agor-live 0.22.0 → 0.23.2

package/dist/core/mcp/index.cjs

@@ -30,7 +30,10 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/mcp/index.ts
 var mcp_exports = {};
 __export(mcp_exports, {
+  TEMPLATE_RESOLVABLE_MCP_AUTH_SECRET_FIELDS: () => TEMPLATE_RESOLVABLE_MCP_AUTH_SECRET_FIELDS,
   buildMCPTemplateContextFromEnv: () => buildMCPTemplateContextFromEnv,
+  containsTemplate: () => containsTemplate,
+  isUserEnvPlaceholder: () => isUserEnvPlaceholder,
   resolveMcpServerEnv: () => resolveMcpServerEnv,
   resolveMcpServerTemplates: () => resolveMcpServerTemplates,
   resolveMcpServersTemplates: () => resolveMcpServersTemplates
@@ -43,6 +46,10 @@ var import_drizzle_orm5 = require("drizzle-orm");
 // src/db/database-wrapper.ts
 var import_drizzle_orm = require("drizzle-orm");
 
+// src/db/tenant-context.ts
+var import_node_async_hooks = require("async_hooks");
+var tenantDatabaseScope = new import_node_async_hooks.AsyncLocalStorage();
+
 // src/db/encryption.ts
 var import_node_crypto = require("crypto");
 
@@ -67,6 +74,7 @@ __export(schema_postgres_exports, {
   cardTypes: () => cardTypes,
   cards: () => cards,
   gatewayChannels: () => gatewayChannels,
+  gatewayOutboundMessages: () => gatewayOutboundMessages,
   groupMemberships: () => groupMemberships,
   groups: () => groups,
   kbDocumentUnits: () => kbDocumentUnits,
@@ -196,6 +204,7 @@ var t = {
 var sessions = (0, import_pg_core.pgTable)(
   "sessions",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -255,7 +264,9 @@ var sessions = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("sessions_tenant_id_idx").on(table.tenant_id),
     statusIdx: (0, import_pg_core.index)("sessions_status_idx").on(table.status),
+    statusReadyIdx: (0, import_pg_core.index)("sessions_status_ready_idx").on(table.status, table.ready_for_prompt),
     agenticToolIdx: (0, import_pg_core.index)("sessions_agentic_tool_idx").on(table.agentic_tool),
     boardIdx: (0, import_pg_core.index)("sessions_board_idx").on(table.board_id),
     branchIdx: (0, import_pg_core.index)("sessions_branch_idx").on(table.branch_id),
@@ -267,12 +278,13 @@ var sessions = (0, import_pg_core.pgTable)(
     // Partial unique index — covering for the scheduler's dedup lookup
     // AND serves as the DB-level guard against check-then-create races
     // in spawnScheduledSession.
-    scheduleRunUnique: (0, import_pg_core.uniqueIndex)("sessions_schedule_run_unique").on(table.schedule_id, table.scheduled_run_at).where(import_drizzle_orm2.sql`${table.schedule_id} IS NOT NULL AND ${table.scheduled_run_at} IS NOT NULL`)
+    scheduleRunUnique: (0, import_pg_core.uniqueIndex)("sessions_schedule_run_unique").on(table.tenant_id, table.schedule_id, table.scheduled_run_at).where(import_drizzle_orm2.sql`${table.schedule_id} IS NOT NULL AND ${table.scheduled_run_at} IS NOT NULL`)
   })
 );
 var sessionRelationships = (0, import_pg_core.pgTable)(
   "session_relationships",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     relationship_id: (0, import_pg_core.varchar)("relationship_id", { length: 36 }).primaryKey(),
     source_session_id: (0, import_pg_core.varchar)("source_session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     target_session_id: (0, import_pg_core.varchar)("target_session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
@@ -290,10 +302,23 @@ var sessionRelationships = (0, import_pg_core.pgTable)(
     data: t.json("data")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("session_relationships_tenant_id_idx").on(table.tenant_id),
     sourceIdx: (0, import_pg_core.index)("session_relationships_source_idx").on(table.source_session_id),
     targetIdx: (0, import_pg_core.index)("session_relationships_target_idx").on(table.target_session_id),
     callbackIdx: (0, import_pg_core.index)("session_relationships_callback_idx").on(table.callback_session_id),
+    // Composite indexes so the OR predicate in dispatchCompletionCallbacks
+    // (WHERE source_session_id = $1 OR target_session_id = $2) uses BitmapOr
+    // over these instead of a full tenant table scan via tenant_id_idx.
+    tenantSourceIdx: (0, import_pg_core.index)("session_relationships_tenant_source_idx").on(
+      table.tenant_id,
+      table.source_session_id
+    ),
+    tenantTargetIdx: (0, import_pg_core.index)("session_relationships_tenant_target_idx").on(
+      table.tenant_id,
+      table.target_session_id
+    ),
     sourceTargetTypeUnique: (0, import_pg_core.uniqueIndex)("session_relationships_source_target_type_unique").on(
+      table.tenant_id,
       table.source_session_id,
       table.target_session_id,
       table.relationship_type
@@ -303,6 +328,7 @@ var sessionRelationships = (0, import_pg_core.pgTable)(
 var tasks = (0, import_pg_core.pgTable)(
   "tasks",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     task_id: (0, import_pg_core.varchar)("task_id", { length: 36 }).primaryKey(),
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     created_at: t.timestamp("created_at").notNull(),
@@ -332,19 +358,23 @@ var tasks = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("tasks_tenant_id_idx").on(table.tenant_id),
     sessionIdx: (0, import_pg_core.index)("tasks_session_idx").on(table.session_id),
     statusIdx: (0, import_pg_core.index)("tasks_status_idx").on(table.status),
     createdIdx: (0, import_pg_core.index)("tasks_created_idx").on(table.created_at),
+    // Composite for "latest task for session" queries (ORDER BY created_at DESC LIMIT 1).
+    sessionCreatedIdx: (0, import_pg_core.index)("tasks_session_created_idx").on(table.session_id, table.created_at),
     queueIdx: (0, import_pg_core.index)("tasks_queue_idx").on(table.session_id, table.status, table.queue_position),
     // Partial unique index — defense-in-depth for `tasks.createPending` race
     // serialization. Only QUEUED rows are constrained; CREATED/RUNNING/done
     // rows have NULL queue_position and are unaffected.
