factory-factory 0.4.1 → 0.4.2

package/prisma/migrations/20260726181500_split_workspace_pr/migration.sql

@@ -0,0 +1,142 @@
+-- Split the PR cache off Workspace into its own 1:1 table.
+--
+-- Every column moved here is a cache of GitHub state or a cursor into it, so a
+-- lossy migration would cost one refresh rather than real data -- but the
+-- discovery backoff and the review-comment cursor would replay work, so the
+-- backfill below copies all thirteen.
+--
+-- `prUpdatedAt` becomes `syncedAt`: every caller wrote its own observation time
+-- into it, never GitHub's PR `updated_at`.
+
+-- CreateTable
+CREATE TABLE "WorkspacePR" (
+    "workspaceId" TEXT NOT NULL PRIMARY KEY,
+    "url" TEXT,
+    "number" INTEGER,
+    "state" TEXT NOT NULL DEFAULT 'NONE',
+    "reviewState" TEXT,
+    "ciStatus" TEXT NOT NULL DEFAULT 'UNKNOWN',
+    "syncedAt" DATETIME,
+    "discoveryLastCheckedAt" DATETIME,
+    "discoveryRetryCount" INTEGER NOT NULL DEFAULT 0,
+    "discoveryNextCheckAt" DATETIME,
+    "ciFailedAt" DATETIME,
+    "ciLastNotifiedAt" DATETIME,
+    "reviewLastCheckedAt" DATETIME,
+    "reviewLastCommentId" TEXT,
+    CONSTRAINT "WorkspacePR_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- Backfill one row per existing workspace before the columns go away. Every
+-- workspace gets a row, including those with no PR, because PR discovery claims
+-- its backoff on this row before any PR exists.
+INSERT INTO "WorkspacePR" ("workspaceId", "url", "number", "state", "reviewState", "ciStatus", "syncedAt", "discoveryLastCheckedAt", "discoveryRetryCount", "discoveryNextCheckAt", "ciFailedAt", "ciLastNotifiedAt", "reviewLastCheckedAt", "reviewLastCommentId")
+SELECT "id", "prUrl", "prNumber", "prState", "prReviewState", "prCiStatus", "prUpdatedAt", "prDiscoveryLastCheckedAt", "prDiscoveryRetryCount", "prDiscoveryNextCheckAt", "prCiFailedAt", "prCiLastNotifiedAt", "prReviewLastCheckedAt", "prReviewLastCommentId"
+FROM "Workspace";
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_Workspace" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "projectId" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "description" TEXT,
+    "status" TEXT NOT NULL DEFAULT 'NEW',
+    "worktreePath" TEXT,
+    "branchName" TEXT,
+    "isAutoGeneratedBranch" BOOLEAN NOT NULL DEFAULT false,
+    "creationSource" TEXT NOT NULL DEFAULT 'MANUAL',
+    "creationMetadata" JSONB,
+    "initErrorMessage" TEXT,
+    "initOutput" TEXT,
+    "initStartedAt" DATETIME,
+    "initCompletedAt" DATETIME,
+    "initScriptPid" INTEGER,
+    "initRetryCount" INTEGER NOT NULL DEFAULT 0,
+    "runScriptCommand" TEXT,
+    "runScriptPostRunCommand" TEXT,
+    "runScriptCleanupCommand" TEXT,
+    "runScriptPid" INTEGER,
+    "runScriptPort" INTEGER,
+    "runScriptStartedAt" DATETIME,
+    "runScriptStatus" TEXT NOT NULL DEFAULT 'IDLE',
+    "githubIssueNumber" INTEGER,
+    "githubIssueUrl" TEXT,
+    "linearIssueId" TEXT,
+    "linearIssueIdentifier" TEXT,
+    "linearIssueUrl" TEXT,
+    "defaultSessionProvider" TEXT NOT NULL DEFAULT 'WORKSPACE_DEFAULT',
+    "ratchetSessionProvider" TEXT NOT NULL DEFAULT 'WORKSPACE_DEFAULT',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    "mode" TEXT NOT NULL DEFAULT 'STANDARD',
