blackriver-gateway 3.8.46

package/src/lib/db/migrations/001_initial_schema.sql

@@ -0,0 +1,226 @@
+-- 001_initial_schema.sql
+-- Initial schema for OmniRoute SQLite database.
+-- This migration is automatically marked as applied for existing databases
+-- since the schema was previously applied via CREATE TABLE IF NOT EXISTS.
+
+CREATE TABLE IF NOT EXISTS provider_connections (
+  id TEXT PRIMARY KEY,
+  provider TEXT NOT NULL,
+  auth_type TEXT,
+  name TEXT,
+  email TEXT,
+  priority INTEGER DEFAULT 0,
+  is_active INTEGER DEFAULT 1,
+  access_token TEXT,
+  refresh_token TEXT,
+  expires_at TEXT,
+  token_expires_at TEXT,
+  scope TEXT,
+  project_id TEXT,
+  test_status TEXT,
+  error_code TEXT,
+  last_error TEXT,
+  last_error_at TEXT,
+  last_error_type TEXT,
+  last_error_source TEXT,
+  backoff_level INTEGER DEFAULT 0,
+  rate_limited_until TEXT,
+  health_check_interval INTEGER,
+  last_health_check_at TEXT,
+  last_tested TEXT,
+  api_key TEXT,
+  id_token TEXT,
+  provider_specific_data TEXT,
+  expires_in INTEGER,
+  display_name TEXT,
+  global_priority INTEGER,
+  default_model TEXT,
+  token_type TEXT,
+  consecutive_use_count INTEGER DEFAULT 0,
+  rate_limit_protection INTEGER DEFAULT 0,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_pc_provider ON provider_connections(provider);
+CREATE INDEX IF NOT EXISTS idx_pc_active ON provider_connections(is_active);
+CREATE INDEX IF NOT EXISTS idx_pc_priority ON provider_connections(provider, priority);
+
+CREATE TABLE IF NOT EXISTS provider_nodes (
+  id TEXT PRIMARY KEY,
+  type TEXT NOT NULL,
+  name TEXT NOT NULL,
+  prefix TEXT,
+  api_type TEXT,
+  base_url TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS key_value (
+  namespace TEXT NOT NULL,
+  key TEXT NOT NULL,
+  value TEXT NOT NULL,
+  PRIMARY KEY (namespace, key)
+);
+
+CREATE TABLE IF NOT EXISTS combos (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL UNIQUE,
+  data TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS api_keys (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  key TEXT NOT NULL UNIQUE,
+  machine_id TEXT,
+  created_at TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_ak_key ON api_keys(key);
+
+CREATE TABLE IF NOT EXISTS db_meta (
+  key TEXT PRIMARY KEY,
+  value TEXT
+);
+
+CREATE TABLE IF NOT EXISTS usage_history (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  provider TEXT,
+  model TEXT,
+  connection_id TEXT,
+  api_key_id TEXT,
+  api_key_name TEXT,
+  tokens_input INTEGER DEFAULT 0,
+  tokens_output INTEGER DEFAULT 0,
+  tokens_cache_read INTEGER DEFAULT 0,
+  tokens_cache_creation INTEGER DEFAULT 0,
+  tokens_reasoning INTEGER DEFAULT 0,
+  service_tier TEXT DEFAULT 'standard',
+  status TEXT,
+  success INTEGER DEFAULT 1,
+  latency_ms INTEGER DEFAULT 0,
+  ttft_ms INTEGER DEFAULT 0,
+  error_code TEXT,
+  timestamp TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_uh_timestamp ON usage_history(timestamp);
+CREATE INDEX IF NOT EXISTS idx_uh_provider ON usage_history(provider);
+CREATE INDEX IF NOT EXISTS idx_uh_model ON usage_history(model);
+CREATE INDEX IF NOT EXISTS idx_uh_service_tier ON usage_history(service_tier);
+
+CREATE TABLE IF NOT EXISTS call_logs (
+  id TEXT PRIMARY KEY,
+  timestamp TEXT NOT NULL,
+  method TEXT,
+  path TEXT,
+  status INTEGER,
+  model TEXT,
