agor-live 0.22.0 → 0.23.2

package/dist/core/tools/mcp/oauth-refresh.cjs

@@ -31,9 +31,12 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // ../../node_modules/.pnpm/tsup@8.5.1_jiti@2.6.1_postcss@8.5.15_tsx@4.22.4_typescript@6.0.3_yaml@2.9.0/node_modules/tsup/assets/cjs_shims.js
+var getImportMetaUrl, importMetaUrl;
 var init_cjs_shims = __esm({
   "../../node_modules/.pnpm/tsup@8.5.1_jiti@2.6.1_postcss@8.5.15_tsx@4.22.4_typescript@6.0.3_yaml@2.9.0/node_modules/tsup/assets/cjs_shims.js"() {
     "use strict";
+    getImportMetaUrl = () => typeof document === "undefined" ? new URL(`file:${__filename}`).href : document.currentScript && document.currentScript.tagName.toUpperCase() === "SCRIPT" ? document.currentScript.src : new URL("main.js", document.baseURI).href;
+    importMetaUrl = /* @__PURE__ */ getImportMetaUrl();
   }
 });
 
@@ -78,18 +81,48 @@ var init_ids = __esm({
   }
 });
 
+// src/db/tenant-context.ts
+function getCurrentTenantId() {
+  const store = tenantDatabaseScope.getStore();
+  return store?.kind === "tenant" ? store.tenantId : void 0;
+}
+var import_node_async_hooks, tenantDatabaseScope;
+var init_tenant_context = __esm({
+  "src/db/tenant-context.ts"() {
+    "use strict";
+    init_cjs_shims();
+    import_node_async_hooks = require("async_hooks");
+    tenantDatabaseScope = new import_node_async_hooks.AsyncLocalStorage();
+  }
+});
+
 // src/db/database-wrapper.ts
 function isSQLiteDatabase(db) {
   return "run" in db && typeof db.run === "function";
 }
-function wrapQuery(query, db) {
+function tableHasTenantColumn(table) {
+  return Boolean(table && "tenant_id" in table);
+}
+function withTenantInsertValues(values, table) {
+  const tenantId = getCurrentTenantId();
+  if (!tenantId || !tableHasTenantColumn(table)) return values;
+  const stamp = (row) => {
+    if (!row || typeof row !== "object" || Array.isArray(row)) return row;
+    if ("tenant_id" in row) return row;
+    return { tenant_id: tenantId, ...row };
+  };
+  return Array.isArray(values) ? values.map(stamp) : stamp(values);
+}
+function wrapQuery(query, db, table) {
   return {
     ...query,
     one: async () => {
       if (isSQLiteDatabase(db)) {
         return await query.get();
       } else {
-        const results = await query.limit(1);
+        const results = await query.limit(
+          1
+        );
         return results[0] || null;
       }
     },
@@ -111,30 +144,55 @@ function wrapQuery(query, db) {
         return { rowsAffected: result.length || 0 };
       }
     },
-    // biome-ignore lint/suspicious/noExplicitAny: Drizzle query builder types vary by dialect
     returning: () => wrapReturning(query.returning(), db),
     // Preserve chainable methods
-    // biome-ignore lint/suspicious/noExplicitAny: These methods accept varying argument types from Drizzle
-    where: (...args) => wrapQuery(query.where(...args), db),
-    // biome-ignore lint/suspicious/noExplicitAny: These methods accept varying argument types from Drizzle
-    limit: (...args) => wrapQuery(query.limit(...args), db),
-    // biome-ignore lint/suspicious/noExplicitAny: These methods accept varying argument types from Drizzle
-    offset: (...args) => wrapQuery(query.offset(...args), db),
-    // biome-ignore lint/suspicious/noExplicitAny: These methods accept varying argument types from Drizzle
-    orderBy: (...args) => wrapQuery(query.orderBy(...args), db),
-    // biome-ignore lint/suspicious/noExplicitAny: These methods accept varying argument types from Drizzle
-    groupBy: (...args) => wrapQuery(query.groupBy(...args), db),
-    // biome-ignore lint/suspicious/noExplicitAny: These methods accept varying argument types from Drizzle
-    set: (...args) => wrapQuery(query.set(...args), db),
-    // biome-ignore lint/suspicious/noExplicitAny: These methods accept varying argument types from Drizzle
-    values: (...args) => wrapQuery(query.values(...args), db),
-    // biome-ignore lint/suspicious/noExplicitAny: These methods accept varying argument types from Drizzle
-    innerJoin: (...args) => wrapQuery(query.innerJoin(...args), db),
-    // biome-ignore lint/suspicious/noExplicitAny: These methods accept varying argument types from Drizzle
-    leftJoin: (...args) => wrapQuery(query.leftJoin(...args), db),
-    onConflictDoNothing: (...args) => (
-      // biome-ignore lint/suspicious/noExplicitAny: Drizzle exposes onConflictDoNothing on both dialects after .values()
-      wrapQuery(query.onConflictDoNothing(...args), db)
+    where: (...args) => wrapQuery(
+      query.where(...args),
+      db,
+      table
+    ),
+    limit: (...args) => wrapQuery(
+      query.limit(...args),
+      db,
+      table
+    ),
+    offset: (...args) => wrapQuery(
+      query.offset(...args),
+      db,
+      table
+    ),
+    orderBy: (...args) => wrapQuery(
+      query.orderBy(...args),
+      db,
+      table
+    ),
+    groupBy: (...args) => wrapQuery(
+      query.groupBy(...args),
+      db,
+      table
+    ),
+    set: (...args) => wrapQuery(query.set(...args), db, table),
+    values: (...args) => wrapQuery(
+      query.values(
+        ...args.map((arg) => withTenantInsertValues(arg, table))
+      ),
+      db,
+      table
+    ),
+    innerJoin: (...args) => wrapQuery(
+      query.innerJoin(...args),
+      db,
+      table
+    ),
+    leftJoin: (...args) => wrapQuery(
+      query.leftJoin(...args),
+      db,
+      table
+    ),
+    onConflictDoNothing: (...args) => wrapQuery(
+      query.onConflictDoNothing(...args),
+      db,
+      table
     )
   };
 }
@@ -167,7 +225,7 @@ function select(db, columns) {
 }
 function insert(db, table) {
   const query = db.insert(table);
-  return wrapQuery(query, db);
+  return wrapQuery(query, db, table);
 }
 function update(db, table) {
   const query = db.update(table);
@@ -183,6 +241,7 @@ var init_database_wrapper = __esm({
     "use strict";
     init_cjs_shims();
     import_drizzle_orm = require("drizzle-orm");
+    init_tenant_context();
   }
 });
 
@@ -430,6 +489,14 @@ var init_template = __esm({
   }
 });
 
