ysk-omni 1.0.0

package/docs/zh/media.md

@@ -0,0 +1,38 @@
+# 媒體
+
+圖像、影片、語音、轉錄走獨立 `/v1` 路由（以及 Admin **媒體庫**工作室），不是 llama-server 對話。
+
+## Worker
+
+若只跑一個 worker 行程，四個網址可指向同一主機：
+
+```bash
+export OMNI_IMAGE_URL=http://127.0.0.1:3870
+export OMNI_TTS_URL=http://127.0.0.1:3870
+export OMNI_STT_URL=http://127.0.0.1:3870
+export OMNI_VIDEO_URL=http://127.0.0.1:3870
+```
+
+小型真實權重 worker（Piper、faster-whisper、可選 diffusion／T2V）：
+
+```bash
+python3.12 -m venv ~/.ysk-omni/venvs/tiny-media
+# pip：faster-whisper piper-tts pillow torch diffusers …
+TINY_WORKER_PORT=3870 python scripts/tiny-media-worker.py
+```
+
+`TINY_MEDIA_FAKE=1` 提供合成 wav／png（CI）。未設圖像／TTS／STT 網址 → **501** `engine_unconfigured`。
+
+## 格式
+
+工作室與 API 接受輸出副檔名（`png`、`jpeg`、`wav`、`mp3`、`mp4` 等）。worker 產出其他容器時，閘道用 **ffmpeg** 轉換。
+
+影片是真實 T2V 管線（例如 Zeroscope UNet3D），不是靜態圖幻燈片。
+
+## 工作室
+
+Admin → 媒體庫：圖像、影片、語音、轉錄。語音需要提示；轉錄需要附加音訊。對話操場在選擇媒體模型時以同一方式轉送。
+
+## 權限
+
+公開 `/v1` 媒體需要 **agent** 或 **admin** 金鑰。safe 用戶金鑰會收到 `media_forbidden`。

package/docs/zh/operations.md

@@ -0,0 +1,40 @@
+# 維運
+
+## 健康
+
+```bash
+ysk-omni doctor
+ysk-omni status
+curl -sS http://127.0.0.1:3850/health
+curl -sS http://127.0.0.1:3850/ready
+```
+
+`/ready` 檢查 SQLite，以及 `llama-server` 是否在 PATH。
+
+## 行程管理
+
+```bash
+ysk-omni start --pm2
+ysk-omni restart --pm2
+ysk-omni logs -n 80
+ysk-omni logs clear
+```
+
+Admin → PM2 可檢視同一行程（`ysk-omni`）。在該頁改連接埠會重寫設定並重啟。
+
+## 反向代理
+
+將 `TRUST_PROXY` 設為跳數（Cloudflare → nginx → 應用＝`2`）。`PROXY_IP_SOURCE` 決定如何讀取用戶 IP，讓封鎖與審計使用真實位址。
+
+## 更新
+
+```bash
+ysk-omni update --check
+ysk-omni update
+```
+
+Admin → 系統狀態 → 套件可對比 npm／GitHub 並一鍵更新（API 會短暫中斷）。
+
+## 連接埠被佔用
+
+`doctor` 會報告 EADDRINUSE。停掉多餘執行器（`ysk-omni stop` 或 PM2 stop），只留一個行程佔用 :3850。

package/docs/zh/runtimes.md

@@ -0,0 +1,20 @@
+# 執行環境
+
+Admin **執行環境**按**主機作業系統**（macOS、Linux、Windows）列出推論工具：已安裝、缺失、如何安裝。
+
+## 一鍵安裝
+
+有允許方案的卡片有 **安裝**。閘道會依本機 OS 執行 Homebrew、pip、winget 或 Docker。
+
+**解除安裝**會先確認，再依方案還原。
+
+```bash
+ysk-omni runtimes
+ysk-omni runtimes install llamacpp
+ysk-omni runtimes install ffmpeg
+ysk-omni runtimes uninstall llamacpp
+```
+
+Runtime id 包括 `llamacpp`、`ffmpeg`、`mlx` 及頁面上列出的其他項目。
+
+目錄 **Load** 仍需要二進位在 `PATH`（或 `OMNI_LLAMA_SERVER`）。若 `doctor` 報告缺少 llama-server，請先在此安裝。

