create-windy 0.5.2 → 0.6.0

package/template/packages/ai-client/src/speech/client.ts

@@ -3,6 +3,7 @@ import type {
   SpeechFetch,
   SpeechOperation,
   SpeechRun,
+  SubmitSpeechInput,
   SubmitTranscriptionInput,
 } from "./contracts.js";
 import { SpeechClientError, speechHttpError } from "./error.js";
@@ -37,6 +38,22 @@ export class HttpSpeechAiClient implements SpeechAiClient {
     operation: SpeechOperation<Options, Output>,
     input: SubmitTranscriptionInput<Options>,
     context: { idempotencyKey: string; signal?: AbortSignal },
+  ): Promise<SpeechRun<Output>> {
+    return this.submit(operation, input, context);
+  }
+
+  async run<Options, Output>(
+    operation: SpeechOperation<Options, Output>,
+    input: SubmitSpeechInput<Options>,
+    context: { idempotencyKey: string; signal?: AbortSignal },
+  ): Promise<SpeechRun<Output>> {
+    return this.submit(operation, input, context);
+  }
+
+  private async submit<Options, Output>(
+    operation: SpeechOperation<Options, Output>,
+    input: SubmitTranscriptionInput<Options> | SubmitSpeechInput<Options>,
+    context: { idempotencyKey: string; signal?: AbortSignal },
   ): Promise<SpeechRun<Output>> {
     if (!operation.key.trim() || !context.idempotencyKey.trim()) {
       throw new SpeechClientError(
@@ -57,7 +74,14 @@ export class HttpSpeechAiClient implements SpeechAiClient {
           "content-type": "application/json",
           "idempotency-key": context.idempotencyKey,
         },
-        body: JSON.stringify({ operationKey: operation.key, source, options }),
+        body: JSON.stringify({
+          operationKey: operation.key,
+          source,
+          options,
+          ...("contractVersion" in input
+            ? { contractVersion: input.contractVersion, variant: input.variant }
+            : {}),
+        }),
         signal: context.signal,
       });
     } catch (error) {

package/template/packages/ai-client/src/speech/contracts.ts

@@ -15,6 +15,20 @@ export interface BatchTranscriptionOptions {
   readonly timestamps?: "segment" | "word";
 }
 
+export type SpeechVariant = "normalize" | "transcribe" | "translate";
+
+export interface SpeechTranslationOptions extends BatchTranscriptionOptions {
+  readonly targetLanguage: string;
+}
+
+/** V2 is explicit; absent version remains the compatible V1 transcribe form. */
+export interface SubmitSpeechInput<Options> {
+  readonly source: ArtifactRef;
+  readonly options?: Options;
+  readonly contractVersion: 2;
+  readonly variant: SpeechVariant;
+}
+
 export interface SpeechOperation<Options, Output> {
   readonly key: string;
   parseOutput(value: unknown): Output;
@@ -126,4 +140,9 @@ export interface SpeechAiClient {
     input: SubmitTranscriptionInput<Options>,
     context: { idempotencyKey: string; signal?: AbortSignal },
   ): Promise<SpeechRun<Output>>;
+  run<Options, Output>(
+    operation: SpeechOperation<Options, Output>,
+    input: SubmitSpeechInput<Options>,
+    context: { idempotencyKey: string; signal?: AbortSignal },
+  ): Promise<SpeechRun<Output>>;
 }

package/template/packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/config",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/database/drizzle/0048_illegal_magneto.sql

@@ -0,0 +1,11 @@
+ALTER TABLE "file_upload_sessions" ADD COLUMN "module_name" varchar(80);--> statement-breakpoint
+ALTER TABLE "file_upload_sessions" ADD COLUMN "authorization_scope_hash" varchar(64);--> statement-breakpoint
+ALTER TABLE "file_upload_sessions" ADD CONSTRAINT "ck_file_upload_sessions_authorization_binding" CHECK ((
+        ("file_upload_sessions"."module_name" is null and "file_upload_sessions"."authorization_scope_hash" is null)
+        or (
+          "file_upload_sessions"."module_name" is not null
+          and "file_upload_sessions"."authorization_scope_hash" is not null
+          and "file_upload_sessions"."module_name" ~ '^[a-z0-9][a-z0-9._-]{0,79}$'
+          and "file_upload_sessions"."authorization_scope_hash" ~ '^[0-9a-f]{64}$'
+        )
+      ));

