Add agent config revisions, issue-approval links, and robust migration reconciliation

Add agent_config_revisions table for tracking agent configuration changes with rollback support. Add issue_approvals junction table linking issues to approvals. New migrations (0005, 0006) for permissions column and new tables. Rework migration client with statement-level idempotency checks (table/column/index/constraint existence) so migrations can be safely retried against partially-migrated databases. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-19 13:02:14 -06:00
parent e0a878f4eb
commit 778b39d3b5
10 changed files with 6199 additions and 11 deletions
--- a/packages/db/src/client.ts
+++ b/packages/db/src/client.ts
@@ -1,6 +1,7 @@
+import { createHash } from "node:crypto";
 import { drizzle as drizzlePg } from "drizzle-orm/postgres-js";
 import { migrate as migratePg } from "drizzle-orm/postgres-js/migrator";
-import { readdir, readFile } from "node:fs/promises";
+import { readFile, readdir } from "node:fs/promises";
 import postgres from "postgres";
 import * as schema from "./schema/index.js";

@@ -17,6 +18,17 @@ function quoteIdentifier(value: string): string {
  return `"${value.replaceAll("\"", "\"\"")}"`;
 }

+function quoteLiteral(value: string): string {
+  return `'${value.replaceAll("'", "''")}'`;
+}
+
+function splitMigrationStatements(content: string): string[] {
+  return content
+    .split("--> statement-breakpoint")
+    .map((statement) => statement.trim())
+    .filter((statement) => statement.length > 0);
+}
+
 export type MigrationState =
  | { status: "upToDate"; tableCount: number; availableMigrations: string[]; appliedMigrations: string[] }
  | {
@@ -42,37 +54,222 @@ async function listMigrationFiles(): Promise<string[]> {
 }

 type MigrationJournalFile = {
-  entries?: Array<{ tag?: string }>;
+  entries?: Array<{ tag?: string; when?: number }>;
 };

-async function listJournalMigrationFiles(): Promise<string[]> {
+type JournalMigrationEntry = {
+  fileName: string;
+  folderMillis: number;
+};
+
+async function listJournalMigrationEntries(): Promise<JournalMigrationEntry[]> {
  try {
    const raw = await readFile(MIGRATIONS_JOURNAL_JSON, "utf8");
    const parsed = JSON.parse(raw) as MigrationJournalFile;
    if (!Array.isArray(parsed.entries)) return [];
    return parsed.entries
-      .map((entry) => (typeof entry?.tag === "string" ? `${entry.tag}.sql` : null))
-      .filter((name): name is string => typeof name === "string");
+      .map((entry) => {
+        if (typeof entry?.tag !== "string") return null;
+        if (typeof entry?.when !== "number" || !Number.isFinite(entry.when)) return null;
+        return { fileName: `${entry.tag}.sql`, folderMillis: entry.when };
+      })
+      .filter((entry): entry is JournalMigrationEntry => entry !== null);
  } catch {
    return [];
  }
 }

+async function listJournalMigrationFiles(): Promise<string[]> {
+  const entries = await listJournalMigrationEntries();
+  return entries.map((entry) => entry.fileName);
+}
+
+async function readMigrationFileContent(migrationFile: string): Promise<string> {
+  return readFile(new URL(`./migrations/${migrationFile}`, import.meta.url), "utf8");
+}
+
+async function mapHashesToMigrationFiles(migrationFiles: string[]): Promise<Map<string, string>> {
+  const mapped = new Map<string, string>();
+
+  await Promise.all(
+    migrationFiles.map(async (migrationFile) => {
