kiokuko-dsh 0.1.0

package/migrations/022_embedding_setup_v2.sql

@@ -0,0 +1,236 @@
+-- Persist local embedding setup state while retaining the immutable v1
+-- semantic projections. This migration performs no model or network I/O.
+
+CREATE TABLE embedding_profiles_v2 (
+    profile_id TEXT PRIMARY KEY
+        CHECK (length(profile_id) = 64 AND profile_id NOT GLOB '*[^0-9a-f]*'),
+    schema_version INTEGER NOT NULL DEFAULT 1 CHECK (schema_version IN (1, 2)),
+    provider_kind TEXT NOT NULL
+        CHECK (provider_kind IN ('openai-compatible', 'local-transformers')),
+    endpoint_fingerprint TEXT
+        CHECK (endpoint_fingerprint IS NULL OR (length(endpoint_fingerprint) = 64 AND endpoint_fingerprint NOT GLOB '*[^0-9a-f]*')),
+    model TEXT NOT NULL,
+    dimensions INTEGER NOT NULL CHECK (dimensions BETWEEN 2 AND 8192),
+    distance_metric TEXT NOT NULL CHECK (distance_metric = 'cosine'),
+    distance_ceiling REAL NOT NULL CHECK (distance_ceiling > 0.0 AND distance_ceiling < 2.0),
+    document_template_version INTEGER NOT NULL CHECK (document_template_version > 0),
+    query_template_version INTEGER NOT NULL CHECK (query_template_version > 0),
+    preset_id TEXT,
+    source_model TEXT,
+    artifact_repository TEXT,
+    model_revision TEXT,
+    artifact_manifest_hash TEXT
+        CHECK (artifact_manifest_hash IS NULL OR (length(artifact_manifest_hash) = 64 AND artifact_manifest_hash NOT GLOB '*[^0-9a-f]*')),
+    inference_engine TEXT,
+    inference_engine_version TEXT,
+    dtype TEXT,
+    pooling TEXT,
+    normalize INTEGER CHECK (normalize IS NULL OR normalize IN (0, 1)),
+    maximum_tokens INTEGER CHECK (maximum_tokens IS NULL OR maximum_tokens > 0),
+    input_contract TEXT,
+    query_prefix TEXT,
+    document_prefix TEXT,
+    created_at TEXT NOT NULL,
+    CHECK (
+        (schema_version = 1 AND provider_kind = 'openai-compatible'
+            AND endpoint_fingerprint IS NOT NULL
+            AND preset_id IS NULL AND source_model IS NULL AND artifact_repository IS NULL
+            AND model_revision IS NULL AND artifact_manifest_hash IS NULL
+            AND inference_engine IS NULL AND inference_engine_version IS NULL
+            AND dtype IS NULL AND pooling IS NULL AND normalize IS NULL
+            AND maximum_tokens IS NULL AND input_contract IS NULL
+            AND query_prefix IS NULL AND document_prefix IS NULL)
+        OR
+        (schema_version = 2 AND provider_kind = 'local-transformers'
+            AND endpoint_fingerprint IS NULL
+            AND preset_id IS NOT NULL AND source_model IS NOT NULL
+            AND artifact_repository IS NOT NULL AND model_revision IS NOT NULL
+            AND artifact_manifest_hash IS NOT NULL AND inference_engine IS NOT NULL
+            AND inference_engine_version IS NOT NULL AND dtype IS NOT NULL
+            AND pooling IS NOT NULL AND normalize IS NOT NULL
+            AND maximum_tokens IS NOT NULL AND input_contract IS NOT NULL
+            AND query_prefix IS NOT NULL AND document_prefix IS NOT NULL)
+    )
+);
+
+INSERT INTO embedding_profiles_v2 (
+    profile_id, schema_version, provider_kind, endpoint_fingerprint, model,
+    dimensions, distance_metric, distance_ceiling, document_template_version,
+    query_template_version, created_at
+)
+SELECT profile_id, 1, provider_kind, endpoint_fingerprint, model,
+       dimensions, distance_metric, distance_ceiling, document_template_version,
+       query_template_version, created_at
+  FROM embedding_profiles;
+
+CREATE TABLE embedding_runtime_v2 (
+    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+    active_profile_id TEXT REFERENCES embedding_profiles_v2(profile_id),
+    generation INTEGER NOT NULL CHECK (generation > 0),
+    activated_at TEXT
+);
+
+INSERT INTO embedding_runtime_v2 (singleton, active_profile_id, generation, activated_at)
