@proletariat/cli 0.3.92 → 0.3.94

package/dist/lib/database/index.js

@@ -20,7 +20,7 @@ export { CREATE_TABLES_SQL } from './workspace-schema.js';
 // Workspace lifecycle
 export { withDrizzle, getDatabasePath, getConfigPath, openWorkspaceDatabase, openWorkspaceDriver, createWorkspaceDatabase, getWorkspaceConfig, } from './workspace.js';
 // Agent operations
-export { addAgentsToDatabase, addEphemeralAgentToDatabase, tryAddEphemeralAgentToDatabase, getEphemeralAgentNames, removeEphemeralAgent, getWorkspaceAgents, getAgentByPath, markAgentCleaned, syncAgentsWithDisk, discoverAgentsOnDisk, removeAgentsFromDatabase, } from './agents.js';
+export { RECYCLABLE_STATUSES, ACTIVE_STATUSES, addAgentsToDatabase, addEphemeralAgentToDatabase, tryAddEphemeralAgentToDatabase, getEphemeralAgentNames, removeEphemeralAgent, getWorkspaceAgents, getAgentByPath, getAgent, markAgentCleaned, markAgentRunning, markAgentCompleted, markAgentDead, reactivateAgent, pruneAgentRecords, syncAgentsWithDisk, discoverAgentsOnDisk, removeAgentsFromDatabase, } from './agents.js';
 // Repository operations
 export { addRepositoriesToDatabase, getWorkspaceRepositories, } from './repositories.js';
 // Theme operations
@@ -35,6 +35,8 @@ export { checkPMOExists, getPMOSetting, dropPMOTables, upsertWorkspaceSetting, }
 export { BetterSqlite3Driver, wrapDatabase, openDriver, getRawDatabase, } from './driver.js';
 // Settings store
 export { SettingsStore, createSettingsStore, } from './settings-store.js';
+// Credential store (PRLT-1114: agent secret isolation)
+export { isCredentialKey, getCredentialDatabasePath, getCredential, setCredential, deleteCredential, hasCredential, closeAllCredentialStores, migrateCredentials, } from './credential-store.js';
 // Database safety (WAL, backup, integrity, repair)
 export { enableWALMode, createRotatingBackup, checkIntegrity, quickCheckIntegrity, repairDatabase, getBackupPath, } from './db-safety.js';
 //# sourceMappingURL=index.js.map

package/dist/lib/database/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/database/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,0DAA0D;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD,sBAAsB;AACtB,OAAO,EAEL,WAAW,EACX,eAAe,EACf,aAAa,EACb,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,gBAAgB,CAAA;AAEvB,mBAAmB;AACnB,OAAO,EAML,mBAAmB,EACnB,2BAA2B,EAC3B,8BAA8B,EAC9B,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,aAAa,CAAA;AAEpB,wBAAwB;AACxB,OAAO,EAEL,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,mBAAmB,CAAA;AAE1B,mBAAmB;AACnB,OAAO,EAGL,cAAc,EACd,cAAc,EACd,SAAS,EACT,QAAQ,EACR,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,aAAa,GACd,MAAM,aAAa,CAAA;AAEpB,sBAAsB;AACtB,OAAO,EAEL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,gBAAgB,CAAA;AAEvB,wBAAwB;AACxB,OAAO,EAEL,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,YAAY,CAAA;AAEnB,2BAA2B;AAC3B,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,sBAAsB,GACvB,MAAM,oBAAoB,CAAA;AAE3B,8BAA8B;AAC9B,OAAO,EAIL,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,cAAc,GACf,MAAM,aAAa,CAAA;AAEpB,iBAAiB;AACjB,OAAO,EACL,aAAa,EACb,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAE5B,mDAAmD;AACnD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,aAAa,GAGd,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/database/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,0DAA0D;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD,sBAAsB;AACtB,OAAO,EAEL,WAAW,EACX,eAAe,EACf,aAAa,EACb,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,gBAAgB,CAAA;AAEvB,mBAAmB;AACnB,OAAO,EAQL,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,2BAA2B,EAC3B,8BAA8B,EAC9B,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,aAAa,CAAA;AAEpB,wBAAwB;AACxB,OAAO,EAEL,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,mBAAmB,CAAA;AAE1B,mBAAmB;AACnB,OAAO,EAGL,cAAc,EACd,cAAc,EACd,SAAS,EACT,QAAQ,EACR,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,aAAa,GACd,MAAM,aAAa,CAAA;AAEpB,sBAAsB;AACtB,OAAO,EAEL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,gBAAgB,CAAA;AAEvB,wBAAwB;AACxB,OAAO,EAEL,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,YAAY,CAAA;AAEnB,2BAA2B;AAC3B,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,sBAAsB,GACvB,MAAM,oBAAoB,CAAA;AAE3B,8BAA8B;AAC9B,OAAO,EAIL,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,cAAc,GACf,MAAM,aAAa,CAAA;AAEpB,iBAAiB;AACjB,OAAO,EACL,aAAa,EACb,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAE5B,uDAAuD;AACvD,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAE9B,mDAAmD;AACnD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,aAAa,GAGd,MAAM,gBAAgB,CAAA"}

package/dist/lib/database/migrations/0013_agent_lifecycle_states.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Migration 0013 — Add agent lifecycle states
+ *
+ * Extends the agents.status column to support lifecycle states:
+ * 'active', 'running', 'completed', 'dead', 'cleaned'
+ *
+ * SQLite doesn't support ALTER CHECK constraints directly,
+ * so we recreate the table with the new constraint.
+ */
+import type { Migration } from '../migrator.js';
+export declare const agentLifecycleStates: Migration;

