create-ailk 0.1.0 → 0.2.0

package/templates/database/migrations/20260712215647_add_multi_tenant_tenancy/migration.sql

@@ -0,0 +1,201 @@
+-- CreateEnum
+CREATE TYPE "Role" AS ENUM ('owner', 'admin', 'member');
+
+-- AlterTable
+ALTER TABLE "sessions" ADD COLUMN     "active_organization_id" TEXT,
+ADD COLUMN     "active_workspace_id" TEXT;
+
+-- CreateTable
+CREATE TABLE "organizations" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "slug" TEXT NOT NULL,
+    "logo" TEXT,
+    "metadata" TEXT,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "organizations_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "workspaces" (
+    "id" TEXT NOT NULL,
+    "organization_id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "slug" TEXT NOT NULL,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "workspaces_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "memberships" (
+    "id" TEXT NOT NULL,
+    "organization_id" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "role" "Role" NOT NULL DEFAULT 'member',
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "memberships_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "invitations" (
+    "id" TEXT NOT NULL,
+    "organization_id" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "role" "Role" NOT NULL DEFAULT 'member',
+    "status" TEXT NOT NULL DEFAULT 'pending',
+    "expires_at" TIMESTAMP(3),
+    "inviter_id" TEXT NOT NULL,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "invitations_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "agent_sessions" (
+    "id" TEXT NOT NULL,
+    "workspace_id" TEXT NOT NULL,
+    "title" TEXT,
+    "status" TEXT NOT NULL DEFAULT 'idle',
+    "last_seq" INTEGER NOT NULL DEFAULT 0,
+    "last_message_at" TIMESTAMP(3),
+    "draft_message" TEXT,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "agent_sessions_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "conversation_events" (
+    "id" TEXT NOT NULL,
+    "session_id" TEXT NOT NULL,
+    "workspace_id" TEXT NOT NULL,
+    "agent_id" TEXT NOT NULL,
+    "seq" INTEGER NOT NULL,
+    "type" TEXT NOT NULL,
+    "turn_id" TEXT,
+    "payload" JSONB NOT NULL,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "conversation_events_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "session_read_receipts" (
+    "id" TEXT NOT NULL,
+    "session_id" TEXT NOT NULL,
+    "workspace_id" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "last_read_seq" INTEGER NOT NULL DEFAULT 0,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "session_read_receipts_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "artifacts" (
+    "id" TEXT NOT NULL,
+    "session_id" TEXT NOT NULL,
+    "workspace_id" TEXT NOT NULL,
+    "type" TEXT NOT NULL DEFAULT 'text/document',
+    "title" TEXT NOT NULL,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "artifacts_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "artifact_versions" (
+    "id" TEXT NOT NULL,
+    "artifact_id" TEXT NOT NULL,
+    "workspace_id" TEXT NOT NULL,
+    "content" JSONB NOT NULL,
+    "is_current" BOOLEAN NOT NULL DEFAULT true,
+    "saved_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "artifact_versions_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "organizations_slug_key" ON "organizations"("slug");
+
+-- CreateIndex
+CREATE INDEX "workspaces_organization_id_idx" ON "workspaces"("organization_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "workspaces_organization_id_slug_key" ON "workspaces"("organization_id", "slug");
+
+-- CreateIndex
+CREATE INDEX "memberships_user_id_idx" ON "memberships"("user_id");
+
+-- CreateIndex
+CREATE INDEX "memberships_organization_id_idx" ON "memberships"("organization_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "memberships_organization_id_user_id_key" ON "memberships"("organization_id", "user_id");
+
+-- CreateIndex
+CREATE INDEX "invitations_organization_id_idx" ON "invitations"("organization_id");
+
+-- CreateIndex
+CREATE INDEX "invitations_email_idx" ON "invitations"("email");
+
+-- CreateIndex
+CREATE INDEX "agent_sessions_workspace_id_last_message_at_idx" ON "agent_sessions"("workspace_id", "last_message_at" DESC);
+
+-- CreateIndex
+CREATE INDEX "conversation_events_workspace_id_idx" ON "conversation_events"("workspace_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "conversation_events_session_id_seq_key" ON "conversation_events"("session_id", "seq");
+
+-- CreateIndex
+CREATE INDEX "session_read_receipts_workspace_id_idx" ON "session_read_receipts"("workspace_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "session_read_receipts_session_id_user_id_key" ON "session_read_receipts"("session_id", "user_id");
+
+-- CreateIndex
+CREATE INDEX "artifacts_session_id_idx" ON "artifacts"("session_id");
+
+-- CreateIndex
+CREATE INDEX "artifacts_workspace_id_idx" ON "artifacts"("workspace_id");
+
+-- CreateIndex
+CREATE INDEX "artifact_versions_artifact_id_saved_at_idx" ON "artifact_versions"("artifact_id", "saved_at" DESC);
+
+-- CreateIndex
+CREATE INDEX "artifact_versions_workspace_id_idx" ON "artifact_versions"("workspace_id");
+
+-- AddForeignKey
+ALTER TABLE "workspaces" ADD CONSTRAINT "workspaces_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organizations"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "memberships" ADD CONSTRAINT "memberships_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organizations"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "memberships" ADD CONSTRAINT "memberships_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "invitations" ADD CONSTRAINT "invitations_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organizations"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "invitations" ADD CONSTRAINT "invitations_inviter_id_fkey" FOREIGN KEY ("inviter_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "conversation_events" ADD CONSTRAINT "conversation_events_session_id_fkey" FOREIGN KEY ("session_id") REFERENCES "agent_sessions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "session_read_receipts" ADD CONSTRAINT "session_read_receipts_session_id_fkey" FOREIGN KEY ("session_id") REFERENCES "agent_sessions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "artifacts" ADD CONSTRAINT "artifacts_session_id_fkey" FOREIGN KEY ("session_id") REFERENCES "agent_sessions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "artifact_versions" ADD CONSTRAINT "artifact_versions_artifact_id_fkey" FOREIGN KEY ("artifact_id") REFERENCES "artifacts"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/templates/database/migrations/20260713143320_reanchor_site_config_to_workspace/migration.sql

