teamcopilot 0.0.1

package/package.json

@@ -0,0 +1,86 @@
+{
+  "name": "teamcopilot",
+  "version": "0.0.1",
+  "description": "A shared AI Agent for Teams",
+  "homepage": "https://teamcopilot.ai",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rishabhpoddar/teamcopilot.git"
+  },
+  "main": "dist/index.js",
+  "bin": {
+    "teamcopilot": "bin/teamcopilot.js"
+  },
+  "files": [
+    "bin",
+    "dist",
+    "prisma",
+    ".env.example",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "clean": "rm -rf dist",
+    "check:unused:functions": "tsc --noEmit --noUnusedLocals --noUnusedParameters",
+    "check:unused:exports": "ts-prune -e -p tsconfig.json -i \"^src/types/shared/\"",
+    "check:unused": "npm run check:unused:functions && npm run check:unused:exports",
+    "build": "npm run clean && npm run check:unused && cd frontend && npm run build && cd .. && tsc && node scripts/copy-runtime-assets.mjs",
+    "start": "node dist/index.js",
+    "dev": "concurrently \"npm run dev:backend\" \"npm run dev:frontend\"",
+    "dev:backend": "ts-node-dev src/index.ts",
+    "dev:frontend": "cd frontend && npm run dev",
+    "create-user": "ts-node src/create-user.ts",
+    "delete-user": "ts-node src/delete-user.ts",
+    "change-user-role": "ts-node src/change-user-role.ts",
+    "reset-password": "ts-node src/reset-password.ts",
+    "rotate-jwt-secret": "ts-node src/rotate-jwt-secret.ts",
+    "prisma": "ts-node src/scripts/prisma-workspace.ts",
+    "prisma:migrate:dev": "npm run prisma -- migrate dev",
+    "prisma:migrate:reset": "npm run prisma -- migrate reset",
+    "prisma:migrate:deploy": "npm run prisma -- migrate deploy",
+    "prisma:studio": "npm run prisma -- studio",
+    "test": "node -r ts-node/register tests/run-tests.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "MIT",
+  "dependencies": {
+    "@opencode-ai/sdk": "1.1.65",
+    "@prisma/client": "^6.0.1",
+    "@slack/web-api": "^7.8.0",
+    "@supabase/supabase-js": "^2.47.8",
+    "@types/bcryptjs": "^2.4.6",
+    "@types/cookie-parser": "^1.4.8",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^5.0.0",
+    "@types/jsonwebtoken": "^9.0.9",
+    "@types/multer": "^2.0.0",
+    "@types/node-cron": "^3.0.11",
+    "axios": "^1.7.9",
+    "bcryptjs": "^3.0.3",
+    "cookie-parser": "^1.4.7",
+    "cors": "^2.8.5",
+    "cron": "^4.4.0",
+    "dotenv": "^16.4.7",
+    "express": "^4.21.2",
+    "ignore": "^7.0.5",
+    "jsonwebtoken": "^9.0.2",
+    "multer": "^2.1.0",
+    "node-cron": "^3.0.3",
+    "openai": "^4.95.1",
+    "opencode-ai": "1.1.65",
+    "prisma": "^6.0.1",
+    "ts-node": "^10.9.2",
+    "ts-node-dev": "^2.0.0",
+    "twitter-api-v2": "^1.22.0",
+    "typescript": "^5.7.2",
+    "uuid": "^11.1.0"
+  },
+  "devDependencies": {
+    "concurrently": "^9.2.1",
+    "ts-prune": "^0.10.3"
+  }
+}

package/prisma/migrations/20260203040755_init/migration.sql

@@ -0,0 +1,20 @@
+-- CreateTable
+CREATE TABLE "users" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "email" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "google_user_id" TEXT NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "key_value" (
+    "key" TEXT NOT NULL PRIMARY KEY,
+    "value" TEXT NOT NULL
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_email_key" ON "users"("email");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_google_user_id_key" ON "users"("google_user_id");

package/prisma/migrations/20260204034845_replace_google_auth_with_email_password/migration.sql

