@minion-stack/db 0.4.0 → 0.7.0

package/dist/schema/join-requests.js

@@ -0,0 +1,35 @@
+import { sqliteTable, text, integer, index } from 'drizzle-orm/sqlite-core';
+import { user } from './auth/index.js';
+import { organization } from './auth/index.js';
+/**
+ * join_requests — users requesting to join an organization.
+ *
+ * When a user not-yet-in-an-org wants access, they submit a join request.
+ * Org admins review (approve/deny). On approval the user is added as a member.
+ *
+ * Used by:
+ *   - /join page (submission)
+ *   - /api/join-requests/* (listing, counting, review)
+ *   - notifications panel
+ */
+export const joinRequests = sqliteTable('join_requests', {
+    id: text('id').primaryKey(),
+    userId: text('user_id')
+        .notNull()
+        .references(() => user.id, { onDelete: 'cascade' }),
+    orgId: text('org_id')
+        .notNull()
+        .references(() => organization.id, { onDelete: 'cascade' }),
+    email: text('email').notNull(),
+    message: text('message'),
+    status: text('status', { enum: ['pending', 'approved', 'denied'] })
+        .notNull()
+        .default('pending'),
+    reviewedBy: text('reviewed_by'),
+    reviewedAt: integer('reviewed_at'),
+    createdAt: integer('created_at').notNull(),
+}, (t) => [
+    index('idx_join_requests_user').on(t.userId),
+    index('idx_join_requests_org_status').on(t.orgId, t.status),
+]);
+//# sourceMappingURL=join-requests.js.map

package/dist/schema/join-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"join-requests.js","sourceRoot":"","sources":["../../src/schema/join-requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CACrC,eAAe,EACf;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACrD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC;SAClB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;IACxB,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;SAChE,OAAO,EAAE;SACT,OAAO,CAAC,SAAS,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC3C,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;CAC5D,CACF,CAAC"}

package/dist/schema/personal-agents.d.ts

@@ -195,7 +195,7 @@ export declare const personalAgents: import("drizzle-orm/sqlite-core").SQLiteTab
             tableName: "personal_agents";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "pending" | "provisioning" | "active" | "error";
+            data: "active" | "error" | "pending" | "provisioning";
             driverParam: string;
             notNull: true;
             hasDefault: true;

package/dist/schema/reliability-events.d.ts

@@ -81,7 +81,7 @@ export declare const reliabilityEvents: import("drizzle-orm/sqlite-core").SQLite
             tableName: "reliability_events";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "general" | "cron" | "browser" | "timezone" | "auth" | "skill" | "agent" | "gateway";
+            data: "general" | "gateway" | "cron" | "browser" | "timezone" | "auth" | "skill" | "agent";
             driverParam: string;
             notNull: true;
             hasDefault: false;

package/dist/schema/skill-execution-stats.d.ts

@@ -119,7 +119,7 @@ export declare const skillExecutionStats: import("drizzle-orm/sqlite-core").SQLi
             tableName: "skill_execution_stats";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "ok" | "error" | "auth_error" | "timeout";
+            data: "ok" | "auth_error" | "timeout" | "error";
             driverParam: string;
             notNull: true;
             hasDefault: false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minion-stack/db",
-  "version": "0.4.0",
+  "version": "0.7.0",
   "description": "Drizzle ORM schema for the Minion shared database (LibSQL/Turso).",
   "license": "MIT",
   "repository": {

package/src/pg/schema/agent-groups.ts

@@ -0,0 +1,30 @@
+import { pgTable, uuid, text, integer, timestamp, index, primaryKey } from 'drizzle-orm/pg-core';
+import { profiles } from './profiles.js';
+
+/** User-defined agent groupings. Mirrors Turso `agent_groups`. user_id → profile_id, tenant_id → organizations.id. */
+export const agentGroups = pgTable(
+  'agent_groups',
+  {
+    id: text('id').primaryKey(),
+    profileId: uuid('profile_id')
+      .notNull()
+      .references(() => profiles.id, { onDelete: 'cascade' }),
+    tenantId: uuid('tenant_id').notNull(),
+    name: text('name').notNull(),
+    sortOrder: integer('sort_order').default(0),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [index('idx_agent_groups_profile').on(t.profileId, t.tenantId)],
+);
+
+export const agentGroupMembers = pgTable(
+  'agent_group_members',
+  {
+    groupId: text('group_id')
+      .notNull()
+      .references(() => agentGroups.id, { onDelete: 'cascade' }),
+    agentId: text('agent_id').notNull(),
+    sortOrder: integer('sort_order').default(0),
+  },
+  (t) => [primaryKey({ columns: [t.groupId, t.agentId] })],
+);

