Files
viettranx 156b2dd96c feat(secure-cli): per-agent grants with setting overrides
Replace agent_id column on secure_cli_binaries with is_global flag
and new secure_cli_agent_grants table for per-agent access control
with optional deny_args, deny_verbose, timeout_seconds, tips overrides.

- Migration 000036: create grants table, migrate agent-specific rows,
  dedup binaries, drop agent_id, add is_global
- Store layer: SecureCLIAgentGrantStore interface + PG implementation,
  LookupByBinary with LEFT JOIN grant merge, ListForAgent
- HTTP API: CRUD endpoints at /v1/cli-credentials/{id}/agent-grants
- Agent loop: buildCredentialCLIContext uses ListForAgent for scoped
  system prompt (agents only see authorized CLIs)
- Web UI: grants dialog with card list + inline form, is_global toggle
  replaces agent dropdown, i18n for en/vi/zh
2026-04-04 13:18:57 +07:00

1372 lines
62 KiB
SQL

-- GoClaw SQLite Schema (auto-translated from PG migrations 000001-000029)
--
-- Translation rules applied:
-- UUID → TEXT (36-char string)
-- TIMESTAMPTZ → TEXT (RFC3339)
-- JSONB → TEXT (JSON string)
-- BYTEA → BLOB
-- SERIAL/BIGSERIAL → INTEGER PRIMARY KEY AUTOINCREMENT
-- DEFAULT uuid_generate_v7() / gen_random_uuid() → removed (generated in Go)
-- DEFAULT NOW() / CURRENT_TIMESTAMP → DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
-- text[] / uuid[] → TEXT (JSON array)
-- vector(N) → OMITTED (sqlite-vec virtual tables added separately)
-- tsvector → OMITTED (FTS5 virtual tables added separately)
-- CREATE EXTENSION / CREATE OR REPLACE FUNCTION → OMITTED
-- CREATE INDEX USING gin / hnsw → OMITTED
-- USING btree → removed from CREATE INDEX
--
-- Tables dropped across migrations (not included):
-- group_file_writers (migration 23: merged into agent_config_permissions)
-- handoff_routes (migration 26: dropped)
-- delegation_history (migration 26: dropped)
-- team_messages (migration 24: dropped)
-- team_workspace_files (migration 24: dropped)
-- team_workspace_comments (migration 24: dropped)
-- team_workspace_file_versions (migration 24: dropped)
-- team_task_attachments (migration 24: old version dropped, new path-based version created)
-- custom_tools (migration 27: dropped)
--
-- FK cascade constraints reflect final state after migration 23 alterations.
PRAGMA foreign_keys = ON;
-- ============================================================
-- Table: tenants
-- (created first — referenced by almost all other tables)
-- ============================================================
CREATE TABLE IF NOT EXISTS tenants (
id TEXT NOT NULL PRIMARY KEY,
name VARCHAR(255) NOT NULL,
slug VARCHAR(100) NOT NULL,
status VARCHAR(20) NOT NULL DEFAULT 'active',
settings TEXT NOT NULL DEFAULT '{}',
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_tenants_slug ON tenants(slug);
CREATE INDEX IF NOT EXISTS idx_tenants_status ON tenants(status) WHERE status = 'active';
-- Seed master tenant (required by all FK references)
INSERT OR IGNORE INTO tenants (id, name, slug, status)
VALUES ('0193a5b0-7000-7000-8000-000000000001', 'Master', 'master', 'active');
-- ============================================================
-- Table: tenant_users
-- ============================================================
CREATE TABLE IF NOT EXISTS tenant_users (
id TEXT NOT NULL PRIMARY KEY,
tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL,
display_name VARCHAR(255),
role VARCHAR(20) NOT NULL DEFAULT 'member',
metadata TEXT NOT NULL DEFAULT '{}',
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(tenant_id, user_id)
);
CREATE INDEX IF NOT EXISTS idx_tenant_users_user ON tenant_users(user_id);
CREATE INDEX IF NOT EXISTS idx_tenant_users_tenant ON tenant_users(tenant_id);
-- ============================================================
-- Table: llm_providers
-- ============================================================
CREATE TABLE IF NOT EXISTS llm_providers (
id TEXT NOT NULL PRIMARY KEY,
name VARCHAR(50) NOT NULL,
display_name VARCHAR(255),
provider_type VARCHAR(30) NOT NULL DEFAULT 'openai_compat',
api_base TEXT,
api_key TEXT,
enabled BOOLEAN NOT NULL DEFAULT 1,
settings TEXT NOT NULL DEFAULT '{}',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
-- tenant-scoped unique name (migration 27 Phase I)
CREATE UNIQUE INDEX IF NOT EXISTS idx_llm_providers_tenant_name ON llm_providers(tenant_id, name);
CREATE INDEX IF NOT EXISTS idx_llm_providers_tenant ON llm_providers(tenant_id);
-- ============================================================
-- Table: agents
-- Note: tsv (tsvector) and embedding (vector) columns omitted
-- ============================================================
CREATE TABLE IF NOT EXISTS agents (
id TEXT NOT NULL PRIMARY KEY,
agent_key VARCHAR(100) NOT NULL,
display_name VARCHAR(255),
owner_id VARCHAR(255) NOT NULL,
provider VARCHAR(50) NOT NULL DEFAULT 'openrouter',
model VARCHAR(200) NOT NULL,
context_window INT NOT NULL DEFAULT 200000,
max_tool_iterations INT NOT NULL DEFAULT 20,
workspace TEXT NOT NULL DEFAULT '.',
restrict_to_workspace BOOLEAN NOT NULL DEFAULT 1,
tools_config TEXT NOT NULL DEFAULT '{}',
sandbox_config TEXT,
subagents_config TEXT,
memory_config TEXT,
compaction_config TEXT,
context_pruning TEXT,
other_config TEXT NOT NULL DEFAULT '{}',
is_default BOOLEAN NOT NULL DEFAULT 0,
agent_type VARCHAR(20) NOT NULL DEFAULT 'open',
status VARCHAR(20) DEFAULT 'active',
frontmatter TEXT,
budget_monthly_cents INTEGER,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
deleted_at TEXT
);
-- Final unique constraint: tenant-scoped agent_key for active agents (migration 27 Phase I)
CREATE UNIQUE INDEX IF NOT EXISTS idx_agents_tenant_agent_key_active ON agents(tenant_id, agent_key) WHERE deleted_at IS NULL;
CREATE INDEX IF NOT EXISTS idx_agents_owner ON agents(owner_id) WHERE deleted_at IS NULL;
CREATE INDEX IF NOT EXISTS idx_agents_status ON agents(status) WHERE deleted_at IS NULL;
CREATE INDEX IF NOT EXISTS idx_agents_tenant ON agents(tenant_id);
CREATE INDEX IF NOT EXISTS idx_agents_tenant_active ON agents(tenant_id) WHERE deleted_at IS NULL;
-- ============================================================
-- Table: agent_shares
-- ============================================================
CREATE TABLE IF NOT EXISTS agent_shares (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL,
role VARCHAR(20) NOT NULL DEFAULT 'user',
granted_by VARCHAR(255) NOT NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(agent_id, user_id)
