@pgpm/metaschema-modules 0.16.0

package/LICENSE

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2025 Dan Lynch <pyramation@gmail.com>
+Copyright (c) 2025 Constructive
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/Makefile

@@ -0,0 +1,6 @@
+EXTENSION = metaschema-modules
+DATA = sql/metaschema-modules--0.15.5.sql
+
+PG_CONFIG = pg_config
+PGXS := $(shell $(PG_CONFIG) --pgxs)
+include $(PGXS)

package/README.md

@@ -0,0 +1,240 @@
+# @pgpm/metaschema-modules
+
+<p align="center" width="100%">
+  <img height="250" src="https://raw.githubusercontent.com/constructive-io/constructive/refs/heads/main/assets/outline-logo.svg" />
+</p>
+
+<p align="center" width="100%">
+  <a href="https://github.com/constructive-io/pgpm-modules/actions/workflows/ci.yml">
+    <img height="20" src="https://github.com/constructive-io/pgpm-modules/actions/workflows/ci.yml/badge.svg" />
+  </a>
+   <a href="https://github.com/constructive-io/pgpm-modules/blob/main/LICENSE"><img height="20" src="https://img.shields.io/badge/license-MIT-blue.svg"/></a>
+   <a href="https://www.npmjs.com/package/@pgpm/metaschema-modules"><img height="20" src="https://img.shields.io/github/package-json/v/constructive-io/pgpm-modules?filename=packages%2Fmetaschema-modules%2Fpackage.json"/></a>
+</p>
+
+Module metadata handling and dependency tracking.
+
+## Overview
+
+`@pgpm/metaschema-modules` extends the `@pgpm/metaschema-schema` package with module-specific metadata tables. This package provides tables for tracking various pgpm modules including authentication, permissions, memberships, encrypted secrets, and more. It enables configuration and metadata storage for modular application features.
+
+## Features
+
+- **Module Metadata Tables**: Store configuration for various application modules
+- **Authentication Modules**: Track user authentication, connected accounts, and crypto auth
+- **Permission System**: Store permissions and membership configurations
+- **Security Modules**: Track encrypted secrets and tokens
+- **User Management**: Store user and membership module configurations
+- **Field Modules**: Track custom field configurations
+- **API Configuration**: Store API and RLS module settings
+
+## Installation
+
+If you have `pgpm` installed:
+
+```bash
+pgpm install @pgpm/metaschema-modules
+pgpm deploy
+```
+
+This is a quick way to get started. The sections below provide more detailed installation options.
+
+### Prerequisites
+
+```bash
+# Install pgpm CLI 
+npm install -g pgpm
+
+# Start local Postgres (via Docker) and export env vars
+pgpm docker start
+eval "$(pgpm env)"
+```
+
+> **Tip:** Already running Postgres? Skip the Docker step and just export your `PG*` environment variables.
+
+### **Add to an Existing Package**
+
+```bash
+# 1. Install the package
+pgpm install @pgpm/metaschema-modules
+
+# 2. Deploy locally
+pgpm deploy 
+```
+
+### **Add to a New Project**
+
+```bash
+# 1. Create a workspace
+pgpm init workspace
+
+# 2. Create your first module
+cd my-workspace
+pgpm init
+
+# 3. Install a package
+cd packages/my-module
+pgpm install @pgpm/metaschema-modules
+
+# 4. Deploy everything
+pgpm deploy --createdb --database mydb1
+```
+
+## Module Tables
+
+The package provides metadata tables for the following modules:
+
+### Authentication & Users
+- **users_module**: User management configuration
+- **user_auth_module**: User authentication settings
+- **connected_accounts_module**: Connected account configurations
+- **crypto_auth_module**: Cryptocurrency authentication settings
+- **crypto_addresses_module**: Crypto address management
+
+### Permissions & Memberships
+- **permissions_module**: Permission system configuration
+- **memberships_module**: Membership management settings
+- **membership_types_module**: Membership type definitions
+- **levels_module**: User level configurations
+
+### Security
+- **encrypted_secrets_module**: Encrypted secrets configuration
+- **secrets_module**: Secret management settings
+- **tokens_module**: Token management configuration
+
+### Communication
+- **emails_module**: Email module configuration
+- **phone_numbers_module**: Phone number management settings
+- **invites_module**: Invitation system configuration
+
+### Other Modules
+- **field_module**: Custom field configurations
+- **default_ids_module**: Default ID generation settings
+- **limits_module**: Rate limiting and quota configurations
+- **rls_module**: Row-level security configurations
