@agent-team-foundation/first-tree-hub 0.14.5 → 0.14.6

package/dist/drizzle/0008_uuid_identity.sql

@@ -1,12 +0,0 @@
--- Agent identity refactoring: id → uuid (PK) + name (human-readable, per-org unique)
--- Run BEFORE the data migration script (scripts/migrate-uuid.ts).
-
--- 1. Add name column
-ALTER TABLE "agents" ADD COLUMN "name" text;
-
--- 2. Rename id → uuid (PG auto-updates FK constraints referencing this column)
-ALTER TABLE "agents" RENAME COLUMN "id" TO "uuid";
-
--- 3. Add composite unique constraint (org + name)
--- NULLs are distinct in PG unique constraints, so deleted agents (name=NULL) don't conflict
-ALTER TABLE "agents" ADD CONSTRAINT "uq_agents_org_name" UNIQUE("organization_id", "name");

package/dist/drizzle/0009_agent_runtime_m1.sql

@@ -1,31 +0,0 @@
--- M1: Agent Runtime — Process Awareness
--- New clients table + agent_presence runtime columns
-
-CREATE TABLE IF NOT EXISTS "clients" (
-	"id" text PRIMARY KEY NOT NULL,
-	"status" text DEFAULT 'disconnected' NOT NULL,
-	"sdk_version" text,
-	"hostname" text,
-	"os" text,
-	"instance_id" text,
-	"connected_at" timestamp with time zone,
-	"last_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"metadata" jsonb
-);
-
-ALTER TABLE "agent_presence" ADD COLUMN "client_id" text;
-ALTER TABLE "agent_presence" ADD COLUMN "runtime_type" text;
-ALTER TABLE "agent_presence" ADD COLUMN "runtime_version" text;
-ALTER TABLE "agent_presence" ADD COLUMN "runtime_state" text;
-ALTER TABLE "agent_presence" ADD COLUMN "runtime_description" text;
-ALTER TABLE "agent_presence" ADD COLUMN "active_sessions" integer;
-ALTER TABLE "agent_presence" ADD COLUMN "total_sessions" integer;
-ALTER TABLE "agent_presence" ADD COLUMN "error_message" text;
-ALTER TABLE "agent_presence" ADD COLUMN "task_ref" text;
-ALTER TABLE "agent_presence" ADD COLUMN "runtime_updated_at" timestamp with time zone;
-
-DO $$ BEGIN
-  ALTER TABLE "agent_presence" ADD CONSTRAINT "agent_presence_client_id_clients_id_fk" FOREIGN KEY ("client_id") REFERENCES "public"."clients"("id") ON DELETE set null ON UPDATE no action;
-EXCEPTION
-  WHEN duplicate_object THEN null;
-END $$;

package/dist/drizzle/0010_cloud_multi_tenancy.sql

@@ -1,34 +0,0 @@
--- Cloud Multi-Tenancy Phase 1: organizations table + agents/chats FK + new agent fields
-
--- 1. Create organizations table
-CREATE TABLE IF NOT EXISTS "organizations" (
-  "id" text PRIMARY KEY NOT NULL,
-  "display_name" text NOT NULL,
-  "max_agents" integer NOT NULL DEFAULT 0,
-  "max_messages_per_minute" integer NOT NULL DEFAULT 0,
-  "features" jsonb NOT NULL DEFAULT '{}'::jsonb,
-  "created_at" timestamptz NOT NULL DEFAULT now(),
-  "updated_at" timestamptz NOT NULL DEFAULT now()
-);
-
--- 2. Insert default organization (idempotent — skip if exists)
-INSERT INTO "organizations" ("id", "display_name")
-VALUES ('default', 'Default Organization')
-ON CONFLICT ("id") DO NOTHING;
-
--- 3. Add FK from agents.organization_id → organizations.id
-ALTER TABLE "agents"
-  ADD CONSTRAINT "agents_organization_id_organizations_id_fk"
-  FOREIGN KEY ("organization_id") REFERENCES "organizations"("id")
-  ON DELETE NO ACTION ON UPDATE NO ACTION;
-
--- 4. Add FK from chats.organization_id → organizations.id
-ALTER TABLE "chats"
-  ADD CONSTRAINT "chats_organization_id_organizations_id_fk"
-  FOREIGN KEY ("organization_id") REFERENCES "organizations"("id")
-  ON DELETE NO ACTION ON UPDATE NO ACTION;
-
--- 5. Add new columns to agents
-ALTER TABLE "agents" ADD COLUMN "source" text;
-ALTER TABLE "agents" ADD COLUMN "cloud_user_id" text;
-ALTER TABLE "agents" ADD COLUMN "public" boolean NOT NULL DEFAULT false;