);
CREATE INDEX IF NOT EXISTS idx_agent_shares_user ON agent_shares(user_id);
CREATE INDEX IF NOT EXISTS idx_agent_shares_tenant ON agent_shares(tenant_id);
-- ============================================================
-- Table: agent_context_files
-- ============================================================
CREATE TABLE IF NOT EXISTS agent_context_files (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
file_name VARCHAR(255) NOT NULL,
content TEXT NOT NULL DEFAULT '',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(agent_id, file_name)
);
CREATE INDEX IF NOT EXISTS idx_agent_context_files_tenant ON agent_context_files(tenant_id);
-- ============================================================
-- Table: user_context_files
-- ============================================================
CREATE TABLE IF NOT EXISTS user_context_files (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL,
file_name VARCHAR(255) NOT NULL,
content TEXT NOT NULL DEFAULT '',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(agent_id, user_id, file_name)
);
CREATE INDEX IF NOT EXISTS idx_user_context_files_tenant ON user_context_files(tenant_id);
-- ============================================================
-- Table: user_agent_profiles
-- ============================================================
CREATE TABLE IF NOT EXISTS user_agent_profiles (
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL,
workspace TEXT,
metadata TEXT DEFAULT '{}',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
first_seen_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
last_seen_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
PRIMARY KEY (agent_id, user_id)
);
CREATE INDEX IF NOT EXISTS idx_user_agent_profiles_tenant ON user_agent_profiles(tenant_id);
-- ============================================================
-- Table: user_agent_overrides
-- ============================================================
CREATE TABLE IF NOT EXISTS user_agent_overrides (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL,
provider VARCHAR(50),
model VARCHAR(200),
settings TEXT NOT NULL DEFAULT '{}',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(agent_id, user_id)
);
CREATE INDEX IF NOT EXISTS idx_user_agent_overrides_tenant ON user_agent_overrides(tenant_id);
-- ============================================================
-- Table: agent_teams
-- (defined before sessions/memory since they reference it)
-- ============================================================
CREATE TABLE IF NOT EXISTS agent_teams (
id TEXT NOT NULL PRIMARY KEY,
name VARCHAR(255) NOT NULL,
lead_agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
description TEXT,
status VARCHAR(20) NOT NULL DEFAULT 'active',
settings TEXT NOT NULL DEFAULT '{}',
created_by VARCHAR(255) NOT NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_agent_teams_tenant ON agent_teams(tenant_id);
-- ============================================================
-- Table: sessions
-- ============================================================
CREATE TABLE IF NOT EXISTS sessions (
id TEXT NOT NULL PRIMARY KEY,
session_key VARCHAR(500) NOT NULL,
agent_id TEXT REFERENCES agents(id) ON DELETE CASCADE,
user_id VARCHAR(255),
messages TEXT NOT NULL DEFAULT '[]',
summary TEXT,
model VARCHAR(200),
provider VARCHAR(50),
channel VARCHAR(50),
input_tokens BIGINT NOT NULL DEFAULT 0,
output_tokens BIGINT NOT NULL DEFAULT 0,
compaction_count INT NOT NULL DEFAULT 0,
memory_flush_compaction_count INT NOT NULL DEFAULT 0,
memory_flush_at BIGINT DEFAULT 0,
label VARCHAR(500),
spawned_by VARCHAR(200),
spawn_depth INT NOT NULL DEFAULT 0,
metadata TEXT DEFAULT '{}',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
-- tenant-scoped unique session_key (migration 27 Phase I)
CREATE UNIQUE INDEX IF NOT EXISTS idx_sessions_tenant_session_key ON sessions(tenant_id, session_key);
CREATE INDEX IF NOT EXISTS idx_sessions_agent ON sessions(agent_id);
CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id);
CREATE INDEX IF NOT EXISTS idx_sessions_updated ON sessions(updated_at DESC);
CREATE INDEX IF NOT EXISTS idx_sessions_tenant ON sessions(tenant_id);
CREATE INDEX IF NOT EXISTS idx_sessions_tenant_user ON sessions(tenant_id, user_id);
CREATE INDEX IF NOT EXISTS idx_sessions_team ON sessions(team_id) WHERE team_id IS NOT NULL;
-- ============================================================
-- Table: memory_documents
-- ============================================================
CREATE TABLE IF NOT EXISTS memory_documents (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
user_id VARCHAR(255),
path VARCHAR(500) NOT NULL,
content TEXT NOT NULL DEFAULT '',
hash VARCHAR(64) NOT NULL,
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE UNIQUE INDEX IF NOT EXISTS idx_memdoc_unique ON memory_documents(agent_id, COALESCE(user_id, ''), path);
CREATE INDEX IF NOT EXISTS idx_memdoc_agent_user ON memory_documents(agent_id, user_id);
CREATE INDEX IF NOT EXISTS idx_memdoc_team ON memory_documents(team_id) WHERE team_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_memory_documents_tenant ON memory_documents(tenant_id);
-- ============================================================
-- Table: memory_chunks
-- Note: embedding (vector) and tsv (tsvector) columns omitted
-- ============================================================
CREATE TABLE IF NOT EXISTS memory_chunks (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
document_id TEXT REFERENCES memory_documents(id) ON DELETE CASCADE,
user_id VARCHAR(255),
path TEXT NOT NULL,
start_line INT NOT NULL DEFAULT 0,
end_line INT NOT NULL DEFAULT 0,
hash VARCHAR(64) NOT NULL,
text TEXT NOT NULL,
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_mem_agent_user ON memory_chunks(agent_id, user_id);
CREATE INDEX IF NOT EXISTS idx_mem_global ON memory_chunks(agent_id) WHERE user_id IS NULL;
CREATE INDEX IF NOT EXISTS idx_mem_document ON memory_chunks(document_id);
CREATE INDEX IF NOT EXISTS idx_memchunk_team ON memory_chunks(team_id) WHERE team_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_memory_chunks_tenant ON memory_chunks(tenant_id);
-- ============================================================
-- Table: embedding_cache
-- Note: embedding (vector) column omitted
-- ============================================================
CREATE TABLE IF NOT EXISTS embedding_cache (