+- **denormalized_table_field**: Denormalized field tracking
+
+### Application Structure
+- **apis**: API configurations
+- **sites**: Site definitions
+
+## Usage
+
+### Storing Module Configuration
+
+```sql
+-- Configure users module
+INSERT INTO metaschema_modules_public.users_module (
+  database_id,
+  api_id,
+  enabled,
+  settings
+) VALUES (
+  'database-uuid',
+  'api-uuid',
+  true,
+  '{"require_email_verification": true}'::jsonb
+);
+
+-- Configure permissions module
+INSERT INTO metaschema_modules_public.permissions_module (
+  database_id,
+  api_id,
+  enabled,
+  settings
+) VALUES (
+  'database-uuid',
+  'api-uuid',
+  true,
+  '{"default_role": "user"}'::jsonb
+);
+
+-- Configure encrypted secrets module
+INSERT INTO metaschema_modules_public.encrypted_secrets_module (
+  database_id,
+  api_id,
+  enabled,
+  encryption_key_id
+) VALUES (
+  'database-uuid',
+  'api-uuid',
+  true,
+  'key-uuid'
+);
+```
+
+### Querying Module Configuration
+
+```sql
+-- Get all enabled modules for a database
+SELECT 
+  'users' as module_name, enabled 
+FROM metaschema_modules_public.users_module 
+WHERE database_id = 'database-uuid'
+UNION ALL
+SELECT 
+  'permissions' as module_name, enabled 
+FROM metaschema_modules_public.permissions_module 
+WHERE database_id = 'database-uuid'
+UNION ALL
+SELECT 
+  'encrypted_secrets' as module_name, enabled 
+FROM metaschema_modules_public.encrypted_secrets_module 
+WHERE database_id = 'database-uuid';
+
+-- Get RLS module configuration
+SELECT * FROM metaschema_modules_public.rls_module
+WHERE api_id = 'api-uuid';
+```
+
+## Use Cases
+
+### Modular Application Configuration
+
+Store and manage configuration for optional application features:
+- Enable/disable modules per database or API
+- Store module-specific settings
+- Track module dependencies
+- Configure module behavior
+
+### Multi-Tenant Applications
+
+Manage module configurations per tenant:
+- Different modules enabled per tenant
+- Tenant-specific module settings
+- Isolated module configurations
+
+### Dynamic Feature Flags
+
+Use module tables as feature flags:
+- Enable/disable features at runtime
+- A/B testing configurations
+- Gradual feature rollouts
+
+## Dependencies
+
+- `@pgpm/metaschema-schema`: Core metadata management
+- `@pgpm/services`: Services schemas for APIs, sites, and domains
+- `@pgpm/verify`: Verification utilities
+
+## Testing
+
+```bash
+pnpm test
+```
+
+## Related Tooling
+
+* [pgpm](https://github.com/constructive-io/constructive/tree/main/packages/pgpm): **🖥️ PostgreSQL Package Manager** for modular Postgres development. Works with database workspaces, scaffolding, migrations, seeding, and installing database packages.
+* [pgsql-test](https://github.com/constructive-io/constructive/tree/main/packages/pgsql-test): **📊 Isolated testing environments** with per-test transaction rollbacks—ideal for integration tests, complex migrations, and RLS simulation.
+* [supabase-test](https://github.com/constructive-io/constructive/tree/main/packages/supabase-test): **🧪 Supabase-native test harness** preconfigured for the local Supabase stack—per-test rollbacks, JWT/role context helpers, and CI/GitHub Actions ready.
+* [graphile-test](https://github.com/constructive-io/constructive/tree/main/packages/graphile-test): **🔐 Authentication mocking** for Graphile-focused test helpers and emulating row-level security contexts.
+* [pgsql-parser](https://github.com/constructive-io/pgsql-parser): **🔄 SQL conversion engine** that interprets and converts PostgreSQL syntax.
+* [libpg-query-node](https://github.com/constructive-io/libpg-query-node): **🌉 Node.js bindings** for `libpg_query`, converting SQL into parse trees.
+* [pg-proto-parser](https://github.com/constructive-io/pg-proto-parser): **📦 Protobuf parser** for parsing PostgreSQL Protocol Buffers definitions to generate TypeScript interfaces, utility functions, and JSON mappings for enums.
+
+## Disclaimer
+
+AS DESCRIBED IN THE LICENSES, THE SOFTWARE IS PROVIDED "AS IS", AT YOUR OWN RISK, AND WITHOUT WARRANTIES OF ANY KIND.
+
+No developer or entity involved in creating this software will be liable for any claims or damages whatsoever associated with your use, inability to use, or your interaction with other users of the code, including any direct, indirect, incidental, special, exemplary, punitive or consequential damages, or loss of profits, cryptocurrencies, tokens, or anything else of value.

