attocode-code-intel 0.1.0__py3-none-any.whl

attocode_intel/migrations/versions/001_initial_schema.py

@@ -0,0 +1,219 @@
+"""Initial schema — identity, repos, branches, content-addressed storage, jobs.
+
+Revision ID: 001
+Revises: None
+Create Date: 2026-03-11
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects.postgresql import ARRAY, JSONB, UUID
+
+revision: str = "001"
+down_revision: Union[str, None] = None
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # --- Identity tables ---
+    op.create_table(
+        "organizations",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("name", sa.Text, nullable=False),
+        sa.Column("slug", sa.Text, unique=True, nullable=False),
+        sa.Column("plan", sa.Text, nullable=False, server_default="free"),
+        sa.Column("settings", JSONB, nullable=False, server_default="{}"),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+
+    op.create_table(
+        "users",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("email", sa.Text, unique=True, nullable=False),
+        sa.Column("name", sa.Text, nullable=False, server_default=""),
+        sa.Column("avatar_url", sa.Text, nullable=True),
+        sa.Column("password_hash", sa.Text, nullable=True),
+        sa.Column("github_id", sa.BigInteger, unique=True, nullable=True),
+        sa.Column("auth_provider", sa.Text, nullable=False, server_default="email"),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+
+    op.create_table(
+        "org_memberships",
+        sa.Column("org_id", UUID(as_uuid=True), sa.ForeignKey("organizations.id", ondelete="CASCADE"), primary_key=True),
+        sa.Column("user_id", UUID(as_uuid=True), sa.ForeignKey("users.id", ondelete="CASCADE"), primary_key=True),
+        sa.Column("role", sa.Text, nullable=False, server_default="member"),
+        sa.Column("invited_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+        sa.Column("accepted_at", sa.DateTime(timezone=True), nullable=True),
+    )
+
+    op.create_table(
+        "api_keys",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("org_id", UUID(as_uuid=True), sa.ForeignKey("organizations.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("user_id", UUID(as_uuid=True), sa.ForeignKey("users.id"), nullable=True),
+        sa.Column("name", sa.Text, nullable=False),
+        sa.Column("key_hash", sa.Text, unique=True, nullable=False),
+        sa.Column("key_prefix", sa.Text, nullable=False),
+        sa.Column("scopes", ARRAY(sa.String), nullable=False, server_default="{}"),
+        sa.Column("expires_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("last_used_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+
+    # --- Repositories ---
+    op.create_table(
+        "repositories",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("org_id", UUID(as_uuid=True), sa.ForeignKey("organizations.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("name", sa.Text, nullable=False),
+        sa.Column("local_path", sa.Text, nullable=True),
+        sa.Column("clone_url", sa.Text, nullable=True),
+        sa.Column("default_branch", sa.Text, nullable=False, server_default="main"),
+        sa.Column("language", sa.Text, nullable=True),
+        sa.Column("last_indexed_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("index_status", sa.Text, nullable=False, server_default="pending"),
+        sa.Column("settings", JSONB, nullable=False, server_default="{}"),
+        sa.Column("clone_path", sa.Text, nullable=True),
+        sa.Column("disk_usage_bytes", sa.BigInteger, nullable=False, server_default="0"),
+        sa.Column("last_fetched_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+        sa.UniqueConstraint("org_id", "name", name="uq_repo_org_name"),
+    )
+
+    op.create_table(
+        "repo_credentials",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("repo_id", UUID(as_uuid=True), sa.ForeignKey("repositories.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("cred_type", sa.Text, nullable=False),
+        sa.Column("encrypted_value", sa.LargeBinary, nullable=False),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+
+    # --- Branches & content-addressed storage ---
+    op.create_table(
+        "branches",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("repo_id", UUID(as_uuid=True), sa.ForeignKey("repositories.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("name", sa.Text, nullable=False),
+        sa.Column("parent_branch_id", UUID(as_uuid=True), sa.ForeignKey("branches.id"), nullable=True),
+        sa.Column("head_commit", sa.Text, nullable=True),
+        sa.Column("last_indexed_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("is_default", sa.Boolean, nullable=False, server_default="false"),
+        sa.UniqueConstraint("repo_id", "name", name="uq_branch_repo_name"),
+    )
+
+    op.create_table(
