limn-review 0.1.123

package/dist/db/migrations/0054_automation_vendor_kinds.sql

@@ -0,0 +1,514 @@
+-- Brand the automations that were stored as `in_house` — the bucket labelled "In-house AI".
+--
+-- WHY THIS IS NEEDED AT ALL, and why it is the same shape as `0053`. The classifier's step 2
+-- fires on `githubType === 'Bot'` and assigns `fp?.tool ?? 'in_house'`, and until now there was
+-- no step between it and the AI-reviewer login check. So EVERY non-reviewer integration — every
+-- quality gate, dependency bot, code agent, release and housekeeping automation — was stored as
+-- "In-house AI": 25 of 37 such rows on the dev corpus, holding sonarqubecloud, dependabot[bot],
+-- github-actions[bot], gitguardian, socket-security, google-cla and jit-ci. They all rendered
+-- with the same grey chip and the same wrong name, on the one screen that exists to classify them.
+--
+-- The stored `kind` wins over any derivation on read, so widening the vocabulary in code alone
+-- would only ever reach an install nobody had opened the Bots tab on.
+--
+-- ── THE THREE CONDITIONS ARE EACH LOAD-BEARING ──────────────────────────────────────────────
+--
+--   `identity_source <> 'manual'`  — a vendor a HUMAN named is never re-derived. Identity is
+--                                    owned by `identity_source`, judgement by `source`; this
+--                                    migration touches only the identity half, so a manual
+--                                    "not a bot" verdict elsewhere on the row is unaffected.
+--   `kind IN ('in_house','vendor')` — only the UNBRANDED kinds are upgraded. A row already
+--                                     carrying a real brand is left alone even if the login
+--                                     vocabulary would now claim it, because that brand came
+--                                     from a stronger signal (a vendor-login or fingerprint hit)
+--                                     and silently overwriting it is how a correction gets lost.
+--   `label = NULL`                  — the label is a CACHE of the kind's display name, and the
+--                                     old rows hold the literal "In-house AI" or the bare login.
+--                                     Leaving it would show "In-house AI" beside a SonarQube
+--                                     chip. NULL means "use the brand name", which is exactly
+--                                     what the reader wants and what `label` is documented to do.
+--
+-- `[bot]`-suffix stripping is the same rule as 0053: `dependabot` and `dependabot[bot]` are
+-- separate `users` rows with different node ids, and covering one spelling splits one actor.
+--
+-- ⚠ IT COVERS THE AI-REVIEW VENDORS TOO, not only the new families. Found while checking the
+-- result on a live database: `deepsource-io` and `github-code-quality` were also sitting at
+-- `in_house`, because their rows were written before those logins joined `REVIEW_BOTS`. The
+-- staleness is identical and so is the fix — the stored kind wins on read, so a login joining a
+-- vocabulary never reaches an actor that has already been classified.
+UPDATE `workspace_reviewers`
+SET `kind` = 'allcontributors', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('allcontributors')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'allstar', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('allstar')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'backport', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('backport', 'lumberbot-app', 'meeseeksdev')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'baz', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('baz-reviewer')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'bito', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('bito-code-review')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'bulldozer', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('bulldozer')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'changesets', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('changeset-bot', 'changesets')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'cla_assistant', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('cla-assistant', 'cla-bot', 'claassistant')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'codacy', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('codacy-bot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'codeclimate', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('codeclimate')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'codecov', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('codecov')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'codefactor', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('codefactor-io')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'codegen', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('codegen-sh')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'coderabbit', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('coderabbitai')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'codesandbox', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('codesandbox-ci')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'codex', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('chatgpt-codex-connector')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'copilot', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('copilot-pull-request-reviewer')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'coveralls', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('coveralls')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'crowdin', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('crowdin-bot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'cursor', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('cursor')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'dco', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('dco')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'deepsource', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('deepsource-io', 'deepsourcebot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'deepsource_autofix', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('deepsource-autofix')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'dependabot', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('dependabot', 'dependabot-preview')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'depfu', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('depfu')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'devin', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('devin-ai-integration')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'ellipsis', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('ellipsis-dev')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'entelligence', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('entelligence-ai-pr-reviews')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'gitguardian', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('gitguardian')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'github_actions', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('github-actions')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'github_advanced_security', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('github-advanced-security')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'github_code_quality', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('github-code-quality')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'gitpod', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('gitpod-io')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'google_cla', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('google-cla', 'googlebot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'graphite', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('graphite-app')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'greenkeeper', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('greenkeeper')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'greptile', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('greptile-apps')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'hound', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('houndci-bot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'imgbot', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('imgbot', 'imgbotapp')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'jit', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('jit-ci')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'kodiak', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('kodiak', 'kodiakhq')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'korbit', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('korbit-ai')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'lock_bot', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('lock')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'mergify', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('mergify')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'meta_cla', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('facebook-github-bot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'mintlify', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('mintlify')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'netlify', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('netlify')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'pre_commit_ci', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('pre-commit-ci')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'pyup', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('pyup-bot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'qodo', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('codiumai-pr-agent-free', 'qodo-ai', 'qodo-merge', 'qodo-merge-for-open-source', 'qodo-merge-pro')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'release_drafter', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('release-drafter')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'release_please', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('autorelease', 'release-please', 'releaser')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'renovate', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('renovate', 'renovate-bot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'restyled', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('restyled-io')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'semantic_pr', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('semantic-pull-request')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'semantic_release', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('semantic-release', 'semantic-release-bot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'semgrep', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('semgrep-app')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'sizebot', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('diffray-bot', 'react-sizebot', 'sizebot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'snyk', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('snyk-bot')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'socket', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('socket-security')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'sonarqube', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('sonarcloud', 'sonarqubecloud')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'sourcery', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('sourcery-ai')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'stale_bot', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('stale')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'sweep', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('sweep-ai')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'transifex', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('transifex-integration')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'trunk', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('trunk-io')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'vercel', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('vercel')
+  );--> statement-breakpoint
+UPDATE `workspace_reviewers`
+SET `kind` = 'welcome_bot', `label` = NULL
+WHERE `identity_source` <> 'manual'
+  AND `kind` IN ('in_house', 'vendor')
+  AND `author_user_id` IN (
+    SELECT `id` FROM `users` WHERE replace(lower(`github_login`), '[bot]', '') IN ('welcome')
+  );

