@obsunified/collector 2.0.1

package/src/migrations/031_agent_action_graph.sql

@@ -0,0 +1,154 @@
+-- RFC 0010: Agent Action Graph Spine Schema (Phase 1)
+--
+-- Creates the action spine and detail leaf tables, and extends existing tables 
+-- to support higher-level causal action tracing for agentic systems.
+
+-- 1. General Action Spine
+CREATE TABLE IF NOT EXISTS actions (
+  id TEXT PRIMARY KEY,                       -- Unique ULID / ID for this action
+  project_id TEXT NOT NULL,                  -- Project scope
+  root_action_id TEXT NOT NULL,              -- ULID of the root causal action
+  caused_by_action_id TEXT,                  -- ULID of the parent causal action
+  actor_type TEXT NOT NULL,                  -- human, agent, service, workflow, system
+  actor_id TEXT,                             -- ID of the actor initiating this action
+  action_kind TEXT NOT NULL,                 -- agent.run, agent.step, llm.call, tool.call, retrieval, eval, etc.
+  name TEXT,                                 -- Human readable name
+  status TEXT NOT NULL DEFAULT 'ok',         -- ok, error
+  started_at TEXT NOT NULL,                  -- ISO8601 timestamp
+  ended_at TEXT,                             -- ISO8601 timestamp
+  duration_ms INTEGER,                       -- Execution duration
+  trace_id TEXT,                             -- Optional linked OTel trace ID
+  span_id TEXT,                              -- Optional linked OTel span ID
+  session_id TEXT,                           -- Optional browser/user session
+  interaction_id TEXT,                       -- Optional click-scoped correlation key
+  user_id TEXT,                              -- Optional user ID
+  agent_run_id TEXT,                         -- Optional linked Agent Run ID
+  step_id TEXT,                              -- Optional linked Step ID
+  tool_call_id TEXT,                         -- Optional linked Tool Call ID
+  prompt_version TEXT,                       -- Denormalized prompt version
+  model_name TEXT,                           -- Denormalized LLM model name
+  provider TEXT,                             -- Denormalized LLM provider name
+  total_cost_usd REAL,                       -- Denormalized token/tool cost
+  attrs_json TEXT                            -- Arbitrary JSON key-value store for plugin/custom data
+);
+
+-- Indices for fast spine traversal
+CREATE INDEX IF NOT EXISTS idx_actions_project_root
+  ON actions (project_id, root_action_id, started_at);
+
+CREATE INDEX IF NOT EXISTS idx_actions_project_actor
+  ON actions (project_id, actor_type, actor_id, started_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_actions_project_trace
+  ON actions (project_id, trace_id)
+  WHERE trace_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_actions_project_interaction
+  ON actions (project_id, interaction_id)
+  WHERE interaction_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_actions_project_agent_run
+  ON actions (project_id, agent_run_id, started_at)
+  WHERE agent_run_id IS NOT NULL;
+
+
+-- 2. Detail Leaf: Agent Runs
+CREATE TABLE IF NOT EXISTS agent_runs (
+  id TEXT PRIMARY KEY,                       -- Matches actions.id for the run's root action
+  project_id TEXT NOT NULL,
+  agent_id TEXT NOT NULL,                    -- Stable identifier of the agent template/codebase
+  agent_name TEXT NOT NULL,                  -- Human-readable name of the agent
+  agent_version TEXT NOT NULL,               -- Version of agent configuration/strategy
+  goal TEXT,                                 -- High-level prompt or goal of the run
+  outcome TEXT,                              -- Final answer, result summary, or output
+  autonomy_level TEXT NOT NULL,              -- read_only, suggested_action, human_approved_write, autonomous_write, blocked_by_policy
+  status TEXT NOT NULL DEFAULT 'running',    -- running, success, failed