+        "file_contents",
+        sa.Column("sha256", sa.Text, primary_key=True),
+        sa.Column("content", sa.LargeBinary, nullable=False),
+        sa.Column("size_bytes", sa.Integer, nullable=False),
+        sa.Column("language", sa.Text, nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+
+    op.create_table(
+        "branch_files",
+        sa.Column("branch_id", UUID(as_uuid=True), sa.ForeignKey("branches.id", ondelete="CASCADE"), primary_key=True),
+        sa.Column("path", sa.Text, primary_key=True),
+        sa.Column("content_sha", sa.Text, sa.ForeignKey("file_contents.sha256"), nullable=True),
+        sa.Column("status", sa.Text, nullable=False),
+    )
+
+    op.create_table(
+        "symbols",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("content_sha", sa.Text, sa.ForeignKey("file_contents.sha256"), nullable=False),
+        sa.Column("name", sa.Text, nullable=False),
+        sa.Column("kind", sa.Text, nullable=False),
+        sa.Column("line_start", sa.Integer, nullable=True),
+        sa.Column("line_end", sa.Integer, nullable=True),
+        sa.Column("signature", sa.Text, nullable=True),
+        sa.Column("exported", sa.Boolean, nullable=False, server_default="false"),
+        sa.Column("metadata", JSONB, nullable=False, server_default="{}"),
+    )
+    op.create_index("idx_symbols_content_sha", "symbols", ["content_sha"])
+    op.create_index("idx_symbols_name", "symbols", ["name"])
+
+    op.create_table(
+        "dependencies",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("source_sha", sa.Text, sa.ForeignKey("file_contents.sha256"), nullable=False),
+        sa.Column("target_sha", sa.Text, sa.ForeignKey("file_contents.sha256"), nullable=False),
+        sa.Column("dep_type", sa.Text, nullable=False),
+        sa.Column("weight", sa.Float, nullable=False, server_default="1.0"),
+        sa.Column("metadata", JSONB, nullable=False, server_default="{}"),
+    )
+    op.create_index("idx_deps_source", "dependencies", ["source_sha"])
+    op.create_index("idx_deps_target", "dependencies", ["target_sha"])
+
+    # --- Jobs & webhooks ---
+    op.create_table(
+        "indexing_jobs",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("repo_id", UUID(as_uuid=True), sa.ForeignKey("repositories.id"), nullable=False),
+        sa.Column("job_type", sa.Text, nullable=False),
+        sa.Column("status", sa.Text, nullable=False, server_default="queued"),
+        sa.Column("branch_name", sa.Text, nullable=True),
+        sa.Column("progress", JSONB, nullable=False, server_default="{}"),
+        sa.Column("result", JSONB, nullable=True),
+        sa.Column("error", sa.Text, nullable=True),
+        sa.Column("started_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("completed_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+        sa.Column("arq_job_id", sa.Text, nullable=True),
+    )
+
+    op.create_table(
+        "webhook_configs",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("repo_id", UUID(as_uuid=True), sa.ForeignKey("repositories.id"), nullable=False),
+        sa.Column("provider", sa.Text, nullable=False),
+        sa.Column("secret_hash", sa.Text, nullable=False),
+        sa.Column("events", ARRAY(sa.String), nullable=False, server_default="{push}"),
+        sa.Column("active", sa.Boolean, nullable=False, server_default="true"),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+
+    # --- RLS policies ---
+    op.execute("ALTER TABLE repositories ENABLE ROW LEVEL SECURITY")
+    op.execute("""
+        CREATE POLICY repo_org_isolation ON repositories
+            USING (org_id = current_setting('app.current_org_id', true)::UUID)
+    """)
+    op.execute("ALTER TABLE api_keys ENABLE ROW LEVEL SECURITY")
+    op.execute("""
+        CREATE POLICY apikey_org_isolation ON api_keys
+            USING (org_id = current_setting('app.current_org_id', true)::UUID)
+    """)
+
+
+def downgrade() -> None:
+    op.execute("DROP POLICY IF EXISTS apikey_org_isolation ON api_keys")
+    op.execute("ALTER TABLE api_keys DISABLE ROW LEVEL SECURITY")
+    op.execute("DROP POLICY IF EXISTS repo_org_isolation ON repositories")
+    op.execute("ALTER TABLE repositories DISABLE ROW LEVEL SECURITY")
+
+    op.drop_table("webhook_configs")
+    op.drop_table("indexing_jobs")
+    op.drop_index("idx_deps_target")
+    op.drop_index("idx_deps_source")
+    op.drop_table("dependencies")
+    op.drop_index("idx_symbols_name")
+    op.drop_index("idx_symbols_content_sha")
+    op.drop_table("symbols")
+    op.drop_table("branch_files")
+    op.drop_table("file_contents")
+    op.drop_table("branches")
+    op.drop_table("repo_credentials")
+    op.drop_table("repositories")
+    op.drop_table("api_keys")
+    op.drop_table("org_memberships")
+    op.drop_table("users")
+    op.drop_table("organizations")

