@indx-workspace/embedded 0.0.0-bootstrap → 0.3.0

package/dist/migrations/0000_init.sql

@@ -0,0 +1,119 @@
+CREATE TABLE "agents" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"instructions" text NOT NULL,
+	"model_connection_id" uuid,
+	"model" text,
+	"permissions" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "agents_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "agents_name_not_blank" CHECK (length(btrim("agents"."name")) > 0)
+);
+--> statement-breakpoint
+CREATE TABLE "memberships" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"user_id" uuid NOT NULL,
+	"role" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "memberships_workspace_user_key" UNIQUE("workspace_id","user_id"),
+	CONSTRAINT "memberships_role_valid" CHECK ("memberships"."role" in ('owner', 'admin', 'builder', 'viewer'))
+);
+--> statement-breakpoint
+CREATE TABLE "model_connections" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"provider" text NOT NULL,
+	"config" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "model_connections_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "model_connections_provider_valid" CHECK ("model_connections"."provider" in ('anthropic', 'anthropic-compatible', 'openai', 'azure-openai', 'openai-compatible'))
+);
+--> statement-breakpoint
+CREATE TABLE "runs" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"session_id" uuid NOT NULL,
+	"status" text DEFAULT 'queued' NOT NULL,
+	"model" text,
+	"provider" text,
+	"started_at" timestamp with time zone,
+	"ended_at" timestamp with time zone,
+	"input_tokens" integer DEFAULT 0 NOT NULL,
+	"output_tokens" integer DEFAULT 0 NOT NULL,
+	"cost_usd" numeric(14, 6) DEFAULT '0' NOT NULL,
+	"tool_calls" integer DEFAULT 0 NOT NULL,
+	"error" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "runs_status_valid" CHECK ("runs"."status" in ('queued', 'running', 'completed', 'failed', 'cancelled')),
+	CONSTRAINT "runs_provider_valid" CHECK ("runs"."provider" in ('anthropic', 'anthropic-compatible', 'openai', 'azure-openai', 'openai-compatible')),
+	CONSTRAINT "runs_ended_at_iff_terminal" CHECK (("runs"."status" in ('completed', 'failed', 'cancelled')) = ("runs"."ended_at" is not null)),
+	CONSTRAINT "runs_ended_after_started" CHECK ("runs"."ended_at" is null or "runs"."started_at" is null or "runs"."ended_at" >= "runs"."started_at"),
+	CONSTRAINT "runs_counters_non_negative" CHECK ("runs"."input_tokens" >= 0 and "runs"."output_tokens" >= 0 and "runs"."tool_calls" >= 0 and "runs"."cost_usd" >= 0)
+);
+--> statement-breakpoint
+CREATE TABLE "sessions" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"user_id" uuid NOT NULL,
+	"agent_id" uuid NOT NULL,
+	"claude_session_id" text,
+	"title" text,
+	"status" text DEFAULT 'active' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "sessions_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "sessions_status_valid" CHECK ("sessions"."status" in ('active', 'archived'))
+);
+--> statement-breakpoint
+CREATE TABLE "users" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"email" text NOT NULL,
+	"name" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "users_email_lowercase" CHECK ("users"."email" = lower("users"."email")),
+	CONSTRAINT "users_email_shape" CHECK ("users"."email" ~ '^[^[:space:]@]+@[^[:space:]@]+[.][^[:space:]@]+$'),
+	CONSTRAINT "users_name_not_blank" CHECK (length(btrim("users"."name")) > 0)
+);
+--> statement-breakpoint
+CREATE TABLE "workspaces" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"slug" text NOT NULL,
+	"name" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "workspaces_slug_format" CHECK ("workspaces"."slug" ~ '^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$'),
+	CONSTRAINT "workspaces_name_not_blank" CHECK (length(btrim("workspaces"."name")) > 0)
+);
+--> statement-breakpoint
+ALTER TABLE "agents" ADD CONSTRAINT "agents_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agents" ADD CONSTRAINT "agents_model_connection_id_model_connections_id_fk" FOREIGN KEY ("model_connection_id") REFERENCES "public"."model_connections"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agents" ADD CONSTRAINT "agents_model_connection_workspace_fk" FOREIGN KEY ("model_connection_id","workspace_id") REFERENCES "public"."model_connections"("id","workspace_id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "memberships" ADD CONSTRAINT "memberships_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "memberships" ADD CONSTRAINT "memberships_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "model_connections" ADD CONSTRAINT "model_connections_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "runs" ADD CONSTRAINT "runs_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "runs" ADD CONSTRAINT "runs_session_workspace_fk" FOREIGN KEY ("session_id","workspace_id") REFERENCES "public"."sessions"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_agent_workspace_fk" FOREIGN KEY ("agent_id","workspace_id") REFERENCES "public"."agents"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_member_workspace_fk" FOREIGN KEY ("workspace_id","user_id") REFERENCES "public"."memberships"("workspace_id","user_id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "agents_workspace_name_key" ON "agents" USING btree ("workspace_id","name");--> statement-breakpoint
+CREATE INDEX "agents_model_connection_idx" ON "agents" USING btree ("model_connection_id");--> statement-breakpoint
+CREATE INDEX "memberships_user_idx" ON "memberships" USING btree ("user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "model_connections_workspace_name_key" ON "model_connections" USING btree ("workspace_id","name");--> statement-breakpoint
+CREATE INDEX "runs_workspace_created_idx" ON "runs" USING btree ("workspace_id","created_at");--> statement-breakpoint
+CREATE INDEX "runs_session_created_idx" ON "runs" USING btree ("session_id","created_at");--> statement-breakpoint
+CREATE INDEX "sessions_workspace_updated_idx" ON "sessions" USING btree ("workspace_id","updated_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "sessions_workspace_claude_session_key" ON "sessions" USING btree ("workspace_id","claude_session_id");--> statement-breakpoint
+CREATE INDEX "sessions_agent_idx" ON "sessions" USING btree ("agent_id");--> statement-breakpoint
+CREATE INDEX "sessions_user_idx" ON "sessions" USING btree ("user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "users_email_key" ON "users" USING btree ("email");--> statement-breakpoint
+CREATE UNIQUE INDEX "workspaces_slug_key" ON "workspaces" USING btree ("slug");