-    queuedPositionUnique: (0, import_pg_core.uniqueIndex)("tasks_queued_position_unique").on(table.session_id, table.queue_position).where(import_drizzle_orm2.sql`${table.status} = 'queued'`)
+    queuedPositionUnique: (0, import_pg_core.uniqueIndex)("tasks_queued_position_unique").on(table.tenant_id, table.session_id, table.queue_position).where(import_drizzle_orm2.sql`${table.status} = 'queued'`)
   })
 );
 var serializedSessions = (0, import_pg_core.pgTable)(
   "serialized_sessions",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
@@ -360,6 +390,7 @@ var serializedSessions = (0, import_pg_core.pgTable)(
     // gzipped; NULL while status='processing'
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("serialized_sessions_tenant_id_idx").on(table.tenant_id),
     sessionTurnIdx: (0, import_pg_core.index)("serialized_sessions_session_turn_idx").on(
       table.session_id,
       table.turn_index
@@ -370,6 +401,7 @@ var serializedSessions = (0, import_pg_core.pgTable)(
 var messages = (0, import_pg_core.pgTable)(
   "messages",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     message_id: (0, import_pg_core.varchar)("message_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -409,15 +441,23 @@ var messages = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("messages_tenant_id_idx").on(table.tenant_id),
+    tenantTimestampIdx: (0, import_pg_core.index)("messages_tenant_timestamp_idx").on(table.tenant_id, table.timestamp),
     // Indexes for efficient lookups
     sessionIdx: (0, import_pg_core.index)("messages_session_id_idx").on(table.session_id),
     taskIdx: (0, import_pg_core.index)("messages_task_id_idx").on(table.task_id),
-    sessionIndexIdx: (0, import_pg_core.index)("messages_session_index_idx").on(table.session_id, table.index)
+    sessionIndexIdx: (0, import_pg_core.index)("messages_session_index_idx").on(table.session_id, table.index),
+    timestampIdx: (0, import_pg_core.index)("messages_timestamp_idx").on(table.timestamp),
+    sessionTimestampIdx: (0, import_pg_core.index)("messages_session_timestamp_idx").on(
+      table.session_id,
+      table.timestamp
+    )
   })
 );
 var boards = (0, import_pg_core.pgTable)(
   "boards",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
     updated_at: t.timestamp("updated_at"),
@@ -425,7 +465,7 @@ var boards = (0, import_pg_core.pgTable)(
     created_by: (0, import_pg_core.varchar)("created_by", { length: 36 }).notNull(),
     // Materialized for lookups
     name: (0, import_pg_core.text)("name").notNull(),
-    slug: (0, import_pg_core.text)("slug").unique(),
+    slug: (0, import_pg_core.text)("slug"),
     primary_assistant_id: (0, import_pg_core.varchar)("primary_assistant_id", { length: 36 }).references(
       () => branches.branch_id,
       {
@@ -440,18 +480,21 @@ var boards = (0, import_pg_core.pgTable)(
     archived_by: (0, import_pg_core.varchar)("archived_by", { length: 36 })
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("boards_tenant_id_idx").on(table.tenant_id),
     nameIdx: (0, import_pg_core.index)("boards_name_idx").on(table.name),
-    slugIdx: (0, import_pg_core.index)("boards_slug_idx").on(table.slug)
+    slugIdx: (0, import_pg_core.index)("boards_slug_idx").on(table.slug),
+    slugTenantUnique: (0, import_pg_core.uniqueIndex)("boards_tenant_slug_unique").on(table.tenant_id, table.slug)
   })
 );
 var repos = (0, import_pg_core.pgTable)(
   "repos",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     repo_id: (0, import_pg_core.varchar)("repo_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
     updated_at: t.timestamp("updated_at"),
     // Materialized for querying
-    slug: (0, import_pg_core.text)("slug").notNull().unique(),
+    slug: (0, import_pg_core.text)("slug").notNull(),
     repo_type: (0, import_pg_core.text)("repo_type", { enum: ["remote", "local"] }).notNull().default("remote"),
     // Unix group for repo-level git access (agor_rp_<short-id>)
     // Users who have access to ANY branch in this repo get added to this group.
@@ -462,12 +505,15 @@ var repos = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
-    slugIdx: (0, import_pg_core.index)("repos_slug_idx").on(table.slug)
+    tenantIdx: (0, import_pg_core.index)("repos_tenant_id_idx").on(table.tenant_id),
+    slugIdx: (0, import_pg_core.index)("repos_slug_idx").on(table.slug),
+    slugTenantUnique: (0, import_pg_core.uniqueIndex)("repos_tenant_slug_unique").on(table.tenant_id, table.slug)
   })
 );
 var branches = (0, import_pg_core.pgTable)(
   "branches",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).primaryKey(),
     repo_id: (0, import_pg_core.varchar)("repo_id", { length: 36 }).notNull().references(() => repos.repo_id, { onDelete: "cascade" }),
@@ -542,6 +588,7 @@ var branches = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("branches_tenant_id_idx").on(table.tenant_id),
     repoIdx: (0, import_pg_core.index)("branches_repo_idx").on(table.repo_id),
     nameIdx: (0, import_pg_core.index)("branches_name_idx").on(table.name),
     refIdx: (0, import_pg_core.index)("branches_ref_idx").on(table.ref),
@@ -555,22 +602,26 @@ var branches = (0, import_pg_core.pgTable)(
 var branchOwners = (0, import_pg_core.pgTable)(
   "branch_owners",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
     created_at: t.timestamp("created_at").defaultNow()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("branch_owners_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.branch_id, table.user_id] })
   })
 );
 var boardOwners = (0, import_pg_core.pgTable)(
   "board_owners",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
     created_at: t.timestamp("created_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("board_owners_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.board_id, table.user_id] }),
     userIdx: (0, import_pg_core.index)("board_owners_user_idx").on(table.user_id)
   })
@@ -578,6 +629,7 @@ var boardOwners = (0, import_pg_core.pgTable)(
 var schedules = (0, import_pg_core.pgTable)(
   "schedules",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     schedule_id: (0, import_pg_core.varchar)("schedule_id", { length: 36 }).primaryKey(),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
     name: (0, import_pg_core.text)("name").notNull(),
@@ -601,6 +653,7 @@ var schedules = (0, import_pg_core.pgTable)(
     created_by: (0, import_pg_core.varchar)("created_by", { length: 36 }).notNull().references(() => users.user_id)
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("schedules_tenant_id_idx").on(table.tenant_id),
     enabledNextRunIdx: (0, import_pg_core.index)("schedules_enabled_next_run_idx").on(table.enabled, table.next_run_at),
     branchIdx: (0, import_pg_core.index)("schedules_branch_idx").on(table.branch_id),
     createdByIdx: (0, import_pg_core.index)("schedules_created_by_idx").on(table.created_by)
@@ -609,12 +662,13 @@ var schedules = (0, import_pg_core.pgTable)(
 var users = (0, import_pg_core.pgTable)(
   "users",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
     updated_at: t.timestamp("updated_at"),
     // Materialized for auth lookups
-    email: (0, import_pg_core.text)("email").unique().notNull(),
+    email: (0, import_pg_core.text)("email").notNull(),
     password: (0, import_pg_core.text)("password").notNull(),
     // bcrypt hashed
     // Basic profile (materialized for display)
@@ -630,16 +684,22 @@ var users = (0, import_pg_core.pgTable)(
     onboarding_completed: t.bool("onboarding_completed").notNull().default(false),
     // Force password change flag (admin-settable, auto-cleared on password change)
     must_change_password: t.bool("must_change_password").notNull().default(false),
+    // Auth invalidation marker. Password changes set this timestamp so any
+    // previously issued browser access or refresh token is rejected.
