@pgpm/metaschema-modules 0.23.0 → 0.26.0

package/README.md

@@ -95,7 +95,7 @@ The package provides metadata tables for the following modules:
 - **permissions_module**: Permission system configuration
 - **memberships_module**: Membership management settings
 - **membership_types_module**: Membership type definitions
-- **levels_module**: User level configurations
+- **events_module**: User level configurations
 
 ### Security
 - **encrypted_secrets_module**: Encrypted secrets configuration

package/deploy/schemas/metaschema_modules_public/tables/billing_module/table.sql

@@ -27,6 +27,10 @@ CREATE TABLE metaschema_modules_public.billing_module (
   balances_table_id uuid NOT NULL DEFAULT uuid_nil(),
   balances_table_name text NOT NULL DEFAULT '',
 
+  -- Meter credits table: append-only credit grants for billing meters
+  meter_credits_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  meter_credits_table_name text NOT NULL DEFAULT '',
+
   -- Generated functions
   record_usage_function text NOT NULL DEFAULT '',
 
@@ -39,6 +43,7 @@ CREATE TABLE metaschema_modules_public.billing_module (
   CONSTRAINT plan_subscriptions_table_fkey FOREIGN KEY (plan_subscriptions_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
   CONSTRAINT ledger_table_fkey FOREIGN KEY (ledger_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
   CONSTRAINT balances_table_fkey FOREIGN KEY (balances_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT meter_credits_table_fkey FOREIGN KEY (meter_credits_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
   CONSTRAINT billing_module_database_id_unique UNIQUE (database_id)
 );
 

package/deploy/schemas/metaschema_modules_public/tables/config_secrets_org_module/table.sql

@@ -0,0 +1,28 @@
+-- Deploy schemas/metaschema_modules_public/tables/config_secrets_org_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.config_secrets_org_module (
+    id uuid PRIMARY KEY DEFAULT uuidv7(),
+    database_id uuid NOT NULL,
+
+    --
+    schema_id uuid NOT NULL DEFAULT uuid_nil(),
+    table_id uuid NOT NULL DEFAULT uuid_nil(),
+    table_name text NOT NULL DEFAULT 'org_secrets',
+    --
+
+    CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+    CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+    CONSTRAINT table_fkey FOREIGN KEY (table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE
+);
+
+CREATE INDEX config_secrets_org_module_database_id_idx ON metaschema_modules_public.config_secrets_org_module ( database_id );
+CREATE INDEX config_secrets_org_module_schema_id_idx ON metaschema_modules_public.config_secrets_org_module ( schema_id );
+CREATE INDEX config_secrets_org_module_table_id_idx ON metaschema_modules_public.config_secrets_org_module ( table_id );
+
+COMMENT ON TABLE metaschema_modules_public.config_secrets_org_module IS 'Config row for the config_secrets_org_module, which provisions an organization-scoped encrypted key-value secrets store with manage_secrets permission and entity-membership RLS.';
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/{encrypted_secrets_module → config_secrets_user_module}/table.sql

@@ -1,17 +1,17 @@
--- Deploy schemas/metaschema_modules_public/tables/encrypted_secrets_module/table to pg
+-- Deploy schemas/metaschema_modules_public/tables/config_secrets_user_module/table to pg
 
 -- requires: schemas/metaschema_modules_public/schema
 
 BEGIN;
 
-CREATE TABLE metaschema_modules_public.encrypted_secrets_module (
+CREATE TABLE metaschema_modules_public.config_secrets_user_module (
     id uuid PRIMARY KEY DEFAULT uuidv7(),
     database_id uuid NOT NULL,
 
     --
     schema_id uuid NOT NULL DEFAULT uuid_nil(),
     table_id uuid NOT NULL DEFAULT uuid_nil(),
-    table_name text NOT NULL DEFAULT 'encrypted_secrets',
+    table_name text NOT NULL DEFAULT 'user_secrets',
     -- 
     
     CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
@@ -19,6 +19,6 @@ CREATE TABLE metaschema_modules_public.encrypted_secrets_module (
     CONSTRAINT table_fkey FOREIGN KEY (table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE
 );
 