+  requested_model TEXT,
+  provider TEXT,
+  account TEXT,
+  connection_id TEXT,
+  duration INTEGER DEFAULT 0,
+  tokens_in INTEGER DEFAULT 0,
+  tokens_out INTEGER DEFAULT 0,
+  tokens_cache_read INTEGER DEFAULT NULL,
+  tokens_cache_creation INTEGER DEFAULT NULL,
+  tokens_reasoning INTEGER DEFAULT NULL,
+  cache_source TEXT DEFAULT 'upstream',
+  request_type TEXT,
+  source_format TEXT,
+  target_format TEXT,
+  api_key_id TEXT,
+  api_key_name TEXT,
+  combo_name TEXT,
+  combo_step_id TEXT,
+  combo_execution_key TEXT,
+  error_summary TEXT,
+  detail_state TEXT DEFAULT 'none',
+  artifact_relpath TEXT,
+  artifact_size_bytes INTEGER DEFAULT NULL,
+  artifact_sha256 TEXT DEFAULT NULL,
+  has_request_body INTEGER DEFAULT 0,
+  has_response_body INTEGER DEFAULT 0,
+  has_pipeline_details INTEGER DEFAULT 0,
+  request_summary TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_cl_timestamp ON call_logs(timestamp);
+CREATE INDEX IF NOT EXISTS idx_cl_status ON call_logs(status);
+CREATE INDEX IF NOT EXISTS idx_call_logs_requested_model ON call_logs(requested_model);
+CREATE INDEX IF NOT EXISTS idx_call_logs_request_type ON call_logs(request_type);
+CREATE INDEX IF NOT EXISTS idx_cl_combo_target
+  ON call_logs(combo_name, combo_execution_key, timestamp);
+
+CREATE TABLE IF NOT EXISTS proxy_logs (
+  id TEXT PRIMARY KEY,
+  timestamp TEXT NOT NULL,
+  status TEXT,
+  proxy_type TEXT,
+  proxy_host TEXT,
+  proxy_port INTEGER,
+  level TEXT,
+  level_id TEXT,
+  provider TEXT,
+  target_url TEXT,
+  public_ip TEXT,
+  latency_ms INTEGER DEFAULT 0,
+  error TEXT,
+  connection_id TEXT,
+  combo_id TEXT,
+  account TEXT,
+  tls_fingerprint INTEGER DEFAULT 0
+);
+CREATE INDEX IF NOT EXISTS idx_pl_timestamp ON proxy_logs(timestamp);
+CREATE INDEX IF NOT EXISTS idx_pl_status ON proxy_logs(status);
+CREATE INDEX IF NOT EXISTS idx_pl_provider ON proxy_logs(provider);
+
+CREATE TABLE IF NOT EXISTS domain_fallback_chains (
+  model TEXT PRIMARY KEY,
+  chain TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS domain_budgets (
+  api_key_id TEXT PRIMARY KEY,
+  daily_limit_usd REAL NOT NULL,
+  monthly_limit_usd REAL DEFAULT 0,
+  warning_threshold REAL DEFAULT 0.8
+);
+
+CREATE TABLE IF NOT EXISTS domain_cost_history (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  api_key_id TEXT NOT NULL,
+  cost REAL NOT NULL,
+  timestamp INTEGER NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_dch_key ON domain_cost_history(api_key_id);
+CREATE INDEX IF NOT EXISTS idx_dch_ts ON domain_cost_history(timestamp);
+
+CREATE TABLE IF NOT EXISTS domain_lockout_state (
+  identifier TEXT PRIMARY KEY,
+  attempts TEXT NOT NULL,
+  locked_until INTEGER
+);
+
+CREATE TABLE IF NOT EXISTS domain_circuit_breakers (
+  name TEXT PRIMARY KEY,
+  state TEXT NOT NULL DEFAULT 'CLOSED',
+  failure_count INTEGER DEFAULT 0,
+  last_failure_time INTEGER,
+  options TEXT
+);
+
+CREATE TABLE IF NOT EXISTS semantic_cache (
+  id TEXT PRIMARY KEY,
+  signature TEXT NOT NULL UNIQUE,
+  model TEXT NOT NULL,
+  prompt_hash TEXT NOT NULL,
+  response TEXT NOT NULL,
+  tokens_saved INTEGER DEFAULT 0,
+  hit_count INTEGER DEFAULT 0,
+  created_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_sc_sig ON semantic_cache(signature);
+CREATE INDEX IF NOT EXISTS idx_sc_model ON semantic_cache(model);

