b3-prosaic-harness-postgres 0.3.0__tar.gz → 0.4.0__tar.gz

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.4
 Name: b3-prosaic-harness-postgres
-Version: 0.3.0
+Version: 0.4.0
 Summary: Explicit PostgreSQL run and conversation storage for Prosaic Harness
 License-Expression: Apache-2.0
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 License-File: NOTICE
-Requires-Dist: b3-prosaic-harness<0.9,>=0.8
+Requires-Dist: b3-prosaic-harness<0.10,>=0.9
 Requires-Dist: psycopg[binary]<4,>=3.2.3
 Requires-Dist: psycopg-pool<4,>=3.2
 Provides-Extra: test
@@ -316,3 +316,22 @@ conversation backend. Run the owned PostgreSQL 16 and 18 fixtures shown above
 with `--require-postgres`. Missing infrastructure or any skipped required case
 fails qualification. Installed Linux AMD64 and ARM64 acceptance is required
 before claiming the conversation candidate is ready for production.
+
+## Optional context storage contract
+
+Conversation storage contract 2 supports `context_assembly_v1`, reads both v1
+and v2 records, and preserves existing documents. New database initialization
+creates contract 2. Existing contract-1 databases require an explicit migration;
+runtime readiness never performs it. Drain old writers, deploy upgraded workers,
+then use migration-owner credentials:
+
+```sh
+prosaic-harness-postgres migrate-conversations --dsn-env HARNESS_MIGRATION_DSN
+```
+
+`PostgresSessionStore.migrate_context_storage()` is the equivalent operator API.
+The migration is locked, transactional and repeatable; restricted runtime roles
+cannot update schema metadata. Old workers reject the upgraded storage contract.
+Keep migration-owner credentials separate from runtime credentials. Enable host
+context policies only after Runtime, Harness and store advertise the capability.
+No production token counter is bundled or certified by this storage adapter.

b3_prosaic_harness_postgres-0.3.0/src/b3_prosaic_harness_postgres.egg-info/PKG-INFO → b3_prosaic_harness_postgres-0.4.0/README.md

@@ -1,23 +1,3 @@
-Metadata-Version: 2.4
-Name: b3-prosaic-harness-postgres
-Version: 0.3.0
-Summary: Explicit PostgreSQL run and conversation storage for Prosaic Harness
-License-Expression: Apache-2.0
-Requires-Python: >=3.11
-Description-Content-Type: text/markdown
-License-File: LICENSE
-License-File: NOTICE
-Requires-Dist: b3-prosaic-harness<0.9,>=0.8
-Requires-Dist: psycopg[binary]<4,>=3.2.3
-Requires-Dist: psycopg-pool<4,>=3.2
-Provides-Extra: test
-Requires-Dist: pytest>=8; extra == "test"
-Requires-Dist: build>=1; extra == "test"
-Requires-Dist: setuptools>=77; extra == "test"
-Requires-Dist: wheel; extra == "test"
-Requires-Dist: packaging; extra == "test"
-Dynamic: license-file
-
 # PostgreSQL persistence for Prosaic Harness
 
 Run on worker A, inspect/resume on worker B, without a shared writable run
@@ -316,3 +296,22 @@ conversation backend. Run the owned PostgreSQL 16 and 18 fixtures shown above
 with `--require-postgres`. Missing infrastructure or any skipped required case
 fails qualification. Installed Linux AMD64 and ARM64 acceptance is required
 before claiming the conversation candidate is ready for production.
+
+## Optional context storage contract
+
+Conversation storage contract 2 supports `context_assembly_v1`, reads both v1
+and v2 records, and preserves existing documents. New database initialization
+creates contract 2. Existing contract-1 databases require an explicit migration;
+runtime readiness never performs it. Drain old writers, deploy upgraded workers,
+then use migration-owner credentials:
+
+```sh
+prosaic-harness-postgres migrate-conversations --dsn-env HARNESS_MIGRATION_DSN
+```
+
+`PostgresSessionStore.migrate_context_storage()` is the equivalent operator API.
+The migration is locked, transactional and repeatable; restricted runtime roles
+cannot update schema metadata. Old workers reject the upgraded storage contract.
+Keep migration-owner credentials separate from runtime credentials. Enable host
+context policies only after Runtime, Harness and store advertise the capability.
+No production token counter is bundled or certified by this storage adapter.

