loomrail 0.1.0-alpha.1

package/apps/cli/migrations/0001_initial.sql

@@ -0,0 +1,99 @@
+CREATE TABLE workspaces (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL CHECK (length(name) BETWEEN 1 AND 200),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+) STRICT;
+
+CREATE TABLE projects (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE RESTRICT,
+  fixture_id TEXT NOT NULL UNIQUE CHECK (fixture_id IN ('web-app-a', 'api-service-b')),
+  name TEXT NOT NULL CHECK (length(name) BETWEEN 1 AND 200),
+  repository_path TEXT NOT NULL UNIQUE,
+  status TEXT NOT NULL CHECK (status IN ('ACTIVE', 'ARCHIVED')),
+  version INTEGER NOT NULL CHECK (version > 0),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+) STRICT;
+
+CREATE TABLE work_items (
+  id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  parent_id TEXT,
+  type TEXT NOT NULL CHECK (type IN ('EPIC', 'FEATURE', 'TASK', 'BUG', 'SPIKE', 'SUBTASK')),
+  title TEXT NOT NULL CHECK (length(title) BETWEEN 1 AND 200),
+  description TEXT NOT NULL CHECK (length(description) <= 20000),
+  state TEXT NOT NULL CHECK (state IN ('BACKLOG', 'READY', 'IN_PROGRESS', 'BLOCKED', 'DONE', 'CANCELLED')),
+  current_stage TEXT CHECK (
+    current_stage IS NULL OR current_stage IN ('DISCOVERY', 'PLAN', 'IMPLEMENT', 'REVIEW', 'QA', 'ACCEPTANCE')
+  ),
+  priority TEXT NOT NULL CHECK (priority IN ('LOW', 'MEDIUM', 'HIGH', 'URGENT')),
+  risk TEXT NOT NULL CHECK (risk IN ('LOW', 'MEDIUM', 'HIGH', 'CRITICAL')),
+  version INTEGER NOT NULL CHECK (version > 0),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (id, project_id),
+  FOREIGN KEY (parent_id, project_id) REFERENCES work_items(id, project_id) ON DELETE RESTRICT
+) STRICT;
+
+CREATE TABLE work_item_acceptance_criteria (
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE CASCADE,
+  ordinal INTEGER NOT NULL CHECK (ordinal >= 0),
+  criterion TEXT NOT NULL CHECK (length(criterion) BETWEEN 1 AND 500),
+  PRIMARY KEY (work_item_id, ordinal)
+) STRICT;
+
+CREATE TABLE events (
+  sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+  id TEXT NOT NULL UNIQUE,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  type TEXT NOT NULL CHECK (
+    type IN ('PROJECT_REGISTERED', 'WORK_ITEM_CREATED', 'WORK_ITEM_UPDATED', 'WORK_ITEM_STATE_CHANGED')
+  ),
+  aggregate_type TEXT NOT NULL CHECK (aggregate_type IN ('PROJECT', 'WORK_ITEM')),
+  aggregate_id TEXT NOT NULL,
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  actor_type TEXT NOT NULL CHECK (actor_type IN ('HUMAN', 'SYSTEM')),
+  actor_id TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  correlation_id TEXT NOT NULL,
+  data_json TEXT NOT NULL CHECK (json_valid(data_json))
+) STRICT;
+
+CREATE TABLE commands (
+  command_id TEXT PRIMARY KEY,
+  command_type TEXT NOT NULL,
+  input_hash TEXT NOT NULL CHECK (length(input_hash) = 64),
+  result_json TEXT NOT NULL CHECK (json_valid(result_json)),
+  created_at TEXT NOT NULL
+) STRICT;
+
+CREATE INDEX work_items_project_state_idx ON work_items(project_id, state, created_at, id);