@@ -0,0 +1,25 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `google_user_id` on the `users` table. All the data in the column will be lost.
+  - Added the required column `password_hash` to the `users` table without a default value. This is not possible if the table is not empty.
+
+*/
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_users" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "email" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "password_hash" TEXT NOT NULL,
+    "reset_token" TEXT,
+    "reset_token_expires_at" BIGINT
+);
+INSERT INTO "new_users" ("created_at", "email", "id", "name") SELECT "created_at", "email", "id", "name" FROM "users";
+DROP TABLE "users";
+ALTER TABLE "new_users" RENAME TO "users";
+CREATE UNIQUE INDEX "users_email_key" ON "users"("email");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260207022226_add_user_role/migration.sql

@@ -0,0 +1,25 @@
+/*
+  Warnings:
+
+  - Added the required column `role` to the `users` table without a default value. This is not possible if the table is not empty.
+
+*/
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_users" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "email" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "role" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "password_hash" TEXT NOT NULL,
+    "reset_token" TEXT,
+    "reset_token_expires_at" BIGINT
+);
+INSERT INTO "new_users" ("created_at", "email", "id", "name", "role", "password_hash", "reset_token", "reset_token_expires_at") SELECT "created_at", "email", "id", "name", 'Engineer', "password_hash", "reset_token", "reset_token_expires_at" FROM "users";
+DROP TABLE "users";
+ALTER TABLE "new_users" RENAME TO "users";
+CREATE UNIQUE INDEX "users_email_key" ON "users"("email");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260210161254_add_workflow_runs/migration.sql

@@ -0,0 +1,16 @@
+-- CreateTable
+CREATE TABLE "workflow_runs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "workflow_slug" TEXT NOT NULL,
+    "workflow_name" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "started_at" BIGINT NOT NULL,
+    "completed_at" BIGINT,
+    "args" TEXT,
+    "error_message" TEXT,
+    CONSTRAINT "workflow_runs_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE INDEX "workflow_runs_started_at_idx" ON "workflow_runs"("started_at");

package/prisma/migrations/20260211050606_adds_workflow_table/migration.sql

@@ -0,0 +1,40 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `user_id` on the `workflow_runs` table. All the data in the column will be lost.
+  - You are about to drop the column `workflow_name` on the `workflow_runs` table. All the data in the column will be lost.
+  - You are about to drop the column `workflow_slug` on the `workflow_runs` table. All the data in the column will be lost.
+  - Added the required column `ran_by_user_id` to the `workflow_runs` table without a default value. This is not possible if the table is not empty.
+  - Added the required column `workflow_id` to the `workflow_runs` table without a default value. This is not possible if the table is not empty.
+
+*/
+-- CreateTable
+CREATE TABLE "workflows" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "slug" TEXT NOT NULL,
+    "approved_by_user_id" TEXT
+);
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_runs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "ran_by_user_id" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "started_at" BIGINT NOT NULL,
+    "completed_at" BIGINT,
+    "args" TEXT,
+    "error_message" TEXT,
+    "workflow_id" TEXT NOT NULL,
+    CONSTRAINT "workflow_runs_workflow_id_fkey" FOREIGN KEY ("workflow_id") REFERENCES "workflows" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_runs" ("args", "completed_at", "error_message", "id", "started_at", "status") SELECT "args", "completed_at", "error_message", "id", "started_at", "status" FROM "workflow_runs";
+DROP TABLE "workflow_runs";
+ALTER TABLE "new_workflow_runs" RENAME TO "workflow_runs";
+CREATE INDEX "workflow_runs_started_at_idx" ON "workflow_runs"("started_at");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "workflows_slug_key" ON "workflows"("slug");

