@bongos/core 1.17.0

package/migrations/006_pms_v2.sql

@@ -0,0 +1,378 @@
+-- 006_pms_v2.sql — PMS-V2 schema additions
+--
+-- See limitations/pms-v2.md for the king scope file.
+-- See docs/adr/0010-pms-architecture.md for the architecture rationale (carries forward).
+--
+-- This migration adds:
+--   - new columns on existing tables (tasks.kind, tasks.parent_task_id,
+--     tasks.actual_minutes, tasks.scoping_confidence, claims.head_sha,
+--     builders.timezone)
+--   - new tables (achievements, builder_achievements, learnings, idea_inbox,
+--     done_when_criteria, session_pulses)
+--   - new view (tasks_session_fit)
+--   - rebuilt views (claimable_tasks, version_progress) with the new
+--     columns + parent/child rollup semantics
+--   - seeds (8 achievements, V1 + PMS-V2 done-when criteria)
+--
+-- Idempotent: safe to re-run. Each ALTER, CREATE, INSERT uses IF NOT EXISTS
+-- or ON CONFLICT.
+
+-- =========================================================================
+-- 1. New columns on existing tables
+-- =========================================================================
+
+-- builders.timezone — IANA name. Set on first auth from CLI's local TZ.
+ALTER TABLE builders
+  ADD COLUMN IF NOT EXISTS timezone text NOT NULL DEFAULT 'America/New_York';
+
+-- tasks.kind — required category, with auto-classifier escape valve 'unclassified'
+ALTER TABLE tasks ADD COLUMN IF NOT EXISTS kind text NOT NULL DEFAULT 'unclassified';
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'tasks_kind_check'
+  ) THEN
+    ALTER TABLE tasks ADD CONSTRAINT tasks_kind_check
+      CHECK (kind IN (
+        'feature','bug','infra','refactor','spike',
+        'learning-capture','cleanup','decision','blocker-resolution',
+        'unclassified'
+      ));
+  END IF;
+END $$;
+
+-- tasks.parent_task_id — shallow hierarchy (one level deep, enforced in app code)
+ALTER TABLE tasks
+  ADD COLUMN IF NOT EXISTS parent_task_id bigint REFERENCES tasks(id);
+
+CREATE INDEX IF NOT EXISTS idx_tasks_parent ON tasks (parent_task_id);
+
+-- tasks.actual_minutes — wall-clock from session_logs at ship; computed in C4
+ALTER TABLE tasks ADD COLUMN IF NOT EXISTS actual_minutes integer;
+
+-- tasks.scoping_confidence — 1..5 self-reported "how well-scoped is this?"
+ALTER TABLE tasks ADD COLUMN IF NOT EXISTS scoping_confidence integer;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'tasks_scoping_confidence_check'
+  ) THEN
+    ALTER TABLE tasks ADD CONSTRAINT tasks_scoping_confidence_check
+      CHECK (scoping_confidence IS NULL OR scoping_confidence BETWEEN 1 AND 5);
+  END IF;
+END $$;
+
+-- claims.head_sha — git HEAD captured at claim time; used by C3 incidental-work scanner
+ALTER TABLE claims ADD COLUMN IF NOT EXISTS head_sha text;
+
+-- =========================================================================
+-- 2. New tables
+-- =========================================================================
+
+-- achievements — fixed catalog of 8 in V2; new ones require migration + rule
+CREATE TABLE IF NOT EXISTS achievements (
+  id            text PRIMARY KEY,
+  name          text NOT NULL,
+  description   text NOT NULL,
+  icon          text,
+  credit_bonus  integer NOT NULL DEFAULT 0,
+  sort_order    integer NOT NULL DEFAULT 100
+);
+
+-- builder_achievements — unlock ledger; PK enforces "unlock once per builder"
+CREATE TABLE IF NOT EXISTS builder_achievements (
+  builder_id           bigint NOT NULL REFERENCES builders(id),
+  achievement_id       text   NOT NULL REFERENCES achievements(id),
+  unlocked_at          timestamptz NOT NULL DEFAULT now(),
+  unlocked_by_task_id  bigint REFERENCES tasks(id),
+  PRIMARY KEY (builder_id, achievement_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_builder_achievements_builder
