agor-live 0.22.0 → 0.23.1

package/dist/core/mcp/index.cjs

@@ -43,6 +43,10 @@ var import_drizzle_orm5 = require("drizzle-orm");
 // src/db/database-wrapper.ts
 var import_drizzle_orm = require("drizzle-orm");
 
+// src/db/tenant-context.ts
+var import_node_async_hooks = require("async_hooks");
+var tenantDatabaseScope = new import_node_async_hooks.AsyncLocalStorage();
+
 // src/db/encryption.ts
 var import_node_crypto = require("crypto");
 
@@ -67,6 +71,7 @@ __export(schema_postgres_exports, {
   cardTypes: () => cardTypes,
   cards: () => cards,
   gatewayChannels: () => gatewayChannels,
+  gatewayOutboundMessages: () => gatewayOutboundMessages,
   groupMemberships: () => groupMemberships,
   groups: () => groups,
   kbDocumentUnits: () => kbDocumentUnits,
@@ -196,6 +201,7 @@ var t = {
 var sessions = (0, import_pg_core.pgTable)(
   "sessions",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -255,7 +261,9 @@ var sessions = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("sessions_tenant_id_idx").on(table.tenant_id),
     statusIdx: (0, import_pg_core.index)("sessions_status_idx").on(table.status),
+    statusReadyIdx: (0, import_pg_core.index)("sessions_status_ready_idx").on(table.status, table.ready_for_prompt),
     agenticToolIdx: (0, import_pg_core.index)("sessions_agentic_tool_idx").on(table.agentic_tool),
     boardIdx: (0, import_pg_core.index)("sessions_board_idx").on(table.board_id),
     branchIdx: (0, import_pg_core.index)("sessions_branch_idx").on(table.branch_id),
@@ -267,12 +275,13 @@ var sessions = (0, import_pg_core.pgTable)(
     // Partial unique index — covering for the scheduler's dedup lookup
     // AND serves as the DB-level guard against check-then-create races
     // in spawnScheduledSession.
-    scheduleRunUnique: (0, import_pg_core.uniqueIndex)("sessions_schedule_run_unique").on(table.schedule_id, table.scheduled_run_at).where(import_drizzle_orm2.sql`${table.schedule_id} IS NOT NULL AND ${table.scheduled_run_at} IS NOT NULL`)
+    scheduleRunUnique: (0, import_pg_core.uniqueIndex)("sessions_schedule_run_unique").on(table.tenant_id, table.schedule_id, table.scheduled_run_at).where(import_drizzle_orm2.sql`${table.schedule_id} IS NOT NULL AND ${table.scheduled_run_at} IS NOT NULL`)
   })
 );
 var sessionRelationships = (0, import_pg_core.pgTable)(
   "session_relationships",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     relationship_id: (0, import_pg_core.varchar)("relationship_id", { length: 36 }).primaryKey(),
     source_session_id: (0, import_pg_core.varchar)("source_session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     target_session_id: (0, import_pg_core.varchar)("target_session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
@@ -290,10 +299,23 @@ var sessionRelationships = (0, import_pg_core.pgTable)(
     data: t.json("data")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("session_relationships_tenant_id_idx").on(table.tenant_id),
     sourceIdx: (0, import_pg_core.index)("session_relationships_source_idx").on(table.source_session_id),
     targetIdx: (0, import_pg_core.index)("session_relationships_target_idx").on(table.target_session_id),
     callbackIdx: (0, import_pg_core.index)("session_relationships_callback_idx").on(table.callback_session_id),
+    // Composite indexes so the OR predicate in dispatchCompletionCallbacks
+    // (WHERE source_session_id = $1 OR target_session_id = $2) uses BitmapOr
+    // over these instead of a full tenant table scan via tenant_id_idx.
+    tenantSourceIdx: (0, import_pg_core.index)("session_relationships_tenant_source_idx").on(
+      table.tenant_id,
+      table.source_session_id
+    ),
+    tenantTargetIdx: (0, import_pg_core.index)("session_relationships_tenant_target_idx").on(
+      table.tenant_id,
+      table.target_session_id
+    ),
     sourceTargetTypeUnique: (0, import_pg_core.uniqueIndex)("session_relationships_source_target_type_unique").on(
+      table.tenant_id,
       table.source_session_id,
       table.target_session_id,
       table.relationship_type
@@ -303,6 +325,7 @@ var sessionRelationships = (0, import_pg_core.pgTable)(
 var tasks = (0, import_pg_core.pgTable)(
   "tasks",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     task_id: (0, import_pg_core.varchar)("task_id", { length: 36 }).primaryKey(),
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     created_at: t.timestamp("created_at").notNull(),
@@ -332,19 +355,23 @@ var tasks = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("tasks_tenant_id_idx").on(table.tenant_id),
     sessionIdx: (0, import_pg_core.index)("tasks_session_idx").on(table.session_id),
     statusIdx: (0, import_pg_core.index)("tasks_status_idx").on(table.status),
     createdIdx: (0, import_pg_core.index)("tasks_created_idx").on(table.created_at),
+    // Composite for "latest task for session" queries (ORDER BY created_at DESC LIMIT 1).
+    sessionCreatedIdx: (0, import_pg_core.index)("tasks_session_created_idx").on(table.session_id, table.created_at),
     queueIdx: (0, import_pg_core.index)("tasks_queue_idx").on(table.session_id, table.status, table.queue_position),
     // Partial unique index — defense-in-depth for `tasks.createPending` race
     // serialization. Only QUEUED rows are constrained; CREATED/RUNNING/done
     // rows have NULL queue_position and are unaffected.
