teamcopilot 0.0.1

package/prisma/migrations/20260225033603_remove_workflow_metadata_user_fkeys/migration.sql

@@ -0,0 +1,18 @@
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_metadata" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "run_permission_mode" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL
+);
+INSERT INTO "new_workflow_metadata" ("approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug") SELECT "approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug" FROM "workflow_metadata";
+DROP TABLE "workflow_metadata";
+ALTER TABLE "new_workflow_metadata" RENAME TO "workflow_metadata";
+CREATE INDEX "workflow_metadata_created_by_user_id_idx" ON "workflow_metadata"("created_by_user_id");
+CREATE INDEX "workflow_metadata_approved_by_user_id_idx" ON "workflow_metadata"("approved_by_user_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260225043032_restore_workflow_metadata_user_fkeys/migration.sql

@@ -0,0 +1,20 @@
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_metadata" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "run_permission_mode" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "workflow_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_metadata" ("approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug") SELECT "approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug" FROM "workflow_metadata";
+DROP TABLE "workflow_metadata";
+ALTER TABLE "new_workflow_metadata" RENAME TO "workflow_metadata";
+CREATE INDEX "workflow_metadata_created_by_user_id_idx" ON "workflow_metadata"("created_by_user_id");
+CREATE INDEX "workflow_metadata_approved_by_user_id_idx" ON "workflow_metadata"("approved_by_user_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260225091423_add_workflow_approved_snapshots/migration.sql

@@ -0,0 +1,28 @@
+-- CreateTable
+CREATE TABLE "workflow_approved_snapshots" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "snapshot_hash" TEXT NOT NULL,
+    "file_count" INTEGER NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_approved_snapshots_workflow_slug_fkey" FOREIGN KEY ("workflow_slug") REFERENCES "workflow_metadata" ("workflow_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "workflow_approved_snapshot_files" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "workflow_slug" TEXT NOT NULL,
+    "relative_path" TEXT NOT NULL,
+    "content_kind" TEXT NOT NULL,
+    "text_content" TEXT,
+    "binary_content" BLOB,
+    "size_bytes" INTEGER NOT NULL,
+    "content_sha256" TEXT NOT NULL,
+    CONSTRAINT "workflow_approved_snapshot_files_workflow_slug_fkey" FOREIGN KEY ("workflow_slug") REFERENCES "workflow_approved_snapshots" ("workflow_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE INDEX "workflow_approved_snapshot_files_workflow_slug_idx" ON "workflow_approved_snapshot_files"("workflow_slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "workflow_approved_snapshot_files_workflow_slug_relative_path_key" ON "workflow_approved_snapshot_files"("workflow_slug", "relative_path");

package/prisma/migrations/20260226032121_add_is_approved_to_workflow_metadata/migration.sql

@@ -0,0 +1,21 @@
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_metadata" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "is_approved" BOOLEAN NOT NULL DEFAULT false,
+    "run_permission_mode" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "workflow_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_metadata" ("approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug") SELECT "approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug" FROM "workflow_metadata";
+DROP TABLE "workflow_metadata";
+ALTER TABLE "new_workflow_metadata" RENAME TO "workflow_metadata";
+CREATE INDEX "workflow_metadata_created_by_user_id_idx" ON "workflow_metadata"("created_by_user_id");
+CREATE INDEX "workflow_metadata_approved_by_user_id_idx" ON "workflow_metadata"("approved_by_user_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260226032444_undoes_last_db_change/migration.sql

@@ -0,0 +1,26 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `is_approved` on the `workflow_metadata` table. All the data in the column will be lost.
+
+*/
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_metadata" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "run_permission_mode" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "workflow_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_metadata" ("approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug") SELECT "approved_by_user_id", "created_at", "created_by_user_id", "run_permission_mode", "updated_at", "workflow_slug" FROM "workflow_metadata";
+DROP TABLE "workflow_metadata";
+ALTER TABLE "new_workflow_metadata" RENAME TO "workflow_metadata";
+CREATE INDEX "workflow_metadata_created_by_user_id_idx" ON "workflow_metadata"("created_by_user_id");
+CREATE INDEX "workflow_metadata_approved_by_user_id_idx" ON "workflow_metadata"("approved_by_user_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260227120000_remove_snapshot_hash_from_approved_snapshots/migration.sql