package/deploy/schemas/metaschema_modules_public/schema.sql

@@ -0,0 +1,16 @@
+-- Deploy schemas/metaschema_modules_public/schema to pg
+
+BEGIN;
+
+CREATE SCHEMA metaschema_modules_public;
+
+GRANT USAGE ON SCHEMA metaschema_modules_public TO authenticated;
+GRANT USAGE ON SCHEMA metaschema_modules_public TO administrator;
+ALTER DEFAULT PRIVILEGES IN SCHEMA metaschema_modules_public GRANT ALL ON TABLES TO authenticated;
+ALTER DEFAULT PRIVILEGES IN SCHEMA metaschema_modules_public GRANT ALL ON SEQUENCES TO authenticated;
+ALTER DEFAULT PRIVILEGES IN SCHEMA metaschema_modules_public GRANT ALL ON FUNCTIONS TO authenticated;
+ALTER DEFAULT PRIVILEGES IN SCHEMA metaschema_modules_public GRANT ALL ON TABLES TO administrator;
+ALTER DEFAULT PRIVILEGES IN SCHEMA metaschema_modules_public GRANT ALL ON SEQUENCES TO administrator;
+ALTER DEFAULT PRIVILEGES IN SCHEMA metaschema_modules_public GRANT ALL ON FUNCTIONS TO administrator;
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/connected_accounts_module/table.sql

@@ -0,0 +1,34 @@
+-- Deploy schemas/metaschema_modules_public/tables/connected_accounts_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.connected_accounts_module (
+    id uuid PRIMARY KEY DEFAULT uuid_generate_v4 (),
+    database_id uuid NOT NULL,
+    
+    schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    private_schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    
+    table_id uuid NOT NULL DEFAULT uuid_nil(),
+    owner_table_id uuid NOT NULL DEFAULT uuid_nil(),
+
+    table_name text NOT NULL,
+
+    --
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+    CONSTRAINT table_fkey FOREIGN KEY (table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT owner_table_fkey FOREIGN KEY (owner_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+    CONSTRAINT private_schema_fkey FOREIGN KEY (private_schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE
+);
+
+COMMENT ON CONSTRAINT schema_fkey ON metaschema_modules_public.connected_accounts_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT private_schema_fkey ON metaschema_modules_public.connected_accounts_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT table_fkey ON metaschema_modules_public.connected_accounts_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT owner_table_fkey ON metaschema_modules_public.connected_accounts_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT db_fkey ON metaschema_modules_public.connected_accounts_module IS E'@omit manyToMany';
+CREATE INDEX connected_accounts_module_database_id_idx ON metaschema_modules_public.connected_accounts_module ( database_id );
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/crypto_addresses_module/table.sql

@@ -0,0 +1,35 @@
+-- Deploy schemas/metaschema_modules_public/tables/crypto_addresses_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.crypto_addresses_module (
+    id uuid PRIMARY KEY DEFAULT uuid_generate_v4 (),
+    database_id uuid NOT NULL,
+    
+    schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    private_schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    
+    table_id uuid NOT NULL DEFAULT uuid_nil(),
+    owner_table_id uuid NOT NULL DEFAULT uuid_nil(),
+
+    table_name text NOT NULL,
+    crypto_network text NOT NULL DEFAULT 'BTC',
+
+    --
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+    CONSTRAINT table_fkey FOREIGN KEY (table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT owner_table_fkey FOREIGN KEY (owner_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+    CONSTRAINT private_schema_fkey FOREIGN KEY (private_schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE
+);
+
+COMMENT ON CONSTRAINT schema_fkey ON metaschema_modules_public.crypto_addresses_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT private_schema_fkey ON metaschema_modules_public.crypto_addresses_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT table_fkey ON metaschema_modules_public.crypto_addresses_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT owner_table_fkey ON metaschema_modules_public.crypto_addresses_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT db_fkey ON metaschema_modules_public.crypto_addresses_module IS E'@omit manyToMany';
+CREATE INDEX crypto_addresses_module_database_id_idx ON metaschema_modules_public.crypto_addresses_module ( database_id );
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/crypto_auth_module/table.sql