-CREATE INDEX encrypted_secrets_module_database_id_idx ON metaschema_modules_public.encrypted_secrets_module ( database_id );
+CREATE INDEX config_secrets_user_module_database_id_idx ON metaschema_modules_public.config_secrets_user_module ( database_id );
 
 COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/entity_type_provision/table.sql

@@ -51,9 +51,13 @@ CREATE TABLE metaschema_modules_public.entity_type_provision (
 
     has_invites boolean NOT NULL DEFAULT false,
 
+    has_invite_achievements boolean NOT NULL DEFAULT false,
+
     -- =========================================================================
-    -- Storage configuration: module-level overrides + initial bucket defs.
-    -- Only used when has_storage = true. NULL = use defaults.
+    -- Storage configuration: JSON array of storage module definitions.
+    -- Each element provisions a separate storage module with its own tables,
+    -- RLS policies, and feature flags. Only used when has_storage = true.
+    -- NULL = provision a single default storage module with default settings.
     -- =========================================================================
 
     storage_config jsonb DEFAULT NULL,
@@ -197,7 +201,7 @@ COMMENT ON COLUMN metaschema_modules_public.entity_type_provision.has_profiles I
      When true, creates profile tables and applies profiles security.';
 
 COMMENT ON COLUMN metaschema_modules_public.entity_type_provision.has_levels IS
-    'Whether to provision levels_module for this type. Defaults to false.
+    'Whether to provision events_module for this type. Defaults to false.
      Levels provide gamification/achievement tracking for members.
      When true, creates level steps, achievements, and level tables with security.';
 
@@ -216,6 +220,15 @@ COMMENT ON COLUMN metaschema_modules_public.entity_type_provision.has_invites IS
      UNIQUE (database_id, membership_type) constraint on invites_module combined with
      ON CONFLICT DO NOTHING in the fan-out makes repeated INSERTs safe.';
 
+COMMENT ON COLUMN metaschema_modules_public.entity_type_provision.has_invite_achievements IS
+    'Whether to auto-attach an EventTracker to the claimed_invites table for invite-based
+     achievements. Defaults to false. Requires has_invites=true AND has_levels=true.
+     When true, the trigger calls event_tracker() on the claimed_invites table with
+     event_name=''invite_claimed'', actor_field=''sender_id'', events=[''INSERT''],
+     crediting the SENDER (inviter) when someone claims their invite code.
+     Developers can then define achievements in the blueprint achievements[] section
+     that reference the ''invite_claimed'' event (e.g., "Invite 5 friends" = count: 5).';
+
 -- =============================================================================
 -- Escape hatch
 -- =============================================================================
@@ -284,36 +297,34 @@ COMMENT ON COLUMN metaschema_modules_public.entity_type_provision.out_installed_
      Populated by the trigger. Useful for verifying which modules were provisioned.';
 
