[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_4194":4195,"_4196":62,"_4197":18,"_4198":18,"_4199":18,"_4200":62,"_4201":18,"_4202":18,"_4203":18,"_4204":18,"_4205":-5,"_4206":4207},"routes/s.$postId",{"_9":10,"_11":12,"_13":-7,"_14":-7,"_15":16,"_17":18,"_19":18,"_20":-5,"_21":22},"kind","post_with_profile","postWithProfile",{"_23":24,"_25":26},"messagingRoomId","referrer","imagegenOgImagePolicy","current_wide","preferIntrinsicAspectRatioForOgImage",false,"enforceRenderedOgImg","ogImageVariantOverride","defaultOgDescription","ChatGPT helps you get answers, find inspiration, and be more productive.","post",{"_45":46,"_47":48,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":54,"_55":56,"_38":57,"_58":59,"_60":18},"profile",{"_27":28,"_29":28,"_30":31,"_32":-5,"_33":-5,"_34":35,"_36":18,"_37":-5,"_38":-5,"_39":-5,"_40":18,"_41":-5,"_42":-5,"_43":-5,"_44":18},"user_id","anonymous","username","profile_picture_url","https://cdn.openai.com/sora/images/profile_placeholder_v4.png","profile_picture_id","is_default_profile_picture","follower_count",0,"is_following","display_name","permalink","can_cameo","verified","character_count","owner_profile","social_context","follows_you","id","cd_6a60a99d59808191a0b9a1c6aff60f21","posted_at",1784719773.349895,"text","og_title","og_description","og_image_variant","attachments",[68],"preview_image_url","https://ogimg.chatgpt.com/?postId=cd_6a60a99d59808191a0b9a1c6aff60f21","https://chatgpt.com/s/cd_6a60a99d59808191a0b9a1c6aff60f21","permissions",{"_61":62,"_63":18,"_64":18,"_65":62,"_66":67},"use_experimental_unfurl","can_read",true,"can_write","can_delete","can_remix","share_setting","public",{"_45":69,"_70":71,"_9":72,"_73":74,"_75":76,"_77":78,"_79":80,"_81":82,"_83":-5},"cd_6a60a99d59808191a0b9a1c6aff60f21-attachment-0","tags",[],"codex","task",{"_45":4154,"_123":4155,"_502":4156,"_4157":62,"_86":87,"_4158":18,"_4159":4160,"_465":62,"_4161":4162,"_4163":-5,"_4164":4165},"current_user_turn",{"_96":515,"_45":88,"_100":515,"_2901":4142,"_2903":4143,"_2905":2906,"_136":-5,"_123":2907},"current_assistant_turn",{"_96":97,"_45":87,"_98":-5,"_99":-5,"_100":97,"_101":3547,"_103":3548,"_105":106,"_107":-5,"_108":3549,"_110":3550,"_112":3551,"_114":3552,"_116":117,"_118":-5,"_119":120,"_121":3553,"_123":124,"_125":-5,"_126":127,"_128":3554,"_130":131,"_132":133,"_134":-5,"_135":-5,"_136":88,"_137":3555,"_139":3556,"_141":-5,"_142":18,"_143":144,"_145":-5},"current_diff_task_turn",{"_96":97,"_45":87,"_98":-5,"_99":-5,"_100":97,"_101":2952,"_103":2953,"_105":106,"_107":-5,"_108":2954,"_110":2955,"_112":2956,"_114":2957,"_116":117,"_118":-5,"_119":120,"_121":2958,"_123":124,"_125":-5,"_126":127,"_128":2959,"_130":131,"_132":133,"_134":-5,"_135":-5,"_136":88,"_137":2960,"_139":2961,"_141":-5,"_142":18,"_143":144,"_145":-5},"turns",{"_84":85,"_86":87},"example_task_info","turn_mapping",{"_88":89,"_87":90},"current_turn_id","task_e_6a60a99b26788322b82a18c9738b1651~assttrn_e_6a60a99c8f908322b65b2ecec3081333","task_e_6a60a99b26788322b82a18c9738b1651~usertrn_e_6a60a99c659c8322ae4a73dd61b0e554",{"_45":88,"_91":2899,"_93":2900,"_95":-5},{"_45":87,"_91":92,"_93":94,"_95":88},"turn",{"_96":97,"_45":87,"_98":-5,"_99":-5,"_100":97,"_101":102,"_103":104,"_105":106,"_107":-5,"_108":109,"_110":111,"_112":113,"_114":115,"_116":117,"_118":-5,"_119":120,"_121":122,"_123":124,"_125":-5,"_126":127,"_128":129,"_130":131,"_132":133,"_134":-5,"_135":-5,"_136":88,"_137":138,"_139":140,"_141":-5,"_142":18,"_143":144,"_145":-5},"children",[],"parent","type","assistant","sibling_turn_ids","attempt_placement","role","output_items",[1325,1326,1327],"child_turns",[],"conversation_id","None","error","latest_event",{"_1320":1321,"_49":1322,"_1323":1324},"worklog",{"_1294":1295},"app_server_events",{"_526":1293},"thread_events",{"_526":527},"turn_status","completed","cancellation_requested_at","pull_request_status","externally_created","pull_request_data",{"_494":495,"_485":496,"_497":498,"_499":18,"_500":62,"_501":18,"_502":503,"_504":505,"_506":457,"_507":131,"_508":509,"_510":133,"_511":512,"_513":-5,"_514":-5,"_515":516,"_517":518,"_519":520,"_521":522,"_523":524},"created_at",1784719772.56094,"internal_only_rollouts","environment_id","6a4f4a07a864819196abaa21176f9e31","environment",{"_45":127,"_383":384,"_385":386,"_387":18,"_388":389,"_390":391,"_392":393,"_394":-5,"_395":-5,"_396":18,"_397":398,"_399":400,"_401":400,"_402":403,"_404":405,"_406":407,"_408":-5,"_409":410,"_411":412,"_413":414,"_415":416,"_58":-5,"_123":417,"_418":419,"_420":421,"_422":423,"_424":18,"_425":18},"branch","codex/reconcile-publication-approval","base_commit_sha","659e417a08ffd733bca671a47c8c32672922731a","branch_name","direct_push_pushed_commit_sha","previous_turn_id","logs",{"_137":363},"proxy_events",[146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245],"debug_metadata","discarded","model_version","gpt-5.5","languages",{"_246":362,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":361,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":360,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":359,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":358,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":357,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":356,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":355,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":354,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":353,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":352,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":351,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":350,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":349,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":348,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":347,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":346,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":345,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":344,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":343,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":342,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":341,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":340,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":339,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":338,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":337,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":336,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":335,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":334,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":333,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":332,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":331,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":330,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":329,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":328,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":327,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":324,"_248":249,"_250":251,"_252":325,"_254":255,"_256":257,"_258":326,"_259":-5},{"_246":323,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":322,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":321,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":320,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":319,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":318,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":317,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":316,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":315,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":314,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":313,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":312,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":311,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":310,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":309,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":308,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":305,"_248":249,"_250":251,"_252":306,"_254":307,"_256":257,"_258":35,"_259":-5},{"_246":304,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":303,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":302,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":301,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":300,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":299,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":298,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":297,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":296,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":295,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":294,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":293,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":292,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":291,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":290,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":289,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":288,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":287,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":286,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":285,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":284,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":283,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":282,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":281,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":280,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":279,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":278,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":277,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":276,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":275,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":274,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":273,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":272,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":271,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":270,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":269,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":268,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":267,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":266,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":265,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":264,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":263,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":262,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":261,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":260,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},{"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":35,"_259":-5},"timestamp","2026-07-22T11:31:14.385379","decision","allow","reason","checks passed","method","GET","domain","registry.npmjs.org","protocol","HTTP/1.1","size","path","2026-07-22T11:31:14.382291","2026-07-22T11:31:14.379337","2026-07-22T11:31:14.373744","2026-07-22T11:31:14.370584","2026-07-22T11:31:14.369423","2026-07-22T11:31:14.368239","2026-07-22T11:31:14.327260","2026-07-22T11:31:14.321827","2026-07-22T11:31:14.317072","2026-07-22T11:31:14.313643","2026-07-22T11:31:14.301801","2026-07-22T11:31:14.297917","2026-07-22T11:31:14.293085","2026-07-22T11:31:14.289731","2026-07-22T11:31:14.276561","2026-07-22T11:31:14.272381","2026-07-22T11:31:14.270036","2026-07-22T11:31:14.226642","2026-07-22T11:31:14.224691","2026-07-22T11:31:14.221043","2026-07-22T11:31:14.209271","2026-07-22T11:31:14.206410","2026-07-22T11:31:14.204035","2026-07-22T11:31:14.199765","2026-07-22T11:31:14.192589","2026-07-22T11:31:14.188450","2026-07-22T11:31:14.176027","2026-07-22T11:31:14.171373","2026-07-22T11:31:14.168076","2026-07-22T11:31:14.113415","2026-07-22T11:31:14.106869","2026-07-22T11:31:14.103853","2026-07-22T11:31:14.095507","2026-07-22T11:31:14.092469","2026-07-22T11:31:14.088381","2026-07-22T11:31:14.085131","2026-07-22T11:31:14.081232","2026-07-22T11:31:14.078854","2026-07-22T11:31:14.074973","2026-07-22T11:31:14.071623","2026-07-22T11:31:14.068685","2026-07-22T11:31:14.034692","2026-07-22T11:31:14.031541","2026-07-22T11:31:14.028467","2026-07-22T11:31:14.020884","2026-07-22T11:31:14.007525","CONNECT","registry.npmjs.org:443","2026-07-22T11:31:14.001549","2026-07-22T11:31:13.986921","2026-07-22T11:31:13.984948","2026-07-22T11:31:13.982994","2026-07-22T11:31:13.978471","2026-07-22T11:31:13.977419","2026-07-22T11:31:13.976198","2026-07-22T11:31:13.973092","2026-07-22T11:31:13.971745","2026-07-22T11:31:13.969729","2026-07-22T11:31:13.968113","2026-07-22T11:31:13.952293","2026-07-22T11:31:13.948705","2026-07-22T11:31:13.943721","2026-07-22T11:31:13.937874","2026-07-22T11:31:13.853858","2026-07-22T11:31:13.784750","POST",718,"2026-07-22T11:31:13.670190","2026-07-22T11:31:13.622372","2026-07-22T11:31:13.614446","2026-07-22T11:31:13.548569","2026-07-22T11:31:13.487443","2026-07-22T11:31:13.485497","2026-07-22T11:31:13.326978","2026-07-22T11:31:13.281813","2026-07-22T11:31:13.214086","2026-07-22T11:31:13.172954","2026-07-22T11:31:13.143260","2026-07-22T11:31:13.083063","2026-07-22T11:31:13.052199","2026-07-22T11:31:12.957649","2026-07-22T11:31:12.844193","2026-07-22T11:31:12.819425","2026-07-22T11:31:12.779646","2026-07-22T11:31:12.676414","2026-07-22T11:31:12.622730","2026-07-22T11:31:12.554352","2026-07-22T11:31:12.493486","2026-07-22T11:31:12.458313","2026-07-22T11:31:12.421501","2026-07-22T11:31:12.407319","2026-07-22T11:31:12.352106","2026-07-22T11:31:12.349845","2026-07-22T11:31:12.300748","2026-07-22T11:31:12.298232","2026-07-22T11:31:12.227767","2026-07-22T11:31:12.225161","2026-07-22T11:31:12.174747","2026-07-22T11:31:12.166168","2026-07-22T11:31:12.123630","2026-07-22T11:31:12.116057","2026-07-22T11:31:12.067802","2026-07-22T11:31:12.052219",[364,365,366],{"_367":379,"_369":380},{"_367":375,"_369":376},{"_367":368,"_369":370},"key",{"_371":372,"_96":373,"_123":374},"value","file_00000000d53081f780ecba8adfe45168","name","setup_autodetect","UserSetupScript","2026-07-22T08:22:45.929210",{"_371":377,"_96":373,"_123":378},"file_000000003bd481f7baef92d98cb210cb","warm_up_git_repo_1784719776","2026-07-22T11:29:36.789480",{"_371":381,"_96":373,"_123":382},"file_00000000ce2c81f7b661b858b168ee00","auto_setup","2026-07-22T08:23:00.998105","machine_id","wham-public/wham-universal","label","BigSimmo/Database","is_pinned","description","Database environment","workspace_dir","/workspace","agent_network_access",{"_487":488,"_489":72,"_490":-5,"_491":-5,"_492":-5,"_493":-5},"codex_github_direct","github_connector_id","enable_gitlab_webhooks","repos",[447],"setup","","maintenance_setup","repo_map",{"_447":448},"env_vars",{"_429":430,"_431":432,"_433":434,"_435":436,"_437":438,"_439":440,"_441":442,"_443":444,"_445":446},"secrets",{},"secrets_with_domains","task_count",1250,"creator_id","user-meqzK8tcEkFfh4X5tXfIqXyp","share_settings","workspace","share_targets",[],1783581192.606357,"auto_setup_settings",{"_428":62},"cache_settings",{"_426":62,"_427":400},"etag","\"090065ed-0000-0200-0000-6a60a8610000\"","enable_authtranslator","enable_docker_in_docker","post_setup_cache_enabled","cache_invalidation_key","use_auto_setup","CODEX_ENV_PYTHON_VERSION","3.12","CODEX_ENV_NODE_VERSION","20","CODEX_ENV_RUBY_VERSION","3.4.4","CODEX_ENV_RUST_VERSION","1.89.0","CODEX_ENV_GO_VERSION","1.24.3","CODEX_ENV_BUN_VERSION","1.2.14","CODEX_ENV_PHP_VERSION","8.4","CODEX_ENV_JAVA_VERSION","21","CODEX_ENV_SWIFT_VERSION","6.1","github-1243497866",{"_45":449,"_371":450,"_451":452,"_453":386,"_454":455,"_456":457,"_458":459,"_460":461,"_462":463,"_464":67,"_465":18,"_466":-5,"_467":-5,"_468":-5,"_469":-5,"_470":-5,"_471":-5,"_258":472,"_473":-5,"_58":474},"1243497866","Database","owner",{"_479":480,"_45":481,"_96":482,"_483":484,"_485":486},"repository_full_name","clone_url","https://github.com/BigSimmo/Database.git","default_branch","main","git_commits_url","https://api.github.com/repos/BigSimmo/Database/git/commits{/sha}","git_refs_url","https://api.github.com/repos/BigSimmo/Database/git/refs{/sha}","git_url","git://github.com/BigSimmo/Database.git","visibility","archived","allow_auto_merge","allow_merge_commit","allow_rebase_merge","allow_squash_merge","allow_update_branch","language",63073,"master_branch",{"_475":18,"_476":18,"_477":18,"_478":18},"admin","maintain","push","pull","login","BigSimmo",87357024,"User","avatar_url","https://avatars.githubusercontent.com/u/87357024?v=4","url","https://api.github.com/users/BigSimmo","mode","on","preset_allowlist","allowlist_domains","allowlist_rules","denylist_domains","safe_methods_only","number",1081,"https://github.com/BigSimmo/Database/pull/1081","state","open","merged","mergeable","draft","title","Bind publication approval to immutable reviewed state","body","## Summary\n\n- Bind public-document approval to a canonical SHA-256 digest of the reviewed document, metadata, artifacts, and generation state.\n- Revalidate the digest while the document and all relevant artifact rows are locked during publication, preventing review-to-publication races.\n- Add the forward-only `20260722190000_bind_publication_approval_to_reviewed_state.sql` migration, regenerate schema/types/drift evidence, and update promotion/audit tooling.\n- Preserve historical nullable approvals while requiring a digest for all new approvals and transitions.\n- RAG impact: no retrieval behaviour change — publication governance only.\n\n## Verification\n\n- [x] `npm run verify:pr-local -- --files scripts/audit-public-document-approvals.ts,scripts/promote-public-documents-batch.ts,scripts/sql/verify-publication-approval.sql,src/lib/publication-manifest.ts,src/lib/supabase/database.types.ts,supabase/drift-manifest.json,supabase/schema.sql,supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql,tests/publication-manifest.test.ts,tests/supabase-schema.test.ts` — passed: 3,201 tests, 1 skipped; production build, client-bundle secret scan, and 36 offline RAG fixtures passed.\n- [x] `npm run verify:cheap` — passed all 21 gates; 3,201 tests passed, 1 skipped.\n- [ ] `npm run verify:ui` when UI, routing, styling, browser behavior, reduced-motion, or forced-colors behavior changed\n - UI verification not run: no UI, routing, styling, or browser behavior changed.\n- [ ] `npm run verify:release` before release or handoff confidence claims\n - Verification not run: reserved for the final aggregate reconciliation state, not this isolated PR.\n- [ ] **`npm run eval:retrieval:quality` (must stay 36/36) when retrieval, ranking, selection, chunking, or scoring behavior changed**\n - Verification not run: retrieval/ranking behavior is unchanged; no provider-backed evaluation was warranted.\n- [ ] `npm run eval:rag -- --limit 15` + `npm run eval:quality -- --rag-only` when answer generation, the synthesis prompt, or answer post-processing changed\n - Verification not run: answer generation and post-processing are unchanged.\n- [x] `npm run check:production-readiness` when clinical workflow, privacy, environment, Supabase, source governance, or deployment behavior changed\n - Code/runtime/boot guards passed. The command exited 1 only because this isolated worktree intentionally has no `.env.local`, Supabase credentials, or OpenAI credentials; no provider call occurred.\n- [ ] `npm run check:deployment-readiness` when deployment startup, hosting, or rollout behavior changed\n - Verification not run: deployment startup/hosting configuration is unchanged.\n- [x] Focused `npm exec vitest run tests/publication-manifest.test.ts tests/supabase-schema.test.ts` — 72/72 passed.\n- [x] `npm run check:migration-role`, `npm run check:function-grants`, and `npm run check:owner-scope` — passed.\n- [x] Fresh canonical schema replay using `supabase/postgres:17.6.1.127` with dynamic storage-owner discovery — passed; drift manifest regenerated.\n- [x] Disposable local Supabase migration replay — all 181 migrations applied, including the new migration; `scripts/sql/verify-publication-approval.sql` passed and rolled back.\n- [x] Generated local types from the replayed database matched the new approval field and digest RPC.\n- [x] Local migration-history/canonical-schema comparison found zero publication-related differences. It also surfaced 15 pre-existing unrelated historical differences, intentionally left outside this PR.\n\n## Risk and rollout\n\n- Risk: publication becomes fail-closed when reviewed content or governed artifacts change after approval. A missed canonical field could weaken the binding; focused schema tests and the transactional SQL fixture cover the governed tables and mutation rejection.\n- Rollback: before production migration, revert this PR. After application, use a new forward rollback migration to relax the new requirements; never edit or delete the applied migration. Existing historical approval rows remain valid and nullable.\n- Provider or production effects: none yet. No live Supabase, OpenAI, Railway, or RAG command ran. Production Supabase rollout remains a separate controlled operation after merge.\n\n## Clinical Governance Preflight\n\n- [x] Source-backed claims still require linked source verification before clinical use\n- [x] No patient-identifiable document workflow was introduced or expanded without explicit governance approval\n- [x] Supabase target remains `Clinical KB Database` (`sjrfecxgysukkwxsowpy`)\n- [x] Service-role keys and private document access remain server-only\n- [x] Demo/synthetic content remains clearly separated from real clinical sources\n- [x] Source metadata, review status, and outdated/unknown-source behavior remain conservative\n- [x] Deployment classification/TGA SaMD impact was checked when clinical decision-support behavior changed — no clinical decision-support behavior changed.\n\n## Notes\n\n- This is a new forward-dated migration. The stale archived `20260719055622` migration was not reused.\n- The archived patch was evidence only; its stale 19-file patch was not replayed. The current implementation additionally locks all governed artifact rows in the direct-transition guard.\n\n\n---\n\n> [!NOTE]\n> **High Risk**\n> Changes core publication governance and fail-closed behavior; post-approval edits block publish, and digest coverage must stay complete for all governed tables.\n> \n> **Overview**\n> Publication decisions are now tied to a **canonical SHA-256 digest** of the document and committed artifacts at review time, so content cannot drift between approval and going public.\n> \n> A new `reviewed_state_digest` column and `document_publication_state_digest` RPC hash governed document/artifact state. New approvals must include the digest; `publish_approved_documents` and the direct owner→public transition guard re-check it **while row locks** are held on the document and related tables. Manifests gain required `expectedStateDigest`; promote/audit scripts and SQL fixtures were updated accordingly. Older approval rows may still have a null digest and cannot satisfy the new publish path.\n> \n> ^{Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 659e417a08ffd733bca671a47c8c32672922731a. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).}\n","base","head","base_sha","6976aaeeece84680ed6ffc9e77f839f3a314ec4e","head_sha","merge_commit_sha","e887d4b998a0a794457cede6987b51ace66b3d05","comments","diff","user",{"_479":480,"_371":480,"_525":-5,"_483":484,"_45":481},"commits",1,"changed_files",10,"additions",660,"deletions",22,"email","events",[528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612],{"_252":1266,"_614":1267},{"_252":631,"_614":1261},{"_252":1256,"_614":1257},{"_252":635,"_614":1247},{"_252":635,"_614":1239},{"_252":635,"_614":1233},{"_252":653,"_614":1222},{"_252":653,"_614":1217},{"_252":635,"_614":1209},{"_252":653,"_614":1206},{"_252":635,"_614":1198},{"_252":635,"_614":1193},{"_252":653,"_614":1178},{"_252":635,"_614":1173},{"_252":635,"_614":1168},{"_252":653,"_614":1159},{"_252":635,"_614":1154},{"_252":653,"_614":1149},{"_252":635,"_614":1141},{"_252":635,"_614":1136},{"_252":653,"_614":1121},{"_252":635,"_614":1116},{"_252":653,"_614":1111},{"_252":635,"_614":1103},{"_252":635,"_614":1098},{"_252":653,"_614":1079},{"_252":635,"_614":1074},{"_252":653,"_614":1069},{"_252":635,"_614":1061},{"_252":635,"_614":1056},{"_252":653,"_614":1040},{"_252":635,"_614":1035},{"_252":653,"_614":1030},{"_252":635,"_614":1022},{"_252":635,"_614":1017},{"_252":635,"_614":1013},{"_252":653,"_614":1003},{"_252":635,"_614":998},{"_252":635,"_614":994},{"_252":653,"_614":984},{"_252":653,"_614":979},{"_252":635,"_614":971},{"_252":635,"_614":966},{"_252":635,"_614":962},{"_252":653,"_614":952},{"_252":653,"_614":947},{"_252":635,"_614":941},{"_252":635,"_614":936},{"_252":653,"_614":927},{"_252":635,"_614":922},{"_252":653,"_614":917},{"_252":635,"_614":909},{"_252":635,"_614":904},{"_252":635,"_614":900},{"_252":653,"_614":889},{"_252":653,"_614":884},{"_252":635,"_614":876},{"_252":635,"_614":871},{"_252":635,"_614":867},{"_252":653,"_614":856},{"_252":653,"_614":851},{"_252":635,"_614":843},{"_252":635,"_614":833},{"_252":635,"_614":806},{"_252":653,"_614":801},{"_252":635,"_614":793},{"_252":635,"_614":788},{"_252":635,"_614":784},{"_252":653,"_614":773},{"_252":653,"_614":768},{"_252":635,"_614":760},{"_252":635,"_614":754},{"_252":653,"_614":731},{"_252":635,"_614":726},{"_252":653,"_614":721},{"_252":635,"_614":713},{"_252":635,"_614":704},{"_252":653,"_614":684},{"_252":635,"_614":676},{"_252":653,"_614":671},{"_252":635,"_614":659},{"_252":653,"_614":654},{"_252":635,"_614":636},{"_252":631,"_614":632},{"_252":613,"_614":615},"turn/completed","params",{"_616":617,"_91":618},"threadId","019f8996-ac41-77b3-b963-b4d3e4943e07",{"_619":620,"_621":622,"_107":-5,"_45":623,"_624":625,"_626":627,"_628":629,"_630":117},"completedAt",1784719910,"durationMs",129186,"019f8996-ad87-7fa0-a7cb-d2c04ee02be8","items",[],"itemsView","notLoaded","startedAt",1784719781,"status","thread/status/changed",{"_630":633,"_616":617},{"_96":634},"idle","rawResponseItem/completed",{"_637":638,"_616":617,"_639":623},"item",{"_640":641,"_642":-5,"_45":643,"_644":645,"_646":647,"_100":97,"_96":648},"turnId","content",[650],"end_turn","msg_03a2e9824edee382016a60aa201058819796ebfedab9fa3961","internal_chat_message_metadata_passthrough",{"_649":623},"phase","final_answer","message","turn_id",{"_49":651,"_96":652},"### Summary\n* Added fail-closed active-ingestion protection to both publication paths: direct owner→public transitions and `publish_approved_documents` now lock matching `ingestion_jobs` rows with `pending`/`processing` status before digest revalidation and reject publication while those jobs remain active. 【F:supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql†L198-L214】【F:supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql†L310-L322】\n* Kept the canonical schema snapshot aligned with the migration change in `supabase/schema.sql`.\n* Extended the publication approval SQL fixture with an active-ingestion document, matching approval evidence, a processing `ingestion_jobs` row, and a negative publication assertion. 【F:scripts/sql/verify-publication-approval.sql†L9-L33】【F:scripts/sql/verify-publication-approval.sql†L86-L103】\n* Strengthened schema regression coverage to assert active ingestion jobs are checked before reviewed-state digest recomputation in both guarded publication paths. 【F:tests/supabase-schema.test.ts†L1211-L1225】\n* Committed the scoped fix on the current branch: `627b614 fix(db): block publication during active ingestion`.\n* Created PR metadata via `make_pr` with title: `Block publication while ingestion jobs are active`.\n\n**Testing**\n* ✅ `npm exec vitest run tests/supabase-schema.test.ts` — passed, 68 tests.\n* ✅ `npm run check:migration-role` — passed.\n* ✅ `npm run check:function-grants` — passed.\n\nNote: I did not call external provider/GitHub APIs to post a review-thread reply directly; the required disposition marker and summary were included in the generated PR body for the repair pass.","output_text","item/completed",{"_655":656,"_637":657,"_616":617,"_639":623},"completedAtMs",1784719910409,{"_45":643,"_646":647,"_49":651,"_96":658},"agentMessage",{"_637":660,"_616":617,"_639":623},{"_640":-5,"_661":662,"_45":663,"_644":664,"_665":666,"_96":667},"encrypted_content","gAAAAABqYKog3s4BjL2EkSYXoZfRfd7KIQqSHDIXjeSXmtfeDvqq6Q8L_HzMsywuRiVhCq3pLdRsTyKZVQgzsJp_szZcpR9b8Q6mIszhK6w_-PTPM_xvgfX5zR_U301A4u6FN_7Dk2eUXsaUHSo8G7YyBXvC_mDNPU_-iOrbIowF5ZWlHetzfymxytsFMcRydRujlDil6G8OYOP5JDryaQ5xKIWQgJ6KjD8G9GgQPofKBo-ctXd25JTWtpc827UEzoJg3wy4QJBAaz4TiGL61QgWAIc3zrtpzSFPHpqUghqUg4QkzrlJPDAXe_AasYO96yaPEFpWTDt9jywbVSxmPwIntta6MfySwQ5frerAy_ixgha3xyzM2PgO3hj5e5EtWxnHa2KNP0apAhe3qcYnv2eafV0uZ_BejW_aSz6dEItPz9utfKLPwuucS10CS4EYkGUJNtLpEZFqABUOH_xQzVwBIyE9BbrcKZs8jO-k65wCBVZAA7rsMvkFqBYC_ZE9NchRBbACtwjGGtrcK1DWgUwQpTctWEdkLB3jzBHygL1JLiepQCRzgggalcnRlwMHLwzPMZIDG_GgEDLISE4O8VJRnps5gJk3LnxvjPjOoHMamz8LoDUApklwlRnbySCSQ01lmzOExyRyi85NlNLap-IXc44LMUlnEDKULfwfKWyecTP40O1RKH44xr8uTjfztoDCn1MpwdhRt9fZMQD-p_yd7BP0qef7UQ7-ywYRgSSpFgFPVu4c8ZM6dYJaJP_BCFX4-L9vnZLmZASmW-fW37tEf_qUGzSx4BjBby4QEHGe3L4FqUUF9l-Plk6CDEjgJhLxA7RgwjYj1D6p6P9P6aEyVYsXqbIGMo11RVw8hm-YJ7adHcrgbTwyTDmZEN3EVyfagu5MTc_9D1bpsaE4c9G6QhT9Qc_V9OPU-QW30zvH9nwxuUwoU7-AE4b_XyfFFayBzS5kkSrkzPdX72fV5LVnFjKEUkO0G0LFY8U-EbsHkngHxhl8ztjD_1OaXgwL9EBSf6KCe03EQ6-mY4UXRmc-RQRbdkVhRoSOqbnCNdr78H0RPRAsSNhTETfeJ9BMmI1W0cVLRTaSe8_ZvWe7SnT7efj5EuOZ8GLBQY-XgxGcU-8mQyWw7gSpqP2PVimgOv4z_NKGhoJxCessQRIB4hA8fkngUMWHA2B9r1yAGhCS3RfcxgTwcD_TR0cBSoagkmbJZLJP4PeIwfQ4jY_mWTOJIFc5qRWhYycj9Oa6G4BJFoRh-Y2jiJOb6GTMkvrOBeWbu-iyxdm1LVivfMfX9TZ7qY9OzqRC4uBvYNDxgixM0lgJTL21G3MVhSGk7yZDWWGkXxk71SUeqb7uA31mnocge9X8j85cjnecmk-y_sFceJ4n1IN7TbYtcpo5BWIjtX4yYFmxo0fwb2SbMoxW4J5mqEM5wLuZzhGk8ALNzVJJZriUikIX6kSHkDPfr7UcqUckkl52krMeAyhKQhZRH1YtInoJAWLxcdlisxbF2VlMpNdbmv8VXKGs7_OWicONLhaFp-IUydan30sWVlpYBMOMP1xToIInMV-Qv9mVKhhk8d3h6pgKbv5d3fDn9dJ5XEXG4Yx7oB1wzzUbpI5CM7qGFGkYVfce_4YvPNVsMPqUaO5BAqHYcFJAmA99B8hoQwJd_9AR0t31wkjZPNZ8wP6uW02IU9q4zw==","rs_03a2e9824edee382016a60aa1d78908197b01137e73a038cea",{"_649":623},"summary",[668],"reasoning",{"_49":669,"_96":670},"**Finalizing PR summary and commit verification**","summary_text",{"_655":672,"_637":673,"_616":617,"_639":623},1784719903973,{"_640":674,"_45":663,"_665":675,"_96":667},[],[669],{"_637":677,"_616":617,"_639":623},{"_678":679,"_45":-5,"_644":680,"_681":682,"_96":683},"call_id","call_MRVy0tLZ2roDzJfltcCYg0GX",{"_649":623},"output","Chunk ID: db5a4d\nWall time: 0.0003 seconds\nProcess exited with code 0\nOriginal token count: 4347\nOutput:\n## work\n 188\t perform 1 from public.document_images where document_id = old.id for update;\n 189\t perform 1 from public.document_labels where document_id = old.id for update;\n 190\t perform 1 from public.document_summaries where document_id = old.id for update;\n 191\t perform 1 from public.document_sections where document_id = old.id for update;\n 192\t perform 1 from public.document_memory_cards where document_id = old.id for update;\n 193\t perform 1 from public.document_chunks where document_id = old.id for update;\n 194\t perform 1 from public.document_table_facts where document_id = old.id for update;\n 195\t perform 1 from public.document_embedding_fields where document_id = old.id for update;\n 196\t perform 1 from public.document_index_quality where document_id = old.id for update;\n 197\t perform 1 from public.document_index_units where document_id = old.id for update;\n 198\t perform 1 from public.ingestion_jobs\n 199\t where document_id = old.id\n 200\t and status in ('pending', 'processing')\n 201\t for update;\n 202\t\n 203\t if exists (\n 204\t select 1\n 205\t from public.ingestion_jobs\n 206\t where document_id = old.id\n 207\t and status in ('pending', 'processing')\n 208\t ) then\n 209\t raise exception 'public document transition requires ingestion and reindex jobs to finish';\n 210\t end if;\n 211\t\n 212\t v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n 213\t if v_current_state_digest is distinct from v_reviewed_state_digest then\n 214\t raise exception 'public document transition content changed after review';\n 215\t end if;\n 216\t end if;\n 217\t return new;\n 218\tend;\n 219\t$$;\n 220\t\n 221\trevoke all on function public.guard_document_publication_transition() from public, anon, authenticated;\n 222\t\n 223\tcreate or replace function public.publish_approved_documents(\n 224\t p_documents jsonb,\n 225\t p_manifest_digest text,\n 226\t p_expected_count integer\n 227\t)\n 228\treturns jsonb\n 229\tlanguage plpgsql\n 230\tsecurity definer\n 231\tset search_path = ''\n 232\tas $$\n 233\tdeclare\n 234\t v_entry jsonb;\n 235\t v_document public.documents%rowtype;\n 236\t v_document_id uuid;\n 237\t v_expected_owner_id uuid;\n 238\t v_expected_state_digest text;\n 239\t v_current_state_digest text;\n 240\t v_approval_id uuid;\n 241\t v_manifest_digest text := lower(trim(coalesce(p_manifest_digest, '')));\n 242\t v_count integer;\n 243\t v_results jsonb := '[]'::jsonb;\n 244\tbegin\n 245\t if jsonb_typeof(p_documents) is distinct from 'array' then\n 246\t raise exception 'publication documents must be a JSON array';\n 247\t end if;\n 248\t if v_manifest_digest !~ '^[0-9a-f]{64}$' then\n 249\t raise exception 'publication manifest digest must be a lowercase SHA-256 value';\n 250\t end if;\n 251\t\n 252\t v_count := jsonb_array_length(p_documents);\n 253\t if p_expected_count is null or p_expected_count < 1 or p_expected_count <> v_count then\n 254\t raise exception 'publication expected count % does not match manifest count %', p_expected_count, v_count;\n 255\t end if;\n 256\t if exists (\n 257\t select 1\n 258\t from jsonb_array_elements(p_documents) entry\n 259\t group by entry->>'document_id'\n 260\t having count(*) > 1\n 261\t ) then\n 262\t raise exception 'publication manifest contains duplicate document ids';\n 263\t end if;\n 264\t\n 265\t for v_entry in select value from jsonb_array_elements(p_documents)\n 266\t loop\n 267\t begin\n 268\t v_document_id := nullif(v_entry->>'document_id', '')::uuid;\n 269\t v_expected_owner_id := nullif(v_entry->>'expected_owner_id', '')::uuid;\n 270\t exception when invalid_text_representation then\n 271\t raise exception 'publication manifest contains an invalid document or owner id';\n 272\t end;\n 273\t v_expected_state_digest := lower(coalesce(v_entry->>'expected_state_digest', ''));\n 274\t if v_document_id is null or v_expected_owner_id is null then\n 275\t raise exception 'publication manifest requires document_id and expected_owner_id';\n 276\t end if;\n 277\t if v_expected_state_digest !~ '^[0-9a-f]{64}$' then\n 278\t raise exception 'publication manifest requires expected_state_digest';\n 279\t end if;\n 280\t\n 281\t -- This row lock serializes title/metadata/status updates, committed index\n 282\t -- generation swaps, and new child rows (their foreign-key checks take a\n 283\t -- conflicting key-share lock). Existing child rows are locked below before\n 284\t -- the state digest is recomputed.