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/pyproject.toml

@@ -4,13 +4,13 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "b3-prosaic-harness-postgres"
-version = "0.3.0"
+version = "0.4.0"
 description = "Explicit PostgreSQL run and conversation storage for Prosaic Harness"
 requires-python = ">=3.11"
 readme = "README.md"
 license = "Apache-2.0"
 license-files = ["LICENSE", "NOTICE"]
-dependencies = ["b3-prosaic-harness>=0.8,<0.9", "psycopg[binary]>=3.2.3,<4", "psycopg-pool>=3.2,<4"]
+dependencies = ["b3-prosaic-harness>=0.9,<0.10", "psycopg[binary]>=3.2.3,<4", "psycopg-pool>=3.2,<4"]
 
 [project.optional-dependencies]
 test = ["pytest>=8", "build>=1", "setuptools>=77", "wheel", "packaging"]

b3_prosaic_harness_postgres-0.3.0/README.md → b3_prosaic_harness_postgres-0.4.0/src/b3_prosaic_harness_postgres.egg-info/PKG-INFO

@@ -1,3 +1,23 @@
+Metadata-Version: 2.4
+Name: b3-prosaic-harness-postgres
+Version: 0.4.0
+Summary: Explicit PostgreSQL run and conversation storage for Prosaic Harness
+License-Expression: Apache-2.0
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+License-File: NOTICE
+Requires-Dist: b3-prosaic-harness<0.10,>=0.9
+Requires-Dist: psycopg[binary]<4,>=3.2.3
+Requires-Dist: psycopg-pool<4,>=3.2
+Provides-Extra: test
+Requires-Dist: pytest>=8; extra == "test"
+Requires-Dist: build>=1; extra == "test"
+Requires-Dist: setuptools>=77; extra == "test"
+Requires-Dist: wheel; extra == "test"
+Requires-Dist: packaging; extra == "test"
+Dynamic: license-file
+
 # PostgreSQL persistence for Prosaic Harness
 
 Run on worker A, inspect/resume on worker B, without a shared writable run
@@ -296,3 +316,22 @@ conversation backend. Run the owned PostgreSQL 16 and 18 fixtures shown above
 with `--require-postgres`. Missing infrastructure or any skipped required case
 fails qualification. Installed Linux AMD64 and ARM64 acceptance is required
 before claiming the conversation candidate is ready for production.
+
+## Optional context storage contract
+
+Conversation storage contract 2 supports `context_assembly_v1`, reads both v1
+and v2 records, and preserves existing documents. New database initialization
+creates contract 2. Existing contract-1 databases require an explicit migration;
+runtime readiness never performs it. Drain old writers, deploy upgraded workers,
+then use migration-owner credentials:
+
+```sh
+prosaic-harness-postgres migrate-conversations --dsn-env HARNESS_MIGRATION_DSN
+```
+
+`PostgresSessionStore.migrate_context_storage()` is the equivalent operator API.
+The migration is locked, transactional and repeatable; restricted runtime roles
+cannot update schema metadata. Old workers reject the upgraded storage contract.
+Keep migration-owner credentials separate from runtime credentials. Enable host
+context policies only after Runtime, Harness and store advertise the capability.
+No production token counter is bundled or certified by this storage adapter.

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/src/b3_prosaic_harness_postgres.egg-info/SOURCES.txt

@@ -31,6 +31,7 @@ tests/test_recovery.py
 tests/test_registration.py
 tests/test_routing.py
 tests/test_schema.py
+tests/test_session_context.py
 tests/test_session_fencing.py
 tests/test_session_recovery.py
 tests/test_session_schema.py

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/src/b3_prosaic_harness_postgres.egg-info/requires.txt

@@ -1,4 +1,4 @@
-b3-prosaic-harness<0.9,>=0.8
+b3-prosaic-harness<0.10,>=0.9
 psycopg[binary]<4,>=3.2.3
 psycopg-pool<4,>=3.2
 