+// src/types/tenant.ts
+var init_tenant = __esm({
+  "src/types/tenant.ts"() {
+    "use strict";
+    init_cjs_shims();
+  }
+});
+
 // src/types/ui.ts
 var init_ui = __esm({
   "src/types/ui.ts"() {
@@ -520,6 +587,7 @@ var init_types = __esm({
     init_session();
     init_task();
     init_template();
+    init_tenant();
     init_ui();
     init_user();
     init_utils();
@@ -545,6 +613,7 @@ __export(schema_postgres_exports, {
   cardTypes: () => cardTypes,
   cards: () => cards,
   gatewayChannels: () => gatewayChannels,
+  gatewayOutboundMessages: () => gatewayOutboundMessages,
   groupMemberships: () => groupMemberships,
   groups: () => groups,
   kbDocumentUnits: () => kbDocumentUnits,
@@ -573,7 +642,7 @@ __export(schema_postgres_exports, {
   userMcpOauthTokens: () => userMcpOauthTokens,
   users: () => users
 });
-var import_drizzle_orm2, import_pg_core, bytea, t, sessions, sessionRelationships, tasks, serializedSessions, messages, boards, repos, branches, branchOwners, boardOwners, schedules, users, groups, groupMemberships, branchGroupGrants, boardGroupGrants, appVariables, userApiKeys, mcpServers, cardTypes, cards, artifacts, artifactTrustGrants, boardObjects, sessionMcpServers, userMcpOauthTokens, boardComments, gatewayChannels, threadSessionMap, sessionEnvSelections, kbNamespaces, kbNamespaceAcl, kbDocuments, kbDocumentVersions, kbDocumentUnits, kbEmbeddingSpaces, kbGraphNodes, kbGraphEdges, sessionsRelations, sessionRelationshipsRelations, branchesRelations, schedulesRelations;
+var import_drizzle_orm2, import_pg_core, bytea, t, sessions, sessionRelationships, tasks, serializedSessions, messages, boards, repos, branches, branchOwners, boardOwners, schedules, users, groups, groupMemberships, branchGroupGrants, boardGroupGrants, appVariables, userApiKeys, mcpServers, cardTypes, cards, artifacts, artifactTrustGrants, boardObjects, sessionMcpServers, userMcpOauthTokens, boardComments, gatewayChannels, threadSessionMap, gatewayOutboundMessages, sessionEnvSelections, kbNamespaces, kbNamespaceAcl, kbDocuments, kbDocumentVersions, kbDocumentUnits, kbEmbeddingSpaces, kbGraphNodes, kbGraphEdges, sessionsRelations, sessionRelationshipsRelations, branchesRelations, schedulesRelations;
 var init_schema_postgres = __esm({
   "src/db/schema.postgres.ts"() {
     "use strict";
@@ -594,6 +663,7 @@ var init_schema_postgres = __esm({
     sessions = (0, import_pg_core.pgTable)(
       "sessions",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // Primary identity
         session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).primaryKey(),
         created_at: t.timestamp("created_at").notNull(),
@@ -653,7 +723,9 @@ var init_schema_postgres = __esm({
         data: t.json("data").$type().notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("sessions_tenant_id_idx").on(table.tenant_id),
         statusIdx: (0, import_pg_core.index)("sessions_status_idx").on(table.status),
+        statusReadyIdx: (0, import_pg_core.index)("sessions_status_ready_idx").on(table.status, table.ready_for_prompt),
         agenticToolIdx: (0, import_pg_core.index)("sessions_agentic_tool_idx").on(table.agentic_tool),
         boardIdx: (0, import_pg_core.index)("sessions_board_idx").on(table.board_id),
         branchIdx: (0, import_pg_core.index)("sessions_branch_idx").on(table.branch_id),
@@ -665,12 +737,13 @@ var init_schema_postgres = __esm({
         // Partial unique index — covering for the scheduler's dedup lookup
         // AND serves as the DB-level guard against check-then-create races
         // in spawnScheduledSession.
-        scheduleRunUnique: (0, import_pg_core.uniqueIndex)("sessions_schedule_run_unique").on(table.schedule_id, table.scheduled_run_at).where(import_drizzle_orm2.sql`${table.schedule_id} IS NOT NULL AND ${table.scheduled_run_at} IS NOT NULL`)
+        scheduleRunUnique: (0, import_pg_core.uniqueIndex)("sessions_schedule_run_unique").on(table.tenant_id, table.schedule_id, table.scheduled_run_at).where(import_drizzle_orm2.sql`${table.schedule_id} IS NOT NULL AND ${table.scheduled_run_at} IS NOT NULL`)
       })
     );
     sessionRelationships = (0, import_pg_core.pgTable)(
       "session_relationships",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         relationship_id: (0, import_pg_core.varchar)("relationship_id", { length: 36 }).primaryKey(),
         source_session_id: (0, import_pg_core.varchar)("source_session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
         target_session_id: (0, import_pg_core.varchar)("target_session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
@@ -688,10 +761,23 @@ var init_schema_postgres = __esm({
         data: t.json("data")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("session_relationships_tenant_id_idx").on(table.tenant_id),
         sourceIdx: (0, import_pg_core.index)("session_relationships_source_idx").on(table.source_session_id),
         targetIdx: (0, import_pg_core.index)("session_relationships_target_idx").on(table.target_session_id),
         callbackIdx: (0, import_pg_core.index)("session_relationships_callback_idx").on(table.callback_session_id),
+        // Composite indexes so the OR predicate in dispatchCompletionCallbacks
+        // (WHERE source_session_id = $1 OR target_session_id = $2) uses BitmapOr
+        // over these instead of a full tenant table scan via tenant_id_idx.
+        tenantSourceIdx: (0, import_pg_core.index)("session_relationships_tenant_source_idx").on(
+          table.tenant_id,
+          table.source_session_id
+        ),
+        tenantTargetIdx: (0, import_pg_core.index)("session_relationships_tenant_target_idx").on(
+          table.tenant_id,
+          table.target_session_id
+        ),
         sourceTargetTypeUnique: (0, import_pg_core.uniqueIndex)("session_relationships_source_target_type_unique").on(
+          table.tenant_id,
           table.source_session_id,
           table.target_session_id,
           table.relationship_type
@@ -701,6 +787,7 @@ var init_schema_postgres = __esm({
     tasks = (0, import_pg_core.pgTable)(
       "tasks",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         task_id: (0, import_pg_core.varchar)("task_id", { length: 36 }).primaryKey(),
         session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
         created_at: t.timestamp("created_at").notNull(),
@@ -730,19 +817,23 @@ var init_schema_postgres = __esm({
         data: t.json("data").$type().notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("tasks_tenant_id_idx").on(table.tenant_id),
         sessionIdx: (0, import_pg_core.index)("tasks_session_idx").on(table.session_id),
         statusIdx: (0, import_pg_core.index)("tasks_status_idx").on(table.status),
         createdIdx: (0, import_pg_core.index)("tasks_created_idx").on(table.created_at),
+        // Composite for "latest task for session" queries (ORDER BY created_at DESC LIMIT 1).
+        sessionCreatedIdx: (0, import_pg_core.index)("tasks_session_created_idx").on(table.session_id, table.created_at),
         queueIdx: (0, import_pg_core.index)("tasks_queue_idx").on(table.session_id, table.status, table.queue_position),
         // Partial unique index — defense-in-depth for `tasks.createPending` race
         // serialization. Only QUEUED rows are constrained; CREATED/RUNNING/done
         // rows have NULL queue_position and are unaffected.
-        queuedPositionUnique: (0, import_pg_core.uniqueIndex)("tasks_queued_position_unique").on(table.session_id, table.queue_position).where(import_drizzle_orm2.sql`${table.status} = 'queued'`)
+        queuedPositionUnique: (0, import_pg_core.uniqueIndex)("tasks_queued_position_unique").on(table.tenant_id, table.session_id, table.queue_position).where(import_drizzle_orm2.sql`${table.status} = 'queued'`)
       })
     );
     serializedSessions = (0, import_pg_core.pgTable)(
       "serialized_sessions",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
         session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
         branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
@@ -758,6 +849,7 @@ var init_schema_postgres = __esm({
         // gzipped; NULL while status='processing'
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("serialized_sessions_tenant_id_idx").on(table.tenant_id),
         sessionTurnIdx: (0, import_pg_core.index)("serialized_sessions_session_turn_idx").on(
           table.session_id,
           table.turn_index
@@ -768,6 +860,7 @@ var init_schema_postgres = __esm({
     messages = (0, import_pg_core.pgTable)(
       "messages",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // Primary identity
         message_id: (0, import_pg_core.varchar)("message_id", { length: 36 }).primaryKey(),
         created_at: t.timestamp("created_at").notNull(),
@@ -807,15 +900,23 @@ var init_schema_postgres = __esm({
         data: t.json("data").$type().notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("messages_tenant_id_idx").on(table.tenant_id),
+        tenantTimestampIdx: (0, import_pg_core.index)("messages_tenant_timestamp_idx").on(table.tenant_id, table.timestamp),
         // Indexes for efficient lookups
         sessionIdx: (0, import_pg_core.index)("messages_session_id_idx").on(table.session_id),
         taskIdx: (0, import_pg_core.index)("messages_task_id_idx").on(table.task_id),
-        sessionIndexIdx: (0, import_pg_core.index)("messages_session_index_idx").on(table.session_id, table.index)
+        sessionIndexIdx: (0, import_pg_core.index)("messages_session_index_idx").on(table.session_id, table.index),
+        timestampIdx: (0, import_pg_core.index)("messages_timestamp_idx").on(table.timestamp),
+        sessionTimestampIdx: (0, import_pg_core.index)("messages_session_timestamp_idx").on(
+          table.session_id,
+          table.timestamp
+        )
       })
     );
     boards = (0, import_pg_core.pgTable)(
       "boards",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).primaryKey(),
         created_at: t.timestamp("created_at").notNull(),
         updated_at: t.timestamp("updated_at"),
@@ -823,7 +924,7 @@ var init_schema_postgres = __esm({
         created_by: (0, import_pg_core.varchar)("created_by", { length: 36 }).notNull(),
         // Materialized for lookups
         name: (0, import_pg_core.text)("name").notNull(),
-        slug: (0, import_pg_core.text)("slug").unique(),
+        slug: (0, import_pg_core.text)("slug"),
         primary_assistant_id: (0, import_pg_core.varchar)("primary_assistant_id", { length: 36 }).references(
           () => branches.branch_id,
           {
@@ -838,18 +939,21 @@ var init_schema_postgres = __esm({
         archived_by: (0, import_pg_core.varchar)("archived_by", { length: 36 })
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("boards_tenant_id_idx").on(table.tenant_id),
         nameIdx: (0, import_pg_core.index)("boards_name_idx").on(table.name),
-        slugIdx: (0, import_pg_core.index)("boards_slug_idx").on(table.slug)
+        slugIdx: (0, import_pg_core.index)("boards_slug_idx").on(table.slug),
+        slugTenantUnique: (0, import_pg_core.uniqueIndex)("boards_tenant_slug_unique").on(table.tenant_id, table.slug)
       })
     );
     repos = (0, import_pg_core.pgTable)(
       "repos",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         repo_id: (0, import_pg_core.varchar)("repo_id", { length: 36 }).primaryKey(),
         created_at: t.timestamp("created_at").notNull(),
         updated_at: t.timestamp("updated_at"),
         // Materialized for querying
-        slug: (0, import_pg_core.text)("slug").notNull().unique(),
+        slug: (0, import_pg_core.text)("slug").notNull(),
         repo_type: (0, import_pg_core.text)("repo_type", { enum: ["remote", "local"] }).notNull().default("remote"),
         // Unix group for repo-level git access (agor_rp_<short-id>)
         // Users who have access to ANY branch in this repo get added to this group.
@@ -860,12 +964,15 @@ var init_schema_postgres = __esm({
         data: t.json("data").$type().notNull()
       },
       (table) => ({
-        slugIdx: (0, import_pg_core.index)("repos_slug_idx").on(table.slug)
+        tenantIdx: (0, import_pg_core.index)("repos_tenant_id_idx").on(table.tenant_id),
+        slugIdx: (0, import_pg_core.index)("repos_slug_idx").on(table.slug),
+        slugTenantUnique: (0, import_pg_core.uniqueIndex)("repos_tenant_slug_unique").on(table.tenant_id, table.slug)
       })
     );
     branches = (0, import_pg_core.pgTable)(
       "branches",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // Primary identity
         branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).primaryKey(),
         repo_id: (0, import_pg_core.varchar)("repo_id", { length: 36 }).notNull().references(() => repos.repo_id, { onDelete: "cascade" }),
@@ -940,6 +1047,7 @@ var init_schema_postgres = __esm({
         data: t.json("data").$type().notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("branches_tenant_id_idx").on(table.tenant_id),
         repoIdx: (0, import_pg_core.index)("branches_repo_idx").on(table.repo_id),
         nameIdx: (0, import_pg_core.index)("branches_name_idx").on(table.name),
         refIdx: (0, import_pg_core.index)("branches_ref_idx").on(table.ref),
@@ -953,22 +1061,26 @@ var init_schema_postgres = __esm({
     branchOwners = (0, import_pg_core.pgTable)(
       "branch_owners",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
         user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
         created_at: t.timestamp("created_at").defaultNow()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("branch_owners_tenant_id_idx").on(table.tenant_id),
         pk: (0, import_pg_core.primaryKey)({ columns: [table.branch_id, table.user_id] })
       })
     );
     boardOwners = (0, import_pg_core.pgTable)(
       "board_owners",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
         user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
         created_at: t.timestamp("created_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("board_owners_tenant_id_idx").on(table.tenant_id),
         pk: (0, import_pg_core.primaryKey)({ columns: [table.board_id, table.user_id] }),
         userIdx: (0, import_pg_core.index)("board_owners_user_idx").on(table.user_id)
       })
@@ -976,6 +1088,7 @@ var init_schema_postgres = __esm({
     schedules = (0, import_pg_core.pgTable)(
       "schedules",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         schedule_id: (0, import_pg_core.varchar)("schedule_id", { length: 36 }).primaryKey(),
         branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
         name: (0, import_pg_core.text)("name").notNull(),
@@ -999,6 +1112,7 @@ var init_schema_postgres = __esm({
         created_by: (0, import_pg_core.varchar)("created_by", { length: 36 }).notNull().references(() => users.user_id)
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("schedules_tenant_id_idx").on(table.tenant_id),
         enabledNextRunIdx: (0, import_pg_core.index)("schedules_enabled_next_run_idx").on(table.enabled, table.next_run_at),
         branchIdx: (0, import_pg_core.index)("schedules_branch_idx").on(table.branch_id),
         createdByIdx: (0, import_pg_core.index)("schedules_created_by_idx").on(table.created_by)
@@ -1007,12 +1121,13 @@ var init_schema_postgres = __esm({
     users = (0, import_pg_core.pgTable)(
       "users",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // Primary identity
         user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).primaryKey(),
         created_at: t.timestamp("created_at").notNull(),
         updated_at: t.timestamp("updated_at"),
         // Materialized for auth lookups
-        email: (0, import_pg_core.text)("email").unique().notNull(),
+        email: (0, import_pg_core.text)("email").notNull(),
         password: (0, import_pg_core.text)("password").notNull(),
         // bcrypt hashed
         // Basic profile (materialized for display)
@@ -1028,16 +1143,22 @@ var init_schema_postgres = __esm({
         onboarding_completed: t.bool("onboarding_completed").notNull().default(false),
         // Force password change flag (admin-settable, auto-cleared on password change)
         must_change_password: t.bool("must_change_password").notNull().default(false),
+        // Auth invalidation marker. Password changes set this timestamp so any
+        // previously issued browser access or refresh token is rejected.
+        tokens_valid_after: t.timestamp("tokens_valid_after"),
         // JSON blob for profile/preferences
         data: t.json("data").$type().notNull()
       },
       (table) => ({
-        emailIdx: (0, import_pg_core.index)("users_email_idx").on(table.email)
+        tenantIdx: (0, import_pg_core.index)("users_tenant_id_idx").on(table.tenant_id),
+        emailIdx: (0, import_pg_core.index)("users_email_idx").on(table.email),
+        emailTenantUnique: (0, import_pg_core.uniqueIndex)("users_tenant_email_unique").on(table.tenant_id, table.email)
       })
     );
     groups = (0, import_pg_core.pgTable)(
       "groups",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).primaryKey(),
         name: (0, import_pg_core.text)("name").notNull(),
         slug: (0, import_pg_core.text)("slug").notNull(),
@@ -1050,13 +1171,15 @@ var init_schema_postgres = __esm({
         updated_at: t.timestamp("updated_at")
       },
       (table) => ({
-        slugIdx: (0, import_pg_core.uniqueIndex)("groups_slug_idx").on(table.slug),
+        tenantIdx: (0, import_pg_core.index)("groups_tenant_id_idx").on(table.tenant_id),
+        slugIdx: (0, import_pg_core.uniqueIndex)("groups_tenant_slug_unique").on(table.tenant_id, table.slug),
         archivedIdx: (0, import_pg_core.index)("groups_archived_idx").on(table.archived)
       })
     );
     groupMemberships = (0, import_pg_core.pgTable)(
       "group_memberships",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).notNull().references(() => groups.group_id, { onDelete: "cascade" }),
         user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
         added_by: (0, import_pg_core.varchar)("added_by", { length: 36 }).references(() => users.user_id, {
@@ -1065,6 +1188,7 @@ var init_schema_postgres = __esm({
         created_at: t.timestamp("created_at").notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("group_memberships_tenant_id_idx").on(table.tenant_id),
         pk: (0, import_pg_core.primaryKey)({ columns: [table.group_id, table.user_id] }),