\n 285\t select * into v_document\n 286\t from public.documents\n 287\t where id = v_document_id\n 288\t for update;\n 289\t if not found then\n 290\t raise exception 'publication document % was not found', v_document_id;\n 291\t end if;\n 292\t if v_document.owner_id is distinct from v_expected_owner_id then\n 293\t raise exception 'publication document % owner changed from the manifest expectation', v_document_id;\n 294\t end if;\n 295\t if v_document.status <> 'indexed' then\n 296\t raise exception 'publication document % is not indexed', v_document_id;\n 297\t end if;\n 298\t\n 299\t perform 1 from public.document_pages where document_id = v_document_id for update;\n 300\t perform 1 from public.document_images where document_id = v_document_id for update;\n 301\t perform 1 from public.document_labels where document_id = v_document_id for update;\n 302\t perform 1 from public.document_summaries where document_id = v_document_id for update;\n 303\t perform 1 from public.document_sections where document_id = v_document_id for update;\n 304\t perform 1 from public.document_memory_cards where document_id = v_document_id for update;\n 305\t perform 1 from public.document_chunks where document_id = v_document_id for update;\n 306\t perform 1 from public.document_table_facts where document_id = v_document_id for update;\n 307\t perform 1 from public.document_embedding_fields where document_id = v_document_id for update;\n 308\t perform 1 from public.document_index_quality where document_id = v_document_id for update;\n 309\t perform 1 from public.document_index_units where document_id = v_document_id for update;\n 310\t perform 1 from public.ingestion_jobs\n 311\t where document_id = v_document_id\n 312\t and status in ('pending', 'processing')\n 313\t for update;\n 314\t\n 315\t if exists (\n 316\t select 1\n 317\t from public.ingestion_jobs\n 318\t where document_id = v_document_id\n 319\t and status in ('pending', 'processing')\n 320\t ) then\n 321\t raise exception 'publication document % has active ingestion or reindex jobs', v_document_id;\n 322\t end if;\n 323\t\n 324\t select approval.id into v_approval_id\n 325\t from public.document_publication_approvals approval\n 326\t where approval.document_id = v_document_id\n 8\t\n 9\tinsert into public.documents (id, owner_id, title, file_name, file_type, storage_path, status)\n 10\tvalues\n 11\t ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Approved fixture', 'approved.pdf', 'application/pdf', 'fixtures/approved.pdf', 'indexed'),\n 12\t ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Private fixture', 'private.pdf', 'application/pdf', 'fixtures/private.pdf', 'indexed'),\n 13\t ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Quarantine fixture', 'quarantine.pdf', 'application/pdf', 'fixtures/quarantine.pdf', 'indexed'),\n 14\t ('10000000-0000-4000-8000-000000000004', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Unapproved fixture', 'unapproved.pdf', 'application/pdf', 'fixtures/unapproved.pdf', 'indexed'),\n 15\t ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed'),\n 16\t ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Active ingestion fixture', 'active-ingestion.pdf', 'application/pdf', 'fixtures/active-ingestion.pdf', 'indexed');\n 17\t\n 18\tinsert into public.document_labels (document_id, owner_id, label, label_type, source)\n 19\tvalues ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'publication fixture', 'custom', 'manual');\n 20\t\n 21\tinsert into public.document_publication_approvals (\n 22\t document_id, expected_prior_owner_id, approving_operator_id, decision, reason, evidence_references,\n 23\t manifest_digest, reviewed_state_digest\n 24\t)\n 25\tvalues\n 26\t ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Approved publication fixture.', array['fixture:approved'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n 27\t ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'keep_private', 'Private publication fixture.', array['fixture:private'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n 28\t ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'quarantine', 'Quarantine publication fixture.', array['fixture:quarantine'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n 29\t ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n 30\t ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Active ingestion protection fixture.', array['fixture:active-ingestion'], repeat('d', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\n 31\t\n 32\tinsert into public.ingestion_jobs (document_id, status, stage, progress, locked_by, locked_at)\n 33\tvalues ('10000000-0000-4000-8000-000000000007', 'processing', 'indexing', 50, 'publication-fixture-worker', now());\n 34\t\n 35\tselect public.publish_approved_documents(\n 36\t jsonb_build_array(jsonb_build_object(\n 37\t 'document_id', '10000000-0000-4000-8000-000000000001',\n 38\t 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 39\t 'expected_state_digest', public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')\n 40\t )),\n 41\t repeat('a', 64),\n 42\t 1\n 43\t);\n 44\t\n 45\tdo $$\n 46\tbegin\n 47\t if not exists (\n 48\t select 1 from public.documents\n 49\t where id = '10000000-0000-4000-8000-000000000001'\n 50\t and owner_id is null\n 51\t and metadata->>'publication_manifest_digest' = repeat('a', 64)\n 52\t ) then raise exception 'approved publication fixture was not published'; end if;\n 53\t if not exists (\n 54\t select 1 from public.document_labels\n 55\t where document_id = '10000000-0000-4000-8000-000000000001' and owner_id is null\n 56\t ) then raise exception 'approved publication artifact owner was not updated'; end if;\n 57\t if exists (\n 58\t select 1 from public.documents\n 59\t where id in ('10000000-0000-4000-8000-000000000002', '10000000-0000-4000-8000-000000000003')\n 60\t and owner_id is null\n 61\t ) then raise exception 'private or quarantine publication fixture was published'; end if;\n 62\t\n 63\t update public.documents\n 64\t set title = 'Changed after approval'\n 65\t where id = '10000000-0000-4000-8000-000000000006';\n 66\t begin\n 67\t perform public.publish_approved_documents(\n 68\t jsonb_build_array(jsonb_build_object(\n 69\t 'document_id', '10000000-0000-4000-8000-000000000006',\n 70\t 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 71\t 'expected_state_digest', (\n 72\t select reviewed_state_digest from public.document_publication_approvals\n 73\t where document_id = '10000000-0000-4000-8000-000000000006'\n 74\t )\n 75\t )),\n 76\t repeat('b', 64),\n 77\t 1\n 78\t );\n 79\t raise exception 'post-review document mutation unexpectedly published';\n 80\t exception when others then\n 81\t if sqlerrm = 'post-review document mutation unexpectedly published' then raise; end if;\n 82\t if sqlerrm not like 'publication document % changed after review' then raise; end if;\n 83\t end;\n 84\t\n 85\t\n 86\t begin\n 87\t perform public.publish_approved_documents(\n 88\t jsonb_build_array(jsonb_build_object(\n 89\t 'document_id', '10000000-0000-4000-8000-000000000007',\n 90\t 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 91\t 'expected_state_digest', (\n 92\t select reviewed_state_digest from public.document_publication_approvals\n 93\t where document_id = '10000000-0000-4000-8000-000000000007'\n 94\t )\n 95\t )),\n 96\t repeat('d', 64),\n 97\t 1\n 98\t );\n 99\t raise exception 'active ingestion publication fixture unexpectedly published';\n 100\t exception when others then\n 101\t if sqlerrm = 'active ingestion publication fixture unexpectedly published' then raise; end if;\n 102\t if sqlerrm not like 'publication document % has active ingestion or reindex jobs' then raise; end if;\n 103\t end;\n 104\t\n 105\t begin\n 106\t update public.documents\n 107\t set owner_id = null, metadata = metadata || jsonb_build_object('public_corpus', true)\n 108\t where id = '10000000-0000-4000-8000-000000000004';\n 109\t raise exception 'unapproved publication fixture unexpectedly published';\n 110\t exception when others then\n 111\t if sqlerrm = 'unapproved publication fixture unexpectedly published' then raise; end if;\n 112\t end;\n 1188\t expect(sql).toContain(\"create or replace function public.document_publication_state_digest(\");\n 1189\t expect(sql).toContain(\"publication approval requires a reviewed content/state digest\");\n 1190\t expect(sql).toContain(\"v_current_state_digest := public.document_publication_state_digest(\");\n 1191\t expect(sql).toContain(\"publication document % changed after review\");\n 1192\t expect(sql).toContain(\"'publication_reviewed_state_digest', v_expected_state_digest\");\n 1193\t\n 1194\t const functionStart = sql.indexOf(\"create or replace function public.publish_approved_documents(\");\n 1195\t const functionBody = sql.slice(functionStart, sql.indexOf(\"$$;\", functionStart));\n 1196\t for (const table of [\n 1197\t \"document_pages\",\n 1198\t \"document_images\",\n 1199\t \"document_labels\",\n 1200\t \"document_summaries\",\n 1201\t \"document_sections\",\n 1202\t \"document_memory_cards\",\n 1203\t \"document_chunks\",\n 1204\t \"document_table_facts\",\n 1205\t \"document_embedding_fields\",\n 1206\t \"document_index_quality\",\n 1207\t \"document_index_units\",\n 1208\t ]) {\n 1209\t expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\n 1210\t }\n 1211\t expect(functionBody).toContain(\"perform 1 from public.ingestion_jobs\");\n 1212\t expect(functionBody).toContain(\"and status in ('pending', 'processing')\");\n 1213\t expect(functionBody).toContain(\"publication document % has active ingestion or reindex jobs\");\n 1214\t expect(functionBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\n 1215\t functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n 1216\t );\n 1217\t\n 1218\t const guardStart = sql.indexOf(\"create or replace function public.guard_document_publication_transition(\");\n 1219\t const guardBody = sql.slice(guardStart, sql.indexOf(\"$$;\", guardStart));\n 1220\t expect(guardBody).toContain(\"perform 1 from public.document_chunks where document_id = old.id for update;\");\n 1221\t expect(guardBody).toContain(\"perform 1 from public.ingestion_jobs\");\n 1222\t expect(guardBody).toContain(\"public document transition requires ingestion and reindex jobs to finish\");\n 1223\t expect(guardBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\n 1224\t guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n 1225\t );\n 1226\t }\n 1227\t });\n 1228\t\n 1229\t it(\"serializes permanent deletion against ingestion job creation\", () => {\n 1230\t for (const sql of [schema, deleteDocumentIfIdleMigration]) {\n","function_call_output",{"_655":685,"_637":686,"_616":617,"_639":623},1784719899914,{"_687":688,"_689":690,"_691":692,"_693":694,"_621":35,"_695":35,"_45":679,"_696":697,"_698":699,"_630":117,"_96":700},"aggregatedOutput","## work\n 188\t perform 1 from public.document_images where document_id = old.id for update;\n 189\t perform 1 from public.document_labels where document_id = old.id for update;\n 190\t perform 1 from public.document_summaries where document_id = old.id for update;\n 191\t perform 1 from public.document_sections where document_id = old.id for update;\n 192\t perform 1 from public.document_memory_cards where document_id = old.id for update;\n 193\t perform 1 from public.document_chunks where document_id = old.id for update;\n 194\t perform 1 from public.document_table_facts where document_id = old.id for update;\n 195\t perform 1 from public.document_embedding_fields where document_id = old.id for update;\n 196\t perform 1 from public.document_index_quality where document_id = old.id for update;\n 197\t perform 1 from public.document_index_units where document_id = old.id for update;\n 198\t perform 1 from public.ingestion_jobs\n 199\t where document_id = old.id\n 200\t and status in ('pending', 'processing')\n 201\t for update;\n 202\t\n 203\t if exists (\n 204\t select 1\n 205\t from public.ingestion_jobs\n 206\t where document_id = old.id\n 207\t and status in ('pending', 'processing')\n 208\t ) then\n 209\t raise exception 'public document transition requires ingestion and reindex jobs to finish';\n 210\t end if;\n 211\t\n 212\t v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n 213\t if v_current_state_digest is distinct from v_reviewed_state_digest then\n 214\t raise exception 'public document transition content changed after review';\n 215\t end if;\n 216\t end if;\n 217\t return new;\n 218\tend;\n 219\t$$;\n 220\t\n 221\trevoke all on function public.guard_document_publication_transition() from public, anon, authenticated;\n 222\t\n 223\tcreate or replace function public.publish_approved_documents(\n 224\t p_documents jsonb,\n 225\t p_manifest_digest text,\n 226\t p_expected_count integer\n 227\t)\n 228\treturns jsonb\n 229\tlanguage plpgsql\n 230\tsecurity definer\n 231\tset search_path = ''\n 232\tas $$\n 233\tdeclare\n 234\t v_entry jsonb;\n 235\t v_document public.documents%rowtype;\n 236\t v_document_id uuid;\n 237\t v_expected_owner_id uuid;\n 238\t v_expected_state_digest text;\n 239\t v_current_state_digest text;\n 240\t v_approval_id uuid;\n 241\t v_manifest_digest text := lower(trim(coalesce(p_manifest_digest, '')));\n 242\t v_count integer;\n 243\t v_results jsonb := '[]'::jsonb;\n 244\tbegin\n 245\t if jsonb_typeof(p_documents) is distinct from 'array' then\n 246\t raise exception 'publication documents must be a JSON array';\n 247\t end if;\n 248\t if v_manifest_digest !~ '^[0-9a-f]{64}$' then\n 249\t raise exception 'publication manifest digest must be a lowercase SHA-256 value';\n 250\t end if;\n 251\t\n 252\t v_count := jsonb_array_length(p_documents);\n 253\t if p_expected_count is null or p_expected_count < 1 or p_expected_count <> v_count then\n 254\t raise exception 'publication expected count % does not match manifest count %', p_expected_count, v_count;\n 255\t end if;\n 256\t if exists (\n 257\t select 1\n 258\t from jsonb_array_elements(p_documents) entry\n 259\t group by entry->>'document_id'\n 260\t having count(*) > 1\n 261\t ) then\n 262\t raise exception 'publication manifest contains duplicate document ids';\n 263\t end if;\n 264\t\n 265\t for v_entry in select value from jsonb_array_elements(p_documents)\n 266\t loop\n 267\t begin\n 268\t v_document_id := nullif(v_entry->>'document_id', '')::uuid;\n 269\t v_expected_owner_id := nullif(v_entry->>'expected_owner_id', '')::uuid;\n 270\t exception when invalid_text_representation then\n 271\t raise exception 'publication manifest contains an invalid document or owner id';\n 272\t end;\n 273\t v_expected_state_digest := lower(coalesce(v_entry->>'expected_state_digest', ''));\n 274\t if v_document_id is null or v_expected_owner_id is null then\n 275\t raise exception 'publication manifest requires document_id and expected_owner_id';\n 276\t end if;\n 277\t if v_expected_state_digest !~ '^[0-9a-f]{64}$' then\n 278\t raise exception 'publication manifest requires expected_state_digest';\n 279\t end if;\n 280\t\n 281\t -- This row lock serializes title/metadata/status updates, committed index\n 282\t -- generation swaps, and new child rows (their foreign-key checks take a\n 283\t -- conflicting key-share lock). Existing child rows are locked below before\n 284\t -- the state digest is recomputed.\n 285\t select * into v_document\n 286\t from public.documents\n 287\t where id = v_document_id\n 288\t for update;\n 289\t if not found then\n 290\t raise exception 'publication document % was not found', v_document_id;\n 291\t end if;\n 292\t if v_document.owner_id is distinct from v_expected_owner_id then\n 293\t raise exception 'publication document % owner changed from the manifest expectation', v_document_id;\n 294\t end if;\n 295\t if v_document.status <> 'indexed' then\n 296\t raise exception 'publication document % is not indexed', v_document_id;\n 297\t end if;\n 298\t\n 299\t perform 1 from public.document_pages where document_id = v_document_id for update;\n 300\t perform 1 from public.document_images where document_id = v_document_id for update;\n 301\t perform 1 from public.document_labels where document_id = v_document_id for update;\n 302\t perform 1 from public.document_summaries where document_id = v_document_id for update;\n 303\t perform 1 from public.document_sections where document_id = v_document_id for update;\n 304\t perform 1 from public.document_memory_cards where document_id = v_document_id for update;\n 305\t perform 1 from public.document_chunks where document_id = v_document_id for update;\n 306\t perform 1 from public.document_table_facts where document_id = v_document_id for update;\n 307\t perform 1 from public.document_embedding_fields where document_id = v_document_id for update;\n 308\t perform 1 from public.document_index_quality where document_id = v_document_id for update;\n 309\t perform 1 from public.document_index_units where document_id = v_document_id for update;\n 310\t perform 1 from public.ingestion_jobs\n 311\t where document_id = v_document_id\n 312\t and status in ('pending', 'processing')\n 313\t for update;\n 314\t\n 315\t if exists (\n 316\t select 1\n 317\t from public.ingestion_jobs\n 318\t where document_id = v_document_id\n 319\t and status in ('pending', 'processing')\n 320\t ) then\n 321\t raise exception 'publication document % has active ingestion or reindex jobs', v_document_id;\n 322\t end if;\n 323\t\n 324\t select approval.id into v_approval_id\n 325\t from public.document_publication_approvals approval\n 326\t where approval.document_id = v_document_id\n 8\t\n 9\tinsert into public.documents (id, owner_id, title, file_name, file_type, storage_path, status)\n 10\tvalues\n 11\t ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Approved fixture', 'approved.pdf', 'application/pdf', 'fixtures/approved.pdf', 'indexed'),\n 12\t ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Private fixture', 'private.pdf', 'application/pdf', 'fixtures/private.pdf', 'indexed'),\n 13\t ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Quarantine fixture', 'quarantine.pdf', 'application/pdf', 'fixtures/quarantine.pdf', 'indexed'),\n 14\t ('10000000-0000-4000-8000-000000000004', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Unapproved fixture', 'unapproved.pdf', 'application/pdf', 'fixtures/unapproved.pdf', 'indexed'),\n 15\t ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed'),\n 16\t ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Active ingestion fixture', 'active-ingestion.pdf', 'application/pdf', 'fixtures/active-ingestion.pdf', 'indexed');\n 17\t\n 18\tinsert into public.document_labels (document_id, owner_id, label, label_type, source)\n 19\tvalues ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'publication fixture', 'custom', 'manual');\n 20\t\n 21\tinsert into public.document_publication_approvals (\n 22\t document_id, expected_prior_owner_id, approving_operator_id, decision, reason, evidence_references,\n 23\t manifest_digest, reviewed_state_digest\n 24\t)\n 25\tvalues\n 26\t ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Approved publication fixture.', array['fixture:approved'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n 27\t ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'keep_private', 'Private publication fixture.', array['fixture:private'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n 28\t ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'quarantine', 'Quarantine publication fixture.', array['fixture:quarantine'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n 29\t ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n 30\t ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Active ingestion protection fixture.', array['fixture:active-ingestion'], repeat('d', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\n 31\t\n 32\tinsert into public.ingestion_jobs (document_id, status, stage, progress, locked_by, locked_at)\n 33\tvalues ('10000000-0000-4000-8000-000000000007', 'processing', 'indexing', 50, 'publication-fixture-worker', now());\n 34\t\n 35\tselect public.publish_approved_documents(\n 36\t jsonb_build_array(jsonb_build_object(\n 37\t 'document_id', '10000000-0000-4000-8000-000000000001',\n 38\t 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 39\t 'expected_state_digest', public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')\n 40\t )),\n 41\t repeat('a', 64),\n 42\t 1\n 43\t);\n 44\t\n 45\tdo $$\n 46\tbegin\n 47\t if not exists (\n 48\t select 1 from public.documents\n 49\t where id = '10000000-0000-4000-8000-000000000001'\n 50\t and owner_id is null\n 51\t and metadata->>'publication_manifest_digest' = repeat('a', 64)\n 52\t ) then raise exception 'approved publication fixture was not published'; end if;\n 53\t if not exists (\n 54\t select 1 from public.document_labels\n 55\t where document_id = '10000000-0000-4000-8000-000000000001' and owner_id is null\n 56\t ) then raise exception 'approved publication artifact owner was not updated'; end if;\n 57\t if exists (\n 58\t select 1 from public.documents\n 59\t where id in ('10000000-0000-4000-8000-000000000002', '10000000-0000-4000-8000-000000000003')\n 60\t and owner_id is null\n 61\t ) then raise exception 'private or quarantine publication fixture was published'; end if;\n 62\t\n 63\t update public.documents\n 64\t set title = 'Changed after approval'\n 65\t where id = '10000000-0000-4000-8000-000000000006';\n 66\t begin\n 67\t perform public.publish_approved_documents(\n 68\t jsonb_build_array(jsonb_build_object(\n 69\t 'document_id', '10000000-0000-4000-8000-000000000006',\n 70\t 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 71\t 'expected_state_digest', (\n 72\t select reviewed_state_digest from public.document_publication_approvals\n 73\t where document_id = '10000000-0000-4000-8000-000000000006'\n 74\t )\n 75\t )),\n 76\t repeat('b', 64),\n 77\t 1\n 78\t );\n 79\t raise exception 'post-review document mutation unexpectedly published';\n 80\t exception when others then\n 81\t if sqlerrm = 'post-review document mutation unexpectedly published' then raise; end if;\n 82\t if sqlerrm not like 'publication document % changed after review' then raise; end if;\n 83\t end;\n 84\t\n 85\t\n 86\t begin\n 87\t perform public.publish_approved_documents(\n 88\t jsonb_build_array(jsonb_build_object(\n 89\t 'document_id', '10000000-0000-4000-8000-000000000007',\n 90\t 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 91\t 'expected_state_digest', (\n 92\t select reviewed_state_digest from public.document_publication_approvals\n 93\t where document_id = '10000000-0000-4000-8000-000000000007'\n 94\t )\n 95\t )),\n 96\t repeat('d', 64),\n 97\t 1\n 98\t );\n 99\t raise exception 'active ingestion publication fixture unexpectedly published';\n 100\t exception when others then\n 101\t if sqlerrm = 'active ingestion publication fixture unexpectedly published' then raise; end if;\n 102\t if sqlerrm not like 'publication document % has active ingestion or reindex jobs' then raise; end if;\n 103\t end;\n 104\t\n 105\t begin\n 106\t update public.documents\n 107\t set owner_id = null, metadata = metadata || jsonb_build_object('public_corpus', true)\n 108\t where id = '10000000-0000-4000-8000-000000000004';\n 109\t raise exception 'unapproved publication fixture unexpectedly published';\n 110\t exception when others then\n 111\t if sqlerrm = 'unapproved publication fixture unexpectedly published' then raise; end if;\n 112\t end;\n 1188\t expect(sql).toContain(\"create or replace function public.document_publication_state_digest(\");\n 1189\t expect(sql).toContain(\"publication approval requires a reviewed content/state digest\");\n 1190\t expect(sql).toContain(\"v_current_state_digest := public.document_publication_state_digest(\");\n 1191\t expect(sql).toContain(\"publication document % changed after review\");\n 1192\t expect(sql).toContain(\"'publication_reviewed_state_digest', v_expected_state_digest\");\n 1193\t\n 1194\t const functionStart = sql.indexOf(\"create or replace function public.publish_approved_documents(\");\n 1195\t const functionBody = sql.slice(functionStart, sql.indexOf(\"$$;\", functionStart));\n 1196\t for (const table of [\n 1197\t \"document_pages\",\n 1198\t \"document_images\",\n 1199\t \"document_labels\",\n 1200\t \"document_summaries\",\n 1201\t \"document_sections\",\n 1202\t \"document_memory_cards\",\n 1203\t \"document_chunks\",\n 1204\t \"document_table_facts\",\n 1205\t \"document_embedding_fields\",\n 1206\t \"document_index_quality\",\n 1207\t \"document_index_units\",\n 1208\t ]) {\n 1209\t expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\n 1210\t }\n 1211\t expect(functionBody).toContain(\"perform 1 from public.ingestion_jobs\");\n 1212\t expect(functionBody).toContain(\"and status in ('pending', 'processing')\");\n 1213\t expect(functionBody).toContain(\"publication document % has active ingestion or reindex jobs\");\n 1214\t expect(functionBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\n 1215\t functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n 1216\t );\n 1217\t\n 1218\t const guardStart = sql.indexOf(\"create or replace function public.guard_document_publication_transition(\");\n 1219\t const guardBody = sql.slice(guardStart, sql.indexOf(\"$$;\", guardStart));\n 1220\t expect(guardBody).toContain(\"perform 1 from public.document_chunks where document_id = old.id for update;\");\n 1221\t expect(guardBody).toContain(\"perform 1 from public.ingestion_jobs\");\n 1222\t expect(guardBody).toContain(\"public document transition requires ingestion and reindex jobs to finish\");\n 1223\t expect(guardBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\n 1224\t guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n 1225\t );\n 1226\t }\n 1227\t });\n 1228\t\n 1229\t it(\"serializes permanent deletion against ingestion job creation\", () => {\n 1230\t for (const sql of [schema, deleteDocumentIfIdleMigration]) {\n","command","/bin/bash -lc \"git status --short --branch && nl -ba supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql | sed -n '188,326p' && nl -ba scripts/sql/verify-publication-approval.sql | sed -n '8,112p' && nl -ba tests/supabase-schema.test.ts | sed -n '1188,1230p'\"","commandActions",[701],"cwd","/workspace/Database","exitCode","processId","69095","source","unifiedExecStartup","commandExecution",{"_689":702,"_96":703},"git status --short --branch && nl -ba supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql | sed -n '188,326p' && nl -ba scripts/sql/verify-publication-approval.sql | sed -n '8,112p' && nl -ba tests/supabase-schema.test.ts | sed -n '1188,1230p'","unknown",{"_637":705,"_616":617,"_639":623},{"_706":707,"_678":679,"_45":708,"_644":709,"_371":710,"_711":-5,"_96":712},"arguments","{\"cmd\":\"git status --short --branch && nl -ba supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql | sed -n '188,326p' && nl -ba scripts/sql/verify-publication-approval.sql | sed -n '8,112p' && nl -ba tests/supabase-schema.test.ts | sed -n '1188,1230p'\",\"workdir\":\"/workspace/Database\",\"max_output_tokens\":20000}","fc_03a2e9824edee382016a60aa1a4dd4819791d4e2bfeefd65b3",{"_649":623},"exec_command","namespace","function_call",{"_637":714,"_616":617,"_639":623},{"_640":-5,"_661":715,"_45":716,"_644":717,"_665":718,"_96":667},"gAAAAABqYKoaQhi_5eP25u8VaZBQgRaqgZcSMsuOlKwiG5C3Frgpe34g8x8pb8D92whipSC5tJs4x0SHthuW8PkA8T12A8UQkqVWVElUzzNE0fyNyVzUMMHMtnHg-Cwdqk5WCDUf3CzJ0DlqYTJ4furfODUw3xufyvzUeKg38B6RSr27AYCux0p0rErr_j2uT6MH1fziwxFgVhi7pXvX3w2B2jmiZzMYojNo3ppRnJmCvYAXfyCEaNF8ajco-3UqF8OgKumaiWLqQudqAdteyV007PpzTsnJQT-xdGHuqJIkVXjWpzASt199opBZ09JnBeqWtcq_dhHBjgQtuB8keTnOlDgJIQfA-4tFRy8rwXD15905fph3Me9FdEo2qXKjQt51REfvLbkRJ9Jh_jIDQg9LPk8n2piX1-N4CZnRKcmOg-WTAy0-iDQnWqkjy16g-r_W53VwX7n2XI778GKBWDUZMrYZ4HMVKAoylaU95rmwoqdpeRzpm7yw_bXx0YvOV9GrneB_nzaVFzvBGBBGXypH7Ae4fdgC9v_4LaDSrXFakEt26UzLo8tnpbEcB9-9UKaPacSHBeNgktE4JQQLC8BcdwquEqBFSE4jbFEHUfQzObpqt5l6JZdhmkpPbrrQDNOwnZAfH26uwoyEDLka-gZjgb5qEFTQNx_kMG4e-uUBOboIl1dogt2KA2RJGG-Jq5r0EPjVGRDpxycLVakXHzzgbvbYUtqivN3iBifw1W7vmJoQ-egHfw6whrAKcPVJvCAUN4_1NvAli9EaWUQFuDaZ18sbkHHudk9509zDX7d8H7eu23T6PXl0doCqEjafVFp74ZkONP4p7ltYYjRSFwkPTY59NH8xit-mZTGnUY26VvcDEfmVEgw7S9uq8U95uJyNgltNPRBnwL7oJ9CfyNuMoT9dO2iGsTBa_xZ1ZudERI9OglB_HKGk_hCGKiu6j729J4MiWzTu2uyWTZ9rfLgW9fbzvunAFpAq4Iq4BwlEBbNZKOmLoVRB8HxU8Z_ES6O3v7QNZ7lS","rs_03a2e9824edee382016a60aa1962688197bd5170dc8c190fd6",{"_649":623},[719],{"_49":720,"_96":670},"**Planning final output with line numbers and status**",{"_655":722,"_637":723,"_616":617,"_639":623},1784719898219,{"_640":724,"_45":716,"_665":725,"_96":667},[],[720],{"_637":727,"_616":617,"_639":623},{"_678":728,"_45":-5,"_644":729,"_681":730,"_96":683},"call_1Dyc3PQGyn1Lw1js8YiLHnhR",{"_649":623},"Wall time: 0.0097 seconds\nOutput:\n{\"title\":\"Block publication while ingestion jobs are active\",\"body\":\"## Summary\\n\\n- Fixes the actionable P1 Codex review finding by making both publication paths fail closed when the document has pending or processing ingestion/reindex jobs.\\n- Locks active `ingestion_jobs` rows after the document/artifact locks and before recomputing the reviewed-state digest, so worker commits cannot race the publication approval window.\\n- Adds focused schema assertions and extends the publication approval SQL fixture to cover active-ingestion rejection.\\n\\n## Review thread disposition\\n\\n\\nResolved the P1 finding by locking/checking active ingestion jobs before publication and rejecting pending/processing jobs with a fail-closed error.\\n\\n## Verification\\n\\n- `npm exec vitest run tests/supabase-schema.test.ts` — passed (68 tests).\\n- `npm run check:migration-role` — passed.\\n- `npm run check:function-grants` — passed.\\n\\n## Notes\\n\\n- No fresh review was performed.\\n- No provider-backed checks or external APIs were run.\\n- RAG impact: no retrieval behaviour change — publication governance race protection only.\"}",{"_655":732,"_637":733,"_616":617,"_639":623},1784719896118,{"_734":-5,"_706":735,"_621":736,"_107":-5,"_45":728,"_737":-5,"_738":-5,"_739":-5,"_740":741,"_742":743,"_630":117,"_744":743,"_96":745},"appContext",{"_502":750,"_504":751},7,"mcpAppResourceUri","pluginId","readOnlyHint","result",{"_746":-5,"_640":747,"_748":749},"server","make_pr","tool","mcpToolCall","_meta",[752],"structuredContent",{"_502":750,"_504":751},"Block publication while ingestion jobs are active","## Summary\n\n- Fixes the actionable P1 Codex review finding by making both publication paths fail closed when the document has pending or processing ingestion/reindex jobs.\n- Locks active `ingestion_jobs` rows after the document/artifact locks and before recomputing the reviewed-state digest, so worker commits cannot race the publication approval window.\n- Adds focused schema assertions and extends the publication approval SQL fixture to cover active-ingestion rejection.\n\n## Review thread disposition\n\n\nResolved the P1 finding by locking/checking active ingestion jobs before publication and rejecting pending/processing jobs with a fail-closed error.\n\n## Verification\n\n- `npm exec vitest run tests/supabase-schema.test.ts` — passed (68 tests).\n- `npm run check:migration-role` — passed.\n- `npm run check:function-grants` — passed.\n\n## Notes\n\n- No fresh review was performed.\n- No provider-backed checks or external APIs were run.\n- RAG impact: no retrieval behaviour change — publication governance race protection only.",{"_96":49,"_49":753},"{\n \"title\": \"Block publication while ingestion jobs are active\",\n \"body\": \"## Summary\\n\\n- Fixes the actionable P1 Codex review finding by making both publication paths fail closed when the document has pending or processing ingestion/reindex jobs.\\n- Locks active `ingestion_jobs` rows after the document/artifact locks and before recomputing the reviewed-state digest, so worker commits cannot race the publication approval window.\\n- Adds focused schema assertions and extends the publication approval SQL fixture to cover active-ingestion rejection.\\n\\n## Review thread disposition\\n\\n\\nResolved the P1 finding by locking/checking active ingestion jobs before publication and rejecting pending/processing jobs with a fail-closed error.\\n\\n## Verification\\n\\n- `npm exec vitest run tests/supabase-schema.test.ts` — passed (68 tests).\\n- `npm run check:migration-role` — passed.\\n- `npm run check:function-grants` — passed.\\n\\n## Notes\\n\\n- No fresh review was performed.\\n- No provider-backed checks or external APIs were run.\\n- RAG impact: no retrieval behaviour change — publication governance race protection only.\"\n}",{"_637":755,"_616":617,"_639":623},{"_706":756,"_678":728,"_45":757,"_644":758,"_371":743,"_711":759,"_96":712},"{\"title\":\"Block publication while ingestion jobs are active\",\"body\":\"## Summary\\n\\n- Fixes the actionable P1 Codex review finding by making both publication paths fail closed when the document has pending or processing ingestion/reindex jobs.\\n- Locks active `ingestion_jobs` rows after the document/artifact locks and before recomputing the reviewed-state digest, so worker commits cannot race the publication approval window.\\n- Adds focused schema assertions and extends the publication approval SQL fixture to cover active-ingestion rejection.\\n\\n## Review thread disposition\\n\\n\\nResolved the P1 finding by locking/checking active ingestion jobs before publication and rejecting pending/processing jobs with a fail-closed error.\\n\\n## Verification\\n\\n- `npm exec vitest run tests/supabase-schema.test.ts` — passed (68 tests).\\n- `npm run check:migration-role` — passed.\\n- `npm run check:function-grants` — passed.\\n\\n## Notes\\n\\n- No fresh review was performed.\\n- No provider-backed checks or external APIs were run.\\n- RAG impact: no retrieval behaviour change — publication governance race protection only.