@@ -0,0 +1,67 @@
+/*
+  Warnings:
+
+  - You are about to drop the `tenant_seos` table. If the table is not empty, all the data it contains will be lost.
+  - You are about to drop the `tenant_site_identities` table. If the table is not empty, all the data it contains will be lost.
+  - You are about to drop the `tenant_themes` table. If the table is not empty, all the data it contains will be lost.
+
+*/
+-- DropForeignKey
+ALTER TABLE "tenant_seos" DROP CONSTRAINT "tenant_seos_user_id_fkey";
+
+-- DropForeignKey
+ALTER TABLE "tenant_site_identities" DROP CONSTRAINT "tenant_site_identities_user_id_fkey";
+
+-- DropForeignKey
+ALTER TABLE "tenant_themes" DROP CONSTRAINT "tenant_themes_user_id_fkey";
+
+-- DropTable
+DROP TABLE "tenant_seos";
+
+-- DropTable
+DROP TABLE "tenant_site_identities";
+
+-- DropTable
+DROP TABLE "tenant_themes";
+
+-- CreateTable
+CREATE TABLE "workspace_themes" (
+    "id" TEXT NOT NULL,
+    "workspace_id" TEXT NOT NULL,
+    "data" JSONB NOT NULL,
+    "created_at" TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ NOT NULL,
+
+    CONSTRAINT "workspace_themes_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "workspace_site_identities" (
+    "id" TEXT NOT NULL,
+    "workspace_id" TEXT NOT NULL,
+    "data" JSONB NOT NULL,
+    "created_at" TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ NOT NULL,
+
+    CONSTRAINT "workspace_site_identities_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "workspace_seos" (
+    "id" TEXT NOT NULL,
+    "workspace_id" TEXT NOT NULL,
+    "data" JSONB NOT NULL,
+    "created_at" TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ NOT NULL,
+
+    CONSTRAINT "workspace_seos_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "workspace_themes_workspace_id_key" ON "workspace_themes"("workspace_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "workspace_site_identities_workspace_id_key" ON "workspace_site_identities"("workspace_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "workspace_seos_workspace_id_key" ON "workspace_seos"("workspace_id");

package/templates/database/migrations/20260713174000_add_audit_logs/migration.sql