 COMMENT ON COLUMN metaschema_modules_public.entity_type_provision.storage_config IS
-    'Optional jsonb object for storage module configuration and initial bucket seeding.
-     Only used when has_storage = true; ignored otherwise. NULL = use defaults.
-     Recognized keys (all optional):
-       - upload_url_expiry_seconds    (integer) presigned PUT URL expiry override
-       - download_url_expiry_seconds  (integer) presigned GET URL expiry override
-       - default_max_file_size        (bigint)  global max file size in bytes for this scope
-       - allowed_origins              (text[])  default CORS origins for all buckets in this scope
-       - buckets                      (jsonb[]) array of initial bucket definitions to seed
-     Each bucket in the buckets array recognizes:
-       - name               (text, required) bucket name e.g. ''documents''
-       - description         (text)           human-readable description
-       - is_public           (boolean)        whether files are publicly readable (default false)
-       - allowed_mime_types  (text[])         whitelist of MIME types (null = any)
-       - max_file_size       (bigint)         max file size in bytes (null = use scope default)
-       - allowed_origins     (text[])         per-bucket CORS override
-       - provisions (jsonb object) optional: customize storage tables
-                                  with additional nodes, fields, grants, and policies.
-                                  Keyed by table role: "files", "buckets".
-                                  Each value uses the same shape as table_provision:
-                                  { nodes, fields, grants, use_rls, policies }. Fanned out
-                                  to secure_table_provision targeting the corresponding table.
-                                  When a key includes policies[], those REPLACE the default
-                                  storage policies for that table; tables without a key still
-                                  get defaults. Missing "data" on policy entries is auto-populated
-                                  with storage-specific defaults (same as table_provision).
-                                  Example: add SearchBm25 for full-text search on files:
-                                  {"provisions": {"files": {"nodes": [{"$type":
-                                  "SearchBm25", "data": {"source_fields": ["description"]}}]}}}
-     Example:
-       storage_config := ''{"buckets": [{"name": "documents", "is_public": false, "allowed_mime_types": ["application/pdf"]}], "provisions": {"files": {"nodes": [{"$type": "SearchBm25", "data": {"source_fields": ["description"]}}]}}}''::jsonb';
+    'Optional JSON array of storage module definitions. Each element provisions a separate
+     storage module with its own tables ({prefix}_{storage_key}_buckets/files), RLS policies,
+     and feature flags. Only used when has_storage = true; ignored otherwise.
+     NULL = provision a single default storage module with all defaults.
+     Each array element recognizes (all optional):
+       - storage_key                   (text) module discriminator, max 16 chars, lowercase snake_case.
+                                              Defaults to ''default'' (omitted from table names).
+                                              Non-default keys become infixes: {prefix}_{key}_buckets.
+       - upload_url_expiry_seconds     (integer) presigned PUT URL expiry override
+       - download_url_expiry_seconds   (integer) presigned GET URL expiry override
+       - default_max_file_size         (bigint)  global max file size in bytes for this module
+       - allowed_origins               (text[])  default CORS origins for all buckets in this module
+       - restrict_reads                (boolean) require read_files permission for SELECT on files
+       - has_path_shares               (boolean) enable virtual filesystem + path share policies
+       - has_versioning                (boolean) enable file version chains
+       - has_content_hash              (boolean) enable content hash for dedup
+       - has_custom_keys               (boolean) allow client-provided S3 keys
+       - has_audit_log                 (boolean) enable file events audit table
+       - has_confirm_upload            (boolean) enable HeadObject confirmation flow
+       - confirm_upload_delay          (interval) delay before first confirmation attempt
+       - buckets                       (jsonb[]) array of initial bucket definitions to seed.
+         Each bucket: { name (required), description, is_public, allowed_mime_types, max_file_size, allowed_origins }
+       - provisions                    (jsonb object) per-table customization keyed by "files" or "buckets".
+                                              Each value: { nodes, fields, grants, use_rls, policies }.
+     Example (single module, backward compat):
+       storage_config := ''[{"buckets": [{"name": "documents"}]}]''::jsonb
+     Example (multi-module):
+       storage_config := ''[{"has_path_shares": true, "buckets": [{"name": "documents"}]}, {"storage_key": "fn", "has_custom_keys": true, "buckets": [{"name": "functions"}]}]''::jsonb';
 
 COMMENT ON COLUMN metaschema_modules_public.entity_type_provision.out_storage_module_id IS
     'Output: the UUID of the storage_module row created for this entity type. Populated by the trigger when has_storage=true.';

