create-windy 0.6.12 → 0.6.15

package/template/packages/database/src/schema/agent-session.ts

@@ -0,0 +1,344 @@
+import { sql } from "drizzle-orm";
+import {
+  check,
+  doublePrecision,
+  index,
+  integer,
+  jsonb,
+  pgTable,
+  primaryKey,
+  text,
+  uniqueIndex,
+  varchar,
+} from "drizzle-orm/pg-core";
+
+export const agentSessions = pgTable(
+  "agent_sessions",
+  {
+    sessionId: varchar("session_id", { length: 80 }).primaryKey(),
+    actorId: varchar("actor_id", { length: 64 }).notNull(),
+    scopeDigest: varchar("scope_digest", { length: 71 }).notNull(),
+    status: varchar("status", { length: 24 }).notNull(),
+    headSequence: integer("head_sequence").notNull().default(0),
+    parentSessionId: varchar("parent_session_id", { length: 80 }),
+    parentCheckpointId: varchar("parent_checkpoint_id", { length: 80 }),
+    parentSequence: integer("parent_sequence"),
+    createdAt: doublePrecision("created_at").notNull(),
+    updatedAt: doublePrecision("updated_at").notNull(),
+  },
+  (table) => [
+    index("idx_agent_sessions_actor_updated").on(
+      table.actorId,
+      table.updatedAt,
+    ),
+    index("idx_agent_sessions_parent").on(table.parentSessionId),
+    check(
+      "ck_agent_sessions_status",
+      sql`${table.status} in ('active', 'archived')`,
+    ),
+    check("ck_agent_sessions_head", sql`${table.headSequence} >= 0`),
+    check(
+      "ck_agent_sessions_lineage",
+      sql`(${table.parentSessionId} is null and ${table.parentCheckpointId} is null and ${table.parentSequence} is null)
+        or (${table.parentSessionId} is not null and ${table.parentCheckpointId} is not null and ${table.parentSequence} > 0)`,
+    ),
+  ],
+);
+
+export const agentSessionEvents = pgTable(
+  "agent_session_events",
+  {
+    eventId: varchar("event_id", { length: 96 }).primaryKey(),
+    sessionId: varchar("session_id", { length: 80 })
+      .notNull()
+      .references(() => agentSessions.sessionId, { onDelete: "cascade" }),
+    sequence: integer("sequence").notNull(),
+    eventType: varchar("event_type", { length: 80 }).notNull(),
+    schemaVersion: integer("schema_version").notNull(),
+    payloadCipher: text("payload_cipher").notNull(),
+    payloadDigest: varchar("payload_digest", { length: 71 }).notNull(),
+    occurredAt: doublePrecision("occurred_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_agent_session_events_sequence").on(
+      table.sessionId,
+      table.sequence,
+    ),
+    index("idx_agent_session_events_type").on(
+      table.sessionId,
+      table.eventType,
+      table.sequence,
+    ),
+    check("ck_agent_session_events_sequence", sql`${table.sequence} > 0`),
+    check("ck_agent_session_events_schema", sql`${table.schemaVersion} > 0`),
+  ],
+);
+
+export const agentSessionCheckpoints = pgTable(
+  "agent_session_checkpoints",
+  {
+    checkpointId: varchar("checkpoint_id", { length: 96 }).primaryKey(),
+    sessionId: varchar("session_id", { length: 80 })
+      .notNull()
+      .references(() => agentSessions.sessionId, { onDelete: "cascade" }),
+    throughSequence: integer("through_sequence").notNull(),
+    factDigest: varchar("fact_digest", { length: 71 }).notNull(),
+    createdAt: doublePrecision("created_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_agent_session_checkpoints_sequence").on(
+      table.sessionId,
+      table.throughSequence,
+    ),
+    check(
+      "ck_agent_session_checkpoints_sequence",
+      sql`${table.throughSequence} >= 0`,
+    ),
+  ],
+);
+
+export const agentContextVersions = pgTable(
+  "agent_context_versions",
+  {
+    contextVersionId: varchar("context_version_id", {
+      length: 96,
+    }).primaryKey(),
+    sessionId: varchar("session_id", { length: 80 })
+      .notNull()
+      .references(() => agentSessions.sessionId, { onDelete: "cascade" }),
+    turnId: varchar("turn_id", { length: 96 }).notNull(),
