@wardby/cli 0.1.0

package/prisma/migrations/20260905010000_scheduler_durability/migration.sql

@@ -0,0 +1,31 @@
+-- Hand-written per CLEANROOM.md (never `db push`, never generated from
+-- another project's migrations). Additive: Phase 2 scheduler + durability.
+-- Mirrors prisma/schema.prisma exactly.
+
+-- AlterEnum
+-- Postgres 12+ allows ADD VALUE inside a transaction as long as the new
+-- value isn't *used* in the same transaction — this migration only adds it.
+ALTER TYPE "RunStatus" ADD VALUE 'lost';
+
+-- CreateEnum
+CREATE TYPE "RunTrigger" AS ENUM ('manual', 'scheduled');
+
+-- AlterTable: Agent scheduling fields
+ALTER TABLE "Agent" ADD COLUMN "schedule" TEXT;
+ALTER TABLE "Agent" ADD COLUMN "timezone" TEXT NOT NULL DEFAULT 'UTC';
+ALTER TABLE "Agent" ADD COLUMN "scheduleEnabled" BOOLEAN NOT NULL DEFAULT true;
+ALTER TABLE "Agent" ADD COLUMN "lastScheduledAt" TIMESTAMP(3);
+
+-- AlterTable: Run durability + provenance fields
+ALTER TABLE "Run" ADD COLUMN "trigger" "RunTrigger" NOT NULL DEFAULT 'manual';
+ALTER TABLE "Run" ADD COLUMN "heartbeatAt" TIMESTAMP(3);
+
+-- CreateTable
+CREATE TABLE "SchedulerLease" (
+    "scope" TEXT NOT NULL,
+    "holder" TEXT NOT NULL,
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "SchedulerLease_pkey" PRIMARY KEY ("scope")
+);

package/prisma/migrations/20260905020000_tools_multiturn/migration.sql

@@ -0,0 +1,47 @@
+-- Hand-written per CLEANROOM.md (never `db push`, never generated from
+-- another project's migrations). Additive: Phase 3 tools + multi-turn loop.
+-- Mirrors prisma/schema.prisma exactly.
+
+-- AlterEnum
+-- Postgres 12+ allows ADD VALUE inside a transaction as long as the new
+-- value isn't *used* in the same transaction — this migration only adds it.
+ALTER TYPE "RunStatus" ADD VALUE 'budget_exhausted';
+
+-- AlterTable: Agent gains maxTurns
+ALTER TABLE "Agent" ADD COLUMN "maxTurns" INTEGER NOT NULL DEFAULT 10;
+
+-- CreateTable
+CREATE TABLE "Tool" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "description" TEXT NOT NULL,
+    "paramsZod" TEXT NOT NULL,
+    "code" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Tool_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "Tool_name_key" ON "Tool"("name");
+
+-- CreateTable
+CREATE TABLE "AgentTool" (
+    "agentId" TEXT NOT NULL,
+    "toolId" TEXT NOT NULL,
+
+    CONSTRAINT "AgentTool_pkey" PRIMARY KEY ("agentId","toolId")
+);
+
+ALTER TABLE "AgentTool" ADD CONSTRAINT "AgentTool_agentId_fkey" FOREIGN KEY ("agentId") REFERENCES "Agent"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+ALTER TABLE "AgentTool" ADD CONSTRAINT "AgentTool_toolId_fkey" FOREIGN KEY ("toolId") REFERENCES "Tool"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- CreateTable
+CREATE TABLE "DatastoreEntry" (
+    "agentId" TEXT NOT NULL,
+    "key" TEXT NOT NULL,
+    "value" JSONB NOT NULL,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "DatastoreEntry_pkey" PRIMARY KEY ("agentId","key")
+);