package/src/pg/schema/agent-memories.ts

@@ -0,0 +1,73 @@
+import { sql } from 'drizzle-orm';
+import {
+  pgTable,
+  uuid,
+  text,
+  real,
+  timestamp,
+  jsonb,
+  vector,
+  index,
+  uniqueIndex,
+} from 'drizzle-orm/pg-core';
+
+/**
+ * Org-scoped agent memory corpus with pgvector embeddings. This is the
+ * system-of-record home for agent memories (migrated off the gateway-local
+ * LanceDB store): semantic memory, session-memory summaries, and captured
+ * facts/preferences/decisions/entities. Both the hub (visualization) and the
+ * flow runner (RAG retrieval) read from here.
+ *
+ * Embedding dimension matches OpenAI `text-embedding-3-small` (1536). If the
+ * embedding model changes, add a new column / table rather than mixing
+ * dimensions in one column.
+ *
+ * RLS (org isolation) is added in the hand-written companion migration
+ * `<ts>_agent_memories_rls.sql` (role app_ledger + app.current_org_id GUC),
+ * mirroring `messages`. Drizzle does not manage roles/policies, the `vector`
+ * extension, or the HNSW index — those live in the companion SQL.
+ */
+export const agentMemories = pgTable(
+  'agent_memories',
+  {
+    id: uuid('id').primaryKey().defaultRandom(),
+    // RLS pivot. Better Auth org id (text), matches messages.org_id convention.
+    orgId: text('org_id').notNull(),
+    // Producing gateway/server id (hub servers.id; text — not a PG uuid).
+    gatewayId: text('gateway_id'),
+    // Memory is agent-scoped; agentId is the gateway agent id (text).
+    agentId: text('agent_id').notNull(),
+    // Optional owner for personal memories (profiles.id); null = agent-global.
+    profileId: uuid('profile_id'),
+    // The memory content (what gets embedded + shown).
+    content: text('content').notNull(),
+    // OpenAI text-embedding-3-small dimension. Nullable so a row can be inserted
+    // before its embedding is computed (async backfill).
+    embedding: vector('embedding', { dimensions: 1536 }),
+    category: text('category', {
+      enum: ['preference', 'fact', 'decision', 'entity', 'other'],
+    })
+      .notNull()
+      .default('other'),
+    // 0..1 salience used for ranking + decay.
+    importance: real('importance').notNull().default(0.5),
+    // Which subsystem produced this row: lancedb | session | manual | kg | ledger.
+    source: text('source').notNull().default('manual'),
+    // Original id in the source system (e.g. LanceDB MemoryEntry.id) — enables
+    // idempotent migration + dedupe.
+    sourceId: text('source_id'),
+    occurredAt: timestamp('occurred_at', { withTimezone: true }),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
+    metadata: jsonb('metadata').notNull().default({}),
+  },
+  (t) => ({
+    // Idempotent migration / cross-source dedupe.
+    sourceUnique: uniqueIndex('agent_memories_source_uniq')
+      .on(t.orgId, t.source, t.sourceId)
+      .where(sql`source_id is not null`),
+    orgAgentIdx: index('agent_memories_org_agent_idx').on(t.orgId, t.agentId),
+    orgCategoryIdx: index('agent_memories_org_category_idx').on(t.orgId, t.category),
+    orgTimeIdx: index('agent_memories_org_time_idx').on(t.orgId, t.createdAt),
+  }),
+);