package/prisma/migrations/20260211050750_adds_fkey_constraint/migration.sql

@@ -0,0 +1,21 @@
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_runs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "ran_by_user_id" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "started_at" BIGINT NOT NULL,
+    "completed_at" BIGINT,
+    "args" TEXT,
+    "error_message" TEXT,
+    "workflow_id" TEXT NOT NULL,
+    CONSTRAINT "workflow_runs_workflow_id_fkey" FOREIGN KEY ("workflow_id") REFERENCES "workflows" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "workflow_runs_ran_by_user_id_fkey" FOREIGN KEY ("ran_by_user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_runs" ("args", "completed_at", "error_message", "id", "ran_by_user_id", "started_at", "status", "workflow_id") SELECT "args", "completed_at", "error_message", "id", "ran_by_user_id", "started_at", "status", "workflow_id" FROM "workflow_runs";
+DROP TABLE "workflow_runs";
+ALTER TABLE "new_workflow_runs" RENAME TO "workflow_runs";
+CREATE INDEX "workflow_runs_started_at_idx" ON "workflow_runs"("started_at");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260211051912_removes_workflow_table/migration.sql

@@ -0,0 +1,34 @@
+/*
+  Warnings:
+
+  - You are about to drop the `workflows` table. If the table is not empty, all the data it contains will be lost.
+
+*/
+-- DropIndex
+DROP INDEX "workflows_slug_key";
+
+-- DropTable
+PRAGMA foreign_keys=off;
+DROP TABLE "workflows";
+PRAGMA foreign_keys=on;
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_runs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "ran_by_user_id" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "started_at" BIGINT NOT NULL,
+    "completed_at" BIGINT,
+    "args" TEXT,
+    "error_message" TEXT,
+    "workflow_id" TEXT NOT NULL,
+    CONSTRAINT "workflow_runs_ran_by_user_id_fkey" FOREIGN KEY ("ran_by_user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_runs" ("args", "completed_at", "error_message", "id", "ran_by_user_id", "started_at", "status", "workflow_id") SELECT "args", "completed_at", "error_message", "id", "ran_by_user_id", "started_at", "status", "workflow_id" FROM "workflow_runs";
+DROP TABLE "workflow_runs";
+ALTER TABLE "new_workflow_runs" RENAME TO "workflow_runs";
+CREATE INDEX "workflow_runs_started_at_idx" ON "workflow_runs"("started_at");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260211052238_changes_workflow_id_to_slug/migration.sql

@@ -0,0 +1,27 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `workflow_id` on the `workflow_runs` table. All the data in the column will be lost.
+  - Added the required column `workflow_slug` to the `workflow_runs` table without a default value. This is not possible if the table is not empty.
+
+*/
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_runs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "ran_by_user_id" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "started_at" BIGINT NOT NULL,
+    "completed_at" BIGINT,
+    "args" TEXT,
+    "error_message" TEXT,
+    "workflow_slug" TEXT NOT NULL,
+    CONSTRAINT "workflow_runs_ran_by_user_id_fkey" FOREIGN KEY ("ran_by_user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_runs" ("args", "completed_at", "error_message", "id", "ran_by_user_id", "started_at", "status") SELECT "args", "completed_at", "error_message", "id", "ran_by_user_id", "started_at", "status" FROM "workflow_runs";
+DROP TABLE "workflow_runs";
+ALTER TABLE "new_workflow_runs" RENAME TO "workflow_runs";
+CREATE INDEX "workflow_runs_started_at_idx" ON "workflow_runs"("started_at");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260212051912_add_output_to_workflow_runs/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "workflow_runs" ADD COLUMN "output" TEXT;

package/prisma/migrations/20260213073006_add_chat_sessions/migration.sql

@@ -0,0 +1,13 @@
+-- CreateTable
+CREATE TABLE "chat_sessions" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "user_id" TEXT NOT NULL,
+    "opencode_session_id" TEXT NOT NULL,
+    "title" TEXT,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "chat_sessions_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "chat_sessions_opencode_session_id_key" ON "chat_sessions"("opencode_session_id");

package/prisma/migrations/20260216053202_add_chat_sessions_opencode_session_id_idx/migration.sql

@@ -0,0 +1,2 @@
+-- CreateIndex
+CREATE INDEX "chat_sessions_opencode_session_id_idx" ON "chat_sessions"("opencode_session_id");

package/prisma/migrations/20260216053237_drop_redundant_chat_sessions_opencode_idx/migration.sql