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/src/prosaic_harness_postgres/__init__.py

@@ -1,5 +1,5 @@
 """Separate PostgreSQL adapter for Prosaic Harness."""
-__version__ = '0.3.0'
+__version__ = '0.4.0'
 
 from .store import PostgresRunStore
 from .session_store import PostgresSessionStore

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/src/prosaic_harness_postgres/cli.py

@@ -44,13 +44,19 @@ def check_write(store):
 def main(argv=None):
     parser = argparse.ArgumentParser(description='Initialize/check an existing Harness database')
     commands = parser.add_subparsers(dest='command', required=True)
-    for name in ('init', 'doctor'):
+    for name in ('init', 'doctor', 'migrate-conversations'):
         command = commands.add_parser(name)
         command.add_argument('--dsn-env', required=True, help='name of the DSN environment variable, never its value')
         if name == 'doctor':
             command.add_argument('--check-write', action='store_true', help='explicit disposable write test; DELETE credentials required')
     args = parser.parse_args(argv)
     try:
+        if args.command == 'migrate-conversations':
+            from .session_store import PostgresSessionStore
+            with PostgresSessionStore.from_env(args.dsn_env, namespace='conversation-migration') as store:
+                store.migrate_context_storage()
+            print(json.dumps({'migrated': True, 'conversation_storage_contract': 2}))
+            return 0
         namespace = 'prosaic-diagnostic-' + uuid.uuid4().hex
         with PostgresRunStore.from_env(args.dsn_env, namespace=namespace) as store:
             if args.command == 'init':

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/src/prosaic_harness_postgres/session_schema.py

@@ -1,7 +1,7 @@
 """Independent, explicit version-1 conversation storage and readiness."""
 from prosaic_harness import StoreUninitialized, StoreIncompatible
 
-SCHEMA_VERSION = STORAGE_CONTRACT_VERSION = 1
+SCHEMA_VERSION = STORAGE_CONTRACT_VERSION = 2
 MIGRATION_LOCK = 0x50524348415401
 SCHEMA = 'prosaic_harness_conversations'
 
@@ -33,7 +33,7 @@ CREATE TABLE prosaic_harness_conversations.receipts (
  PRIMARY KEY(namespace, session_id, invocation_id),
  FOREIGN KEY(namespace, session_id, scope_identity) REFERENCES
  prosaic_harness_conversations.sessions(namespace, session_id, scope_identity));
-INSERT INTO prosaic_harness_conversations.schema_version VALUES(TRUE, 1, 1);
+INSERT INTO prosaic_harness_conversations.schema_version VALUES(TRUE, 2, 2);
 """
 
 COLUMNS = {
@@ -69,7 +69,7 @@ CONSTRAINTS = {
 }
 
 
-async def ready_on_connection(conn):
+async def ready_on_connection(conn, *, expected_versions=None):
     namespace = await (await conn.execute("SELECT oid,pg_catalog.has_schema_privilege(oid,'USAGE'), "
         "pg_catalog.pg_has_role(nspowner,'USAGE') "
         "FROM pg_catalog.pg_namespace WHERE nspname=%s", (SCHEMA,))).fetchone()
@@ -154,7 +154,7 @@ async def ready_on_connection(conn):
                     raise StoreIncompatible('use least-privilege conversation runtime grants')
     versions = await (await conn.execute('SELECT schema_version,storage_contract_version '
         'FROM prosaic_harness_conversations.schema_version')).fetchall()
-    if versions != [(SCHEMA_VERSION, STORAGE_CONTRACT_VERSION)]:
+    if versions != [expected_versions or (SCHEMA_VERSION, STORAGE_CONTRACT_VERSION)]:
         raise StoreIncompatible('conversation schema version is incompatible; no automatic migration')
 