+  ON builder_achievements (builder_id);
+
+-- learnings — structured capture of paid-once knowledge
+CREATE TABLE IF NOT EXISTS learnings (
+  id              bigserial PRIMARY KEY,
+  title           text NOT NULL,
+  body_md         text NOT NULL,
+  tags            text[] NOT NULL DEFAULT '{}',
+  related_files   text[] NOT NULL DEFAULT '{}',
+  captured_by     bigint REFERENCES builders(id),
+  source          text,
+  source_ref      text,
+  task_id         bigint REFERENCES tasks(id),
+  created_at      timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_learnings_tags_gin
+  ON learnings USING gin (tags);
+CREATE INDEX IF NOT EXISTS idx_learnings_related_files_gin
+  ON learnings USING gin (related_files);
+CREATE INDEX IF NOT EXISTS idx_learnings_created
+  ON learnings (created_at);
+
+-- Idempotency: same (source, source_ref) skips reinsert, mirroring cost_log
+CREATE UNIQUE INDEX IF NOT EXISTS uniq_learnings_source_ref
+  ON learnings (source, source_ref)
+  WHERE source IS NOT NULL AND source_ref IS NOT NULL;
+
+-- idea_inbox — structured replacement for free-form generative-ideas.md
+CREATE TABLE IF NOT EXISTS idea_inbox (
+  id                  bigserial PRIMARY KEY,
+  title               text NOT NULL,
+  body_md             text NOT NULL DEFAULT '',
+  kind                text NOT NULL DEFAULT 'unclassified'
+                      CHECK (kind IN (
+                        'feature','bug','infra','refactor','spike',
+                        'learning-capture','cleanup','decision','blocker-resolution',
+                        'unclassified'
+                      )),
+  suggested_version   text REFERENCES versions(id),
+  suggested_priority  integer
+                      CHECK (suggested_priority IS NULL OR suggested_priority BETWEEN 1 AND 5),
+  captured_at         timestamptz NOT NULL DEFAULT now(),
+  captured_by         bigint REFERENCES builders(id),
+  status              text NOT NULL DEFAULT 'open'
+                      CHECK (status IN ('open','promoted','discarded','merged')),
+  promoted_to_task_id bigint REFERENCES tasks(id),
+  reviewed_at         timestamptz
+);
+
+CREATE INDEX IF NOT EXISTS idx_idea_inbox_status
+  ON idea_inbox (status);
+CREATE INDEX IF NOT EXISTS idx_idea_inbox_captured_at
+  ON idea_inbox (captured_at);
+
+-- done_when_criteria — per-version structured "is this version done?" gate
+CREATE TABLE IF NOT EXISTS done_when_criteria (
+  id                    bigserial PRIMARY KEY,
+  version_id            text NOT NULL REFERENCES versions(id),
+  criterion_id          text NOT NULL,
+  criterion_md          text NOT NULL,
+  satisfied             boolean NOT NULL DEFAULT false,
+  satisfied_by_task_id  bigint REFERENCES tasks(id),
+  checked_at            timestamptz,
+  sort_order            integer NOT NULL DEFAULT 100,
+  UNIQUE (version_id, criterion_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_done_when_version
+  ON done_when_criteria (version_id);
+
+-- session_pulses — heartbeat for stale-claim detection (C1)
+CREATE TABLE IF NOT EXISTS session_pulses (
+  claim_id        bigint PRIMARY KEY REFERENCES claims(id) ON DELETE CASCADE,
+  builder_id      bigint NOT NULL REFERENCES builders(id),
+  last_pulse_at   timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_session_pulses_last_pulse
+  ON session_pulses (last_pulse_at);
+
+-- =========================================================================
+-- 3. View rebuilds
+-- =========================================================================
+
+-- claimable_tasks: same semantics as 005, but now using SELECT t.* so the
+-- new task columns (kind, parent_task_id, actual_minutes, scoping_confidence)
+-- flow through to API consumers without a future view-rebuild.
