marvisx-cli 0.1.0__py3-none-any.whl

migrations/018_agents.sql

@@ -0,0 +1,73 @@
+-- Agents registry
+CREATE TABLE IF NOT EXISTS agents (
+    id TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL UNIQUE REFERENCES users(id) ON DELETE RESTRICT,
+    scheduler_agent_id TEXT UNIQUE,
+    agent_type TEXT NOT NULL DEFAULT 'system' CHECK(agent_type IN ('project', 'system', 'digital_copy')),
+    project_slug TEXT,
+    model TEXT NOT NULL DEFAULT 'haiku' CHECK(model IN ('haiku', 'sonnet', 'opus')),
+    status TEXT NOT NULL DEFAULT 'active' CHECK(status IN ('active', 'inactive', 'error')),
+    enabled INTEGER NOT NULL DEFAULT 1,
+    soul_path TEXT,
+    tools_path TEXT,
+    identity_path TEXT,
+    description TEXT,
+    deleted_at TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now', 'utc')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now', 'utc'))
+);
+
+CREATE TABLE IF NOT EXISTS agent_schedules (
+    id TEXT PRIMARY KEY,
+    agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+    name TEXT NOT NULL,
+    cron_expr TEXT NOT NULL,
+    cron_tz TEXT NOT NULL DEFAULT 'Europe/Rome',
+    prompt TEXT,
+    timeout_seconds INTEGER NOT NULL DEFAULT 120,
+    enabled INTEGER NOT NULL DEFAULT 1,
+    scheduler_job_id TEXT UNIQUE,
+    last_run_at TEXT,
+    last_run_status TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now', 'utc')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now', 'utc'))
+);
+
+CREATE TABLE IF NOT EXISTS agent_runs (
+    id TEXT PRIMARY KEY,
+    agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE RESTRICT,
+    schedule_id TEXT REFERENCES agent_schedules(id) ON DELETE SET NULL,
+    trigger TEXT NOT NULL DEFAULT 'manual' CHECK(trigger IN ('cron', 'manual', 'api')),
+    session_uuid TEXT,
+    started_at TEXT NOT NULL DEFAULT (datetime('now', 'utc')),
+    finished_at TEXT,
+    status TEXT NOT NULL DEFAULT 'running' CHECK(status IN ('running', 'success', 'error', 'timeout', 'killed')),
+    summary TEXT,
+    cost_usd REAL,
+    input_tokens INTEGER,
+    output_tokens INTEGER,
+    model TEXT,
+    log_tail TEXT,
+    log_size_bytes INTEGER,
+    error_message TEXT
+);
+
+CREATE TABLE IF NOT EXISTS agent_sync_state (
+    agent_id TEXT NOT NULL,
+    run_source TEXT NOT NULL,
+    last_offset INTEGER NOT NULL DEFAULT 0,
+    updated_at TEXT NOT NULL DEFAULT (datetime('now', 'utc')),
+    PRIMARY KEY (agent_id, run_source)
+);
+
+-- Indexes
+CREATE INDEX IF NOT EXISTS idx_agents_user_id ON agents(user_id);
+CREATE INDEX IF NOT EXISTS idx_agents_project_slug ON agents(project_slug);
+CREATE INDEX IF NOT EXISTS idx_agents_active ON agents(deleted_at) WHERE deleted_at IS NULL;
+CREATE INDEX IF NOT EXISTS idx_agent_runs_agent_id ON agent_runs(agent_id);
+CREATE INDEX IF NOT EXISTS idx_agent_runs_agent_started ON agent_runs(agent_id, started_at DESC);
+CREATE INDEX IF NOT EXISTS idx_agent_runs_status ON agent_runs(agent_id, status, started_at DESC);
+CREATE INDEX IF NOT EXISTS idx_agent_schedules_agent_id ON agent_schedules(agent_id);
+CREATE INDEX IF NOT EXISTS idx_cost_runs_agent ON agent_runs(agent_id, cost_usd);
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at) VALUES (18, datetime('now', 'utc'));