package/package.json

@@ -0,0 +1,108 @@
+{
+  "name": "ysk-omni",
+  "version": "1.0.0",
+  "description": "YSK Omni — local models behind an OpenAI-compatible gateway, with Admin panel and CLI",
+  "keywords": [
+    "openai",
+    "openai-compatible",
+    "cli",
+    "gateway",
+    "huggingface",
+    "ysk-omni",
+    "ysko"
+  ],
+  "homepage": "https://github.com/yanshekki/ysk-omni",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/yanshekki/ysk-omni.git"
+  },
+  "bugs": {
+    "url": "https://github.com/yanshekki/ysk-omni/issues"
+  },
+  "license": "MIT",
+  "author": "yanshekki",
+  "main": "dist/server.js",
+  "bin": {
+    "ysk-omni": "dist/cli/index.js",
+    "ysko": "dist/cli/index.js"
+  },
+  "files": [
+    "dist",
+    "prisma",
+    "public",
+    "scripts",
+    "README.md",
+    "README-ZH.md",
+    "docs",
+    "LICENSE",
+    ".env.example"
+  ],
+  "scripts": {
+    "dev": "tsx watch src/server.ts",
+    "dev:admin": "vite --config admin/vite.config.ts",
+    "build:admin": "vite build --config admin/vite.config.ts",
+    "build": "rm -rf dist && node scripts/generate-allowed-extensions.cjs && npx prisma@6.5.0 generate && tsc -p tsconfig.json && node -e \"require('fs').chmodSync('dist/cli/index.js',0o755)\" && npm run build:admin",
+    "start": "node dist/server.js",
+    "test": "vitest run",
+    "test:admin": "vitest run --project admin-node --project admin-dom",
+    "test:admin:l1": "vitest run --project admin-node tests/admin/unit/l1",
+    "test:admin:l2": "vitest run --project admin-node tests/admin/unit/l2",
+    "test:admin:l3": "vitest run --project admin-dom",
+    "test:admin:watch": "vitest --project admin-node --project admin-dom",
+    "test:api": "vitest run --project server tests/integration/admin tests/integration/v1 tests/integration/admin.routes.test.ts tests/integration/admin.routes.full.test.ts tests/integration/v1.*.test.ts tests/integration/health.routes.test.ts",
+    "test:cli": "vitest run --project server tests/unit/cli tests/unit/cli-*.test.ts tests/integration/cli.smoke.test.ts",
+    "test:registry": "vitest run --project server tests/integration/admin/routes.registry.test.ts tests/integration/v1/routes.registry.test.ts tests/unit/cli/registry.test.ts && vitest run --project admin-node tests/admin/contract",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck:admin": "tsc -p admin/tsconfig.json --noEmit",
+    "lint": "eslint \"src/**/*.ts\" \"tests/**/*.ts\" \"admin/src/**/*.ts\"",
+    "lint:fix": "eslint \"src/**/*.ts\" \"tests/**/*.ts\" \"admin/src/**/*.ts\" --fix",
+    "prisma:generate": "npx prisma@6.5.0 generate",
+    "prisma:migrate": "mkdir -p data && npx prisma@6.5.0 migrate dev",
+    "prisma:deploy": "mkdir -p data && npx prisma@6.5.0 migrate deploy",
+    "db:setup": "mkdir -p data && npx prisma@6.5.0 migrate deploy && tsx prisma/seed.ts",
+    "seed": "tsx prisma/seed.ts",
+    "smoke": "bash scripts/smoke.sh",
+    "prepare": "node scripts/prepare.cjs",
+    "postinstall": "node scripts/postinstall.cjs",
+    "prepublishOnly": "npm run build"
+  },
+  "prisma": {
+    "seed": "tsx prisma/seed.ts"
+  },
+  "dependencies": {
+    "@prisma/client": "6.5.0",
+    "commander": "^13.1.0",
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.7",
+    "execa": "5.1.1",
+    "express": "^4.21.2",
+    "express-rate-limit": "^7.5.0",
+    "helmet": "^8.0.0",
+    "multer": "^1.4.5-lts.1",
+    "pino": "^9.6.0",
+    "pino-http": "^10.4.0",
+    "prisma": "6.5.0",
+    "zod": "^3.24.2"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.5",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/multer": "^1.4.12",
+    "@types/node": "^22.13.10",
+    "@vitest/coverage-v8": "^3.0.9",
+    "eslint": "^9.39.5",
+    "happy-dom": "^15.11.7",
+    "pino-pretty": "^13.0.0",
+    "tsx": "^4.19.3",
+    "typescript": "5.8",
+    "typescript-eslint": "^8.64.0",
+    "vite": "^6.4.3",
+    "vitest": "^3.0.9"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