package/dist/drizzle/0011_org_uuid_pk.sql

@@ -1,22 +0,0 @@
--- Organization UUID PK: add name column with unique constraint, drop old defaults
-
--- Step 1: Add name column
-ALTER TABLE "organizations" ADD COLUMN "name" text;
---> statement-breakpoint
-
--- Step 2: Backfill name from id for existing rows
-UPDATE "organizations" SET "name" = "id" WHERE "name" IS NULL;
---> statement-breakpoint
-
--- Step 3: Make name NOT NULL
-ALTER TABLE "organizations" ALTER COLUMN "name" SET NOT NULL;
---> statement-breakpoint
-
--- Step 4: Add UNIQUE constraint on name
-ALTER TABLE "organizations" ADD CONSTRAINT "organizations_name_unique" UNIQUE("name");
---> statement-breakpoint
-
--- Step 5: Drop old default values on organization_id columns (was 'default' slug)
-ALTER TABLE "agents" ALTER COLUMN "organization_id" DROP DEFAULT;
---> statement-breakpoint
-ALTER TABLE "chats" ALTER COLUMN "organization_id" DROP DEFAULT;

package/dist/drizzle/0012_session_level_state.sql

@@ -1,19 +0,0 @@
--- Session-level state reporting: new session table + drop unused presence columns
-
-CREATE TABLE "agent_chat_sessions" (
-	"agent_id" text NOT NULL,
-	"chat_id" text NOT NULL,
-	"state" text NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "agent_chat_sessions_agent_id_chat_id_pk" PRIMARY KEY("agent_id","chat_id")
-);
---> statement-breakpoint
-ALTER TABLE "agent_chat_sessions" ADD CONSTRAINT "agent_chat_sessions_agent_id_agents_uuid_fk" FOREIGN KEY ("agent_id") REFERENCES "public"."agents"("uuid") ON DELETE cascade ON UPDATE no action;
---> statement-breakpoint
-ALTER TABLE "agent_chat_sessions" ADD CONSTRAINT "agent_chat_sessions_chat_id_chats_id_fk" FOREIGN KEY ("chat_id") REFERENCES "public"."chats"("id") ON DELETE cascade ON UPDATE no action;
---> statement-breakpoint
-ALTER TABLE "agent_presence" DROP COLUMN IF EXISTS "runtime_description";
---> statement-breakpoint
-ALTER TABLE "agent_presence" DROP COLUMN IF EXISTS "error_message";
---> statement-breakpoint
-ALTER TABLE "agent_presence" DROP COLUMN IF EXISTS "task_ref";

