@evalops/maestro 0.10.8 → 0.10.10

package/dist/db/migrations/0000_initial.sql

@@ -0,0 +1,308 @@
+CREATE TYPE "public"."alert_severity" AS ENUM('critical', 'high', 'medium', 'low', 'info');--> statement-breakpoint
+CREATE TYPE "public"."audit_status" AS ENUM('success', 'failure', 'error', 'denied');--> statement-breakpoint
+CREATE TYPE "public"."model_approval_status" AS ENUM('approved', 'pending', 'denied', 'auto_approved');--> statement-breakpoint
+CREATE TYPE "public"."user_role" AS ENUM('org_owner', 'org_admin', 'org_member', 'org_viewer');--> statement-breakpoint
+CREATE TYPE "public"."webhook_delivery_status" AS ENUM('pending', 'delivered', 'failed', 'retrying');--> statement-breakpoint
+CREATE TABLE "alerts" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"org_id" uuid NOT NULL,
+	"user_id" uuid,
+	"severity" "alert_severity" NOT NULL,
+	"type" varchar(100) NOT NULL,
+	"message" text NOT NULL,
+	"metadata" jsonb DEFAULT '{}'::jsonb,
+	"is_read" boolean DEFAULT false NOT NULL,
+	"resolved_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "api_keys" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"org_id" uuid NOT NULL,
+	"user_id" uuid NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"key_hash" varchar(255) NOT NULL,
+	"key_prefix" varchar(20) NOT NULL,
+	"scopes" jsonb DEFAULT '[]'::jsonb,
+	"last_used_at" timestamp with time zone,
+	"expires_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"revoked_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "audit_hash_cache" (
+	"org_id" uuid PRIMARY KEY NOT NULL,
+	"last_hash" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "audit_logs" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"org_id" uuid NOT NULL,
+	"user_id" uuid,
+	"session_id" uuid,
+	"action" varchar(100) NOT NULL,
+	"resource_type" varchar(100),
+	"resource_id" uuid,
+	"status" "audit_status" NOT NULL,
+	"ip_address" varchar(45),
+	"user_agent" text,
+	"request_id" varchar(100),
+	"trace_id" varchar(100),
+	"metadata" jsonb DEFAULT '{}'::jsonb,
+	"duration_ms" integer,
+	"integrity_hash" varchar(64),
+	"previous_hash" varchar(64),
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "directory_access_rules" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"org_id" uuid NOT NULL,
+	"pattern" varchar(500) NOT NULL,
+	"is_allowed" boolean NOT NULL,
+	"role_ids" jsonb,
+	"description" text,
+	"priority" integer DEFAULT 0 NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "distributed_locks" (
+	"id" varchar(100) PRIMARY KEY NOT NULL,
+	"holder_id" varchar(100) NOT NULL,
+	"acquired_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "model_approvals" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"org_id" uuid NOT NULL,
+	"model_id" varchar(100) NOT NULL,
+	"provider" varchar(100) NOT NULL,
+	"status" "model_approval_status" NOT NULL,
+	"spend_limit" integer,
+	"spend_used" integer DEFAULT 0 NOT NULL,
+	"token_limit" integer,
+	"token_used" integer DEFAULT 0 NOT NULL,
+	"restricted_to_roles" jsonb,
+	"metadata" jsonb DEFAULT '{}'::jsonb,
+	"approved_by" uuid,
+	"approved_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "org_memberships" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"org_id" uuid NOT NULL,
+	"user_id" uuid NOT NULL,
+	"role_id" uuid NOT NULL,
+	"token_quota" integer,
+	"token_used" integer DEFAULT 0 NOT NULL,
+	"quota_reset_at" timestamp with time zone,
+	"joined_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "organizations" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"slug" varchar(100) NOT NULL,
+	"settings" jsonb DEFAULT '{}'::jsonb,
+	"is_active" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"deleted_at" timestamp with time zone,
+	CONSTRAINT "organizations_slug_unique" UNIQUE("slug")
+);
+--> statement-breakpoint
+CREATE TABLE "permissions" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"resource" varchar(100) NOT NULL,