package/deploy/schemas/metaschema_modules_public/tables/events_module/table.sql

@@ -0,0 +1,85 @@
+-- Deploy schemas/metaschema_modules_public/tables/events_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.events_module (
+  id uuid PRIMARY KEY DEFAULT uuidv7(),
+  database_id uuid NOT NULL,
+
+  --
+  schema_id uuid NOT NULL DEFAULT uuid_nil(),
+  private_schema_id uuid NOT NULL DEFAULT uuid_nil(),
+  --
+  
+  events_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  events_table_name text NOT NULL DEFAULT '',
+
+  event_aggregates_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  event_aggregates_table_name text NOT NULL DEFAULT '',
+
+  event_types_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  event_types_table_name text NOT NULL DEFAULT '',
+
+  levels_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  levels_table_name text NOT NULL DEFAULT '',
+
+  level_requirements_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  level_requirements_table_name text NOT NULL DEFAULT '',
+
+  level_grants_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  level_grants_table_name text NOT NULL DEFAULT '',
+
+  achievement_rewards_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  achievement_rewards_table_name text NOT NULL DEFAULT '',
+
+  record_event text NOT NULL DEFAULT '',
+  remove_event text NOT NULL DEFAULT '',
+  tg_event text NOT NULL DEFAULT '',
+  tg_event_toggle text NOT NULL DEFAULT '',
+  tg_event_toggle_bool text NOT NULL DEFAULT '',
+  tg_event_bool text NOT NULL DEFAULT '',
+  upsert_aggregate text NOT NULL DEFAULT '',
+  tg_update_aggregates text NOT NULL DEFAULT '',
+  prune_events text NOT NULL DEFAULT '',
+  steps_required text NOT NULL DEFAULT '',
+  level_achieved text NOT NULL DEFAULT '',
+  tg_check_achievements text NOT NULL DEFAULT '',
+  grant_achievement text NOT NULL DEFAULT '',
+  tg_achievement_reward text NOT NULL DEFAULT '',
+
+  -- Partition lifecycle configuration for events table
+  "interval" text NOT NULL DEFAULT '1 month',
+  retention text DEFAULT '12 months',
+  premake int NOT NULL DEFAULT 2,
+
+  prefix text NULL,
+
+  membership_type int NOT NULL,
+  -- if this is NOT NULL, then we add entity_id 
+  -- e.g. limits to the app itself are considered global owned by app and no explicit owner
+  entity_table_id uuid NULL,
+
+  -- required tables    
+  actor_table_id uuid NOT NULL DEFAULT uuid_nil(),
+
+
+  CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+  CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+  CONSTRAINT private_schema_fkey FOREIGN KEY (private_schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+
+  CONSTRAINT events_table_fkey FOREIGN KEY (events_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT event_aggregates_table_fkey FOREIGN KEY (event_aggregates_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT event_types_table_fkey FOREIGN KEY (event_types_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT levels_table_fkey FOREIGN KEY (levels_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT level_requirements_table_fkey FOREIGN KEY (level_requirements_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT level_grants_table_fkey FOREIGN KEY (level_grants_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT achievement_rewards_table_fkey FOREIGN KEY (achievement_rewards_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT entity_table_fkey FOREIGN KEY (entity_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT actor_table_fkey FOREIGN KEY (actor_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE
+);
+
+CREATE INDEX events_module_database_id_idx ON metaschema_modules_public.events_module ( database_id );
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/inference_log_module/table.sql

@@ -0,0 +1,39 @@
+-- Deploy schemas/metaschema_modules_public/tables/inference_log_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.inference_log_module (
+  id uuid PRIMARY KEY DEFAULT uuidv7(),
+  database_id uuid NOT NULL,
+
+  schema_id uuid NOT NULL DEFAULT uuid_nil(),
+  private_schema_id uuid NOT NULL DEFAULT uuid_nil(),
+
+  -- Inference log table (partitioned by created_at)
+  inference_log_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  inference_log_table_name text NOT NULL DEFAULT '',
+
+  -- Pre-aggregated daily rollup table
+  usage_daily_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  usage_daily_table_name text NOT NULL DEFAULT '',
+
+  -- Partition lifecycle configuration
+  "interval" text NOT NULL DEFAULT '1 month',
+  retention text NULL,
+  premake int NOT NULL DEFAULT 2,
+
+  prefix text NULL,
+
+  CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+  CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+  CONSTRAINT private_schema_fkey FOREIGN KEY (private_schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+  CONSTRAINT inference_log_table_fkey FOREIGN KEY (inference_log_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT usage_daily_table_fkey FOREIGN KEY (usage_daily_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT inference_log_module_database_id_unique UNIQUE (database_id)
+);
+
+CREATE INDEX inference_log_module_database_id_idx ON metaschema_modules_public.inference_log_module ( database_id );
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/limits_module/table.sql

@@ -53,6 +53,14 @@ CREATE TABLE metaschema_modules_public.limits_module (
     -- Resolve cap function (COALESCE lookup: per-entity → default → 0)
     resolve_cap_function text NOT NULL DEFAULT '',
 
