@intx/db 0.1.2

package/README.md

@@ -0,0 +1,37 @@
+# @intx/db
+
+Drizzle ORM client, schema, migrations, and row parsers for the
+hub's PostgreSQL database. Owns the database-backed `GrantStore`,
+the tenant hierarchy walk, the credential resolution layer, and
+the `parseRow` family that validates `jsonb` columns at the
+database boundary so internal code never re-checks them.
+
+Consumed by `@intx/hub-api` (HTTP request handlers and grant
+middleware) and `@intx/hub-sessions` (session orchestration and
+agent repo metadata).
+
+## Surface
+
+- `@intx/db` — the client (`createDB`), config validator, migration
+  runner, grant store, credential resolution, tenant hierarchy
+  helpers, and the `parseRow` functions.
+- `@intx/db/schema` — the Drizzle table exports, used by callers
+  that compose queries against the schema directly.
+
+```ts
+import { createDB } from "@intx/db";
+import { agent } from "@intx/db/schema";
+import { eq } from "drizzle-orm";
+
+const { db } = createDB(process.env);
+
+const row = await db.query.agent.findFirst({
+  where: eq(agent.id, agentId),
+});
+```
+
+The `parseRow` functions (`parseAgentRow`, `parseGrantRow`, and so
+on) validate each table's `jsonb` columns once and return fully
+typed values; downstream code uses those values without
+re-casting. See `CONVENTIONS.md` for the project-wide rule against
+cast-at-callsite in DB consumers.

package/drizzle.config.ts

@@ -0,0 +1,23 @@
+import { defineConfig } from "drizzle-kit";
+
+function env(name: string): string {
+  const value = process.env[name];
+  if (!value) {
+    throw new Error(`Missing required environment variable: ${name}`);
+  }
+  return value;
+}
+
+export default defineConfig({
+  dialect: "postgresql",
+  schema: "./src/schema/index.ts",
+  out: "./migrations",
+  dbCredentials: {
+    host: env("DB_HOST"),
+    port: Number(process.env["DB_PORT"] ?? 5432),
+    user: env("DB_USER"),
+    password: process.env["DB_PASSWORD"] ?? "",
+    database: env("DB_NAME"),
+    ssl: process.env["DB_SSL"] === "true",
+  },
+});

package/migrations/0000_brown_wither.sql

@@ -0,0 +1,50 @@
+CREATE TABLE "account" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"account_id" text NOT NULL,
+	"provider_id" text NOT NULL,
+	"access_token" text,
+	"refresh_token" text,
+	"access_token_expires_at" timestamp,
+	"refresh_token_expires_at" timestamp,
+	"scope" text,
+	"id_token" text,
+	"password" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "session" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"token" text NOT NULL,
+	"expires_at" timestamp NOT NULL,
+	"ip_address" text,
+	"user_agent" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "session_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "user" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"email" text NOT NULL,
+	"email_verified" boolean DEFAULT false NOT NULL,
+	"image" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "user_email_unique" UNIQUE("email")
+);
+--> statement-breakpoint
+CREATE TABLE "verification" (
+	"id" text PRIMARY KEY NOT NULL,
+	"identifier" text NOT NULL,
+	"value" text NOT NULL,
+	"expires_at" timestamp NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "account" ADD CONSTRAINT "account_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session" ADD CONSTRAINT "session_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;