+  error_message TEXT,                        -- Optional error string
+  total_cost_usd REAL DEFAULT 0.0,
+  total_duration_ms INTEGER,
+  metadata_json TEXT                         -- Opt-in debug metadata
+);
+
+CREATE INDEX IF NOT EXISTS idx_agent_runs_project_agent
+  ON agent_runs (project_id, agent_id, status);
+
+
+-- 3. Detail Leaf: Tool Calls
+CREATE TABLE IF NOT EXISTS tool_calls (
+  id TEXT PRIMARY KEY,                       -- Unique identifier (often matches OTel span_id or actions.id)
+  action_id TEXT NOT NULL,                   -- Links back to actions.id
+  project_id TEXT NOT NULL,
+  tool_name TEXT NOT NULL,                   -- Named tool (e.g. sql_query, fetch_invoice)
+  args_hash TEXT NOT NULL,                   -- SHA256 of args for privacy-preserving cache key
+  result_hash TEXT NOT NULL,                 -- SHA256 of result for parity verification
+  error_type TEXT,                           -- Optional error classifier (e.g. timeout, auth)
+  side_effect INTEGER NOT NULL DEFAULT 0,    -- Boolean (0/1): does this tool mutate state?
+  approval_state TEXT,                       -- suggested, human_approved, bypassed, blocked
+  args_redacted TEXT,                        -- Opt-in redacted parameters JSON
+  result_redacted TEXT                       -- Opt-in redacted result JSON
+);
+
+CREATE INDEX IF NOT EXISTS idx_tool_calls_action
+  ON tool_calls (action_id);
+
+CREATE INDEX IF NOT EXISTS idx_tool_calls_name
+  ON tool_calls (project_id, tool_name);
+
+
+-- 4. Detail Leaf: Retrieval Events
+CREATE TABLE IF NOT EXISTS retrieval_events (
+  id TEXT PRIMARY KEY,
+  action_id TEXT NOT NULL,                   -- Links back to actions.id
+  project_id TEXT NOT NULL,
+  retriever_name TEXT NOT NULL,              -- Name of vector DB or retriever system
+  query_hash TEXT NOT NULL,                  -- SHA-256 of the retrieval query string
+  documents_json TEXT,                       -- Array of { docId, score, sourceId, snippet_preview }
+  total_results INTEGER NOT NULL DEFAULT 0,
+  max_relevance_score REAL,
+  duration_ms INTEGER
+);
+
+CREATE INDEX IF NOT EXISTS idx_retrieval_events_action
+  ON retrieval_events (action_id);
+
+
+-- 5. Detail Leaf: Evaluation & Guardrail Results
+CREATE TABLE IF NOT EXISTS eval_results (
+  id TEXT PRIMARY KEY,
+  action_id TEXT NOT NULL,                   -- Links back to actions.id
+  project_id TEXT NOT NULL,
+  evaluator_name TEXT NOT NULL,              -- Name of the evaluator or guardrail (e.g. groundedness)
+  evaluator_version TEXT NOT NULL,           -- Grader version
+  score REAL,                                -- Numeric metric between 0.0 and 1.0
+  passed INTEGER NOT NULL DEFAULT 1,         -- Boolean (0/1) for binary policy gates
+  reasoning TEXT,                            -- Explanation or chain-of-thought of the grader
+  rubric_json TEXT                           -- Optional grader schema or rubric details
+);
+
+CREATE INDEX IF NOT EXISTS idx_eval_results_action
+  ON eval_results (action_id);
+
+
+-- 6. Detail Leaf: Generated Artifacts
+CREATE TABLE IF NOT EXISTS artifacts (
+  id TEXT PRIMARY KEY,
+  action_id TEXT NOT NULL,                   -- Links back to actions.id
+  project_id TEXT NOT NULL,
+  artifact_name TEXT NOT NULL,               -- e.g. "invoice-pdf"
+  artifact_type TEXT NOT NULL,               -- file, patch, text, message, data
+  storage_ref TEXT,                          -- S3 / Blob reference
+  size_bytes INTEGER,
+  sha256_hash TEXT,
+  content_preview TEXT                       -- Redacted preview or summary
+);
+
+CREATE INDEX IF NOT EXISTS idx_artifacts_action
+  ON artifacts (action_id);
+
+
+-- 7. Extend Existing AI Span Payloads Table
+ALTER TABLE ai_span_payloads ADD COLUMN action_id TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_ai_payloads_action
+  ON ai_span_payloads (project_id, action_id)
+  WHERE action_id IS NOT NULL;

