Encore OS — Documentation

Generated by npm run db:docs:generate — DO NOT EDIT BY HAND. Change the schema via a migration, then regenerate.

Core: pf_ · Tables: 259 · Source generated: 2026-06-10T02:55:32.169Z

Entity relationships

Tables

`pf_ai_conversations`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`user_id`	uuid	no
`title`	text	no	’New Conversation’::text
`module`	text	no	’pf’::text
`feature`	text	yes
`messages`	jsonb	no	’[]‘::jsonb
`is_archived`	boolean	no	false
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb

Foreign keys:

organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

Users can create own conversations (INSERT)
Users can delete own conversations (DELETE)
Users can update own conversations (UPDATE)
Users can view own conversations (SELECT)

`pf_ai_prompt_feedback`

RLS: ✅ enabled (6 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`user_id`	uuid	no
`conversation_id`	uuid	yes
`message_index`	integer	no
`rating`	integer	yes
`feedback_type`	text	no
`comment`	text	yes
`created_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

conversation_id → pf_ai_conversations(id)
organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

Users can create feedback (INSERT)
Users can view own feedback (SELECT)
pf_ai_prompt_feedback_delete (DELETE)
pf_ai_prompt_feedback_insert (INSERT)
pf_ai_prompt_feedback_select (SELECT)
pf_ai_prompt_feedback_update (UPDATE)

`pf_ai_skill_overrides`

PF-62: Organization-specific customizations of system AI skills RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`skill_id`	uuid	no
`custom_instructions`	text	yes
`model_preference`	text	yes
`temperature`	double precision	yes
`use_rag`	boolean	yes
`rag_source_types`	text[]	yes
`is_enabled`	boolean	yes	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
skill_id → pf_ai_skills(id)
updated_by → pf_profiles(id)

Policies:

pf_ai_skill_overrides_delete (DELETE)
pf_ai_skill_overrides_insert (INSERT)
pf_ai_skill_overrides_select (SELECT)
pf_ai_skill_overrides_update (UPDATE)

`pf_ai_skills`

PF-62: AI Skills registry with system and organization-specific skills RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`skill_code`	text	no
`name`	text	no
`description`	text	yes
`category`	text	no
`is_system`	boolean	yes	false
`organization_id`	uuid	yes
`module`	text	yes
`system_prompt`	text	no
`model_preference`	text	yes	’openai/gpt-4o’::text
`temperature`	double precision	yes	0.7
`max_tokens`	integer	yes	4096
`use_rag`	boolean	yes	true
`rag_source_types`	text[]	yes	’{}‘::text[]
`rag_match_count`	integer	yes	5
`rag_match_threshold`	double precision	yes	0.7
`output_format`	text	yes	’markdown’::text
`output_schema`	jsonb	yes
`is_active`	boolean	yes	true
`display_order`	integer	yes	0
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`workflow_steps`	jsonb	yes	’[]‘::jsonb	Ordered workflow steps for skill execution (JSON array of {step, description, tools?})
`decision_tree`	jsonb	yes	’[]‘::jsonb	Decision tree for conditional skill behavior (JSON object with nodes/edges)
`examples`	jsonb	yes	’[]‘::jsonb	Example inputs/outputs for few-shot prompting (JSON array of {input, output, context?})
`constraints`	text[]	yes	’{}‘::text[]	Execution constraints and guardrails (JSON object)
`tags`	text[]	yes	’{}‘::text[]	Searchable tags for skill discovery and categorization
`version`	text	yes	’1.0.0’::text	Semantic version of the skill definition
`source`	text	yes	’system’::text	Provenance: platform (built-in), organization (custom), template (from skill template)
`source_file`	text	yes		Source file path for platform-provided skills (for traceability)

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_ai_skills_delete (DELETE)
pf_ai_skills_insert (INSERT)
pf_ai_skills_select (SELECT)
pf_ai_skills_update (UPDATE)

`pf_ai_usage_logs`

Tracks AI usage across the platform for analytics and cost attribution RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`user_id`	uuid	no
`module`	text	no		Core module (pf, rh, fa, hr, gr, fw, fm, lo)
`feature`	text	yes		Specific feature within the module
`prompt_tokens`	integer	yes		Number of tokens in the prompt
`completion_tokens`	integer	yes		Number of tokens in the completion
`total_tokens`	integer	yes
`model`	text	no	’google/gemini-2.5-flash’::text
`duration_ms`	integer	yes		Total request duration in milliseconds
`success`	boolean	no	true
`error_type`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`cost`	numeric(10,6)	yes	NULL::numeric	Cost in USD from OpenRouter usage.cost field (PF-59)
`metadata`	jsonb	no	’{}‘::jsonb	GR-06-EN-01: Structured metadata including jurisdiction context (state_code, profile_id, kb_collection_id), action, and skill identifiers. Sanitized — no PHI.

Foreign keys:

organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

Users can insert own AI usage logs (INSERT)
Users can view own AI usage logs (SELECT)

`pf_approval_chain_templates`

PF-64: Reusable approval workflow templates RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`category`	text	no
`is_default`	boolean	no	false
`is_system`	boolean	no	false
`steps`	jsonb	no	’[]‘::jsonb
`usage_count`	integer	no	0
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_approval_chain_templates_delete (DELETE)
pf_approval_chain_templates_insert (INSERT)
pf_approval_chain_templates_select (SELECT)
pf_approval_chain_templates_update (UPDATE)

`pf_asam_loc_levels`

CL-49/PF-70: Canonical ASAM Levels of Care reference library (platform-global). RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`code`	text	no
`display`	text	no
`description`	text	yes
`sort_order`	integer	no	0
`active`	boolean	no	true
`effective_from`	date	no	CURRENT_DATE
`effective_to`	date	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Policies:

pf_asam_loc_levels_select (SELECT)

`pf_assignable_roles`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`role_key`	text	no
`label`	text	no
`description`	text	yes
`category`	text	no
`is_system`	boolean	no	false
`is_active`	boolean	no	true
`sort_order`	integer	no	100
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Policies:

pf_assignable_roles_admin_write (ALL)
pf_assignable_roles_read (SELECT)

`pf_audit_logs`

SECURITY: Audit logs - INSERT only via log_audit_event() trigger function. Direct client INSERT is intentionally blocked for audit integrity. RLS policies: SELECT only for authorized users, no INSERT/UPDATE/DELETE policies. Immutable by design - users cannot tamper with audit trail. RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes		Groups audit entries belonging to the same bulk operation (e.g., raw data bulk save). NULL for single-record operations.
`batch_type`	text	yes		Identifies the type of bulk operation (e.g., raw_data_bulk_save, raw_data_revert). NULL for single-record operations.

Foreign keys:

organization_id → pf_organizations(id)
site_id → pf_sites(id)
user_id → pf_profiles(id)

Policies:

Org admins can view org logs (SELECT)
Platform admins can view all logs (SELECT)
Users can view own audit logs (SELECT)

`pf_audit_logs_p202604`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes
`batch_type`	text	yes

`pf_audit_logs_p202605`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes
`batch_type`	text	yes

`pf_audit_logs_p202606`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes
`batch_type`	text	yes

`pf_audit_logs_p202607`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes
`batch_type`	text	yes

`pf_audit_logs_p202608`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes
`batch_type`	text	yes

`pf_audit_logs_p202609`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes
`batch_type`	text	yes

`pf_audit_logs_p202610`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes
`batch_type`	text	yes

`pf_audit_logs_p202611`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes
`batch_type`	text	yes

`pf_audit_logs_pdefault`

Default partition for pf_audit_logs_partitioned. RLS is intentionally enabled without policies in phase-1 because dual-write sync uses SECURITY DEFINER and application read paths do not target this table until cutover; phase-2 adds final RLS policies. RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`module`	text	no
`action`	text	no
`table_name`	text	yes
`record_id`	uuid	yes
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`ip_address`	inet	yes
`user_agent`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`batch_id`	uuid	yes
`batch_type`	text	yes

`pf_bulk_operation_items`

PF-47: Individual item tracking within bulk operations, stores rollback snapshots. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`operation_id`	uuid	no
`organization_id`	uuid	no
`item_id`	uuid	no
`item_data`	jsonb	yes	’{}‘::jsonb
`status`	text	no	’pending’::text
`error_message`	text	yes
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
operation_id → pf_bulk_operations(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_bulk_operation_items_delete (DELETE)
pf_bulk_operation_items_insert (INSERT)
pf_bulk_operation_items_select (SELECT)
pf_bulk_operation_items_update (UPDATE)

`pf_bulk_operations`

PF-47: Tracks bulk delete, update, and assign operations with progress and rollback support. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`operation_type`	text	no
`entity_type`	text	no
`item_ids`	uuid[]	no
`operation_data`	jsonb	yes	’{}‘::jsonb
`status`	text	no	’pending’::text
`progress_percent`	integer	yes	0
`items_processed`	integer	yes	0
`items_total`	integer	no
`items_failed`	integer	yes	0
`error_message`	text	yes
`failed_item_ids`	uuid[]	yes
`can_rollback`	boolean	no	true
`rollback_window_ends_at`	timestamp with time zone	yes
`requested_by`	uuid	no
`requested_at`	timestamp with time zone	no	now()
`started_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`created_by`	uuid	no
`created_at`	timestamp with time zone	no	now()
`updated_by`	uuid	no
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“module”: “hr”, “reason”: “data_cleanup”})

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
requested_by → pf_profiles(id)
updated_by → pf_profiles(id)

Policies:

pf_bulk_operations_delete (DELETE)
pf_bulk_operations_insert (INSERT)
pf_bulk_operations_select (SELECT)
pf_bulk_operations_update (UPDATE)

`pf_business_processes`

PF-82: Centralized registry of business processes aggregating automation rules and workflow definitions. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`owning_core`	text	no
`process_type`	text	no	’custom’::text
`trigger_summary`	text	yes
`automation_rule_ids`	uuid[]	yes	’{}‘::uuid[]	Array of fw_automation_rules.id values linked to this process.
`workflow_definition_ids`	uuid[]	yes	’{}‘::uuid[]	Array of fw_workflow_definitions.id values linked to this process.
`step_count`	integer	yes	0
`health_score`	numeric(5,2)	yes
`health_status`	text	yes	’unknown’::text
`last_execution_at`	timestamp with time zone	yes
`execution_count_7d`	integer	yes	0
`success_rate_7d`	numeric(5,2)	yes
`avg_duration_seconds`	integer	yes
`is_active`	boolean	no	true
`is_auto_discovered`	boolean	no	true
`tags`	text[]	yes	’{}‘::text[]
`custom_fields`	jsonb	no	’{}‘::jsonb	Extensible metadata (e.g., {“expected_duration_seconds”: 300})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_business_processes_delete (DELETE)
pf_business_processes_insert (INSERT)
pf_business_processes_select (SELECT)
pf_business_processes_update (UPDATE)

`pf_calendar_sync_config`

Calendar sync settings per organization (PF-63 Phase 3.3) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`sync_approved_leave`	boolean	yes	true
`sync_pending_leave`	boolean	yes	false
`show_leave_type_in_subject`	boolean	yes	true
`event_visibility`	text	yes	’oof’::text
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_calendar_sync_config_delete (DELETE)
pf_calendar_sync_config_insert (INSERT)
pf_calendar_sync_config_select (SELECT)
pf_calendar_sync_config_update (UPDATE)

`pf_chatbot_configs`

PF-68: Per-organization chatbot widget configuration RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`widget_title`	text	no	’Chat with us’::text
`welcome_message`	text	no	’Hi! How can we help you today?’::text
`primary_color`	text	no	’#6366f1’::text
`position`	text	no	’bottom-right’::text
`is_enabled`	boolean	no	false
`allowed_domains`	jsonb	no	’[]‘::jsonb
`suggested_questions`	jsonb	no	’[]‘::jsonb
`lead_capture_enabled`	boolean	no	false
`lead_capture_fields`	jsonb	no	’[“name”, “email”]‘::jsonb
`knowledge_base_prompt`	text	yes
`office_hours_enabled`	boolean	no	false
`office_hours_start`	text	yes
`office_hours_end`	text	yes
`office_hours_timezone`	text	no	’America/Phoenix’::text
`offline_message`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_chatbot_configs_delete (DELETE)
pf_chatbot_configs_insert (INSERT)
pf_chatbot_configs_select (SELECT)
pf_chatbot_configs_update (UPDATE)

`pf_chatbot_messages`

PF-68: Individual messages within chatbot sessions RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	no
`role`	text	no
`content`	text	no
`metadata`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
session_id → pf_chatbot_sessions(id)

Policies:

pf_chatbot_messages_anon_insert (INSERT)
pf_chatbot_messages_select (SELECT)

`pf_chatbot_sessions`

PF-68: Chatbot conversation sessions for anonymous visitors RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`visitor_id`	text	no
`status`	text	no	’active’::text
`visitor_name`	text	yes
`visitor_email`	text	yes
`visitor_phone`	text	yes
`source_url`	text	yes
`source_domain`	text	yes
`message_count`	integer	no	0
`lead_id`	uuid	yes
`contact_id`	uuid	yes
`metadata`	jsonb	no	’{}‘::jsonb
`last_activity_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_chatbot_sessions_anon_insert (INSERT)
pf_chatbot_sessions_anon_update (UPDATE)
pf_chatbot_sessions_select (SELECT)
pf_chatbot_sessions_update (UPDATE)

`pf_code_cross_mappings`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`source_code_set`	text	no
`source_code`	text	no
`target_code_set`	text	no
`target_code`	text	no
`mapping_type`	text	no	’equivalent’::text
`mapping_source`	text	no	’official’::text
`confidence_score`	numeric(3,2)	yes	1.00
`priority`	integer	yes	0
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_code_cross_mappings_delete (DELETE)
pf_code_cross_mappings_insert (INSERT)
pf_code_cross_mappings_select (SELECT)
pf_code_cross_mappings_update (UPDATE)

`pf_code_crosswalks`

PF-70: Platform-managed code crosswalks (e.g. ICD-9 to ICD-10). No organization_id — platform-managed only. No app-layer writes. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`code_set_id`	uuid	no
`from_code`	text	no
`from_code_set`	text	no
`to_code`	text	no
`to_code_set`	text	no
`crosswalk_type`	text	no
`notes`	text	yes
`effective_from`	date	no
`effective_to`	date	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

code_set_id → pf_code_sets(id)

Policies:

pf_code_crosswalks_select (SELECT)

`pf_code_favorites`

PF-70: Per-user favorited codes scoped to their organization. RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`code_set`	text	no
`code`	text	no
`description`	text	yes
`created_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

pf_code_favorites_delete (DELETE)
pf_code_favorites_insert (INSERT)
pf_code_favorites_select (SELECT)

`pf_code_modifiers`

PF-70: Org-scoped modifier definitions for CPT/HCPCS codes. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`modifier_code`	text	no
`description`	text	no
`applicable_code_sets`	text[]	no	’{}‘::text[]	Code sets this modifier applies to, e.g. ARRAY[‘CPT’,‘HCPCS’].
`effective_from`	date	no
`effective_to`	date	yes
`rule_notes`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Org-specific metadata (e.g., {“payer_notes”: ”…”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp. NULL = active.

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_code_modifiers_delete (DELETE)
pf_code_modifiers_insert (INSERT)
pf_code_modifiers_select (SELECT)
pf_code_modifiers_update (UPDATE)

`pf_code_recent`

PF-70: Per-user recently used codes (upsert on use; ordered by used_at DESC; limit 20 in application layer). RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`code_set`	text	no
`code`	text	no
`description`	text	yes
`used_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

pf_code_recent_delete (DELETE)
pf_code_recent_insert (INSERT)
pf_code_recent_select (SELECT)

`pf_code_set_versions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`code_set`	text	no
`version`	text	no
`effective_date`	date	no
`is_active`	boolean	no	false
`release_notes`	text	yes
`record_count`	integer	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_code_set_versions_delete (DELETE)
pf_code_set_versions_insert (INSERT)
pf_code_set_versions_select (SELECT)
pf_code_set_versions_update (UPDATE)

`pf_code_sets`

PF-70: Code set registry. organization_id IS NULL = platform-managed (global); non-NULL = org-customized superset. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes		NULL for platform-managed code sets readable by all orgs. Non-NULL for org-scoped additions.
`code_set`	text	no
`version`	text	no
`label`	text	yes
`description`	text	yes
`effective_from`	date	no
`effective_to`	date	yes
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“source_url”: “https://…”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_code_sets_delete (DELETE)
pf_code_sets_insert (INSERT)
pf_code_sets_select (SELECT)
pf_code_sets_update (UPDATE)

`pf_compliance_checks`

PF-91: Immutable compliance check snapshots (insert-only from check worker) RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`check_type`	text	no		Category: rls_coverage, audit_completeness, phi_access, consent_status, drift_detection
`check_name`	text	no
`status`	text	no
`details`	jsonb	yes	’{}‘::jsonb	Structured check result details (JSON); never contains raw PHI
`checked_at`	timestamp with time zone	no	now()
`next_check_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)

Policies:

pf_compliance_checks_insert (INSERT)
pf_compliance_checks_select (SELECT)

`pf_compliance_evidence`

PF-91: Compliance evidence package jobs and artifacts RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`framework`	text	no		Target compliance framework: hipaa, soc2, joint_commission, carf
`date_range_start`	date	no
`date_range_end`	date	no
`status`	text	no	’generating’::text
`storage_path`	text	yes		Object key under private bucket compliance-evidence: {org_id}/{evidence_id}/package.zip
`file_size_bytes`	bigint	yes
`checksum`	text	yes
`generated_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_compliance_evidence_delete (DELETE)
pf_compliance_evidence_insert (INSERT)
pf_compliance_evidence_select (SELECT)
pf_compliance_evidence_update (UPDATE)

`pf_condition_evaluation_cache`

PF-32: Caches condition evaluation results for performance optimization. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`cache_key`	text	no
`form_id`	uuid	yes
`condition_id`	uuid	yes
`evaluation_result`	jsonb	no
`expires_at`	timestamp with time zone	no
`created_at`	timestamp with time zone	no	now()
`hit_count`	integer	yes	0
`last_accessed_at`	timestamp with time zone	yes

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_condition_evaluation_cache_delete (DELETE)
pf_condition_evaluation_cache_insert (INSERT)
pf_condition_evaluation_cache_select (SELECT)
pf_condition_evaluation_cache_update (UPDATE)

`pf_condition_evaluation_metrics`

PF-32: Tracks condition evaluation performance metrics. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`form_id`	uuid	yes
`condition_count`	integer	no
`field_count`	integer	no
`evaluation_method`	text	no
`evaluation_time_ms`	integer	no
`cache_hit`	boolean	yes	false
`recorded_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_condition_evaluation_metrics_delete (DELETE)
pf_condition_evaluation_metrics_insert (INSERT)
pf_condition_evaluation_metrics_select (SELECT)
pf_condition_evaluation_metrics_update (UPDATE)

`pf_condition_evaluation_metrics_archive`

PF-32: Archived condition evaluation metrics older than retention period. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`form_id`	uuid	yes
`condition_count`	integer	no
`field_count`	integer	no
`evaluation_method`	text	no
`evaluation_time_ms`	integer	no
`cache_hit`	boolean	yes	false
`recorded_at`	timestamp with time zone	no	now()
`archived_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_condition_evaluation_metrics_archive_delete (DELETE)
pf_condition_evaluation_metrics_archive_select (SELECT)

`pf_conversation_members`

PF-67: Conversation membership with roles and per-user read state RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`conversation_id`	uuid	no
`user_id`	uuid	no
`organization_id`	uuid	no
`role`	text	yes	’member’::text
`joined_at`	timestamp with time zone	yes	now()
`last_read_at`	timestamp with time zone	yes
`last_read_message_id`	uuid	yes
`unread_count`	integer	yes	0
`is_muted`	boolean	yes	false
`notification_preference`	text	yes	’all’::text
`is_pinned`	boolean	yes	false
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`updated_by`	uuid	yes
`is_archived`	boolean	no	false

Foreign keys:

conversation_id → pf_conversations(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)
user_id → pf_profiles(id)

Policies:

pf_convo_members_delete (DELETE)
pf_convo_members_insert (INSERT)
pf_convo_members_select (SELECT)
pf_convo_members_update (UPDATE)

`pf_conversations`

PF-67: Conversation containers for DMs, group chats, channels, and record-anchored threads RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`type`	pf_conversation_type	no
`name`	text	yes
`description`	text	yes
`topic`	text	yes
`is_private`	boolean	yes	true
`created_by`	uuid	no
`record_type`	text	yes
`record_id`	uuid	yes
`avatar_url`	text	yes
`settings`	jsonb	no	’{}‘::jsonb	Per-conversation config overrides (e.g., retention_days, read_receipts_enabled)
`last_message_at`	timestamp with time zone	yes
`last_message_preview`	text	yes
`message_count`	integer	yes	0
`is_archived`	boolean	yes	false
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“department”: “nursing”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`updated_by`	uuid	yes
`site_id`	uuid	yes		Optional site scope for channels. NULL = org-wide, non-NULL = site-specific channel.
`deleted_at`	timestamp with time zone	yes
`patient_id`	uuid	yes
`category`	text	yes
`is_clinical`	boolean	yes	false

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

pf_conversations_delete (DELETE)
pf_conversations_insert (INSERT)
pf_conversations_select (SELECT)
pf_conversations_update (UPDATE)

`pf_cpt_codes`

PF-70: CPT procedure codes. Platform-managed; org-editable via org-scoped code_set_id. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`code_set_id`	uuid	no
`code`	text	no
`description`	text	no
`short_description`	text	yes
`effective_from`	date	no
`effective_to`	date	yes
`category`	text	yes
`is_behavioral_health`	boolean	no	false
`custom_fields`	jsonb	no	’{}‘::jsonb	Extended metadata (e.g., {“ama_link”: ”…”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

code_set_id → pf_code_sets(id)

Policies:

pf_cpt_codes_delete (DELETE)
pf_cpt_codes_insert (INSERT)
pf_cpt_codes_select (SELECT)
pf_cpt_codes_update (UPDATE)

`pf_credential_vault`

PF-75: Metadata table linking business table credentials to vault.secrets for encrypted storage RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`vault_secret_id`	uuid	no		Reference to the encrypted secret in vault.secrets
`credential_type`	text	no		Type of credential: oauth_access_token, oauth_refresh_token, api_key, api_secret, etc.
`credential_name`	text	no
`source_table`	text	no		Source business table name (e.g., fa_bank_accounts)
`source_column`	text	no		Source column name (e.g., plaid_access_token)
`source_row_id`	uuid	no		Row ID in the source table
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)

Policies:

pf_credential_vault_delete (DELETE)
pf_credential_vault_insert (INSERT)
pf_credential_vault_select (SELECT)
pf_credential_vault_update (UPDATE)

`pf_credentials`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`credential_type`	text	no
`name`	text	no
`description`	text	yes
`encrypted_data`	jsonb	no	’{}‘::jsonb
`is_active`	boolean	yes	true
`expires_at`	timestamp with time zone	yes
`last_used_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_credentials_delete (DELETE)
pf_credentials_insert (INSERT)
pf_credentials_select (SELECT)
pf_credentials_update (UPDATE)

`pf_custom_field_definitions`

PF-16: Defines custom fields that can be added to entity custom_fields JSONB columns RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`entity_type`	text	no		Table name where this field appears (e.g., hr_employees, fa_invoices)
`field_key`	text	no		Unique key within entity for accessing value in custom_fields JSONB
`field_label`	text	no
`field_type`	text	no
`description`	text	yes
`help_text`	text	yes
`placeholder`	text	yes
`picklist_id`	uuid	yes
`is_required`	boolean	yes	false
`validation_rules`	jsonb	yes	’{}‘::jsonb	JSON validation config: {min, max, minLength, maxLength, pattern}
`display_order`	integer	yes	0
`field_section`	text	yes
`is_active`	boolean	yes	true
`show_in_list`	boolean	yes	false
`show_in_detail`	boolean	yes	true
`show_in_form`	boolean	yes	true
`default_value`	text	yes
`metadata`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
picklist_id → pf_picklists(id)
updated_by → pf_profiles(id)

Policies:

custom_field_defs_org_read (SELECT)
pf_custom_field_definitions_delete (DELETE)
pf_custom_field_definitions_insert (INSERT)
pf_custom_field_definitions_select (SELECT)
pf_custom_field_definitions_update (UPDATE)