@@ -0,0 +1,16 @@
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_approved_snapshots" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "file_count" INTEGER NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_approved_snapshots_workflow_slug_fkey" FOREIGN KEY ("workflow_slug") REFERENCES "workflow_metadata" ("workflow_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_approved_snapshots" ("created_at", "file_count", "updated_at", "workflow_slug") SELECT "created_at", "file_count", "updated_at", "workflow_slug" FROM "workflow_approved_snapshots";
+DROP TABLE "workflow_approved_snapshots";
+ALTER TABLE "new_workflow_approved_snapshots" RENAME TO "workflow_approved_snapshots";
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+

package/prisma/migrations/20260228071125_adds_workspace_path_to_snapshot_table/migration.sql

@@ -0,0 +1,22 @@
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_approved_snapshot_files" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "workflow_slug" TEXT NOT NULL,
+    "workspace_path" TEXT NOT NULL DEFAULT '/Users/rishabhpoddar/Desktop/trythisapp/localtool/src/workspace_files',
+    "relative_path" TEXT NOT NULL,
+    "content_kind" TEXT NOT NULL,
+    "text_content" TEXT,
+    "binary_content" BLOB,
+    "size_bytes" INTEGER NOT NULL,
+    "content_sha256" TEXT NOT NULL,
+    CONSTRAINT "workflow_approved_snapshot_files_workflow_slug_fkey" FOREIGN KEY ("workflow_slug") REFERENCES "workflow_approved_snapshots" ("workflow_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_approved_snapshot_files" ("binary_content", "content_kind", "content_sha256", "id", "relative_path", "size_bytes", "text_content", "workflow_slug") SELECT "binary_content", "content_kind", "content_sha256", "id", "relative_path", "size_bytes", "text_content", "workflow_slug" FROM "workflow_approved_snapshot_files";
+DROP TABLE "workflow_approved_snapshot_files";
+ALTER TABLE "new_workflow_approved_snapshot_files" RENAME TO "workflow_approved_snapshot_files";
+CREATE INDEX "workflow_approved_snapshot_files_workflow_slug_idx" ON "workflow_approved_snapshot_files"("workflow_slug");
+CREATE UNIQUE INDEX "workflow_approved_snapshot_files_workflow_slug_workspace_path_relative_path_key" ON "workflow_approved_snapshot_files"("workflow_slug", "workspace_path", "relative_path");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260228071217_modifies_index_and_removes_default_value/migration.sql

@@ -0,0 +1,22 @@
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_approved_snapshot_files" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "workflow_slug" TEXT NOT NULL,
+    "workspace_path" TEXT NOT NULL,
+    "relative_path" TEXT NOT NULL,
+    "content_kind" TEXT NOT NULL,
+    "text_content" TEXT,
+    "binary_content" BLOB,
+    "size_bytes" INTEGER NOT NULL,
+    "content_sha256" TEXT NOT NULL,
+    CONSTRAINT "workflow_approved_snapshot_files_workflow_slug_fkey" FOREIGN KEY ("workflow_slug") REFERENCES "workflow_approved_snapshots" ("workflow_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_approved_snapshot_files" ("binary_content", "content_kind", "content_sha256", "id", "relative_path", "size_bytes", "text_content", "workflow_slug", "workspace_path") SELECT "binary_content", "content_kind", "content_sha256", "id", "relative_path", "size_bytes", "text_content", "workflow_slug", "workspace_path" FROM "workflow_approved_snapshot_files";
+DROP TABLE "workflow_approved_snapshot_files";
+ALTER TABLE "new_workflow_approved_snapshot_files" RENAME TO "workflow_approved_snapshot_files";
+CREATE INDEX "workflow_approved_snapshot_files_workspace_path_workflow_slug_idx" ON "workflow_approved_snapshot_files"("workspace_path", "workflow_slug");
+CREATE UNIQUE INDEX "workflow_approved_snapshot_files_workflow_slug_workspace_path_relative_path_key" ON "workflow_approved_snapshot_files"("workflow_slug", "workspace_path", "relative_path");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260228071710_undoes_previous/migration.sql

