protege 0.1.0.alpha.1

data/app/views/protege/personas/edit.html.slim

@@ -0,0 +1,7 @@
+- content_for :sidebar do
+  = render "sidebar", current: @persona
+
+= page_container do
+  = page_header("Edit #{@persona.name}")
+
+  = card { render "form", persona: @persona }

data/app/views/protege/personas/index.html.slim

@@ -0,0 +1,6 @@
+- content_for :sidebar do
+  = render "sidebar"
+
+= page_empty do
+  | Select a persona from the sidebar, or  
+  = ui_link("create a new one.", new_persona_path)

data/app/views/protege/personas/new.html.slim

@@ -0,0 +1,7 @@
+- content_for :sidebar do
+  = render "sidebar"
+
+= page_container do
+  = page_header("New persona", "Specify the email address this persona receives mail at. It must match your MX records.")
+
+  = card { render "form", persona: @persona }

data/app/views/protege/personas/show.html.slim

@@ -0,0 +1,37 @@
+- content_for :sidebar do
+  = render "sidebar", current: @persona
+
+= page_container do
+  = page_header(@persona.name, @persona.class.display_name) do
+    = render("actions", persona: @persona)
+
+  .space-y-4
+    = info_card("Email address", { "Address" => @persona.email_address })
+
+    = card do
+      = heading_2("Instructions")
+      - if @persona.instructions.present?
+        .mt-3
+          = body_text(@persona.instructions)
+      - else
+        .mt-3
+          = hint("No instructions set yet — add them via Edit. They're used as the system prompt only when a resolver (e.g. LoadText) includes them in the agent's context.")
+
+    = card do
+      = heading_2("Available Tools")
+      - if @persona.available_tool_ids.any?
+        .mt-3.flex.flex-wrap.gap-2
+          - @persona.available_tool_ids.each do |tool_id|
+            = badge(tool_id)
+      - else
+        .mt-3
+          = hint("No tools are available to this persona — every tool in its scope has been disabled.")
+
+    = render("access_rules", persona: @persona)
+
+  = render("protege/shared/confirm_dialog",
+      id: "delete-persona",
+      title: "Delete #{@persona.name}?",
+      message: "This permanently removes the persona and ALL of its data — every thread, message, attachment, responsibility, access rule, and tool-use record. This cannot be undone. To keep the history but stop the persona instead, archive it.",
+      action_url: persona_path(@persona),
+      action_text: "Delete persona")

data/app/views/protege/responsibilities/_form.html.slim

@@ -0,0 +1,21 @@
+- url = responsibility.new_record? ? responsibilities_path : responsibility_path(responsibility)
+- method = responsibility.new_record? ? :post : :patch
+
+= form_with url:, method:, scope: :responsibility, class: "space-y-5" do |f|
+  = form_errors(responsibility)
+
+  = form_select(f, :persona_id, all_personas.map { |p| [p.name, p.id] }, label: "Persona", prompt: "Choose a persona")
+
+  = form_field(f, :name, placeholder: "e.g. Morning digest")
+
+  = form_field(f, :schedule, label: "Schedule", placeholder: "0 9 * * 1-5", hint: "A 5-field cron expression (minute hour day-of-month month day-of-week) in the app timezone — e.g. \"0 9 * * 1-5\" is 9am on weekdays, \"*/15 * * * *\" every 15 minutes.")
+
+  = form_text_area(f, :instructions, label: "Instructions", rows: 8, hint: "The task the agent carries out on each run, delivered as the opening message. The persona's responsibility_resolvers chain supplies the system context around it.")
+
+  - unless responsibility.new_record?
+    = form_checkbox(f, :active, label: "Active")
+
+  .flex.items-center.gap-3.pt-2
+    = button(responsibility.new_record? ? "Create responsibility" : "Save changes", type: :submit)
+
+    = ui_link("Cancel", responsibility.new_record? ? responsibilities_path : responsibility_path(responsibility))

data/app/views/protege/responsibilities/_responsibility_sidebar_item.html.slim

@@ -0,0 +1,5 @@
+= sidebar_item(responsibility.name, responsibility_path(responsibility),
+    detail: responsibility_status(responsibility),
+    subtitle: "#{responsibility.persona.name} · #{responsibility.schedule}",
+    active: local_assigns[:active],
+    id: dom_id(responsibility))

