spaps 0.7.2 → 0.7.4

package/assets/local-runtime/alembic/versions/000000000010_affiliate_referrals.py

@@ -0,0 +1,235 @@
+"""affiliate referrals
+
+Revision ID: 000000000010
+Revises: 000000000009
+Create Date: 2026-02-13
+
+Creates affiliates, referral_clicks, referral_attributions,
+affiliate_commissions, affiliate_payouts, and app_affiliate_config tables
+for the multi-level affiliate/referral system.
+"""
+
+from alembic import op
+
+revision = "000000000010"
+down_revision = "000000000009"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # -----------------------------------------------------------------------
+    # affiliates table
+    # -----------------------------------------------------------------------
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS affiliates (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            affiliate_type VARCHAR(10) NOT NULL,
+            user_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            agent_id UUID REFERENCES agents(id) ON DELETE CASCADE,
+            slug VARCHAR(50) NOT NULL UNIQUE,
+            referred_by_affiliate_id UUID REFERENCES affiliates(id) ON DELETE SET NULL,
+            referral_depth INTEGER NOT NULL DEFAULT 0,
+            is_active BOOLEAN NOT NULL DEFAULT true,
+            payout_wallet_address VARCHAR(200),
+            payout_chain VARCHAR(50),
+            credit_balance_cents BIGINT NOT NULL DEFAULT 0,
+            lifetime_earned_cents BIGINT NOT NULL DEFAULT 0,
+            lifetime_paid_out_cents BIGINT NOT NULL DEFAULT 0,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            CONSTRAINT ck_affiliates_type CHECK (affiliate_type IN ('user', 'agent')),
+            CONSTRAINT ck_affiliates_exactly_one_fk CHECK (
+                (affiliate_type = 'user' AND user_id IS NOT NULL AND agent_id IS NULL)
+                OR (affiliate_type = 'agent' AND agent_id IS NOT NULL AND user_id IS NULL)
+            )
+        );
+    """)
+
+    # One affiliate per user
+    op.execute("""
+        CREATE UNIQUE INDEX IF NOT EXISTS uq_affiliates_user
+        ON affiliates (user_id)
+        WHERE user_id IS NOT NULL;
+    """)
+
+    # One affiliate per agent
+    op.execute("""
+        CREATE UNIQUE INDEX IF NOT EXISTS uq_affiliates_agent
+        ON affiliates (agent_id)
+        WHERE agent_id IS NOT NULL;
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_affiliates_referred_by
+        ON affiliates (referred_by_affiliate_id);
+    """)
+
+    # -----------------------------------------------------------------------
+    # referral_clicks table
+    # -----------------------------------------------------------------------
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS referral_clicks (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            affiliate_id UUID NOT NULL REFERENCES affiliates(id) ON DELETE CASCADE,
+            application_id UUID NOT NULL REFERENCES applications(id) ON DELETE CASCADE,
+            clicked_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            ip_hash VARCHAR(64) NOT NULL,
+            user_agent VARCHAR(500),
+            expires_at TIMESTAMPTZ NOT NULL,
+            converted_at TIMESTAMPTZ,
+            converted_entity_type VARCHAR(10),
+            converted_entity_id UUID
+        );
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_referral_clicks_affiliate
+        ON referral_clicks (affiliate_id);
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_referral_clicks_app
+        ON referral_clicks (application_id);
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_referral_clicks_ip_slug
+        ON referral_clicks (ip_hash, affiliate_id);
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_referral_clicks_expires
+        ON referral_clicks (expires_at)
+        WHERE converted_at IS NULL;
+    """)
+
+    # -----------------------------------------------------------------------
+    # referral_attributions table
+    # -----------------------------------------------------------------------
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS referral_attributions (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            referred_entity_type VARCHAR(10) NOT NULL,
+            referred_entity_id UUID NOT NULL,
+            affiliate_id UUID NOT NULL REFERENCES affiliates(id) ON DELETE CASCADE,
+            referral_click_id UUID REFERENCES referral_clicks(id) ON DELETE SET NULL,
+            application_id UUID NOT NULL REFERENCES applications(id) ON DELETE CASCADE,
+            attributed_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            CONSTRAINT ck_referral_attributions_type CHECK (referred_entity_type IN ('user', 'agent')),
+            CONSTRAINT uq_referral_attributions_entity UNIQUE (referred_entity_type, referred_entity_id)
+        );
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_referral_attributions_affiliate
+        ON referral_attributions (affiliate_id);