@@ -0,0 +1,27 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `workspace_path` on the `workflow_approved_snapshot_files` table. All the data in the column will be lost.
+
+*/
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_workflow_approved_snapshot_files" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "workflow_slug" TEXT NOT NULL,
+    "relative_path" TEXT NOT NULL,
+    "content_kind" TEXT NOT NULL,
+    "text_content" TEXT,
+    "binary_content" BLOB,
+    "size_bytes" INTEGER NOT NULL,
+    "content_sha256" TEXT NOT NULL,
+    CONSTRAINT "workflow_approved_snapshot_files_workflow_slug_fkey" FOREIGN KEY ("workflow_slug") REFERENCES "workflow_approved_snapshots" ("workflow_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_approved_snapshot_files" ("binary_content", "content_kind", "content_sha256", "id", "relative_path", "size_bytes", "text_content", "workflow_slug") SELECT "binary_content", "content_kind", "content_sha256", "id", "relative_path", "size_bytes", "text_content", "workflow_slug" FROM "workflow_approved_snapshot_files";
+DROP TABLE "workflow_approved_snapshot_files";
+ALTER TABLE "new_workflow_approved_snapshot_files" RENAME TO "workflow_approved_snapshot_files";
+CREATE INDEX "workflow_approved_snapshot_files_workflow_slug_idx" ON "workflow_approved_snapshot_files"("workflow_slug");
+CREATE UNIQUE INDEX "workflow_approved_snapshot_files_workflow_slug_relative_path_key" ON "workflow_approved_snapshot_files"("workflow_slug", "relative_path");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260228105022_add_must_change_password_first_login/migration.sql

@@ -0,0 +1,20 @@
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_users" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "email" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "role" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "password_hash" TEXT NOT NULL,
+    "must_change_password" BOOLEAN NOT NULL DEFAULT false,
+    "reset_token" TEXT,
+    "reset_token_expires_at" BIGINT
+);
+INSERT INTO "new_users" ("created_at", "email", "id", "name", "password_hash", "reset_token", "reset_token_expires_at", "role") SELECT "created_at", "email", "id", "name", "password_hash", "reset_token", "reset_token_expires_at", "role" FROM "users";
+DROP TABLE "users";
+ALTER TABLE "new_users" RENAME TO "users";
+CREATE UNIQUE INDEX "users_email_key" ON "users"("email");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260301115439_add_workflow_run_log_refs/migration.sql

@@ -0,0 +1,8 @@
+-- CreateTable
+CREATE TABLE "workflow_run_log_refs" (
+    "run_id" TEXT NOT NULL PRIMARY KEY,
+    "session_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_run_log_refs_run_id_fkey" FOREIGN KEY ("run_id") REFERENCES "workflow_runs" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);

package/prisma/migrations/20260301122557_add_workflow_aborted_sessions/migration.sql

@@ -0,0 +1,5 @@
+-- CreateTable
+CREATE TABLE "workflow_aborted_sessions" (
+    "session_id" TEXT NOT NULL PRIMARY KEY,
+    "created_at" BIGINT NOT NULL
+);

package/prisma/migrations/20260302045545_move_workflow_run_log_refs_into_workflow_runs/migration.sql

@@ -0,0 +1,17 @@
+/*
+  Warnings:
+
+  - You are about to drop the `workflow_run_log_refs` table. If the table is not empty, all the data it contains will be lost.
+
+*/
+-- AlterTable
+ALTER TABLE "workflow_runs" ADD COLUMN "message_id" TEXT;
+ALTER TABLE "workflow_runs" ADD COLUMN "session_id" TEXT;
+
+-- DropTable
+PRAGMA foreign_keys=off;
+DROP TABLE "workflow_run_log_refs";
+PRAGMA foreign_keys=on;
+
+-- CreateIndex
+CREATE INDEX "workflow_runs_session_id_message_id_idx" ON "workflow_runs"("session_id", "message_id");

