@vezlo/assistant-server 1.3.0 → 2.0.0

package/README.md

@@ -2,6 +2,24 @@
 
 🚀 **Production-ready Node.js/TypeScript API server** for the Vezlo AI Assistant platform - Complete backend APIs with Docker deployment and database migrations.
 
+## 🚨 Breaking Change Notice (v2.0.0)
+
+**This version introduces multi-tenancy support with breaking changes. Existing data will not be migrated automatically.**
+
+### Migration Required
+- **Database Schema**: New authentication and multi-tenancy tables
+- **Auth Model**: Endpoints now use a mix of auth modes — some support JWT or API key, and select public endpoints remain for the chat widget
+- **Data Structure**: Foreign key relationships updated for multi-tenancy
+
+### Quick Migration Steps
+1. **Upgrade**: `npm install @vezlo/assistant-server@latest`
+2. **Run migrations**: `npm run migrate:latest`
+3. **Setup**: `npm run seed-default`
+
+See [CHANGELOG.md](./CHANGELOG.md) for complete migration guide.
+
+---
+
 ## 🏗️ Architecture
 
 - **Backend APIs** - RESTful API endpoints for AI chat and knowledge management
@@ -32,11 +50,25 @@ cd assistant-server
 npm install
 ```
 
+## 🏪 Vercel Marketplace Integration
+
+**🚀 Recommended for Vercel Users** - Deploy with automated setup:
+
+[![Install on Vercel](https://vercel.com/button)](https://vercel.com/marketplace/vezlo-assistant-server)
+
+The Vercel Marketplace integration provides:
+- **Guided Configuration** - Step-by-step setup wizard
+- **Automatic Environment Setup** - No manual configuration needed
+- **Database Migration** - Automatic table creation
+- **Production Optimization** - Optimized for Vercel's serverless platform
+
+[Learn more about the marketplace integration →](https://vercel.com/marketplace/vezlo-assistant-server)
+
 ## 🚀 Quick Start (Interactive Setup)
 
 ### Prerequisites
 - Node.js 20+ and npm 9+
-- Supabase project (or PostgreSQL database)
+- Supabase project
 - OpenAI API key
 
 ### Easy Setup with Interactive Wizard
@@ -55,10 +87,13 @@ npm run setup
 ```
 
 The wizard will guide you through:
-1. **Database Configuration** - Choose Supabase or PostgreSQL
-2. **OpenAI API Setup** - Configure your AI model
-3. **Automatic Table Creation** - Creates all required database tables
-4. **Environment File Generation** - Saves configuration to .env
+1. **Supabase Configuration** - URL, Service Role Key, DB host/port/name/user/password (with defaults)
+2. **OpenAI Configuration** - API key, model, temperature, max tokens
+3. **Validation (non‑blocking)** - Tests Supabase API and DB connectivity
+4. **Migrations** - Runs Knex migrations if DB validation passes; otherwise shows how to run later
+5. **Environment** - Generates `.env` (does not overwrite if it already exists)
+6. **Default Data Seeding** - Creates default admin user and company
+7. **API Key Generation** - Generates API key for the default company
 
 After setup completes, start the server:
 
@@ -107,22 +142,31 @@ AI_MODEL=gpt-4o
 MIGRATION_SECRET_KEY=your-secure-migration-key-here
 ```
 
-#### 3. Setup Database Tables
+#### 3. Run Database Migrations (Recommended)
+```bash
+# Using Knex migrations (primary method)
+npm run migrate:latest
+
+# Or via API after server is running
+curl "http://localhost:3000/api/migrate?key=$MIGRATION_SECRET_KEY"
+```
 
-**Option A: Automated Setup**
+#### 4. Create Default Admin & Generate API Key
 ```bash
-vezlo-setup  # Run wizard and choose option 3 to use existing .env
+# Create default admin user and company (if not exists)
+npm run seed-default
+
+# Generate API key for library integration
+npm run generate-key
 ```
 
-**Option B: Manual SQL**
+Optional fallback (not recommended if using migrations):
 ```bash
-# Copy schema to Supabase SQL Editor
+# Run raw SQL in Supabase Dashboard → SQL Editor
 cat database-schema.sql
-
-# Then execute in Supabase Dashboard → SQL Editor
 ```
 
-#### 4. Validate Setup
+#### 5. Validate Setup
 