package/migrations/0001_white_aqueduct.sql

@@ -0,0 +1,105 @@
+CREATE TABLE "federation_trust" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"target_tenant_id" text NOT NULL,
+	"direction" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "federation_trust_tenant_id_target_tenant_id_unique" UNIQUE("tenant_id","target_tenant_id")
+);
+--> statement-breakpoint
+CREATE TABLE "tenant" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"slug" text NOT NULL,
+	"domain" text NOT NULL,
+	"parent_id" text,
+	"config" jsonb,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "tenant_slug_unique" UNIQUE("slug"),
+	CONSTRAINT "tenant_domain_unique" UNIQUE("domain")
+);
+--> statement-breakpoint
+CREATE TABLE "principal" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"ref_id" text NOT NULL,
+	"status" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "principal_tenant_id_kind_ref_id_unique" UNIQUE("tenant_id","kind","ref_id")
+);
+--> statement-breakpoint
+CREATE TABLE "principal_role" (
+	"principal_id" text NOT NULL,
+	"role_id" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "principal_role_principal_id_role_id_pk" PRIMARY KEY("principal_id","role_id")
+);
+--> statement-breakpoint
+CREATE TABLE "role" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"name" text NOT NULL,
+	"description" text,
+	"is_system" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "grant" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"role_id" text,
+	"principal_id" text,
+	"resource" text NOT NULL,
+	"action" text NOT NULL,
+	"effect" text NOT NULL,
+	"conditions" jsonb,
+	"source" text NOT NULL,
+	"expires_at" timestamp,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "agent" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"principal_id" text NOT NULL,
+	"name" text NOT NULL,
+	"description" text,
+	"system_prompt" text,
+	"skills" jsonb,
+	"context_config" jsonb,
+	"initial_state" jsonb,
+	"model_config" jsonb,
+	"capabilities" jsonb,
+	"current_version" text DEFAULT '1' NOT NULL,
+	"status" text DEFAULT 'deployed' NOT NULL,
+	"kernel_id" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "agent_version" (
+	"id" text PRIMARY KEY NOT NULL,
+	"agent_id" text NOT NULL,
+	"version" text NOT NULL,
+	"status" text DEFAULT 'active' NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "federation_trust" ADD CONSTRAINT "federation_trust_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "federation_trust" ADD CONSTRAINT "federation_trust_target_tenant_id_tenant_id_fk" FOREIGN KEY ("target_tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "tenant" ADD CONSTRAINT "tenant_parent_id_tenant_id_fk" FOREIGN KEY ("parent_id") REFERENCES "public"."tenant"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "principal" ADD CONSTRAINT "principal_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "principal_role" ADD CONSTRAINT "principal_role_principal_id_principal_id_fk" FOREIGN KEY ("principal_id") REFERENCES "public"."principal"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "principal_role" ADD CONSTRAINT "principal_role_role_id_role_id_fk" FOREIGN KEY ("role_id") REFERENCES "public"."role"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "role" ADD CONSTRAINT "role_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "grant" ADD CONSTRAINT "grant_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "grant" ADD CONSTRAINT "grant_role_id_role_id_fk" FOREIGN KEY ("role_id") REFERENCES "public"."role"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "grant" ADD CONSTRAINT "grant_principal_id_principal_id_fk" FOREIGN KEY ("principal_id") REFERENCES "public"."principal"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent" ADD CONSTRAINT "agent_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent" ADD CONSTRAINT "agent_principal_id_principal_id_fk" FOREIGN KEY ("principal_id") REFERENCES "public"."principal"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_version" ADD CONSTRAINT "agent_version_agent_id_agent_id_fk" FOREIGN KEY ("agent_id") REFERENCES "public"."agent"("id") ON DELETE cascade ON UPDATE no action;

package/migrations/0002_clever_falcon.sql

@@ -0,0 +1,56 @@
+CREATE TABLE "credential" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"name" text NOT NULL,
+	"type" text NOT NULL,
+	"description" text,
+	"secret" text NOT NULL,
+	"metadata" jsonb,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "transaction" (
+	"id" text PRIMARY KEY NOT NULL,
+	"wallet_id" text NOT NULL,
+	"agent_id" text,
+	"direction" text NOT NULL,
+	"amount" text NOT NULL,
+	"currency" text NOT NULL,
+	"recipient_id" text,
+	"sender_id" text,
+	"request_id" text,
+	"status" text DEFAULT 'pending' NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "wallet" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"name" text NOT NULL,
+	"backend_type" text NOT NULL,
+	"currency" text NOT NULL,
+	"balance" text DEFAULT '0' NOT NULL,
+	"config" jsonb,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "capability" (
+	"id" text PRIMARY KEY NOT NULL,
+	"agent_id" text NOT NULL,
+	"tenant_id" text NOT NULL,
+	"name" text NOT NULL,
+	"description" text,
+	"pricing" jsonb,
+	"schema" jsonb,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "credential" ADD CONSTRAINT "credential_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "transaction" ADD CONSTRAINT "transaction_wallet_id_wallet_id_fk" FOREIGN KEY ("wallet_id") REFERENCES "public"."wallet"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "transaction" ADD CONSTRAINT "transaction_agent_id_agent_id_fk" FOREIGN KEY ("agent_id") REFERENCES "public"."agent"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "wallet" ADD CONSTRAINT "wallet_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "capability" ADD CONSTRAINT "capability_agent_id_agent_id_fk" FOREIGN KEY ("agent_id") REFERENCES "public"."agent"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "capability" ADD CONSTRAINT "capability_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;

