TenantAtlas/specs/054-unify-runs-suitewide/data-model.md

Data Model: Unified Operations Runs

Entities

OperationRun

Canonical record for all long-running tenant operations.

Field	Type	Required	Description
id	BigInt	Yes	Primary Key
tenant_id	BigInt	Yes	FK to Tenants
user_id	BigInt	No	FK to Users (Initiator). Null for system/scheduler.
initiator_name	String	Yes	Snapshot of user name or "System".
type	String	Yes	stable taxonomy e.g., inventory.sync.
status	String	Yes	Lifecycle state: queued, running, completed.
outcome	String	Yes	Result bucket: pending, succeeded, partially_succeeded, failed, cancelled.
run_identity_hash	String	Yes	Deterministic hash for idempotency.
summary_counts	JSONB	No	{ "total": 10, "success": 8, "failed": 2, "skipped": 0 }
failure_summary	JSONB	No	List of sanitized errors: [{ "code": "GraphError", "message": "Throttled", "count": 1 }]
context	JSONB	No	Run-specific metadata. e.g., { "restore_run_id": 123, "selection": [...] }
started_at	Timestamp	No	When execution began.
completed_at	Timestamp	No	When execution finished.
created_at	Timestamp	Yes
updated_at	Timestamp	Yes

Indexes:

• (tenant_id, run_identity_hash) UNIQUE WHERE status IN ('queued', 'running')
• (tenant_id, type, created_at) for filtering/sorting
• (tenant_id, created_at) for default sort

RestoreRun (Existing)

Remains the domain source of truth for Restore.

• Linked via OperationRun.context['restore_run_id'].
• OperationRun mirrors RestoreRun status/outcome.

Enums

OperationRunStatus

• queued
• running
• completed

OperationRunOutcome

• pending (default when running/queued)
• succeeded
• partially_succeeded
• failed
• cancelled

Relationships

• OperationRun belongs to Tenant.
• OperationRun belongs to User (optional).