package/prisma/migrations/20260905030000_cache_tool_json_schema/migration.sql

@@ -0,0 +1,13 @@
+-- Hand-written per CLEANROOM.md (never `db push`, never generated from
+-- another project's migrations). Additive: caches the JSON Schema derived
+-- from Tool.paramsZod at registration time, instead of re-deriving it
+-- (spinning a fresh QuickJS runtime per attached tool) on every run.
+-- Mirrors prisma/schema.prisma exactly.
+
+-- AlterTable
+-- DEFAULT '{}' only satisfies any pre-existing rows during the ALTER; the
+-- application always supplies a real derived schema on every future
+-- insert (Tool has no update path), so the default is dropped immediately
+-- after and never relied upon going forward.
+ALTER TABLE "Tool" ADD COLUMN "jsonSchema" JSONB NOT NULL DEFAULT '{}';
+ALTER TABLE "Tool" ALTER COLUMN "jsonSchema" DROP DEFAULT;

package/prisma/migrations/20260906000000_mcp_phase4/migration.sql

@@ -0,0 +1,115 @@
+-- Hand-written per CLEANROOM.md (never `db push`, never generated from
+-- another project's migrations). Additive: Phase 4 MCP server —
+-- principals/ownership, task handles, secrets, webhooks, self-hosted OAuth.
+-- Mirrors prisma/schema.prisma exactly.
+
+-- CreateEnum
+CREATE TYPE "TaskKind" AS ENUM ('run', 'tool_authoring');
+CREATE TYPE "TaskStatus" AS ENUM ('working', 'input_required', 'completed', 'failed', 'cancelled');
+CREATE TYPE "WebhookStatus" AS ENUM ('enabled', 'disabled');
+
+-- CreateTable
+CREATE TABLE "Principal" (
+    "id" TEXT NOT NULL,
+    "subject" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "Principal_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "Principal_subject_key" ON "Principal"("subject");
+
+-- CreateTable
+CREATE TABLE "Task" (
+    "id" TEXT NOT NULL,
+    "kind" "TaskKind" NOT NULL,
+    "runId" TEXT,
+    "status" "TaskStatus" NOT NULL DEFAULT 'working',
+    "inputRequests" JSONB,
+    "inputResponses" JSONB,
+    "result" JSONB,
+    "error" JSONB,
+    "ttlAt" TIMESTAMP(3) NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Task_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Secret" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "ciphertext" TEXT NOT NULL,
+    "keyId" TEXT NOT NULL,
+    "ownerId" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Secret_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "Secret_ownerId_name_key" ON "Secret"("ownerId", "name");
+
+-- CreateTable
+CREATE TABLE "AgentSecret" (
+    "agentId" TEXT NOT NULL,
+    "secretId" TEXT NOT NULL,
+
+    CONSTRAINT "AgentSecret_pkey" PRIMARY KEY ("agentId","secretId")
+);
+
+-- CreateTable
+CREATE TABLE "Webhook" (
+    "id" TEXT NOT NULL,
+    "agentId" TEXT NOT NULL,
+    "secretHash" TEXT NOT NULL,
+    "status" "WebhookStatus" NOT NULL DEFAULT 'enabled',
+    "ownerId" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "lastFiredAt" TIMESTAMP(3),
+
+    CONSTRAINT "Webhook_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX "Webhook_agentId_idx" ON "Webhook"("agentId");
+
+-- CreateTable
+CREATE TABLE "OAuthClient" (
+    "clientId" TEXT NOT NULL,
+    "metadata" JSONB NOT NULL,
+    "clientSecret" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "OAuthClient_pkey" PRIMARY KEY ("clientId")
+);
+
+-- CreateTable
+CREATE TABLE "OAuthGrant" (
+    "id" TEXT NOT NULL,
+    "clientId" TEXT NOT NULL,
+    "principalId" TEXT NOT NULL,
+    "scope" TEXT NOT NULL,
+    "refreshToken" TEXT,
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "OAuthGrant_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "OAuthGrant_refreshToken_key" ON "OAuthGrant"("refreshToken");
+
+-- AlterTable: Agent gains ownerId
+ALTER TABLE "Agent" ADD COLUMN "ownerId" TEXT;
+
+-- AlterTable: Tool gains ownerId
+ALTER TABLE "Tool" ADD COLUMN "ownerId" TEXT;
+
+-- AddForeignKey
+ALTER TABLE "Agent" ADD CONSTRAINT "Agent_ownerId_fkey" FOREIGN KEY ("ownerId") REFERENCES "Principal"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+ALTER TABLE "Tool" ADD CONSTRAINT "Tool_ownerId_fkey" FOREIGN KEY ("ownerId") REFERENCES "Principal"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+ALTER TABLE "Secret" ADD CONSTRAINT "Secret_ownerId_fkey" FOREIGN KEY ("ownerId") REFERENCES "Principal"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+ALTER TABLE "Webhook" ADD CONSTRAINT "Webhook_ownerId_fkey" FOREIGN KEY ("ownerId") REFERENCES "Principal"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+ALTER TABLE "Webhook" ADD CONSTRAINT "Webhook_agentId_fkey" FOREIGN KEY ("agentId") REFERENCES "Agent"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+ALTER TABLE "AgentSecret" ADD CONSTRAINT "AgentSecret_agentId_fkey" FOREIGN KEY ("agentId") REFERENCES "Agent"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+ALTER TABLE "AgentSecret" ADD CONSTRAINT "AgentSecret_secretId_fkey" FOREIGN KEY ("secretId") REFERENCES "Secret"("id") ON DELETE RESTRICT ON UPDATE CASCADE;