\"}","fc_03a2e9824edee382016a60aa13f3b48197ae82c7d2680f38ad",{"_649":623},"mcp__make_pr",{"_637":761,"_616":617,"_639":623},{"_640":-5,"_661":762,"_45":763,"_644":764,"_665":765,"_96":667},"gAAAAABqYKoTxUtlFLjDGk6wTIEhUCWhwH423oZM-QK6n9OAsXj8lm4ZhUTx5u8b0XSa6k5aWBjaVEGr_tujFmmWv2rQ0tmZ_SHFkT2b0jvugOi8gDppTT4ycm_rzLe_EN1e-Sx8rESQpG-jk0js1eO5X-g3_C53hC2M_mWVHm1B0DEouxtRMMUauYA-3GOoElbephWrgp8Ui_J2kCCN0biDeOYegPWNMj6MzCt3xQ09w3bOTaJCkHUU9vq-9niykD6l-vkCU7w8kctCPfFOplC86XPH1ARVMjhd96Ba0DIZyafzqN_5JPHDQvuUKfoX-RCiar9Fi1P_qhNkA-UtYOpQxZcjpvFN1eCwqEbozz7vJtkeUAJ04SBAPpAbMK33Y6mBUU1FjqDzheaBeeWYi0zRLFJKl8F0Xx9OF5bwB9NltvaXis1pPFSHEM3GO9apwcH3FG4FvQQUgXR3KMUTFoPUTFaOvfg4rA1MiQdaZIr84VTwXKoHmWdTzw4d0ex6oQL6bWBJGk33o9QIxgJC4xGKVXvX7q432V_0qnjtg2pneayTJggrn_VGnJoegcSqq-Ysl_ypXi9l4ZeruDu_oHeJyQGxWWCQ2j5GiANqiPLqI5RlYSYQIROX5_eujlgt1pRuvx0FabUmaEdCO7Aay2zuGqxbTOm4MYb3E0mHKfR9nlc5D_hp46Mc-_xo34Y2_8Bh2tfkAEsInzlK2aRT-VF5FQaz26lf7S6wBmtdL-jEhnQuOCu6oqlSID3Op4UTyq8LsPmWqvCgqSIO7WnfMVBQsfptNdQBRYbmAvFRbDgHL5NDPuUBqd7a4amtM5HlkmwxSe0Q7jNcckiA7rBi7TY6grmovJ5QVV25YpHg9aVDRZzcGHZ0Sdq4GShLNLN7OZCiyvpCMr_XJSlSzpfKEVIU576eDXHWaVhOuldbiCa3sk6nwqVFaNIhXt45ny85hgFsVMIuEHS3owEaQZV-I7nh_l98HlOY7RAFJ69P5wFQ1W6dp3vQls_TkY79hUH7UET6P73Kcx6lr3RCiX3SIK3KxDGyHWfT0G-MnsWO0cdMu3yHKvORrwDQJrXwsrg_48Rb6eYRH0Fa","rs_03a2e9824edee382016a60aa12e3308197872380edc250ac08",{"_649":623},[766],{"_49":767,"_96":670},"**Preparing PR with thread marker note**",{"_655":769,"_637":770,"_616":617,"_639":623},1784719891848,{"_640":771,"_45":763,"_665":772,"_96":667},[],[767],{"_655":774,"_637":775,"_616":617,"_639":623},1784719889529,{"_687":776,"_689":777,"_691":778,"_693":694,"_621":779,"_695":35,"_45":780,"_696":781,"_698":699,"_630":117,"_96":700},"[work 627b614] fix(db): block publication during active ingestion\n 4 files changed, 86 insertions(+), 4 deletions(-)\n","/bin/bash -lc 'git diff --check && git add scripts/sql/verify-publication-approval.sql supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql supabase/schema.sql tests/supabase-schema.test.ts && git commit -m \"fix(db): block publication during active ingestion\"'",[782],112,"call_1T86lotTh2OiQDoYeb6DEzXd","4881",{"_689":783,"_96":703},"git diff --check && git add scripts/sql/verify-publication-approval.sql supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql supabase/schema.sql tests/supabase-schema.test.ts && git commit -m \"fix(db): block publication during active ingestion\"",{"_637":785,"_616":617,"_639":623},{"_678":780,"_45":-5,"_644":786,"_681":787,"_96":683},{"_649":623},"Chunk ID: 31e76e\nWall time: 0.0116 seconds\nProcess exited with code 0\nOriginal token count: 30\nOutput:\n[work 627b614] fix(db): block publication during active ingestion\n 4 files changed, 86 insertions(+), 4 deletions(-)\n",{"_637":789,"_616":617,"_639":623},{"_706":790,"_678":780,"_45":791,"_644":792,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"git diff --check && git add scripts/sql/verify-publication-approval.sql supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql supabase/schema.sql tests/supabase-schema.test.ts && git commit -m \\\"fix(db): block publication during active ingestion\\\"\",\"workdir\":\"/workspace/Database\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}","fc_03a2e9824edee382016a60aa0fdf1c8197a8493c405e9d0790",{"_649":623},{"_637":794,"_616":617,"_639":623},{"_640":-5,"_661":795,"_45":796,"_644":797,"_665":798,"_96":667},"gAAAAABqYKoPghugsUkwkWi9Nc4u0xIKjd9gUMbgfx3Tx5y-4Bky8467vo6_FlvUkA_9lyeqascVqLDwDi7EOuyP46H1Z2Ov_MwGoOqlJvEVwhQfEAmpEqG4vLCXxjVd3vN1a-kM4LUn4CPlyALEb0VBH-3YcUh8dlMSD163xOfd2jTe7PcTOUMt_ehxJxpkE3LcIy4g7nlbcGqNRHFS30F3RtKQu_ca057H7IzkGKPsupJXMjx2FLW56zz0Vi1RJkmuuMZ17liLpeiL6QxH_6ACRQok7beCmtBu5JNACgIJTqHIYNs5Shhsf0pxOhSBIuFuBDwYQzrJVi9HdNiq_Gbw9rByRXPLNrRoyBwy_N6Y9pjcg_pKiCXaTJ1CXqMN9N5-DYdSbj1VY6PcWX86VwePb_EInCDh-5lSw4aDB_8wSuFFMHUFkYxGpfGk06Ef7ETRQ9JNLs9g4-91GNCqUKzxn7-Z0Bn3bBTvHWSOnT7X5SvA2Lso_Y15k7pMG_o4GMV7FAhyXYDh-5QvGe74aATFRLQtAtFw38NwwgeFJm4fGsN1YB1Q2N1y5Z69eAjHAjDkz99QnZHOA41kXT_Ni2NCkrT0C03kkoISYhihhOCAdrtD07XZJzLcXRXyj-zATg22zCSnAk5EuvIeJTyll_XS4VwaiRNEvH9_DaXjp0voLoLna0j9Yao77qMrBzAaMoQnNns_NH7V5BHQjHgqim_aXjKkCtXR_jlFepxbsE1vk72YyE0eOg2ylREhSecQQwzUF40Npa_Pb98sz5Xm8VLWPnA6Vj_I65fFN_LsP5HtbVs-1Ebn1fVEYkkJle4eNGDbIkMFsZpGmYv93AnsvKnl0fHc-psXoYWdCnDEtrrcG-EE6wGGWGCG17I3RmsNni0NbzGNpaVukY5LNc5UPFXG-IMumg1ulH4Vn_UbA4XMiJeLAm1X2qW1E7xxLusoO4lHTCarl-PLi4ngHrSB2CEno-0aHXuvIQ==","rs_03a2e9824edee382016a60aa0f2e04819793e24cc44571cac7",{"_649":623},[799],{"_49":800,"_96":670},"**Preparing to commit changes**",{"_655":802,"_637":803,"_616":617,"_639":623},1784719887766,{"_640":804,"_45":796,"_665":805,"_96":667},[],[800],{"_637":807,"_616":617,"_639":623},{"_678":808,"_809":810,"_45":-5,"_644":811,"_630":117,"_812":813,"_96":814},"call_JLSteqF47NS8RPyuDZ3SNVgE","execution","client",{"_649":623},"tools",[815],"tool_search_output",{"_96":711,"_371":759,"_388":816,"_812":817},"Simple MCP server providing a make_pr tool for preparing pull request metadata.",[818],{"_96":819,"_371":743,"_388":820,"_821":18,"_822":62,"_823":824},"function","Record a pull request title and body.\ntitle: Title of the pull request\nbody: Body message of the pull request","strict","defer_loading","parameters",{"_96":825,"_826":827,"_828":829},"object","properties",{"_504":830,"_502":831},"required",[502,504],{"_96":832},{"_96":832},"string",{"_637":834,"_616":617,"_639":623},{"_706":835,"_678":808,"_809":810,"_45":836,"_644":837,"_630":117,"_96":838},{"_839":840,"_841":842},"tsc_03a2e9824edee382016a60aa0d76d0819795350604814712a3",{"_649":623},"tool_search_call","query","make_pr create pull request","limit",5,{"_637":844,"_616":617,"_639":623},{"_640":-5,"_661":845,"_45":846,"_644":847,"_665":848,"_96":667},"gAAAAABqYKoNwNVU4HNy1-zKItxLoqTmCEHp0YRkwyxwIk8hLX-jxtW9xm_wtLhbum0jGzXckJVB-_C0TjjPhm0WUur_dqkUWxLcXV_dCmz5vgvvGb4fcrFn87oMZT71RtRpJVcACGe5u2Haskqs4EgtHdUCuT6slgE3eE2USWn147fJhEPor58Nc-swx9shGxJq6KWHfRvS6iJAsdyUbKp3j3IhPngdzR3AAyDSW3msZ6gLBAD0lVB5rJz6NSxM5c454kS_uU6MqvSGxDpziWxJ-nZmAZEGotOIrRD0f1k-_jNnZVoO-accNxMAwcPTcBN8zKaiQPIoneRdh7uxkr1tOg0TadPpKiWGI9P7y2Wb0R14DDbh_MuuelGaH0oe9oXR7F3zSZn5DUbtgM5RepYJTnPInCL_caCM_i8YaGMGx9pcPIuOiWkXeYoWKbhbS2j3_vxfQTMBfTSmi5TEDzOA1BOA6MoyFgCRSfWaZ-bSJiiqehCjq0_KYItUtPGUEwg7cvpN75da6C-SJxXYo0GDvFil4uxKhiZMinvjDe5vz8RLewYbPhphfJcCpvJLhIcK2tF6amCEuTYHQ93HN5HjEoHEuGPv8JXhSTBtF3nhZrRUMKrPBJ_Y-3q07D59eFBDHTrycq_nfHRX6KahYtP13OkkPF0dVmD86jA1CW_OfxdWA9l0N5wEfsblMlFOwPJUqcOvaJ2BPoBBBHh4caHDkNOb-a8wuDswVuFRjATcikFd0kmfBckrDbNK3T0jw1aaR5JaB2Zz48GumIOFBMfC5cdK7Ab_kBveWWOpPX5rrMC1L0CUvvG5-_yrL8idkE10DX6lX7lIqUTcELxf6JLZkldOEDx22ClxDQxMD6HcmdDwTmdk9-8Jw0LTAaNbbsh2lv32FgYLEyh5mUarpDZrr-4unHyG3_ee9lq1GqAejPYOAw9FOsuRmIVD95ka2SDt0yuddwR8CzHyt9y_U240yB_uVf53kN0m38puNM0n0aS539M_T_WE6SL4O42doBVSZijIGOgUHXZrexOFlK1Agexk-WEPM8br4KzbyoHrWoBfvvFPVq9QEepa6pFb2oixMfvpT0V-f_ubwE41i83ScJWQU3tSbyLTOrRObwxy-W_HFKTnvrtV36USz5qIoCaNiThpdqB7kW6DT-c5t7P5844oB-EVuxA6MGEJVR7meU5aUx4kfaPU1bjE5Sgcp5vG2OuYxQ8Mhqb2Ipt1tPWIZm2miRYZr6Jl8CZB7OmJMLrublw_AXsRpyzYLcCgc6UiL1GOCu9XlG_r94fvOY0x6EczmPSpBKJFPDXi-1pEeSa8Qq--kl0u8O5wUV5_ISZ482QB5iHcXGAn1KlOMcQRivTF7CKDF1j5o_KDeL-Key-ayOeDOpkplXrSYYE-zhrOcu_eXzRcVOjoT6GQs3k3p6gXeIGq4n68Ut8Te9K5GCBRueN1ELlUSnsEK3CY8vsjKxiLwf73PGFzbQ0mfQ_VnRGJHvUoag==","rs_03a2e9824edee382016a60aa0b40b08197bb62ef57d92a465f",{"_649":623},[849],{"_49":850,"_96":670},"**Planning commit and pull request workflow**",{"_655":852,"_637":853,"_616":617,"_639":623},1784719885370,{"_640":854,"_45":846,"_665":855,"_96":667},[],[850],{"_655":857,"_637":858,"_616":617,"_639":623},1784719881744,{"_687":859,"_689":860,"_691":861,"_693":694,"_621":862,"_695":35,"_45":863,"_696":864,"_698":699,"_630":117,"_96":700},"npm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\nnpm warn Unknown project config \"allow-scripts\". This will stop working in the next major version of npm.\n\n> prompt-for-codex-medical-knowledge-base@0.1.0 check:migration-role\n> node scripts/check-hosted-migration-role.mjs\n\nHosted migration-role guard passed: active hosted SQL/tooling uses postgres and immutable applied history is unchanged.\nnpm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\nnpm warn Unknown project config \"allow-scripts\". This will stop working in the next major version of npm.\n\n> prompt-for-codex-medical-knowledge-base@0.1.0 check:function-grants\n> node scripts/check-function-grants.mjs\n\ncheck:function-grants: OK — all 29 SECURITY DEFINER public function(s) are revoked from PUBLIC (blanket revoke at schema.sql:5250 or an explicit per-function revoke) and none are re-opened by a grant to PUBLIC/anon.\n M scripts/sql/verify-publication-approval.sql\n M supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql\n M supabase/schema.sql\n M tests/supabase-schema.test.ts\n","/bin/bash -lc 'npm run check:migration-role && npm run check:function-grants && git status --short'",[865],1283,"call_e8PXoBmihckCyOOBdmm43HuE","41277",{"_689":866,"_96":703},"npm run check:migration-role && npm run check:function-grants && git status --short",{"_637":868,"_616":617,"_639":623},{"_678":863,"_45":-5,"_644":869,"_681":870,"_96":683},{"_649":623},"Chunk ID: 85e356\nWall time: 1.1816 seconds\nProcess exited with code 0\nOriginal token count: 292\nOutput:\nnpm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\nnpm warn Unknown project config \"allow-scripts\". This will stop working in the next major version of npm.\n\n> prompt-for-codex-medical-knowledge-base@0.1.0 check:migration-role\n> node scripts/check-hosted-migration-role.mjs\n\nHosted migration-role guard passed: active hosted SQL/tooling uses postgres and immutable applied history is unchanged.\nnpm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\nnpm warn Unknown project config \"allow-scripts\". This will stop working in the next major version of npm.\n\n> prompt-for-codex-medical-knowledge-base@0.1.0 check:function-grants\n> node scripts/check-function-grants.mjs\n\ncheck:function-grants: OK — all 29 SECURITY DEFINER public function(s) are revoked from PUBLIC (blanket revoke at schema.sql:5250 or an explicit per-function revoke) and none are re-opened by a grant to PUBLIC/anon.\n M scripts/sql/verify-publication-approval.sql\n M supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql\n M supabase/schema.sql\n M tests/supabase-schema.test.ts\n",{"_637":872,"_616":617,"_639":623},{"_706":873,"_678":863,"_45":874,"_644":875,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"npm run check:migration-role && npm run check:function-grants && git status --short\",\"workdir\":\"/workspace/Database\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}","fc_03a2e9824edee382016a60aa07ef6881979ffb58baf41a43f8",{"_649":623},{"_637":877,"_616":617,"_639":623},{"_640":-5,"_661":878,"_45":879,"_644":880,"_665":881,"_96":667},"gAAAAABqYKoH_pk-PvqHNIjGTO43drtkpA5kUmFcMNMX0wc8RA2rSImOh0WSAvBWoh7QEtuWski8om6GXBZWwSaZiv1OMyZEGSrGljYZB0kVfUTNtV8Q59KCJlo062yMDWwBJ2w6BgyVz_WvgT8_nsCafETmcGwnPUUtWaJrd6mZHVrqUk6SkHzhEOtIlnnXTg4pIBHfwT_18UIjNeqmaupd3Ey1t7K2K0jeC1eHqFqRxvjvN0f2JGpza7PLJkOmHWVry0EIU5OJ9l7cAMsk8A5QDjRs9trHwe7fBv9Vi2KklO-BC2OolwyTFppZp9CKkHV-A69LRvtflXIXYs0_lqk_zMkMOHEAW1ptF_2tgnbnHNr_3p72KJ8JtaK5LdYF3q4XrgilUr3HcEGxSuKwhLMgwXANVeIOCmeCtag_jbNNP6eELdqc2It4G8vtfBPg940gpV3RmFai0_9u8JSoZLy0zOCM13FEgFuKt8tvb6S5P4HfO9ak6aPFC75WiSNFEYDD7sYwfO10wAIOe1y_lggOROHpGSYlXoN3fn0jDluv8Jh1wUW46anTVWhcOsKPBJrtScBR9wnoqWn0-qcuQL6-nSnrwW84F0WqGuiFX_fumTGP9R85Ave-KmuCxQ1gN9JoyqLKQrtKbGrd5DX2bwG57rurLoziJzzt9804FicJ8HJ_U3U_hFmBJsnNw1Xn1zk163BS3RywIYPHA6DiCAUqLPmz4HmqpasFthgbpR5twqWYLL_jod4iVWdpS5CE2QT5lSl9DbAg2UVr9F-_KjVWwRCU1H7sa3BsIJfqYVVSgO2yemqNJwZ4tg-r-uJlaUP2DBwffKv4jY81Jdl75D5cQug2GUGWmGsD_WZDUdgUWOH4T1ZT45gYtqCaTE66II2kbd7vHintst3saJwu00L7i96TNblfnWa4aayKhsNbIrDziMo7d9KsJrgy8df1BjSZRI_XIqwJeowswhlGtf2dQPJmXhzIWDAq1X2-smiSsKp0Py3mMYLLs24V3GxeEOp-_09ebkjv4zmhIyNiUeHpjRyufmX_gvOwHw7PtxMIMTHP4hCOfgvQswA542EcY8O-cHC6TU70NSJMLGHYEXHLoJMiTvbsNq4mG1J0KReXrRso9TxFX-selrW7ElBGz_fv_zWGsnce","rs_03a2e9824edee382016a60aa06958081978a17c488f1722f23",{"_649":623},[882],{"_49":883,"_96":670},"**Verifying npm execution issue**",{"_655":885,"_637":886,"_616":617,"_639":623},1784719879834,{"_640":887,"_45":879,"_665":888,"_96":667},[],[883],{"_655":890,"_637":891,"_616":617,"_639":623},1784719876917,{"_687":892,"_689":893,"_691":894,"_693":694,"_621":895,"_695":35,"_45":896,"_696":897,"_698":699,"_630":117,"_96":700},"npm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\nnpm warn Unknown project config \"allow-scripts\". This will stop working in the next major version of npm.\nnpm warn exec The following package was not found and will be installed: vitest@4.1.10\n\n RUN v4.1.10 /workspace/Database\n\n\n Test Files 1 passed (1)\n Tests 68 passed (68)\n Start at 11:31:15\n Duration 862ms (transform 264ms, setup 0ms, import 364ms, tests 154ms, environment 0ms)\n\n","/bin/bash -lc 'npm exec vitest run tests/supabase-schema.test.ts'",[898],14790,"call_jUj9sMwpAJdaiPjksr8XS3qg","88475",{"_689":899,"_96":703},"npm exec vitest run tests/supabase-schema.test.ts",{"_637":901,"_616":617,"_639":623},{"_678":896,"_45":-5,"_644":902,"_681":903,"_96":683},{"_649":623},"Chunk ID: 612a1e\nWall time: 14.6898 seconds\nProcess exited with code 0\nOriginal token count: 125\nOutput:\nnpm warn Unknown env config \"http-proxy\". This will stop working in the next major version of npm.\nnpm warn Unknown project config \"allow-scripts\". This will stop working in the next major version of npm.\nnpm warn exec The following package was not found and will be installed: vitest@4.1.10\n\n RUN v4.1.10 /workspace/Database\n\n\n Test Files 1 passed (1)\n Tests 68 passed (68)\n Start at 11:31:15\n Duration 862ms (transform 264ms, setup 0ms, import 364ms, tests 154ms, environment 0ms)\n\n",{"_637":905,"_616":617,"_639":623},{"_706":906,"_678":896,"_45":907,"_644":908,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"npm exec vitest run tests/supabase-schema.test.ts\",\"workdir\":\"/workspace/Database\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}","fc_03a2e9824edee382016a60a9f5e6988197972ea7a1c96972b2",{"_649":623},{"_637":910,"_616":617,"_639":623},{"_640":-5,"_661":911,"_45":912,"_644":913,"_665":914,"_96":667},"gAAAAABqYKn1l2tKWorC30jQcXNBjZdMRInq2wADySKjALSL6CO2cJIXr_JY6cE8lF_GCcHRI7oIrpx4Hs6xKw1Gr9ULPvEhm9vre2yjAt78rIrVFLm6CdR2buHHhVG4GwfsxAvoko5A0QlBpzyiPHEJn9u2vWGqjSqS2W7iQSjvVbmNtoLCFw8Mfxx7ETKOKmqHGyeeitBUzJIIO4PwFkyaMVfdYANU7zJ5QekCYeflqKyHlDbTVWZxTyG9JsSSoK07KRR8I18EaHMrRUdsKPlAypDoFbEO2sFUQe1KG2Di4A6EvMTD1dCSyIbLWdx4lZAwMuhGcp0ugPuDITIim8RQwxByOyd_HJnUq3NEylWyyQOuRomLEgzrneXJXiUJA_OvVLqC02aN5ApLJwLP3kw5MDsIEqVy-GVOnNCwAKcxiynFfWmugcGIzkeuQ9UtSbaHsfQ2bXoMSPUnvWLCfu1GzF28SgzlGGrVbVLBuczTvX1ZHsMSN9bXAtjL0gByzmEStttwUwc_F6X1rr8J8kd8hBVBMnxj96P4ztKssrW9lRxf0psNtJ0i06LpzfLiedbBOni8LbGiLdlgs5qxChXQ5Sn2vXeOMwO1TIBva_Y3HB7dTQVmQqIiz3MRWEOzfzpY3ob5kfN_2gkHzjHu3L45QLccHReTyke80BJv2Mqr2BYYDlbMKSszol2yoUQG6UeVgMZb-paxtJJd4afVTv1np7cPd5Ilh8342wLmg8HS1J6Bb9EBGi8Ks2lG5gJiy8Xv6bJS6Fhokv0ccVDleyZ1O6Kub5W2VqwhJUvCfu8DW2eig5EEt16LE0g2j97mP5lqKVTf59Nv2zWLbzJfcRopr-arXpjxP7wiPrg3NaKaOCF6guxO7MxrdmRcpG-Gp3rUujWkfKRp6645-y66DjIBYLjiaa5pWSCpTTqtLgN90NylYtSzynKNoPjPZJAQ0WjR0sLs8QkLlMWsYTqK9BU8PPCmVlgZxycuJGmFkDq-wsl1_AGkQtN6c107VDHnWwBuGQOQxHYr4wd8ECb14_teKdr6EwtoeVWbheB1dxT8-dcLZ1JqlTjGTaCTbGM_DiWL1OW3m1U-KFvLQ-3qm0SaumG96LEjbl75JJMYIxN6F1P_1yxI2H-uYW6xLDyhiwtzpYkve1LgvoGKvHBhVoGN_Cz37Lmo9VjEHV-b3eGLWp_I_7jYdceLOa8MiSoWMATXSiNu0Xk3N-1_o_HNTiSbmDO3e5-9WbCBgv9Cosf4hYVTkHIOQTW7k65IwXA0JtSW3rNtpYUiptEVnr3X15OWsc33asNaK-q7tirbpYshdpC_rEdUJVxAWTwLOxheB6yvWDbXxnkv","rs_03a2e9824edee382016a60a9f3d878819792ebf100119d9391",{"_649":623},[915],{"_49":916,"_96":670},"**Analyzing lock conflicts in FK insertions**",{"_655":918,"_637":919,"_616":617,"_639":623},1784719861820,{"_640":920,"_45":912,"_665":921,"_96":667},[],[916],{"_637":923,"_616":617,"_639":623},{"_678":924,"_45":-5,"_644":925,"_681":926,"_96":683},"call_HJnwUwOUgwjeDLFaUgMnJSxN",{"_649":623},"Chunk ID: 21ee7a\nWall time: 0.0011 seconds\nProcess exited with code 0\nOriginal token count: 2678\nOutput:\ndiff --git a/scripts/sql/verify-publication-approval.sql b/scripts/sql/verify-publication-approval.sql\nindex 90c49e1..d0898ce 100644\n--- a/scripts/sql/verify-publication-approval.sql\n+++ b/scripts/sql/verify-publication-approval.sql\n@@ -12,7 +12,8 @@ values\n ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Private fixture', 'private.pdf', 'application/pdf', 'fixtures/private.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Quarantine fixture', 'quarantine.pdf', 'application/pdf', 'fixtures/quarantine.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000004', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Unapproved fixture', 'unapproved.pdf', 'application/pdf', 'fixtures/unapproved.pdf', 'indexed'),\n- ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed');\n+ ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed'),\n+ ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Active ingestion fixture', 'active-ingestion.pdf', 'application/pdf', 'fixtures/active-ingestion.pdf', 'indexed');\n \n insert into public.document_labels (document_id, owner_id, label, label_type, source)\n values ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'publication fixture', 'custom', 'manual');\n@@ -25,7 +26,11 @@ values\n ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Approved publication fixture.', array['fixture:approved'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'keep_private', 'Private publication fixture.', array['fixture:private'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'quarantine', 'Quarantine publication fixture.', array['fixture:quarantine'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n- ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\n+ ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n+ ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Active ingestion protection fixture.', array['fixture:active-ingestion'], repeat('d', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\n+\n+insert into public.ingestion_jobs (document_id, status, stage, progress, locked_by, locked_at)\n+values ('10000000-0000-4000-8000-000000000007', 'processing', 'indexing', 50, 'publication-fixture-worker', now());\n \n select public.publish_approved_documents(\n jsonb_build_array(jsonb_build_object(\n@@ -77,6 +82,26 @@ begin\n if sqlerrm not like 'publication document % changed after review' then raise; end if;\n end;\n \n+\n+ begin\n+ perform public.publish_approved_documents(\n+ jsonb_build_array(jsonb_build_object(\n+ 'document_id', '10000000-0000-4000-8000-000000000007',\n+ 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n+ 'expected_state_digest', (\n+ select reviewed_state_digest from public.document_publication_approvals\n+ where document_id = '10000000-0000-4000-8000-000000000007'\n+ )\n+ )),\n+ repeat('d', 64),\n+ 1\n+ );\n+ raise exception 'active ingestion publication fixture unexpectedly published';\n+ exception when others then\n+ if sqlerrm = 'active ingestion publication fixture unexpectedly published' then raise; end if;\n+ if sqlerrm not like 'publication document % has active ingestion or reindex jobs' then raise; end if;\n+ end;\n+\n begin\n update public.documents\n set owner_id = null, metadata = metadata || jsonb_build_object('public_corpus', true)\ndiff --git a/supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql b/supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql\nindex 66986c7..0bb2b6c 100644\n--- a/supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql\n+++ b/supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql\n@@ -195,6 +195,19 @@ begin\n perform 1 from public.document_embedding_fields where document_id = old.id for update;\n perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n+ perform 1 from public.ingestion_jobs\n+ where document_id = old.id\n+ and status in ('pending', 'processing')\n+ for update;\n+\n+ if exists (\n+ select 1\n+ from public.ingestion_jobs\n+ where document_id = old.id\n+ and status in ('pending', 'processing')\n+ ) then\n+ raise exception 'public document transition requires ingestion and reindex jobs to finish';\n+ end if;\n \n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n if v_current_state_digest is distinct from v_reviewed_state_digest then\n@@ -294,6 +307,19 @@ begin\n perform 1 from public.document_embedding_fields where document_id = v_document_id for update;\n perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n+ perform 1 from public.ingestion_jobs\n+ where document_id = v_document_id\n+ and status in ('pending', 'processing')\n+ for update;\n+\n+ if exists (\n+ select 1\n+ from public.ingestion_jobs\n+ where document_id = v_document_id\n+ and status in ('pending', 'processing')\n+ ) then\n+ raise exception 'publication document % has active ingestion or reindex jobs', v_document_id;\n+ end if;\n \n select approval.id into v_approval_id\n from public.document_publication_approvals approval\ndiff --git a/supabase/schema.sql b/supabase/schema.sql\nindex 7e6c338..3983c94 100644\n--- a/supabase/schema.sql\n+++ b/supabase/schema.sql\n@@ -7969,6 +7969,19 @@ begin\n perform 1 from public.document_embedding_fields where document_id = old.id for update;\n perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n+ perform 1 from public.ingestion_jobs\n+ where document_id = old.id\n+ and status in ('pending', 'processing')\n+ for update;\n+\n+ if exists (\n+ select 1\n+ from public.ingestion_jobs\n+ where document_id = old.id\n+ and status in ('pending', 'processing')\n+ ) then\n+ raise exception 'public document transition requires ingestion and reindex jobs to finish';\n+ end if;\n \n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n if v_current_state_digest is distinct from v_reviewed_state_digest then\n@@ -8072,6 +8085,19 @@ begin\n perform 1 from public.document_embedding_fields where document_id = v_document_id for update;\n perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n+ perform 1 from public.ingestion_jobs\n+ where document_id = v_document_id\n+ and status in ('pending', 'processing')\n+ for update;\n+\n+ if exists (\n+ select 1\n+ from public.ingestion_jobs\n+ where document_id = v_document_id\n+ and status in ('pending', 'processing')\n+ ) then\n+ raise exception 'publication document % has active ingestion or reindex jobs', v_document_id;\n+ end if;\n \n select approval.id into v_approval_id\n from public.document_publication_approvals approval\ndiff --git a/tests/supabase-schema.test.ts b/tests/supabase-schema.test.ts\nindex eed1e86..93e542e 100644\n--- a/tests/supabase-schema.test.ts\n+++ b/tests/supabase-schema.test.ts\n@@ -1208,14 +1208,19 @@ describe(\"Supabase Preview replay guards\", () => {\n ]) {\n expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\n }\n- expect(functionBody.indexOf(\"for update;\")).toBeLessThan(\n+ expect(functionBody).toContain(\"perform 1 from public.ingestion_jobs\");\n+ expect(functionBody).toContain(\"and status in ('pending', 'processing')\");\n+ expect(functionBody).toContain(\"publication document % has active ingestion or reindex jobs\");\n+ expect(functionBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\n functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n );\n \n const guardStart = sql.indexOf(\"create or replace function public.guard_document_publication_transition(\");\n const guardBody = sql.slice(guardStart, sql.indexOf(\"$$;\", guardStart));\n expect(guardBody).toContain(\"perform 1 from public.document_chunks where document_id = old.id for update;\");\n- expect(guardBody.indexOf(\"for update;\")).toBeLessThan(\n+ expect(guardBody).toContain(\"perform 1 from public.ingestion_jobs\");\n+ expect(guardBody).toContain(\"public document transition requires ingestion and reindex jobs to finish\");\n+ expect(guardBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\n guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n );\n }\n",{"_655":928,"_637":929,"_616":617,"_639":623},1784719857903,{"_687":930,"_689":931,"_691":932,"_693":694,"_621":518,"_695":35,"_45":924,"_696":933,"_698":699,"_630":117,"_96":700},"diff --git a/scripts/sql/verify-publication-approval.sql b/scripts/sql/verify-publication-approval.sql\nindex 90c49e1..d0898ce 100644\n--- a/scripts/sql/verify-publication-approval.sql\n+++ b/scripts/sql/verify-publication-approval.sql\n@@ -12,7 +12,8 @@ values\n ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Private fixture', 'private.pdf', 'application/pdf', 'fixtures/private.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Quarantine fixture', 'quarantine.pdf', 'application/pdf', 'fixtures/quarantine.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000004', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Unapproved fixture', 'unapproved.pdf', 'application/pdf', 'fixtures/unapproved.pdf', 'indexed'),\n- ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed');\n+ ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed'),\n+ ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Active ingestion fixture', 'active-ingestion.pdf', 'application/pdf', 'fixtures/active-ingestion.pdf', 'indexed');\n \n insert into public.document_labels (document_id, owner_id, label, label_type, source)\n values ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'publication fixture', 'custom', 'manual');\n@@ -25,7 +26,11 @@ values\n ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Approved publication fixture.', array['fixture:approved'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'keep_private', 'Private publication fixture.', array['fixture:private'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'quarantine', 'Quarantine publication fixture.', array['fixture:quarantine'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n- ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\n+ ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n+ ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Active ingestion protection fixture.', array['fixture:active-ingestion'], repeat('d', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\n+\n+insert into public.ingestion_jobs (document_id, status, stage, progress, locked_by, locked_at)\n+values ('10000000-0000-4000-8000-000000000007', 'processing', 'indexing', 50, 'publication-fixture-worker', now());\n \n select public.publish_approved_documents(\n jsonb_build_array(jsonb_build_object(\n@@ -77,6 +82,26 @@ begin\n if sqlerrm not like 'publication document % changed after review' then raise; end if;\n end;\n \n+\n+ begin\n+ perform public.publish_approved_documents(\n+ jsonb_build_array(jsonb_build_object(\n+ 'document_id', '10000000-0000-4000-8000-000000000007',\n+ 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n+ 'expected_state_digest', (\n+ select reviewed_state_digest from public.document_publication_approvals\n+ where document_id = '10000000-0000-4000-8000-000000000007'\n+ )\n+ )),\n+ repeat('d', 64),\n+ 1\n+ );\n+ raise exception 'active ingestion publication fixture unexpectedly published';\n+ exception when others then\n+ if sqlerrm = 'active ingestion publication fixture unexpectedly published' then raise; end if;\n+ if sqlerrm not like 'publication document % has active ingestion or reindex jobs' then raise; end if;\n+ end;\n+\n begin\n update public.documents\n set owner_id = null, metadata = metadata || jsonb_build_object('public_corpus', true)\ndiff --git a/supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql b/supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql\nindex 66986c7..0bb2b6c 100644\n--- a/supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql\n+++ b/supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql\n@@ -195,6 +195,19 @@ begin\n perform 1 from public.document_embedding_fields where document_id = old.id for update;\n perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n+ perform 1 from public.ingestion_jobs\n+ where document_id = old.id\n+ and status in ('pending', 'processing')\n+ for update;\n+\n+ if exists (\n+ select 1\n+ from public.ingestion_jobs\n+ where document_id = old.id\n+ and status in ('pending', 'processing')\n+ ) then\n+ raise exception 'public document transition requires ingestion and reindex jobs to finish';\n+ end if;\n \n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n if v_current_state_digest is distinct from v_reviewed_state_digest then\n@@ -294,6 +307,19 @@ begin\n perform 1 from public.document_embedding_fields where document_id = v_document_id for update;\n perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n+ perform 1 from public.ingestion_jobs\n+ where document_id = v_document_id\n+ and status in ('pending', 'processing')\n+ for update;\n+\n+ if exists (\n+ select 1\n+ from public.ingestion_jobs\n+ where document_id = v_document_id\n+ and status in ('pending', 'processing')\n+ ) then\n+ raise exception 'publication document % has active ingestion or reindex jobs', v_document_id;\n+ end if;\n \n select approval.id into v_approval_id\n from public.document_publication_approvals approval\ndiff --git a/supabase/schema.sql b/supabase/schema.sql\nindex 7e6c338..3983c94 100644\n--- a/supabase/schema.sql\n+++ b/supabase/schema.sql\n@@ -7969,6 +7969,19 @@ begin\n perform 1 from public.document_embedding_fields where document_id = old.id for update;\n perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n+ perform 1 from public.ingestion_jobs\n+ where document_id = old.id\n+ and status in ('pending', 'processing')\n+ for update;\n+\n+ if exists (\n+ select 1\n+ from public.ingestion_jobs\n+ where document_id = old.id\n+ and status in ('pending', 'processing')\n+ ) then\n+ raise exception 'public document transition requires ingestion and reindex jobs to finish';\n+ end if;\n \n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n if v_current_state_digest is distinct from v_reviewed_state_digest then\n@@ -8072,6 +8085,19 @@ begin\n perform 1 from public.document_embedding_fields where document_id = v_document_id for update;\n perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n+ perform 1 from public.ingestion_jobs\n+ where document_id = v_document_id\n+ and status in ('pending', 'processing')\n+ for update;\n+\n+ if exists (\n+ select 1\n+ from public.ingestion_jobs\n+ where document_id = v_document_id\n+ and status in ('pending', 'processing')\n+ ) then\n+ raise exception 'publication document % has active ingestion or reindex jobs', v_document_id;\n+ end if;\n \n select approval.id into v_approval_id\n from public.document_publication_approvals approval\ndiff --git a/tests/supabase-schema.test.ts b/tests/supabase-schema.test.ts\nindex eed1e86..93e542e 100644\n--- a/tests/supabase-schema.test.ts\n+++ b/tests/supabase-schema.test.ts\n@@ -1208,14 +1208,19 @@ describe(\"Supabase Preview replay guards\", () => {\n ]) {\n expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\n }\n- expect(functionBody.indexOf(\"for update;\")).toBeLessThan(\n+ expect(functionBody).toContain(\"perform 1 from public.ingestion_jobs\");\n+ expect(functionBody).toContain(\"and status in ('pending', 'processing')\");\n+ expect(functionBody).toContain(\"publication document % has active ingestion or reindex jobs\");\n+ expect(functionBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\n functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n );\n \n const guardStart = sql.indexOf(\"create or replace function public.guard_document_publication_transition(\");\n const guardBody = sql.slice(guardStart, sql.indexOf(\"$$;\", guardStart));\n expect(guardBody).toContain(\"perform 1 from public.document_chunks where document_id = old.id for update;\");\n- expect(guardBody.indexOf(\"for update;\")).toBeLessThan(\n+ expect(guardBody).toContain(\"perform 1 from public.ingestion_jobs\");\n+ expect(guardBody).toContain(\"public document transition requires ingestion and reindex jobs to finish\");\n+ expect(guardBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\n guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n );\n }\n","/bin/bash -lc 'git diff -- supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql supabase/schema.sql tests/supabase-schema.test.ts scripts/sql/verify-publication-approval.sql'",[934],"11563",{"_689":935,"_96":703},"git diff -- supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql supabase/schema.sql tests/supabase-schema.test.ts scripts/sql/verify-publication-approval.sql",{"_637":937,"_616":617,"_639":623},{"_706":938,"_678":924,"_45":939,"_644":940,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"git diff -- supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql supabase/schema.sql tests/supabase-schema.test.ts scripts/sql/verify-publication-approval.sql\",\"workdir\":\"/workspace/Database\",\"max_output_tokens\":30000}","fc_03a2e9824edee382016a60a9f0d2f0819786abecf9a65492c6",{"_649":623},{"_637":942,"_616":617,"_639":623},{"_640":-5,"_661":943,"_45":944,"_644":945,"_665":946,"_96":667},"gAAAAABqYKnw3qsSFoUupQdLIQMuN_auvtKZ2KUtmDzmDnvWX1bdk5noabelRuqVHqG6vzMzlYJOoJFEzvjQiTJJ4x8mN4pDmdU3_Lgln__qOHwTyvt5QR2vTRqn1NU-ELc5NeIyE70nQNMILU7HMdzYj54Gd1-1z_IQZMXL6xjkFJxZcpWrlCCWkbI82kPdIL8Xy9qh5BDWtOu_PcF0ytFa7bipj7lsTPJjjkUu2SsB7NgelswIa59oW_g7wZamfeHRg9NCGiwkKl_CudtRBW9aB9kPs6pZhZ1LvCI0zFYwPixdej2Wikx8oyzI47ExE2-A0Uh7qycEhNdOkE0J1lNsoMiwUu56xMKiCgauR9ScpIDLbkJ1figv8x32qIzhHQV0Ey87byLK-AtNKTsvHWsnsYI_oyloyWpq6e4XewdDLZyJEw0MdS6dxzXrB7reojb_qBjwCpT6WxxNDFE6SJdmjmH0DgGd65TtA64SWs8pIAAB2iS3cn73WSVpihoTJGd6DNNvVpc8gN3gGOGgoWYuGTflCjv7CHQGrahhFAw9y8nznJasb3qyemMNegF6auXiRET8QFL3ic1ov8e7cGYvULuQBdupUyZWL-t5_m1f8KtbL11Vx94M1Tr2nWydAev-tafM_DiK0R0RlFt0s8Oc6hMA_Dnz-FN42fJjgbDKe7hb-Dskagxjgt7VuuXuVVuN_DeqkkyfLEGdJj3l-PMYeuwKlnbkGCvJz6GU8r5hHLFGZ2RAP8ukcdQxo47inXws76KJN8Jc-7fIwZkq3KPkCRnl2Wyx0IT4CTyGC6bInQVICcCyxsyDwIcqWCT5P0_Upjb3qJLTayTdJT72dY-rC9PD6ByD1pDLBi_tCBgWIVXk_8kctqbJ0hk-tRSVcE1RjZdwJWTWbqYkYqpBrPfRYBiaC18OgOouueG6V4Yeau2vidz1yYg=","rs_03a2e9824edee382016a60a9f053bc8197953b7f04243f09c7",{"_649":623},[],{"_655":948,"_637":949,"_616":617,"_639":623},1784719856723,{"_640":950,"_45":944,"_665":951,"_96":667},[],[],{"_655":953,"_637":954,"_616":617,"_639":623},1784719855186,{"_687":-5,"_689":955,"_691":956,"_693":694,"_621":957,"_695":35,"_45":958,"_696":959,"_698":699,"_630":117,"_96":700},"/bin/bash -lc \"python - <<'PY'\nfrom pathlib import Path\np=Path('scripts/sql/verify-publication-approval.sql')\ns=p.read_text()\ns=s.replace(\\\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed');\\\", \\\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed'),\\\\n ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Active ingestion fixture', 'active-ingestion.pdf', 'application/pdf', 'fixtures/active-ingestion.pdf', 'indexed');\\\")\ns=s.replace(\\\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\\\", \\\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\\\\n ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Active ingestion protection fixture.', array['fixture:active-ingestion'], repeat('d', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\\\\n\\\\ninsert into public.ingestion_jobs (document_id, status, stage, progress, locked_by, locked_at)\\\\nvalues ('10000000-0000-4000-8000-000000000007', 'processing', 'indexing', 50, 'publication-fixture-worker', now());\\\")\ninsert='''\\\\n begin\\\\n perform public.publish_approved_documents(\\\\n jsonb_build_array(jsonb_build_object(\\\\n 'document_id', '10000000-0000-4000-8000-000000000007',\\\\n 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\\\\n 'expected_state_digest', (\\\\n select reviewed_state_digest from public.document_publication_approvals\\\\n where document_id = '10000000-0000-4000-8000-000000000007'\\\\n )\\\\n )),\\\\n repeat('d', 64),\\\\n 1\\\\n );\\\\n raise exception 'active ingestion publication fixture unexpectedly published';\\\\n exception when others then\\\\n if sqlerrm = 'active ingestion publication fixture unexpectedly published' then raise; end if;\\\\n if sqlerrm not like 'publication document % has active ingestion or reindex jobs' then raise; end if;\\\\n end;\\\\n'''\nneedle=\\\" begin\\\\n update public.documents\\\\n set owner_id = null, metadata = metadata || jsonb_build_object('public_corpus', true)\\\"\ns=s.replace(needle, insert+\\\"\\\\n\\\"+needle)\np.write_text(s)\nPY\n\"",[960],753,"call_4bZlkHbQ54PcEIosGrOQSTd8","76513",{"_689":961,"_96":703},"python - <<'PY'\nfrom pathlib import Path\np=Path('scripts/sql/verify-publication-approval.sql')\ns=p.read_text()\ns=s.replace(\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed');\", \" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed'),\\n ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Active ingestion fixture', 'active-ingestion.pdf', 'application/pdf', 