@wardby/cli 0.2.1 → 0.4.0

package/prisma/migrations/20260927050000_coding_run_services/migration.sql

@@ -0,0 +1,74 @@
+-- Coding-run services (docs/coding-services.md): the admin-managed catalog a
+-- repository's .wardby/services.yaml names entries from, the service names each
+-- coding agent may use, and the services resolved for each run at dispatch.
+-- Additive: one new table, two new columns with defaults, and the built-in rows
+-- (src/coding/services/builtins.ts; builtins.database.test.ts keeps them equal).
+
+-- CreateTable
+CREATE TABLE "CodingService" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "version" TEXT NOT NULL,
+    "kind" TEXT NOT NULL DEFAULT 'sidecar',
+    "image" TEXT NOT NULL,
+    "port" INTEGER NOT NULL,
+    "serviceEnv" JSONB NOT NULL DEFAULT '{}',
+    "testEnv" JSONB NOT NULL DEFAULT '{}',
+    "readiness" JSONB NOT NULL,
+    "resources" JSONB NOT NULL,
+    "dataPath" TEXT NOT NULL,
+    "writablePaths" JSONB NOT NULL DEFAULT '[]',
+    "builtin" BOOLEAN NOT NULL DEFAULT false,
+    "createdById" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "CodingService_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "CodingService_name_version_key" ON "CodingService"("name", "version");
+
+-- AlterTable
+ALTER TABLE "CodingAgentProfile" ADD COLUMN "services" JSONB NOT NULL DEFAULT '[]';
+
+-- AlterTable
+ALTER TABLE "CodingRun" ADD COLUMN "services" JSONB NOT NULL DEFAULT '[]';
+
+-- Built-in catalog entries.
+INSERT INTO "CodingService" ("id", "name", "version", "kind", "image", "port", "serviceEnv", "testEnv", "readiness", "resources", "dataPath", "writablePaths", "builtin", "updatedAt") VALUES
+('builtin-postgres-15', 'postgres', '15', 'sidecar',
+ 'docker.io/library/postgres@sha256:724292da1f2e50bdccfc3302ce75bbba7f4a6076701b588cc795fcac65683550', 5432,
+ '{"POSTGRES_USER":"test","POSTGRES_PASSWORD":"test","POSTGRES_DB":"test","PGDATA":"/var/lib/postgresql/data/pgdata"}',
+ '{"DATABASE_URL":"postgres://test:test@127.0.0.1:5432/test","PGHOST":"127.0.0.1","PGPORT":"5432","PGUSER":"test","PGPASSWORD":"test","PGDATABASE":"test"}',
+ '{"command":["pg_isready","-h","127.0.0.1","-p","5432","-U","test","-d","test"],"periodSeconds":2,"timeoutSeconds":2,"failureThreshold":30}',
+ '{"cpuMillicores":500,"memoryMib":512,"diskMib":1024}',
+ '/var/lib/postgresql/data', '["/var/run/postgresql","/tmp"]', true, CURRENT_TIMESTAMP),
+('builtin-postgres-16', 'postgres', '16', 'sidecar',
+ 'docker.io/library/postgres@sha256:1a6ab3f5345eb6dbe04a1349529caabdb0ab09293a09590fad07b2246bfa4b54', 5432,
