collavre 0.20.3 → 0.22.0

data/config/locales/integrations.en.yml

@@ -0,0 +1,55 @@
+en:
+  collavre:
+    admin:
+      integrations:
+        title: "Integrations"
+        subtitle: "Configure external integration secrets. Database values take precedence over ENV; ENV is the seed/fallback."
+        tab_label: "Integrations"
+        empty_state: "No integrations registered yet."
+        sensitive: "(sensitive)"
+        restart_required: "restart required"
+        placeholder_leave_blank: "Leave blank to keep current"
+        env_var_label: "ENV"
+        confirm_reset: "Delete the DB value and fall back to ENV?"
+        headers:
+          key: "Key"
+          value: "Value"
+          actions: "Actions"
+        source:
+          db: "DB"
+          env: "ENV"
+          default: "default"
+          unknown: "unknown"
+        category:
+          slack: "Slack"
+          google_oauth: "Google OAuth"
+          github_oauth: "GitHub OAuth"
+          notion_oauth: "Notion OAuth"
+          github: "GitHub Integration"
+          aws_s3: "AWS S3"
+          aws_ses: "AWS SES"
+          firebase: "Firebase / FCM"
+          gemini: "Gemini"
+          llm: "LLM API Keys"
+          openclaw: "OpenClaw Gateway"
+          mail: "Mail / Host"
+          misc: "Miscellaneous"
+        actions:
+          save: "Save changes"
+          reset: "Reset to ENV"
+        flash:
+          updated: "Integration settings saved."
+          restart_required: "Some changed keys require a server restart to take effect."
+          reset_done: "Reset %{key} to ENV/default."
+        descriptions:
+          firebase_project_id: "Firebase project ID (e.g. my-app-12345). Required for both server push and browser SDK. Find it at Firebase Console → Project Settings → General."
+          firebase_service_account_json: "Paste the full JSON body of a Google Cloud service account key. Recommended path for server FCM auth — set this and you're done. Generate at Firebase Console → Project Settings → Service Accounts → Generate New Private Key. Takes precedence over WIF."
+          fcm_wif_audience: "Optional WIF override (AWS only). Used only when the JSON key above is empty. Leave blank to derive it in production from Sender ID using the default aws-pool/aws-provider. Override for non-default pools: //iam.googleapis.com/projects/{PROJECT_NUMBER}/locations/global/workloadIdentityPools/{POOL_ID}/providers/{PROVIDER_ID}."
+          fcm_wif_credential_source: "Optional WIF override: AWS credential source JSON (IMDS endpoints). Leave blank to use the default AWS IMDS endpoints. Override example: {\"environment_id\":\"aws1\",\"region_url\":\"http://169.254.169.254/latest/meta-data/placement/availability-zone\",\"url\":\"http://169.254.169.254/latest/meta-data/iam/security-credentials\",\"regional_cred_verification_url\":\"https://sts.{region}.amazonaws.com?Action=GetCallerIdentity&Version=2011-06-15\"}"
+          fcm_wif_service_account_email: "GCP service account email to impersonate via WIF (e.g. firebase-sender@PROJECT.iam.gserviceaccount.com). Used only in WIF mode. Reads the legacy FIREBASE_SERVICE_ACCOUNT env var as fallback."
+          fcm_sender_id: "Web-push only: messagingSenderId for the Firebase JS SDK (project number). Required for browser push subscriptions. Find at Firebase Console → Project Settings → Cloud Messaging → Sender ID."
+          fcm_vapid_key: "Web-push only: VAPID public key for browser push subscriptions. Generate at Firebase Console → Project Settings → Cloud Messaging → Web configuration → Web Push certificates."
+          fcm_server_key: "Legacy FCM server key (deprecated by Google). Only set this if you have legacy clients using the old HTTP v0 API."
+          firebase_api_key: "Web-push only: Firebase JS SDK apiKey. Required for browser Firebase initialization (web push, Auth, Firestore). Find at Firebase Console → Project Settings → General → Web API Key."
+          firebase_auth_domain: "Web-push only: Firebase Auth redirect domain (usually {project}.firebaseapp.com). Required only if you use Firebase Auth in the browser."
+          firebase_app_id: "Web-push only: Firebase web app ID (e.g. 1:1234:web:abcd...). Required for browser Firebase initialization. Find at Firebase Console → Project Settings → General → Your apps."

