feat(server): W2-B sources, identity resolution, metadata and site workbench

- Sites / accounts / feeds: registry view (/site-definitions), site CRUD with
  enable/disable (history stays queryable, marked site_disabled), accounts and
  feed URLs stored as secrets (only secret_ref / redacted urlDisplay exposed),
  feed enable/disable/reset/fetch; one shared rate limiter + adapter per site.
- Tasks: ingestFeed (FeedFetchState/FeedCursor on feed_source, observation
  feed+guid upsert with digest-change updates, source_release site+id
  aggregation across feeds, auth failure -> account invalid + decision, no
  retry, gap -> feed.gap_suspected -> budgeted backfill snapshot),
  resolveObservation (parseRelease -> local recall via title_alias pg_trgm +
  accepted identities -> TMDB -> resolveIdentity; auto binds entity /
  provisional units / identities / aliases, otherwise identity_candidate pool
  with evidence version and bounded review backoff; manual lock respected),
  refreshMetadata (metadata_field + field_override, user locks win, paths
  untouched), snapshotSite (site_snapshot coverage records).
- Events: feed.due, feed.gap_suspected, release.observed (self-consumed),
  release.resolved, decision.created/updated; scheduler in worker start().
- Identity API: entity detail with redirects, manual mapping correction with
  identity_revision, merge with identity_redirect, pool list/assign/dismiss/
  retry, content unit numbering lock, aliases, external identities.
- Decisions: list/summary (by entity and kind)/detail/resolve; identity
  options executed directly.
- Workbench: /sites/{id}/releases (snapshot first, coalesced live search with
  backoff, origin + freshness) and /sites/{id}/releases/{rid} (volatile field
  recheck times, refresh keeps data on failure).
- Capabilities: catalog.lookup, release.search, release.inspect,
  identity.resolve.
- Migrations 0018-0020: site.adapter api, source_release.resolution_locked,
  site_snapshot, identity_candidate, resolution_attempt, identity_redirect,
  metadata_field, field_override.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/db/README.md

@@ -29,6 +29,9 @@ PostgreSQL 访问层:Kysely 客户端与连接池、表类型(`src/types.ts`)、
 | `0012_organization` | organization_record(change_seq 序列 + 触发器)、organization_file_result;回填 asset_operation.organization_record_id |
 | `0013_tasks_tables` | 并入 @umt/tasks 自有表:tasks_run_meta、tasks_fact、tasks_op_ledger(if not exists,可接管 W1 旧库) |
 | `0014_agent_run_event` | agent_run_event:Agent 运行事件,主键 (run_id, seq),删 run 级联 |
+| `0018_sources_snapshot` | site.adapter 增加 `api`;source_release.resolution_locked(人工锁);site_snapshot(快照/补漏/实时补查的覆盖范围) |
+| `0019_identity_pool` | identity_candidate(待识别池)、resolution_attempt(识别尝试)、identity_redirect(合并跳转) |
+| `0020_metadata_fields` | metadata_field(来源候选字段)、field_override(用户覆盖与锁定) |
 
 ## 表清单(45 张)
 
@@ -59,6 +62,11 @@ PostgreSQL 访问层:Kysely 客户端与连接池、表类型(`src/types.ts`)、
 | `title_alias` | 原名/译名/简称/站点原标题;`normalized` 上建 gin trgm 索引做模糊召回 |
 | `external_identity` | 本地对象 ↔ 外部 ID;**`(provider, entity_type, external_id)` 对 accepted 部分唯一**,同一本地对象每个 provider+type 只有一个 accepted;候选(proposed/conflicted)可并存;404/超时只记 `verify_status` |
 | `identity_revision` | 身份每次变更的修订历史,`(external_identity_id, revision)` 唯一,只追加 |
+| `identity_candidate` | 待识别池:每条 source_release 至多一条;候选只存 JSON(不建正式作品),保存原因/证据版本/复查时间(有界退避) |
+| `resolution_attempt` | 每次识别尝试的结果与证据版本,只追加 |
+| `identity_redirect` | 作品合并后的旧 ID 跳转,`from_entity_id` 唯一 |
+| `metadata_field` | 各来源的候选字段值(来源/语言/时间/来源修订);刷新只写这里 |
+| `field_override` | 用户字段覆盖与锁定,优先于自动来源;目标 + 字段唯一 |
 