package/dist/lib/database/migrations/0013_agent_lifecycle_states.js

@@ -0,0 +1,47 @@
+/**
+ * Migration 0013 — Add agent lifecycle states
+ *
+ * Extends the agents.status column to support lifecycle states:
+ * 'active', 'running', 'completed', 'dead', 'cleaned'
+ *
+ * SQLite doesn't support ALTER CHECK constraints directly,
+ * so we recreate the table with the new constraint.
+ */
+export const agentLifecycleStates = {
+    id: '0013',
+    name: 'agent_lifecycle_states',
+    up: (db) => {
+        // SQLite doesn't support modifying CHECK constraints, so we need to
+        // recreate the table. We use a migration-safe approach:
+        // 1. Create new table with updated constraint
+        // 2. Copy data
+        // 3. Drop old table
+        // 4. Rename new table
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS agents_new (
+        name TEXT PRIMARY KEY,
+        type TEXT NOT NULL DEFAULT 'persistent' CHECK (type IN ('persistent', 'ephemeral')),
+        status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'running', 'completed', 'dead', 'cleaned')),
+        base_name TEXT,
+        theme_id TEXT,
+        worktree_path TEXT,
+        mount_mode TEXT NOT NULL DEFAULT 'worktree' CHECK (mount_mode IN ('worktree', 'clone')),
+        created_at TEXT NOT NULL,
+        cleaned_at TEXT,
+        FOREIGN KEY (theme_id) REFERENCES agent_themes(id) ON DELETE SET NULL
+      );
+
+      INSERT OR IGNORE INTO agents_new (name, type, status, base_name, theme_id, worktree_path, mount_mode, created_at, cleaned_at)
+        SELECT name, type, status, base_name, theme_id, worktree_path, mount_mode, created_at, cleaned_at
+        FROM agents;
+
+      DROP TABLE agents;
+
+      ALTER TABLE agents_new RENAME TO agents;
+
+      CREATE INDEX IF NOT EXISTS idx_agents_theme ON agents(theme_id);
+      CREATE INDEX IF NOT EXISTS idx_agents_status ON agents(status);
+    `);
+    },
+};
+//# sourceMappingURL=0013_agent_lifecycle_states.js.map

package/dist/lib/database/migrations/0013_agent_lifecycle_states.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0013_agent_lifecycle_states.js","sourceRoot":"","sources":["../../../../src/lib/database/migrations/0013_agent_lifecycle_states.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,CAAC,MAAM,oBAAoB,GAAc;IAC7C,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,wBAAwB;IAC9B,EAAE,EAAE,CAAC,EAAqB,EAAE,EAAE;QAC5B,oEAAoE;QACpE,wDAAwD;QACxD,8CAA8C;QAC9C,eAAe;QACf,oBAAoB;QACpB,sBAAsB;QAEtB,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;KAwBP,CAAC,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist/lib/database/migrations/0014_agent_work_lifecycle.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Migration 0014 — Agent Work Lifecycle States
+ *
+ * Adds lifecycle tracking columns to agent_work for the orchestrate daemon.
+ * - last_heartbeat: tracks when the agent last reported activity
+ * - retries: tracks respawn attempts for on_agent_died hooks
+ * - lifecycle_state: high-level state (healthy, idle, died, completed)
+ */
+import type { Migration } from '../migrator.js';
+export declare const agentWorkLifecycle: Migration;

package/dist/lib/database/migrations/0014_agent_work_lifecycle.js

@@ -0,0 +1,31 @@
+/**
+ * Migration 0014 — Agent Work Lifecycle States
+ *
+ * Adds lifecycle tracking columns to agent_work for the orchestrate daemon.
+ * - last_heartbeat: tracks when the agent last reported activity
+ * - retries: tracks respawn attempts for on_agent_died hooks
+ * - lifecycle_state: high-level state (healthy, idle, died, completed)
+ */
+export const agentWorkLifecycle = {
+    id: '0014',
+    name: 'agent_work_lifecycle',
+    up: (db) => {
+        const tableExists = db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='agent_work'").get();
+        if (!tableExists)
+            return;
+        const tableInfo = db.prepare("PRAGMA table_info(agent_work)").all();
+        const existingCols = new Set(tableInfo.map(col => col.name));
+        if (!existingCols.has('last_heartbeat')) {
+            db.exec("ALTER TABLE agent_work ADD COLUMN last_heartbeat TEXT");
+        }
+        if (!existingCols.has('retries')) {
+            db.exec("ALTER TABLE agent_work ADD COLUMN retries INTEGER NOT NULL DEFAULT 0");
+        }
+        if (!existingCols.has('lifecycle_state')) {
+            db.exec("ALTER TABLE agent_work ADD COLUMN lifecycle_state TEXT DEFAULT 'healthy' CHECK (lifecycle_state IN ('healthy', 'idle', 'died', 'completed'))");
+        }
+        // Index for lifecycle state queries (used by orchestrate polling)
+        db.exec("CREATE INDEX IF NOT EXISTS idx_agent_work_lifecycle ON agent_work(lifecycle_state, status)");
+    },
+};
+//# sourceMappingURL=0014_agent_work_lifecycle.js.map

package/dist/lib/database/migrations/0014_agent_work_lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0014_agent_work_lifecycle.js","sourceRoot":"","sources":["../../../../src/lib/database/migrations/0014_agent_work_lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,CAAC,MAAM,kBAAkB,GAAc;IAC3C,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,sBAAsB;IAC5B,EAAE,EAAE,CAAC,EAAqB,EAAE,EAAE;QAC5B,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAC5B,yEAAyE,CAC1E,CAAC,GAAG,EAAE,CAAA;QACP,IAAI,CAAC,WAAW;YAAE,OAAM;QAExB,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,GAAG,EAAwB,CAAA;QACzF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAE5D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxC,EAAE,CAAC,IAAI,CACL,uDAAuD,CACxD,CAAA;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,EAAE,CAAC,IAAI,CACL,sEAAsE,CACvE,CAAA;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACzC,EAAE,CAAC,IAAI,CACL,8IAA8I,CAC/I,CAAA;QACH,CAAC;QAED,kEAAkE;QAClE,EAAE,CAAC,IAAI,CACL,4FAA4F,CAC7F,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/lib/database/migrations/0015_orchestrate_hooks.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Migration 0015 — Orchestrate Hooks
+ *
+ * Extends pmo_work_hooks with mode (auto/confirm/notify/off), priority,
+ * project_id, source, and config columns for the orchestrate daemon.
+ */
+import type { Migration } from '../migrator.js';
+export declare const orchestrateHooks: Migration;

