spine-framework 0.3.17 → 0.3.19

package/.framework/functions/admin-signals.ts

@@ -0,0 +1,241 @@
+/**
+ * @module admin-signals
+ * @audience system-admin
+ * @layer api-handler
+ * @stability stable
+ *
+ * Admin API for signal analytics and audit functionality
+ */
+
+import { createHandler } from './_shared/middleware'
+import { adminDb } from './_shared/db'
+
+// ============================================
+// SIGNAL METRICS
+// ============================================
+
+export const metrics = createHandler(async (ctx, body) => {
+  const now = new Date()
+  const today = now.toISOString().split('T')[0]
+  const weekAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000).toISOString()
+  
+  // Get funnel_signal type ID
+  const { data: signalType } = await adminDb
+    .from('item_type_registry')
+    .select('id')
+    .eq('slug', 'funnel_signal')
+    .single()
+  
+  if (!signalType) {
+    throw new Error('funnel_signal type not found')
+  }
+
+  // Total signals
+  const { count: totalSignals } = await adminDb
+    .from('items')
+    .select('*', { count: 'exact', head: true })
+    .eq('type_id', signalType.id)
+
+  // Signals today
+  const { count: signalsToday } = await adminDb
+    .from('items')
+    .select('*', { count: 'exact', head: true })
+    .eq('type_id', signalType.id)
+    .gte('created_at', today)
+
+  // Signals this week
+  const { count: signalsThisWeek } = await adminDb
+    .from('items')
+    .select('*', { count: 'exact', head: true })
+    .eq('type_id', signalType.id)
+    .gte('created_at', weekAgo)
+
+  // Top sources
+  const { data: sourceData } = await adminDb
+    .from('items')
+    .select('data->>source')
+    .eq('type_id', signalType.id)
+    .gte('created_at', weekAgo)
+
+  const sourceCounts = sourceData?.reduce((acc, item) => {
+    const source = item.data?.source || 'unknown'
+    acc[source] = (acc[source] || 0) + 1
+    return acc
+  }, {} as Record<string, number>)
+
+  const topSources = Object.entries(sourceCounts)
+    .sort(([, a], [, b]) => b - a)
+    .slice(0, 10)
+    .map(([source, count]) => ({ source, count }))
+
+  // Recent signals with account info
+  const { data: recentSignals } = await adminDb
+    .from('items')
+    .select(`
+      id,
+      data->>action_type,
+      data->>source,
+      data->>stage,
+      created_at,
+      data->>rating,
+      account_id,
+      accounts(name)
+    `)
+    .eq('type_id', signalType.id)
+    .order('created_at', { ascending: false })
+    .limit(20)
+
+  const formattedSignals = recentSignals?.map(signal => ({
+    id: signal.id,
+    action_type: signal.data?.action_type || 'unknown',
+    source: signal.data?.source || 'unknown',
+    stage: signal.data?.stage || 'unknown',
+    created_at: signal.created_at,
+    account_name: signal.accounts?.name,
+    rating: parseInt(signal.data?.rating || '1')
+  }))
+
+  // Calculate conversion rate (simplified - signals with rating >= 4)
+  const { count: highValueSignals } = await adminDb
+    .from('items')
+    .select('*', { count: 'exact', head: true })
+    .eq('type_id', signalType.id)
+    .gte('data->>rating', '4')
+    .gte('created_at', weekAgo)
+
+  const conversionRate = signalsThisWeek > 0 ? (highValueSignals / signalsThisWeek) * 100 : 0
+
+  return {
+    total_signals: totalSignals || 0,
+    signals_today: signalsToday || 0,
+    signals_this_week: signalsThisWeek || 0,
+    conversion_rate: conversionRate,
+    top_sources: topSources,
+    recent_signals: formattedSignals || []
+  }
+})
+
+// ============================================
+// SIGNAL AUDIT
+// ============================================
+
+export const audit = createHandler(async (ctx, body) => {
+  const {
+    page = '1',
+    limit = '50',
+    date_from,
+    date_to,
+    source,
+    stage,
+    action_type,
+    min_rating,
+    account_id,
+    search,
+    export: exportData
+  } = ctx.query || {}
+
+  // Get funnel_signal type ID
+  const { data: signalType } = await adminDb
+    .from('item_type_registry')
+    .select('id')
+    .eq('slug', 'funnel_signal')
+    .single()
+  
+  if (!signalType) {
+    throw new Error('funnel_signal type not found')
+  }
+
+  // Build query
+  let query = adminDb
+    .from('items')
+    .select(`
+      id,
+      data->>action_type,
+      data->>action_value,
+      data->>stage,
+      data->>source,
+      created_at,