package/migrations/0003_stiff_tyrannus.sql

@@ -0,0 +1,44 @@
+CREATE TABLE "provider" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"name" text NOT NULL,
+	"plugin" text NOT NULL,
+	"authorization_url" text,
+	"token_url" text,
+	"user_info_url" text,
+	"scopes" text[],
+	"metadata" jsonb,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "provider_tenant_name" UNIQUE("tenant_id","name")
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_client" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"provider_id" text NOT NULL,
+	"name" text NOT NULL,
+	"client_id" text NOT NULL,
+	"client_secret" text NOT NULL,
+	"redirect_uris" text[],
+	"default_scopes" text[],
+	"metadata" jsonb,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "oauth_client_tenant_provider" UNIQUE("tenant_id","provider_id")
+);
+--> statement-breakpoint
+ALTER TABLE "credential" ADD COLUMN "principal_id" text;--> statement-breakpoint
+ALTER TABLE "credential" ADD COLUMN "provider_id" text NOT NULL;--> statement-breakpoint
+ALTER TABLE "credential" ADD COLUMN "oauth_client_id" text;--> statement-breakpoint
+ALTER TABLE "credential" ADD COLUMN "refresh_secret" text;--> statement-breakpoint
+ALTER TABLE "credential" ADD COLUMN "scopes" text[];--> statement-breakpoint
+ALTER TABLE "credential" ADD COLUMN "expires_at" timestamp;--> statement-breakpoint
+ALTER TABLE "credential" ADD COLUMN "status" text DEFAULT 'active' NOT NULL;--> statement-breakpoint
+ALTER TABLE "provider" ADD CONSTRAINT "provider_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_client" ADD CONSTRAINT "oauth_client_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_client" ADD CONSTRAINT "oauth_client_provider_id_provider_id_fk" FOREIGN KEY ("provider_id") REFERENCES "public"."provider"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "credential" ADD CONSTRAINT "credential_principal_id_principal_id_fk" FOREIGN KEY ("principal_id") REFERENCES "public"."principal"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "credential" ADD CONSTRAINT "credential_provider_id_provider_id_fk" FOREIGN KEY ("provider_id") REFERENCES "public"."provider"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "credential" ADD CONSTRAINT "credential_oauth_client_id_oauth_client_id_fk" FOREIGN KEY ("oauth_client_id") REFERENCES "public"."oauth_client"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "credential" ADD CONSTRAINT "credential_tenant_name" UNIQUE("tenant_id","name");

package/migrations/0004_rename_capability_to_offering.sql

@@ -0,0 +1 @@
+ALTER TABLE "capability" RENAME TO "offering";

package/migrations/0005_gigantic_cardiac.sql

@@ -0,0 +1 @@
+ALTER TABLE "agent" ADD COLUMN "credential_requirements" jsonb;

package/migrations/0006_sidecar.sql

@@ -0,0 +1,8 @@
+CREATE TABLE IF NOT EXISTS "sidecar" (
+  "id" text PRIMARY KEY NOT NULL,
+  "url" text NOT NULL,
+  "status" text DEFAULT 'online' NOT NULL,
+  "last_heartbeat" timestamp with time zone,
+  "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+  "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);

package/migrations/0007_agent_running_session.sql

@@ -0,0 +1 @@
+ALTER TABLE "agent" ADD COLUMN IF NOT EXISTS "session_id" text;

package/migrations/0008_session.sql

@@ -0,0 +1,10 @@
+CREATE TABLE IF NOT EXISTS "agent_session" (
+  "id" text PRIMARY KEY NOT NULL,
+  "tenant_id" text NOT NULL REFERENCES "tenant"("id") ON DELETE CASCADE,
+  "agent_id" text NOT NULL REFERENCES "agent"("id") ON DELETE CASCADE,
+  "principal_id" text NOT NULL REFERENCES "principal"("id"),
+  "status" text DEFAULT 'active' NOT NULL,
+  "created_at" timestamp DEFAULT now() NOT NULL,
+  "updated_at" timestamp DEFAULT now() NOT NULL,
+  "ended_at" timestamp
+);