package/src/lib/db/migrations/002_mcp_a2a_tables.sql

@@ -0,0 +1,95 @@
+-- 002_mcp_a2a_tables.sql
+-- Tables for MCP Server audit, A2A task lifecycle,
+-- routing decision tracking, and Auto-Combo adaptation state.
+
+-- ============ MCP Tool Audit ============
+-- Tracks every MCP tool invocation for security audit and observability.
+CREATE TABLE IF NOT EXISTS mcp_tool_audit (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    tool_name TEXT NOT NULL,
+    input_hash TEXT,
+    output_summary TEXT,
+    duration_ms INTEGER,
+    api_key_id TEXT,
+    success INTEGER DEFAULT 1,
+    error_code TEXT,
+    created_at TEXT DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_mta_tool ON mcp_tool_audit(tool_name);
+CREATE INDEX IF NOT EXISTS idx_mta_created ON mcp_tool_audit(created_at);
+CREATE INDEX IF NOT EXISTS idx_mta_apikey ON mcp_tool_audit(api_key_id);
+
+-- ============ A2A Tasks ============
+-- Stores A2A task lifecycle (submitted → working → completed/failed/cancelled).
+CREATE TABLE IF NOT EXISTS a2a_tasks (
+    id TEXT PRIMARY KEY,
+    state TEXT NOT NULL DEFAULT 'submitted',
+    skill_id TEXT,
+    input_json TEXT,
+    output_json TEXT,
+    cost_estimated REAL,
+    cost_actual REAL,
+    routing_explanation TEXT,
+    resilience_trace TEXT,
+    policy_verdict TEXT,
+    api_key_id TEXT,
+    created_at TEXT DEFAULT (datetime('now')),
+    updated_at TEXT DEFAULT (datetime('now')),
+    completed_at TEXT,
+    expires_at TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_a2a_state ON a2a_tasks(state);
+CREATE INDEX IF NOT EXISTS idx_a2a_skill ON a2a_tasks(skill_id);
+CREATE INDEX IF NOT EXISTS idx_a2a_created ON a2a_tasks(created_at);
+
+-- ============ A2A Task Events ============
+-- Event log for each A2A task (state transitions, errors, fallbacks).
+CREATE TABLE IF NOT EXISTS a2a_task_events (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    task_id TEXT NOT NULL REFERENCES a2a_tasks(id) ON DELETE CASCADE,
+    event_type TEXT NOT NULL,
+    data_json TEXT,
+    created_at TEXT DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_a2ae_task ON a2a_task_events(task_id);
+CREATE INDEX IF NOT EXISTS idx_a2ae_type ON a2a_task_events(event_type);
+
+-- ============ Routing Decisions ============
+-- Records every routing decision for explainability and learning.
+CREATE TABLE IF NOT EXISTS routing_decisions (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    request_id TEXT,
+    task_type TEXT,
+    combo_id TEXT,
+    provider_selected TEXT,
+    model_selected TEXT,
+    score REAL,
+    factors_json TEXT,
+    fallbacks_triggered INTEGER DEFAULT 0,
+    success INTEGER DEFAULT 1,
+    latency_ms INTEGER,
+    cost REAL,
+    source TEXT DEFAULT 'api',
+    created_at TEXT DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_rd_request ON routing_decisions(request_id);
+CREATE INDEX IF NOT EXISTS idx_rd_combo ON routing_decisions(combo_id);
+CREATE INDEX IF NOT EXISTS idx_rd_provider ON routing_decisions(provider_selected);
+CREATE INDEX IF NOT EXISTS idx_rd_created ON routing_decisions(created_at);
+
+-- ============ Combo Adaptation State ============
+-- Persisted learning state for Auto-Combo scoring engine.
+CREATE TABLE IF NOT EXISTS combo_adaptation_state (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    combo_id TEXT NOT NULL,
+    provider_id TEXT NOT NULL,
+    learned_score REAL DEFAULT 0.5,
+    request_count INTEGER DEFAULT 0,
+    success_count INTEGER DEFAULT 0,
+    avg_latency_ms REAL,
+    last_failure_at TEXT,
+    excluded_until TEXT,
+    updated_at TEXT DEFAULT (datetime('now')),
+    UNIQUE(combo_id, provider_id)
+);
+CREATE INDEX IF NOT EXISTS idx_cas_combo ON combo_adaptation_state(combo_id);