+    runId: varchar("run_id", { length: 160 }).notNull(),
+    modelAttemptId: varchar("model_attempt_id", { length: 160 }).notNull(),
+    currentCaseId: varchar("current_case_id", { length: 160 }),
+    digest: varchar("digest", { length: 71 }).notNull(),
+    providerDeploymentKey: varchar("provider_deployment_key", { length: 160 }),
+    providerModel: varchar("provider_model", { length: 160 }),
+    providerRequestDigest: varchar("provider_request_digest", { length: 64 }),
+    toolsDigest: varchar("tools_digest", { length: 64 }),
+    outputSchemaDigest: varchar("output_schema_digest", { length: 64 }),
+    committedAt: doublePrecision("committed_at"),
+    status: varchar("status", { length: 24 }).notNull().default("active"),
+    invalidatedAt: doublePrecision("invalidated_at"),
+    invalidationReason: varchar("invalidation_reason", { length: 32 }),
+    createdAt: doublePrecision("created_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_agent_context_versions_attempt").on(table.modelAttemptId),
+    index("idx_agent_context_versions_session").on(
+      table.sessionId,
+      table.createdAt,
+    ),
+    check(
+      "ck_agent_context_versions_status",
+      sql`${table.status} in ('active', 'invalidated')`,
+    ),
+  ],
+);
+
+export const agentContextSources = pgTable(
+  "agent_context_sources",
+  {
+    contextVersionId: varchar("context_version_id", { length: 96 })
+      .notNull()
+      .references(() => agentContextVersions.contextVersionId, {
+        onDelete: "cascade",
+      }),
+    ordinal: integer("ordinal").notNull(),
+    sourceModuleKey: varchar("source_module_key", { length: 160 }).notNull(),
+    sourceKind: varchar("source_kind", { length: 48 }).notNull(),
+    sourceId: varchar("source_id", { length: 256 }).notNull(),
+    sourceVersion: varchar("source_version", { length: 160 }).notNull(),
+    sourceSequence: integer("source_sequence").notNull(),
+    sourceDigest: varchar("source_digest", { length: 71 }).notNull(),
+    validityStatus: varchar("validity_status", { length: 16 }).notNull(),
+    validityReason: varchar("validity_reason", { length: 32 }),
+    checkedAt: doublePrecision("checked_at").notNull(),
+    expiresAt: doublePrecision("expires_at"),
+  },
+  (table) => [
+    primaryKey({ columns: [table.contextVersionId, table.ordinal] }),
+    index("idx_agent_context_sources_origin").on(
+      table.sourceModuleKey,
+      table.sourceKind,
+      table.sourceId,
+      table.sourceVersion,
+    ),
+    check("ck_agent_context_sources_ordinal", sql`${table.ordinal} >= 0`),
+    check(
+      "ck_agent_context_sources_sequence",
+      sql`${table.sourceSequence} > 0`,
+    ),
+    check(
+      "ck_agent_context_sources_validity",
+      sql`${table.validityStatus} in ('valid', 'invalid')`,
+    ),
+  ],
+);
+
+export const agentMemoryProjections = pgTable(
+  "agent_memory_projections",
+  {
+    memoryId: varchar("memory_id", { length: 96 }).primaryKey(),
+    kind: varchar("kind", { length: 48 }).notNull(),
+    scopeKind: varchar("scope_kind", { length: 16 }).notNull(),
+    scopeId: varchar("scope_id", { length: 160 }).notNull(),
+    currentCaseId: varchar("current_case_id", { length: 160 }),
+    derivedFromSessionId: varchar("derived_from_session_id", {
+      length: 80,
+    }).notNull(),
+    derivedThroughSequence: integer("derived_through_sequence").notNull(),
+    payloadCipher: text("payload_cipher").notNull(),
+    payloadDigest: varchar("payload_digest", { length: 71 }).notNull(),
+    status: varchar("status", { length: 24 }).notNull().default("active"),
+    expiresAt: doublePrecision("expires_at"),
+    createdAt: doublePrecision("created_at").notNull(),
+    updatedAt: doublePrecision("updated_at").notNull(),
+  },
+  (table) => [
+    index("idx_agent_memory_scope").on(
+      table.scopeKind,
+      table.scopeId,
+      table.kind,
