@agentlensai/server 0.11.0 → 0.13.0

package/dist/db/migrate.sqlite.js

@@ -0,0 +1,920 @@
+/**
+ * Database migration runner.
+ *
+ * For SQLite, uses Drizzle's push-based approach to create/update tables
+ * on first start. For production, Drizzle Kit migrations can be used.
+ */
+import { sql } from 'drizzle-orm';
+/**
+ * Run migrations: create all tables and indexes if they don't exist.
+ *
+ * Uses CREATE TABLE IF NOT EXISTS for idempotent startup.
+ * This approach is simpler than file-based migrations for an
+ * embedded SQLite database that auto-creates on first start.
+ */
+export function runMigrations(db) {
+    // Create all tables using raw SQL for CREATE IF NOT EXISTS
+    // Drizzle doesn't have a built-in "push" that works at runtime,
+    // so we use the schema definitions to generate DDL.
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS events (
+      id TEXT PRIMARY KEY,
+      timestamp TEXT NOT NULL,
+      session_id TEXT NOT NULL,
+      agent_id TEXT NOT NULL,
+      event_type TEXT NOT NULL,
+      severity TEXT NOT NULL DEFAULT 'info',
+      payload TEXT NOT NULL,
+      metadata TEXT NOT NULL DEFAULT '{}',
+      prev_hash TEXT,
+      hash TEXT NOT NULL
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS sessions (
+      id TEXT NOT NULL,
+      agent_id TEXT NOT NULL,
+      agent_name TEXT,
+      started_at TEXT NOT NULL,
+      ended_at TEXT,
+      status TEXT NOT NULL DEFAULT 'active',
+      event_count INTEGER NOT NULL DEFAULT 0,
+      tool_call_count INTEGER NOT NULL DEFAULT 0,
+      error_count INTEGER NOT NULL DEFAULT 0,
+      total_cost_usd REAL NOT NULL DEFAULT 0,
+      llm_call_count INTEGER NOT NULL DEFAULT 0,
+      total_input_tokens INTEGER NOT NULL DEFAULT 0,
+      total_output_tokens INTEGER NOT NULL DEFAULT 0,
+      tags TEXT NOT NULL DEFAULT '[]',
+      tenant_id TEXT NOT NULL DEFAULT 'default',
+      PRIMARY KEY (id, tenant_id)
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS agents (
+      id TEXT NOT NULL,
+      name TEXT NOT NULL,
+      description TEXT,
+      first_seen_at TEXT NOT NULL,
+      last_seen_at TEXT NOT NULL,
+      session_count INTEGER NOT NULL DEFAULT 0,
+      tenant_id TEXT NOT NULL DEFAULT 'default',
+      PRIMARY KEY (id, tenant_id)
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS alert_rules (
+      id TEXT PRIMARY KEY,
+      name TEXT NOT NULL,
+      enabled INTEGER NOT NULL DEFAULT 1,
+      condition TEXT NOT NULL,
+      threshold REAL NOT NULL,
+      window_minutes INTEGER NOT NULL,
+      scope TEXT NOT NULL DEFAULT '{}',
+      notify_channels TEXT NOT NULL DEFAULT '[]',
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS alert_history (
+      id TEXT PRIMARY KEY,
+      rule_id TEXT NOT NULL REFERENCES alert_rules(id),
+      triggered_at TEXT NOT NULL,
+      resolved_at TEXT,
+      current_value REAL NOT NULL,
+      threshold REAL NOT NULL,
+      message TEXT NOT NULL
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS api_keys (
+      id TEXT PRIMARY KEY,
+      key_hash TEXT NOT NULL,
+      name TEXT NOT NULL,
+      scopes TEXT NOT NULL,
+      created_at INTEGER NOT NULL,
+      last_used_at INTEGER,
+      revoked_at INTEGER,
+      rate_limit INTEGER
+    )
+  `);
+    // Create indexes (IF NOT EXISTS)
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_events_timestamp ON events(timestamp)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_events_session_id ON events(session_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_events_agent_id ON events(agent_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_events_type ON events(event_type)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_events_session_ts ON events(session_id, timestamp)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_events_agent_type_ts ON events(agent_id, event_type, timestamp)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_sessions_agent_id ON sessions(agent_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_sessions_started_at ON sessions(started_at)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_sessions_status ON sessions(status)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_api_keys_hash ON api_keys(key_hash)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_alert_history_rule_id ON alert_history(rule_id)`);
+    // ─── Migrations for existing databases ──────────────────
+    // Add LLM tracking columns to sessions (v0.3.0)
+    // SQLite doesn't support ADD COLUMN IF NOT EXISTS, so we check first
+    const sessionColumns = db.all(sql `PRAGMA table_info(sessions)`);
+    const sessionColumnNames = new Set(sessionColumns.map((c) => c.name));
+    if (!sessionColumnNames.has('llm_call_count')) {
+        db.run(sql `ALTER TABLE sessions ADD COLUMN llm_call_count INTEGER NOT NULL DEFAULT 0`);
+    }
+    if (!sessionColumnNames.has('total_input_tokens')) {