hash VARCHAR(64) NOT NULL,
provider VARCHAR(50) NOT NULL,
model VARCHAR(200) NOT NULL,
dims INT NOT NULL DEFAULT 0,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
PRIMARY KEY (hash, provider, model)
);
CREATE INDEX IF NOT EXISTS idx_embedding_cache_tenant ON embedding_cache(tenant_id);
-- ============================================================
-- Table: skills
-- Note: embedding (vector) column omitted
-- ============================================================
CREATE TABLE IF NOT EXISTS skills (
id TEXT NOT NULL PRIMARY KEY,
name VARCHAR(255) NOT NULL,
slug VARCHAR(255) NOT NULL,
description TEXT,
owner_id VARCHAR(255) NOT NULL,
visibility VARCHAR(10) NOT NULL DEFAULT 'private',
version INT NOT NULL DEFAULT 1,
status VARCHAR(20) NOT NULL DEFAULT 'active',
frontmatter TEXT NOT NULL DEFAULT '{}',
file_path TEXT NOT NULL,
file_size BIGINT NOT NULL DEFAULT 0,
file_hash VARCHAR(64),
tags TEXT,
is_system BOOLEAN NOT NULL DEFAULT 0,
deps TEXT NOT NULL DEFAULT '{}',
enabled BOOLEAN NOT NULL DEFAULT 1,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
-- tenant-scoped unique slug (migration 27 Phase I)
CREATE UNIQUE INDEX IF NOT EXISTS idx_skills_tenant_slug ON skills(tenant_id, slug);
CREATE INDEX IF NOT EXISTS idx_skills_owner ON skills(owner_id);
CREATE INDEX IF NOT EXISTS idx_skills_visibility ON skills(visibility) WHERE status = 'active';
CREATE INDEX IF NOT EXISTS idx_skills_system ON skills(is_system) WHERE is_system = 1;
CREATE INDEX IF NOT EXISTS idx_skills_enabled ON skills(enabled) WHERE enabled = 0;
CREATE INDEX IF NOT EXISTS idx_skills_tenant ON skills(tenant_id);
-- ============================================================
-- Table: skill_agent_grants
-- ============================================================
CREATE TABLE IF NOT EXISTS skill_agent_grants (
id TEXT NOT NULL PRIMARY KEY,
skill_id TEXT NOT NULL REFERENCES skills(id) ON DELETE CASCADE,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
pinned_version INT NOT NULL,
granted_by VARCHAR(255) NOT NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(skill_id, agent_id)
);
CREATE INDEX IF NOT EXISTS idx_skill_agent_grants_agent ON skill_agent_grants(agent_id);
CREATE INDEX IF NOT EXISTS idx_skill_agent_grants_tenant ON skill_agent_grants(tenant_id);
-- ============================================================
-- Table: skill_user_grants
-- ============================================================
CREATE TABLE IF NOT EXISTS skill_user_grants (
id TEXT NOT NULL PRIMARY KEY,
skill_id TEXT NOT NULL REFERENCES skills(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL,
granted_by VARCHAR(255) NOT NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(skill_id, user_id)
);
CREATE INDEX IF NOT EXISTS idx_skill_user_grants_user ON skill_user_grants(user_id);
CREATE INDEX IF NOT EXISTS idx_skill_user_grants_tenant ON skill_user_grants(tenant_id);
-- ============================================================
-- Table: skill_tenant_configs
-- ============================================================
CREATE TABLE IF NOT EXISTS skill_tenant_configs (
skill_id TEXT NOT NULL REFERENCES skills(id) ON DELETE CASCADE,
tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
enabled BOOLEAN NOT NULL DEFAULT 1,
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
PRIMARY KEY (skill_id, tenant_id)
);
CREATE INDEX IF NOT EXISTS idx_skill_tenant_configs_tenant ON skill_tenant_configs(tenant_id);
-- ============================================================
-- Table: cron_jobs
-- ============================================================
CREATE TABLE IF NOT EXISTS cron_jobs (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT REFERENCES agents(id) ON DELETE CASCADE,
user_id TEXT,
name VARCHAR(255) NOT NULL,
enabled BOOLEAN NOT NULL DEFAULT 1,
schedule_kind VARCHAR(10) NOT NULL,
cron_expression VARCHAR(100),
interval_ms BIGINT,
run_at TEXT,
timezone VARCHAR(50),
payload TEXT NOT NULL,
delete_after_run BOOLEAN NOT NULL DEFAULT 0,
stateless INTEGER NOT NULL DEFAULT 0,
deliver INTEGER NOT NULL DEFAULT 0,
deliver_channel TEXT NOT NULL DEFAULT '',
deliver_to TEXT NOT NULL DEFAULT '',
wake_heartbeat INTEGER NOT NULL DEFAULT 0,
next_run_at TEXT,
last_run_at TEXT,
last_status VARCHAR(20),
last_error TEXT,
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_cron_jobs_user_id ON cron_jobs(user_id);
CREATE INDEX IF NOT EXISTS idx_cron_jobs_agent_user ON cron_jobs(agent_id, user_id);
CREATE INDEX IF NOT EXISTS idx_cron_jobs_team ON cron_jobs(team_id) WHERE team_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_cron_jobs_tenant ON cron_jobs(tenant_id);
-- ============================================================
-- Table: cron_run_logs
-- ============================================================
CREATE TABLE IF NOT EXISTS cron_run_logs (
id TEXT NOT NULL PRIMARY KEY,
job_id TEXT NOT NULL REFERENCES cron_jobs(id) ON DELETE CASCADE,
agent_id TEXT REFERENCES agents(id) ON DELETE SET NULL,
status VARCHAR(20) NOT NULL,
summary TEXT,
error TEXT,
duration_ms INT,
input_tokens INT DEFAULT 0,
output_tokens INT DEFAULT 0,
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
ran_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_cron_run_logs_job ON cron_run_logs(job_id, ran_at DESC);
CREATE INDEX IF NOT EXISTS idx_cron_run_logs_team ON cron_run_logs(team_id) WHERE team_id IS NOT NULL;
-- ============================================================
-- Table: pairing_requests
-- ============================================================
CREATE TABLE IF NOT EXISTS pairing_requests (
id TEXT NOT NULL PRIMARY KEY,
code VARCHAR(8) NOT NULL UNIQUE,
sender_id VARCHAR(200) NOT NULL,
channel VARCHAR(255) NOT NULL,
chat_id VARCHAR(200) NOT NULL,
account_id VARCHAR(100) NOT NULL DEFAULT 'default',
metadata TEXT DEFAULT '{}',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
expires_at TEXT NOT NULL,
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_pairing_requests_tenant ON pairing_requests(tenant_id);
-- ============================================================
-- Table: paired_devices
-- ============================================================
CREATE TABLE IF NOT EXISTS paired_devices (
id TEXT NOT NULL PRIMARY KEY,
sender_id VARCHAR(200) NOT NULL,
channel VARCHAR(255) NOT NULL,
chat_id VARCHAR(200) NOT NULL,
paired_by VARCHAR(100) NOT NULL DEFAULT 'operator',
metadata TEXT DEFAULT '{}',