 ### 来源
 | 表 | 用途与关键不变量 |
@@ -68,6 +76,7 @@ PostgreSQL 访问层:Kysely 客户端与连接池、表类型(`src/types.ts`)、
 | `feed_source` | RSS/列表/查询入口;真实 URL(含 passkey)只在 `url_secret_ref`,对外只给 `url_display`;按 `next_fetch_at` 调度 |
 | `source_release` | 站点资源;**`(site_id, site_release_id)` 唯一**,多 Feed 观察汇到同一行;`source_published_at`/`first_seen_at` 分开 |
 | `observation` | 一次原始观察;**`(feed_id, guid)` 唯一**,`content_digest` 变化即条目更新 |
+| `site_snapshot` | 一次列表快照 / 补漏 / 实时补查:页码、条目数、状态与错误(新鲜度来源) |
 
 ### 文件
 | 表 | 用途与关键不变量 |

packages/db/migrations/0018_sources_snapshot.ts

@@ -0,0 +1,51 @@
+import type { Kysely } from "kysely";
+import { dropTables, entityTable, execDdl, oneOf } from "../src/migration-helpers.ts";
+
+// W2-B 来源补充(REQ §4.5、§4.6、§7.5):
+// - site.adapter 增加 api(MP 专用 API spider:Haidan/HDDolby/RousiPro/…,见 adapters/sites/spiders);
+// - source_release.resolution_locked:人工确认的身份关联,自动识别不得改写;
+// - site_snapshot:每次列表快照/实时补查/补漏的覆盖范围与新鲜度(不把一次分页伪称全站快照)。
+
+// biome-ignore lint/suspicious/noExplicitAny: 迁移不依赖应用表类型
+export async function up(db: Kysely<any>): Promise<void> {
+  await execDdl(
+    db,
+    `
+alter table site drop constraint site_adapter_check;
+alter table site add constraint site_adapter_check ${oneOf("adapter", ["nexusphp", "mteam_api", "api", "generic_rss"])};
+
+alter table source_release add column resolution_locked boolean not null default false;
+
+${entityTable(
+  "site_snapshot",
+  `
+  site_id uuid not null references site (id) on delete cascade,
+  kind text not null ${oneOf("kind", ["periodic", "backfill", "live_search", "manual"])},
+  query text,
+  filters jsonb not null default '{}'::jsonb,
+  pages jsonb not null default '[]'::jsonb,
+  item_count integer not null default 0,
+  new_count integer not null default 0,
+  status text not null default 'running' ${oneOf("status", ["running", "ok", "partial", "failed"])},
+  error jsonb,
+  definition_version text,
+  started_at timestamptz not null default now(),
+  finished_at timestamptz`,
+)}
+create index site_snapshot_site_idx on site_snapshot (site_id, started_at desc);
+`,
+  );
+}
+
+// biome-ignore lint/suspicious/noExplicitAny: 同上
+export async function down(db: Kysely<any>): Promise<void> {
+  await execDdl(
+    db,
+    `
+${dropTables(["site_snapshot"])}
+alter table source_release drop column if exists resolution_locked;
+alter table site drop constraint site_adapter_check;
+alter table site add constraint site_adapter_check ${oneOf("adapter", ["nexusphp", "mteam_api", "generic_rss"])};
+`,
+  );
+}