 ```bash
 # Verify database connection and tables
@@ -132,7 +176,7 @@ vezlo-validate
 npm run validate
 ```
 
-#### 5. Start Server
+#### 6. Start Server
 
 ```bash
 # If installed globally
@@ -148,7 +192,7 @@ npm run build && npm start
 ### Docker Deployment
 
 ```bash
-# Start with Docker Compose
+# Start with Docker Compose (uses .env from project root)
 docker-compose up -d
 
 # View logs
@@ -157,19 +201,36 @@ docker-compose logs -f vezlo-server
 
 ## ☁️ Vercel Deployment
 
-Deploy to Vercel's serverless platform with one click:
+Deploy to Vercel's serverless platform with multiple options. The Marketplace integration collects your credentials during configuration and sets environment variables automatically.
+
+### Option 1: Vercel Marketplace Integration (Recommended)
+
+**🚀 Deploy via Vercel Marketplace** - Automated setup with guided configuration:
+
+[![Install on Vercel](https://vercel.com/button)](https://vercel.com/marketplace/vezlo-assistant-server)
 
-### One-Click Deploy
+**Benefits:**
+- ✅ **Guided Setup** - Step-by-step configuration wizard
+- ✅ **Automatic Environment Variables** - No manual env var configuration needed
+- ✅ **Database Migration** - Automatic table creation and schema setup
+- ✅ **Production Ready** - Optimized for Vercel's serverless platform
 
-[![Deploy with Vercel](https://vercel.com/button)](https://vercel.com/new/clone?repository-url=https://github.com/vezlo/assistant-server&env=SUPABASE_URL,SUPABASE_ANON_KEY,SUPABASE_SERVICE_KEY,SUPABASE_DB_HOST,SUPABASE_DB_PORT,SUPABASE_DB_NAME,SUPABASE_DB_USER,SUPABASE_DB_PASSWORD,OPENAI_API_KEY,MIGRATION_SECRET_KEY&envDescription=Required%20environment%20variables&envLink=https://github.com/vezlo/assistant-server/blob/main/env.example)
+**After Installation:**
+1. Run the migration URL: `https://your-project.vercel.app/api/migrate?key=YOUR_MIGRATION_SECRET`
+2. Verify deployment: `https://your-project.vercel.app/health`
+3. Access API docs: `https://your-project.vercel.app/docs`
+
+### Option 2: One-Click Deploy Button
+
+[![Deploy with Vercel](https://vercel.com/button)](https://vercel.com/new/clone?repository-url=https://github.com/vezlo/assistant-server&integration-ids=oac_f2GcBt8U4FhiVJ4qWv5PYMEZ)
 
 This will:
 - Fork the repository to your GitHub
 - Create a Vercel project
-- Prompt for required environment variables
+- Require marketplace integration setup
 - Deploy automatically
 
-### Manual Vercel Deploy
+### Option 3: Manual Vercel Deploy
 
 ```bash
 # Install Vercel CLI
@@ -183,9 +244,9 @@ vercel
 
 ### Prerequisites for Vercel
 
-1. **Setup Database First**: Run `vezlo-setup` locally or execute `database-schema.sql` in Supabase
-2. **Get Credentials**: Collect Supabase and OpenAI credentials
-3. **Configure Environment Variables** in Vercel project settings
+1. Supabase project (URL, Service Role key, DB host/port/name/user/password)
+2. OpenAI API key
+3. If not using the Marketplace, add environment variables in Vercel project settings
 
 See [docs/VERCEL_DEPLOYMENT.md](docs/VERCEL_DEPLOYMENT.md) for detailed deployment guide.
 