expires_at TEXT,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
paired_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
-- tenant-scoped unique (migration 27 Phase I)
CREATE UNIQUE INDEX IF NOT EXISTS idx_paired_devices_tenant_sender_channel ON paired_devices(tenant_id, sender_id, channel);
CREATE INDEX IF NOT EXISTS idx_paired_devices_tenant ON paired_devices(tenant_id);
-- ============================================================
-- Table: traces
-- ============================================================
CREATE TABLE IF NOT EXISTS traces (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT,
user_id VARCHAR(255),
session_key TEXT,
run_id TEXT,
start_time TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
end_time TEXT,
duration_ms INT,
name TEXT,
channel VARCHAR(50),
input_preview TEXT,
output_preview TEXT,
total_input_tokens INT DEFAULT 0,
total_output_tokens INT DEFAULT 0,
total_cost NUMERIC(12,6) DEFAULT 0,
span_count INT DEFAULT 0,
llm_call_count INT DEFAULT 0,
tool_call_count INT DEFAULT 0,
status VARCHAR(20) DEFAULT 'running',
error TEXT,
metadata TEXT,
tags TEXT,
parent_trace_id TEXT,
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_traces_agent_time ON traces(agent_id, created_at DESC);
CREATE INDEX IF NOT EXISTS idx_traces_user_time ON traces(user_id, created_at DESC) WHERE user_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_traces_session ON traces(session_key, created_at DESC) WHERE session_key IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_traces_status ON traces(status) WHERE status = 'error';
CREATE INDEX IF NOT EXISTS idx_traces_parent ON traces(parent_trace_id) WHERE parent_trace_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_traces_quota ON traces(user_id, created_at DESC) WHERE parent_trace_id IS NULL AND user_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_traces_start_root ON traces(start_time DESC) WHERE parent_trace_id IS NULL;
CREATE INDEX IF NOT EXISTS idx_traces_team ON traces(team_id, created_at DESC) WHERE team_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_traces_tenant ON traces(tenant_id);
CREATE INDEX IF NOT EXISTS idx_traces_tenant_time ON traces(tenant_id, created_at DESC);
-- ============================================================
-- Table: spans
-- ============================================================
CREATE TABLE IF NOT EXISTS spans (
id TEXT NOT NULL PRIMARY KEY,
trace_id TEXT NOT NULL,
parent_span_id TEXT,
agent_id TEXT,
span_type VARCHAR(20) NOT NULL,
name TEXT,
start_time TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
end_time TEXT,
duration_ms INT,
status VARCHAR(20) DEFAULT 'running',
error TEXT,
level VARCHAR(10) DEFAULT 'DEFAULT',
model VARCHAR(200),
provider VARCHAR(50),
input_tokens INT,
output_tokens INT,
total_cost NUMERIC(12,8),
finish_reason VARCHAR(50),
model_params TEXT,
tool_name VARCHAR(200),
tool_call_id VARCHAR(100),
input_preview TEXT,
output_preview TEXT,
metadata TEXT,
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_spans_trace ON spans(trace_id, start_time);
CREATE INDEX IF NOT EXISTS idx_spans_trace_type ON spans(trace_id, span_type);
CREATE INDEX IF NOT EXISTS idx_spans_parent ON spans(parent_span_id) WHERE parent_span_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_spans_agent_time ON spans(agent_id, created_at DESC);
CREATE INDEX IF NOT EXISTS idx_spans_type ON spans(span_type, created_at DESC);
CREATE INDEX IF NOT EXISTS idx_spans_model ON spans(model, created_at DESC) WHERE model IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_spans_error ON spans(status) WHERE status = 'error';
CREATE INDEX IF NOT EXISTS idx_spans_team ON spans(team_id) WHERE team_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_spans_tenant ON spans(tenant_id);
-- ============================================================
-- Table: mcp_servers
-- ============================================================
CREATE TABLE IF NOT EXISTS mcp_servers (
id TEXT NOT NULL PRIMARY KEY,
name VARCHAR(255) NOT NULL,
display_name VARCHAR(255),
transport VARCHAR(50) NOT NULL,
command TEXT,
args TEXT DEFAULT '[]',
url TEXT,
headers TEXT DEFAULT '{}',
env TEXT DEFAULT '{}',
api_key TEXT,
tool_prefix VARCHAR(50),
timeout_sec INT DEFAULT 60,
settings TEXT NOT NULL DEFAULT '{}',
enabled BOOLEAN NOT NULL DEFAULT 1,
created_by VARCHAR(255) NOT NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
-- tenant-scoped unique name (migration 27 Phase I)
CREATE UNIQUE INDEX IF NOT EXISTS idx_mcp_servers_tenant_name ON mcp_servers(tenant_id, name);
CREATE INDEX IF NOT EXISTS idx_mcp_servers_tenant ON mcp_servers(tenant_id);
-- ============================================================
-- Table: mcp_agent_grants
-- ============================================================
CREATE TABLE IF NOT EXISTS mcp_agent_grants (
id TEXT NOT NULL PRIMARY KEY,
server_id TEXT NOT NULL REFERENCES mcp_servers(id) ON DELETE CASCADE,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
enabled BOOLEAN NOT NULL DEFAULT 1,
tool_allow TEXT,
tool_deny TEXT,
config_overrides TEXT,
granted_by VARCHAR(255) NOT NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(server_id, agent_id)
);
CREATE INDEX IF NOT EXISTS idx_mcp_agent_grants_agent ON mcp_agent_grants(agent_id);
CREATE INDEX IF NOT EXISTS idx_mcp_agent_grants_tenant ON mcp_agent_grants(tenant_id);
-- ============================================================
-- Table: mcp_user_grants
-- ============================================================
CREATE TABLE IF NOT EXISTS mcp_user_grants (
id TEXT NOT NULL PRIMARY KEY,
server_id TEXT NOT NULL REFERENCES mcp_servers(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL,
enabled BOOLEAN NOT NULL DEFAULT 1,
tool_allow TEXT,
tool_deny TEXT,
granted_by VARCHAR(255) NOT NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(server_id, user_id)
);
CREATE INDEX IF NOT EXISTS idx_mcp_user_grants_user ON mcp_user_grants(user_id);
CREATE INDEX IF NOT EXISTS idx_mcp_user_grants_tenant ON mcp_user_grants(tenant_id);
-- ============================================================
-- Table: mcp_access_requests
-- ============================================================
CREATE TABLE IF NOT EXISTS mcp_access_requests (
id TEXT NOT NULL PRIMARY KEY,
server_id TEXT NOT NULL REFERENCES mcp_servers(id) ON DELETE CASCADE,
agent_id TEXT REFERENCES agents(id) ON DELETE CASCADE,
