@lastbrain/module-ai 2.0.26 → 2.0.30

package/supabase/migrations/20260129330004_ai_user_prompts.sql

@@ -0,0 +1,151 @@
+-- ============================================================================
+-- AI User Prompts System
+-- ============================================================================
+
+-- Table: user_prompt
+-- Store user's saved prompts (private or public)
+CREATE TABLE IF NOT EXISTS user_prompt (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  owner_id UUID NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+  title TEXT NOT NULL,
+  content TEXT NOT NULL,
+  type TEXT NOT NULL CHECK (type IN ('text', 'image')),
+  is_public BOOLEAN NOT NULL DEFAULT false,
+  favorite BOOLEAN NOT NULL DEFAULT false,
+  tags TEXT[] DEFAULT '{}',
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- Indexes
+CREATE INDEX idx_user_prompt_owner ON user_prompt(owner_id);
+CREATE INDEX idx_user_prompt_type ON user_prompt(type);
+CREATE INDEX idx_user_prompt_public ON user_prompt(is_public) WHERE is_public = true;
+CREATE INDEX idx_user_prompt_favorite ON user_prompt(owner_id, favorite) WHERE favorite = true;
+CREATE INDEX idx_user_prompt_tags ON user_prompt USING GIN(tags);
+
+-- RLS
+ALTER TABLE user_prompt ENABLE ROW LEVEL SECURITY;
+
+-- Policy: Superadmin can do everything
+CREATE POLICY "superadmin_all_user_prompt" ON user_prompt
+  FOR ALL
+  USING (is_superadmin(auth.uid()));
+
+-- Policy: Users can view their own prompts
+CREATE POLICY "user_select_own_prompts" ON user_prompt
+  FOR SELECT
+  USING (owner_id = auth.uid());
+
+-- Policy: Users can view public prompts
+CREATE POLICY "user_select_public_prompts" ON user_prompt
+  FOR SELECT
+  USING (is_public = true);
+
+-- Policy: Users can insert their own prompts
+CREATE POLICY "user_insert_own_prompts" ON user_prompt
+  FOR INSERT
+  WITH CHECK (owner_id = auth.uid());
+
+-- Policy: Users can update their own prompts
+CREATE POLICY "user_update_own_prompts" ON user_prompt
+  FOR UPDATE
+  USING (owner_id = auth.uid())
+  WITH CHECK (owner_id = auth.uid());
+
+-- Policy: Users can delete their own prompts
+CREATE POLICY "user_delete_own_prompts" ON user_prompt
+  FOR DELETE
+  USING (owner_id = auth.uid());
+
+-- Table: prompt_stats
+-- Statistics for public prompts
+CREATE TABLE IF NOT EXISTS prompt_stats (
+  prompt_id UUID PRIMARY KEY REFERENCES user_prompt(id) ON DELETE CASCADE,
+  views INTEGER NOT NULL DEFAULT 0,
+  used_count INTEGER NOT NULL DEFAULT 0,
+  picked_count INTEGER NOT NULL DEFAULT 0,
+  last_used_at TIMESTAMPTZ,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- RLS for prompt_stats (read-only for everyone, write for superadmin)
+ALTER TABLE prompt_stats ENABLE ROW LEVEL SECURITY;
+
+CREATE POLICY "anyone_select_prompt_stats" ON prompt_stats
+  FOR SELECT
+  USING (true);
+
+CREATE POLICY "superadmin_all_prompt_stats" ON prompt_stats
+  FOR ALL
+  USING (is_superadmin(auth.uid()));
+
+-- View: public_prompts_with_stats
+-- Public prompts with their stats
+CREATE OR REPLACE VIEW public_prompts_with_stats AS
+SELECT 
+  p.id,
+  p.owner_id,
+  p.title,
+  p.content,
+  p.type,
+  p.tags,
+  p.created_at,
+  COALESCE(s.views, 0) as views,
+  COALESCE(s.used_count, 0) as used_count,
+  COALESCE(s.picked_count, 0) as picked_count,
+  s.last_used_at
+FROM user_prompt p
+LEFT JOIN prompt_stats s ON s.prompt_id = p.id
+WHERE p.is_public = true
+ORDER BY s.picked_count DESC NULLS LAST, p.created_at DESC;
+
+-- Grant access to the view
+GRANT SELECT ON public_prompts_with_stats TO authenticated, anon;
+
+-- Function: increment_prompt_stat
+-- Increment a specific stat counter
+CREATE OR REPLACE FUNCTION increment_prompt_stat(
+  p_prompt_id UUID,
+  p_stat_type TEXT
+)
+RETURNS void
+LANGUAGE plpgsql
+SECURITY DEFINER
+AS $$
+BEGIN
+  -- Insert or update stats
+  INSERT INTO prompt_stats (prompt_id, views, used_count, picked_count, last_used_at)
+  VALUES (
+    p_prompt_id,
+    CASE WHEN p_stat_type = 'view' THEN 1 ELSE 0 END,
+    CASE WHEN p_stat_type = 'used' THEN 1 ELSE 0 END,
+    CASE WHEN p_stat_type = 'picked' THEN 1 ELSE 0 END,
+    CASE WHEN p_stat_type IN ('used', 'picked') THEN now() ELSE NULL END
+  )
+  ON CONFLICT (prompt_id) DO UPDATE SET
+    views = prompt_stats.views + CASE WHEN p_stat_type = 'view' THEN 1 ELSE 0 END,
+    used_count = prompt_stats.used_count + CASE WHEN p_stat_type = 'used' THEN 1 ELSE 0 END,
+    picked_count = prompt_stats.picked_count + CASE WHEN p_stat_type = 'picked' THEN 1 ELSE 0 END,
+    last_used_at = CASE WHEN p_stat_type IN ('used', 'picked') THEN now() ELSE prompt_stats.last_used_at END,
+    updated_at = now();
+END;
+$$;
+
+-- Grant execute to authenticated and anon users
+GRANT EXECUTE ON FUNCTION increment_prompt_stat TO authenticated, anon;
+
+-- Trigger: update_user_prompt_updated_at
+CREATE OR REPLACE FUNCTION update_user_prompt_updated_at()
+RETURNS TRIGGER AS $$
+BEGIN
+  NEW.updated_at = now();
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER trigger_update_user_prompt_updated_at
+  BEFORE UPDATE ON user_prompt
+  FOR EACH ROW
+  EXECUTE FUNCTION update_user_prompt_updated_at();