@@ -196,7 +257,6 @@ Edit `.env` file with your credentials:
 ```bash
 # REQUIRED - Supabase Configuration
 SUPABASE_URL=https://your-project-id.supabase.co
-SUPABASE_ANON_KEY=your-anon-key
 SUPABASE_SERVICE_KEY=your-service-role-key
 
 # REQUIRED - Database Configuration for Knex.js Migrations
@@ -215,6 +275,11 @@ AI_MAX_TOKENS=1000
 # REQUIRED - Database Migration Security
 MIGRATION_SECRET_KEY=your-secure-migration-key-here
 
+# REQUIRED - Authentication
+JWT_SECRET=your-super-secret-jwt-key-here-change-this-in-production
+DEFAULT_ADMIN_EMAIL=admin@vezlo.org
+DEFAULT_ADMIN_PASSWORD=admin123
+
 # OPTIONAL - Server Configuration
 PORT=3000
 NODE_ENV=production
@@ -223,6 +288,9 @@ LOG_LEVEL=info
 # OPTIONAL - CORS Configuration
 CORS_ORIGINS=http://localhost:3000,http://localhost:5173
 
+# OPTIONAL - Swagger Base URL
+BASE_URL=http://localhost:3000
+
 # OPTIONAL - Rate Limiting
 RATE_LIMIT_WINDOW=60000
 RATE_LIMIT_MAX=100
@@ -231,12 +299,6 @@ RATE_LIMIT_MAX=100
 ORGANIZATION_NAME=Vezlo
 ASSISTANT_NAME=Vezlo Assistant
 
-# OPTIONAL - Feature Flags
-ENABLE_CACHE=true
-ENABLE_VOICE=true
-ENABLE_GITHUB_SYNC=true
-ENABLE_HUMAN_HANDOFF=true
-
 # OPTIONAL - Knowledge Base
 CHUNK_SIZE=1000
 CHUNK_OVERLAP=200
@@ -247,20 +309,36 @@ CHUNK_OVERLAP=200
 The package provides these command-line tools:
 
 ### vezlo-setup
-**Interactive setup wizard** that guides you through the complete configuration process. This CLI tool provides the same functionality as the web-based setup wizard but runs in your terminal.
+Interactive setup wizard that guides you through configuration.
 
 ```bash
 vezlo-setup
 ```
 
+### vezlo-seed-default
+Creates default admin user and company.
+
+```bash
+vezlo-seed-default
+```
+
+### vezlo-generate-key
+Generates API key for the default admin's company. The API key is used by src-to-kb library.
+
+```bash
+vezlo-generate-key
+```
+
 ### vezlo-validate
 Validates database connection and verifies all tables exist.
+
 ```bash
 vezlo-validate
 ```
 
 ### vezlo-server
 Starts the API server.
+
 ```bash
 vezlo-server
 ```
@@ -393,19 +471,32 @@ curl -X POST /api/messages/msg456/generate \
 
 ## 🗄️ Database Setup
 
-Run the SQL schema in your Supabase SQL Editor:
+### Option A: Run Migrations (Recommended)
+
+Use the built‑in migration endpoints to create/upgrade tables:
+
+```bash
+# Run pending migrations
+curl "http://localhost:3000/api/migrate?key=your-migration-secret-key"
+
+# Check migration status
+curl "http://localhost:3000/api/migrate/status?key=your-migration-secret-key"
+```
+
+These endpoints execute Knex migrations and keep schema versioned.
+
+### Option B: Manual SQL (Fallback)
+
+If you prefer manual setup, run the SQL schema in Supabase SQL Editor:
 