+        db.run(sql `ALTER TABLE sessions ADD COLUMN total_input_tokens INTEGER NOT NULL DEFAULT 0`);
+    }
+    if (!sessionColumnNames.has('total_output_tokens')) {
+        db.run(sql `ALTER TABLE sessions ADD COLUMN total_output_tokens INTEGER NOT NULL DEFAULT 0`);
+    }
+    // ─── Tenant isolation migration (Epic 1) ──────────────────
+    // Add tenant_id to all data tables for multi-tenant support
+    // api_keys.tenant_id
+    const apiKeyColumns = db.all(sql `PRAGMA table_info(api_keys)`);
+    const apiKeyColumnNames = new Set(apiKeyColumns.map((c) => c.name));
+    if (!apiKeyColumnNames.has('tenant_id')) {
+        db.run(sql `ALTER TABLE api_keys ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'default'`);
+    }
+    if (!apiKeyColumnNames.has('created_by')) {
+        db.run(sql `ALTER TABLE api_keys ADD COLUMN created_by TEXT REFERENCES users(id)`);
+    }
+    if (!apiKeyColumnNames.has('role')) {
+        db.run(sql `ALTER TABLE api_keys ADD COLUMN role TEXT NOT NULL DEFAULT 'editor'`);
+    }
+    // events.tenant_id
+    const eventColumns = db.all(sql `PRAGMA table_info(events)`);
+    const eventColumnNames = new Set(eventColumns.map((c) => c.name));
+    if (!eventColumnNames.has('tenant_id')) {
+        db.run(sql `ALTER TABLE events ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'default'`);
+    }
+    // sessions.tenant_id
+    if (!sessionColumnNames.has('tenant_id')) {
+        db.run(sql `ALTER TABLE sessions ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'default'`);
+    }
+    // agents.tenant_id
+    const agentColumns = db.all(sql `PRAGMA table_info(agents)`);
+    const agentColumnNames = new Set(agentColumns.map((c) => c.name));
+    if (!agentColumnNames.has('tenant_id')) {
+        db.run(sql `ALTER TABLE agents ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'default'`);
+    }
+    // alert_rules.tenant_id
+    const alertRuleColumns = db.all(sql `PRAGMA table_info(alert_rules)`);
+    const alertRuleColumnNames = new Set(alertRuleColumns.map((c) => c.name));
+    if (!alertRuleColumnNames.has('tenant_id')) {
+        db.run(sql `ALTER TABLE alert_rules ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'default'`);
+    }
+    // alert_history.tenant_id
+    const alertHistoryColumns = db.all(sql `PRAGMA table_info(alert_history)`);
+    const alertHistoryColumnNames = new Set(alertHistoryColumns.map((c) => c.name));
+    if (!alertHistoryColumnNames.has('tenant_id')) {
+        db.run(sql `ALTER TABLE alert_history ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'default'`);
+    }
+    // Tenant isolation indexes
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_events_tenant_id ON events(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_events_tenant_session ON events(tenant_id, session_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_events_tenant_agent_ts ON events(tenant_id, agent_id, timestamp)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_sessions_tenant_id ON sessions(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_sessions_tenant_agent ON sessions(tenant_id, agent_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_sessions_tenant_started ON sessions(tenant_id, started_at)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_agents_tenant_id ON agents(tenant_id)`);
+    // ─── Embeddings table (Epic 2 — Story 2.2) ──────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS embeddings (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      source_type TEXT NOT NULL,
+      source_id TEXT NOT NULL,
+      content_hash TEXT NOT NULL,
+      text_content TEXT NOT NULL,
+      embedding BLOB NOT NULL,
+      embedding_model TEXT NOT NULL,
+      dimensions INTEGER NOT NULL,
+      created_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_embeddings_tenant ON embeddings(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_embeddings_source ON embeddings(source_type, source_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_embeddings_content_hash ON embeddings(tenant_id, content_hash)`);
+    // ─── Session Summaries table (Epic 2 — Story 2.2) ──────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS session_summaries (
+      session_id TEXT NOT NULL,
+      tenant_id TEXT NOT NULL,
+      summary TEXT NOT NULL,
+      topics TEXT NOT NULL DEFAULT '[]',
+      tool_sequence TEXT NOT NULL DEFAULT '[]',
+      error_summary TEXT,
+      outcome TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      PRIMARY KEY (session_id, tenant_id)
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_session_summaries_tenant ON session_summaries(tenant_id)`);
+    // ─── Composite PK migration (CRITICAL-2) ──────────────────
+    // SQLite doesn't support ALTER TABLE to change PKs, so we recreate
+    // tables with composite PKs (id, tenant_id) for tenant isolation.