package/src/pg/schema/builder.ts

@@ -0,0 +1,205 @@
+import { pgTable, uuid, text, integer, real, timestamp, index } from 'drizzle-orm/pg-core';
+import { gateway } from './gateway.js';
+
+/**
+ * Visual builder (Workshop) tables. Mirrors Turso `built_*` / `agent_built_skills`.
+ * FK remap on migration:
+ *   server_id  → gateway_id (gateway.id, matched via gateway.legacy_server_id)
+ *   tenant_id  → organizations.id (plain uuid, soft ref — enforced via RLS)
+ *   created_by → kept as text (loose audit field, may be a legacy user id)
+ *   created_at / updated_at / published_at (integer epoch) → timestamptz
+ */
+
+// ── Built Skills ──────────────────────────────────────────────────────
+export const builtSkills = pgTable(
+  'built_skills',
+  {
+    id: text('id').primaryKey(),
+    name: text('name').notNull(),
+    description: text('description').default(''),
+    emoji: text('emoji').default('📖'),
+    status: text('status', { enum: ['draft', 'published'] })
+      .notNull()
+      .default('draft'),
+    maxCycles: integer('max_cycles').notNull().default(3),
+    gatewayId: uuid('gateway_id').references(() => gateway.id, { onDelete: 'cascade' }),
+    tenantId: uuid('tenant_id'),
+    createdBy: text('created_by'),
+    publishedAt: timestamp('published_at', { withTimezone: true }),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [
+    index('idx_built_skills_gateway').on(t.gatewayId),
+    index('idx_built_skills_tenant').on(t.tenantId),
+  ],
+);
+
+// ── Skill Tool Pool (junction: skill → gateway tool IDs) ─────────────
+export const builtSkillTools = pgTable(
+  'built_skill_tools',
+  {
+    id: text('id').primaryKey(),
+    skillId: text('skill_id')
+      .notNull()
+      .references(() => builtSkills.id, { onDelete: 'cascade' }),
+    toolId: text('tool_id').notNull(),
+  },
+  (t) => [index('idx_built_skill_tools_skill').on(t.skillId)],
+);
+
+// ── Chapters (subprocess nodes in the DAG) ───────────────────────────
+export const builtChapters = pgTable(
+  'built_chapters',
+  {
+    id: text('id').primaryKey(),
+    skillId: text('skill_id')
+      .notNull()
+      .references(() => builtSkills.id, { onDelete: 'cascade' }),
+    type: text('type', { enum: ['chapter', 'condition'] })
+      .notNull()
+      .default('chapter'),
+    name: text('name').notNull(),
+    description: text('description').default(''),
+    guide: text('guide').default(''),
+    context: text('context').default(''),
+    outputDef: text('output_def').default(''),
+    conditionText: text('condition_text').default(''),
+    positionX: real('position_x').notNull().default(0),
+    positionY: real('position_y').notNull().default(0),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [index('idx_built_chapters_skill').on(t.skillId)],
+);
+
+// ── Chapter Edges (DAG connections between chapters) ─────────────────
+export const builtChapterEdges = pgTable(
+  'built_chapter_edges',
+  {
+    id: text('id').primaryKey(),
+    skillId: text('skill_id')
+      .notNull()
+      .references(() => builtSkills.id, { onDelete: 'cascade' }),
+    sourceChapterId: text('source_chapter_id')
+      .notNull()
+      .references(() => builtChapters.id, { onDelete: 'cascade' }),
+    targetChapterId: text('target_chapter_id')
+      .notNull()
+      .references(() => builtChapters.id, { onDelete: 'cascade' }),
+    label: text('label'),
+  },
+  (t) => [index('idx_built_chapter_edges_skill').on(t.skillId)],
+);
+
+// ── Chapter Tools (junction: chapter → subset of skill's tool pool) ──
+export const builtChapterTools = pgTable(
+  'built_chapter_tools',
+  {
+    id: text('id').primaryKey(),
+    chapterId: text('chapter_id')
+      .notNull()
+      .references(() => builtChapters.id, { onDelete: 'cascade' }),
