fix(tess): secure checkpoint idempotency

packages/db/drizzle/0015_interaction_checkpoint_payload_digest.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "interaction_checkpoints" ADD COLUMN "content_digest" text;--> statement-breakpoint
+UPDATE "interaction_checkpoints" SET "content_digest" = 'legacy' WHERE "content_digest" IS NULL;--> statement-breakpoint
+ALTER TABLE "interaction_checkpoints" ALTER COLUMN "content_digest" SET NOT NULL;

packages/db/drizzle/meta/_journal.json

@@ -106,6 +106,13 @@
       "when": 1783913398006,
       "tag": "0014_interaction_outbox_channel_scope",
       "breakpoints": true
+    },
+    {
+      "idx": 15,
+      "version": "7",
+      "when": 1783942610000,
+      "tag": "0015_interaction_checkpoint_payload_digest",
+      "breakpoints": true
     }
   ]
 }

packages/db/src/schema.ts

@@ -571,6 +571,7 @@ export const interactionCheckpoints = pgTable(
       .notNull()
       .references(() => interactionSessions.id, { onDelete: 'cascade' }),
     checkpointId: text('checkpoint_id').notNull(),
+    contentDigest: text('content_digest').notNull(),
     cursor: text('cursor').notNull(),
     summary: text('summary').notNull(),
     compactionEpoch: integer('compaction_epoch').notNull(),