migrations/018_agents_down.sql

@@ -0,0 +1,13 @@
+DROP INDEX IF EXISTS idx_cost_runs_agent;
+DROP INDEX IF EXISTS idx_agent_schedules_agent_id;
+DROP INDEX IF EXISTS idx_agent_runs_status;
+DROP INDEX IF EXISTS idx_agent_runs_agent_started;
+DROP INDEX IF EXISTS idx_agent_runs_agent_id;
+DROP INDEX IF EXISTS idx_agents_active;
+DROP INDEX IF EXISTS idx_agents_project_slug;
+DROP INDEX IF EXISTS idx_agents_user_id;
+DROP TABLE IF EXISTS agent_sync_state;
+DROP TABLE IF EXISTS agent_runs;
+DROP TABLE IF EXISTS agent_schedules;
+DROP TABLE IF EXISTS agents;
+DELETE FROM schema_versions WHERE version = 18;

migrations/019_review_feedback.sql

@@ -0,0 +1,18 @@
+-- v1 - 2026-02-28 - Add review_feedback to tasks + DB trigger enforce_review_requires_pr
+-- NOTE: DO NOT modify schema_versions here — db.py runner handles INSERT OR IGNORE automatically
+
+ALTER TABLE tasks ADD COLUMN review_feedback TEXT DEFAULT NULL;
+
+-- DB-level trigger: enforce that status=review requires an active PR
+CREATE TRIGGER IF NOT EXISTS enforce_review_requires_pr
+BEFORE UPDATE OF status ON tasks
+FOR EACH ROW
+WHEN NEW.status = 'review'
+BEGIN
+    SELECT RAISE(ABORT, 'Cannot set status=review: no active PR for this task')
+    WHERE NOT EXISTS (
+        SELECT 1 FROM pull_requests
+        WHERE task_id = NEW.id
+        AND status IN ('draft', 'open', 'merging')
+    );
+END;

migrations/020_pr_commit_sha.sql

@@ -0,0 +1,4 @@
+-- 020_pr_commit_sha.sql
+-- v1.0.0 - 2026-03-01 - Add commit_sha to pull_requests for revert support
+ALTER TABLE pull_requests ADD COLUMN commit_sha TEXT;
+INSERT OR IGNORE INTO schema_versions (version) VALUES (20);

migrations/021_webhook_events.sql

@@ -0,0 +1,18 @@
+-- v1.0.0 - 2026-03-01 - Webhook events audit log
+CREATE TABLE IF NOT EXISTS webhook_events (
+    id          TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+    delivery_id TEXT NOT NULL UNIQUE,
+    event_type  TEXT NOT NULL,
+    action      TEXT,
+    repo        TEXT,
+    pr_number   INTEGER,
+    branch      TEXT,
+    task_id     TEXT,
+    pr_id       TEXT,
+    payload     TEXT,
+    processed   INTEGER NOT NULL DEFAULT 0,
+    error       TEXT,
+    created_at  TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+CREATE INDEX IF NOT EXISTS idx_webhook_events_task_id ON webhook_events(task_id);
+CREATE INDEX IF NOT EXISTS idx_webhook_events_created_at ON webhook_events(created_at);

migrations/022_devx_agent_managed.sql

@@ -0,0 +1,11 @@
+-- 022_devx_agent_managed.sql
+-- Adds agent_managed toggle to sessions_meta for DevX orchestration
+ALTER TABLE sessions_meta ADD COLUMN agent_managed INTEGER NOT NULL DEFAULT 0
+    CHECK (agent_managed IN (0, 1));
+
+-- Partial index: solo sessioni agent_managed=1 sono interrogate dal Session Manager
+CREATE INDEX IF NOT EXISTS idx_sessions_agent_managed
+    ON sessions_meta(agent_managed)
+    WHERE agent_managed = 1;
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (22);