@@ -0,0 +1,41 @@
+-- Deploy schemas/metaschema_modules_public/tables/crypto_auth_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.crypto_auth_module (
+    id uuid PRIMARY KEY DEFAULT uuid_generate_v4 (),
+    database_id uuid NOT NULL,
+    
+    schema_id uuid NOT NULL DEFAULT uuid_nil(),
+
+    users_table_id uuid NOT NULL DEFAULT uuid_nil(),
+    tokens_table_id uuid NOT NULL DEFAULT uuid_nil(),
+    secrets_table_id uuid NOT NULL DEFAULT uuid_nil(),
+    addresses_table_id uuid NOT NULL DEFAULT uuid_nil(),
+
+    user_field text NOT NULL,
+
+    crypto_network text NOT NULL DEFAULT 'BTC',
+    sign_in_request_challenge text NOT NULL DEFAULT 'sign_in_request_challenge',
+    sign_in_record_failure text NOT NULL DEFAULT 'sign_in_record_failure',
+    sign_up_with_key text NOT NULL DEFAULT 'sign_up_with_key',
+    sign_in_with_challenge text NOT NULL DEFAULT 'sign_in_with_challenge',
+
+    --
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+    CONSTRAINT secrets_table_fkey FOREIGN KEY (secrets_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT users_table_fkey FOREIGN KEY (users_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT tokens_table_fkey FOREIGN KEY (tokens_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE
+);
+
+COMMENT ON CONSTRAINT db_fkey ON metaschema_modules_public.crypto_auth_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT secrets_table_fkey ON metaschema_modules_public.crypto_auth_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT users_table_fkey ON metaschema_modules_public.crypto_auth_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT tokens_table_fkey ON metaschema_modules_public.crypto_auth_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT schema_fkey ON metaschema_modules_public.crypto_auth_module IS E'@omit manyToMany';
+CREATE INDEX crypto_auth_module_database_id_idx ON metaschema_modules_public.crypto_auth_module ( database_id );
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/default_ids_module/table.sql

@@ -0,0 +1,19 @@
+-- Deploy schemas/metaschema_modules_public/tables/default_ids_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.default_ids_module (
+    id uuid PRIMARY KEY DEFAULT uuid_generate_v4 (),
+    database_id uuid NOT NULL,
+
+    --
+
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE
+);
+
+COMMENT ON CONSTRAINT db_fkey ON metaschema_modules_public.default_ids_module IS E'@omit manyToMany';
+CREATE INDEX default_ids_module_database_id_idx ON metaschema_modules_public.default_ids_module ( database_id );
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/denormalized_table_field/table.sql

@@ -0,0 +1,41 @@
+-- Deploy schemas/metaschema_modules_public/tables/denormalized_table_field/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.denormalized_table_field (
+    id uuid PRIMARY KEY DEFAULT uuid_generate_v4 (),
+    database_id uuid NOT NULL,
+
+    table_id uuid NOT NULL,
+    field_id uuid NOT NULL,
+
+    set_ids uuid[],
+
+    ref_table_id uuid NOT NULL,
+    ref_field_id uuid NOT NULL,
+    ref_ids uuid[],
+
+    use_updates bool NOT NULL DEFAULT TRUE,
+    update_defaults bool NOT NULL DEFAULT TRUE, 
+
+    func_name text NULL,
+    func_order int NOT NULL DEFAULT 0,
+
+    --
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+    CONSTRAINT table_fkey FOREIGN KEY (table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT ref_table_fkey FOREIGN KEY (ref_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT field_fkey FOREIGN KEY (field_id) REFERENCES metaschema_public.field (id) ON DELETE CASCADE,
+    CONSTRAINT ref_field_fkey FOREIGN KEY (ref_field_id) REFERENCES metaschema_public.field (id) ON DELETE CASCADE
+);
+
+COMMENT ON CONSTRAINT db_fkey ON metaschema_modules_public.denormalized_table_field IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT table_fkey ON metaschema_modules_public.denormalized_table_field IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT ref_table_fkey ON metaschema_modules_public.denormalized_table_field IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT field_fkey ON metaschema_modules_public.denormalized_table_field IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT ref_field_fkey ON metaschema_modules_public.denormalized_table_field IS E'@omit manyToMany';
+CREATE INDEX denormalized_table_field_database_id_idx ON metaschema_modules_public.denormalized_table_field ( database_id );
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/emails_module/table.sql