package/prisma/migrations/20260714084159_init_sqlite/migration.sql

@@ -0,0 +1,106 @@
+-- CreateTable
+CREATE TABLE "api_keys" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "keyPrefix" TEXT NOT NULL,
+    "keyHash" TEXT NOT NULL,
+    "role" TEXT NOT NULL DEFAULT 'client',
+    "isActive" BOOLEAN NOT NULL DEFAULT true,
+    "rateLimit" INTEGER NOT NULL DEFAULT 60,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "lastUsedAt" DATETIME
+);
+
+-- CreateTable
+CREATE TABLE "chat_requests" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "requestId" TEXT NOT NULL,
+    "apiKeyId" TEXT NOT NULL,
+    "model" TEXT NOT NULL,
+    "stream" BOOLEAN NOT NULL DEFAULT false,
+    "status" TEXT NOT NULL,
+    "durationMs" INTEGER,
+    "grokSessionId" TEXT,
+    "promptCiphertext" BLOB NOT NULL,
+    "promptIv" BLOB NOT NULL,
+    "promptTag" BLOB NOT NULL,
+    "responseCiphertext" BLOB,
+    "responseIv" BLOB,
+    "responseTag" BLOB,
+    "errorMessage" TEXT,
+    "ip" TEXT,
+    "userAgent" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "chat_requests_apiKeyId_fkey" FOREIGN KEY ("apiKeyId") REFERENCES "api_keys" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "documents" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT NOT NULL,
+    "originalName" TEXT NOT NULL,
+    "mimeType" TEXT NOT NULL,
+    "sizeBytes" INTEGER NOT NULL,
+    "storageType" TEXT NOT NULL,
+    "contentCiphertext" BLOB,
+    "contentIv" BLOB,
+    "contentTag" BLOB,
+    "storagePath" TEXT,
+    "checksumSha256" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "deletedAt" DATETIME,
+    CONSTRAINT "documents_apiKeyId_fkey" FOREIGN KEY ("apiKeyId") REFERENCES "api_keys" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "chat_request_documents" (
+    "chatRequestId" TEXT NOT NULL,
+    "documentId" TEXT NOT NULL,
+
+    PRIMARY KEY ("chatRequestId", "documentId"),
+    CONSTRAINT "chat_request_documents_chatRequestId_fkey" FOREIGN KEY ("chatRequestId") REFERENCES "chat_requests" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "chat_request_documents_documentId_fkey" FOREIGN KEY ("documentId") REFERENCES "documents" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "audit_logs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT,
+    "action" TEXT NOT NULL,
+    "resource" TEXT,
+    "resourceId" TEXT,
+    "metaJson" TEXT,
+    "ip" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "audit_logs_apiKeyId_fkey" FOREIGN KEY ("apiKeyId") REFERENCES "api_keys" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "api_keys_keyHash_key" ON "api_keys"("keyHash");
+
+-- CreateIndex
+CREATE INDEX "api_keys_keyPrefix_idx" ON "api_keys"("keyPrefix");
+
+-- CreateIndex
+CREATE INDEX "api_keys_isActive_idx" ON "api_keys"("isActive");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "chat_requests_requestId_key" ON "chat_requests"("requestId");
+
+-- CreateIndex
+CREATE INDEX "chat_requests_apiKeyId_createdAt_idx" ON "chat_requests"("apiKeyId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "chat_requests_status_idx" ON "chat_requests"("status");
+
+-- CreateIndex
+CREATE INDEX "documents_apiKeyId_createdAt_idx" ON "documents"("apiKeyId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "documents_deletedAt_idx" ON "documents"("deletedAt");
+
+-- CreateIndex
+CREATE INDEX "audit_logs_apiKeyId_createdAt_idx" ON "audit_logs"("apiKeyId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "audit_logs_action_createdAt_idx" ON "audit_logs"("action", "createdAt");