package/dist/drizzle/0013_hub_tasks.sql

@@ -1,38 +0,0 @@
--- Hub Task — lightweight work units (tasks + task_chats)
-
-CREATE TABLE "tasks" (
-	"id" text PRIMARY KEY NOT NULL,
-	"organization_id" text NOT NULL,
-	"title" text NOT NULL,
-	"body" text DEFAULT '' NOT NULL,
-	"status" text NOT NULL,
-	"assignee_agent_id" text,
-	"created_by_type" text NOT NULL,
-	"created_by_id" text NOT NULL,
-	"origin_ref" text,
-	"result" text,
-	"metadata" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"cancelled_at" timestamp with time zone,
-	"cancelled_by_type" text,
-	"cancelled_by_id" text
-);
---> statement-breakpoint
-CREATE TABLE "task_chats" (
-	"task_id" text NOT NULL,
-	"chat_id" text NOT NULL,
-	"linked_by_agent_id" text,
-	"linked_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "task_chats_task_id_chat_id_pk" PRIMARY KEY("task_id","chat_id")
-);
---> statement-breakpoint
-ALTER TABLE "tasks" ADD CONSTRAINT "tasks_organization_id_organizations_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organizations"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "task_chats" ADD CONSTRAINT "task_chats_task_id_tasks_id_fk" FOREIGN KEY ("task_id") REFERENCES "public"."tasks"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "task_chats" ADD CONSTRAINT "task_chats_chat_id_chats_id_fk" FOREIGN KEY ("chat_id") REFERENCES "public"."chats"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "task_chats" ADD CONSTRAINT "task_chats_linked_by_agent_id_agents_uuid_fk" FOREIGN KEY ("linked_by_agent_id") REFERENCES "public"."agents"("uuid") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX "idx_tasks_org_status" ON "tasks" USING btree ("organization_id","status");--> statement-breakpoint
-CREATE INDEX "idx_tasks_assignee_status" ON "tasks" USING btree ("assignee_agent_id","status");--> statement-breakpoint
-CREATE INDEX "idx_tasks_origin_ref" ON "tasks" USING btree ("origin_ref");--> statement-breakpoint
-CREATE INDEX "idx_tasks_org_created_at" ON "tasks" USING btree ("organization_id","created_at");--> statement-breakpoint
-CREATE INDEX "idx_task_chats_chat" ON "task_chats" USING btree ("chat_id");

package/dist/drizzle/0014_drop_task_fks.sql

@@ -1,9 +0,0 @@
--- Drop all FK constraints from the Hub Task tables.
--- Referential integrity for tasks/task_chats is enforced in the service layer;
--- DB-level FKs transfer the cost (cascade surprises, migration friction, test
--- setup complexity) onto the database without adding value here.
-
-ALTER TABLE "tasks" DROP CONSTRAINT IF EXISTS "tasks_organization_id_organizations_id_fk";--> statement-breakpoint
-ALTER TABLE "task_chats" DROP CONSTRAINT IF EXISTS "task_chats_task_id_tasks_id_fk";--> statement-breakpoint
-ALTER TABLE "task_chats" DROP CONSTRAINT IF EXISTS "task_chats_chat_id_chats_id_fk";--> statement-breakpoint
-ALTER TABLE "task_chats" DROP CONSTRAINT IF EXISTS "task_chats_linked_by_agent_id_agents_uuid_fk";

package/dist/drizzle/0015_member_system.sql

@@ -1,34 +0,0 @@
--- Create users table (replaces admin_users)
-CREATE TABLE "users" (
-  "id" text PRIMARY KEY NOT NULL,
-  "username" text NOT NULL,
-  "password_hash" text NOT NULL,
-  "display_name" text NOT NULL,
-  "avatar_url" text,
-  "status" text DEFAULT 'active' NOT NULL,
-  "created_at" timestamp with time zone DEFAULT now() NOT NULL,
-  "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
-  CONSTRAINT "users_username_unique" UNIQUE("username")
-);
-
--- Create members table
-CREATE TABLE "members" (
-  "id" text PRIMARY KEY NOT NULL,
-  "user_id" text NOT NULL REFERENCES "users"("id"),
-  "organization_id" text NOT NULL REFERENCES "organizations"("id"),
-  "agent_id" text NOT NULL REFERENCES "agents"("uuid"),
-  "role" text NOT NULL,
-  "created_at" timestamp with time zone DEFAULT now() NOT NULL,
-  CONSTRAINT "members_agent_id_unique" UNIQUE("agent_id"),
-  CONSTRAINT "uq_members_user_org" UNIQUE("user_id", "organization_id")
-);
-
-CREATE INDEX "idx_members_user" ON "members" ("user_id");
-CREATE INDEX "idx_members_org" ON "members" ("organization_id");
-
--- Add manager_id to agents with FK to members (FK in SQL only — not in Drizzle schema to avoid circular import)
-ALTER TABLE "agents" ADD COLUMN "manager_id" text REFERENCES "members"("id") ON DELETE SET NULL;
-CREATE INDEX "idx_agents_manager" ON "agents" ("manager_id");
-
--- Drop admin_users table
-DROP TABLE "admin_users";