+      const content = await readMigrationFileContent(migrationFile);
+      const hash = createHash("sha256").update(content).digest("hex");
+      mapped.set(hash, migrationFile);
+    }),
+  );
+
+  return mapped;
+}
+
+async function getMigrationTableColumnNames(
+  sql: ReturnType<typeof postgres>,
+  migrationTableSchema: string,
+): Promise<Set<string>> {
+  const columns = await sql.unsafe<{ column_name: string }[]>(
+    `
+      SELECT column_name
+      FROM information_schema.columns
+      WHERE table_schema = ${quoteLiteral(migrationTableSchema)}
+        AND table_name = ${quoteLiteral(DRIZZLE_MIGRATIONS_TABLE)}
+    `,
+  );
+  return new Set(columns.map((column) => column.column_name));
+}
+
+async function tableExists(
+  sql: ReturnType<typeof postgres>,
+  tableName: string,
+): Promise<boolean> {
+  const rows = await sql<{ exists: boolean }[]>`
+    SELECT EXISTS (
+      SELECT 1
+      FROM information_schema.tables
+      WHERE table_schema = 'public'
+        AND table_name = ${tableName}
+    ) AS exists
+  `;
+  return rows[0]?.exists ?? false;
+}
+
+async function columnExists(
+  sql: ReturnType<typeof postgres>,
+  tableName: string,
+  columnName: string,
+): Promise<boolean> {
+  const rows = await sql<{ exists: boolean }[]>`
+    SELECT EXISTS (
+      SELECT 1
+      FROM information_schema.columns
+      WHERE table_schema = 'public'
+        AND table_name = ${tableName}
+        AND column_name = ${columnName}
+    ) AS exists
+  `;
+  return rows[0]?.exists ?? false;
+}
+
+async function indexExists(
+  sql: ReturnType<typeof postgres>,
+  indexName: string,
+): Promise<boolean> {
+  const rows = await sql<{ exists: boolean }[]>`
+    SELECT EXISTS (
+      SELECT 1
+      FROM pg_class c
+      JOIN pg_namespace n ON n.oid = c.relnamespace
+      WHERE n.nspname = 'public'
+        AND c.relkind = 'i'
+        AND c.relname = ${indexName}
+    ) AS exists
+  `;
+  return rows[0]?.exists ?? false;
+}
+
+async function constraintExists(
+  sql: ReturnType<typeof postgres>,
+  constraintName: string,
+): Promise<boolean> {
+  const rows = await sql<{ exists: boolean }[]>`
+    SELECT EXISTS (
+      SELECT 1
+      FROM pg_constraint c
+      JOIN pg_namespace n ON n.oid = c.connamespace
+      WHERE n.nspname = 'public'
+        AND c.conname = ${constraintName}
+    ) AS exists
+  `;
+  return rows[0]?.exists ?? false;
+}
+
+async function migrationStatementAlreadyApplied(
+  sql: ReturnType<typeof postgres>,
+  statement: string,
+): Promise<boolean> {
+  const normalized = statement.replace(/\s+/g, " ").trim();
+
+  const createTableMatch = normalized.match(/^CREATE TABLE(?: IF NOT EXISTS)? "([^"]+)"/i);
+  if (createTableMatch) {
+    return tableExists(sql, createTableMatch[1]);
+  }
+
+  const addColumnMatch = normalized.match(
+    /^ALTER TABLE "([^"]+)" ADD COLUMN(?: IF NOT EXISTS)? "([^"]+)"/i,
+  );
+  if (addColumnMatch) {
+    return columnExists(sql, addColumnMatch[1], addColumnMatch[2]);
+  }
+
+  const createIndexMatch = normalized.match(/^CREATE (?:UNIQUE )?INDEX(?: IF NOT EXISTS)? "([^"]+)"/i);
+  if (createIndexMatch) {
+    return indexExists(sql, createIndexMatch[1]);
+  }
+
+  const addConstraintMatch = normalized.match(/^ALTER TABLE "([^"]+)" ADD CONSTRAINT "([^"]+)"/i);
+  if (addConstraintMatch) {
+    return constraintExists(sql, addConstraintMatch[2]);
+  }
+
+  // If we cannot reason about a statement safely, require manual migration.