package/supabase/migrations/20260129330005_ai_prompts_ip_tracking.sql

@@ -0,0 +1,92 @@
+-- ============================================================================
+-- AI Prompts IP Tracking System
+-- Add IP-based tracking to prevent duplicate stat increments
+-- ============================================================================
+
+-- Table: prompt_stat_tracking
+-- Track which IPs have already incremented specific stats
+CREATE TABLE IF NOT EXISTS prompt_stat_tracking (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  prompt_id UUID NOT NULL REFERENCES user_prompt(id) ON DELETE CASCADE,
+  ip_address TEXT NOT NULL,
+  stat_type TEXT NOT NULL CHECK (stat_type IN ('views', 'picked', 'used')),
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- Indexes
+CREATE INDEX idx_prompt_stat_tracking_lookup ON prompt_stat_tracking(prompt_id, ip_address, stat_type);
+CREATE INDEX idx_prompt_stat_tracking_cleanup ON prompt_stat_tracking(created_at);
+
+-- RLS (service role only)
+ALTER TABLE prompt_stat_tracking ENABLE ROW LEVEL SECURITY;
+
+CREATE POLICY "service_all_prompt_stat_tracking" ON prompt_stat_tracking
+  FOR ALL
+  USING (is_superadmin(auth.uid()));
+
+-- Function: increment_prompt_stat_with_ip
+-- Increment stat only if IP hasn't already done so (with 24h cooldown)
+CREATE OR REPLACE FUNCTION increment_prompt_stat_with_ip(
+  p_prompt_id UUID,
+  p_stat_type TEXT,
+  p_ip_address TEXT
+)
+RETURNS BOOLEAN
+LANGUAGE plpgsql
+SECURITY DEFINER
+AS $$
+DECLARE
+  v_already_tracked BOOLEAN;
+BEGIN
+  -- Check if this IP has already incremented this stat in the last 24 hours
+  SELECT EXISTS (
+    SELECT 1 FROM prompt_stat_tracking
+    WHERE prompt_id = p_prompt_id
+      AND ip_address = p_ip_address
+      AND stat_type = p_stat_type
+      AND created_at > now() - INTERVAL '24 hours'
+  ) INTO v_already_tracked;
+
+  -- If already tracked, return false (no increment)
+  IF v_already_tracked THEN
+    RETURN FALSE;
+  END IF;
+
+  -- Record this tracking
+  INSERT INTO prompt_stat_tracking (prompt_id, ip_address, stat_type)
+  VALUES (p_prompt_id, p_ip_address, p_stat_type);
+
+  -- Increment the actual stat
+  INSERT INTO prompt_stats (prompt_id, views, used_count, picked_count, last_used_at)
+  VALUES (
+    p_prompt_id,
+    CASE WHEN p_stat_type = 'views' THEN 1 ELSE 0 END,
+    CASE WHEN p_stat_type = 'used' THEN 1 ELSE 0 END,
+    CASE WHEN p_stat_type = 'picked' THEN 1 ELSE 0 END,
+    CASE WHEN p_stat_type IN ('used', 'picked') THEN now() ELSE NULL END
+  )
+  ON CONFLICT (prompt_id) DO UPDATE SET
+    views = prompt_stats.views + CASE WHEN p_stat_type = 'views' THEN 1 ELSE 0 END,
+    used_count = prompt_stats.used_count + CASE WHEN p_stat_type = 'used' THEN 1 ELSE 0 END,
+    picked_count = prompt_stats.picked_count + CASE WHEN p_stat_type = 'picked' THEN 1 ELSE 0 END,