@@ -0,0 +1,46 @@
+-- Add audit_logs table (ops namespace) — workspace-scoped "who did what,
+-- when" audit trail.
+--
+-- The ops namespace header already declares an "audit log" as part of its
+-- intent; this fills it. Zero-data, pre-launch addition — no backfill.
+--
+-- Columns:
+--   id           — CUID primary key
+--   workspace_id — tenant scope (stable-id ref, no FK — ADR-0009 D2)
+--   actor_id     — who acted (a User / agent / system id) — stable-id ref
+--   actor_type   — "user" | "agent" | "system"
+--   action       — e.g. "workspace.settings.updated", "lead.deleted"
+--   target_type  — what was acted on: "workspace" | "lead" | "user" | … (nullable)
+--   target_id    — stable-id ref to the target (nullable)
+--   metadata     — structured detail (before/after, request context)
+--   created_at   — server-side record time (default now())
+--
+-- Indexes:
+--   (workspace_id, created_at DESC)        — "recent activity for this workspace" queries
+--   (workspace_id, target_type, target_id) — "history for this target" queries
+--
+-- Rollback:
+--   DROP INDEX "audit_logs_workspace_id_target_type_target_id_idx";
+--   DROP INDEX "audit_logs_workspace_id_created_at_idx";
+--   DROP TABLE "audit_logs";
+
+-- CreateTable
+CREATE TABLE "audit_logs" (
+    "id" TEXT NOT NULL,
+    "workspace_id" TEXT NOT NULL,
+    "actor_id" TEXT NOT NULL,
+    "actor_type" TEXT NOT NULL,
+    "action" TEXT NOT NULL,
+    "target_type" TEXT,
+    "target_id" TEXT,
+    "metadata" JSONB,
+    "created_at" TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "audit_logs_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "audit_logs_workspace_id_created_at_idx" ON "audit_logs"("workspace_id", "created_at" DESC);
+
+-- CreateIndex
+CREATE INDEX "audit_logs_workspace_id_target_type_target_id_idx" ON "audit_logs"("workspace_id", "target_type", "target_id");

package/templates/database/migrations/20260713190000_drop_telemetry_records/migration.sql

@@ -0,0 +1,25 @@
+-- Drop telemetry_records — the model moves to apps-paid/license-issuer's own
+-- schema (apps-paid/license-issuer/prisma/schema.prisma).
+--
+-- license-issuer was always the table's sole writer (POST /telemetry, via its
+-- own DATABASE_URL connection, independent of the product database) and
+-- nothing in the product schema ever read it — so it was a vendor-owned
+-- concern living in the wrong schema. Relocating it de-leaks vendor
+-- seat-metering out of the product schema and the create-ailk scaffold: every
+-- OSS/customer database was carrying a dead telemetry_records table that only
+-- this one vendor service ever touched.
+--
+-- Zero data pre-launch: the product database has never had a row in this
+-- table (license-issuer writes to its own vendor database, not this one), so
+-- this drop is a no-op read but formally forward-only per this repo's
+-- migration discipline (history is never rewritten — see the
+-- 20260713143320_reanchor_site_config_to_workspace migration for the
+-- established drop-and-recreate pattern this mirrors).
+--
+-- Rollback: not reversible via a down-migration — the table structure would
+-- need to be re-created via a fresh CreateTable migration (see the original
+-- 20260518000000_add_telemetry_records migration for the exact shape, still
+-- retained in history). No data loss risk: zero rows ever existed here.
+
+-- DropTable
+DROP TABLE "telemetry_records";

package/templates/database/migrations/20260713192000_add_uuidv7_function/migration.sql