@@ -0,0 +1,34 @@
+-- Deploy schemas/metaschema_modules_public/tables/emails_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.emails_module (
+    id uuid PRIMARY KEY DEFAULT uuid_generate_v4 (),
+    database_id uuid NOT NULL,
+    
+    schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    private_schema_id uuid NOT NULL DEFAULT uuid_nil(),
+
+    table_id uuid NOT NULL DEFAULT uuid_nil(),
+    owner_table_id uuid NOT NULL DEFAULT uuid_nil(),
+
+    table_name text NOT NULL,
+
+    --
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+    CONSTRAINT table_fkey FOREIGN KEY (table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT owner_table_fkey FOREIGN KEY (owner_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+    CONSTRAINT private_schema_fkey FOREIGN KEY (private_schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE
+);
+
+COMMENT ON CONSTRAINT schema_fkey ON metaschema_modules_public.emails_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT private_schema_fkey ON metaschema_modules_public.emails_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT table_fkey ON metaschema_modules_public.emails_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT owner_table_fkey ON metaschema_modules_public.emails_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT db_fkey ON metaschema_modules_public.emails_module IS E'@omit manyToMany';
+CREATE INDEX emails_module_database_id_idx ON metaschema_modules_public.emails_module ( database_id );
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/encrypted_secrets_module/table.sql

@@ -0,0 +1,29 @@
+-- Deploy schemas/metaschema_modules_public/tables/encrypted_secrets_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.encrypted_secrets_module (
+    id uuid PRIMARY KEY DEFAULT uuid_generate_v4 (),
+    database_id uuid NOT NULL,
+
+    --
+    schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    table_id uuid NOT NULL DEFAULT uuid_nil(),
+    table_name text NOT NULL DEFAULT 'encrypted_secrets',
+    -- 
+    
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+    CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+    CONSTRAINT table_fkey FOREIGN KEY (table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE
+);
+
+COMMENT ON CONSTRAINT schema_fkey ON metaschema_modules_public.encrypted_secrets_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT db_fkey ON metaschema_modules_public.encrypted_secrets_module IS E'@omit manyToMany';
+CREATE INDEX encrypted_secrets_module_database_id_idx ON metaschema_modules_public.encrypted_secrets_module ( database_id );
+
+COMMENT ON CONSTRAINT table_fkey
+     ON metaschema_modules_public.encrypted_secrets_module IS E'@omit manyToMany';
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/field_module/table.sql

@@ -0,0 +1,37 @@
+-- Deploy schemas/metaschema_modules_public/tables/field_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.field_module (
+    id uuid PRIMARY KEY DEFAULT uuid_generate_v4 (),
+    database_id uuid NOT NULL,
+    
+    private_schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    
+    table_id uuid NOT NULL DEFAULT uuid_nil(),
+    field_id uuid NOT NULL DEFAULT uuid_nil(),
+
+    -- data = '{"regexp":"^kjhsdkjhsd$"}'
+    -- data = '{"min":10, "max": 20}'
+    data jsonb NOT NULL DEFAULT '{}',
+
+    triggers text[],
+    functions text[],
+
+    --
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+    CONSTRAINT table_fkey FOREIGN KEY (table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT field_fkey FOREIGN KEY (field_id) REFERENCES metaschema_public.field (id) ON DELETE CASCADE,
+    CONSTRAINT private_schema_fkey FOREIGN KEY (private_schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE
+);
+
+COMMENT ON CONSTRAINT private_schema_fkey ON metaschema_modules_public.field_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT table_fkey ON metaschema_modules_public.field_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT field_fkey ON metaschema_modules_public.field_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT db_fkey ON metaschema_modules_public.field_module IS E'@omit manyToMany';
+CREATE INDEX field_module_database_id_idx ON metaschema_modules_public.field_module ( database_id );
+
+COMMIT;
+

package/deploy/schemas/metaschema_modules_public/tables/hierarchy_module/table.sql