+  return false;
+}
+
+async function migrationContentAlreadyApplied(
+  sql: ReturnType<typeof postgres>,
+  migrationContent: string,
+): Promise<boolean> {
+  const statements = splitMigrationStatements(migrationContent);
+  if (statements.length === 0) return false;
+
+  for (const statement of statements) {
+    const applied = await migrationStatementAlreadyApplied(sql, statement);
+    if (!applied) return false;
+  }
+
+  return true;
+}
+
 async function loadAppliedMigrations(
  sql: ReturnType<typeof postgres>,
  migrationTableSchema: string,
  availableMigrations: string[],
 ): Promise<string[]> {
-  const qualifiedTable = `${quoteIdentifier(migrationTableSchema)}.${quoteIdentifier(DRIZZLE_MIGRATIONS_TABLE)}`;
-  try {
+  const quotedSchema = quoteIdentifier(migrationTableSchema);
+  const qualifiedTable = `${quotedSchema}.${quoteIdentifier(DRIZZLE_MIGRATIONS_TABLE)}`;
+  const columnNames = await getMigrationTableColumnNames(sql, migrationTableSchema);
+
+  if (columnNames.has("name")) {
    const rows = await sql.unsafe<{ name: string }[]>(`SELECT name FROM ${qualifiedTable} ORDER BY id`);
    return rows.map((row) => row.name).filter((name): name is string => Boolean(name));
-  } catch (error) {
-    if (!(error instanceof Error) || !error.message.includes('column "name" does not exist')) {
-      throw error;
+  }
+
+  if (columnNames.has("hash") && columnNames.has("created_at")) {
+    const journalEntries = await listJournalMigrationEntries();
+    if (journalEntries.length > 0) {
+      const lastDbRows = await sql.unsafe<{ created_at: string | number | null }[]>(
+        `SELECT created_at FROM ${qualifiedTable} ORDER BY created_at DESC LIMIT 1`,
+      );
+      const lastCreatedAt = Number(lastDbRows[0]?.created_at ?? -1);
+      if (Number.isFinite(lastCreatedAt) && lastCreatedAt >= 0) {
+        return journalEntries
+          .filter((entry) => availableMigrations.includes(entry.fileName))
+          .filter((entry) => entry.folderMillis <= lastCreatedAt)
+          .map((entry) => entry.fileName);
+      }
+      return [];
    }
  }

+  if (columnNames.has("hash")) {
+    const rows = await sql.unsafe<{ hash: string }[]>(`SELECT hash FROM ${qualifiedTable} ORDER BY id`);
+    const hashesToMigrationFiles = await mapHashesToMigrationFiles(availableMigrations);
+    const appliedFromHashes = rows
+      .map((row) => hashesToMigrationFiles.get(row.hash))
+      .filter((name): name is string => Boolean(name));
+
+    if (appliedFromHashes.length > 0) return appliedFromHashes;
+  }
+
  const rows = await sql.unsafe<{ id: number }[]>(`SELECT id FROM ${qualifiedTable} ORDER BY id`);
  const journalMigrationFiles = await listJournalMigrationFiles();
  const appliedFromIds = rows
@@ -83,6 +280,106 @@ async function loadAppliedMigrations(
  return availableMigrations.slice(0, Math.max(0, rows.length));
 }

+export type MigrationHistoryReconcileResult = {
+  repairedMigrations: string[];
+  remainingMigrations: string[];
+};
+
+export async function reconcilePendingMigrationHistory(
+  url: string,
+): Promise<MigrationHistoryReconcileResult> {
+  const state = await inspectMigrations(url);
+  if (state.status !== "needsMigrations" || state.reason !== "pending-migrations") {
+    return { repairedMigrations: [], remainingMigrations: [] };
+  }
+
+  const sql = postgres(url, { max: 1 });
+  const repairedMigrations: string[] = [];
+
+  try {
+    const journalEntries = await listJournalMigrationEntries();
+    const folderMillisByFile = new Map(journalEntries.map((entry) => [entry.fileName, entry.folderMillis]));
+    const migrationTableSchema = await discoverMigrationTableSchema(sql);
+    if (!migrationTableSchema) {
+      return { repairedMigrations, remainingMigrations: state.pendingMigrations };
+    }
+
+    const columnNames = await getMigrationTableColumnNames(sql, migrationTableSchema);
+    const qualifiedTable = `${quoteIdentifier(migrationTableSchema)}.${quoteIdentifier(DRIZZLE_MIGRATIONS_TABLE)}`;
+
+    for (const migrationFile of state.pendingMigrations) {
+      const migrationContent = await readMigrationFileContent(migrationFile);