migrations/022_devx_agent_managed_down.sql

@@ -0,0 +1,6 @@
+-- 022_devx_agent_managed_down.sql
+-- Rollback: SQLite < 3.35 non supporta DROP COLUMN
+-- Per rollback completo: ricrea tabella senza la colonna
+DROP INDEX IF EXISTS idx_sessions_agent_managed;
+-- Note: ALTER TABLE ... DROP COLUMN richiede SQLite >= 3.35
+-- SELECT sqlite_version() per verificare

migrations/023_devx_p1_gate.sql

@@ -0,0 +1,7 @@
+-- 023_devx_p1_gate.sql
+-- P1 gate state machine: sostituisce asyncio.sleep(300) in task orchestration
+-- Sprint 3 DevX Layer - 2026-03-02
+ALTER TABLE tasks ADD COLUMN p1_gate_notified_at TEXT;
+ALTER TABLE tasks ADD COLUMN p1_gate_blocked_by TEXT;
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (23);

migrations/023_devx_p1_gate_down.sql

@@ -0,0 +1,3 @@
+-- Note: ALTER TABLE DROP COLUMN requires SQLite >= 3.35
+-- If needed, recreate table without p1_gate_notified_at and p1_gate_blocked_by
+-- This migration adds nullable columns so rollback is safe to skip in production

migrations/024_chat_messages.sql

@@ -0,0 +1,16 @@
+-- 024_chat_messages.sql
+-- Chat messages for agent conversations
+-- 2026-03-03
+
+CREATE TABLE IF NOT EXISTS chat_messages (
+    id TEXT PRIMARY KEY,
+    agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+    role TEXT NOT NULL CHECK(role IN ('user', 'assistant')),
+    content TEXT NOT NULL,
+    metadata_json TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now', 'utc'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_chat_messages_agent_id ON chat_messages(agent_id, created_at DESC);
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at) VALUES (24, datetime('now', 'utc'));

migrations/024_pr_conversation_id.sql

@@ -0,0 +1,8 @@
+-- v1.0.0 - 2026-03-02 - Add conversation_id to pull_requests for worktree agent cost tracking
+PRAGMA foreign_keys=ON;
+
+ALTER TABLE pull_requests
+    ADD COLUMN conversation_id TEXT
+    REFERENCES session_costs(conversation_id) ON DELETE SET NULL;
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (24);

migrations/024_task_indexes.sql

@@ -0,0 +1,21 @@
+-- 024_task_indexes.sql: Add indexes for common query patterns
+-- owner_id: used in task list filtering and RACI lookups
+CREATE INDEX IF NOT EXISTS idx_tasks_owner_id ON tasks(owner_id) WHERE deleted_at IS NULL;
+
+-- project + status: the most common query pattern (list tasks by project and status)
+CREATE INDEX IF NOT EXISTS idx_tasks_project_status ON tasks(project, status) WHERE deleted_at IS NULL;
+
+-- ice_score: used for priority sorting in task lists
+CREATE INDEX IF NOT EXISTS idx_tasks_ice_score ON tasks(ice_score DESC) WHERE deleted_at IS NULL;
+
+-- delegation: used for filtering by delegation type
+CREATE INDEX IF NOT EXISTS idx_tasks_delegation ON tasks(delegation) WHERE deleted_at IS NULL AND delegation IS NOT NULL;
+
+-- Pull requests: task_id lookup (used in every PR operation)
+CREATE INDEX IF NOT EXISTS idx_pull_requests_task_id ON pull_requests(task_id);
+
+-- Session costs: project_slug + date range (used in cost summary)
+CREATE INDEX IF NOT EXISTS idx_session_costs_project_date ON session_costs(project_slug, updated_at);
+
+-- Task cost entries: task_id (used in cost summary per task)
+CREATE INDEX IF NOT EXISTS idx_task_cost_entries_task_id ON task_cost_entries(task_id);

migrations/024_task_indexes_down.sql

@@ -0,0 +1,7 @@
+DROP INDEX IF EXISTS idx_tasks_owner_id;
+DROP INDEX IF EXISTS idx_tasks_project_status;
+DROP INDEX IF EXISTS idx_tasks_ice_score;
+DROP INDEX IF EXISTS idx_tasks_delegation;
+DROP INDEX IF EXISTS idx_pull_requests_task_id;
+DROP INDEX IF EXISTS idx_session_costs_project_date;
+DROP INDEX IF EXISTS idx_task_cost_entries_task_id;