data/config/locales/integrations.ko.yml

@@ -0,0 +1,55 @@
+ko:
+  collavre:
+    admin:
+      integrations:
+        title: "통합"
+        subtitle: "외부 통합 비밀값을 설정합니다. DB 값이 ENV보다 우선하며, ENV는 시드/폴백입니다."
+        tab_label: "통합"
+        empty_state: "등록된 통합이 없습니다."
+        sensitive: "(민감)"
+        restart_required: "재시작 필요"
+        placeholder_leave_blank: "비워두면 현재 값 유지"
+        env_var_label: "환경변수"
+        confirm_reset: "DB 값을 삭제하고 ENV로 폴백할까요?"
+        headers:
+          key: "키"
+          value: "값"
+          actions: "작업"
+        source:
+          db: "DB"
+          env: "ENV"
+          default: "기본값"
+          unknown: "알 수 없음"
+        category:
+          slack: "Slack"
+          google_oauth: "Google OAuth"
+          github_oauth: "GitHub OAuth"
+          notion_oauth: "Notion OAuth"
+          github: "GitHub 연동"
+          aws_s3: "AWS S3"
+          aws_ses: "AWS SES"
+          firebase: "Firebase / FCM"
+          gemini: "Gemini"
+          llm: "LLM API 키"
+          openclaw: "OpenClaw 게이트웨이"
+          mail: "메일 / 호스트"
+          misc: "기타"
+        actions:
+          save: "변경사항 저장"
+          reset: "ENV로 초기화"
+        flash:
+          updated: "통합 설정이 저장되었습니다."
+          restart_required: "변경된 일부 키는 서버 재시작 후에 적용됩니다."
+          reset_done: "%{key}을(를) ENV/기본값으로 초기화했습니다."
+        descriptions:
+          firebase_project_id: "Firebase 프로젝트 ID (예: my-app-12345). 서버 푸시와 브라우저 SDK 모두에서 필수. Firebase Console → 프로젝트 설정 → 일반에서 확인."
+          firebase_service_account_json: "Google Cloud 서비스 계정 키 JSON 본문 전체를 붙여넣으세요. 서버 FCM 인증의 권장 경로 — 이 값만 설정하면 끝납니다. Firebase Console → 프로젝트 설정 → 서비스 계정 → 새 비공개 키 생성. WIF 보다 우선합니다."
+          fcm_wif_audience: "선택적 WIF 오버라이드 (AWS 전용). 위 JSON 키가 비어있을 때만 사용됩니다. 비워두면 production 에서 Sender ID 로부터 기본 aws-pool/aws-provider 를 사용해 자동 생성됩니다. 비표준 풀 오버라이드: //iam.googleapis.com/projects/{PROJECT_NUMBER}/locations/global/workloadIdentityPools/{POOL_ID}/providers/{PROVIDER_ID}."
+          fcm_wif_credential_source: "선택적 WIF 오버라이드: AWS credential source JSON (IMDS 엔드포인트). 비워두면 기본 AWS IMDS 엔드포인트를 사용합니다. 오버라이드 예시: {\"environment_id\":\"aws1\",\"region_url\":\"http://169.254.169.254/latest/meta-data/placement/availability-zone\",\"url\":\"http://169.254.169.254/latest/meta-data/iam/security-credentials\",\"regional_cred_verification_url\":\"https://sts.{region}.amazonaws.com?Action=GetCallerIdentity&Version=2011-06-15\"}"
+          fcm_wif_service_account_email: "WIF 로 임퍼소네이션할 GCP 서비스 계정 이메일 (예: firebase-sender@PROJECT.iam.gserviceaccount.com). WIF 모드에서만 사용됩니다. 레거시 FIREBASE_SERVICE_ACCOUNT 환경변수를 폴백으로 읽습니다."
+          fcm_sender_id: "웹 푸시 전용: Firebase JS SDK 의 messagingSenderId (프로젝트 번호). 브라우저 푸시 구독에 필수. Firebase Console → 프로젝트 설정 → 클라우드 메시징 → 발신자 ID 에서 확인."
+          fcm_vapid_key: "웹 푸시 전용: 브라우저 푸시 구독용 VAPID 공개키. Firebase Console → 프로젝트 설정 → 클라우드 메시징 → 웹 구성 → 웹 푸시 인증서에서 생성."
+          fcm_server_key: "Legacy FCM 서버 키 (Google 에서 deprecated). 구버전 HTTP v0 API 를 쓰는 클라이언트가 있을 때만 설정하세요."
+          firebase_api_key: "웹 푸시 전용: Firebase JS SDK apiKey. 브라우저 Firebase 초기화 (웹 푸시, Auth, Firestore) 에 필수. Firebase Console → 프로젝트 설정 → 일반 → 웹 API 키에서 확인."
+          firebase_auth_domain: "웹 푸시 전용: Firebase Auth 리다이렉트 도메인 (보통 {project}.firebaseapp.com). 브라우저에서 Firebase Auth 를 쓸 때만 필요."
+          firebase_app_id: "웹 푸시 전용: Firebase 웹 앱 ID (예: 1:1234:web:abcd...). 브라우저 Firebase 초기화에 필수. Firebase Console → 프로젝트 설정 → 일반 → 내 앱에서 확인."