         userIdx: (0, import_pg_core.index)("group_memberships_user_idx").on(table.user_id)
       })
@@ -1072,6 +1196,7 @@ var init_schema_postgres = __esm({
     branchGroupGrants = (0, import_pg_core.pgTable)(
       "branch_group_grants",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
         group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).notNull().references(() => groups.group_id, { onDelete: "cascade" }),
         can: (0, import_pg_core.text)("can", { enum: [...BRANCH_PERMISSION_LEVELS] }).notNull().default("view"),
@@ -1083,6 +1208,7 @@ var init_schema_postgres = __esm({
         updated_at: t.timestamp("updated_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("branch_group_grants_tenant_id_idx").on(table.tenant_id),
         pk: (0, import_pg_core.primaryKey)({ columns: [table.branch_id, table.group_id] }),
         groupIdx: (0, import_pg_core.index)("branch_group_grants_group_idx").on(table.group_id)
       })
@@ -1090,6 +1216,7 @@ var init_schema_postgres = __esm({
     boardGroupGrants = (0, import_pg_core.pgTable)(
       "board_group_grants",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
         group_id: (0, import_pg_core.varchar)("group_id", { length: 36 }).notNull().references(() => groups.group_id, { onDelete: "cascade" }),
         can: (0, import_pg_core.text)("can", { enum: [...BRANCH_PERMISSION_LEVELS] }).notNull().default("view"),
@@ -1101,6 +1228,7 @@ var init_schema_postgres = __esm({
         updated_at: t.timestamp("updated_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("board_group_grants_tenant_id_idx").on(table.tenant_id),
         pk: (0, import_pg_core.primaryKey)({ columns: [table.board_id, table.group_id] }),
         groupIdx: (0, import_pg_core.index)("board_group_grants_group_idx").on(table.group_id)
       })
@@ -1108,6 +1236,7 @@ var init_schema_postgres = __esm({
     appVariables = (0, import_pg_core.pgTable)(
       "app_variables",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         variable_id: (0, import_pg_core.varchar)("variable_id", { length: 36 }).primaryKey(),
         namespace: (0, import_pg_core.text)("namespace").notNull(),
         key: (0, import_pg_core.text)("key").notNull(),
@@ -1123,13 +1252,19 @@ var init_schema_postgres = __esm({
         updated_at: t.timestamp("updated_at").notNull()
       },
       (table) => ({
-        namespaceKeyIdx: (0, import_pg_core.uniqueIndex)("app_variables_namespace_key_idx").on(table.namespace, table.key),
+        tenantIdx: (0, import_pg_core.index)("app_variables_tenant_id_idx").on(table.tenant_id),
+        namespaceKeyIdx: (0, import_pg_core.uniqueIndex)("app_variables_tenant_namespace_key_unique").on(
+          table.tenant_id,
+          table.namespace,
+          table.key
+        ),
         namespaceIdx: (0, import_pg_core.index)("app_variables_namespace_idx").on(table.namespace)
       })
     );
     userApiKeys = (0, import_pg_core.pgTable)(
       "user_api_keys",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
         user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull().references(() => users.user_id, { onDelete: "cascade" }),
         name: (0, import_pg_core.text)("name").notNull(),
@@ -1141,6 +1276,7 @@ var init_schema_postgres = __esm({
         last_used_at: t.timestamp("last_used_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("user_api_keys_tenant_id_idx").on(table.tenant_id),
         userIdx: (0, import_pg_core.index)("user_api_keys_user_idx").on(table.user_id),
         prefixIdx: (0, import_pg_core.index)("user_api_keys_prefix_idx").on(table.prefix)
       })
@@ -1148,6 +1284,7 @@ var init_schema_postgres = __esm({
     mcpServers = (0, import_pg_core.pgTable)(
       "mcp_servers",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // Primary identity
         mcp_server_id: (0, import_pg_core.varchar)("mcp_server_id", { length: 36 }).primaryKey(),
         created_at: t.timestamp("created_at").notNull(),
@@ -1174,6 +1311,7 @@ var init_schema_postgres = __esm({
         data: t.json("data").$type().notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("mcp_servers_tenant_id_idx").on(table.tenant_id),
         nameIdx: (0, import_pg_core.index)("mcp_servers_name_idx").on(table.name),
         scopeIdx: (0, import_pg_core.index)("mcp_servers_scope_idx").on(table.scope),
         ownerIdx: (0, import_pg_core.index)("mcp_servers_owner_idx").on(table.owner_user_id),
@@ -1183,6 +1321,7 @@ var init_schema_postgres = __esm({
     cardTypes = (0, import_pg_core.pgTable)(
       "card_types",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         card_type_id: (0, import_pg_core.varchar)("card_type_id", { length: 36 }).primaryKey(),
         name: (0, import_pg_core.text)("name").notNull(),
         emoji: (0, import_pg_core.text)("emoji"),
@@ -1194,12 +1333,14 @@ var init_schema_postgres = __esm({
         updated_at: t.timestamp("updated_at").notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("card_types_tenant_id_idx").on(table.tenant_id),
         nameIdx: (0, import_pg_core.index)("card_types_name_idx").on(table.name)
       })
     );
     cards = (0, import_pg_core.pgTable)(
       "cards",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         card_id: (0, import_pg_core.varchar)("card_id", { length: 36 }).primaryKey(),
         board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
         card_type_id: (0, import_pg_core.varchar)("card_type_id", { length: 36 }).references(() => cardTypes.card_type_id, {
@@ -1220,6 +1361,7 @@ var init_schema_postgres = __esm({
         archived_at: t.timestamp("archived_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("cards_tenant_id_idx").on(table.tenant_id),
         boardIdx: (0, import_pg_core.index)("cards_board_idx").on(table.board_id),
         cardTypeIdx: (0, import_pg_core.index)("cards_card_type_idx").on(table.card_type_id),
         titleIdx: (0, import_pg_core.index)("cards_title_idx").on(table.title),
@@ -1230,6 +1372,7 @@ var init_schema_postgres = __esm({
     artifacts = (0, import_pg_core.pgTable)(
       "artifacts",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         artifact_id: (0, import_pg_core.varchar)("artifact_id", { length: 36 }).primaryKey(),
         branch_id: (0, import_pg_core.varchar)("branch_id", { length: 36 }).references(() => branches.branch_id, {
           onDelete: "set null"
@@ -1265,6 +1408,7 @@ var init_schema_postgres = __esm({
         archived_at: t.timestamp("archived_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("artifacts_tenant_id_idx").on(table.tenant_id),
         branchIdx: (0, import_pg_core.index)("artifacts_branch_idx").on(table.branch_id),
         sourceSessionIdx: (0, import_pg_core.index)("artifacts_source_session_idx").on(table.source_session_id),
         boardIdx: (0, import_pg_core.index)("artifacts_board_idx").on(table.board_id),
@@ -1275,6 +1419,7 @@ var init_schema_postgres = __esm({
     artifactTrustGrants = (0, import_pg_core.pgTable)(
       "artifact_trust_grants",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         grant_id: (0, import_pg_core.varchar)("grant_id", { length: 36 }).primaryKey(),
         user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).notNull(),
         scope_type: (0, import_pg_core.text)("scope_type").notNull(),
@@ -1285,6 +1430,7 @@ var init_schema_postgres = __esm({
         revoked_at: t.timestamp("revoked_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("artifact_trust_grants_tenant_id_idx").on(table.tenant_id),
         userIdx: (0, import_pg_core.index)("artifact_trust_grants_user_idx").on(table.user_id),
         scopeIdx: (0, import_pg_core.index)("artifact_trust_grants_scope_idx").on(table.scope_type, table.scope_value)
       })
@@ -1292,6 +1438,7 @@ var init_schema_postgres = __esm({
     boardObjects = (0, import_pg_core.pgTable)(
       "board_objects",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // Primary identity
         object_id: (0, import_pg_core.varchar)("object_id", { length: 36 }).primaryKey(),
         board_id: (0, import_pg_core.varchar)("board_id", { length: 36 }).notNull().references(() => boards.board_id, { onDelete: "cascade" }),
@@ -1307,6 +1454,7 @@ var init_schema_postgres = __esm({
         data: t.json("data").$type().notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("board_objects_tenant_id_idx").on(table.tenant_id),
         boardIdx: (0, import_pg_core.index)("board_objects_board_idx").on(table.board_id),
         branchIdx: (0, import_pg_core.index)("board_objects_branch_idx").on(table.branch_id),
         cardIdx: (0, import_pg_core.index)("board_objects_card_idx").on(table.card_id)
@@ -1315,12 +1463,14 @@ var init_schema_postgres = __esm({
     sessionMcpServers = (0, import_pg_core.pgTable)(
       "session_mcp_servers",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
         mcp_server_id: (0, import_pg_core.varchar)("mcp_server_id", { length: 36 }).notNull().references(() => mcpServers.mcp_server_id, { onDelete: "cascade" }),
         enabled: t.bool("enabled").notNull().default(true),
         added_at: t.timestamp("added_at").notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("session_mcp_servers_tenant_id_idx").on(table.tenant_id),
         // Composite primary key
         pk: (0, import_pg_core.index)("session_mcp_servers_pk").on(table.session_id, table.mcp_server_id),
         // Indexes for queries
@@ -1332,6 +1482,7 @@ var init_schema_postgres = __esm({
     userMcpOauthTokens = (0, import_pg_core.pgTable)(
       "user_mcp_oauth_tokens",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // NULL = shared-mode token (one per mcp_server_id)
         user_id: (0, import_pg_core.varchar)("user_id", { length: 36 }).references(() => users.user_id, {
           onDelete: "cascade"
@@ -1349,6 +1500,7 @@ var init_schema_postgres = __esm({
         updated_at: t.timestamp("updated_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("user_mcp_oauth_tokens_tenant_id_idx").on(table.tenant_id),
         // Composite lookup indexes. Uniqueness enforced via partial unique indexes
         // created in the migration (one for per-user rows, one for the shared row).
         pk: (0, import_pg_core.index)("user_mcp_oauth_tokens_pk").on(table.user_id, table.mcp_server_id),
@@ -1359,6 +1511,7 @@ var init_schema_postgres = __esm({
     boardComments = (0, import_pg_core.pgTable)(
       "board_comments",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // Primary identity
         comment_id: (0, import_pg_core.varchar)("comment_id", { length: 36 }).primaryKey(),
         created_at: t.timestamp("created_at").notNull(),
@@ -1400,6 +1553,7 @@ var init_schema_postgres = __esm({
         data: t.json("data").$type().notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("board_comments_tenant_id_idx").on(table.tenant_id),
         boardIdx: (0, import_pg_core.index)("board_comments_board_idx").on(table.board_id),
         sessionIdx: (0, import_pg_core.index)("board_comments_session_idx").on(table.session_id),
         taskIdx: (0, import_pg_core.index)("board_comments_task_idx").on(table.task_id),
@@ -1414,6 +1568,7 @@ var init_schema_postgres = __esm({
     gatewayChannels = (0, import_pg_core.pgTable)(
       "gateway_channels",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // Primary identity
         id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
         created_at: t.timestamp("created_at").notNull(),
@@ -1427,7 +1582,7 @@ var init_schema_postgres = __esm({
         }).notNull(),
         target_branch_id: (0, import_pg_core.varchar)("target_branch_id", { length: 36 }).notNull().references(() => branches.branch_id, { onDelete: "cascade" }),
         agor_user_id: (0, import_pg_core.varchar)("agor_user_id", { length: 36 }).notNull(),
-        channel_key: (0, import_pg_core.text)("channel_key").notNull().unique(),
+        channel_key: (0, import_pg_core.text)("channel_key").notNull(),
         enabled: t.bool("enabled").notNull().default(true),
         last_message_at: t.timestamp("last_message_at"),
         // JSON blob for platform credentials (encrypted at rest)
@@ -1436,13 +1591,19 @@ var init_schema_postgres = __esm({
         agentic_config: t.json("agentic_config")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("gateway_channels_tenant_id_idx").on(table.tenant_id),
         channelKeyIdx: (0, import_pg_core.index)("idx_gateway_channel_key").on(table.channel_key),
+        channelKeyTenantUnique: (0, import_pg_core.uniqueIndex)("gateway_channels_tenant_channel_key_unique").on(
+          table.tenant_id,
+          table.channel_key
+        ),
         enabledTypeIdx: (0, import_pg_core.index)("idx_gateway_enabled_type").on(table.enabled, table.channel_type)
       })
     );
     threadSessionMap = (0, import_pg_core.pgTable)(
       "thread_session_map",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         // Primary identity
         id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
         created_at: t.timestamp("created_at").notNull(),
@@ -1460,7 +1621,9 @@ var init_schema_postgres = __esm({
         metadata: t.json("metadata")
       },
       (table) => ({
-        uniqueChannelThread: (0, import_pg_core.uniqueIndex)("uniq_thread_map_channel_thread").on(
+        tenantIdx: (0, import_pg_core.index)("thread_session_map_tenant_id_idx").on(table.tenant_id),
+        uniqueChannelThread: (0, import_pg_core.uniqueIndex)("uniq_thread_map_tenant_channel_thread").on(
+          table.tenant_id,
           table.channel_id,
           table.thread_id
         ),
@@ -1469,14 +1632,82 @@ var init_schema_postgres = __esm({
         channelStatusIdx: (0, import_pg_core.index)("idx_thread_map_channel_status").on(table.channel_id, table.status)
       })
     );
+    gatewayOutboundMessages = (0, import_pg_core.pgTable)(
+      "gateway_outbound_messages",
+      {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
+        id: (0, import_pg_core.varchar)("id", { length: 36 }).primaryKey(),
+        created_at: t.timestamp("created_at").notNull(),
+        updated_at: t.timestamp("updated_at").notNull(),
+        gateway_channel_id: (0, import_pg_core.varchar)("gateway_channel_id", { length: 36 }).notNull().references(() => gatewayChannels.id, { onDelete: "cascade" }),
+        channel_type: (0, import_pg_core.text)("channel_type", {
+          enum: ["slack", "discord", "whatsapp", "telegram", "github", "teams"]
+        }).notNull(),
+        platform_channel_id: (0, import_pg_core.text)("platform_channel_id").notNull(),
+        platform_message_id: (0, import_pg_core.text)("platform_message_id").notNull(),
+        platform_thread_id: (0, import_pg_core.text)("platform_thread_id").notNull(),
+        platform_permalink: (0, import_pg_core.text)("platform_permalink"),
+        target_branch_id: (0, import_pg_core.varchar)("target_branch_id", { length: 36 }).notNull().references(() => branches.branch_id),
+        emitted_by_user_id: (0, import_pg_core.varchar)("emitted_by_user_id", { length: 36 }).notNull().references(() => users.user_id),
+        emitted_by_session_id: (0, import_pg_core.varchar)("emitted_by_session_id", { length: 36 }).references(
+          () => sessions.session_id,
+          {
+            onDelete: "set null"
+          }
+        ),
+        emitted_by_task_id: (0, import_pg_core.varchar)("emitted_by_task_id", { length: 36 }).references(
+          () => tasks.task_id,
+          {
+            onDelete: "set null"
+          }
+        ),
+        emitted_by_schedule_id: (0, import_pg_core.varchar)("emitted_by_schedule_id", { length: 36 }).references(
+          () => schedules.schedule_id,
+          {
+            onDelete: "set null"
+          }
+        ),
+        message_text: (0, import_pg_core.text)("message_text").notNull(),
+        message_preview: (0, import_pg_core.text)("message_preview").notNull(),
+        metadata: t.json("metadata"),
+        consumed_by_session_id: (0, import_pg_core.varchar)("consumed_by_session_id", { length: 36 }).references(
+          () => sessions.session_id,
+          {
+            onDelete: "set null"
+          }
+        ),
+        consumed_at: t.timestamp("consumed_at")
+      },
+      (table) => ({
+        tenantIdx: (0, import_pg_core.index)("gateway_outbound_messages_tenant_id_idx").on(table.tenant_id),
+        uniqueChannelThread: (0, import_pg_core.uniqueIndex)("uniq_gateway_outbound_tenant_channel_thread").on(
+          table.tenant_id,
+          table.gateway_channel_id,
+          table.platform_thread_id
+        ),
+        emittedSessionIdx: (0, import_pg_core.index)("idx_gateway_outbound_emitted_session").on(
+          table.emitted_by_session_id
+        ),
+        emittedScheduleIdx: (0, import_pg_core.index)("idx_gateway_outbound_emitted_schedule").on(
+          table.emitted_by_schedule_id
+        ),
+        targetBranchCreatedIdx: (0, import_pg_core.index)("idx_gateway_outbound_branch_created").on(
+          table.target_branch_id,
+          table.created_at
+        ),
+        consumedIdx: (0, import_pg_core.index)("idx_gateway_outbound_consumed").on(table.consumed_at)
+      })
+    );
     sessionEnvSelections = (0, import_pg_core.pgTable)(
       "session_env_selections",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         session_id: (0, import_pg_core.varchar)("session_id", { length: 36 }).notNull().references(() => sessions.session_id, { onDelete: "cascade" }),
         env_var_name: (0, import_pg_core.text)("env_var_name").notNull(),
         created_at: t.timestamp("created_at").notNull()
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("session_env_selections_tenant_id_idx").on(table.tenant_id),
         pk: (0, import_pg_core.primaryKey)({ columns: [table.session_id, table.env_var_name] }),
         sessionIdx: (0, import_pg_core.index)("session_env_selections_session_idx").on(table.session_id)
       })
@@ -1484,6 +1715,7 @@ var init_schema_postgres = __esm({
     kbNamespaces = (0, import_pg_core.pgTable)(
       "kb_namespaces",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         namespace_id: (0, import_pg_core.varchar)("namespace_id", { length: 36 }).primaryKey(),
         slug: (0, import_pg_core.text)("slug").notNull(),
         display_name: (0, import_pg_core.text)("display_name").notNull(),
@@ -1510,7 +1742,8 @@ var init_schema_postgres = __esm({
         archived_at: t.timestamp("archived_at")
       },
       (table) => ({
-        slugIdx: (0, import_pg_core.uniqueIndex)("kb_namespaces_slug_idx").on(table.slug).where(import_drizzle_orm2.sql`${table.archived} = false`),