+SELECT singleton, active_profile_id, generation, activated_at
+  FROM embedding_runtime;
+
+CREATE TABLE entry_embeddings_v2 (
+    entry_id TEXT NOT NULL,
+    profile_id TEXT NOT NULL REFERENCES embedding_profiles_v2(profile_id) ON DELETE CASCADE,
+    revision INTEGER NOT NULL CHECK (revision > 0),
+    content_hash TEXT NOT NULL,
+    document_hash TEXT NOT NULL CHECK (length(document_hash) = 64 AND document_hash NOT GLOB '*[^0-9a-f]*'),
+    dimensions INTEGER NOT NULL CHECK (dimensions BETWEEN 2 AND 8192),
+    embedding BLOB NOT NULL,
+    vector_hash TEXT NOT NULL CHECK (length(vector_hash) = 64 AND vector_hash NOT GLOB '*[^0-9a-f]*'),
+    created_at TEXT NOT NULL,
+    PRIMARY KEY (entry_id, profile_id),
+    FOREIGN KEY (entry_id, revision) REFERENCES entry_revisions(entry_id, revision) ON DELETE CASCADE,
+    CHECK (length(embedding) = dimensions * 4)
+);
+
+INSERT INTO entry_embeddings_v2 (
+    entry_id, profile_id, revision, content_hash, document_hash, dimensions,
+    embedding, vector_hash, created_at
+)
+SELECT entry_id, profile_id, revision, content_hash, document_hash, dimensions,
+       embedding, vector_hash, created_at
+  FROM entry_embeddings;
+
+CREATE TABLE embedding_jobs_v2 (
+    entry_id TEXT NOT NULL,
+    profile_id TEXT NOT NULL REFERENCES embedding_profiles_v2(profile_id) ON DELETE CASCADE,
+    revision INTEGER NOT NULL CHECK (revision > 0),
+    content_hash TEXT NOT NULL,
+    state TEXT NOT NULL CHECK (state IN ('pending', 'leased', 'failed', 'blocked')),
+    attempts INTEGER NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+    available_at TEXT NOT NULL,
+    lease_id TEXT,
+    lease_expires_at TEXT,
+    error_code TEXT CHECK (error_code IS NULL OR error_code IN (
+        'timeout', 'rate_limited', 'provider_unavailable', 'invalid_response',
+        'dimension_mismatch', 'secret_blocked', 'profile_changed', 'entry_changed'
+    )),
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    PRIMARY KEY (entry_id, profile_id),
+    FOREIGN KEY (entry_id, revision) REFERENCES entry_revisions(entry_id, revision) ON DELETE CASCADE,
+    CHECK (
+        (state = 'leased' AND lease_id IS NOT NULL AND lease_expires_at IS NOT NULL)
+        OR (state <> 'leased' AND lease_id IS NULL AND lease_expires_at IS NULL)
+    )
+);
+
+INSERT INTO embedding_jobs_v2 (
+    entry_id, profile_id, revision, content_hash, state, attempts,
+    available_at, lease_id, lease_expires_at, error_code, created_at, updated_at
+)
+SELECT entry_id, profile_id, revision, content_hash, state, attempts,
+       available_at, lease_id, lease_expires_at, error_code, created_at, updated_at
+  FROM embedding_jobs;
+
+CREATE TABLE query_embeddings_v2 (
+    profile_id TEXT NOT NULL REFERENCES embedding_profiles_v2(profile_id) ON DELETE CASCADE,
+    query_hash TEXT NOT NULL CHECK (length(query_hash) = 64 AND query_hash NOT GLOB '*[^0-9a-f]*'),
+    dimensions INTEGER NOT NULL CHECK (dimensions BETWEEN 2 AND 8192),
+    embedding BLOB NOT NULL,
+    vector_hash TEXT NOT NULL CHECK (length(vector_hash) = 64 AND vector_hash NOT GLOB '*[^0-9a-f]*'),
+    created_at TEXT NOT NULL,
+    last_used_at TEXT NOT NULL,
+    PRIMARY KEY (profile_id, query_hash),
+    CHECK (length(embedding) = dimensions * 4)
+);
+
+INSERT INTO query_embeddings_v2 (
+    profile_id, query_hash, dimensions, embedding, vector_hash, created_at, last_used_at
+)
+SELECT profile_id, query_hash, dimensions, embedding, vector_hash, created_at, last_used_at
+  FROM query_embeddings;
+
+DROP INDEX idx_query_embeddings_lru;
+DROP TABLE query_embeddings;
+DROP INDEX idx_embedding_jobs_claim;
+DROP TABLE embedding_jobs;
+DROP INDEX idx_entry_embeddings_profile_revision;
+DROP TABLE entry_embeddings;
+DROP TABLE embedding_runtime;
+DROP TRIGGER embedding_profiles_immutable_update;
+DROP TABLE embedding_profiles;
+
+ALTER TABLE embedding_profiles_v2 RENAME TO embedding_profiles;