data/config/locales/landing.en.yml

@@ -0,0 +1,51 @@
+en:
+  collavre:
+    landing:
+      meta:
+        title: "Where Teams Think Together"
+        description: "The collaborative workspace where hierarchical creatives, AI agents, and real-time chat come together. Organize, collaborate, and ship — with AI as your teammate."
+      hero:
+        headline_html: "A platform for both AI agents and people."
+        subline: "Achieve sustainable productivity gains."
+        learn_more: "Learn More"
+      demo:
+        title: "See it in action"
+        placeholder: "Product demo video goes here"
+      problem:
+        title: "Your tools are failing you"
+        notion:
+          title: "Notion"
+          desc: "Docs become graveyards. Nobody edits someone else's page. Search replaces structure."
+        jira:
+          title: "Jira"
+          desc: "Great for tasks, terrible for knowledge. Results never sync back to the wiki. Information overload."
+        slack:
+          title: "Slack"
+          desc: "Conversations vanish in the stream. Flat channel lists explode. Context is lost daily."
+      features:
+        title: "Everything in one living tree"
+        subtitle: "Creatives are hierarchical blocks that organize your work, track progress, and carry context — all at once."
+        tree:
+          title: "Hierarchical Creatives"
+          desc: "Organize work as a tree. Drag, link, and reuse blocks across projects. Progress rolls up automatically."
+        ai:
+          title: "AI Agents as Teammates"
+          desc: "Add AI agents to any conversation. They review, collaborate, and respond to @mentions — just like a colleague."
+        context:
+          title: "Context System"
+          desc: "Reduce cognitive load for people, and inject the knowledge and skills AI needs."
+        chat:
+          title: "Real-time Chat & Topics"
+          desc: "Every creative has a chat. Organize conversations with topics, move messages between creatives, and keep discussions focused."
+        integrations:
+          title: "Integrations"
+          desc: "GitHub PRs auto-analyzed, Slack messages synced, Google Calendar events linked, MCP tools built-in."
+        progress:
+          title: "Live Progress"
+          desc: "Track completion from leaf to root. Filter by tags, plans, or status. See your project's real health at a glance."
+      cta:
+        title: "Ready to collaborate smarter?"
+        subtitle: "Start organizing your work with AI-powered context."
+        start: "Get Started"
+      footer:
+        rights: "All rights reserved."