+    "autoIterationStatus" TEXT,
+    "autoIterationConfig" JSONB,
+    "autoIterationProgress" JSONB,
+    "autoIterationSessionId" TEXT,
+    "periodicTaskId" TEXT,
+    "parent_workspace_id" TEXT,
+    "hasHadSessions" BOOLEAN NOT NULL DEFAULT false,
+    CONSTRAINT "Workspace_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "Workspace_periodicTaskId_fkey" FOREIGN KEY ("periodicTaskId") REFERENCES "PeriodicTask" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "Workspace_parent_workspace_id_fkey" FOREIGN KEY ("parent_workspace_id") REFERENCES "Workspace" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_Workspace" ("autoIterationConfig", "autoIterationProgress", "autoIterationSessionId", "autoIterationStatus", "branchName", "createdAt", "creationMetadata", "creationSource", "defaultSessionProvider", "description", "githubIssueNumber", "githubIssueUrl", "hasHadSessions", "id", "initCompletedAt", "initErrorMessage", "initOutput", "initRetryCount", "initScriptPid", "initStartedAt", "isAutoGeneratedBranch", "linearIssueId", "linearIssueIdentifier", "linearIssueUrl", "mode", "name", "parent_workspace_id", "periodicTaskId", "projectId", "ratchetSessionProvider", "runScriptCleanupCommand", "runScriptCommand", "runScriptPid", "runScriptPort", "runScriptPostRunCommand", "runScriptStartedAt", "runScriptStatus", "status", "updatedAt", "worktreePath") SELECT "autoIterationConfig", "autoIterationProgress", "autoIterationSessionId", "autoIterationStatus", "branchName", "createdAt", "creationMetadata", "creationSource", "defaultSessionProvider", "description", "githubIssueNumber", "githubIssueUrl", "hasHadSessions", "id", "initCompletedAt", "initErrorMessage", "initOutput", "initRetryCount", "initScriptPid", "initStartedAt", "isAutoGeneratedBranch", "linearIssueId", "linearIssueIdentifier", "linearIssueUrl", "mode", "name", "parent_workspace_id", "periodicTaskId", "projectId", "ratchetSessionProvider", "runScriptCleanupCommand", "runScriptCommand", "runScriptPid", "runScriptPort", "runScriptPostRunCommand", "runScriptStartedAt", "runScriptStatus", "status", "updatedAt", "worktreePath" FROM "Workspace";
+DROP TABLE "Workspace";
+ALTER TABLE "new_Workspace" RENAME TO "Workspace";
+CREATE INDEX "Workspace_projectId_idx" ON "Workspace"("projectId");
+CREATE INDEX "Workspace_status_idx" ON "Workspace"("status");
+CREATE INDEX "Workspace_parent_workspace_id_idx" ON "Workspace"("parent_workspace_id");
+CREATE INDEX "Workspace_projectId_status_idx" ON "Workspace"("projectId", "status");
+CREATE INDEX "Workspace_projectId_updatedAt_idx" ON "Workspace"("projectId", "updatedAt");
+CREATE INDEX "Workspace_projectId_createdAt_idx" ON "Workspace"("projectId", "createdAt");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+
+-- CreateIndex
+CREATE INDEX "WorkspacePR_url_discoveryNextCheckAt_idx" ON "WorkspacePR"("url", "discoveryNextCheckAt");
+
+-- CreateIndex
+CREATE INDEX "WorkspacePR_syncedAt_idx" ON "WorkspacePR"("syncedAt");
+
+-- SQLite's RedefineTables above dropped and recreated "Workspace", which drops
+-- every trigger attached to it. Recreate the depth-1 guards verbatim; any future
+-- migration that redefines this table has to do the same.