+CREATE INDEX work_items_parent_idx ON work_items(parent_id, created_at, id);
+CREATE INDEX events_project_sequence_idx ON events(project_id, sequence);
+CREATE INDEX events_aggregate_sequence_idx ON events(aggregate_id, sequence);
+
+CREATE TRIGGER events_are_append_only_update
+BEFORE UPDATE ON events
+BEGIN
+  SELECT RAISE(ABORT, 'events are append-only');
+END;
+
+CREATE TRIGGER events_are_append_only_delete
+BEFORE DELETE ON events
+BEGIN
+  SELECT RAISE(ABORT, 'events are append-only');
+END;
+
+CREATE TRIGGER commands_are_append_only_update
+BEFORE UPDATE ON commands
+BEGIN
+  SELECT RAISE(ABORT, 'command receipts are append-only');
+END;
+
+CREATE TRIGGER commands_are_append_only_delete
+BEFORE DELETE ON commands
+BEGIN
+  SELECT RAISE(ABORT, 'command receipts are append-only');
+END;

package/apps/cli/migrations/0002_mock_workflow.sql

@@ -0,0 +1,169 @@
+CREATE TABLE workflow_templates (
+  id TEXT NOT NULL,
+  version INTEGER NOT NULL CHECK (version > 0),
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  name TEXT NOT NULL CHECK (length(name) BETWEEN 1 AND 200),
+  template_json TEXT NOT NULL CHECK (json_valid(template_json)),
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (id, version)
+) STRICT;
+
+CREATE TABLE pipeline_runs (
+  id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  workflow_template_id TEXT NOT NULL,
+  workflow_version INTEGER NOT NULL CHECK (workflow_version > 0),
+  status TEXT NOT NULL CHECK (status IN ('RUNNING', 'WAITING_HUMAN', 'SUCCEEDED', 'FAILED', 'CANCELLED')),
+  current_stage_attempt_id TEXT NOT NULL,
+  version INTEGER NOT NULL CHECK (version > 0),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  finished_at TEXT,
+  FOREIGN KEY (workflow_template_id, workflow_version)
+    REFERENCES workflow_templates(id, version) ON DELETE RESTRICT
+) STRICT;
+
+CREATE TABLE stage_attempts (
+  id TEXT PRIMARY KEY,
+  pipeline_run_id TEXT NOT NULL REFERENCES pipeline_runs(id) ON DELETE RESTRICT,
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  stage TEXT NOT NULL CHECK (stage IN ('DISCOVERY', 'PLAN', 'IMPLEMENT', 'REVIEW', 'QA', 'ACCEPTANCE')),
+  attempt INTEGER NOT NULL CHECK (attempt > 0),
+  status TEXT NOT NULL CHECK (
+    status IN (
+      'PENDING', 'QUEUED', 'RUNNING', 'WAITING_HUMAN', 'SOFT_PAUSED', 'HARD_PAUSED',
+      'SUCCEEDED', 'FAILED', 'CANCELLED', 'INTERRUPTED', 'RECOVERING', 'STALE'
+    )
+  ),
+  version INTEGER NOT NULL CHECK (version > 0),
+  started_at TEXT,
+  finished_at TEXT,
+  failure_code TEXT,
+  UNIQUE (pipeline_run_id, stage, attempt)
+) STRICT;
+
+CREATE TABLE human_requests (
+  id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  stage_attempt_id TEXT NOT NULL REFERENCES stage_attempts(id) ON DELETE RESTRICT,
+  kind TEXT NOT NULL CHECK (kind IN ('SINGLE_CHOICE', 'MULTIPLE_CHOICE', 'CONFIRMATION', 'FREE_TEXT')),
+  blocking INTEGER NOT NULL CHECK (blocking IN (0, 1)),
+  title TEXT NOT NULL CHECK (length(title) BETWEEN 1 AND 200),
