create-m5kdev 0.41.1 → 0.43.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-m5kdev",
-  "version": "0.41.1",
+  "version": "0.43.0",
   "license": "GPL-3.0-only",
   "engines": {
     "node": ">=24"

package/templates/minimal-app/CLAUDE.md.tpl

@@ -8,7 +8,7 @@ Guidance for Claude Code when working in this repository.
 
 This is a pnpm + Turborepo monorepo built on the **m5kdev framework**:
 
-- `@m5kdev/backend` — backend kernel: Express, Better Auth, Drizzle (LibSQL), and tRPC. Apps compose it via `createBackendApp(config, [modules])`.
+- `@m5kdev/backend` — backend kernel: Express, Better Auth, Drizzle (PostgreSQL), and tRPC. Apps compose it via `createBackendApp(config, [modules])`.
 - `@m5kdev/commons` — shared runtime utilities and contracts.
 - `@m5kdev/config` — configuration loading and validation.
 // m5k:server:start
@@ -68,7 +68,7 @@ First-time setup: `pnpm install`, then `drizzle:migrate` and `drizzle:seed`, the
 End-to-end tests: `pnpm --filter ./apps/e2e test:e2e` (Playwright).
 // m5k:test-harness:end
 
-The local database is a LibSQL file; local auth emails are written to `apps/server/.emails`. Demo login: `admin@{{APP_SLUG}}.local` / `password1234`.
+Runtime uses PostgreSQL through PgBouncer (`DATABASE_URL`); migrations and initialization require `DATABASE_DIRECT_URL`. Keep app, Mastra, and vector schemas separately owned. Start the local PostgreSQL/PgBouncer Compose stack and provision pgvector before applying reviewed migrations. Agents must not generate or hand-author migration SQL or metadata. Local auth emails are written to `apps/server/.emails`. Demo login: `admin@{{APP_SLUG}}.local` / `password1234`.
 // m5k:server:end
 
 // m5k:server:start

package/templates/minimal-app/README.md.tpl

@@ -32,8 +32,11 @@ pnpm --filter ./apps/server drizzle:migrate
 pnpm --filter ./apps/server drizzle:seed
 ```
 
-The starter uses a local LibSQL file by default and writes local auth emails to `apps/server/.emails`.
-Database tables are registered by hand in `apps/server/src/schema.ts`; after changing any `*.db.ts`, run `drizzle:generate` and `drizzle:migrate`.
+The starter uses PostgreSQL through PgBouncer and writes local auth emails to `apps/server/.emails`. Start `docker compose -f apps/shared/compose.yaml up -d --build`, configure runtime `DATABASE_URL` and direct `DATABASE_DIRECT_URL`, and provision pgvector in `public` before migration/initialization.
+Database tables are registered in `apps/server/src/schema.ts`; `src/drizzle.schema.ts` adds schema metadata for migration generation. After changing any `*.db.ts`, the maintainer runs `drizzle:generate`, reviews the output, then runs `drizzle:migrate`.
+// m5k:ai:start
+Run `pnpm --filter ./apps/server mastra:init` after migrations and before seed or runtime startup. App migrations own `app`; Mastra owns `mastra` and the embedding adapter owns `vectors`.
+// m5k:ai:end
 
 ## Demo Credentials
 
@@ -83,7 +86,6 @@ cp apps/shared/.env.production.example apps/shared/.env.production
 # fill in URLs, BETTER_AUTH_SECRET, REDIS_URL, …
 
 fly apps create {{APP_SLUG}}-app
-fly volumes create libsql_data --app {{APP_SLUG}}-app --region iad --size 1
 pnpm app:secrets
 pnpm app:deploy
 // m5k:server:end
@@ -97,7 +99,11 @@ pnpm landing:deploy
 `m5kdev-fly-secrets`). A missing env file errors with a copy-the-example
 message.
 // m5k:server:start
-`app:deploy` does the same for the product image. Product data lives on the
-`libsql_data` volume at `/app/data` (`DATABASE_URL=file:/app/data/local.db`).
-Redis is a runtime secret, not an image layer.
+`app:deploy` does the same for the product image. Provision provider-neutral
+PostgreSQL with pgvector in `public` and a transaction-mode PgBouncer endpoint.