+CREATE TRIGGER enforce_workspace_depth_1
+BEFORE INSERT ON "Workspace"
+WHEN NEW."parent_workspace_id" IS NOT NULL
+BEGIN
+  -- Block self-parenting
+  SELECT RAISE(ABORT, 'A workspace cannot be its own parent')
+  WHERE NEW."id" = NEW."parent_workspace_id";
+  -- Block grandchild chains: proposed parent must not already have a parent
+  SELECT RAISE(ABORT, 'Child workspaces cannot have children (max depth 1)')
+  WHERE EXISTS (
+    SELECT 1 FROM "Workspace"
+    WHERE "id" = NEW."parent_workspace_id"
+    AND "parent_workspace_id" IS NOT NULL
+  );
+END;
+
+CREATE TRIGGER enforce_workspace_depth_1_update
+BEFORE UPDATE ON "Workspace"
+WHEN NEW."parent_workspace_id" IS NOT NULL
+BEGIN
+  -- Block self-parenting
+  SELECT RAISE(ABORT, 'A workspace cannot be its own parent')
+  WHERE NEW."id" = NEW."parent_workspace_id";
+  -- Block grandchild chains: proposed parent must not already have a parent
+  SELECT RAISE(ABORT, 'Child workspaces cannot have children (max depth 1)')
+  WHERE EXISTS (
+    SELECT 1 FROM "Workspace"
+    WHERE "id" = NEW."parent_workspace_id"
+    AND "parent_workspace_id" IS NOT NULL
+  );
+  -- Block re-parenting a workspace that already has children
+  SELECT RAISE(ABORT, 'Cannot re-parent a workspace that already has children (max depth 1)')
+  WHERE EXISTS (
+    SELECT 1 FROM "Workspace"
+    WHERE "parent_workspace_id" = NEW."id"
+  );
+END;

package/prisma/migrations/20260726200000_derive_ratchet_state/migration.sql

@@ -0,0 +1,101 @@
+-- `RatchetState` stops being stored and becomes a projection of the PR
+-- observation (see `deriveRatchetState`): `WorkspaceRatchet.state` is dropped and
+-- `WorkspacePR.hasMergeConflict` takes its place as the one observed fact the
+-- state needed that was not already cached.
+--
+-- Conflicts were never persisted as a fact -- the ratchet folded them straight
+-- into `state = 'MERGE_CONFLICT'` -- so that value is the only thing to backfill
+-- from, and it has to be read before the column goes.
+
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_WorkspacePR" (
+    "workspaceId" TEXT NOT NULL PRIMARY KEY,
+    "url" TEXT,
+    "number" INTEGER,
+    "state" TEXT NOT NULL DEFAULT 'NONE',
+    "reviewState" TEXT,
+    "ciStatus" TEXT NOT NULL DEFAULT 'UNKNOWN',
+    "hasMergeConflict" BOOLEAN NOT NULL DEFAULT false,
+    "syncedAt" DATETIME,
+    "discoveryLastCheckedAt" DATETIME,
+    "discoveryRetryCount" INTEGER NOT NULL DEFAULT 0,
+    "discoveryNextCheckAt" DATETIME,
+    "ciFailedAt" DATETIME,
+    "ciLastNotifiedAt" DATETIME,
+    "reviewLastCheckedAt" DATETIME,
+    "reviewLastCommentId" TEXT,
+    CONSTRAINT "WorkspacePR_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_WorkspacePR" ("ciFailedAt", "ciLastNotifiedAt", "ciStatus", "discoveryLastCheckedAt", "discoveryNextCheckAt", "discoveryRetryCount", "number", "reviewLastCheckedAt", "reviewLastCommentId", "reviewState", "state", "syncedAt", "url", "workspaceId") SELECT "ciFailedAt", "ciLastNotifiedAt", "ciStatus", "discoveryLastCheckedAt", "discoveryNextCheckAt", "discoveryRetryCount", "number", "reviewLastCheckedAt", "reviewLastCommentId", "reviewState", "state", "syncedAt", "url", "workspaceId" FROM "WorkspacePR";
+DROP TABLE "WorkspacePR";
+ALTER TABLE "new_WorkspacePR" RENAME TO "WorkspacePR";
+CREATE INDEX "WorkspacePR_url_discoveryNextCheckAt_idx" ON "WorkspacePR"("url", "discoveryNextCheckAt");
+CREATE INDEX "WorkspacePR_syncedAt_idx" ON "WorkspacePR"("syncedAt");
+-- Backfill: recover the conflict flag from the state that encoded it. Runs after
+-- WorkspacePR has been rebuilt with the new column and before WorkspaceRatchet
+-- loses `state`.