package/prisma/migrations/20260906010000_run_final_text/migration.sql

@@ -0,0 +1,7 @@
+-- Hand-written per CLEANROOM.md (never `db push`, never generated from
+-- another project's migrations). Additive: Run.finalText, so a completed
+-- run's answer is durably readable (previously only streamed live via
+-- onText and dropped) — needed by Phase 4's Task manager (MCP) to answer
+-- `tasks/get`/`get_run` for a succeeded run.
+
+ALTER TABLE "Run" ADD COLUMN "finalText" TEXT;

package/prisma/migrations/20260906020000_run_turns/migration.sql

@@ -0,0 +1,6 @@
+-- Hand-written per CLEANROOM.md (never `db push`, never generated from
+-- another project's migrations). Additive: Run.turns, so a run's turn
+-- count is durably readable (previously only returned in EngineResult and
+-- dropped) — needed by Phase 4's list_runs/get_run MCP tools.
+
+ALTER TABLE "Run" ADD COLUMN "turns" INTEGER NOT NULL DEFAULT 0;

package/prisma/migrations/20260906030000_task_principal_id/migration.sql

@@ -0,0 +1,5 @@
+-- Add nullable Task.principalId: replaces transitive
+-- Task -> Run -> Agent -> ownerId ownership resolution with a direct
+-- stamp-at-creation column, uniform across task kinds (including future
+-- tool_authoring tasks, which have no Run/Agent chain).
+ALTER TABLE "Task" ADD COLUMN "principalId" TEXT;