+ '{"POSTGRES_USER":"test","POSTGRES_PASSWORD":"test","POSTGRES_DB":"test","PGDATA":"/var/lib/postgresql/data/pgdata"}',
+ '{"DATABASE_URL":"postgres://test:test@127.0.0.1:5432/test","PGHOST":"127.0.0.1","PGPORT":"5432","PGUSER":"test","PGPASSWORD":"test","PGDATABASE":"test"}',
+ '{"command":["pg_isready","-h","127.0.0.1","-p","5432","-U","test","-d","test"],"periodSeconds":2,"timeoutSeconds":2,"failureThreshold":30}',
+ '{"cpuMillicores":500,"memoryMib":512,"diskMib":1024}',
+ '/var/lib/postgresql/data', '["/var/run/postgresql","/tmp"]', true, CURRENT_TIMESTAMP),
+('builtin-postgres-17', 'postgres', '17', 'sidecar',
+ 'docker.io/library/postgres@sha256:d74eeac9a635390a49bc21bd49fccd973de707e2a53a76ac49b552b8712ec46f', 5432,
+ '{"POSTGRES_USER":"test","POSTGRES_PASSWORD":"test","POSTGRES_DB":"test","PGDATA":"/var/lib/postgresql/data/pgdata"}',
+ '{"DATABASE_URL":"postgres://test:test@127.0.0.1:5432/test","PGHOST":"127.0.0.1","PGPORT":"5432","PGUSER":"test","PGPASSWORD":"test","PGDATABASE":"test"}',
+ '{"command":["pg_isready","-h","127.0.0.1","-p","5432","-U","test","-d","test"],"periodSeconds":2,"timeoutSeconds":2,"failureThreshold":30}',
+ '{"cpuMillicores":500,"memoryMib":512,"diskMib":1024}',
+ '/var/lib/postgresql/data', '["/var/run/postgresql","/tmp"]', true, CURRENT_TIMESTAMP),
+('builtin-redis-7', 'redis', '7', 'sidecar',
+ 'docker.io/library/redis@sha256:c6eabf748fc7a61dbb5a705c78bcf3d6377b1127a97d0ce965c11c44ba46896f', 6379,
+ '{}',
+ '{"REDIS_URL":"redis://127.0.0.1:6379/0","REDIS_HOST":"127.0.0.1","REDIS_PORT":"6379"}',
+ '{"command":["redis-cli","-h","127.0.0.1","-p","6379","ping"],"periodSeconds":1,"timeoutSeconds":2,"failureThreshold":30}',
+ '{"cpuMillicores":250,"memoryMib":256,"diskMib":256}',
+ '/data', '[]', true, CURRENT_TIMESTAMP),
+('builtin-mysql-8', 'mysql', '8', 'sidecar',
+ 'docker.io/library/mysql@sha256:0744ee5ef89ce6ccfa13de3e579fe6b9e27f93dd70da9c06d2c908b1b193fb8d', 3306,
+ '{"MYSQL_ROOT_PASSWORD":"test","MYSQL_DATABASE":"test","MYSQL_USER":"test","MYSQL_PASSWORD":"test"}',
+ '{"DATABASE_URL":"mysql://test:test@127.0.0.1:3306/test","MYSQL_HOST":"127.0.0.1","MYSQL_TCP_PORT":"3306","MYSQL_USER":"test","MYSQL_PASSWORD":"test","MYSQL_DATABASE":"test"}',
+ '{"command":["mysqladmin","ping","-h","127.0.0.1","-P","3306","-utest","-ptest","--silent"],"periodSeconds":2,"timeoutSeconds":3,"failureThreshold":45}',
+ '{"cpuMillicores":500,"memoryMib":1024,"diskMib":2048}',
+ '/var/lib/mysql', '["/var/run/mysqld","/tmp"]', true, CURRENT_TIMESTAMP);