+ALTER TABLE embedding_runtime_v2 RENAME TO embedding_runtime;
+ALTER TABLE entry_embeddings_v2 RENAME TO entry_embeddings;
+ALTER TABLE embedding_jobs_v2 RENAME TO embedding_jobs;
+ALTER TABLE query_embeddings_v2 RENAME TO query_embeddings;
+
+CREATE TRIGGER embedding_profiles_immutable_update
+BEFORE UPDATE ON embedding_profiles
+BEGIN
+    SELECT RAISE(ABORT, 'embedding_profiles are immutable');
+END;
+
+CREATE INDEX idx_entry_embeddings_profile_revision
+    ON entry_embeddings(profile_id, entry_id, revision);
+CREATE INDEX idx_embedding_jobs_claim
+    ON embedding_jobs(profile_id, state, available_at, entry_id);
+CREATE INDEX idx_query_embeddings_lru
+    ON query_embeddings(profile_id, last_used_at, query_hash);
+
+CREATE TABLE embedding_model_installations (
+    installation_id TEXT PRIMARY KEY,
+    preset_id TEXT NOT NULL,
+    repository_id TEXT NOT NULL,
+    revision TEXT NOT NULL,
+    artifact_manifest_hash TEXT NOT NULL CHECK (length(artifact_manifest_hash) = 64 AND artifact_manifest_hash NOT GLOB '*[^0-9a-f]*'),
+    relative_path TEXT NOT NULL,
+    state TEXT NOT NULL CHECK (state IN ('staging', 'verified', 'corrupt', 'missing')),
+    total_bytes INTEGER NOT NULL CHECK (total_bytes >= 0),
+    installed_at TEXT NOT NULL,
+    verified_at TEXT,
+    last_checked_at TEXT NOT NULL
+);
+
+CREATE TABLE embedding_settings (
+    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+    mode TEXT NOT NULL CHECK (mode IN ('off', 'optional', 'required')),
+    provider_kind TEXT CHECK (provider_kind IS NULL OR provider_kind IN ('local-transformers', 'openai-compatible', 'legacy-environment')),
+    preset_id TEXT,
+    model_installation_id TEXT REFERENCES embedding_model_installations(installation_id),
+    vector_backend TEXT NOT NULL CHECK (vector_backend IN ('auto', 'javascript', 'sqlite-vec')),
+    batch_size INTEGER NOT NULL CHECK (batch_size BETWEEN 1 AND 64),
+    timeout_ms INTEGER NOT NULL CHECK (timeout_ms BETWEEN 100 AND 120000),
+    legacy_profile_id TEXT REFERENCES embedding_profiles(profile_id),
+    setup_state TEXT NOT NULL CHECK (setup_state IN ('disabled', 'requires_setup', 'installing', 'ready', 'degraded')),
+    updated_at TEXT NOT NULL
+);
+
+INSERT INTO embedding_settings (
+    singleton, mode, provider_kind, preset_id, model_installation_id,
+    vector_backend, batch_size, timeout_ms, legacy_profile_id, setup_state, updated_at
+)
+SELECT 1,
+       'off',
+       CASE WHEN r.active_profile_id IS NULL THEN NULL ELSE 'legacy-environment' END,
+       NULL,
+       NULL,
+       'auto',
+       16,
+       30000,
+       r.active_profile_id,
+       CASE WHEN r.active_profile_id IS NULL THEN 'disabled' ELSE 'requires_setup' END,
+       COALESCE(r.activated_at, '1970-01-01T00:00:00.000Z')
+  FROM embedding_runtime AS r;
+
+CREATE TABLE embedding_setup_runs (
+    setup_id TEXT PRIMARY KEY,
+    preset_id TEXT NOT NULL,
+    phase TEXT NOT NULL CHECK (phase IN ('planned', 'downloading', 'verifying', 'probing', 'activating', 'embedding', 'completed', 'failed')),
+    model_installation_id TEXT REFERENCES embedding_model_installations(installation_id),
+    active_profile_id TEXT REFERENCES embedding_profiles(profile_id),
+    initial_entry_count INTEGER NOT NULL CHECK (initial_entry_count >= 0),
+    processed_entry_count INTEGER NOT NULL CHECK (processed_entry_count >= 0),
+    failure_code TEXT,
+    started_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    completed_at TEXT
+);

package/migrations/023_enno_dsh_client.sql

@@ -0,0 +1,291 @@
+-- Add the DeepSeek Harness route without changing the meaning of existing
+-- client bindings. SQLite cannot alter a CHECK constraint in place while
+-- foreign keys are enabled, so rebuild the Enno graph atomically from
+-- constraint-free snapshots and restore every row, index, and trigger.