+    // Check if sessions table still has single-column PK
+    // by looking at the CREATE TABLE statement
+    const sessionsSchema = db.get(sql `SELECT sql FROM sqlite_master WHERE type='table' AND name='sessions'`);
+    if (sessionsSchema && sessionsSchema.sql.includes('id TEXT PRIMARY KEY')) {
+        // Drop old indexes that reference sessions (they'll be recreated)
+        db.run(sql `DROP INDEX IF EXISTS idx_sessions_agent_id`);
+        db.run(sql `DROP INDEX IF EXISTS idx_sessions_started_at`);
+        db.run(sql `DROP INDEX IF EXISTS idx_sessions_status`);
+        db.run(sql `DROP INDEX IF EXISTS idx_sessions_tenant_id`);
+        db.run(sql `DROP INDEX IF EXISTS idx_sessions_tenant_agent`);
+        db.run(sql `DROP INDEX IF EXISTS idx_sessions_tenant_started`);
+        db.run(sql `
+      CREATE TABLE sessions_new (
+        id TEXT NOT NULL,
+        agent_id TEXT NOT NULL,
+        agent_name TEXT,
+        started_at TEXT NOT NULL,
+        ended_at TEXT,
+        status TEXT NOT NULL DEFAULT 'active',
+        event_count INTEGER NOT NULL DEFAULT 0,
+        tool_call_count INTEGER NOT NULL DEFAULT 0,
+        error_count INTEGER NOT NULL DEFAULT 0,
+        total_cost_usd REAL NOT NULL DEFAULT 0,
+        llm_call_count INTEGER NOT NULL DEFAULT 0,
+        total_input_tokens INTEGER NOT NULL DEFAULT 0,
+        total_output_tokens INTEGER NOT NULL DEFAULT 0,
+        tags TEXT NOT NULL DEFAULT '[]',
+        tenant_id TEXT NOT NULL DEFAULT 'default',
+        PRIMARY KEY (id, tenant_id)
+      )
+    `);
+        db.run(sql `
+      INSERT INTO sessions_new
+        SELECT id, agent_id, agent_name, started_at, ended_at, status,
+               event_count, tool_call_count, error_count, total_cost_usd,
+               llm_call_count, total_input_tokens, total_output_tokens,
+               tags, tenant_id
+        FROM sessions
+    `);
+        db.run(sql `DROP TABLE sessions`);
+        db.run(sql `ALTER TABLE sessions_new RENAME TO sessions`);
+        // Recreate indexes
+        db.run(sql `CREATE INDEX idx_sessions_agent_id ON sessions(agent_id)`);
+        db.run(sql `CREATE INDEX idx_sessions_started_at ON sessions(started_at)`);
+        db.run(sql `CREATE INDEX idx_sessions_status ON sessions(status)`);
+        db.run(sql `CREATE INDEX idx_sessions_tenant_id ON sessions(tenant_id)`);
+        db.run(sql `CREATE INDEX idx_sessions_tenant_agent ON sessions(tenant_id, agent_id)`);
+        db.run(sql `CREATE INDEX idx_sessions_tenant_started ON sessions(tenant_id, started_at)`);
+    }
+    // Check if agents table still has single-column PK
+    const agentsSchema = db.get(sql `SELECT sql FROM sqlite_master WHERE type='table' AND name='agents'`);
+    if (agentsSchema && agentsSchema.sql.includes('id TEXT PRIMARY KEY')) {
+        db.run(sql `DROP INDEX IF EXISTS idx_agents_tenant_id`);
+        db.run(sql `
+      CREATE TABLE agents_new (
+        id TEXT NOT NULL,
+        name TEXT NOT NULL,
+        description TEXT,
+        first_seen_at TEXT NOT NULL,
+        last_seen_at TEXT NOT NULL,
+        session_count INTEGER NOT NULL DEFAULT 0,
+        tenant_id TEXT NOT NULL DEFAULT 'default',
+        PRIMARY KEY (id, tenant_id)
+      )
+    `);
+        db.run(sql `
+      INSERT INTO agents_new
+        SELECT id, name, description, first_seen_at, last_seen_at,
+               session_count, tenant_id
+        FROM agents
+    `);
+        db.run(sql `DROP TABLE agents`);
+        db.run(sql `ALTER TABLE agents_new RENAME TO agents`);
+        db.run(sql `CREATE INDEX idx_agents_tenant_id ON agents(tenant_id)`);
+    }
+    // ─── Lessons table (Epic 3) ──────────────────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS lessons (
+      id TEXT NOT NULL,
+      tenant_id TEXT NOT NULL,
+      agent_id TEXT,
+      category TEXT NOT NULL DEFAULT 'general',
+      title TEXT NOT NULL,
+      content TEXT NOT NULL,
+      context TEXT NOT NULL DEFAULT '{}',
+      importance TEXT NOT NULL DEFAULT 'normal',
+      source_session_id TEXT,
+      source_event_id TEXT,
+      access_count INTEGER NOT NULL DEFAULT 0,
+      last_accessed_at TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      archived_at TEXT,
+      PRIMARY KEY (id, tenant_id)
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_lessons_tenant ON lessons(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_lessons_tenant_agent ON lessons(tenant_id, agent_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_lessons_tenant_category ON lessons(tenant_id, category)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_lessons_tenant_importance ON lessons(tenant_id, importance)`);
+    // ─── Lessons PK migration (H5) ──────────────────────────
+    // Migrate existing lessons tables from single-column PK to composite PK