package/dist/drizzle/0016_strange_havok.sql

@@ -1,25 +0,0 @@
-CREATE TABLE "notifications" (
-	"id" text PRIMARY KEY NOT NULL,
-	"organization_id" text NOT NULL,
-	"type" text NOT NULL,
-	"severity" text NOT NULL,
-	"agent_id" text,
-	"chat_id" text,
-	"message" text NOT NULL,
-	"read" boolean DEFAULT false NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "session_outputs" (
-	"id" text PRIMARY KEY NOT NULL,
-	"agent_id" text NOT NULL,
-	"chat_id" text NOT NULL,
-	"content" text DEFAULT '' NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "messages" ADD COLUMN "source" text;--> statement-breakpoint
-CREATE INDEX "idx_notifications_org_created" ON "notifications" USING btree ("organization_id","created_at");--> statement-breakpoint
-CREATE INDEX "idx_notifications_agent" ON "notifications" USING btree ("agent_id");--> statement-breakpoint
-CREATE INDEX "idx_notifications_org_read" ON "notifications" USING btree ("organization_id","read");--> statement-breakpoint
-CREATE INDEX "idx_session_outputs_agent_chat" ON "session_outputs" USING btree ("agent_id","chat_id");

package/dist/drizzle/0017_session_outputs_unique.sql

@@ -1 +0,0 @@
-ALTER TABLE "session_outputs" ADD CONSTRAINT "uq_session_outputs_agent_chat" UNIQUE("agent_id","chat_id");

package/dist/drizzle/0018_agent_visibility.sql

@@ -1,13 +0,0 @@
--- Replace boolean "public" column with text "visibility" column
-ALTER TABLE "agents" ADD COLUMN "visibility" text NOT NULL DEFAULT 'private';--> statement-breakpoint
-
--- Set defaults by agent type
-UPDATE "agents" SET "visibility" = 'organization' WHERE "type" = 'human';--> statement-breakpoint
-UPDATE "agents" SET "visibility" = 'organization' WHERE "type" = 'autonomous_agent';--> statement-breakpoint
-UPDATE "agents" SET "visibility" = 'private' WHERE "type" = 'personal_assistant';--> statement-breakpoint
-
--- Drop old public column
-ALTER TABLE "agents" DROP COLUMN "public";--> statement-breakpoint
-
--- Add index for visibility queries
-CREATE INDEX "idx_agents_visibility_org" ON "agents" USING btree ("organization_id","visibility");

package/dist/drizzle/0019_agent_configs.sql

@@ -1,30 +0,0 @@
--- M1 agent configuration: Hub-managed runtime config table.
--- Creates `agent_configs` and back-fills one row per non-deleted agent so
--- Step 6 can flip Claude Code handler over to read prompt from config without
--- silently dropping the existing `agents.profile` text.
-
-CREATE TABLE IF NOT EXISTS "agent_configs" (
-	"agent_id" text PRIMARY KEY NOT NULL,
-	"version" integer NOT NULL DEFAULT 1,
-	"payload" jsonb NOT NULL,
-	"updated_by" text NOT NULL,
-	"updated_at" timestamp with time zone NOT NULL DEFAULT now()
-);
-
---> statement-breakpoint
-INSERT INTO "agent_configs" ("agent_id", "version", "payload", "updated_by", "updated_at")
-SELECT
-  "uuid",
-  1,
-  jsonb_build_object(
-    'prompt', jsonb_build_object('append', COALESCE("profile", '')),
-    'model', '',
-    'mcpServers', '[]'::jsonb,
-    'env', '[]'::jsonb,
-    'gitRepos', '[]'::jsonb
-  ),
-  'system',
-  now()
-FROM "agents"
-WHERE "status" != 'deleted'
-ON CONFLICT ("agent_id") DO NOTHING;