 ```bash
-# Copy the database schema file
-cp database-schema.sql /path/to/your/supabase/sql-editor
+# View the schema SQL locally
+cat database-schema.sql
+
+# Copy into Supabase Dashboard → SQL Editor and execute
 ```
 
-The `database-schema.sql` file contains all necessary tables and functions:
-- **conversations** - Chat conversation management
-- **messages** - Individual messages within conversations  
-- **message_feedback** - User feedback on messages
-- **knowledge_items** - Knowledge base items with vector embeddings
-- **match_knowledge_items()** - Vector similarity search function
+The `database-schema.sql` contains all required tables and functions.
 
 ## 🐳 Docker Commands
 
@@ -478,8 +569,11 @@ npm install
 # Build TypeScript
 npm run build
 
-# Start development server
-npm run dev
+# Start server (Node)
+npm start
+
+# Or start via CLI wrapper
+npx vezlo-server
 
 # Run tests
 npm test
@@ -518,8 +612,11 @@ Ensure all required environment variables are set:
 - `SUPABASE_DB_HOST`, `SUPABASE_DB_PASSWORD` (required for migrations)
 - `OPENAI_API_KEY` (required)
 - `MIGRATION_SECRET_KEY` (required for migration endpoints)
+- `JWT_SECRET` (required for authentication)
+- `DEFAULT_ADMIN_EMAIL` and `DEFAULT_ADMIN_PASSWORD` (required for initial setup)
 - `NODE_ENV=production`
 - `CORS_ORIGINS` (set to your domain)
+- `BASE_URL` (optional, for custom Swagger server URL)
 
 ### Docker Production
 ```bash
@@ -603,4 +700,4 @@ This project is dual-licensed:
 
 ---
 
-**Status**: ✅ Production Ready | **Version**: 1.3.0 | **Node.js**: 20+ | **TypeScript**: 5+
+**Status**: ✅ Production Ready | **Version**: 2.0.0 | **Node.js**: 20+ | **TypeScript**: 5+

package/bin/vezlo-server.js

@@ -9,7 +9,7 @@ const path = require('path');
 const fs = require('fs');
 
 // Check if server is built
-const serverPath = path.join(__dirname, '..', 'dist', 'server.js');
+const serverPath = path.join(__dirname, '..', 'dist', 'src', 'server.js');
 
 if (!fs.existsSync(serverPath)) {
   console.error('❌ Error: Server not built. Please run "npm run build" first.');

package/database-schema.sql

@@ -1,49 +1,128 @@
--- Vezlo AI Assistant - Modern Database Schema
--- Finalized schema with conversation-based chat and unified knowledge base
+-- Vezlo AI Assistant - Database Schema
+-- Simplified schema dump with all tables, indexes, and constraints
 -- Run this in your Supabase SQL Editor
--- All tables prefixed with 'vezlo_' to avoid conflicts with existing user tables
 
 -- Enable required extensions
 CREATE EXTENSION IF NOT EXISTS vector;
 