`pf_custom_metric_values`

PF-36 Phase 2: Stored values for custom metrics. Retention: 90 days (configurable via custom_metric_retention_days). RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`metric_id`	uuid	no
`organization_id`	uuid	no
`value`	numeric	no
`labels`	jsonb	yes	’{}‘::jsonb
`recorded_at`	timestamp with time zone	no	now()

Foreign keys:

metric_id → pf_custom_metrics(id)
organization_id → pf_organizations(id)

Policies:

pf_custom_metric_values_insert_manual (INSERT)
pf_custom_metric_values_select (SELECT)

`pf_custom_metrics`

PF-36 Phase 2: Organization-specific custom health metrics RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`metric_type`	text	no
`unit`	text	yes
`labels`	jsonb	yes	’{}‘::jsonb
`collection_method`	text	no
`collection_endpoint`	text	yes
`collection_query`	text	yes		SQL query for sql collection method; executed server-side only in edge function — never in client
`collection_schedule`	text	yes
`aggregation_rule`	text	yes	’avg’::text
`aggregation_window`	text	yes	’1h’::text
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`is_active`	boolean	yes	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_custom_metrics_delete (DELETE)
pf_custom_metrics_insert (INSERT)
pf_custom_metrics_select (SELECT)
pf_custom_metrics_update (UPDATE)

`pf_custom_object_fields`

PF-24: Links custom objects to PF-16 field definitions RLS: ✅ enabled (8 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`custom_object_id`	uuid	no
`field_definition_id`	uuid	no
`display_order`	integer	yes	0
`is_required`	boolean	yes	false
`is_unique`	boolean	yes	false
`is_searchable`	boolean	yes	true
`show_in_list`	boolean	yes	false
`list_order`	integer	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`organization_id`	uuid	yes

Foreign keys:

custom_object_id → pf_custom_objects(id)
field_definition_id → pf_custom_field_definitions(id)
organization_id → pf_organizations(id)

Policies:

org_admins_delete_custom_object_fields (DELETE)
org_admins_insert_custom_object_fields (INSERT)
org_admins_update_custom_object_fields (UPDATE)
org_members_view_custom_object_fields (SELECT)
pf_custom_object_fields_delete (DELETE)
pf_custom_object_fields_insert (INSERT)
pf_custom_object_fields_select (SELECT)
pf_custom_object_fields_update (UPDATE)

`pf_custom_object_records`

PF-24: Record instances storing data in JSONB format RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`custom_object_id`	uuid	no
`data`	jsonb	no	’{}‘::jsonb
`display_name`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
custom_object_id → pf_custom_objects(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

org_members_delete_records (DELETE)
org_members_insert_records (INSERT)
org_members_select_records (SELECT)
org_members_update_records (UPDATE)

`pf_custom_objects`

PF-24: Custom object definitions created by organization admins RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`api_name`	text	no		Snake_case identifier unique per org, used in code/API
`description`	text	yes
`category_id`	uuid	yes
`icon`	text	yes	’box’::text
`color`	text	yes	’blue’::text
`is_active`	boolean	yes	true
`allow_attachments`	boolean	yes	false
`field_count`	integer	yes	0
`record_count`	integer	yes	0
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for integrations
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

category_id → pf_object_categories(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

org_admins_delete_custom_objects (DELETE)
org_admins_insert_custom_objects (INSERT)
org_admins_update_custom_objects (UPDATE)
org_members_view_custom_objects (SELECT)

`pf_custom_roles`

Organization-defined custom roles with granular permissions RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`is_system_role`	boolean	yes	false
`base_role`	app_role	yes		Optional base role to inherit permissions from. Cannot be platform_admin or org_admin.
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“color”: “#FF5733”, “external_role_id”: “ROLE-001”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_custom_roles_delete (DELETE)
pf_custom_roles_insert (INSERT)
pf_custom_roles_select (SELECT)
pf_custom_roles_update (UPDATE)

`pf_dashboard_shares`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	no
`shared_by`	uuid	no
`shared_with_user_id`	uuid	yes
`shared_with_role`	text	yes
`permission_level`	text	no	’view’::text
`share_token`	text	yes
`expires_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	yes	now()
`custom_fields`	jsonb	yes	’{}‘::jsonb
`is_active`	boolean	no	true
`updated_at`	timestamp with time zone	no	now()
`share_type`	text	no	’link’::text

Foreign keys:

organization_id → pf_organizations(id)
shared_by → pf_profiles(id)
shared_with_user_id → pf_profiles(id)
template_id → pf_dashboard_templates(id)

Policies:

pf_dashboard_shares_delete (DELETE)
pf_dashboard_shares_insert (INSERT)
pf_dashboard_shares_select (SELECT)
pf_dashboard_shares_update (UPDATE)

`pf_dashboard_templates`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`template_type`	text	no	’system’::text
`layout`	jsonb	no	’[]‘::jsonb
`widgets`	jsonb	no	’[]‘::jsonb
`target_roles`	text[]	yes	’{}‘::text[]
`target_modules`	text[]	yes	’{}‘::text[]
`thumbnail_url`	text	yes
`is_active`	boolean	yes	true
`usage_count`	integer	yes	0
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	yes	’{}‘::jsonb

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_dashboard_templates_delete (DELETE)
pf_dashboard_templates_insert (INSERT)
pf_dashboard_templates_select (SELECT)
pf_dashboard_templates_update (UPDATE)

`pf_data_lifecycle_events`

PF-46: Audit trail of data lifecycle events (archival, deletion, legal hold placement/removal) RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`policy_id`	uuid	yes		Retention policy that triggered the event; NULL for hold_placed and hold_removed events
`entity_type`	text	no
`record_id`	uuid	no
`event_type`	text	no
`event_timestamp`	timestamp with time zone	no	now()
`performed_by`	uuid	yes
`reason`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Additional metadata about the lifecycle event. Allowed keys: legal_case_id, policy_override_reason, retention_policy_name, storage_location

Foreign keys:

organization_id → pf_organizations(id)
performed_by → users(id)
policy_id → pf_retention_policies(id)

Policies:

pf_data_lifecycle_events_select (SELECT)

`pf_data_lineage`

PF-18: Tracks data lineage (source→destination) for organizational entities RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`source_entity_type`	text	no
`source_entity_id`	uuid	no
`source_field`	text	yes
`destination_entity_type`	text	no
`destination_entity_id`	uuid	no
`destination_field`	text	yes
`transformation_type`	text	yes
`transformation_details`	jsonb	yes
`relationship_type`	text	no
`first_seen_at`	timestamp with time zone	no	now()
`last_updated_at`	timestamp with time zone	no	now()
`update_count`	integer	yes	1
`created_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_data_lineage_delete (DELETE)
pf_data_lineage_insert (INSERT)
pf_data_lineage_select (SELECT)
pf_data_lineage_update (UPDATE)

`pf_data_lineage_archive`

PF-18: Archive of data lineage records older than 3 years (retained 7 years total) RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no
`organization_id`	uuid	no
`source_entity_type`	text	no
`source_entity_id`	uuid	no
`source_field`	text	yes
`destination_entity_type`	text	no
`destination_entity_id`	uuid	no
`destination_field`	text	yes
`transformation_type`	text	yes
`transformation_details`	jsonb	yes
`relationship_type`	text	no
`first_seen_at`	timestamp with time zone	no
`last_updated_at`	timestamp with time zone	no
`update_count`	integer	yes
`created_at`	timestamp with time zone	no
`archived_at`	timestamp with time zone	no	now()
`archive_batch_id`	uuid	no
`archive_checksum`	text	no

Policies:

pf_data_lineage_archive_delete (DELETE)
pf_data_lineage_archive_select (SELECT)

`pf_data_migration_connections`

PF: Per-organization external PostgreSQL connection credentials for data migration RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`connection_name`	text	no
`host`	text	no
`port`	integer	no	5432
`database_name`	text	no
`username`	text	no
`encrypted_password`	text	no		Password encrypted via pgcrypto using MIGRATION_ENCRYPTION_KEY secret
`ssl_mode`	text	no	’require’::text
`is_active`	boolean	no	true
`last_tested_at`	timestamp with time zone	yes
`last_test_status`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_data_migration_connections_delete (DELETE)
pf_data_migration_connections_insert (INSERT)
pf_data_migration_connections_select (SELECT)
pf_data_migration_connections_update (UPDATE)

`pf_data_migration_mappings`

PF: Stores source-to-target field mappings for external database migrations RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`source_schema`	text	no
`source_table`	text	no
`target_table`	text	no
`field_mappings`	jsonb	no	’{}‘::jsonb
`transform_rules`	jsonb	yes	’{}‘::jsonb
`is_active`	boolean	yes	true
`execution_order`	integer	yes	0
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_data_migration_mappings_delete (DELETE)
pf_data_migration_mappings_insert (INSERT)
pf_data_migration_mappings_select (SELECT)
pf_data_migration_mappings_update (UPDATE)

`pf_data_migration_runs`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`source_system`	text	no	’analytics_timescaledb’::text
`source_table`	text	no
`target_table`	text	no
`status`	text	no	’pending’::text
`total_rows`	integer	yes
`migrated_rows`	integer	yes	0
`failed_rows`	integer	yes	0
`error_log`	jsonb	yes	’[]‘::jsonb
`started_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`source_schema`	text	yes
`batch_size`	integer	yes	500
`last_offset`	integer	yes	0
`metadata`	jsonb	yes	’{}‘::jsonb
`connection_id`	uuid	yes
`date_filter_column`	text	yes
`date_filter_start`	timestamp with time zone	yes
`date_filter_end`	timestamp with time zone	yes

Foreign keys:

connection_id → pf_data_migration_connections(id)
created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_data_migration_runs_delete (DELETE)
pf_data_migration_runs_insert (INSERT)
pf_data_migration_runs_select (SELECT)
pf_data_migration_runs_update (UPDATE)

`pf_data_sync_config`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`source_system`	text	no	’analytics_timescaledb’::text
`source_table`	text	no
`last_sync_at`	timestamp with time zone	yes
`last_sync_row_count`	integer	yes
`config`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_data_sync_config_delete (DELETE)
pf_data_sync_config_insert (INSERT)
pf_data_sync_config_select (SELECT)
pf_data_sync_config_update (UPDATE)

`pf_department_sharepoint_config`

Maps departments to SharePoint groups for auto-membership (PF-63 Phase 3.2) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`department_id`	uuid	no
`site_id`	text	no
`site_name`	text	no
`site_url`	text	yes
`group_id`	text	no
`group_name`	text	no
`auto_add_on_hire`	boolean	yes	true
`auto_remove_on_termination`	boolean	yes	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
department_id → pf_departments(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_department_sharepoint_config_delete (DELETE)
pf_department_sharepoint_config_insert (INSERT)
pf_department_sharepoint_config_select (SELECT)
pf_department_sharepoint_config_update (UPDATE)

`pf_department_teams_config`

Maps departments to Microsoft Teams for auto-membership (PF-63 Phase 3.1) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`department_id`	uuid	no
`team_id`	text	no
`team_name`	text	no
`channel_id`	text	yes
`channel_name`	text	yes
`auto_add_on_hire`	boolean	yes	true
`auto_remove_on_termination`	boolean	yes	true
`member_role`	text	yes	’member’::text
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
department_id → pf_departments(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_department_teams_config_delete (DELETE)
pf_department_teams_config_insert (INSERT)
pf_department_teams_config_select (SELECT)
pf_department_teams_config_update (UPDATE)

`pf_departments`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`name`	text	no
`code`	text	no
`parent_department_id`	uuid	yes
`department_type`	text	no	’both’::text
`department_head_id`	uuid	yes
`is_clinical`	boolean	no	false
`cost_center`	text	yes
`cost_allocation_method`	text	yes	’direct’::text
`description`	text	yes
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
department_head_id → hr_employees(id)
organization_id → pf_organizations(id)
parent_department_id → pf_departments(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

Org admins can delete departments (DELETE)
Org admins can insert departments (INSERT)
Org admins can update departments (UPDATE)
Users can view departments in their organization (SELECT)

`pf_document_approvals`

Document approval workflow tracking RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`document_id`	uuid	no
`organization_id`	uuid	no
`approval_order`	integer	no		Order in approval chain (1, 2, 3, etc.)
`approver_id`	uuid	yes
`approver_role`	text	yes		Role-based approver (e.g., org_admin, director) instead of specific user
`status`	text	no	’pending’::text
`decision_at`	timestamp with time zone	yes
`decision_by`	uuid	yes
`decision_note`	text	yes
`required`	boolean	no	true
`due_date`	timestamp with time zone	yes
`reminded_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

approver_id → pf_profiles(id)
decision_by → pf_profiles(id)
document_id → pf_documents(id)
organization_id → pf_organizations(id)

Policies:

approval_delete (DELETE)
approval_insert (INSERT)
approval_select (SELECT)
approval_update (UPDATE)

`pf_document_embeddings`

Stores vector embeddings for semantic search (RAG). Uses vector (extensions.vector(1536)). RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`source_type`	text	no		Type of source: document, policy, knowledge_article
`source_id`	uuid	no
`source_table`	text	no
`content`	text	no
`chunk_index`	integer	no	0	Index of this chunk within the source document (0-based)
`embedding`	vector(1536)	no		OpenAI text-embedding-3-small (1536 dimensions) stored as vector
`metadata`	jsonb	no	’{}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_document_embeddings_delete (DELETE)
pf_document_embeddings_insert (INSERT)
pf_document_embeddings_select (SELECT)
pf_document_embeddings_update (UPDATE)

`pf_document_expiration_log`

PF-11 Phase 5: Append-only log of document expiration/archival events. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`document_id`	uuid	no
`action`	text	no	’archived’::text
`previous_status`	text	yes
`archived_at`	timestamp with time zone	no	now()
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → users(id)
document_id → pf_documents(id)
organization_id → pf_organizations(id)

Policies:

pf_document_expiration_log_insert (INSERT)
pf_document_expiration_log_select (SELECT)

`pf_document_permissions`

RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`document_id`	uuid	no
`user_id`	uuid	yes
`role`	app_role	yes
`can_view`	boolean	no	false
`can_edit`	boolean	no	false
`can_delete`	boolean	no	false
`can_manage_permissions`	boolean	no	false
`granted_by`	uuid	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

document_id → pf_documents(id)
granted_by → pf_profiles(id)
user_id → pf_profiles(id)

Policies:

Users can view document permissions (SELECT)
pf_document_permissions_delete (DELETE)
pf_document_permissions_insert (INSERT)
pf_document_permissions_select (SELECT)
pf_document_permissions_update (UPDATE)

`pf_document_template_versions`

PF-64: Immutable version history for document templates RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`template_id`	uuid	no
`organization_id`	uuid	yes
`version_number`	integer	no
`change_notes`	text	yes
`template_config`	jsonb	no
`sections`	jsonb	no
`letterhead_id`	uuid	yes
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
letterhead_id → pf_letterheads(id)
organization_id → pf_organizations(id)
template_id → pf_document_templates(id)

Policies:

pf_document_template_versions_insert (INSERT)
pf_document_template_versions_select (SELECT)

`pf_document_templates`

PF-64: Document structure templates RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`template_type`	text	no
`status`	text	no	’draft’::text
`is_default`	boolean	no	false
`is_system`	boolean	no	false
`letterhead_id`	uuid	yes
`template_config`	jsonb	no	’{}‘::jsonb
`sections`	jsonb	no	’[]‘::jsonb
`current_version`	integer	no	1
`usage_count`	integer	no	0
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes
`tags`	text[]	yes	’{}‘::text[]	Optional tags for template categorization and search

Foreign keys:

created_by → pf_profiles(id)
letterhead_id → pf_letterheads(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_document_templates_delete (DELETE)
pf_document_templates_insert (INSERT)
pf_document_templates_select (SELECT)
pf_document_templates_update (UPDATE)

`pf_document_versions`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`document_id`	uuid	no
`version_major`	integer	no
`version_minor`	integer	no
`version_label`	text	yes
`storage_path`	text	no
`file_size_bytes`	integer	no
`metadata`	jsonb	no
`change_summary`	text	yes
`changed_by`	uuid	no
`changed_at`	timestamp with time zone	no	now()
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

changed_by → pf_profiles(id)
document_id → pf_documents(id)

Policies:

Users can create document versions (INSERT)
Users can view document versions (SELECT)

`pf_documents`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`title`	text	no
`description`	text	yes
`category`	document_category	no
`tags`	text[]	yes	’{}‘::text[]
`storage_bucket`	text	no	’documents’::text
`storage_path`	text	no
`file_name`	text	no
`file_size_bytes`	integer	no
`mime_type`	text	no
`version_major`	integer	no	1
`version_minor`	integer	no	0
`parent_document_id`	uuid	yes
`status`	document_status	no	’draft’::document_status
`published_at`	timestamp with time zone	yes
`published_by`	uuid	yes
`author`	uuid	no
`reviewer`	uuid	yes
`review_notes`	text	yes
`search_vector`	tsvector	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb	Document-specific metadata (e.g., {“classification”: “Level 2”, “retention_years”: 7, “external_doc_id”: “DOC-ABC-123”, “regulatory_category”: “HIPAA”, “review_date”: “2026-01-01”})
`extracted_content`	text	yes
`extraction_status`	text	yes	’pending’::text
`extraction_error`	text	yes
`extracted_at`	timestamp with time zone	yes
`expires_at`	timestamp with time zone	yes		Optional expiration date for the document. Used by cron to auto-archive expired documents.

Foreign keys:

author → pf_profiles(id)
organization_id → pf_organizations(id)
parent_document_id → pf_documents(id)
published_by → pf_profiles(id)
reviewer → pf_profiles(id)
site_id → pf_sites(id)

Policies:

Users can create documents in their org (INSERT)
Users can delete permitted documents (DELETE)
Users can update permitted documents (UPDATE)
Users can view permitted documents (SELECT)

`pf_domain_events`

RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

Policies:

pf_domain_events_admin_read (SELECT)

`pf_domain_events_p202604`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

`pf_domain_events_p202605`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

`pf_domain_events_p202606`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

`pf_domain_events_p202607`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

`pf_domain_events_p202608`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

`pf_domain_events_p202609`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

`pf_domain_events_p202610`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

`pf_domain_events_p202611`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

`pf_domain_events_pdefault`

RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`event_type`	text	no
`aggregate_type`	text	no
`aggregate_id`	uuid	yes
`organization_id`	uuid	yes
`payload`	jsonb	no	’{}‘::jsonb
`actor_user_id`	uuid	yes
`occurred_at`	timestamp with time zone	no	now()
`processed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()

`pf_edge_function_metrics`

PF: Edge function execution metrics. System table, no RLS - written by service-role client only. RLS: ✅ enabled

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`function_name`	text	no
`correlation_id`	text	yes
`execution_time_ms`	integer	no
`items_processed`	integer	yes
`errors_count`	integer	yes	0
`created_at`	timestamp with time zone	no	now()

`pf_email_signatures`

PF-86: Organization-wide and per-user HTML/text email signatures with optional compliance disclaimers RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`user_id`	uuid	yes
`signature_html`	text	no		HTML email signature template with {{variable}} placeholders
`signature_text`	text	no		Plain text fallback of email signature
`user_name`	text	yes
`user_title`	text	yes
`user_phone`	text	yes
`user_email`	text	yes
`organization_name`	text	yes
`organization_address`	text	yes
`organization_phone`	text	yes
`organization_email`	text	yes
`organization_logo_url`	text	yes
`disclaimer_html`	text	yes
`disclaimer_text`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“external_system_id”: “SIG-001”})
`is_default`	boolean	no	false	true for org default (user_id IS NULL); false for user signatures
`is_active`	boolean	no	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)
user_id → pf_profiles(id)

Policies:

pf_email_signatures_delete (DELETE)
pf_email_signatures_insert (INSERT)
pf_email_signatures_select (SELECT)
pf_email_signatures_update (UPDATE)

`pf_entity_field_config_versions`

PF-17: Append-only version history for entity field configurations. No UPDATE/DELETE allowed. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`entity_field_config_id`	uuid	no
`version_number`	integer	no	1
`snapshot`	jsonb	no		Full JSONB snapshot of the field config at time of versioning
`version_comment`	text	yes		Optional user-provided description of what changed
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
entity_field_config_id → pf_entity_field_configs(id)
organization_id → pf_organizations(id)

Policies:

pf_entity_field_config_versions_insert (INSERT)
pf_entity_field_config_versions_select (SELECT)

`pf_entity_field_configs`

PF-17: Configuration for entity field layouts, visibility, and permissions RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`entity_type`	text	no		Entity table name (e.g., hr_employees, rh_residents)
`view_context`	text	no	’edit_form’::text	Where this config applies: create_form, edit_form, detail_view, list_view
`field_source`	text	no	’standard’::text	Whether field is standard (DB column) or custom (custom_fields JSONB)
`field_key`	text	no		Column name for standard fields or key for custom fields
`custom_field_definition_id`	uuid	yes
`is_visible`	boolean	no	true
`visible_to_roles`	text[]	yes		Roles that can see this field (null = all roles)
`is_editable`	boolean	no	true
`editable_by_roles`	text[]	yes		Roles that can edit this field (null = all roles)
`display_order`	integer	no	0
`field_section`	text	yes
`column_span`	integer	no	1	1 = half width (50%), 2 = full width (100%)
`conditional_rules`	jsonb	no	’{}‘::jsonb	JSON rules for conditional visibility based on other field values
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
custom_field_definition_id → pf_custom_field_definitions(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

Org admins can delete field configs (DELETE)
Org admins can insert field configs (INSERT)
Org admins can update field configs (UPDATE)
Users can view field configs in their org (SELECT)

`pf_entra_role_license_map`

PF-63-EN-01: org-scoped mapping of PF-30 system role (app_role) to a Microsoft Graph license SKU id. entra-provision-user prefers this over the org default SKU. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`system_role`	app_role	no		PF-30 system role (app_role enum). Custom (role_id) roles are out of scope for EN-01 and fall back to the org default SKU.
`license_sku_id`	text	no		Microsoft Graph skuId (GUID) assigned to employees provisioned with this role.
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_entra_role_license_map_delete (DELETE)
pf_entra_role_license_map_insert (INSERT)
pf_entra_role_license_map_select (SELECT)
pf_entra_role_license_map_update (UPDATE)

`pf_export_files`

Tracks generated export files and downloads (PF-44) RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`export_request_id`	uuid	no
`organization_id`	uuid	no
`file_path`	text	no
`file_name`	text	no
`file_size_bytes`	bigint	no
`mime_type`	text	no
`download_token`	text	yes
`download_expires_at`	timestamp with time zone	no
`download_count`	integer	yes	0
`downloaded_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes		User who requested the export that generated this file

Foreign keys:

created_by → pf_profiles(id)
export_request_id → pf_export_requests(id)
organization_id → pf_organizations(id)

Policies:

pf_export_files_insert (INSERT)
pf_export_files_select (SELECT)

`pf_export_requests`

Data export requests with status tracking (PF-44) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`export_type`	text	no
`export_format`	text	no
`entity_types`	text[]	no
`filters`	jsonb	yes	’{}‘::jsonb
`schedule_type`	text	no	’one_time’::text
`schedule_config`	jsonb	yes	’{}‘::jsonb
`template_id`	uuid	yes
`status`	text	no	’pending’::text
`progress_percent`	integer	yes	0
`error_message`	text	yes
`file_path`	text	yes
`file_size_bytes`	bigint	yes
`file_expires_at`	timestamp with time zone	yes
`requested_by`	uuid	no
`requested_at`	timestamp with time zone	no	now()
`started_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb

Foreign keys:

organization_id → pf_organizations(id)
requested_by → pf_profiles(id)
template_id → pf_export_templates(id)

Policies:

pf_export_requests_delete (DELETE)
pf_export_requests_insert (INSERT)
pf_export_requests_select (SELECT)
pf_export_requests_update (UPDATE)

`pf_export_templates`

Reusable export configurations for data export compliance (PF-44) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`export_type`	text	no
`export_format`	text	no
`entity_types`	text[]	no
`filters`	jsonb	yes	’{}‘::jsonb
`is_platform_wide`	boolean	no	false
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for template extensibility
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_export_templates_delete (DELETE)
pf_export_templates_insert (INSERT)
pf_export_templates_select (SELECT)
pf_export_templates_update (UPDATE)

`pf_feature_flag_usage`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`flag_id`	uuid	no
`user_id`	uuid	yes
`flag_value`	boolean	yes
`variant`	text	yes
`first_seen_at`	timestamp with time zone	no	now()
`last_seen_at`	timestamp with time zone	no	now()
`usage_count`	integer	no	1