-    queuedPositionUnique: (0, import_pg_core.uniqueIndex)("tasks_queued_position_unique").on(table.session_id, table.queue_position).where(import_drizzle_orm2.sql`${table.status} = 'queued'`)
+    queuedPositionUnique: (0, import_pg_core.uniqueIndex)("tasks_queued_position_unique").on(table.tenant_id, table.session_id, table.queue_position).where(import_drizzle_orm2.sql`${table.status} = 'queued'`)
   })
 );
 var serializedSessions = (0, import_pg_core.pgTable)(
   "serialized_sessions",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
@@ -360,6 +387,7 @@ var serializedSessions = (0, import_pg_core.pgTable)(
     // gzipped; NULL while status='processing'
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("serialized_sessions_tenant_id_idx").on(table.tenant_id),
     sessionTurnIdx: (0, import_pg_core.index)("serialized_sessions_session_turn_idx").on(
       table.session_id,
       table.turn_index
@@ -370,6 +398,7 @@ var serializedSessions = (0, import_pg_core.pgTable)(
 var messages = (0, import_pg_core.pgTable)(
   "messages",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     message_id: (0, import_pg_core.varchar)("message_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -409,15 +438,23 @@ var messages = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("messages_tenant_id_idx").on(table.tenant_id),
+    tenantTimestampIdx: (0, import_pg_core.index)("messages_tenant_timestamp_idx").on(table.tenant_id, table.timestamp),
     // Indexes for efficient lookups
     sessionIdx: (0, import_pg_core.index)("messages_session_id_idx").on(table.session_id),
     taskIdx: (0, import_pg_core.index)("messages_task_id_idx").on(table.task_id),
-    sessionIndexIdx: (0, import_pg_core.index)("messages_session_index_idx").on(table.session_id, table.index)
+    sessionIndexIdx: (0, import_pg_core.index)("messages_session_index_idx").on(table.session_id, table.index),
+    timestampIdx: (0, import_pg_core.index)("messages_timestamp_idx").on(table.timestamp),
+    sessionTimestampIdx: (0, import_pg_core.index)("messages_session_timestamp_idx").on(
+      table.session_id,
+      table.timestamp
+    )
   })
 );
 var boards = (0, import_pg_core.pgTable)(
   "boards",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
     updated_at: t.timestamp("updated_at"),
@@ -425,7 +462,7 @@ var boards = (0, import_pg_core.pgTable)(
     created_by: (0, import_pg_core.varchar)("created_by", { length: 36 }).notNull(),
     // Materialized for lookups
     name: (0, import_pg_core.text)("name").notNull(),
-    slug: (0, import_pg_core.text)("slug").unique(),
+    slug: (0, import_pg_core.text)("slug"),
     primary_assistant_id: (0, import_pg_core.varchar)("primary_assistant_id", { length: 36 }).references(
       () => branches.branch_id,
       {
@@ -440,18 +477,21 @@ var boards = (0, import_pg_core.pgTable)(
     archived_by: (0, import_pg_core.varchar)("archived_by", { length: 36 })
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("boards_tenant_id_idx").on(table.tenant_id),
     nameIdx: (0, import_pg_core.index)("boards_name_idx").on(table.name),
-    slugIdx: (0, import_pg_core.index)("boards_slug_idx").on(table.slug)
+    slugIdx: (0, import_pg_core.index)("boards_slug_idx").on(table.slug),
+    slugTenantUnique: (0, import_pg_core.uniqueIndex)("boards_tenant_slug_unique").on(table.tenant_id, table.slug)
   })
 );
 var repos = (0, import_pg_core.pgTable)(
   "repos",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     repo_id: (0, import_pg_core.varchar)("repo_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
     updated_at: t.timestamp("updated_at"),
     // Materialized for querying
-    slug: (0, import_pg_core.text)("slug").notNull().unique(),
+    slug: (0, import_pg_core.text)("slug").notNull(),
     repo_type: (0, import_pg_core.text)("repo_type", { enum: ["remote", "local"] }).notNull().default("remote"),
     // Unix group for repo-level git access (agor_rp_<short-id>)
     // Users who have access to ANY branch in this repo get added to this group.
@@ -462,12 +502,15 @@ var repos = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
-    slugIdx: (0, import_pg_core.index)("repos_slug_idx").on(table.slug)
+    tenantIdx: (0, import_pg_core.index)("repos_tenant_id_idx").on(table.tenant_id),
+    slugIdx: (0, import_pg_core.index)("repos_slug_idx").on(table.slug),
+    slugTenantUnique: (0, import_pg_core.uniqueIndex)("repos_tenant_slug_unique").on(table.tenant_id, table.slug)
   })
 );
 var branches = (0, import_pg_core.pgTable)(
   "branches",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).primaryKey(),
     repo_id: (0, import_pg_core.varchar)("repo_id", { length: 36 }).notNull().references(() => repos.repo_id, { onDelete: "cascade" }),
@@ -542,6 +585,7 @@ var branches = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("branches_tenant_id_idx").on(table.tenant_id),
     repoIdx: (0, import_pg_core.index)("branches_repo_idx").on(table.repo_id),
     nameIdx: (0, import_pg_core.index)("branches_name_idx").on(table.name),
     refIdx: (0, import_pg_core.index)("branches_ref_idx").on(table.ref),
@@ -555,22 +599,26 @@ var branches = (0, import_pg_core.pgTable)(
 var branchOwners = (0, import_pg_core.pgTable)(
   "branch_owners",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
     created_at: t.timestamp("created_at").defaultNow()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("branch_owners_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.branch_id, table.user_id] })
   })
 );
 var boardOwners = (0, import_pg_core.pgTable)(
   "board_owners",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
     created_at: t.timestamp("created_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("board_owners_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.board_id, table.user_id] }),
     userIdx: (0, import_pg_core.index)("board_owners_user_idx").on(table.user_id)
   })
@@ -578,6 +626,7 @@ var boardOwners = (0, import_pg_core.pgTable)(
 var schedules = (0, import_pg_core.pgTable)(
   "schedules",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     schedule_id: (0, import_pg_core.varchar)("schedule_id", { length: 36 }).primaryKey(),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
     name: (0, import_pg_core.text)("name").notNull(),
@@ -601,6 +650,7 @@ var schedules = (0, import_pg_core.pgTable)(
     created_by: (0, import_pg_core.varchar)("created_by", { length: 36 }).notNull().references(() => users.user_id)
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("schedules_tenant_id_idx").on(table.tenant_id),
     enabledNextRunIdx: (0, import_pg_core.index)("schedules_enabled_next_run_idx").on(table.enabled, table.next_run_at),
     branchIdx: (0, import_pg_core.index)("schedules_branch_idx").on(table.branch_id),
     createdByIdx: (0, import_pg_core.index)("schedules_created_by_idx").on(table.created_by)
@@ -609,12 +659,13 @@ var schedules = (0, import_pg_core.pgTable)(
 var users = (0, import_pg_core.pgTable)(
   "users",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
     updated_at: t.timestamp("updated_at"),
     // Materialized for auth lookups
-    email: (0, import_pg_core.text)("email").unique().notNull(),
+    email: (0, import_pg_core.text)("email").notNull(),
     password: (0, import_pg_core.text)("password").notNull(),
     // bcrypt hashed
     // Basic profile (materialized for display)
@@ -630,16 +681,22 @@ var users = (0, import_pg_core.pgTable)(
     onboarding_completed: t.bool("onboarding_completed").notNull().default(false),
     // Force password change flag (admin-settable, auto-cleared on password change)
     must_change_password: t.bool("must_change_password").notNull().default(false),
+    // Auth invalidation marker. Password changes set this timestamp so any
+    // previously issued browser access or refresh token is rejected.