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_referral_attributions_entity
+        ON referral_attributions (referred_entity_type, referred_entity_id);
+    """)
+
+    # -----------------------------------------------------------------------
+    # affiliate_commissions table
+    # -----------------------------------------------------------------------
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS affiliate_commissions (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            affiliate_id UUID NOT NULL REFERENCES affiliates(id) ON DELETE CASCADE,
+            source_entity_type VARCHAR(10) NOT NULL,
+            source_entity_id UUID NOT NULL,
+            payment_event_type VARCHAR(50) NOT NULL,
+            payment_amount_cents BIGINT NOT NULL,
+            commission_level INTEGER NOT NULL,
+            commission_rate_bps INTEGER NOT NULL,
+            commission_amount_cents BIGINT NOT NULL,
+            application_id UUID NOT NULL REFERENCES applications(id) ON DELETE CASCADE,
+            credited_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            payment_reference VARCHAR(500) NOT NULL,
+            CONSTRAINT ck_affiliate_commissions_level CHECK (commission_level IN (1, 2, 3)),
+            CONSTRAINT uq_affiliate_commissions_idempotent UNIQUE (payment_reference, affiliate_id, commission_level)
+        );
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_affiliate_commissions_affiliate
+        ON affiliate_commissions (affiliate_id);
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_affiliate_commissions_app
+        ON affiliate_commissions (application_id);
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_affiliate_commissions_credited_at
+        ON affiliate_commissions (credited_at);
+    """)
+
+    # -----------------------------------------------------------------------
+    # affiliate_payouts table
+    # -----------------------------------------------------------------------
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS affiliate_payouts (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            affiliate_id UUID NOT NULL REFERENCES affiliates(id) ON DELETE CASCADE,
+            amount_cents BIGINT NOT NULL,
+            payout_method VARCHAR(20) NOT NULL DEFAULT 'usdc_onchain',
+            wallet_address VARCHAR(200) NOT NULL,
+            chain VARCHAR(50) NOT NULL,
+            tx_hash VARCHAR(200),
+            status VARCHAR(20) NOT NULL DEFAULT 'requested',
+            requested_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            approved_at TIMESTAMPTZ,
+            completed_at TIMESTAMPTZ,
+            approved_by_user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            denial_reason VARCHAR(500),
+            failure_reason VARCHAR(500),
+            CONSTRAINT ck_affiliate_payouts_status CHECK (
+                status IN ('requested', 'approved', 'completed', 'denied', 'failed')
+            )
+        );
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_affiliate_payouts_affiliate
+        ON affiliate_payouts (affiliate_id);
+    """)
+
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_affiliate_payouts_status
+        ON affiliate_payouts (status)
+        WHERE status IN ('requested', 'approved');
+    """)
+
+    # -----------------------------------------------------------------------
+    # app_affiliate_config table
+    # -----------------------------------------------------------------------
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS app_affiliate_config (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID NOT NULL UNIQUE REFERENCES applications(id) ON DELETE CASCADE,
+            enabled BOOLEAN NOT NULL DEFAULT true,
+            l1_rate_bps INTEGER NOT NULL DEFAULT 1000,
+            l2_rate_bps INTEGER NOT NULL DEFAULT 500,
+            l3_rate_bps INTEGER NOT NULL DEFAULT 200,
+            attribution_window_days INTEGER NOT NULL DEFAULT 30,
+            min_payout_cents BIGINT NOT NULL DEFAULT 2500,
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            CONSTRAINT ck_app_affiliate_config_l1 CHECK (l1_rate_bps >= 0 AND l1_rate_bps <= 5000),
+            CONSTRAINT ck_app_affiliate_config_l2 CHECK (l2_rate_bps >= 0 AND l2_rate_bps <= 5000),
+            CONSTRAINT ck_app_affiliate_config_l3 CHECK (l3_rate_bps >= 0 AND l3_rate_bps <= 5000),
+            CONSTRAINT ck_app_affiliate_config_total_rate CHECK (l1_rate_bps + l2_rate_bps + l3_rate_bps <= 5000)
+        );
+    """)
+
+
+def downgrade() -> None:
+    op.execute("DROP TABLE IF EXISTS app_affiliate_config CASCADE;")
+    op.execute("DROP TABLE IF EXISTS affiliate_payouts CASCADE;")
+    op.execute("DROP TABLE IF EXISTS affiliate_commissions CASCADE;")
+    op.execute("DROP TABLE IF EXISTS referral_attributions CASCADE;")
+    op.execute("DROP TABLE IF EXISTS referral_clicks CASCADE;")
+    op.execute("DROP TABLE IF EXISTS affiliates CASCADE;")