data/app/views/protege/responsibilities/_sidebar.html.slim

@@ -0,0 +1,11 @@
+- pagy, responsibilities = paginate(all_responsibilities)
+
+= sidebar_content do
+  = sidebar_header("Responsibilities (#{pagy.count})", new_path: new_responsibility_path)
+
+  = sidebar_stream("protege:responsibilities", pagy: pagy)
+
+  = sidebar_body(responsibilities, empty: "No responsibilities yet", id: "responsibilities_list") do |responsibility|
+    = render "responsibility_sidebar_item", responsibility: responsibility, active: local_assigns[:current] == responsibility
+
+  = sidebar_pagination(pagy)

data/app/views/protege/responsibilities/edit.html.slim

@@ -0,0 +1,7 @@
+- content_for :sidebar do
+  = render "sidebar", current: @responsibility
+
+= page_container do
+  = page_header("Edit #{@responsibility.name}")
+
+  = card { render "form", responsibility: @responsibility }

data/app/views/protege/responsibilities/index.html.slim

@@ -0,0 +1,6 @@
+- content_for :sidebar do
+  = render "sidebar"
+
+= page_empty do
+  | Select a responsibility from the sidebar, or  
+  = ui_link("create a new one.", new_responsibility_path)

data/app/views/protege/responsibilities/new.html.slim

@@ -0,0 +1,7 @@
+- content_for :sidebar do
+  = render "sidebar"
+
+= page_container do
+  = page_header("New responsibility", "A scheduled duty a persona carries out on a cron schedule.")
+
+  = card { render "form", responsibility: @responsibility }

data/app/views/protege/responsibilities/show.html.slim

@@ -0,0 +1,22 @@
+- content_for :sidebar do
+  = render "sidebar", current: @responsibility
+
+= page_container do
+  = page_header(@responsibility.name, "#{@responsibility.persona.name} · #{@responsibility.schedule}") do
+    div
+      = ui_link("Edit", edit_responsibility_path(@responsibility), class: 'px-3')
+      = inline_button("Run now", responsibility_runs_path, params: { responsibility_run: { responsibility_id: @responsibility.id } })
+
+  .space-y-4
+    = info_card("Schedule", { "Cron" => @responsibility.schedule, "Persona" => @responsibility.persona.name, "Active" => (@responsibility.active? ? "Yes" : "No") })
+
+    = card do
+      = heading_2("Instructions")
+      .mt-3
+        = body_text(@responsibility.instructions)
+
+    = card do
+      .space-y-4
+        = heading_2("Recent runs")
+        - runs = responsibility_runs_table(@responsibility)
+        = table(headers: runs.headers, rows: runs.rows, empty: "No runs yet — use Run now to trigger one.")

data/app/views/protege/responsibility_runs/show.html.slim

@@ -0,0 +1,13 @@
+= page_container do
+  = page_header("Run · #{@responsibility.name}", @responsibility.persona.name) do
+    = ui_link("Back", responsibility_path(@responsibility))
+
+  .space-y-4
+    - details = { "Status" => @run.status, "Enqueued" => @run.created_at&.strftime("%Y-%m-%d %H:%M:%S"), "Started" => @run.started_at&.strftime("%Y-%m-%d %H:%M:%S"), "Finished" => @run.finished_at&.strftime("%Y-%m-%d %H:%M:%S"), "Correlation" => @run.correlation_id }
+    = info_card("Run", details, full_width: true)
+
+    - if @run.failed?
+      = card do
+        = heading_2("Error")
+        .mt-3
+          = body_text("#{@run.error_class}: #{@run.error_message}")

data/app/views/protege/shared/_confirm_dialog.html.slim

@@ -0,0 +1,22 @@
+/ Confirmation dialog.
+/
+/ Locals:
+/   id:          unique DOM id for the dialog
+/   title:       dialog heading
+/   message:     warning/explanation text
+/   action_url:  form action URL
+/   action_text: confirm button label (default: "Confirm")
+/   method:      HTTP method (default: :delete)
+
+- id          ||= "confirm-dialog"
+- action_text ||= "Confirm"
+- method      ||= :delete
+
+= dialog(id) do
+  = heading_3(title)
+
+  p class="mt-2 text-sm text-gray-600 leading-relaxed"= message
+  
+  div class="mt-6 flex items-center justify-between"
+    = button("Cancel", type: "button", onclick: "this.closest('dialog').close()")
+    = destructive_link(action_text, action_url, method: method)

