
+            AND latest.fixture_revision = f.revision AND latest.graph_digest = NEW.graph_digest
+          ORDER BY latest.rowid DESC LIMIT 1
+        ) AND t.status = 'passed' AND t.mode = 'simulation'
+          AND t.id IN (SELECT value FROM json_each(NEW.test_evidence_json, '$.example_test_run_ids'))
+      )
+    )
+  );
+END;

package/template/migrations/0003_action_confirmation.sql

@@ -0,0 +1,24 @@
+-- Keep transport attempts separate from customer acknowledgement and completion.
+-- Attempt numbers remain monotonic across an operator-requested retry.
+ALTER TABLE action_proposals ADD COLUMN accepted_at TEXT;
+ALTER TABLE action_proposals ADD COLUMN confirmed_at TEXT;
+ALTER TABLE action_proposals ADD COLUMN confirmation_deadline_at TEXT;
+ALTER TABLE action_proposals ADD COLUMN last_receipt_json TEXT;
+ALTER TABLE action_proposals ADD COLUMN delivery_cycle INTEGER NOT NULL DEFAULT 1 CHECK (delivery_cycle >= 1);
+ALTER TABLE action_proposals ADD COLUMN cycle_start_attempt INTEGER NOT NULL DEFAULT 0 CHECK (cycle_start_attempt >= 0);
+
+CREATE INDEX action_confirmation_due ON action_proposals(confirmation_deadline_at, id)
+  WHERE accepted_at IS NOT NULL AND delivery_terminal = 0;
+
+-- Human approvals must still match a live, unexpired immutable proposal in the
+-- transaction that records them, including the direct approval API.
+CREATE TRIGGER action_approval_requires_current_proposal
+BEFORE INSERT ON action_approvals
+WHEN NOT EXISTS (
+  SELECT 1 FROM action_proposals p WHERE p.id = NEW.proposal_id
+    AND p.state = 'approval_required' AND p.payload_digest = NEW.payload_digest
+    AND json_extract(p.approval_policy_json, '$.expires_at') > strftime('%Y-%m-%dT%H:%M:%fZ','now')
+)
+BEGIN
+  SELECT RAISE(ABORT, 'action_approval_state_changed');
+END;

package/template/migrations/0004_notice_recovery.sql

@@ -0,0 +1,22 @@
+-- Preserve attempt history when an operator retries a failed participant notice.
+ALTER TABLE notification_outbox ADD COLUMN attempt_limit INTEGER NOT NULL DEFAULT 8 CHECK (attempt_limit >= 8);
+ALTER TABLE email_deliveries ADD COLUMN attempt_limit INTEGER NOT NULL DEFAULT 8 CHECK (attempt_limit >= 8);
+
+CREATE TABLE email_delivery_attempts (
+  id TEXT PRIMARY KEY,
+  delivery_id TEXT NOT NULL REFERENCES email_deliveries(id) ON DELETE CASCADE,
+  attempt_number INTEGER NOT NULL CHECK (attempt_number > 0),
+  result TEXT NOT NULL CHECK (result IN ('delivered', 'failed', 'suppressed')),
+  provider_message_id TEXT,
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT NOT NULL,
+  UNIQUE (delivery_id, attempt_number)
+);
+
+-- Owners were already stored from authenticated server/contextual intake.
+-- Public submissions cannot assert ownership and are deliberately excluded.
+INSERT OR IGNORE INTO report_participants (id, report_id, audience, reference, contact_mode, created_at)
+SELECT 'affected-owner:' || r.id, r.id, 'affected_user', t.owner_reference, 'customer_notification', r.received_at
+FROM reports r JOIN report_targets t ON t.report_id = r.id
+WHERE r.source IN ('server_api','widget') AND t.owner_reference IS NOT NULL AND t.sensitive_redacted_at IS NULL;