package/prisma/migrations/20260928000000_coding_run_tool_image/migration.sql

@@ -0,0 +1,5 @@
+-- Claude Code's tool-runner image (the container that runs its commands) for the
+-- agent's toolchain, resolved at dispatch alongside workerImage so a run keeps the
+-- image it was dispatched with. Additive and nullable: existing rows and Codex runs
+-- leave it null, and the launcher falls back to the deployment's default image.
+ALTER TABLE "CodingRun" ADD COLUMN "toolImage" TEXT;

package/prisma/migrations/20260930000000_jira_issue_projects/migration.sql

@@ -0,0 +1,34 @@
+-- Jira issue-tracker links and per-run status comments (phase 1).
+CREATE TABLE "AgentIssueProject" (
+    "id" TEXT NOT NULL,
+    "agentId" TEXT NOT NULL,
+    "provider" TEXT NOT NULL,
+    "projectKey" TEXT NOT NULL,
+    "access" TEXT NOT NULL,
+    "triggers" TEXT[] DEFAULT ARRAY[]::TEXT[],
+    "triggerStatuses" TEXT[] DEFAULT ARRAY[]::TEXT[],
+    "triggerLabels" TEXT[] DEFAULT ARRAY[]::TEXT[],
+    "jqlFilter" TEXT,
+    "trustedAccountIds" TEXT[] DEFAULT ARRAY[]::TEXT[],
+    "commentVisibilityRole" TEXT,
+    "authorizedById" TEXT NOT NULL,
+    "authorizedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "AgentIssueProject_pkey" PRIMARY KEY ("id")
+);
+CREATE UNIQUE INDEX "AgentIssueProject_agentId_provider_projectKey_key" ON "AgentIssueProject"("agentId", "provider", "projectKey");
+CREATE INDEX "AgentIssueProject_provider_projectKey_idx" ON "AgentIssueProject"("provider", "projectKey");
+ALTER TABLE "AgentIssueProject" ADD CONSTRAINT "AgentIssueProject_agentId_fkey" FOREIGN KEY ("agentId") REFERENCES "Agent"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+CREATE TABLE "RunIssueStatus" (
+    "runId" TEXT NOT NULL,
+    "provider" TEXT NOT NULL,
+    "issueKey" TEXT NOT NULL,
+    "commentId" TEXT,
+    "visibilityRole" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "completedAt" TIMESTAMP(3),
+    CONSTRAINT "RunIssueStatus_pkey" PRIMARY KEY ("runId")
+);
+CREATE INDEX "RunIssueStatus_completedAt_idx" ON "RunIssueStatus"("completedAt");
+ALTER TABLE "RunIssueStatus" ADD CONSTRAINT "RunIssueStatus_runId_fkey" FOREIGN KEY ("runId") REFERENCES "Run"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/prisma/migrations/20261001000000_jira_phase2_allowlists/migration.sql

@@ -0,0 +1,3 @@
+-- Jira phase 2: per-link allowlists for transitions and field edits.
+ALTER TABLE "AgentIssueProject" ADD COLUMN "allowedTransitions" TEXT[] DEFAULT ARRAY[]::TEXT[];
+ALTER TABLE "AgentIssueProject" ADD COLUMN "writableFields" TEXT[] DEFAULT ARRAY[]::TEXT[];

package/prisma/migrations/20261001010000_jira_link_types_allowlist/migration.sql

@@ -0,0 +1,2 @@
+-- Jira phase 2: per-link allowlist of issue link types jira_link_issues may create.
+ALTER TABLE "AgentIssueProject" ADD COLUMN "allowedLinkTypes" TEXT[] DEFAULT ARRAY[]::TEXT[];

package/prisma/migrations/20261002000000_jira_coding_bridge/migration.sql

@@ -0,0 +1,28 @@
+-- Jira phase 3 (the Jira -> code bridge): per-link PR statuses, the originating
+-- issue on a coding run, and the pull requests opened for tracker issues.
+ALTER TABLE "AgentIssueProject" ADD COLUMN "onPullRequestOpened" TEXT;
+ALTER TABLE "AgentIssueProject" ADD COLUMN "onPullRequestMerged" TEXT;
+ALTER TABLE "CodingRun" ADD COLUMN "issueProvider" TEXT;
+ALTER TABLE "CodingRun" ADD COLUMN "issueKey" TEXT;
+
+-- No foreign keys by design: audit-style rows that survive agent/run deletion.
+CREATE TABLE "IssuePullRequest" (
+    "id" TEXT NOT NULL,
+    "issueProvider" TEXT NOT NULL,
+    "issueKey" TEXT NOT NULL,
+    "codeProvider" TEXT NOT NULL,
+    "repository" TEXT NOT NULL,
+    "number" INTEGER NOT NULL,
+    "url" TEXT NOT NULL,
+    "agentId" TEXT NOT NULL,
+    "openedByRunId" TEXT NOT NULL,
+    "state" TEXT NOT NULL DEFAULT 'open',
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "IssuePullRequest_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "IssuePullRequest_codeProvider_repository_number_issueProvid_key" ON "IssuePullRequest"("codeProvider", "repository", "number", "issueProvider", "issueKey");
+
+CREATE INDEX "IssuePullRequest_issueProvider_issueKey_idx" ON "IssuePullRequest"("issueProvider", "issueKey");