+Set `DATABASE_URL` to the runtime pool and `DATABASE_DIRECT_URL` to the direct
+database endpoint. App migrations own `app`; Mastra owns `mastra` and vectors
+use `vectors`. Run reviewed app migrations and, when AI is selected, `mastra:init`
+through direct connections before starting the server. Redis and database URLs
+are server secrets, not image layers. No local database volume is required.
 // m5k:server:end

package/templates/minimal-app/apps/e2e/servers.ts.tpl

@@ -1,6 +1,6 @@
 /**
  * Shared webServer definitions for the Playwright configs. Each profile runs
- * an isolated stack: own port pair, own SQLite file, own email output dir, and
+ * an isolated stack: own port pair, own PostgreSQL database, own email output dir, and
  * own Redis DB index (queue names are identical across profiles — sharing a
  * Redis DB would let one profile's workers consume the other's jobs).
  */
@@ -48,11 +48,27 @@ function serverEnv(profile: E2EProfile, expo: boolean): Record<string, string> {
   const serverPort = expo ? ports.expoServer : ports.server;
   const webPort = expo ? ports.expoWeb : ports.web;
   const suffix = expo ? `${profile}-expo` : profile;
+  const databaseConnection = (key: string): string => {
+    const value = process.env[key];
+    if (!value) throw new Error(`${key} is required for PostgreSQL E2E tests`);
+    const url = new URL(value);
+    url.pathname = `${url.pathname}_e2e_${suffix.replaceAll("-", "_")}`;
+    return url.toString();
+  };
   return {
     PORT: String(serverPort),
     VITE_SERVER_URL: `http://127.0.0.1:${serverPort}`,
     VITE_APP_URL: `http://127.0.0.1:${webPort}`,
-    DATABASE_URL: `file:./.e2e/${suffix}.db`,
+    DATABASE_URL: databaseConnection("E2E_DATABASE_URL"),
+    DATABASE_DIRECT_URL: databaseConnection("E2E_DATABASE_DIRECT_URL"),
+    DATABASE_SCHEMA: "app",
+    DATABASE_DISPOSABLE: process.env.E2E_DATABASE_DISPOSABLE ?? "false",
+    MASTRA_DATABASE_URL: "",
+    MASTRA_DATABASE_DIRECT_URL: "",
+    VECTOR_DATABASE_URL: "",
+    VECTOR_DATABASE_DIRECT_URL: "",
+    MASTRA_DATABASE_SCHEMA: "mastra",
+    VECTOR_DATABASE_SCHEMA: "vectors",
     EMAIL_OUTPUT_DIRECTORY: `.e2e/emails-${suffix}`,
     PROVISIONED_EMAIL_DOMAIN: "provisioned.auth-e2e.local",
     REDIS_URL: `redis://127.0.0.1:6379/${expo ? PORTS[profile].expoRedisDb : PORTS[profile].redisDb}`,
@@ -62,9 +78,6 @@ function serverEnv(profile: E2EProfile, expo: boolean): Record<string, string> {
     BETTER_AUTH_SECRET: "auth-e2e-local-secret-auth-e2e-local-secret",
     SYSTEM_NOTIFICATION_EMAIL: "ops@auth-e2e.local",
     NODE_ENV: "development",
-    // hermetic: shared/.env Turso credentials must not leak into drizzle-kit
-    TURSO_DATABASE_URL: "",
-    TURSO_AUTH_TOKEN: "",
     // hermetic: a real key in the invoking shell would flip email mode to
     // "send" and the stored-email assertions would find nothing
     RESEND_API_KEY: "",
@@ -84,7 +97,10 @@ export function serverWebServer(profile: E2EProfile, { expo = false } = {}) {
   return {
     command: [
       `${SERVER_FILTER} tsx db.ts reset`,
-      `${SERVER_FILTER} drizzle-kit migrate`,
+      `${SERVER_FILTER} tsx db.ts migrate`,
+      // m5k:ai:start
+      `${SERVER_FILTER} tsx mastra.ts`,
+      // m5k:ai:end
       `${SERVER_FILTER} tsx db.e2e.ts seed`,
       `${SERVER_FILTER} tsx src/index.ts`,
     ].join(" && "),

package/templates/minimal-app/apps/server/AGENTS.md.tpl

@@ -35,7 +35,7 @@ apps/server/src/modules/<module>/
 // m5k:ai:start
 - `AIModule` is registered in `app.ts` with an app-owned Mastra Agent (`assistant`). Conversation HTTP lives on `/ai`. Set `OPENROUTER_API_KEY` for live replies. Do not add a Starter service wrapper around `AIService` chat.