package/prisma/migrations/20260714090338_safe_mode_admin/migration.sql

@@ -0,0 +1,36 @@
+-- AlterTable
+ALTER TABLE "chat_requests" ADD COLUMN "policyMode" TEXT;
+
+-- CreateTable
+CREATE TABLE "settings" (
+    "key" TEXT NOT NULL PRIMARY KEY,
+    "value" TEXT NOT NULL,
+    "updatedAt" DATETIME NOT NULL
+);
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_api_keys" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "keyPrefix" TEXT NOT NULL,
+    "keyHash" TEXT NOT NULL,
+    "role" TEXT NOT NULL DEFAULT 'client',
+    "mode" TEXT NOT NULL DEFAULT 'safe',
+    "isActive" BOOLEAN NOT NULL DEFAULT true,
+    "rateLimit" INTEGER NOT NULL DEFAULT 60,
+    "maxTurns" INTEGER,
+    "timeoutMs" INTEGER,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "lastUsedAt" DATETIME
+);
+INSERT INTO "new_api_keys" ("createdAt", "id", "isActive", "keyHash", "keyPrefix", "lastUsedAt", "name", "rateLimit", "role") SELECT "createdAt", "id", "isActive", "keyHash", "keyPrefix", "lastUsedAt", "name", "rateLimit", "role" FROM "api_keys";
+DROP TABLE "api_keys";
+ALTER TABLE "new_api_keys" RENAME TO "api_keys";
+CREATE UNIQUE INDEX "api_keys_keyHash_key" ON "api_keys"("keyHash");
+CREATE INDEX "api_keys_keyPrefix_idx" ON "api_keys"("keyPrefix");
+CREATE INDEX "api_keys_isActive_idx" ON "api_keys"("isActive");
+CREATE INDEX "api_keys_mode_idx" ON "api_keys"("mode");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260714120000_ip_whitelist_blacklist/migration.sql

@@ -0,0 +1,19 @@
+-- AlterTable
+ALTER TABLE "api_keys" ADD COLUMN "ipWhitelist" TEXT;
+
+-- CreateTable
+CREATE TABLE "ip_blacklist" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "ip" TEXT NOT NULL,
+    "reason" TEXT,
+    "source" TEXT NOT NULL DEFAULT 'manual',
+    "expiresAt" DATETIME,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "createdBy" TEXT
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "ip_blacklist_ip_key" ON "ip_blacklist"("ip");
+
+-- CreateIndex
+CREATE INDEX "ip_blacklist_expiresAt_idx" ON "ip_blacklist"("expiresAt");

package/prisma/migrations/20260714220000_chat_conversations/migration.sql

@@ -0,0 +1,22 @@
+-- CreateTable
+CREATE TABLE "chat_conversations" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "title" TEXT NOT NULL DEFAULT '',
+    "apiKeyId" TEXT,
+    "model" TEXT,
+    "systemPrompt" TEXT NOT NULL DEFAULT '',
+    "messagesCiphertext" BLOB NOT NULL,
+    "messagesIv" BLOB NOT NULL,
+    "messagesTag" BLOB NOT NULL,
+    "messageCount" INTEGER NOT NULL DEFAULT 0,
+    "preview" TEXT NOT NULL DEFAULT '',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    CONSTRAINT "chat_conversations_apiKeyId_fkey" FOREIGN KEY ("apiKeyId") REFERENCES "api_keys" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE INDEX "chat_conversations_updatedAt_idx" ON "chat_conversations"("updatedAt");
+
+-- CreateIndex
+CREATE INDEX "chat_conversations_apiKeyId_updatedAt_idx" ON "chat_conversations"("apiKeyId", "updatedAt");

package/prisma/migrations/20260714230000_conversation_context/migration.sql

@@ -0,0 +1,6 @@
+-- AlterTable
+ALTER TABLE "chat_conversations" ADD COLUMN "contextMode" TEXT NOT NULL DEFAULT 'full';
+ALTER TABLE "chat_conversations" ADD COLUMN "contextRecentN" INTEGER NOT NULL DEFAULT 6;
+ALTER TABLE "chat_conversations" ADD COLUMN "summaryText" TEXT NOT NULL DEFAULT '';
+ALTER TABLE "chat_conversations" ADD COLUMN "summaryAt" DATETIME;
+ALTER TABLE "chat_conversations" ADD COLUMN "summarySourceCount" INTEGER NOT NULL DEFAULT 0;