migrations/025_audit_log.sql

@@ -0,0 +1,17 @@
+-- 024_audit_log.sql
+-- Audit trail for human privileged operations (merge PR, approve/complete tasks, delete resources)
+-- 2026-03-03
+CREATE TABLE IF NOT EXISTS audit_log (
+    id            TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+    timestamp     TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+    action        TEXT NOT NULL,
+    user          TEXT NOT NULL,
+    resource_type TEXT NOT NULL,
+    resource_id   TEXT NOT NULL,
+    details_json  TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_audit_log_timestamp     ON audit_log(timestamp);
+CREATE INDEX IF NOT EXISTS idx_audit_log_user          ON audit_log(user);
+CREATE INDEX IF NOT EXISTS idx_audit_log_resource_type ON audit_log(resource_type, resource_id);
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (25);

migrations/026_agent_tokens.sql

@@ -0,0 +1,20 @@
+-- 024_agent_tokens.sql
+-- Per-agent Bearer tokens with scoped permissions
+-- Replaces single shared TASKS_API_TOKEN with per-agent tokens stored in DB
+-- 2026-03-03
+
+CREATE TABLE IF NOT EXISTS agent_tokens (
+    id TEXT PRIMARY KEY,
+    agent_name TEXT NOT NULL,
+    token_hash TEXT NOT NULL UNIQUE,  -- SHA-256 hex digest of the raw token
+    scopes TEXT NOT NULL DEFAULT '[]',  -- JSON array of scope strings
+    is_active INTEGER NOT NULL DEFAULT 1,
+    created_at TEXT NOT NULL DEFAULT (datetime('now', 'utc')),
+    last_used_at TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_agent_tokens_agent_name ON agent_tokens(agent_name);
+CREATE INDEX IF NOT EXISTS idx_agent_tokens_active ON agent_tokens(is_active) WHERE is_active = 1;
+CREATE INDEX IF NOT EXISTS idx_agent_tokens_hash ON agent_tokens(token_hash);
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at) VALUES (26, datetime('now', 'utc'));

migrations/027_teams_auth_phase_b.sql

@@ -0,0 +1,35 @@
+-- 027_teams_auth_phase_b.sql
+-- SOLO additive -- nessun DROP/ALTER su tabelle esistenti
+
+CREATE TABLE IF NOT EXISTS teams (
+  id TEXT PRIMARY KEY,
+  slug TEXT UNIQUE NOT NULL,
+  display_name TEXT NOT NULL,
+  description TEXT,
+  parent_team_id TEXT REFERENCES teams(id),
+  created_by TEXT REFERENCES users(id),
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%SZ', 'now')),
+  deleted_at TEXT
+);
+
+CREATE TABLE IF NOT EXISTS team_members (
+  team_id TEXT NOT NULL REFERENCES teams(id) ON DELETE CASCADE,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  is_admin INTEGER NOT NULL DEFAULT 0,
+  joined_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%SZ', 'now')),
+  PRIMARY KEY (team_id, user_id)
+);
+
+CREATE TABLE IF NOT EXISTS project_teams (
+  project TEXT NOT NULL,
+  team_id TEXT NOT NULL REFERENCES teams(id) ON DELETE CASCADE,
+  is_public INTEGER NOT NULL DEFAULT 0,
+  assigned_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%SZ', 'now')),
+  PRIMARY KEY (project, team_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_team_members_user ON team_members(user_id);
+CREATE INDEX IF NOT EXISTS idx_project_teams_team ON project_teams(team_id);
+CREATE INDEX IF NOT EXISTS idx_project_teams_project ON project_teams(project);
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (27);