 // m5k:ai:end
-- Database commands live in server `db.ts` (`pnpm drizzle:reset`, `drizzle:sync`, `drizzle:seed`) and call Kernel `runDb` — they must not import `app.ts`.
+- Database commands live in server `db.ts` and call Kernel `runDb` through `DATABASE_DIRECT_URL`, without importing `app.ts`. Runtime uses `DATABASE_URL` through PgBouncer. Reset requires a disposable environment and preserves Mastra/vector data.
 
 ## Avoid Trivial Service Delegation
 

package/templates/minimal-app/apps/server/drizzle-postgresql/0000_glorious_warhawk.sql

@@ -0,0 +1,522 @@
+CREATE SCHEMA "app";
+--> statement-breakpoint
+CREATE TABLE "app"."account_claim_magic_links" (
+	"id" text PRIMARY KEY NOT NULL,
+	"claim_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"email" text NOT NULL,
+	"token" text NOT NULL,
+	"url" text NOT NULL,
+	"expires_at" timestamp with time zone,
+	"created_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."account_claims" (
+	"id" text PRIMARY KEY NOT NULL,
+	"claim_user_id" text NOT NULL,
+	"status" text NOT NULL,
+	"code" text,
+	"expires_at" timestamp with time zone,
+	"claimed_at" timestamp with time zone,
+	"claimed_email" text,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "app"."accounts" (
+	"id" text PRIMARY KEY NOT NULL,
+	"account_id" text NOT NULL,
+	"issuer" text DEFAULT 'local:credential' NOT NULL,
+	"provider_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"access_token" text,
+	"refresh_token" text,
+	"id_token" text,
+	"access_token_expires_at" timestamp with time zone,
+	"refresh_token_expires_at" timestamp with time zone,
+	"scope" text,
+	"password" text,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."ai_usage" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text,
+	"member_id" text,
+	"team_id" text,
+	"organization_id" text,
+	"feature" text NOT NULL,
+	"provider" text NOT NULL,
+	"model" text NOT NULL,
+	"input_tokens" integer,
+	"output_tokens" integer,
+	"total_tokens" integer,
+	"cost" double precision,
+	"trace_id" text,
+	"created_at" timestamp with time zone NOT NULL,
+	"metadata" jsonb
+);
+--> statement-breakpoint
+CREATE TABLE "app"."apikeys" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text,
+	"start" text,
+	"prefix" text,
+	"key" text NOT NULL,
+	"config_id" text DEFAULT 'default' NOT NULL,
+	"reference_id" text NOT NULL,
+	"user_id" text,
+	"refill_interval" integer,
+	"refill_amount" integer,
+	"last_refill_at" timestamp with time zone,
+	"enabled" boolean NOT NULL,
+	"rate_limit_enabled" boolean NOT NULL,
+	"rate_limit_time_window" integer,
+	"rate_limit_max" integer,
+	"request_count" integer NOT NULL,
+	"remaining" integer,
+	"last_request" timestamp with time zone,
+	"expires_at" timestamp with time zone,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL,
+	"permissions" text,
+	"metadata" text
+);
+--> statement-breakpoint
+CREATE TABLE "app"."chats" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"title" text,
+	"type" text,
+	"conversation" jsonb,
+	"created_at" timestamp with time zone,
+	"updated_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."files" (
+	"id" text PRIMARY KEY NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone,
+	"deleted_at" timestamp with time zone,
+	"user_id" text,
+	"member_id" text,
+	"organization_id" text,
+	"bucket" text NOT NULL,
+	"key" text NOT NULL,
+	"original_name" text NOT NULL,
+	"original_extension" text,
+	"content_type" text NOT NULL,
+	"size_bytes" bigint,
+	"etag" text,
+	"checksum_sha256" text,
+	"metadata" jsonb,
+	"status" text NOT NULL,
+	"uploaded_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "app"."invitations" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"member_id" text,
+	"email" text NOT NULL,
+	"role" text,
+	"status" text NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"inviter_id" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."jwks" (
+	"id" text PRIMARY KEY NOT NULL,
+	"public_key" text NOT NULL,
+	"private_key" text NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"expires_at" timestamp with time zone,
+	"alg" text,
+	"crv" text
+);
+--> statement-breakpoint
+CREATE TABLE "app"."mcp_allowlist_entries" (
+	"id" text PRIMARY KEY NOT NULL,
+	"oauth_client_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"organization_id" text NOT NULL,
