admin
e7f0070e84
Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.
91 lines
3.9 KiB
SQL
91 lines
3.9 KiB
SQL
-- Migration: agent_profiles — one composed agent per company
|
|
--
|
|
-- An agent_profile is the persistent identity of a company's specialized
|
|
-- accountant. It records:
|
|
--
|
|
-- * Which atoms the composer loaded (horizontal/vertical/modifier IDs into
|
|
-- agent_atom_registry). These drive every chat turn's system prompt.
|
|
-- * A short Swedish profile_summary (≤120 words) shown to the user during
|
|
-- verification and reused in the per-user cache block.
|
|
-- * source_signals: snapshot of what the composer saw at composition time
|
|
-- (TIC fields, SIE top accounts, banking top counterparties) — so the
|
|
-- selection is reconstructable even if upstream data changes.
|
|
-- * field_overrides: user-edited fields with timestamps. On recomposition,
|
|
-- overrides are respected; staleness surfacing is deferred (see plan §6).
|
|
-- * trust_per_tool: per-MCP-tool auto-approval policy. Data only for v0;
|
|
-- management UI lives post-POC (plan §12).
|
|
--
|
|
-- One profile per company is enforced by UNIQUE (company_id). RLS lets
|
|
-- members read/update; only service role (composer) inserts.
|
|
--
|
|
-- See dev_docs/specialized-agent-plan.md §5 (data model), §6 (composer),
|
|
-- §10 (caching), §12 (trust settings).
|
|
|
|
CREATE TABLE public.agent_profiles (
|
|
id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
|
|
company_id uuid NOT NULL UNIQUE REFERENCES public.companies(id) ON DELETE CASCADE,
|
|
|
|
-- Atom loadout. Arrays of atom registry IDs (e.g. 'horizontal/swedish-vat').
|
|
-- Foreign keys to the registry are intentionally not declared — the registry
|
|
-- is shipped, atoms come and go in versions, and we want a profile to keep
|
|
-- pointing at a renamed atom rather than block writes.
|
|
horizontal_atoms text[] NOT NULL DEFAULT '{}',
|
|
vertical_atoms text[] NOT NULL DEFAULT '{}',
|
|
modifier_atoms text[] NOT NULL DEFAULT '{}',
|
|
|
|
profile_summary text,
|
|
|
|
-- What the composer saw. Free-form JSON: { tic: {...}, sie_summary: {...},
|
|
-- banking_summary: {...}, atom_index_version: N }.
|
|
source_signals jsonb NOT NULL DEFAULT '{}',
|
|
|
|
-- User-edited fields. Shape: { "<field>": { "value": <any>, "overridden_at": "<iso>" } }.
|
|
-- Used during recomposition to respect prior user judgments.
|
|
field_overrides jsonb NOT NULL DEFAULT '{}',
|
|
|
|
-- Composition provenance.
|
|
composed_at timestamptz NOT NULL DEFAULT now(),
|
|
composer_model text,
|
|
composer_version integer NOT NULL DEFAULT 1,
|
|
|
|
-- User verification of the inferred profile.
|
|
verified_at timestamptz,
|
|
verified_by_user_id uuid REFERENCES auth.users(id) ON DELETE SET NULL,
|
|
|
|
-- Per-tool auto-approval policy. Shape:
|
|
-- { "<mcp_tool_name>": { "auto_approve_risk": "low"|"medium"|null } }
|
|
-- `null` or missing => no auto-approval. high-risk is never auto-approvable
|
|
-- (legally enforced by the loop, not by this column).
|
|
trust_per_tool jsonb NOT NULL DEFAULT '{}',
|
|
|
|
created_at timestamptz NOT NULL DEFAULT now(),
|
|
updated_at timestamptz NOT NULL DEFAULT now()
|
|
);
|
|
|
|
CREATE INDEX idx_agent_profiles_company ON public.agent_profiles (company_id);
|
|
|
|
CREATE TRIGGER agent_profiles_updated_at
|
|
BEFORE UPDATE ON public.agent_profiles
|
|
FOR EACH ROW EXECUTE FUNCTION public.update_updated_at_column();
|
|
|
|
-- =============================================================================
|
|
-- RLS
|
|
-- =============================================================================
|
|
|
|
ALTER TABLE public.agent_profiles ENABLE ROW LEVEL SECURITY;
|
|
|
|
CREATE POLICY "agent_profiles_select"
|
|
ON public.agent_profiles
|
|
FOR SELECT
|
|
USING (company_id IN (SELECT public.user_company_ids()));
|
|
|
|
CREATE POLICY "agent_profiles_update"
|
|
ON public.agent_profiles
|
|
FOR UPDATE
|
|
USING (company_id IN (SELECT public.user_company_ids()));
|
|
|
|
-- No INSERT / DELETE policies for authenticated users. The composer writes
|
|
-- via service role on signup / rebuild. Deletes propagate from companies.
|
|
|
|
NOTIFY pgrst, 'reload schema';
|