migrations/028_learnings.sql

@@ -0,0 +1,23 @@
+-- Learnings DB: consultable knowledge base to prevent recurring errors
+-- deploy gap 3x, migration collision 3x, subtree push 3x → never again
+
+CREATE TABLE IF NOT EXISTS learnings (
+    id TEXT PRIMARY KEY,
+    title TEXT NOT NULL,
+    category TEXT NOT NULL,          -- 'deploy', 'migration', 'auth', 'testing', 'architecture', 'security', 'performance'
+    description TEXT NOT NULL,       -- what happened + how it was resolved
+    tags TEXT DEFAULT '[]',          -- JSON array of tags
+    module TEXT,                     -- module involved (e.g. 'api/security.py', 'console', 'scripts')
+    severity TEXT DEFAULT 'medium',  -- 'low', 'medium', 'high', 'critical'
+    frequency INTEGER DEFAULT 1,    -- how many times it occurred
+    last_occurrence TEXT,            -- ISO datetime of last occurrence
+    prevention TEXT,                 -- what to do to prevent it
+    session INTEGER,                 -- session number where documented
+    project TEXT,                    -- project slug
+    created_at TEXT NOT NULL DEFAULT (datetime('now','utc')),
+    updated_at TEXT
+);
+
+CREATE INDEX idx_learnings_category ON learnings(category);
+CREATE INDEX idx_learnings_project ON learnings(project);
+CREATE INDEX idx_learnings_tags ON learnings(tags);

migrations/029_team_roles.sql

@@ -0,0 +1,14 @@
+-- 029_team_roles.sql
+-- Flat teams: add role column to team_members, add avatar_color to teams
+-- Migrate is_admin boolean to role text enum ('member'|'admin')
+
+-- Add role column with default 'member'
+ALTER TABLE team_members ADD COLUMN role TEXT NOT NULL DEFAULT 'member';
+
+-- Migrate existing is_admin=1 rows to role='admin'
+UPDATE team_members SET role = 'admin' WHERE is_admin = 1;
+
+-- Add avatar_color to teams for UI display
+ALTER TABLE teams ADD COLUMN avatar_color TEXT;
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (29);

migrations/030_finder_pins.sql

@@ -0,0 +1,10 @@
+CREATE TABLE IF NOT EXISTS finder_pins (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    path TEXT NOT NULL,
+    label TEXT,
+    position INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE(user_id, path)
+);
+CREATE INDEX IF NOT EXISTS idx_finder_pins_user ON finder_pins(user_id, position);

migrations/031_pr_deploy_status.sql

@@ -0,0 +1,9 @@
+-- 031_pr_deploy_status.sql
+-- v1.0.0 - 2026-03-10 - Add deploy tracking to pull_requests
+-- Tracks deploy result after PR merge: status, output, timestamp
+
+ALTER TABLE pull_requests ADD COLUMN deploy_status TEXT;  -- 'success', 'failed', 'skipped'
+ALTER TABLE pull_requests ADD COLUMN deploy_output TEXT;  -- last 2000 chars of stdout+stderr
+ALTER TABLE pull_requests ADD COLUMN deploy_at TEXT;      -- ISO timestamp of deploy completion
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at) VALUES (31, datetime('now', 'utc'));

migrations/032_task_reminders.sql

@@ -0,0 +1,7 @@
+-- 032_task_reminders.sql
+-- v1.0.0 - 2026-03-10 - Add due_date and reminder tracking to tasks
+
+ALTER TABLE tasks ADD COLUMN due_date TEXT DEFAULT NULL;           -- ISO 8601 date (YYYY-MM-DD)
+ALTER TABLE tasks ADD COLUMN reminder_sent_at TEXT DEFAULT NULL;  -- ISO 8601 datetime, null = not sent
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at) VALUES (32, datetime('now', 'utc'));

migrations/033_events_retry_count.sql

@@ -0,0 +1,6 @@
+-- Migration 033: Add retry_count to events table for n8n dispatcher
+-- Tracks dispatch attempts per event. Dead letter after n8n_max_retry_count failures.
+
+ALTER TABLE events ADD COLUMN retry_count INTEGER DEFAULT 0;
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at) VALUES (33, datetime('now', 'utc'));