+--
+-- `state` is the only contemporaneous record of a conflict, and it under-reports:
+-- a failing build outranked a conflict in the derivation, so a PR with both was
+-- stored as CI_FAILED and migrates as clean.
+--
+-- That is accepted rather than patched. The dispatch snapshot key also carries a
+-- conflict (`|merge:conflict`), but it records whenever the last fixer was
+-- dispatched, not the last observation -- a conflict resolved after its dispatch
+-- leaves the suffix behind, and a later CI failure puts the row back in CI_FAILED,
+-- so even restricting the recovery to that state cannot tell a live conflict from
+-- a stale one.
+--
+-- Under-reporting costs nothing observable: while CI is failing the derivation
+-- returns CI_FAILED and never consults the flag, and the first ratchet check after
+-- CI turns green writes the true flag in the same statement that turns it green
+-- (`recordPrObservation` writes all four projection inputs together). Over-
+-- reporting would be visible -- a spurious conflict badge, and a conflict fixer
+-- dispatched against a clean PR -- so the ambiguous source is left out.
+UPDATE "WorkspacePR"
+SET "hasMergeConflict" = true
+WHERE "workspaceId" IN (
+    SELECT "workspaceId" FROM "WorkspaceRatchet" WHERE "state" = 'MERGE_CONFLICT'
+);
+
+-- The under-reported rows are handed to the ratchet first instead of guessed at.
+--
+-- CI_FAILED is the only state that could have masked a conflict, so an open PR in
+-- it migrates with an unestablished flag. Left alone, the flag would be correct
+-- once the ratchet re-observed the PR -- but the PR-sync poller writes `ciStatus`
+-- without touching `hasMergeConflict`, so if it saw green CI first the derivation
+-- would report READY for a PR GitHub still calls DIRTY, until the next ratchet
+-- check came round.
+--
+-- Nulling `lastCheckedAt` puts these rows at the front of the ratchet poll, which
+-- orders by it ascending and sorts NULLs first. That establishes the flag from a
+-- live observation on the first cycle after the migration, without this migration
+-- having to guess at a value it cannot know.
+UPDATE "WorkspaceRatchet"
+SET "lastCheckedAt" = NULL
+WHERE "state" = 'CI_FAILED'
+  AND "workspaceId" IN (
+    SELECT "workspaceId" FROM "WorkspacePR"
+    WHERE "state" IN ('OPEN', 'DRAFT', 'CHANGES_REQUESTED', 'APPROVED')
+);
+
+CREATE TABLE "new_WorkspaceRatchet" (
+    "workspaceId" TEXT NOT NULL PRIMARY KEY,
+    "enabled" BOOLEAN NOT NULL DEFAULT true,
+    "lastCheckedAt" DATETIME,
+    "activeSessionId" TEXT,
+    "dispatchSnapshotKey" TEXT,
+    "dispatchOutcome" TEXT,
+    "dispatchRetryCount" INTEGER NOT NULL DEFAULT 0,
+    CONSTRAINT "WorkspaceRatchet_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_WorkspaceRatchet" ("activeSessionId", "dispatchOutcome", "dispatchRetryCount", "dispatchSnapshotKey", "enabled", "lastCheckedAt", "workspaceId") SELECT "activeSessionId", "dispatchOutcome", "dispatchRetryCount", "dispatchSnapshotKey", "enabled", "lastCheckedAt", "workspaceId" FROM "WorkspaceRatchet";
+DROP TABLE "WorkspaceRatchet";
+ALTER TABLE "new_WorkspaceRatchet" RENAME TO "WorkspaceRatchet";
+CREATE INDEX "WorkspaceRatchet_lastCheckedAt_idx" ON "WorkspaceRatchet"("lastCheckedAt");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+

package/prisma/migrations/20260726220000_split_workspace_run_script/migration.sql

@@ -0,0 +1,131 @@
+-- Split the run-script group off Workspace into its own 1:1 table.