+    toolId: text('tool_id').notNull(),
+  },
+  (t) => [index('idx_built_chapter_tools_chapter').on(t.chapterId)],
+);
+
+// ── Built Agents ─────────────────────────────────────────────────────
+export const builtAgents = pgTable(
+  'built_agents',
+  {
+    id: text('id').primaryKey(),
+    name: text('name').notNull(),
+    emoji: text('emoji').default('🤖'),
+    description: text('description').default(''),
+    model: text('model'),
+    systemPrompt: text('system_prompt').default(''),
+    temperature: real('temperature').default(0.7),
+    maxTokens: integer('max_tokens').default(4096),
+    retryPolicy: text('retry_policy').default('{}'),
+    fallbackAgentId: text('fallback_agent_id'),
+    status: text('status', { enum: ['draft', 'published'] })
+      .notNull()
+      .default('draft'),
+    gatewayId: uuid('gateway_id').references(() => gateway.id, { onDelete: 'cascade' }),
+    tenantId: uuid('tenant_id'),
+    createdBy: text('created_by'),
+    publishedAt: timestamp('published_at', { withTimezone: true }),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [
+    index('idx_built_agents_gateway').on(t.gatewayId),
+    index('idx_built_agents_tenant').on(t.tenantId),
+  ],
+);
+
+// ── Agent Skill Slots (junction: agent → skill with order) ───────────
+export const builtAgentSkills = pgTable(
+  'built_agent_skills',
+  {
+    id: text('id').primaryKey(),
+    agentId: text('agent_id')
+      .notNull()
+      .references(() => builtAgents.id, { onDelete: 'cascade' }),
+    skillId: text('skill_id')
+      .notNull()
+      .references(() => builtSkills.id, { onDelete: 'cascade' }),
+    position: integer('position').notNull().default(0),
+    configOverrides: text('config_overrides').default('{}'),
+  },
+  (t) => [index('idx_built_agent_skills_agent').on(t.agentId)],
+);
+
+// ── Agent Built Skills (junction: gateway agent → built skill) ────────
+export const agentBuiltSkills = pgTable(
+  'agent_built_skills',
+  {
+    id: text('id').primaryKey(),
+    gatewayAgentId: text('gateway_agent_id').notNull(),
+    gatewayId: uuid('gateway_id')
+      .notNull()
+      .references(() => gateway.id, { onDelete: 'cascade' }),
+    tenantId: uuid('tenant_id').notNull(),
+    skillId: text('skill_id')
+      .notNull()
+      .references(() => builtSkills.id, { onDelete: 'cascade' }),
+    position: integer('position').notNull().default(0),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [
+    index('idx_agent_built_skills_gateway_agent').on(t.gatewayAgentId),
+    index('idx_agent_built_skills_tenant').on(t.tenantId),
+  ],
+);
+
+// ── Built Tools (admin-only playground) ──────────────────────────────
+export const builtTools = pgTable(
+  'built_tools',
+  {
+    id: text('id').primaryKey(),
+    name: text('name').notNull(),
+    description: text('description').default(''),
+    scriptCode: text('script_code').default(''),
+    scriptLang: text('script_lang', { enum: ['javascript', 'python', 'bash'] })
+      .notNull()
+      .default('javascript'),
+    envVars: text('env_vars').default('{}'),
+    validationRules: text('validation_rules').default('{}'),
+    executionConfig: text('execution_config').default('{}'),
+    status: text('status', { enum: ['draft', 'published'] })
+      .notNull()
+      .default('draft'),
+    gatewayId: uuid('gateway_id').references(() => gateway.id, { onDelete: 'cascade' }),
+    tenantId: uuid('tenant_id'),
+    createdBy: text('created_by'),
+    publishedAt: timestamp('published_at', { withTimezone: true }),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [
+    index('idx_built_tools_gateway').on(t.gatewayId),
+    index('idx_built_tools_tenant').on(t.tenantId),
+  ],
+);