+DROP VIEW IF EXISTS claimable_tasks;
+CREATE VIEW claimable_tasks AS
+SELECT t.*
+  FROM tasks t
+ WHERE t.status = 'ready'
+   AND t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\'
+   AND NOT EXISTS (
+     SELECT 1 FROM task_blockers tb WHERE tb.task_id = t.id
+   )
+   AND NOT EXISTS (
+     SELECT 1 FROM claims c
+       JOIN tasks t2 ON t2.id = c.task_id
+      WHERE c.released_at IS NULL
+        AND t2.touches && t.touches
+   );
+
+-- tasks_session_fit (P2): derives session-mode fit + credits-per-minute
+-- from existing automation_tag + manual_degree + blocker presence.
+CREATE OR REPLACE VIEW tasks_session_fit AS
+SELECT t.*,
+  CASE
+    WHEN t.automation_tag = 'overnight-safe' AND COALESCE(t.manual_degree, 5) <= 2
+         AND NOT EXISTS (SELECT 1 FROM task_blockers tb WHERE tb.task_id = t.id)
+      THEN ARRAY['autonomous','check-in','active']
+    WHEN t.automation_tag = 'live-only' OR COALESCE(t.manual_degree, 5) >= 4
+      THEN ARRAY['active']
+    ELSE ARRAY['check-in','active']
+  END AS fits_session_modes,
+  CASE WHEN t.credits_reward > 0 AND t.est_minutes IS NOT NULL AND t.est_minutes > 0
+    THEN ROUND(t.credits_reward::numeric / t.est_minutes, 3)
+    ELSE NULL
+  END AS credits_per_minute
+FROM tasks t;
+
+-- version_progress: rebuilt to count only LEAF tasks (those with no children).
+-- Today no tasks have children, so this is identical in behavior to 005's
+-- view. Once C2 lands, parent tasks become aggregators of their children
+-- and stop being counted directly.
+DROP VIEW IF EXISTS version_progress;
+CREATE VIEW version_progress AS
+SELECT v.id AS version_id,
+       v.name,
+       v.track,
+       v.status,
+       count(*) FILTER (WHERE t.status = 'shipped') AS shipped_count,
+       count(*) AS total_count,
+       COALESCE(sum(
+         CASE WHEN t.status = 'shipped' THEN 6 - COALESCE(t.priority, 5) ELSE 0 END
+       ), 0)::bigint AS shipped_weight,
+       COALESCE(sum(6 - COALESCE(t.priority, 5)), 0)::bigint AS total_weight
+  FROM versions v
+  LEFT JOIN tasks t
+    ON t.version_id = v.id
+   AND (t.title IS NULL OR t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\')
+   AND NOT EXISTS (
+     SELECT 1 FROM tasks child WHERE child.parent_task_id = t.id
+   )
+ GROUP BY v.id, v.name, v.track, v.status;
+
+-- =========================================================================
+-- 4. Seeds: achievements (8 fixed in V2)
+-- =========================================================================
+-- Bonuses: 1c/1c/2c/2c/5c/2c/2c/5c — total possible 20c per builder.
+-- Adjustable later before bringing in another builder (per Lars).
+
+INSERT INTO achievements (id, name, description, icon, credit_bonus, sort_order) VALUES
+  ('first-ship',           'First Ship',
+   'Ship your first task.',
+   '📦', 1, 10),
+  ('first-claim',          'First Claim',
+   'Claim your first task.',
+   '🪙', 1, 20),
+  ('first-parallel-claim', 'First Parallel Claim',
+   'Hold two simultaneous claims; ship both successfully.',
+   '⚓', 2, 30),
+  ('streak-3',             'Streak: 3 Nights',
+   'Ship a task in 3 consecutive local-time nights (≥15min, kind != cleanup).',
+   '🔥', 2, 40),
+  ('streak-7',             'Streak: 7 Nights',
+   'Ship a task in 7 consecutive local-time nights (≥15min, kind != cleanup).',
+   '🌋', 5, 50),
+  ('art-pipeline-shipper', 'Art Pipeline Shipper',
+   'Ship a task whose touches[] include the art/ pipeline.',
+   '🎨', 2, 60),
+  ('pms-shipper',          'PMS Shipper',
+   'Ship a task whose touches[] include src/pms/ or scripts/pms/.',
+   '⚙️', 2, 70),
+  ('breaking-the-100c-bar','Breaking the 100c Bar',
+   'Cross 100 total credits.',
+   '💯', 5, 80)
+ON CONFLICT (id) DO UPDATE
+  SET name         = EXCLUDED.name,
+      description  = EXCLUDED.description,
+      icon         = EXCLUDED.icon,
+      credit_bonus = EXCLUDED.credit_bonus,
+      sort_order   = EXCLUDED.sort_order;
+
+-- =========================================================================
+-- 4b. Pre-seed PMS-V2 + PMS-V3 versions rows (FK dependency for §5 and
+--     for migration 011's done_when backfill).
