@matteai/stma-server 0.11.0

package/drizzle/0000_nappy_franklin_storm.sql

@@ -0,0 +1,115 @@
+CREATE TABLE "debug_sessions" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"title" text NOT NULL,
+	"status" text DEFAULT 'open' NOT NULL,
+	"opened_by" uuid,
+	"context" jsonb,
+	"resolution" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"resolved_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "invites" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"code" text NOT NULL,
+	"created_by" uuid,
+	"expires_at" timestamp with time zone NOT NULL,
+	"uses" integer DEFAULT 0 NOT NULL,
+	"max_uses" integer,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "invites_code_unique" UNIQUE("code")
+);
+--> statement-breakpoint
+CREATE TABLE "memberships" (
+	"team_id" uuid NOT NULL,
+	"user_id" uuid NOT NULL,
+	"role" text DEFAULT 'member' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "memberships_team_id_user_id_pk" PRIMARY KEY("team_id","user_id")
+);
+--> statement-breakpoint
+CREATE TABLE "messages" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"session_id" uuid NOT NULL,
+	"author_id" uuid,
+	"kind" text DEFAULT 'note' NOT NULL,
+	"body" text NOT NULL,
+	"attachments" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "read_state" (
+	"user_id" uuid NOT NULL,
+	"session_id" uuid NOT NULL,
+	"last_read_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "read_state_user_id_session_id_pk" PRIMARY KEY("user_id","session_id")
+);
+--> statement-breakpoint
+CREATE TABLE "snapshots" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"user_id" uuid NOT NULL,
+	"repo" text,
+	"data" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "teams" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"name" text NOT NULL,
+	"slug" text NOT NULL,
+	"created_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "teams_slug_unique" UNIQUE("slug")
+);
+--> statement-breakpoint
+CREATE TABLE "tokens" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"user_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"token_hash" text NOT NULL,
+	"prefix" text NOT NULL,
+	"last_used_at" timestamp with time zone,
+	"revoked_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "tokens_token_hash_unique" UNIQUE("token_hash")
+);
+--> statement-breakpoint
+CREATE TABLE "users" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"github_id" bigint,
+	"username" text NOT NULL,
+	"display_name" text,
+	"email" text,
+	"avatar_url" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "users_github_id_unique" UNIQUE("github_id"),
+	CONSTRAINT "users_username_unique" UNIQUE("username")
+);
+--> statement-breakpoint
+CREATE TABLE "web_sessions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" uuid NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "debug_sessions" ADD CONSTRAINT "debug_sessions_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "debug_sessions" ADD CONSTRAINT "debug_sessions_opened_by_users_id_fk" FOREIGN KEY ("opened_by") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "invites" ADD CONSTRAINT "invites_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "invites" ADD CONSTRAINT "invites_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "memberships" ADD CONSTRAINT "memberships_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "memberships" ADD CONSTRAINT "memberships_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "messages" ADD CONSTRAINT "messages_session_id_debug_sessions_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."debug_sessions"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "messages" ADD CONSTRAINT "messages_author_id_users_id_fk" FOREIGN KEY ("author_id") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "read_state" ADD CONSTRAINT "read_state_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "read_state" ADD CONSTRAINT "read_state_session_id_debug_sessions_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."debug_sessions"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "snapshots" ADD CONSTRAINT "snapshots_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "snapshots" ADD CONSTRAINT "snapshots_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "teams" ADD CONSTRAINT "teams_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "tokens" ADD CONSTRAINT "tokens_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "web_sessions" ADD CONSTRAINT "web_sessions_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "messages_session_created" ON "messages" USING btree ("session_id","created_at");--> statement-breakpoint
+CREATE INDEX "snapshots_team_user_created" ON "snapshots" USING btree ("team_id","user_id","created_at");

package/drizzle/0001_grey_ogun.sql

@@ -0,0 +1 @@
+ALTER TABLE "messages" ADD COLUMN "via" text;

package/drizzle/0002_crazy_vindicator.sql

@@ -0,0 +1 @@
+ALTER TABLE "teams" ADD COLUMN "webhook_url" text;