migrations/033_session_owner.sql

@@ -0,0 +1,9 @@
+-- Migration 033: Add owner tracking to sessions
+-- Track which user owns a tmux session for MCP client attribution
+
+ALTER TABLE sessions_meta ADD COLUMN owner_id TEXT DEFAULT NULL;
+
+-- Index for lookups by owner
+CREATE INDEX IF NOT EXISTS idx_sessions_owner ON sessions_meta(owner_id);
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at) VALUES (33, datetime('now', 'utc'));

migrations/034_notifications.sql

@@ -0,0 +1,38 @@
+-- Migration 034: Notifications table for in-app notification center
+-- Stores persistent notifications with read/unread state per user.
+
+CREATE TABLE IF NOT EXISTS notifications (
+    id          TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+    user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    event_id    TEXT REFERENCES events(id) ON DELETE SET NULL,
+    type        TEXT NOT NULL,
+    title       TEXT NOT NULL,
+    body        TEXT,
+    target_type TEXT CHECK(target_type IN ('task', 'pr')),
+    target_id   TEXT,
+    project     TEXT,
+    read_at     TEXT DEFAULT NULL,
+    acted_at    TEXT DEFAULT NULL,
+    created_at  TEXT NOT NULL DEFAULT (datetime('now', 'utc'))
+);
+
+-- Partial index for unread notifications (most common query)
+CREATE INDEX IF NOT EXISTS idx_notifications_user_unread
+    ON notifications (user_id, created_at DESC)
+    WHERE read_at IS NULL;
+
+-- General index for all notifications by user
+CREATE INDEX IF NOT EXISTS idx_notifications_user_recent
+    ON notifications (user_id, created_at DESC);
+
+-- Target lookup for marking acted_at after approve/reject
+CREATE INDEX IF NOT EXISTS idx_notifications_target
+    ON notifications (target_type, target_id);
+
+-- Prevent duplicate notifications for same event+user
+CREATE UNIQUE INDEX IF NOT EXISTS idx_notifications_event_user
+    ON notifications (event_id, user_id)
+    WHERE event_id IS NOT NULL;
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at)
+VALUES (34, datetime('now', 'utc'));

migrations/035_shared_links.sql

@@ -0,0 +1,15 @@
+-- Shareable file links with expiring tokens
+INSERT INTO schema_versions (version) VALUES (35);
+
+CREATE TABLE IF NOT EXISTS shared_links (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    token TEXT NOT NULL UNIQUE,
+    path TEXT NOT NULL,
+    created_by TEXT NOT NULL,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    expires_at DATETIME NOT NULL,
+    access_count INTEGER DEFAULT 0,
+    last_accessed_at DATETIME
+);
+CREATE INDEX IF NOT EXISTS idx_shared_links_token ON shared_links(token);
+CREATE INDEX IF NOT EXISTS idx_shared_links_expires ON shared_links(expires_at);

migrations/036_session_index_upgrade.sql

@@ -0,0 +1,29 @@
+-- v036: Performance indexes for session scoping and visibility queries
+-- Migration 033 created idx_sessions_owner on sessions_meta(owner_id).
+-- This upgrades to a composite covering index and adds visibility query indexes.
+
+-- Upgrade sessions index: composite (owner_id, created_at DESC) for covering scan
+DROP INDEX IF EXISTS idx_sessions_owner;
+
+CREATE INDEX IF NOT EXISTS idx_sessions_meta_owner_created
+    ON sessions_meta(owner_id, created_at DESC);
+-- WHERE owner_id = ? ORDER BY created_at DESC → pure index scan, no filesort
+
+-- Visibility query join columns — full table scan on every request without these
+
+CREATE INDEX IF NOT EXISTS idx_team_members_user_team
+    ON team_members(user_id, team_id);
+
+CREATE INDEX IF NOT EXISTS idx_team_members_team_id
+    ON team_members(team_id);
+
+CREATE INDEX IF NOT EXISTS idx_teams_active
+    ON teams(id) WHERE deleted_at IS NULL;
+
+CREATE INDEX IF NOT EXISTS idx_project_teams_team_project
+    ON project_teams(team_id, project);
+
+CREATE INDEX IF NOT EXISTS idx_project_teams_public
+    ON project_teams(project) WHERE is_public = 1;
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at) VALUES (36, datetime('now', 'utc'));