package/assets/local-runtime/alembic/versions/000000000011_checkin_call_booking.py

@@ -0,0 +1,137 @@
+"""checkin call booking
+
+Revision ID: 000000000011
+Revises: 000000000010
+Create Date: 2026-02-13
+
+Creates booking_policies table and adds new columns to dayrate_bookings
+for the checkin_call_booking domain slice:
+  - booking_policies: policy configuration for free booking allotments
+  - dayrate_bookings: enrollment_id, replaces_booking_id, policy_key, is_free
+"""
+
+from alembic import op
+
+revision = "000000000011"
+down_revision = "000000000010"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # -----------------------------------------------------------------------
+    # booking_policies table (new)
+    # -----------------------------------------------------------------------
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS booking_policies (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID NOT NULL REFERENCES applications(id) ON DELETE CASCADE,
+            policy_key TEXT NOT NULL,
+            entitlement_key TEXT NOT NULL,
+            free_bookings_per_period INTEGER NOT NULL DEFAULT 0,
+            period_days INTEGER NOT NULL DEFAULT 28,
+            overage_rate INTEGER,
+            overage_currency TEXT NOT NULL DEFAULT 'usd',
+            overage_product_name TEXT,
+            reschedule_is_free BOOLEAN NOT NULL DEFAULT true,
+            is_active BOOLEAN NOT NULL DEFAULT true,
+            metadata JSONB DEFAULT '{}',
+            created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            CONSTRAINT uq_booking_policies_app_key UNIQUE (application_id, policy_key)
+        );
+    """)
+
+    # Index for policy lookups
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS idx_booking_policies_app_active
+        ON booking_policies (application_id)
+        WHERE is_active = true;
+    """)
+
+    # -----------------------------------------------------------------------
+    # dayrate_bookings: new columns (all nullable/defaulted for backward compat)
+    # -----------------------------------------------------------------------
+
+    # enrollment_id: cross-system reference to HTMA enrollment
+    op.execute("""
+        ALTER TABLE dayrate_bookings
+        ADD COLUMN IF NOT EXISTS enrollment_id TEXT;
+    """)
+
+    # replaces_booking_id: self-referencing FK for reschedule chain
+    op.execute("""
+        ALTER TABLE dayrate_bookings
+        ADD COLUMN IF NOT EXISTS replaces_booking_id UUID
+        REFERENCES dayrate_bookings(id) ON DELETE SET NULL;
+    """)
+
+    # policy_key: which booking policy was applied (text, no FK)
+    op.execute("""
+        ALTER TABLE dayrate_bookings
+        ADD COLUMN IF NOT EXISTS policy_key TEXT;
+    """)
+
+    # is_free: whether this booking was a free allotment booking
+    op.execute("""
+        ALTER TABLE dayrate_bookings
+        ADD COLUMN IF NOT EXISTS is_free BOOLEAN NOT NULL DEFAULT false;
+    """)
+
+    # -----------------------------------------------------------------------
+    # Indexes for new query patterns
+    # -----------------------------------------------------------------------
+
+    # Allotment counting: non-cancelled, non-reschedule bookings by user
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS idx_dayrate_bookings_allotment
+        ON dayrate_bookings (application_id, user_id, created_at)
+        WHERE status != 'cancelled' AND replaces_booking_id IS NULL;
+    """)
+
+    # Email fallback for allotment counting
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS idx_dayrate_bookings_email_allotment
+        ON dayrate_bookings (application_id, client_email, created_at)
+        WHERE status != 'cancelled' AND replaces_booking_id IS NULL;
+    """)
+
+    # Enrollment lookup (for admin bookings list filter)
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS idx_dayrate_bookings_enrollment
+        ON dayrate_bookings (enrollment_id)
+        WHERE enrollment_id IS NOT NULL;
+    """)
+
+    # Upcoming bookings by user_id (for batch profile)
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS idx_dayrate_bookings_upcoming_user
+        ON dayrate_bookings (application_id, user_id, date)
+        WHERE status != 'cancelled';
+    """)
+
+    # Upcoming bookings by email (for legacy batch profile fallback)
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS idx_dayrate_bookings_upcoming_email
+        ON dayrate_bookings (application_id, client_email, date)
+        WHERE status != 'cancelled' AND user_id IS NULL;
+    """)
+
+
+def downgrade() -> None:
+    # Drop indexes
+    op.execute("DROP INDEX IF EXISTS idx_dayrate_bookings_upcoming_email;")
+    op.execute("DROP INDEX IF EXISTS idx_dayrate_bookings_upcoming_user;")
+    op.execute("DROP INDEX IF EXISTS idx_dayrate_bookings_enrollment;")
+    op.execute("DROP INDEX IF EXISTS idx_dayrate_bookings_email_allotment;")
+    op.execute("DROP INDEX IF EXISTS idx_dayrate_bookings_allotment;")
+
+    # Drop new columns from dayrate_bookings
+    op.execute("ALTER TABLE dayrate_bookings DROP COLUMN IF EXISTS is_free;")
+    op.execute("ALTER TABLE dayrate_bookings DROP COLUMN IF EXISTS policy_key;")
+    op.execute("ALTER TABLE dayrate_bookings DROP COLUMN IF EXISTS replaces_booking_id;")
+    op.execute("ALTER TABLE dayrate_bookings DROP COLUMN IF EXISTS enrollment_id;")
+
+    # Drop booking_policies table
+    op.execute("DROP INDEX IF EXISTS idx_booking_policies_app_active;")
+    op.execute("DROP TABLE IF EXISTS booking_policies;")