+      data->>rating,
+      data->>raw_score,
+      data->identity->>anonymous_id,
+      data->identity->>session_id,
+      data->attribution->>first_touch_referrer_domain,
+      data->attribution->>utm_source,
+      data->attribution->>utm_medium,
+      data->attribution->>utm_campaign,
+      account_id,
+      people(email),
+      accounts(name)
+    `, { count: 'exact' })
+    .eq('type_id', signalType.id)
+
+  // Apply filters
+  if (date_from) {
+    query = query.gte('created_at', date_from)
+  }
+  if (date_to) {
+    query = query.lte('created_at', date_to)
+  }
+  if (source) {
+    query = query.eq('data->>source', source)
+  }
+  if (stage) {
+    query = query.eq('data->>stage', stage)
+  }
+  if (action_type) {
+    query = query.eq('data->>action_type', action_type)
+  }
+  if (min_rating) {
+    query = query.gte('data->>rating', min_rating)
+  }
+  if (account_id) {
+    query = query.eq('account_id', account_id)
+  }
+  if (search) {
+    query = query.or(`accounts.name.ilike.%${search}%,people.email.ilike.%${search}%,data->attribution->>first_touch_referrer_domain.ilike.%${search}%`)
+  }
+
+  // Order and paginate
+  const offset = (parseInt(page) - 1) * parseInt(limit)
+  query = query.order('created_at', { ascending: false })
+
+  if (!exportData) {
+    query = query.range(offset, offset + parseInt(limit) - 1)
+  }
+
+  const { data, error, count } = await query
+
+  if (error) {
+    throw new Error(`Failed to fetch signals: ${error.message}`)
+  }
+
+  const formattedSignals = data?.map(signal => ({
+    id: signal.id,
+    action_type: signal.data?.action_type || 'unknown',
+    action_value: parseInt(signal.data?.action_value || '1'),
+    stage: signal.data?.stage || 'unknown',
+    source: signal.data?.source || 'unknown',
+    created_at: signal.created_at,
+    account_name: signal.accounts?.name,
+    person_email: signal.people?.email,
+    anonymous_id: signal.data?.identity?.anonymous_id,
+    session_id: signal.data?.identity?.session_id,
+    rating: parseInt(signal.data?.rating || '1'),
+    raw_score: parseFloat(signal.data?.raw_score || '0'),
+    referrer_domain: signal.data?.attribution?.first_touch_referrer_domain,
+    utm_source: signal.data?.attribution?.utm_source,
+    utm_medium: signal.data?.attribution?.utm_medium,
+    utm_campaign: signal.data?.attribution?.utm_campaign
+  }))
+
+  if (exportData) {
+    return formattedSignals
+  }
+
+  return {
+    signals: formattedSignals,
+    total: count || 0,
+    page: parseInt(page),
+    limit: parseInt(limit)
+  }
+})

package/.framework/functions/integration-routes.ts

@@ -37,8 +37,7 @@
 
 import { adminDb } from './_shared/db'
 import { resolvePrincipal } from './_shared/principal'
-import { listRegisteredHandlers } from './_shared/webhook-registry'
-import { HANDLER_REGISTRY } from './handler-registry'
+import { resolveHandler, listRegisteredHandlers } from './_shared/webhook-registry'
 
 // ─── TYPES ────────────────────────────────────────────────────────────────
 
@@ -72,7 +71,7 @@ async function resolveIntegration(slug: string, type: string): Promise<any> {
   const { data, error } = await adminDb
     .from('integrations')
     .select('*')
-    .eq('slug', slug)
+    .eq('name', slug)
     .eq('integration_type', type)
     .eq('is_active', true)
     .single()
@@ -129,7 +128,7 @@ function validateSchema(data: any, schema: any, requestId: string): ValidationRe
     // Validate data type
     if (config.type) {
       const typeValid = validateType(value, config.type, fieldName)
-      if (!typeValid.valid && typeValid.error) {
+      if (!typeValid.valid) {
         errors.push(typeValid.error)
       }
     }
@@ -256,10 +255,7 @@ function sanitizeData(data: any, rules: string = 'strict'): any {
  * @param handlerName - The handler key from integration config (e.g. "webhook-handler")
  */
 async function loadCustomScript(handlerName: string): Promise<Function | null> {
-  const mod = HANDLER_REGISTRY[handlerName]
-  if (!mod) return null
-  const fn = mod.handler || mod.default
-  return typeof fn === 'function' ? fn : null
+  return resolveHandler(handlerName)
 }
 
 // ─── DIAGNOSTIC HANDLER (temporary — full trace in response) ──────────────

package/.framework/migrations/001_schema.sql

@@ -0,0 +1,406 @@
+-- Migration 001: Schema
+-- Spine v2 consolidated day-zero schema
+-- Contains all CREATE TABLE statements for the public schema