+	"action" varchar(50) NOT NULL,
+	"description" text
+);
+--> statement-breakpoint
+CREATE TABLE "revoked_tokens" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"token_hash" varchar(64) NOT NULL,
+	"token_type" varchar(20) NOT NULL,
+	"user_id" uuid,
+	"org_id" uuid,
+	"reason" varchar(100),
+	"expires_at" timestamp with time zone NOT NULL,
+	"revoked_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"revoked_by" uuid,
+	CONSTRAINT "revoked_tokens_token_hash_unique" UNIQUE("token_hash")
+);
+--> statement-breakpoint
+CREATE TABLE "role_permissions" (
+	"role_id" uuid NOT NULL,
+	"permission_id" uuid NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "roles" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"org_id" uuid,
+	"name" varchar(100) NOT NULL,
+	"description" text,
+	"is_system" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "session_messages" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"session_id" uuid NOT NULL,
+	"role" varchar(50) NOT NULL,
+	"content" text,
+	"tool_calls" jsonb,
+	"tool_results" jsonb,
+	"metadata" jsonb DEFAULT '{}'::jsonb,
+	"token_count" integer DEFAULT 0 NOT NULL,
+	"has_pii" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "sessions" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"org_id" uuid NOT NULL,
+	"user_id" uuid NOT NULL,
+	"title" varchar(255),
+	"model" varchar(100) NOT NULL,
+	"thinking_level" varchar(50) DEFAULT 'off' NOT NULL,
+	"system_prompt" text,
+	"metadata" jsonb DEFAULT '{}'::jsonb,
+	"token_count" integer DEFAULT 0 NOT NULL,
+	"message_count" integer DEFAULT 0 NOT NULL,
+	"is_shared" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"deleted_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "totp_rate_limits" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"user_id" uuid NOT NULL,
+	"attempts" integer DEFAULT 0 NOT NULL,
+	"window_start" timestamp with time zone NOT NULL,
+	"locked_until" timestamp with time zone,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "totp_rate_limits_user_id_unique" UNIQUE("user_id")
+);
+--> statement-breakpoint
+CREATE TABLE "totp_used_codes" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"user_id" uuid NOT NULL,
+	"code_hash" varchar(64) NOT NULL,
+	"window_start" timestamp with time zone NOT NULL,
+	"used_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "user_revocation_timestamps" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"user_id" uuid NOT NULL,
+	"revoked_before" timestamp with time zone NOT NULL,
+	"reason" varchar(100) NOT NULL,
+	"revoked_by" uuid,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "user_revocation_timestamps_user_id_unique" UNIQUE("user_id")
+);
+--> statement-breakpoint
+CREATE TABLE "users" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"email" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"password_hash" varchar(255),
+	"email_verified" boolean DEFAULT false NOT NULL,
+	"is_active" boolean DEFAULT true NOT NULL,
+	"default_org_id" uuid,
+	"settings" jsonb DEFAULT '{}'::jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"last_login_at" timestamp with time zone,
+	CONSTRAINT "users_email_unique" UNIQUE("email")
+);
+--> statement-breakpoint
+CREATE TABLE "webhook_deliveries" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"org_id" uuid NOT NULL,
+	"url" text NOT NULL,
+	"payload" jsonb NOT NULL,
+	"signature" varchar(200),
+	"status" "webhook_delivery_status" DEFAULT 'pending' NOT NULL,
+	"attempts" integer DEFAULT 0 NOT NULL,
+	"max_attempts" integer DEFAULT 5 NOT NULL,
+	"next_retry_at" timestamp with time zone,
+	"last_error" text,
+	"last_status_code" integer,
+	"last_response_time_ms" integer,