package/dist/lib/database/migrations/0015_orchestrate_hooks.js

@@ -0,0 +1,35 @@
+/**
+ * Migration 0015 — Orchestrate Hooks
+ *
+ * Extends pmo_work_hooks with mode (auto/confirm/notify/off), priority,
+ * project_id, source, and config columns for the orchestrate daemon.
+ */
+export const orchestrateHooks = {
+    id: '0015',
+    name: 'orchestrate_hooks',
+    up: (db) => {
+        const tableExists = db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='pmo_work_hooks'").get();
+        if (!tableExists)
+            return;
+        const tableInfo = db.prepare("PRAGMA table_info(pmo_work_hooks)").all();
+        const existingCols = new Set(tableInfo.map(col => col.name));
+        if (!existingCols.has('mode')) {
+            db.exec("ALTER TABLE pmo_work_hooks ADD COLUMN mode TEXT NOT NULL DEFAULT 'auto' CHECK (mode IN ('auto', 'confirm', 'notify', 'off'))");
+        }
+        if (!existingCols.has('priority')) {
+            db.exec("ALTER TABLE pmo_work_hooks ADD COLUMN priority INTEGER NOT NULL DEFAULT 0");
+        }
+        if (!existingCols.has('project_id')) {
+            db.exec("ALTER TABLE pmo_work_hooks ADD COLUMN project_id TEXT");
+        }
+        if (!existingCols.has('source')) {
+            db.exec("ALTER TABLE pmo_work_hooks ADD COLUMN source TEXT NOT NULL DEFAULT 'cli' CHECK (source IN ('yaml', 'cli', 'preset'))");
+        }
+        if (!existingCols.has('config')) {
+            db.exec("ALTER TABLE pmo_work_hooks ADD COLUMN config TEXT");
+        }
+        // Create index for priority-ordered lookup
+        db.exec("CREATE INDEX IF NOT EXISTS idx_pmo_work_hooks_priority ON pmo_work_hooks(event, priority)");
+    },
+};
+//# sourceMappingURL=0015_orchestrate_hooks.js.map

package/dist/lib/database/migrations/0015_orchestrate_hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0015_orchestrate_hooks.js","sourceRoot":"","sources":["../../../../src/lib/database/migrations/0015_orchestrate_hooks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,mBAAmB;IACzB,EAAE,EAAE,CAAC,EAAqB,EAAE,EAAE;QAC5B,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAC5B,6EAA6E,CAC9E,CAAC,GAAG,EAAE,CAAA;QACP,IAAI,CAAC,WAAW;YAAE,OAAM;QAExB,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,GAAG,EAAwB,CAAA;QAC7F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAE5D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,EAAE,CAAC,IAAI,CACL,8HAA8H,CAC/H,CAAA;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,IAAI,CACL,2EAA2E,CAC5E,CAAA;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,IAAI,CACL,uDAAuD,CACxD,CAAA;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,IAAI,CACL,sHAAsH,CACvH,CAAA;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,IAAI,CACL,mDAAmD,CACpD,CAAA;QACH,CAAC;QAED,2CAA2C;QAC3C,EAAE,CAAC,IAAI,CACL,2FAA2F,CAC5F,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/lib/database/migrations/0016_schema_catchup.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Migration 0016 — Idempotent Schema Catch-up
+ *
+ * Brings ANY schema version up to the current state. Safe to run on:
+ * - A fresh (empty) database
+ * - A database from v0.3.80 or earlier
+ * - An already-current database (no-op)
+ *
+ * Strategy:
+ * 1. CREATE TABLE IF NOT EXISTS for every table (no indexes yet)
+ * 2. PRAGMA table_info() checks + ALTER TABLE ADD COLUMN for missing columns
+ * 3. CREATE INDEX IF NOT EXISTS for all indexes (columns now guaranteed to exist)
+ */
+import type { Migration } from '../migrator.js';
+export declare const schemaCatchup: Migration;