package/dist/drizzle/0020_unified_user_token.sql

@@ -1,154 +0,0 @@
--- Unified user token milestone — retire agent tokens, authenticate every
--- caller as a user.
---
--- This migration collapses the two-track auth (member JWT + `aghub_*` agent
--- token) into a single member-JWT credential. Three structural changes:
---   1. Drop `agent_tokens` (table + FK cascade).
---   2. Add `clients.user_id` (nullable) — owning user of the physical client.
---   3. Add `agents.client_id` (nullable FK) — pin an agent to the client that
---      runs it. `client_id` is backfilled from `agent_presence`. Rows that
---      cannot be backfilled stay NULL and bind on first WS connect (see
---      `api/agent/ws-client.ts` first-bind path). Originally this migration
---      raised an exception when any non-human agent was unbacked — that
---      gated startup on a data state the operator usually can't fix until
---      the server is up. Relaxed to NOTICE so the loop is broken; runtime
---      enforcement (Rule R-RUN in `services/agent.ts` + `agent-selector.ts`)
---      still rejects unclaimed agents on the request path.
---   4. Make `agents.manager_id` NOT NULL after backfilling the first admin
---      member of each org onto the unmanaged rows.
---
--- There is no compatibility layer: operators stop SDK/CLI processes, run
--- `db:migrate`, then re-login via `first-tree-hub connect`. See the proposal
--- "unified-user-token.20260417" for the full upgrade runbook.
---
--- NOTE: Do NOT wrap this file in BEGIN;/COMMIT;. The Drizzle migrator already
--- runs every pending migration inside a single outer transaction, so a nested
--- BEGIN raises WARNING 25001 and the inner COMMIT prematurely closes the
--- outer transaction — which prevents the migration hash from being recorded
--- and causes the server to loop through the same failure on every restart.
-
-DROP TABLE IF EXISTS "agent_tokens";
---> statement-breakpoint
-
--- ---------------------------------------------------------------------------
--- clients.user_id — nullable FK to users(id).
--- Nullable so legacy rows (created before handshake auth) keep existing;
--- the WS handshake claims them on first re-register under a JWT.
--- ---------------------------------------------------------------------------
-ALTER TABLE "clients"
-  ADD COLUMN IF NOT EXISTS "user_id" text REFERENCES "users"("id") ON DELETE SET NULL;
---> statement-breakpoint
-
-CREATE INDEX IF NOT EXISTS "idx_clients_user" ON "clients" ("user_id");
---> statement-breakpoint
-
--- ---------------------------------------------------------------------------
--- agents.client_id — pin an agent to the physical client that runs it.
--- ---------------------------------------------------------------------------
-ALTER TABLE "agents"
-  ADD COLUMN IF NOT EXISTS "client_id" text REFERENCES "clients"("id") ON DELETE RESTRICT;
---> statement-breakpoint
-
--- Copy last-bound client from agent_presence.
-UPDATE "agents" a
-SET "client_id" = ap."client_id"
-FROM "agent_presence" ap
-WHERE ap."agent_id" = a."uuid"
-  AND ap."client_id" IS NOT NULL
-  AND a."client_id" IS NULL;
---> statement-breakpoint
-