+    tokens_valid_after: t.timestamp("tokens_valid_after"),
     // JSON blob for profile/preferences
     data: t.json("data").$type().notNull()
   },
   (table) => ({
-    emailIdx: (0, import_pg_core.index)("users_email_idx").on(table.email)
+    tenantIdx: (0, import_pg_core.index)("users_tenant_id_idx").on(table.tenant_id),
+    emailIdx: (0, import_pg_core.index)("users_email_idx").on(table.email),
+    emailTenantUnique: (0, import_pg_core.uniqueIndex)("users_tenant_email_unique").on(table.tenant_id, table.email)
   })
 );
 var groups = (0, import_pg_core.pgTable)(
   "groups",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).primaryKey(),
     name: (0, import_pg_core.text)("name").notNull(),
     slug: (0, import_pg_core.text)("slug").notNull(),
@@ -652,13 +712,15 @@ var groups = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
-    slugIdx: (0, import_pg_core.uniqueIndex)("groups_slug_idx").on(table.slug),
+    tenantIdx: (0, import_pg_core.index)("groups_tenant_id_idx").on(table.tenant_id),
+    slugIdx: (0, import_pg_core.uniqueIndex)("groups_tenant_slug_unique").on(table.tenant_id, table.slug),
     archivedIdx: (0, import_pg_core.index)("groups_archived_idx").on(table.archived)
   })
 );
 var groupMemberships = (0, import_pg_core.pgTable)(
   "group_memberships",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).notNull().references(() => groups.group_id, { onDelete: "cascade" }),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
     added_by: (0, import_pg_core.varchar)("added_by", { length: 36 }).references(() => users.user_id, {
@@ -667,6 +729,7 @@ var groupMemberships = (0, import_pg_core.pgTable)(
     created_at: t.timestamp("created_at").notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("group_memberships_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.group_id, table.user_id] }),
     userIdx: (0, import_pg_core.index)("group_memberships_user_idx").on(table.user_id)
   })
@@ -674,6 +737,7 @@ var groupMemberships = (0, import_pg_core.pgTable)(
 var branchGroupGrants = (0, import_pg_core.pgTable)(
   "branch_group_grants",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
     group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).notNull().references(() => groups.group_id, { onDelete: "cascade" }),
     can: (0, import_pg_core.text)("can", { enum: [...BRANCH_PERMISSION_LEVELS] }).notNull().default("view"),
@@ -685,6 +749,7 @@ var branchGroupGrants = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("branch_group_grants_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.branch_id, table.group_id] }),
     groupIdx: (0, import_pg_core.index)("branch_group_grants_group_idx").on(table.group_id)
   })
@@ -692,6 +757,7 @@ var branchGroupGrants = (0, import_pg_core.pgTable)(
 var boardGroupGrants = (0, import_pg_core.pgTable)(
   "board_group_grants",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
     group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).notNull().references(() => groups.group_id, { onDelete: "cascade" }),
     can: (0, import_pg_core.text)("can", { enum: [...BRANCH_PERMISSION_LEVELS] }).notNull().default("view"),
@@ -703,6 +769,7 @@ var boardGroupGrants = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("board_group_grants_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.board_id, table.group_id] }),
     groupIdx: (0, import_pg_core.index)("board_group_grants_group_idx").on(table.group_id)
   })
@@ -710,6 +777,7 @@ var boardGroupGrants = (0, import_pg_core.pgTable)(
 var appVariables = (0, import_pg_core.pgTable)(
   "app_variables",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     variable_id: (0, import_pg_core.varchar)("variable_id", { length: 36 }).primaryKey(),
     namespace: (0, import_pg_core.text)("namespace").notNull(),
     key: (0, import_pg_core.text)("key").notNull(),
@@ -725,13 +793,19 @@ var appVariables = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at").notNull()
   },
   (table) => ({
-    namespaceKeyIdx: (0, import_pg_core.uniqueIndex)("app_variables_namespace_key_idx").on(table.namespace, table.key),
+    tenantIdx: (0, import_pg_core.index)("app_variables_tenant_id_idx").on(table.tenant_id),
+    namespaceKeyIdx: (0, import_pg_core.uniqueIndex)("app_variables_tenant_namespace_key_unique").on(
+      table.tenant_id,
+      table.namespace,
+      table.key
+    ),
     namespaceIdx: (0, import_pg_core.index)("app_variables_namespace_idx").on(table.namespace)
   })
 );
 var userApiKeys = (0, import_pg_core.pgTable)(
   "user_api_keys",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
     name: (0, import_pg_core.text)("name").notNull(),
@@ -743,6 +817,7 @@ var userApiKeys = (0, import_pg_core.pgTable)(
     last_used_at: t.timestamp("last_used_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("user_api_keys_tenant_id_idx").on(table.tenant_id),
     userIdx: (0, import_pg_core.index)("user_api_keys_user_idx").on(table.user_id),
     prefixIdx: (0, import_pg_core.index)("user_api_keys_prefix_idx").on(table.prefix)
   })
@@ -750,6 +825,7 @@ var userApiKeys = (0, import_pg_core.pgTable)(
 var mcpServers = (0, import_pg_core.pgTable)(
   "mcp_servers",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     mcp_server_id: (0, import_pg_core.varchar)("mcp_server_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -776,6 +852,7 @@ var mcpServers = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("mcp_servers_tenant_id_idx").on(table.tenant_id),
     nameIdx: (0, import_pg_core.index)("mcp_servers_name_idx").on(table.name),
     scopeIdx: (0, import_pg_core.index)("mcp_servers_scope_idx").on(table.scope),
     ownerIdx: (0, import_pg_core.index)("mcp_servers_owner_idx").on(table.owner_user_id),
@@ -785,6 +862,7 @@ var mcpServers = (0, import_pg_core.pgTable)(
 var cardTypes = (0, import_pg_core.pgTable)(
   "card_types",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     card_type_id: (0, import_pg_core.varchar)("card_type_id", { length: 36 }).primaryKey(),
     name: (0, import_pg_core.text)("name").notNull(),
     emoji: (0, import_pg_core.text)("emoji"),
@@ -796,12 +874,14 @@ var cardTypes = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at").notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("card_types_tenant_id_idx").on(table.tenant_id),
     nameIdx: (0, import_pg_core.index)("card_types_name_idx").on(table.name)
   })
 );
 var cards = (0, import_pg_core.pgTable)(
   "cards",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     card_id: (0, import_pg_core.varchar)("card_id", { length: 36 }).primaryKey(),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
     card_type_id: (0, import_pg_core.varchar)("card_type_id", { length: 36 }).references(() => cardTypes.card_type_id, {
@@ -822,6 +902,7 @@ var cards = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("cards_tenant_id_idx").on(table.tenant_id),
     boardIdx: (0, import_pg_core.index)("cards_board_idx").on(table.board_id),
     cardTypeIdx: (0, import_pg_core.index)("cards_card_type_idx").on(table.card_type_id),
     titleIdx: (0, import_pg_core.index)("cards_title_idx").on(table.title),
@@ -832,6 +913,7 @@ var cards = (0, import_pg_core.pgTable)(
 var artifacts = (0, import_pg_core.pgTable)(
   "artifacts",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     artifact_id: (0, import_pg_core.varchar)("artifact_id", { length: 36 }).primaryKey(),
     branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).references(() => branches.branch_id, {
       onDelete: "set null"
@@ -867,6 +949,7 @@ var artifacts = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("artifacts_tenant_id_idx").on(table.tenant_id),
     branchIdx: (0, import_pg_core.index)("artifacts_branch_idx").on(table.branch_id),
     sourceSessionIdx: (0, import_pg_core.index)("artifacts_source_session_idx").on(table.source_session_id),
     boardIdx: (0, import_pg_core.index)("artifacts_board_idx").on(table.board_id),
@@ -877,6 +960,7 @@ var artifacts = (0, import_pg_core.pgTable)(
 var artifactTrustGrants = (0, import_pg_core.pgTable)(
   "artifact_trust_grants",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     grant_id: (0, import_pg_core.varchar)("grant_id", { length: 36 }).primaryKey(),
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull(),
     scope_type: (0, import_pg_core.text)("scope_type").notNull(),
@@ -887,6 +971,7 @@ var artifactTrustGrants = (0, import_pg_core.pgTable)(
     revoked_at: t.timestamp("revoked_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("artifact_trust_grants_tenant_id_idx").on(table.tenant_id),
     userIdx: (0, import_pg_core.index)("artifact_trust_grants_user_idx").on(table.user_id),
     scopeIdx: (0, import_pg_core.index)("artifact_trust_grants_scope_idx").on(table.scope_type, table.scope_value)
   })
@@ -894,6 +979,7 @@ var artifactTrustGrants = (0, import_pg_core.pgTable)(
 var boardObjects = (0, import_pg_core.pgTable)(
   "board_objects",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     object_id: (0, import_pg_core.varchar)("object_id", { length: 36 }).primaryKey(),
     board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
@@ -909,6 +995,7 @@ var boardObjects = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("board_objects_tenant_id_idx").on(table.tenant_id),
     boardIdx: (0, import_pg_core.index)("board_objects_board_idx").on(table.board_id),
     branchIdx: (0, import_pg_core.index)("board_objects_branch_idx").on(table.branch_id),
     cardIdx: (0, import_pg_core.index)("board_objects_card_idx").on(table.card_id)
@@ -917,12 +1004,14 @@ var boardObjects = (0, import_pg_core.pgTable)(
 var sessionMcpServers = (0, import_pg_core.pgTable)(
   "session_mcp_servers",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     mcp_server_id: (0, import_pg_core.varchar)("mcp_server_id", { length: 36 }).notNull().references(() => mcpServers.mcp_server_id, { onDelete: "cascade" }),
     enabled: t.bool("enabled").notNull().default(true),
     added_at: t.timestamp("added_at").notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("session_mcp_servers_tenant_id_idx").on(table.tenant_id),
     // Composite primary key
     pk: (0, import_pg_core.index)("session_mcp_servers_pk").on(table.session_id, table.mcp_server_id),
     // Indexes for queries
@@ -934,6 +1023,7 @@ var sessionMcpServers = (0, import_pg_core.pgTable)(
 var userMcpOauthTokens = (0, import_pg_core.pgTable)(
   "user_mcp_oauth_tokens",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // NULL = shared-mode token (one per mcp_server_id)
     user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).references(() => users.user_id, {
       onDelete: "cascade"
@@ -951,6 +1041,7 @@ var userMcpOauthTokens = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("user_mcp_oauth_tokens_tenant_id_idx").on(table.tenant_id),
     // Composite lookup indexes. Uniqueness enforced via partial unique indexes
     // created in the migration (one for per-user rows, one for the shared row).
     pk: (0, import_pg_core.index)("user_mcp_oauth_tokens_pk").on(table.user_id, table.mcp_server_id),
@@ -961,6 +1052,7 @@ var userMcpOauthTokens = (0, import_pg_core.pgTable)(
 var boardComments = (0, import_pg_core.pgTable)(
   "board_comments",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     comment_id: (0, import_pg_core.varchar)("comment_id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -1002,6 +1094,7 @@ var boardComments = (0, import_pg_core.pgTable)(
     data: t.json("data").$type().notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("board_comments_tenant_id_idx").on(table.tenant_id),
     boardIdx: (0, import_pg_core.index)("board_comments_board_idx").on(table.board_id),
     sessionIdx: (0, import_pg_core.index)("board_comments_session_idx").on(table.session_id),
     taskIdx: (0, import_pg_core.index)("board_comments_task_idx").on(table.task_id),
@@ -1016,6 +1109,7 @@ var boardComments = (0, import_pg_core.pgTable)(
 var gatewayChannels = (0, import_pg_core.pgTable)(
   "gateway_channels",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -1029,7 +1123,7 @@ var gatewayChannels = (0, import_pg_core.pgTable)(
     }).notNull(),
     target_branch_id: (0, import_pg_core.varchar)("target_branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
     agor_user_id: (0, import_pg_core.varchar)("agor_user_id", { length: 36 }).notNull(),
-    channel_key: (0, import_pg_core.text)("channel_key").notNull().unique(),
+    channel_key: (0, import_pg_core.text)("channel_key").notNull(),
     enabled: t.bool("enabled").notNull().default(true),
     last_message_at: t.timestamp("last_message_at"),
     // JSON blob for platform credentials (encrypted at rest)
@@ -1038,13 +1132,19 @@ var gatewayChannels = (0, import_pg_core.pgTable)(
     agentic_config: t.json("agentic_config")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("gateway_channels_tenant_id_idx").on(table.tenant_id),
     channelKeyIdx: (0, import_pg_core.index)("idx_gateway_channel_key").on(table.channel_key),
+    channelKeyTenantUnique: (0, import_pg_core.uniqueIndex)("gateway_channels_tenant_channel_key_unique").on(
+      table.tenant_id,
+      table.channel_key
+    ),
     enabledTypeIdx: (0, import_pg_core.index)("idx_gateway_enabled_type").on(table.enabled, table.channel_type)
   })
 );
 var threadSessionMap = (0, import_pg_core.pgTable)(
   "thread_session_map",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     // Primary identity
     id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
     created_at: t.timestamp("created_at").notNull(),
@@ -1062,7 +1162,9 @@ var threadSessionMap = (0, import_pg_core.pgTable)(
     metadata: t.json("metadata")
   },
   (table) => ({
-    uniqueChannelThread: (0, import_pg_core.uniqueIndex)("uniq_thread_map_channel_thread").on(
+    tenantIdx: (0, import_pg_core.index)("thread_session_map_tenant_id_idx").on(table.tenant_id),
+    uniqueChannelThread: (0, import_pg_core.uniqueIndex)("uniq_thread_map_tenant_channel_thread").on(
+      table.tenant_id,
       table.channel_id,
       table.thread_id
     ),
@@ -1071,14 +1173,82 @@ var threadSessionMap = (0, import_pg_core.pgTable)(
     channelStatusIdx: (0, import_pg_core.index)("idx_thread_map_channel_status").on(table.channel_id, table.status)
   })
 );
+var gatewayOutboundMessages = (0, import_pg_core.pgTable)(
+  "gateway_outbound_messages",
+  {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
+    id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
+    created_at: t.timestamp("created_at").notNull(),
+    updated_at: t.timestamp("updated_at").notNull(),
+    gateway_channel_id: (0, import_pg_core.varchar)("gateway_channel_id", { length: 36 }).notNull().references(() => gatewayChannels.id, { onDelete: "cascade" }),
+    channel_type: (0, import_pg_core.text)("channel_type", {