data/app/views/protege/shared/_header.html.slim

@@ -0,0 +1,14 @@
+header class="flex h-14 flex-shrink-0 items-center justify-between px-5" style="border-bottom: 1px solid var(--border); background: var(--surface)"
+  div class="flex items-center gap-6"
+    = link_to Protege.configuration.nav_title, protege.root_path, class: "flex items-center gap-2 text-sm font-semibold"
+
+    nav class="flex items-center gap-1"
+      = nav_item("Inbox", protege.threads_path, request.path)
+      = nav_item("Responsibilities", protege.responsibilities_path, request.path)
+      = nav_item("Personas", protege.personas_path, request.path)
+      = nav_item("Domains", protege.email_domains_path, request.path)
+      = nav_item("Traces", protege.traces_path, request.path)
+
+  div class="flex items-center gap-3"
+    = hotkey_help_button
+    = theme_toggle

data/app/views/protege/shared/_hotkeys.html.slim

@@ -0,0 +1,43 @@
+/ The whole hotkey surface in one place (see keys.js): the global shortcut registry + the "?" help
+/ overlay, rendered on every page.
+/
+/ Registry — the single source of truth for app-wide combos. Each is a hidden link keys.js activates on
+/ its combo; it navigates via the same route helper the visible UI uses, so a global command works from
+/ anywhere, independent of what's on screen. Nav combos are numbered by position (1..5, left to right)
+/ rather than by initial — the "go to the Nth section" convention (⌘1..9 in browsers/editors). Rendered
+/ after the page body, so a page-local hotkey reusing a combo is matched first and shadows the global one.
+div hidden=true aria-hidden="true"
+  = link_to "Documentation",      'https://docs.protege.bot',      data: { hotkey: "g 0" }, target: '_blank'
+  = link_to "Inbox",              protege.threads_path,            data: { hotkey: "g 1" }
+  = link_to "Responsibilities",   protege.responsibilities_path,   data: { hotkey: "g 2" }
+  = link_to "Personas",           protege.personas_path,           data: { hotkey: "g 3" }
+  = link_to "Domains",            protege.email_domains_path,      data: { hotkey: "g 4" }
+  = link_to "Traces",             protege.traces_path,             data: { hotkey: "g 5" }
+  = link_to "New Thread",         protege.new_thread_path,         data: { hotkey: "g c" }
+  = link_to "New Responsibility", protege.new_responsibility_path, data: { hotkey: "g r" }
+  = link_to "New Persona",        protege.new_persona_path,        data: { hotkey: "g p" }
+  = link_to "New Email Domain",   protege.new_email_domain_path,   data: { hotkey: "g d" }
+
+/ Help overlay, opened with "?" or the header's "?" button (keys.js just toggles it open/closed). This
+/ list is hand-authored — keep it in sync with the registry above; grouped into sections via hotkey_row
+/ / hotkey_section (see Components::HotkeysHelper).
+= dialog("protege-hotkey-help", data: { hotkey_help: "" }) do
+  = heading_2("Keyboard shortcuts")
+  .mt-3.space-y-1
+    = hotkey_section("Go to")
+    = hotkey_row("Inbox", "g", "1")
+    = hotkey_row("Responsibilities", "g", "2")
+    = hotkey_row("Personas", "g", "3")
+    = hotkey_row("Domains", "g", "4")
+    = hotkey_row("Traces", "g", "5")
+    = hotkey_row("Documentation", "g", "0")
+
+    = hotkey_section("Create")
+    = hotkey_row("New thread", "g", "c")
+    = hotkey_row("New responsibility", "g", "r")
+    = hotkey_row("New persona", "g", "p")
+    = hotkey_row("New email domain", "g", "d")
+
+    = hotkey_section("General")
+    = hotkey_row("Toggle theme", "g", "t")
+    = hotkey_row("Show this menu", "?")