package/assets/local-runtime/alembic/versions/000000000012_subscription_application_scoping.py

@@ -0,0 +1,55 @@
+"""subscription application scoping
+
+Revision ID: 000000000012
+Revises: 000000000011
+Create Date: 2026-02-13
+
+TM-002: Add application_id column to subscriptions table for multi-tenant isolation.
+This prevents same-user cross-application subscription access vulnerabilities.
+
+Migration strategy:
+1. Add application_id column as nullable (allows existing rows)
+2. Future migration will backfill application_id from metadata or checkout sessions
+3. Future migration will add NOT NULL constraint after backfill
+"""
+
+from alembic import op
+
+revision = "000000000012"
+down_revision = "000000000011"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # -----------------------------------------------------------------------
+    # subscriptions: add application_id column (nullable for backfill)
+    # -----------------------------------------------------------------------
+    op.execute("""
+        ALTER TABLE subscriptions
+        ADD COLUMN IF NOT EXISTS application_id UUID
+        REFERENCES applications(id) ON DELETE CASCADE;
+    """)
+
+    # Add index for application-scoped subscription lookups
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS idx_subscriptions_app_user
+        ON subscriptions (application_id, user_id)
+        WHERE application_id IS NOT NULL;
+    """)
+
+    # Add index for application + stripe_subscription_id lookups (TM-002 requirement)
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS idx_subscriptions_app_stripe_id
+        ON subscriptions (application_id, stripe_subscription_id)
+        WHERE application_id IS NOT NULL AND stripe_subscription_id IS NOT NULL;
+    """)
+
+
+def downgrade() -> None:
+    # Drop indexes
+    op.execute("DROP INDEX IF EXISTS idx_subscriptions_app_stripe_id;")
+    op.execute("DROP INDEX IF EXISTS idx_subscriptions_app_user;")
+
+    # Drop column
+    op.execute("ALTER TABLE subscriptions DROP COLUMN IF EXISTS application_id;")

package/assets/local-runtime/alembic/versions/000000000013_refresh_token_anomaly_context.py