package/prisma/migrations/20260906040000_secure_self_hosted_oauth/migration.sql

@@ -0,0 +1,67 @@
+-- Hand-written security migration. All legacy OAuth credentials are intentionally invalidated.
+-- Deploy only after backup and with issuance stopped. Never restore legacy credential contents.
+BEGIN;
+DROP TABLE "OAuthGrant";
+DROP TABLE "OAuthClient";
+CREATE TABLE "OAuthClient" ("clientId" TEXT PRIMARY KEY, "metadata" JSONB NOT NULL, "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP);
+CREATE TABLE "AuthUser" (
+  "id" TEXT PRIMARY KEY, "principalId" TEXT NOT NULL, "displayName" TEXT,
+  "status" TEXT NOT NULL DEFAULT 'enabled', "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, "updatedAt" TIMESTAMP(3) NOT NULL,
+  CONSTRAINT "AuthUser_principalId_fkey" FOREIGN KEY ("principalId") REFERENCES "Principal"("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+CREATE UNIQUE INDEX "AuthUser_principalId_key" ON "AuthUser"("principalId");
+CREATE TABLE "AuthLoginKey" (
+  "keyId" TEXT PRIMARY KEY, "userId" TEXT NOT NULL, "secretHash" TEXT NOT NULL,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, "lastUsedAt" TIMESTAMP(3), "expiresAt" TIMESTAMP(3) NOT NULL, "revokedAt" TIMESTAMP(3),
+  CONSTRAINT "AuthLoginKey_userId_fkey" FOREIGN KEY ("userId") REFERENCES "AuthUser"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+CREATE INDEX "AuthLoginKey_userId_idx" ON "AuthLoginKey"("userId");
+CREATE INDEX "AuthLoginKey_expiresAt_idx" ON "AuthLoginKey"("expiresAt");
+CREATE TABLE "AuthSession" (
+  "sessionId" TEXT PRIMARY KEY, "userId" TEXT NOT NULL, "secretHash" TEXT NOT NULL,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, "lastSeenAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "expiresAt" TIMESTAMP(3) NOT NULL, "revokedAt" TIMESTAMP(3),
+  CONSTRAINT "AuthSession_userId_fkey" FOREIGN KEY ("userId") REFERENCES "AuthUser"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+CREATE INDEX "AuthSession_userId_idx" ON "AuthSession"("userId");
+CREATE INDEX "AuthSession_expiresAt_idx" ON "AuthSession"("expiresAt");
+CREATE TABLE "AuthFormChallenge" (
+  "challengeId" TEXT PRIMARY KEY, "sessionId" TEXT, "purpose" TEXT NOT NULL, "binding" TEXT NOT NULL, "secretHash" TEXT NOT NULL,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, "expiresAt" TIMESTAMP(3) NOT NULL, "consumedAt" TIMESTAMP(3),
+  CONSTRAINT "AuthFormChallenge_sessionId_fkey" FOREIGN KEY ("sessionId") REFERENCES "AuthSession"("sessionId") ON DELETE CASCADE ON UPDATE CASCADE
+);
+CREATE INDEX "AuthFormChallenge_expiresAt_idx" ON "AuthFormChallenge"("expiresAt");
+CREATE TABLE "OAuthAuthorizationRequest" (
+  "id" TEXT PRIMARY KEY, "clientId" TEXT NOT NULL, "redirectUri" TEXT NOT NULL, "resource" TEXT NOT NULL,
+  "requestedScope" TEXT NOT NULL, "codeChallenge" TEXT NOT NULL, "state" TEXT,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, "expiresAt" TIMESTAMP(3) NOT NULL, "consumedAt" TIMESTAMP(3),
+  CONSTRAINT "OAuthAuthorizationRequest_clientId_fkey" FOREIGN KEY ("clientId") REFERENCES "OAuthClient"("clientId") ON DELETE CASCADE ON UPDATE CASCADE
+);
+CREATE INDEX "OAuthAuthorizationRequest_expiresAt_idx" ON "OAuthAuthorizationRequest"("expiresAt");
+CREATE TABLE "OAuthAuthorizationCode" (
+  "codeId" TEXT PRIMARY KEY, "secretHash" TEXT NOT NULL, "clientId" TEXT NOT NULL, "userId" TEXT NOT NULL,
+  "redirectUri" TEXT NOT NULL, "resource" TEXT NOT NULL, "scope" TEXT NOT NULL, "codeChallenge" TEXT NOT NULL,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, "expiresAt" TIMESTAMP(3) NOT NULL, "consumedAt" TIMESTAMP(3),
+  CONSTRAINT "OAuthAuthorizationCode_clientId_fkey" FOREIGN KEY ("clientId") REFERENCES "OAuthClient"("clientId") ON DELETE CASCADE ON UPDATE CASCADE,
+  CONSTRAINT "OAuthAuthorizationCode_userId_fkey" FOREIGN KEY ("userId") REFERENCES "AuthUser"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+CREATE INDEX "OAuthAuthorizationCode_expiresAt_idx" ON "OAuthAuthorizationCode"("expiresAt");
+CREATE TABLE "OAuthFamily" (
+  "id" TEXT PRIMARY KEY, "clientId" TEXT NOT NULL, "userId" TEXT NOT NULL, "scope" TEXT NOT NULL, "resource" TEXT NOT NULL,
+  "expiresAt" TIMESTAMP(3) NOT NULL, "revokedAt" TIMESTAMP(3), "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "OAuthFamily_clientId_fkey" FOREIGN KEY ("clientId") REFERENCES "OAuthClient"("clientId") ON DELETE CASCADE ON UPDATE CASCADE,
+  CONSTRAINT "OAuthFamily_userId_fkey" FOREIGN KEY ("userId") REFERENCES "AuthUser"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+CREATE INDEX "OAuthFamily_userId_idx" ON "OAuthFamily"("userId");
+CREATE INDEX "OAuthFamily_expiresAt_idx" ON "OAuthFamily"("expiresAt");
+CREATE TABLE "OAuthGrant" (
+  "id" TEXT PRIMARY KEY, "familyId" TEXT NOT NULL, "refreshTokenHash" TEXT NOT NULL,
+  "expiresAt" TIMESTAMP(3) NOT NULL, "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "consumedAt" TIMESTAMP(3), "revokedAt" TIMESTAMP(3), "replacedById" TEXT,
+  CONSTRAINT "OAuthGrant_familyId_fkey" FOREIGN KEY ("familyId") REFERENCES "OAuthFamily"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+CREATE INDEX "OAuthGrant_familyId_idx" ON "OAuthGrant"("familyId");
+CREATE INDEX "OAuthGrant_expiresAt_idx" ON "OAuthGrant"("expiresAt");
+CREATE TABLE "AuthRateLimit" ("key" TEXT PRIMARY KEY, "hits" INTEGER NOT NULL, "expiresAt" TIMESTAMP(3) NOT NULL);
+CREATE INDEX "AuthRateLimit_expiresAt_idx" ON "AuthRateLimit"("expiresAt");
+COMMIT;

