PostgreSQL schema for muse.db / muse.db 的 PostgreSQL 模式

This generated guide describes the database relations available to the daemon-native muse.db tool. Use schema-qualified names in SQL. The tool accepts one bounded, read-only SELECT statement; it is for diagnosis and cross-table tracing, not a replacement for purpose-built Feed, Ideas, chat, goals, artifact, or connector tools.

本生成指南描述守护进程原生 muse.db 工具可用的数据库关系。在 SQL 中请使用带模式（schema）限定的名称。该工具只接受单条有界的只读 SELECT 语句；它用于诊断与跨表追踪，并非专用的 Feed、Ideas、聊天、goals、artifact 或连接器工具的替代品。

Migration-set fingerprint: 9b8575628206745e9350b3b7df759d9bcfbe1ebb0cdc33596255d6edcd65980c.

迁移集指纹：9b8575628206745e9350b3b7df759d9bcfbe1ebb0cdc33596255d6edcd65980c。

All Muse application base tables listed below are queryable. PostgreSQL catalogs, migration bookkeeping, backup tables, credentials, Sentinel's separate approval store, and per-artifact app.db files are outside this surface. An identifier described as external or opaque has no local owner table to join against. Non-recursive CTE names must start with hatch_cte_; recursive CTEs are rejected.

下面列出的所有 Muse 应用基础表均可查询。PostgreSQL 系统目录、迁移簿记、备份表、凭据、Sentinel 独立的审批存储，以及各 artifact 的 app.db 文件均不在此查询面之内。被描述为 external 或 opaque 的标识符没有可供连接的本地属主表。非递归 CTE 的名称必须以 hatch_cte_ 开头；递归 CTE 会被拒绝。
Here, credentials means OAuth access or refresh tokens, passwords, API keys, and payment-instrument secrets such as card numbers or CVCs; those remain behind authd or their owning vault. Non-secret lifecycle metadata, including Stripe Link spend-request rows, remains queryable when listed below.

此处的凭据指 OAuth 访问令牌或刷新令牌、密码、API 密钥，以及卡号或 CVC 等支付工具机密；这些仍由 authd 或其所属保险库（vault）保管。非机密的生命周期元数据（包括 Stripe Link 消费请求行）只要在下列出，仍然可查询。

The model's private reasoning is never readable here. Thinking items and provider-encrypted redacted-thinking items are stored beside ordinary transcript records, so each table that carries them is served through a redacted security-barrier view; commentary text stays readable. Each affected table's note below says whether it filters out reasoning rows, withholds columns that embed reasoning, or both. A withheld column is not part of the table for this tool, so a query naming it fails as an unknown column; a filtered row is absent without error. Check the table's note before reading an absence or an unknown-column error as a gap in the records: where the note names no row filter, a missing row is a genuine gap, and where it names no withheld column, an unknown column is a mistake in the query. The tool also authenticates as a least-privilege database role holding SELECT on exactly the relations listed here, so nothing outside this guide is reachable.

模型的私有推理内容在此永远不可读。thinking 条目与提供方加密的 redacted-thinking 条目存储在普通转录记录旁边，因此每张承载它们的表都通过一个脱敏的安全屏障视图提供；评论文本保持可读。下文每个受影响表的说明都会指明：它是过滤掉推理行、扣留内嵌推理的列，还是两者兼有。被扣留的列对本工具而言不属于该表，因此查询中引用它会作为未知列而报错；被过滤的行则直接不出现，不报错误。在把行缺失或未知列错误解读为记录缺口之前，请先查看该表的说明：若说明未提到行过滤，缺失的行就是真实的缺口；若说明未提到被扣留的列，未知列就是查询本身写错了。该工具还以一个最小权限数据库角色完成认证，该角色恰好只对本文列出的关系持有 SELECT 权限，因此本指南之外的任何内容都不可触达。
【评论】该工具把模型推理内容隔离在“安全屏障视图”之后，并以只授予所列关系 SELECT 权限的最小权限数据库角色收敛查询面，属于纵深防御式的隐私边界设计。

SQL capabilities / SQL 能力

Only the built-in functions and cast spellings below are accepted. PostgreSQL permits functions and casts with side effects even inside SELECT, so muse.db rejects everything outside this reviewed set. If an error names an unsupported function or cast, rewrite the query using the listed operations rather than concluding that records are absent.