 
@@ -183,3 +183,30 @@ def initialize(transport):
         await conn.execute(DDL)
         await ready_on_connection(conn)
     transport.call(migrate, timeout_s=30)
+
+
+def migrate_context_storage(transport):
+    async def migrate(conn):
+        await conn.execute("SELECT pg_catalog.set_config('lock_timeout','25000ms',true), "
+                           "pg_catalog.set_config('statement_timeout','28000ms',true)")
+        await conn.execute('SELECT pg_catalog.pg_advisory_xact_lock(%s)', (MIGRATION_LOCK,))
+        namespace = await (await conn.execute("SELECT pg_catalog.pg_has_role(nspowner,'USAGE') "
+            'FROM pg_catalog.pg_namespace WHERE nspname=%s', (SCHEMA,))).fetchone()
+        if namespace is None:
+            raise StoreUninitialized('initialize conversation storage explicitly first')
+        if not namespace[0]:
+            raise StoreIncompatible('migration role must own conversation schema')
+        versions = await (await conn.execute('SELECT schema_version,storage_contract_version '
+            'FROM prosaic_harness_conversations.schema_version')).fetchall()
+        if versions == [(2, 2)]:
+            await ready_on_connection(conn)
+            return
+        if versions != [(1, 1)]:
+            raise StoreIncompatible('conversation migration requires intact version-1 storage')
+        await ready_on_connection(conn, expected_versions=(1, 1))
+        cursor = await conn.execute('UPDATE prosaic_harness_conversations.schema_version '
+            'SET schema_version=2,storage_contract_version=2 WHERE singleton IS TRUE')
+        if cursor.rowcount != 1:
+            raise StoreIncompatible('conversation version metadata is incompatible')
+        await ready_on_connection(conn)
+    transport.call(migrate, timeout_s=30)

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/src/prosaic_harness_postgres/session_store.py

@@ -60,6 +60,13 @@ class PostgresSessionStore:
 
     def check_ready(self):
         session_schema.check_ready(self._transport)
+    @property
+    def capabilities(self):
+        self.check_ready()
+        return frozenset({'context_assembly_v1'})
+
+    def migrate_context_storage(self):
+        session_schema.migrate_context_storage(self._transport)
 
     def _scope(self, scope):
         if type(scope) is not ConversationScope or scope.namespace != self.namespace:

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/tests/support/local_cluster.py

@@ -40,7 +40,7 @@ def candidate_wheels(root):
     spec.loader.exec_module(release)
     release.verify_upstream(Path(receipt_directory).resolve(strict=True), wheelhouse)
     return [wheelhouse / 'b3_prosaic-0.4.1-py3-none-any.whl',
-            wheelhouse / 'b3_prosaic_runtime-0.9.0-py3-none-any.whl']
+            wheelhouse / 'b3_prosaic_runtime-0.9.4-py3-none-any.whl']
 
 
 class LocalCluster:
@@ -177,12 +177,12 @@ class LocalCluster:
 set -eu
 apt-get update -qq
 python -m venv /tmp/core
-/tmp/core/bin/python -m pip install /core-wheels/b3_prosaic_harness-0.8.0-py3-none-any.whl >/dev/null
+/tmp/core/bin/python -m pip install /core-wheels/b3_prosaic_harness-0.9.0-py3-none-any.whl >/dev/null
 /tmp/core/bin/python -I -c 'import importlib.util,prosaic_harness; assert importlib.util.find_spec("psycopg") is None; assert importlib.util.find_spec("prosaic_harness_postgres") is None'
 /tmp/core/bin/python -I /fixture/workflow_factory_smoke.py
 /tmp/core/bin/python -I /fixture/conversation_smoke.py
 python -m venv /tmp/both
-/tmp/both/bin/python -m pip install /core-wheels/b3_prosaic_harness-0.8.0-py3-none-any.whl /adapter-wheels/b3_prosaic_harness_postgres-0.3.0-py3-none-any.whl >/dev/null
+/tmp/both/bin/python -m pip install /core-wheels/b3_prosaic_harness-0.9.0-py3-none-any.whl /adapter-wheels/b3_prosaic_harness_postgres-0.4.0-py3-none-any.whl >/dev/null
 /tmp/both/bin/python -I /fixture/linux_wheel_smoke.py
 '''
         if dependencies:
@@ -266,12 +266,13 @@ def main():
             cluster.stop()
         else:
             env = os.environ | {'HARNESS_TEST_DATABASE_URL': cluster.dsn,
-                'HARNESS_TEST_CONTAINER_ENGINE': cluster.engine, 'HARNESS_TEST_POSTGRES_VERSION': cluster.version}
+                'HARNESS_TEST_CONTAINER_ENGINE': cluster.engine, 'HARNESS_TEST_POSTGRES_VERSION': cluster.version,
+                'PROSAIC_LIFECYCLE_TEST_DSN': cluster.dsn}
             root = Path(__file__).resolve().parents[4]
             report = (['--junitxml=' + env['HARNESS_TEST_JUNIT_XML']]
                       if env.get('HARNESS_TEST_JUNIT_XML') else [])
             raise SystemExit(subprocess.run([sys.executable, '-m', 'pytest', '-q',
-                'adapters/postgres/tests', '--require-postgres', *report],
+                'adapters/postgres/tests', 'tests/test_conversation_postgres_lifecycle.py', '--require-postgres', *report],
                 cwd=root, env=env, timeout=600).returncode)
 