+    const lessonsSchema = db.get(sql `SELECT sql FROM sqlite_master WHERE type='table' AND name='lessons'`);
+    if (lessonsSchema && lessonsSchema.sql.includes('id TEXT PRIMARY KEY')) {
+        db.run(sql `DROP INDEX IF EXISTS idx_lessons_tenant`);
+        db.run(sql `DROP INDEX IF EXISTS idx_lessons_tenant_agent`);
+        db.run(sql `DROP INDEX IF EXISTS idx_lessons_tenant_category`);
+        db.run(sql `DROP INDEX IF EXISTS idx_lessons_tenant_importance`);
+        db.run(sql `
+      CREATE TABLE lessons_new (
+        id TEXT NOT NULL,
+        tenant_id TEXT NOT NULL,
+        agent_id TEXT,
+        category TEXT NOT NULL DEFAULT 'general',
+        title TEXT NOT NULL,
+        content TEXT NOT NULL,
+        context TEXT NOT NULL DEFAULT '{}',
+        importance TEXT NOT NULL DEFAULT 'normal',
+        source_session_id TEXT,
+        source_event_id TEXT,
+        access_count INTEGER NOT NULL DEFAULT 0,
+        last_accessed_at TEXT,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL,
+        archived_at TEXT,
+        PRIMARY KEY (id, tenant_id)
+      )
+    `);
+        db.run(sql `
+      INSERT INTO lessons_new
+        SELECT id, tenant_id, agent_id, category, title, content, context,
+               importance, source_session_id, source_event_id, access_count,
+               last_accessed_at, created_at, updated_at, archived_at
+        FROM lessons
+    `);
+        db.run(sql `DROP TABLE lessons`);
+        db.run(sql `ALTER TABLE lessons_new RENAME TO lessons`);
+        db.run(sql `CREATE INDEX idx_lessons_tenant ON lessons(tenant_id)`);
+        db.run(sql `CREATE INDEX idx_lessons_tenant_agent ON lessons(tenant_id, agent_id)`);
+        db.run(sql `CREATE INDEX idx_lessons_tenant_category ON lessons(tenant_id, category)`);
+        db.run(sql `CREATE INDEX idx_lessons_tenant_importance ON lessons(tenant_id, importance)`);
+    }
+    // ─── Composite index for similarity search (M6) ──────────────────
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_embeddings_tenant_source_time ON embeddings(tenant_id, source_type, created_at)`);
+    // ─── Health Snapshots table (Epic 6 — Story 1.3) ──────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS health_snapshots (
+      id TEXT NOT NULL,
+      tenant_id TEXT NOT NULL,
+      agent_id TEXT NOT NULL,
+      date TEXT NOT NULL,
+      overall_score REAL NOT NULL,
+      error_rate_score REAL NOT NULL,
+      cost_efficiency_score REAL NOT NULL,
+      tool_success_score REAL NOT NULL,
+      latency_score REAL NOT NULL,
+      completion_rate_score REAL NOT NULL,
+      session_count INTEGER NOT NULL,
+      created_at TEXT NOT NULL,
+      PRIMARY KEY (tenant_id, agent_id, date)
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_health_snapshots_agent ON health_snapshots(tenant_id, agent_id, date DESC)`);
+    // ─── Benchmark tables (v0.7.0 — Story 1.3) ──────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS benchmarks (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      name TEXT NOT NULL,
+      description TEXT,
+      status TEXT NOT NULL DEFAULT 'draft',
+      agent_id TEXT,
+      metrics TEXT NOT NULL DEFAULT '[]',
+      min_sessions_per_variant INTEGER NOT NULL DEFAULT 10,
+      time_range_from TEXT,
+      time_range_to TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      completed_at TEXT
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS benchmark_variants (
+      id TEXT PRIMARY KEY,
+      benchmark_id TEXT NOT NULL REFERENCES benchmarks(id) ON DELETE CASCADE,
+      tenant_id TEXT NOT NULL,
+      name TEXT NOT NULL,
+      description TEXT,
+      tag TEXT NOT NULL,
+      agent_id TEXT,
+      sort_order INTEGER NOT NULL DEFAULT 0
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS benchmark_results (
+      id TEXT PRIMARY KEY,
+      benchmark_id TEXT NOT NULL REFERENCES benchmarks(id) ON DELETE CASCADE,
+      tenant_id TEXT NOT NULL,
+      variant_metrics TEXT NOT NULL DEFAULT '[]',
+      comparisons TEXT NOT NULL DEFAULT '[]',
+      summary TEXT,
+      computed_at TEXT NOT NULL
+    )
+  `);
+    // Benchmark indexes
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_benchmarks_tenant_id ON benchmarks(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_benchmarks_tenant_status ON benchmarks(tenant_id, status)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_benchmark_variants_benchmark_id ON benchmark_variants(benchmark_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_benchmark_variants_tenant_tag ON benchmark_variants(tenant_id, tag)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_benchmark_results_benchmark_id ON benchmark_results(benchmark_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_benchmark_results_tenant_id ON benchmark_results(tenant_id)`);