package/dist/lib/database/migrations/0016_schema_catchup.js

@@ -0,0 +1,154 @@
+/**
+ * Migration 0016 — Idempotent Schema Catch-up
+ *
+ * Brings ANY schema version up to the current state. Safe to run on:
+ * - A fresh (empty) database
+ * - A database from v0.3.80 or earlier
+ * - An already-current database (no-op)
+ *
+ * Strategy:
+ * 1. CREATE TABLE IF NOT EXISTS for every table (no indexes yet)
+ * 2. PRAGMA table_info() checks + ALTER TABLE ADD COLUMN for missing columns
+ * 3. CREATE INDEX IF NOT EXISTS for all indexes (columns now guaranteed to exist)
+ */
+import { CREATE_TABLES_SQL } from '../workspace-schema.js';
+import { PMO_TABLE_SCHEMAS, PMO_INDEXES } from '../../pmo/schema.js';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function getColumns(db, table) {
+    const rows = db.prepare(`PRAGMA table_info('${table}')`).all();
+    return new Set(rows.map(r => r.name));
+}
+function hasTable(db, table) {
+    const row = db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name=?").get(table);
+    return !!row;
+}
+function addColumnIfMissing(db, table, column, definition, cols) {
+    if (!cols.has(column)) {
+        db.exec(`ALTER TABLE ${table} ADD COLUMN ${column} ${definition}`);
+    }
+}
+// ---------------------------------------------------------------------------
+// Migration
+// ---------------------------------------------------------------------------
+export const schemaCatchup = {
+    id: '0016',
+    name: 'schema_catchup',
+    up(db) {
+        // =======================================================================
+        // 1. Ensure every table exists (CREATE TABLE IF NOT EXISTS — no-op when
+        //    the table already exists). Run table creation BEFORE indexes so that
+        //    missing columns can be added in step 2.
+        // =======================================================================
+        // Core workspace tables (includes its own indexes using IF NOT EXISTS,
+        // but workspace-schema indexes only reference columns from their own
+        // CREATE TABLE, so they're safe to run here).
+        db.exec(CREATE_TABLES_SQL);
+        // PMO tables — create each individually WITHOUT indexes.
+        // PMO_INDEXES reference columns that may not exist yet on old tables.
+        for (const sql of Object.values(PMO_TABLE_SCHEMAS)) {
+            db.exec(sql);
+        }
+        // =======================================================================
+        // 2. Back-fill missing columns on tables that may predate later changes.
+        //    Each block checks table existence first (for truly empty DBs where
+        //    step 1 already created the full table, this is a no-op).
+        // =======================================================================
+        // --- agents ---
+        if (hasTable(db, 'agents')) {
+            const cols = getColumns(db, 'agents');
+            addColumnIfMissing(db, 'agents', 'base_name', 'TEXT', cols);
+            addColumnIfMissing(db, 'agents', 'mount_mode', "TEXT NOT NULL DEFAULT 'worktree'", cols);
+            addColumnIfMissing(db, 'agents', 'cleaned_at', 'TEXT', cols);
+        }
+        // --- agent_worktrees ---
+        if (hasTable(db, 'agent_worktrees')) {
+            const cols = getColumns(db, 'agent_worktrees');
+            addColumnIfMissing(db, 'agent_worktrees', 'last_commit_hash', 'TEXT', cols);
+            addColumnIfMissing(db, 'agent_worktrees', 'commits_ahead', 'INTEGER NOT NULL DEFAULT 0', cols);
+            addColumnIfMissing(db, 'agent_worktrees', 'is_clean', 'INTEGER NOT NULL DEFAULT 1', cols);
+            addColumnIfMissing(db, 'agent_worktrees', 'last_checked', 'TEXT', cols);
+        }
+        // --- pmo_tickets ---
+        if (hasTable(db, 'pmo_tickets')) {
+            const cols = getColumns(db, 'pmo_tickets');
+            addColumnIfMissing(db, 'pmo_tickets', 'status_id', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_tickets', 'position', 'INTEGER NOT NULL DEFAULT 0', cols);
+            addColumnIfMissing(db, 'pmo_tickets', 'epic_id', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_tickets', 'labels', "TEXT NOT NULL DEFAULT '[]'", cols);
+            addColumnIfMissing(db, 'pmo_tickets', 'last_synced_from_spec', 'TIMESTAMP', cols);
+            addColumnIfMissing(db, 'pmo_tickets', 'last_synced_from_board', 'TIMESTAMP', cols);
+        }
+        // --- pmo_actions ---
+        if (hasTable(db, 'pmo_actions')) {
+            const cols = getColumns(db, 'pmo_actions');
+            addColumnIfMissing(db, 'pmo_actions', 'from_state', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'to_state', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'executor', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'environment', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'permission_mode', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'timeout', 'INTEGER', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'model', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'is_default', 'INTEGER NOT NULL DEFAULT 0', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'updated_at', 'TIMESTAMP', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'review_gate', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_actions', 'network_allowlist', 'TEXT', cols);
+        }
+        // --- agent_work ---
+        if (hasTable(db, 'agent_work')) {
+            const cols = getColumns(db, 'agent_work');
+            addColumnIfMissing(db, 'agent_work', 'session_id', 'TEXT', cols);
+            addColumnIfMissing(db, 'agent_work', 'host', 'TEXT', cols);
+            addColumnIfMissing(db, 'agent_work', 'external_source', 'TEXT', cols);
+            addColumnIfMissing(db, 'agent_work', 'external_key', 'TEXT', cols);
+            addColumnIfMissing(db, 'agent_work', 'external_id', 'TEXT', cols);
+            addColumnIfMissing(db, 'agent_work', 'external_url', 'TEXT', cols);
+            addColumnIfMissing(db, 'agent_work', 'cleanup_policy', "TEXT NOT NULL DEFAULT 'on-exit'", cols);
+            addColumnIfMissing(db, 'agent_work', 'last_heartbeat', 'TEXT', cols);
+            addColumnIfMissing(db, 'agent_work', 'retries', 'INTEGER DEFAULT 0', cols);
+            addColumnIfMissing(db, 'agent_work', 'lifecycle_state', "TEXT DEFAULT 'healthy'", cols);
+        }
+        // --- pmo_work_hooks ---
+        if (hasTable(db, 'pmo_work_hooks')) {
+            const cols = getColumns(db, 'pmo_work_hooks');
+            addColumnIfMissing(db, 'pmo_work_hooks', 'mode', "TEXT DEFAULT 'auto'", cols);
+            addColumnIfMissing(db, 'pmo_work_hooks', 'priority', 'INTEGER DEFAULT 0', cols);
+            addColumnIfMissing(db, 'pmo_work_hooks', 'project_id', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_work_hooks', 'source', "TEXT DEFAULT 'cli'", cols);
+            addColumnIfMissing(db, 'pmo_work_hooks', 'config', 'TEXT', cols);
+        }
+        // --- pmo_projects ---
+        if (hasTable(db, 'pmo_projects')) {
+            const cols = getColumns(db, 'pmo_projects');
+            addColumnIfMissing(db, 'pmo_projects', 'phase_id', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_projects', 'workflow_id', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_projects', 'is_archived', 'INTEGER NOT NULL DEFAULT 0', cols);
+            addColumnIfMissing(db, 'pmo_projects', 'target_date', 'TIMESTAMP', cols);
+            addColumnIfMissing(db, 'pmo_projects', 'initiative_id', 'TEXT', cols);
+        }
+        // --- pmo_epics ---
+        if (hasTable(db, 'pmo_epics')) {
+            const cols = getColumns(db, 'pmo_epics');
+            addColumnIfMissing(db, 'pmo_epics', 'file_path', 'TEXT', cols);
+            addColumnIfMissing(db, 'pmo_epics', 'spec_id', 'TEXT', cols);
+        }
+        // --- containers ---
+        if (hasTable(db, 'containers')) {
+            const cols = getColumns(db, 'containers');
+            addColumnIfMissing(db, 'containers', 'docker_name', 'TEXT', cols);
+            addColumnIfMissing(db, 'containers', 'image', 'TEXT', cols);
+            addColumnIfMissing(db, 'containers', 'current_execution_id', 'TEXT', cols);
+            addColumnIfMissing(db, 'containers', 'last_seen_at', 'TIMESTAMP DEFAULT CURRENT_TIMESTAMP', cols);
+        }
+        // =======================================================================
+        // 3. Create all indexes (now safe — all columns are guaranteed to exist)
+        // =======================================================================
+        // PMO indexes (covers most tables)
+        db.exec(PMO_INDEXES);
+        // Migration-added indexes not in PMO_INDEXES
+        db.exec('CREATE INDEX IF NOT EXISTS idx_agent_work_lifecycle ON agent_work(lifecycle_state, status)');
+        db.exec('CREATE INDEX IF NOT EXISTS idx_pmo_work_hooks_priority ON pmo_work_hooks(event, priority)');
+    },
+};
+//# sourceMappingURL=0016_schema_catchup.js.map

