[新機能]Cortex Knowledge Extensionsが一般提供！MarketplaceからSnowflake公式ドキュメントのExtensionsを取得してSnowflake Intelligenceから問い合わせをしてみた

-------------------------------
-------------------------------
-- Set up Snowflake Intelligence
-------------------------------
-------------------------------

/* =====================================================
   事前設定
===================================================== */
USE ROLE accountadmin;

/* =====================================================
   ロール
===================================================== */
CREATE ROLE snowflake_intelligence_admin_rl;

CREATE ROLE snowflake_intelligence_modeling_rl;

GRANT ROLE snowflake_intelligence_modeling_rl TO ROLE snowflake_intelligence_admin_rl;
GRANT ROLE snowflake_intelligence_admin_rl      TO ROLE accountadmin;

CREATE ROLE snowflake_intelligence_ro_rl;

GRANT ROLE snowflake_intelligence_ro_rl TO ROLE snowflake_intelligence_modeling_rl;

/* =====================================================
   ウェアハウス
===================================================== */
CREATE WAREHOUSE snowflake_intelligence_wh
       WITH WAREHOUSE_SIZE = 'X-SMALL';

GRANT USAGE, OPERATE ON WAREHOUSE snowflake_intelligence_wh TO ROLE snowflake_intelligence_admin_rl;
GRANT USAGE, OPERATE ON WAREHOUSE snowflake_intelligence_wh TO ROLE snowflake_intelligence_modeling_rl;
GRANT USAGE, OPERATE ON WAREHOUSE snowflake_intelligence_wh TO ROLE snowflake_intelligence_ro_rl;

/* =====================================================
   データベース
===================================================== */
CREATE DATABASE snowflake_intelligence;

GRANT OWNERSHIP ON DATABASE snowflake_intelligence TO ROLE snowflake_intelligence_admin_rl;

/* =====================================================
   動的ロール付与（そのまま）
===================================================== */
DECLARE
    sql_command STRING;
BEGIN
    sql_command := 'GRANT ROLE snowflake_intelligence_admin_rl TO USER "' || CURRENT_USER() || '";';
    EXECUTE IMMEDIATE sql_command;
    RETURN 'Role snowflake_intelligence_admin_rl granted successfully to user ' || CURRENT_USER();
END;

/* =====================================================
   ステージ／スキーマ等のセットアップ
===================================================== */
USE ROLE snowflake_intelligence_admin_rl;
USE DATABASE snowflake_intelligence;

/* 一時ファイル用スキーマ */
CREATE OR REPLACE SCHEMA snowflake_intelligence.temp;

GRANT USAGE ON SCHEMA snowflake_intelligence.temp TO ROLE public;

/* コンフィグ用スキーマ */
CREATE SCHEMA IF NOT EXISTS config;

GRANT USAGE ON SCHEMA config TO ROLE snowflake_intelligence_modeling_rl;
GRANT USAGE ON SCHEMA config TO ROLE snowflake_intelligence_ro_rl;

USE SCHEMA config;

/* セマンティックモデル格納ステージ */
CREATE STAGE semantic_models
       ENCRYPTION = (TYPE = 'SNOWFLAKE_SSE');

GRANT READ ON STAGE snowflake_intelligence.config.semantic_models TO ROLE snowflake_intelligence_modeling_rl;
GRANT READ ON STAGE snowflake_intelligence.config.semantic_models TO ROLE snowflake_intelligence_ro_rl;

-------------------------------
-------------------------------
-- Agent Table Configuration
-------------------------------
-------------------------------
/* =====================================================
   0. 事前設定
===================================================== */
USE ROLE snowflake_intelligence_admin_rl;

/* =====================================================
   1. エージェント用スキーマ
===================================================== */
CREATE SCHEMA IF NOT EXISTS snowflake_intelligence.agents;

/* スキーマは全員が discover 可能に */
GRANT USAGE ON SCHEMA snowflake_intelligence.agents TO ROLE public;

/* =====================================================
   2. ROW ACCESS POLICY  (行レベル権限制御)
===================================================== */
CREATE OR REPLACE ROW ACCESS POLICY snowflake_intelligence.agents.agent_policy
AS (grantee_roles ARRAY) RETURNS BOOLEAN ->
    ARRAY_SIZE(
        FILTER(
            grantee_roles::ARRAY(VARCHAR),
            role -> is_role_in_session(role)
        )
    ) <> 0;

/* =====================================================
   3. エージェント設定テーブル
===================================================== */
CREATE OR REPLACE TABLE snowflake_intelligence.agents.config (
       agent_name           VARCHAR      NOT NULL,
       agent_description    VARCHAR,
       grantee_roles        ARRAY        NOT NULL,
       tools                ARRAY,
       tool_resources       OBJECT,
       tool_choice          OBJECT,
       response_instruction VARCHAR,
       sample_questions     ARRAY,
       CONSTRAINT pk_agent_name PRIMARY KEY (agent_name)
)
WITH ROW ACCESS POLICY snowflake_intelligence.agents.agent_policy
     ON (grantee_roles);

/* 権限付与 */
GRANT SELECT           ON TABLE snowflake_intelligence.agents.config TO ROLE public;
GRANT UPDATE, INSERT   ON TABLE snowflake_intelligence.agents.config TO ROLE snowflake_intelligence_modeling_rl;

/* =====================================================
   4. フィードバックログ用スキーマ
===================================================== */
CREATE SCHEMA IF NOT EXISTS snowflake_intelligence.logs;

GRANT USAGE ON SCHEMA snowflake_intelligence.logs TO ROLE snowflake_intelligence_ro_rl;

/* =====================================================
   5. フィードバック格納テーブル
===================================================== */
CREATE OR REPLACE TABLE snowflake_intelligence.logs.feedback (
       entity_type              VARCHAR  NOT NULL,
       username                 VARCHAR  NOT NULL,
       agent_name               VARCHAR  NOT NULL,
       agent_session_id         VARCHAR  NOT NULL,
       context                  VARIANT  NOT NULL,
       feedback_timestamp       DATETIME NOT NULL,
       feedback_categories      VARIANT,
       feedback_message         VARCHAR,
       message_id               VARCHAR,
       feedback_sentiment       VARCHAR,
       user_prompt              VARIANT,
       executed_queries         ARRAY,
       documents_returned       ARRAY,
       response_start_timestamp DATETIME,
       response_end_timestamp   DATETIME,
       response_duration        NUMBER
);

/* INSERT 権限は誰でも */
GRANT INSERT ON TABLE snowflake_intelligence.logs.feedback TO ROLE public;

grant imported privileges on database SNOWFLAKE_DOCUMENTATION to role snowflake_intelligence_admin_rl;