只接受下列内建函数与 cast 拼写。PostgreSQL 允许函数和 cast 即使在 SELECT 内部也产生副作用，因此 muse.db 会拒绝此已审集合之外的一切。如果错误信息提到某个不受支持的函数或 cast，请改用所列操作重写查询，而不要据此断定记录不存在。
【评论】PostgreSQL 允许函数和 cast 在 SELECT 中产生副作用，此处以白名单枚举的方式把只读约束落到具体的函数集合上。

Functions: abs, age, array_length, array_position, array_to_string, avg, bit_and, bit_or, bool_and, bool_or, btrim, cardinality, ceil, ceiling, char_length, coalesce, concat, concat_ws, count, date_bin, date_part, date_trunc, dense_rank, encode, every, extract, first_value, floor, greatest, json_array_length, json_build_array, json_build_object, json_extract_path, json_extract_path_text, json_object_keys, json_typeof, jsonb_array_length, jsonb_build_array, jsonb_build_object, jsonb_extract_path, jsonb_extract_path_text, jsonb_object_keys, jsonb_typeof, lag, last_value, lead, least, left, length, lower, ltrim, make_interval, max, md5, min, mod, now, nth_value, ntile, nullif, octet_length, position, power, rank, regexp_match, regexp_replace, replace, reverse, right, round, row_number, rtrim, split_part, sqrt, strpos, substr, substring, sum, time_bucket, timezone, to_char, to_json, to_jsonb, trim, upper.

函数：abs, age, array_length, array_position, array_to_string, avg, bit_and, bit_or, bool_and, bool_or, btrim, cardinality, ceil, ceiling, char_length, coalesce, concat, concat_ws, count, date_bin, date_part, date_trunc, dense_rank, encode, every, extract, first_value, floor, greatest, json_array_length, json_build_array, json_build_object, json_extract_path, json_extract_path_text, json_object_keys, json_typeof, jsonb_array_length, jsonb_build_array, jsonb_build_object, jsonb_extract_path, jsonb_extract_path_text, jsonb_object_keys, jsonb_typeof, lag, last_value, lead, least, left, length, lower, ltrim, make_interval, max, md5, min, mod, now, nth_value, ntile, nullif, octet_length, position, power, rank, regexp_match, regexp_replace, replace, reverse, right, round, row_number, rtrim, split_part, sqrt, strpos, substr, substring, sum, time_bucket, timezone, to_char, to_json, to_jsonb, trim, upper.

Cast spellings: bigint, bool, boolean, bytea, char, character, character varying, date, decimal, double precision, float4, float8, int, int2, int4, int8, integer, interval, json, jsonb, numeric, real, smallint, text, time, timestamp, timestamp with time zone, timestamp without time zone, timestamptz, timetz, uuid, varchar.

Cast 拼写：bigint, bool, boolean, bytea, char, character, character varying, date, decimal, double precision, float4, float8, int, int2, int4, int8, integer, interval, json, jsonb, numeric, real, smallint, text, time, timestamp, timestamp with time zone, timestamp without time zone, timestamptz, timetz, uuid, varchar.

Collection aggregates such as json_agg, jsonb_agg, array_agg, and string_agg are intentionally unavailable because they can build an unbounded value before the outer row and byte limits apply. Select the bounded rows directly instead.

诸如 json_agg、jsonb_agg、array_agg 与 string_agg 之类的集合聚合函数被有意设为不可用，因为它们可能在外层行数与字节限制生效之前就构建出无界的值。请改为直接选取有界的行。

Alias projected columns to unique names when joining tables. Queries with duplicate output column names are rejected before execution because JSON objects cannot preserve both values.

在连接多个表时，请为投影列指定唯一的别名。输出列名重复的查询会在执行前被拒绝，因为 JSON 对象无法同时保留两个同名的值。

Identifier resolver index / 标识符解析索引

Common soft references that are not always declared as PostgreSQL foreign keys:

未一律声明为 PostgreSQL 外键的常见软引用：

Tables / 表

activity

activity.activity_monitor_agent_threads

Keys and relationships:

键和关系：

• PRIMARY KEY activity_monitor_agent_threads_pkey: agent_id
  主键 activity_monitor_agent_threads_pkey：agent_id

activity.activity_monitor_carrier_user_messages

Keys and relationships:

键和关系：

• PRIMARY KEY activity_monitor_carrier_user_messages_pkey: link_seq
  主键 activity_monitor_carrier_user_messages_pkey：link_seq
• UNIQUE activity_monitor_carrier_user_carrier_message_id_user_messa_key: carrier_message_id, user_message_id
  唯一约束 activity_monitor_carrier_user_carrier_message_id_user_messa_key：carrier_message_id、user_message_id

activity.activity_monitor_message_threads

Keys and relationships:

键和关系：

• PRIMARY KEY activity_monitor_message_threads_pkey: message_id
  主键 activity_monitor_message_threads_pkey：message_id

activity.activity_monitor_runtime_work_threads

Keys and relationships:

键和关系：

• FOREIGN KEY activity_monitor_runtime_work_threads_goal_id_fkey: activity_thread_id → activity.activity_monitor_threads (activity_thread_id)
  外键 activity_monitor_runtime_work_threads_goal_id_fkey：activity_thread_id → activity.activity_monitor_threads（activity_thread_id）
• PRIMARY KEY activity_monitor_runtime_work_threads_pkey: work_id
  主键 activity_monitor_runtime_work_threads_pkey：work_id

activity.activity_monitor_thread_actions

Keys and relationships:

键和关系：

• PRIMARY KEY activity_monitor_thread_actions_pkey: action_id
  主键 activity_monitor_thread_actions_pkey：action_id
• UNIQUE activity_monitor_thread_actions_action_seq_key: action_seq
  唯一约束 activity_monitor_thread_actions_action_seq_key：action_seq

activity.activity_monitor_thread_sections

Keys and relationships:

键和关系：

• FOREIGN KEY activity_monitor_thread_sections_goal_id_fkey: activity_thread_id → activity.activity_monitor_threads (activity_thread_id)
  外键 activity_monitor_thread_sections_goal_id_fkey：activity_thread_id → activity.activity_monitor_threads（activity_thread_id）
• PRIMARY KEY activity_monitor_thread_sections_pkey: activity_thread_id, section_key
  主键 activity_monitor_thread_sections_pkey：activity_thread_id、section_key

activity.activity_monitor_threads

Keys and relationships:

键和关系：

• PRIMARY KEY activity_monitor_threads_pkey: activity_thread_id
  主键 activity_monitor_threads_pkey：activity_thread_id

activity.feed_entries

Keys and relationships:

键和关系：

• PRIMARY KEY feed_entries_pkey: activity_key
  主键 feed_entries_pkey：activity_key

agent

agent.agent_ancestors

Keys and relationships:

键和关系：

• PRIMARY KEY agent_ancestors_pkey: descendant_id, ancestor_id
  主键 agent_ancestors_pkey：descendant_id、ancestor_id

agent.agent_compactions

Redacted. The compaction detail payload is withheld because it carries the model reasoning retained across the checkpoint. Queries against this table run against the security-barrier view inspection.agent_compactions, which projects the columns listed below. Withheld columns: details_json.

已脱敏。压缩明细载荷被扣留，因为其中包含跨检查点保留的模型推理内容。针对该表的查询实际运行在安全屏障视图 inspection.agent_compactions 上，该视图仅投影下面列出的列。被扣留的列：details_json。

Keys and relationships:

键和关系：

• PRIMARY KEY agent_compactions_pkey: id
  主键 agent_compactions_pkey：id

agent.agent_message_token_usage

Keys and relationships:

键和关系：

• PRIMARY KEY agent_message_token_usage_pkey: agent_id, message_id
  主键 agent_message_token_usage_pkey：agent_id、message_id

agent.agents

Keys and relationships:

键和关系：

• FOREIGN KEY agents_request_id_fkey: request_id → runtime.requests (request_id)
  外键 agents_request_id_fkey：request_id → runtime.requests（request_id）
• PRIMARY KEY agents_pkey: agent_id
  主键 agents_pkey：agent_id
• UNIQUE agents_id_key: id
  唯一约束 agents_id_key：id

agent.chat_preferences

Keys and relationships:

键和关系：

• PRIMARY KEY chat_preferences_pkey: id
  主键 chat_preferences_pkey：id

agent.compactions

Keys and relationships:

键和关系：

• FOREIGN KEY compactions_checkpoint_context_item_id_fkey: checkpoint_context_item_id → agent.context_items (context_item_id)
  外键 compactions_checkpoint_context_item_id_fkey：checkpoint_context_item_id → agent.context_items（context_item_id）
• PRIMARY KEY compactions_pkey: compaction_id
  主键 compactions_pkey：compaction_id

agent.context_item_derived_write_backlog

Keys and relationships:

键和关系：

• FOREIGN KEY context_item_derived_write_backlog_context_item_id_fkey: context_item_id → agent.context_items (context_item_id)
  外键 context_item_derived_write_backlog_context_item_id_fkey：context_item_id → agent.context_items（context_item_id）
• PRIMARY KEY context_item_derived_write_backlog_pkey: context_item_id
  主键 context_item_derived_write_backlog_pkey：context_item_id

agent.context_item_fields

Redacted. Legacy field rows whose owning item is model reasoning (thinking or redacted-thinking) are withheld. Queries against this table run against the security-barrier view inspection.context_item_fields, which projects the columns listed below.