'fixtures/active-ingestion.pdf', 'indexed');\")\ns=s.replace(\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\", \" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\\n ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Active ingestion protection fixture.', array['fixture:active-ingestion'], repeat('d', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\\n\\ninsert into public.ingestion_jobs (document_id, status, stage, progress, locked_by, locked_at)\\nvalues ('10000000-0000-4000-8000-000000000007', 'processing', 'indexing', 50, 'publication-fixture-worker', now());\")\ninsert='''\\n begin\\n perform public.publish_approved_documents(\\n jsonb_build_array(jsonb_build_object(\\n 'document_id', '10000000-0000-4000-8000-000000000007',\\n 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\\n 'expected_state_digest', (\\n select reviewed_state_digest from public.document_publication_approvals\\n where document_id = '10000000-0000-4000-8000-000000000007'\\n )\\n )),\\n repeat('d', 64),\\n 1\\n );\\n raise exception 'active ingestion publication fixture unexpectedly published';\\n exception when others then\\n if sqlerrm = 'active ingestion publication fixture unexpectedly published' then raise; end if;\\n if sqlerrm not like 'publication document % has active ingestion or reindex jobs' then raise; end if;\\n end;\\n'''\nneedle=\" begin\\n update public.documents\\n set owner_id = null, metadata = metadata || jsonb_build_object('public_corpus', true)\"\ns=s.replace(needle, insert+\"\\n\"+needle)\np.write_text(s)\nPY\n",{"_637":963,"_616":617,"_639":623},{"_678":958,"_45":-5,"_644":964,"_681":965,"_96":683},{"_649":623},"Chunk ID: c76c2c\nWall time: 0.6516 seconds\nProcess exited with code 0\nOriginal token count: 0\nOutput:\n",{"_637":967,"_616":617,"_639":623},{"_706":968,"_678":958,"_45":969,"_644":970,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"python - <<'PY'\\nfrom pathlib import Path\\np=Path('scripts/sql/verify-publication-approval.sql')\\ns=p.read_text()\\ns=s.replace(\\\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed');\\\", \\\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed'),\\\\n ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Active ingestion fixture', 'active-ingestion.pdf', 'application/pdf', 'fixtures/active-ingestion.pdf', 'indexed');\\\")\\ns=s.replace(\\\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\\\", \\\" ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\\\\n ('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Active ingestion protection fixture.', array['fixture:active-ingestion'], repeat('d', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000007', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\\\\n\\\\ninsert into public.ingestion_jobs (document_id, status, stage, progress, locked_by, locked_at)\\\\nvalues ('10000000-0000-4000-8000-000000000007', 'processing', 'indexing', 50, 'publication-fixture-worker', now());\\\")\\ninsert='''\\\\n begin\\\\n perform public.publish_approved_documents(\\\\n jsonb_build_array(jsonb_build_object(\\\\n 'document_id', '10000000-0000-4000-8000-000000000007',\\\\n 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\\\\n 'expected_state_digest', (\\\\n select reviewed_state_digest from public.document_publication_approvals\\\\n where document_id = '10000000-0000-4000-8000-000000000007'\\\\n )\\\\n )),\\\\n repeat('d', 64),\\\\n 1\\\\n );\\\\n raise exception 'active ingestion publication fixture unexpectedly published';\\\\n exception when others then\\\\n if sqlerrm = 'active ingestion publication fixture unexpectedly published' then raise; end if;\\\\n if sqlerrm not like 'publication document % has active ingestion or reindex jobs' then raise; end if;\\\\n end;\\\\n'''\\nneedle=\\\" begin\\\\n update public.documents\\\\n set owner_id = null, metadata = metadata || jsonb_build_object('public_corpus', true)\\\"\\ns=s.replace(needle, insert+\\\"\\\\n\\\"+needle)\\np.write_text(s)\\nPY\\n\"}","fc_03a2e9824edee382016a60a9ddf97c8197b010f0df71666ff6",{"_649":623},{"_637":972,"_616":617,"_639":623},{"_640":-5,"_661":973,"_45":974,"_644":975,"_665":976,"_96":667},"gAAAAABqYKndRPv6ZLx-LvLY0PPJennvI0T5nONMbZ4h_Ux4s-3kEDmtCngL-7E-Gnwb9fZs5PkNYn1t_JhzY1YBaMMxQRF50Xi5rX86lCH-NOFkPl3QdQEuJY8ENQud6eeA0uJaIBfHOQM7nGyDcAWOygTYPzfVPaOGa8XNIeG5-_MUx8YIr6QKzVJ5t-nef7ZHEbwUB-nMozKOndR7dNduC-G4rMU5HkRuPvbjR0635PbePnIK5Qiaz2t2PwpUKZANlzs65K7rAFYmNvrb1yJroOsOOGAf9mLzFeXtCwBaf52dDYkP77vhNHYNuR5eqjbkiFspRgmZgrsliiAXVUQK8T7tH3Tsx_JA68cK2kb9iK6rYeNio_v5-EL3d-xecete0kEu-Rt5fKZmSg5PEJMFmm9ZyeLgjL3RRcKlInlX8x058BCyZ1dKvvkSZptMQRlIsuJo-VNRQPl116Fm1fCUcvQSvlm7zefJQVnPlsQh0gDUMbK_jBAvB5BA-qYCWplgs9mJ7PtXPHioQXdU87hTTSm9Ya3mnz3QidKbOWHuT3jhgXrpAtyvytWyn1ZUrv3YDNTewMNSeOZkIjCQzhyt24Kap8HX5yH60eHXUoec4xp0kIQhgZRwKrnRiTa_GO1BzSDqwKW6e-WJbKP7X8dQMKYx2Q2CRZIz-iYJuRb8r_7DgPBsIqQek8ZIMp4vFGsv8voCXoklLslwRUCnUaeUgI7_eUBGUJuo6U4YQbi27ugEc6-_ucJXeX5GnrYw661V7bV6HOK4x9bhK-qOXLlLBJCcC8NBOO9obNSkgpb2wX39gfi9QL25tw7-qjYeHs8cHkdEAv9E1s4st_Ke-WlOFH35vPwoCrflhBgliWEOqTn0E5rMq9JISm_Zxfc00wV4RJ7W-wuf7Xpe70bJlg-qVWIs8k1InWfttonV0fuUoBeou86EfbeZPj3LCgIdkUZnLmUVLr9GnHsQ74n1UwO8O4K3puvV4L0IdBfJEODmhLVjGHBN3egKx0dROShiAUJi3K81-MS0","rs_03a2e9824edee382016a60a9dd13a88197990efe417696a6e0",{"_649":623},[977],{"_49":978,"_96":670},"**Adding fixture for active job testing**",{"_655":980,"_637":981,"_616":617,"_639":623},1784719837871,{"_640":982,"_45":974,"_665":983,"_96":667},[],[978],{"_655":985,"_637":986,"_616":617,"_639":623},1784719836152,{"_687":-5,"_689":987,"_691":988,"_693":694,"_621":989,"_695":35,"_45":990,"_696":991,"_698":699,"_630":117,"_96":700},"/bin/bash -lc \"python - <<'PY'\nfrom pathlib import Path\np=Path('tests/supabase-schema.test.ts')\ns=p.read_text()\nold=''' for (const table of [\\\\n \\\"document_pages\\\",\\\\n \\\"document_images\\\",\\\\n \\\"document_labels\\\",\\\\n \\\"document_summaries\\\",\\\\n \\\"document_sections\\\",\\\\n \\\"document_memory_cards\\\",\\\\n \\\"document_chunks\\\",\\\\n \\\"document_table_facts\\\",\\\\n \\\"document_embedding_fields\\\",\\\\n \\\"document_index_quality\\\",\\\\n \\\"document_index_units\\\",\\\\n ]) {\\\\n expect(functionBody).toContain(\"'`perform 1 from public.${table} where document_id = v_document_id for update;`);'\"\\\\n }\\\\n expect(functionBody.indexOf(\\\"for update;\\\")).toBeLessThan(\\\\n functionBody.indexOf(\\\"v_current_state_digest := public.document_publication_state_digest(\\\"),\\\\n );\\\\n\\\\n const guardStart = sql.indexOf(\\\"create or replace function public.guard_document_publication_transition(\\\");\\\\n const guardBody = sql.slice(guardStart, sql.indexOf(\\\"\"'$$;\", guardStart));'\"\\\\n expect(guardBody).toContain(\\\"perform 1 from public.document_chunks where document_id = old.id for update;\\\");\\\\n expect(guardBody.indexOf(\\\"for update;\\\")).toBeLessThan(\\\\n guardBody.indexOf(\\\"v_current_state_digest := public.document_publication_state_digest(\\\"),\\\\n );\\\\n'''\nnew=''' for (const table of [\\\\n \\\"document_pages\\\",\\\\n \\\"document_images\\\",\\\\n \\\"document_labels\\\",\\\\n \\\"document_summaries\\\",\\\\n \\\"document_sections\\\",\\\\n \\\"document_memory_cards\\\",\\\\n \\\"document_chunks\\\",\\\\n \\\"document_table_facts\\\",\\\\n \\\"document_embedding_fields\\\",\\\\n \\\"document_index_quality\\\",\\\\n \\\"document_index_units\\\",\\\\n ]) {\\\\n expect(functionBody).toContain(\"'`perform 1 from public.${table} where document_id = v_document_id for update;`);'\"\\\\n }\\\\n expect(functionBody).toContain(\\\"perform 1 from public.ingestion_jobs\\\");\\\\n expect(functionBody).toContain(\\\"and status in ('pending', 'processing')\\\");\\\\n expect(functionBody).toContain(\\\"publication document % has active ingestion or reindex jobs\\\");\\\\n expect(functionBody.indexOf(\\\"perform 1 from public.ingestion_jobs\\\")).toBeLessThan(\\\\n functionBody.indexOf(\\\"v_current_state_digest := public.document_publication_state_digest(\\\"),\\\\n );\\\\n\\\\n const guardStart = sql.indexOf(\\\"create or replace function public.guard_document_publication_transition(\\\");\\\\n const guardBody = sql.slice(guardStart, sql.indexOf(\\\"\"'$$;\", guardStart));'\"\\\\n expect(guardBody).toContain(\\\"perform 1 from public.document_chunks where document_id = old.id for update;\\\");\\\\n expect(guardBody).toContain(\\\"perform 1 from public.ingestion_jobs\\\");\\\\n expect(guardBody).toContain(\\\"public document transition requires ingestion and reindex jobs to finish\\\");\\\\n expect(guardBody.indexOf(\\\"perform 1 from public.ingestion_jobs\\\")).toBeLessThan(\\\\n guardBody.indexOf(\\\"v_current_state_digest := public.document_publication_state_digest(\\\"),\\\\n );\\\\n'''\nif old not in s: raise SystemExit('test block not found')\np.write_text(s.replace(old,new))\nPY\n\"",[992],635,"call_TyXIdPJogFuerSy6lg5kEICv","17779",{"_689":993,"_96":703},"python - <<'PY'\nfrom pathlib import Path\np=Path('tests/supabase-schema.test.ts')\ns=p.read_text()\nold=''' for (const table of [\\n \"document_pages\",\\n \"document_images\",\\n \"document_labels\",\\n \"document_summaries\",\\n \"document_sections\",\\n \"document_memory_cards\",\\n \"document_chunks\",\\n \"document_table_facts\",\\n \"document_embedding_fields\",\\n \"document_index_quality\",\\n \"document_index_units\",\\n ]) {\\n expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\\n }\\n expect(functionBody.indexOf(\"for update;\")).toBeLessThan(\\n functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\\n );\\n\\n const guardStart = sql.indexOf(\"create or replace function public.guard_document_publication_transition(\");\\n const guardBody = sql.slice(guardStart, sql.indexOf(\"$$;\", guardStart));\\n expect(guardBody).toContain(\"perform 1 from public.document_chunks where document_id = old.id for update;\");\\n expect(guardBody.indexOf(\"for update;\")).toBeLessThan(\\n guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\\n );\\n'''\nnew=''' for (const table of [\\n \"document_pages\",\\n \"document_images\",\\n \"document_labels\",\\n \"document_summaries\",\\n \"document_sections\",\\n \"document_memory_cards\",\\n \"document_chunks\",\\n \"document_table_facts\",\\n \"document_embedding_fields\",\\n \"document_index_quality\",\\n \"document_index_units\",\\n ]) {\\n expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\\n }\\n expect(functionBody).toContain(\"perform 1 from public.ingestion_jobs\");\\n expect(functionBody).toContain(\"and status in ('pending', 'processing')\");\\n expect(functionBody).toContain(\"publication document % has active ingestion or reindex jobs\");\\n expect(functionBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\\n functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\\n );\\n\\n const guardStart = sql.indexOf(\"create or replace function public.guard_document_publication_transition(\");\\n const guardBody = sql.slice(guardStart, sql.indexOf(\"$$;\", guardStart));\\n expect(guardBody).toContain(\"perform 1 from public.document_chunks where document_id = old.id for update;\");\\n expect(guardBody).toContain(\"perform 1 from public.ingestion_jobs\");\\n expect(guardBody).toContain(\"public document transition requires ingestion and reindex jobs to finish\");\\n expect(guardBody.indexOf(\"perform 1 from public.ingestion_jobs\")).toBeLessThan(\\n guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\\n );\\n'''\nif old not in s: raise SystemExit('test block not found')\np.write_text(s.replace(old,new))\nPY\n",{"_637":995,"_616":617,"_639":623},{"_678":990,"_45":-5,"_644":996,"_681":997,"_96":683},{"_649":623},"Chunk ID: fe3625\nWall time: 0.5339 seconds\nProcess exited with code 0\nOriginal token count: 0\nOutput:\n",{"_637":999,"_616":617,"_639":623},{"_706":1000,"_678":990,"_45":1001,"_644":1002,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"python - <<'PY'\\nfrom pathlib import Path\\np=Path('tests/supabase-schema.test.ts')\\ns=p.read_text()\\nold=''' for (const table of [\\\\n \\\"document_pages\\\",\\\\n \\\"document_images\\\",\\\\n \\\"document_labels\\\",\\\\n \\\"document_summaries\\\",\\\\n \\\"document_sections\\\",\\\\n \\\"document_memory_cards\\\",\\\\n \\\"document_chunks\\\",\\\\n \\\"document_table_facts\\\",\\\\n \\\"document_embedding_fields\\\",\\\\n \\\"document_index_quality\\\",\\\\n \\\"document_index_units\\\",\\\\n ]) {\\\\n expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\\\\n }\\\\n expect(functionBody.indexOf(\\\"for update;\\\")).toBeLessThan(\\\\n functionBody.indexOf(\\\"v_current_state_digest := public.document_publication_state_digest(\\\"),\\\\n );\\\\n\\\\n const guardStart = sql.indexOf(\\\"create or replace function public.guard_document_publication_transition(\\\");\\\\n const guardBody = sql.slice(guardStart, sql.indexOf(\\\"$$;\\\", guardStart));\\\\n expect(guardBody).toContain(\\\"perform 1 from public.document_chunks where document_id = old.id for update;\\\");\\\\n expect(guardBody.indexOf(\\\"for update;\\\")).toBeLessThan(\\\\n guardBody.indexOf(\\\"v_current_state_digest := public.document_publication_state_digest(\\\"),\\\\n );\\\\n'''\\nnew=''' for (const table of [\\\\n \\\"document_pages\\\",\\\\n \\\"document_images\\\",\\\\n \\\"document_labels\\\",\\\\n \\\"document_summaries\\\",\\\\n \\\"document_sections\\\",\\\\n \\\"document_memory_cards\\\",\\\\n \\\"document_chunks\\\",\\\\n \\\"document_table_facts\\\",\\\\n \\\"document_embedding_fields\\\",\\\\n \\\"document_index_quality\\\",\\\\n \\\"document_index_units\\\",\\\\n ]) {\\\\n expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\\\\n }\\\\n expect(functionBody).toContain(\\\"perform 1 from public.ingestion_jobs\\\");\\\\n expect(functionBody).toContain(\\\"and status in ('pending', 'processing')\\\");\\\\n expect(functionBody).toContain(\\\"publication document % has active ingestion or reindex jobs\\\");\\\\n expect(functionBody.indexOf(\\\"perform 1 from public.ingestion_jobs\\\")).toBeLessThan(\\\\n functionBody.indexOf(\\\"v_current_state_digest := public.document_publication_state_digest(\\\"),\\\\n );\\\\n\\\\n const guardStart = sql.indexOf(\\\"create or replace function public.guard_document_publication_transition(\\\");\\\\n const guardBody = sql.slice(guardStart, sql.indexOf(\\\"$$;\\\", guardStart));\\\\n expect(guardBody).toContain(\\\"perform 1 from public.document_chunks where document_id = old.id for update;\\\");\\\\n expect(guardBody).toContain(\\\"perform 1 from public.ingestion_jobs\\\");\\\\n expect(guardBody).toContain(\\\"public document transition requires ingestion and reindex jobs to finish\\\");\\\\n expect(guardBody.indexOf(\\\"perform 1 from public.ingestion_jobs\\\")).toBeLessThan(\\\\n guardBody.indexOf(\\\"v_current_state_digest := public.document_publication_state_digest(\\\"),\\\\n );\\\\n'''\\nif old not in s: raise SystemExit('test block not found')\\np.write_text(s.replace(old,new))\\nPY\\n\"}","fc_03a2e9824edee382016a60a9cd273c8197acf78681b0bc57c0",{"_649":623},{"_655":1004,"_637":1005,"_616":617,"_639":623},1784719819854,{"_687":-5,"_689":1006,"_691":1007,"_693":694,"_621":1008,"_695":35,"_45":1009,"_696":1010,"_698":699,"_630":117,"_96":700},"/bin/bash -lc \"python - <<'PY'\nfrom pathlib import Path\nfiles=[Path('supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql'),Path('supabase/schema.sql')]\nold=\\\"\\\"\\\" perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n\n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n\\\"\\\"\\\"\nnew=\\\"\\\"\\\" perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n perform 1 from public.ingestion_jobs\n where document_id = old.id\n and status in ('pending', 'processing')\n for update;\n\n if exists (\n select 1\n from public.ingestion_jobs\n where document_id = old.id\n and status in ('pending', 'processing')\n ) then\n raise exception 'public document transition requires ingestion and reindex jobs to finish';\n end if;\n\n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n\\\"\\\"\\\"\nold2=\\\"\\\"\\\" perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n\n select approval.id into v_approval_id\n\\\"\\\"\\\"\nnew2=\\\"\\\"\\\" perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n perform 1 from public.ingestion_jobs\n where document_id = v_document_id\n and status in ('pending', 'processing')\n for update;\n\n if exists (\n select 1\n from public.ingestion_jobs\n where document_id = v_document_id\n and status in ('pending', 'processing')\n ) then\n raise exception 'publication document % has active ingestion or reindex jobs', v_document_id;\n end if;\n\n select approval.id into v_approval_id\n\\\"\\\"\\\"\nfor p in files:\n s=p.read_text()\n if old not in s or old2 not in s:\n raise SystemExit(f'missing in {p}')\n s=s.replace(old,new).replace(old2,new2)\n p.write_text(s)\nPY\n\"",[1011],800,"call_KwiDayi7CXH8TcaUtILsGXp9","69025",{"_689":1012,"_96":703},"python - <<'PY'\nfrom pathlib import Path\nfiles=[Path('supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql'),Path('supabase/schema.sql')]\nold=\"\"\" perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n\n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n\"\"\"\nnew=\"\"\" perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n perform 1 from public.ingestion_jobs\n where document_id = old.id\n and status in ('pending', 'processing')\n for update;\n\n if exists (\n select 1\n from public.ingestion_jobs\n where document_id = old.id\n and status in ('pending', 'processing')\n ) then\n raise exception 'public document transition requires ingestion and reindex jobs to finish';\n end if;\n\n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n\"\"\"\nold2=\"\"\" perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n\n select approval.id into v_approval_id\n\"\"\"\nnew2=\"\"\" perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n perform 1 from public.ingestion_jobs\n where document_id = v_document_id\n and status in ('pending', 'processing')\n for update;\n\n if exists (\n select 1\n from public.ingestion_jobs\n where document_id = v_document_id\n and status in ('pending', 'processing')\n ) then\n raise exception 'publication document % has active ingestion or reindex jobs', v_document_id;\n end if;\n\n select approval.id into v_approval_id\n\"\"\"\nfor p in files:\n s=p.read_text()\n if old not in s or old2 not in s:\n raise SystemExit(f'missing in {p}')\n s=s.replace(old,new).replace(old2,new2)\n p.write_text(s)\nPY\n",{"_637":1014,"_616":617,"_639":623},{"_678":1009,"_45":-5,"_644":1015,"_681":1016,"_96":683},{"_649":623},"Chunk ID: 1eb422\nWall time: 0.6992 seconds\nProcess exited with code 0\nOriginal token count: 0\nOutput:\n",{"_637":1018,"_616":617,"_639":623},{"_706":1019,"_678":1009,"_45":1020,"_644":1021,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"python - <<'PY'\\nfrom pathlib import Path\\nfiles=[Path('supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql'),Path('supabase/schema.sql')]\\nold=\\\"\\\"\\\" perform 1 from public.document_index_quality where document_id = old.id for update;\\n perform 1 from public.document_index_units where document_id = old.id for update;\\n\\n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\\n\\\"\\\"\\\"\\nnew=\\\"\\\"\\\" perform 1 from public.document_index_quality where document_id = old.id for update;\\n perform 1 from public.document_index_units where document_id = old.id for update;\\n perform 1 from public.ingestion_jobs\\n where document_id = old.id\\n and status in ('pending', 'processing')\\n for update;\\n\\n if exists (\\n select 1\\n from public.ingestion_jobs\\n where document_id = old.id\\n and status in ('pending', 'processing')\\n ) then\\n raise exception 'public document transition requires ingestion and reindex jobs to finish';\\n end if;\\n\\n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\\n\\\"\\\"\\\"\\nold2=\\\"\\\"\\\" perform 1 from public.document_index_quality where document_id = v_document_id for update;\\n perform 1 from public.document_index_units where document_id = v_document_id for update;\\n\\n select approval.id into v_approval_id\\n\\\"\\\"\\\"\\nnew2=\\\"\\\"\\\" perform 1 from public.document_index_quality where document_id = v_document_id for update;\\n perform 1 from public.document_index_units where document_id = v_document_id for update;\\n perform 1 from public.ingestion_jobs\\n where document_id = v_document_id\\n and status in ('pending', 'processing')\\n for update;\\n\\n if exists (\\n select 1\\n from public.ingestion_jobs\\n where document_id = v_document_id\\n and status in ('pending', 'processing')\\n ) then\\n raise exception 'publication document % has active ingestion or reindex jobs', v_document_id;\\n end if;\\n\\n select approval.id into v_approval_id\\n\\\"\\\"\\\"\\nfor p in files:\\n s=p.read_text()\\n if old not in s or old2 not in s:\\n raise SystemExit(f'missing in {p}')\\n s=s.replace(old,new).replace(old2,new2)\\n p.write_text(s)\\nPY\\n\"}","fc_03a2e9824edee382016a60a9c124e88197a03cec3d2fc047c2",{"_649":623},{"_637":1023,"_616":617,"_639":623},{"_640":-5,"_661":1024,"_45":1025,"_644":1026,"_665":1027,"_96":667},"gAAAAABqYKnB1gmPQnzjMYpo8tdRRjWynOOrs7kbJmjd1iEIRr3OESIM2MX_bDdcp5qNlr7BXsxinnEWX-qtKX_YqvcmDsS5cwzm-JEfUyuYiVfPec2kuOu3WZUez6ALZpLkrqNnj7RDW-CT51TrdrmkPlBcWMbaQA-9DkLcpg0G7DeZKs6g7JrpxCWkwb62rhe7GEW8p3Yaz7bBMIQak3b1y4fA3GZqVHpiJkXe75Dw52XoEJOjr9Urpt4HIJFmPDhCf6asqRq51CJI7Fj_L8V24lslJ9Kpx_ZdaC9vBryecI1IvKbiEuix8Rz3y9msdkrFl5dg3mtlX-r6WORDjhmVkWzZ3H2k-t0pKbaEG5DiEhm_ifJ_yJzcCeBQbLBouzkOUhqzhr3DOz8Ms9FZ83UzUTbEor3IJ9DwgMU-2orbdgQctrnvGv4lEU8cL3FJMTAmpjaRNfudX-GfJ5_uCtGsyxvroFLTGpmii1IESaHwPtRj-XK7tC1BosYHHE6c7PntsgNBtLi48ccfrO1hxLF7TyKNpFAN_eZWdlfMAbRwIKMaUS2-EGCqr-EmPaNll_yTfwKIS6iF8QrBep1dIRzB6U8meJQ_Nkg98tHe7LF1cR7AEHXu_0D4-xKWthJhODFqN2PcN8OWQvisXZW14izOr5sN0dDBBYHDwmB1kHIHR_6asbyaFGJBE2YF-V3-3l3rspp18zGB13z3mSgEjvl0C-qqFXMtgMNEJcJr7K56V53rdsDAH26cUJ4Aa_TLS6IvSCcNK4HabwuS4KpUhJD3hChi809PYAYDQzp_D3o37olUZSgaAaZC8JinXLxh8v1VZ2-AkhWOdYF8RVUfpKjeKhdfVFzM3yj4aaSpnf6yc_0WKkkNvealoe_EVOl9RUPA_mOLZGGK4IJEClH_bu9TIzJIKd1Iuoj9laZgBG4oU5c4j3xBl1r8jcanWuxRMogFf6sHT_cZ1T1zo9eUl0oU4TW9luTSmswwAQ0Qv17fCJJ93gjgnBxKCCSDzE0B6Kt79JrOzJG9aaNFHNvxghYYOdxAaASwd-ppY3h_AIkdDe7ijob-gZ1l7zR2s8gDypuzS2eIDv4lrSX_ZQ4UNT2jcQ0WHpi-7IayUTLW22D7TQWCm6fE5iCEDjGCC1NUCNUwwUHNhEfkpGGPzH1dKSj9M7AX8-Tgc2d9b9jGBHvQSrb1J7xxOEkftm1gnZ2CXYsaAC8VKdjizAkahciLOZjIuV9S9Y7tBQ-tTg2EcbMTMEN5igpqKId6hwIzmI_Q_-08ffE1irfbQ7_jwQUb9crc2WlFfFFRpHsWN0BKa7o0p3kRbfwQU-iignLV99QBZF4T2WyJoWFSRcVsK-5ouQ7Zo0kuBT4H4BykRhi-_AP9QmYjNvWyYSR_NA-ArOH9l3U4kX77XFDtS7bG9QBeIyyKtt_CWyPFo2fL6SkfovG7a6s0bQDUgzYs5b_GvJOe0mg_Wr3DNwYj3BDcX5GLESzSGNILp6ZEE6UL6oXYhXWmN7WKf_GpjW6wNaji6OyJpa0zEnxRLBYEH9G0lhxcNQUeXRZ7eHi7_-T5Wt4pd3OHzv43h_wfGOqQU-YoW_73Jsh9OAvcrbjo","rs_03a2e9824edee382016a60a9be7c5c8197b1abd4a6952ccbc5",{"_649":623},[1028],{"_49":1029,"_96":670},"**Adding active job locking before digest**",{"_655":1031,"_637":1032,"_616":617,"_639":623},1784719809042,{"_640":1033,"_45":1025,"_665":1034,"_96":667},[],[1029],{"_637":1036,"_616":617,"_639":623},{"_678":1037,"_45":-5,"_644":1038,"_681":1039,"_96":683},"call_h24gjirGyfjhAO1GzsEMlfK5",{"_649":623},"Chunk ID: 119e73\nWall time: 0.0008 seconds\nProcess exited with code 0\nOriginal token count: 1799\nOutput:\ncreate table if not exists public.ingestion_jobs (\n id uuid primary key default gen_random_uuid(),\n document_id uuid not null references public.documents(id) on delete cascade,\n batch_id uuid references public.import_batches(id) on delete set null,\n status text not null default 'pending'\n check (status in ('pending', 'processing', 'completed', 'failed')),\n stage text not null default 'queued',\n progress integer not null default 0 check (progress between 0 and 100),\n error_message text,\n attempt_count integer not null default 0,\n max_attempts integer not null default 3,\n locked_at timestamptz,\n locked_by text,\n next_run_at timestamptz not null default now(),\n started_at timestamptz,\n completed_at timestamptz,\n created_at timestamptz not null default now(),\n updated_at timestamptz not null default now()\n);\n\ncreate table if not exists public.ingestion_job_stages (\n id uuid primary key default gen_random_uuid(),\n -- R24e: no FK to ingestion_jobs. Live has no such constraint and job_id holds\n -- indexing_v3_agent_jobs ids, not ingestion_jobs ids (see migration\n -- 20260708140000). document_id -> documents ON DELETE CASCADE is the real FK.\n job_id uuid not null,\n document_id uuid not null references public.documents(id) on delete cascade,\n stage_name text not null,\n stage_status text not null default 'started'\n check (stage_status in ('started', 'completed', 'failed')),\n error_class text,\n retry_count integer not null default 0,\n metadata jsonb not null default '{}'::jsonb,\n artifact_counts jsonb not null default '{}'::jsonb,\n error_message text,\n started_at timestamptz not null default now(),\n finished_at timestamptz,\n created_at timestamptz not null default now()\n);\n\n ),\n updated_at = now()\n where id = p_document_id;\nend;\n$$;\n\ncreate or replace function public.commit_document_index_generation(\n p_document_id uuid,\n p_index_generation_id uuid,\n p_status text default 'indexed',\n p_page_count integer default 0,\n p_chunk_count integer default 0,\n p_image_count integer default 0,\n p_metadata jsonb default '{}'::jsonb,\n p_pages jsonb default null,\n p_quality jsonb default null\n)\nreturns jsonb\nlanguage plpgsql\nset search_path = public, extensions, pg_temp\nas $$\nbegin\n perform set_config('statement_timeout', '180000', true);\n\n update public.documents\n set\n status = p_status,\n page_count = p_page_count,\n chunk_count = p_chunk_count,\n image_count = p_image_count,\n error_message = null,\n updated_at = now()\n where id = p_document_id;\n\n -- R5: merge worker-owned keys onto live metadata instead of full-replace.\n perform public.apply_document_metadata_patch(\n p_document_id,\n coalesce(p_metadata, '{}'::jsonb) || jsonb_build_object('index_generation_id', p_index_generation_id)\n );\n\n if p_pages is not null then\n delete from public.document_pages\n where document_id = p_document_id;\n\n insert into public.document_pages (document_id, page_number, text, ocr_used, metadata)\n select\n p_document_id,\n page_row.page_number,\n coalesce(page_row.text, ''),\n coalesce(page_row.ocr_used, false),\n coalesce(page_row.metadata, '{}'::jsonb)\n from jsonb_to_recordset(coalesce(p_pages, '[]'::jsonb)) as page_row(\n page_number integer,\n text text,\n ocr_used boolean,\n metadata jsonb\n )\n where page_row.page_number is not null;\n end if;\n\n if p_quality is not null then\n insert into public.document_index_quality (\n document_id,\n owner_id,\n quality_score,\n extraction_quality,\n metrics,\n issues,\n updated_at\n )\n values (\n p_document_id,\n nullif(p_quality->>'owner_id', '')::uuid,\n coalesce((p_quality->>'quality_score')::real, 0),\n coalesce(nullif(p_quality->>'extraction_quality', ''), 'unknown'),\n coalesce(p_quality->'metrics', '{}'::jsonb),\n perform public.apply_document_metadata_patch(\n p_document_id,\n jsonb_build_object(\n 'rag_indexing_version', p_rag_memory_version,\n 'rag_memory_version', p_rag_memory_version,\n 'rag_memory_updated_at', now(),\n 'document_intelligence_version', p_document_intelligence_version,\n 'document_intelligence_updated_at', now(),\n 'section_count', p_section_count,\n 'memory_card_count', p_memory_card_count,\n 'index_unit_count', v_expected_index_unit_count,\n 'index_unit_counts_by_type', coalesce(p_index_unit_counts_by_type, '{}'::jsonb),\n 'repaired_anchor_count', p_repaired_anchor_count,\n 'deep_memory_generations', jsonb_build_object(p_producer, p_artifact_generation_id)\n )\n );\n\n return jsonb_build_object(\n 'document_id', p_document_id,\n 'producer', p_producer,\n 'artifact_generation_id', p_artifact_generation_id,\n 'index_generation_id', v_committed_index_generation,\n 'section_count', p_section_count,\n 'memory_card_count', p_memory_card_count,\n 'index_unit_count', v_expected_index_unit_count\n );\nend;\n$$;\n\nrevoke execute on function public.commit_document_deep_memory_generation(uuid, text, uuid, text, text, integer, integer, jsonb, integer) from public, anon, authenticated;\ngrant execute on function public.commit_document_deep_memory_generation(uuid, text, uuid, text, text, integer, integer, jsonb, integer) to service_role;\n\ncreate or replace function public.commit_document_index_generation(\n p_job_id uuid,\n p_worker_id text,\n p_document_id uuid,\n p_index_generation_id uuid,\n p_status text default 'indexed',\n p_page_count integer default 0,\n p_chunk_count integer default 0,\n p_image_count integer default 0,\n p_metadata jsonb default '{}'::jsonb,\n p_pages jsonb default null,\n p_quality jsonb default null\n)\nreturns jsonb\nlanguage plpgsql\nsecurity definer\nset search_path = public, extensions, pg_temp\nas $$\ndeclare\n v_job public.ingestion_jobs%rowtype;\nbegin\n select * into v_job\n from public.ingestion_jobs\n where id = p_job_id\n for update;\n\n if not found\n or v_job.document_id is distinct from p_document_id\n or v_job.status is distinct from 'processing'\n or v_job.locked_by is distinct from p_worker_id\n then\n raise exception using errcode = 'P0001', message = 'ingestion_lease_lost';\n end if;\n\n return public.commit_document_index_generation(\n p_document_id, p_index_generation_id, p_status, p_page_count, p_chunk_count,\n p_image_count, p_metadata, p_pages, p_quality\n );\nend;\n$$;\n\nrevoke execute on function public.commit_document_index_generation(\n uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb\n) from public, anon, authenticated, service_role;\nrevoke execute on function public.commit_document_index_generation(\n uuid, text, uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb\n) from public, anon, authenticated;\ngrant execute on function public.commit_document_index_generation(\n uuid, text, uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb\n) to service_role;\n\ncreate or replace function public.cleanup_abandoned_document_index_generations(\n p_document_id uuid default null,\n p_limit integer default 100,\n p_dry_run boolean default true\n)\nreturns jsonb\nlanguage plpgsql\nset search_path = public, extensions, pg_temp\n",{"_655":1041,"_637":1042,"_616":617,"_639":623},1784719805093,{"_687":1043,"_689":1044,"_691":1045,"_693":694,"_621":35,"_695":35,"_45":1037,"_696":1046,"_698":699,"_630":117,"_96":700},"create table if not exists public.ingestion_jobs (\n id uuid primary key default gen_random_uuid(),\n document_id uuid not null references public.documents(id) on delete cascade,\n batch_id uuid references public.import_batches(id) on delete set null,\n status text not null default 'pending'\n check (status in ('pending', 'processing', 'completed', 'failed')),\n stage text not null default 'queued',\n progress integer not null default 0 check (progress between 0 and 100),\n error_message text,\n attempt_count integer not null default 0,\n max_attempts integer not null default 3,\n locked_at timestamptz,\n locked_by text,\n next_run_at timestamptz not null default now(),\n started_at timestamptz,\n completed_at timestamptz,\n created_at timestamptz not null default now(),\n updated_at timestamptz not null default now()\n);\n\ncreate table if not exists public.ingestion_job_stages (\n id uuid primary key default gen_random_uuid(),\n -- R24e: no FK to ingestion_jobs. Live has no such constraint and job_id holds\n -- indexing_v3_agent_jobs ids, not ingestion_jobs ids (see migration\n -- 20260708140000). document_id -> documents ON DELETE CASCADE is the real FK.\n job_id uuid not null,\n document_id uuid not null references public.documents(id) on delete cascade,\n stage_name text not null,\n stage_status text not null default 'started'\n check (stage_status in ('started', 'completed', 'failed')),\n error_class text,\n retry_count integer not null default 0,\n metadata jsonb not null default '{}'::jsonb,\n artifact_counts jsonb not null default '{}'::jsonb,\n error_message text,\n started_at timestamptz not null default now(),\n finished_at timestamptz,\n created_at timestamptz not null default now()\n);\n\n ),\n updated_at = now()\n where id = p_document_id;\nend;\n$$;\n\ncreate or replace function public.commit_document_index_generation(\n p_document_id uuid,\n p_index_generation_id uuid,\n p_status text default 'indexed',\n p_page_count integer default 0,\n p_chunk_count integer default 0,\n p_image_count integer default 0,\n p_metadata jsonb default '{}'::jsonb,\n p_pages jsonb default null,\n p_quality jsonb default null\n)\nreturns jsonb\nlanguage plpgsql\nset search_path = public, extensions, pg_temp\nas $$\nbegin\n perform set_config('statement_timeout', '180000', true);\n\n update public.documents\n set\n status = p_status,\n page_count = p_page_count,\n chunk_count = p_chunk_count,\n image_count = p_image_count,\n error_message = null,\n updated_at = now()\n where id = p_document_id;\n\n -- R5: merge worker-owned keys onto live metadata instead of full-replace.