package/dist/migrations/0001_w2_resources.sql

@@ -0,0 +1,177 @@
+CREATE TABLE "agent_files" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"agent_id" uuid NOT NULL,
+	"file_id" uuid NOT NULL,
+	"access" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "agent_files_workspace_agent_file_key" UNIQUE("workspace_id","agent_id","file_id"),
+	CONSTRAINT "agent_files_access_valid" CHECK ("agent_files"."access" in ('read', 'read-write'))
+);
+--> statement-breakpoint
+CREATE TABLE "agent_mcp_servers" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"agent_id" uuid NOT NULL,
+	"mcp_server_id" uuid NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "agent_mcp_servers_workspace_agent_server_key" UNIQUE("workspace_id","agent_id","mcp_server_id")
+);
+--> statement-breakpoint
+CREATE TABLE "agent_skills" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"agent_id" uuid NOT NULL,
+	"skill_id" uuid NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "agent_skills_workspace_agent_skill_key" UNIQUE("workspace_id","agent_id","skill_id")
+);
+--> statement-breakpoint
+CREATE TABLE "api_keys" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"role" text NOT NULL,
+	"key_prefix" text NOT NULL,
+	"key_hash" text NOT NULL,
+	"last_used_at" timestamp with time zone,
+	"expires_at" timestamp with time zone,
+	"revoked_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "api_keys_role_valid" CHECK ("api_keys"."role" in ('owner', 'admin', 'builder', 'viewer')),
+	CONSTRAINT "api_keys_name_not_blank" CHECK (length(btrim("api_keys"."name")) > 0),
+	CONSTRAINT "api_keys_key_prefix_not_blank" CHECK (length(btrim("api_keys"."key_prefix")) > 0),
+	CONSTRAINT "api_keys_key_hash_not_blank" CHECK (length(btrim("api_keys"."key_hash")) > 0),
+	CONSTRAINT "api_keys_expires_after_created" CHECK ("api_keys"."expires_at" is null or "api_keys"."expires_at" > "api_keys"."created_at"),
+	CONSTRAINT "api_keys_revoked_after_created" CHECK ("api_keys"."revoked_at" is null or "api_keys"."revoked_at" >= "api_keys"."created_at")
+);
+--> statement-breakpoint
+CREATE TABLE "audit_events" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"actor_user_id" uuid,
+	"actor_label" text NOT NULL,
+	"action" text NOT NULL,
+	"subject_id" text,
+	"subject_label" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "audit_events_action_valid" CHECK ("audit_events"."action" in ('user-created', 'user-deleted', 'agent-changed', 'provider-credential-changed', 'api-key-created', 'api-key-revoked', 'connector-changed', 'permission-changed', 'runtime-profile-changed', 'project-created', 'project-deleted', 'session-published', 'public-link-revoked', 'runnable-link-stopped', 'public-sharing-policy-changed')),
+	CONSTRAINT "audit_events_actor_label_not_blank" CHECK (length(btrim("audit_events"."actor_label")) > 0),
+	CONSTRAINT "audit_events_subject_label_not_blank" CHECK (length(btrim("audit_events"."subject_label")) > 0),
+	CONSTRAINT "audit_events_subject_id_shape" CHECK ("audit_events"."subject_id" is null or "audit_events"."subject_id" ~ '^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$')
+);
+--> statement-breakpoint
+CREATE TABLE "files" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"path" text NOT NULL,
+	"kind" text NOT NULL,
+	"storage_key" text,
+	"size_bytes" bigint DEFAULT 0 NOT NULL,
+	"content_type" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "files_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "files_kind_valid" CHECK ("files"."kind" in ('file', 'folder')),
+	CONSTRAINT "files_path_shape" CHECK ("files"."path" ~ '^[^/[:cntrl:]]+(/[^/[:cntrl:]]+)*$'),
+	CONSTRAINT "files_path_no_dot_segments" CHECK ("files"."path" !~ '(^|/)[.][.]?(/|$)'),