+    tokens_valid_after: t.timestamp("tokens_valid_after"),
     // JSON blob for profile/preferences
     data: t.json("data").$type().notNull()
   },
   (table) => ({
-    emailIdx: (0, import_pg_core.index)("users_email_idx").on(table.email)
+    tenantIdx: (0, import_pg_core.index)("users_tenant_id_idx").on(table.tenant_id),
+    emailIdx: (0, import_pg_core.index)("users_email_idx").on(table.email),
+    emailTenantUnique: (0, import_pg_core.uniqueIndex)("users_tenant_email_unique").on(table.tenant_id, table.email)
   })
 );
 var groups = (0, import_pg_core.pgTable)(
   "groups",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).primaryKey(),
     name: (0, import_pg_core.text)("name").notNull(),
     slug: (0, import_pg_core.text)("slug").notNull(),
@@ -652,13 +709,15 @@ var groups = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
-    slugIdx: (0, import_pg_core.uniqueIndex)("groups_slug_idx").on(table.slug),
+    tenantIdx: (0, import_pg_core.index)("groups_tenant_id_idx").on(table.tenant_id),
+    slugIdx: (0, import_pg_core.uniqueIndex)("groups_tenant_slug_unique").on(table.tenant_id, table.slug),
     archivedIdx: (0, import_pg_core.index)("groups_archived_idx").on(table.archived)
   })
 );
 var groupMemberships = (0, import_pg_core.pgTable)(
   "group_memberships",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).notNull().references(() => groups.group_id, { onDelete: "cascade" }),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
     added_by: (0, import_pg_core.varchar)("added_by", { length: 36 }).references(() => users.user_id, {
@@ -667,6 +726,7 @@ var groupMemberships = (0, import_pg_core.pgTable)(
     created_at: t.timestamp("created_at").notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("group_memberships_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.group_id, table.user_id] }),
     userIdx: (0, import_pg_core.index)("group_memberships_user_idx").on(table.user_id)
   })
@@ -674,6 +734,7 @@ var groupMemberships = (0, import_pg_core.pgTable)(
 var branchGroupGrants = (0, import_pg_core.pgTable)(
   "branch_group_grants",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
     group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).notNull().references(() => groups.group_id, { onDelete: "cascade" }),
     can: (0, import_pg_core.text)("can", { enum: [...BRANCH_PERMISSION_LEVELS] }).notNull().default("view"),
@@ -685,6 +746,7 @@ var branchGroupGrants = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("branch_group_grants_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.branch_id, table.group_id] }),
     groupIdx: (0, import_pg_core.index)("branch_group_grants_group_idx").on(table.group_id)
   })
@@ -692,6 +754,7 @@ var branchGroupGrants = (0, import_pg_core.pgTable)(
 var boardGroupGrants = (0, import_pg_core.pgTable)(
   "board_group_grants",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
     group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).notNull().references(() => groups.group_id, { onDelete: "cascade" }),
     can: (0, import_pg_core.text)("can", { enum: [...BRANCH_PERMISSION_LEVELS] }).notNull().default("view"),
@@ -703,6 +766,7 @@ var boardGroupGrants = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("board_group_grants_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.board_id, table.group_id] }),
     groupIdx: (0, import_pg_core.index)("board_group_grants_group_idx").on(table.group_id)
   })
@@ -710,6 +774,7 @@ var boardGroupGrants = (0, import_pg_core.pgTable)(
 var appVariables = (0, import_pg_core.pgTable)(
   "app_variables",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     variable_id: (0, import_pg_core.varchar)("variable_id", { length: 36 }).primaryKey(),
     namespace: (0, import_pg_core.text)("namespace").notNull(),
     key: (0, import_pg_core.text)("key").notNull(),
@@ -725,13 +790,19 @@ var appVariables = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at").notNull()
   },
   (table) => ({
-    namespaceKeyIdx: (0, import_pg_core.uniqueIndex)("app_variables_namespace_key_idx").on(table.namespace, table.key),
+    tenantIdx: (0, import_pg_core.index)("app_variables_tenant_id_idx").on(table.tenant_id),
+    namespaceKeyIdx: (0, import_pg_core.uniqueIndex)("app_variables_tenant_namespace_key_unique").on(
+      table.tenant_id,
+      table.namespace,
+      table.key
+    ),
     namespaceIdx: (0, import_pg_core.index)("app_variables_namespace_idx").on(table.namespace)
   })
 );
 var userApiKeys = (0, import_pg_core.pgTable)(
   "user_api_keys",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
     name: (0, import_pg_core.text)("name").notNull(),
@@ -743,6 +814,7 @@ var userApiKeys = (0, import_pg_core.pgTable)(
     last_used_at: t.timestamp("last_used_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("user_api_keys_tenant_id_idx").on(table.tenant_id),
     userIdx: (0, import_pg_core.index)("user_api_keys_user_idx").on(table.user_id),
     prefixIdx: (0, import_pg_core.index)("user_api_keys_prefix_idx").on(table.prefix)
   })
@@ -750,6 +822,7 @@ var userApiKeys = (0, import_pg_core.pgTable)(
 var mcpServers = (0, import_pg_core.pgTable)(
   "mcp_servers",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     mcp_server_id: (0, import_pg_core.varchar)("mcp_server_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -776,6 +849,7 @@ var mcpServers = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("mcp_servers_tenant_id_idx").on(table.tenant_id),
     nameIdx: (0, import_pg_core.index)("mcp_servers_name_idx").on(table.name),
     scopeIdx: (0, import_pg_core.index)("mcp_servers_scope_idx").on(table.scope),
     ownerIdx: (0, import_pg_core.index)("mcp_servers_owner_idx").on(table.owner_user_id),
@@ -785,6 +859,7 @@ var mcpServers = (0, import_pg_core.pgTable)(
 var cardTypes = (0, import_pg_core.pgTable)(
   "card_types",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     card_type_id: (0, import_pg_core.varchar)("card_type_id", { length: 36 }).primaryKey(),
     name: (0, import_pg_core.text)("name").notNull(),
     emoji: (0, import_pg_core.text)("emoji"),
@@ -796,12 +871,14 @@ var cardTypes = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at").notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("card_types_tenant_id_idx").on(table.tenant_id),
     nameIdx: (0, import_pg_core.index)("card_types_name_idx").on(table.name)
   })
 );
 var cards = (0, import_pg_core.pgTable)(