@@ -0,0 +1,61 @@
+"""refresh token anomaly context
+
+Revision ID: 000000000013
+Revises: 000000000011
+Create Date: 2026-02-13
+
+TM-011: Add network context tracking to refresh_tokens table for
+stolen token detection via IP/UA anomaly detection.
+
+Adds columns:
+  - issued_ip: IP address when token was first issued
+  - issued_user_agent: User agent when token was first issued
+  - last_seen_ip: Most recent IP address for this token
+  - last_seen_user_agent: Most recent user agent for this token
+  - anomaly_state: Anomaly detection decision (none/alert/blocked)
+
+All columns are nullable for backwards compatibility with existing tokens.
+"""
+
+from alembic import op
+
+revision = "000000000013"
+down_revision = "000000000012"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # Add network context columns to refresh_tokens table
+    op.execute("""
+        ALTER TABLE refresh_tokens
+        ADD COLUMN IF NOT EXISTS issued_ip TEXT,
+        ADD COLUMN IF NOT EXISTS issued_user_agent TEXT,
+        ADD COLUMN IF NOT EXISTS last_seen_ip TEXT,
+        ADD COLUMN IF NOT EXISTS last_seen_user_agent TEXT,
+        ADD COLUMN IF NOT EXISTS anomaly_state TEXT;
+    """)
+
+    # Add index for anomaly_state to support security monitoring queries
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS idx_refresh_tokens_anomaly_state
+        ON refresh_tokens (anomaly_state)
+        WHERE anomaly_state IS NOT NULL;
+    """)
+
+
+def downgrade() -> None:
+    # Drop the anomaly state index
+    op.execute("""
+        DROP INDEX IF EXISTS idx_refresh_tokens_anomaly_state;
+    """)
+
+    # Remove network context columns
+    op.execute("""
+        ALTER TABLE refresh_tokens
+        DROP COLUMN IF EXISTS issued_ip,
+        DROP COLUMN IF EXISTS issued_user_agent,
+        DROP COLUMN IF EXISTS last_seen_ip,
+        DROP COLUMN IF EXISTS last_seen_user_agent,
+        DROP COLUMN IF EXISTS anomaly_state;
+    """)

package/assets/local-runtime/alembic/versions/000000000014_buildooor_dayrate_hire_schedule.py

@@ -0,0 +1,39 @@
+"""Buildooor hire dayrate availability defaults
+
+Revision ID: 000000000014
+Revises: 000000000013
+Create Date: 2026-02-22
+
+TM-014: Update Buildooor dayrate schedule to wed/sun AM/PM defaults.
+"""
+
+from alembic import op
+
+revision = "000000000014"
+down_revision = "000000000013"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    """Configure Buildooor availability to Wednesday + Sunday, AM/PM."""
+    sql = """
+        UPDATE dayrate_config
+        SET available_days = ARRAY['wednesday', 'sunday']::text[],
+            slots = ARRAY['AM', 'PM']::text[],
+            updated_at = NOW()
+        WHERE application_id = '91057ad9-4380-47c5-9393-69db91c5080d'::uuid;
+    """
+    op.execute(sql)
+
+
+def downgrade() -> None:
+    """Revert Buildooor availability to Thursday + Saturday, AM/PM defaults."""
+    sql = """
+        UPDATE dayrate_config
+        SET available_days = ARRAY['thursday', 'saturday']::text[],
+            slots = ARRAY['AM', 'PM']::text[],
+            updated_at = NOW()
+        WHERE application_id = '91057ad9-4380-47c5-9393-69db91c5080d'::uuid;
+    """
+    op.execute(sql)

package/assets/local-runtime/alembic/versions/000000000015_support_telemetry_platform.py