package/prisma/migrations/20261002010000_jira_issue_creation/migration.sql

@@ -0,0 +1,25 @@
+-- Jira phase 4: issue creation allowlist + cap on the link, self-defect config on the agent, and dedupe fingerprints.
+ALTER TABLE "AgentIssueProject" ADD COLUMN "creatableIssueTypes" TEXT[] DEFAULT ARRAY[]::TEXT[];
+ALTER TABLE "AgentIssueProject" ADD COLUMN "maxNewIssuesPerRun" INTEGER;
+
+ALTER TABLE "Agent" ADD COLUMN "defectProjectKey" TEXT;
+ALTER TABLE "Agent" ADD COLUMN "defectIssueType" TEXT;
+
+CREATE TABLE "IssueFingerprint" (
+    "id" TEXT NOT NULL,
+    "issueProvider" TEXT NOT NULL,
+    "projectKey" TEXT NOT NULL,
+    "fingerprintHash" TEXT NOT NULL,
+    "issueKey" TEXT NOT NULL,
+    "agentId" TEXT NOT NULL,
+    "createdByRunId" TEXT,
+    "seenCount" INTEGER NOT NULL DEFAULT 1,
+    "firstSeenAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "lastSeenAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "IssueFingerprint_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "IssueFingerprint_issueProvider_issueKey_key" ON "IssueFingerprint"("issueProvider", "issueKey");
+CREATE INDEX "IssueFingerprint_issueProvider_projectKey_fingerprintHash_idx" ON "IssueFingerprint"("issueProvider", "projectKey", "fingerprintHash");
+CREATE INDEX "IssueFingerprint_createdByRunId_idx" ON "IssueFingerprint"("createdByRunId");

package/prisma/migrations/20261003000000_issue_cost_attribution/migration.sql

@@ -0,0 +1,56 @@
+-- Issue cost attribution (Jira phase 4a): work items, per-run attribution,
+-- and per-run per-model usage by priced token kind.
+
+CREATE TABLE "WorkItem" (
+    "id" TEXT NOT NULL,
+    "provider" TEXT NOT NULL,
+    "key" TEXT NOT NULL,
+    "title" TEXT,
+    "type" TEXT,
+    "url" TEXT,
+    "scopeKey" TEXT NOT NULL,
+    "parentKey" TEXT,
+    "parentKind" TEXT,
+    "refreshedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "WorkItem_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "WorkItem_provider_key_key" ON "WorkItem"("provider", "key");
+CREATE INDEX "WorkItem_provider_parentKey_idx" ON "WorkItem"("provider", "parentKey");
+CREATE INDEX "WorkItem_provider_scopeKey_idx" ON "WorkItem"("provider", "scopeKey");
+
+CREATE TABLE "RunAttribution" (
+    "runId" TEXT NOT NULL,
+    "workItemId" TEXT NOT NULL,
+    "parentKeyAtRun" TEXT,
+    "source" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "RunAttribution_pkey" PRIMARY KEY ("runId")
+);
+
+CREATE INDEX "RunAttribution_workItemId_idx" ON "RunAttribution"("workItemId");
+CREATE INDEX "RunAttribution_parentKeyAtRun_idx" ON "RunAttribution"("parentKeyAtRun");
+
+ALTER TABLE "RunAttribution" ADD CONSTRAINT "RunAttribution_runId_fkey"
+    FOREIGN KEY ("runId") REFERENCES "Run"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+ALTER TABLE "RunAttribution" ADD CONSTRAINT "RunAttribution_workItemId_fkey"
+    FOREIGN KEY ("workItemId") REFERENCES "WorkItem"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+CREATE TABLE "RunModelUsage" (
+    "runId" TEXT NOT NULL,
+    "model" TEXT NOT NULL,
+    "freshInputTokens" INTEGER NOT NULL DEFAULT 0,
+    "cachedInputTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheWriteTokens" INTEGER NOT NULL DEFAULT 0,
+    "outputTokens" INTEGER NOT NULL DEFAULT 0,
+    "costUsd" DECIMAL(18,10) NOT NULL DEFAULT 0,
+
+    CONSTRAINT "RunModelUsage_pkey" PRIMARY KEY ("runId", "model")
+);
+
+ALTER TABLE "RunModelUsage" ADD CONSTRAINT "RunModelUsage_runId_fkey"
+    FOREIGN KEY ("runId") REFERENCES "Run"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/prisma/migrations/20261003010000_coding_run_service_status/migration.sql