package/drizzle/0003_tan_puma.sql

@@ -0,0 +1 @@
+ALTER TABLE "users" ADD COLUMN "password_hash" text;

package/drizzle/0004_dry_selene.sql

@@ -0,0 +1,40 @@
+CREATE TABLE "activity" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"project_id" uuid,
+	"user_id" uuid,
+	"token_id" uuid,
+	"action" text NOT NULL,
+	"detail" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "projects" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"slug" text NOT NULL,
+	"created_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "debug_sessions" ADD COLUMN "project_id" uuid;--> statement-breakpoint
+ALTER TABLE "debug_sessions" ADD COLUMN "kind" text DEFAULT 'debug' NOT NULL;--> statement-breakpoint
+ALTER TABLE "messages" ADD COLUMN "token_id" uuid;--> statement-breakpoint
+ALTER TABLE "snapshots" ADD COLUMN "project_id" uuid;--> statement-breakpoint
+ALTER TABLE "snapshots" ADD COLUMN "token_id" uuid;--> statement-breakpoint
+ALTER TABLE "teams" ADD COLUMN "plan" text DEFAULT 'free' NOT NULL;--> statement-breakpoint
+ALTER TABLE "teams" ADD COLUMN "inbound_token" text;--> statement-breakpoint
+ALTER TABLE "activity" ADD CONSTRAINT "activity_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "activity" ADD CONSTRAINT "activity_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."projects"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "activity" ADD CONSTRAINT "activity_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "activity" ADD CONSTRAINT "activity_token_id_tokens_id_fk" FOREIGN KEY ("token_id") REFERENCES "public"."tokens"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "projects" ADD CONSTRAINT "projects_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "projects" ADD CONSTRAINT "projects_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "activity_team_created" ON "activity" USING btree ("team_id","created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "projects_team_slug" ON "projects" USING btree ("team_id","slug");--> statement-breakpoint
+ALTER TABLE "debug_sessions" ADD CONSTRAINT "debug_sessions_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."projects"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "messages" ADD CONSTRAINT "messages_token_id_tokens_id_fk" FOREIGN KEY ("token_id") REFERENCES "public"."tokens"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "snapshots" ADD CONSTRAINT "snapshots_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."projects"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "snapshots" ADD CONSTRAINT "snapshots_token_id_tokens_id_fk" FOREIGN KEY ("token_id") REFERENCES "public"."tokens"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "teams" ADD CONSTRAINT "teams_inbound_token_unique" UNIQUE("inbound_token");