data/app/views/protege/threads/_composer_footer.html.slim

@@ -0,0 +1,15 @@
+/ Shared footer for the new-thread and reply composers: Send + shortcut hint on the left, the attach
+/ (paperclip) control on the right, and any chosen files as removable badges below. The file input is
+/ hidden — attachment_picker.js opens it from the paperclip and manages the badges. The enclosing form
+/ must be multipart.
+.space-y-2.flex-shrink-0 data-attachment-picker=true
+  = f.file_field :files, multiple: true, class: "hidden", data: { attachment_picker_input: true }
+
+  .flex.items-center.justify-between.pt-1
+    .flex.items-center.gap-3
+      = button("Send", type: :submit, data: { hotkey: "mod+enter" })
+      = hint("⌘ / Ctrl + ↵")
+
+    = icon_button(:paperclip, label: "Attach files", data: { attachment_picker_trigger: true })
+
+  ul.flex.flex-wrap.gap-1.5 hidden=true data-attachment-picker-list=true

data/app/views/protege/threads/_introspection.html.slim

@@ -0,0 +1,7 @@
+/ Thread introspection panel — the collapsible right sidebar surfacing the agent's live activity for this
+/ thread: one chronological feed where reasoning tokens and tool-call cards are interleaved as they
+/ happen. Fed entirely by IntrospectionBroadcaster over the thread's Turbo channel (turbo_stream_from
+/ @thread in show.html.slim), which appends into the feed container. Live-only — a reload shows the
+/ empty-state placeholder until the next run streams in.
+= introspection_panel do
+  = introspection_feed(thread)

data/app/views/protege/threads/_reasoning.html.slim

@@ -0,0 +1,4 @@
+/ A reasoning block in the introspection activity feed — one paragraph of streamed reasoning. Appended to
+/ the feed by IntrospectionBroadcaster when a reasoning turn opens; that turn's later tokens append into
+/ it by id. Locals: id, content.
+= introspection_reasoning(id: id, content: content)

data/app/views/protege/threads/_reply_form.html.slim

@@ -0,0 +1,7 @@
+div class="relative flex flex-shrink-0 flex-col p-5" style="height: 13rem" data-resize="" data-resize-edge="top" data-resize-min="120" data-resize-max="520" data-resize-key="protege:reply-height"
+  = resize_handle(edge: :top)
+  = form_with url: thread_reply_path(thread), scope: :reply, multipart: true, html: { class: "flex min-h-0 flex-1 flex-col", data: { reset_on_submit: "" } } do |f|
+    = form_text_area(f, :body, placeholder: "Reply...", fill: true)
+
+    .mt-2
+      = render "protege/threads/composer_footer", f: f

data/app/views/protege/threads/_run_marker.html.slim

@@ -0,0 +1,3 @@
+/ A run-lifecycle marker in the introspection activity feed — appended (processing) when a run starts and
+/ replaced in place (done / failed) when it ends, by IntrospectionBroadcaster. Locals: id, status, detail.
+= introspection_run_marker(id: id, status: status, detail: detail)

data/app/views/protege/threads/_sidebar.html.slim

@@ -0,0 +1,15 @@
+- pagy, threads = paginate(threads)
+
+= sidebar_content do
+  = sidebar_header("Inbox (#{pagy.count})", new_path: new_thread_path, new_label: "Compose")
+
+  = sidebar_search_link(messages_path, placeholder: "Search emails…")
+
+  = sidebar_stream("protege:threads", pagy: pagy)
+
+  = sidebar_body(threads, empty: "No threads yet", id: "threads_list") do |thread|
+    = render "protege/threads/thread", \
+             thread: thread, \
+             active: local_assigns[:active_thread] == thread
+
+  = sidebar_pagination(pagy)

data/app/views/protege/threads/_thread.html.slim

@@ -0,0 +1,6 @@
+= turbo_frame_tag dom_id(thread) do
+  = sidebar_item(thread_title(thread), thread_path(thread, page: params[:page]),
+      detail: thread_date(thread),
+      subtitle: thread_preview(thread),
+      active: local_assigns[:active],
+      data: { turbo_frame: "_top" })