+        tenantIdx: (0, import_pg_core.index)("kb_namespaces_tenant_id_idx").on(table.tenant_id),
+        slugIdx: (0, import_pg_core.uniqueIndex)("kb_namespaces_tenant_slug_unique").on(table.tenant_id, table.slug).where(import_drizzle_orm2.sql`${table.archived} = false`),
         kindIdx: (0, import_pg_core.index)("kb_namespaces_kind_idx").on(table.kind),
         ownerIdx: (0, import_pg_core.index)("kb_namespaces_owner_idx").on(table.owner_user_id),
         repoIdx: (0, import_pg_core.index)("kb_namespaces_repo_idx").on(table.repo_id),
@@ -1521,6 +1754,7 @@ var init_schema_postgres = __esm({
     kbNamespaceAcl = (0, import_pg_core.pgTable)(
       "kb_namespace_acl",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         namespace_acl_id: (0, import_pg_core.varchar)("namespace_acl_id", { length: 36 }).primaryKey(),
         namespace_id: (0, import_pg_core.varchar)("namespace_id", { length: 36 }).notNull().references(() => kbNamespaces.namespace_id, { onDelete: "cascade" }),
         subject_type: (0, import_pg_core.text)("subject_type", { enum: ["user", "group"] }).notNull(),
@@ -1533,9 +1767,11 @@ var init_schema_postgres = __esm({
         updated_at: t.timestamp("updated_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("kb_namespace_acl_tenant_id_idx").on(table.tenant_id),
         namespaceIdx: (0, import_pg_core.index)("kb_namespace_acl_namespace_idx").on(table.namespace_id),
         subjectIdx: (0, import_pg_core.index)("kb_namespace_acl_subject_idx").on(table.subject_type, table.subject_id),
-        namespaceSubjectIdx: (0, import_pg_core.uniqueIndex)("kb_namespace_acl_namespace_subject_idx").on(
+        namespaceSubjectIdx: (0, import_pg_core.uniqueIndex)("kb_namespace_acl_tenant_namespace_subject_unique").on(
+          table.tenant_id,
           table.namespace_id,
           table.subject_type,
           table.subject_id
@@ -1545,6 +1781,7 @@ var init_schema_postgres = __esm({
     kbDocuments = (0, import_pg_core.pgTable)(
       "kb_documents",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         document_id: (0, import_pg_core.varchar)("document_id", { length: 36 }).primaryKey(),
         namespace_id: (0, import_pg_core.varchar)("namespace_id", { length: 36 }).notNull().references(() => kbNamespaces.namespace_id, { onDelete: "cascade" }),
         path: (0, import_pg_core.text)("path").notNull(),
@@ -1572,8 +1809,9 @@ var init_schema_postgres = __esm({
         archived_at: t.timestamp("archived_at")
       },
       (table) => ({
-        namespacePathIdx: (0, import_pg_core.uniqueIndex)("kb_documents_namespace_path_idx").on(table.namespace_id, table.path).where(import_drizzle_orm2.sql`${table.archived} = false`),
-        uriIdx: (0, import_pg_core.uniqueIndex)("kb_documents_uri_idx").on(table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
+        tenantIdx: (0, import_pg_core.index)("kb_documents_tenant_id_idx").on(table.tenant_id),
+        namespacePathIdx: (0, import_pg_core.uniqueIndex)("kb_documents_tenant_namespace_path_unique").on(table.tenant_id, table.namespace_id, table.path).where(import_drizzle_orm2.sql`${table.archived} = false`),
+        uriIdx: (0, import_pg_core.uniqueIndex)("kb_documents_tenant_uri_unique").on(table.tenant_id, table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
         namespaceIdx: (0, import_pg_core.index)("kb_documents_namespace_idx").on(table.namespace_id),
         kindIdx: (0, import_pg_core.index)("kb_documents_kind_idx").on(table.kind),
         visibilityIdx: (0, import_pg_core.index)("kb_documents_visibility_idx").on(table.visibility),
@@ -1586,6 +1824,7 @@ var init_schema_postgres = __esm({
     kbDocumentVersions = (0, import_pg_core.pgTable)(
       "kb_document_versions",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         version_id: (0, import_pg_core.varchar)("version_id", { length: 36 }).primaryKey(),
         document_id: (0, import_pg_core.varchar)("document_id", { length: 36 }).notNull().references(() => kbDocuments.document_id, { onDelete: "cascade" }),
         version_number: (0, import_pg_core.integer)("version_number").notNull(),
@@ -1605,7 +1844,9 @@ var init_schema_postgres = __esm({
         created_at: t.timestamp("created_at").notNull()
       },
       (table) => ({
-        documentVersionIdx: (0, import_pg_core.uniqueIndex)("kb_document_versions_document_version_idx").on(
+        tenantIdx: (0, import_pg_core.index)("kb_document_versions_tenant_id_idx").on(table.tenant_id),
+        documentVersionIdx: (0, import_pg_core.uniqueIndex)("kb_document_versions_tenant_document_version_unique").on(
+          table.tenant_id,
           table.document_id,
           table.version_number
         ),
@@ -1617,6 +1858,7 @@ var init_schema_postgres = __esm({
     kbDocumentUnits = (0, import_pg_core.pgTable)(
       "kb_document_units",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         unit_id: (0, import_pg_core.varchar)("unit_id", { length: 36 }).primaryKey(),
         document_id: (0, import_pg_core.varchar)("document_id", { length: 36 }).notNull().references(() => kbDocuments.document_id, { onDelete: "cascade" }),
         version_id: (0, import_pg_core.varchar)("version_id", { length: 36 }).notNull().references(() => kbDocumentVersions.version_id, { onDelete: "cascade" }),
@@ -1641,6 +1883,7 @@ var init_schema_postgres = __esm({
         updated_at: t.timestamp("updated_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("kb_document_units_tenant_id_idx").on(table.tenant_id),
         documentIdx: (0, import_pg_core.index)("kb_document_units_document_idx").on(table.document_id),
         versionIdx: (0, import_pg_core.index)("kb_document_units_version_idx").on(table.version_id),
         versionOrdinalIdx: (0, import_pg_core.index)("kb_document_units_version_ordinal_idx").on(
@@ -1654,6 +1897,7 @@ var init_schema_postgres = __esm({
     kbEmbeddingSpaces = (0, import_pg_core.pgTable)(
       "kb_embedding_spaces",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         embedding_space_id: (0, import_pg_core.varchar)("embedding_space_id", { length: 36 }).primaryKey(),
         provider: (0, import_pg_core.text)("provider").notNull(),
         model: (0, import_pg_core.text)("model").notNull(),
@@ -1666,7 +1910,9 @@ var init_schema_postgres = __esm({
         updated_at: t.timestamp("updated_at")
       },
       (table) => ({
-        providerModelIdx: (0, import_pg_core.uniqueIndex)("kb_embedding_spaces_provider_model_idx").on(
+        tenantIdx: (0, import_pg_core.index)("kb_embedding_spaces_tenant_id_idx").on(table.tenant_id),
+        providerModelIdx: (0, import_pg_core.uniqueIndex)("kb_embedding_spaces_tenant_provider_model_unique").on(
+          table.tenant_id,
           table.provider,
           table.model,
           table.dimensions,
@@ -1679,6 +1925,7 @@ var init_schema_postgres = __esm({
     kbGraphNodes = (0, import_pg_core.pgTable)(
       "kb_graph_nodes",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         node_id: (0, import_pg_core.varchar)("node_id", { length: 36 }).primaryKey(),
         node_type: (0, import_pg_core.text)("node_type", {
           enum: [
@@ -1744,7 +1991,8 @@ var init_schema_postgres = __esm({
         archived_at: t.timestamp("archived_at")
       },
       (table) => ({
-        uriIdx: (0, import_pg_core.uniqueIndex)("kb_graph_nodes_uri_idx").on(table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
+        tenantIdx: (0, import_pg_core.index)("kb_graph_nodes_tenant_id_idx").on(table.tenant_id),
+        uriIdx: (0, import_pg_core.uniqueIndex)("kb_graph_nodes_tenant_uri_unique").on(table.tenant_id, table.uri).where(import_drizzle_orm2.sql`${table.archived} = false`),
         typeIdx: (0, import_pg_core.index)("kb_graph_nodes_type_idx").on(table.node_type),
         namespaceIdx: (0, import_pg_core.index)("kb_graph_nodes_namespace_idx").on(table.namespace_id),
         documentIdx: (0, import_pg_core.index)("kb_graph_nodes_document_idx").on(table.document_id),
@@ -1764,6 +2012,7 @@ var init_schema_postgres = __esm({
     kbGraphEdges = (0, import_pg_core.pgTable)(
       "kb_graph_edges",
       {
+        tenant_id: (0, import_pg_core.text)("tenant_id").notNull().default("default"),
         edge_id: (0, import_pg_core.varchar)("edge_id", { length: 36 }).primaryKey(),
         source_node_id: (0, import_pg_core.varchar)("source_node_id", { length: 36 }).notNull().references(() => kbGraphNodes.node_id, { onDelete: "cascade" }),
         target_node_id: (0, import_pg_core.varchar)("target_node_id", { length: 36 }).notNull().references(() => kbGraphNodes.node_id, { onDelete: "cascade" }),
@@ -1792,6 +2041,7 @@ var init_schema_postgres = __esm({
         archived_at: t.timestamp("archived_at")
       },
       (table) => ({
+        tenantIdx: (0, import_pg_core.index)("kb_graph_edges_tenant_id_idx").on(table.tenant_id),
         sourceIdx: (0, import_pg_core.index)("kb_graph_edges_source_idx").on(table.source_node_id),
         targetIdx: (0, import_pg_core.index)("kb_graph_edges_target_idx").on(table.target_node_id),
         typeIdx: (0, import_pg_core.index)("kb_graph_edges_type_idx").on(table.edge_type),
@@ -1803,7 +2053,7 @@ var init_schema_postgres = __esm({
           table.target_node_id,
           table.edge_type
         ),
-        sourceTargetTypeIdx: (0, import_pg_core.uniqueIndex)("kb_graph_edges_source_target_type_idx").on(table.source_node_id, table.target_node_id, table.edge_type).where(import_drizzle_orm2.sql`${table.archived} = false`),
+        sourceTargetTypeIdx: (0, import_pg_core.uniqueIndex)("kb_graph_edges_tenant_source_target_type_unique").on(table.tenant_id, table.source_node_id, table.target_node_id, table.edge_type).where(import_drizzle_orm2.sql`${table.archived} = false`),
         archivedIdx: (0, import_pg_core.index)("kb_graph_edges_archived_idx").on(table.archived)
       })
     );
@@ -1867,6 +2117,7 @@ __export(schema_sqlite_exports, {
   cardTypes: () => cardTypes2,
   cards: () => cards2,
   gatewayChannels: () => gatewayChannels2,
+  gatewayOutboundMessages: () => gatewayOutboundMessages2,
   groupMemberships: () => groupMemberships2,
   groups: () => groups2,
   kbDocumentUnits: () => kbDocumentUnits2,
@@ -1895,7 +2146,7 @@ __export(schema_sqlite_exports, {
   userMcpOauthTokens: () => userMcpOauthTokens2,
   users: () => users2
 });
-var import_drizzle_orm3, import_sqlite_core, t2, sessions2, sessionRelationships2, tasks2, serializedSessions2, messages2, boards2, repos2, branches2, branchOwners2, boardOwners2, schedules2, users2, groups2, groupMemberships2, branchGroupGrants2, boardGroupGrants2, appVariables2, userApiKeys2, mcpServers2, cardTypes2, cards2, artifacts2, artifactTrustGrants2, boardObjects2, sessionMcpServers2, userMcpOauthTokens2, boardComments2, gatewayChannels2, threadSessionMap2, sessionEnvSelections2, kbNamespaces2, kbNamespaceAcl2, kbDocuments2, kbDocumentVersions2, kbDocumentUnits2, kbEmbeddingSpaces2, kbGraphNodes2, kbGraphEdges2, sessionsRelations2, sessionRelationshipsRelations2, branchesRelations2, schedulesRelations2;
+var import_drizzle_orm3, import_sqlite_core, t2, sessions2, sessionRelationships2, tasks2, serializedSessions2, messages2, boards2, repos2, branches2, branchOwners2, boardOwners2, schedules2, users2, groups2, groupMemberships2, branchGroupGrants2, boardGroupGrants2, appVariables2, userApiKeys2, mcpServers2, cardTypes2, cards2, artifacts2, artifactTrustGrants2, boardObjects2, sessionMcpServers2, userMcpOauthTokens2, boardComments2, gatewayChannels2, threadSessionMap2, gatewayOutboundMessages2, sessionEnvSelections2, kbNamespaces2, kbNamespaceAcl2, kbDocuments2, kbDocumentVersions2, kbDocumentUnits2, kbEmbeddingSpaces2, kbGraphNodes2, kbGraphEdges2, sessionsRelations2, sessionRelationshipsRelations2, branchesRelations2, schedulesRelations2;
 var init_schema_sqlite = __esm({
   "src/db/schema.sqlite.ts"() {
     "use strict";
@@ -1971,6 +2222,7 @@ var init_schema_sqlite = __esm({
       },
       (table) => ({
         statusIdx: (0, import_sqlite_core.index)("sessions_status_idx").on(table.status),
+        statusReadyIdx: (0, import_sqlite_core.index)("sessions_status_ready_idx").on(table.status, table.ready_for_prompt),
         agenticToolIdx: (0, import_sqlite_core.index)("sessions_agentic_tool_idx").on(table.agentic_tool),
         boardIdx: (0, import_sqlite_core.index)("sessions_board_idx").on(table.board_id),
         branchIdx: (0, import_sqlite_core.index)("sessions_branch_idx").on(table.branch_id),
@@ -2010,6 +2262,9 @@ var init_schema_sqlite = __esm({
         sourceIdx: (0, import_sqlite_core.index)("session_relationships_source_idx").on(table.source_session_id),
         targetIdx: (0, import_sqlite_core.index)("session_relationships_target_idx").on(table.target_session_id),
         callbackIdx: (0, import_sqlite_core.index)("session_relationships_callback_idx").on(table.callback_session_id),
+        // Note: no tenant_source/tenant_target composite indexes here — SQLite schema
+        // has no tenant column on this table (RLS is Postgres-only). The standalone
+        // source/target indexes above are sufficient for SQLite.
         sourceTargetTypeUnique: (0, import_sqlite_core.uniqueIndex)("session_relationships_source_target_type_unique").on(
           table.source_session_id,
           table.target_session_id,
@@ -2129,7 +2384,12 @@ var init_schema_sqlite = __esm({
         // Indexes for efficient lookups
         sessionIdx: (0, import_sqlite_core.index)("messages_session_id_idx").on(table.session_id),
         taskIdx: (0, import_sqlite_core.index)("messages_task_id_idx").on(table.task_id),
-        sessionIndexIdx: (0, import_sqlite_core.index)("messages_session_index_idx").on(table.session_id, table.index)
+        sessionIndexIdx: (0, import_sqlite_core.index)("messages_session_index_idx").on(table.session_id, table.index),
+        timestampIdx: (0, import_sqlite_core.index)("messages_timestamp_idx").on(table.timestamp),
+        sessionTimestampIdx: (0, import_sqlite_core.index)("messages_session_timestamp_idx").on(
+          table.session_id,
+          table.timestamp
+        )
       })
     );
     boards2 = (0, import_sqlite_core.sqliteTable)(
@@ -2355,6 +2615,9 @@ var init_schema_sqlite = __esm({
         onboarding_completed: t2.bool("onboarding_completed").notNull().default(false),
         // Force password change flag (admin-settable, auto-cleared on password change)
         must_change_password: t2.bool("must_change_password").notNull().default(false),
+        // Auth invalidation marker. Password changes set this timestamp so any
+        // previously issued browser access or refresh token is rejected.
+        tokens_valid_after: t2.timestamp("tokens_valid_after"),
         // JSON blob for profile/preferences
         data: t2.json("data").$type().notNull()
       },
@@ -2798,6 +3061,66 @@ var init_schema_sqlite = __esm({
         channelStatusIdx: (0, import_sqlite_core.index)("idx_thread_map_channel_status").on(table.channel_id, table.status)
       })
     );
+    gatewayOutboundMessages2 = (0, import_sqlite_core.sqliteTable)(
+      "gateway_outbound_messages",
+      {
+        id: (0, import_sqlite_core.text)("id", { length: 36 }).primaryKey(),
+        created_at: t2.timestamp("created_at").notNull(),
+        updated_at: t2.timestamp("updated_at").notNull(),
+        gateway_channel_id: (0, import_sqlite_core.text)("gateway_channel_id", { length: 36 }).notNull().references(() => gatewayChannels2.id, { onDelete: "cascade" }),
+        channel_type: (0, import_sqlite_core.text)("channel_type", {
+          enum: ["slack", "discord", "whatsapp", "telegram", "github", "teams"]
+        }).notNull(),
+        platform_channel_id: (0, import_sqlite_core.text)("platform_channel_id").notNull(),
+        platform_message_id: (0, import_sqlite_core.text)("platform_message_id").notNull(),
+        platform_thread_id: (0, import_sqlite_core.text)("platform_thread_id").notNull(),
+        platform_permalink: (0, import_sqlite_core.text)("platform_permalink"),
+        target_branch_id: (0, import_sqlite_core.text)("target_branch_id", { length: 36 }).notNull().references(() => branches2.branch_id),
+        emitted_by_user_id: (0, import_sqlite_core.text)("emitted_by_user_id", { length: 36 }).notNull().references(() => users2.user_id),
+        emitted_by_session_id: (0, import_sqlite_core.text)("emitted_by_session_id", { length: 36 }).references(
+          () => sessions2.session_id,
+          {
+            onDelete: "set null"
+          }
+        ),
+        emitted_by_task_id: (0, import_sqlite_core.text)("emitted_by_task_id", { length: 36 }).references(() => tasks2.task_id, {
+          onDelete: "set null"
+        }),
+        emitted_by_schedule_id: (0, import_sqlite_core.text)("emitted_by_schedule_id", { length: 36 }).references(
+          () => schedules2.schedule_id,
+          {
+            onDelete: "set null"
+          }
+        ),
+        message_text: (0, import_sqlite_core.text)("message_text").notNull(),
+        message_preview: (0, import_sqlite_core.text)("message_preview").notNull(),
+        metadata: t2.json("metadata"),
+        consumed_by_session_id: (0, import_sqlite_core.text)("consumed_by_session_id", { length: 36 }).references(
+          () => sessions2.session_id,
+          {
+            onDelete: "set null"
+          }
+        ),
+        consumed_at: t2.timestamp("consumed_at")
+      },
+      (table) => ({
+        uniqueChannelThread: (0, import_sqlite_core.uniqueIndex)("uniq_gateway_outbound_channel_thread").on(
+          table.gateway_channel_id,
+          table.platform_thread_id
+        ),
+        emittedSessionIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_emitted_session").on(
+          table.emitted_by_session_id
+        ),
+        emittedScheduleIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_emitted_schedule").on(
+          table.emitted_by_schedule_id
+        ),
+        targetBranchCreatedIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_branch_created").on(
+          table.target_branch_id,
+          table.created_at
+        ),
+        consumedIdx: (0, import_sqlite_core.index)("idx_gateway_outbound_consumed").on(table.consumed_at)
+      })
+    );
     sessionEnvSelections2 = (0, import_sqlite_core.sqliteTable)(
       "session_env_selections",
       {
@@ -3296,6 +3619,71 @@ var init_executor_heartbeat = __esm({
   }
 });
 