package/prisma/migrations/20260303040318_add_skill_tables/migration.sql

@@ -0,0 +1,61 @@
+-- CreateTable
+CREATE TABLE "skill_access_permission_users" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "skill_slug" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    CONSTRAINT "skill_access_permission_users_skill_slug_fkey" FOREIGN KEY ("skill_slug") REFERENCES "skill_metadata" ("skill_slug") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "skill_access_permission_users_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "skill_metadata" (
+    "skill_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "access_permission_mode" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "skill_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "skill_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "skill_approved_snapshots" (
+    "skill_slug" TEXT NOT NULL PRIMARY KEY,
+    "file_count" INTEGER NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "skill_approved_snapshots_skill_slug_fkey" FOREIGN KEY ("skill_slug") REFERENCES "skill_metadata" ("skill_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "skill_approved_snapshot_files" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "skill_slug" TEXT NOT NULL,
+    "relative_path" TEXT NOT NULL,
+    "content_kind" TEXT NOT NULL,
+    "text_content" TEXT,
+    "binary_content" BLOB,
+    "size_bytes" INTEGER NOT NULL,
+    "content_sha256" TEXT NOT NULL,
+    CONSTRAINT "skill_approved_snapshot_files_skill_slug_fkey" FOREIGN KEY ("skill_slug") REFERENCES "skill_approved_snapshots" ("skill_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE INDEX "skill_access_permission_users_skill_slug_idx" ON "skill_access_permission_users"("skill_slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "skill_access_permission_users_skill_slug_user_id_key" ON "skill_access_permission_users"("skill_slug", "user_id");
+
+-- CreateIndex
+CREATE INDEX "skill_metadata_created_by_user_id_idx" ON "skill_metadata"("created_by_user_id");
+
+-- CreateIndex
+CREATE INDEX "skill_metadata_approved_by_user_id_idx" ON "skill_metadata"("approved_by_user_id");
+
+-- CreateIndex
+CREATE INDEX "skill_approved_snapshot_files_skill_slug_idx" ON "skill_approved_snapshot_files"("skill_slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "skill_approved_snapshot_files_skill_slug_relative_path_key" ON "skill_approved_snapshot_files"("skill_slug", "relative_path");

package/prisma/migrations/20260303051533_unify_resource_permissions/migration.sql

@@ -0,0 +1,97 @@
+/*
+  Warnings:
+
+  - You are about to drop the `skill_access_permission_users` table. If the table is not empty, all the data it contains will be lost.
+  - You are about to drop the `workflow_run_permission_users` table. If the table is not empty, all the data it contains will be lost.
+  - You are about to drop the column `access_permission_mode` on the `skill_metadata` table. All the data in the column will be lost.
+  - You are about to drop the column `run_permission_mode` on the `workflow_metadata` table. All the data in the column will be lost.
+
+*/
+-- CreateTable
+CREATE TABLE "resource_permissions" (
+    "resource_kind" TEXT NOT NULL,
+    "resource_slug" TEXT NOT NULL,
+    "permission_mode" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+
+    PRIMARY KEY ("resource_kind", "resource_slug")
+);
+
+-- CreateTable
+CREATE TABLE "resource_permission_users" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "resource_kind" TEXT NOT NULL,