+
+COMMENT ON SCHEMA public IS 'Spine v2 consolidated schema - runtime entities foundation';
+
+-- ============================================
+-- EXTENSIONS
+-- ============================================
+
+CREATE EXTENSION IF NOT EXISTS vector;
+
+-- ============================================
+-- IDENTITY TABLES (accounts, people)
+-- ============================================
+
+CREATE TABLE public.accounts (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  parent_id uuid, type_id uuid NOT NULL, slug text NOT NULL UNIQUE,
+  display_name text NOT NULL, description text,
+  data jsonb DEFAULT '{}', is_active boolean DEFAULT true,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  design_schema jsonb DEFAULT '{}', validation_schema jsonb DEFAULT '{}',
+  app_id uuid, created_by uuid, updated_by uuid
+);
+
+CREATE TABLE public.people (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  auth_uid uuid UNIQUE, email text UNIQUE NOT NULL, full_name text NOT NULL,
+  avatar_url text, phone text, status text DEFAULT 'active',
+  data jsonb DEFAULT '{}', is_active boolean DEFAULT true, account_id uuid NOT NULL,
+  app_id uuid, role_id uuid, type_id uuid NOT NULL,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  design_schema jsonb DEFAULT '{}', validation_schema jsonb DEFAULT '{}',
+  created_by uuid
+);
+
+-- ============================================
+-- TYPES, APPS, ROLES
+-- ============================================
+
+CREATE TABLE public.types (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  app_id uuid, kind text NOT NULL, slug text NOT NULL, name text NOT NULL,
+  description text, icon text, color text,
+  design_schema jsonb DEFAULT '{}', validation_schema jsonb DEFAULT '{}',
+  ownership text DEFAULT 'tenant', is_active boolean DEFAULT true,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  UNIQUE(app_id, kind, slug)
+);
+
+CREATE TABLE public.apps (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  slug text NOT NULL UNIQUE, name text NOT NULL, description text,
+  icon text, color text, version text DEFAULT '1.0.0',
+  app_type text DEFAULT 'system', source text DEFAULT 'builtin',
+  config jsonb DEFAULT '{}', nav_items jsonb DEFAULT '[]',
+  min_role text, integration_deps jsonb DEFAULT '[]', metadata jsonb DEFAULT '{}',
+  is_active boolean DEFAULT true, is_system boolean DEFAULT false,
+  account_id uuid, owner_account_id uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  route_prefix text,
+  renderer text NOT NULL DEFAULT 'generic',
+  CONSTRAINT chk_apps_renderer CHECK (renderer IN ('generic', 'custom', 'none'))
+);
+
+CREATE TABLE public.roles (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  slug text NOT NULL, name text NOT NULL, description text,
+  permissions jsonb DEFAULT '[]', is_system boolean DEFAULT false,
+  is_active boolean DEFAULT true, is_protected boolean DEFAULT false,
+  app_id uuid, account_id uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  UNIQUE(app_id, slug)
+);
+
+-- ============================================
+-- RUNTIME ENTITIES
+-- ============================================
+
+CREATE TABLE public.items (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  type_id uuid NOT NULL, account_id uuid NOT NULL, app_id uuid,
+  title text, description text, status text DEFAULT 'active',
+  data jsonb DEFAULT '{}', is_active boolean DEFAULT true,
+  design_schema jsonb DEFAULT '{}', validation_schema jsonb DEFAULT '{}',
+  created_by uuid, updated_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.threads (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  type_id uuid NOT NULL, account_id uuid NOT NULL, app_id uuid,
+  title text, target_type text NOT NULL, target_id uuid NOT NULL,
+  visibility text DEFAULT 'internal', status text DEFAULT 'open',
+  data jsonb DEFAULT '{}', is_active boolean DEFAULT true,
+  design_schema jsonb DEFAULT '{}', validation_schema jsonb DEFAULT '{}',
+  created_by uuid, updated_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  CONSTRAINT threads_unique_target_visibility UNIQUE (target_type, target_id, visibility)
+);
+
+CREATE TABLE public.messages (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  type_id uuid NOT NULL, thread_id uuid NOT NULL,
+  content text NOT NULL, direction text DEFAULT 'outbound',
+  sequence integer NOT NULL, visibility text DEFAULT 'internal',