+-- =========================================================================
+-- 003_pms.sql seeds only V1 + PMS-V1. The §5 seed below FK-references
+-- PMS-V2, and migration 011 expects to UPDATE rows for PMS-V2 and PMS-V3.
+-- On production this works only because the rows were inserted manually
+-- during V2 planning. On a from-scratch DB restore §5 FK-fails before
+-- the chain can complete. Pre-seeding here closes that hole (idea #13).
+--
+-- done_when is left empty here; migration 011 fills it from the king
+-- scope docs. ON CONFLICT DO NOTHING preserves whatever shape these rows
+-- already have on production.
+
+-- Instance-seed guard (task 1704 / ADR 0105): OTB internal versions — must not
+-- seed onto a vanilla / non-owning DB. See scripts/migrate.sh (app.seed_instance_data).
+DO $seed$ BEGIN IF current_setting('app.seed_instance_data', true) IS DISTINCT FROM 'off' THEN
+INSERT INTO versions (id, name, track, status, scope_doc_path, started_at, done_when)
+VALUES
+  ('PMS-V2', 'PMS V2 — methodology overhaul + auto-logging + achievements', 'internal', 'building',
+   'limitations/pms-v2.md', '2026-05-10'::timestamptz, ''),
+  ('PMS-V3', 'PMS V3 — planning', 'internal', 'planning',
+   NULL, '2026-05-10'::timestamptz, '')
+ON CONFLICT (id) DO NOTHING;
+END IF; END $seed$;
+
+-- =========================================================================
+-- 5. Seeds: PMS-V2 done-when criteria (mirrors limitations/pms-v2.md)
+-- =========================================================================
+
+-- Instance-seed guard (task 1704 / ADR 0105): OTB PMS-V2 scope-truth. FK-references
+-- the PMS-V2 version guarded above, so this must skip on a vanilla DB too.
+DO $seed$ BEGIN IF current_setting('app.seed_instance_data', true) IS DISTINCT FROM 'off' THEN
+INSERT INTO done_when_criteria (version_id, criterion_id, criterion_md, sort_order) VALUES
+  ('PMS-V2', 'web-ui',
+   '/builders themed read-only single-page web UI with copy-prompt-to-clipboard per task',
+   10),
+  ('PMS-V2', 'prompter-optimizer',
+   'Full prompter optimizer: /builder-session with free-text + parallel-set + smart defaults; /builder-start enriched and drops cross-builder visibility',
+   20),
+  ('PMS-V2', 'achievements',
+   'Achievement system (8 achievements, 20c bonus pool, top-10 paged badges, anti-gaming guards)',
+   30),
+  ('PMS-V2', 'never-miss',
+   'Learnings + idea_inbox + task_kind: never miss a learning, every AI-generated task has a kind',
+   40),
+  ('PMS-V2', 'auto-logging',
+   'Auto-logging: session pulse, stale-claim detection, incidental-work scanner, estimate-vs-actual reconciliation',
+   50),
+  ('PMS-V2', 'auto-versioning',
+   'Auto-versioning: structured done-when criteria, gated close-flow (80% AND all criteria), auto-draft of next-version scope',
+   60),
+  ('PMS-V2', 'single-source-claim',
+   'Single-source claim semantics carried through (LIMIT-1 fix from PMS-V1 holds)',
+   70)
+ON CONFLICT (version_id, criterion_id) DO UPDATE
+  SET criterion_md = EXCLUDED.criterion_md,
+      sort_order   = EXCLUDED.sort_order;
+END IF; END $seed$;
+
+-- =========================================================================
+-- 6. Seeds: V1 done-when criteria (mirrors limitations/current-version.md)
+-- =========================================================================
+-- The V1 done-when (CLAUDE.md §9): "the experience supports the full
+-- purchase loop: land in the world → walk to the vendor → buy a real
+-- item → Hermeslines fulfills it." Decomposed into checkable criteria.