+    last_used_at = CASE WHEN p_stat_type IN ('used', 'picked') THEN now() ELSE prompt_stats.last_used_at END,
+    updated_at = now();
+
+  RETURN TRUE;
+END;
+$$;
+
+-- Grant execute to authenticated and anon users
+GRANT EXECUTE ON FUNCTION increment_prompt_stat_with_ip TO authenticated, anon;
+
+-- Cleanup function: Remove tracking older than 30 days
+CREATE OR REPLACE FUNCTION cleanup_old_prompt_stat_tracking()
+RETURNS void
+LANGUAGE plpgsql
+SECURITY DEFINER
+AS $$
+BEGIN
+  DELETE FROM prompt_stat_tracking
+  WHERE created_at < now() - INTERVAL '30 days';
+END;
+$$;

package/supabase/migrations/20260129330006_ai_prompts_slug.sql

@@ -0,0 +1,64 @@
+-- ============================================================================
+-- Add slug column to user_prompt for SEO-friendly URLs
+-- ============================================================================
+
+-- Add slug column
+ALTER TABLE user_prompt ADD COLUMN IF NOT EXISTS slug TEXT;
+
+-- Create unique index on slug for public prompts
+CREATE UNIQUE INDEX IF NOT EXISTS idx_user_prompt_slug ON user_prompt(slug) WHERE is_public = true AND slug IS NOT NULL;
+
+-- Function to generate slug from title
+CREATE OR REPLACE FUNCTION generate_prompt_slug(p_title TEXT)
+RETURNS TEXT
+LANGUAGE plpgsql
+AS $$
+DECLARE
+  v_slug TEXT;
+  v_short_id TEXT;
+  v_counter INTEGER := 0;
+  v_final_slug TEXT;
+BEGIN
+  -- Slugify title: lowercase, replace spaces with hyphens, remove special chars
+  v_slug := lower(regexp_replace(p_title, '[^a-zA-Z0-9\s-]', '', 'g'));
+  v_slug := regexp_replace(v_slug, '\s+', '-', 'g');
+  v_slug := regexp_replace(v_slug, '-+', '-', 'g');
+  v_slug := trim(both '-' from v_slug);
+  
+  -- Limit to 50 characters
+  v_slug := substring(v_slug from 1 for 50);
+  
+  -- Generate short random ID (6 chars)
+  v_short_id := substring(md5(random()::text || clock_timestamp()::text) from 1 for 6);
+  
+  -- Combine slug with short ID
+  v_final_slug := v_slug || '-' || v_short_id;
+  
+  RETURN v_final_slug;
+END;
+$$;
+
+-- Function to auto-generate slug on insert/update if missing
+CREATE OR REPLACE FUNCTION auto_generate_prompt_slug()
+RETURNS TRIGGER AS $$
+BEGIN
+  -- Only generate slug for public prompts if not already set
+  IF NEW.is_public = true AND (NEW.slug IS NULL OR NEW.slug = '') THEN
+    NEW.slug := generate_prompt_slug(NEW.title);
+  END IF;
+  
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+-- Create trigger
+DROP TRIGGER IF EXISTS trigger_auto_generate_prompt_slug ON user_prompt;
+CREATE TRIGGER trigger_auto_generate_prompt_slug
+  BEFORE INSERT OR UPDATE ON user_prompt
+  FOR EACH ROW
+  EXECUTE FUNCTION auto_generate_prompt_slug();
+
+-- Backfill existing public prompts with slugs
+UPDATE user_prompt
+SET slug = generate_prompt_slug(title)
+WHERE is_public = true AND (slug IS NULL OR slug = '');