+
+CREATE TABLE __kiokuko_023_enno_advisory_contributions AS
+SELECT * FROM enno_advisory_contributions;
+CREATE TABLE __kiokuko_023_enno_advisory_rounds AS
+SELECT * FROM enno_advisory_rounds;
+CREATE TABLE __kiokuko_023_enno_client_continuations AS
+SELECT * FROM enno_client_continuations;
+CREATE TABLE __kiokuko_023_enno_execution_leases AS
+SELECT * FROM enno_execution_leases;
+CREATE TABLE __kiokuko_023_enno_operation_receipts AS
+SELECT * FROM enno_operation_receipts;
+CREATE TABLE __kiokuko_023_enno_resume_tokens AS
+SELECT * FROM enno_resume_tokens;
+CREATE TABLE __kiokuko_023_enno_verifier_runs AS
+SELECT * FROM enno_verifier_runs;
+CREATE TABLE __kiokuko_023_enno_work_units AS
+SELECT * FROM enno_work_units;
+CREATE TABLE __kiokuko_023_enno_contracts AS
+SELECT * FROM enno_contracts;
+
+DROP TABLE enno_advisory_contributions;
+DROP TABLE enno_execution_leases;
+DROP TABLE enno_verifier_runs;
+DROP TABLE enno_advisory_rounds;
+DROP TABLE enno_operation_receipts;
+DROP TABLE enno_resume_tokens;
+DROP TABLE enno_client_continuations;
+DROP TABLE enno_work_units;
+DROP TABLE enno_contracts;
+
+CREATE TABLE enno_contracts (
+    run_id TEXT PRIMARY KEY REFERENCES ledger_runs(run_id) ON DELETE CASCADE,
+    workspace TEXT NOT NULL,
+    orchestration_session_id TEXT NOT NULL CHECK (length(orchestration_session_id) BETWEEN 1 AND 256),
+    client_kind TEXT CHECK (client_kind IS NULL OR client_kind IN ('codex', 'claude', 'opencode', 'dsh')),
+    client_version TEXT CHECK (client_version IS NULL OR length(client_version) BETWEEN 1 AND 100),
+    client_session_id TEXT CHECK (client_session_id IS NULL OR length(client_session_id) BETWEEN 1 AND 256),
+    repository_root TEXT NOT NULL CHECK (length(repository_root) BETWEEN 1 AND 4096),
+    task_type TEXT NOT NULL CHECK (task_type IN ('build', 'debug', 'review', 'devops')),
+    status TEXT NOT NULL CHECK (status IN (
+        'intake', 'zenki_planning', 'needs_confirmation', 'goki_executing',
+        'enno_verifying', 'completed', 'blocked', 'cancelled'
+    )),
+    revision INTEGER NOT NULL CHECK (revision >= 1),
+    confirmation_state TEXT NOT NULL CHECK (confirmation_state IN (
+        'not_required', 'pending', 'approved', 'revision_requested', 'cancelled'
+    )),
+    attempts INTEGER NOT NULL DEFAULT 0 CHECK (attempts BETWEEN 0 AND 20),
+    mutation_revision INTEGER NOT NULL DEFAULT 0 CHECK (mutation_revision >= 0),
+    contract_json TEXT NOT NULL,
+    handoff_json TEXT NOT NULL,
+    intake_discovery_json TEXT NOT NULL,
+    plan_digest TEXT,
+    blocker TEXT,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    phase TEXT CHECK (phase IS NULL OR phase IN ('oduno_ideal', 'oduno_meditation')),
+    ideal_json TEXT,
+    meditation_json TEXT,
+    route_epoch INTEGER NOT NULL DEFAULT 0
+        CHECK (typeof(route_epoch) = 'integer' AND route_epoch >= 0),
+    UNIQUE (run_id, workspace, orchestration_session_id),
+    CHECK ((client_version IS NULL AND client_session_id IS NULL) OR client_kind IS NOT NULL)
+);
+
+CREATE TRIGGER enno_contract_identity_insert_guard
+BEFORE INSERT ON enno_contracts
+BEGIN
+    SELECT RAISE(ABORT, 'enno contract run identity mismatch')