package/template/packages/database/drizzle/0049_right_lenny_balinger.sql

@@ -0,0 +1,79 @@
+CREATE TABLE "ai_output_artifact_scopes" (
+	"scope_id" varchar(80) PRIMARY KEY NOT NULL,
+	"run_id" varchar(80) NOT NULL,
+	"request_id" varchar(128) NOT NULL,
+	"actor_id" varchar(64) NOT NULL,
+	"tenant_id" varchar(64) NOT NULL,
+	"module_name" varchar(80) NOT NULL,
+	"operation_key" varchar(200) NOT NULL,
+	"runtime_kind" varchar(24) NOT NULL,
+	"output_kind" varchar(80) NOT NULL,
+	"purpose" varchar(80) NOT NULL,
+	"data_classification" varchar(16) NOT NULL,
+	"idempotency_hash" varchar(64) NOT NULL,
+	"fingerprint" varchar(64) NOT NULL,
+	"scope_hash" varchar(64) NOT NULL,
+	"scope_snapshot" jsonb NOT NULL,
+	"deployment_identity" varchar(96) NOT NULL,
+	"release_digest" varchar(71) NOT NULL,
+	"offers_digest" varchar(71) NOT NULL,
+	"policy_digest" varchar(64) NOT NULL,
+	"revision" integer DEFAULT 1 NOT NULL,
+	"grant_sequence" integer DEFAULT 1 NOT NULL,
+	"grant_hash" varchar(64),
+	"active_grant_generation" integer,
+	"pending_grant_hash" varchar(64),
+	"pending_grant_generation" integer,
+	"pending_grant_expires_at" timestamp with time zone,
+	"status" varchar(24) NOT NULL,
+	"allowed_media_types" jsonb NOT NULL,
+	"max_artifact_bytes" bigint NOT NULL,
+	"max_artifacts" integer NOT NULL,
+	"max_total_bytes" bigint NOT NULL,
+	"artifact_count" integer DEFAULT 0 NOT NULL,
+	"completed_byte_size" bigint DEFAULT 0 NOT NULL,
+	"scope_expires_at" timestamp with time zone NOT NULL,
+	"file_expires_at" timestamp with time zone NOT NULL,
+	"ref_expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "ck_ai_output_scopes_status" CHECK ("ai_output_artifact_scopes"."status" in ('open', 'sealed', 'aborting', 'cleanup-pending', 'aborted', 'cleaned')),
+	CONSTRAINT "ck_ai_output_scopes_runtime" CHECK ("ai_output_artifact_scopes"."runtime_kind" in ('agent', 'document', 'speech', 'embedding')),
+	CONSTRAINT "ck_ai_output_scopes_classification" CHECK ("ai_output_artifact_scopes"."data_classification" in ('public', 'internal', 'sensitive')),
+	CONSTRAINT "ck_ai_output_scopes_limits" CHECK ("ai_output_artifact_scopes"."max_artifact_bytes" > 0 and "ai_output_artifact_scopes"."max_artifact_bytes" <= "ai_output_artifact_scopes"."max_total_bytes" and "ai_output_artifact_scopes"."max_artifacts" > 0 and "ai_output_artifact_scopes"."max_total_bytes" > 0 and "ai_output_artifact_scopes"."artifact_count" >= 0 and "ai_output_artifact_scopes"."completed_byte_size" >= 0 and "ai_output_artifact_scopes"."artifact_count" <= "ai_output_artifact_scopes"."max_artifacts" and "ai_output_artifact_scopes"."completed_byte_size" <= "ai_output_artifact_scopes"."max_total_bytes"),
+	CONSTRAINT "ck_ai_output_scopes_digests" CHECK ("ai_output_artifact_scopes"."idempotency_hash" ~ '^[0-9a-f]{64}$' and "ai_output_artifact_scopes"."fingerprint" ~ '^[0-9a-f]{64}$' and "ai_output_artifact_scopes"."scope_hash" ~ '^[0-9a-f]{64}$' and "ai_output_artifact_scopes"."release_digest" ~ '^sha256:[0-9a-f]{64}$' and "ai_output_artifact_scopes"."offers_digest" ~ '^sha256:[0-9a-f]{64}$' and "ai_output_artifact_scopes"."policy_digest" ~ '^[0-9a-f]{64}$' and ("ai_output_artifact_scopes"."grant_hash" is null or "ai_output_artifact_scopes"."grant_hash" ~ '^[0-9a-f]{64}$') and ("ai_output_artifact_scopes"."pending_grant_hash" is null or "ai_output_artifact_scopes"."pending_grant_hash" ~ '^[0-9a-f]{64}$')),