package/dist/db/migrations/0055_auto_merge_phase.sql

@@ -0,0 +1,12 @@
+-- Auto-merge ("merge when ready") gets a MACHINE-READABLE phase. SQLite / local mode;
+-- Postgres twin: migrations-pg/0042_auto_merge_phase.sql. One additive nullable column, no
+-- index, no backfill — an in-flight intent picks its phase up on the watcher's very next tick,
+-- and a null phase is already the "we can't characterise this wait" value.
+--
+-- WHY a column rather than parsing `last_reason`: the reason is PROSE written for a human
+-- ('waiting: conflicts with main', 'rebased onto main — waiting for checks'), and the global
+-- progress card would otherwise have to string-match a log line — which also goes NULL exactly
+-- at success. `phase` is written by the same watcher call that writes the prose, so the two can
+-- never disagree, and it describes a LIVE intent only: every terminal outcome is already a
+-- `state` member, so the watcher nulls the phase on every resolve.
+ALTER TABLE `auto_merge_requests` ADD `phase` text;

package/dist/db/migrations/0056_pr_mentions.sql

@@ -0,0 +1,22 @@
+-- "@you" on a PR — the MENTION arm of My Turn's personal-relevance rule (CORE, no AI).
+-- One row per (account, PR) where the account's viewer login is @mentioned in a PR comment, a
+-- review body or an inline review comment. PRESENCE IS THE FACT: there is no `mentioned` flag
+-- and no "scanned, found nothing" row, so every reader is a single indexed existence check.
+-- Written ONLY by the background scanner (sync/mention-scan.ts), which re-derives the full set
+-- per account per tick and diffs it against what is stored. Contract: docs/DATA-MODEL.md.
+-- The Postgres twin is migrations-pg/0043_pr_mentions.sql.
+CREATE TABLE IF NOT EXISTS `pr_mentions` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`account_id` integer NOT NULL,
+	`repo_id` integer NOT NULL,
+	`pr_id` integer NOT NULL,
+	`login` text NOT NULL,
+	`created_at` integer DEFAULT (unixepoch()) NOT NULL,
+	FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`repo_id`) REFERENCES `repos`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`pr_id`) REFERENCES `pull_requests`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS `prm_account_pr` ON `pr_mentions` (`account_id`,`pr_id`);--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS `prm_account_repo_idx` ON `pr_mentions` (`account_id`,`repo_id`);--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS `prm_pr_idx` ON `pr_mentions` (`pr_id`);