packages/db/migrations/0019_identity_pool.ts

@@ -0,0 +1,74 @@
+import type { Kysely } from "kysely";
+import { dropTables, entityTable, execDdl, oneOf } from "../src/migration-helpers.ts";
+
+// W2-B 待识别池与身份治理(REQ §7.2、§7.5):
+// - identity_candidate:每条 source_release 至多一条待识别记录,候选只存 JSON,不逐个建为正式作品;
+//   失败保存原因、证据版本与下一次复查时间(有界退避),新证据到来时重试;
+// - resolution_attempt:每次识别尝试的结果与证据版本(只追加);
+// - identity_redirect:作品合并后的旧 ID 跳转历史(与 media_entity.merged_into_id 一致,可修订)。
+
+const ACTOR = ["user", "agent", "system", "api_key"] as const;
+
+// biome-ignore lint/suspicious/noExplicitAny: 迁移不依赖应用表类型
+export async function up(db: Kysely<any>): Promise<void> {
+  await execDdl(
+    db,
+    `
+${entityTable(
+  "identity_candidate",
+  `
+  source_release_id uuid not null references source_release (id) on delete cascade,
+  status text not null default 'pending' ${oneOf("status", ["pending", "resolved", "dismissed", "archived"])},
+  reason text not null ${oneOf("reason", ["ambiguous", "no_match", "proposed", "lookup_failed"])},
+  query jsonb not null default '{}'::jsonb,
+  candidates jsonb not null default '[]'::jsonb,
+  evidence_version text not null,
+  attempts integer not null default 0,
+  last_attempt_at timestamptz,
+  next_review_at timestamptz,
+  decision_id uuid references decision (id) on delete set null,
+  resolved_media_entity_id uuid references media_entity (id) on delete set null,
+  resolved_by text,
+  resolved_at timestamptz,
+  constraint identity_candidate_release_key unique (source_release_id)`,
+)}
+create index identity_candidate_review_idx on identity_candidate (next_review_at) where status = 'pending';
+create index identity_candidate_status_idx on identity_candidate (status, updated_at desc);
+
+${entityTable(
+  "resolution_attempt",
+  `
+  source_release_id uuid not null references source_release (id) on delete cascade,
+  observation_id uuid references observation (id) on delete set null,
+  outcome text not null ${oneOf("outcome", ["auto", "proposed", "ambiguous", "no_match", "lookup_failed", "manual", "skipped_locked"])},
+  reason text,
+  evidence_version text not null,
+  candidate_count integer not null default 0,
+  media_entity_id uuid references media_entity (id) on delete set null,
+  best jsonb,
+  error jsonb,
+  actor_type text not null default 'system' ${oneOf("actor_type", ACTOR)},
+  actor_id text`,
+)}
+create index resolution_attempt_release_idx on resolution_attempt (source_release_id, created_at desc);
+
+${entityTable(
+  "identity_redirect",
+  `
+  from_entity_id uuid not null references media_entity (id) on delete cascade,
+  to_entity_id uuid not null references media_entity (id) on delete cascade,
+  reason text,
+  actor_type text not null ${oneOf("actor_type", ACTOR)},
+  actor_id text,
+  constraint identity_redirect_from_key unique (from_entity_id),
+  constraint identity_redirect_not_self check (from_entity_id <> to_entity_id)`,
+)}
+create index identity_redirect_to_idx on identity_redirect (to_entity_id);
+`,
+  );
+}
+
+// biome-ignore lint/suspicious/noExplicitAny: 同上
+export async function down(db: Kysely<any>): Promise<void> {
+  await execDdl(db, dropTables(["identity_redirect", "resolution_attempt", "identity_candidate"]));
+}