data/app/views/protege/threads/_tool_call.html.slim

@@ -0,0 +1,8 @@
+/ One tool-call card in the introspection panel's live activity feed. Rendered from a broadcast with a
+/ Protege::IntrospectionToolCallPresentation as +presentation+ — appended as a pending card when the model
+/ requests the call, then replaced in place (by its stable card_id) with the completed/failed outcome.
+= introspection_tool_card(id:      presentation.card_id,
+                          name:    presentation.tool_name,
+                          args:    presentation.arguments_summary,
+                          status:  presentation.status,
+                          preview: presentation.preview)

data/app/views/protege/threads/index.html.slim

@@ -0,0 +1,6 @@
+- content_for :sidebar do
+  = render "protege/threads/sidebar", threads: @threads
+
+= page_empty do
+  | Select a thread from the sidebar, or  
+  = ui_link("start a new one.", new_thread_path)

data/app/views/protege/threads/new.html.slim

@@ -0,0 +1,15 @@
+- content_for :sidebar do
+  = render "protege/threads/sidebar", threads: inbox_threads
+
+= page_container do
+  = page_header("New message", "Send a message to a persona to start a thread.")
+
+  = card do
+    = form_with url: threads_path, scope: :thread, class: "space-y-5", multipart: true do |f|
+      = form_select(f, :persona_id, available_persona_options, label: "To", prompt: "Select persona...")
+
+      = form_field(f, :subject, label: "Subject", placeholder: "Subject")
+
+      = form_text_area(f, :body, label: "Message", rows: 10, placeholder: "Write your message...")
+
+      = render "protege/threads/composer_footer", f: f

data/app/views/protege/threads/show.html.slim

@@ -0,0 +1,25 @@
+- content_for :sidebar do
+  = render "protege/threads/sidebar", threads: inbox_threads, active_thread: @thread
+
+div class="flex min-h-0 flex-1"
+  div class="flex min-h-0 min-w-0 flex-1 flex-col"
+    = turbo_stream_from @thread
+
+    = thread_header(@thread) do
+      .flex.items-center.gap-2
+        = introspection_toggle
+        = button("Delete", type: "button", variant: :danger, onclick: show_dialog("delete-thread"))
+
+    div id=dom_id(@thread, :messages) class="min-h-0 flex-1 overflow-y-auto px-5"
+      = render partial: "protege/messages/message", collection: @messages, as: :message
+
+    = render "protege/threads/reply_form", thread: @thread
+
+  = render "protege/threads/introspection", thread: @thread
+
+= render("protege/shared/confirm_dialog",
+    id: "delete-thread",
+    title: "Delete this thread?",
+    message: "This will permanently delete the thread and all its messages. This cannot be undone.",
+    action_url: thread_path(@thread),
+    action_text: "Delete thread")

data/app/views/protege/traces/_sidebar.html.slim

@@ -0,0 +1,15 @@
+- pagy, page = paginate(traces)
+
+= sidebar_content do
+  = sidebar_header("Traces (#{pagy.count})")
+
+  = sidebar_search_link(traces_search_path, placeholder: "Search traces…")
+
+  = sidebar_body(page, empty: "No traces captured yet", id: "traces_list") do |trace|
+    = sidebar_item \
+        "#{trace.id} | #{trace.created_at}", \
+        trace_path(trace), \
+        subtitle: trace.label.humanize, \
+        active: local_assigns[:current] == trace
+
+  = sidebar_pagination(pagy)

data/app/views/protege/traces/index.html.slim

@@ -0,0 +1,11 @@
+- content_for :sidebar do
+  = render "sidebar", traces: @traces, current: nil
+
+= page_empty do
+  - if tracing_enabled?
+    | Select a captured turn from the sidebar to review and label it.
+  - else
+    .max-w-sm.space-y-3.text-center
+      = hint("Tracing is off — no new turns are being captured.")
+      = code_block("config.tracing = { enabled: true }")
+      = hint("Set this in your Protege initializer to start collecting.")