   "cards",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     card_id: (0, import_pg_core.varchar)("card_id", { length: 36 }).primaryKey(),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
     card_type_id: (0, import_pg_core.varchar)("card_type_id", { length: 36 }).references(() => cardTypes.card_type_id, {
@@ -822,6 +899,7 @@ var cards = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("cards_tenant_id_idx").on(table.tenant_id),
     boardIdx: (0, import_pg_core.index)("cards_board_idx").on(table.board_id),
     cardTypeIdx: (0, import_pg_core.index)("cards_card_type_idx").on(table.card_type_id),
     titleIdx: (0, import_pg_core.index)("cards_title_idx").on(table.title),
@@ -832,6 +910,7 @@ var cards = (0, import_pg_core.pgTable)(
 var artifacts = (0, import_pg_core.pgTable)(
   "artifacts",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     artifact_id: (0, import_pg_core.varchar)("artifact_id", { length: 36 }).primaryKey(),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).references(() => branches.branch_id, {
       onDelete: "set null"
@@ -867,6 +946,7 @@ var artifacts = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("artifacts_tenant_id_idx").on(table.tenant_id),
     branchIdx: (0, import_pg_core.index)("artifacts_branch_idx").on(table.branch_id),
     sourceSessionIdx: (0, import_pg_core.index)("artifacts_source_session_idx").on(table.source_session_id),
     boardIdx: (0, import_pg_core.index)("artifacts_board_idx").on(table.board_id),
@@ -877,6 +957,7 @@ var artifacts = (0, import_pg_core.pgTable)(
 var artifactTrustGrants = (0, import_pg_core.pgTable)(
   "artifact_trust_grants",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     grant_id: (0, import_pg_core.varchar)("grant_id", { length: 36 }).primaryKey(),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull(),
     scope_type: (0, import_pg_core.text)("scope_type").notNull(),
@@ -887,6 +968,7 @@ var artifactTrustGrants = (0, import_pg_core.pgTable)(
     revoked_at: t.timestamp("revoked_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("artifact_trust_grants_tenant_id_idx").on(table.tenant_id),
     userIdx: (0, import_pg_core.index)("artifact_trust_grants_user_idx").on(table.user_id),
     scopeIdx: (0, import_pg_core.index)("artifact_trust_grants_scope_idx").on(table.scope_type, table.scope_value)
   })
@@ -894,6 +976,7 @@ var artifactTrustGrants = (0, import_pg_core.pgTable)(
 var boardObjects = (0, import_pg_core.pgTable)(
   "board_objects",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     object_id: (0, import_pg_core.varchar)("object_id", { length: 36 }).primaryKey(),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
@@ -909,6 +992,7 @@ var boardObjects = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("board_objects_tenant_id_idx").on(table.tenant_id),
     boardIdx: (0, import_pg_core.index)("board_objects_board_idx").on(table.board_id),
     branchIdx: (0, import_pg_core.index)("board_objects_branch_idx").on(table.branch_id),
     cardIdx: (0, import_pg_core.index)("board_objects_card_idx").on(table.card_id)
@@ -917,12 +1001,14 @@ var boardObjects = (0, import_pg_core.pgTable)(
 var sessionMcpServers = (0, import_pg_core.pgTable)(
   "session_mcp_servers",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     mcp_server_id: (0, import_pg_core.varchar)("mcp_server_id", { length: 36 }).notNull().references(() => mcpServers.mcp_server_id, { onDelete: "cascade" }),
     enabled: t.bool("enabled").notNull().default(true),
     added_at: t.timestamp("added_at").notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("session_mcp_servers_tenant_id_idx").on(table.tenant_id),
     // Composite primary key
     pk: (0, import_pg_core.index)("session_mcp_servers_pk").on(table.session_id, table.mcp_server_id),
     // Indexes for queries
@@ -934,6 +1020,7 @@ var sessionMcpServers = (0, import_pg_core.pgTable)(
 var userMcpOauthTokens = (0, import_pg_core.pgTable)(
   "user_mcp_oauth_tokens",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // NULL = shared-mode token (one per mcp_server_id)
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).references(() => users.user_id, {
       onDelete: "cascade"
@@ -951,6 +1038,7 @@ var userMcpOauthTokens = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("user_mcp_oauth_tokens_tenant_id_idx").on(table.tenant_id),
     // Composite lookup indexes. Uniqueness enforced via partial unique indexes
     // created in the migration (one for per-user rows, one for the shared row).
     pk: (0, import_pg_core.index)("user_mcp_oauth_tokens_pk").on(table.user_id, table.mcp_server_id),
@@ -961,6 +1049,7 @@ var userMcpOauthTokens = (0, import_pg_core.pgTable)(
 var boardComments = (0, import_pg_core.pgTable)(
   "board_comments",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     comment_id: (0, import_pg_core.varchar)("comment_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -1002,6 +1091,7 @@ var boardComments = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("board_comments_tenant_id_idx").on(table.tenant_id),
     boardIdx: (0, import_pg_core.index)("board_comments_board_idx").on(table.board_id),
     sessionIdx: (0, import_pg_core.index)("board_comments_session_idx").on(table.session_id),
     taskIdx: (0, import_pg_core.index)("board_comments_task_idx").on(table.task_id),
@@ -1016,6 +1106,7 @@ var boardComments = (0, import_pg_core.pgTable)(
 var gatewayChannels = (0, import_pg_core.pgTable)(
   "gateway_channels",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -1029,7 +1120,7 @@ var gatewayChannels = (0, import_pg_core.pgTable)(
     }).notNull(),
     target_branch_id: (0, import_pg_core.varchar)("target_branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
     agor_user_id: (0, import_pg_core.varchar)("agor_user_id", { length: 36 }).notNull(),
-    channel_key: (0, import_pg_core.text)("channel_key").notNull().unique(),
+    channel_key: (0, import_pg_core.text)("channel_key").notNull(),
     enabled: t.bool("enabled").notNull().default(true),
     last_message_at: t.timestamp("last_message_at"),
     // JSON blob for platform credentials (encrypted at rest)
@@ -1038,13 +1129,19 @@ var gatewayChannels = (0, import_pg_core.pgTable)(
     agentic_config: t.json("agentic_config")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("gateway_channels_tenant_id_idx").on(table.tenant_id),
     channelKeyIdx: (0, import_pg_core.index)("idx_gateway_channel_key").on(table.channel_key),