package/supabase/migrations/20260129330007_ai_prompts_view_slug.sql

@@ -0,0 +1,26 @@
+-- ============================================================================
+-- Update public_prompts_with_stats view to include slug
+-- ============================================================================
+
+-- Drop existing view to allow adding new column
+DROP VIEW IF EXISTS public_prompts_with_stats CASCADE;
+
+-- Recreate view with slug column
+CREATE VIEW public_prompts_with_stats AS
+SELECT
+  p.id,
+  p.owner_id,
+  p.slug,
+  p.title,
+  p.content,
+  p.type,
+  p.tags,
+  p.created_at,
+  COALESCE(s.views, 0) as views,
+  COALESCE(s.used_count, 0) as used_count,
+  COALESCE(s.picked_count, 0) as picked_count,
+  s.last_used_at
+FROM user_prompt p
+LEFT JOIN prompt_stats s ON s.prompt_id = p.id
+WHERE p.is_public = true
+ORDER BY s.picked_count DESC NULLS LAST, p.created_at DESC;

package/supabase/migrations/20260129440000_ai_prompts_view_username.sql

@@ -0,0 +1,33 @@
+-- ============================================================================
+-- Update public_prompts_with_stats view to include username
+-- ============================================================================
+
+-- Drop existing view to allow adding username column
+DROP VIEW IF EXISTS public_prompts_with_stats CASCADE;
+
+-- Recreate view with slug, username and avatar
+CREATE VIEW public_prompts_with_stats AS
+SELECT
+  p.id,
+  p.owner_id,
+  p.slug,
+  p.title,
+  p.content,
+  p.type,
+  p.tags,
+  p.created_at,
+  up.username,
+  up.avatar_url,
+  COALESCE(s.views, 0) as views,
+  COALESCE(s.used_count, 0) as used_count,
+  COALESCE(s.picked_count, 0) as picked_count,
+  s.last_used_at
+FROM user_prompt p
+LEFT JOIN prompt_stats s ON s.prompt_id = p.id
+LEFT JOIN user_profil up ON up.owner_id = p.owner_id
+WHERE p.is_public = true
+ORDER BY s.picked_count DESC NULLS LAST, p.created_at DESC;
+
+-- Grant permissions
+GRANT SELECT ON public_prompts_with_stats TO authenticated;
+GRANT SELECT ON public_prompts_with_stats TO anon;