 

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/tests/support/session_documents.py

@@ -38,3 +38,29 @@ def receipt(state, *, invocation_id='b' * 32, failure=None, uncertain=False):
     result = TurnResult(Result(1 if failure else 0, '' if failure else 'Done', failure or ''),
                         completed, evidence)
     return make_receipt(state, invocation_id, result)
+
+
+def context_document(scope, *, session_id='a'*32):
+    from prosaic_runtime import (ContextPolicy, TokenCounterDescriptor,
+        TokenCounterRegistry, TokenCounterRegistration)
+    base = bindings()
+    class Counter:
+        def count_tokens(self, request): return 10
+    descriptor = TokenCounterDescriptor('fixture-v1', 'openai-compatible',
+        'synthetic', 'openai-chat-v1', 4096, '1', '0'*64, '1'*64,
+        'exact', 'Synthetic fixed fixture grammar only.')
+    counters = TokenCounterRegistry({'fixture-v1': TokenCounterRegistration(descriptor, Counter())})
+    policy = ContextPolicy('fullHistory', 4096, 128, 0, 'fixture-v1')
+    binding = ConversationBindings(base.agent, version='context-v1', config=base.config,
+        policy=base.policy, run_policy=base.run_policy,
+        context_policy=policy, token_counters=counters)
+    state = new_session(session_id, scope, binding)
+    prepared = binding.runtime().prepare_turn(binding.agent, message='Hello ž',
+        policy=binding.run_policy, limits=binding.turn_limits,
+        context_policy=policy, token_counters=counters)
+    state = reserve_attempt(state, message_id='message', message='Hello ž',
+        invocation_id='b'*32, context_identity=prepared.context_identity,
+        encoding_version=prepared.encoding_version, input_bytes=prepared.input_bytes,
+        provider_allowance=2, tool_allowance=0, context_selection=prepared.context_selection,
+        context_report=prepared.context_report, context_work=prepared.context_work)
+    return state, prepared

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.0}/tests/test_packaging.py

@@ -13,8 +13,8 @@ import pytest
 import yaml
 
 ROOT = Path(__file__).resolve().parents[3]
-CORE = ROOT / 'dist/b3_prosaic_harness-0.8.0-py3-none-any.whl'
-ADAPTER = ROOT / 'adapters/postgres/dist/b3_prosaic_harness_postgres-0.3.0-py3-none-any.whl'
+CORE = ROOT / 'dist/b3_prosaic_harness-0.9.0-py3-none-any.whl'
+ADAPTER = ROOT / 'adapters/postgres/dist/b3_prosaic_harness_postgres-0.4.0-py3-none-any.whl'
 
