create-ailk 0.23.0 → 0.25.1

package/templates/database/migrations/20260712215647_add_multi_tenant_tenancy/migration.sql

@@ -1,201 +0,0 @@
--- CreateEnum
-CREATE TYPE "Role" AS ENUM ('owner', 'admin', 'member');
-
--- AlterTable
-ALTER TABLE "sessions" ADD COLUMN     "active_organization_id" TEXT,
-ADD COLUMN     "active_workspace_id" TEXT;
-
--- CreateTable
-CREATE TABLE "organizations" (
-    "id" TEXT NOT NULL,
-    "name" TEXT NOT NULL,
-    "slug" TEXT NOT NULL,
-    "logo" TEXT,
-    "metadata" TEXT,
-    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    "updated_at" TIMESTAMP(3) NOT NULL,
-
-    CONSTRAINT "organizations_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "workspaces" (
-    "id" TEXT NOT NULL,
-    "organization_id" TEXT NOT NULL,
-    "name" TEXT NOT NULL,
-    "slug" TEXT NOT NULL,
-    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    "updated_at" TIMESTAMP(3) NOT NULL,
-
-    CONSTRAINT "workspaces_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "memberships" (
-    "id" TEXT NOT NULL,
-    "organization_id" TEXT NOT NULL,
-    "user_id" TEXT NOT NULL,
-    "role" "Role" NOT NULL DEFAULT 'member',
-    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-
-    CONSTRAINT "memberships_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "invitations" (
-    "id" TEXT NOT NULL,
-    "organization_id" TEXT NOT NULL,
-    "email" TEXT NOT NULL,
-    "role" "Role" NOT NULL DEFAULT 'member',
-    "status" TEXT NOT NULL DEFAULT 'pending',
-    "expires_at" TIMESTAMP(3),
-    "inviter_id" TEXT NOT NULL,
-    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-
-    CONSTRAINT "invitations_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "agent_sessions" (
-    "id" TEXT NOT NULL,
-    "workspace_id" TEXT NOT NULL,
-    "title" TEXT,
-    "status" TEXT NOT NULL DEFAULT 'idle',
-    "last_seq" INTEGER NOT NULL DEFAULT 0,
-    "last_message_at" TIMESTAMP(3),
-    "draft_message" TEXT,
-    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    "updated_at" TIMESTAMP(3) NOT NULL,
-
-    CONSTRAINT "agent_sessions_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "conversation_events" (
-    "id" TEXT NOT NULL,
-    "session_id" TEXT NOT NULL,
-    "workspace_id" TEXT NOT NULL,
-    "agent_id" TEXT NOT NULL,
-    "seq" INTEGER NOT NULL,
-    "type" TEXT NOT NULL,
-    "turn_id" TEXT,
-    "payload" JSONB NOT NULL,
-    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-
-    CONSTRAINT "conversation_events_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "session_read_receipts" (
-    "id" TEXT NOT NULL,
-    "session_id" TEXT NOT NULL,
-    "workspace_id" TEXT NOT NULL,
-    "user_id" TEXT NOT NULL,
-    "last_read_seq" INTEGER NOT NULL DEFAULT 0,
-    "updated_at" TIMESTAMP(3) NOT NULL,
-
-    CONSTRAINT "session_read_receipts_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "artifacts" (
-    "id" TEXT NOT NULL,
-    "session_id" TEXT NOT NULL,
-    "workspace_id" TEXT NOT NULL,
-    "type" TEXT NOT NULL DEFAULT 'text/document',
-    "title" TEXT NOT NULL,
-    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    "updated_at" TIMESTAMP(3) NOT NULL,
-
-    CONSTRAINT "artifacts_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "artifact_versions" (
-    "id" TEXT NOT NULL,
-    "artifact_id" TEXT NOT NULL,
-    "workspace_id" TEXT NOT NULL,
-    "content" JSONB NOT NULL,
-    "is_current" BOOLEAN NOT NULL DEFAULT true,
-    "saved_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-
-    CONSTRAINT "artifact_versions_pkey" PRIMARY KEY ("id")
-);
-
--- CreateIndex