+      enum: ["slack", "discord", "whatsapp", "telegram", "github", "teams"]
+    }).notNull(),
+    platform_channel_id: (0, import_pg_core.text)("platform_channel_id").notNull(),
+    platform_message_id: (0, import_pg_core.text)("platform_message_id").notNull(),
+    platform_thread_id: (0, import_pg_core.text)("platform_thread_id").notNull(),
+    platform_permalink: (0, import_pg_core.text)("platform_permalink"),
+    target_branch_id: (0, import_pg_core.varchar)("target_branch_id", { length: 36 }).notNull().references(() => branches.branch_id),
+    emitted_by_user_id: (0, import_pg_core.varchar)("emitted_by_user_id", { length: 36 }).notNull().references(() => users.user_id),
+    emitted_by_session_id: (0, import_pg_core.varchar)("emitted_by_session_id", { length: 36 }).references(
+      () => sessions.session_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    emitted_by_task_id: (0, import_pg_core.varchar)("emitted_by_task_id", { length: 36 }).references(
+      () => tasks.task_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    emitted_by_schedule_id: (0, import_pg_core.varchar)("emitted_by_schedule_id", { length: 36 }).references(
+      () => schedules.schedule_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    message_text: (0, import_pg_core.text)("message_text").notNull(),
+    message_preview: (0, import_pg_core.text)("message_preview").notNull(),
+    metadata: t.json("metadata"),
+    consumed_by_session_id: (0, import_pg_core.varchar)("consumed_by_session_id", { length: 36 }).references(
+      () => sessions.session_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    consumed_at: t.timestamp("consumed_at")
+  },
+  (table) => ({
+    tenantIdx: (0, import_pg_core.index)("gateway_outbound_messages_tenant_id_idx").on(table.tenant_id),
+    uniqueChannelThread: (0, import_pg_core.uniqueIndex)("uniq_gateway_outbound_tenant_channel_thread").on(
+      table.tenant_id,
+      table.gateway_channel_id,
+      table.platform_thread_id
+    ),
+    emittedSessionIdx: (0, import_pg_core.index)("idx_gateway_outbound_emitted_session").on(
+      table.emitted_by_session_id
+    ),
+    emittedScheduleIdx: (0, import_pg_core.index)("idx_gateway_outbound_emitted_schedule").on(
+      table.emitted_by_schedule_id
+    ),
+    targetBranchCreatedIdx: (0, import_pg_core.index)("idx_gateway_outbound_branch_created").on(
+      table.target_branch_id,
+      table.created_at
+    ),
+    consumedIdx: (0, import_pg_core.index)("idx_gateway_outbound_consumed").on(table.consumed_at)
+  })
+);
 var sessionEnvSelections = (0, import_pg_core.pgTable)(
   "session_env_selections",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
     env_var_name: (0, import_pg_core.text)("env_var_name").notNull(),
     created_at: t.timestamp("created_at").notNull()
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("session_env_selections_tenant_id_idx").on(table.tenant_id),
     pk: (0, import_pg_core.primaryKey)({ columns: [table.session_id, table.env_var_name] }),
     sessionIdx: (0, import_pg_core.index)("session_env_selections_session_idx").on(table.session_id)
   })
@@ -1086,6 +1256,7 @@ var sessionEnvSelections = (0, import_pg_core.pgTable)(
 var kbNamespaces = (0, import_pg_core.pgTable)(
   "kb_namespaces",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     namespace_id: (0, import_pg_core.varchar)("namespace_id", { length: 36 }).primaryKey(),
     slug: (0, import_pg_core.text)("slug").notNull(),
     display_name: (0, import_pg_core.text)("display_name").notNull(),
@@ -1112,7 +1283,8 @@ var kbNamespaces = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
-    slugIdx: (0, import_pg_core.uniqueIndex)("kb_namespaces_slug_idx").on(table.slug).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    tenantIdx: (0, import_pg_core.index)("kb_namespaces_tenant_id_idx").on(table.tenant_id),
+    slugIdx: (0, import_pg_core.uniqueIndex)("kb_namespaces_tenant_slug_unique").on(table.tenant_id, table.slug).where(import_drizzle_orm2.sql`${table.archived} = false`),
     kindIdx: (0, import_pg_core.index)("kb_namespaces_kind_idx").on(table.kind),
     ownerIdx: (0, import_pg_core.index)("kb_namespaces_owner_idx").on(table.owner_user_id),
     repoIdx: (0, import_pg_core.index)("kb_namespaces_repo_idx").on(table.repo_id),
@@ -1123,6 +1295,7 @@ var kbNamespaces = (0, import_pg_core.pgTable)(
 var kbNamespaceAcl = (0, import_pg_core.pgTable)(
   "kb_namespace_acl",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     namespace_acl_id: (0, import_pg_core.varchar)("namespace_acl_id", { length: 36 }).primaryKey(),
     namespace_id: (0, import_pg_core.varchar)("namespace_id", { length: 36 }).notNull().references(() => kbNamespaces.namespace_id, { onDelete: "cascade" }),
     subject_type: (0, import_pg_core.text)("subject_type", { enum: ["user", "group"] }).notNull(),
@@ -1135,9 +1308,11 @@ var kbNamespaceAcl = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("kb_namespace_acl_tenant_id_idx").on(table.tenant_id),
     namespaceIdx: (0, import_pg_core.index)("kb_namespace_acl_namespace_idx").on(table.namespace_id),
     subjectIdx: (0, import_pg_core.index)("kb_namespace_acl_subject_idx").on(table.subject_type, table.subject_id),
-    namespaceSubjectIdx: (0, import_pg_core.uniqueIndex)("kb_namespace_acl_namespace_subject_idx").on(
+    namespaceSubjectIdx: (0, import_pg_core.uniqueIndex)("kb_namespace_acl_tenant_namespace_subject_unique").on(
+      table.tenant_id,
       table.namespace_id,
       table.subject_type,
       table.subject_id
@@ -1147,6 +1322,7 @@ var kbNamespaceAcl = (0, import_pg_core.pgTable)(
 var kbDocuments = (0, import_pg_core.pgTable)(
   "kb_documents",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     document_id: (0, import_pg_core.varchar)("document_id", { length: 36 }).primaryKey(),
     namespace_id: (0, import_pg_core.varchar)("namespace_id", { length: 36 }).notNull().references(() => kbNamespaces.namespace_id, { onDelete: "cascade" }),
     path: (0, import_pg_core.text)("path").notNull(),
@@ -1174,8 +1350,9 @@ var kbDocuments = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
-    namespacePathIdx: (0, import_pg_core.uniqueIndex)("kb_documents_namespace_path_idx").on(table.namespace_id, table.path).where(import_drizzle_orm2.sql`${table.archived} = false`),
-    uriIdx: (0, import_pg_core.uniqueIndex)("kb_documents_uri_idx").on(table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    tenantIdx: (0, import_pg_core.index)("kb_documents_tenant_id_idx").on(table.tenant_id),
+    namespacePathIdx: (0, import_pg_core.uniqueIndex)("kb_documents_tenant_namespace_path_unique").on(table.tenant_id, table.namespace_id, table.path).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    uriIdx: (0, import_pg_core.uniqueIndex)("kb_documents_tenant_uri_unique").on(table.tenant_id, table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
     namespaceIdx: (0, import_pg_core.index)("kb_documents_namespace_idx").on(table.namespace_id),
     kindIdx: (0, import_pg_core.index)("kb_documents_kind_idx").on(table.kind),
     visibilityIdx: (0, import_pg_core.index)("kb_documents_visibility_idx").on(table.visibility),
@@ -1188,6 +1365,7 @@ var kbDocuments = (0, import_pg_core.pgTable)(
 var kbDocumentVersions = (0, import_pg_core.pgTable)(