+      table.updatedAt,
+    ),
+    index("idx_agent_memory_expiry").on(table.status, table.expiresAt),
+    index("idx_agent_memory_derivation").on(
+      table.derivedFromSessionId,
+      table.status,
+    ),
+    check(
+      "ck_agent_memory_kind",
+      sql`${table.kind} in ('working-context', 'session-summary', 'user-preference', 'case-memory-candidate', 'verified-fact-reference')`,
+    ),
+    check(
+      "ck_agent_memory_scope",
+      sql`${table.scopeKind} in ('session', 'user', 'case')`,
+    ),
+    check(
+      "ck_agent_memory_status",
+      sql`${table.status} in ('active', 'invalidated', 'deleted')`,
+    ),
+    check(
+      "ck_agent_memory_derivation_sequence",
+      sql`${table.derivedThroughSequence} > 0`,
+    ),
+  ],
+);
+
+export const agentMemorySources = pgTable(
+  "agent_memory_sources",
+  {
+    memoryId: varchar("memory_id", { length: 96 })
+      .notNull()
+      .references(() => agentMemoryProjections.memoryId, {
+        onDelete: "cascade",
+      }),
+    ordinal: integer("ordinal").notNull(),
+    sourceModuleKey: varchar("source_module_key", { length: 160 }).notNull(),
+    sourceKind: varchar("source_kind", { length: 48 }).notNull(),
+    sourceId: varchar("source_id", { length: 256 }).notNull(),
+    sourceVersion: varchar("source_version", { length: 160 }).notNull(),
+    sourceSequence: integer("source_sequence").notNull(),
+    sourceDigest: varchar("source_digest", { length: 71 }).notNull(),
+    validityStatus: varchar("validity_status", { length: 16 }).notNull(),
+    validityReason: varchar("validity_reason", { length: 32 }),
+    checkedAt: doublePrecision("checked_at").notNull(),
+    expiresAt: doublePrecision("expires_at"),
+  },
+  (table) => [
+    primaryKey({ columns: [table.memoryId, table.ordinal] }),
+    index("idx_agent_memory_sources_origin").on(
+      table.sourceModuleKey,
+      table.sourceKind,
+      table.sourceId,
+      table.sourceVersion,
+    ),
+    check("ck_agent_memory_sources_ordinal", sql`${table.ordinal} >= 0`),
+    check("ck_agent_memory_sources_sequence", sql`${table.sourceSequence} > 0`),
+    check(
+      "ck_agent_memory_sources_validity",
+      sql`${table.validityStatus} in ('valid', 'invalid')`,
+    ),
+  ],
+);
+
+export const agentSourceInvalidations = pgTable(
+  "agent_source_invalidations",
+  {
+    invalidationId: varchar("invalidation_id", { length: 96 }).primaryKey(),
+    sourceModuleKey: varchar("source_module_key", { length: 160 }).notNull(),
+    sourceKind: varchar("source_kind", { length: 48 }).notNull(),
+    sourceId: varchar("source_id", { length: 256 }).notNull(),
+    sourceVersion: varchar("source_version", { length: 160 }).notNull(),
+    sequence: integer("sequence").notNull(),
+    sourceDigest: varchar("source_digest", { length: 71 }),
+    cause: varchar("cause", { length: 32 }).notNull(),
+    status: varchar("status", { length: 24 }).notNull().default("pending"),
+    attemptCount: integer("attempt_count").notNull().default(0),
+    leaseOwner: varchar("lease_owner", { length: 96 }),
+    leaseUntil: doublePrecision("lease_until"),
+    payloadJson: jsonb("payload_json")
+      .$type<Record<string, unknown>>()
+      .notNull(),
+    occurredAt: doublePrecision("occurred_at").notNull(),
+    updatedAt: doublePrecision("updated_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_agent_source_invalidations_sequence").on(
+      table.sourceModuleKey,
+      table.sourceKind,
+      table.sourceId,
+      table.sequence,
+    ),
+    index("idx_agent_source_invalidations_claim").on(
+      table.status,
+      table.leaseUntil,
+      table.occurredAt,
+    ),
+    check("ck_agent_source_invalidations_sequence", sql`${table.sequence} > 0`),
+    check(
+      "ck_agent_source_invalidations_cause",
+      sql`${table.cause} in ('authorization-revoked', 'source-deleted', 'source-archived', 'source-invalidated', 'source-expired', 'source-superseded')`,