+	CONSTRAINT "files_storage_key_iff_file" CHECK (("files"."kind" = 'file') = ("files"."storage_key" is not null)),
+	CONSTRAINT "files_storage_key_not_blank" CHECK ("files"."storage_key" is null or length(btrim("files"."storage_key")) > 0),
+	CONSTRAINT "files_size_non_negative" CHECK ("files"."size_bytes" >= 0),
+	CONSTRAINT "files_folder_has_no_content" CHECK ("files"."kind" <> 'folder' or ("files"."size_bytes" = 0 and "files"."content_type" is null))
+);
+--> statement-breakpoint
+CREATE TABLE "mcp_servers" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"transport" text NOT NULL,
+	"command" text,
+	"args" jsonb,
+	"url" text,
+	"auth_type" text DEFAULT 'none' NOT NULL,
+	"credential_secret_id" uuid,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "mcp_servers_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "mcp_servers_transport_valid" CHECK ("mcp_servers"."transport" in ('stdio', 'http', 'sse')),
+	CONSTRAINT "mcp_servers_auth_type_valid" CHECK ("mcp_servers"."auth_type" in ('none', 'api-key', 'bearer', 'oauth')),
+	CONSTRAINT "mcp_servers_stdio_has_command" CHECK (("mcp_servers"."transport" = 'stdio') = ("mcp_servers"."command" is not null)),
+	CONSTRAINT "mcp_servers_remote_has_url" CHECK (("mcp_servers"."transport" in ('http', 'sse')) = ("mcp_servers"."url" is not null)),
+	CONSTRAINT "mcp_servers_args_are_stdio_only" CHECK ("mcp_servers"."args" is null or "mcp_servers"."transport" = 'stdio'),
+	CONSTRAINT "mcp_servers_command_not_blank" CHECK ("mcp_servers"."command" is null or length(btrim("mcp_servers"."command")) > 0),
+	CONSTRAINT "mcp_servers_url_shape" CHECK ("mcp_servers"."url" is null or "mcp_servers"."url" ~ '^https?://'),
+	CONSTRAINT "mcp_servers_credential_required" CHECK (("mcp_servers"."auth_type" in ('api-key', 'bearer', 'oauth')) = ("mcp_servers"."credential_secret_id" is not null)),
+	CONSTRAINT "mcp_servers_name_not_blank" CHECK (length(btrim("mcp_servers"."name")) > 0)
+);
+--> statement-breakpoint
+CREATE TABLE "secrets" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"algorithm" text NOT NULL,
+	"master_key_id" text NOT NULL,
+	"wrapped_data_key" "bytea" NOT NULL,
+	"wrapped_data_key_nonce" "bytea" NOT NULL,
+	"wrapped_data_key_tag" "bytea" NOT NULL,
+	"ciphertext" "bytea" NOT NULL,
+	"ciphertext_nonce" "bytea" NOT NULL,
+	"ciphertext_tag" "bytea" NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "secrets_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "secrets_name_shape" CHECK ("secrets"."name" ~ '^[A-Z][A-Z0-9_]{0,127}$'),
+	CONSTRAINT "secrets_master_key_id_not_blank" CHECK (length(btrim("secrets"."master_key_id")) > 0),
+	CONSTRAINT "secrets_algorithm_valid" CHECK ("secrets"."algorithm" in ('aes-256-gcm')),
+	CONSTRAINT "secrets_wrapped_data_key_size" CHECK (octet_length("secrets"."wrapped_data_key") = 32),
+	CONSTRAINT "secrets_nonce_sizes" CHECK (octet_length("secrets"."wrapped_data_key_nonce") = 12 and octet_length("secrets"."ciphertext_nonce") = 12),
+	CONSTRAINT "secrets_tag_sizes" CHECK (octet_length("secrets"."wrapped_data_key_tag") = 16 and octet_length("secrets"."ciphertext_tag") = 16),
+	CONSTRAINT "secrets_ciphertext_not_empty" CHECK (octet_length("secrets"."ciphertext") > 0)
+);
+--> statement-breakpoint
+CREATE TABLE "skills" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"skill_md" text NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "skills_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "skills_name_shape" CHECK ("skills"."name" ~ '^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$'),
+	CONSTRAINT "skills_skill_md_not_blank" CHECK (length(btrim("skills"."skill_md")) > 0)
+);
+--> statement-breakpoint