\n perform public.apply_document_metadata_patch(\n p_document_id,\n coalesce(p_metadata, '{}'::jsonb) || jsonb_build_object('index_generation_id', p_index_generation_id)\n );\n\n if p_pages is not null then\n delete from public.document_pages\n where document_id = p_document_id;\n\n insert into public.document_pages (document_id, page_number, text, ocr_used, metadata)\n select\n p_document_id,\n page_row.page_number,\n coalesce(page_row.text, ''),\n coalesce(page_row.ocr_used, false),\n coalesce(page_row.metadata, '{}'::jsonb)\n from jsonb_to_recordset(coalesce(p_pages, '[]'::jsonb)) as page_row(\n page_number integer,\n text text,\n ocr_used boolean,\n metadata jsonb\n )\n where page_row.page_number is not null;\n end if;\n\n if p_quality is not null then\n insert into public.document_index_quality (\n document_id,\n owner_id,\n quality_score,\n extraction_quality,\n metrics,\n issues,\n updated_at\n )\n values (\n p_document_id,\n nullif(p_quality->>'owner_id', '')::uuid,\n coalesce((p_quality->>'quality_score')::real, 0),\n coalesce(nullif(p_quality->>'extraction_quality', ''), 'unknown'),\n coalesce(p_quality->'metrics', '{}'::jsonb),\n perform public.apply_document_metadata_patch(\n p_document_id,\n jsonb_build_object(\n 'rag_indexing_version', p_rag_memory_version,\n 'rag_memory_version', p_rag_memory_version,\n 'rag_memory_updated_at', now(),\n 'document_intelligence_version', p_document_intelligence_version,\n 'document_intelligence_updated_at', now(),\n 'section_count', p_section_count,\n 'memory_card_count', p_memory_card_count,\n 'index_unit_count', v_expected_index_unit_count,\n 'index_unit_counts_by_type', coalesce(p_index_unit_counts_by_type, '{}'::jsonb),\n 'repaired_anchor_count', p_repaired_anchor_count,\n 'deep_memory_generations', jsonb_build_object(p_producer, p_artifact_generation_id)\n )\n );\n\n return jsonb_build_object(\n 'document_id', p_document_id,\n 'producer', p_producer,\n 'artifact_generation_id', p_artifact_generation_id,\n 'index_generation_id', v_committed_index_generation,\n 'section_count', p_section_count,\n 'memory_card_count', p_memory_card_count,\n 'index_unit_count', v_expected_index_unit_count\n );\nend;\n$$;\n\nrevoke execute on function public.commit_document_deep_memory_generation(uuid, text, uuid, text, text, integer, integer, jsonb, integer) from public, anon, authenticated;\ngrant execute on function public.commit_document_deep_memory_generation(uuid, text, uuid, text, text, integer, integer, jsonb, integer) to service_role;\n\ncreate or replace function public.commit_document_index_generation(\n p_job_id uuid,\n p_worker_id text,\n p_document_id uuid,\n p_index_generation_id uuid,\n p_status text default 'indexed',\n p_page_count integer default 0,\n p_chunk_count integer default 0,\n p_image_count integer default 0,\n p_metadata jsonb default '{}'::jsonb,\n p_pages jsonb default null,\n p_quality jsonb default null\n)\nreturns jsonb\nlanguage plpgsql\nsecurity definer\nset search_path = public, extensions, pg_temp\nas $$\ndeclare\n v_job public.ingestion_jobs%rowtype;\nbegin\n select * into v_job\n from public.ingestion_jobs\n where id = p_job_id\n for update;\n\n if not found\n or v_job.document_id is distinct from p_document_id\n or v_job.status is distinct from 'processing'\n or v_job.locked_by is distinct from p_worker_id\n then\n raise exception using errcode = 'P0001', message = 'ingestion_lease_lost';\n end if;\n\n return public.commit_document_index_generation(\n p_document_id, p_index_generation_id, p_status, p_page_count, p_chunk_count,\n p_image_count, p_metadata, p_pages, p_quality\n );\nend;\n$$;\n\nrevoke execute on function public.commit_document_index_generation(\n uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb\n) from public, anon, authenticated, service_role;\nrevoke execute on function public.commit_document_index_generation(\n uuid, text, uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb\n) from public, anon, authenticated;\ngrant execute on function public.commit_document_index_generation(\n uuid, text, uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb\n) to service_role;\n\ncreate or replace function public.cleanup_abandoned_document_index_generations(\n p_document_id uuid default null,\n p_limit integer default 100,\n p_dry_run boolean default true\n)\nreturns jsonb\nlanguage plpgsql\nset search_path = public, extensions, pg_temp\n","/bin/bash -lc \"sed -n '486,525p' supabase/schema.sql; sed -n '1360,1435p' supabase/schema.sql; sed -n '1960,2050p' supabase/schema.sql\"",[1047,1048,1049],"83070",{"_689":1055,"_371":1051,"_259":1052,"_96":1053},{"_689":1054,"_371":1051,"_259":1052,"_96":1053},{"_689":1050,"_371":1051,"_259":1052,"_96":1053},"sed -n '1960,2050p' supabase/schema.sql","schema.sql","/workspace/Database/supabase/schema.sql","read","sed -n '1360,1435p' supabase/schema.sql","sed -n '486,525p' supabase/schema.sql",{"_637":1057,"_616":617,"_639":623},{"_706":1058,"_678":1037,"_45":1059,"_644":1060,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"sed -n '486,525p' supabase/schema.sql; sed -n '1360,1435p' supabase/schema.sql; sed -n '1960,2050p' supabase/schema.sql\",\"workdir\":\"/workspace/Database\",\"max_output_tokens\":12000}","fc_03a2e9824edee382016a60a9bc2cfc8197958abb486d669787",{"_649":623},{"_637":1062,"_616":617,"_639":623},{"_640":-5,"_661":1063,"_45":1064,"_644":1065,"_665":1066,"_96":667},"gAAAAABqYKm8LW685MpFJKshuhlcPU1xA4FqkQMwqC6lO4LlsAC0Qui1istSMQ_q81cXc4ZDfQXYCB8SAJgpX2FqD_gLZV85S3YW9pLsalzQePVqE4WVpYAzrvyzimAdfcvU8DRWz_dvAIhGd2YIZqSZ6RbXxrYr-95jct77gqQRIciSkmApfJfSBFYtIQRxjn5IKG4nJbcplGOhHLzI0nGoq3ZY94RIZPrZbzPDV-Y0dD7UtTJVDGVi-oxCgiQGkKQa5M7ZShCmjm3vyryL3c3OFTkwpl1h7eWoPKd3WID2sM0scRSvfG9rcUIM8vxb4lUOzfPGo7U9w5gPQvrUENUWUUPPVZFG-EqyjFgMpsOUqy7TTNQct8QLSIopxvnfNRdiF2tlKjGDwSjInIVLISx87phmhp_Z-uT-EHVGq-tfVzhXoLIBfw4JGKBv4CcpJK4GihJYQFnR4eYAIROfJ6O8-RhXdEh9m4vdc4WzyfbRW3-4lgUQFQwLNzvPXUC5hN-pCceVyk1i-E8rPJYtOyz9bXKy7dtQoYmrDrHWxLli-txAWIvveTu4cxJQxsp8ar3jm2CzbhhORr5itGFk7XTTqh3j3F-bCnMB_VJBLP02_xIA_0_5EbH9ZOZNiazpFCLEdXA-wlCic2cdxTEQZiV_MkO7YcUvCBsd_YzIAFkfYpfZ3D3jncd3xmN089f2R0nBLyo8A3v0RukORnSxUBbCI59yTK9BV0KLYjTVQ5NFzA1lXZZ36qRwrESwqZctHX70AkxhIH1tm67LWvXxlzGCwK9hxu3F6kI1juyubkeQaXzmMWHgx9vNG6Ik08D9v-LblDoEiEYPv01KEgg5g1GqcVb-qXR-WoagkYtDLmd8S5wJp8IGH2U-RWaIDM6LwbXPXg4XHMcjuEomthUA-7ArVlBrJClBhLAuGYPXat7UfWRLhsBf7qjXsQON-M_qXQpmkOrvFouNp_7ToDyJKC4xGn_VWo99Y96r_nchxu4GRkY7_u75QS5xOZir-NBXiMMVP7nLBcWvjawdEeYum2OWqWdi-OtYGy05-DLsUxhnBjuB_Xa_VUcdmPKOLyQ5Ea_xMd0hmEA28X3EPWj6DoPvk7h5Np94KT1O3cmvqct3TJ_mb9EtVC4=","rs_03a2e9824edee382016a60a9bb18008197bf1cc1422332a596",{"_649":623},[1067],{"_49":1068,"_96":670},"**Planning unified migration and schema update**",{"_655":1070,"_637":1071,"_616":617,"_639":623},1784719804073,{"_640":1072,"_45":1064,"_665":1073,"_96":667},[],[1068],{"_637":1075,"_616":617,"_639":623},{"_678":1076,"_45":-5,"_644":1077,"_681":1078,"_96":683},"call_2eAj3O5qqiMFhFfhF4OEiBQs",{"_649":623},"Chunk ID: 7c8f9a\nWall time: 0.0003 seconds\nProcess exited with code 0\nOriginal token count: 3303\nOutput:\n 'manifest_digest', v_manifest_digest,\n 'published_count', v_count,\n 'documents', v_results\n );\nend;\n$$;\n\nrevoke all on function public.publish_approved_documents(jsonb, text, integer) from public, anon, authenticated;\ngrant execute on function public.publish_approved_documents(jsonb, text, integer) to service_role;\n );\n expect(sql).not.toContain(\"set local role\");\n expect(sql).toContain(\"public.default_privileges_status('postgres', 'public')\");\n }\n });\n\n it(\"requires append-only operator evidence for owned-to-public transitions\", () => {\n for (const sql of [schema, publicationApprovalMigration]) {\n expect(sql).toContain(\"create table if not exists public.document_publication_approvals\");\n expect(sql).toContain(\"check (cardinality(evidence_references) > 0)\");\n expect(sql).toContain(\"unique (document_id, expected_prior_owner_id, manifest_digest)\");\n expect(sql).toContain(\"before update or delete on public.document_publication_approvals\");\n expect(sql).toContain(\"before insert or update on public.documents\");\n expect(sql).toContain(\"if tg_op = 'INSERT' then\");\n expect(sql).toContain(\"public documents must be created as owned rows before approved publication\");\n expect(sql).toContain(\"old.owner_id is not null and new.owner_id is null\");\n expect(sql).toContain(\"approval.expected_prior_owner_id = old.owner_id\");\n expect(sql).toContain(\"create or replace function public.publish_approved_documents(\");\n expect(sql).toContain(\"for update;\");\n expect(sql).toContain(\n \"grant execute on function public.publish_approved_documents(jsonb, text, integer) to service_role;\",\n );\n }\n });\n\n it(\"binds publication approval to canonical reviewed content under the document lock\", () => {\n for (const sql of [schema, publicationReviewedStateMigration]) {\n expect(sql).toContain(\"reviewed_state_digest\");\n expect(sql).toContain(\"create or replace function public.document_publication_state_digest(\");\n expect(sql).toContain(\"publication approval requires a reviewed content/state digest\");\n expect(sql).toContain(\"v_current_state_digest := public.document_publication_state_digest(\");\n expect(sql).toContain(\"publication document % changed after review\");\n expect(sql).toContain(\"'publication_reviewed_state_digest', v_expected_state_digest\");\n\n const functionStart = sql.indexOf(\"create or replace function public.publish_approved_documents(\");\n const functionBody = sql.slice(functionStart, sql.indexOf(\"$$;\", functionStart));\n for (const table of [\n \"document_pages\",\n \"document_images\",\n \"document_labels\",\n \"document_summaries\",\n \"document_sections\",\n \"document_memory_cards\",\n \"document_chunks\",\n \"document_table_facts\",\n \"document_embedding_fields\",\n \"document_index_quality\",\n \"document_index_units\",\n ]) {\n expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\n }\n expect(functionBody.indexOf(\"for update;\")).toBeLessThan(\n functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n );\n\n const guardStart = sql.indexOf(\"create or replace function public.guard_document_publication_transition(\");\n const guardBody = sql.slice(guardStart, sql.indexOf(\"$$;\", guardStart));\n expect(guardBody).toContain(\"perform 1 from public.document_chunks where document_id = old.id for update;\");\n expect(guardBody.indexOf(\"for update;\")).toBeLessThan(\n guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n );\n }\n });\n\n it(\"serializes permanent deletion against ingestion job creation\", () => {\n for (const sql of [schema, deleteDocumentIfIdleMigration]) {\n const functionStart = sql.indexOf(\"create or replace function public.delete_document_if_idle(\");\n const functionBody = sql.slice(functionStart, sql.indexOf(\"$$;\", functionStart));\n const rowLock = functionBody.indexOf(\"for update;\");\n const activeJobCheck = functionBody.indexOf(\"from public.ingestion_jobs j\");\n const ledgerInsert = functionBody.indexOf(\"insert into public.storage_cleanup_jobs\");\n const parentDelete = functionBody.indexOf(\"delete from public.documents\");\n expect(rowLock).toBeGreaterThanOrEqual(0);\n expect(rowLock).toBeLessThan(activeJobCheck);\n expect(activeJobCheck).toBeLessThan(ledgerInsert);\n expect(ledgerInsert).toBeLessThan(parentDelete);\n expect(sql).toContain(\n \"grant execute on function public.delete_document_if_idle(uuid, uuid, text, text) to service_role;\",\n );\n const retryStart = sql.indexOf(\"create or replace function public.retry_ingestion_job_if_idle(\");\n const retryBody = sql.slice(retryStart, sql.indexOf(\"$$;\", retryStart));\n expect(retryBody).toContain(\"for update of d, j;\");\n expect(retryBody.indexOf(\"for update of d, j;\")).toBeLessThan(retryBody.indexOf(\"update public.ingestion_jobs\"));\n expect(retryBody).toContain(\"update public.documents\");\n expect(sql).toContain(\n \"grant execute on function public.retry_ingestion_job_if_idle(uuid, uuid, timestamptz, integer, timestamptz, timestamptz) to service_role;\",\n );\n }\n });\n\n it(\"fails closed on effective postgres default ACLs\", () => {\n for (const sql of [schema, defaultAclAssertionMigration, defaultAclRepairMigration]) {\n expect(sql).toContain(\"create or replace function public.default_privileges_status(\");\n expect(sql).toContain(\"pg_catalog.acldefault(ot.object_code, v_role_oid)\");\n expect(sql).toContain(\"pg_catalog.aclexplode(ea.acl)\");\n expect(sql).toContain(\"bool_or(grantee not in (p_role_name, 'service_role'))\");\nbegin;\n\ninsert into auth.users (id, aud, role, email, encrypted_password, created_at, updated_at)\nvalues\n ('aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'authenticated', 'authenticated', 'publication-owner@example.invalid', '', now(), now()),\n ('bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'authenticated', 'authenticated', 'publication-operator@example.invalid', '', now(), now())\non conflict (id) do nothing;\n\ninsert into public.documents (id, owner_id, title, file_name, file_type, storage_path, status)\nvalues\n ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Approved fixture', 'approved.pdf', 'application/pdf', 'fixtures/approved.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Private fixture', 'private.pdf', 'application/pdf', 'fixtures/private.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Quarantine fixture', 'quarantine.pdf', 'application/pdf', 'fixtures/quarantine.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000004', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Unapproved fixture', 'unapproved.pdf', 'application/pdf', 'fixtures/unapproved.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed');\n\ninsert into public.document_labels (document_id, owner_id, label, label_type, source)\nvalues ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'publication fixture', 'custom', 'manual');\n\ninsert into public.document_publication_approvals (\n document_id, expected_prior_owner_id, approving_operator_id, decision, reason, evidence_references,\n manifest_digest, reviewed_state_digest\n)\nvalues\n ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Approved publication fixture.', array['fixture:approved'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'keep_private', 'Private publication fixture.', array['fixture:private'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'quarantine', 'Quarantine publication fixture.', array['fixture:quarantine'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\n\nselect public.publish_approved_documents(\n jsonb_build_array(jsonb_build_object(\n 'document_id', '10000000-0000-4000-8000-000000000001',\n 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 'expected_state_digest', public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')\n )),\n repeat('a', 64),\n 1\n);\n\ndo $$\nbegin\n if not exists (\n select 1 from public.documents\n where id = '10000000-0000-4000-8000-000000000001'\n and owner_id is null\n and metadata->>'publication_manifest_digest' = repeat('a', 64)\n ) then raise exception 'approved publication fixture was not published'; end if;\n if not exists (\n select 1 from public.document_labels\n where document_id = '10000000-0000-4000-8000-000000000001' and owner_id is null\n ) then raise exception 'approved publication artifact owner was not updated'; end if;\n if exists (\n select 1 from public.documents\n where id in ('10000000-0000-4000-8000-000000000002', '10000000-0000-4000-8000-000000000003')\n and owner_id is null\n ) then raise exception 'private or quarantine publication fixture was published'; end if;\n\n update public.documents\n set title = 'Changed after approval'\n where id = '10000000-0000-4000-8000-000000000006';\n begin\n perform public.publish_approved_documents(\n jsonb_build_array(jsonb_build_object(\n 'document_id', '10000000-0000-4000-8000-000000000006',\n 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 'expected_state_digest', (\n select reviewed_state_digest from public.document_publication_approvals\n where document_id = '10000000-0000-4000-8000-000000000006'\n )\n )),\n repeat('b', 64),\n 1\n );\n raise exception 'post-review document mutation unexpectedly published';\n exception when others then\n if sqlerrm = 'post-review document mutation unexpectedly published' then raise; end if;\n if sqlerrm not like 'publication document % changed after review' then raise; end if;\n end;\n\n begin\n update public.documents\n set owner_id = null, metadata = metadata || jsonb_build_object('public_corpus', true)\n where id = '10000000-0000-4000-8000-000000000004';\n raise exception 'unapproved publication fixture unexpectedly published';\n exception when others then\n if sqlerrm = 'unapproved publication fixture unexpectedly published' then raise; end if;\n end;\n\n begin\n insert into public.documents (id, owner_id, title, file_name, file_type, storage_path, status)\n values (\n '10000000-0000-4000-8000-000000000005',\n null,\n 'Direct public insert fixture',\n 'direct-public.pdf',\n 'application/pdf',\n 'fixtures/direct-public.pdf',\n 'indexed'\n );\n raise exception 'direct public document insert unexpectedly succeeded';\n exception when others then\n if sqlerrm = 'direct public document insert unexpectedly succeeded' then raise; end if;\n if sqlstate <> 'P0001'\n or sqlerrm <> 'public documents must be created as owned rows before approved publication' then\n raise;\n end if;\n end;\n\n begin\n insert into public.document_publication_approvals (\n document_id, expected_prior_owner_id, approving_operator_id, decision, reason, evidence_references,\n manifest_digest, reviewed_state_digest\n ) values (\n '10000000-0000-4000-8000-000000000001',\n 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb',\n 'quarantine',\n 'Contradictory decision fixture.',\n array['fixture:contradictory'],\n repeat('a', 64),\n repeat('c', 64)\n );\n raise exception 'contradictory publication approval unexpectedly succeeded';\n exception when unique_violation then\n null;\n end;\n\n begin\n update public.document_publication_approvals set reason = 'mutated'\n where document_id = '10000000-0000-4000-8000-000000000001';\n raise exception 'publication approval ledger unexpectedly allowed mutation';\n exception when others then\n if sqlerrm = 'publication approval ledger unexpectedly allowed mutation' then raise; end if;\n end;\nend $$;\n\nrollback;\n",{"_655":1080,"_637":1081,"_616":617,"_639":623},1784719801001,{"_687":1082,"_689":1083,"_691":1084,"_693":694,"_621":35,"_695":35,"_45":1076,"_696":1085,"_698":699,"_630":117,"_96":700}," 'manifest_digest', v_manifest_digest,\n 'published_count', v_count,\n 'documents', v_results\n );\nend;\n$$;\n\nrevoke all on function public.publish_approved_documents(jsonb, text, integer) from public, anon, authenticated;\ngrant execute on function public.publish_approved_documents(jsonb, text, integer) to service_role;\n );\n expect(sql).not.toContain(\"set local role\");\n expect(sql).toContain(\"public.default_privileges_status('postgres', 'public')\");\n }\n });\n\n it(\"requires append-only operator evidence for owned-to-public transitions\", () => {\n for (const sql of [schema, publicationApprovalMigration]) {\n expect(sql).toContain(\"create table if not exists public.document_publication_approvals\");\n expect(sql).toContain(\"check (cardinality(evidence_references) > 0)\");\n expect(sql).toContain(\"unique (document_id, expected_prior_owner_id, manifest_digest)\");\n expect(sql).toContain(\"before update or delete on public.document_publication_approvals\");\n expect(sql).toContain(\"before insert or update on public.documents\");\n expect(sql).toContain(\"if tg_op = 'INSERT' then\");\n expect(sql).toContain(\"public documents must be created as owned rows before approved publication\");\n expect(sql).toContain(\"old.owner_id is not null and new.owner_id is null\");\n expect(sql).toContain(\"approval.expected_prior_owner_id = old.owner_id\");\n expect(sql).toContain(\"create or replace function public.publish_approved_documents(\");\n expect(sql).toContain(\"for update;\");\n expect(sql).toContain(\n \"grant execute on function public.publish_approved_documents(jsonb, text, integer) to service_role;\",\n );\n }\n });\n\n it(\"binds publication approval to canonical reviewed content under the document lock\", () => {\n for (const sql of [schema, publicationReviewedStateMigration]) {\n expect(sql).toContain(\"reviewed_state_digest\");\n expect(sql).toContain(\"create or replace function public.document_publication_state_digest(\");\n expect(sql).toContain(\"publication approval requires a reviewed content/state digest\");\n expect(sql).toContain(\"v_current_state_digest := public.document_publication_state_digest(\");\n expect(sql).toContain(\"publication document % changed after review\");\n expect(sql).toContain(\"'publication_reviewed_state_digest', v_expected_state_digest\");\n\n const functionStart = sql.indexOf(\"create or replace function public.publish_approved_documents(\");\n const functionBody = sql.slice(functionStart, sql.indexOf(\"$$;\", functionStart));\n for (const table of [\n \"document_pages\",\n \"document_images\",\n \"document_labels\",\n \"document_summaries\",\n \"document_sections\",\n \"document_memory_cards\",\n \"document_chunks\",\n \"document_table_facts\",\n \"document_embedding_fields\",\n \"document_index_quality\",\n \"document_index_units\",\n ]) {\n expect(functionBody).toContain(`perform 1 from public.${table} where document_id = v_document_id for update;`);\n }\n expect(functionBody.indexOf(\"for update;\")).toBeLessThan(\n functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n );\n\n const guardStart = sql.indexOf(\"create or replace function public.guard_document_publication_transition(\");\n const guardBody = sql.slice(guardStart, sql.indexOf(\"$$;\", guardStart));\n expect(guardBody).toContain(\"perform 1 from public.document_chunks where document_id = old.id for update;\");\n expect(guardBody.indexOf(\"for update;\")).toBeLessThan(\n guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\n );\n }\n });\n\n it(\"serializes permanent deletion against ingestion job creation\", () => {\n for (const sql of [schema, deleteDocumentIfIdleMigration]) {\n const functionStart = sql.indexOf(\"create or replace function public.delete_document_if_idle(\");\n const functionBody = sql.slice(functionStart, sql.indexOf(\"$$;\", functionStart));\n const rowLock = functionBody.indexOf(\"for update;\");\n const activeJobCheck = functionBody.indexOf(\"from public.ingestion_jobs j\");\n const ledgerInsert = functionBody.indexOf(\"insert into public.storage_cleanup_jobs\");\n const parentDelete = functionBody.indexOf(\"delete from public.documents\");\n expect(rowLock).toBeGreaterThanOrEqual(0);\n expect(rowLock).toBeLessThan(activeJobCheck);\n expect(activeJobCheck).toBeLessThan(ledgerInsert);\n expect(ledgerInsert).toBeLessThan(parentDelete);\n expect(sql).toContain(\n \"grant execute on function public.delete_document_if_idle(uuid, uuid, text, text) to service_role;\",\n );\n const retryStart = sql.indexOf(\"create or replace function public.retry_ingestion_job_if_idle(\");\n const retryBody = sql.slice(retryStart, sql.indexOf(\"$$;\", retryStart));\n expect(retryBody).toContain(\"for update of d, j;\");\n expect(retryBody.indexOf(\"for update of d, j;\")).toBeLessThan(retryBody.indexOf(\"update public.ingestion_jobs\"));\n expect(retryBody).toContain(\"update public.documents\");\n expect(sql).toContain(\n \"grant execute on function public.retry_ingestion_job_if_idle(uuid, uuid, timestamptz, integer, timestamptz, timestamptz) to service_role;\",\n );\n }\n });\n\n it(\"fails closed on effective postgres default ACLs\", () => {\n for (const sql of [schema, defaultAclAssertionMigration, defaultAclRepairMigration]) {\n expect(sql).toContain(\"create or replace function public.default_privileges_status(\");\n expect(sql).toContain(\"pg_catalog.acldefault(ot.object_code, v_role_oid)\");\n expect(sql).toContain(\"pg_catalog.aclexplode(ea.acl)\");\n expect(sql).toContain(\"bool_or(grantee not in (p_role_name, 'service_role'))\");\nbegin;\n\ninsert into auth.users (id, aud, role, email, encrypted_password, created_at, updated_at)\nvalues\n ('aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'authenticated', 'authenticated', 'publication-owner@example.invalid', '', now(), now()),\n ('bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'authenticated', 'authenticated', 'publication-operator@example.invalid', '', now(), now())\non conflict (id) do nothing;\n\ninsert into public.documents (id, owner_id, title, file_name, file_type, storage_path, status)\nvalues\n ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Approved fixture', 'approved.pdf', 'application/pdf', 'fixtures/approved.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Private fixture', 'private.pdf', 'application/pdf', 'fixtures/private.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Quarantine fixture', 'quarantine.pdf', 'application/pdf', 'fixtures/quarantine.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000004', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Unapproved fixture', 'unapproved.pdf', 'application/pdf', 'fixtures/unapproved.pdf', 'indexed'),\n ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'Post-review mutation fixture', 'changed.pdf', 'application/pdf', 'fixtures/changed.pdf', 'indexed');\n\ninsert into public.document_labels (document_id, owner_id, label, label_type, source)\nvalues ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'publication fixture', 'custom', 'manual');\n\ninsert into public.document_publication_approvals (\n document_id, expected_prior_owner_id, approving_operator_id, decision, reason, evidence_references,\n manifest_digest, reviewed_state_digest\n)\nvalues\n ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Approved publication fixture.', array['fixture:approved'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'keep_private', 'Private publication fixture.', array['fixture:private'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'quarantine', 'Quarantine publication fixture.', array['fixture:quarantine'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\n ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\n\nselect public.publish_approved_documents(\n jsonb_build_array(jsonb_build_object(\n 'document_id', '10000000-0000-4000-8000-000000000001',\n 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 'expected_state_digest', public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')\n )),\n repeat('a', 64),\n 1\n);\n\ndo $$\nbegin\n if not exists (\n select 1 from public.documents\n where id = '10000000-0000-4000-8000-000000000001'\n and owner_id is null\n and metadata->>'publication_manifest_digest' = repeat('a', 64)\n ) then raise exception 'approved publication fixture was not published'; end if;\n if not exists (\n select 1 from public.document_labels\n where document_id = '10000000-0000-4000-8000-000000000001' and owner_id is null\n ) then raise exception 'approved publication artifact owner was not updated'; end if;\n if exists (\n select 1 from public.documents\n where id in ('10000000-0000-4000-8000-000000000002', '10000000-0000-4000-8000-000000000003')\n and owner_id is null\n ) then raise exception 'private or quarantine publication fixture was published'; end if;\n\n update public.documents\n set title = 'Changed after approval'\n where id = '10000000-0000-4000-8000-000000000006';\n begin\n perform public.publish_approved_documents(\n jsonb_build_array(jsonb_build_object(\n 'document_id', '10000000-0000-4000-8000-000000000006',\n 'expected_owner_id', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 'expected_state_digest', (\n select reviewed_state_digest from public.document_publication_approvals\n where document_id = '10000000-0000-4000-8000-000000000006'\n )\n )),\n repeat('b', 64),\n 1\n );\n raise exception 'post-review document mutation unexpectedly published';\n exception when others then\n if sqlerrm = 'post-review document mutation unexpectedly published' then raise; end if;\n if sqlerrm not like 'publication document % changed after review' then raise; end if;\n end;\n\n begin\n update public.documents\n set owner_id = null, metadata = metadata || jsonb_build_object('public_corpus', true)\n where id = '10000000-0000-4000-8000-000000000004';\n raise exception 'unapproved publication fixture unexpectedly published';\n exception when others then\n if sqlerrm = 'unapproved publication fixture unexpectedly published' then raise; end if;\n end;\n\n begin\n insert into public.documents (id, owner_id, title, file_name, file_type, storage_path, status)\n values (\n '10000000-0000-4000-8000-000000000005',\n null,\n 'Direct public insert fixture',\n 'direct-public.pdf',\n 'application/pdf',\n 'fixtures/direct-public.pdf',\n 'indexed'\n );\n raise exception 'direct public document insert unexpectedly succeeded';\n exception when others then\n if sqlerrm = 'direct public document insert unexpectedly succeeded' then raise; end if;\n if sqlstate <> 'P0001'\n or sqlerrm <> 'public documents must be created as owned rows before approved publication' then\n raise;\n end if;\n end;\n\n begin\n insert into public.document_publication_approvals (\n document_id, expected_prior_owner_id, approving_operator_id, decision, reason, evidence_references,\n manifest_digest, reviewed_state_digest\n ) values (\n '10000000-0000-4000-8000-000000000001',\n 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa',\n 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb',\n 'quarantine',\n 'Contradictory decision fixture.',\n array['fixture:contradictory'],\n repeat('a', 64),\n repeat('c', 64)\n );\n raise exception 'contradictory publication approval unexpectedly succeeded';\n exception when unique_violation then\n null;\n end;\n\n begin\n update public.document_publication_approvals set reason = 'mutated'\n where document_id = '10000000-0000-4000-8000-000000000001';\n raise exception 'publication approval ledger unexpectedly allowed mutation';\n exception when others then\n if sqlerrm = 'publication approval ledger unexpectedly allowed mutation' then raise; end if;\n end;\nend $$;\n\nrollback;\n","/bin/bash -lc \"sed -n '360,440p' supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql; sed -n '1160,1255p' tests/supabase-schema.test.ts; sed -n '1,140p' scripts/sql/verify-publication-approval.sql\"",[1086,1087,1088],"18886",{"_689":1095,"_371":1096,"_259":1097,"_96":1053},{"_689":1092,"_371":1093,"_259":1094,"_96":1053},{"_689":1089,"_371":1090,"_259":1091,"_96":1053},"sed -n '1,140p' scripts/sql/verify-publication-approval.sql","verify-publication-approval.sql","/workspace/Database/scripts/sql/verify-publication-approval.sql","sed -n '1160,1255p' tests/supabase-schema.test.ts","supabase-schema.test.ts","/workspace/Database/tests/supabase-schema.test.ts","sed -n '360,440p' supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql","20260722190000_bind_publication_approval_to_reviewed_state.sql","/workspace/Database/supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql",{"_637":1099,"_616":617,"_639":623},{"_706":1100,"_678":1076,"_45":1101,"_644":1102,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"sed -n '360,440p' supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql; sed -n '1160,1255p' tests/supabase-schema.test.ts; sed -n '1,140p' scripts/sql/verify-publication-approval.sql\",\"workdir\":\"/workspace/Database\",\"max_output_tokens\":20000}","fc_03a2e9824edee382016a60a9b7916881979f509d5382c0f806",{"_649":623},{"_637":1104,"_616":617,"_639":623},{"_640":-5,"_661":1105,"_45":1106,"_644":1107,"_665":1108,"_96":667},"gAAAAABqYKm3-zaVEFdvw4fsFio4irdOQtDMMsSCgnOOmxRKJl_Ga1JvhGTsfAKkFRDtl9bs18xVLMyqM-C91IUwCXNymnKVZZV9XQv7mBwyxJ7-TJLw6Yf8iqMkB6j31lGpB80jnihSGWKF4LEY4L9gGW7J4mFKLIW82eIWClyW4526iH3byV-BHfKcvNpQUJrO2o69MYEud4yTQMDnwkmAYpRTUAEobiAo8UUAv1Z5Sl86ZJQivowXhnGfaUffcv_q4xaNEX5voMebqH-W0VuKYzSfGvqs9h_9JM72RjN-iyLrlBJ29xKONQ9Z567xmDfVQgNCNcHunvYjAWENW9x7IDq4u1SFicEcsfw-GVISm3w_D44byQKvNkhnkUZ62pY4hj0A6yhZ4Uz4sbNNiQxvpKpnmxBtr1r_E5U_zw-esS2LhOSJLhMQEiIKMgRPtQM6UIEjrm8zHFEkaf1aJ7oHHfVgfz46ApcfdoDCLPw1Vk4A_wrFxbN-jH48ByV_rYaJuPKOxESm3tXtzUOmnp4RPPTVmUF4LDOesSiSLgwYznIUJEJr8noq-oqWO43wi9U9Z_f77xTeIrlAjHCZlXx6zcI-nwjGMRO5udU6cr3TBDQDV7EHGOfscvHuJnGWxwzQlplxtiy-QR0wFPLL3xT8KFM2d0UI0eJMTTWAoc5N9kgdBx7EY1LpiZ1qvg7jmr-EggEX64xiMMSmsRK7p0nfnlPsbbq1x5B918b_T1kqXbwBM88Yew-4oa9GA-pf7vKAYvsTOULSihXAN8V7_wzeVYJmgL-sAzqY140I1-Si3xjDuWabP-BuyX82djUeCM9Am03VTIUJOvESEud8SC-zoGUy_VZSAPm6Xut5ihlmmBUztgYzN0Vb2ZZBM2IZjFT64F7HSz1b4crM9tRY_pdZR8JqNhKj48-gGk3pCJRPcO-Xwzv7BMHkiso9kZIqfyF44j0vTzOk5Ky0V8-Wmu3H4cBSfeNQi4369ZzNifxSi3eiRREblcWkywBDZvJc6hpjdd47fe5pzNSBtralg0Nov7LDLIis7w==","rs_03a2e9824edee382016a60a9b6d5a88197b1863c66fe2c27c4",{"_649":623},[1109],{"_49":1110,"_96":670},"**Verifying ActiveJob check in tests**",{"_655":1112,"_637":1113,"_616":617,"_639":623},1784719799473,{"_640":1114,"_45":1106,"_665":1115,"_96":667},[],[1110],{"_637":1117,"_616":617,"_639":623},{"_678":1118,"_45":-5,"_644":1119,"_681":1120,"_96":683},"call_PObR3S0CxOE52pihQ26KqdOS",{"_649":623},"Chunk ID: 77a008\nWall time: 0.0021 seconds\nProcess exited with code 0\nOriginal token count: 16552\nOutput:\nWarning: truncated output (original token count: 16552)\nTotal output lines: 760\n\n-- Bind every new publication decision to the exact document and committed\n-- artifact state that the operator reviewed. Historical approvals remain\n-- readable but cannot be used for a new publication because they have no\n-- reviewed_state_digest.\n\nalter table public.document_publication_approvals\n add column if not exists reviewed_state_digest text;\n\nalter table public.document_publication_approvals\n drop constraint if exists document_publication_approvals_reviewed_state_digest_format;\nalter table public.document_publication_approvals\n add constraint document_publication_approvals_reviewed_state_digest_format\n check (reviewed_state_digest is null or reviewed_state_digest ~ '^[0-9a-f]{64}$');\n\ncreate or replace function public.document_publication_state_digest(\n p_document_id uuid,\n p_expected_owner_id uuid\n)\nreturns text\nlanguage sql\nstable\nsecurity definer\nset search_path = ''\nas $$\n select encode(\n extensions.digest(\n convert_to(\n jsonb_build_object(\n 'document', to_jsonb(d) - array['owner_id', 'created_at', 'updated_at', 'search_tsv', 'title_search_tsv'],\n 'pages', coalesce((\n select jsonb_agg(to_jsonb(p) - array['created_at', 'updated_at'] order by p.page_number, p.id)\n from public.document_pages p where p.document_id = d.id\n ), '[]'::jsonb),\n 'images', coalesce((\n select jsonb_agg(to_jsonb(i) - array['created_at', 'updated_at'] order by i.page_number nulls last, i.id)\n from public.document_images i\n where i.document_id = d.id\n and public.is_committed_document_generation(i.index_generation_id, d.index_generation_id)\n ), '[]'::jsonb),\n 'labels', coalesce((\n select jsonb_agg(to_jsonb(l) - array['owner_id', 'created_at', 'updated_at'] order by l.id)\n from public.document_labels l where l.document_id = d.id\n ), '[]'::jsonb),\n 'summaries', coalesce((\n select jsonb_agg(to_jsonb(s) - array['owner_id', 'created_at', 'updated_at'] order by s.id)\n from public.document_summaries s where s.document_id = d.id\n ), '[]'::jsonb),\n 'sections', coalesce((\n select jsonb_agg(to_jsonb(s) - array['owner_id', 'created_at', 'updated_at'] order by s.section_index, s.id)\n from public.document_sections s\n where s.document_id = d.id\n and public.is_committed_artifact_generation(\n coalesce(s.artifact_generation_id, s.index_generation_id),\n d.metadata\n )\n ), '[]'::jsonb),\n 'memory_cards', coalesce((\n select jsonb_agg(\n to_jsonb(m) - array['owner_id', 'embedding', 'search_tsv', 'created_at', 'updated_at']\n order by m.id\n )\n from public.document_memory_cards m\n where m.document_id = d.id\n and public.is_committed_artifact_generation(\n coalesce(m.artifact_generation_id, m.index_generation_id),\n d.metadata\n )\n ), '[]'::jsonb),\n 'chunks', coalesce((\n select jsonb_agg(to_jsonb(c) - array['embedding', 'search_tsv', 'created_at'] order by c.chunk_index, c.id)\n from public.document_chunks c\n where c.document_id = d.id\n and public.is_committed_document_generation(c.index_generation_id, d.index_generation_id)\n ), '[]'::jsonb),\n 'table_facts', coalesce((\n select jsonb_agg(to_jsonb(f) - array['owner_id', 'search_tsv', 'created_at'] order by f.id)\n from public.document_table_facts f\n where f.document_id = d.id\n and public.is_committed_document_generation(f.index_generation_id, d.index_generation_id)\n ), '[]'::jsonb),\n 'embedding_fields', coalesce((\n select jsonb_agg(\n to_jsonb(f) - array['owner_id', 'embedding', 'search_tsv', 'created_at']\n order by f.id\n )\n from public.document_embedding_fields f\n where f.document_id = d.id\n and public.is_committed_document_generation(f.index_generation_id, d.index_generation_id)\n ), '[]'::jsonb),\n 'index_quality', coalesce((\n select to_jsonb(q) - array['owner_id', 'updated_at']\n from public.document_index_quality q where q.document_id = d.id\n ), '{}'::jsonb),\n 'index_units', coalesce((\n select jsonb_agg(\n to_jsonb(u) - array['owner_id', 'embedding', 'search_tsv', 'created_at', 'updated_at']\n order by u.id\n )\n from public.document_index_units u\n where u.document_id = d.id\n and public.is_committed_artifact_generation(\n coalesce(u.artifact_generation_id, u.index_generation_id),\n d.metadata\n )\n ), '[]'::jsonb)\n )::text,\n 'UTF8'\n ),\n 'sha256'\n ),\n 'hex'\n )\n from public.documents d\n where d.id = p_document_id\n and d.owner_id = p_expected_owner_id;\n$$;\n\nrevoke all on function public.document_publication_state_digest(uuid, uuid) from public, anon, authenticated;\ngrant execute on function public.document_publication_state_digest(uuid, uuid) to service_role;\n\ncreate or replace function public.require_document_publication_approval_state_digest()\nreturns trigger\nlanguage plpgsql\nset search_path = ''\nas $$\nbegin\n if new.reviewed_state_digest is null then\n raise exception 'publication approval requires a reviewed content/state digest';\n end if;\n return new;\nend;\n$$;\n\nrevoke all on function public.require_document_publication_approval_state_digest() from public, anon, authenticated;\n\ndrop trigger if exists document_publication_approvals_require_state_digest on public.document_publication_approvals;\ncreate trigger document_publication_approvals_require_state_digest\nbefore insert on public.document_publication_approvals\nfor each row execute function public.require_document_publication_approval_state_digest();\n\ncreate or replace function public.guard_document_publication_transition()\nreturns trigger\nlanguage plpgsql\nset search_path = ''\nas $$\ndeclare\n v_approval_id uuid;\n v_manifest_digest text;\n v_reviewed_state_digest text;\n v_current_state_digest text;\nbegin\n if tg_op = 'INSERT' then\n if new.owner_id is null then\n raise exception 'public documents must be created as owned rows before approved publication';\n end if;\n return new;\n end if;\n\n if old.owner_id is not null and new.owner_id is null then\n begin\n v_approval_id := nullif(new.metadata->>'publication_approval_id', '')::uuid;\n exception when invalid_text_representation then\n raise exception 'public document transition has an invalid publication approval id';\n end;\n v_manifest_digest := lower(coalesce(new.metadata->>'publication_manifest_digest', ''));\n v_reviewed_state_digest := lower(coalesce(new.metadata->>'publication_reviewed_state_digest', ''));\n\n if v_approval_id is null\n or v_manifest_digest !