+    -- Warning tables for soft-limit notifications
+    limit_warnings_table_id uuid NULL,
+    limit_warning_state_table_id uuid NULL,
+
+    -- Soft limit check functions
+    limit_check_soft_function text NOT NULL DEFAULT '',
+    limit_aggregate_check_soft_function text NOT NULL DEFAULT '',
+
     prefix text NULL,
 
     membership_type int NOT NULL,
@@ -77,7 +85,9 @@ CREATE TABLE metaschema_modules_public.limits_module (
     CONSTRAINT credit_code_items_table_fkey FOREIGN KEY (credit_code_items_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
     CONSTRAINT credit_redemptions_table_fkey FOREIGN KEY (credit_redemptions_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
     CONSTRAINT limit_caps_table_fkey FOREIGN KEY (limit_caps_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
-    CONSTRAINT limit_caps_defaults_table_fkey FOREIGN KEY (limit_caps_defaults_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE
+    CONSTRAINT limit_caps_defaults_table_fkey FOREIGN KEY (limit_caps_defaults_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT limit_warnings_table_fkey FOREIGN KEY (limit_warnings_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+    CONSTRAINT limit_warning_state_table_fkey FOREIGN KEY (limit_warning_state_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE
 
 );
 

package/deploy/schemas/metaschema_modules_public/tables/rate_limit_meters_module/table.sql

@@ -0,0 +1,51 @@
+-- Deploy schemas/metaschema_modules_public/tables/rate_limit_meters_module/table to pg
+
+-- requires: schemas/metaschema_modules_public/schema
+
+BEGIN;
+
+CREATE TABLE metaschema_modules_public.rate_limit_meters_module (
+  id uuid PRIMARY KEY DEFAULT uuidv7(),
+  database_id uuid NOT NULL,
+
+  -- Public schema: rate_limit_overrides table (admin-manageable via GraphQL API)
+  schema_id uuid NOT NULL DEFAULT uuid_nil(),
+  -- Private schema: rate_limit_state table, check_rate_limit function (internal)
+  private_schema_id uuid NOT NULL DEFAULT uuid_nil(),
+
+  -- State table: sliding window tracking per entity/actor/meter/window (private)
+  rate_limit_state_table_id uuid NOT NULL DEFAULT uuid_nil(),
+  rate_limit_state_table_name text NOT NULL DEFAULT '',
+
+  -- Overrides table: per-entity and per-actor rate limit overrides (public)
+  rate_limit_overrides_table_id uuid NULL,
+  rate_limit_overrides_table_name text NOT NULL DEFAULT '',
+
+  -- Rate window limits table: per-plan rate limit configuration (public)
+  rate_window_limits_table_id uuid NULL,
+  rate_window_limits_table_name text NOT NULL DEFAULT '',
+
+  -- Generated check function (private)
+  check_rate_limit_function text NOT NULL DEFAULT '',
+
+  prefix text NULL,
+
+  CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
+  CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+  CONSTRAINT private_schema_fkey FOREIGN KEY (private_schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
+  CONSTRAINT rate_limit_state_table_fkey FOREIGN KEY (rate_limit_state_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT rate_limit_overrides_table_fkey FOREIGN KEY (rate_limit_overrides_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT rate_window_limits_table_fkey FOREIGN KEY (rate_window_limits_table_id) REFERENCES metaschema_public.table (id) ON DELETE CASCADE,
+  CONSTRAINT rate_limit_meters_module_database_id_unique UNIQUE (database_id)
+);
+
+CREATE INDEX rate_limit_meters_module_database_id_idx ON metaschema_modules_public.rate_limit_meters_module ( database_id );
+
+COMMENT ON CONSTRAINT rate_limit_state_table_fkey
+     ON metaschema_modules_public.rate_limit_meters_module IS E'@fieldName rateLimitStateTableByRateLimitStateTableId';
+COMMENT ON CONSTRAINT rate_limit_overrides_table_fkey
+     ON metaschema_modules_public.rate_limit_meters_module IS E'@fieldName rateLimitOverridesTableByRateLimitOverridesTableId';
+COMMENT ON CONSTRAINT rate_window_limits_table_fkey
+     ON metaschema_modules_public.rate_limit_meters_module IS E'@fieldName rateWindowLimitsTableByRateWindowLimitsTableId';
+
+COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/realtime_module/table.sql