+ALTER TABLE "agent_files" ADD CONSTRAINT "agent_files_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_files" ADD CONSTRAINT "agent_files_agent_workspace_fk" FOREIGN KEY ("agent_id","workspace_id") REFERENCES "public"."agents"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_files" ADD CONSTRAINT "agent_files_file_workspace_fk" FOREIGN KEY ("file_id","workspace_id") REFERENCES "public"."files"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_mcp_servers" ADD CONSTRAINT "agent_mcp_servers_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_mcp_servers" ADD CONSTRAINT "agent_mcp_servers_agent_workspace_fk" FOREIGN KEY ("agent_id","workspace_id") REFERENCES "public"."agents"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_mcp_servers" ADD CONSTRAINT "agent_mcp_servers_server_workspace_fk" FOREIGN KEY ("mcp_server_id","workspace_id") REFERENCES "public"."mcp_servers"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_skills" ADD CONSTRAINT "agent_skills_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_skills" ADD CONSTRAINT "agent_skills_agent_workspace_fk" FOREIGN KEY ("agent_id","workspace_id") REFERENCES "public"."agents"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_skills" ADD CONSTRAINT "agent_skills_skill_workspace_fk" FOREIGN KEY ("skill_id","workspace_id") REFERENCES "public"."skills"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "api_keys" ADD CONSTRAINT "api_keys_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "audit_events" ADD CONSTRAINT "audit_events_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "audit_events" ADD CONSTRAINT "audit_events_actor_user_id_users_id_fk" FOREIGN KEY ("actor_user_id") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "files" ADD CONSTRAINT "files_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "mcp_servers" ADD CONSTRAINT "mcp_servers_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "mcp_servers" ADD CONSTRAINT "mcp_servers_credential_secret_workspace_fk" FOREIGN KEY ("credential_secret_id","workspace_id") REFERENCES "public"."secrets"("id","workspace_id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "secrets" ADD CONSTRAINT "secrets_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "skills" ADD CONSTRAINT "skills_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "agent_files_file_idx" ON "agent_files" USING btree ("file_id");--> statement-breakpoint
+CREATE INDEX "agent_mcp_servers_server_idx" ON "agent_mcp_servers" USING btree ("mcp_server_id");--> statement-breakpoint
+CREATE INDEX "agent_skills_skill_idx" ON "agent_skills" USING btree ("skill_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "api_keys_workspace_name_key" ON "api_keys" USING btree ("workspace_id","name");--> statement-breakpoint
+CREATE UNIQUE INDEX "api_keys_key_hash_key" ON "api_keys" USING btree ("key_hash");--> statement-breakpoint
+CREATE INDEX "api_keys_workspace_revoked_idx" ON "api_keys" USING btree ("workspace_id","revoked_at");--> statement-breakpoint
+CREATE INDEX "audit_events_workspace_created_idx" ON "audit_events" USING btree ("workspace_id","created_at");--> statement-breakpoint
+CREATE INDEX "audit_events_actor_idx" ON "audit_events" USING btree ("actor_user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "files_workspace_path_key" ON "files" USING btree ("workspace_id","path");--> statement-breakpoint
+CREATE UNIQUE INDEX "mcp_servers_workspace_name_key" ON "mcp_servers" USING btree ("workspace_id","name");--> statement-breakpoint
+CREATE INDEX "mcp_servers_credential_secret_idx" ON "mcp_servers" USING btree ("credential_secret_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "secrets_workspace_name_key" ON "secrets" USING btree ("workspace_id","name");--> statement-breakpoint
+CREATE UNIQUE INDEX "skills_workspace_name_key" ON "skills" USING btree ("workspace_id","name");