package/dist/db/migrations/0057_large_pr_threshold.sql

@@ -0,0 +1,14 @@
+-- The LARGE-PR FLAG's threshold (CORE, free, no AI). How many lines of CODE churn — additions +
+-- deletions over a PR's non-documentation, non-config files, folded by db/code-loc.ts — make a
+-- pull request "large" enough to warn about.
+--
+-- ONE PER-ACCOUNT SETTING. Not per-workspace and not per-repo: a threshold with an inheritance
+-- chain would need a resolver, and "which grain am I reading?" is the question this app spent a
+-- migration pair (0044/0045) removing from the reviewer object.
+--
+-- NULLABLE with NO default and NO backfill: NULL means "the user has never expressed an opinion",
+-- and the reader resolves it to the 1,500-line product default. Two states, so a future change to
+-- the default reaches every account that never overrode it — which a backfilled 1500 would freeze.
+-- Written only by POST /api/me/large-pr-threshold, which validates a positive integer or null.
+-- The Postgres twin is migrations-pg/0044_large_pr_threshold.sql.
+ALTER TABLE `accounts` ADD `large_pr_code_loc_threshold` integer;

package/dist/db/migrations/0058_pending_mute.sql

@@ -0,0 +1,53 @@
+-- THE PENDING MUTE (CORE, free, no AI). "Stop these Pending items claiming my turn."
+--
+-- WHAT A MUTE DOES, AND WHAT IT DELIBERATELY DOES NOT DO. A muted repo's "your turn"-shaped rows
+-- are downgraded to `relevance: 'none'` (hence `personal: false`) inside `getMyTurn` — the ONE
+-- place `personal` is folded from `relevance`. From that single write: the Pending card relabels
+-- from "Your turn"/"In your repos" to the neutral "Review or reply", the browser notification
+-- stops firing, the welcome-back banner / workspace badges / "N need your attention" line stop
+-- counting it, and it moves into the broad "review or reply" population. The row itself, the
+-- board's membership and the broad `myTurn` count are UNCHANGED. Muting routes work; it never
+-- deletes it.
+--
+-- ⚠ THIS IS NOT THE `repos.inbox_watch` AXIS THAT MIGRATION 0046 DROPPED, and the next reader
+-- will assume it is. `inbox_watch` was a SECOND VISIBILITY SCOPE sitting on top of "is this repo
+-- added": it decided whether a repo's work appeared at all, which made "which of the two is this
+-- screen obeying?" a live question on every surface, and collapsing to one scope (the Workspace)
+-- is what 0044-0046 bought. NOTHING HERE CHANGES ANY SCREEN'S POPULATION. A muted repo is fully
+-- live on Feed, Timeline, Activity, Bots and the Pending board; what changes is whether its rows
+-- may CLAIM THE READER'S TURN and interrupt them. Membership is still the only visibility axis.
+--
+-- ⚠ TWO INDEPENDENT FACTS, OR-ed — NOT AN INHERITANCE CHAIN:
+--
+--       muted(repo)  ==  its workspace's `workspaces.pending_muted`  OR  a `pending_muted_repos` row
+--
+-- Workspace-grain alone does not answer the ask (one noisy repo in a useful workspace); repo-grain
+-- alone makes silencing a 20-repo workspace twenty clicks. `null`-means-inherit is a named bug
+-- class in this codebase (`workspace_reviewers.monthly_cents`, the Slack target, the sprint
+-- cadence) — it needs a resolver and "which grain am I reading?" then has to be answered at every
+-- call site. There is no resolver: there is one union, computed once in db/pending-mute.ts, and
+-- clearing either half never reveals or overwrites the other.
+--
+-- ⚠ `pending_muted_repos` HAS NO `workspace_id`, DELIBERATELY. A repo belongs to EXACTLY ONE
+-- workspace (`workspace_repos`, UNIQUE (account_id, repo_id)); copying that onto this row would
+-- give the account two answers to "which workspace is this repo in". The consequence is intended:
+-- a repo moved between workspaces carries its own mute with it.
+--
+-- ⚠ IT IS NOT THE ORPHANED `bot_mute_rules` TABLE (migration 0029) EITHER. That backed the removed
+-- Pierre-only "hide" mute plus a standing auto-resolve cron — it HID review threads and RESOLVED
+-- them on a timer. This mutes nothing and resolves nothing; it changes one advisory flag.
+--
+-- PRESENCE IS THE FACT on the repo half: no `muted` boolean and no "considered, not muted" row, so
+-- every reader is one indexed existence check. The Postgres twin is
+-- migrations-pg/0045_pending_mute.sql.
+ALTER TABLE `workspaces` ADD `pending_muted` integer DEFAULT 0 NOT NULL;--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS `pending_muted_repos` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`account_id` integer NOT NULL,
+	`repo_id` integer NOT NULL,
+	`created_at` integer DEFAULT (unixepoch()) NOT NULL,
+	FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`) ON UPDATE no action ON DELETE cascade,
+	CONSTRAINT `pending_muted_repos_repo_account_fk` FOREIGN KEY (`repo_id`,`account_id`) REFERENCES `repos`(`id`,`account_id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS `pending_muted_repos_account_repo` ON `pending_muted_repos` (`account_id`,`repo_id`);