+    "resource_slug" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    CONSTRAINT "resource_permission_users_resource_kind_resource_slug_fkey" FOREIGN KEY ("resource_kind", "resource_slug") REFERENCES "resource_permissions" ("resource_kind", "resource_slug") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "resource_permission_users_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- Backfill workflow permissions into unified tables
+INSERT INTO "resource_permissions" ("resource_kind", "resource_slug", "permission_mode", "created_at", "updated_at")
+SELECT "workflow", "workflow_slug", "run_permission_mode", "created_at", "updated_at"
+FROM "workflow_metadata";
+
+INSERT INTO "resource_permission_users" ("id", "resource_kind", "resource_slug", "user_id", "created_at")
+SELECT "wf-" || "id", "workflow", "workflow_slug", "user_id", "created_at"
+FROM "workflow_run_permission_users";
+
+-- Backfill skill permissions into unified tables
+INSERT INTO "resource_permissions" ("resource_kind", "resource_slug", "permission_mode", "created_at", "updated_at")
+SELECT "skill", "skill_slug", "access_permission_mode", "created_at", "updated_at"
+FROM "skill_metadata";
+
+INSERT INTO "resource_permission_users" ("id", "resource_kind", "resource_slug", "user_id", "created_at")
+SELECT "sk-" || "id", "skill", "skill_slug", "user_id", "created_at"
+FROM "skill_access_permission_users";
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_skill_metadata" (
+    "skill_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "skill_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "skill_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_skill_metadata" ("approved_by_user_id", "created_at", "created_by_user_id", "skill_slug", "updated_at") SELECT "approved_by_user_id", "created_at", "created_by_user_id", "skill_slug", "updated_at" FROM "skill_metadata";
+DROP TABLE "skill_metadata";
+ALTER TABLE "new_skill_metadata" RENAME TO "skill_metadata";
+CREATE INDEX "skill_metadata_created_by_user_id_idx" ON "skill_metadata"("created_by_user_id");
+CREATE INDEX "skill_metadata_approved_by_user_id_idx" ON "skill_metadata"("approved_by_user_id");
+CREATE TABLE "new_workflow_metadata" (
+    "workflow_slug" TEXT NOT NULL PRIMARY KEY,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+    CONSTRAINT "workflow_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "workflow_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_workflow_metadata" ("approved_by_user_id", "created_at", "created_by_user_id", "updated_at", "workflow_slug") SELECT "approved_by_user_id", "created_at", "created_by_user_id", "updated_at", "workflow_slug" FROM "workflow_metadata";
+DROP TABLE "workflow_metadata";
+ALTER TABLE "new_workflow_metadata" RENAME TO "workflow_metadata";
+CREATE INDEX "workflow_metadata_created_by_user_id_idx" ON "workflow_metadata"("created_by_user_id");
+CREATE INDEX "workflow_metadata_approved_by_user_id_idx" ON "workflow_metadata"("approved_by_user_id");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+
+-- Drop old permission tables after successful backfill
+PRAGMA foreign_keys=off;
+DROP TABLE "skill_access_permission_users";
+DROP TABLE "workflow_run_permission_users";
+PRAGMA foreign_keys=on;
+
+-- CreateIndex
+CREATE INDEX "resource_permissions_resource_slug_idx" ON "resource_permissions"("resource_slug");
+
+-- CreateIndex
+CREATE INDEX "resource_permission_users_resource_kind_resource_slug_idx" ON "resource_permission_users"("resource_kind", "resource_slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "resource_permission_users_resource_kind_resource_slug_user_id_key" ON "resource_permission_users"("resource_kind", "resource_slug", "user_id");