~ '^[0-9a-f]{64}$'\n or v_reviewed_state_digest !~ '^[0-9a-f]{64}$' then\n raise exception 'public document transition requires publication approval evidence';\n end if;\n\n if not exists (\n select 1\n from public.document_publication_approvals approval\n where approval.id = v_approval_id\n and approval.document_id = old.id\n and approval.expected_prior_owner_id = old.owner_id\n and approval.decision = 'approved'\n and approval.manifest_digest = v_manifest_digest\n and approval.reviewed_state_digest = v_reviewed_state_digest\n ) then\n raise exception 'public document transition approval does not match the reviewed document state';\n end if;\n\n perform 1 from public.document_pages where document_id = old.id for update;\n perform 1 from public.document_images where document_id = old.id for update;\n perform 1 from public.document_labels where document_id = old.id for update;\n perform 1 from public.document_summaries where document_id = old.id for update;\n perform 1 from public.document_sections where document_id = old.id for update;\n perform 1 from public.document_memory_cards where document_id = old.id for update;\n perform 1 from public.document_chunks where document_id = old.id for update;\n perform 1 from public.document_table_facts where document_id = old.id for update;\n perform 1 from public.document_embedding_fields where document_id = old.id for update;\n perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n\n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n if v_current_state_digest is distinct from v_reviewed_state_digest then\n raise exception 'public document transition content changed after review';\n end if;\n end if;\n return new;\nend;\n$$;\n\nrevoke all on function public.guard_document_publication_transition() from public, anon, authenticated;\n\ncreate or replace function public.publish_approved_documents(\n p_documents jsonb,\n p_manifest_digest text,\n p_expected_count integer\n)\nreturns jsonb\nlanguage plpgsql\nsecurity definer\nset search_path = ''\nas $$\ndeclare\n v_entry jsonb;\n v_document public.documents%rowtype;\n v_document_id uuid;\n v_expected_owner_id uuid;\n v_expected_state_digest text;\n v_current_state_digest text;\n v_approval_id uuid;\n v_manifest_digest text := lower(trim(coalesce(p_manifest_digest, '')));\n v_count integer;\n v_results jsonb := '[]'::jsonb;\nbegin\n if jsonb_typeof(p_documents) is distinct from 'array' then\n raise exception 'publication documents must be a JSON array';\n end if;\n if v_manifest_digest !~ '^[0-9a-f]{64}$' then\n raise exception 'publication manifest digest must be a lowercase SHA-256 value';\n end if;\n\n v_count := jsonb_array_length(p_documents);\n if p_expected_count is null or p_expected_count < 1 or p_expected_count <> v_count then\n raise exception 'publication expected count % does not match manifest count %', p_expected_count, v_count;\n end if;\n if exists (\n select 1\n from jsonb_array_elements(p_documents) entry\n group by entry->>'document_id'\n having count(*) > 1\n ) then\n raise exception 'publication manifest contains duplicate document ids';\n end if;\n\n for v_entry in select value from jsonb_array_elements(p_documents)\n loop\n begin\n v_document_id := nullif(v_entry->>'document_id', '')::uuid;\n v_expected_owner_id := nullif(v_entry->>'expected_owner_id', '')::uuid;\n exception when invalid_text_representation then\n raise exception 'publication manifest contains an invalid document or owner id';\n end;\n v_expected_state_digest := lower(coalesce(v_entry->>'expected_state_digest', ''));\n if v_document_id is null or v_expected_owner_id is null then\n raise exception 'publication manifest requires document_id and expected_owner_id';\n end if;\n if v_expected_state_digest !~ '^[0-9a-f]{64}$' then\n raise exception 'publication manifest requires expected_state_digest';\n end if;\n\n -- This row lock serializes title/metadata/status updates, committed index\n -- generation swaps, and new child rows (their foreign-key checks take a\n -- conflicting key-share lock). Existing child rows are locked below before\n -- the state digest is recomputed.\n select * into v_document\n from public.documents\n where id = v_document_id\n for update;\n if not found then\n raise exception 'publication document % was not found', v_document_id;\n end if;\n if v_document.owner_id is distinct from v_expected_owner_id then\n raise exception 'publication document % owner changed from the manifest expectation', v_document_id;\n end if;\n if v_document.status <> 'indexed' then\n raise exception 'publication document % is not indexed', v_document_id;\n end if;\n\n perform 1 from public.document_pages where document_id = v_document_id for update;\n perform 1 from public.document_images where document_id = v_document_id for update;\n perform 1 from public.document_labels where document_id = v_document_id for update;\n perform 1 from public.document_summaries where document_id = v_document_id for update;\n perform 1 from public.document_sections where document_id = v_document_id for update;\n perform 1 from public.document_memory_cards where document_id = v_document_id for update;\n perform 1 from public.document_chunks where document_id = v_document_id for update;\n perform 1 from public.document_table_facts where document_id = v_document_id for update;\n perform 1 from public.document_embedding_fields where document_id = v_document_id for update;\n perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n\n select approval.id into v_approval_id\n from public.document_publication_approvals approval\n where approval.document_id = v_document_id\n and approval.expected_prior_owner_id = v_expected_owner_id\n and approval.decision = 'approved'\n and approval.manifest_digest = v_manifest_digest\n and approval.reviewed_state_digest = v_expected_state_digest\n order by approval.approved_at desc, approval.id desc\n limit 1;\n if v_approval_id is null then\n raise exception 'publication document % lacks matching approved evidence', v_document_id;\n end if;\n\n if exists (\n select 1 from public.document_labels where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_summaries where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_sections where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_memory_cards where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_table_facts where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_embedding_fields where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_index_quality where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_index_units where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n ) then\n raise exception 'publication document % has mismatched artifact ownership', v_document_id;\n end if;\n\n v_current_state_digest := public.document_publication_state_digest(v_document_id, v_expected_owner_id);\n if v_current_state_digest is distinct from v_expected_state_digest then\n raise exception 'publication document % changed after review', v_document_id;\n end if;\n\n update public.document_labels set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_summaries set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_sections set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_memory_cards set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_table_facts set owner_id = null where document_id = v_document_id;\n update public.document_embedding_fields set owner_id = null where document_id = v_document_id;\n update public.document_index_quality set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_index_units set owner_id = null, updated_at = now() where document_id = v_document_id;\n\n update public.documents\n set owner_id = null,\n metadata = coalesce(metadata, '{}'::jsonb) || jsonb_build_object(\n 'public_corpus', true,\n 'publication_approval_id', v_approval_id,\n 'publication_manifest_digest', v_manifest_digest,\n 'publication_reviewed_state_digest', v_expected_state_digest,\n 'published_at', now()\n ),\n updated_at = now()\n where id = v_document_id;\n\n v_results := v_results || jsonb_build_array(jsonb_build_object(\n 'document_id', v_document_id,\n 'previous_owner_id', v_expected_owner_id,\n 'approval_id', v_approval_id,\n 'reviewed_state_digest', v_expected_state_digest,\n 'outcome', 'published'\n ));\n end loop;\n\n return jsonb_build_object(\n 'manifest_digest', v_manifest_digest,\nsupabase/schema.sql:486:create table if not exists public.ingestion_jobs (\nsupabase/schema.sql:508: -- R24e: no FK to ingestion_jobs. Live has no such constraint and job_id holds\nsupabase/schema.sql:509: -- indexing_v3_agent_jobs ids, not ingestion_jobs ids (see migration\nsupabase/schema.sql:805:create index if not exists ingestion_jobs_document_idx on public.ingestion_jobs(document_id);\nsupabase/schema.sql:806:create index if not exists ingestion_jobs_batch_idx on public.ingestion_jobs(batch_id, status);\nsupabase/schema.sql:807:create index if not exists ingestion_jobs_status_next_run_idx\nsupabase/schema.sql:808: on public.ingestion_jobs(status, next_run_at, created_at)\nsupabase/schema.sql:810:create index if not exists ingestion_jobs_document_status_idx\nsupabase/schema.sql:811: on public.ingestion_jobs(document_id, status, created_at);\nsupabase/schema.sql:814:-- 20260708170000_ingestion_jobs_one_open_per_document.sql applies the same\nsupabase/schema.sql:817:create unique index if not exists ingestion_jobs_one_open_per_document_uidx\nsupabase/schema.sql:818: on public.ingestion_jobs(document_id)\nsupabase/schema.sql:1096:drop trigger if exists ingestion_jobs_updated_at on public.ingestion_jobs;\nsupabase/schema.sql:1097:create trigger ingestion_jobs_updated_at\nsupabase/schema.sql:1098:before update on public.ingestion_jobs\nsupabase/schema.sql:1131:create or replace function public.claim_ingestion_jobs(\nsupabase/schema.sql:1159: from public.ingestion_jobs j\nsupabase/schema.sql:1171: from public.ingestion_jobs active\nsupabase/schema.sql:1182: join public.ingestion_jobs j on j.id = e.id\nsupabase/schema.sql:1190: update public.ingestion_jobs j\nsupabase/schema.sql:1250: select 1 from public.ingestion_jobs i\nsupabase/schema.sql:1265: select 1 from public.ingestion_jobs i\nsupabase/schema.sql:1366:create or replace function public.commit_document_index_generation(\nsupabase/schema.sql:1992:create or replace function public.commit_document_index_generation(\nsupabase/schema.sql:2011: v_job public.ingestion_jobs%rowtype;\nsupabase/schema.sql:2014: from public.ingestion_jobs\nsupabase/schema.sql:2026: return public.commit_document_index_generation(\nsupabase/schema.sql:2033:revoke execute on function public.commit_document_index_generation(\nsupabase/schema.sql:2036:revoke execute on function public.commit_document_index_generation(\nsupabase/schema.sql:2039:grant execute on function public.commit_document_index_generation(\nsupabase/schema.sql:2077: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2090: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2103: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2116: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2129: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2142: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2155: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2228: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2329: from public.ingestion_jobs…6552 tokens truncated…app/api/documents/bulk/reindex/route.ts:139: // index on ingestion_jobs(document_id) where status in\nsrc/app/api/documents/bulk/reindex/route.ts:146: .from(\"ingestion_jobs\")\nsrc/app/api/documents/bulk/reindex/route.ts:160: .from(\"ingestion_jobs\")\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:13:create index if not exists ingestion_jobs_status_next_run_idx\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:14: on public.ingestion_jobs(status, next_run_at, created_at)\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:16:create index if not exists ingestion_jobs_document_status_idx\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:17: on public.ingestion_jobs(document_id, status, created_at);\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:119: 'ingestion_jobs_status_next_run_idx',\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:120: 'ingestion_jobs_document_status_idx',\nsupabase/functions/ingestion-worker/index.ts:282: from public.claim_ingestion_jobs(${workerId}, ${limit}, 45)\nscripts/sql/verify-delete-reindex-exclusion.sql:29:insert into public.ingestion_jobs (id, document_id, status, stage, progress)\nscripts/sql/verify-delete-reindex-exclusion.sql:69:delete from public.ingestion_jobs where id = 'd3000000-0000-4000-8000-000000000003';\nscripts/sql/verify-delete-reindex-exclusion.sql:97: insert into public.ingestion_jobs (document_id, status, stage, progress)\nscripts/sql/verify-publication-approval.sql:25: ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Approved publication fixture.', array['fixture:approved'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\nscripts/sql/verify-publication-approval.sql:26: ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'keep_private', 'Private publication fixture.', array['fixture:private'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\nscripts/sql/verify-publication-approval.sql:27: ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'quarantine', 'Quarantine publication fixture.', array['fixture:quarantine'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\nscripts/sql/verify-publication-approval.sql:28: ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\nscripts/sql/verify-publication-approval.sql:30:select public.publish_approved_documents(\nscripts/sql/verify-publication-approval.sql:34: 'expected_state_digest', public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')\nscripts/sql/verify-publication-approval.sql:62: perform public.publish_approved_documents(\nscripts/promote-public-documents-batch.ts:39: const { data: currentStateDigest, error: digestError } = await supabase.rpc(\"document_publication_state_digest\", {\nscripts/promote-public-documents-batch.ts:124: const { data: result, error: publishError } = await supabase.rpc(\"publish_approved_documents\", {\nscripts/import-documents.ts:286: const { error: jobError } = await supabase.from(\"ingestion_jobs\").insert({\nscripts/import-documents.ts:359: const { error: jobError } = await supabase.from(\"ingestion_jobs\").insert({\nscripts/reindex.ts:134: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"pending\"),\nscripts/reindex.ts:138: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"processing\"),\nscripts/reindex.ts:142: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"failed\"),\nscripts/reindex.ts:147: .from(\"ingestion_jobs\")\nscripts/reindex.ts:230: .from(\"ingestion_jobs\")\nscripts/reindex.ts:253: // processing sibling on ingestion_jobs_one_open_per_document_uidx (Audit I2/E2 follow-up).\nscripts/reindex.ts:317: .from(\"ingestion_jobs\")\nscripts/reindex.ts:337: .from(\"ingestion_jobs\")\nscripts/test-cross-tenant-staging.ts:527: const jobs = await admin.from(\"ingestion_jobs\").select(\"id\").in(\"document_id\", ids);\nscripts/test-cross-tenant-staging.ts:529: errors.push(`select ingestion_jobs: ${jobs.error.message}`);\nscripts/test-cross-tenant-staging.ts:535: await attempt(\"delete ingestion_jobs\", admin.from(\"ingestion_jobs\").delete().in(\"document_id\", ids));\nscripts/recover-ingestion-queue.ts:106: .from(\"ingestion_jobs\")\nscripts/recover-ingestion-queue.ts:172: .from(\"ingestion_jobs\")\nscripts/recover-ingestion-queue.ts:188: .from(\"ingestion_jobs\")\nscripts/reindex-health.ts:81: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"pending\"),\nscripts/reindex-health.ts:85: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"processing\"),\nscripts/reindex-health.ts:89: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"failed\"),\nscripts/reindex-health.ts:102: .from(\"ingestion_jobs\")\nscripts/supabase-recovery-status.ts:47: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"pending\"),\nscripts/supabase-recovery-status.ts:51: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"processing\"),\nscripts/supabase-recovery-status.ts:55: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"failed\"),\nscripts/supabase-recovery-status.ts:60: .from(\"ingestion_jobs\")\nscripts/archive/check-m13-migration.ts:5:const M13_HEALTH_MARKER = \"commit_document_index_generation.preserve_legacy_artifacts_migration\";\nscripts/archive/check-m13-migration.ts:73: `[M13 Migration] FAIL: live commit_document_index_generation is missing the preserve-legacy-artifacts guard.`,\nscripts/archive/check-m13-migration.ts:81: if (missing.includes(\"commit_document_index_generation.signature\")) {\nscripts/archive/check-m13-migration.ts:82: console.error(\"[M13 Migration] FAIL: commit_document_index_generation RPC is missing on the live project.\");\nscripts/archive/check-july8-live-batch.ts:7:const R17_INDEX = \"ingestion_jobs_one_open_per_document_uidx\";\nscripts/archive/check-july8-live-batch.ts:32: if (!normalized.includes(\"ingestion_jobs\")) return false;\nscripts/archive/check-july8-live-batch.ts:171: const { error } = await supabase.from(\"ingestion_jobs\").delete().in(\"id\", uniqueIds);\nscripts/archive/check-july8-live-batch.ts:179: .from(\"ingestion_jobs\")\nscripts/archive/check-july8-live-batch.ts:190: .from(\"ingestion_jobs\")\nscripts/archive/check-july8-live-batch.ts:227: .from(\"ingestion_jobs\")\nscripts/archive/check-july8-live-batch.ts:263: const { error: firstError } = await supabase.from(\"ingestion_jobs\").insert({\nscripts/archive/check-july8-live-batch.ts:279: const { error: duplicateError } = await supabase.from(\"ingestion_jobs\").insert({\nscripts/archive/check-july8-live-batch.ts:317: `${R17_INDEX} missing on live — apply 20260708170000_ingestion_jobs_one_open_per_document.sql (or manual CONCURRENTLY + repair 20260708170000)`,\nscripts/archive/check-july8-live-batch.ts:324: `${R17_INDEX} definition mismatch — expected partial unique index on ingestion_jobs(document_id) for open statuses; got: ${definition || \"\"}`,\nscripts/archive/check-july8-live-batch.test.ts:13: CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx\nscripts/archive/check-july8-live-batch.test.ts:14: ON public.ingestion_jobs (document_id)\nscripts/archive/check-july8-live-batch.test.ts:23: CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx\nscripts/archive/check-july8-live-batch.test.ts:24: ON public.ingestion_jobs (document_id)\nscripts/archive/check-july8-live-batch.test.ts:32: \"CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx ON public.ingestion_jobs (batch_id)\";\nscripts/archive/check-july8-live-batch.test.ts:38: \"CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx ON public.ingestion_jobs (document_id) WHERE status IN ('pending', 'processing', 'failed')\";\nscripts/archive/check-july8-live-batch.test.ts:44: \"CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx ON public.ingestion_jobs (document_id) WHERE status IN ('pending')\";\nscripts/archive/check-july8-live-batch.test.ts:54: message: 'duplicate key value violates unique constraint \"ingestion_jobs_one_open_per_document_uidx\"',\nscripts/archive/check-july8-live-batch.test.ts:63: message: 'duplicate key value violates unique constraint \"ingestion_jobs_pkey\"',\nscripts/check-indexing.ts:390: const { error: jobError } = await supabase.from(\"ingestion_jobs\").select(\"id,attempt_count,max_attempts\").limit(1);\nscripts/check-indexing.ts:527: .from(\"ingestion_jobs\")\nscripts/check-indexing.ts:531: .from(\"ingestion_jobs\")\nsrc/lib/ingestion-enqueue.ts:80: .from(\"ingestion_jobs\")\nsrc/lib/ingestion-enqueue.ts:104: .from(\"ingestion_jobs\")\nsrc/lib/ingestion-mutation-safety.ts:116:// families. `checkIngestionMutationSafety` only reads `ingestion_jobs`, so it\nsrc/lib/ingestion-mutation-safety.ts:196: .from(\"ingestion_jobs\")\nsrc/lib/ingestion.ts:114:// Audit R1: the worker never refreshes ingestion_jobs.locked_at during a job,\nsrc/lib/ingestion.ts:116:// claim_ingestion_jobs while the original worker is still alive → two workers\nsrc/lib/supabase/database.types.ts:1388: ingestion_jobs: {\nsrc/lib/supabase/database.types.ts:1445: foreignKeyName: \"ingestion_jobs_batch_id_fkey\";\nsrc/lib/supabase/database.types.ts:1452: foreignKeyName: \"ingestion_jobs_document_id_fkey\";\nsrc/lib/supabase/database.types.ts:1459: foreignKeyName: \"ingestion_jobs_document_id_fkey\";\nsrc/lib/supabase/database.types.ts:2247: claim_ingestion_jobs: {\nsrc/lib/supabase/database.types.ts:2286: commit_document_index_generation: {\nsrc/lib/supabase/database.types.ts:2846: document_publication_state_digest: {\nsrc/lib/supabase/database.types.ts:2850: publish_approved_documents: {\ntests/ingestion-enqueue.test.ts:13:// ingestion_jobs.insert(...).select().single() -> { data, error }\ntests/ingestion-enqueue.test.ts:14:// ingestion_jobs.select(\"id\").eq(...).in(...).limit(1) -> { data, error } (23505 path)\ntests/api-validation-contract.test.ts:443: if (call.table === \"ingestion_jobs\") return ok([{ id: \"job-2\", status: \"pending\" }], 5);\ntests/api-validation-contract.test.ts:461: expect(client.calls[0]).toMatchObject({ table: \"ingestion_jobs\", range: { from: 1, to: 2 } });\ntests/api-validation-contract.test.ts:467: expect(client.calls[1]).toMatchObject({ table: \"ingestion_jobs\", range: { from: 1, to: 2 } });\ntests/api-validation-contract.test.ts:541: if (call.table === \"ingestion_jobs\" && call.operation === \"select\" && call.maybeSingle) {\ntests/ingestion-quality-route.test.ts:80: ingestion_jobs: [\ntests/ingestion-quality-route.test.ts:162: ingestion_jobs: [],\ntests/supabase-schema.test.ts:50: new URL(\"../supabase/migrations/20260708160000_ingestion_jobs_one_open_per_document.sql\", import.meta.url),\ntests/supabase-schema.test.ts:54: new URL(\"../supabase/migrations/20260708170000_ingestion_jobs_one_open_per_document.sql\", import.meta.url),\ntests/supabase-schema.test.ts:282: /grant select, insert, update, delete on table .*public\\.documents, .*public\\.document_pages, .*public\\.document_images, .*public\\.image_caption_cache, .*public\\.document_labels, .*public\\.document_summaries, .*public\\.document_sections, .*public\\.document_memory_cards, .*public\\.document_chunks, .*public\\.ingestion_jobs, .*public\\.rag_queries, .*public\\.storage_cleanup_jobs.* to service_role;/,\ntests/supabase-schema.test.ts:305: \"ingestion_jobs\",\ntests/supabase-schema.test.ts:319: expect(schema).toContain(\"create or replace function public.claim_ingestion_jobs\");\ntests/supabase-schema.test.ts:338: expect(sql).toContain(\"create or replace function public.commit_document_index_generation\");\ntests/supabase-schema.test.ts:361: \"revoke execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) from public, anon, authenticated\",\ntests/supabase-schema.test.ts:371: \"revoke execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) from public, anon, authenticated, service_role\",\ntests/supabase-schema.test.ts:374: \"grant execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) to service_role\",\ntests/supabase-schema.test.ts:437: // R24e: schema.sql no longer declares a job_id -> ingestion_jobs FK. Live has\ntests/supabase-schema.test.ts:438: // none, and job_id holds indexing_v3_agent_jobs ids, not ingestion_jobs ids,\ntests/supabase-schema.test.ts:443: expect(schema).not.toContain(\"job_id uuid not null references public.ingestion_jobs(id) on delete cascade\");\ntests/supabase-schema.test.ts:445: \"add constraint ingestion_job_stages_job_id_fkey foreign key (job_id) references public.ingestion_jobs(id) on delete cascade\",\ntests/supabase-schema.test.ts:626: [\"ingestion_jobs_one_open_per_document\", 2],\ntests/supabase-schema.test.ts:1038: expect(sql).toContain(\"commit_document_index_generation.preserve_legacy_artifacts_migration\");\ntests/supabase-schema.test.ts:1177: expect(sql).toContain(\"create or replace function public.publish_approved_documents(\");\ntests/supabase-schema.test.ts:1180: \"grant execute on function public.publish_approved_documents(jsonb, text, integer) to service_role;\",\ntests/supabase-schema.test.ts:1188: expect(sql).toContain(\"create or replace function public.document_publication_state_digest(\");\ntests/supabase-schema.test.ts:1190: expect(sql).toContain(\"v_current_state_digest := public.document_publication_state_digest(\");\ntests/supabase-schema.test.ts:1194: const functionStart = sql.indexOf(\"create or replace function public.publish_approved_documents(\");\ntests/supabase-schema.test.ts:1212: functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\ntests/supabase-schema.test.ts:1219: guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\ntests/supabase-schema.test.ts:1229: const activeJobCheck = functionBody.indexOf(\"from public.ingestion_jobs j\");\ntests/supabase-schema.test.ts:1242: expect(retryBody.indexOf(\"for update of d, j;\")).toBeLessThan(retryBody.indexOf(\"update public.ingestion_jobs\"));\ntests/supabase-schema.test.ts:1379: it(\"keeps ingestion_jobs_one_open stem neutralized for preview history parity\", () => {\ntests/supabase-schema.test.ts:1383: expect(ingestionJobsOneOpenMigration).toContain(\"ingestion_jobs_one_open_per_document_uidx\");\ntests/worker-visual-capture.test.ts:46: expect(workerSource).toContain('if (error) throw supabaseStageError(\"commit_document_index_generation\", error)');\ntests/private-access-routes.test.ts:1368: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return ok({ id: \"job-1\" });\ntests/private-access-routes.test.ts:1412: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return ok({ id: \"job-1\" });\ntests/private-access-routes.test.ts:1462: expect(client.calls.some((call) => call.table === \"ingestion_jobs\" && call.operation === \"insert\")).toBe(false);\ntests/private-access-routes.test.ts:1473: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:1513: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:1573: expect(client.calls.some((call) => call.table === \"ingestion_jobs\" && call.operation === \"insert\")).toBe(false);\ntests/private-access-routes.test.ts:2167: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") {\ntests/private-access-routes.test.ts:2223: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") {\ntests/private-access-routes.test.ts:2324: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2325: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return fail(\"job insert failed\");\ntests/private-access-routes.test.ts:2385: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2387: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:2388: return fail(\"ingestion_jobs_document_id_fkey\", \"23503\");\ntests/private-access-routes.test.ts:2428: if (call.table === \"ingestion_jobs\" && call.operation === \"select\" && call.limitCount === 1) {\ntests/private-access-routes.test.ts:2431: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2432: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return fail(\"job insert failed\");\ntests/private-access-routes.test.ts:2480: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2482: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return fail(\"bulk job insert failed\");\ntests/private-access-routes.test.ts:2549: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2551: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:2552: return fail(\"ingestion_jobs_document_id_fkey\", \"23503\");\ntests/private-access-routes.test.ts:2598: if (call.table === \"ingestion_jobs\" && call.operation === \"select\" && call.limitCount === 1) {\ntests/private-access-routes.test.ts:2601: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2603: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return fail(\"bulk job insert failed\");\ntests/private-access-routes.test.ts:2667: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:2703: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:3323: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:3381: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:3423: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:3457: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") {\ntests/ingestion-edge-function-auth.test.ts:30: expect(source.indexOf(\"hasServiceRoleAuthorization\")).toBeLessThan(source.indexOf(\"public.claim_ingestion_jobs\"));\n",{"_655":1122,"_637":1123,"_616":617,"_639":623},1784719795318,{"_687":1124,"_689":1125,"_691":1126,"_693":694,"_621":1127,"_695":35,"_45":1118,"_696":1128,"_698":699,"_630":117,"_96":700},"-- Bind every new publication decision to the exact document and committed\n-- artifact state that the operator reviewed. Historical approvals remain\n-- readable but cannot be used for a new publication because they have no\n-- reviewed_state_digest.\n\nalter table public.document_publication_approvals\n add column if not exists reviewed_state_digest text;\n\nalter table public.document_publication_approvals\n drop constraint if exists document_publication_approvals_reviewed_state_digest_format;\nalter table public.document_publication_approvals\n add constraint document_publication_approvals_reviewed_state_digest_format\n check (reviewed_state_digest is null or reviewed_state_digest ~ '^[0-9a-f]{64}$');\n\ncreate or replace function public.document_publication_state_digest(\n p_document_id uuid,\n p_expected_owner_id uuid\n)\nreturns text\nlanguage sql\nstable\nsecurity definer\nset search_path = ''\nas $$\n select encode(\n extensions.digest(\n convert_to(\n jsonb_build_object(\n 'document', to_jsonb(d) - array['owner_id', 'created_at', 'updated_at', 'search_tsv', 'title_search_tsv'],\n 'pages', coalesce((\n select jsonb_agg(to_jsonb(p) - array['created_at', 'updated_at'] order by p.page_number, p.id)\n from public.document_pages p where p.document_id = d.id\n ), '[]'::jsonb),\n 'images', coalesce((\n select jsonb_agg(to_jsonb(i) - array['created_at', 'updated_at'] order by i.page_number nulls last, i.id)\n from public.document_images i\n where i.document_id = d.id\n and public.is_committed_document_generation(i.index_generation_id, d.index_generation_id)\n ), '[]'::jsonb),\n 'labels', coalesce((\n select jsonb_agg(to_jsonb(l) - array['owner_id', 'created_at', 'updated_at'] order by l.id)\n from public.document_labels l where l.document_id = d.id\n ), '[]'::jsonb),\n 'summaries', coalesce((\n select jsonb_agg(to_jsonb(s) - array['owner_id', 'created_at', 'updated_at'] order by s.id)\n from public.document_summaries s where s.document_id = d.id\n ), '[]'::jsonb),\n 'sections', coalesce((\n select jsonb_agg(to_jsonb(s) - array['owner_id', 'created_at', 'updated_at'] order by s.section_index, s.id)\n from public.document_sections s\n where s.document_id = d.id\n and public.is_committed_artifact_generation(\n coalesce(s.artifact_generation_id, s.index_generation_id),\n d.metadata\n )\n ), '[]'::jsonb),\n 'memory_cards', coalesce((\n select jsonb_agg(\n to_jsonb(m) - array['owner_id', 'embedding', 'search_tsv', 'created_at', 'updated_at']\n order by m.id\n )\n from public.document_memory_cards m\n where m.document_id = d.id\n and public.is_committed_artifact_generation(\n coalesce(m.artifact_generation_id, m.index_generation_id),\n d.metadata\n )\n ), '[]'::jsonb),\n 'chunks', coalesce((\n select jsonb_agg(to_jsonb(c) - array['embedding', 'search_tsv', 'created_at'] order by c.chunk_index, c.id)\n from public.document_chunks c\n where c.document_id = d.id\n and public.is_committed_document_generation(c.index_generation_id, d.index_generation_id)\n ), '[]'::jsonb),\n 'table_facts', coalesce((\n select jsonb_agg(to_jsonb(f) - array['owner_id', 'search_tsv', 'created_at'] order by f.id)\n from public.document_table_facts f\n where f.document_id = d.id\n and public.is_committed_document_generation(f.index_generation_id, d.index_generation_id)\n ), '[]'::jsonb),\n 'embedding_fields', coalesce((\n select jsonb_agg(\n to_jsonb(f) - array['owner_id', 'embedding', 'search_tsv', 'created_at']\n order by f.id\n )\n from public.document_embedding_fields f\n where f.document_id = d.id\n and public.is_committed_document_generation(f.index_generation_id, d.index_generation_id)\n ), '[]'::jsonb),\n 'index_quality', coalesce((\n select to_jsonb(q) - array['owner_id', 'updated_at']\n from public.document_index_quality q where q.document_id = d.id\n ), '{}'::jsonb),\n 'index_units', coalesce((\n select jsonb_agg(\n to_jsonb(u) - array['owner_id', 'embedding', 'search_tsv', 'created_at', 'updated_at']\n order by u.id\n )\n from public.document_index_units u\n where u.document_id = d.id\n and public.is_committed_artifact_generation(\n coalesce(u.artifact_generation_id, u.index_generation_id),\n d.metadata\n )\n ), '[]'::jsonb)\n )::text,\n 'UTF8'\n ),\n 'sha256'\n ),\n 'hex'\n )\n from public.documents d\n where d.id = p_document_id\n and d.owner_id = p_expected_owner_id;\n$$;\n\nrevoke all on function public.document_publication_state_digest(uuid, uuid) from public, anon, authenticated;\ngrant execute on function public.document_publication_state_digest(uuid, uuid) to service_role;\n\ncreate or replace function public.require_document_publication_approval_state_digest()\nreturns trigger\nlanguage plpgsql\nset search_path = ''\nas $$\nbegin\n if new.reviewed_state_digest is null then\n raise exception 'publication approval requires a reviewed content/state digest';\n end if;\n return new;\nend;\n$$;\n\nrevoke all on function public.require_document_publication_approval_state_digest() from public, anon, authenticated;\n\ndrop trigger if exists document_publication_approvals_require_state_digest on public.document_publication_approvals;\ncreate trigger document_publication_approvals_require_state_digest\nbefore insert on public.document_publication_approvals\nfor each row execute function public.require_document_publication_approval_state_digest();\n\ncreate or replace function public.guard_document_publication_transition()\nreturns trigger\nlanguage plpgsql\nset search_path = ''\nas $$\ndeclare\n v_approval_id uuid;\n v_manifest_digest text;\n v_reviewed_state_digest text;\n v_current_state_digest text;\nbegin\n if tg_op = 'INSERT' then\n if new.owner_id is null then\n raise exception 'public documents must be created as owned rows before approved publication';\n end if;\n return new;\n end if;\n\n if old.owner_id is not null and new.owner_id is null then\n begin\n v_approval_id := nullif(new.metadata->>'publication_approval_id', '')::uuid;\n exception when invalid_text_representation then\n raise exception 'public document transition has an invalid publication approval id';\n end;\n v_manifest_digest := lower(coalesce(new.metadata->>'publication_manifest_digest', ''));\n v_reviewed_state_digest := lower(coalesce(new.metadata->>'publication_reviewed_state_digest', ''));\n\n if v_approval_id is null\n or v_manifest_digest !