package/dist/lib/database/migrations/0016_schema_catchup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0016_schema_catchup.js","sourceRoot":"","sources":["../../../../src/lib/database/migrations/0016_schema_catchup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEpE,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,UAAU,CAAC,EAAqB,EAAE,KAAa;IACtD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,GAAG,EAA6B,CAAA;IACzF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,EAAqB,EAAE,KAAa;IACpD,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CACpB,8DAA8D,CAC/D,CAAC,GAAG,CAAC,KAAK,CAAiC,CAAA;IAC5C,OAAO,CAAC,CAAC,GAAG,CAAA;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,EAAqB,EACrB,KAAa,EACb,MAAc,EACd,UAAkB,EAClB,IAAiB;IAEjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,eAAe,MAAM,IAAI,UAAU,EAAE,CAAC,CAAA;IACpE,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,gBAAgB;IACtB,EAAE,CAAC,EAAE;QACH,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,6CAA6C;QAC7C,0EAA0E;QAE1E,uEAAuE;QACvE,qEAAqE;QACrE,8CAA8C;QAC9C,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAE1B,yDAAyD;QACzD,sEAAsE;QACtE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACnD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACd,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,8DAA8D;QAC9D,0EAA0E;QAE1E,iBAAiB;QACjB,IAAI,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;YACrC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC3D,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,kCAAkC,EAAE,IAAI,CAAC,CAAA;YACxF,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC9D,CAAC;QAED,0BAA0B;QAC1B,IAAI,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAA;YAC9C,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC3E,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAA;YAC9F,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,EAAE,UAAU,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAA;YACzF,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACzE,CAAC;QAED,sBAAsB;QACtB,IAAI,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;YAC1C,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAChE,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAA;YACrF,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC9D,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAA;YACnF,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,uBAAuB,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;YACjF,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,wBAAwB,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;QACpF,CAAC;QAED,sBAAsB;QACtB,IAAI,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;YAC1C,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACjE,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC/D,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC/D,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAClE,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACtE,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;YACjE,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC5D,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAA;YACvF,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;YACtE,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAClE,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC1E,CAAC;QAED,qBAAqB;QACrB,IAAI,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;YACzC,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAChE,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC1D,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACrE,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAClE,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACjE,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAClE,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,iCAAiC,EAAE,IAAI,CAAC,CAAA;YAC/F,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACpE,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAA;YAC1E,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAA;QACzF,CAAC;QAED,yBAAyB;QACzB,IAAI,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAA;YAC7C,kBAAkB,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAA;YAC7E,kBAAkB,CAAC,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAA;YAC/E,kBAAkB,CAAC,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACpE,kBAAkB,CAAC,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAA;YAC9E,kBAAkB,CAAC,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAClE,CAAC;QAED,uBAAuB;QACvB,IAAI,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;YAC3C,kBAAkB,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAChE,kBAAkB,CAAC,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACnE,kBAAkB,CAAC,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAA;YACzF,kBAAkB,CAAC,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;YACxE,kBAAkB,CAAC,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACvE,CAAC;QAED,oBAAoB;QACpB,IAAI,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;YACxC,kBAAkB,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC9D,kBAAkB,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC9D,CAAC;QAED,qBAAqB;QACrB,IAAI,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;YACzC,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACjE,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC3D,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC1E,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,qCAAqC,EAAE,IAAI,CAAC,CAAA;QACnG,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAE1E,mCAAmC;QACnC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAEpB,6CAA6C;QAC7C,EAAE,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAA;QACrG,EAAE,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAA;IACtG,CAAC;CACF,CAAA"}

package/dist/lib/database/migrations/index.js

@@ -16,6 +16,10 @@ import { createMediaItems } from './0009_create_media_items.js';
 import { addTicketPosition } from './0010_add_ticket_position.js';
 import { addReviewGate } from './0011_add_review_gate.js';
 import { addActionNetworkAllowlist } from './0012_add_action_network_allowlist.js';
+import { agentLifecycleStates } from './0013_agent_lifecycle_states.js';
+import { agentWorkLifecycle } from './0014_agent_work_lifecycle.js';
+import { orchestrateHooks } from './0015_orchestrate_hooks.js';
+import { schemaCatchup } from './0016_schema_catchup.js';
 /**
  * Ordered list of all migrations.
  * New migrations should be appended to the end of this array.
@@ -33,5 +37,9 @@ export const ALL_MIGRATIONS = [
     addTicketPosition,
     addReviewGate,
     addActionNetworkAllowlist,
+    agentLifecycleStates,
+    agentWorkLifecycle,
+    orchestrateHooks,
+    schemaCatchup,
 ];
 //# sourceMappingURL=index.js.map

package/dist/lib/database/migrations/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lib/database/migrations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAA;AAElF;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,QAAQ;IACR,SAAS;IACT,eAAe;IACf,aAAa;IACb,qBAAqB;IACrB,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,aAAa;IACb,yBAAyB;CAC1B,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lib/database/migrations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,QAAQ;IACR,SAAS;IACT,eAAe;IACf,aAAa;IACb,qBAAqB;IACrB,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,aAAa;IACb,yBAAyB;IACzB,oBAAoB;IACpB,kBAAkB;IAClB,gBAAgB;IAChB,aAAa;CACd,CAAA"}

package/dist/lib/database/pmo-bootstrap.d.ts

@@ -3,6 +3,13 @@
  *
  * Raw SQL operations required for PMO initialization and teardown.
  * These run before the storage layer is available.
+ *
+ * All database opens go through openSafeDatabase() which provides:
+ * - Rotating backup before open
+ * - Quick integrity check on startup
+ * - Auto-repair on corruption (dump/reimport or backup restore)
+ *
+ * See: PRLT-1152
  */
 import Database from 'better-sqlite3';
 /**