+  context TEXT NOT NULL CHECK (length(context) BETWEEN 1 AND 4000),
+  recommendation TEXT,
+  allow_other INTEGER NOT NULL CHECK (allow_other IN (0, 1)),
+  status TEXT NOT NULL CHECK (status IN ('OPEN', 'CLAIMED', 'SNOOZED', 'RESOLVED', 'EXPIRED', 'CANCELLED')),
+  version INTEGER NOT NULL CHECK (version > 0),
+  created_at TEXT NOT NULL,
+  resolved_at TEXT
+) STRICT;
+
+CREATE TABLE human_request_options (
+  human_request_id TEXT NOT NULL REFERENCES human_requests(id) ON DELETE CASCADE,
+  ordinal INTEGER NOT NULL CHECK (ordinal >= 0),
+  id TEXT NOT NULL,
+  label TEXT NOT NULL CHECK (length(label) BETWEEN 1 AND 200),
+  consequence TEXT NOT NULL CHECK (length(consequence) BETWEEN 1 AND 4000),
+  recommended INTEGER NOT NULL CHECK (recommended IN (0, 1)),
+  PRIMARY KEY (human_request_id, ordinal),
+  UNIQUE (human_request_id, id)
+) STRICT;
+
+CREATE TABLE decisions (
+  id TEXT PRIMARY KEY,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  human_request_id TEXT NOT NULL UNIQUE REFERENCES human_requests(id) ON DELETE RESTRICT,
+  answer_json TEXT NOT NULL CHECK (json_valid(answer_json)),
+  actor_type TEXT NOT NULL CHECK (actor_type IN ('HUMAN', 'SYSTEM')),
+  actor_id TEXT NOT NULL,
+  reason TEXT,
+  created_at TEXT NOT NULL
+) STRICT;
+
+CREATE TABLE workflow_dispatches (
+  id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  pipeline_run_id TEXT NOT NULL REFERENCES pipeline_runs(id) ON DELETE RESTRICT,
+  stage_attempt_id TEXT NOT NULL REFERENCES stage_attempts(id) ON DELETE RESTRICT,
+  mode TEXT NOT NULL CHECK (mode IN ('START', 'RESUME')),
+  status TEXT NOT NULL CHECK (status IN ('PENDING', 'COMPLETED', 'FAILED')),
+  created_at TEXT NOT NULL,
+  completed_at TEXT
+) STRICT;
+
+DROP TRIGGER events_are_append_only_update;
+DROP TRIGGER events_are_append_only_delete;
+DROP INDEX events_project_sequence_idx;
+DROP INDEX events_aggregate_sequence_idx;
+ALTER TABLE events RENAME TO events_v1;
+
+CREATE TABLE events (
+  sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+  id TEXT NOT NULL UNIQUE,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  type TEXT NOT NULL CHECK (
+    type IN (
+      'PROJECT_REGISTERED', 'WORK_ITEM_CREATED', 'WORK_ITEM_UPDATED', 'WORK_ITEM_STATE_CHANGED',
+      'PIPELINE_STARTED', 'STAGE_ATTEMPT_CHANGED', 'HUMAN_REQUEST_OPENED',
+      'HUMAN_REQUEST_RESOLVED', 'PIPELINE_COMPLETED'
+    )
+  ),
+  aggregate_type TEXT NOT NULL CHECK (aggregate_type IN ('PROJECT', 'WORK_ITEM')),
+  aggregate_id TEXT NOT NULL,
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  actor_type TEXT NOT NULL CHECK (actor_type IN ('HUMAN', 'SYSTEM')),
+  actor_id TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  correlation_id TEXT NOT NULL,
+  data_json TEXT NOT NULL CHECK (json_valid(data_json))
+) STRICT;
+
+INSERT INTO events (
+  sequence, id, schema_version, type, aggregate_type, aggregate_id, project_id,
+  actor_type, actor_id, occurred_at, correlation_id, data_json
+)
+SELECT
+  sequence, id, schema_version, type, aggregate_type, aggregate_id, project_id,