package/migrations/0009_session_messages.sql

@@ -0,0 +1,18 @@
+CREATE TABLE IF NOT EXISTS "session_message" (
+  "id" text PRIMARY KEY NOT NULL,
+  "session_id" text NOT NULL REFERENCES "agent_session"("id") ON DELETE CASCADE,
+  "tenant_id" text NOT NULL REFERENCES "tenant"("id") ON DELETE CASCADE,
+  "role" text NOT NULL,
+  "status" text DEFAULT 'pending' NOT NULL,
+  "created_at" timestamp DEFAULT now() NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS "message_part" (
+  "id" text PRIMARY KEY NOT NULL,
+  "message_id" text NOT NULL REFERENCES "session_message"("id") ON DELETE CASCADE,
+  "session_id" text NOT NULL REFERENCES "agent_session"("id") ON DELETE CASCADE,
+  "type" text NOT NULL,
+  "content" text,
+  "metadata" jsonb,
+  "ordinal" integer NOT NULL
+);

package/migrations/0010_agent_sidecar_pubkey.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "agent" ADD COLUMN "sidecar_id" text REFERENCES "sidecar"("id") ON DELETE SET NULL;
+ALTER TABLE "agent" ADD COLUMN "public_key" text;

package/migrations/0011_session_message_from.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "session_message" ADD COLUMN "from" text NOT NULL DEFAULT 'unknown';
+ALTER TABLE "session_message" ALTER COLUMN "from" DROP DEFAULT;

package/migrations/0012_agent_instance.sql

@@ -0,0 +1,22 @@
+CREATE TABLE "agent_instance" (
+	"id" text PRIMARY KEY NOT NULL,
+	"agent_id" text NOT NULL,
+	"tenant_id" text NOT NULL,
+	"principal_id" text NOT NULL,
+	"address" text NOT NULL,
+	"version_id" text,
+	"status" text DEFAULT 'deployed' NOT NULL,
+	"sidecar_id" text,
+	"public_key" text,
+	"kernel_id" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	"ended_at" timestamp,
+	CONSTRAINT "agent_instance_address_unique" UNIQUE("address")
+);
+--> statement-breakpoint
+ALTER TABLE "agent_instance" ADD CONSTRAINT "agent_instance_agent_id_agent_id_fk" FOREIGN KEY ("agent_id") REFERENCES "public"."agent"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_instance" ADD CONSTRAINT "agent_instance_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_instance" ADD CONSTRAINT "agent_instance_principal_id_principal_id_fk" FOREIGN KEY ("principal_id") REFERENCES "public"."principal"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_instance" ADD CONSTRAINT "agent_instance_version_id_agent_version_id_fk" FOREIGN KEY ("version_id") REFERENCES "public"."agent_version"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_instance" ADD CONSTRAINT "agent_instance_sidecar_id_sidecar_id_fk" FOREIGN KEY ("sidecar_id") REFERENCES "public"."sidecar"("id") ON DELETE set null ON UPDATE no action;

package/migrations/0013_instance_session_id.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "agent_instance" ADD COLUMN "session_id" text;--> statement-breakpoint
+ALTER TABLE "agent_instance" ADD CONSTRAINT "agent_instance_session_id_agent_session_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."agent_session"("id") ON DELETE no action ON UPDATE no action;

package/migrations/0014_drop_agent_runtime_columns.sql

@@ -0,0 +1,12 @@
+-- Normalize any stale runtime statuses before dropping the columns
+-- that tracked them. The agent table now only uses deployed/stopped.
+UPDATE "agent" SET "status" = 'deployed' WHERE "status" IN ('running', 'updating', 'error');
+--> statement-breakpoint
+ALTER TABLE "agent" DROP CONSTRAINT IF EXISTS "agent_sidecar_id_sidecar_id_fk";
+--> statement-breakpoint
+ALTER TABLE "agent" DROP CONSTRAINT IF EXISTS "agent_sidecar_id_fkey";
+--> statement-breakpoint
+ALTER TABLE "agent" DROP COLUMN "sidecar_id";--> statement-breakpoint
+ALTER TABLE "agent" DROP COLUMN "public_key";--> statement-breakpoint
+ALTER TABLE "agent" DROP COLUMN "kernel_id";--> statement-breakpoint
+ALTER TABLE "agent" DROP COLUMN "session_id";