+// src/config/multitenancy.ts
+function detectPostgresUrl(url) {
+  if (!url) return false;
+  const lower = url.toLowerCase();
+  return lower.startsWith("postgresql://") || lower.startsWith("postgres://") || lower.startsWith("pg://");
+}
+function resolveMultiTenancyDatabaseDialect(config = {}) {
+  if (process.env.AGOR_DB_DIALECT === "postgresql" || process.env.AGOR_DB_DIALECT === "sqlite") {
+    return process.env.AGOR_DB_DIALECT;
+  }
+  if (detectPostgresUrl(process.env.DATABASE_URL)) return "postgresql";
+  if (config.database?.dialect === "postgresql" || config.database?.dialect === "sqlite") {
+    return config.database.dialect;
+  }
+  if (detectPostgresUrl(config.database?.postgresql?.url) || config.database?.postgresql?.host) {
+    return "postgresql";
+  }
+  return "sqlite";
+}
+function resolveMultiTenancyConfig(config) {
+  const raw = config.multi_tenancy ?? {};
+  const mode = raw.mode ?? "static";
+  return {
+    mode,
+    static_tenant_id: raw.static_tenant_id?.trim() || DEFAULT_STATIC_TENANT_ID,
+    ...raw.auth_claim ? { auth_claim: raw.auth_claim } : {},
+    ...raw.trusted_header ? { trusted_header: raw.trusted_header } : {}
+  };
+}
+function assertValidMultiTenancyConfig(config) {
+  const resolved = resolveMultiTenancyConfig(config);
+  if (resolved.mode !== "static" && resolved.mode !== "required_from_auth") {
+    throw new Error("Config error: multi_tenancy.mode must be one of: static, required_from_auth");
+  }
+  if (!resolved.static_tenant_id) {
+    throw new Error("Config error: multi_tenancy.static_tenant_id must not be empty");
+  }
+  if (resolved.auth_claim && RESERVED_AUTH_CLAIMS.has(resolved.auth_claim)) {
+    throw new Error(
+      `Config error: multi_tenancy.auth_claim cannot be reserved JWT claim '${resolved.auth_claim}'`
+    );
+  }
+  if (resolved.mode === "required_from_auth") {
+    if (resolveMultiTenancyDatabaseDialect(config) !== "postgresql") {
+      throw new Error(
+        "Config error: multi_tenancy.required_from_auth requires database.dialect: postgresql"
+      );
+    }
+    if (!resolved.auth_claim && !resolved.trusted_header) {
+      throw new Error(
+        "Config error: multi_tenancy.required_from_auth requires multi_tenancy.auth_claim or multi_tenancy.trusted_header"
+      );
+    }
+  }
+}
+var DEFAULT_STATIC_TENANT_ID, RESERVED_AUTH_CLAIMS;
+var init_multitenancy = __esm({
+  "src/config/multitenancy.ts"() {
+    "use strict";
+    init_cjs_shims();
+    DEFAULT_STATIC_TENANT_ID = "default";
+    RESERVED_AUTH_CLAIMS = /* @__PURE__ */ new Set(["aud", "exp", "iat", "iss", "jti", "nbf", "sub", "type"]);
+  }
+});
+
 // src/config/types.ts
 var init_types2 = __esm({
   "src/config/types.ts"() {
@@ -3333,7 +3721,10 @@ function writeCachedConfig(configPath, config, key) {
   cachedEntry = { path: configPath, config: structuredClone(config), key };
 }
 function parseAndValidateConfig(content) {
-  const parsed = import_js_yaml.default.load(content);
+  if (content.trim() === "") {
+    return {};
+  }
+  const parsed = yaml.load(content);
   const finalConfig = parsed || {};
   validateConfig(finalConfig);
   return finalConfig;
@@ -3362,6 +3753,7 @@ To update: agor config set execution.unix_user_mode insulated`
       `Config error: execution.managed_envs_execution_mode must be one of: hybrid, webhook-only`
     );
   }
+  assertValidMultiTenancyConfig(config);
   validateOptionalHttpUrl(
     config.external_launch,
     "login_redirect_url",
@@ -3422,7 +3814,12 @@ function getDefaultConfig() {
       // Default: sync passwords to Unix
       executor_heartbeat: resolveExecutorHeartbeatConfig()
     },
-    analytics: getDefaultAnalyticsConfig()
+    analytics: getDefaultAnalyticsConfig(),
+    telemetry: {},
+    multi_tenancy: {
+      mode: "static",
+      static_tenant_id: "default"
+    }
   };
 }
 function loadConfigSync() {
@@ -3466,7 +3863,7 @@ function loadConfigSync() {
   }
   return finalConfig;
 }
-var import_node_fs, import_promises, import_node_os, import_node_path, import_js_yaml, NO_FILE, NO_FILE_KEY, cachedEntry;
+var import_node_fs, import_promises, import_node_os, import_node_path, yaml, NO_FILE, NO_FILE_KEY, cachedEntry;
 var init_config_manager = __esm({
   "src/config/config-manager.ts"() {
     "use strict";
@@ -3475,10 +3872,11 @@ var init_config_manager = __esm({
     import_promises = __toESM(require("fs/promises"), 1);
     import_node_os = __toESM(require("os"), 1);
     import_node_path = __toESM(require("path"), 1);
-    import_js_yaml = __toESM(require("js-yaml"), 1);
+    yaml = __toESM(require("js-yaml"), 1);
     init_analytics_defaults();
     init_constants();
     init_executor_heartbeat();
+    init_multitenancy();
     init_types2();
     NO_FILE = -1;
     NO_FILE_KEY = { mtimeMs: NO_FILE, size: 0 };
@@ -3532,7 +3930,7 @@ var init_schema_factory = __esm({
 });
 