+  actor_type, actor_id, occurred_at, correlation_id, data_json
+FROM events_v1;
+
+DROP TABLE events_v1;
+
+CREATE INDEX pipeline_runs_work_item_created_idx ON pipeline_runs(work_item_id, created_at DESC, id);
+CREATE INDEX stage_attempts_run_idx ON stage_attempts(pipeline_run_id, attempt, id);
+CREATE INDEX human_requests_project_status_idx ON human_requests(project_id, status, created_at, id);
+CREATE INDEX human_requests_work_item_idx ON human_requests(work_item_id, created_at, id);
+CREATE INDEX decisions_work_item_idx ON decisions(work_item_id, created_at, id);
+CREATE INDEX workflow_dispatches_pending_idx ON workflow_dispatches(status, created_at, id);
+CREATE INDEX events_project_sequence_idx ON events(project_id, sequence);
+CREATE INDEX events_aggregate_sequence_idx ON events(aggregate_id, sequence);
+
+CREATE TRIGGER events_are_append_only_update
+BEFORE UPDATE ON events
+BEGIN
+  SELECT RAISE(ABORT, 'events are append-only');
+END;
+
+CREATE TRIGGER events_are_append_only_delete
+BEFORE DELETE ON events
+BEGIN
+  SELECT RAISE(ABORT, 'events are append-only');
+END;
+
+CREATE TRIGGER decisions_are_append_only_update
+BEFORE UPDATE ON decisions
+BEGIN
+  SELECT RAISE(ABORT, 'decisions are append-only');
+END;
+
+CREATE TRIGGER decisions_are_append_only_delete
+BEFORE DELETE ON decisions
+BEGIN
+  SELECT RAISE(ABORT, 'decisions are append-only');
+END;

package/apps/cli/migrations/0003_budget_pause_recovery.sql

@@ -0,0 +1,154 @@
+ALTER TABLE pipeline_runs ADD COLUMN orchestration_status TEXT CHECK (
+  orchestration_status IS NULL OR orchestration_status IN (
+    'RUNNING', 'WAITING_HUMAN', 'SOFT_PAUSED', 'HARD_PAUSED', 'INTERRUPTED',
+    'SUCCEEDED', 'FAILED', 'CANCELLED'
+  )
+);
+
+UPDATE pipeline_runs SET orchestration_status = status WHERE orchestration_status IS NULL;
+
+CREATE TABLE budget_policies (
+  id TEXT PRIMARY KEY,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  pipeline_run_id TEXT NOT NULL REFERENCES pipeline_runs(id) ON DELETE RESTRICT,
+  revision INTEGER NOT NULL CHECK (revision > 0),
+  max_estimated_tokens INTEGER NOT NULL CHECK (max_estimated_tokens > 0),
+  warning_thresholds_json TEXT NOT NULL CHECK (json_valid(warning_thresholds_json)),
+  actor_type TEXT NOT NULL CHECK (actor_type IN ('HUMAN', 'SYSTEM')),
+  actor_id TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (pipeline_run_id, revision)
+) STRICT;
+
+INSERT INTO budget_policies (
+  id, schema_version, project_id, work_item_id, pipeline_run_id, revision,
+  max_estimated_tokens, warning_thresholds_json, actor_type, actor_id, created_at
+)
+SELECT
+  'budget-migrated-' || id, 1, project_id, work_item_id, id, 1,
+  100, '[0.5,0.8,0.95]', 'SYSTEM', 'migration-0003', created_at
+FROM pipeline_runs;
+
+CREATE TABLE usage_records (
+  id TEXT PRIMARY KEY,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  pipeline_run_id TEXT NOT NULL REFERENCES pipeline_runs(id) ON DELETE RESTRICT,
+  stage_attempt_id TEXT NOT NULL REFERENCES stage_attempts(id) ON DELETE RESTRICT,