package/src/migrations/032_payload_capture_flags.sql

@@ -0,0 +1,8 @@
+ALTER TABLE projects
+  ADD COLUMN payload_capture_enabled INTEGER NOT NULL DEFAULT 0;
+
+ALTER TABLE ai_span_payloads
+  ADD COLUMN input_hash TEXT;
+
+ALTER TABLE ai_span_payloads
+  ADD COLUMN output_hash TEXT;

package/src/migrations/033_eval_cases.sql

@@ -0,0 +1,52 @@
+-- RFC 0010 Phase 7: production-to-eval case persistence.
+--
+-- Eval cases are reusable fixtures captured from production telemetry. They
+-- retain stable source links back to the production entity that created the
+-- case while keeping prompts/payloads in explicitly redacted JSON fields.
+
+CREATE TABLE IF NOT EXISTS eval_cases (
+  id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL,
+  source_entity_type TEXT NOT NULL,
+  source_entity_id TEXT NOT NULL,
+  source_agent_run_id TEXT,
+  source_action_id TEXT,
+  source_ai_call_id TEXT,
+  source_tool_call_id TEXT,
+  source_trace_id TEXT,
+  source_span_id TEXT,
+  name TEXT NOT NULL,
+  expected_outcome TEXT,
+  rubric_json TEXT,
+  redacted_prompt_json TEXT,
+  reference_payload_json TEXT,
+  metadata_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_eval_cases_project_created
+  ON eval_cases (project_id, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_eval_cases_project_source
+  ON eval_cases (project_id, source_entity_type, source_entity_id, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_eval_cases_agent_run
+  ON eval_cases (project_id, source_agent_run_id)
+  WHERE source_agent_run_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_eval_cases_action
+  ON eval_cases (project_id, source_action_id)
+  WHERE source_action_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_eval_cases_ai_call
+  ON eval_cases (project_id, source_ai_call_id)
+  WHERE source_ai_call_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_eval_cases_tool_call
+  ON eval_cases (project_id, source_tool_call_id)
+  WHERE source_tool_call_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_eval_cases_trace
+  ON eval_cases (project_id, source_trace_id)
+  WHERE source_trace_id IS NOT NULL;

package/src/migrations/034_eval_case_results.sql

@@ -0,0 +1,23 @@
+-- RFC 0010 Phase 7: reusable eval-case run results.
+--
+-- Results are produced by offline or CI evaluators against a saved production
+-- eval case. They intentionally store compact comparison metadata rather than
+-- raw prompts or completions.
+
+CREATE TABLE IF NOT EXISTS eval_case_results (
+  id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL,
+  eval_case_id TEXT NOT NULL,
+  run_id TEXT NOT NULL,
+  passed INTEGER NOT NULL,
+  score REAL,
+  actual_outcome TEXT,
+  details_json TEXT,
+  created_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_eval_case_results_case_created
+  ON eval_case_results (project_id, eval_case_id, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_eval_case_results_run
+  ON eval_case_results (project_id, run_id);