+	CONSTRAINT "ck_ai_output_scopes_grant" CHECK ("ai_output_artifact_scopes"."revision" > 0 and "ai_output_artifact_scopes"."grant_sequence" > 0 and (("ai_output_artifact_scopes"."grant_hash" is null and "ai_output_artifact_scopes"."active_grant_generation" is null) or ("ai_output_artifact_scopes"."grant_hash" is not null and "ai_output_artifact_scopes"."active_grant_generation" > 0 and "ai_output_artifact_scopes"."active_grant_generation" <= "ai_output_artifact_scopes"."grant_sequence")) and (("ai_output_artifact_scopes"."pending_grant_hash" is null and "ai_output_artifact_scopes"."pending_grant_generation" is null and "ai_output_artifact_scopes"."pending_grant_expires_at" is null) or ("ai_output_artifact_scopes"."status" = 'open' and "ai_output_artifact_scopes"."pending_grant_hash" is not null and "ai_output_artifact_scopes"."pending_grant_generation" = "ai_output_artifact_scopes"."grant_sequence" and ("ai_output_artifact_scopes"."active_grant_generation" is null or "ai_output_artifact_scopes"."pending_grant_generation" > "ai_output_artifact_scopes"."active_grant_generation") and "ai_output_artifact_scopes"."pending_grant_expires_at" <= "ai_output_artifact_scopes"."scope_expires_at")) and ("ai_output_artifact_scopes"."status" <> 'cleaned' or ("ai_output_artifact_scopes"."grant_hash" is null and "ai_output_artifact_scopes"."active_grant_generation" is null and "ai_output_artifact_scopes"."pending_grant_hash" is null))),
+	CONSTRAINT "ck_ai_output_scopes_ttl" CHECK ("ai_output_artifact_scopes"."created_at" < "ai_output_artifact_scopes"."scope_expires_at" and "ai_output_artifact_scopes"."scope_expires_at" < "ai_output_artifact_scopes"."ref_expires_at" and "ai_output_artifact_scopes"."ref_expires_at" <= "ai_output_artifact_scopes"."file_expires_at")
+);
+--> statement-breakpoint
+CREATE TABLE "ai_output_artifacts" (
+	"artifact_id" varchar(80) PRIMARY KEY NOT NULL,
+	"scope_id" varchar(80) NOT NULL,
+	"output_key" varchar(80) NOT NULL,
+	"fingerprint" varchar(64) NOT NULL,
+	"generation" integer DEFAULT 1 NOT NULL,
+	"status" varchar(24) NOT NULL,
+	"upload_session_id" varchar(40),
+	"file_id" varchar(40),
+	"filename" varchar(240) NOT NULL,
+	"mime_type" varchar(120) NOT NULL,
+	"expected_byte_size" bigint NOT NULL,
+	"expected_sha256" varchar(64) NOT NULL,
+	"byte_size" bigint,
+	"sha256" varchar(64),
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "ck_ai_output_artifacts_status" CHECK ("ai_output_artifacts"."status" in ('creating', 'uploading', 'completed', 'aborting', 'cleanup-pending', 'aborted')),
+	CONSTRAINT "ck_ai_output_artifacts_expected" CHECK ("ai_output_artifacts"."expected_byte_size" >= 0 and "ai_output_artifacts"."expected_sha256" ~ '^[0-9a-f]{64}$' and "ai_output_artifacts"."fingerprint" ~ '^[0-9a-f]{64}$'),
+	CONSTRAINT "ck_ai_output_artifacts_actual" CHECK (("ai_output_artifacts"."byte_size" is null and "ai_output_artifacts"."sha256" is null) or ("ai_output_artifacts"."byte_size" >= 0 and "ai_output_artifacts"."sha256" ~ '^[0-9a-f]{64}$')),
+	CONSTRAINT "ck_ai_output_artifacts_completed" CHECK ("ai_output_artifacts"."status" <> 'completed' or ("ai_output_artifacts"."upload_session_id" is not null and "ai_output_artifacts"."file_id" is not null and "ai_output_artifacts"."byte_size" is not null and "ai_output_artifacts"."sha256" is not null))
+);
+--> statement-breakpoint
+ALTER TABLE "ai_output_artifacts" ADD CONSTRAINT "ai_output_artifacts_scope_id_ai_output_artifact_scopes_scope_id_fk" FOREIGN KEY ("scope_id") REFERENCES "public"."ai_output_artifact_scopes"("scope_id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_ai_output_scopes_run_kind" ON "ai_output_artifact_scopes" USING btree ("run_id","output_kind");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_ai_output_scopes_idempotency" ON "ai_output_artifact_scopes" USING btree ("idempotency_hash");--> statement-breakpoint
+CREATE INDEX "idx_ai_output_scopes_cleanup" ON "ai_output_artifact_scopes" USING btree ("status","updated_at","scope_expires_at","file_expires_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_ai_output_artifacts_key" ON "ai_output_artifacts" USING btree ("scope_id","output_key");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_ai_output_artifacts_session" ON "ai_output_artifacts" USING btree ("upload_session_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_ai_output_artifacts_file" ON "ai_output_artifacts" USING btree ("file_id");--> statement-breakpoint
+CREATE INDEX "idx_ai_output_artifacts_scope_status" ON "ai_output_artifacts" USING btree ("scope_id","status");