data/config/locales/landing.ko.yml

@@ -0,0 +1,51 @@
+ko:
+  collavre:
+    landing:
+      meta:
+        title: "팀이 함께 생각하는 곳"
+        description: "계층형 크리에이티브, AI 에이전트, 실시간 채팅이 하나로. 체계적으로 정리하고, 협업하고, AI와 함께 완성하세요."
+      hero:
+        headline_html: "AI 에이전트와 사람 모두의 플랫폼."
+        subline: "지속 가능한 생산성 향상을 이루세요."
+        learn_more: "알아보기"
+      demo:
+        title: "직접 확인하세요"
+        placeholder: "실제 작동 화면이 들어갈 자리입니다"
+      problem:
+        title: "기존 도구의 한계"
+        notion:
+          title: "Notion"
+          desc: "문서는 무덤이 됩니다. 남의 페이지를 고치기 꺼려하고, 검색이 구조를 대체합니다."
+        jira:
+          title: "Jira"
+          desc: "작업 관리는 좋지만 지식 관리는 안 됩니다. 결과물이 위키로 돌아오지 않습니다."
+        slack:
+          title: "Slack"
+          desc: "대화가 흘러가 버립니다. 채널은 폭발적으로 늘어나고, 맥락은 매일 사라집니다."
+      features:
+        title: "하나의 살아있는 트리로"
+        subtitle: "크리에이티브는 작업을 정리하고, 진행률을 추적하며, 맥락을 전달하는 계층형 블록입니다."
+        tree:
+          title: "계층형 크리에이티브"
+          desc: "작업을 트리로 구성하세요. 드래그, 링크, 재사용이 자유롭고 진행률은 자동 계산됩니다."
+        ai:
+          title: "AI 에이전트 팀원"
+          desc: "AI 에이전트를 대화에 추가하세요. 리뷰, 협업, @멘션 응답 — 동료처럼 일합니다."
+        context:
+          title: "컨텍스트 시스템"
+          desc: "사람의 인지 부하를 줄이고, AI에게 필요한 지식과 Skill을 주입합니다."
+        chat:
+          title: "실시간 채팅 & 토픽"
+          desc: "모든 크리에이티브에 채팅이 있습니다. 토픽으로 대화를 정리하고, 메시지를 다른 크리에이티브로 옮기세요."
+        integrations:
+          title: "외부 연동"
+          desc: "GitHub PR 자동 분석, Slack 동기화, Google Calendar 연동, MCP 도구 내장."
+        progress:
+          title: "실시간 진행률"
+          desc: "리프부터 루트까지 완료율 추적. 태그, 계획, 상태별 필터. 프로젝트 건강도를 한눈에."
+      cta:
+        title: "더 똑똑하게 협업할 준비 되셨나요?"
+        subtitle: "AI 기반 컨텍스트로 작업을 정리하세요."
+        start: "시작하기"
+      footer:
+        rights: "모든 권리 보유."

data/config/routes.rb

@@ -1,4 +1,7 @@
 Collavre::Engine.routes.draw do
+  # Landing page
+  get "landing", to: "landing#show"
+
   # Authentication routes
   resource :session, only: [ :new, :create, :destroy ]
   resources :passwords, param: :token, only: [ :new, :create, :edit, :update ]
@@ -28,8 +31,13 @@ Collavre::Engine.routes.draw do
   match "/auth/google_oauth2/callback", to: "google_auth#callback", via: [ :get, :post ]
 
   delete "/attachments/:signed_id", to: "attachments#destroy", as: :attachment
+  get "/public-assets/blobs/:signed_id/*filename",
+      to: "public_assets#show",
+      as: :public_asset,
+      format: false
 
   resources :calendar_events, only: [ :destroy ]
+  resources :channels, only: [ :destroy ]
   resources :contacts, only: [ :destroy ]
   resources :devices, only: [ :create ]
 