+  budget_policy_id TEXT NOT NULL REFERENCES budget_policies(id) ON DELETE RESTRICT,
+  kind TEXT NOT NULL CHECK (kind = 'ESTIMATED_TOKENS'),
+  amount INTEGER NOT NULL CHECK (amount > 0),
+  quality TEXT NOT NULL CHECK (quality IN ('ACTUAL', 'PROVIDER_ESTIMATE', 'LOOMRAIL_ESTIMATE')),
+  recorded_at TEXT NOT NULL
+) STRICT;
+
+CREATE TABLE recovery_reports (
+  id TEXT PRIMARY KEY,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  pipeline_run_id TEXT NOT NULL REFERENCES pipeline_runs(id) ON DELETE RESTRICT,
+  stage_attempt_id TEXT NOT NULL REFERENCES stage_attempts(id) ON DELETE RESTRICT,
+  previous_status TEXT NOT NULL CHECK (previous_status = 'RUNNING'),
+  recovered_status TEXT NOT NULL CHECK (recovered_status = 'INTERRUPTED'),
+  reason TEXT NOT NULL CHECK (reason = 'DAEMON_RESTART'),
+  created_at TEXT NOT NULL,
+  UNIQUE (stage_attempt_id, reason)
+) STRICT;
+
+DROP TRIGGER events_are_append_only_update;
+DROP TRIGGER events_are_append_only_delete;
+DROP INDEX events_project_sequence_idx;
+DROP INDEX events_aggregate_sequence_idx;
+ALTER TABLE events RENAME TO events_v2;
+
+CREATE TABLE events (
+  sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+  id TEXT NOT NULL UNIQUE,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  type TEXT NOT NULL CHECK (
+    type IN (
+      'PROJECT_REGISTERED', 'WORK_ITEM_CREATED', 'WORK_ITEM_UPDATED', 'WORK_ITEM_STATE_CHANGED',
+      'PIPELINE_STARTED', 'STAGE_ATTEMPT_CHANGED', 'HUMAN_REQUEST_OPENED',
+      'HUMAN_REQUEST_RESOLVED', 'USAGE_RECORDED', 'BUDGET_THRESHOLD_REACHED',
+      'PIPELINE_PAUSED', 'PIPELINE_RESUMED', 'PIPELINE_CANCELLED',
+      'BUDGET_OVERRIDE_APPROVED', 'RECOVERY_REPORT_CREATED', 'PIPELINE_COMPLETED'
+    )
+  ),
+  aggregate_type TEXT NOT NULL CHECK (aggregate_type IN ('PROJECT', 'WORK_ITEM')),
+  aggregate_id TEXT NOT NULL,
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  actor_type TEXT NOT NULL CHECK (actor_type IN ('HUMAN', 'SYSTEM')),
+  actor_id TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  correlation_id TEXT NOT NULL,
+  data_json TEXT NOT NULL CHECK (json_valid(data_json))
+) STRICT;
+
+INSERT INTO events (
+  sequence, id, schema_version, type, aggregate_type, aggregate_id, project_id,
+  actor_type, actor_id, occurred_at, correlation_id, data_json
+)
+SELECT
+  sequence, id, schema_version, type, aggregate_type, aggregate_id, project_id,
+  actor_type, actor_id, occurred_at, correlation_id, data_json
+FROM events_v2;
+
+DROP TABLE events_v2;
+
+CREATE INDEX budget_policies_run_revision_idx ON budget_policies(pipeline_run_id, revision DESC);
+CREATE INDEX usage_records_run_recorded_idx ON usage_records(pipeline_run_id, recorded_at, id);
+CREATE INDEX recovery_reports_work_item_created_idx ON recovery_reports(work_item_id, created_at, id);
+CREATE INDEX events_project_sequence_idx ON events(project_id, sequence);
+CREATE INDEX events_aggregate_sequence_idx ON events(aggregate_id, sequence);
+
+CREATE TRIGGER events_are_append_only_update