package/drizzle/0005_hot_the_fallen.sql

@@ -0,0 +1,103 @@
+CREATE TABLE "agent_events" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"run_id" uuid NOT NULL,
+	"type" text NOT NULL,
+	"detail" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "agent_installations" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"user_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"client_type" text DEFAULT 'generic' NOT NULL,
+	"client_version" text,
+	"device_fingerprint" text NOT NULL,
+	"capabilities" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"last_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"revoked_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "agent_runs" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"installation_id" uuid NOT NULL,
+	"team_id" uuid NOT NULL,
+	"project_id" uuid,
+	"task_key" text,
+	"intent" text,
+	"repo" text,
+	"branch" text,
+	"worktree" text,
+	"base_sha" text,
+	"status" text DEFAULT 'starting' NOT NULL,
+	"policy_hash" text,
+	"environment_fingerprint" text,
+	"started_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"last_heartbeat_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"ended_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "environment_baselines" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"project_id" uuid NOT NULL,
+	"data" jsonb NOT NULL,
+	"fingerprint" text NOT NULL,
+	"active" boolean DEFAULT true NOT NULL,
+	"created_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "policy_bundles" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"project_id" uuid,
+	"scope_key" text NOT NULL,
+	"version" integer NOT NULL,
+	"status" text DEFAULT 'active' NOT NULL,
+	"document" jsonb NOT NULL,
+	"hash" text NOT NULL,
+	"created_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "policy_receipts" (
+	"run_id" uuid PRIMARY KEY NOT NULL,
+	"expected_hash" text NOT NULL,
+	"reported_hash" text,
+	"drift" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "work_claims" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"run_id" uuid NOT NULL,
+	"resource_type" text NOT NULL,
+	"resource_key" text NOT NULL,
+	"access" text DEFAULT 'write' NOT NULL,
+	"lease_expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "agent_events" ADD CONSTRAINT "agent_events_run_id_agent_runs_id_fk" FOREIGN KEY ("run_id") REFERENCES "public"."agent_runs"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_installations" ADD CONSTRAINT "agent_installations_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD CONSTRAINT "agent_runs_installation_id_agent_installations_id_fk" FOREIGN KEY ("installation_id") REFERENCES "public"."agent_installations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD CONSTRAINT "agent_runs_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD CONSTRAINT "agent_runs_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."projects"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "environment_baselines" ADD CONSTRAINT "environment_baselines_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "environment_baselines" ADD CONSTRAINT "environment_baselines_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."projects"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "environment_baselines" ADD CONSTRAINT "environment_baselines_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "policy_bundles" ADD CONSTRAINT "policy_bundles_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "policy_bundles" ADD CONSTRAINT "policy_bundles_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."projects"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "policy_bundles" ADD CONSTRAINT "policy_bundles_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "policy_receipts" ADD CONSTRAINT "policy_receipts_run_id_agent_runs_id_fk" FOREIGN KEY ("run_id") REFERENCES "public"."agent_runs"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "work_claims" ADD CONSTRAINT "work_claims_run_id_agent_runs_id_fk" FOREIGN KEY ("run_id") REFERENCES "public"."agent_runs"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "agent_events_run_created" ON "agent_events" USING btree ("run_id","created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "agent_installations_user_device_name" ON "agent_installations" USING btree ("user_id","device_fingerprint","name");--> statement-breakpoint
+CREATE INDEX "agent_runs_team_status_heartbeat" ON "agent_runs" USING btree ("team_id","status","last_heartbeat_at");--> statement-breakpoint
+CREATE INDEX "agent_runs_installation_started" ON "agent_runs" USING btree ("installation_id","started_at");--> statement-breakpoint
+CREATE INDEX "environment_baselines_project_active" ON "environment_baselines" USING btree ("project_id","active","created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "policy_bundles_team_scope_version" ON "policy_bundles" USING btree ("team_id","scope_key","version");--> statement-breakpoint
+CREATE UNIQUE INDEX "work_claims_run_resource" ON "work_claims" USING btree ("run_id","resource_type","resource_key","access");--> statement-breakpoint
+CREATE INDEX "work_claims_lease" ON "work_claims" USING btree ("lease_expires_at");

package/drizzle/0006_cooing_cargill.sql

@@ -0,0 +1,42 @@
+-- One announcements channel per team: before the unique index below existed,
+-- concurrent first-announces could create duplicate channels. Keep the earliest
+-- channel per team, repoint messages at it, copy read markers over, then delete
+-- the duplicates (cascade clears their leftover read_state rows). Every
+-- statement is a no-op when there are no duplicates.
+WITH keep AS (
+	SELECT team_id, (array_agg(id ORDER BY created_at, id))[1] AS keep_id
+	FROM debug_sessions WHERE kind = 'announcements' GROUP BY team_id
+), dup AS (
+	SELECT s.id, keep.keep_id
+	FROM debug_sessions s
+	JOIN keep ON keep.team_id = s.team_id
+	WHERE s.kind = 'announcements' AND s.id <> keep.keep_id
+)
+UPDATE messages m SET session_id = dup.keep_id FROM dup WHERE m.session_id = dup.id;
+--> statement-breakpoint
+WITH keep AS (
+	SELECT team_id, (array_agg(id ORDER BY created_at, id))[1] AS keep_id
+	FROM debug_sessions WHERE kind = 'announcements' GROUP BY team_id
+), dup AS (
+	SELECT s.id, keep.keep_id
+	FROM debug_sessions s
+	JOIN keep ON keep.team_id = s.team_id
+	WHERE s.kind = 'announcements' AND s.id <> keep.keep_id
+)
+INSERT INTO read_state (user_id, session_id, last_read_at)
+SELECT rs.user_id, dup.keep_id, max(rs.last_read_at)
+FROM read_state rs
+JOIN dup ON dup.id = rs.session_id
+GROUP BY rs.user_id, dup.keep_id
+ON CONFLICT (user_id, session_id) DO UPDATE
+	SET last_read_at = GREATEST(read_state.last_read_at, excluded.last_read_at);
+--> statement-breakpoint
+WITH keep AS (
+	SELECT team_id, (array_agg(id ORDER BY created_at, id))[1] AS keep_id
+	FROM debug_sessions WHERE kind = 'announcements' GROUP BY team_id
+)
+DELETE FROM debug_sessions s
+USING keep
+WHERE s.kind = 'announcements' AND s.team_id = keep.team_id AND s.id <> keep.keep_id;
+--> statement-breakpoint
+CREATE UNIQUE INDEX "debug_sessions_team_announcements" ON "debug_sessions" USING btree ("team_id") WHERE kind = 'announcements';