+    // ─── Guardrail tables (v0.8.0 — Phase 3) ──────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS guardrail_rules (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      name TEXT NOT NULL,
+      description TEXT,
+      enabled INTEGER NOT NULL DEFAULT 1,
+      condition_type TEXT NOT NULL,
+      condition_config TEXT NOT NULL DEFAULT '{}',
+      action_type TEXT NOT NULL,
+      action_config TEXT NOT NULL DEFAULT '{}',
+      agent_id TEXT,
+      cooldown_minutes INTEGER NOT NULL DEFAULT 15,
+      dry_run INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS guardrail_state (
+      rule_id TEXT NOT NULL,
+      tenant_id TEXT NOT NULL,
+      last_triggered_at TEXT,
+      trigger_count INTEGER NOT NULL DEFAULT 0,
+      last_evaluated_at TEXT,
+      current_value REAL,
+      PRIMARY KEY (rule_id, tenant_id)
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS guardrail_trigger_history (
+      id TEXT PRIMARY KEY,
+      rule_id TEXT NOT NULL,
+      tenant_id TEXT NOT NULL,
+      triggered_at TEXT NOT NULL,
+      condition_value REAL NOT NULL,
+      condition_threshold REAL NOT NULL,
+      action_executed INTEGER NOT NULL DEFAULT 0,
+      action_result TEXT,
+      metadata TEXT NOT NULL DEFAULT '{}'
+    )
+  `);
+    // Guardrail indexes
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_guardrail_rules_tenant ON guardrail_rules(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_guardrail_rules_tenant_enabled ON guardrail_rules(tenant_id, enabled)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_guardrail_state_tenant ON guardrail_state(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_guardrail_trigger_history_tenant ON guardrail_trigger_history(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_guardrail_trigger_history_rule ON guardrail_trigger_history(rule_id, triggered_at)`);
+    // ─── Feature 8: Content guardrail columns ──────────────────
+    const grColsF8 = db.all(sql `PRAGMA table_info(guardrail_rules)`);
+    const grColNamesF8 = new Set(grColsF8.map((c) => c.name));
+    if (!grColNamesF8.has('direction')) {
+        db.run(sql `ALTER TABLE guardrail_rules ADD COLUMN direction TEXT DEFAULT 'both'`);
+    }
+    if (!grColNamesF8.has('tool_names')) {
+        db.run(sql `ALTER TABLE guardrail_rules ADD COLUMN tool_names TEXT`);
+    }
+    if (!grColNamesF8.has('priority')) {
+        db.run(sql `ALTER TABLE guardrail_rules ADD COLUMN priority INTEGER DEFAULT 0`);
+    }
+    // ─── Agent model override & pause columns (B1 — Story 1.2) ──────
+    // Idempotent: only adds columns if they don't already exist
+    const agentColsB1 = db.all(sql `PRAGMA table_info(agents)`);
+    const agentColNamesB1 = new Set(agentColsB1.map((c) => c.name));
+    if (!agentColNamesB1.has('model_override')) {
+        db.run(sql `ALTER TABLE agents ADD COLUMN model_override TEXT`);
+    }
+    if (!agentColNamesB1.has('paused_at')) {
+        db.run(sql `ALTER TABLE agents ADD COLUMN paused_at TEXT`);
+    }
+    if (!agentColNamesB1.has('pause_reason')) {
+        db.run(sql `ALTER TABLE agents ADD COLUMN pause_reason TEXT`);
+    }
+    // Partial index for finding paused agents efficiently
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_agents_paused ON agents(tenant_id, paused_at) WHERE paused_at IS NOT NULL`);
+    // ─── Phase 4: Sharing & Discovery tables (Stories 1.3) ──────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS sharing_config (
+      tenant_id TEXT PRIMARY KEY,
+      enabled INTEGER NOT NULL DEFAULT 0,
+      human_review_enabled INTEGER NOT NULL DEFAULT 0,
+      pool_endpoint TEXT,
+      anonymous_contributor_id TEXT,
+      purge_token TEXT,
+      rate_limit_per_hour INTEGER NOT NULL DEFAULT 50,
+      volume_alert_threshold INTEGER NOT NULL DEFAULT 100,
+      updated_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS agent_sharing_config (
+      tenant_id TEXT NOT NULL,
+      agent_id TEXT NOT NULL,
+      enabled INTEGER NOT NULL DEFAULT 0,
+      categories TEXT NOT NULL DEFAULT '[]',
+      updated_at TEXT NOT NULL,
+      PRIMARY KEY (tenant_id, agent_id)
+    )
+  `);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS deny_list_rules (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      pattern TEXT NOT NULL,
+      is_regex INTEGER NOT NULL DEFAULT 0,
+      reason TEXT NOT NULL,
+      created_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_deny_list_rules_tenant ON deny_list_rules(tenant_id)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS sharing_audit_log (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      event_type TEXT NOT NULL,
+      lesson_id TEXT,
+      anonymous_lesson_id TEXT,
+      lesson_hash TEXT,
+      redaction_findings TEXT,
+      query_text TEXT,
+      result_ids TEXT,
+      pool_endpoint TEXT,
+      initiated_by TEXT,