packages/db/migrations/0020_metadata_fields.ts

@@ -0,0 +1,54 @@
+import type { Kysely } from "kysely";
+import { dropTables, entityTable, execDdl, oneOf } from "../src/migration-helpers.ts";
+
+// W2-B 字段级元数据协调(REQ §7.3):
+// - metadata_field:各来源的候选字段值(来源/语言/时间/来源修订),刷新只写这里;
+// - field_override:用户(或 Agent 生成并确认)的字段覆盖与锁定,优先于任何自动来源;
+// 最终展示值投影到 media_entity.metadata / content_unit.metadata。路径绑定不受元数据刷新影响。
+
+const SOURCE = ["tmdb", "user", "agent", "nfo", "site", "import"] as const;
+const target = "constraint {t}_target_check check (num_nonnulls(media_entity_id, content_unit_id) = 1)";
+
+// biome-ignore lint/suspicious/noExplicitAny: 迁移不依赖应用表类型
+export async function up(db: Kysely<any>): Promise<void> {
+  await execDdl(
+    db,
+    `
+${entityTable(
+  "metadata_field",
+  `
+  media_entity_id uuid references media_entity (id) on delete cascade,
+  content_unit_id uuid references content_unit (id) on delete cascade,
+  field text not null,
+  value jsonb,
+  language text,
+  source text not null ${oneOf("source", SOURCE)},
+  source_revision text,
+  fetched_at timestamptz not null default now(),
+  ${target.replace("{t}", "metadata_field")}`,
+)}
+create unique index metadata_field_key on metadata_field (media_entity_id, content_unit_id, field, source, language) nulls not distinct;
+
+${entityTable(
+  "field_override",
+  `
+  media_entity_id uuid references media_entity (id) on delete cascade,
+  content_unit_id uuid references content_unit (id) on delete cascade,
+  field text not null,
+  value jsonb,
+  locked boolean not null default true,
+  source text not null default 'user' ${oneOf("source", SOURCE)},
+  reason text,
+  actor_type text not null ${oneOf("actor_type", ["user", "agent", "system", "api_key"])},
+  actor_id text,
+  ${target.replace("{t}", "field_override")}`,
+)}
+create unique index field_override_key on field_override (media_entity_id, content_unit_id, field) nulls not distinct;
+`,
+  );
+}
+
+// biome-ignore lint/suspicious/noExplicitAny: 同上
+export async function down(db: Kysely<any>): Promise<void> {
+  await execDdl(db, dropTables(["field_override", "metadata_field"]));
+}