 -- ============================================================================
--- CONVERSATIONS & MESSAGES SCHEMA (Modern 2-API Flow)
+-- KNEX MIGRATION TRACKING TABLES
+-- ============================================================================
+
+-- Knex.js migration tracking table
+CREATE TABLE IF NOT EXISTS knex_migrations (
+  id SERIAL PRIMARY KEY,
+  name VARCHAR(255) NOT NULL,
+  batch INTEGER NOT NULL,
+  migration_time TIMESTAMPTZ DEFAULT NOW()
+);
+
+-- Knex.js migration lock table
+CREATE TABLE IF NOT EXISTS knex_migrations_lock (
+  index INTEGER PRIMARY KEY,
+  is_locked INTEGER
+);
+
+-- Insert initial migration entries (marks migrations as already run)
+-- This ensures Knex knows the schema was created manually
+-- Only insert if they don't already exist
+INSERT INTO knex_migrations (name, batch, migration_time) 
+SELECT '001_initial_schema.ts', 1, NOW()
+WHERE NOT EXISTS (SELECT 1 FROM knex_migrations WHERE name = '001_initial_schema.ts');
+
+INSERT INTO knex_migrations (name, batch, migration_time) 
+SELECT '002_multitenancy_schema.ts', 1, NOW()
+WHERE NOT EXISTS (SELECT 1 FROM knex_migrations WHERE name = '002_multitenancy_schema.ts');
+
+-- Set migration lock to unlocked (0 = unlocked, 1 = locked)
+INSERT INTO knex_migrations_lock (index, is_locked) 
+VALUES (1, 0)
+ON CONFLICT (index) DO UPDATE SET is_locked = 0;
+
+-- ============================================================================
+-- USERS & COMPANIES SCHEMA (Multi-tenancy)
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS vezlo_users (
+  id BIGSERIAL PRIMARY KEY,
+  uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+  email TEXT UNIQUE NOT NULL,
+  name TEXT NOT NULL,
+  password_hash TEXT NOT NULL,
+  user_type TEXT DEFAULT 'internal', -- internal, external, admin
+  token_updated_at TIMESTAMPTZ DEFAULT NOW(),
+  created_at TIMESTAMPTZ DEFAULT NOW() NOT NULL,
+  updated_at TIMESTAMPTZ DEFAULT NOW() NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS vezlo_companies (
+  id BIGSERIAL PRIMARY KEY,
+  uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+  name TEXT NOT NULL,
+  domain TEXT UNIQUE,
+  created_at TIMESTAMPTZ DEFAULT NOW() NOT NULL,
+  updated_at TIMESTAMPTZ DEFAULT NOW() NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS vezlo_user_company_profiles (
+  id BIGSERIAL PRIMARY KEY,
+  uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+  user_id BIGINT NOT NULL REFERENCES vezlo_users(id) ON DELETE CASCADE,
+  company_id BIGINT NOT NULL REFERENCES vezlo_companies(id) ON DELETE CASCADE,
+  role TEXT DEFAULT 'user', -- admin, user, viewer
+  status TEXT DEFAULT 'active', -- active, inactive
+  created_at TIMESTAMPTZ DEFAULT NOW() NOT NULL,
+  updated_at TIMESTAMPTZ DEFAULT NOW() NOT NULL,
+  UNIQUE(user_id, company_id)
+);
+
+CREATE TABLE IF NOT EXISTS vezlo_api_keys (
+  id BIGSERIAL PRIMARY KEY,
+  uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+  company_id BIGINT NOT NULL REFERENCES vezlo_companies(id) ON DELETE CASCADE,
+  name TEXT NOT NULL,
+  key_hash TEXT NOT NULL,
+  expires_at TIMESTAMPTZ,
+  created_at TIMESTAMPTZ DEFAULT NOW() NOT NULL,
+  updated_at TIMESTAMPTZ DEFAULT NOW() NOT NULL
+);
+
+-- ============================================================================
+-- CONVERSATIONS & MESSAGES SCHEMA
 -- ============================================================================
 
--- Conversations table (renamed from chat_sessions)
 CREATE TABLE IF NOT EXISTS vezlo_conversations (
   id BIGSERIAL PRIMARY KEY,
   uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
-  company_id BIGINT,                        -- Multi-tenancy support
-  creator_id BIGINT NOT NULL,               -- User who created conversation
+  company_id BIGINT, -- Foreign key added in migration 002
+  creator_id BIGINT NOT NULL,
   title TEXT NOT NULL,
   message_count INTEGER DEFAULT 0,
-  created_at TIMESTAMPTZ DEFAULT NOW(),
-  updated_at TIMESTAMPTZ DEFAULT NOW(),
-  deleted_at TIMESTAMPTZ                    -- Soft delete
+  created_at TIMESTAMPTZ DEFAULT NOW() NOT NULL,
+  updated_at TIMESTAMPTZ DEFAULT NOW() NOT NULL,
+  deleted_at TIMESTAMPTZ -- Soft delete
 );
 