Foreign keys:

flag_id → pf_feature_flags(id)
organization_id → pf_organizations(id)
user_id → users(id)

Policies:

pf_ff_usage_insert_locked (INSERT)
pf_ff_usage_select (SELECT)

`pf_feature_flags`

PF-45: Feature flag definitions with support for boolean, percentage rollout, and A/B test types. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`flag_key`	text	no
`flag_name`	text	no
`description`	text	yes
`flag_type`	text	no	’boolean’::text
`is_enabled`	boolean	no	false
`rollout_percentage`	numeric(5,2)	yes	0
`variants`	jsonb	yes	’[]‘::jsonb
`scope`	text	no	’global’::text
`user_id`	uuid	yes
`is_active`	boolean	no	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)
user_id → users(id)

Policies:

pf_feature_flags_delete (DELETE)
pf_feature_flags_insert (INSERT)
pf_feature_flags_select (SELECT)
pf_feature_flags_update (UPDATE)

`pf_field_interaction_stats`

PF-09: Aggregated field-level interaction statistics RLS: ✅ enabled (6 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`form_id`	uuid	no
`field_key`	text	no
`metric_date`	date	no
`organization_id`	uuid	no
`focus_count`	integer	no	0
`change_count`	integer	no	0
`error_count`	integer	no	0
`abandonment_count`	integer	no	0
`avg_time_spent_seconds`	double precision	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

form_id → fw_forms(id)
organization_id → pf_organizations(id)

Policies:

field_stats_insert (INSERT)
field_stats_select (SELECT)
field_stats_update (UPDATE)
pf_field_interaction_stats_insert (INSERT)
pf_field_interaction_stats_select (SELECT)
pf_field_interaction_stats_update (UPDATE)

`pf_field_permissions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`object_api_name`	text	no
`field_name`	text	no
`role`	app_role	no
`permission_level`	text	no	’view’::text
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_field_permissions_delete (DELETE)
pf_field_permissions_insert (INSERT)
pf_field_permissions_select (SELECT)
pf_field_permissions_update (UPDATE)

`pf_form_analytics_events`

PF-09: Raw form analytics events for tracking user interactions RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`form_id`	uuid	no
`submission_id`	uuid	yes
`session_id`	uuid	no
`event_type`	text	no
`field_key`	text	yes
`user_id`	uuid	yes
`organization_id`	uuid	no
`site_id`	uuid	yes
`event_timestamp`	timestamp with time zone	no	now()
`event_data`	jsonb	yes	’{}‘::jsonb
`user_agent`	text	yes
`device_type`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

form_id → fw_forms(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
submission_id → fw_form_submissions(id)
user_id → pf_profiles(id)

Policies:

analytics_events_insert (INSERT)
analytics_events_select (SELECT)

`pf_form_completion_metrics`

PF-09: Aggregated form completion metrics per time period RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`form_id`	uuid	no
`metric_date`	date	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`started_count`	integer	no	0
`completed_count`	integer	no	0
`abandoned_count`	integer	no	0
`completion_rate`	double precision	yes	CASE WHEN (started_count > 0) THEN ((completed_count)::double precision / (started_count)::double precision) ELSE (0)::double precision END
`median_time_to_complete_seconds`	integer	yes
`p95_time_to_complete_seconds`	integer	yes
`mobile_completion_rate`	double precision	yes
`desktop_completion_rate`	double precision	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

form_id → fw_forms(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)

Policies:

completion_metrics_insert (INSERT)
completion_metrics_select (SELECT)
completion_metrics_update (UPDATE)

`pf_gesture_analytics_events`

PF-37 Phase 2: Tracks gesture usage analytics for product insights. Events retained for 90 days. Append-only; no UPDATE/DELETE by users. pf_profiles.id = auth.uid() by design. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`gesture_type`	text	no
`gesture_subtype`	text	yes
`success`	boolean	no
`device_type`	text	yes
`event_timestamp`	timestamp with time zone	no	now()
`metadata`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

pf_gesture_analytics_events_insert (INSERT)
pf_gesture_analytics_events_select (SELECT)

`pf_github_webhook_events`

GitHub webhook delivery IDs for idempotency; used by github-webhook edge function RLS: ✅ enabled

Column	Type	Nullable	Default	Comment
`delivery_id`	text	no
`created_at`	timestamp with time zone	no	now()

`pf_google_workspace_connections`

PF-101: One Google Workspace connection per organization. Stores connection status, BAA attestation (PHI gate), and capability flags. Raw OAuth credentials live in PF-76 Credential Vault, referenced by credential_vault_ref. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`primary_domain`	text	no
`customer_id`	text	yes
`display_name`	text	yes
`status`	text	no	’pending’::text
`status_detail`	text	yes
`last_health_check_at`	timestamp with time zone	yes
`baa_attested_at`	timestamp with time zone	yes		PHI gating (fail-closed): Gmail/Drive/Chat capabilities involving PHI MUST NOT be enabled unless this is non-NULL.
`baa_attested_by`	uuid	yes
`baa_reference`	text	yes
`capability_directory_enabled`	boolean	no	false
`capability_gmail_enabled`	boolean	no	false
`capability_calendar_enabled`	boolean	no	false
`capability_drive_enabled`	boolean	no	false
`capability_chat_enabled`	boolean	no	false
`capability_licensing_enabled`	boolean	no	false
`capability_reports_enabled`	boolean	no	false
`credential_vault_ref`	text	yes		Reference to PF-76 Credential Vault entry containing OAuth tokens. NEVER store raw secrets in this table.
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`oauth_state_nonce_hash`	text	yes		SHA-256 hash of OAuth state nonce used to bind callback to org+connection handshake.
`oauth_initiated_by`	uuid	yes		User who initiated OAuth consent. Used to bind granted_by attribution to the original actor.
`oauth_return_origin`	text	yes		Validated app origin for OAuth callback postMessage.
`oauth_granted_sub`	text	yes		Immutable Google subject identifier from validated id_token.
`oauth_granted_email`	text	yes		Google account email from validated id_token at grant time.
`oauth_granted_hd`	text	yes		Google hosted domain (hd) from validated id_token at grant time.

Foreign keys:

baa_attested_by → users(id)
created_by → users(id)
oauth_initiated_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_gws_connections_delete (DELETE)
pf_gws_connections_insert (INSERT)
pf_gws_connections_select (SELECT)
pf_gws_connections_update (UPDATE)

`pf_google_workspace_mappings`

PF-101: Generic mapping store for Google Workspace integration (sites→OUs, roles→groups, departments→groups, license assignments). RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`connection_id`	uuid	no
`mapping_type`	text	no
`source_id`	text	no
`source_label`	text	yes
`google_target_id`	text	no
`google_target_label`	text	yes
`enabled`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

connection_id → pf_google_workspace_connections(id)
created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_gws_mappings_delete (DELETE)
pf_gws_mappings_insert (INSERT)
pf_gws_mappings_select (SELECT)
pf_gws_mappings_update (UPDATE)

`pf_google_workspace_sync_runs`

PF-101: Audit log of every Google Workspace sync/provisioning run. Append-only operationally; do not log PHI in summary or error_detail. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`connection_id`	uuid	no
`run_type`	text	no
`status`	text	no	’running’::text
`started_at`	timestamp with time zone	no	now()
`finished_at`	timestamp with time zone	yes
`items_processed`	integer	no	0
`items_succeeded`	integer	no	0
`items_failed`	integer	no	0
`triggered_by`	uuid	yes
`trigger_source`	text	yes
`correlation_id`	uuid	yes
`summary`	jsonb	no	’{}‘::jsonb
`error_detail`	text	yes
`created_at`	timestamp with time zone	no	now()

Foreign keys:

connection_id → pf_google_workspace_connections(id)
organization_id → pf_organizations(id)
triggered_by → users(id)

Policies:

pf_gws_sync_runs_select (SELECT)

`pf_google_workspace_user_links`

PF-101: Maps platform users (auth.users) and optional HR employees to Google Workspace accounts. Tracks provisioning lifecycle. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`connection_id`	uuid	no
`user_id`	uuid	yes
`employee_id`	uuid	yes		Cross-core reference to hr_employees.id (HR core). No FK constraint per ADR-002 default; validate at application layer.
`google_user_id`	text	no
`primary_email`	text	no
`org_unit_path`	text	yes
`provisioning_status`	text	no	’pending’::text
`provisioning_error`	text	yes
`last_synced_at`	timestamp with time zone	yes
`provisioned_at`	timestamp with time zone	yes
`deprovisioned_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

connection_id → pf_google_workspace_connections(id)
created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)
user_id → users(id)

Policies:

pf_gws_user_links_delete (DELETE)
pf_gws_user_links_insert (INSERT)
pf_gws_user_links_select (SELECT)
pf_gws_user_links_update (UPDATE)

`pf_hcpcs_codes`

PF-70: HCPCS Level II codes. Platform-managed; org-editable via org-scoped code_set_id. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`code_set_id`	uuid	no
`code`	text	no
`description`	text	no
`short_description`	text	yes
`effective_from`	date	no
`effective_to`	date	yes
`category`	text	yes
`is_behavioral_health`	boolean	no	false
`custom_fields`	jsonb	no	’{}‘::jsonb	Extended metadata (e.g., {“cms_section”: “H”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

code_set_id → pf_code_sets(id)

Policies:

pf_hcpcs_codes_delete (DELETE)
pf_hcpcs_codes_insert (INSERT)
pf_hcpcs_codes_select (SELECT)
pf_hcpcs_codes_update (UPDATE)

`pf_headshot_campaign_members`

RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`campaign_id`	uuid	no
`organization_id`	uuid	no
`user_id`	uuid	no
`status`	text	no	’invited’::text
`job_id`	uuid	yes
`invited_at`	timestamp with time zone	yes	now()
`reminded_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

campaign_id → pf_headshot_campaigns(id)
job_id → pf_headshot_jobs(id)
organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

pf_headshot_campaign_members_all_admin (ALL)
pf_headshot_campaign_members_select_own (SELECT)
pf_headshot_campaign_members_update_own (UPDATE)

`pf_headshot_campaigns`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`status`	text	no	’draft’::text
`deadline`	timestamp with time zone	yes
`allowed_styles`	text[]	yes	’{}‘::text[]
`headshots_per_person`	integer	yes	40
`provider`	text	yes
`invited_count`	integer	yes	0
`completed_count`	integer	yes	0
`total_cost_cents`	integer	yes	0
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_headshot_campaigns_all_admin (ALL)
pf_headshot_campaigns_select_member (SELECT)

`pf_headshot_jobs`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`user_id`	uuid	no
`campaign_id`	uuid	yes
`provider`	text	no
`provider_job_id`	text	yes
`status`	text	no	’pending’::text
`gender`	text	yes
`selected_styles`	text[]	yes	’{}‘::text[]
`requested_count`	integer	no	40
`output_resolution`	text	yes	’1024x1024’::text
`generated_count`	integer	yes	0
`estimated_completion_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`error_message`	text	yes
`retry_count`	integer	yes	0
`estimated_cost_cents`	integer	yes
`actual_cost_cents`	integer	yes
`provider_metadata`	jsonb	no	’{}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

campaign_id → pf_headshot_campaigns(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)
user_id → pf_profiles(id)

Policies:

pf_headshot_jobs_insert (INSERT)
pf_headshot_jobs_select_admin (SELECT)
pf_headshot_jobs_select_own (SELECT)
pf_headshot_jobs_update (UPDATE)

`pf_headshot_results`

RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`job_id`	uuid	no
`user_id`	uuid	no
`storage_path`	text	no
`thumbnail_path`	text	yes
`file_size_bytes`	integer	yes
`width`	integer	yes	1024
`height`	integer	yes	1024
`style`	text	yes
`is_favorite`	boolean	yes	false
`is_profile_photo`	boolean	yes	false
`sort_order`	integer	yes	0
`provider_metadata`	jsonb	no	’{}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
job_id → pf_headshot_jobs(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)
user_id → pf_profiles(id)

Policies:

pf_headshot_results_insert (INSERT)
pf_headshot_results_select_own (SELECT)
pf_headshot_results_update (UPDATE)

`pf_headshot_uploads`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`job_id`	uuid	no
`user_id`	uuid	no
`storage_path`	text	no
`file_name`	text	no
`file_size_bytes`	integer	no
`mime_type`	text	no
`width`	integer	yes
`height`	integer	yes
`face_detected`	boolean	yes	false
`quality_score`	numeric(3,2)	yes
`validation_warnings`	text[]	yes
`expires_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
job_id → pf_headshot_jobs(id)
organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

pf_headshot_uploads_insert (INSERT)
pf_headshot_uploads_select_admin (SELECT)
pf_headshot_uploads_select_own (SELECT)
pf_headshot_uploads_update (UPDATE)

`pf_health_alert_configs`

RLS: ✅ enabled (8 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`metric_name`	text	no
`comparison`	text	no
`threshold`	numeric	no
`evaluation_window_minutes`	integer	no	5
`notify_emails`	text[]	yes
`notify_in_app`	boolean	no	true
`cooldown_minutes`	integer	no	60
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_at`	timestamp with time zone	no	now()
`updated_by`	uuid	yes
`slack_webhook_vault_id`	uuid	yes		Reference to an encrypted Slack incoming webhook URL stored in pf_credential_vault. Use pf_retrieve_credential(slack_webhook_vault_id) to resolve the URL at runtime. Never store the raw webhook URL in this column.

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
slack_webhook_vault_id → pf_credential_vault(id)
updated_by → pf_profiles(id)

Policies:

pf_health_alert_configs_delete (DELETE)
pf_health_alert_configs_insert (INSERT)
pf_health_alert_configs_org_admin_delete (DELETE)
pf_health_alert_configs_org_admin_insert (INSERT)
pf_health_alert_configs_org_admin_select (SELECT)
pf_health_alert_configs_org_admin_update (UPDATE)
pf_health_alert_configs_select (SELECT)
pf_health_alert_configs_update (UPDATE)

`pf_health_alert_history`

RLS: ✅ enabled (6 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`alert_config_id`	uuid	no
`organization_id`	uuid	yes
`metric_value`	numeric	no
`threshold`	numeric	no
`triggered_at`	timestamp with time zone	no	now()
`status`	text	no	’triggered’::text
`acknowledged_at`	timestamp with time zone	yes
`acknowledged_by`	uuid	yes
`resolved_at`	timestamp with time zone	yes
`resolved_by`	uuid	yes
`resolution_notes`	text	yes
`auto_resolved`	boolean	no	false
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()	Timestamp of last update, auto-maintained by trigger

Foreign keys:

acknowledged_by → pf_profiles(id)
alert_config_id → pf_health_alert_configs(id)
organization_id → pf_organizations(id)
resolved_by → pf_profiles(id)

Policies:

pf_health_alert_history_delete (DELETE)
pf_health_alert_history_insert (INSERT)
pf_health_alert_history_org_admin_select (SELECT)
pf_health_alert_history_org_admin_update (UPDATE)
pf_health_alert_history_select (SELECT)
pf_health_alert_history_update (UPDATE)

`pf_health_metrics`

RLS: ✅ enabled (10 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`metric_name`	text	no
`metric_type`	text	no	’gauge’::text
`organization_id`	uuid	yes
`endpoint`	text	yes
`error_type`	text	yes
`value`	numeric	no	0
`count`	integer	no	1
`min_value`	numeric	yes
`max_value`	numeric	yes
`sum_value`	numeric	yes
`bucket_start`	timestamp with time zone	no
`bucket_end`	timestamp with time zone	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_health_metrics_anon_deny_delete (DELETE)
pf_health_metrics_anon_deny_insert (INSERT)
pf_health_metrics_anon_deny_select (SELECT)
pf_health_metrics_anon_deny_update (UPDATE)
pf_health_metrics_insert (INSERT)
pf_health_metrics_platform_admin_delete (DELETE)
pf_health_metrics_platform_admin_insert (INSERT)
pf_health_metrics_platform_admin_select (SELECT)
pf_health_metrics_platform_admin_update (UPDATE)
pf_health_metrics_select (SELECT)

`pf_icd10_codes`

PF-70: ICD-10-CM diagnosis codes. Loaded via migration by platform team; org-editable via code_set_id. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`code_set_id`	uuid	no
`code`	text	no
`description`	text	no
`short_description`	text	yes
`effective_from`	date	no
`effective_to`	date	yes
`is_billable`	boolean	no	true
`is_behavioral_health`	boolean	no	false	TRUE for behavioral health / SUD-relevant codes (F01-F99 and selected others).
`is_sdoh`	boolean	no	false	TRUE for SDOH Z-codes (Z55-Z65).
`chapter`	text	yes
`block`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Extended metadata (e.g., {“cms_tabular_ref”: “F32.1”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`parent_code`	text	yes
`hierarchy_level`	integer	yes

Foreign keys:

code_set_id → pf_code_sets(id)

Policies:

pf_icd10_codes_delete (DELETE)
pf_icd10_codes_insert (INSERT)
pf_icd10_codes_select (SELECT)
pf_icd10_codes_update (UPDATE)

`pf_idempotency_keys`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`idempotency_key`	text	no
`function_name`	text	no
`response_snapshot`	jsonb	no
`created_at`	timestamp with time zone	no	now()
`organization_id`	uuid	yes

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_idempotency_keys_insert (INSERT)
pf_idempotency_keys_select (SELECT)

`pf_import_batches`

PF-88: Tracks bulk import batches for Data import hub. Stores batch metadata, field mappings, validation errors, and lifecycle status. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`import_type`	text	yes		Legacy: e.g. hr_employee, ce_contact (use entity_type for new imports)
`filename`	text	yes
`row_count`	integer	no	0
`created_count`	integer	no	0
`skipped_count`	integer	no	0
`failed_count`	integer	no	0
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_at`	timestamp with time zone	yes		Set by application or trigger when row is updated; NULL for insert-only batches.
`updated_by`	uuid	yes		User who last updated the batch; NULL for insert-only batches.
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp; NULL = active
`metadata`	jsonb	yes	’{}‘::jsonb	Legacy: optional metadata (custom_object_id, skipped/failed details)
`name`	text	yes
`entity_type`	text	yes		Target entity type (e.g. hr_employee, ce_contact)
`source_format`	text	yes	’csv’::text	Source file format: csv, xlsx, json
`status`	text	yes	’pending’::text	Batch lifecycle: pending, validating, mapping, importing, completed, failed, rolled_back, partially_completed
`total_records`	integer	yes	0
`imported_records`	integer	yes	0
`skipped_records`	integer	yes	0
`failed_records`	integer	yes	0
`field_mappings`	jsonb	no	’[]‘::jsonb	Array of {source_column, target_field, transform} mapping objects
`validation_errors`	jsonb	no	’[]‘::jsonb	Array of {row, column, message, severity} validation error objects
`source_file_path`	text	yes		Tenant-scoped storage path for the uploaded source file
`source_file_size`	bigint	yes
`started_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`rolled_back_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_import_batches_delete (DELETE)
pf_import_batches_insert (INSERT)
pf_import_batches_select (SELECT)
pf_import_batches_update (UPDATE)

`pf_import_mapping_templates`

PF-88: Reusable field mapping templates for import batches. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`entity_type`	text	no
`source_format`	text	no	’csv’::text
`field_mappings`	jsonb	no	’[]‘::jsonb	Array of {source_column, target_field, transform} mapping objects
`transform_rules`	jsonb	yes	’[]‘::jsonb	Array of {field, transform_type, params} transform rule objects
`is_default`	boolean	yes	false
`usage_count`	integer	yes	0
`last_used_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_import_mapping_templates_delete (DELETE)
pf_import_mapping_templates_insert (INSERT)
pf_import_mapping_templates_select (SELECT)
pf_import_mapping_templates_update (UPDATE)

`pf_import_records`

PF-88: Individual row records within an import batch. Tracks per-row status, mapping, and errors. RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`batch_id`	uuid	no
`row_number`	integer	no
`source_data`	jsonb	no	’{}‘::jsonb	Raw parsed data from the source file row
`mapped_data`	jsonb	yes	’{}‘::jsonb	Data after field mapping transforms applied
`status`	text	no	’pending’::text
`error_message`	text	yes
`target_entity_id`	uuid	yes
`duplicate_of`	uuid	yes
`duplicate_confidence`	numeric(3,2)	yes		Fuzzy match confidence score 0.00-1.00 when duplicate detected
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

batch_id → pf_import_batches(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_import_records_insert (INSERT)
pf_import_records_select (SELECT)
pf_import_records_update (UPDATE)

`pf_inbox_snoozes`

PF Unified Inbox: snooze until time per item (item_key e.g. task-123, notif-456) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`item_key`	text	no
`snoozed_until`	timestamp with time zone	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes		User who created the snooze entry
`updated_by`	uuid	yes		User who last updated the snooze entry

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)
user_id → users(id)

Policies:

pf_inbox_snoozes_delete (DELETE)
pf_inbox_snoozes_insert (INSERT)
pf_inbox_snoozes_select (SELECT)
pf_inbox_snoozes_update (UPDATE)

`pf_integration_credentials`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`integration_id`	uuid	no
`credential_type`	text	no
`encrypted_value`	text	no
`expires_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

integration_id → pf_integrations(id)

Policies:

pf_integration_credentials_deny_delete (DELETE)
pf_integration_credentials_deny_insert (INSERT)
pf_integration_credentials_deny_select (SELECT)
pf_integration_credentials_deny_update (UPDATE)

`pf_integrations`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`integration_type`	text	no
`provider`	text	yes
`auth_type`	text	no
`base_url`	text	yes
`configuration`	jsonb	no	’{}‘::jsonb
`status`	text	no	’disconnected’::text
`last_health_check_at`	timestamp with time zone	yes
`last_error`	text	yes
`error_count`	integer	yes	0
`webhook_url`	text	yes
`webhook_secret`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`oauth_state`	text	yes
`pkce_code_verifier`	text	yes
`oauth_initiated_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_integrations_delete (DELETE)
pf_integrations_insert (INSERT)
pf_integrations_select (SELECT)
pf_integrations_update (UPDATE)

`pf_ip_allowlist`

RLS: ✅ enabled (9 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`ip_address`	inet	no
`description`	text	yes
`reason`	text	yes
`is_active`	boolean	no	true
`last_reviewed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_ip_allowlist_delete (DELETE)
pf_ip_allowlist_insert (INSERT)
pf_ip_allowlist_org_admin_delete (DELETE)
pf_ip_allowlist_org_admin_insert (INSERT)
pf_ip_allowlist_org_admin_select (SELECT)
pf_ip_allowlist_org_admin_update (UPDATE)
pf_ip_allowlist_platform_admin_all (ALL)
pf_ip_allowlist_select (SELECT)
pf_ip_allowlist_update (UPDATE)

`pf_ip_blocklist`

RLS: ✅ enabled (9 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`ip_address`	inet	no
`description`	text	yes
`reason`	text	yes
`is_active`	boolean	no	true
`last_reviewed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_ip_blocklist_delete (DELETE)
pf_ip_blocklist_insert (INSERT)
pf_ip_blocklist_org_admin_delete (DELETE)
pf_ip_blocklist_org_admin_insert (INSERT)
pf_ip_blocklist_org_admin_select (SELECT)
pf_ip_blocklist_org_admin_update (UPDATE)
pf_ip_blocklist_platform_admin_all (ALL)
pf_ip_blocklist_select (SELECT)
pf_ip_blocklist_update (UPDATE)

`pf_jurisdiction_profiles`

PF-96: State Medicaid compliance profiles with clinical, billing, and compliance rule packs. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`state_code`	text	no		Two-letter US state code (e.g., AZ, CA, TX) or US for federal baseline
`program_name`	text	no
`program_code`	text	no		Unique program identifier (e.g., az-ahcccs, ca-medi-cal, us-federal-baseline)
`display_name`	text	no
`description`	text	yes
`profile_version`	text	no	’1.0.0’::text
`effective_date`	date	no	CURRENT_DATE
`sunset_date`	date	yes
`is_federal_baseline`	boolean	no	false
`is_active`	boolean	no	true
`clinical_rules`	jsonb	no	’{}‘::jsonb	Clinical documentation rules: assessment requirements, timeliness, note elements, consent ages
`billing_rules`	jsonb	no	’{}‘::jsonb	Billing rules: filing deadlines, timed code thresholds, modifiers, POS, member ID formats
`compliance_rules`	jsonb	no	’{}‘::jsonb	Compliance rules: quality measures, reporting mandates, accreditation, retention periods
`metadata`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`recording_rules`	jsonb	no	’{}‘::jsonb	PF-96-EN-RECORDING: jurisdiction recording/consent/retention/wiretap rules. See PF-96-EN-RECORDING spec.