   "kb_document_versions",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     version_id: (0, import_pg_core.varchar)("version_id", { length: 36 }).primaryKey(),
     document_id: (0, import_pg_core.varchar)("document_id", { length: 36 }).notNull().references(() => kbDocuments.document_id, { onDelete: "cascade" }),
     version_number: (0, import_pg_core.integer)("version_number").notNull(),
@@ -1207,7 +1385,9 @@ var kbDocumentVersions = (0, import_pg_core.pgTable)(
     created_at: t.timestamp("created_at").notNull()
   },
   (table) => ({
-    documentVersionIdx: (0, import_pg_core.uniqueIndex)("kb_document_versions_document_version_idx").on(
+    tenantIdx: (0, import_pg_core.index)("kb_document_versions_tenant_id_idx").on(table.tenant_id),
+    documentVersionIdx: (0, import_pg_core.uniqueIndex)("kb_document_versions_tenant_document_version_unique").on(
+      table.tenant_id,
       table.document_id,
       table.version_number
     ),
@@ -1219,6 +1399,7 @@ var kbDocumentVersions = (0, import_pg_core.pgTable)(
 var kbDocumentUnits = (0, import_pg_core.pgTable)(
   "kb_document_units",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     unit_id: (0, import_pg_core.varchar)("unit_id", { length: 36 }).primaryKey(),
     document_id: (0, import_pg_core.varchar)("document_id", { length: 36 }).notNull().references(() => kbDocuments.document_id, { onDelete: "cascade" }),
     version_id: (0, import_pg_core.varchar)("version_id", { length: 36 }).notNull().references(() => kbDocumentVersions.version_id, { onDelete: "cascade" }),
@@ -1243,6 +1424,7 @@ var kbDocumentUnits = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("kb_document_units_tenant_id_idx").on(table.tenant_id),
     documentIdx: (0, import_pg_core.index)("kb_document_units_document_idx").on(table.document_id),
     versionIdx: (0, import_pg_core.index)("kb_document_units_version_idx").on(table.version_id),
     versionOrdinalIdx: (0, import_pg_core.index)("kb_document_units_version_ordinal_idx").on(
@@ -1256,6 +1438,7 @@ var kbDocumentUnits = (0, import_pg_core.pgTable)(
 var kbEmbeddingSpaces = (0, import_pg_core.pgTable)(
   "kb_embedding_spaces",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     embedding_space_id: (0, import_pg_core.varchar)("embedding_space_id", { length: 36 }).primaryKey(),
     provider: (0, import_pg_core.text)("provider").notNull(),
     model: (0, import_pg_core.text)("model").notNull(),
@@ -1268,7 +1451,9 @@ var kbEmbeddingSpaces = (0, import_pg_core.pgTable)(
     updated_at: t.timestamp("updated_at")
   },
   (table) => ({
-    providerModelIdx: (0, import_pg_core.uniqueIndex)("kb_embedding_spaces_provider_model_idx").on(
+    tenantIdx: (0, import_pg_core.index)("kb_embedding_spaces_tenant_id_idx").on(table.tenant_id),
+    providerModelIdx: (0, import_pg_core.uniqueIndex)("kb_embedding_spaces_tenant_provider_model_unique").on(
+      table.tenant_id,
       table.provider,
       table.model,
       table.dimensions,
@@ -1281,6 +1466,7 @@ var kbEmbeddingSpaces = (0, import_pg_core.pgTable)(
 var kbGraphNodes = (0, import_pg_core.pgTable)(
   "kb_graph_nodes",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     node_id: (0, import_pg_core.varchar)("node_id", { length: 36 }).primaryKey(),
     node_type: (0, import_pg_core.text)("node_type", {
       enum: [
@@ -1346,7 +1532,8 @@ var kbGraphNodes = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
-    uriIdx: (0, import_pg_core.uniqueIndex)("kb_graph_nodes_uri_idx").on(table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    tenantIdx: (0, import_pg_core.index)("kb_graph_nodes_tenant_id_idx").on(table.tenant_id),
+    uriIdx: (0, import_pg_core.uniqueIndex)("kb_graph_nodes_tenant_uri_unique").on(table.tenant_id, table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
     typeIdx: (0, import_pg_core.index)("kb_graph_nodes_type_idx").on(table.node_type),
     namespaceIdx: (0, import_pg_core.index)("kb_graph_nodes_namespace_idx").on(table.namespace_id),
     documentIdx: (0, import_pg_core.index)("kb_graph_nodes_document_idx").on(table.document_id),
@@ -1366,6 +1553,7 @@ var kbGraphNodes = (0, import_pg_core.pgTable)(
 var kbGraphEdges = (0, import_pg_core.pgTable)(
   "kb_graph_edges",
   {
+    tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
     edge_id: (0, import_pg_core.varchar)("edge_id", { length: 36 }).primaryKey(),
     source_node_id: (0, import_pg_core.varchar)("source_node_id", { length: 36 }).notNull().references(() => kbGraphNodes.node_id, { onDelete: "cascade" }),
     target_node_id: (0, import_pg_core.varchar)("target_node_id", { length: 36 }).notNull().references(() => kbGraphNodes.node_id, { onDelete: "cascade" }),
@@ -1394,6 +1582,7 @@ var kbGraphEdges = (0, import_pg_core.pgTable)(
     archived_at: t.timestamp("archived_at")
   },
   (table) => ({
+    tenantIdx: (0, import_pg_core.index)("kb_graph_edges_tenant_id_idx").on(table.tenant_id),
     sourceIdx: (0, import_pg_core.index)("kb_graph_edges_source_idx").on(table.source_node_id),
     targetIdx: (0, import_pg_core.index)("kb_graph_edges_target_idx").on(table.target_node_id),
     typeIdx: (0, import_pg_core.index)("kb_graph_edges_type_idx").on(table.edge_type),
@@ -1405,7 +1594,7 @@ var kbGraphEdges = (0, import_pg_core.pgTable)(
       table.target_node_id,
       table.edge_type
     ),
-    sourceTargetTypeIdx: (0, import_pg_core.uniqueIndex)("kb_graph_edges_source_target_type_idx").on(table.source_node_id, table.target_node_id, table.edge_type).where(import_drizzle_orm2.sql`${table.archived} = false`),
+    sourceTargetTypeIdx: (0, import_pg_core.uniqueIndex)("kb_graph_edges_tenant_source_target_type_unique").on(table.tenant_id, table.source_node_id, table.target_node_id, table.edge_type).where(import_drizzle_orm2.sql`${table.archived} = false`),
     archivedIdx: (0, import_pg_core.index)("kb_graph_edges_archived_idx").on(table.archived)
   })
 );
@@ -1467,6 +1656,7 @@ __export(schema_sqlite_exports, {
   cardTypes: () => cardTypes2,
   cards: () => cards2,
   gatewayChannels: () => gatewayChannels2,
+  gatewayOutboundMessages: () => gatewayOutboundMessages2,
   groupMemberships: () => groupMemberships2,
   groups: () => groups2,
   kbDocumentUnits: () => kbDocumentUnits2,
@@ -1565,6 +1755,7 @@ var sessions2 = (0, import_sqlite_core.sqliteTable)(
   },
   (table) => ({
     statusIdx: (0, import_sqlite_core.index)("sessions_status_idx").on(table.status),
+    statusReadyIdx: (0, import_sqlite_core.index)("sessions_status_ready_idx").on(table.status, table.ready_for_prompt),
     agenticToolIdx: (0, import_sqlite_core.index)("sessions_agentic_tool_idx").on(table.agentic_tool),
     boardIdx: (0, import_sqlite_core.index)("sessions_board_idx").on(table.board_id),
     branchIdx: (0, import_sqlite_core.index)("sessions_branch_idx").on(table.branch_id),
@@ -1604,6 +1795,9 @@ var sessionRelationships2 = (0, import_sqlite_core.sqliteTable)(
     sourceIdx: (0, import_sqlite_core.index)("session_relationships_source_idx").on(table.source_session_id),
     targetIdx: (0, import_sqlite_core.index)("session_relationships_target_idx").on(table.target_session_id),
     callbackIdx: (0, import_sqlite_core.index)("session_relationships_callback_idx").on(table.callback_session_id),
+    // Note: no tenant_source/tenant_target composite indexes here — SQLite schema
+    // has no tenant column on this table (RLS is Postgres-only). The standalone
+    // source/target indexes above are sufficient for SQLite.