@@ -0,0 +1,23 @@
+-- Live start-up state of each coding-run service, one row per run x service,
+-- written by the job launchers for display (wardby viewer, get_run).
+CREATE TYPE "CodingServiceState" AS ENUM ('pending', 'probing', 'ready', 'failed');
+
+CREATE TABLE "CodingRunServiceStatus" (
+    "id" TEXT NOT NULL,
+    "runId" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "state" "CodingServiceState" NOT NULL DEFAULT 'pending',
+    "attempts" INTEGER,
+    "reason" TEXT,
+    "readyAt" TIMESTAMP(3),
+    "failedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "CodingRunServiceStatus_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "CodingRunServiceStatus_runId_name_key" ON "CodingRunServiceStatus"("runId", "name");
+
+ALTER TABLE "CodingRunServiceStatus" ADD CONSTRAINT "CodingRunServiceStatus_runId_fkey"
+    FOREIGN KEY ("runId") REFERENCES "Run"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/prisma/migrations/20261003020000_viewer_notify/migration.sql

@@ -0,0 +1,54 @@
+-- Live events for the admin viewer (docs/viewer-api.md): small pg_notify
+-- payloads on channel wardby_viewer. Runs as the writing role; pg_notify
+-- needs no grant. Payloads stay far below NOTIFY's 8000-byte limit.
+CREATE FUNCTION wardby_viewer_notify() RETURNS trigger LANGUAGE plpgsql AS $$
+DECLARE
+  payload jsonb;
+BEGIN
+  IF TG_TABLE_NAME = 'Run' THEN
+    IF TG_OP = 'UPDATE'
+       AND NEW."status" IS NOT DISTINCT FROM OLD."status"
+       AND NEW."turns" IS NOT DISTINCT FROM OLD."turns"
+       AND NEW."costUsd" IS NOT DISTINCT FROM OLD."costUsd"
+       AND NEW."tokensIn" IS NOT DISTINCT FROM OLD."tokensIn"
+       AND NEW."tokensOut" IS NOT DISTINCT FROM OLD."tokensOut"
+       AND NEW."finishedAt" IS NOT DISTINCT FROM OLD."finishedAt"
+       AND NEW."parentRunId" IS NOT DISTINCT FROM OLD."parentRunId" THEN
+      RETURN NULL; -- heartbeat-only and other invisible updates
+    END IF;
+    payload := jsonb_build_object(
+      'kind', 'run', 'runId', NEW."id", 'parentRunId', NEW."parentRunId", 'agentId', NEW."agentId",
+      'status', NEW."status", 'turns', NEW."turns", 'tokensIn', NEW."tokensIn", 'tokensOut', NEW."tokensOut",
+      'costUsd', NEW."costUsd"::float8,
+      'finishedAt', to_char(NEW."finishedAt" AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'));
+  ELSIF TG_TABLE_NAME = 'CodingRunServiceStatus' THEN
+    payload := jsonb_build_object(
+      'kind', 'service', 'runId', NEW."runId", 'name', NEW."name", 'state', NEW."state", 'attempts', NEW."attempts");
+  ELSIF TG_TABLE_NAME = 'IssuePullRequest' THEN
+    payload := jsonb_build_object('kind', 'outcome', 'runId', NEW."openedByRunId", 'source', 'pull_request');
+  ELSIF TG_TABLE_NAME = 'RunHostStatus' THEN
+    payload := jsonb_build_object('kind', 'outcome', 'runId', NEW."runId", 'source', 'host_status');
+  ELSIF TG_TABLE_NAME = 'RunIssueStatus' THEN
+    payload := jsonb_build_object('kind', 'outcome', 'runId', NEW."runId", 'source', 'issue_status');
+  ELSIF TG_TABLE_NAME = 'RunHostCheck' THEN
+    payload := jsonb_build_object('kind', 'outcome', 'runId', NEW."runId", 'source', 'host_check');
+  ELSE
+    RETURN NULL;
+  END IF;
+  PERFORM pg_notify('wardby_viewer', payload::text);
+  RETURN NULL;
+END;
+$$;
+
+CREATE TRIGGER "Run_viewer_notify" AFTER INSERT OR UPDATE ON "Run"
+  FOR EACH ROW EXECUTE FUNCTION wardby_viewer_notify();
+CREATE TRIGGER "CodingRunServiceStatus_viewer_notify" AFTER INSERT OR UPDATE ON "CodingRunServiceStatus"
+  FOR EACH ROW EXECUTE FUNCTION wardby_viewer_notify();
+CREATE TRIGGER "IssuePullRequest_viewer_notify" AFTER INSERT OR UPDATE ON "IssuePullRequest"
+  FOR EACH ROW EXECUTE FUNCTION wardby_viewer_notify();
+CREATE TRIGGER "RunHostStatus_viewer_notify" AFTER INSERT OR UPDATE ON "RunHostStatus"
+  FOR EACH ROW EXECUTE FUNCTION wardby_viewer_notify();
+CREATE TRIGGER "RunIssueStatus_viewer_notify" AFTER INSERT OR UPDATE ON "RunIssueStatus"
+  FOR EACH ROW EXECUTE FUNCTION wardby_viewer_notify();
+CREATE TRIGGER "RunHostCheck_viewer_notify" AFTER INSERT OR UPDATE ON "RunHostCheck"
+  FOR EACH ROW EXECUTE FUNCTION wardby_viewer_notify();