package/supabase/migrations/20260129450000_ai_prompts_add_lang.sql

@@ -0,0 +1,40 @@
+-- ============================================================================
+-- Add lang column to user_prompt and update view
+-- ============================================================================
+
+-- Add lang column to user_prompt
+ALTER TABLE public.user_prompt
+ADD COLUMN IF NOT EXISTS lang TEXT DEFAULT 'en';
+
+-- Add comment
+COMMENT ON COLUMN public.user_prompt.lang IS 'Language of the prompt (en, fr, etc.)';
+
+-- Update view to include lang
+DROP VIEW IF EXISTS public_prompts_with_stats CASCADE;
+
+CREATE VIEW public_prompts_with_stats AS
+SELECT
+  p.id,
+  p.owner_id,
+  p.slug,
+  p.title,
+  p.content,
+  p.type,
+  p.tags,
+  p.lang,
+  p.created_at,
+  up.username,
+  up.avatar_url,
+  COALESCE(s.views, 0) as views,
+  COALESCE(s.used_count, 0) as used_count,
+  COALESCE(s.picked_count, 0) as picked_count,
+  s.last_used_at
+FROM user_prompt p
+LEFT JOIN prompt_stats s ON s.prompt_id = p.id
+LEFT JOIN user_profil up ON up.owner_id = p.owner_id
+WHERE p.is_public = true
+ORDER BY s.picked_count DESC NULLS LAST, p.created_at DESC;
+
+-- Grant permissions
+GRANT SELECT ON public_prompts_with_stats TO authenticated;
+GRANT SELECT ON public_prompts_with_stats TO anon;

package/supabase/migrations/20260131000000_extract_model_prompt_in_ledger.sql

@@ -0,0 +1,92 @@
+-- Migration: Extract model and prompt from metadata to dedicated columns in user_token_ledger
+-- Modifies record_token_consumption RPC to populate model and prompt columns from p_meta JSONB
+
+CREATE OR REPLACE FUNCTION public.record_token_consumption(
+  p_user_id uuid,
+  p_debit_tokens bigint,
+  p_provider_cost_usd numeric,
+  p_sell_usd numeric,
+  p_margin_usd numeric,
+  p_meta jsonb DEFAULT '{}'::jsonb
+)
+RETURNS jsonb AS $$
+DECLARE
+  v_current_balance bigint;
+  v_wallet_provider_budget numeric;
+  v_wallet_sell_value numeric;
+  v_new_balance bigint;
+  v_allow_overdraft boolean;
+BEGIN
+  -- 1. Get current balance
+  SELECT COALESCE(SUM(amount), 0) INTO v_current_balance
+  FROM public.user_token_ledger
+  WHERE owner_id = p_user_id;
+
+  -- 2. Get wallet values
+  SELECT 
+    wallet_provider_budget_usd,
+    wallet_sell_value_usd
+  INTO v_wallet_provider_budget, v_wallet_sell_value
+  FROM public.user_token_wallet
+  WHERE user_id = p_user_id;
+
+  -- 3. Check overdraft
+  v_allow_overdraft := COALESCE((p_meta->>'allowOverdraft')::boolean, false);
+
+  IF NOT v_allow_overdraft AND v_current_balance < p_debit_tokens THEN
+    RAISE EXCEPTION 'Insufficient token balance: have %, need %', v_current_balance, p_debit_tokens;
+  END IF;
+
+  IF v_wallet_provider_budget < p_provider_cost_usd THEN
+    RAISE EXCEPTION 'Insufficient provider budget: have $%, need $%', v_wallet_provider_budget, p_provider_cost_usd;
+  END IF;
+
+  IF v_wallet_sell_value < p_sell_usd THEN
+    RAISE EXCEPTION 'Insufficient sell value: have $%, need $%', v_wallet_sell_value, p_sell_usd;
+  END IF;
+
+  -- 4. Insert ledger entry (negative amount) with model and prompt extracted from metadata
+  INSERT INTO public.user_token_ledger (
+    owner_id,
+    amount,
+    type,
+    debit_tokens,
+    provider_cost_usd,
+    sell_usd,
+    margin_usd,
+    model,
+    prompt,
+    meta
+  ) VALUES (
+    p_user_id,
+    -p_debit_tokens,
+    'use',
+    p_debit_tokens,
+    p_provider_cost_usd,
+    p_sell_usd,
+    p_margin_usd,
+    p_meta->>'model',
+    substring(p_meta->>'prompt', 1, 32),
+    p_meta
+  );
+
+  -- 5. Update wallet (subtract USD values)
+  UPDATE public.user_token_wallet
+  SET 
+    wallet_provider_budget_usd = wallet_provider_budget_usd - p_provider_cost_usd,
+    wallet_sell_value_usd = wallet_sell_value_usd - p_sell_usd,
+    updated_at = now()
+  WHERE user_id = p_user_id;
+
+  -- 6. Get new balance
+  v_new_balance := v_current_balance - p_debit_tokens;
+
+  RETURN jsonb_build_object(
+    'success', true,
+    'new_balance', v_new_balance
+  );
+END;
+$$ LANGUAGE plpgsql SECURITY DEFINER;
+
+COMMENT ON FUNCTION public.record_token_consumption IS 
+'Records AI consumption: debits tokens, updates wallet USD values, and extracts model/prompt from metadata to dedicated columns for efficient querying';