data/app/views/protege/traces/searches/_sidebar.html.slim

@@ -0,0 +1,13 @@
+- pagy, traces = paginate(results)
+- empty_message = search.active? ? "No traces match your search" : "Enter search terms to find traces"
+
+= sidebar_content(frame: "search_results") do
+  = sidebar_header("Results (#{pagy.count})")
+
+  = sidebar_body(traces, empty: empty_message) do |trace|
+    = sidebar_item(trace.correlation_id.presence&.truncate(28) || "Trace ##{trace.id}", trace_path(trace),
+        detail: trace.created_at.to_fs(:short),
+        subtitle: trace.model,
+        data: { turbo_frame: "_top" })
+
+  = sidebar_pagination(pagy)

data/app/views/protege/traces/searches/show.html.slim

@@ -0,0 +1,22 @@
+- content_for :sidebar do
+  = render "sidebar", search: @search, results: @traces
+
+= page_container do
+  = page_header("Search traces", "Find captured turns by run, model, request or response text, note, or label. Matches appear in the sidebar.")
+
+  = card do
+    = form_with url: traces_search_path, method: :get, data: { turbo_frame: "search_results" }, class: "space-y-5" do |f|
+      = form_field(f, :correlation_id, label: "Run", placeholder: "correlation id contains…", value: params[:correlation_id], onblur: "this.form.requestSubmit()")
+
+      = form_field(f, :model, label: "Model", placeholder: "model contains…", value: params[:model], onblur: "this.form.requestSubmit()")
+
+      = form_select(f, :label, [["Any", ""]] + Protege::Trace.labels.keys.map { |l| [l.humanize, l] }, label: "Label", selected: params[:label], onchange: "this.form.requestSubmit()")
+
+      = form_field(f, :request, label: "Request", placeholder: "prompt or tools contain…", value: params[:request], onblur: "this.form.requestSubmit()")
+
+      = form_field(f, :response, label: "Response", placeholder: "output contains…", value: params[:response], onblur: "this.form.requestSubmit()")
+
+      = form_field(f, :annotation, label: "Annotation", placeholder: "note contains…", value: params[:annotation], onblur: "this.form.requestSubmit()")
+
+      .pt-2
+        = button("Search", type: :submit)

data/app/views/protege/traces/show.html.slim

@@ -0,0 +1,28 @@
+- content_for :sidebar do
+  = render "sidebar", traces: recent_traces, current: @trace
+
+= page_container do
+  = page_header("Turn #{@trace.turn_index}", @trace.model.presence || "no model recorded") do
+    = ui_link("Back", traces_path)
+
+  .space-y-4
+    = card do
+      = heading_2("Review")
+      = form_with model: @trace, url: trace_path(@trace), method: :patch, class: "mt-3 space-y-4" do |f|
+        = form_select(f, :label, Protege::Trace.labels.keys.map { |l| [l.humanize, l] }, label: "Label")
+        = form_text_area(f, :annotation, label: "Note", placeholder: "Why is this turn good/bad? (optional)")
+        .pt-2
+          = button("Save review", type: :submit)
+
+    - meta = { "Correlation ID" => @trace.correlation_id, "Model" => @trace.model, "Settings" => @trace.settings.presence&.to_json, "Label" => @trace.label.humanize, "Reviewed" => @trace.reviewed_at&.strftime("%Y-%m-%d %H:%M"), "Captured" => @trace.created_at.strftime("%Y-%m-%d %H:%M") }
+    = info_card("Turn", meta.compact, full_width: true)
+
+    = card do
+      = heading_2("Request")
+      pre class="mt-3 overflow-x-auto text-xs" style="white-space: pre-wrap; word-break: break-word"
+        = JSON.pretty_generate(@trace.request)
+
+    = card do
+      = heading_2("Response")
+      pre class="mt-3 overflow-x-auto text-xs" style="white-space: pre-wrap; word-break: break-word"
+        = JSON.pretty_generate(@trace.response)

data/config/routes.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+# Never use 'only' or 'except' in a Rails engine's routes.rb: Any missing controller action will return 404, just
+# like a missing route, so the engine's routes are always fully defined. The host app can override any route by
+# defining it in its own routes.rb, but it cannot remove a route from the engine.
+Protege::Engine.routes.draw do
+  root to: 'home#show'
+
+  # Trace search is its own view — Protege::Traces::SearchesController#show, reached from the traces
+  # sidebar's search link. Declared before +resources :traces+ so /traces/search resolves here rather
+  # than being captured as /traces/:id.
+  namespace :traces do
+    resource :search
+  end
+
+  resources :traces
+  resources :messages
+  resources :responsibilities
+  resources :responsibility_runs
+
+  resources :threads do
+    resource :reply
+  end
+
+  resources :personas do
+    resource :archive
+    resources :access_rules
+  end
+
+  resources :email_domains do
+    resource :mta_domains_sync
+  end
+end