+--
+-- Seven columns, two concerns, one row -- see the model docblock for why they
+-- share it. Nothing here is derived, so the backfill copies all seven verbatim;
+-- unlike the ratchet and PR splits there is no misnamed column to correct, only
+-- the `runScript` prefix to drop now that the table name carries it.
+--
+-- `pid`/`port`/`startedAt` look like state a restart makes meaningless, and for
+-- the process they describe they are. They are copied anyway because a SIGKILL
+-- or crash orphans a run script -- it spawns with `detached: false`, so it
+-- normally dies with the server -- and the pid is the only handle on the orphan.
+-- Dropping these would leak one process per workspace that was running at the
+-- moment of the upgrade.
+--
+-- `status` is copied for a narrower reason: STARTING and STOPPING are cleared at
+-- the next startup by `resetStaleTransientStatuses` (it always was -- the column
+-- moving does not change that), but RUNNING, COMPLETED and FAILED are not, and
+-- they are what the kanban card and the sidebar read.
+
+CREATE TABLE "WorkspaceRunScript" (
+    "workspaceId" TEXT NOT NULL PRIMARY KEY,
+    "command" TEXT,
+    "postRunCommand" TEXT,
+    "cleanupCommand" TEXT,
+    "pid" INTEGER,
+    "port" INTEGER,
+    "startedAt" DATETIME,
+    "status" TEXT NOT NULL DEFAULT 'IDLE',
+    CONSTRAINT "WorkspaceRunScript_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- Backfill one row per existing workspace before the columns go away. Every
+-- workspace gets a row, including those that have never had a run script, so the
+-- compare-and-swap on `status` always has a row to guard.
+INSERT INTO "WorkspaceRunScript" ("workspaceId", "command", "postRunCommand", "cleanupCommand", "pid", "port", "startedAt", "status")
+SELECT "id", "runScriptCommand", "runScriptPostRunCommand", "runScriptCleanupCommand", "runScriptPid", "runScriptPort", "runScriptStartedAt", "runScriptStatus"
+FROM "Workspace";
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_Workspace" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "projectId" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "description" TEXT,
+    "status" TEXT NOT NULL DEFAULT 'NEW',
+    "worktreePath" TEXT,
+    "branchName" TEXT,
+    "isAutoGeneratedBranch" BOOLEAN NOT NULL DEFAULT false,
+    "creationSource" TEXT NOT NULL DEFAULT 'MANUAL',
+    "creationMetadata" JSONB,
+    "initErrorMessage" TEXT,
+    "initOutput" TEXT,
+    "initStartedAt" DATETIME,
+    "initCompletedAt" DATETIME,
+    "initScriptPid" INTEGER,
+    "initRetryCount" INTEGER NOT NULL DEFAULT 0,
+    "githubIssueNumber" INTEGER,
+    "githubIssueUrl" TEXT,
+    "linearIssueId" TEXT,
+    "linearIssueIdentifier" TEXT,
+    "linearIssueUrl" TEXT,
+    "defaultSessionProvider" TEXT NOT NULL DEFAULT 'WORKSPACE_DEFAULT',
+    "ratchetSessionProvider" TEXT NOT NULL DEFAULT 'WORKSPACE_DEFAULT',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    "mode" TEXT NOT NULL DEFAULT 'STANDARD',
+    "autoIterationStatus" TEXT,
+    "autoIterationConfig" JSONB,
+    "autoIterationProgress" JSONB,
+    "autoIterationSessionId" TEXT,
+    "periodicTaskId" TEXT,
+    "parent_workspace_id" TEXT,
+    "hasHadSessions" BOOLEAN NOT NULL DEFAULT false,