package/src/migrations/035_metric_exemplars.sql

@@ -0,0 +1,33 @@
+-- Reverse index for OTLP metric exemplars.
+--
+-- metric_point.exemplars_json preserves the raw exemplar payload on the point,
+-- but investigation flows need trace/span lookup without scanning JSON blobs.
+-- This table turns exemplars into first-class correlation edges.
+
+CREATE TABLE IF NOT EXISTS metric_exemplars (
+  id TEXT PRIMARY KEY,
+  point_id TEXT NOT NULL,
+  series_id TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  metric_name TEXT NOT NULL,
+  service_name TEXT,
+  trace_id TEXT,
+  span_id TEXT,
+  ts_ns TEXT NOT NULL,
+  value REAL NOT NULL,
+  received_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  FOREIGN KEY (point_id) REFERENCES metric_point(id),
+  FOREIGN KEY (series_id) REFERENCES metric_series(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_metric_exemplars_project_trace
+  ON metric_exemplars (project_id, trace_id, ts_ns)
+  WHERE trace_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_metric_exemplars_project_span
+  ON metric_exemplars (project_id, trace_id, span_id, ts_ns)
+  WHERE trace_id IS NOT NULL AND span_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_metric_exemplars_expires
+  ON metric_exemplars (expires_at);

package/src/migrations/036_trace_instrumentation_gaps.sql

@@ -0,0 +1,19 @@
+-- SQLite/D1 migration 036_trace_instrumentation_gaps.sql
+-- Computes and persists uninstrumented trace gaps during span ingestion.
+
+CREATE TABLE IF NOT EXISTS trace_instrumentation_gaps (
+  trace_id TEXT NOT NULL,
+  parent_span_id TEXT NOT NULL,
+  parent_service_name TEXT NOT NULL,
+  parent_span_name TEXT NOT NULL,
+  offset_ms INTEGER NOT NULL,
+  duration_ms INTEGER NOT NULL,
+  ratio_of_parent REAL NOT NULL,
+  child_span_count INTEGER NOT NULL,
+  async_parent INTEGER NOT NULL, -- 0/1 boolean (async parent gap)
+  recommendation TEXT NOT NULL,
+  PRIMARY KEY (trace_id, parent_span_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_trace_gaps_duration 
+  ON trace_instrumentation_gaps (duration_ms DESC);

package/src/migrations/037_eval_runs.sql

@@ -0,0 +1,37 @@
+-- RFC 0010 Phase 7: durable eval runner records.
+--
+-- Eval runs group one or more eval case results under a candidate agent,
+-- prompt, and model configuration so production behavior can be compared with
+-- attempted fixes across repeatable runs.
+
+CREATE TABLE IF NOT EXISTS eval_runs (
+  id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL,
+  eval_case_id TEXT,
+  candidate_agent_id TEXT,
+  candidate_agent_version TEXT,
+  candidate_prompt_id TEXT,
+  candidate_prompt_version TEXT,
+  candidate_model_provider TEXT,
+  candidate_model TEXT,
+  candidate_model_version TEXT,
+  status TEXT NOT NULL,
+  started_at TEXT,
+  ended_at TEXT,
+  total_count INTEGER NOT NULL DEFAULT 0,
+  pass_count INTEGER NOT NULL DEFAULT 0,
+  fail_count INTEGER NOT NULL DEFAULT 0,
+  average_score REAL,
+  metadata_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_eval_runs_project_created
+  ON eval_runs (project_id, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_eval_runs_case_created
+  ON eval_runs (project_id, eval_case_id, created_at DESC)
+  WHERE eval_case_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_eval_runs_project_status_created
+  ON eval_runs (project_id, status, created_at DESC);

package/src/migrations/038_tool_call_evidence.sql

@@ -0,0 +1,11 @@
+-- AI debugging evidence for side-effecting tool calls.
+--
+-- These fields are opt-in evidence channels. They intentionally store only
+-- explicit audit/diff envelopes emitted by instrumentation, not raw tool
+-- arguments, results, or transport metadata.
+
+ALTER TABLE tool_calls ADD COLUMN mcp_audit_json TEXT;
+ALTER TABLE tool_calls ADD COLUMN mutation_before_json TEXT;
+ALTER TABLE tool_calls ADD COLUMN mutation_after_json TEXT;
+ALTER TABLE tool_calls ADD COLUMN mutation_diff_json TEXT;
+ALTER TABLE tool_calls ADD COLUMN mutation_artifact_id TEXT;