+	"delivered_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "alerts" ADD CONSTRAINT "alerts_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "alerts" ADD CONSTRAINT "alerts_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "api_keys" ADD CONSTRAINT "api_keys_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "api_keys" ADD CONSTRAINT "api_keys_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "audit_hash_cache" ADD CONSTRAINT "audit_hash_cache_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "audit_logs" ADD CONSTRAINT "audit_logs_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "audit_logs" ADD CONSTRAINT "audit_logs_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "audit_logs" ADD CONSTRAINT "audit_logs_session_id_sessions_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."sessions"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "directory_access_rules" ADD CONSTRAINT "directory_access_rules_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "model_approvals" ADD CONSTRAINT "model_approvals_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "model_approvals" ADD CONSTRAINT "model_approvals_approved_by_users_id_fk" FOREIGN KEY ("approved_by") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "org_memberships" ADD CONSTRAINT "org_memberships_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "org_memberships" ADD CONSTRAINT "org_memberships_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "org_memberships" ADD CONSTRAINT "org_memberships_role_id_roles_id_fk" FOREIGN KEY ("role_id") REFERENCES "public"."roles"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "revoked_tokens" ADD CONSTRAINT "revoked_tokens_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "revoked_tokens" ADD CONSTRAINT "revoked_tokens_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "revoked_tokens" ADD CONSTRAINT "revoked_tokens_revoked_by_users_id_fk" FOREIGN KEY ("revoked_by") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "role_permissions" ADD CONSTRAINT "role_permissions_role_id_roles_id_fk" FOREIGN KEY ("role_id") REFERENCES "public"."roles"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "role_permissions" ADD CONSTRAINT "role_permissions_permission_id_permissions_id_fk" FOREIGN KEY ("permission_id") REFERENCES "public"."permissions"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "roles" ADD CONSTRAINT "roles_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session_messages" ADD CONSTRAINT "session_messages_session_id_sessions_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."sessions"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "totp_rate_limits" ADD CONSTRAINT "totp_rate_limits_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "totp_used_codes" ADD CONSTRAINT "totp_used_codes_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "user_revocation_timestamps" ADD CONSTRAINT "user_revocation_timestamps_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "user_revocation_timestamps" ADD CONSTRAINT "user_revocation_timestamps_revoked_by_users_id_fk" FOREIGN KEY ("revoked_by") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "users" ADD CONSTRAINT "users_default_org_id_organizations_id_fk" FOREIGN KEY ("default_org_id") REFERENCES "public"."organizations"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "webhook_deliveries" ADD CONSTRAINT "webhook_deliveries_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "alert_org_user_idx" ON "alerts" USING btree ("org_id","user_id","created_at");--> statement-breakpoint
+CREATE INDEX "alert_type_idx" ON "alerts" USING btree ("type");--> statement-breakpoint
+CREATE INDEX "alert_unread_idx" ON "alerts" USING btree ("is_read","created_at");--> statement-breakpoint
+CREATE INDEX "api_key_org_user_idx" ON "api_keys" USING btree ("org_id","user_id");--> statement-breakpoint
+CREATE INDEX "api_key_prefix_idx" ON "api_keys" USING btree ("key_prefix");--> statement-breakpoint