+  data jsonb DEFAULT '{}', is_active boolean DEFAULT true,
+  design_schema jsonb DEFAULT '{}', validation_schema jsonb DEFAULT '{}',
+  person_id uuid, created_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  UNIQUE(thread_id, sequence)
+);
+
+CREATE TABLE public.links (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  type_id uuid NOT NULL, account_id uuid NOT NULL, link_type_id uuid,
+  source_type text NOT NULL, source_id uuid NOT NULL,
+  target_type text NOT NULL, target_id uuid NOT NULL,
+  link_type text, metadata jsonb DEFAULT '{}',
+  data jsonb DEFAULT '{}', design_schema jsonb DEFAULT '{}', validation_schema jsonb DEFAULT '{}',
+  created_by uuid, updated_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  UNIQUE(source_type, source_id, target_type, target_id, link_type_id)
+);
+
+CREATE TABLE public.attachments (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  type_id uuid NOT NULL, account_id uuid NOT NULL,
+  filename text NOT NULL, file_size integer, mime_type text,
+  storage_path text, storage_provider text DEFAULT 'supabase',
+  metadata jsonb DEFAULT '{}', data jsonb DEFAULT '{}',
+  design_schema jsonb DEFAULT '{}', validation_schema jsonb DEFAULT '{}',
+  uploaded_by uuid, created_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.watchers (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  type_id uuid NOT NULL, account_id uuid,
+  target_type text NOT NULL, target_id uuid NOT NULL, person_id uuid NOT NULL,
+  watch_type text DEFAULT 'all', notification_level text DEFAULT 'all',
+  metadata jsonb DEFAULT '{}', data jsonb DEFAULT '{}',
+  design_schema jsonb DEFAULT '{}', validation_schema jsonb DEFAULT '{}',
+  created_by uuid, created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  UNIQUE(target_type, target_id, person_id)
+);
+
+-- ============================================
+-- ADMIN/AUTOMATION TABLES
+-- ============================================
+
+CREATE TABLE public.link_types (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  app_id uuid, slug text NOT NULL, name text NOT NULL,
+  description text, icon text, color text,
+  config jsonb DEFAULT '{}', is_active boolean DEFAULT true,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now(),
+  UNIQUE(app_id, slug)
+);
+
+CREATE TABLE public.pipelines (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  app_id uuid, account_id uuid, name text NOT NULL,
+  description text, trigger_type text, config jsonb DEFAULT '{}',
+  stages jsonb DEFAULT '[]', metadata jsonb DEFAULT '{}',
+  ownership text DEFAULT 'tenant', is_system boolean DEFAULT false,
+  is_active boolean DEFAULT true, created_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.pipeline_executions (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  pipeline_id uuid NOT NULL, account_id uuid NOT NULL,
+  status text DEFAULT 'pending', trigger_data jsonb DEFAULT '{}',
+  result jsonb DEFAULT '{}', error_message text,
+  started_at timestamptz, completed_at timestamptz, duration_ms integer,
+  created_by uuid, created_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.triggers (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  app_id uuid, account_id uuid, name text NOT NULL,
+  description text, trigger_type text NOT NULL, event_type text,
+  config jsonb DEFAULT '{}', pipeline_id uuid, metadata jsonb DEFAULT '{}',
+  ownership text DEFAULT 'tenant', is_system boolean DEFAULT false,
+  is_active boolean DEFAULT true, trigger_count integer DEFAULT 0,
+  last_triggered timestamptz, created_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.trigger_executions (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  trigger_id uuid NOT NULL, status text DEFAULT 'pending',
+  triggered_at timestamptz DEFAULT now(), started_at timestamptz,
+  completed_at timestamptz, trigger_data jsonb DEFAULT '{}',
+  result jsonb DEFAULT '{}', error_message text, duration_ms integer,
+  created_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.timers (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  app_id uuid, account_id uuid, name text NOT NULL,
+  description text, timer_type text NOT NULL, config jsonb DEFAULT '{}',
+  pipeline_id uuid, metadata jsonb DEFAULT '{}',
+  ownership text DEFAULT 'tenant', is_system boolean DEFAULT false,
+  is_active boolean DEFAULT true, last_execution timestamptz, next_execution timestamptz,