+    channelKeyTenantUnique: (0, import_pg_core.uniqueIndex)("gateway_channels_tenant_channel_key_unique").on(
+      table.tenant_id,
+      table.channel_key
+    ),
     enabledTypeIdx: (0, import_pg_core.index)("idx_gateway_enabled_type").on(table.enabled, table.channel_type)
   })
 );
 var threadSessionMap = (0, import_pg_core.pgTable)(
   "thread_session_map",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -1062,7 +1159,9 @@ var threadSessionMap = (0, import_pg_core.pgTable)(
     metadata: t.json("metadata")
   },
   (table) => ({
-    uniqueChannelThread: (0, import_pg_core.uniqueIndex)("uniq_thread_map_channel_thread").on(
+    tenantIdx: (0, import_pg_core.index)("thread_session_map_tenant_id_idx").on(table.tenant_id),
+    uniqueChannelThread: (0, import_pg_core.uniqueIndex)("uniq_thread_map_tenant_channel_thread").on(
+      table.tenant_id,
       table.channel_id,
       table.thread_id
     ),
@@ -1071,14 +1170,82 @@ var threadSessionMap = (0, import_pg_core.pgTable)(
     channelStatusIdx: (0, import_pg_core.index)("idx_thread_map_channel_status").on(table.channel_id, table.status)
   })
 );
+var gatewayOutboundMessages = (0, import_pg_core.pgTable)(
+  "gateway_outbound_messages",
+  {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
+    id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
+    created_at: t.timestamp("created_at").notNull(),
+    updated_at: t.timestamp("updated_at").notNull(),
+    gateway_channel_id: (0, import_pg_core.varchar)("gateway_channel_id", { length: 36 }).notNull().references(() => gatewayChannels.id, { onDelete: "cascade" }),
+    channel_type: (0, import_pg_core.text)("channel_type", {
+      enum: ["slack", "discord", "whatsapp", "telegram", "github", "teams"]
+    }).notNull(),
+    platform_channel_id: (0, import_pg_core.text)("platform_channel_id").notNull(),
+    platform_message_id: (0, import_pg_core.text)("platform_message_id").notNull(),
+    platform_thread_id: (0, import_pg_core.text)("platform_thread_id").notNull(),
+    platform_permalink: (0, import_pg_core.text)("platform_permalink"),
+    target_branch_id: (0, import_pg_core.varchar)("target_branch_id", { length: 36 }).notNull().references(() => branches.branch_id),
+    emitted_by_user_id: (0, import_pg_core.varchar)("emitted_by_user_id", { length: 36 }).notNull().references(() => users.user_id),
+    emitted_by_session_id: (0, import_pg_core.varchar)("emitted_by_session_id", { length: 36 }).references(
+      () => sessions.session_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    emitted_by_task_id: (0, import_pg_core.varchar)("emitted_by_task_id", { length: 36 }).references(
+      () => tasks.task_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    emitted_by_schedule_id: (0, import_pg_core.varchar)("emitted_by_schedule_id", { length: 36 }).references(
+      () => schedules.schedule_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    message_text: (0, import_pg_core.text)("message_text").notNull(),
+    message_preview: (0, import_pg_core.text)("message_preview").notNull(),
+    metadata: t.json("metadata"),
+    consumed_by_session_id: (0, import_pg_core.varchar)("consumed_by_session_id", { length: 36 }).references(
+      () => sessions.session_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    consumed_at: t.timestamp("consumed_at")
+  },
+  (table) => ({
+    tenantIdx: (0, import_pg_core.index)("gateway_outbound_messages_tenant_id_idx").on(table.tenant_id),
+    uniqueChannelThread: (0, import_pg_core.uniqueIndex)("uniq_gateway_outbound_tenant_channel_thread").on(
+      table.tenant_id,
+      table.gateway_channel_id,
+      table.platform_thread_id
+    ),
+    emittedSessionIdx: (0, import_pg_core.index)("idx_gateway_outbound_emitted_session").on(
+      table.emitted_by_session_id
+    ),
+    emittedScheduleIdx: (0, import_pg_core.index)("idx_gateway_outbound_emitted_schedule").on(
+      table.emitted_by_schedule_id
+    ),
+    targetBranchCreatedIdx: (0, import_pg_core.index)("idx_gateway_outbound_branch_created").on(
+      table.target_branch_id,
+      table.created_at
+    ),
+    consumedIdx: (0, import_pg_core.index)("idx_gateway_outbound_consumed").on(table.consumed_at)
+  })
+);
 var sessionEnvSelections = (0, import_pg_core.pgTable)(
   "session_env_selections",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     env_var_name: (0, import_pg_core.text)("env_var_name").notNull(),
     created_at: t.timestamp("created_at").notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("session_env_selections_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.session_id, table.env_var_name] }),
     sessionIdx: (0, import_pg_core.index)("session_env_selections_session_idx").on(table.session_id)
   })
@@ -1086,6 +1253,7 @@ var sessionEnvSelections = (0, import_pg_core.pgTable)(
 var kbNamespaces = (0, import_pg_core.pgTable)(
   "kb_namespaces",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     namespace_id: (0, import_pg_core.varchar)("namespace_id", { length: 36 }).primaryKey(),
     slug: (0, import_pg_core.text)("slug").notNull(),
     display_name: (0, import_pg_core.text)("display_name").notNull(),
@@ -1112,7 +1280,8 @@ var kbNamespaces = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
-    slugIdx: (0, import_pg_core.uniqueIndex)("kb_namespaces_slug_idx").on(table.slug).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    tenantIdx: (0, import_pg_core.index)("kb_namespaces_tenant_id_idx").on(table.tenant_id),
+    slugIdx: (0, import_pg_core.uniqueIndex)("kb_namespaces_tenant_slug_unique").on(table.tenant_id, table.slug).where(import_drizzle_orm2.sql`${table.archived} = false`),
     kindIdx: (0, import_pg_core.index)("kb_namespaces_kind_idx").on(table.kind),
     ownerIdx: (0, import_pg_core.index)("kb_namespaces_owner_idx").on(table.owner_user_id),
     repoIdx: (0, import_pg_core.index)("kb_namespaces_repo_idx").on(table.repo_id),
@@ -1123,6 +1292,7 @@ var kbNamespaces = (0, import_pg_core.pgTable)(
 var kbNamespaceAcl = (0, import_pg_core.pgTable)(
   "kb_namespace_acl",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     namespace_acl_id: (0, import_pg_core.varchar)("namespace_acl_id", { length: 36 }).primaryKey(),
     namespace_id: (0, import_pg_core.varchar)("namespace_id", { length: 36 }).notNull().references(() => kbNamespaces.namespace_id, { onDelete: "cascade" }),
     subject_type: (0, import_pg_core.text)("subject_type", { enum: ["user", "group"] }).notNull(),