package/dist/lib/database/pmo-bootstrap.js

@@ -3,24 +3,63 @@
  *
  * Raw SQL operations required for PMO initialization and teardown.
  * These run before the storage layer is available.
+ *
+ * All database opens go through openSafeDatabase() which provides:
+ * - Rotating backup before open
+ * - Quick integrity check on startup
+ * - Auto-repair on corruption (dump/reimport or backup restore)
+ *
+ * See: PRLT-1152
  */
 import Database from 'better-sqlite3';
 import { throwIfNativeBindingError } from './native-validation.js';
 import { createDrizzleConnection } from './drizzle.js';
 import { workspaceSettings as workspaceSettingsTable, } from './drizzle-schema.js';
+import { createRotatingBackup, quickCheckIntegrity, repairDatabase, } from './db-safety.js';
 /**
- * Check if PMO tables exist and get basic stats.
- * Raw SQL: uses sqlite_master introspection (pre-migration bootstrap).
+ * Open a database connection with safety features (backup, integrity check, auto-repair).
+ * Used by PMO bootstrap functions that need raw SQL access before the full workspace
+ * database lifecycle is available.
  */
-export function checkPMOExists(dbPath) {
+function openSafeDatabase(dbPath, caller) {
+    // Create backup before opening (cheap insurance against corruption)
+    createRotatingBackup(dbPath);
     let db;
     try {
         db = new Database(dbPath);
     }
     catch (error) {
-        throwIfNativeBindingError(error, 'checkPMOExists');
+        throwIfNativeBindingError(error, caller);
         throw error;
     }
+    // Quick integrity check — auto-repair if corrupt
+    const integrity = quickCheckIntegrity(db);
+    if (!integrity.ok) {
+        db.close();
+        const repair = repairDatabase(dbPath);
+        if (!repair.success) {
+            throw new Error(`Database corruption detected in ${dbPath}.\n` +
+                `Integrity errors: ${integrity.errors.join('; ')}\n` +
+                `Auto-repair failed: ${repair.message}\n` +
+                `Run 'prlt db repair' for manual recovery options.`);
+        }
+        // Re-open the repaired database
+        try {
+            db = new Database(dbPath);
+        }
+        catch (error) {
+            throwIfNativeBindingError(error, `${caller} (post-repair)`);
+            throw error;
+        }
+    }
+    return db;
+}
+/**
+ * Check if PMO tables exist and get basic stats.
+ * Raw SQL: uses sqlite_master introspection (pre-migration bootstrap).
+ */
+export function checkPMOExists(dbPath) {
+    const db = openSafeDatabase(dbPath, 'checkPMOExists');
     try {
         const result = db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='pmo_projects'").get();
         if (result === undefined) {
@@ -30,8 +69,8 @@ export function checkPMOExists(dbPath) {
         const ticketCountResult = db.prepare('SELECT COUNT(*) as count FROM pmo_tickets').get();
         return {
             exists: true,
-            projectCount: projectCountResult.count,
-            ticketCount: ticketCountResult.count,
+            projectCount: projectCountResult?.count ?? 0,
+            ticketCount: ticketCountResult?.count ?? 0,
         };
     }
     finally {
@@ -43,14 +82,7 @@ export function checkPMOExists(dbPath) {
  * Raw SQL: pre-migration bootstrap query.
  */
 export function getPMOSetting(dbPath, key) {
-    let db;
-    try {
-        db = new Database(dbPath);
-    }
-    catch (error) {
-        throwIfNativeBindingError(error, 'getPMOSetting');
-        throw error;
-    }
+    const db = openSafeDatabase(dbPath, 'getPMOSetting');
     try {
         const result = db.prepare('SELECT value FROM pmo_settings WHERE key = ?').get(key);
         return result?.value ?? null;
@@ -67,14 +99,7 @@ export function getPMOSetting(dbPath, key) {
  * Raw SQL: DDL operations (DROP TABLE) are not supported by Drizzle.
  */
 export function dropPMOTables(dbPath, tables) {
-    let db;
-    try {
-        db = new Database(dbPath);
-    }
-    catch (error) {
-        throwIfNativeBindingError(error, 'dropPMOTables');
-        throw error;
-    }
+    const db = openSafeDatabase(dbPath, 'dropPMOTables');
     try {
         for (const table of tables) {
             try {

package/dist/lib/database/pmo-bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"pmo-bootstrap.js","sourceRoot":"","sources":["../../../src/lib/database/pmo-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EACL,iBAAiB,IAAI,sBAAsB,GAC5C,MAAM,qBAAqB,CAAA;AAE5B;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,EAAqB,CAAA;IACzB,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;QAClD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB,2EAA2E,CAC5E,CAAC,GAAG,EAAE,CAAA;QAEP,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;QAC3D,CAAC;QAED,MAAM,kBAAkB,GAAG,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,EAAuB,CAAA;QAC9G,MAAM,iBAAiB,GAAG,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,EAAuB,CAAA;QAE5G,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,kBAAkB,CAAC,KAAK;YACtC,WAAW,EAAE,iBAAiB,CAAC,KAAK;SACrC,CAAA;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,GAAW;IACvD,IAAI,EAAqB,CAAA;IACzB,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yBAAyB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;QACjD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAkC,CAAA;QACnH,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,MAAgB;IAC5D,IAAI,EAAqB,CAAA;IACzB,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yBAAyB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;QACjD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,EAAE,CAAC,OAAO,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAqB,EAAE,GAAW,EAAE,KAAa;IACtF,MAAM,GAAG,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAA;IACvC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC;SAC/B,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SACtB,kBAAkB,CAAC;QAClB,MAAM,EAAE,sBAAsB,CAAC,GAAG;QAClC,GAAG,EAAE,EAAE,KAAK,EAAE;KACf,CAAC;SACD,GAAG,EAAE,CAAA;AACV,CAAC"}
+{"version":3,"file":"pmo-bootstrap.js","sourceRoot":"","sources":["../../../src/lib/database/pmo-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EACL,iBAAiB,IAAI,sBAAsB,GAC5C,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,GACf,MAAM,gBAAgB,CAAA;AAEvB;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAc,EAAE,MAAc;IACtD,oEAAoE;IACpE,oBAAoB,CAAC,MAAM,CAAC,CAAA;IAE5B,IAAI,EAAqB,CAAA;IACzB,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yBAAyB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxC,MAAM,KAAK,CAAA;IACb,CAAC;IAED,iDAAiD;IACjD,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAA;IACzC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,EAAE,CAAC,KAAK,EAAE,CAAA;QAEV,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,mCAAmC,MAAM,KAAK;gBAC9C,qBAAqB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpD,uBAAuB,MAAM,CAAC,OAAO,IAAI;gBACzC,mDAAmD,CACpD,CAAA;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yBAAyB,CAAC,KAAK,EAAE,GAAG,MAAM,gBAAgB,CAAC,CAAA;YAC3D,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACrD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB,2EAA2E,CAC5E,CAAC,GAAG,EAAE,CAAA;QAEP,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;QAC3D,CAAC;QAED,MAAM,kBAAkB,GAAG,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,EAAmC,CAAA;QAC1H,MAAM,iBAAiB,GAAG,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,EAAmC,CAAA;QAExH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,kBAAkB,EAAE,KAAK,IAAI,CAAC;YAC5C,WAAW,EAAE,iBAAiB,EAAE,KAAK,IAAI,CAAC;SAC3C,CAAA;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,GAAW;IACvD,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAkC,CAAA;QACnH,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,MAAgB;IAC5D,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACpD,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,EAAE,CAAC,OAAO,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAqB,EAAE,GAAW,EAAE,KAAa;IACtF,MAAM,GAAG,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAA;IACvC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC;SAC/B,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SACtB,kBAAkB,CAAC;QAClB,MAAM,EAAE,sBAAsB,CAAC,GAAG;QAClC,GAAG,EAAE,EAAE,KAAK,EAAE;KACf,CAAC;SACD,GAAG,EAAE,CAAA;AACV,CAAC"}

