feat(maf): add secure roundtable workflow runtime

offline-backend-20260512/backend/scripts/sql/column_additions_mysql.sql

@@ -191,6 +191,13 @@ CALL _add_column_if_missing('task_buttons', 'append_auth', 'TINYINT(1) NOT NULL
 CALL _add_column_if_missing('task_buttons', 'auth_token_param', "VARCHAR(64) NULL DEFAULT 'token'");
 CALL _add_column_if_missing('task_buttons', 'auth_name_param', "VARCHAR(64) NULL DEFAULT 'username'");
 
+-- ---- maf_roundtable_actions.turn_index --------------------------------------
+-- MAF 会商外部写动作所属的席位轮次。持久化该列(而非仅藏在 idempotency_key 里),
+-- 使待审批动作可精确按 run_id + agent_id + turn_index + logical_action_id 匹配,
+-- 不会把同一席位历史轮次的 waiting action 混进当前审批。
+-- ORM: MafRoundtableActionRow.turn_index = Integer, nullable。
+CALL _add_column_if_missing('maf_roundtable_actions', 'turn_index', 'INT NULL');
+
 -- ---- 执行后自检:确认本批次涉及的列都已存在 ---------------------------------
 SELECT table_name, column_name
   FROM information_schema.columns
@@ -199,5 +206,6 @@ SELECT table_name, column_name
         OR (table_name = 'agents' AND column_name IN ('square_id'))
         OR (table_name = 'roundtable_drafts' AND column_name = 'task_id')
         OR (table_name = 'roundtable_jobs' AND column_name = 'task_id')
-        OR (table_name = 'task_buttons' AND column_name IN ('append_auth', 'auth_token_param', 'auth_name_param')))
+        OR (table_name = 'task_buttons' AND column_name IN ('append_auth', 'auth_token_param', 'auth_name_param'))
+        OR (table_name = 'maf_roundtable_actions' AND column_name = 'turn_index'))
  ORDER BY table_name, column_name;