packages/db/src/types.ts

@@ -117,6 +117,11 @@ export type ExternalIdentityVerifyStatus = "unverified" | "ok" | "not_found" | "
 export type FeedSourcePurpose = "movie" | "series" | "variety" | "promotion" | "search" | "generic";
 export type FeedSourceKind = "rss" | "atom" | "list" | "query";
 export type FeedSourceHealthStatus = "unknown" | "healthy" | "degraded" | "failing" | "circuit_open" | "disabled";
+export type FieldOverrideSource = "tmdb" | "user" | "agent" | "nfo" | "site" | "import";
+export type FieldOverrideActorType = "user" | "agent" | "system" | "api_key";
+export type IdentityCandidateStatus = "pending" | "resolved" | "dismissed" | "archived";
+export type IdentityCandidateReason = "ambiguous" | "no_match" | "proposed" | "lookup_failed";
+export type IdentityRedirectActorType = "user" | "agent" | "system" | "api_key";
 export type IdentityRevisionAction =
   | "created"
   | "status_changed"
@@ -136,6 +141,7 @@ export type MediaEntityKind = "movie" | "series" | "variety" | "collection" | "o
 export type MediaEntityStatus = "provisional" | "active" | "merged" | "archived";
 export type MediaServerInstanceKind = "emby" | "jellyfin";
 export type MediaServerInstanceHealthStatus = "unknown" | "healthy" | "degraded" | "offline";
+export type MetadataFieldSource = "tmdb" | "user" | "agent" | "nfo" | "site" | "import";
 export type ObservationStatus = "new" | "linked" | "ignored" | "error";
 export type OrganizationFileResultRole = "main" | "subtitle" | "audio" | "bluray_dir" | "nfo" | "image" | "other";
 export type OrganizationFileResultMode = "copy" | "move" | "rename" | "relocate" | "hardlink";
@@ -158,6 +164,15 @@ export type PreferenceTagStatus = "active" | "disabled" | "deleted";
 export type ReconcileRunKind = "identity" | "metadata" | "asset" | "acquisition" | "server";
 export type ReconcileRunMode = "normal" | "read_only";
 export type ReconcileRunStatus = "queued" | "running" | "succeeded" | "partial" | "failed" | "cancelled";
+export type ResolutionAttemptOutcome =
+  | "auto"
+  | "proposed"
+  | "ambiguous"
+  | "no_match"
+  | "lookup_failed"
+  | "manual"
+  | "skipped_locked";
+export type ResolutionAttemptActorType = "user" | "agent" | "system" | "api_key";
 export type SecretPurpose =
   | "site_cookie"
   | "site_passkey"
@@ -171,11 +186,13 @@ export type SecretPurpose =
   | "other";
 export type ServerMappingItemType = "movie" | "series" | "season" | "episode" | "other";
 export type ServerMappingMatchStatus = "matched" | "ambiguous" | "unmatched" | "stale";
-export type SiteAdapter = "nexusphp" | "mteam_api" | "generic_rss";
+export type SiteAdapter = "nexusphp" | "mteam_api" | "api" | "generic_rss";
 export type SiteHealthStatus = "unknown" | "healthy" | "degraded" | "failing" | "disabled";
 export type SiteCircuitState = "closed" | "open" | "half_open";
 export type SiteAccountAuthKind = "cookie" | "passkey" | "api_key" | "password";
 export type SiteAccountStatus = "unknown" | "active" | "invalid" | "expired";
+export type SiteSnapshotKind = "periodic" | "backfill" | "live_search" | "manual";
+export type SiteSnapshotStatus = "running" | "ok" | "partial" | "failed";
 export type SourceReleaseResolutionStatus = "unresolved" | "resolved" | "ambiguous" | "unidentifiable" | "rejected";
 export type SourceReleaseAvailability = "active" | "site_disabled" | "expired" | "unknown";
 export type SubscriptionMediaKind = "movie" | "series" | "variety";
@@ -573,6 +590,51 @@ export interface FeedSourceTable {
   updated_at: GeneratedTimestamptz;
 }
 
+export interface FieldOverrideTable {
+  id: Generated<string>;
+  media_entity_id: string | null;
+  content_unit_id: string | null;
+  field: string;
+  value: Json | null;
+  locked: Generated<boolean>;
+  source: Generated<FieldOverrideSource>;
+  reason: string | null;
+  actor_type: FieldOverrideActorType;
+  actor_id: string | null;
+  created_at: GeneratedTimestamptz;
+  updated_at: GeneratedTimestamptz;
+}
+
+export interface IdentityCandidateTable {
+  id: Generated<string>;
+  source_release_id: string;
+  status: Generated<IdentityCandidateStatus>;
+  reason: IdentityCandidateReason;
+  query: Generated<Json>;
+  candidates: Generated<Json>;
+  evidence_version: string;
+  attempts: Generated<number>;
+  last_attempt_at: Timestamptz | null;
+  next_review_at: Timestamptz | null;
+  decision_id: string | null;
+  resolved_media_entity_id: string | null;
+  resolved_by: string | null;
+  resolved_at: Timestamptz | null;
+  created_at: GeneratedTimestamptz;
+  updated_at: GeneratedTimestamptz;
+}
+
+export interface IdentityRedirectTable {
+  id: Generated<string>;
+  from_entity_id: string;
+  to_entity_id: string;
+  reason: string | null;
+  actor_type: IdentityRedirectActorType;
+  actor_id: string | null;
+  created_at: GeneratedTimestamptz;
+  updated_at: GeneratedTimestamptz;
+}
+
 export interface IdentityRevisionTable {
   id: Generated<string>;
   external_identity_id: string;
@@ -665,6 +727,20 @@ export interface MediaServerInstanceTable {
   updated_at: GeneratedTimestamptz;
 }
 