package/dist/lib/database/workspace-schema.d.ts

@@ -4,4 +4,4 @@
  * Extracted so migration files can reference the SQL without
  * creating a circular import through database/index.ts.
  */
-export declare const CREATE_TABLES_SQL = "\n-- Core workspace metadata\nCREATE TABLE IF NOT EXISTS workspace (\n  id INTEGER PRIMARY KEY CHECK (id = 1),\n  type TEXT NOT NULL CHECK (type IN ('hq', 'workspace')),\n  workspace_name TEXT NOT NULL,\n  has_pmo BOOLEAN DEFAULT FALSE,\n  active_theme_id TEXT,\n  created_at TEXT NOT NULL,\n  FOREIGN KEY (active_theme_id) REFERENCES agent_themes(id) ON DELETE SET NULL\n);\n\n-- Repository management\nCREATE TABLE IF NOT EXISTS repositories (\n  name TEXT PRIMARY KEY,\n  path TEXT NOT NULL,\n  type TEXT DEFAULT 'main' CHECK (type IN ('main', 'dependency')),\n  source_url TEXT,\n  action TEXT CHECK (action IN ('clone', 'move', 'link')),\n  added_at TEXT NOT NULL\n);\n\n-- Agent naming themes (optional)\nCREATE TABLE IF NOT EXISTS agent_themes (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL UNIQUE,\n  display_name TEXT NOT NULL,\n  description TEXT,\n  builtin BOOLEAN DEFAULT FALSE,\n  created_at TEXT NOT NULL\n);\n\n-- Names available within each theme\nCREATE TABLE IF NOT EXISTS agent_theme_names (\n  theme_id TEXT NOT NULL,\n  name TEXT NOT NULL,\n  PRIMARY KEY (theme_id, name),\n  FOREIGN KEY (theme_id) REFERENCES agent_themes(id) ON DELETE CASCADE\n);\n\n-- Agent instances in workspace\nCREATE TABLE IF NOT EXISTS agents (\n  name TEXT PRIMARY KEY,\n  type TEXT NOT NULL DEFAULT 'persistent' CHECK (type IN ('persistent', 'ephemeral')),\n  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'cleaned')),\n  base_name TEXT,\n  theme_id TEXT,\n  worktree_path TEXT,\n  mount_mode TEXT NOT NULL DEFAULT 'worktree' CHECK (mount_mode IN ('worktree', 'clone')),\n  created_at TEXT NOT NULL,\n  cleaned_at TEXT,\n  FOREIGN KEY (theme_id) REFERENCES agent_themes(id) ON DELETE SET NULL\n);\n\n-- Agent-owned worktrees\nCREATE TABLE IF NOT EXISTS agent_worktrees (\n  agent_name TEXT NOT NULL,\n  repo_name TEXT NOT NULL,\n  worktree_path TEXT NOT NULL,\n  branch TEXT NOT NULL,\n  created_at TEXT NOT NULL,\n  last_commit_hash TEXT,\n  commits_ahead INTEGER NOT NULL DEFAULT 0,\n  is_clean INTEGER NOT NULL DEFAULT 1,\n  last_checked TEXT,\n  PRIMARY KEY (agent_name, repo_name),\n  FOREIGN KEY (agent_name) REFERENCES agents(name) ON DELETE CASCADE,\n  FOREIGN KEY (repo_name) REFERENCES repositories(name) ON DELETE CASCADE\n);\n\n-- Workspace-level settings (key-value store)\nCREATE TABLE IF NOT EXISTS workspace_settings (\n  key TEXT PRIMARY KEY,\n  value TEXT NOT NULL\n);\n\n-- Media items (videos, audio files with preprocessed assets)\nCREATE TABLE IF NOT EXISTS media_items (\n  name TEXT PRIMARY KEY,\n  path TEXT NOT NULL,\n  source_path TEXT,\n  media_type TEXT NOT NULL DEFAULT 'video' CHECK (media_type IN ('video', 'audio')),\n  duration_seconds REAL,\n  resolution TEXT,\n  frame_count INTEGER NOT NULL DEFAULT 0,\n  has_transcript INTEGER NOT NULL DEFAULT 0,\n  frame_interval INTEGER NOT NULL DEFAULT 30,\n  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'processing', 'ready', 'error')),\n  error_message TEXT,\n  added_at TEXT NOT NULL,\n  processed_at TEXT\n);\n\n-- =============================================================================\n-- Indexes\n-- =============================================================================\n\nCREATE INDEX IF NOT EXISTS idx_worktrees_agent ON agent_worktrees(agent_name);\nCREATE INDEX IF NOT EXISTS idx_worktrees_repo ON agent_worktrees(repo_name);\nCREATE INDEX IF NOT EXISTS idx_theme_names_theme ON agent_theme_names(theme_id);\nCREATE INDEX IF NOT EXISTS idx_agents_theme ON agents(theme_id);\n";
+export declare const CREATE_TABLES_SQL = "\n-- Core workspace metadata\nCREATE TABLE IF NOT EXISTS workspace (\n  id INTEGER PRIMARY KEY CHECK (id = 1),\n  type TEXT NOT NULL CHECK (type IN ('hq', 'workspace')),\n  workspace_name TEXT NOT NULL,\n  has_pmo BOOLEAN DEFAULT FALSE,\n  active_theme_id TEXT,\n  created_at TEXT NOT NULL,\n  FOREIGN KEY (active_theme_id) REFERENCES agent_themes(id) ON DELETE SET NULL\n);\n\n-- Repository management\nCREATE TABLE IF NOT EXISTS repositories (\n  name TEXT PRIMARY KEY,\n  path TEXT NOT NULL,\n  type TEXT DEFAULT 'main' CHECK (type IN ('main', 'dependency')),\n  source_url TEXT,\n  action TEXT CHECK (action IN ('clone', 'move', 'link')),\n  added_at TEXT NOT NULL\n);\n\n-- Agent naming themes (optional)\nCREATE TABLE IF NOT EXISTS agent_themes (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL UNIQUE,\n  display_name TEXT NOT NULL,\n  description TEXT,\n  builtin BOOLEAN DEFAULT FALSE,\n  created_at TEXT NOT NULL\n);\n\n-- Names available within each theme\nCREATE TABLE IF NOT EXISTS agent_theme_names (\n  theme_id TEXT NOT NULL,\n  name TEXT NOT NULL,\n  PRIMARY KEY (theme_id, name),\n  FOREIGN KEY (theme_id) REFERENCES agent_themes(id) ON DELETE CASCADE\n);\n\n-- Agent instances in workspace\nCREATE TABLE IF NOT EXISTS agents (\n  name TEXT PRIMARY KEY,\n  type TEXT NOT NULL DEFAULT 'persistent' CHECK (type IN ('persistent', 'ephemeral')),\n  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'running', 'completed', 'dead', 'cleaned')),\n  base_name TEXT,\n  theme_id TEXT,\n  worktree_path TEXT,\n  mount_mode TEXT NOT NULL DEFAULT 'worktree' CHECK (mount_mode IN ('worktree', 'clone')),\n  created_at TEXT NOT NULL,\n  cleaned_at TEXT,\n  FOREIGN KEY (theme_id) REFERENCES agent_themes(id) ON DELETE SET NULL\n);\n\nCREATE INDEX IF NOT EXISTS idx_agents_status ON agents(status);\n\n-- Agent-owned worktrees\nCREATE TABLE IF NOT EXISTS agent_worktrees (\n  agent_name TEXT NOT NULL,\n  repo_name TEXT NOT NULL,\n  worktree_path TEXT NOT NULL,\n  branch TEXT NOT NULL,\n  created_at TEXT NOT NULL,\n  last_commit_hash TEXT,\n  commits_ahead INTEGER NOT NULL DEFAULT 0,\n  is_clean INTEGER NOT NULL DEFAULT 1,\n  last_checked TEXT,\n  PRIMARY KEY (agent_name, repo_name),\n  FOREIGN KEY (agent_name) REFERENCES agents(name) ON DELETE CASCADE,\n  FOREIGN KEY (repo_name) REFERENCES repositories(name) ON DELETE CASCADE\n);\n\n-- Workspace-level settings (key-value store)\nCREATE TABLE IF NOT EXISTS workspace_settings (\n  key TEXT PRIMARY KEY,\n  value TEXT NOT NULL\n);\n\n-- Media items (videos, audio files with preprocessed assets)\nCREATE TABLE IF NOT EXISTS media_items (\n  name TEXT PRIMARY KEY,\n  path TEXT NOT NULL,\n  source_path TEXT,\n  media_type TEXT NOT NULL DEFAULT 'video' CHECK (media_type IN ('video', 'audio')),\n  duration_seconds REAL,\n  resolution TEXT,\n  frame_count INTEGER NOT NULL DEFAULT 0,\n  has_transcript INTEGER NOT NULL DEFAULT 0,\n  frame_interval INTEGER NOT NULL DEFAULT 30,\n  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'processing', 'ready', 'error')),\n  error_message TEXT,\n  added_at TEXT NOT NULL,\n  processed_at TEXT\n);\n\n-- =============================================================================\n-- Indexes\n-- =============================================================================\n\nCREATE INDEX IF NOT EXISTS idx_worktrees_agent ON agent_worktrees(agent_name);\nCREATE INDEX IF NOT EXISTS idx_worktrees_repo ON agent_worktrees(repo_name);\nCREATE INDEX IF NOT EXISTS idx_theme_names_theme ON agent_theme_names(theme_id);\nCREATE INDEX IF NOT EXISTS idx_agents_theme ON agents(theme_id);\n";