@@ -0,0 +1,49 @@
+-- VETTED pure-SQL UUIDv7 generator — staged in-tree input for the prefixed-UUID
+-- id migration (docs/internal/cloud-prompts/prefixed-uuid-migration-cloud-prompt.md,
+-- rule c). Use this VERBATIM in the first migration; do NOT fetch one (the cloud
+-- run is egress-blocked) and do NOT re-derive the bit math.
+--
+-- Source: Kyle Hubert's community-standard implementation
+--   (https://gist.github.com/kjmph/5bd772b2c2df145aa645b837da7eca74) — the de-facto
+--   pre-Postgres-18 pure-SQL UUIDv7, widely adopted and RFC-9562-validator-passing.
+--   Reproduced here as an in-tree input; the run's property tests are the gate.
+--
+-- How it is correct (RFC 9562 §5.7 layout — 48-bit ms timestamp · ver=7 · rand):
+--   1. gen_random_uuid() gives a v4 uuid (random bits + a correct variant field in
+--      byte 8, which we LEAVE untouched — so the variant `10xx` is inherited, valid).
+--   2. overlay(... placing <6 bytes of big-endian Unix-ms> from 1 for 6) replaces
+--      bytes 1..6 with the millisecond timestamp (the time-ordered prefix → index
+--      locality).
+--   3. The two set_bit calls turn the version nibble from v4 (0100) into v7 (0111):
+--      Postgres bytea set_bit numbers bits LSB-first within each byte, so byte 6's
+--      high (version) nibble is bits 55..52; the v4 base already has bit 54 set
+--      (0100 = 4); setting bits 52 and 53 yields bits 54|53|52 = 0111 = 7.
+--
+-- Property tests the run MUST run against it (rule c / verification):
+--   * version nibble == 7  (the 13th hex char of every generated id is '7')
+--   * RFC-4122 variant     (the 17th hex char is one of 8,9,a,b)
+--   * non-decreasing across a millisecond boundary (two ids minted >1ms apart sort
+--     in mint order — the time-ordered guarantee; NOT strict within-ms monotonicity,
+--     which this method does not claim and we do not need)
+-- If any property test fails, that is a STAGING bug to surface to Sam — not a signal
+-- to hand-rewrite the bit math.
+
+create or replace function uuidv7() returns uuid
+as $$
+begin
+  return encode(
+    set_bit(
+      set_bit(
+        overlay(
+          uuid_send(gen_random_uuid())
+          placing substring(int8send(floor(extract(epoch from clock_timestamp()) * 1000)::bigint) from 3)
+          from 1 for 6
+        ),
+        52, 1
+      ),
+      53, 1
+    ),
+    'hex'
+  )::uuid;
+end
+$$ language plpgsql volatile;

package/templates/database/migrations/20260713192429_prefixed_uuid_entity_ids/migration.sql