+    CONSTRAINT "Workspace_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "Workspace_periodicTaskId_fkey" FOREIGN KEY ("periodicTaskId") REFERENCES "PeriodicTask" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "Workspace_parent_workspace_id_fkey" FOREIGN KEY ("parent_workspace_id") REFERENCES "Workspace" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_Workspace" ("autoIterationConfig", "autoIterationProgress", "autoIterationSessionId", "autoIterationStatus", "branchName", "createdAt", "creationMetadata", "creationSource", "defaultSessionProvider", "description", "githubIssueNumber", "githubIssueUrl", "hasHadSessions", "id", "initCompletedAt", "initErrorMessage", "initOutput", "initRetryCount", "initScriptPid", "initStartedAt", "isAutoGeneratedBranch", "linearIssueId", "linearIssueIdentifier", "linearIssueUrl", "mode", "name", "parent_workspace_id", "periodicTaskId", "projectId", "ratchetSessionProvider", "status", "updatedAt", "worktreePath") SELECT "autoIterationConfig", "autoIterationProgress", "autoIterationSessionId", "autoIterationStatus", "branchName", "createdAt", "creationMetadata", "creationSource", "defaultSessionProvider", "description", "githubIssueNumber", "githubIssueUrl", "hasHadSessions", "id", "initCompletedAt", "initErrorMessage", "initOutput", "initRetryCount", "initScriptPid", "initStartedAt", "isAutoGeneratedBranch", "linearIssueId", "linearIssueIdentifier", "linearIssueUrl", "mode", "name", "parent_workspace_id", "periodicTaskId", "projectId", "ratchetSessionProvider", "status", "updatedAt", "worktreePath" FROM "Workspace";
+DROP TABLE "Workspace";
+ALTER TABLE "new_Workspace" RENAME TO "Workspace";
+CREATE INDEX "Workspace_projectId_idx" ON "Workspace"("projectId");
+CREATE INDEX "Workspace_status_idx" ON "Workspace"("status");
+CREATE INDEX "Workspace_parent_workspace_id_idx" ON "Workspace"("parent_workspace_id");
+CREATE INDEX "Workspace_projectId_status_idx" ON "Workspace"("projectId", "status");
+CREATE INDEX "Workspace_projectId_updatedAt_idx" ON "Workspace"("projectId", "updatedAt");
+CREATE INDEX "Workspace_projectId_createdAt_idx" ON "Workspace"("projectId", "createdAt");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+
+-- SQLite's RedefineTables above dropped and recreated "Workspace", which drops
+-- every trigger attached to it. Recreate the depth-1 guards verbatim; any future
+-- migration that redefines this table has to do the same.
+CREATE TRIGGER enforce_workspace_depth_1
+BEFORE INSERT ON "Workspace"
+WHEN NEW."parent_workspace_id" IS NOT NULL
+BEGIN
+  -- Block self-parenting
+  SELECT RAISE(ABORT, 'A workspace cannot be its own parent')
+  WHERE NEW."id" = NEW."parent_workspace_id";
+  -- Block grandchild chains: proposed parent must not already have a parent
+  SELECT RAISE(ABORT, 'Child workspaces cannot have children (max depth 1)')
+  WHERE EXISTS (
+    SELECT 1 FROM "Workspace"
+    WHERE "id" = NEW."parent_workspace_id"
+    AND "parent_workspace_id" IS NOT NULL
+  );
+END;
+
+CREATE TRIGGER enforce_workspace_depth_1_update
+BEFORE UPDATE ON "Workspace"
+WHEN NEW."parent_workspace_id" IS NOT NULL
+BEGIN
+  -- Block self-parenting
+  SELECT RAISE(ABORT, 'A workspace cannot be its own parent')
+  WHERE NEW."id" = NEW."parent_workspace_id";
+  -- Block grandchild chains: proposed parent must not already have a parent
+  SELECT RAISE(ABORT, 'Child workspaces cannot have children (max depth 1)')
+  WHERE EXISTS (
+    SELECT 1 FROM "Workspace"
+    WHERE "id" = NEW."parent_workspace_id"
+    AND "parent_workspace_id" IS NOT NULL
+  );
+  -- Block re-parenting a workspace that already has children
+  SELECT RAISE(ABORT, 'Cannot re-parent a workspace that already has children (max depth 1)')
+  WHERE EXISTS (
+    SELECT 1 FROM "Workspace"
+    WHERE "parent_workspace_id" = NEW."id"
+  );
+END;

package/prisma/migrations/20260726230000_split_workspace_auto_iteration/migration.sql

@@ -0,0 +1,123 @@
+-- Split the auto-iteration group off Workspace into its own 1:1 table.