migrations/037_pr_approval.sql

@@ -0,0 +1,15 @@
+-- v037: Phase 2 — PR approval workflow (four-eyes gate)
+
+ALTER TABLE pull_requests ADD COLUMN approved_by TEXT REFERENCES users(id) ON DELETE SET NULL;
+ALTER TABLE pull_requests ADD COLUMN approved_at DATETIME;
+
+-- Colonne provisioning utenti (Fase 3 prep, aggiunte ora per atomicita migration)
+ALTER TABLE users ADD COLUMN linux_username TEXT;
+ALTER TABLE users ADD COLUMN provisioned_at DATETIME;
+ALTER TABLE users ADD COLUMN onboarding_completed INTEGER NOT NULL DEFAULT 0;
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_users_linux_username
+    ON users(linux_username) WHERE linux_username IS NOT NULL;
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at)
+VALUES (37, datetime('now'));

migrations/038_pr_submitted_by.sql

@@ -0,0 +1,6 @@
+-- v038: Add submitted_by to pull_requests (tracks who submitted the PR for four-eyes on approve)
+
+ALTER TABLE pull_requests ADD COLUMN submitted_by TEXT REFERENCES users(id) ON DELETE SET NULL;
+
+INSERT OR IGNORE INTO schema_versions (version, applied_at)
+VALUES (38, datetime('now'));

migrations/039_push_subscriptions.sql

@@ -0,0 +1,17 @@
+-- Migration 039: Web Push notification subscriptions + outbox tracking
+-- Feature: Push notifications (task d2f85bf2)
+
+CREATE TABLE IF NOT EXISTS push_subscriptions (
+    endpoint TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    p256dh TEXT NOT NULL,
+    auth TEXT NOT NULL,
+    created_at TEXT DEFAULT (datetime('now', 'utc'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_push_subs_user ON push_subscriptions(user_id);
+
+-- Track which notifications have been pushed (outbox pattern)
+ALTER TABLE notifications ADD COLUMN pushed_at TEXT;
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (39);

migrations/040_semantic_search.sql

@@ -0,0 +1,16 @@
+-- Migration 040: Semantic search documents table
+-- Feature: Handoff embedding search (task dc729190)
+-- Note: vec0 virtual table created at RUNTIME (migration runner can't load extensions)
+-- Schema: vec_documents(doc_id INTEGER PK, embedding float[512])
+
+CREATE TABLE IF NOT EXISTS documents (
+    id INTEGER PRIMARY KEY,
+    file_path TEXT NOT NULL UNIQUE,
+    project TEXT NOT NULL,
+    content_hash TEXT,
+    created_at TEXT DEFAULT (datetime('now', 'utc'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_documents_project ON documents(project);
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (40);