--- Surface (do not block) any non-deleted non-human agent still missing a
--- client_id after the backfill. They will sit in an "unclaimed" state until
--- a client connects via WS and the first-bind path in
--- `api/agent/ws-client.ts` claims them. Runtime guards reject HTTP / WS
--- requests for those agents in the meantime.
-DO $$
-DECLARE
-  unpinned_count integer;
-BEGIN
-  SELECT COUNT(*) INTO unpinned_count
-  FROM "agents"
-  WHERE "client_id" IS NULL
-    AND "type" <> 'human'
-    AND "status" <> 'deleted';
-
-  IF unpinned_count > 0 THEN
-    RAISE NOTICE
-      'unified-user-token migration: % non-human agents have no client_id after backfill; '
-      'they will be claimed on first WS bind (see ws-client.ts first-bind path)',
-      unpinned_count;
-  END IF;
-END $$;
---> statement-breakpoint
-
-CREATE INDEX IF NOT EXISTS "idx_agents_client" ON "agents" ("client_id");
---> statement-breakpoint
-
--- ---------------------------------------------------------------------------
--- agents.manager_id — backfill then enforce NOT NULL.
--- Human agents own their members row, so self-assign via members.
--- Non-human agents get the first admin member in their org.
--- ---------------------------------------------------------------------------
-
--- Human agents: self-assign to their own member row.
-UPDATE "agents" a
-SET "manager_id" = m."id"
-FROM "members" m
-WHERE m."agent_id" = a."uuid"
-  AND a."manager_id" IS NULL
-  AND a."type" = 'human';
---> statement-breakpoint
-
--- Non-human agents: first admin in org, ordered by created_at asc.
-UPDATE "agents" a
-SET "manager_id" = m."id"
-FROM (
-  SELECT DISTINCT ON (m."organization_id")
-    m."id" AS id,
-    m."organization_id" AS organization_id
-  FROM "members" m
-  WHERE m."role" = 'admin'
-  ORDER BY m."organization_id", m."created_at" ASC
-) m
-WHERE a."organization_id" = m."organization_id"
-  AND a."manager_id" IS NULL;
---> statement-breakpoint
-
--- Fail loudly if any agent still lacks a manager.
-DO $$
-DECLARE
-  orphan_count integer;
-BEGIN
-  SELECT COUNT(*) INTO orphan_count
-  FROM "agents"
-  WHERE "manager_id" IS NULL
-    AND "status" <> 'deleted';
-
-  IF orphan_count > 0 THEN
-    RAISE EXCEPTION
-      'unified-user-token migration: % non-deleted agents have no manager_id after backfill; '
-      'create at least one admin member per org, or set agents.manager_id manually, then retry',
-      orphan_count;
-  END IF;
-END $$;
---> statement-breakpoint
-
-ALTER TABLE "agents"
-  ALTER COLUMN "manager_id" SET NOT NULL;
---> statement-breakpoint
-
--- Recreate the manager_id FK as DEFERRABLE INITIALLY DEFERRED so the
--- bootstrap path for a new human agent + member row can run inside a
--- single transaction. The two rows reference each other (agents.manager_id
--- → members.id, members.agent_id → agents.uuid); without deferred FKs the
--- first INSERT always fails the sibling constraint.
-ALTER TABLE "agents"
-  DROP CONSTRAINT IF EXISTS "agents_manager_id_fkey";
---> statement-breakpoint
-
-ALTER TABLE "agents"
-  ADD CONSTRAINT "agents_manager_id_fkey"
-  FOREIGN KEY ("manager_id") REFERENCES "members"("id")
-  ON DELETE SET NULL
-  DEFERRABLE INITIALLY DEFERRED;