--- Messages table (supports parent-child relationships for regeneration)
 CREATE TABLE IF NOT EXISTS vezlo_messages (
   id BIGSERIAL PRIMARY KEY,
   uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
   conversation_id BIGINT NOT NULL REFERENCES vezlo_conversations(id) ON DELETE CASCADE,
   parent_message_id BIGINT REFERENCES vezlo_messages(id), -- For regeneration chains
-  type TEXT NOT NULL,                       -- user, assistant, system
+  type TEXT NOT NULL, -- user, assistant, system
   content TEXT NOT NULL,
-  status TEXT DEFAULT 'completed',          -- generating, completed, stopped, failed
-  metadata JSONB DEFAULT '{}',              -- For tool_calls, tool_results, etc.
-  created_at TIMESTAMPTZ DEFAULT NOW(),
-  updated_at TIMESTAMPTZ DEFAULT NOW()
+  status TEXT DEFAULT 'completed', -- generating, completed, stopped, failed
+  metadata JSONB DEFAULT '{}', -- For tool_calls, tool_results, etc.
+  created_at TIMESTAMPTZ DEFAULT NOW() NOT NULL,
+  updated_at TIMESTAMPTZ DEFAULT NOW() NOT NULL
 );
 
--- Message feedback table
 CREATE TABLE IF NOT EXISTS vezlo_message_feedback (
   id BIGSERIAL PRIMARY KEY,
   uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
   message_id BIGINT NOT NULL REFERENCES vezlo_messages(id) ON DELETE CASCADE,
-  user_id BIGINT NOT NULL,
-  rating TEXT NOT NULL,                     -- positive, negative
+  user_id BIGINT NOT NULL, -- Foreign key added in migration 002
+  company_id BIGINT, -- Added in migration 002 with foreign key
+  rating TEXT NOT NULL, -- positive, negative
   category TEXT,
   comment TEXT,
   suggested_improvement TEXT,
@@ -51,34 +130,98 @@ CREATE TABLE IF NOT EXISTS vezlo_message_feedback (
 );
 
 -- ============================================================================
--- KNOWLEDGE BASE SCHEMA (Unified Single Table)
+-- KNOWLEDGE BASE SCHEMA
 -- ============================================================================
 
--- Knowledge items table (folders, documents, files, URLs - everything)
 CREATE TABLE IF NOT EXISTS vezlo_knowledge_items (
   id BIGSERIAL PRIMARY KEY,
   uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
   parent_id BIGINT REFERENCES vezlo_knowledge_items(id), -- Hierarchical structure
-  company_id BIGINT,                        -- Multi-tenancy support
+  company_id BIGINT, -- Foreign key added in migration 002
   title TEXT NOT NULL,
   description TEXT,
-  type TEXT NOT NULL,                       -- folder, document, file, url, url_directory
-  content TEXT,                             -- For document type
-  file_url TEXT,                            -- For file/url types
-  file_size BIGINT,                         -- File size in bytes
-  file_type TEXT,                           -- MIME type for files
-  metadata JSONB DEFAULT '{}',              -- Flexible metadata storage
-  embedding vector(1536),                  -- OpenAI embeddings for search
-  processed_at TIMESTAMPTZ,                -- When embedding was generated
+  type TEXT NOT NULL, -- folder, document, file, url, url_directory
+  content TEXT, -- For document type
+  file_url TEXT, -- For file/url types
+  file_size BIGINT, -- File size in bytes
+  file_type TEXT, -- MIME type for files
+  metadata JSONB DEFAULT '{}', -- Flexible metadata storage
+  embedding vector(1536), -- OpenAI embeddings for search
+  processed_at TIMESTAMPTZ, -- When embedding was generated
   created_by BIGINT NOT NULL,
-  created_at TIMESTAMPTZ DEFAULT NOW(),
-  updated_at TIMESTAMPTZ DEFAULT NOW()
+  created_at TIMESTAMPTZ DEFAULT NOW() NOT NULL,
+  updated_at TIMESTAMPTZ DEFAULT NOW() NOT NULL
 );
 