+    WHERE (SELECT workspace FROM ledger_runs WHERE run_id = NEW.run_id) IS NULL
+       OR (SELECT workspace FROM ledger_runs WHERE run_id = NEW.run_id) <> NEW.workspace
+       OR (SELECT session_id FROM run_intakes WHERE run_id = NEW.run_id) IS NULL
+       OR (SELECT session_id FROM run_intakes WHERE run_id = NEW.run_id) <> NEW.orchestration_session_id;
+END;
+
+CREATE TRIGGER enno_contract_identity_update_guard
+BEFORE UPDATE OF run_id, workspace, orchestration_session_id ON enno_contracts
+BEGIN
+    SELECT RAISE(ABORT, 'enno contract run identity mismatch')
+    WHERE (SELECT workspace FROM ledger_runs WHERE run_id = NEW.run_id) IS NULL
+       OR (SELECT workspace FROM ledger_runs WHERE run_id = NEW.run_id) <> NEW.workspace
+       OR (SELECT session_id FROM run_intakes WHERE run_id = NEW.run_id) IS NULL
+       OR (SELECT session_id FROM run_intakes WHERE run_id = NEW.run_id) <> NEW.orchestration_session_id;
+END;
+
+CREATE INDEX idx_enno_contracts_session_status
+ON enno_contracts(client_kind, client_session_id, status, updated_at DESC);
+
+CREATE TABLE enno_work_units (
+    run_id TEXT NOT NULL REFERENCES enno_contracts(run_id) ON DELETE CASCADE,
+    work_unit_id TEXT NOT NULL CHECK (length(work_unit_id) BETWEEN 1 AND 256),
+    contract_revision INTEGER NOT NULL CHECK (contract_revision >= 1),
+    order_index INTEGER NOT NULL CHECK (order_index >= 0),
+    work_unit_json TEXT NOT NULL,
+    status TEXT NOT NULL CHECK (status IN ('pending', 'in_progress', 'completed', 'failed', 'blocked')),
+    attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count BETWEEN 0 AND 20),
+    result_json TEXT,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    PRIMARY KEY (run_id, contract_revision, work_unit_id),
+    UNIQUE (run_id, contract_revision, order_index)
+);
+
+CREATE TABLE enno_verifier_runs (
+    verifier_run_id TEXT PRIMARY KEY,
+    run_id TEXT NOT NULL REFERENCES enno_contracts(run_id) ON DELETE CASCADE,
+    work_unit_id TEXT,
+    contract_revision INTEGER NOT NULL CHECK (contract_revision >= 1),
+    mutation_revision INTEGER NOT NULL CHECK (mutation_revision >= 0),
+    verifier_id TEXT NOT NULL CHECK (length(verifier_id) BETWEEN 1 AND 256),
+    verifier_json TEXT NOT NULL,
+    status TEXT NOT NULL CHECK (status IN ('started', 'passed', 'failed', 'timeout', 'spawn_failed', 'abandoned')),
+    exit_code INTEGER,
+    signal TEXT,
+    duration_ms INTEGER,
+    stdout_preview TEXT,
+    stderr_preview TEXT,
+    stdout_digest TEXT,
+    stderr_digest TEXT,
+    owner_nonce TEXT,
+    lease_expires_at TEXT,
+    heartbeat_at TEXT,
+    failure_code TEXT,
+    repository_state_policy_version INTEGER,
+    pre_repository_digest TEXT,
+    post_repository_digest TEXT,
+    verifier_spec_digest TEXT,
+    changed_during_verification INTEGER CHECK (changed_during_verification IS NULL OR changed_during_verification IN (0, 1)),
+    started_at TEXT NOT NULL,
+    finished_at TEXT,
+    FOREIGN KEY (run_id, contract_revision, work_unit_id)
+        REFERENCES enno_work_units(run_id, contract_revision, work_unit_id),
+    CHECK (
+        (status = 'started' AND finished_at IS NULL AND duration_ms IS NULL