package/prisma/migrations/20260906050000_phase5_coding_agents/migration.sql

@@ -0,0 +1,52 @@
+-- Phase 5 coding-agent schema. Additive defaults preserve all existing agents
+-- as native and all existing runs as managed by their historical execution path.
+BEGIN;
+
+CREATE TYPE "AgentKind" AS ENUM ('native', 'coding');
+CREATE TYPE "CodingProvider" AS ENUM ('codex');
+ALTER TYPE "RunStatus" ADD VALUE 'cancelled';
+
+ALTER TABLE "Agent"
+  ADD COLUMN "kind" "AgentKind" NOT NULL DEFAULT 'native';
+
+ALTER TABLE "Run"
+  ADD COLUMN "executionManaged" BOOLEAN NOT NULL DEFAULT false;
+
+CREATE TABLE "CodingAgentProfile" (
+  "agentId" TEXT PRIMARY KEY,
+  "provider" "CodingProvider" NOT NULL DEFAULT 'codex',
+  "repository" TEXT NOT NULL,
+  "baseRef" TEXT NOT NULL DEFAULT 'main',
+  "defaultTask" TEXT,
+  "timeoutSec" INTEGER NOT NULL DEFAULT 1800,
+  "allowedEgress" JSONB NOT NULL,
+  "protectedPaths" JSONB NOT NULL,
+  CONSTRAINT "CodingAgentProfile_agentId_fkey"
+    FOREIGN KEY ("agentId") REFERENCES "Agent"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE TABLE "CodingRun" (
+  "runId" TEXT PRIMARY KEY,
+  "task" TEXT NOT NULL,
+  "repository" TEXT NOT NULL,
+  "baseRef" TEXT NOT NULL,
+  "headRef" TEXT NOT NULL,
+  "provider" "CodingProvider" NOT NULL,
+  "model" TEXT NOT NULL,
+  "timeoutSec" INTEGER NOT NULL,
+  "allowedEgress" JSONB NOT NULL,
+  "protectedPaths" JSONB NOT NULL,
+  "jobBackend" TEXT,
+  "jobHandle" TEXT,
+  "result" JSONB,
+  "resultSchema" INTEGER NOT NULL DEFAULT 1,
+  "budgetReservedUsd" DECIMAL(10,6) NOT NULL,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL,
+  CONSTRAINT "CodingRun_runId_fkey"
+    FOREIGN KEY ("runId") REFERENCES "Run"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE INDEX "CodingRun_jobBackend_jobHandle_idx" ON "CodingRun"("jobBackend", "jobHandle");
+
+COMMIT;