+-- ============================================================================
+-- ADD FOREIGN KEY CONSTRAINTS (Matching Migration 002)
+-- These constraints use explicit names matching Knex migration naming convention
+-- for proper rollback compatibility: {table}_{column}_foreign
+-- ============================================================================
+
+-- Add foreign keys to vezlo_conversations (added in migration 002)
+DO $$ 
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'vezlo_conversations_company_id_foreign') THEN
+    ALTER TABLE vezlo_conversations 
+      ADD CONSTRAINT vezlo_conversations_company_id_foreign 
+      FOREIGN KEY (company_id) REFERENCES vezlo_companies(id) ON DELETE CASCADE;
+  END IF;
+END $$;
+
+-- Add foreign keys to vezlo_knowledge_items (added in migration 002)
+DO $$ 
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'vezlo_knowledge_items_company_id_foreign') THEN
+    ALTER TABLE vezlo_knowledge_items 
+      ADD CONSTRAINT vezlo_knowledge_items_company_id_foreign 
+      FOREIGN KEY (company_id) REFERENCES vezlo_companies(id) ON DELETE CASCADE;
+  END IF;
+END $$;
+
+-- Add foreign keys to vezlo_message_feedback (added in migration 002)
+DO $$ 
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'vezlo_message_feedback_user_id_foreign') THEN
+    ALTER TABLE vezlo_message_feedback 
+      ADD CONSTRAINT vezlo_message_feedback_user_id_foreign 
+      FOREIGN KEY (user_id) REFERENCES vezlo_users(id) ON DELETE CASCADE;
+  END IF;
+  
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'vezlo_message_feedback_company_id_foreign') THEN
+    ALTER TABLE vezlo_message_feedback 
+      ADD CONSTRAINT vezlo_message_feedback_company_id_foreign 
+      FOREIGN KEY (company_id) REFERENCES vezlo_companies(id) ON DELETE CASCADE;
+  END IF;
+END $$;
+
 -- ============================================================================
 -- INDEXES FOR PERFORMANCE
 -- ============================================================================
 
+-- Users indexes
+CREATE INDEX IF NOT EXISTS idx_vezlo_users_uuid ON vezlo_users(uuid);
+CREATE INDEX IF NOT EXISTS idx_vezlo_users_email ON vezlo_users(email);
+CREATE INDEX IF NOT EXISTS idx_vezlo_users_user_type ON vezlo_users(user_type);
+CREATE INDEX IF NOT EXISTS idx_vezlo_users_token_updated_at ON vezlo_users(token_updated_at);
+
+-- Companies indexes
+CREATE INDEX IF NOT EXISTS idx_vezlo_companies_uuid ON vezlo_companies(uuid);
+CREATE INDEX IF NOT EXISTS idx_vezlo_companies_domain ON vezlo_companies(domain);
+
+-- User company profiles indexes
+CREATE INDEX IF NOT EXISTS idx_vezlo_user_company_profiles_uuid ON vezlo_user_company_profiles(uuid);
+CREATE INDEX IF NOT EXISTS idx_vezlo_user_company_profiles_user_id ON vezlo_user_company_profiles(user_id);
+CREATE INDEX IF NOT EXISTS idx_vezlo_user_company_profiles_company_id ON vezlo_user_company_profiles(company_id);
+CREATE INDEX IF NOT EXISTS idx_vezlo_user_company_profiles_role ON vezlo_user_company_profiles(role);
+CREATE INDEX IF NOT EXISTS idx_vezlo_user_company_profiles_status ON vezlo_user_company_profiles(status);
+
+-- API keys indexes
+CREATE INDEX IF NOT EXISTS idx_vezlo_api_keys_uuid ON vezlo_api_keys(uuid);
+CREATE INDEX IF NOT EXISTS idx_vezlo_api_keys_company_id ON vezlo_api_keys(company_id);
+CREATE INDEX IF NOT EXISTS idx_vezlo_api_keys_key_hash ON vezlo_api_keys(key_hash);
+CREATE INDEX IF NOT EXISTS idx_vezlo_api_keys_expires_at ON vezlo_api_keys(expires_at);
+
 -- Conversations indexes
 CREATE INDEX IF NOT EXISTS idx_vezlo_conversations_uuid ON vezlo_conversations(uuid);
 CREATE INDEX IF NOT EXISTS idx_vezlo_conversations_company_id ON vezlo_conversations(company_id);
@@ -98,6 +241,7 @@ CREATE INDEX IF NOT EXISTS idx_vezlo_messages_created_at ON vezlo_messages(creat
 CREATE INDEX IF NOT EXISTS idx_vezlo_feedback_uuid ON vezlo_message_feedback(uuid);
 CREATE INDEX IF NOT EXISTS idx_vezlo_feedback_message_id ON vezlo_message_feedback(message_id);
 CREATE INDEX IF NOT EXISTS idx_vezlo_feedback_user_id ON vezlo_message_feedback(user_id);
+CREATE INDEX IF NOT EXISTS idx_vezlo_feedback_company_id ON vezlo_message_feedback(company_id);
 CREATE INDEX IF NOT EXISTS idx_vezlo_feedback_rating ON vezlo_message_feedback(rating);
 