 // src/db/schema.ts
-var dialect, schema, sessions3, tasks3, messages3, boards3, repos3, branches3, branchOwners3, boardOwners3, groups3, groupMemberships3, branchGroupGrants3, boardGroupGrants3, schedules3, users3, appVariables3, mcpServers3, cardTypes3, cards3, artifacts3, artifactTrustGrants3, boardObjects3, sessionMcpServers3, sessionRelationships3, sessionEnvSelections3, userMcpOauthTokens3, boardComments3, gatewayChannels3, threadSessionMap3, userApiKeys3, serializedSessions3, kbNamespaces3, kbNamespaceAcl3, kbDocuments3, kbDocumentVersions3, kbDocumentUnits3, kbEmbeddingSpaces3, kbGraphNodes3, kbGraphEdges3;
+var dialect, schema, sessions3, tasks3, messages3, boards3, repos3, branches3, branchOwners3, boardOwners3, groups3, groupMemberships3, branchGroupGrants3, boardGroupGrants3, schedules3, users3, appVariables3, mcpServers3, cardTypes3, cards3, artifacts3, artifactTrustGrants3, boardObjects3, sessionMcpServers3, sessionRelationships3, sessionEnvSelections3, userMcpOauthTokens3, boardComments3, gatewayChannels3, threadSessionMap3, gatewayOutboundMessages3, userApiKeys3, serializedSessions3, kbNamespaces3, kbNamespaceAcl3, kbDocuments3, kbDocumentVersions3, kbDocumentUnits3, kbEmbeddingSpaces3, kbGraphNodes3, kbGraphEdges3;
 var init_schema = __esm({
   "src/db/schema.ts"() {
     "use strict";
@@ -3570,6 +3968,7 @@ var init_schema = __esm({
     boardComments3 = schema.boardComments;
     gatewayChannels3 = schema.gatewayChannels;
     threadSessionMap3 = schema.threadSessionMap;
+    gatewayOutboundMessages3 = schema.gatewayOutboundMessages;
     userApiKeys3 = schema.userApiKeys;
     serializedSessions3 = schema.serializedSessions;
     kbNamespaces3 = schema.kbNamespaces;
@@ -3620,6 +4019,7 @@ init_schema();
 init_cjs_shims();
 init_ids();
 init_id();
+init_tenant_context();
 var RepositoryError = class extends Error {
   constructor(message, cause) {
     super(message);
@@ -3671,7 +4071,7 @@ init_schema();
 