+    ),
+    check(
+      "ck_agent_source_invalidations_status",
+      sql`${table.status} in ('pending', 'processing', 'completed', 'failed')`,
+    ),
+    check(
+      "ck_agent_source_invalidations_attempts",
+      sql`${table.attemptCount} >= 0`,
+    ),
+  ],
+);
+
+export const agentSourceInvalidationDeliveries = pgTable(
+  "agent_source_invalidation_deliveries",
+  {
+    invalidationId: varchar("invalidation_id", { length: 96 })
+      .notNull()
+      .references(() => agentSourceInvalidations.invalidationId, {
+        onDelete: "cascade",
+      }),
+    sinkKey: varchar("sink_key", { length: 48 }).notNull(),
+    status: varchar("status", { length: 24 }).notNull().default("pending"),
+    attemptCount: integer("attempt_count").notNull().default(0),
+    leaseToken: varchar("lease_token", { length: 96 }),
+    leaseOwner: varchar("lease_owner", { length: 96 }),
+    leaseUntil: doublePrecision("lease_until"),
+    nextAttemptAt: doublePrecision("next_attempt_at").notNull(),
+    lastErrorCode: varchar("last_error_code", { length: 80 }),
+    deliveredAt: doublePrecision("delivered_at"),
+  },
+  (table) => [
+    primaryKey({ columns: [table.invalidationId, table.sinkKey] }),
+    index("idx_agent_source_delivery_retry").on(
+      table.status,
+      table.nextAttemptAt,
+    ),
+    check(
+      "ck_agent_source_delivery_status",
+      sql`${table.status} in ('pending', 'processing', 'delivered', 'rejected')`,
+    ),
+    check("ck_agent_source_delivery_attempts", sql`${table.attemptCount} >= 0`),
+  ],
+);

package/template/packages/database/src/schema/agent-workflow-delegation.ts

@@ -0,0 +1,126 @@
+import { sql } from "drizzle-orm";
+import {
+  check,
+  doublePrecision,
+  foreignKey,
+  index,
+  integer,
+  jsonb,
+  pgTable,
+  uniqueIndex,
+  varchar,
+} from "drizzle-orm/pg-core";
+import type {
+  AgentDelegationGrant,
+  AgentWorkflowBudget,
+  AgentWorkflowUsage,
+} from "@southwind-ai/shared";
+import { agentWorkflowNodeRuns, agentWorkflowRuns } from "./agent-workflow.js";
+
+export const agentWorkflowDelegations = pgTable(
+  "agent_workflow_delegations",
+  {
+    delegationId: varchar("delegation_id", { length: 96 }).primaryKey(),
+    parentRunId: varchar("parent_run_id", { length: 96 })
+      .notNull()
+      .references(() => agentWorkflowRuns.runId, { onDelete: "restrict" }),
+    parentNodeId: varchar("parent_node_id", { length: 96 }).notNull(),
+    parentNodeRunId: varchar("parent_node_run_id", { length: 96 }).notNull(),
+    idempotencyKey: varchar("idempotency_key", { length: 220 }).notNull(),
+    childSessionId: varchar("child_session_id", { length: 80 }).notNull(),
+    childAgentRunId: varchar("child_agent_run_id", { length: 160 }),
+    grantJson: jsonb("grant_json").$type<AgentDelegationGrant>().notNull(),
+    status: varchar("status", { length: 24 }).notNull(),
+    createdAt: doublePrecision("created_at").notNull(),
+    updatedAt: doublePrecision("updated_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_agent_workflow_delegation_node_run").on(
+      table.parentNodeRunId,
+    ),
+    uniqueIndex("uk_agent_workflow_delegation_idempotency").on(
+      table.idempotencyKey,
+    ),
+    uniqueIndex("uk_agent_workflow_delegation_coordinate").on(
+      table.delegationId,
+      table.parentRunId,
+      table.parentNodeRunId,
+    ),
+    index("idx_agent_workflow_delegation_child").on(table.childSessionId),
+    foreignKey({
+      columns: [table.parentNodeRunId, table.parentRunId],
+      foreignColumns: [
+        agentWorkflowNodeRuns.nodeRunId,
+        agentWorkflowNodeRuns.runId,
+      ],
+      name: "fk_agent_workflow_delegation_node_run",
+    }).onDelete("restrict"),
+    check(
+      "ck_agent_workflow_delegation_status",
+      sql`${table.status} in ('created', 'running', 'completed', 'failed', 'cancelled')`,