user_id VARCHAR(255),
scope VARCHAR(10) NOT NULL,
status VARCHAR(20) NOT NULL DEFAULT 'pending',
reason TEXT,
tool_allow TEXT,
requested_by VARCHAR(255) NOT NULL,
reviewed_by VARCHAR(255),
reviewed_at TEXT,
review_note TEXT,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_mcp_requests_status ON mcp_access_requests(status) WHERE status = 'pending';
CREATE INDEX IF NOT EXISTS idx_mcp_requests_server ON mcp_access_requests(server_id);
CREATE INDEX IF NOT EXISTS idx_mcp_access_requests_tenant ON mcp_access_requests(tenant_id);
-- ============================================================
-- Table: mcp_user_credentials
-- ============================================================
CREATE TABLE IF NOT EXISTS mcp_user_credentials (
id TEXT NOT NULL PRIMARY KEY,
server_id TEXT NOT NULL REFERENCES mcp_servers(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL,
api_key TEXT,
headers BLOB,
env BLOB,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(server_id, user_id, tenant_id)
);
CREATE INDEX IF NOT EXISTS idx_mcp_user_credentials_tenant ON mcp_user_credentials(tenant_id);
CREATE INDEX IF NOT EXISTS idx_mcp_user_credentials_server ON mcp_user_credentials(server_id);
-- ============================================================
-- Table: channel_instances
-- ============================================================
CREATE TABLE IF NOT EXISTS channel_instances (
id TEXT NOT NULL PRIMARY KEY,
name VARCHAR(100) NOT NULL,
display_name VARCHAR(255) DEFAULT '',
channel_type VARCHAR(50) NOT NULL,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
credentials BLOB,
config TEXT DEFAULT '{}',
enabled BOOLEAN DEFAULT 1,
created_by VARCHAR(255) DEFAULT '',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
-- tenant-scoped unique name (migration 27 Phase I)
CREATE UNIQUE INDEX IF NOT EXISTS idx_channel_instances_tenant_name ON channel_instances(tenant_id, name);
CREATE INDEX IF NOT EXISTS idx_channel_instances_type ON channel_instances(channel_type);
CREATE INDEX IF NOT EXISTS idx_channel_instances_agent ON channel_instances(agent_id);
CREATE INDEX IF NOT EXISTS idx_channel_instances_tenant ON channel_instances(tenant_id);
-- ============================================================
-- Table: config_secrets
-- PK changed to (key, tenant_id) in migration 27 Phase I
-- ============================================================
CREATE TABLE IF NOT EXISTS config_secrets (
key VARCHAR(100) NOT NULL,
value BLOB NOT NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
PRIMARY KEY (key, tenant_id)
);
CREATE INDEX IF NOT EXISTS idx_config_secrets_tenant ON config_secrets(tenant_id);
-- ============================================================
-- Table: agent_links
-- ============================================================
CREATE TABLE IF NOT EXISTS agent_links (
id TEXT NOT NULL PRIMARY KEY,
source_agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
target_agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
direction VARCHAR(20) NOT NULL DEFAULT 'outbound',
description TEXT,
max_concurrent INT NOT NULL DEFAULT 3,
settings TEXT NOT NULL DEFAULT '{}',
status VARCHAR(20) NOT NULL DEFAULT 'active',
created_by VARCHAR(255) NOT NULL,
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(source_agent_id, target_agent_id),
CHECK (source_agent_id != target_agent_id)
);
CREATE INDEX IF NOT EXISTS idx_agent_links_source ON agent_links(source_agent_id) WHERE status = 'active';
CREATE INDEX IF NOT EXISTS idx_agent_links_target ON agent_links(target_agent_id) WHERE status = 'active';
CREATE INDEX IF NOT EXISTS idx_agent_links_tenant ON agent_links(tenant_id);
-- ============================================================
-- Table: agent_team_members
-- ============================================================
CREATE TABLE IF NOT EXISTS agent_team_members (
team_id TEXT NOT NULL REFERENCES agent_teams(id) ON DELETE CASCADE,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
role VARCHAR(20) NOT NULL DEFAULT 'member',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
joined_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
PRIMARY KEY (team_id, agent_id)
);
CREATE INDEX IF NOT EXISTS idx_agent_team_members_tenant ON agent_team_members(tenant_id);
-- ============================================================
-- Table: team_tasks
-- Note: tsv (tsvector) and embedding (vector) columns omitted
-- blocked_by stored as TEXT (JSON array of UUIDs)
-- ============================================================
CREATE TABLE IF NOT EXISTS team_tasks (
id TEXT NOT NULL PRIMARY KEY,
team_id TEXT NOT NULL REFERENCES agent_teams(id) ON DELETE CASCADE,
subject VARCHAR(500) NOT NULL,
description TEXT,
status VARCHAR(20) NOT NULL DEFAULT 'pending',
owner_agent_id TEXT REFERENCES agents(id) ON DELETE SET NULL,
blocked_by TEXT NOT NULL DEFAULT '[]',
priority INT NOT NULL DEFAULT 0,
result TEXT,
metadata TEXT NOT NULL DEFAULT '{}',
user_id VARCHAR(255),
channel VARCHAR(50),
task_type VARCHAR(30) NOT NULL DEFAULT 'general',
task_number INT NOT NULL DEFAULT 0,
identifier VARCHAR(20),
created_by_agent_id TEXT REFERENCES agents(id) ON DELETE SET NULL,
assignee_user_id VARCHAR(255),
parent_id TEXT REFERENCES team_tasks(id) ON DELETE SET NULL,
chat_id VARCHAR(255) DEFAULT '',
locked_at TEXT,
lock_expires_at TEXT,
progress_percent INT DEFAULT 0 CHECK (progress_percent BETWEEN 0 AND 100),
progress_step TEXT,
followup_at TEXT,
followup_count INT NOT NULL DEFAULT 0,
followup_max INT NOT NULL DEFAULT 0,
followup_message TEXT,
followup_channel VARCHAR(60),
followup_chat_id VARCHAR(255),
confidence_score REAL,
comment_count INT NOT NULL DEFAULT 0,
attachment_count INT NOT NULL DEFAULT 0,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_team_tasks_team ON team_tasks(team_id);
CREATE INDEX IF NOT EXISTS idx_team_tasks_status ON team_tasks(team_id, status);
CREATE INDEX IF NOT EXISTS idx_team_tasks_user_scope ON team_tasks(team_id, user_id) WHERE user_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_tt_parent ON team_tasks(parent_id) WHERE parent_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_tt_scope ON team_tasks(team_id, channel, chat_id);
CREATE INDEX IF NOT EXISTS idx_tt_type ON team_tasks(team_id, task_type);
CREATE INDEX IF NOT EXISTS idx_tt_lock ON team_tasks(lock_expires_at) WHERE lock_expires_at IS NOT NULL AND status = 'in_progress';