@@ -50,6 +58,7 @@ Collavre::Engine.routes.draw do
     end
   end
   resources :creatives do
+    resources :attachments, only: [ :create ], module: :creatives
     resources :creative_shares, only: [ :index, :create, :update, :destroy ]
     resources :invitations, only: [ :update, :destroy ], controller: "creative_invitations"
     resources :topics, only: [ :index, :create, :update, :destroy ] do
@@ -58,6 +67,7 @@ Collavre::Engine.routes.draw do
         get :next_name
       end
       member do
+        get :channel_chips
         patch :move
         patch :archive
         patch :unarchive
@@ -68,6 +78,7 @@ Collavre::Engine.routes.draw do
       member do
         post :convert
         post :approve
+        post :deny
         patch :update_action
         delete :reactions, to: "comments/reactions#destroy"
         get :download_images
@@ -127,6 +138,16 @@ Collavre::Engine.routes.draw do
   patch "/creatives/:creative_id/user_creative_preferences/update_last_topic", to: "user_creative_preferences#update_last_topic", as: :update_last_topic
   post "/comment_read_pointers/update", to: "comment_read_pointers#update"
 
+  # Agent API (Claude Channel MCP plugin)
+  namespace :api do
+    namespace :v1 do
+      post "agent/register", to: "agents#register"
+      post "agent/reply", to: "agents#reply"
+      post "agent/notify", to: "agents#notify"
+      delete "agent/:id", to: "agents#destroy"
+    end
+  end
+
   # Admin settings & orchestration
   scope "/admin", as: :admin do
     get "/", to: "admin/settings#index", as: :settings
@@ -134,5 +155,14 @@ Collavre::Engine.routes.draw do
     get "/uiux", to: "admin/settings#uiux", as: :uiux
     patch "/uiux", to: "admin/settings#update_uiux"
     resource :orchestration, only: [ :show, :update ], controller: "admin/orchestration"
+
+    resources :integrations, only: [ :index ], param: :key, controller: "admin/integrations" do
+      collection do
+        patch :bulk_update
+      end
+      member do
+        delete :reset
+      end
+    end
   end
 end

data/db/migrate/20260526000000_create_channels.rb

@@ -0,0 +1,42 @@
+class CreateChannels < ActiveRecord::Migration[8.1]
+  def up
+    postgres = connection.adapter_name == "PostgreSQL"
+
+    create_table :channels do |t|
+      t.string :type, null: false
+      t.references :topic, null: false, foreign_key: { to_table: :topics }, index: true
+      if postgres
+        t.jsonb :config, null: false, default: {}
+      else
+        t.json :config, null: false, default: {}
+      end
+      t.integer :state, null: false, default: 0
+      t.string :latest_label
+      t.string :latest_link
+      t.datetime :last_event_at
+      t.timestamps
+    end
+
+    if postgres
+      add_index :channels, :config, using: :gin
+      add_index :channels, :type
+      # Concurrent webhook safety: a single PR may emit pull_request.opened twice
+      # back-to-back (or auto-attach can race with pr_monitor). Without this
+      # constraint, the dispatch loop would inject every event N times.
+      execute <<~SQL
+        CREATE UNIQUE INDEX index_channels_on_type_topic_repo_pr
+        ON channels (type, topic_id, (config->>'repo_full_name'), (config->>'pr_number'))
+      SQL
+    else
+      add_index :channels, :type
+      execute <<~SQL
+        CREATE UNIQUE INDEX index_channels_on_type_topic_repo_pr
+        ON channels (type, topic_id, json_extract(config, '$.repo_full_name'), json_extract(config, '$.pr_number'))
+      SQL
+    end
+  end
+
+  def down
+    drop_table :channels
+  end
+end

data/db/migrate/20260527000000_add_dismissed_at_to_channels.rb

@@ -0,0 +1,6 @@
+class AddDismissedAtToChannels < ActiveRecord::Migration[8.1]
+  def change
+    add_column :channels, :dismissed_at, :datetime
+    add_index :channels, :dismissed_at
+  end
+end

data/db/migrate/20260527000100_backfill_dismissed_at_for_legacy_detached_channels.rb