~ '^[0-9a-f]{64}$'\n or v_reviewed_state_digest !~ '^[0-9a-f]{64}$' then\n raise exception 'public document transition requires publication approval evidence';\n end if;\n\n if not exists (\n select 1\n from public.document_publication_approvals approval\n where approval.id = v_approval_id\n and approval.document_id = old.id\n and approval.expected_prior_owner_id = old.owner_id\n and approval.decision = 'approved'\n and approval.manifest_digest = v_manifest_digest\n and approval.reviewed_state_digest = v_reviewed_state_digest\n ) then\n raise exception 'public document transition approval does not match the reviewed document state';\n end if;\n\n perform 1 from public.document_pages where document_id = old.id for update;\n perform 1 from public.document_images where document_id = old.id for update;\n perform 1 from public.document_labels where document_id = old.id for update;\n perform 1 from public.document_summaries where document_id = old.id for update;\n perform 1 from public.document_sections where document_id = old.id for update;\n perform 1 from public.document_memory_cards where document_id = old.id for update;\n perform 1 from public.document_chunks where document_id = old.id for update;\n perform 1 from public.document_table_facts where document_id = old.id for update;\n perform 1 from public.document_embedding_fields where document_id = old.id for update;\n perform 1 from public.document_index_quality where document_id = old.id for update;\n perform 1 from public.document_index_units where document_id = old.id for update;\n\n v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\n if v_current_state_digest is distinct from v_reviewed_state_digest then\n raise exception 'public document transition content changed after review';\n end if;\n end if;\n return new;\nend;\n$$;\n\nrevoke all on function public.guard_document_publication_transition() from public, anon, authenticated;\n\ncreate or replace function public.publish_approved_documents(\n p_documents jsonb,\n p_manifest_digest text,\n p_expected_count integer\n)\nreturns jsonb\nlanguage plpgsql\nsecurity definer\nset search_path = ''\nas $$\ndeclare\n v_entry jsonb;\n v_document public.documents%rowtype;\n v_document_id uuid;\n v_expected_owner_id uuid;\n v_expected_state_digest text;\n v_current_state_digest text;\n v_approval_id uuid;\n v_manifest_digest text := lower(trim(coalesce(p_manifest_digest, '')));\n v_count integer;\n v_results jsonb := '[]'::jsonb;\nbegin\n if jsonb_typeof(p_documents) is distinct from 'array' then\n raise exception 'publication documents must be a JSON array';\n end if;\n if v_manifest_digest !~ '^[0-9a-f]{64}$' then\n raise exception 'publication manifest digest must be a lowercase SHA-256 value';\n end if;\n\n v_count := jsonb_array_length(p_documents);\n if p_expected_count is null or p_expected_count < 1 or p_expected_count <> v_count then\n raise exception 'publication expected count % does not match manifest count %', p_expected_count, v_count;\n end if;\n if exists (\n select 1\n from jsonb_array_elements(p_documents) entry\n group by entry->>'document_id'\n having count(*) > 1\n ) then\n raise exception 'publication manifest contains duplicate document ids';\n end if;\n\n for v_entry in select value from jsonb_array_elements(p_documents)\n loop\n begin\n v_document_id := nullif(v_entry->>'document_id', '')::uuid;\n v_expected_owner_id := nullif(v_entry->>'expected_owner_id', '')::uuid;\n exception when invalid_text_representation then\n raise exception 'publication manifest contains an invalid document or owner id';\n end;\n v_expected_state_digest := lower(coalesce(v_entry->>'expected_state_digest', ''));\n if v_document_id is null or v_expected_owner_id is null then\n raise exception 'publication manifest requires document_id and expected_owner_id';\n end if;\n if v_expected_state_digest !~ '^[0-9a-f]{64}$' then\n raise exception 'publication manifest requires expected_state_digest';\n end if;\n\n -- This row lock serializes title/metadata/status updates, committed index\n -- generation swaps, and new child rows (their foreign-key checks take a\n -- conflicting key-share lock). Existing child rows are locked below before\n -- the state digest is recomputed.\n select * into v_document\n from public.documents\n where id = v_document_id\n for update;\n if not found then\n raise exception 'publication document % was not found', v_document_id;\n end if;\n if v_document.owner_id is distinct from v_expected_owner_id then\n raise exception 'publication document % owner changed from the manifest expectation', v_document_id;\n end if;\n if v_document.status <> 'indexed' then\n raise exception 'publication document % is not indexed', v_document_id;\n end if;\n\n perform 1 from public.document_pages where document_id = v_document_id for update;\n perform 1 from public.document_images where document_id = v_document_id for update;\n perform 1 from public.document_labels where document_id = v_document_id for update;\n perform 1 from public.document_summaries where document_id = v_document_id for update;\n perform 1 from public.document_sections where document_id = v_document_id for update;\n perform 1 from public.document_memory_cards where document_id = v_document_id for update;\n perform 1 from public.document_chunks where document_id = v_document_id for update;\n perform 1 from public.document_table_facts where document_id = v_document_id for update;\n perform 1 from public.document_embedding_fields where document_id = v_document_id for update;\n perform 1 from public.document_index_quality where document_id = v_document_id for update;\n perform 1 from public.document_index_units where document_id = v_document_id for update;\n\n select approval.id into v_approval_id\n from public.document_publication_approvals approval\n where approval.document_id = v_document_id\n and approval.expected_prior_owner_id = v_expected_owner_id\n and approval.decision = 'approved'\n and approval.manifest_digest = v_manifest_digest\n and approval.reviewed_state_digest = v_expected_state_digest\n order by approval.approved_at desc, approval.id desc\n limit 1;\n if v_approval_id is null then\n raise exception 'publication document % lacks matching approved evidence', v_document_id;\n end if;\n\n if exists (\n select 1 from public.document_labels where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_summaries where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_sections where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_memory_cards where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_table_facts where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_embedding_fields where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_index_quality where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n union all select 1 from public.document_index_units where document_id = v_document_id and owner_id is distinct from v_expected_owner_id\n ) then\n raise exception 'publication document % has mismatched artifact ownership', v_document_id;\n end if;\n\n v_current_state_digest := public.document_publication_state_digest(v_document_id, v_expected_owner_id);\n if v_current_state_digest is distinct from v_expected_state_digest then\n raise exception 'publication document % changed after review', v_document_id;\n end if;\n\n update public.document_labels set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_summaries set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_sections set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_memory_cards set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_table_facts set owner_id = null where document_id = v_document_id;\n update public.document_embedding_fields set owner_id = null where document_id = v_document_id;\n update public.document_index_quality set owner_id = null, updated_at = now() where document_id = v_document_id;\n update public.document_index_units set owner_id = null, updated_at = now() where document_id = v_document_id;\n\n update public.documents\n set owner_id = null,\n metadata = coalesce(metadata, '{}'::jsonb) || jsonb_build_object(\n 'public_corpus', true,\n 'publication_approval_id', v_approval_id,\n 'publication_manifest_digest', v_manifest_digest,\n 'publication_reviewed_state_digest', v_expected_state_digest,\n 'published_at', now()\n ),\n updated_at = now()\n where id = v_document_id;\n\n v_results := v_results || jsonb_build_array(jsonb_build_object(\n 'document_id', v_document_id,\n 'previous_owner_id', v_expected_owner_id,\n 'approval_id', v_approval_id,\n 'reviewed_state_digest', v_expected_state_digest,\n 'outcome', 'published'\n ));\n end loop;\n\n return jsonb_build_object(\n 'manifest_digest', v_manifest_digest,\nsupabase/schema.sql:486:create table if not exists public.ingestion_jobs (\nsupabase/schema.sql:508: -- R24e: no FK to ingestion_jobs. Live has no such constraint and job_id holds\nsupabase/schema.sql:509: -- indexing_v3_agent_jobs ids, not ingestion_jobs ids (see migration\nsupabase/schema.sql:805:create index if not exists ingestion_jobs_document_idx on public.ingestion_jobs(document_id);\nsupabase/schema.sql:806:create index if not exists ingestion_jobs_batch_idx on public.ingestion_jobs(batch_id, status);\nsupabase/schema.sql:807:create index if not exists ingestion_jobs_status_next_run_idx\nsupabase/schema.sql:808: on public.ingestion_jobs(status, next_run_at, created_at)\nsupabase/schema.sql:810:create index if not exists ingestion_jobs_document_status_idx\nsupabase/schema.sql:811: on public.ingestion_jobs(document_id, status, created_at);\nsupabase/schema.sql:814:-- 20260708170000_ingestion_jobs_one_open_per_document.sql applies the same\nsupabase/schema.sql:817:create unique index if not exists ingestion_jobs_one_open_per_document_uidx\nsupabase/schema.sql:818: on public.ingestion_jobs(document_id)\nsupabase/schema.sql:1096:drop trigger if exists ingestion_jobs_updated_at on public.ingestion_jobs;\nsupabase/schema.sql:1097:create trigger ingestion_jobs_updated_at\nsupabase/schema.sql:1098:before update on public.ingestion_jobs\nsupabase/schema.sql:1131:create or replace function public.claim_ingestion_jobs(\nsupabase/schema.sql:1159: from public.ingestion_jobs j\nsupabase/schema.sql:1171: from public.ingestion_jobs active\nsupabase/schema.sql:1182: join public.ingestion_jobs j on j.id = e.id\nsupabase/schema.sql:1190: update public.ingestion_jobs j\nsupabase/schema.sql:1250: select 1 from public.ingestion_jobs i\nsupabase/schema.sql:1265: select 1 from public.ingestion_jobs i\nsupabase/schema.sql:1366:create or replace function public.commit_document_index_generation(\nsupabase/schema.sql:1992:create or replace function public.commit_document_index_generation(\nsupabase/schema.sql:2011: v_job public.ingestion_jobs%rowtype;\nsupabase/schema.sql:2014: from public.ingestion_jobs\nsupabase/schema.sql:2026: return public.commit_document_index_generation(\nsupabase/schema.sql:2033:revoke execute on function public.commit_document_index_generation(\nsupabase/schema.sql:2036:revoke execute on function public.commit_document_index_generation(\nsupabase/schema.sql:2039:grant execute on function public.commit_document_index_generation(\nsupabase/schema.sql:2077: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2090: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2103: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2116: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2129: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2142: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2155: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2228: select 1 from public.ingestion_jobs j\nsupabase/schema.sql:2329: from public.ingestion_jobs\nsupabase/schema.sql:2374: update public.ingestion_jobs\nsupabase/schema.sql:2392: update public.ingestion_jobs\nsupabase/schema.sql:2429: v_job public.ingestion_jobs%rowtype;\nsupabase/schema.sql:2434: from public.ingestion_jobs\nsupabase/schema.sql:2457: update public.ingestion_jobs\nsupabase/schema.sql:3312: 'public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb)'\nsupabase/schema.sql:3316: missing := array_append(missing, 'commit_document_index_generation.signature');\nsupabase/schema.sql:3320: 'commit_document_index_generation.preserve_legacy_artifacts_migration'\nsupabase/schema.sql:4549: from public.ingestion_jobs j\nsupabase/schema.sql:4684: update public.ingestion_jobs j\nsupabase/schema.sql:4701: update public.ingestion_jobs j\nsupabase/schema.sql:4719: insert into public.ingestion_jobs (\nsupabase/schema.sql:4738: from public.ingestion_jobs j\nsupabase/schema.sql:5266: public.ingestion_jobs,\nsupabase/schema.sql:5311:alter table public.ingestion_jobs enable row level security;\nsupabase/schema.sql:5390:create policy \"jobs owner read\" on public.ingestion_jobs\nsupabase/schema.sql:5569: 'ingestion_jobs'\nsupabase/schema.sql:5592:revoke execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) from public, anon, authenticated, service_role;\nsupabase/schema.sql:5666:-- RLS + grants (service_role only, same as ingestion_jobs)\nsupabase/schema.sql:5786: select 1 from public.ingestion_jobs\nsupabase/schema.sql:6213:create index if not exists ingestion_jobs_status_idx on public.ingestion_jobs (status);\nsupabase/schema.sql:6214:create index if not exists ingestion_jobs_updated_at_idx on public.ingestion_jobs (updated_at);\nsupabase/schema.sql:6801: update public.ingestion_jobs j\nsupabase/schema.sql:6808: where j.id = (select j2.id from public.ingestion_jobs j2 where j2.document_id = q.document_id order by j2.created_at desc limit 1)\nsupabase/schema.sql:6851: from public.ingestion_jobs j\nsupabase/schema.sql:6957: update public.ingestion_jobs j\nsupabase/schema.sql:6974: update public.ingestion_jobs j\nsupabase/schema.sql:6992: insert into public.ingestion_jobs (\nsupabase/schema.sql:7011: from public.ingestion_jobs j\nsupabase/schema.sql:7854:create or replace function public.document_publication_state_digest(\nsupabase/schema.sql:7892:revoke all on function public.document_publication_state_digest(uuid, uuid) from public, anon, authenticated;\nsupabase/schema.sql:7893:grant execute on function public.document_publication_state_digest(uuid, uuid) to service_role;\nsupabase/schema.sql:7973: v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\nsupabase/schema.sql:7989:create or replace function public.publish_approved_documents(\nsupabase/schema.sql:8102: v_current_state_digest := public.document_publication_state_digest(v_document_id, v_expected_owner_id);\nsupabase/schema.sql:8145:revoke all on function public.publish_approved_documents(jsonb, text, integer) from public, anon, authenticated;\nsupabase/schema.sql:8146:grant execute on function public.publish_approved_documents(jsonb, text, integer) to service_role;\nsupabase/schema.sql:8149:-- ingestion_jobs insert: either the job commits first and deletion returns an\nsupabase/schema.sql:8164: v_active_job public.ingestion_jobs%rowtype;\nsupabase/schema.sql:8189: from public.ingestion_jobs j\nsupabase/schema.sql:8291: v_job public.ingestion_jobs%rowtype;\nsupabase/schema.sql:8302: from public.ingestion_jobs j\nsupabase/schema.sql:8325: update public.ingestion_jobs\nsupabase/migrations/20260708160000_ingestion_jobs_one_open_per_document.sql:7:-- 20260708170000_ingestion_jobs_one_open_per_document.sql; on live, prefer the\nsupabase/migrations/20260706010000_search_schema_health_m13_guard.sql:2:-- running the pre-20260702 commit_document_index_generation body that deleted\nsupabase/migrations/20260706010000_search_schema_health_m13_guard.sql:157: 'public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb)'\nsupabase/migrations/20260706010000_search_schema_health_m13_guard.sql:161: missing := array_append(missing, 'commit_document_index_generation.signature');\nsupabase/migrations/20260706010000_search_schema_health_m13_guard.sql:165: 'commit_document_index_generation.preserve_legacy_artifacts_migration'\nsupabase/migrations/20260625033425_strict_enrichment_gate_repair.sql:119: from public.ingestion_jobs j\nsupabase/migrations/20260625033425_strict_enrichment_gate_repair.sql:254: update public.ingestion_jobs j\nsupabase/migrations/20260625033425_strict_enrichment_gate_repair.sql:271: update public.ingestion_jobs j\nsupabase/migrations/20260625033425_strict_enrichment_gate_repair.sql:289: insert into public.ingestion_jobs (\nsupabase/migrations/20260625033425_strict_enrichment_gate_repair.sql:308: from public.ingestion_jobs j\nsupabase/migrations/20260713062125_fence_index_generation_commit.sql:4:create or replace function public.commit_document_index_generation(\nsupabase/migrations/20260713062125_fence_index_generation_commit.sql:23: v_job public.ingestion_jobs%rowtype;\nsupabase/migrations/20260713062125_fence_index_generation_commit.sql:26: from public.ingestion_jobs\nsupabase/migrations/20260713062125_fence_index_generation_commit.sql:38: return public.commit_document_index_generation(\nsupabase/migrations/20260713062125_fence_index_generation_commit.sql:45:revoke execute on function public.commit_document_index_generation(\nsupabase/migrations/20260713062125_fence_index_generation_commit.sql:48:revoke execute on function public.commit_document_index_generation(\nsupabase/migrations/20260713062125_fence_index_generation_commit.sql:51:grant execute on function public.commit_document_index_generation(\nsupabase/migrations/20260713083000_reconcile_rag_remediation_functions.sql:466: select 1 from public.ingestion_jobs\nsupabase/migrations/20260616001000_ingestion_job_state_rpcs.sql:12: update public.ingestion_jobs\nsupabase/migrations/20260616001000_ingestion_job_state_rpcs.sql:24: update public.ingestion_jobs\nsupabase/migrations/20260616001000_ingestion_job_state_rpcs.sql:66: update public.ingestion_jobs\nsupabase/migrations/20260717132000_delete_document_if_idle.sql:3:-- ingestion_jobs insert: either the job commits first and deletion returns an\nsupabase/migrations/20260717132000_delete_document_if_idle.sql:18: v_active_job public.ingestion_jobs%rowtype;\nsupabase/migrations/20260717132000_delete_document_if_idle.sql:43: from public.ingestion_jobs j\nsupabase/migrations/20260717132000_delete_document_if_idle.sql:145: v_job public.ingestion_jobs%rowtype;\nsupabase/migrations/20260717132000_delete_document_if_idle.sql:156: from public.ingestion_jobs j\nsupabase/migrations/20260717132000_delete_document_if_idle.sql:179: update public.ingestion_jobs\nsupabase/migrations/20260702110000_drop_redundant_indexes.sql:20:-- 2. ingestion_jobs_claim_idx covers (status, next_run_at, created_at) WHERE\nsupabase/migrations/20260702110000_drop_redundant_indexes.sql:22:-- ingestion_jobs_status_next_run_idx covers the same columns with WHERE\nsupabase/migrations/20260702110000_drop_redundant_indexes.sql:27:drop index if exists public.ingestion_jobs_claim_idx;\nsupabase/migrations/20260712165915_reconcile_ingestion_index_shapes.sql:8:drop index if exists public.ingestion_jobs_document_status_idx;\nsupabase/migrations/20260712165915_reconcile_ingestion_index_shapes.sql:9:create index ingestion_jobs_document_status_idx\nsupabase/migrations/20260712165915_reconcile_ingestion_index_shapes.sql:10: on public.ingestion_jobs (document_id, status, created_at);\nsupabase/migrations/20260712165915_reconcile_ingestion_index_shapes.sql:12:drop index if exists public.ingestion_jobs_status_next_run_idx;\nsupabase/migrations/20260712165915_reconcile_ingestion_index_shapes.sql:13:create index ingestion_jobs_status_next_run_idx\nsupabase/migrations/20260712165915_reconcile_ingestion_index_shapes.sql:14: on public.ingestion_jobs (status, next_run_at, created_at)\nsrc/app/api/upload/route.ts:267: .from(\"ingestion_jobs\")\nsupabase/migrations/20260712165211_reconcile_missing_operational_indexes.sql:39:create index if not exists ingestion_jobs_document_idx\nsupabase/migrations/20260712165211_reconcile_missing_operational_indexes.sql:40: on public.ingestion_jobs (document_id);\nsupabase/migrations/20260712171500_codify_live_ahead_functions.sql:768: update public.ingestion_jobs j\nsupabase/migrations/20260712171500_codify_live_ahead_functions.sql:775: where j.id = (select j2.id from public.ingestion_jobs j2 where j2.document_id = q.document_id order by j2.created_at desc limit 1)\nsupabase/migrations/20260712171500_codify_live_ahead_functions.sql:819: from public.ingestion_jobs j\nsupabase/migrations/20260712171500_codify_live_ahead_functions.sql:925: update public.ingestion_jobs j\nsupabase/migrations/20260712171500_codify_live_ahead_functions.sql:942: update public.ingestion_jobs j\nsupabase/migrations/20260712171500_codify_live_ahead_functions.sql:960: insert into public.ingestion_jobs (\nsupabase/migrations/20260712171500_codify_live_ahead_functions.sql:979: from public.ingestion_jobs j\nsupabase/migrations/20260708170000_ingestion_jobs_one_open_per_document.sql:2:-- prevents multiple open ingestion_jobs rows per document; the reindex\nsupabase/migrations/20260708170000_ingestion_jobs_one_open_per_document.sql:21:create unique index if not exists ingestion_jobs_one_open_per_document_uidx\nsupabase/migrations/20260708170000_ingestion_jobs_one_open_per_document.sql:22: on public.ingestion_jobs (document_id)\nsupabase/migrations/20260527000000_bulk_ingestion.sql:85:create table if not exists public.ingestion_jobs (\nsupabase/migrations/20260527000000_bulk_ingestion.sql:114:alter table public.ingestion_jobs add column if not exists batch_id uuid references public.import_batches(id) on delete set null;\nsupabase/migrations/20260527000000_bulk_ingestion.sql:115:alter table public.ingestion_jobs add column if not exists attempt_count integer not null default 0;\nsupabase/migrations/20260527000000_bulk_ingestion.sql:116:alter table public.ingestion_jobs add column if not exists max_attempts integer not null default 3;\nsupabase/migrations/20260527000000_bulk_ingestion.sql:117:alter table public.ingestion_jobs add column if not exists locked_at timestamptz;\nsupabase/migrations/20260527000000_bulk_ingestion.sql:118:alter table public.ingestion_jobs add column if not exists locked_by text;\nsupabase/migrations/20260527000000_bulk_ingestion.sql:119:alter table public.ingestion_jobs add column if not exists next_run_at timestamptz not null default now();\nsupabase/migrations/20260527000000_bulk_ingestion.sql:131:create index if not exists ingestion_jobs_document_idx on public.ingestion_jobs(document_id);\nsupabase/migrations/20260527000000_bulk_ingestion.sql:132:create index if not exists ingestion_jobs_batch_idx on public.ingestion_jobs(batch_id, status);\nsupabase/migrations/20260527000000_bulk_ingestion.sql:133:create index if not exists ingestion_jobs_claim_idx\nsupabase/migrations/20260527000000_bulk_ingestion.sql:134: on public.ingestion_jobs(status, next_run_at, created_at)\nsupabase/migrations/20260527000000_bulk_ingestion.sql:154:create or replace function public.claim_ingestion_jobs(\nsupabase/migrations/20260527000000_bulk_ingestion.sql:180: from public.ingestion_jobs j\nsupabase/migrations/20260527000000_bulk_ingestion.sql:196: update public.ingestion_jobs j\nsupabase/migrations/20260527000000_bulk_ingestion.sql:417:grant execute on function public.claim_ingestion_jobs(text, integer, integer) to service_role;\nsupabase/migrations/20260527000000_bulk_ingestion.sql:425:alter table public.ingestion_jobs enable row level security;\nsupabase/migrations/20260527000000_bulk_ingestion.sql:437:drop policy if exists \"jobs owner read\" on public.ingestion_jobs;\nsupabase/migrations/20260527000000_bulk_ingestion.sql:461:create policy \"jobs owner read\" on public.ingestion_jobs\nsupabase/migrations/20260717131000_guard_document_publication_approval.sql:96:create or replace function public.publish_approved_documents(\nsupabase/migrations/20260717131000_guard_document_publication_approval.sql:223:revoke all on function public.publish_approved_documents(jsonb, text, integer) from public, anon, authenticated;\nsupabase/migrations/20260717131000_guard_document_publication_approval.sql:224:grant execute on function public.publish_approved_documents(jsonb, text, integer) to service_role;\nsupabase/migrations/20260622000000_reconcile_schema_health_vector_privileges.sql:294: if to_regprocedure('public.claim_ingestion_jobs(text, integer, integer)') is not null then\nsupabase/migrations/20260622000000_reconcile_schema_health_vector_privileges.sql:295: revoke execute on function public.claim_ingestion_jobs(text, integer, integer) from public, anon, authenticated;\nsupabase/migrations/20260622000000_reconcile_schema_health_vector_privileges.sql:296: grant execute on function public.claim_ingestion_jobs(text, integer, integer) to service_role;\nsupabase/migrations/20260622000000_reconcile_schema_health_vector_privileges.sql:345: 'ingestion_jobs'\nsupabase/migrations/20260629000000_abandoned_reindex_generation_recovery.sql:32: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260629000000_abandoned_reindex_generation_recovery.sql:44: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260629000000_abandoned_reindex_generation_recovery.sql:56: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260629000000_abandoned_reindex_generation_recovery.sql:68: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260629000000_abandoned_reindex_generation_recovery.sql:80: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260629000000_abandoned_reindex_generation_recovery.sql:92: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260629000000_abandoned_reindex_generation_recovery.sql:104: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql:15:create or replace function public.document_publication_state_digest(\nsupabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql:118:revoke all on function public.document_publication_state_digest(uuid, uuid) from public, anon, authenticated;\nsupabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql:119:grant execute on function public.document_publication_state_digest(uuid, uuid) to service_role;\nsupabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql:199: v_current_state_digest := public.document_publication_state_digest(old.id, old.owner_id);\nsupabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql:210:create or replace function public.publish_approved_documents(\nsupabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql:324: v_current_state_digest := public.document_publication_state_digest(v_document_id, v_expected_owner_id);\nsupabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql:367:revoke all on function public.publish_approved_documents(jsonb, text, integer) from public, anon, authenticated;\nsupabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql:368:grant execute on function public.publish_approved_documents(jsonb, text, integer) to service_role;\nsupabase/migrations/20260625000000_indexing_v3_agent_worker_hardening.sql:21: from public.ingestion_jobs j\nsupabase/migrations/20260625000000_indexing_v3_agent_worker_hardening.sql:26: foreign key (job_id) references public.ingestion_jobs(id) on delete cascade;\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:16:-- 5. Rewrite commit_document_index_generation DELETEs to use the typed column\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:135:-- Step 5: Update commit_document_index_generation to use typed columns\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:138:create or replace function public.commit_document_index_generation(\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:368:revoke execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) from public, anon, authenticated;\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:369:grant execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) to service_role;\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:409: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:422: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:435: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:448: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:461: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:474: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260702180000_promote_index_generation_id_columns.sql:487: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260708310000_r5_document_metadata_merge.sql:3:-- Root cause: commit_document_index_generation and worker updateDocument paths\nsupabase/migrations/20260708310000_r5_document_metadata_merge.sql:67:create or replace function public.commit_document_index_generation(\nsupabase/migrations/20260708310000_r5_document_metadata_merge.sql:306:revoke execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) from public, anon, authenticated;\nsupabase/migrations/20260708310000_r5_document_metadata_merge.sql:307:grant execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) to service_role;\nsrc/app/api/ingestion/jobs/route.ts:67: .from(\"ingestion_jobs\")\nsupabase/migrations/20260527002000_extension_schema_cleanup.sql:26:create or replace function public.claim_ingestion_jobs(\nsupabase/migrations/20260527002000_extension_schema_cleanup.sql:52: from public.ingestion_jobs j\nsupabase/migrations/20260527002000_extension_schema_cleanup.sql:68: update public.ingestion_jobs j\nsrc/app/api/ingestion/quality/route.ts:356: .from(\"ingestion_jobs\")\nsupabase/migrations/20260620000000_retrieval_accuracy_speed.sql:613: 'ingestion_jobs_status_next_run_idx',\nsupabase/migrations/20260620000000_retrieval_accuracy_speed.sql:614: 'ingestion_jobs_document_status_idx',\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:43: from public.ingestion_jobs\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:88: update public.ingestion_jobs\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:106: update public.ingestion_jobs\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:146: v_job public.ingestion_jobs%rowtype;\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:150: from public.ingestion_jobs\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:166: update public.ingestion_jobs\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:220: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:232: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:244: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:256: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:268: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:280: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:292: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260708130000_ingestion_concurrency_rpc_hardening.sql:357: select 1 from public.ingestion_jobs j\nsupabase/migrations/20260702190000_indexing_v3_agent_jobs_table.sql:34:-- corrupting data (commit_document_index_generation is idempotent).\nsupabase/migrations/20260702190000_indexing_v3_agent_jobs_table.sql:82:-- RLS + grants (service_role only, same as ingestion_jobs)\nsrc/app/api/jobs/route.ts:69: .from(\"ingestion_jobs\")\nsupabase/migrations/20260702000000_commit_generation_preserve_legacy_artifacts.sql:1:-- Audit M13 (repo audit 2026-07-01): commit_document_index_generation used to\nsupabase/migrations/20260702000000_commit_generation_preserve_legacy_artifacts.sql:26:create or replace function public.commit_document_index_generation(\nsupabase/migrations/20260702000000_commit_generation_preserve_legacy_artifacts.sql:228:revoke execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) from public, anon, authenticated;\nsupabase/migrations/20260702000000_commit_generation_preserve_legacy_artifacts.sql:229:grant execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) to service_role;\nsupabase/migrations/20260714110000_promote_documents_index_generation_id.sql:6:-- writer (commit_document_index_generation via apply_document_metadata_patch,\nsupabase/migrations/20260628000000_atomic_reindex_generation_commit.sql:35:create or replace function public.commit_document_index_generation(\nsupabase/migrations/20260628000000_atomic_reindex_generation_commit.sql:170:revoke execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) from public, anon, authenticated;\nsupabase/migrations/20260628000000_atomic_reindex_generation_commit.sql:171:grant execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) to service_role;\nsrc/app/api/setup-status/route.ts:117: supabase.from(\"ingestion_jobs\").select(\"id,attempt_count,max_attempts,locked_at\").limit(1),\nsrc/app/api/setup-status/route.ts:223: supabase.from(\"ingestion_jobs\").select(\"status,updated_at\").order(\"updated_at\", { ascending: false }).limit(1),\nsrc/app/api/setup-status/route.ts:225: .from(\"ingestion_jobs\")\nsupabase/migrations/20260713062139_route_enrichment_through_agent.sql:54: select 1 from public.ingestion_jobs\nsupabase/migrations/20260713062139_route_enrichment_through_agent.sql:116: select 1 from public.ingestion_jobs i\nsupabase/migrations/20260713062139_route_enrichment_through_agent.sql:131: select 1 from public.ingestion_jobs i\nsupabase/migrations/20260708140000_drop_ingestion_job_stages_job_id_fk.sql:1:-- R24e: remove the phantom ingestion_job_stages.job_id -> ingestion_jobs FK.