-CREATE UNIQUE INDEX "organizations_slug_key" ON "organizations"("slug");
-
--- CreateIndex
-CREATE INDEX "workspaces_organization_id_idx" ON "workspaces"("organization_id");
-
--- CreateIndex
-CREATE UNIQUE INDEX "workspaces_organization_id_slug_key" ON "workspaces"("organization_id", "slug");
-
--- CreateIndex
-CREATE INDEX "memberships_user_id_idx" ON "memberships"("user_id");
-
--- CreateIndex
-CREATE INDEX "memberships_organization_id_idx" ON "memberships"("organization_id");
-
--- CreateIndex
-CREATE UNIQUE INDEX "memberships_organization_id_user_id_key" ON "memberships"("organization_id", "user_id");
-
--- CreateIndex
-CREATE INDEX "invitations_organization_id_idx" ON "invitations"("organization_id");
-
--- CreateIndex
-CREATE INDEX "invitations_email_idx" ON "invitations"("email");
-
--- CreateIndex
-CREATE INDEX "agent_sessions_workspace_id_last_message_at_idx" ON "agent_sessions"("workspace_id", "last_message_at" DESC);
-
--- CreateIndex
-CREATE INDEX "conversation_events_workspace_id_idx" ON "conversation_events"("workspace_id");
-
--- CreateIndex
-CREATE UNIQUE INDEX "conversation_events_session_id_seq_key" ON "conversation_events"("session_id", "seq");
-
--- CreateIndex
-CREATE INDEX "session_read_receipts_workspace_id_idx" ON "session_read_receipts"("workspace_id");
-
--- CreateIndex
-CREATE UNIQUE INDEX "session_read_receipts_session_id_user_id_key" ON "session_read_receipts"("session_id", "user_id");
-
--- CreateIndex
-CREATE INDEX "artifacts_session_id_idx" ON "artifacts"("session_id");
-
--- CreateIndex
-CREATE INDEX "artifacts_workspace_id_idx" ON "artifacts"("workspace_id");
-
--- CreateIndex
-CREATE INDEX "artifact_versions_artifact_id_saved_at_idx" ON "artifact_versions"("artifact_id", "saved_at" DESC);
-
--- CreateIndex
-CREATE INDEX "artifact_versions_workspace_id_idx" ON "artifact_versions"("workspace_id");
-
--- AddForeignKey
-ALTER TABLE "workspaces" ADD CONSTRAINT "workspaces_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organizations"("id") ON DELETE CASCADE ON UPDATE CASCADE;
-
--- AddForeignKey
-ALTER TABLE "memberships" ADD CONSTRAINT "memberships_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organizations"("id") ON DELETE CASCADE ON UPDATE CASCADE;
-
--- AddForeignKey
-ALTER TABLE "memberships" ADD CONSTRAINT "memberships_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
-
--- AddForeignKey
-ALTER TABLE "invitations" ADD CONSTRAINT "invitations_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organizations"("id") ON DELETE CASCADE ON UPDATE CASCADE;
-
--- AddForeignKey
-ALTER TABLE "invitations" ADD CONSTRAINT "invitations_inviter_id_fkey" FOREIGN KEY ("inviter_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
-
--- AddForeignKey
-ALTER TABLE "conversation_events" ADD CONSTRAINT "conversation_events_session_id_fkey" FOREIGN KEY ("session_id") REFERENCES "agent_sessions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
-
--- AddForeignKey
-ALTER TABLE "session_read_receipts" ADD CONSTRAINT "session_read_receipts_session_id_fkey" FOREIGN KEY ("session_id") REFERENCES "agent_sessions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
-
--- AddForeignKey
-ALTER TABLE "artifacts" ADD CONSTRAINT "artifacts_session_id_fkey" FOREIGN KEY ("session_id") REFERENCES "agent_sessions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
-
--- AddForeignKey
-ALTER TABLE "artifact_versions" ADD CONSTRAINT "artifact_versions_artifact_id_fkey" FOREIGN KEY ("artifact_id") REFERENCES "artifacts"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/templates/database/migrations/20260713143320_reanchor_site_config_to_workspace/migration.sql