     sourceTargetTypeUnique: (0, import_sqlite_core.uniqueIndex)("session_relationships_source_target_type_unique").on(
       table.source_session_id,
       table.target_session_id,
@@ -1723,7 +1917,12 @@ var messages2 = (0, import_sqlite_core.sqliteTable)(
     // Indexes for efficient lookups
     sessionIdx: (0, import_sqlite_core.index)("messages_session_id_idx").on(table.session_id),
     taskIdx: (0, import_sqlite_core.index)("messages_task_id_idx").on(table.task_id),
-    sessionIndexIdx: (0, import_sqlite_core.index)("messages_session_index_idx").on(table.session_id, table.index)
+    sessionIndexIdx: (0, import_sqlite_core.index)("messages_session_index_idx").on(table.session_id, table.index),
+    timestampIdx: (0, import_sqlite_core.index)("messages_timestamp_idx").on(table.timestamp),
+    sessionTimestampIdx: (0, import_sqlite_core.index)("messages_session_timestamp_idx").on(
+      table.session_id,
+      table.timestamp
+    )
   })
 );
 var boards2 = (0, import_sqlite_core.sqliteTable)(
@@ -1949,6 +2148,9 @@ var users2 = (0, import_sqlite_core.sqliteTable)(
     onboarding_completed: t2.bool("onboarding_completed").notNull().default(false),
     // Force password change flag (admin-settable, auto-cleared on password change)
     must_change_password: t2.bool("must_change_password").notNull().default(false),
+    // Auth invalidation marker. Password changes set this timestamp so any
+    // previously issued browser access or refresh token is rejected.
+    tokens_valid_after: t2.timestamp("tokens_valid_after"),
     // JSON blob for profile/preferences
     data: t2.json("data").$type().notNull()
   },
@@ -2392,6 +2594,66 @@ var threadSessionMap2 = (0, import_sqlite_core.sqliteTable)(
     channelStatusIdx: (0, import_sqlite_core.index)("idx_thread_map_channel_status").on(table.channel_id, table.status)
   })
 );
+var gatewayOutboundMessages2 = (0, import_sqlite_core.sqliteTable)(
+  "gateway_outbound_messages",
+  {
+    id: (0, import_sqlite_core.text)("id", { length: 36 }).primaryKey(),
+    created_at: t2.timestamp("created_at").notNull(),
+    updated_at: t2.timestamp("updated_at").notNull(),
+    gateway_channel_id: (0, import_sqlite_core.text)("gateway_channel_id", { length: 36 }).notNull().references(() => gatewayChannels2.id, { onDelete: "cascade" }),
+    channel_type: (0, import_sqlite_core.text)("channel_type", {
+      enum: ["slack", "discord", "whatsapp", "telegram", "github", "teams"]
+    }).notNull(),
+    platform_channel_id: (0, import_sqlite_core.text)("platform_channel_id").notNull(),
+    platform_message_id: (0, import_sqlite_core.text)("platform_message_id").notNull(),
+    platform_thread_id: (0, import_sqlite_core.text)("platform_thread_id").notNull(),
+    platform_permalink: (0, import_sqlite_core.text)("platform_permalink"),
+    target_branch_id: (0, import_sqlite_core.text)("target_branch_id", { length: 36 }).notNull().references(() => branches2.branch_id),
+    emitted_by_user_id: (0, import_sqlite_core.text)("emitted_by_user_id", { length: 36 }).notNull().references(() => users2.user_id),
+    emitted_by_session_id: (0, import_sqlite_core.text)("emitted_by_session_id", { length: 36 }).references(
+      () => sessions2.session_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    emitted_by_task_id: (0, import_sqlite_core.text)("emitted_by_task_id", { length: 36 }).references(() => tasks2.task_id, {
+      onDelete: "set null"
+    }),
+    emitted_by_schedule_id: (0, import_sqlite_core.text)("emitted_by_schedule_id", { length: 36 }).references(
+      () => schedules2.schedule_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    message_text: (0, import_sqlite_core.text)("message_text").notNull(),
+    message_preview: (0, import_sqlite_core.text)("message_preview").notNull(),
+    metadata: t2.json("metadata"),
+    consumed_by_session_id: (0, import_sqlite_core.text)("consumed_by_session_id", { length: 36 }).references(
+      () => sessions2.session_id,
+      {
+        onDelete: "set null"
+      }
+    ),
+    consumed_at: t2.timestamp("consumed_at")
+  },
+  (table) => ({
+    uniqueChannelThread: (0, import_sqlite_core.uniqueIndex)("uniq_gateway_outbound_channel_thread").on(
+      table.gateway_channel_id,
+      table.platform_thread_id
+    ),
+    emittedSessionIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_emitted_session").on(
+      table.emitted_by_session_id
+    ),
+    emittedScheduleIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_emitted_schedule").on(
+      table.emitted_by_schedule_id
+    ),
+    targetBranchCreatedIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_branch_created").on(
+      table.target_branch_id,
+      table.created_at
+    ),
+    consumedIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_consumed").on(table.consumed_at)
+  })
+);
 var sessionEnvSelections2 = (0, import_sqlite_core.sqliteTable)(
   "session_env_selections",
   {
@@ -2774,7 +3036,7 @@ var import_node_fs = require("fs");
 var import_promises = __toESM(require("fs/promises"), 1);
 var import_node_os = __toESM(require("os"), 1);
 var import_node_path = __toESM(require("path"), 1);
-var import_js_yaml = __toESM(require("js-yaml"), 1);
+var yaml = __toESM(require("js-yaml"), 1);
 
 // src/config/analytics-defaults.ts
 function getDefaultAnalyticsConfig() {
@@ -2875,6 +3137,64 @@ function resolveExecutorHeartbeatConfig(execution) {
   };
 }
 
+// src/config/multitenancy.ts
+var DEFAULT_STATIC_TENANT_ID = "default";
+var RESERVED_AUTH_CLAIMS = /* @__PURE__ */ new Set(["aud", "exp", "iat", "iss", "jti", "nbf", "sub", "type"]);