package/src/migrations/039_drop_trace_instrumentation_gaps.sql

@@ -0,0 +1,11 @@
+-- Drop the materialized trace instrumentation gaps table.
+--
+-- Trace instrumentation gaps are now computed lazily at read time from the
+-- trace's spans (see `getTelemetryTraceGaps` in lib/store/trace-detail.ts),
+-- rather than being materialized on the ingest hot path. The table and its
+-- index are therefore unused: nothing writes to them, and reads compute gaps
+-- on demand. Dropping the index first is redundant on SQLite (DROP TABLE
+-- removes it) but kept explicit for clarity and Postgres parity.
+
+DROP INDEX IF EXISTS idx_trace_gaps_duration;
+DROP TABLE IF EXISTS trace_instrumentation_gaps;

package/src/migrations/040_evidence_retrieval_refs.sql

@@ -0,0 +1,50 @@
+-- RFC 0011 — materialized evidence retrieval refs and expansion telemetry.
+--
+-- Encoded refs remain portable handles. This table gives the product a durable
+-- view of which refs were issued and which ones agents actually expand.
+
+CREATE TABLE IF NOT EXISTS evidence_retrieval_refs (
+  ref_id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  anchor_kind TEXT NOT NULL,
+  anchor_id TEXT NOT NULL,
+  source TEXT NOT NULL,
+  query_json TEXT,
+  compacted_from_json TEXT,
+  returned_json TEXT,
+  issued_at TEXT NOT NULL DEFAULT (datetime('now')),
+  last_seen_at TEXT NOT NULL DEFAULT (datetime('now')),
+  expires_at TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_evidence_refs_project_seen
+  ON evidence_retrieval_refs (project_id, last_seen_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_evidence_refs_project_kind
+  ON evidence_retrieval_refs (project_id, kind, last_seen_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_evidence_refs_project_anchor
+  ON evidence_retrieval_refs (project_id, anchor_kind, anchor_id);
+
+CREATE TABLE IF NOT EXISTS evidence_ref_expansions (
+  id TEXT PRIMARY KEY,
+  ref_id TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  source TEXT,
+  operation TEXT NOT NULL,
+  result_status TEXT NOT NULL,
+  limit_value INTEGER,
+  query_text TEXT,
+  expanded_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_evidence_expansions_project_time
+  ON evidence_ref_expansions (project_id, expanded_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_evidence_expansions_project_ref
+  ON evidence_ref_expansions (project_id, ref_id, expanded_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_evidence_expansions_project_kind
+  ON evidence_ref_expansions (project_id, kind, expanded_at DESC);

package/src/migrations-postgres/001_telemetry_spans.sql

@@ -0,0 +1,33 @@
+CREATE TABLE IF NOT EXISTS telemetry_spans (
+  trace_id TEXT NOT NULL,
+  span_id TEXT NOT NULL,
+  parent_span_id TEXT,
+  service_name TEXT,
+  scope_name TEXT,
+  scope_version TEXT,
+  span_name TEXT NOT NULL,
+  span_kind BIGINT,
+  status_code BIGINT,
+  status_message TEXT,
+  start_time TEXT NOT NULL,
+  end_time TEXT NOT NULL,
+  duration_ms DOUBLE PRECISION NOT NULL,
+  attributes_json JSONB,
+  resource_attributes_json JSONB,
+  events_json JSONB,
+  links_json JSONB,
+  received_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  PRIMARY KEY (trace_id, span_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_spans_received_at ON telemetry_spans (received_at DESC);
+CREATE INDEX IF NOT EXISTS idx_spans_trace_id ON telemetry_spans (trace_id);
+CREATE INDEX IF NOT EXISTS idx_spans_service ON telemetry_spans (service_name);
+CREATE INDEX IF NOT EXISTS idx_spans_status ON telemetry_spans (status_code);
+CREATE INDEX IF NOT EXISTS idx_spans_root ON telemetry_spans (parent_span_id, received_at DESC);
+
+-- Postgres-only: GIN index on attributes_json enables fast JSONB
+-- containment queries used by the dashboard's attribute filter.
+CREATE INDEX IF NOT EXISTS idx_spans_attributes_gin
+  ON telemetry_spans USING GIN (attributes_json);