@@ -1135,9 +1305,11 @@ var kbNamespaceAcl = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("kb_namespace_acl_tenant_id_idx").on(table.tenant_id),
     namespaceIdx: (0, import_pg_core.index)("kb_namespace_acl_namespace_idx").on(table.namespace_id),
     subjectIdx: (0, import_pg_core.index)("kb_namespace_acl_subject_idx").on(table.subject_type, table.subject_id),
-    namespaceSubjectIdx: (0, import_pg_core.uniqueIndex)("kb_namespace_acl_namespace_subject_idx").on(
+    namespaceSubjectIdx: (0, import_pg_core.uniqueIndex)("kb_namespace_acl_tenant_namespace_subject_unique").on(
+      table.tenant_id,
       table.namespace_id,
       table.subject_type,
       table.subject_id
@@ -1147,6 +1319,7 @@ var kbNamespaceAcl = (0, import_pg_core.pgTable)(
 var kbDocuments = (0, import_pg_core.pgTable)(
   "kb_documents",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     document_id: (0, import_pg_core.varchar)("document_id", { length: 36 }).primaryKey(),
     namespace_id: (0, import_pg_core.varchar)("namespace_id", { length: 36 }).notNull().references(() => kbNamespaces.namespace_id, { onDelete: "cascade" }),
     path: (0, import_pg_core.text)("path").notNull(),
@@ -1174,8 +1347,9 @@ var kbDocuments = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
-    namespacePathIdx: (0, import_pg_core.uniqueIndex)("kb_documents_namespace_path_idx").on(table.namespace_id, table.path).where(import_drizzle_orm2.sql`${table.archived} = false`),
-    uriIdx: (0, import_pg_core.uniqueIndex)("kb_documents_uri_idx").on(table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    tenantIdx: (0, import_pg_core.index)("kb_documents_tenant_id_idx").on(table.tenant_id),
+    namespacePathIdx: (0, import_pg_core.uniqueIndex)("kb_documents_tenant_namespace_path_unique").on(table.tenant_id, table.namespace_id, table.path).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    uriIdx: (0, import_pg_core.uniqueIndex)("kb_documents_tenant_uri_unique").on(table.tenant_id, table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
     namespaceIdx: (0, import_pg_core.index)("kb_documents_namespace_idx").on(table.namespace_id),
     kindIdx: (0, import_pg_core.index)("kb_documents_kind_idx").on(table.kind),
     visibilityIdx: (0, import_pg_core.index)("kb_documents_visibility_idx").on(table.visibility),
@@ -1188,6 +1362,7 @@ var kbDocuments = (0, import_pg_core.pgTable)(
 var kbDocumentVersions = (0, import_pg_core.pgTable)(
   "kb_document_versions",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     version_id: (0, import_pg_core.varchar)("version_id", { length: 36 }).primaryKey(),
     document_id: (0, import_pg_core.varchar)("document_id", { length: 36 }).notNull().references(() => kbDocuments.document_id, { onDelete: "cascade" }),
     version_number: (0, import_pg_core.integer)("version_number").notNull(),
@@ -1207,7 +1382,9 @@ var kbDocumentVersions = (0, import_pg_core.pgTable)(
     created_at: t.timestamp("created_at").notNull()
   },
   (table) => ({
-    documentVersionIdx: (0, import_pg_core.uniqueIndex)("kb_document_versions_document_version_idx").on(
+    tenantIdx: (0, import_pg_core.index)("kb_document_versions_tenant_id_idx").on(table.tenant_id),
+    documentVersionIdx: (0, import_pg_core.uniqueIndex)("kb_document_versions_tenant_document_version_unique").on(
+      table.tenant_id,
       table.document_id,
       table.version_number
     ),
@@ -1219,6 +1396,7 @@ var kbDocumentVersions = (0, import_pg_core.pgTable)(
 var kbDocumentUnits = (0, import_pg_core.pgTable)(
   "kb_document_units",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     unit_id: (0, import_pg_core.varchar)("unit_id", { length: 36 }).primaryKey(),
     document_id: (0, import_pg_core.varchar)("document_id", { length: 36 }).notNull().references(() => kbDocuments.document_id, { onDelete: "cascade" }),
     version_id: (0, import_pg_core.varchar)("version_id", { length: 36 }).notNull().references(() => kbDocumentVersions.version_id, { onDelete: "cascade" }),
@@ -1243,6 +1421,7 @@ var kbDocumentUnits = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("kb_document_units_tenant_id_idx").on(table.tenant_id),
     documentIdx: (0, import_pg_core.index)("kb_document_units_document_idx").on(table.document_id),
     versionIdx: (0, import_pg_core.index)("kb_document_units_version_idx").on(table.version_id),
     versionOrdinalIdx: (0, import_pg_core.index)("kb_document_units_version_ordinal_idx").on(
@@ -1256,6 +1435,7 @@ var kbDocumentUnits = (0, import_pg_core.pgTable)(
 var kbEmbeddingSpaces = (0, import_pg_core.pgTable)(
   "kb_embedding_spaces",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     embedding_space_id: (0, import_pg_core.varchar)("embedding_space_id", { length: 36 }).primaryKey(),
     provider: (0, import_pg_core.text)("provider").notNull(),
     model: (0, import_pg_core.text)("model").notNull(),
@@ -1268,7 +1448,9 @@ var kbEmbeddingSpaces = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
-    providerModelIdx: (0, import_pg_core.uniqueIndex)("kb_embedding_spaces_provider_model_idx").on(
+    tenantIdx: (0, import_pg_core.index)("kb_embedding_spaces_tenant_id_idx").on(table.tenant_id),
+    providerModelIdx: (0, import_pg_core.uniqueIndex)("kb_embedding_spaces_tenant_provider_model_unique").on(
+      table.tenant_id,
       table.provider,
       table.model,
       table.dimensions,
@@ -1281,6 +1463,7 @@ var kbEmbeddingSpaces = (0, import_pg_core.pgTable)(
 var kbGraphNodes = (0, import_pg_core.pgTable)(
   "kb_graph_nodes",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     node_id: (0, import_pg_core.varchar)("node_id", { length: 36 }).primaryKey(),
     node_type: (0, import_pg_core.text)("node_type", {
       enum: [
@@ -1346,7 +1529,8 @@ var kbGraphNodes = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
-    uriIdx: (0, import_pg_core.uniqueIndex)("kb_graph_nodes_uri_idx").on(table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    tenantIdx: (0, import_pg_core.index)("kb_graph_nodes_tenant_id_idx").on(table.tenant_id),
+    uriIdx: (0, import_pg_core.uniqueIndex)("kb_graph_nodes_tenant_uri_unique").on(table.tenant_id, table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
     typeIdx: (0, import_pg_core.index)("kb_graph_nodes_type_idx").on(table.node_type),
     namespaceIdx: (0, import_pg_core.index)("kb_graph_nodes_namespace_idx").on(table.namespace_id),