attocode_intel/migrations/versions/002_branch_version_and_embeddings.py

@@ -0,0 +1,61 @@
+"""Add branch version counter, file_contents.content_type, and embeddings table.
+
+Revision ID: 002
+Revises: 001
+Create Date: 2026-03-11
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+from sqlalchemy.dialects.postgresql import UUID
+
+revision: str = "002"
+down_revision: Union[str, None] = "001"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # Branch version counter for consistency tracking
+    op.add_column(
+        "branches",
+        sa.Column("version", sa.Integer, nullable=False, server_default="0"),
+    )
+
+    # Content type for future fractal summaries (source|summary_l1|summary_l2)
+    op.add_column(
+        "file_contents",
+        sa.Column("content_type", sa.Text, nullable=False, server_default="source"),
+    )
+
+    # Embeddings table — content-SHA-keyed with model tracking
+    op.create_table(
+        "embeddings",
+        sa.Column("id", UUID(as_uuid=True), server_default=sa.text("gen_random_uuid()"), primary_key=True),
+        sa.Column("content_sha", sa.Text, sa.ForeignKey("file_contents.sha256"), nullable=False),
+        sa.Column("embedding_model", sa.Text, nullable=False, server_default="default"),
+        sa.Column("chunk_text", sa.Text, nullable=False, server_default=""),
+        sa.Column("chunk_type", sa.Text, nullable=False, server_default="file"),
+        # vector column will be added when pgvector extension is enabled:
+        # sa.Column("vector", Vector(384))  # or Vector(1536) for OpenAI
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+    op.create_index("idx_embeddings_content_sha", "embeddings", ["content_sha"])
+    op.create_index("idx_embeddings_model", "embeddings", ["embedding_model"])
+    op.create_index(
+        "idx_embeddings_content_model",
+        "embeddings",
+        ["content_sha", "embedding_model"],
+    )
+
+
+def downgrade() -> None:
+    op.drop_index("idx_embeddings_content_model")
+    op.drop_index("idx_embeddings_model")
+    op.drop_index("idx_embeddings_content_sha")
+    op.drop_table("embeddings")
+    op.drop_column("file_contents", "content_type")
+    op.drop_column("branches", "version")

attocode_intel/migrations/versions/003_embedding_uniqueness_and_cascade.py

@@ -0,0 +1,51 @@
+"""Add unique constraint on embeddings and CASCADE on FK.
+
+C6: Ensure one embedding per (content_sha, embedding_model, chunk_type).
+N5: Add ON DELETE CASCADE to embeddings.content_sha FK.
+
+Revision ID: 003
+Revises: 002
+Create Date: 2026-03-11
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+from alembic import op
+
+revision: str = "003"
+down_revision: Union[str, None] = "002"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # C6: unique constraint on (content_sha, embedding_model, chunk_type)
+    op.create_unique_constraint(
+        "uq_embedding_content_model_chunk",
+        "embeddings",
+        ["content_sha", "embedding_model", "chunk_type"],
+    )
+
+    # N5: replace FK with CASCADE version
+    op.drop_constraint("embeddings_content_sha_fkey", "embeddings", type_="foreignkey")
+    op.create_foreign_key(
+        "embeddings_content_sha_fkey",
+        "embeddings",
+        "file_contents",
+        ["content_sha"],
+        ["sha256"],
+        ondelete="CASCADE",
+    )
+
+
+def downgrade() -> None:
+    op.drop_constraint("embeddings_content_sha_fkey", "embeddings", type_="foreignkey")
+    op.create_foreign_key(
+        "embeddings_content_sha_fkey",
+        "embeddings",
+        "file_contents",
+        ["content_sha"],
+        ["sha256"],
+    )
+    op.drop_constraint("uq_embedding_content_model_chunk", "embeddings", type_="unique")