Foreign keys:

created_by → pf_profiles(id)
updated_by → pf_profiles(id)

Policies:

pf_jurisdiction_profiles_all_admin (ALL)
pf_jurisdiction_profiles_select_active (SELECT)

`pf_knowledge_base`

PF-61: Curated knowledge articles for AI training and RAG RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`title`	text	no
`summary`	text	yes
`content`	text	no
`category`	knowledge_article_category	no	’other’::knowledge_article_category
`tags`	text[]	yes	’{}‘::text[]
`source_document_id`	uuid	yes		Link to PF-11 document if content was imported
`status`	knowledge_article_status	no	’draft’::knowledge_article_status
`published_at`	timestamp with time zone	yes
`published_by`	uuid	yes
`is_indexed`	boolean	no	false	True when embeddings have been generated for this article
`last_indexed_at`	timestamp with time zone	yes
`embedding_count`	integer	yes	0
`search_vector`	tsvector	yes		Weighted tsvector: title(A), summary(B), content(C), tags(B)
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
published_by → users(id)
source_document_id → pf_documents(id)
updated_by → users(id)

Policies:

pf_knowledge_base_delete (DELETE)
pf_knowledge_base_insert (INSERT)
pf_knowledge_base_select (SELECT)
pf_knowledge_base_update (UPDATE)

`pf_legal_holds`

PF-46: Legal holds that prevent data from being archived or deleted regardless of retention policies RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`hold_name`	text	no
`description`	text	yes
`entity_type`	text	yes
`record_id`	uuid	yes
`hold_start_date`	timestamp with time zone	no	now()
`hold_end_date`	timestamp with time zone	yes
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for legal hold customization
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_legal_holds_delete (DELETE)
pf_legal_holds_insert (INSERT)
pf_legal_holds_select (SELECT)
pf_legal_holds_update (UPDATE)

`pf_letterheads`

PF-64: Organization letterhead configurations RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`is_default`	boolean	no	false
`is_system`	boolean	no	false
`logo_url`	text	yes
`logo_position`	text	yes	’left’::text
`logo_max_height`	integer	yes	80
`org_name_display`	text	yes
`address_line_1`	text	yes
`address_line_2`	text	yes
`city`	text	yes
`state`	text	yes
`postal_code`	text	yes
`country`	text	yes
`phone`	text	yes
`email`	text	yes
`website`	text	yes
`header_config`	jsonb	no	’{}‘::jsonb
`footer_config`	jsonb	no	’{}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_letterheads_delete (DELETE)
pf_letterheads_insert (INSERT)
pf_letterheads_select (SELECT)
pf_letterheads_update (UPDATE)

`pf_locus_loc_levels`

CL-49/PF-70: Canonical LOCUS Levels of Care reference library (platform-global). RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`code`	text	no
`display`	text	no
`description`	text	yes
`sort_order`	integer	no	0
`active`	boolean	no	true
`effective_from`	date	no	CURRENT_DATE
`effective_to`	date	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Policies:

pf_locus_loc_levels_select (SELECT)

`pf_marketplace_ratings`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`listing_id`	uuid	no
`organization_id`	uuid	no
`user_id`	uuid	no
`rating`	integer	no
`review`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
listing_id → pf_wizard_marketplace_listings(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)
user_id → pf_profiles(id)

Policies:

pf_marketplace_ratings_delete (DELETE)
pf_marketplace_ratings_insert (INSERT)
pf_marketplace_ratings_select (SELECT)
pf_marketplace_ratings_update (UPDATE)

`pf_message_bookmarks`

PF-67: User-saved message bookmarks for quick reference RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`message_id`	uuid	no
`conversation_id`	uuid	no
`organization_id`	uuid	no
`note`	text	yes
`created_at`	timestamp with time zone	no	now()

Foreign keys:

conversation_id → pf_conversations(id)
message_id → pf_messages(id)
organization_id → pf_organizations(id)
user_id → users(id)

Policies:

pf_message_bookmarks_delete (DELETE)
pf_message_bookmarks_insert (INSERT)
pf_message_bookmarks_select (SELECT)

`pf_message_read_receipts`

PF-67: Per-user read tracking (append-only — no UPDATE or DELETE) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`message_id`	uuid	no
`user_id`	uuid	no
`organization_id`	uuid	no
`read_at`	timestamp with time zone	yes	now()

Foreign keys:

message_id → pf_messages(id)
organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

pf_read_receipts_delete (DELETE)
pf_read_receipts_insert (INSERT)
pf_read_receipts_select (SELECT)
pf_read_receipts_update (UPDATE)

`pf_messages`

PF-67: Individual messages. sender_id serves as created_by per spec deviation. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`conversation_id`	uuid	no
`sender_id`	uuid	no
`organization_id`	uuid	no
`content`	text	no
`content_type`	text	yes	’text’::text
`file_url`	text	yes		PF-67: Attachment reference — bucket-relative path under pf-messaging-attachments (preferred), or legacy signed/public URL.
`file_name`	text	yes
`file_size`	integer	yes
`file_mime_type`	text	yes
`parent_message_id`	uuid	yes
`thread_count`	integer	yes	0
`metadata`	jsonb	no	’{}‘::jsonb	Structured metadata: mentions, link previews. E.g., {“mentions”: [“user-uuid-1”]}
`reactions`	jsonb	no	’{}‘::jsonb	Reaction map: {”👍”: [“user-uuid-1”], “❤️”: [“user-uuid-2”]}
`is_edited`	boolean	yes	false
`edited_at`	timestamp with time zone	yes
`is_deleted`	boolean	yes	false
`deleted_at`	timestamp with time zone	yes
`deleted_by`	uuid	yes
`is_pinned`	boolean	yes	false
`pinned_at`	timestamp with time zone	yes
`pinned_by`	uuid	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`updated_by`	uuid	yes

Foreign keys:

conversation_id → pf_conversations(id)
deleted_by → pf_profiles(id)
organization_id → pf_organizations(id)
parent_message_id → pf_messages(id)
pinned_by → pf_profiles(id)
sender_id → pf_profiles(id)
updated_by → pf_profiles(id)

Policies:

pf_messages_delete (DELETE)
pf_messages_insert (INSERT)
pf_messages_select (SELECT)
pf_messages_update (UPDATE)

`pf_module_permissions`

System-wide catalog of all available module permissions RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`module_id`	text	no		Core module identifier: hr, fa, rh, fw, lo, fm, gr, pf
`permission_key`	text	no		Format: {module}.{entity}.{action} (e.g., hr.employees.view)
`permission_name`	text	no
`description`	text	yes
`category`	text	no
`is_active`	boolean	yes	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Policies:

pf_module_permissions_delete (DELETE)
pf_module_permissions_insert (INSERT)
pf_module_permissions_select (SELECT)
pf_module_permissions_update (UPDATE)

`pf_module_presets`

RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`preset_key`	text	yes
`enabled_modules`	jsonb	no	’{}‘::jsonb
`enabled_nav_groups`	jsonb	no	’{}‘::jsonb
`preset_type`	text	no	’org’::text
`icon_name`	text	yes
`is_active`	boolean	yes	true
`usage_count`	integer	yes	0
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`custom_fields`	jsonb	yes	’{}‘::jsonb
`updated_by`	uuid	yes		User who last updated the preset
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp
`site_id`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
updated_by → users(id)

Policies:

pf_module_presets_delete (DELETE)
pf_module_presets_insert (INSERT)
pf_module_presets_select_org (SELECT)
pf_module_presets_select_system (SELECT)
pf_module_presets_update (UPDATE)

`pf_module_settings`

Organization-level platform configuration settings RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`default_page_size`	integer	yes	50	Default number of items per page in data tables
`default_widget_limit`	integer	yes	5
`max_file_size_bytes`	bigint	yes	52428800	Maximum file upload size in bytes (default 50MB)
`max_excel_preview_rows`	integer	yes	500
`search_debounce_ms`	integer	yes	300	Debounce delay for search inputs in milliseconds
`signature_reminder_hours`	integer	yes	24
`signature_expiration_hours`	integer	yes	72
`analytics_events_retention_days`	integer	yes	90
`integration_logs_retention_days`	integer	yes	90
`custom_fields`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`formatting_currency_code`	text	yes	’USD’::text	ISO 4217 currency code for formatting (e.g., USD, EUR, GBP)
`formatting_date_format`	text	yes	’MM/dd/yyyy’::text	Date format pattern (e.g., MM/dd/yyyy, dd/MM/yyyy, yyyy-MM-dd)
`formatting_locale`	text	yes	’en-US’::text	BCP 47 locale tag for number/date formatting (e.g., en-US, de-DE)
`formatting_number_decimals`	integer	yes	2	Default decimal places for number formatting (0-10)
`allowed_file_types`	text[]	yes	ARRAY[‘image/jpeg’::text, ‘image/png’::text, ‘image/gif’::text, ‘image/webp’::text, ‘application/pdf’::text, ‘application/msword’::text, ‘application/vnd.openxmlformats-officedocument.wordprocessingml.document’::text, ‘application/vnd.ms-excel’::text, ‘application/vnd.openxmlformats-officedocument.spreadsheetml.sheet’::text, ‘text/plain’::text, ‘text/csv’::text]	Array of allowed MIME types for file uploads. Organizations can customize this list.
`enabled_modules`	jsonb	yes	’{“fa”: true, “fm”: true, “fw”: true, “gr”: true, “hr”: true, “lo”: true, “rh”: true, “reports”: true, “settings”: true, “documents”: true}‘::jsonb	Controls which top-level modules are visible to users
`enabled_nav_groups`	jsonb	yes	’{}‘::jsonb	Controls nav group visibility, e.g., {“hr.ats”: false}
`default_letterhead_id`	uuid	yes
`require_letterhead_on_export`	boolean	yes	false
`auto_version_templates`	boolean	yes	true
`pf_templates_enabled`	boolean	yes	false
`realtime_max_channels`	integer	yes	20	Maximum concurrent Supabase Realtime channels per browser client. Default: 20.
`realtime_fallback_poll_ms`	integer	yes	30000	Polling interval (ms) when Realtime is disconnected. Default: 30000 (30s).
`bulk_operation_items_per_second`	integer	yes	10	Bulk operation processing rate (items per second). Range: 1-100.
`bulk_operation_rollback_window_hours`	integer	yes	24	Hours after completion during which a bulk operation can be rolled back. Range: 1-168.
`security_failed_login_threshold_per_hour`	integer	yes	10	Number of failed logins from same IP per hour before triggering suspicious_activity. Range: 1-100.
`security_suspicious_activity_window_hours`	integer	yes	24	Time window (hours) for evaluating suspicious activity patterns. Range: 1-168.
`session_expiration_hours`	integer	yes	24
`device_trust_expiration_days`	integer	yes	30
`session_pii_retention_days`	integer	yes	30
`feature_flag_cache_ttl_minutes`	integer	yes	5
`export_file_expiration_days`	integer	yes	30	Export file retention in days before cleanup (1-365)
`export_download_link_expiration_days`	integer	yes	7	Signed download link TTL in days (1-30)
`export_queue_processing_rate_per_minute`	integer	yes	1	Max export jobs processed per minute per org (1-10)
`export_max_size_mb`	integer	yes	500	Max export size in MB (10-5000)
`swim_lane_builder_enabled`	boolean	yes	true	PF-73: Enable/disable swim lane builder for the organization
`custom_metrics_enabled`	boolean	no	true	When false, custom metrics routes/UI are hidden and SLA detection jobs skip this org.
`custom_metric_retention_days`	integer	no	90	Days to retain pf_custom_metric_values. Enforced by retention job. Range: 30-365.
`data_retention_default_years`	integer	no	7	Default retention period in years for data lifecycle management (1-100). Used as fallback when no entity-specific policy exists.
`query_performance_slow_threshold_ms`	integer	yes	1000	Slow query threshold in milliseconds; queries exceeding this are flagged and logged.
`query_performance_log_retention_days`	integer	yes	30	Number of days to retain query performance log entries before cleanup.
`rate_limit_default_per_minute`	integer	yes	100	Default rate limit per minute for organizations without custom limits
`rate_limit_default_per_hour`	integer	yes	1000	Default rate limit per hour for organizations without custom limits
`rate_limit_default_per_day`	integer	yes	10000	Default rate limit per day for organizations without custom limits
`rate_limit_violation_alert_threshold`	integer	yes	10	Alert platform admins after N violations per hour for an organization
`pf_ai_template_gen_enabled`	boolean	yes	false	PF-64 Phase 2: Enables AI-powered template generation features (description-to-template, section suggestions). Default false; set per-org.
`query_performance_capture_plan`	boolean	yes	false	PF-52 Phase 5: Enable execution plan capture at slow-query logging time (before redaction)
`query_performance_recommendations`	boolean	yes	true	PF-52 Phase 5: Enable index recommendation engine on the Recommendations tab
`query_performance_pattern_analysis`	boolean	yes	false	PF-52 Phase 6: Enable query fingerprint pattern clustering on the Patterns tab
`query_performance_anomaly_new_pattern_alert`	boolean	yes	false	PF-52 Phase 6: Send notification when a new query pattern is detected
`query_performance_anomaly_spike_alert`	boolean	yes	false	PF-52 Phase 6: Send notification when query execution time spikes above threshold
`query_performance_anomaly_spike_threshold`	integer	yes	50	PF-52 Phase 6: Percentage increase over baseline p95 that triggers a spike alert (default 50%)
`validation_async_timeout_ms`	integer	yes	5000	PF-55: Async validation timeout in ms (1000-30000). Default 5000.
`validation_default_phone_format`	text	yes	’us’::text	PF-55: Default phone format for validation (us \| international).
`quota_default_storage_gb`	numeric(15,2)	yes	100	Default storage quota in GB (PF-43)
`quota_default_api_calls_per_day`	integer	yes	10000	Default API call quota per day (PF-43)
`quota_default_users`	integer	yes	50	Default user quota (PF-43)
`quota_default_custom_objects`	integer	yes	100	Default custom object quota (PF-43)
`quota_default_workflow_executions_per_day`	integer	yes	1000	Default workflow execution quota per day (PF-43)
`quota_default_grace_period_hours`	integer	yes	24	Default grace period in hours (PF-43)
`quota_violation_logging_interval_hours`	integer	yes	1	Min hours between logging duplicate soft violations (PF-43)
`server_side_condition_evaluation_enabled`	boolean	no	false	PF-32: Enable server-side condition evaluation for complex forms. Default false.
`condition_evaluation_complexity_threshold`	integer	no	5	PF-32: Number of conditions above which to use server-side evaluation. Default 5.
`condition_cache_max_entries_per_org`	integer	no	1000	PF-32: Maximum cached condition evaluation entries per organization. Default 1000.
`condition_metrics_retention_days`	integer	no	90	PF-32: Days to retain condition evaluation metrics before archival. Default 90.
`fw_service_role_event_publishers`	jsonb	yes	’[]‘::jsonb	Allowlist of service identities permitted to publish events via service role (NFR-3.3). JSONB array of service identity names/IDs. Used by Edge Function validation supplement for service-role event publishing.
`fw_service_role_event_expiry_hours`	integer	yes	24	Expiry window in hours for service-role published events (NFR-3.3). Default 24 hours. Events published via service role must include expires_at timestamp within this window. Range: 1-168 hours (1 week max).
`email_signature_require_org_default`	boolean	no	false	Require organization default signature before users can send emails
`email_signature_allow_user_customization`	boolean	no	true	Allow users to customize their personal signature
`email_signature_require_disclaimer`	boolean	no	false	Require compliance disclaimer on all signatures
`headshot_generation_enabled`	boolean	yes	true	Enable/disable AI headshot generation
`headshot_monthly_limit`	integer	yes	50	Max headshot jobs per month (0–500)
`headshot_default_provider`	text	yes	’replicate’::text	Default AI provider
`headshot_default_count`	integer	yes	40	Default headshots per job (10–200)
`headshot_upload_retention_days`	integer	yes	30	Source photo retention days (7–365)
`headshot_allowed_styles`	text[]	yes	’{corporate,business_casual,healthcare,creative,outdoor}‘::text[]	Available style identifiers

Foreign keys:

created_by → pf_profiles(id)
default_letterhead_id → pf_letterheads(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_module_settings_delete (DELETE)
pf_module_settings_insert (INSERT)
pf_module_settings_select (SELECT)
pf_module_settings_update (UPDATE)

`pf_notification_batches`

Notification batches for digest emails. Managed exclusively via service role (edge functions). INSERT/UPDATE/DELETE policies are intentionally omitted as only edge functions with service_role access manage this table. SELECT policy exists to allow authenticated users to view their own batch status. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`batch_type`	text	no
`scheduled_for`	timestamp with time zone	no
`sent_at`	timestamp with time zone	yes
`notification_count`	integer	no	0
`status`	text	no	’pending’::text
`error_message`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	yes	’{}‘::jsonb	Organization-specific metadata for notification batches

Foreign keys:

organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

pf_notification_batches_select_own (SELECT)

`pf_notification_delivery_log`

PF-10: Tracks all notification delivery attempts for audit and retry RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`notification_id`	uuid	no
`channel`	text	no
`attempt_number`	integer	no	1
`status`	text	no
`provider`	text	yes
`provider_message_id`	text	yes
`error_message`	text	yes
`metadata`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

notification_id → pf_notifications(id)

Policies:

pf_notification_delivery_log_select (SELECT)
pf_notification_delivery_log_system_insert (INSERT)

`pf_notification_preferences`

User notification preferences per type and channel. Controls quiet hours, batching, and opt-outs. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`type`	notification_type	no
`channel`	notification_channel	no
`enabled`	boolean	yes	true
`quiet_hours_start`	time without time zone	yes
`quiet_hours_end`	time without time zone	yes
`batch_enabled`	boolean	yes	false
`batch_frequency`	interval	yes	’1 day’::interval
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

user_id → pf_profiles(id)

Policies:

Users can delete own preferences (DELETE)
Users can manage own preferences (INSERT)
Users can update own preferences (UPDATE)
Users can view own preferences (SELECT)

`pf_notification_template_variables`

Supported template variables with metadata for validation and preview. System variables (is_system=true) are platform-defined. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`variable_key`	text	no
`display_name`	text	no
`description`	text	yes
`sample_value`	text	no	”::text
`data_type`	text	no	’text’::text
`is_system`	boolean	no	false
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_ntv_delete (DELETE)
pf_ntv_insert (INSERT)
pf_ntv_select (SELECT)
pf_ntv_update (UPDATE)

`pf_notification_templates`

Notification templates with variable substitution support. Platform-wide templates have NULL organization_id. RLS: ✅ enabled (9 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`type`	notification_type	no
`channel`	notification_channel	no
`name`	text	no
`description`	text	yes
`subject`	text	yes
`body_template`	text	no
`settings`	jsonb	yes	’{}‘::jsonb
`is_active`	boolean	yes	true
`created_by`	uuid	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific template metadata (e.g., priority, SLA hours, escalation groups)
`updated_by`	uuid	yes		User who last updated this record
`event_key`	text	yes		Deterministic lookup key for template resolution (e.g. form_submitted, approval_request). Used by pf_resolve_notification_template.

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

Users can view org templates (SELECT)
pf_notification_templates_org_admin_delete (DELETE)
pf_notification_templates_org_admin_insert (INSERT)
pf_notification_templates_org_admin_select (SELECT)
pf_notification_templates_org_admin_update (UPDATE)
pf_notification_templates_platform_admin_delete (DELETE)
pf_notification_templates_platform_admin_insert (INSERT)
pf_notification_templates_platform_admin_select (SELECT)
pf_notification_templates_platform_admin_update (UPDATE)

`pf_notifications`

Multi-channel notification delivery tracking. Use send_notification() function to create notifications. RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`user_id`	uuid	no
`type`	notification_type	no
`channel`	notification_channel	no
`title`	text	no
`body`	text	no
`action_url`	text	yes
`data`	jsonb	yes	’{}‘::jsonb
`template_id`	uuid	yes
`status`	notification_status	no	’pending’::notification_status
`sent_at`	timestamp with time zone	yes
`delivered_at`	timestamp with time zone	yes
`read_at`	timestamp with time zone	yes
`failed_at`	timestamp with time zone	yes
`failure_reason`	text	yes
`retry_count`	integer	yes	0
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`delivery_provider`	text	yes
`external_message_id`	text	yes
`delivery_status`	text	yes
`delivery_error`	text	yes
`batch_id`	uuid	yes

Foreign keys:

batch_id → pf_notification_batches(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
template_id → pf_notification_templates(id)
user_id → pf_profiles(id)

Policies:

Org admins can insert notifications (INSERT)
Org admins can view org notifications (SELECT)
Platform admins can view all notifications (SELECT)
Users can update own in-app notifications (UPDATE)
Users can view own notifications (SELECT)

`pf_oauth_providers`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`provider_key`	text	no
`client_id`	text	no
`client_secret_encrypted`	text	yes
`authorization_url`	text	no
`token_url`	text	no
`scopes`	text[]	no	’{}‘::text[]
`redirect_uri`	text	yes
`additional_params`	jsonb	yes	’{}‘::jsonb
`is_active`	boolean	no	true
`custom_fields`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_oauth_providers_delete (DELETE)
pf_oauth_providers_insert (INSERT)
pf_oauth_providers_select (SELECT)
pf_oauth_providers_update (UPDATE)

`pf_oauth_state`

Temporary storage for OAuth state data. Auto-expires after 10 minutes. Uses consumed_at to track single-use state tokens. RLS: ✅ enabled (9 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`state_data`	jsonb	no		JSONB containing userId, organizationId, timestamp, and other OAuth flow data
`expires_at`	timestamp with time zone	no	(now() + ‘00:10:00’::interval)	TTL for state data. States older than this are considered expired.
`created_at`	timestamp with time zone	no	now()
`consumed_at`	timestamp with time zone	yes		Timestamp when the OAuth state was consumed (single-use pattern). NULL if not yet consumed.