package/supabase/migrations/20260131140000_fix_duplicate_purchases.sql

@@ -0,0 +1,64 @@
+-- Fix duplicate purchases in ledger
+-- This migration removes duplicate purchase entries with same payment_id
+-- and recalculates wallet from clean ledger
+
+BEGIN;
+
+-- Step 1: Delete duplicate purchases (keep oldest entry per payment_id)
+WITH duplicates AS (
+  SELECT 
+    id,
+    owner_id,
+    meta->>'payment_id' as payment_id,
+    ts,
+    ROW_NUMBER() OVER (
+      PARTITION BY owner_id, meta->>'payment_id' 
+      ORDER BY ts ASC
+    ) as rn
+  FROM user_token_ledger
+  WHERE 
+    type = 'purchase' 
+    AND meta->>'payment_id' IS NOT NULL
+)
+DELETE FROM user_token_ledger
+WHERE id IN (
+  SELECT id FROM duplicates WHERE rn > 1
+);
+
+-- Step 2: Recalculate ALL wallets from clean ledger
+WITH wallet_totals AS (
+  SELECT 
+    owner_id,
+    SUM(CASE WHEN type = 'purchase' THEN provider_budget_added_usd ELSE 0 END) as total_provider_added,
+    SUM(CASE WHEN type = 'purchase' THEN sell_value_added_usd ELSE 0 END) as total_sell_added,
+    SUM(CASE WHEN type = 'use' THEN provider_cost_usd ELSE 0 END) as total_provider_used,
+    SUM(CASE WHEN type = 'use' THEN sell_usd ELSE 0 END) as total_sell_used
+  FROM user_token_ledger
+  GROUP BY owner_id
+)
+INSERT INTO user_token_wallet (
+  user_id,
+  wallet_provider_budget_usd,
+  wallet_sell_value_usd,
+  updated_at
+)
+SELECT 
+  owner_id,
+  total_provider_added - COALESCE(total_provider_used, 0),
+  total_sell_added - COALESCE(total_sell_used, 0),
+  NOW()
+FROM wallet_totals
+ON CONFLICT (user_id) DO UPDATE SET
+  wallet_provider_budget_usd = EXCLUDED.wallet_provider_budget_usd,
+  wallet_sell_value_usd = EXCLUDED.wallet_sell_value_usd,
+  updated_at = NOW();
+
+-- Step 3: Add unique constraint to prevent future duplicates
+CREATE UNIQUE INDEX IF NOT EXISTS idx_ledger_unique_payment 
+ON user_token_ledger (owner_id, (meta->>'payment_id'))
+WHERE type = 'purchase' AND meta->>'payment_id' IS NOT NULL;
+
+COMMIT;
+
+COMMENT ON INDEX idx_ledger_unique_payment IS 
+'Prevents duplicate purchase entries for same payment_id';