@@ -1,67 +0,0 @@
-/*
-  Warnings:
-
-  - You are about to drop the `tenant_seos` table. If the table is not empty, all the data it contains will be lost.
-  - You are about to drop the `tenant_site_identities` table. If the table is not empty, all the data it contains will be lost.
-  - You are about to drop the `tenant_themes` table. If the table is not empty, all the data it contains will be lost.
-
-*/
--- DropForeignKey
-ALTER TABLE "tenant_seos" DROP CONSTRAINT "tenant_seos_user_id_fkey";
-
--- DropForeignKey
-ALTER TABLE "tenant_site_identities" DROP CONSTRAINT "tenant_site_identities_user_id_fkey";
-
--- DropForeignKey
-ALTER TABLE "tenant_themes" DROP CONSTRAINT "tenant_themes_user_id_fkey";
-
--- DropTable
-DROP TABLE "tenant_seos";
-
--- DropTable
-DROP TABLE "tenant_site_identities";
-
--- DropTable
-DROP TABLE "tenant_themes";
-
--- CreateTable
-CREATE TABLE "workspace_themes" (
-    "id" TEXT NOT NULL,
-    "workspace_id" TEXT NOT NULL,
-    "data" JSONB NOT NULL,
-    "created_at" TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    "updated_at" TIMESTAMPTZ NOT NULL,
-
-    CONSTRAINT "workspace_themes_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "workspace_site_identities" (
-    "id" TEXT NOT NULL,
-    "workspace_id" TEXT NOT NULL,
-    "data" JSONB NOT NULL,
-    "created_at" TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    "updated_at" TIMESTAMPTZ NOT NULL,
-
-    CONSTRAINT "workspace_site_identities_pkey" PRIMARY KEY ("id")
-);
-
--- CreateTable
-CREATE TABLE "workspace_seos" (
-    "id" TEXT NOT NULL,
-    "workspace_id" TEXT NOT NULL,
-    "data" JSONB NOT NULL,
-    "created_at" TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    "updated_at" TIMESTAMPTZ NOT NULL,
-
-    CONSTRAINT "workspace_seos_pkey" PRIMARY KEY ("id")
-);
-
--- CreateIndex
-CREATE UNIQUE INDEX "workspace_themes_workspace_id_key" ON "workspace_themes"("workspace_id");
-
--- CreateIndex
-CREATE UNIQUE INDEX "workspace_site_identities_workspace_id_key" ON "workspace_site_identities"("workspace_id");
-
--- CreateIndex
-CREATE UNIQUE INDEX "workspace_seos_workspace_id_key" ON "workspace_seos"("workspace_id");

package/templates/database/migrations/20260713174000_add_audit_logs/migration.sql

@@ -1,46 +0,0 @@
--- Add audit_logs table (ops namespace) — workspace-scoped "who did what,
--- when" audit trail.
---
--- The ops namespace header already declares an "audit log" as part of its
--- intent; this fills it. Zero-data, pre-launch addition — no backfill.
---
--- Columns:
---   id           — CUID primary key
---   workspace_id — tenant scope (stable-id ref, no FK — ADR-0009 D2)
---   actor_id     — who acted (a User / agent / system id) — stable-id ref
---   actor_type   — "user" | "agent" | "system"
---   action       — e.g. "workspace.settings.updated", "lead.deleted"
---   target_type  — what was acted on: "workspace" | "lead" | "user" | … (nullable)
---   target_id    — stable-id ref to the target (nullable)
---   metadata     — structured detail (before/after, request context)
---   created_at   — server-side record time (default now())
---
--- Indexes:
---   (workspace_id, created_at DESC)        — "recent activity for this workspace" queries
---   (workspace_id, target_type, target_id) — "history for this target" queries
---
--- Rollback:
---   DROP INDEX "audit_logs_workspace_id_target_type_target_id_idx";
---   DROP INDEX "audit_logs_workspace_id_created_at_idx";
---   DROP TABLE "audit_logs";
-
--- CreateTable
-CREATE TABLE "audit_logs" (
-    "id" TEXT NOT NULL,
-    "workspace_id" TEXT NOT NULL,
-    "actor_id" TEXT NOT NULL,
-    "actor_type" TEXT NOT NULL,
-    "action" TEXT NOT NULL,
-    "target_type" TEXT,
-    "target_id" TEXT,
-    "metadata" JSONB,
-    "created_at" TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
-
-    CONSTRAINT "audit_logs_pkey" PRIMARY KEY ("id")
-);
-
--- CreateIndex
-CREATE INDEX "audit_logs_workspace_id_created_at_idx" ON "audit_logs"("workspace_id", "created_at" DESC);
-
--- CreateIndex
-CREATE INDEX "audit_logs_workspace_id_target_type_target_id_idx" ON "audit_logs"("workspace_id", "target_type", "target_id");