package/template/packages/database/drizzle/0050_greedy_sister_grimm.sql

@@ -0,0 +1,92 @@
+CREATE TABLE "report_staging_claims" (
+	"group_id" varchar(80) PRIMARY KEY NOT NULL,
+	"token_hash" varchar(64) NOT NULL,
+	"generation" integer NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "ck_report_staging_claim" CHECK ("report_staging_claims"."token_hash" ~ '^[0-9a-f]{64}$' and "report_staging_claims"."generation" > 0)
+);
+--> statement-breakpoint
+CREATE TABLE "report_staging_entries" (
+	"entry_id" varchar(80) PRIMARY KEY NOT NULL,
+	"group_id" varchar(80) NOT NULL,
+	"ordinal" integer NOT NULL,
+	"relative_path" varchar(4096) NOT NULL,
+	"path_key" varchar(64) NOT NULL,
+	"byte_size" bigint NOT NULL,
+	"sha256" varchar(64) NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "ck_report_staging_entry_hash" CHECK ("report_staging_entries"."byte_size" >= 0 and "report_staging_entries"."sha256" ~ '^[0-9a-f]{64}$' and "report_staging_entries"."path_key" ~ '^[0-9a-f]{64}$')
+);
+--> statement-breakpoint
+CREATE TABLE "report_staging_groups" (
+	"group_id" varchar(80) PRIMARY KEY NOT NULL,
+	"module_name" varchar(80) NOT NULL,
+	"owner_id" varchar(80) NOT NULL,
+	"scope_hash" varchar(64) NOT NULL,
+	"purpose" varchar(160) NOT NULL,
+	"source_mode" varchar(24) NOT NULL,
+	"idempotency_hash" varchar(64) NOT NULL,
+	"fingerprint" varchar(64) NOT NULL,
+	"policy_digest" varchar(64) NOT NULL,
+	"entrypoint" varchar(4096) NOT NULL,
+	"status" varchar(24) NOT NULL,
+	"source_count" integer NOT NULL,
+	"entry_count" integer DEFAULT 0 NOT NULL,
+	"archive_byte_size" bigint DEFAULT 0 NOT NULL,
+	"expanded_byte_size" bigint DEFAULT 0 NOT NULL,
+	"seal_id" varchar(64),
+	"manifest_sha256" varchar(64),
+	"failure_code" varchar(80),
+	"revision" integer DEFAULT 1 NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "ck_report_staging_group_status" CHECK ("report_staging_groups"."status" in ('indexing', 'ready', 'failed', 'discarding', 'discarded', 'expired')),
+	CONSTRAINT "ck_report_staging_source_mode" CHECK ("report_staging_groups"."source_mode" in ('archive', 'expanded')),
+	CONSTRAINT "ck_report_staging_group_hashes" CHECK ("report_staging_groups"."scope_hash" ~ '^[0-9a-f]{64}$' and "report_staging_groups"."idempotency_hash" ~ '^[0-9a-f]{64}$' and "report_staging_groups"."fingerprint" ~ '^[0-9a-f]{64}$' and "report_staging_groups"."policy_digest" ~ '^[0-9a-f]{64}$' and ("report_staging_groups"."seal_id" is null or "report_staging_groups"."seal_id" ~ '^[0-9a-f]{64}$') and ("report_staging_groups"."manifest_sha256" is null or "report_staging_groups"."manifest_sha256" ~ '^[0-9a-f]{64}$')),
+	CONSTRAINT "ck_report_staging_group_seal" CHECK (("report_staging_groups"."status" = 'ready' and "report_staging_groups"."seal_id" is not null and "report_staging_groups"."manifest_sha256" is not null) or ("report_staging_groups"."status" in ('indexing', 'failed') and "report_staging_groups"."seal_id" is null and "report_staging_groups"."manifest_sha256" is null) or ("report_staging_groups"."status" in ('discarding', 'discarded', 'expired') and (("report_staging_groups"."seal_id" is null and "report_staging_groups"."manifest_sha256" is null) or ("report_staging_groups"."seal_id" is not null and "report_staging_groups"."manifest_sha256" is not null)))),
+	CONSTRAINT "ck_report_staging_group_counts" CHECK ("report_staging_groups"."source_count" > 0 and "report_staging_groups"."entry_count" >= 0 and "report_staging_groups"."archive_byte_size" >= 0 and "report_staging_groups"."expanded_byte_size" >= 0 and "report_staging_groups"."revision" > 0)