@@ -0,0 +1,28 @@
+class BackfillDismissedAtForLegacyDetachedChannels < ActiveRecord::Migration[8.1]
+  # Chips are now rendered via `not_dismissed` (dismissed_at IS NULL) instead
+  # of `state = active`. Without a backfill, any channel that was already
+  # detached pre-upgrade — user clicked X under the old flow, or the PR auto-
+  # detached on close — would reappear as a chip with the default-open badge
+  # the first time the new view runs. Mark legacy detached rows as dismissed
+  # using their last-touched timestamp as a best-effort dismissed_at.
+  #
+  # Idempotent: the WHERE clause skips rows that already have dismissed_at.
+  # Scoped to GithubPrChannel because the dismiss-on-detach UI ships only for
+  # PR chips. Future Channel STI subtypes opt in by adding their own backfill
+  # or by being created post-upgrade.
+  def up
+    execute <<~SQL.squish
+      UPDATE channels
+      SET dismissed_at = COALESCE(updated_at, CURRENT_TIMESTAMP)
+      WHERE state = 1
+        AND dismissed_at IS NULL
+        AND type = 'CollavreGithub::GithubPrChannel'
+    SQL
+  end
+
+  def down
+    # No-op: we can't distinguish backfilled rows from rows the user actually
+    # dismissed at the exact same timestamp, and leaving dismissed_at populated
+    # on rollback is harmless.
+  end
+end

data/db/migrate/20260528000000_add_preview_channel_unique_index.rb

@@ -0,0 +1,31 @@
+class AddPreviewChannelUniqueIndex < ActiveRecord::Migration[8.1]
+  def up
+    postgres = connection.adapter_name == "PostgreSQL"
+
+    # Mirror the PR-channel uniqueness guarantee for preview channels: a topic
+    # has at most one PreviewChannel per worktree_id. Without this, a racing
+    # preview_attach (e.g. concurrent CI + skill calls) could land two rows
+    # for the same worktree and the chip would render twice. `type` is
+    # included so the partial index does not collide with other channel
+    # subtypes that happen to store a `worktree_id` in their config.
+    if postgres
+      execute <<~SQL
+        CREATE UNIQUE INDEX index_channels_on_topic_preview_worktree
+        ON channels (topic_id, (config->>'worktree_id'))
+        WHERE type = 'Collavre::PreviewChannel'
+      SQL
+    else
+      execute <<~SQL
+        CREATE UNIQUE INDEX index_channels_on_topic_preview_worktree
+        ON channels (topic_id, json_extract(config, '$.worktree_id'))
+        WHERE type = 'Collavre::PreviewChannel'
+      SQL
+    end
+  end
+
+  def down
+    if connection.index_exists?(:channels, nil, name: "index_channels_on_topic_preview_worktree")
+      execute "DROP INDEX index_channels_on_topic_preview_worktree"
+    end
+  end
+end