package/dist/migrations/0002_w3_runtime_profiles.sql

@@ -0,0 +1,34 @@
+CREATE TABLE "runtime_profiles" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"driver" text NOT NULL,
+	"runtime_connection_id" uuid,
+	"cpu" integer,
+	"memory_mb" integer,
+	"disk_mb" integer,
+	"network_policy" text NOT NULL,
+	"allowed_domains" jsonb,
+	"filesystem" text NOT NULL,
+	"persist_paths" jsonb,
+	"timeout_seconds" integer,
+	"idle_timeout_seconds" integer,
+	"driver_config" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "runtime_profiles_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "runtime_profiles_name_not_blank" CHECK (length(btrim("runtime_profiles"."name")) > 0),
+	CONSTRAINT "runtime_profiles_driver_valid" CHECK ("runtime_profiles"."driver" in ('local', 'sandbox-runtime', 'docker', 'kubernetes', 'gke-agent-sandbox', 'aca-sessions', 'aws-agentcore', 'aws-ecs', 'cloud-run-sandbox', 'external')),
+	CONSTRAINT "runtime_profiles_network_policy_valid" CHECK ("runtime_profiles"."network_policy" in ('none', 'restricted', 'open')),
+	CONSTRAINT "runtime_profiles_filesystem_valid" CHECK ("runtime_profiles"."filesystem" in ('read-only', 'read-write'))
+);
+--> statement-breakpoint
+ALTER TABLE "agents" ADD COLUMN "runtime_profile_id" uuid;--> statement-breakpoint
+ALTER TABLE "runtime_profiles" ADD CONSTRAINT "runtime_profiles_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "runtime_profiles" ADD CONSTRAINT "runtime_profiles_runtime_connection_id_secrets_id_fk" FOREIGN KEY ("runtime_connection_id") REFERENCES "public"."secrets"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "runtime_profiles" ADD CONSTRAINT "runtime_profiles_runtime_connection_workspace_fk" FOREIGN KEY ("runtime_connection_id","workspace_id") REFERENCES "public"."secrets"("id","workspace_id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "runtime_profiles_workspace_name_key" ON "runtime_profiles" USING btree ("workspace_id","name");--> statement-breakpoint
+CREATE INDEX "runtime_profiles_runtime_connection_idx" ON "runtime_profiles" USING btree ("runtime_connection_id");--> statement-breakpoint
+ALTER TABLE "agents" ADD CONSTRAINT "agents_runtime_profile_id_runtime_profiles_id_fk" FOREIGN KEY ("runtime_profile_id") REFERENCES "public"."runtime_profiles"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agents" ADD CONSTRAINT "agents_runtime_profile_workspace_fk" FOREIGN KEY ("runtime_profile_id","workspace_id") REFERENCES "public"."runtime_profiles"("id","workspace_id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "agents_runtime_profile_idx" ON "agents" USING btree ("runtime_profile_id");