package/prisma/migrations/20261003030000_viewer_notify_fixes/migration.sql

@@ -0,0 +1,47 @@
+-- Fixes for wardby_viewer_notify(): finishedAt formatting under a non-UTC
+-- session TimeZone (the column is timestamp without time zone, already UTC),
+-- and notification failures never fail the write. The triggers are unchanged.
+CREATE OR REPLACE FUNCTION wardby_viewer_notify() RETURNS trigger LANGUAGE plpgsql AS $$
+DECLARE
+  payload jsonb;
+BEGIN
+  IF TG_TABLE_NAME = 'Run' THEN
+    IF TG_OP = 'UPDATE'
+       AND NEW."status" IS NOT DISTINCT FROM OLD."status"
+       AND NEW."turns" IS NOT DISTINCT FROM OLD."turns"
+       AND NEW."costUsd" IS NOT DISTINCT FROM OLD."costUsd"
+       AND NEW."tokensIn" IS NOT DISTINCT FROM OLD."tokensIn"
+       AND NEW."tokensOut" IS NOT DISTINCT FROM OLD."tokensOut"
+       AND NEW."finishedAt" IS NOT DISTINCT FROM OLD."finishedAt"
+       AND NEW."parentRunId" IS NOT DISTINCT FROM OLD."parentRunId" THEN
+      RETURN NULL; -- heartbeat-only and other invisible updates
+    END IF;
+    payload := jsonb_build_object(
+      'kind', 'run', 'runId', NEW."id", 'parentRunId', NEW."parentRunId", 'agentId', NEW."agentId",
+      'status', NEW."status", 'turns', NEW."turns", 'tokensIn', NEW."tokensIn", 'tokensOut', NEW."tokensOut",
+      'costUsd', NEW."costUsd"::float8,
+      'finishedAt', to_char(NEW."finishedAt", 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'));
+  ELSIF TG_TABLE_NAME = 'CodingRunServiceStatus' THEN
+    payload := jsonb_build_object(
+      'kind', 'service', 'runId', NEW."runId", 'name', NEW."name", 'state', NEW."state", 'attempts', NEW."attempts");
+  ELSIF TG_TABLE_NAME = 'IssuePullRequest' THEN
+    payload := jsonb_build_object('kind', 'outcome', 'runId', NEW."openedByRunId", 'source', 'pull_request');
+  ELSIF TG_TABLE_NAME = 'RunHostStatus' THEN
+    payload := jsonb_build_object('kind', 'outcome', 'runId', NEW."runId", 'source', 'host_status');
+  ELSIF TG_TABLE_NAME = 'RunIssueStatus' THEN
+    payload := jsonb_build_object('kind', 'outcome', 'runId', NEW."runId", 'source', 'issue_status');
+  ELSIF TG_TABLE_NAME = 'RunHostCheck' THEN