+
+-- Instance-seed guard (task 1704 / ADR 0105): OTB V1 game scope-truth. FK-references
+-- the V1 version guarded above, so this must skip on a vanilla DB too.
+DO $seed$ BEGIN IF current_setting('app.seed_instance_data', true) IS DISTINCT FROM 'off' THEN
+INSERT INTO done_when_criteria (version_id, criterion_id, criterion_md, sort_order) VALUES
+  ('V1', 'world-land',
+   'Visitor lands in the persistent world from amazonprimea.com',
+   10),
+  ('V1', 'walk-to-vendor',
+   'Visitor can walk to Hyperion at the shipping container with WASD',
+   20),
+  ('V1', 'auth-magic-link',
+   'Visitor authenticates via Stripe-tied magic link before purchase',
+   30),
+  ('V1', 'vendor-purchase',
+   'Vendor dialog supports real-product purchase via Stripe',
+   40),
+  ('V1', 'hermeslines-fulfill',
+   'Order intake reaches Hermeslines fulfillment system (whatever the format)',
+   50),
+  ('V1', 'order-confirmation',
+   'Visitor receives order confirmation in-world',
+   60)
+ON CONFLICT (version_id, criterion_id) DO UPDATE
+  SET criterion_md = EXCLUDED.criterion_md,
+      sort_order   = EXCLUDED.sort_order;
+END IF; END $seed$;
+
+-- =========================================================================
+-- 7. Migration record
+-- =========================================================================
+
+INSERT INTO schema_migrations (version) VALUES ('006_pms_v2')
+  ON CONFLICT (version) DO NOTHING;

package/migrations/007_pms_v2_hierarchy_trigger.sql

@@ -0,0 +1,59 @@
+-- 007_pms_v2_hierarchy_trigger.sql — auto-ship parents when all children ship
+--
+-- Companion to F1 (006_pms_v2.sql) and C2 (src/pms/hierarchy.js).
+--
+-- When the last unshipped child of a parent flips to status='shipped',
+-- the parent itself flips to 'shipped' atomically. parent.shipped_at is
+-- set to MAX(child.shipped_at). parent.shipped_by is left NULL — there
+-- is no single builder responsible for a parent that ships via rollup.
+-- (Individual children retain their own shipped_by; credits accrue per
+-- child as today.)
+--
+-- Idempotent: CREATE OR REPLACE FUNCTION + DROP TRIGGER IF EXISTS.
+
+CREATE OR REPLACE FUNCTION fn_auto_ship_parent_on_children_shipped()
+RETURNS TRIGGER AS $$
+DECLARE
+  unshipped_count integer;
+BEGIN
+  -- Defensive guards (the WHEN clause already enforces these, but keep
+  -- the function safe to call from any future trigger surface).
+  IF NEW.parent_task_id IS NULL THEN
+    RETURN NEW;
+  END IF;
+  IF NEW.status IS DISTINCT FROM 'shipped' THEN
+    RETURN NEW;
+  END IF;
+
+  -- Count siblings of NEW (children of NEW.parent_task_id) that aren't
+  -- yet shipped. NEW is already committed at AFTER-UPDATE time, so the
+  -- count reflects post-update reality. Zero ⇒ promote the parent.