package/dist/migrations/0003_steep_galactus.sql

@@ -0,0 +1,91 @@
+CREATE TABLE "project_files" (
+	"workspace_id" uuid NOT NULL,
+	"project_id" uuid NOT NULL,
+	"file_id" uuid NOT NULL,
+	CONSTRAINT "project_files_project_id_file_id_pk" PRIMARY KEY("project_id","file_id")
+);
+--> statement-breakpoint
+CREATE TABLE "project_mcp_servers" (
+	"workspace_id" uuid NOT NULL,
+	"project_id" uuid NOT NULL,
+	"mcp_server_id" uuid NOT NULL,
+	CONSTRAINT "project_mcp_servers_project_id_mcp_server_id_pk" PRIMARY KEY("project_id","mcp_server_id")
+);
+--> statement-breakpoint
+CREATE TABLE "projects" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"instructions" text,
+	"default_agent_id" uuid,
+	"visibility" text DEFAULT 'private' NOT NULL,
+	"created_by" uuid NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "projects_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "projects_visibility_valid" CHECK ("projects"."visibility" in ('private', 'workspace', 'public')),
+	CONSTRAINT "projects_name_not_blank" CHECK (length(btrim("projects"."name")) > 0)
+);
+--> statement-breakpoint
+CREATE TABLE "share_views" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"share_id" uuid NOT NULL,
+	"visitor_key" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "shares" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"token" text NOT NULL,
+	"subject_type" text NOT NULL,
+	"subject_id" text NOT NULL,
+	"subject_label" text NOT NULL,
+	"visibility" text NOT NULL,
+	"mode" text,
+	"snapshot" jsonb,
+	"include" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"budget_cap_usd" numeric(12, 4),
+	"spent_usd" numeric(12, 4) DEFAULT '0' NOT NULL,
+	"stopped" boolean DEFAULT false NOT NULL,
+	"expires_at" timestamp with time zone,
+	"passphrase_hash" text,
+	"created_by" uuid NOT NULL,
+	"revoked_at" timestamp with time zone,
+	"suspended_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "shares_id_workspace_key" UNIQUE("id","workspace_id"),
+	CONSTRAINT "shares_token_key" UNIQUE("token"),
+	CONSTRAINT "shares_subject_type_valid" CHECK ("shares"."subject_type" in ('agent', 'session', 'project', 'skill')),
+	CONSTRAINT "shares_visibility_valid" CHECK ("shares"."visibility" in ('private', 'workspace', 'public')),
+	CONSTRAINT "shares_mode_valid" CHECK ("shares"."mode" is null or "shares"."mode" in ('definition', 'runnable')),
+	CONSTRAINT "shares_agent_mode_only" CHECK ("shares"."mode" is null or "shares"."subject_type" = 'agent'),
+	CONSTRAINT "shares_budget_nonnegative" CHECK ("shares"."budget_cap_usd" is null or "shares"."budget_cap_usd" >= 0),
+	CONSTRAINT "shares_spend_nonnegative" CHECK ("shares"."spent_usd" >= 0),
+	CONSTRAINT "shares_subject_id_not_blank" CHECK (length(btrim("shares"."subject_id")) > 0)
+);
+--> statement-breakpoint
+ALTER TABLE "sessions" ADD COLUMN "project_id" uuid;--> statement-breakpoint
+ALTER TABLE "project_files" ADD CONSTRAINT "project_files_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "project_files" ADD CONSTRAINT "project_files_project_workspace_fk" FOREIGN KEY ("project_id","workspace_id") REFERENCES "public"."projects"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "project_files" ADD CONSTRAINT "project_files_file_workspace_fk" FOREIGN KEY ("file_id","workspace_id") REFERENCES "public"."files"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "project_mcp_servers" ADD CONSTRAINT "project_mcp_servers_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "project_mcp_servers" ADD CONSTRAINT "project_mcp_servers_project_workspace_fk" FOREIGN KEY ("project_id","workspace_id") REFERENCES "public"."projects"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "project_mcp_servers" ADD CONSTRAINT "project_mcp_servers_server_workspace_fk" FOREIGN KEY ("mcp_server_id","workspace_id") REFERENCES "public"."mcp_servers"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "projects" ADD CONSTRAINT "projects_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "projects" ADD CONSTRAINT "projects_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "public"."users"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "projects" ADD CONSTRAINT "projects_default_agent_workspace_fk" FOREIGN KEY ("default_agent_id","workspace_id") REFERENCES "public"."agents"("id","workspace_id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "share_views" ADD CONSTRAINT "share_views_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "share_views" ADD CONSTRAINT "share_views_share_workspace_fk" FOREIGN KEY ("share_id","workspace_id") REFERENCES "public"."shares"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "shares" ADD CONSTRAINT "shares_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "shares" ADD CONSTRAINT "shares_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "public"."users"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "shares" ADD CONSTRAINT "shares_creator_workspace_fk" FOREIGN KEY ("workspace_id","created_by") REFERENCES "public"."memberships"("workspace_id","user_id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "project_files_workspace_idx" ON "project_files" USING btree ("workspace_id");--> statement-breakpoint
+CREATE INDEX "project_mcp_servers_workspace_idx" ON "project_mcp_servers" USING btree ("workspace_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "projects_workspace_name_key" ON "projects" USING btree ("workspace_id","name");--> statement-breakpoint
+CREATE INDEX "projects_default_agent_idx" ON "projects" USING btree ("default_agent_id");--> statement-breakpoint
+CREATE INDEX "share_views_workspace_share_created_idx" ON "share_views" USING btree ("workspace_id","share_id","created_at");--> statement-breakpoint
+CREATE INDEX "shares_workspace_created_idx" ON "shares" USING btree ("workspace_id","created_at");--> statement-breakpoint
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_project_workspace_fk" FOREIGN KEY ("project_id","workspace_id") REFERENCES "public"."projects"("id","workspace_id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "sessions_project_idx" ON "sessions" USING btree ("project_id");