package/drizzle/0007_public_slyde.sql

@@ -0,0 +1,12 @@
+CREATE TABLE "crm_contacts" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"name" text NOT NULL,
+	"org" text,
+	"contact" text,
+	"status" text DEFAULT 'lead' NOT NULL,
+	"source" text,
+	"notes" text,
+	"next_action_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);

package/drizzle/0008_loving_maestro.sql

@@ -0,0 +1,9 @@
+ALTER TABLE "snapshots" ADD COLUMN "device_label" text DEFAULT 'default' NOT NULL;--> statement-breakpoint
+-- Backfill: rows pushed before the personal-fleet change keep a recognizable
+-- device slot by adopting the name of the token that pushed them ("one token per
+-- machine" is the documented convention). Mirrors normalizeDeviceLabel() in
+-- src/lib/devices.ts; anything unusable stays 'default'.
+UPDATE "snapshots" SET "device_label" = coalesce(nullif(btrim(left(regexp_replace(lower(btrim("tokens"."name")), '[^a-z0-9._-]+', '-', 'g'), 40), '-._'), ''), 'default') FROM "tokens" WHERE "snapshots"."token_id" = "tokens"."id";--> statement-breakpoint
+ALTER TABLE "snapshots" ADD COLUMN "device_id" uuid;--> statement-breakpoint
+ALTER TABLE "snapshots" ADD CONSTRAINT "snapshots_device_id_agent_installations_id_fk" FOREIGN KEY ("device_id") REFERENCES "public"."agent_installations"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "snapshots_team_user_device_created" ON "snapshots" USING btree ("team_id","user_id","device_label","created_at");

package/drizzle/0009_cultured_bucky.sql

@@ -0,0 +1,15 @@
+CREATE TABLE "error_events" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"at" timestamp with time zone DEFAULT now() NOT NULL,
+	"kind" text DEFAULT 'http' NOT NULL,
+	"method" text,
+	"path" text,
+	"status" integer,
+	"message" text NOT NULL,
+	"stack" text,
+	"user_id" text,
+	"team_slug" text,
+	"request_id" text
+);
+--> statement-breakpoint
+CREATE INDEX "error_events_at" ON "error_events" USING btree ("at" DESC NULLS LAST);

package/drizzle/0010_dazzling_mephisto.sql

@@ -0,0 +1,26 @@
+CREATE TABLE "auth_codes" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"user_id" uuid NOT NULL,
+	"purpose" text NOT NULL,
+	"code_hash" text NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"attempts" integer DEFAULT 0 NOT NULL,
+	"consumed_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "auth_codes" ADD CONSTRAINT "auth_codes_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "auth_codes_user_purpose" ON "auth_codes" USING btree ("user_id","purpose");--> statement-breakpoint
+-- Email becomes the login identity: normalize what is already stored so the
+-- unique index below sees one canonical form (lib/email.normalizeEmail).
+UPDATE "users" SET "email" = lower(btrim("email")) WHERE "email" IS NOT NULL;--> statement-breakpoint
+-- Keep the oldest holder of a duplicate address and clear the others, so the
+-- index applies on any existing database. A cleared account signs in again once
+-- an operator sets its email in /admin/users.
+UPDATE "users" SET "email" = NULL WHERE "id" IN (
+	SELECT "id" FROM (
+		SELECT "id", row_number() OVER (PARTITION BY "email" ORDER BY "created_at", "id") AS rn
+		FROM "users" WHERE "email" IS NOT NULL
+	) dupes WHERE dupes.rn > 1
+);--> statement-breakpoint
+CREATE UNIQUE INDEX "users_email_unique" ON "users" USING btree ("email") WHERE email is not null;