@@ -0,0 +1,197 @@
+-- Prefixed-UUIDv7 entity ids (ADR-0031).
+--
+-- Every generated primary key becomes `<prefix>_<uuidv7>`, minted IN THE
+-- DATABASE by the uuidv7() function shipped in the previous migration
+-- (20260713192000_add_uuidv7_function) and format-enforced by a CHECK
+-- constraint. Three changes per primary key, in order:
+--
+--   1. COLLATE "C"    — byte-ordering for the ASCII id (correct + faster
+--                       than libc locale collation on a managed host).
+--   2. SET DEFAULT    — ('<prefix>_' || uuidv7()::text); covers EVERY insert
+--                       path (nested creates, upserts, raw SQL, seeds,
+--                       Better Auth with generateId:false).
+--   3. CHECK          — id ~ '^<prefix>_<v7-uuid>$'; the mechanical tier —
+--                       a malformed id cannot exist, whatever the caller.
+--
+-- Relation-free scope/id reference columns (the cross-namespace stable-id
+-- refs ADR-0009 leaves without FKs, e.g. workspace_id on config/content
+-- tables) get the same COLLATE "C" + CHECK. The CHECK regex admits the
+-- reserved sentinel range (00000000-0000-7000-8000-…, database/tenancy.ts).
+-- CHECK regexes are kept in sync with @working-theory/ids by
+-- packages/ids/src/__tests__/migration-sync.test.ts.
+
+-- ── Primary keys (27 — the full ADR-0031 rule-3 registry) ──
+
+-- users: user_
+ALTER TABLE "users" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "users" ALTER COLUMN "id" SET DEFAULT ('user_'::text || (uuidv7())::text);
+ALTER TABLE "users" ADD CONSTRAINT "users_id_format" CHECK ("id" ~ '^user_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- organizations: org_
+ALTER TABLE "organizations" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "organizations" ALTER COLUMN "id" SET DEFAULT ('org_'::text || (uuidv7())::text);
+ALTER TABLE "organizations" ADD CONSTRAINT "organizations_id_format" CHECK ("id" ~ '^org_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- workspaces: wksp_
+ALTER TABLE "workspaces" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "workspaces" ALTER COLUMN "id" SET DEFAULT ('wksp_'::text || (uuidv7())::text);
+ALTER TABLE "workspaces" ADD CONSTRAINT "workspaces_id_format" CHECK ("id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- memberships: member_
+ALTER TABLE "memberships" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "memberships" ALTER COLUMN "id" SET DEFAULT ('member_'::text || (uuidv7())::text);
+ALTER TABLE "memberships" ADD CONSTRAINT "memberships_id_format" CHECK ("id" ~ '^member_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- invitations: invite_
+ALTER TABLE "invitations" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "invitations" ALTER COLUMN "id" SET DEFAULT ('invite_'::text || (uuidv7())::text);
+ALTER TABLE "invitations" ADD CONSTRAINT "invitations_id_format" CHECK ("id" ~ '^invite_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- sessions: sess_
+ALTER TABLE "sessions" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "sessions" ALTER COLUMN "id" SET DEFAULT ('sess_'::text || (uuidv7())::text);
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_id_format" CHECK ("id" ~ '^sess_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- accounts: acct_
+ALTER TABLE "accounts" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "accounts" ALTER COLUMN "id" SET DEFAULT ('acct_'::text || (uuidv7())::text);
+ALTER TABLE "accounts" ADD CONSTRAINT "accounts_id_format" CHECK ("id" ~ '^acct_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- verifications: verify_
+ALTER TABLE "verifications" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "verifications" ALTER COLUMN "id" SET DEFAULT ('verify_'::text || (uuidv7())::text);
+ALTER TABLE "verifications" ADD CONSTRAINT "verifications_id_format" CHECK ("id" ~ '^verify_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- api_tokens: apitok_
+ALTER TABLE "api_tokens" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "api_tokens" ALTER COLUMN "id" SET DEFAULT ('apitok_'::text || (uuidv7())::text);
+ALTER TABLE "api_tokens" ADD CONSTRAINT "api_tokens_id_format" CHECK ("id" ~ '^apitok_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- refresh_tokens: reftok_
+ALTER TABLE "refresh_tokens" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "refresh_tokens" ALTER COLUMN "id" SET DEFAULT ('reftok_'::text || (uuidv7())::text);
+ALTER TABLE "refresh_tokens" ADD CONSTRAINT "refresh_tokens_id_format" CHECK ("id" ~ '^reftok_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- oauth_clients: oauthc_
+ALTER TABLE "oauth_clients" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "oauth_clients" ALTER COLUMN "id" SET DEFAULT ('oauthc_'::text || (uuidv7())::text);
+ALTER TABLE "oauth_clients" ADD CONSTRAINT "oauth_clients_id_format" CHECK ("id" ~ '^oauthc_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- oauth_authorizations: oautha_
+ALTER TABLE "oauth_authorizations" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "oauth_authorizations" ALTER COLUMN "id" SET DEFAULT ('oautha_'::text || (uuidv7())::text);
+ALTER TABLE "oauth_authorizations" ADD CONSTRAINT "oauth_authorizations_id_format" CHECK ("id" ~ '^oautha_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- push_tokens: pushtok_
+ALTER TABLE "push_tokens" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "push_tokens" ALTER COLUMN "id" SET DEFAULT ('pushtok_'::text || (uuidv7())::text);
+ALTER TABLE "push_tokens" ADD CONSTRAINT "push_tokens_id_format" CHECK ("id" ~ '^pushtok_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- user_data: userd_
+ALTER TABLE "user_data" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "user_data" ALTER COLUMN "id" SET DEFAULT ('userd_'::text || (uuidv7())::text);
+ALTER TABLE "user_data" ADD CONSTRAINT "user_data_id_format" CHECK ("id" ~ '^userd_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- site_settings: siteset_
+ALTER TABLE "site_settings" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "site_settings" ALTER COLUMN "id" SET DEFAULT ('siteset_'::text || (uuidv7())::text);
+ALTER TABLE "site_settings" ADD CONSTRAINT "site_settings_id_format" CHECK ("id" ~ '^siteset_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- workspace_themes: theme_
+ALTER TABLE "workspace_themes" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "workspace_themes" ALTER COLUMN "id" SET DEFAULT ('theme_'::text || (uuidv7())::text);