+    payload := jsonb_build_object('kind', 'outcome', 'runId', NEW."runId", 'source', 'host_check');
+  ELSE
+    RETURN NULL;
+  END IF;
+  -- A viewer event must never fail the write that caused it (e.g. a payload
+  -- over NOTIFY's 8000-byte limit).
+  BEGIN
+    PERFORM pg_notify('wardby_viewer', payload::text);
+  EXCEPTION WHEN OTHERS THEN
+    NULL;
+  END;
+  RETURN NULL;
+END;
+$$;

package/prisma/migrations/20261003040000_viewer_indexes/migration.sql

@@ -0,0 +1,12 @@
+-- Indexes for the admin viewer's queries (docs/viewer-api.md): the graph
+-- window (runs started since a time, or still pending/running), the
+-- ancestor/children walks, and the outcome lookup by run. Plain CREATE INDEX
+-- briefly blocks writes to each table while it builds; on a large existing
+-- deployment, apply this migration in a quiet period.
+CREATE INDEX "Run_startedAt_idx" ON "Run"("startedAt");
+
+CREATE INDEX "Run_status_idx" ON "Run"("status");
+
+CREATE INDEX "Run_parentRunId_idx" ON "Run"("parentRunId");
+
+CREATE INDEX "IssuePullRequest_openedByRunId_idx" ON "IssuePullRequest"("openedByRunId");

package/prisma/migrations/20261004000000_model_catalog/migration.sql

@@ -0,0 +1,26 @@
+-- Model catalog: admin overrides of the shipped catalog, and each run's
+-- catalog entry as recorded when it started. Additive only.
+CREATE TABLE "ModelCatalogEntry" (
+    "provider" TEXT NOT NULL,
+    "modelId" TEXT NOT NULL,
+    "enabled" BOOLEAN NOT NULL,
+    "encoding" TEXT NOT NULL,
+    "inputPerMTok" DOUBLE PRECISION NOT NULL,
+    "outputPerMTok" DOUBLE PRECISION NOT NULL,
+    "cachedInputPerMTok" DOUBLE PRECISION NOT NULL,
+    "cacheWritePerMTok" DOUBLE PRECISION NOT NULL,
+    "efforts" TEXT[],
+    "thinkingMode" TEXT NOT NULL,
+    "sourceUrl" TEXT NOT NULL,
+    "updatedBy" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "ModelCatalogEntry_pkey" PRIMARY KEY ("provider","modelId")
+);
+
+ALTER TABLE "Run" ADD COLUMN "pricingVersion" TEXT;
+ALTER TABLE "Run" ADD COLUMN "pricingSnapshot" JSONB;
+
+ALTER TABLE "CodingProxySession" ADD COLUMN "pricingVersion" TEXT;
+ALTER TABLE "CodingProxySession" ADD COLUMN "catalogEntry" JSONB;