+	"created_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."members" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"user_id" text,
+	"email" text,
+	"name" text DEFAULT '' NOT NULL,
+	"image" text,
+	"role" text NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"deleted_at" timestamp with time zone,
+	"preferences" jsonb DEFAULT '{}'::jsonb,
+	"metadata" jsonb DEFAULT '{}'::jsonb,
+	"onboarding" integer,
+	"flags" text[] DEFAULT '{}'
+);
+--> statement-breakpoint
+CREATE TABLE "app"."notification_devices" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"platform" text NOT NULL,
+	"endpoint" text,
+	"subscription" jsonb,
+	"token" text,
+	"label" text,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL,
+	CONSTRAINT "notification_devices_endpoint_unique" UNIQUE("endpoint"),
+	CONSTRAINT "notification_devices_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "app"."notification_preferences" (
+	"id" text PRIMARY KEY NOT NULL,
+	"member_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"channel" text NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."notification_send_logs" (
+	"id" text PRIMARY KEY NOT NULL,
+	"batch_id" text NOT NULL,
+	"notification_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"device_id" text,
+	"channel" text NOT NULL,
+	"provider" text,
+	"title" text NOT NULL,
+	"body" text NOT NULL,
+	"data" jsonb,
+	"status" text NOT NULL,
+	"error" text,
+	"job_id" text,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."notifications" (
+	"id" text PRIMARY KEY NOT NULL,
+	"member_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"title" text NOT NULL,
+	"body" text NOT NULL,
+	"data" jsonb,
+	"visible_in_inbox" boolean DEFAULT false NOT NULL,
+	"armed_channels" text[] DEFAULT '{}' NOT NULL,
+	"web_pushed_at" timestamp with time zone,
+	"mobile_pushed_at" timestamp with time zone,
+	"emailed_at" timestamp with time zone,
+	"read_at" timestamp with time zone,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."oauth_access_tokens" (
+	"id" text PRIMARY KEY NOT NULL,
+	"token" text,
+	"client_id" text NOT NULL,
+	"session_id" text,
+	"user_id" text,
+	"reference_id" text,
+	"authorization_code_id" text,
+	"resources" text[],
+	"requested_user_info_claims" text[],
+	"refresh_id" text,
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"revoked" timestamp with time zone,
+	"confirmation" jsonb,
+	"scopes" text[] NOT NULL,
+	CONSTRAINT "oauth_access_tokens_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "app"."oauth_client_assertions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."oauth_client_resources" (
+	"id" text PRIMARY KEY NOT NULL,
+	"client_id" text NOT NULL,
+	"resource_id" text NOT NULL,
+	"metadata" jsonb,
+	"created_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "app"."oauth_clients" (
+	"id" text PRIMARY KEY NOT NULL,
+	"client_id" text NOT NULL,
+	"client_secret" text,
+	"client_discovery_id" text,
+	"disabled" boolean DEFAULT false,
+	"skip_consent" boolean,
+	"enable_end_session" boolean,
+	"subject_type" text,
+	"scopes" text[],
+	"client_credentials_scopes" text[] DEFAULT '{}',
+	"user_id" text,
+	"created_at" timestamp with time zone,
+	"updated_at" timestamp with time zone,
+	"name" text,
+	"uri" text,
+	"icon" text,
+	"contacts" text[],
+	"tos" text,
+	"policy" text,
+	"software_id" text,
+	"software_version" text,
+	"software_statement" text,
+	"redirect_uris" text[] NOT NULL,
+	"post_logout_redirect_uris" text[],
+	"backchannel_logout_uri" text,
+	"backchannel_logout_session_required" boolean,
+	"token_endpoint_auth_method" text,
+	"application_type" text,
+	"jwks" text,
+	"jwks_uri" text,
+	"grant_types" text[],
+	"response_types" text[],
+	"require_pkce" boolean,
+	"dpop_bound_access_tokens" boolean DEFAULT false,
+	"reference_id" text,
+	"metadata" jsonb,
+	CONSTRAINT "oauth_clients_client_id_unique" UNIQUE("client_id")
+);
+--> statement-breakpoint
+CREATE TABLE "app"."oauth_consents" (
+	"id" text PRIMARY KEY NOT NULL,
+	"client_id" text NOT NULL,
+	"user_id" text,
+	"reference_id" text,
+	"resources" text[],
+	"requested_user_info_claims" text[],
+	"scopes" text[] NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app"."oauth_refresh_tokens" (
+	"id" text PRIMARY KEY NOT NULL,
+	"token" text NOT NULL,
+	"client_id" text NOT NULL,
+	"session_id" text,