+ALTER TABLE "workspace_themes" ADD CONSTRAINT "workspace_themes_id_format" CHECK ("id" ~ '^theme_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- workspace_site_identities: siteid_
+ALTER TABLE "workspace_site_identities" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "workspace_site_identities" ALTER COLUMN "id" SET DEFAULT ('siteid_'::text || (uuidv7())::text);
+ALTER TABLE "workspace_site_identities" ADD CONSTRAINT "workspace_site_identities_id_format" CHECK ("id" ~ '^siteid_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- workspace_seos: seo_
+ALTER TABLE "workspace_seos" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "workspace_seos" ALTER COLUMN "id" SET DEFAULT ('seo_'::text || (uuidv7())::text);
+ALTER TABLE "workspace_seos" ADD CONSTRAINT "workspace_seos_id_format" CHECK ("id" ~ '^seo_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- agent_sessions: agsess_
+ALTER TABLE "agent_sessions" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "agent_sessions" ALTER COLUMN "id" SET DEFAULT ('agsess_'::text || (uuidv7())::text);
+ALTER TABLE "agent_sessions" ADD CONSTRAINT "agent_sessions_id_format" CHECK ("id" ~ '^agsess_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- conversation_events: convev_
+ALTER TABLE "conversation_events" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "conversation_events" ALTER COLUMN "id" SET DEFAULT ('convev_'::text || (uuidv7())::text);
+ALTER TABLE "conversation_events" ADD CONSTRAINT "conversation_events_id_format" CHECK ("id" ~ '^convev_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- session_read_receipts: receipt_
+ALTER TABLE "session_read_receipts" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "session_read_receipts" ALTER COLUMN "id" SET DEFAULT ('receipt_'::text || (uuidv7())::text);
+ALTER TABLE "session_read_receipts" ADD CONSTRAINT "session_read_receipts_id_format" CHECK ("id" ~ '^receipt_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- artifacts: artif_
+ALTER TABLE "artifacts" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "artifacts" ALTER COLUMN "id" SET DEFAULT ('artif_'::text || (uuidv7())::text);
+ALTER TABLE "artifacts" ADD CONSTRAINT "artifacts_id_format" CHECK ("id" ~ '^artif_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- artifact_versions: artiv_
+ALTER TABLE "artifact_versions" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "artifact_versions" ALTER COLUMN "id" SET DEFAULT ('artiv_'::text || (uuidv7())::text);
+ALTER TABLE "artifact_versions" ADD CONSTRAINT "artifact_versions_id_format" CHECK ("id" ~ '^artiv_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- leads: lead_
+ALTER TABLE "leads" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "leads" ALTER COLUMN "id" SET DEFAULT ('lead_'::text || (uuidv7())::text);
+ALTER TABLE "leads" ADD CONSTRAINT "leads_id_format" CHECK ("id" ~ '^lead_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- subscribers: subscr_
+ALTER TABLE "subscribers" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "subscribers" ALTER COLUMN "id" SET DEFAULT ('subscr_'::text || (uuidv7())::text);
+ALTER TABLE "subscribers" ADD CONSTRAINT "subscribers_id_format" CHECK ("id" ~ '^subscr_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- callbacks: callbk_
+ALTER TABLE "callbacks" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "callbacks" ALTER COLUMN "id" SET DEFAULT ('callbk_'::text || (uuidv7())::text);
+ALTER TABLE "callbacks" ADD CONSTRAINT "callbacks_id_format" CHECK ("id" ~ '^callbk_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- audit_logs: audit_
+ALTER TABLE "audit_logs" ALTER COLUMN "id" TYPE text COLLATE "C";
+ALTER TABLE "audit_logs" ALTER COLUMN "id" SET DEFAULT ('audit_'::text || (uuidv7())::text);
+ALTER TABLE "audit_logs" ADD CONSTRAINT "audit_logs_id_format" CHECK ("id" ~ '^audit_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+-- ── Relation-free scope/id reference columns (12) ──
+-- NULL passes a CHECK (three-valued logic), so nullable columns need no IS NULL guard.
+
+ALTER TABLE "sessions" ALTER COLUMN "active_organization_id" TYPE text COLLATE "C";
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_active_organization_id_format" CHECK ("active_organization_id" ~ '^org_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "sessions" ALTER COLUMN "active_workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_active_workspace_id_format" CHECK ("active_workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "workspace_themes" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "workspace_themes" ADD CONSTRAINT "workspace_themes_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "workspace_site_identities" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "workspace_site_identities" ADD CONSTRAINT "workspace_site_identities_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "workspace_seos" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "workspace_seos" ADD CONSTRAINT "workspace_seos_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "audit_logs" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "audit_logs" ADD CONSTRAINT "audit_logs_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "agent_sessions" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "agent_sessions" ADD CONSTRAINT "agent_sessions_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "conversation_events" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "conversation_events" ADD CONSTRAINT "conversation_events_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "session_read_receipts" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "session_read_receipts" ADD CONSTRAINT "session_read_receipts_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "session_read_receipts" ALTER COLUMN "user_id" TYPE text COLLATE "C";
+ALTER TABLE "session_read_receipts" ADD CONSTRAINT "session_read_receipts_user_id_format" CHECK ("user_id" ~ '^user_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "artifacts" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "artifacts" ADD CONSTRAINT "artifacts_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
+
+ALTER TABLE "artifact_versions" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
+ALTER TABLE "artifact_versions" ADD CONSTRAINT "artifact_versions_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');