package/migrations/0015_add_instance_id_to_session_message.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "session_message" ADD COLUMN "instance_id" text;--> statement-breakpoint
+ALTER TABLE "session_message" ADD CONSTRAINT "session_message_instance_id_agent_instance_id_fk" FOREIGN KEY ("instance_id") REFERENCES "public"."agent_instance"("id") ON DELETE cascade ON UPDATE no action;

package/migrations/0016_jazzy_gamma_corps.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "agent" ADD COLUMN "creator_principal_id" text;--> statement-breakpoint
+ALTER TABLE "agent" ADD COLUMN "grant_requirements" jsonb;--> statement-breakpoint
+ALTER TABLE "agent" ADD CONSTRAINT "agent_creator_principal_id_principal_id_fk" FOREIGN KEY ("creator_principal_id") REFERENCES "public"."principal"("id") ON DELETE no action ON UPDATE no action;

package/migrations/0017_hesitant_marvex.sql

@@ -0,0 +1 @@
+ALTER TABLE "agent" ALTER COLUMN "principal_id" DROP NOT NULL;

package/migrations/0018_natural_sinister_six.sql

@@ -0,0 +1,5 @@
+UPDATE "agent" SET "creator_principal_id" = "principal_id" WHERE "creator_principal_id" IS NULL AND "principal_id" IS NOT NULL;
+--> statement-breakpoint
+ALTER TABLE "agent" DROP CONSTRAINT "agent_principal_id_principal_id_fk";
+--> statement-breakpoint
+ALTER TABLE "agent" DROP COLUMN "principal_id";

package/migrations/0019_rename_grant_source_to_origin.sql

@@ -0,0 +1 @@
+ALTER TABLE "grant" RENAME COLUMN "source" TO "origin";

package/migrations/0020_add_agent_role.sql

@@ -0,0 +1,9 @@
+CREATE TABLE "agent_role" (
+	"agent_id" text NOT NULL,
+	"role_id" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "agent_role_agent_id_role_id_pk" PRIMARY KEY("agent_id","role_id")
+);
+--> statement-breakpoint
+ALTER TABLE "agent_role" ADD CONSTRAINT "agent_role_agent_id_agent_id_fk" FOREIGN KEY ("agent_id") REFERENCES "public"."agent"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_role" ADD CONSTRAINT "agent_role_role_id_role_id_fk" FOREIGN KEY ("role_id") REFERENCES "public"."role"("id") ON DELETE cascade ON UPDATE no action;

package/migrations/0021_acoustic_ozymandias.sql

@@ -0,0 +1,15 @@
+CREATE TABLE "session_mail" (
+	"id" text PRIMARY KEY NOT NULL,
+	"session_id" text NOT NULL,
+	"instance_id" text,
+	"tenant_id" text NOT NULL,
+	"direction" text NOT NULL,
+	"status" text DEFAULT 'pending' NOT NULL,
+	"raw" "bytea" NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "session_mail" ADD CONSTRAINT "session_mail_session_id_agent_session_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."agent_session"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session_mail" ADD CONSTRAINT "session_mail_instance_id_agent_instance_id_fk" FOREIGN KEY ("instance_id") REFERENCES "public"."agent_instance"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session_mail" ADD CONSTRAINT "session_mail_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "session_mail_instance_id_created_at_idx" ON "session_mail" USING btree ("instance_id","created_at");

package/migrations/0022_material_sleepwalker.sql

@@ -0,0 +1,27 @@
+CREATE TABLE "inference_turn" (
+	"id" text PRIMARY KEY NOT NULL,
+	"session_id" text NOT NULL,
+	"instance_id" text NOT NULL,
+	"tenant_id" text NOT NULL,
+	"model" text NOT NULL,
+	"status" text DEFAULT 'running' NOT NULL,
+	"started_at" timestamp NOT NULL,
+	"ended_at" timestamp
+);
+--> statement-breakpoint
+CREATE TABLE "turn_part" (
+	"id" text PRIMARY KEY NOT NULL,
+	"turn_id" text NOT NULL,
+	"session_id" text NOT NULL,
+	"type" text NOT NULL,
+	"content" text,
+	"metadata" jsonb,
+	"ordinal" integer NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "inference_turn" ADD CONSTRAINT "inference_turn_session_id_agent_session_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."agent_session"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "inference_turn" ADD CONSTRAINT "inference_turn_instance_id_agent_instance_id_fk" FOREIGN KEY ("instance_id") REFERENCES "public"."agent_instance"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "inference_turn" ADD CONSTRAINT "inference_turn_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "turn_part" ADD CONSTRAINT "turn_part_turn_id_inference_turn_id_fk" FOREIGN KEY ("turn_id") REFERENCES "public"."inference_turn"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "turn_part" ADD CONSTRAINT "turn_part_session_id_agent_session_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."agent_session"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "inference_turn_instance_id_started_at_idx" ON "inference_turn" USING btree ("instance_id","started_at");