+	"user_id" text NOT NULL,
+	"reference_id" text,
+	"authorization_code_id" text,
+	"resources" text[],
+	"requested_user_info_claims" text[],
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"revoked" timestamp with time zone,
+	"rotated_at" timestamp with time zone,
+	"rotation_replay_response" text,
+	"rotation_replay_expires_at" timestamp with time zone,
+	"auth_time" timestamp with time zone,
+	"confirmation" jsonb,
+	"scopes" text[] NOT NULL,
+	CONSTRAINT "oauth_refresh_tokens_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "app"."oauth_resources" (
+	"id" text PRIMARY KEY NOT NULL,
+	"identifier" text NOT NULL,
+	"name" text NOT NULL,
+	"access_token_ttl" integer,
+	"refresh_token_ttl" integer,
+	"signing_algorithm" text,
+	"signing_key_id" text,
+	"allowed_scopes" text[],
+	"custom_claims" jsonb,
+	"dpop_bound_access_tokens_required" boolean DEFAULT false,
+	"disabled" boolean DEFAULT false,
+	"created_at" timestamp with time zone,
+	"updated_at" timestamp with time zone,
+	"policy_version" integer DEFAULT 1,
+	"metadata" jsonb,
+	CONSTRAINT "oauth_resources_identifier_unique" UNIQUE("identifier")
+);
+--> statement-breakpoint
+CREATE TABLE "app"."organizations" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"slug" text,
+	"logo" text,
+	"type" text,
+	"parent_id" text,
+	"created_at" timestamp with time zone NOT NULL,
+	"onboarding" integer,
+	"preferences" jsonb DEFAULT '{}'::jsonb,
+	"metadata" jsonb DEFAULT '{}'::jsonb,
+	"flags" text[] DEFAULT '{}',
+	"locale" text,
+	"currency" text,
+	"stripe_customer_id" text,
+	"stripe_sandbox_customer_id" text,
+	"billing_exempt" boolean DEFAULT false NOT NULL,
+	"allow_cardless_trial" boolean DEFAULT false NOT NULL,
+	"cardless_trial_consumed" jsonb DEFAULT '{}'::jsonb,
+	"closed_at" timestamp with time zone,
+	CONSTRAINT "organizations_slug_unique" UNIQUE("slug"),
+	CONSTRAINT "organizations_stripe_customer_id_unique" UNIQUE("stripe_customer_id"),
+	CONSTRAINT "organizations_stripe_sandbox_customer_id_unique" UNIQUE("stripe_sandbox_customer_id")
+);
+--> statement-breakpoint
+CREATE TABLE "app"."posts" (
+	"id" text PRIMARY KEY NOT NULL,
+	"author_user_id" text,
+	"member_id" text,
+	"organization_id" text,
+	"team_id" text,
+	"title" text NOT NULL,
+	"slug" text NOT NULL,
+	"excerpt" text,
+	"content" text NOT NULL,
+	"status" text DEFAULT 'draft' NOT NULL,
+	"published_at" timestamp with time zone,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone,
+	"deleted_at" timestamp with time zone,
+	CONSTRAINT "posts_slug_unique" UNIQUE("slug")
+);
+--> statement-breakpoint
+CREATE TABLE "app"."sessions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"token" text NOT NULL,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL,
+	"ip_address" text,
+	"user_agent" text,
+	"user_id" text NOT NULL,
+	"impersonated_by" text,
+	"active_organization_id" text,
+	"active_organization_member_id" text,
+	"active_organization_role" text,
+	"active_organization_type" text,
+	CONSTRAINT "sessions_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "app"."users" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"email" text NOT NULL,
+	"email_verified" boolean NOT NULL,
+	"image" text,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL,
+	"role" text,
+	"banned" boolean,
+	"ban_reason" text,
+	"ban_expires" timestamp with time zone,
+	"preferences" jsonb DEFAULT '{}'::jsonb,
+	"metadata" jsonb DEFAULT '{}'::jsonb,
+	"onboarding" integer,
+	"flags" text[] DEFAULT '{}',
+	"locale" text,
+	"closed_at" timestamp with time zone,
+	CONSTRAINT "users_email_unique" UNIQUE("email")
+);
+--> statement-breakpoint
+CREATE TABLE "app"."verifications" (
+	"id" text PRIMARY KEY NOT NULL,
+	"identifier" text NOT NULL,
+	"value" text NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone,
+	"updated_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "app"."waitlist" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text,
+	"email" text,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone,
+	"status" text DEFAULT 'WAITLIST' NOT NULL,
+	"code" text,
+	"expires_at" timestamp with time zone,
+	"user_id" text
+);
+--> statement-breakpoint
+CREATE TABLE "app"."workflows" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text,
+	"job_id" text NOT NULL,
+	"job_name" text NOT NULL,