Policies:

pf_oauth_state_deny_anon_delete (DELETE)
pf_oauth_state_deny_anon_insert (INSERT)
pf_oauth_state_deny_anon_select (SELECT)
pf_oauth_state_deny_anon_update (UPDATE)
pf_oauth_state_deny_auth_delete (DELETE)
pf_oauth_state_deny_auth_insert (INSERT)
pf_oauth_state_deny_auth_select (SELECT)
pf_oauth_state_deny_auth_update (UPDATE)
pf_oauth_state_service_only (ALL)

`pf_oauth_tokens`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`integration_id`	uuid	no
`provider_id`	uuid	no
`access_token_encrypted`	text	no
`refresh_token_encrypted`	text	yes
`token_type`	text	yes	’Bearer’::text
`expires_at`	timestamp with time zone	yes
`scopes`	text[]	yes	’{}‘::text[]
`raw_token_response`	jsonb	yes	’{}‘::jsonb
`last_refreshed_at`	timestamp with time zone	yes
`refresh_error`	text	yes
`refresh_error_count`	integer	yes	0
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
integration_id → pf_integrations(id)
organization_id → pf_organizations(id)
provider_id → pf_oauth_providers(id)
updated_by → pf_profiles(id)

Policies:

pf_oauth_tokens_delete (DELETE)
pf_oauth_tokens_insert (INSERT)
pf_oauth_tokens_select (SELECT)
pf_oauth_tokens_update (UPDATE)

`pf_object_categories`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`display_order`	integer	yes	0
`icon`	text	yes	’folder’::text
`color`	text	yes	’gray’::text
`is_system`	boolean	yes	false
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_object_categories_delete (DELETE)
pf_object_categories_insert (INSERT)
pf_object_categories_select (SELECT)
pf_object_categories_update (UPDATE)

`pf_object_favorites`

RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`user_id`	uuid	no
`object_metadata_id`	uuid	no
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

created_by → pf_profiles(id)
object_metadata_id → pf_object_metadata(id)
organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

pf_object_favorites_delete (DELETE)
pf_object_favorites_insert (INSERT)
pf_object_favorites_select (SELECT)

`pf_object_metadata`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`object_type`	text	no
`object_name`	text	no
`api_name`	text	no
`display_name`	text	no
`description`	text	yes
`category_id`	uuid	yes
`icon`	text	yes	’database’::text
`field_count`	integer	yes	0
`custom_field_count`	integer	yes	0
`record_count`	integer	yes	0
`last_refreshed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

category_id → pf_object_categories(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_object_metadata_delete (DELETE)
pf_object_metadata_insert (INSERT)
pf_object_metadata_select (SELECT)
pf_object_metadata_update (UPDATE)

`pf_object_permissions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`object_api_name`	text	no
`role`	app_role	no
`can_view`	boolean	no	true
`can_create`	boolean	no	false
`can_edit`	boolean	no	false
`can_delete`	boolean	no	false
`site_scope`	text	no	’all’::text
`site_ids`	uuid[]	yes	’{}‘::uuid[]
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_object_permissions_delete (DELETE)
pf_object_permissions_insert (INSERT)
pf_object_permissions_select (SELECT)
pf_object_permissions_update (UPDATE)

`pf_onboarding_sessions`

PF-88: Multi-step onboarding wizard sessions with resume capability. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`status`	text	no	’not_started’::text
`current_step`	integer	yes	0
`total_steps`	integer	yes	0
`step_definitions`	jsonb	no	’[]‘::jsonb	Array of {step_number, entity_type, label, required, depends_on}
`step_status`	jsonb	no	’{}‘::jsonb	Object keyed by step_number with {status, batch_id, started_at, completed_at}
`completed_at`	timestamp with time zone	yes
`resumed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_onboarding_sessions_delete (DELETE)
pf_onboarding_sessions_insert (INSERT)
pf_onboarding_sessions_select (SELECT)
pf_onboarding_sessions_update (UPDATE)

`pf_onboarding_step_batches`

PF-88: Junction linking onboarding wizard steps to import batches. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	no
`batch_id`	uuid	no
`step_number`	integer	no
`created_at`	timestamp with time zone	no	now()

Foreign keys:

batch_id → pf_import_batches(id)
organization_id → pf_organizations(id)
session_id → pf_onboarding_sessions(id)

Policies:

pf_onboarding_step_batches_insert (INSERT)
pf_onboarding_step_batches_select (SELECT)

`pf_org_api_keys`

PF-97: API key credentials bound to service accounts — stores only the hash, never the raw key RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`service_account_id`	uuid	no
`name`	text	no
`key_prefix`	text	no		First 8 chars of the API key for identification (e.g., “pf_live_a1b2c3d4”)
`secret_hash`	text	no		SHA-256 hash of the full API key — raw key is never stored
`scopes`	text[]	no	’{}‘::text[]
`status`	text	no	’active’::text
`expires_at`	timestamp with time zone	yes
`last_used_at`	timestamp with time zone	yes
`revoked_at`	timestamp with time zone	yes
`revoked_by`	uuid	yes
`replaced_by`	uuid	yes
`grace_period_ends_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for this key
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
replaced_by → pf_org_api_keys(id)
revoked_by → pf_profiles(id)
service_account_id → pf_service_accounts(id)
updated_by → pf_profiles(id)

Policies:

pf_org_api_keys_delete (DELETE)
pf_org_api_keys_insert (INSERT)
pf_org_api_keys_select (SELECT)
pf_org_api_keys_update (UPDATE)

`pf_org_dashboard_defaults`

Organization-level dashboard default configurations for widgets and quick actions RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`dashboard_context`	text	yes		null = main dashboard, or module code like hr, fa, rh for module-specific dashboards
`target_role`	text	yes		null = all roles, or specific role for role-based defaults
`widget_defaults`	jsonb	no	’[]‘::jsonb
`quick_action_defaults`	jsonb	yes	’[]‘::jsonb
`layout_columns`	integer	yes	4
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata. Examples: branding.accent_color, welcome_message, featured_widget_id, custom_help_url, announcement_banner
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`template_id`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
template_id → pf_dashboard_templates(id)
updated_by → pf_profiles(id)

Policies:

pf_org_dashboard_defaults_delete (DELETE)
pf_org_dashboard_defaults_insert (INSERT)
pf_org_dashboard_defaults_select (SELECT)
pf_org_dashboard_defaults_update (UPDATE)

`pf_org_data_sync_events`

PF-18: Stores organizational data change events for cross-module synchronization RLS: ✅ enabled (6 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`event_type`	text	no
`entity_type`	text	no
`entity_id`	uuid	no
`change_type`	text	no
`old_values`	jsonb	yes
`new_values`	jsonb	yes
`status`	text	no	’pending’::text
`affected_modules`	text[]	yes
`propagation_started_at`	timestamp with time zone	yes
`propagation_completed_at`	timestamp with time zone	yes
`retry_count`	integer	yes	0
`max_retries`	integer	yes	3
`last_error`	text	yes
`idempotency_key`	text	yes
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)

Policies:

Admins can insert sync events (INSERT)
Admins can update sync events (UPDATE)
pf_org_sync_events_delete (DELETE)
pf_org_sync_events_insert (INSERT)
pf_org_sync_events_select (SELECT)
pf_org_sync_events_update (UPDATE)

`pf_org_hierarchies`

PF-18: Advanced organizational hierarchy relationships (Phase 4 consumer) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`parent_entity_type`	text	no
`parent_entity_id`	uuid	no
`child_entity_type`	text	no
`child_entity_id`	uuid	no
`hierarchy_type`	text	no	’reporting’::text
`level`	integer	no
`path`	text	yes
`is_primary`	boolean	yes	true
`weight`	numeric(5,2)	yes	1.0
`valid_from`	timestamp with time zone	no	now()
`valid_to`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)

Policies:

pf_org_hierarchies_delete (DELETE)
pf_org_hierarchies_insert (INSERT)
pf_org_hierarchies_select (SELECT)
pf_org_hierarchies_update (UPDATE)

`pf_org_jurisdiction_config`

PF-96: Organization jurisdiction profile assignment with optional overrides. One row per org. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`jurisdiction_profile_id`	uuid	no
`clinical_overrides`	jsonb	yes	’{}‘::jsonb	Org-specific clinical rule overrides (merged on top of state profile)
`billing_overrides`	jsonb	yes	’{}‘::jsonb	Org-specific billing rule overrides (merged on top of state profile)
`compliance_overrides`	jsonb	yes	’{}‘::jsonb
`effective_date`	date	no	CURRENT_DATE
`notes`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
jurisdiction_profile_id → pf_jurisdiction_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_org_jurisdiction_config_delete (DELETE)
pf_org_jurisdiction_config_insert (INSERT)
pf_org_jurisdiction_config_select (SELECT)
pf_org_jurisdiction_config_update (UPDATE)

`pf_org_quick_action_selections`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`dashboard_context`	text	yes
`target_role`	text	yes
`action_key`	text	no
`visible`	boolean	no	true
`scope`	text	no	’module’::text
`sort_order`	integer	no	0
`is_pinned_default`	boolean	no	false
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_org_quick_action_selections_delete (DELETE)
pf_org_quick_action_selections_insert (INSERT)
pf_org_quick_action_selections_select (SELECT)
pf_org_quick_action_selections_update (UPDATE)

`pf_org_sso_providers`

PF-112: per-org Supabase SAML SSO provider registry for BYO-tenant Entra federation. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`supabase_provider_id`	uuid	yes
`domains`	text[]	no	ARRAY[]::text[]
`metadata_url`	text	yes
`idp_entity_id`	text	yes
`attribute_mapping`	jsonb	no	’{}‘::jsonb
`status`	text	no	’pending’::text
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_org_sso_providers_delete (DELETE)
pf_org_sso_providers_insert (INSERT)
pf_org_sso_providers_select (SELECT)
pf_org_sso_providers_update (UPDATE)

`pf_organizations`

RLS: ✅ enabled (6 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`name`	text	no
`slug`	text	no
`settings`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	yes	’{}‘::jsonb
`email_domain`	text	yes
`permissions_v2_enabled`	boolean	yes	false	PF-30: V2 permission system enabled. All orgs migrated to V2 as of this migration. V1 role-based system is deprecated.
`entra_enabled`	boolean	yes	false	Whether Microsoft Entra ID integration is enabled for this organization
`entra_tenant_id`	text	yes		Microsoft Entra ID tenant GUID
`entra_app_id`	text	yes		Azure app registration client ID
`entra_app_secret_id`	text	yes		Reference to Vault secret ID for client secret
`entra_license_sku_id`	text	yes		Default Office 365 license SKU to assign to new users
`entra_domain`	text	yes		Primary email domain for Entra ID users
`entra_consent_granted_at`	timestamp with time zone	yes		Timestamp when admin consent was granted
`entra_consent_url`	text	yes		Temporary admin consent URL for granting permissions
`entra_provisioning_enabled`	boolean	yes	true	Whether to auto-provision Entra ID accounts on employee creation
`entra_grace_period_days`	integer	yes	30	Days to wait before deleting disabled Entra accounts
`entra_directory_sync_enabled`	boolean	yes	false
`entra_last_directory_sync_at`	timestamp with time zone	yes
`entra_directory_sync_fields`	text[]	yes	ARRAY[‘displayName’::text, ‘givenName’::text, ‘surname’::text, ‘jobTitle’::text, ‘department’::text]
`entra_teams_enabled`	boolean	yes	false
`entra_sharepoint_enabled`	boolean	yes	false
`entra_calendar_sync_enabled`	boolean	yes	false
`entra_field_mappings`	jsonb	no	’{“surname”: {“sync”: “bidirectional”, “autoApply”: true}, “jobTitle”: {“sync”: “to_entra_only”, “autoApply”: false}, “givenName”: {“sync”: “bidirectional”, “autoApply”: true}, “department”: {“sync”: “bidirectional”, “autoApply”: false}, “displayName”: {“sync”: “bidirectional”, “autoApply”: true}, “mobilePhone”: {“sync”: “from_entra_only”, “autoApply”: true}, “officeLocation”: {“sync”: “from_entra_only”, “autoApply”: true}}‘::jsonb
`entra_delta_link`	text	yes
`entra_teams_activity_enabled`	boolean	yes	false
`entra_teams_activity_priority`	text	yes	’high’::text
`ahcccs_contracted`	boolean	no	false	CL-04-EN-66: When true, org cannot set Policy 940 enforcement_mode to disabled (EN-66 FR-8). Set known AHCCCS contractors via data migration or admin.
`entra_secret_expires_at`	timestamp with time zone	yes		Optional: when the Entra ID client secret expires. Used to show a reminder banner within 30 days. Microsoft recommends rotating secrets before 12 months.
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp. NULL = active, non-NULL = soft deleted. Use pf_soft_delete_organization() function.
`subdomain`	text	yes		Custom subdomain for tenant access (e.g., myorg in myorg.app.encoreos.io).
`subdomain_verified`	boolean	no	false	Operator/admin confirms DNS and Vercel host mapping for subdomain; redirects require this to be true.
`prefer_subdomain_redirect`	boolean	no	false	When true, subdomain set, and subdomain_verified, apply canonical redirect to tenant subdomain host (PF-95 matrix; PF-74 implements).

Policies:

Org admins can update their organization (UPDATE)
Users with org access can view (SELECT)
pf_organizations_platform_admin_delete (DELETE)
pf_organizations_platform_admin_insert (INSERT)
pf_organizations_platform_admin_select (SELECT)
pf_organizations_platform_admin_update (UPDATE)

`pf_outbound_webhooks`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`integration_id`	uuid	yes
`name`	text	no
`url`	text	no
`auth_type`	text	yes	’none’::text
`auth_header_name`	text	yes
`auth_secret`	text	yes
`events`	text[]	no	’{}‘::text[]
`retry_count`	integer	yes	3
`timeout_ms`	integer	yes	30000
`is_active`	boolean	yes	true
`last_triggered_at`	timestamp with time zone	yes
`last_success_at`	timestamp with time zone	yes
`consecutive_failures`	integer	yes	0
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
integration_id → pf_integrations(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_outbound_webhooks_delete (DELETE)
pf_outbound_webhooks_insert (INSERT)
pf_outbound_webhooks_select (SELECT)
pf_outbound_webhooks_update (UPDATE)

`pf_page_layout_fields`

Field assignments within layout sections RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`section_id`	uuid	no
`field_name`	text	no
`display_order`	integer	no	0
`is_required`	boolean	yes	false
`is_readonly`	boolean	yes	false
`column_span`	integer	yes	1
`visibility_roles`	text[]	yes	’{}‘::text[]
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

section_id → pf_page_layout_sections(id)

Policies:

pf_page_layout_fields_delete (DELETE)
pf_page_layout_fields_insert (INSERT)
pf_page_layout_fields_select (SELECT)
pf_page_layout_fields_update (UPDATE)

`pf_page_layout_sections`

Sections within page layouts for grouping related fields RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`layout_id`	uuid	no
`section_name`	text	no
`display_order`	integer	no	0
`columns`	integer	no	2
`is_collapsible`	boolean	yes	true
`default_collapsed`	boolean	yes	false
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

layout_id → pf_page_layouts(id)

Policies:

pf_page_layout_sections_delete (DELETE)
pf_page_layout_sections_insert (INSERT)
pf_page_layout_sections_select (SELECT)
pf_page_layout_sections_update (UPDATE)

`pf_page_layout_templates`

PF-31 Phase 3: Reusable layout templates. NULL organization_id = platform-wide template. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`object_name`	text	no
`layout_type`	text	no	’detail’::text
`layout_snapshot`	jsonb	no	’{}‘::jsonb	JSONB snapshot of layout sections and fields for cloning
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_page_layout_templates_delete (DELETE)
pf_page_layout_templates_insert (INSERT)
pf_page_layout_templates_select (SELECT)
pf_page_layout_templates_update (UPDATE)

`pf_page_layout_versions`

PF-31: Append-only version history for page layouts; restore replaces current layout from snapshot. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`layout_id`	uuid	no
`version_number`	integer	no
`snapshot`	jsonb	no
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
layout_id → pf_page_layouts(id)
organization_id → pf_organizations(id)

Policies:

pf_page_layout_versions_delete (DELETE)
pf_page_layout_versions_insert (INSERT)
pf_page_layout_versions_select (SELECT)
pf_page_layout_versions_update (UPDATE)

`pf_page_layout_visibility_rules`

PF-31: Conditional visibility rules for layout fields; evaluated at render time. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`layout_id`	uuid	no
`section_id`	uuid	yes
`field_name`	text	no
`condition`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
layout_id → pf_page_layouts(id)
organization_id → pf_organizations(id)
section_id → pf_page_layout_sections(id)
updated_by → pf_profiles(id)

Policies:

pf_page_layout_visibility_rules_delete (DELETE)
pf_page_layout_visibility_rules_insert (INSERT)
pf_page_layout_visibility_rules_select (SELECT)
pf_page_layout_visibility_rules_update (UPDATE)

`pf_page_layout_wizards`

PF-31 Phase 3: Multi-step wizard definitions for guided record creation RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`object_name`	text	no
`wizard_name`	text	no
`description`	text	yes
`steps`	jsonb	no	’[]‘::jsonb	JSONB array of {id, title, description?, layout_id?, section_ids?[]}
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_page_layout_wizards_delete (DELETE)
pf_page_layout_wizards_insert (INSERT)
pf_page_layout_wizards_select (SELECT)
pf_page_layout_wizards_update (UPDATE)

`pf_page_layouts`

Page layout definitions for record detail/edit/create views RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`object_name`	text	no
`layout_name`	text	no
`description`	text	yes
`layout_type`	text	no	’detail’::text
`is_default`	boolean	yes	false
`configuration`	jsonb	no	’{}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_page_layouts_delete (DELETE)
pf_page_layouts_insert (INSERT)
pf_page_layouts_select (SELECT)
pf_page_layouts_update (UPDATE)

`pf_patient_identities`

PF: Central patient identity registry. MRN is unique per organization. Referenced by CL and PM cores. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`mrn`	text	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_patient_identities_delete (DELETE)
pf_patient_identities_insert (INSERT)
pf_patient_identities_select (SELECT)
pf_patient_identities_update (UPDATE)

`pf_payer_code_rules`

PF-70: Org-scoped payer code rules (prior auth, denied codes, modifier requirements). payer_id is a bare UUID — no FK to pm_payers per C-3 architecture decision. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`payer_id`	uuid	yes		UUID reference to pm_payers.id — no FK enforced to prevent PF→PM boundary violation (C-3).
`code_set`	text	no
`code`	text	no
`rule_type`	text	no
`rule_config`	jsonb	no	’{}‘::jsonb	Rule-specific payload (e.g., {“required_modifier”: “GT”, “pa_required”: true})
`effective_from`	date	no
`effective_to`	date	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Org-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_payer_code_rules_delete (DELETE)
pf_payer_code_rules_insert (INSERT)
pf_payer_code_rules_select (SELECT)
pf_payer_code_rules_update (UPDATE)

`pf_phi_classifications`

PF-91: PHI/PII/SUD column-level classification for compliance monitoring RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`table_name`	text	no
`column_name`	text	no
`classification`	text	no		Data sensitivity level: PHI, PII, SUD, PUBLIC, or UNKNOWN
`classification_source`	text	no
`confidence_score`	numeric(3,2)	yes		Auto-scan confidence 0.00-1.00; NULL for manual classifications
`is_verified`	boolean	no	false
`verified_by`	uuid	yes
`verified_at`	timestamp with time zone	yes
`notes`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“regulatory_note”: ”…”, “external_ref”: ”…”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)
verified_by → pf_profiles(id)

Policies:

pf_phi_classifications_delete (DELETE)
pf_phi_classifications_insert (INSERT)
pf_phi_classifications_select (SELECT)
pf_phi_classifications_update (UPDATE)

`pf_picklist_default_definitions`

PF-15: Platform-wide picklist definitions. Seeds new organizations via pf_seed_picklists_for_new_organization() and is the source of truth for pf_backfill_picklist_defaults_for_all_orgs(). System/config table — no organization_id. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`name`	text	no
`label`	text	no
`description`	text	yes
`category`	text	no
`is_system`	boolean	no	true
`is_active`	boolean	no	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Policies:

pf_picklist_default_definitions_delete (DELETE)
pf_picklist_default_definitions_insert (INSERT)
pf_picklist_default_definitions_select (SELECT)
pf_picklist_default_definitions_update (UPDATE)

`pf_picklist_default_items`

PF-15: Items for each pf_picklist_default_definitions row. Copied per-org into pf_picklist_items by the seed/backfill helpers. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`definition_id`	uuid	no
`value`	text	no
`label`	text	no
`display_order`	integer	no	0
`is_default`	boolean	no	false
`is_active`	boolean	no	true
`metadata`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

definition_id → pf_picklist_default_definitions(id)

Policies:

pf_picklist_default_items_delete (DELETE)
pf_picklist_default_items_insert (INSERT)
pf_picklist_default_items_select (SELECT)
pf_picklist_default_items_update (UPDATE)

`pf_picklist_items`

PF-15: Individual items/values within a picklist RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`picklist_id`	uuid	no
`value`	text	no		Stored value (e.g., “full_time”)
`label`	text	no		Display label (e.g., “Full-Time”)
`display_order`	integer	no		Sort order for display
`is_active`	boolean	yes	true
`is_default`	boolean	yes	false
`metadata`	jsonb	yes	’{}‘::jsonb	Additional metadata like color, icon, description
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

picklist_id → pf_picklists(id)

Policies:

pf_picklist_items_delete (DELETE)
pf_picklist_items_insert (INSERT)
pf_picklist_items_select (SELECT)
pf_picklist_items_update (UPDATE)

`pf_picklists`

PF-15: Organization-scoped picklist definitions for customizable dropdown values RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no		Unique identifier for programmatic access (e.g., “employment_status”)
`label`	text	no		Human-readable display name
`description`	text	yes
`category`	text	yes		Module category for organization (hr, fa, rh, gr, fw, fm, platform, general)
`is_system`	boolean	yes	false	System picklists cannot be deleted, only items can be added
`is_active`	boolean	yes	true
`version`	integer	yes	1	Version number for tracking changes
`metadata`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_picklists_delete (DELETE)
pf_picklists_insert (INSERT)
pf_picklists_select (SELECT)
pf_picklists_update (UPDATE)

`pf_portal_credentials`

PF-119: maps a flow to its bot-identity credential HANDLE in pf_credential_vault (PF-75/76). Stores no secret material; read restricted to org_admin. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`flow_id`	uuid	no
`credential_vault_id`	uuid	yes
`bot_identity_label`	text	no
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

credential_vault_id → pf_credential_vault(id)
flow_id → pf_portal_flows(id)
organization_id → pf_organizations(id)

Policies:

pf_portal_credentials_delete (DELETE)
pf_portal_credentials_insert (INSERT)
pf_portal_credentials_select (SELECT)
pf_portal_credentials_update (UPDATE)

`pf_portal_definitions`

PF-119: a known external web portal + its Terms-of-Service gate (unreviewed/approved/prohibited). A flow cannot be automated until its portal is approved AND the tenant acknowledges the ToS. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`slug`	text	no
`display_name`	text	no
`base_url`	text	yes
`terms_of_service_status`	text	no	’unreviewed’::text
`tos_reviewed_at`	timestamp with time zone	yes
`tos_reviewed_by`	uuid	yes
`tos_review_notes`	text	yes
`has_official_api`	boolean	no	false
`official_api_notes`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_portal_definitions_delete (DELETE)
pf_portal_definitions_insert (INSERT)
pf_portal_definitions_select (SELECT)
pf_portal_definitions_update (UPDATE)

`pf_portal_flows`

PF-119: an org-scoped portal automation flow (flow_kind=template platform-authored, or recorded tenant-authored). step_graph is the canonical worker-executable definition. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`portal_id`	uuid	no
`flow_name`	text	no
`flow_kind`	text	no	’template’::text
`version`	integer	no	1
`step_graph`	jsonb	no	’{“steps”: []}‘::jsonb
`input_schema`	jsonb	no	’{}‘::jsonb
`enabled`	boolean	no	false
`source_template_ref`	text	yes
`source_template_version`	text	yes
`tos_acknowledged_at`	timestamp with time zone	yes
`tos_acknowledged_by`	uuid	yes
`last_run_at`	timestamp with time zone	yes
`last_run_status`	text	yes
`consecutive_failure_count`	integer	no	0
`failure_alert_threshold`	integer	no	3
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

organization_id → pf_organizations(id)
portal_id → pf_portal_definitions(id)

Policies:

pf_portal_flows_delete (DELETE)
pf_portal_flows_insert (INSERT)
pf_portal_flows_select (SELECT)
pf_portal_flows_update (UPDATE)

`pf_portal_run_steps`

PF-119: per-step audit trail for a run (intent, locator, outcome, screenshot + DOM-snapshot refs, heal from/to locator). RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`run_id`	uuid	no
`step_index`	integer	no
`step_intent`	text	yes
`locator_used`	text	yes
`outcome`	text	no	’ok’::text
`screenshot_path`	text	yes
`dom_snapshot_path`	text	yes
`heal_from_locator`	text	yes
`heal_to_locator`	text	yes
`duration_ms`	integer	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

organization_id → pf_organizations(id)
run_id → pf_portal_runs(id)

Policies:

pf_portal_run_steps_delete (DELETE)
pf_portal_run_steps_insert (INSERT)
pf_portal_run_steps_select (SELECT)
pf_portal_run_steps_update (UPDATE)

`pf_portal_runs`

PF-119: one portal-bot execution — status, PHI-redacted input snapshot, extracted result, heal events. Immutable audit trail with pf_portal_run_steps children. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`flow_id`	uuid	no
`schedule_id`	uuid	yes
`status`	text	no	’queued’::text
`trigger_source`	text	no	’manual’::text
`consumer_core`	text	yes
`consumer_ref`	text	yes
`input_snapshot`	jsonb	no	’{}‘::jsonb
`result`	jsonb	yes
`heal_events`	jsonb	no	’[]‘::jsonb
`error_code`	text	yes
`error_detail`	text	yes
`attempt`	integer	no	1
`fw_execution_id`	uuid	yes
`started_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

flow_id → pf_portal_flows(id)
organization_id → pf_organizations(id)
schedule_id → pf_portal_schedules(id)

Policies:

pf_portal_runs_delete (DELETE)
pf_portal_runs_insert (INSERT)
pf_portal_runs_select (SELECT)
pf_portal_runs_update (UPDATE)

`pf_portal_schedules`

PF-119: schedule rows feeding pf_portal_enqueue_due_runs() (pg_cron -> pgmq workflow_execution_queue, FW-46). RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`flow_id`	uuid	no
`schedule_kind`	text	no	’cron’::text
`cron_expression`	text	yes
`run_at`	timestamp with time zone	yes
`recurrence_interval`	interval	yes
`timezone`	text	no	’America/Phoenix’::text
`blackout_windows`	jsonb	no	’[]‘::jsonb
`next_run_at`	timestamp with time zone	yes
`last_enqueued_at`	timestamp with time zone	yes
`enabled`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

flow_id → pf_portal_flows(id)
organization_id → pf_organizations(id)

Policies:

pf_portal_schedules_delete (DELETE)
pf_portal_schedules_insert (INSERT)
pf_portal_schedules_select (SELECT)
pf_portal_schedules_update (UPDATE)

`pf_process_execution_snapshots`

PF-82: Daily snapshot of process health metrics for trend analysis. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`process_id`	uuid	no
`snapshot_date`	date	no	CURRENT_DATE
`health_score`	numeric(5,2)	yes
`execution_count`	integer	yes	0
`success_count`	integer	yes	0
`failure_count`	integer	yes	0
`dlq_count`	integer	yes	0
`avg_duration_seconds`	integer	yes
`p95_duration_seconds`	integer	yes
`sla_compliant_count`	integer	yes	0
`sla_total_count`	integer	yes	0
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
process_id → pf_business_processes(id)

Policies:

pf_process_snapshots_select (SELECT)

`pf_profiles`

RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no
`email`	text	no
`full_name`	text	yes
`avatar_url`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`preferences`	jsonb	yes	’{“theme”: “system”, “locale”: “en”, “timezone”: “UTC”, “notifications”: {“email”: true, “in_app”: true}}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific user metadata (e.g., {“employee_number”: “EMP-1234”, “building_access”: [“A”, “B”], “emergency_contact_verified”: true, “badge_number”: “12345”}). Separate from preferences which are app-level settings.
`email_verified`	boolean	yes	false
`email_verified_at`	timestamp with time zone	yes
`phone_number`	text	yes		E.164 format phone number for SMS notifications
`phone_verified`	boolean	yes	false
`phone_verified_at`	timestamp with time zone	yes
`sms_opt_in`	boolean	yes	false	User consent for receiving SMS notifications
`portal_patient_id`	uuid	yes		PM-12: Links Supabase Auth user to pm_patients for portal access. NULL for non-portal (staff) users.
`default_organization_id`	uuid	yes		User preferred default organization. Used on login to auto-select org context.
`first_name`	text	yes		First/given name extracted from user metadata or bulk import
`last_name`	text	yes		Last/family name extracted from user metadata or bulk import
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp. NULL = active, non-NULL = soft deleted. Use pf_soft_delete_profile() function.