package/prisma/migrations/20260906060000_tool_capability_scoping/migration.sql

@@ -0,0 +1,22 @@
+-- Per-attachment capability scoping (OWASP LLM08 fix). Additive: three new
+-- JSONB columns on AgentTool, defaulting to an empty array (deny-all) for
+-- any row inserted from now on. Pre-existing rows are explicitly backfilled
+-- below to their current unrestricted behavior so no already-scheduled
+-- agent breaks on deploy -- new attach_tool/CLI calls default to deny-all.
+BEGIN;
+
+ALTER TABLE "AgentTool" ADD COLUMN "allowedSecrets" JSONB NOT NULL DEFAULT '[]';
+ALTER TABLE "AgentTool" ADD COLUMN "allowedDatastorePrefixes" JSONB NOT NULL DEFAULT '[]';
+ALTER TABLE "AgentTool" ADD COLUMN "allowedHosts" JSONB NOT NULL DEFAULT '[]';
+
+UPDATE "AgentTool" AS at
+SET "allowedSecrets" = COALESCE((
+      SELECT jsonb_agg(s."name")
+      FROM "AgentSecret" ags
+      JOIN "Secret" s ON s."id" = ags."secretId"
+      WHERE ags."agentId" = at."agentId"
+    ), '[]'::jsonb),
+    "allowedDatastorePrefixes" = '[""]'::jsonb,
+    "allowedHosts" = '["*"]'::jsonb;
+
+COMMIT;

package/prisma/migrations/20260906070000_datastore_pii_flag/migration.sql

@@ -0,0 +1,6 @@
+-- Opt-in per-entry PII encryption for the datastore seam. Additive: two new
+-- columns on DatastoreEntry, both defaulted so every existing row keeps its
+-- current (unencrypted) behavior. `pii` is only ever set true by an explicit
+-- `datastore.set(..., { pii: true })` call -- never inferred or backfilled.
+ALTER TABLE "DatastoreEntry" ADD COLUMN "pii" BOOLEAN NOT NULL DEFAULT false;
+ALTER TABLE "DatastoreEntry" ADD COLUMN "keyId" TEXT;

package/prisma/migrations/20260906080000_secret_elicitation_outcomes/migration.sql

@@ -0,0 +1,13 @@
+-- Cross-instance persistence for the out-of-band secret-entry flow. Replaces
+-- the in-process `outcomes` Map in mcp/tools/secret-elicitation.ts, which
+-- stranded a browser-form submission on the wrong instance under a
+-- multi-instance HTTP deployment. New table only -- no existing table
+-- touched.
+CREATE TABLE "SecretElicitationOutcome" (
+    "ownerId" TEXT NOT NULL,
+    "secretName" TEXT NOT NULL,
+    "outcome" JSONB NOT NULL,
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "SecretElicitationOutcome_pkey" PRIMARY KEY ("ownerId","secretName")
+);

package/prisma/migrations/20260907010000_coding_proxy_ledger/migration.sql

@@ -0,0 +1,57 @@
+-- Durable, monotonic accounting for the Phase 5 per-run credential proxy.
+-- Capability and provider secrets are deliberately absent: only a SHA-256
+-- capability digest and an operator-defined credential reference are stored.
+BEGIN;
+
+CREATE TYPE "CodingProxySessionStatus" AS ENUM ('active', 'cancelled');
+CREATE TYPE "CodingProxyRequestStatus" AS ENUM ('reserved', 'completed', 'released', 'uncertain');
+
+CREATE TABLE "CodingProxySession" (
+  "id" TEXT PRIMARY KEY,
+  "runId" TEXT NOT NULL,
+  "capabilityHash" TEXT NOT NULL,
+  "credentialRef" TEXT NOT NULL,
+  "allowedModels" JSONB NOT NULL,
+  "deadlineAt" TIMESTAMP(3) NOT NULL,
+  "budgetUsd" DECIMAL(18,10) NOT NULL,
+  "status" "CodingProxySessionStatus" NOT NULL DEFAULT 'active',
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL,
+  CONSTRAINT "CodingProxySession_runId_fkey"
+    FOREIGN KEY ("runId") REFERENCES "CodingRun"("runId") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE UNIQUE INDEX "CodingProxySession_runId_key" ON "CodingProxySession"("runId");
+CREATE UNIQUE INDEX "CodingProxySession_capabilityHash_key" ON "CodingProxySession"("capabilityHash");
+CREATE INDEX "CodingProxySession_deadlineAt_idx" ON "CodingProxySession"("deadlineAt");
+
+CREATE TABLE "CodingProxyRequest" (
+  "id" TEXT PRIMARY KEY,
+  "sessionId" TEXT NOT NULL,
+  "requestKey" TEXT NOT NULL,
+  "requestFingerprint" TEXT NOT NULL,
+  "model" TEXT NOT NULL,
+  "status" "CodingProxyRequestStatus" NOT NULL DEFAULT 'reserved',
+  "reservationUsd" DECIMAL(18,10) NOT NULL,
+  "actualCostUsd" DECIMAL(18,10),
+  "pricingVersion" TEXT NOT NULL,
+  "pricingSnapshot" JSONB NOT NULL,
+  "inputTokens" INTEGER,
+  "outputTokens" INTEGER,
+  "cachedInputTokens" INTEGER,
+  "cacheWriteTokens" INTEGER,
+  "reasoningTokens" INTEGER,
+  "upstreamStatus" INTEGER,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL,
+  "completedAt" TIMESTAMP(3),
+  CONSTRAINT "CodingProxyRequest_sessionId_fkey"
+    FOREIGN KEY ("sessionId") REFERENCES "CodingProxySession"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE UNIQUE INDEX "CodingProxyRequest_sessionId_requestKey_key"
+  ON "CodingProxyRequest"("sessionId", "requestKey");
+CREATE INDEX "CodingProxyRequest_sessionId_status_idx"
+  ON "CodingProxyRequest"("sessionId", "status");
+
+COMMIT;