package/drizzle/0011_kind_toxin.sql

@@ -0,0 +1,20 @@
+CREATE TABLE "environment_checks" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"project_id" uuid NOT NULL,
+	"user_id" uuid,
+	"run_id" uuid,
+	"status" text NOT NULL,
+	"fingerprint" text NOT NULL,
+	"baseline_fingerprint" text,
+	"summary" text,
+	"details" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "environment_checks" ADD CONSTRAINT "environment_checks_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "environment_checks" ADD CONSTRAINT "environment_checks_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."projects"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "environment_checks" ADD CONSTRAINT "environment_checks_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "environment_checks" ADD CONSTRAINT "environment_checks_run_id_agent_runs_id_fk" FOREIGN KEY ("run_id") REFERENCES "public"."agent_runs"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "environment_checks_team_created" ON "environment_checks" USING btree ("team_id","created_at");--> statement-breakpoint
+CREATE INDEX "environment_checks_project_created" ON "environment_checks" USING btree ("project_id","created_at");

package/drizzle/0012_ordinary_jamie_braddock.sql

@@ -0,0 +1,31 @@
+CREATE TABLE "notification_prefs" (
+	"user_id" uuid PRIMARY KEY NOT NULL,
+	"session_reply" boolean DEFAULT true NOT NULL,
+	"session_resolved" boolean DEFAULT true NOT NULL,
+	"team_joined" boolean DEFAULT true NOT NULL,
+	"announcements" boolean DEFAULT false NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "notification_queue" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"user_id" uuid NOT NULL,
+	"kind" text NOT NULL,
+	"coalesce_key" text NOT NULL,
+	"team_id" uuid,
+	"session_id" uuid,
+	"since_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"not_before" timestamp with time zone NOT NULL,
+	"status" text DEFAULT 'pending' NOT NULL,
+	"reason" text,
+	"sent_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "notification_prefs" ADD CONSTRAINT "notification_prefs_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "notification_queue" ADD CONSTRAINT "notification_queue_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "notification_queue" ADD CONSTRAINT "notification_queue_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "notification_queue" ADD CONSTRAINT "notification_queue_session_id_debug_sessions_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."debug_sessions"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "notification_queue_pending" ON "notification_queue" USING btree ("user_id","coalesce_key") WHERE status = 'pending';--> statement-breakpoint
+CREATE INDEX "notification_queue_due" ON "notification_queue" USING btree ("status","not_before");--> statement-breakpoint
+CREATE INDEX "notification_queue_user_sent" ON "notification_queue" USING btree ("user_id","sent_at");

package/drizzle/0013_warm_silk_fever.sql

@@ -0,0 +1,7 @@
+CREATE TABLE "rate_counters" (
+	"key" text PRIMARY KEY NOT NULL,
+	"count" integer DEFAULT 0 NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "rate_counters_expires" ON "rate_counters" USING btree ("expires_at");

package/drizzle/0014_talented_squadron_sinister.sql

@@ -0,0 +1,22 @@
+CREATE TABLE "team_integrations" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"provider" text DEFAULT 'github' NOT NULL,
+	"repo" text NOT NULL,
+	"token" text NOT NULL,
+	"comment_on_finish" boolean DEFAULT true NOT NULL,
+	"created_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "agent_installations" ADD COLUMN "role" text;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "attempt_group" text;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "quota_pct" integer;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "quota_state" text;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "quota_resets_at" timestamp with time zone;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "quota_label" text;--> statement-breakpoint
+ALTER TABLE "notification_prefs" ADD COLUMN "webhook_url" text;--> statement-breakpoint
+ALTER TABLE "team_integrations" ADD CONSTRAINT "team_integrations_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "team_integrations" ADD CONSTRAINT "team_integrations_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "team_integrations_team_provider" ON "team_integrations" USING btree ("team_id","provider");