package/templates/database/migrations/20260713190000_drop_telemetry_records/migration.sql

@@ -1,25 +0,0 @@
--- Drop telemetry_records — the model moves to apps-paid/license-issuer's own
--- schema (apps-paid/license-issuer/prisma/schema.prisma).
---
--- license-issuer was always the table's sole writer (POST /telemetry, via its
--- own DATABASE_URL connection, independent of the product database) and
--- nothing in the product schema ever read it — so it was a vendor-owned
--- concern living in the wrong schema. Relocating it de-leaks vendor
--- seat-metering out of the product schema and the create-ailk scaffold: every
--- OSS/customer database was carrying a dead telemetry_records table that only
--- this one vendor service ever touched.
---
--- Zero data pre-launch: the product database has never had a row in this
--- table (license-issuer writes to its own vendor database, not this one), so
--- this drop is a no-op read but formally forward-only per this repo's
--- migration discipline (history is never rewritten — see the
--- 20260713143320_reanchor_site_config_to_workspace migration for the
--- established drop-and-recreate pattern this mirrors).
---
--- Rollback: not reversible via a down-migration — the table structure would
--- need to be re-created via a fresh CreateTable migration (see the original
--- 20260518000000_add_telemetry_records migration for the exact shape, still
--- retained in history). No data loss risk: zero rows ever existed here.
-
--- DropTable
-DROP TABLE "telemetry_records";

package/templates/database/migrations/20260713192000_add_uuidv7_function/migration.sql

@@ -1,49 +0,0 @@
--- VETTED pure-SQL UUIDv7 generator — staged in-tree input for the prefixed-UUID
--- id migration (docs/internal/cloud-prompts/prefixed-uuid-migration-cloud-prompt.md,
--- rule c). Use this VERBATIM in the first migration; do NOT fetch one (the cloud
--- run is egress-blocked) and do NOT re-derive the bit math.
---
--- Source: Kyle Hubert's community-standard implementation
---   (https://gist.github.com/kjmph/5bd772b2c2df145aa645b837da7eca74) — the de-facto
---   pre-Postgres-18 pure-SQL UUIDv7, widely adopted and RFC-9562-validator-passing.
---   Reproduced here as an in-tree input; the run's property tests are the gate.
---
--- How it is correct (RFC 9562 §5.7 layout — 48-bit ms timestamp · ver=7 · rand):
---   1. gen_random_uuid() gives a v4 uuid (random bits + a correct variant field in
---      byte 8, which we LEAVE untouched — so the variant `10xx` is inherited, valid).
---   2. overlay(... placing <6 bytes of big-endian Unix-ms> from 1 for 6) replaces
---      bytes 1..6 with the millisecond timestamp (the time-ordered prefix → index
---      locality).
---   3. The two set_bit calls turn the version nibble from v4 (0100) into v7 (0111):
---      Postgres bytea set_bit numbers bits LSB-first within each byte, so byte 6's
---      high (version) nibble is bits 55..52; the v4 base already has bit 54 set
---      (0100 = 4); setting bits 52 and 53 yields bits 54|53|52 = 0111 = 7.
---
--- Property tests the run MUST run against it (rule c / verification):
---   * version nibble == 7  (the 13th hex char of every generated id is '7')
---   * RFC-4122 variant     (the 17th hex char is one of 8,9,a,b)
---   * non-decreasing across a millisecond boundary (two ids minted >1ms apart sort
---     in mint order — the time-ordered guarantee; NOT strict within-ms monotonicity,
---     which this method does not claim and we do not need)
--- If any property test fails, that is a STAGING bug to surface to Sam — not a signal
--- to hand-rewrite the bit math.
-
-create or replace function uuidv7() returns uuid
-as $$
-begin
-  return encode(
-    set_bit(
-      set_bit(
-        overlay(
-          uuid_send(gen_random_uuid())
-          placing substring(int8send(floor(extract(epoch from clock_timestamp()) * 1000)::bigint) from 3)
-          from 1 for 6
-        ),
-        52, 1
-      ),
-      53, 1
-    ),
-    'hex'
-  )::uuid;
-end
-$$ language plpgsql volatile;