package/src/migrations-postgres/002_usage_events.sql

@@ -0,0 +1,24 @@
+CREATE TABLE IF NOT EXISTS usage_events (
+  event_id TEXT PRIMARY KEY,
+  session_id TEXT NOT NULL,
+  visitor_id TEXT NOT NULL,
+  event_type TEXT NOT NULL,
+  event_name TEXT NOT NULL,
+  page_path TEXT,
+  page_title TEXT,
+  referrer TEXT,
+  severity TEXT,
+  source TEXT,
+  context_json JSONB NOT NULL,
+  properties_json JSONB NOT NULL,
+  user_agent TEXT,
+  occurred_at TEXT NOT NULL,
+  received_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_usage_received ON usage_events (received_at DESC);
+CREATE INDEX IF NOT EXISTS idx_usage_session ON usage_events (session_id);
+CREATE INDEX IF NOT EXISTS idx_usage_visitor ON usage_events (visitor_id);
+CREATE INDEX IF NOT EXISTS idx_usage_path ON usage_events (page_path);
+CREATE INDEX IF NOT EXISTS idx_usage_type ON usage_events (event_type);

package/src/migrations-postgres/003_usage_analytics_columns.sql

@@ -0,0 +1,13 @@
+ALTER TABLE usage_events ADD COLUMN IF NOT EXISTS country TEXT;
+ALTER TABLE usage_events ADD COLUMN IF NOT EXISTS browser TEXT;
+ALTER TABLE usage_events ADD COLUMN IF NOT EXISTS os TEXT;
+ALTER TABLE usage_events ADD COLUMN IF NOT EXISTS device_type TEXT;
+ALTER TABLE usage_events ADD COLUMN IF NOT EXISTS is_bot BOOLEAN DEFAULT FALSE;
+ALTER TABLE usage_events ADD COLUMN IF NOT EXISTS utm_source TEXT;
+ALTER TABLE usage_events ADD COLUMN IF NOT EXISTS utm_medium TEXT;
+ALTER TABLE usage_events ADD COLUMN IF NOT EXISTS utm_campaign TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_usage_country ON usage_events (country);
+CREATE INDEX IF NOT EXISTS idx_usage_bot ON usage_events (is_bot);
+CREATE INDEX IF NOT EXISTS idx_usage_browser ON usage_events (browser);
+CREATE INDEX IF NOT EXISTS idx_usage_utm ON usage_events (utm_source);

package/src/migrations-postgres/004_logs.sql

@@ -0,0 +1,19 @@
+CREATE TABLE IF NOT EXISTS logs (
+  log_id TEXT PRIMARY KEY,
+  trace_id TEXT,
+  span_id TEXT,
+  service_name TEXT,
+  severity TEXT NOT NULL,
+  severity_number BIGINT NOT NULL,
+  logger_name TEXT,
+  message TEXT NOT NULL,
+  attributes_json JSONB,
+  occurred_at TEXT NOT NULL,
+  received_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_logs_received ON logs (received_at DESC);
+CREATE INDEX IF NOT EXISTS idx_logs_trace ON logs (trace_id);
+CREATE INDEX IF NOT EXISTS idx_logs_service ON logs (service_name);
+CREATE INDEX IF NOT EXISTS idx_logs_severity ON logs (severity_number);