CREATE UNIQUE INDEX IF NOT EXISTS idx_tt_identifier ON team_tasks(team_id, identifier) WHERE identifier IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_tt_followup ON team_tasks(followup_at) WHERE followup_at IS NOT NULL AND status = 'in_progress';
-- idx_tt_blocked_by (GIN on array) omitted: Go code handles JSON array filtering
CREATE INDEX IF NOT EXISTS idx_tt_owner_status ON team_tasks(team_id, owner_agent_id, status);
CREATE INDEX IF NOT EXISTS idx_team_tasks_tenant ON team_tasks(tenant_id);
-- ============================================================
-- Table: team_task_comments
-- ============================================================
CREATE TABLE IF NOT EXISTS team_task_comments (
id TEXT NOT NULL PRIMARY KEY,
task_id TEXT NOT NULL REFERENCES team_tasks(id) ON DELETE CASCADE,
agent_id TEXT REFERENCES agents(id) ON DELETE SET NULL,
user_id VARCHAR(255),
content TEXT NOT NULL,
metadata TEXT DEFAULT '{}',
comment_type VARCHAR(20) NOT NULL DEFAULT 'note',
confidence_score REAL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_ttc_task ON team_task_comments(task_id);
CREATE INDEX IF NOT EXISTS idx_team_task_comments_tenant ON team_task_comments(tenant_id);
-- ============================================================
-- Table: team_task_events
-- ============================================================
CREATE TABLE IF NOT EXISTS team_task_events (
id TEXT NOT NULL PRIMARY KEY,
task_id TEXT NOT NULL REFERENCES team_tasks(id) ON DELETE CASCADE,
event_type VARCHAR(30) NOT NULL,
actor_type VARCHAR(10) NOT NULL,
actor_id VARCHAR(255) NOT NULL,
data TEXT,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_tte_task ON team_task_events(task_id);
CREATE INDEX IF NOT EXISTS idx_team_task_events_tenant ON team_task_events(tenant_id);
-- ============================================================
-- Table: team_task_attachments
-- (new path-based version from migration 24)
-- ============================================================
CREATE TABLE IF NOT EXISTS team_task_attachments (
id TEXT NOT NULL PRIMARY KEY,
task_id TEXT NOT NULL REFERENCES team_tasks(id) ON DELETE CASCADE,
team_id TEXT NOT NULL REFERENCES agent_teams(id) ON DELETE CASCADE,
chat_id VARCHAR(255) NOT NULL DEFAULT '',
path TEXT NOT NULL,
file_size BIGINT NOT NULL DEFAULT 0,
mime_type VARCHAR(100) DEFAULT '',
created_by_agent_id TEXT REFERENCES agents(id),
created_by_sender_id VARCHAR(255) DEFAULT '',
metadata TEXT NOT NULL DEFAULT '{}',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(task_id, path)
);
CREATE INDEX IF NOT EXISTS idx_tta_task ON team_task_attachments(task_id);
CREATE INDEX IF NOT EXISTS idx_tta_team ON team_task_attachments(team_id);
CREATE INDEX IF NOT EXISTS idx_team_task_attachments_tenant ON team_task_attachments(tenant_id);
-- ============================================================
-- Table: team_user_grants
-- ============================================================
CREATE TABLE IF NOT EXISTS team_user_grants (
id TEXT NOT NULL PRIMARY KEY,
team_id TEXT NOT NULL REFERENCES agent_teams(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL,
role VARCHAR(50) NOT NULL DEFAULT 'viewer',
granted_by VARCHAR(255),
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(team_id, user_id)
);
CREATE INDEX IF NOT EXISTS idx_team_user_grants_user ON team_user_grants(user_id);
CREATE INDEX IF NOT EXISTS idx_team_user_grants_team ON team_user_grants(team_id);
CREATE INDEX IF NOT EXISTS idx_team_user_grants_tenant ON team_user_grants(tenant_id);
-- ============================================================
-- Table: kg_entities
-- Note: embedding (vector) column omitted
-- ============================================================
CREATE TABLE IF NOT EXISTS kg_entities (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL DEFAULT '',
external_id VARCHAR(255) NOT NULL,
name TEXT NOT NULL,
entity_type VARCHAR(100) NOT NULL,
description TEXT DEFAULT '',
properties TEXT DEFAULT '{}',
source_id VARCHAR(255) DEFAULT '',
confidence REAL NOT NULL DEFAULT 1.0,
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(agent_id, user_id, external_id)
);
CREATE INDEX IF NOT EXISTS idx_kg_entities_scope ON kg_entities(agent_id, user_id);
CREATE INDEX IF NOT EXISTS idx_kg_entities_type ON kg_entities(agent_id, user_id, entity_type);
CREATE INDEX IF NOT EXISTS idx_kg_entities_team ON kg_entities(team_id) WHERE team_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_kg_entities_tenant ON kg_entities(tenant_id);
-- ============================================================
-- Table: kg_relations
-- ============================================================
CREATE TABLE IF NOT EXISTS kg_relations (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
user_id VARCHAR(255) NOT NULL DEFAULT '',
source_entity_id TEXT NOT NULL REFERENCES kg_entities(id) ON DELETE CASCADE,
relation_type VARCHAR(200) NOT NULL,
target_entity_id TEXT NOT NULL REFERENCES kg_entities(id) ON DELETE CASCADE,
confidence REAL NOT NULL DEFAULT 1.0,
properties TEXT DEFAULT '{}',
team_id TEXT REFERENCES agent_teams(id) ON DELETE SET NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(agent_id, user_id, source_entity_id, relation_type, target_entity_id)
);
CREATE INDEX IF NOT EXISTS idx_kg_relations_source ON kg_relations(source_entity_id, relation_type);
CREATE INDEX IF NOT EXISTS idx_kg_relations_target ON kg_relations(target_entity_id);
CREATE INDEX IF NOT EXISTS idx_kg_relations_team ON kg_relations(team_id) WHERE team_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_kg_relations_tenant ON kg_relations(tenant_id);
-- ============================================================
-- Table: channel_pending_messages
-- ============================================================
CREATE TABLE IF NOT EXISTS channel_pending_messages (
id TEXT NOT NULL PRIMARY KEY,
channel_name VARCHAR(100) NOT NULL,
history_key VARCHAR(200) NOT NULL,
sender VARCHAR(255) NOT NULL,
sender_id VARCHAR(255) NOT NULL DEFAULT '',
body TEXT NOT NULL,
platform_msg_id VARCHAR(100) NOT NULL DEFAULT '',
is_summary BOOLEAN NOT NULL DEFAULT 0,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_channel_pending_messages_lookup ON channel_pending_messages(channel_name, history_key, created_at);
CREATE INDEX IF NOT EXISTS idx_channel_pending_messages_tenant ON channel_pending_messages(tenant_id);
-- ============================================================
-- Table: channel_contacts