+      const alreadyApplied = await migrationContentAlreadyApplied(sql, migrationContent);
+      if (!alreadyApplied) break;
+
+      const hash = createHash("sha256").update(migrationContent).digest("hex");
+      const folderMillis = folderMillisByFile.get(migrationFile) ?? Date.now();
+      const existingByHash = columnNames.has("hash")
+        ? await sql.unsafe<{ created_at: string | number | null }[]>(
+            `SELECT created_at FROM ${qualifiedTable} WHERE hash = ${quoteLiteral(hash)} ORDER BY created_at DESC LIMIT 1`,
+          )
+        : [];
+      const existingByName = columnNames.has("name")
+        ? await sql.unsafe<{ created_at: string | number | null }[]>(
+            `SELECT created_at FROM ${qualifiedTable} WHERE name = ${quoteLiteral(migrationFile)} ORDER BY created_at DESC LIMIT 1`,
+          )
+        : [];
+      if (existingByHash.length > 0 || existingByName.length > 0) {
+        if (columnNames.has("created_at")) {
+          const existingHashCreatedAt = Number(existingByHash[0]?.created_at ?? -1);
+          if (existingByHash.length > 0 && Number.isFinite(existingHashCreatedAt) && existingHashCreatedAt < folderMillis) {
+            await sql.unsafe(
+              `UPDATE ${qualifiedTable} SET created_at = ${quoteLiteral(String(folderMillis))} WHERE hash = ${quoteLiteral(hash)} AND created_at < ${quoteLiteral(String(folderMillis))}`,
+            );
+          }
+
+          const existingNameCreatedAt = Number(existingByName[0]?.created_at ?? -1);
+          if (existingByName.length > 0 && Number.isFinite(existingNameCreatedAt) && existingNameCreatedAt < folderMillis) {
+            await sql.unsafe(
+              `UPDATE ${qualifiedTable} SET created_at = ${quoteLiteral(String(folderMillis))} WHERE name = ${quoteLiteral(migrationFile)} AND created_at < ${quoteLiteral(String(folderMillis))}`,
+            );
+          }
+        }
+
+        repairedMigrations.push(migrationFile);
+        continue;
+      }
+
+      const insertColumns: string[] = [];
+      const insertValues: string[] = [];
+
+      if (columnNames.has("hash")) {
+        insertColumns.push(quoteIdentifier("hash"));
+        insertValues.push(quoteLiteral(hash));
+      }
+      if (columnNames.has("name")) {
+        insertColumns.push(quoteIdentifier("name"));
+        insertValues.push(quoteLiteral(migrationFile));
+      }
+      if (columnNames.has("created_at")) {
+        insertColumns.push(quoteIdentifier("created_at"));
+        insertValues.push(quoteLiteral(String(folderMillis)));
+      }
+
+      if (insertColumns.length === 0) break;
+
+      await sql.unsafe(
+        `INSERT INTO ${qualifiedTable} (${insertColumns.join(", ")}) VALUES (${insertValues.join(", ")})`,
+      );
+      repairedMigrations.push(migrationFile);
+    }
+  } finally {
+    await sql.end();
+  }
+
+  const refreshed = await inspectMigrations(url);
+  return {
+    repairedMigrations,
+    remainingMigrations:
+      refreshed.status === "needsMigrations" ? refreshed.pendingMigrations : [],
+  };
+}
+
 async function discoverMigrationTableSchema(sql: ReturnType<typeof postgres>): Promise<string | null> {
  const rows = await sql<{ schemaName: string }[]>`
    SELECT n.nspname AS "schemaName"
--- a/packages/db/src/index.ts
+++ b/packages/db/src/index.ts
@@ -3,7 +3,9 @@ export {
  ensurePostgresDatabase,
  inspectMigrations,
  applyPendingMigrations,
+  reconcilePendingMigrationHistory,
  type MigrationState,
+  type MigrationHistoryReconcileResult,
  migratePostgresIfEmpty,
  type MigrationBootstrapResult,
  type Db,
--- a/packages/db/src/migrations/0005_chief_luke_cage.sql
+++ b/packages/db/src/migrations/0005_chief_luke_cage.sql
@@ -0,0 +1,19 @@
+CREATE TABLE "approval_comments" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"company_id" uuid NOT NULL,
+	"approval_id" uuid NOT NULL,
+	"author_agent_id" uuid,
+	"author_user_id" text,
+	"body" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "agents" ADD COLUMN "permissions" jsonb DEFAULT '{}'::jsonb NOT NULL;--> statement-breakpoint