+export interface MetadataFieldTable {
+  id: Generated<string>;
+  media_entity_id: string | null;
+  content_unit_id: string | null;
+  field: string;
+  value: Json | null;
+  language: string | null;
+  source: MetadataFieldSource;
+  source_revision: string | null;
+  fetched_at: GeneratedTimestamptz;
+  created_at: GeneratedTimestamptz;
+  updated_at: GeneratedTimestamptz;
+}
+
 export interface ObservationTable {
   id: Generated<string>;
   feed_id: string;
@@ -855,6 +931,23 @@ export interface ReconcileRunTable {
   updated_at: GeneratedTimestamptz;
 }
 
+export interface ResolutionAttemptTable {
+  id: Generated<string>;
+  source_release_id: string;
+  observation_id: string | null;
+  outcome: ResolutionAttemptOutcome;
+  reason: string | null;
+  evidence_version: string;
+  candidate_count: Generated<number>;
+  media_entity_id: string | null;
+  best: Json | null;
+  error: Json | null;
+  actor_type: Generated<ResolutionAttemptActorType>;
+  actor_id: string | null;
+  created_at: GeneratedTimestamptz;
+  updated_at: GeneratedTimestamptz;
+}
+
 export interface SecretTable {
   id: Generated<string>;
   name: string;
@@ -929,6 +1022,24 @@ export interface SiteAccountTable {
   updated_at: GeneratedTimestamptz;
 }
 
+export interface SiteSnapshotTable {
+  id: Generated<string>;
+  site_id: string;
+  kind: SiteSnapshotKind;
+  query: string | null;
+  filters: Generated<Json>;
+  pages: Generated<Json>;
+  item_count: Generated<number>;
+  new_count: Generated<number>;
+  status: Generated<SiteSnapshotStatus>;
+  error: Json | null;
+  definition_version: string | null;
+  started_at: GeneratedTimestamptz;
+  finished_at: Timestamptz | null;
+  created_at: GeneratedTimestamptz;
+  updated_at: GeneratedTimestamptz;
+}
+
 export interface SourceReleaseTable {
   id: Generated<string>;
   site_id: string;
@@ -959,6 +1070,7 @@ export interface SourceReleaseTable {
   raw: Generated<Json>;
   created_at: GeneratedTimestamptz;
   updated_at: GeneratedTimestamptz;
+  resolution_locked: Generated<boolean>;
 }
 