-- ============================================================
CREATE TABLE IF NOT EXISTS channel_contacts (
id TEXT NOT NULL PRIMARY KEY,
channel_type VARCHAR(50) NOT NULL,
channel_instance VARCHAR(255),
sender_id VARCHAR(255) NOT NULL,
user_id VARCHAR(255),
display_name VARCHAR(255),
username VARCHAR(255),
avatar_url TEXT,
peer_kind VARCHAR(20),
contact_type VARCHAR(20) NOT NULL DEFAULT 'user',
thread_id VARCHAR(100),
thread_type VARCHAR(20),
metadata TEXT DEFAULT '{}',
merged_id TEXT,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
first_seen_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
last_seen_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
-- tenant-scoped unique including thread_id for topic contacts (migration 35)
CREATE UNIQUE INDEX IF NOT EXISTS idx_channel_contacts_tenant_type_sender ON channel_contacts(tenant_id, channel_type, sender_id, COALESCE(thread_id, ''));
CREATE INDEX IF NOT EXISTS idx_channel_contacts_instance ON channel_contacts(channel_instance) WHERE channel_instance IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_channel_contacts_merged ON channel_contacts(merged_id) WHERE merged_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_channel_contacts_search ON channel_contacts(display_name, username);
CREATE INDEX IF NOT EXISTS idx_channel_contacts_tenant ON channel_contacts(tenant_id);
-- ============================================================
-- Table: activity_logs
-- ============================================================
CREATE TABLE IF NOT EXISTS activity_logs (
id TEXT NOT NULL PRIMARY KEY,
actor_type VARCHAR(20) NOT NULL,
actor_id VARCHAR(255) NOT NULL,
action VARCHAR(100) NOT NULL,
entity_type VARCHAR(50),
entity_id VARCHAR(255),
details TEXT,
ip_address VARCHAR(45),
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_activity_logs_actor ON activity_logs(actor_type, actor_id);
CREATE INDEX IF NOT EXISTS idx_activity_logs_action ON activity_logs(action);
CREATE INDEX IF NOT EXISTS idx_activity_logs_entity ON activity_logs(entity_type, entity_id);
CREATE INDEX IF NOT EXISTS idx_activity_logs_created ON activity_logs(created_at DESC);
CREATE INDEX IF NOT EXISTS idx_activity_logs_tenant ON activity_logs(tenant_id);
-- ============================================================
-- Table: usage_snapshots
-- ============================================================
CREATE TABLE IF NOT EXISTS usage_snapshots (
id TEXT NOT NULL PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
bucket_hour TEXT NOT NULL,
agent_id TEXT,
provider VARCHAR(50) NOT NULL DEFAULT '',
model VARCHAR(200) NOT NULL DEFAULT '',
channel VARCHAR(50) NOT NULL DEFAULT '',
input_tokens BIGINT NOT NULL DEFAULT 0,
output_tokens BIGINT NOT NULL DEFAULT 0,
cache_read_tokens BIGINT NOT NULL DEFAULT 0,
cache_create_tokens BIGINT NOT NULL DEFAULT 0,
thinking_tokens BIGINT NOT NULL DEFAULT 0,
total_cost NUMERIC(12,6) NOT NULL DEFAULT 0,
request_count INTEGER NOT NULL DEFAULT 0,
llm_call_count INTEGER NOT NULL DEFAULT 0,
tool_call_count INTEGER NOT NULL DEFAULT 0,
error_count INTEGER NOT NULL DEFAULT 0,
unique_users INTEGER NOT NULL DEFAULT 0,
avg_duration_ms INTEGER NOT NULL DEFAULT 0,
memory_docs INTEGER NOT NULL DEFAULT 0,
memory_chunks INTEGER NOT NULL DEFAULT 0,
kg_entities INTEGER NOT NULL DEFAULT 0,
kg_relations INTEGER NOT NULL DEFAULT 0,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_usage_snapshots_bucket ON usage_snapshots(bucket_hour DESC);
CREATE INDEX IF NOT EXISTS idx_usage_snapshots_agent_bucket ON usage_snapshots(agent_id, bucket_hour DESC);
CREATE INDEX IF NOT EXISTS idx_usage_snapshots_provider_bucket ON usage_snapshots(provider, bucket_hour DESC) WHERE provider != '';
CREATE INDEX IF NOT EXISTS idx_usage_snapshots_channel_bucket ON usage_snapshots(channel, bucket_hour DESC) WHERE channel != '';
-- COALESCE NULLs to sentinel so upsert dedup works (SQLite treats NULL != NULL in unique indexes).
CREATE UNIQUE INDEX IF NOT EXISTS idx_usage_snapshots_unique ON usage_snapshots(
bucket_hour,
COALESCE(agent_id, '00000000-0000-0000-0000-000000000000'),
COALESCE(provider, ''),
COALESCE(model, ''),
COALESCE(channel, ''),
tenant_id
);
CREATE INDEX IF NOT EXISTS idx_usage_snapshots_tenant ON usage_snapshots(tenant_id);
-- ============================================================
-- Table: builtin_tools
-- ============================================================
CREATE TABLE IF NOT EXISTS builtin_tools (
name VARCHAR(100) NOT NULL PRIMARY KEY,
display_name VARCHAR(255) NOT NULL,
description TEXT NOT NULL DEFAULT '',
category VARCHAR(50) NOT NULL DEFAULT 'general',
enabled BOOLEAN NOT NULL DEFAULT 1,
settings TEXT NOT NULL DEFAULT '{}',
requires TEXT DEFAULT '[]',
metadata TEXT DEFAULT '{}',
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_builtin_tools_category ON builtin_tools(category);
-- ============================================================
-- Table: builtin_tool_tenant_configs
-- ============================================================
CREATE TABLE IF NOT EXISTS builtin_tool_tenant_configs (
tool_name VARCHAR(100) NOT NULL REFERENCES builtin_tools(name) ON DELETE CASCADE,
tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
enabled BOOLEAN,
settings TEXT,
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
PRIMARY KEY (tool_name, tenant_id)
);
CREATE INDEX IF NOT EXISTS idx_builtin_tool_tenant_configs_tenant ON builtin_tool_tenant_configs(tenant_id);
-- ============================================================
-- Table: secure_cli_binaries
-- ============================================================
CREATE TABLE IF NOT EXISTS secure_cli_binaries (
id TEXT NOT NULL PRIMARY KEY,
binary_name TEXT NOT NULL,
binary_path TEXT,
description TEXT NOT NULL DEFAULT '',
encrypted_env BLOB NOT NULL,
deny_args TEXT NOT NULL DEFAULT '[]',
deny_verbose TEXT NOT NULL DEFAULT '[]',
timeout_seconds INTEGER NOT NULL DEFAULT 30,
tips TEXT NOT NULL DEFAULT '',
is_global BOOLEAN NOT NULL DEFAULT 1,
enabled BOOLEAN NOT NULL DEFAULT 1,
created_by TEXT NOT NULL DEFAULT '',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_secure_cli_binary_name ON secure_cli_binaries(binary_name);
CREATE UNIQUE INDEX IF NOT EXISTS idx_secure_cli_unique_binary_tenant ON secure_cli_binaries(binary_name, tenant_id);
CREATE INDEX IF NOT EXISTS idx_secure_cli_binaries_tenant ON secure_cli_binaries(tenant_id);