+ALTER TABLE "companies" ADD COLUMN "require_board_approval_for_new_agents" boolean DEFAULT true NOT NULL;--> statement-breakpoint
+ALTER TABLE "approval_comments" ADD CONSTRAINT "approval_comments_company_id_companies_id_fk" FOREIGN KEY ("company_id") REFERENCES "public"."companies"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "approval_comments" ADD CONSTRAINT "approval_comments_approval_id_approvals_id_fk" FOREIGN KEY ("approval_id") REFERENCES "public"."approvals"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "approval_comments" ADD CONSTRAINT "approval_comments_author_agent_id_agents_id_fk" FOREIGN KEY ("author_agent_id") REFERENCES "public"."agents"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "approval_comments_company_idx" ON "approval_comments" USING btree ("company_id");--> statement-breakpoint
+CREATE INDEX "approval_comments_approval_idx" ON "approval_comments" USING btree ("approval_id");--> statement-breakpoint
+CREATE INDEX "approval_comments_approval_created_idx" ON "approval_comments" USING btree ("approval_id","created_at");--> statement-breakpoint
--- a/packages/db/src/migrations/0006_overjoyed_mister_sinister.sql
+++ b/packages/db/src/migrations/0006_overjoyed_mister_sinister.sql
@@ -0,0 +1,36 @@
+CREATE TABLE "agent_config_revisions" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"company_id" uuid NOT NULL,
+	"agent_id" uuid NOT NULL,
+	"created_by_agent_id" uuid,
+	"created_by_user_id" text,
+	"source" text DEFAULT 'patch' NOT NULL,
+	"rolled_back_from_revision_id" uuid,
+	"changed_keys" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"before_config" jsonb NOT NULL,
+	"after_config" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "issue_approvals" (
+	"company_id" uuid NOT NULL,
+	"issue_id" uuid NOT NULL,
+	"approval_id" uuid NOT NULL,
+	"linked_by_agent_id" uuid,
+	"linked_by_user_id" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "issue_approvals_pk" PRIMARY KEY("issue_id","approval_id")
+);
+--> statement-breakpoint
+ALTER TABLE "agent_config_revisions" ADD CONSTRAINT "agent_config_revisions_company_id_companies_id_fk" FOREIGN KEY ("company_id") REFERENCES "public"."companies"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_config_revisions" ADD CONSTRAINT "agent_config_revisions_agent_id_agents_id_fk" FOREIGN KEY ("agent_id") REFERENCES "public"."agents"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "agent_config_revisions" ADD CONSTRAINT "agent_config_revisions_created_by_agent_id_agents_id_fk" FOREIGN KEY ("created_by_agent_id") REFERENCES "public"."agents"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "issue_approvals" ADD CONSTRAINT "issue_approvals_company_id_companies_id_fk" FOREIGN KEY ("company_id") REFERENCES "public"."companies"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "issue_approvals" ADD CONSTRAINT "issue_approvals_issue_id_issues_id_fk" FOREIGN KEY ("issue_id") REFERENCES "public"."issues"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "issue_approvals" ADD CONSTRAINT "issue_approvals_approval_id_approvals_id_fk" FOREIGN KEY ("approval_id") REFERENCES "public"."approvals"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "issue_approvals" ADD CONSTRAINT "issue_approvals_linked_by_agent_id_agents_id_fk" FOREIGN KEY ("linked_by_agent_id") REFERENCES "public"."agents"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "agent_config_revisions_company_agent_created_idx" ON "agent_config_revisions" USING btree ("company_id","agent_id","created_at");--> statement-breakpoint
+CREATE INDEX "agent_config_revisions_agent_created_idx" ON "agent_config_revisions" USING btree ("agent_id","created_at");--> statement-breakpoint
+CREATE INDEX "issue_approvals_issue_idx" ON "issue_approvals" USING btree ("issue_id");--> statement-breakpoint
+CREATE INDEX "issue_approvals_approval_idx" ON "issue_approvals" USING btree ("approval_id");--> statement-breakpoint
+CREATE INDEX "issue_approvals_company_idx" ON "issue_approvals" USING btree ("company_id");
--- a/packages/db/src/migrations/meta/0005_snapshot.json
+++ b/packages/db/src/migrations/meta/0005_snapshot.json
--- a/packages/db/src/migrations/meta/0006_snapshot.json