+  execution_count integer DEFAULT 0, success_count integer DEFAULT 0, failure_count integer DEFAULT 0,
+  created_by uuid, created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+-- ============================================
+-- SYSTEM TABLES (AI, Integrations, Logs, API Keys)
+-- ============================================
+
+CREATE TABLE public.ai_agents (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  app_id uuid, account_id uuid, name text NOT NULL,
+  description text, agent_type text NOT NULL, model_config jsonb DEFAULT '{}',
+  system_prompt text, tools jsonb DEFAULT '[]', capabilities jsonb DEFAULT '[]',
+  constraints jsonb DEFAULT '{}', metadata jsonb DEFAULT '{}',
+  ownership text DEFAULT 'tenant', is_system boolean DEFAULT false,
+  is_active boolean DEFAULT true, created_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.embeddings (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  account_id uuid NOT NULL, model_id text NOT NULL, document_id text NOT NULL,
+  chunk_index integer NOT NULL, content text NOT NULL, embedding vector(1536),
+  metadata jsonb DEFAULT '{}', created_at timestamptz DEFAULT now(),
+  UNIQUE(model_id, document_id, chunk_index)
+);
+
+CREATE TABLE public.integrations (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  app_id uuid, account_id uuid, name text NOT NULL,
+  description text, integration_type text NOT NULL, provider text,
+  version text, config jsonb DEFAULT '{}', credentials jsonb DEFAULT '{}',
+  metadata jsonb DEFAULT '{}', is_active boolean DEFAULT true,
+  ownership text DEFAULT 'tenant', is_system boolean DEFAULT false,
+  is_configured boolean DEFAULT false, created_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.prompt_configs (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  app_id uuid, account_id uuid, name text NOT NULL, slug text NOT NULL,
+  system_prompt text, context_template text, model text, temperature numeric,
+  max_tokens integer, is_multi_turn boolean DEFAULT false, max_history_messages integer,
+  confidence_threshold numeric, escalation_action text, escalation_target text,
+  output_mode text, output_field text, requires_review boolean DEFAULT false,
+  knowledge_sources jsonb DEFAULT '[]', available_tools jsonb DEFAULT '[]',
+  tool_constraints jsonb DEFAULT '{}', metadata jsonb DEFAULT '{}',
+  ownership text DEFAULT 'tenant', is_system boolean DEFAULT false,
+  is_active boolean DEFAULT true, created_by uuid,
+  created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.api_keys (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  integration_id uuid, account_id uuid, name text NOT NULL,
+  key_value text UNIQUE NOT NULL, key_prefix text NOT NULL,
+  key_type text NOT NULL, permissions jsonb DEFAULT '[]',
+  rate_limit integer DEFAULT 1000, is_active boolean DEFAULT true,
+  expires_at timestamptz, metadata jsonb DEFAULT '{}',
+  ownership text DEFAULT 'tenant', is_system boolean DEFAULT false,
+  machine_type text, is_internal boolean DEFAULT false, scopes text[] DEFAULT '{}',
+  created_by uuid, created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.api_key_usage_logs (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  api_key_id uuid NOT NULL, account_id uuid NOT NULL,
+  request_method text, request_path text, request_ip text, user_agent text,
+  response_status integer, response_size integer, duration_ms integer,
+  success boolean DEFAULT true, error_message text, metadata jsonb DEFAULT '{}',
+  created_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.logs (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  level text NOT NULL, message text NOT NULL, context jsonb DEFAULT '{}',
+  source text, source_type text, source_id uuid, person_id uuid, account_id uuid,
+  metadata jsonb DEFAULT '{}', created_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.actions (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  account_id uuid, name text NOT NULL, slug text NOT NULL,
+  description text, handler text NOT NULL, handler_module text DEFAULT 'functions',
+  config jsonb DEFAULT '{}', input_schema jsonb DEFAULT '{}', output_schema jsonb DEFAULT '{}',
+  ownership text DEFAULT 'tenant', is_system boolean DEFAULT false,
+  default_machine_principal_id uuid, required_scopes text[] DEFAULT '{}',
+  is_active boolean DEFAULT true, timeout_seconds integer DEFAULT 300,