已脱敏。属主条目为模型推理内容（thinking 或 redacted-thinking）的旧版字段行被扣留。针对该表的查询实际运行在安全屏障视图 inspection.context_item_fields 上，该视图仅投影下面列出的列。

Keys and relationships:

键和关系：

• FOREIGN KEY context_item_fields_context_item_id_fkey: context_item_id → agent.context_items (context_item_id)
  外键 context_item_fields_context_item_id_fkey：context_item_id → agent.context_items（context_item_id）
• PRIMARY KEY context_item_fields_pkey: context_item_field_id
  主键 context_item_fields_pkey：context_item_field_id
• UNIQUE context_item_fields_context_item_id_field_path_key: context_item_id, field_path
  唯一约束 context_item_fields_context_item_id_field_path_key：context_item_id、field_path

agent.context_item_resume_projection

Redacted. Rows projected from model-reasoning items (thinking or redacted-thinking) are withheld, and the legacy item copy is withheld because it can hold model reasoning. Queries against this table run against the security-barrier view inspection.context_item_resume_projection, which projects the columns listed below. Withheld columns: item_json.

已脱敏。从模型推理条目（thinking 或 redacted-thinking）投影而来的行被扣留，旧版条目副本也被扣留，因为它可能含有模型推理内容。针对该表的查询实际运行在安全屏障视图 inspection.context_item_resume_projection 上，该视图仅投影下面列出的列。被扣留的列：item_json。

Keys and relationships:

键和关系：

• FOREIGN KEY context_item_resume_projection_context_item_id_fkey: context_item_id → agent.context_items (context_item_id)
  外键 context_item_resume_projection_context_item_id_fkey：context_item_id → agent.context_items（context_item_id）
• PRIMARY KEY context_item_resume_projection_pkey: agent_id, seq
  主键 context_item_resume_projection_pkey：agent_id、seq

agent.context_items

Redacted. Rows holding model reasoning (thinking and redacted-thinking items) are withheld; commentary text stays readable. Queries against this table run against the security-barrier view inspection.context_items, which projects the columns listed below.

已脱敏。承载模型推理内容（thinking 与 redacted-thinking 条目）的行被扣留；评论文本保持可读。针对该表的查询实际运行在安全屏障视图 inspection.context_items 上，该视图仅投影下面列出的列。

Keys and relationships:

键和关系：

• FOREIGN KEY context_items_message_id_fkey: message_id → runtime.messages (message_id)
  外键 context_items_message_id_fkey：message_id → runtime.messages（message_id）
• FOREIGN KEY context_items_tool_call_id_fkey: tool_call_id → runtime.tool_calls (tool_call_id)
  外键 context_items_tool_call_id_fkey：tool_call_id → runtime.tool_calls（tool_call_id）
• FOREIGN KEY context_items_tool_output_id_fkey: tool_output_id → runtime.tool_outputs (tool_output_id)
  外键 context_items_tool_output_id_fkey：tool_output_id → runtime.tool_outputs（tool_output_id）
• PRIMARY KEY context_items_pkey: context_item_id
  主键 context_items_pkey：context_item_id
• UNIQUE context_items_agent_id_seq_key: agent_id, seq
  唯一约束 context_items_agent_id_seq_key：agent_id、seq

agent.context_text_segments

Keys and relationships:

键和关系：

• FOREIGN KEY context_text_segments_context_item_id_fkey: context_item_id → agent.context_items (context_item_id)
  外键 context_text_segments_context_item_id_fkey：context_item_id → agent.context_items（context_item_id）
• PRIMARY KEY context_text_segments_pkey: context_text_segment_id
  主键 context_text_segments_pkey：context_text_segment_id
• UNIQUE context_text_segments_context_item_id_ordinal_key: context_item_id, ordinal
  唯一约束 context_text_segments_context_item_id_ordinal_key：context_item_id、ordinal

agent.message_mailbox

Keys and relationships:

键和关系：

• FOREIGN KEY message_mailbox_agent_id_fkey: agent_id → agent.agents (agent_id)
  外键 message_mailbox_agent_id_fkey：agent_id → agent.agents（agent_id）
• FOREIGN KEY message_mailbox_transcript_event_seq_fkey: transcript_event_seq → runtime.events (event_seq)
  外键 message_mailbox_transcript_event_seq_fkey：transcript_event_seq → runtime.events（event_seq）
• PRIMARY KEY message_mailbox_pkey: submission_id
  主键 message_mailbox_pkey：submission_id
• UNIQUE message_mailbox_agent_id_conversation_epoch_accepted_ordina_key: agent_id, conversation_epoch, accepted_ordinal
  唯一约束 message_mailbox_agent_id_conversation_epoch_accepted_ordina_key：agent_id、conversation_epoch、accepted_ordinal

agent.recovery_owner_terminal_events

Keys and relationships:

键和关系：

• FOREIGN KEY recovery_owner_terminal_events_recovery_class_owner_id_fkey: recovery_class, owner_id → agent.recovery_owners (recovery_class, owner_id)
  外键 recovery_owner_terminal_events_recovery_class_owner_id_fkey：recovery_class、owner_id → agent.recovery_owners（recovery_class、owner_id）
• PRIMARY KEY recovery_owner_terminal_events_pkey: recovery_class, owner_id, generation, event_type
  主键 recovery_owner_terminal_events_pkey：recovery_class、owner_id、generation、event_type

agent.recovery_owners

Keys and relationships:

键和关系：

• PRIMARY KEY recovery_owners_pkey: recovery_class, owner_id
  主键 recovery_owners_pkey：recovery_class、owner_id
• UNIQUE recovery_owners_agent_id_key: agent_id
  唯一约束 recovery_owners_agent_id_key：agent_id

agent.runtime_restart_checkpoints

Keys and relationships:

键和关系：

• PRIMARY KEY runtime_restart_checkpoints_pkey: agent_id
  主键 runtime_restart_checkpoints_pkey：agent_id

agent.runtime_state

Keys and relationships:

键和关系：

• FOREIGN KEY runtime_state_last_event_seq_fkey: last_event_seq → runtime.events (event_seq)
  外键 runtime_state_last_event_seq_fkey：last_event_seq → runtime.events（event_seq）
• PRIMARY KEY runtime_state_pkey: agent_id
  主键 runtime_state_pkey：agent_id

agent.session_memory_capture_deadlines

Keys and relationships:

键和关系：

• FOREIGN KEY session_memory_capture_deadlines_root_session_id_fkey: root_session_id → agent.agents (agent_id)
  外键 session_memory_capture_deadlines_root_session_id_fkey：root_session_id → agent.agents（agent_id）
• PRIMARY KEY session_memory_capture_deadlines_pkey: root_session_id
  主键 session_memory_capture_deadlines_pkey：root_session_id

agent.sessions

Keys and relationships:

键和关系：

• FOREIGN KEY sessions_root_request_id_fkey: root_request_id → runtime.requests (request_id)
  外键 sessions_root_request_id_fkey：root_request_id → runtime.requests（request_id）
• PRIMARY KEY sessions_pkey: session_id
  主键 sessions_pkey：session_id

agent.subagent_monitor_decisions

Keys and relationships:

键和关系：

• PRIMARY KEY subagent_monitor_decisions_pkey: decision_id
  主键 subagent_monitor_decisions_pkey：decision_id
• UNIQUE subagent_monitor_decisions_inference_request_id_key: inference_request_id
  唯一约束 subagent_monitor_decisions_inference_request_id_key：inference_request_id

agent.subagent_progress

Keys and relationships:

键和关系：

• FOREIGN KEY subagent_progress_event_seq_fkey: event_seq → runtime.events (event_seq)
  外键 subagent_progress_event_seq_fkey：event_seq → runtime.events（event_seq）
• PRIMARY KEY subagent_progress_pkey: progress_id
  主键 subagent_progress_pkey：progress_id

agent.subagent_progress_message_events

Keys and relationships:

键和关系：

• PRIMARY KEY subagent_progress_message_events_pkey: event_id
  主键 subagent_progress_message_events_pkey：event_id

agent.subagent_progress_tool_events