package/templates/database/migrations/20260713192429_prefixed_uuid_entity_ids/migration.sql

@@ -1,197 +0,0 @@
--- Prefixed-UUIDv7 entity ids (ADR-0031).
---
--- Every generated primary key becomes `<prefix>_<uuidv7>`, minted IN THE
--- DATABASE by the uuidv7() function shipped in the previous migration
--- (20260713192000_add_uuidv7_function) and format-enforced by a CHECK
--- constraint. Three changes per primary key, in order:
---
---   1. COLLATE "C"    — byte-ordering for the ASCII id (correct + faster
---                       than libc locale collation on a managed host).
---   2. SET DEFAULT    — ('<prefix>_' || uuidv7()::text); covers EVERY insert
---                       path (nested creates, upserts, raw SQL, seeds,
---                       Better Auth with generateId:false).
---   3. CHECK          — id ~ '^<prefix>_<v7-uuid>$'; the mechanical tier —
---                       a malformed id cannot exist, whatever the caller.
---
--- Relation-free scope/id reference columns (the cross-namespace stable-id
--- refs ADR-0009 leaves without FKs, e.g. workspace_id on config/content
--- tables) get the same COLLATE "C" + CHECK. The CHECK regex admits the
--- reserved sentinel range (00000000-0000-7000-8000-…, database/tenancy.ts).
--- CHECK regexes are kept in sync with @working-theory/ids by
--- packages/ids/src/__tests__/migration-sync.test.ts.
-
--- ── Primary keys (27 — the full ADR-0031 rule-3 registry) ──
-
--- users: user_
-ALTER TABLE "users" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "users" ALTER COLUMN "id" SET DEFAULT ('user_'::text || (uuidv7())::text);
-ALTER TABLE "users" ADD CONSTRAINT "users_id_format" CHECK ("id" ~ '^user_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- organizations: org_
-ALTER TABLE "organizations" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "organizations" ALTER COLUMN "id" SET DEFAULT ('org_'::text || (uuidv7())::text);
-ALTER TABLE "organizations" ADD CONSTRAINT "organizations_id_format" CHECK ("id" ~ '^org_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- workspaces: wksp_
-ALTER TABLE "workspaces" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "workspaces" ALTER COLUMN "id" SET DEFAULT ('wksp_'::text || (uuidv7())::text);
-ALTER TABLE "workspaces" ADD CONSTRAINT "workspaces_id_format" CHECK ("id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- memberships: member_
-ALTER TABLE "memberships" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "memberships" ALTER COLUMN "id" SET DEFAULT ('member_'::text || (uuidv7())::text);
-ALTER TABLE "memberships" ADD CONSTRAINT "memberships_id_format" CHECK ("id" ~ '^member_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- invitations: invite_
-ALTER TABLE "invitations" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "invitations" ALTER COLUMN "id" SET DEFAULT ('invite_'::text || (uuidv7())::text);
-ALTER TABLE "invitations" ADD CONSTRAINT "invitations_id_format" CHECK ("id" ~ '^invite_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- sessions: sess_
-ALTER TABLE "sessions" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "sessions" ALTER COLUMN "id" SET DEFAULT ('sess_'::text || (uuidv7())::text);
-ALTER TABLE "sessions" ADD CONSTRAINT "sessions_id_format" CHECK ("id" ~ '^sess_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- accounts: acct_
-ALTER TABLE "accounts" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "accounts" ALTER COLUMN "id" SET DEFAULT ('acct_'::text || (uuidv7())::text);
-ALTER TABLE "accounts" ADD CONSTRAINT "accounts_id_format" CHECK ("id" ~ '^acct_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- verifications: verify_
-ALTER TABLE "verifications" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "verifications" ALTER COLUMN "id" SET DEFAULT ('verify_'::text || (uuidv7())::text);
-ALTER TABLE "verifications" ADD CONSTRAINT "verifications_id_format" CHECK ("id" ~ '^verify_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- api_tokens: apitok_
-ALTER TABLE "api_tokens" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "api_tokens" ALTER COLUMN "id" SET DEFAULT ('apitok_'::text || (uuidv7())::text);
-ALTER TABLE "api_tokens" ADD CONSTRAINT "api_tokens_id_format" CHECK ("id" ~ '^apitok_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- refresh_tokens: reftok_