package/src/migrations-postgres/005_ai_calls.sql

@@ -0,0 +1,25 @@
+CREATE TABLE IF NOT EXISTS ai_calls (
+  call_id TEXT PRIMARY KEY,
+  trace_id TEXT,
+  span_id TEXT,
+  service_name TEXT,
+  model_name TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  call_type TEXT NOT NULL, -- 'text_completion', 'chat', 'prompt_to_image', 'embedding'
+  request_json JSONB,  -- raw prompt/messages or image configuration
+  response_json JSONB, -- raw completion text or image URLs
+  prompt_tokens BIGINT,
+  completion_tokens BIGINT,
+  total_cost_usd DOUBLE PRECISION,
+  latency_ms DOUBLE PRECISION,
+  is_error BOOLEAN DEFAULT FALSE,
+  error_message TEXT,
+  occurred_at TEXT NOT NULL,
+  received_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_aicalls_received ON ai_calls (received_at DESC);
+CREATE INDEX IF NOT EXISTS idx_aicalls_trace ON ai_calls (trace_id);
+CREATE INDEX IF NOT EXISTS idx_aicalls_service ON ai_calls (service_name);
+CREATE INDEX IF NOT EXISTS idx_aicalls_model ON ai_calls (model_name);

package/src/migrations-postgres/006_user_profiles.sql

@@ -0,0 +1,11 @@
+CREATE TABLE IF NOT EXISTS user_profiles (
+  user_id TEXT PRIMARY KEY,
+  visitor_id TEXT NOT NULL,
+  email TEXT,
+  name TEXT,
+  properties_json JSONB, -- custom traits (plan_tier, role)
+  first_seen_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_user_visitor ON user_profiles (visitor_id);

package/src/migrations-postgres/007_session_replay_metadata.sql

@@ -0,0 +1,10 @@
+CREATE TABLE IF NOT EXISTS session_replay_metadata (
+  session_id TEXT PRIMARY KEY,
+  visitor_id TEXT NOT NULL,
+  first_chunk_at TEXT NOT NULL,
+  last_chunk_at TEXT NOT NULL,
+  chunk_count BIGINT DEFAULT 0,
+  events_count BIGINT DEFAULT 0
+);
+
+CREATE INDEX IF NOT EXISTS idx_replay_visitor ON session_replay_metadata (visitor_id);

package/src/migrations-postgres/008_session_replay_storage_bytes.sql

@@ -0,0 +1,2 @@
+ALTER TABLE session_replay_metadata
+  ADD COLUMN IF NOT EXISTS storage_bytes BIGINT NOT NULL DEFAULT 0;

package/src/migrations-postgres/009_projects_and_keys.sql

@@ -0,0 +1,25 @@
+CREATE TABLE IF NOT EXISTS projects (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  slug TEXT NOT NULL UNIQUE,
+  created_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_projects_slug ON projects (slug);
+
+CREATE TABLE IF NOT EXISTS ingest_keys (
+  id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL,
+  -- D1 used TEXT for the bcrypt hash. Postgres stores it as BYTEA so
+  -- the column-comparison code in ingest-auth.ts (constant-time
+  -- compare via bytes) doesn't pay a UTF-8 decode cost on every check.
+  key_hash BYTEA NOT NULL UNIQUE,
+  key_prefix TEXT NOT NULL,
+  name TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  revoked_at TEXT,
+  FOREIGN KEY (project_id) REFERENCES projects (id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_ingest_keys_project ON ingest_keys (project_id, revoked_at);
+CREATE INDEX IF NOT EXISTS idx_ingest_keys_hash ON ingest_keys (key_hash);