package/prisma/migrations/20260907020000_budget_groups/migration.sql

@@ -0,0 +1,24 @@
+-- Optional recurring (daily/weekly/monthly) spend caps across a group of
+-- agents, layered on top of each agent's existing per-run budgetUsd.
+-- Additive only: a new table plus one new nullable column on Agent.
+CREATE TABLE "BudgetGroup" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "ownerId" TEXT,
+    "dailyBudgetUsd" DECIMAL(10,4),
+    "weeklyBudgetUsd" DECIMAL(10,4),
+    "monthlyBudgetUsd" DECIMAL(10,4),
+    "warnThresholdRatio" DECIMAL(3,2) NOT NULL DEFAULT 0.8,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "BudgetGroup_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "BudgetGroup_ownerId_name_key" ON "BudgetGroup"("ownerId", "name");
+
+ALTER TABLE "BudgetGroup" ADD CONSTRAINT "BudgetGroup_ownerId_fkey" FOREIGN KEY ("ownerId") REFERENCES "Principal"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+ALTER TABLE "Agent" ADD COLUMN "budgetGroupId" TEXT;
+
+ALTER TABLE "Agent" ADD CONSTRAINT "Agent_budgetGroupId_fkey" FOREIGN KEY ("budgetGroupId") REFERENCES "BudgetGroup"("id") ON DELETE SET NULL ON UPDATE CASCADE;

package/prisma/migrations/20260907030000_coding_webhook_task_override/migration.sql

@@ -0,0 +1,4 @@
+-- Webhook task input is disabled by default and must be explicitly enabled
+-- on the coding profile that owns the repository policy.
+ALTER TABLE "CodingAgentProfile"
+ADD COLUMN "allowWebhookTaskOverride" BOOLEAN NOT NULL DEFAULT false;

package/prisma/migrations/20260908010000_run_execution_backend/migration.sql

@@ -0,0 +1,2 @@
+-- Phase 6: durable executor backend marker on Run (additive, nullable).
+ALTER TABLE "Run" ADD COLUMN "executionBackend" TEXT;

package/prisma/migrations/20260908020000_coding_run_audit_metadata/migration.sql

@@ -0,0 +1,7 @@
+-- Metadata-only coding failure audit fields. Detailed diagnostics belong in the
+-- protected log sink; task text, diffs, and credentials never enter this table.
+ALTER TABLE "CodingRun"
+  ADD COLUMN "failureCategory" TEXT,
+  ADD COLUMN "diagnosticId" TEXT;
+
+CREATE INDEX "CodingRun_failureCategory_idx" ON "CodingRun"("failureCategory");