Foreign keys:

default_organization_id → pf_organizations(id)
id → users(id)
portal_patient_id → pm_patients(id)

Policies:

Users can update own profile (UPDATE)
Users can view own profile (SELECT)
Users can view profiles in same organization (SELECT)
Users can view profiles of employees in same org (SELECT)
pf_profiles_same_org_select (SELECT)

`pf_provisioning_requests`

PF-50: Tenant provisioning requests. Tracks request details before and after org creation. Platform admin only. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`organization_name`	text	no
`slug`	text	no		URL-safe org identifier; validated per PF-50 slug rules (3-50 chars, lowercase alphanumeric + hyphens)
`admin_email`	text	no		PII: Email of the initial admin user to be created
`admin_name`	text	no		PII: Display name of the initial admin user
`template_id`	uuid	yes
`status`	text	no	’pending’::text
`progress_percent`	integer	yes	0
`error_message`	text	yes
`requested_by`	uuid	yes
`requested_at`	timestamp with time zone	no	now()
`completed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata. Must not contain secret keys (password, api_key, secret).

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
requested_by → pf_profiles(id)
template_id → pf_provisioning_templates(id)
updated_by → pf_profiles(id)

Policies:

pf_provisioning_requests_delete (DELETE)
pf_provisioning_requests_insert (INSERT)
pf_provisioning_requests_select (SELECT)
pf_provisioning_requests_update (UPDATE)

`pf_provisioning_steps`

PF-50: Step-level progress for each provisioning request. Enables real-time UI and debugging. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`provisioning_request_id`	uuid	no
`step_key`	text	no
`step_order`	integer	no
`status`	text	no	’pending’::text
`started_at`	timestamp with time zone	yes
`completed_at`	timestamp with time zone	yes
`error_message`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

provisioning_request_id → pf_provisioning_requests(id)

Policies:

pf_provisioning_steps_delete (DELETE)
pf_provisioning_steps_insert (INSERT)
pf_provisioning_steps_select (SELECT)
pf_provisioning_steps_update (UPDATE)

`pf_provisioning_template_assignments`

PF-50-EN-01: Records each state-aware template application to an organization with audit metadata. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	no
`template_version`	text	no
`jurisdiction_code`	text	no
`profile_id`	text	no
`transaction_id`	uuid	no	gen_random_uuid()
`status`	text	no	’applied’::text
`applied_by`	uuid	yes
`applied_at`	timestamp with time zone	no	now()
`rollback_reason`	text	yes
`rollback_by`	uuid	yes
`rollback_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for extensibility.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

applied_by → pf_profiles(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
rollback_by → pf_profiles(id)
template_id → pf_provisioning_templates(id)
updated_by → pf_profiles(id)

Policies:

pf_provisioning_template_assignments_delete (DELETE)
pf_provisioning_template_assignments_insert (INSERT)
pf_provisioning_template_assignments_select (SELECT)
pf_provisioning_template_assignments_update (UPDATE)

`pf_provisioning_template_bundles`

PF-50-EN-01: Links provisioning templates to jurisdiction profiles, seed bundles, and baseline settings. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`template_id`	uuid	no
`jurisdiction_profile_id`	text	no
`seed_bundle_keys`	jsonb	no	’[]‘::jsonb
`baseline_settings`	jsonb	no	’{}‘::jsonb
`settings_schema_version`	text	no	’1.0.0’::text
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for extensibility.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
template_id → pf_provisioning_templates(id)
updated_by → pf_profiles(id)

Policies:

pf_provisioning_template_bundles_delete (DELETE)
pf_provisioning_template_bundles_insert (INSERT)
pf_provisioning_template_bundles_select (SELECT)
pf_provisioning_template_bundles_update (UPDATE)

`pf_provisioning_templates`

PF-50: Platform-level provisioning templates for tenant setup. Not org-scoped; managed by platform admins only. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`name`	text	no
`description`	text	yes
`template_config`	jsonb	no	’{}‘::jsonb	JSON config: modules[], settings{}, default_sites[], default_departments[], onboarding_steps[]
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`jurisdiction_code`	text	yes		Maps to PF-96 jurisdiction profile key; NULL for generic templates.
`version`	text	no	’1.0.0’::text	Semantic version of the template (e.g. 1.0.0).
`status`	text	no	’active’::text	Template lifecycle status: draft, active, deprecated, archived.

Foreign keys:

created_by → pf_profiles(id)
updated_by → pf_profiles(id)

Policies:

pf_provisioning_templates_delete (DELETE)
pf_provisioning_templates_insert (INSERT)
pf_provisioning_templates_select (SELECT)
pf_provisioning_templates_update (UPDATE)

`pf_push_subscriptions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`endpoint`	text	no
`p256dh_key`	text	no
`auth_key`	text	no
`user_agent`	text	yes
`created_at`	timestamp with time zone	yes	now()
`last_used_at`	timestamp with time zone	yes
`organization_id`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`updated_at`	timestamp with time zone	yes	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)
user_id → pf_profiles(id)

Policies:

pf_push_subscriptions_delete (DELETE)
pf_push_subscriptions_insert (INSERT)
pf_push_subscriptions_select (SELECT)
pf_push_subscriptions_update (UPDATE)

`pf_query_performance_logs`

PF-52: Append-only log of query performance metrics. Stores only redacted query text (never raw SQL). Platform admins only. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`redacted_query_text`	text	no		SQL query text after PII/PHI redaction. Raw text is never stored.
`query_fingerprint`	text	no		MD5 hash of redacted query text for grouping identical queries.
`query_type`	text	yes
`execution_time_ms`	integer	no
`rows_returned`	integer	yes
`module`	text	yes
`user_id`	uuid	yes
`is_slow`	boolean	no	false
`slow_threshold_ms`	integer	yes	1000
`executed_at`	timestamp with time zone	no	now()
`created_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb	Additional metadata (e.g. query_plan, indexes_used).

Foreign keys:

organization_id → pf_organizations(id)
user_id → users(id)

Policies:

pf_query_performance_logs_insert (INSERT)
pf_query_performance_logs_select (SELECT)

`pf_quick_action_catalog`

PF: Optional DB-backed quick action metadata. Seeded from MODULE_REGISTRY by PF-99 (migration 20260418021116). Source of truth remains src/platform/modules/module-registry/*.ts; re-run scripts/dev/print-quick-action-catalog-seed.ts and add a follow-up migration after registry edits. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`action_key`	text	no
`module_id`	text	no
`label`	text	no
`description`	text	yes
`route`	text	no
`action_type`	text	no	’navigation’::text
`permission_key`	text	yes
`icon_name`	text	yes
`scope_default`	text	no	’module’::text
`is_active`	boolean	no	true
`sort_weight`	integer	no	0
`tags`	text[]	no	’{}‘::text[]
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Policies:

pf_quick_action_catalog_select (SELECT)

`pf_quota_violations`

PF-43: Quota violation log (append-only for audit) RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`quota_id`	uuid	no
`resource_type`	text	no
`limit_type`	text	no
`quota_value`	numeric(15,2)	no
`actual_usage`	numeric(15,2)	no
`violation_count`	integer	no	1
`violated_at`	timestamp with time zone	no	now()
`user_id`	uuid	yes
`operation_type`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Additional violation metadata

Foreign keys:

organization_id → pf_organizations(id)
quota_id → pf_resource_quotas(id)
user_id → pf_profiles(id)

Policies:

pf_quota_violations_insert (INSERT)
pf_quota_violations_select (SELECT)

`pf_rate_limit_buckets`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`bucket_key`	text	no
`created_at`	timestamp with time zone	no	now()

Policies:

pf_rate_limit_buckets_deny_delete (DELETE)
pf_rate_limit_buckets_deny_insert (INSERT)
pf_rate_limit_buckets_deny_select (SELECT)
pf_rate_limit_buckets_deny_update (UPDATE)

`pf_rate_limit_state`

PF-42: Rate limit state tracking. Stores current usage counters per rate limit configuration. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`rate_limit_id`	uuid	no
`organization_id`	uuid	no
`scope_identifier`	text	yes
`current_count`	integer	no	0
`window_start`	timestamp with time zone	no	now()
`tokens_available`	integer	yes
`last_refill_at`	timestamp with time zone	yes
`last_accessed_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
rate_limit_id → pf_rate_limits(id)

Policies:

pf_rate_limit_state_select (SELECT)

`pf_rate_limit_violations`

PF-42: Rate limit violation log. Tracks all rate limit violations for audit and alerting. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rate_limit_id`	uuid	no
`user_id`	uuid	yes
`ip_address`	text	yes		Client IP address as TEXT (not INET) for edge function compatibility
`endpoint`	text	yes
`limit_type`	text	no
`limit_value`	integer	no
`actual_count`	integer	no
`violation_count`	integer	no	1
`violated_at`	timestamp with time zone	no	now()
`user_agent`	text	yes
`request_path`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Additional metadata about the violation (e.g., {“source”: “api”, “module”: “hr”})

Foreign keys:

organization_id → pf_organizations(id)
rate_limit_id → pf_rate_limits(id)
user_id → users(id)

Policies:

pf_rate_limit_violations_select (SELECT)

`pf_rate_limits`

PF-42: Rate limit configuration. Defines rate limits by scope (global/organization/endpoint), algorithm, and apply_to target. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`scope`	text	no
`endpoint`	text	yes
`limit_type`	text	no
`limit_value`	integer	no
`algorithm`	text	no	’token_bucket’::text
`burst_size`	integer	yes
`apply_to`	text	no	’organization’::text
`is_active`	boolean	no	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_rate_limits_delete (DELETE)
pf_rate_limits_insert (INSERT)
pf_rate_limits_select (SELECT)
pf_rate_limits_update (UPDATE)

`pf_recording_consents`

PF-100/PF-96-EN-RECORDING: Jurisdiction-aware recording consent records. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	yes
`patient_id`	uuid	yes
`participant_id`	uuid	yes
`consent_type`	text	no
`consent_status`	text	no
`jurisdiction_code`	text	no
`consent_model`	text	no
`disclosure_text`	text	no
`consent_method`	text	no
`consent_evidence_uri`	text	yes
`granted_at`	timestamp with time zone	yes
`revoked_at`	timestamp with time zone	yes
`expires_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
participant_id → pf_transcription_session_participants(id)
session_id → pf_transcription_sessions(id)
updated_by → pf_profiles(id)

Policies:

recording_consents_delete (DELETE)
recording_consents_insert (INSERT)
recording_consents_select (SELECT)
recording_consents_update (UPDATE)

`pf_report_executions`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`report_id`	uuid	no
`executed_by`	uuid	yes
`executed_at`	timestamp with time zone	no	now()
`params`	jsonb	yes	’{}‘::jsonb
`row_count`	integer	yes
`execution_time_ms`	integer	yes
`result_cache_key`	text	yes
`result_expires_at`	timestamp with time zone	yes
`exported_format`	report_format	yes
`exported_file_path`	text	yes
`status`	text	no	’running’::text
`error_message`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

executed_by → pf_profiles(id)
report_id → pf_reports(id)

Policies:

Users can create report executions (INSERT)
Users can view own executions (SELECT)

`pf_report_permissions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`report_id`	uuid	no
`user_id`	uuid	yes
`role`	app_role	yes
`can_view`	boolean	yes	false
`can_run`	boolean	yes	false
`can_edit`	boolean	yes	false
`can_schedule`	boolean	yes	false
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

report_id → pf_reports(id)
user_id → pf_profiles(id)

Policies:

pf_report_permissions_delete (DELETE)
pf_report_permissions_insert (INSERT)
pf_report_permissions_select (SELECT)
pf_report_permissions_update (UPDATE)

`pf_report_runs`

PF-12: Tracks each execution of a scheduled report for auditing and debugging RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`schedule_id`	uuid	no
`organization_id`	uuid	no
`status`	text	no	’running’::text
`started_at`	timestamp with time zone	no	now()
`completed_at`	timestamp with time zone	yes
`execution_time_ms`	integer	yes
`row_count`	integer	yes
`file_path`	text	yes
`file_size_bytes`	bigint	yes
`recipients_count`	integer	no	0
`delivered_count`	integer	no	0
`failed_count`	integer	no	0
`error_message`	text	yes
`error_details`	jsonb	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

organization_id → pf_organizations(id)
schedule_id → pf_report_schedules(id)

Policies:

pf_report_runs_insert (INSERT)
pf_report_runs_select (SELECT)
pf_report_runs_update (UPDATE)

`pf_report_schedules`

Automated report scheduling and delivery configuration RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`report_id`	uuid	no
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`schedule_type`	text	no
`cron_expression`	text	yes		Cron expression for custom schedules (e.g., 0 8 * * 1 for Monday 8am)
`day_of_week`	integer	yes
`day_of_month`	integer	yes
`run_time`	time without time zone	no	’08:00:00’::time without time zone
`timezone`	text	no	’America/New_York’::text
`recipients`	jsonb	no	’[]‘::jsonb	Array of recipient objects: [{email: string, name: string}]
`output_format`	text	no	’pdf’::text
`include_summary`	boolean	yes	true
`enabled`	boolean	no	true
`next_run_at`	timestamp with time zone	yes
`last_run_at`	timestamp with time zone	yes
`last_run_status`	text	yes
`last_run_error`	text	yes
`run_count`	integer	no	0
`created_by`	uuid	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
report_id → pf_reports(id)
updated_by → users(id)

Policies:

schedule_delete (DELETE)
schedule_insert (INSERT)
schedule_select (SELECT)
schedule_update (UPDATE)

`pf_reports`

RLS: ✅ enabled (6 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`site_id`	uuid	yes
`name`	text	no
`description`	text	yes
`category`	report_category	no
`query_sql`	text	no
`query_params`	jsonb	yes	’{}‘::jsonb
`columns`	jsonb	no
`default_format`	report_format	yes	’csv’::report_format
`is_scheduled`	boolean	yes	false
`schedule_cron`	text	yes
`schedule_enabled`	boolean	yes	false
`schedule_recipients`	text[]	yes
`is_public`	boolean	yes	false
`created_by`	uuid	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific report metadata (e.g., department, regulatory codes, owner contact)
`updated_by`	uuid	yes		User who last updated this record

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
updated_by → users(id)

Policies:

Users can update own reports (UPDATE)
Users can view permitted reports (SELECT)
pf_reports_delete (DELETE)
pf_reports_insert (INSERT)
pf_reports_select (SELECT)
pf_reports_update (UPDATE)

`pf_resource_quotas`

PF-43: Per-organization resource quota configuration RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`resource_type`	text	no
`soft_limit`	numeric(15,2)	no
`hard_limit`	numeric(15,2)	no
`grace_period_hours`	integer	yes	24
`unit`	text	no
`scope`	text	no	’organization’::text
`reset_period`	text	no	’none’::text
`is_active`	boolean	no	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_resource_quotas_delete (DELETE)
pf_resource_quotas_insert (INSERT)
pf_resource_quotas_select (SELECT)
pf_resource_quotas_update (UPDATE)

`pf_resource_usage`

PF-43: Resource usage tracking (realtime + aggregated) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`resource_type`	text	no
`current_value`	numeric(15,2)	no	0
`aggregation_period`	text	no	’realtime’::text
`period_start`	timestamp with time zone	yes
`period_end`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_resource_usage_delete (DELETE)
pf_resource_usage_insert (INSERT)
pf_resource_usage_select (SELECT)
pf_resource_usage_update (UPDATE)

`pf_retention_log`

PF-18: Audit trail for data lineage retention/archival jobs RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`batch_id`	uuid	no
`table_name`	text	no
`archived_count`	integer	no	0
`deleted_count`	integer	no	0
`archive_threshold`	timestamp with time zone	no
`delete_threshold`	timestamp with time zone	no
`executed_at`	timestamp with time zone	no	now()
`executed_by`	text	yes	CURRENT_USER

Policies:

pf_retention_log_select (SELECT)

`pf_retention_policies`

PF-46: Data retention policies defining how long entities are kept before archival or deletion RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`entity_type`	text	no
`retention_period_days`	integer	no
`action`	text	no
`scope`	text	no	’global’::text
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for retention policy customization
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_retention_policies_delete (DELETE)
pf_retention_policies_insert (INSERT)
pf_retention_policies_select (SELECT)
pf_retention_policies_update (UPDATE)

`pf_role_permissions`

Maps permissions to roles (custom or system) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`role_id`	uuid	yes
`system_role`	app_role	yes
`permission_id`	uuid	no
`granted`	boolean	yes	true
`organization_id`	uuid	yes		For system roles only: allows org-specific permission overrides. Null = global default.
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
permission_id → pf_module_permissions(id)
role_id → pf_custom_roles(id)
updated_by → users(id)

Policies:

pf_role_permissions_delete (DELETE)
pf_role_permissions_insert (INSERT)
pf_role_permissions_select (SELECT)
pf_role_permissions_update (UPDATE)

`pf_scheduled_messages`

PF-67: Messages scheduled for future delivery RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`conversation_id`	uuid	no
`sender_id`	uuid	no
`organization_id`	uuid	no
`content`	text	no
`content_type`	text	no	’text’::text
`file_url`	text	yes
`file_name`	text	yes
`file_size`	bigint	yes
`file_mime_type`	text	yes
`parent_message_id`	uuid	yes
`metadata`	jsonb	no	’{}‘::jsonb
`scheduled_at`	timestamp with time zone	no
`status`	text	no	’pending’::text
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

conversation_id → pf_conversations(id)
organization_id → pf_organizations(id)
parent_message_id → pf_messages(id)
sender_id → users(id)

Policies:

pf_scheduled_messages_delete (DELETE)
pf_scheduled_messages_insert (INSERT)
pf_scheduled_messages_select (SELECT)
pf_scheduled_messages_service (ALL)
pf_scheduled_messages_update (UPDATE)

`pf_security_alert_configs`

RLS: ✅ enabled (9 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`alert_name`	text	no
`description`	text	yes
`event_type`	text	no
`severity`	text	no	’warning’::text
`scope`	text	no	’organization’::text
`threshold_type`	text	no	’immediate’::text
`threshold_value`	integer	yes	1
`threshold_window_minutes`	integer	yes	60
`channels`	text[]	no	ARRAY[‘email’::text, ‘in_app’::text]
`is_active`	boolean	no	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_security_alert_configs_delete (DELETE)
pf_security_alert_configs_insert (INSERT)
pf_security_alert_configs_org_admin_delete (DELETE)
pf_security_alert_configs_org_admin_insert (INSERT)
pf_security_alert_configs_org_admin_select (SELECT)
pf_security_alert_configs_org_admin_update (UPDATE)
pf_security_alert_configs_platform_admin_all (ALL)
pf_security_alert_configs_select (SELECT)
pf_security_alert_configs_update (UPDATE)

`pf_security_alert_delivery_failures`

PF-48: Dead-letter store for security alert delivery failures. Append-only for audit compliance. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`event_id`	uuid	no
`alert_config_id`	uuid	yes
`error_category`	text	no	’unknown’::text
`error_message`	text	yes
`attempts`	integer	no	0
`last_attempt_at`	timestamp with time zone	no	now()
`resolved_at`	timestamp with time zone	yes
`resolved_by`	uuid	yes
`created_at`	timestamp with time zone	no	now()

Foreign keys:

alert_config_id → pf_security_alert_configs(id)
event_id → pf_security_events(id)
organization_id → pf_organizations(id)
resolved_by → pf_profiles(id)

Policies:

pf_security_alert_delivery_failures_org_admin_select (SELECT)
pf_security_alert_delivery_failures_platform_admin_select (SELECT)

`pf_security_events`

RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`user_id`	uuid	yes
`event_type`	text	no
`severity`	text	no	’info’::text
`ip_address`	inet	yes
`user_agent`	text	yes
`resource`	text	yes
`action`	text	yes
`event_data`	jsonb	no	’{}‘::jsonb
`failure_reason`	text	yes
`is_suspicious`	boolean	no	false
`pattern_type`	text	yes
`occurred_at`	timestamp with time zone	no	now()
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
user_id → pf_profiles(id)

Policies:

pf_security_events_org_admin_select (SELECT)
pf_security_events_own_select (SELECT)
pf_security_events_platform_admin_select (SELECT)

`pf_service_accounts`

PF-97: Machine identity for API access — each service account owns zero or more API keys RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`status`	text	no	’active’::text
`metadata`	jsonb	no	’{}‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“team”: “integrations”, “vendor”: “acme”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp. NULL = active, non-NULL = soft deleted.