package/prisma/migrations/20260715140000_admin_otp_session/migration.sql

@@ -0,0 +1,29 @@
+-- CreateTable
+CREATE TABLE "admin_otps" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "codeHash" TEXT NOT NULL,
+    "expiresAt" DATETIME NOT NULL,
+    "usedAt" DATETIME,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "createdIp" TEXT
+);
+
+-- CreateIndex
+CREATE INDEX "admin_otps_expiresAt_idx" ON "admin_otps"("expiresAt");
+
+-- CreateTable
+CREATE TABLE "admin_sessions" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "tokenHash" TEXT NOT NULL,
+    "expiresAt" DATETIME NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "lastUsedAt" DATETIME,
+    "ip" TEXT,
+    "userAgent" TEXT
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "admin_sessions_tokenHash_key" ON "admin_sessions"("tokenHash");
+
+-- CreateIndex
+CREATE INDEX "admin_sessions_expiresAt_idx" ON "admin_sessions"("expiresAt");

package/prisma/migrations/20260715150000_chat_jobs/migration.sql

@@ -0,0 +1,33 @@
+-- CreateTable
+CREATE TABLE "chat_jobs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "requestId" TEXT NOT NULL,
+    "apiKeyId" TEXT NOT NULL,
+    "source" TEXT NOT NULL DEFAULT 'v1',
+    "status" TEXT NOT NULL DEFAULT 'queued',
+    "priority" INTEGER NOT NULL DEFAULT 100,
+    "attempt" INTEGER NOT NULL DEFAULT 0,
+    "maxAttempts" INTEGER NOT NULL DEFAULT 1,
+    "leaseOwner" TEXT,
+    "leaseUntil" DATETIME,
+    "notBefore" DATETIME,
+    "queuedAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "startedAt" DATETIME,
+    "finishedAt" DATETIME,
+    "cancelRequested" BOOLEAN NOT NULL DEFAULT false,
+    "model" TEXT,
+    "stream" BOOLEAN NOT NULL DEFAULT true,
+    "payloadCiphertext" BLOB NOT NULL,
+    "payloadIv" BLOB NOT NULL,
+    "payloadTag" BLOB NOT NULL,
+    "resultChatRequestId" TEXT,
+    "errorCode" TEXT,
+    "errorMessage" TEXT,
+    "idempotencyKey" TEXT
+);
+
+CREATE INDEX "chat_jobs_status_priority_queuedAt_idx" ON "chat_jobs"("status", "priority", "queuedAt");
+CREATE INDEX "chat_jobs_apiKeyId_status_queuedAt_idx" ON "chat_jobs"("apiKeyId", "status", "queuedAt");
+CREATE INDEX "chat_jobs_leaseUntil_idx" ON "chat_jobs"("leaseUntil");
+CREATE INDEX "chat_jobs_requestId_idx" ON "chat_jobs"("requestId");
+CREATE UNIQUE INDEX "chat_jobs_idempotencyKey_key" ON "chat_jobs"("idempotencyKey");

package/prisma/migrations/20260715161921_api_responses_assistants/migration.sql

@@ -0,0 +1,80 @@
+-- CreateTable
+CREATE TABLE "stored_responses" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT NOT NULL,
+    "model" TEXT,
+    "status" TEXT NOT NULL DEFAULT 'completed',
+    "bodyCiphertext" BLOB NOT NULL,
+    "bodyIv" BLOB NOT NULL,
+    "bodyTag" BLOB NOT NULL,
+    "previousId" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "deletedAt" DATETIME
+);
+
+-- CreateTable
+CREATE TABLE "assistants" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT NOT NULL,
+    "name" TEXT NOT NULL DEFAULT '',
+    "model" TEXT,
+    "instructions" TEXT NOT NULL DEFAULT '',
+    "toolsJson" TEXT NOT NULL DEFAULT '[]',
+    "metadataJson" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "assistant_threads" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT NOT NULL,
+    "assistantId" TEXT,
+    "metadataJson" TEXT,
+    "grokSessionId" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    CONSTRAINT "assistant_threads_assistantId_fkey" FOREIGN KEY ("assistantId") REFERENCES "assistants" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "assistant_messages" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "threadId" TEXT NOT NULL,
+    "role" TEXT NOT NULL,
+    "content" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "assistant_messages_threadId_fkey" FOREIGN KEY ("threadId") REFERENCES "assistant_threads" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "assistant_runs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "threadId" TEXT NOT NULL,
+    "assistantId" TEXT,
+    "status" TEXT NOT NULL DEFAULT 'queued',
+    "model" TEXT,
+    "resultJson" TEXT,
+    "errorMessage" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "completedAt" DATETIME,
+    CONSTRAINT "assistant_runs_threadId_fkey" FOREIGN KEY ("threadId") REFERENCES "assistant_threads" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE INDEX "stored_responses_apiKeyId_createdAt_idx" ON "stored_responses"("apiKeyId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "stored_responses_previousId_idx" ON "stored_responses"("previousId");
+
+-- CreateIndex
+CREATE INDEX "assistants_apiKeyId_createdAt_idx" ON "assistants"("apiKeyId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "assistant_threads_apiKeyId_updatedAt_idx" ON "assistant_threads"("apiKeyId", "updatedAt");
+
+-- CreateIndex
+CREATE INDEX "assistant_messages_threadId_createdAt_idx" ON "assistant_messages"("threadId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "assistant_runs_threadId_createdAt_idx" ON "assistant_runs"("threadId", "createdAt");