-ALTER TABLE "refresh_tokens" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "refresh_tokens" ALTER COLUMN "id" SET DEFAULT ('reftok_'::text || (uuidv7())::text);
-ALTER TABLE "refresh_tokens" ADD CONSTRAINT "refresh_tokens_id_format" CHECK ("id" ~ '^reftok_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- oauth_clients: oauthc_
-ALTER TABLE "oauth_clients" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "oauth_clients" ALTER COLUMN "id" SET DEFAULT ('oauthc_'::text || (uuidv7())::text);
-ALTER TABLE "oauth_clients" ADD CONSTRAINT "oauth_clients_id_format" CHECK ("id" ~ '^oauthc_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- oauth_authorizations: oautha_
-ALTER TABLE "oauth_authorizations" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "oauth_authorizations" ALTER COLUMN "id" SET DEFAULT ('oautha_'::text || (uuidv7())::text);
-ALTER TABLE "oauth_authorizations" ADD CONSTRAINT "oauth_authorizations_id_format" CHECK ("id" ~ '^oautha_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- push_tokens: pushtok_
-ALTER TABLE "push_tokens" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "push_tokens" ALTER COLUMN "id" SET DEFAULT ('pushtok_'::text || (uuidv7())::text);
-ALTER TABLE "push_tokens" ADD CONSTRAINT "push_tokens_id_format" CHECK ("id" ~ '^pushtok_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- user_data: userd_
-ALTER TABLE "user_data" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "user_data" ALTER COLUMN "id" SET DEFAULT ('userd_'::text || (uuidv7())::text);
-ALTER TABLE "user_data" ADD CONSTRAINT "user_data_id_format" CHECK ("id" ~ '^userd_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- site_settings: siteset_
-ALTER TABLE "site_settings" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "site_settings" ALTER COLUMN "id" SET DEFAULT ('siteset_'::text || (uuidv7())::text);
-ALTER TABLE "site_settings" ADD CONSTRAINT "site_settings_id_format" CHECK ("id" ~ '^siteset_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- workspace_themes: theme_
-ALTER TABLE "workspace_themes" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "workspace_themes" ALTER COLUMN "id" SET DEFAULT ('theme_'::text || (uuidv7())::text);
-ALTER TABLE "workspace_themes" ADD CONSTRAINT "workspace_themes_id_format" CHECK ("id" ~ '^theme_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- workspace_site_identities: siteid_
-ALTER TABLE "workspace_site_identities" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "workspace_site_identities" ALTER COLUMN "id" SET DEFAULT ('siteid_'::text || (uuidv7())::text);
-ALTER TABLE "workspace_site_identities" ADD CONSTRAINT "workspace_site_identities_id_format" CHECK ("id" ~ '^siteid_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- workspace_seos: seo_
-ALTER TABLE "workspace_seos" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "workspace_seos" ALTER COLUMN "id" SET DEFAULT ('seo_'::text || (uuidv7())::text);
-ALTER TABLE "workspace_seos" ADD CONSTRAINT "workspace_seos_id_format" CHECK ("id" ~ '^seo_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- agent_sessions: agsess_
-ALTER TABLE "agent_sessions" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "agent_sessions" ALTER COLUMN "id" SET DEFAULT ('agsess_'::text || (uuidv7())::text);
-ALTER TABLE "agent_sessions" ADD CONSTRAINT "agent_sessions_id_format" CHECK ("id" ~ '^agsess_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- conversation_events: convev_
-ALTER TABLE "conversation_events" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "conversation_events" ALTER COLUMN "id" SET DEFAULT ('convev_'::text || (uuidv7())::text);
-ALTER TABLE "conversation_events" ADD CONSTRAINT "conversation_events_id_format" CHECK ("id" ~ '^convev_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- session_read_receipts: receipt_
-ALTER TABLE "session_read_receipts" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "session_read_receipts" ALTER COLUMN "id" SET DEFAULT ('receipt_'::text || (uuidv7())::text);
-ALTER TABLE "session_read_receipts" ADD CONSTRAINT "session_read_receipts_id_format" CHECK ("id" ~ '^receipt_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- artifacts: artif_
-ALTER TABLE "artifacts" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "artifacts" ALTER COLUMN "id" SET DEFAULT ('artif_'::text || (uuidv7())::text);