+          AND typeof(owner_nonce) = 'text' AND typeof(lease_expires_at) = 'text' AND typeof(heartbeat_at) = 'text')
+        OR (status = 'abandoned' AND finished_at IS NOT NULL AND typeof(failure_code) = 'text')
+        OR (status NOT IN ('started', 'abandoned') AND finished_at IS NOT NULL AND duration_ms IS NOT NULL AND duration_ms >= 0)
+    )
+);
+
+CREATE INDEX idx_enno_verifier_runs_freshness
+ON enno_verifier_runs(run_id, contract_revision, mutation_revision, status, finished_at DESC);
+CREATE INDEX idx_enno_verifier_runs_lease
+ON enno_verifier_runs(run_id, status, lease_expires_at);
+
+CREATE TABLE enno_operation_receipts (
+    run_id TEXT NOT NULL REFERENCES enno_contracts(run_id) ON DELETE CASCADE,
+    operation TEXT NOT NULL CHECK (operation IN (
+        'ideal_submit', 'advice_submit', 'plan_submit', 'answer', 'work_report',
+        'finish', 'meditation_submit', 'verify_prepare'
+    )),
+    idempotency_key TEXT NOT NULL CHECK (length(idempotency_key) BETWEEN 1 AND 256),
+    request_digest TEXT NOT NULL CHECK (
+        length(request_digest) = 64 AND request_digest NOT GLOB '*[^0-9a-f]*'
+    ),
+    state TEXT NOT NULL CHECK (state IN ('started', 'completed', 'failed', 'abandoned')),
+    response_json TEXT,
+    owner_nonce TEXT,
+    lease_expires_at TEXT,
+    heartbeat_at TEXT,
+    failure_code TEXT,
+    created_at TEXT NOT NULL,
+    finished_at TEXT,
+    CHECK (
+        (state = 'started' AND response_json IS NULL AND finished_at IS NULL
+          AND typeof(owner_nonce) = 'text' AND typeof(lease_expires_at) = 'text' AND typeof(heartbeat_at) = 'text')
+        OR (state = 'completed' AND typeof(response_json) = 'text' AND finished_at IS NOT NULL)
+        OR (state IN ('failed', 'abandoned') AND response_json IS NULL AND finished_at IS NOT NULL
+          AND typeof(failure_code) = 'text')
+    ),
+    PRIMARY KEY (run_id, operation, idempotency_key)
+);
+
+CREATE TABLE enno_client_continuations (
+    run_id TEXT NOT NULL REFERENCES enno_contracts(run_id) ON DELETE CASCADE,
+    client_kind TEXT NOT NULL CHECK (client_kind IN ('codex', 'claude', 'opencode', 'dsh')),
+    source_session_id TEXT NOT NULL CHECK (length(source_session_id) BETWEEN 1 AND 256),
+    contract_revision INTEGER NOT NULL CHECK (contract_revision >= 1),
+    mutation_revision INTEGER NOT NULL CHECK (mutation_revision >= 0),
+    attempts INTEGER NOT NULL CHECK (attempts BETWEEN 0 AND 20),
+    directive_digest TEXT NOT NULL CHECK (
+        length(directive_digest) = 64 AND directive_digest NOT GLOB '*[^0-9a-f]*'
+    ),
+    continuation_count INTEGER NOT NULL CHECK (continuation_count BETWEEN 0 AND 20),
+    total_count INTEGER NOT NULL CHECK (total_count BETWEEN 0 AND 20),
+    updated_at TEXT NOT NULL,
+    PRIMARY KEY (run_id, client_kind, source_session_id)
+);
+
+CREATE TABLE enno_resume_tokens (
+    token_hash TEXT PRIMARY KEY CHECK (
+        length(token_hash) = 64 AND token_hash NOT GLOB '*[^0-9a-f]*'
+    ),
+    run_id TEXT NOT NULL REFERENCES enno_contracts(run_id) ON DELETE CASCADE,
+    repository_root TEXT NOT NULL,
+    route_epoch INTEGER NOT NULL CHECK (typeof(route_epoch) = 'integer' AND route_epoch >= 0),