package/src/lib/db/migrations/003_provider_node_custom_paths.sql

@@ -0,0 +1,5 @@
+-- Add custom endpoint path columns to provider_nodes
+-- Allows compatible providers to override default chat/models paths
+-- NULL = use default path (backward compatible)
+ALTER TABLE provider_nodes ADD COLUMN chat_path TEXT;
+ALTER TABLE provider_nodes ADD COLUMN models_path TEXT;

package/src/lib/db/migrations/004_proxy_registry.sql

@@ -0,0 +1,31 @@
+CREATE TABLE IF NOT EXISTS proxy_registry (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  type TEXT NOT NULL,
+  host TEXT NOT NULL,
+  port INTEGER NOT NULL,
+  username TEXT,
+  password TEXT,
+  region TEXT,
+  notes TEXT,
+  status TEXT NOT NULL DEFAULT 'active',
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_proxy_registry_status ON proxy_registry(status);
+CREATE INDEX IF NOT EXISTS idx_proxy_registry_host ON proxy_registry(host);
+
+CREATE TABLE IF NOT EXISTS proxy_assignments (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  proxy_id TEXT NOT NULL,
+  scope TEXT NOT NULL,
+  scope_id TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+  UNIQUE(scope, scope_id),
+  FOREIGN KEY (proxy_id) REFERENCES proxy_registry(id) ON DELETE RESTRICT
+);
+
+CREATE INDEX IF NOT EXISTS idx_proxy_assignments_proxy_id ON proxy_assignments(proxy_id);
+CREATE INDEX IF NOT EXISTS idx_proxy_assignments_scope ON proxy_assignments(scope, scope_id);

package/src/lib/db/migrations/005_combo_agent_fields.sql

@@ -0,0 +1,19 @@
+-- 005_combo_agent_fields.sql
+-- Safe migration for existing users: adds optional agent fields to combos.
+-- Uses ADD COLUMN with DEFAULT NULL (SQLite compatible) — existing rows are untouched.
+-- New fields are read as NULL by old code versions (backward compatible).
+
+-- System prompt override: when set, injected as the first system message before
+-- forwarding to the provider. Overrides any system message from the client.
+ALTER TABLE combos ADD COLUMN system_message TEXT DEFAULT NULL;
+
+-- Regex-based tool filter: when set, only tool calls whose "name" matches this
+-- regex pattern are forwarded to the provider. Others are stripped silently.
+-- Example: "^(gh_|create_file|web_fetch)" — allows only GitHub and web tools.
+ALTER TABLE combos ADD COLUMN tool_filter_regex TEXT DEFAULT NULL;
+
+-- Context caching protection: when 1, the proxy tags assistant responses with
+-- <omniModel>provider/model</omniModel> and pins the model for the session.
+ALTER TABLE combos ADD COLUMN context_cache_protection INTEGER DEFAULT 0;
+
+CREATE INDEX IF NOT EXISTS idx_combos_cache_protection ON combos(context_cache_protection);

package/src/lib/db/migrations/006_detailed_request_logs.sql

@@ -0,0 +1,42 @@
+-- 006_detailed_request_logs.sql
+-- Stores full request/response bodies at each pipeline stage for debugging.
+-- Only populated when detailed_logs_enabled = 1 in settings (off by default).
+-- Ring-buffer enforced via trigger: keeps only the last 500 entries.
+-- Existing users are not impacted (table is new, feature is opt-in).
+
+CREATE TABLE IF NOT EXISTS request_detail_logs (
+  id TEXT PRIMARY KEY,
+  call_log_id TEXT,                  -- FK to call_logs.id (optional, nullable)
+  timestamp TEXT NOT NULL,
+  -- The 4 pipeline stages (all nullable — only populated when available)
+  client_request TEXT,               -- Raw body received from the client (JSON)
+  translated_request TEXT,           -- Body after format translation (JSON)
+  provider_response TEXT,            -- Raw body from the provider (JSON)
+  client_response TEXT,              -- Final body sent to the client (JSON)
+  -- Metadata
+  provider TEXT,
+  model TEXT,
+  source_format TEXT,
+  target_format TEXT,
+  duration_ms INTEGER DEFAULT 0
+);
+
+CREATE INDEX IF NOT EXISTS idx_rdl_timestamp ON request_detail_logs(timestamp);
+CREATE INDEX IF NOT EXISTS idx_rdl_call_log_id ON request_detail_logs(call_log_id);
+
+-- Ring-buffer trigger: auto-delete oldest records beyond 500
+CREATE TRIGGER IF NOT EXISTS trg_rdl_ring_buffer
+AFTER INSERT ON request_detail_logs
+BEGIN
+  DELETE FROM request_detail_logs
+  WHERE id IN (
+    SELECT id FROM request_detail_logs
+    ORDER BY timestamp ASC
+    LIMIT MAX(0, (SELECT COUNT(*) FROM request_detail_logs) - 500)
+  );
+END;
+
+-- Settings key for enabling/disabling detailed logs (default: disabled)
+-- Inserted only if not already present (safe for existing installs)
+INSERT OR IGNORE INTO key_value (namespace, key, value)
+VALUES ('settings', 'detailed_logs_enabled', '0');