migrations/041_workspaces.sql

@@ -0,0 +1,63 @@
+-- Migration 041: Multi-tenancy foundation — workspaces table + workspace_id on core tables
+-- Pattern: ALTER ADD COLUMN (no REFERENCES/DEFAULT — crashes with PRAGMA foreign_keys=ON in SQLite 3.45)
+-- Then: UPDATE backfill → CREATE INDEX
+-- Idempotency: _column_exists() in db.py handles partial failure recovery
+
+CREATE TABLE IF NOT EXISTS workspaces (
+    id TEXT PRIMARY KEY,
+    slug TEXT NOT NULL UNIQUE,
+    display_name TEXT NOT NULL,
+    created_at DATETIME DEFAULT (datetime('now','utc'))
+);
+
+-- Default workspace for existing single-user installation
+INSERT OR IGNORE INTO workspaces (id, slug, display_name)
+VALUES ('ws_default', 'default', 'Default Workspace');
+
+-- Add workspace_id to all core tables (10 tables)
+-- Each follows: ADD COLUMN → UPDATE backfill → INDEX
+
+ALTER TABLE teams ADD COLUMN workspace_id TEXT;
+UPDATE teams SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+ALTER TABLE users ADD COLUMN workspace_id TEXT;
+UPDATE users SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+ALTER TABLE agent_tokens ADD COLUMN workspace_id TEXT;
+UPDATE agent_tokens SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+ALTER TABLE tasks ADD COLUMN workspace_id TEXT;
+UPDATE tasks SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+ALTER TABLE pull_requests ADD COLUMN workspace_id TEXT;
+UPDATE pull_requests SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+ALTER TABLE sessions_meta ADD COLUMN workspace_id TEXT;
+UPDATE sessions_meta SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+ALTER TABLE notifications ADD COLUMN workspace_id TEXT;
+UPDATE notifications SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+ALTER TABLE documents ADD COLUMN workspace_id TEXT;
+UPDATE documents SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+ALTER TABLE events ADD COLUMN workspace_id TEXT;
+UPDATE events SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+ALTER TABLE learnings ADD COLUMN workspace_id TEXT;
+UPDATE learnings SET workspace_id = 'ws_default' WHERE workspace_id IS NULL;
+
+-- Composite indexes for query patterns: WHERE workspace_id = ? AND ...
+CREATE INDEX IF NOT EXISTS idx_teams_workspace ON teams(workspace_id);
+CREATE INDEX IF NOT EXISTS idx_users_workspace ON users(workspace_id);
+CREATE INDEX IF NOT EXISTS idx_agent_tokens_workspace ON agent_tokens(workspace_id);
+CREATE INDEX IF NOT EXISTS idx_tasks_ws_status ON tasks(workspace_id, status);
+CREATE INDEX IF NOT EXISTS idx_tasks_ws_project ON tasks(workspace_id, project);
+CREATE INDEX IF NOT EXISTS idx_prs_ws ON pull_requests(workspace_id);
+CREATE INDEX IF NOT EXISTS idx_sessions_ws ON sessions_meta(workspace_id);
+CREATE INDEX IF NOT EXISTS idx_notifications_ws ON notifications(workspace_id);
+CREATE INDEX IF NOT EXISTS idx_events_ws ON events(workspace_id);
+CREATE INDEX IF NOT EXISTS idx_documents_ws ON documents(workspace_id);
+CREATE INDEX IF NOT EXISTS idx_learnings_ws ON learnings(workspace_id);
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (41);

migrations/042_oidc_providers.sql

@@ -0,0 +1,24 @@
+-- Migration 042: SSO/OIDC provider configuration
+-- Supports WorkOS AuthKit + future custom OIDC/SAML providers
+
+CREATE TABLE IF NOT EXISTS oidc_providers (
+    id TEXT PRIMARY KEY,
+    workspace_id TEXT NOT NULL,
+    slug TEXT NOT NULL,
+    provider_type TEXT NOT NULL CHECK(provider_type IN ('workos','custom_oidc','saml')),
+    issuer_url TEXT,
+    client_id TEXT NOT NULL,
+    client_secret_encrypted TEXT NOT NULL,
+    allowed_email_domains TEXT DEFAULT '[]',  -- JSON array of allowed domains
+    claims_mapping TEXT DEFAULT '{}',  -- JSON: OIDC claim -> MarvisX field
+    enabled INTEGER DEFAULT 1,
+    created_at DATETIME DEFAULT (datetime('now','utc')),
+    UNIQUE(workspace_id, slug)
+);
+
+-- Link users to external identity providers
+ALTER TABLE users ADD COLUMN external_id TEXT;  -- OIDC sub claim
+ALTER TABLE users ADD COLUMN auth_provider TEXT DEFAULT 'local';  -- local|workos|oidc
+CREATE INDEX IF NOT EXISTS idx_users_external ON users(auth_provider, external_id);
+
+INSERT OR IGNORE INTO schema_versions (version) VALUES (42);