 export interface SseEventTable {
@@ -1082,12 +1194,16 @@ export interface DB {
   downloader_instance: DownloaderInstanceTable;
   external_identity: ExternalIdentityTable;
   feed_source: FeedSourceTable;
+  field_override: FieldOverrideTable;
+  identity_candidate: IdentityCandidateTable;
+  identity_redirect: IdentityRedirectTable;
   identity_revision: IdentityRevisionTable;
   library_root: LibraryRootTable;
   login_attempt: LoginAttemptTable;
   media_asset: MediaAssetTable;
   media_entity: MediaEntityTable;
   media_server_instance: MediaServerInstanceTable;
+  metadata_field: MetadataFieldTable;
   observation: ObservationTable;
   organization_file_result: OrganizationFileResultTable;
   organization_record: OrganizationRecordTable;
@@ -1098,11 +1214,13 @@ export interface DB {
   preference_suppression: PreferenceSuppressionTable;
   preference_tag: PreferenceTagTable;
   reconcile_run: ReconcileRunTable;
+  resolution_attempt: ResolutionAttemptTable;
   secret: SecretTable;
   server_mapping: ServerMappingTable;
   settings: SettingsTable;
   site: SiteTable;
   site_account: SiteAccountTable;
+  site_snapshot: SiteSnapshotTable;
   source_release: SourceReleaseTable;
   sse_event: SseEventTable;
   subscription: SubscriptionTable;
@@ -1173,6 +1291,15 @@ export type ExternalIdentityUpdate = Updateable<ExternalIdentityTable>;
 export type FeedSourceRow = Selectable<FeedSourceTable>;
 export type NewFeedSource = Insertable<FeedSourceTable>;
 export type FeedSourceUpdate = Updateable<FeedSourceTable>;
+export type FieldOverrideRow = Selectable<FieldOverrideTable>;
+export type NewFieldOverride = Insertable<FieldOverrideTable>;
+export type FieldOverrideUpdate = Updateable<FieldOverrideTable>;
+export type IdentityCandidateRow = Selectable<IdentityCandidateTable>;
+export type NewIdentityCandidate = Insertable<IdentityCandidateTable>;
+export type IdentityCandidateUpdate = Updateable<IdentityCandidateTable>;
+export type IdentityRedirectRow = Selectable<IdentityRedirectTable>;
+export type NewIdentityRedirect = Insertable<IdentityRedirectTable>;
+export type IdentityRedirectUpdate = Updateable<IdentityRedirectTable>;
 export type IdentityRevisionRow = Selectable<IdentityRevisionTable>;
 export type NewIdentityRevision = Insertable<IdentityRevisionTable>;
 export type IdentityRevisionUpdate = Updateable<IdentityRevisionTable>;
@@ -1191,6 +1318,9 @@ export type MediaEntityUpdate = Updateable<MediaEntityTable>;
 export type MediaServerInstanceRow = Selectable<MediaServerInstanceTable>;
 export type NewMediaServerInstance = Insertable<MediaServerInstanceTable>;
 export type MediaServerInstanceUpdate = Updateable<MediaServerInstanceTable>;
+export type MetadataFieldRow = Selectable<MetadataFieldTable>;
+export type NewMetadataField = Insertable<MetadataFieldTable>;
+export type MetadataFieldUpdate = Updateable<MetadataFieldTable>;
 export type ObservationRow = Selectable<ObservationTable>;
 export type NewObservation = Insertable<ObservationTable>;
 export type ObservationUpdate = Updateable<ObservationTable>;
@@ -1221,6 +1351,9 @@ export type PreferenceTagUpdate = Updateable<PreferenceTagTable>;
 export type ReconcileRunRow = Selectable<ReconcileRunTable>;
 export type NewReconcileRun = Insertable<ReconcileRunTable>;
 export type ReconcileRunUpdate = Updateable<ReconcileRunTable>;
+export type ResolutionAttemptRow = Selectable<ResolutionAttemptTable>;
+export type NewResolutionAttempt = Insertable<ResolutionAttemptTable>;
+export type ResolutionAttemptUpdate = Updateable<ResolutionAttemptTable>;
 export type SecretRow = Selectable<SecretTable>;
 export type NewSecret = Insertable<SecretTable>;
 export type SecretUpdate = Updateable<SecretTable>;
@@ -1236,6 +1369,9 @@ export type SiteUpdate = Updateable<SiteTable>;
 export type SiteAccountRow = Selectable<SiteAccountTable>;
 export type NewSiteAccount = Insertable<SiteAccountTable>;
 export type SiteAccountUpdate = Updateable<SiteAccountTable>;
+export type SiteSnapshotRow = Selectable<SiteSnapshotTable>;
+export type NewSiteSnapshot = Insertable<SiteSnapshotTable>;
+export type SiteSnapshotUpdate = Updateable<SiteSnapshotTable>;
 export type SourceReleaseRow = Selectable<SourceReleaseTable>;
 export type NewSourceRelease = Insertable<SourceReleaseTable>;
 export type SourceReleaseUpdate = Updateable<SourceReleaseTable>;

packages/db/test/schema.test.ts

@@ -68,6 +68,13 @@ const EXPECTED_TABLES = [
   "tasks_fact",
   "tasks_op_ledger",
   "agent_run_event",
+  // W2-B 来源/身份/元数据(0018–0020)
+  "site_snapshot",
+  "identity_candidate",
+  "resolution_attempt",
+  "identity_redirect",
+  "metadata_field",
+  "field_override",
   // 登录门禁(0015)与 SSE 多进程总线(0016)
   "admin_user",
   "admin_session",