+BEFORE UPDATE ON events
+BEGIN
+  SELECT RAISE(ABORT, 'events are append-only');
+END;
+
+CREATE TRIGGER events_are_append_only_delete
+BEFORE DELETE ON events
+BEGIN
+  SELECT RAISE(ABORT, 'events are append-only');
+END;
+
+CREATE TRIGGER budget_policies_are_append_only_update
+BEFORE UPDATE ON budget_policies
+BEGIN
+  SELECT RAISE(ABORT, 'budget policies are append-only');
+END;
+
+CREATE TRIGGER budget_policies_are_append_only_delete
+BEFORE DELETE ON budget_policies
+BEGIN
+  SELECT RAISE(ABORT, 'budget policies are append-only');
+END;
+
+CREATE TRIGGER usage_records_are_append_only_update
+BEFORE UPDATE ON usage_records
+BEGIN
+  SELECT RAISE(ABORT, 'usage records are append-only');
+END;
+
+CREATE TRIGGER usage_records_are_append_only_delete
+BEFORE DELETE ON usage_records
+BEGIN
+  SELECT RAISE(ABORT, 'usage records are append-only');
+END;
+
+CREATE TRIGGER recovery_reports_are_append_only_update
+BEFORE UPDATE ON recovery_reports
+BEGIN
+  SELECT RAISE(ABORT, 'recovery reports are append-only');
+END;
+
+CREATE TRIGGER recovery_reports_are_append_only_delete
+BEFORE DELETE ON recovery_reports
+BEGIN
+  SELECT RAISE(ABORT, 'recovery reports are append-only');
+END;

package/apps/cli/migrations/0004_pipeline_started_budget_backfill.sql

@@ -0,0 +1,72 @@
+DROP TRIGGER events_are_append_only_update;
+DROP TRIGGER commands_are_append_only_update;
+
+UPDATE events
+SET data_json = json_set(
+  data_json,
+  '$.budgetPolicy',
+  json_object(
+    'schemaVersion', 1,
+    'id', 'budget-migrated-' || json_extract(data_json, '$.run.id'),
+    'projectId', json_extract(data_json, '$.run.projectId'),
+    'workItemId', json_extract(data_json, '$.run.workItemId'),
+    'pipelineRunId', json_extract(data_json, '$.run.id'),
+    'revision', 1,
+    'maxEstimatedTokens', 100,
+    'warningThresholds', json('[0.5,0.8,0.95]'),
+    'createdBy', json_object('type', 'SYSTEM', 'id', 'migration-0003'),
+    'createdAt', json_extract(data_json, '$.run.createdAt')
+  )
+)
+WHERE type = 'PIPELINE_STARTED'
+  AND json_type(data_json, '$.budgetPolicy') IS NULL;
+
+UPDATE commands
+SET result_json = json_set(
+  result_json,
+  '$.budgetPolicy',
+  json_object(
+    'schemaVersion', 1,
+    'id', 'budget-migrated-' || json_extract(result_json, '$.run.id'),
+    'projectId', json_extract(result_json, '$.run.projectId'),
+    'workItemId', json_extract(result_json, '$.run.workItemId'),
+    'pipelineRunId', json_extract(result_json, '$.run.id'),
+    'revision', 1,
+    'maxEstimatedTokens', 100,
+    'warningThresholds', json('[0.5,0.8,0.95]'),
+    'createdBy', json_object('type', 'SYSTEM', 'id', 'migration-0003'),
+    'createdAt', json_extract(result_json, '$.run.createdAt')
+  ),
+  '$.events[0].data.budgetPolicy',
+  json_object(
+    'schemaVersion', 1,
+    'id', 'budget-migrated-' || json_extract(result_json, '$.run.id'),
+    'projectId', json_extract(result_json, '$.run.projectId'),
+    'workItemId', json_extract(result_json, '$.run.workItemId'),