\nsupabase/migrations/20260708140000_drop_ingestion_job_stages_job_id_fk.sql:6:-- job_id uuid not null references public.ingestion_jobs(id) on delete cascade,\nsupabase/migrations/20260708140000_drop_ingestion_job_stages_job_id_fk.sql:9:-- id into job_id), not ingestion_jobs ids. On any schema.sql- or\nsupabase/migrations/20260708140000_drop_ingestion_job_stages_job_id_fk.sql:13:-- to an ingestion_jobs row, so ADDING + VALIDATE-ing the FK (the prior\nsupabase/migrations/20260712170500_codify_live_operational_indexes.sql:39:create index if not exists ingestion_jobs_status_idx on public.ingestion_jobs (status);\nsupabase/migrations/20260712170500_codify_live_operational_indexes.sql:40:create index if not exists ingestion_jobs_updated_at_idx on public.ingestion_jobs (updated_at);\nsupabase/migrations/20260615114506_claim_ingestion_jobs_document_lock.sql:1:create or replace function public.claim_ingestion_jobs(\nsupabase/migrations/20260615114506_claim_ingestion_jobs_document_lock.sql:29: from public.ingestion_jobs j\nsupabase/migrations/20260615114506_claim_ingestion_jobs_document_lock.sql:41: from public.ingestion_jobs active\nsupabase/migrations/20260615114506_claim_ingestion_jobs_document_lock.sql:52: join public.ingestion_jobs j on j.id = e.id\nsupabase/migrations/20260615114506_claim_ingestion_jobs_document_lock.sql:60: update public.ingestion_jobs j\nsupabase/migrations/20260615114506_claim_ingestion_jobs_document_lock.sql:95:grant execute on function public.claim_ingestion_jobs(text, integer, integer) to service_role;\nsupabase/migrations/20260528007000_database_hardening_before_import.sql:37: public.ingestion_jobs,\nsrc/app/api/documents/[id]/reindex/route.ts:121: .from(\"ingestion_jobs\")\nsrc/app/api/documents/[id]/reindex/route.ts:144: // R17: a unique index on ingestion_jobs(document_id) where status in\nsrc/app/api/documents/[id]/reindex/route.ts:151: .from(\"ingestion_jobs\")\nsrc/app/api/documents/[id]/reindex/route.ts:165: .from(\"ingestion_jobs\")\nsupabase/migrations/20260702100000_add_claim_ingestion_jobs_comment.sql:1:-- Fix #12: Add explanatory comment to claim_ingestion_jobs explaining the\nsupabase/migrations/20260702100000_add_claim_ingestion_jobs_comment.sql:4:comment on function public.claim_ingestion_jobs(text, integer, integer) is\nsupabase/migrations/20260616000000_refresh_import_batch_status.sql:21: from public.ingestion_jobs\nsrc/app/api/documents/bulk/reindex/route.ts:122: .from(\"ingestion_jobs\")\nsrc/app/api/documents/bulk/reindex/route.ts:139: // index on ingestion_jobs(document_id) where status in\nsrc/app/api/documents/bulk/reindex/route.ts:146: .from(\"ingestion_jobs\")\nsrc/app/api/documents/bulk/reindex/route.ts:160: .from(\"ingestion_jobs\")\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:13:create index if not exists ingestion_jobs_status_next_run_idx\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:14: on public.ingestion_jobs(status, next_run_at, created_at)\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:16:create index if not exists ingestion_jobs_document_status_idx\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:17: on public.ingestion_jobs(document_id, status, created_at);\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:119: 'ingestion_jobs_status_next_run_idx',\nsupabase/migrations/20260615001000_indexing_reliability_recovery.sql:120: 'ingestion_jobs_document_status_idx',\nsupabase/functions/ingestion-worker/index.ts:282: from public.claim_ingestion_jobs(${workerId}, ${limit}, 45)\nscripts/sql/verify-delete-reindex-exclusion.sql:29:insert into public.ingestion_jobs (id, document_id, status, stage, progress)\nscripts/sql/verify-delete-reindex-exclusion.sql:69:delete from public.ingestion_jobs where id = 'd3000000-0000-4000-8000-000000000003';\nscripts/sql/verify-delete-reindex-exclusion.sql:97: insert into public.ingestion_jobs (document_id, status, stage, progress)\nscripts/sql/verify-publication-approval.sql:25: ('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Approved publication fixture.', array['fixture:approved'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\nscripts/sql/verify-publication-approval.sql:26: ('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'keep_private', 'Private publication fixture.', array['fixture:private'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000002', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\nscripts/sql/verify-publication-approval.sql:27: ('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'quarantine', 'Quarantine publication fixture.', array['fixture:quarantine'], repeat('a', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000003', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')),\nscripts/sql/verify-publication-approval.sql:28: ('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa', 'bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb', 'approved', 'Mutation protection fixture.', array['fixture:changed'], repeat('b', 64), public.document_publication_state_digest('10000000-0000-4000-8000-000000000006', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'));\nscripts/sql/verify-publication-approval.sql:30:select public.publish_approved_documents(\nscripts/sql/verify-publication-approval.sql:34: 'expected_state_digest', public.document_publication_state_digest('10000000-0000-4000-8000-000000000001', 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa')\nscripts/sql/verify-publication-approval.sql:62: perform public.publish_approved_documents(\nscripts/promote-public-documents-batch.ts:39: const { data: currentStateDigest, error: digestError } = await supabase.rpc(\"document_publication_state_digest\", {\nscripts/promote-public-documents-batch.ts:124: const { data: result, error: publishError } = await supabase.rpc(\"publish_approved_documents\", {\nscripts/import-documents.ts:286: const { error: jobError } = await supabase.from(\"ingestion_jobs\").insert({\nscripts/import-documents.ts:359: const { error: jobError } = await supabase.from(\"ingestion_jobs\").insert({\nscripts/reindex.ts:134: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"pending\"),\nscripts/reindex.ts:138: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"processing\"),\nscripts/reindex.ts:142: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"failed\"),\nscripts/reindex.ts:147: .from(\"ingestion_jobs\")\nscripts/reindex.ts:230: .from(\"ingestion_jobs\")\nscripts/reindex.ts:253: // processing sibling on ingestion_jobs_one_open_per_document_uidx (Audit I2/E2 follow-up).\nscripts/reindex.ts:317: .from(\"ingestion_jobs\")\nscripts/reindex.ts:337: .from(\"ingestion_jobs\")\nscripts/test-cross-tenant-staging.ts:527: const jobs = await admin.from(\"ingestion_jobs\").select(\"id\").in(\"document_id\", ids);\nscripts/test-cross-tenant-staging.ts:529: errors.push(`select ingestion_jobs: ${jobs.error.message}`);\nscripts/test-cross-tenant-staging.ts:535: await attempt(\"delete ingestion_jobs\", admin.from(\"ingestion_jobs\").delete().in(\"document_id\", ids));\nscripts/recover-ingestion-queue.ts:106: .from(\"ingestion_jobs\")\nscripts/recover-ingestion-queue.ts:172: .from(\"ingestion_jobs\")\nscripts/recover-ingestion-queue.ts:188: .from(\"ingestion_jobs\")\nscripts/reindex-health.ts:81: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"pending\"),\nscripts/reindex-health.ts:85: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"processing\"),\nscripts/reindex-health.ts:89: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"failed\"),\nscripts/reindex-health.ts:102: .from(\"ingestion_jobs\")\nscripts/supabase-recovery-status.ts:47: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"pending\"),\nscripts/supabase-recovery-status.ts:51: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"processing\"),\nscripts/supabase-recovery-status.ts:55: supabase.from(\"ingestion_jobs\").select(\"id\", { count: \"exact\", head: true }).eq(\"status\", \"failed\"),\nscripts/supabase-recovery-status.ts:60: .from(\"ingestion_jobs\")\nscripts/archive/check-m13-migration.ts:5:const M13_HEALTH_MARKER = \"commit_document_index_generation.preserve_legacy_artifacts_migration\";\nscripts/archive/check-m13-migration.ts:73: `[M13 Migration] FAIL: live commit_document_index_generation is missing the preserve-legacy-artifacts guard.`,\nscripts/archive/check-m13-migration.ts:81: if (missing.includes(\"commit_document_index_generation.signature\")) {\nscripts/archive/check-m13-migration.ts:82: console.error(\"[M13 Migration] FAIL: commit_document_index_generation RPC is missing on the live project.\");\nscripts/archive/check-july8-live-batch.ts:7:const R17_INDEX = \"ingestion_jobs_one_open_per_document_uidx\";\nscripts/archive/check-july8-live-batch.ts:32: if (!normalized.includes(\"ingestion_jobs\")) return false;\nscripts/archive/check-july8-live-batch.ts:171: const { error } = await supabase.from(\"ingestion_jobs\").delete().in(\"id\", uniqueIds);\nscripts/archive/check-july8-live-batch.ts:179: .from(\"ingestion_jobs\")\nscripts/archive/check-july8-live-batch.ts:190: .from(\"ingestion_jobs\")\nscripts/archive/check-july8-live-batch.ts:227: .from(\"ingestion_jobs\")\nscripts/archive/check-july8-live-batch.ts:263: const { error: firstError } = await supabase.from(\"ingestion_jobs\").insert({\nscripts/archive/check-july8-live-batch.ts:279: const { error: duplicateError } = await supabase.from(\"ingestion_jobs\").insert({\nscripts/archive/check-july8-live-batch.ts:317: `${R17_INDEX} missing on live — apply 20260708170000_ingestion_jobs_one_open_per_document.sql (or manual CONCURRENTLY + repair 20260708170000)`,\nscripts/archive/check-july8-live-batch.ts:324: `${R17_INDEX} definition mismatch — expected partial unique index on ingestion_jobs(document_id) for open statuses; got: ${definition || \"\"}`,\nscripts/archive/check-july8-live-batch.test.ts:13: CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx\nscripts/archive/check-july8-live-batch.test.ts:14: ON public.ingestion_jobs (document_id)\nscripts/archive/check-july8-live-batch.test.ts:23: CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx\nscripts/archive/check-july8-live-batch.test.ts:24: ON public.ingestion_jobs (document_id)\nscripts/archive/check-july8-live-batch.test.ts:32: \"CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx ON public.ingestion_jobs (batch_id)\";\nscripts/archive/check-july8-live-batch.test.ts:38: \"CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx ON public.ingestion_jobs (document_id) WHERE status IN ('pending', 'processing', 'failed')\";\nscripts/archive/check-july8-live-batch.test.ts:44: \"CREATE UNIQUE INDEX ingestion_jobs_one_open_per_document_uidx ON public.ingestion_jobs (document_id) WHERE status IN ('pending')\";\nscripts/archive/check-july8-live-batch.test.ts:54: message: 'duplicate key value violates unique constraint \"ingestion_jobs_one_open_per_document_uidx\"',\nscripts/archive/check-july8-live-batch.test.ts:63: message: 'duplicate key value violates unique constraint \"ingestion_jobs_pkey\"',\nscripts/check-indexing.ts:390: const { error: jobError } = await supabase.from(\"ingestion_jobs\").select(\"id,attempt_count,max_attempts\").limit(1);\nscripts/check-indexing.ts:527: .from(\"ingestion_jobs\")\nscripts/check-indexing.ts:531: .from(\"ingestion_jobs\")\nsrc/lib/ingestion-enqueue.ts:80: .from(\"ingestion_jobs\")\nsrc/lib/ingestion-enqueue.ts:104: .from(\"ingestion_jobs\")\nsrc/lib/ingestion-mutation-safety.ts:116:// families. `checkIngestionMutationSafety` only reads `ingestion_jobs`, so it\nsrc/lib/ingestion-mutation-safety.ts:196: .from(\"ingestion_jobs\")\nsrc/lib/ingestion.ts:114:// Audit R1: the worker never refreshes ingestion_jobs.locked_at during a job,\nsrc/lib/ingestion.ts:116:// claim_ingestion_jobs while the original worker is still alive → two workers\nsrc/lib/supabase/database.types.ts:1388: ingestion_jobs: {\nsrc/lib/supabase/database.types.ts:1445: foreignKeyName: \"ingestion_jobs_batch_id_fkey\";\nsrc/lib/supabase/database.types.ts:1452: foreignKeyName: \"ingestion_jobs_document_id_fkey\";\nsrc/lib/supabase/database.types.ts:1459: foreignKeyName: \"ingestion_jobs_document_id_fkey\";\nsrc/lib/supabase/database.types.ts:2247: claim_ingestion_jobs: {\nsrc/lib/supabase/database.types.ts:2286: commit_document_index_generation: {\nsrc/lib/supabase/database.types.ts:2846: document_publication_state_digest: {\nsrc/lib/supabase/database.types.ts:2850: publish_approved_documents: {\ntests/ingestion-enqueue.test.ts:13:// ingestion_jobs.insert(...).select().single() -> { data, error }\ntests/ingestion-enqueue.test.ts:14:// ingestion_jobs.select(\"id\").eq(...).in(...).limit(1) -> { data, error } (23505 path)\ntests/api-validation-contract.test.ts:443: if (call.table === \"ingestion_jobs\") return ok([{ id: \"job-2\", status: \"pending\" }], 5);\ntests/api-validation-contract.test.ts:461: expect(client.calls[0]).toMatchObject({ table: \"ingestion_jobs\", range: { from: 1, to: 2 } });\ntests/api-validation-contract.test.ts:467: expect(client.calls[1]).toMatchObject({ table: \"ingestion_jobs\", range: { from: 1, to: 2 } });\ntests/api-validation-contract.test.ts:541: if (call.table === \"ingestion_jobs\" && call.operation === \"select\" && call.maybeSingle) {\ntests/ingestion-quality-route.test.ts:80: ingestion_jobs: [\ntests/ingestion-quality-route.test.ts:162: ingestion_jobs: [],\ntests/supabase-schema.test.ts:50: new URL(\"../supabase/migrations/20260708160000_ingestion_jobs_one_open_per_document.sql\", import.meta.url),\ntests/supabase-schema.test.ts:54: new URL(\"../supabase/migrations/20260708170000_ingestion_jobs_one_open_per_document.sql\", import.meta.url),\ntests/supabase-schema.test.ts:282: /grant select, insert, update, delete on table .*public\\.documents, .*public\\.document_pages, .*public\\.document_images, .*public\\.image_caption_cache, .*public\\.document_labels, .*public\\.document_summaries, .*public\\.document_sections, .*public\\.document_memory_cards, .*public\\.document_chunks, .*public\\.ingestion_jobs, .*public\\.rag_queries, .*public\\.storage_cleanup_jobs.* to service_role;/,\ntests/supabase-schema.test.ts:305: \"ingestion_jobs\",\ntests/supabase-schema.test.ts:319: expect(schema).toContain(\"create or replace function public.claim_ingestion_jobs\");\ntests/supabase-schema.test.ts:338: expect(sql).toContain(\"create or replace function public.commit_document_index_generation\");\ntests/supabase-schema.test.ts:361: \"revoke execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) from public, anon, authenticated\",\ntests/supabase-schema.test.ts:371: \"revoke execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) from public, anon, authenticated, service_role\",\ntests/supabase-schema.test.ts:374: \"grant execute on function public.commit_document_index_generation(uuid, uuid, text, integer, integer, integer, jsonb, jsonb, jsonb) to service_role\",\ntests/supabase-schema.test.ts:437: // R24e: schema.sql no longer declares a job_id -> ingestion_jobs FK. Live has\ntests/supabase-schema.test.ts:438: // none, and job_id holds indexing_v3_agent_jobs ids, not ingestion_jobs ids,\ntests/supabase-schema.test.ts:443: expect(schema).not.toContain(\"job_id uuid not null references public.ingestion_jobs(id) on delete cascade\");\ntests/supabase-schema.test.ts:445: \"add constraint ingestion_job_stages_job_id_fkey foreign key (job_id) references public.ingestion_jobs(id) on delete cascade\",\ntests/supabase-schema.test.ts:626: [\"ingestion_jobs_one_open_per_document\", 2],\ntests/supabase-schema.test.ts:1038: expect(sql).toContain(\"commit_document_index_generation.preserve_legacy_artifacts_migration\");\ntests/supabase-schema.test.ts:1177: expect(sql).toContain(\"create or replace function public.publish_approved_documents(\");\ntests/supabase-schema.test.ts:1180: \"grant execute on function public.publish_approved_documents(jsonb, text, integer) to service_role;\",\ntests/supabase-schema.test.ts:1188: expect(sql).toContain(\"create or replace function public.document_publication_state_digest(\");\ntests/supabase-schema.test.ts:1190: expect(sql).toContain(\"v_current_state_digest := public.document_publication_state_digest(\");\ntests/supabase-schema.test.ts:1194: const functionStart = sql.indexOf(\"create or replace function public.publish_approved_documents(\");\ntests/supabase-schema.test.ts:1212: functionBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\ntests/supabase-schema.test.ts:1219: guardBody.indexOf(\"v_current_state_digest := public.document_publication_state_digest(\"),\ntests/supabase-schema.test.ts:1229: const activeJobCheck = functionBody.indexOf(\"from public.ingestion_jobs j\");\ntests/supabase-schema.test.ts:1242: expect(retryBody.indexOf(\"for update of d, j;\")).toBeLessThan(retryBody.indexOf(\"update public.ingestion_jobs\"));\ntests/supabase-schema.test.ts:1379: it(\"keeps ingestion_jobs_one_open stem neutralized for preview history parity\", () => {\ntests/supabase-schema.test.ts:1383: expect(ingestionJobsOneOpenMigration).toContain(\"ingestion_jobs_one_open_per_document_uidx\");\ntests/worker-visual-capture.test.ts:46: expect(workerSource).toContain('if (error) throw supabaseStageError(\"commit_document_index_generation\", error)');\ntests/private-access-routes.test.ts:1368: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return ok({ id: \"job-1\" });\ntests/private-access-routes.test.ts:1412: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return ok({ id: \"job-1\" });\ntests/private-access-routes.test.ts:1462: expect(client.calls.some((call) => call.table === \"ingestion_jobs\" && call.operation === \"insert\")).toBe(false);\ntests/private-access-routes.test.ts:1473: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:1513: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:1573: expect(client.calls.some((call) => call.table === \"ingestion_jobs\" && call.operation === \"insert\")).toBe(false);\ntests/private-access-routes.test.ts:2167: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") {\ntests/private-access-routes.test.ts:2223: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") {\ntests/private-access-routes.test.ts:2324: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2325: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return fail(\"job insert failed\");\ntests/private-access-routes.test.ts:2385: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2387: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:2388: return fail(\"ingestion_jobs_document_id_fkey\", \"23503\");\ntests/private-access-routes.test.ts:2428: if (call.table === \"ingestion_jobs\" && call.operation === \"select\" && call.limitCount === 1) {\ntests/private-access-routes.test.ts:2431: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2432: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return fail(\"job insert failed\");\ntests/private-access-routes.test.ts:2480: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2482: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return fail(\"bulk job insert failed\");\ntests/private-access-routes.test.ts:2549: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2551: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:2552: return fail(\"ingestion_jobs_document_id_fkey\", \"23503\");\ntests/private-access-routes.test.ts:2598: if (call.table === \"ingestion_jobs\" && call.operation === \"select\" && call.limitCount === 1) {\ntests/private-access-routes.test.ts:2601: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:2603: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") return fail(\"bulk job insert failed\");\ntests/private-access-routes.test.ts:2667: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:2703: if (call.table === \"ingestion_jobs\" && call.operation === \"insert\") {\ntests/private-access-routes.test.ts:3323: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:3381: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:3423: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") return ok([]);\ntests/private-access-routes.test.ts:3457: if (call.table === \"ingestion_jobs\" && call.operation === \"select\") {\ntests/ingestion-edge-function-auth.test.ts:30: expect(source.indexOf(\"hasServiceRoleAuthorization\")).toBeLessThan(source.indexOf(\"public.claim_ingestion_jobs\"));\n","/bin/bash -lc \"sed -n '1,360p' supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql && rg -n \\\"ingestion_jobs|commit_document_index_generation|document_publication_state_digest|publish_approved\\\" supabase src scripts tests -g'*.sql' -g'*.ts'\"",[1129,1130],2,"26371",{"_689":1135,"_371":1096,"_259":1097,"_96":1053},{"_689":1131,"_259":1132,"_839":1133,"_96":1134},"rg -n 'ingestion_jobs|commit_document_index_generation|document_publication_state_digest|publish_approved' supabase src scripts tests '-g*.sql' '-g*.ts'","supabase","ingestion_jobs|commit_document_index_generation|document_publication_state_digest|publish_approved","search","sed -n '1,360p' supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql",{"_637":1137,"_616":617,"_639":623},{"_706":1138,"_678":1118,"_45":1139,"_644":1140,"_371":710,"_711":-5,"_96":712},"{\"cmd\":\"sed -n '1,360p' supabase/migrations/20260722190000_bind_publication_approval_to_reviewed_state.sql && rg -n \\\"ingestion_jobs|commit_document_index_generation|document_publication_state_digest|publish_approved\\\" supabase src scripts tests -g'*.sql' -g'*.ts'\",\"workdir\":\"/workspace/Database\",\"max_output_tokens\":40000}","fc_03a2e9824edee382016a60a9b1aacc8197975ace42d4829668",{"_649":623},{"_637":1142,"_616":617,"_639":623},{"_640":-5,"_661":1143,"_45":1144,"_644":1145,"_665":1146,"_96":667},"gAAAAABqYKmxhqxL2cgMaoXABe9lg7tl5zfao7Z4sfeFAsFljXK_BX5iaGorG9AK7CUkRZhi7OBslYiMp41SrcE45fkrVZwYsJWcEzRJ5PZ5mwsPMaSVPK5JlnTa6Bvk5dolEZj8tXr5dwus7jnbjREGZioPE5ZpX4ZVxmawzAiputxZamQd_5IjNuz3ACqOuRPPdVC6lEQQ_bz0_z1lUyK74lJB1o9uJEml6cF4FH2jLUqB2yKMN4h3JclhOS5ZxuvVlCq2YDNzb7icBlnw7QqDban40f2Jw9ZR0Pl8DHRVBE7ccuBf9bufr89IMjkdX5IeKA3WiVnoprGt1WXCeZ7KX4wRy_uG0y3WwVw-PBmMN5miLYgNlUUks62aiFpaRhYGOys_tlmkQyK9-Vw7h8Q8kIZV5YCGNZ-P2Pl27Y5NGOWlz72Xd6wCA9c-DNEFRCJnCc4lcIBpwBwBo1G2Kr_oQWGMIjgAoHSZdDiKFj0KnJnGeBWP2AIBjQmmhN9Zc7-Fpo16SYhHG6D94Bg8mKEH1SMXnUJPr2TEmYxAq-eIETUeORUHPQNyPDYpckQUWA-jFXw5TfK359NjoOByOZGhZdzrms3K16_4ErOeTIpp5Iwov9fsz5RgKIcPP2hZjHqe-CD9Hi4M2mz72yjT-ywajFGCOqykVOJ8wQdu6fYrDJueJ8upLjIZMIiRm-wAeMlT5-Q16evG3Tz-ckPrIc_sabCVDulOgmHmtC1YUGjLCuWGbWo2sZJH6YIRSVjHXR_Hhxb4B71OZMbmnPYsvePftPD4pIy9j0igNvd4SkqukllFqB4COuhTXtdlq28mJMvZkv3faxjOz2lESMVW4tJV0nVBecLUw1u_vzgYKZEMlc4sDTtvZE1699ri_snBngQdSofspgw24P-tGPInO0n4f1nhzPJ9w171VXnzLi3C1wYh_F9KH5f_8dmsfd4uqSoztejq19gz","rs_03a2e9824edee382016a60a9b12cb08197bb0cb81457d9fb3e",{"_649":623},[1147],{"_49":1148,"_96":670},"**Inspecting files**",{"_655":1150,"_637":1151,"_616":617,"_639":623},1784719793574,{"_640":1152,"_45":1144,"_665":1153,"_96":667},[],[1148],{"_637":1155,"_616":617,"_639":623},{"_678":1156,"_45":-5,"_644":1157,"_681":1158,"_96":683},"call_vTo5IkX4qc7I2lCJSQUcR4Tg",{"_649":623},"Chunk ID: 29fb33\nWall time: 0.0002 seconds\nProcess exited with code 0\nOriginal token count: 3920\nOutput:\n## work\n659e417 fix(db): bind publication approval to reviewed state\n6976aae Fail readiness closed on Supabase probe errors (#1080)\na8814b6 fix(auth): prefer current session cookies (#1079)\n8dad90b perf(images): optimize private signed previews through next/image (#014) (#1071)\n001ce35 fix(auth): reject invalid optional credentials (#1078)\n\n\n# This is NOT the Next.js you know\n\nThis version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` before writing any code. Heed deprecation notices.\n\n\n\n\n\n## Dependency shortcut\n\nWhen the user types exactly `dependency` as the entire task message, after trimming surrounding whitespace, treat it as a shortcut for safe dependency maintenance. This is a Codex chat shortcut, not an app feature, script, automation, or CI workflow.\n\nGoal:\nUpdate direct project dependencies to the newest stable compatible versions, regenerate the existing lockfile, identify source/config/test code that relies on old dependency behavior, make the smallest safe compatibility changes, and verify the result. Do not rewrite the project, switch package managers, discard user work, commit, push, deploy, or run destructive cleanup without explicit confirmation.\n\nStart with read-only inspection:\n\n- Check branch, upstream, worktrees, recent relevant history, and `git status`.\n- If on `main`, `master`, `develop`, `release/*`, or another protected/base branch, create/switch to `codex/dependency-maintenance` before editing, if safe.\n- Inspect manifests, lockfiles, package-manager config, runtime/toolchain files, workspace layout, CI config, scripts, and documented checks.\n- Detect repo-local install/dev/test/build/watch/server processes that could race dependency updates.\n- Preserve all existing staged, unstaged, and untracked user work.\n\nPackage-manager rules:\n\n- Use the package manager already used by the repo: npm, pnpm, yarn, bun, pip, poetry, uv, cargo, go, bundler, gradle, maven, dotnet, or equivalent.\n- Do not switch package managers or create a new lockfile type.\n- Respect engines, runtime versions, lockfiles, workspaces, wrappers, and repo conventions.\n- In monorepos or polyglot repos, update each ecosystem through its native workspace-aware workflow.\n\nDependency update rules:\n\n- Identify outdated direct production and development dependencies.\n- Compare both manifest ranges and locked/installed versions against latest stable compatible releases.\n- Treat “outdated packages found” exit codes as normal where applicable.\n- Avoid prerelease, alpha, beta, canary, rc, next, nightly, and experimental versions unless the stable channel points there and explain why.\n- Do not use force or legacy flags that bypass peer, engine, resolver, or lockfile integrity checks unless explicitly approved.\n- Do not run forced audit fixes or broad destructive codemods.\n- If latest is incompatible, use the newest compatible version and document why.\n- Group risky updates coherently, such as framework plus plugins, test runner plus coverage, lint core plus plugins, or runtime plus adapter packages.\n\nCompatibility audit:\n\n- For every major update and every core framework/runtime/build/test/lint/UI/database update, inspect release notes, migration guides, peer ranges, engines, and changelogs when available.\n- Search source, tests, scripts, config, and CI for imports, APIs, CLI flags, config keys, environment variables, plugin names, generated types, or file paths tied to changed dependencies.\n- If old dependency behavior is used, make the smallest safe migration that preserves behavior.\n- If migration is large, risky, architectural, or product-affecting, stop after discovery and provide a concrete fix plan with affected files, package versions, sequence, and verification commands.\n- Add or adjust focused tests only when needed to prove migrated behavior.\n\nGenerated and sensitive files:\n\n- Do not intentionally keep dependency directories, build outputs, caches, logs, local state, test artifacts, browser artifacts, `.env*`, secrets, keys, tokens, credentials, or machine-local config.\n- Manifest and existing lockfile changes are allowed.\n\nVerification:\n\n- Run a cheap baseline first when useful to distinguish pre-existing failures.\n- After updates, run install/dependency validation, then relevant lint, type check, tests, build, smoke/UI/a11y, codegen, integration checks, or equivalent.\n- For frontend/browser-facing changes, run browser/UI verification when framework, bundler, router, styling, test runner, or browser automation changed.\n- If a check fails, fix dependency-related breakage and rerun the smallest failing check before broader checks.\n- Run non-mutating audit/vulnerability checks when available.\n- Confirm no repo-owned dev server, watcher, or temporary process was left running unless requested.\n\nFinal response for `dependency` must include:\n\n- Branch and worktree state.\n- Package manager, runtime, manifests, and lockfiles detected.\n- Outdated dependencies found.\n- Dependencies updated, old version -> new version.\n- Dependencies not updated and why.\n- Files changed.\n- Compatibility migrations and old APIs found/fixed.\n- Checks run and results.\n- Checks not run and why.\n- Audit/vulnerability summary.\n- Generated/untracked files left behind.\n- Branch movement, external repo changes, or process cleanup observed.\n- Risks or follow-up work.\n- Confirmation that no commit or push was made unless explicitly requested.\n\nAfter setup:\n\n- Verify root `AGENTS.md` contains exactly one `## Dependency shortcut` section.\n- Show the final diff for `AGENTS.md`.\n- Summarize what changed.\n- Confirm no dependency update, install, test, build, audit, commit, or push was performed.\n\n\n\n\n\n## Bug-hunter shortcut\n\nWhen the user types exactly `bug-hunter` as the entire task message, after trimming surrounding whitespace, treat it as a shortcut for targeted defect discovery.\n\nExecution rules:\n\n- Invoke the `bug-hunter` skill first.\n- Prioritize reproducible defects over code style, naming, or formatting feedback.\n- Trace realistic failure paths: invalid input, empty states, retries, race/concurrency issues, stale state/cache, network/auth failures, permissions, and boundary values.\n- For each finding, include trigger, expected behavior, actual risk, and the smallest proof (or targeted test/check) that would catch it.\n- If no high-confidence defect is found, explicitly state that and list the most likely residual risk area.\n\nScope and safety:\n\n- Keep the hunt scoped to code touched by the user request unless the defect clearly crosses module boundaries.\n- Do not make broad refactors while hunting; propose minimal fixes for confirmed issues.\n- Run the smallest focused verification for each confirmed defect, then expand only if needed.\n\n\n\n\n\n## Codex review throttling and routing\n\nDo not review branches opportunistically. Review the current changed diff, PR, or branch only when the user explicitly asks for review/audit/hunter/cleanup/upload work, when CI/check failures are the task, or when the current change touches high-risk areas that require a targeted review before handoff.\n\nUse `docs/codex-review-protocol.md` as the shared review protocol for every repo-local review skill, branch/PR review, audit, bug hunt, release-readiness check, and PR/CI review.\n\nBefore reviewing a branch or PR:\n\n- Check `docs/branch-review-ledger.md` if it exists.\n- Resolve the target with `git rev-parse `.\n- If the same branch/ref and HEAD SHA were already reviewed for the same scope, summarize the prior ledger outcome and skip the repeat review unless the user explicitly requests a fresh pass.\n- If the target HEAD changed, review only the changed scope and update the ledger after the review.\n\nBefore reviewing multiple branches:\n\n- Build a short branch inventory first: branch, upstream, ahead/behind, last commit, and merged status.\n- Skip branches already merged into `main`.\n- Skip unchanged branches already recorded in `docs/branch-review-ledger.md`.\n- Do not re-review every branch after ordinary coding tasks.\n- If a repeated request targets unchanged reviewed branches, summarize the prior result and ask before doing another full pass.\n\nReview routing:\n\n- `diff-review`: Use for explicit review of the current diff, PR, or named branch. Findings first, ordered by severity, with file/line evidence.\n- `bug-hunter`: Use only for the exact `bug-hunter` shortcut or an explicit defect-hunt request. Prioritize reproducible bugs and smallest proof.\n- `repo-auditor`: Use for explicit repo-wide audit/refactor/dead-code/import/dependency-structure requests. Treat outputs as triage, not automatic delete lists.\n- `release-readiness`: Use for explicit release, merge, PR readiness, or handoff confidence requests. Do not run provider-backed gates without confirmation.\n- `branch-cleanup`: Use only when the prompt explicitly asks for branch cleanup/hygiene or branch deletion candidates. Apply `docs/branch-cleanup-guide.md` and the review ledger before inspecting branch diffs.\n- `pr-ci-fix`: Confirmation-required for this repo. GitHub/GitLab API calls, PR comments, CI reruns, commits, and pushes require explicit user approval and must respect the upload/handoff rules. Exception: an explicit `Run PR` sweep carries this approval (see \"## Run PR shortcut\").\n\nWhen a branch or PR review completes, record the reviewed branch/ref, HEAD SHA, date, scope, outcome, and checks in `docs/branch-review-ledger.md`.\n\n\n\n\n\n# Local server safety\n\n- If the user says `run`, execute `npm run ensure` and return the printed URL.\n- If the user asks for UI/frontend changes, browser QA, screenshots, mobile checks, or a local app link, run `npm run ensure` before opening or testing the app, even if the user did not say `run`.\n- Never assume `localhost:3000`, `localhost:3001`, or `localhost:3002`.\n- Never attach to a local server unless `/api/local-project-id` confirms it is this project.\n- Do not kill or modify other projects' local servers. If the stable project port is busy, let `npm run ensure` choose the next safe project URL.\n- Do not run a permanent watcher. Only start or verify the server when the current chat task needs the app or the user asks to run it.\n\n\n\n\n\n# Process hardening phases\n\n- For non-trivial source/config/test changes, prefer `npm run verify:cheap` as the first broad gate and `npm run verify:pr-local` before PR handoff when the change is ready. The PR-local gate runs the full unit suite once, then conditionally adds the production build/client-bundle scan and RAG fixture/manifest validation. Browser, dependency-audit, Docker/Supabase replay, and provider-backed checks remain separate gates. Use `npm run verify:pr-local -- --dry-run --files ` to inspect selection without running commands. The broader `--extended` plan is dry-run only unless explicit approval is reflected by `ALLOW_EXTENDED_PR_LOCAL=true`.\n- Run one heavy Database command at a time across all worktrees. Do not install while a repository test, build, lint, typecheck, or server command is active. Avoid aggressive short-interval polling, and do not repeat an unchanged full gate after it passes.\n- For UI, frontend, browser, routing, styling, reduced-motion, or forced-colors changes, run `npm run ensure` before browser work and use `npm run verify:ui` as the Chromium UI gate.\n- For release or handoff confidence, use `npm run verify:release`; this includes the full Playwright project set.\n- For clinical ingestion, answer generation, source governance, privacy, production-readiness, or environment changes, run the smallest relevant domain check plus `npm run check:production-readiness`.\n- For pull requests that touch ingestion, answer generation, search/ranking, source rendering, document access, privacy, production env, or clinical output, complete the clinical governance preflight in `.github/pull_request_template.md`.\n- Track known verification debts and staged process improvements in `docs/process-hardening.md` instead of relying on chat-only memory.\n\n\n\n\n\n# Page and button wiring\n\nInteractive controls and routes follow conventions the codebase already holds to. Before adding\nor moving a button, link, or route, read `docs/wiring-conventions.md`. A control that advertises an\naction must perform one; a page that ships must be reachable.\n\n- **Buttons.** Every interactive `