-- ============================================================
-- Table: secure_cli_agent_grants
-- ============================================================
CREATE TABLE IF NOT EXISTS secure_cli_agent_grants (
id TEXT NOT NULL PRIMARY KEY,
binary_id TEXT NOT NULL REFERENCES secure_cli_binaries(id) ON DELETE CASCADE,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
deny_args TEXT,
deny_verbose TEXT,
timeout_seconds INTEGER,
tips TEXT,
enabled BOOLEAN NOT NULL DEFAULT 1,
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(binary_id, agent_id, tenant_id)
);
CREATE INDEX IF NOT EXISTS idx_scag_binary ON secure_cli_agent_grants(binary_id);
CREATE INDEX IF NOT EXISTS idx_scag_agent ON secure_cli_agent_grants(agent_id);
CREATE INDEX IF NOT EXISTS idx_scag_tenant ON secure_cli_agent_grants(tenant_id);
-- ============================================================
-- Table: api_keys
-- ============================================================
CREATE TABLE IF NOT EXISTS api_keys (
id TEXT NOT NULL PRIMARY KEY,
name VARCHAR(100) NOT NULL,
prefix VARCHAR(8) NOT NULL,
key_hash VARCHAR(64) NOT NULL UNIQUE,
scopes TEXT NOT NULL DEFAULT '[]',
expires_at TEXT,
last_used_at TEXT,
revoked BOOLEAN NOT NULL DEFAULT 0,
created_by VARCHAR(255),
owner_id VARCHAR(255),
tenant_id TEXT REFERENCES tenants(id),
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_api_keys_key_hash ON api_keys(key_hash) WHERE NOT revoked;
CREATE INDEX IF NOT EXISTS idx_api_keys_prefix ON api_keys(prefix);
CREATE INDEX IF NOT EXISTS idx_api_keys_owner_id ON api_keys(owner_id) WHERE owner_id IS NOT NULL;
CREATE INDEX IF NOT EXISTS idx_api_keys_tenant ON api_keys(tenant_id) WHERE tenant_id IS NOT NULL;
-- ============================================================
-- Table: agent_heartbeats
-- ============================================================
CREATE TABLE IF NOT EXISTS agent_heartbeats (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL UNIQUE REFERENCES agents(id) ON DELETE CASCADE,
enabled BOOLEAN NOT NULL DEFAULT 0,
interval_sec INT NOT NULL DEFAULT 1800,
prompt TEXT,
provider_id TEXT REFERENCES llm_providers(id),
model VARCHAR(200),
isolated_session BOOLEAN NOT NULL DEFAULT 1,
light_context BOOLEAN NOT NULL DEFAULT 0,
ack_max_chars INT NOT NULL DEFAULT 300,
max_retries INT NOT NULL DEFAULT 2,
active_hours_start VARCHAR(5),
active_hours_end VARCHAR(5),
timezone TEXT,
channel VARCHAR(50),
chat_id TEXT,
next_run_at TEXT,
last_run_at TEXT,
last_status VARCHAR(20),
last_error TEXT,
run_count INT NOT NULL DEFAULT 0,
suppress_count INT NOT NULL DEFAULT 0,
metadata TEXT DEFAULT '{}',
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_heartbeats_due ON agent_heartbeats(next_run_at) WHERE enabled = 1 AND next_run_at IS NOT NULL;
-- ============================================================
-- Table: heartbeat_run_logs
-- ============================================================
CREATE TABLE IF NOT EXISTS heartbeat_run_logs (
id TEXT NOT NULL PRIMARY KEY,
heartbeat_id TEXT NOT NULL REFERENCES agent_heartbeats(id) ON DELETE CASCADE,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
status VARCHAR(20) NOT NULL,
summary TEXT,
error TEXT,
duration_ms INT,
input_tokens INT DEFAULT 0,
output_tokens INT DEFAULT 0,
skip_reason VARCHAR(50),
metadata TEXT DEFAULT '{}',
ran_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_hb_logs_heartbeat ON heartbeat_run_logs(heartbeat_id, ran_at DESC);
CREATE INDEX IF NOT EXISTS idx_hb_logs_agent ON heartbeat_run_logs(agent_id, ran_at DESC);
-- ============================================================
-- Table: agent_config_permissions
-- (scope widened to VARCHAR(255) in migration 23;
-- includes migrated group_file_writers rows)
-- ============================================================
CREATE TABLE IF NOT EXISTS agent_config_permissions (
id TEXT NOT NULL PRIMARY KEY,
agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
scope VARCHAR(255) NOT NULL,
config_type VARCHAR(50) NOT NULL,
user_id VARCHAR(255) NOT NULL,
permission VARCHAR(10) NOT NULL,
granted_by VARCHAR(255),
metadata TEXT DEFAULT '{}',
tenant_id TEXT NOT NULL REFERENCES tenants(id),
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
UNIQUE(agent_id, scope, config_type, user_id)
);
CREATE INDEX IF NOT EXISTS idx_acp_lookup ON agent_config_permissions(agent_id, scope, config_type);
CREATE INDEX IF NOT EXISTS idx_agent_config_permissions_tenant ON agent_config_permissions(tenant_id);
-- ============================================================
-- Table: skill_tenant_configs (already defined above)
-- Table: builtin_tool_tenant_configs (already defined above)
-- ============================================================
-- ============================================================
-- Table: system_configs
-- ============================================================
CREATE TABLE IF NOT EXISTS system_configs (
key VARCHAR(100) NOT NULL,
value TEXT NOT NULL,
tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
PRIMARY KEY (key, tenant_id)
);
CREATE INDEX IF NOT EXISTS idx_system_configs_tenant ON system_configs(tenant_id);
-- ============================================================
-- Table: subagent_tasks
-- ============================================================
CREATE TABLE IF NOT EXISTS subagent_tasks (
id TEXT PRIMARY KEY,
tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
parent_agent_key VARCHAR(255) NOT NULL,
session_key VARCHAR(500),
subject VARCHAR(255) NOT NULL,
description TEXT NOT NULL,
status VARCHAR(20) NOT NULL DEFAULT 'running',
result TEXT,
depth INTEGER NOT NULL DEFAULT 1,
model VARCHAR(255),
provider VARCHAR(255),
iterations INTEGER NOT NULL DEFAULT 0,
input_tokens INTEGER NOT NULL DEFAULT 0,
output_tokens INTEGER NOT NULL DEFAULT 0,
origin_channel VARCHAR(50),
origin_chat_id VARCHAR(255),
origin_peer_kind VARCHAR(20),
origin_user_id VARCHAR(255),
spawned_by TEXT,
completed_at TEXT,
archived_at TEXT,
metadata TEXT NOT NULL DEFAULT '{}',
created_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
updated_at TEXT DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
);
CREATE INDEX IF NOT EXISTS idx_subagent_tasks_parent_status ON subagent_tasks(tenant_id, parent_agent_key, status);
CREATE INDEX IF NOT EXISTS idx_subagent_tasks_session ON subagent_tasks(session_key);
CREATE INDEX IF NOT EXISTS idx_subagent_tasks_created ON subagent_tasks(tenant_id, created_at);