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_service_accounts_delete (DELETE)
pf_service_accounts_insert (INSERT)
pf_service_accounts_select (SELECT)
pf_service_accounts_update (UPDATE)

`pf_settings_audit`

Audit log for module settings changes. INSERT only via trigger functions. Immutable by design. Exempt from custom_fields requirement as per audit log exemption in database guidelines. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`core`	text	no		Module prefix: pf, rh, hr, fa, fw, gr, fm, lo
`setting_name`	text	no		Column name that was changed
`old_value`	jsonb	yes		Previous value as JSONB
`new_value`	jsonb	yes		New value as JSONB
`changed_by`	uuid	yes
`changed_at`	timestamp with time zone	no	now()
`change_reason`	text	yes
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

changed_by → pf_profiles(id)
organization_id → pf_organizations(id)

Policies:

No direct delete on settings audit (DELETE)
No direct insert on settings audit (INSERT)
No direct update on settings audit (UPDATE)
Org admins can view settings audit logs (SELECT)

`pf_signature_requests`

Tracks signature request lifecycle for document signing workflows RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`document_type`	text	no
`document_id`	uuid	no
`document_title`	text	no
`document_hash`	text	yes		SHA-256 hash for document integrity verification
`requested_by`	uuid	no
`requested_at`	timestamp with time zone	no	now()
`signer_user_id`	uuid	yes
`signer_email`	text	no
`signer_name`	text	no
`message`	text	yes
`expires_at`	timestamp with time zone	no
`signing_token`	text	no		DEPRECATED: Use signing_token_hash instead. This plaintext token will be removed in a future migration.
`callback_url`	text	yes
`status`	text	no	’pending’::text	Request status: draft, pending, signed, expired, revoked
`signed_at`	timestamp with time zone	yes
`signature_id`	uuid	yes
`revoked_at`	timestamp with time zone	yes
`revoked_by`	uuid	yes
`revocation_reason`	text	yes
`last_reminder_at`	timestamp with time zone	yes
`reminder_count`	integer	yes	0
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`signing_token_hash`	text	yes		HMAC-SHA256 hash of signing token. Used for secure token verification without storing plaintext.
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
requested_by → pf_profiles(id)
revoked_by → pf_profiles(id)
signature_id → pf_signatures(id)
signer_user_id → pf_profiles(id)
updated_by → pf_profiles(id)

Policies:

pf_signature_requests_delete (DELETE)
pf_signature_requests_insert (INSERT)
pf_signature_requests_select (SELECT)
pf_signature_requests_update (UPDATE)

`pf_signatures`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`document_type`	text	no
`document_id`	uuid	no
`signer_user_id`	uuid	yes
`signer_name`	text	no
`signer_email`	text	yes
`signature_data`	text	no
`signature_type`	text	no	’drawn’::text
`ip_address`	inet	yes
`user_agent`	text	yes
`signed_at`	timestamp with time zone	no	now()
`status`	text	no	’valid’::text
`audit_hash`	text	no
`custom_fields`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
signer_user_id → pf_profiles(id)
updated_by → pf_profiles(id)

Policies:

pf_signatures_delete (DELETE)
pf_signatures_insert (INSERT)
pf_signatures_select (SELECT)
pf_signatures_update (UPDATE)

`pf_site_jurisdiction_config`

PF-96: Site-level jurisdiction profile override for multi-state organizations. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`site_id`	uuid	no
`organization_id`	uuid	no
`jurisdiction_profile_id`	uuid	no
`clinical_overrides`	jsonb	yes	’{}‘::jsonb
`billing_overrides`	jsonb	yes	’{}‘::jsonb
`compliance_overrides`	jsonb	yes	’{}‘::jsonb
`effective_date`	date	no	CURRENT_DATE
`notes`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
jurisdiction_profile_id → pf_jurisdiction_profiles(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

pf_site_jurisdiction_config_delete (DELETE)
pf_site_jurisdiction_config_insert (INSERT)
pf_site_jurisdiction_config_select (SELECT)
pf_site_jurisdiction_config_update (UPDATE)

`pf_sites`

RLS: ✅ enabled (9 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`slug`	text	no
`address`	text	yes		DEPRECATED: Use address_line_1, city, state, zip_code instead. Will be removed in future release.
`settings`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	yes	’{}‘::jsonb
`timezone`	text	yes
`address_line_1`	text	yes
`address_line_2`	text	yes
`city`	text	yes
`state`	text	yes
`zip_code`	text	yes
`country`	text	yes	’US’::text
`tax_jurisdiction`	text	yes
`phone`	text	yes
`is_active`	boolean	yes	true

Foreign keys:

organization_id → pf_organizations(id)

Policies:

Users with org access can view sites (SELECT)
pf_sites_org_admin_delete (DELETE)
pf_sites_org_admin_insert (INSERT)
pf_sites_org_admin_select (SELECT)
pf_sites_org_admin_update (UPDATE)
pf_sites_platform_admin_delete (DELETE)
pf_sites_platform_admin_insert (INSERT)
pf_sites_platform_admin_select (SELECT)
pf_sites_platform_admin_update (UPDATE)

`pf_sla_definitions`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`sla_type`	text	no	’custom’::text
`owning_core`	text	yes
`trigger_event`	text	no
`completion_event`	text	no
`entity_match_config`	jsonb	no	’{“trigger_field”: “entity_id”, “completion_field”: “entity_id”}‘::jsonb
`duration_value`	integer	no
`duration_unit`	text	no
`use_business_hours`	boolean	no	true
`calendar_id`	uuid	yes
`priority_overrides`	jsonb	yes	’{}‘::jsonb
`priority_field`	text	yes
`warning_thresholds`	jsonb	no	’[50, 80]‘::jsonb
`escalation_config`	jsonb	no	’{}‘::jsonb
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

calendar_id → fw_business_calendars(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_sla_definitions_delete (DELETE)
pf_sla_definitions_insert (INSERT)
pf_sla_definitions_select (SELECT)
pf_sla_definitions_update (UPDATE)

`pf_sla_instances`

RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`definition_id`	uuid	no
`target_entity_type`	text	no
`target_entity_id`	uuid	no
`status`	text	no	’active’::text
`started_at`	timestamp with time zone	no	now()
`deadline_at`	timestamp with time zone	no
`completed_at`	timestamp with time zone	yes
`breached_at`	timestamp with time zone	yes
`paused_at`	timestamp with time zone	yes
`paused_duration_seconds`	integer	yes	0
`pause_reason`	text	yes
`warnings_sent`	jsonb	yes	’[]‘::jsonb
`elapsed_seconds`	integer	yes
`remaining_seconds`	integer	yes
`percentage_elapsed`	numeric(5,2)	yes
`correlation_id`	uuid	yes
`trigger_payload`	jsonb	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
definition_id → pf_sla_definitions(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_sla_instances_insert (INSERT)
pf_sla_instances_select (SELECT)
pf_sla_instances_update (UPDATE)

`pf_sla_thresholds`

PF-36 Phase 2: SLA threshold configurations for custom metrics RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`metric_id`	uuid	no
`organization_id`	uuid	no
`threshold_name`	text	no
`threshold_type`	text	no
`threshold_value`	numeric	no
`threshold_value_max`	numeric	yes
`severity`	text	no
`evaluation_window`	text	no	’1h’::text
`aggregation_method`	text	yes	’avg’::text
`alert_enabled`	boolean	yes	true
`alert_recipients`	jsonb	yes	’[]‘::jsonb	Array of {email?, name?, user_id?}. user_id routes to PF-10 in-app notification; email routes to email delivery.
`alert_cooldown_minutes`	integer	yes	15
`is_active`	boolean	yes	true
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
metric_id → pf_custom_metrics(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_sla_thresholds_delete (DELETE)
pf_sla_thresholds_insert (INSERT)
pf_sla_thresholds_select (SELECT)
pf_sla_thresholds_update (UPDATE)

`pf_sla_violations`

PF-36 Phase 2: Tracks SLA threshold violations. INSERT/UPDATE restricted to service role. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`threshold_id`	uuid	no
`metric_id`	uuid	no
`organization_id`	uuid	no
`threshold_name`	text	no
`severity`	text	no
`metric_value`	numeric	no
`threshold_value`	numeric	no
`violation_percentage`	numeric	yes
`status`	text	no	’active’::text
`resolved_at`	timestamp with time zone	yes
`acknowledged_at`	timestamp with time zone	yes
`acknowledged_by`	uuid	yes
`detected_at`	timestamp with time zone	no	now()
`last_alerted_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

acknowledged_by → users(id)
metric_id → pf_custom_metrics(id)
organization_id → pf_organizations(id)
threshold_id → pf_sla_thresholds(id)

Policies:

pf_sla_violations_acknowledge (UPDATE)
pf_sla_violations_select (SELECT)

`pf_sso_domain_claims`

PF-112: email-domain ownership verification (DNS TXT) gating SSO provider activation. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`domain`	text	no
`verification_token`	text	no
`verified_at`	timestamp with time zone	yes
`status`	text	no	’pending’::text
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

organization_id → pf_organizations(id)

Policies:

pf_sso_domain_claims_delete (DELETE)
pf_sso_domain_claims_insert (INSERT)
pf_sso_domain_claims_select (SELECT)
pf_sso_domain_claims_update (UPDATE)

`pf_swim_lane_diagram_versions`

PF-73 Phase 2: Immutable version snapshots for swim lane diagrams. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`diagram_id`	uuid	no
`organization_id`	uuid	no
`version`	integer	no
`snapshot`	jsonb	no
`change_summary`	text	yes
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
diagram_id → pf_swim_lane_diagrams(id)
organization_id → pf_organizations(id)

Policies:

pf_swim_lane_diagram_versions_delete (DELETE)
pf_swim_lane_diagram_versions_insert (INSERT)
pf_swim_lane_diagram_versions_select (SELECT)
pf_swim_lane_diagram_versions_update (UPDATE)

`pf_swim_lane_diagrams`

PF-73: Swim lane diagram definitions (documentation/visualization only). RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`title`	text	no
`description`	text	yes
`source_type`	text	no	’manual’::text	Origin: manual, procedure (GR-11), policy (GR-01), ai (PF-27), import (Phase 2.3 BPMN/Visio)
`source_id`	uuid	yes		UUID of source record. Loose reference, no FK.
`lanes`	jsonb	no	’[]‘::jsonb	Array of LaneDefinition objects
`nodes`	jsonb	no	’[]‘::jsonb	React Flow nodes array with parentNodeId for lane assignment
`edges`	jsonb	no	’[]‘::jsonb	React Flow edges array
`viewport`	jsonb	yes
`status`	text	no	’draft’::text
`version`	integer	no	1
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata (e.g., {“department”: “Operations”})
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp. NULL = active.
`last_edited_by`	uuid	yes		PF-73 Phase 2.2: Last user who edited the diagram (real-time collaboration).
`last_edited_at`	timestamp with time zone	yes		PF-73 Phase 2.2: Timestamp of last edit (real-time collaboration).
`is_template`	boolean	yes	false	PF-73 Phase 2.4: Whether this diagram is a reusable template.
`template_scope`	text	yes		PF-73 Phase 2.4: Template visibility scope — platform (all orgs) or organization (single org).

Foreign keys:

created_by → pf_profiles(id)
last_edited_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_swim_lane_diagrams_delete (DELETE)
pf_swim_lane_diagrams_insert (INSERT)
pf_swim_lane_diagrams_platform_templates_select (SELECT)
pf_swim_lane_diagrams_select (SELECT)
pf_swim_lane_diagrams_update (UPDATE)

`pf_task_automation_rules`

PF-29: Automation rules that auto-create tasks based on triggers. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`trigger_type`	text	no
`trigger_config`	jsonb	yes	’{}‘::jsonb
`action_type`	text	no	’create_task’::text
`template_id`	uuid	yes
`action_config`	jsonb	yes	’{}‘::jsonb
`enabled`	boolean	no	true
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp. NULL = active.
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
template_id → pf_task_templates(id)
updated_by → pf_profiles(id)

Policies:

pf_task_automation_rules_delete (DELETE)
pf_task_automation_rules_insert (INSERT)
pf_task_automation_rules_select (SELECT)
pf_task_automation_rules_update (UPDATE)

`pf_task_checklist_items`

PF-29 Phase 5: Lightweight checklist items belonging to a task. For full subtasks, use pf_tasks.parent_task_id. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`task_id`	uuid	no
`content`	text	no
`is_complete`	boolean	no	false
`completed_at`	timestamp with time zone	yes
`completed_by`	uuid	yes
`sort_order`	bigint	no	1000
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

completed_by → users(id)
created_by → users(id)
organization_id → pf_organizations(id)
task_id → pf_tasks(id)
updated_by → users(id)

Policies:

pf_task_checklist_items_delete (DELETE)
pf_task_checklist_items_insert (INSERT)
pf_task_checklist_items_select (SELECT)
pf_task_checklist_items_update (UPDATE)

`pf_task_comments`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`task_id`	uuid	no
`organization_id`	uuid	no
`content`	text	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
task_id → pf_tasks(id)
updated_by → pf_profiles(id)

Policies:

pf_task_comments_delete (DELETE)
pf_task_comments_insert (INSERT)
pf_task_comments_select (SELECT)
pf_task_comments_update (UPDATE)

`pf_task_dependencies`

PF-29: Task dependency edges (blocked-by / blocks). Acyclic enforced by trigger. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`task_id`	uuid	no
`depends_on_task_id`	uuid	no
`organization_id`	uuid	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
depends_on_task_id → pf_tasks(id)
organization_id → pf_organizations(id)
task_id → pf_tasks(id)
updated_by → pf_profiles(id)

Policies:

pf_task_dependencies_delete (DELETE)
pf_task_dependencies_insert (INSERT)
pf_task_dependencies_select (SELECT)
pf_task_dependencies_update (UPDATE)

`pf_task_templates`

PF-29: Reusable task templates for quick task creation. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`description`	text	yes
`default_priority`	text	no	’medium’::text
`default_status`	text	no	’open’::text
`assignee_rule`	text	yes
`due_date_offset_days`	integer	yes
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp. NULL = active.
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_task_templates_delete (DELETE)
pf_task_templates_insert (INSERT)
pf_task_templates_select (SELECT)
pf_task_templates_update (UPDATE)

`pf_task_time_entries`

PF-29: Time tracking entries for tasks. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`task_id`	uuid	no
`organization_id`	uuid	no
`user_id`	uuid	no
`minutes`	integer	no
`date`	date	no	CURRENT_DATE
`note`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
task_id → pf_tasks(id)
updated_by → pf_profiles(id)
user_id → pf_profiles(id)

Policies:

pf_task_time_entries_delete (DELETE)
pf_task_time_entries_insert (INSERT)
pf_task_time_entries_select (SELECT)
pf_task_time_entries_update (UPDATE)

`pf_tasks`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`title`	text	no
`description`	text	yes
`status`	text	no	’open’::text
`priority`	text	no	’medium’::text
`assigned_to`	uuid	yes
`assigned_by`	uuid	yes
`assigned_at`	timestamp with time zone	yes
`due_date`	date	yes
`completed_date`	date	yes
`source_type`	text	yes
`source_id`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	no
`updated_by`	uuid	yes
`sort_order`	bigint	yes		Manual sort position (sparse ordering, gaps of 1000). Lower values appear first. Use pf_reorder_task() to update safely.
`parent_task_id`	uuid	yes		PF-29 Phase 5: Parent task for nested subtasks. NULL for top-level tasks.

Foreign keys:

assigned_by → pf_profiles(id)
assigned_to → pf_profiles(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
parent_task_id → pf_tasks(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

pf_tasks_delete (DELETE)
pf_tasks_insert (INSERT)
pf_tasks_select (SELECT)
pf_tasks_update (UPDATE)

`pf_teams_notification_config`

PF-63: Configuration rules for routing domain events to Microsoft Teams channels RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`event_name`	text	no
`team_id`	text	no
`team_name`	text	no	”::text
`channel_id`	text	no
`channel_name`	text	no	”::text
`message_template`	text	yes
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_teams_notification_config_delete (DELETE)
pf_teams_notification_config_insert (INSERT)
pf_teams_notification_config_select (SELECT)
pf_teams_notification_config_update (UPDATE)

`pf_template_usage`

RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	yes
`letterhead_id`	uuid	yes
`user_id`	uuid	no
`document_type`	text	no
`source_module`	text	yes
`generated_at`	timestamp with time zone	yes	now()
`success`	boolean	yes	true
`file_size_bytes`	integer	yes
`generation_time_ms`	integer	yes
`metadata`	jsonb	yes	’{}‘::jsonb

Foreign keys:

letterhead_id → pf_letterheads(id)
organization_id → pf_organizations(id)
template_id → pf_document_templates(id)

Policies:

Users can insert own usage (INSERT)
Users can view org template usage (SELECT)

`pf_tenant_domains`

PF-77: Tenant custom domains for Vercel multi-tenant. One row per domain; lifecycle states: requested → verification_pending → verified → ssl_pending → active | failed | removed. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`domain`	text	no		Custom domain (e.g. app.acme.com). Unique across all orgs.
`status`	text	no	’requested’::text	Lifecycle: requested, verification_pending, verified, ssl_pending, active, failed, removed
`verification_error`	text	yes		User-actionable message when verification fails (e.g. TXT record required).
`ssl_error`	text	yes		User-actionable message when SSL issuance fails.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_tenant_domains_delete (DELETE)
pf_tenant_domains_insert (INSERT)
pf_tenant_domains_select (SELECT)
pf_tenant_domains_update (UPDATE)

`pf_tenant_themes`

PF-95: Per-tenant visual theming configuration (colors, typography, login branding, favicon). RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no	’Default’::text
`is_active`	boolean	no	true	Exactly one active theme per org enforced by partial unique index + trigger.
`color_primary`	text	yes	’#1e40af’::text
`color_secondary`	text	yes	’#64748b’::text
`color_accent`	text	yes	’#0891b2’::text
`color_background`	text	yes	’#ffffff’::text
`color_surface`	text	yes	’#f8fafc’::text
`color_text`	text	yes	’#0f172a’::text
`color_text_muted`	text	yes	’#64748b’::text
`color_destructive`	text	yes	’#ef4444’::text
`color_success`	text	yes	’#22c55e’::text
`color_warning`	text	yes	’#f59e0b’::text
`font_family`	text	yes	’Inter’::text	Body font from approved allowlist (Inter, Source Sans 3, Open Sans, Lato, Roboto, system-ui).
`font_heading`	text	yes		Heading font override; NULL inherits font_family.
`login_logo_url`	text	yes		Logo displayed on the pre-auth login page.
`login_background_url`	text	yes		Background image for the pre-auth login page.
`login_welcome_text`	text	yes		Welcome message displayed on the login page.
`favicon_url`	text	yes		Custom favicon URL for the tenant.
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata for theming extensions.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`color_border`	text	yes
`color_ring`	text	yes
`color_card`	text	yes
`color_popover`	text	yes
`color_info`	text	yes
`color_muted`	text	yes
`color_sidebar_background`	text	yes
`color_sidebar_accent`	text	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

pf_tenant_themes_delete (DELETE)
pf_tenant_themes_insert (INSERT)
pf_tenant_themes_select (SELECT)
pf_tenant_themes_update (UPDATE)

`pf_transcription_attestations`

PF-100: Append-only clinician sign-offs on transcription drafts. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	no
`draft_id`	uuid	no
`attesting_user_id`	uuid	no
`attestation_type`	text	no	’final’::text
`attestation_statement`	text	no
`signature_method`	text	no
`signature_metadata`	jsonb	no	’{}‘::jsonb
`attested_at`	timestamp with time zone	no	now()
`ip_address`	inet	yes
`user_agent`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

Foreign keys:

attesting_user_id → pf_profiles(id)
draft_id → pf_transcription_drafts(id)
organization_id → pf_organizations(id)
session_id → pf_transcription_sessions(id)

Policies:

trans_attestations_insert (INSERT)
trans_attestations_select (SELECT)

`pf_transcription_audit`

PF-100: Append-only compliance audit trail. No UPDATE/DELETE. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	yes
`actor_user_id`	uuid	yes
`event_type`	text	no
`event_category`	text	no
`event_payload`	jsonb	no	’{}‘::jsonb
`ip_address`	inet	yes
`user_agent`	text	yes
`is_part2`	boolean	no	false
`created_at`	timestamp with time zone	no	now()

Foreign keys:

actor_user_id → pf_profiles(id)
organization_id → pf_organizations(id)
session_id → pf_transcription_sessions(id)

Policies:

trans_audit_select (SELECT)

`pf_transcription_audit_retention_policy`

PF-100: Configurable retention rules for transcription audit data. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`policy_name`	text	no
`event_category`	text	yes
`retention_days`	integer	no
`applies_to_part2`	boolean	no	true
`is_active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

trans_audit_retention_delete (DELETE)
trans_audit_retention_insert (INSERT)
trans_audit_retention_select (SELECT)
trans_audit_retention_update (UPDATE)

`pf_transcription_citations`

PF-100: Links from draft text spans to source transcript segments. RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`draft_id`	uuid	no
`segment_id`	uuid	no
`draft_section`	text	no
`draft_text_start`	integer	yes
`draft_text_end`	integer	yes
`confidence`	numeric(5,4)	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

Foreign keys:

draft_id → pf_transcription_drafts(id)
organization_id → pf_organizations(id)
segment_id → pf_transcription_segments(id)

Policies:

trans_citations_delete (DELETE)
trans_citations_insert (INSERT)
trans_citations_select (SELECT)

`pf_transcription_cost_ledger`

PF-100: Append-only per-session/per-call cost tracking. No UPDATE/DELETE. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	yes
`vendor_call_id`	uuid	yes
`cost_category`	text	no
`vendor`	text	no
`cost_usd`	numeric(10,6)	no
`unit_count`	numeric(12,4)	yes
`unit_type`	text	yes
`billing_period_start`	date	yes
`billing_period_end`	date	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
session_id → pf_transcription_sessions(id)
vendor_call_id → pf_transcription_vendor_calls(id)

Policies:

trans_cost_ledger_select (SELECT)

`pf_transcription_draft_revisions`

PF-100: Append-only revision history for drafts. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`draft_id`	uuid	no
`revision_number`	integer	no
`revision_type`	text	no
`draft_content`	jsonb	no	’{}‘::jsonb
`draft_text`	text	yes
`diff_summary`	jsonb	yes
`edited_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

Foreign keys:

draft_id → pf_transcription_drafts(id)
edited_by → pf_profiles(id)
organization_id → pf_organizations(id)

Policies:

trans_draft_revisions_insert (INSERT)
trans_draft_revisions_select (SELECT)

`pf_transcription_drafts`

PF-100: AI-generated clinical note drafts. One active draft per session enforced by partial unique index. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	no
`template_id`	uuid	yes
`status`	text	no	’generating’::text
`generation_model`	text	yes
`generation_started_at`	timestamp with time zone	yes
`generation_completed_at`	timestamp with time zone	yes
`draft_content`	jsonb	no	’{}‘::jsonb
`draft_text`	text	yes
`word_count`	integer	yes
`phi_detection_status`	text	yes
`phi_findings`	jsonb	no	’[]‘::jsonb
`custom_fields`	jsonb	no	’{}‘::jsonb
`deleted_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
session_id → pf_transcription_sessions(id)
template_id → pf_transcription_templates(id)
updated_by → pf_profiles(id)

Policies:

trans_drafts_delete (DELETE)
trans_drafts_insert (INSERT)
trans_drafts_select (SELECT)
trans_drafts_update (UPDATE)

`pf_transcription_jurisdiction_routing`

PF-100 H2: Per-org routing rules. jurisdiction_code matches pf_jurisdiction_profiles.state_code; ’*’ wildcard = org default. recording_channel NULL = any channel. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`jurisdiction_code`	text	no
`recording_channel`	text	yes
`stt_vendor_id`	uuid	yes
`llm_vendor_id`	uuid	yes
`priority`	integer	no	100
`is_enabled`	boolean	no	true
`notes`	text	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

llm_vendor_id → pf_transcription_vendors(id)
organization_id → pf_organizations(id)
stt_vendor_id → pf_transcription_vendors(id)

Policies:

pf_transcription_jur_routing_delete (DELETE)
pf_transcription_jur_routing_insert (INSERT)
pf_transcription_jur_routing_select (SELECT)
pf_transcription_jur_routing_update (UPDATE)

`pf_transcription_module_settings`

PF-100: Per-organization transcription configuration. One row per org. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`is_enabled`	boolean	no	false
`default_stt_vendor`	text	yes
`default_llm_vendor`	text	yes
`default_template_id`	uuid	yes
`retain_audio`	boolean	no	false
`audio_retention_days`	integer	yes
`transcript_retention_days`	integer	no	2555
`per_session_cost_alert_threshold_usd`	numeric(10,2)	no	5.00
`monthly_cost_alert_threshold_usd`	numeric(10,2)	yes
`require_mfa_for_attestation`	boolean	no	false
`enable_part2_handling`	boolean	no	true
`enable_phi_detection`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
default_template_id → pf_transcription_templates(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

trans_module_settings_delete (DELETE)
trans_module_settings_insert (INSERT)
trans_module_settings_select (SELECT)
trans_module_settings_update (UPDATE)

`pf_transcription_segments`

PF-100: Timestamped speech segments from STT vendor. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	no
`segment_index`	integer	no
`speaker_label`	text	yes
`speaker_role`	text	yes
`start_offset_ms`	integer	no
`end_offset_ms`	integer	no
`text`	text	no
`confidence`	numeric(5,4)	yes
`is_redacted`	boolean	no	false
`redaction_reason`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
session_id → pf_transcription_sessions(id)

Policies:

trans_segments_delete (DELETE)
trans_segments_insert (INSERT)
trans_segments_select (SELECT)
trans_segments_update (UPDATE)

`pf_transcription_session_participants`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	no
`participant_role`	text	no
`user_id`	uuid	yes
`external_name`	text	yes
`consent_status`	text	no	’pending’::text
`consent_recorded_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()