+  SELECT count(*) INTO unshipped_count
+    FROM tasks
+   WHERE parent_task_id = NEW.parent_task_id
+     AND status <> 'shipped';
+
+  IF unshipped_count = 0 THEN
+    UPDATE tasks
+       SET status = 'shipped',
+           shipped_at = COALESCE(
+             (SELECT max(shipped_at) FROM tasks WHERE parent_task_id = NEW.parent_task_id),
+             now()
+           )
+     WHERE id = NEW.parent_task_id
+       AND status <> 'shipped';
+  END IF;
+
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS trg_auto_ship_parent ON tasks;
+CREATE TRIGGER trg_auto_ship_parent
+  AFTER UPDATE OF status ON tasks
+  FOR EACH ROW
+  WHEN (NEW.status = 'shipped' AND NEW.parent_task_id IS NOT NULL)
+  EXECUTE FUNCTION fn_auto_ship_parent_on_children_shipped();
+
+INSERT INTO schema_migrations (version) VALUES ('007_pms_v2_hierarchy_trigger')
+  ON CONFLICT (version) DO NOTHING;

package/migrations/008_pms_v2_migration_allocator.sql

@@ -0,0 +1,27 @@
+-- Pre-allocate migration numbers at claim time.
+--
+-- When two parallel builders both create a migration at "the next free number,"
+-- they pick the same number. The fix: when a task's touches[] contains the
+-- sentinel string 'migrations/' (the directory, no specific filename),
+-- POST /claims atomically allocates the next number from this counter table
+-- and stores it on the claim. The CLI surfaces the number to the builder, who
+-- creates `migrations/<NNN>_*.sql` using that prefix.
+--
+-- Once allocated, a number stays attached to its claim even if the claim is
+-- released without shipping. Sequential numbering is not required — gaps are
+-- fine.
+
+CREATE TABLE IF NOT EXISTS migration_counter (
+  id          INTEGER PRIMARY KEY DEFAULT 1,
+  next_number INTEGER NOT NULL,
+  CHECK (id = 1)
+);
+
+-- Seed: highest existing migration on disk is 008 (this one).
+-- Next allocation goes to 009.
+INSERT INTO migration_counter (id, next_number)
+VALUES (1, 9)
+ON CONFLICT (id) DO NOTHING;
+
+ALTER TABLE claims
+  ADD COLUMN IF NOT EXISTS reserved_migration_number INTEGER;

package/migrations/009_pms_v2_blockers_table.sql

@@ -0,0 +1,68 @@
+-- Phase 2a: blockers as a first-class DB surface (replaces blockers/blockers.md
+-- as the canonical source — the markdown becomes a frozen archive after the
+-- one-time import).
+--
+-- Why: the task_blockers join table stored a blocker_ref (markdown anchor)
+-- pointing at prose in blockers/blockers.md. When Lars resolved a blocker
+-- (e.g., "GitHub OAuth credentials provided"), the only thing that updated
+-- was the markdown — the linked tasks stayed in 'blocked' status until a
+-- human remembered to flip them. This migration makes blockers a real row,
+-- and a trigger automatically promotes blocked tasks to 'ready' the moment
+-- the blocker is resolved.
+--
+-- Schema design follows the pattern of cost_log / learnings / idea_inbox:
+-- (source, source_ref) UNIQUE for idempotent re-runs of the import script.
+
+CREATE TABLE IF NOT EXISTS blockers (
+  id          BIGSERIAL PRIMARY KEY,
+  title       TEXT NOT NULL,
+  body_md     TEXT NOT NULL DEFAULT '',
+  status      TEXT NOT NULL DEFAULT 'open' CHECK (status IN ('open', 'resolved')),
+  created_at  TIMESTAMPTZ NOT NULL DEFAULT now(),
+  resolved_at TIMESTAMPTZ,
+  resolved_by BIGINT REFERENCES builders(id),
+  resolution_note TEXT,
+  source      TEXT,                              -- 'imported-markdown' | 'manual' | ...
+  source_ref  TEXT
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uniq_blockers_source_ref
+  ON blockers (source, source_ref)
+  WHERE source IS NOT NULL AND source_ref IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_blockers_status ON blockers (status) WHERE status = 'open';
+
+-- Add a structured link from task_blockers to the new blockers table.
+-- The legacy blocker_ref TEXT column stays for backwards compatibility with
+-- existing rows pointing at markdown anchors; new rows should use blocker_id.