@@ -20,8 +20,8 @@ CREATE TABLE metaschema_modules_public.realtime_module (
 
     -- Partition lifecycle configuration for change_log
     retention_hours integer NOT NULL DEFAULT 168,
-    lookahead_hours integer NOT NULL DEFAULT 24,
-    partition_interval text NOT NULL DEFAULT 'hourly',
+    premake int NOT NULL DEFAULT 7,
+    "interval" text NOT NULL DEFAULT '1 day',
 
     -- NOTIFY hybrid wake-up channel name (NULL = use default)
     notify_channel text NULL,

package/deploy/schemas/metaschema_modules_public/tables/storage_module/table.sql

@@ -23,6 +23,12 @@ CREATE TABLE metaschema_modules_public.storage_module (
     -- Multi-tenant storage identity
     membership_type int DEFAULT NULL,              -- NULL = global gate (AuthzMembership via app_sprt), non-NULL = entity-scoped (AuthzEntityMembership)
 
+    -- Storage module discriminator: allows multiple storage modules per entity type.
+    -- 'default' is omitted from table names (backward compat), any other value becomes
+    -- an infix: {prefix}_{storage_key}_{buckets|files}.
+    -- Max 16 chars, lowercase snake_case, cannot be 'buckets'/'files'/'bucket'/'file'.
+    storage_key text NOT NULL DEFAULT 'default',
+
     -- Configurable security policies (NULL = use defaults based on membership_type).
     -- When provided, replaces the default policy set in apply_storage_security.
     -- Accepts a JSON array of policy objects:
@@ -76,6 +82,8 @@ CREATE TABLE metaschema_modules_public.storage_module (
     has_content_hash boolean NOT NULL DEFAULT false,  -- Content hash column for dedup + integrity verification
     has_custom_keys boolean NOT NULL DEFAULT false,   -- allow_custom_keys on buckets (implies has_versioning + has_content_hash)
     has_audit_log boolean NOT NULL DEFAULT false,     -- File events audit table: upload, delete, move, rename, download, share events
+    has_confirm_upload boolean NOT NULL DEFAULT false,  -- Deferred HeadObject confirmation: enqueues storage:confirm_upload job on INSERT, creates status transition functions
+    confirm_upload_delay interval NOT NULL DEFAULT '30 seconds',  -- Delay before first confirmation attempt (only used when has_confirm_upload = true)
 
     -- Generated table ID for file_events (populated by the generator when has_audit_log=true)
     file_events_table_id uuid NULL DEFAULT NULL,
@@ -93,8 +101,9 @@ CREATE TABLE metaschema_modules_public.storage_module (
 
 CREATE INDEX storage_module_database_id_idx ON metaschema_modules_public.storage_module ( database_id );
 
--- Unique constraint on (database_id, membership_type) using COALESCE to handle NULLs.
--- NULL membership_type = app-level (only one per database), non-NULL = entity-scoped (one per membership_type per database).
-CREATE UNIQUE INDEX storage_module_unique_scope ON metaschema_modules_public.storage_module ( database_id, COALESCE(membership_type, -1) );
+-- Unique constraint on (database_id, membership_type, storage_key) using COALESCE to handle NULLs.
+-- NULL membership_type = app-level, non-NULL = entity-scoped. storage_key discriminates
+-- multiple storage modules for the same entity type (e.g. 'default' + 'fn').
+CREATE UNIQUE INDEX storage_module_unique_scope ON metaschema_modules_public.storage_module ( database_id, COALESCE(membership_type, -1), storage_key );
 
 COMMIT;

package/deploy/schemas/metaschema_modules_public/tables/{secrets_module → user_state_module}/table.sql

@@ -1,16 +1,16 @@
--- Deploy schemas/metaschema_modules_public/tables/secrets_module/table to pg
+-- Deploy schemas/metaschema_modules_public/tables/user_state_module/table to pg
 