package/dist/db/migrations/0059_merge_queue_state.sql

@@ -0,0 +1,33 @@
+-- GitHub's native merge QUEUE becomes a SYNCED, STORED fact (CORE, free, no AI). Two additive
+-- nullable columns on `pull_requests`, no index and no backfill — a PR picks both up on the next
+-- walk that touches it. The Postgres twin is migrations-pg/0046_merge_queue_state.sql.
+--
+-- WHY STORE IT AT ALL, when GET /api/prs/:id/merge-options already fetches it live. GitHub's
+-- MergeStateStatus enum has NO QUEUED member (github/mutations.ts records the same fact where it
+-- explains why the queue verbs fork to GraphQL), so a PR sitting in the merge queue reports
+-- `merge_state_status = 'blocked'` — byte-identical to one held up by unmet branch protection.
+-- Every merge surface then reads "blocked" and offers a Merge button GitHub will refuse. That was
+-- survivable while the only reader was the click-gated merge control, which fetches live and pays
+-- ~3 GitHub calls for the answer. The Pending board is NOT allowed to fetch on mount — fifty cards
+-- resolving their own state is ~150 calls to paint one screen — so a card can only know a PR is
+-- queued if a column says so.
+--
+-- ⚠ NULL MEANS "NOT OBSERVED", NOT "NOT QUEUED", and that is why neither column takes a DEFAULT.
+-- A DEFAULT 0 here would assert about every already-synced PR in the database that GitHub had told
+-- us it is not in the queue, which it never did — and the merge surfaces would then render that
+-- fabrication as fact until the next walk. `false` is a positive statement from GitHub; null is the
+-- absence of one. sync/upsert.ts owns the three-state write (absent ⇒ omit the column, false/null ⇒
+-- clear it), and the two write routes in api/routes/prs.ts stamp their own result.
+--
+-- WHAT IS DELIBERATELY NOT HERE: the entry's `position` and `estimatedTimeToMerge`. Both are
+-- genuinely volatile — a position is wrong the moment it is written, because it changes every time
+-- another PR in the queue lands — and nothing but the merge control renders either. They stay
+-- live-only in merge-options. Membership and entry state are the halves that are stable enough to
+-- store and useless unless stored.
+ALTER TABLE `pull_requests` ADD `in_merge_queue` integer;--> statement-breakpoint
+-- GitHub's MergeQueueEntryState, lowercased like every other stored enum on this table
+-- (awaiting_checks | locked | mergeable | queued | unmergeable). `unmergeable` is the value that
+-- earns the column: GitHub EJECTS an entry whose checks failed, so without it a PR silently
+-- disappears from the queue and the reader is told nothing at all. Drizzle's `enum:` is a
+-- TYPE-level constraint only, so there is no CHECK to add here.
+ALTER TABLE `pull_requests` ADD `merge_queue_entry_state` text;