+CREATE INDEX "audit_log_org_user_idx" ON "audit_logs" USING btree ("org_id","user_id","created_at");--> statement-breakpoint
+CREATE INDEX "audit_log_action_idx" ON "audit_logs" USING btree ("action","created_at");--> statement-breakpoint
+CREATE INDEX "audit_log_resource_idx" ON "audit_logs" USING btree ("resource_type","resource_id");--> statement-breakpoint
+CREATE INDEX "audit_log_session_idx" ON "audit_logs" USING btree ("session_id","created_at");--> statement-breakpoint
+CREATE INDEX "audit_log_trace_idx" ON "audit_logs" USING btree ("trace_id");--> statement-breakpoint
+CREATE INDEX "audit_log_org_created_idx" ON "audit_logs" USING btree ("org_id","created_at");--> statement-breakpoint
+CREATE INDEX "dir_access_org_idx" ON "directory_access_rules" USING btree ("org_id","priority");--> statement-breakpoint
+CREATE INDEX "distributed_lock_expires_idx" ON "distributed_locks" USING btree ("expires_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "model_approval_org_model_idx" ON "model_approvals" USING btree ("org_id","model_id");--> statement-breakpoint
+CREATE INDEX "model_approval_status_idx" ON "model_approvals" USING btree ("status");--> statement-breakpoint
+CREATE UNIQUE INDEX "org_membership_org_user_idx" ON "org_memberships" USING btree ("org_id","user_id");--> statement-breakpoint
+CREATE INDEX "org_membership_user_idx" ON "org_memberships" USING btree ("user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "org_slug_idx" ON "organizations" USING btree ("slug");--> statement-breakpoint
+CREATE INDEX "org_active_idx" ON "organizations" USING btree ("is_active");--> statement-breakpoint
+CREATE UNIQUE INDEX "permission_resource_action_idx" ON "permissions" USING btree ("resource","action");--> statement-breakpoint
+CREATE UNIQUE INDEX "revoked_token_hash_idx" ON "revoked_tokens" USING btree ("token_hash");--> statement-breakpoint
+CREATE INDEX "revoked_token_user_idx" ON "revoked_tokens" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "revoked_token_expires_idx" ON "revoked_tokens" USING btree ("expires_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "role_permission_pk" ON "role_permissions" USING btree ("role_id","permission_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "role_org_name_idx" ON "roles" USING btree ("org_id","name");--> statement-breakpoint
+CREATE INDEX "session_message_session_idx" ON "session_messages" USING btree ("session_id","created_at");--> statement-breakpoint
+CREATE INDEX "session_message_pii_idx" ON "session_messages" USING btree ("has_pii");--> statement-breakpoint
+CREATE INDEX "session_org_user_idx" ON "sessions" USING btree ("org_id","user_id");--> statement-breakpoint
+CREATE INDEX "session_user_idx" ON "sessions" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "session_created_idx" ON "sessions" USING btree ("created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "totp_rate_limit_user_idx" ON "totp_rate_limits" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "totp_rate_limit_locked_idx" ON "totp_rate_limits" USING btree ("locked_until");--> statement-breakpoint
+CREATE UNIQUE INDEX "totp_used_code_user_idx" ON "totp_used_codes" USING btree ("user_id","code_hash","window_start");--> statement-breakpoint
+CREATE INDEX "totp_used_code_window_idx" ON "totp_used_codes" USING btree ("window_start");--> statement-breakpoint
+CREATE UNIQUE INDEX "user_revocation_user_idx" ON "user_revocation_timestamps" USING btree ("user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "user_email_idx" ON "users" USING btree ("email");--> statement-breakpoint
+CREATE INDEX "user_active_idx" ON "users" USING btree ("is_active");--> statement-breakpoint
+CREATE INDEX "webhook_delivery_org_status_idx" ON "webhook_deliveries" USING btree ("org_id","status");--> statement-breakpoint
+CREATE INDEX "webhook_delivery_retry_idx" ON "webhook_deliveries" USING btree ("status","next_retry_at");