attocode_intel/migrations/versions/004_audit_events.py

@@ -0,0 +1,38 @@
+"""Add audit_events table for activity feed / audit log.
+
+Revision ID: 004
+Revises: 003
+Create Date: 2026-03-11
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "004"
+down_revision: Union[str, None] = "003"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "audit_events",
+        sa.Column("id", sa.dialects.postgresql.UUID(as_uuid=True), primary_key=True, server_default=sa.text("gen_random_uuid()")),
+        sa.Column("org_id", sa.dialects.postgresql.UUID(as_uuid=True), sa.ForeignKey("organizations.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("repo_id", sa.dialects.postgresql.UUID(as_uuid=True), sa.ForeignKey("repositories.id", ondelete="SET NULL"), nullable=True),
+        sa.Column("user_id", sa.dialects.postgresql.UUID(as_uuid=True), sa.ForeignKey("users.id", ondelete="SET NULL"), nullable=True),
+        sa.Column("event_type", sa.Text, nullable=False),
+        sa.Column("detail", sa.dialects.postgresql.JSONB, nullable=False, server_default="{}"),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+    op.create_index("ix_audit_events_org_created", "audit_events", ["org_id", sa.text("created_at DESC")])
+    op.create_index("ix_audit_events_repo_created", "audit_events", ["repo_id", sa.text("created_at DESC")])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_audit_events_repo_created", "audit_events")
+    op.drop_index("ix_audit_events_org_created", "audit_events")
+    op.drop_table("audit_events")

attocode_intel/migrations/versions/005_user_preferences.py

@@ -0,0 +1,30 @@
+"""Add user_preferences table for UI settings.
+
+Revision ID: 005
+Revises: 004
+Create Date: 2026-03-11
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "005"
+down_revision: Union[str, None] = "004"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "user_preferences",
+        sa.Column("user_id", sa.dialects.postgresql.UUID(as_uuid=True), sa.ForeignKey("users.id", ondelete="CASCADE"), primary_key=True),
+        sa.Column("preferences", sa.dialects.postgresql.JSONB, nullable=False, server_default="{}"),
+        sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now(), onupdate=sa.func.now(), nullable=False),
+    )
+
+
+def downgrade() -> None:
+    op.drop_table("user_preferences")

attocode_intel/migrations/versions/006_google_oauth.py

@@ -0,0 +1,27 @@
+"""Add google_id column to users table for Google OAuth.
+
+Revision ID: 006
+Revises: 005
+Create Date: 2026-03-12
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "006"
+down_revision: Union[str, None] = "005"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column("users", sa.Column("google_id", sa.Text, nullable=True))
+    op.create_unique_constraint("uq_users_google_id", "users", ["google_id"])
+
+
+def downgrade() -> None:
+    op.drop_constraint("uq_users_google_id", "users")
+    op.drop_column("users", "google_id")

attocode_intel/migrations/versions/007_pgvector_embeddings.py

@@ -0,0 +1,28 @@
+"""Enable pgvector extension for embedding vector storage.
+
+The vector column on the embeddings table is added at runtime by
+ensure_vector_column() — dimension depends on the configured embedding model.
+
+Revision ID: 007
+Revises: 006
+Create Date: 2026-03-12
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+from alembic import op
+
+revision: str = "007"
+down_revision: Union[str, None] = "006"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.execute("CREATE EXTENSION IF NOT EXISTS vector")
+
+
+def downgrade() -> None:
+    # Don't DROP EXTENSION — other things might use it
+    pass