+      timestamp TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_sharing_audit_tenant_ts ON sharing_audit_log(tenant_id, timestamp)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_sharing_audit_type ON sharing_audit_log(tenant_id, event_type)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS sharing_review_queue (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      lesson_id TEXT NOT NULL,
+      original_title TEXT NOT NULL,
+      original_content TEXT NOT NULL,
+      redacted_title TEXT NOT NULL,
+      redacted_content TEXT NOT NULL,
+      redaction_findings TEXT NOT NULL,
+      status TEXT NOT NULL DEFAULT 'pending',
+      reviewed_by TEXT,
+      reviewed_at TEXT,
+      created_at TEXT NOT NULL,
+      expires_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_review_queue_tenant_status ON sharing_review_queue(tenant_id, status)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS anonymous_id_map (
+      tenant_id TEXT NOT NULL,
+      agent_id TEXT NOT NULL,
+      anonymous_agent_id TEXT NOT NULL,
+      valid_from TEXT NOT NULL,
+      valid_until TEXT NOT NULL,
+      PRIMARY KEY (tenant_id, agent_id, valid_from)
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_anon_map_anon_id ON anonymous_id_map(anonymous_agent_id)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS capability_registry (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      agent_id TEXT NOT NULL,
+      task_type TEXT NOT NULL,
+      custom_type TEXT,
+      input_schema TEXT NOT NULL,
+      output_schema TEXT NOT NULL,
+      quality_metrics TEXT NOT NULL DEFAULT '{}',
+      estimated_latency_ms INTEGER,
+      estimated_cost_usd REAL,
+      max_input_bytes INTEGER,
+      scope TEXT NOT NULL DEFAULT 'internal',
+      enabled INTEGER NOT NULL DEFAULT 1,
+      accept_delegations INTEGER NOT NULL DEFAULT 0,
+      inbound_rate_limit INTEGER NOT NULL DEFAULT 10,
+      outbound_rate_limit INTEGER NOT NULL DEFAULT 20,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_capability_tenant_agent ON capability_registry(tenant_id, agent_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_capability_task_type ON capability_registry(tenant_id, task_type)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS delegation_log (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      direction TEXT NOT NULL,
+      agent_id TEXT NOT NULL,
+      anonymous_target_id TEXT,
+      anonymous_source_id TEXT,
+      task_type TEXT NOT NULL,
+      status TEXT NOT NULL,
+      request_size_bytes INTEGER,
+      response_size_bytes INTEGER,
+      execution_time_ms INTEGER,
+      cost_usd REAL,
+      created_at TEXT NOT NULL,
+      completed_at TEXT
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_delegation_tenant_ts ON delegation_log(tenant_id, created_at)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_delegation_agent ON delegation_log(tenant_id, agent_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_delegation_status ON delegation_log(tenant_id, status)`);
+    // ─── Users Table (Enterprise Auth — S3) ─────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS users (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL DEFAULT 'default',
+      email TEXT NOT NULL,
+      display_name TEXT,
+      oidc_subject TEXT,
+      oidc_issuer TEXT,
+      role TEXT NOT NULL DEFAULT 'viewer',
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL,
+      last_login_at INTEGER,
+      disabled_at INTEGER
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_users_tenant ON users(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_users_email ON users(email)`);
+    db.run(sql `CREATE UNIQUE INDEX IF NOT EXISTS idx_users_tenant_email ON users(tenant_id, email)`);
+    db.run(sql `CREATE UNIQUE INDEX IF NOT EXISTS idx_users_oidc ON users(oidc_issuer, oidc_subject)`);
+    // ─── Refresh Tokens Table (Enterprise Auth — S3) ───────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS refresh_tokens (
+      id TEXT PRIMARY KEY,
+      user_id TEXT NOT NULL REFERENCES users(id),
+      tenant_id TEXT NOT NULL DEFAULT 'default',
+      token_hash TEXT NOT NULL,
+      expires_at INTEGER NOT NULL,
+      created_at INTEGER NOT NULL,
+      revoked_at INTEGER,
+      user_agent TEXT,
+      ip_address TEXT
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_refresh_tokens_user ON refresh_tokens(user_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_refresh_tokens_hash ON refresh_tokens(token_hash)`);
+    // ─── Audit Log table (SH-2) ──────────────────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS audit_log (
+      id TEXT PRIMARY KEY,
+      timestamp TEXT NOT NULL,
+      tenant_id TEXT NOT NULL,
+      actor_type TEXT NOT NULL,
+      actor_id TEXT NOT NULL,
+      action TEXT NOT NULL,
+      resource_type TEXT,
+      resource_id TEXT,
+      details TEXT NOT NULL DEFAULT '{}',
+      ip_address TEXT,