@@ -0,0 +1,2 @@
+-- DropIndex
+DROP INDEX "chat_sessions_opencode_session_id_idx";

package/prisma/migrations/20260219060705_makes/migration.sql

@@ -0,0 +1,24 @@
+/*
+  Warnings:
+
+  - Made the column `title` on table `chat_sessions` required. This step will fail if there are existing NULL values in that column.
+
+*/
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_chat_sessions" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "user_id" TEXT NOT NULL,
+    "opencode_session_id" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "chat_sessions_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_chat_sessions" ("created_at", "id", "opencode_session_id", "title", "updated_at", "user_id") SELECT "created_at", "id", "opencode_session_id", "title", "updated_at", "user_id" FROM "chat_sessions";
+DROP TABLE "chat_sessions";
+ALTER TABLE "new_chat_sessions" RENAME TO "chat_sessions";
+CREATE UNIQUE INDEX "chat_sessions_opencode_session_id_key" ON "chat_sessions"("opencode_session_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260222040542_add_workflow_execution_permissions/migration.sql

@@ -0,0 +1,18 @@
+-- CreateTable
+CREATE TABLE "workflow_execution_permissions" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "opencode_session_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "call_id" TEXT NOT NULL,
+    "workflow_slug" TEXT NOT NULL,
+    "args" TEXT,
+    "status" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "responded_at" BIGINT
+);
+
+-- CreateIndex
+CREATE INDEX "workflow_execution_permissions_opencode_session_id_status_idx" ON "workflow_execution_permissions"("opencode_session_id", "status");
+
+-- CreateIndex
+CREATE INDEX "workflow_execution_permissions_id_status_idx" ON "workflow_execution_permissions"("id", "status");

package/prisma/migrations/20260222040815_remove_workflow_execution_permissions/migration.sql

@@ -0,0 +1,10 @@
+/*
+  Warnings:
+
+  - You are about to drop the `workflow_execution_permissions` table. If the table is not empty, all the data it contains will be lost.
+
+*/
+-- DropTable
+PRAGMA foreign_keys=off;
+DROP TABLE "workflow_execution_permissions";
+PRAGMA foreign_keys=on;

package/prisma/migrations/20260222041348_add_workflow_execution_permissions_final/migration.sql

@@ -0,0 +1,17 @@
+-- CreateTable
+CREATE TABLE "workflow_execution_permissions" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "opencode_session_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "workflow_slug" TEXT NOT NULL,
+    "args" TEXT,
+    "status" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "responded_at" BIGINT
+);
+
+-- CreateIndex
+CREATE INDEX "workflow_execution_permissions_opencode_session_id_status_idx" ON "workflow_execution_permissions"("opencode_session_id", "status");
+
+-- CreateIndex
+CREATE INDEX "workflow_execution_permissions_id_status_idx" ON "workflow_execution_permissions"("id", "status");

package/prisma/migrations/20260222041741_rename_to_tool_execution_permissions/migration.sql

@@ -0,0 +1,30 @@
+/*
+  Warnings:
+
+  - You are about to drop the `workflow_execution_permissions` table. If the table is not empty, all the data it contains will be lost.
+
+*/
+-- DropTable
+PRAGMA foreign_keys=off;
+DROP TABLE "workflow_execution_permissions";
+PRAGMA foreign_keys=on;
+
+-- CreateTable
+CREATE TABLE "tool_execution_permissions" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "opencode_session_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "call_id" TEXT NOT NULL,
+    "tool_name" TEXT NOT NULL,
+    "description" TEXT NOT NULL,
+    "params" TEXT,
+    "status" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "responded_at" BIGINT
+);
+
+-- CreateIndex
+CREATE INDEX "tool_execution_permissions_opencode_session_id_status_idx" ON "tool_execution_permissions"("opencode_session_id", "status");
+
+-- CreateIndex
+CREATE INDEX "tool_execution_permissions_id_status_idx" ON "tool_execution_permissions"("id", "status");

package/prisma/migrations/20260222041826_simplify_tool_execution_permissions/migration.sql