attocode_intel/migrations/versions/008_symbol_references.py

@@ -0,0 +1,37 @@
+"""Add symbol_references table for call-site / import reference tracking.
+
+Revision ID: 008
+Revises: 007
+Create Date: 2026-03-13
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "008"
+down_revision: Union[str, None] = "007"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "symbol_references",
+        sa.Column("id", sa.dialects.postgresql.UUID(as_uuid=True), primary_key=True, server_default=sa.text("gen_random_uuid()")),
+        sa.Column("content_sha", sa.Text, sa.ForeignKey("file_contents.sha256", ondelete="CASCADE"), nullable=False),
+        sa.Column("symbol_name", sa.String(500), nullable=False),
+        sa.Column("ref_kind", sa.String(20), nullable=False),
+        sa.Column("line", sa.Integer, nullable=False),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+    op.create_index("ix_symref_sha", "symbol_references", ["content_sha"])
+    op.create_index("ix_symref_name", "symbol_references", ["symbol_name"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_symref_name", "symbol_references")
+    op.drop_index("ix_symref_sha", "symbol_references")
+    op.drop_table("symbol_references")

attocode_intel/migrations/versions/009_webhook_secret_encryption.py

@@ -0,0 +1,25 @@
+"""Add encrypted secret column to webhook_configs.
+
+Revision ID: 009
+Revises: 008
+Create Date: 2026-03-14
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "009"
+down_revision: Union[str, None] = "008"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column("webhook_configs", sa.Column("secret_encrypted", sa.Text(), nullable=True))
+
+
+def downgrade() -> None:
+    op.drop_column("webhook_configs", "secret_encrypted")

attocode_intel/migrations/versions/010_add_commits_table.py

@@ -0,0 +1,40 @@
+"""Add commits table for DB-backed commit history.
+
+Revision ID: 010
+Revises: 009
+Create Date: 2026-03-15
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "010"
+down_revision: Union[str, None] = "009"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "commits",
+        sa.Column("id", sa.dialects.postgresql.UUID(as_uuid=True), primary_key=True),
+        sa.Column("repo_id", sa.dialects.postgresql.UUID(as_uuid=True), sa.ForeignKey("repositories.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("oid", sa.Text(), nullable=False),
+        sa.Column("message", sa.Text(), nullable=False),
+        sa.Column("author_name", sa.Text(), nullable=False),
+        sa.Column("author_email", sa.Text(), nullable=False),
+        sa.Column("timestamp", sa.BigInteger(), nullable=False),
+        sa.Column("parent_oids", sa.dialects.postgresql.ARRAY(sa.String()), nullable=False, server_default="{}"),
+        sa.Column("branch_name", sa.Text(), nullable=False, server_default="main"),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+        sa.UniqueConstraint("repo_id", "oid", name="uq_commits_repo_oid"),
+    )
+    op.create_index("ix_commits_repo_branch_ts", "commits", ["repo_id", "branch_name", sa.text("timestamp DESC")])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_commits_repo_branch_ts", table_name="commits")
+    op.drop_table("commits")

attocode_intel/migrations/versions/011_commit_changed_files.py

@@ -0,0 +1,25 @@
+"""Add changed_files JSONB column to commits table.
+
+Revision ID: 011
+Revises: 010
+Create Date: 2026-03-15
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "011"
+down_revision: Union[str, None] = "010"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column("commits", sa.Column("changed_files", sa.dialects.postgresql.JSONB(), nullable=True))
+
+
+def downgrade() -> None:
+    op.drop_column("commits", "changed_files")

attocode_intel/migrations/versions/012_branch_merged_at.py

@@ -0,0 +1,25 @@
+"""Add merged_at column to branches table.
+
+Revision ID: 012
+Revises: 011
+Create Date: 2026-03-15
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "012"
+down_revision: Union[str, None] = "011"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column("branches", sa.Column("merged_at", sa.DateTime(timezone=True), nullable=True))
+
+
+def downgrade() -> None:
+    op.drop_column("branches", "merged_at")

attocode_intel/migrations/versions/013_revoked_tokens.py

@@ -0,0 +1,32 @@
+"""Add revoked_tokens table for JWT blocklist.
+
+Revision ID: 013
+Revises: 012
+Create Date: 2026-03-15
+"""
+from __future__ import annotations
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "013"
+down_revision: Union[str, None] = "012"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "revoked_tokens",
+        sa.Column("jti", sa.Text(), primary_key=True),
+        sa.Column("revoked_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+        sa.Column("expires_at", sa.DateTime(timezone=True), nullable=False),
+    )
+    op.create_index("ix_revoked_tokens_expires_at", "revoked_tokens", ["expires_at"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_revoked_tokens_expires_at", table_name="revoked_tokens")
+    op.drop_table("revoked_tokens")