data/db/migrate/20260520000001_create_protege_tables.rb

@@ -0,0 +1,105 @@
+# frozen_string_literal: true
+
+# Consolidated install migration for all Protege engine tables — the squashed replacement for the
+# engine's incremental history, collapsed once every environment was synced to the final schema. It
+# reuses the original first-migration version (20260520000001): any database that has ever run the engine
+# already records this version and skips it, so only fresh installs execute it.
+class CreateProtegeTables < ActiveRecord::Migration[7.2]
+  def change
+    create_table :protege_personas do |t|
+      t.string  :type,          null: false
+      t.string  :name,          null: false, index: { unique: true }
+      t.string  :email_address, null: false, index: { unique: true }
+      t.boolean :active,        null: false, default: true
+      t.text    :instructions
+      t.timestamps
+    end
+
+    create_table :protege_email_domains do |t|
+      t.string :domain,               null: false, index: { unique: true }
+      t.string :dkim_selector,        null: false, default: 'default'
+      t.text   :dkim_private_key_pem, null: false
+      t.timestamps
+    end
+
+    create_table :protege_email_threads do |t|
+      t.references :persona, null: false, foreign_key: { to_table: :protege_personas }
+      t.string   :thread_id,       null: false, index: { unique: true }
+      t.string   :subject
+      t.integer  :message_count,   null: false, default: 0
+      t.datetime :last_message_at, index: true
+      t.timestamps
+    end
+
+    create_table :protege_messages do |t|
+      t.references :email_thread,  null: false, foreign_key: { to_table: :protege_email_threads }
+      t.references :persona,       null: false, foreign_key: { to_table: :protege_personas }
+      t.references :inbound_email, null: true,  foreign_key: { to_table: :action_mailbox_inbound_emails }
+      t.string   :message_id,  null: false, index: { unique: true }
+      t.string   :direction,   null: false, index: true
+      t.string   :from_address, null: false
+      t.text     :to_addresses
+      t.text     :cc_addresses
+      t.text     :bcc_addresses
+      t.string   :reply_to
+      t.string   :subject
+      t.string   :in_reply_to
+      t.text     :references_header
+      t.text     :text_body
+      t.text     :html_body
+      t.datetime :sent_at, null: false, index: true
+      t.string   :correlation_id,    index: true
+      t.string   :processing_status, index: true
+      t.datetime :processing_started_at
+      t.datetime :processing_completed_at
+      t.integer  :processing_attempts, null: false, default: 0
+      t.text     :last_processing_error
+      t.datetime :delivered_at
+      t.text     :delivery_error
+      t.datetime :read_at
+      t.timestamps
+    end
+
+    create_table :protege_access_rules do |t|
+      t.references :persona, null: false, foreign_key: { to_table: :protege_personas }
+      t.string :kind,    null: false
+      t.string :pattern, null: false
+      t.timestamps
+    end
+
+    create_table :protege_responsibilities do |t|
+      t.references :persona, null: false, foreign_key: { to_table: :protege_personas }
+      t.string   :name,         null: false
+      t.text     :instructions, null: false
+      t.string   :schedule,     null: false
+      t.boolean  :active,       null: false, default: true
+      t.datetime :last_run_at
+      t.timestamps
+    end
+
+    create_table :protege_responsibility_runs do |t|
+      t.references :responsibility, null: false, foreign_key: { to_table: :protege_responsibilities }
+      t.string   :status, null: false, default: 'pending', index: true
+      t.datetime :started_at
+      t.datetime :finished_at
+      t.string   :error_class
+      t.text     :error_message
+      t.string   :correlation_id
+      t.timestamps
+    end
+
+    create_table :protege_tool_uses do |t|
+      t.references :source,  polymorphic: true, null: false
+      t.references :persona, null: false, foreign_key: { to_table: :protege_personas }
+      t.string  :run_id
+      t.integer :turn_index, null: false
+      t.integer :position,   null: false
+      t.string  :tool_call_id
+      t.string  :tool_name, null: false
+      t.text    :arguments
+      t.text    :result
+      t.boolean :succeeded, null: false, default: false
+      t.timestamps
+    end
+  end
+end