+      user_agent TEXT
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_audit_log_tenant_ts ON audit_log(tenant_id, timestamp)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_audit_log_action ON audit_log(action)`);
+    // ─── API Key Rotation columns (SH-6) ──────────────────
+    const apiKeyColsSH6 = db.all(sql `PRAGMA table_info(api_keys)`);
+    const apiKeyColNamesSH6 = new Set(apiKeyColsSH6.map((c) => c.name));
+    if (!apiKeyColNamesSH6.has('rotated_at')) {
+        db.run(sql `ALTER TABLE api_keys ADD COLUMN rotated_at INTEGER`);
+    }
+    if (!apiKeyColNamesSH6.has('expires_at')) {
+        db.run(sql `ALTER TABLE api_keys ADD COLUMN expires_at INTEGER`);
+    }
+    // ─── Discovery Config (Story 5.4) ──────────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS discovery_config (
+      tenant_id TEXT PRIMARY KEY,
+      min_trust_threshold INTEGER NOT NULL DEFAULT 60,
+      delegation_enabled INTEGER NOT NULL DEFAULT 0,
+      updated_at TEXT NOT NULL
+    )
+  `);
+    // ─── Cost Budget tables (Feature 5) ──────────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS cost_budgets (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      scope TEXT NOT NULL,
+      agent_id TEXT,
+      period TEXT NOT NULL,
+      limit_usd REAL NOT NULL,
+      on_breach TEXT NOT NULL DEFAULT 'alert',
+      downgrade_target_model TEXT,
+      enabled INTEGER NOT NULL DEFAULT 1,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_cost_budgets_tenant ON cost_budgets(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_cost_budgets_tenant_enabled ON cost_budgets(tenant_id, enabled)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_cost_budgets_tenant_agent ON cost_budgets(tenant_id, agent_id)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS cost_budget_state (
+      budget_id TEXT NOT NULL,
+      tenant_id TEXT NOT NULL,
+      last_breach_at TEXT,
+      breach_count INTEGER NOT NULL DEFAULT 0,
+      current_spend REAL,
+      period_start TEXT,
+      PRIMARY KEY (budget_id, tenant_id)
+    )
+  `);
+    // ─── Notification Channels (Feature 12) ──────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS notification_channels (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL DEFAULT 'default',
+      type TEXT NOT NULL,
+      name TEXT NOT NULL,
+      config TEXT NOT NULL,
+      enabled INTEGER NOT NULL DEFAULT 1,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_notification_channels_tenant ON notification_channels(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_notification_channels_type ON notification_channels(tenant_id, type)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS notification_log (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL DEFAULT 'default',
+      channel_id TEXT NOT NULL,
+      rule_id TEXT,
+      rule_type TEXT,
+      status TEXT NOT NULL,
+      attempt INTEGER NOT NULL DEFAULT 1,
+      error_message TEXT,
+      payload_summary TEXT,
+      created_at TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_notification_log_tenant ON notification_log(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_notification_log_channel ON notification_log(channel_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_notification_log_created ON notification_log(tenant_id, created_at)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS cost_anomaly_config (
+      tenant_id TEXT PRIMARY KEY,
+      multiplier REAL NOT NULL DEFAULT 3.0,
+      min_sessions INTEGER NOT NULL DEFAULT 5,
+      enabled INTEGER NOT NULL DEFAULT 1,
+      updated_at TEXT NOT NULL
+    )
+  `);
+    // ─── Eval Framework tables (Feature 15) ──────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS eval_datasets (
+      id            TEXT PRIMARY KEY,
+      tenant_id     TEXT NOT NULL,
+      agent_id      TEXT,
+      name          TEXT NOT NULL,
+      description   TEXT,
+      version       INTEGER NOT NULL DEFAULT 1,
+      parent_id     TEXT,
+      immutable     INTEGER NOT NULL DEFAULT 0,
+      created_at    TEXT NOT NULL,
+      updated_at    TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_eval_datasets_tenant ON eval_datasets(tenant_id)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS eval_test_cases (
+      id                TEXT PRIMARY KEY,
+      dataset_id        TEXT NOT NULL REFERENCES eval_datasets(id) ON DELETE CASCADE,
+      tenant_id         TEXT NOT NULL,
+      input             TEXT NOT NULL,
+      expected_output   TEXT,
+      tags              TEXT NOT NULL DEFAULT '[]',
+      metadata          TEXT NOT NULL DEFAULT '{}',
+      scoring_criteria  TEXT,
+      sort_order        INTEGER NOT NULL DEFAULT 0,
+      created_at        TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_eval_test_cases_dataset ON eval_test_cases(dataset_id)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS eval_runs (