 -- requires: schemas/metaschema_modules_public/schema
 
 BEGIN;
 
-CREATE TABLE metaschema_modules_public.secrets_module (
+CREATE TABLE metaschema_modules_public.user_state_module (
     id uuid PRIMARY KEY DEFAULT uuidv7(),
     database_id uuid NOT NULL,
     --
     schema_id uuid NOT NULL DEFAULT uuid_nil(),
     table_id uuid NOT NULL DEFAULT uuid_nil(),
-    table_name text NOT NULL DEFAULT 'secrets',
+    table_name text NOT NULL DEFAULT 'user_state',
     -- 
     CONSTRAINT db_fkey FOREIGN KEY (database_id) REFERENCES metaschema_public.database (id) ON DELETE CASCADE,
     CONSTRAINT schema_fkey FOREIGN KEY (schema_id) REFERENCES metaschema_public.schema (id) ON DELETE CASCADE,
@@ -18,6 +18,6 @@ CREATE TABLE metaschema_modules_public.secrets_module (
 
 );
 
-CREATE INDEX secrets_module_database_id_idx ON metaschema_modules_public.secrets_module ( database_id );
+CREATE INDEX user_state_module_database_id_idx ON metaschema_modules_public.user_state_module ( database_id );
 
 COMMIT;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pgpm/metaschema-modules",
-  "version": "0.23.0",
+  "version": "0.26.0",
   "description": "Module metadata handling and dependency tracking",
   "author": "Dan Lynch <pyramation@gmail.com>",
   "contributors": [
@@ -21,8 +21,8 @@
     "test:watch": "jest --watch"
   },
   "dependencies": {
-    "@pgpm/metaschema-schema": "0.23.0",
-    "@pgpm/verify": "0.23.0"
+    "@pgpm/metaschema-schema": "0.26.0",
+    "@pgpm/verify": "0.26.0"
   },
   "devDependencies": {
     "pgpm": "^4.23.2"
@@ -35,5 +35,5 @@
   "bugs": {
     "url": "https://github.com/constructive-io/pgpm-modules/issues"
   },
-  "gitHead": "c051ba5f98dd780c1f69e3ac07c2cc870d1c859d"
+  "gitHead": "3badf1e5e2fc71deae9e194b779599d17ab28a0d"
 }