+  retry_count integer DEFAULT 3, created_by uuid, created_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.schedules (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  account_id uuid, action_id uuid NOT NULL, name text NOT NULL,
+  schedule_type text NOT NULL, cron_expression text,
+  next_run_at timestamptz, last_run_at timestamptz,
+  ownership text DEFAULT 'tenant', is_system boolean DEFAULT false,
+  is_active boolean DEFAULT true, machine_principal_id uuid,
+  created_by uuid, created_at timestamptz DEFAULT now(), updated_at timestamptz DEFAULT now()
+);
+
+CREATE TABLE public.schedule_executions (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  schedule_id uuid NOT NULL, account_id uuid NOT NULL, machine_principal_id uuid,
+  status text DEFAULT 'pending', input_params jsonb DEFAULT '{}',
+  output_result jsonb DEFAULT '{}', error_message text, duration_ms integer,
+  created_at timestamptz DEFAULT now()
+);
+
+-- ============================================
+-- TEST TABLES
+-- ============================================
+
+CREATE TABLE public.test_runs (
+  id           uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  suite        text NOT NULL,
+  status       text NOT NULL,
+  started_at   timestamptz NOT NULL DEFAULT now(),
+  finished_at  timestamptz,
+  duration_ms  integer,
+  total        integer,
+  passed       integer,
+  failed       integer,
+  skipped      integer,
+  triggered_by text DEFAULT 'agent',
+  account_id   uuid REFERENCES public.accounts(id)
+);
+
+CREATE TABLE public.test_results (
+  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  run_id      uuid NOT NULL REFERENCES public.test_runs(id) ON DELETE CASCADE,
+  suite       text NOT NULL,
+  file        text,
+  describe    text,
+  name        text NOT NULL,
+  status      text NOT NULL,
+  duration_ms integer,
+  error       text,
+  created_at  timestamptz NOT NULL DEFAULT now()
+);
+
+-- ============================================
+-- ITEM PROGRESS
+-- ============================================
+
+CREATE TABLE public.item_progress (
+  id                uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  type_id           uuid NOT NULL,
+  account_id        uuid NOT NULL REFERENCES public.accounts(id) ON DELETE CASCADE,
+  app_id            uuid REFERENCES public.apps(id) ON DELETE SET NULL,
+  person_id         uuid NOT NULL REFERENCES public.people(id) ON DELETE CASCADE,
+  item_id           uuid NOT NULL REFERENCES public.items(id) ON DELETE CASCADE,
+  title             text,
+  description       text,
+  status            text NOT NULL DEFAULT 'not_started',
+  score             integer CHECK (score IS NULL OR (score >= 0 AND score <= 100)),
+  data              jsonb NOT NULL DEFAULT '{}',
+  is_active         boolean NOT NULL DEFAULT true,
+  design_schema     jsonb NOT NULL DEFAULT '{}',
+  validation_schema jsonb NOT NULL DEFAULT '{}',
+  created_by        uuid REFERENCES public.people(id) ON DELETE SET NULL,
+  updated_by        uuid REFERENCES public.people(id) ON DELETE SET NULL,
+  created_at        timestamptz NOT NULL DEFAULT now(),
+  updated_at        timestamptz NOT NULL DEFAULT now(),
+  UNIQUE (person_id, item_id)
+);
+
+-- ============================================
+-- WEBHOOK HANDLERS
+-- ============================================
+
+CREATE TABLE public.webhook_handlers (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  name VARCHAR(255) NOT NULL UNIQUE,
+  function_name VARCHAR(255) NOT NULL,
+  description TEXT,
+  events JSONB DEFAULT '[]'::jsonb,
+  account_id UUID REFERENCES public.accounts(id) ON DELETE CASCADE,
+  is_active BOOLEAN DEFAULT true,
+  created_at TIMESTAMPTZ DEFAULT now(),
+  updated_at TIMESTAMPTZ DEFAULT now(),
+  is_deleted BOOLEAN DEFAULT false,
+  deleted_at TIMESTAMPTZ
+);
+
+-- ============================================
+-- ACCOUNT HIERARCHY (from 005_functions.sql)
+-- ============================================
+
+CREATE TABLE public.account_paths (
+  ancestor_id uuid NOT NULL REFERENCES public.accounts(id) ON DELETE CASCADE,
+  descendant_id uuid NOT NULL REFERENCES public.accounts(id) ON DELETE CASCADE,
+  depth integer NOT NULL,
+  PRIMARY KEY (ancestor_id, descendant_id),
+  CHECK (ancestor_id != descendant_id),
+  CHECK (depth >= 1)
+);
+
+COMMENT ON TABLE public.account_paths IS 'Stores ancestor-descendant relationships for account hierarchy traversal';