-- A short claim/backoff survives API process loss. It schedules delivery only;
-- it never extends the signed GUI authority or declares an effect quiescent.
ALTER TABLE gui_publications ADD COLUMN retry_after TIMESTAMPTZ NOT NULL DEFAULT now();
CREATE INDEX gui_publication_retry ON gui_publications(retry_after,created_at,id)
WHERE status='pending';

-- Old intents have no recorded actor proof. Do not infer their authorization
-- from whoever owns the Computer at upgrade time; they require a new request.
ALTER TABLE gui_publications ADD COLUMN owner_user_id TEXT;
ALTER TABLE gui_publications ADD COLUMN owner_space_id TEXT;
ALTER TABLE gui_publications ADD CHECK ((owner_user_id IS NULL) = (owner_space_id IS NULL));