     documentIdx: (0, import_pg_core.index)("kb_graph_nodes_document_idx").on(table.document_id),
@@ -1366,6 +1550,7 @@ var kbGraphNodes = (0, import_pg_core.pgTable)(
 var kbGraphEdges = (0, import_pg_core.pgTable)(
   "kb_graph_edges",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     edge_id: (0, import_pg_core.varchar)("edge_id", { length: 36 }).primaryKey(),
     source_node_id: (0, import_pg_core.varchar)("source_node_id", { length: 36 }).notNull().references(() => kbGraphNodes.node_id, { onDelete: "cascade" }),
     target_node_id: (0, import_pg_core.varchar)("target_node_id", { length: 36 }).notNull().references(() => kbGraphNodes.node_id, { onDelete: "cascade" }),
@@ -1394,6 +1579,7 @@ var kbGraphEdges = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("kb_graph_edges_tenant_id_idx").on(table.tenant_id),
     sourceIdx: (0, import_pg_core.index)("kb_graph_edges_source_idx").on(table.source_node_id),
     targetIdx: (0, import_pg_core.index)("kb_graph_edges_target_idx").on(table.target_node_id),
     typeIdx: (0, import_pg_core.index)("kb_graph_edges_type_idx").on(table.edge_type),
@@ -1405,7 +1591,7 @@ var kbGraphEdges = (0, import_pg_core.pgTable)(
       table.target_node_id,
       table.edge_type
     ),
-    sourceTargetTypeIdx: (0, import_pg_core.uniqueIndex)("kb_graph_edges_source_target_type_idx").on(table.source_node_id, table.target_node_id, table.edge_type).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    sourceTargetTypeIdx: (0, import_pg_core.uniqueIndex)("kb_graph_edges_tenant_source_target_type_unique").on(table.tenant_id, table.source_node_id, table.target_node_id, table.edge_type).where(import_drizzle_orm2.sql`${table.archived} = false`),
     archivedIdx: (0, import_pg_core.index)("kb_graph_edges_archived_idx").on(table.archived)
   })
 );
@@ -1467,6 +1653,7 @@ __export(schema_sqlite_exports, {
   cardTypes: () => cardTypes2,
   cards: () => cards2,
   gatewayChannels: () => gatewayChannels2,
+  gatewayOutboundMessages: () => gatewayOutboundMessages2,
   groupMemberships: () => groupMemberships2,
   groups: () => groups2,
   kbDocumentUnits: () => kbDocumentUnits2,
@@ -1565,6 +1752,7 @@ var sessions2 = (0, import_sqlite_core.sqliteTable)(
   },
   (table) => ({
     statusIdx: (0, import_sqlite_core.index)("sessions_status_idx").on(table.status),
+    statusReadyIdx: (0, import_sqlite_core.index)("sessions_status_ready_idx").on(table.status, table.ready_for_prompt),
     agenticToolIdx: (0, import_sqlite_core.index)("sessions_agentic_tool_idx").on(table.agentic_tool),
     boardIdx: (0, import_sqlite_core.index)("sessions_board_idx").on(table.board_id),
     branchIdx: (0, import_sqlite_core.index)("sessions_branch_idx").on(table.branch_id),
@@ -1604,6 +1792,9 @@ var sessionRelationships2 = (0, import_sqlite_core.sqliteTable)(
     sourceIdx: (0, import_sqlite_core.index)("session_relationships_source_idx").on(table.source_session_id),
     targetIdx: (0, import_sqlite_core.index)("session_relationships_target_idx").on(table.target_session_id),
     callbackIdx: (0, import_sqlite_core.index)("session_relationships_callback_idx").on(table.callback_session_id),
+    // Note: no tenant_source/tenant_target composite indexes here — SQLite schema
+    // has no tenant column on this table (RLS is Postgres-only). The standalone
+    // source/target indexes above are sufficient for SQLite.
     sourceTargetTypeUnique: (0, import_sqlite_core.uniqueIndex)("session_relationships_source_target_type_unique").on(
       table.source_session_id,
       table.target_session_id,
@@ -1723,7 +1914,12 @@ var messages2 = (0, import_sqlite_core.sqliteTable)(
     // Indexes for efficient lookups
     sessionIdx: (0, import_sqlite_core.index)("messages_session_id_idx").on(table.session_id),
     taskIdx: (0, import_sqlite_core.index)("messages_task_id_idx").on(table.task_id),
-    sessionIndexIdx: (0, import_sqlite_core.index)("messages_session_index_idx").on(table.session_id, table.index)
+    sessionIndexIdx: (0, import_sqlite_core.index)("messages_session_index_idx").on(table.session_id, table.index),
+    timestampIdx: (0, import_sqlite_core.index)("messages_timestamp_idx").on(table.timestamp),
+    sessionTimestampIdx: (0, import_sqlite_core.index)("messages_session_timestamp_idx").on(
+      table.session_id,
+      table.timestamp
+    )
   })
 );
 var boards2 = (0, import_sqlite_core.sqliteTable)(
@@ -1949,6 +2145,9 @@ var users2 = (0, import_sqlite_core.sqliteTable)(
     onboarding_completed: t2.bool("onboarding_completed").notNull().default(false),
     // Force password change flag (admin-settable, auto-cleared on password change)
     must_change_password: t2.bool("must_change_password").notNull().default(false),
+    // Auth invalidation marker. Password changes set this timestamp so any
+    // previously issued browser access or refresh token is rejected.
+    tokens_valid_after: t2.timestamp("tokens_valid_after"),
     // JSON blob for profile/preferences
     data: t2.json("data").$type().notNull()
   },
@@ -2392,6 +2591,66 @@ var threadSessionMap2 = (0, import_sqlite_core.sqliteTable)(
     channelStatusIdx: (0, import_sqlite_core.index)("idx_thread_map_channel_status").on(table.channel_id, table.status)
   })
 );
+var gatewayOutboundMessages2 = (0, import_sqlite_core.sqliteTable)(
+  "gateway_outbound_messages",
+  {
+    id: (0, import_sqlite_core.text)("id", { length: 36 }).primaryKey(),
+    created_at: t2.timestamp("created_at").notNull(),
+    updated_at: t2.timestamp("updated_at").notNull(),
+    gateway_channel_id: (0, import_sqlite_core.text)("gateway_channel_id", { length: 36 }).notNull().references(() => gatewayChannels2.id, { onDelete: "cascade" }),
+    channel_type: (0, import_sqlite_core.text)("channel_type", {
+      enum: ["slack", "discord", "whatsapp", "telegram", "github", "teams"]
+    }).notNull(),
+    platform_channel_id: (0, import_sqlite_core.text)("platform_channel_id").notNull(),
+    platform_message_id: (0, import_sqlite_core.text)("platform_message_id").notNull(),
+    platform_thread_id: (0, import_sqlite_core.text)("platform_thread_id").notNull(),
+    platform_permalink: (0, import_sqlite_core.text)("platform_permalink"),
+    target_branch_id: (0, import_sqlite_core.text)("target_branch_id", { length: 36 }).notNull().references(() => branches2.branch_id),
+    emitted_by_user_id: (0, import_sqlite_core.text)("emitted_by_user_id", { length: 36 }).notNull().references(() => users2.user_id),