package/dist/migrations/0004_overconfident_lake.sql

@@ -0,0 +1,16 @@
+CREATE TABLE "run_events" (
+	"run_id" uuid NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"sequence" bigint NOT NULL,
+	"type" text NOT NULL,
+	"data" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "run_events_pkey" PRIMARY KEY("run_id","sequence")
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "runs_id_workspace_unique" ON "runs" USING btree ("id","workspace_id");
+--> statement-breakpoint
+ALTER TABLE "run_events" ADD CONSTRAINT "run_events_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "run_events" ADD CONSTRAINT "run_events_run_workspace_fk" FOREIGN KEY ("run_id","workspace_id") REFERENCES "public"."runs"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "run_events_workspace_sequence_idx" ON "run_events" USING btree ("workspace_id","run_id","sequence");--> statement-breakpoint
+CREATE INDEX "run_events_run_sequence_idx" ON "run_events" USING btree ("run_id","sequence");

package/dist/migrations/0005_durable_sessions_run_tokens.sql

@@ -0,0 +1,46 @@
+CREATE TABLE "run_tokens" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"run_id" uuid NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"token_hash" text NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"revoked_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "run_tokens_expiry_after_created" CHECK ("run_tokens"."expires_at" > "run_tokens"."created_at"),
+	CONSTRAINT "run_tokens_revoked_after_created" CHECK ("run_tokens"."revoked_at" is null or "run_tokens"."revoked_at" >= "run_tokens"."created_at")
+);
+--> statement-breakpoint
+CREATE TABLE "session_messages" (
+	"workspace_id" uuid NOT NULL,
+	"project_key" text NOT NULL,
+	"session_id" uuid NOT NULL,
+	"subpath" text DEFAULT '' NOT NULL,
+	"sequence" bigint NOT NULL,
+	"position" bigint NOT NULL,
+	"entry_uuid" text,
+	"entry" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "session_messages_pkey" PRIMARY KEY("workspace_id","project_key","session_id","subpath","sequence")
+);
+--> statement-breakpoint
+CREATE TABLE "session_transcripts" (
+	"workspace_id" uuid NOT NULL,
+	"project_key" text NOT NULL,
+	"session_id" uuid NOT NULL,
+	"subpath" text DEFAULT '' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "session_transcripts_pkey" PRIMARY KEY("workspace_id","project_key","session_id","subpath")
+);
+--> statement-breakpoint
+ALTER TABLE "run_tokens" ADD CONSTRAINT "run_tokens_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "run_tokens" ADD CONSTRAINT "run_tokens_run_workspace_fk" FOREIGN KEY ("run_id","workspace_id") REFERENCES "public"."runs"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session_messages" ADD CONSTRAINT "session_messages_transcript_fk" FOREIGN KEY ("workspace_id","project_key","session_id","subpath") REFERENCES "public"."session_transcripts"("workspace_id","project_key","session_id","subpath") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session_transcripts" ADD CONSTRAINT "session_transcripts_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "run_tokens_hash_key" ON "run_tokens" USING btree ("token_hash");--> statement-breakpoint
+CREATE INDEX "run_tokens_workspace_run_idx" ON "run_tokens" USING btree ("workspace_id","run_id");--> statement-breakpoint
+CREATE INDEX "run_tokens_active_idx" ON "run_tokens" USING btree ("workspace_id","run_id","revoked_at","expires_at");--> statement-breakpoint
+CREATE INDEX "session_messages_key_sequence_idx" ON "session_messages" USING btree ("workspace_id","project_key","session_id","subpath","sequence");--> statement-breakpoint
+CREATE INDEX "session_messages_key_uuid_idx" ON "session_messages" USING btree ("workspace_id","project_key","session_id","subpath","entry_uuid","sequence");--> statement-breakpoint
+CREATE INDEX "session_transcripts_workspace_updated_idx" ON "session_transcripts" USING btree ("workspace_id","updated_at");--> statement-breakpoint
+CREATE INDEX "session_transcripts_project_updated_idx" ON "session_transcripts" USING btree ("project_key","updated_at");