+ALTER TABLE task_blockers
+  ADD COLUMN IF NOT EXISTS blocker_id BIGINT REFERENCES blockers(id) ON DELETE CASCADE;
+
+CREATE INDEX IF NOT EXISTS idx_task_blockers_blocker_id
+  ON task_blockers (blocker_id) WHERE blocker_id IS NOT NULL;
+
+-- Trigger: when a blocker flips to 'resolved', auto-promote every task
+-- linked via task_blockers from 'blocked' → 'ready'. Captures resolved_at if
+-- not already set so /me, /tasks, etc. all see the same timestamp.
+CREATE OR REPLACE FUNCTION trg_promote_tasks_on_blocker_resolve()
+RETURNS TRIGGER AS $$
+BEGIN
+  IF NEW.status = 'resolved' AND (OLD.status IS NULL OR OLD.status <> 'resolved') THEN
+    IF NEW.resolved_at IS NULL THEN
+      NEW.resolved_at := now();
+    END IF;
+
+    UPDATE tasks
+       SET status = 'ready', updated_at = now()
+     WHERE id IN (SELECT task_id FROM task_blockers WHERE blocker_id = NEW.id)
+       AND status = 'blocked';
+  END IF;
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS promote_tasks_on_blocker_resolve ON blockers;
+CREATE TRIGGER promote_tasks_on_blocker_resolve
+  BEFORE UPDATE OF status ON blockers
+  FOR EACH ROW
+  EXECUTE FUNCTION trg_promote_tasks_on_blocker_resolve();

package/migrations/010_uptime.sql

@@ -0,0 +1,29 @@
+-- Uptime monitoring: healthcheck results for each tracked service.
+--
+-- The Node process polls internal endpoints on a 60-second interval and
+-- inserts a row per check. The public /api/pms/public/uptime endpoint
+-- reads this table directly — no external SaaS required.
+--
+-- service names are fixed strings declared in the poller:
+--   game_server, api, database
+
+BEGIN;
+
+CREATE TABLE IF NOT EXISTS uptime_checks (
+  id          bigserial PRIMARY KEY,
+  service     text      NOT NULL,
+  status      text      NOT NULL CHECK (status IN ('up', 'down', 'degraded')),
+  latency_ms  integer,
+  checked_at  timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS uptime_checks_service_checked_at
+  ON uptime_checks (service, checked_at DESC);
+
+-- Keep only 90 days of history. Applied by the poller after each insert,
+-- not as a trigger (cheap enough at 1 call/min).
+-- No cron required — prune happens inline.
+
+INSERT INTO schema_migrations (version) VALUES ('010_uptime') ON CONFLICT DO NOTHING;
+
+COMMIT;

package/migrations/011_backfill_v2_v3_done_when.sql

@@ -0,0 +1,20 @@
+-- Backfill versions.done_when for PMS-V2 and PMS-V3.
+--
+-- V1 and PMS-V1 already have done_when populated. PMS-V2 and PMS-V3 were
+-- declared without paint-the-picture copy, leaving the status page rows
+-- without a senate-voice description of what each version IS. The public
+-- status page (status.amazonprimea.com) now renders versions.done_when
+-- under each version block (task #119); this migration provides the copy.
+--
+-- Idempotent: only fills where done_when IS NULL or empty, so re-runs and
+-- manual edits are preserved.
+
+UPDATE versions
+SET done_when = $body$When this is finished, the citizens building Amazonprimea will keep their works on a themed ledger of their own — naming sessions, claiming tasks in batches, earning laurels for milestones, and seeing each version's scope painted in plain words.$body$
+WHERE id = 'PMS-V2'
+  AND (done_when IS NULL OR done_when = '');
+
+UPDATE versions
+SET done_when = $body$When this is finished, multiple builders will work the city in parallel — each with their own seal, their own shelf of credits, and their own lane of stones to set.$body$
+WHERE id = 'PMS-V3'
+  AND (done_when IS NULL OR done_when = '');

package/migrations/012_pms_v2_task_lifecycle_states.sql

@@ -0,0 +1,82 @@
+-- Phase 5: expand task lifecycle from one terminal state to three.