package/src/lib/db/migrations/007_search_request_type.sql

@@ -0,0 +1,4 @@
+-- Add request_type column to call_logs for non-chat request tracking (search, embed, rerank).
+-- Backward-compatible: DEFAULT NULL means existing rows are unaffected.
+ALTER TABLE call_logs ADD COLUMN request_type TEXT DEFAULT NULL;
+CREATE INDEX IF NOT EXISTS idx_call_logs_request_type ON call_logs(request_type);

package/src/lib/db/migrations/008_registered_keys.sql

@@ -0,0 +1,65 @@
+-- Migration 008: Registered Keys Provisioning API (#464)
+--
+-- Adds three tables:
+--   registered_keys      — auto-provisioned API keys with quota metadata
+--   provider_key_limits  — per-provider issuance limits
+--   account_key_limits   — per-account issuance limits
+
+-- --------------------------------------------------------------------------
+-- Table: registered_keys
+-- --------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS registered_keys (
+  id            TEXT PRIMARY KEY,           -- UUID
+  key           TEXT NOT NULL UNIQUE,       -- hashed key material (sha256)
+  key_prefix    TEXT NOT NULL,              -- first 8 chars for display (e.g. "ork_abc1")
+  name          TEXT NOT NULL,
+  provider      TEXT NOT NULL DEFAULT '',   -- associated provider (optional)
+  account_id    TEXT NOT NULL DEFAULT '',   -- account/tenant identifier
+  is_active     INTEGER NOT NULL DEFAULT 1,
+  revoked_at    TEXT,                       -- ISO timestamp, null if active
+  expires_at    TEXT,                       -- ISO timestamp, null = no expiry
+  idempotency_key TEXT UNIQUE,             -- prevents duplicate issue requests
+  daily_budget  INTEGER,                   -- max requests per day (null = unlimited)
+  hourly_budget INTEGER,                   -- max requests per hour (null = unlimited)
+  daily_used    INTEGER NOT NULL DEFAULT 0,
+  hourly_used   INTEGER NOT NULL DEFAULT 0,
+  last_reset_day  TEXT NOT NULL DEFAULT '',  -- YYYY-MM-DD for daily reset tracking
+  last_reset_hour TEXT NOT NULL DEFAULT '',  -- YYYY-MM-DDTHH for hourly reset tracking
+  created_at    TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at    TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_registered_keys_provider  ON registered_keys(provider);
+CREATE INDEX IF NOT EXISTS idx_registered_keys_account   ON registered_keys(account_id);
+CREATE INDEX IF NOT EXISTS idx_registered_keys_active    ON registered_keys(is_active);
+CREATE INDEX IF NOT EXISTS idx_registered_keys_idempotency ON registered_keys(idempotency_key);
+
+-- --------------------------------------------------------------------------
+-- Table: provider_key_limits  (per-provider issuance limits)
+-- --------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS provider_key_limits (
+  provider         TEXT PRIMARY KEY,
+  max_active_keys  INTEGER,   -- null = unlimited
+  daily_issue_limit  INTEGER, -- max keys per day
+  hourly_issue_limit INTEGER, -- max keys per hour
+  daily_issued     INTEGER NOT NULL DEFAULT 0,
+  hourly_issued    INTEGER NOT NULL DEFAULT 0,
+  last_reset_day   TEXT NOT NULL DEFAULT '',
+  last_reset_hour  TEXT NOT NULL DEFAULT '',
+  updated_at       TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+-- --------------------------------------------------------------------------
+-- Table: account_key_limits  (per-account issuance limits)
+-- --------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS account_key_limits (
+  account_id       TEXT PRIMARY KEY,
+  max_active_keys  INTEGER,
+  daily_issue_limit  INTEGER,
+  hourly_issue_limit INTEGER,
+  daily_issued     INTEGER NOT NULL DEFAULT 0,
+  hourly_issued    INTEGER NOT NULL DEFAULT 0,
+  last_reset_day   TEXT NOT NULL DEFAULT '',
+  last_reset_hour  TEXT NOT NULL DEFAULT '',
+  updated_at       TEXT NOT NULL DEFAULT (datetime('now'))
+);