@@ -0,0 +1,29 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `call_id` on the `tool_execution_permissions` table. All the data in the column will be lost.
+  - You are about to drop the column `description` on the `tool_execution_permissions` table. All the data in the column will be lost.
+  - You are about to drop the column `message_id` on the `tool_execution_permissions` table. All the data in the column will be lost.
+  - You are about to drop the column `params` on the `tool_execution_permissions` table. All the data in the column will be lost.
+  - You are about to drop the column `tool_name` on the `tool_execution_permissions` table. All the data in the column will be lost.
+  - Added the required column `opencode_permission_id` to the `tool_execution_permissions` table without a default value. This is not possible if the table is not empty.
+
+*/
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_tool_execution_permissions" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "opencode_permission_id" TEXT NOT NULL,
+    "opencode_session_id" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "responded_at" BIGINT
+);
+INSERT INTO "new_tool_execution_permissions" ("created_at", "id", "opencode_session_id", "responded_at", "status") SELECT "created_at", "id", "opencode_session_id", "responded_at", "status" FROM "tool_execution_permissions";
+DROP TABLE "tool_execution_permissions";
+ALTER TABLE "new_tool_execution_permissions" RENAME TO "tool_execution_permissions";
+CREATE INDEX "tool_execution_permissions_opencode_session_id_status_idx" ON "tool_execution_permissions"("opencode_session_id", "status");
+CREATE INDEX "tool_execution_permissions_opencode_permission_id_idx" ON "tool_execution_permissions"("opencode_permission_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260222041950_add_fields_for_standalone_permissions/migration.sql

@@ -0,0 +1,32 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `opencode_permission_id` on the `tool_execution_permissions` table. All the data in the column will be lost.
+  - Added the required column `call_id` to the `tool_execution_permissions` table without a default value. This is not possible if the table is not empty.
+  - Added the required column `message_id` to the `tool_execution_permissions` table without a default value. This is not possible if the table is not empty.
+  - Added the required column `patterns` to the `tool_execution_permissions` table without a default value. This is not possible if the table is not empty.
+  - Added the required column `tool_name` to the `tool_execution_permissions` table without a default value. This is not possible if the table is not empty.
+
+*/
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_tool_execution_permissions" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "opencode_session_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "call_id" TEXT NOT NULL,
+    "tool_name" TEXT NOT NULL,
+    "patterns" TEXT NOT NULL,
+    "metadata" TEXT,
+    "status" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "responded_at" BIGINT
+);
+INSERT INTO "new_tool_execution_permissions" ("created_at", "id", "opencode_session_id", "responded_at", "status") SELECT "created_at", "id", "opencode_session_id", "responded_at", "status" FROM "tool_execution_permissions";
+DROP TABLE "tool_execution_permissions";
+ALTER TABLE "new_tool_execution_permissions" RENAME TO "tool_execution_permissions";
+CREATE INDEX "tool_execution_permissions_opencode_session_id_status_idx" ON "tool_execution_permissions"("opencode_session_id", "status");
+CREATE INDEX "tool_execution_permissions_id_status_idx" ON "tool_execution_permissions"("id", "status");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260222042954_simplify_tool_permissions_table/migration.sql

@@ -0,0 +1,27 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `metadata` on the `tool_execution_permissions` table. All the data in the column will be lost.
+  - You are about to drop the column `patterns` on the `tool_execution_permissions` table. All the data in the column will be lost.
+  - You are about to drop the column `tool_name` on the `tool_execution_permissions` table. All the data in the column will be lost.
+
+*/
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_tool_execution_permissions" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "opencode_session_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "call_id" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "responded_at" BIGINT
+);
+INSERT INTO "new_tool_execution_permissions" ("call_id", "created_at", "id", "message_id", "opencode_session_id", "responded_at", "status") SELECT "call_id", "created_at", "id", "message_id", "opencode_session_id", "responded_at", "status" FROM "tool_execution_permissions";
+DROP TABLE "tool_execution_permissions";
+ALTER TABLE "new_tool_execution_permissions" RENAME TO "tool_execution_permissions";
+CREATE INDEX "tool_execution_permissions_opencode_session_id_status_idx" ON "tool_execution_permissions"("opencode_session_id", "status");
+CREATE UNIQUE INDEX "tool_execution_permissions_opencode_session_id_message_id_call_id_key" ON "tool_execution_permissions"("opencode_session_id", "message_id", "call_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260223073902_add_workflow_run_permissions_tables/migration.sql