+    emitted_by_session_id: (0, import_sqlite_core.text)("emitted_by_session_id", { length: 36 }).references(
+      () => sessions2.session_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    emitted_by_task_id: (0, import_sqlite_core.text)("emitted_by_task_id", { length: 36 }).references(() => tasks2.task_id, {
+      onDelete: "set null"
+    }),
+    emitted_by_schedule_id: (0, import_sqlite_core.text)("emitted_by_schedule_id", { length: 36 }).references(
+      () => schedules2.schedule_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    message_text: (0, import_sqlite_core.text)("message_text").notNull(),
+    message_preview: (0, import_sqlite_core.text)("message_preview").notNull(),
+    metadata: t2.json("metadata"),
+    consumed_by_session_id: (0, import_sqlite_core.text)("consumed_by_session_id", { length: 36 }).references(
+      () => sessions2.session_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    consumed_at: t2.timestamp("consumed_at")
+  },
+  (table) => ({
+    uniqueChannelThread: (0, import_sqlite_core.uniqueIndex)("uniq_gateway_outbound_channel_thread").on(
+      table.gateway_channel_id,
+      table.platform_thread_id
+    ),
+    emittedSessionIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_emitted_session").on(
+      table.emitted_by_session_id
+    ),
+    emittedScheduleIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_emitted_schedule").on(
+      table.emitted_by_schedule_id
+    ),
+    targetBranchCreatedIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_branch_created").on(
+      table.target_branch_id,
+      table.created_at
+    ),
+    consumedIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_consumed").on(table.consumed_at)
+  })
+);
 var sessionEnvSelections2 = (0, import_sqlite_core.sqliteTable)(
   "session_env_selections",
   {
@@ -2774,7 +3033,7 @@ var import_node_fs = require("fs");
 var import_promises = __toESM(require("fs/promises"), 1);
 var import_node_os = __toESM(require("os"), 1);
 var import_node_path = __toESM(require("path"), 1);
-var import_js_yaml = __toESM(require("js-yaml"), 1);
+var yaml = __toESM(require("js-yaml"), 1);
 
 // src/config/analytics-defaults.ts
 function getDefaultAnalyticsConfig() {
@@ -2875,6 +3134,64 @@ function resolveExecutorHeartbeatConfig(execution) {
   };
 }
 
+// src/config/multitenancy.ts
+var DEFAULT_STATIC_TENANT_ID = "default";
+var RESERVED_AUTH_CLAIMS = /* @__PURE__ */ new Set(["aud", "exp", "iat", "iss", "jti", "nbf", "sub", "type"]);
+function detectPostgresUrl(url) {
+  if (!url) return false;
+  const lower = url.toLowerCase();
+  return lower.startsWith("postgresql://") || lower.startsWith("postgres://") || lower.startsWith("pg://");
+}
+function resolveMultiTenancyDatabaseDialect(config = {}) {
+  if (process.env.AGOR_DB_DIALECT === "postgresql" || process.env.AGOR_DB_DIALECT === "sqlite") {
+    return process.env.AGOR_DB_DIALECT;
+  }
+  if (detectPostgresUrl(process.env.DATABASE_URL)) return "postgresql";
+  if (config.database?.dialect === "postgresql" || config.database?.dialect === "sqlite") {
+    return config.database.dialect;
+  }
+  if (detectPostgresUrl(config.database?.postgresql?.url) || config.database?.postgresql?.host) {
+    return "postgresql";
+  }
+  return "sqlite";
+}
+function resolveMultiTenancyConfig(config) {
+  const raw = config.multi_tenancy ?? {};
+  const mode = raw.mode ?? "static";
+  return {
+    mode,
+    static_tenant_id: raw.static_tenant_id?.trim() || DEFAULT_STATIC_TENANT_ID,
+    ...raw.auth_claim ? { auth_claim: raw.auth_claim } : {},
+    ...raw.trusted_header ? { trusted_header: raw.trusted_header } : {}
+  };
+}
+function assertValidMultiTenancyConfig(config) {
+  const resolved = resolveMultiTenancyConfig(config);
+  if (resolved.mode !== "static" && resolved.mode !== "required_from_auth") {
+    throw new Error("Config error: multi_tenancy.mode must be one of: static, required_from_auth");
+  }
+  if (!resolved.static_tenant_id) {
+    throw new Error("Config error: multi_tenancy.static_tenant_id must not be empty");
+  }
+  if (resolved.auth_claim && RESERVED_AUTH_CLAIMS.has(resolved.auth_claim)) {
+    throw new Error(
+      `Config error: multi_tenancy.auth_claim cannot be reserved JWT claim '${resolved.auth_claim}'`
+    );
+  }
+  if (resolved.mode === "required_from_auth") {
+    if (resolveMultiTenancyDatabaseDialect(config) !== "postgresql") {
+      throw new Error(
+        "Config error: multi_tenancy.required_from_auth requires database.dialect: postgresql"
+      );
+    }
+    if (!resolved.auth_claim && !resolved.trusted_header) {
+      throw new Error(
+        "Config error: multi_tenancy.required_from_auth requires multi_tenancy.auth_claim or multi_tenancy.trusted_header"
+      );
+    }
+  }
+}
+
 // src/config/config-manager.ts
 var NO_FILE = -1;
 var NO_FILE_KEY = { mtimeMs: NO_FILE, size: 0 };
@@ -2907,7 +3224,10 @@ function writeCachedConfig(configPath, config, key) {
   cachedEntry = { path: configPath, config: structuredClone(config), key };
 }
 function parseAndValidateConfig(content) {
-  const parsed = import_js_yaml.default.load(content);
+  if (content.trim() === "") {
+    return {};
+  }
+  const parsed = yaml.load(content);
   const finalConfig = parsed || {};
   validateConfig(finalConfig);
   return finalConfig;
@@ -2936,6 +3256,7 @@ To update: agor config set execution.unix_user_mode insulated`
       `Config error: execution.managed_envs_execution_mode must be one of: hybrid, webhook-only`
     );
   }
+  assertValidMultiTenancyConfig(config);
   validateOptionalHttpUrl(
     config.external_launch,
     "login_redirect_url",
@@ -2996,7 +3317,12 @@ function getDefaultConfig() {
       // Default: sync passwords to Unix
       executor_heartbeat: resolveExecutorHeartbeatConfig()
     },
-    analytics: getDefaultAnalyticsConfig()
+    analytics: getDefaultAnalyticsConfig(),
+    telemetry: {},
+    multi_tenancy: {
+      mode: "static",
+      static_tenant_id: "default"
+    }
   };
 }
 function loadConfigSync() {
@@ -3110,6 +3436,7 @@ var userMcpOauthTokens3 = schema.userMcpOauthTokens;
 var boardComments3 = schema.boardComments;
 var gatewayChannels3 = schema.gatewayChannels;
 var threadSessionMap3 = schema.threadSessionMap;
+var gatewayOutboundMessages3 = schema.gatewayOutboundMessages;
 var userApiKeys3 = schema.userApiKeys;
 var serializedSessions3 = schema.serializedSessions;
 var kbNamespaces3 = schema.kbNamespaces;