package/src/pg/schema/channels.ts

@@ -0,0 +1,77 @@
+import { pgTable, uuid, text, timestamp, index, uniqueIndex } from 'drizzle-orm/pg-core';
+import { gateway } from './gateway.js';
+import { profiles } from './profiles.js';
+
+/**
+ * Channel connections + assignments + identity mappings.
+ * Mirrors Turso `channels` / `channel_assignments` / `channel_identities`.
+ * FK remap: server_id → gateway_id (gateway.id via legacy_server_id),
+ * tenant_id → organizations.id (plain uuid soft-ref, RLS-enforced),
+ * user_id → profiles.id (matched via profiles.legacy_user_id).
+ */
+
+export const channels = pgTable(
+  'channels',
+  {
+    id: text('id').primaryKey(),
+    tenantId: uuid('tenant_id').notNull(),
+    gatewayId: uuid('gateway_id')
+      .notNull()
+      .references(() => gateway.id, { onDelete: 'cascade' }),
+    type: text('type', { enum: ['discord', 'whatsapp', 'telegram'] }).notNull(),
+    label: text('label').notNull(),
+    credentials: text('credentials').notNull().default(''),
+    credentialsIv: text('credentials_iv').notNull().default(''),
+    credentialsMeta: text('credentials_meta').notNull().default('{}'),
+    status: text('status', { enum: ['active', 'inactive', 'pairing'] })
+      .notNull()
+      .default('inactive'),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [
+    index('idx_channels_tenant_gateway').on(t.tenantId, t.gatewayId),
+    uniqueIndex('channels_uniq_type_label').on(t.tenantId, t.gatewayId, t.type, t.label),
+  ],
+);
+
+export const channelAssignments = pgTable(
+  'channel_assignments',
+  {
+    id: text('id').primaryKey(),
+    tenantId: uuid('tenant_id').notNull(),
+    channelId: text('channel_id')
+      .notNull()
+      .references(() => channels.id, { onDelete: 'cascade' }),
+    targetType: text('target_type', { enum: ['user', 'session'] }).notNull(),
+    targetId: text('target_id').notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [
+    index('idx_channel_assign_channel').on(t.channelId),
+    uniqueIndex('channel_assign_uniq').on(t.channelId, t.targetType, t.targetId),
+  ],
+);
+
+/**
+ * Maps channel sender IDs (e.g. telegram:12345) to hub users.
+ * Used by the gateway to resolve user identity from channel messages.
+ */
+export const channelIdentities = pgTable(
+  'channel_identities',
+  {
+    id: text('id').primaryKey(),
+    userId: uuid('user_id')
+      .notNull()
+      .references(() => profiles.id, { onDelete: 'cascade' }),
+    channel: text('channel').notNull(),
+    channelUserId: text('channel_user_id').notNull(),
+    displayName: text('display_name'),
+    verifiedAt: timestamp('verified_at', { withTimezone: true }),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [
+    uniqueIndex('idx_channel_identity_unique').on(t.channel, t.channelUserId),
+    index('idx_channel_identity_user').on(t.userId),
+  ],
+);

package/src/pg/schema/chat-messages.ts

@@ -0,0 +1,30 @@
+import { pgTable, uuid, text, bigserial, timestamp, index } from 'drizzle-orm/pg-core';
+import { gateway } from './gateway.js';
+
+/**
+ * Persisted chat transcript. Mirrors Turso `chat_messages`.
+ * FK remap: server_id → gateway_id, tenant_id → organizations.id (soft-ref).
+ * id: SQLite autoincrement integer → Postgres bigserial.
+ * timestamp / created_at: integer epoch (ms) → timestamptz.
+ */
+export const chatMessages = pgTable(
+  'chat_messages',
+  {
+    id: bigserial('id', { mode: 'number' }).primaryKey(),
+    tenantId: uuid('tenant_id').notNull(),
+    gatewayId: uuid('gateway_id')
+      .notNull()
+      .references(() => gateway.id, { onDelete: 'cascade' }),
+    agentId: text('agent_id').notNull(),
+    sessionKey: text('session_key').notNull(),
+    role: text('role', { enum: ['user', 'assistant'] }).notNull(),
+    content: text('content').notNull(),
+    runId: text('run_id'),
+    timestamp: timestamp('timestamp', { withTimezone: true }).notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [
+    index('idx_chat_tenant').on(t.tenantId),
+    index('idx_chat_by_agent').on(t.agentId, t.sessionKey, t.timestamp),
+  ],
+);

package/src/pg/schema/device-identities.ts

@@ -0,0 +1,11 @@
+import { pgTable, uuid, text, timestamp } from 'drizzle-orm/pg-core';
+
+/** Per-tenant device keypair. Mirrors Turso `device_identities`. tenant_id → organizations.id. */
+export const deviceIdentities = pgTable('device_identities', {
+  id: text('id').primaryKey(),
+  tenantId: uuid('tenant_id').notNull().unique(),
+  deviceId: text('device_id').notNull(),
+  publicKeyPem: text('public_key_pem').notNull(),
+  privateKeyPem: text('private_key_pem').notNull(),
+  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+});

package/src/pg/schema/files.ts

@@ -0,0 +1,19 @@
+import { pgTable, uuid, text, bigint, timestamp, index } from 'drizzle-orm/pg-core';
+import { profiles } from './profiles.js';
+
+/** B2-backed file records. Mirrors Turso `files`. tenant_id → organizations.id, uploaded_by → profiles.id. */
+export const files = pgTable(
+  'files',
+  {
+    id: text('id').primaryKey(),
+    tenantId: uuid('tenant_id').notNull(),
+    uploadedBy: uuid('uploaded_by').references(() => profiles.id, { onDelete: 'set null' }),
+    b2FileKey: text('b2_file_key').notNull(),
+    fileName: text('file_name').notNull(),
+    contentType: text('content_type').notNull(),
+    sizeBytes: bigint('size_bytes', { mode: 'number' }).notNull(),
+    category: text('category').notNull().default('general'),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [index('idx_files_tenant').on(t.tenantId)],
+);