package/dist/drizzle/0021_drop_agents_profile.sql

@@ -1,10 +0,0 @@
--- PRD D7: remove `agents.profile` column and all dependent code paths.
--- The column was backfilled into `agent_configs.payload.prompt.append` by
--- migration 0018. After this migration, agent behavior instructions live
--- exclusively in `agent_configs`; the `profile` column is dead weight.
---
--- Callers that used to read/write `profile` have been updated in the same
--- release; operators must deploy this migration together with the matching
--- code change — no compatibility layer.
-
-ALTER TABLE "agents" DROP COLUMN IF EXISTS "profile";

package/dist/drizzle/0022_session_events.sql

@@ -1,32 +0,0 @@
--- NC2 (workspace-redesign S10): drop `session_outputs`, add `session_events`.
---
--- The old table held one `content` row per (agent, chat) with string
--- concatenation on upsert. The new table captures structured events
--- (`tool_call` / `error`) with a monotonic per-chat `seq` and a jsonb
--- payload. Integrity is enforced in the service layer (Zod discriminated
--- union on insert), so no FK / CHECK here — matches the project rule for
--- new tables.
---
--- Discarding `session_outputs` data is intentional (tech plan decision):
--- no content-migration path, no compatibility shim.
-
-DROP TABLE IF EXISTS "session_outputs" CASCADE;
-
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "session_events" (
-	"id" text PRIMARY KEY NOT NULL,
-	"agent_id" text NOT NULL,
-	"chat_id" text NOT NULL,
-	"seq" integer NOT NULL,
-	"kind" text NOT NULL,
-	"payload" jsonb NOT NULL,
-	"created_at" timestamp with time zone NOT NULL DEFAULT now()
-);
-
---> statement-breakpoint
-CREATE UNIQUE INDEX IF NOT EXISTS "uq_session_events_chat_seq"
-	ON "session_events" ("agent_id", "chat_id", "seq");
-
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "idx_session_events_chat_created"
-	ON "session_events" ("agent_id", "chat_id", "created_at" DESC);

package/dist/drizzle/0023_clients_org_scoping.sql

@@ -1,40 +0,0 @@
--- Multi-tenancy hardening:
---   1. Drop dead column `agents.cloud_user_id` (unused since introduction in
---      0010; never written by any code path).
---   2. Bind every client to exactly one organization via `clients.organization_id`.
---
--- A client is bound to one org for its lifetime — Rule R-RUN and the
--- `client:register` handshake reject cross-org reuse of a clientId. See
--- docs/multi-tenancy-hardening-design.md.
---
--- Backfill strategy (guarded for safety across environments):
---   * Current production: exactly one org → UPDATE fills every row.
---   * Fresh installs / empty DB: clients table is empty → UPDATE is a no-op,
---     SET NOT NULL succeeds on the empty table.
---   * Any environment reaching this migration with multi-org data but
---     unpopulated clients.organization_id: the guard skips the UPDATE, and
---     SET NOT NULL fails loudly rather than misassigning rows to an
---     arbitrary org. Operator must backfill manually, then re-run.
-
-ALTER TABLE "agents" DROP COLUMN "cloud_user_id";
-
---> statement-breakpoint
-ALTER TABLE "clients" ADD COLUMN "organization_id" text;
-
---> statement-breakpoint
-ALTER TABLE "clients"
-	ADD CONSTRAINT "clients_organization_id_organizations_id_fk"
-	FOREIGN KEY ("organization_id") REFERENCES "organizations"("id")
-	ON DELETE no action ON UPDATE no action;
-
---> statement-breakpoint
-UPDATE "clients"
-SET "organization_id" = (SELECT "id" FROM "organizations" LIMIT 1)
-WHERE "organization_id" IS NULL
-	AND (SELECT count(*) FROM "organizations") = 1;
-
---> statement-breakpoint
-ALTER TABLE "clients" ALTER COLUMN "organization_id" SET NOT NULL;
-
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "idx_clients_org" ON "clients" ("organization_id");