+    ),
+  ],
+);
+
+export const agentWorkflowBudgetReservations = pgTable(
+  "agent_workflow_budget_reservations",
+  {
+    reservationId: varchar("reservation_id", { length: 96 }).primaryKey(),
+    parentRunId: varchar("parent_run_id", { length: 96 }).notNull(),
+    parentNodeRunId: varchar("parent_node_run_id", { length: 96 }).notNull(),
+    delegationId: varchar("delegation_id", { length: 96 }).notNull(),
+    idempotencyKey: varchar("idempotency_key", { length: 220 }).notNull(),
+    authorizationProofId: varchar("authorization_proof_id", {
+      length: 160,
+    }).notNull(),
+    authorizationSnapshotDigest: varchar("authorization_snapshot_digest", {
+      length: 71,
+    }).notNull(),
+    runPolicyDigest: varchar("run_policy_digest", { length: 71 }).notNull(),
+    reservedJson: jsonb("reserved_json").$type<AgentWorkflowBudget>().notNull(),
+    consumedJson: jsonb("consumed_json").$type<AgentWorkflowUsage>().notNull(),
+    status: varchar("status", { length: 16 }).notNull(),
+    usageReceiptId: varchar("usage_receipt_id", { length: 96 }),
+    reasonCode: varchar("reason_code", { length: 80 }),
+    settledAt: doublePrecision("settled_at"),
+    version: integer("version").notNull().default(1),
+    createdAt: doublePrecision("created_at").notNull(),
+    updatedAt: doublePrecision("updated_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_agent_workflow_budget_delegation").on(table.delegationId),
+    uniqueIndex("uk_agent_workflow_budget_idempotency").on(
+      table.idempotencyKey,
+    ),
+    uniqueIndex("uk_agent_workflow_budget_coordinate").on(
+      table.reservationId,
+      table.delegationId,
+      table.parentRunId,
+      table.parentNodeRunId,
+    ),
+    index("idx_agent_workflow_budget_parent").on(
+      table.parentRunId,
+      table.status,
+    ),
+    foreignKey({
+      columns: [table.delegationId, table.parentRunId, table.parentNodeRunId],
+      foreignColumns: [
+        agentWorkflowDelegations.delegationId,
+        agentWorkflowDelegations.parentRunId,
+        agentWorkflowDelegations.parentNodeRunId,
+      ],
+      name: "fk_agent_workflow_budget_delegation",
+    }).onDelete("restrict"),
+    check(
+      "ck_agent_workflow_budget_status",
+      sql`${table.status} in ('active', 'settled', 'released')`,
+    ),
+    check("ck_agent_workflow_budget_version", sql`${table.version} > 0`),
+    check(
+      "ck_agent_workflow_budget_terminal",
+      sql`(${table.status} = 'active' and ${table.usageReceiptId} is null and ${table.reasonCode} is null and ${table.settledAt} is null)
+        or (${table.status} = 'settled' and ${table.usageReceiptId} is not null and (${table.reasonCode} is null or ${table.reasonCode} in ('BUDGET_EXCEEDED', 'USAGE_UNKNOWN_OR_EXCEEDED')) and ${table.settledAt} is not null)
+        or (${table.status} = 'released' and ${table.usageReceiptId} is null and ${table.reasonCode} is not null and ${table.settledAt} is not null)`,
+    ),
+  ],
+);

package/template/packages/database/src/schema/agent-workflow-effects.ts

@@ -0,0 +1,213 @@
+import { sql } from "drizzle-orm";
+import {
+  check,
+  doublePrecision,
+  foreignKey,
+  index,
+  integer,
+  jsonb,
+  pgTable,
+  uniqueIndex,
+  varchar,
+} from "drizzle-orm/pg-core";
+import type {
+  AgentWorkflowArtifactRef,
+  AgentWorkflowSideEffectCommand,
+  JsonValue,
+} from "@southwind-ai/shared";
+import { agentWorkflowNodeRuns, agentWorkflowRuns } from "./agent-workflow.js";
+import { agentWorkflowBudgetReservations } from "./agent-workflow-delegation.js";
+
+export const agentWorkflowSideEffectCommands = pgTable(
+  "agent_workflow_side_effect_commands",
+  {
+    commandId: varchar("command_id", { length: 96 }).primaryKey(),
+    runId: varchar("run_id", { length: 96 })
+      .notNull()
+      .references(() => agentWorkflowRuns.runId, { onDelete: "restrict" }),