-ALTER TABLE "artifacts" ADD CONSTRAINT "artifacts_id_format" CHECK ("id" ~ '^artif_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- artifact_versions: artiv_
-ALTER TABLE "artifact_versions" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "artifact_versions" ALTER COLUMN "id" SET DEFAULT ('artiv_'::text || (uuidv7())::text);
-ALTER TABLE "artifact_versions" ADD CONSTRAINT "artifact_versions_id_format" CHECK ("id" ~ '^artiv_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- leads: lead_
-ALTER TABLE "leads" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "leads" ALTER COLUMN "id" SET DEFAULT ('lead_'::text || (uuidv7())::text);
-ALTER TABLE "leads" ADD CONSTRAINT "leads_id_format" CHECK ("id" ~ '^lead_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- subscribers: subscr_
-ALTER TABLE "subscribers" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "subscribers" ALTER COLUMN "id" SET DEFAULT ('subscr_'::text || (uuidv7())::text);
-ALTER TABLE "subscribers" ADD CONSTRAINT "subscribers_id_format" CHECK ("id" ~ '^subscr_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- callbacks: callbk_
-ALTER TABLE "callbacks" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "callbacks" ALTER COLUMN "id" SET DEFAULT ('callbk_'::text || (uuidv7())::text);
-ALTER TABLE "callbacks" ADD CONSTRAINT "callbacks_id_format" CHECK ("id" ~ '^callbk_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- audit_logs: audit_
-ALTER TABLE "audit_logs" ALTER COLUMN "id" TYPE text COLLATE "C";
-ALTER TABLE "audit_logs" ALTER COLUMN "id" SET DEFAULT ('audit_'::text || (uuidv7())::text);
-ALTER TABLE "audit_logs" ADD CONSTRAINT "audit_logs_id_format" CHECK ("id" ~ '^audit_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
--- ── Relation-free scope/id reference columns (12) ──
--- NULL passes a CHECK (three-valued logic), so nullable columns need no IS NULL guard.
-
-ALTER TABLE "sessions" ALTER COLUMN "active_organization_id" TYPE text COLLATE "C";
-ALTER TABLE "sessions" ADD CONSTRAINT "sessions_active_organization_id_format" CHECK ("active_organization_id" ~ '^org_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "sessions" ALTER COLUMN "active_workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "sessions" ADD CONSTRAINT "sessions_active_workspace_id_format" CHECK ("active_workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "workspace_themes" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "workspace_themes" ADD CONSTRAINT "workspace_themes_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "workspace_site_identities" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "workspace_site_identities" ADD CONSTRAINT "workspace_site_identities_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "workspace_seos" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "workspace_seos" ADD CONSTRAINT "workspace_seos_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "audit_logs" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "audit_logs" ADD CONSTRAINT "audit_logs_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "agent_sessions" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "agent_sessions" ADD CONSTRAINT "agent_sessions_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "conversation_events" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "conversation_events" ADD CONSTRAINT "conversation_events_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "session_read_receipts" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "session_read_receipts" ADD CONSTRAINT "session_read_receipts_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "session_read_receipts" ALTER COLUMN "user_id" TYPE text COLLATE "C";
-ALTER TABLE "session_read_receipts" ADD CONSTRAINT "session_read_receipts_user_id_format" CHECK ("user_id" ~ '^user_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "artifacts" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "artifacts" ADD CONSTRAINT "artifacts_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');
-
-ALTER TABLE "artifact_versions" ALTER COLUMN "workspace_id" TYPE text COLLATE "C";
-ALTER TABLE "artifact_versions" ADD CONSTRAINT "artifact_versions_workspace_id_format" CHECK ("workspace_id" ~ '^wksp_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$');