 def test_owned_fixture_uses_free_explicit_subnet_when_default_pool_is_exhausted():
     from support.local_cluster import owned_subnet
@@ -73,13 +73,13 @@ def metadata(path):
 def test_wheel_contents_and_dependency_boundaries():
     core, names = metadata(CORE)
     assert core['Name'] == 'b3-prosaic-harness'
-    assert core['Version'] == '0.8.0'
+    assert core['Version'] == '0.9.0'
     assert not any(name.startswith('prosaic_harness_postgres/') for name in names)
     assert not any('psycopg' in value.lower() for value in core.get_all('Requires-Dist'))
     adapter, names = metadata(ADAPTER)
     assert adapter['Name'] == 'b3-prosaic-harness-postgres'
-    assert adapter['Version'] == '0.3.0'
-    assert any(value.startswith('b3-prosaic-harness<0.9,>=0.8') for value in adapter.get_all('Requires-Dist'))
+    assert adapter['Version'] == '0.4.0'
+    assert any(value.startswith('b3-prosaic-harness<0.10,>=0.9') for value in adapter.get_all('Requires-Dist'))
     assert 'prosaic_harness_postgres/cli.py' in names
     assert any(value.startswith('psycopg[binary]<4,>=3.2.3')
                for value in adapter.get_all('Requires-Dist'))
@@ -184,7 +184,7 @@ def curated_candidates(release_tool, tmp_path):
     candidates = []
     for repo, expected in (
         ('B3Cognition/prosaic', {'b3-prosaic': '0.4.1'}),
-        ('B3Cognition/prosaic-runtime', {'b3-prosaic-runtime': '0.9.0',
+        ('B3Cognition/prosaic-runtime', {'b3-prosaic-runtime': '0.9.4',
                                        'b3-prosaic-runtime-postgres': '0.3.0'})):
         artifacts = []
         for name, version in expected.items():
@@ -252,4 +252,4 @@ def test_container_mounts_verified_dependency_bytes_read_only(
     create = calls[0]
     assert str(wheelhouse) + ':/candidate-wheels:ro' in create
     assert 'PIP_FIND_LINKS=/candidate-wheels' in create[-1]
-    assert '/candidate-wheels/b3_prosaic_runtime-0.9.0-py3-none-any.whl' in create[-1]
+    assert '/candidate-wheels/b3_prosaic_runtime-0.9.4-py3-none-any.whl' in create[-1]