+    nodeRunId: varchar("node_run_id", { length: 96 })
+      .notNull()
+      .references(() => agentWorkflowNodeRuns.nodeRunId, {
+        onDelete: "restrict",
+      }),
+    effectKind: varchar("effect_kind", { length: 24 })
+      .$type<AgentWorkflowSideEffectCommand["effectKind"]>()
+      .notNull(),
+    effectKey: varchar("effect_key", { length: 160 }).notNull(),
+    adapterKind: varchar("adapter_kind", { length: 32 }).notNull(),
+    adapterCoordinate: varchar("adapter_coordinate", { length: 220 }).notNull(),
+    idempotencyKey: varchar("idempotency_key", { length: 220 }).notNull(),
+    requestDigest: varchar("request_digest", { length: 71 }).notNull(),
+    generation: integer("generation").notNull().default(0),
+    fenceTokenDigest: varchar("fence_token_digest", { length: 71 }),
+    authorizationSnapshotDigest: varchar("authorization_snapshot_digest", {
+      length: 71,
+    }),
+    runPolicyDigest: varchar("run_policy_digest", { length: 71 }),
+    budgetReservationId: varchar("budget_reservation_id", { length: 96 }),
+    delegationId: varchar("delegation_id", { length: 96 }),
+    status: varchar("status", { length: 24 })
+      .$type<AgentWorkflowSideEffectCommand["status"]>()
+      .notNull(),
+    safeErrorCode: varchar("safe_error_code", { length: 80 }),
+    claimedAt: doublePrecision("claimed_at"),
+    committedAt: doublePrecision("committed_at"),
+    version: integer("version").notNull().default(1),
+    createdAt: doublePrecision("created_at").notNull(),
+    updatedAt: doublePrecision("updated_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_agent_workflow_effect_idempotency").on(
+      table.idempotencyKey,
+    ),
+    uniqueIndex("uk_agent_workflow_effect_node_key").on(
+      table.nodeRunId,
+      table.effectKind,
+      table.effectKey,
+    ),
+    uniqueIndex("uk_agent_workflow_effect_receipt_coordinate").on(
+      table.commandId,
+      table.runId,
+      table.nodeRunId,
+      table.effectKind,
+      table.generation,
+      table.requestDigest,
+      table.fenceTokenDigest,
+    ),
+    index("idx_agent_workflow_effect_reconcile").on(
+      table.status,
+      table.updatedAt,
+    ),
+    check(
+      "ck_agent_workflow_effect_kind",
+      sql`${table.effectKind} in ('tool', 'approval', 'job', 'subagent')`,
+    ),
+    check(
+      "ck_agent_workflow_effect_adapter",
+      sql`(${table.effectKind} = 'tool' and ${table.adapterKind} = 'agent-tool')
+        or (${table.effectKind} = 'approval' and ${table.adapterKind} = 'approval-work-item')
+        or (${table.effectKind} = 'job' and ${table.adapterKind} = 'durable-job')
+        or (${table.effectKind} = 'subagent' and ${table.adapterKind} = 'child-agent')`,
+    ),
+    check(
+      "ck_agent_workflow_effect_budget",
+      sql`(${table.effectKind} = 'subagent' and ${table.budgetReservationId} is not null and ${table.delegationId} is not null)
+        or (${table.effectKind} <> 'subagent' and ${table.budgetReservationId} is null and ${table.delegationId} is null)`,
+    ),
+    foreignKey({
+      columns: [table.nodeRunId, table.runId],
+      foreignColumns: [
+        agentWorkflowNodeRuns.nodeRunId,
+        agentWorkflowNodeRuns.runId,
+      ],
+      name: "fk_agent_workflow_effect_node_run",
+    }).onDelete("restrict"),
+    foreignKey({
+      columns: [
+        table.budgetReservationId,
+        table.delegationId,
+        table.runId,
+        table.nodeRunId,
+      ],
+      foreignColumns: [
+        agentWorkflowBudgetReservations.reservationId,
+        agentWorkflowBudgetReservations.delegationId,
+        agentWorkflowBudgetReservations.parentRunId,
+        agentWorkflowBudgetReservations.parentNodeRunId,
+      ],
+      name: "fk_agent_workflow_effect_budget_reservation",
+    }).onDelete("restrict"),
+    check(
+      "ck_agent_workflow_effect_status",