 -- Knowledge items indexes
@@ -129,12 +273,28 @@ ON vezlo_knowledge_items(file_url) WHERE file_url IS NOT NULL;
 -- ============================================================================
 
 -- Enable RLS on all tables
+ALTER TABLE vezlo_users ENABLE ROW LEVEL SECURITY;
+ALTER TABLE vezlo_companies ENABLE ROW LEVEL SECURITY;
+ALTER TABLE vezlo_user_company_profiles ENABLE ROW LEVEL SECURITY;
+ALTER TABLE vezlo_api_keys ENABLE ROW LEVEL SECURITY;
 ALTER TABLE vezlo_conversations ENABLE ROW LEVEL SECURITY;
 ALTER TABLE vezlo_messages ENABLE ROW LEVEL SECURITY;
 ALTER TABLE vezlo_message_feedback ENABLE ROW LEVEL SECURITY;
 ALTER TABLE vezlo_knowledge_items ENABLE ROW LEVEL SECURITY;
 
 -- Policies for service role access (full access)
+CREATE POLICY "Service role can access all users" ON vezlo_users
+  FOR ALL USING (auth.role() = 'service_role');
+
+CREATE POLICY "Service role can access all companies" ON vezlo_companies
+  FOR ALL USING (auth.role() = 'service_role');
+
+CREATE POLICY "Service role can access all user company profiles" ON vezlo_user_company_profiles
+  FOR ALL USING (auth.role() = 'service_role');
+
+CREATE POLICY "Service role can access all API keys" ON vezlo_api_keys
+  FOR ALL USING (auth.role() = 'service_role');
+
 CREATE POLICY "Service role can access all conversations" ON vezlo_conversations
   FOR ALL USING (auth.role() = 'service_role');
 
@@ -150,6 +310,6 @@ CREATE POLICY "Service role can access all knowledge items" ON vezlo_knowledge_i
 -- Example company-based policies (uncomment and modify as needed)
 -- CREATE POLICY "Users can access their company conversations" ON vezlo_conversations
 --   FOR ALL USING (company_id = auth.jwt() ->> 'company_id');
-
+--
 -- CREATE POLICY "Users can access their company knowledge" ON vezlo_knowledge_items
 --   FOR ALL USING (company_id = auth.jwt() ->> 'company_id');

package/dist/knexfile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"knexfile.d.ts","sourceRoot":"","sources":["../knexfile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAcjC,QAAA,MAAM,MAAM,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;CA4EzC,CAAC;AAEF,eAAe,MAAM,CAAC"}
+{"version":3,"file":"knexfile.d.ts","sourceRoot":"","sources":["../knexfile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAejC,QAAA,MAAM,MAAM,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;CAoFzC,CAAC;AAEF,eAAe,MAAM,CAAC"}