package/dist/migrations/0006_familiar_karnak.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "session_messages" ADD CONSTRAINT "session_messages_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session_transcripts" ADD CONSTRAINT "session_transcripts_session_workspace_fk" FOREIGN KEY ("session_id","workspace_id") REFERENCES "public"."sessions"("id","workspace_id") ON DELETE cascade ON UPDATE no action;

package/dist/migrations/0007_fast_hannibal_king.sql

@@ -0,0 +1 @@
+ALTER TABLE "workspaces" ADD COLUMN "public_sharing_enabled" boolean DEFAULT true NOT NULL;

package/dist/migrations/0008_damp_nemesis.sql

@@ -0,0 +1,31 @@
+CREATE TABLE "run_usage_records" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"run_id" uuid NOT NULL,
+	"provider_response_id" text NOT NULL,
+	"provider" text NOT NULL,
+	"model" text NOT NULL,
+	"input_tokens" integer NOT NULL,
+	"output_tokens" integer NOT NULL,
+	"cache_read_input_tokens" integer DEFAULT 0 NOT NULL,
+	"cache_creation_input_tokens" integer DEFAULT 0 NOT NULL,
+	"tool_calls" integer DEFAULT 0 NOT NULL,
+	"cost_usd" numeric(14, 6) NOT NULL,
+	"cost_currency" text DEFAULT 'USD' NOT NULL,
+	"price_table_version" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "run_usage_records_counters_non_negative" CHECK ("run_usage_records"."input_tokens" >= 0 and "run_usage_records"."output_tokens" >= 0 and "run_usage_records"."cache_read_input_tokens" >= 0 and "run_usage_records"."cache_creation_input_tokens" >= 0 and "run_usage_records"."tool_calls" >= 0 and "run_usage_records"."cost_usd" >= 0),
+	CONSTRAINT "run_usage_records_currency_usd" CHECK ("run_usage_records"."cost_currency" = 'USD')
+);
+--> statement-breakpoint
+ALTER TABLE "runs" DROP CONSTRAINT "runs_counters_non_negative";--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "cache_read_input_tokens" integer DEFAULT 0 NOT NULL;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "cache_creation_input_tokens" integer DEFAULT 0 NOT NULL;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "cost_currency" text DEFAULT 'USD' NOT NULL;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "price_table_version" text;--> statement-breakpoint
+ALTER TABLE "run_usage_records" ADD CONSTRAINT "run_usage_records_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "run_usage_records" ADD CONSTRAINT "run_usage_records_run_workspace_fk" FOREIGN KEY ("run_id","workspace_id") REFERENCES "public"."runs"("id","workspace_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "run_usage_records_response_unique" ON "run_usage_records" USING btree ("run_id","provider_response_id");--> statement-breakpoint
+CREATE INDEX "run_usage_records_workspace_run_idx" ON "run_usage_records" USING btree ("workspace_id","run_id");--> statement-breakpoint
+ALTER TABLE "runs" ADD CONSTRAINT "runs_cost_currency_usd" CHECK ("runs"."cost_currency" = 'USD');--> statement-breakpoint
+ALTER TABLE "runs" ADD CONSTRAINT "runs_counters_non_negative" CHECK ("runs"."input_tokens" >= 0 and "runs"."output_tokens" >= 0 and "runs"."cache_read_input_tokens" >= 0 and "runs"."cache_creation_input_tokens" >= 0 and "runs"."tool_calls" >= 0 and "runs"."cost_usd" >= 0);

package/dist/migrations/0009_special_thena.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "runtime_profiles" DROP CONSTRAINT "runtime_profiles_driver_valid";--> statement-breakpoint
+ALTER TABLE "runtime_profiles" ADD CONSTRAINT "runtime_profiles_driver_valid" CHECK ("runtime_profiles"."driver" in ('local', 'sandbox-runtime', 'docker', 'kubernetes', 'gke-agent-sandbox', 'aca-sessions', 'aws-agentcore', 'aws-ecs', 'cloud-run-sandbox', 'cloud-run-service', 'external'));