package/src/lib/db/migrations/009_requested_model.sql

@@ -0,0 +1,9 @@
+-- Migration 009: Add requested_model to call_logs for billing transparency
+-- Tracks the model the client *asked* for vs the model that was *actually routed*.
+-- Needed when a combo falls back: requested_model ≠ model in call_logs.
+-- Ref: sub2api commits 0b845c25 + 4edcfe1f (T01 sub2api gap analysis)
+ALTER TABLE call_logs ADD COLUMN requested_model TEXT DEFAULT NULL;
+
+-- Index for filtering/aggregating by requested_model in Analytics
+CREATE INDEX IF NOT EXISTS idx_call_logs_requested_model
+  ON call_logs(requested_model);

package/src/lib/db/migrations/010_model_combo_mappings.sql

@@ -0,0 +1,19 @@
+-- Migration 010: Model-to-Combo mappings
+-- Allows users to map model name patterns (globs) to specific combos.
+-- When a request comes in for a model matching a pattern, the mapped combo
+-- is used automatically instead of the global default.
+
+CREATE TABLE IF NOT EXISTS model_combo_mappings (
+  id TEXT PRIMARY KEY,
+  pattern TEXT NOT NULL,           -- glob pattern, e.g. 'claude-*-opus*'
+  combo_id TEXT NOT NULL,          -- references combos.id
+  priority INTEGER DEFAULT 0,     -- higher = checked first
+  enabled INTEGER DEFAULT 1,      -- 0 = disabled, 1 = enabled
+  description TEXT DEFAULT '',     -- optional human-readable label
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (combo_id) REFERENCES combos(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_mcm_enabled ON model_combo_mappings(enabled);
+CREATE INDEX IF NOT EXISTS idx_mcm_priority ON model_combo_mappings(priority DESC);

package/src/lib/db/migrations/011_webhooks.sql

@@ -0,0 +1,15 @@
+-- Migration 011: Webhooks for event subscriptions
+-- Part of API Endpoints dashboard (#563)
+
+CREATE TABLE IF NOT EXISTS webhooks (
+  id TEXT PRIMARY KEY,
+  url TEXT NOT NULL,
+  events TEXT NOT NULL DEFAULT '["*"]',
+  secret TEXT,
+  enabled INTEGER DEFAULT 1,
+  description TEXT DEFAULT '',
+  created_at TEXT DEFAULT (datetime('now')),
+  last_triggered_at TEXT,
+  last_status INTEGER,
+  failure_count INTEGER DEFAULT 0
+);

package/src/lib/db/migrations/012_fix_token_input_cache_tokens.sql

@@ -0,0 +1,15 @@
+-- Migration 012: Fix tokens_input to include cache tokens
+--
+-- Problem: Historical data stored tokens_input as just the base input_tokens
+-- from the API, not including cache_read and cache_creation tokens.
+--
+-- Per Claude API docs:
+-- Total input tokens = input_tokens + cache_creation_input_tokens + cache_read_input_tokens
+--
+-- This migration corrects historical records by adding cache tokens to tokens_input.
+-- Only affects records where cache tokens exist.
+
+-- Update tokens_input to include cache tokens
+UPDATE usage_history
+SET tokens_input = tokens_input + tokens_cache_read + tokens_cache_creation
+WHERE tokens_cache_read > 0 OR tokens_cache_creation > 0;