+      id              TEXT PRIMARY KEY,
+      tenant_id       TEXT NOT NULL,
+      dataset_id      TEXT NOT NULL REFERENCES eval_datasets(id),
+      dataset_version INTEGER NOT NULL,
+      agent_id        TEXT NOT NULL,
+      webhook_url     TEXT NOT NULL,
+      status          TEXT NOT NULL DEFAULT 'pending',
+      config          TEXT NOT NULL DEFAULT '{}',
+      baseline_run_id TEXT,
+      total_cases     INTEGER NOT NULL DEFAULT 0,
+      passed_cases    INTEGER NOT NULL DEFAULT 0,
+      failed_cases    INTEGER NOT NULL DEFAULT 0,
+      avg_score       REAL,
+      total_cost_usd  REAL,
+      total_duration_ms INTEGER,
+      started_at      TEXT,
+      completed_at    TEXT,
+      created_at      TEXT NOT NULL,
+      error           TEXT
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_eval_runs_tenant ON eval_runs(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_eval_runs_dataset ON eval_runs(dataset_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_eval_runs_agent ON eval_runs(tenant_id, agent_id)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS eval_results (
+      id              TEXT PRIMARY KEY,
+      run_id          TEXT NOT NULL REFERENCES eval_runs(id) ON DELETE CASCADE,
+      test_case_id    TEXT NOT NULL REFERENCES eval_test_cases(id),
+      tenant_id       TEXT NOT NULL,
+      session_id      TEXT,
+      actual_output   TEXT,
+      score           REAL NOT NULL,
+      passed          INTEGER NOT NULL,
+      scorer_type     TEXT NOT NULL,
+      scorer_details  TEXT NOT NULL DEFAULT '{}',
+      latency_ms      INTEGER,
+      cost_usd        REAL,
+      token_count     INTEGER,
+      error           TEXT,
+      created_at      TEXT NOT NULL
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_eval_results_run ON eval_results(run_id)`);
+    // ─── Prompt Management tables (Feature 19) ──────────────────
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS prompt_templates (
+      id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      name TEXT NOT NULL,
+      description TEXT,
+      category TEXT NOT NULL DEFAULT 'general',
+      current_version_id TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      deleted_at TEXT
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_prompt_templates_tenant ON prompt_templates(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_prompt_templates_tenant_cat ON prompt_templates(tenant_id, category)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_prompt_templates_tenant_name ON prompt_templates(tenant_id, name)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS prompt_versions (
+      id TEXT PRIMARY KEY,
+      template_id TEXT NOT NULL,
+      tenant_id TEXT NOT NULL,
+      version_number INTEGER NOT NULL,
+      content TEXT NOT NULL,
+      variables TEXT,
+      content_hash TEXT NOT NULL,
+      changelog TEXT,
+      created_by TEXT,
+      created_at TEXT NOT NULL,
+      UNIQUE(template_id, version_number)
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_prompt_versions_tenant ON prompt_versions(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_prompt_versions_hash ON prompt_versions(content_hash)`);
+    db.run(sql `
+    CREATE TABLE IF NOT EXISTS prompt_fingerprints (
+      content_hash TEXT NOT NULL,
+      tenant_id TEXT NOT NULL,
+      agent_id TEXT NOT NULL,
+      first_seen_at TEXT NOT NULL,
+      last_seen_at TEXT NOT NULL,
+      call_count INTEGER NOT NULL DEFAULT 0,
+      template_id TEXT,
+      sample_content TEXT,
+      PRIMARY KEY (content_hash, tenant_id, agent_id)
+    )
+  `);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_prompt_fp_tenant ON prompt_fingerprints(tenant_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_prompt_fp_agent ON prompt_fingerprints(tenant_id, agent_id)`);
+    db.run(sql `CREATE INDEX IF NOT EXISTS idx_prompt_fp_template ON prompt_fingerprints(template_id)`);
+}
+/**
+ * Verify that WAL mode is enabled.
+ */
+export function verifyPragmas(db) {
+    const journalMode = db.get(sql `PRAGMA journal_mode`)?.journal_mode ?? '';
+    const synchronous = db.get(sql `PRAGMA synchronous`)?.synchronous ?? -1;
+    const cacheSize = db.get(sql `PRAGMA cache_size`)?.cache_size ?? 0;
+    // SQLite returns { timeout: N } for PRAGMA busy_timeout
+    const busyTimeout = db.get(sql `PRAGMA busy_timeout`)?.timeout ?? 0;
+    const foreignKeys = db.get(sql `PRAGMA foreign_keys`)?.foreign_keys === 1;
+    // synchronous: 0=OFF, 1=NORMAL, 2=FULL, 3=EXTRA
+    const syncNames = { 0: 'OFF', 1: 'NORMAL', 2: 'FULL', 3: 'EXTRA' };
+    return {
+        journalMode,
+        synchronous: syncNames[synchronous] ?? String(synchronous),
+        cacheSize,
+        busyTimeout,
+        foreignKeys,
+    };
+}
+//# sourceMappingURL=migrate.sqlite.js.map