data/db/migrate/20260529000000_add_primary_agent_id_to_topics.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+class AddPrimaryAgentIdToTopics < ActiveRecord::Migration[8.0]
+  def up
+    add_column :topics, :primary_agent_id, :integer
+    add_index :topics, :primary_agent_id
+
+    # Migrate existing data from orchestrator_policies using ActiveRecord (adapter-agnostic)
+    Collavre::OrchestratorPolicy
+      .where(policy_type: "arbitration", scope_type: "Topic", enabled: true)
+      .find_each do |policy|
+        agent_id = policy.config&.dig("primary_agent_id")
+        next unless agent_id.present?
+
+        Collavre::Topic.where(id: policy.scope_id).update_all(primary_agent_id: agent_id)
+      end
+
+    # Remove migrated topic-scoped arbitration policies
+    Collavre::OrchestratorPolicy
+      .where(scope_type: "Topic", policy_type: "arbitration")
+      .delete_all
+  end
+
+  def down
+    # Re-create orchestrator_policies from topics with primary_agent_id
+    Collavre::Topic.where.not(primary_agent_id: nil).find_each do |topic|
+      Collavre::OrchestratorPolicy.create!(
+        policy_type: "arbitration",
+        scope_type: "Topic",
+        scope_id: topic.id,
+        config: { "strategy" => "primary_first", "primary_agent_id" => topic.primary_agent_id },
+        priority: 10,
+        enabled: true
+      )
+    end
+
+    remove_index :topics, :primary_agent_id
+    remove_column :topics, :primary_agent_id
+  end
+end

data/db/migrate/20260529100000_create_integration_settings.rb

@@ -0,0 +1,15 @@
+class CreateIntegrationSettings < ActiveRecord::Migration[8.1]
+  def change
+    create_table :integration_settings do |t|
+      t.string  :key, null: false
+      t.text    :value
+      t.string  :category, null: false
+      t.boolean :sensitive, null: false, default: true
+
+      t.timestamps
+    end
+
+    add_index :integration_settings, :key, unique: true
+    add_index :integration_settings, :category
+  end
+end

data/db/migrate/20260609000000_drop_action_text_rich_texts.rb

@@ -0,0 +1,20 @@
+# Drops the dead ActionText table. Creatives moved their rich text to the
+# `creatives.description` column (see 20251126040752_add_description_to_creatives),
+# and no model declares `has_rich_text` anymore, so this table is unused.
+class DropActionTextRichTexts < ActiveRecord::Migration[8.1]
+  def up
+    drop_table :action_text_rich_texts
+  end
+
+  def down
+    create_table :action_text_rich_texts do |t|
+      t.string :name, null: false
+      t.text :body
+      t.references :record, null: false, polymorphic: true, index: false
+
+      t.timestamps
+
+      t.index [ :record_type, :record_id, :name ], name: "index_action_text_rich_texts_uniqueness", unique: true
+    end
+  end
+end

data/db/migrate/20260609005000_add_session_id_to_topics.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+# Claude Channel Agent/Session split: a Session (one Claude Code session) maps
+# to one Topic, identified by a stable session_id (derived per cwd by the
+# plugin, stable across --resume). The Agent (ai_user) is now shared across a
+# human's sessions, so the topic can no longer be located by the per-agent name
+# alone — multiple session topics share one primary_agent. session_id is that
+# per-session key.
+class AddSessionIdToTopics < ActiveRecord::Migration[8.0]
+  def change
+    add_column :topics, :session_id, :string
+    # Look up a session topic by (primary_agent_id, session_id) on re-register.
+    add_index :topics, [ :primary_agent_id, :session_id ],
+              name: "index_topics_on_primary_agent_and_session"
+  end
+end

data/db/migrate/20260609010000_create_agent_subscriptions.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+# Presence rows for Claude Channel session subscriptions. One shared agent can
+# now have many concurrent live sessions; routing_expression must stay active
+# while ANY of them is subscribed. A single routing_subscription_token column
+# (last-write-wins) cannot represent N subscribers — one session's unsubscribe
+# would clear routing for a still-live sibling. Each live subscription gets a
+# row here; routing turns off only when the last row is removed.
+class CreateAgentSubscriptions < ActiveRecord::Migration[8.0]
+  def change
+    create_table :agent_subscriptions do |t|
+      t.integer :agent_id, null: false
+      t.string :token, null: false
+      t.timestamps
+    end
+    add_index :agent_subscriptions, :agent_id
+    add_index :agent_subscriptions, :token, unique: true
+  end
+end