@@ -0,0 +1,23 @@
+-- CreateTable
+CREATE TABLE "workflow_run_permissions" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "mode" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "workflow_run_permission_users" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "workflow_slug" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_run_permission_users_workflow_slug_fkey" FOREIGN KEY ("workflow_slug") REFERENCES "workflow_run_permissions" ("workflow_slug") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "workflow_run_permission_users_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE INDEX "workflow_run_permission_users_workflow_slug_idx" ON "workflow_run_permission_users"("workflow_slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "workflow_run_permission_users_workflow_slug_user_id_key" ON "workflow_run_permission_users"("workflow_slug", "user_id");

package/prisma/migrations/20260225025151_add_workflow_metadata/migration.sql

@@ -0,0 +1,16 @@
+-- CreateTable
+CREATE TABLE "workflow_metadata" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "workflow_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE INDEX "workflow_metadata_created_by_user_id_idx" ON "workflow_metadata"("created_by_user_id");
+
+-- CreateIndex
+CREATE INDEX "workflow_metadata_approved_by_user_id_idx" ON "workflow_metadata"("approved_by_user_id");

package/prisma/migrations/20260225031035_merge_workflow_permissions_into_metadata/migration.sql

@@ -0,0 +1,44 @@
+/*
+  Warnings:
+
+  - You are about to drop the `workflow_run_permissions` table. If the table is not empty, all the data it contains will be lost.
+
+*/
+-- DropTable
+PRAGMA foreign_keys=off;
+DROP TABLE "workflow_run_permissions";
+PRAGMA foreign_keys=on;
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_metadata" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "run_permission_mode" TEXT NOT NULL DEFAULT 'restricted',
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "workflow_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_metadata" ("approved_by_user_id", "created_at", "created_by_user_id", "updated_at", "workflow_slug") SELECT "approved_by_user_id", "created_at", "created_by_user_id", "updated_at", "workflow_slug" FROM "workflow_metadata";
+DROP TABLE "workflow_metadata";
+ALTER TABLE "new_workflow_metadata" RENAME TO "workflow_metadata";
+CREATE INDEX "workflow_metadata_created_by_user_id_idx" ON "workflow_metadata"("created_by_user_id");
+CREATE INDEX "workflow_metadata_approved_by_user_id_idx" ON "workflow_metadata"("approved_by_user_id");
+CREATE TABLE "new_workflow_run_permission_users" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "workflow_slug" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_run_permission_users_workflow_slug_fkey" FOREIGN KEY ("workflow_slug") REFERENCES "workflow_metadata" ("workflow_slug") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "workflow_run_permission_users_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_run_permission_users" ("created_at", "id", "user_id", "workflow_slug") SELECT "created_at", "id", "user_id", "workflow_slug" FROM "workflow_run_permission_users";
+DROP TABLE "workflow_run_permission_users";
+ALTER TABLE "new_workflow_run_permission_users" RENAME TO "workflow_run_permission_users";
+CREATE INDEX "workflow_run_permission_users_workflow_slug_idx" ON "workflow_run_permission_users"("workflow_slug");
+CREATE UNIQUE INDEX "workflow_run_permission_users_workflow_slug_user_id_key" ON "workflow_run_permission_users"("workflow_slug", "user_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260225031752_removes_default_for_run_permission_mode/migration.sql

@@ -0,0 +1,20 @@
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_metadata" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "run_permission_mode" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "workflow_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_metadata" ("approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug") SELECT "approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug" FROM "workflow_metadata";
+DROP TABLE "workflow_metadata";
+ALTER TABLE "new_workflow_metadata" RENAME TO "workflow_metadata";
+CREATE INDEX "workflow_metadata_created_by_user_id_idx" ON "workflow_metadata"("created_by_user_id");
+CREATE INDEX "workflow_metadata_approved_by_user_id_idx" ON "workflow_metadata"("approved_by_user_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;