 // src/db/repositories/artifacts.ts
 init_cjs_shims();
-var import_drizzle_orm6 = require("drizzle-orm");
+var import_drizzle_orm7 = require("drizzle-orm");
 init_config_manager();
 init_ids();
 
@@ -3683,9 +4083,19 @@ init_id();
 init_database_wrapper();
 init_schema();
 
+// src/db/repositories/branch-access.ts
+init_cjs_shims();
+init_types();
+var import_drizzle_orm6 = require("drizzle-orm");
+init_database_wrapper();
+init_schema();
+var VISIBLE_BRANCH_PERMISSION_LEVELS = BRANCH_PERMISSION_LEVELS.filter(
+  (level) => level !== "none"
+);
+
 // src/db/repositories/board-comments.ts
 init_cjs_shims();
-var import_drizzle_orm7 = require("drizzle-orm");
+var import_drizzle_orm8 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
@@ -3702,16 +4112,6 @@ init_cjs_shims();
 init_database_wrapper();
 init_schema();
 
-// src/db/repositories/branch-access.ts
-init_cjs_shims();
-init_types();
-var import_drizzle_orm8 = require("drizzle-orm");
-init_database_wrapper();
-init_schema();
-var VISIBLE_BRANCH_PERMISSION_LEVELS = BRANCH_PERMISSION_LEVELS.filter(
-  (level) => level !== "none"
-);
-
 // src/db/repositories/boards.ts
 init_cjs_shims();
 init_types();
@@ -3723,6 +4123,30 @@ init_ids();
 // src/lib/slugs.ts
 init_cjs_shims();
 
+// src/utils/emoji-shortcodes.ts
+init_cjs_shims();
+var import_node_module = require("module");
+var requireJson = (0, import_node_module.createRequire)(importMetaUrl);
+var emojiData = requireJson("emojibase-data/en/compact.json");
+var shortcodes = requireJson(
+  "emojibase-data/en/shortcodes/emojibase.json"
+);
+var emojiByHexcode = /* @__PURE__ */ new Map();
+for (const emoji of emojiData) {
+  if (emoji.unicode) {
+    emojiByHexcode.set(emoji.hexcode, emoji.unicode);
+  }
+}
+var emojiByShortcode = /* @__PURE__ */ new Map();
+for (const [hexcode, codes] of Object.entries(shortcodes)) {
+  const emoji = emojiByHexcode.get(hexcode);
+  if (!emoji) continue;
+  const codeList = Array.isArray(codes) ? codes : [codes];
+  for (const code of codeList) {
+    emojiByShortcode.set(code.toLowerCase(), emoji);
+  }
+}
+
 // src/db/repositories/boards.ts
 init_database_wrapper();
 init_schema();
@@ -3773,11 +4197,19 @@ init_ids();
 init_database_wrapper();
 init_schema();
 
+// src/db/repositories/gateway-outbound-messages.ts
+init_cjs_shims();
+init_types();
+var import_drizzle_orm16 = require("drizzle-orm");
+init_ids();
+init_database_wrapper();
+init_schema();
+
 // src/db/repositories/knowledge.ts
 init_cjs_shims();
 var import_node_crypto3 = require("crypto");
 init_types();
-var import_drizzle_orm16 = require("drizzle-orm");
+var import_drizzle_orm17 = require("drizzle-orm");
 init_config_manager();
 init_ids();
 init_database_wrapper();
@@ -3785,12 +4217,49 @@ init_schema();
 
 // src/db/repositories/mcp-servers.ts
 init_cjs_shims();
-var import_drizzle_orm17 = require("drizzle-orm");
+var import_drizzle_orm20 = require("drizzle-orm");
 init_ids();
 
 // src/tools/mcp/auth-secrets.ts
 init_cjs_shims();
 