package/dist/lib/database/workspace-schema.js

@@ -48,7 +48,7 @@ CREATE TABLE IF NOT EXISTS agent_theme_names (
 CREATE TABLE IF NOT EXISTS agents (
   name TEXT PRIMARY KEY,
   type TEXT NOT NULL DEFAULT 'persistent' CHECK (type IN ('persistent', 'ephemeral')),
-  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'cleaned')),
+  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'running', 'completed', 'dead', 'cleaned')),
   base_name TEXT,
   theme_id TEXT,
   worktree_path TEXT,
@@ -58,6 +58,8 @@ CREATE TABLE IF NOT EXISTS agents (
   FOREIGN KEY (theme_id) REFERENCES agent_themes(id) ON DELETE SET NULL
 );
 
+CREATE INDEX IF NOT EXISTS idx_agents_status ON agents(status);
+
 -- Agent-owned worktrees
 CREATE TABLE IF NOT EXISTS agent_worktrees (
   agent_name TEXT NOT NULL,

package/dist/lib/database/workspace-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-schema.js","sourceRoot":"","sources":["../../../src/lib/database/workspace-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqGhC,CAAC"}
+{"version":3,"file":"workspace-schema.js","sourceRoot":"","sources":["../../../src/lib/database/workspace-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuGhC,CAAC"}

package/dist/lib/database/workspace.js

@@ -11,6 +11,7 @@ import { isReadOnlyHQMount } from '../container.js';
 import { throwIfNativeBindingError } from './native-validation.js';
 import { runDrizzleMigrations } from './migrator.js';
 import { ALL_MIGRATIONS } from './migrations/index.js';
+import { migrateCredentials } from './credential-store.js';
 import { createDrizzleConnection } from './drizzle.js';
 import { workspace as workspaceTable, } from './drizzle-schema.js';
 import { BetterSqlite3Driver } from './driver.js';
@@ -134,6 +135,9 @@ export function openWorkspaceDatabase(workspacePath, options) {
         }
         runDrizzleMigrations(db, ALL_MIGRATIONS);
         ensureEphemeralAgentTypes(db);
+        // PRLT-1114: Move credentials from workspace.db to separate credentials.db
+        // so they are not exposed when .proletariat/ is mounted into agent containers
+        migrateCredentials(db);
     }
     return db;
 }