+);
+--> statement-breakpoint
+CREATE TABLE "report_staging_read_leases" (
+	"lease_id" varchar(80) PRIMARY KEY NOT NULL,
+	"group_id" varchar(80) NOT NULL,
+	"module_name" varchar(80) NOT NULL,
+	"owner_id" varchar(80) NOT NULL,
+	"scope_hash" varchar(64) NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"closed_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "ck_report_staging_lease_scope" CHECK ("report_staging_read_leases"."scope_hash" ~ '^[0-9a-f]{64}$')
+);
+--> statement-breakpoint
+CREATE TABLE "report_staging_sources" (
+	"source_id" varchar(80) PRIMARY KEY NOT NULL,
+	"group_id" varchar(80) NOT NULL,
+	"ordinal" integer NOT NULL,
+	"file_id" varchar(80) NOT NULL,
+	"file_purpose" varchar(160) NOT NULL,
+	"resource_type" varchar(160) NOT NULL,
+	"resource_id" varchar(160) NOT NULL,
+	"relative_path" varchar(4096) NOT NULL,
+	"byte_size" bigint,
+	"sha256" varchar(64),
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "ck_report_staging_source_actual" CHECK (("report_staging_sources"."byte_size" is null and "report_staging_sources"."sha256" is null) or ("report_staging_sources"."byte_size" >= 0 and "report_staging_sources"."sha256" ~ '^[0-9a-f]{64}$'))
+);
+--> statement-breakpoint
+ALTER TABLE "report_staging_claims" ADD CONSTRAINT "report_staging_claims_group_id_report_staging_groups_group_id_fk" FOREIGN KEY ("group_id") REFERENCES "public"."report_staging_groups"("group_id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "report_staging_entries" ADD CONSTRAINT "report_staging_entries_group_id_report_staging_groups_group_id_fk" FOREIGN KEY ("group_id") REFERENCES "public"."report_staging_groups"("group_id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "report_staging_read_leases" ADD CONSTRAINT "report_staging_read_leases_group_id_report_staging_groups_group_id_fk" FOREIGN KEY ("group_id") REFERENCES "public"."report_staging_groups"("group_id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "report_staging_sources" ADD CONSTRAINT "report_staging_sources_group_id_report_staging_groups_group_id_fk" FOREIGN KEY ("group_id") REFERENCES "public"."report_staging_groups"("group_id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_report_staging_claim_expiry" ON "report_staging_claims" USING btree ("expires_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_report_staging_entry_ordinal" ON "report_staging_entries" USING btree ("group_id","ordinal");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_report_staging_entry_path_key" ON "report_staging_entries" USING btree ("group_id","path_key");--> statement-breakpoint
+CREATE INDEX "idx_report_staging_entry_page" ON "report_staging_entries" USING btree ("group_id","ordinal");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_report_staging_idempotency" ON "report_staging_groups" USING btree ("module_name","owner_id","scope_hash","purpose","idempotency_hash");--> statement-breakpoint
+CREATE INDEX "idx_report_staging_cleanup" ON "report_staging_groups" USING btree ("status","expires_at","updated_at");--> statement-breakpoint
+CREATE INDEX "idx_report_staging_lease_active" ON "report_staging_read_leases" USING btree ("group_id","closed_at","expires_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_report_staging_source_ordinal" ON "report_staging_sources" USING btree ("group_id","ordinal");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_report_staging_source_path" ON "report_staging_sources" USING btree ("group_id","relative_path");