+    'pipelineRunId', json_extract(result_json, '$.run.id'),
+    'revision', 1,
+    'maxEstimatedTokens', 100,
+    'warningThresholds', json('[0.5,0.8,0.95]'),
+    'createdBy', json_object('type', 'SYSTEM', 'id', 'migration-0003'),
+    'createdAt', json_extract(result_json, '$.run.createdAt')
+  )
+)
+WHERE command_type = 'START_MOCK_PIPELINE'
+  AND json_type(result_json, '$.budgetPolicy') IS NULL;
+
+UPDATE commands
+SET result_json = json_set(result_json, '$.usageRecords', json('[]'))
+WHERE command_type = 'APPLY_MOCK_PROVIDER_OUTCOME'
+  AND json_type(result_json, '$.usageRecords') IS NULL;
+
+CREATE TRIGGER events_are_append_only_update
+BEFORE UPDATE ON events
+BEGIN
+  SELECT RAISE(ABORT, 'events are append-only');
+END;
+
+CREATE TRIGGER commands_are_append_only_update
+BEFORE UPDATE ON commands
+BEGIN
+  SELECT RAISE(ABORT, 'commands are append-only');
+END;

package/apps/cli/migrations/0005_acceptance_evidence.sql

@@ -0,0 +1,129 @@
+CREATE TABLE evidence_artifacts (
+  id TEXT PRIMARY KEY,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  pipeline_run_id TEXT NOT NULL REFERENCES pipeline_runs(id) ON DELETE RESTRICT,
+  stage_attempt_id TEXT NOT NULL REFERENCES stage_attempts(id) ON DELETE RESTRICT,
+  stage TEXT NOT NULL CHECK (stage IN ('REVIEW', 'QA')),
+  kind TEXT NOT NULL CHECK (kind IN ('REVIEW_REPORT', 'QA_REPORT')),
+  status TEXT NOT NULL CHECK (status = 'PASSED'),
+  provider TEXT NOT NULL CHECK (provider = 'MOCK'),
+  title TEXT NOT NULL CHECK (length(title) BETWEEN 1 AND 200),
+  summary TEXT NOT NULL CHECK (length(summary) BETWEEN 1 AND 4000),
+  checks_json TEXT NOT NULL CHECK (json_valid(checks_json)),
+  created_at TEXT NOT NULL,
+  UNIQUE (pipeline_run_id, kind)
+) STRICT;
+
+CREATE TABLE acceptance_packages (
+  id TEXT PRIMARY KEY,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  work_item_id TEXT NOT NULL REFERENCES work_items(id) ON DELETE RESTRICT,
+  pipeline_run_id TEXT NOT NULL UNIQUE REFERENCES pipeline_runs(id) ON DELETE RESTRICT,
+  stage_attempt_id TEXT NOT NULL REFERENCES stage_attempts(id) ON DELETE RESTRICT,
+  human_request_id TEXT NOT NULL UNIQUE REFERENCES human_requests(id) ON DELETE RESTRICT,
+  status TEXT NOT NULL CHECK (status IN ('PENDING', 'ACCEPTED', 'RETURNED', 'REJECTED')),
+  criteria_json TEXT NOT NULL CHECK (json_valid(criteria_json)),
+  artifact_ids_json TEXT NOT NULL CHECK (json_valid(artifact_ids_json)),
+  release_note TEXT NOT NULL CHECK (length(release_note) BETWEEN 1 AND 4000),
+  verify_instructions_json TEXT NOT NULL CHECK (json_valid(verify_instructions_json)),
+  version INTEGER NOT NULL CHECK (version > 0),
+  created_at TEXT NOT NULL,
+  resolved_at TEXT,
+  resolved_by_type TEXT CHECK (resolved_by_type IS NULL OR resolved_by_type IN ('HUMAN', 'SYSTEM')),
+  resolved_by_id TEXT,
+  resolution_reason TEXT,
+  CHECK ((resolved_by_type IS NULL) = (resolved_by_id IS NULL))
+) STRICT;
+
+CREATE INDEX evidence_artifacts_run_created_idx
+  ON evidence_artifacts(pipeline_run_id, created_at, id);