package/migrations/0023_flawless_scarlet_witch.sql

@@ -0,0 +1,2 @@
+DROP TABLE "message_part" CASCADE;--> statement-breakpoint
+DROP TABLE "session_message" CASCADE;

package/migrations/0024_bumpy_sharon_ventura.sql

@@ -0,0 +1 @@
+ALTER TABLE "agent" DROP COLUMN "skills";

package/migrations/0025_curvy_firestar.sql

@@ -0,0 +1,26 @@
+CREATE TABLE "asset" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"name" text NOT NULL,
+	"display_name" text,
+	"creator_principal_id" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "asset_tenant_kind_name" UNIQUE("tenant_id","kind","name")
+);
+--> statement-breakpoint
+CREATE TABLE "agent_asset" (
+	"id" text PRIMARY KEY NOT NULL,
+	"agent_id" text NOT NULL,
+	"asset_id" text NOT NULL,
+	"ref" text NOT NULL,
+	"access_mode" text DEFAULT 'read-only' NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "agent_asset_agent_asset" UNIQUE("agent_id","asset_id")
+);
+--> statement-breakpoint
+ALTER TABLE "asset" ADD CONSTRAINT "asset_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "asset" ADD CONSTRAINT "asset_creator_principal_id_principal_id_fk" FOREIGN KEY ("creator_principal_id") REFERENCES "public"."principal"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_asset" ADD CONSTRAINT "agent_asset_agent_id_agent_id_fk" FOREIGN KEY ("agent_id") REFERENCES "public"."agent"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_asset" ADD CONSTRAINT "agent_asset_asset_id_asset_id_fk" FOREIGN KEY ("asset_id") REFERENCES "public"."asset"("id") ON DELETE cascade ON UPDATE no action;

package/migrations/0026_keen_ultimo.sql

@@ -0,0 +1,13 @@
+CREATE TABLE "session_asset" (
+	"instance_id" text NOT NULL,
+	"agent_asset_id" text NOT NULL,
+	"mount_path" text NOT NULL,
+	"asset_pack_sha" text NOT NULL,
+	"source_commit_sha" text NOT NULL,
+	"materialized_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "session_asset_instance_id_agent_asset_id_pk" PRIMARY KEY("instance_id","agent_asset_id")
+);
+--> statement-breakpoint
+ALTER TABLE "session_asset" ADD CONSTRAINT "session_asset_instance_id_agent_instance_id_fk" FOREIGN KEY ("instance_id") REFERENCES "public"."agent_instance"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session_asset" ADD CONSTRAINT "session_asset_agent_asset_id_agent_asset_id_fk" FOREIGN KEY ("agent_asset_id") REFERENCES "public"."agent_asset"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "session_asset_pack_sha_idx" ON "session_asset" USING btree ("asset_pack_sha");

package/migrations/0027_git_tokens.sql

@@ -0,0 +1,21 @@
+CREATE TABLE "git_token" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text,
+	"user_id" text NOT NULL,
+	"principal_id" text,
+	"name" text NOT NULL,
+	"kind" text NOT NULL,
+	"token_hash_sha256" "bytea" NOT NULL,
+	"resource" text NOT NULL,
+	"ref_pattern" text NOT NULL,
+	"actions" text[] NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"revoked_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "git_token_token_hash_sha256_unique" UNIQUE("token_hash_sha256")
+);
+--> statement-breakpoint
+ALTER TABLE "git_token" ADD CONSTRAINT "git_token_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "git_token" ADD CONSTRAINT "git_token_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "git_token" ADD CONSTRAINT "git_token_principal_id_principal_id_fk" FOREIGN KEY ("principal_id") REFERENCES "public"."principal"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "git_token_user_id_name_active_idx" ON "git_token" USING btree ("user_id","name") WHERE "git_token"."revoked_at" is null;

package/migrations/0028_wet_sugar_man.sql

@@ -0,0 +1 @@
+ALTER TABLE "agent" ALTER COLUMN "creator_principal_id" SET NOT NULL;