@@ -0,0 +1,79 @@
+-- Deploy schemas/metaschema_modules_public/tables/hierarchy_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.hierarchy_module (
+    id uuid PRIMARY KEY DEFAULT uuid_generate_v4 (),
+    database_id uuid NOT NULL,
+    
+    -- Schema references
+    schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    private_schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    
+    -- Table references for created tables
+    chart_edges_table_id uuid NOT NULL DEFAULT uuid_nil(),
+    chart_edges_table_name text NOT NULL DEFAULT '',
+    
+    hierarchy_sprt_table_id uuid NOT NULL DEFAULT uuid_nil(),
+    hierarchy_sprt_table_name text NOT NULL DEFAULT '',
+    
+    chart_edge_grants_table_id uuid NOT NULL DEFAULT uuid_nil(),
+    chart_edge_grants_table_name text NOT NULL DEFAULT '',
+    
+    -- Required external table references
+    entity_table_id uuid NOT NULL,  -- Organizations table (membership_type=2 entity)
+    users_table_id uuid NOT NULL,   -- Users table
+    
+    -- Prefix for naming (e.g., 'org' -> 'org_chart_edges')
+    prefix text NOT NULL DEFAULT 'org',
+    
+    -- Resolved names for RLS parser lookups
+    private_schema_name text NOT NULL DEFAULT '',
+    sprt_table_name text NOT NULL DEFAULT '',
+    
+    -- Function names for helper functions
+    rebuild_hierarchy_function text NOT NULL DEFAULT '',
+    get_subordinates_function text NOT NULL DEFAULT '',
+    get_managers_function text NOT NULL DEFAULT '',
+    is_manager_of_function text NOT NULL DEFAULT '',
+    
+    -- Timestamps
+    created_at timestamptz NOT NULL DEFAULT now(),
+    
+    -- Constraints
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+    CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+    CONSTRAINT private_schema_fkey FOREIGN KEY (private_schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+    CONSTRAINT chart_edges_table_fkey FOREIGN KEY (chart_edges_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT hierarchy_sprt_table_fkey FOREIGN KEY (hierarchy_sprt_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT chart_edge_grants_table_fkey FOREIGN KEY (chart_edge_grants_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT entity_table_fkey FOREIGN KEY (entity_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT users_table_fkey FOREIGN KEY (users_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    
+    -- Only one hierarchy module per database
+    CONSTRAINT hierarchy_module_database_unique UNIQUE (database_id)
+);
+
+COMMENT ON CONSTRAINT schema_fkey ON metaschema_modules_public.hierarchy_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT private_schema_fkey ON metaschema_modules_public.hierarchy_module IS E'@omit manyToMany';
+COMMENT ON CONSTRAINT db_fkey ON metaschema_modules_public.hierarchy_module IS E'@omit manyToMany';
+CREATE INDEX hierarchy_module_database_id_idx ON metaschema_modules_public.hierarchy_module ( database_id );
+
+COMMENT ON CONSTRAINT chart_edges_table_fkey
+     ON metaschema_modules_public.hierarchy_module IS E'@omit manyToMany';
+
+COMMENT ON CONSTRAINT hierarchy_sprt_table_fkey
+     ON metaschema_modules_public.hierarchy_module IS E'@omit manyToMany';
+
+COMMENT ON CONSTRAINT chart_edge_grants_table_fkey
+     ON metaschema_modules_public.hierarchy_module IS E'@omit manyToMany';
+
+COMMENT ON CONSTRAINT entity_table_fkey
+     ON metaschema_modules_public.hierarchy_module IS E'@omit manyToMany';
+
+COMMENT ON CONSTRAINT users_table_fkey
+     ON metaschema_modules_public.hierarchy_module IS E'@omit manyToMany';
+
+COMMIT;