@@ -0,0 +1,112 @@
+"""support telemetry platform
+
+Revision ID: 000000000015
+Revises: 000000000014
+Create Date: 2026-03-01
+
+Creates support_cases and support_case_events tables for centralized
+cross-application support telemetry ingestion and triage lifecycle APIs.
+"""
+
+from alembic import op
+
+revision = "000000000015"
+down_revision = "000000000014"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS support_cases (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID NOT NULL REFERENCES applications(id) ON DELETE CASCADE,
+            external_case_ref VARCHAR(255),
+            title VARCHAR(500),
+            status VARCHAR(20) NOT NULL DEFAULT 'open',
+            priority VARCHAR(20) NOT NULL DEFAULT 'normal',
+            highest_severity VARCHAR(20) NOT NULL DEFAULT 'info',
+            assigned_to_user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            first_event_at TIMESTAMPTZ NOT NULL,
+            last_event_at TIMESTAMPTZ NOT NULL,
+            resolved_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            CONSTRAINT ck_support_cases_status CHECK (
+                status IN ('open', 'in_progress', 'resolved', 'ignored')
+            ),
+            CONSTRAINT ck_support_cases_priority CHECK (
+                priority IN ('low', 'normal', 'high', 'urgent')
+            ),
+            CONSTRAINT ck_support_cases_highest_severity CHECK (
+                highest_severity IN ('info', 'warning', 'error', 'critical')
+            )
+        );
+    """)
+
+    op.execute("""
+        CREATE UNIQUE INDEX IF NOT EXISTS uq_support_cases_external_ref
+        ON support_cases (application_id, external_case_ref)
+        WHERE external_case_ref IS NOT NULL;
+    """)
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_support_cases_app_status_priority
+        ON support_cases (application_id, status, priority);
+    """)
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_support_cases_assigned_user
+        ON support_cases (assigned_to_user_id);
+    """)
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_support_cases_last_event_at
+        ON support_cases (last_event_at);
+    """)
+
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS support_case_events (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            case_id UUID NOT NULL REFERENCES support_cases(id) ON DELETE CASCADE,
+            application_id UUID NOT NULL REFERENCES applications(id) ON DELETE CASCADE,
+            event_key VARCHAR(128) NOT NULL,
+            source_channel VARCHAR(32) NOT NULL,
+            event_type VARCHAR(100) NOT NULL,
+            severity VARCHAR(20) NOT NULL,
+            actor_type VARCHAR(32) NOT NULL,
+            actor_external_id VARCHAR(255),
+            correlation_id VARCHAR(255),
+            payload JSONB NOT NULL DEFAULT '{}'::jsonb,
+            redacted_keys JSONB NOT NULL DEFAULT '[]'::jsonb,
+            occurred_at TIMESTAMPTZ NOT NULL,
+            received_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+            ingested_by_user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            CONSTRAINT ck_support_case_events_source_channel CHECK (
+                source_channel IN ('issue_log', 'support_thread', 'email', 'frontend', 'api', 'webhook')
+            ),
+            CONSTRAINT ck_support_case_events_severity CHECK (
+                severity IN ('info', 'warning', 'error', 'critical')
+            ),
+            CONSTRAINT ck_support_case_events_actor_type CHECK (
+                actor_type IN ('user', 'practitioner', 'anonymous', 'service', 'support_operator')
+            )
+        );
+    """)
+
+    op.execute("""
+        CREATE UNIQUE INDEX IF NOT EXISTS uq_support_case_events_event_key
+        ON support_case_events (application_id, event_key);
+    """)
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_support_case_events_case_occurred
+        ON support_case_events (case_id, occurred_at);
+    """)
+    op.execute("""
+        CREATE INDEX IF NOT EXISTS ix_support_case_events_app_correlation
+        ON support_case_events (application_id, correlation_id)
+        WHERE correlation_id IS NOT NULL;
+    """)
+
+
+def downgrade() -> None:
+    op.execute("DROP TABLE IF EXISTS support_case_events CASCADE;")
+    op.execute("DROP TABLE IF EXISTS support_cases CASCADE;")
+