+function detectPostgresUrl(url) {
+  if (!url) return false;
+  const lower = url.toLowerCase();
+  return lower.startsWith("postgresql://") || lower.startsWith("postgres://") || lower.startsWith("pg://");
+}
+function resolveMultiTenancyDatabaseDialect(config = {}) {
+  if (process.env.AGOR_DB_DIALECT === "postgresql" || process.env.AGOR_DB_DIALECT === "sqlite") {
+    return process.env.AGOR_DB_DIALECT;
+  }
+  if (detectPostgresUrl(process.env.DATABASE_URL)) return "postgresql";
+  if (config.database?.dialect === "postgresql" || config.database?.dialect === "sqlite") {
+    return config.database.dialect;
+  }
+  if (detectPostgresUrl(config.database?.postgresql?.url) || config.database?.postgresql?.host) {
+    return "postgresql";
+  }
+  return "sqlite";
+}
+function resolveMultiTenancyConfig(config) {
+  const raw = config.multi_tenancy ?? {};
+  const mode = raw.mode ?? "static";
+  return {
+    mode,
+    static_tenant_id: raw.static_tenant_id?.trim() || DEFAULT_STATIC_TENANT_ID,
+    ...raw.auth_claim ? { auth_claim: raw.auth_claim } : {},
+    ...raw.trusted_header ? { trusted_header: raw.trusted_header } : {}
+  };
+}
+function assertValidMultiTenancyConfig(config) {
+  const resolved = resolveMultiTenancyConfig(config);
+  if (resolved.mode !== "static" && resolved.mode !== "required_from_auth") {
+    throw new Error("Config error: multi_tenancy.mode must be one of: static, required_from_auth");
+  }
+  if (!resolved.static_tenant_id) {
+    throw new Error("Config error: multi_tenancy.static_tenant_id must not be empty");
+  }
+  if (resolved.auth_claim && RESERVED_AUTH_CLAIMS.has(resolved.auth_claim)) {
+    throw new Error(
+      `Config error: multi_tenancy.auth_claim cannot be reserved JWT claim '${resolved.auth_claim}'`
+    );
+  }
+  if (resolved.mode === "required_from_auth") {
+    if (resolveMultiTenancyDatabaseDialect(config) !== "postgresql") {
+      throw new Error(
+        "Config error: multi_tenancy.required_from_auth requires database.dialect: postgresql"
+      );
+    }
+    if (!resolved.auth_claim && !resolved.trusted_header) {
+      throw new Error(
+        "Config error: multi_tenancy.required_from_auth requires multi_tenancy.auth_claim or multi_tenancy.trusted_header"
+      );
+    }
+  }
+}
+
 // src/config/config-manager.ts
 var NO_FILE = -1;
 var NO_FILE_KEY = { mtimeMs: NO_FILE, size: 0 };
@@ -2907,7 +3227,10 @@ function writeCachedConfig(configPath, config, key) {
   cachedEntry = { path: configPath, config: structuredClone(config), key };
 }
 function parseAndValidateConfig(content) {
-  const parsed = import_js_yaml.default.load(content);
+  if (content.trim() === "") {
+    return {};
+  }
+  const parsed = yaml.load(content);
   const finalConfig = parsed || {};
   validateConfig(finalConfig);
   return finalConfig;
@@ -2936,6 +3259,7 @@ To update: agor config set execution.unix_user_mode insulated`
       `Config error: execution.managed_envs_execution_mode must be one of: hybrid, webhook-only`
     );
   }
+  assertValidMultiTenancyConfig(config);
   validateOptionalHttpUrl(
     config.external_launch,
     "login_redirect_url",
@@ -2996,7 +3320,12 @@ function getDefaultConfig() {
       // Default: sync passwords to Unix
       executor_heartbeat: resolveExecutorHeartbeatConfig()
     },
-    analytics: getDefaultAnalyticsConfig()
+    analytics: getDefaultAnalyticsConfig(),
+    telemetry: {},
+    multi_tenancy: {
+      mode: "static",
+      static_tenant_id: "default"
+    }
   };
 }
 function loadConfigSync() {
@@ -3110,6 +3439,7 @@ var userMcpOauthTokens3 = schema.userMcpOauthTokens;
 var boardComments3 = schema.boardComments;
 var gatewayChannels3 = schema.gatewayChannels;
 var threadSessionMap3 = schema.threadSessionMap;
+var gatewayOutboundMessages3 = schema.gatewayOutboundMessages;
 var userApiKeys3 = schema.userApiKeys;
 var serializedSessions3 = schema.serializedSessions;
 var kbNamespaces3 = schema.kbNamespaces;
@@ -3253,6 +3583,15 @@ function renderTemplate(templateString, context, options = {}) {
   }
 }
 
+// src/mcp/template-patterns.ts
+function containsTemplate(value) {
+  return value.includes("{{") && value.includes("}}");
+}
+var USER_ENV_PLACEHOLDER_RE = /^\{\{\s*user\.env\.[A-Za-z_][A-Za-z0-9_]*\s*\}\}$/;
+function isUserEnvPlaceholder(value) {
+  return USER_ENV_PLACEHOLDER_RE.test(value.trim());
+}
+
 // src/mcp/template-resolver.ts
 function buildMCPTemplateContextFromEnv(env) {
   const userEnvKeysStr = env[AGOR_USER_ENV_KEYS_VAR];
@@ -3270,9 +3609,6 @@ function buildMCPTemplateContextFromEnv(env) {
     }
   };
 }
-function containsTemplate(value) {
-  return value.includes("{{") && value.includes("}}");
-}
 function resolveStringValue(fieldName, templateValue, context) {
   if (!containsTemplate(templateValue)) {
     return templateValue;
@@ -3305,6 +3641,12 @@ function resolveMcpServerEnv(envTemplate, context) {
   }
   return Object.keys(result).length > 0 ? result : void 0;
 }
+var TEMPLATE_RESOLVABLE_MCP_AUTH_SECRET_FIELDS = [
+  "token",
+  "api_token",
+  "api_secret",
+  "oauth_client_secret"
+];
 function resolveMcpServerTemplates(server, context) {
   const resolved = { ...server };
   const unresolvedFields = [];
@@ -3447,7 +3789,10 @@ function resolveMcpServersTemplates(servers, context) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  TEMPLATE_RESOLVABLE_MCP_AUTH_SECRET_FIELDS,
   buildMCPTemplateContextFromEnv,
+  containsTemplate,
+  isUserEnvPlaceholder,
   resolveMcpServerEnv,
   resolveMcpServerTemplates,
   resolveMcpServersTemplates