+--
+-- The last of the four concerns the model carried. Five columns, one concern,
+-- copied verbatim -- there is no derived value here and no misnamed column to
+-- correct, only the `autoIteration` prefix to drop now that the table name
+-- carries it.
+--
+-- `mode` moves with them. It reads like a general workspace attribute, but every
+-- consumer is an auto-iteration consumer, so it is this group's discriminant --
+-- the same call the ratchet split made for `ratchetEnabled`. Its NOT NULL
+-- default carries over, so a workspace that never used the feature backfills to
+-- exactly what it had: STANDARD and four nulls.
+--
+-- `status` is copied rather than reset even though `resetStaleAutoIterationStatuses`
+-- clears RUNNING at the next startup: COMPLETED and FAILED are results the user
+-- has not seen yet, and PAUSED is a state the user chose.
+
+CREATE TABLE "WorkspaceAutoIteration" (
+    "workspaceId" TEXT NOT NULL PRIMARY KEY,
+    "mode" TEXT NOT NULL DEFAULT 'STANDARD',
+    "status" TEXT,
+    "config" JSONB,
+    "progress" JSONB,
+    "sessionId" TEXT,
+    CONSTRAINT "WorkspaceAutoIteration_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- Backfill one row per existing workspace before the columns go away. Every
+-- workspace gets a row, including the STANDARD ones that have never touched the
+-- feature, so the compare-and-swaps on `sessionId` and `status` always have a
+-- row to guard.
+INSERT INTO "WorkspaceAutoIteration" ("workspaceId", "mode", "status", "config", "progress", "sessionId")
+SELECT "id", "mode", "autoIterationStatus", "autoIterationConfig", "autoIterationProgress", "autoIterationSessionId"
+FROM "Workspace";
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_Workspace" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "projectId" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "description" TEXT,
+    "status" TEXT NOT NULL DEFAULT 'NEW',
+    "worktreePath" TEXT,
+    "branchName" TEXT,
+    "isAutoGeneratedBranch" BOOLEAN NOT NULL DEFAULT false,
+    "creationSource" TEXT NOT NULL DEFAULT 'MANUAL',
+    "creationMetadata" JSONB,
+    "initErrorMessage" TEXT,
+    "initOutput" TEXT,
+    "initStartedAt" DATETIME,
+    "initCompletedAt" DATETIME,
+    "initScriptPid" INTEGER,
+    "initRetryCount" INTEGER NOT NULL DEFAULT 0,
+    "githubIssueNumber" INTEGER,
+    "githubIssueUrl" TEXT,
+    "linearIssueId" TEXT,
+    "linearIssueIdentifier" TEXT,
+    "linearIssueUrl" TEXT,
+    "defaultSessionProvider" TEXT NOT NULL DEFAULT 'WORKSPACE_DEFAULT',
+    "ratchetSessionProvider" TEXT NOT NULL DEFAULT 'WORKSPACE_DEFAULT',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    "periodicTaskId" TEXT,
+    "parent_workspace_id" TEXT,
+    "hasHadSessions" BOOLEAN NOT NULL DEFAULT false,