package/src/migrations-postgres/010_signal_project_id.sql

@@ -0,0 +1,18 @@
+-- Add project_id to every signal table. DEFAULT 'default' backfills
+-- existing rows so multi-tenant queries continue to work with a
+-- sentinel project for un-tagged emissions.
+
+ALTER TABLE telemetry_spans         ADD COLUMN IF NOT EXISTS project_id TEXT NOT NULL DEFAULT 'default';
+ALTER TABLE logs                    ADD COLUMN IF NOT EXISTS project_id TEXT NOT NULL DEFAULT 'default';
+ALTER TABLE usage_events            ADD COLUMN IF NOT EXISTS project_id TEXT NOT NULL DEFAULT 'default';
+ALTER TABLE ai_calls                ADD COLUMN IF NOT EXISTS project_id TEXT NOT NULL DEFAULT 'default';
+ALTER TABLE session_replay_metadata ADD COLUMN IF NOT EXISTS project_id TEXT NOT NULL DEFAULT 'default';
+ALTER TABLE user_profiles           ADD COLUMN IF NOT EXISTS project_id TEXT NOT NULL DEFAULT 'default';
+
+-- Composite indexes for project-scoped queries.
+CREATE INDEX IF NOT EXISTS idx_spans_project_received  ON telemetry_spans         (project_id, received_at DESC);
+CREATE INDEX IF NOT EXISTS idx_logs_project_received   ON logs                    (project_id, received_at DESC);
+CREATE INDEX IF NOT EXISTS idx_usage_project_received  ON usage_events            (project_id, received_at DESC);
+CREATE INDEX IF NOT EXISTS idx_ai_project_received     ON ai_calls                (project_id, received_at DESC);
+CREATE INDEX IF NOT EXISTS idx_replay_project_last     ON session_replay_metadata (project_id, last_chunk_at DESC);
+CREATE INDEX IF NOT EXISTS idx_users_project_last      ON user_profiles           (project_id, last_seen_at DESC);

package/src/migrations-postgres/011_default_project_seed.sql

@@ -0,0 +1,5 @@
+-- Seed the default project. Existing rows already carry project_id='default'
+-- via migration 010's column default.
+INSERT INTO projects (id, name, slug, created_at)
+VALUES ('default', 'Default', 'default', now()::text)
+ON CONFLICT (id) DO NOTHING;

package/src/migrations-postgres/012_alert_rules.sql

@@ -0,0 +1,17 @@
+CREATE TABLE IF NOT EXISTS alert_rules (
+  id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL,
+  name TEXT NOT NULL,
+  signal TEXT NOT NULL,
+  query_json JSONB NOT NULL,
+  threshold DOUBLE PRECISION NOT NULL,
+  window_mins INTEGER NOT NULL,
+  comparison TEXT NOT NULL,
+  channels_json JSONB NOT NULL,
+  enabled INTEGER NOT NULL DEFAULT 1,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (project_id) REFERENCES projects(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_alert_rules_project ON alert_rules (project_id, enabled);

package/src/migrations-postgres/013_alert_evaluations.sql

@@ -0,0 +1,13 @@
+CREATE TABLE IF NOT EXISTS alert_evaluations (
+  id TEXT PRIMARY KEY,
+  rule_id TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  evaluated_at TEXT NOT NULL,
+  value DOUBLE PRECISION NOT NULL,
+  state TEXT NOT NULL,
+  notified INTEGER NOT NULL DEFAULT 0,
+  FOREIGN KEY (rule_id) REFERENCES alert_rules(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_alert_eval_rule_time ON alert_evaluations (rule_id, evaluated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_alert_eval_project ON alert_evaluations (project_id, evaluated_at DESC);

package/src/migrations-postgres/014_alert_state.sql

@@ -0,0 +1,9 @@
+CREATE TABLE IF NOT EXISTS alert_state (
+  rule_id TEXT PRIMARY KEY,
+  project_id TEXT NOT NULL,
+  current_state TEXT NOT NULL,
+  last_state_change TEXT NOT NULL,
+  FOREIGN KEY (rule_id) REFERENCES alert_rules(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_alert_state_project ON alert_state (project_id);