diff --git a/deploy/migrations/m0009_rag_pipeline_access.json b/deploy/migrations/m0009_rag_pipeline_access.json
new file mode 100644
index 0000000..c3f2edd
--- /dev/null
+++ b/deploy/migrations/m0009_rag_pipeline_access.json
@@ -0,0 +1,13 @@
+{
+  "id": "m0009",
+  "title": "产线知识库接入：rag API 下位应用种子（pipeline-rag）+ PM 入库建议表",
+  "backup_tables": [],
+  "up": [
+    {"op": "sql", "sql": "INSERT INTO downapp (id, name, description, secretkey, allowedips, orgid) SELECT 'pipeline-rag', 'pipeline-rag', '产线平台访问 rag 知识库（检索/入库）', '', '', '0' FROM DUAL WHERE NOT EXISTS (SELECT 1 FROM downapp WHERE id='pipeline-rag')"},
+    {"op": "sql", "sql": "CREATE TABLE IF NOT EXISTS pipeline_kb_suggestions (id VARCHAR(32) NOT NULL PRIMARY KEY COMMENT '建议ID', project_id VARCHAR(32) NOT NULL COMMENT '项目ID', kb_id VARCHAR(32) NOT NULL COMMENT '目标知识库ID', file_path VARCHAR(500) NOT NULL COMMENT '文件绝对路径（项目工作空间内）', file_name VARCHAR(255) NOT NULL COMMENT '文件名', reason TEXT NULL COMMENT 'PM 给出的入库理由', status VARCHAR(16) NOT NULL DEFAULT 'pending' COMMENT 'pending/approved/rejected', suggested_by VARCHAR(64) NOT NULL DEFAULT '' COMMENT '建议人（agent.pm）', task_id VARCHAR(32) NOT NULL DEFAULT '' COMMENT '关联任务ID', result_comment VARCHAR(1000) NOT NULL DEFAULT '' COMMENT '处理结果备注（含 doc_id 或驳回原因）', decided_by VARCHAR(32) NOT NULL DEFAULT '' COMMENT '决策人（项目owner）', decided_at TIMESTAMP NULL COMMENT '决策时间', created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, KEY idx_proj_status (project_id, status), KEY idx_kb (kb_id)) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='PM 知识库入库建议'"}
+  ],
+  "down": [
+    {"op": "sql", "sql": "DROP TABLE IF EXISTS pipeline_kb_suggestions"},
+    {"op": "sql", "sql": "DELETE FROM downapp WHERE id='pipeline-rag'"}
+  ]
+}