+    client_kind TEXT NOT NULL CHECK (client_kind IN ('codex', 'claude', 'opencode', 'dsh')),
+    client_session_id TEXT NOT NULL CHECK (length(client_session_id) BETWEEN 1 AND 256),
+    expires_at TEXT NOT NULL,
+    created_at TEXT NOT NULL
+);
+
+CREATE INDEX idx_enno_resume_tokens_run_epoch
+ON enno_resume_tokens(run_id, route_epoch, expires_at);
+
+CREATE TABLE enno_execution_leases (
+    run_id TEXT PRIMARY KEY REFERENCES enno_contracts(run_id) ON DELETE CASCADE,
+    contract_revision INTEGER NOT NULL CHECK (typeof(contract_revision) = 'integer' AND contract_revision >= 1),
+    mutation_revision INTEGER NOT NULL CHECK (typeof(mutation_revision) = 'integer' AND mutation_revision >= 0),
+    work_unit_id TEXT NOT NULL CHECK (length(work_unit_id) BETWEEN 1 AND 256),
+    route_epoch INTEGER NOT NULL CHECK (typeof(route_epoch) = 'integer' AND route_epoch >= 0),
+    owner_client_kind TEXT NOT NULL CHECK (owner_client_kind IN ('codex', 'claude', 'opencode', 'dsh')),
+    owner_session_id TEXT NOT NULL CHECK (length(owner_session_id) BETWEEN 1 AND 256),
+    lease_token_hash TEXT NOT NULL UNIQUE CHECK (
+        length(lease_token_hash) = 64 AND lease_token_hash NOT GLOB '*[^0-9a-f]*'
+    ),
+    lease_expires_at TEXT NOT NULL,
+    heartbeat_at TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    FOREIGN KEY (run_id, contract_revision, work_unit_id)
+        REFERENCES enno_work_units(run_id, contract_revision, work_unit_id)
+);
+
+CREATE TABLE enno_advisory_rounds (
+    round_id TEXT PRIMARY KEY,
+    run_id TEXT NOT NULL REFERENCES enno_contracts(run_id) ON DELETE CASCADE,
+    contract_revision INTEGER NOT NULL CHECK (
+        typeof(contract_revision) = 'integer' AND contract_revision >= 1
+    ),
+    mutation_revision INTEGER NOT NULL CHECK (
+        typeof(mutation_revision) = 'integer' AND mutation_revision >= 0
+    ),
+    phase TEXT NOT NULL CHECK (phase IN ('ideal', 'planning', 'final_review')),
+    input_digest TEXT NOT NULL CHECK (
+        length(input_digest) = 64 AND input_digest NOT GLOB '*[^0-9a-f]*'
+    ),
+    policy_version INTEGER NOT NULL CHECK (
+        typeof(policy_version) = 'integer' AND policy_version = 1
+    ),
+    source TEXT NOT NULL CHECK (source = 'host_reported'),
+    state TEXT NOT NULL CHECK (state IN ('advice_submitted', 'aggregated', 'consumed')),
+    degraded INTEGER NOT NULL CHECK (typeof(degraded) = 'integer' AND degraded IN (0, 1)),
+    aggregate_json TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    UNIQUE (run_id, contract_revision, mutation_revision, phase, input_digest)
+);
+
+CREATE INDEX idx_enno_advisory_rounds_current
+ON enno_advisory_rounds(run_id, contract_revision, mutation_revision, phase, state);
+
+CREATE TABLE enno_advisory_contributions (
+    round_id TEXT NOT NULL REFERENCES enno_advisory_rounds(round_id) ON DELETE CASCADE,
+    slot_id TEXT NOT NULL CHECK (length(slot_id) BETWEEN 1 AND 100),
+    slot_rank INTEGER NOT NULL CHECK (
+        typeof(slot_rank) = 'integer' AND slot_rank BETWEEN 0 AND 2
+    ),
+    outcome TEXT NOT NULL CHECK (outcome IN ('completed', 'failed', 'timeout', 'unavailable')),