+++ b/packages/db/src/migrations/meta/0006_snapshot.json
--- a/packages/db/src/migrations/meta/_journal.json
+++ b/packages/db/src/migrations/meta/_journal.json
@@ -36,6 +36,20 @@
      "when": 1771545600000,
      "tag": "0004_issue_identifiers",
      "breakpoints": true
+    },
+    {
+      "idx": 5,
+      "version": "7",
+      "when": 1771545601000,
+      "tag": "0005_chief_luke_cage",
+      "breakpoints": true
+    },
+    {
+      "idx": 6,
+      "version": "7",
+      "when": 1771545602000,
+      "tag": "0006_overjoyed_mister_sinister",
+      "breakpoints": true
    }
  ]
-}
+}
--- a/packages/db/src/schema/agent_config_revisions.ts
+++ b/packages/db/src/schema/agent_config_revisions.ts
@@ -0,0 +1,28 @@
+import { pgTable, uuid, text, timestamp, jsonb, index } from "drizzle-orm/pg-core";
+import { companies } from "./companies.js";
+import { agents } from "./agents.js";
+
+export const agentConfigRevisions = pgTable(
+  "agent_config_revisions",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    companyId: uuid("company_id").notNull().references(() => companies.id),
+    agentId: uuid("agent_id").notNull().references(() => agents.id, { onDelete: "cascade" }),
+    createdByAgentId: uuid("created_by_agent_id").references(() => agents.id, { onDelete: "set null" }),
+    createdByUserId: text("created_by_user_id"),
+    source: text("source").notNull().default("patch"),
+    rolledBackFromRevisionId: uuid("rolled_back_from_revision_id"),
+    changedKeys: jsonb("changed_keys").$type<string[]>().notNull().default([]),
+    beforeConfig: jsonb("before_config").$type<Record<string, unknown>>().notNull(),
+    afterConfig: jsonb("after_config").$type<Record<string, unknown>>().notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+  },
+  (table) => ({
+    companyAgentCreatedIdx: index("agent_config_revisions_company_agent_created_idx").on(
+      table.companyId,
+      table.agentId,
+      table.createdAt,
+    ),
+    agentCreatedIdx: index("agent_config_revisions_agent_created_idx").on(table.agentId, table.createdAt),
+  }),
+);
--- a/packages/db/src/schema/index.ts
+++ b/packages/db/src/schema/index.ts
@@ -1,11 +1,13 @@
 export { companies } from "./companies.js";
 export { agents } from "./agents.js";
+export { agentConfigRevisions } from "./agent_config_revisions.js";
 export { agentApiKeys } from "./agent_api_keys.js";
 export { agentRuntimeState } from "./agent_runtime_state.js";
 export { agentWakeupRequests } from "./agent_wakeup_requests.js";
 export { projects } from "./projects.js";
 export { goals } from "./goals.js";
 export { issues } from "./issues.js";
+export { issueApprovals } from "./issue_approvals.js";
 export { issueComments } from "./issue_comments.js";
 export { heartbeatRuns } from "./heartbeat_runs.js";
 export { heartbeatRunEvents } from "./heartbeat_run_events.js";
--- a/packages/db/src/schema/issue_approvals.ts
+++ b/packages/db/src/schema/issue_approvals.ts
@@ -0,0 +1,23 @@
+import { pgTable, uuid, text, timestamp, index, primaryKey } from "drizzle-orm/pg-core";
+import { companies } from "./companies.js";
+import { issues } from "./issues.js";
+import { approvals } from "./approvals.js";
+import { agents } from "./agents.js";
+
+export const issueApprovals = pgTable(
+  "issue_approvals",
+  {
+    companyId: uuid("company_id").notNull().references(() => companies.id),
+    issueId: uuid("issue_id").notNull().references(() => issues.id, { onDelete: "cascade" }),
+    approvalId: uuid("approval_id").notNull().references(() => approvals.id, { onDelete: "cascade" }),
+    linkedByAgentId: uuid("linked_by_agent_id").references(() => agents.id, { onDelete: "set null" }),
+    linkedByUserId: text("linked_by_user_id"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+  },
+  (table) => ({
+    pk: primaryKey({ columns: [table.issueId, table.approvalId], name: "issue_approvals_pk" }),
+    issueIdx: index("issue_approvals_issue_idx").on(table.issueId),
+    approvalIdx: index("issue_approvals_approval_idx").on(table.approvalId),
+    companyIdx: index("issue_approvals_company_idx").on(table.companyId),
+  }),
+);