+    CONSTRAINT "Workspace_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "Workspace_periodicTaskId_fkey" FOREIGN KEY ("periodicTaskId") REFERENCES "PeriodicTask" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "Workspace_parent_workspace_id_fkey" FOREIGN KEY ("parent_workspace_id") REFERENCES "Workspace" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_Workspace" ("branchName", "createdAt", "creationMetadata", "creationSource", "defaultSessionProvider", "description", "githubIssueNumber", "githubIssueUrl", "hasHadSessions", "id", "initCompletedAt", "initErrorMessage", "initOutput", "initRetryCount", "initScriptPid", "initStartedAt", "isAutoGeneratedBranch", "linearIssueId", "linearIssueIdentifier", "linearIssueUrl", "name", "parent_workspace_id", "periodicTaskId", "projectId", "ratchetSessionProvider", "status", "updatedAt", "worktreePath") SELECT "branchName", "createdAt", "creationMetadata", "creationSource", "defaultSessionProvider", "description", "githubIssueNumber", "githubIssueUrl", "hasHadSessions", "id", "initCompletedAt", "initErrorMessage", "initOutput", "initRetryCount", "initScriptPid", "initStartedAt", "isAutoGeneratedBranch", "linearIssueId", "linearIssueIdentifier", "linearIssueUrl", "name", "parent_workspace_id", "periodicTaskId", "projectId", "ratchetSessionProvider", "status", "updatedAt", "worktreePath" FROM "Workspace";
+DROP TABLE "Workspace";
+ALTER TABLE "new_Workspace" RENAME TO "Workspace";
+CREATE INDEX "Workspace_projectId_idx" ON "Workspace"("projectId");
+CREATE INDEX "Workspace_status_idx" ON "Workspace"("status");
+CREATE INDEX "Workspace_parent_workspace_id_idx" ON "Workspace"("parent_workspace_id");
+CREATE INDEX "Workspace_projectId_status_idx" ON "Workspace"("projectId", "status");
+CREATE INDEX "Workspace_projectId_updatedAt_idx" ON "Workspace"("projectId", "updatedAt");
+CREATE INDEX "Workspace_projectId_createdAt_idx" ON "Workspace"("projectId", "createdAt");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+
+-- SQLite's RedefineTables above dropped and recreated "Workspace", which drops
+-- every trigger attached to it. Recreate the depth-1 guards verbatim; any future
+-- migration that redefines this table has to do the same.
+CREATE TRIGGER enforce_workspace_depth_1
+BEFORE INSERT ON "Workspace"
+WHEN NEW."parent_workspace_id" IS NOT NULL
+BEGIN
+  -- Block self-parenting
+  SELECT RAISE(ABORT, 'A workspace cannot be its own parent')
+  WHERE NEW."id" = NEW."parent_workspace_id";
+  -- Block grandchild chains: proposed parent must not already have a parent
+  SELECT RAISE(ABORT, 'Child workspaces cannot have children (max depth 1)')
+  WHERE EXISTS (
+    SELECT 1 FROM "Workspace"
+    WHERE "id" = NEW."parent_workspace_id"
+    AND "parent_workspace_id" IS NOT NULL
+  );
+END;
+
+CREATE TRIGGER enforce_workspace_depth_1_update
+BEFORE UPDATE ON "Workspace"
+WHEN NEW."parent_workspace_id" IS NOT NULL
+BEGIN
+  -- Block self-parenting
+  SELECT RAISE(ABORT, 'A workspace cannot be its own parent')
+  WHERE NEW."id" = NEW."parent_workspace_id";
+  -- Block grandchild chains: proposed parent must not already have a parent
+  SELECT RAISE(ABORT, 'Child workspaces cannot have children (max depth 1)')
+  WHERE EXISTS (
+    SELECT 1 FROM "Workspace"
+    WHERE "id" = NEW."parent_workspace_id"
+    AND "parent_workspace_id" IS NOT NULL
+  );
+  -- Block re-parenting a workspace that already has children
+  SELECT RAISE(ABORT, 'Cannot re-parent a workspace that already has children (max depth 1)')
+  WHERE EXISTS (
+    SELECT 1 FROM "Workspace"
+    WHERE "parent_workspace_id" = NEW."id"
+  );
+END;