feat(vector): version pgvector schema

harness/migrations/vector/001_extensions.sql

@@ -0,0 +1 @@
+CREATE EXTENSION IF NOT EXISTS vector;

harness/migrations/vector/002_schema_tables.sql

@@ -0,0 +1,36 @@
+CREATE SCHEMA IF NOT EXISTS vectors;
+
+REVOKE ALL ON SCHEMA vectors FROM PUBLIC;
+
+CREATE TABLE IF NOT EXISTS vectors.schema_records (
+    id bigserial PRIMARY KEY,
+    record_key text UNIQUE NOT NULL,
+    kind text NOT NULL,
+    content_hash text NOT NULL,
+    metadata jsonb NOT NULL,
+    embedding vector(768) NOT NULL,
+    indexed_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE TABLE IF NOT EXISTS vectors.evidence (
+    id bigserial PRIMARY KEY,
+    record_key text UNIQUE NOT NULL,
+    kind text NOT NULL,
+    content_hash text NOT NULL,
+    metadata jsonb NOT NULL,
+    embedding vector(768) NOT NULL,
+    indexed_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE TABLE IF NOT EXISTS vectors.memory (
+    id bigserial PRIMARY KEY,
+    record_key text UNIQUE NOT NULL,
+    kind text NOT NULL,
+    content_hash text NOT NULL,
+    metadata jsonb NOT NULL,
+    embedding vector(768) NOT NULL,
+    indexed_at timestamptz NOT NULL DEFAULT now()
+);
+
+REVOKE ALL ON ALL TABLES IN SCHEMA vectors FROM PUBLIC;
+REVOKE ALL ON ALL SEQUENCES IN SCHEMA vectors FROM PUBLIC;

harness/migrations/vector/003_roles.sql

@@ -0,0 +1,23 @@
+DO $roles$
+BEGIN
+    IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'vector_reader') THEN
+        CREATE ROLE vector_reader NOLOGIN;
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'vector_writer') THEN
+        CREATE ROLE vector_writer NOLOGIN;
+    END IF;
+END
+$roles$;
+
+REVOKE ALL ON SCHEMA vectors FROM vector_reader, vector_writer;
+REVOKE ALL ON ALL TABLES IN SCHEMA vectors FROM vector_reader, vector_writer;
+REVOKE ALL ON ALL SEQUENCES IN SCHEMA vectors FROM vector_reader, vector_writer;
+
+GRANT USAGE ON SCHEMA vectors TO vector_reader, vector_writer;
+GRANT SELECT ON ALL TABLES IN SCHEMA vectors TO vector_reader;
+
+GRANT INSERT, UPDATE
+ON vectors.schema_records, vectors.evidence, vectors.memory TO vector_writer;
+GRANT SELECT (record_key, kind, content_hash)
+ON vectors.schema_records, vectors.evidence, vectors.memory TO vector_writer;
+GRANT USAGE ON ALL SEQUENCES IN SCHEMA vectors TO vector_writer;