+--
+-- Before:  active → shipped               (one /builder-ship call did everything)
+-- After:   active → completed → confirmed → shipped
+--
+--   completed — builder declared the work done; on their local branch only;
+--               PMS recorded the ship.
+--   confirmed — automated verification passed (touches[] scanner clean +
+--               smoke tests green); credits land here. Branch may or may not
+--               be on origin yet.
+--   shipped   — branch merged to main + deployed; visible on production.
+--
+-- Decisions (per Lars 2026-05-10):
+--   1. Credits land on confirmed (not completed, not shipped).
+--   2. completed → confirmed is automatic when scanner+smoke pass.
+--   3. confirmed → shipped runs /merge-mode immediately (auto-merge attempted;
+--      if conflicts, task stays at confirmed for manual /merge-mode resolution).
+--
+-- Existing tasks at status='shipped' stay shipped (they are already in prod).
+
+-- 1. Loosen the tasks.status CHECK constraint to admit the two new states.
+ALTER TABLE tasks DROP CONSTRAINT IF EXISTS tasks_status_check;
+
+ALTER TABLE tasks ADD CONSTRAINT tasks_status_check
+  CHECK (status IN (
+    'backlog', 'ready', 'active', 'blocked',
+    'completed', 'confirmed',
+    'shipped', 'abandoned'
+  ));
+
+-- 2. Rebuild version_progress to count completed + confirmed + shipped as
+-- "done" (any state where the builder has declared the work complete).
+-- Rationale: from the project's progress-bar perspective, work that is
+-- completed-but-not-yet-merged shouldn't show up as "in flight" — it IS done
+-- from the builder's standpoint. The shipped/completed/confirmed split is
+-- visible on the public dashboard via separate counts (added in a follow-up
+-- view or rendered client-side).
+DROP VIEW IF EXISTS version_progress;
+CREATE VIEW version_progress AS
+SELECT v.id AS version_id,
+       v.name,
+       v.track,
+       v.status,
+       count(*) FILTER (
+         WHERE t.status IN ('completed', 'confirmed', 'shipped')
+           AND t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\'
+           AND NOT EXISTS (SELECT 1 FROM tasks c WHERE c.parent_task_id = t.id)
+       ) AS shipped_count,
+       count(*) FILTER (
+         WHERE t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\'
+           AND NOT EXISTS (SELECT 1 FROM tasks c WHERE c.parent_task_id = t.id)
+       ) AS total_count,
+       COALESCE(SUM(CASE
+         WHEN t.status IN ('completed', 'confirmed', 'shipped')
+              AND t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\'
+              AND NOT EXISTS (SELECT 1 FROM tasks c WHERE c.parent_task_id = t.id)
+         THEN (6 - COALESCE(t.priority, 5))
+         ELSE 0 END), 0) AS shipped_weight,
+       COALESCE(SUM(CASE
+         WHEN t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\'
+              AND NOT EXISTS (SELECT 1 FROM tasks c WHERE c.parent_task_id = t.id)
+         THEN (6 - COALESCE(t.priority, 5))
+         ELSE 0 END), 0) AS total_weight
+  FROM versions v
+  LEFT JOIN tasks t ON t.version_id = v.id
+ GROUP BY v.id, v.name, v.track, v.status;
+
+-- 3. Companion view: lifecycle_breakdown — separate counts per state so the
+-- public dashboard can render an honest "shipped vs in-flight" panel.
+CREATE OR REPLACE VIEW version_lifecycle_breakdown AS
+SELECT v.id AS version_id,
+       v.name,
+       v.track,
+       count(*) FILTER (WHERE t.status = 'completed'
+                          AND t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\') AS completed_count,
+       count(*) FILTER (WHERE t.status = 'confirmed'
+                          AND t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\') AS confirmed_count,
+       count(*) FILTER (WHERE t.status = 'shipped'
+                          AND t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\') AS shipped_count
+  FROM versions v
+  LEFT JOIN tasks t ON t.version_id = v.id
+ GROUP BY v.id, v.name, v.track;