package/drizzle/0015_wild_bill_hollister.sql

@@ -0,0 +1,8 @@
+ALTER TABLE "agent_runs" ADD COLUMN "quota_source" text;--> statement-breakpoint
+ALTER TABLE "messages" ADD COLUMN "payload" jsonb;--> statement-breakpoint
+-- A receipt with no reported hash used to be written as drift, because "drifted
+-- until the agent answers" was the only honest reading while no MCP tool could
+-- answer. update_run can answer now, so drift goes back to meaning a real
+-- deviation and unconfirmed is its own, weaker state. Old rows are recomputed
+-- so the governance page is not still counting silence as breakage.
+UPDATE "policy_receipts" SET "drift" = false WHERE "reported_hash" IS NULL;

package/drizzle/0016_lucky_shooting_star.sql

@@ -0,0 +1,8 @@
+-- The plan ladder grew from two rungs to four, and the middle one was renamed.
+--
+-- `pro` was the only paid id the code ever knew, and the pricing document had
+-- already settled on `team` for it — a name that says who it is for rather than
+-- that it is the expensive one. Renaming it in the enum without renaming it in
+-- the data would silently drop every paying team back to free defaults, because
+-- an unknown plan id resolves to `free`.
+UPDATE "teams" SET "plan" = 'team' WHERE "plan" = 'pro';

package/drizzle/0017_same_blindfold.sql

@@ -0,0 +1,21 @@
+CREATE TABLE "saving_confirmations" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"kind" text NOT NULL,
+	"ref_id" uuid NOT NULL,
+	"run_id" uuid,
+	"confirmed_by" uuid,
+	"helpful" boolean NOT NULL,
+	"changed_behaviour" boolean DEFAULT false NOT NULL,
+	"minutes_saved" integer,
+	"spend_stopped" boolean DEFAULT false NOT NULL,
+	"note" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "teams" ADD COLUMN "hourly_cost_cents" integer;--> statement-breakpoint
+ALTER TABLE "saving_confirmations" ADD CONSTRAINT "saving_confirmations_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "saving_confirmations" ADD CONSTRAINT "saving_confirmations_run_id_agent_runs_id_fk" FOREIGN KEY ("run_id") REFERENCES "public"."agent_runs"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "saving_confirmations" ADD CONSTRAINT "saving_confirmations_confirmed_by_users_id_fk" FOREIGN KEY ("confirmed_by") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "saving_confirmations_ref_idx" ON "saving_confirmations" USING btree ("kind","ref_id");--> statement-breakpoint
+CREATE INDEX "saving_confirmations_team_idx" ON "saving_confirmations" USING btree ("team_id","created_at");

package/drizzle/0018_premium_namora.sql

@@ -0,0 +1,20 @@
+CREATE TABLE "delivery_flows" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"team_id" uuid NOT NULL,
+	"project_id" uuid,
+	"name" text NOT NULL,
+	"template_key" text NOT NULL,
+	"provider" text DEFAULT 'azure-devops' NOT NULL,
+	"document" jsonb NOT NULL,
+	"status" text DEFAULT 'active' NOT NULL,
+	"version" integer DEFAULT 1 NOT NULL,
+	"created_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "team_integrations" ADD COLUMN "config" jsonb;--> statement-breakpoint
+ALTER TABLE "delivery_flows" ADD CONSTRAINT "delivery_flows_team_id_teams_id_fk" FOREIGN KEY ("team_id") REFERENCES "public"."teams"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "delivery_flows" ADD CONSTRAINT "delivery_flows_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."projects"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "delivery_flows" ADD CONSTRAINT "delivery_flows_created_by_users_id_fk" FOREIGN KEY ("created_by") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "delivery_flows_team" ON "delivery_flows" USING btree ("team_id","status");

package/drizzle/0019_brown_dragon_lord.sql

@@ -0,0 +1,6 @@
+ALTER TABLE "agent_runs" ADD COLUMN "pr_number" integer;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "pr_url" text;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "pr_state" text;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "ci_state" text;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "cost_cents" integer;--> statement-breakpoint
+ALTER TABLE "agent_runs" ADD COLUMN "cost_source" text;