+      sql`${table.status} in ('prepared', 'dispatched', 'cancellation-requested', 'committed', 'reconciled', 'cancelled', 'failed')`,
+    ),
+    check("ck_agent_workflow_effect_version", sql`${table.version} > 0`),
+    check("ck_agent_workflow_effect_generation", sql`${table.generation} >= 0`),
+    check(
+      "ck_agent_workflow_effect_fence",
+      sql`(${table.generation} = 0 and ${table.fenceTokenDigest} is null and ${table.authorizationSnapshotDigest} is null and ${table.runPolicyDigest} is null and ${table.claimedAt} is null)
+        or (${table.generation} > 0 and ${table.fenceTokenDigest} is not null and ${table.authorizationSnapshotDigest} is not null and ${table.runPolicyDigest} is not null and ${table.claimedAt} is not null)`,
+    ),
+    check(
+      "ck_agent_workflow_effect_committed_time",
+      sql`(${table.status} in ('committed', 'reconciled') and ${table.committedAt} is not null)
+        or (${table.status} in ('prepared', 'dispatched', 'cancellation-requested', 'cancelled', 'failed') and ${table.committedAt} is null)`,
+    ),
+  ],
+);
+
+export const agentWorkflowSideEffectReceipts = pgTable(
+  "agent_workflow_side_effect_receipts",
+  {
+    receiptId: varchar("receipt_id", { length: 96 }).primaryKey(),
+    commandId: varchar("command_id", { length: 96 })
+      .notNull()
+      .references(() => agentWorkflowSideEffectCommands.commandId, {
+        onDelete: "restrict",
+      }),
+    runId: varchar("run_id", { length: 96 })
+      .notNull()
+      .references(() => agentWorkflowRuns.runId, { onDelete: "restrict" }),
+    nodeRunId: varchar("node_run_id", { length: 96 })
+      .notNull()
+      .references(() => agentWorkflowNodeRuns.nodeRunId, {
+        onDelete: "restrict",
+      }),
+    effectKind: varchar("effect_kind", { length: 24 })
+      .$type<AgentWorkflowSideEffectCommand["effectKind"]>()
+      .notNull(),
+    generation: integer("generation").notNull(),
+    fenceTokenDigest: varchar("fence_token_digest", {
+      length: 71,
+    }).notNull(),
+    requestDigest: varchar("request_digest", { length: 71 }).notNull(),
+    externalReceiptId: varchar("external_receipt_id", {
+      length: 200,
+    }).notNull(),
+    resultDigest: varchar("result_digest", { length: 71 }).notNull(),
+    smallResultJson: jsonb("small_result_json").$type<JsonValue>(),
+    artifactRefsJson:
+      jsonb("artifact_refs_json").$type<readonly AgentWorkflowArtifactRef[]>(),
+    authorizationSnapshotDigest: varchar("authorization_snapshot_digest", {
+      length: 71,
+    }).notNull(),
+    runPolicyDigest: varchar("run_policy_digest", { length: 71 }).notNull(),
+    committedAt: doublePrecision("committed_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_agent_workflow_effect_receipt_command").on(table.commandId),
+    index("idx_agent_workflow_effect_receipt_run").on(
+      table.runId,
+      table.committedAt,
+    ),
+    foreignKey({
+      columns: [
+        table.commandId,
+        table.runId,
+        table.nodeRunId,
+        table.effectKind,
+        table.generation,
+        table.requestDigest,
+        table.fenceTokenDigest,
+      ],
+      foreignColumns: [
+        agentWorkflowSideEffectCommands.commandId,
+        agentWorkflowSideEffectCommands.runId,
+        agentWorkflowSideEffectCommands.nodeRunId,
+        agentWorkflowSideEffectCommands.effectKind,
+        agentWorkflowSideEffectCommands.generation,
+        agentWorkflowSideEffectCommands.requestDigest,
+        agentWorkflowSideEffectCommands.fenceTokenDigest,
+      ],
+      name: "fk_agent_workflow_effect_receipt_command",
+    }).onDelete("restrict"),
+    check(
+      "ck_agent_workflow_effect_receipt_kind",
+      sql`${table.effectKind} in ('tool', 'approval', 'job', 'subagent')`,
+    ),
+    check(
+      "ck_agent_workflow_effect_receipt_generation",
+      sql`${table.generation} > 0`,
+    ),
+  ],
+);