package/templates/database/migrations/20260713200000_add_org_billing/migration.sql

@@ -1,32 +0,0 @@
--- Add Organization billing identity + tier/seat projection (#3601)
---
--- Org-scoped billing for the multi-tenant module: the Organization becomes the
--- billing entity (mirroring the users billing shape added in
--- 20260515000000_add_user_billing_fields). The Stripe webhook links
--- billing_provider/billing_customer_id keyed on checkout metadata.organizationId
--- (apps/api/src/routes/webhooks/stripe.ts); the per-org entitlement resolver
--- reads tier/seat_count (apps/api/src/services/entitlements.ts).
---
--- Forward-additive ONLY: every column is nullable or DEFAULT-ed, so existing
--- organizations rows need no backfill. Single-tenant deployments keep
--- User-scoped billing untouched.
---
--- Rollback: drop the index then the five columns.
---   DROP INDEX "organizations_billing_provider_billing_customer_id_key";
---   ALTER TABLE "organizations" DROP COLUMN "seat_count";
---   ALTER TABLE "organizations" DROP COLUMN "has_care_plan";
---   ALTER TABLE "organizations" DROP COLUMN "tier";
---   ALTER TABLE "organizations" DROP COLUMN "billing_customer_id";
---   ALTER TABLE "organizations" DROP COLUMN "billing_provider";
-
--- AlterTable
-ALTER TABLE "organizations" ADD COLUMN "billing_provider" TEXT,
-                            ADD COLUMN "billing_customer_id" TEXT,
-                            ADD COLUMN "tier" TEXT NOT NULL DEFAULT 'free',
-                            ADD COLUMN "has_care_plan" BOOLEAN NOT NULL DEFAULT false,
-                            ADD COLUMN "seat_count" INTEGER NOT NULL DEFAULT 1;
-
--- CreateIndex
--- Composite unique allows (NULL, NULL) for un-billed orgs (SQL NULL ≠ NULL).
-CREATE UNIQUE INDEX "organizations_billing_provider_billing_customer_id_key"
-  ON "organizations"("billing_provider", "billing_customer_id");

package/templates/database/migrations/20260714000000_add_lead_promotion_fields/migration.sql

@@ -1,22 +0,0 @@
--- Add Lead → user promotion fields (#3586)
---
--- Reconciles an anonymous inbox.Lead with an auth.User once the user's email
--- is verified (spec D2) and the lead's siteId resolves to one of that user's
--- own workspaces (tenant-safety, spec D3). apps/api/src/services/lead-promotion.ts
--- is the sole writer. Plain scalars — no cross-namespace FK into auth.User
--- (ADR 0009 invariant #1); the join is stable-id matching in the service.
---
--- Forward-additive ONLY: both columns are nullable, no backfill needed. The
--- email index supports the promotion match (email + un-promoted leads).
---
--- Rollback:
---   DROP INDEX "leads_email_idx";
---   ALTER TABLE "leads" DROP COLUMN "promoted_at";
---   ALTER TABLE "leads" DROP COLUMN "promoted_user_id";
-
--- AlterTable
-ALTER TABLE "leads" ADD COLUMN     "promoted_user_id" TEXT,
-ADD COLUMN     "promoted_at" TIMESTAMP(3);
-
--- CreateIndex
-CREATE INDEX "leads_email_idx" ON "leads"("email");