data/db/migrate/20260609020000_add_last_seen_at_to_agent_subscriptions.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+# Liveness heartbeat column for Claude Channel presence rows. Rows are only
+# deleted by AgentChannel#unsubscribed, so a Puma/ActionCable crash or deploy
+# orphans a row — and presence-gated routing would then stay active forever,
+# dispatching into a dead stream. last_seen_at is refreshed by the channel's
+# periodic heartbeat; a row whose last_seen_at is older than the staleness
+# window is treated as dead (ignored by the live scope, reaped opportunistically).
+class AddLastSeenAtToAgentSubscriptions < ActiveRecord::Migration[8.0]
+  def up
+    add_column :agent_subscriptions, :last_seen_at, :datetime
+    # Backfill existing rows from created_at so a row written before this
+    # migration is considered live until its next heartbeat (or stale-reap).
+    execute "UPDATE agent_subscriptions SET last_seen_at = created_at WHERE last_seen_at IS NULL"
+    change_column_null :agent_subscriptions, :last_seen_at, false
+    add_index :agent_subscriptions, :last_seen_at
+  end
+
+  def down
+    remove_index :agent_subscriptions, :last_seen_at
+    remove_column :agent_subscriptions, :last_seen_at
+  end
+end

data/db/migrate/20260609030000_add_session_id_to_agent_subscriptions.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+# A shared agent fans out to many concurrent sessions, each with its own
+# presence row. The HTTP unregister path (DELETE /api/v1/agent/:id) needs to
+# drop ONLY the exiting session's row before deciding whether a sibling is
+# still live — otherwise the plugin's close-WS-then-DELETE ordering lets a
+# session's own still-live row masquerade as a sibling and skip the
+# last-session teardown. The WS token is server-minted and unknown to the HTTP
+# client; session_id (stable across --resume, sent by the plugin) is the
+# identity the DELETE can correlate to. Nullable: topic-stream/legacy
+# subscribers have no session_id.
+class AddSessionIdToAgentSubscriptions < ActiveRecord::Migration[8.0]
+  def change
+    add_column :agent_subscriptions, :session_id, :string
+    add_index :agent_subscriptions, [ :agent_id, :session_id ]
+  end
+end

data/db/migrate/20260609190659_backfill_creative_files_into_description.rb

@@ -0,0 +1,24 @@
+class BackfillCreativeFilesIntoDescription < ActiveRecord::Migration[8.1]
+  disable_ddl_transaction!
+
+  # Description HTML is now the source of truth for creative.files (see
+  # Collavre::Creative::Describable#reconcile_description_attachments). Existing
+  # creatives may have blobs attached to creative.files that are NOT referenced
+  # in their description (legacy MCP/console attaches). Embed those orphan blobs
+  # into the description so the first reconcile-driven save does not detach them.
+  #
+  # Idempotent: re-running embeds nothing already referenced. Non-destructive:
+  # only ADDS embed nodes; the down migration is a no-op.
+  def up
+    Collavre::Creative.reset_column_information
+    Collavre::Creative.where.not(description: nil).find_each(batch_size: 200) do |creative|
+      next unless creative.files.attached?
+
+      Collavre::AttachmentBackfill.embed_orphans!(creative)
+    end
+  end
+
+  def down
+    # No-op: embedded media nodes are non-destructive and idempotent.
+  end
+end

data/db/seeds.rb

@@ -0,0 +1,19 @@
+module Collavre
+  module ChannelBotSeed
+    def self.call
+      email = Channel::BOT_EMAIL
+      name  = Channel::BOT_NAME
+      user = User.find_or_initialize_by(email: email)
+      user.name = name
+      user.password = SecureRandom.hex(32) if user.new_record?
+      user.email_verified_at ||= Time.current
+      user.searchable = false if user.respond_to?(:searchable=)
+      user.llm_vendor = nil
+      user.save!
+      Rails.logger.info "[Collavre] Channel bot user ensured: #{email}"
+      user
+    end
+  end
+end
+
+Collavre::ChannelBotSeed.call