package/prisma/migrations/20260303064255_unify_resource_metadata_and_snapshots/migration.sql

@@ -0,0 +1,179 @@
+-- CreateTable
+CREATE TABLE "resource_metadata" (
+    "resource_kind" TEXT NOT NULL,
+    "resource_slug" TEXT NOT NULL,
+    "created_by_user_id" TEXT,
+    "approved_by_user_id" TEXT,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+
+    PRIMARY KEY ("resource_kind", "resource_slug"),
+    CONSTRAINT "resource_metadata_created_by_user_id_fkey" FOREIGN KEY ("created_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "resource_metadata_approved_by_user_id_fkey" FOREIGN KEY ("approved_by_user_id") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "resource_approved_snapshots" (
+    "resource_kind" TEXT NOT NULL,
+    "resource_slug" TEXT NOT NULL,
+    "file_count" INTEGER NOT NULL,
+    "created_at" BIGINT NOT NULL,
+    "updated_at" BIGINT NOT NULL,
+
+    PRIMARY KEY ("resource_kind", "resource_slug"),
+    CONSTRAINT "resource_approved_snapshots_resource_kind_resource_slug_fkey" FOREIGN KEY ("resource_kind", "resource_slug") REFERENCES "resource_metadata" ("resource_kind", "resource_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "resource_approved_snapshot_files" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "resource_kind" TEXT NOT NULL,
+    "resource_slug" TEXT NOT NULL,
+    "relative_path" TEXT NOT NULL,
+    "content_kind" TEXT NOT NULL,
+    "text_content" TEXT,
+    "binary_content" BLOB,
+    "size_bytes" INTEGER NOT NULL,
+    "content_sha256" TEXT NOT NULL,
+    CONSTRAINT "resource_approved_snapshot_files_resource_kind_resource_slug_fkey" FOREIGN KEY ("resource_kind", "resource_slug") REFERENCES "resource_approved_snapshots" ("resource_kind", "resource_slug") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE INDEX "resource_metadata_resource_slug_idx" ON "resource_metadata"("resource_slug");
+
+-- CreateIndex
+CREATE INDEX "resource_metadata_created_by_user_id_idx" ON "resource_metadata"("created_by_user_id");
+
+-- CreateIndex
+CREATE INDEX "resource_metadata_approved_by_user_id_idx" ON "resource_metadata"("approved_by_user_id");
+
+-- CreateIndex
+CREATE INDEX "resource_approved_snapshots_resource_slug_idx" ON "resource_approved_snapshots"("resource_slug");
+
+-- CreateIndex
+CREATE INDEX "resource_approved_snapshot_files_resource_kind_resource_slug_idx" ON "resource_approved_snapshot_files"("resource_kind", "resource_slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "resource_approved_snapshot_files_resource_kind_resource_slug_relative_path_key" ON "resource_approved_snapshot_files"("resource_kind", "resource_slug", "relative_path");
+
+-- Migrate workflow metadata/snapshots into shared resource tables
+INSERT OR IGNORE INTO "resource_metadata" (
+    "resource_kind",
+    "resource_slug",
+    "created_by_user_id",
+    "approved_by_user_id",
+    "created_at",
+    "updated_at"
+)
+SELECT
+    'workflow',
+    "workflow_slug",
+    "created_by_user_id",
+    "approved_by_user_id",
+    "created_at",
+    "updated_at"
+FROM "workflow_metadata";
+
+INSERT OR IGNORE INTO "resource_approved_snapshots" (
+    "resource_kind",
+    "resource_slug",
+    "file_count",
+    "created_at",
+    "updated_at"
+)
+SELECT
+    'workflow',
+    "workflow_slug",
+    "file_count",
+    "created_at",
+    "updated_at"
+FROM "workflow_approved_snapshots";
+
+INSERT OR IGNORE INTO "resource_approved_snapshot_files" (
+    "id",
+    "resource_kind",
+    "resource_slug",
+    "relative_path",
+    "content_kind",
+    "text_content",
+    "binary_content",
+    "size_bytes",
+    "content_sha256"
+)
+SELECT
+    "id",
+    'workflow',
+    "workflow_slug",
+    "relative_path",
+    "content_kind",
+    "text_content",
+    "binary_content",
+    "size_bytes",
+    "content_sha256"
+FROM "workflow_approved_snapshot_files";
+
+-- Migrate skill metadata/snapshots into shared resource tables
+INSERT OR IGNORE INTO "resource_metadata" (
+    "resource_kind",
+    "resource_slug",
+    "created_by_user_id",
+    "approved_by_user_id",
+    "created_at",
+    "updated_at"
+)
+SELECT
+    'skill',
+    "skill_slug",
+    "created_by_user_id",
+    "approved_by_user_id",
+    "created_at",
+    "updated_at"
+FROM "skill_metadata";
+
+INSERT OR IGNORE INTO "resource_approved_snapshots" (
+    "resource_kind",
+    "resource_slug",
+    "file_count",
+    "created_at",
+    "updated_at"
+)
+SELECT
+    'skill',
+    "skill_slug",
+    "file_count",
+    "created_at",
+    "updated_at"
+FROM "skill_approved_snapshots";
+
+INSERT OR IGNORE INTO "resource_approved_snapshot_files" (
+    "id",
+    "resource_kind",
+    "resource_slug",
+    "relative_path",
+    "content_kind",
+    "text_content",
+    "binary_content",
+    "size_bytes",
+    "content_sha256"
+)
+SELECT
+    "id",
+    'skill',
+    "skill_slug",
+    "relative_path",
+    "content_kind",
+    "text_content",
+    "binary_content",
+    "size_bytes",
+    "content_sha256"
+FROM "skill_approved_snapshot_files";
+
+-- Drop legacy duplicated tables
+PRAGMA foreign_keys=off;
+DROP TABLE "skill_approved_snapshot_files";
+DROP TABLE "skill_approved_snapshots";
+DROP TABLE "skill_metadata";
+DROP TABLE "workflow_approved_snapshot_files";
+DROP TABLE "workflow_approved_snapshots";
+DROP TABLE "workflow_metadata";
+PRAGMA foreign_keys=on;

package/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "sqlite"