package/pgpm.plan

@@ -12,9 +12,9 @@ schemas/metaschema_modules_public/tables/crypto_auth_module/table [schemas/metas
 schemas/metaschema_modules_public/tables/default_ids_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/default_ids_module/table
 schemas/metaschema_modules_public/tables/denormalized_table_field/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/denormalized_table_field/table
 schemas/metaschema_modules_public/tables/emails_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/emails_module/table
-schemas/metaschema_modules_public/tables/encrypted_secrets_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/encrypted_secrets_module/table
+schemas/metaschema_modules_public/tables/config_secrets_user_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/config_secrets_user_module/table
 schemas/metaschema_modules_public/tables/invites_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/invites_module/table
-schemas/metaschema_modules_public/tables/levels_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/levels_module/table
+schemas/metaschema_modules_public/tables/events_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/events_module/table
 schemas/metaschema_modules_public/tables/limits_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/limits_module/table
 schemas/metaschema_modules_public/tables/membership_types_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/membership_types_module/table
 schemas/metaschema_modules_public/tables/memberships_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/memberships_module/table
@@ -22,7 +22,7 @@ schemas/metaschema_modules_public/tables/permissions_module/table [schemas/metas
 schemas/metaschema_modules_public/tables/phone_numbers_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/phone_numbers_module/table
 schemas/metaschema_modules_public/tables/profiles_module/table [schemas/metaschema_modules_public/schema] 2026-01-01T00:00:00Z devin <devin@cognition.ai> # add schemas/metaschema_modules_public/tables/profiles_module/table
 schemas/metaschema_modules_public/tables/rls_module/table [schemas/metaschema_modules_public/schema schemas/services_public/tables/apis/table] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/rls_module/table
-schemas/metaschema_modules_public/tables/secrets_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/secrets_module/table
+schemas/metaschema_modules_public/tables/user_state_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/user_state_module/table
 schemas/services_public/tables/sites/table [schemas/services_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/services_public/tables/sites/table
 schemas/metaschema_modules_public/tables/sessions_module/table [schemas/metaschema_modules_public/schema] 2026-01-24T00:00:00Z devin <devin@cognition.ai> # add schemas/metaschema_modules_public/tables/sessions_module/table
 schemas/metaschema_modules_public/tables/user_auth_module/table [schemas/metaschema_modules_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/metaschema_modules_public/tables/user_auth_module/table
@@ -48,3 +48,6 @@ schemas/metaschema_modules_public/tables/plans_module/table [schemas/metaschema_
 schemas/metaschema_modules_public/tables/billing_module/table [schemas/metaschema_modules_public/schema] 2026-05-02T23:45:00Z devin <devin@cognition.ai> # add billing_module config table for meters, plan_subscriptions, ledger, and balances
 schemas/metaschema_modules_public/tables/billing_provider_module/table [schemas/metaschema_modules_public/schema] 2026-05-03T01:00:00Z devin <devin@cognition.ai> # add billing_provider_module config table for external billing provider integration
 schemas/metaschema_modules_public/tables/realtime_module/table [schemas/metaschema_modules_public/schema] 2026-05-09T10:00:00Z devin <devin@cognition.ai> # add realtime_module config table for real-time subscription infrastructure
+schemas/metaschema_modules_public/tables/rate_limit_meters_module/table [schemas/metaschema_modules_public/schema] 2026-05-16T00:00:00Z devin <devin@cognition.ai> # add rate_limit_meters_module for rolling window abuse protection (standalone rate limiting)
+schemas/metaschema_modules_public/tables/config_secrets_org_module/table [schemas/metaschema_modules_public/schema] 2026-05-18T00:00:00Z devin <devin@cognition.ai> # add config_secrets_org_module config table for org-scoped encrypted secrets
+schemas/metaschema_modules_public/tables/inference_log_module/table [schemas/metaschema_modules_public/schema] 2026-05-12T23:00:00Z devin <devin@cognition.ai> # add inference_log_module config table for partitioned LLM inference logging

package/revert/schemas/metaschema_modules_public/tables/config_secrets_org_module/table.sql

@@ -0,0 +1,7 @@
+-- Revert schemas/metaschema_modules_public/tables/config_secrets_org_module/table from pg
+
+BEGIN;
+
+DROP TABLE metaschema_modules_public.config_secrets_org_module;
+
+COMMIT;

package/revert/schemas/metaschema_modules_public/tables/config_secrets_user_module/table.sql

@@ -0,0 +1,7 @@
+-- Revert schemas/metaschema_modules_public/tables/config_secrets_user_module/table from pg
+
+BEGIN;
+
+DROP TABLE metaschema_modules_public.config_secrets_user_module;
+
+COMMIT;

package/revert/schemas/metaschema_modules_public/tables/events_module/table.sql

@@ -0,0 +1,7 @@
+-- Revert schemas/metaschema_modules_public/tables/events_module/table from pg
+
+BEGIN;
+
+DROP TABLE metaschema_modules_public.events_module;
+
+COMMIT;

package/revert/schemas/metaschema_modules_public/tables/inference_log_module/table.sql

@@ -0,0 +1,3 @@
+-- Revert schemas/metaschema_modules_public/tables/inference_log_module/table from pg
+
+DROP TABLE IF EXISTS metaschema_modules_public.inference_log_module;

package/revert/schemas/metaschema_modules_public/tables/rate_limit_meters_module/table.sql

@@ -0,0 +1,7 @@
+-- Revert schemas/metaschema_modules_public/tables/rate_limit_meters_module/table from pg
+
+BEGIN;
+
+DROP TABLE metaschema_modules_public.rate_limit_meters_module;
+
+COMMIT;

package/revert/schemas/metaschema_modules_public/tables/user_state_module/table.sql

@@ -0,0 +1,7 @@
+-- Revert schemas/metaschema_modules_public/tables/user_state_module/table from pg
+
+BEGIN;
+
+DROP TABLE metaschema_modules_public.user_state_module;
+
+COMMIT;