+	"queue_name" text NOT NULL,
+	"timeout" integer,
+	"tags" text[],
+	"input" jsonb,
+	"output" jsonb,
+	"status" text NOT NULL,
+	"error" text,
+	"retries" integer DEFAULT 0 NOT NULL,
+	"finished_at" timestamp with time zone,
+	"processed_at" timestamp with time zone,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL,
+	CONSTRAINT "workflows_job_id_unique" UNIQUE("job_id")
+);
+--> statement-breakpoint
+ALTER TABLE "app"."account_claim_magic_links" ADD CONSTRAINT "account_claim_magic_links_claim_id_account_claims_id_fk" FOREIGN KEY ("claim_id") REFERENCES "app"."account_claims"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."account_claim_magic_links" ADD CONSTRAINT "account_claim_magic_links_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."account_claims" ADD CONSTRAINT "account_claims_claim_user_id_users_id_fk" FOREIGN KEY ("claim_user_id") REFERENCES "app"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."accounts" ADD CONSTRAINT "accounts_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."ai_usage" ADD CONSTRAINT "ai_usage_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."ai_usage" ADD CONSTRAINT "ai_usage_member_id_members_id_fk" FOREIGN KEY ("member_id") REFERENCES "app"."members"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."ai_usage" ADD CONSTRAINT "ai_usage_organization_id_organizations_id_fk" FOREIGN KEY ("organization_id") REFERENCES "app"."organizations"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."apikeys" ADD CONSTRAINT "apikeys_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."chats" ADD CONSTRAINT "chats_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."files" ADD CONSTRAINT "files_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."files" ADD CONSTRAINT "files_member_id_members_id_fk" FOREIGN KEY ("member_id") REFERENCES "app"."members"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."files" ADD CONSTRAINT "files_organization_id_organizations_id_fk" FOREIGN KEY ("organization_id") REFERENCES "app"."organizations"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."invitations" ADD CONSTRAINT "invitations_organization_id_organizations_id_fk" FOREIGN KEY ("organization_id") REFERENCES "app"."organizations"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."invitations" ADD CONSTRAINT "invitations_member_id_members_id_fk" FOREIGN KEY ("member_id") REFERENCES "app"."members"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."invitations" ADD CONSTRAINT "invitations_inviter_id_users_id_fk" FOREIGN KEY ("inviter_id") REFERENCES "app"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."mcp_allowlist_entries" ADD CONSTRAINT "mcp_allowlist_entries_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."mcp_allowlist_entries" ADD CONSTRAINT "mcp_allowlist_entries_organization_id_organizations_id_fk" FOREIGN KEY ("organization_id") REFERENCES "app"."organizations"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."members" ADD CONSTRAINT "members_organization_id_organizations_id_fk" FOREIGN KEY ("organization_id") REFERENCES "app"."organizations"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."members" ADD CONSTRAINT "members_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."notification_devices" ADD CONSTRAINT "notification_devices_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."notification_preferences" ADD CONSTRAINT "notification_preferences_member_id_members_id_fk" FOREIGN KEY ("member_id") REFERENCES "app"."members"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."notification_send_logs" ADD CONSTRAINT "notification_send_logs_notification_id_notifications_id_fk" FOREIGN KEY ("notification_id") REFERENCES "app"."notifications"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."notification_send_logs" ADD CONSTRAINT "notification_send_logs_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."notification_send_logs" ADD CONSTRAINT "notification_send_logs_device_id_notification_devices_id_fk" FOREIGN KEY ("device_id") REFERENCES "app"."notification_devices"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."notifications" ADD CONSTRAINT "notifications_member_id_members_id_fk" FOREIGN KEY ("member_id") REFERENCES "app"."members"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."notifications" ADD CONSTRAINT "notifications_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_access_tokens" ADD CONSTRAINT "oauth_access_tokens_client_id_oauth_clients_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "app"."oauth_clients"("client_id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_access_tokens" ADD CONSTRAINT "oauth_access_tokens_session_id_sessions_id_fk" FOREIGN KEY ("session_id") REFERENCES "app"."sessions"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_access_tokens" ADD CONSTRAINT "oauth_access_tokens_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_access_tokens" ADD CONSTRAINT "oauth_access_tokens_refresh_id_oauth_refresh_tokens_id_fk" FOREIGN KEY ("refresh_id") REFERENCES "app"."oauth_refresh_tokens"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_client_resources" ADD CONSTRAINT "oauth_client_resources_client_id_oauth_clients_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "app"."oauth_clients"("client_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_client_resources" ADD CONSTRAINT "oauth_client_resources_resource_id_oauth_resources_identifier_fk" FOREIGN KEY ("resource_id") REFERENCES "app"."oauth_resources"("identifier") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_clients" ADD CONSTRAINT "oauth_clients_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_consents" ADD CONSTRAINT "oauth_consents_client_id_oauth_clients_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "app"."oauth_clients"("client_id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_consents" ADD CONSTRAINT "oauth_consents_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_refresh_tokens" ADD CONSTRAINT "oauth_refresh_tokens_client_id_oauth_clients_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "app"."oauth_clients"("client_id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_refresh_tokens" ADD CONSTRAINT "oauth_refresh_tokens_session_id_sessions_id_fk" FOREIGN KEY ("session_id") REFERENCES "app"."sessions"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."oauth_refresh_tokens" ADD CONSTRAINT "oauth_refresh_tokens_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."organizations" ADD CONSTRAINT "organizations_parent_id_organizations_id_fk" FOREIGN KEY ("parent_id") REFERENCES "app"."organizations"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."posts" ADD CONSTRAINT "posts_author_user_id_users_id_fk" FOREIGN KEY ("author_user_id") REFERENCES "app"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."posts" ADD CONSTRAINT "posts_member_id_members_id_fk" FOREIGN KEY ("member_id") REFERENCES "app"."members"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."posts" ADD CONSTRAINT "posts_organization_id_organizations_id_fk" FOREIGN KEY ("organization_id") REFERENCES "app"."organizations"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."sessions" ADD CONSTRAINT "sessions_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."waitlist" ADD CONSTRAINT "waitlist_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app"."workflows" ADD CONSTRAINT "workflows_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "app"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "accounts_issuer_account_id_unique" ON "app"."accounts" USING btree ("issuer","account_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "files_bucket_key_unique" ON "app"."files" USING btree ("bucket","key");--> statement-breakpoint
+CREATE UNIQUE INDEX "mcp_allowlist_client_user_org_unique" ON "app"."mcp_allowlist_entries" USING btree ("oauth_client_id","user_id","organization_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "members_attached_user_organization_unique" ON "app"."members" USING btree ("user_id","organization_id") WHERE "app"."members"."user_id" is not null;--> statement-breakpoint
+CREATE UNIQUE INDEX "members_live_pending_email_organization_unique" ON "app"."members" USING btree ("email","organization_id") WHERE "app"."members"."user_id" is null and "app"."members"."deleted_at" is null;--> statement-breakpoint
+CREATE UNIQUE INDEX "notification_preferences_member_kind_channel_unique" ON "app"."notification_preferences" USING btree ("member_id","kind","channel");--> statement-breakpoint
+CREATE UNIQUE INDEX "oauth_client_resources_client_resource_unique" ON "app"."oauth_client_resources" USING btree ("client_id","resource_id");