package/template/migrations/0005_appeal_continuity.sql

@@ -0,0 +1,17 @@
+-- A verdict and completion of its participant/customer follow-up are separate.
+-- Existing verdicts keep their historical completion semantics.
+ALTER TABLE appeal_decisions ADD COLUMN request_digest TEXT;
+ALTER TABLE appeal_decisions ADD COLUMN completion_state TEXT NOT NULL DEFAULT 'legacy' CHECK (completion_state IN ('legacy','waiting','completed'));
+ALTER TABLE appeal_decisions ADD COLUMN correction_required INTEGER NOT NULL DEFAULT 0 CHECK (correction_required IN (0,1));
+ALTER TABLE appeal_decisions ADD COLUMN correction_reference TEXT;
+ALTER TABLE appeal_decisions ADD COLUMN correction_note TEXT;
+ALTER TABLE appeal_decisions ADD COLUMN correction_confirmed_by TEXT;
+ALTER TABLE appeal_decisions ADD COLUMN correction_confirmed_at TEXT;
+
+CREATE INDEX appeal_completion_waiting ON appeal_decisions(completion_state, created_at, id);
+
+-- Restore the owning queue for legacy appeal closures where it is recoverable.
+UPDATE reports SET queue_id = COALESCE(
+  (SELECT wr.queue_id FROM workflow_runs wr WHERE wr.report_id = reports.id AND wr.run_kind = 'primary' ORDER BY wr.created_at DESC LIMIT 1),
+  (SELECT qv.queue_id FROM queue_versions qv WHERE qv.id = reports.queue_version_id)
+) WHERE state = 'closed' AND queue_id IS NULL AND EXISTS (SELECT 1 FROM appeals WHERE report_id = reports.id);

package/template/migrations/0006_case_ownership.sql

@@ -0,0 +1,23 @@
+-- Expired legacy claims were already unassigned in the previous product.
+-- From this migration onward a row represents lasting responsibility, while
+-- expires_at controls only temporary editing access.
+DELETE FROM review_claims WHERE expires_at <= strftime('%Y-%m-%dT%H:%M:%fZ', 'now');
+
+CREATE TABLE report_handoffs (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  from_reviewer_id TEXT NOT NULL,
+  to_reviewer_id TEXT,
+  actor_id TEXT NOT NULL,
+  note TEXT NOT NULL CHECK(length(note) BETWEEN 1 AND 4000),
+  created_at TEXT NOT NULL,
+  redacted_at TEXT
+);
+CREATE INDEX report_handoffs_case ON report_handoffs(report_id, created_at);
+
+-- A failed authorization check aborts the entire D1 mutation batch, including
+-- participant notices and delivery outboxes. Successful batches remove the row.
+CREATE TABLE report_edit_guards (
+  id TEXT PRIMARY KEY,
+  authorized INTEGER NOT NULL CONSTRAINT active_report_edit_access CHECK(authorized = 1)
+);

package/template/migrations/0007_integration_verification.sql

@@ -0,0 +1,21 @@
+-- Evidence remains derived from the one linked case, never stored as checkboxes.
+CREATE TABLE integration_verifications (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  integration_id TEXT NOT NULL REFERENCES application_integrations(id),
+  form_version_id TEXT NOT NULL REFERENCES report_form_versions(id),
+  queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  workflow_version_id TEXT NOT NULL REFERENCES workflow_versions(id),
+  pin_id TEXT NOT NULL REFERENCES queue_workflow_pins(id),
+  decision_code TEXT NOT NULL,
+  configuration_digest TEXT NOT NULL,
+  configuration_json TEXT NOT NULL CHECK (json_valid(configuration_json)),
+  report_id TEXT UNIQUE REFERENCES reports(id) ON DELETE CASCADE,
+  workflow_run_id TEXT UNIQUE REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  started_by TEXT NOT NULL,
+  started_at TEXT NOT NULL,
+  linked_at TEXT,
+  invalidated_at TEXT,
+  CHECK ((report_id IS NULL) = (workflow_run_id IS NULL))
+);
+CREATE INDEX integration_verifications_recent ON integration_verifications(started_at DESC, id);