package/prisma/migrations/20260716060000_media_assets/migration.sql

@@ -0,0 +1,25 @@
+-- CreateTable
+CREATE TABLE "media_assets" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT NOT NULL,
+    "kind" TEXT NOT NULL DEFAULT 'image',
+    "mime" TEXT NOT NULL,
+    "byteSize" INTEGER NOT NULL,
+    "storagePath" TEXT NOT NULL,
+    "checksumSha256" TEXT NOT NULL,
+    "originalName" TEXT,
+    "source" TEXT NOT NULL DEFAULT 'generation',
+    "provider" TEXT NOT NULL DEFAULT 'grok-tools',
+    "metaJson" TEXT,
+    "prompt" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "expiresAt" DATETIME,
+    "deletedAt" DATETIME,
+    CONSTRAINT "media_assets_apiKeyId_fkey" FOREIGN KEY ("apiKeyId") REFERENCES "api_keys" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE INDEX "media_assets_apiKeyId_createdAt_idx" ON "media_assets"("apiKeyId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "media_assets_kind_createdAt_idx" ON "media_assets"("kind", "createdAt");

package/prisma/migrations/20260716070000_media_jobs/migration.sql

@@ -0,0 +1,17 @@
+CREATE TABLE "media_jobs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT NOT NULL,
+    "kind" TEXT NOT NULL DEFAULT 'video',
+    "status" TEXT NOT NULL DEFAULT 'queued',
+    "prompt" TEXT,
+    "model" TEXT,
+    "inputJson" TEXT,
+    "resultAssetId" TEXT,
+    "errorMessage" TEXT,
+    "provider" TEXT NOT NULL DEFAULT 'mock',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "startedAt" DATETIME,
+    "completedAt" DATETIME
+);
+CREATE INDEX "media_jobs_apiKeyId_createdAt_idx" ON "media_jobs"("apiKeyId", "createdAt");
+CREATE INDEX "media_jobs_status_createdAt_idx" ON "media_jobs"("status", "createdAt");

package/prisma/migrations/20260813160000_grok_session_aliases/migration.sql

@@ -0,0 +1,14 @@
+-- CreateTable
+CREATE TABLE "grok_session_aliases" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT NOT NULL,
+    "clientSessionId" TEXT NOT NULL,
+    "grokSessionId" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "grok_session_aliases_apiKeyId_clientSessionId_key" ON "grok_session_aliases"("apiKeyId", "clientSessionId");
+
+-- CreateIndex
+CREATE INDEX "grok_session_aliases_apiKeyId_grokSessionId_idx" ON "grok_session_aliases"("apiKeyId", "grokSessionId");

package/prisma/migrations/20260924180000_api_key_allowed_models/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "api_keys" ADD COLUMN "allowedModels" TEXT;

package/prisma/migrations/20260924190000_rename_grok_session_columns/migration.sql

@@ -0,0 +1,5 @@
+-- Rename leftover Grok CLI session columns/tables to engine session names.
+ALTER TABLE "chat_requests" RENAME COLUMN "grokSessionId" TO "engineSessionId";
+ALTER TABLE "assistant_threads" RENAME COLUMN "grokSessionId" TO "engineSessionId";
+ALTER TABLE "grok_session_aliases" RENAME TO "engine_session_aliases";
+ALTER TABLE "engine_session_aliases" RENAME COLUMN "grokSessionId" TO "engineSessionId";

package/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "sqlite"