package/src/lib/db/migrations/013_quota_snapshots.sql

@@ -0,0 +1,19 @@
+-- 013_quota_snapshots.sql
+-- Quota snapshots for subscription utilization tracking.
+-- Stores periodic snapshots of quota state for historical analysis and time-series queries.
+
+CREATE TABLE IF NOT EXISTS quota_snapshots (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  provider TEXT NOT NULL,
+  connection_id TEXT NOT NULL,
+  window_key TEXT NOT NULL,
+  remaining_percentage REAL,
+  is_exhausted INTEGER DEFAULT 0,
+  next_reset_at TEXT,
+  window_duration_ms INTEGER,
+  raw_data TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_quota_snapshots_provider_time ON quota_snapshots(provider, created_at);
+CREATE INDEX IF NOT EXISTS idx_quota_snapshots_connection_time ON quota_snapshots(connection_id, created_at);
+CREATE INDEX IF NOT EXISTS idx_quota_snapshots_created_at ON quota_snapshots(created_at);

package/src/lib/db/migrations/014_unified_log_artifacts.sql

@@ -0,0 +1,15 @@
+-- 013_unified_log_artifacts.sql
+-- Switch request logging to unified single-file artifacts and prefixed settings.
+
+INSERT OR REPLACE INTO key_value (namespace, key, value)
+VALUES (
+  'settings',
+  'call_log_pipeline_enabled',
+  COALESCE(
+    (SELECT value FROM key_value WHERE namespace = 'settings' AND key = 'detailed_logs_enabled'),
+    'false'
+  )
+);
+
+DELETE FROM key_value
+WHERE namespace = 'settings' AND key IN ('detailed_logs_enabled', 'maxCallLogs', 'MAX_CALL_LOGS');

package/src/lib/db/migrations/015_create_memories.sql

@@ -0,0 +1,22 @@
+-- 014_create_memories.sql
+-- Memories table for persistent context storage.
+-- Stores structured conversation memories with support for different memory types.
+
+CREATE TABLE IF NOT EXISTS memories (
+  id TEXT PRIMARY KEY,
+  api_key_id TEXT NOT NULL,
+  session_id TEXT,
+  type TEXT NOT NULL CHECK(type IN ('factual', 'episodic', 'procedural', 'semantic')),
+  key TEXT,
+  content TEXT NOT NULL,
+  metadata TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+  expires_at TEXT
+);
+
+-- Indexes for performance optimization
+CREATE INDEX IF NOT EXISTS idx_memories_api_key ON memories(api_key_id);
+CREATE INDEX IF NOT EXISTS idx_memories_session ON memories(session_id);
+CREATE INDEX IF NOT EXISTS idx_memories_type ON memories(type);
+CREATE INDEX IF NOT EXISTS idx_memories_expires ON memories(expires_at);

package/src/lib/db/migrations/016_create_skills.sql

@@ -0,0 +1,37 @@
+-- 015_create_skills.sql
+-- Skills table for tool/function capability injection.
+-- Stores skill definitions with schemas and execution tracking.
+
+CREATE TABLE IF NOT EXISTS skills (
+  id TEXT PRIMARY KEY,
+  api_key_id TEXT NOT NULL,
+  name TEXT NOT NULL,
+  version TEXT NOT NULL DEFAULT '1.0.0',
+  description TEXT,
+  schema TEXT NOT NULL,
+  handler TEXT NOT NULL,
+  enabled INTEGER NOT NULL DEFAULT 1,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS skill_executions (
+  id TEXT PRIMARY KEY,
+  skill_id TEXT NOT NULL,
+  api_key_id TEXT NOT NULL,
+  session_id TEXT,
+  input TEXT NOT NULL,
+  output TEXT,
+  status TEXT NOT NULL CHECK(status IN ('pending', 'running', 'success', 'error', 'timeout')),
+  error_message TEXT,
+  duration_ms INTEGER,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  FOREIGN KEY (skill_id) REFERENCES skills(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_skills_api_key ON skills(api_key_id);
+CREATE INDEX IF NOT EXISTS idx_skills_name ON skills(name);
+CREATE INDEX IF NOT EXISTS idx_skill_executions_skill ON skill_executions(skill_id);
+CREATE INDEX IF NOT EXISTS idx_skill_executions_api_key ON skill_executions(api_key_id);
+CREATE INDEX IF NOT EXISTS idx_skill_executions_status ON skill_executions(status);
+CREATE INDEX IF NOT EXISTS idx_skill_executions_created ON skill_executions(created_at);