package/template/packages/database/drizzle/0051_lame_shockwave.sql

@@ -0,0 +1,19 @@
+CREATE TABLE "embedding_run_bindings" (
+	"binding_id" varchar(80) PRIMARY KEY NOT NULL,
+	"run_id" varchar(80),
+	"operation_key" varchar(200) NOT NULL,
+	"module_name" varchar(80) NOT NULL,
+	"actor_id" varchar(64) NOT NULL,
+	"idempotency_hash" varchar(64) NOT NULL,
+	"fingerprint" varchar(64) NOT NULL,
+	"scope_hash" varchar(64) NOT NULL,
+	"scope_snapshot" jsonb NOT NULL,
+	"deployment_pin" jsonb,
+	"created_at" double precision NOT NULL,
+	"expires_at" double precision NOT NULL,
+	CONSTRAINT "ck_embedding_run_binding_hashes" CHECK ("embedding_run_bindings"."idempotency_hash" ~ '^[0-9a-f]{64}$' and "embedding_run_bindings"."fingerprint" ~ '^[0-9a-f]{64}$' and "embedding_run_bindings"."scope_hash" ~ '^[0-9a-f]{64}$')
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_embedding_run_bindings_run" ON "embedding_run_bindings" USING btree ("run_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_embedding_run_bindings_idempotency" ON "embedding_run_bindings" USING btree ("idempotency_hash");--> statement-breakpoint
+CREATE INDEX "idx_embedding_run_bindings_actor" ON "embedding_run_bindings" USING btree ("actor_id","expires_at");

package/template/packages/database/drizzle/0052_tiresome_komodo.sql

@@ -0,0 +1 @@
+ALTER TABLE "embedding_run_bindings" ADD COLUMN "terminal_audit_at" double precision;

package/template/packages/database/drizzle/0053_calm_victor_mancha.sql

@@ -0,0 +1 @@
+ALTER TABLE "embedding_run_bindings" ADD COLUMN "artifact_refs" jsonb DEFAULT '[]'::jsonb NOT NULL;

package/template/packages/database/drizzle/0054_tough_thanos.sql

@@ -0,0 +1,29 @@
+CREATE TABLE "agent_screenshot_intakes" (
+	"intake_id" varchar(80) PRIMARY KEY NOT NULL,
+	"token_hash" varchar(64) NOT NULL,
+	"actor_id" varchar(64) NOT NULL,
+	"actor_type" varchar(32) NOT NULL,
+	"scope_hash" varchar(64) NOT NULL,
+	"module_name" varchar(160) NOT NULL,
+	"operation_key" varchar(200) NOT NULL,
+	"purpose" varchar(260) NOT NULL,
+	"page_id" varchar(256) NOT NULL,
+	"context_digest" varchar(72) NOT NULL,
+	"deployment_pin" jsonb NOT NULL,
+	"media_type" varchar(80) NOT NULL,
+	"byte_size" integer NOT NULL,
+	"pixels" integer NOT NULL,
+	"status" varchar(24) NOT NULL,
+	"upload_id" varchar(80),
+	"file_id" varchar(80),
+	"run_id" varchar(80),
+	"created_at" double precision NOT NULL,
+	"expires_at" double precision NOT NULL,
+	CONSTRAINT "ck_agent_screenshot_intakes_status" CHECK ("agent_screenshot_intakes"."status" in ('created', 'uploading', 'uploaded', 'reserving', 'bound', 'cancelled')),
+	CONSTRAINT "ck_agent_screenshot_intakes_bytes" CHECK ("agent_screenshot_intakes"."byte_size" > 0),
+	CONSTRAINT "ck_agent_screenshot_intakes_pixels" CHECK ("agent_screenshot_intakes"."pixels" > 0)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_agent_screenshot_intakes_token" ON "agent_screenshot_intakes" USING btree ("token_hash");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_agent_screenshot_intakes_run" ON "agent_screenshot_intakes" USING btree ("run_id");--> statement-breakpoint
+CREATE INDEX "idx_agent_screenshot_intakes_expiry" ON "agent_screenshot_intakes" USING btree ("status","expires_at");