+// src/mcp/template-resolver.ts
+init_cjs_shims();
+
+// src/config/env-resolver.ts
+init_cjs_shims();
+var import_drizzle_orm19 = require("drizzle-orm");
+init_database_wrapper();
+
+// src/db/repositories/session-env-selections.ts
+init_cjs_shims();
+var import_drizzle_orm18 = require("drizzle-orm");
+init_database_wrapper();
+init_schema();
+
+// src/config/env-resolver.ts
+init_schema();
+
+// src/config/env-blocklist.ts
+init_cjs_shims();
+var BLOCKED_ENV_PATTERNS = Object.freeze([
+  /^LD_/i,
+  /^DYLD_/i,
+  /^PYTHON(?!_AGOR_)/i
+]);
+
+// src/config/env-vars.ts
+init_cjs_shims();
+var V05_SCOPES = ["global", "session"];
+var V05_SCOPE_SET = new Set(V05_SCOPES);
+
+// src/templates/handlebars-helpers.ts
+init_cjs_shims();
+var import_handlebars = __toESM(require("handlebars"), 1);
+
+// src/mcp/template-patterns.ts
+init_cjs_shims();
+
 // src/tools/mcp/http-headers.ts
 init_cjs_shims();
 var MCP_HEADER_REDACTED_SENTINEL = "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
@@ -3941,7 +4410,7 @@ var MCPServerRepository = class {
    */
   async resolveId(id) {
     return resolveByShortIdPrefix(id, "MCPServer", async (pattern) => {
-      const rows = await select(this.db).from(mcpServers3).where((0, import_drizzle_orm17.like)(mcpServers3.mcp_server_id, pattern)).limit(RESOLVE_SHORT_ID_FETCH_LIMIT).all();
+      const rows = await select(this.db).from(mcpServers3).where((0, import_drizzle_orm20.like)(mcpServers3.mcp_server_id, pattern)).limit(RESOLVE_SHORT_ID_FETCH_LIMIT).all();
       return rows.map((r) => r.mcp_server_id);
     });
   }
@@ -3952,7 +4421,7 @@ var MCPServerRepository = class {
     try {
       const insertData = this.mcpServerToInsert(data);
       await insert(this.db, mcpServers3).values(insertData).run();
-      const row = await select(this.db).from(mcpServers3).where((0, import_drizzle_orm17.eq)(mcpServers3.mcp_server_id, insertData.mcp_server_id)).one();
+      const row = await select(this.db).from(mcpServers3).where((0, import_drizzle_orm20.eq)(mcpServers3.mcp_server_id, insertData.mcp_server_id)).one();
       if (!row) {
         throw new RepositoryError("Failed to retrieve created MCP server");
       }
@@ -3971,7 +4440,7 @@ var MCPServerRepository = class {
   async findById(id) {
     try {
       const fullId = await this.resolveId(id);
-      const row = await select(this.db).from(mcpServers3).where((0, import_drizzle_orm17.eq)(mcpServers3.mcp_server_id, fullId)).one();
+      const row = await select(this.db).from(mcpServers3).where((0, import_drizzle_orm20.eq)(mcpServers3.mcp_server_id, fullId)).one();
       return row ? this.rowToMCPServer(row) : null;
     } catch (error) {
       if (error instanceof EntityNotFoundError) return null;
@@ -3990,24 +4459,24 @@ var MCPServerRepository = class {
       let query = select(this.db).from(mcpServers3);
       const conditions = [];
       if (filters?.scope) {
-        conditions.push((0, import_drizzle_orm17.eq)(mcpServers3.scope, filters.scope));
+        conditions.push((0, import_drizzle_orm20.eq)(mcpServers3.scope, filters.scope));
       }
       if (filters?.scopeId) {
         if (filters.scope === "global") {
-          conditions.push((0, import_drizzle_orm17.eq)(mcpServers3.owner_user_id, filters.scopeId));
+          conditions.push((0, import_drizzle_orm20.eq)(mcpServers3.owner_user_id, filters.scopeId));
         }
       }
       if (filters?.transport) {
-        conditions.push((0, import_drizzle_orm17.eq)(mcpServers3.transport, filters.transport));
+        conditions.push((0, import_drizzle_orm20.eq)(mcpServers3.transport, filters.transport));
       }
       if (filters?.enabled !== void 0) {
-        conditions.push((0, import_drizzle_orm17.eq)(mcpServers3.enabled, filters.enabled));
+        conditions.push((0, import_drizzle_orm20.eq)(mcpServers3.enabled, filters.enabled));
       }
       if (filters?.source) {
-        conditions.push((0, import_drizzle_orm17.eq)(mcpServers3.source, filters.source));
+        conditions.push((0, import_drizzle_orm20.eq)(mcpServers3.source, filters.source));
       }
       if (conditions.length > 0) {
-        query = query.where((0, import_drizzle_orm17.and)(...conditions));
+        query = query.where((0, import_drizzle_orm20.and)(...conditions));
       }
       const rows = await query.all();
       return rows.map((row) => this.rowToMCPServer(row));
@@ -4054,7 +4523,7 @@ var MCPServerRepository = class {
         transport: insertData.transport,
         updated_at: /* @__PURE__ */ new Date(),
         data: insertData.data
-      }).where((0, import_drizzle_orm17.eq)(mcpServers3.mcp_server_id, fullId)).run();
+      }).where((0, import_drizzle_orm20.eq)(mcpServers3.mcp_server_id, fullId)).run();
       const updated = await this.findById(fullId);
       if (!updated) {
         throw new RepositoryError("Failed to retrieve updated MCP server");
@@ -4075,7 +4544,7 @@ var MCPServerRepository = class {
   async delete(id) {
     try {
       const fullId = await this.resolveId(id);
-      const result = await deleteFrom(this.db, mcpServers3).where((0, import_drizzle_orm17.eq)(mcpServers3.mcp_server_id, fullId)).run();
+      const result = await deleteFrom(this.db, mcpServers3).where((0, import_drizzle_orm20.eq)(mcpServers3.mcp_server_id, fullId)).run();
       if (result.rowsAffected === 0) {
         throw new EntityNotFoundError("MCPServer", id);
       }
@@ -4105,23 +4574,20 @@ var MCPServerRepository = class {
 
 // src/db/repositories/messages.ts
 init_cjs_shims();
-var import_drizzle_orm18 = require("drizzle-orm");
+var import_drizzle_orm21 = require("drizzle-orm");
 init_database_wrapper();
 init_schema();
 
 // src/db/repositories/repos.ts
 init_cjs_shims();
-var import_drizzle_orm19 = require("drizzle-orm");
+var import_drizzle_orm22 = require("drizzle-orm");
 
 // src/config/variant-resolver.ts
 init_cjs_shims();
 
 // src/yaml/index.ts
 init_cjs_shims();
-var import_js_yaml2 = __toESM(require("js-yaml"), 1);
-var load2 = import_js_yaml2.default.load;
-var dump2 = import_js_yaml2.default.dump;
-var YAMLException = import_js_yaml2.default.YAMLException;
+var yaml3 = __toESM(require("js-yaml"), 1);
 
 // src/db/repositories/repos.ts
 init_ids();
@@ -4130,34 +4596,28 @@ init_schema();
 
 // src/db/repositories/schedules.ts
 init_cjs_shims();
-var import_drizzle_orm20 = require("drizzle-orm");
+var import_drizzle_orm23 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
 
 // src/db/repositories/serialized-sessions.ts
 init_cjs_shims();
-var import_drizzle_orm21 = require("drizzle-orm");
+var import_drizzle_orm24 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
 
-// src/db/repositories/session-env-selections.ts
-init_cjs_shims();
-var import_drizzle_orm22 = require("drizzle-orm");
-init_database_wrapper();
-init_schema();
-
 // src/db/repositories/session-mcp-servers.ts
 init_cjs_shims();
-var import_drizzle_orm24 = require("drizzle-orm");
+var import_drizzle_orm26 = require("drizzle-orm");
 init_database_wrapper();
 init_schema();
 
 // src/db/repositories/sessions.ts
 init_cjs_shims();
 init_types();
-var import_drizzle_orm23 = require("drizzle-orm");
+var import_drizzle_orm25 = require("drizzle-orm");
 init_config_manager();
 init_ids();
 init_database_wrapper();
@@ -4165,7 +4625,7 @@ init_schema();
 
 // src/db/repositories/session-relationships.ts
 init_cjs_shims();
-var import_drizzle_orm25 = require("drizzle-orm");
+var import_drizzle_orm27 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
@@ -4173,7 +4633,7 @@ init_schema();
 // src/db/repositories/tasks.ts
 init_cjs_shims();
 init_types();
-var import_drizzle_orm26 = require("drizzle-orm");
+var import_drizzle_orm28 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
@@ -4181,7 +4641,7 @@ init_schema();
 // src/db/repositories/thread-session-map.ts
 init_cjs_shims();
 init_types();
-var import_drizzle_orm27 = require("drizzle-orm");
+var import_drizzle_orm29 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
@@ -4190,14 +4650,15 @@ init_schema();
 init_cjs_shims();
 var import_node_crypto4 = require("crypto");
 var import_bcryptjs = __toESM(require("bcryptjs"), 1);
-var import_drizzle_orm28 = require("drizzle-orm");
+var import_drizzle_orm30 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
+init_tenant_context();
 
 // src/db/repositories/user-mcp-oauth-tokens.ts
 init_cjs_shims();
-var import_drizzle_orm29 = require("drizzle-orm");
+var import_drizzle_orm31 = require("drizzle-orm");
 init_database_wrapper();
 init_schema();
 function rowToToken(row) {
@@ -4214,9 +4675,9 @@ function rowToToken(row) {
   };
 }
 function matchKey(userId, serverId) {
-  return (0, import_drizzle_orm29.and)(
-    userId === null ? (0, import_drizzle_orm29.isNull)(userMcpOauthTokens3.user_id) : (0, import_drizzle_orm29.eq)(userMcpOauthTokens3.user_id, userId),
-    (0, import_drizzle_orm29.eq)(userMcpOauthTokens3.mcp_server_id, serverId)
+  return (0, import_drizzle_orm31.and)(
+    userId === null ? (0, import_drizzle_orm31.isNull)(userMcpOauthTokens3.user_id) : (0, import_drizzle_orm31.eq)(userMcpOauthTokens3.user_id, userId),
+    (0, import_drizzle_orm31.eq)(userMcpOauthTokens3.mcp_server_id, serverId)
   );
 }
 var UserMCPOAuthTokenRepository = class {
@@ -4333,7 +4794,7 @@ var UserMCPOAuthTokenRepository = class {
   }
   async deleteAllForUser(userId) {
     try {
-      const result = await deleteFrom(this.db, userMcpOauthTokens3).where((0, import_drizzle_orm29.eq)(userMcpOauthTokens3.user_id, userId)).run();
+      const result = await deleteFrom(this.db, userMcpOauthTokens3).where((0, import_drizzle_orm31.eq)(userMcpOauthTokens3.user_id, userId)).run();
       return result.rowsAffected;
     } catch (error) {
       throw new RepositoryError(
@@ -4344,7 +4805,7 @@ var UserMCPOAuthTokenRepository = class {
   }
   async deleteAllForServer(serverId) {
     try {
-      const result = await deleteFrom(this.db, userMcpOauthTokens3).where((0, import_drizzle_orm29.eq)(userMcpOauthTokens3.mcp_server_id, serverId)).run();
+      const result = await deleteFrom(this.db, userMcpOauthTokens3).where((0, import_drizzle_orm31.eq)(userMcpOauthTokens3.mcp_server_id, serverId)).run();
       return result.rowsAffected;
     } catch (error) {
       throw new RepositoryError(
@@ -4355,7 +4816,7 @@ var UserMCPOAuthTokenRepository = class {
   }
   async listForUser(userId) {
     try {
-      const rows = await select(this.db).from(userMcpOauthTokens3).where((0, import_drizzle_orm29.eq)(userMcpOauthTokens3.user_id, userId)).all();
+      const rows = await select(this.db).from(userMcpOauthTokens3).where((0, import_drizzle_orm31.eq)(userMcpOauthTokens3.user_id, userId)).all();
       return rows.map(rowToToken);
     } catch (error) {
       throw new RepositoryError(
@@ -4373,14 +4834,7 @@ var UserMCPOAuthTokenRepository = class {
 // src/db/repositories/users.ts
 init_cjs_shims();
 init_types();
-var import_drizzle_orm30 = require("drizzle-orm");
-
-// src/config/env-vars.ts
-init_cjs_shims();
-var V05_SCOPES = ["global", "session"];
-var V05_SCOPE_SET = new Set(V05_SCOPES);
-
-// src/db/repositories/users.ts
+var import_drizzle_orm32 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();