package/templates/database/migrations/20260713200000_add_org_billing/migration.sql

@@ -0,0 +1,32 @@
+-- Add Organization billing identity + tier/seat projection (#3601)
+--
+-- Org-scoped billing for the multi-tenant module: the Organization becomes the
+-- billing entity (mirroring the users billing shape added in
+-- 20260515000000_add_user_billing_fields). The Stripe webhook links
+-- billing_provider/billing_customer_id keyed on checkout metadata.organizationId
+-- (apps/api/src/routes/webhooks/stripe.ts); the per-org entitlement resolver
+-- reads tier/seat_count (apps/api/src/services/entitlements.ts).
+--
+-- Forward-additive ONLY: every column is nullable or DEFAULT-ed, so existing
+-- organizations rows need no backfill. Single-tenant deployments keep
+-- User-scoped billing untouched.
+--
+-- Rollback: drop the index then the five columns.
+--   DROP INDEX "organizations_billing_provider_billing_customer_id_key";
+--   ALTER TABLE "organizations" DROP COLUMN "seat_count";
+--   ALTER TABLE "organizations" DROP COLUMN "has_care_plan";
+--   ALTER TABLE "organizations" DROP COLUMN "tier";
+--   ALTER TABLE "organizations" DROP COLUMN "billing_customer_id";
+--   ALTER TABLE "organizations" DROP COLUMN "billing_provider";
+
+-- AlterTable
+ALTER TABLE "organizations" ADD COLUMN "billing_provider" TEXT,
+                            ADD COLUMN "billing_customer_id" TEXT,
+                            ADD COLUMN "tier" TEXT NOT NULL DEFAULT 'free',
+                            ADD COLUMN "has_care_plan" BOOLEAN NOT NULL DEFAULT false,
+                            ADD COLUMN "seat_count" INTEGER NOT NULL DEFAULT 1;
+
+-- CreateIndex
+-- Composite unique allows (NULL, NULL) for un-billed orgs (SQL NULL ≠ NULL).
+CREATE UNIQUE INDEX "organizations_billing_provider_billing_customer_id_key"
+  ON "organizations"("billing_provider", "billing_customer_id");

package/templates/database/migrations/20260714000000_add_lead_promotion_fields/migration.sql

@@ -0,0 +1,22 @@
+-- Add Lead → user promotion fields (#3586)
+--
+-- Reconciles an anonymous inbox.Lead with an auth.User once the user's email
+-- is verified (spec D2) and the lead's siteId resolves to one of that user's
+-- own workspaces (tenant-safety, spec D3). apps/api/src/services/lead-promotion.ts
+-- is the sole writer. Plain scalars — no cross-namespace FK into auth.User
+-- (ADR 0009 invariant #1); the join is stable-id matching in the service.
+--
+-- Forward-additive ONLY: both columns are nullable, no backfill needed. The
+-- email index supports the promotion match (email + un-promoted leads).
+--
+-- Rollback:
+--   DROP INDEX "leads_email_idx";
+--   ALTER TABLE "leads" DROP COLUMN "promoted_at";
+--   ALTER TABLE "leads" DROP COLUMN "promoted_user_id";
+
+-- AlterTable
+ALTER TABLE "leads" ADD COLUMN     "promoted_user_id" TEXT,
+ADD COLUMN     "promoted_at" TIMESTAMP(3);
+
+-- CreateIndex
+CREATE INDEX "leads_email_idx" ON "leads"("email");