package/prisma/migrations/20260910010000_agent_secret_bound_name/migration.sql

@@ -0,0 +1,16 @@
+-- Add nullable so existing rows survive the ADD.
+ALTER TABLE "AgentSecret" ADD COLUMN "boundName" TEXT;
+
+-- Backfill: existing attachments resolve by the secret's canonical name,
+-- so their point-of-use name IS that name.
+UPDATE "AgentSecret" a
+SET "boundName" = s."name"
+FROM "Secret" s
+WHERE a."secretId" = s."id";
+
+-- Lock it down.
+ALTER TABLE "AgentSecret" ALTER COLUMN "boundName" SET NOT NULL;
+
+-- One point-of-use name per agent.
+CREATE UNIQUE INDEX "AgentSecret_agentId_boundName_key"
+  ON "AgentSecret" ("agentId", "boundName");

package/prisma/migrations/20260911010000_coding_worker_toolchains/migration.sql

@@ -0,0 +1,5 @@
+ALTER TABLE "CodingAgentProfile" ADD COLUMN "toolchain" TEXT NOT NULL DEFAULT 'node';
+ALTER TABLE "CodingAgentProfile" ADD COLUMN "toolchainVersion" TEXT;
+ALTER TABLE "CodingAgentProfile" ADD COLUMN "workerImageRef" TEXT;
+
+ALTER TABLE "CodingRun" ADD COLUMN "workerImage" TEXT;

package/prisma/migrations/20260912010000_coding_provider_contract/migration.sql

@@ -0,0 +1,24 @@
+-- Provider identifiers are externally visible protocol values. Keep their
+-- exact spelling (including "claude-code") while application schemas retain
+-- the closed allow-list.
+BEGIN;
+
+ALTER TABLE "CodingAgentProfile"
+  ALTER COLUMN "provider" DROP DEFAULT,
+  ALTER COLUMN "provider" TYPE TEXT USING "provider"::TEXT,
+  ALTER COLUMN "provider" SET DEFAULT 'codex';
+
+ALTER TABLE "CodingRun"
+  ALTER COLUMN "provider" TYPE TEXT USING "provider"::TEXT;
+
+DROP TYPE "CodingProvider";
+
+ALTER TABLE "CodingAgentProfile"
+  ADD CONSTRAINT "CodingAgentProfile_provider_check"
+  CHECK ("provider" IN ('codex', 'claude-code'));
+
+ALTER TABLE "CodingRun"
+  ADD CONSTRAINT "CodingRun_provider_check"
+  CHECK ("provider" IN ('codex', 'claude-code'));
+
+COMMIT;

package/prisma/migrations/20260912020000_coding_proxy_protocol/migration.sql

@@ -0,0 +1,10 @@
+BEGIN;
+
+ALTER TABLE "CodingProxySession"
+  ADD COLUMN "protocol" TEXT NOT NULL DEFAULT 'openai-responses';
+
+ALTER TABLE "CodingProxySession"
+  ADD CONSTRAINT "CodingProxySession_protocol_check"
+  CHECK ("protocol" IN ('openai-responses', 'anthropic-messages'));
+
+COMMIT;

package/prisma/migrations/20260912030000_agent_memory/migration.sql

@@ -0,0 +1,18 @@
+-- Un-phased: agent-controlled persistent memory. `memoryEnabled` gates the
+-- memory_get/memory_set/memory_list/memory_search built-in tools; AgentMemory
+-- holds the key/content rows. No FK to "Agent" (matches "DatastoreEntry").
+-- "contentTsv" is a plain column, populated by application code on every
+-- write (never a Postgres GENERATED column — see schema.prisma).
+ALTER TABLE "Agent" ADD COLUMN "memoryEnabled" BOOLEAN NOT NULL DEFAULT false;
+
+CREATE TABLE "AgentMemory" (
+  "agentId" TEXT NOT NULL,
+  "key" TEXT NOT NULL,
+  "content" TEXT NOT NULL,
+  "contentTsv" tsvector,
+  "updatedAt" TIMESTAMP(3) NOT NULL,
+
+  CONSTRAINT "AgentMemory_pkey" PRIMARY KEY ("agentId", "key")
+);
+
+CREATE INDEX "AgentMemory_contentTsv_idx" ON "AgentMemory" USING GIN ("contentTsv");