package/src/pg/schema/index.ts

@@ -12,3 +12,41 @@ export type {
 } from '../identity-mapper.js';
 export { sealSecret, openSecret } from '../crypto.js';
 export { gateway, userGateway } from './gateway.js';
+export { messages } from './messages.js';
+// App tables migrated off Turso (telemetry/app split) — see
+// docs/superpowers/specs/2026-06-05-turso-supabase-split-migration.md
+export { userPreferences } from './user-preferences.js';
+export { personalAgents } from './personal-agents.js';
+export { settings } from './settings.js';
+export { workshopSaves } from './workshop-saves.js';
+export { deviceIdentities } from './device-identities.js';
+export { files } from './files.js';
+export { agentGroups, agentGroupMembers } from './agent-groups.js';
+export { marketplaceAgents, marketplaceInstalls } from './marketplace.js';
+export {
+  builtSkills,
+  builtSkillTools,
+  builtChapters,
+  builtChapterEdges,
+  builtChapterTools,
+  builtAgents,
+  builtAgentSkills,
+  agentBuiltSkills,
+  builtTools,
+} from './builder.js';
+export { channels, channelAssignments, channelIdentities } from './channels.js';
+export { sessions, sessionTasks } from './sessions.js';
+export { missions, tasks } from './missions.js';
+export { chatMessages } from './chat-messages.js';
+export { userAgents } from './user-agents.js';
+export { skills, skillExecutionStats } from './skills.js';
+export {
+  serverBackups,
+  serverProvisionConfigs,
+  backupConfigs,
+  configSnapshots,
+} from './server-ops.js';
+export { workspaceMembership } from './workspace-membership.js';
+export type { WorkspaceMembership, NewWorkspaceMembership } from './workspace-membership.js';
+// Org-scoped agent memory corpus (pgvector) — RAG retrieval + hub visualization.
+export { agentMemories } from './agent-memories.js';

package/src/pg/schema/marketplace.ts

@@ -0,0 +1,47 @@
+import { pgTable, uuid, text, integer, timestamp, index } from 'drizzle-orm/pg-core';
+import { gateway } from './gateway.js';
+
+/** Marketplace agent catalog. Mirrors Turso `marketplace_agents`. */
+export const marketplaceAgents = pgTable('marketplace_agents', {
+  id: text('id').primaryKey(),
+  name: text('name').notNull(),
+  role: text('role').notNull(),
+  category: text('category').notNull(),
+  tags: text('tags').notNull(),
+  description: text('description').notNull(),
+  catchphrase: text('catchphrase'),
+  version: text('version').notNull(),
+  model: text('model'),
+  avatarSeed: text('avatar_seed').notNull(),
+  githubPath: text('github_path').notNull(),
+  soulMd: text('soul_md'),
+  identityMd: text('identity_md'),
+  userMd: text('user_md'),
+  contextMd: text('context_md'),
+  skillsMd: text('skills_md'),
+  installCount: integer('install_count').default(0),
+  syncedAt: timestamp('synced_at', { withTimezone: true }).notNull().defaultNow(),
+  filesLoadedAt: timestamp('files_loaded_at', { withTimezone: true }),
+  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+  updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
+});
+
+/** Per-tenant marketplace installs. tenant_id → organizations.id, server_id → gateway.id. */
+export const marketplaceInstalls = pgTable(
+  'marketplace_installs',
+  {
+    id: text('id').primaryKey(),
+    tenantId: uuid('tenant_id').notNull(),
+    agentId: text('agent_id')
+      .notNull()
+      .references(() => marketplaceAgents.id, { onDelete: 'cascade' }),
+    gatewayId: uuid('gateway_id')
+      .notNull()
+      .references(() => gateway.id, { onDelete: 'cascade' }),
+    installedAt: timestamp('installed_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => [
+    index('idx_marketplace_installs_tenant').on(t.tenantId),
+    index('idx_marketplace_installs_agent').on(t.agentId),
+  ],
+);