package/dist/db/migrations/0001_shared_sessions.sql

@@ -0,0 +1,18 @@
+-- Add shared_sessions table for database-backed session sharing
+CREATE TABLE IF NOT EXISTS "shared_sessions" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"share_token" varchar(64) NOT NULL UNIQUE,
+	"session_id" varchar(255) NOT NULL,
+	"created_by" uuid,
+	"expires_at" timestamp with time zone NOT NULL,
+	"max_accesses" integer,
+	"access_count" integer DEFAULT 0 NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "shared_sessions_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE NO ACTION
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "shared_session_token_idx" ON "shared_sessions" USING btree ("share_token");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "shared_session_session_idx" ON "shared_sessions" USING btree ("session_id");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "shared_session_expires_idx" ON "shared_sessions" USING btree ("expires_at");

package/dist/db/migrations/0002_usage_metrics.sql

@@ -0,0 +1,28 @@
+CREATE TABLE IF NOT EXISTS "usage_metrics" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" varchar(255) NOT NULL,
+	"agent_id" varchar(255) NOT NULL,
+	"last_session_id" varchar(255),
+	"provider" varchar(100) NOT NULL,
+	"model" varchar(100) NOT NULL,
+	"bucket_start" timestamp with time zone NOT NULL,
+	"call_count" integer DEFAULT 0 NOT NULL,
+	"input_tokens" bigint DEFAULT 0 NOT NULL,
+	"output_tokens" bigint DEFAULT 0 NOT NULL,
+	"cache_read_tokens" bigint DEFAULT 0 NOT NULL,
+	"cache_write_tokens" bigint DEFAULT 0 NOT NULL,
+	"total_tokens" bigint DEFAULT 0 NOT NULL,
+	"cost_usd_micros" bigint DEFAULT 0 NOT NULL,
+	"first_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"last_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "usage_metric_dimension_idx" ON "usage_metrics" USING btree ("workspace_id","agent_id","provider","model","bucket_start");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "usage_metric_workspace_bucket_idx" ON "usage_metrics" USING btree ("workspace_id","bucket_start");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "usage_metric_agent_bucket_idx" ON "usage_metrics" USING btree ("agent_id","bucket_start");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "usage_metric_model_bucket_idx" ON "usage_metrics" USING btree ("provider","model","bucket_start");

package/dist/db/migrations/0003_execution_traces.sql

@@ -0,0 +1,18 @@
+CREATE TABLE IF NOT EXISTS "execution_traces" (
+	"trace_id" varchar(64) PRIMARY KEY NOT NULL,
+	"workspace_id" varchar(255) NOT NULL,
+	"agent_id" varchar(255) NOT NULL,
+	"spans" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"duration_ms" integer DEFAULT 0 NOT NULL,
+	"status" varchar(32) NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS "execution_trace_workspace_created_idx"
+	ON "execution_traces" ("workspace_id", "created_at");
+
+CREATE INDEX IF NOT EXISTS "execution_trace_agent_created_idx"
+	ON "execution_traces" ("agent_id", "created_at");
+
+CREATE INDEX IF NOT EXISTS "execution_trace_status_created_idx"
+	ON "execution_traces" ("status", "created_at");

package/dist/db/migrations/0004_workspace_config.sql

@@ -0,0 +1,11 @@
+CREATE TABLE IF NOT EXISTS "workspace_config" (
+	"workspace_id" varchar(255) PRIMARY KEY NOT NULL,
+	"model_preferences" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"safety_rules" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"rate_limits" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS "workspace_config_updated_idx"
+	ON "workspace_config" ("updated_at");