+    contribution_json TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    PRIMARY KEY (round_id, slot_id),
+    UNIQUE (round_id, slot_rank)
+);
+
+CREATE INDEX idx_enno_advisory_contributions_round
+ON enno_advisory_contributions(round_id, slot_rank);
+
+INSERT INTO enno_contracts SELECT * FROM __kiokuko_023_enno_contracts;
+INSERT INTO enno_work_units SELECT * FROM __kiokuko_023_enno_work_units;
+INSERT INTO enno_verifier_runs SELECT * FROM __kiokuko_023_enno_verifier_runs;
+INSERT INTO enno_operation_receipts SELECT * FROM __kiokuko_023_enno_operation_receipts;
+INSERT INTO enno_client_continuations SELECT * FROM __kiokuko_023_enno_client_continuations;
+INSERT INTO enno_resume_tokens SELECT * FROM __kiokuko_023_enno_resume_tokens;
+INSERT INTO enno_execution_leases SELECT * FROM __kiokuko_023_enno_execution_leases;
+INSERT INTO enno_advisory_rounds SELECT * FROM __kiokuko_023_enno_advisory_rounds;
+INSERT INTO enno_advisory_contributions SELECT * FROM __kiokuko_023_enno_advisory_contributions;
+
+DROP TABLE __kiokuko_023_enno_advisory_contributions;
+DROP TABLE __kiokuko_023_enno_advisory_rounds;
+DROP TABLE __kiokuko_023_enno_client_continuations;
+DROP TABLE __kiokuko_023_enno_execution_leases;
+DROP TABLE __kiokuko_023_enno_operation_receipts;
+DROP TABLE __kiokuko_023_enno_resume_tokens;
+DROP TABLE __kiokuko_023_enno_verifier_runs;
+DROP TABLE __kiokuko_023_enno_work_units;
+DROP TABLE __kiokuko_023_enno_contracts;

package/migrations/down/020_cjk_fts.sql

@@ -0,0 +1,38 @@
+-- Manual rollback for migration 020. Run only after stopping every Kiokuko
+-- process and backing up the database.
+BEGIN IMMEDIATE;
+
+DROP TRIGGER entry_search_documents_au;
+DROP TRIGGER entry_search_documents_ad;
+DROP TRIGGER entry_search_documents_ai;
+DROP TABLE entries_trigram;
+DROP TABLE entries_fts;
+
+CREATE VIRTUAL TABLE entries_fts USING fts5(
+    title,
+    body,
+    summary,
+    tags_text,
+    tokenize='unicode61 remove_diacritics 2'
+);
+
+CREATE VIRTUAL TABLE entries_trigram USING fts5(
+    title,
+    body,
+    summary,
+    tags_text,
+    tokenize='trigram'
+);
+
+INSERT INTO entries_fts(rowid, title, body, summary, tags_text)
+SELECT entry_rowid, title, body, summary, tags_text
+  FROM entry_search_documents;
+
+INSERT INTO entries_trigram(rowid, title, body, summary, tags_text)
+SELECT entry_rowid, title, body, summary, tags_text
+  FROM entry_search_documents;
+
+DROP TABLE entry_search_documents;
+
+DELETE FROM schema_migrations WHERE version = 20 AND name = '020_cjk_fts.sql';
+COMMIT;

package/migrations/down/021_semantic_embeddings.sql

@@ -0,0 +1,17 @@
+-- Manual rollback for migration 021. Stop every Kiokuko process and make a
+-- full SQLite backup before running this script.
+BEGIN IMMEDIATE;
+
+DROP INDEX idx_query_embeddings_lru;
+DROP TABLE query_embeddings;
+DROP INDEX idx_embedding_jobs_claim;
+DROP TABLE embedding_jobs;
+DROP INDEX idx_entry_embeddings_profile_revision;
+DROP TABLE entry_embeddings;
+DROP TABLE embedding_runtime;
+DROP TRIGGER embedding_profiles_immutable_update;
+DROP TABLE embedding_profiles;
+
+DELETE FROM schema_migrations
+ WHERE version = 21 AND name = '021_semantic_embeddings.sql';
+COMMIT;