package/supabase/migrations/20260201120000_module-ai_default_models.sql

@@ -0,0 +1,63 @@
+-- module-ai: Set default text and image models GLOBALLY
+-- This migration creates a system-wide config table for default models
+-- All API calls (recipes, images, etc.) will use these defaults unless user overrides
+
+begin;
+
+-- -----------------------------------------------------------------------------
+-- 1) Create global AI configuration table (single row)
+-- -----------------------------------------------------------------------------
+
+create table if not exists public.ai_global_settings (
+  id integer primary key default 1 check (id = 1), -- Only 1 row allowed
+  
+  -- Default models for all users
+  default_text_provider text not null default 'openai',
+  default_text_model text not null default 'gpt-4.1-mini',
+  
+  default_image_provider text not null default 'google',
+  default_image_model text not null default 'gemini-2.5-flash-image',
+  
+  -- Optional: default max tokens
+  max_tokens_per_call integer not null default 16384,
+  
+  -- Metadata
+  updated_at timestamptz not null default now(),
+  updated_by uuid null references auth.users(id)
+);
+
+-- Insert default values
+insert into public.ai_global_settings (id)
+values (1)
+on conflict (id) do update
+set 
+  default_text_provider = excluded.default_text_provider,
+  default_text_model = excluded.default_text_model,
+  default_image_provider = excluded.default_image_provider,
+  default_image_model = excluded.default_image_model,
+  max_tokens_per_call = excluded.max_tokens_per_call;
+
+-- -----------------------------------------------------------------------------
+-- 2) RLS: Public read for all, only superadmin can write
+-- -----------------------------------------------------------------------------
+
+alter table public.ai_global_settings enable row level security;
+
+drop policy if exists ai_global_settings_select on public.ai_global_settings;
+create policy ai_global_settings_select
+  on public.ai_global_settings for select
+  using (true); -- Everyone can read
+
+drop policy if exists ai_global_settings_update on public.ai_global_settings;
+create policy ai_global_settings_update
+  on public.ai_global_settings for update
+  using (is_superadmin(auth.uid()))
+  with check (is_superadmin(auth.uid()));
+
+-- Updated trigger
+drop trigger if exists trg_ai_global_settings_updated_at on public.ai_global_settings;
+create trigger trg_ai_global_settings_updated_at
+before update on public.ai_global_settings
+for each row execute function public.set_updated_at();
+
+commit;

package/supabase/migrations/20260201130000_module-ai_remove_provider_tables.sql

@@ -0,0 +1,17 @@
+-- module-ai: Remove deprecated tables ai_providers and ai_provider_models
+-- These tables are no longer used - we query Vercel AI Gateway directly for available models
+-- Global defaults are now stored in ai_global_settings table
+
+begin;
+
+-- Drop dependent tables/views first (if any)
+drop view if exists ai_active_models_v cascade;
+
+-- Drop the tables
+drop table if exists public.ai_provider_models cascade;
+drop table if exists public.ai_providers cascade;
+
+-- Note: No need to update ai_global_settings as it doesn't have foreign keys to these tables
+-- The global settings table uses simple text fields for provider/model names
+
+commit;

package/supabase/migrations-down/20251217120000_user_token_quota_monthly.sql

@@ -0,0 +1,34 @@
+-- ===========================================================================
+-- Module: @lastbrain/module-ai
+-- Migration DOWN: 20251217120000_user_token_quota_monthly.sql
+-- Description: Rollback monthly token quota tables
+-- ===========================================================================
+
+-- Drop helper function
+DROP FUNCTION IF EXISTS public.get_plan_default_tokens(text);
+
+-- Drop triggers
+DROP TRIGGER IF EXISTS set_user_token_quota_monthly_updated_at ON public.user_token_quota_monthly;
+
+-- Drop policies - user_token_quota_ledger
+DROP POLICY IF EXISTS user_token_quota_ledger_admin_all ON public.user_token_quota_ledger;
+DROP POLICY IF EXISTS user_token_quota_ledger_select_own ON public.user_token_quota_ledger;
+
+-- Drop policies - user_token_quota_monthly
+DROP POLICY IF EXISTS user_token_quota_monthly_admin_all ON public.user_token_quota_monthly;
+DROP POLICY IF EXISTS user_token_quota_monthly_select_own ON public.user_token_quota_monthly;
+
+-- Drop indexes - user_token_quota_ledger
+DROP INDEX IF EXISTS public.idx_user_token_quota_ledger_period;
+DROP INDEX IF EXISTS public.idx_user_token_quota_ledger_owner_created;
+DROP INDEX IF EXISTS public.idx_user_token_quota_ledger_owner;
+
+-- Drop indexes - user_token_quota_monthly
+DROP INDEX IF EXISTS public.idx_user_token_quota_monthly_subscription;
+DROP INDEX IF EXISTS public.idx_user_token_quota_monthly_period;
+DROP INDEX IF EXISTS public.idx_user_token_quota_monthly_plan;
+DROP INDEX IF EXISTS public.idx_user_token_quota_monthly_owner;
+
+-- Drop tables
+DROP TABLE IF EXISTS public.user_token_quota_ledger;
+DROP TABLE IF EXISTS public.user_token_quota_monthly;