+CREATE INDEX acceptance_packages_work_item_created_idx
+  ON acceptance_packages(work_item_id, created_at DESC, id);
+
+CREATE TRIGGER evidence_artifacts_are_append_only_update
+BEFORE UPDATE ON evidence_artifacts
+BEGIN
+  SELECT RAISE(ABORT, 'evidence artifacts are append-only');
+END;
+
+CREATE TRIGGER evidence_artifacts_are_append_only_delete
+BEFORE DELETE ON evidence_artifacts
+BEGIN
+  SELECT RAISE(ABORT, 'evidence artifacts are append-only');
+END;
+
+DROP TRIGGER commands_are_append_only_update;
+
+UPDATE commands
+SET result_json = json_set(
+  result_json,
+  '$.artifacts', json('[]'),
+  '$.acceptancePackage', json('null')
+)
+WHERE command_type = 'APPLY_MOCK_PROVIDER_OUTCOME'
+  AND json_type(result_json, '$.artifacts') IS NULL;
+
+CREATE TRIGGER commands_are_append_only_update
+BEFORE UPDATE ON commands
+BEGIN
+  SELECT RAISE(ABORT, 'commands are append-only');
+END;
+
+DROP TRIGGER events_are_append_only_update;
+DROP TRIGGER events_are_append_only_delete;
+DROP INDEX events_project_sequence_idx;
+DROP INDEX events_aggregate_sequence_idx;
+ALTER TABLE events RENAME TO events_v4;
+
+CREATE TABLE events (
+  sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+  id TEXT NOT NULL UNIQUE,
+  schema_version INTEGER NOT NULL CHECK (schema_version = 1),
+  type TEXT NOT NULL CHECK (
+    type IN (
+      'PROJECT_REGISTERED', 'WORK_ITEM_CREATED', 'WORK_ITEM_UPDATED', 'WORK_ITEM_STATE_CHANGED',
+      'PIPELINE_STARTED', 'STAGE_ATTEMPT_CHANGED', 'HUMAN_REQUEST_OPENED',
+      'HUMAN_REQUEST_RESOLVED', 'USAGE_RECORDED', 'BUDGET_THRESHOLD_REACHED',
+      'PIPELINE_PAUSED', 'PIPELINE_RESUMED', 'PIPELINE_CANCELLED',
+      'BUDGET_OVERRIDE_APPROVED', 'RECOVERY_REPORT_CREATED', 'PIPELINE_COMPLETED',
+      'EVIDENCE_ARTIFACT_RECORDED', 'ACCEPTANCE_REQUESTED', 'ACCEPTANCE_RESOLVED'
+    )
+  ),
+  aggregate_type TEXT NOT NULL CHECK (aggregate_type IN ('PROJECT', 'WORK_ITEM')),
+  aggregate_id TEXT NOT NULL,
+  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE RESTRICT,
+  actor_type TEXT NOT NULL CHECK (actor_type IN ('HUMAN', 'SYSTEM')),
+  actor_id TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  correlation_id TEXT NOT NULL,
+  data_json TEXT NOT NULL CHECK (json_valid(data_json))
+) STRICT;
+
+INSERT INTO events (
+  sequence, id, schema_version, type, aggregate_type, aggregate_id, project_id,
+  actor_type, actor_id, occurred_at, correlation_id, data_json
+)
+SELECT
+  sequence, id, schema_version, type, aggregate_type, aggregate_id, project_id,
+  actor_type, actor_id, occurred_at, correlation_id, data_json
+FROM events_v4;
+
+DROP TABLE events_v4;
+
+CREATE INDEX events_project_sequence_idx ON events(project_id, sequence);
+CREATE INDEX events_aggregate_sequence_idx ON events(aggregate_id, sequence);
+
+CREATE TRIGGER events_are_append_only_update
+BEFORE UPDATE ON events
+BEGIN
+  SELECT RAISE(ABORT, 'events are append-only');
+END;
+
+CREATE TRIGGER events_are_append_only_delete
+BEFORE DELETE ON events
+BEGIN
+  SELECT RAISE(ABORT, 'events are append-only');
+END;