b3_prosaic_harness_postgres-0.4.0/tests/test_session_context.py

@@ -0,0 +1,112 @@
+"""Owner-only explicit v1->v2 migration; real PostgreSQL transactional evidence."""
+import pytest
+import psycopg
+from prosaic_harness import StoreIncompatible, ConversationScope
+from prosaic_harness.session_contracts import new_session
+import prosaic_harness_postgres as pg
+from prosaic_harness_postgres import session_schema
+from test_session_schema import grant_conversations
+from support.session_documents import bindings
+from dataclasses import replace
+
+
+def legacy_storage(db_admin_dsn):
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        owner.initialize()
+    # Table/role contract is identical in v1; only explicit contract metadata changes.
+    with psycopg.connect(db_admin_dsn) as connection:
+        connection.execute('UPDATE prosaic_harness_conversations.schema_version '
+            'SET schema_version=1,storage_contract_version=1')
+
+
+def test_owner_migration_is_explicit_repeatable_and_keeps_v1_records(db_admin_dsn):
+    scope = ConversationScope('context-test', 'sandbox', 'app', 'tenant', 'actor')
+    state = new_session('a'*32, scope, bindings())
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        owner.initialize()
+        with owner.lease('a'*32, scope=scope) as lease:
+            owner.create_session('a'*32, state, lease, scope=scope)
+        before = owner.load_session('a'*32, scope=scope)
+    with psycopg.connect(db_admin_dsn) as connection:
+        connection.execute('UPDATE prosaic_harness_conversations.schema_version '
+            'SET schema_version=1,storage_contract_version=1')
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        with pytest.raises(StoreIncompatible): owner.check_ready()
+        with pytest.raises(StoreIncompatible): owner.initialize()
+        owner.migrate_context_storage()
+        owner.migrate_context_storage()
+        assert 'context_assembly_v1' in owner.capabilities
+        assert owner.load_session('a'*32, scope=scope) == before
+        with pytest.raises(StoreIncompatible):
+            owner._transport.call(lambda connection:
+                session_schema.ready_on_connection(connection, expected_versions=(1, 1)))
+
+
+def test_runtime_role_cannot_migrate_or_gain_owner_privileges(db_admin_dsn, runtime_dsn):
+    legacy_storage(db_admin_dsn)
+    grant_conversations(db_admin_dsn, runtime_dsn)
+    with pg.PostgresSessionStore(runtime_dsn, namespace='context-test') as runtime:
+        with pytest.raises(StoreIncompatible): runtime.migrate_context_storage()
+    with psycopg.connect(db_admin_dsn) as connection:
+        assert connection.execute('SELECT schema_version,storage_contract_version '
+            'FROM prosaic_harness_conversations.schema_version').fetchone() == (1, 1)
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        owner.migrate_context_storage()
+    with pg.PostgresSessionStore(runtime_dsn, namespace='context-test') as runtime:
+        assert 'context_assembly_v1' in runtime.capabilities
+
+
+def test_v2_checkpoint_is_fenced_and_owner_filtered(db_admin_dsn, runtime_dsn):
+    from prosaic_runtime import ContextWorkState
+    from prosaic_harness import LeaseLost, SessionNotFound
+    from prosaic_harness.session_context import checkpoint_context_work
+    from support.session_documents import context_document
+    scope = ConversationScope('context-test', 'sandbox', 'app', 'tenant', 'actor')
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        owner.initialize()
+    grant_conversations(db_admin_dsn, runtime_dsn)
+    state, prepared = context_document(scope)
+    with pg.PostgresSessionStore(runtime_dsn, namespace='context-test') as first, \
+            pg.PostgresSessionStore(runtime_dsn, namespace='context-test') as replica:
+        with first.lease('a'*32, scope=scope) as lease:
+            revision = first.create_session('a'*32, state, lease, scope=scope)
+            before = prepared.context_work.to_dict()
+            work = ContextWorkState.from_dict({**before, 'checkpointSequence': 1,
+                'reservedActiveMicros': 2_000_000 - before['activeAssemblyMicros']})
+            changed = checkpoint_context_work(state, 'b'*32, work)
+            current = first.save_session('a'*32, changed, revision, lease, scope=scope)
+            assert replica.load_session('a'*32, scope=scope).state == changed
+            with pytest.raises(SessionNotFound):
+                replica.load_session('a'*32, scope=replace(scope, actor='foreign'))
+            with psycopg.connect(db_admin_dsn) as admin:
+                admin.execute('UPDATE prosaic_harness_conversations.leases '
+                    'SET generation=generation+1 WHERE namespace=%s AND session_id=%s',
+                    ('context-test', 'a'*32))
+            with pytest.raises(LeaseLost):
+                first.save_session('a'*32, changed, current, lease, scope=scope)
+def test_failed_postupdate_validation_rolls_back_metadata(db_admin_dsn, monkeypatch):
+    legacy_storage(db_admin_dsn)
+    original = session_schema.ready_on_connection
+    async def reject_v2(connection, **kwargs):
+        row = await (await connection.execute('SELECT schema_version FROM '
+            'prosaic_harness_conversations.schema_version')).fetchone()
+        if row == (2,): raise StoreIncompatible('synthetic postupdate validation failure')
+        return await original(connection, **kwargs)
+    monkeypatch.setattr(session_schema, 'ready_on_connection', reject_v2)
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        with pytest.raises(StoreIncompatible): owner.migrate_context_storage()
+    with psycopg.connect(db_admin_dsn) as connection:
+        assert connection.execute('SELECT schema_version,storage_contract_version '
+            'FROM prosaic_harness_conversations.schema_version').fetchone() == (1, 1)
+
+
+def test_operator_cli_migrates_without_exposing_connection_details(db_admin_dsn, monkeypatch, capsys):
+    import json
+    from prosaic_harness_postgres.cli import main
+    legacy_storage(db_admin_dsn)
+    monkeypatch.setenv('CONTEXT_TEST_DSN', db_admin_dsn)
+    assert main(['migrate-conversations', '--dsn-env', 'CONTEXT_TEST_DSN']) == 0
+    output = capsys.readouterr()
+    assert json.loads(output.out) == {'migrated': True, 'conversation_storage_contract': 2}
+    assert output.err == ''
+    assert db_admin_dsn not in output.out