Foreign keys:

organization_id → pf_organizations(id)
session_id → pf_transcription_sessions(id)
user_id → pf_profiles(id)

Policies:

trans_participants_delete (DELETE)
trans_participants_insert (INSERT)
trans_participants_select (SELECT)
trans_participants_update (UPDATE)

`pf_transcription_sessions`

PF-100: Ambient transcription sessions. Encounter linkage is app-layer per ADR-018. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`site_id`	uuid	yes
`encounter_id`	uuid	yes		PF-100/ADR-018: References pm_encounters.id without FK. Validated by edge function; nightly reconciliation detects orphans.
`patient_id`	uuid	yes
`clinician_user_id`	uuid	no
`jurisdiction_code`	text	no
`consent_model`	text	no
`recording_channel`	text	no
`vendor_stt`	text	yes
`vendor_llm`	text	yes
`status`	text	no	’pending’::text
`started_at`	timestamp with time zone	yes
`ended_at`	timestamp with time zone	yes
`duration_seconds`	integer	yes
`language_code`	text	no	’en-US’::text
`consent_disclosure_text`	text	yes
`recording_storage_uri`	text	yes
`recording_kms_key_alias`	text	yes
`is_part2`	boolean	no	false	True if session may contain 42 CFR Part 2 SUD content; triggers stricter consent and disclosure controls.
`notes`	text	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`deleted_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

clinician_user_id → pf_profiles(id)
created_by → pf_profiles(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)
updated_by → pf_profiles(id)

Policies:

trans_sessions_delete (DELETE)
trans_sessions_insert (INSERT)
trans_sessions_select (SELECT)
trans_sessions_update (UPDATE)

`pf_transcription_templates`

PF-100: Note generation templates (SOAP/DAP/etc). organization_id NULL = platform-builtin. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`template_type`	text	no
`schema_definition`	jsonb	no	’{}‘::jsonb
`prompt_template`	text	no
`is_active`	boolean	no	true
`is_platform_builtin`	boolean	no	false
`version`	integer	no	1
`custom_fields`	jsonb	no	’{}‘::jsonb
`deleted_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
updated_by → pf_profiles(id)

Policies:

trans_templates_delete (DELETE)
trans_templates_insert (INSERT)
trans_templates_select (SELECT)
trans_templates_update (UPDATE)

`pf_transcription_vendor_baas`

PF-100 H2: Per-org Business Associate Agreement (BAA) registry for transcription vendors. Status must be ‘active’ (with valid baa_signed_at) before vendor may be invoked. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`vendor_id`	uuid	no
`status`	text	no	’pending’::text
`baa_signed_at`	timestamp with time zone	yes
`baa_expires_at`	timestamp with time zone	yes
`baa_document_uri`	text	yes
`signed_by_name`	text	yes
`signed_by_title`	text	yes
`notes`	text	yes
`vault_credential_id`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

organization_id → pf_organizations(id)
vault_credential_id → pf_credential_vault(id)
vendor_id → pf_transcription_vendors(id)

Policies:

pf_transcription_vendor_baas_delete (DELETE)
pf_transcription_vendor_baas_insert (INSERT)
pf_transcription_vendor_baas_select (SELECT)
pf_transcription_vendor_baas_update (UPDATE)

`pf_transcription_vendor_calls`

PF-100: Append-only audit log of STT/LLM vendor invocations. No UPDATE/DELETE. RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`session_id`	uuid	yes
`draft_id`	uuid	yes
`vendor`	text	no
`vendor_service`	text	no
`vendor_endpoint`	text	yes
`request_id`	text	yes
`status_code`	integer	yes
`latency_ms`	integer	yes
`input_tokens`	integer	yes
`output_tokens`	integer	yes
`audio_duration_seconds`	numeric(10,2)	yes
`cost_usd`	numeric(10,6)	yes
`error_code`	text	yes
`error_message`	text	yes
`request_metadata`	jsonb	no	’{}‘::jsonb
`response_metadata`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()

Foreign keys:

draft_id → pf_transcription_drafts(id)
organization_id → pf_organizations(id)
session_id → pf_transcription_sessions(id)

Policies:

trans_vendor_calls_select (SELECT)

`pf_transcription_vendors`

PF-100 H2: Platform-global catalog of supported transcription vendors (STT, LLM, PHI redaction). Read by all authenticated users; write only by platform_admin. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`vendor_key`	text	no
`display_name`	text	no
`vendor_type`	text	no
`supports_streaming`	boolean	no	false
`supports_phi_redaction`	boolean	no	false
`requires_baa`	boolean	no	true
`is_active`	boolean	no	true
`metadata`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Policies:

pf_transcription_vendors_admin_write (ALL)
pf_transcription_vendors_select (SELECT)

`pf_user_activation_requests`

PF: Activation requests for migrated/imported users pending admin review before org access is granted RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`user_id`	uuid	no
`employee_id`	uuid	yes
`status`	text	no	’pending’::text	pending = awaiting admin review, approved = role assigned, denied = access rejected
`reason`	text	yes
`reviewed_by`	uuid	yes
`reviewed_at`	timestamp with time zone	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes

Foreign keys:

created_by → users(id)
employee_id → hr_employees(id)
organization_id → pf_organizations(id)
reviewed_by → users(id)
user_id → users(id)

Policies:

pf_activation_requests_admin_select (SELECT)
pf_activation_requests_admin_update (UPDATE)
pf_activation_requests_user_insert (INSERT)
pf_activation_requests_user_select (SELECT)

`pf_user_dashboard_preferences`

Stores user-specific dashboard widget preferences (visibility, order, etc.) RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`widget_preferences`	jsonb	no	’[]‘::jsonb	JSONB array of widget preferences: [{“widget_id”: “hr-employee-count”, “visible”: true, “order”: 0}, …]
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`quick_actions`	jsonb	no	’[]‘::jsonb	Array of quick action preferences: [{action_id, module_id, order, visible, scope: “global”\|“module”}]
`dashboard_context`	text	yes		Dashboard context: null or “main” for main dashboard, “hr”, “fa”, “rh”, etc. for module dashboards

Foreign keys:

organization_id → pf_organizations(id)
user_id → users(id)

Policies:

pf_user_dashboard_preferences_delete (DELETE)
pf_user_dashboard_preferences_insert (INSERT)
pf_user_dashboard_preferences_select (SELECT)
pf_user_dashboard_preferences_update (UPDATE)

`pf_user_devices`

PF-49: Tracks user devices via fingerprinting for session management RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`device_fingerprint`	text	no
`device_name`	text	yes
`device_type`	text	yes
`browser`	text	yes
`os`	text	yes
`is_trusted`	boolean	no	false
`trusted_at`	timestamp with time zone	yes
`trusted_until`	timestamp with time zone	yes
`first_seen_at`	timestamp with time zone	no	now()
`last_seen_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)
user_id → users(id)

Policies:

pf_user_devices_delete (DELETE)
pf_user_devices_insert (INSERT)
pf_user_devices_select (SELECT)
pf_user_devices_update (UPDATE)

`pf_user_invitations`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`email`	text	no
`organization_id`	uuid	no
`site_id`	uuid	yes
`invited_role`	app_role	no
`invited_by`	uuid	no
`token`	text	no	encode(gen_random_bytes(32), ‘hex’::text)
`status`	text	no	’pending’::text
`created_at`	timestamp with time zone	no	now()
`expires_at`	timestamp with time zone	no	(now() + ‘7 days’::interval)
`accepted_at`	timestamp with time zone	yes
`updated_at`	timestamp with time zone	yes	now()
`revoked_at`	timestamp with time zone	yes		When the invitation was revoked (soft-cancel). Replaces hard DELETE so audit trail is preserved.
`revoked_by`	uuid	yes		User who revoked the invitation.
`revoked_reason`	text	yes		Optional free-text reason captured when revoking.
`resent_at`	timestamp with time zone	yes		When the invitation email was last resent.
`resend_count`	integer	no	0	Number of times the invitation email has been resent.

Foreign keys:

invited_by → pf_profiles(id)
organization_id → pf_organizations(id)
site_id → pf_sites(id)

Policies:

Admins can create invitations (INSERT)
Admins can delete invitations (DELETE)
Admins can update invitations (UPDATE)
Admins can view org invitations (SELECT)

`pf_user_role_assignments`

User role assignments with optional site scope and expiration RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`role_id`	uuid	yes
`system_role`	app_role	yes
`site_id`	uuid	yes		Optional site scope for site-specific role assignments. Null = all sites.
`assigned_at`	timestamp with time zone	no	now()
`assigned_by`	uuid	yes
`expires_at`	timestamp with time zone	yes		Optional expiration date for temporary access.
`custom_fields`	jsonb	no	’{}‘::jsonb	Assignment metadata (e.g., {“reason”: “temporary_access”, “ticket_id”: “JIRA-123”})
`created_at`	timestamp with time zone	yes	now()
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

assigned_by → pf_profiles(id)
organization_id → pf_organizations(id)
role_id → pf_custom_roles(id)
site_id → pf_sites(id)
user_id → pf_profiles(id)

Policies:

pf_user_role_assignments_delete (DELETE)
pf_user_role_assignments_insert (INSERT)
pf_user_role_assignments_select (SELECT)
pf_user_role_assignments_update (UPDATE)

`pf_user_sessions`

PF-49: Tracks user sessions with sliding expiration and device correlation RLS: ✅ enabled (3 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`user_id`	uuid	no
`organization_id`	uuid	no
`device_id`	uuid	yes
`session_token_hash`	text	no
`ip_address`	text	yes
`user_agent`	text	yes
`status`	text	no	’active’::text
`last_activity_at`	timestamp with time zone	no	now()
`expires_at`	timestamp with time zone	no
`terminated_at`	timestamp with time zone	yes
`terminated_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
device_id → pf_user_devices(id)
organization_id → pf_organizations(id)
terminated_by → users(id)
updated_by → users(id)
user_id → users(id)

Policies:

pf_user_sessions_insert (INSERT)
pf_user_sessions_select (SELECT)
pf_user_sessions_update (UPDATE)

`pf_validation_rule_executions`

PF-55 Phase 3: Append-only log of validation failures (no PHI). RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`rule_id`	uuid	yes
`entity`	text	yes
`field`	text	yes
`outcome`	text	no	’fail’::text
`metadata`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes	auth.uid()

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
rule_id → pf_validation_rules(id)

Policies:

pf_validation_rule_executions_insert (INSERT)
pf_validation_rule_executions_select (SELECT)

`pf_validation_rules`

PF-55 Phase 2: Organization-scoped validation rule definitions (type + params). RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`name`	text	no
`entity`	text	yes
`field`	text	yes
`rule_type`	text	no
`params`	jsonb	yes	’{}‘::jsonb
`active`	boolean	no	true
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata.
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes		Soft delete timestamp. NULL = active, non-NULL = soft deleted.

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_validation_rules_delete (DELETE)
pf_validation_rules_insert (INSERT)
pf_validation_rules_select (SELECT)
pf_validation_rules_update (UPDATE)

`pf_webhook_deliveries`

RLS: ✅ enabled (1 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`direction`	text	no
`integration_id`	uuid	yes
`outbound_webhook_id`	uuid	yes
`event_type`	text	yes
`url`	text	no
`method`	text	no	’POST’::text
`request_headers`	jsonb	yes
`request_body`	jsonb	yes
`status_code`	integer	yes
`response_headers`	jsonb	yes
`response_body`	text	yes
`started_at`	timestamp with time zone	no	now()
`completed_at`	timestamp with time zone	yes
`duration_ms`	integer	yes
`status`	text	no	’pending’::text
`error_message`	text	yes
`attempt_number`	integer	yes	1
`next_retry_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`claimed_at`	timestamp with time zone	yes		Timestamp when a worker claimed this delivery for processing. Used to prevent concurrent processing.
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

integration_id → pf_integrations(id)
organization_id → pf_organizations(id)
outbound_webhook_id → pf_outbound_webhooks(id)

Policies:

pf_webhook_deliveries_select (SELECT)

`pf_wizard_analytics_events`

Wizard execution analytics. JSONB columns must not contain PHI/PII - use sanitizeAnalyticsEvent utility. RLS: ✅ enabled (2 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	no
`instance_id`	uuid	yes
`user_id`	uuid	no
`event_type`	text	no
`step_id`	text	yes
`step_index`	integer	yes
`branch_id`	text	yes
`time_on_step_seconds`	integer	yes
`validation_errors`	jsonb	yes
`metadata`	jsonb	yes	’{}‘::jsonb
`created_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb
`updated_at`	timestamp with time zone	yes	now()

Foreign keys:

organization_id → pf_organizations(id)
template_id → pf_wizard_templates(id)
user_id → pf_profiles(id)

Policies:

pf_wizard_analytics_insert (INSERT)
pf_wizard_analytics_select (SELECT)

`pf_wizard_executions`

RLS: ✅ enabled (5 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`template_id`	uuid	no
`user_id`	uuid	no
`entity_type`	text	yes
`entity_id`	uuid	yes
`status`	text	no	’in_progress’::text
`current_step_index`	integer	no	0
`completed_step_indices`	integer[]	no	’{}‘::integer[]
`visible_step_ids`	text[]	no	’{}‘::text[]
`field_values`	jsonb	no	’{}‘::jsonb
`step_metadata`	jsonb	no	’{}‘::jsonb
`started_at`	timestamp with time zone	no	now()
`last_activity_at`	timestamp with time zone	no	now()
`completed_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`custom_fields`	jsonb	no	’{}‘::jsonb
`locked_by`	uuid	yes
`locked_at`	timestamp with time zone	yes

Foreign keys:

locked_by → users(id)
organization_id → pf_organizations(id)
template_id → pf_wizard_templates(id)
user_id → users(id)

Policies:

pf_wizard_executions_admin_view (SELECT)
pf_wizard_executions_delete (DELETE)
pf_wizard_executions_insert (INSERT)
pf_wizard_executions_select (SELECT)
pf_wizard_executions_update (UPDATE)

`pf_wizard_marketplace_listings`

RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`template_id`	uuid	no
`organization_id`	uuid	no
`visibility`	text	no	’public’::text
`allowed_org_ids`	uuid[]	yes	’{}‘::uuid[]
`title`	text	no
`description`	text	yes
`tags`	text[]	yes	’{}‘::text[]
`clone_count`	integer	yes	0
`rating_sum`	integer	yes	0
`rating_count`	integer	yes	0
`is_verified`	boolean	yes	false
`is_featured`	boolean	yes	false
`template_snapshot`	jsonb	no
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`custom_fields`	jsonb	yes	’{}‘::jsonb
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
template_id → pf_wizard_templates(id)
updated_by → pf_profiles(id)

Policies:

pf_marketplace_listings_delete (DELETE)
pf_marketplace_listings_insert (INSERT)
pf_marketplace_listings_select (SELECT)
pf_marketplace_listings_update (UPDATE)

`pf_wizard_org_defaults`

PF-41: Org-level default wizard config. Templates inherit these when not overridden. RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	no
`default_progress_style`	wizard_progress_style	yes		Default progress indicator style (stepper, dots, progress_bar).
`default_show_step_labels`	boolean	no	false	Default for showing step labels.
`default_allow_step_navigation`	boolean	no	false	Default for allowing free step navigation.
`default_validation_mode`	wizard_validation_mode	yes		Default validation timing (on_advance, realtime, on_submit).
`default_auto_save_interval_seconds`	integer	yes		Default draft auto-save interval in seconds (5-300).
`custom_fields`	jsonb	yes	’{}‘::jsonb
`deleted_at`	timestamp with time zone	yes
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes

Foreign keys:

created_by → users(id)
organization_id → pf_organizations(id)
updated_by → users(id)

Policies:

pf_wizard_org_defaults_delete (DELETE)
pf_wizard_org_defaults_insert (INSERT)
pf_wizard_org_defaults_select (SELECT)
pf_wizard_org_defaults_update (UPDATE)

`pf_wizard_template_versions`

PF-41: Stores version history for wizard templates, enabling rollback and audit trail RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default
`id`	uuid	no	gen_random_uuid()
`template_id`	uuid	no
`organization_id`	uuid	no
`version_number`	text	no
`major_version`	integer	no	1
`minor_version`	integer	no	0
`version_notes`	text	yes
`wizard_config`	jsonb	no	’{}‘::jsonb
`steps`	jsonb	no	’[]‘::jsonb
`is_published`	boolean	yes	false
`published_at`	timestamp with time zone	yes
`published_by`	uuid	yes
`created_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`custom_fields`	jsonb	no	’{}‘::jsonb
`updated_at`	timestamp with time zone	yes
`updated_by`	uuid	yes
`deleted_at`	timestamp with time zone	yes

Foreign keys:

created_by → pf_profiles(id)
organization_id → pf_organizations(id)
published_by → pf_profiles(id)
template_id → pf_wizard_templates(id)
updated_by → pf_profiles(id)

Policies:

pf_wizard_versions_delete (DELETE)
pf_wizard_versions_insert (INSERT)
pf_wizard_versions_select (SELECT)
pf_wizard_versions_update (UPDATE)

`pf_wizard_templates`

PF-41: Configurable wizard templates for module onboarding, admissions, leave, and setup workflows RLS: ✅ enabled (4 policies)

Column	Type	Nullable	Default	Comment
`id`	uuid	no	gen_random_uuid()
`organization_id`	uuid	yes
`name`	text	no
`description`	text	yes
`module`	pf_wizard_module	no
`wizard_type`	pf_wizard_type	no
`is_template`	boolean	no	false
`source_template_id`	uuid	yes
`wizard_config`	jsonb	no	’{“progress_style”: “stepper”, “validation_mode”: “on_advance”, “show_step_labels”: true, “show_estimated_time”: false, “allow_step_navigation”: false, “auto_save_interval_seconds”: 30}‘::jsonb	Wizard display/behavior config: progress_style, show_step_labels, validation_mode, auto_save_interval_seconds
`steps`	jsonb	no	’[]‘::jsonb	Array of step configurations: [{id, title, description, icon, component_type, component_id, fields, validation, visibility_conditions}]
`is_active`	boolean	no	true
`version`	integer	no	1
`custom_fields`	jsonb	no	’{}‘::jsonb	Organization-specific metadata per constitution
`created_at`	timestamp with time zone	no	now()
`updated_at`	timestamp with time zone	no	now()
`created_by`	uuid	yes
`updated_by`	uuid	yes		User who last updated this record
`current_version_id`	uuid	yes
`version_count`	integer	no	0
`modules`	text[]	yes	’{}‘::text[]	Array of module codes (hr, rh, fa, etc.) this wizard spans. Empty means single-module (uses primary module column).
`marketplace_listing_id`	uuid	yes		Reference to marketplace listing if this template is published.
`cloned_from_listing_id`	uuid	yes		Reference to marketplace listing this template was cloned from.
`locked_by`	uuid	yes		User currently holding the edit lock on this template (NULL = not locked).
`locked_at`	timestamp with time zone	yes		When the current edit lock was acquired. Locks older than 60s are considered stale.
`last_activity_at`	timestamp with time zone	yes		Last heartbeat from the lock holder; used to detect dead clients.

Foreign keys:

cloned_from_listing_id → pf_wizard_marketplace_listings(id)
marketplace_listing_id → pf_wizard_marketplace_listings(id)
created_by → pf_profiles(id)
current_version_id → pf_wizard_template_versions(id)
locked_by → users(id)
organization_id → pf_organizations(id)
source_template_id → pf_wizard_templates(id)
updated_by → pf_profiles(id)

Policies:

pf_wizard_templates_delete (DELETE)
pf_wizard_templates_insert (INSERT)
pf_wizard_templates_select (SELECT)
pf_wizard_templates_update (UPDATE)

Leadership Operating System Schema Reference Practice Management Schema Reference

​Entity relationships

​Tables

​pf_ai_conversations

​pf_ai_prompt_feedback

​pf_ai_skill_overrides

​pf_ai_skills

​pf_ai_usage_logs

​pf_approval_chain_templates

​pf_asam_loc_levels

​pf_assignable_roles

​pf_audit_logs

​pf_audit_logs_p202604

​pf_audit_logs_p202605

​pf_audit_logs_p202606

​pf_audit_logs_p202607

​pf_audit_logs_p202608

​pf_audit_logs_p202609

​pf_audit_logs_p202610

​pf_audit_logs_p202611

​pf_audit_logs_pdefault

​pf_bulk_operation_items

​pf_bulk_operations

​pf_business_processes

​pf_calendar_sync_config

​pf_chatbot_configs

​pf_chatbot_messages

​pf_chatbot_sessions

​pf_code_cross_mappings

​pf_code_crosswalks

​pf_code_favorites

​pf_code_modifiers

​pf_code_recent

​pf_code_set_versions

​pf_code_sets

​pf_compliance_checks

​pf_compliance_evidence

​pf_condition_evaluation_cache

​pf_condition_evaluation_metrics

​pf_condition_evaluation_metrics_archive

​pf_conversation_members

​pf_conversations

​pf_cpt_codes

​pf_credential_vault

​pf_credentials

​pf_custom_field_definitions

​pf_custom_metric_values

​pf_custom_metrics

​pf_custom_object_fields

​pf_custom_object_records

​pf_custom_objects

​pf_custom_roles

​pf_dashboard_shares

​pf_dashboard_templates

​pf_data_lifecycle_events

​pf_data_lineage

​pf_data_lineage_archive

​pf_data_migration_connections

​pf_data_migration_mappings

​pf_data_migration_runs

​pf_data_sync_config

​pf_department_sharepoint_config

​pf_department_teams_config

​pf_departments

​pf_document_approvals

​pf_document_embeddings

​pf_document_expiration_log

​pf_document_permissions

​pf_document_template_versions

​pf_document_templates

​pf_document_versions

​pf_documents

​pf_domain_events

​pf_domain_events_p202604

​pf_domain_events_p202605

​pf_domain_events_p202606

​pf_domain_events_p202607

​pf_domain_events_p202608

​pf_domain_events_p202609

​pf_domain_events_p202610

​pf_domain_events_p202611

Entity relationships

Tables

`pf_ai_conversations`

`pf_ai_prompt_feedback`

`pf_ai_skill_overrides`

`pf_ai_skills`

`pf_ai_usage_logs`

`pf_approval_chain_templates`

`pf_asam_loc_levels`

`pf_assignable_roles`

`pf_audit_logs`

`pf_audit_logs_p202604`

`pf_audit_logs_p202605`

`pf_audit_logs_p202606`

`pf_audit_logs_p202607`

`pf_audit_logs_p202608`

`pf_audit_logs_p202609`

`pf_audit_logs_p202610`

`pf_audit_logs_p202611`

`pf_audit_logs_pdefault`

`pf_bulk_operation_items`

`pf_bulk_operations`

`pf_business_processes`

`pf_calendar_sync_config`

`pf_chatbot_configs`

`pf_chatbot_messages`

`pf_chatbot_sessions`

`pf_code_cross_mappings`

`pf_code_crosswalks`

`pf_code_favorites`

`pf_code_modifiers`

`pf_code_recent`

`pf_code_set_versions`

`pf_code_sets`

`pf_compliance_checks`

`pf_compliance_evidence`

`pf_condition_evaluation_cache`

`pf_condition_evaluation_metrics`

`pf_condition_evaluation_metrics_archive`

`pf_conversation_members`

`pf_conversations`

`pf_cpt_codes`

`pf_credential_vault`

`pf_credentials`

`pf_custom_field_definitions`

`pf_custom_metric_values`

`pf_custom_metrics`

`pf_custom_object_fields`

`pf_custom_object_records`

`pf_custom_objects`

`pf_custom_roles`

`pf_dashboard_shares`

`pf_dashboard_templates`

`pf_data_lifecycle_events`

`pf_data_lineage`

`pf_data_lineage_archive`

`pf_data_migration_connections`

`pf_data_migration_mappings`

`pf_data_migration_runs`

`pf_data_sync_config`

`pf_department_sharepoint_config`

`pf_department_teams_config`

`pf_departments`

`pf_document_approvals`

`pf_document_embeddings`

`pf_document_expiration_log`

`pf_document_permissions`

`pf_document_template_versions`

`pf_document_templates`

`pf_document_versions`

`pf_documents`

`pf_domain_events`

`pf_domain_events_p202604`

`pf_domain_events_p202605`

`pf_domain_events_p202606`

`pf_domain_events_p202607`

`pf_domain_events_p202608`

`pf_domain_events_p202609`

`pf_domain_events_p202610`

`pf_domain_events_p202611`