package/dist/drizzle/0024_display_name_not_null.sql

@@ -1,31 +0,0 @@
--- Phase 2 of the agent-naming refactor (docs/agent-naming-design.md §4).
---
--- Before this migration, `display_name` was nullable and the web layer
--- silently fell back to `name` for rendering. CLI, server logs, and IM
--- bridges saw raw NULLs. This migration closes the gap in three steps:
---
---   1. Backfill every NULL row with a non-empty label — the agent's `name`
---      when available, else the tombstone literal "[deleted agent]".
---      Important: the third branch must NOT be `uuid`, because UUIDs would
---      surface as human-visible strings in the chat roster and IM bridge.
---      Only `status = 'deleted'` rows can have both `name` and
---      `display_name` NULL (see `deleteAgent` in services/agent.ts), which
---      is why the literal refers to deletion.
---
---   2. Add a temporary empty-string DEFAULT so any old server instance
---      still running during a rolling deploy — i.e. code that doesn't yet
---      default `display_name` in `createAgent` — can INSERT without
---      violating the upcoming NOT NULL. The application code treats an
---      empty string as "no display name" (the Zod read schema accepts it);
---      a follow-up migration can drop the default once the code is fully
---      rolled.
---
---   3. Promote the column to NOT NULL. Combined with the service-level
---      default this closes the hole for new rows too.
-
-UPDATE "agents"
-SET "display_name" = COALESCE("display_name", "name", '[deleted agent]')
-WHERE "display_name" IS NULL;
-
-ALTER TABLE "agents" ALTER COLUMN "display_name" SET DEFAULT '';
-ALTER TABLE "agents" ALTER COLUMN "display_name" SET NOT NULL;

package/dist/drizzle/0025_inbox_silent_entries.sql

@@ -1,53 +0,0 @@
--- Silent inbox entries for missed group-chat context.
---
--- Adds `inbox_entries.notify`, defaulting to true so existing rows continue to
--- behave as "active" deliverables. Group-chat fan-out now writes a row for
--- every non-sender participant — for `mention_only` participants who aren't
--- explicitly @mentioned in the triggering message we set `notify = false` so
--- the row is silently parked. Subsequent active deliveries to the same chat
--- pick up these silent rows and replay them as preceding context, then
--- bulk-ack them so they don't get re-replayed.
---
--- See proposals/group-chat-ux-improvements §1 (silent inbox).
---
--- ──────────────── Indexes ────────────────
---
---   idx_inbox_pending_notify — partial index used by pollInbox's claim.
---     The query is "WHERE inbox_id = ? AND status = 'pending' AND notify = true
---     ORDER BY created_at LIMIT N FOR UPDATE SKIP LOCKED". Without `notify` in
---     the index, a chat that accumulates silent rows (mention_only agent in a
---     chatty group) forces the planner to scan past them before finding the
---     next trigger. Partial index keeps it bounded.
---
---   idx_inbox_chat_silent — used by collectPrecedingContext to walk the
---     silent rows in a single (inbox, chat) bucket between two triggers.
---
--- ──────────────── Operator note ────────────────
---
--- Drizzle migrator wraps every migration file in a single transaction (see the
--- comment block in 0020_unified_user_token.sql), which means we can't use
--- `CREATE INDEX CONCURRENTLY` here — PG rejects it inside a tx. On a small
--- `inbox_entries` table the regular `CREATE INDEX` finishes in <1s and is
--- fine. For a large production table, the runbook is:
---
---   1. Stop applying new migrations briefly.
---   2. Manually run, OUTSIDE a transaction:
---        CREATE INDEX CONCURRENTLY idx_inbox_pending_notify
---          ON inbox_entries (inbox_id, created_at)
---          WHERE status = 'pending' AND notify = true;
---        CREATE INDEX CONCURRENTLY idx_inbox_chat_silent
---          ON inbox_entries (inbox_id, chat_id, notify, status);
---   3. Re-run `pnpm db:migrate`. The `IF NOT EXISTS` clauses below detect
---      the pre-created indexes and skip them.
-
-ALTER TABLE "inbox_entries"
-	ADD COLUMN "notify" boolean DEFAULT true NOT NULL;
-
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "idx_inbox_pending_notify"
-	ON "inbox_entries" ("inbox_id", "created_at")
-	WHERE status = 'pending' AND notify = true;
-
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "idx_inbox_chat_silent"
-	ON "inbox_entries" ("inbox_id", "chat_id", "notify", "status");