package/dist/db/migrations/0005_revenue_attribution.sql

@@ -0,0 +1,31 @@
+CREATE TABLE IF NOT EXISTS "revenue_attribution" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" varchar(255) NOT NULL,
+	"agent_id" varchar(255) NOT NULL,
+	"action_id" varchar(255),
+	"trace_id" varchar(255),
+	"outcome_id" varchar(255) NOT NULL,
+	"outcome_type" varchar(100) NOT NULL,
+	"attribution_model" varchar(50) DEFAULT 'direct' NOT NULL,
+	"attribution_weight_bps" integer DEFAULT 10000 NOT NULL,
+	"revenue_usd_micros" bigint DEFAULT 0 NOT NULL,
+	"pipeline_value_usd_micros" bigint DEFAULT 0 NOT NULL,
+	"cost_usd_micros" bigint DEFAULT 0 NOT NULL,
+	"duration_ms" integer DEFAULT 0 NOT NULL,
+	"metadata" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"occurred_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS "revenue_attribution_workspace_agent_occurred_idx"
+	ON "revenue_attribution" ("workspace_id", "agent_id", "occurred_at");
+
+CREATE INDEX IF NOT EXISTS "revenue_attribution_agent_occurred_idx"
+	ON "revenue_attribution" ("agent_id", "occurred_at");
+
+CREATE INDEX IF NOT EXISTS "revenue_attribution_outcome_idx"
+	ON "revenue_attribution" ("outcome_id", "outcome_type");
+
+CREATE INDEX IF NOT EXISTS "revenue_attribution_trace_idx"
+	ON "revenue_attribution" ("trace_id");

package/dist/db/migrations/0006_hosted_session_storage.sql

@@ -0,0 +1,51 @@
+CREATE TABLE IF NOT EXISTS "hosted_sessions" (
+	"session_id" varchar(128) PRIMARY KEY NOT NULL,
+	"scope" text NOT NULL,
+	"subject" text,
+	"title" varchar(255),
+	"summary" text,
+	"resume_summary" text,
+	"memory_extraction_hash" varchar(64),
+	"favorite" boolean DEFAULT false NOT NULL,
+	"tags" jsonb,
+	"cwd" text,
+	"model" varchar(255),
+	"thinking_level" varchar(50),
+	"system_prompt" text,
+	"prompt_metadata" jsonb,
+	"model_metadata" jsonb,
+	"tools" jsonb,
+	"message_count" integer DEFAULT 0 NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"deleted_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "hosted_session_entries" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"session_id" varchar(128) NOT NULL,
+	"sequence" bigserial NOT NULL,
+	"entry_type" varchar(64) NOT NULL,
+	"entry_id" varchar(128),
+	"entry" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "hosted_session_entries_session_id_hosted_sessions_session_id_fk"
+		FOREIGN KEY ("session_id")
+		REFERENCES "public"."hosted_sessions"("session_id")
+		ON DELETE cascade
+		ON UPDATE no action
+);
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "hosted_session_scope_updated_idx" ON "hosted_sessions" USING btree ("scope", "updated_at");
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "hosted_session_scope_id_idx" ON "hosted_sessions" USING btree ("scope", "session_id");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "hosted_session_subject_updated_idx" ON "hosted_sessions" USING btree ("subject", "updated_at");
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "hosted_session_entry_session_sequence_idx" ON "hosted_session_entries" USING btree ("session_id", "sequence");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "hosted_session_entry_type_idx" ON "hosted_session_entries" USING btree ("session_id", "entry_type");
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "hosted_session_entry_session_entry_idx"
+	ON "hosted_session_entries" USING btree ("session_id", "entry_id")
+	WHERE "entry_id" IS NOT NULL;

package/dist/db/migrations/0007_reconcile_legacy_audit_hash_cache.sql

@@ -0,0 +1,24 @@
+CREATE TABLE IF NOT EXISTS "audit_hash_cache" (
+	"org_id" uuid PRIMARY KEY NOT NULL,
+	"last_hash" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+DO $$
+BEGIN
+	IF to_regclass('public.organizations') IS NOT NULL
+		AND NOT EXISTS (
+			SELECT 1
+			FROM pg_constraint
+			WHERE conname = 'audit_hash_cache_org_id_organizations_id_fk'
+				AND conrelid = 'public.audit_hash_cache'::regclass
+		)
+	THEN
+		ALTER TABLE "audit_hash_cache"
+			ADD CONSTRAINT "audit_hash_cache_org_id_organizations_id_fk"
+			FOREIGN KEY ("org_id")
+			REFERENCES "public"."organizations"("id")
+			ON DELETE cascade
+			ON UPDATE no action;
+	END IF;
+END $$;